Re: helo command rejected

2022-12-02 Thread raf
On Fri, Dec 02, 2022 at 09:47:03AM -0500, Wietse Venema wrote: > raf: > > On Fri, Dec 02, 2022 at 08:51:14AM -0500, Wietse Venema > > wrote: > > > > > David Dolan: > > > > I guess it's using the musl resolver in Alpine so we need to migrate OS > > > > to > > > > get past this issue? > > > >

Re: Backup MX Take 2

2022-12-02 Thread raf
On Fri, Dec 02, 2022 at 10:24:29AM -0500, Jonathan Capra wrote: > > OK this is weird. > > I have in main.cf: > > relayhost = helix.wtfayla.net I don't think you need the above line. The fact that helix is the primary MX server is enough for Postfix on caduceus to know to send mail for the re

Re: Send email to one @domain.com via authenticated relay?

2022-12-02 Thread Jim Popovitch
On Fri, 2022-12-02 at 11:36 -0500, John Stoffel wrote: I check, but I find my IP for mail.stoffel.org in the UCEPROTECT-3  spam list. Nothing I can do about it.  I doubt that many sites block by using UCEPROTECH-3 alone, but you can  use www.whitelisted.org to be excluded from it. -Jim P.

Re: Send email to one @domain.com via authenticated relay?

2022-12-02 Thread Wietse Venema
Viktor Dukhovni: > On Fri, Dec 02, 2022 at 11:36:30AM -0500, John Stoffel wrote: > > > I tried setting up /etc/postfix/transport_maps like this: > > > >charter.net [mobile.charter.net]:587 The right-hand side should be transport:nexthop or transport:nexthop:service-or-po

Re: Send email to one @domain.com via authenticated relay?

2022-12-02 Thread Viktor Dukhovni
On Fri, Dec 02, 2022 at 11:36:30AM -0500, John Stoffel wrote: > I tried setting up /etc/postfix/transport_maps like this: > >charter.net [mobile.charter.net]:587 > > But it started routing all my outgoing email through them, which isn't > going to work. That's not the way the transport tab

Re: Backup MX Take 2

2022-12-02 Thread Wietse Venema
Viktor Dukhovni: > On Fri, Dec 02, 2022 at 12:54:21PM -0500, Wietse Venema wrote: > > > > You can verify that with postmap -q commands. > > > > And this is because Postfix does an implicit reject_unlisted_recipient > > after smtpd_recipient_restrictions. That behavior can be disabled only > > by

AW: Send email to one @domain.com via authenticated relay?

2022-12-02 Thread Joachim Lindenberg
UCEProtect are gangsters, even the founder admits: https://uceprotect.wtf/. You don´t want to do anything about it, except you are located in Europe and can complain to their customers and authorities violating GDPR. Greetings, Joachim -Ursprüngliche Nachricht- Von: owner-postfix-us..

Re: helo command rejected

2022-12-02 Thread Steffen Nurpmeso
Steffen Nurpmeso wrote in <20221202180252.bmzqg%stef...@sdaoden.eu>: |Viktor Dukhovni wrote in | : ||On Fri, Dec 02, 2022 at 06:03:51PM +0100, Steffen Nurpmeso wrote: ||> Simply add a dnsmasq local cache. dnsmasq is a package on ... ||Deploying dnsmasq does not do anything to address the li

Re: helo command rejected

2022-12-02 Thread Steffen Nurpmeso
Viktor Dukhovni wrote in : |On Fri, Dec 02, 2022 at 06:03:51PM +0100, Steffen Nurpmeso wrote: | |> Simply add a dnsmasq local cache. dnsmasq is a package on |> AlpineLinux, i use it. (Including dnssec, and it even serves its |> cache back into a VPN, so that effectively only one instance do

