Re: Mails bounced 550 5.7.1

2010-03-19 Thread Wietse Venema
Sam Przyswa: The problem occur when we send mail to this domain, we had no problems before we changed our IP mail server and MX record for our domain. In that case, it is likely that the IP address triggers a reject by the Trend Micro Email Reputation Service. For example: - You are suddenly

Re: How to limit # of messages for one destination in the active queue?

2010-03-19 Thread Wietse Venema
Attila Nagy: So: - is there any way to let other domains get into the active queue in a No. Just like ordinary programs read large files sequentially using a limited amount of intermediate buffer space, the Postfix queue manager reads a large queue sequentially using a limited amount of

Re: SMTP failure

2010-03-19 Thread Wietse Venema
Victor Duchovni: On Fri, Mar 19, 2010 at 06:08:12AM -0600, Glenn English wrote: It looks to me like the problem has something to do with DNS, not SMTP, right? Yes. And why would Yahoo be doing a CNAME lookup? Their MTA does that for all destinations, among other lookups. (I

Re: How to limit # of messages for one destination in the active queue?

2010-03-19 Thread Wietse Venema
Attila Nagy: I've only written this, because I was sure that somebody would miss it. This destination is not slow because of slow delivery times on the already open connections, but because of connection timeouts (I can observe this on other, mostly silent systems, which send only few

Re: SMTP failure

2010-03-19 Thread Wietse Venema
Victor Duchovni: On Fri, Mar 19, 2010 at 12:32:13PM -0400, Wietse Venema wrote: And why would Yahoo be doing a CNAME lookup? Their MTA does that for all destinations, among other lookups. Your DNS server is a bit odd: $ dig +trace -t any slsware.com

Re: restrict nrcpt

2010-03-20 Thread Wietse Venema
K bharathan: hi all is there a way to restrict a sender to send only to a fixed no.of recipients in one mail! i want this to be kept as a general rule on my smtp out server Other people have already mentioned the policy plugins. Another possibility is to use the built-in rate limit.

Re: Counting clients in smtpd_client_recipient_rate_limit with XFORWARD

2010-03-20 Thread Wietse Venema
Stefan Foerster: * Wietse Venema wie...@porcupine.org: Patrick Ben Koetter: When a message reenters from an instance that uses XFORWARD, for example amavis, will Postfix count the IP used twice and, for example, add that to smtpd_client_recipient_rate_limit? Rate limits apply

Re: [PATCH] support milter protocol 6 and 2 negotiation

2010-03-20 Thread Wietse Venema
Kouhei Sutou: Hi, Postfix 2.7.0 supports milter protocol 2, 3, 4 and 6. Postfix with milter_protocol=6 accepts a connection from a milter that uses milter protocol 2. But its milter session is broken because Postfix sends SMFIC_DATA event to the milter. In milter protocol 2, SMFIC_DATA

Re: [PATCH] support milter protocol 6 and 2 negotiation

2010-03-20 Thread Wietse Venema
Wietse Venema: Kouhei Sutou: Hi, Postfix 2.7.0 supports milter protocol 2, 3, 4 and 6. Postfix with milter_protocol=6 accepts a connection from a milter that uses milter protocol 2. But its milter session is broken because Postfix sends SMFIC_DATA event to the milter. In milter

Re: Email routing based on email address matching

2010-03-21 Thread Wietse Venema
Marc Falzon: [ Charset ISO-8859-1 unsupported, converting... ] Hello all, I am currently trying to configure Postfix to route incoming emails based on email address matching to a daemon I wrote. Here is the context : I am developing a simple mailing list management daemon to which I

Re: Cleanup is slow for mail received by SMTP

2010-03-21 Thread Wietse Venema
Dave Green: Thanks kindly for your reply There is no fundamental reason why pickup-cleanup is slower than smtpd-cleanup (other than different receive_override_options settings in master.cf). However, it is possible that you're sending mail INTO Postfix at a slower rate than

Re: Cleanup is slow for mail received by SMTP

2010-03-21 Thread Wietse Venema
Dave Green: Can you do some tests with a recent version of Postfix's own stress testing tool? smtp-source -t bitbuc...@sigmasys.co.uk -l 5242880 -m 10 206.125.173.103 0m42.62s real0m0.02s user0m0.31s system smtp-source -t bitbuc...@sigmasys.co.uk -l 5242880 -m 10

