Re: Solution to SMTPAuth compromised accounts.

2013-09-12 Thread Stan Hoeppner
On 9/12/2013 9:45 PM, Jorgen Lundman wrote: > > Hello all, > > Talking about the customer outgoing SMTP servers, where customers > connect and are forced to SMTPAuth before they can send mail out to the > Internet. We use LDAP for SMTPAuth verification. > > Occasionally, a customer account is co

Re: Can't send mails but I can receive

2013-09-12 Thread Chris
Hello Jan, Wietse, thank you very much - so it's not about Postfix but about my DNS setup. I'll change that in my zone settings. Hope it works after this. :) Bye, Chris Am 13.09.2013 01:16, schrieb Jan P. Kessler: Sep 12 04:57:06 nudin1 postfix/smtp[29110]: connect to freenet.de[62.104.23

Re: Solution to SMTPAuth compromised accounts.

2013-09-12 Thread Viktor Dukhovni
On Fri, Sep 13, 2013 at 11:45:54AM +0900, Jorgen Lundman wrote: > However, quite often the 3rd party involved uses software that can > use pipelining, and simply keeps sending mail, even though the > SMTPAuth account has been stopped. What you are calling "pipelining" is more properly called conn

Solution to SMTPAuth compromised accounts.

2013-09-12 Thread Jorgen Lundman
Hello all, Talking about the customer outgoing SMTP servers, where customers connect and are forced to SMTPAuth before they can send mail out to the Internet. We use LDAP for SMTPAuth verification. Occasionally, a customer account is compromised, and used for sending large volumes of spam.

Re: error message with qshape

2013-09-12 Thread Viktor Dukhovni
On Thu, Sep 12, 2013 at 12:08:26PM +0200, St?phane MERLE wrote: > I use qshape a lot for the content of my alerts (I monitor the > number of files and if the alert is triggered, I use qshape to have > a nice summary in my email) > > BUT I cannot use it on the maildrop queue (maybee it is a wanted

Re: sending mail using more then one smarthost\relayhost and sasl?

2013-09-12 Thread Eliezer Croitoru
On 09/08/2013 11:47 PM, Jeroen Geilman wrote: > > Did you ask any other question than the one about transport(5) I > answered above ? > If so, I am afraid it was lost in the noise. Thanks, No my setup is working perfectly and I know how to ask questions most of the time. If I do ask it do mean I

Re: Can't send mails but I can receive

2013-09-12 Thread Wietse Venema
Jan P. Kessler: > > > Sep 12 04:57:06 nudin1 postfix/smtp[29110]: connect to > > > freenet.de[62.104.23.42]:25: Connection refused > > > > connection refused is a network problem, probably a firewall block. > > Perhaps your ISP doesn't allow you to run a mail server? > > Something is wrong with yo

Re: Can't send mails but I can receive

2013-09-12 Thread Jan P. Kessler
> > Sep 12 04:57:06 nudin1 postfix/smtp[29110]: connect to > > freenet.de[62.104.23.42]:25: Connection refused > > connection refused is a network problem, probably a firewall block. > Perhaps your ISP doesn't allow you to run a mail server? Something is wrong with your DNS resolution. freenet.de

Re: Connection Speed

2013-09-12 Thread Wietse Venema
Roman Gelfand: > Please, see below... The whole turnaround was roughly a second. What > I meant by "Sending mail into Postfix" is chilkat application takes 13 > seconds to send it. > > Sep 12 10:38:49 mail1 postfix/smtpd[30657]: connect from > unknown[192.168.0.147] ... > Sep 12 10:38:50 mail1

Re: Connection Speed

2013-09-12 Thread Viktor Dukhovni
On Thu, Sep 12, 2013 at 10:47:24AM -0400, Roman Gelfand wrote: > Sep 12 10:38:50 mail1 postfix/smtp[30325]: 0208544124: > to=, > relay=retail-smtp-in.amazon.com[176.32.98.133]:25, delay=0.26, > delays=0/0/0.1/0.15, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as > 52D9D9EC1AE) > > Please, see bel

Re: Connection Speed

2013-09-12 Thread Wietse Venema
Roman Gelfand: > Based on comments made by Wietse, it looks like my server is in good > shape as the connections are not even taking a second and the whole > process is taking roughly a second. Sending mail into Postfix takes roughly a second? > We have a program which every so often sends a requ

Re: Connection Speed

2013-09-12 Thread Roman Gelfand
Please, see below... The whole turnaround was roughly a second. What I meant by "Sending mail into Postfix" is chilkat application takes 13 seconds to send it. Sep 12 10:38:49 mail1 postfix/smtpd[30657]: connect from unknown[192.168.0.147] Sep 12 10:38:50 mail1 postfix/smtpd[30657]: 0208544124:

