[pfx] Re: Incorrect CN Being Reported When Using Postfix With MariaDB

2025-01-23 Thread Viktor Dukhovni via Postfix-users
On Fri, Jan 24, 2025 at 03:30:43PM +1100, duluxoz via Postfix-users wrote: > I'm using a MariaDB backend to Postfix. Everything is working correctly > until I attempt to secure the Postfix<->MariaDB connection with a TLS > Certificate. When I perform a `postmap -q example.com > mysql:/etc/postfix/

[pfx] Incorrect CN Being Reported When Using Postfix With MariaDB

2025-01-23 Thread duluxoz via Postfix-users
Hi All, I'm not sure if this is a Postfix issue, a TLS Certificate issue, and/or a MariaDB issue, so I'm starting here - apologises if this is not the right place. I'm using a MariaDB backend to Postfix. Everything is working correctly until I attempt to secure the Postfix<->MariaDB connecti

[pfx] Re: dnsbl lookup binding address?

2025-01-23 Thread MRob via Postfix-users
On 2025-01-23 14:26, Tomasz Pala via Postfix-users wrote: On 2025-01-23 12:59, MRob via Postfix-users wrote: Is that correct? If yes, can we make Postscreen dnsbl_sites lookup bind IP for lookups? I already have inet_interfaces and smtp_bind_address set so I guess that's not used for dnsbl l

[pfx] Re: Recommended postscreen_dnsbl_sites settings to get some security without too many blocked emails?

2025-01-23 Thread Michael Grimm via Postfix-users
Christian Seberino via Postfix-users wrote: > postscreen_dnsbl_threshold = 2 > postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 > b.barracudacentral.org*1 > > Is there a "minimal" setting for these two variables that will > give *some* protection without blocking friendly sites by a

[pfx] Re: Recommended postscreen_dnsbl_sites settings to get some security without too many blocked emails?

2025-01-23 Thread Randy Bush via Postfix-users
> I'm using zen.spamhaus.org for blocking and list.dnswl.org (with filter) > for allowlisting. > > zen.spamhaus.org*2 list.dnswl.org=127.0.[0..255].[1..3]*-2 excuse me for being overly literal and pedantic. is this postscreen_access_list = permit_mynetworks postscreen_dnsbl_sites =

[pfx] Re: 550-"MAIL FROM" usage

2025-01-23 Thread James Moe via Postfix-users
On 2025-01-22 16:03, Wietse Venema via Postfix-users wrote: >> Hmm. I am not clear why that is blank. > This is usually an undeliverable mail notification. The null sender > prevents mailer loops when the notification is also undeliverable. > Assigning a valid name to "myhostname" resolved this

[pfx] Re: Is it possible/easy to block incoming for the real account name but accept the alias/canonical?

2025-01-23 Thread Wietse Venema via Postfix-users
Gerben Wierda via Postfix-users: > I was wondering, suppose I have a user like this: > > f...@bar.com is the account name > foo.lastn...@bar.com is the incoming alias and the outgoing canonical > > Could I force incoming mail to accept the alias form, but not > accept the account form? I.e. f...@

[pfx] Re: Is it possible/easy to block incoming for the real account name but accept the alias/canonical?

2025-01-23 Thread Viktor Dukhovni via Postfix-users
On Thu, Jan 23, 2025 at 04:01:13PM +0100, Gerben Wierda via Postfix-users wrote: > Could I force incoming mail to accept the alias form, but not accept > the account form? I.e. f...@bar.com as address is blocked, but > foo.lastn...@bar.com is accepted and delivered to f...@bar.com Postfix access

[pfx] Is it possible/easy to block incoming for the real account name but accept the alias/canonical?

2025-01-23 Thread Gerben Wierda via Postfix-users
I was wondering, suppose I have a user like this: f...@bar.com is the account name foo.lastn...@bar.com is the incoming alias and the outgoing canonical Could I force incoming mail to accept the alias form, but not accept the account form? I.e. f...@bar.com as address is blocked, but foo.lastn..

[pfx] Re: dnsbl lookup binding address?

2025-01-23 Thread Bill Cole via Postfix-users
On 2025-01-23 at 06:59:41 UTC-0500 (Thu, 23 Jan 2025 11:59:41 +) MRob via Postfix-users is rumored to have said: Hellos! I have see spamhaus response sometimes 127.255.255.254 that mean "generic" DNS lookup source. Specifically, it means that the DNS query came from a large publicly acc

[pfx] Re: dnsbl lookup binding address?

2025-01-23 Thread Tomasz Pala via Postfix-users
On 2025-01-23 12:59, MRob via Postfix-users wrote: > > Is that correct? If yes, can we make Postscreen dnsbl_sites lookup bind > IP for lookups? > > I already have inet_interfaces and smtp_bind_address set so I guess > that's not used for dnsbl lookups? This setting belongs to your system reso

[pfx] dnsbl lookup binding address?

2025-01-23 Thread MRob via Postfix-users
Hellos! I have see spamhaus response sometimes 127.255.255.254 that mean "generic" DNS lookup source. I have three IPs on a virt server, one has PTR mail.exmple.com, other two are generic for hosting company I guess spamhaus doesnt like when lookup comes from those 2 addrs instead of the ma