private restriction class is ignored

2010-07-13 Thread Dieter Kluenter
hello, I have added a private restriction class to main.cf smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/distribution_lists.cf, reject_unauth_destination # RESTRICTION CLASS smtpd_restriction_classes = distribution_list_01 distribution_list_01 = check_sender_access

MAIL FROM problem after upgrade

2010-07-13 Thread Johan Vromans
Hi, I've been running postfix as my MTA for many years. Recently I upgraded my main server and now I cannot send mail anymore. The system is running Fedora 13, with postfix 2.7.0 (postfix-2.7.0-1.fc13.i686). My previous version of postfix was 2.5. I have a LAN with local DNS that is connected

Re: private restriction class is ignored

2010-07-13 Thread Magnus Bäck
On Tuesday, July 13, 2010 at 09:11 CEST, Dieter Kluenter die...@dkluenter.de wrote: I have added a private restriction class to main.cf smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/distribution_lists.cf, reject_unauth_destination # RESTRICTION CLASS

body_checks only for special recipient domain

2010-07-13 Thread Körner , Uwe
Hi all, i'm runing a postfix server as gateway on a local network just for routing between different backends and the DMZ systems. I have to delete some special lines in the mail body (auto-generated by a backend) for a sms gateway. its pretty easy doing this global using the body_checks

Re: where to put domain name that's only it virtual map

2010-07-13 Thread Simon Waters
On Monday 12 July 2010 20:53:46 Phil Howard wrote: I've added a domain name which has email addresses that are only in the virtual map. There are no real mailboxes over on Dovecot (via transport) for this one. Attempts to send mail to postmas...@newdomain.example.com gets Relay access denied,

Re: body_checks only for special recipient domain

2010-07-13 Thread Magnus Bäck
On Tuesday, July 13, 2010 at 09:58 CEST, Körner, Uwe uwe.koer...@t-systems.ch wrote: i'm runing a postfix server as gateway on a local network just for routing between different backends and the DMZ systems. I have to delete some special lines in the mail body (auto-generated by a

Re: body_checks only for special recipient domain

2010-07-13 Thread Körner , Uwe
Hi Magnus, the messages will be send to the SMS gateway via postfix. a user is sending a mail (for example) to +41123456...@sms - postfix is doing a rewriting to +41123456...@examplesmsgateway.ch and delivers the mail. Cheers Uwe Am 13.07.2010 um 10:32 schrieb Magnus Bäck: On Tuesday, July

Re: Relaying mail from the same domain to another server

2010-07-13 Thread John A.
Le lundi 12 juillet 2010 19:10:38, Jeroen Geilman a écrit : On 07/12/2010 04:41 PM, John A. wrote: Hi. I'm trying to setup a multi-server mail architecture with a mail gateway and 2 final dest. servers hosting mailboxes, all on the same domain. I'm using virtual mailboxes wih MySQL

Re: Relaying mail from the same domain to another server

2010-07-13 Thread John A.
I tried to use transport as following: transport_maps = local.cf remote.cf - local.cf contains a sql query which returns virtual if the u...@domain matches. - remote.cf contains a sql query which return smtp:[mail.gateway] if the domain matches. Did this according to TABLE SEARCH ORDER section

Re: Relaying mail from the same domain to another server

2010-07-13 Thread Jerry
On Tue, 13 Jul 2010 12:42:42 +0200 John A. j...@edatis.com articulated: I tried to use transport as following: transport_maps = local.cf remote.cf - local.cf contains a sql query which returns virtual if the u...@domain matches. - remote.cf contains a sql query which return

Re: body_checks only for special recipient domain

2010-07-13 Thread Magnus Bäck
On Tuesday, July 13, 2010 at 10:44 CEST, Körner, Uwe uwe.koer...@t-systems.ch wrote: Am 13.07.2010 um 10:32 schrieb Magnus Bäck: How does messages from the SMS gateway enter your Postfix system? If they can enter via a different SMTP listener (different IP address and/or port) you

Re: Relaying mail from the same domain to another server

2010-07-13 Thread John A.
-- *** Jonathan Amiez Administrateur système j...@edatis.com it-pa...@edatis.com ad...@edatis.com *** Le mardi 13 juillet 2010 13:15:36, Jerry a écrit : On Tue, 13 Jul 2010 12:42:42 +0200 John A. j...@edatis.com articulated: I tried to use

Re: sender restrictions based on IP of sender

2010-07-13 Thread Wojtek Bogusz
thank you Noel. so simple :-) and it works. regards, Wojtek Noel Jones wrote: On 7/12/2010 8:59 AM, Wojtek Bogusz wrote: hi, could you please help me to understand is this possible with postfix configuration: i have postfix installed on the gateway computer and also on the internal mail

