Re: address rewriting with pcre?

2009-03-19 Thread Wietse Venema
LuKreme: > On 17-Mar-2009, at 08:52, Victor Duchovni wrote: > > On Tue, Mar 17, 2009 at 10:01:53AM -0400, Charles Marcus wrote: > >> On 3/17/2009 9:43 AM, Erwan David wrote: > >>> You may generate the pcre file with a line > >>> /recipient_([...@_]+)@localdomain/recipient+$...@localdomain > >>>

Re: address rewriting with pcre?

2009-03-19 Thread Wietse Venema
LuKreme: > On 19-Mar-2009, at 04:45, Wietse Venema wrote: > >> $ ls -1 /usr/local/virtual/ | grep "@" | sed 's/^\([...@]*\)@\(.*\)$/ > >> \/ > >> ^\1_\(.*\)@\2$\/ \1+$...@\2/' > >> > >> testu...@example.com => /^testuser_(.

Re: Change failure code for opportunistic TLS

2009-03-19 Thread Wietse Venema
Cory Coager: > If I'm reading the documentation correctly, when using > smtp_tls_policy_maps for specific domains, if no servers are available > the email will be deferred? Is there a way to change this to a > permanent failure? There exists no code to convert a TLS failure into a permanent er

Re: instance= in check_policy_service

2009-03-19 Thread Wietse Venema
Danilo Paffi Monteiro: > Hello, > > my old postfix version (postfix-2.2.8) send the instance that match > with this regexp [a-f0-9]+\.[a-f0-9]+\.[a-f0-9] > > the version(postfix-2.5.5) that I'm using now > [a-f0-9]+\.[a-f0-9]+\.[a-f0-9]+\.[a-f0-9] > > is it possible to change the instance= forma

Re: Performance tuning

2009-03-19 Thread Wietse Venema
Brandon Hilkert: > We send out a pretty volume of emails right now using a combination > of SQL and IIS SMTP. We get rates now of about 5,000/min. We're > looking to not only improve the rates, but incorporate DKIM/Domainkey > signing into the process. The choice has been made to go with > postfix

Re: Performance tuning

2009-03-20 Thread Wietse Venema
Brandon Hilkert: > What's the best way to clearly identify that syslog is the issue? Look in my reply. There is an example. Wietse > - Original Message - > From: "Victor Duchovni" > To: > Sent: Thursday, March 19, 2009 11:12 PM > Subject: Re: Performance tuning > > > > On Th

Re: whitelist from spamhaus

2009-03-20 Thread Wietse Venema
Victor Duchovni: > On Thu, Mar 19, 2009 at 11:58:52PM +0100, mouss wrote: > > > I would suggest separating relay control from other checks. something like > > > > smtpd_relay_restrictions = > > permit_mynetworks > > permit_sasl_authenticated > > This has been proposed before. > > ht

Re: Performance tuning

2009-03-20 Thread Wietse Venema
Brandon Hilkert: > Sorry if this is a stupid question, but how do I go about this. I tried: > > mkdir /ram > mount -t ramfs none /ram > > and when I send a mail, postfix says there's not enough space in the queue. > Should I be doing it a different way? Postfix requires that the amount of space

Re: Performance tuning

2009-03-20 Thread Wietse Venema
Brandon Hilkert: > >> and when I send a mail, postfix says there's not enough space in the > >> queue. > >> Should I be doing it a different way? > > > > Postfix requires that the amount of space is several times larger > > than the message size limit > > > > http://www.postfix.org/postconf.5.html

Re: Performance tuning

2009-03-20 Thread Wietse Venema
Brandon Hilkert: > >> what is best to look out and compare? > > > > When the disk is 100% busy, then it is the bottle neck. Disks can > > be 100% busy jumping around doing very little I/O. > > > > As Noel suggested in earlier email, try running smtp-sink which > > does no disk I/O at all. If thing

Re: Performance tuning

2009-03-21 Thread Wietse Venema
Brandon Hilkert: > I was able to mount it to a tmpfs partition. There was no change in > throughput with my script on a tmpfs vs ext3 drive. That depends entirely on how good the script is. You were talking about sending mail from Exchange though Postfix. Now you are talking about a home-grown

Re: bounce the permanent error messages in queue

2009-03-21 Thread Wietse Venema
Tony Liu: > Any thoughts on how to bounce the following permanent messages immediately >- without being in queue for a long time(for example in queue 5 days)? I can' >-t do it by setting maximal_queue_lifetime and bounce_queue_lifetime for ther >-e any other messages need to be sent again. /etc/po

