Re: Recipient limit..but where?

2010-02-25 Thread Victor Duchovni
On Thu, Feb 25, 2010 at 02:45:32PM +0200, Niemi Hannu wrote: I have been fighting with a problem with Postfix. There are some users that insist on sending mail to large groups of recipients (yes I know that mailman or similar is made for that) and there is a limit of number of recipients,

Re: Milter for processing bounces?

2010-02-25 Thread Victor Duchovni
On Thu, Feb 25, 2010 at 02:07:40PM -0600, Kim Albee wrote: Is there a filter or a mod that can be made to Postfix that would have the process that handles bounced emails within Postfix send the email to a different email address (i.e. email identified in specific header variable) rather than

Re: confused about MULTI_INSTANCE readme

2010-02-25 Thread Victor Duchovni
On Thu, Feb 25, 2010 at 11:18:41AM -0300, Gerardo Herzig wrote: Hi all, im reading the docs about setting postifx with multiples instances [1]. At the Setting up the null-client Postfix instance part, there is a sample main.cf which will be a local-submission null client: file, with this: .

Re: header_checks question

2010-02-24 Thread Victor Duchovni
On Wed, Feb 24, 2010 at 11:16:41AM +0100, lst_ho...@kwsoft.de wrote: Same what? Can someone explain the observed issue in some detail? All I am seeing is questions about an ill-advised hypothetical solution. When I put my Cyrillic name into Apple's MUA, the From: header read: From:

Re: Display-name rewriting

2010-02-24 Thread Victor Duchovni
On Wed, Feb 24, 2010 at 03:55:13PM +0100, Sylvain Ferrand wrote: Hello, I would like to overwrite the display-name (i.e. the sender description string in the the From: field. - cf. RFC 5322 sec 3.4) set by the MUA. Is it possible to rewrite the display-name (1) in the From: header on a

Re: header_checks question

2010-02-24 Thread Victor Duchovni
On Wed, Feb 24, 2010 at 04:12:05PM +0100, lst_ho...@kwsoft.de wrote: There is no wrong To-Header. File a bug-report with Mozilla. That's what i tried to find out: Who is at fault and what is the root-case... If the bug is still present in TB3 i will bother to file a bug. I failed to

Re: How to setup postfix to put the queued emails in hold (and not in deferred)

2010-02-24 Thread Victor Duchovni
On Wed, Feb 24, 2010 at 04:16:56PM +, Michele Carandente wrote: Hi guys. I'm still looking for the right solution... As I said before, I was thinking to put in a cronjob the command postsuper -h ALL, but in that case I'll put in hold also the emails that are in queue because maybe

Re: client certificate handling with TLS + sasl

2010-02-24 Thread Victor Duchovni
On Wed, Feb 24, 2010 at 11:46:10PM -0500, zhong ming wu wrote: With dovecot I can have my mail client send a certificate and make dovecote use CN field of the cert as username to authenticate. If I enable that feature in dovecot, postfix authentication does not work despite the fact that I

Re: Mail Transport Unavailable

2010-02-23 Thread Victor Duchovni
On Tue, Feb 23, 2010 at 08:52:23AM -0800, motty cruz wrote: If I use the command # mail -v n...@domain.com I get the folloing Mail delivery status report will be mailed to root But then I get MAILER-DAEMON (mail transport unavailable) Using FreeBSD 7.2 Postfix 2.6.5 And second instance

Re: Mail Transport Unavailable

2010-02-23 Thread Victor Duchovni
On Tue, Feb 23, 2010 at 09:17:35AM -0800, motty cruz wrote: Filter # mail -v mo...@domain.com Subject: test postfix conf debug_peer_list = 127.0.0.1 . EOT Mail Delivery Status Report will be mailed to root. Filter # mailq -Queue ID- --Size-- Arrival Time

Re: How to tell which instance is which

2010-02-23 Thread Victor Duchovni
On Tue, Feb 23, 2010 at 11:26:23AM -0600, Stan Hoeppner wrote: Wietse Venema put forth on 2/23/2010 10:39 AM: Not all the world is Linux. In fact there are 10 times as many Macs. Wietse Venema put forth on 2/16/2010 10:01 AM: This is a technical mailing list. When you claim that

Re: How to tell which instance is which

2010-02-23 Thread Victor Duchovni
On Tue, Feb 23, 2010 at 09:15:59PM +0100, Andrzej Kuku??a wrote: Thanks, I just didn't know it's platform specific... I thought of master(8) command line arguments that are displayed but ignored -- but it's not really THAT important. The master(8) daemon changing its argument vector is not

Re: header_checks question

2010-02-23 Thread Victor Duchovni
On Tue, Feb 23, 2010 at 03:47:16PM +0100, Ralf Hildebrandt wrote: So the first one is correct and the second one not?? From: =?iso-8859-1?Q?H=F6fler=2C_Verena?= xx...@x.de To: =?iso-8859-1?Q?=27=22H=F6fler=2C_Martin=22=27?= xx...@kwsoft.de This was within one mail from

