gmane.mail.postfix.user

Change (Postfix) label in mail headers

Chris — 2012-05-26T11:45:28

Hello Postfix-Users,

I would like to change the (Postfix) label in my mail headers to a custom label.

What do I need to change the code?

--
Chris

Rejecting based on message/partial

Alex — 2012-05-25T20:16:59

Hi,

I have a header check that I added some time ago that rejects mail
with message/partial content type because I believe it can't be
scanned for potential viruses unless it is first assembled:

/^(Content-(Disposition|Type)\:|[[:space:]]+).*message\/partial.*;?$/
REJECT This mail server does not permit messages with 'Content-type:
message/partial'.

Does this still present a significant threat these days, or is it okay
to permit partial messages?

If I were to permit it for a specific IP address or sender, would that
be done in a check_sender_access hash?

smtpd_recipient_restrictions =
        ...
        check_client_access hash:/etc/postfix/client_checks,
        check_sender_access hash:/etc/postfix/sender_checks,

/etc/postfix/sender_checks:
   63.87.XX.0/25                   OK

Thanks,
Alex

Subdomain users through my smtpd_sender_restrictions

Carlos R Laguna — 2012-05-25T19:08:25

Hello everyone i am facing a big mess here i had my MTA whith my own
user but this server is also a relay server for several subdomain the 
problem is that my own politic are been aplied to user that arent my, 
any clue why this is happening . Regards

Postfix and Dovecot missing delivery

Jan Meyland Andersen — 2012-05-25T20:06:42

Hi

I have a problem with the delivery of mails using dovecot as a transport.
According to the logfile mails seems to be delivered but nothing ends up in
the maildir.

my main.cf is the following.

smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
append_dot_mydomain = no
readme_directory = no
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_tls_security_level = may
smtpd_tls_received_header = no
smtpd_tls_loglevel = 0
tls_random_source = dev:/dev/urandom
virtual_mailbox_maps = mysql:/etc/postfix/mysql/aliases.cf
virtual_alias_maps = mysql:/etc/postfix/mysql/remote_aliases.cf
virtual_uid_maps = mysql:/etc/postfix/mysql/vuids.cf
virtual_gid_maps = mysql:/etc/postfix/mysql/vgids.cf
virtual_mailbox_base = /var/spool/postfix/virtual
virtual_mailbox_limit = 102400000
virtual_alias_domains =
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
myhostname = NoiceControl.mydomain
append_dot_mydomain = no
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = mydomain.dk, localhost
relayhost = mail.telenor.dk
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128,192.1.1.0/24
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks = $mynetworks
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

My master.cf is the standard supplied in debian + this statement.
dovecot   unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender}
  -d ${user}< at >${nexthop} -a ${recipient}


The log file looks like this.
May 25 22:02:42 NoiceControl postfix/smtpd[19683]: connect from
localhost[127.0.0.1]
May 25 22:02:42 NoiceControl dovecot: auth(default): new auth connection:
pid=19683
May 25 22:02:44 NoiceControl postfix/smtpd[19683]: A16B74A0537:
client=localhost[127.0.0.1]
May 25 22:02:46 NoiceControl postfix/cleanup[19689]: A16B74A0537:
message-id=<20120525200244.A16B74A0537< at >NoiceControl.mydomain>
May 25 22:02:46 NoiceControl postfix/qmgr[19412]: A16B74A0537: from=<
root< at >mydomain.dk>, size=344, nrcpt=1 (queue active)
May 25 22:02:46 NoiceControl postfix/smtpd[19683]: disconnect from
localhost[127.0.0.1]
May 25 22:02:46 NoiceControl postfix/local[19691]: A16B74A0537: to=<
jma< at >mydomain.dk>, orig_to=<jma>, relay=local, delay=3.2,
delays=3.1/0.01/0/0.1, dsn=2.0.0, status=sent (delivered to mailbox)
May 25 22:02:46 NoiceControl postfix/qmgr[19412]: A16B74A0537: removed


I don´t know if this is a postfix or dovecot error?

Kind Regards

Jan Andersen

Cannot make "smtpd_sender_restrictions = check_sender_access" work properly‏

JL Picard — 2012-05-25T17:13:21

I am trying to setup some simple username-based restrictions on what
local users can send on a local Solaris 10 server. In this case, I want
to allow emails by all other users, but reject any attempt for user
"local_usr" to send any email from this server. But so far, I can't
make the below configurations/commands work. This postfix server relays
to another close-by relayserver which forwards the msg to an external
server. If possible, I would prefer to reject on the local email server
before it hits the relay. If at all possible, I would also like an
error condition/status in the smtp client, but thats not a huge problem.

I
have provided as much diagnostic config and log data that I can
imagine, but I am more than happy to provide more, can anyone see what I
am missing?

