Re: TLS Quick start question

2015-07-26 Thread Viktor Dukhovni
On Sun, Jul 26, 2015 at 10:27:54PM -0500, John Gateley wrote: > I have a question regarding your script in: > >http://www.postfix.org/TLS_README.html#quick-start > > The script creates a smtp_tls_session_cache_database but not a > smtpd_tls_session_cache_database. Is this intentional? Yes.

Re: PATCH: Wildcard key and inline-maps

2015-07-26 Thread Dominik Chilla
I applied your patch to version 3.1-20150721 successfully and specified the map like this: smtpd_sender_restrictions = [...] check_sender_access { inline:{ send...@example.org=OK }, static: { REJECT BAD SENDER } } Unfortunately, while reloading/restarting postfix following warning/error ap

Re: SPF and forwarding

2015-07-26 Thread Alex Regan
Hi, On 07/26/2015 01:34 AM, Robert Schetterer wrote: Am 26.07.2015 um 03:04 schrieb Alex: Hi, I have a postfix-2.10.5 server on fedora, and have several users that forward their mail through to gmail. This is apparently enough to break SPF and make gmail think I'm the originator of the email,

Re: PATCH: Wildcard key and inline-maps

2015-07-26 Thread Dominik Chilla
Hello Wietse, thank you for your extremly fast solution! Of course I´ll test your patch ASAP. I appreciate your work very much. A lot of greetings from Germany, Dominik Am 26.07.2015 um 01:46 schrieb Wietse Venema: Wietse Venema: I'm thinking of adding multi-table lookup (similar to canoni

Re: Going through Google spam filters

2015-07-26 Thread Raman Gupta
Oh one more thing that is a total guess on my part and I have no idea whether it would help or not... but it couldn't hurt: implement IPv6 on your domain and publish a record for your MX (with the appropriate reverse DNS). My wild-ass reasoning: a lot of spam-bots are home machines that still

Re: Going through Google spam filters

2015-07-26 Thread Wietse Venema
Daniele Nicolodi: > >>> Maybe this helps: > >>> > >>> Go to your Mail settings and Accounts tab and add the address > >>> you are forwarding from to 'Send mail as'. This is a new feature > >>> from user requests, where Gmail will detect that you forwarded > >>> from that account and

Re: Going through Google spam filters

2015-07-26 Thread Raman Gupta
On 07/26/2015 01:04 PM, Daniele Nicolodi wrote: > On 26/07/15 18:46, Raman Gupta wrote: >> And: >> >> 3) Make sure the reverse DNS for the IP you use to send mail is >> configured to point to your own domain and not your VPS provider's domain: >> >> dig -x >> >> Regards, >> Raman >> >> On 07/26/20

Re: Going through Google spam filters

2015-07-26 Thread Daniele Nicolodi
On 26/07/15 19:51, Wietse Venema wrote: > Daniele Nicolodi: >> On 26/07/15 18:47, Wietse Venema wrote: >>> Daniele Nicolodi: Currently I'm able to send emails to my address @gmail.com from the email address I'm currently using without having them classified as spam, but not from any

Re: Going through Google spam filters

2015-07-26 Thread Daniele Nicolodi
On 26/07/15 19:59, DTNX Postmaster wrote: > I would however have another look at your DNS configuration. Here's the > relevant header; > > == > Received: from zed.grinta.net (grinta.net [109.74.203.128]) > by english-breakfast.cloud9.net (Postfix) with ESMTP id ABBED330874 > for ; Sun

Re: Exploring DANE and Postfix

2015-07-26 Thread Mike
On 7/26/2015 2:11 PM, Wietse Venema wrote: [snip] > > Postfix needs to be build on a system where libresolv supports > DNSSEC. This is already available in a FreeBSD 7.2 virtual machine > that I have lying around. I'm running on FreeBSD 10.1, and it looks fine. Many thanks for the comments.