Re: Isssue with Postfix-mailman-virtual domains

2009-03-22 Thread Wietse Venema
Magnus B?ck: [ Charset ISO-8859-1 unsupported, converting... ] > On Sunday, March 22, 2009 at 21:29 CET, > Stephen Rodgers wrote: > > > Magnus B?ck wrote: > > > > > You can't. Why not just specify a fully-qualified address in the > > > first place? > > > > It is mailman which writes the vir

Re: milter protocol

2009-03-23 Thread Wietse Venema
Danilo Paffi Monteiro: > Hello, > > This question is stupid, I Think. > > I'm trying to understand how milter works, to implement some filters > (develop a milter program) The Milter API documentation is included with Sendmail source code. It describes the over-all architecture and API. It's not

Re: can't relay even for mynetworks

2009-03-23 Thread Wietse Venema
Madeleine Birkemose: > Mar 21 17:25:50 mose postfix/smtpd[14019]: NOQUEUE: reject: RCPT from > ippenutt.fekiworld.dk[87.48.217.3]: 554 5.7.1 : > Relay access denied; from= > to= proto=SMTP helo= ... > mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 87.48.217.3 does not match the mynetwor

Re: Fedora10 RPM build from src fails.

2009-03-23 Thread Wietse Venema
Melvyn Sopacua: > > $manpage_directory/man1/postmap.1:f:root:-:644 > > $manpage_directory/man1/postqueue.1:f:root:-:644 > > $manpage_directory/man1/postsuper.1:f:root:-:644 > > + $manpage_directory/man1/sendmail.postfix.1:f:root:-:644 > > $manpage_directory/man5/access.5:f:root:-:644 > > +

Re: Mail drop

2009-03-23 Thread Wietse Venema
Brandon Hilkert: > From: "Victor Duchovni" > To: > Sent: Monday, March 23, 2009 1:12 PM > Subject: Re: Mail drop > > > > On Mon, Mar 23, 2009 at 01:09:12PM -0400, Brandon Hilkert wrote: > > > >> Does postfix have the ability to send out emails placed in a specific > >> folder through the file s

Re: Mail drop

2009-03-23 Thread Wietse Venema
Brandon Hilkert: > I"m not disputing this fact. I used smtp-source with 10 connections. > > Without DKIM signing - 14,634 emails/min > With DKIM signing - 4,762 emails/min > > I think we would both agree that that's a large discrepancy. Yes. > I'm using DKIM-milter. During the testing, the CPU

Re: Mail drop

2009-03-23 Thread Wietse Venema
Victor Duchovni: > and may be causing high disk latency. You have to tune the milter > configuration There is no need for dkim-milter to touch the disk. It receives header and body content from Postfix via the Milter protocol. I know this, because I implemented the Postfix side of the protocol.

Re: Mail drop

2009-03-23 Thread Wietse Venema
Brandon Hilkert: [ Charset ISO-8859-1 unsupported, converting... ] > > - Original Message - > From: "Wietse Venema" > To: "Postfix users" > Sent: Monday, March 23, 2009 5:39 PM > Subject: Re: Mail drop > > > > Brandon Hilkert: > &g

Re: Special Characters in Address

2009-03-23 Thread Wietse Venema
Aaron Wolfe: > > 20090320 22:42:56 38242?? 49A2055900086768 SMTP RCPT TO > > got reply '501 5.1.3 Bad recipient address > > syntax' The above logging is from the system that is sending mail into Postfix. To find out what commands the client sends you need to turn on logging (debug_peer_l

Re: Special Characters in Address

2009-03-23 Thread Wietse Venema
Mischa Gresser: > Mar 20 10:13:32 hostname postfix/smtpd[31210]: warning: Illegal address > syntax from qw-out-2122.google.com[74.125.92.26] in RCPT command: 1231231...@xxx.ca <4034767...@crebifax.ca>> The RCPT command syntax is: RCPT TO:<4034767...@crebifax.ca> Not: RCPT TO:> The aut

Re: Mail drop

2009-03-23 Thread Wietse Venema
Victor Duchovni: > On Mon, Mar 23, 2009 at 07:24:50PM -0400, Wietse Venema wrote: > > > Victor Duchovni: > > > and may be causing high disk latency. You have to tune the milter > > > configuration > > > > There is no need for dkim-milter to touch

Re: What makes a postfix server behave this way?

2009-03-24 Thread Wietse Venema
suomi: > Problem is: > last friday, a person complained that no messages had been sent from an > application which sends the same message to about 40 mail-recipients > including to this person himself. Messages are sent via > php-pear-Mail-Mime, which sofar has worked correctly in all cases: >

Re: VERPify recommendations

2009-03-25 Thread Wietse Venema
Steve Crawford: > I haven't had much time to experiment with re-injection but my > experiments thus far have failed. Any pointers on how this would be > done? See: http://www.postfix.org/FILTER_README.html in particular the section that shows how to inject mail with the Postfix sendmail command

Re: Upgrade questions.

