Re: Is this an attack?

2013-06-20 Thread Andreas Kasenides
On 20-06-2013 19:48, Noel Jones wrote: On 6/20/2013 5:49 AM, Andreas Kasenides wrote: Apparently there has been some harvesting going on of mail addresses where everything that has a "@" is picked up. The question is: was this harvesting from our log files or our mail storage - a very serious

[postfix-users] test

2013-06-20 Thread Wijatmoko U. Prayitno
test -- WUP -- To unsubscribe, e-mail: postfix-users+unsubscr...@id.postfix.org For additional commands, e-mail: postfix-users+h...@id.postfix.org

Re: Block users from sending to ALL addresses except for specific addresses

2013-06-20 Thread linuxknight
Thanks rob0, no need to beat me down with the access comment - I simply meant using REJECT within the access file. I have gone over the restriction class readme as well but didnt find an implementation, I am a somewhat new postfix user but able to learn. Yes, my users are untrustworthy and on the

Re: Block users from sending to ALL addresses except for specific addresses

2013-06-20 Thread /dev/rob0
On Thu, Jun 20, 2013 at 12:23:19PM -0400, linuxknight wrote: > Greetings, I am attempting to limit specific local users from > sending mail to ALL addresses except members of my management team. > > Basically I want our sales agents to be able to receive important > emails/bulletins from managem

Re: question about auth, smtpd and roundcube

2013-06-20 Thread /dev/rob0
On Thu, Jun 20, 2013 at 10:51:28AM +0200, Felix Rubio Dalmau wrote: > I have set up a postfix+dovecot+roundcube installation. Currently, > I have set up these smtpd parameters: > > smtpd_tls_security_level = may > smtpd_tls_auth_only = yes > smtpd_discard_ehlo_keyword_address_ma

Re: question about auth, smtpd and roundcube

2013-06-20 Thread btb
On 2013.06.20 04.51, Felix Rubio Dalmau wrote: Hi all, I have set up a postfix+dovecot+roundcube installation. Currently, I have set up these smtpd parameters: smtpd_tls_security_level = may smtpd_tls_auth_only = yes smtpd_discard_ehlo_keyword_address_maps = has

Re: Is this an attack?

2013-06-20 Thread Thomas Harold
On 6/20/2013 6:49 AM, Andreas Kasenides wrote: My conclusion is that the harvester is blindly picking usernames and domains from wherever it can (possibly from compromised systems but also from clear text net traffic) and pairing them at random!! I guarantee that they are pairing them at rand

Re: MySQL tables and official documenttation

2013-06-20 Thread Wietse Venema
Mohsen Pahlevanzadeh: > > > Unfortunately, i created my tables according to the older tutorial, i > > > search in dovecot.org and postfix.org but i didn't find any official > > > documentation for tables. Postfix does not require any specific table organization. Postfix requires only that the tab

Re: Is this an attack?

2013-06-20 Thread Noel Jones
On 6/20/2013 5:49 AM, Andreas Kasenides wrote: > Apparently there has been some harvesting going on of mail addresses > where everything that has a "@" is picked up. The question is: was > this harvesting from our log files or our mail storage - a very serious > possibility which would indicate a

Block users from sending to ALL addresses except for specific addresses

2013-06-20 Thread linuxknight
Greetings, I am attempting to limit specific local users from sending mail to ALL addresses except members of my management team. Basically I want our sales agents to be able to receive important emails/bulletins from management, but only be able to reply to and send email to the members of manage

Re: MySQL tables and official documenttation

2013-06-20 Thread Mohsen Pahlevanzadeh
On Thu, 2013-06-20 at 15:25 +0200, Jeroen Geilman wrote: > On 06/20/2013 03:04 PM, Mohsen Pahlevanzadeh wrote: > > Dear all, > > > > Unfortunately, i created my tables according to the older tutorial, i > > search in dovecot.org and postfix.org but i didn't find any official > > documentation for t

Re: External connection to Postfix problem

2013-06-20 Thread Wietse Venema
Wietse: > Report the output from "telnet postfix-ip-address 25" from a > different machine on your local network. Gary Brinker: > The output from the internal address is the 250 greeting banner > and using the external IP is could not open connection : connection > failed Gary This confirms that

RE: External connection to Postfix problem

2013-06-20 Thread Gary Brinker
> Report the output from "telnet postfix-ip-address 25" from a > different machine on your local network. > > Wietse The output from the internal address is the 250 greeting banner and using the external IP is could not open connection : connection failed Gary

Re: External connection to Postfix problem

2013-06-20 Thread Scott Kitterman
On Thursday, June 20, 2013 10:19:25 AM Gary Brinker wrote: > Because of a hardware failure on an old installation of a postfix gateway I > took the opportunity to install an up to date version on an Ubuntu server. > I am not too far into the configuration but am having a basic problem with > acces

Re: External connection to Postfix problem

2013-06-20 Thread Wietse Venema
Gary Brinker: > The issue is that I can telnet into it internally with no problem > but cannot reach it externally. I hooked up wireshark and if I'm > interpreting it correctly I do find the initial SYN come in but > no connection is established. Report the output from "telnet postfix-ip-address

