RE: limiting connections to a single host

2020-11-05 Thread Fazzina, Angelo
Maybe this section of the docs is what you are trying to accomplish ? http://www.postfix.org/TUNING_README.html#rope -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf

RE: postfix3 with opendkim

2020-03-10 Thread Fazzina, Angelo
Hi, may I ask what your Postfix config looks like for OpenDkim ? In Postfix 2.x it is close to this : smtpd_milters = inet:127.0.0.1:8891 non_smtpd_milters = $smtpd_milters milter_default_action = accept milter_protocol = 6 -ANGELO FAZZINA ang...@uconn.edu University of Connecticut, ITS,

Question on ver 2.6.6

2020-02-27 Thread Fazzina, Angelo
Hi, does Postfix have any built-in parameters to delete emails that postqueue shows like this ? A530D14D6D53528 Thu Feb 27 10:13:52 MAILER-DAEMON (host aspmx.l.google.com[209.85.144.26] said: 450-4.2.1 The user you are trying to contact is receiving mail too quickly. 450-4.2.1 Please

RE: How to trigger a script based on header

2019-12-05 Thread Fazzina, Angelo
ry i can't be more helpful, good luck. -ANGELO FAZZINA ang...@uconn.edu<mailto:ang...@uconn.edu> University of Connecticut, ITS, SSG, Server Systems 860-486-9075 Hi Angelo, thanks for your quick reply. I had a look at your solution, but I'd need a filter on the subject, not on sender o

RE: How to trigger a script based on header

2019-12-04 Thread Fazzina, Angelo
Hi, AFA I know there is the “argv” parameter in master.cf that can run scripts you create, there may be others. This is my test config: autoreply unix - n n - - pipe flags=DFuser=nobody argv=/usr/local/bin/angelo $sender $recipient

RE: looking for a little documentation please

2019-11-21 Thread Fazzina, Angelo
for a little documentation please On 11/21/2019 10:18 AM, Fazzina, Angelo wrote: > Thank you for clearing that up. > Since this client I have is having trouble and I am trying to determine if > the clients IP is the one generating these log entries do you think these to > settings will give

RE: looking for a little documentation please

2019-11-21 Thread Fazzina, Angelo
: looking for a little documentation please > On Nov 21, 2019, at 10:54 AM, Fazzina, Angelo > wrote: > > ov 21 09:00:15 mail5 postfix/smtpd[31265]: lost connection after CONNECT from > unknown[unknown] > Nov 21 09:00:15 mail5 postfix/smtpd[31265]: disconnect from unknown[unknow

looking for a little documentation please

2019-11-21 Thread Fazzina, Angelo
Hi, i read this http://www.postfix.org/OVERVIEW.html which got me to this http://www.postfix.org/smtpd.8.html Then i got lost... I am trying to diagnose the details of what smtpd does when a client tries to connect to my postfix server, based on these 2 lines Nov 21 09:00:15 mail5

RE: OpenDKIM , Postfix , SpamAssassin, Amavisd-New, SPF and FreeBSD

2019-10-25 Thread Fazzina, Angelo
From what I can tell the DNS record was not found. Oct 23 18:26:14 triggerfish opendkim[5845]: E0C34CB4A69: key retrieval failed (s=zendesk1,

RE: Trying to understand error message in logs

2019-10-11 Thread Fazzina, Angelo
ll* the directories in the path leading to the lockfile for proper access (at least eXecute permission) and no conflicting ACLs (as viktor already wrote). --tmolitor Am Freitag, 11. Oktober 2019, 15:00:36 CEST schrieb Viktor Dukhovni: > Reboot your system, and try again. > > > On Oct 1

RE: Trying to understand error message in logs

2019-10-11 Thread Fazzina, Angelo
: Friday, October 11, 2019 11:55 AM To: Postfix users Subject: Re: Trying to understand error message in logs Fazzina, Angelo: > Hi, thank you for trying to help. > I hope this answers your question. > > [root@mail6 pid]# pwd > /var/spool/postfix/pid > [root@mail6 pid]# ll >

RE: Trying to understand error message in logs

2019-10-11 Thread Fazzina, Angelo
. /usr/libexec/postfix/postfix-files Also config is same on working server mail5.its.uconn.edu -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From: Marty Lee Sent: Friday, October 11, 2019 11:35 AM To: Fazzina

