Re: PATCH: smtpd_proxy logging

* Wietse Venema wie...@porcupine.org: On Fri, Dec 04, 2009 at 08:54:01PM +0100, Stefan Foerster wrote: Now, about logging - I'd be really grateful if the existing logging functionality could be extended in a way so that the pre-queue content filter's response is logged. I know

Re: whitelisting problem

* Stan Hoeppner s...@hardwarefreak.com: smtpd_helo_required = yes smtpd_helo_restrictions = check_recipient_access hash:/etc/postfix/access Did you mean check_helo_access? Stefan reject_non_fqdn_helo_hostname reject_invalid_helo_hostname

Re: whitelisting problem

Hallo Stan, * Stan Hoeppner s...@hardwarefreak.com: Stefan Förster put forth on 12/5/2009 5:46 AM: * Stan Hoeppner s...@hardwarefreak.com: smtpd_helo_required = yes smtpd_helo_restrictions = check_recipient_access hash:/etc/postfix/access Did you mean check_helo_access

Re: whitelisting problem

* Stefan Förster cite+postfix-us...@incertum.net: Rejection message: | Dec 4 13:39:15 greer postfix/smtpd[7124]: NOQUEUE: reject: RCPT from | unknown[204.238.179.8]: 450 4.7.1 mx1.mfn.org: Helo command rejected: | Host not found; from=spam-l-boun...@spam-l.com | to=s...@hardwarefreak.com

Re: whitelisting problem

had a serious misunderstanding of how Postfix access control works. Your first posting simply suggested that you worked a whole night, couldn't barely keep your eyes open (5:46am) and therefore mixed check_recipient_access with check_client_access in your smtpd_helo_restrictions. Stefan

Snapshot 20091109, queue disk partition sizing

in temporary files. I _think_ that this is not different from a setup without a content filter which would mean I don't have to increase the disk partition keeping the queue - is that assumption correct? Stefan

Re: Snapshot 20091109, queue disk partition sizing

* Wietse Venema wie...@porcupine.org: Stefan Förster: (number of smtpd processes) * message_size_limit bytes of queue space allocated in temporary files. By default, the Postfix requires 1.5*message_size_limit of free space before it accepts mail. Right now, the before-proxy scratch

Re: Configuring Two Postfix mail servers behind HA Proxy load balancer.

the above steps for your IMAP/POP3 server. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 Tapferkeit ist ein Anfall, der bei den meisten Menschen schnell vorübergeht.

rbl_reply_maps - specify OK/ACCEPT/220?

rbl_reply_maps overrides default_rbl_reply for blacklist/response code pairs listed in the referenced lookup tables. Is it possible to specify a numeric code which is NOT a reject code, thereby realizing a DNS whitelist? Stefan

Re: rbl_reply_maps - specify OK/ACCEPT/220?

Hallo postfix-users, * Stefan Förster cite+postfix-us...@incertum.net: * Stefan Förster cite+postfix-us...@incertum.net: rbl_reply_maps overrides default_rbl_reply for blacklist/response code pairs listed in the referenced lookup tables. Is it possible to specify a numeric code which

Re: rbl_reply_maps - specify OK/ACCEPT/220?

* Wietse Venema wie...@porcupine.org: Stefan F?rster: Hallo postfix-users, * Stefan F?rster cite+postfix-us...@incertum.net: * Stefan F?rster cite+postfix-us...@incertum.net: rbl_reply_maps overrides default_rbl_reply for blacklist/response code pairs listed in the referenced lookup tables

Re: Relay acces denied with permit_tls_clientcerts

On Mon, 2009-09-28 at 07:31 -0500, Noel Jones wrote: On 9/28/2009 7:19 AM, Stefan Selbitschka wrote: Hi, i recently tried to install a postfix server with TLS and client authentication required. Testing the installation with Thunderbird looked good: server certificate show, client

Relay acces denied with permit_tls_clientcerts

[78.142.185.79] Sep 25 10:39:06 nas postfix/smtpd[18263]: unknown[78.142.185.79]: Trusted: subject_CN=Stefan Selbitschka, issuer=QV Schweiz ICA, fingerprint=71:4C:85:$ Sep 25 10:39:06 nas postfix/smtpd[18263]: Trusted TLS connection established from unknown[78.142.185.79]: TLSv1 with cipher DHE

