RE: DKIM signing problem

2011-09-19 Thread Murray S. Kucherawy
Wietse's advice is the first thing I would try: Eliminate anything that modifies your message after signing. The most common signature failure in our analysis apart from DNS setup problems has been a message that was malformed in the first place, so when it gets fixed someplace downstream, the

Re: bcc send map issue - duplication when mail sent from other host

2011-09-19 Thread Jeroen Geilman
On 2011-09-19 07:34, Michael Ribbons wrote: I have ruled out the amavis setup. What I need is a way to specify sender_bcc_maps only if the mail is sent from an authenticated user - This may be achievable by having a separate cleanup process for submission, but I don't want to use submission -

Re: Tony's Quick Guide to CSA

2011-09-19 Thread Jeroen Geilman
On 2011-09-19 03:40, Benny Pedersen wrote: was reading something about client smtp auth :=) http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/antiforgery/csa.html hope it will be supported in postfix Thanks Tony for make the guide That would be non-trivial to implement in postfix, and since

Postfix Dovecot SASL LDAP problem

2011-09-19 Thread Markus Bajones
Hi, I'm trying to implement the following setup. Kerberos with LDAP-Backend. Postfix and Dovecot authenticate with Dovecot SASL against the Kerberos server. My user informations (logon, name, email, etc.) are stored in the LDAP-directory. I can logon to dovecot with gssapi over dovecot sasl

Re: Tony's Quick Guide to CSA

2011-09-19 Thread Wietse Venema
Benny Pedersen: was reading something about client smtp auth :=) http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/antiforgery/csa.html hope it will be supported in postfix This is already supported in Postfix. You just need to find a suitable policy daemon or Milter plug-in. If this

Re: Postfix Dovecot SASL LDAP problem

2011-09-19 Thread Wietse Venema
Markus Bajones: Can anybody tell my why postmap can access my ldap data and postfix can not? Because you run the postmap tests as root, whereas Postfix avoids using root privileges all the time? To find out what operation fails, see the section on non-interactive debuggers in

Postfixadmin and fallback_transport

2011-09-19 Thread Tawanda Kavayi
Hi, I am new to postfixadmin, but not to postfix, and have just done my first installation. My problem is that I would like mail for unknown local users to be relayed to another server, instead of being being rejected. I have done this before with unix accounts using the fallback_transport

Re: Postfixadmin and fallback_transport

2011-09-19 Thread Wietse Venema
Tawanda Kavayi: Hi, I am new to postfixadmin, but not to postfix, and have just done my first installation. My problem is that I would like mail for unknown local users to be relayed to another server, instead of being being rejected. I have done this before with unix accounts using the

Re: Postfixadmin and fallback_transport

2011-09-19 Thread Tawanda Kavayi
On 19/09/2011 16:01, Wietse Venema wrote: Tawanda Kavayi: Hi, I am new to postfixadmin, but not to postfix, and have just done my first installation. My problem is that I would like mail for unknown local users to be relayed to another server, instead of being being rejected. I have done this

Re: Postfixadmin and fallback_transport

2011-09-19 Thread Reindl Harald
Am 19.09.2011 16:29, schrieb Tawanda Kavayi: On 19/09/2011 16:01, Wietse Venema wrote: Tawanda Kavayi: Hi, I am new to postfixadmin, but not to postfix, and have just done my first installation. My problem is that I would like mail for unknown local users to be relayed to another server,

Re: Postfixadmin and fallback_transport

2011-09-19 Thread Pau Amma
On Mon, September 19, 2011 2:29 pm, Tawanda Kavayi wrote: The number of users does not make it practical to configure each and every remote user's email address in virtual_alias_maps, and it would be a nightmare to manage. I would be very surprised if there was no way to automate that

Re: DKIM signing problem

2011-09-19 Thread Steve Jenkins
On Sun, Sep 18, 2011 at 11:14 PM, Murray S. Kucherawy m...@cloudmark.com wrote: I suggest trying again with OpenDKIM (http://www.opendkim.org).  The dkim-milter package has been unmaintained for a couple of years now.  It lives on under the new name, with lots of bug fixes and new features

Re: Postfixadmin and fallback_transport

2011-09-19 Thread Reindl Harald
Am 19.09.2011 16:55, schrieb Tawanda Kavayi: On 19/09/2011 16:44, Reindl Harald wrote: so you should make your setup simpler or put your configuration in sql-tables however, the MX has to reject unknown rcpt directly or you are a backscatter and will be blocked soon somewhere The server in

Re: Postfixadmin and fallback_transport

2011-09-19 Thread Tawanda Kavayi
On 19/09/2011 17:03, Reindl Harald wrote: Am 19.09.2011 16:55, schrieb Tawanda Kavayi: On 19/09/2011 16:44, Reindl Harald wrote: so you should make your setup simpler or put your configuration in sql-tables however, the MX has to reject unknown rcpt directly or you are a backscatter and will

ODBC support

2011-09-19 Thread list
I was wondering if ODBC support was on the road map for Postfix, or if it has ever been discussed? Thanks.

