Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 22:17, Wietse Venema wrote: Jonathan Tripathy: [The backup MX host accepts mail from forged local sender addresses, but the backup MX does not support SASL]. Actually, the MAILER-DAEMON message doesn't get queued at all! It just discards it when it can't find the user (If th

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: [The backup MX host accepts mail from forged local sender addresses, but the backup MX does not support SASL]. > > Actually, the MAILER-DAEMON message doesn't get queued at all! It just > > discards it when it can't find the user (If the from address was > > notarealaddr...@my

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 22:03, Jonathan Tripathy wrote: On 21/02/2010 22:00, Jonathan Tripathy wrote: On 21/02/2010 21:55, Wietse Venema wrote: Jonathan Tripathy: My main issue is that my backup mx doesn't have sasl enabled (It's relay only..) Why would your users submit mail to the backup MX ho

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 22:00, Jonathan Tripathy wrote: On 21/02/2010 21:55, Wietse Venema wrote: Jonathan Tripathy: My main issue is that my backup mx doesn't have sasl enabled (It's relay only..) Why would your users submit mail to the backup MX host? Wietse You're correct, they woudn't. I

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 21:55, Wietse Venema wrote: Jonathan Tripathy: My main issue is that my backup mx doesn't have sasl enabled (It's relay only..) Why would your users submit mail to the backup MX host? Wietse You're correct, they woudn't. I just don't like the thought tha

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: > My main issue is that my backup mx doesn't have sasl enabled (It's relay > only..) Why would your users submit mail to the backup MX host? Wietse

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 21:31, Jonathan Tripathy wrote: On 21/02/2010 21:16, Wietse Venema wrote: Jonathan Tripathy: You can also specify MULTIPLE maps: /etc/postfix:main.cf smtpd_sender_login_maps = mysql:whatever hash:/etc/postfix/default /etc/postfix/default: @example.com root Don

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 21:16, Wietse Venema wrote: Jonathan Tripathy: You can also specify MULTIPLE maps: /etc/postfix:main.cf smtpd_sender_login_maps = mysql:whatever hash:/etc/postfix/default /etc/postfix/default: @example.com root Don't forget to postmap the /etc/postfix/default f

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: > > You can also specify MULTIPLE maps: > > > > /etc/postfix:main.cf > > smtpd_sender_login_maps = mysql:whatever hash:/etc/postfix/default > > > > /etc/postfix/default: > > @example.com root > > > > Don't forget to postmap the /etc/postfix/default file. > > Great! Tha

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 20:57, Wietse Venema wrote: Wietse Venema: Jonathan Tripathy: You forgot to set an owner rule for @domain. How would I do that? I'm not sure if this is relavent but I'm currently using: For complete description of a) the smtpd_sender_login_maps dat

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Wietse Venema: > Jonathan Tripathy: > > > You forgot to set an owner rule for @domain. > > > > How would I do that? I'm not sure if this is relavent but I'm currently > > using: > > For complete description of > > a) the smtpd_sender_login_maps database queries > > b) the order of queries > >

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: > > You forgot to set an owner rule for @domain. > > How would I do that? I'm not sure if this is relavent but I'm currently > using: For complete description of a) the smtpd_sender_login_maps database queries b) the order of queries See: http://www.postfix.org/postconf.5.h

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
You forgot to set an owner rule for @domain. Wietse How would I do that? I'm not sure if this is relavent but I'm currently using: smtpd_sender_login_maps=mysql:/etc/postfix/mysql_login_maps.cf and mysql_login_maps.cf is: hosts = 127.0.0.1 user = password = dbname = mailser

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Wietse Venema: > Jonathan Tripathy: > > On 21/02/2010 19:34, Darren Pilgrim wrote: > > > Jonathan Tripathy wrote: > > >> Sorry I forgot to state that im only concerned with MY server here. > > >> For example, I don't want someone to telnet to MY postfix server, and > > >> give m...@mydomain.com f

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: [ Charset ISO-8859-1 unsupported, converting... ] > > > On 21/02/2010 19:34, Darren Pilgrim wrote: > > Jonathan Tripathy wrote: > >> Sorry I forgot to state that im only concerned with MY server here. > >> For example, I don't want someone to telnet to MY postfix server, and

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 19:39, LuKreme wrote: On 21-Feb-2010, at 12:22, Sahil Tandon wrote: Sorry I forgot to state that im only concerned with MY server here. For example, I don't want someone to telnet to MY postfix server, and give m...@mydomain.com for both sender and receiver What's the matter wi

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 19:34, Darren Pilgrim wrote: Jonathan Tripathy wrote: Sorry I forgot to state that im only concerned with MY server here. For example, I don't want someone to telnet to MY postfix server, and give m...@mydomain.com for both sender and receiver Require authentication, set up sm

Re: Banned spoofed address from my domain

2010-02-21 Thread LuKreme
On 21-Feb-2010, at 12:22, Sahil Tandon wrote: Sorry I forgot to state that im only concerned with MY server here. For example, I don't want someone to telnet to MY postfix server, and give m...@mydomain.com for both sender and receiver What's the matter with te SPF configuration you already hav

Re: Banned spoofed address from my domain

2010-02-21 Thread Sahil Tandon
On Sun, 21 Feb 2010, Jonathan Tripathy wrote: > On 21/02/2010 19:05, Wietse Venema wrote: > >Jonathan Tripathy: > >>Hi Folks, > >> > >>To prevent spammers sending email from spoofed addressed that appear > >>from my domain, I currently use SPF. I'm having second thoughts about > >>using SPF, so is

Re: Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
On 21/02/2010 19:05, Wietse Venema wrote: Jonathan Tripathy: Hi Folks, To prevent spammers sending email from spoofed addressed that appear from my domain, I currently use SPF. I'm having second thoughts about using SPF, so is there any other way to make sure that only authenticated users

Re: Banned spoofed address from my domain

2010-02-21 Thread Wietse Venema
Jonathan Tripathy: > Hi Folks, > > To prevent spammers sending email from spoofed addressed that appear > from my domain, I currently use SPF. I'm having second thoughts about > using SPF, so is there any other way to make sure that only > authenticated users can send email from my domain? Rec

Banned spoofed address from my domain

2010-02-21 Thread Jonathan Tripathy
Hi Folks, To prevent spammers sending email from spoofed addressed that appear from my domain, I currently use SPF. I'm having second thoughts about using SPF, so is there any other way to make sure that only authenticated users can send email from my domain? Thanks