Re: Fwd: routing externally forwarded mail differently than internally originated mail

2015-03-19 Thread Daniel Bromberg
Greetings master postfixers, I am trying to solve a forwarding problem. I have two separate amavis instanceson my edge MX that each do spam-checking: one incoming (obvious), one outgoing (our users aren't too good about keeping their computers zombie-free). For the particular

routing externally forwarded mail differently than internally originated mail

2015-03-18 Thread Daniel Bromberg
. mysql_virtual_alias_maps, which I'm using, did not have any helpful references (because aliases are general, not necessarily external), nor did several Google's about forwarding magic. Regards, -Daniel -- *Daniel Bromberg, Founder* BaseZen Consulting, Inc. dan...@basezen.com 617.240.8036 52 Montague St Unit B

Re: routing externally forwarded mail differently than internally originated mail

2015-03-18 Thread Daniel Bromberg
On 3/18/2015 7:23 PM, Wietse Venema wrote: Daniel Bromberg: Greetings master postfixers, I am trying to solve a forwarding problem. I have two separate amavis instanceson my edge MX that each do spam-checking: one incoming (obvious), one outgoing (our users aren't too good about keeping

Re: Archive

2012-07-15 Thread Daniel Bromberg
On 7/15/2012 8:24 PM, Silvio Siefke wrote: Hello, is there a archive from the list where can download the messages? Regards Silvio Many: http://www.postfix.org/lists.html#online -Daniel

good data backup system for a mail server?

2011-11-16 Thread Daniel Bromberg
Greetings All, I am looking for the best way to do online/offsite, automated, nightly, incremental file backup for my mail server. This is admittedly a tangential topic, but I know the users here will have good insights (or at least send me in the right direction). Hoping for maybe 5

Re: good data backup system for a mail server?

2011-11-16 Thread Daniel Bromberg
On 11/16/2011 12:49 PM, Reindl Harald wrote: Am 16.11.2011 18:17, schrieb Daniel Bromberg: Greetings All, I am looking for the best way to do online/offsite, automated, nightly, incremental file backup for my mail server. these days i would go ahead and move the mailserver on a VMware-vCenter

Re: good data backup system for a mail server?

2011-11-16 Thread Daniel Bromberg
On 11/16/2011 1:16 PM, Reindl Harald wrote: Am 16.11.2011 19:04, schrieb Daniel Bromberg: and making a restore request goes to their sysadmin ticketing system and takes days and days. :-( if this happens they are not useable for any business i fear you will get no hosting with direct access

Re: good data backup system for a mail server?

2011-11-16 Thread Daniel Bromberg
On 11/16/2011 1:36 PM, Martin Schütte wrote: On 11/16/11 18:17, Daniel Bromberg wrote: I was wondering what data backup systems people use? I found that filesystem snapshots are the easiest solution. Depending on disk space I keep several snapshots around and at night one is used

Re: good data backup system for a mail server?

2011-11-16 Thread Daniel Bromberg
On 11/16/2011 3:40 PM, lst_ho...@kwsoft.de wrote: Zitat von Daniel Bromberg dan...@basezen.com: On 11/16/2011 12:49 PM, Reindl Harald wrote: Am 16.11.2011 18:17, schrieb Daniel Bromberg: Greetings All, I am looking for the best way to do online/offsite, automated, nightly, incremental

Re: Postfix TCP connection fails

2011-06-19 Thread Daniel Bromberg
On 6/19/2011 7:31 AM, Ralf Hildebrandt wrote: * Stefan Foerstercite+postfix-us...@incertum.net: As is to be excpected this mailing list has seen it's fair share of problems related to operating systems, routers, firewall appliances and the like. Aside from the things you mention above, DKIM

Re: need help for controlling authenticated realy

2011-04-23 Thread Daniel Bromberg
On 4/23/2011 10:09 PM, Evan Platt wrote: [snip] On Sat, Apr 23, 2011 at 6:45 PM, Rajesh Kumar Mallah mallah.raj...@gmail.com wrote: Hi, We allow relaying of email via our server to our clients using authentication. The problem is that some miscreants have got hold of our clients password and

Re: selective greylisting with a long delay

2011-04-11 Thread Daniel Bromberg
On 4/11/2011 7:07 PM, Wietse Venema wrote: Stan Hoeppner: Have you heard of a case of an SMTP sender suing an SMTP receiver for message rejection, and winning the case? http://www.spamhaus.org/organization/statement.lasso?ref=3 They sued, and the US judge awarded them US$11.7 million for

Re: What are the right users groups to use for spampd clamav when used with PostFix?

