Re: CIDR

2011-12-18 Thread Tolga
On 18 December 2011 00:34, Stan Hoeppner s...@hardwarefreak.com wrote: On 12/17/2011 2:32 PM, Ansgar Wiechers wrote: On 2011-12-17 Tolga wrote: I've been getting a lot of Chinese spam. I've googled and come across a guide that advises to use a cidr file and tell postfix to use it. I got

Re: CIDR

2011-12-18 Thread Duane Hill
On Sunday, December 18, 2011 at 08:41:48 UTC, to...@ozses.net confabulated: On 18 December 2011 00:34, Stan Hoeppner s...@hardwarefreak.com wrote: On 12/17/2011 2:32 PM, Ansgar Wiechers wrote: On 2011-12-17 Tolga wrote: I've been getting a lot of Chinese spam. I've googled and come across

Re: CIDR

2011-12-18 Thread Stan Hoeppner
On 12/18/2011 4:49 AM, Duane Hill wrote: Hi, I've confirmed that the IP is from China, using www.ip2location.com. My CIDR file is at www.bilgisayarciniz.org/sinokorea.cidr.txt Bingo. Your CIDR table doesn't work because you have not specified a RESULT for each network_address. You only

Re: Postfix as Load Balancer

2011-12-18 Thread DN Singh
Hello, I was searching for nginx as load balancer, but couldn't quite figure it out. Also, I am not sure, it would be able to pickup queues from Mysql database. On Fri, Dec 16, 2011 at 6:49 PM, DN Singh dnsingh@gmail.com wrote: On Fri, Dec 16, 2011 at 6:05 PM, Wietse Venema

Re: Postfix as Load Balancer

2011-12-18 Thread Wietse Venema
DN Singh: Hello, I was searching for nginx as load balancer, but couldn't quite figure it out. It requires a minor patch if you need to pass the remote client SASL username to Postfix. http://www.ruby-forum.com/topic/205086 http://citrin.ru/nginx:xclient-login-patch Also, I am not sure,

unused parameter: maildrop_destination_recipient_limit=1

2011-12-18 Thread Joan Moreau
Hi, I upgraded to 2.9 and I get some few parameters unused anymore, but this one troubles me: usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: maildrop_destination_recipient_limit=1 WHat is now the default value for this parameter, if we can not set it up anymore ?

Re: unused parameter: maildrop_destination_recipient_limit=1

2011-12-18 Thread Ralf Hildebrandt
* Joan Moreau j...@grosjo.net: Hi, I upgraded to 2.9 and I get some few parameters unused anymore, but this one troubles me: usr/sbin/postconf: warning: /etc/postfix/main.cf: unused parameter: maildrop_destination_recipient_limit=1 WHat is now the default value for this

Is email address syntax verification in Postfix too strict?

2011-12-18 Thread Тарас Савчук
Hi All. Postfix rejects emails to addresses in MAIL FROM/RCPT TO that start with -, for example: -t...@domain.tldmailto:-t...@domain.tld --ot...@domain.tldmailto:--ot...@domain.tld In log we have warning: Illegal address syntax from . in RCPT command. As I understand, it's not

Re: Is email address syntax verification in Postfix too strict?

2011-12-18 Thread Wietse Venema
Hi All. Postfix rejects emails to addresses in MAIL FROM/RCPT TO that start with -, for example: -t...@domain.tldmailto:-t...@domain.tld --ot...@domain.tldmailto:--ot...@domain.tld In log we have warning: Illegal address syntax from . in RCPT command. This is a safety feature that

Postfix nginx support (was: XCLIENT patch for postfix)

2011-12-18 Thread Wietse Venema
jeff geng: Wietse: Happy new year :) We use niginx's smtp function to redirect mail to postfix server. But in postfix, XCLIENT command can't support the LOGIN paremeter. Severial months ago, I write a patch for postfix-2.5.3. Now nginx official website also supply a patch for this

Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Steve Fatula
Have not seen a discussion of this lately, I'd like to hear pros of disallowing said spoofing. It appears it's allowed in the SMTP standard. So, are there reasons to not allow it? I have seen people use this is a number of seemingly reasonable ways. I'd rather not argue about that part. I'd