2009-03-25 Thread Wietse Venema
c...@digital-journal.com: > Hello, > I'm considering upgrading Postfix on a Centos box from version > postfix-2.3.3-2.1.el5_2 to a rpm compiled for another Centos box > postfix-2.5.6-1.sasl2.rhel5. > > The older version was installed as a part of the Virtualmin add-on package > and uses Procmail

Re: Piping /etc/aliases to newaliases

2009-03-25 Thread Wietse Venema
Bryce Nesbitt: > Dear Postfix Experts, > > Is there a way to get a pipe going to newaliases / sendmail -I / postalias? All the supported features are in the DOCUMENTATION. Wietse > I felt a strong need to have end of line comment characters in > /etc/aliases ;-). So my first shot at t

Re: my mailserver has been blacklisted

2009-03-26 Thread Wietse Venema
Ivan Ricotti: > Regarding my log, here some suspicious snippets: > > > Mar 26 13:14:08 athene postfix/smtpd[690]: connect from > spike.porcupine.org[168.100.189.2] > Mar 26 13:14:09 athene postfix/smtpd[690]: 528B8E72ED: > client=spike.porcupine.org[168.100.189.2] > Mar 26 13:14:09 athene postfix

Re: Automatic add of CC?

2009-03-26 Thread Wietse Venema
Michael Maciag: > Is it possible to automatically add a CC to an incoming message > based on recipient using rewriting, similar to what recipient_bcc_maps > can do? We'd like to have the added address be visible to the > original recipient. Yes. For complex transformations, use a Milter or extern

Re: Postfix denies relays when sending from Eudora

2009-03-26 Thread Wietse Venema
Asai: > Although I dislike Eudora for various reasons, my users want it. So now > I'm trying to figure out why one user can send to our local domains, but > cannot relay to Gmail. This is not a problem on a client like > Thunderbird. Any insights? Thanks. See the mailing list welcome messag

Re: Clustering

2009-03-26 Thread Wietse Venema
carconni: > Hi, > > I've been digging around and I haven't been able to find what I'm > really looking for so I thought I'd go straight to the ones "who know". > > Can Postfix be run in a clustered environment (ie: multiple servers > running postfix utilizing one data store) under any OS? Ea

Re: Clustering

2009-03-27 Thread Wietse Venema
Jose Perez: > Hi: > > On Thu, Mar 26, 2009 at 6:05 PM, Wietse Venema wrote: > > carconni: > >> Hi, > >> > >> I've been digging around and I haven't been able to find what I'm > >> really looking for so I thought I'd go strai

Re: Clustering

2009-03-27 Thread Wietse Venema
Wietse Venema: > Jose Perez: > > Hi: > > > > On Thu, Mar 26, 2009 at 6:05 PM, Wietse Venema wrote: > > > carconni: > > >> Hi, > > >> > > >> I've been digging around and I haven't been able to find what I&#x

Re: What to do with bounces from aliased addresses

2009-03-28 Thread Wietse Venema
fl...@pbartels.info: > Hello, > > I'm not sure what I should do with bounce messages from aliased addresses. > > If X is the sender of a message to A what is an alias for B and my MTA > can't deliver the message to B for some reason, my MTA creates a > bounce messages and sends it to X. > >

Re: check_policy_service does not work as expected: protocol_state=RCPT, even under smtpd_client_restrictions

2009-03-28 Thread Wietse Venema
mig: > Hello, > > I wrote a policy server (that do RBL checks and dynamically disable slow RBL > servers). I supposed the right place is the smptd_client_restrictions: > > smtpd_client_restrictions = > check_policy_service unix:/opt/mailfilter/client_restrictions > smtpd_helo_required = yes

Re: check_policy_service does not work as expected: protocol_state=RCPT, even under smtpd_client_restrictions

2009-03-28 Thread Wietse Venema
mig: [ Charset ISO-8859-1 unsupported, converting... ] > Thanks for reply, > > But I'm still a bit confused about the SMTPD_ACCESS_README.html: > > "Restriction lists are still evaluated in the proper order of (client, helo, > etrn) or (client, helo, sender, recipient, data, or end-of-data) >

Re: rewrite a sender-adresss in dependence of the recipient adress

2009-03-29 Thread Wietse Venema
> karfunckel-post...@yahoo.de: > is there a way to rewrite a sender address in dependence of > the recipient? > > Example: > sender + recipient = new sender address > -- > j...@example.net + j...@example.net = robotforj...@example.net > j...@example.net

