unknown recipient issue

2010-06-01 Thread Curtis Maurand
quite put my finger on it. If you need further details, feel free to ask. thanks in advance, Curtis Maurand

Re: unknown recipient issue

2010-06-01 Thread Curtis Maurand
On 6/1/2010 2:22 PM, Victor Duchovni wrote: On Tue, Jun 01, 2010 at 02:09:23PM -0400, Curtis Maurand wrote: I have in the main.cf relay_domains= a couple of domains mysql:/etc/postfix/transport.cf transport_maps = mysql:/etc/postfix/transport.cf Don't use the transport table

Re: Virtual domains

2010-06-02 Thread Curtis Maurand
On 6/2/2010 1:20 PM, Victor Duchovni wrote: On Wed, Jun 02, 2010 at 08:21:03AM -0400, cur...@maurand.com wrote: defer_code = 550 Why? Why not? I'll look more at the docs. Because it is an incredibly bad idea. Transient errors need to generate *transient* (4XX)

Too aggressive

2010-06-11 Thread Curtis Maurand
currently I have in my smtpd_client_restrictions: ... reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, permit Is flat out rejecting clients on the RBL's considered too agressive? should I just let spamassassin handle this and score accordingly? Thanks in advance,

Re: Integrating Postfix, SQL, and Mailman with Virtual hosts

2010-12-01 Thread Curtis Maurand
I've been doing it with postfix and dbmail for several years. It works very well. I also have it running amavisd-new/spamassassin, clam anti-virus as well as the fuzzyocr plugin for spamassassin. Along with additional rule set and bayes database in MySQL, it works well. On 12/1/2010

Re: Attachments over 10MB Undeliverable

2011-10-12 Thread Curtis Maurand
fafaforza wrote: On 10/12/2011 10:59 AM, Joel Roberts wrote: Hi all, new to the group. Have recently setup POSTFIX as an SMTP relay front end to an Exchange 2007 backend. Have encountered the following issue: I'm using POSTFIX as an SMTP fronted relay to an Exchange

Re: SMTP auth for relayhost

2011-11-09 Thread Curtis Maurand
On 11/9/2011 4:12 AM, Robert Hass wrote: Hi I'm using Postfix at my server. I would like to relay all outgoing e-mails via my main SMTP server (relayhost = ... in main.cf). But my main SMTP server needs SMTP authorization. Where I can configure authentication (login and password) for relayhost ?

Re:

2012-01-27 Thread Curtis Maurand
On 1/27/2012 6:00 AM, nick wrote: Il 27/01/2012 11.47, Nickalf ha scritto: Hi Fellow Postfixers, ( belated H a P p Y N e W Y e A r ) Looking to find out the pros and cons of using MySQL based Postfix over the current basic (text based) setup

Re: DB access details for Postfix

2012-06-11 Thread Curtis Maurand
Check out dbmail, http://www.dbmail.org I've been using it for several years.  It works, though nobody's server management tools interface with it. --Curtis Krzysztof Trybowski wrote: Hello all, I've been setting up Postfix recently. I'm using virtual mailboxes and store user data in

Re: Should I have postgrey listen on a socket?

2010-12-06 Thread Curtis Maurand
I'm running amavisd-new/spamassassin/spamassassin-fuzzyocr/clamav. Would it behoove me to run Postgrey, too? --Curtis On 12/5/2010 11:10 AM, Roger Marquis wrote: Zitat von Grant emailgr...@gmail.com: I just noticed that postgrey is listening on localhost:10030. Would it be better to have

Re: The future of SMTP ?

2011-03-14 Thread Curtis Maurand
I would argue that its partially Microsoft's fault for allowing scripts in email or from web pages to have access to anything on your machine outside of the message viewer or the browser.  ActiveX is not your friend in these cases. --Curtis Dennis Carr wrote: On Sun, 13 Mar 2011, Frank

Re: Anyone solely using SMTP Auth for outbound mail?

