Logging - Connect Order

2021-05-28 Thread postfix
Without recompiling postfix, is there a way to get the PTR hostname warning to come after the connect message in the logs?

Re: Enforced TLS with Opportunistic DANE

2021-05-28 Thread Wietse Venema
Viktor Dukhovni: > On Fri, May 28, 2021 at 01:44:54PM -0400, Wietse Venema wrote: > > > > The barrier to progress is deciding whether a point solution such as > > > a new level like "dane-or-encrypt" is good enough, or whether the right > > > way forward is a more general syntax for specifying wha

Re: Enforced TLS with Opportunistic DANE

2021-05-28 Thread Viktor Dukhovni
On Fri, May 28, 2021 at 01:44:54PM -0400, Wietse Venema wrote: > > The barrier to progress is deciding whether a point solution such as > > a new level like "dane-or-encrypt" is good enough, or whether the right > > way forward is a more general syntax for specifying what happends when > > a dynam

Re: Newbie question about transport_maps failing

2021-05-28 Thread Viktor Dukhovni
On Fri, May 28, 2021 at 10:27:29AM -0500, David Favor wrote: > My goal is to limit allowed sender domains, to ensure no > mail config problem sends from a domain with no no SPF > authorization for sending IP. The transport table is surely the wrong place to do that. Instead, use access(5) to ref

Re: Newbie question about transport_maps failing

2021-05-28 Thread Wietse Venema
IL Ka: > > > > > > > If you want to choose transport based on sender, you probably want > > > "sender_dependent_default_transport_maps" > > > > > > > > http://www.postfix.org/postconf.5.html#sender_dependent_default_transport_maps > > > > > > > > It seems that this option doesn't support wildcards.

Re: Newbie question about transport_maps failing

2021-05-28 Thread IL Ka
> > > > If you want to choose transport based on sender, you probably want > > "sender_dependent_default_transport_maps" > > > > > http://www.postfix.org/postconf.5.html#sender_dependent_default_transport_maps > > > > It seems that this option doesn't support wildcards. It says >The tables are sear

Re: Enforced TLS with Opportunistic DANE

2021-05-28 Thread Wietse Venema
Viktor Dukhovni: > The barrier to progress is deciding whether a point solution such as > a new level like "dane-or-encrypt" is good enough, or whether the right > way forward is a more general syntax for specifying what happends when > a dynamic level like dane finds its preconditions missing. >

Re: haproxy mention in logs

2021-05-28 Thread Wietse Venema
This is one SMTP session, with a host that has bad DNS. Below is an SMTP session from a host that has bad DNS. > postfix/smtpd[8568]: warning: hostname zg-0520a-211.stretchoid.com does > not resolve to address 192.241.205.222: Name or service not known > postfix/smtpd[8568]: connect from unknown

Re: Enforced TLS with Opportunistic DANE

2021-05-28 Thread Matthew Richardson
On Thu, 27 May 2021 13:07:39 -0400, Viktor Dukhovni wrote:- >On Thu, May 27, 2021 at 05:42:34PM +0100, Matthew Richardson wrote: > >> and I am wanting to enhance this for certain specific domains to >> require mandatory encryption, without neutering DANE if present. >> Thus, the suggestion of an a

Re: haproxy mention in logs

2021-05-28 Thread postfix
On 05-28-2021 11:00 am, Wietse Venema wrote: As documented HAPPROXY sends one message with the protocol and remote/local endpoint information. If HAPROXY sends anything else then that would be a HAPROXY bug. Im sorry for being "slow" but im not understanding and need further clarification. H

Re: Newbie question about transport_maps failing

2021-05-28 Thread IL Ka
On Fri, May 28, 2021 at 6:28 PM David Favor wrote: > My goal is to limit allowed sender domains, to ensure no > mail config problem sends from a domain with no no SPF > authorization for sending IP. > If you want to choose transport based on sender, you probably want "sender_dependent_default_tr

Newbie question about transport_maps failing

2021-05-28 Thread David Favor
My goal is to limit allowed sender domains, to ensure no mail config problem sends from a domain with no no SPF authorization for sending IP. What I've done... 1) Setup /etc/postfix/transport # cat /etc/postfix/transport davidfavor.com : fixdeliver.com : * discard: # postmap /etc/postfix/trans

Re: haproxy mention in logs

2021-05-28 Thread Wietse Venema
post...@ptld.com: > postfix/smtpd[8568]: warning: hostname zg-0520a-211.stretchoid.com does > not resolve to address 192.241.205.222: Name or service not known > postfix/smtpd[8568]: connect from unknown[192.241.205.222] > postfix/smtpd[8568]: lost connection after UNKNOWN from > unknown[192.241.

haproxy mention in logs

2021-05-28 Thread postfix
postfix/smtpd[8568]: warning: hostname zg-0520a-211.stretchoid.com does not resolve to address 192.241.205.222: Name or service not known postfix/smtpd[8568]: connect from unknown[192.241.205.222] postfix/smtpd[8568]: lost connection after UNKNOWN from unknown[192.241.205.222] postfix/smtpd[8568

Re: Relay denied - failed from WORLD 2 LAN

2021-05-28 Thread postfix
On 05-28-2021 3:39 am, Maurizio Caloro wrote: May 27 22:17:58 srvcar010 postfix/smtpd[9596]: NOQUEUE: reject: RCPT from unknown[117.92.203.30]: 450 4.7.25 Client host rejected: cannot find your hostname, [117.92.203.30]; from=euaq...@ulis.com to=usern...@domain.ch proto=ESMTP helo= This em

Re: Relay denied - failed from WORLD 2 LAN

2021-05-28 Thread IL Ka
On Fri, May 28, 2021 at 10:40 AM Maurizio Caloro wrote: > Hello > > want to put this setup into operation and it failed. I have a Postfix > server with this setup and Spamassassin. > > in the background there is an HCL Domino server. I was able to E-Mail from > (LAN) to myself (WORLD), but > > E-

Relay denied - failed from WORLD 2 LAN

2021-05-28 Thread Maurizio Caloro
Hello want to put this setup into operation and it failed. I have a Postfix server with this setup and Spamassassin. in the background there is an HCL Domino server. I was able to E-Mail from (LAN) to myself (WORLD), but E-mail that sending (WORLD) to (LAN INSIDE), never arrive. also didnt

Re: long_queue_ids

2021-05-28 Thread Bastian Blank
On Thu, May 27, 2021 at 11:31:15AM -0400, post...@ptld.com wrote: > Any other tips for parsing logs for queue ID? Only contain alphanumeric characters, at least 11 characters long. Bastian -- You're too beautiful to ignore. Too much woman. -- Kirk to Yeoman Rand, "The Enemy Wit

Re: long_queue_ids

2021-05-28 Thread Bastian Blank
On Thu, May 27, 2021 at 11:50:14PM -0400, post...@ptld.com wrote: > Is it possible for two different servers to have a same long_queue_ids ? > Are the long queue ID's unique to the world or only unique to that postfix > instance? Queue ID are only unique to a single Postfix instance. Why do you t