DANE, Certificate Authorities, Port 25 confusion

2015-08-21 Thread Alice Wonder
I received a rather weird e-mail, it seems to have been generated by an MTA because it was sent to the e-mail listed as the contact in my certificate, the e-mail listed in whois for my domain, and the postmaster e-mail. It claims: --- Only certificate usages DANE-TA(2) and DANE-EE(3) are supp

Re: trying to figure out regex for custom_header checks

2015-08-21 Thread Viktor Dukhovni
On Wed, Aug 19, 2015 at 06:44:05PM -0400, Ben Greenfield wrote: > >> We receive a lot of spam that have very rare top level domains .site, > >> .link, .website, .eu. > > > > It is wrong to black TLDs, even if initially they appear to mostly > > send spam. > > It is quick and effective and my t

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-21 Thread Tom Browder
On Fri, Aug 21, 2015 at 2:59 PM, @lbutlr wrote: > >> On 18 Aug 2015, at 06:55, Tom Browder wrote: >> >> So how should the DNS records look? Can anyone give me the exact >> settings for the A, CNAME, MX, and PTR records for A.tld and B.tld >> (and any other suggested records)? ... > $ dig kreme.

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-21 Thread @lbutlr
> On 18 Aug 2015, at 06:55, Tom Browder wrote: > > So how should the DNS records look? Can anyone give me the exact > settings for the A, CNAME, MX, and PTR records for A.tld and B.tld > (and any other suggested records)? $ dig kreme.com mx kreme.com. 86400 IN MX 10

Re: Filtering certain tags from email

2015-08-21 Thread J. Roeleveld
On Friday, August 21, 2015 01:44:07 PM Wietse Venema wrote: > J. Roeleveld: > > Hi all, > > > > There are occasions I need to send emails asking for "read receipts". > > Some MUAs allow this to be enabled when necessary, defaulting to "off". > > > > However, some have a global setting that needs

Re: Filtering certain tags from email

2015-08-21 Thread Wietse Venema
J. Roeleveld: > Hi all, > > There are occasions I need to send emails asking for "read receipts". > Some MUAs allow this to be enabled when necessary, defaulting to "off". > > However, some have a global setting that needs enabling/disabling (K9mail on > Android is one of them) > > With these o

Re: Filtering certain tags from email

2015-08-21 Thread Noel Jones
On 8/21/2015 12:20 PM, J. Roeleveld wrote: > Hi all, > > There are occasions I need to send emails asking for "read receipts". > Some MUAs allow this to be enabled when necessary, defaulting to "off". > > However, some have a global setting that needs enabling/disabling (K9mail on > Android is o

Filtering certain tags from email

2015-08-21 Thread J. Roeleveld
Hi all, There are occasions I need to send emails asking for "read receipts". Some MUAs allow this to be enabled when necessary, defaulting to "off". However, some have a global setting that needs enabling/disabling (K9mail on Android is one of them) With these on, I tend to annoy people on mai

Re: Virtual domain, ldap lookup, nonexisting recipients get delivered

2015-08-21 Thread Jeroen Scheerder
Quoth Viktor Dukhovni (21 Aug 2015, 15:13): > $ postmap -q @example.com ldap:/usr/local/etc/postfix/example.com-users.cf >> $ postmap -q @example.com ldap:/usr/local/etc/postfix/example.com-groups.cf >> $ >> >> Nothing, as expected. > > > In that case, SMTP mail to non-existent recipients in virtu

Re: Virtual domain, ldap lookup, nonexisting recipients get delivered

2015-08-21 Thread Wietse Venema
Viktor Dukhovni: > For local submission, virtual_mailbox_maps is not checked until > the mail gets to the delivery agent. Only virtual alias domains > have recipient validation done by the queue manager (via > trivial-rewrite). Perhaps more of the SMTP server's "recipient valid" check could be do

Re: Virtual domain, ldap lookup, nonexisting recipients get delivered

2015-08-21 Thread Viktor Dukhovni
On Fri, Aug 21, 2015 at 02:42:04PM +0200, Jeroen Scheerder wrote: > $ postmap -q @example.com ldap:/usr/local/etc/postfix/example.com-users.cf > $ postmap -q @example.com ldap:/usr/local/etc/postfix/example.com-groups.cf > $ > > Nothing, as expected. In that case, SMTP mail to non-existent reci

Re: Virtual domain, ldap lookup, nonexisting recipients get delivered

2015-08-21 Thread Jeroen Scheerder
Quoth Viktor Dukhovni (21 Aug 2015, 14:21): > $ postconf -n >> virtual_alias_maps = >> ldap:/usr/local/etc/postfix/example.com-groups.cf >> ldap:/usr/local/etc/postfix/example.com-users.cf > > > Using "proxy:ldap" is often better than using "ldap:". Ok, I've changed that, thanks. >> virtual_mail

Re: Virtual domain, ldap lookup, nonexisting recipients get delivered

2015-08-21 Thread Viktor Dukhovni
On Fri, Aug 21, 2015 at 10:55:36AM +0200, Jeroen Scheerder wrote: > $ postconf -n > virtual_alias_maps = >ldap:/usr/local/etc/postfix/example.com-groups.cf >ldap:/usr/local/etc/postfix/example.com-users.cf Using "proxy:ldap" is often better than using "ldap:". > virtual_mailbox_domains =

Virtual domain, ldap lookup, nonexisting recipients get delivered

2015-08-21 Thread Jeroen Scheerder
Hi, I have a simple virtual domain setup (s/my.do.main/example.com/g). I'm running 2.11.6 on a FreeBSD 10.1 release, from the ports repository. $ postconf -n command_directory = /usr/local/sbin config_directory = /usr/local/etc/postfix daemon_directory = /usr/local/libexec/postfix data_director

Re: haproxy enablement issues

2015-08-21 Thread Nikolaos Milas
On 20/8/2015 10:48 μμ, Viktor Dukhovni wrote: Have the proxy connect to a dedicated smtpd(8) instance in master.cf listening on a dedicated ip/port. Allow only the proxy to connect there, and turn on haproxy support for just that instance. Thank you Wietse and Victor for your help. I've modi