[pfx] Re: RBLs at smtp level

2024-09-07 Thread Peter via Postfix-users
On 7/09/24 22:23, Gilgongo via Postfix-users wrote: I see, thanks. Assuming for a moment that resources for the SA checks weren't an issue, Resources are always an issue, you may think you don't get that much mail but spam can come in heavy waves and postscreen can do a good job of blocking i

[pfx] Re: struggling with smtpd_tls_security_level = encrypt - 5.7.0 Must issue a STARTTLS command first

2024-09-07 Thread hostmaster--- via Postfix-users
Hi Wietse Thanks a lot for your answer and sorry, I should have provided the related logs with my initial post. Viktor pointed me into the right direction and I was able to get the system running as intended in the meantime. Thanks a lot for bringing postfix alive and sharing it with the world!

[pfx] Re: struggling with smtpd_tls_security_level = encrypt - 5.7.0 Must issue a STARTTLS command first

2024-09-07 Thread hostmaster--- via Postfix-users
Thanks Viktor, that was the right direction. I actually didn't configure smtpd_tls_security_level = encrypt in main.cf but in master.cf, however, not at right place: 127.0.0.1:10025 inetn - - - - smtpd -o smtpd_tls_security_l

[pfx] Re: struggling with smtpd_tls_security_level = encrypt - 5.7.0 Must issue a STARTTLS command first

2024-09-07 Thread Wietse Venema via Postfix-users
LinuxMail.cc via Postfix-users: > > > Viktor Dukhovni via Postfix-users: > > Don't set > > > > smtpd_tls_security_level = encrypt > > > > in main.cf. Instead use a master.cf override for just the port 25 > > service: > > > > smtp inet n - n - - s

[pfx] Re: struggling with smtpd_tls_security_level = encrypt - 5.7.0 Must issue a STARTTLS command first

2024-09-07 Thread LinuxMail.cc via Postfix-users
Viktor Dukhovni via Postfix-users: Don't set smtpd_tls_security_level = encrypt in main.cf. Instead use a master.cf override for just the port 25 service: smtp inet n - n - - smtpd -o smtpd_tls_security_level=encrypt I am using pos

[pfx] Re: RBLs at smtp level

2024-09-07 Thread Bill Cole via Postfix-users
On 2024-09-07 at 08:20:42 UTC-0400 (Sat, 7 Sep 2024 08:20:42 -0400 (EDT)) Wietse Venema via Postfix-users is rumored to have said: Only a fool would expose SpamAssassin to the full mail stream. Speaking as a SpamAssassin contributor: This is (almost) 100% accurate. A huge fraction of an unf

[pfx] Re: struggling with smtpd_tls_security_level = encrypt - 5.7.0 Must issue a STARTTLS command first

2024-09-07 Thread Viktor Dukhovni via Postfix-users
On Sat, Sep 07, 2024 at 03:22:21PM +0200, hostmaster--- via Postfix-users wrote: > So I set smtpd_tls_security_level = encrypt. However, with encrypt, > all connection attempts fails, also those that have upgraded to TLS > when smtpd_tls_security_level was set to may. > > I did a tcpdump and fou

[pfx] Re: struggling with smtpd_tls_security_level = encrypt - 5.7.0 Must issue a STARTTLS command first

2024-09-07 Thread Wietse Venema via Postfix-users
hostmaster--- via Postfix-users: > Hi all > > I'm struggling with smtpd_tls_security_level = encrypt. > > I have a postfix installation/configuration with smtpd_tls_security_level = > may and public (letsencrypt) certificates running nicely since years. > Postfix is offering STARTTLS upon connect

[pfx] struggling with smtpd_tls_security_level = encrypt - 5.7.0 Must issue a STARTTLS command first

2024-09-07 Thread hostmaster--- via Postfix-users
Hi all I'm struggling with smtpd_tls_security_level = encrypt. I have a postfix installation/configuration with smtpd_tls_security_level = may and public (letsencrypt) certificates running nicely since years. Postfix is offering STARTTLS upon connections from incoming smtp servers which a good pa

[pfx] Re: RBLs at smtp level

2024-09-07 Thread Wietse Venema via Postfix-users
Gilgongo via Postfix-users: > I notice Spamhaus say that for smaller hosts, RBL blocking at smtp level is > not recommended, and instead it?s better to use a milter for RBL checking. > > https://docs.spamhaus.com/datasets/docs/source/40-real-world-usage/PublicMirrors/MTAs/030-Sendmail.html Only a

[pfx] Re: RBLs at smtp level

2024-09-07 Thread Jaroslaw Rafa via Postfix-users
Dnia 7.09.2024 o godz. 08:25:44 Gilgongo via Postfix-users pisze: > I notice Spamhaus say that for smaller hosts, RBL blocking at smtp level is > not recommended, and instead it’s better to use a milter for RBL checking. > > https://docs.spamhaus.com/datasets/docs/source/40-real-world-usage/Publi

[pfx] Re: RBLs at smtp level

2024-09-07 Thread Gilgongo via Postfix-users
On Sat, 7 Sept 2024 at 10:55, Peter via Postfix-users < postfix-users@postfix.org> wrote: > Postscreen has several advantages here in that it allows you to block > based on a weighted score, so that you can give each individual RBL a > score based on how reliable you believe it to be and then requ

[pfx] Re: RBLs at smtp level

2024-09-07 Thread Peter via Postfix-users
On 7/09/24 19:25, Gilgongo via Postfix-users wrote: I notice Spamhaus say that for smaller hosts, RBL blocking at smtp level is not recommended, and instead it’s better to use a milter for RBL checking. https://docs.spamhaus.com/datasets/docs/source/40-real-world-usage/PublicMirrors/MTAs/030-S

[pfx] RBLs at smtp level

2024-09-07 Thread Gilgongo via Postfix-users
I notice Spamhaus say that for smaller hosts, RBL blocking at smtp level is not recommended, and instead it’s better to use a milter for RBL checking. https://docs.spamhaus.com/datasets/docs/source/40-real-world-usage/PublicMirrors/MTAs/030-Sendmail.html I can see the logic in that, since a milte