2011-07-18 Thread Curtis Maurand
We use combination of POP/IMAP before SMTP or SMTP auth. --C Bernhard Rohrer wrote: seconded, only that submission is 587 ;) original message- From: Ðlsquo;ак Ðoelig;икаел mikael@yandex.ru To: Postfix users Date: Mon, 18 Jul 2011 12:59:05

SPF

2012-07-09 Thread Curtis Maurand
This has probably been asked in the past, but is it worth it to go through the contortions to set up SPF? Thanks, Curtis

SASL question

2013-02-10 Thread Curtis Maurand
I had a server running on gentoo and it was running OK, but the latest updates in the gentoo tree killed it.  So I spent yesterday afternoon setting up new mail server using Ubuntu 12.04 LTS. It took a while, but I have it all working except for smtp authentication (which was working on the

SASL question

2013-02-10 Thread Curtis Maurand
I had a server running on gentoo and it was running OK, but the latest updates in the gentoo tree killed it.  So I spent yesterday afternoon setting up new mail server using Ubuntu 12.04 LTS. It took a while, but I have it all working except for smtp authentication (which was working on the

Re: SASL question

2013-02-10 Thread Curtis Maurand
Patrick Ben Koetter wrote: * Curtis Maurand cur...@maurand.com: I had a server running on gentoo and it was running OK, but the latest updates in the gentoo tree killed it.  So I spent yesterday afternoon setting up new mail server using Ubuntu 12.04 LTS. It took a while, but I have

Re: SASL question - SOLVED

2013-02-18 Thread Curtis Maurand
On 2/13/2013 7:35 PM, Bob Proulx wrote: Curtis Maurand wrote: Patrick Ben Koetter wrote: However, nothing in my configuration says to open the sasldb file anywhere as the auth machanism is set to imap, but postfix seems intent on opening this file anyway. Cyrus SASL opens sasldb as fallback

Re: custom routing

2013-08-16 Thread Curtis Maurand
Carlos L wrote: Hello all, I'm looking for a bit of help on a complicated scenario that I can't seem to get to work. I have mail that comes into a server a server with both a to and 'original to' address What i would like to achieve is that mail going to the to addresses to go

Re: email address (u...@domain.tld) as username?

2013-09-27 Thread Curtis Maurand
I use a system called dbmail to handle the mail store, pop3/imap/lmtp. It works great, and my users all use their email addresses as their logins and I don't have to have system accounts for them. dbmail.org I'm using imap SASL to authenticate smtp users and it works fine. Cpanel doesn't

mailman issue

2014-04-04 Thread Curtis Maurand
I'm not sure if this is on topic or not. I can't tell whether this is mailman issue or a postfix issue. I have set up mailman. I have set up a virtual domain for mailman in the mm_cfg.py via the add_virtualhost() function. I have successfully created the list. I subscribed to the list, got

mailman issue

2014-04-04 Thread Curtis Maurand
Hello Sorry, I hit send too soon. I'm not sure if this is on topic or not. I can't tell whether this is mailman issue or a postfix issue. I have set up mailman. I have set up a virtual domain for mailman in the mm_cfg.py via the add_virtualhost() function. I have successfully created the

Re: mailman issue

2014-04-05 Thread Curtis Maurand
Sahil Tandon wrote: On Fri, 2014-04-04 at 14:55:49 -0400, Curtis Maurand wrote: I'm getting local user unknown errors when I try to send email to the list., but as far as I know, I shouldn't need local aliases with this configuration that anything destined for lists.delrc.org should go

Re: mailman issue

2014-04-05 Thread Curtis Maurand
Ron Guerin wrote: In mm_cfg.py I have this to generate the aliases: MTA='Postfix' In main.cf I use the aliases under: alias_maps hash:/var/lib/mailman/data/aliases In in my master.cf for the mailman transport, I have ${user} where you have ${mailbox} , don't know if that's got anything to

hostname rejection

2014-11-21 Thread Curtis Maurand
i've been really trying to tighten up spam rejection after getting lots of complaints from users.  I've added a bunch of things to the main.cf for doing rejects, I'm not having any trouble sending email, but one of my clients is and they are authenticating and I have permit_sasl_authenticated

Re: hostname rejection [SOLVED]