Thanks-in-advance



###Here are some of the relevant main.cf settings that I think would apply:
root< at >myTestServer(/etc/opt/csw/postfix)% postconf | egrep "mynetworks|smtpd_sender_restrictions|relayhost ="
address_verify_relayhost = $relayhost
debug_peer_list = 127.0.0.1,myTestServer
mynetworks = 172.20.158.0/26, 172.20.204.0/24, 172.19.5.0/25, 172.19.21.0/24, 127.0.0.0/8
mynetworks_style = subnet
parent_domain_matches_subdomains
=
debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
postscreen_access_list = permit_mynetworks
proxy_read_maps
= $local_recipient_maps $mydestination $virtual_alias_maps
$virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains
$relay_recipient_maps $relay_domains $canonical_maps
$sender_canonical_maps $recipient_canonical_maps $relocated_maps
$transport_maps $mynetworks $sender_bcc_maps $recipient_bcc_maps
$smtp_generic_maps $lmtp_generic_maps
relayhost = [mail.myDomain.com]
smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination
smtpd_sender_restrictions = check_sender_access hash:/etc/opt/csw/postfix/sender_access
root< at >myTestServer(/etc/opt/csw/postfix)%


##Here is what my sender_access file has in it
root< at >myTestServer(/etc/opt/csw/postfix)% more /etc/opt/csw/postfix/sender_access
local_usr< at > REJECT
local_usr< at >myDomain.com REJECT


#Here is the command I ran to get the HASHED sender_access file created:
postmap hash:sender_access

#Timestamps of files proves the postmap command did something:
-rw-r--r-- 1 root root 43 May 24 11:12 sender_access
-rw-r--r-- 1 root root 49152 May 24 11:12 sender_access.db


#Here is the local IP address of my server:
172.19.5.25


#Here are some modifications (in diff format) to master.cf to get more logging:
11c11
< smtp inet n - n - - smtpd
---
40c40
< smtp unix - - n - - smtp
---

#Here is the local SMTP Client command I ran to generate an email as the "local_usr" user:
local_usr< at >myTestServer(~)% echo "test" | mutt -s "reject test 17" -- externaluser< at >example.com



