Re: Email in Active Queue without delivery attempts

2009-06-24 Thread Jacky Chan
Victor Duchovni wrote: On Tue, Jun 23, 2009 at 07:57:00PM -0700, Jacky Chan wrote: The rate_delay feature was repaired in Postfix 2.5.7. All users of this feature should be using a Postfix release with a mail_release_date after 20090305. +20090305 + + Bugfix: in the new queue

Query on customize the over-quota bounce message on postfix2.2

2009-06-24 Thread MSG Support
Hi all, My current postfix version installed is postfix-2.2.10-1.1.el4 The user's mail over-quota, it will automatically send a bounced mail to the sender as below: ___Begining of the message__ This is the Postfix program at host myhostname.mydomain.com I'm sorry to

Anvil Syntax ?

2009-06-24 Thread Steve
Hi, I'm running through the brilliant 'Book of Postfix' and running into some confusion with anvil/rate control - specifically syntax. around page 384 smtpd_client_connection_limit_exceptions = smtpd_client_connection_rate_limit = 3 smtpd_client_connection_count_limit = 3

Re: Anvil Syntax ?

2009-06-24 Thread Steve
On Wed, 2009-06-24 at 10:59 +0200, Ralf Hildebrandt wrote: * Ralf Hildebrandt ralf.hildebra...@charite.de: Which makes me wonder what the right syntax should be. Has the syntax changed since the box was produced or is it going to change in the near future? The former. The concept

Re: Anvil Syntax ?

2009-06-24 Thread Ralf Hildebrandt
* Steve steve.h...@digitalcertainty.co.uk: smtpd_client_event_limit_exceptions = my_networks smtpd_client_event_limit_exceptions = $mynetworks or smtpd_client_event_limit_exceptions = my_networks, 1.2.3.4, 5.6.7.8 smtpd_client_event_limit_exceptions = $mynetworks, 1.2.3.4, 5.6.7.8 and

Re: Need a resolution to a weird error

2009-06-24 Thread Barney Desmond
2009/6/24 Evan Platt e...@espphotography.com: At 08:54 PM 6/23/2009, you wrote: Looks as if postifx will not send to mailbox which has close to 50M in the mailbox. http://www.postfix.org/postconf.5.html mailbox_size_limit (default: 5120) The maximal size of any

Re: warning: maildir access problem for UID/GID=4444/4444: create maildir file

2009-06-24 Thread Michael Wang
Flash Web wrote: When i send a mail to local postfix installation, i get error Jun 23 16:13:22 linux postfix/virtual[2526]: warning: maildir access problem for UID/GID=/: create maildir file /home/vmail/info/tmp/1245753802.P2526.linux.localdomain: Permission denied I have set vmail

Re: Anvil Syntax ?

2009-06-24 Thread Wietse Venema
Steve: Hi, I'm running through the brilliant 'Book of Postfix' and running into some confusion with anvil/rate control - specifically syntax. around page 384 smtpd_client_connection_limit_exceptions = smtpd_client_connection_rate_limit = 3 smtpd_client_connection_count_limit = 3

Re: Email in Active Queue without delivery attempts

2009-06-24 Thread Wietse Venema
Jacky Chan: Victor Duchovni wrote: On Tue, Jun 23, 2009 at 07:57:00PM -0700, Jacky Chan wrote: The rate_delay feature was repaired in Postfix 2.5.7. All users of this feature should be using a Postfix release with a mail_release_date after 20090305. +20090305 + +

Re: Need a resolution to a weird error

2009-06-24 Thread The Doctor
On Tue, Jun 23, 2009 at 09:02:19PM -0700, Evan Platt wrote: At 08:54 PM 6/23/2009, you wrote: Looks as if postifx will not send to mailbox which has close to 50M in the mailbox. Can this be overriden? http://www.postfix.org/postconf.5.html mailbox_size_limit (default: 5120) The

Re: Query on customize the over-quota bounce message on postfix2.2

2009-06-24 Thread Charles Marcus
On 6/24/2009, MSG Support (msgsupport@gmail.com) wrote: My current postfix version installed is postfix-2.2.10-1.1.el4 This is really old... upgrading to a more current release would be a good thing in any case... The user's mail over-quota, it will automatically send a bounced mail to

