Re: Problem with relaying denied error

2010-10-25 Thread Mikael Bak
Stan Hoeppner wrote: [snip] Yes. I would suggest configuring a new smtpd listener for this. Most people use the master.cf default TCP 587 listener daemon to accept submitted mail. MUA clients will need to be configured accordingly. Apparently your current configuration relays all mail to

Fwd: Problem with relaying denied error

2010-10-25 Thread Rich
-- Forwarded message -- From: Rich rhd...@gmail.com Date: Mon, Oct 25, 2010 at 2:00 AM Subject: Re: Problem with relaying denied error To: Stan Hoeppner s...@hardwarefreak.com On Mon, Oct 25, 2010 at 1:39 AM, Stan Hoeppner s...@hardwarefreak.comwrote: Rich put forth on

Fwd: Problem with relaying denied error

2010-10-25 Thread Rich
-- Forwarded message -- From: Rich rhd...@gmail.com Date: Mon, Oct 25, 2010 at 2:22 AM Subject: Re: Problem with relaying denied error To: Mikael Bak mik...@t-online.hu On Mon, Oct 25, 2010 at 2:18 AM, Mikael Bak mik...@t-online.hu wrote: Stan Hoeppner wrote: [snip] Yes.

Re: Problem with relaying denied error

2010-10-25 Thread Stan Hoeppner
Mikael Bak put forth on 10/25/2010 1:18 AM: Stan Hoeppner wrote: [snip] Yes. I would suggest configuring a new smtpd listener for this. Most people use the master.cf default TCP 587 listener daemon to accept submitted mail. MUA clients will need to be configured accordingly. Apparently

Re: Fwd: Problem with relaying denied error

2010-10-25 Thread Stan Hoeppner
Rich put forth on 10/25/2010 1:23 AM: 587 inet n - n - - smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes -o content_filter= -o header_checks= -o smtpd_recipient_restrictions=permit_sasl_authenticaed,reject

Re: Fwd: Problem with relaying denied error

2010-10-25 Thread Mikael Bak
Rich wrote: Hi, Instead of permit_mynetworks I'd suggest permit_sasl_authenticated on the above line. The submission service is not very often used without authentication. Mike are you saying remove permit_mynetworks? Yes, I do not see any reason to have it on the

qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Len Conrad
I'm testing a new filter, so I HOLD matching messages, then inspect them to either release or delete them. egrep -ic hold: /var/log/maillog 298 but in mailq: mailq | mailq-oneline.pl | egrep -ic ! 35 cross checking: find /var/spool/postfix/hold -type f | wc -l 35 In case I forgot

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 07:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: 554 5.7.1 sil...@foreigndomain.tld: Relay access denied; This is the response postfix sent to the remote client. The SMTP response is 554 (a permanent

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Wietse Venema
Len Conrad: I'm testing a new filter, so I HOLD matching messages, then inspect them to either release or delete them. egrep -ic hold: /var/log/maillog 298 You have multiple logfile records per queue file? grep ' hold:' /var/log/maillog | awk '{print $6}' | sort -u | wc -l (this

postfix in an IPv6 network

2010-10-25 Thread postfix
Hi listers [r...@mailhost ~]# rpm -q postfix postfix-2.5.6-3.fc11.i586 [r...@mailhost ~]# [r...@mailhost ~]# postconf -n alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases anvil_rate_time_unit = 60s command_directory = /usr/sbin config_directory = /etc/postfix

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Noel Jones
On 10/25/2010 12:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: 554 5.7.1 sil...@foreigndomain.tld: Relay access denied; This is the response postfix sent to the remote client. The SMTP response is 554 (a permanent error)

Re: postfix in an IPv6 network

2010-10-25 Thread lst_hoe02
Zitat von postfix post...@ayni.com: Hi listers [r...@mailhost ~]# rpm -q postfix postfix-2.5.6-3.fc11.i586 [r...@mailhost ~]# [r...@mailhost ~]# postconf -n alias_database = hash:/etc/postfix/aliases alias_maps = hash:/etc/postfix/aliases anvil_rate_time_unit = 60s command_directory =

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Noel Jones
On 10/25/2010 5:22 AM, Jeroen Geilman wrote: On 10/25/2010 07:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: 554 5.7.1 sil...@foreigndomain.tld: Relay access denied; This is the response postfix sent to the remote client. The

Re: postfix in an IPv6 network

2010-10-25 Thread postfix
Hi Andreas I have tried 2002:::1::/48, but then, I got the following error message from the server: Oct 25 12:51:17 mailhost postfix/smtpd[5229]: fatal: non-null host address bits in 2002:::1::/48, perhaps you should use 2002::::/48 instead And again, smtpd went

Re: postfix in an IPv6 network

2010-10-25 Thread lst_hoe02
Zitat von postfix post...@ayni.com: Hi Andreas I have tried 2002:::1::/48, but then, I got the following error message from the server: Oct 25 12:51:17 mailhost postfix/smtpd[5229]: fatal: non-null host address bits in 2002:::1::/48, perhaps you should use

