Re: Blocking executables. What did I miss?

2014-06-01 Thread Edgar Pettijohn
On 06/01/2014 12:24 AM, Viktor Dukhovni wrote: On Sun, Jun 01, 2014 at 08:11:42AM +0300, Inteq Solution - Dep. Tehnic wrote: I am blocking executables and potentially dangerous extensions with header_checks = pcre:/etc/postfix/header_checks.pcre Inside header_checks.pcre I have:

Re: Blocking executables. What did I miss?

2014-06-01 Thread Benny Pedersen
Inteq Solution - Dep. Tehnic skrev den 2014-06-01 07:11

Re: Note for Postfix distro maintaines: dynamicmaps support

2014-06-01 Thread Wietse Venema
Wietse Venema: LaMont Jones: On Fri, May 30, 2014 at 10:33:08AM -0400, Wietse Venema wrote: Postfix snapshot 20140530 now supports dynamically-loadable database plugins, and Postfix shared libraries. The Postfix build/installation procedure has changed a bit, but there should be

Re: Blocking executables. What did I miss?

2014-06-01 Thread Jeffrey 'jf' Lim
On Sun, Jun 1, 2014 at 1:11 PM, Inteq Solution - Dep. Tehnic t...@inteq.ro wrote: Hello Tonight, while checking Postfix config, I have stumbled upon something weird. I am blocking executables and potentially dangerous extensions with header_checks = pcre:/etc/postfix/header_checks.pcre

Re: Blocking executables. What did I miss?

2014-06-01 Thread Viktor Dukhovni
On Mon, Jun 02, 2014 at 02:52:44AM +0800, Jeffrey 'jf' Lim wrote: I'm not really familiar with the usage of pcre with postfix, but [...] Therefore, you should not be adding to the OP's confusion. -- Viktor.

Re: Blocking executables. What did I miss?

2014-06-01 Thread Jeffrey 'jf' Lim
Perhaps you can clear up the confusion here. You know everything and can speak for the OP. I merely pointed him down one possible path, did what I could to illuminate it without , and then left the rest to him. On Jun 2, 2014 4:18 AM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Mon,

Re: Blocking executables. What did I miss?

2014-06-01 Thread Jeffrey 'jf' Lim
On Jun 2, 2014 4:18 AM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Mon, Jun 02, 2014 at 02:52:44AM +0800, Jeffrey 'jf' Lim wrote: I'm not really familiar with the usage of pcre with postfix, but [...] Therefore, you should not be adding to the OP's confusion. Perhaps you can

Re: Blocking executables. What did I miss?

2014-06-01 Thread Viktor Dukhovni
On Mon, Jun 02, 2014 at 04:54:48AM +0800, Jeffrey 'jf' Lim wrote: I merely pointed him down one possible path, did what I could to illuminate it without , and then left the rest to him. s/down one possible path/up the garden path/ -- Viktor.

RE: Blocking executables. What did I miss?

2014-06-01 Thread Inteq Solution - Dep. Tehnic
Hello Viktor, I admit, I am not a guru in Postfix but I am trying. I do not understand where the confusion is? Using both my examples (mime_header_checks and header_checks), my executable (.bat) is blocked when I send a test email from Outlook with the correct REJECT text. But, when testing from

How to troubleshoot this error timeout after END-OF-MESSAGE?

2014-06-01 Thread tswmmeejsdad .
Hi All, We run a postfix STMP relay for customers. One customer is saying that their application is showing lots of timeouts on their end when it is trying to send emails via our STMP relay. We are also seeing the timeout errors in the mail log (shown below). How do I troubleshoot something

Re: Blocking executables. What did I miss?

2014-06-01 Thread Viktor Dukhovni
On Mon, Jun 02, 2014 at 12:22:14AM +0300, Inteq Solution - Dep. Tehnic wrote: I admit, I am not a guru in Postfix but I am trying. I do not understand where the confusion is? The patterns in header_checks need to be identical to the patterns in mime_header_checks. Usually, one simply has:

Re: How to troubleshoot this error timeout after END-OF-MESSAGE?

2014-06-01 Thread li...@rhsoft.net
Am 02.06.2014 00:35, schrieb tswmmeejsdad .: We run a postfix STMP relay for customers. One customer is saying that their application is showing lots of timeouts on their end when it is trying to send emails via our STMP relay. We are also seeing the timeout errors in the mail log (shown

Re: How to troubleshoot this error timeout after END-OF-MESSAGE?

