Re: Header_Checks non-exsiting field check

2017-09-14 Thread Robby Van Mieghem
Can there be more lines after the if .. endif meaning I have 3 other checks to do ( not conditional ) , just a check if a field contains spec word 1, word2 or 3, depending on that FILTER smtp : so if /^X-MS-Exchange-CrossTenant-id:/ !/^X-MS-Exchange-CrossTenant-id: / REJECT TenantID-InCorrec

Re: Prevent local delivery for unix accounts

2017-09-14 Thread Phil Stracchino
On 09/14/17 11:52, Msd wrote: > Hello, > > Is it possible to prevent local delivery for unix accounts below 1000 > (system accounts)? > > I have read http://www.postfix.org/LOCAL_RECIPIENT_README.html and > http://www.postfix.org/postconf.5.html#local_recipient_maps without success. > > My pro

Re: stop receiving mail but keep processing mail in queue

2017-09-14 Thread Viktor Dukhovni
On Thu, Sep 14, 2017 at 06:02:55PM +0200, Benny Pedersen wrote: > Rosenbaum, Larry M. skrev den 2017-09-14 17:40: > > How would we set Postfix to stop accepting incoming mail yet keep > > processing any queued mail? > > google postfix loopback only > > main.cf: > > inet_interfaces = loopback-on

Re: How to check for upcoming certificate expiration...

2017-09-14 Thread Łukasz Wąsikowski
W dniu 2017-09-13 o 22:11, Viktor Dukhovni pisze: >> On Sep 13, 2017, at 3:43 PM, Łukasz Wąsikowski wrote: >> >>> See below for OpenSSL 1.0.2 or later. Earlier versions don't >>> have the "-verify_hostname" option, you can delete it if you >>> like, and omit that part of the certificate check, i

Re: Prevent local delivery for unix accounts

2017-09-14 Thread Benny Pedersen
Msd skrev den 2017-09-14 18:59: remove non desired system accounts from local_recipient_maps My local_recipient_maps has the default value : "proxy:unix:passwd.byname $alias_maps". http://www.postfix.org/postconf.5.html#local_recipient_maps this line accept all system users, and all alias, if

Re: Prevent local delivery for unix accounts

2017-09-14 Thread Benny Pedersen
Matthew McGehrin skrev den 2017-09-14 18:57: Just have your /etc/aliases default to /dev/null for system accounts. this is completely incorrect way of solving it MAILER-DAEMON: /dev/null postmaster: /dev/null hostmaster: /dev/null www:/dev/null nobody: /dev/null i

Re: Header_Checks non-exsiting field check

2017-09-14 Thread Noel Jones
On 9/14/2017 7:18 AM, Robby Van Mieghem wrote: > OK tx > > Small other questions. Seems not to works also : assuming tenantid = > > > I have one line in header checks > > !/^X-MS-Exchange-CrossTenant-id: / REJECT Tenant-ID In-Correct > > So I want a reject whenever the X--Cross

Re: Prevent local delivery for unix accounts

2017-09-14 Thread Ralph Seichter
On 14.09.2017 18:59, Msd wrote: > I don't realy want to create a "normal user" whitelist or a "system > user" blacklist because the list will probably change if I install a > new software or I create a new user. Well, that's the nature of things, given that you wrote you don't want to accept mail

Re: Prevent local delivery for unix accounts

2017-09-14 Thread Msd
Le 14/09/2017 à 18:08, Benny Pedersen a écrit : > remove non desired system accounts from local_recipient_maps My local_recipient_maps has the default value : "proxy:unix:passwd.byname $alias_maps". http://www.postfix.org/postconf.5.html#local_recipient_maps And I don't realy want to create a

Re: Prevent local delivery for unix accounts

2017-09-14 Thread Matthew McGehrin
Just have your /etc/aliases default to /dev/null for system accounts. MAILER-DAEMON: /dev/null postmaster: /dev/null hostmaster: /dev/null www:/dev/null nobody: /dev/null info: /dev/null spam-trap: /dev/null uucp: /dev/null postfix:/de

Re: Prevent local delivery for unix accounts

2017-09-14 Thread Benny Pedersen
Msd skrev den 2017-09-14 17:52: Is it possible to prevent local delivery for unix accounts below 1000 (system accounts)? yes, remove non desired system accounts from local_recipient_maps, or remove public domains from mydestination, if you still want some public domains to recive mail to sys

Re: stop receiving mail but keep processing mail in queue

2017-09-14 Thread Benny Pedersen
Rosenbaum, Larry M. skrev den 2017-09-14 17:40: How would we set Postfix to stop accepting incoming mail yet keep processing any queued mail? google postfix loopback only main.cf: inet_interfaces = loopback-only postfix reload

Prevent local delivery for unix accounts

2017-09-14 Thread Msd
Hello, Is it possible to prevent local delivery for unix accounts below 1000 (system accounts)? I have read http://www.postfix.org/LOCAL_RECIPIENT_README.html and http://www.postfix.org/postconf.5.html#local_recipient_maps without success. My problem is that spammers trie to deliver mails t

stop receiving mail but keep processing mail in queue

2017-09-14 Thread Rosenbaum, Larry M.
How would we set Postfix to stop accepting incoming mail yet keep processing any queued mail? We are migrating from RHEL6 physical to RHEL7 virtual. Postfix version 3.2.2. Also, can we copy the queue over? Thanks, Larry M. Rosenbaum Oak Ridge National Laboratory

Re: Header_Checks non-exsiting field check

2017-09-14 Thread Robby Van Mieghem
OK tx Small other questions. Seems not to works also : assuming tenantid = I have one line in header checks !/^X-MS-Exchange-CrossTenant-id: / REJECT Tenant-ID In-Correct So I want a reject whenever the X--CrossTenantID is not ... He seems to ignire th '!' How can I say c

Re: Letsencrypt tip

2017-09-14 Thread Dominic Raferd
On 13 September 2017 at 19:54, Viktor Dukhovni wrote: > > > On Sep 13, 2017, at 4:10 AM, Dominic Raferd > wrote: > > > > As Postfix SMTP server does not support SNI I think there is no point > using > > -servername option above, so the above can be shortened to: > > > > ​echo | > > sudo openssl