Re: per domain virtual_transport

2016-04-20 Thread Udo Rader
>> Now the only option I find for such a task is virtual_transport, but as >> it seems, this option is not table capable (or am I wrong)? > > You specify an LMTP or SMTP client that forwards mail to the final > destination. > >> with "virtual_transport_map" then containing something like this >>

per domain virtual_transport

2016-04-20 Thread Udo Rader
Hi, so far I've setup multiple postfix instances being final destinations for one or more domains and I have successfully setup some postfix instances being proxying spam/virus checking gateways only. For final destination delivery, we are utilizing LDAP that is all well integrated using

how to disable PLAIN authentication for unencrypted connections

2016-02-19 Thread Udo Rader
Hi, is there a possibility to only allow PLAIN authentication when TLS or similar encryption has been negotiated? So far, I only found a way to either completely disable PLAIN authentication or allow it in general. Udo

virtual aliases vs. dovecot users

2015-11-29 Thread Udo Rader
Hi, I'm in the process of upgrading our old mailserver (postfix, amavis & dovecot, all LDAP fed). Previously not all users were virtual, a situation that I want to get rid of. So far, all works nicely except for one thing: when amavis bans a locally originating email, it tries to send an email

slightly OT: how do others fight brute force SASL attacks

2010-11-25 Thread Udo Rader
Hi, in the past couple of days we have been somewhat hit by quite a lot of brute force SASL related attacks. I've now adapted fail2ban to catch those attacks, but I am wondering how others fight those attacks. Maybe there is something similar like a RBL for brute force attacks? -- Udo Rader

Re: Postfix MX Real-Time Anit-SPAM Firewall

2010-08-07 Thread Udo Rader
for reverse pointer (PTR), Real-Time Block Lists (RBL) records, etc. ---CUT--- -- Udo Rader, CTO http://www.bestsolution.at http://riaschissl.blogspot.com

Re: SPF Not Pass None - patch policyd-spf

2010-08-07 Thread Udo Rader
On 08/07/2010 04:35 AM, junkyardma...@verizon.net wrote: patch policyd-spf (0.8.0) to support rejection of no SPF record. rejection based on SPF, this is a frightening idea. -- Udo Rader, CTO http://www.bestsolution.at http://riaschissl.blogspot.com

Re: please help!

2009-12-12 Thread Udo Rader
Sahil Tandon wrote: On Dec 11, 2009, at 12:49 PM, Udo Rader list...@bestsolution.at wrote: Victor Duchovni wrote: On Fri, Dec 11, 2009 at 04:16:40PM +0100, Udo Rader wrote: Umar Draz wrote: I have postfix server with SMTP authentication. My client's are using MS outlook for sending

Re: please help!

2009-12-11 Thread Udo Rader
mail server send his/her email as u...@yahoo.com anywhere. Would you please help how i can stop this. I want user only sent outgoing email using my domain name. http://www.postfix.org/postconf.5.html#reject_unknown_sender_domain -- Udo Rader, CTO http://www.bestsolution.at http

Re: please help!

2009-12-11 Thread Udo Rader
Victor Duchovni wrote: On Fri, Dec 11, 2009 at 04:16:40PM +0100, Udo Rader wrote: Umar Draz wrote: I have postfix server with SMTP authentication. My client's are using MS outlook for sending/receiving emails. my domain name is = foo.com but i am facing a very strange problem. If someone

Re: OT: need some advice as to distro

2009-12-01 Thread Udo Rader
topic noise from this usually very informative and helpful mailing list? If you don't fulfill my plea, I promise that I will claim that postfix runs best under cygwin ... -- Udo Rader, CTO http://www.bestsolution.at http://riaschissl.blogspot.com

postfix gateway with empty relay_recipient_maps plus VRFY

2009-11-30 Thread Udo Rader
gateway used the SMTP VRFY command with the transport endpoints before actually sending a email to them. That way we could get rid of the potentially huge relay_recipient_maps. Is this doable? -- Udo Rader, CTO http://www.bestsolution.at http://riaschissl.blogspot.com

Re: postfix gateway with empty relay_recipient_maps plus VRFY

2009-11-30 Thread Udo Rader
Eero Volotinen wrote: Udo Rader wrote: Hi, I know, this issue has been discussed quite often, but nevertheless I am just wondering if something was possible to circumvent the missing list of recipients. Imagine a situation where there is a main postfix gateway used for spam defence

Re: is my server an open relay?