Testing For Open Relay

2009-06-24 Thread Carlos Williams
I just finished a new Postfix 2.6 installation on a Debian server in a co-location and just wanted to make sure I am properly testing this machine is not a 'open relay' before I open it out to the public: I was told to go to the following URL http://www.abuse.net/relay.html and I entered my

Re: Testing For Open Relay

2009-06-24 Thread Noel Jones
Carlos Williams wrote: I just finished a new Postfix 2.6 installation on a Debian server in a co-location and just wanted to make sure I am properly testing this machine is not a 'open relay' before I open it out to the public: I was told to go to the following URL

Re: warning: maildir access problem for UID/GID=4444/4444: create maildir file

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 03:35:08AM -0700, Michael Wang wrote: Why i get permission denied error while i have set permission 777 ? o Postfix may decline to use a mode 777 directory, try 1777 or a properly owned more 0700 directory with a delivery agent running with a fixed user id and IMAP

Pre Queue Spam Assassin Advice

2009-06-24 Thread Steve
Hi List, I've been having some adventures with pre queue filtering with SpamAssassin. This has introduced me to 'milters' which look really interesting. I've been trying to set up suggested spamassassin milter (spamass-milter) but I'm find large gaps in my basic Linux understanding.I don't mind

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 05:49:45PM +0100, Steve wrote: Hi List, I've been having some adventures with pre queue filtering with SpamAssassin. This has introduced me to 'milters' which look really interesting. I've been trying to set up suggested spamassassin milter (spamass-milter) but

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread EASY steve.h...@digitalcertainty.co.uk
On Wed, 2009-06-24 at 13:32 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 05:49:45PM +0100, Steve wrote: Hi List, I've been having some adventures with pre queue filtering with SpamAssassin. This has introduced me to 'milters' which look really interesting. I've been

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 06:36:41PM +0100, EASY steve.h...@digitalcertainty.co.uk wrote: If I have a milter set up and it creates a 'unix socket' on start up, e.g. /home/mail/email/private/samilter then defining the milter in main.cf like this (bear in mind Postfix is running

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Steve
On Wed, 2009-06-24 at 13:46 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 06:36:41PM +0100, EASY steve.h...@digitalcertainty.co.uk wrote: If I have a milter set up and it creates a 'unix socket' on start up, e.g. /home/mail/email/private/samilter then defining

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: milter_default_action = tempfail /private/samilte != /home/mail/email/private/samilter Postfix runs chrooted and the absolute would be incorrect. It's chrooted to /home/mail/email hence it is correct as far as I

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread EASY steve.h...@digitalcertainty.co.uk
On Wed, 2009-06-24 at 14:02 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: milter_default_action = tempfail /private/samilte != /home/mail/email/private/samilter Postfix runs chrooted and the absolute would be incorrect. It's

Incoming smtp: 554 Access Denied

2009-06-24 Thread Jesse Kretschmer
Howdy, I've seen error "Client host rejected: Access denied" in many other postings, but more than a day of reading has not led me to a solution. A client is having issues sending mail to our server. I investigated and found that postfix was rejecting the sending server with: NOQUEUE:

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Noel Jones
EASY steve.h...@digitalcertainty.co.uk wrote: On Wed, 2009-06-24 at 14:02 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: milter_default_action = tempfail /private/samilte != /home/mail/email/private/samilter Postfix runs chrooted and the absolute would

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Noel Jones
Jesse Kretschmer wrote: Howdy, I've seen error Client host rejected: Access denied in many other postings, but more than a day of reading has not led me to a solution. A client is having issues sending mail to our server. I investigated and found that postfix was rejecting the sending

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Ralf Hildebrandt
* Noel Jones njo...@megan.vbhcs.org: Jesse Kretschmer wrote: Howdy, I've seen error Client host rejected: Access denied in many other postings, but more than a day of reading has not led me to a solution. A client is having issues sending mail to our server. I investigated and found

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Ralf Hildebrandt
These are now my current settings from main.cf Show postconf -n output. Jun 24 09:30:50 mail postfix/smtpd[44853]: NOQUEUE: reject: RCPT from bb02d1.eurorscg.com[69.74.116.40]: 554 5.7.1 bb02d1.eurorscg.com[69.74.116.40]: Client host rejected: Access denied;

