Re: How to stop postfix sending emails

2009-11-11 Thread Wietse Venema
Lists: Hi All, We are doing an upgrade on the machine that holds the postboxes (mailenable) during the upgrade the server will need to be rebooted which renders the boxes unreachable. This causes a 550 error to be sent back to our spam catching server (running MailScanner spamassassin

Re: How to stop postfix sending emails

2009-11-11 Thread Wietse Venema
Lists: Wietse Venema wrote: Lists: Hi All, We are doing an upgrade on the machine that holds the postboxes (mailenable) during the upgrade the server will need to be rebooted which renders the boxes unreachable. This causes a 550 error to be sent back to our spam catching

Re: ??: ????: ????: who know how does initial_destination_concurrency and default_destination_concurrency_limit work?

2009-11-12 Thread Wietse Venema
Dhiraj Chatpar: Hi Sir, If i am selecting this option smtp_destination_rate_delay = 1s Will this reduce delivery to all domains or just one specific domain. Will the actual throughput to the final delivery be reduced to one email per second from my binded IP?.. Please confirm as that is

Re: Betr.: Re: Betr.: Re: Trim part of the header with header rewriting ?

2009-11-12 Thread Wietse Venema
Noel Jones: On 11/12/2009 12:28 PM, Arjan Melein wrote: Yea I just found that out when I just tried to sed the queue file :-) Any way to limit it to only take out the line on domain X Y and Z ? On a sidenote, its actually the RCPT TO: line and not the normal TO: line ... not sure if

Re: Experience with the new speed_adjust feature

2009-11-13 Thread Wietse Venema
Mark Martinec: For the last couple of days I'm now experimenting with the 2.7-20091105-nonprod with the new speed_adjust experimental feature turned on at the MX port, along with the postscreen. Seems to work as advertised: timing reports by a pre-queue proxy content filter confirm that the

Re: status during email life ...

2009-11-13 Thread Wietse Venema
St??phane MERLE: Hi, Wietse Venema a ?crit : St?phane MERLE: I just saw that those mail are sent to n...@localhost : 8652C2E741C6: to=n...@localhost, orig_to=john@distdomain.com, relay=local, delay=0.02, delays=0.01/0/0/0.01, dsn=5.1.1, status=bounced (unknown user: null

Re: status during email life ...

2009-11-13 Thread Wietse Venema
St?phane MERLE: Wietse Venema a ?crit : Sorry, that is NOT a good reason to throw away rejected mail. When non-spam mail is rejected, the sender needs to know. It is up to the sender to deal with this, not the MTA operator. When people are sending real spam to hotmail, then silencing

Re: Experience with the new speed_adjust feature

2009-11-13 Thread Wietse Venema
Thanks for the logging. If you have time, can you change the code to print information about the non-zero size? This could be a filesystem feature where ftruncate() does not reset st_size until the file is rewritten or closed (in which case my attempt to force easly release of disk blocks are in

Re: Experience with the new speed_adjust feature

2009-11-13 Thread Wietse Venema
Mark Martinec: On Friday 13 November 2009 18:52:03 Wietse Venema wrote: Thanks for the logging. If you have time, can you change the code to print information about the non-zero size? This could be a filesystem feature where ftruncate() does not reset st_size until the file is rewritten

Re: Bug

2009-11-13 Thread Wietse Venema
Dhiraj Chatpar: Dear Sir, I have noticed a bug in the 2.6 version of postfix where it says that cannot find /postmulti folder. Wondering if this is a bug or a installation error on my part. This error happens when i start postfix on centos. Wasn't this fixed recently? Wietse

Re: Bug

2009-11-13 Thread Wietse Venema
Dhiraj Chatpar: Sir, I just did a fresh installation yesterday. and fresh complied the new version of postfix 2.6 on a centos machine and i got this error. I dont know why it came. but it did. This was fixed 20091026, and will be part of Postfix 2.6.6. Wietse

Re: Experience with the new speed_adjust feature

2009-11-13 Thread Wietse Venema
Wietse Venema: Mark Martinec: On Friday 13 November 2009 18:52:03 Wietse Venema wrote: Thanks for the logging. If you have time, can you change the code to print information about the non-zero size? This could be a filesystem feature where ftruncate() does not reset st_size until