Re: Changing virtual mailbox for large messages

2009-03-29 Thread Wietse Venema
Brian Schang: > In a nutshell, I have a number of virtual_mailbox_domains and > virtual_mailbox_maps and everything is working perfectly. Now for a > given virtual user, I'd like to change the virtual mailbox being used if > the message is over a given size. This is not built into Postfix. It c

Re: Mail not delivered to local users: status=deferred (mail transport unavailable)

2009-03-29 Thread Wietse Venema
Tobi: > Hi All, > I set up an after-queue content filter following the instructions on > http://www.postfix.org/FILTER_README.html . > Everything works fine except that mail directed to local users is > deferred when it is re-injected to postfix after the content filter. > However, virtual and remo

Re: selective milter possible?

2009-03-30 Thread Wietse Venema
Rudy Gevaert: > Hello, > > I was looking for a way to do selective milter. Meaning if a specific > host connects I send it trough the milter. > > I couldn't find it however. Is it possible? You didn't find it because it is not implemented. Wietse > Thanks in advance, > > -- > --

Re: Postfix spool message format description

2009-03-30 Thread Wietse Venema
karfunckel-post...@yahoo.de: > > Hi, > is there anywhere a format description for the queued-mails? You can access Postfix's email data via official interfaces: smtp, pipe-to-command, milter, /usr/sbin/sendmail submission. Wietse

Re: Piping /etc/aliases to newaliases

2009-03-31 Thread Wietse Venema
Bryce Nesbitt: > Here is try two at the end of line comment script for /etc/aliases. Can > anyone do this more elegantly? > > #!/bin/sh > # Created so we can have end of line comments in /etc/aliases > sed 's/#.*$//;/^$/d' < /etc/aliases > /tmp/aliases_tmp ; > /usr/sbin/sendmail -bi -oA/tmp/alias

Re: Multiple action on one rule in header_check pcre

2009-04-01 Thread Wietse Venema
Lars Johansen: > Hi, > > I have the following rules in header check > > /^Subject: \*\*\*SPAM\*\*\*(.*)$/PREPEND X-Spam-Flag: YES > /^Subject: \*\*\*SPAM\*\*\*(.*)$/REPLACE Subject: ${1} > > > The problem is that only the first rule are run, are there some way to > run multiple action o

Re: Postfix address rewriting

2009-04-01 Thread Wietse Venema
To rewrite a null envelope address you will need to use an SMTP proxy (see FILTER_README for resources). Postfix does not query lookup tables with null strings because some tables return errors. Wietse

Re: SMTP AUTH

2009-04-02 Thread Wietse Venema
punit jain: > Hi > > I have a requirement where i need to use SMTP AUTH for specific IP addresses > only. As far as i read its applicable for server as a whole. Any ideas ? To send mail? To receive mail?

Re: Expected behaviour for rbl's when DNS is slow.

2009-04-02 Thread Wietse Venema
Guy: > Hi guys, > > I had a problem earlier today when our local DNS server's forwarding > servers were slow to respond. > > I had a number of emails from various sources rejected as blocked by > zen.spamhaus.org. The IPs I checked weren't on the list according to > the spamhaus website. > I did

Re: Expected behaviour for rbl's when DNS is slow.

2009-04-02 Thread Wietse Venema
Wietse Venema: > Guy: > > Hi guys, > > > > I had a problem earlier today when our local DNS server's forwarding > > servers were slow to respond. > > > > I had a number of emails from various sources rejected as blocked by > > zen.spamhaus.org.

Re: Expected behaviour for rbl's when DNS is slow.

2009-04-02 Thread Wietse Venema
Noel Jones: > Guy wrote: > > Hi guys, > > > > I had a problem earlier today when our local DNS server's forwarding > > servers were slow to respond. > > > > I had a number of emails from various sources rejected as blocked by > > zen.spamhaus.org. The IPs I checked weren't on the list according t

Re: Losing bounce mails

2009-04-02 Thread Wietse Venema
Olaf Hering: > > Hello, > > can someone explain what happend to the bounce mails? > > post.strato.de requires authentication. > Due to a mistake on my side, I forgot to update the local postfix > configuration after a change to the server auth data. > > Does postfix silently drop a mail thats n

Re: Rejecting mail sent specific user extensions

2009-04-03 Thread Wietse Venema
Humopat: > I want this extension, and only this extension, to bounce at the "rcpt to" > step. > > Of course I could use something like "smtpd_recipient_restrictions = > check_recipient_access (...)" Which makes sense, considering that this is an ACCESS table. > but I came to think it would be ea