Re: header_checks question

2010-02-22 Thread Victor Duchovni
On Mon, Feb 22, 2010 at 02:57:54PM +0100, Ralf Hildebrandt wrote: Can anybody comment on this ugly fix for Umlauts in realnames? # Already with Quotes (=22) thus do nothing /^From: =\?iso-8859-1\?Q\?=22(.*)=22\?= (.*)$/ REPLACE From: =?iso-8859-1?Q?=22$1=22?= $2 # No quotes /^From:

Re: header_checks question

2010-02-22 Thread Victor Duchovni
On Mon, Feb 22, 2010 at 09:26:53PM +0100, Ralf Hildebrandt wrote: if (space or special characters in realname) return encode(add_quotes(realname)) else return realname fi No, if you encode, you don't add quotes, quotes are for ASCII data that contains special characters. For

Re: header_checks question

2010-02-22 Thread Victor Duchovni
On Mon, Feb 22, 2010 at 03:54:47PM -0500, Wietse Venema wrote: The rules for display names are in RFC*22. Look for the ABNF for display-name, phrase, word, and atom. Short answer: as long as =?iso-8859-1?Q?stuff?= looks like an RFC2822 atom, it needs no quoting. And of course, RFC 2047

Re: postfix explicit logging all failures in maillog

2010-02-20 Thread Victor Duchovni
On Sat, Feb 20, 2010 at 03:43:25PM +0530, ram wrote: One of our clients sends contract notes to their customers and they require to store all logs of deliveries/bounces by some law. They have requirements like * The log should contain the full date including year * The log line should

Re: Postfix 2.7.0 delivery problem

2010-02-19 Thread Victor Duchovni
On Fri, Feb 19, 2010 at 06:56:38PM +0100, Adrian P. van Bloois wrote: Hi, I just installed postfix 2.7.0. WIthout changes to the existing configuration of 2.6.5 I get this error using procmail as my mailbox_command: Feb 19 18:34:29 adrianvb postfix/local[14290]: BD85F7006D:

Re: Postfix 2.7.0 delivery problem

2010-02-19 Thread Victor Duchovni
On Fri, Feb 19, 2010 at 09:16:37PM +0100, Ralf Hildebrandt wrote: * Victor Duchovni victor.ducho...@morganstanley.com: Well, Postfix just executes procmail via your shell (when mailbox_command contains shell metacharacters). Don't blame the messenger. The error message is from your shell

Re: header_checks issue - need your help

2010-02-18 Thread Victor Duchovni
On Thu, Feb 18, 2010 at 04:05:09PM +0100, S?bastien WENSKE wrote: Hi list, I have added on the bottom of my header_check file: /^(cc|to): undisclosed-recipients:;/REJECT This is a very poorly thought out anti-spam measure. Deploy a real spam filter. Don't get creative with

Re: Can this be done with Postfix? Any rules/recipes that already exist?

2010-02-16 Thread Victor Duchovni
On Tue, Feb 16, 2010 at 02:13:11PM +1000, P1aGu3 wrote: For example: The organisation has mydomain.com as their $mydomain. They email someone at postfix.org. Or someone from postfix.org emails someone at mydomain.com The filter box matches the To/From as not being in $mydomain and creates a

Re: Scalable

2010-02-16 Thread Victor Duchovni
On Mon, Feb 15, 2010 at 04:56:44PM +0200, Timo Sirainen wrote: On 13.2.2010, at 0.41, Victor Duchovni wrote: No, this is largely irrelevant. What matters is the IMAP performance they expect, that IMAP servers are reasonably CPU and memory intensive. From what I've seen is that IMAP

Re: content_filter .vs. transport_maps

2010-02-16 Thread Victor Duchovni
On Sun, Feb 14, 2010 at 09:25:12PM +0100, Stefan Palme wrote: On Sun, 2010-02-14 at 14:21 -0500, Wietse Venema wrote: content_filter and FILTER have precedence over all routing mechanisms in Postfix including transport_maps, relayhost, address classes, etc. Ok, but if I have a very simple

Re: helo_access

2010-02-16 Thread Victor Duchovni
On Tue, Feb 16, 2010 at 10:46:31PM +0100, Ralf Hildebrandt wrote: smtpd_recipient_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/helo_access, permit_sasl_authenticated, reject_unauth_destination, reject_non_fqdn_recipient,

Re: helo_access

2010-02-16 Thread Victor Duchovni
On Tue, Feb 16, 2010 at 11:11:54PM +0100, Ralf Hildebrandt wrote: * Victor Duchovni victor.ducho...@morganstanley.com: The key * is not defined (man 5 access) Are you sure using the HELO is a smart idea? The OP is not using a HELO check, it is a check_client_access check. He

Re: before-queue milter concerns

2010-02-16 Thread Victor Duchovni
On Tue, Feb 16, 2010 at 06:08:21PM -0800, Quanah Gibson-Mount wrote: I noticed in the release notes that Postfix 2.7 receives the full message before sending it to the before-queue milter, but I don't think this addresses the concern. Milter applications see SMTP commands as they happen.

