Re: postscreen feature request

2015-03-11 Thread Wietse Venema
Kov?cs Albert: On Tuesday, March 10, 2015 1:42 PM, Wietse Venema wie...@porcupine.org wrote: I'm not sure how one (type of) dns query is a performance concern, and another is not, see below. You see no performance difference between querying a small number of well-operated DNS

Re: SMTP AUTH issue

2015-03-11 Thread Viktor Dukhovni
On Wed, Mar 11, 2015 at 01:41:00PM +0100, Emmanuel Fust? wrote: Hello, On a heavy i/o loaded Postfix (2.11.0) server, i've got this behavior: 535 5.7.8 Error: authentication failed: Connection lost to authentication server Mar 10 16:37:08 x postfix/smtpd[20613]: warning:

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
On Thu, Mar 12, 2015 at 12:03 AM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: You may well be able to do something with advanced SQL string manipulation to short-circuit queries that contain +. SELECT result FROM table WHERE key = '%u@%d' AND key NOT

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Viktor Dukhovni
On Thu, Mar 12, 2015 at 12:07:49AM +0800, Zhang Huangbin wrote: An SQL server may well optimize that query away when the key contains a + and not do any disk I/O. In this case, SQL is flexible. but any solution for LDAP table? we cannot do this in ldap query filter. No. --

Re: About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
On Wed, Mar 11, 2015 at 11:46 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: Not at present. You can only suppress lookups for bare keys which can happen when the domain is $myorigin or matches $mydestination by interpolating the lookup key into the query via '%u@%d' instead of '%s'.

About table search order: not to query 'user+extens...@domain.ltd'

2015-03-11 Thread Zhang Huangbin
Dear all, According to Postfix document, virtual(8), 'user+extens...@domain.ltd' is looked up first, then 'u...@domain.ltd'. Is it possible to skip/ignore the address extension and just query 'u...@domain.ltd'? (by the way, i want to ignore the extension in SQL/LDAP lookup.) Thanks for your time

Re: Discussion about SPF signatures / Email security.

2015-03-11 Thread John
Subject: Citizens Bank - Account Balance Threshold Notification You requested to be notified when your balance for Account xx is above $.00. Logon to Online Banking at http://www.citizensbank.com to view your balance information, transfer funds or pay bills. Your bank sends

email from banks

2015-03-11 Thread Jim Reid
On 11 Mar 2015, at 11:07, John j...@klam.ca wrote: Your bank sends you an email that actually CONTAINS information about your account This discussion is not relevant to postfix. Could you please take it elsewhere? Thanks.

Email gateway configuration

2015-03-11 Thread John Bees
Hi, everyone! I need to build an email gateway that will forward emails to users in our internal Exchange. But some need to be forwarded to our old Linux-based external server instead. Reading the Postfix documentation and examples I was able to find on the web, I was still left a bit confused

SMTP AUTH issue

2015-03-11 Thread Emmanuel Fusté
Hello, On a heavy i/o loaded Postfix (2.11.0) server, i've got this behavior: === Connected to x.x.x.x. - 220 xx.xx.xx ESMTP Postfix - EHLO localhost - 250-xx.xx.xx - 250-PIPELINING - 250-SIZE 1024 - 250-VRFY - 250-ETRN - 250-STARTTLS - 250-AUTH CRAM-MD5 DIGEST-MD5 -

Tracking down www-data email sender

2015-03-11 Thread Robin Rowe
Wondering how to track down some emails being sent from WordPress. I have mail.log entries that show www-data, that is, WordPress, is trying to send emails from an invalid subdomain. The machine did have this subdomain at some point, by the way. I turned on phpmail.log, but it doesn't give

postscreen vs. fail2ban

2015-03-11 Thread Michael Fox
I haven't implemented postscreen yet, but plan to. So this question is for the postscreen experts here. As I understand it from the documentation, postscreen protects postfix from having to deal with most attack vectors, including higher volume attacks. So, does it make sense to also use

Re: postscreen vs. fail2ban

2015-03-11 Thread Noel Jones
On 3/11/2015 7:43 PM, Michael Fox wrote: I haven’t implemented postscreen yet, but plan to. So this question is for the postscreen experts here. As I understand it from the documentation, postscreen protects postfix from having to deal with most attack vectors, including higher volume

Re: postscreen vs. fail2ban

2015-03-11 Thread Wietse Venema
Michael Fox: I haven't implemented postscreen yet, but plan to. So this question is for the postscreen experts here. As I understand it from the documentation, postscreen protects postfix from having to deal with most attack vectors, including higher volume attacks. So, does it make sense

Re: Tracking down www-data email sender

2015-03-11 Thread Viktor Dukhovni
On Wed, Mar 11, 2015 at 09:13:45PM -0700, Robin Rowe wrote: Wondering how to track down some emails being sent from WordPress. Freeze them in the queue, and examine with postcat -q queue-id. Looking at the mail.log of the last www-data send, it says gmail has shut the recipient's email