block incoming email within either postfix or spamassassin when the sender equals the recipient. The manner in which our mail infrastructure is set up would preclude this from happening. Granted, we do have outside vendors that spoof our domain so we have to allow emails in with our domain as the sender/from. The vendors do not, however, utilize the same sender/recipient when sending emails.
View 1 RepliesThis seems like a relatively simple question, but I haven't been able to figure it out from the documentation after a couple of hours of searching. I'm running postfix on my mail server, and the vast majority of my spam has the sender address spoofed to match the recipient address. I've got spamassassin up and running, and very little gets through that, so it's not a serious problem, but if possible I would like to be able to reject the mail before it arrives to reduce the system load.
Mail is sent locally via webmail, relaying is denied, so the only way that mail should be sent from the domain is via a connection from localhost. The basic idea I'm thinking of is if the MAIL FROM sender claims to be an address at the receiving domain, but is connected from a remote IP, the mail should be rejected.
I'm looking for a way to redirect e-mail with postfix based on sender AND recipient. What I want: Let's say I have 3 users:
[code]....
and an external address, let`s call it [URL] sends e-mails every day to andy, mark and john Now, MARK and JOHN, need the e-mail sent by [URL], but TOM doesn't need it. Is there a way to redirect ONLY the e-mail sent to TOM from [URL], to some other address, let`s say [URL] without affecting the e-mail received by MARK and JOHN? Unfortunately using SENDER ACCESS redirects ALL e-mail from [URL]
We have MS Exchange email server with postfix/amavis on FreeBSD as proxy for anti-spam and anti-virus. We use our own developed CRM and trying to implement such functionality that when CRM manager send email to CRM client or vice versa through email client like Outlook (no plugins for CRM) this message would be shown in CRM. There is already a solution to parse emails from specific emailbox and show it in CRM.
What I need is to create postfix email filter to check if sender email is in file CRM_managers_emails and recipient email is in file CRM_clients_emails then forward that email to [URL] Filter should check both incoming and outgoing messages. I will auto generate CRM_managers_emails and CRM_clients_email files containing all such emails taken from CRM database. I know i should use something like Postfix After-Queue Content Filter but most of examples are for blocking emails.
I'm trying to configure our mail server to block email from a specific sender reaching a specific recipient. In other words, if one of our employees is getting harassed by a 'stalker', how would one go about blocking, at the MTA (Sendmail) level, a specific sender email address from reaching a particular users inbox? We do not want to capture the email - simply block it before it consumes server resources.The Sendmail server (MTA) is a front end to our Exchange server so no user accounts exist on the Linux server. We simply use it as a SPAM and Virus scanner then forward clean email to the Exchange server.
View 6 Replies View RelatedI have Centos 5.5 and using Postfix, procmail and Dovecot for sending and receiving emails. I have spamassassin installed too but not configured. I am getting lots of spams. I googled a lot to find if there is any configuration but I couldn't find.how to setup spamassassin to filter emails for spams.
View 1 Replies View RelatedI dont know why, but my postfix dont delivery local users, the virtual users works fine.
This is my main.cf:
When i try echo "Test" | mail -s Test root ; tail -f /var/log/maillog | grep "root" i see this error:
we have a Postfix mail relay server. Not to be an open relay we use check_sender_access restriction with allowed sender domains. Is there a way how to configure postfix to accept mails from any domain for a specified recipient? Something like
Code:
if (recipient_address==host@mydomain.com) accept; We have an admin mailbox and we need it to be accessible from everywhere.
I have an ubuntu server running postfix 2.6.5 (configured using DTC). If a user tries to send an email to more than one recipient, and one recipient address is bad, then the server returns an error and no mail is sent (even to the good addresses), rather than letting the good ones through. Error displayed by thunderbird is
Code:
"An error occurred while sending mail. The mail server responded: 5.1.1 [URL]: Recipient address rejected: User unknown in virtual mailbox table. Please check the message recipient noreply@domain.com.au and try again." and mail.log shows ...
