Re: Postfix -- question regarding SPAM and Mailman

2012-10-03 Thread Wietse Venema
Futchko, Rose: This message was RETURNED TO your mailman service. That does not prove that it was SENT FROM your mailman service. That is a great point. So, I dug a little deeper into the mail log and found what I believe is the outbound information: Oct 1 09:39:07

Re: postscreen_access_list requires 'permit', not 'PERMIT'

2012-10-03 Thread francis picabia
On Tue, Oct 2, 2012 at 9:20 PM, Wietse Venema wie...@porcupine.org wrote: Nope. If you were testing this more carefully then you would have found that upper or lower case does not matter in this context. I tested the exact same line with PERMIT and permit. permit allowed the whitelist entry

PATCH: postscreen_access_list requires 'permit', not 'PERMIT'

2012-10-03 Thread Wietse Venema
francis picabia: [ Charset ISO-8859-1 unsupported, converting... ] On Tue, Oct 2, 2012 at 9:20 PM, Wietse Venema wie...@porcupine.org wrote: Nope. If you were testing this more carefully then you would have found that upper or lower case does not matter in this context. I tested the

How to change queue id?

2012-10-03 Thread Steffen Schebesta
Hello everybody, I deliver mails to my Postfix through smtpd. Postfix then takes it and sends it out to the recipient. Now I'm trying to change the queue_id for each email in Postfix 2.9 source code so that it is equal to the Message-ID (it is unique, don't worry) that I set in the email

Re: How to change queue id?

2012-10-03 Thread Reindl Harald
Am 03.10.2012 16:53, schrieb Steffen Schebesta: I deliver mails to my Postfix through smtpd. Postfix then takes it and sends it out to the recipient. Now I'm trying to change the |queue_id| for each email in Postfix 2.9 source code so that it is equal to the |Message-ID| (it is unique,

Re: Pointer to 'guide for setting up postfix'?

2012-10-03 Thread Matthew Moore
On 02/10/12 17:14, John Hudak wrote: I want to set up a mail server that sends mail through a relay, e.g. smtp.google.com http://smtp.google.com and receives mail via a domain registered at No-ip.com via email redirects. I know this is not the 'proper' way to set up a email server, but in

Re: How to change queue id?

2012-10-03 Thread Viktor Dukhovni
On Wed, Oct 03, 2012 at 04:53:22PM +0200, Steffen Schebesta wrote: I deliver mails to my Postfix through smtpd. Postfix then takes it and sends it out to the recipient. One or more recipients. And it may receive one or more copies of the original message if it was sent to many recipients.

Re: How to change queue id?

2012-10-03 Thread Noel Jones
On 10/3/2012 9:53 AM, Steffen Schebesta wrote: Now I'm trying to change the |queue_id| for each email in Postfix 2.9 source code so that it is equal to the |Message-ID| (it is unique, don't worry) that I set in the email header when passing the email to Postfix through smtpd. Why? At any

Re: How to change queue id?

2012-10-03 Thread Wietse Venema
Steffen Schebesta: Hello everybody, I deliver mails to my Postfix through smtpd. Postfix then takes it and sends it out to the recipient. Now I'm trying to change the queue_id for each email in Postfix 2.9 source code so that it is equal to the Message-ID (it is unique, don't worry) that I

reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with some classes of persistent spammers was to tell the local DNS resolver (BIND 9) to

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Noel Jones
On 10/3/2012 1:15 PM, Bill Cole wrote: I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with some classes of persistent spammers was to

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Bill Cole: I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with some Sort answer: Postfix does not pass SERVFAIL, it just rejects them

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
Alumno Etsii: virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf In this table, there is a row with value: devels.es So why is this still happening? What is the result for: postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf Wietse

Re: Question about DNS registries

2012-10-03 Thread Noel Jones
On 10/3/2012 1:28 PM, Alumno Etsii wrote: 2012/10/2 Dennis Guhl li...@dguhl.org mailto:li...@dguhl.org On Tue, Oct 02, 2012 at 09:54:02AM +0100, Alumno Etsii wrote: Hi list! Yesterday I was experimenting with the DNS registries assigned to my mail server.

Re: Question about DNS registries

2012-10-03 Thread Alumno Etsii
2012/10/3 Noel Jones njo...@megan.vbhcs.org On 10/3/2012 1:28 PM, Alumno Etsii wrote: 2012/10/2 Dennis Guhl li...@dguhl.org mailto:li...@dguhl.org On Tue, Oct 02, 2012 at 09:54:02AM +0100, Alumno Etsii wrote: Hi list! Yesterday I was experimenting with the DNS

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
Wietse Venema: Alumno Etsii: virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf In this table, there is a row with value: devels.es So why is this still happening? What is the result for: postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
Alumno Etsii: postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf If this returns devels.es, then Postfix will try to deliver to the service specified with virtual_transport instead of the relayhost. What is the output from: postconf virtual_transport

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 14:48, Wietse Venema wrote: Bill Cole: I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with some Sort answer:

Question about forwarding and SPAM checking

2012-10-03 Thread Dave Lewis - Mailinglist
Hi, I just recently made some changes for one of the users that I have on my system. Their request was a simple change to forward mail to another off server account as well as deliver it locally. I made the changes in postfix admin without issue but they are concerned that they are now

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Ralf Hildebrandt
DNS is definitely failing for dfleur.com, as the hit on the SA rule NO_DNS_FOR_FROM indicates and as confirmed by a manual query: ~$ dig dfleur.com mx ; DiG 9.8.1-P1 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 47102 ;; flags: qr rd ra;

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Bill Cole: ; DiG 9.9.1-P3 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 How will I reproduce this quickly? Wietse

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Viktor Dukhovni
On Wed, Oct 03, 2012 at 04:00:05PM -0400, Bill Cole wrote: reject_unknown_sender_domain This is what I would expect, based on the documentation. However, it is accepting and delivering mail whose sender domain yields a SERVFAIL and I can't figure out why. Note that as I stated in my first

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 16:21, Ralf Hildebrandt wrote: DNS is definitely failing for dfleur.com, as the hit on the SA rule NO_DNS_FOR_FROM indicates and as confirmed by a manual query: ~$ dig dfleur.com mx ; DiG 9.8.1-P1 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode:

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Stefan Palme
On Wed, 2012-10-03 at 16:00 -0400, Bill Cole wrote: lazarus:~# dig dfleur.com mx ; DiG 9.9.1-P3 dfleur.com mx ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 ... ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Oct 3 15:07:35 2012 Your locally installed DNS

Re: Question about DNS registries

2012-10-03 Thread Wietse Venema
You report: # postconf -n ... virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf # postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf devels.es # postconf virtual_transport virtual_transport = virtual This means that mail for devels.es is given to the

Re: Question about DNS registries

2012-10-03 Thread Alumno Etsii
2012/10/3 Wietse Venema wie...@porcupine.org You report: # postconf -n ... virtual_mailbox_domains = proxy:mysql:/etc/postfix/ mysql-virtual_domains.cf # postmap -q devels.es mysql:/etc/postfix/mysql-virtual_domains.cf devels.es # postconf virtual_transport virtual_transport = virtual

AW: How to change queue id?

2012-10-03 Thread Steffen Schebesta
Thanks for all the insightful answers. So, I actually use the long_queue_ids options and I save the queue_ids to a database to later compare them to the queue_ids found in the mail log to parse and mark the bounces. The problem - and thus the source for my question - is that this always means a

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread /dev/rob0
On Wed, Oct 03, 2012 at 04:26:33PM -0400, Wietse Venema wrote: Bill Cole: ; DiG 9.9.1-P3 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 How will I reproduce this quickly? Comcast owns dnssec-failed.org, a zone set up with

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 16:26, Wietse Venema wrote: Bill Cole: ; DiG 9.9.1-P3 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 How will I reproduce this quickly? I am not sure. If your resolver is BIND you can make dfleur.com (and as

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 16:38, Stefan Palme wrote: On Wed, 2012-10-03 at 16:00 -0400, Bill Cole wrote: lazarus:~# dig dfleur.com mx ; DiG 9.9.1-P3 dfleur.com mx ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 ... ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Oct 3

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread /dev/rob0
On Wed, Oct 03, 2012 at 04:35:59PM -0500, I wrote: On Wed, Oct 03, 2012 at 04:26:33PM -0400, Wietse Venema wrote: Bill Cole: ; DiG 9.9.1-P3 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 How will I reproduce this

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
On 3 Oct 2012, at 14:46, Noel Jones wrote: On 10/3/2012 1:15 PM, Bill Cole wrote: I recently updated a Postfix system from 2.4 to 2.9 and I have found what I believe is a change in behavior for reject_unknown_sender_domain which is confusing. In the past, an effective means of dealing with

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Wietse Venema: Bill Cole: ; DiG 9.9.1-P3 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 Net::DNS::Nameserver to the rescue, with a trivial reply handler of: sub reply_handler { my ($qname, $qclass, $qtype,

Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Wietse Venema
Bill Cole: On 3 Oct 2012, at 16:26, Wietse Venema wrote: Bill Cole: ; DiG 9.9.1-P3 dfleur.com mx ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 41183 How will I reproduce this quickly? I am not sure. If your resolver is BIND you can

SOLVED! was Re: reject_unknown_sender_domain and DNS SERVFAIL result

2012-10-03 Thread Bill Cole
Predictably, the cause of this odd behavior was in fact external to Postfix. The server has 3 DNS servers in resolv.conf: itself, another one sitting across the room, and a third far away which was added in the same disaster recovery event that precipitated the upgrade from 2.4.5 to 2.9.3 a

RE: Question about forwarding and SPAM checking

2012-10-03 Thread Dave Lewis - Mailinglist
Let me add to this question since I've been digging further, and racking my brain for a simple solution. If you have postfix with postfixadmin , mysql, spamassassin, maildrop configured and working where it is calling the default maildroprc file in /etc, Is there still a way to call a 2nd