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Sahil Tandon
On Jun 24, 2009, at 2:23 PM, Jesse Kretschmer je...@psyop.tv wrote: Howdy, I've seen error Client host rejected: Access denied in many other postings, but more than a day of reading has not led me to a solution. A client is having issues sending mail to our server. I investigated and

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Steve
On Wed, 2009-06-24 at 13:29 -0500, Noel Jones wrote: EASY steve.h...@digitalcertainty.co.uk wrote: On Wed, 2009-06-24 at 14:02 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 06:54:37PM +0100, Steve wrote: milter_default_action = tempfail /private/samilte !=

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Jesse Kretschmer
Thanks for the many quick responses.I should have started with this: # postconf -n broken_sasl_auth_clients = yes command_directory = /usr/local/sbin config_directory = /usr/local/etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 daemon_directory = /usr/local/libexec/postfix

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Ralf Hildebrandt
* Jesse Kretschmer je...@psyop.tv: Thanks for the many quick responses.I should have started with this: # postconf -n Nothing in here cold cause what you see. Show master.cf please smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 07:20:00PM +0100, EASY steve.h...@digitalcertainty.co.uk wrote: It looks like some of your smtpd(8) master.cf entries are chrooted and others are not. You should use the unchrooted pathname in both cases, and make a symlink: /home/mail/email/home/mail/email

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Jesse Kretschmer
Ralf Hildebrandt wrote: Nothing in here cold cause what you see. Show master.cf please [r...@mail ~]# sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/main.cf soft_bounce = no content_filter=smtp-amavis:[127.0.0.1]:10024 queue_directory = /var/spool/postfix command_directory =

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Ralf Hildebrandt
* Jesse Kretschmer je...@psyop.tv: Ralf Hildebrandt wrote: Nothing in here cold cause what you see. Show master.cf please [r...@mail ~]# sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/main.cf This hardly shows master.cf :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Jesse Kretschmer
Ralf Hildebrandt wrote: * Jesse Kretschmer je...@psyop.tv: Ralf Hildebrandt wrote: Nothing in here cold cause what you see. Show master.cf please [r...@mail ~]# sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/main.cf This hardly

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Ralf Hildebrandt
* Jesse Kretschmer je...@psyop.tv: Oops.  I've never actually touched the master.cf file, so when I read the line, I just assumed main.cf. Thanks for bearing with me.  Without further ado: # sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/master.cf smtp  inet  n

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Noel Jones
Jesse Kretschmer wrote: Thanks for the many quick responses. I should have started with this: # postconf -n delay_warning_time = 10m Quite short, but won't break anything. maximal_queue_lifetime = 2d recommended minimum is 3 days, default is 5 days. If you have lots of undeliverable

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Steve
On Wed, 2009-06-24 at 14:58 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 07:20:00PM +0100, EASY steve.h...@digitalcertainty.co.uk wrote: It looks like some of your smtpd(8) master.cf entries are chrooted and others are not. You should use the unchrooted pathname in both cases,

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 08:29:42PM +0100, Steve wrote: My only confusion is where do I put the symlink. To make matters a struggle for me I'm dyslexic so please forgive me a little as I'm struggling to follow this: /home/mail/email/home/mail/email - I see the same things twice and

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Noel Jones
Ralf Hildebrandt wrote: * Jesse Kretschmer je...@psyop.tv: Oops. I've never actually touched the master.cf file, so when I read the line, I just assumed main.cf. Thanks for bearing with me. Without further ado: # sed -e '/^#/d' -e '/^\s*$/d' /usr/local/etc/postfix/master.cf

Slowly drain the active queue

2009-06-24 Thread George Forman
Hi, I'm trying to understand how I can control postfix active queue.We ran into a problem where out back end LMTP deposit service had failures.Therefore, the queues grew quite large.We had trouble stabilizing the LTMP back end because postfix active queuewas trying to deliver very quickly to

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Steve
On Wed, 2009-06-24 at 15:35 -0400, Victor Duchovni wrote: On Wed, Jun 24, 2009 at 08:29:42PM +0100, Steve wrote: My only confusion is where do I put the symlink. To make matters a struggle for me I'm dyslexic so please forgive me a little as I'm struggling to follow this:

