[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Benny Pedersen via Postfix-users
Paul Schmehl via Postfix-users skrev den 2024-06-17 06:49: I’m hoping I have solved the problem. I have roundcube sending mail on port 25 with no auth (all daemons are running on the same server), and it is sending mail. Gmail rejects it, but I’ve altered my spf record to include localhost. I

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Paul Schmehl via Postfix-users
> On Jun 17, 2024, at 12:16 AM, Peter via Postfix-users > wrote: > > On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: >> On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users >> wrote: >>> >>> >>> It's likely that roundcube is not configured for TLS and postfix is (as it >>> should

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Alexander Leidinger via Postfix-users
Am 2024-06-17 06:49, schrieb Paul Schmehl via Postfix-users: On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users wrote: It's likely that roundcube is not configured for TLS and postfix is (as it should be) configured not to offer AUTH until TLS is established. Yes, postfix is configured

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Gary R. Schmidt via Postfix-users
On 17/06/2024 11:54, Paul Schmehl via Postfix-users wrote: I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com [SNIP] /var/www/html/webmail/program/lib/Roundcube/rcube.php on line 1794 (POST /webmail/?_task=mail&

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: Gmail rejects it, but I’ve altered my spf record to include localhost. I hope once that propagates my problems with be solved. This will not do anythi9ng for you, you cannot put localhost in an SPF record. There are many reasons why g

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users wrote: It's likely that roundcube is not configured for TLS and postfix is (as it should be) configured not to offer AUTH until TLS is established. Yes, postfix is configured to

[pfx] Re: questions around the configuration

2024-06-16 Thread Jeff Peng via Postfix-users
Got it. Thanks Victor very much. On 2024-06-17 12:18, Viktor Dukhovni via Postfix-users wrote: On Mon, Jun 17, 2024 at 09:54:01AM +0800, Jeff Peng via Postfix-users wrote: smtp_use_tls = yes Obsolete, ignored when the preferred form below is specified. smtp_tls_security_level = may Keep

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Paul Schmehl via Postfix-users
On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users wrote: > > > It's likely that roundcube is not configured for TLS and postfix is (as it > should be) configured not to offer AUTH until TLS is established. > Yes, postfix is configured to use TLS, and no roundcube is not. When I configure

[pfx] Re: questions around the configuration

2024-06-16 Thread Viktor Dukhovni via Postfix-users
On Mon, Jun 17, 2024 at 09:54:01AM +0800, Jeff Peng via Postfix-users wrote: > smtp_use_tls = yes Obsolete, ignored when the preferred form below is specified. > smtp_tls_security_level = may Keep this one. > smtpd_use_tls = yes Obsolete, ignored when the preferred form below is specified. >

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 13:54, Paul Schmehl via Postfix-users wrote: I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com PIPELINING SIZE 9 VRFY ETRN STARTTLS ENHANCEDSTATUSCODES 8BITMIME DSN SMTPUTF8 CHUNKING (Code: 250

[pfx] Troubleshooting roundcube connections to postfix

2024-06-16 Thread Paul Schmehl via Postfix-users
I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com PIPELINING SIZE 9 VRFY ETRN STARTTLS ENHANCEDSTATUSCODES 8BITMIME DSN SMTPUTF8 CHUNKING (Code: 250) in /var/www/html/webmail/program/lib/Roundcube/rcube.php

[pfx] questions around the configuration

2024-06-16 Thread Jeff Peng via Postfix-users
Hello experts, for my these settings, smtp_use_tls = yes smtp_tls_security_level = may smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_use_tls = yes smtpd_tls_security_level = may smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache my questions in

[pfx] Re: Do I have sals authentication properly configured?

2024-06-16 Thread Jeff Peng via Postfix-users
- Did the client connect to port 25 or 578? 578 isn't the port 587? :) ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Best practices?

2024-06-16 Thread Jeff Peng via Postfix-users
# SMTPd SERVER TLS/SSL Settings tls_daemon_random_bytes = 64 tls_random_bytes = 64 smtpd_tls_cert_file = /etc/letsencrypt/live/email.broker/fullchain.pem smtpd_tls_key_file = /etc/letsencrypt/live/email.broker/privkey.pem smtpd_tls_security_level = may smtpd_tls_auth_only = yes smtpd_tls_manda

[pfx] Re: Do I have sals authentication properly configured?

