Re: Relay doubt

2009-03-14 Thread Magnus Bäck
On Friday, March 13, 2009 at 22:09 CET, M. Rodrigo Monteiro fale...@rodrigomonteiro.net wrote: I have an Postfix as gateway for other domains (domain1, domain2, domain3). When domain1 send an e-mail to domain2, it goes to Postfix and then to domain2, and vice-versa. When domain2 send an

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread mouss
email builder a écrit : [snip] I do not support configurations with multiple myhostname/mydomain settings (or multiple settings for any domain-like parameter that determines how Postfix handles email). That's certainly fair. I can accept that I am stepping outside the use model with this

Re: relay_recipient_maps, aliases and LDAP

2009-03-14 Thread Magnus Bäck
On Friday, March 13, 2009 at 18:02 CET, Marcio Merlone marcio.merl...@a1.ind.br wrote: Long time since I last deployed a postfix server, and things used to be much simpler. :) Now I have set a Ubuntu 8.04 server to work as an anti-spam/anti-virus gateway. Messages will be sent to amavis

Re: about relay server

2009-03-14 Thread mouss
tom lee a écrit : On Tue, Mar 10, 2009 at 4:14 PM, mouss mo...@ml.netoyen.net wrote: All mails sending from machine A via relaying machine B will arrive in machine C. I think I need to set up something in machine B so that there will be no mails bounce back to machine A. if you want

Re: Mail filtering problem

2009-03-14 Thread mouss
Webmaster Bliss Corporation a écrit : Greetings, I am installing a Postfix Server, and I am having trouble setting up a spam filter with Spamassassin. I installed Postfix and it is working fine using virtual domains (I followed these instructions:

Re: relay_recipient_maps, aliases and LDAP

2009-03-14 Thread Reinaldo de Carvalho
On Fri, Mar 13, 2009 at 2:02 PM, Marcio Merlone marcio.merl...@a1.ind.br wrote: Hello, Hi (again?), Long time since I last deployed a postfix server, and things used to be much simpler. :) Now I have set a Ubuntu 8.04 server to work as an anti-spam/anti-virus gateway. Messages will be sent

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread Wietse Venema
Wietse: I do not support configurations with multiple myhostname/mydomain settings (or multiple settings for any domain-like parameter that determines how Postfix handles email). email builder: That's certainly fair. I can accept that I am stepping outside the use model with this and that

Re: order of multiple hash file entries

2009-03-14 Thread C. V.
- Noel Jones njo...@megan.vbhcs.org schrieb: C. V. wrote: Hi, i've setup my mailsystem a while ago and query MySQL and LDAP vor address and domain mappings. Since both of them (database and directory) are more likely to be down of many reasons (network, connection overload

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get TLS setup. I am running 2.5.6. I did

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get TLS setup. I am running 2.5.6. I did

Re: non-alpha HELO

2009-03-14 Thread Jorey Bump
LuKreme wrote, at 03/14/2009 12:19 PM: On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get

Re: order of multiple hash file entries

2009-03-14 Thread Magnus Bäck
On Saturday, March 14, 2009 at 17:08 CET, list-u...@backenhoernchen.de wrote: - mouss mo...@ml.netoyen.net schrieb: there's no backup. you have the choice between: - accepting temp failures if the backend is down - using a backedn that doesn't get down (hash, cdb, ...) ok,

Re: non-alpha HELO

2009-03-14 Thread Sahil Tandon
On Mar 14, 2009, at 12:20 PM, LuKreme wrote: On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I

Re: order of multiple hash file entries

2009-03-14 Thread Noel Jones
list-u...@backenhoernchen.de wrote: Using them as fail-over would really be nice to do and i think shoult work. postix does not concatenantes these maps because it trys them one by one - in which order? is there any documentation on that? There is no failover for table lookups. You can

Re: READMEs, where can I find them?

2009-03-14 Thread Noel Jones
KLaM Postmaster wrote: where can I find the postfix readme files, I have looked all over the postfix.com site, and while there is lots of documentation (man pages, how to, faqs, etc) but I cannot find the readme files except as embedded links. Is the a directory or something that contains just

Re: non-alpha HELO

2009-03-14 Thread mouss
LuKreme a écrit : On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get TLS setup. I am

Re: order of multiple hash file entries

2009-03-14 Thread list-user
- Magnus Bäck mag...@dsek.lth.se schrieb: On Saturday, March 14, 2009 at 17:08 CET, list-u...@backenhoernchen.de wrote: - mouss mo...@ml.netoyen.net schrieb: Lookup tables are tried in the order specified in the configuration, but if any of the tables returns a result

backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Henk van Oers
Quote from header_checks (5): DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search. For backwards compatibility reasons, Postfix also

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Michael Tokarev
Henk van Oers wrote: Quote from header_checks (5): DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search. For backwards compatibility reasons,

Re: relay_based_on_MX

2009-03-14 Thread Joe Postfix
Can you explain how this feature could be enabled? One of our the services we offer our customers allows them to create as many domains as they like (on various DNS's), and we have a catchall mailbox that grabs any emails sent to those domains. Of course you are correct most of the content on

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Michael Tokarev
Henk van Oers wrote: On Sat, 14 Mar 2009, Michael Tokarev wrote: Henk van Oers wrote: [] I was trying to use action OK to jump out of header checks. That is: not only skip the next patterns, but also the next input lines. [] Isn't it better to use the same semantics as in restrictions?

