Re: Many lookup types are available. What is the guide for choosing one or another?

2014-07-12 Thread Titanus Eramius
I'm sorry, but this thread seems to have taken a detour. Being a Dane, I run into these kinds of responses all the time, simply because I find it counter-productive to sugarcoat things when writing English. On Sat, 12 Jul 2014 14:41:51 +0200 li...@rhsoft.net li...@rhsoft.net wrote: Am

Re: New TLS Forward Secrecy document

2013-12-19 Thread Titanus Eramius
On Wed, 18 Dec 2013 15:15:34 -0500 (EST) wie...@porcupine.org (Wietse Venema) wrote: Postfix has supported forward secrecy for TLS since version 2.2 when the TLS patch was adopted into Postfix. Things have changed a lot since then, both in TLS and in the real world. Viktor wrote up a

Re: Blocking LinkedIn 'Intro' mail hijacking?

2013-10-25 Thread Titanus Eramius
Fri, 25 Oct 2013 12:53:08 -0400 skrev Charles Marcus cmar...@media-brokers.com: Once you install the Intro app Well, if the app is not installed, it might solve the problem. Other than that, I think this is a bit off-topic for Postfix, since it only applys to Apples hand-held devices. Cheers,

Re: Setting up SPF in Postfix for sending

2013-08-16 Thread Titanus Eramius
Thu, 15 Aug 2013 22:56:53 -0700 skrev Rob Tanner rtan...@linfield.edu: I've googled around a quite a bit and while I can find lots of instruction on what I need in order for Postfix to validate incoming mail, I find nothing about what I need to do to make sure Postfix does whatever it needs

Re: Virtual Hosting (Ubuntu 12.04)

2013-06-25 Thread Titanus Eramius
Mon, 24 Jun 2013 20:22:00 -0500 skrev postfix2...@hushmail.com: Holy cow? Two things I didn't expect. Somebody would own a goofy name like that and somebody else would actually feel like pulling the records to test that. I suppose example.com is taken too, which is precisely why I avoided

Re: myhostname and PTR

2013-06-22 Thread Titanus Eramius
Thank you for the replys, they are very helpful. I own this domain, and the danish handler of .dk allows all settings in DNS to be altered, but the hosting provider does not. All records besides PTR is within my control at the provider, so I guess it's a design decision they have taken, and I

myhostname and PTR

2013-06-21 Thread Titanus Eramius
Hello I've searched several times about information on the PTR record, and what myhostname in main.cf should be. The problem is not the information, but the fact that I struggle to understand it... This server runs with the IP address 46.21.105.38 from a hosted VPS, and using dig to do a reverse

Re: postfix munin graphs

2013-06-18 Thread Titanus Eramius
Tue, 18 Jun 2013 07:38:38 -0700 skrev Grant emailgr...@gmail.com: I think I need to tell munin where my postfix logs are (/var/log/mail/current) since I use metalog. How can I do that? - Grant Try'n read some documentation http://munin.readthedocs.org/en/latest/ Then check out

Re: Is it time for 2.x.y - x.y?

2013-06-01 Thread Titanus Eramius
Fri, 31 May 2013 16:56:11 -0400 (EDT) skrev wie...@porcupine.org (Wietse Venema): After the confusion that Postfix 2.10 is not Postfix 2.1, maybe it is time to change the release numbering scheme. ... Wietse I think it would be ill advised to do so, since the current scheme conforms

Re: Serving Dovecot mailbox quota status to Postfix

2013-04-12 Thread Titanus Eramius
Thu, 11 Apr 2013 22:58:36 +0200 skrev Ralf Hildebrandt r...@sys4.de: I wrote a little something about how to prevent delivery to mailboxes over quota while still being in the SMTP dialogue: http://sys4.de/en/blog/2013/04/08/postfix-dovecot-mailbox-quota/ (Postfix/Dovecot) Very useful,

Re: Serving Dovecot mailbox quota status to Postfix

2013-04-12 Thread Titanus Eramius
Fri, 12 Apr 2013 15:27:26 +0200 skrev Ralf Hildebrandt r...@sys4.de: * Titanus Eramius tita...@aptget.dk: Very useful, thank you for writing and sharing. May I suggest the english Wiki-article for background on backscatter? URL? Sorry, off course http://en.wikipedia.org/wiki

