Re: sendmail vs postfix : robustness, stability vulnerabilities

2015-01-26 Thread L. D. James


On 01/23/2015 08:43 AM, Roger Goh wrote:

Q3:
Was told by our vendor that they set up 'commercial' version of 
sendmail which has a
separate interface/module GUI for whitelisting  blacklisting.  Is 
there a commercial
version of 'postfix' which we can get official (eg: supported by RHEL) 
support with

add-on user-friendly interfaces/GUI?


If anyone can post a link/url that gave comparisons of the above 2
in the areas of stability, robustness  vulnerabilites, most appreciate it

Roger
It's my experience that just because an application has a commercial 
counterpart, that doesn't necessarily make it better.  Granted in many 
cases when you pay for something you're kind of buying entitlement to 
support.  But if it's support you're looking for, I would strongly 
advise you to consider looking for an IT to give you their 
recommendation of which they will support for a fee.


I would expect for members this postfix maillist to have some bias 
toward postfix over Sendmail.  If they didn't feel it were they best, 
they would probably be using something different.


I rarely use gui for my administration chores, except for the gui 
frontends that I configure for my commandline commands.  However I did 
perform a quick Google search for Postfix and gui and found this:


http://postfixadmin.sourceforge.net/

I might explore it and so that I can give more feedback on this as well 
as some of the other hits that came up.  At a glance it does have a 
support forum, which I consider important for any application that I 
might consider a fixture in my environment.


I used Sendmail for years before I changed over to Postfix. Initially it 
appeared to be less friendly than Sendmail.  But after a short period of 
time I appeared to be easier to setup and more friendly than Sendmail.  
I had used Sendmail for about 10 years before changing to Postfix.


I don't have anything bad to say about either.

I changed to Postfix when I migrated to Ubuntu over Fedora.

-- L. James

--
L. D. James
lja...@apollo3.com
www.apollo3.com/~ljames


How to Configure forward (redirect) for specific from email address

2015-01-26 Thread L. D. James
I'm familiar how to use aliases to send email addressed to specific 
email address to a specific user.  Can someone advise me of a feature to 
reroute (send) email from specific email address to a specific user?


For instance:

From email address|To User
-
u...@test.com|user1

In the above a user with the email address of u...@test.com has sent an 
email to us...@domain.com.  We are trying to reroute specific emails 
from certain email addresses to a specific user on the machine, in this 
case, local user1 instead of local user2.


I'm sure there is better terminology for this, of which I'm sure I will 
learn by the comments from the gurus in this list.


Thanks in advance for any input.

-- L. James

--
L. D. James
lja...@apollo3.com
www.apollo3.com/~ljames


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread li...@rhsoft.net


Am 26.01.2015 um 20:06 schrieb L. D. James:

I'm familiar how to use aliases to send email addressed to specific
email address to a specific user.  Can someone advise me of a feature to
reroute (send) email from specific email address to a specific user?

For instance:

 From email address|To User
-
u...@test.com|user1


you could give that a try:

http://www.postfix.org/postconf.5.html#canonical_maps
http://www.postfix.org/postconf.5.html#canonical_classes
http://www.postfix.org/ADDRESS_REWRITING_README.html

but typically postfix only looks at the sender *or* RCPT, not both


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread Wietse Venema
L. D. James:
 I'm familiar how to use aliases to send email addressed to specific 
 email address to a specific user.  Can someone advise me of a feature to 
 reroute (send) email from specific email address to a specific user?
 
 For instance:
 
  From email address|To User
 -
 u...@test.com|user1
 
 In the above a user with the email address of u...@test.com has sent an 
 email to us...@domain.com.  We are trying to reroute specific emails 
 from certain email addresses to a specific user on the machine, in this 
 case, local user1 instead of local user2.

Delivery dependent on the combination of (sender AND recipient) is
not implemented in Postfix itself (actually, delivery based on any
combination of properties isn't implemented in Postfix itself).

With a Milter (in Perl, Python, C, or other), one could do this:

Receive envelope sender address
Receive envelope recipient address(es)
Receive end-of-message event
Add new envelope recipient(s) based on sender and recipient address(es)
Delete old envelope recipient(s)

Long ago I decided to provide interfaces for Milters, policy servers,
etc. instead of trying to build everything into Postfix itself.

