Re: postfix queue grep

2009-02-04 Thread Marc Silver
Thanks... I better understand Viktor's original reply now. On Thu, 05 Feb 2009 08:22:25 +0200, Magnus Bäck wrote: No, that doesn't fix the race condition. Between your scan of the queue and the actual removal of the message it could be delivered and replaced by another message with the same qu

Re: postfix queue grep

2009-02-04 Thread Magnus Bäck
On Thursday, February 05, 2009 at 07:10 CET, Marc Silver wrote: > On Wed, 04 Feb 2009 19:17:45 +0200, Victor Duchovni > wrote: > > > This is subject to race conditions. To safely delete messages, > > they have to moved (postsuper -h) out of the "active" queue, > > re-scanned to ensure the

Re: postfix queue grep

2009-02-04 Thread Marc Silver
Victor, Thanks for taking the time to look at this. On Wed, 04 Feb 2009 19:17:45 +0200, Victor Duchovni wrote: The regexp parser is IMHO too fuzzy for production use outside your own environment. It will generated false positives with sufficiently interesting remote error messages, sender or

Re: gmail relay and certificates on Fedora 10

2009-02-04 Thread Victor Duchovni
On Wed, Feb 04, 2009 at 06:58:52PM -0500, sean darcy wrote: > I followed the instructions on > http://www.wormly.com/blog/2008/11/05/relay-gmail-google-smtp-postfix/ > to create your own certificate to use with google. You DO NOT need your own TLS-client certificate to submit mail to Google, and

How to re-email for SRS / SPF compliance

2009-02-04 Thread David Cottle
Hi, Can someone tell me how can you make postfix re-email on forwarded mail accounts instead of forwarding so postfix complies with SRS / SPF policy please? There are SRS plugins for qmail but not for postfix - specifically interested in the latest 2.6 version I built and am running. Ma

Re: gmail relay and certificates on Fedora 10

2009-02-04 Thread Joe Sloan
What values does postconf show for the following parameters? smtp_tls_CAfile smtpd_tls_CAfile ? Joe sean darcy wrote: sean darcy wrote: J Sloan wrote: Sounds like fedora's missing a ca-bundle.crt... Joe sean darcy wrote: I followed the instructions on http://www.wormly.com/blog/2008/11/0

Re: gmail relay and certificates on Fedora 10

2009-02-04 Thread sean darcy
sean darcy wrote: J Sloan wrote: Sounds like fedora's missing a ca-bundle.crt... Joe sean darcy wrote: I followed the instructions on http://www.wormly.com/blog/2008/11/05/relay-gmail-google-smtp-postfix/ to create your own certificate to use with google. main.cf: .. ## this to use c

Re: How to set client_encoding in Postfix -> PostgreSQL lookups

2009-02-04 Thread Michael Monnerie
On Dienstag 20 Januar 2009 Wietse Venema wrote: > I have a postfix making SQL queries > > > to PostgreSQL, and can see from postgresql logs that postfix does > > set client_encoding to 'LATIN1' > > How can I change that to use UTF8? > > SMTP is an ASCII protocol, and that is likely not to change.

Re: gmail relay and certificates on Fedora 10

2009-02-04 Thread sean darcy
J Sloan wrote: Sounds like fedora's missing a ca-bundle.crt... Joe sean darcy wrote: I followed the instructions on http://www.wormly.com/blog/2008/11/05/relay-gmail-google-smtp-postfix/ to create your own certificate to use with google. main.cf: .. ## this to use certificate I create

Re: gmail relay and certificates on Fedora 10

2009-02-04 Thread J Sloan
Sounds like fedora's missing a ca-bundle.crt... Joe sean darcy wrote: > I followed the instructions on > http://www.wormly.com/blog/2008/11/05/relay-gmail-google-smtp-postfix/ > to create your own certificate to use with google. > > main.cf: > .. > ## this to use certificate I created: >

gmail relay and certificates on Fedora 10

2009-02-04 Thread sean darcy
I followed the instructions on http://www.wormly.com/blog/2008/11/05/relay-gmail-google-smtp-postfix/ to create your own certificate to use with google. main.cf: .. ## this to use certificate I created: ## www.wormly.com/blog/2008/11/05/relay-gmail-google-smtp-postfix/ relayhost = [smtp

Re: TimeOut issues

2009-02-04 Thread Matthew Hebert
We are running much better now. We have increased out maxproc to 200 and added smtpd_timeout = 10 to the main.cf. It states that reducing the smtpd_timeout = should only be temporary. "No mail should be lost, as long as this measure is used only temporarily" We are running an older version of P

Re: Aliases/Aliases maps problem

2009-02-04 Thread KLaM Postmaster
sorry I screwed up, the xxx.txt attachment is my postconf -n output., I should have made sure was correctly named. JLA

Guidance on "owner-" prefix added to From and Return-Path

2009-02-04 Thread Damon Miller
Hi all, I'm having a difficult time understanding why one of my machines is showing modified "Return-Path" and "From" headers while another is not. I'm hoping someone can point me in the right direction. Here's the environment: Two CentOS 4 servers, both running the same version of Postfix (2.2.