#SYSLOG file:
May 24 11:41:51 myTestServer postfix/postfix-script[10277]: [ID 197553 mail.info] starting the Postfix mail system
May
24 11:41:51 myTestServer postfix/master[10278]: [ID 197553 mail.info]
daemon started -- version 2.8.6, configuration /etc/opt/csw/postfix
May 24 11:41:59 myTestServer postfix/pickup[10279]: [ID 197553 mail.info] C41391CD00: uid=34001 from=
May
24 11:41:59 myTestServer postfix/cleanup[10410]: [ID 197553 mail.info]
C41391CD00:
message-id=<20120524154159.GA10397< at >myTestServer.myDomain.com>
May
24 11:41:59 myTestServer postfix/qmgr[10280]: [ID 197553 mail.info]
C41391CD00: from=, size=490, nrcpt=1
(queue active)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: ipv4
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] inet_addr_local: configured 2 IPv4 addresses
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] process generation: 5 (5)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_string: debug_peer_list ~? debug_peer_list
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_string: fast_flush_domains ~? debug_peer_list
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_string: fast_flush_domains ~? fast_flush_domains
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: canonical
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: virtual
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: dns
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: native
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] host name lookup methods: dns native
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
auto_clnt_create: transport=local endpoint=private/scache
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] connection established
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] master_notify: status 0
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] deliver_request_initial: send initial status
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr status = 0
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: flags
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: flags
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: 3
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: queue_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: queue_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: active
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: queue_id
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: queue_id
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: C41391CD00
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: offset
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: offset
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: 241
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: size
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: size
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: 490
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: nexthop
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: nexthop
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: [mail.myDomain.com]
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: encoding
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: encoding
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: sender
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: sender
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: local_usr< at >myDomain.com
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: envelope_id
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: envelope_id
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: ret_flags
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: ret_flags
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: 0
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: time
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: time
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
input attribute value:
T75WxwALvedPvlbHAAy+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: log_client_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: log_client_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: log_client_address
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: log_client_address
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: log_client_port
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: log_client_port
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: log_protocol_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: log_protocol_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: log_helo_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: log_helo_name
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: sasl_method
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: sasl_method
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: sasl_username
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: sasl_username
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: sasl_sender
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: sasl_sender
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: log_ident
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: log_ident
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: rewrite_context
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: rewrite_context
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: local
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: recipient_count
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: recipient_count
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: 1
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: (list terminator)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: original_recipient
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: original_recipient
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: externaluser< at >example.com
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: recipient
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: recipient
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: externaluser< at >example.com
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: offset
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: offset
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: 222
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: dsn_orig_rcpt
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: dsn_orig_rcpt
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: notify_flags
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: notify_flags
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute value: 0
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp socket: wanted attribute: (list terminator)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] input attribute name: (end)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] deliver_request_get: file active/C41391CD00
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] deliver_message: from local_usr< at >myDomain.com
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp_parse_destination: [mail.myDomain.com] smtp
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] connecting to mail.myDomain.com port 25
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp_addr_one: host mail.myDomain.com
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] lookup mail.myDomain.com type A flags 0
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] dns_query: mail.myDomain.com (A): OK
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] dns_get_answer: type A for mail.myDomain.com
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] smtp_find_self: not found
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] begin mail.myDomain.com address list
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] pref 0 host mail.myDomain.com/172.19.21.5
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] end mail.myDomain.com address list
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
smtp_connect_addr: trying: mail.myDomain.com[172.19.21.5] port 25...
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] vstream_tweak_tcp: TCP_MAXSEG 1380
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] global TLS level: none
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_hostname: mail.myDomain.com ~? 127.0.0.1
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_hostaddr: 172.19.21.5 ~? 127.0.0.1
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_hostname: mail.myDomain.com ~? myTestServer
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_hostaddr: 172.19.21.5 ~? myTestServer
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_list_match: mail.myDomain.com: no match
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] match_list_match: 172.19.21.5: no match
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
< mail.myDomain.com[172.19.21.5]:25: 220
************************************
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: disable_esmtp
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: delay_dotcrlf
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
C41391CD00: enabling PIX workarounds: disable_esmtp delay_dotcrlf for
mail.myDomain.com[172.19.21.5]:25
May 24 11:41:59 myTestServer
postfix/smtp[10413]: [ID 197553 mail.info]>
mail.myDomain.com[172.19.21.5]:25: HELO myTestServer.myDomain.com
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
< mail.myDomain.com[172.19.21.5]:25: 250 mail.myDomain.com
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] server features: 0x31000 size 0
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
FROM:
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] < mail.myDomain.com[172.19.21.5]:25: 250 2.1.0 Ok
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
TO:
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] < mail.myDomain.com[172.19.21.5]:25: 250 2.1.5 Ok
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]> mail.myDomain.com[172.19.21.5]:25: DATA
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
< mail.myDomain.com[172.19.21.5]:25: 354 End data with
.
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] header_token: text / plain
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]> mail.myDomain.com[172.19.21.5]:25: .
May
24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]
< mail.myDomain.com[172.19.21.5]:25: 250 2.0.0 Ok: queued as
F1B043A66E
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID
197553 mail.info] C41391CD00: to=,
relay=mail.myDomain.com[172.19.21.5]:25, delay=0.22,
delays=0.07/0.03/0.08/0.05, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued
as F1B043A66E)
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info]> mail.myDomain.com[172.19.21.5]:25: QUIT
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: resource
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] name_mask: software
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] deliver_request_final: send: "" 0
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr status =
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr diag_type =
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr diag_text =
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr mta_type =
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr mta_mname =
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr action =
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr reason =
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] send attr status = 0
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] master_notify: status 1
May 24 11:41:59 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] connection closed
May 24 11:41:59 myTestServer postfix/qmgr[10280]: [ID 197553 mail.info] C41391CD00: removed
May 24 11:43:39 myTestServer postfix/smtp[10413]: [ID 197553 mail.info] idle timeout -- exiting

postscreen dnsbl reply text

Dan Lists — 2012-05-24T20:43:21

I am looking to switch one or more of my blacklists to run from
postscreen.   I send custom replies based on the blacklist, which
reduces the number of calls I get.  The relevant part of my current
configs:

smtpd_client_restrictions =
        reject_rbl_client zen.local,
        reject_rbl_client b.barracudacentral.org

rbl_reply_maps = hash:$config_directory/rbl_reply_maps

$config_directory/rbl_reply_maps:
# Spamhaus rbls (all in one)
zen.local $rbl_code Service unavailable; $rbl_class [$rbl_what]
blocked because it has been blacklisted. : To be removed from this
blacklist please visit: http://www.spamhaus.org/query/bl?ip=$rbl_what

# Barracuda Central Reputation System
b.barracudacentral.org $rbl_code Service unavailable; $rbl_class
[$rbl_what] blocked because it has been blacklisted. : To be removed
from this blacklist please visit:
http://www.barracudacentral.org/rbl/removal-request/$rbl_what

I do not see any way to set the response text when using postscreen.
I see postscreen_dnsbl_reply_map, but it looks like that just changes
the domain (ie zen.local to zen.spamhaus.org) not the reply text.   Is
there any way to set the postscreen DNSBL reply message?