2014-11-21 Thread Curtis Maurand
On 11/21/2014 12:03 PM, Noel Jones wrote: On 11/21/2014 10:51 AM, Curtis Maurand wrote: i've been really trying to tighten up spam rejection after getting lots of complaints from users. I've added a bunch of things to the main.cf for doing rejects, I'm not having any trouble sending email

outgoing authenticated TLS/SSL problems

2015-04-20 Thread Curtis Maurand
running against a remote dbmail imap. Anyone have any ideas? Thanks in advance, Curtis -- Curtis Maurand cur...@maurand.com mailto:cur...@maurand.com 207-252-7748

Re: outgoing authenticated TLS/SSL problems

2015-04-21 Thread Curtis Maurand
Interesting. Just fixed that, too. You added the socket to the jail. It would be simpler to disable chroot on port 587, not much point when port 25 is not chrooted. See above. -- Curtis Maurand cur...@maurand.com mailto:cur...@maurand.com 207-252-7748

Re: outgoing authenticated TLS/SSL problems

2015-04-21 Thread Curtis Maurand
On 4/20/2015 8:36 PM, Viktor Dukhovni wrote: On Mon, Apr 20, 2015 at 08:08:08PM -0400, Curtis Maurand wrote: Anyone have any ideas? 1. http://www.postfix.org/DEBUG_README.html#mail 2. Send logs! Do not set verbose logs produced via debug_peer_list or -v options in master.cf unless

Re: Throttling locally generated email

2015-11-10 Thread Curtis Maurand
e postfwd configured correctly to listen on port 10040, I just need Postfix to talk to it. Don -- Curtis Maurand cur...@maurand.com <mailto:cur...@maurand.com> 207-252-7748

Re: Throttling locally generated email

2015-11-10 Thread Curtis Maurand
that I have postfwd configured correctly to listen on port 10040, I just need Postfix to talk to it. Don -- Curtis Maurand cur...@maurand.com <mailto:cur...@maurand.com> 207-252-7748

[SOLVED] Re: A bug, maybe?

2016-02-22 Thread Curtis Maurand
On 2/20/2016 5:19 PM, Curtis Maurand wrote: On 2/20/2016 1:46 PM, Viktor Dukhovni wrote: On Sat, Feb 20, 2016 at 01:37:39PM -0500, Curtis Maurand wrote: Nothing is chrooted. resolv.conf is world readable. Wietse's program returns a valid address. It might not match the reverse

Re: [SOLVED] Re: A bug, maybe?

2016-02-22 Thread Curtis Maurand
On 2/22/2016 3:03 PM, Viktor Dukhovni wrote: On Mon, Feb 22, 2016 at 02:57:23PM -0500, Curtis Maurand wrote: The problem was in the /etc/nsswitch.conf. I changed the line hosts: files dns to hosts:dns files and that solved the trouble

A bug, maybe?

2016-02-20 Thread Curtis Maurand
ender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_unauth_destination, reject_rbl_client bl.spamcop.net, reject_rbl_client zen.spamhaus.org, reject_rbl_client b.barracudacentral.org -- Curtis Maurand cur...@maurand.com <mailto:cur...@maurand.com> 207-252-7748

Re: A bug, maybe?

2016-02-20 Thread Curtis Maurand
On 2/20/2016 11:12 AM, Christian Kivalo wrote: On 2016-02-20 16:45, Curtis Maurand wrote: Not sure if I found something or not. A client tried to send email to one of my other addresses. The requisite portion of the main.cf follows at the end of the message. The logs are telling me: Feb

Re: A bug, maybe?

2016-02-20 Thread Curtis Maurand
On 2/20/2016 11:26 AM, Curtis Maurand wrote: On 2/20/2016 11:12 AM, Christian Kivalo wrote: On 2016-02-20 16:45, Curtis Maurand wrote: Not sure if I found something or not. A client tried to send email to one of my other addresses. The requisite portion of the main.cf follows at the end

Re: A bug, maybe?

2016-02-20 Thread Curtis Maurand
On 2/20/2016 12:17 PM, Viktor Dukhovni wrote: On Sat, Feb 20, 2016 at 11:40:09AM -0500, Curtis Maurand wrote: i just sent myself a test message from the client's system. Here is what I got. I immediately ran the lookups using dig. postfix can't seem to resolve things properly. Running

Re: A bug, maybe?