Re: postfix in an IPv6 network

2010-10-25 Thread Christian Roessner
1. Problem: format of IPv6 address in mynetworks After many trials, I have found out that the ipv6 Address in the mynetworks attribute must have a double semicolon at the end, otherwise the smtpd server throttles: Oct 25 12:40:10 mailhost postfix/smtpd[5019]: connect from

Re: NOQUEUE Relay Access denied

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 01:46 PM, Noel Jones wrote: On 10/25/2010 5:22 AM, Jeroen Geilman wrote: On 10/25/2010 07:14 AM, t...@diogunix.com wrote: Noel, thanks a lot for your help. Just to precise my need for information: 554 5.7.1 sil...@foreigndomain.tld: Relay access denied; This is the

Re: postfix in an IPv6 network

2010-10-25 Thread Erwan David
On Mon, Oct 25, 2010 at 01:40:46PM CEST, lst_ho...@kwsoft.de said: The address 2002:::1::21 is not within 2002::::/64 as far as i can tell. You should use 2002:::1::/64 instead in mynetworks. The :: means all zero if memory serves me right. I use

Re: postfix in an IPv6 network

2010-10-25 Thread lst_hoe02
Zitat von Erwan David er...@rail.eu.org: On Mon, Oct 25, 2010 at 01:40:46PM CEST, lst_ho...@kwsoft.de said: The address 2002:::1::21 is not within 2002::::/64 as far as i can tell. You should use 2002:::1::/64 instead in mynetworks. The :: means all zero if memory

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Len Conrad
-- Original Message -- From: Noel Jones njo...@megan.vbhcs.org Reply-To: postfix users postfix-users@postfix.org Date: Mon, 25 Oct 2010 06:16:07 -0500 On 10/25/2010 4:28 AM, Len Conrad wrote: I'm testing a new filter, so I HOLD matching messages, then

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Wietse Venema
Len Conrad: Several reasons come to mind... Mail can trigger a HOLD rule but be rejected by a later rule. Why would a HOLD: continue to be processed by other rules? Isn't HOLD a first-match-wins case? HOLD is a non-final action, like FILTER, WARN and IGNORE. REJECT is an example of a

Re: qty hold: logged does.not.equal qty hold queue ?

2010-10-25 Thread Noel Jones
On 10/25/2010 8:24 AM, Len Conrad wrote: -- Original Message -- From: Noel Jonesnjo...@megan.vbhcs.org Reply-To: postfix userspostfix-users@postfix.org Date: Mon, 25 Oct 2010 06:16:07 -0500 On 10/25/2010 4:28 AM, Len Conrad wrote: I'm testing a new

is this DNS setup RFC-correct ?

2010-10-25 Thread Leonardo Rodrigues
Hi, This question is not postfix-related so its somehow off-topic. But it's related to mail systems, so i cant imagine any other place to get some help on this subject. I have a domain (domain.com.br) with lots of subdomains in the format nnn.domain.com.br.

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Wietse Venema
Leonardo Rodrigues: i really dont know if this setup (MX record but no A record) is RFC-OK. The only think i know is that it's been working for years and i receive thousand of emails daily on my several subdomains with no problem at all. The EMAIL RFC requirement is that a domain name

Re: Encrypt messages between 2 servers

2010-10-25 Thread Victor Duchovni
On Sun, Oct 24, 2010 at 11:22:24AM +0200, martijn.list wrote: Just use opportunistic TLS on both ends and go. It depends on the requirements whether TLS is good enough. It's not always possible to be 100% certain that the complete route is TLS protected. All intermediate servers should

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Christoph Anton Mitterer
I know SPF is disliked here ;) On Mon, 2010-10-25 at 14:20 -0200, Leonardo Rodrigues wrote: nnnINTXTv=spf1 include:domain.com.br -all But using TXT for it is (IIRC) discouraged by the RFC and SPF RR shoudl be used. Cheers, Chris.

one Postfix instance serving messages in two different directions

2010-10-25 Thread Zhou, Yan
Hi there, How can I have one single Postfix instance routing messages differently, depends on which IP address they are arriving at SMTP. If an outside connection arrives, Postfix will deliver message to my customized transport, which calls a script and passes the message. If an internal

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 07:43 PM, Zhou, Yan wrote: Hi there, How can I have one single Postfix instance routing messages differently, depends on which IP address they are arriving at SMTP. By making postfix listen with separate smtpd listeners on those IPs. Those instances can then have different

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Wietse Venema
Zhou, Yan: Hi there, How can I have one single Postfix instance routing messages differently, depends on which IP address they are arriving at SMTP. If an outside connection arrives, Postfix will deliver message to my customized transport, which calls a script and passes the message.