Thanks,

Dan

deliver locally and relay at the same time?

lejeczek — 2012-05-24T12:13:24

hallo everybody

I begin my adventure with postfix/dovecot and have most bits 
ready an up but was wondering if below is possible with postfix?

have local users aliased to external addresses(different domain)
and postfix to deliver locally and at the same time relay to 
external user a copy of the email
e.g.

in my local aliases:
me: me< at >external.domain

me is a local user and me< at >external.domain is hosted on some 
external system.

so when I internally send to me< at >local.domain both accounts 
would get the same email.

is it even possible, can you shed some light?
I'd appreciate
thanks!

force tls but allow amavis

jeffrey j donovan — 2012-05-24T02:48:53

greetings

i have setup a secure relay, and I want to pass the mail through amavisd. my problem is with forcing my users to use TLS amavis fails.
How do I enforce encryption from the client but allow amavis to speak to the MTA without TLS?

postconf -n

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
home_mailbox = Maildir/
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}"
mailbox_size_limit = 0
mydestination = smtp5.example.com, localhost.example.com, localhost
myhostname = smtp5.example.com
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
myorigin = /etc/mailname
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
smtpd_banner = $myhostname ESMTP $mail_name (BASD_smtp5)
smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/dovecot-auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = ldap:/etc/postfix/ldap_senders.cf
smtpd_sender_restrictions = reject_unknown_sender_domain
smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/ssl/certs/smtpd.crt
smtpd_tls_key_file = /etc/ssl/private/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_tls_received_header = yes
smtpd_tls_security_level = encrypt
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/local_transport
#content_filter = smtp-amavis:[127.0.0.1]:10024

I didn't thought the local ports 10024 and 10025 should be able to communicate. But I guess it's when amavis is injecting back into postfix that the TLS error appears.
same log


postfix/smtpd[3689]: connect from nc1-100.example.com[10.1.1.100]
postfix/smtpd[3689]: Anonymous TLS connection established from nc1-100.example.com[10.1.1.100]: TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)
postfix/smtpd[3689]: 4D80234051C: client=nc1-100.example.com[10.1.1.100], sasl_method=PLAIN, sasl_username=lukeskywalker
postfix/cleanup[3696]: 4D80234051C: message-id=<33620A61-A31B-44F0-8908-CF21CF499E63< at >example.com>
postfix/qmgr[3688]: 4D80234051C: from=<lukeskywalker< at >example.com>, size=14831, nrcpt=1 (queue active)
postfix/smtpd[3700]: connect from localhost[127.0.0.1]
amavis[1330]: (01330-04) Negative SMTP resp. to DATA: 530 5.7.0 Must issue a STARTTLS command first
postfix/smtpd[3700]: disconnect from localhost[127.0.0.1]
amavis[1330]: (01330-04) discarding unprocessed reply: 221 2.0.0 Bye
amavis[1330]: (01330-04) (!)FWD via SMTP: <lukeskywalker< at >example.com> -> <petergriffin< at >example.com>,BODY=7BIT 451 4.5.0 From MTA([127.0.0.1]:10025) during fwd-rundown-1 (Negative SMTP response to RSET: 530 5.7.0 Must issue a STARTTLS command first at (eval 98) line 1140.): id=01330-04
amavis[1330]: (01330-04) Blocked MTA-BLOCKED, LOCAL [10.1.1.100] [10.1.1.100] <lukeskywalker< at >example.com> -> <petergriffin< at >example.com>, Message-ID: <33620A61-A31B-44F0-8908-CF21CF499E63< at >example.com>, mail_id: ul2+k6lIy9Fx, Hits: -1.01, size: 14831, 4571 ms
postfix/smtp[3697]: 4D80234051C: to=<petergriffin< at >example.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.6, delays=0.02/0.01/0.01/4.6, dsn=5.7.0, status=bounced (host 127.0.0.1[127.0.0.1] said: 530 5.7.0 id=01330-04 - Rejected by MTA on relaying, from MTA([127.0.0.1]:10025): 530 5.7.0 Must issue a STARTTLS command first (in reply to end of DATA command))
postfix/cleanup[3696]: E29FF340626: message-id=<20120524023508.E29FF340626< at >smtp5.example.com>
postfix/qmgr[3688]: E29FF340626: from=<>, size=17017, nrcpt=1 (queue active)
postfix/bounce[3701]: 4D80234051C: sender non-delivery notification: E29FF340626
postfix/qmgr[3688]: 4D80234051C: removed
postfix/smtp[3702]: E29FF340626: to=<lukeskywalker< at >example.com>, relay=imap.example.com[10.1.1.28]:25, delay=0.34, delays=0/0.01/0.21/0.11, dsn=2.0.0, status=sent (250 Ok: queued as DDF795F059F8)
postfix/qmgr[3688]: E29FF340626: removed