Wietse


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread Viktor Dukhovni
On Mon, Jan 26, 2015 at 02:20:45PM -0500, Wietse Venema wrote:

 Delivery dependent on the combination of (sender AND recipient) is
 not implemented in Postfix itself (actually, delivery based on any
 combination of properties isn't implemented in Postfix itself).

Specifically, content filters aside, the recipient address always
determines the address class (local, ..., relay, default).  And
once the recipient is determined to be remote, there is some wiggle
room for selecting a sender dependent transport or relay.

-- 
Viktor.


E-mail Log Search Engine v0.9.18 released

2015-01-26 Thread Nicolas HAHN

Hello there,*

*I've released *version 0.9.18 of the ELSE *as a tar.gz archive on 
Sourceforge: 
https://sourceforge.net/projects/x-itools/files/X-Itools%20releases/E-mail%20Log%20Search%20Engine/ 
https://sourceforge.net/projects/x-itools/files/X-Itools%20releases/E-mail%20Log%20Search%20Engine 



As well as an updated Virtual Machine based on CentOS 7, made for demo 
purpose.


Availability of documentations for v0.9.18 is currently an ongoing 
process, but some is already available in the Sourceforge Wiki pages of 
this project, there: http://sourceforge.net/p/x-itools/wiki/ 
http://sourceforge.net/p/x-itools/wiki/Documentation%20for%20Users


For this release, the biggest feature I've tried to implement is the 
*RTAAM* engine. If I had to define it, I would give 3 definitions:

- *an E-mail flow threats detection and prevention system*, or
- *an E-mail Firewall solution*, or
- *a mix of Postfix/Anvil, Fail2ban, Firewall, Monitoring, 
Reporting*


Enjoy :)

--
Nicolas
attachment: hahnn.vcf

Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread Nicolas HAHN

I would maybe try to implement that using several postfix instances...
One to take a routing decision regarding the sender email address... 
that would send the email to the second stage postfix server if sender 
is u...@test.com...
And another one second stage to take a routing decision regarding the 
recipient email address...


Well, a kind of...

Or if I understand you well, if your goal is to send all email flow of 
u...@test.com sender systematically to the same recipient (user1), you 
probably need a routing decision taken only on the sender email address...


Regards,
Nicolas

Le 26/01/2015 20:06, L. D. James a écrit :
I'm familiar how to use aliases to send email addressed to specific 
email address to a specific user.  Can someone advise me of a feature 
to reroute (send) email from specific email address to a specific user?


For instance:

From email address|To User
-
u...@test.com|user1

In the above a user with the email address of u...@test.com has sent 
an email to us...@domain.com.  We are trying to reroute specific 
emails from certain email addresses to a specific user on the machine, 
in this case, local user1 instead of local user2.


I'm sure there is better terminology for this, of which I'm sure I 
will learn by the comments from the gurus in this list.


Thanks in advance for any input.

-- L. James





Re: What is good control for encryption in and out of Postscreen internal SMTP server?

2015-01-26 Thread Viktor Dukhovni
On Mon, Jan 26, 2015 at 09:35:11PM +, srach wrote:

 In from Internet
  |
 IP=1.2.3.4
 Postscreen
 |
 IP=loopback-only
 Postscreen Internal SMTP server
 [X] |
 -- 'in' IP=127.0.0.1:8001, out' IP=1.2.3.4
 Relay SMTP server to some different clients
 
 What is the good setting for controling the cipher for the step I mark with 
 [X] there?? Now it is 127.0.0.1 but I may move or change it later.
 
 Is it confusing me some because of the configuration for the Postscreen
 
 When the Postscreen daemon talks to the internal SMTP server what service is 
 it using?

The postscreen(8) service does not use TCP to pass traffic.
Connections from whitelisted clients are passed via local IPC to
to the smtpd/pass service.

-- 
Viktor.


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread L. D. James

On 01/26/2015 08:15 PM, Wietse Venema wrote:

L. D. James:

All the email from the sender, I would like to have it rerouted.

That was not obvious from the description.

To redirect ALL mail from a specific sender regardless of its
recipients, you can use an access map:

/etc/postfix/main.cf:
 smtpd_whatever_restrictions =
...
check_sender_access hash:/etc/postfix/sender_redirect
...