Re: Cleanup is slow for mail received by SMTP

2010-03-22 Thread Wietse Venema
Wietse Venema: Dave Green: Can you do some tests with a recent version of Postfix's own stress testing tool? smtp-source -t bitbuc...@sigmasys.co.uk -l 5242880 -m 10 206.125.173.103 0m42.62s real0m0.02s user0m0.31s system smtp-source -t bitbuc...@sigmasys.co.uk

Re: Milter SMFIC_HEADER failure (huh, due to success? :-)

2010-03-22 Thread Wietse Venema
Sean Reifschneider: On 03/19/2010 04:38 AM, Wietse Venema wrote: In the mean time, it would help if you could provide verbose (smtpd AND cleanup) logging for a failed session. Please include information We're trying to get the logging information. Versions we've seen this on include

Re: Access based on client cert attributes?

2010-03-23 Thread Wietse Venema
Dick Visser: Hi guys At the moment we use SASL authentication to allow our users to send mail through our mailer (Postfix 2.5). I would like to extend this to using client certificates for authentication as well. Our users have personal certificates that are signed by a the TERENA

Postfix legacy releases 2.6.6, 2.5.10, 2.4.14 available

2010-03-23 Thread Wietse Venema
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-2.6.6.html] Postfix legacy releases 2.6.6, 2.5.10 and 2.4.14 contain fixes that were already included with Postfix 2.7 (stable release) and Postfix 2.8 (experimental release). NOTE: Postfix

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Wietse Venema
James Lever: I_ve been banging my head away at this for a while today and all I have is a headache. Is there a (preferably generic) way to redirect *all* delivery to local accounts to $lo...@$mydomain instead of delivering to /var/mail/ ? (I_m trying to setup a true NULL CLIENT

Re: Relayhost dependend on destination MX

2010-03-24 Thread Wietse Venema
Martijn de Munnik: Hi, Our smtp server has some issues when talking to some remote mx's. This results in a timeout and the message not being delivered (this was discussed on this mailinglist but there doesn't seem to be a real solution available now). When we relay the message through

OFF-List attacks on Postfix users

2010-03-24 Thread Wietse Venema
Victor Duchovni: On Tue, Mar 23, 2010 at 04:18:49PM +, rich...@buzzhost.co.uk wrote: [ Received: from stytwo.spampig.org.uk (stytwo.spampig.org.uk [212.69.52.158]) ] On Tue, 2010-03-23 at 12:05 -0400, Victor Duchovni wrote: Everything you need to know is the RELEASE_NOTES.

Re: mail for xxxx loops back to myself

2010-03-24 Thread Wietse Venema
Query your mysql tables for the domains that loop: $ postmap -q 126.com mysql:/etc/postfix/mysql-va.cf || echo not found $ postmap -q 126.com mysql:/etc/postfix/mysql-vd.cf || echo not found In both cases the output should be the text not found. Wietse

Re: question about MX records and postfix (repost)

2010-03-24 Thread Wietse Venema
Daniel L'Hommedieu: Hi all. I posted this the other day but got no replies, on or off list. I'm really hoping someone might have an idea of what I can do here. I've been looking into things for the last couple days and have not made any progress. You forgot to follow the mailing list

Re: question about MX records and postfix (repost)

2010-03-24 Thread Wietse Venema
Daniel L'Hommedieu: On Mar 24, 2010, at 12:40, Wietse Venema wrote: Daniel L'Hommedieu: Hi all. I posted this the other day but got no replies, on or off list. I'm really hoping someone might have an idea of what I can do here. I've been looking into things for the last couple days

Re: Relaying and backskatter problem

2010-03-24 Thread Wietse Venema
Sean Reifschneider: On 03/24/2010 10:36 AM, Randy wrote: EX: r...@theholycat.com: Sender address rejected: Domain not found (in reply to RCPT TO command)) I'd be tempted to set up a milter or policy filter that for each rcpt would connect to the Exchange server (assuming that's where

Re: Small amount of spam still routed through server and anotherproblem with spam

2010-03-24 Thread Wietse Venema
Maybe you should look into spam feedback loops, to get notified when users at remote ISPs are flagging your mail as SPAM. http://www.google.com/search?q=spam+feedback+loop Wietse

Re: question about MX records and postfix (repost)

2010-03-24 Thread Wietse Venema
Daniel L'Hommedieu: If all you want is treat anything.example.com as example.com, use: /etc/postfix/main.cf: mydestination = localhost example.com pcre:/etc/postfix/mydestination.pcre /etc/postfix/mydestination.pcre: /\.example\.com$/ whatever Where whatever may be any

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Wietse Venema
James Lever: On 25/03/2010, at 3:45 AM, Victor Duchovni wrote: http://www.postfix.org/BASIC_CONFIGURATION_README.html#myorigin See the *second* paragraph. Also: http://www.postfix.org/MULTI_INSTANCE_README.html#quick Unfortunately, the problem with both of these configurations

Re: redirect local(8) delivery to $lo...@$mydomain ?