Re: Rejecting mail sent specific user extensions

2009-04-03 Thread Wietse Venema
/etc/postfix/transport: humopat+...@mydomain.com error:5.1.1 user unknown /etc/postfix/main.cf: transport_maps = hash:/etc/postfix/transport Wietse

Re: Change FROM in LOGS when e-mails come from APACHE

2009-04-03 Thread Wietse Venema
Claudio Frydlewsky: > Hi, > > I have a web server running APACHE + PHP + POSTFIX with Virtual Servers. > > I need to be able to see where the e-mails come from inside the logs. > > The problem is that when i look into the postix logs i see this: > > Apr 2 17:58:14 server1 postfix/pickup[14329]: 45

Re: Change FROM in LOGS when e-mails come from APACHE

2009-04-03 Thread Wietse Venema
Wietse Venema: > Claudio Frydlewsky: > > Hi, > > > > I have a web server running APACHE + PHP + POSTFIX with Virtual Servers. > > > > I need to be able to see where the e-mails come from inside the logs. > > > > The problem is that when i look into the

Re: not receiveing bounce backs when using postfix

2009-04-03 Thread Wietse Venema
nr...@firstfinancial.org: > Any suggestions? I don't know where else to look. I suspect that I > configured postfix to be non-compliant to an RFC, but not sure what is the > offending configuration. Postfix logs all failed and successful deliveries to a logfile. The file is usually called /var/lo

Re: not receiveing bounce backs when using postfix

2009-04-04 Thread Wietse Venema
nr...@firstfinancial.org: > Thanks for the fast reply. > > I fixed the logging issue. > > >From the /var/log/maillog > > Apr 3 23:32:11 mail postfix/smtp[6451]: 96B0EB8: to=, > relay=b.mx.mail.yahoo.com[66.196.97.250]:25, delay=0.38, > delays=0.28/0.01/0.05/0.04, dsn=5.0.0, status=bounced (host

Re: not receiveing bounce backs when using postfix

2009-04-04 Thread Wietse Venema
nr...@firstfinancial.org: > Here is the output. > > # grep 2ACDFBA /var/log/maillog > Apr 3 23:32:11 triton postfix/cleanup[7281]: 2ACDFBA: > message-id=<20090404033211.2acd...@mail.firstfinancial.org> > Apr 3 23:32:11 triton postfix/bounce[31334]: 96B0EB8: sender non-delivery > notification: 2A

Re: postfix log format

2009-04-07 Thread Wietse Venema
jittinan suwanrueangsri: > Hi everybody > > Are there any postfix log format documents so I can understand meaning of > each column in raw log ? Postfix logging is not yet documented - it is one of those ancient pieces of version "zero" code that was meant to be replaced by real code that is prop

Re: get queue_id in policy-service

2009-04-07 Thread Wietse Venema
Andre H?bner: > Hello, > > i try some programming of policy-service for postfix which is part of my > smtpd_recipient_restrictions > http://www.postfix.org/SMTPD_POLICY_README.html > postfix is delivering all needed data, but to log complete sequence of > mailprocess i would need queue_id for la

Re: LMTP bounce handling problem

2009-04-07 Thread Wietse Venema
Victor Duchovni: > So it looks like the "inet:" default went away when LMTP was merged with > SMTP in 2.3. The code attempts to be backwards compatible: /* * With LMTP we have direct-to-host delivery only. The destination may * have multiple IP addresses. */ if (state->misc

Re: Smtpd timeout

2009-04-08 Thread Wietse Venema
Danilo Paffi Monteiro: > I think that the question is about the total connection lifetime. > > Is there any way to limit the connection lifetime? No. This would prevent delivery of large messages over slow connections. However, Postfix 2.5 has an option to change SMTP server timeouts when all se

Re: insert newline with header checks

2009-04-08 Thread Wietse Venema
Noel Jones: > Artem Bokhan wrote: > > Noel Jones ?: > >> Artem Bokhan wrote: > >>> How can I insert newline with header checks? > >>> > >>> smth like /(.*)example(.*)/ REPLACE $1\n $2 > >> > >> You can't. The REPLACE action does not support multi-line headers. > >> > >> -- Noel Jones > > I

Re: Is there a character limit for an address field?

2009-04-08 Thread Wietse Venema
Walt Park: > Greetings, > > I have some develpers that want to do.. strange things with the to, from, > and/or reply_to fields for routing. They are concerned that there may be a > limit to the string length they can use either before or after the @ in the > address in the to: from:, and reply_to:

Re: Maildir mail not delivered to $home_mailbox

2009-04-08 Thread Wietse Venema
Postfix logs all delivery attempts. The name of the file is usually in /etc/syslog.conf. Wietse

Re: Per domain sender_access ?