Trying to understand error message in logs

2019-10-11 Thread Fazzina, Angelo
Hi, I am building new server RHEL7 and Postfix 2.10 The log file is constantly outputting this... Oct 11 11:15:08 mail6 postfix/master[3266]: warning: process /usr/libexec/postfix/smtpd pid 18008 exit status 1 Oct 11 11:15:08 mail6 postfix/master[3266]: warning: /usr/libexec/postfix/smtpd: bad

RE: outbound.protection.outlook.com

2019-10-02 Thread Fazzina, Angelo
Hi, not sure if this helps but, these are the networks that my postfix server is setup to send email to O365 so users get their mail delivered # Microsoft Networks 23.103.132.0/22 23.103.136.0/21 23.103.144.0/20 23.103.198.0/23 23.103.200.0/22 23.103.212.0/22 40.92.0.0/14 40.107.0.0/17

RE: sasl config confusion postfix 2.10.1-- FIXED

2019-08-07 Thread Fazzina, Angelo
= noanonymous smtp_use_tls = yes and ran yum install cyrus-sasl-plain and it works fine now. Case closed. -ANGELO FAZZINA ang...@uconn.edu University of Connecticut, ITS, SSG, Server Systems 860-486-9075 From: owner-postfix-us...@postfix.org On Behalf Of Fazzina, Angelo

sasl config confusion postfix 2.10.1

2019-08-07 Thread Fazzina, Angelo
Hi, I added this to main.cf relayhost = [massmail.uconn.edu]:587 smtp_fallback_relay = [massmail.uconn.edu]:587 smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/nexus_passwd smtp_sasl_security_options = I added this to master.cf submission inet n - n -

RE: SPF failure

2019-07-15 Thread Fazzina, Angelo
When you plug your domain [forevermetalroof.com] in here you see too many lookups explained better https://dmarcian.com/spf-survey/ limit is 10. -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From:

RE: Rejecting mail if LDAP lookup returns empty

2019-06-21 Thread Fazzina, Angelo
Hi, what is the output when you test if testing is possible of say these commands ? postmap -q racoo...@tamu.edu ldap:/etc/postfix/tamu.ldap postmap -q bad_a...@tamu.edu ldap:/etc/postfix/tamu.ldap if I'm sending you down the wrong rabbit hole I am sure someone more savvy will help out.

RE: Add header based on subject

2019-06-21 Thread Fazzina, Angelo
I have a question, wouldn't that break a DKIM sig if the incoming email had one ? Thank you. -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf Of Ralph Seichter Sent:

RE: How to tell my ISP there's a problem

2019-06-18 Thread Fazzina, Angelo
Hi, your Postfix logs look normal to my untrained eyes. If it was me i would figure out the best contact email for the ISP and tell them as much detailed info as i could, so it is easy for them to get you the answer to "what happened to X email ?". Looks like they just need this line : Jun 17

RE: OpenDKIM not signing

2019-04-09 Thread Fazzina, Angelo
Hi, not sure my SOP will help you but here it is and it does work. https://linux.uits.uconn.edu/dkim-review-of-all-aspects/ Your logs will be the best place to find problems. Good Luck. -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075

RE: Release from HOLD

2019-03-21 Thread Fazzina, Angelo
anges ? If so then I cannot help you. And you need more expert advice. -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From: Rafael Azevedo Sent: Thursday, March 21, 2019 10:34 AM To: Fazzina, Angelo Cc: Postfi

RE: Release from HOLD

2019-03-21 Thread Fazzina, Angelo
Hi, you may get more help by providing helpful info like # postconf -n | grep -i transport -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf Of Rafael Azevedo Sent:

Re: DKIM setup writeup for multi domain?

2019-03-12 Thread Fazzina, Angelo
Hi, wouldn't the answer to the OP's question be to just list all the domains they want signed in the file /etc/opendkim/SigningTable Assuming they are using Opendkim. I wrote some documentation here. https://linux.uits.uconn.edu/dkim-review-of-all-aspects/ -ANGELO FAZZINA ang...@uconn.edu

RE: stress tested postfix

2019-03-06 Thread Fazzina, Angelo
Hi, I am curious why no one has recommended using what looks like a built-in testing [benchmark] tool in Postfix ? /usr/sbin/smtp-source I gave the man page a quick look and it seemed it may help, based on the given specs provided by the OP. I have versions 2.6.x and 2.10.x and assume it is

RE: New SASL error when relaying through gmail

2019-01-15 Thread Fazzina, Angelo
It may be time to crank up debug level on Postfix or do tcpdump capture to see what you are sending over the wire when it works and when it doesn't ? -ANGELO FAZZINA ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From:

RE: New SASL error when relaying through gmail

2019-01-14 Thread Fazzina, Angelo
Hi, can you manually use commands to test the U/P are working from your postfix server ? 1. Run this to test connectivity to your server openssl s_client -starttls smtp -connect your.host.name:587 Typical OUTPUT = 250 DSN quit 221 2.0.0

RE: New SASL error when relaying through gmail

2019-01-14 Thread Fazzina, Angelo
Hi, I suspect this is wrong relayhost = [smtp.gmail.com]:587 that looks like typical setup for an email client using IMAP and that is the config for sending email. It would require a username and password.