2010-03-24 Thread Wietse Venema
James Lever: * all mail to be sent on to a relayhost regardless of whether the local MTA thinks it should be delivered locally or not. (this is the specfic issue I currently have) relayhost = $mydomain * all mail to be rewritten in the form $lo...@$mydomain (preferrably in that

Re: new cipher in OpenSSL, need to rebuild Postfix?

2010-03-25 Thread Wietse Venema
Gregory BELLIER: At this point, you really need to step back, take a deep breath, and use OpenSSL as-is. As I said, it's to learn. If I do nothing then it's pointless. What I ask is not your point on if it's relevant to do it or not because we all know it's not. With intense

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Wietse Venema
David Michard: Hello, I know this question has been discussed on this list* but no suitable solution was provided for our SMTP server settings. A patch** is published but reports on this list say that it does not work. I am responsible for a medium sized mailing-list, through which one

Re: Sending email from a pool of IP addresses

2010-03-25 Thread Wietse Venema
Daniel L'Hommedieu: Here's what I did when I had a similar issue with sendmail: I reconfigured sendmail such that all mailers are considered expensive. In sendmail, what this does is: new messages are only queued, and messages are sent only during a queue run. ... I don't know if postfix

Re: Difference between default_destination_recipient_limit and smtpd_recipient_limit

2010-03-26 Thread Wietse Venema
Marcos Lorenzo de Santiago: I had configured default_destination_recipient_limit to 1500 and I couldn't send an email destined to 1100 recipients. It was when I modified this two options when I got it working: smtpd_recipient_overshoot_limit smtpd_recipient_limit I rtfm but I just can't

Re: Deliver raw, local emails to a socket?

2010-03-26 Thread Wietse Venema
Stephens, Kurt: I'd like to have all local postfix deliveries to go directly into a TCP or UDS (named pipe) socket, that will eventually end up raw in database table for subsequent triage. It's easy enough to take one of the pipe(8) examples in master.cf, run a netcat-like command, and set

Re: Postfix LDAP Temporary lookup failure

2010-03-26 Thread Wietse Venema
Victor Duchovni: On Fri, Mar 26, 2010 at 06:28:50PM +0100, Matias Surdi wrote: The problem is that I'm receiving mails to non existent accounts, or , with an accented (non ascii) character and instead of rejecting the mail postfix is replying the client with a 451 error, here is the

Re: Catch-all alias not working correctly

2010-03-27 Thread Wietse Venema
Da-Huntha: Oops, I forgot to mention the problem: All mail goes to the catch-all address, so even mail destined for m...@domain.com. As documented, virtual alias expansion is recursive. # /etc/postfix/virtual m...@domain.com me @domain.com spam @domain2.com spam To stop the recursion,

Re: Can Receive jpeg but can`t send

2010-03-27 Thread Wietse Venema
Rafael Andrade: Hello Members, I would like to know if there is a method so I can have the following configuration on my MTA: The user foobar can receive attached jpeg files, but cannot send attached jpegs. I need this because some employees must receive some files in a specific

Re: Difference between default_destination_recipient_limit and smtpd_recipient_limit

2010-03-27 Thread Wietse Venema
Marcos Lorenzo de Santiago: El vie, 26-03-2010 a las 12:06 +0100, Wietse Venema escribi?: Marcos Lorenzo de Santiago: I had configured default_destination_recipient_limit to 1500 and I couldn't send an email destined to 1100 recipients. It was when I modified this two options when I

Re: Postfix LDAP Temporary lookup failure

2010-03-27 Thread Wietse Venema
Victor Duchovni: On Fri, Mar 26, 2010 at 04:54:00PM -0400, Wietse Venema wrote: Don't pass non-ASCII user names to your LDAP table. Hmm. If the Postfix LDAP driver handles only non-ASCII query keys then we should have a smarter response from the mail system. Agreed. By the time I

