Timeout 30s but message sent

2014-12-18 Thread HugoH
Hello, I'm facing a timeout issue on one of my server, which seems to slow message delivery. There is a 30s (exactly 30s) delay while connecting to gmail, gandi, yahoo... servers. But some others haven't this timeout. Here is a sample from my logs : Dec 18 09:07:48 sd-60799

Re: Timeout 30s but message sent

2014-12-18 Thread Christian Rößner
Am 18.12.2014 um 09:26 schrieb HugoH hugo.henea...@gmail.com: Dec 18 09:08:18 sd-60799 postfix/smtp[17808]: connect to gmail-smtp-in.l.google.com[2a00:1450:400c:c00::1a]:25: Connection timed out Dec 18 09:08:19 sd-60799 postfix/smtp[17808]: 4176314805C0: If I follow this list correctly,

Re: Timeout 30s but message sent

2014-12-18 Thread HugoH
Hello Christian, Thanks for your reply. I check on my working server and... There's this message : Dec 18 11:09:27 sd- postfix/smtp[3501]: connect to gmail-smtp-in.l.google.com[2a00:1450:400c:c01::1b]:25: No route to host It seem's that my 2nd server detects that ipv6 is not available and use

Adding hostname to addresses

2014-12-18 Thread Robert Fitzpatrick
We use Postfix on our gateways that only transport to destination servers, they do not have any local users except for standard system/root/admin accounts. How can I get Postfix to not allow senders to use the hostname in their email address. Would it work and is it safe to add such a REJECT

Re: Adding hostname to addresses

2014-12-18 Thread li...@rhsoft.net
Am 18.12.2014 um 13:38 schrieb Robert Fitzpatrick: We use Postfix on our gateways that only transport to destination servers, they do not have any local users except for standard system/root/admin accounts. How can I get Postfix to not allow senders to use the hostname in their email address.

Re: Timeout 30s but message sent

2014-12-18 Thread Wietse Venema
HugoH: Hello Christian, Thanks for your reply. I check on my working server and... There's this message : Dec 18 11:09:27 sd- postfix/smtp[3501]: connect to gmail-smtp-in.l.google.com[2a00:1450:400c:c01::1b]:25: No route to host It seem's that my 2nd server detects that ipv6 is not

Re: SMTP scanning server pool

2014-12-18 Thread Wietse Venema
Daniel Hopkirk: * XCLIENT passes through LOGIN for SASL username rather than original SMTP-AUTH credentials. Does postfix take this username and assume it's authenticated, or does the fact that the original credentials aren't passed through remove the ability to apply

Re: Adding hostname to addresses

2014-12-18 Thread Robert Fitzpatrick
li...@rhsoft.net wrote: in general: postconf -n missing Yes, of course, forgot to add, this is for one of our two gateways I need to set this up on: root@mx2:~ # postconf -n address_verify_map = btree:$data_directory/verify address_verify_negative_cache = no address_verify_poll_count = 1

Re: SMTP scanning server pool

2014-12-18 Thread Bennett Todd
The design sounds familiar. I've a couple of little thoughts, neither specific to your design sketch. Maintaining perfectly consistent distributed configuration without any risk of race conditions is hard; I try to design away from that requirement. So, for instance, I've avoided having

Re: Why does SPF fail sometimes?

2014-12-18 Thread Mark Martinec
Peter wrote: On 12/16/2014 05:25 AM, Darren Pilgrim wrote: It's extra fun when they do so to an email with a DKIM signature covering the From: header. MLMs should strip the DKIM header anyways and add their own if appropriate. There is (and must not be) any semantic or practical difference

DMARC and AOL

2014-12-18 Thread James B. Byrne
CentOS-6.6 Postfix-2.11.1 OpenDKIM-2.9.0 We are set up to use SPF, DKIM and DMARC and have been using our present settings since last June. Our DMARC policy is this: 2014/12/17 17:49:12 :Your DMARC record for '_dmarc.harte-lyne.ca' is 'v=DMARC1; p=quarantine; pct=100; ri=86400;

Re: DMARC and AOL

2014-12-18 Thread Wietse Venema
James B. Byrne: xxuse...@aol.com: host mailin-02.mx.aol.com[152.163.0.99] said: 521 5.2.1 : (DMARC) This message failed DMARC Evaluation and is being refused due to provided DMARC Policy (in reply to end of DATA command) --- Has anyone have any idea what AOL might be complaining

Re: DMARC and AOL

2014-12-18 Thread Wietse Venema
Wietse Venema: James B. Byrne: xxuse...@aol.com: host mailin-02.mx.aol.com[152.163.0.99] said: 521 5.2.1 : (DMARC) This message failed DMARC Evaluation and is being refused due to provided DMARC Policy (in reply to end of DATA command) --- Has anyone have any idea what AOL

Re: DMARC and AOL

2014-12-18 Thread James B. Byrne
On Thu, December 18, 2014 19:19, Wietse Venema wrote: Wietse Venema: James B. Byrne: xxuse...@aol.com: host mailin-02.mx.aol.com[152.163.0.99] said: 521 5.2.1 : (DMARC) This message failed DMARC Evaluation and is being refused due to provided DMARC Policy (in reply to end of

Smtp auth from a hash or cdb file

2014-12-18 Thread Ram
Can I use postfix smtpauth with a hash or cdb file sasldb2 file is unfriendly , because that requires command line to add / modify. I want to have this fully automated using a UI Currently the users are authenticating against a remote mysql table , but I want to remove the DB dependency in