Re: kill ip from bootnets and zombi (shell script)

2009-05-14 Thread Andreas Schuldei
* Julio Cesar Covolato (ju...@psi.com.br) [090514 07:26]: Hi! I made a litle shell script to stoping bootnets and zombis, and I want know what you think about it. The purpose is drop via iptables hosts that are rejected several times in a litle space of time, reading the log

Re: postfix smtpd interface when using IP slow but when using localhost normal

2009-05-14 Thread mouss
Samuel Sappa a écrit : I have problem with my postfix, a few days ago my smtpd running very slow, when delivering message (using MUA outlook,TB,OE) message delivering very slow, but if user using web mail which is using openwebmail the deliver running fine without the delay, I came to

Re: kill ip from bootnets and zombi (shell script)

2009-05-14 Thread Bill Landry
Julio Cesar Covolato wrote: Hi! I made a litle shell script to stoping bootnets and zombis, and I want know what you think about it. The purpose is drop via iptables hosts that are rejected several times in a litle space of time, reading the log generated by postfix. Tested in a

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Corey Chandler
Victor Duchovni wrote: Yes, some of the better distribution supported patches are not ill-advised. But occasionally, one gets something along the lines of the Debian OpenSSL fiasco (notably the Debian *Postfix* patches have been pretty good, and historically RedHat was adding rather

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Corey Chandler
MacShane, Tracy wrote: Yes, there is unfortunately such a need, because RHEL5 is only up to Postfix 2.3, and we require functionality from Postfix 2.5 and up (destination_rate_delay). This leads to an interesting question all its own: I'm running the same Postfix config I built years

Re: Header Check Assistance

2009-05-14 Thread mouss
Drew Tomlinson a écrit : Is there some rule about submitting questions with the string Help in the subject? I've tried posting the following note with the subject of Help With header_checks and received a bounce message indicating this error: BOUNCE postfix-users@postfix.org: Admin

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Stefan Jakobs
On Thursday, 14. Mai 2009 09:54:56 Corey Chandler wrote: MacShane, Tracy wrote: snip The OS administrators do not permit GCC and devel libraries on the SMTP servers I maintain (and fair enough). Nor should they-- this is what a staging environment is for. Build it on a staging box, test

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Barney Desmond
2009/5/14 Victor Duchovni victor.ducho...@morganstanley.com: If the purpose of using RPM files is to facilitate binary updates from distribution servers, wait until *your distribution* upgrades to a newer supported version of Postfix. If you incorporate your own Postfix into your O/S, why

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Kaj Niemi
On May 14, 2009, at 02:03, Victor Duchovni wrote: Is there a real use case for binary RPMs not maintained by the distribution release engineering teams? What's wrong with the Postfix source, which is typically less likely to have ill-advised patches dropped into it? A bit off topic already

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Kaj Niemi
Hi, On May 14, 2009, at 01:07, Just E. Mail wrote: I noticed that Postfix V#2.6.0 is now out. Does anybody know where to get RPM files? GOOGLE did not help. The SRPM from Fedora should compile fine on at least EL4 and EL5. I suggest you download it and build it yourself instead of

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Kaj Niemi
On May 14, 2009, at 12:25, Barney Desmond wrote: Sure; as people have already said, some vendors (cough, Redhat) don't really keep up to date. I haven't checked all their release channels on offer, but the core set of packages only includes Postfix 2.3.3. *And* it doesn't come with mysql/pgsql

problem with smtpd_milter and header_checks

2009-05-14 Thread Jiri Veselsky
Hallo all. (first sorry for my english) I have a small (big) problem with configure Postfix to drop messages with header_checks. In main.cf I have: smtpd_milters = local:/./clamav-milter.sock local:/./spamass-milter.sock milter_default_action = accept if I receive a message from

postfix sasl (dovecot) works no more

2009-05-14 Thread wiseadmin
Hello everybody, I am running FreeBSD with postfix (2.6.0-RC2) and dovecot (1.1.11). There are virtual domains and users and postfix authenticates users using sasl and dovecot. Today I've performed a server upgrade (portupgrade -arRv) and sasl authentication works no more. It worked for the last 4

Re: problem with smtpd_milter and header_checks

2009-05-14 Thread Wietse Venema
Please include postconf -n command output in problem reports, as requested in the mailing list welcome message.