Re: Scalable

2010-02-12 Thread Victor Duchovni
On Fri, Feb 12, 2010 at 05:14:30PM -, Jonathan Tripathy wrote: My current server has 256MB RAM (It's a VM on slicehost). How many users do you think that will handle? Is more RAM substantially more expensive? 256 MB is rather meek these days. With physical servers, one typically gets 16GB

Re: Scalable

2010-02-12 Thread Victor Duchovni
On Fri, Feb 12, 2010 at 05:17:26PM -0500, Aaron Wolfe wrote: If you want to give your client good advice, you will have to measure their mail flow in a meaningful way. How many messages per second, minute, hour, day do you need to handle? How many concurrent SMTP sessions? Do they even care

Re: Scalable

2010-02-12 Thread Victor Duchovni
On Fri, Feb 12, 2010 at 06:24:59PM -0500, Aaron Wolfe wrote: If spam filtering is going to be used, it would be wise to consider those requirements as well. A host with 256MB of RAM is not going to be doing much heavy lifting with content inspection. -- Viktor. P.S. Morgan Stanley

Re: fatal: no SASL authentication mechanisms

2010-02-11 Thread Victor Duchovni
On Thu, Feb 11, 2010 at 03:13:52PM -0800, Jeff Lacki wrote: I get 'fatal: no SASL authentication mechanisms' in maillog smtpd_tls_auth_only = yes Do you know what this parameter setting does? -- Viktor. P.S. Morgan Stanley is looking for a New York City based, Senior Unix

Re: fatal: no SASL authentication mechanisms

2010-02-11 Thread Victor Duchovni
On Thu, Feb 11, 2010 at 03:55:52PM -0800, Jeff Lacki wrote: smtpd_tls_auth_only = yes Do you know what this parameter setting does? Not exactly, Ive been reading all kinds of docs and since Im new to some of it, Im a little confused between SASL and TLS. I've used postfix for a while

Re: How to setup postfix to put the queued emails in hold (and not in deferred)

2010-02-10 Thread Victor Duchovni
On Wed, Feb 10, 2010 at 09:22:41AM +, Michele Carandente wrote: I agree that the cron job solution is not the best one... but at the moment it is the only one that I'm able to offer... (Even if with a cron job every 5 seconds(for example), I'll not lose any emails...) As Noel Jones

Re: skipping single restrictions

2010-02-10 Thread Victor Duchovni
On Wed, Feb 10, 2010 at 09:15:59PM +0100, Stefan Palme wrote: smtpd_recipient_restrictions = ... permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_policy_service unix:private/postgrey, reject_rbl_client zen.spamhaus.org,

Re: How to setup postfix to put the queued emails in hold (and not in deferred)

2010-02-09 Thread Victor Duchovni
On Tue, Feb 09, 2010 at 09:44:16AM +, Michele Carandente wrote: I'll try again to find a way to put emails in HOLD automatically...otherwise I'll add a cronjob with the command: 'postsuper -h ALL' The cron job will be completely ineffective. It will miss all mail that is delivered between

Re: local del - virtual v. virtualmailbox

2010-02-09 Thread Victor Duchovni
On Tue, Feb 09, 2010 at 12:54:31PM -0800, Otto Hirr wrote: It shows for virtual postmas...@example.com postmaster But then it states: Line 18: This example assumes that in main.cf, $myorigin is listed under the mydestination parameter setting. This is just part of the story, you alias

Re: Error no. 2 postmulti

2010-02-09 Thread Victor Duchovni
On Tue, Feb 09, 2010 at 08:57:12PM -0500, Wietse Venema wrote: The real problem is that DEBIAN has not caught up on changes in Postfix file locations. When multi-instance support was introduced, it was necessary to move files such as postfix-script and postfix-files from (non-shared)

Re: admin GUI for Postfix (was: Re: Setup SMTP authentication ...)

2010-02-08 Thread Victor Duchovni
On Mon, Feb 08, 2010 at 04:49:44PM +, Michele Carandente wrote: Well, I'm making a kind of GUI because it must be implemented in another product. Anyway, coming back to my old question, I think I'm ok with SMTP authentication. Now I've just to setup how to change the encryption (SSL

Re: admin GUI for Postfix (was: Re: Setup SMTP authentication ...)

