we have a Postfix mail relay server. Not to be an open relay we use check_sender_access restriction with allowed sender domains. Is there a way how to configure postfix to accept mails from any domain for a specified recipient? Something like
Code:
if (recipient_address==host@mydomain.com) accept; We have an admin mailbox and we need it to be accessible from everywhere.
I implemented postfix as mail gateway but i need to block the ability to send
mails via telnet
How can i achive this?
I dont know why, but my postfix dont delivery local users, the virtual users works fine.
This is my main.cf:
When i try echo "Test" | mail -s Test root ; tail -f /var/log/maillog | grep "root" i see this error:
I have an ubuntu server running postfix 2.6.5 (configured using DTC). If a user tries to send an email to more than one recipient, and one recipient address is bad, then the server returns an error and no mail is sent (even to the good addresses), rather than letting the good ones through. Error displayed by thunderbird is
Code:
"An error occurred while sending mail. The mail server responded: 5.1.1 [URL]: Recipient address rejected: User unknown in virtual mailbox table. Please check the message recipient noreply@domain.com.au and try again." and mail.log shows ...
Code:
Oct 6 20:35:08 www1 postfix/smtpd[22716]: connect from xxxxxx [xxx.xxx.xxx.xxx]
Oct 6 20:35:08 www1 postfix/smtpd[22716]: B62F92A44: client=xxxxxx [xxx.xxx.xxx.xxx], sasl_method=PLAIN, sasl_username=blake@domain.com.au
[code].....
block incoming email within either postfix or spamassassin when the sender equals the recipient. The manner in which our mail infrastructure is set up would preclude this from happening. Granted, we do have outside vendors that spoof our domain so we have to allow emails in with our domain as the sender/from. The vendors do not, however, utilize the same sender/recipient when sending emails.
View 1 Replies View Relatedthe problem is i am changing the parameters in main.cf file but postfix is not accepting them. its still inheriting my system's host name and domain
here is my configuration
my main.cf file
myhostname = mail.example.com
mydomain = example.com
myorigin = $domain
[Code].....
Nothing is accepted. I have test this on CentOS 5.5 and Fedora 14 both have the same result.
This seems like a relatively simple question, but I haven't been able to figure it out from the documentation after a couple of hours of searching. I'm running postfix on my mail server, and the vast majority of my spam has the sender address spoofed to match the recipient address. I've got spamassassin up and running, and very little gets through that, so it's not a serious problem, but if possible I would like to be able to reject the mail before it arrives to reduce the system load.
Mail is sent locally via webmail, relaying is denied, so the only way that mail should be sent from the domain is via a connection from localhost. The basic idea I'm thinking of is if the MAIL FROM sender claims to be an address at the receiving domain, but is connected from a remote IP, the mail should be rejected.
I'm looking for a way to redirect e-mail with postfix based on sender AND recipient. What I want: Let's say I have 3 users:
[code]....
and an external address, let`s call it [URL] sends e-mails every day to andy, mark and john Now, MARK and JOHN, need the e-mail sent by [URL], but TOM doesn't need it. Is there a way to redirect ONLY the e-mail sent to TOM from [URL], to some other address, let`s say [URL] without affecting the e-mail received by MARK and JOHN? Unfortunately using SENDER ACCESS redirects ALL e-mail from [URL]
My company email server has been working flawlessly for the last 5+ years. Recently, one of our clients put their email server behind a firewall (an assumption on my part; details below). Ever since, email sent from within the company (192.168.xxx.xxx internal address; all computers and server is behind a NAT firewall [Netgear FVX538]) is either being sent to the client after some delay (if email is sent using Outlook) or is being deferred until the messages expire (Thunderbird, Squirrelmail, etc.). Email sent to the client from anywhere outside the company (using Thunderbird, Outlook or any other email client) is also delivered without any problems (usually after a short delay).
All other emails to the World are being sent without any problems at all (both inside and outside the company; using any email client or webmail). I did contact the client's postmaster, but the client, being a large government agency, will probably not address the problem (if it is on their side) anytime soon. I am not sure if I can do anything from my end to solve the problem. Ever since the problem with the client began, I added two statements to the postfix configuration file (smtp_pix_workaround_delay_time = 20s and smtp_pix_workaround_threshold_time = 0s); this seemed to a bit - it reduced the delay for emails sent via Outlook to a few minutes (as opposed to 30+ minutes); emails sent using Thunderbird/webmail are still being deferred.
Server details: Dual quad-core processor machine, 32 GB RAM, dual 1 gbps network, running Fedora 14 (64-bit; loosely modeled along the lines of Perfect Server (with ISPConfig2) as described on the howtoforge website). Running Postfix (v. 2.7.1), Dovecot (v. 2.0.9).
Postfix details:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
body_checks = regexp:/etc/postfix/mbl-body-deny
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
[code]....
