My fail2ban won't block relay attempts (it does block ssh)
mail.log contains lots of
Code:
NOQUEUE: reject: RCPT from 118-167-6-196.dynamic.hinet.net[118.167.6.196]: 554 5.7.1 <333@fgytry.myip.org>: Relay access denied
jail.conf
[Code]....
Here is what i do: make clean make makefiles CCARGS='-DEF_CONFIG_DIR="/opt/product/postfix-2.6.5/etc"
-DEF_COMMAND_DIR="/opt/product/postfix-2.6.5"
-DEF_DAEMON_DIR="/opt/product/postfix-2.6.5/libexec"
-DEF_MAILQ_PATH="/opt/product/postfix-2.6.5/bin/mailq"
-DEF_DATA_DIR="/opt/product/postfix-2.6.5/lib"
-DEF_NEWALIAS_DIR="/opt/product/postfix-2.6.5/bin/newaliases"
[Code]...
make install then i got this error: postfix: fatal: chdir(/usr/libexec/postfix): No such file or directory make: *** [install] Error 1 I don't understand why it's checking the usr/libexec folder for the daemons although I've set the folder to /opt/product/postfix-2.6.5/libexec in the makefile. Here is also the cat of my makedefs.out:
[Code]....
I'm trying to use a technique suggested by a fella at this website....
[URL]
He suggests adding an echo line to the actionban line in order to create or add to a file that will contain a list of all the IP's that fail2ban has banned.....but it doesn't seem to generate any output. .....here is the command.....
actionban = iptables -I fail2ban- 1 -s -j DROP
echo >> /etc/shitlist
I never get any IP's in the file so the echo part does not seem to work.
I've got a server running 9.10, and I'm having a few issues with SMTP. It's got Postfix and Dovecot installed, and eventually I'll add content filtering, but I need to get past this issue first.
I know there's a lot of posts out there for Postfix issues, but I haven'tbeen able to find one specific to my issue.
IMAP and POP3 work fine through SSL, and the server can send mail without any problems. That's all fine and dandy, but I need to utilize an e-mail client (like evolution or outlook). Everytime I set up a user in Evolution, the smtp connection times out, or is refused. I know it's not a firewall issue. Port 25 is open, as well as 465. So I should be able to connect through SSL. I want to be able to connect through SMTP using the same credentials as IMAP.
Here's my main.cf file:
Code:
myhostname = mail.adamwgay.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
[Code].....
everytime I get things rolling, this issue pops up. I don't know if it's something I'm setting up wrong in the client, or if it's a configuration error on my part in postfix.
I'm also having a bit of an issue with my aliases. I've basically got a lot of addresses going to root, then root going to the main user, but it's not actually delivering the mail to the main user. It sends it straight to root.
i have fail2ban on server but everytime fail2ban conducts a log rotation it unbans all the banned IP's. I have ip's to be banned for a week whenever a log rotation happens or i restart fail2ban i dont want all the ip's released! I was thinking there was a script or patch that would fix this but i have come up short.
View 2 Replies View RelatedI have tried to find solution in existing posts but could not specifically find any with my kind of issues and hence a new post on oft repeated subject !! -- and apologies for a long long post here.Here is where I am ..On a AMD 64bit machine - I have ubuntu 10.10 desktop installed. I want this development machine to support virtual mailboxes so that I can use them from multiple apps and create real life deployment situations.I installed postfix + dovecot following the tutorials available here and current state is - I can send mails using telnet sessions and I see that the mail files are getting created in /Maildir form as I have directed in the conf files. I have configured Thunderbird mail client as well.
Issue #1: Mail sending works from Thunderbird but it always responds back with 'No mail on server' message when I try to receive mails. SMTP is configured with STARTTLS and POP3 with None (i.e. plain text password)Issue #2: Also, while going thru conf, logs and during testing - I found a few things which defer in this installation for authentication. I have given the session transcripts here.Issue #3: That being major issue - I also want to configure my virtual users to use TB client to access their mails - I did not find any tutorials or pointers towards that in my search for past few days. If I send mails to a non-Unix virtual user - the mail gets stored into /home/vmail/<domain>/<user>/new directory.Here are the conf files.main.cf for postfix
Code:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
[code]....
Currently suffering from this bug:If you don't want to read the whole thing, it appears fail2ban overloads IPTables when you have too many jails, and sends a wholeload of commands at once.I attempted to use the workaround making it sleep for a random period of time, but this does not help at all, it still fails like it used to.Any ideas? Fail2ban is a pretty popular app...Ubuntu 9.10.
Code:
$ aptitude show fail2ban
Package: fail2ban
[code]...
I installed fail2ban from the Ubuntu Software Center (Ubuntu 10.10) and everything seemed to go fine. But when I try to access the client I get this output:
Code:
wolfgang@Culture:/var/log$ fail2ban-client status
ERROR Unable to contact server. Is it running?
[code]....