Re: Postfix LDAP Temporary lookup failure

2010-03-28 Thread Wietse Venema
Stefan Foerster: As of today, is u...@sch?n.example.com the same user as u...@xn--schn-7qa.example.com, as far as e.g. access(5) maps are concerned? No, they are, and have always been, different. If xn--schn-7qa.example.com is what Postfix receives, then xn--schn-7qa.example.com is what

Re: Consolidating Virtual Domain Delivery

2010-03-28 Thread Wietse Venema
Frank Reid: Scenario: I would like to deliver all mail for the @example.com domain to a single mailbox as a single delivery (to preserve header information). I have set up: -- main.cf virtual_alias_domains = example.com virtual_alias_maps = hash:/etc/postfix/virtual -- virtual

Re: Consolidating Virtual Domain Delivery

2010-03-28 Thread Wietse Venema
Frank Reid: Wietse Venema wrote: Yes it is possible. However, I need to warn you first about a mis-conception. The To: header is NOT a reliable indicator of the intended recipient. Understand. I have no intention to sort out or deliver this mail by other means from

Re: Consolidating Virtual Domain Delivery

2010-03-28 Thread Wietse Venema
Frank Reid: Wietse Venema wrote: To prove that POSTFIX is at fault you need to demonstrate that ONE message with MULTIPLE recipients results in MULTIPLE deliveries. I did some tests, and it appears it only happens when addressing the virtual domain. POSTFIX does only one RCPT

Re: Consolidating Virtual Domain Delivery

2010-03-28 Thread Wietse Venema
Frank Reid: Wietse Venema wrote: To prove that POSTFIX is at fault you need to demonstrate that ONE message with MULTIPLE recipients results in MULTIPLE deliveries. I did some tests, and it appears it only happens when addressing the virtual domain. POSTFIX does only one RCPT

Re: What became of the append/truncate ideas for queuefiles?

2010-03-29 Thread Wietse Venema
Ralf Hildebrandt: During my internal performance tests I noticed the fsstone program and wondered what became of your ide to use append/truncate instead of generating new queuefiles. From http://archives.neohapsis.com/archives/postfix/2004-07/0991.html Early measurements have shown that

Re: All email forward a copy to testing server

2010-03-29 Thread Wietse Venema
Patric Falinder: ah, I changed that but now I get this error message: warning: regexp map /etc/postfix/recipient_bcc, line 1: using empty replacement string warning: recipient_bcc_maps lookup of patric.falin...@sub.domain.com returns an empty string result warning: recipient_bcc_maps

Re: All email forward a copy to testing server

2010-03-29 Thread Wietse Venema
Patric Falinder: /etc/postfix/recipient_bcc: /@sub\.domain\.com/ /^(.*)@sub\.domain\.com$/ $...@new.sub.domain.com That first line has no result value. Wietse

Re: All email forward a copy to testing server

2010-03-29 Thread Wietse Venema
Patric Falinder: /etc/postfix/recipient_bcc: /@sub\.domain\.com/ /^(.*)@sub\.domain\.com$/ $...@new.sub.domain.com Wietse Venema skrev 2010-03-29 14:47: That first line has no result value. Patric Falinder: What should I set the result value to? I got this example from the mailinglist so I

Re: max length of pcre rule?

2010-03-29 Thread Wietse Venema
Louis-David Mitterrand: Hi, I am using an (insanely) long pcre (see below) to reject african/chinese/etc. spam that relays through large ISP's. An now it seems I have reached a limit. When trying to add a single more expression with a set of () parens I get this error: postmap:

Re: Postfix 2.5.1 cleanup(8) Date: issue?

2010-03-29 Thread Wietse Venema
Matthias Andree: and timezone are wrong, timezone name is missing). Interestingly, the time logged in Received: is correct. I would have hoped that the Date: header produces the same timestamp as in the Received: header. ... Return-Path: X-Original-To: ma+direct Delivered-To:

Re: notification message size to receiver

2010-03-29 Thread Wietse Venema
Robert Bude: Hi ! Is there a possibility to configure postfix to send an email notification to the sender and receiver of an email, which is not accepted because of exceeding the message size limit ? We have a client, who wants to get notified if someone send him an email, which was