2009-08-20 Thread Udo Rader
#mynetworks [2] http://www.postfix.org/STANDARD_CONFIGURATION_README.html -- Udo Rader, CTO http://www.bestsolution.at http://riaschissl.blogspot.com

Re: is my server an open relay?

2009-08-20 Thread Udo Rader
/DEBUG_README.html#mail show what postconf -n gives and post log excerpts for the described problem from the affected server. -- Udo Rader, CTO http://www.bestsolution.at http://riaschissl.blogspot.com

Re: is my server an open relay?

2009-08-20 Thread Udo Rader
or an email address? And your problem is probably that you did not define who is allowed to use your server as a relay, read http://www.postfix.org/postconf.5.html#smtpd_client_restrictions it should be something like: smtpd_client_restriction = permit_mynetworks reject -- Udo Rader, CTO

Re: Taking over for another admin

2009-02-04 Thread Udo Rader
as it can use a crypted-password from a mysql database, and read/write maildir... Dovecot can do that. Hmm, I've never heard of dovecot being able to deal with non-plaintext passwords in connection with SASL. Are you sure that that can be done without patching? -- Udo Rader http

Re: Postfix - Blackberry

2009-01-23 Thread Udo Rader
based. The difficult (and expensive) way. But to be honest: just don't do it. In terms of supporting open standards, even an iPhone or windows mobile based devices are ways better, IMHO. From a postfix side there is nothing special about it, so this is quite out of scope for this ML. -- Udo

Re: postfix: set up pop3 / imap with postfix..

2008-12-30 Thread Udo Rader
. There are many POP3/IMAP servers that you can choose from (eg. cryrus-imapd or dovecot), but that depends on your requirements and is certainly beyond the scope of this postfix ML. -- Udo Rader, CTO http://www.bestsolution.at

Re: RBL Postfix

2008-12-16 Thread Udo Rader
neugi schrieb: 2008/12/15 Udo Rader list...@bestsolution.at: neugi schrieb: how can i check if users use sasl or not? are there any special settings in the mailclient? best 2008/12/15 Charles Marcus cmar...@media-brokers.com: On 12/15/2008, neugi (neu...@gmail.com) wrote

Re: RBL Postfix

2008-12-15 Thread Udo Rader
=client.example.com[192.168.17.34], sasl_method=CRAM-MD5, sasl_username=whoever --CUT if not, your users are not using SMTP auth and this is a client side issue. 2. please don't top post :-) -- Udo Rader http://www.bestsolution.at

Re: Spam coming from my own E-mail address

2008-12-05 Thread Udo Rader
from sending E-mail on my system? http://www.postfix.org/BACKSCATTER_README.html -- Udo Rader http://www.bestsolution.at

Re: Spam coming from my own E-mail address

2008-12-05 Thread Udo Rader
Sahil Tandon schrieb: On Dec 5, 2008, at 8:49 AM, Udo Rader [EMAIL PROTECTED] wrote: Troy Dixler schrieb: lately I've been getting a lot of spam where they are using my own E-mail address as the sender. The problem (of course) with going in and blocking my own E-mail address is I won't

Re: Hello Postfix guys

2008-10-31 Thread Udo Rader
://lists.sourceforge.net/lists/listinfo/jamm-users As per alternatives to LDAP backends, there are many. gq [1] for example would be such a tool, but this is all very off-topic for this list. [1] http://gq-project.org/ - -- Udo Rader http://www.bestsolution.at -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU

Re: Postfix listening on 25, unable to telnet to 25 - my first config

2008-10-13 Thread Udo Rader
? -- Udo Rader, CTO http://www.bestsolution.at

Re: Updated RBL's spam fighting

2008-10-03 Thread Udo Rader
, # reject_rbl_client dnsbl.ahbl.org, we additionally have reject_rbl_client ix.dnsbl.manitu.net, reject_rbl_client psbl.surriel.com, and a good site for RBL comparison is http://stats.dnsbl.com/ -- Udo Rader, CTO http://www.bestsolution.at