[pfx] Re: secure the email system

2024-06-12 Thread Viktor Dukhovni via Postfix-users
On Thu, Jun 13, 2024 at 08:51:38AM +0800, Jeff Peng via Postfix-users wrote: > 8. have reject_unknown_client_hostname, reject_unknown_sender_domain options > for smtpd_sender_restrictions. You may find "reject_unknown_client_hostname" to be too "aggressive", in which case "reject_unknown_reverse_

[pfx] secure the email system

2024-06-12 Thread Jeff Peng via Postfix-users
Hello friends, I am trying to make my email system on tls-mail.com more secure and solid. I have taken the following deployments. 1. close port 587 and 143, use port 993 and 465 with ssl only. 2. disable sasl auth on port 25. 3. use policyd-rate-limit to limit sending rate. 4. use postscreen f

[pfx] Re: milter round robin

2024-06-12 Thread Wietse Venema via Postfix-users
Christian Zoffoli via Postfix-users: > Using a load balancer like HAProxy for MySQL connections allows > balancing only on servers that are synchronized. Direct use of multiple > MySQL hosts in Postfix does not allow for any checks. If you want to load balance N mysql servers behind 1 load balan

[pfx] Re: milter round robin

2024-06-12 Thread Christian Zoffoli via Postfix-users
Using a load balancer like HAProxy for MySQL connections allows balancing only on servers that are synchronized. Direct use of multiple MySQL hosts in Postfix does not allow for any checks. Given this, the example of MySQL, which could also be the balancing of multiple LMTP connections to IMAP

[pfx] Re: milter round robin

2024-06-12 Thread Wietse Venema via Postfix-users
Christian Zoffoli via Postfix-users: > I'm asking because I was using it with HAProxy, and with the load > balancer between Postfix and the two Rspamd machines, I often have > unexplainable timeouts. In general, I see that Postfix does not like > interacting with load balancers; I've had similar

[pfx] Re: milter round robin

2024-06-12 Thread Kenneth Porter via Postfix-users
I'm a long-time sendmail users about to deploy my first Postfix server and will be moving my MIMEDefang/MailMunge milter to it. They provide their own multiplexor. (MailMunge is a fork of MIMEDefang. Both allow one to write filters in Perl and provide a sample filter script that invokes ClamD,

[pfx] Re: milter round robin

2024-06-12 Thread Christian Zoffoli via Postfix-users
I'm asking because I was using it with HAProxy, and with the load balancer between Postfix and the two Rspamd machines, I often have unexplainable timeouts. In general, I see that Postfix does not like interacting with load balancers; I've had similar issues with MySQL connections always balanc

[pfx] Re: milter round robin

2024-06-12 Thread Wietse Venema via Postfix-users
Christian Zoffoli via Postfix-users: > Hello, > is there a way to use multiple milters in round-robin without using a > load balancer? From what I can see in version 3.9, using multiple > milters separated by commas results in them being used in sequence. This is not built into Postfix. If you

[pfx] milter round robin

2024-06-12 Thread Christian Zoffoli via Postfix-users
Hello, is there a way to use multiple milters in round-robin without using a load balancer? From what I can see in version 3.9, using multiple milters separated by commas results in them being used in sequence. ___ Postfix-users mailing list -- postf