Re: Selective outbound relaying II

2010-07-09 Thread Ville Walveranta
On Thu, Jul 8, 2010 at 10:54 PM, Victor Duchovni victor.ducho...@morganstanley.com wrote: TLS security levels are configurable per nexthop destination as documented.  SASL logins are also specified via the table of per-destination user:password pairs. It is not clear what's missing. I'll read

Re: SASL Authentication per recipient domain

2010-07-09 Thread David Jacobson
From: "Noel Jones" njo...@megan.vbhcs.orgTo: postfix-users@postfix.orgSent: Thursday, July 8, 2010 5:04:07 PMSubject: Re: SASL Authentication per recipient domainOn 7/8/2010 8:24 AM, David Jacobson wrote: Hi There, First post to postfix mailing list, be nice... ;) Postfix 2.6.6.2z We have a hosted

Greylisting SMTP auth

2010-07-09 Thread Hendrik Pahl
Hi folks, we're having some trouble with greylisting (postgrey) and smtp auth. smtp_recipient_restrictions looks like: permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, warn_if_reject,

Re: Greylisting SMTP auth

2010-07-09 Thread Ralf Hildebrandt
* Hendrik Pahl p...@team-datentechnik.de: Hi folks, we're having some trouble with greylisting (postgrey) and smtp auth. smtp_recipient_restrictions looks like: It's smtpd_recipient_restrictions permit_sasl_authenticated, permit_mynetworks,

Re: SASL Authentication per recipient domain

2010-07-09 Thread Jerry
On Fri, 9 Jul 2010 09:36:56 +0200 (SAST) David Jacobson dav...@synaq.com articulated: From: Noel Jones njo...@megan.vbhcs.org To: postfix-users@postfix.org Sent: Thursday, July 8, 2010 5:04:07 PM Subject: Re: SASL Authentication per recipient domain On 7/8/2010 8:24 AM, David Jacobson

Re: SASL Authentication per recipient domain

2010-07-09 Thread David Jacobson
From: "Jerry" postfix-u...@seibercom.netTo: postfix-users@postfix.orgSent: Friday, July 9, 2010 11:40:11 AMSubject: Re: SASL Authentication per recipient domainOn Fri, 9 Jul 2010 09:36:56 +0200 (SAST)David Jacobson dav...@synaq.com articulated: From: "Noel Jones" njo...@megan.vbhcs.org To:

email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Administrator Beckspaced.com
hello there, i'm running a postfix 2.4.6 on a opensuse box. postfix has amawis-new with spamassasin installed ... since a few weeks one of my email accounts gets bombarded with thousands of SPAM mailer daemon error bounces. could not deliver message ... bla bla bla ... it's getting really

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Robert Schetterer
Am 09.07.2010 12:35, schrieb Administrator Beckspaced.com: hello there, i'm running a postfix 2.4.6 on a opensuse box. postfix has amawis-new with spamassasin installed ... since a few weeks one of my email accounts gets bombarded with thousands of SPAM mailer daemon error bounces.

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Administrator Beckspaced.com
hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces ... the bounces are sent from hundred of different IP addresses ... any more idea? thanks for your help fun becki below some logs you requested ... change the real

RE: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Kammen van, Marco, Springer SBM NL
From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Administrator Beckspaced.com Sent: Friday, July 09, 2010 12:52 PM To: Robert Schetterer Cc: postfix-users@postfix.org Subject: Re: email account bombarded with SPAM error bounces - what to do? hello

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread wolfgang
In an older episode (Friday, 9. July 2010), Kammen van, Marco, Springer SBM NL wrote: But there is a big spam/virus attack going on, where messages look like NDR's but they aren't. Various big anti spam vendors are having serious issues stopping this. Could you provide a URL where more

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Robert Schetterer
Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces ... the bounces are sent from hundred of different IP addresses ... any more idea? thanks for your

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Robert Schetterer
Am 09.07.2010 13:00, schrieb Kammen van, Marco, Springer SBM NL: From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Administrator Beckspaced.com Sent: Friday, July 09, 2010 12:52 PM To: Robert Schetterer Cc: postfix-users@postfix.org Subject: Re:

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Administrator Beckspaced.com
On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces ... the bounces are sent from hundred of different IP addresses