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Reindl Harald
Am 18.12.2011 23:33, schrieb Steve Fatula: Or, allow people to spoof if they wish for some valid reasons. there is no valid reason these days on SPF enabled domains it must not happen who the fuck configures smtp-servers to allow foreign sender-domains? so normally should allow this senders

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Wietse Venema
Steve Fatula: Have not seen a discussion of this lately, I'd like to hear pros of disallowing said spoofing. It appears it's allowed in the SMTP standard. So, are there reasons to not allow it? You mean, forbid mailing list postings (like yours), because they arrive from outside, but have a

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Barry K
Reindl, what is your problem? Clean up your ignorant and immature language. BK From: Reindl Harald (h.reindlthelounge.net) Date: Sun Dec 18 2011 - 16:40:17 CST Am 18.12.2011 23:33, schrieb Steve Fatula: Or, allow people to spoof if they wish for some valid reasons. there is no valid reason

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Reindl Harald
where do you see a problem? what is igrnorant in the fact that NEVER a mail from outside the network has to reach the MX with his own domain exept from some whell known and whitelisted hosts? would everybody understand this we would have much less spam and useless mail-traffic in the world Am

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Wietse Venema
Reindl Harald: Steve Fatula: Have not seen a discussion of this lately, I'd like to hear pros of disallowing said spoofing. It appears it's allowed in the SMTP standard. So, are there reasons to not allow it? You mean, forbid mailing list postings (like yours), because they arrive

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Reindl Harald
Am 19.12.2011 01:46, schrieb Wietse Venema: Reindl Harald: Steve Fatula: Have not seen a discussion of this lately, I'd like to hear pros of disallowing said spoofing. It appears it's allowed in the SMTP standard. So, are there reasons to not allow it? You mean, forbid mailing list

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Steve Fatula
From: Wietse Venema wie...@porcupine.org To: Postfix users postfix-users@postfix.org Sent: Sunday, December 18, 2011 6:46 PM Subject: Re: Best Practice for (not)allowing spoofed MAIL FROM addresses For most users, spoofing is about email with their address in the From: header, coming from an

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Reindl Harald
Am 19.12.2011 02:03, schrieb Steve Fatula: *From:* Wietse Venema wie...@porcupine.org *To:* Postfix users postfix-users@postfix.org *Sent:* Sunday, December 18, 2011 6:46 PM *Subject:* Re: Best Practice for (not)allowing spoofed MAIL FROM addresses For most users,

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Steve Fatula
From: Wietse Venema wie...@porcupine.org To: Postfix users postfix-users@postfix.org Sent: Sunday, December 18, 2011 5:40 PM Subject: Re: Best Practice for (not)allowing spoofed MAIL FROM addresses Steve Fatula: Have not seen a discussion of this lately, I'd like to hear pros of disallowing

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Reindl Harald
Am 19.12.2011 02:15, schrieb Steve Fatula: Steve Fatula: Have not seen a discussion of this lately, I'd like to hear pros of disallowing said spoofing. It appears it's allowed in the SMTP standard. So, are there reasons to not allow it? You mean, forbid mailing list

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Lokoder
2011/12/18 Steve Fatula compconsult...@yahoo.com: No, speaking of sending email. So, a postfix system where I might have a user st...@domain.com, yet, send mail as this yahoo address, both envelope and sender. I am not speaking of blocking or checking incoming mail, talking about essentially

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Stan Hoeppner
On 12/18/2011 7:15 PM, Steve Fatula wrote: So, in general, what I am asking is what is the currently accepted best practice (if any)? I see spf as the tool to detect it, not my question. I am asking if mail systems could allow it, yet, be good netcitizens. So to make this crystal clear,

Re: Best Practice for (not)allowing spoofed MAIL FROM addresses

2011-12-18 Thread Steve Fatula
From: Stan Hoeppner s...@hardwarefreak.com To: postfix-users@postfix.org Sent: Sunday, December 18, 2011 9:28 PM Subject: Re: Best Practice for (not)allowing spoofed MAIL FROM addresses So to make this crystal clear, you are asking if your users should be allowed to SUBMIT mail for RELAY