Postfix-mysql & Partial-catchall For Single Domain
Jan 29, 2007
I'm running postfix 2.3.5 with my alias info being drawn from a mysql database.
What i'm trying to do is setup a partial catchall setup to forward all email that's addressed *@hah.cx to uber@spamcop.net. However, I want email addressed to mikey@hah.cx, and mike@hah.cx to be directed to my local "mikey" user email account.
I finally got to the spam point I had to need to disable the "catchall" email accounts on postfix. I simply removed the catchall lines from /etc/postfix/virtual, and it works correctly, however I want postfix to tell the spammer that the message was accepted but really silently discard it.
right now it discards their email correctly, but postfix emails a reply back to the "from" address (which is most likely faked or some innocent user)
Quote:
"PERM_FAILURE: SMTP Error (state 13): 550 <localhost@example.com>: Recipient address rejected: User unknown in virtual alias table"
how do I get postfix to silently trash their message, give the smtp reply code that it was successfully accepted, and not email the user back.
or is it not that big of deal and I should just let it send (but this seems like a huge waste as this means my server is wasting resources sending hundreds/thousands of unnecessary "REJECTED" messages to users who probably are completely unrelated)
I've built a website for a "client" of mine (really just a friend). I'm hosting it at Bluehost. My friend purchased a domain name through iiNet around a year ago, and has his email hosted with them. There are a number of email boxes set up (small business).
Is it possible to "partially re-delegate" (let me know if this isn't the correct wording) a domain name so that I update the name servers for the website, but not email. For example, if someone goes to the website, they will be taken to the site hosted on Bluehost. But if someone sends an email, it will be sent to the iiNet servers. This would be really helpful as it will save me from setting up the mail boxes on Bluehost and also save my client and his staff from updating their email settings (which scares me the most since I have no idea what email software they are using, and no idea about their computer ability).
I've just finished setting up postfix with mysql virtualdomains, on debian sarge with mysql 5.0. However it refuses to connect to the mysql database and I have found a bug report for courrier-authdeamon
[url]
how can I get around this? I would like to be able to keep mysql 5 but need a stable version so I do not want to install the 5.1 version...
All will be hosted on the same server (same IP) and I want all to be secured, through a SIGNED certificate, not a self signed. I assumed that wildcard ssl would be fine for this, but I just took a look and it's only for subdomains: example.example.com hello.example.com.
Is there any way of having every subdomain and domain secured, using ssl, through one certificate? I don't want to have to buy individual certificates for every domain, that'd be... expensive.
i've been researching this but can't seem to find a decent solution.
basically trying to limit the cpu usage of a single domain, or limit accesses per hour if that's possible?
i tried adding an entry in /etc/security/limits.conf which restricts numproc to 2 and then down to 1, but it doens't seem to make any impact on the load. load of the server drops from about 1.5-2 down to 0.02 when this single site is suspended, and i can't have it run wild.
ideally would like a message that says something along the lines of server is too busy... trying again in 5 seconds or something along those lines?
I am currently running Apache on Ubuntu 14.04. I tried adding an alias, but it doesn't do exactly what I need. I have a single site and I need to point two domain names to it. The thing is, if someone types in www.site1.com I want it to show the url as www.site1.com and if someone types in www.site2.com I want it to continue to show www.site2.com in the URL. Right now if they type in www.site1.com it shows the first site name as the URL, but if they type in www.site2.com it changes the URL to www.site1.com. Below is what I have as my virtual host in my conf file currently.
I have one valid commercial Comodo certificate. It is correctly installed and works fine on my 443 port when I go to https://www.domain1.com
However, I have quite a few other virtual hosts that also work fine on my port 80 when I go to http://www.domain2.com then http://www.domain3.com and so on.
Now out of curiosity I have typed https://www.domain2.com and it picked up the SSL certificate from my first domain1.com when it wasn't supposed to (I guess)! It reported an error but worked! Then I tried all my other domains 3,4,5 and so on and the issue repeated.