External connection to Postfix problem

2013-06-20 Thread Gary Brinker
Because of a hardware failure on an old installation of a postfix gateway I took the opportunity to install an up to date version on an Ubuntu server. I am not too far into the configuration but am having a basic problem with accessing it from external sites. I think I can eliminate the usual D

Re: MySQL tables and official documenttation

2013-06-20 Thread Jeroen Geilman
On 06/20/2013 03:04 PM, Mohsen Pahlevanzadeh wrote: Dear all, Unfortunately, i created my tables according to the older tutorial, i search in dovecot.org and postfix.org but i didn't find any official documentation for tables. I want to use PF 2.10 and dovecot 2. Its tutorial was wrote on debian

RE: Postfix Content Filter

2013-06-20 Thread Venkat R
Thank you Ashish. -Original Message- From: "Sharma, Ashish" Sent: ‎6/‎20/‎2013 7:01 AM To: "Postfix users" Subject: RE: Postfix Content Filter Prasad, After going through the mail thread, following are my advices for you: 1. sendmail-jilter (http://sendmail-jilter.sourceforge.net/) w

MySQL tables and official documenttation

2013-06-20 Thread Mohsen Pahlevanzadeh
Dear all, Unfortunately, i created my tables according to the older tutorial, i search in dovecot.org and postfix.org but i didn't find any official documentation for tables. I want to use PF 2.10 and dovecot 2. Its tutorial was wrote on debian etch. eatch is very old. ---mohsen

Re: 250-AUTH LOGIN PLAIN & 250-AUTH=LOGIN PLAIN

2013-06-20 Thread Jeroen Geilman
On 06/20/2013 11:19 AM, Mohsen Pahlevanzadeh wrote: Dear all, when i use telnet 0 587, i get the following result: Trying 0.0.0.0... Connected to 0. Escape character is '^]'. 220 mail.pahlevanzadeh.info ESMTP Postfix AND WHEN I USE EHLO COMMAND, I GET THE FOLLOWING RESULT: ehlo localhost 250-mail

Re: Is this an attack?

2013-06-20 Thread Birta Levente
On 20/06/2013 13:49, Andreas Kasenides wrote: On 19-06-2013 14:37, lst_ho...@kwsoft.de wrote: Zitat von Andreas Kasenides : One of my mail servers (postfix 2.6) has been target of what seems to me to be an attack. The attacker tried to deliver messages to a non-existent user names formed as a

RE: Postfix Content Filter

2013-06-20 Thread Sharma, Ashish
Prasad, After going through the mail thread, following are my advices for you: 1. sendmail-jilter (http://sendmail-jilter.sourceforge.net/) works on mail filter protocol, since Postfix also supports mail filter protocol, so it works with Postfix. Use following settings in your postfix 'main.cf

Re: Is this an attack?

2013-06-20 Thread Andreas Kasenides
On 19-06-2013 14:37, lst_ho...@kwsoft.de wrote: Zitat von Andreas Kasenides : One of my mail servers (postfix 2.6) has been target of what seems to me to be an attack. The attacker tried to deliver messages to a non-existent user names formed as a long hex string. It only happened once from

Re: Local UNIX accounts, aliasing & rejecting mail to non-public UNIX accounts

2013-06-20 Thread Stan Hoeppner
On 6/19/2013 1:37 PM, Craig R. Skinner wrote: > On 2013-06-19 Wed 10:55 AM |, Stan Hoeppner wrote: >> >> I'm anything but an expert in this particular area of Postfix, but I >> think the problem is that Craig is trying to use virtual_alias_maps when >> he should probably just be using the local ali

Re: 250-AUTH LOGIN PLAIN & 250-AUTH=LOGIN PLAIN

2013-06-20 Thread Dominik George
Hi, > But i don't see two following lines in above: > 250-AUTH LOGIN PLAIN > 250-AUTH=LOGIN PLAIN have you upgraded Postfix to 2.10 recently? In this case, you might have missed the smtpd_relay_restrictions change pointed out in the release notes [1]: > Feature 20121007] This version introduces

250-AUTH LOGIN PLAIN & 250-AUTH=LOGIN PLAIN

2013-06-20 Thread Mohsen Pahlevanzadeh
Dear all, when i use telnet 0 587, i get the following result: Trying 0.0.0.0... Connected to 0. Escape character is '^]'. 220 mail.pahlevanzadeh.info ESMTP Postfix AND WHEN I USE EHLO COMMAND, I GET THE FOLLOWING RESULT: ehlo localhost 250-mail.pahlevanzadeh.info 250-PIPELINING 250-SIZE 1024

question about auth, smtpd and roundcube

2013-06-20 Thread Felix Rubio Dalmau
Hi all, I have set up a postfix+dovecot+roundcube installation. Currently, I have set up these smtpd parameters: smtpd_tls_security_level = may smtpd_tls_auth_only = yes smtpd_discard_ehlo_keyword_address_maps = hash:/etc/postfix/discard_ehlo inside disc