I have read setting the smtpd_tls_security_level = encrypt to smtpd_tls_security_level = may would allow the connection, but doesn't that allow my clients to Auth only without encryption ?
any assistance would be helpful.
thanks

-j

postmaster required / close port 25

Georg Schönweger — 2012-05-23T15:55:03

Hi,

i have a postfix server which is only used for sending emails to the
outside, no incoming emails are allowed (no MX record). I recently
opened port 587 in master.cf and now i'm asking myself if it is ok to
close port 25 completely?
AFAIK every mail server should accept incoming mails to
postmaster< at >myserver, but when i close port 25 this is not the case
anymore, isn't it?

and another question regarding port 25;
when my postfix server generates a bounce message (which happens when
sending a mail to non existend address) and sends it back to the
originally envelope sender, he uses "From: MAILER-DAEMON< at >myserver.tld"
as sender of the bounce message. Does MAILER-DAEMON< at >myserver.tld has to
be an existend mail account?
We recently had problems that on MX site of our email addresses (hosted
by a company) they rejected some of the bounce mails generated by my
server. Log shows following;
"status=bounced (host mx.myEmailHostedByCompany.tld[IP.IP.IP.IP]  said:
550 5.1.0 CfoC1j00P08HtnS01foCNg dominio non valido / invalid domain (in
reply to MAIL FROM command))"

So i'm asking myself does this error message mean that
MAILER-DAEMON< at >myserver.tld has to be existend (so i have to keep port 25
open on my server and see if this account is ok)? Does myserver.tld need
to have a MX record as well in order to avoid the problem?

As far as i understand this error message means that the envelope sender
(which is empty (<>) for bounce mails) is not valid, which is nonsense
because every bounce message has an empty envelope sender.

kind regards,
Georg

conditional body_checks

Loïc Latreille — 2012-05-23T11:59:52

Hello,

I would check if a string is present in the message body only if the
"To" field is equal to "jdoe< at >example.org".
I tried to use IF...ENDIF but it doesn't work because the pattern
between IF and ENDIF doesn't match the same input string that the IF
pattern.

A part of the body :
...
To: JDOE <jdoe< at >example.org>
From: "toto< at >otherexample.org" <toto< at >otherexample.org>
X-Email-Type-Id: TT123MM
...

My pcre table for the body_checks :
IF /To: JDOE <jdoe< at >example\.org>/
/X-Email-Type-Id: TT123MM/ REDIRECT momo< at >example.org
ENDIF

I need some help to run my filter, I can not seem to find a solution
to this problem :(

Thanks in advance.


Loïc

postscreen blacklist painful refresh

Maciej Uhlig — 2012-05-23T09:23:14

We run fail2ban to update postscreen blacklist which is cidr file. To
make postscreen see the changes we have to reload postfix. Yesterday we
found postfix was reloaded more than 3000 times. Sure it is not acceptable.

What would be the best way to refresh postscreen blacklist (something
like kill -HUP) without paying the penalty of losing performance? Would
changing cidr type to hash do the trick?

Best regards,

MU

Postfix Outlook sending HTML problem

mimalo — 2012-05-23T07:10:01

Hi,

I have a problem sending HTML email from outlook 2010.
I installed postfix according to this guidelines:
http://www.howtoforge.com/virtual-users-and-domains-with-postfix-courier-mysql-and-squirrelmail-debian-squeeze

Everything works fine, but when I send HTML email from Outlook (Internet
Explorer - Send - Page by email), I receive empty message with pictures in
attachments.

Can anyone help me in this case? :)

Thank you!

Missing email

J Gao — 2012-05-22T23:40:13

Hi,

One of our email user (his email address is: jay< at >ourcomapny.com) told me 
he missed an important email he suppose to received last Friday around 
7:30PM. I checked the maillog and I can't tell what's wrong. The email 
is from another  co-worker Liz (liz< at >ourcomapny.com), and there are 3 
recipients: Jay, Bob, and  Larry. The other two got the email but not 
Jay. Could someone help me read the maillog and tell me is there 
something I missed? I don't know how to explain to Jay why the mail is 
lost. I suspect that he could accidentally delete the mail but I don't 
have approve.

