Preventing mail from one address

2013-11-25 Thread Rod Evans
Hi I've taken over a postfix mailserver which has the main.cf shown below The server is sheltered behind a reasonably good commercial antispam service so the config is light on many of the usual things discussed on this list. The protection afforded by the antispam service seems to have been

problem with Name service error for name=[domain name] type=AAAA

2013-11-25 Thread Victor Shchukin
Hi every one! We use postfix 2.10.2 and IPv6 IPv4 mode, so when remote domain doesn't has A record, postfix send's bounce, like Name service error for name=[domain name] type=: Host found but no data record of requested type this message a little bit confused our users. Is it possible to

Rejecting emails based on domain blacklist

2013-11-25 Thread Mark Goodge
What would be the simplest method in Postfix of implementing an equivalent to the exim ACL mentioned in this blog post: http://blog.hinterlands.org/2013/10/unwanted-email-from-communicado-ltd/ That is, what's the simplest way of rejecting email from a list of domains contained within a simple

Re: Rejecting emails based on domain blacklist

2013-11-25 Thread Wietse Venema
Mark Goodge: That is, what's the simplest way of rejecting email from a list of domains contained within a simple text file that can be updated regularly without needing to restart Postfix. What do you mean with regularly? Postfix SMTP daemons check if a hash: or btree: file has changed

Re: problem with Name service error for name=[domain name] type=AAAA

2013-11-25 Thread Wietse Venema
Victor Shchukin: Hi every one! We use postfix 2.10.2 and IPv6 IPv4 mode, so when remote domain doesn't has A record, postfix send's bounce, like Name service error for name=[domain name] type=: Host found but no data record of requested type this message a little bit confused our

Re: Preventing mail from one address

2013-11-25 Thread Noel Jones
On 11/25/2013 3:39 AM, Rod Evans wrote: Hi I've taken over a postfix mailserver which has the main.cf shown below The server is sheltered behind a reasonably good commercial antispam service so the config is light on many of the usual things discussed on this list. The protection

Re: Rejecting emails based on domain blacklist

2013-11-25 Thread Wietse Venema
Wietse Venema: Mark Goodge: That is, what's the simplest way of rejecting email from a list of domains contained within a simple text file that can be updated regularly without needing to restart Postfix. What do you mean with regularly? Postfix SMTP daemons check if a hash: or

Re: problem with Name service error for name=[domain name] type=AAAA

2013-11-25 Thread Wietse Venema
Wietse Venema: Victor Shchukin: Hi every one! We use postfix 2.10.2 and IPv6 IPv4 mode, so when remote domain doesn't has A record, postfix send's bounce, like Name service error for name=[domain name] type=: Host found but no data record of requested type this message a little

Re: problem with Name service error for name=[domain name] type=AAAA

2013-11-25 Thread Wietse Venema
Wietse Venema: Wietse Venema: Victor Shchukin: Hi every one! We use postfix 2.10.2 and IPv6 IPv4 mode, so when remote domain doesn't has A record, postfix send's bounce, like Name service error for name=[domain name] type=: Host found but no data record of requested type

Re: Rejecting emails based on domain blacklist

2013-11-25 Thread Mark Goodge
On 25/11/2013 13:51, Wietse Venema wrote: No need to restart Postfix. Use an indexed file and let smtpd(8) auto-detect that the file has changed. Run this from cron: #!/bin/sh # Configure smtpd(8) to query $TYPE:real-file TYPE=cdb # or hash or lmdb SUFF=cdb # or db or

Re: Rejecting emails based on domain blacklist

2013-11-25 Thread Jeffrey 'jf' Lim
On Mon, Nov 25, 2013 at 9:51 PM, Wietse Venema wie...@porcupine.org wrote: Mark Goodge: What would be the simplest method in Postfix of implementing an equivalent to the exim ACL mentioned in this blog post: http://blog.hinterlands.org/2013/10/unwanted-email-from-communicado-ltd/

Re: Rejecting emails based on domain blacklist

2013-11-25 Thread Wietse Venema
Dang. I forgot to append a dummy column to the textfile. Corrected version is below. Also added a note that mv newdatabse realdatabase is not needed with cdb and lmdb. Wietse Mark Goodge: What would be the simplest method in Postfix of implementing an equivalent to the exim ACL

Re: problem with Name service error for name=[domain name] type=AAAA

2013-11-25 Thread Victor Shchukin
Thanks for answer. I think we could implement that behaviour and check if there will be performance issues. Anyone else interested? -- Victor Shchukin ignit...@yandex-team.ru On Nov 25, 2013, at 17:21 , Wietse Venema wie...@porcupine.org wrote: Wietse Venema: Wietse Venema: Victor

Re: problem with Name service error for name=[domain name] type=AAAA

2013-11-25 Thread Wietse Venema
Wietse: Sorry. Postfix reports only the last lookup error. In theory it could be made configurable so it tries AAA first and A last. But that may have performance implications. Victor Shchukin: Thanks for answer. I think we could implement that behaviour and check if there will be

can not telnet,can not send mail

2013-11-25 Thread Feel Zhou
Hello, my friend This is Tom I'm sending my greeting from China My postfix server can not telnet any other mail server, but other server can telnet my postfix server, so lots of mail in my queue,but I can not send it, what can I do now, thanks a lot. TOM

Re: can not telnet,can not send mail

2013-11-25 Thread Feel Zhou
log is Nov 26 14:51:48 usa postfix/error[3310]: A1F4612806E: to=l...@example.com, relay=none, delay=0.02, delays=0.02/0/0/0.01, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to IP[IP]:25: Connection timed out) command just like telnet mail.example.com 25 Trying IP...

Re: can not telnet,can not send mail

2013-11-25 Thread Feel Zhou
It's already open in the firewall , I can send mail this morning (Chinese time) before.and never change some setting 2013/11/26 Feel Zhou feelz...@gmail.com It's already open in the firewall , I can send mail this morning (Chinese time) before.and never change some setting 2013/11/26

Re: can not telnet,can not send mail

2013-11-25 Thread Ansgar Wiechers
Please don' top-post. On 2013-11-26 Feel Zhou wrote: 2013/11/26 Wijatmoko U. Prayitno k...@pandawa.fidonet.or.id On Tue, 26 Nov 2013 14:40:45 +0800 Feel Zhou feelz...@gmail.com wrote: My postfix server can not telnet any other mail server, but other server can telnet my postfix server, so