Re: Problems with incoming mails from outlook.com

2015-07-25 Thread Moritz Schmitt
Dear Viktor, Thanks a lot for your very helpful reply! I implemented all the changes you suggested and now it works. My late reply is due to the fact that I needed to wait for another mail from outlook.com to see if everything works. What I find a little odd about outlook.com's behavior is that

Re: SPF and forwarding

2015-07-25 Thread Robert Schetterer
Am 26.07.2015 um 03:04 schrieb Alex: > Hi, > > I have a postfix-2.10.5 server on fedora, and have several users that > forward their mail through to gmail. This is apparently enough to > break SPF and make gmail think I'm the originator of the email, > instead of the actual sender. Consequently, g

Re: SPF and forwarding

2015-07-25 Thread Sebastian Nielsen
No. Thats whats SPF is designed to prevent. Else every phisher would claim they "forwarded" the email, to bypass the whole SPF security system. There is two options here, except for disabling forwarding altogether and require gmail owners to fetch instead: Either, you replace the MAIL FROM an

Re: SPF and forwarding

2015-07-25 Thread Mello, Cody
Hi Alex, A mail server that I operate had similar issues several years ago. Our solution was to stop users from forwarding, and make them use gmail's POP3 support for fetching mail. Whenever a new user gets their account set up, we ask them if they want to use our webmail interface or gmail, and h

SPF and forwarding

2015-07-25 Thread Alex
Hi, I have a postfix-2.10.5 server on fedora, and have several users that forward their mail through to gmail. This is apparently enough to break SPF and make gmail think I'm the originator of the email, instead of the actual sender. Consequently, gmail considers it spam and moves it to a spam fol

PATCH: Wildcard key and inline-maps

2015-07-25 Thread Wietse Venema
a network address. If you feel adventurous you can try this patch for Postfix 3.0 and later. It passes regression tests, but has not been used in real life. ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/20150725-multi-access-maps.gz ftp://ftp.porcupine.org/mirrors

Re: Debian TLS ssl libraries from package or source

2015-07-25 Thread Viktor Dukhovni
On Sat, Jul 25, 2015 at 12:36:14PM -0500, John Gateley wrote: > > The only libssl.so file I can find is: > /usr/lib/x86_64-linux-gnu/libssl.so > Which looks like Gnu TLS to me. No, that's OpenSSL. Most Debian 64-bit libraries are in /usr/lib/x86_64-linux-gnu. That's the name of the ABI and has

Re: Debian TLS ssl libraries from package or source

2015-07-25 Thread Erwan David
Le 25/07/2015 19:36, John Gateley a écrit : > Hello, > > I am trying to build postfix with TLS support. > > I have Debian, with the openssl package installed (as well as > libssl-dev). > Reading the instructions here: > http://www.postfix.org/TLS_README.html#build_tls > It states "Do not use Gnu TL

Debian TLS ssl libraries from package or source

2015-07-25 Thread John Gateley
Hello, I am trying to build postfix with TLS support. I have Debian, with the openssl package installed (as well as libssl-dev). Reading the instructions here: http://www.postfix.org/TLS_README.html#build_tls It states "Do not use Gnu TLS". The only libssl.so file I can find is: /usr/lib/x86_64

Re: check_client_access before reject_unknown_client_hostname in smtpd_client_restrictions block

2015-07-25 Thread Wietse Venema
?: > Hello Guys, > > I'm trying to set up some restrictions in 'smtpd_client_restrictions' > Postfix config block. You can see my 'smtpd_client_restrictions' block > bellow: > > smtpd_client_restrictions = > permit_mynetworks, > che

Re: Wildcard key and inline-maps

2015-07-25 Thread Wietse Venema
Wietse Venema: > Viktor Dukhovni: > > On Fri, Jul 24, 2015 at 01:32:40PM +0200, Dominik Chilla wrote: > > > > > I'm trying to use the new inline:{key=value, ...} map in combination with > > > smtpd_restriction_classes. What I want the map to do is to reject by > > > default (last key is a kind of

check_client_access before reject_unknown_client_hostname in smtpd_client_restrictions block

2015-07-25 Thread Марк Твенс
Hello Guys, I'm trying to set up some restrictions in 'smtpd_client_restrictions' Postfix config block. You can see my 'smtpd_client_restrictions' block bellow: smtpd_client_restrictions = permit_mynetworks, check_client_access hash:/etc/pos