Code:
Oct 6 20:35:08 www1 postfix/smtpd[22716]: connect from xxxxxx [xxx.xxx.xxx.xxx]
Oct 6 20:35:08 www1 postfix/smtpd[22716]: B62F92A44: client=xxxxxx [xxx.xxx.xxx.xxx], sasl_method=PLAIN, sasl_username=blake@domain.com.au
[code].....
I have Postfix and Spamassassin setup on Ubuntu Server 9.10. The mail is working perfectly. Spamassassin is correctly marking messages as spam. My problem is with the milter and procmail. On past servers I was able to reject spam based on score via the spamass-milter. For whatever reason I can not get it to work. I have also tried with procmail, again, it does not work. Here are the relative lines in their respective config files:
[Code]....
In the last week email delivery had slowed down to taking approximately 24 hours and investigation has revealed that there were 45000 emails in the mailqueue. I flushed the mailqueue yesterday but mail delivery is slowing down again because emails are again being queued by the thousand.
The mails are mainly spam sent to ficticious users at a genuine domain hosted on the server.
My setup is running Courier IMAP with Postfix, Spassassin is installed along with Amavisd-new but I just don't understand why this has suddenly become a problem based on my setup not having changed for the last 6 months.
Should these spam emails be being discarded by spamassassin before reaching the mail queue? Are my discard score settings too high (6.9)?
I am currently running Ubuntu Server 9.10 and followed this HOWTO on setting up my email server.
[url]
Everything seems to work correctly. If I look in the Maildir the emails I send to test are there.
The problem is when I try to sync my email via IMAP from my windows box (on a different network) it doesn't show any of my email nor does it deliver new email. My email app doesn't give any errors nor does the logs on the server.
How can I get it so my email syncs to windows computer? I am sure it is something really small that I am over looking but I can't seem to find it anywhere. I don't know if you need to see any of my config files but I can post them if needed.
My company email server has been working flawlessly for the last 5+ years. Recently, one of our clients put their email server behind a firewall (an assumption on my part; details below). Ever since, email sent from within the company (192.168.xxx.xxx internal address; all computers and server is behind a NAT firewall [Netgear FVX538]) is either being sent to the client after some delay (if email is sent using Outlook) or is being deferred until the messages expire (Thunderbird, Squirrelmail, etc.). Email sent to the client from anywhere outside the company (using Thunderbird, Outlook or any other email client) is also delivered without any problems (usually after a short delay).
All other emails to the World are being sent without any problems at all (both inside and outside the company; using any email client or webmail). I did contact the client's postmaster, but the client, being a large government agency, will probably not address the problem (if it is on their side) anytime soon. I am not sure if I can do anything from my end to solve the problem. Ever since the problem with the client began, I added two statements to the postfix configuration file (smtp_pix_workaround_delay_time = 20s and smtp_pix_workaround_threshold_time = 0s); this seemed to a bit - it reduced the delay for emails sent via Outlook to a few minutes (as opposed to 30+ minutes); emails sent using Thunderbird/webmail are still being deferred.
Server details: Dual quad-core processor machine, 32 GB RAM, dual 1 gbps network, running Fedora 14 (64-bit; loosely modeled along the lines of Perfect Server (with ISPConfig2) as described on the howtoforge website). Running Postfix (v. 2.7.1), Dovecot (v. 2.0.9).
Postfix details:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
body_checks = regexp:/etc/postfix/mbl-body-deny
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
[code]....
I emailed the client's postmaster suggesting they disable smtp fixup. But still, what bothers me now is that Outlook works (both within and outside the company) while Thunderbird, webmail, etc. (used by ~90% of the users) do not. In addition, all email clients from outside the company can send email (authenticated via the company server) to the client without any problems. Is there anything I can do on my end to make non-Outlook clients work within the company (webmail is hosted on the company server; so, it would have an internal address as well)?