Re: postfix sasl (dovecot) works no more

2009-05-14 Thread Wietse Venema
wiseadmin: Hello everybody, I am running FreeBSD with postfix (2.6.0-RC2) and dovecot (1.1.11). There are virtual domains and users and postfix authenticates users using sasl and dovecot. Today I've performed a server upgrade (portupgrade -arRv) and sasl authentication works no more. It

Re: problem with smtpd_milter and header_checks

2009-05-14 Thread Robert Schetterer
Jiri Veselsky schrieb: Hallo all. (first sorry for my english) I have a small (big) problem with configure Postfix to drop messages with header_checks. In main.cf I have: smtpd_milters = local:/./clamav-milter.sock local:/./spamass-milter.sock milter_default_action = accept if I

Re: problem with smtpd_milter and header_checks

2009-05-14 Thread Jiri Veselsky
Sorry, here is output: alias_database = dbm:/etc/mail/aliases.db alias_maps = hash:/etc/mail/aliases broken_sasl_auth_clients = yes command_directory = /usr/local/sbin config_directory = /usr/local/etc/postfix daemon_directory = /usr/local/libexec/postfix data_directory = /var/db/postfix

Re: problem with smtpd_milter and header_checks

2009-05-14 Thread Jiri Veselsky
you shouldnt discard mail, only cause flagged by spamassassin this is not allowed i.e in germany by law, if you do this for customers use hold ( for manual inspection ) or tell spamass-milter to reject them at smtp income level additionally you may load sanesecurity spam sig to clamd,

Problem with some user sometimes

2009-05-14 Thread Esteban Torres Rodriguez
I have problem with some user. This user's sometimes receive email: A message that you send could not be delivered to one or more of its recipients. And Sometimes send email correct. No problem How to control thats? --

RE: Postfix-2.6.0 RPM

2009-05-14 Thread Brian Collins
I noticed that Postfix V#2.6.0 is now out. Does anybody know where to get RPM files? GOOGLE did not help. Simon Mudd picks up the releases and makes good source and binary RPMs from them with lots of options. However, he's a busy man and does not always get to them right after release. A

RE: Postfix-2.6.0 RPM

2009-05-14 Thread Brian Collins
Is there a real use case for binary RPMs not maintained by the distribution release engineering teams? What's wrong with the Postfix source, which is typically less likely to have ill-advised patches dropped into it? Because those of us who run package-based systems find things work better

Re: Problem with some user sometimes

2009-05-14 Thread Magnus Bäck
On Thu, May 14, 2009 2:20 pm, Esteban Torres Rodriguez said: I have problem with some user. This user's sometimes receive email: A message that you send could not be delivered to one or more of its recipients. And Sometimes send email correct. No problem How to control thats?

Re: problem with smtpd_milter and header_checks

2009-05-14 Thread Wietse Venema
Jiri Veselsky: [ Charset ISO-8859-2 unsupported, converting... ] Hallo all. (first sorry for my english) I have a small (big) problem with configure Postfix to drop messages with header_checks. In main.cf I have: smtpd_milters = local:/./clamav-milter.sock

Re: postfix sasl (dovecot) works no more

2009-05-14 Thread Sahil Tandon
On May 14, 2009, at 7:40 AM, wiseadmin wisead...@gmail.com wrote: Hello everybody, I am running FreeBSD with postfix (2.6.0-RC2) and dovecot (1.1.11). There are virtual domains and users and postfix authenticates users using sasl and dovecot. Today I've performed a server upgrade (portupgrade

Re: problem with smtpd_milter and header_checks

2009-05-14 Thread Jiri Veselsky
Postfix header_checks happen while mail is received. Milters can add headers only after the end of the email message is received. That is a feature of the Milter protocol. The Milter protocol has a DISCARD feature. If you can configure your application to send SMFIR_DISCARD into Postfix then

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Ralf Hildebrandt
* Brian Collins lis...@newnanutilities.org: I noticed that Postfix V#2.6.0 is now out. Does anybody know where to get RPM files? GOOGLE did not help. Simon Mudd picks up the releases and makes good source and binary RPMs from them with lots of options. However, he's a busy man and does

Re: postfix sasl (dovecot) works no more

2009-05-14 Thread Wietse Venema
wiseadmin: May 14 14:35:11 softexp postfix/smtpd[8378]: warning: SASL: Connect to smtpd failed: No such file or directory You need to update your main.cf:smtpd_sasl_path setting and specify the location of the socket that the Dovecot server listens on. For example, when dovecot.conf says:

