[pfx] Re: Postfix Options Override Or Add When In Both mater.cfg & main.cfg

2023-11-02 Thread Viktor Dukhovni via Postfix-users
On Fri, Nov 03, 2023 at 02:29:55PM +1100, duluxoz via Postfix-users wrote: > Quick Q: Do the individual `-o` options in the `master.cfg` file *add to* or > *override* the equivalent option in the `main.cfg` file? https://www.postfix.org/master.5.html -- Viktor. _

[pfx] Postfix Options Override Or Add When In Both mater.cfg & main.cfg

2023-11-02 Thread duluxoz via Postfix-users
Hi All, Quick Q: Do the individual `-o` options in the `master.cfg` file *add to* or *override* the equivalent option in the `main.cfg` file? For eg: In the `master.cfg` file I've got a `-o smtpd_relay_restriction =` line with a couple of restrictions set on the `submission` service. I've go

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Steffen Nurpmeso via Postfix-users
Matus UHLAR - fantomas via Postfix-users wrote in : |>Jens Hoffrichter via Postfix-users wrote in |> : |>|On Mon, Oct 30, 2023 at 8:12 PM Steffen Nurpmeso via Postfix-users |>| wrote: |> ... |>|> Btw i would wonder: why do -- as email operators -- still use DKIM |>|> at all, since there is

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-11-02 Thread Thomas Wagner via Postfix-users
> This can be verified on Solaris with: > > /usr/bin/elfdump -re 'dyn:' path/to/binary_or_library sorry, this must read: (solaris elfedit in read-only-mode) /usr/bin/elfedit -re 'dyn:' path/to/binary_or_library ___ Postfix-users mailing list

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-11-02 Thread Thomas Wagner via Postfix-users
On Thu, Nov 02, 2023 at 03:56:16AM -0400, Viktor Dukhovni via Postfix-users wrote: > On Thu, Nov 02, 2023 at 09:35:47AM +0200, Jaco Lesch via Postfix-users wrote: > > > > I would have tried instead: > > > > > > PKG_CONFIG_PATH=/usr/openssl/3/lib/64/pkgconfig \ > > > make makefiles dy

[pfx] Connect Postfix to Dovecot SASL with TLS?

2023-11-02 Thread Nick Lockheart via Postfix-users
If I have Postfix configured to use Dovecot SASL via TCP, and Dovecot is running on a remote server, can I set up Postfix to use TLS for its connection to Dovecot SASL? Postfix main.cf: smtpd_sasl_path = inet:dovecot.example.com:12345 smtpd_sasl_type = dovecot Dovecot: service auth { inet_l

[pfx] Re: [pfx-dev] Re: Bug in Dovecot SASL driver: authentication failure reason is wrong

2023-11-02 Thread Wietse Venema via Postfix-users
Stephan Bosch via Postfix-devel: > > Op 2-11-2023 om 15:22 schreef Wietse Venema: > > Stephan Bosch via Postfix-devel: > >> Looks like Postfix [...] somehow uses the data from the previous CONT auth > >> service > >> response as the reason. > > Does this patch address the problem? It resets any p

[pfx] Re: DEF_DB_TYPE change?

2023-11-02 Thread Wietse Venema via Postfix-users
Eray Aslan via Postfix-users: > On Wed, Nov 01, 2023 at 09:41:07AM -0400, Wietse Venema via Postfix-users > wrote: > > Eray Aslan via Postfix-users: > > > Having said that, Berkeley DB is mature software and it works and is > > > widely available in various *nixes. Still, would it be prudent or wo

[pfx] Re: Question about postscreen

2023-11-02 Thread Bill Cole via Postfix-users
On 2023-11-02 at 04:49:37 UTC-0400 (Thu, 02 Nov 2023 10:49:37 +0200) Ivan Ionut via Postfix-users is rumored to have said: Hi, it's possible that postscreen does not block the email when postscreen_dnsbl_threshold is reached but to pass that email to spamassassin(with a score and a tag). No

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Jens Hoffrichter via Postfix-users
Hi! Thanks for the insight - it was not only about forwarding mail to gmail (although I understand that this is a big use case being discussed here), but really about just delivering email to Google / GMail / Workspace. The scenario I'm unsure about is the following: Envelope From is @amazonses.

[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Ralf Hildebrandt via Postfix-users
* Matus UHLAR - fantomas via Postfix-users : > > And thus the solution is: Don't use the dnsbl in postscreen, but ONLY > > in spamassassin/rspamd instead. > > No problem, you can safely use postscreen with multiple DNSBLs and DNSWLs. > - just don't rely on single hit, unless it's your own DNSBL.

