Re: Pix workaround should be (partially?) disabled when DANE is in use

2019-04-29 Thread Wietse Venema
Lars Kollstedt: > On Montag, 29. April 2019 16:26:45 CEST Wietse Venema wrote: > > To really fix this requires some research and field testing. > > Hi Wietse, > > that's the reason why I also mentioned, the option to only change > the behavior in case of enforced TLS. By ignoring the disable_esmtp

Re: Pix workaround should be (partially?) disabled when DANE is in use

2019-04-29 Thread Lars Kollstedt
On Montag, 29. April 2019 16:26:45 CEST Wietse Venema wrote: > To really fix this requires some research and field testing. Hi Wietse, that's the reason why I also mentioned, the option to only change the behavior in case of enforced TLS. By ignoring the disable_esmtp option in the case TLS is

Re: Sporadic, repeated connections from aws

2019-04-29 Thread Kris Deugau
@lbutlr wrote: I've had the following in my fqrdns.pcre checks for quite awhile: /^ec2(-[12]?[0-9]{1,2}){4}\.compute-[0-9]\.amazonaws\.com$/ REJECT Generic - Please relay via ISP (amazonaws.com) And I have noticed that I frequently get a series of 50 or more connection attempts from some aws

Re: Pix workaround should be (partially?) disabled when DANE is in use

2019-04-29 Thread Wietse Venema
On Montag, 29. April 2019 13:07:32 CEST Wietse Venema wrote: > /etc/postfix/main.cf: > smtp_pix_workarounds = delay_dotcrlf > > I.e. turn off 'disable_esmtp'. Lars Kollstedt: > I already mentioned this as my workaround in my previous mail. Perhaps a bit > to much in the floating text. ;-)

Re: Pix workaround should be (partially?) disabled when DANE is in use

2019-04-29 Thread Lars Kollstedt
On Montag, 29. April 2019 13:07:32 CEST Wietse Venema wrote: > /etc/postfix/main.cf: > smtp_pix_workarounds = delay_dotcrlf > > I.e. turn off 'disable_esmtp'. > > Wietse Hi Wietse, I already mentioned this as my workaround in my previous mail. Perhaps a bit to much in the floating te

Re: Pix workaround should be (partially?) disabled when DANE is in use

2019-04-29 Thread Wietse Venema
/etc/postfix/main.cf: smtp_pix_workarounds = delay_dotcrlf I.e. turn off 'disable_esmtp'. Wietse

Pix workaround should be (partially?) disabled when DANE is in use

2019-04-29 Thread Lars Kollstedt
Hi, Postfix by default enables the pix workarround for an server after a message has been queued for more than 500s. http://www.postfix.org/postconf.5.html#smtp_pix_workaround_threshold_time The 500second threshold is (probably) only triggered when the server greeting in the SMTP Dialog is rep