2010-02-08 Thread Victor Duchovni
On Mon, Feb 08, 2010 at 05:22:41PM +, Michele Carandente wrote: smtp_tls_cert_file = /etc/postfix/smtpd.cert smtp_tls_key_file = /etc/postfix/smtpd.key Set these empty, you don't need them. smtp_use_tls = yes Obsolete, set: smtp_tls_security_level = may smtp_tls_scert_verifydepth

Re: postfix 2.7 release date

2010-02-08 Thread Victor Duchovni
On Mon, Feb 08, 2010 at 10:32:05PM +0100, Stefan Foerster wrote: The TLS caches won't get automatic cleanups in the initial 2.7 release(s)? Oh, and where is postscreen(8)? In the 2.8 snapshot release. -- Viktor. P.S. Morgan Stanley is looking for a New York City based, Senior

Re: Some Yahoo china servers using postfix + amavisd-new

2010-02-07 Thread Victor Duchovni
On Sun, Feb 07, 2010 at 02:17:21PM -0200, rafa wrote: Received: from localhost (localhost [127.0.0.1]) by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP id 7B02317B0191 for m...@foo.net; Sun, 7 Feb 2010 22:30:58 +0800 (CST) Perhaps this is Zimbra... -- Viktor. P.S.

Re: Postfix OpenLDAP

2010-02-02 Thread Victor Duchovni
On Tue, Feb 02, 2010 at 09:13:36AM -0500, Wietse Venema wrote: spamv...@googlemail.com: hi.. my postfix checks against openldap. postfix first uses the ldap-aliases.cf to check if its a valid user email, that works. then i tried to use the same ldap-aliases.cf for

Re: Say to Postfix which email need to be delivered locally based on the full email address and not just based on the local domain

2010-02-02 Thread Victor Duchovni
On Tue, Feb 02, 2010 at 12:05:18PM -0600, Noel Jones wrote: On 2/2/2010 11:11 AM, Michele Carandente wrote: Hi Noel, Thanks for the corrections... anyway this solution doen't solve the problem that I have. Sorry, that's the only solution I have to offer. The OP is perhaps better off

Re: Postfix OpenLDAP

2010-02-02 Thread Victor Duchovni
On Wed, Feb 03, 2010 at 12:47:31AM +0100, Bernhard Schmidt wrote: On 02.02.2010 15:29, Victor Duchovni wrote: Hi, And, use proxy:ldap:${config_directory}/ldap-aliases.cf, LDAP servers typically don't like the connection concurrency that results from each smtpd(8) and cleanup(8) using

Re: sasl map multiple query question

2010-01-29 Thread Victor Duchovni
On Fri, Jan 29, 2010 at 05:57:30PM +0100, Robert Schetterer wrote: jep that query works postmap -q rob...@schetterer.org mysql:/etc/postfix/mysql_sasl_login_maps-test.cf @schetterer.org rob...@schetterer.org This is the wrong result format. The value retuned must be a comma separated list

Re: sasl map multiple query question

2010-01-29 Thread Victor Duchovni
On Fri, Jan 29, 2010 at 06:30:45PM +0100, Robert Schetterer wrote: smtpd_sender_login_maps = hash:/etc/postfix/sasl_senders pico /etc/postfix/sasl_senders @domain.de username which works as desired As documented, in indexed files the first non-whitespace token is the lookup *key*, and

Re: sasl map multiple query question

2010-01-29 Thread Victor Duchovni
On Fri, Jan 29, 2010 at 06:41:48PM +0100, Robert Schetterer wrote: smtpd_sender_login_maps = hash:/etc/postfix/sasl_senders pico /etc/postfix/sasl_senders @domain.de username which works as desired As documented, in indexed files the first non-whitespace token is the lookup

Re: sasl map multiple query question fixed

2010-01-29 Thread Victor Duchovni
On Fri, Jan 29, 2010 at 11:06:51PM +0100, Robert Schetterer wrote: this works query = SELECT username FROM domain_admins WHERE domain='%d' UNION SELECT username FROM mailbox WHERE username='%s' AND active = 1 Yes, a user can send mail as himself, and a domain admin can send email as

Re: ATRN reloaded

2010-01-28 Thread Victor Duchovni
On Thu, Jan 28, 2010 at 03:48:26AM -0600, adrian ilarion ciobanu wrote: queue, and served by dedicated servers as in: http://www.plonk.de/sw/odmr/ odmr is mail relaying. if one chooses this solution then one probably No, because with ODMR one cannot relay until some unspecified

Re: Taking over a mail queue from another node

2010-01-28 Thread Victor Duchovni
On Thu, Jan 28, 2010 at 06:13:33PM +0100, Stefan Foerster wrote: If in a mail cluster, with multiple machines having access to a shared storage device (SAN, iSCSI) which is presented to the host as a normal block device (e.g. /dev/sda, hosting a normal ext3 filesystem), one of the mail nodes