Re: ODBC support

2011-09-19 Thread Wietse Venema
l...@airstreamcomm.net: I was wondering if ODBC support was on the road map for Postfix, or if it has ever been discussed? It has een discussed, and no-one has stepped up to write code. Wietse

Blacklists for you MTA

2011-09-19 Thread Marek Salwerowicz
Hi all, I am new to Postfix-users mailing list so would like to say hello to everyone ;) I am wondering what rbl's are you using to prevent your MTAs against spam? My current config is as follows: reject_rbl_client zen.spamhaus.org, reject_rbl_client t1.dnsbl.net.au, reject_rbl_client

Re: Postfixadmin and fallback_transport

2011-09-19 Thread Wietse Venema
Tawanda Kavayi: I think I have failed to describe the scenario accurately. The MX server is not the problem, and it is not where I want this setup. If the MX server doesn't know a mailbox it will reject mail. There is a second server. This second server does not receive or send Internet

Re: Blacklists for you MTA

2011-09-19 Thread Reindl Harald
Am 19.09.2011 19:07, schrieb Marek Salwerowicz: Hi all, I am new to Postfix-users mailing list so would like to say hello to everyone ;) I am wondering what rbl's are you using to prevent your MTAs against spam? My current config is as follows: reject_rbl_client zen.spamhaus.org,

Re: Blacklists for you MTA

2011-09-19 Thread Steve Fatula
- Original Message - From: Marek Salwerowicz marek_...@wp.pl To: postfix-users@postfix.org Cc: Sent: Monday, September 19, 2011 12:07 PM Subject: Blacklists for you MTA I am wondering what rbl's are you using to prevent your MTAs against spam?   Since one month I have benn

Re: Tony's Quick Guide to CSA

2011-09-19 Thread Benny Pedersen
On Mon, 19 Sep 2011 10:19:10 +0200, Jeroen Geilman wrote: On 2011-09-19 03:40, Benny Pedersen wrote: http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/antiforgery/csa.html That would be non-trivial to implement in postfix, and since this is the first I've heard of it, I doubt it is very

Problems with hash map file reloading

2011-09-19 Thread Paul Enlund
Hello I am having problems with the reloading of hash: map files. The text files are generated on a master server then rsync'd to the secondary MX server. There seems to be a variable delay on the secondary MX before it picks up that the .db files have changed. It appears it can take as long as

Re: Problems with hash map file reloading

2011-09-19 Thread Ralf Hildebrandt
* Paul Enlund p...@netpresto.co.uk: Hello I am having problems with the reloading of hash: map files. The text files are generated on a master server then rsync'd to the secondary MX server. There seems to be a variable delay on the secondary MX before it picks up that the .db files have

Re: Blacklists for you MTA

2011-09-19 Thread John Levine
My current config is as follows: This one: reject_rbl_client zen.spamhaus.org, Includes these three, so there's no point in using them. reject_rbl_client dnsbl.njabl.org, reject_rbl_client sbl.spamhaus.org, reject_rbl_client cbl.abuseat.org, This one: reject_rbl_client t1.dnsbl.net.au,

Re: Blacklists for you MTA

2011-09-19 Thread mouss
Le 19/09/2011 19:07, Marek Salwerowicz a écrit : Hi all, I am new to Postfix-users mailing list so would like to say hello to everyone ;) I am wondering what rbl's are you using to prevent your MTAs against spam? My current config is as follows: reject_rbl_client zen.spamhaus.org,

Re: Problems with hash map file reloading

2011-09-19 Thread mouss
Le 19/09/2011 19:54, Paul Enlund a écrit : Hello I am having problems with the reloading of hash: map files. The text files are generated on a master server then rsync'd to the secondary MX server. There seems to be a variable delay on the secondary MX before it picks up that the .db files

Re: Tony's Quick Guide to CSA

2011-09-19 Thread mouss
Le 19/09/2011 03:40, Benny Pedersen a écrit : was reading something about client smtp auth :=) http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/antiforgery/csa.html hope it will be supported in postfix Thanks Tony for make the guide if you like 3/4 letters combination (csa), you migh

Re: Blacklists for you MTA

2011-09-19 Thread Simon Deziel
On 09/19/2011 02:29 PM, John Levine wrote: My current config is as follows: This one: reject_rbl_client zen.spamhaus.org, Includes these three, so there's no point in using them. reject_rbl_client dnsbl.njabl.org, zen.spamhaus.org does not seem to include dnsbl.njabl.org according to

Re: Configuring null-mail machine

2011-09-19 Thread mouss
Le 17/09/2011 17:18, tmac a écrit : I Have RHEL6 and am trying to use postfix for the first time. My host is server1.lab.my.org The mail server is mailserver.my.org I also have an alias file being passed around via NIS. This is used with sendmail to re-write usernames from

