Re: Postfix treats leading hyphen "-" as illegal address syntax in email address

2020-07-02 Thread Viktor Dukhovni
On Thu, Jul 02, 2020 at 11:50:32PM -0400, sxk...@etoipi.com wrote: > I was playing around with a custom Postfix installation, and I noticed > that Postfix rejects email whose recipient's address starts with a > hyphen "-" (e.g. -1...@example.com) I did some reading on RFC 5322 and > it looks like

Postfix treats leading hyphen "-" as illegal address syntax in email address

2020-07-02 Thread sxkywp
Hello postfix-users, I was playing around with a custom Postfix installation, and I noticed that Postfix rejects email whose recipient's address starts with a hyphen "-" (e.g. -1...@example.com) I did some reading on RFC 5322 and it looks like this should be allowed. page 15 atext

Re: Checking my understanding of TLS-related settings, and a possible feature request

2020-07-02 Thread Viktor Dukhovni
On Thu, Jul 02, 2020 at 09:21:27PM -0400, Viktor Dukhovni wrote: > Tell your customer politely, but firmly, that you are not at liberty to > enforce TLS 1.2 inbound, as that would downgrade the security of > connections from clients that can only do TLS 1.0. However, since > you do support TLS 1.

Re: Checking my understanding of TLS-related settings, and a possible feature request

2020-07-02 Thread Nathan Ward
> On 3/07/2020, at 13:13, Jeremy Banks wrote: > > I am not confident all of our legacy apps can be configured for non-standard > ports; I would be in no way surprised if one or more of them have the classic > smtp ports hardcoded. Though, I will discuss that option with my co-workers. > > Is

Re: Checking my understanding of TLS-related settings, and a possible feature request

2020-07-02 Thread Viktor Dukhovni
On Thu, Jun 11, 2020 at 04:22:37PM +, Jeremy Banks wrote: > At my job, we use Postfix as our email setup. Recently, as part of a > security audit by one of our customers, we were told that our mail > relays must accept only TLSv1.2 when doing TLS, and not any prior > versions. Tell your custo

RE: Checking my understanding of TLS-related settings, and a possible feature request

2020-07-02 Thread Jeremy Banks
I am not confident all of our legacy apps can be configured for non-standard ports; I would be in no way surprised if one or more of them have the classic smtp ports hardcoded. Though, I will discuss that option with my co-workers. Is my understanding of the smtp(d)_tls_FOO options in my origina

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-02 Thread Bill Cole
On 1 Jul 2020, at 19:37, Peter wrote: On 1/07/20 11:20 am, Bill Cole wrote: Can't you just fix the DNS? Use a HELO name that resolves to both IPs and give both IPs PTR records that point back to the name you use. This won't work for FCRDNS properly. That is implementation-dependent. Smart v

Re: Setting default account for local users - sender_canonical_maps?

2020-07-02 Thread Viktor Dukhovni
On Thu, Jul 02, 2020 at 01:58:20PM -0300, Silas wrote: > On Thu, Jul 02, 2020 at 02:55:25PM -0200, Viktor Dukhovni wrote: > >See http://www.postfix.org/MULTI_INSTANCE_README.html#quick > > Going to take a look at that. Thanks! > > >Why regexp? Indexed files are easier to understand and manage

Re: Setting default account for local users - sender_canonical_maps?

2020-07-02 Thread Silas
On Thu, Jul 02, 2020 at 02:55:25PM -0200, Viktor Dukhovni wrote: See http://www.postfix.org/MULTI_INSTANCE_README.html#quick Going to take a look at that. Thanks! Why regexp? Indexed files are easier to understand and manage correctly, and even do "partial" lookup keys for you... You mean

Re: Setting default account for local users - sender_canonical_maps?

2020-07-02 Thread Viktor Dukhovni
> On Jul 2, 2020, at 11:28 AM, Silas wrote: > > Some local users (Unix accounts) on a machine are allowed to send emails > externally, but I want some other users (mainly administrativa accounts like > root and others) to use a notificat...@example.com account. See http://www.postfix.org/MULTI

Re: Setting default account for local users - sender_canonical_maps?

2020-07-02 Thread Silas
On Thu, Jul 02, 2020 at 11:09:44AM -0400, Wietse Venema wrote: /etc/postfix/sender_canonical: /^root$/ notificat...@example.com That does not work, because the address is root@domain not root. That is it! After playing with the machine domain name, the $mydomain setting and ch

Re: Setting default account for local users - sender_canonical_maps?

2020-07-02 Thread Wietse Venema
Silas: > main.cf: > > local_header_rewrite_clients = static:all > sender_canonical_maps = regexp:/etc/postfix/sender_canonical > > /etc/postfix/sender_canonical: > > /^root$/ notificat...@example.com That does not work, because the address is root@domain not root.

Setting default account for local users - sender_canonical_maps?

2020-07-02 Thread Silas
Hi all. Some local users (Unix accounts) on a machine are allowed to send emails externally, but I want some other users (mainly administrativa accounts like root and others) to use a notificat...@example.com account. I can make that by passing "-f notificat...@example.com" to sendmail, but

Re: postfix: Undelivered Mail Returned to Sender error

2020-07-02 Thread Matus UHLAR - fantomas
On 01.07.20 21:41, Ranjan Maitra wrote: I am using postfix to send e-mail. My home machine is called xxx.sub.example.com (I am user with rm11) and my work email address is r...@example.com. My ISP at home is not through my employer but I use VPN through that. I use localhost as my smtp server

Re: postfix: Undelivered Mail Returned to Sender error

2020-07-02 Thread Jaroslaw Rafa
Dnia 1.07.2020 o godz. 21:41:08 Ranjan Maitra pisze: > > I am using postfix to send e-mail. My home machine is called > xxx.sub.example.com (I am user with rm11) and my work email address is > r...@example.com. My ISP at home is not through my employer but I use VPN > through that. I use local

Re: Postfix behind NAT -> failover IP -> wrong HELO

2020-07-02 Thread Matus UHLAR - fantomas
On 1/07/20 11:20 am, Bill Cole wrote: Can't you just fix the DNS? Use a HELO name that resolves to both IPs and give both IPs PTR records that point back to the name you use. On 02.07.20 11:37, Peter wrote: This won't work for FCRDNS properly. What happens is the lookup on the A record will