Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread martin f krafft
also sprach Wietse Venema wie...@porcupine.org [2011.02.24.1729 +0100]: This week I was doing some expiriments: I configured Postfix to make postscreen listen on both primary AND backup MX addresses. This was a matter of adding a second IP address to the ethernet interface of my mail server,

Mangling the verification database

2011-08-09 Thread Bernhard Schmidt
Hi, we are happily running several postfix installations accepting mails from external sources and distributing them internally. To avoid backscatter all internal destinations we don't have an LDAP connect for are checked using address verification. Until recently we ran version 2.7.1 and

Re: sending mass mail

2011-08-09 Thread Ralf Hildebrandt
* Amira Othman a.oth...@cairosource.com: Hi all I want to send mails to all users I have in my database and I am using postfix-2.3.3-2.3.el5_6. I am afraid that ISPs consider me spammer and add me to black list.Any one can suggest to me where to start to send mass mails and how to be

Re: sending mass mail

2011-08-09 Thread Kranti Kiran Patnaik
Use DKIM, domainkeys, a perfect emailer like pearmail or swiftmailer, control the rate limit, use proper SPF, fill bulk mailer forms with all major ISPs. Get FBL subscription from all ISP's except Gmail, and very strictly remove them from your list. On Tue, Aug 9, 2011 at 7:02 PM, Amira Othman

Re: Mangling the verification database

2011-08-09 Thread Noel Jones
On 8/9/2011 9:03 AM, Bernhard Schmidt wrote: Hi, we are happily running several postfix installations accepting mails from external sources and distributing them internally. To avoid backscatter all internal destinations we don't have an LDAP connect for are checked using address

Re: sending mass mail

2011-08-09 Thread claus westerkamp
your postfix might complain about the number or recipients see smtpd_recipient_limit default_destination_recipient_limit and such if you run into this regards claus

Re: using smtpd_sender_restrictions to block mail from a domain

2011-08-09 Thread Christopher Adams
On Mon, Aug 8, 2011 at 8:54 PM, /dev/rob0 r...@gmx.co.uk wrote: On Mon, Aug 08, 2011 at 04:46:13PM -0700, Christopher Adams wrote: [snip] readme_directory = /usr/share/doc/postfix-2.0.16/README_FILES If this is really 2.0.16, you should consider upgrading! Postfix 2.4 has been EOL'ed as of

Re: sending mass mail

2011-08-09 Thread Dennis Carr
Check with your ISP, make sure spf and domain keys are up to date, and install a mailing list manager like Mailman. -Dennis Carr -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. Amira Othman a.oth...@cairosource.com wrote: Hi all I want to send mails to all users I have

Re: main.cf best practices

2011-08-09 Thread Peter Blair
On Mon, Aug 8, 2011 at 3:48 PM, Stephen Atkins satk...@skircr.com wrote: My main goal is to figure out what I should have in each section of main.cf (smptd/client restrictions to help stop spam and not to be a open relay or back scatter host. You won't be successful in stopping spam with any

Re: sending mass mail

2011-08-09 Thread Peter Blair
On Tue, Aug 9, 2011 at 10:38 AM, Ralf Hildebrandt ralf.hildebra...@charite.de wrote: * Amira Othman a.oth...@cairosource.com: Hi all I want to send mails to all users I have in my database and I am using postfix-2.3.3-2.3.el5_6. I am afraid that ISPs consider me spammer and add me to black

Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread Steve Fatula
almost half a year after the above message introducing postscreen and the idea of using a low-priority MX on the same host to raise the entry barrier for the postscreen whitelist, I would like to ping back to the thread with the following question: Has anyone found out how to make this work in

Backscatter Theory

2011-08-09 Thread Gary Chambers
All, I apologize in advance for this Postmaster 101 question. Am I correct in understanding that every mail server that is 1) attempting to deliver e-mail to an invalid address on my server and 2) is from=, and 3) the message did not originate on my server is improperly configured? IOW, if

Postscreen, SPF and DKIM?

2011-08-09 Thread Steve Fatula
Yes, I do realize the more added to postscreen, the slower it gets, etc. However, one function that would seem to fit perfectly if it's not too slow would be spf and dkim checks. SPF we are doing via a milter, and, seems to be fast. Yes, it's DNS records, but, postscreen already does much worse

Alternatives to two instances

2011-08-09 Thread ricardus1867
Hi! I'm running postfix on a VPS with two IP addresses. Each IP address is used for a different service and I don't want those to be linked. Everything would be running smooth IF it wasn't for the SMTP banner. Which promptly gives away that seconddomain.com is using the same server as

Re: sending mass mail

2011-08-09 Thread Ralf Hildebrandt
* Peter Blair popc...@snickers.org: Your ISP would be a start. +1 In all seriousness, don't do this yourself. Indeed. If one has to ask, one is not in the position to do this oneself. No offense intended. Engage an ESP like mailchimp etc. What you're describing sounds terribly

Re: Backscatter Theory

2011-08-09 Thread Mark Goodge
On 09/08/2011 19:18, Gary Chambers wrote: All, I apologize in advance for this Postmaster 101 question. Am I correct in understanding that every mail server that is 1) attempting to deliver e-mail to an invalid address on my server and 2) is from=, and 3) the message did not originate on my

Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread Wietse Venema
martin f krafft: also sprach Wietse Venema wie...@porcupine.org [2011.02.24.1729 +0100]: This week I was doing some expiriments: I configured Postfix to make postscreen listen on both primary AND backup MX addresses. This was a matter of adding a second IP address to the ethernet

Re: Postscreen, SPF and DKIM?

