Re: many domains fail dkim sig check

2014-10-12 Thread Wietse Venema
Claus Assmann: > On Sun, Oct 12, 2014, Wietse Venema wrote: > > > As for the claim that Milters are supposed to see the on-the-wire > > message, do you have a pointer to support that? > > sendmail: > libmilter/docs/smfi_insheader.html > > * A filter will receive only headers that have been sen

Re: many domains fail dkim sig check

2014-10-12 Thread Claus Assmann
On Sun, Oct 12, 2014, Wietse Venema wrote: > As for the claim that Milters are supposed to see the on-the-wire > message, do you have a pointer to support that? sendmail: libmilter/docs/smfi_insheader.html * A filter will receive only headers that have been sent by the SMTP client and thos

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread Wietse Venema
> wietse: > That's why I am implementint line RANGES to shut up people like you. A. Schulze: > honestly, I only try to help ... I know. In the end Postfix will be better. Wietse

Re: many domains fail dkim sig check

2014-10-12 Thread Viktor Dukhovni
On Sun, Oct 12, 2014 at 06:07:32PM -0400, Wietse Venema wrote: > > Yes, but those are single-instance headers that pertain to the > > message as a whole, unlike trace information that pertains to a > > particular hop. Things like "X-Envelope-From" and various other > > prepends are typically hop-

Re: many domains fail dkim sig check

2014-10-12 Thread Wietse Venema
Viktor Dukhovni: > > You mean: > > > > Received: by MTA-NAME > > Other headers added by the MTA named above. > > > > Versus: > > > > Other headers added by the MTA named below. > > Received: by MTA-NAME > > Yes. > > > Postfix already appends From/Date/Message-ID under its own R

Re: many domains fail dkim sig check

2014-10-12 Thread Viktor Dukhovni
> You mean: > > Received: by MTA-NAME > Other headers added by the MTA named above. > > Versus: > > Other headers added by the MTA named below. > Received: by MTA-NAME Yes. > Postfix already appends From/Date/Message-ID under its own Received: > header. Placing Postfix'

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread A. Schulze
wietse: That's why I am implementint line RANGES to shut up people like you. honestly, I only try to help ...

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread Wietse Venema
A. Schulze: > > Viktor Dukhovni: > > > Try the patch below: > > works with one exception. my master.cf start with comment lines > > 1: # > 2: # documentation > 3: relay unix - - - - - smtp > 4: -o smtp_fallback_relay= > 5: > 6: flush

Re: many domains fail dkim sig check

2014-10-12 Thread Wietse Venema
Viktor Dukhovni: > On Sun, Oct 12, 2014 at 07:58:23PM +, Viktor Dukhovni wrote: > > On Sun, Oct 12, 2014 at 03:55:21PM -0400, Wietse Venema wrote: > > > > > Do you want to have the PREPEND headers AFTER the Received: header? > > > > It is certainly more consistent with any downstream milter p

Re: many domains fail dkim sig check

2014-10-12 Thread li...@rhsoft.net
Am 12.10.2014 um 22:01 schrieb Wietse Venema: Viktor Dukhovni: On Sun, Oct 12, 2014 at 03:55:21PM -0400, Wietse Venema wrote: Do you want to have the PREPEND headers AFTER the Received: header? It is certainly more consistent with any downstream milter processing. Otherwise we'd have to cou

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread A. Schulze
Viktor Dukhovni: Try the patch below: works with one exception. my master.cf start with comment lines 1: # 2: # documentation 3: relay unix - - - - - smtp 4: -o smtp_fallback_relay= 5: 6: flush unix n - - 1000? 0 flush 7

Re: many domains fail dkim sig check

2014-10-12 Thread Wietse Venema
Viktor Dukhovni: > On Sun, Oct 12, 2014 at 03:55:21PM -0400, Wietse Venema wrote: > > > Do you want to have the PREPEND headers AFTER the Received: header? > > It is certainly more consistent with any downstream milter processing. > Otherwise we'd have to count the number of prepended headers, >

