Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Jan-Frode Myklebust
On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: I fail to see how controlling your users From: addresses will affect a backscatterer.org listing. I'm thinking we can accept sending some backscatter to our own customers, at least as long as it's authenticated backscatter and we can

Maximum number of delivery of emails

2010-09-07 Thread Avinash Pawar // Viva
Hi, I want to send 1 Lacs emails per hour. Please suggest me the steps to achieve this. -- Incase of any further queries, Please feel free to mail me or contact me on the numbers provided below. Thanks Regards, Avinash Pawar Software Engineer. Viva Infomedia Pvt. Ltd. 242, Oshiwara

Unable to put recepient access

2010-09-07 Thread Sharma, Ashish
Hi, I have a mail receiving postfix deployed. On this I am trying to block emails that are to sent to 'donotre...@mydomain.com' For this I am doing the following: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blockList, reject_unauth_destination,

Re: Unable to put recepient access

2010-09-07 Thread Simon Waters
On Tuesday 07 September 2010 10:11:02 Sharma, Ashish wrote: Sep 7 04:53:55 ip-10-194-99-63 postfix/smtpd[942]: fatal: open database /etc/postfix/blockList.db: No such file or directory Sep 7 04:53:56 ip-10-194-99-63 postfix/master[938]: warning: process /usr/libexec/postfix/smtpd pid 942

Limit RCPT TO in Postfix

2010-09-07 Thread Claudio Prono
Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. Here is an example: telnet mailserver 25 Trying XXX.XXX.XXX.XXX... Connected to mailserver. Escape character is '^]'. 220 mailserver ESMTP helo mail 250

Re: Postfix replacement for Icewarp MUA.

2010-09-07 Thread Jamrock
Seann nombran...@tsukinokage.net wrote in message news:4c819dd3.8060...@tsukinokage.net... That is what I was figuring. Trying two different locations with the CA file I was using broke, when according to the list's information and my own reading it should work, turned out to require me to

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 01:50:30PM +0530, Avinash Pawar // Viva wrote: I want to send 1 Lacs emails per hour. Most readers of this (international) list do not know that 1 lac is 100,000. This usage is largely confined to India. Please suggest me the steps to achieve this. This is

Re: Maximum number of delivery of emails

2010-09-07 Thread Ralf Hildebrandt
* Victor Duchovni victor.ducho...@morganstanley.com: On Tue, Sep 07, 2010 at 01:50:30PM +0530, Avinash Pawar // Viva wrote: I want to send 1 Lacs emails per hour. Most readers of this (international) list do not know that 1 lac is 100,000. This usage is largely confined to India. Ah! I'm

Unable to drop mails

2010-09-07 Thread Sharma, Ashish
Hi, I have a mail receiving postfix deployed. On this I am trying to block emails that are to sent to 'donotre...@mydomain.com' For this I am doing the following: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blockList, reject_unauth_destination,

Re: Maximum number of delivery of emails

2010-09-07 Thread Avinash Pawar // Viva
Hi, How many mails can I sent using basic configuration of postfix? Also please give me some idea about postfix performance tuning. On Tue, Sep 7, 2010 at 6:44 PM, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Tue, Sep 07, 2010 at 01:50:30PM +0530, Avinash Pawar // Viva wrote:

Re: Unable to drop mails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 01:27:17PM +, Sharma, Ashish wrote: Hi, I have a mail receiving postfix deployed. On this I am trying to block emails that are to sent to 'donotre...@mydomain.com' For this I am doing the following: smtpd_recipient_restrictions =

Re: Unable to drop mails

2010-09-07 Thread Claus
Hi, * Now currently the mails are getting rejected with SMTP error code 554, and the mailbox of the sender gets a notification from it's local mail server about the failure. Is there any way I can quietly 'drop' the emails for the above mentioned case. Then you shouldn't block them.

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 06:50:17PM +0530, Avinash Pawar // Viva wrote: How many mails can I sent using basic configuration of postfix? This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 msgs/sec per Postfix instance. A

Re: Can postfix work with a TLS, authenticated smtp relay server?

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 12:53:13PM +0800, Richard Chapman wrote: I am running postfix 2.3.3 as part of Centos 5.5. I am trying to set up a hybrid mail system which involves postfix, dovecot and Google Apps. Ideally - I would like the email clients to use a authenticated TLS connection to

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Noel Jones
On 9/7/2010 5:16 AM, Claudio Prono wrote: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. ... Any hint is well accepted. This is a basic function of the SMTP protocol.