I have a postfix server running on a virtual machine hosted by vpslink.com. I have followed the following configuration guide to install the system with dovecot, sasl smtpd authentication, and postfix as an mta: [URL](I know it says it's a debian configuration, but it seemed legitimate that I could follow it). Anyway, in sending email from my primary email account, I have found that roughly 1/2 of the messages are delivered, and 1/2 of them are rejected with a message similar to the following:
Quote:
[code].....
I can't seem to reinstall Postfix. I followed a guide and couldn't get it to work. After I retried a few times I gave up and deleted all files and folders I could find related to Postfix. Well I realized what the issue was and now that I want to try reinstalling Postfix it won't allow me.
When I type:
Code:
sudo apt-get install postfix
Reading package lists... Done
Building dependency tree
Reading state information... Done
postfix is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 3 not upgraded.
1 not fully installed or removed.
[Code]...
I am trying to install a mail server (postfix). I followed the instructions (up until SMTP, I do not want that) on ubuntu pages, without any result. I can send mail, but I can't get any.
View 4 Replies View RelatedI have been following the guide atand it has all worked perfectly and as expected, except for when it says to run "telnet localhost 25". Instead of getting an ip address displayed as I have seen it is supposed to, it just out puts this."Trying 127.0.0.1...Connected to localhost.localdomain.Escape character is '^]'.Connection closed by foreign host."
View 3 Replies View RelatedI'm trying to implement this method to block php injection attack using fail2ban: here it is, however I'm not sure it applies to Ubuntu. You see, there's this filter that must be added to the fail2ban jail file:
HTML Code:
[php-url-fopen]
enabled = true
port = http,https
filter = php-url-fopen
[Code]....
Currently suffering from this bug:If you don't want to read the whole thing, it appears fail2ban overloads IPTables when you have too many jails, and sends a whole load of commands at once.I attempted to use the workaround making it sleep for a random period of time, but this does not help at all, it still fails like it used to.Any ideas? Fail2ban is a pretty popular app...Ubuntu 9.10.
Code:
$ aptitude show fail2ban
Package: fail2ban
[code]...
I'm getting loads of hacking attempts on my pop3 daemon. Looks like fail2ban is not stopping it. How to ban these type of attacks?
Dec 2 12:14:49 sosaria pop3d: Disconnected, ip=[::ffff:109.81.181.238]
Dec 2 12:14:49 sosaria pop3d: Connection, ip=[::ffff:109.81.181.238]
Dec 2 12:14:49 sosaria pop3d: LOGIN FAILED, user=duky, ip=[::ffff:109.81.181.238]
Dec 2 12:14:54 sosaria pop3d: Disconnected, ip=[::ffff:109.81.181.238]
Dec 2 12:14:54 sosaria pop3d: Connection, ip=[::ffff:109.81.181.238]
[Code] ....
I've got in my /etc/fail2ban/jail.local:
[dovecot]
enabled = true
port = pop3,pop3s,imap,imaps
filter = dovecot
logpath = /var/log/mail.log
maxretry = 3
[Code] .....
I have a static IP from local ISP and my computer is configured with 192.168.1.2 (LAN IP).
I have installed ubuntu server 9.04 and want to send emails from my server for which I've configured postfix. But I dont know what to do next.
My questions are:
1. Do i need to install DNS server for using postfix? If not, what should I install to send emails from this server?
2. Do I need to forward any particular port in my router?
3. If I dont have a fully qualified domain, what are the configurations I need to do to send emails?
I use Ubuntu Server 9.10 64bit
at first, sendmail was installed and everything was working great. all the email sent from forum and webform I host as been sent correctly in the reception box of the recipient. But I want postfix as MTA to do my delivery to all my virtual domain I host.
when sendmail is uninstalled and postfix installed and all services configured(php included) and restarted(apache included), when I send a email from command line or from web form, the email goes in junk mail for some ISP email address and for gmail and the email did'nt show at all for hotmail. but email sent from forum (phpbb) still goes in reception box like normal email do.
I tried do change the headers, who was working with sendmail, of the email sent from web form without success.
so I tried to uninstall postfix and reinstall sendmail, restarted all service and every thing was back to normal... email sent goes in reception box.
I tried it twice.... sendmail, postfix, sendmail, postfix and now back to sendmail for a working solution until I get postfix working.
I tried with spf entry in my dns, I tried allowed icmp packet from outside with iptables, I tried many different headers for my email. My ip is not blacklisted anywhere.
I have a problem setting up Postfix on my home (behind Router/firewall) Ubuntu driven server, I have been trying for days now with no luck. All I would like to do is use the server to send mail (MTA). So while installing I configured it as a satellite system.
file:
/etc/postfix/main.cf
settings:
myhostname = mail.example.com
mydomain = example.com
alias_maps = hash:/etc/aliases
[code]....
I'm getting a 553 From address not verified. I have tried what it suggested from the URL link, but it still doesn't work.
I installed and configured postfix per the guide on help.ubuntu.com. Everything seems to work fine with smtp and it says that my emails are being sent, but I never receive them.What could be causing this problem?The local mailbox shows that the email was sent.Mail.log shows that the message was delivered to the mailbox.
