Software :: Postfix - Address Verification Is Rejecting Too Much?
Mar 24, 2011
There is a mail server formed by debian4 + postfix 2.3.8 . Some messages aren't received or take too loong to be received. Here is a example or error in mail.log:
Code:
Mar 24 10:30:42 myserver postfix/smtpd[7467]: NOQUEUE: reject: RCPT from n7b.bullet.mail.re1.yahoo.com[69.147.103.218]: 450 4.1.7 <sentto-733423426-11-134235567-myname=mydomain.com@returns.groups.yahoo.com>: Sender address rejected: unverified address: Address verification in progress; from=<sentto-733423426-11-134235567-myname=mydomain.com@returns.groups.yahoo.com> to=<myname@mydomain.com> proto=SMTP helo=<n7b.bullet.mail.re1.yahoo.com>
[Code]...
View 5 Replies
ADVERTISEMENT
May 17, 2011
I've enabled popb4smtp in my mail server. Is this because of the IP 117.58.246.10 don't have a dns record? How can I sending email from this type of Ip which don't have dns entry?. But if I enable SMTP auth I can send email form this same ip. Another thing is I can connect to port 587 from the email client to send email but can't connect to port 25.
View 1 Replies
View Related
Mar 16, 2011
I have enforced to use the Linux /etc/passwd file to authenticate myself from Outlook, Postfix will accept mail from any IPs. However, I'm not able to send mails from my Outlook via my mail server to someone else on the Internet. Am seeing the following in Postfix's log.
Code:
Mar 11 21:07:39 production postfix/smtpd[16366]: connect from pcdxxxxx.netvigator.com[203.218.211.256]
Mar 11 21:07:39 production postfix/smtpd[16366]: NOQUEUE: reject: RCPT from pcdxxxxx.netvigator.com[203.218.211.256]: 554 5.7.1 <someone@hotmail.com>: Relay access denied; from=<mate@mydomain.com> to=<someone@hotmail.com> proto=ESMTP helo=<Windows>
Mar 11 21:07:42 production postfix/smtpd[16366]: disconnect from pcdxxxxx.netvigator.com[203.218.211.256]
Here are my Postfix settings.
[Code]...
View 8 Replies
View Related
Oct 6, 2010
I have an ubuntu server running postfix 2.6.5 (configured using DTC). If a user tries to send an email to more than one recipient, and one recipient address is bad, then the server returns an error and no mail is sent (even to the good addresses), rather than letting the good ones through. Error displayed by thunderbird is
Code:
"An error occurred while sending mail. The mail server responded: 5.1.1 [URL]: Recipient address rejected: User unknown in virtual mailbox table. Please check the message recipient noreply@domain.com.au and try again." and mail.log shows ...
Code:
Oct 6 20:35:08 www1 postfix/smtpd[22716]: connect from xxxxxx [xxx.xxx.xxx.xxx]
Oct 6 20:35:08 www1 postfix/smtpd[22716]: B62F92A44: client=xxxxxx [xxx.xxx.xxx.xxx], sasl_method=PLAIN, sasl_username=blake@domain.com.au
[code].....
View 1 Replies
View Related
Apr 22, 2011
I have this strange error - I switched from postfix 2.6.5 to 2.8.2 and I some mailservers cannot send mail to me. One of them was some sendmail server. I have virtual alias maps in mysql. It works fine for almost all server that are sending mail to me, but some of them seems to send mails as user@FQDN instead of user@virtualdomain my machine name is x49.tvujweb.cz, and mz email is kamil.horky@servis-it.net but in server logs is that user kamil.horky@x49.tvujweb.cz cannot be found in virtual alias maps.
here is my postconf:
Code:
2bounce_notice_recipient = postmaster
access_map_defer_code = 450
access_map_reject_code = 554
address_verify_cache_cleanup_interval = 12h
[Code]....
View 1 Replies
View Related
Jul 29, 2011
I've recently followed a guide I found online [1] and installed Postfix and Courier on my server machine. I can send emails from the server to any email address but unfortunately I can only receive emails sent from the server - it's only accepting emails sent locally from the host.
View 3 Replies
View Related
Mar 25, 2011
I recently set up a machine with Ubuntu 10.4 LTS to help to replace an aging VAX mailserver that was the DMZ mailserver for the company I work for. I set up a default install of postfix (via apt-get) to function as a DMZ border device that routes between two internal mailservers based on subdomain aliasing via internal DNS.
The problem is that although I have installed no anti-spam or anti-virus options, mail sent to this machine from any outside source containing a password-protected zip file is being rejected with error:
552 Password protected zip file found inside of the email
At first I'd thought that possibly it was the sending mailserver issuing this error, but after further testing I found that no matter the source, any password protected zip file is immediately rejected. Being as we're in a HIPAA-sensitive environment, this has been relied upon as a backup for people to do one time encrypted file sends via email. The file in question is relatively small, and I do not have any quotas on, and the same test file sent two ways (one encrypted zip and one non-encrypted zip) caused the encrypted zip only to fail.