Re: Trouble configuring backup MX to reject unauth destination

2013-04-06 Thread Titanus Eramius
Solved it :-) When sending to unknown users, Postfix now rejects the mail with User unknown in virtual mailbox table, and it does so for hosted (that is, virtual mailbox domains) domains as well. It seems the SRS-daemon* I have been using with the main.cf parameters recipient_canonical_maps

Re: Trouble configuring backup MX to reject unauth destination

2013-04-05 Thread Titanus Eramius
Mon, 25 Mar 2013 14:09:04 -0400 (EDT) skrev Wietse Venema wie...@porcupine.org: Titanus Eramius: MAIL FROM: 250 2.1.0 Ok RCPT TO:real-u...@cogky.dk 250 2.1.5 Ok RCPT TO:non-exist...@cogky.dk 250 2.1.5 Ok If non-exist...@cogky.dk is substituted with non-exist...@aptget.dk

Re: Trouble configuring backup MX to reject unauth destination

2013-04-05 Thread Titanus Eramius
Fri, 05 Apr 2013 08:49:39 -0400 skrev Brian Evans grkni...@scent-team.com: Thank you for the link, it was very informative, but didn't solve the problem. I also tried making a virtual_mailbox_maps MySQL query that always returned false, but Postfix still accepted all mail, and then

Re: Trouble configuring backup MX to reject unauth destination

2013-03-25 Thread Titanus Eramius
Fri, 22 Mar 2013 19:12:40 -0400 (EDT) skrev Wietse Venema wie...@porcupine.org: Test your lookups: postmap -q cogky.dk the-virtual_mailbox_domains-table This should return a result (the value does not matter). aptget:~# postalias -q cogky.dk

Re: Trouble configuring backup MX to reject unauth destination

2013-03-25 Thread Titanus Eramius
Mon, 25 Mar 2013 11:30:41 -0400 (EDT) skrev Wietse Venema wie...@porcupine.org: Titanus Eramius: Fri, 22 Mar 2013 19:12:40 -0400 (EDT) skrev Wietse Venema wie...@porcupine.org: Test your lookups: postmap -q cogky.dk the-virtual_mailbox_domains-table This should return

Re: Trouble configuring backup MX to reject unauth destination

2013-03-22 Thread Titanus Eramius
Tue, 19 Feb 2013 16:31:05 + skrev Viktor Dukhovni postfix-us...@dukhovni.org: On Tue, Feb 19, 2013 at 12:21:35PM +0100, Titanus Eramius wrote: I've tried with relay_domains, but it matches on domain-level which is too much. I then applied relay_recipient_maps, but it don't seem

Re: Trouble configuring backup MX to reject unauth destination

2013-03-22 Thread Titanus Eramius
Fri, 22 Mar 2013 16:55:21 -0400 (EDT) skrev Wietse Venema wie...@porcupine.org: Titanus Eramius: Besides aptget.dk this server also hosts cogky.dk (among others), and while unknown recipients is being correctly rejected with a 550 when sent to aptget.dk, they are not when sent to the other

Submission on 587 and check_policy_service

2013-03-21 Thread Titanus Eramius
I have set Postfix only to allow relaying through submission on port 587, and as extra safety, I have installed the PolicyD* service to run some rate limiting, and is trying to configure it with Postfix. Since the PolicyD service only needs to check mail that gets relayed, I am trying to call it

Re: Submission on 587 and check_policy_service

2013-03-21 Thread Titanus Eramius
Thu, 21 Mar 2013 12:25:24 -0400 skrev Brian Evans grkni...@scent-team.com: submission inet n - - - - smtpd ... -o ... ,check_policy_service inet:127.0.0.1:10031,reject Change this to -o ... ,check_policy_service,inet:127.0.0.1:10031,reject You

Re: Trouble configuring backup MX to reject unauth destination

2013-02-19 Thread Titanus Eramius
Thinking about this, I might have been to specific in my question. At the fundamental level I would like to have 2 or more Postfix servers capable of receiving virtual mail for multiple domains, where one of the servers also handles relaying and local delivery. The rest should function as backup