AW: --- Delivery report unavailable ---

data (the bounce files) to be lost. With ext3 this is not what i would expect to happen, but that has nothing to do with the original subject and presumably has nothing to do with postfix. Kind regards Stefan -Ursprüngliche Nachricht- Von: owner-postfix-us...@postfix.org [mailto:owner

--- Delivery report unavailable ---

--- Delivery report unavailable ---. Does anybody have an idea what causes this and how i can prevent it? Thanx in advance Stefan -- Webmatch GmbH || internet solutions Tel.:  (+49) 0221 - 99 80 88 - 11 Fax.:  (+49) 0221 - 99 80 88 - 10 Email: sbu...@webmatch.de Web: www.webmatch.de

Are queue IDs unique within a sinlge instance?

Given no external interference, are queue IDs unique within a single instance for the whole span a message stays within qmgr's control, or can a mail in e.g. the deferred queue, share an ID with a message in the active queue? Cheers Stefan

Re: avoid aliasing

On Wed, 2009-08-26 at 18:12 -0600, LuKreme wrote: On 26-Aug-2009, at 03:14, Stefan Palme wrote: user+noduplicate: user+noduplicate user: user, otheru...@otherdomain.com Seems to me this would be an ideal use of procmail. Thanks for the tip, but procmail is no option here

Re: Reverse DNS fails with cannot find your hostname when forward IP is wrong

postmasters talk to each other ;-) Cheers Stefan I also looked at http://www.postfix.org/postconf.5.html#reject_unknown_client_hostname but found no mentioning of the message that's logged. But a cannot find your hostname is really not a good answer here. mfg zmi -- // Michael

Re: warning: SASL authentication failure: No worthy mechs found

use yum to search for packages like cyrus-sasl, sasl-modules and similar. Cheers Stefan -- listing of /etc/sasl2 -- total 8 drwxr-xr-x 2 root root 4096 Jan 7 2007 . drwxr-xr-x 58 root root 4096 Aug 27 04:02 .. -- permissions for /etc/postfix/sasl_passwd -- -rw--- 1 root root 37

Re: warning: SASL authentication failure: No worthy mechs found

, they are not, are they? I think you might want to install cyrus-sasl-plain.x86_64. Cheers Stefan

Re: avoid aliasing

On Thu, 2009-08-27 at 06:59 -0600, LuKreme wrote: On 27-Aug-2009, at 00:16, Stefan Palme wrote: On Wed, 2009-08-26 at 18:12 -0600, LuKreme wrote: On 26-Aug-2009, at 03:14, Stefan Palme wrote: user+noduplicate: user+noduplicate user: user, otheru...@otherdomain.com Seems

Re: avoid aliasing

My procmail delivers to mysql users just fine. The initial setup takes some extra steps, but that's all. Ok, maybe I will take a look at this solution, too :-) Thanks and regards -stefan-

avoid aliasing

...@otherdomain.com) Any ideas how to solve this issue? Thank and regards -stefan-

Re: rbl checks, best place

it does with a content_filter (where you can specify content_filter = smtp-foo:filter.domain.com:10024 and it will lookup the MX records for filter.domain.com) to faciliate load balancing and increase robustness, but we probably won't see that too soon. Cheers Stefan

Re: openldap-2.3.39 crash

about 300(the database engine is bdb). you can try whether using the proxymap(8) service to access you LDAP lookup tables (with an appropriate process limit defined in master.cf) solves your problem: http://www.postfix.org/proxymap.8.html Cheers Stefan

Re: Postfix queue problem?

. Cheers Stefan

Re: Postfix queue problem?