Re: bcc send map issue - duplication when mail sent from other host

2011-09-19 Thread mouss
Le 19/09/2011 07:34, Michael Ribbons a écrit : I have ruled out the amavis setup. What I need is a way to specify sender_bcc_maps only if the mail is sent from an authenticated user - This may be achievable by having a separate cleanup process for submission, but I don't want to use

Re: problem telnet 25 with ipv6

2011-09-19 Thread mouss
Le 16/09/2011 16:45, m...@smtp.fakessh.eu a écrit : Le vendredi 16 septembre 2011 00:12, mouss a écrit : Le 15/09/2011 03:34, m...@smtp.fakessh.eu a écrit : hello list hello guru of postfix I think I have correctly configure bind for IPv6. but I still can not connect with telnet on my

Re: Postfix Dovecot SASL LDAP problem

2011-09-19 Thread Markus Bajones
Hello Wietse, thank you for your reply. I tried to do this, but failed to get any result. Obviously debian optimized the debugging symbols out of postfix. :-( What i did now was the following. In the log /var/log/auth.log i found: Sep 19 18:53:51 hermes postfix/postmap[5385]: GSSAPI Error:

Re: Postfix Dovecot SASL LDAP problem

2011-09-19 Thread Wietse Venema
Markus Bajones: Hello Wietse, thank you for your reply. I tried to do this, but failed to get any result. Obviously debian optimized the debugging symbols out of postfix. :-( You should follow the DEBUG_README example that uses STRACE not GDB. What i did now was the following. In the

Re: Problems with hash map file reloading

2011-09-19 Thread Jeroen Geilman
On 2011-09-19 19:54, Paul Enlund wrote: Hello I am having problems with the reloading of hash: map files. The text files are generated on a master server then rsync'd to the secondary MX server. There seems to be a variable delay on the secondary MX before it picks up that the .db files have

Header, body checks are they useful when using Amavis-new+Spamassassin?

2011-09-19 Thread john
I am running Ubuntu 11.04 as a SOHO server with postfix/dovecot/Amavis-new/Spamassassin/Clamav setup as my email service. I currently use header and body checks in postfix as part of my anti-spam measures. How useful and/or how effective are these measures? Are they still worthwhile if I am

postfix config exemplar

2011-09-19 Thread john
Hi, I am running Ubuntu 11.04 as a SOHO server with postfix/dovecot/Amavis-new/Spamassassin/Clamav setup as my email service. I recently migrated from Centos 5.5 to Ubuntu 11.04. I order to get up and running ASAP I moved my old config from from one system making only those changes need to

Off Topic: Auto-whitelisting from sent mail?

2011-09-19 Thread john
I think this is off topic. I am running Ubuntu 11.04 as a SOHO server with postfix/dovecot/Amavis-new/Spamassassin/Clamav setup as my email service. Does anybody know of a program... that can white list inbound email based upon the addresses of emails that have been sent? I wondered if

Re: Off Topic: Auto-whitelisting from sent mail?

2011-09-19 Thread Jase Thew
On 19/09/2011 23:38, john wrote: I think this is off topic. I am running Ubuntu 11.04 as a SOHO server with postfix/dovecot/Amavis-new/Spamassassin/Clamav setup as my email service. Does anybody know of a program... that can white list inbound email based upon the addresses of emails that have

Re: postfix config exemplar

2011-09-19 Thread Noel Jones
On 9/19/2011 5:22 PM, john wrote: Hi, I am running Ubuntu 11.04 as a SOHO server with postfix/dovecot/Amavis-new/Spamassassin/Clamav setup as my email service. I recently migrated from Centos 5.5 to Ubuntu 11.04. I order to get up and running ASAP I moved my old config from from one system

Re: Header, body checks are they useful when using Amavis-new+Spamassassin?

2011-09-19 Thread Noel Jones
On 9/19/2011 5:06 PM, john wrote: I am running Ubuntu 11.04 as a SOHO server with postfix/dovecot/Amavis-new/Spamassassin/Clamav setup as my email service. I currently use header and body checks in postfix as part of my anti-spam measures. How useful and/or how effective are these

Re: Header, body checks are they useful when using Amavis-new+Spamassassin?

2011-09-19 Thread /dev/rob0
On Monday 19 September 2011 17:06:22 john wrote: I am running Ubuntu 11.04 as a SOHO server with postfix/dovecot/Amavis-new/Spamassassin/Clamav setup as my email service. I currently use header and body checks in postfix as part of my anti-spam measures. How useful and/or how effective are

LDAP table, recursion filter

2011-09-19 Thread Tom Lanyon
List, When using a LDAP lookup table the 'special_result_attribute' parameter is available to allow me to recurse to other DNs [e.g. recursing to members of a LDAP group]. I can also use the 'leaf_result_attribute' parameter to select the attribute I want to return from those recursive DN