Here is the log file:
=======================


      /
      /May 18 19:33:10 zeta postfix/qmgr[5000]: 6112E8093:
      from=<liz< at >ourcomapny.com>, size=8399, nrcpt=3 (queue active)
      May 18 19:33:10 zeta MailScanner[28856]: Uninfected: Delivered 1
      messages
      May 18 19:33:10 zeta MailScanner[28856]: Deleted 1 messages from
      processing-database
      May 18 19:33:10 zeta postfix/pickup[29771]: 22D0780A5: uid=5001
      from=<liz< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/cleanup[30947]: 22D0780A5: hold:
      header Received: by zeta.ourcomapny.com (Postfix, from userid
      5001)??id 22D0780A5; Fri, 18 May 2012 19:33:10 -0700 (PDT) from
      local; from=<liz< at >ourcomapny.com> to=<jay< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/cleanup[30947]: 22D0780A5:
      message-id=<1ae43190adda66fae0dbcb2740b4d6e4< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/pipe[30973]: 6112E8093:
      to=<jay< at >ourcomapny.com>, relay=autoresponder, delay=8.5,
      delays=8.5/0.02/0/0.05, dsn=2.0.0, status=sent (delivered via
      autoresponder service)
      May 18 19:33:10 zeta postfix/pickup[29771]: 246FF8096: uid=5001
      from=<liz< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/cleanup[30947]: 246FF8096: hold:
      header Received: by zeta.ourcomapny.com (Postfix, from userid
      5001)??id 246FF8096; Fri, 18 May 2012 19:33:10 -0700 (PDT) from
      local; from=<liz< at >ourcomapny.com> to=<bob< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/cleanup[30947]: 246FF8096:
      message-id=<1ae43190adda66fae0dbcb2740b4d6e4< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/pipe[30972]: 6112E8093:
      to=<bob< at >ourcomapny.com>, relay=autoresponder, delay=8.5,
      delays=8.5/0.01/0/0.07, dsn=2.0.0, status=sent (delivered via
      autoresponder service)
      May 18 19:33:10 zeta postfix/pickup[29771]: 2595A8065: uid=5001
      from=<liz< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/cleanup[30947]: 2595A8065: hold:
      header Received: by zeta.ourcomapny.com (Postfix, from userid
      5001)??id 2595A8065; Fri, 18 May 2012 19:33:10 -0700 (PDT) from
      local; from=<liz< at >ourcomapny.com> to=<larry< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/cleanup[30947]: 2595A8065:
      message-id=<1ae43190adda66fae0dbcb2740b4d6e4< at >ourcomapny.com>
      May 18 19:33:10 zeta postfix/pipe[30978]: 6112E8093:
      to=<larry< at >ourcomapny.com>, relay=autoresponder, delay=8.6,
      delays=8.5/0.04/0/0.04, dsn=2.0.0, status=sent (delivered via
      autoresponder service)
      May 18 19:33:10 zeta postfix/qmgr[5000]: 6112E8093: removed
      May 18 19:33:10 zeta MailScanner[28586]: New Batch: Scanning 3
      messages, 26236 bytes
      May 18 19:33:10 zeta MailScanner[28586]: Virus and Content
      Scanning: Starting
      May 18 19:33:10 zeta MailScanner[28586]: Spam Checks: Starting
      May 18 19:33:10 zeta MailScanner[28586]: Message 246FF8096.A1E15
      from 127.0.0.1 (liz< at >ourcomapny.com) is whitelisted
      May 18 19:33:12 zeta imapd-ssl: LOGIN,
      user=nanderson< at >ourcomapny.com, ip=[::ffff:204.50.203.11],
      port=[33850], protocol=IMAP
      May 18 19:33:13 zeta MailScanner[28586]: Message 2595A8065.ACC91
      from 127.0.0.1 (liz< at >ourcomapny.com) is whitelisted
      May 18 19:33:13 zeta MailScanner[28586]: SpamAssassin cache hit
      for message 2595A8065.ACC91
      May 18 19:33:13 zeta MailScanner[28586]: Message 22D0780A5.A62EE
      from 127.0.0.1 (liz< at >ourcomapny.com) is whitelisted
      May 18 19:33:13 zeta MailScanner[28586]: SpamAssassin cache hit
      for message 22D0780A5.A62EE
      May 18 19:33:13 zeta MailScanner[28586]: Requeue: 246FF8096.A1E15
      to 130368093
      May 18 19:33:13 zeta MailScanner[28586]: Requeue: 2595A8065.ACC91
      to B924A8096
      May 18 19:33:13 zeta MailScanner[28586]: Requeue: 22D0780A5.A62EE
      to 407738065
      May 18 19:33:13 zeta postfix/qmgr[5000]: 130368093:
      from=<liz< at >ourcomapny.com>, size=8641, nrcpt=1 (queue active)
      May 18 19:33:13 zeta MailScanner[28586]: Uninfected: Delivered 3
      messages
      May 18 19:33:13 zeta postfix/qmgr[5000]: B924A8096:
      from=<liz< at >ourcomapny.com>, size=8635, nrcpt=1 (queue active)
      May 18 19:33:13 zeta postfix/qmgr[5000]: 407738065:
      from=<liz< at >ourcomapny.com>, size=8635, nrcpt=1 (queue active)
      May 18 19:33:13 zeta MailScanner[28586]: Deleted 3 messages from
      processing-database
      May 18 19:33:13 zeta MailScanner[28586]: MailScanner child dying
      of old age
      May 18 19:33:13 zeta postfix/virtual[31007]: 407738065:
      to=<jay< at >ourcomapny.com>, relay=virtual, delay=3.3,
      delays=3.3/0.03/0/0.02, dsn=2.0.0, status=sent (delivered to maildir)
      May 18 19:33:13 zeta postfix/virtual[31004]: 130368093:
      to=<bob< at >ourcomapny.com>, relay=virtual, delay=3.3,
      delays=3.3/0.01/0/0.04, dsn=2.0.0, status=sent (delivered to maildir)
      May 18 19:33:13 zeta postfix/qmgr[5000]: 130368093: removed
      May 18 19:33:13 zeta postfix/qmgr[5000]: 407738065: removed
      May 18 19:33:13 zeta postfix/virtual[31005]: B924A8096:
      to=<larry< at >ourcomapny.com>, relay=virtual, delay=3.3,
      delays=3.2/0.03/0/0.02, dsn=2.0.0, status=sent (delivered to maildir)
      May 18 19:33:13 zeta postfix/qmgr[5000]: B924A8096: removed
      May 18 19:33:13 zeta MailScanner[31009]: MailScanner E-Mail Virus
      Scanner version 4.81.4 starting...
      May 18 19:33:13 zeta MailScanner[31009]: Reading configuration
      file /etc/MailScanner/MailScanner.conf
      May 18 19:33:13 zeta MailScanner[31009]: Reading configuration
      file /etc/MailScanner/conf.d/README
      May 18 19:33:13 zeta MailScanner[31009]: Read 878 hostnames from
      the phishing whitelist
      May 18 19:33:13 zeta MailScanner[31009]: Read 5791 hostnames from
      the phishing blacklists
      May 18 19:33:13 zeta MailScanner[31009]: Using SpamAssassin
      results cache