Re: Exploring DANE and Postfix

2015-07-26 Thread Mike
On 7/26/2015 2:06 PM, Viktor Dukhovni wrote: > On Sun, Jul 26, 2015 at 01:50:58PM -0400, Mike wrote: [snip] > >> Is there a way to see if this prerequisite has been satisfied by the >> version of Postfix I am running on my system. > > Send mail to one of the known DANE TLSA domains (after enablin

Re: Going through Google spam filters

2015-07-26 Thread DTNX Postmaster
On 26 Jul 2015, at 20:12, Viktor Dukhovni wrote: > On Sun, Jul 26, 2015 at 07:59:48PM +0200, DTNX Postmaster wrote: > >> Make everything 'zed.grinta.net', forward and reverse, including your >> MX record, and create CNAME records for your convenience, such as mail >> client configuration. If y

Re: Going through Google spam filters

2015-07-26 Thread Viktor Dukhovni
On Sun, Jul 26, 2015 at 07:59:48PM +0200, DTNX Postmaster wrote: > Make everything 'zed.grinta.net', forward and reverse, including your > MX record, and create CNAME records for your convenience, such as mail > client configuration. If you need an A apex record, just create that > separately,

Re: Exploring DANE and Postfix

2015-07-26 Thread Wietse Venema
Mike: > Postfix 2.11.5 on FreeBSD 10.1 AMD64 > > I'm starting to look at implementing DANE on Postfix, and I have a > question or two... > > Reading the info here: > http://www.postfix.org/TLS_README.html#client_tls_dane > > I see the following prerequisite: > "A compile-time DNS resolver librar

Re: Exploring DANE and Postfix

2015-07-26 Thread Viktor Dukhovni
On Sun, Jul 26, 2015 at 01:50:58PM -0400, Mike wrote: > I'm starting to look at implementing DANE on Postfix, and I have a > question or two... > > Reading the info here: > http://www.postfix.org/TLS_README.html#client_tls_dane > > I see the following prerequisite: > > "A compile-time DNS resolv

Re: Going through Google spam filters

2015-07-26 Thread DTNX Postmaster
On 26 Jul 2015, at 18:16, Daniele Nicolodi wrote: > Hello, > > I apologize in advance because my problem is not strictly related to > postfix, but I don't know another mailing list with helpful people with > enough knowledge of the of the subject. > > I have my personal emails handled by my own

Re: Going through Google spam filters

2015-07-26 Thread Wietse Venema
Daniele Nicolodi: > On 26/07/15 18:47, Wietse Venema wrote: > > Daniele Nicolodi: > >> Currently I'm able to send emails to my address @gmail.com from the > >> email address I'm currently using without having them classified as > >> spam, but not from any email address having a different local part

Exploring DANE and Postfix

2015-07-26 Thread Mike
Postfix 2.11.5 on FreeBSD 10.1 AMD64 I'm starting to look at implementing DANE on Postfix, and I have a question or two... Reading the info here: http://www.postfix.org/TLS_README.html#client_tls_dane I see the following prerequisite: "A compile-time DNS resolver library that supports DNSSEC. Po

Re: Going through Google spam filters

2015-07-26 Thread Daniele Nicolodi
On 26/07/15 18:46, Raman Gupta wrote: > And: > > 3) Make sure the reverse DNS for the IP you use to send mail is > configured to point to your own domain and not your VPS provider's domain: > > dig -x > > Regards, > Raman > > On 07/26/2015 12:40 PM, Raman Gupta wrote: >> I have a similar setup

Re: Going through Google spam filters

2015-07-26 Thread Daniele Nicolodi
On 26/07/15 18:47, Wietse Venema wrote: > Daniele Nicolodi: >> Currently I'm able to send emails to my address @gmail.com from the >> email address I'm currently using without having them classified as >> spam, but not from any email address having a different local part. I >> believe this is becau

Re: Going through Google spam filters

2015-07-26 Thread Wietse Venema
Daniele Nicolodi: > Currently I'm able to send emails to my address @gmail.com from the > email address I'm currently using without having them classified as > spam, but not from any email address having a different local part. I > believe this is because my @grinta.net email address is white liste

Re: Going through Google spam filters

2015-07-26 Thread Raman Gupta
And: 3) Make sure the reverse DNS for the IP you use to send mail is configured to point to your own domain and not your VPS provider's domain: dig -x Regards, Raman On 07/26/2015 12:40 PM, Raman Gupta wrote: > I have a similar setup and don't (as far as I know) have any issues. > Two things t