Re: Rate control for SMTP delivery to speicific domain

2010-03-29 Thread Wietse Venema
Mike Hutchinson: Hello Everyone. Our company sends out newsletters to people who have subscribed their mail address in-store (retail). I have been working in attempt to slow down E-Mail deliveries to Hotmail, as our server attempts deliveries too quickly and will get blocked by their

Re: Rate control for SMTP delivery to speicific domain

2010-03-30 Thread Wietse Venema
Mike Hutchinson: smtphotmail unix - - - - 3 smtp Who told you to set a wakeup timer of 3 seconds? Remove it. No-one did. I had intended to set a max processes limit.. You're right. Hoewever, with smtphotmail...rate_delay, Postfix will make at most

Re: OT: 0.0.0.0

2010-03-30 Thread Wietse Venema
Simon Waters: One domain is advertising an MX record of 0.0.0.0 which postfix correctly reports as numeric domain name in resource data of MX record for ... Then (on Linux at least), Postfix connects to 0.0.0.0 and then logs a couple of messages complaining it is trying to talk to

Re: Rate control for SMTP delivery to speicific domain

2010-03-30 Thread Wietse Venema
Victor Duchovni: On Wed, Mar 31, 2010 at 08:16:28AM +1300, Mike Hutchinson wrote: What version of Postfix is this? Postfix mail_version = 2.5.1 The rate control features introduced in 2.5.0 were improved in later patches, you must upgrade to the latest 2.5 release if you want to

Re: smtpd-policyd feature.

2010-03-31 Thread Wietse Venema
an...@isac.gov.in: Dear List, We are using the smtpd-policyd feature from long time to allow some specific users to receive higher size mails. It is working fine. But, it does not work when the recipient_count is more than one as we are comparing the value with recipient. There

Re: holding local delivery

2010-04-01 Thread Wietse Venema
Vernon A. Fort: The maximal_queue_lifetime-30s was for testing only - its normally set for 1d. The sole issues is to prevent mail from bouncing back if we don't get the encrypted volume mounted and cyrus started back up soon enough. A reasonable example would be if the server rebooted due

Re: holding local delivery

2010-04-01 Thread Wietse Venema
Wietse Venema: Vernon A. Fort: The maximal_queue_lifetime-30s was for testing only - its normally set for 1d. The sole issues is to prevent mail from bouncing back if we don't get the encrypted volume mounted and cyrus started back up soon enough. A reasonable example would

Re: Sub-domains ignore transport relayhost

2010-04-01 Thread Wietse Venema
Emmanuel Fust?: relay_relayhost = [a.b.c.d] As always, use postconf -n output when reporting a problem. This would have revealed immediately that relay_relayhost is a mistake. Wietse

Re: Sub-domains ignore transport relayhost

2010-04-01 Thread Wietse Venema
Emmanuel Fust??: Le 01/04/2010 15:20, Wietse Venema a ?crit : Emmanuel Fust?: relay_relayhost = [a.b.c.d] As always, use postconf -n output when reporting a problem. This would have revealed immediately that relay_relayhost is a mistake. Wietse Ok so transport_postfix-conf

Re: Unconditional Accept for mynetworks

2010-04-01 Thread Wietse Venema
Stephen Carville: On Thu, Apr 1, 2010 at 10:11 AM, Stephen Carville stephen.carvi...@gmail.com wrote: Is there way to have postfix relay _any_ mail from $mynetworks but still check other mail against the relay_recipient_maps? I have been forwarding bad addresses to the held desk but the

Re: reverse proxy

2010-04-01 Thread Wietse Venema
Glenn English: On Apr 1, 2010, at 4:05 PM, Victor Duchovni wrote: Were you asking about using Postfix as a proxy in front of internal SMTP servers, or using firewall reverse-proxy SMTP support to sit in front of Postfix? I was asking about Postfix running as a daemon on the firewall

Re: reverse proxy

2010-04-01 Thread Wietse Venema
Glenn English: On Apr 1, 2010, at 5:36 PM, Wietse Venema wrote: So why must this be a Postfix-as-proxy, instead of a complete Postfix-with-queue instance? Like I said, I'm not at all sure it does. But I'm told that there should be an SMTP reverse proxy running on the firewall

Re: Relaying to SPF protected server

2010-04-02 Thread Wietse Venema
ram: On Thu, 2010-04-01 at 12:14 +, Simon Waters wrote: On Thursday 01 April 2010 12:38:29 J.R.Ewing wrote: Is there any solution? I have idea to move senders address to reply to field and write new sender. Is it possible with postfix? Postfix supports DKIM, DomainKeys, SPF,

Re: problems with permit_sasl and unknown_address

2010-04-02 Thread Wietse Venema
Yves Dorfsman: Hello, I am using postfix version 2.5.6. For years I have been using the settings: smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, permit This allows relaying only from local clients. smtpd_client_restrictions =

Re: (still same spam problem) Pop-Before Smtpd question and also can you quicky check the log file for issues?