Body Checks Replace

varad gupta — 2012-05-22T14:33:41

Hi All


I need to replace all occurences of "text1" in mailbody with "text2".

The regexp =>

/^(.*)text1(.*)$/ REPLACE $1text2$2  works if there is only one
occurence of "text1" in a line.

It changes only the last occurence of "text1" in a single line which
has multiple occurences of "text1" in the same line.

Kindly advise how to replace "text1" with "text2" for multiple
occurences of "text1" in the same line

Regards

Varad Gupta

Postfix log file question

Henry Stryker — 2012-05-22T13:29:34

This is certainly not of critical importance, but my curiosity makes me
wonder:

May 20 12:28:40 <2.6> hyperion postfix/smtpd[22436]:


What does the "<2.6>" signify in every Postfix log line entry?

I am running postfix-current on FreeBSD 8.3
mail_version = 2.10-20120423

Name resolution

Barbara M. — 2012-05-22T10:15:05

How work name resolution in Postfix?

I have an internal server that resend mail to another box (in the same
IntraNet).
If I put in my local /etc/hosts something like:

192.168.1.25    mail.aaa.tld

the box do what I want:

# ping mail.aaa.tld
PING mail.aaa.tld (192.168.1.25) 56(84) bytes of data.
64 bytes from mail.aaa.tld (192.168.1.25): icmp_seq=1 ttl=64 time=0.181 ms
64 bytes from mail.aaa.tld (192.168.1.25): icmp_seq=2 ttl=64 time=0.181 ms
64 bytes from mail.aaa.tld (192.168.1.25): icmp_seq=3 ttl=64 time=0.184 ms
  . . .

# telnet mail.aaa.tld 25
Trying 192.168.1.25...
Connected to mail.aaa.tld.
Escape character is '^]'.
220 mail.aaa.tld ESMTP
  . . . .


but Postfix seems to still search the real IP via DNS.


Why?

Any trick/config/workaround to force Postfix to consider /etc/hosts?

Thanks, B.

Feature Request - address process testing

Daniel L. Miller — 2012-05-22T05:12:31

I would find it quite useful to have a command, whereby either a 
designated sender or recipient address can be tested against the 
complete Postfix configuration, and have both the process and the result 
displayed.  For example:

postcanonical [-r | -s] target< at >domain.com
using recipient_canonical_maps = hash:/etc/postfix/maps/canonical-maps
      mapping < at >domain.com to < at >domain2.com
using recipient_bcc_maps = hash:/etc/postfix/maps/recipient_bcc
     copying target< at >domain2.com to target1< at >domain2.com, target2< at >domain2.com
using transport_maps = hash:/etc/postfix/maps/transport
     using transport virtual to deliver

The above is a very rough draft - but something like this that exposes 
Postfix's thinking, instead of just trying to send/recieve a test 
message and reading the logs to see what happens - could be a very 
powerful tool for correctly configuring various map settings and 
diagnosing problems.

