Search the web
Sign In
New User? Sign Up
postfix-users
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Want your group to be featured on the Yahoo! Groups website? Add a group photo to Flickr.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
postscreen test   Message List  
Reply | Forward Message #255087 of 259570 |

Hi,

I'm testing postscreen on our secondary smtp server.
First results:
https://rz-static.uni-hohenheim.de/hmayer/tmp/Screenshot-68.png
There are hardly anymore rejects. I did not yet adjust mailgraph for the
drops.

Statistics:
UNIQ/TOTAL EVENT
536/586 PASS NEW
97/119 HANGUP
808/974 PREGREET


But I'd prefer not to use DNSBL's by postcreen. It is for the logging.
Users occasionally ask for details if mail did not arrive.

If I try, I get:
Jul 6 10:17:00 smtp2 postfix/postscreen[23670]: PREGREET 34 after 0.52
from 90.148.159.227: HELO 90-148-159-227.saudi.net.sa??
Jul 6 10:17:00 smtp2 postfix/postscreen[23670]: panic:
postscreen_dnsbl_done: no blocklist cache entry for 90.148.159.227

in main.cf
postscreen_dnsbl_sites =
postscreen_greet_action = drop

in master.cf
smtp inet n - n - 1 postscreen
smtpd pass - - n - - smtpd
dnsblog unix - - n - 0 dnsblog

I also tried to comment dnsblog - same problem:
# dnsblog unix - - n - 0 dnsblog

Jul 6 10:25:14 smtp2 postfix/postscreen[24577]: PREGREET 47 after 0.49
from 123.219.54.120: HELO p5120-ipbfp402kobeminato.hyogo.ocn.ne.jp??
Jul 6 10:25:14 smtp2 postfix/postscreen[24577]: panic:
postscreen_dnsbl_done: no blocklist cache entry for 123.219.54.120
Jul 6 10:25:15 smtp2 postfix/master[24571]: warning: process
/usr/libexec/postfix/postscreen pid 24577 killed by signal 6

What am I doing wrong ?

Regards
Helga Mayer



Mon Jul 6, 2009 8:37 am

Helga.Mayer@...
Send Email Send Email

Forward
Message #255087 of 259570 |
Expand Messages Author Sort by Date

Hi, I'm testing postscreen on our secondary smtp server. First results: https://rz-static.uni-hohenheim.de/hmayer/tmp/Screenshot-68.png There are hardly...
Helga Mayer
Helga.Mayer@...
Send Email
Jul 6, 2009
8:37 am

... More detailed logging is on the roadmap... ... "panic" is an internal error in the code. This is non-production code. Which version (mail_version...
Victor Duchovni
Victor.Duchovni@...
Send Email
Jul 6, 2009
2:22 pm

... It's not only the logging. We're currently using blacklists after greylisting and after other restrictions to avoid unnecessary queries. To check the...
Helga Mayer
helga.mayer@...
Send Email
Jul 6, 2009
6:45 pm

... This is non-production, unsupported, software, that is available only in postfix-2.7-xxxxxx-nonprod releases. Wietse...
Wietse Venema
wietse@...
Send Email
Jul 6, 2009
10:24 pm

... That is an interesting picture. It looks like dropping the pregreeters made your reject rates already go down quite a bit. Of course it is known that...
Wietse Venema
wietse@...
Send Email
Jul 14, 2009
12:20 am

... "prefix"? It fixes things before they become a problem... p@rick -- The Book of Postfix <http://www.postfix-book.com> saslfinger (debugging SMTP AUTH): ...
Patrick Ben Koetter
p@...
Send Email
Jul 16, 2009
12:44 pm

... Cute. Wietse...
Wietse Venema
wietse@...
Send Email
Jul 16, 2009
12:49 pm

... I like that one. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin ...
Ralf Hildebrandt
Ralf.Hildebrandt@...
Send Email
Jul 16, 2009
1:08 pm

... Great name! I like it! Terry...
Terry Carmen
terry@...
Send Email
Jul 16, 2009
2:19 pm