2014-06-01 Thread Viktor Dukhovni
On Mon, Jun 02, 2014 at 08:35:25AM +1000, tswmmeejsdad . wrote: May 19 16:06:50 smtp01 postfix/smtpd[21940]: timeout after END-OF-MESSAGE from unknown[10.84.72.227] The SMTP client neither closes the TCP socket nor sends QUIT after completing a message delivery. Fix the client. --

Re: How to troubleshoot this error timeout after END-OF-MESSAGE?

2014-06-01 Thread tswmmeejsdad .
Thanks for the info Viktor. That sounds like a rather bold statement and I don't think customers at times are willing to concede that it's something on their end causing it. Is there anything else that we could do further to prove to the customer that it was their application that as you have

Re: How to troubleshoot this error timeout after END-OF-MESSAGE?

2014-06-01 Thread Viktor Dukhovni
On Mon, Jun 02, 2014 at 11:26:47AM +1000, tswmmeejsdad . wrote: On Mon, Jun 2, 2014 at 10:19 AM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Mon, Jun 02, 2014 at 08:35:25AM +1000, tswmmeejsdad . wrote: May 19 16:06:50 smtp01 postfix/smtpd[21940]: timeout after END-OF-MESSAGE

sending from a virtual domain

2014-06-01 Thread Glenn English
I have users who have virtual domains on my server. They both use them for web sites and email. A little while ago, postfix stopped sending email. One of them can send mail from his office to me, and can receive from anywhere. But he can't send anywhere outside my domain. The other one seems

Re: How to troubleshoot this error timeout after END-OF-MESSAGE?

2014-06-01 Thread tswmmeejsdad .
Hi Viktor, Terrific advice. Much appreciated. Cheers. Andy On Mon, Jun 2, 2014 at 11:35 AM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Mon, Jun 02, 2014 at 11:26:47AM +1000, tswmmeejsdad . wrote: On Mon, Jun 2, 2014 at 10:19 AM, Viktor Dukhovni postfix-us...@dukhovni.org

Re: sending from a virtual domain

2014-06-01 Thread Viktor Dukhovni
On Sun, Jun 01, 2014 at 07:56:17PM -0600, Glenn English wrote: debug_peer_level = 5 Drop this down to 2, so you'll actually be able to see useful logging, rather than low-level noise. debug_peer_list = bouldermedicaladvocate.com aerco.net mydestination = localhost, localdomain,

Re: Blocking executables. What did I miss?

2014-06-01 Thread Noel Jones
On 6/1/2014 1:52 PM, Jeffrey 'jf' Lim wrote: On Sun, Jun 1, 2014 at 1:11 PM, Inteq Solution - Dep. Tehnic t...@inteq.ro wrote: Hello Tonight, while checking Postfix config, I have stumbled upon something weird. I am blocking executables and potentially dangerous extensions with

Re: Blocking executables. What did I miss?

2014-06-01 Thread Noel Jones
On 6/1/2014 4:22 PM, Inteq Solution - Dep. Tehnic wrote: Hello Viktor, I admit, I am not a guru in Postfix but I am trying. I do not understand where the confusion is? Using both my examples (mime_header_checks and header_checks), my executable (.bat) is blocked when I send a test email

Re: Blocking executables. What did I miss?

2014-06-01 Thread Jeffrey 'jf' Lim
On Mon, Jun 2, 2014 at 11:43 AM, Noel Jones njo...@megan.vbhcs.org wrote: On 6/1/2014 1:52 PM, Jeffrey 'jf' Lim wrote: On Sun, Jun 1, 2014 at 1:11 PM, Inteq Solution - Dep. Tehnic t...@inteq.ro wrote: Hello Tonight, while checking Postfix config, I have stumbled upon something weird.

Re: sending from a virtual domain

2014-06-01 Thread Glenn English
On Jun 1, 2014, at 8:39 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: Thanks a lot, Victor, for looking through that mess of a config. I was in a bit of an anxiety attack when I wrote the original message. I've changed 'most everything you suggested (a lot of them were that way before

Re: sending from a virtual domain

2014-06-01 Thread Viktor Dukhovni
On Sun, Jun 01, 2014 at 10:57:30PM -0600, Glenn English wrote: Postfix seems happy with a domain name in mynetworks. I put IPs in there earlier and it didn't seem to work, but the domain names did -- I found how to fix my problem with an ASCII domain name in the config. Apparently happy or