Re: Configuration Questions/Help
- On Thu, 30 Jul 2009 22:45:04 -0500, Noel Jones <njones@...>
> Jeff Grossman wrote:domains
>> I am currently running a Gentoo machine with
>> Sendmail/MIMEDefang/Spamassassin/Clamav which acts as a front-end mail
>> server to a couple of different mail servers. The main back-end mail
>> is an Exchange 2003 server and the other is currently a Mac OSX machine
>> running Mailman. I am using a mailertable to direct the different
>> (10 domains go to the Exchange server and 1 domain goes to the OSXto
>> machine). I am using MIMEDefang's md_check_against_smtp_server feature
>> verify recipients before they are accepted at the gateway.Thank you. Makes me feel better knowing that I can get the same
>> I am going to switch to a Debian machine with
>> Postfix/Amavisd/Spamassassin/Clamav as my new front-end mail server to
>> Exchange server and the OSX machine (I am going to use the old Gentoo
>> machine for mailman once I wipe it and install Debian).
>> 1. Can I use the reject_unverified_recipient feature to get the same
>> functionality as I did with MIMEDefang's md_check_against_smtp_server?
> Yes, postfix built-in verification works very similar. See:
>> have seen articles about exporting the Exchange users via LDAP andoption
>> them in an access map file on the Postfix server, but I am not a big fan
>> that. I would prefer to just query the Exchange server directly for
> OK, your choice.
>> 2. Is it possible to only require the reject_unverified_recipient
>> on certain domains?Cool. I wasn't aware of that. I will look into that and see what I need
> Yes. Use a check_recipient_access map that returns
> "reject_unverified_recipient" for the target domain.
>> 3. Do I just set up each domain in a Transport Map file and tell itI am going to use it just in case I screw something up with DNS in the
>> server to send the mail to?
> This step is only necessary if the destination IP differs from
> what postfix will find with an MX lookup of the domain.
future. Do I also need to put each domain in a relay allowed file? Or is
putting them in transport maps enough to tell Postfix to accept mail for
>>Thanks again for the pointer.
>> I also have some e-mail addresses on the Exchange server that I do not
>> the gateway to accept mail for. That should be pretty easy I can just
>> them in a recipient check hash file. But, nothing is ever easy, there
>> a few e-mail addresses that I would like to receive mail for to those
>> restricted Exchange e-mail addresses.
> General per-sender, per-recipient, etc. info can be found here:
>> And, any mail created from thatExchange
>> machine itself would need to be able to send to those restricted
>> addresses. How can I do that?Yeah, I think the mynetworks should be good enough. I will test it out
> Mail locally submitted via the sendmail(1) interface does not
> go through the various smtpd_*_restrictions.
> and generally the "inside" machine would be included in
> mynetworks, which is normally excluded from most restrictions
> by the permit_mynetworks rule.
next week after I get it all setup and see how everything works.
>>Thank you for your help.
>> Thank you for any help you can offer me or guidance on where I can look
> Welcome to postfix!
- I wasn't aware of that and I was laughing at myself for being an idiot and
making a mistake. I wasn't aware how the system worked. I didn't think to
look at the interworking and thought changing the title would create a new
post. My fault for not researching it before doing that. If it was
intentional then I can see getting so bent out of shape. I'm all about
working within the guidelines and abiding by the rules. Live and learn.
telnet only gives 220 smtp.perfora.net (mrus1) Welcome to Nemesis ESMTP
server oh well. Thanks anyway.
[mailto:owner-postfix-users@...] On Behalf Of Charles Marcus
Sent: Friday, July 31, 2009 7:01 AM
To: AMP Admin
Subject: Re: what is ESMTP (Nemesis)
Please don't top-post...
On 7/30/2009, AMP Admin (admin@...) wrote:
> Sorry. Didn't think about this going to a thread and just hit reply and
> changed the title. haha
Thats exactly what 'hijacking' is, and it isn't funny... haha
> I meant more what is the Nemesis part. What kind of mail server is that?
I think most if not all smtp servers can customize the banner to say
whatever they want, so you can't really tell anything specific/precise
about a server jujst from the banner it provides.
You'd need to provide the responses from a telnet session to get any
kind of meaningful idea...
- Oh, just saw this. Thank you!
From: owner-postfix-users@... [mailto:owner-postfix-users@...] On Behalf Of Ralf Hildebrandt
Sent: Friday, July 31, 2009 7:13 AM
Subject: Re: what is ESMTP (Nemesis)
> > I meant more what is the Nemesis part. What kind of mail server is that?ESMTP (Nemesis) is the mailserver of Schlund & Partner:
> I think most if not all smtp servers can customize the banner to say
> whatever they want, so you can't really tell anything specific/precise
> about a server jujst from the banner it provides.
> You'd need to provide the responses from a telnet session to get any
> kind of meaningful idea...
Nemesis - Schlund+Partner entwickelt sein eigenes Mailsystem
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de
- On 7/31/2009, AMP Admin (admin@...) wrote:
> telnet only gives 220 smtp.perfora.net (mrus1) Welcome to Nemesis ESMTPI meant a session where you actually submit mail, and make submissions
> server oh well. Thanks anyway.
that will fail.
You can tell a lot from the error messages...
- Jeff Grossman wrote:
>>> 3. Do I just set up each domain in a Transport Map file and tell itPostfix must be told which domains to accept mail for. Sounds
>>> server to send the mail to?
>> This step is only necessary if the destination IP differs from
>> what postfix will find with an MX lookup of the domain.
> I am going to use it just in case I screw something up with DNS in the
> future. Do I also need to put each domain in a relay allowed file? Or is
> putting them in transport maps enough to tell Postfix to accept mail for
> those domains?
like these should be listed in relay_domains.
-- Noel Jones