RE: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Kammen van, Marco, Springer SBM NL
-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of wolfgang Sent: Friday, July 09, 2010 1:11 PM To: postfix-users@postfix.org Subject: Re: email account bombarded with SPAM error bounces - what to do? In an older episode (Friday,

Re: Problem with tcp_table server

2010-07-09 Thread Philipp Leusmann
Am 08.07.2010 um 20:55 schrieb Noel Jones: On 7/8/2010 12:13 PM, Philipp Leusmann wrote: Am 08.07.2010 um 19:02 schrieb Philipp Leusmann: Am 08.07.2010 um 18:23 schrieb Noel Jones: On 7/8/2010 10:58 AM, Philipp Leusmann wrote: Hi all, to stop backscattering I wrote a tcp_table

asking ARP for an internal IP 169.254.140.241

2010-07-09 Thread Stéphane MERLE
Hi, My ISP (ovh) is complaining about my postfix servers doing wrong ARP demand, do you have any idea of what can cause this in my postfix configuration ? 188.165.55.92 : is one of the server ip (ip failover) Thu Jul 8 02:03:32 2010 : arp who-has 169.254.140.241 tell 188.165.55.92 Thu Jul 8

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Robert Schetterer
Am 09.07.2010 13:35, schrieb Administrator Beckspaced.com: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the error bounces

Re: SASL Authentication per recipient domain

2010-07-09 Thread Sahil Tandon
On Fri, 2010-07-09 at 12:20:12 +0200, David Jacobson wrote: I appreciate your response, however if you read my original message you will notice that we have had a look at all support smtp_sasl_password_maps options and it only allows for the following scenario according to the docs: 1)

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Ram
On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the same IP or host sending the

Re: asking ARP for an internal IP 169.254.140.241

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 01:47:40PM +0200, St?phane MERLE wrote: Hi, My ISP (ovh) is complaining about my postfix servers doing wrong ARP demand, do you have any idea of what can cause this in my postfix configuration ? 188.165.55.92 : is one of the server ip (ip failover) Thu Jul 8

Error between two postfix Command not recognized, RCPT is cut in two words

2010-07-09 Thread Thomas POINDESSOUS
Hi, I have a problem between one of my postfix and a zimbra server (postfix server). sometime (one mail every three days), I got this error : 502 5.5.2 Error: command not recognized (in reply to RCPT TO command) I did a tcpdump to understand why I got this error and I found that one of

Re: Error between two postfix Command not recognized, RCPT is cut in two words

2010-07-09 Thread Ralf Hildebrandt
* Thomas POINDESSOUS poindessous...@foncia.fr: Hi, I have a problem between one of my postfix and a zimbra server (postfix server). sometime (one mail every three days), I got this error : 502 5.5.2 Error: command not recognized (in reply to RCPT TO command) I did a

Re: Problem with tcp_table server

2010-07-09 Thread Philipp Leusmann
Hi Wietse, what kind auf verbose logging are you talking about? postmap -vv -q ? Or a more verbose logging for tcp_table in mail.log ? How could I turn this on? Philipp Am 09.07.2010 um 15:45 schrieb Wietse Venema: Philipp Leusmann: warning: restriction `User' after `defer' is ignored

Re: SASL Authentication per recipient domain

2010-07-09 Thread David Jacobson
From: "Sahil Tandon" sa...@freebsd.orgTo: postfix-users@postfix.orgSent: Friday, July 9, 2010 2:03:23 PMSubject: Re: SASL Authentication per recipient domainOn Fri, 2010-07-09 at 12:20:12 +0200, David Jacobson wrote: I appreciate your response, however if you read my original message you will

Re: Error between two postfix Command not recognized, RCPT is cut in two words

2010-07-09 Thread Wietse Venema
Thomas POINDESSOUS: Hi, I have a problem between one of my postfix and a zimbra server (postfix server). sometime (one mail every three days), I got this error : 502 5.5.2 Error: command not recognized (in reply to RCPT TO command) I did a tcpdump to understand why I got this

Re: Error between two postfix Command not recognized, RCPT is cut in two words

2010-07-09 Thread poindessous537
Yes, I think this is a cisco asa 5550, with a special filter which protects smtp server. Do you think I should ask to disable it ? Thanks. Le 9 juil. 2010 à 15:46, Ralf Hildebrandt ralf.hildebra...@charite.de a écrit : * Thomas POINDESSOUS poindessous...@foncia.fr: Hi, I have a