Re: Trouble configuring backup MX to reject unauth destination

2013-02-16 Thread Titanus Eramius
Sat, 09 Feb 2013 10:25:31 -0600 skrev Noel Jones njo...@megan.vbhcs.org: ... Nothing wrong with this setup. It's very easy to configure, requires no third-party software or additional packages, and it's easy to understand where your mail goes. I expect that's why it's used as an example

Re: Trouble configuring backup MX to reject unauth destination

2013-02-16 Thread Titanus Eramius
Sat, 16 Feb 2013 12:39:24 +0100 skrev DTNX Postmaster postmas...@dtnx.net: On Feb 16, 2013, at 12:18, Titanus Eramius tita...@aptget.dk wrote: I plan on upgrading Debians stable Postfix to the current stable version of 2.10 so I may benefit from postscreen, and that will probably

Re: Trouble configuring backup MX to reject unauth destination

2013-02-09 Thread Titanus Eramius
Fri, 08 Feb 2013 21:54:02 +0100 skrev Jeroen Geilman jer...@adaptr.nl: On 02/08/2013 06:02 PM, Titanus Eramius wrote: Feb 7 22:12:48 ntdata postfix/pickup[24843]: 048341743609: uid=5005 from=SRS0=3u76=L7=gmail.com=jimmiedcu...@nt-data.dk So you are...not re-injecting spamassassin

Re: Is a late header check possible?

2013-02-08 Thread Titanus Eramius
Thu, 07 Feb 2013 10:03:32 -0600 skrev Noel Jones njo...@megan.vbhcs.org: On 2/7/2013 8:58 AM, Titanus Eramius wrote: I'm running SpamAssassin as a content_filter on incoming mail which ads 4 spam-headers, one of them being X-Spam-Level:. The precise header varies, depending

Trouble configuring backup MX to reject unauth destination

2013-02-08 Thread Titanus Eramius
Hi all Please note that the last time I asked about the behavior of Postfix it turned out I had misunderstood the concept of relaying mail. It might be the case again. I'm running the mailserver that serves this domain + a few others, the mailserver at ubuntudanmark.dk and the mailservers at

Re: Trouble configuring backup MX to reject unauth destination

2013-02-08 Thread Titanus Eramius
Fri, 8 Feb 2013 09:45:07 -0600 skrev /dev/rob0 r...@gmx.co.uk: snip --- titanus@ntdata:/var/log$ grep 048341743609 mail.log.1 Feb 7 22:12:48 ntdata postfix/pickup[24843]: 048341743609: uid=5005 from=SRS0=3u76=L7=gmail.com=jimmiedcu...@nt-data.dk pickup(8) picks up mail which was

Is a late header check possible?

2013-02-07 Thread Titanus Eramius
I'm running SpamAssassin as a content_filter on incoming mail which ads 4 spam-headers, one of them being X-Spam-Level:. The precise header varies, depending on the spamscore. SpamAssassin ads one * for each spampoint, so a example-header could be: X-Spam-Level: I would like

Re: slow down deferred destination

2013-01-29 Thread Titanus Eramius
Tue, 29 Jan 2013 08:30:05 + skrev James Griffin jmz.grif...@kode5.net: * Birta Levente blevi.li...@gmail.com [2013-01-29 10:18:15 +0200]: Hi all How can I slow down deliveries to specified domain after temporary deferred? I have a list for marketing purposes and 2/3 part of

Re: Integration of content filter in master.cf

2013-01-16 Thread Titanus Eramius
Tue, 08 Jan 2013 16:24:11 -0600 skrev Noel Jones njo...@megan.vbhcs.org: On 1/8/2013 4:11 PM, Titanus Eramius wrote: I've had some trouble seeing the difference between -o overrides in main.cf and master.cf, but this really helps. main.cf parameters are used by all postfix

Re: Integration of content filter in master.cf

2013-01-16 Thread Titanus Eramius
Tue, 08 Jan 2013 23:59:31 +0100 skrev mouss mo...@ml.netoyen.net: This raises the question (or at least I think it do), if it's possible to force the users onto 587 by denying relay access to 25? fix the problem at the source: force the client to do the work: use different services

Integration of content filter in master.cf

2013-01-08 Thread Titanus Eramius
I'm a little unsure about best practice here, hence the question. Running /usr/sbin/spamd from the SpamAssassin package to scan mail, I've integrated it into /etc/postfix/master.cf with the following lines --- smtp inet n - n - - smtpd -o