... Hash: SHA1 ... +1 - -- Victoriano Giralt Systems Manager Central ICT Services University of Malaga SPAIN ... Version: GnuPG v1.4.9 (GNU/Linux) Comment:...
Victoriano Giralt
victoriano@...
Send Email
Jul 17, 2009
8:40 am

Another figure from Greek mythology that has lent his hame to even a special drinks cabinet: Tantalus The mail server is there, you can even see it, but when...
Reko Turja
reko.turja@...
Send Email
Jul 17, 2009
10:14 am

... That is almost too good; it could a name for a complete product. Wietse...
Wietse Venema
wietse@...
Send Email
Jul 17, 2009
11:49 am

... why not orcus *g http://en.wikipedia.org/wiki/Orcus -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria...
Robert Schetterer
robert@...
Send Email
Jul 17, 2009
12:05 pm

... Cute, but it does not start with "post", and the existing utilities all do, breaking the pattern makes it less obvious which commands are likely to be...
Victor Duchovni
Victor.Duchovni@...
Send Email
Jul 16, 2009
3:57 pm

... Postfix daemon names don't start with "post". The name "postscreen" is used only because I had to get this up and running in very little time so that I...
Wietse Venema
wietse@...
Send Email
Jul 16, 2009
4:19 pm

... Oops, you are right of course, this lives in the libexec namespace, never mind... -- Viktor. Disclaimer: off-list followups get on-list replies or get...
Victor Duchovni
Victor.Duchovni@...
Send Email
Jul 16, 2009
4:23 pm

... Ok, so how about 'postfix'? Sorry, couldn't resist... -- Best regards, Charles...
Charles Marcus
CMarcus@...
Send Email
Jul 16, 2009
6:24 pm

... In all seriousness, I think prefix is the only choice now. Guess Patrick wins a free update to 2.7 :) -- <http://en.wikipedia.org/wiki/TOFU>...
LuKreme
kremels@...
Send Email
Jul 17, 2009
1:01 am

... What about an name like "trooper"? This is in reference to: a) A police officer with their radar guns catching speeders b) A soldier on the front line of...
Brian Evans - Postfix...
grknight@...
Send Email
Jul 16, 2009
1:14 pm

... posttriage or if you have issues w/the French: postcull postreject postdiscard ... Mike...
Mike Cappella
lists-postfix@...
Send Email
Jul 16, 2009
7:24 pm

... The service is an SMTP "bouncer", keeping unwanted clients from entering the premises. We already have a "bounce unix" service, will having: smtp inet...
Victor Duchovni
Victor.Duchovni@...
Send Email
Jul 16, 2009
8:02 pm

... It's no worse than smtp versus smtpd. If there exists a different name for the agent at the door, then that might work. Alas, cerberus is already in use...
Wietse Venema
wietse@...
Send Email
Jul 16, 2009
8:10 pm

... Possible substitutes include concierge or valet, or perhaps any of the less specific guard, sentry, sentinel, ... -Rob...
Rob Foehl
rwf@...
Send Email
Jul 16, 2009
9:21 pm

... I think "sentry" is short, and simple, and can even be thought of as a contraction of "smtp" and "entry". A bit less corny than "prefix" IMHO (sorry...
Victor Duchovni
Victor.Duchovni@...
Send Email
Jul 17, 2009
3:16 am

... +1 for sentry. -- Sahil Tandon <sahil@...>...
Sahil Tandon
sahil@...
Send Email
Jul 17, 2009
4:12 am

... Not too bad. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm...
Ralf Hildebrandt
Ralf.Hildebrandt@...
Send Email
Jul 17, 2009
5:07 am

... I too would prefare something you can "easy" search for. The word "prefix" would be to broad in use IMHO. Regards Andreas...
lst_hoe02@...
Send Email
Jul 17, 2009
8:31 am

... "sentry" is good. In a similar class is "triage", which I mention in the postscreen manpage at http://www.postfix.org/postscreen.8.html Wietse...
Wietse Venema
wietse@...
Send Email
Jul 17, 2009
11:45 am

... sentry is used by lots of other things http://en.wikipedia.org/wiki/Sentry -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria...
Robert Schetterer
robert@...
Send Email
Jul 17, 2009
11:57 am
First  | < Prev  |  Next > Last 
Advanced

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help