Certificate configuration/info

2010-08-19 Thread Alex
Hi, I'm having trouble with TLS and correctly validating the certificate and all of its alternate DNS names: Aug 6 09:44:20 smtp01 postfix/smtp[24772]: setting up TLS connection to mail.messaging.microsoft.com Aug 6 09:44:20 smtp01 postfix/smtp[24772]: Peer verification: CommonName in

Re: permit_mynetworks in smtpd_helo_restrictions

2010-08-19 Thread pf
p...@alt-ctrl-del.org wrote: Hello postfix admins, I have always placed all restrictions in smtpd_recipient_restrictions. Over the last few days, I have been experimenting with breaking the restrictions up into client, helo, sender, etc. I ran into something odd (to me), when

Re: permit_mynetworks in smtpd_helo_restrictions

2010-08-19 Thread Wietse Venema
p...@alt-ctrl-del.org: I take it that I am expected to bottom post here. But is it ok, if I crop out parts of the original message (if it's long)? Yes. Wietse

Temporary rerouting to another postfix

2010-08-19 Thread Robert Fitzpatrick
The firewall at one of our locations is down and we are using a cheaper solution until it is replaced, which does not handle content filtering as well with calls to our db at another network like the old router did very well. So, I am trying to reroute all the mail destined for that Postfix

Re: Temporary rerouting to another postfix

2010-08-19 Thread Noel Jones
On 8/19/2010 9:16 AM, Robert Fitzpatrick wrote: The firewall at one of our locations is down and we are using a cheaper solution until it is replaced, which does not handle content filtering as well with calls to our db at another network like the old router did very well. So, I am trying to

Re: Temporary rerouting to another postfix

2010-08-19 Thread Simone Caruso
On 19/08/2010 16:16, Robert Fitzpatrick wrote: The firewall at one of our locations is down and we are using a cheaper solution until it is replaced, which does not handle content filtering as well with calls to our db at another network like the old router did very well. So, I am trying to

Re: Temporary rerouting to another postfix

2010-08-19 Thread Robert Fitzpatrick
On 8/19/2010 11:03 AM, Noel Jones wrote: http://www.postfix.org/ADDRESS_VERIFICATION_README.html#probe_routing http://www.postfix.org/postconf.5.html#address_verify_transport_maps Yes, I read both of these, I guess I just can't figure out how to utilize these configuration options for a

Re: Temporary rerouting to another postfix

2010-08-19 Thread Noel Jones
On 8/19/2010 10:10 AM, Robert Fitzpatrick wrote: On 8/19/2010 11:03 AM, Noel Jones wrote: http://www.postfix.org/ADDRESS_VERIFICATION_README.html#probe_routing http://www.postfix.org/postconf.5.html#address_verify_transport_maps Yes, I read both of these, I guess I just can't figure out

Re: Temporary rerouting to another postfix

2010-08-19 Thread Robert Fitzpatrick
On 8/19/2010 11:26 AM, Noel Jones wrote: On 8/19/2010 10:10 AM, Robert Fitzpatrick wrote: On 8/19/2010 11:03 AM, Noel Jones wrote: http://www.postfix.org/ADDRESS_VERIFICATION_README.html#probe_routing http://www.postfix.org/postconf.5.html#address_verify_transport_maps Yes, I read both

Re: Temporary rerouting to another postfix

2010-08-19 Thread Noel Jones
On 8/19/2010 11:08 AM, Robert Fitzpatrick wrote: On 8/19/2010 11:26 AM, Noel Jones wrote: On 8/19/2010 10:10 AM, Robert Fitzpatrick wrote: On 8/19/2010 11:03 AM, Noel Jones wrote: http://www.postfix.org/ADDRESS_VERIFICATION_README.html#probe_routing

Re: Temporary rerouting to another postfix

2010-08-19 Thread Robert Fitzpatrick
On 8/19/2010 12:52 PM, Noel Jones wrote: Use address_verify_transport_maps in place of your transport_maps to control the routing of the probe. Ah, I'm just stupid then, I thought that didn't work unless you were using transport_maps in the first place, sorry. Thanks for clearing that up.

Re: Temporary rerouting to another postfix

2010-08-19 Thread Robert Fitzpatrick
On 8/19/2010 12:52 PM, Noel Jones wrote: Use address_verify_transport_maps in place of your transport_maps to control the routing of the probe. Uhmm, I added address_verify_transport_maps, but it still is sending verifications to the relayhost: mx2# postconf -n address_verify_map =

Re: None Unix accounts and NIS aliases

2010-08-19 Thread Daniel Prieto
On 8/18/2010 4:16 PM, Brian Evans - Postfix List wrote: On 8/18/2010 3:50 PM, Daniel Prieto wrote: Brian, On 8/18/2010 2:17 PM, Brian Evans - Postfix List wrote: On 8/18/2010 2:05 PM, Daniel Prieto wrote: Hello, I have moved from Sendmail to Postfix and eliminated Student email

Re: None Unix accounts and NIS aliases

2010-08-19 Thread Brian Evans - Postfix List
On 8/19/2010 2:21 PM, Daniel Prieto wrote: On 8/18/2010 4:16 PM, Brian Evans - Postfix List wrote: On 8/18/2010 3:50 PM, Daniel Prieto wrote: Brian, On 8/18/2010 2:17 PM, Brian Evans - Postfix List wrote: On 8/18/2010 2:05 PM, Daniel Prieto wrote: Hello, I have moved from Sendmail to

How common is reverse DNS checking?