Re: Integration of content filter in master.cf

2013-01-08 Thread Titanus Eramius
Tue, 08 Jan 2013 12:39:58 -0600 skrev Noel Jones njo...@megan.vbhcs.org: On 1/8/2013 10:47 AM, Titanus Eramius wrote: I'm a little unsure about best practice here, hence the question. Running /usr/sbin/spamd from the SpamAssassin package to scan mail, I've integrated it into /etc

Re: Integration of content filter in master.cf

2013-01-08 Thread Titanus Eramius
Tue, 8 Jan 2013 20:29:30 +0100 skrev DTNX Postmaster postmas...@dtnx.net: ... The more typical way to do this is for local mail to use the submission port 587. Sometimes folks redirect port 25 on the local network to 587 as a migration aid. This. Using the submission port is highly

Re: Integration of content filter in master.cf

2013-01-08 Thread Titanus Eramius
Tue, 08 Jan 2013 22:06:26 +0100 skrev Reindl Harald h.rei...@thelounge.net: Am 08.01.2013 21:48, schrieb Titanus Eramius: This raises the question (or at least I think it do), if it's possible to force the users onto 587 by denying relay access to 25? it's more a human problem than

Re: Integration of content filter in master.cf

2013-01-08 Thread Titanus Eramius
Tue, 08 Jan 2013 15:54:41 -0600 skrev Noel Jones njo...@megan.vbhcs.org: ... This raises the question (or at least I think it do), if it's possible to force the users onto 587 by denying relay access to 25? It's certainly possible to prevent relaying via port 25, and many sites do

Happy holidays to all

2012-12-27 Thread Titanus Eramius
Hi list I would like to express my gratitude to all the people on this list, whom helps new folks like me to run a mailserver. Especially Wietse would I like to thank, for making Postfix possible. I can't really imagine using anything else. So thank you all and happy holidays. Cheers, Titanus

Re: RoundCube vs squirrelmail (pros and cons)

2012-12-27 Thread Titanus Eramius
Thu, 27 Dec 2012 11:00:34 -0500 skrev Robert Moskowitz r...@htt-consult.com: On 12/27/2012 01:38 AM, Muhammad Yousuf Khan wrote: i want a web interface for our email access. To me roundcube seems more attractive/better then squirrel-mail (look wise) however i dont want to overlook better

Re: Postfix used as End to End and relaying to external SMTP server based on FROM address (possible?)

2012-12-16 Thread Titanus Eramius
On Sun, 16 Dec 2012 17:18:38 -0500 ashleygriffin.ca - Contact cont...@ashleygriffin.ca wrote: Hi Just so I understand this, what this really means is after version v2.03, and I have version v2.10? Some more general reading on the subject could include Wikipedia

Re: SASL auth and (local) relaying through telnet

2012-12-13 Thread Titanus Eramius
On Sun, 09 Dec 2012 16:37:12 +0100 mouss mo...@ml.netoyen.net wrote: humour mew :) you like cats too? or is it the pipe that you like? $ sudo grep /var/log/mail.log saves a few keystorkes For some odd reason I kindda do. Maybe it's the concept of a data-pipe itself, but I

Re: SASL auth and (local) relaying through telnet

2012-12-07 Thread Titanus Eramius
On Thu, 6 Dec 2012 20:32:17 -0600 /dev/rob0 r...@gmx.co.uk wrote: On Fri, Dec 07, 2012 at 01:23:21AM +0100, Titanus Eramius wrote: My highest concern is to setup an open relay by accident, so in the process I've used an online anti-spam tester several times: http://www.antispam

SASL auth and (local) relaying through telnet

2012-12-06 Thread Titanus Eramius
I'm not entirely sure how to formulate this question best in English, so please bear over with me. In the past 6 months I've set up several Postfix 2.7.1 servers, which uses Dovecot as LDA and as SASL auth. One of them runs this domain, but they are still in testing. My highest concern is to

Re: Sending of several delayed warnings

2012-11-20 Thread Titanus Eramius
On Mon, 19 Nov 2012 08:47:35 -0500 (EST) Wietse Venema wie...@porcupine.org wrote: Titanus Eramius: Running Postfix 2.7.x I have set delay_warning_time to 4 hours, but was wondering if it is possible to send out two or more bounce messages about a delayed message? If you want to know