RHSBL bcc_maps on rcpt-to for outbound spam checks

2010-07-13 Thread Ram
We provide smtp relay services for a lot of remote mailservers There are still some inadvertent spam outbreaks , either because the remote mail server has some weak username/password account. Or because there is some Micro$$oft windows desktop with a virus spewing spams We do partial outbound

Re: where to put domain name that's only it virtual map

2010-07-13 Thread Phil Howard
On Mon, Jul 12, 2010 at 19:02, Wietse Venema wie...@porcupine.org wrote: Phil Howard: virtual_alias_domains already defaults to virtual_alias_maps.  But that wasn't working. If you believe it is broken then you must provide the evidence, otherwise you are just spreading false rumors. I'm

Re: where to put domain name that's only it virtual map

2010-07-13 Thread Phil Howard
On Tue, Jul 13, 2010 at 04:07, Simon Waters sim...@zynet.net wrote: On Monday 12 July 2010 20:53:46 Phil Howard wrote: I've added a domain name which has email addresses that are only in the virtual map. There are no real mailboxes over on Dovecot (via transport) for this one. Attempts to send

Throttling, trivial-rewrite and problem talking to service errors when using LDAP

2010-07-13 Thread Jon Kristensen
Hello! I'm getting some throttling/trivial-rewrite/problem talking to service errors when enabling LDAP with Postfix. My virtual map seems to work using postmap: cybersec:~# postmap -q jon.kristen...@cybersec.se ldap:/etc/postfix/virtual_mailbox_maps.cf /var/mail/virtual/cybersec/csjonkri/

Re: MAIL FROM problem after upgrade

2010-07-13 Thread Victor Duchovni
On Tue, Jul 13, 2010 at 09:36:48AM +0200, Johan Vromans wrote: Hi, I've been running postfix as my MTA for many years. Recently I upgraded my main server and now I cannot send mail anymore. The system is running Fedora 13, with postfix 2.7.0 (postfix-2.7.0-1.fc13.i686). My previous

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

2010-07-13 Thread Wietse Venema
Jon Kristensen: cybersec:~# tail -f /var/log/mail.log Jul 13 14:28:52 cybersec postfix/master[2422]: warning: process /usr/lib/postfix/trivial-rewrite pid 2457 killed by signal 6 You need to search your logfiles for lines with the word panic. Wietse

Re: Relaying mail from the same domain to another server

2010-07-13 Thread John A.
Le mardi 13 juillet 2010 14:12:22, John A. a écrit : On Tue, 13 Jul 2010 12:42:42 +0200 John A. j...@edatis.com articulated: I tried to use transport as following: transport_maps = local.cf remote.cf - local.cf contains a sql query which returns virtual if the u...@domain

Re: MAIL FROM problem after upgrade

2010-07-13 Thread Victor Duchovni
On Tue, Jul 13, 2010 at 05:47:12PM +0200, Johan Vromans wrote: The question remains: was this a deliberate change in 2.6 or 2.7? I double checked and verified that postfix 2.5 generates the 'right' domain names in the MAIL FROM, even without masquerade_domains being set. Postfix address

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

2010-07-13 Thread Jon Kristensen
On 7/13/2010 5:42 PM, Wietse Venema wrote: Jon Kristensen: cybersec:~# tail -f /var/log/mail.log Jul 13 14:28:52 cybersec postfix/master[2422]: warning: process /usr/lib/postfix/trivial-rewrite pid 2457 killed by signal 6 You need to search your logfiles for lines with the word panic.

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

2010-07-13 Thread Victor Duchovni
On Tue, Jul 13, 2010 at 05:58:53PM +0200, Jon Kristensen wrote: On 7/13/2010 5:42 PM, Wietse Venema wrote: Jon Kristensen: cybersec:~# tail -f /var/log/mail.log Jul 13 14:28:52 cybersec postfix/master[2422]: warning: process /usr/lib/postfix/trivial-rewrite pid 2457 killed by signal 6 You

Re: MAIL FROM problem after upgrade

2010-07-13 Thread Johan Vromans
Victor Duchovni victor.ducho...@morganstanley.com writes: Postfix address rewriting did not change between these releases. That's what I thought, too. You clearly also changed the application that injects email into Postfix. Possibly, though unlikely. This is my favourite test command:

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

2010-07-13 Thread Jon Kristensen
On 7/13/2010 6:07 PM, Victor Duchovni wrote: perhaps your LDAP is using GNUTLS (it used to exit() in the library when entropy was not available The LDAP library does indeed use GNU TLS: cybersec:~# ldd /usr/sbin/slapd | grep tls libgnutls.so.26 = /usr/lib/libgnutls.so.26 (0xb7526000)

Re: MAIL FROM problem after upgrade

2010-07-13 Thread Wietse Venema
Johan Vromans: double checked and verified that postfix 2.5 generates the 'right' domain names in the MAIL FROM, even without masquerade_domains being set. Again, Postfix does not change the MAIL FROM domain unless you configure it otherwise. Wietse

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

2010-07-13 Thread Victor Duchovni
On Tue, Jul 13, 2010 at 06:19:19PM +0200, Jon Kristensen wrote: On 7/13/2010 6:07 PM, Victor Duchovni wrote: perhaps your LDAP is using GNUTLS (it used to exit() in the library when entropy was not available The LDAP library does indeed use GNU TLS: cybersec:~# ldd /usr/sbin/slapd | grep

Re: Throttling, trivial-rewrite and problem talking to service errors when using LDAP

2010-07-13 Thread Quanah Gibson-Mount
--On Tuesday, July 13, 2010 12:49 PM -0400 Victor Duchovni victor.ducho...@morganstanley.com wrote: Test with chroot off, if that fixes it, either GNUTLS or Postfix is unhappy in the jail, and given lack of panic log entries, I am guessing GNUTLS, but the evidence is not yet conclusive. As a

PATCH: defer when pipe command dies

2010-07-13 Thread Thomas Arnett
HISTORY, 20061207: Compatibility with Postfix 2.3: undo the change to bounce instead of defer after pipe-to-command delivery fails with a signal. File: global/pipe_command.c. Part 1: http://article.gmane.org/gmane.mail.postfix.user/154616 Part 2 (tested with Postfix 2.6.6): ---

Re: MAIL FROM problem after upgrade

2010-07-13 Thread Noel Jones
On 7/13/2010 11:13 AM, Johan Vromans wrote: Victor Duchovnivictor.ducho...@morganstanley.com writes: Postfix address rewriting did not change between these releases. That's what I thought, too. You clearly also changed the application that injects email into Postfix. Possibly, though

Re: PATCH: defer when pipe command dies

2010-07-13 Thread Wietse Venema
Thomas Arnett: HISTORY, 20061207: Compatibility with Postfix 2.3: undo the change to bounce instead of defer after pipe-to-command delivery fails with a signal. File: global/pipe_command.c. Part 1: http://article.gmane.org/gmane.mail.postfix.user/154616 Part 2 (tested with

Re: PATCH: defer when pipe command dies

2010-07-13 Thread Thomas Arnett
On Jul 13, 2010, at 7:03 PM, Wietse Venema wrote: What are the symptoms of the problem? postfix/pipe[22169]: 5991748: to=u...@example.com, relay=dovecot, delay=1.9, delays=1.8/0.05/0/0.03, dsn=5.3.0, status=bounced (Command died with signal 7: /usr/libexec/dovecot/deliver)

Re: MAIL FROM problem after upgrade

2010-07-13 Thread Stan Hoeppner
Johan Vromans put forth on 7/13/2010 2:36 AM: The problem: although I have configured mydomain = squirrel.nl myorigin = squirrel.nl postfix stil uses the real, local hostname in the SMTP envelope: What do you want the SMTP host name to be? squirrel.nl ? johan.squirrel.nl ?

reverse hostname (ok) - fw dns query (ko) - unknow

2010-07-13 Thread Amedeo Rinaldo
(I apologize for my terrible English) In order to minimize dnsbl queries and, globally, to decrease external services dependency i started to test some pcre rules (check_client_access on various stages) in which i'm trying to 'whitelist' properly configured dns hosts and to slow down/rate

Re: reverse hostname (ok) - fw dns query (ko) - unknow

2010-07-13 Thread Sahil Tandon
On Wed, 2010-07-14 at 04:50:11 +0200, Amedeo Rinaldo wrote: when a client has a reverse hostname but the corresponding fw dns query doesn't exists .. here a sample.. 94.96.8.3 - reverse lookup - 94.96.8.3.dynamic.saudi.net.sa. 94.96.8.3.dynamic.saudi.net.sa. - fw lookup - NXDOMAIN

Negation in header_checks doesn't work as expected?

2010-07-13 Thread Hendra .
Hi All, I'm new to postfix as well as to this mailing list, so I apologize in advance for any blunder ;) Need some expert advice on what I'm trying to achieve but encountered a major roadblock so far. I need a mail server with a catch-all address but limit the recipient pattern to