I want a mail server that can relay mails to the internet using GMail and fetch the mails of different accounts into the mail server and distribute them to their respective users. I am using Postfix, Fetchmail and Dovecot. I have a PC with 3 users.I use the PC having Ubuntu 9.04 and share the internet. We all send mail and retrieve mail. We do use Evolution and Mutt sometimes. We want to send our mails with our email_ids without even logging in.
Hostname
mail.myhomepc.com
Domain
myhomepc.com
[code]....
I have created my custom certificate using SSL. I've created the Postfix's main.cf file following a tutorial on the net. Currently mails are going fine, but with our local email_ids. I want Postfix to rewrite our local email_ids with the equivalent email_id on the net.
I need to have a postfix server to rewrite the sender's address. For example, if the sender is: [URL], then the recipient would receive all emails from [URL] as [URL]. I tried using the generic file and created a table out of it, but this did not work:
postmap /etc/postfix/generic
-rw-r--r-- 1 root root 9977 Dec 27 15:24 generic
-rw-r--r-- 1 root root 12288 Dec 27 15:25 generic.db
I added this line to the generic text file:
[code]....
I am running two boxes with postfix 2.3.3. and 2.1.1 respectively. Both need this configuration. I also added this line:
smtp_generic_maps = hash:/etc/postfix/generic
on the main.cf file. However, this did not work. The one running postfix 2.3.3 is on Centos 5.5, the other one is on SuSe Enterprise 9.
I am trying unsuccessfully to have a more permanent fix so I can receive emails from an invalid domain. The message is 'Sender address rejected: Domain not found' in the postfix mail logs. Fair enough, there may be an A record or MX record problem there, but there is nothing I can do about this with the Sender at present. Mail *will* come through from the invalid domain if I delete
Code:
reject_unknown_sender_domain
from the list at: smtpd_recipient_restrictions in /etc/postfix/main.cf (see coded area below for full list). I have added the Domain in question as an 'OK', both by name and by IP address, to: /etc/postfix/recipient_access, then used postmap to successfully create the database which appears as: recipient_access.db
ie recipient_access (not recipient_access.db) has contents: invalid-domain-name.com OK ; the space betw is a tab space 123.456.789.012OK ; the space betw is a tab space I suspect the failure is something to do with postmap and the recipient_access.db database file created by postmap, but just cannot work this out. Running: postconf -d indicates that the hash format is the default database format
As indicated below,
Code:
check_recipient_access hash:/etc/postfix/recipient_access is listed up front in smtpd_recipient_restrictions Postfix was restarted on all occassions Everything above was done as root and permissions on the .db files are the same as other files in /etc/postfix
From /etc/postfix/main.cf:
Code:
smtpd_sasl_auth_enable=yes
smtpd_helo_required = yes
disable_vrfy_command = yes
[code]....
I have an email server configured with postfix, dovecot, saslauthd and squirrelmail. It works great. In fact I'd even say it works too well: in squirrelmail, I can configure any sender address and my server will accept it. Message will be sent, wether the sender's address is [URL] or [URL]. Is there any way of limiting it in such way that only [URL] is accepted as sender's address?
View 6 Replies View RelatedI have setup up an Opensuse as a simple we/application server.It handles requests for various things and will need to send out email on occasion for things like password reset requests, information / warnings etc. etc.This is a standard OPenSuse 11.x install with defaults so it comes with Postfix as the mta.I do not want a mail server I just want to send out via my clients mail server which is hosted exchange rackspace, which simply requires SMTP auth to do so.What would be the proper way to do this so ALL e-mail send from this machine, regardless of account like WWWRun or when logged in and sending from the command line has the same sender all the time.
View 6 Replies View RelatedIm trying to get postfix to filter my outgoing mail and basically drop everything that is not in my hash table.
So far I managed to get this going
Code:
Code:
Unfortunately those rules also apply to incoming messages. My goal is to disallow users on my host to change their "MAIL FROM" to anything they like and restrict them to domains I specify. I'm aware that the local part still is variable and a user of domain "foo.com" could use a email of domain "bar.com", but still some of my troubles would be solved if I get this running.