2010-04-02 Thread Wietse Venema
Josh Cason: Back to the question. I was looking at a detailed log on postfix. When it goes through the list of tests. It rejects everything until it hits pop-before-smtp. Then it says okay. When I check the database of ip numbers. It lists my server and my localhost 127.0.0.1 number.

Re: problems with permit_sasl and unknown_address

2010-04-02 Thread Wietse Venema
Yves Dorfsman: Wietse Venema wrote: For years I have been using the settings: smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination, permit This allows relaying only from local clients. smtpd_client_restrictions

Re: Bounce replies are not coming back through relay

2010-04-02 Thread Wietse Venema
Masao Garcia: Hello, I have set up an Ubuntu 8.04 postfix relay that relays mail to and from my Exchange server. Everything seems to work well enough except that our users do not receive bounce replies when they send mail to an invalid address outside our domain. If I tail

Re: Bounce replies are not coming back through relay

2010-04-03 Thread Wietse Venema
Masao Garcia: Wietse, Maybe I should re-phrase my question. On my Exchange server, if I e-mail an invalid address, it will e-mail be back and tell me that the recipient does not exist. When I e-mail an invalid address using a web/imap/pop hosting provider, I get an e-mail telling me the

Re: problems with permit_sasl and unknown_address

2010-04-03 Thread Wietse Venema
Yves Dorfsman: Wietse Venema wrote: There's no reject_unknown_* in there, so this does not reproduce the complaint. Right, because I had commented them out in order to make it work. I put them back, here's the output of postconf -n It's like sending your brother to the doctor

Re: Bounce replies are not coming back through relay

2010-04-03 Thread Wietse Venema
Masao Garcia: Wietse, Okay, I think I know what the problem is. Our reply-to addresses are for a domain that's not handled (yet) by our mail servers. We are in the middle of a transition to bringing our e-mail in-house away from an external pop/imap provider but during the transition we'd

Re: Fast 5xx-exit before HELO is just a temporary failure?

2010-04-03 Thread Wietse Venema
Peer Heinlein: Hi! Some mailservers close their session immediatley if the client-IP is listed on RBLs or expected to come from a dynamic IP-range: p...@waffel:~ telnet 71.74.56.244 25 Trying 71.74.56.244... Connected to 71.74.56.244. Escape character is '^]'. 554 5.7.1 - ERROR: Mail

Re: Relaying to SPF protected server

2010-04-03 Thread Wietse Venema
Jose Ildefonso Camargo Tolosa: Hi! This is getting interesting. How, exactly, does mailman (or other mailing list manager) handles this? I mean, I have seen several SPF-enabled domains, and these domains have subscriptions to one or more lists... now, reading the headers for one of the

Re: Client host rejected: sender address does not match client hostname

2010-04-05 Thread Wietse Venema
Voytek Eymont: I just noticed this in the logs, which might be from a valid sender to a valid user on this server: Apr 5 11:03:31 postfix/smtpd[31021]: NOQUEUE: reject: RCPT from fep06.mfe.bur.connect.com.au[203.63.86.26]: 554 5.7.1 fep06.mfe.bur.connect.com.au[203.63.86.26]: Client host

Re: Relay host and transport maps

2010-04-05 Thread Wietse Venema
Scott Thomson: Hey Folks, Thanks in advance for any help you can provide. I think it might make the most sense to start by describing what I'm trying to accomplish first. Which is this, I have a server that is configured as the host for our mailman lists (lists.example.org), it also sits

Re: (still same spam problem) Pop-Before Smtpd question and also can you quicky check the log file for issues?

