Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Viktor Dukhovni
> On Feb 25, 2019, at 4:59 PM, Andrey Repin wrote: > >> Milters can modify (replace) the message body. Milters operating >> in front of a pre-queue proxy filter can only see and modify the >> message envelope, and can neither see nor modify the message content >> (headers or body). > > Then

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Andrey Repin
Greetings, Viktor Dukhovni! >> Milter is BQCF. It processes the mail during scanning, and afaik its >> functionality can replace both smtp_proxy and check_policy_service. >> >> And, you can do multiple milters. >> It just can't modify mail body, only headers, but you usually don't need >> this.

Re: Troubleshooting postscreen/dnsblog

2019-02-25 Thread Wietse Venema
Charles Sprickman: > Dnscache is not above suspicion, and I?ll do some testing with another > resolver, but I would like to know if there?s any way to get logs of DNS > lookup failures or timeouts? dnsblog always logs DNS errors including timeouts. The basic idea with Postfix is that errors are

Re: Troubleshooting postscreen/dnsblog

2019-02-25 Thread Charles Sprickman
> On Feb 21, 2019, at 3:26 PM, Wietse Venema wrote: > > Charles Sprickman: >> Hi all, >> >> Looking for some help on troubleshooting postscreen? >> >> I was recently reworking the list of rbls that I use with postscreen and >> realized that quite a bit of spam that was getting through was in

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Viktor Dukhovni
> On Feb 25, 2019, at 2:46 PM, Matus UHLAR - fantomas wrote: > > Milter is BQCF. It processes the mail during scanning, and afaik its > functionality can replace both smtp_proxy and check_policy_service. > > And, you can do multiple milters. > It just can't modify mail body, only headers, but y

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Viktor Dukhovni
> On Feb 25, 2019, at 2:23 PM, Peter wrote: > > If you're running any of the after-220 tests in postscreen then you are now > delaying mail twice by also greylisting. If you're not running after-220 > tests then you're limiting postscreen's effectiveness. Many on this list will disagree, and

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Matus UHLAR - fantomas
Anyway is there any alternative to opendmarc that would be compatible with BQCF? I realize a good place for that would be inside Amavisd-new, but this feature is not available :/ On 23 févr. 2019, at 23:03, Matus UHLAR - fantomas wrote: whatever it is, running it as milter with your setup won

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Patrick Proniewski
On 25 févr. 2019, at 20:23, Peter wrote: > > On 24/02/19 08:47, Patrick Proniewski wrote: >> I'm also using postscreen, but it doesn't provide the same filtering >> as a regular greylist. And milter-greylist is nice enough to >> synchronise between multiple MX servers in a load balanced >> enviro

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Peter
On 24/02/19 08:47, Patrick Proniewski wrote: I'm also using postscreen, but it doesn't provide the same filtering as a regular greylist. And milter-greylist is nice enough to synchronise between multiple MX servers in a load balanced environment, which is what I'm using at work. This is off-topi

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Patrick Proniewski
On 25 févr. 2019, at 19:55, Viktor Dukhovni wrote: > > On Mon, Feb 25, 2019 at 07:43:49PM +0100, Patrick Proniewski wrote: > >> Then, I'm currently trying another approach. In my current setup, I've an >> amavisd sandwich: outer-smtp->amavisd->inner-smtp. I can't put opendmarc >> or any milter o

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Viktor Dukhovni
On Mon, Feb 25, 2019 at 07:43:49PM +0100, Patrick Proniewski wrote: > Then, I'm currently trying another approach. In my current setup, I've an > amavisd sandwich: outer-smtp->amavisd->inner-smtp. I can't put opendmarc > or any milter on the outer-smtp, so I've put opendmarc on the inner-smtp. > I

Re: how to use (open)dmarc when already doing before-queue content filtering?

2019-02-25 Thread Patrick Proniewski
Hi, > On 23 févr. 2019, at 23:03, Matus UHLAR - fantomas wrote: > >> Anyway is there any alternative to opendmarc that would be compatible with >> BQCF? I realize a good place for that would be inside Amavisd-new, but >> this feature is not available :/ > > whatever it is, running it as milter

Re: retrigger MX lookup for undeliverable mails in mailqueue

2019-02-25 Thread patpro
On 2019-02-25 15:56, Wietse Venema wrote: Stefan Bauer: Hi, our outgoing mails sometimes end up undeliverable in postfix queue and bounce back after 5 days, when remote sites change MX entries and postfix has the old informations. That is incorrect. Postfix does not remember DNS information

Re: retrigger MX lookup for undeliverable mails in mailqueue

2019-02-25 Thread Wietse Venema
Stefan Bauer: > Hi, > > our outgoing mails sometimes end up undeliverable in postfix queue and > bounce back after 5 days, when remote sites change MX entries and postfix > has the old informations. That is incorrect. Postfix does not remember DNS information. The retry schedule is controlled wit

retrigger MX lookup for undeliverable mails in mailqueue

2019-02-25 Thread Stefan Bauer
Hi, our outgoing mails sometimes end up undeliverable in postfix queue and bounce back after 5 days, when remote sites change MX entries and postfix has the old informations. It seems that postfix is not doing another round of lookups when destination MX was already discoverd for remote domain wh