Re: Backup MX Take 2

2022-12-02 Thread Viktor Dukhovni
On Fri, Dec 02, 2022 at 12:54:21PM -0500, Wietse Venema wrote: > > You can verify that with postmap -q commands. > > And this is because Postfix does an implicit reject_unlisted_recipient > after smtpd_recipient_restrictions. That behavior can be disabled only > by configuring reject_unlisted_rec

Re: Backup MX Take 2

2022-12-02 Thread Wietse Venema
Wietse Venema: > Jonathan Capra: > > > > Thanks so much, Wietse... > > > # postmap -q fongaboo.com /etc/postfix/relay_domains > > OK > > Based on your earlier posting: > > relay_domains = hash:/etc/postfix/relay_domains > > Therefore recipients are primarily validated with relay_recipient_

Re: Backup MX Take 2

2022-12-02 Thread Viktor Dukhovni
On Fri, Dec 02, 2022 at 11:42:54AM -0500, Jonathan Capra wrote: > # grep fongaboo.com /etc/postfix/relay_domains > fongaboo.comOK > > # postmap -q fongaboo.com /etc/postfix/relay_domains > OK Fine. > # grep fongaboo.com /etc/postfix/relay_recipients Partial output here is not that useful.

Re: Backup MX Take 2

2022-12-02 Thread Wietse Venema
Jonathan Capra: > > Thanks so much, Wietse... > # postmap -q fongaboo.com /etc/postfix/relay_domains > OK Based on your earlier posting: relay_domains = hash:/etc/postfix/relay_domains Therefore recipients are primarily validated with relay_recipient_maps. Based on your earlier posting:

Re: helo command rejected

2022-12-02 Thread Viktor Dukhovni
On Fri, Dec 02, 2022 at 06:03:51PM +0100, Steffen Nurpmeso wrote: > Simply add a dnsmasq local cache. dnsmasq is a package on > AlpineLinux, i use it. (Including dnssec, and it even serves its > cache back into a VPN, so that effectively only one instance does > all the web queries.) (I use it

Re: helo command rejected

2022-12-02 Thread Fred Morris
Felker has past history with this mailing list and postfix, as well as some things related to annoyances like versioning. Are you on a MUSL libc system? IIRC there's no support for TCP in MUSL's stub resolver. See, for example: https://news.ycombinator.com/item?id=28312935 https://news

Re: helo command rejected

2022-12-02 Thread Steffen Nurpmeso
Wietse Venema wrote in <4nnwkv4frxzj...@spike.porcupine.org>: |raf: |> On Fri, Dec 02, 2022 at 08:51:14AM -0500, Wietse Venema e.org> wrote: |> |>> David Dolan: |>>> I guess it's using the musl resolver in Alpine so we need to migrate \ |>>> OS to |>>> get past this issue? |>> |>> Yes.

Re: Backup MX Take 2

2022-12-02 Thread Jonathan Capra
Thanks so much, Wietse... # grep fongaboo.com /etc/postfix/relay_domains fongaboo.comOK # # postmap relay_domains # # postmap -q fongaboo.com /etc/postfix/relay_domains OK # # postmap -q notfongaboo.com /etc/postfix/relay_domains # # # grep fongaboo.com /etc/postfix/relay_recipients | more

Send email to one @domain.com via authenticated relay?

2022-12-02 Thread John Stoffel
Hi all, I run my own domain @stoffel.org and I'm trying to fix a problem sending email to @charter.net users, since Spectrum has blocked my Linode's ASN number completely. My IP passes all the RBL blacklists their first line support suggested I check, but I find my IP for mail.stoffel.org in the

Re: Backup MX Take 2

2022-12-02 Thread Wietse Venema
Jonathan Capra: > > Thanks. Here you go: > > > # postconf -nf > > alias_database = hash:/etc/aliases > alias_maps = hash:/etc/aliases > append_dot_mydomain = no > biff = no > compatibility_level = 2 > inet_interfaces = all > inet_protocols = all > mailbox_size_limit = 0 > maximal_queue_lifetime

Re: how to deal with t-online's blocking

2022-12-02 Thread John Stoffel
> "Henry" == Henry R writes: > I was once charter's customer. > But I leave them since charter was bought by Spectrum. > And spectrum blocks all IP from DO and Linode. Yup, so now I'm trying to setup things so that my postfix routes all emails to @charter.net users via my charter login, but

Re: Backup MX Take 2

2022-12-02 Thread Jonathan Capra
Thanks. Here you go: # postconf -nf alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no compatibility_level = 2 inet_interfaces = all inet_protocols = all mailbox_size_limit = 0 maximal_queue_lifetime = 10d mydestination = $myhostname, ca2ceus.

