<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.8.5">
</HEAD>
<BODY>
Hi Jim,<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
Thank you for the help!
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
# valvulad --version<BR>
1.0.8.b310
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
(proc:0) [err] (main.c:595) Unable to start server, found pid file in place /var/run/valvulad.pid. There is a valvula server running. If not, remove file /var/run/valvulad.pid
</BLOCKQUOTE>
<BR>
Ok, <BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
I’m guessing the error here is to be expected?
</BLOCKQUOTE>
<BR>
No, it shouldn't. I've already fixed this in svn.<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
# valvulad -l <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A><BR>
ERROR: <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A> is not a local domain nor a local address
</BLOCKQUOTE>
<BR>
Ok, here is the problema,<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
So maybe a problem somewhere with the connection to mysql? Is that<BR>
where valvulad is getting the information about valid local domains and<BR>
local addresses? I am still getting
</BLOCKQUOTE>
<BR>
Ok, valvula connection to its database is working, but he also needs to<BR>
be able to connect to your postfix/mysql connection..<BR>
<BR>
Could you describe your mysql postfix setup? It should be easy to show<BR>
it by running:<BR>
<BR>
>> grep mysql /etc/postfix/main.cf<BR>
<BR>
...and then running "cat " over some of the<BR>
mysql:your-file-to-map-mail-accounts, something like:<BR>
<BR>
>> cat /etc/postfix/mysql-aliases.cf<BR>
<BR>
I need to see how your mysql configuration maps your accounts (remove<BR>
or XXXX's users, passwords an database, but leave variables and mysql<BR>
query).<BR>
<BR>
With this information I can see what's going on (I think).<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
valvulad -b<BR>
INFO: Database connection working OK
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
Unless you have better idea I will try to figure out how to make mysql log every query for valvula user and see what is going on there.
</BLOCKQUOTE>
<BR>
<BR>
Ok, for this, you can run the following to run what it does to check<BR>
your account as known:<BR>
<BR>
>> valvulad -l <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A> -o -d<BR>
<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
Thanks again for any further help!
</BLOCKQUOTE>
<BR>
:-)<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
<BR>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE TYPE=CITE>
On Jun 11, 2017, at 10:36 AM, Francis Brosnan Blázquez <<A HREF="mailto:francis.brosnan@aspl.es">francis.brosnan@aspl.es</A>> wrote:
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE TYPE=CITE>
<BR>
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE TYPE=CITE>
Hi Jim,<BR>
<BR>
From your description, I think you have everything configured ok, but<BR>
for some reason, valvula is not being able to detect known valid<BR>
accounts because:<BR>
<BR>
<BR>
<BLOCKQUOTE>
<FONT COLOR="#003366">is sending with an </FONT><FONT COLOR="#003366"><B>unknown account mail from <<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>> (mod-slm=valid-mail-from)</B></FONT><BR>
<BR>
</BLOCKQUOTE>
Can you right the following commands and paste output to give you<BR>
further indications?<BR>
<BR>
>> valvulad --version<BR>
>> valvulad -l <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A><BR>
<BR>
<BR>
<BR>
El vie, 09-06-2017 a las 16:30 -0400, Jim Bassett escribió:<BR>
<BLOCKQUOTE TYPE=CITE>
Hi. New to valvula and to the list. The software looks like exactly what I need. I am running postfix (w/ dovecot) on Centos 6.6. Installation was relatively easy. I am trying to setup mod-slm for the purpose of stopping "those situations where compromised accounts are used to send/relay content to recipients using source addresses that do not belong to the server”.<BR>
<BR>
Valvula is running. If I tail -f /var/log/maillog I can see it is logging. But I am not getting the behavior I expect. I’m not sure if this is because I have something wrong or if I’m not understanding the expected behavior.<BR>
<BR>
My issue is that when I connect to my server from my home machine, and try to send mail (through Apple mail.app) my mail is rejected. Here is the corresponding entry from /var/log/maillog:<BR>
<BR>
<BR>
Jun 9 15:59:59 oak valvulad[22026]: info: REJECT: <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A> -> <A HREF="mailto:redacted@gmail.com">redacted@gmail.com</A> (<A HREF="mailto:sasl_user=jim@datamantic.com">sasl_user=jim@datamantic.com</A>), port 3080, queue-id , from 98.14.xx.xxx: Rejecting because SASL username <<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>> is sending with an unknown account mail from <<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>> (mod-slm=valid-mail-from)<BR>
