Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Michael Tokarev
ram wrote: Sorry for this OT post .. but I think this is a common problem for all postfix admins We run smtp services for our clients using smtp-auth. And nowadays we also enforce a strong password (minimum alphanumeric) But still people's passwords get compromised. Even a relatively strong

smtp time outs and delays + spamc being called when using amavis-new

2009-07-18 Thread Jumping Mouse
Hello everyone, I am using postfix 2.5.4 with amavisd-new, courier imap, clamd, spamassasin, maildrop on Ubuntu 6.06.2 LTS server which I inherited. I have been struggling alone to try to resolve two issues and hope that i can get some help here. Issue 1. Many of my users have been

Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Charles Sprickman
On Sat, 18 Jul 2009, ram wrote: We run smtp services for our clients using smtp-auth. And nowadays we also enforce a strong password (minimum alphanumeric) But still people's passwords get compromised. Even a relatively strong password. To save our postfix servers I have implemented rate-limits

dsn

2009-07-18 Thread K bharathan
i always see in the postfix maillog the following: dsn=2.6.0,dsn=2.0.0,dsn=4.0.0, understand this is the status of the delivery; what is the significance of these numbers after dsn?; (e.g. dsn=2.0.0 i understand status sent ok) i googled for it but could not manage to get any info about this;

Re: smtp time outs and delays + spamc being called when using amavis-new

2009-07-18 Thread mouss
Jumping Mouse a écrit : Hello everyone, I am using postfix 2.5.4 with amavisd-new, courier imap, clamd, spamassasin, maildrop on Ubuntu 6.06.2 LTS server which I inherited. I have been struggling alone to try to resolve two issues and hope that i can get some help here. when you have

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread mouss
Charles Sprickman a écrit : Hello all, We've been using vpopmail+qmail for the past 6 years or so, and need to deploy new hardware. I'm seriously considering a move to something more modern on the software side. Vpopmail has worked well for us, but it's a bit hackish, as is the bundle of

Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Damian Myerscough
Hello, Just out of curiosity how do you let your users change their passwords? 2009/7/18 Charles Sprickman sp...@bway.net: On Sat, 18 Jul 2009, ram wrote: We run smtp services for our clients using smtp-auth. And nowadays we also enforce a strong password (minimum alphanumeric) But still

RE: smtp time outs and delays + spamc being called when using amavis-new

2009-07-18 Thread Jumping Mouse
Ok thanks mouss willl split this message into two requests 1. smtp time outs and delays 2. spamc being called when using amavis-new and close this message... so everyone please consider this message closed it will will be continued with subjects smtp time outs and delays and spamc being

spamc being called when using amavis-new

2009-07-18 Thread Jumping Mouse
solution proposed by mouss: remove: this line:xfilter /usr/bin/spamcfrom maildroprc I am noticing the following in the mail logs: Jul 17 06:18:42 mail spamc[32239]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refusedJul 17 06:18:43 mail spamc[32239]:

RE: spamc being called when using amavis-new

2009-07-18 Thread Jumping Mouse
solution proposed by mouss: remove: this line:xfilter /usr/bin/spamcfrom maildroprc I see that this that having this line in maildroprc can cause a delay of about 5 seconds per email message, could this have been causing major delays in delivery during high server load or

Re: dsn

2009-07-18 Thread Wietse Venema
K bharathan: i always see in the postfix maillog the following: dsn=2.6.0,dsn=2.0.0,dsn=4.0.0, understand this is the status of the delivery; what is the significance of these numbers after dsn?; (e.g. dsn=2.0.0 i understand status sent ok) i googled for it but could not manage to get any

smtp time outs and delays

2009-07-18 Thread Jumping Mouse
continued from smtp time outs and delays + spamc being called when using amavis-new mouss wrote: hard to tell, but a first bet is reverse DNS lookup. if the clients use a private IP space, make sure your DNS server answers for thecorresponding reverse zone so that postfix gets an NXDOMAIN

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread Charles Marcus
On 7/18/2009, mouss (mo...@ml.netoyen.net) wrote: -Continued use of Courier-IMAP. Not so much because I like it, but I don't want POP UUIDs changing or any big changes in IMAP quirks that suddenly cause users grief. It seems like Courier+Maildrop is fairly common though, so I think I'm safe

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread Res
On Sat, 18 Jul 2009, Charles Marcus wrote: Oh... and although I did recommend moving to dovecot, if all you use is POP, and there is no chance you will be switching to IMAP, then it I don't think you'd see any benefit switching to dovecot... Except the performance increase under Dovecot is 30

RE: smtp time outs and delays

2009-07-18 Thread Jumping Mouse
Thanks again mouss. most of my users are in an office network behind a firewall and are using an ms server 2003 dns for local lookups my isp's dns server for non local lookups. My ISP is also hosting the dns records for the postfix server. How can I test if postfix is getting an NXDOMAIN

Re: smtp time outs and delays

2009-07-18 Thread Charles Marcus
On 7/18/2009, Jumping Mouse (kafr...@hotmail.com) wrote: Here is my main.cf # Postfix master process configuration file. For details on the format postconf -n output only please... -- Best regards, Charles