RE: dnsbl postscreen - not blocking

2018-12-19 Thread Fazzina, Angelo
Hi, I don’t know the answer to your question but from this site http://www.sorbs.net/using.shtml it looks like the IP 209.85.166.196 seems to have tripped one of these : new.spam.dnsbl.sorbs.net127.0.0.6 recent.spam.dnsbl.sorbs.net127.0.0.6 old.spam.dnsbl.sorbs.net127.0.0.6

RE: Looking for appropriate place to ask a DKIM question

2018-12-17 Thread Fazzina, Angelo
Thank you. I am still setting up the servers DNS TXT records. I started with DKIM, have not got around to DMARC yet, but I guess that will be the next thing to configure and then more testing. -ANGELO FAZZINA ITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail

testing question

2018-12-14 Thread Fazzina, Angelo
Hi, I am trying to simulate a DKIM failure and have not been able to figure out how. Goal: test my "report" TXT record actually works. Talking about RFC 6651 I was hoping that with postfix and opendkim running and signing emails I could just turn opendkim off and send an email through and get

RE: SSL not working after unwanted server migration

2018-12-10 Thread Fazzina, Angelo
Hi, once you correct your configuration this may help you test it is correct 1. Run this to test connectivity to your server via STARTTLS [Submission in master.cf] openssl s_client -starttls smtp -connect your.host.name:587 Typical OUTPUT = 250 DSN quit

RE: looking for any options to better deal with mail looping

2018-11-28 Thread Fazzina, Angelo
to better deal with mail looping On 11/16/2018 2:41 PM, Fazzina, Angelo wrote: > Hi again, > Even though my configuration does what I need it to do, it seems to have > broken something else that needs to still work. > Did I forget something or just did this wrong ? > Will thi

RE: looking for any options to better deal with mail looping

2018-11-16 Thread Fazzina, Angelo
6-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf Of Viktor Dukhovni Sent: Tuesday, November 13, 2018 4:30 PM To: Postfix users Subject: Re: looking for any options to better deal with mail looping > On Nov 13, 2018, at 4:22 PM, Fazzina, Angelo wrote

RE: looking for any options to better deal with mail looping

2018-11-13 Thread Fazzina, Angelo
ystems 860-486-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf Of Viktor Dukhovni Sent: Wednesday, November 7, 2018 4:55 PM To: postfix users Subject: Re: looking for any options to better deal with mail looping > On Nov 7, 2018, at 3:26 PM, Fazzina,

RE: looking for any options to better deal with mail looping

2018-11-07 Thread Fazzina, Angelo
Message- From: owner-postfix-us...@postfix.org On Behalf Of Wietse Venema Sent: Wednesday, November 7, 2018 11:38 AM To: Postfix users Subject: Re: looking for any options to better deal with mail looping Fazzina, Angelo: > Hi, I have a domain that has MX point to O365 and then O365 relays > m

looking for any options to better deal with mail looping

2018-11-07 Thread Fazzina, Angelo
Hi, I have a domain that has MX point to O365 and then O365 relays mail to Postfix server. Currently, Postfix does a lookup in a MySql table to know where to relay the email to, AFA next hop. If not found in table Postfix looks up MX and relays the email. I want to know if there is a more

Postscreen newb questions

2018-10-31 Thread Fazzina, Angelo
Hi, i am learning/testing Postscreen on Postfix 2.10.1 I read the man page and need a little help understanding this : This program should not be used on SMTP ports that receive mail from end-user clients (MUAs). In a typical deployment, postscreen(8) handles the MX service on TCP

RE: Not sure if i have a DNS or Postfix issue ?

2018-09-20 Thread Fazzina, Angelo
Dukhovni Sent: Thursday, September 20, 2018 12:10 PM To: Postfix users Subject: Re: Not sure if i have a DNS or Postfix issue ? > On Sep 20, 2018, at 11:37 AM, Fazzina, Angelo > wrote: > > User sends email to ling...@listserv.uconn.edu. > [two of recipients are woodsan...