2009-04-09 Thread Wietse Venema
Curtis: [ Charset ISO-8859-1 unsupported, converting... ] > I guess this has been discussed a time or two already, but, as of yet, > I haven't found anyone that has found a real solution. ?We need the > ability to have around 1000 domains per physical server, while > allowing each domain to maintai

Re: changed relay host from empty to $mydomain, where to look for effects after change

2009-04-09 Thread Wietse Venema
Zhengquan Zhang: > Dear postfix community, > > I use postfix personally on my computer to send emails, also two mail > servers I am in charge of are running postfix. > > Now I have a basic question about my personal computer postfix > configuration that I don't have a answer for: > > I followed

Re: Per domain sender_access ?

2009-04-09 Thread Wietse Venema
Curtis: > http://www.postfix.org/SMTPD_POLICY_README.html#protocol ) it says > 'The "recipient" attribute is available only ... when Postfix accepted > only one recipient for the current message.' That text is about the DATA protocol stage. You get each recipient at the RCPT TO protocol stage.

Re: Tracing

2009-04-09 Thread Wietse Venema
Uwe Dippel: > (I know this is a bit off postfix, but not completely) > > I'm running postfix as MTA on a machine with several CMS. Recently, > there is a huge number of spam being sent from there, alas. When I scan > the logs, all those come from 'root', meaning they don't come through > port 2

Re: Tracing

2009-04-09 Thread Wietse Venema
Wietse Venema: > Uwe Dippel: > > (I know this is a bit off postfix, but not completely) > > > > I'm running postfix as MTA on a machine with several CMS. Recently, > > there is a huge number of spam being sent from there, alas. When I scan > > the logs, al

Re: reject_unverified_recipient check is somewhat slow for local mail

2009-04-10 Thread Wietse Venema
Halassy Zolt??n: > So my conclusion is: The slow point could be the > reject_unverified_recipient check, which causes a verify lookup, which > makes an LMTP lookup, so it's either Cyrus problem, or might be > something before that. Postfix logs delays in fine detail including the delays of address

Re: reject_unverified_recipient check is somewhat slow for local mail

2009-04-10 Thread Wietse Venema
Halassy Zolt??n: > > Postfix logs delays in fine detail including the delays of address > > probe messages: time in incoming/deferred queue, time in active > > queue, time to complete DNS lookup and TCP/SMTP/LMTP handshake, > > time to transmit message. > > Apr 10 13:02:15 mail postfix/smtpd[24851

Re: reject_unverified_recipient check is somewhat slow for local mail

2009-04-10 Thread Wietse Venema
Halassy Zolt??n: > > 15 seconds? Postfix out-of-the-box waits no more than 9 seconds > > for the very probe to succeed. Perhaps you have been changing > > Postfix parameters. Please follow instructions as requested in > > the mailing list welcome message. > > Sorry, my bad, I had the address_veri

Re: Relay requirements

2009-04-10 Thread Wietse Venema
punit jain: > Hi , > > My organisation is primarily a domino setup but we are now moving to > postfix. Postfix is the edge server with a valid MX now. I accept mail for > my domain xxx.com. I am presently in process of moving all the users to > postfix slowly with time. Do we have any setting in p

Re: reverse lookups

2009-04-10 Thread Wietse Venema
ghe: > I'm getting log entries like this: > > > Apr 2 12:55:53 ralph postfix/smtpd[15788]: 779DFC6D76: > > client=unknown[99.29.103.142], sasl_method=LOGIN, sasl_username=joelqw > > This is one of my users' Blackberry. Notice that Postfix (or maybe it's > Dovecot, in the sasl verification) is s

Re: reverse lookups

2009-04-10 Thread Wietse Venema
ghe: > Wietse Venema wrote: > > >>> # host 99.29.103.142 > >>> 142.103.29.99.in-addr.arpa domain name pointer > >>> adsl-99-29-103-142.dsl.hstntx.sbcglobal.net. > >> As far as I know, this is the only Blackberry using this mail server. >

Re: alias with no primary domain

2009-04-11 Thread Wietse Venema
M.A. GEERTSMA: > I configured my server with no/fake (primary) domain. So I only > serve 4 virtual domains.But then the /etc/alias file is of no use > for these domains. /etc/aliases is used ONLY by the local(8) delivery agent. This is normally given ONLY domains listed in $mydestination. All thi