/etc/postfix/sender_redirect:
 us...@example.com  REDIRECT us...@example.net

Wietse
Thanks for the generous support and feedback... giving me opportunity to 
clarify my intentions.  I mentioned the from and to because I thought it 
was a criterion.  I should have added that the to didn't matter.


Have a nice day, and things for a great package!

-- L. James

--
L. D. James
lja...@apollo3.com
www.apollo3.com/~ljames


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread Wietse Venema
L. D. James:
 All the email from the sender, I would like to have it rerouted.

That was not obvious from the description.

To redirect ALL mail from a specific sender regardless of its
recipients, you can use an access map:

/etc/postfix/main.cf:
smtpd_whatever_restrictions = 
...
check_sender_access hash:/etc/postfix/sender_redirect
...

/etc/postfix/sender_redirect:
us...@example.com   REDIRECT us...@example.net

Wietse


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread L. D. James

On 01/26/2015 08:15 PM, Wietse Venema wrote:

L. D. James:

All the email from the sender, I would like to have it rerouted.

That was not obvious from the description.

To redirect ALL mail from a specific sender regardless of its
recipients, you can use an access map:

/etc/postfix/main.cf:
 smtpd_whatever_restrictions =
...
check_sender_access hash:/etc/postfix/sender_redirect
...

/etc/postfix/sender_redirect:
 us...@example.com  REDIRECT us...@example.net

Wietse
Thanks again, Wietse.  Your example was extremely easy to follow and 
works like a charm... it's perfect!


-- L. James

--
L. D. James
lja...@apollo3.com
www.apollo3.com/~ljames


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread L. D. James

On 01/26/2015 04:34 PM, Nicolas HAHN wrote:

I would maybe try to implement that using several postfix instances...
One to take a routing decision regarding the sender email address... 
that would send the email to the second stage postfix server if 
sender is u...@test.com...
And another one second stage to take a routing decision regarding 
the recipient email address...


Well, a kind of...

Or if I understand you well, if your goal is to send all email flow of 
u...@test.com sender systematically to the same recipient (user1), you 
probably need a routing decision taken only on the sender email 
address...


Regards,
Nicolas

Le 26/01/2015 20:06, L. D. James a écrit :
I'm familiar how to use aliases to send email addressed to specific 
email address to a specific user. Can someone advise me of a feature 
to reroute (send) email from specific email address to a specific user?


For instance:

From email address|To User
-
u...@test.com|user1

In the above a user with the email address of u...@test.com has sent 
an email to us...@domain.com.  We are trying to reroute specific 
emails from certain email addresses to a specific user on the 
machine, in this case, local user1 instead of local user2.


I'm sure there is better terminology for this, of which I'm sure I 
will learn by the comments from the gurus in this list.


Thanks in advance for any input.

-- L. James
Thanks, Nicolas.  You understand it well.  I'm trying to get all 
messages from u...@test.com to go to one specific email address.  By the 
way, the purpose is because one of my users has complained of being 
spammed by the user.  So, as administrator I am setting up a spam 
account to accommodate the messages and report the abuse to his email 
provider.  In this case the email address is a gmail.com address, the 
server IP is a google.com IP.


In normal circumstances I'd just block the server as a black hole. But 
for obvious reasons I don't want to block google.com as a black hole.  I 
hope to find a way to get google to control their spammers, the same way 
I would if some of my users started spammer/harrassing others.


Thanks for the input!

-- L. James

--
L. D. James
lja...@apollo3.com
www.apollo3.com/~ljames


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread L. D. James


On 01/26/2015 02:20 PM, Wietse Venema wrote:

L. D. James:

I'm familiar how to use aliases to send email addressed to specific
email address to a specific user.  Can someone advise me of a feature to
reroute (send) email from specific email address to a specific user?

For instance:

  From email address|To User
-
u...@test.com|user1

In the above a user with the email address of u...@test.com has sent an
email to us...@domain.com.  We are trying to reroute specific emails
from certain email addresses to a specific user on the machine, in this
case, local user1 instead of local user2.

Delivery dependent on the combination of (sender AND recipient) is
not implemented in Postfix itself (actually, delivery based on any
combination of properties isn't implemented in Postfix itself).

With a Milter (in Perl, Python, C, or other), one could do this:

Receive envelope sender address
Receive envelope recipient address(es)
Receive end-of-message event
Add new envelope recipient(s) based on sender and recipient address(es)
Delete old envelope recipient(s)

Long ago I decided to provide interfaces for Milters, policy servers,
etc. instead of trying to build everything into Postfix itself.

