[pfx] Milter reject puzzle

[Paul Enlund via Postfix-users]

Hello

Using postfx 3.6.4

need help /guidance on how best to resolve the problem below. I am 100% 
sure the email arriving has looped many times and will have way to many 
Received headers this time.


Is this deferral coming from 1 of the 3 milters I use 
openarc,opendmarc,opendkim or is it Postfix generating it. The log line 
certainly indicates it's a milter problem.


I also use postfix-policyd-spf-python as a service could this be 
responsible for the milter-reject.


The same email has been through the system several times as the server 
we relay to is simply accepting then sending it back to our server.


Regards Paul Enlund

Mar 26 16:51:28 cedar postfix/cleanup[3017309]: E67F960A54: 
milter-reject: END-O
F-MESSAGE from 
mail-ukwestazon11020118.outbound.protection.outlook.com[52.101.19

5.118]: 4.7.1 Service unavailable - try again later; from= t
o= proto=ESMTP helo=


___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Milter reject puzzle

[Wietse Venema via Postfix-users]

Paul Enlund via Postfix-users:
> Hello
> 
> Using postfx 3.6.4
> 
> need help /guidance on how best to resolve the problem below. I am 100% 
> sure the email arriving has looped many times and will have way to many 
> Received headers this time.
> 
> Is this deferral coming from 1 of the 3 milters I use 
> openarc,opendmarc,opendkim or is it Postfix generating it. The log line 
> certainly indicates it's a milter problem.
> 
> I also use postfix-policyd-spf-python as a service could this be 
> responsible for the milter-reject.

The milter is correctly rejecting a message with too many headers.

The message has too many headers because it is looping between
Postfix and office 365.

Standard search engine technology is sufficient to solve this.

Wietse
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Documentation: please update spamhaus / lists of access restrictions usage

[Ömer Güven via Postfix-users]

I believe Wietse‘s notice is more than sufficient, if not already redundant. 
Anyone choosing to set up a mail server should at least have a basic 
understanding of the underlying technical processes.

Moreover, someone who relies on a third-party RBL without respecting its 
policies is unlikely to read the Postfix documentation carefully. At the end of 
the day, some people will only learn the hard way — either by hitting rate 
limits or getting outright blocked by the RBL.

  Ömer


> Am 26.03.2025 um 03:21 schrieb Peter via Postfix-users 
> :
> 
> On 26/03/25 05:02, Wietse Venema via Postfix-users wrote:
>>> "Reputation lists may have additional policies and restrictions that you
>>> need to follow when using them, you should not configure a list in
>>> Postfix until you are fully aware of its requirements."
>>> 
>>> ...or something like that.
>> Yeah. And as Spamhaus says, it is OK to use a public/open resolver
>> a long as your queries use your unique API key.
> 
> Right, at the end of the day this is a due diligence thing where we're simply 
> saying to follow the policies of the services that you use.  The fact that 
> the vast majority of lists will not, by policy, work with a public resolver 
> is simply the low hanging fruit here, but there are other policies that can 
> cause issues as well (e.g. query limits or registration requirements).
> 
>> There are multiple issues that have to be compressed into a short text.
>> "Respect the usage policies of reputation services. Avoid public
>> or ISP resolvers, unless reputation queries use your unique API
>> key."
> 
> This certainly covers all the issues but I fear that it doesn't emphasize the 
> need to check usage policies before implementing a list. It is acceptable, 
> imo but I would prefer to see more emphasis on this point.
> 
> 
> Peter
> 
> ___
> Postfix-users mailing list -- postfix-users@postfix.org
> To unsubscribe send an email to postfix-users-le...@postfix.org


smime.p7s
Description: S/MIME cryptographic signature
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org