Not sure if i have a DNS or Postfix issue ?

2018-09-20 Thread Fazzina, Angelo
Hi, not sure if i am looking in the wrong place: If you want my postconf I can get it. User sends email to ling...@listserv.uconn.edu with client. [one of recipients is woodsan...@msn.com and jb...@albanylaw.edu] MX for listserv.uconn.edu is spam boxes. Email goes to spam boxes, and spam boxes

RE: Want to be sure i am not throttling user.

2018-08-31 Thread Fazzina, Angelo
. > On Aug 29, 2018, at 1:53 PM, Fazzina, Angelo wrote: > > [root@mail4 log]# cat maillog-20180829 |grep 137.99.149.148 |grep -v > disconnect |grep -v submission|grep connect You forgot to aggregate: $ ... | awk '{print $3}' | sed -e 's/.:..$/0/' | uniq -c 15 09:20 28 09:30 30 09:4

RE: Want to be sure i am not throttling user.

2018-08-29 Thread Fazzina, Angelo
not throttling user. > On Aug 29, 2018, at 12:19 PM, Fazzina, Angelo > wrote: > > In answer to: "I get a quick NXDOMAIN. Is that also true for your mail > server?" > Yes i get the same results when i do a "dig -x 137.99.149.148" or >

RE: Want to be sure i am not throttling user.

2018-08-29 Thread Fazzina, Angelo
Hi, the client/[sender] ip 137.99.149.148 is a users desktop running Outlook, likely with a DHCP address. In answer to: "I get a quick NXDOMAIN. Is that also true for your mail server?" Yes i get the same results when i do a "dig -x 137.99.149.148" or "nslookup 137.99.149.148" My

RE: Want to be sure i am not throttling user.

2018-08-29 Thread Fazzina, Angelo
-us...@postfix.org On Behalf Of Viktor Dukhovni Sent: Tuesday, August 28, 2018 2:39 PM To: Postfix users Subject: Re: Want to be sure i am not throttling user. > On Aug 28, 2018, at 1:47 PM, Fazzina, Angelo wrote: > > Hi, i am troubleshooting a client complaint. > This user “w

Want to be sure i am not throttling user.

2018-08-28 Thread Fazzina, Angelo
Hi, i am troubleshooting a client complaint. This user "wellness" Aug 28 10:22:27 mail5 postfix/smtpd[7534]: EE46E2FB: client=unknown[137.99.149.148], sasl_method=LOGIN, sasl_username=wellness Some user feedback : On Friday I sent a batch of 436 and it took 11

RE: Spamhaus blocking Spectrum IPs; rbl_override not working

2018-08-21 Thread Fazzina, Angelo
Hi, they are return codes. https://www.spamhaus.org/news/article/713/changes-in-spamhaus-dbl-dnsbl-return-codes -ANGELO FAZZINA ITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075

Flags question in master.cf

2018-07-25 Thread Fazzina, Angelo
Hi, i have this in my master file. autoreply unix - n n - - pipe flags=DFuser=nobody argv=/usr/local/bin/angelo $sender $recipient $original_recipient $user $domain everything is working as I want. Is there a flag or macro that can get me

RE: Open Relay on local lan

2018-07-25 Thread Fazzina, Angelo
Hi, I run 2.10.1 I think this should help http://www.postfix.org/VIRTUAL_README.html maybe virtual_alias_domains = test.net test.com not sure what you would need to configure for mynetworks = http://www.postfix.org/postconf.5.html#mynetworks -ANGELO FAZZINA ITS Service Manager: Spam and

RE: new strangeness with O365 [OT] --TESTING

2018-07-12 Thread Fazzina, Angelo
I'm conducting a test to see if the URL rewrite issue is better, for me anyway. Please ignore. Test = http://postfix.1071664.n5.nabble.com/new-strangeness-with-O365-td96344.html Should be http:// postfix.1071664.n5.nabble.com /new-strangeness-with-O365-td96344.html -ANGELO FAZZINA ITS

RE: STARTTLS / DANE difficulties?

2018-07-10 Thread Fazzina, Angelo
, Server Systems 860-486-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf Of Fazzina, Angelo Sent: Tuesday, July 10, 2018 1:06 PM To: postfix-users@postfix.org Subject: RE: STARTTLS / DANE difficulties? When you test connecting to your servers yourself do you get

RE: STARTTLS / DANE difficulties?

