auth between postfix and dovecot?

2022-04-22 Thread alice
hello experts, I have installed postfix and dovecot in the same machine. Their configure looks as: service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { mode = 0600 user = postfix group = postfix } unix_listener /var/spool/postfix/private/auth { mode =

Re: Rewriting envelope-from of root mail (realname, not email address)

2022-04-22 Thread Viktor Dukhovni
On Fri, Apr 22, 2022 at 06:54:56PM -0700, Dan Mahoney wrote: > masquerade_domains = !ops.foo.org, !support.foo.org, !gitlab.foo.org, > !lists.foo.org, isc.org > masquerade_exceptions = root Personally, I avoid masquerade_domains, because it does wildcard rewriting, and effectively breaks recipie

Rewriting envelope-from of root mail (realname, not email address)

2022-04-22 Thread Dan Mahoney
Hey all, We set: masquerade_domains = !ops.foo.org, !support.foo.org, !gitlab.foo.org, !lists.foo.org, isc.org masquerade_exceptions = root So that when root generates an email (like a system mail) it's obvious what system generated it. We *also* recently set sp=reject in dmarc. Which presen

Re: dkim setup with letsencrypt

2022-04-22 Thread Viktor Dukhovni
On Fri, Apr 22, 2022 at 06:33:42PM -0400, Wietse Venema wrote: > (alice): > > I have made ssl with letsencrypt done :) I found either startssl or TLS > > works. so may i ask is there a guide for adding DKIM to the outgoing > > messages with the same letsencrypt certs? > > TLS is not DKIM. TLS is

Re: dkim setup with letsencrypt

2022-04-22 Thread Wietse Venema
(alice): > I have made ssl with letsencrypt done :) I found either startssl or TLS > works. so may i ask is there a guide for adding DKIM to the outgoing > messages with the same letsencrypt certs? TLS is not DKIM. TLS is for hop-by-hop channel security and DKIM for end-to-end message authentici

Re: dkim setup with letsencrypt

2022-04-22 Thread Ralph Seichter
* ミユナ (alice): > is there a guide for adding DKIM to the outgoing messages with the > same letsencrypt certs? I suggest feeding your favourite search engine with "postfix dkim". -Ralph

dkim setup with letsencrypt

2022-04-22 Thread alice
I have made ssl with letsencrypt done :) I found either startssl or TLS works. so may i ask is there a guide for adding DKIM to the outgoing messages with the same letsencrypt certs? thank you alice

Re: XFORWARD and stmpd-milters

2022-04-22 Thread Wietse Venema
ismael.tan...@univ-brest.fr: > Hello, > > using two postfix instances, the first (call it inbound.test) receiving > inbound mail for postcreen jobs and relay to the second instance with > XFORWARD informations. This came up on this list only a few weeks ago in a thread with Subject: smtpd_milte

XFORWARD and stmpd-milters

2022-04-22 Thread ismael.tan...@univ-brest.fr
Hello, using two postfix instances, the first (call it inbound.test) receiving inbound mail for postcreen jobs and relay to the second instance with XFORWARD informations. The second instance is running some smtpd-milters to filtering inbound mails. tcpdump on second instance shows that XFO

Re: wildcast for domains

2022-04-22 Thread Wietse Venema
al...@coakmail.com: > hello > > May i know if this can be implemented in postfix? > > all of our domains, when they point their MX to the MTA (postfix), even > without settings for those domains, postfix will forward the messages to a > specific email box. > > I meant if I didn't specify any vir

Re: unwanted relay

2022-04-22 Thread Jürgen Echter
Am Freitag, April 22, 2022 12:25 CEST, schrieb al...@coakmail.com: > I have found a strange issue, even i enabled the password auth for smtp, > user can send any other domain's email from the MUA by providing their > correct username/password. How can I disable this on postfix? for instance > user

unwanted relay

2022-04-22 Thread alice
I have found a strange issue, even i enabled the password auth for smtp, user can send any other domain's email from the MUA by providing their correct username/password. How can I disable this on postfix? for instance user has password for u...@coak.com, he should not send email from u...@coak1.co

Re: SRS and sender_dependent_relayhost_maps

2022-04-22 Thread Matus UHLAR - fantomas
On 2022-04-21 17:51, Matus UHLAR - fantomas wrote: I'm trying to keep configuration and mail flow as simple as possible. On 22.04.22 01:44, Benny Pedersen wrote: so dont use SRS ? SRS is crucial to implement some functionalities our customers require. Especially since google started refusi

wildcast for domains

2022-04-22 Thread alice
hello May i know if this can be implemented in postfix? all of our domains, when they point their MX to the MTA (postfix), even without settings for those domains, postfix will forward the messages to a specific email box. I meant if I didn't specify any virtual domain or local domain in postfix

Re: Workaround for sender address rejected: domain not found

2022-04-22 Thread Matus UHLAR - fantomas
On 21.04.22 16:34, Ian Evans wrote: I've seen this a few times with some companies. I'm expecting an email from, say, example.com They say it's bouncing. I check the logs and there's a RCPT 450 Sender address rejected: domain not found. The email is being sent from email.example.com, but that su