Re: Problem with tcp_table server

2010-07-09 Thread Wietse Venema
Philipp Leusmann: warning: restriction `User' after `defer' is ignored when I return something like 200 DEFER User is over quota I guess there is some special string expected after DEFER ? Wietse: No. When the first word is defer or DEFER etc., then the rest of the text sent to the

Re: Error between two postfix Command not recognized, RCPT is cut in two words

2010-07-09 Thread Ralf Hildebrandt
* poindessous...@foncia.fr poindessous...@foncia.fr: Yes, I think this is a cisco asa 5550, with a special filter which protects smtp server. Do you think I should ask to disable it ? Yes. It causes nothing but grief :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk

Re: Error between two postfix Command not recognized, RCPT is cut in two words

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 03:58:12PM +0200, poindessous...@foncia.fr wrote: ... a special filter which protects smtp server. Do you think I should ask to disable it ? Yes, always. The SMTP inspection feature notoriously does more harm than good. -- Viktor.

Re: SASL Authentication per recipient domain

2010-07-09 Thread David Jacobson
From: "David Jacobson" dav...@synaq.comTo: postfix-users@postfix.orgSent: Friday, July 9, 2010 3:54:16 PMSubject: Re: SASL Authentication per recipient domainFrom: "Sahil Tandon" sa...@freebsd.orgTo: postfix-users@postfix.orgSent: Friday, July 9, 2010 2:03:23 PMSubject: Re: SASL Authentication per

Re: Problem with tcp_table server

2010-07-09 Thread Philipp Leusmann
Am 09.07.2010 um 16:02 schrieb Wietse Venema: Philipp Leusmann: warning: restriction `User' after `defer' is ignored when I return something like 200 DEFER User is over quota I guess there is some special string expected after DEFER ? Wietse: No. When the first word is defer or

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Administrator Beckspaced.com
On 7/9/2010 14:40, Ram wrote: On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks a lot for your quick reply ... actually it is not always the

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Stan Hoeppner
Kammen van, Marco, Springer SBM NL put forth on 7/9/2010 6:00 AM: Not sure if its related to your issue. But there is a big spam/virus attack going on, where messages look like NDR's but they aren't. Various big anti spam vendors are having serious issues stopping this. Some of my trap

Re: email account bombarded with SPAM error bounces - what to do?

2010-07-09 Thread Robert Schetterer
Am 09.07.2010 16:13, schrieb Administrator Beckspaced.com: On 7/9/2010 14:40, Ram wrote: On Fri, 2010-07-09 at 13:35 +0200, Administrator Beckspaced.com wrote: On 7/9/2010 13:27, Robert Schetterer wrote: Am 09.07.2010 12:51, schrieb Administrator Beckspaced.com: hello robert, thanks

Re: Problem with tcp_table server

2010-07-09 Thread Noel Jones
On 7/9/2010 6:46 AM, Philipp Leusmann wrote: Am 08.07.2010 um 20:55 schrieb Noel Jones: On 7/8/2010 12:13 PM, Philipp Leusmann wrote: thanks for your advice. This really should be pointed out more explicitly in the documentation. As for 500, would it be a good practice to return 500, if

Re: Problem with tcp_table server

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 04:13:28PM +0200, Philipp Leusmann wrote: Jul 9 16:07:00 s15277780 postfix/smtpd[18815]: NOQUEUE: reject: RCPT from c-68-57-126-48.hsd1.va.comcast.net[68.57.126.48]: 450 4.3.2 silvi...@xxx.de: Recipient address rejected: Try again later;

Re: asking ARP for an internal IP 169.254.140.241

2010-07-09 Thread Stéphane MERLE
Hi, I would have 2 questions : - 1 what is the procedure for postfix when it try to send email to a domain with no MX record ? like : dig mx elv.enic.fr - 2 would that be an offense to refuse to send to domain with no MX record ? (I don't know if there's a lot of them)

Re: asking ARP for an internal IP 169.254.140.241

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 06:09:26PM +0200, St?phane MERLE wrote: Hi, I would have 2 questions : - 1 what is the procedure for postfix when it try to send email to a domain with no MX record ? like : dig mx elv.enic.fr Per 20+ year old SMTP standards it sends to the A

