safe migration

2010-04-20 Thread alex
hello I intend to make a full OS upgrade to one of my servers. Beside the OS I switch also the pop/imap server from courier to dovecot. Now I have two servers with postfix and the new one with dovecot and the old one with courier. In order to make a transparent migration I chose to move one

Re: Rejecting Spam Based on Spamassassin Score

2010-04-20 Thread Simon Waters
On Monday 19 April 2010 18:34:59 Aaron Clausen wrote: This has probably been asked a hundred times before, but a client of mine has requested the ability to reject emails if their spam score is above a certain score, rather than marking it as spam. Is this a possibility with Postfix? As

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Gregory BELLIER
Victor Duchovni a écrit : Try again, with a more useful log sample, and configuration settings for the receiving side. The log sample should include multiple lines of logging from the SMTP client, showing any TLS handshake, ... Alright, please take a look at the end of this email for the

Re: DNS RBL error

2010-04-20 Thread Steve
Original-Nachricht Datum: Mon, 19 Apr 2010 20:52:57 -0500 Von: Noel Jones njo...@megan.vbhcs.org An: postfix-users@postfix.org Betreff: Re: DNS RBL error On 4/19/2010 8:22 PM, Steve wrote: Original-Nachricht Datum: Mon, 19 Apr 2010 21:03:51 -0400

postfix loop detection

2010-04-20 Thread Vladimir Vassiliev
Hi postfixers, Why this config pickupfifo n - n 60 1 pickup -o content_filter=smtp:[127.0.0.1]:25 postfix considers as loop but this one pickupfifo n - n 60 1 pickup -o content_filter=smtp:[127.0.0.1]:10027 doesn't?

Re: postfix loop detection

2010-04-20 Thread Wietse Venema
Vladimir Vassiliev: Hi postfixers, Why this config pickupfifo n - n 60 1 pickup -o content_filter=smtp:[127.0.0.1]:25 Content filters are supposed to use a different TCP port. Mail to the standard SMTP on the same MTA is a mail loop. Wietse

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Gregory BELLIER
I managed to have an authentication but it's really weird. I'm on Debian Lenny. In /etc/default/saslauthd on both mta1 and mta2, I have : START=yes DESC=SASL Authentication Daemon NAME=saslauthd MECHANISMS=shadow MECH_OPTIONS= THREADS=5 OPTIONS=-c -m /var/spool/postfix/var/run/saslauthd

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 12:21:35PM +0200, Gregory BELLIER wrote: Try again, with a more useful log sample, and configuration settings for the receiving side. The log sample should include multiple lines of logging from the SMTP client, showing any TLS handshake, ... Alright, please take a

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 05:18:48PM +0200, Gregory BELLIER wrote: I managed to have an authentication but it's really weird. I'm on Debian Lenny. In /etc/default/saslauthd on both mta1 and mta2, I have : START=yes DESC=SASL Authentication Daemon NAME=saslauthd MECHANISMS=shadow

Wildcard certificate warning

2010-04-20 Thread Jordi Espasa Clofent
Hi all, I've configured a TLS/SSL smtpd in a box as follows: # postconf -n | grep -i tls smtpd_tls_cert_file = /usr/local/home/example.com.crt smtpd_tls_key_file = /usr/local/home/example.com.key smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_tls_session_cache_database =

Re: Wildcard certificate warning

2010-04-20 Thread Wietse Venema
Jordi Espasa Clofent: Hi all, I've configured a TLS/SSL smtpd in a box as follows: # postconf -n | grep -i tls smtpd_tls_cert_file = /usr/local/home/example.com.crt smtpd_tls_key_file = /usr/local/home/example.com.key smtpd_tls_loglevel = 2 smtpd_tls_received_header = yes

Re: Wildcard certificate warning

2010-04-20 Thread Reinaldo de Carvalho
On Tue, Apr 20, 2010 at 12:58 PM, Jordi Espasa Clofent jespa...@minibofh.org wrote: Hi all, [... The cert is a wildcard certificate for *.example.com. When the MUA (tested in Microsoft Outlook and Mazilla Thunderbird) tries to send email using this box, it show a warning about the cert. It

Re: Wildcard certificate warning

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 05:58:23PM +0200, Jordi Espasa Clofent wrote: The cert is a wildcard certificate for *.example.com. What SMTP server name is the MUA configured to use? Does the MUA support wild-card certificates? Which CA signed this certificate? Does the MUA trust this CA? When the

Re: NMAP information about postfix

2010-04-20 Thread Linux Addict
On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema wie...@porcupine.orgwrote: Gaby L: Hi I scan with my postfix server with NMap from other location. The NMAP creats report smtp port open (It is OK) but apear Postfix smtpd and other information about MTA program. I dont want to apear any

Re: NMAP information about postfix

2010-04-20 Thread Brian Evans - Postfix List
On 4/20/2010 1:23 PM, Linux Addict wrote: On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema wie...@porcupine.org mailto:wie...@porcupine.org wrote: Gaby L: Hi I scan with my postfix server with NMap from other location. The NMAP creats report smtp port open (It is OK)

Re: NMAP information about postfix

2010-04-20 Thread Linux Addict
On Tue, Apr 20, 2010 at 1:33 PM, Brian Evans - Postfix List grkni...@scent-team.com wrote: On 4/20/2010 1:23 PM, Linux Addict wrote: On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema wie...@porcupine.org mailto:wie...@porcupine.org wrote: Gaby L: Hi I scan with my

Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Kārlis Repsons
Hi there, hopefully this can be easy: as I have $myhostname other than virtual domain name, when server relays my v.d. mails, it uses $myhostname and so sometimes I receive a refusal like this: 550 Reverse DNS lookup failed for host; how should I make server use my virtual domain's name when

Re: NMAP information about postfix

2010-04-20 Thread Wietse Venema
Linux Addict: On Tue, Apr 20, 2010 at 1:33 PM, Brian Evans - Postfix List grkni...@scent-team.com wrote: On 4/20/2010 1:23 PM, Linux Addict wrote: On Mon, Apr 19, 2010 at 11:37 AM, Wietse Venema wie...@porcupine.org mailto:wie...@porcupine.org wrote: Gaby L: Hi

Re: Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Noel Jones
On 4/20/2010 1:00 PM, Kārlis Repsons wrote: Hi there, hopefully this can be easy: as I have $myhostname other than virtual domain name, when server relays my v.d. mails, it uses $myhostname and so sometimes I receive a refusal like this: 550 Reverse DNS lookup failed for host; how should I make

Postfix Mail Gateway restrcitions implementations

2010-04-20 Thread Chaminda Indrajith
Dear all, I have a postfix mail gateway which is used for all incoming and outgoing mails of our backend mail server. I have restricted the Gateway to accept mails only for my domain (example.com) from outside. My Question is that, can we set a similar restriction for the outgoing mails

Re: Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Kārlis Repsons
On Tuesday 20 April 2010 18:46:51 Noel Jones wrote: For your server (from list mail headers) Received: from pasts.trikata.com (unknown [85.15.210.5]) Well and if I have a domain 11.lv, for which this is given: host 11.lv 11.lv has address 85.15.210.5 11.lv mail is handled by 10 mail.11.lv. 11.lv

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Gregory BELLIER
Victor Duchovni a écrit : On Tue, Apr 20, 2010 at 12:21:35PM +0200, Gregory BELLIER wrote: Did you read the logs? I did. Why are you offering CRAM-MD5 and NTLM on mta1, when only PLAIN works? Because in my file sasl/smtpd.conf, every time I set a mech_list, it doesn't work. So I

Re: Relay between 2 Postfix : SASL authentication failure

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 09:37:48PM +0200, Gregory BELLIER wrote: In the session below, the client did not want to use PLAIN, presumably because TLS was not in effect. Leave TLS enabled. I asked you to disable TLS very verbose logging (smtp*_tls_loglevel=0 or 1) not TLS. Now test with a client

Re: Fixing reverse DNS lookup for a virtual domain

2010-04-20 Thread Noel Jones
On 4/20/2010 2:03 PM, Kārlis Repsons wrote: On Tuesday 20 April 2010 18:46:51 Noel Jones wrote: For your server (from list mail headers) Received: from pasts.trikata.com (unknown [85.15.210.5]) Well and if I have a domain 11.lv, for which this is given: host 11.lv 11.lv has address 85.15.210.5

Re: Set submission as to bypass RBLs

2010-04-20 Thread mouss
David Cottle a écrit : I am having some issues with my server blocking ISP IP addresses. I know a recent update to plesk-9.5.1 changed my postfix main.cf and master.cf (the timestamps changed). I managed to fix main.cf as on the smtpd_client_restrictions, they put the RBLs first. Can

Spam to sender_bcc_maps

2010-04-20 Thread Jack Knowlton
Hi all. Somehow spammers got hold of a couple addresses in my sender_bcc_maps and are sending mail directly to those. How can I restrict the source of messages to those addresses to localhost only? Thanks, -JK

Re: Spam to sender_bcc_maps

2010-04-20 Thread Noel Jones
On 4/20/2010 5:24 PM, Jack Knowlton wrote: Hi all. Somehow spammers got hold of a couple addresses in my sender_bcc_maps and are sending mail directly to those. How can I restrict the source of messages to those addresses to localhost only? Thanks, -JK General idea can be found here:

Re: Postfix Mail Gateway restrcitions implementations

2010-04-20 Thread Noel Jones
On 4/20/2010 2:09 PM, Chaminda Indrajith wrote: Dear all, I have a postfix mail gateway which is used for all incoming and outgoing mails of our backend mail server. I have restricted the Gateway to accept mails only for my domain (example.com) from outside. My Question is that, can we set a

Re: Postfix Mail Gateway restrcitions implementations

2010-04-20 Thread Victor Duchovni
On Tue, Apr 20, 2010 at 05:34:26PM -0500, Noel Jones wrote: Something like: # main.cf smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_only reject_unauth_destination # sender_only example.com OK Warning: use this in smtpd_sender_restrictions as shown

Re: Unknown senders and spam

2010-04-20 Thread Alex
Hi, $ postfix check postfix: fatal: /etc/postfix/main.cf, line 700: missing '=' after attribute name: warn_if_reject reject_maps_rbl backscatter.spameatingmonkey.net Apr 19 02:35:33 smtp01 postfix[13351]: fatal: /etc/postfix/main.cf, line 700: missing '=' after attribute name:

mail from(Return-Path) when a mail relay via alias

2010-04-20 Thread Jeff Huang
Hi All. I found when I send a email via alias,the Return-Path is null. For example,the alias : i...@domain1.com:i...@domain2.com when I sent a email from i...@domain.com to i...@domain1.com,I found I recevie from i...@domain2.com and found the Return-Path is null. How can I set it to enable