2011-04-10 Thread Daniel Bromberg
On 4/10/2011 8:33 PM, jeremy.als...@imap-mail.com wrote: Hello. I'm plugging along on content filtering for Postfix. I decided to have PostFix use 'spampd', the Spamassassin Proxy Daemon, instead of 'spamd', and to set up ClamAV as a SpamAssassin plugin. I read that it's pretty easy to open

Re: Sender access issue

2011-04-10 Thread Daniel Bromberg
On 4/10/2011 11:38 PM, Alex wrote: Hi, I've read the access man page and help pages at postfix.org, but I still don't understand. I think I may be trying to use check_sender_access in a way in which it wasn't intended. I have the following message: Apr 11 03:32:07 alex postfix/smtpd[2278]:

Re: Relaying fails but sending is deferred instead of bouncing mail

2011-04-08 Thread Daniel Bromberg
On 4/8/2011 2:45 AM, Ralf Hildebrandt wrote: * Jean-Sébastien Kroll-Rabotinj...@no-log.org: Hi, When my Postfix server sends some mail from addresses in the local domain, permanent errors (5XX) are treated as temporary errors (4XX) and mail is delayed while it should definitely fail. From

Re: problem using postfix and mailman

2011-04-07 Thread Daniel Bromberg
On 4/7/2011 4:11 AM, deconya wrote: Hi list I have diferent mailman lists mounted and I detected a problem making tests to access, If I use telnet using other mailserver (mailserver.es) I receive this information: telnet mail.mydomain.com 25 Trying 84.88.68.66... [SNIP] 354 End data

meta idea for posting guidelines

2011-04-07 Thread Daniel Bromberg
All, I see a sufficiently fair percentage of e-mail traffic relating to good list hygiene; since it's repetitive anyway, would it make sense to post a weekly, bi-weekly, or monthly reminder since new users arrive frequently at the list? Experienced list users could auto-filter it away by

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

2011-04-07 Thread Daniel Bromberg
On 4/7/2011 9:39 PM, jeremy.als...@imap-mail.com wrote: [snip] Whoa. I took a look at that and that's a bit much for me at this stage of the came. Do I need do it this Multi_Instace way? Even with your explanation I still don't understand how many PostFix servers I need to install on my one

Re: To install a PostFix-based mailserver with Content Filters do I need to have multiple servers?

2011-04-07 Thread Daniel Bromberg
On 4/8/2011 1:21 AM, jeremy.als...@imap-mail.com wrote: If I do any of the Multiple Instance setup is there a good Document that tells what configuration goes into what file? Does configuration flow down from the 1st one you setup ? So that PostScreen configuration, which looks to do some of

Re: Upgrading Postfix and invalid/obseleted config values.

2011-03-18 Thread Daniel Bromberg
On 3/18/2011 2:45 PM, Simon Brereton wrote: [snip] This is not part of Postfix. It is a third-party quota patch that some distributors include. For support, ask the distributor. Thank you for knowing my system better than I do (did I mention it's a few years) since I did the initial install.

Re: The future of SMTP ?