2024-06-16 Thread Paul Schmehl via Postfix-users
> On Jun 16, 2024, at 5:02 PM, Wietse Venema via Postfix-users > wrote: > > Paul Schmehl via Postfix-users: >> I?m trying to sort out a problem with Roundcube failing to send email with >> an error message that says SMTP Error(): authentication failed. In the >> roundcube error log I find this

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread Viktor Dukhovni via Postfix-users
On Sun, Jun 16, 2024 at 01:41:44PM -0400, John Levine via Postfix-users wrote: > Turns out it's more complicated than I thought, they want a restricted > sending address to be able to send only to particular recipients. > Suggestions? If the allowed recipients are the same for all restricted send

[pfx] Best practices?

2024-06-16 Thread Cody Millard via Postfix-users
Hi list. I am a novice postmaster that started a email server last year. There is nothing wrong that I can currently tell but I am the only user and there is only so much that I can test. Here are my config files, I am curious to know what seasoned postmasters think. MAIN.CF--

[pfx] Re: Do I have sals authentication properly configured?

2024-06-16 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > I?m trying to sort out a problem with Roundcube failing to send email with an > error message that says SMTP Error(): authentication failed. In the roundcube > error log I find this: > > [16-Jun-2024 13:58:24 -0500]: <5s9tomcd> PHP Error: SMTP server does not >

[pfx] Do I have sals authentication properly configured?

2024-06-16 Thread Paul Schmehl via Postfix-users
I’m trying to sort out a problem with Roundcube failing to send email with an error message that says SMTP Error(): authentication failed. In the roundcube error log I find this: [16-Jun-2024 13:58:24 -0500]: <5s9tomcd> PHP Error: SMTP server does not support authentication (POST /webmail/?_ta

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread Wietse Venema via Postfix-users
John Levine via Postfix-users: > Turns out it's more complicated than I thought, they want a restricted > sending address to be able to send only to particular recipients. > Suggestions? Here is a non-intuitive solution, based on https://www.postfix.org/RESTRICTION_CLASS_README.html /etc/postfix/

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread Matus UHLAR - fantomas via Postfix-users
It appears that Matus UHLAR - fantomas via Postfix-users said: If one of recipients wants to accept mail from a sender while another recipient doesn't, teoretically you can reject that sender at recipient level, but that complicates configuration (but it's possible). This would mean that for si

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread John Levine via Postfix-users
It appears that Matus UHLAR - fantomas via Postfix-users said: >If one of recipients wants to accept mail from a sender while another >recipient doesn't, teoretically you can reject that sender at recipient >level, but that complicates configuration (but it's possible). >This would mean that fo

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Noel Jones via Postfix-users
On 6/16/2024 9:06 AM, Wietse Venema via Postfix-users wrote: # Don't indent text between IF and ENDIF. IF /^MAIL FROM:/ /^MAIL FROM:/ QUIT /^MAIL FROM:/ QUIT ... ENDIF Seems like if this is talking to a real MTA this would be a connection amplifier. The sending MTA would see this as a non-fa

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > On Sun, Jun 16, 2024 at 10:06:41AM -0400, Wietse Venema via Postfix-users > wrote: > > John R. Levine via Postfix-users: > > > On Sat, 15 Jun 2024, Jeff Peng wrote: > > > > I think postscreen can block them easily. > > > > > > I'm looking at the postscreen man

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Viktor Dukhovni via Postfix-users
On Sun, Jun 16, 2024 at 10:06:41AM -0400, Wietse Venema via Postfix-users wrote: > John R. Levine via Postfix-users: > > On Sat, 15 Jun 2024, Jeff Peng wrote: > > > I think postscreen can block them easily. > > > > I'm looking at the postscreen man page and I don't see anything about mail > > add

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Wietse Venema via Postfix-users
John R. Levine via Postfix-users: > On Sat, 15 Jun 2024, Jeff Peng wrote: > > I think postscreen can block them easily. > > I'm looking at the postscreen man page and I don't see anything about mail > addresses. Am I missing something? That is a bad suggestion, please ignore. > I do see smtpd_

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Benny Pedersen via Postfix-users
John R. Levine via Postfix-users skrev den 2024-06-16 15:18: I'm looking at the postscreen man page and I don't see anything about mail addresses. Am I missing something? postscreen is not smtpd I do see smtpd_command_filter. How about if I map MAIL FROM: to QUIT? so this needs smtpd mi

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread John R. Levine via Postfix-users
On Sat, 15 Jun 2024, Jeff Peng wrote: I think postscreen can block them easily. I'm looking at the postscreen man page and I don't see anything about mail addresses. Am I missing something? I do see smtpd_command_filter. How about if I map MAIL FROM: to QUIT? Regards, John Levine, jo...@t