As stated before, I do not use any type of antivirus or antispam measures, no header or body checks have been put in place, and in the course of trying to troubleshoot this problem, have probably opened my server up more than is strictly wise. I really need to enable this feature as being unable to take encrypted zips puts the entire migration at risk.
View 1 Replies
View Related
Aug 22, 2009
This seems like a relatively simple question, but I haven't been able to figure it out from the documentation after a couple of hours of searching. I'm running postfix on my mail server, and the vast majority of my spam has the sender address spoofed to match the recipient address. I've got spamassassin up and running, and very little gets through that, so it's not a serious problem, but if possible I would like to be able to reject the mail before it arrives to reduce the system load.
Mail is sent locally via webmail, relaying is denied, so the only way that mail should be sent from the domain is via a connection from localhost. The basic idea I'm thinking of is if the MAIL FROM sender claims to be an address at the receiving domain, but is connected from a remote IP, the mail should be rejected.
View 3 Replies
View Related
Apr 4, 2011
I've read many post close to my subject regarding blacklisting incoming emails, but non of them described what I really want:How can I reject a continuously changing email from my postfix, here is what I mean:
abduooo+bncCIr7stnbBBCssufsBBoEzTHSKg@googlegroups.com
abduooo+bncCMfZgc-iExCKr-fsBBoEMzorbA@googlegroups.com
abduooo+bncCLf5kv6MHRCtmefsBBoEjYnAAQ@googlegroups.com
I think you got what I mean, the thing I've taken from the posts I've read is that I created a sender_access file hashed it and added the:smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/sender_accessto postfix main.cf configurationThe sender access file reads:abduooo*@googlegroups.com REJECTBut that didn't work, I know that there is some magical slashes and dots to be added to the sender_access, but I don't know which.
View 1 Replies
View Related
Jun 24, 2011
I've got an uber simple test mail script in php on my awesome new dev machine running Ubuntu:
PHP Code:
Unfortunately, something is preventing mail delivery. I can't tell from this error log whether it's the remote machine rejecting me or whether it's my machine rejecting the self-signed cert on the remote machine:
Code:
I'm wondering what I could change in my postfix configuration to remedy this problem.
I tried setting smtp_tls_security_level = may = may but this did not change anything.
View 10 Replies
View Related
Dec 28, 2010
tell postfix to send email sent to one email address to another email address. What I really need to do is tell postfix that every email sent to [URL] and [URL] be sent to [URL] I tried transport maps like this: [URL] but that did not work. I then tried canonical maps like this:
recipient_canonical file:
/^((dbsupport|helpdesk).*)thisdomain[.]com$/ admins@thatdomain.com
sender_canonical file:
/^(.*@).*thisdomain[.]com$/ ${1}thatdomain.com
but it did not work either. I am really exhausted and I need to find a solution for this one since it is my boss asking me to get this working. This is what if in /var/log/mail in box1:
Dec 28 16:10:25 box1 postfix/pickup[19291]: 54D258F726: uid=0 from=<root>
Dec 28 16:10:25 box1 postfix/cleanup[23489]: 54D258F726: message-id=<4D1A5241.mailIBZ11LRR6@box1.thisdomain.com>
[code]....
View 4 Replies
View Related
Jun 30, 2010
I have create distro groups in zimbra and have add member sin there. when i connect an account on mapi etc. [URL] i have create a persona in order client to send from [URL] rather than [URL] How can i restrict inside postfix to relay using [URL]?
View 1 Replies
View Related
Dec 27, 2010
I need to have a postfix server to rewrite the sender's address. For example, if the sender is: [URL], then the recipient would receive all emails from [URL] as [URL]. I tried using the generic file and created a table out of it, but this did not work:
postmap /etc/postfix/generic
-rw-r--r-- 1 root root 9977 Dec 27 15:24 generic
-rw-r--r-- 1 root root 12288 Dec 27 15:25 generic.db
I added this line to the generic text file:
[code]....
I am running two boxes with postfix 2.3.3. and 2.1.1 respectively. Both need this configuration. I also added this line:
smtp_generic_maps = hash:/etc/postfix/generic
on the main.cf file. However, this did not work. The one running postfix 2.3.3 is on Centos 5.5, the other one is on SuSe Enterprise 9.