2016-02-20 Thread Curtis Maurand
On 2/20/2016 1:46 PM, Viktor Dukhovni wrote: On Sat, Feb 20, 2016 at 01:37:39PM -0500, Curtis Maurand wrote: Nothing is chrooted. resolv.conf is world readable. Wietse's program returns a valid address. It might not match the reverse, but it did return an address. # ./getaddr

Re: Authentication attempts for x...@com.au addresses

2019-04-02 Thread Curtis Maurand
a resource hog as it is. Cheers, Curtis -- Best Regards Curtis Maurand mailto:cur...@maurand.com

Re: postscreen_dnsbl_action "drop" not working correctly?

2019-03-06 Thread Curtis Maurand
layers. DNS has become very ugly as Google and Cloudflare attempt to monopolize it. -- Best Regards Curtis Maurand mailto:cur...@maurand.com

Re: consolidate virtual and relay_recipients files

2019-03-08 Thread Curtis Maurand
possible, I would like to avoid writing a list of all my user mailbox @ all domain names neither in virtual, nor in relay_recipients file. Thanks a lot for your help. Samuel -- Best Regards Curtis Maurand mailto:cur...@maurand.com

Re: Click tracker removal ideas?

2019-02-15 Thread Curtis Maurand
Wouldn't procmail do something like this? I haven't used procmail for quite some time, but iirc it can handle passing to a filter program, then the filter can hand it to the lmtp (dovecot for instance). Just a thought. I now return to the lurkers lair. --Curtis On February 15, 2019 6:58:00

Re: warning: hostname dc1.xxx.com.au does not resolve to address xxx.xxx.73.197

2019-07-01 Thread Curtis Maurand
ot;mail.xxx.net" Thanks -- Best Regards Curtis Maurand mailto:cur...@maurand.com

Re: [OT] why ATT.net still host its email on Verizon Yahoo

2019-09-17 Thread Curtis Maurand
Not competitors. Oligarchs. Colluders market fixers. Competition killers. Sent from my iPhone > On Sep 17, 2019, at 4:44 AM, Wesley Peng wrote: > > Hello, > > though this is a little OT, but I was curious since verizon has bought yahoo > for long days, why ATT still host its customer email

Re: Query

2020-02-14 Thread Curtis Maurand
you could set up the mail aliases in transport maps to pass them to mailman Sent from my iPhone > On Feb 14, 2020, at 10:43 AM, Peter Fraser wrote: > >  > Hi All > I am trying to figure out how to get this working. I run Mailman through > Postfix. The Mailman aliases are in alias_maps. I

Re: Building recipient maps from Exchange/O365

2020-02-09 Thread Curtis Maurand
it should be. use ldap. active directory is nothing but a glorified ldap server and listens on port 389. Sent from my iPhone > On Feb 9, 2020, at 7:04 AM, John Regan wrote: > >  > Hi, > > Is it possible for postfix to directly access the email addresses or userlist > from an Exchange

Re: Building recipient maps from Exchange/O365

2020-02-09 Thread Curtis Maurand
On 2/9/20 12:39 PM, Gerard E. Seibert wrote: On Sun, 9 Feb 2020 07:56:53 -0500, Curtis Maurand stated: it should be. use ldap. active directory is nothing but a glorified ldap server and listens on port 389. If it were ldap over ssl the port is 636 I believe. I stand corrected.

Re: Raw postfix newbie here...

2020-08-09 Thread Curtis Maurand
> On Aug 9, 2020, at 8:09 PM, Viktor Dukhovni > wrote: > > - Mail to managed lists with an owner-alias >- Mail to pipes >- Mail to :include:/some/file lists. this can be put into the transports table and you can skip the /etc/aliases altogether.