Re: mail transport unavailable

2009-04-11 Thread Wietse Venema
http://www.postfix.org/DEBUG_README.html#logging Look for obvious signs of trouble = Postfix logs all failed and successful deliveries to a logfile. The file is usually called /var/log/maillog or /var/log/mail; the exact pathname is defined in the /etc/syslog.conf

Re: Limits for cidr files

2009-04-13 Thread Wietse Venema
Terry Carmen: > Does anybody know what practical limits are for cidr files? Postfix CIDR patterns are executed in the specified order. Therefore the run-time processing time is linear in the number of rules. Each process also spends some time compiling the patterns during initialization. Don't

Re: Postfix telnet authentication

2009-04-13 Thread Wietse Venema
Antonis Rizopoulos: > When I connect to my server, from different networks, to port 25 I am > able to send emails to local users only without authenticate! It's like > bypassing Cyrus-SASL. > I know, of course, that I cannot block access to that port and allow > only authenticated users to send ema

Re: Understanding Internet inbound author ldap query behavior

2009-04-13 Thread Wietse Venema
Charles Account: > On mail received from the Internet, I'm seeing the following query:Apr 7 >-10:05:07 example postfix/trivial-rewrite[18098]: dict_ldap_lookup: /opt/zimb >-ra/conf/ldap-transport.cf: Searching with filter (&(|(zimbraMailDeliveryAddr >-ess=\2A)(zimbraDomainName=\2A))(zimbraMailSta

Re: qmgr core dumps for "non-zero recipient count"

2009-04-13 Thread Wietse Venema
r...@yingshen.org: > Hi there, > > Recently I saw some dumped core files from the qmgr process. According > to the backtrace log, it was qmgr_job_free() complaining about a > "non-zero recipient count" error. > > My question are what are the possible reasons that caused this? Is > this some

Re: qmgr core dumps for "non-zero recipient count"

2009-04-13 Thread Wietse Venema
Victor Duchovni: > On Mon, Apr 13, 2009 at 05:04:33PM -0400, Wietse Venema wrote: > > > r...@yingshen.org: > > > Hi there, > > > > > > Recently I saw some dumped core files from the qmgr process. According > > > to the backtrace log, it was qmgr_

Re: virtual alias problem

2009-04-14 Thread Wietse Venema
Why don't you simply restore the Postfix configuration from backups, and execute "postfix upgrade-configuration" to upgrade to the newer Postfix? A great deal of effort is put into keeping features compatible, so that people like you don't have to play detective after an upgrade. Let the system w

Re: qmgr core dumps for "non-zero recipient count"

2009-04-14 Thread Wietse Venema
I noticed this perhaps unrelated problem in the log: Apr 14 14:00:51 mailscan postfix/smtp[73427]: fatal: shared lock active/29E97222038E_9DE187AF: Resource temporarily unavailable Let's ignore the non-Postfix queue filename for a moment. The above error message means that the queue manager has

Re: virtual alias problem

2009-04-14 Thread Wietse Venema
Miles Fidelman: > Wietse, > > So... other than my mistake in not running postfix upgrade-configuration > (which, when I run it now, seems to do nothing) - any thoughts on why a > virtual address resolves just fine when received from outside, but not > when submitted by a program invoking /usr/b

Re: What became of the "duplicate elimination attempt" (global dupfilter)

2009-04-15 Thread Wietse Venema
Ralf Hildebrandt: > The subject says it all: What became of the global dupfilter? None of the designs sofar has met Postfix quality standards. Wietse

Postfix 2.6.0 stable release candidate

2009-04-16 Thread Wietse Venema
Last night I have uploaded postfix-2.6.0-RC1, the first Postfix 2.6 stable release candidate. The documentation still needs some work, and depending on time I may still be able to slip in some small amount of new code. The biggest changes since Postfix 2.5 are: - Automatic stress-dependent behavio

Re: meaning of connect immediately followed by disconnect in mail log

2009-04-16 Thread Wietse Venema
Victor Duchovni: > On Thu, Apr 16, 2009 at 10:27:33AM -0400, Kevin Murphy wrote: > > > postfix 2.1.5 (Mac OS X 10.4.11, Tiger), logging set to debug level: > > > > Out of curiosity, what do empty connect/disconnect pairs in the mail log > > mean? I.e.: > > > > Mar 19 09:50:19 jupiter postfix/smt

Re: Disabling LDAP lookups

2009-04-16 Thread Wietse Venema
Darek M.: > Hi there, my postfix "smart relay" install queries my LDAP system where > it was never configured to do so. > > The OS is configured with LDAP/KRB5 authentication and does user/group > lookups via LDAP using nss_ldap: > > # egrep 'passwd|group' /etc/nsswitch.conf > group: files ld