This is a transcript I get emailed at least once every day, usually about 3 to 10 a day recently.
Transcript of session follows.
SMTP server: errors from unknown[ip address]
<boring stuff snipped>
In: RCPT TO: <server@my domain>
Out: 550 5.1.1 <server@my domain>: Recipient address rejected: User unknown in local recipient table
Session aborted, reason: lost connection Now I cannot seem to find anything via Google, as when I put "server@" anywhere in the string, I just get web hosting or other kroomst. The emails usually come from legit places, usually hotels. Does this mean they are sending bad emails, i.e. they have a Trojan/worm, or is this a live hack attempt?. I believe the later, as I might get upto 3 domains from the one ip address, which is always, NOT associated with the listed domain. Not causing me any issues, except I have been getting a lot recently.
I've set up an email server as per this howto: [url]
In a nutshell, it uses a combinatio of postfix, dovecot, amavis (ClamAV and SpamAssisan) and mysql.
However, with this setup, authenticated users are able to spoof outgoing message by simple changing the "from" tag.
Does anyone have any ideas on how I could implement some address mapping to users?
In this setup, postfix users are NOT system users, by are stored in the database.
I'm testing my mail server, and sending email works fine. However, when I tried to send emails to my server from gmail, I get this log:
Code:
Aug 8 14:18:17 anbient postfix/smtpd[14228]: warning: database /etc/postfix/virtual.db is older than source file /etc/postfix/virtual
Aug 8 14:18:17 anbient postfix/smtpd[14228]: connect from mail-qy0-f169.google.com[209.85.216.169]
Aug 8 14:18:17 anbient postfix/smtpd[14228]: F3D4B1DD02C0: client=mail-qy0-f169.google.com[209.85.216.169]
Aug 8 14:18:18 anbient postfix/cleanup[9988]: F3D4B1DD02C0: message-id=<4C5EBC96.2030800@gmail.com>
Aug 8 14:18:18 anbient postfix/qmgr[9993]: F3D4B1DD02C0: from=<felipefidelix@gmail.com>, size=1982, nrcpt=1 (queue active)
Aug 8 14:18:18 anbient postfix/smtp[9995]: connect to net[174.132.240.146]:25: Connection refused
Aug 8 14:18:18 anbient postfix/smtp[9995]: F3D4B1DD02C0: to=<fidelix@net>, orig_to=<eu@felipefidelix.com>, relay=none, delay=0.15, delays=0.09/0/0.05/0, dsn=4.4.1, status=deferred (connect to net[174.132.240.146]:25: Connection refused)
And this is strange. 174.132.240.146 seems to be the web address 'net.net'. I am sure this has to be some setting in postfix, cuz its trying to deliver the email to 'fidelix@net', and that cant be right.
Here is my postconf -n output:
Code:
root@anbient:/var/mail# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
home_mailbox = Maildir/ .....
The scenario: We have an external server that runs HTTP/DB servers for out shop system. Then, there's our local, in-house infrastructure that runs a.. yeah... Exchange 2010. The shop system on the external server needs to send mails to customers (order confirmations, invoices, etc.). seing as sending them directly through the local MTA (Postfix) would cause mail delivery problems because of reverse DNS issues, i've set the Postfix MTA to act as a satellite to our in-house Exchange Server, so the Exchange sends the mail instead, giving recipient mail servers a valid reverse DNS lookup.
Now, mails sent by the (proprietary, uneditable) shop system are relayed correctly and sent to the target e-mail address. My problem is: Mails not sent by the shop system, but by our own PHP scripts which run on that same external servers, are NOT relayed properly. So the Exchange is fine with the mails sent by the shop system, but not the mails sent by our scripts. This is what i get in the mail.log: The successfully relayed mail sent by the shop system:
[Code]....
