SRS/forwarding and SPF/DKIM

2016-05-23 Thread Alex
Hi, I have a fedora system with postfix-3.0.4 that accepts mail for a few thousand mailboxes on a single domain. Many users have chosen to forward their mail off the system on to their GMail/Yahoo account instead of reading it locally, then use submission or GMail tricks to send as a user from thei

Re: check_client_access cidr - Performance concerns ?

2016-05-23 Thread Noel Jones
On 5/23/2016 5:55 PM, list...@tutanota.com wrote: > I noticed this email today about IF ... ENDIF. > > I didnt know about it yet so I have been reading and looking at > examples. > > I can understand some but not all yet. The examples with matching > on just an IP or CIDR are easy to see. > > B

RE: postfix ignoring access file?

2016-05-23 Thread Gomes, Rich
Please Help I have implemented this method but it has had an unexpected and unwelcome effect. All external mail (email not in the relay_domains file) is being blocked with the following error: NOQUEUE: reject: RCPT from unknown[10.40.80.11]: 554 5.7.1 : Relay access denied; I had tested in ou

Re: check_client_access cidr - Performance concerns ?

2016-05-23 Thread lists42
I noticed this email today about IF ... ENDIF. I didnt know about it yet so I have been reading and looking at examples. I can understand some but not all yet.  The examples with matching on just an IP or CIDR are easy to see. But can IF ... ENDIF in Postfix be used to make this .pcre simplifie

Re: How to dkim-milter-signing email from myself, to myself?

2016-05-23 Thread lists42
23. May 2016 11:11 by wie...@porcupine.org: > Mail submitted this way will appear to come from IP address 127.0.0.1. > If you don't have that address in the list of OpenDKIM's local > networks, then it won't sign. I do have that local host already in the opendkim configuration. So I stopp

Re: How to dkim-milter-signing email from myself, to myself?

2016-05-23 Thread Wietse Venema
list...@tutanota.com: > 23. May 2016 10:50 by wie...@porcupine.org: > > > To sign mail submitted with /usr/sbin/sendmail, you need to specify > > non_smtpd_milters in main.cf. > > > > Yes I understood that instruction. > > So now I have it in the main.cf and I verify it > > postconf non_smtpd_m

Re: How to dkim-milter-signing email from myself, to myself?

2016-05-23 Thread lists42
23. May 2016 10:50 by wie...@porcupine.org: > To sign mail submitted with /usr/sbin/sendmail, you need to specify > non_smtpd_milters in main.cf. > Yes I understood that instruction. So now I have it in the main.cf and I verify it postconf non_smtpd_milters   non_smtpd_milters = unix:/var/run/o

Re: How to dkim-milter-signing email from myself, to myself?

2016-05-23 Thread Wietse Venema
list...@tutanota.com: > In my logs I have only this > > May 22 09:07:28 mail postfix/pickup[26683]: 3rD3N05mHTz2xDs: uid=0 > from= > May 22 09:07:28 mail postfix/cleanup[26971]: 3rD3N05mHTz2xDs: > message-id=<3rd3n05mhtz2...@mail.example.com> > May 22 09:07:28 mail postfi

Re: How to dkim-milter-signing email from myself, to myself?

2016-05-23 Thread /dev/rob0
On Mon, May 23, 2016 at 05:29:33PM +0100, list...@tutanota.com wrote: > I am testing dkim signing on my Postfix server.  I am using the > opendkim milter. > > For sending mail to other domains, external and not mine, the > signing is working okay. > > But when I test it at the command line usin

How to dkim-milter-signing email from myself, to myself?

2016-05-23 Thread lists42
I am testing dkim signing on my Postfix server.  I am using the opendkim milter. For sending mail to other domains, external and not mine, the signing is working okay. But when I test it at the command line using 'sendmail' on the Postfix server, where I am sending to my own domain     sendma

Re: understanding postscreen_dnsbl_whitelist_threshold

2016-05-23 Thread Marco
Il 23/05/2016 10:42, Marco ha scritto: 2016-05-20T15:49:07.384799+02:00 mx postfix/dnsblog[1304]: addr 157.56.110.148 listed by domain wl.mailspike.net as 127.0.0.17 Ah, I understood. wl.mailspike.net as 127.0.0.17 doesn't match the rule: wl.mailspike.net=127.0.0.[18..20]*-1 but dnsblog

understanding postscreen_dnsbl_whitelist_threshold

2016-05-23 Thread Marco
Hello, could you help me to understand this behavior in postcreen? I see: 2016-05-20T15:49:13.988843+02:00 mx postfix/postscreen[32210]: PASS NEW [157.56.110.148]:29046 2016-05-20T15:49:13.828110+02:00 mx postfix/postscreen[32210]: NOQUEUE: reject: RCPT from [157.56.110.148]:29046: 450 4.

RE: Load balancing

2016-05-23 Thread volodymyr.lytvyne...@unicredit.ua
Thanks! This is it. -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Noel Jones Sent: Friday, May 20, 2016 4:41 PM To: postfix-users@postfix.org Subject: Re: Load balancing On 5/20/2016 2:15 AM, volodymyr.lytvyne...@unicredit.