Re: Going through Google spam filters

2015-07-26 Thread Raman Gupta
I have a similar setup and don't (as far as I know) have any issues. Two things that will likely help you a lot: 1) Setup DMARC (SPF+DKIM) for your domain: https://support.google.com/a/answer/2466580?hl=en. 2) Register/verify your domain(s) at https://postmaster.google.com/u/0/ HTH! Regards, Ram

Going through Google spam filters

2015-07-26 Thread Daniele Nicolodi
Hello, I apologize in advance because my problem is not strictly related to postfix, but I don't know another mailing list with helpful people with enough knowledge of the of the subject. I have my personal emails handled by my own setup hosted on a virtual private server. Since a while (I belie

Re: Problems with incoming mails from outlook.com

2015-07-26 Thread Viktor Dukhovni
On Sun, Jul 26, 2015 at 08:58:52AM +0200, Moritz Schmitt wrote: > Thanks a lot for your very helpful reply! > > I implemented all the changes you suggested and now it works. My late > reply is due to the fact that I needed to wait for another mail from > outlook.com to see if everything works. >

Re: max connection for inbound/outbound smtp

2015-07-26 Thread Benny Pedersen
wie...@porcupine.org skrev den 2015-07-26 15:38: See also: http://www.postfox.org/TUNING_README.html http://www.postfox.org/QSHAPE_README.html incorrect domain

Re: max connection for inbound/outbound smtp

2015-07-26 Thread Wietse Venema
Wietse: > There is one connection per "smtpd" process. Michael Peter: > >> but what about outgoing smtp connections to remote smtpd servers? how > >> many > >> connections postfix can establish for outgoing emails to different mail > >> servers simultaneously ? > > Sorry, it is my mistake since i

Re: check_client_access before reject_unknown_client_hostname in smtpd_client_restrictions block

2015-07-26 Thread Wietse Venema
User Nexus: > I've found the answer on my questions in the official Postfix > documentation. Feel free to skip answering on this email. > Thanks again. There still is hope for humanity. Wietse

Re: max connection for inbound/outbound smtp

2015-07-26 Thread Michael Peter
Thank you very much for your reply, please find my comments below. > Michael Peter: > [ Charset ISO-8859-1 converted... ] >> Hi, >> >> master.cf >> smtp inet n - - - 100 smtpd >> >> I understand that the default concurrent simultaneous incoming smtp >> connection

Re: check_client_access before reject_unknown_client_hostname in smtpd_client_restrictions block

2015-07-26 Thread Wietse Venema
User Nexus: > My question now, is it correct to use 'check_sender_access' in > 'smtpd_client_restrictions' > section? smtpd_client_restrictions (default: empty) ... Other restrictions that are valid in this context: o SMTP command specific restrictions that are describ

Re: SPF and forwarding

2015-07-26 Thread Andrew Beverley
On Sat, 2015-07-25 at 21:04 -0400, Alex wrote: > I have a postfix-2.10.5 server on fedora, and have several users that > forward their mail through to gmail. This is apparently enough to > break SPF and make gmail think I'm the originator of the email, > instead of the actual sender. Consequently,

Re: SPF and forwarding

2015-07-26 Thread A. Schulze
Alex: This is apparently enough to break SPF and make gmail think I'm the originator of the email, instead of the actual sender. Consequently, gmail considers it spam and moves it to a spam folder. there is a MAAWG recommendation document: https://www.m3aawg.org/documents/en/m3aawg-email-f

Re: check_client_access before reject_unknown_client_hostname in smtpd_client_restrictions block

2015-07-26 Thread User Nexus
2015-07-26 10:19 GMT+03:00 User Nexus : > 2015-07-25 17:51 GMT+03:00 Wietse Venema : > >> > Hello Guys, >> > >> > I'm trying to set up some restrictions in 'smtpd_client_restrictions' >> > Postfix config block. You can see my 'smtpd_client_restrictions' block >> > bellow: >> > >> > smtpd_client_re

Re: check_client_access before reject_unknown_client_hostname in smtpd_client_restrictions block

2015-07-26 Thread User Nexus
2015-07-25 17:51 GMT+03:00 Wietse Venema : > ?: > > Hello Guys, > > > > I'm trying to set up some restrictions in 'smtpd_client_restrictions' > > Postfix config block. You can see my 'smtpd_client_restrictions' block > > bellow: > > > > smtpd_client_restrictions = > >