Re: reject_unknown_reverse_client_hostname safe?

2013-05-06 Thread Stan Hoeppner
On 5/5/2013 8:10 PM, Vincent Lefevre wrote: Received: from carotte.tilapin.org (unknown [95.138.72.61]) by ioooi.vinc17.net (Postfix) with ESMTPS id EFA4959 for vinc...@vinc17.net; Tue, 2 Oct 2012 03:15:23 +0200 (CEST) $ host 95.138.72.61 Host 61.72.138.95.in-addr.arpa.

Re: Postfix 2.8.x anti anti backscattering settings

2013-05-06 Thread Josef Karliak
Hi, thanks for tip. I may be something missed: In main.cf I've added: address_verify_relayhost = 19.13.13.11 #ip of my mail server that knows all users address_verify_sender = mas...@mojedomena.cz communication between this incoming server and final imap server (between them is

Re: Postfix 2.8.x anti anti backscattering settings

2013-05-06 Thread Robert Schetterer
Am 06.05.2013 15:08, schrieb Josef Karliak: communication between this incoming server and final imap server at my knwoledge this dont work verify is done over smtp, you may ask for relay permit ,over imap via saslauthd Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49

Re: Postfix 2.8.x anti anti backscattering settings

2013-05-06 Thread Wietse Venema
Josef Karliak: Hi, thanks for tip. I may be something missed: In main.cf I've added: address_verify_relayhost = 19.13.13.11 #ip of my mail server that knows all users address_verify_sender = mas...@mojedomena.cz This overrides the relayhost setting, which is used ONLY for REMOTE

Re: signal 11 with postfix-2.11-20130426-nonprod

2013-05-06 Thread Viktor Dukhovni
On Sun, May 05, 2013 at 06:44:23PM +, Viktor Dukhovni wrote: May 5 20:35:31 mail postfix/master[2888]: warning: process /usr/lib/postfix/smtp pid 2954 killed by signal 11 Thanks. Do you have a stack trace or core dump? Ralf sent be a stack trace captured via:

Re: signal 11 with postfix-2.11-20130426-nonprod

2013-05-06 Thread Wietse Venema
Viktor Dukhovni: On Sun, May 05, 2013 at 06:44:23PM +, Viktor Dukhovni wrote: May 5 20:35:31 mail postfix/master[2888]: warning: process /usr/lib/postfix/smtp pid 2954 killed by signal 11 Thanks. Do you have a stack trace or core dump? Ralf sent be a stack trace captured

Re: postscreen_dnsbl_sites

2013-05-06 Thread Robert Lopez
Let me try again. I am assuming the link between a line in the dndsbl_reply file and the main.cf file is only a label and it could be anything. Is that a wrong assumption? I have changed the label to make it more obvious. Right now in the dnsbl_reply file I have this line (except for the key

Re: postscreen_dnsbl_sites

2013-05-06 Thread Wietse Venema
Robert Lopez: Let me try again. I am assuming the link between a line in the dndsbl_reply file and the main.cf file is only a label and it could be anything. Is that a wrong assumption? Please describe what is not clear about the following text: postscreen_dnsbl_reply_map (default: empty)

Re: reject_unknown_reverse_client_hostname safe?

2013-05-06 Thread Vincent Lefevre
On 2013-05-06 01:10:59 -0500, Stan Hoeppner wrote: On 5/5/2013 8:10 PM, Vincent Lefevre wrote: Received: from carotte.tilapin.org (unknown [95.138.72.61]) by ioooi.vinc17.net (Postfix) with ESMTPS id EFA4959 for vinc...@vinc17.net; Tue, 2 Oct 2012 03:15:23 +0200 (CEST)

Re: reject_unknown_reverse_client_hostname safe?

2013-05-06 Thread Reindl Harald
Am 06.05.2013 23:13, schrieb Vincent Lefevre: Being a Debian developer carries zero weight here. I just meant that * his mail config is probably sane (the fact that the IP doesn't have a rDNS is not his fault, but the ISP's) no, it's clearly his fault how should the ISP smell which

Re: postscreen_dnsbl_sites

2013-05-06 Thread Jan P. Kessler
Is it possible that the key is being exposed not from the postscreen_dnsbl_sites line but from a line also in main.cf which says the following? smtpd_client_restrictions = reject_rbl_client hidden-key.zen.dq.spamhaus.net Use rbl_reply_maps and a text without $rbl_domain:

Re: postscreen_dnsbl_sites

2013-05-06 Thread Wietse Venema
Jan P. Kessler: Is it possible that the key is being exposed not from the postscreen_dnsbl_sites line but from a line also in main.cf which says the following? smtpd_client_restrictions = reject_rbl_client hidden-key.zen.dq.spamhaus.net Yes. Postfix logging will tell you which

Re: reject_unknown_reverse_client_hostname safe?

2013-05-06 Thread /dev/rob0
On Mon, May 06, 2013 at 11:13:20PM +0200, Vincent Lefevre wrote: On 2013-05-06 01:10:59 -0500, Stan Hoeppner wrote: On 5/5/2013 8:10 PM, Vincent Lefevre wrote: Received: from carotte.tilapin.org (unknown [95.138.72.61]) by ioooi.vinc17.net (Postfix) with ESMTPS id EFA4959

Re: postscreen_dnsbl_sites

2013-05-06 Thread /dev/rob0
On Sat, May 04, 2013 at 06:48:36AM -0500, I wrote: On Fri, May 03, 2013 at 06:27:15PM -0600, Robert Lopez wrote: I had postscreen_dnsbl_sites = the-key-to-hidezen.dq.spamhaus.org This is right. Let me try again also! I presume your lookup is actually against key.zen.dq.spamhaus.org.

Re: reject_unknown_reverse_client_hostname safe?

2013-05-06 Thread Vincent Lefevre
On 2013-05-06 18:54:57 -0500, /dev/rob0 wrote: On Mon, May 06, 2013 at 11:13:20PM +0200, Vincent Lefevre wrote: On 2013-05-06 01:10:59 -0500, Stan Hoeppner wrote: On 5/5/2013 8:10 PM, Vincent Lefevre wrote: Received: from carotte.tilapin.org (unknown [95.138.72.61]) by