Re: Taking over a mail queue from another node

2010-01-28 Thread Victor Duchovni
On Thu, Jan 28, 2010 at 06:39:34PM +0100, Stefan Foerster wrote: Only needed when restoring from backups, copying queue files, ... Not needed when mounting a filesystem. I think the manpage for postsuper recommends executing it at least once before starting up Postfix. Can it do any harm

Re: Add Header

2010-01-28 Thread Victor Duchovni
On Thu, Jan 28, 2010 at 05:41:03PM -0600, AMP Admin wrote: just in case anyone comes across this I got it sorted with the following: /^Subject: .*/ PREPEND MyString This is still wrong. -- Viktor. P.S. Morgan Stanley is looking for a New York City based, Senior Unix system/email

Re: ATRN reloaded

2010-01-27 Thread Victor Duchovni
On Wed, Jan 27, 2010 at 12:54:25PM -0600, adrian ilarion ciobanu wrote: Using login names as next-hop destination? I am not sure I like this user interface. well the next hop in the case of atrn IS the connection authenticated for the user more than anythin else. i believe there's nothing

Re: ATRN reloaded

2010-01-27 Thread Victor Duchovni
On Wed, Jan 27, 2010 at 03:40:43PM -0500, Wietse Venema wrote: 1) What is the need for ATRN in the first place? What are the options (VPN, ETRN + dynamic DNS, ...). I find almost no information about supported ATRN solutions with other major MTAs (not counting qmail patches here), so it is

Re: Single domain with multiple postfix servers

2010-01-26 Thread Victor Duchovni
On Tue, Jan 26, 2010 at 12:44:07PM -0500, Andrew Nady wrote: Thanks for the info, let me give you a more detailed scenario. The mailgateways (postfix ldap) on both sides do OU based verification against MS AD, so the serveron Canada side will query the ou=Canada,dc=domain,dc=local and the

Re: ATRN reloaded

2010-01-26 Thread Victor Duchovni
On Tue, Jan 26, 2010 at 04:45:25PM -0600, adrian ilarion ciobanu wrote: Instead of using a DOMAIN_PORT kludge which requires reserving a TCP port or UNIX-domain pathname per customer, it would make sense to use the existing Postfix connection caching mechanism. The idea is to push an

Re: ATRN reloaded

2010-01-26 Thread Victor Duchovni
On Tue, Jan 26, 2010 at 05:40:40PM -0600, adrian ilarion ciobanu wrote: So I would push the socket to scache after I'm done setting it up from SMTPD (auth, policy checks) and forget about it. If it times out before local smtp will start deliver then the client is welcome to

Re: ATRN reloaded

2010-01-26 Thread Victor Duchovni
On Tue, Jan 26, 2010 at 08:26:15PM -0500, Wietse Venema wrote: Then the transport map would look like: example.com atrn:[example.com] example.org atrn:[example.org] ATRN supports multi-domain requests either explicitly or implicitly, in which case the domain - nexthop

Re: Single domain with multiple postfix servers

2010-01-25 Thread Victor Duchovni
On Mon, Jan 25, 2010 at 11:54:37PM -0500, Andrew Nady wrote: Is it possible to provide email service with postfix for a single domain that spans on multiple mailservers? Yes. If you choose a single Internet-facing domain for geographically diverse organization, you must arrange for internal

Re: Putting $data_directory on a RAM filesystem

2010-01-23 Thread Victor Duchovni
On Sat, Jan 23, 2010 at 06:08:40PM +0100, Stefan Foerster wrote: In case of severe server overload, with postscreen(8) complaining about lookup and update times around 400ms almost every mail, is it (reasonably) safe as a last desperate measure to put $data_directory, or at least the file

Re: smtp auth over ssl for smartrelay configuration

2010-01-23 Thread Victor Duchovni
On Sat, Jan 23, 2010 at 05:59:37PM +0100, Jelle de Jong wrote: postconf -e 'smtp_tls_mandatory_protocols = !SSLv2, !TLSv1' Why disable both SSLv2 and TLSv1?! Leave this setting at its default value, or disable just SSLv2. Does your client or server correctly handle SSLv3, but fail to

Re: Email address with leading whitespace rejected

2010-01-22 Thread Victor Duchovni
On Fri, Jan 22, 2010 at 02:13:17PM +0100, Ralf Hildebrandt wrote: Is there something I can do to avoid these rejections (other than the obvious -- get dba...@example2.com to fix his address book)? Hm, you could try and alias soli...@example.com to soli...@example.com But how??? The

Re: Email address with leading whitespace rejected

2010-01-22 Thread Victor Duchovni
On Fri, Jan 22, 2010 at 09:16:07AM -0500, Wietse Venema wrote: The lookup keys and RHS values for virtual(5) are in rfc822 format. A PCRE table can take care of this: Virtual alias lookups are done in the unquoted form, while canonical map lookups are in quoted form. No, the cleanup(8)

