Re: Missing 'Received' in header

2018-07-24 Thread durwin
> > > > Thank you. I have this there. > > /^X-SPAM-FLAG:\s+YES/ REDIRECT s...@mycompany.com > > > > How can I keep this without wiping out the original header? > > This does not drop Recived: headers. You are dropping those headers > in some other way. > > Wietse I edited some files, re

Re: Missing 'Received' in header

2018-07-24 Thread Wietse Venema
dur...@mgtsciences.com: > > From: Wietse Venema > > To: Postfix users > > Date: 07/24/2018 11:53 AM > > Subject: Re: Missing 'Received' in header > > Sent by: owner-postfix-us...@postfix.org > > > > dur...@mgtsciences.com: > > > I receive email through Postfix, then relay it on to my Domino serv

Re: How to white list

2018-07-24 Thread Bill Cole
On 24 Jul 2018, at 11:31, dur...@mgtsciences.com wrote: I had it white-listed here. postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr So why was it not passed? Because postscreen and smtpd are distinct programs that have independent (but compatibly conf

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Phil Stracchino
On 07/24/18 14:00, Phil Stracchino wrote: > OK, it took me a couple of readings to parse what exactly you were doing > with the variable there, but once I cleared that up, it seems to be > working correctly for normal direct delivery. Now waiting for my > outside co-conspirator to do another forc

Re: Missing 'Received' in header

2018-07-24 Thread durwin
> From: dur...@mgtsciences.com > To: Postfix users > Cc: owner-postfix-us...@postfix.org > Date: 07/24/2018 12:22 PM > Subject: Re: Missing 'Received' in header > Sent by: owner-postfix-us...@postfix.org > > > From: Wietse Venema > > To: Postfix users > > Date: 07/24/2018 11:53 AM > > Subjec

Re: Missing 'Received' in header

2018-07-24 Thread durwin
> From: Wietse Venema > To: Postfix users > Date: 07/24/2018 11:53 AM > Subject: Re: Missing 'Received' in header > Sent by: owner-postfix-us...@postfix.org > > dur...@mgtsciences.com: > > I receive email through Postfix, then relay it on to my Domino server. In > > my old Sendmail > > setup

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Phil Stracchino
On 07/24/18 10:36, Viktor Dukhovni wrote: > On Tue, Jul 24, 2018 at 09:59:18AM -0400, Phil Stracchino wrote: > >> I'm just not >> sure of the best way to set things up such that it does NOT get filtered. > > Add the backup MX to an IP-based whitelist. Check that whitelist > before all restrictio

Re: Missing 'Received' in header

2018-07-24 Thread Wietse Venema
dur...@mgtsciences.com: > I receive email through Postfix, then relay it on to my Domino server. In > my old Sendmail > setup the Received were in the header, now they are missing. Is there > something I > am doing which is striping them off? > > === main.cf === ... > header_checks = regexp:

Open Relay on local lan

2018-07-24 Thread Software Information
Hi All I have my postfix server up and running now for some time. Recently though, auditors made a deal that the server is an open relay. It is true that on the local lan it is. What's the best way to change this behavior? For example, is there a way to configure postfix to accept mail from say tw

Missing 'Received' in header

2018-07-24 Thread durwin
I receive email through Postfix, then relay it on to my Domino server. In my old Sendmail setup the Received were in the header, now they are missing. Is there something I am doing which is striping them off? === main.cf === alias_database = hash:/etc/aliases alias_maps = hash:/etc/postfix/a

Re: How to white list

2018-07-24 Thread durwin
owner-postfix-us...@postfix.org wrote on 07/24/2018 09:35:39 AM: > From: Viktor Dukhovni > To: Postfix users > Date: 07/24/2018 09:36 AM > Subject: Re: How to white list > Sent by: owner-postfix-us...@postfix.org > > > > > On Jul 23, 2018, at 7:04 PM, Allen Coates > wrote: > > > > anything

Re: How to white list

2018-07-24 Thread Viktor Dukhovni
> On Jul 23, 2018, at 7:04 PM, Allen Coates wrote: > > anything white-listed by postscreen will bypass client restrictions also That's not correct. -- Viktor.