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Noel Jones
On 9/7/2010 2:32 AM, Jan-Frode Myklebust wrote: On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: I fail to see how controlling your users From: addresses will affect a backscatterer.org listing. I'm thinking we can accept sending some backscatter to our own customers, at least as

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Claudio Prono
Noel Jones ha scritto: On 9/7/2010 5:16 AM, Claudio Prono wrote: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. .. Any hint is well accepted. This is a basic function of the SMTP protocol. Ok,

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Noel Jones
On 9/7/2010 10:23 AM, Claudio Prono wrote: Noel Jones ha scritto: On 9/7/2010 5:16 AM, Claudio Prono wrote: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. .. Any hint is well accepted. This is a

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 10:40:23AM -0500, Noel Jones wrote: Ok, this is right, but is also an information leak... with rcpt to i can enumerate the local users of the system, and for me this is not too good... No way to fix this? This is part of the design of SMTP. You can call it a feature

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Jasper Jongmans
On 2010-09-07 17:23, Claudio Prono wrote: Ok, this is right, but is also an information leak... with rcpt to i can enumerate the local users of the system, and for me this is not too good... No way to fix this? If it is not necessary for those local users to receive mail, you could alter

Re: Maximum number of delivery of emails

2010-09-07 Thread lst_hoe02
Zitat von Victor Duchovni victor.ducho...@morganstanley.com: On Tue, Sep 07, 2010 at 06:50:17PM +0530, Avinash Pawar // Viva wrote: How many mails can I sent using basic configuration of postfix? This question has no answer, except to say that on typical commodity server hardware you are

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Ralf Hildebrandt
* Claudio Prono claudio.pr...@atpss.net: Ok, this is right, but is also an information leak... with rcpt to i can enumerate the local users of the system, and for me this is not too good... No way to fix this? Turn off SMTP :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread mouss
Le 07/09/2010 16:17, Noel Jones a écrit : On 9/7/2010 2:32 AM, Jan-Frode Myklebust wrote: On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: I fail to see how controlling your users From: addresses will affect a backscatterer.org listing. I'm thinking we can accept sending some

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 06:13:23PM +0200, lst_ho...@kwsoft.de wrote: This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 msgs/sec per Postfix instance. A queue-manager performance test I ran 2 years ago showed that at

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Jeroen Geilman
On 09/07/2010 12:16 PM, Claudio Prono wrote: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. Here is an example: telnet mailserver 25 Trying XXX.XXX.XXX.XXX... Connected to mailserver. Escape character is

Postfix rejecting mail when plenty of space

2010-09-07 Thread Noel David Torres Taño
Hello all: I have /var/mail mounted separately and plenty of space. But when / get short on space I saw things like this: Sep 7 18:37:24 tochox postfix/smtpd[25798]: connect from (somewhere) Sep 7 18:37:24 tochox postfix/smtpd[25798]: NOQUEUE: reject: MAIL from (somewhere): 452 4.3.1

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Jeroen Geilman
On 09/07/2010 06:57 PM, mouss wrote: Le 07/09/2010 16:17, Noel Jones a écrit : On 9/7/2010 2:32 AM, Jan-Frode Myklebust wrote: On Mon, Sep 06, 2010 at 06:29:28PM -0500, Noel Jones wrote: I fail to see how controlling your users From: addresses will affect a backscatterer.org listing. I'm

Re: Postfix rejecting mail when plenty of space

2010-09-07 Thread Joe
Noel David Torres Taño wrote: Hello all: I have /var/mail mounted separately and plenty of space. But when / get short on space I saw things like this: Sep 7 18:37:24 tochox postfix/smtpd[25798]: connect from (somewhere) Sep 7 18:37:24 tochox postfix/smtpd[25798]: NOQUEUE: reject: MAIL

Re: Maximum number of delivery of emails

2010-09-07 Thread Jeroen Geilman
On 09/07/2010 08:07 PM, Victor Duchovni wrote: On Tue, Sep 07, 2010 at 06:13:23PM +0200, lst_ho...@kwsoft.de wrote: This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 msgs/sec per Postfix instance. A queue-manager

Re: Postfix rejecting mail when plenty of space

2010-09-07 Thread Noel David Torres Taño
On Martes 07 Septiembre 2010 19:21:02 Joe escribió: Noel David Torres Taño wrote: Hello all: I have /var/mail mounted separately and plenty of space. But when / get short on space I saw things like this: Sep 7 18:37:24 tochox postfix/smtpd[25798]: connect from (somewhere) Sep 7

