RE: Newbie SASL Auth with Dovecot problem

2016-06-27 Thread Michael Fox
> > I don't see any > > smtpd_sasl_auth_enable = yes > > in your `postconf -n` output although you claim to have set it. The > default would be "no". > > Matthias Oh, jeez. How embarrassing. Thanks Matthias. I had entered smtp_... instead of smtpd_... And no matter how many times I

Re: Newbie SASL Auth with Dovecot problem

2016-06-27 Thread Matthias Sitte
I don't see any smtpd_sasl_auth_enable = yes in your `postconf -n` output although you claim to have set it. The default would be "no". Matthias On 2016-06-28 05:15, Michael Fox wrote: I've been using Postfix for a while with no client submission. I'm trying to set up SASL for the fi

RE: Newbie SASL Auth with Dovecot problem

2016-06-27 Thread Michael Fox
> > There is no AUTH on port 25, take 587. > > Suomi According to http://www.postfix.org/SASL_README.html#server_sasl_authc I should see AUTH on port 25. I also tried port 587. Same result. $ telnet localhost 587 Trying 127.0.0.1... Connected to localhost.localdomain. Escape character is '^]'

Re: No From: address in policy delegation protocol?

2016-06-27 Thread Benning, Markus
On 2016-06-28 07:46, Zhang Huangbin wrote: I have a simple Postfix policy server, and got a problem to reject sender login mismatch (sender != sasl_username) with Outlook 2016: user is able to specify a From: address, it would be any address you want, and the From: address is not passed to policy

Re: No From: address in policy delegation protocol?

2016-06-27 Thread Zhang Huangbin
> On Jun 28, 2016, at 1:46 PM, Zhang Huangbin wrote: > > I can reproduce this issue with a simple Python program: > > *) construct mail message with forge sender address. e.g. 'From: > ' > *) send email as normal/legal user "auth_u...@my-domain.com" with smtp auth. > *) while sending email, sp

No From: address in policy delegation protocol?

2016-06-27 Thread Zhang Huangbin
Dear all, I have a simple Postfix policy server, and got a problem to reject sender login mismatch (sender != sasl_username) with Outlook 2016: user is able to specify a From: address, it would be any address you want, and the From: address is not passed to policy server. I can reproduce this

Re: Newbie SASL Auth with Dovecot problem

2016-06-27 Thread postfix
There is no AUTH on port 25, take 587. suomi On 06/28/2016 05:15 AM, Michael Fox wrote: I’ve been using Postfix for a while with no client submission. I’m trying to set up SASL for the first time, using Dovecot, to support virtual users. When I connect with EHLO, I do NOT see “AUTH” capabilit

Newbie SASL Auth with Dovecot problem

2016-06-27 Thread Michael Fox
I've been using Postfix for a while with no client submission. I'm trying to set up SASL for the first time, using Dovecot, to support virtual users. When I connect with EHLO, I do NOT see "AUTH" capabilities. Of course, I'm following: http://www.postfix.org/SASL_README.html First of al

OT DMARC question

2016-06-27 Thread Paul R. Ganci
I notice that postfix generates bounce messages that without going through some effort do not get DKIM signed. I have setup my incoming gateway server so that messages to my email subscribers are bounced using a local_recipient_map. However I received a report from linkedin.com because a Linked

Re: Different SMTP AUTH options and credentials for different clients

2016-06-27 Thread Viktor Dukhovni
> On Jun 28, 2016, at 2:11 AM, Rob Maidment wrote: > > Filtering out the STARTTLS option can be achieved using > smtpd_discard_ehlo_keyword_address_maps as described above. > The smtpd_tls_security_level parameter must be set to "may" rather > than "encrypt" if there are any profiles where TLS i

Re: Different SMTP AUTH options and credentials for different clients

2016-06-27 Thread Rob Maidment
I think I finally have a solution - thanks to Wietse and Viktor. To recap I am replacing Sendmail with Postfix in a legacy application and I was struggling with these two requirements: 1. The server must authenticate clients differently depending on a "client connection profile"; the profile can

Re: header_checks bypassing discard rules

2016-06-27 Thread Zalezny
Wow, thanks for that perfect tip. On June 27, 2016 5:15:52 PM GMT+02:00, Noel Jones wrote: >On 6/27/2016 3:39 AM, Zalezny Niezalezny wrote: >> Hi, >> >> using header_checks configuration we are dropping all outgoing >> E-mails except some of them. >> >> >> # discard all mails not going to

Re: header_checks bypassing discard rules

2016-06-27 Thread Noel Jones
On 6/27/2016 3:39 AM, Zalezny Niezalezny wrote: > Hi, > > using header_checks configuration we are dropping all outgoing > E-mails except some of them. > > > # discard all mails not going to cortalconsors.(de|fr) > if /^to:/ > !/^to:?$/ DISCARD discarded > endif > > Following rules dropping

Re: DKIM/SPF failure to folder, not return to sender and other tricks

2016-06-27 Thread Kris Deugau
li...@lazygranch.com wrote: > > Peter wrote: > > As a relatively simple example, I use amavisd-new and Spamassassin to > > flag mail with a spam header. Then Dovecot LMTP with sieve looks for > > this header and if it is present it delivers to the user's "Spam" folder. > > Well this is interestin

header_checks bypassing discard rules

2016-06-27 Thread Zalezny Niezalezny
Hi, using header_checks configuration we are dropping all outgoing E-mails except some of them. # discard all mails not going to cortalconsors.(de|fr) if /^to:/ !/^to:?$/ DISCARD discarded endif Following rules dropping all outgoing e-mails with recipeint domains different than extern.domain.c

Re: DKIM/SPF failure to folder, not return to sender and other tricks

2016-06-27 Thread Peter
On 27/06/16 18:41, li...@lazygranch.com wrote: > "As a relatively simple example, I use amavisd-new and Spamassassin > to flag mail with a spam header. Then Dovecot LMTP with sieve looks > for this header and if it is present it delivers to the user's "Spam" > folder." > > Well this is interesting