Re: Email address with leading whitespace rejected

2010-01-22 Thread Victor Duchovni
On Fri, Jan 22, 2010 at 10:33:58AM -0500, Wietse Venema wrote: One could argue that the SMTP server should use the external form of the recipient for these lookup, to match downstream behaviour in cleanup(8)... Indeed. There was no address validation in the initial design and

Re: SOLVED: rbl check being skipped - Postfix logs no error on NXDOMAIN, does on SERVFAIL

2010-01-22 Thread Victor Duchovni
On Fri, Jan 22, 2010 at 10:40:03AM -0600, Stan Hoeppner wrote: Kenneth Marshall put forth on 1/22/2010 8:39 AM: pdns-recursor 3.1.7.2 is easy to configure/use and has a tuneable resource footprint. Got her installed, configured, up and running. Let's see if this improves this

Re: Postfix Majordomo problem

2010-01-22 Thread Victor Duchovni
On Fri, Jan 22, 2010 at 01:10:51PM -0500, Ruben Safir wrote: Aliases look like this majordomo: |/usr/lib/majordomo/wrapper majordomo This script will run as nobody unless a non-root user owns the aliases.db file from which this alias is read. All tutorials on integrating list

Re: Simple SMTP

2010-01-21 Thread Victor Duchovni
On Thu, Jan 21, 2010 at 08:51:54AM -0800, Slack-Moehrle wrote: Does anyone have a simple guide to setup Postfix to send e-mail? Just from the local system to one external e-mail address. I want to send an e-mail from BASH upon login to certain accounts. To submit an email message via a

Re: Error: timeout exceeded (in reply to end of DATA command)

2010-01-20 Thread Victor Duchovni
On Wed, Jan 20, 2010 at 03:22:56PM -0500, Wietse Venema wrote: The broken router then throws away the bytes with higher sequence numbers than 14233. Workaround: turn off window scaling support on the sender's kernel. This problem is sufficiently common, that on Linux MTAs I always add:

THREAD END: (was: How to not reject valid MTAs for inconsistent forward/reverse DNS.)

2010-01-19 Thread Victor Duchovni
On Tue, Jan 19, 2010 at 03:48:08PM -0500, Frank Cusack wrote: I am a proper host with a proper ISP. Yet I do not have a PTR record for this particular IP. That doesn't make my mail server any LESS valid. This non-Postfix discussion has soaked up enough postfix-users list cycles. Please drop

Re: The method behind the madness

2010-01-18 Thread Victor Duchovni
On Mon, Jan 18, 2010 at 07:01:45PM +0200, Henrik K wrote: I think I prefer a separate daemon that tails postfix log and greps all to=xxx, relay=xxx info and passes it to the policy daemon. That way the policy daemon doesn't need to have a big DNS mess to resolve all the recipient MX ips. MX

Re: The method behind the madness

2010-01-18 Thread Victor Duchovni
On Mon, Jan 18, 2010 at 10:14:34AM -0800, Daniel L. Miller wrote: But my primary issue is sender validation. I don't see how, currently, to implement this as a policy daemon without re-writing sender validation into the policy daemon. I don't see any way, for example, to call another

Re: Relay control based on IP/domain matching?

2010-01-18 Thread Victor Duchovni
On Tue, Jan 19, 2010 at 09:56:46AM +0700, Tr???n Tr???ng T???n wrote: Do you have any way to check domain of email and IP of sending host before relay it? I'm trying to setup a gateway which accept relay for some IP address, and make sure this IP can only send email from domain(s) it owned.

Re: Postfix sender reputation support in snapshot 20100117

2010-01-17 Thread Victor Duchovni
On Sun, Jan 17, 2010 at 05:38:12PM -0500, Wietse Venema wrote: According to discussions on the Postfix list there is a legitimate need for such functionality. Until now this requires one Postfix instance per source IP address. I am not entirely convinced the need is legitimate, as this

Re: Mail from cron delay

2010-01-16 Thread Victor Duchovni
On Sat, Jan 16, 2010 at 06:14:45PM -0800, Emmett Culley wrote: The pre-active delay is measured from the time message is created until it enters the active queue (in this case for the first time). So the message was either: - Not yet fully formed (delayed EOF in the

Re: gssapi sasl authentication

2010-01-15 Thread Victor Duchovni
On Fri, Jan 15, 2010 at 05:34:16PM +0100, Lanfeust troy wrote: Jan 15 17:23:00 auth postfix/smtpd[17540]: warning: SASL authentication failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Configuration file does not specify default realm) The default

Re: LDAP BCC Rules

2010-01-15 Thread Victor Duchovni
On Fri, Jan 15, 2010 at 03:44:11PM -0500, Joe Postfix wrote: Hi, we're trying to setup our Postfix relays to BCC emails to/from specific users (members of an LDAP group - A/D actually) to a mailbox that logs their correspondence. I wasnt able to find any mention of this in the online

Re: Multiple From: in a mail header?