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Roderick A. Anderson
Ralf Hildebrandt wrote: * Brian Collins lis...@newnanutilities.org: I noticed that Postfix V#2.6.0 is now out. Does anybody know where to get RPM files? GOOGLE did not help. Simon Mudd picks up the releases and makes good source and binary RPMs from them with lots of options. However, he's a

Re: Need To Reject Inbound From Addresses with My Own Domain/s

2009-05-14 Thread Noel Jones
wiskbr...@hotmail.com wrote: Recently I've been getting a ton of email for a new domain we've registered and have begun receiving email for. Our users in this new domain are either 1. receiving email with a From address identical to their own, or 2. receiving email with a From address of one

RE: Need To Reject Inbound From Addresses with My Own Domain/s

2009-05-14 Thread wiskbroom
Here are the contents of my /etc/postfix/blocked_senders file: operator#...@somephishingbanksite\.com REJECT The above line is the wrong syntax and will never match anything. Wildcards are not allowed in dbm or other indexed files, and quotes should never be used. I am almost certain

Re: problem with smtpd_milter and header_checks

2009-05-14 Thread Robert Schetterer
Jiri Veselsky schrieb: you shouldnt discard mail, only cause flagged by spamassassin this is not allowed i.e in germany by law, if you do this for customers use hold ( for manual inspection ) or tell spamass-milter to reject them at smtp income level additionally you may load sanesecurity

Re: Header Check Assistance

2009-05-14 Thread Drew Tomlinson
mouss wrote: Drew Tomlinson a écrit : Is there some rule about submitting questions with the string Help in the subject? I've tried posting the following note with the subject of Help With header_checks and received a bounce message indicating this error: BOUNCE postfix-users@postfix.org:

Re: Proxying a policy service

2009-05-14 Thread J Sloan
Geert Hendrickx wrote: What drawbacks did you experience? We run a local policyd instance on each postfix server too, all connecting to a central (not replicated) MySQL. Policyd's behaviour when MySQL becomes unavailable is configurable, it can either tempfail (4xx) all incoming e-mail or

Re: Postfix-2.6.0 RPM

2009-05-14 Thread J Sloan
Roderick A. Anderson wrote: Sorry to hear that but in the mean time you can grab .src.rpm for a prior release, the tarball for the current release and modify the .spec file to reflect this. I've been doing this for our smtp servers for some time. The suse factory postfix srpm compiles nicely

not sure why this is getting through

2009-05-14 Thread Joey
Hello All, I am receiving message from people faking like they are from our domain, when looking in the headers I see this: Received-SPF: permerror (mydomain.com: Junk encountered in mechanism '+ptr:') Read this on the spf site: If the permerror occurred because an SPF publisher uses

Re: Need To Reject Inbound From Addresses with My Own Domain/s

2009-05-14 Thread Noel Jones
wiskbr...@hotmail.com wrote: Here are the contents of my /etc/postfix/blocked_senders file: operator#...@somephishingbanksite\.com REJECT The above line is the wrong syntax and will never match anything. Wildcards are not allowed in dbm or other indexed files, and quotes should never be

Re: Proxying a policy service

2009-05-14 Thread Geert Hendrickx
On Thu, May 14, 2009 at 10:15:07AM -0700, J Sloan wrote: Yes, that is the benefit of doing it that way. But we experienced problems with recurring corruption of the isam tables when the network connections to the db server were interrupted. Apparently myisam tables don't deal well with

Re: Proxying a policy service

2009-05-14 Thread J Sloan
Geert Hendrickx wrote: On Thu, May 14, 2009 at 10:15:07AM -0700, J Sloan wrote: Yes, that is the benefit of doing it that way. But we experienced problems with recurring corruption of the isam tables when the network connections to the db server were interrupted. Apparently myisam tables

Re: postfix sasl (dovecot) works no more

2009-05-14 Thread wiseadmin
Thank you Wietse ! Unfortunately it doesnt work :( In dovecot.conf the socket is /var/run/dovecot/auth-master When I added in main.cf I got permission denied (it has 600 and root:wheel). I changed the permission in 666 (this is not ok, but I only wanted to see if it works) and now I get in logs