Re: SASL Authentication per recipient domain

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 04:12:41PM +0200, David Jacobson wrote: We tried PCRE matches to no avail. Based on your request we tried to change sasl_passwd lookup from hash to pcre (I'm no postfix guy, so have no idea if this should work or not, but postfix restart didn't complain)

Re: asking ARP for an internal IP 169.254.140.241

2010-07-09 Thread Phil Howard
On Fri, Jul 9, 2010 at 12:09, Stéphane MERLE stephane.me...@distrigame.com wrote: I would have 2 questions :    - 1 what is the procedure for postfix when it try to send email to a domain with no MX record ?            like : dig mx elv.enic.fr    - 2 would that be an offense to refuse to

Re: Problem with tcp_table server

2010-07-09 Thread Wietse Venema
Philipp Leusmann: I need to see ONE example of verbose logging that shows ( tcp_table returning the string that is giving the above error, AND the Postfix SMTP server processing that result ). Sorry, I still don't get, what you mean. I need to see VERBOSE LOGGING

Re: Problem with tcp_table server

2010-07-09 Thread Philipp Leusmann
Am 09.07.2010 um 17:39 schrieb Victor Duchovni: On Fri, Jul 09, 2010 at 04:13:28PM +0200, Philipp Leusmann wrote: Jul 9 16:07:00 s15277780 postfix/smtpd[18815]: NOQUEUE: reject: RCPT from c-68-57-126-48.hsd1.va.comcast.net[68.57.126.48]: 450 4.3.2 silvi...@xxx.de: Recipient

Re: Problem with tcp_table server

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 07:25:45PM +0200, Philipp Leusmann wrote: Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: send: get be...@xxx.de Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: recv: 200 DEFER%20User%20over%20quota Jul 9 19:15:25 s15277780

Re: Greylisting SMTP auth

2010-07-09 Thread Christopher Sean Hilton
On Jul 9, 2010, at 4:57 AM, Hendrik Pahl wrote: Hi folks, we're having some trouble with greylisting (postgrey) and smtp auth. smtp_recipient_restrictions looks like: I'm not sure what the rest of your network looks like but I greylist through openbsd's spamd and to sasl authenticated

Re: asking ARP for an internal IP 169.254.140.241

2010-07-09 Thread Noel Jones
On 7/9/2010 11:35 AM, Phil Howard wrote: On Fri, Jul 9, 2010 at 12:09, Stéphane MERLE stephane.me...@distrigame.com wrote: I would have 2 questions : - 1 what is the procedure for postfix when it try to send email to a domain with no MX record ? like : dig mx elv.enic.fr

Re: Problem with tcp_table server

2010-07-09 Thread Philipp Leusmann
Am 09.07.2010 um 19:46 schrieb Victor Duchovni: On Fri, Jul 09, 2010 at 07:25:45PM +0200, Philipp Leusmann wrote: Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: send: get be...@xxx.de Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: recv: 200

Re: Problem with tcp_table server

2010-07-09 Thread Wietse Venema
Victor Duchovni: On Fri, Jul 09, 2010 at 07:25:45PM +0200, Philipp Leusmann wrote: Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: send: get be...@xxx.de Jul 9 19:15:25 s15277780 postfix/smtpd[22232]: dict_tcp_lookup: recv: 200 DEFER%20User%20over%20quota Jul 9

Re: Problem with tcp_table server

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 08:56:38PM +0200, Philipp Leusmann wrote: It would be nice, if somebody else, also running a Debian Lenny (it's lenny, not etch) system could verify this behavior. Anybody here? I will also reinstall postfix and try again. If it is compiled with debugging

Re: Problem with tcp_table server

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 04:04:59PM -0400, Wietse Venema wrote: Either your Postfix source is modified, miscompiled, the binaries are corrupted, or CPU is mal-functioning. Or he is running a Postfix version before 2.6. Citing the access(5) manpage: DEFER optional text...