Aliases/Aliases maps problem

2009-02-04 Thread KLaM Postmaster
Would some kind soul tell me what i am missing/mucking up here. I haven an almost bog standard aliases file in /etc the only changes I have made are (and yes I ran newaliases against it and the aliases.db looks OK) - root: postmaster+exam...@example.ca postmaster: postmaster+ex

Re: TimeOut issues

2009-02-04 Thread Victor Duchovni
On Wed, Feb 04, 2009 at 03:05:41PM -0600, Matthew Hebert wrote: > Thanks for your assistance. > > We have implemented the changes you requested. We still have have > time out issues. > > We try the following: > > When I try to "telnet server 25 > Trying XXX.XXX.XXX... > telnet: Unable to conne

Re: TimeOut issues

2009-02-04 Thread Matthew Hebert
Thanks for your assistance. We have implemented the changes you requested. We still have have time out issues. We try the following: When I try to "telnet server 25 Trying XXX.XXX.XXX... telnet: Unable to connect to remote host: Connection timed out" or getting connected and very slow response

Re: postfix + ubuntu 8.04

2009-02-04 Thread mouss
Kaushal Shriyan a écrit : > Hi > > Is there a guide to make use of postfix to send bulk email using postfix > use a mailing-list manager. mailman, sympa, ... etc.

Re: User getting back scattered

2009-02-04 Thread mouss
jeff donovan a écrit : > > On Feb 4, 2009, at 9:47 AM, Brian Evans - Postfix List wrote: > >> jeff donovan wrote: >>> here is a sample of the bounce: I have modified the real users name. >>> >>> >>> >>> Article rejected, un-authorized poster of realusern...@beth.k12.pa.us >>> Received: from XDYHO

Re: Taking over for another admin

2009-02-04 Thread Darren Pilgrim
Udo Rader wrote: Hmm, I've never heard of dovecot being able to deal with non-plaintext passwords in connection with SASL. Are you sure that that can be done without patching? Dovecot supports[1] quite a few non-plaintext mechanisms. 1: http://wiki.dovecot.org/Authentication/Mechanisms Which

Re: Taking over for another admin

2009-02-04 Thread Patrick Ben Koetter
* Udo Rader : > Hmm, I've never heard of dovecot being able to deal with non-plaintext > passwords in connection with SASL. Are you sure that that can be done > without patching? I haven't used Dovecot like that myself, but the documentation indicates you can set a $default_pass_scheme which a

Re: active -> incoming migration (was: Re: postfix queue grep)

2009-02-04 Thread Wietse Venema
Victor Duchovni: > On Wed, Feb 04, 2009 at 12:24:23PM -0500, Wietse Venema wrote: > > > Victor Duchovni: > > > [ Wietse is it safe to move queue files active -> hold -> incoming in > > > a short time? Could some recipients be delivered twice by two delivery > > > agents in parallel (both deliv

postfix + ubuntu 8.04

2009-02-04 Thread Kaushal Shriyan
Hi Is there a guide to make use of postfix to send bulk email using postfix Thanks and Regards Kaushal

active -> incoming migration (was: Re: postfix queue grep)

2009-02-04 Thread Victor Duchovni
On Wed, Feb 04, 2009 at 12:24:23PM -0500, Wietse Venema wrote: > Victor Duchovni: > > [ Wietse is it safe to move queue files active -> hold -> incoming in > > a short time? Could some recipients be delivered twice by two delivery > > agents in parallel (both deliveries starting after the seco

Re: Taking over for another admin

2009-02-04 Thread David Bishop
On Wed, Feb 04, 2009 at 06:28:36PM +0200, Eray Aslan wrote: > On 04.02.2009 18:14, David Bishop wrote: > [...] > > So, the group-mind consensus is to use the following for a (relatively) > > small virtual-hosting mail environment: > > > > postfix (obviously) + dovecot's SASL for smtp-auth and mail

Re: postfix queue grep

2009-02-04 Thread Wietse Venema
Victor Duchovni: > [ Wietse is it safe to move queue files active -> hold -> incoming in > a short time? Could some recipients be delivered twice by two delivery > agents in parallel (both deliveries starting after the second incoming > to active transition)? ] Each delivery agent holds a re