2010-08-19 Thread D G Teed
Out of all of the things we do to restrict spam, the only one with a steady trickle of false positives is the host lookup not passing reverse DNS check. The only place I've seen which publicly talks about the reverse DNS requirement is AOL. A huge majority of senders are correctly configured in

Re: How common is reverse DNS checking?

2010-08-19 Thread pf
From: D G Teed Subject: How common is reverse DNS checking? Out of all of the things we do to restrict spam, the only one with a steady trickle of false positives is the host lookup not passing reverse DNS check. reject_unknown_client_hostname = gives problems

Re: How common is reverse DNS checking?

2010-08-19 Thread Noel Jones
On 8/19/2010 2:15 PM, p...@alt-ctrl-del.org wrote: From: D G Teed Subject: How common is reverse DNS checking? Out of all of the things we do to restrict spam, the only one with a steady trickle of false positives is the host lookup not passing reverse DNS check.

Domain forwarding

2010-08-19 Thread Ronan Lucio
Hi All, I need to re-install a new mail server. So I have the actual server running on and ordered a new one where I'm installing and configuring newer softwares. It's done and I need to move all domains and it's accounts to the newer server. Once there are so many gigabytes to move, I'll need

Re: How common is reverse DNS checking?

2010-08-19 Thread D G Teed
Thanks for the responses and tip on reject_unknown_reverse_client_hostname I've made the switch to that and it seems to catch many unmapped IPs. I half suspected there was something less stringent I could go for, and had not noticed that variant. We had only reject_unknown_client from older

Re: Domain forwarding

2010-08-19 Thread Noel Jones
On 8/19/2010 2:58 PM, Ronan Lucio wrote: Hi All, I need to re-install a new mail server. So I have the actual server running on and ordered a new one where I'm installing and configuring newer softwares. It's done and I need to move all domains and it's accounts to the newer server. Once there

Re: Temporary rerouting to another postfix

2010-08-19 Thread Noel Jones
On 8/19/2010 1:01 PM, Robert Fitzpatrick wrote: On 8/19/2010 12:52 PM, Noel Jones wrote: Use address_verify_transport_maps in place of your transport_maps to control the routing of the probe. Uhmm, I added address_verify_transport_maps, but it still is sending verifications to the relayhost:

Re: Temporary rerouting to another postfix

2010-08-19 Thread Noel Jones
On 8/19/2010 3:40 PM, Noel Jones wrote: On 8/19/2010 1:01 PM, Robert Fitzpatrick wrote: Uhmm, I added address_verify_transport_maps, but it still is sending verifications to the relayhost: Aug 19 13:27:10 mx2 postfix/smtp[88103]: 9BD9A11417F: to=step...@mrtampanorth.com,

Re: None Unix accounts and NIS aliases

2010-08-19 Thread Daniel Prieto
On 8/19/2010 2:33 PM, Brian Evans - Postfix List wrote: On 8/19/2010 2:21 PM, Daniel Prieto wrote: On 8/18/2010 4:16 PM, Brian Evans - Postfix List wrote: On 8/18/2010 3:50 PM, Daniel Prieto wrote: Brian, On 8/18/2010 2:17 PM, Brian Evans - Postfix List wrote: On 8/18/2010 2:05 PM,

greet_pause feature with postfix?

2010-08-19 Thread Morten P.D. Stevens
Hi, is there a greet_pause feature in postfix comparable with the sendmail greet_pause feature? For example: FEATURE(`greet_pause',5000) Thank you. Best regards, Morten

Re: greet_pause feature with postfix?

2010-08-19 Thread Wietse Venema
Morten P.D. Stevens: Hi, is there a greet_pause feature in postfix comparable with the sendmail greet_pause feature? For example: FEATURE(`greet_pause',5000) If you have a zombie problem, then delaying every SMTP session is a terrible idea. The expirimental Postfix release has a better

Re: How common is reverse DNS checking?

2010-08-19 Thread Robert Fournerat
Quoting Noel Jones njo...@megan.vbhcs.org: On 8/19/2010 2:15 PM, p...@alt-ctrl-del.org wrote: From: D G Teed Subject: How common is reverse DNS checking? Out of all of the things we do to restrict spam, the only one with a steady trickle of false positives is the host lookup not passing

RE: greet_pause feature with postfix?

2010-08-19 Thread Morten P.D. Stevens
-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix- us...@postfix.org] On Behalf Of Wietse Venema Sent: Thursday, August 19, 2010 11:30 PM To: Morten P.D. Stevens Cc: Postfix users Subject: Re: greet_pause feature with postfix? Morten P.D. Stevens:

Re: greet_pause feature with postfix?

2010-08-19 Thread Wietse Venema
Morten P.D. Stevens: is there a greet_pause feature in postfix comparable with the sendmail greet_pause feature? For example: FEATURE(`greet_pause',5000) Wietse: If you have a zombie problem, then delaying every SMTP session is a terrible idea. The expirimental Postfix release has a