, this might could slow down mail delivery. Postfix logs lookup problems, so you can verify that quite easily. Cheers Stefan

Re: Looking for opinions on FreeBSD OS for Postfix

be appreciated. The documentation at http://www.postfix.org/INSTALL.html#4 mentions that earlier versions of Postfix were supported on FreeBSD 2.x to 5.x. I think it's very likely that you can run recent Postfix versions on newer FreeBSD releases, too. Cheers Stefan

header_checks rule skipped

map /etc/postfix/header_checks, line 1: out of range replacement index 1: skipping this rule the same rule without $1 is working fine. I'm using postfix 2.5.7. Any thoughts please? Thank you, Stefan

Improper command pipelining after QUIT

have that mentions pipelining is: smtpd_data_restrictions = reject_multi_recipient_bounce reject_unauth_pipelining I will happily provide all of postconf -n and any lookup tables as per DEBUG_README if that should be necessary. Cheers Stefan

Re: Improper command pipelining after QUIT

* Wietse Venema wie...@porcupine.org: Stefan Förster: Dear members of postfix-users, can anyone of you please explain to me what the following log entry means: postfix/smtpd[8558]: improper command pipelining after QUIT from unknown[64.8.20.35] This means that the client sent

Re: Understanding rate limiting with anvil.

or later to work with that bang-style notation. Cheers Stefan

Re: Delivery failure for one recipient results in re-delivery for all

- alias is present, alias expansion isn't done on every delivery attempt but instead the alias is expanded and the result of that expansion is saved, at least according to this thread: http://archives.neohapsis.com/archives/postfix/2009-06/0396.html I could be terribly wrong, though. Ciao Stefan

Received: headers and mail forwarding loops

to detect a mail forwarding loop? Cheers Stefan

Re: Received: headers and mail forwarding loops

* Wietse Venema wie...@porcupine.org wrote: Stefan Förster: This is working as expected. If I create a new mail and forcibly insert the above header before I submit it, I get a NDR saying that there is a mail forwarding loop for c...@example.net - which is As documented, Postfix uses

Re: sieve instead procmail?

with Sieve filtering? Cheers Stefan

Re: sieve instead procmail?

* Michael Monnerie michael.monne...@is.it-management.at wrote: On Mittwoch 22 Juli 2009 Stefan Förster wrote: What excatly are you trying to do with Sieve filtering? Yes, zarafa-dagent delivers, but you can tell it where: See http://forums.zarafa.com/viewtopic.php?f=11t=2759 Example

Re: postfix strip æø å (highbit chars)

headers? Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 I'm not evil, I'm ... differently motivated!

Re: How do I deliver to a program using a wild card

of mydestination). In /etc/aliases, add localfax: |/path/to/program and issue newaliases. Cheers Stefan

Re: How do I deliver to a program using a wild card

* Stefan Förster cite+postfix-us...@incertum.net wrote: /(.*)@fax.send/ local...@my.domain,${1}final.mailserver /(.*)@fax.send/ local...@my.domain,$...@final.mailserver The @ was missing.

Re: postscreen logging question

On Tue, 2009-06-16 at 16:43 +0200, Ralf Hildebrandt wrote: I'm trying out postscreen. No unexpected explosions so far. ... May I ask what exactly postscreen is? I've never heard about it and can not find any references in the web... Thanks and regards -stefan-

Re: LDAP Email Recipients Query Script - Feedback Appreciated

for sure that there is a LDAP protocol settings dialogue in the Exchange server administration GUI. Perhaps someone else can shed some light on this one. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #54: Jetzt mit neuem, umfangreichem Softwarepaket

Re: Virtual accounts.

this with fetchmail. user foo there with password bar is baz here. virtual_alias_domains = hotmail.com yahoo.com Don't do that. It basically tells your Postfix to lookup all mails for hotmail/yahoo in this table, and if the receiver is not found, the mail is rejected/bounced. Ciao Stefan -- Stefan

howto HOLD all mails for a specific user?

- but I only want to prevent one special mailbox to not receive any mail... Thanks and regards -stefan-

Re: howto HOLD all mails for a specific user?

