File count mismatch in spool directories

2015-03-23 Thread Shawn Heisey
I installed a monitor for the postfix queue directories to catch queue buildup problems before they become critical and cause mail delays of several hours. We've had problems with sudden email storms from misconfigured internal systems ... when you suddenly get 2 new messages in the queue,

Re: File count mismatch in spool directories

2015-03-23 Thread Viktor Dukhovni
On Mon, Mar 23, 2015 at 08:41:04AM -0600, Shawn Heisey wrote: root@nexus1:~# find /var/spool/postfix/defer -type f | wc -l 711 root@nexus1:~# find /var/spool/postfix/deferred -type f | wc -l 162 I *think* that what I can do is gather the queue ID numbers for each of those 162 messages

Problem with smtpd_sasl_local_domain

2015-03-23 Thread Chris Adams
I'm setting up Postfix+Dovecot on CentOS 7 (prefer to use the OS-provided versions, Postfix 2.10.1 and Dovecot 2.2.10). I need to handle SMTP AUTH for a couple of different domains where the customer doesn't want to make their users change from username to usern...@example.com. I have tried

Re: Add header with original IP?

2015-03-23 Thread Sebastian Nielsen
Can it be done without a policy service or milter? Eg with some header checks? Or maybe a configuration option? -Ursprungligt meddelande- From: Noel Jones Sent: Monday, March 23, 2015 7:57 PM To: postfix-users@postfix.org Subject: Re: Add header with original IP? On 3/23/2015 1:20

Re: Add header with original IP?

2015-03-23 Thread Noel Jones
Not possible with header_checks. A milter /should/ be able to do this, but you'll have to do some research to find one. Maybe milter_regex is a possibility. -- Noel Jones On 3/23/2015 2:03 PM, Sebastian Nielsen wrote: Can it be done without a policy service or milter? Eg with some

virtual domains and hosting

2015-03-23 Thread Rafał Michalak
Hello, I have this situation in one server I have many domains, normally postfix delivers email direct locally but when user change email hosting, system still sends emails to old server (don't checks mx and delivers locally). I read something about postfix two instances, but when I set it i have

Add header with original IP?

2015-03-23 Thread Sebastian Nielsen
How can I in postfix add a header with the original client IP (like “X-Original-IP”), such as, it cannot be forged, eg any incoming mail will have such headers stripped out, before Postfix adds its own. The intention of this header is to use it at a later processing step for separating

Re: Add header with original IP?

2015-03-23 Thread Noel Jones
On 3/23/2015 1:20 PM, Sebastian Nielsen wrote: How can I in postfix add a header with the original client IP (like “X-Original-IP”), such as, it cannot be forged, eg any incoming mail will have such headers stripped out, before Postfix adds its own. The intention of this header is to use it

Re: virtual domains and hosting

2015-03-23 Thread Wietse Venema
Rafa? Michalak: Hello, I have this situation in one server I have many domains, normally postfix delivers email direct locally but when user change email hosting, system still sends emails to old server (don't checks mx and delivers locally). I read something about postfix two instances, but

Re: Problem with smtpd_sasl_local_domain

2015-03-23 Thread Wietse Venema
Chris Adams: I'm setting up Postfix+Dovecot on CentOS 7 (prefer to use the OS-provided versions, Postfix 2.10.1 and Dovecot 2.2.10). I need to handle SMTP AUTH for a couple of different domains where the customer doesn't want to make their users change from username to usern...@example.com.

Re: Add header with original IP?

2015-03-23 Thread Sebastian Nielsen
Thanks, works perfectly now. It now adds a header. Did do a parsing check in my milter which takes the From: header and X-AntiPhishing-IP: header, feeds it into the SPF engine and off we go :-) Also did a anti-forgery-check, so if it detects duplicate or none X-AntiPhishing-IP headers, or a

Re: Add header with original IP?

2015-03-23 Thread Wietse Venema
Sebastian Nielsen: Can it be done without a policy service or milter? Eg with some header checks? Or maybe a configuration option? If it is not possible to use the address in Postfix's own Received: header, you can copy the client IP address into a header with a pcre or regexp table. For