Re: submission configuration and RFC 6409

2022-10-12 Thread Nick Tait
On 13/10/2022 8:04 am, Geert Hendrickx wrote: The HISTORY file says it is: 20041014-23 Postfix still appends $@myorigin or .$mydomain to headers from the Postfix sendmail command, or from clients listed with the new local_header_rewrite_clients parameter (default:

Re: submission configuration and RFC 6409

2022-10-12 Thread Geert Hendrickx
On Wed, Oct 12, 2022 at 10:41:36 -0400, Wietse Venema wrote: > local_header_rewrite_clients = permit_mynetworks, permit_sasl_authenticated > > Why it isn't the default I cannot remember. The HISTORY file says it is: > 20041014-23 > > Postfix still appends $@myorigin or .$mydomain to hea

Re: response time to the client

2022-10-12 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Oct 12, 2022 at 06:39:58PM +0200, Matus UHLAR - fantomas wrote: > > > >Will it be 2s or something between 2s and 15s? > > >If it's 'between', can we somehow tell it from the mail service side? > > > > > >00:00 postfix/smtpd ... client= > > >00:02 postfix/qmgr ... (qu

Re: response time to the client

2022-10-12 Thread Viktor Dukhovni
On Wed, Oct 12, 2022 at 06:39:58PM +0200, Matus UHLAR - fantomas wrote: > >Will it be 2s or something between 2s and 15s? > >If it's 'between', can we somehow tell it from the mail service side? > > > >00:00 postfix/smtpd ... client= > >00:02 postfix/qmgr ... (queue active) > >[...] > >00:14 p

Re: response time to the client

2022-10-12 Thread Viktor Dukhovni
On Wed, Oct 12, 2022 at 12:36:21PM +0200, juan smitt wrote: > The clients are very sensitive to the mail service's response time (we > can't do anything with that). If they're that latency sensitive, they should switch from SMTP to HTTP POST. The SMTP is not an instant messaging protocol, and is

Re: response time to the client

2022-10-12 Thread Matus UHLAR - fantomas
On 12.10.22 17:41, juan smitt wrote: I think my question wasn't clear enough. The client (a java application) is also measuring the mail delivery time from its point of view. According to this imaginary log, what result will the client (most probably) get? Will it be 2s or something between 2s

Re: response time to the client

2022-10-12 Thread juan smitt
Hi Wietse and Matus, Thanks for your reply. I think my question wasn't clear enough. The client (a java application) is also measuring the mail delivery time from its point of view. According to this imaginary log, what result will the client (most probably) get? Will it be 2s or something bet

Re: submission configuration and RFC 6409

2022-10-12 Thread Viktor Dukhovni
On Thu, Oct 13, 2022 at 01:07:43AM +1300, Nick Tait wrote: > And so I ended up removing the option from > main.cf and including "-o local_header_rewrite_clients=static:all" in > master.cf instead: > > submission inet n   -   y   -   -   smtpd >   -o syslog_name=post

Re: real-world DANE -- which DNSSEC signing algo(s) to use?

2022-10-12 Thread Viktor Dukhovni
On Wed, Oct 12, 2022 at 09:05:34AM -0400, PGNet Dev wrote: > when selecting DNSSEC signing algorithms for eventual use with DANE > setup, checking first @ > > > https://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xhtml#dns-sec-alg-numbers-1 > > both algos 8 & 13 are l

Re: submission configuration and RFC 6409

2022-10-12 Thread Matus UHLAR - fantomas
>Nick Tait: >> Anyway it turned out to be fairly simple to get Postfix to add the >> missing Message-ID header: I just needed the email to satisfy >> "local_header_rewrite_clients". On 12.10.22 09:41, Wietse Venema wrote: >This will break valid DKIM signatures when you change the setting >to

Re: submission configuration and RFC 6409

2022-10-12 Thread Wietse Venema
Matus UHLAR - fantomas: > >Nick Tait: > >> A couple of months ago an email I sent from my phone was bounced by the > >> recipient's SMTP server because the email had no Message-ID header. It > >> turns out the email app that I've been using on my phone for years > >> doesn't generate a Message-ID,

Re: submission configuration and RFC 6409

2022-10-12 Thread Matus UHLAR - fantomas
Nick Tait: A couple of months ago an email I sent from my phone was bounced by the recipient's SMTP server because the email had no Message-ID header. It turns out the email app that I've been using on my phone for years doesn't generate a Message-ID, but this was the first time that this had bee

Re: response time to the client

2022-10-12 Thread Matus UHLAR - fantomas
On 12.10.22 12:36, juan smitt wrote: The clients are very sensitive to the mail service's response time (we can't do anything with that). I have ancountered this issue too. According to this example, is it true that the client considers the email delivered when we see the "(queue active)" ent

Re: response time to the client

2022-10-12 Thread Wietse Venema
juan smitt: > Hi, > > > The clients are very sensitive to the mail service's response time (we > can't do anything with that). The response time from what? Here is an example conversation: Client connects to server (If DNS is broken, there may be some delay) TCP handshake (If

Re: response time to the client

2022-10-12 Thread Wietse Venema
juan smitt: > Hi, > > > The clients are very sensitive to the mail service's response time (we > can't do anything with that). I suggest that you look at the delays= logging. This breaks down the time that a message spends inside Postfix. https://www.postfix.org/postconf.5.html#delay_logging_re

Re: real-world DANE -- which DNSSEC signing algo(s) to use?

2022-10-12 Thread Bill Cole
On 2022-10-12 at 09:05:34 UTC-0400 (Wed, 12 Oct 2022 09:05:34 -0400) PGNet Dev is rumored to have said: *must* I sign my DNSSEC keys for my domains with the same algo in-use by the respective TLDs' roots in order to not fubar DANE usage specifically, No. or can I (arbitrarily) use any algo

Re: submission configuration and RFC 6409

2022-10-12 Thread Wietse Venema
Nick Tait: > Hi list. > > A couple of months ago an email I sent from my phone was bounced by the > recipient's SMTP server because the email had no Message-ID header. It > turns out the email app that I've been using on my phone for years > doesn't generate a Message-ID, but this was the first

real-world DANE -- which DNSSEC signing algo(s) to use?

2022-10-12 Thread PGNet Dev
when selecting DNSSEC signing algorithms for eventual use with DANE setup, checking first @ https://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xhtml#dns-sec-alg-numbers-1 both algos 8 & 13 are listed as options: Number Description Mnemonic

Re: TLS error

2022-10-12 Thread Luciano Mannucci
On Tue, 11 Oct 2022 16:37:44 -0400 Viktor Dukhovni wrote: > > Do I have to worry? > > If Android clients aren't a concern for your MTA, you should perhaps > configure your ACME client (e.g. certbot) to build a chain file without > the cross certificate. Details on the letsencrypt.org website:

submission configuration and RFC 6409

2022-10-12 Thread Nick Tait
Hi list. A couple of months ago an email I sent from my phone was bounced by the recipient's SMTP server because the email had no Message-ID header. It turns out the email app that I've been using on my phone for years doesn't generate a Message-ID, but this was the first time that this had b

response time to the client

2022-10-12 Thread juan smitt
Hi, The clients are very sensitive to the mail service's response time (we can't do anything with that). According to this example, is it true that the client considers the email delivered when we see the "(queue active)" entry in the log whatever happens to the mail later? Can we calculate the