I emailed the client's postmaster suggesting they disable smtp fixup. But still, what bothers me now is that Outlook works (both within and outside the company) while Thunderbird, webmail, etc. (used by ~90% of the users) do not. In addition, all email clients from outside the company can send email (authenticated via the company server) to the client without any problems. Is there anything I can do on my end to make non-Outlook clients work within the company (webmail is hosted on the company server; so, it would have an internal address as well)?
I have configured my postfix server to use TLS (STARTTLS) but with no certificates either on server or client. Here are the TLS parameters in main.cf.
=========
smtpd_tls_security_level = may
# Obsolete, but still supported
#smtpd_use_tls = yes
#smtp_use_tls = yes
[Code]....
This is a transcript I get emailed at least once every day, usually about 3 to 10 a day recently.
Transcript of session follows.
SMTP server: errors from unknown[ip address]
<boring stuff snipped>
In: RCPT TO: <server@my domain>
Out: 550 5.1.1 <server@my domain>: Recipient address rejected: User unknown in local recipient table
Session aborted, reason: lost connection Now I cannot seem to find anything via Google, as when I put "server@" anywhere in the string, I just get web hosting or other kroomst. The emails usually come from legit places, usually hotels. Does this mean they are sending bad emails, i.e. they have a Trojan/worm, or is this a live hack attempt?. I believe the later, as I might get upto 3 domains from the one ip address, which is always, NOT associated with the listed domain. Not causing me any issues, except I have been getting a lot recently.
I've enabled popb4smtp in my mail server. Is this because of the IP 117.58.246.10 don't have a dns record? How can I sending email from this type of Ip which don't have dns entry?. But if I enable SMTP auth I can send email form this same ip. Another thing is I can connect to port 587 from the email client to send email but can't connect to port 25.
View 1 Replies View RelatedThe scenario: We have an external server that runs HTTP/DB servers for out shop system. Then, there's our local, in-house infrastructure that runs a.. yeah... Exchange 2010. The shop system on the external server needs to send mails to customers (order confirmations, invoices, etc.). seing as sending them directly through the local MTA (Postfix) would cause mail delivery problems because of reverse DNS issues, i've set the Postfix MTA to act as a satellite to our in-house Exchange Server, so the Exchange sends the mail instead, giving recipient mail servers a valid reverse DNS lookup.
Now, mails sent by the (proprietary, uneditable) shop system are relayed correctly and sent to the target e-mail address. My problem is: Mails not sent by the shop system, but by our own PHP scripts which run on that same external servers, are NOT relayed properly. So the Exchange is fine with the mails sent by the shop system, but not the mails sent by our scripts. This is what i get in the mail.log: The successfully relayed mail sent by the shop system:
[Code]....
I have Postfix set up to forward e-mails to two different addresses. This is my /etc/postfix/virtual:
Code:
I'm forwarding the message back to myself because that's the only way I know if the original message is even getting delivered in the first place.
The problem is that the e-mail isn't making it into my GMail inbox. I've checked my spam folder and it isn't there. And bafflingly, according to the logs, the message does seem to be getting sent:
Code:
On the postfix mailserver of our company I'm seeing several of these messages in the deferred queue (apologies for the terrible formatting, I couldn't get it any better) code...
looking at the headers, there is probably something wrong with our DNS-server, which we will investigate, but I still have some questions about the failure notice:
- why are the failure notices refused? Is that a fault on the sender side, for example sending the wrong return address?
- where does this mxcorp1.pacific.net.sg[192.169.41.21] come from anyway? I don't see it anywhere in the headers.
I have configured postfix to send/receive mail from/to for two domains we manage. [URL] and [URL] Most of the cases there is no issue sending out or receiving emails. However, a few users of domainY.com complained that their senders were not able to sent them email. after much investigation, we started thinking that the mailserver failed to send us email may the failing on doing a SMTP Banner issue.
Is there anyone who knows how to deal with this SMTP banner issue with multiple domain. We want different SMTP banner when doing EHLO on different server.
530 mail.domainX.com ESMTP MailEnable Service, Version: 1.981-- denied access at 11/16/10 10:51:21
530 mail.domainY.com ESMTP MailEnable Service, Version: 1.981-- denied access at 11/16/10 10:51:21
Today I got a call from our chairman saying that he gets duplicate mails. When I checked the postfix logs, I found that it is the locks that are creating problems. The mail which duplicated was to an alias which included our chairman. In that alias, the mailbox of a user was locked since he was receiving his mails (I use dovecot for mail distribution), and hence the lock was on for that mailbox. When postfix tried to deliver the mails, it encountered the lock and the mail delivery was stopped, thus by requeuing the specific mail. While postfix retried the delivery, it found another lock with another mailbox and again the delivery was stopped, thus sending the mail back to queue
View 5 Replies View RelatedI have Postfix set up to forward e-mails to two different addresses. This is my /etc/postfix/virtual:
Code:
jason@woollymammothlabs.com jason@woollymammothlabs.com, jason.swett@gmail.com
I'm forwarding the message back to myself because that's the only way I know if the original message is even getting delivered in the first place.