View 14 Replies
View Related
Jan 30, 2010
Working on ubuntu server for 1st time and need to create a new email address.The server has postfix
View 4 Replies
View Related
May 17, 2011
Very new to Ubuntu and Linux so this may be a simple one. I've recently setup an Ubuntu Server 10.04 box as a mail relay running Postfix and Amavisd-new (Spamassassin & ClamAV) and this has been working really well. I started to get a few emails through today with the following header[URL]..(removed domain name) The name's always in quotes and random. The fqdn is that which I configured in postfix as $myhostname. I can't figure out how this address is being used. This box is only used for incoming mail and acts as a relay to Exchange. Exchange doesn't send out through it. The only thing that may be going outwards is bounced messages from Exchange which are almost exclusively to linkedin.
The fqdn isn't public. This box isn't even part of our internal domain, it's just named that way with manual DNS added. Anyone seen this before? Will this header have been part of the message when it arrives at postfix or could this have been added by postfix itself?
View 2 Replies
View Related
Jun 21, 2011
I have set up a couple of postfix servers for my domains, but the only thing I am missing now is this: How to block the public sending mail from my email to my email? I have managed it with SPF, but surely there must be a better way, that returns "relay not allowed" to the client. The SPF method costs too much, since it must make a dns request for each mail. So far, I have not gotten many of these mails, unless when testing my mailserver, but as I see it, anyone should not be allowed to send mail from abuse@mydomain.com to abuse@mydomain.com.
Somebody must have thought about this a long time ago, and there is simply that little line in main.conf that I'm missing.. My setup is this (virtual): I have a primary mx, with postfix, courier IMAP/POP3 server, a user database, and sasl via saslauthd. I also have a secondary mail server (backup mx) with no sasl auth, but with a copy of the mail users in the virtual tables, but added as relay_* users instead.
Spamassassin and SPF testing is replicated too, so most of the stuff should work, but I simply cannot find a setting in Postfix that denies someone to mail FROM my address TO my address. When mailing from my address and out in the open, they are required to authenticate, but not when using one of my my domain addresses, and also targeting my domain addresses.
As said, It is possible with a strict SPF setting, but that is at a cost for every lookup. It would be quicker for postfix to lookup the sender and the recipient in the relay/virtual tables, and deny if both addresses were in the recipient tables, and sender is not authenticated.
View 5 Replies
View Related
May 21, 2009
I have an email server configured with postfix, dovecot, saslauthd and squirrelmail. It works great. In fact I'd even say it works too well: in squirrelmail, I can configure any sender address and my server will accept it. Message will be sent, wether the sender's address is [URL] or [URL]. Is there any way of limiting it in such way that only [URL] is accepted as sender's address?
View 6 Replies
View Related
Oct 7, 2010
Im running Ubuntu server 10.04 lts
Im trying to get postfix to receive mail from one address and pipe it to a PHP file for a help desk software called Trellis Desk.
They recommended that I use Cpanel but its not free and my boss is not willing to pay for it. I need a free solution.
I know my way around Linux but Im no professional
View 1 Replies
View Related
Sep 8, 2010
I setup a virtual server with these configurations:
1. Mail server: POSTFIX / DOVECOT
2. Webmin / Virtualmin
I am getting email to desired folders locally but I am not getting email from outside to desired users. Emails are bounced back with message "Address not found in virtual alias table".
Recent log errors are:
Sep 8 04:25:49 server1 postfix/smtpd[28002]: cannot load Certificate Authority data
Sep 8 04:25:49 server1 postfix/smtpd[28002]: warning: TLS library problem: 28002:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('/etc/pki/postfix/root.crt','r'):
[code].....
View 3 Replies
View Related
Mar 8, 2010
I am trying to configure virtual alias using regular expression.
For example :
Email send to user.1@example.com and user.2@example.com will deliver to user mailbox.
Email send to user2.1@example.com and user2.2@example.com will deliver to user2 mailbox.
And the numbers or alphabet in between user name and the domain will be vary , I can't just do a normal alias.
I been try to play around with main.cf and the virtual alias table but still not able to get work. So I am not sure is the main.cf didnt configure correctly or the regular expression is not working.
View 3 Replies
View Related
Feb 8, 2010
I've set up an email server as per this howto: [url]
In a nutshell, it uses a combinatio of postfix, dovecot, amavis (ClamAV and SpamAssisan) and mysql.
However, with this setup, authenticated users are able to spoof outgoing message by simple changing the "from" tag.
Does anyone have any ideas on how I could implement some address mapping to users?
In this setup, postfix users are NOT system users, by are stored in the database.
View 1 Replies
View Related
Mar 11, 2010
Here is what i do: make clean make makefiles CCARGS='-DEF_CONFIG_DIR="/opt/product/postfix-2.6.5/etc"
-DEF_COMMAND_DIR="/opt/product/postfix-2.6.5"
-DEF_DAEMON_DIR="/opt/product/postfix-2.6.5/libexec"
-DEF_MAILQ_PATH="/opt/product/postfix-2.6.5/bin/mailq"
-DEF_DATA_DIR="/opt/product/postfix-2.6.5/lib"
-DEF_NEWALIAS_DIR="/opt/product/postfix-2.6.5/bin/newaliases"
[Code]...
make install then i got this error: postfix: fatal: chdir(/usr/libexec/postfix): No such file or directory make: *** [install] Error 1 I don't understand why it's checking the usr/libexec folder for the daemons although I've set the folder to /opt/product/postfix-2.6.5/libexec in the makefile. Here is also the cat of my makedefs.out:
[Code]....