How do I keep this single certificate to the only domain name it belongs to? It has no wild cards and is valid for only one domain name I bought it for. The example of my hosts' configuration is below:
<VirtualHost *:80> DocumentRoot "/directory/home/place" ServerName domain1.com <Directory "/directory/home/place"> allow from all Options +Indexes </Directory> ServerAlias www.doamin1.com </VirtualHost>
Plesk Panel 11.5.30, on Centos 5.10. I have 2 'domains' running on the same ip; sub.mysite.com and mysite.com. I need to add SSL to sub.mysite.com.
From the documentation, [URL] ...., it appears that if the user is using a SNI compatible browser a single SSL certificate for sub.mysite.com should work (as I am using a linux server, SNI is enabled by default I believe).
However, the control panel for the domain (website & domains > hosting settings) states that "To employ SSL, move this site to a dedicated IP address, install an SSL certificate on the site, and then select it below." In addition, other documentation makes reference to a "Secure your sites" link on the control panel to implement a purchased SSL certificate, which is not visible to me - I presume because the domain is not on a dedicated ip address.
Can someone confirm that; a) a SSL certificate for sub.mysite.com on a shared ip will work. b) that the SSL for sub.mysite.com would managed at the server level (Server Management > Tools & Settings > SSL Certificates) rather than the domain's control panel.
One alternative may be to purchase a wildcard SSL certificate (*.mysite.com). This post [URL] .... suggests that this would work. However, this is a more costly option and does more that I need (i.e. delivers SSL for all domains).
I could also purchase a dedicated ip address for sub.mysite.com. I have no experience of moving domains within plesk from a shared ip to a dedicated ip. Is this a straightforward process?
I have a problem where all email sent from uaccb.edu (studentmail.uaccb.edu [208.190.226.130]} is not arriving at my VPS. The people sending email from the above domain are not getting any errors, it is not being marked as spam, it is just being blackholed somehow.
I have checked the above IP and domain, and can't find it on any blacklist, and I am using pretty standard cPanel setup on my VPS. I have spam set to be marked and receive a fair amount and have it autorouted to a folder rather than auto-deleted.
From uaccb.edu, the only thing I have access to is Outlook Web Access to send test emails, and they are sent fine with no errors returned. If I send test emails to gmail and other similar email accounts, they go through fine, the only problem is to ANY domain hosted on my VPS. I have even recently transferred all the domains to a second VPS (with the same hosting company) at a different datacenter (for different reason) and the problem persists.
Is there any WHM setting or any ideas on how to troubleshoot this?
I am using Plesk 12.0.18 Update #51 on Ubuntu 14.04.2 LTS.
I want to restore a single Domain from Plesk GUI but it failed:
Archiver error: from /private-backup/plesk/clients/WSKunde/domains/domainname.de/backup_domainname.de_conf_1506200200.tgz: forkExecvPipes: execv() failed: No such file or directory System error 2: No such file or directory Warning: domain "domainname.de"
Outlook 2013 complains about the SSL certificate when using email. Installing the certificate still doesn't stop the error/warning. What are my options?
Can I install on the plesk server a self-signed SSL cert and avoid the issues? Can I buy & install a single certificate for that one domain and resolve the issue but not affect others. Do I need to buy a SAN certificate for the whole server?
I have hired two servers for plesk and I have the mail configured in one server and the website in another one, it all seems to work fine except for a problem.
When the server where the website is tries to send a message through a smtp account it can´t send it, it seems to be looking for the mail server in the same server where the website is instead of look for it in the other server.
Hopefully I'm posting this in the correct area. Our server runs CentOS 4.4 on x86_64 arch.
So basically everything was going rather smoothly...
Problems began to arise at the point where I finished installing/configuring SquirrelMail. Upon logging in, I saw this:
[see attachment]
Ok, so I checked maillog and saw:
Feb 11 13:50:46 zeus imapd: LOGIN, user=alex, ip=[::ffff:127.0.0.1], protocol=IMAP Feb 11 13:50:47 zeus imapd: Failed to connect to socket /tmp/fam-- Feb 11 13:50:47 zeus imapd: Failed to create cache file: maildirwatch (alex) Feb 11 13:50:47 zeus imapd: Error: Input/output error Feb 11 13:50:47 zeus imapd: Check for proper operation and configuration Feb 11 13:50:47 zeus imapd: of the File Access Monitor daemon (famd). Feb 11 13:50:47 zeus imapd: DISCONNECTED, user=alex, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=21, sent=57, time=1
So I did some searching and determined it was a problem with Courier-IMAP being compiled with File Alteration Monitor support and famd not running (I built RPM directly from source tarball without any customization whatsoever per the instructions on the Courier website).