2011-03-13 Thread Daniel Bromberg
On 3/13/2011 4:57 AM, Frank Bonnet wrote: Hello Sorry if this seems a bit off topic ... Postfix is really a great piece of software and we all thanks to Wiese for his tremendous work. But to fight spam and all other malicious problems it's getting more and more sophisticated and complex to

Re: Long queue ID support gotcha

2011-03-12 Thread Daniel Bromberg
On 3/12/2011 7:31 PM, Wietse Venema wrote: [snip] The problem is that the larger alphabet and longer queue IDs increase the possibility that existing words will appear inside queue IDs (consider that the letters C, F, K and U are in the base 32 alphabet and that a queue ID can be 12 characters

Re: Kernel Oops

2011-03-04 Thread Daniel Bromberg
On 3/4/2011 2:01 PM, Wietse Venema wrote: Steve Jenkins: On Fri, Mar 4, 2011 at 8:01 AM, Denis Shulyakashuly...@gmail.com wrote: Thanks! I will try to do this and will update you with the result. When I read Denis' first post I thought WHAT? Postfix on a WRT54G? He's crazy! But now I'm

Re: Transport Mapping

2011-03-02 Thread Daniel Bromberg
On 3/1/2011 11:13 PM, Seelke, Eddie wrote: I have a VPS setup that is running two websites. I am using Virtualmin to manage these two sites. On deluxetech.com, I have WHMCS installed and am using Google Apps for email. I have Google Apps setup so that any email not recognized is automatically

Re: rewrite outgoing from header .

2011-03-01 Thread Daniel Bromberg
On 3/1/2011 12:41 PM, Eero Volotinen wrote: Sorry, but it didn't work as expected. ISP sends mail to eero.voloti...@.xxx and I want to deliver it to exchange account at 192.168.20.6 exchange server as eero.voloti...@yyy.yyy How to do this? I tried canonical and transport maps, but no

Re: test submission on 587

2011-02-28 Thread Daniel Bromberg
On 2/28/2011 9:13 AM, jeffrey j donovan wrote: If the port requires TLS: $ openssl s_client -quiet -starttls smtp -connect host:587 helo client.example.com mail from:xxx etc. Otherwise: $ telnet host 587 helo client.example.com mail from:xxx etc. Wietse thank you all looks like Im

Re: test submission on 587

2011-02-28 Thread Daniel Bromberg
On 2/28/2011 12:25 PM, Claus Assmann wrote: On Mon, Feb 28, 2011, Daniel Bromberg wrote: HELO example.com Wrong. If you want to use extensions, you have to use EHLO. 250 example.com AUTH login MAIL FROM:dan...@basezen.com Wrong. See the RFC, no space after :. RCPT TO:dan...@basezen.com

Filter based on invalid space WAS Re: test submission on 587

2011-02-28 Thread Daniel Bromberg
The discussion over the invalid space syntax got me thinking, so I tracked my SMTP traffic for about 45 minutes. The only non-compliant clients were clear spammers, save for two gray-area clients, one using StrongMail http://www.strongmail.com/ -- surprise, surprise a purveyor of mass

Re: Postfix/Upstart, the final conclusion

2011-02-27 Thread Daniel Bromberg
On 2/27/2011 1:10 PM, Reindl Harald wrote: Thank you for your informations and very good documentation! Has anybody an eye to systemd/postfix because systemd will replace sysvinit/upstart in the upcoming Fedora 16 and so also in future RHEL-Versions and maybe replace upstart/sysvinit sooner or

Re: [SENDER_RESTRICTIONS] mail from denied for not authenticated

2011-02-26 Thread Daniel Bromberg
On 2/26/2011 3:21 PM, aa wrote: Hi all, I'm testing postfix restrictions and I would do two things: (1) I desire that when a not-authenticated user connects to my postfix server and insert the HELO and MAIL FROM commands the mail from command gets an error like this 530 authentication

Re: Starting postfix

2011-02-25 Thread Daniel Bromberg
On 2/25/2011 8:16 AM, Wietse Venema wrote: The problem with this approach is that Postfix is not one program, like named, apache, etc., and that simply starting one master daemon is insufficient as it skips all the start-up repair and sanity checks. That's why i said it may be useful to have a

Re: Outbound relayhost distribution

2011-02-23 Thread Daniel Bromberg
On 2/23/2011 1:58 PM, Victor Duchovni wrote: No additional failover unless you want some hosts to receive mail only when it fails to deliver to others. I prefer hot-hot. Just vocabulary question, what is hot-hot? -DB