). After that, I have to reconstruct the mailbox database (I use cyrus imap server). I don't want any new mails to come in during this recovery phase because I have bad experience with this... Thanks and regards -stefan-

logging stuff: NOQUEUE

a NOQUEUE and when to expect a conrete queue ID? Thanks for any hints Regards -stefan-

Re: logging stuff: NOQUEUE

valid recipient, all log messages regarding invalid DATA / END-OF-DATA restrictions will contain a QUEUEID (!=NOQUEUE). Ok? Thanks and regards -stefan-

Re: order of local_recipient_maps, smtpd_recipient_restrictions

On Thu, 2009-06-11 at 13:54 +0200, Magnus Bäck wrote: On Thu, June 11, 2009 1:03 pm, Stefan Palme said: local_recipient_maps .vs. smtpd_recipient_restrictions - can anybody tell me which test happens first on incoming emails? You're comparing apples and oranges, but I understand what you

strange mail protocol

temporarily deferred immediately followed by status=sent (250 ok). Thanks and regards -stefan-

Re: strange mail protocol

I am confused about the line 451 Message temporarily deferred immediately followed by status=sent (250 ok). 4xx are temporary Errors and Postfix tries the next MX. 68.142.202.247 != 98.137.54.237 Args, obviously you are right. Sorry for the noise... Thanks -stefan-

Re: Impossible to send mail using SSL for SMTP connection.

mail_version = 2.5.5 I think an initial greeting of 220 fully.qualified.hostname is pretty common this days - especially with so called anti spam, anti malware appliances. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 UNIX *is* user-friendly; it's just picky about

Re: Postfix-2.6.0 RPM

of a *nix system. To remove the MTA package from system breaks a lot of dependencies. To avoid that you install your own package. Greetings Stefan signature.asc Description: This is a digitally signed message part.

size limitation for id in postfix smtp-client/sasl?

PROTECTED]:password [EMAIL PROTECTED] [EMAIL PROTECTED]:passwrod - cu, Stefan

Re: TLS Logging

19 10:09:09 mailr postfix/smtp[25113]: TLS connection established to burn.qinetiq.com: TLSv1 with cipher AES256-SHA (256/256 bits) I don't know what exactly AES256-SHA is, but obviously, it is not a null cipher, so there is a certificate to verify, and verification fails. Cheers Stefan

Re: per-user recipient_restrictions?

On Wed, 2008-11-12 at 09:22 -0500, Wietse Venema wrote: Stefan Palme: Hi all, I have something like this in my main.cf: smtpd_recipient_restrictions = reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain

per-user recipient_restrictions?

message to the original sender). Any hints how to solve this? Thanks and regards -stefan-

Re: [OT] postmaster@ for customers' domains?

... Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #181: Internet - Das Internet ist durch die preußische Landordnung vorhergesagt worden. (BMJ-Mitarbeiter Dr. Matthias Korte interpretiert Bundesverwaltungsrichter Prof. Dr. Dr. Jörg Berkemann)

Re: [OT] postmaster@ for customers' domains?

* Neil [EMAIL PROTECTED] wrote: On 8 Nov 2008, at 03:46, Stefan Förster wrote: This has never been a problem for me because the amount of junk email sent to postmaster and abuse is absolutely negligible. I don't want to know what happens, though, if that address was used every day... I've

Re: How to run patch file making correction

for example postfix-pcre, postfix-mysql or postfix-cdb, depending on your need. Make sure you carefully read (and understand) http://www.backports.org/dokuwiki/doku.php?id=instructions Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 One World, one Web, one Program

Re: authentication failed

programmers ;-) Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #132: Plug and Play - Kondome. (Rolf Siebrecht)

Re: Remote delivery concurrency

not receive a server response on a hanging connection and smtp_data_done_timeout kicks in, the mail might be delivered multiple times. Cheers Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9

Re: Remote delivery concurrency

attempt and the relevant log entries, because I suspect a mis-use of the different Postfix address classes (see: http://www.postfix.org/ADDRESS_CLASS_README.html). Please do obfuscate any logs you post here as needed to protect your user's privacy. Cheers Stefan -- Stefan Förster http

Re: Which FileSystem do you use on your postfix server?

programs. Conclusion: Don't put valuable data on ReiserFS. Don't do premature optimization. You can always change filesystems if your tests show performance gains and you run into performance shortages. Cheers Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9

problems adding 2nd instance.

regards, Stefan

RE: problems adding 2nd instance.

that paramter for the 2nd .. or 3rd instance pointing to a different data directory ... Brian Kind regards, Stefan

Re: System stressed

* Joey [EMAIL PROTECTED] wrote: I see several of these when watching top. smtpd -n smtp -t inet -u -o stress If Postfix was operating in stress mode, you would see -o stress=yes. Ciao Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 25 Zeichen, daß Du

bounce processing

messages I receive and make my bounce processor detect the various formats and extract the relevant information from it. Maybe there is a more general approach? Thanks and regards -stefan-