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 07:41 PM, Christoph Anton Mitterer wrote: I know SPF is disliked here ;) Like doesn't enter into it. Discussion of SPF is verboten. simple. -- J.

RE: one Postfix instance serving messages in two different directions

2010-10-25 Thread Zhou, Yan
Can you elaborate how different smtpd can have different transport settings? I won't want to create my own SMTPD process. The following won't work, because the transport cannot distinguish IP address. I tried this but does not work. I wonder if only smtp process can vary based on different IP.

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Victor Duchovni
On Mon, Oct 25, 2010 at 02:25:32PM -0400, Zhou, Yan wrote: Can you elaborate how different smtpd can have different transport settings? I won't want to create my own SMTPD process. The following won't work, because the transport cannot distinguish IP address. I tried this but does not

Set relay_domains LDAP.

2010-10-25 Thread Lauro Costa G. Borges
I'm using Postfix 2.7.0 and Dovecot 1.2.9. I don't understand why this machine (imap) is trying to send warning emails as if the recipient was local. If I set relay_domains to target.example.org, it works ok, I can send email to *...@gmail.com (or any other domain), from imap. If I

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Victor Duchovni
On Mon, Oct 25, 2010 at 07:49:14PM +0200, Jeroen Geilman wrote: On 10/25/2010 07:41 PM, Christoph Anton Mitterer wrote: I know SPF is disliked here ;) Like doesn't enter into it. Discussion of SPF is verboten. simple. The politics and wisdom of SPF are off topic. Simple configuration

Re: Set relay_domains LDAP.

2010-10-25 Thread Victor Duchovni
On Mon, Oct 25, 2010 at 04:43:15PM -0200, Lauro Costa G. Borges wrote: I'm using Postfix 2.7.0 and Dovecot 1.2.9. I don't understand why this machine (imap) is trying to send warning emails as if the recipient was local. If I set relay_domains to target.example.org, it works ok, I

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Wietse Venema
To send mail to a script depending on the arriving SMTP port: /etc/postfix/master.cf: 1.2.3.4:smtp inet n - n - - smtpd -o content_filter=script_for_1_2_3_4: script_for_1_2_3_4 unix - n n - - pipe

Re: one Postfix instance serving messages in two different directions

2010-10-25 Thread Jeroen Geilman
On 10/25/2010 08:30 PM, Victor Duchovni wrote: On Mon, Oct 25, 2010 at 02:25:32PM -0400, Zhou, Yan wrote: Can you elaborate how different smtpd can have different transport settings? I won't want to create my own SMTPD process. The following won't work, because the transport cannot

Re: postfix not delivering all by itself

2010-10-25 Thread Jay G. Scott
heh. the subject of my question seems to be wrong. there's something else i don't understand. here's my postconf -n output: - command_directory = /usr/sbin config_directory = /etc/postfix content_filter = pmx:127.0.0.1:10025 daemon_directory

Re: postfix not delivering all by itself

2010-10-25 Thread Wietse Venema
Jay G. Scott: alias_maps: The alias databases that are used for local(8) delivery You can change the path for mail that is not delivered locally with virtual_alias_maps and with transport_maps. virtual_alias_maps changes the recipient address. Example: search key lookup result

Re: is this DNS setup RFC-correct ?

2010-10-25 Thread Scott Lambert
On Mon, Oct 25, 2010 at 02:20:51PM -0200, Leonardo Rodrigues wrote: I have a domain (domain.com.br) with lots of subdomains in the format nnn.domain.com.br. nnn.domain.com.br (about 40 different subdomains) have only 2 (two) DNS entries: nnnINMX10

Re: NOQUEUE Relay Access denied

2010-10-25 Thread t...@diogunix.com
Noel and others, In the specific case of Relay access denied it will always be the recipient address, but there are other reasons for mail to be rejected. That section of the log line shows what was rejected along with a brief text description/reason. The what can be any part of the

SMTP relay and greylisting

2010-10-25 Thread utahnix
Hello all, This question has probably been asked on this list before, but maybe not quite with these circumstances. I'm hoping one of you can give me some direction. I've got a fairly typical Postfix setup... Postfix, Cyrus IMAP, ClamAV, SpamAssassin... all on Linux. Anyway, I've set up

Re: SMTP relay and greylisting

2010-10-25 Thread Michael Orlitzky
On 10/25/2010 10:38 PM, utahnix wrote: Hello all, This question has probably been asked on this list before, but maybe not quite with these circumstances. I'm hoping one of you can give me some direction. I've got a fairly typical Postfix setup... Postfix, Cyrus IMAP, ClamAV,

Re: SMTP relay and greylisting

2010-10-25 Thread utahnix
On 10/25/2010 9:05 PM, Michael Orlitzky wrote: On 10/25/2010 10:38 PM, utahnix wrote: Hello all, This question has probably been asked on this list before, but maybe not quite with these circumstances. I'm hoping one of you can give me some direction. I've got a fairly typical Postfix