Re: Rejected mails

2011-02-22 Thread Daniel Bromberg
On 2/22/2011 1:15 AM, sunhux G wrote: [SNIP] Anything logged by postfix/smtpd ? Someone in dovecot list asked me to turn off verbose. I've just enabled verbose in master.cf restarted postfix I've got more logs this time: seems related to some recipient...canonical...map issue (see below

Re: Outbound relayhost distribution

2011-02-22 Thread Daniel Bromberg
On 2/22/2011 10:29 PM, Robert Goodyear wrote: I know this topic has been flogged to death, and perhaps for good reason, but I'm trying to determine the best outbound high-volume ecosystem for Postfix. As I understand it, the RELAYHOST parameter will allow an FQDN that, when bracketed, can

Re: Why is this mail deferred?

2011-02-18 Thread Daniel Bromberg
The nature of these unrelated e-mails reflects the likely spammy attitude of your company which no doubt sends out millions daily. As far as I'm concerned, you've stumbled onto your enemies. People on this list are concerned with preventing spam because it clogs the Internet, not those who

understanding the why and the wherefore of postscreen

2011-02-17 Thread Daniel Bromberg
With an emphasis towards handling larger loads in the future, I am trying to get a grip on the advantages provided by postscreen as opposed to letting smtpd do the filtering in situ. My skeptical side says that the same logic must be implemented to reject a client regardless of the process

Re: Mailbox limit not observed

2011-02-17 Thread Daniel Bromberg
On 2/17/2011 8:32 AM, Nikolaos Milas wrote: Thanks Witsie, Could the use of an IMAP client program (workstation-based or web-based, like Squirrelmail) to access the incoming (new/ Maildir) mailbox, somehow override the directive? Or, what other, common tools could cause such an override?

Re: Can Postfix do this?

2011-02-16 Thread Daniel Bromberg
On 2/16/2011 12:46 PM, Wietse Venema wrote: Scott Fitzhugh: Thanks a lot Noel - I seem to be on the right track with this, but am having a problem. I have set up my system as you described, but with one change. I set up the virtual_alias file with the line: @pisd.edu @oldpisd.edu,@newpisd.edu

Re: test emails did not arrive in postfix server (no indication in maillog )

2011-02-16 Thread Daniel Bromberg
On 2/16/2011 10:21 PM, sunhux G wrote: Sorry for the lack of info in earlier post. Think the main issue is I can't even start up postfix : # postfix set-permissions [root@etc]# postfix start postfix/postfix-script: starting the Postfix mail system [root@ etc]# postfix reload

Re: FreeBSD tuning for a dovecot + postfix server ?

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 5:08 AM, Frank Bonnet wrote: Hello I've googled around to tune a bit my mailhub ( AMD64 FreeBSD 8.1, 12 Gb RAM, 2 Tb raid5 disks , ~4000 mailboxes unix users ) but I am a bit confused, All my clients use thunderbird as MUA ( IMAP, IMAPS ) to connect to the mailhub no direct

Re: Relay access denied

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 5:32 AM, Georg Schönweger wrote: Yes the server is using authentication on the relay-host. /etc/postfix/main.cf: smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/smtp_auth smtp_sasl_security_options = noanonymous smtp_use_tls = yes smtp_tls_note_starttls_offer

Re: Relay access denied

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 6:12 AM, Georg Schönweger wrote: [SNIP] You get Relay access denied when you're contacting a RECEIVING mail server with a message that that mailserver doesn't want to handle, because it's not the authoritative destination for that domain. Nothing here implies anything wrong with a

Re: Relay access denied

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 8:51 AM, Georg Schönweger wrote: [SNIP] [REPOSTED FROM PERSONAL REPLY] Hello Daniel, thank you for this clear explanation! How can i figure out if the receving mail server is listet as current MX for the recipient mail address? It's not a big problem for us if the recipients mail

Re: Can Postfix do this?