Re: Connection Speed

2013-09-12 Thread Viktor Dukhovni
On Thu, Sep 12, 2013 at 10:03:58AM -0400, Roman Gelfand wrote: > Based on comments made by Wietse, it looks like my server is in good > shape as the connections are not even taking a second and the whole > process is taking roughly a second. Whether that is slow or not depends on what throughput

Re: Connection Speed

2013-09-12 Thread Roman Gelfand
Based on comments made by Wietse, it looks like my server is in good shape as the connections are not even taking a second and the whole process is taking roughly a second. Based on what Viktor is saying, this line could be a problem Sep 12 09:39:56 pmx1 postfix/smtpd[30058]: connect from unknown[

Re: Anyone use this email server configuration ?

2013-09-12 Thread Viktor Dukhovni
On Thu, Sep 12, 2013 at 03:36:30PM +0200, Ralf Hildebrandt wrote: > > The blog recommends at least one of "smtp[d]_tls_loglevel = 2", > > this is unwise except when debugging. > > On a low traffic server? Even on a low traffic server the voluminous TLS logging just obfuscates the useful content

Re: Connection Speed

2013-09-12 Thread Viktor Dukhovni
On Thu, Sep 12, 2013 at 09:12:59AM -0400, Roman Gelfand wrote: > We have a program which every so often sends a request, using chilkat, > to postfix to send out email with attachment. With every send it has > to connect to postfix using sasl authentication. Each send appears to > take a long tim

Re: Anyone use this email server configuration ?

2013-09-12 Thread Ralf Hildebrandt
* Viktor Dukhovni : > On Wed, Sep 11, 2013 at 01:26:25PM +0200, Ralf Hildebrandt wrote: > > > > Anyone has tested such server in real life ? > > > > > > http://sealedabstract.com/code/nsa-proof-your-e-mail-in-2-hours/ > > > > I finally got around reading this. > > I wonder if it should be more s

Re: Connection Speed

2013-09-12 Thread Wietse Venema
Roman Gelfand: > We have a program which every so often sends a request, using chilkat, > to postfix to send out email with attachment. With every send it has > to connect to postfix using sasl authentication. Each send appears to > take a long time. In the absence of more detailed information,

Connection Speed

2013-09-12 Thread Roman Gelfand
We have a program which every so often sends a request, using chilkat, to postfix to send out email with attachment. With every send it has to connect to postfix using sasl authentication. Each send appears to take a long time. In the absence of more detailed information, I am guessing the conne

Re: Can't send mails but I can receive

2013-09-12 Thread Noel Jones
On 9/12/2013 4:18 AM, Chris wrote: > Hello, > > I checked it now again. > > domain1 is on my server (vps, postfix + dovecot). > I can send and receive from u...@domain1.com to us...@domain1.com - > no problem at all. > > Now I tried to send from u...@domain1.com to a public freemailer > (the one

Re: About smtpd_recipient_restrictions

2013-09-12 Thread Noel Jones
On 9/11/2013 11:13 PM, Feel Zhou wrote: > Hello, Noel > At the same time, smtpd_sender_restrictions not working too smtpd_sender_restrictions only work with mail that arrives via SMTP. Perhaps this message arrived via the postfix/pickup service, sent from some local process, perhaps a web server m

Re: Rejecting mail to unknown users

2013-09-12 Thread Wietse Venema
Zel Uneec: [ Charset ISO-8859-2 unsupported, converting... ] > On 11.09.2013 16:52, Kris Deugau wrote: > > Mark Goodge wrote: > >> It might help if you explained why you want to do this. What particular > >> problem is being caused by your internal users getting an error message > >> instead of a b

Re: Can't send mails but I can receive

2013-09-12 Thread Chris
Hello, I checked it now again. domain1 is on my server (vps, postfix + dovecot). I can send and receive from u...@domain1.com to us...@domain1.com - no problem at all. Now I tried to send from u...@domain1.com to a public freemailer (the one I'm using here): Sep 12 04:57:02 nudin1 postfix/

Re: Rejecting mail to unknown users

2013-09-12 Thread Zel Uneec
On 11.09.2013 16:52, Kris Deugau wrote: Mark Goodge wrote: It might help if you explained why you want to do this. What particular problem is being caused by your internal users getting an error message instead of a bounce? Some idiot mail clients (*cough*ManyversionsofOutlook*cough*) don't ac