Re: Block sending from non-US IPs

2012-10-18 Thread Ralf Hildebrandt
* Thomas E Lackey telac...@bozemanpass.com: I am looking into a system where one of the [virtual] mail accounts was compromised. Apparently the account, once compromised, was used to send spam from overseas hosts. Since the company has no overseas users, they asked if it were possible to

Postfix and RBL program in the same server

2012-10-18 Thread Arantza Serrano
Hello, I have installed a RBL program in my postfix server. This RBL program responds IP queries like that: dig @localhost -p 53 213.176.163.216.std.rbl.servidor.midominio ; DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6 @localhost -p 53 213.176.163.216.std.rbl. servidor.midominio ; (1

Re: Postfix and RBL program in the same server

2012-10-18 Thread Ralf Hildebrandt
* Arantza Serrano aserr...@euskaltel.com: But obviously the Postfix program makes all its queries to the external DNS servers, so my RBL program isn't used from the Postfix. I would like the Postfix program to use the external DNS servers for all the queries except for the RBL queries. Is it

Re: 4xx too many errors question

2012-10-18 Thread Tomas Macek
On Wed, 17 Oct 2012, Wietse Venema wrote: Tomas Macek: The part of the log is here: Oct 11 12:26:44 mail postfix/smtpd[4546]: my.pc.host.name[x.x.x.x]: RSET Oct 11 12:26:44 mail postfix/smtpd[4546]: my.pc.host.name[x.x.x.]: 250 2.0.0 Ok Oct 11 12:26:44 mail postfix/smtpd[4546]:

RE: Postfix and RBL program in the same server

2012-10-18 Thread Arantza Serrano
[root@comfix1des postfix]# cat /etc/resolv.conf search midominio nameserver XXX.XXX.XXX.XXX nameserver YYY.YYY.YYY.YYY [root@comfix1des postfix]# postfix check [root@comfix1des postfix]# -Mensaje original- De: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] En

IPV6 and SPF

2012-10-18 Thread David Mehler
Hello, Does anyone publish SPF records for IPV6 in DNS? The reason I ask is my mail server has both an IPV4 and an IPV6 address and when connecting to it via webmail that goes to localhost, it seems as if the outgoing connection is either IPV4 or IPV6 depending on whether that localhost

RE: Postfix and RBL program in the same server

2012-10-18 Thread Arantza Serrano
But I want that the postfix uses the external DNS servers for the relay queries, to check mailfrom domain, etc I would like the Postfix program to use the external DNS servers for all the queries EXCEPT for the RBL queries. -Mensaje original- De: Ralf Hildebrandt

Re: Postfix and RBL program in the same server

2012-10-18 Thread Ralf Hildebrandt
* Arantza Serrano aserr...@euskaltel.com: But I want that the postfix uses the external DNS servers for the relay queries, to check mailfrom domain, etc I would like the Postfix program to use the external DNS servers for all the queries EXCEPT for the RBL queries. That's not possible.

RE: Postfix and RBL program in the same server

2012-10-18 Thread Arantza Serrano
I feared that :-( The RBL program doesn't allow to configure forwarders. I have add (not replace) the nameserver 127.0.0.1 to the resolv.conf file and now it works more or less. Postfix asks all the queries to the RBL program, and if they are not resolved, then the server asks queries to the

Re: Postfix and RBL program in the same server

2012-10-18 Thread Reindl Harald
i am not soo familar with dnsmasq but have a good expierience with it to do tricks like i need the content of /etc/hosts via DNS for apache trafficserver without breaking the normal dns-resolution of the host maybe place the rbl-program on a virtual interface and some tricks with dnsmasq can be

Re: IPV6 and SPF

2012-10-18 Thread Nick Rosier
David Mehler wrote: Hello, Does anyone publish SPF records for IPV6 in DNS? The reason I ask is my mail server has both an IPV4 and an IPV6 address and when connecting to it via webmail that goes to localhost, it seems as if the outgoing connection is either IPV4 or IPV6 depending on whether

Re: local delivery: temporary failure

2012-10-18 Thread Jamie Paul Griffin
[ Renato wrote on Wed 17.Oct'12 at 16:06:40 +0200 ] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I'm new to postfix and MTAs in general; I'd like to set it up for local delivery only on my Archlinux box. I've followed the instructions on the archwiki [1] and my configuration files are

Fwd: Re: MX vs A records (postconf attached)

2012-10-18 Thread Tom Kinghorn
On 17/10/2012 15:18, Noel Jones wrote: Show postconf -n and the postfix logs of your test. -- Noel Jones Hi Noel. I guess I should have done that at the start, my apologies. Just an update. when doing a test via the CLI, it seems to work. So I am guessing a permit statement further down is

Re: Unable to execute a java program from postfix

2012-10-18 Thread Stan Hoeppner
On 10/17/2012 3:53 AM, /dev/rob0 wrote: On Tue, Oct 16, 2012 at 09:33:38PM -0500, Stan Hoeppner wrote: On 10/16/2012 9:17 PM, Neil Aggarwal wrote: Here is my alias in /etc/aliases: # Forward mdcm messages to mail handler mdcm: |/root/webapps/cbsweb/WEB-INF/bin/mdcm/mailHandler You're

Re: local delivery: temporary failure

2012-10-18 Thread Renato
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 18 Oct 2012 10:37:00 +0100 Jamie Paul Griffin ja...@kode5.net wrote: Is your procmail in /usr/bin ? maybe it's in another part of the file system, such as /usr/local/bin ? $ which procmail /usr/bin/procmail So I'm trying the .forward

Re: MX vs A records (postconf attached)

2012-10-18 Thread Jerry
On Thu, 18 Oct 2012 12:04:37 +0200 Tom Kinghorn articulated: {SNIP} I had the debug included but the list admin bounced it due to max characters exceeded. I will resend it to the list. While you are at it, could you lose the urge to send posts in HTML format. GMail is perfectly capable of

Re: MX vs A records (postconf attached)

2012-10-18 Thread Tom Kinghorn
On 18/10/2012 12:55, Jerry wrote: On Thu, 18 Oct 2012 12:04:37 +0200 Tom Kinghorn articulated: {While you are at it, could you lose the urge to send posts in HTML format. GMail is perfectly capable of sending in plain text format. Thank you! Formatting changed. Apologies.