2018-07-10 Thread Fazzina, Angelo
When you test connecting to your servers yourself do you get any errors ? Not sure if sslv3 is ok to see if using TLS ??? Commands to try, just replace with your server name openssl s_client -connect mta5.uits.uconn.edu:465 openssl s_client -starttls smtp -connect mta5.uits.uconn.edu:587

RE: Can postfix send encrypted but not authenticated emails ?

2018-06-29 Thread Fazzina, Angelo
0-486-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf Of Matus UHLAR - fantomas Sent: Friday, June 29, 2018 1:49 PM To: postfix-users@postfix.org Subject: Re: Can postfix send encrypted but not authenticated emails ? On 28.06.18 16:41, Fazzina, Angelo wrote: > Hi, I have

RE: may not be appropriate question but figured what the hay... -- Dovecot

2018-06-29 Thread Fazzina, Angelo
: owner-postfix-us...@postfix.org On Behalf Of Fazzina, Angelo Sent: Friday, June 29, 2018 1:00 PM To: Postfix users Subject: may not be appropriate question but figured what the hay... -- Dovecot Hi, based on commands below, anyone know why i would get these errors ? Jun 29 12:05:02 mail2 dovecot

may not be appropriate question but figured what the hay... -- Dovecot

2018-06-29 Thread Fazzina, Angelo
Hi, based on commands below, anyone know why i would get these errors ? Jun 29 12:05:02 mail2 dovecot: imap-login: Login: user=, method=PLAIN, rip=137.99.24.120, lip=137.99.90.68, mpid=6752, TLS Jun 29 12:05:02 mail2 dovecot: imap(cec-support-comment): Error: user cec-support-comment:

RE: Can postfix send encrypted but not authenticated emails ? -- FIXED

2018-06-28 Thread Fazzina, Angelo
Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut,  ITS, SSG, Server Systems 860-486-9075 -Original Message- From: owner-postfix-us...@postfix.org On Behalf Of Fazzina, Angelo Sent: Thursday, June 28, 2018 3:26 PM To: Postfix

RE: Can postfix send encrypted but not authenticated emails ?

2018-06-28 Thread Fazzina, Angelo
: Re: Can postfix send encrypted but not authenticated emails ? > On Jun 28, 2018, at 12:41 PM, Fazzina, Angelo > wrote: > > Hi, I have been reading the online docs for TLS_README.html and > SASL_README.html but still having trouble deducing if I can get Postfix 2.6 > to

Can postfix send encrypted but not authenticated emails ?

2018-06-28 Thread Fazzina, Angelo
Hi, I have been reading the online docs for TLS_README.html and SASL_README.html but still having trouble deducing if I can get Postfix 2.6 to accept email over port 587 without giving Postfix a username and password ? My current understanding of how my server deals with mail is traffic on

RE: Feedback on Tutorial

2018-06-19 Thread Fazzina, Angelo
Hi, I took a quick look, I did not see which version of Postfix this was based on, you may want to mention it as some settings require a minimum Postfix version to be running. As well as some command examples you gave have minimum versions needed to work. I am no expert but I get lots of legit

RE: new strangeness with O365

2018-05-17 Thread Fazzina, Angelo
Hi, I'm not sure but this may be getting off topic but here goes. I use full Outlook client and I think I have it setup to make new emails in Plain text, other options are RTF and HTML. I am guessing replies come back in same format, but could easily be changed by replying client. I guess I

new strangeness with O365

2018-05-17 Thread Fazzina, Angelo
Hi, wanted to ask if anyone has this issue and how they deal with it ? My work email is on O365 and we just turned ATP and EOP on so emails with URLS are being rewritten. That is fine, but my issue is with plain text emails from this list. when they come in i get the rewritten hyper link in the

RE: check rcpt to, from and destination in one session - nested smtpd_restriction_classes?

2018-05-15 Thread Fazzina, Angelo
Hi, sounds like you want If from ( benachrichtig...@cubewerk.de) and from (10.8.1.1-3) Then allow Else REJECT Sounds like you would need a regex expression to catch two conditions and then act on it. Not sure postfix can store result of first check and

RE: Ptr DNS and domains

2018-05-09 Thread Fazzina, Angelo
Hi, I would think if you are relaying mail for multiple domains then you may not need to. I relay/handle mail for many sub domains of uconn.edu and some don’t have PTR records. If it is not a sub domain I think you should follow best practice, and my guess is yes you want DNS configured as

RE: postfix maximum load capacities by official document

2018-05-01 Thread Fazzina, Angelo
users <postfix-users@postfix.org> Subject: Re: postfix maximum load capacities by official document > On May 1, 2018, at 12:50 PM, Fazzina, Angelo <angelo.fazz...@uconn.edu> wrote: > > Yes, I was guessing, must have be active and not incoming queue. > Thanks for the explan