Re: postfix sasl (dovecot) works no more

2009-05-14 Thread wiseadmin
I think the problem is deeper. The 25/tcp port is open but I can't ehlo the server. [...@toshiba ~]$telnet server_domain 25 Trying 80.96.x.x... Connected to server_domain. Escape character is '^]'. And get stucked there ! Wietse Venema wrote: wiseadmin: May 14 14:35:11

Re: postfix sasl (dovecot) works no more

2009-05-14 Thread wiseadmin
Why not? It is simple for my setup. I only have 10-15 users and that's all. If you think its dangerous or something please explain and I'll change it. Thanks Sahil Tandon wrote: On May 14, 2009, at 7:40 AM, wiseadmin wisead...@gmail.com wrote: Hello everybody, I am running

Options for immediate email address activation in postfix.

2009-05-14 Thread Scott Haneda
A client of mine has a web service where a simple web page can be made via a browser to crete an identity for them online. Build a page with web tools, toggle a setting to add DNS records, update the registrar to point to the NS's, and they have a live webpage in short order. They want to

Re: not sure why this is getting through

2009-05-14 Thread Barney Desmond
2009/5/15 Joey j...@web56.net: Received-SPF: permerror (mydomain.com: Junk encountered in mechanism '+ptr:') “If the permerror occurred because an SPF publisher uses a mechanism not understood by an SPF client and the receiver does not reject the message due to the permerror, that mechanism

Re: Options for immediate email address activation in postfix.

2009-05-14 Thread Barney Desmond
2009/5/15 Scott Haneda talkli...@newgeo.com: Any suggestions on the simplest way to approach this.  I was thinking postfix with MySql backed data store.  Today I read that RHEL is behind on postfix, and I think does not have MySql support in their rpm's.  I have zero access to a staging

Re: Postfix-2.6.0 RPM

2009-05-14 Thread Corey Chandler
Didn't get the message you replied to, so I'm bolting it on to yours. mouss wrote: Stefan Jakobs a écrit : On Thursday, 14. Mai 2009 09:54:56 Corey Chandler wrote: MacShane, Tracy wrote: Also, installing non-RPM packages can obviously cause clashes when installing other RH

need help figuring out why spf or other rule is not rejecting this

2009-05-14 Thread Joey
Hello All, I am receiving message from people faking like they are from our domain, when looking in the headers I see this: Received-SPF: permerror (mydomain.com: Junk encountered in mechanism '+ptr:') Read this on the spf site: If the permerror occurred because an SPF publisher uses

Re: Options for immediate email address activation in postfix.

2009-05-14 Thread Martin Strand
At my company we're doing almost the exact same thing. FOr this we use Postfix on RHEL5 with MySQL for domains, users and aliases. With about ~10k accounts everything works great except the forwarding vs SPF problem, ie: 1. someu...@hotmail.com sends a message to i...@yourcustomer.com 2. your

Re: Options for immediate email address activation in postfix.

2009-05-14 Thread Scott Haneda
On May 14, 2009, at 6:07 PM, Barney Desmond wrote: If this turns into a high volume site, would file based aliases fall apart after a certain amount? I also see maintaining a alias mapping via a file managed by a web service to be prone to error. If anything I wold store the mappings in

Re: Need To Reject Inbound From Addresses with My Own Domain/s

2009-05-14 Thread Noel Jones
Victor Duchovni wrote: On Thu, May 14, 2009 at 12:42:01PM -0500, Noel Jones wrote: wiskbr...@hotmail.com wrote: Here are the contents of my /etc/postfix/blocked_senders file: operator#...@somephishingbanksite\.com REJECT The above line is the wrong syntax and will never match anything.

Re: Header Check Assistance

2009-05-14 Thread Drew Tomlinson
mouss wrote: Drew Tomlinson a écrit : mouss wrote: I have no preference for header_checks. What makes client_access better? Is it less expensive? it's time to learn how smtp works. in particluar, the fact that the message is sent after the DATA command. which means that if you

Re: Options for immediate email address activation in postfix.

2009-05-14 Thread Victor Duchovni
On Thu, May 14, 2009 at 06:48:07PM -0700, Scott Haneda wrote: Thank you very much, I do not think a million will be hit for some time. Is there any penalty when you run postmap to read in the changes to the virtual_alias_maps file? I know it is not a server restart, and can happen