Re: Cluster of postfix

2009-04-16 Thread Wietse Venema
Juan Antonio Cuesta: > Hello, > > i have two postfix servers, and when i have to do any change in > virtual file or in aliases file i must to do the same change in the 2 > servers. > > Can someone say me how can i do my job more confortable and only do one time. Instead of a local file, use LDAP

Re: Sending SSL/TLS state to Dovecot auth

2009-04-16 Thread Wietse Venema
Postfix 2.6 will pass the "TLS is active flag". I have changed the API so that we no longer need to make code changes in every SASL plugin when another attribute is added. Wietse On Mon, Feb 23, 2009 at 02:18:01PM -0500, Timo Sirainen wrote: > In some setups it's useful for authentication

Re: Cluster of postfix

2009-04-17 Thread Wietse Venema
Wietse Venema: > Melvyn Sopacua: > > On Friday 17 April 2009 01:23:20 Wietse Venema wrote: > > > Juan Antonio Cuesta: > > > > Hello, > > > > > > > > i have two postfix servers, and when i have to do any change in > > > > vir

Re: Transport map lookup failures are fatal?

2009-04-17 Thread Wietse Venema
Seth Mattinen: > "Host or domain name not found. Name service error for > name=mail.x.net type=A: Host found but no data record of requested type" The DNS server reported that the destination has no MX record (RFC 5321 requires MX before A lookups) and that the destination has no A record. W

Re: Cluster of postfix

2009-04-17 Thread Wietse Venema
Melvyn Sopacua: > On Friday 17 April 2009 01:23:20 Wietse Venema wrote: > > Juan Antonio Cuesta: > > > Hello, > > > > > > i have two postfix servers, and when i have to do any change in > > > virtual file or in aliases file i must to do the same c

Re: Plus Addressing

2009-04-17 Thread Wietse Venema
Victor Duchovni: > On Fri, Apr 17, 2009 at 10:11:36AM -0400, Brian Evans - Postfix List wrote: > > > > Thanks for the information. The problem I have with that is all of my > > > users are local system users. I don't think I can use > > > mailbox_transport with local users only virtual users. I

Re: Configurable replies for hardcoded REJECTS?

2009-04-17 Thread Wietse Venema
Patrick Ben Koetter: > Wietse, > > a customer asked me to help them customize Postfix replies, so clients > (better: users) can get a hint why their message is being rejected. > > The idea is to refer to an URL in the reply where (generic) verbose > explanations on the reject reason can be found.

Re: Plus Addressing

2009-04-17 Thread Wietse Venema
Victor Duchovni: > On Fri, Apr 17, 2009 at 11:13:59AM -0400, Wietse Venema wrote: > > > Victor Duchovni: > > > On Fri, Apr 17, 2009 at 10:11:36AM -0400, Brian Evans - Postfix List > > > wrote: > > > > > > > > Thanks for the information. The

Re: GNU mailutils maidag with postfix

2009-04-17 Thread Wietse Venema
i...@comtek.co.uk: > I am also wondering if there is an unreasonable overhead involved. > pipe will have to spawn maidag for each Maildir; is this reasonable? Postfix reuses a proces for multiple deliveries. You can also reuse non-Postfix delivery processes with systems that use the LMTP protocol

Re: SMTP auth for outbound

2009-04-20 Thread Wietse Venema
Markus Sch??nhaber: > Michael: > > > Can postfix be set to SMTP auth for outbound mail to specified SMTP servers? > > http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps http://www.postfix.org/SASL_README.html#client_sasl (titled: Enabling SASL authentication in the Postfix SMTP client)

Re: Multiple transport for one domain

2009-04-20 Thread Wietse Venema
Kalpin Erlangga Silaen: > Dear Ram, > > On Mon, Apr 20, 2009 at 3:23 PM, Ramprasad wrote: > > Kalpin Erlangga Silaen wrote: > >> > >> Dear All, > >> > >> is it possible to deliver all emails from a certain domain to 2 or 3 > >> server ? > >> > >> eg. > >> server 1 with ip 10.100.200.2 accept doma

Re: Postfix sometimes say's "Missing MXA record"

2009-04-20 Thread Wietse Venema
Kai Szymanski: > Hi! > > After moving our mailserver to another machine (with updated debian) our > postfix sometimes say's: ... > > : host mail.ourhost.bar[a.b.c.d] said: 554 5.7.7 > > Missing MXA record . (in reply to end of DATA command) That is NOT POSTFIX. Wieste

<    1   2   3   4   5   6   7   8   9   10   >