RE: postfix maximum load capacities by official document

2018-05-01 Thread Fazzina, Angelo
ial document > On May 1, 2018, at 10:38 AM, Fazzina, Angelo <angelo.fazz...@uconn.edu> wrote: > > Hi, okay that makes sense. > > I guess my next question is what is going on when we get a bulk mail campaign > or spam attack and I see the /var/spool/postfix/incoming

RE: postfix maximum load capacities by official document

2018-05-01 Thread Fazzina, Angelo
fix-users@postfix.org> Subject: Re: postfix maximum load capacities by official document Fazzina, Angelo: > Hi again, I guess I don't have a clear understanding of this in the man page ? > > Ran command > [root@mta1 ~]# man 5 postconf > > default_recipient_limit (defaul

RE: postfix maximum load capacities by official document

2018-05-01 Thread Fazzina, Angelo
-us...@postfix.org> On Behalf Of Viktor Dukhovni Sent: Monday, April 30, 2018 6:12 PM To: Postfix users <postfix-users@postfix.org> Subject: Re: postfix maximum load capacities by official document > On Apr 30, 2018, at 5:02 PM, Fazzina, Angelo <angelo.fazz...@uconn.edu> wrote: > &

RE: postfix maximum load capacities by official document

2018-04-30 Thread Fazzina, Angelo
Hi, I don't mean to hi-jack this thread but figured this was related. I was asked in 2014 what rate of mail could flow through per hour. I gave this response. Do you see anything dangerous in my assumptions ? Thank you for looking. BTW Postfix version is likely 2.6 ### I took a stab

RE: alternate ways to mark messages with Received SPF : None

2018-04-24 Thread Fazzina, Angelo
Hi, wouldn’t that break the DKIM sig if the email was signed ? -ANGELO FAZZINA ITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut, ITS, SSG, Server Systems 860-486-9075 From: owner-postfix-us...@postfix.org

RE: user unknown in virtual mailbox table

2018-04-18 Thread Fazzina, Angelo
You will get more help if you provide helpful info. http://www.postfix.org/DEBUG_README.html#mail -ANGELO FAZZINA ITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut, ITS, SSG, Server Systems 860-486-9075 From:

RE: Howto configure Postfix to relay messages from a specific email address

2018-03-20 Thread Fazzina, Angelo
Hi, I use postfix version 2.6 or 2.10 I forget Can you test setting these settings ? In main.cf #relay_domains = test.uconn.edu $mydestination #relay_recipient_maps = hash:/etc/postfix/relay_recipients tfix]# more relay_recipients angelo.fazz...@test.uconn.edu OK Not sure is

RE: Postfix - Amavis erroneus SPAM

2018-03-12 Thread Fazzina, Angelo
Hi, I would expect you need to search your logs for all the entries for this email CB9E3837E0F To see exactly what happened and go from there ? Good Luck. -ANGELO FAZZINA ITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut, 

RE: Postfix using all CPU after nightly mail submission

2018-02-21 Thread Fazzina, Angelo
Hi Zach, my postfix box is on Vmware too….Did the folks that manage VmWare see any oddity? No alarms ? No performance spikes ? Also I use Zabbix for monitoring so I get email warnings when certain thresholds are exceeded. Maybe the backend VMware storage is having an issue ? shooting from the

RE: Postfix queue

2018-02-12 Thread Fazzina, Angelo
Hi, I would think you could write a script to do what you need ? Here is one I use that is in Python. [root@mta3 alf02013]# Summary Usage: Summary -s -h {-|POSTFIX_LOG} [ POSTFIX_LOG .. ] Summarize postfix mail log. Gzipped files are OK. Print one line for each delivered email,

RE: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Fazzina, Angelo
My RHEL7 install but it install Postfix 2.10 and I use a LDAP backend for password storage. Not sure it helps you ? -ALF RAN vi /etc/postfix/master.cf submission inet n - n - - smtpd -o syslog_name=postfix/submission -o

RE: detect suspicious logins

2017-12-19 Thread Fazzina, Angelo
I bet I could get something like that going easily, as my logs goto Splunk. Just not the biggest fire to put out at the moment. -ANGELO FAZZINA UITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut,  UITS, SSG, Server Systems

RE: Proper procedure for importing TLS cert & private key for Postfix use

2017-12-08 Thread Fazzina, Angelo
This "/etc/ssl/private/tlsprivate.key": Does not equal "/etc/ssl/private/tlsprivatekey.key" -ANGELO FAZZINA UITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut, UITS, SSG, Server Systems 860-486-9075 From:

RE: smtpd_sasl_auth_enable is true but sasl support is not compiled in (postfix-gento)

2017-11-30 Thread Fazzina, Angelo
and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut,  UITS, SSG, Server Systems 860-486-9075 -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Fazzina, Angelo Sent: Thursday, November 30, 20

RE: smtpd_sasl_auth_enable is true but sasl support is not compiled in (postfix-gento)

2017-11-30 Thread Fazzina, Angelo
Mine that I use to test openssl s_client -connect massmail.uconn.edu:465 openssl s_client -starttls smtp -connect massmail.uconn.edu:587 telnet is just for port 25 YMMV. -ANGELO FAZZINA UITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University

RE: smtpd_sasl_auth_enable is true but sasl support is not compiled in (postfix-gento)

2017-11-30 Thread Fazzina, Angelo
Hi, I put STARTTLS on port 587 SSL on port 465 and regular on port 25 Not sure how to do encrypted and unencrypted on port 25 ? -ANGELO FAZZINA UITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut,  UITS, SSG, Server

RE: Backup mx relay got rejected due to SPF

2017-11-17 Thread Fazzina, Angelo
Hi, to me it looks like email from= to= Came in and was cleaned Nov 17 11:13:00 mail MailScanner[9148]: Content Checks: Detected and have disarmed web bug, phishing tags

RE: Minimun postfix

2017-10-26 Thread Fazzina, Angelo
Hi, I'm pretty sure you need to 1. Configure Zimbra 2. Configure Postfix so it accepts mail that is destined for the Zimbra server, whatever domain that is. Then postfix is configured to relay The mail to the next hop, which sounds like the Zimbra server from your description of the mail

RE: Virtual alias maps question

2017-10-24 Thread Fazzina, Angelo
Hi again, Thanks, that was helpful, and got me on the right track. I am pretty confident it's working now. "test.uconn.edu" is not in the virtual_alias_domains list BTW. /etc/postfix/virtual = angt...@uconn.edu angelo.fazz...@test.uconn.edu angelo.fazz...@test.uconn.edu

RE: Virtual alias maps question

2017-10-24 Thread Fazzina, Angelo
and Virus Prevention Mass Mailing G Suite/Gmail ang...@uconn.edu University of Connecticut, UITS, SSG, Server Systems 860-486-9075 From: Vernon Fort [mailto:vf...@provident-solutions.com] Sent: Tuesday, October 24, 2017 2:34 PM To: Fazzina, Angelo <angelo.fazz...@uconn.edu>; postfix

Virtual alias maps question

2017-10-24 Thread Fazzina, Angelo
Hi, I added a test domain for my email address only. [root@mta4 postfix]# postmap -q "angelo.fazz...@uconn.edu" /etc/postfix/virtual angelo.fazz...@test.uconn.edu [root@mta4 postfix]# more main.cf|grep virtual_alias_maps #virtual_alias_maps =

easy DKIM question, at least i think it is...

2017-10-20 Thread Fazzina, Angelo
Hi, i have a small DKIM question. config files are at bottom of email. I got it working but don't understand why ? The one change i made to get it to work was add 137.99.0.0/16 to the TrustedHosts file. So tests with from of x...@appmail.uconn.edu and x...@uconn.edu are getting signed and I

is this the correct DKIM mailing list ?

2017-10-19 Thread Fazzina, Angelo
http://mipassoc.org/mailman/listinfo/ietf-dkim I joined but after a few days nothing but crickets after my post to the list. Is there a different list you guys use to discuss DKIM ? Thanks. -ANGELO FAZZINA UITS Service Manager: Spam and Virus Prevention Mass Mailing G Suite/Gmail

Re: Sending with Multiple Domain Suffixes from Single Apache Server Box

2017-10-10 Thread Fazzina, Angelo
t; when sending mail from a home computer to the Internet. From: owner-postfix-us...@postfix.org <owner-postfix-us...@postfix.org> on behalf of Fazzina, Angelo <angelo.fazz...@uconn.edu> Sent: Tuesday, October 10, 2017 3:54 PM To: certified; postf

Re: Sending with Multiple Domain Suffixes from Single Apache Server Box

2017-10-10 Thread Fazzina, Angelo
Hi, i am not too savvy, but i think you could do this in PHP or in Postfix. My guess is, if you know what the "returndomain" is from using PHP code you could add it to the transport file maybe, and run postmap to update transport file ? I assume you are pulling the "returndomain" from your