2010-04-05 Thread Wietse Venema
Josh Cason: The pop-before-smtp has other ip numbers in the list. Postfix will allow mail from EVERY IP address in the file. Wietse

Re: customized relocated bounces

2010-04-06 Thread Wietse Venema
mailingli...@belfin.ch: Hi is there a way how to customize relocated bounces in a similar fashion as described in man 5 bounce? There are no relocated bounce messages. There are bounce, delayed, success and trace messages. The content of relocated error (not bounce!) messages is

Re: customized relocated bounces

2010-04-06 Thread Wietse Venema
mailingli...@belfin.ch: Is there a way to customize the relocated bounce message? Postfix has configurable bounce, delayed, success and trace template text. Postfix has configurable relocated_maps responses. Postfix appends relocated_maps responses AT THE END of the bounce delivery status

Re: customized relocated bounces

2010-04-06 Thread Wietse Venema
mailingli...@belfin.ch: mailingli...@belfin.ch: Is there a way to customize the relocated bounce message? Postfix has configurable bounce, delayed, success and trace template text. Postfix has configurable relocated_maps responses ... Talking about bounce templates, Recipient

Re: Am I really using a CIDR map?

2010-04-06 Thread Wietse Venema
Robert Lopez: A postmap -q any-pattern-in-file cidr-ip returns the rest of the matching line correctly. This uses the default database type, which is hash: on most systems. Thus. Postfix opens hash:cidr-ip which results in opening cidr-ip.db. To query a CIDR file, specify cidr:filename, just

Re: Am I really using a CIDR map?

2010-04-06 Thread Wietse Venema
Robert Lopez: Now that you mention the documentation: SYNOPSIS postmap -q string cidr:/etc/postfix/filename postmap -q - cidr:/etc/postfix/filename inputfile DESCRIPTION ... To test lookup tables, use the postmap -q command as described in the SYNOPSIS

Re: Am I really using a CIDR map?

2010-04-06 Thread Wietse Venema
Robert Lopez: On Tue, Apr 6, 2010 at 12:23 PM, Wietse Venema wie...@porcupine.org wrote: Robert Lopez: Now that you mention the documentation: SYNOPSIS ? ? ? ?postmap -q string cidr:/etc/postfix/filename ? ? ? ?postmap -q - cidr:/etc/postfix/filename inputfile DESCRIPTION

Re: Error compiling postfix with SASL

2010-04-06 Thread Wietse Venema
Geoff Sweet: I having a heck of a time compiling 2.6.5 onto my CentOS 5.4 system (x86) with SASL support. I can verify that the libssl and libcrypto libraries are present: $ ls /usr/lib/libssl.so /usr/lib/libssl.so $ ls /usr/lib/libcrypto.so /usr/lib/libcrypto.so so I make my

Re: What does postfix need to be in a dmz zone?

2010-04-06 Thread Wietse Venema
Josh Cason: I have a dmz zone on my network. The postfix sits behind the dmz zone. The public IP address is translated (nat) to the dmz zone. I asked about the proxy interfaces command in the main.cf file. I was told I needed to put in the public ip address for the server. What does this

Re: stopping anonymous smtp login (dovecot)

2008-07-24 Thread Wietse Venema
Wietse Venema: Rich Winkel: Hi, I'm setting up a mail server with dovecot-1.0.13 and postfix-2.5.1 on freebsd 7.0. I'm a newbie to postfix, I almost have it running but have two questions: I'm using dovecot auth-client for sasl authentication. I want it to reject mail from

Re: LD_PRELOAD + Postfix problems

2008-07-27 Thread Wietse Venema
http://www.postfix.org/postconf.5.html#import_environment http://www.postfix.org/postconf.5.html#export_environment Wietse

Re: LD_PRELOAD + Postfix problems

2008-07-27 Thread Wietse Venema
[EMAIL PROTECTED]: Thank you. I try that some days ago but it didn't work. It works only if you understand its limitations. The import_environment feature executes AFTER the run-time linker completes execution. Therefore, import_environment cannot affect the run-time linker performance for the

Re: LD_PRELOAD + Postfix problems

2008-07-27 Thread Wietse Venema
[EMAIL PROTECTED]: [EMAIL PROTECTED]: [EMAIL PROTECTED]: , postfix reload; and postfix stills working as always. Show actual evidence of behavior that does not change, and show actual evidence based on which it should have changed. Wietse It's easy. On my modified

Re: Odd /var/log/messages

2008-07-30 Thread Wietse Venema
Ronald F. Guilmette: I was just perusing the /var/log/messages file on a system I have that's currently running Postfix 2.5.1 and I saw the following messages: Jul 29 19:47:42 roomy postfix/smtpd[72875]: gethostby*.getanswer: asked for ip200.208-100-19.vswitch.static.steadfast.net IN A,