Re: Problem with tcp_table server

2010-07-09 Thread Wietse Venema
Victor Duchovni: On Fri, Jul 09, 2010 at 04:04:59PM -0400, Wietse Venema wrote: Either your Postfix source is modified, miscompiled, the binaries are corrupted, or CPU is mal-functioning. Or he is running a Postfix version before 2.6. Citing the access(5) manpage:

Re: SASL Authentication per recipient domain

2010-07-09 Thread Sahil Tandon
On Fri, 2010-07-09 at 16:12:41 +0200, David Jacobson wrote: [ .. ] It just seems like SASL doesn't support PCRE. The statement does not make sense. Just for the sake of clarification we've found what we're looking for, PCRE was not required. PCRE is not *required*, but it would be fine

Re: Selective outbound relaying II

2010-07-09 Thread Ville Walveranta
Resolved! Another concurrent thread SASL Authentication per recipient domain gave additional clues. I ended up using a PCRE map for sender_dependent_relayhost_maps (domain names changed to protect the innocent and to better illustrate what was done): main.cf: smtp_sasl_auth_enable = yes

additional parameters to the SMTP MAIL and RCPT commands

2010-07-09 Thread Sufian Hameed
Hi all, does Postfix Supports additional parameters to the SMTP MAIL and RCPT commands as mentioned in RFC 2821 and others? RCPT TO:forward-path [ SP rcpt-parameters ] CRLF i have tried to use something like as follows in the sender Postfix Server RCPT TO:x...@yyy.com SP one=randomtext

Re: additional parameters to the SMTP MAIL and RCPT commands

2010-07-09 Thread Rod Dorman
On Friday, July 9, 2010, 17:42:37, Sufian Hameed wrote: does Postfix Supports additional parameters to the SMTP MAIL and RCPT commands as mentioned in RFC 2821 and others? RCPT TO:forward-path [ SP rcpt-parameters ] CRLF i have tried to use something like as follows in the sender Postfix

Something Lighter Than Forward Address Verification?

2010-07-09 Thread Sabahattin Gucukoglu
Hi, I am thinking about trying to replicate a feature I custom-built for my Sendmail installation, in Postfix. What this does is, whenever a host I am backup for is mentioned in the SMTP RCPT command, I check to see if the host is up, and *refuse* the command (450) if it is. The consequence

Re: additional parameters to the SMTP MAIL and RCPT commands

2010-07-09 Thread Rod Dorman
On Friday, July 9, 2010, 18:57:10, Rod Dorman wrote: On Friday, July 9, 2010, 17:42:37, Sufian Hameed wrote: does Postfix Supports additional parameters to the SMTP MAIL and RCPT commands as mentioned in RFC 2821 and others? RCPT TO:forward-path [ SP rcpt-parameters ] CRLF i have tried to

Re: additional parameters to the SMTP MAIL and RCPT commands

2010-07-09 Thread Sufian Hameed
Hi, can you please elaborate? what is wrong? RCPT TO:forward-path [ SP rcpt-parameters ] CRLF is the syntax mentioned in RFC 2821. regards On Sat, Jul 10, 2010 at 1:01 AM, Rod Dorman r...@polylogics.com wrote: On Friday, July 9, 2010, 18:57:10, Rod Dorman wrote: On Friday, July 9, 2010,

Re: additional parameters to the SMTP MAIL and RCPT commands

2010-07-09 Thread Sabahattin Gucukoglu
On 10 Jul 2010, at 00:10, Sufian Hameed wrote: can you please elaborate? what is wrong? RCPT TO:forward-path [ SP rcpt-parameters ] CRLF is the syntax mentioned in RFC 2821. 1. SP is part of the ABNF grammar in the formal specification of the syntax of the command. It means a space

Re: Something Lighter Than Forward Address Verification?

2010-07-09 Thread Wietse Venema
Sabahattin Gucukoglu: Hi, I am thinking about trying to replicate a feature I custom-built for my Se -ndmail installation, in Postfix. What this does is, whenever a host I am ba -ckup for is mentioned in the SMTP RCPT command, I check to see if the host i -s up, and *refuse* the command (450)

Re: Problem with tcp_table server

2010-07-09 Thread Philipp Leusmann
Am 09.07.2010 um 22:37 schrieb Wietse Venema: Victor Duchovni: On Fri, Jul 09, 2010 at 04:04:59PM -0400, Wietse Venema wrote: Either your Postfix source is modified, miscompiled, the binaries are corrupted, or CPU is mal-functioning. Or he is running a Postfix version before 2.6.