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-01 Thread Curtis Maurand
easier than that.  use linux heartbeat on the two postfix service. the failover happens within seconds.  use the unison file system to keep the spool folders and other necessary folders needed to pick up on the failover machine and when the primary fails, whatever services that need to be

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Curtis Maurand
It's part of the config in main.cf You can specify "myhostname" myhostname = host.domain.tld Cheers, Curtis On 6/30/20 4:55 PM, Istvan Prosinger wrote: On 6/30/20 10:34 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 9:49 PM, Wietse Venema wrote: Istvan Prosinger: Hi, I hope this

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-06-30 Thread Curtis Maurand
On 6/30/20 6:40 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 10:34 PM, Wietse Venema wrote: Istvan Prosinger: On 6/30/20 9:49 PM, Wietse Venema wrote: Istvan Prosinger: Hi, I hope this letter finds you well, I have Postfix behind NAT, and added one failover IP to the main

Re: Reject email containing Google forms

2020-12-01 Thread Curtis Maurand
How about a general sieve rule in your dovecot server or a filter in your delivery agent? Sent from my iPhone > On Dec 1, 2020, at 5:11 PM, lists wrote: > > About 70% of my spam these days contains links to Google Forms. I've been > googling for tips on how to reject such email but Google

Re: Ignoring a failing dictionary ?

2021-01-20 Thread Curtis Maurand
Sent from my iPhone > On Jan 20, 2021, at 10:27 AM, Jaroslaw Rafa wrote: > > Dnia 20.01.2021 o godz. 15:48:29 Ganael Laplanche pisze: >>> So just try to create some simple "proxy" to your LDAP server that does only >>> one thing: if LDAP is available, just return the response from LDAP; if

Re: Ignoring a failing dictionary ?

2021-01-19 Thread Curtis Maurand
> On Jan 19, 2021, at 10:00 AM, Viktor Dukhovni > wrote: > > On Tue, Jan 19, 2021 at 03:03:49PM +0100, Ganael Laplanche wrote: > >>> http://www.postfix.org/memcache_table.5.html >> >> Maybe memcache with a *very* long TTL could be used here, but I was looking >> for a pseudo-dictionay

Re: New postfix server, authentication confusion

2021-01-24 Thread Curtis Maurand
for the blackhole lists, etc. take a look ar mxtoolbox.com postfix should be passing sasl requests to dovecot’s imap process. I use a tool called ispconfig which sets all of this up along with other tools such as clamav, rspamd or amavisd along with per user policies. my $0.02. I like its

Re: Corner cases in SSL_shutdown.

2021-02-02 Thread Curtis Maurand
Jumping in as an observer with 25 years of admin experience with public facing equipment and servers. this problem seems more of a problem with the tls libraries. it’s not up to the app to close the tls connection. that layer is below the application layer. when the application terminates its

Re: Mail from @somedomain.tld allowed only from some CIDR ranges?

2021-02-07 Thread Curtis Maurand
Sent from my iPhone > On Feb 7, 2021, at 11:44 AM, Benny Pedersen wrote: > > On 2021-02-07 17:33, Marek Kozlowski wrote: >> :-) > > +1 > >> Presumably it's my fault but I cannot find such an option. If so - >> thank you for directing me to it. I'm wondering if it possible to >> limit

Re: Warning: Hostname Does Not Resolve

2021-03-09 Thread Curtis Maurand
your a record and fqdn, your helo/ehlo hostname and the ptr record all need to match. Sent from my iPhone > On Mar 9, 2021, at 12:36 PM, Greg Sims wrote: > >  > We are receiving the following in our email logs: > > Mar 09 08:12:15 mail01.raystedman.org postfix/smtpd[13431]: warning:

Re: Deprecated: white is better than black

2021-02-24 Thread Curtis Maurand
I totally agree with this and I am going to work to scrub the prior terminology from my system. Thank you, Wietse —Curtis Sent from my iPhone > On Feb 24, 2021, at 12:12 PM, Wietse Venema wrote: > > The following is from the postfix-3.6-20210221 release notes. > >Wietse > > Postfix

Re: How to tell postfix to be more verbose on the smtp port?