Re: many domains fail dkim sig check

2014-10-12 Thread Viktor Dukhovni
On Sun, Oct 12, 2014 at 07:58:23PM +, Viktor Dukhovni wrote: > On Sun, Oct 12, 2014 at 03:55:21PM -0400, Wietse Venema wrote: > > > Do you want to have the PREPEND headers AFTER the Received: header? > > It is certainly more consistent with any downstream milter processing. > Otherwise we'd h

Re: many domains fail dkim sig check

2014-10-12 Thread Viktor Dukhovni
On Sun, Oct 12, 2014 at 03:55:21PM -0400, Wietse Venema wrote: > Do you want to have the PREPEND headers AFTER the Received: header? It is certainly more consistent with any downstream milter processing. Otherwise we'd have to count the number of prepended headers, communicate it to cleanup(8) an

Re: many domains fail dkim sig check

2014-10-12 Thread Wietse Venema
Robert Schetterer: [ Charset windows-1252 converted... ] > Am 12.10.2014 um 15:23 schrieb Wietse Venema: > > Robert Schetterer: > >> double check your dmarc milter setup, it s very tricky with postfix, > >> make sure mail is not altered on its way ( which might brake dkim ) > > > > I agree that ch

Re: many domains fail dkim sig check

2014-10-12 Thread Viktor Dukhovni
On Sun, Oct 12, 2014 at 09:46:15PM +0200, Robert Schetterer wrote: > For bizarre Sendmail compatibility reasons, Milters don't see the > first header in the message. Changing that would cost me at least > a day to ensure that it breaks nothing with "add header", "delete > header", etc. requests.

Re: many domains fail dkim sig check

2014-10-12 Thread Robert Schetterer
Am 12.10.2014 um 15:23 schrieb Wietse Venema: > Robert Schetterer: >> double check your dmarc milter setup, it s very tricky with postfix, >> make sure mail is not altered on its way ( which might brake dkim ) > > I agree that changing a message breaks its DKIM signature, but I > why this is "tric

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread Viktor Dukhovni
On Sun, Oct 12, 2014 at 09:20:41PM +0200, A. Schulze wrote: > >How would Postfix know that "relay" ends at line 2? Comments may > >appear IN THE MIDDLE of a master.cf entry. > > Technically correct. > I read "line 3" but should read "the entry starting somewhere and end in > line 3" It is perha

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread A. Schulze
wietse: $ head -n 3 /etc/postfix/master.cf relay unix - - - - - smtp -o smtp_fallback_relay= # line with comment flush unix n - y 1000? 0 flush How would Postfix know that "relay" ends at line 2? Comments may appear I

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread Bastian Blank
On Sun, Oct 12, 2014 at 03:09:30PM -0400, Wietse Venema wrote: > > I just installed 2.12-20140911 and got multiple BC warnings. > > The linenumbers are confusing... > > Most users would expect a warning about line 1 and 4 because line 3 is > > obviously a comment ( same happen if line 3 is empty

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread Wietse Venema
A. Schulze: > > Hello Wietse, > > I just installed 2.12-20140911 and got multiple BC warnings. > The linenumbers are confusing... > > $ head -n 3 /etc/postfix/master.cf > relay unix - - - - - smtp > -o smtp_fallback_relay= > # line with comment > flush

postconf question

2014-10-12 Thread A. Schulze
Hi all, while reading the COMPATIBILITY_README I asked me wasn't the command to edit the main.cf 'postconf -e mumble=foo' ? is '-e' a default action to edit main.cf? did I missed an update? "postconf mumble" display the value "postconf mumble=foo" set the variable and is exactly the sam

