Re: Reject unknown users, even when sent from 'mydomain'

2018-06-28 Thread Bill Cole
On 28 Jun 2018, at 15:35, dur...@mgtsciences.com wrote: I have a LAN behind a firewall with port 25 forwarded to machine running postfix. That machine sends email on to a Domino server. However, I am using a VM for testing and I cannot change the forwarded port. So I am doing it all from t

Re: Defer mail instead of bounce

2018-06-28 Thread Viktor Dukhovni
> On Jun 28, 2018, at 6:10 PM, li...@mbchandler.net wrote: > > I agree about the nameserver, but unfortunately I don't have a choice. I'm > required to use this one. > > I'm not as familiar with DNS as I should be, but is there a temporary error > code the nameserver could return instead, th

Re: Defer mail instead of bounce

2018-06-28 Thread lists
I agree about the nameserver, but unfortunately I don't have a choice. I'm required to use this one. I'm not as familiar with DNS as I should be, but is there a temporary error code the nameserver could return instead, that would cause Postfix to defer this mail? Another question. As far as

RE: Can postfix send encrypted but not authenticated emails ? -- FIXED

2018-06-28 Thread Fazzina, Angelo
Hi, I only needed to add one setting and all the deferred test emails on O365 started flowing into my inbox RAN vi /etc/postfix/main.cf added # -ALF 2018-06-28 smtpd_tls_security_level = may RAN service postfix reload Case closed, thanks. -ANGELO FAZZINA ITS Ser

Reject unknown users, even when sent from 'mydomain'

2018-06-28 Thread durwin
I have a LAN behind a firewall with port 25 forwarded to machine running postfix. That machine sends email on to a Domino server. However, I am using a VM for testing and I cannot change the forwarded port. So I am doing it all from the postfix machine. I use the command below to send an emai

Re: Defer mail instead of bounce

2018-06-28 Thread Viktor Dukhovni
> On Jun 28, 2018, at 3:23 PM, li...@mbchandler.net wrote: > > I have email relays that relay/filter email between the internet and our > internal network. I must use the DNS servers we maintain and those servers > use a DNS blacklisting service. The problem I'm having is that when a > legit

RE: Can postfix send encrypted but not authenticated emails ?

2018-06-28 Thread Fazzina, Angelo
Hi, thank you Viktor. I was able to replicate the error [ a deferral] from O365 450 4.4.317 cannot connect to remote server message= 451 5.7.3 STARTTLS is required to send mail My server 137.99.25.233 on port 25 is not accepting the mail. I can not control what O365 does, they send on port 25,

Defer mail instead of bounce

2018-06-28 Thread lists
I have email relays that relay/filter email between the internet and our internal network. I must use the DNS servers we maintain and those servers use a DNS blacklisting service. The problem I'm having is that when a legitimate domain is blacklisted, I see log messages like the ones below and

Re: Can postfix send encrypted but not authenticated emails ?

2018-06-28 Thread Viktor Dukhovni
> On Jun 28, 2018, at 12:41 PM, Fazzina, Angelo > wrote: > > Hi, I have been reading the online docs for TLS_README.html and > SASL_README.html but still having trouble deducing if I can get Postfix 2.6 > to accept email over port 587 without giving Postfix a username and password? The su

Can postfix send encrypted but not authenticated emails ?

2018-06-28 Thread Fazzina, Angelo
Hi, I have been reading the online docs for TLS_README.html and SASL_README.html but still having trouble deducing if I can get Postfix 2.6 to accept email over port 587 without giving Postfix a username and password ? My current understanding of how my server deals with mail is traffic on port

Re: Can a ISP block partially the traffic over the port 25 ??

2018-06-28 Thread Dominic Raferd
On Thu, 28 Jun 2018 at 13:27, kazabe wrote: > Hi, > > I'm have a very strange issue with a mail server, locate in the main > company office. Until the last five weeks we are experimenting > problems to deliver emails to some domains stored on outlook.com and > other servers. We message stay on

Re: Can a ISP block partially the traffic over the port 25 ??

2018-06-28 Thread Philip Paeps
On 2018-06-28 07:25:43 (-0500), kazabe wrote: I'm have a very strange issue with a mail server, locate in the main company office. Until the last five weeks we are experimenting problems to deliver emails to some domains stored on outlook.com and other servers. We message stay on our queue wi

Can a ISP block partially the traffic over the port 25 ??

2018-06-28 Thread kazabe
Hi, I'm have a very strange issue with a mail server, locate in the main company office. Until the last five weeks we are experimenting problems to deliver emails to some domains stored on outlook.com and other servers. We message stay on our queue with the status 442 like this: "dsn=4.4.2, sta

Re: PATCH: multiple deliveries per TLS-encrypted connection

2018-06-28 Thread Ralf Hildebrandt
* Viktor Dukhovni : > Ralf, please try just this patch against the stock 20180618 snapshot, > and check as many of the below as you can: > > * The crashes are gone > * DANE is still used when expected > * TLS connection re-use happens under sustained load > > We might want to log some sort

Re: What is postfix telling me to do?

2018-06-28 Thread Ralf Hildebrandt
* James B. Byrne : > I am configuring a new Postfix-3.3.0 service to act as one of our > public MX providers. > Out: 250 2.1.0 Ok > In: RCPT TO: > Out: 250 2.1.5 Ok > In: DATA > Out: 354 End data with . > Out: 451 4.3.0 Error: queue file write error > In: QUIT > Out: 221 2.0.0 Bye >

how to restrict subnets to send only to specific domains

2018-06-28 Thread Olaf313
Hello, i have to setup Postfix that clients or printers from subnets like 192.168.10.0/24 or specific ip addresses like 192.168.16.45 are allowed to send mails to every destination. I have done this by this main.cf: smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_