Re: Slowly drain the active queue

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 07:42:11PM +, George Forman wrote: Hi, I'm trying to understand how I can control postfix active queue.We ran into a problem where out back end LMTP deposit service had failures.Therefore, the queues grew quite large.We had trouble stabilizing the LTMP back end

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Jesse Kretschmer
Noel Jones wrote: Jesse Kretschmer wrote: # postconf -n delay_warning_time = 10m Quite short, but won't break anything. maximal_queue_lifetime = 2d recommended minimum is 3 days, default is 5 days. If you have lots of undeliverable mail in your queue, address the source of the

Re: Pre Queue Spam Assassin Advice

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 08:43:15PM +0100, Steve wrote: My train of thought is to filter in this order; POSTFIX NATIVE client checks (RATE CONTROL, IP, PTR, RBL, CUSTOM LISTS, HEADER BODY) PRE-QUEUE CONTENT FILTER (CLAMAV using clamsmtp) PRE-QUEUE CONTENT FILTER (spamass-milter) This is

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Ralf Hildebrandt
* Noel Jones njo...@megan.vbhcs.org: Jesse, You may find it helpful to add -o syslog_name=postfix-smtps to the above options to differentiate logging from the smtps service. Amen to that! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Ralf Hildebrandt
* Jesse Kretschmer je...@psyop.tv: smtp inet n - n - - smtpd smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o

Re: Slowly drain the active queue

2009-06-24 Thread Ralf Hildebrandt
* George Forman georgeforma...@hotmail.com: Hi, I'm trying to understand how I can control postfix active queue. What is there to control? We ran into a problem where out back end LMTP deposit service had failures. Therefore, the queues grew quite large. But not the active, but the

multiple signatures DK multiple selector

2009-06-24 Thread fake...@fakessh.eu
hi list hi all dkimproxy I can not specify that only selector. how to have multiple signatures DK multiple number selectors thanks for all your feedbacks

Re: multiple signatures DK multiple selector

2009-06-24 Thread Noel Jones
fake...@fakessh.eu wrote: hi list hi all dkimproxy I can not specify that only selector. how to have multiple signatures DK multiple number selectors thanks for all your feedbacks both dkim-milter and amavisd-new support multiple dkim selectors. They both work well. -- Noel Jones

Re: multiple signatures DK multiple selector

2009-06-24 Thread fake...@fakessh.eu
dkim I know it supports multiple signatures but DK domains and selector keys ? Le mercredi 24 juin 2009 22:28, Noel Jones a écrit : fake...@fakessh.eu wrote: hi list hi all dkimproxy I can not specify that only selector. how to have multiple signatures DK multiple number

Re: multiple signatures DK multiple selector

2009-06-24 Thread fake...@fakessh.eu
use dkimproxy 1.1.0 Le mercredi 24 juin 2009 22:34, fake...@fakessh.eu a écrit : dkim I know it supports multiple signatures but DK domains and selector keys ? Le mercredi 24 juin 2009 22:28, Noel Jones a écrit : fake...@fakessh.eu wrote: hi list hi all dkimproxy I can not

Re: FYI: Imminent closure of SORBS...

2009-06-24 Thread kj
Good riddance. --kj

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Jesse Kretschmer
Noel Jones wrote: The smtps service is for your own mail clients to use. This is a deprecated method of encryption sometimes called SSL (not to be confused with HTTPS/SSL) in some mail clients. Clients that don't authenticate via SASL should be rejected. Typically only older MUAs and some

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Jesse Kretschmer
Noel Jones wrote: The smtps service is for your own mail clients to use. This is a deprecated method of encryption sometimes called SSL (not to be confused with HTTPS/SSL) in some mail clients. Clients that don't authenticate via SASL should be rejected. Typically only older MUAs and some

Re: Incoming smtp: 554 Access Denied

2009-06-24 Thread Noel Jones
Jesse Kretschmer wrote: If you can explain what you mean by allow these tls connections we can give more pointers. Looking at the logs, the company that is having issues with our mail server only has issue occasionally. It appears to be one server in particular. This one server always starts

spammers masquerading as me

2009-06-24 Thread Stuart Matthews
Hi everyone, I am the systems administrator for the Electronic Frontier Foundation. I have been having a problem with getting spam that has a from of, for example, t...@eff.org (which is a valid email address). I would like my mail server to not accept mail that says it is from @eff.org

Re: FYI: Imminent closure of SORBS...