I found some possible solutions to be:
1) Install and run fam and be sure portmapper is running as well (problem being is that fam has since been replaced by gamin on CentOS, which is installed properly on my system). 2) Do a source install of Courier-IMAP and --disable-fam
Ok, so route 1 went like this: I uninstalled gamin, found fam-2.6.8, installed it, started it manually, made sure portmapper was running and tried again. This time, I still got the same errors in SquirrelMail, but the errors in maillog didn't show up. However, shortly after the page loaded, the famd process I had started manually promptly ended without my intervention. Ok, onto trying #2.
Route 2 went like this: reinstalled gamin, then I tried building a custom RPM by manually configuring with --disable-fam and then using rpmbuild -bc --short-circuit and rpmbuild -bi --short-circuit. That didn't change anything at all, I still had the same errors both with SquirrelMail and in maillog. Then I said ok, I'll just do a complete source install. ./configure --disable-fam && make && make install. Manually started that server, tried again, same deal, both errors.
So I've got problems. Either with Courier-IMAP, SquirrelMail, or both. The other daemons seem to run fine, I just mentioned them in case of the possibility of some kind of (unknown to me) conflict.
If you need to see any of my configs, let me know...any information greatly appreciated...I'm desperate.
My environment: Parallels Plesk v12.0.18_build1200140606.15 os_Debian 7.0 64bits - postfix
In documentation about Server-wide-mail settings
In Plesk for Linux with the Postfix mail server, you can change the IP address used for sending mail. Also, if your server sends mail from domain IP addresses, you can specify which name will be used as a host name in SMTP greetings.
Choose from the three options:
◦Send from domain IP addresses. By default, mail from each domain is sent using the domain's IP address. The host name used in SMTP greeting is defined by the configuration of the mail server.
◦Send from domain IP addresses and use domain names in SMTP greeting. If selected, Plesk changes the mail server configuration so that the SMTP greeting will contain the name of the domain from which an email message is sent.
This option prevent the sender's IP address from being put into public black lists, such as the Spamhaus or OpenBL lists. This might happen if the mail server host name is used in SMTP greeting for the messages sent from domain IP addresses. Some recipient servers consider such messages as spam.
We recommend that you use this option if you host less than 100 domains. In case of a large number of domains, using this option significantly increases the load on the server.
◦Send from the specified IP address. You might want to use certain IPv4 and IPv6 addresses for all outgoing mail.
Sending all mail from the specified address might be useful, for example, if the IP address of the mail server was put into public black lists, such as the Spamhaus or OpenBL lists. If you select None, outgoing mail will not be sent.Click to expand...
My issue started ince a couple of months seemed to increase with update to Plesk 12.0 (though I can't guarantee it).I am using Centos 6.5, all updated. What happens is that postfix usage starts to increase without any apparent reason (during week-ends for example). Then postfix is not responding anymore.
My MySQL server slowed down to a crawl a few days ago, and I finally fixed it by starting it without DNS lookups via "--skip-name-resolve".
I tested domain name resolution on the MySQL machine and it was able to return IPs from domains rather quickly, so I'm at a loss as to why DNS was the problem here? I am using "192.168.1.6" as the MySQL server's IP, in case that matters?
I have a couple of questions:Why is DNS resolution so slow when in the command line it's running normally?
Why does MySQL need to do DNS lookups at all? I don't see any log files that's converting IPs to host names or vice versa.
how can i stop php and mysql errors from being displayed on a live site. I'd rather just check the error log than have the errors displayed to all users.
An old friend of mine wanted to get a vps so I made one from a dedicated and gave it to him. The only thing he has done is made it so the only ip allowed to connect to ssh is his. what are the pros and cons of hacking.exploiting with this.
does anybody know a company for a cheaper ded. server (unmanaged) who will accept also a IP net (min. /24) within a BGP4 connection instead of single expensive IPs ? I know some in Europe who will do it for additional costs but often the server are too expensive.