Re: local delivery: temporary failure

2012-10-18 Thread Wietse Venema
Renato: Oct 17 15:15:26 localhost postfix/local[2248]: B3322200238: to=renato@localhost, orig_to=renato, relay=local, delay=3.6, delays=3.5/0/0/0.05, dsn=4.3.0, status=deferred (temporary failure) This means one of the following: - procmail exited with status EX_TEMPFAIL - Postfix had a

Re: IPV6 and SPF

2012-10-18 Thread DTNX Postmaster
On Oct 18, 2012, at 11:20, Nick Rosier wrote: David Mehler wrote: Hello, Does anyone publish SPF records for IPV6 in DNS? The reason I ask is my mail server has both an IPV4 and an IPV6 address and when connecting to it via webmail that goes to localhost, it seems as if the outgoing

Re: IPV6 and SPF

2012-10-18 Thread Nick Rosier
DTNX Postmaster wrote: On Oct 18, 2012, at 11:20, Nick Rosier wrote: David Mehler wrote: Hello, Does anyone publish SPF records for IPV6 in DNS? The reason I ask is my mail server has both an IPV4 and an IPV6 address and when connecting to it via webmail that goes to localhost, it seems as

Re: local delivery: temporary failure

2012-10-18 Thread Renato
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 18 Oct 2012 07:21:26 -0400 (EDT) Wietse Venema wie...@porcupine.org wrote: Renato: Oct 17 15:15:26 localhost postfix/local[2248]: B3322200238: to=renato@localhost, orig_to=renato, relay=local, delay=3.6, delays=3.5/0/0/0.05, dsn=4.3.0,

Re: Any best practices for stacking filters?

2012-10-18 Thread DTNX Postmaster
On Oct 18, 2012, at 00:56, Quanah Gibson-Mount wrote: Right now, we can have up to 4 different processing filters in our configuration, based on what features are enabled. In general, we always have: 1) OpenDKIM for signing Then we almost always have 2) Amavis Then we sometimes

Re: Fwd: Re: MX vs A records (postconf attached)

2012-10-18 Thread Noel Jones
On 10/18/2012 5:04 AM, Tom Kinghorn wrote: I had the debug included but the list admin bounced it due to max characters exceeded. I will resend it to the list DO NOT send debug log files unless specifically requested. Normal log files are sufficient. And a friendly reminder that splitting

Re: Fwd: Re: MX vs A records (postconf attached)

2012-10-18 Thread Tom Kinghorn
On 18/10/2012 14:41, Noel Jones wrote: On 10/18/2012 5:04 AM, Tom Kinghorn wrote: DO NOT send debug log files unless specifically requested. Normal log files are sufficient. And a friendly reminder that splitting required troubleshooting info up between multiple messages greatly reduces the

Re: IPV6 and SPF

2012-10-18 Thread DTNX Postmaster
On Oct 18, 2012, at 14:01, Nick Rosier wrote: I've got an SPF records as following: bunbun.be. 86400 IN SPF v=spf1 a mx ptr ip6:::/64 -all Haven't noticed any problems. You should not need to publish IPv6 specific SPF records, if your DNS is set up

Re: Postfix and RBL program in the same server

2012-10-18 Thread /dev/rob0
On Thu, Oct 18, 2012 at 11:14:03AM +, Duane Hill wrote: On Thursday, October 18, 2012 at 11:03:06 UTC, s...@hardwarefreak.com confabulated: On 10/18/2012 4:08 AM, Reindl Harald wrote: i am not soo familar with dnsmasq but have a good expierience with it to do tricks like i need the

stat=queue and /var/spool/clientmqueue

2012-10-18 Thread Simone Felici
Hello to all! I've a little issue with some queued mails. On a server a script is sending mails using perl and the '/bin/mail' command. This night I've registered a network outage and some mails are not sent. Of course the daemon running is postfix. After some search I've noticed the mails

Re: stat=queue and /var/spool/clientmqueue

2012-10-18 Thread Ralf Hildebrandt
* Simone Felici s.fel...@mclink.eu: Hello to all! I've a little issue with some queued mails. On a server a script is sending mails using perl and the '/bin/mail' command. This night I've registered a network outage and some mails are not sent. Of course the daemon running is postfix.

Re: Block sending from non-US IPs

2012-10-18 Thread mouss
Le 17/10/2012 22:41, Thomas E Lackey a écrit : I am looking into a system where one of the [virtual] mail accounts was compromised. Apparently the account, once compromised, was used to send spam from overseas hosts. Since the company has no overseas users, they asked if it were possible

Re: Block sending from non-US IPs

2012-10-18 Thread Patrick Lists
On 10/18/2012 10:24 PM, mouss wrote: you can try http://countries.nerd.dk/more.html you can also try GeoIP. Also check out http://ipdeny.com/ Regards, Patrick

Re: Block sending from non-US IPs

2012-10-18 Thread /dev/rob0
On Thu, Oct 18, 2012 at 10:24:43PM +0200, mouss wrote: and really, you should only look at this once you analyzed the situation for more neutral approaches, such as: mail submission should require authentication. this does not solve all problems, but if your authnetication is compromised,