Re: Trying to use different header_checks depending on TCP port for incoming mail

2010-09-07 Thread Ralph Seichter
On 06.09.10 19:07, Jeroen Geilman wrote: postconf(5) says cleanup_service_NAME - I suspect it will work once he changes that :) You're right, I did not spot this. ;-) When I use cleanup_service_name instead of cleanup_service, it works. This is a feasible solution, as long as the submission

Re: Maximum number of delivery of emails

2010-09-07 Thread lst_hoe02
Zitat von Victor Duchovni victor.ducho...@morganstanley.com: On Tue, Sep 07, 2010 at 06:13:23PM +0200, lst_ho...@kwsoft.de wrote: This question has no answer, except to say that on typical commodity server hardware you are unlikely to send more than ~3,000 msgs/sec per Postfix instance. A

Re: Trying to use different header_checks depending on TCP port for incoming mail

2010-09-07 Thread Ralph Seichter
On 06.09.10 23:13, mouss wrote: you need to review your master.cf and main.cf for typos and space/comment errors. As Jeroen Geilman pointed out, it is cleanup_service_name instead of cleanup_service. I recommend using -o var=${main_cf_var} where variables are defined in main.cf. This

Re: Limit RCPT TO in Postfix

2010-09-07 Thread Terry Carmen
Quoting Claudio Prono claudio.pr...@atpss.net: Hello all, I use Postfix with mysql database for the users lookup. I have recently found an information leak with the RCPT TO command. Here is an example: telnet mailserver 25 Trying XXX.XXX.XXX.XXX... Connected to mailserver. Escape

Relay to another internal server using TLS

2010-09-07 Thread james.raines
Hello all, I am looking for a way to relay from one internal postfix box to another internal postfix box using TLS. Basically, I have several servers with applications that need to relay HIDS events and system logs etc. to the central postfix email server for normal distribution from there.

Re: Relay to another internal server using TLS

2010-09-07 Thread Noel Jones
On 9/7/2010 3:17 PM, james.rai...@heartland-ins.com wrote: Hello all, I am looking for a way to relay from one internal postfix box to another internal postfix box using TLS. Basically, I have several servers with applications that need to relay HIDS events and system logs etc. to the central

Re: Maximum number of delivery of emails

2010-09-07 Thread Victor Duchovni
On Tue, Sep 07, 2010 at 09:07:54PM +0200, lst_ho...@kwsoft.de wrote: Single-core CPU limit. The system had 4 CPUs and the load peaked at ~25%. The queue manager is single-threaded, and must do a fair amount of message envelope processing. So the current design tops out at ~2-3k msgs/sec,

Re: Maximum number of delivery of emails

2010-09-07 Thread Wietse Venema
Victor Duchovni: On Tue, Sep 07, 2010 at 09:07:54PM +0200, lst_ho...@kwsoft.de wrote: Single-core CPU limit. The system had 4 CPUs and the load peaked at ~25%. The queue manager is single-threaded, and must do a fair amount of message envelope processing. So the current design tops out at

Re: set envelope sender = sasl authenticated user ?

2010-09-07 Thread Noel Jones
On 9/7/2010 4:36 PM, Jan-Frode Myklebust wrote: On Tue, Sep 07, 2010 at 08:20:36PM +0200, Jeroen Geilman wrote: On 09/07/2010 06:57 PM, mouss wrote: OP is an ISP providing outbound relay to residential users. his problem is not easy to solve. Thanks for understanding. I´ve gotten

Re: Can postfix work with a TLS, authenticated smtp relay server?

2010-09-07 Thread Richard Chapman
Thanks for your incredibly useful advice Victor... May I ask some follow up questions?.. On 7/09/2010 10:06 PM, Victor Duchovni wrote: On Tue, Sep 07, 2010 at 12:53:13PM +0800, Richard Chapman wrote: I am running postfix 2.3.3 as part of Centos 5.5. I am trying to set up a hybrid mail

reject_unknown_client_hostname light?

2010-09-07 Thread pf at alt-ctrl-del.org
Am I missing something obvious? With many ISPs providing generic PTR, reject_unknown_reverse_client_hostname is too gentle. I'd really like to implement reject_unknown_client_hostname, but I've seen too many cases where address-name mapping = exists, the name-address mapping = exists, BUT