2010-01-14 Thread Victor Duchovni
On Thu, Jan 14, 2010 at 08:07:34PM +0100, Ralf Hildebrandt wrote: * K??rlis Repsons karlis.reps...@gmail.com: According to RFC 5322: from= From: mailbox-list CRLF mailbox-list= (mailbox *(, mailbox)) / obs-mbox-list Thus, one From: header may

Re: Rewriting envelope sender for aliases

2010-01-14 Thread Victor Duchovni
On Fri, Jan 15, 2010 at 02:39:11AM +0100, Hector Martin wrote: Victor Duchovni wrote: On Thu, Jan 14, 2010 at 01:11:17AM +0100, Hector Martin wrote: Perhaps with an SRS milter, or similar content filter, assuming these take extreme caution to avoid loops (never rewrite to a non empty

Re: Speeding up Local Delivery

2010-01-13 Thread Victor Duchovni
On Wed, Jan 13, 2010 at 12:35:19AM -0600, Wendigo Thompson wrote: Postfix accepts mail from the corporate mail server and delivers the message via a pipe alias to an application that is then inserting the message into the database. Your choice of delivery mechanism is unfortunate. It is far

Re: How to not reject valid MTAs for inconsistent forward/reverse DNS.

2010-01-13 Thread Victor Duchovni
On Wed, Jan 13, 2010 at 12:54:38PM -0500, Frank Cusack wrote: If anything decides prematurely that the connection is dead, it is your operating system kernel not Postfix. Unless of course postfix has a bug (heaven forbid). I would like to suggest to the rest of the community on this list

Re: postscreen stress=yes

2010-01-13 Thread Victor Duchovni
On Wed, Jan 13, 2010 at 01:44:05PM -0600, Noel Jones wrote: Is postscreen supposed to always run with stress=yes? Seems to me stress-adaptive behavior would be useful in postscreen. postfix 20637 0.0 0.1 3028 1704 ?? Ss1:32PM 0:00.01 postscreen -l -n smtp -t inet -u -o stress=yes

Re: Rewriting envelope sender for aliases

2010-01-13 Thread Victor Duchovni
On Thu, Jan 14, 2010 at 01:11:17AM +0100, Hector Martin wrote: What I want to do is rewrite the envelope sender such that it appears to come from the left hand side of the alias map file, so a mail from b...@gmail.com to f...@example.com would turn into a mail from f...@example.com to

THREAD CLOSED: (was Re: multiple PTR records)

2010-01-12 Thread Victor Duchovni
On Tue, Jan 12, 2010 at 11:27:43AM -0500, Frank Cusack wrote: Yes we don't like it, but it's easy for postfix to accept and deal with it. You write the code, deploy it on your systems, and suffer the consequences. I'll post my actual problem in another thread, to keep this one focused on the

THREAD STILL CLOSED: (was Re: multiple PTR records)

2010-01-12 Thread Victor Duchovni
On Tue, Jan 12, 2010 at 01:04:56PM -0500, Frank Cusack wrote: On January 12, 2010 12:24:20 PM -0500 Frank Cusack fcus...@fcusack.com wrote: Apparently it only honors the first PTR record that getnameinfo() returns to it. Additionally this appears to be a conscious decision and in part

How to not reject valid MTAs for inconsistent forward/reverse DNS.

2010-01-12 Thread Victor Duchovni
On Tue, Jan 12, 2010 at 01:12:52PM -0500, Frank Cusack wrote: I can't accept mail from hosts with multiple PTR records without manually whitelisting them. Additionally, I can't even tell that I'm experiencing a failure until it is reported to me manually and out of band. Don't use

Re: Challenge/Response

2010-01-12 Thread Victor Duchovni
On Tue, Jan 12, 2010 at 10:39:16AM -0800, Aaron Clausen wrote: Are challenge response systems still heavily frowned on? Yes. This is how I explain spam filtering of C/R requests to my users: The attached message was reported by you as a quarantine error. Sadly, challenge/response

Re: How to not reject valid MTAs for inconsistent forward/reverse DNS.