Multi Instance smtpd not listening

Asa Gage — 2012-05-22T00:40:21

I have configured a second instance of postfix 2.6.6(RHEL6) with
postmulti and provided a unique $myhostname for the second instance. I
have also provided a different IP address for inet_interfaces for the
second instance and restarted the postfix service.

I see both pids running, but the second instance has no smtpd processes
and a netstat shows nothing running on the alternate IP address.  Why is
the second instance not listening?

netstat -tulpn | grep 25
tcp        0      0 127.0.0.1:25                0.0.0.0:*
LISTEN      26103/master
tcp        0      0 10.0.0.248:25               0.0.0.0:*
LISTEN      26103/master
udp        0      0 fe80::250:56ff:fe9c:59:123  :::*
1342/ntpd

postfix/postfix-script: the Postfix mail system is running: PID: 26103
postfix-2/postfix-script: the Postfix mail system is running: PID: 26169

/etc/postfix/main.cf
inet_interfaces = 10.0.0.248

/etc/postfix-2/main.cf
inet_interfaces = 10.0.0.249

postmulti -l -a
-               -               y         /etc/postfix
postfix-2       -               y         /etc/postfix-2


Thanks,
Asa

LMTP for smtpd_proxy_filter

Patrick Westenberg — 2012-05-21T16:30:07

Hello,

I'd like to know if there are any plans to enable LMTP with the 
smtpd_proxy_filter?

Regards
Patrick

canonical-sender and auto-bcc

Christian Meier — 2012-05-21T16:17:14

Hi,

in e-mails with a particular FROM header should the FROM header be rewritten *and* the e-mail should be sent by blind carbon copy to a predefined address.

In theory, it is possible to use the canonical-sender and sender_bcc_maps functions. In practice, the address on the right of the canonical-sender map and the address on the right of the sender_bcc_maps may not be the same.

Is there any solution?

Thank you in advance.


- Chris

Postfix 2.9.2, 2.8.11, 2.7.10, 2.6.16 available

Wietse Venema — 2012-05-21T12:55:13

[An on-line version of this announcement will be available at
http://www.postfix.org/announcements/postfix-2.9.3.html]

Postfix stable release 2.9.3, and legacy releases 2.8.11, 2.7.10,
2.6.16 are available. They contains workarounds that are already
part of Postfix 2.10.

  * OpenSSL related (all supported Postfix versions).

      o Some people have reported program crashes when the OpenSSL
        library was updated while Postfix was accessing the Postfix
        TLS session cache. To avoid this, the Postfix TLS session
        cache ID now includes the OpenSSL library version number.
        This cache ID is not shared via the network.

      o The OpenSSL workaround introduced with the previous stable
        and legacy releases did not compile with older gcc compilers.
        These compilers can't handle #ifdef inside a macro invocation
        (NOT: definition).

  * Postfix 2.9 only.

      o The postconf command flagged parameter "-o name=value"
        settings in master.cf as "unused" when those settings were
        used only in main.cf. Problem reported by Michael Tokarev.

  * postscreen(8) related (Postfix 2.9, Postfix 2.8).

      o To avoid repeated warnings from postscreen(8) with "connect
        to private/dnsblog service: Connection refused" on FreeBSD,
        the dnsblog(8) daemon now uses the single_server program
        driver instead of the multi_server driver. This one-line
        code change has no performance impact for other systems,
        and eliminates a high-frequency accept() race on a shared
        socket that appears to cause trouble on FreeBSD. The same
single_server program driver has proven itself for many
years in smtpd(8).  Problem reported by Sahil Tandon.

  * Laptop-friendly support (all supported Postfix versions). A
    little-known secret is that Postfix has always had support to
    avoid unnecessary disk spin-up for MTIME updates, by doing
    s/fifo/unix/ in master.cf (this is currently not supported on
    Solaris systems). However, two minor fixes are needed to make
    this bullet-proof.

      o In laptop-friendly mode, the "postqueue -f" and "sendmail
        -q" commands did not wait until their requests had reached
        the pickup and qmgr servers before closing their UNIX-domain
        request sockets.

      o In laptop-friendly mode, the unused postkick command waited
        for more than a minute because the event_drain() function
        was comparing bitmasks incorrectly on systems with kqueue(2),
        epoll(2) or /dev/poll support.

You can find the updated Postfix source code at the mirrors listed
at http://www.postfix.org/.

        Wietse