Re: FreeBSD-related patch for src/util/sys_defs.h

2009-11-14 Thread Wietse Venema
Sahil Tandon: +#if (__FreeBSD_version = 702104 __FreeBSD_version = 80) \ + || __FreeBSD_version = 800100 It was initially reported to me as available with __FreeBSD_version = 800098. The above suggests that the feature does not exist with 80 __FreeBSD_version 800100. That

Re: FreeBSD-related patch for src/util/sys_defs.h

2009-11-14 Thread Wietse Venema
Please do not top-post. See wikipedia for background information. Egoitz Aurrekoetxea Aurre: Hi, Wietse, what do you want to say with this? any problem for running some postfix release on freebsd? Perhaps I have not received the previous mail... El 14/11/2009, a las 14:17, Wietse

Re: Problem with recipient verification

2009-11-15 Thread Wietse Venema
Jeremy Bowen: I have a prolem with the new domain I added to the server and it is this new domain which is doing verification probes to my ISP. So, you need to add that domain to mydestination= parameter? It's added to my vdomains file as per: virtual_mailbox_domains =

Re: Problem with recipient verification

2009-11-15 Thread Wietse Venema
Jeremy Bowen: What is the logic behind where the verification probe is sent ? 4 out of 5 domains (all configured identically as far as I can tell) operate correctly and the probe seems to be handled locally. The other domain passes the verification probe to my upstream (relayhost). You

Re: Log per domain

2009-11-16 Thread Wietse Venema
Magnus B?ck: On Mon, November 16, 2009 10:58 am, Jaroslaw Grzabel said: Is there any way to configure postfix to create separate log file for every domain it keeps ? No. Postfix needs to start logging before it even knows to which domain a log message pertains. Besides, one message may

Re: increase queue lifetime

2009-11-16 Thread Wietse Venema
Kammen van, Marco, Springer SBM NL: Hi All, Because of a crashed exchange server we need to queue messages longer on our smarthost then usual. I want to increase the time messages are queued to at least 2 weeks... Is changing the 'maximal_queue_lifetime' in main.cf sufficient to

Re: Backscatter being generated from mail aliased to other servers.

2009-11-16 Thread Wietse Venema
Jim Lang: OK here is the scenario. Spammer sends mail to: u...@myclientsdomain.com from forged address vic...@randomdomain.com If u...@myclientsdomain.com is delivered locally, not a problem, if the address is invalid, postix rejects the mail during the smtp connection. But if

Re: ERROR in tcp protocol

2009-11-16 Thread Wietse Venema
Dhiraj Chatpar: HI, I am getting this error when i am trying to connect my postfix via transport_maps = tcp:localhost:2525 Nov 16 13:48:34 mail postfix/trivial-rewrite[4403]: fatal: unsupported dictionary type: tcp Use postconf -m to see what types of map are supported. Wietse

Re: Backscatter being generated from mail aliased to other servers.

2009-11-16 Thread Wietse Venema
Jim Lang: But if mycli...@otherserver.com can for whatever reason not be delivered, otherserver.com does what it is supposed to do and rejects the mail during the smtp connection, which causes postfix to send out a non-delivery report to vic...@randomdomain.com -- backscatter. Is

Re: Backscatter being generated from mail aliased to other servers.

2009-11-16 Thread Wietse Venema
Miles Fidelman: Wietse Venema wrote: Recipient verification does not expand a local alias (imagine what would have to be done to verify with addresses in .forward files, or in a mail distribution list). Maybe I'm dense, but what would be the problem with verifying addresses

Re: mx fails due to typo on remote dns

2009-11-16 Thread Wietse Venema
Postfix versions 2.3 and later skip a DNS record with a bad name. Unsupported Postfix versions pretend that the lookup failed when the result is invalid. Wietse

Re: mx fails due to typo on remote dns

2009-11-17 Thread Wietse Venema
Laurence Moughan: Ok , I upgraded to 2.6.5 - and still fails, Works for me. I suspect that your LOCAL dns server is making trouble. Wietse

Re: mx fails due to typo on remote dns

2009-11-17 Thread Wietse Venema
Wietse Venema: Laurence Moughan: Ok , I upgraded to 2.6.5 - and still fails, Works for me. I suspect that your LOCAL dns server is making trouble. Logging: Nov 17 06:34:54 spike postfix/qmgr[6861]: 509F61F3EA7: from=wie...@porcupine.org, size=338, nrcpt=1 (queue active) Nov 17

Re: Betr.: Re: Betr.: Re: Trim part of the header with header rewriting ?