View 1 Replies
View Related
Jan 2, 2010
This is a transcript I get emailed at least once every day, usually about 3 to 10 a day recently.
Transcript of session follows.
SMTP server: errors from unknown[ip address]
<boring stuff snipped>
In: RCPT TO: <server@my domain>
Out: 550 5.1.1 <server@my domain>: Recipient address rejected: User unknown in local recipient table
Session aborted, reason: lost connection Now I cannot seem to find anything via Google, as when I put "server@" anywhere in the string, I just get web hosting or other kroomst. The emails usually come from legit places, usually hotels. Does this mean they are sending bad emails, i.e. they have a Trojan/worm, or is this a live hack attempt?. I believe the later, as I might get upto 3 domains from the one ip address, which is always, NOT associated with the listed domain. Not causing me any issues, except I have been getting a lot recently.
View 4 Replies
View Related
Jan 4, 2011
One of our clients uses a mobile client, which "helo"s with a non-resolvable hostname (which contains the correct IPv4 address in the name but does not resolve). I'd like to be able to config PERMIT "joeblow@mydomain" when the helo-names "*.mobilepool.carrier.net". Can anybody give me a hint how to do this, if it is even possible?Right now it just rejects based on not resolving the HELO name.
View 2 Replies
View Related
May 24, 2010
I'm trying to figure out how to access the local part and the domain part of an email address in postfix's main.cf. For example, myname@mydomain.net has myname as the local part and mydomain.net as the domain part.I get the whole email address with %s. I want to speed up the lookups by writing better database queries.I've had no luck finding this in the otherwise well documented postfix.
View 2 Replies
View Related
Mar 11, 2010
So I am trying to block any SSH connection attempts on Saturdays and Sundays to be rejected. This is the command I have come up with.
iptables -A INPUT -p tcp --dport 22 -o eth0 -i virbr0 -days Sat,Sun -j REJECT
I have also tried many different ways to do this but nothing is working, I am always getting Bad Argument: 'Sat,Sun' error, also when I try to use --days it says it doesn't recognize it.
View 3 Replies
View Related
Jan 12, 2010
The problem: when kpackagekit would prompt me to update packages, it would ask for my password. I would enter it, and the dialog would reject it with the message "incorrect password, please try again". Over and over. The password WAS correct -- it worked in Synaptic and on the command line using sudo, and obviously it also worked for logging in.
I suddenly had a hunch that kpackagekit might not be the culprit, and that authentication was being done by a different program -- and lo and behold, the dialog actually said policykit up there...
So, searching for policykit problems out there, I ended up seeing someone reinstalling theirs for their problem (which happened to be different from mine). The code to do that, in the command line:
Code:
sudo apt-get install --reinstall policykit
After that, entering the password after kpackagekit prompts me to has worked fine and the updates happen as nature intended.
View 4 Replies
View Related
Jan 30, 2011
I'm facing the best problem which I ever had, where is the previous vendor don't do any documentation. So my task actually do some enhancement on the filtering solution actually, but what I found out is like this..
here my cat /var/log/maillog
Jan 31 09:47:02 mws postfix/cleanup[11028]: 998464290DB: hold: header Received: from mail.jkm.gov.my (webmail.jkm.gov.my [10.0.223.2])??by webmail.jkm.gov.my (Postfix) with ESMTP id 998464290DB??for <hidzuan@gmail.com>; Mon, 31 Jan 2011 09:47:02 +0800 (MYT) from webmail.jkm.gov.my[10.0.223.2]; from=<e1@jkm.gov.my> to=<hidzuan@gmail.com> proto=ESMTP helo=<mail.jkm.gov.my>
[Code].....
View 4 Replies
View Related
Mar 3, 2011
Just installed ubuntu on my computer, but when I try to connect to my wireless I type in my password and it doesn't connect.
It says its WPA/WPA2 and won't let me change that (I am not sure what mine actually is)
Im using a virgin media 'superhub' to connect but have changed the default wireless password.
View 5 Replies
View Related
Apr 3, 2011
I have installed the graphic user interface for IPtables and enabled this firewall. However, I find it a bit strange. What is the difference between rejecting and denying the traffic? If I want to configure IPtables as two-way, how can I define which of my apps can connect to the internet and which can't? If this firewall is enabled, does it really run in the background, protecting the user,or does it run only when its GUI is opened?
View 9 Replies
View Related