I'm using postfix to send some mail from my cloud server via a web page on my website that uses PHPmailer to do SMTP authentication. My cloud server has a dedicated IP for all inbound and outbound data. The problem I am having is that it sends roughly 75 - 100 messages successfully before it returns the following error for the remaining few hundred recipients in my list:
SMTP Error: The following recipients failed: example@example.com Mailer Error [URL] SMTP Error: The following recipients failed: example@example.com SMTP server error: 5.5.0 Sender already specified
Here is what i do: make clean make makefiles CCARGS='-DEF_CONFIG_DIR="/opt/product/postfix-2.6.5/etc"
-DEF_COMMAND_DIR="/opt/product/postfix-2.6.5"
-DEF_DAEMON_DIR="/opt/product/postfix-2.6.5/libexec"
-DEF_MAILQ_PATH="/opt/product/postfix-2.6.5/bin/mailq"
-DEF_DATA_DIR="/opt/product/postfix-2.6.5/lib"
-DEF_NEWALIAS_DIR="/opt/product/postfix-2.6.5/bin/newaliases"
[Code]...
make install then i got this error: postfix: fatal: chdir(/usr/libexec/postfix): No such file or directory make: *** [install] Error 1 I don't understand why it's checking the usr/libexec folder for the daemons although I've set the folder to /opt/product/postfix-2.6.5/libexec in the makefile. Here is also the cat of my makedefs.out:
[Code]....
The title says it all, how do I enable Spamassassin for Evolution??
i have downloaded it, and it tells me it is installed.
I'm migrating a mailserver from an old to a new mailserver. The new mailserver is based on ISPConfig 3.0.6.1. I would like to migrate what spamassassin learnt in the past from the old mailserver to the new one. Now the question:
- The 2 spamassassin versions are different. Is it a problem?
- Can I just migrate the database with this commands???
Code:
sa-learn --backup > sadb.bkp
sa-learn --restore ./sadb.bkp
-how to migrate SpamAssasins Auto White List and all others SpamAssassins databases?
Upgraded my Debian server over the weekend - caught up on all the updates since January. One of them was Spamassassin, which was working fine before (3.2.5). After the upgrade to 3.3.1, it's NOT using Bayes anymore - and I'm now finding 200+ messages for male-enhancement/ED meds, knockoffs of expensive watches and no-study graduate degrees in my Inbox that previously would have gone to /dev/null. I have the following in /etc/spamassassin/local.cf:
[Code]....
I have a dedicated server which is running CentOS release 5.5
I'm still learning this as I go, but, frustrated at the amount of spam I was getting, I decided to install the Qmail scanner.
I followed the instructions here, all of which seemed to go well.
[url]
However, now when I try to send mail I am getting the following error:
The mail server responded: qq temporary problem (#4.3.0).
Due to all the "fun" I had upgrading spamassassin from 3.2.5 to 3.3.1 on C55 I thought I would detail it here so as to possibly save others from all the frustration I have endured. There are probably a zillion different ways to make this work but this is how I did it and it seems to work well.
1) Acquire spamassassin rpm.
I downloaded several different versions from various sites and had problems with all of them so I ended up grabbing the SRPM from Fedora 13 spamassassin-3.3.1-2.fc13.src.rpm. This of course will not load onto C55 as rpmbuild has changed so I loaded it onto a FC13 box and then TARed the SPEC & SOURCES directories, copied them onto a C55 and built SRPM from there.
2) Install on C55
The new spamassassin requires several updated packages to make it happy.
a) perl-Mail-DKIM greater than 0.31. I cheated and used this one from FC8 perl-Mail-DKIM-0.32-3.fc8.noarch.rpm
b) perl-socket6 that is 2.0 or later. I got this one from DAG perl-Socket6-0.20-1.rf.x86_64.rpm
c) perl-NetAddr-IP that is 4.0 or later. Again DAG saved the day perl-NetAddr-IP-4.007-1.rf.x86_64.rpm
d) the spamassassin of course :)
Actually I built them from the SRPMs as I needed both the 32 and 64 bit packages for various servers.
3) Run sa-update --D to get the latest rules then restart the spamassassin service. For those who do not have access to a FC13 box you can get a copy of the SRPM I made here [URL].