Sending of several delayed warnings

2012-11-19 Thread Titanus Eramius
Running Postfix 2.7.x I have set delay_warning_time to 4 hours, but was wondering if it is possible to send out two or more bounce messages about a delayed message? What I am aiming for is, that if a message can not be delivered to the destination, then Postfix will inform the sender immediately,

Re: [OT] SPF - Do you use it

2012-10-06 Thread Titanus Eramius
On Fri, 05 Oct 2012 15:50:37 +0200 Reindl Harald h.rei...@thelounge.net wrote: forgot to mention you should use BOTH types TXT and SPF I did not even know that a SPF record type existed in DNS. At the homepage of SPF and other places I have read, it is indicated that SPF = TXT RR in DNS, but

Re: [OT] SPF - Do you use it

2012-10-06 Thread Titanus Eramius
On Fri, 05 Oct 2012 17:17:49 +0200 lst_ho...@kwsoft.de wrote: Zitat von Reindl Harald h.rei...@thelounge.net: Am 05.10.2012 16:04, schrieb lst_ho...@kwsoft.de: Zitat von Titanus Eramius tita...@aptget.dk: Slightly off topic. I hope it's OK when the mail is marked as such. I

[OT] SPF - Do you use it

2012-10-05 Thread Titanus Eramius
Slightly off topic. I hope it's OK when the mail is marked as such. I was just wondering if the users of this list use SPF in any way, and if so, to what extend? My former provider of mail added a header with the SPF-info retrived from DNS, and I'm considering to do the same with

Re: Danish letters in bounce_template_file

2012-09-28 Thread Titanus Eramius
On Thu, 27 Sep 2012 10:15:09 -0400 (EDT) Wietse Venema wie...@porcupine.org wrote: Instead it looks like this: Det her mailsystemet p?? v??rten mydomain. Bounce templates have supported non-ASCII from the start. I suspect that something after Postfix is stripping them. I just

Re: Danish letters in bounce_template_file

2012-09-28 Thread Titanus Eramius
On Thu, 27 Sep 2012 14:24:37 + Viktor Dukhovni postfix-us...@dukhovni.org wrote: postconf -b just stuffs the raw bits down your terminal, so this just means that your terminal charset matches the encoding of Danish characters in the file. What is your $LANG environment variable set to?

Re: Danish letters in bounce_template_file

2012-09-28 Thread Titanus Eramius
On Fri, 28 Sep 2012 11:13:15 +0200 Reindl Harald h.rei...@thelounge.net wrote: Am 28.09.2012 11:11, schrieb Titanus Eramius: I have tried to set the charset of bounce.cf to UTF-8 and then sent a few mails to the server to test it. When a bounce returns we'll know if UTF-8 did the trick

Danish letters in bounce_template_file

2012-09-27 Thread Titanus Eramius
I have translated bounce_template_file to Danish, and besides the localized letters, it works fine (the English part is still present in the error). In /etc/postfix/main.cf I have set delay_warning_time = 4 bounce_template_file = /etc/postfix/bounce.cf When I run postconf -b

Re: Backup MXs and databases

2012-09-04 Thread Titanus Eramius
On Tue, 04 Sep 2012 01:50:42 +0200 Reindl Harald h.rei...@thelounge.net wrote: Like this http://www.iheavy.com/2012/04/26/bulletproofing-mysql-replications-with-checksums/ * mixed transactional and non-transactional tables not relevant in this context why would someone mix

Backup MXs and databases

2012-09-03 Thread Titanus Eramius
Hello good folks I have recently brought my very first mailserver online, and have been testing it for the past month or so. Since the setup needs to be redundant, I have also brought a secondary mailserver online on it's own domain, and everything seems to run smoothly. It's a Debian, Postfix,

Re: Backup MXs and databases

2012-09-03 Thread Titanus Eramius
On Tue, 04 Sep 2012 00:39:08 +0200 Reindl Harald h.rei...@thelounge.net wrote: Am 03.09.2012 23:56, schrieb Titanus Eramius: MySQL Replication, which seems a bit dodgy, with the risk of silent data corruption. where do you see a risk of silent data corruption? if htis would