[pfx] Re: Need help debugging Python in Postfix

2024-07-08 Thread Viktor Dukhovni via Postfix-users
On Mon, Jul 08, 2024 at 10:44:46PM -0700, Simon Thorpe (PST) via Postfix-users wrote: > All emails to {alias}@mydomain.com sent onto any of a list of other > domains, i.e. {alias}@domain1.com, {alias}@domain2.com, etc. This lists a condition, but no action. > If I can do this without code and p

[pfx] Re: Need help debugging Python in Postfix

2024-07-08 Thread Simon Thorpe (PST) via Postfix-users
On Mon, Jul 8, 2024 at 3:21 PM Bill Cole via Postfix-users < postfix-users@postfix.org> wrote: > On 2024-07-08 at 17:03:47 UTC-0400 (Mon, 8 Jul 2024 14:03:47 -0700) > Simon Thorpe (PST) via Postfix-users > is rumored to have said: > > Hi > > I am working on a Postfix server which accepts email fo

[pfx] Re: SASL authentication - first try local and then AD in postfix

2024-07-08 Thread Viktor Dukhovni via Postfix-users
[ No need to "Cc:" me in replies, just reply to the list. It is unfortunate that mailman moves my address from "From:" to "Reply-To:", that's very much not my intent. ] On Tue, Jul 09, 2024 at 11:50:40AM +1000, hkhk_exact10 wrote: > > with much additional configuration needed for pam_ldap. >

[pfx] Re: SASL authentication - first try local and then AD in postfix

2024-07-08 Thread hkhk_exact10 via Postfix-users
> > with much additional configuration needed for pam_ldap. > Can you please provide some details about the configuration for this part. As mentioned, I have configure ldap via saslauthd by below configurations ]# egrep -v "^#|^$" /etc/sysconfig/saslauthd SOCKETDIR=/run/saslauthd MECH=ldap FLAGS=

[pfx] Re: SASL authentication - first try local and then AD in postfix

2024-07-08 Thread hkhk_exact10 via Postfix-users
Hi Patrick, Cyrus SASL is able to use saslauthd in order to authenticate users in > /etc/passwd. I don’t know what you did with Cyrus SASL to configure AD > authentication, but assuming it would be a method called foobar you would > configure Cyrus SASL to use the following list of password verifi

[pfx] Re: Local delivery for both login and virtual users in a single domain?

2024-07-08 Thread Viktor Dukhovni via Postfix-users
On Mon, Jul 08, 2024 at 08:34:57PM -0400, Robert Fuhrer via Postfix-users wrote: > Hi John, > > I've already got that dovecot LDA config line in master.cf (it's how > delivery for the one login user is set up), though without the "-f" > flag. I guess the LDA is pulling the "from" address from the

[pfx] Re: Local delivery for both login and virtual users in a single domain?

2024-07-08 Thread Robert Fuhrer via Postfix-users
Hi John, I've already got that dovecot LDA config line in master.cf (it's how delivery for the one login user is set up), though without the "-f" flag. I guess the LDA is pulling the "from" address from the email headers. I think the right thing for me to do is remove unix:passwd.byname from l

[pfx] Re: Need help debugging Python in Postfix

2024-07-08 Thread Wietse Venema via Postfix-users
Simon Thorpe (PST) via Postfix-users: > Hi > > I am working on a Postfix server which accepts email for the domain it's > authoritative for (e.g. mydomain.com) and then duplicates each email to a > configurable list of other domains, i.e. an email to al...@mydomain.com is > forwarded onto al...@an

[pfx] Re: Need help debugging Python in Postfix

2024-07-08 Thread Bill Cole via Postfix-users
On 2024-07-08 at 17:03:47 UTC-0400 (Mon, 8 Jul 2024 14:03:47 -0700) Simon Thorpe (PST) via Postfix-users is rumored to have said: Hi I am working on a Postfix server which accepts email for the domain it's authoritative for (e.g. mydomain.com) and then duplicates each email to a configurable

[pfx] Need help debugging Python in Postfix

2024-07-08 Thread Simon Thorpe (PST) via Postfix-users
Hi I am working on a Postfix server which accepts email for the domain it's authoritative for (e.g. mydomain.com) and then duplicates each email to a configurable list of other domains, i.e. an email to al...@mydomain.com is forwarded onto al...@anotherdomain.com and al...@whatdomain.com. This se

[pfx] Re: spf and Permerror

2024-07-08 Thread Scott Kitterman via Postfix-users
Did you read the error message: No valid SPF record for included domain: _spf.cyberfolks.pl: include:_spf.cyberfolks.pl. In fact, _spf.cyberfolks.pl does not have an SPF record. Either it needs to have one published or you need to remove the include. Scott K On July 8, 2024 2:47:54 PM UTC, n

[pfx] Re: spf and Permerror

2024-07-08 Thread natan via Postfix-users
Hi I try onother Permerror but I dont known why Jul  8 14:28:29 MX postfix/smtpd[48372]: NOQUEUE: reject: RCPT from s10b.cyber-folks.pl[193.17.184.42]: 550 5.7.24 : Recipient address rejected: Message rejected due to: SPF Permanent Error: No valid SPF record for included domain: _spf.cyberfol

[pfx] Re: spf

2024-07-08 Thread natan via Postfix-users
Hi What you propose use ? Maybe instead of not accepting such mail will better is change score in SA ? W dniu 8.07.2024 o 11:36, natan via Postfix-users pisze: Hi What value do you use in postfix-policyd-spf in PermError_reject ? HELO_reject = Fail Mail_From_reject = Fail #update 20240706 #P

[pfx] Re: spf

2024-07-08 Thread Jeff Pang via Postfix-users
I am using the default value: PermError_reject = True But it totally depends by you. On 2024-07-08 17:36, natan via Postfix-users wrote: Hi What value do you use in postfix-policyd-spf in PermError_reject ? HELO_reject = Fail Mail_From_reject = Fail #update 20240706 #PermError_reject = False

[pfx] spf

2024-07-08 Thread natan via Postfix-users
Hi What value do you use in postfix-policyd-spf in PermError_reject ? HELO_reject = Fail Mail_From_reject = Fail #update 20240706 #PermError_reject = False PermError_reject = True TempError_Defer = False I don't know if that's maybe too restrictive PermError_reject But on the other hand, the se

[pfx] Re: Documentation Prefix

2024-07-08 Thread Alexander Leidinger via Postfix-users
Am 2024-07-08 06:52, schrieb Ralph Seichter via Postfix-users: * Allen Coates via Postfix-users: I am blocking 2001:db8::/32 (of course); it's the Teredo prefix which I am allowing. I misunderstood the word "these" in your OP, and the subject line only referenced the documentation prefix, but

[pfx] Re: SASL authentication - first try local and then AD in postfix

2024-07-08 Thread Viktor Dukhovni via Postfix-users
On Mon, Jul 08, 2024 at 08:39:54AM +0200, Patrick Ben Koetter via Postfix-users wrote: > > I want to setup SMTP authentication in such a way that the user > > should first be looked locally (/etc/passwd) and then in AD. Is it > > possible to do so? I was able to configure AD auth via sasl (cyrus)