2009-11-17 Thread Wietse Venema
Arjan Melein: It's been a few days but i just ran into a little bump in the road.. It looks like the ;1:1 actually changes depending on the number of recipients. How would I change '/^RCPT\s+TO:(.*);1:1$/ RCPT TO:$1' into matching 'domain.tld;#:#' and put the domain.tld back without the

Re: How to intercept delivery errors?

2009-11-17 Thread Wietse Venema
Matthias Vill: Hi there, if I configure my /etc/aliases to read: test: |/bin/false, u...@external-server owner-test: u...@external-server I correctly receive E-Mail to test and owner test at u...@external-server, but the error-message which is generated by /bin/false is send back to the

Re: How to intercept delivery errors?

2009-11-17 Thread Wietse Venema
Victor Duchovni: On Tue, Nov 17, 2009 at 01:12:26PM -0500, Wietse Venema wrote: Apparently, owner-foo works for email addresses but not commands. That would be a bug. It is not easy to solve, since bounces are not sent by local(8), so we would need new a queue-file with owner

Re: Problem re-directing root's email

2009-11-17 Thread Wietse Venema
Nicholas Robinson: Hi I'm trying to re-direct my root email to my external email address. See: http://www.postfix.org/STANDARD_CONFIGURATION_README.html#some_local Wietse

Re: Relayhost to multiple hosts

2009-11-18 Thread Wietse Venema
Dhiraj Chatpar: We have 5 different servers.. all of them are mailing servers for our main company domain, I wish to Balance the mails across these 5 servers. Isn't that what the DNS was invented for? You specify the domain and its servers, and then all standards-compliant mail systems will

Re: mx fails due to typo on remote dns

2009-11-18 Thread Wietse Venema
Laurence Moughan: obeml1# dig @resolver1.opendns.com eurocommerce.ie ; DiG 8.3 @resolver1.opendns.com eurocommerce.ie ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 6 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1,

Re: Relayhost to multiple hosts

2009-11-18 Thread Wietse Venema
Dhiraj Chatpar: Yes the DNS is a good idea.. However what will i achieve if i implement the following? The solution is to have multiple MX records in the DNS. All standards-compliant MTAs will spread the load WITHOUT ANY SENDER SIDE CONFIGURATION. Wietse

Re: mx fails due to typo on remote dns

2009-11-18 Thread Wietse Venema
Laurence Moughan: I do ( detailed in the same email ) - and i get timeouts when there is a typo in the record - all correct records come back fine. You are doing one MX lookup that times out. Then, two A lookups for the email domain name, and that is wrong. Instead, you need to do one MX

Re: Attempt MX, fallback to relay in case of error only

2009-11-18 Thread Wietse Venema
cont...@rusanu.com: Thanks Andreas, The reject would be '553 Mail from ... not allowed', so it sounds like a dead end trying to configure postfix to handle this. Suggestions on how to workaround are welcome. This is essentially the same problem as home office sites trying to send direct

Re: server configuration error

2009-11-18 Thread Wietse Venema
K bharathan: hi all the following is the log from my relay for example.com; this is read receipt which failed; this is happening only with this client domain; Nov 18 20:13:59 relay2 postfix/smtpd[4225]: NOQUEUE: reject: RCPT from ex.2n.cz[90.182.112.11]: 451 4.3.5 Server configuration

Re: Sending from multiple IPs, based on a header?

2009-11-18 Thread Wietse Venema
Ian Duggan: I am trying to configure postfix to work as follows: 1) In a header_check, look for a header X-Vmta: n where n is some number. 2) Based on n, choose an outgoing smtp transport (bound to some ip) Basically I want postfix to choose the outgoing IP based on a header that can be

Re: server configuration error

2009-11-18 Thread Wietse Venema
K bharathan: [90.182.112.11] Nov 18 20:06:10 relay1 postfix/smtpd[21876]: NOQUEUE: reject: RCPT from ex.2n.cz[90.182.112.11]: 451 4.3.5 Server configurati Now try: grep 21876 /the/log/file Wietse

Re: Sending from multiple IPs, based on a header?

