Re: Dumping Postfix ldap tables to hash files

2020-12-16 Thread Ganael Laplanche
On Wednesday, December 16, 2020 4:58:28 PM CET Wietse Venema wrote:

Hello Wietse,

> Alternative: use memcache (on 127.0.0.1) with LDAP as a 'backup'.
> This will answer most queries from the cache.

Thanks for your reply.

It seems interesting, I'll have a look at that.

Best regards,

-- 
Ganael Laplanche 
Unix Systems Engineer @CentraleSupelec Rennes




Re: Issue with postfix and glusterFS

2020-12-16 Thread Wietse Venema
Samuel Mutel:
> Hello,
> 
> I encountered some issues with postfix when the /var/spool/postfix is on a
> glusterfs.
> The postfix queue is blocked suddenly and no more mail is sent.
> 
> I don't know exactly what the issue is with GlusterFS ? Is-it a particular
> option to use when mounting the partition ?
> 
> Thanks in advance to share your thoughts on this.

What Postfix system calls are failing, and what is the error code?

Look for text that describes running 'strace' in
http://www.postfix.org/DEBUG_README.html

Wietse


Re: Dumping Postfix ldap tables to hash files

2020-12-16 Thread Wietse Venema
Ganael Laplanche:
> Hello everyone,
> 
> I was looking for some way of having hash file fallbacks for our ldap lookup 
> tables.

Alternative: use memcache (on 127.0.0.1) with LDAP as a 'backup'. 
This will answer most queries from the cache.

Wietse


Re: Issue with postfix and glusterFS

2020-12-16 Thread John Stoffel


Samuel> I encountered some issues with postfix when the
Samuel> /var/spool/postfix is on a glusterfs.  The postfix queue is
Samuel> blocked suddenly and no more mail is sent.

Please see http://www.postfix.org/DEBUG_README.html and re-send your
problem with the right details.

Samuel> I don't know exactly what the issue is with GlusterFS ? Is-it
Samuel> a particular option to use when mounting the partition ?

We don't either since you didn't give any useful details.





Issue with postfix and glusterFS

2020-12-16 Thread Samuel Mutel
Hello,

I encountered some issues with postfix when the /var/spool/postfix is on a
glusterfs.
The postfix queue is blocked suddenly and no more mail is sent.

I don't know exactly what the issue is with GlusterFS ? Is-it a particular
option to use when mounting the partition ?

Thanks in advance to share your thoughts on this.


Dumping Postfix ldap tables to hash files

2020-12-16 Thread Ganael Laplanche
Hello everyone,

I was looking for some way of having hash file fallbacks for our ldap lookup 
tables.

As 'postmap -s' does not work (yet ?) for ldap-backed tables, I've written a 
small script that uses a ldap_table(5) .cf file as input and outputs a hash 
table that (hopefully!) includes all elements that could be retrieved by the 
initial ldap search. I've attached the script to this mail as it may be of 
interest to some of you too.

This is not perfect as only a subset of ldap_table(5) options are handled, but 
it fits our needs. It uses plain sh and has only dependencies to the (great) 
Miller tool available here:

https://github.com/johnkerl/miller

as well as OpenLDAP client tools (ldapsearch to be precise).

Any comment is welcome!
Best regards,

-- 
Ganael Laplanche 
Unix Systems Engineer @CentraleSupelec Rennes

postfix-ldap2hash.sh
Description: application/shellscript


Re: rejecting 'fancy' TLDs, allowing a specified one ?

2020-12-16 Thread Dominic Raferd

On 16/12/2020 11:07, li...@sbt.net.au wrote:

I have a check to reject 'fancy TLDs' as below

smtpd_sender_restrictions =
  permit_mynetworks,
  permit_sasl_authenticated,
  check_sender_access pcre:/etc/postfix/sender_pcre,
  check_sender_access pcre:/etc/postfix/reject_domains

cat /etc/postfix/reject_domains
/\.bid$/ REJECT We reject all .bid domains
/\.biz$/ REJECT We reject all .biz domains
...

that works well, but, now have a user who gets a valid inbound rejected

Dec 16 15:06:14 postfix/smtpd[8695]: NOQUEUE: reject: RCPT from
mail-sy4aus01on2077.outbound.protection.outlook.com[40.107.107.77]: 554
5.7.1 : Sender address rejected: We reject all .biz
domains; from= to= proto=ESMTP
helo=

is there an easy way, and how, to exempt a specified domain like
'abcd.biz' from my sender restriction ?


/etc/postfix/reject_domains:

/@abcd\.biz$/ DUNNO
/\.bid$/ REJECT We reject all .bid domains
/\.biz$/ REJECT We reject all .biz domains


rejecting 'fancy' TLDs, allowing a specified one ?

2020-12-16 Thread lists
I have a check to reject 'fancy TLDs' as below

smtpd_sender_restrictions =
 permit_mynetworks,
 permit_sasl_authenticated,
 check_sender_access pcre:/etc/postfix/sender_pcre,
 check_sender_access pcre:/etc/postfix/reject_domains

cat /etc/postfix/reject_domains
/\.bid$/ REJECT We reject all .bid domains
/\.biz$/ REJECT We reject all .biz domains
...

that works well, but, now have a user who gets a valid inbound rejected

Dec 16 15:06:14 postfix/smtpd[8695]: NOQUEUE: reject: RCPT from
mail-sy4aus01on2077.outbound.protection.outlook.com[40.107.107.77]: 554
5.7.1 : Sender address rejected: We reject all .biz
domains; from= to= proto=ESMTP
helo=

is there an easy way, and how, to exempt a specified domain like
'abcd.biz' from my sender restriction ?

thanks, V