Re: relay_based_on_MX

2009-03-14 Thread Wietse Venema
Joe Postfix: Does anyone know if postfix supports a feature equivalent to relay_based_on_MX in sendmail? Wietse: Yes. However such features must not be used because they accept mail for non-existent recipients, and therefore 1) they fill the Postfix queue with non-deliverable MAILER-DAEMON

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Wietse Venema
Henk van Oers: Quote from header_checks (5): DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search. For backwards compatibility

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Henk van Oers
On Sat, 14 Mar 2009, Michael Tokarev wrote: Henk van Oers wrote: On Sat, 14 Mar 2009, Michael Tokarev wrote: Henk van Oers wrote: [] I was trying to use action OK to jump out of header checks. That is: not only skip the next patterns, but also the next input lines. [] Isn't it better to

Re: relay_based_on_MX

2009-03-14 Thread Wietse Venema
Wietse Venema: Joe Postfix: Does anyone know if postfix supports a feature equivalent to relay_based_on_MX in sendmail? Wietse: Yes. However such features must not be used because they accept mail for non-existent recipients, and therefore 1) they fill the Postfix queue with

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread email builder
email builder a écrit : [snip] I do not support configurations with multiple myhostname/mydomain settings (or multiple settings for any domain-like parameter that determines how Postfix handles email). That's certainly fair. I can accept that I am stepping outside the use

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread email builder
I do not support configurations with multiple myhostname/mydomain settings (or multiple settings for any domain-like parameter that determines how Postfix handles email). email builder: That's certainly fair. I can accept that I am stepping outside the use model with this and that

Re: reject outgoiong mail not from domain of host

2009-03-14 Thread mouss
Noel Jones a écrit : John G. Heim wrote: I want to make sure that any messages my system sends out always has a sender of someb...@math.wisc.edu. I am looking at configuring the smtpd_sender_restrictions directive. smtpd_sender_restrictions =

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread Wietse Venema
Wietse: I do not support configurations with multiple myhostname/mydomain settings (or multiple settings for any domain-like parameter that determines how Postfix handles email). email builder: That's certainly fair. I can accept that I am stepping outside the use model with this and that

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Bill Cole
Michael Tokarev wrote, On 3/14/09 4:13 PM: Henk van Oers wrote: [...] I the case of multiple recipients there can be rejects for some, no tests for some others (OK), a few test for DUNNO recipients and all the checks for the rest. Right? Yes. For each recipient independently. I don't

Re: Multiple TLS certificates on multiple IPs

2009-03-14 Thread email builder
Wietse: I do not support configurations with multiple myhostname/mydomain settings (or multiple settings for any domain-like parameter that determines how Postfix handles email). email builder: That's certainly fair. I can accept that I am stepping outside the use model with this and

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 14-Mar-2009, at 13:02, mouss wrote: test the connection manually: $ telnet yourserv 587 ... EHLO yourclienthostname ... QUIT Right, I do know that. Sorry if I wasn't clear, my only point was that what was actaully logged under submit was not useful and expressing disappointment that

smtpd_tls_session_cache_database

2009-03-14 Thread LuKreme
In reading http://www.postfix.org/TLS_README.html and all the posts in the last 15 months with 'smtpd_tls_session_cache_database' in the subject (all 7 of them!), it is not clear to me how the smtpd_tls_session_cache_database file is created, or what exactly it contains. If the file is not

Re: smtpd_tls_session_cache_database

2009-03-14 Thread Wietse Venema
LuKreme: In reading http://www.postfix.org/TLS_README.html and all the posts in the last 15 months with 'smtpd_tls_session_cache_database' in the subject (all 7 of them!), it is not clear to me how the smtpd_tls_session_cache_database file is created, or what exactly it contains. If

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Henk van Oers
On Sat, 14 Mar 2009, Wietse Venema wrote: Henk van Oers: Quote from header_checks (5): DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table search.

Re: backwards compatibility of OK in header_checks still needed?

2009-03-14 Thread Noel Jones
Henk van Oers wrote: On Sat, 14 Mar 2009, Wietse Venema wrote: Henk van Oers: Quote from header_checks (5): DUNNO Pretend that the input line did not match any pat- tern, and inspect the next input line. This action can be used to shorten the table

Re: non-alpha HELO

2009-03-14 Thread Noel Jones
LuKreme wrote: On 14-Mar-2009, at 13:02, mouss wrote: test the connection manually: $ telnet yourserv 587 ... EHLO yourclienthostname ... QUIT Right, I do know that. Sorry if I wasn't clear, my only point was that what was actaully logged under submit was not useful and expressing