Re: bounce processing

On Fri, 2008-09-05 at 06:52 -0400, Wietse Venema wrote: Stefan Palme: Hi all, Our mail server is configured to use special envelope sender addresses for some outgoing mail so that bounces can be processed automatically. The bounce processor is a self-made script. Are there any hints

RE: [SPAM?] Re: First Time Configuration assistance

to recipient address verification on the frontend mail server (postfix), so that postfix always asks the Domino server is this a valid address? Regards -stefan-

Re: [OT] Replacing Postfix servers

On Sunday 31 August 2008 01:06, Sahil Tandon wrote: Stefan Jakobs [EMAIL PROTECTED] wrote: 3) Keep the actual server organisation: 4 servers with postfix, amavisd, spamassassin, clamav. Advantage: Known configuration, easy to extend Disadvantage: problem with loadbalancing Would you

[OT] Replacing Postfix servers

to tell. Thanks for your patience with these offtopic topic (and my bad English). Greetings Stefan pgpScNfuihGeW.pgp Description: PGP signature

Re: Creating a dummy filter

spamassassin: Regards -stefan-

caching information about bouncing receipients?

to be kind of passive address verification during mail delivery. Thanks and regards -stefan-

append_at_myorigin for envelope addresses?

]). But what makes postfix accept the non-fully-qualified envelope sender and recipient addresses? I don't want to allow this, I want to enforce MAIL FROM: [EMAIL PROTECTED] etc... Thanks and regards -stefan-

Re: append_at_myorigin for envelope addresses?

= permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_recipient, ... After putting the reject_non_fqdn_recipient in the first place everything works as expected. Regards -stefan-

Re: envelope recipient in mail headers?

... by mail.example.com for [EMAIL PROTECTED] while a BCC recipient (e.g. [EMAIL PROTECTED]) would get a mail with Received: from ... by mail.hell.net for [EMAIL PROTECTED] I don't see any privacy violation. What exactly do you mean with privacy of the BCC recipients ? Regards -stefan-

envelope recipient in mail headers?

: header? Maybe by specifing default_destination_recipient_limit = 1 ? If yes, has default_destination_recipient_limit=1 any bad side effects? Thanks and regards -stefan-

bounce delivery report

Hi all, when postfix creates a bounce message, a Delivery report will be attached describing the problem. Is it possible to modify the format of this delivery report, e.g. adding a line to it? Regards -stefan-

Re: bounce delivery report

Is it possible to modify the format of this delivery report, e.g. adding a line to it? http://postfix.state-of-mind.de/bounce-templates/index.html Great, thanks! -stefan-

canonical_classes per sender?

, while the second rule should be applied to both envelope_sender and header_sender. So I would need a per-sender sender_canonical_classes configuration directive... Is this possible? Thanks and regards -stefan-

Re: Erronous Legal bounces... query

/BACKSCATTER_README.html Johan A Beginning postix admin The first rule to be a good postfix admin: don't misspell postfix ;-) -stefan-

Re: [OT] Using [EMAIL PROTECTED] [was: best way for website sending emails]

to this address without error), but silently discarded by the receiving server, is NOT a good practice and will cause bad reputation. Why? -stefan-

Re: [OT] Using [EMAIL PROTECTED] [was: best way for website sending emails]

reputation I have to care about. We are talking about reputation in sense of being blacklisted - see the original thread for the full discussion, and especially the postings of mouss. Thanks Best regards -stefan-

Re: bounces to reply-to or return-path?

perfect :-) I don't want to use the Return-Path for changing any behaviour, I only want to make sure, that normal replies to an email go to another recipient (using the Reply-To-Header) than bounce messages... Regards -stefan-

Re: best way for website sending emails

-stefan-

Re: best way for website sending emails

policy daemon for this, or is this possible with pure postfix configuration? Thanks and regards -stefan-

Re: best way for website sending emails

to be sure to not code something what already exists natively in postfix :-) Regards -stefan-

one verify.db with two postfix instances?

for help. Greetings Stefan

<    1   2   3   4