2011-02-14 Thread Daniel Bromberg
On 2/14/2011 9:39 AM, Scott Fitzhugh wrote: I am new to Postfix and am wondering something about Postfix. Currently, all our email comes into 2 Proofpoint appliances. Email that passes through goes straight to the Groupwise Internet Agent (GWIA), which distributes the email where it needs to

Re: sender_dependent_relayhost_maps vs aliases file

2011-02-08 Thread Daniel Bromberg
On 2/8/2011 5:39 PM, GB GB wrote: postconf -n -c /etc/postfix-hd will render the output I sent in the earlier mail regards, On Tue, Feb 8, 2011 at 5:20 PM, Wietse Venemawie...@porcupine.org wrote: GB GB: here is the outputthe current version of postfix is 2.3.19 I asked for

Re: Ubuntu/Debian Postfix 2.8.x repository -- general chroot question

2011-02-07 Thread Daniel Bromberg
On 2/7/2011 1:22 PM, Wietse Venema wrote: Mark Alan: A quick google search shows that, for years, Wietse have been answering questions related with users trying to use chrooted parts of Postfix. But, I wonder, in his machines does he use chroot or not? Indeed I do, helped by an OS that

Re: Vacation with maildir format ?

2011-02-04 Thread Daniel Bromberg
On 2/4/2011 4:02 AM, Frank Bonnet wrote: On 02/04/2011 08:36 AM, mouss wrote: Le 03/02/2011 10:24, Frank Bonnet a écrit : Hello I'm migrating my mailhub. on the fly I'm converting the mailboxes format from MBOX to Maildir and I wonder how to use the vacation program ( or equivalent ) with

Re: Vacation with maildir format ?

2011-02-04 Thread Daniel Bromberg
On 2/4/2011 4:19 AM, Daniel Bromberg wrote: On 2/4/2011 4:02 AM, Frank Bonnet wrote: On 02/04/2011 08:36 AM, mouss wrote: Le 03/02/2011 10:24, Frank Bonnet a écrit : Hello I'm migrating my mailhub. on the fly I'm converting the mailboxes format from MBOX to Maildir and I wonder how to use

Re: Question about: postfix/smtpd[ ]: connect from unknown[unknown]

2011-02-03 Thread Daniel Bromberg
On 2/3/2011 4:44 AM, J4K wrote: [snip] I can attest to the awesomeness of Stan's pcre file. I run it on all 5 of our Postfix servers, and it catches a LOT of stuff. From my logs, what it seems to do best is block zombie mailers on dynamic IPs. And I updated to your latest version today, Stan.

Re: Postfix with virtual domains and the username

2011-02-02 Thread Daniel Bromberg
On 2/2/2011 6:27 PM, Matt wrote: On Wed, Feb 2, 2011 at 5:31 PM, Mauricio Tavaresraubvo...@gmail.com wrote: On Wed, Feb 2, 2011 at 5:10 PM, Mattmhop...@gmail.com wrote: I'm working on replacing an ageing Posfix install with a new server. On the old and new server we use virtual domains. On

Re: SMTP proxy?

2011-02-01 Thread Daniel Bromberg
On 2/1/2011 12:50 PM, Ignacio Garcia wrote: You are not thinking very clearly yet. You must distinguish clearly between: - Submission, users submitting mail for outgoing delivery. This is visible to users, since they set the server in question as their MUAs SMTP server. This

Re: the automatic directory creation problem when using maildrop LDA

2011-02-01 Thread Daniel Bromberg
instead of `test ...`, use exceptions: if (/^X-Spam-Flag:\s*YES/) { exception{ to $_JUNK_DEST; } `maildirmake ... chmod chmod ... echo ...` to $_JUNK_DEST; } this way, once the user has received a spam that caused the creation of the maildir, the

Re: restricting outbound e-mail to be from the authenticated user only

2011-02-01 Thread Daniel Bromberg
in the setup you did, users can send as ***@yahoo.com. All good no? Your final warning: it won't prevent internal users from using an external sender address -- define internal user? Those in my virtual table, or local Unix users? If the latter, I have none. As for external sender address,