Wietse
Thanks.  The combination isn't a criterion.  It's only the sender's 
email address that I'm concerned with.  All the email from the sender, I 
would like to have it rerouted.


I'll be studying the information you provided to try to get this done.

-- L. James

--
L. D. James
lja...@apollo3.com
www.apollo3.com/~ljames


Re: How to Configure forward (redirect) for specific from email address

2015-01-26 Thread L. D. James

On 01/26/2015 02:17 PM, li...@rhsoft.net wrote:


Am 26.01.2015 um 20:06 schrieb L. D. James:

I'm familiar how to use aliases to send email addressed to specific
email address to a specific user.  Can someone advise me of a feature to
reroute (send) email from specific email address to a specific user?

For instance:

 From email address|To User
-
u...@test.com|user1


you could give that a try:

http://www.postfix.org/postconf.5.html#canonical_maps
http://www.postfix.org/postconf.5.html#canonical_classes
http://www.postfix.org/ADDRESS_REWRITING_README.html

but typically postfix only looks at the sender *or* RCPT, not both
Thanks for the links.  I described a scenario, but I'm only concerned 
with sender, not both.


-- L. James

--
L. D. James
lja...@apollo3.com
www.apollo3.com/~ljames


SMTP SASL between different local dmains.

2015-01-26 Thread Stefano Ruberti
It’s possible to configure Postfix to require SASL authentication for the relay 
between different local domains? 

Regards.
--
Stefano





smime.p7s
Description: S/MIME cryptographic signature


Re: What is good control for encryption in and out of Postscreen internal SMTP server?

2015-01-26 Thread Wietse Venema
Viktor Dukhovni:
 On Mon, Jan 26, 2015 at 09:35:11PM +, srach wrote:
 
  In from Internet
   |
  IP=1.2.3.4
  Postscreen
  |
  IP=loopback-only
  Postscreen Internal SMTP server
  [X] |
  -- 'in' IP=127.0.0.1:8001, out' IP=1.2.3.4
  Relay SMTP server to some different clients
  
  What is the good setting for controling the cipher for the step I mark with 
  [X] there?? Now it is 127.0.0.1 but I may move or change it later.
  
  Is it confusing me some because of the configuration for the Postscreen
  
  When the Postscreen daemon talks to the internal SMTP server what service 
  is 
  it using?
 
 The postscreen(8) service does not use TCP to pass traffic.
 Connections from whitelisted clients are passed via local IPC to
 to the smtpd/pass service.

Indeed. As documented, postscreen(8) is not a proxy. It hands off
the connection and stays out of the way.

Wietse


What is good control for encryption in and out of Postscreen internal SMTP server?

2015-01-26 Thread srach
I am reading and working to understand the MULTI_INSTANCE possibilities in 
Postfix.

I am not sure yet that is a good solution for me. May be I can do what I must 
with only transport maps.

I although have a question for configuring Postfix encryption if I am using 
many instances.

Only a theoretical example

    In from Internet
      |
    IP=1.2.3.4
    Postscreen
      |
    IP=loopback-only
    Postscreen Internal SMTP server
[X]      |
      -- 'in' IP=127.0.0.1:8001, out' IP=1.2.3.4
      Relay SMTP server to some different clients

What is the good setting for controling the cipher for the step I mark with 
[X] there?  Now it is 127.0.0.1 but I may move or change it later.

Is it confusing me some because of the configuration for the Postscreen

    smtp  inet  n   -   n   -   1   postscreen
    smtpd pass  -   -   n   -   -   smtpd
    dnsblog   unix  -   -   n   -   0   dnsblog
    tlsproxy  unix  -   -   n   -   0   tlsproxy
    ...
    tlsmgr    unix  -   -   n   1000?   1   tlsmgr
    ...
    smtp  unix  -   -   n   -   -   smtp
    relay unix  -   -   n   -   -   smtp
    ...
    #local unix  -   n   n   -   -   local
    ...

When the Postscreen daemon talks to the internal SMTP server what service is 
it using?

When the internal SMTP server talk then to the next-hop SMTP server what 
service is it using?

I am not complete clear.  But want to understand the steps.

*S*