Re: postfix queue grep

2009-02-04 Thread Victor Duchovni
On Wed, Feb 04, 2009 at 10:25:21AM +0200, Marc Silver wrote: > > The tool is available at http://draenor.org/public/python/pqgrep.py > Should you find any bugs/problems, please mail me. The regexp parser is IMHO too fuzzy for production use outside your own environment. It will generated false po

Re: Taking over for another admin

2009-02-04 Thread Eray Aslan
On 04.02.2009 18:14, David Bishop wrote: [...] > So, the group-mind consensus is to use the following for a (relatively) > small virtual-hosting mail environment: > > postfix (obviously) + dovecot's SASL for smtp-auth and maildir > dovecot for imap/pop > maia for spam/virus filtering (with clamav)

Re: Taking over for another admin

2009-02-04 Thread Udo Rader
Patrick Ben Koetter wrote: * David Bishop : On Wed, Feb 04, 2009 at 07:31:23AM +0100, Martin Schmitt wrote: David Bishop schrieb: What are my options? I don't have a lot of experience with dovecot (it's been a few years for me) and thus don't really know anything about its SASL implementatio

Re: Taking over for another admin

2009-02-04 Thread David Bishop
On Wed, Feb 04, 2009 at 09:12:10AM -0500, Charles Marcus wrote: > I highly recommend changing to dovecot if you have the opportunity... > the performance difference is incredible, as Patrick pointed out, and I > have to say, Timo does far more than a 'good job' on dovecot... he > usually will have

Re: DSN on deferring

2009-02-04 Thread Brian Evans - Postfix List
Rocco Scappatura wrote: > Hello, > > When I send a message to an inexistent email address and the receiving > MTA is down, like the following example: > > av4 mail16:46:22postfix/smtppostfix/smtp[27440]: > 11BD7750296: to=, relay=none, delay=10, > delays=0.03/0/10/0, dsn=4.4.1, st

Re: Understanding Message Headers

2009-02-04 Thread Doug Jaquays
Carlos, The important piece of the headers when you're trying to figure out if the headers are spoofed or your smtp config is broken isthe Received from/by lines. See below >>> On Wed, Feb 4, 2009 at 10:55 AM, Carlos Williams >>> wrote: > I received an email this morning that I was confus

Re: TimeOut issues

2009-02-04 Thread Victor Duchovni
On Wed, Feb 04, 2009 at 08:52:45AM -0600, Matthew Hebert wrote: > smtpd_recipient_restrictions = > reject_non_fqdn_recipient > reject_non_fqdn_sender > reject_unknown_sender_domain > reject_unknown_recipient_domain > reject_unverified_recipient > per

DSN on deferring

2009-02-04 Thread Rocco Scappatura
Hello, When I send a message to an inexistent email address and the receiving MTA is down, like the following example: av4 mail16:46:22postfix/smtppostfix/smtp[27440]: 11BD7750296: to=, relay=none, delay=10, delays=0.03/0/10/0, dsn=4.4.1, status=deferred (connect to mx1.destdo

Re: User getting back scattered

2009-02-04 Thread Paweł Leśniak
body check if /^[> ]*Received:/ /^[> ]*Received: +from +(beth\.k12\.pa\.us) / reject forged client name in Received: header: $1 /^[> ]*Received: +from +[^ ]+ +\(([^ ]+ +[he]+lo=|[he]+lo +)(beth\.k12\.pa\.us)\)/ reject forged client name in Received: header: $2 /^[> ]*Received:.* +by +(beth\.k

Re: Mail sits in queue

2009-02-04 Thread Victor Duchovni
On Wed, Feb 04, 2009 at 08:58:17AM -0500, Doug Jaquays wrote: > > - The "pickup" fifo has been deleted from /var/spool/postfix/public > > > > Make sure $queue_directory contains a private/pickup fifo. > > This is a /var/spool/postfix/public/pickup fifo, there is not a > /var/spo

Understanding Message Headers

2009-02-04 Thread Carlos Williams
I received an email this morning that I was confused / concerned by. I am looking at the headers however I am not sure exactly how to make this out. This is obviously spam and I did not send myself spam. The sender shows my email address as well as the recipient address however when I view the full

Re: User getting back scattered

2009-02-04 Thread jeff donovan
On Feb 4, 2009, at 9:47 AM, Brian Evans - Postfix List wrote: jeff donovan wrote: here is a sample of the bounce: I have modified the real users name. Article rejected, un-authorized poster of realusern...@beth.k12.pa.us Received: from XDYHONJUP [189.22.134.132] by john23.com with ESMTP (S