2009-06-24 Thread mouss
kj a écrit : Good riddance. oh please. this is the postfix mailing list. Viktor simply wanted people to be aware of the possible shutdown. now, sorbs will most probably survive.

Re: spammers masquerading as me

2009-06-24 Thread mouss
Stuart Matthews a écrit : Hi everyone, I am the systems administrator for the Electronic Frontier Foundation. I have been having a problem with getting spam that has a from of, for example, t...@eff.org (which is a valid email address). I would like my mail server to not accept mail that

Re: spammers masquerading as me

2009-06-24 Thread J.P. Trosclair
Stuart Matthews wrote: I have already tried editing /usr/local/etc/postfix/access, adding: eff.orgREJECTyou can't send mail as me! And of course I ran postmap after this. I have also tried using the setting that rejects mail that says HELO eff.org. You say check_sender_access

Re: spammers masquerading as me

2009-06-24 Thread Wietse Venema
Stuart Matthews: Hi everyone, I am the systems administrator for the Electronic Frontier Foundation. I have been having a problem with getting spam that has a from of, for example, t...@eff.org (which is a valid email address). I would like my mail server to not accept mail that says it

Re: spammers masquerading as me

2009-06-24 Thread /dev/rob0
On Wed June 24 2009 18:21:19 Stuart Matthews wrote: I am the systems administrator for the Electronic Frontier Foundation. I have been having a problem with getting spam that has a And I talked to you yesterday in IRC. from of, for example, t...@eff.org (which is a valid email address). I

Oldest message in the queue

2009-06-24 Thread George Forman
Hi, It appears we would need to write a script to parse all the messages. What is an efficient way to get the age of the oldest message in the queue? George _ Microsoft brings you a new way to search the web. Try Bing™ now

Re: Oldest message in the queue

2009-06-24 Thread Victor Duchovni
On Thu, Jun 25, 2009 at 01:57:31AM +, George Forman wrote: It appears we would need to write a script to parse all the messages. What is an efficient way to get the age of the oldest message in the queue? If the deferred queue is large enough, it is more efficient to parse the logs,

best practices for workstations that occasionally disconnect

2009-06-24 Thread William Yardley
I'm just wondering if anyone has a good suggestion for how to deal with workstations, setup with a $relayhost for all outbound mail, which occasionally get unplugged from the network or otherwise taken offline. While this doesn't happen to our machines a lot, it does cause some annoyance when a

Re: rejecting client=unknown[ip.ad.dr.ess]

2009-06-24 Thread LuKreme
On 23-Jun-2009, at 06:31, Jan P. Kessler wrote: Another option is to use selective greylisting on unknown clients: MAIN.CF smtpd_recipient:_restrictions = permit_mynetworks, ...others..., check_client_access = pcre:/etc/postfix/client_check /etc/postfix/client_check: /^unknown$/

Re: rejecting client=unknown[ip.ad.dr.ess]

2009-06-24 Thread Victor Duchovni
On Wed, Jun 24, 2009 at 10:15:39PM -0600, LuKreme wrote: On 23-Jun-2009, at 06:31, Jan P. Kessler wrote: Another option is to use selective greylisting on unknown clients: MAIN.CF smtpd_recipient:_restrictions = permit_mynetworks, ...others..., check_client_access =

Re: best practices for workstations that occasionally disconnect

2009-06-24 Thread Noel Jones
William Yardley wrote: I'm just wondering if anyone has a good suggestion for how to deal with workstations, setup with a $relayhost for all outbound mail, which occasionally get unplugged from the network or otherwise taken offline. While this doesn't happen to our machines a lot, it does cause

Re: best practices for workstations that occasionally disconnect

2009-06-24 Thread Victor Duchovni
On Thu, Jun 25, 2009 at 12:25:41AM -0500, Noel Jones wrote: The best practice for occasional fairly brief (less than a couple days) outages is just ignore them. Postfix should handle things pretty well up to several thousand deferred messages. If you're expecting tens of thousands of