[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Matus UHLAR - fantomas via Postfix-users
On 02.11.23 10:49, Ivan Ionut via Postfix-users wrote: > Hi, it's possible that postscreen does not block the email when > postscreen_dnsbl_threshold is reached but to pass that email to > spamassassin(with a score and a tag). * Matus UHLAR - fantomas via Postfix-users : Postscreen does not t

[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Ralf Hildebrandt via Postfix-users
* Matus UHLAR - fantomas via Postfix-users : > On 02.11.23 10:49, Ivan Ionut via Postfix-users wrote: > > Hi, it's possible that postscreen does not block the email when > > postscreen_dnsbl_threshold is reached but to pass that email to > > spamassassin(with a score and a tag). > > Postscreen do

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Matus UHLAR - fantomas via Postfix-users
On 02.11.23 12:04, Jens Hoffrichter via Postfix-users wrote: Actually, I was just discussing these things - this is just regarding the new requirements from Google and Yahoo starting Feb 1st. What happens, if a mail is sent from AmazonSES, with a signature key from amazonses.com, but with a he

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Matus UHLAR - fantomas via Postfix-users
Dnia 2.11.2023 o godz. 09:42:01 Matus UHLAR - fantomas via Postfix-users pisze: (once more: DKIM applies on header From:, SPF on envelope from:). On 02.11.23 11:18, Jaroslaw Rafa via Postfix-users wrote: And DMARC requires that both be identical (actually, from the same domain - user part may

[pfx] Re: Question about postscreen

2023-11-02 Thread Matus UHLAR - fantomas via Postfix-users
On 02.11.23 10:49, Ivan Ionut via Postfix-users wrote: Hi, it's possible that postscreen does not block the email when postscreen_dnsbl_threshold is reached but to pass that email to spamassassin(with a score and a tag). Postscreen does not tag. It passes or blocks the mail. -- Matus UHLAR

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Jens Hoffrichter via Postfix-users
Actually, I was just discussing these things - this is just regarding the new requirements from Google and Yahoo starting Feb 1st. What happens, if a mail is sent from AmazonSES, with a signature key from amazonses.com, but with a header from set to something different, like hoffrichter.no Would

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Scott Kitterman via Postfix-users
On November 2, 2023 10:18:38 AM UTC, Jaroslaw Rafa via Postfix-users wrote: >Dnia 2.11.2023 o godz. 09:42:01 Matus UHLAR - fantomas via Postfix-users >pisze: >> (once more: DKIM applies on header From:, SPF on envelope from:). > >And DMARC requires that both be identical (actually, from the

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Jaroslaw Rafa via Postfix-users
Dnia 2.11.2023 o godz. 09:42:01 Matus UHLAR - fantomas via Postfix-users pisze: > (once more: DKIM applies on header From:, SPF on envelope from:). And DMARC requires that both be identical (actually, from the same domain - user part may be different), which makes things even harder. -- Regards,

[pfx] Question about postscreen

2023-11-02 Thread Ivan Ionut via Postfix-users
Hi, it's possible that postscreen does not block the email when postscreen_dnsbl_threshold is reached but to pass that email to spamassassin(with a score and a tag). -- Ivan Ionuț Str. Mircea cel Bătrân nr 1, Galati 800023 Tel/Fax: +40236 493277 Email: ivan.io...@tehnopol-gl.ro _The con

[pfx] Re: Recommendation for dkim signing

2023-11-02 Thread Matus UHLAR - fantomas via Postfix-users
Jens Hoffrichter via Postfix-users wrote in : |On Mon, Oct 30, 2023 at 8:12 PM Steffen Nurpmeso via Postfix-users | wrote: ... |> Btw i would wonder: why do -- as email operators -- still use DKIM |> at all, since there is ARC and it also offers signatures and |> verification? The OpenSSL (-users

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-11-02 Thread Viktor Dukhovni via Postfix-users
On Thu, Nov 02, 2023 at 09:35:47AM +0200, Jaco Lesch via Postfix-users wrote: > > I would have tried instead: > > > > PKG_CONFIG_PATH=/usr/openssl/3/lib/64/pkgconfig \ > > make makefiles dynamicmaps=yes shared=yes \ > > openssl_path="/usr/openssl/3/bin/openssl" \ > >   

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-11-02 Thread Jaco Lesch via Postfix-users
On 2023/11/01 17:53, Viktor Dukhovni via Postfix-users wrote: On Wed, Nov 01, 2023 at 12:07:31PM +0200, Jaco Lesch via Postfix-users wrote:    Building an OpenSSL Application    The development files are available in the /usr/openssl/3/sub-directo-    ries.  To  build  an  OpenSSL

[pfx] Re: DEF_DB_TYPE change?

2023-11-02 Thread Eray Aslan via Postfix-users
On Wed, Nov 01, 2023 at 09:41:07AM -0400, Wietse Venema via Postfix-users wrote: > Eray Aslan via Postfix-users: > > Having said that, Berkeley DB is mature software and it works and is > > widely available in various *nixes. Still, would it be prudent or worth > > the effort to change the default