The problem is that the e-mail isn't making it into my GMail inbox. I've checked my spam folder and it isn't there. And bafflingly, according to the logs, the message does seem to be getting sent code...
I've setup postfox on Fedora 13 in order to send emails to and from gmail. I thought this was working, but it is dropping approx 50% of mails with an error. The other 50% work OK. It seems completely random.
I've read the link but I stil dont quite understand.
My machine is just a PC, on talktalk's network in the UK.
I use dyndns to allocate a DNS alias (well several actually) to my dynamic IP address - not sure if this is relevent.
Is it failing due to a reverse DNS lookup on the dyndns host? Or is it because it cannot resolve my localhost.localdomain?
I used to have this running on opensuse and swear it used to work 100% of the time.
What am I doing wrong?
Quote:
Nov 14 18:12:40 linuxserver1 postfix/smtpd[14619]: connect from localhost.localdomain[127.0.0.1]
Nov 14 18:12:40 linuxserver1 postfix/smtpd[14619]: 367D428388: client=localhost.localdomain[127.0.0.1]
Nov 14 18:12:40 linuxserver1 postfix/cleanup[14622]: 367D428388: message-id=<20101114181240.367D428388@linuxserver1.localdomain>
Nov 14 18:12:40 linuxserver1 postfix/qmgr[2834]: 367D428388: from=<myaccount@gmail.com>, size=3309455, code....
How do I make my postfix mail server auto delete mails from user mailboxes after say 1 or 2 months?
View 1 Replies View RelatedI view my /var/log/maillog and see tons of lines like this code...
I think those are some kind of SMTP attacks from this host by I tried to block hit with Iptables but it seemes to peace them off and they keep coming...!
please some kind of postfix-configuration solution?
So, I have mail server ( posfix ) and ldap server, they works fine. I can add/delete users from posfix, and they can send / receive mails to/from any address. At same time my ldap server works fine, I have also users in it, my "simple" question would be...if I have user "test1" in ldap, what I have to do to connect--enable that user to send mails ?
View 1 Replies View RelatedI have configured dns, postfix, dovecot, https, squirrel mail on fedora11 everything working very well. While configuring out look the same domain users getting mails the virtual users not receiving mails it showing pop3 error. But he can able to receive mails in his home directory.
View 1 Replies View Relatedcan i just copy/backup postfix mail queues in /var/spool/postfix and paste that folder back in after i done migrating all users and mails to a new mailserver?
View 3 Replies View RelatedI've got a Fedora postfix server that I just upgraded from 9 to 10 using preupgrade. Starting yesterday, some messages were rejected by servers because the IP address had a poor "reputation". The odd thing is, the IP address they're registering isn't the IP address the server is sending from.
When I look at the full headers of our outgoing e-mail, the e-mail is listed as coming from ***.***.***.11, which is the correct address. But these services are somehow tying the e-mails back to ***.***.***.12, which is used for a different purpose entirely. Since this *.12 address doesn't match the MX record, I'm assuming that's why the mails are being blocked, but I'm not sure how the mails are being identified as coming from that address in the first place. It's odd that this just started when I upgraded.
I would like to know if a rule has been applied to the iptables.active file to accept direct connections on port 22 through an IP address, can I also add a mac address/addresses to the rules such that if I am not on the network with the accepting IP address, that my MAC address will still get me in?
View 4 Replies View RelatedI have an issue with my wireless. I installed Ubuntu Karmic at the beginning of February and have had it connected via an Ethernet cable and everything worked. I am now trying to access the internet using the laptop's wireless the "Wireless Network Authentication Required" window appears where I add my password for the network, then another window appears called "Unlock Keyring" where it says that the network manager applet requires the default keyring.
I put in my Ubuntu password (login and sudo one) and nothing happens, the window just appears again.
Is my default keyring different from my password, and how do I find out what it is/change it
I use this command to fetching mail from gmail it work good but it does not retrieved mails from server as I read from manual.
Quote:
fetchmail -d0 -F -K pop.gmail.com
What is wrong and what should I do?
am using qmail and have webmin, all is running smoothly, but i have users spamming other staff accounts.The question: How do I block a user from sending out mails but still able to receive mails. Just denying access to sending mails?if anyone can guide me to do it via terminal as well as webmin.Why webmin you ask, because I have tried it once it works but sadly it block both incoming and outgoing mails.
View 3 Replies View RelatedMy old /etc/network/interfaces isn't working in 9.10. I've used it from 8.04 to 9.04 without issues.
I need to make multiple configuration per interface:
Code:
auto lo
iface lo inet loopback
auto lo:1
[Code].....
If not how can I downgrade the program responsible for reading this file?