2021-09-28 Thread Curtis Maurand
On 9/28/21 10:23 AM, Viktor Dukhovni wrote: On Tue, Sep 28, 2021 at 09:50:11AM +0200, Christophe Lohr wrote: Well.. so, my question is: how to configure postfix to be more verbose? (not in the log files, but on the smtp connexions) This would be a programming exercise. The relevant source

Re: Postfix-fg and maillog_file to stdout

2021-11-06 Thread Curtis Maurand
using syslog-ng within the container. > Em sáb., 6 de nov. de 2021 às 09:56, Curtis Maurand < > cur...@maurand.com> escreveu: > > On Fri, 2021-11-05 at 13:34 -0300, Rafael Azevedo wrote: > > > One last thing, is it possible to change the date format of the > > > out

Re: Postfix-fg and maillog_file to stdout

2021-11-06 Thread Curtis Maurand
On Fri, 2021-11-05 at 13:34 -0300, Rafael Azevedo wrote: > One last thing, is it possible to change the date format of the > output? > Current format: > Nov 05 13:20:06 smtp21 postfix/smtp[136]: 9D86C60BBE > > I'd like to use ISO format: > 2021-10-29T19:37:52.017684-03:00 smtp21 postfix/smtp > >

Re: Odd DNS issue requiring reboot.

2022-09-05 Thread Curtis Maurand
On 9/5/22 11:23, Wietse Venema wrote: Viktor Dukhovni: Perhaps your resolver settings in the chroot jail become stale, and are fixed when the "init script" resyncs the chroot with the /etc. You might try running without chroot. To turn off chroot for all Postfix daemons, update master.cf:

Re: Where to place spamhaus tests

2022-08-08 Thread Curtis Maurand
I might also suggest pdns-recursor. very fast. Sent from my iPhone > On Aug 8, 2022, at 4:18 PM, Demi Marie Obenour wrote: > > On 8/7/22 09:50, Linkcheck wrote: >>> On 07/08/2022 1:12 pm, Rob McGee wrote: >>> dig 2.0.0.127.zen.spamhaus.org. any >> >> ANY has to be after DIG, not at the end,

Re: mail.protection.outlook.com rejections

2022-11-02 Thread Curtis Maurand
Sadly MS is as fallible as the rest of us. Sent from my iPhone > On Nov 2, 2022, at 4:56 AM, Linkcheck wrote: > > Thanks, Viktor. That's interesting. You'd think someone like MS could get it > right. :( >

Re: [EXTERNAL] Re: Mail queue took 3 hours to recover from a flood. Suggestions ?

2023-01-23 Thread Curtis Maurand
On 1/23/23 12:30, White, Daniel E. (GSFC-770.0)[AEGIS] wrote: “replace Amavis with something faster” Any suggestions ? RSPAMD *From: * on behalf of Viktor Dukhovni *Reply-To: *"postfix-users@postfix.org" *Date: *Monday, January 23, 2023 at 12:28 *To: *"postfix-users@postfix.org"

[pfx] Stupid questions

2023-09-18 Thread Curtis Maurand via Postfix-users
Hello list, At least I think they're stupid questions. I'm running Postfix with rspamd which is a milter.  At what point in the email conversation does the DKIM lookup happen? Does Postfix handle that or am I asking on the wrong list and I should be asking the question on the rspamd list? 

[pfx] Re: [P-U] Re: Postfix lists are migrating to a new list server

2023-03-10 Thread Curtis Maurand via Postfix-users
On 3/7/23 15:36, Bernardo Reino via Postfix-users wrote: On Tue, 7 Mar 2023, John Stoffel via Postfix-users wrote: So what's the option for a more upto date version of DKIM milter for debian? rspamd does DKIM, SPF, DMARC and ARC (and lots more), and doesn't segfault (so far ;-) I've

[pfx] Re: [P-U] Re: Postfix lists are migrating to a new list server

2023-03-10 Thread Curtis Maurand via Postfix-users
On 3/8/23 15:30, Scott Techlist via Postfix-users wrote: On Tue, 7 Mar 2023, John Stoffel via Postfix-users wrote: So what's the option for a more upto date version of DKIM milter for debian? rspamd does DKIM, SPF, DMARC and ARC (and lots more), and doesn't segfault (so far ;-) I'm STILL

[pfx] Re: Postfix: running a script on authentication failure

2023-06-23 Thread Curtis Maurand via Postfix-users
On 6/23/23 04:26, Luciano Mannucci via Postfix-users wrote: On Thu, 22 Jun 2023 21:05:35 +0200 André Rodier via Postfix-users wrote: What are you using on your side ? I have a small script that scans the log for failed login attempts, banning the offending ip via firewall if it sees more