2011-08-09 Thread Wietse Venema
Steve Fatula: Yes, I do realize the more added to postscreen, the slower it gets, etc. However, one function that would seem to fit perfectly if it's not too slow would be spf and dkim checks. SPF we are doing Postscreen by design NEVER SEES THE ENVELOPE OR CONTENT of email that is received by

RE: Postscreen, SPF and DKIM?

2011-08-09 Thread Murray S. Kucherawy
-Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Steve Fatula Sent: Tuesday, August 09, 2011 11:12 AM To: Postfix Users Subject: Postscreen, SPF and DKIM? However, it is good practice to reject mail that fails spf or

Re: Postscreen, SPF and DKIM?

2011-08-09 Thread Steve Fatula
Postfix architecture aside, I think this is bad advice, at least about DKIM.  The premises are false. Care to elaborate? Clearly, this is not possible to do in postscreen sort of making this moot, but, SPF spec says to reject messages that have status fail. DKIM says you MAY, and, several

Re: Alternatives to two instances

2011-08-09 Thread Noel Jones
On 8/9/2011 2:01 PM, ricardus1867 wrote: Hi! I'm running postfix on a VPS with two IP addresses. Each IP address is used for a different service and I don't want those to be linked. Everything would be running smooth IF it wasn't for the SMTP banner. Which promptly gives away that

Re: Backscatter Theory

2011-08-09 Thread Noel Jones
On 8/9/2011 1:18 PM, Gary Chambers wrote: All, I apologize in advance for this Postmaster 101 question. Am I correct in understanding that every mail server that is 1) attempting to deliver e-mail to an invalid address on my server and 2) is from=, and 3) the message did not originate

RE: Postscreen, SPF and DKIM?

2011-08-09 Thread Murray S. Kucherawy
-Original Message- From: Steve Fatula [mailto:compconsult...@yahoo.com] Sent: Tuesday, August 09, 2011 1:15 PM To: Murray S. Kucherawy; Postfix Users Subject: Re: Postscreen, SPF and DKIM? Care to elaborate? Clearly, this is not possible to do in postscreen sort of making this

Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread Noel Jones
On 8/9/2011 2:41 PM, Wietse Venema wrote: [snip discussion of minimizing deep protocol test delays] What do you think about an option to skip the after 220 tests based on dnswl results? If an IP is listed on a dnswl, it's quite likely a real mail server and would pass all the disruptive tests

Re: sending mass mail

2011-08-09 Thread lst_hoe02
Zitat von Amira Othman a.oth...@cairosource.com: Hi all I want to send mails to all users I have in my database and I am using postfix-2.3.3-2.3.el5_6. I am afraid that ISPs consider me spammer and add me to black list.Any one can suggest to me where to start to send mass mails and how to be

Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread /dev/rob0
On Tue, Aug 09, 2011 at 03:54:55PM -0500, Noel Jones wrote: On 8/9/2011 2:41 PM, Wietse Venema wrote: [snip discussion of minimizing deep protocol test delays] What do you think about an option to skip the after 220 tests based on dnswl results? If an IP is listed on a dnswl, it's quite

Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread Noel Jones
On 8/9/2011 4:49 PM, /dev/rob0 wrote: On Tue, Aug 09, 2011 at 03:54:55PM -0500, Noel Jones wrote: I suppose we could overload the postscreen_dnsbl_threshold parameter for this, something like postscreen_dnsbl_threshold = reject-boundary;pass-boundary where reject-boundary is required

Re: Postscreen, SPF and DKIM?

2011-08-09 Thread Wietse Venema
Wietse Venema: Steve Fatula: Yes, I do realize the more added to postscreen, the slower it gets, etc. However, one function that would seem to fit perfectly if it's not too slow would be spf and dkim checks. SPF we are doing Postscreen by design NEVER SEES THE ENVELOPE OR CONTENT of

Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread martin f krafft
also sprach Wietse Venema wie...@porcupine.org [2011.08.09.2141 +0200]: Has anyone found out how to make this work in combination with a physically-separate secondary MX? At this time, Postfix supports no suitable database type that can be shared AND provide the performance level

Re: postscreen deep protocol tests without mail delays

2011-08-09 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 8/9/2011 6:02 PM, martin f krafft wrote: I was wondering more about the prioritisation of 3–4 MX records, two for the primary and possibly only one for the secondary, e.g. 10 primary-0.mx 20 secondary.mx 30 primary-1.mx In this scenario,

Problem with DNS lookup when chrooted

2011-08-09 Thread ricardus1867
Hi! By trying to add a second postfix instance (something seems to have went terribly wrong), I managed to screw up my postfix. Badly. Nothing would work anymore. So I tried the scorched earth approach (purge, then install). That worked more or less, except for the fact that

Re: Alternatives to two instances

2011-08-09 Thread ricardus1867
Just as I feared. I wan't worried about the resources, I just didn't wanna risk wrecking my postfix. I'm good at this... Well, I took the risk and wrecking the postfix I did (follow-up: http://old.nabble.com/Problem-with-DNS-lookup-when-chrooted-td32231386.html). Will try again when I get it