2009-11-18 Thread Wietse Venema
Ian Duggan: Nov 18 15:19:22 mail01 postfix/smtp[]: D9024B689D2: to=test.scr...@gmail.com, relay=none, delay=0.05, delays=0.05/0/0/0, dsn=5.4.6, status=bounced (mail for mail01.scribd.com loops back to myself) header_checks is here: header_checks: /^X-Vmta.*1$/ FILTER vmta1:

Re: Sending from multiple IPs, based on a header?

2009-11-18 Thread Wietse Venema
Ian Duggan: On Wed, Nov 18, 2009 at 2:03 PM, Wietse Venema wie...@porcupine.org wrote: The transports(5) manpage mentions that the destination defaults to the recipient domain. However, the scheduler uses a different default, which appears to be inconsistent. I wonder what would break

Re: Error in postmulti

2009-11-19 Thread Wietse Venema
Dhiraj Chatpar: r...@campaignindia:/etc# postmulti -I postfix-1 -G mta -e create postfix: warning: dict_open_dlinfo: cannot open /etc/postfix-1/ dynamicmaps.cf. No dynamic maps will be allowed. wondering why am i getting this error That is a DEBIAN extension (also in UBUNTU). I suggest

Re: lost connection with while receiving the initial server greeting

2009-11-19 Thread Wietse Venema
Pawe? Burzy?ski: (lost connection with orion.put.poznan.pl[150.254.5.4] while receiving the initial server greeting) The TCP-level three-way handshake was completed, but no SMTP-level greeting was received within $smtp_helo_timeout seconds (default: 300s). In other words, an application-layer

Re: advice on source route

2009-11-19 Thread Wietse Venema
Ralf Hildebrandt: * Peter S?rensen mas...@sdu.dk: Hi, We use postfix in front of our local email servers where 80% is based on exchange. We have around 25000 users/distlist/emaillist We would like to implement a system where all email addresses are known and which server will

Re: Sending from multiple IPs, based on a header?

2009-11-19 Thread Wietse Venema
Ian Duggan: On Wed, Nov 18, 2009 at 4:53 PM, Wietse Venema wie...@porcupine.org wrote: In smtpd_recipient_restrictions you can have an access(5) map that uses PREPEND. ? ?/@([...@]+)$/ PREPEND X-Vmta: $1 which can be picked up by header_checks, because thuse happen later

Re: sender_bcc

2009-11-19 Thread Wietse Venema
Magnus B?ck: On Thursday, November 19, 2009 at 20:01 CET, Osmany Goderich Navarro osm...@oc.quimefa.cu wrote: I have a Postfix+Dovecot+MySQL configuration. I want postfix to bcc messages coming from a specific address to a specific domain. I have currently hosting three virtual

Re: 4KB of disk space burning on a single email

2009-11-20 Thread Wietse Venema
J. Roeleveld: On Friday 20 November 2009 13:42:58 Arora, Sumit wrote: Hi folks, I'm just testing my postfix server for load and disk usage. I'm using content filter on some another server, and I don't feed the email back to postfix. Email data is getting deleted from my postfix

Re: 4KB of disk space burning on a single email

2009-11-20 Thread Wietse Venema
Arora, Sumit: I've checked the size of maillog It's size is getting increased by 4KB on receiving each email. We know what you believe. Now we would like to see some actual concrete evidence. Wietse

Re: Relay and mynetworks

2009-11-20 Thread Wietse Venema
Jeronimo: I chance the restriction because I want that only messages from mydomain pass through the relay. That is not what the configuration does. In reality, it forwards mail from anyone who sends mail with your domain name in the sender address. So put back the default

Re: pcre:table client_restrictions

2009-11-21 Thread Wietse Venema
Eugene V. Boontseff: eug...@mail [/usr/local/etc/postfix]# postmap -fq ppp92-100-127-177.pppoe.avangarddsl.ru[92.100.127.177] pcre:exper Use ppp92.. not ppp92... Wietse

Design: sender-dependent default_transport

2009-11-21 Thread Wietse Venema
Recently there have been requests for sending mail with source IP addresses that depend on the envelope sender. Sometimes the request appeared to be related to showshoe spamming, and sometimes it appeared to be a legitimate attempt to protect IP-based domain reputations of different customers.

Re: aliases allow_mail_to_files maximum size ?