2010-01-12 Thread Victor Duchovni
On Tue, Jan 12, 2010 at 03:47:57PM -0500, Frank Cusack wrote: Don't use reject_unknown_client_hostname indiscriminantly. Do so only for CIDR blocks in which you find a small number of legitimate MTAs in a larger pool of spam sending hosts without valid PTR records. In my case, I don't have

Re: TLS - Certificate not Trusted

2010-01-11 Thread Victor Duchovni
On Mon, Jan 11, 2010 at 11:36:42AM -0600, Noel Jones wrote: According to the example in http://www.postfix.org/TLS_README.html#client_tls_policy the policy table should contain somedomain.tld encrypt To include subdomains of somedomain.tld also include .somedomain.tld encrypt

Re: Huge active queue and system idle, not delivering

2010-01-08 Thread Victor Duchovni
On Fri, Jan 08, 2010 at 03:24:25PM +0200, Patrick Chemla wrote: When I do telnet a139.localpc2105.com 25, I get immediate response. What does response mean? Immediate connection completion means nothing. Do you get a 220 banner right away? Do you get all of it or just the first line in a

Re: Messages stuck in queue forever

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 11:04:13AM -0600, Wendigo Thompson wrote: Answering your first question, the message in question does show up in find: 26701170 872 -rwx--1 _postfix wheel 444689 Aug 4 2008 /var/spool/postfix/maildrop/F423E1976D72 Is this larger than your message

Re: Huge active queue and system idle, not delivering

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 07:43:55PM +0200, Patrick Chemla wrote: CPU is more than 85% idle on my postfix I5/750 box, but the outbound queue is very very slow. Throughput == Concurrency / Latency What destination are most of the messages in the queue going to? What is the associated

Re: Huge active queue and system idle, not delivering

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 08:29:44PM +0200, Patrick Chemla wrote: Here the logs: This is just the qmgr(8) warnings about a clogged queue. Other than telling us that all the mail is going to localpc2105.com, this is not very useful. Where are the logs from smtp(8)? What transport is

Re: Messages stuck in queue forever

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 12:59:45PM -0600, Wendigo Thompson wrote: To answer Victor, message_size_limit is so. This if far from a complete sentence. What is your current message size limit? What are the sizes of the stuck messages? What logging is generated by pickup (and cleanup) when pickup

Re: Messages stuck in queue forever

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 01:25:01PM -0600, Wendigo Thompson wrote: Woops, I meant to say: message_size_limit is zero. I went all verbose and looking at pickup logs for the specific queue ID I mentioned earlier: Jan 7 13:16:20 se001 postfix/pickup[57270]: warning: C9EBD24E12F23: message has

Re: Messages stuck in queue forever

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 02:08:12PM -0600, Wendigo Thompson wrote: Whoooah a lot of output from dtruss (I can't even pipe it to a file) It writes to standard error, so you incant: dtruss ... 2file. so I'm not sure what you want me to do with that. The output from postcat is (its a little

Re: Huge active queue and system idle, not delivering

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 04:47:14PM -0500, Stefan Caunter wrote: I have to inject 2 to 4 millions emails to the postfix box in 24 hours, and I expect to deliver within the same delay. Actually, I can't deliver more than 500,000 per 24h hours. It could be viewed that half a million

Re: Huge active queue and system idle, not delivering

2010-01-07 Thread Victor Duchovni
On Thu, Jan 07, 2010 at 10:54:15PM +0100, Ralf Hildebrandt wrote: It could be viewed that half a million delivered in 24 hours is fine. Are you signing the mail? This can help with delivery rates to the large webmailer mx destinations. There are many things to consider: * DKIM signing

Re: Huge active queue and system idle, not delivering

2010-01-07 Thread Victor Duchovni
On Fri, Jan 08, 2010 at 12:30:34AM +0200, Patrick Chemla wrote: Jan 7 22:02:57 postfix postfix/qmgr[26441]: 5B91F873F6: removed Jan 7 22:02:57 postfix postfix/smtp[27180]: 375DDD5923: to=lexoti...@gmail.com, relay=a139.localpc2105.com[10.0.0.139]:25, conn_use=59, delay=61550,

Re: TLS Root Certificate Problem

2010-01-06 Thread Victor Duchovni
On Wed, Jan 06, 2010 at 10:00:37AM -0500, Dennis Putnam wrote: I am using CACert as my signing authority. I have included their root certificate in my main.cf: smtpd_tls_CAfile = /etc/postfix/ssl/root.crt This is for verifying client certificates when clients connect to your SMTP server.

Re: Client did not present a certificate

2010-01-04 Thread Victor Duchovni
On Mon, Jan 04, 2010 at 05:41:18PM +1300, Michael wrote: I have not been able to get any message other then Client did not present a certificate in message headers despite loading a Commodo email certificate in to Kmail. What problem are you trying to solve? Does the Kmail client support

Re: About reject_authenticated_sender_login_mismatch

2009-12-31 Thread Victor Duchovni
On Thu, Dec 31, 2009 at 03:41:56PM +0800, Jeff Huang wrote: I want to restrict the smtpd with reject_authenticated_sender_login_mismatch when the sasl login name and the sender mismatch. So I need to set a lookup tables for the smtpd_sender_login_maps. But I only want to check if the

<    8   9   10   11   12   13   14   15   16   17   >