Re: Backup MX Take 2

2022-12-02 Thread Wietse Venema
Jonathan Capra: > > OK this is weird. > > I have in main.cf: > > relayhost = helix.wtfayla.net > relay_recipient_maps = hash:/etc/postfix/relay_recipients > relay_domains = hash:/etc/postfix/relay_domains Did you already post "postconf -nf" and "postconf -Mf" output as requested? > But if I ru

Re: Backup MX Take 2

2022-12-02 Thread Jonathan Capra
OK this is weird. I have in main.cf: relayhost = helix.wtfayla.net relay_recipient_maps = hash:/etc/postfix/relay_recipients relay_domains = hash:/etc/postfix/relay_domains But if I run postconf -d | grep relay, I see: relay_domains = ${{$compatibility_level} < {2} ? {$mydestination} : {}}

Re: helo command rejected

2022-12-02 Thread Matus UHLAR - fantomas
David Dolan: > I guess it's using the musl resolver in Alpine so we need to migrate OS to > get past this issue? On Fri, Dec 02, 2022 at 08:51:14AM -0500, Wietse Venema wrote: Yes. Don't use toy software in production. On 03.12.22 00:59, raf wrote: I suspect that alpine is used in many ma

Re: helo command rejected

2022-12-02 Thread Wietse Venema
raf: > On Fri, Dec 02, 2022 at 08:51:14AM -0500, Wietse Venema > wrote: > > > David Dolan: > > > I guess it's using the musl resolver in Alpine so we need to migrate OS to > > > get past this issue? > > > > Yes. Don't use toy software in production. > > > > Wietse > > I suspect that alpin

Re: helo command rejected

2022-12-02 Thread raf
On Fri, Dec 02, 2022 at 08:51:14AM -0500, Wietse Venema wrote: > David Dolan: > > I guess it's using the musl resolver in Alpine so we need to migrate OS to > > get past this issue? > > Yes. Don't use toy software in production. > > Wietse I suspect that alpine is used in many many dock

Re: helo command rejected

2022-12-02 Thread Wietse Venema
David Dolan: > On Fri, 2 Dec 2022 at 10:33, David Dolan wrote: > > > > > > > Subject:Re: helo command rejected > >> From: Viktor Dukhovni > >> Date: 2022-12-01 16:56:13 > >> Message-ID: Y4jcrRxsEJPsWZVZ () straasha ! imrryr ! org > >> [Download RAW message or body] > >> > >> On T

Re: helo command rejected

2022-12-02 Thread David Dolan
On Fri, 2 Dec 2022 at 10:33, David Dolan wrote: > > > Subject:Re: helo command rejected >> From: Viktor Dukhovni >> Date: 2022-12-01 16:56:13 >> Message-ID: Y4jcrRxsEJPsWZVZ () straasha ! imrryr ! org >> [Download RAW message or body] >> >> On Thu, Dec 01, 2022 at 04:06:30PM +000

Re: helo command rejected

2022-12-02 Thread David Dolan
Subject:Re: helo command rejected > From: Viktor Dukhovni > Date: 2022-12-01 16:56:13 > Message-ID: Y4jcrRxsEJPsWZVZ () straasha ! imrryr ! org > [Download RAW message or body] > > On Thu, Dec 01, 2022 at 04:06:30PM +, David Dolan wrote: > > > This is the full line: > > > > NO