RE: Trouble sending email to myself on new server i am building

2017-10-02 Thread Fazzina, Angelo
/2017 1:31 PM, Fazzina, Angelo wrote: > > Oct  2 14:24:43 mta5 postfix/smtp[13114]: connect to > uconn-mail-onmicrosoft-com.mail.protection.outlook.com[207.46.163.106]:25: > Connection timed out "connection timed out" almost always means some sort of network error outsid

RE: Questions about mynetworks_style parameter in main.cf

2017-10-02 Thread Fazzina, Angelo
Hi, For this part : “On Linux, this works correctly only with interfaces specified with the ifconfig command” I think they are saying you can find valid interface names using the ifconfig command. The new way in RHEL 7 is "ip addr" replaces "ifconfig". This: does that mean that network

Trouble sending email to myself on new server i am building

2017-10-02 Thread Fazzina, Angelo
Hi, Ready to pull my hair out herei have a server running 2.6 and everything works fine. Trying to build new server with postfix 2.10.1 I have my postconf -n and postfix logs of my test email. This data is from the new 2.10.1 box. Do you need anything else ? Oct 2 14:23:43 mta5

RE: can't get server to start postfix --ISSUE RESOLVED

2017-09-08 Thread Fazzina, Angelo
: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Viktor Dukhovni Sent: Friday, September 8, 2017 10:17 AM To: postfix-users@postfix.org Subject: Re: can't get server to start postfix > On Sep 8, 2017, at 10:07 AM, Fazzina, Angelo > <angelo.fazz...@

RE: can't get server to start postfix

2017-09-08 Thread Fazzina, Angelo
, Sep 07, 2017 at 09:34:55PM +, Fazzina, Angelo wrote: > Victor: I messed with it a little but no change. I did not suggest "messing" with it. :-) > [root@mail2 ~]# bash -c "ls -ld /var{,/lib{,/postfix{,/master.lock}}}" > drwxr-xr-x. 20 rootroot4096 Mar

RE: can't get server to start postfix

2017-09-07 Thread Fazzina, Angelo
t;) - you might have to install the tools, I think they're part of the "process tools" package on Debian (but that's completely from memory) - google is yourf friend Miles Fidelman On 9/7/17 2:14 PM, Fazzina, Angelo wrote: > Server has only been on 25 minutes, I rebooted it. > > Can you s

RE: can't get server to start postfix

2017-09-07 Thread Fazzina, Angelo
server to start postfix you have a zombie master process hanging around. Stop postfix. Get a list of all running processes and check if there's a orphaned master process hanging around. Kill it. Start postfix. p@rick * Fazzina, Angelo <angelo.fazz...@uconn.edu>: > Hi, > All of a su

can't get server to start postfix

2017-09-07 Thread Fazzina, Angelo
Hi, All of a sudden postfix won't load ? where should I look next ? thanks. I tried [root@mail2 postfix]# service postfix start Starting postfix: [ OK ] Logs show Sep 7 16:50:47 mail2 postfix/postfix-script[3214]: starting the Postfix mail system

RE: no response from postfix on submission port (or 465)

2017-08-23 Thread Fazzina, Angelo
If anyone needs for future testing openssl s_client -starttls smtp -connect mail6.uits.uconn.edu:587 openssl s_client -connect 137.99.26.36:465 Replace IP/hostname with yours. -ALF -Angelo Fazzina Operating Systems Programmer / Analyst University of Connecticut,  UITS, SSG, Server Systems

RE: Recommendations on an spf record?

2017-08-18 Thread Fazzina, Angelo
Hi, I was unaware of the controversy. I can tell you that for the specific example given : (For example, a person who uses their home ISP's SMTP servers to send mail with their work email as the address.) I was for years tagging and delivering on SPF failures with my appliances. Just recently

smtpd_recipient_restrictions and smtpd_relay_restrictions difference ??

2017-08-17 Thread Fazzina, Angelo
Hi, I am reading "man 5 postconf" of version 2.10.1 I am building new server with it, from old 2.6.6. My question is my server with 2.6 has smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/maps/block_to, permit_mynetworks, permit_sasl_authenticated,

RE: reloading postfix with systemd

2017-08-10 Thread Fazzina, Angelo
IMHO I would think they both work for backwards compatibility and over time "service postfix reload" will eventually be depreciated and no longer be a valid command. I expect that to take years. -ALF -Angelo Fazzina Operating Systems Programmer / Analyst University of Connecticut,  UITS,

  1   2   >