2009-11-22 Thread Wietse Venema
Ronan REYNAUD: hello I'm using a file in aliases (with allow_mail_to_files set) and it's currently working perfectly. With allow_mail_to_files, Postfix APPENDS mail to a local file. But I'd like to know if there's a limit to the number of mail addresses in this file ? (i'll need about

Re: aliases allow_mail_to_files maximum size ?

2009-11-22 Thread Wietse Venema
Ronan REYNAUD: I thought I must add include to allow_mail_to_files = alias,forward,include in main.cf to use include in the aliases As documented, the allow_mail_to_files feature says whether Postfix can deliver mail to external files. The syntax for delivering to file is /file/name. The

Re: Tweak Postfix so that it will resend emails after the initial 451 response

2009-11-23 Thread Wietse Venema
jan gestre: us...@former.sample: host webmail.former.sample[210.21x.xx.xx] said: 451 Temporary failure, please try again later. (in reply to DATA command) Postfix always resends after 451, but it stops when the message is too old (the default limits are: maximal_queue_lifetime = 5d and

Re: How to test server and stop test messages being sent out

2009-11-23 Thread Wietse Venema
Kevin Bailey: Hi, I need to test the move of a mailing list to another server. What I'd like to do is to stop the Postfix server on the new server from sending out any mails but still put them into the queue. I could then test the mail list (which actually only has 43 members) and

Re: How to test server and stop test messages being sent out

2009-11-23 Thread Wietse Venema
Wietse Venema: Kevin Bailey: Hi, I need to test the move of a mailing list to another server. What I'd like to do is to stop the Postfix server on the new server from sending out any mails but still put them into the queue. I could then test the mail list (which actually only

Re: Multiple Mail domains for reverse ptr records? I'm confused

2009-11-23 Thread Wietse Venema
ML: Hi All, I have some confusion about multiple reverse PTR records per IP. You need only one. The name (from the address-name) lookup must resolve to the address. Wietse Comcast has told me that they can only assign 2 reverse PTR records per IP. So if I have mail.domainA.com

Re: Milter's not working on Postfix 2.6.5

2009-11-24 Thread Wietse Venema
Sharma, Ashish: Solved the problem using setting: milter_protocolhttp://www.postfix.org/postconf.5.html#milter_protocol = 2 as mentioned in: http://www.postfix.org/MILTER_README.html in 'main.cf' When in doubt, read the release notes file. [Incompat 20090428] The default

Re: Don't filter the users\

2009-11-24 Thread Wietse Venema
Jordi Espasa Clofent: Hi all, I've a Postfix working with Perl-based filter. All works fine, but I don't want filter the legitimate users (who are authenticated using SASL) when they want to do massive mailing using their e-mail client (ThunderBird, Outlook... and so on). That is easy.

Re: Don't filter the users

2009-11-24 Thread Wietse Venema
Jordi Espasa Clofent: That is easy. Have your users connect to the submission port, and let everyone else connnect to the smtp port. Then, specify =o content_filter=whatever for the smtp port and not for the submission port. Yes Wietse, I've considered this simple and clean option,

Re: Rate limiting with anvil

2009-11-25 Thread Wietse Venema
Daniel Ryslink: Hello, I am trying to set rate limits on our smtp relays to prevent abusive (compromised) user hosts from flooding the service with fast, intensive mail floods. I have used the following directives (I can post whole main.cf, but I don't think it's necessary):

Re: Rate limiting with anvil

2009-11-25 Thread Wietse Venema
By default, Postfix will exclude clients in mynetworks from smtpd_client_mumble_limits. You may want to specify a separate list for mynetworks (relay control) and for anvil (rate control). http://www.postfix.org/postconf.5.html#smtpd_client_event_limit_exceptions (with Postfix 2.1, this was

Re: Postfix/Cyrus Forwarding Question

2009-11-25 Thread Wietse Venema
Dennis Putnam: I'm not sure if this is the right forum for this question but I don't know where else to start. I am running Postfix/Cyrus on the same server that contains user home directories. The forwarding mechanism (.forward) is, of course, working and I understand it. What I don't

Re: Postfix/Cyrus Forwarding Question

2009-11-25 Thread Wietse Venema
Victor Duchovni: On Wed, Nov 25, 2009 at 12:41:37PM -0500, Dennis Putnam wrote: If I understand this correctly, I can set the forward_path to a directory No, not a directory a file, and not a file, but a set of files, one for each user. For example I remember from historic times