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread Charles Marcus
On 7/18/2009, Res (r...@ausics.net) wrote: Oh... and although I did recommend moving to dovecot, if all you use is POP, and there is no chance you will be switching to IMAP, then it I don't think you'd see any benefit switching to dovecot... Except the performance increase under Dovecot

RE: smtp time outs and delays

2009-07-18 Thread Jumping Mouse
Here is my postconf -n output: ~$ postconf -nalias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliasesbiff = nobroken_sasl_auth_clients = yesconfig_directory = /etc/postfixcontent_filter = smtp-amavis:[127.0.0.1]:10024delay_warning_time = 4hhome_mailbox =

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread Sahil Tandon
On Sat, 18 Jul 2009, Charles Marcus wrote: On 7/18/2009, Res (r...@ausics.net) wrote: Oh... and although I did recommend moving to dovecot, if all you use is POP, and there is no chance you will be switching to IMAP, then it I don't think you'd see any benefit switching to dovecot...

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread Charles Marcus
On 7/18/2009, Sahil Tandon (sa...@tandon.net) wrote: Just so I understand, you don't use POP3 on the server you manage; you have never compared POP3 performance on Dovecot vs. $something_else, but you are commenting on the lack of performance benefit? :) Only because I've been on the dovecot

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread Sahil Tandon
On Sat, 18 Jul 2009, Charles Marcus wrote: On 7/18/2009, Sahil Tandon (sa...@tandon.net) wrote: Just so I understand, you don't use POP3 on the server you manage; you have never compared POP3 performance on Dovecot vs. $something_else, but you are commenting on the lack of performance

Re: Postfix Toaster - replacing vpopmail

2009-07-18 Thread Charles Marcus
On 7/18/2009 11:23 AM, Sahil Tandon wrote: See: http://wiki.dovecot.org/POP3Server Yep, seems to say something similar... What's with all the ellipses?! Finish your thought! :) Ok, I'll try... ;)

Re: smtp time outs and delays

2009-07-18 Thread mouss
Jumping Mouse a écrit : Thanks again mouss. most of my users are in an office network behind a firewall and are using an ms server 2003 dns for local lookups my isp's dns server for non local lookups. My ISP is also hosting the dns records for the postfix server. How can I test if

Re: store email with subject filename

2009-07-18 Thread mouss
gianluca...@interfree.it a écrit : Hi My mailserver store mail in Maildir format, is possible through postfix, mailscanner or procmail to store mail with subject filename so i can find mail more quicly on server? the subject is a bad choice for a filename: - the filename must be

Re: OT: Why are my servers strong passwords compromised

2009-07-18 Thread Scott Haneda
On Jul 18, 2009, at 4:38 AM, Damian Myerscough wrote: Hello, Just out of curiosity how do you let your users change their passwords? Adding to this, do you have a forgot password feature that perhaps gives them passwords to a master control panel of some form? Did you distribute their

Re: problem talking to service rewrite (mysql?)

2009-07-18 Thread Wietse Venema
LuKreme: Getting a lot of these: postfix/trivial-rewrite[88525]: fatal: proxy:mysql:/usr/local/etc/ postfix/mysql_virtual_domains_maps.cf(0,lock|fold_fix): table lookup problem Log for trivial-rewrite warning: records in Postfix logs. Look in the MySQL logs. Wietse

delivery temporarily suspended: connect to, localhost[10.11.12.13]:25: Connection timed out

2009-07-18 Thread Admin
Hi there, I am using fetchmail to pop3 mail from gmail. But when I receive email I find that fetchmail is using postfix to deliver the mail to the corresponding internal mailbox. postfix responds with the following error and best I can tell the mail never ends up in my inbox. Looks like

problem talking to service rewrite (mysql?)

2009-07-18 Thread LuKreme
Getting a lot of these: postfix/trivial-rewrite[88525]: fatal: proxy:mysql:/usr/local/etc/ postfix/mysql_virtual_domains_maps.cf(0,lock|fold_fix): table lookup problem postfix/smtpd[27380]: warning: problem talking to service rewrite: Unknown error: 0 postfix/smtpd[27362]: warning: problem

Re: Getting a lot of these

2009-07-18 Thread LuKreme
Weitse: LuKreme: Getting a lot of these: postfix/trivial-rewrite[88525]: fatal: proxy:mysql:/usr/local/etc/ postfix/mysql_virtual_domains_maps.cf(0,lock|fold_fix): table lookup problem Log for trivial-rewrite warning: records in Postfix logs. Look in the MySQL logs. Despite my.cfg having

Re: Getting a lot of these

2009-07-18 Thread LuKreme
On 18-Jul-2009, at 22:43, LuKreme wrote: Weitse: LuKreme: Getting a lot of these: OK, never mind. After digging through the thousands of log lines I found the first sql error. Evidently at some point in updating postfixadmin the password to the 'postfix' mysql database was changed to

Re: Getting a lot of these

2009-07-18 Thread Sahil Tandon
On Sat, 18 Jul 2009, LuKreme wrote: Weitse: LuKreme: Getting a lot of these: postfix/trivial-rewrite[88525]: fatal: proxy:mysql:/usr/local/etc/ postfix/mysql_virtual_domains_maps.cf(0,lock|fold_fix): table lookup problem Log for trivial-rewrite warning: records in Postfix logs.