<BR>
<BR>
<A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A> is my real email account on the server (with an entry in the postfix mysql database). <BR>
<BR>
In /etc/postfix/main.cf I have only made one change:<BR>
<BR>
smtpd_sender_restrictions = check_policy_service inet:127.0.0.1:3080, reject_unknown_sender_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, permit<BR>
<BR>
And in /etc/valvula/main.cf I have, inside <general>:<BR>
<BR>
<listen host='127.0.0.1' port='3080'><BR>
<run module='mod-slm' /><BR>
</listen><BR>
<BR>
and inside <enviroment>:<BR>
<BR>
<sender-login-mismatch mode='valid-mail-from' allow-empty-mail-from='yes' /><BR>
<BR>
<BR>
And valvula seems to have access to the database because if I run:<BR>
<BR>
valvulad -b<BR>
<BR>
I get:<BR>
<BR>
INFO: Database connection working OK<BR>
<BR>
What I would expect to happen is that when I am logged in as the real email user <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>, that I would be able to send email that says it is from <A HREF="mailto:jim@datamantic.com">jim@datamantic.com</A>, but be rejected only if I try to send email as <A HREF="mailto:some-nonexistent-account@datamantic.com">some-nonexistent-account@datamantic.com</A> or <A HREF="mailto:some-nonexistent-account@nonexistent-domain.com">some-nonexistent-account@nonexistent-domain.com</A>.<BR>
<BR>
I really appreciate any help! Thank you!<BR>
<BR>
<PRE>
_______________________________________________
Valvula mailing list
<A HREF="mailto:Valvula@lists.aspl.es">Valvula@lists.aspl.es</A>
<A HREF="http://lists.aspl.es/cgi-bin/mailman/listinfo/valvula">http://lists.aspl.es/cgi-bin/mailman/listinfo/valvula</A>
</PRE>
</BLOCKQUOTE>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<PRE>
--
Francis Brosnan Blázquez - ASPL
<A HREF="http://www.asplhosting.com/">http://www.asplhosting.com/</A>
<A HREF="http://www.aspl.es/">http://www.aspl.es/</A>
<A HREF="https://twitter.com/aspl_es">https://twitter.com/aspl_es</A>
<A HREF="https://twitter.com/asplhosting">https://twitter.com/asplhosting</A>
<A HREF="https://twitter.com/francisbrosnanb">https://twitter.com/francisbrosnanb</A>
<A HREF="https://es.linkedin.com/in/francis-brosnan-blázquez-1353a218">https://es.linkedin.com/in/francis-brosnan-blázquez-1353a218</A>
91 134 14 22 - 91 134 14 45 - 91 116 07 57
Av. Juan Carlos I 13, 2ºC, Torre Garena
28806 - Alcalá de Henares (España)
AVISO LEGAL
En virtud de lo dispuesto en la Ley Orgánica 15/1999, de 13 de
diciembre, de Protección de Datos de Carácter Personal, le informamos de
que sus datos de carácter personal, recogidos de fuentes accesibles al
público o datos que usted nos ha facilitado previamente, proceden de
bases de datos propiedad de Advanced Software Production Line, S.L.
(ASPL).
ASPL garantiza que los datos serán tratados con la finalidad de mantener
las oportunas relaciones comerciales o promocionales con usted o la
entidad que usted representa. No obstante, usted puede ejercitar sus
derechos de acceso, rectificación, cancelación y oposición dispuestos en
la mencionada Ley Orgánica, notificándolo por escrito a ASPL -
Protección Datos, Av. Juan Carlos I 13, 2ºC, Alcalá de Henares
(Madrid).
</PRE>
</TD>
</TR>
</TABLE>
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
</BLOCKQUOTE>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<PRE>
--
Francis Brosnan Blázquez - ASPL
http://www.asplhosting.com/
http://www.aspl.es/
https://twitter.com/aspl_es
https://twitter.com/asplhosting
https://twitter.com/francisbrosnanb
https://es.linkedin.com/in/francis-brosnan-blázquez-1353a218
91 134 14 22 - 91 134 14 45 - 91 116 07 57
Av. Juan Carlos I 13, 2ºC, Torre Garena
28806 - Alcalá de Henares (España)
AVISO LEGAL
En virtud de lo dispuesto en la Ley Orgánica 15/1999, de 13 de
diciembre, de Protección de Datos de Carácter Personal, le informamos de
que sus datos de carácter personal, recogidos de fuentes accesibles al
público o datos que usted nos ha facilitado previamente, proceden de
bases de datos propiedad de Advanced Software Production Line, S.L.
(ASPL).
ASPL garantiza que los datos serán tratados con la finalidad de mantener
las oportunas relaciones comerciales o promocionales con usted o la
entidad que usted representa. No obstante, usted puede ejercitar sus
derechos de acceso, rectificación, cancelación y oposición dispuestos en
la mencionada Ley Orgánica, notificándolo por escrito a ASPL -
Protección Datos, Av. Juan Carlos I 13, 2ºC, Alcalá de Henares
(Madrid).
</PRE>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>