Re: Incoming mail archiving with Postfix

2009-11-26 Thread Wietse Venema
Zohan: Hi, I need to archive all incoming mail for my virtual domains (by copying mail to dedicated archive mailbox) and then sort it according to address it has been delivered to. Postfix local/pipe/virtual delivery agents record the delivered to address in the Delivered-To: header. One

Re: Impact of SSL renegotiation attacks on SMTP mail

2009-11-26 Thread Wietse Venema
gmx: In-Reply-To-Message-ID: 20091109012901.6d90f1f3...@spike.porcupine.org Hi Wietse and Victor, Thank you very much for your analyses http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555 . As a practitioner, the following question arises as we are in a business partner

Re: Re[2]: Incoming mail archiving with Postfix

2009-11-26 Thread Wietse Venema
Zohan: Wietse, thank you, Postfix local/pipe/virtual delivery agents record the delivered to address in the Delivered-To: header That is, the final recipient address after alias processing and forwarding. All mail that is delivered to the same mailbox has the same Delivered-To: address.

Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini: I have a barracuda server that receives mails, filter them and forward to a linux system running postfix. Both machine have a public IP (static). The linux system is configured to be used as SMTP for sasl authenticated users as well, besides to be used as SMTP for the

Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini: * Wietse Venema wie...@porcupine.org [2009-11-26 12:20:19 -0500]: Marco Giardini: I have a barracuda server that receives mails, filter them and forward to a linux system running postfix. Both machine have a public IP (static). The linux system

Re: CMD tool to check if next SMTP hop can use TLS for messages?

2009-11-27 Thread Wietse Venema
Harakiri: I know about all the difficulties with MX lookup etc, the original goal would be - that i have a policy for external domains - and that for certain domains a message should only be sent if TLS is available - if a message to a certain domain is sent which does not support TLS - it

Re: Multiple Mail domains for reverse ptr records? I'm confused

2009-11-27 Thread Wietse Venema
Greg A. Woods: There _should_ be one PTR for every _valid_ hostname using a given IP address. Statements such as above remind me of silly knights fighting windmills. There is a difference between right and useful, and it even depends on where they are used - server or client side. Multiple

Re: Multiple Mail domains for reverse ptr records? I'm confused

2009-11-27 Thread Wietse Venema
Wietse Venema: Greg A. Woods: There _should_ be one PTR for every _valid_ hostname using a given IP address. Statements such as above remind me of silly knights fighting windmills. There is a difference between right and useful, and it even depends on where they are used - server

Re: Postfix Deployment

2009-11-27 Thread Wietse Venema
Stan Hoeppner: I'm running my Postfix firewall behind NAT/PAT and the setup didn't require any non-default Postfix settings to make it work. I port forwarded TCP 25 from my router to my internal Postfix host IP and all worked without issue. What settings are you referring to?

Re: CMD tool to check if next SMTP hop can use TLS for messages?

2009-11-27 Thread Wietse Venema
Harakiri: 1) Configure the Postfix SMTP client to REQUIRE TLS. ? ? smtp_tls_security_level=encrypt no - as i said, my filer has own rules and can be based on recipient, sender, or a combination of both - postfix cant do this, or at least not without different policy servers 2)

Re: Postfix Deployment

2009-11-28 Thread Wietse Venema
Stan Hoeppner: Wietse Venema put forth on 11/27/2009 5:17 PM: Stan Hoeppner: I'm running my Postfix firewall behind NAT/PAT and the setup didn't require any non-default Postfix settings to make it work. I port forwarded TCP 25 from my router to my internal Postfix host IP and all

Re: Mail from cron delay

2009-11-29 Thread Wietse Venema
Emmett Culley: For some months I've been noticing on multiple servers that mail from a cron job defined in the root's crontab takes 24 hours to get to it's destination. It finally bugged me enough to have me take a look for the reason. This is what I found in the maillog for each day:

Re: Mail from cron delay

2009-11-30 Thread Wietse Venema
Victor Duchovni: On Sun, Nov 29, 2009 at 02:42:14PM -0800, Emmett Culley wrote: For some months I've been noticing on multiple servers that mail from a cron job defined in the root's crontab takes 24 hours to get to it's destination. It finally bugged me enough to have me take a look