View 5 Replies View RelatedI have installed qmail on my 10.04 server (Because I prefer qmail and dont want to use postfix) and I would like to just install courier IMAP/POP server without the Postfix (Or other mail servers).
Is there an apt-get install switch that will install just what I want to install without deps; or at least a way to block unwanted deps from being installed.
I have just built an internal postfix server for sending mail only, it's not accessible outside our network. I will be sending from our domain, Rewriting the from field to abc.com is turned on in the postfix config. A friend is telling me this will not work as they will do reverse lookups on our domain. What does this mean? Obviously the domain the email is sent from is a valid domain. If they do a lookup from the IP the mail came from it would be global crossing, our internet provider? These outbound emails are critical client reports, I want to make sure they are not seen as spam.
View 1 Replies View Relatedi want to run a postfix server as a backup mx, but anybody knows how can i collect the fist server mails with this one? this is multipop action but how can i do it with dovecot or any other pop collector?
View 1 Replies View RelatedI am setting up an ubuntu server, in order to use it with Joomla.
Does someone knows if is possible to use PostFix as SMTP server for Joomla?
If does; would be necessary to install IMAP or POP3, Webmail etc if I just want to send automatics mails via Joomla.
I am setting up a mail server on an Ubuntu 10.04 LTS desktop. I am using the tutorial at [URL] to do it, and have followed it (i believe) to the letter. However, when i try to use postfix, this error appears in mail.log
server postfix/smtpd[14270]: NOQUEUE: reject: RCPT from smtp110-mob.biz.mail.gq1.yahoo.com[98.136.185.201]: 554 5.7.1 <smtp110-mob.biz.mail.gq1.yahoo.com[98.136.185.201]>: Client host rejected: Access denied; from=<myemail@yahoo.com> to=<admin@mydomain.com> proto=SMTP helo=<smtp110-mob.biz.mail.gq1.yahoo.com>
and it will not recieve.
My main.cf: (mydomain is replaced by my domain in the file)
Code:
smtpd_banner = $myhostname ESMTP $mail_name Welcome!
biff = no
append_dot_mydomain = no
readme_directory = no
[code]....
I currently have a postfix / dovecot server running on one ubuntu server with nullmailer relaying webmail on a different server. This is currently working except the mail server is rejecting incorrect addresses which results in the messages being stuck in the nullmailer queue on the webmail server. Is it possible to force postfix to accept and manage all relayed messages from webmail, or is it possible for the nullmailer to manage the bounced messages correctly?
View 1 Replies View RelatedTopic says it. Postfix was receiving emails just fine on 10.10, did the upgrade, now every host is unkown...even though I can dig -x from the machine and resolve.
View 3 Replies View RelatedEDIT: Change the topic, see post #3
I've been following this guide: http://flurdy.com/docs/postfix/
And done the points up to "Advanced mail server" and are trying to test mailing mail@mydomain.com to mail@mydomain.com (yes, the same inbox) using Thunderbird, through my own DNS, from the server.
But I get the following error: The message can not be sent because the connection to SMTP server mydomain.com timed out.
And when I check /var/spool/mail/virtual where the mailboxes are supposed to be stored there are none.
So I'm wondering how I create a mailbox with postfix.
I can add that I am quite a noob at linux but have to do this in a school project.
I'm using ubuntu server 10.04 32bit with GUI (yes I know, I know)
I yesterday installed fail2ban on my server and I see I am not getting logs for the genuine people also who log in to my machine.In
Quote:
/var/log/auth.log
It is a Ubuntu server and I had installed fail2ban via
Quote:
apt-get install
I thought some thing might be in
Quote:
/var/log/fail2ban.log
but there I do not see any thing
Quote:
2011-02-10 20:26:35,002 fail2ban.server : INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.4
2011-02-10 20:26:35,003 fail2ban.jail : INFO Creating new jail 'ssh'
2011-02-10 20:26:35,003 fail2ban.jail : INFO Jail 'ssh' uses poller
2011-02-10 20:26:35,031 fail2ban.filter : INFO Added logfile = /var/log/auth.log
[Code].....
I've had fail2ban setup for awhile for my SSH server, and that works beautifully (I had someone I knew attempt to access it and get banned) however I then tried to set it up to ban people scanning my webserver for lots of other pages which dont exist (and have never been linked to) such as phpMyAdmin.
In my jail.conf I have:
Code:
However Looking at this I realise I need to edit the filter.d/apache-error.conf
I'm not sure exactly how to setup the regex to ban the correct hosts
The errors from the scanners are like this:
Code:
I am having issues getting yum to work with the repos for fail2ban and denyhosts. I followed the centos link on installing/cfg repos. However every time i run yum install fail2ban or denyhosts it does not find the software. I read in several google searches that I should be able to install it using yum. Is that info wrong? These are the link I was s reading too from centos. [URL]. I know I can download the rpm or a tar file but I would like to keep it in sync with yum if possible. May be I have the wrong repo? CentOSPlus is enabled also.
View 3 Replies View Related