TimeOut issues

2009-02-04 Thread Matthew Hebert
Thanks in advance for any feedback. Our Postfix server is a gateway that forwards email to an internal SPAM server configured to communicate with GroupWise. We have noticed a recent slow down in email delivery to and from our Postfix Servers. The queues do not show any email build up. When atte

Re: User getting back scattered

2009-02-04 Thread Brian Evans - Postfix List
jeff donovan wrote: > here is a sample of the bounce: I have modified the real users name. > > > > Article rejected, un-authorized poster of realusern...@beth.k12.pa.us > Received: from XDYHONJUP [189.22.134.132] by john23.com with ESMTP > (SMTPD32-8.00) id A6C57D10052; Wed, 04 Feb 2009 08:23:17

Re: User getting back scattered

2009-02-04 Thread jeff donovan
On Feb 4, 2009, at 8:59 AM, Matthias Andree wrote: Am 04.02.2009, 14:42 Uhr, schrieb jeff donovan : Greetings i have a user who is getting a ton of postmaster bounces. who or what ever is spamming is using her address as the return reply, so all the bounces and postmaster warnings are

Re: stripping null characters

2009-02-04 Thread Kenneth Marshall
On Wed, Feb 04, 2009 at 09:08:57AM -0500, Cory Coager wrote: > We have a mainframe client sending emails with the body containing null > characters. I found the message_strip_characters and > message_reject_characters options could resolve this issue but I'm > wondering if 'message_strip_charac

Re: Taking over for another admin

2009-02-04 Thread Charles Marcus
On 2/4/2009, David Bishop (t...@gnuconsulting.com) wrote: > So are you recommending dropping courier for imap/pop completely? Or > just using the SASL portion of dovecot? I guess I don't particularly > care what imap/pop server I use, as long as it can use a > crypted-password from a mysql databas

stripping null characters

2009-02-04 Thread Cory Coager
We have a mainframe client sending emails with the body containing null characters. I found the message_strip_characters and message_reject_characters options could resolve this issue but I'm wondering if 'message_strip_characters = \0' could cause problems with attachments containing null cha

Re: Mail sits in queue

2009-02-04 Thread Doug Jaquays
>>> On Tue, Feb 3, 2009 at 1:49 PM, Victor Duchovni wrote: > On Tue, Feb 03, 2009 at 01:34:10PM -0500, Brian Evans - Postfix List wrote: > >> The php mail() command (on *nix) defaults to come in through the pickup >> daemon (using the sendmail(1) command). >> It can also be sent in via the smtp

User getting back scattered

2009-02-04 Thread jeff donovan
Greetings i have a user who is getting a ton of postmaster bounces. who or what ever is spamming is using her address as the return reply, so all the bounces and postmaster warnings are coming back to her and filling up her account. how can I alleviate this? I can't seem to get a handle o

Re: PCRE help - unsTubscribe URL in body_check

2009-02-04 Thread Marc Silver
Hi there, I tested this on RHEL 5.2 and RHEL 5.3 and the PCRE matched correctly. Cheers, Marc On Wed, 04 Feb 2009 13:51:36 +0200, Wietse Venema wrote: Steven Redlich: /http:\/\/baddomain.com\/uTnsub\// There is no error with this PCRE pattern. It works as expected on my (non-Redhat) ma

Re: PCRE help - unsTubscribe URL in body_check

2009-02-04 Thread Wietse Venema
Steven Redlich: > /http:\/\/baddomain.com\/uTnsub\// There is no error with this PCRE pattern. It works as expected on my (non-Redhat) machine. % cat /tmp/x /http:\/\/baddomain.com\/uTnsub\// foo % postmap -q - pcre:/tmp/x

Re: Postfix mail archiving with maildrop

2009-02-04 Thread Gabor Hasenfrasz
I'll try to make that way today! Thanks for the advice! 2009/2/3 mouss > Gabor Hasenfrasz a écrit : > > Dear All, > > > > A company asked me to configure an archiving system on a postfix server. > > After a little i've made a choice to maildrop as an archiving solution. > > I've configured main.

postfix queue grep

2009-02-04 Thread Marc Silver
Hi guys, First and foremost, apologies if this message shouldn't be going to this list, but it seemed like the logical place. I have written a small tool for Postfix in Python that duplicates most of the functionality of exiqgrep, a tool that comes bundled with Exim making it easier for m

Re: Taking over for another admin

2009-02-04 Thread Patrick Ben Koetter
* David Bishop : > On Wed, Feb 04, 2009 at 07:31:23AM +0100, Martin Schmitt wrote: > > David Bishop schrieb: > > > > > What are my options? I don't have a lot of experience with dovecot (it's > > > been a few years for me) and thus don't really know anything about its > > > SASL implementation.