Re: Something like address based relay just the other way around

2009-11-30 Thread Wietse Venema
Tobi: Hello I just wonder whether my idea is technically possible to fullfill with Postfix. I already use sender based relaying which works fine. My problem is that I'm running a Postfix Server on my dynamic IP-Address. I would say for 80% of the receivers is no problem to send the emails

Re: Something like address based relay just the other way around

2009-11-30 Thread Wietse Venema
tobi: [ Charset ISO-8859-1 unsupported, converting... ] Wietse Venema schrieb: Tobi: Hello I just wonder whether my idea is technically possible to fullfill with Postfix. I already use sender based relaying which works fine. My problem is that I'm running a Postfix Server on my

Re: A question about Postfix and virus scanning

2009-11-30 Thread Wietse Venema
Stan Hoeppner: Michael Katz put forth on 11/30/2009 2:45 PM: There are many filtering Postfix AV solutions that are far more efficient than Amavisd and many AV scanners that are considerably more scalable than clamav such. A few years ago we did some detailed testing between ClamAV and

Re: A question about Postfix and virus scanning

2009-12-01 Thread Wietse Venema
Ali Majdzadeh: question concerning what Wietse proposed. Does the usage of milter help? I mean, is the milter architecture considered as a way to kill spam load _before_ piping inbound connections to AS/AV content filter daemons? Or, Milter is a way to inspect or update message content without

Re: A question about Postfix and virus scanning

2009-12-01 Thread Wietse Venema
Ali Majdzadeh: Wietse, Hi Thanks for your reply. I recall that I had read about another filtering option available in Postfix which was called smtpd_proxy_filter (if I spell it correctly) and which filtered messages before queuing. So, is there any difference between the so-called method and

Re: A question about Postfix and virus scanning

2009-12-01 Thread Wietse Venema
Stan Hoeppner: Wietse Venema put forth on 12/1/2009 1:20 PM: If your performance is inadequate, I suggest that you do a detailed system performance analysis to find out if the limit is CPU, memory, file I/O or perhaps some trivial DNS configuration problem. That may be difficult

Re: A question about Postfix and virus scanning

2009-12-01 Thread Wietse Venema
Stan Hoeppner: Wietse Venema put forth on 12/1/2009 3:47 PM: Surely, mail is injected via SMTP, and therefore, the Postfix SMTP server will attempt to lookup the client hostname and IP address; since they are using SMTP-based content filters, that is another source of name service

Re: postscreen dnsblog problem

2009-12-02 Thread Wietse Venema
Len Conrad: freebsd 7.2 mail_version = 2.7-20091008 out of 6 postscreen machines, I've got one that every 20 or 30 minutes just halts, port 25 is dead (several monit agents see it dead), then it starts off by itself after a few minutes, dumping a bunch of these in maillog: warning:

Re: Force matching envelop MAIL FROM and From header

2009-12-02 Thread Wietse Venema
lst_ho...@kwsoft.de: Hello is it possible to force a matching From header in the mail if reject_sender_login_mismatch is used so the From header is the same as the checked MAIL FROM address? The goal is to prevent spoofing of the From header for SASL authenticated clients. Yes, but

Re: sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-02 Thread Wietse Venema
Giovanni Mancuso: Hi guys, I'm trying to configure my postfix to use a different relayhost if the sender of the email is in ldap. You must return a result that satisfies the documented syntax. http://www.postfix.org/postconf.html#relayhost Wietse

Re: sender_dependent_relayhost_maps and ldap with multivalue attribute

2009-12-02 Thread Wietse Venema
Wietse: You must return a result that satisfies the documented syntax. http://www.postfix.org/postconf.html#relayhost Giovanni Mancuso: Thanks for answer. But, can i configure ldap search to manage multivalue in entry? See my previous reply, above. Wietse

Re: Snapshot 20091109, queue disk partition sizing

2009-12-04 Thread Wietse Venema
Stefan F?rster: If I understood the release notes correctly, with smtpd_proxy_options = speed_adjust, each smtpd process will keep the message it's currently receiving in a temporary file. That seems to imply that there could be (number of smtpd processes) * message_size_limit bytes of

Re: postscreen dnsblog problem

2009-12-04 Thread Wietse Venema
Len Conrad: I've got more data. The killer option is when I have this on: postscreen_blacklist_networks = mysql:/usr/local/etc/postfix/mysql-mta_clients_reactive_b.cf I'll mkae a note that postscreen must be used only with low-latency databases such as local files. Wietse