Re: How to white list

2018-07-24 Thread durwin
owner-postfix-us...@postfix.org wrote on 07/23/2018 05:04:45 PM: > From: Allen Coates > To: postfix-users@postfix.org > Date: 07/23/2018 05:05 PM > Subject: Re: How to white list > Sent by: owner-postfix-us...@postfix.org > > > > On 23/07/18 21:17, dur...@mgtsciences.com wrote: > > I have whit

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread James B. Byrne
On Tue, July 24, 2018 10:27, Phil Stracchino wrote: > On 07/24/18 09:59, Phil Stracchino wrote: >> On 07/24/18 08:42, Viktor Dukhovni wrote: On Jul 24, 2018, at 8:36 AM, Phil Stracchino wrote: EXCEPT when mail is being queued through my secondary MX because I'm

Re: Avoiding sending backscatter

2018-07-24 Thread Diego M. Vadell
On Wednesday 18 July 2018 03:27:36 pm Noel Jones wrote: > On 7/18/2018 12:59 PM, Diego Vadell wrote: > > Hello everyone, > > > > I have a postfix server (with amavis and clamav) that receives emails > > for other domains. When it gets a mail for a non-existent email, it > > accepts it anyway

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Viktor Dukhovni
On Tue, Jul 24, 2018 at 09:59:18AM -0400, Phil Stracchino wrote: > I'm just not > sure of the best way to set things up such that it does NOT get filtered. Add the backup MX to an IP-based whitelist. Check that whitelist before all restrictions other than relay control. cidr = cidr:${co

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Phil Stracchino
On 07/24/18 09:59, Phil Stracchino wrote: > On 07/24/18 08:42, Viktor Dukhovni wrote: >>> On Jul 24, 2018, at 8:36 AM, Phil Stracchino wrote: >>> >>> EXCEPT when mail is being queued through my secondary MX because I'm >>> offline. Then it's a problem, which I'm now trying to figure out how t

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Phil Stracchino
On 07/24/18 08:42, Viktor Dukhovni wrote: >> On Jul 24, 2018, at 8:36 AM, Phil Stracchino wrote: >> >> EXCEPT when mail is being queued through my secondary MX because I'm >> offline. Then it's a problem, which I'm now trying to figure out how to >> fix. > > You MUST NOT filter inbound traff

Re: what's smtpd_tls_wrappermode 'non standart' ?

2018-07-24 Thread Miwa Susumu
hi. 2018-07-24 18:24 GMT+09:00 Dominic Raferd : >> Does 'the non-standard "wrapper" mode' refer to SMTPS using port 465? >> smtpd_tls_wrappermode >> http://www.postfix.org/postconf.5.html#smtpd_tls_wrappermode >> > Run the Postfix SMTP server in the non-standard "wrapper" mode, instead >> > of usi

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Viktor Dukhovni
> On Jul 24, 2018, at 8:36 AM, Phil Stracchino wrote: > > EXCEPT when mail is being queued through my secondary MX because I'm > offline. Then it's a problem, which I'm now trying to figure out how to > fix. You MUST NOT filter inbound traffic via your secondary MX. If that MX host is to

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Phil Stracchino
On 07/24/18 06:23, Dominic Raferd wrote: > Off-topic but I am curious about your blocking policy based purely on > SPF. I see a fair few SPF fails on incoming mails from genuine senders.​ I see very few EXCEPT when it's coming through my secondary MX. As a general rule, if a domain *has* an SPF

Re: SPF + outside backup MX relay = redelivery failures: Help requested

2018-07-24 Thread Dominic Raferd
On Mon, 23 Jul 2018 at 15:04, Phil Stracchino wrote: > On 07/21/18 21:25, Scott Kitterman wrote: > > Only check SPF at the external border of your email architecture. The > relay > > from your backup MX is an internal relay. SPF checks from that host > should be > > skipped. If you look at the

Re: what's smtpd_tls_wrappermode 'non standart' ?

2018-07-24 Thread Dominic Raferd
​​On Tue, 24 Jul 2018 at 09:06, Miwa Susumu wrote: > Hi all. > > Does 'the non-standard "wrapper" mode' refer to SMTPS using port 465? > smtpd_tls_wrappermode > http://www.postfix.org/postconf.5.html#smtpd_tls_wrappermode > > Run the Postfix SMTP server in the non-standard "wrapper" mode, instead

what's smtpd_tls_wrappermode 'non standart' ?

2018-07-24 Thread Miwa Susumu
Hi all. Does 'the non-standard "wrapper" mode' refer to SMTPS using port 465? smtpd_tls_wrappermode http://www.postfix.org/postconf.5.html#smtpd_tls_wrappermode > Run the Postfix SMTP server in the non-standard "wrapper" mode, instead of > using the STARTTLS command. I think SMTPS using port 4