Re: postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread li...@rhsoft.net
Am 12.10.2014 um 20:43 schrieb A. Schulze: I just installed 2.12-20140911 and got multiple BC warnings. The linenumbers are confusing... $ head -n 3 /etc/postfix/master.cf relay unix - - - - - smtp -o smtp_fallback_relay= # line with comment flush

postfix-2.12 BC-warnings: confusing linenumbers

2014-10-12 Thread A. Schulze
Hello Wietse, I just installed 2.12-20140911 and got multiple BC warnings. The linenumbers are confusing... $ head -n 3 /etc/postfix/master.cf relay unix - - - - - smtp -o smtp_fallback_relay= # line with comment flush unix

Re: many domains fail dkim sig check

2014-10-12 Thread shm...@riseup.net
Robert Schetterer wrote: > double check your dmarc milter setup, it s very tricky with postfix, > make sure mail is not altered on its way ( which might brake dkim ) > > > Best Regards > MfG Robert Schetterer could you please provide some examples from your experience ?

Re: many domains fail dkim sig check

2014-10-12 Thread Wietse Venema
Robert Schetterer: > double check your dmarc milter setup, it s very tricky with postfix, > make sure mail is not altered on its way ( which might brake dkim ) I agree that changing a message breaks its DKIM signature, but I why this is "tricky" with Postfix. If you are referring to the the head

Re: many domains fail dkim sig check

2014-10-12 Thread li...@rhsoft.net
Am 12.10.2014 um 15:12 schrieb Robert Schetterer: the operator of had-pilot believes and is is confident their dkim sigs are correct double check your dmarc milter setup, it s very tricky with postfix, make sure mail is not altered on its way (which might brake dkim) DKIM seems to have a pro

Re: Lost Connections on a Grand Scale - is it DoS and should I report it?

2014-10-12 Thread Wietse Venema
Robert Sharp: > Hi, > > I often get a spate of lost connections from servers chancing to access > my email via SMTP AUTH (which I do not offer), and I usually ignore > them. I may get a session with up to 1,000+ connections usually from a > whole list of servers and none trying more than a doze

Re: many domains fail dkim sig check

2014-10-12 Thread Robert Schetterer
Am 12.10.2014 um 12:19 schrieb shm...@riseup.net: > i wrote to the relevant dkim/dmarc lists but still i find the following > errors from opendkim/opendmarc consistently with every message > > could somebody please suggest which settings, if there are any within > postfix, that may alleviate these

Re: Compiling new postfix same as the old postfix

2014-10-12 Thread Wietse Venema
Wietse Venema: > LuKreme: > > On 10 Oct 2014, at 18:42 , Wietse Venema wrote: > > > A few minutes ago I updated the makedefs script so that it documents > > > the "make makefiles" options in a comment at the beginning of the > > > file makedefs.out which is usually installed in $config_directory.

Re: Compiling new postfix same as the old postfix

2014-10-12 Thread Wietse Venema
LuKreme: > On 10 Oct 2014, at 18:42 , Wietse Venema wrote: > > A few minutes ago I updated the makedefs script so that it documents > > the "make makefiles" options in a comment at the beginning of the > > file makedefs.out which is usually installed in $config_directory. > > Is this something th

Lost Connections on a Grand Scale - is it DoS and should I report it?

2014-10-12 Thread Robert Sharp
Hi, I often get a spate of lost connections from servers chancing to access my email via SMTP AUTH (which I do not offer), and I usually ignore them. I may get a session with up to 1,000+ connections usually from a whole list of servers and none trying more than a dozen times. Yesterday, how

many domains fail dkim sig check

2014-10-12 Thread shm...@riseup.net
i wrote to the relevant dkim/dmarc lists but still i find the following errors from opendkim/opendmarc consistently with every message could somebody please suggest which settings, if there are any within postfix, that may alleviate these failures ? overall, on the other hand, i see many successf

Re: Thank you, Wietse

2014-10-12 Thread aly . khimji
I just wanted to second that as well. Thx Sent from my BlackBerry device on the Rogers Wireless Network -Original Message- From: Venkat Sender: owner-postfix-us...@postfix.org Date: Sat, 11 Oct 2014 21:08:14 Cc: Postfix users Subject: Re: Thank you, Wietse On Sat, Oct 11, 2014 at 7:12