Re: postscreen dnsblog problem

2009-12-04 Thread Wietse Venema
Len Conrad: -- Original Message -- From: wie...@porcupine.org (Wietse Venema) Date: Fri, 4 Dec 2009 14:13:17 -0500 (EST) I'll mkae a note that postscreen must be used only with low-latency databases such as local files. the problem postscreen MX

Re: remote_header_rewrite_domain ignored

2009-12-04 Thread Wietse Venema
Ed W: Hi, I'm using postfix 2.5.7 and having some trouble with the server domain being appended to incomplete sender addresses. I have set # postconf|grep -e rewrite -e append -e myorigin -e mydomain -e local_header append_at_myorigin = yes append_dot_mydomain = no

Re: remote_header_rewrite_domain ignored

2009-12-05 Thread Wietse Venema
Ed W: Wietse Venema wrote: Ed W: Hi, I'm using postfix 2.5.7 and having some trouble with the server domain being appended to incomplete sender addresses. I have set # postconf|grep -e rewrite -e append -e myorigin -e mydomain -e local_header append_at_myorigin = yes

Re: remote_header_rewrite_domain ignored

2009-12-05 Thread Wietse Venema
Ed W: To clarify the question - the goal is if someone connects via the network (not local sendmail command) and the transcript says RCPT TO: asdf that this is subsequently bounced as being an invalid To summarize my other response, by definition an address without domain delivers to the

Re: remote_header_rewrite_domain ignored

2009-12-05 Thread Wietse Venema
Ed W: Wietse Venema wrote: Ed W: To clarify the question - the goal is if someone connects via the network (not local sendmail command) and the transcript says RCPT TO: asdf that this is subsequently bounced as being an invalid To summarize my other response

PATCH: smtpd_proxy logging (was: Snapshot 20091109, queue disk partition ...)

2009-12-05 Thread Wietse Venema
On Fri, Dec 04, 2009 at 08:54:01PM +0100, Stefan F??rster wrote: Now, about logging - I'd be really grateful if the existing logging functionality could be extended in a way so that the pre-queue content filter's response is logged. I know that it is actually the content filter's job to log

Re: remote_header_rewrite_domain ignored

2009-12-06 Thread Wietse Venema
Ed W: Wietse Venema wrote: If you don't want to receive mail for domain-less addresses then say so, instead of coming up with the wrong solution for the wrong problem. OK, I want to accept most emails over smtp and then later bounce emails with domain-less addresses

Re: ldap-Trouble

2009-12-06 Thread Wietse Venema
Jan Luehr: Hello, I've some trouble using ldap aliases. My settings are: server_host = localhost search_base = dc=oknw bind_dn = uid=postfix,cn=staff,dc=oknw bind_pw = XXX version = 3 query_filter = ((mail=%s)(objectClass=mailAccount)) result_attribute = forward Postfix is: 2.5.5

Re: rejecting an invalid return path

2009-12-07 Thread Wietse Venema
Raffael Schmid: Hi list Do you know whether there is a possibility to reject invalid return paths in postfix? The problem is, that we get spam with a header-line like the following and would like to reject those messages: Return-Path: MAILER-DEAMON AFAIK the return-path above is

Re: LDAP configuration issue

2009-12-07 Thread Wietse Venema
Javier Henderson: Greetings, I am trying to configure Postfix to gracefully deal with the failure of the LDAP server it uses for alias resolution. It's working fine, using the LDAP server to resolve u...@domain.com to u...@somehost.domain.com, but if the LDAP server dies or becomes

Re: header_checks not working correctly

2009-12-07 Thread Wietse Venema
Christopher Adams: Thank you for your helpful reply. So, now I have this in main.cf: smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_blacklist I have a file sender_blacklist: m...@somplace.org/ REJECT I issued the command 'postmap

Re: postscreen ps_cache fatal

2009-12-08 Thread Wietse Venema
Len Conrad: mail_version = 2.7-20091008 fbsd 7.2 we're seeing one of these each time we stop postfix Dec 8 00:09:06 mx6 postfix/postscreen[49918]: fatal: close database /var/db/postfix/ps_cache.db: No such file or directory The Berkeley DB close() function returns an ENOENT error code.

<    5   6   7   8   9   10   11   12   13   14   >