Re: Spam Backscatter

2011-02-01 Thread Daniel Bromberg
On 2/1/2011 8:40 PM, /dev/rob0 wrote: While this may be so, the OP probably received this as backscatter from smtp.counselschambers.com.au[218.185.94.178], which currently is listed on the backscatterer.org DNSBL. We (the Internet as a whole) would benefit if more backscattering sites used Zen

Re: restricting outbound e-mail to be from the authenticated user only

2011-01-31 Thread Daniel Bromberg
On 1/31/2011 7:24 AM, Noel Jones wrote: On 1/30/2011 11:12 PM, Daniel Bromberg wrote: Re: the From:/Reply-To cases: It seems one can write a better regexp then given by mouss, such as including angle brackets in the match field, or the full syntax [the custom on this list is to bottom post

Re: restricting outbound e-mail to be from the authenticated user only

2011-01-31 Thread Daniel Bromberg
On 1/31/2011 3:40 PM, Victor Duchovni wrote: On Mon, Jan 31, 2011 at 03:32:20PM -0500, Daniel Bromberg wrote: smtp.example.com:smtp inet n - n - - smtpd -o content_filter=filter:dummy smtp.example.com:smtps inet n - n - - smtpd

the automatic directory creation problem when using maildrop LDA

2011-01-31 Thread Daniel Bromberg
Hi all, I'm puzzling over the various discussions on using Courier's maildrop as the local agent with Postfix. It plays well enough, but not...great. First its error messages are less than precise but you can get used to what they mean after a while. (I need it for SpamAssassin

Re: the automatic directory creation problem when using maildrop LDA

2011-01-31 Thread Daniel Bromberg
On 1/31/2011 8:06 PM, Victor Duchovni wrote: On Mon, Jan 31, 2011 at 07:58:30PM -0500, Daniel Bromberg wrote: I'm puzzling over the various discussions on using Courier's maildrop as the local agent with Postfix. It plays well enough, but not...great. First its error messages are less than

restricting outbound e-mail to be from the authenticated user only

2011-01-30 Thread Daniel Bromberg
Hi, I've recently started using postfix several weeks ago to run my e-mail services. Using spamassassin/spamd, greylists/SQLgrey, several RBLs, multiple domains, virtual users against MySQL tables in multiple domains, so somewhat knowledgeable, but mostly not. One of the companies I

Re: restricting outbound e-mail to be from the authenticated user only

2011-01-30 Thread Daniel Bromberg
, thanks for the quick follow-up, resolved. Daniel On 1/30/2011 5:58 PM, Noel Jones wrote: On 1/30/2011 3:31 PM, Daniel Bromberg wrote: Hi, I've recently started using postfix several weeks ago to run my e-mail services. Using spamassassin/spamd, greylists/SQLgrey, several RBLs, multiple domains

Re: Root privileges

2011-01-30 Thread Daniel Bromberg
Varad, I may be talking out of turn as I am fairly new to Postfix, but I think we need to distinguish between a *practical* risk and a *theoretical* risk. Theoretically, any software that runs as root, sufficiently attacked, could be used to compromise an entire system. The sufficient attack

Re: restricting outbound e-mail to be from the authenticated user only

2011-01-30 Thread Daniel Bromberg
at throttling or quota limits based on usage statistics (assuming overuse is the real concern). If this were a standard need, I imagine there would be a canned, comprehensive, iron-clad solution. -Daniel On 1/30/2011 10:16 PM, Noel Jones wrote: On 1/30/2011 6:17 PM, Daniel Bromberg wrote: Conceivably

Re: restricting outbound e-mail to be from the authenticated user only

2011-01-30 Thread Daniel Bromberg
, mouss wrote: Le 31/01/2011 01:17, Daniel Bromberg a écrit : Brilliant, reject_sender_login_mismatch is the perfect level of flexibility and is working now. I can add whatever authorizations I need to my virtual user table in the DB, in a separate column if need be. (right now I'm using