Re: check_client_access with MySQL lookup

2008-07-30 Thread Wietse Venema
If you want to control access with MySQL, try http://www.policy.org/ Wietse

Re: complementary groups for mail_owner

2008-07-31 Thread Wietse Venema
Unfortunately (for you), Postfix currently does not use supplementary groups, anywhere. It's not a quick hack to change this. Wietse

Re: Postfix Pipe Error

2008-08-05 Thread Wietse Venema
Tait Grove: Why would I be getting this error message? I am experiencing message delays with this too. Aug 4 22:46:56 app1 postfix/pipe[54935]: fatal: watchdog timeout Aug 4 22:48:21 app1 postfix/pipe[54454]: fatal: watchdog timeout Aug 4 22:50:22 app1 postfix/pipe[55545]:

Re: log file help

2008-08-05 Thread Wietse Venema
Ebbe Hjorth: Hi, On of my users asked me about, why she got an error sending mail with attachment in squirrelmail, i dont know - but the thing i want to ask you about, is that the reciever got 2 emails, one with no attachments and one with. Postfix cannot remove attachments.

Re: Question about Bounces

2008-08-05 Thread Wietse Venema
Richard Wolterink: Aug 5 18:37:36 vps683 postfix/bounce[15429]: warning: unexpected attribute W from bounce socket (expecting: nrequest) Aug 5 18:37:36 vps683 postfix/bounce[15429]: warning: malformed request In master.cf you have turned on the wakeup timer for the bounce service. See: man

Re: Bounce problem continued

2008-08-05 Thread Wietse Venema
Richard Wolterink: tlsmgrunix - - - 10? 1 tlsmgr flush unix n - - 10? 0 flush Undo these changes. They are detrimental to Postfix performance. Wietse

Re: Bounce problem continued

2008-08-05 Thread Wietse Venema
Richard Wolterink: Wietse Venema schreef: Richard Wolterink: tlsmgrunix - - - 10? 1 tlsmgr flush unix n - - 10? 0 flush Undo these changes. They are detrimental to Postfix performance. Wietse Do I

Re: poor perfomance for multiple-recipient emails

2008-08-05 Thread Wietse Venema
Aaron Bennett: Hello, I'm experiencing very poor performance on receipt of email with large numbers of multiple recipients. One particular listserv for example sends emails to 1600+ users in chunks of 50-60 per message. Users are either local (maildir) or forwarded. We do have three

Re: Postfix anormal DNS lookup ?

2008-08-06 Thread Wietse Venema
Seblu: On Tue, Aug 5, 2008 at 12:56 PM, Wietse Venema [EMAIL PROTECTED] wrote: Seblu: [ Charset ISO-8859-1 unsupported, converting... ] Hello, i use postfix postfix 2.5.1 on an OpenBSD 4.3 and i have a stange behaviour (for me) with DNS lookup in logs. i've a local dns, which

Re: Setting the source port for outgoing email

2008-08-06 Thread Wietse Venema
Graham Leggett: [ Charset ISO-8859-1 unsupported, converting... ] Hi all, I have a machine that is both a postfix mailserver, and a NAT router for a number of machines behind the box. Because traffic from machines behind the box can cause the mailserver's IP to be blacklisted, the

Re: unintended relay

2008-08-06 Thread Wietse Venema
Sahil Tandon: Jason Drage [EMAIL PROTECTED] wrote: Hi All, I'm having trouble locking down relaying and I can't see what I'm doing wrong. I'm trying to configure the server to only send mail iff: 1. Sender is on mynetworks, or 2. Sender is authenticated Everything else should

Re: newbie - postfix filter

2008-08-07 Thread Wietse Venema
Jamie Bohr: I already have a program that works externally from Postfix. It is getting it to work from within Postfix that is the issue. Even the script from http://www.postfix.org/FILTER_README.html#simple_filter does not work. I think there is something I need to set something in

Re: Slow queing of emails

2008-08-08 Thread Wietse Venema
Marcelo Iturbe: I did a test via telnet and after I end data with CRLF.CRLF I get the 250 Ok: queued message around 10 to 20 seconds afterwards. Since you gave zero configuration information, you can try for the following yourself: 1) You have a broken before-queue content filter. 2) Your

<    10   11   12   13   14   15   16   17   18   19   >