[pfx] Re: header_checks syntax question

2025-06-18 Thread Wietse Venema via Postfix-users
Stephen Satchell via Postfix-users: > Is there any way to specify a rule that takes the AND of two different > tests? For example, "from:*paypal" and "subject:*invoice"? This is not documented, and therefore not implemented. > Or do I need to write a milter to perform more complex checks? > My

[pfx] header_checks syntax question

2025-06-18 Thread Stephen Satchell via Postfix-users
Is there any way to specify a rule that takes the AND of two different tests? For example, "from:*paypal" and "subject:*invoice"? Or do I need to write a milter to perform more complex checks? My goal is to reject mail matching the criteria. ___ Post

[pfx] Re: Postscreen STARTTLS bug?

2025-06-18 Thread Viktor Dukhovni via Postfix-users
On Wed, Jun 18, 2025 at 10:13:21AM -0400, Wietse Venema via Postfix-users wrote: > > After setting "postscreen_tls_security_level = none", when I now send a > > STARTTLS, I get a "502 5.5.1 Error: command not implemented", and then > > /the SMTP session/ stops responding to any subsequent comman

[pfx] Re: Postscreen STARTTLS bug?

2025-06-18 Thread Viktor Dukhovni via Postfix-users
On Wed, Jun 18, 2025 at 10:59:37PM +1200, Nick Tait via Postfix-users wrote: > On 18/06/2025 22:33, Nick Tait via Postfix-users wrote: > > Prior to making the configuration change, the response to the STARTTLS > > was "454 4.7.0 TLS not available due to local problem", and the SMTP > > session rem

[pfx] Re: Postscreen STARTTLS bug?

2025-06-18 Thread Wietse Venema via Postfix-users
Nick Tait via Postfix-users: > On 18/06/2025 22:33, Nick Tait via Postfix-users wrote: > > Prior to making the configuration change, the response to the STARTTLS > > was "454 4.7.0 TLS not available due to local problem", and the SMTP > > session remained operational, meaning if the client then s

[pfx] Re: Postscreen STARTTLS bug?

2025-06-18 Thread Bill Cole via Postfix-users
On 2025-06-18 at 06:59:37 UTC-0400 (Wed, 18 Jun 2025 22:59:37 +1200) Nick Tait via Postfix-users is rumored to have said: After setting "postscreen_tls_security_level = none", when I now send a STARTTLS, I get a "502 5.5.1 Error: command not implemented", That is precisely what I'd expect. No

[pfx] Re: more SELinux denials - fifo_file

2025-06-18 Thread Wietse Venema via Postfix-users
lejeczek via Postfix-users: > hi guys. > All these SELinux denials were caused by an external tool > (part of the HA management actually & running on the same > box as postfix), a script which part is: > > ??? sendmail) > ??? sendmail -t -r "${email_sender}" <<__EOF__ > From: ${ema

[pfx] Re: Postscreen STARTTLS bug?

2025-06-18 Thread Nick Tait via Postfix-users
On 18/06/2025 22:33, Nick Tait via Postfix-users wrote: Prior to making the configuration change, the response to the STARTTLS was "454 4.7.0 TLS not available due to local problem", and the SMTP session remained operational, meaning if the client then sent another command (e.g. QUIT), it was p

[pfx] Re: Postscreen STARTTLS bug?

2025-06-18 Thread Benny Pedersen via Postfix-users
Nick Tait via Postfix-users skrev den 2025-06-18 12:33: I hope this is the right forum for reporting a possible bug in Postscreen? (Apologies if it isn't...) postconf -Mf would be helpfull here ___ Postfix-users mailing list -- postfix-users@postfix

[pfx] Postscreen STARTTLS bug?

2025-06-18 Thread Nick Tait via Postfix-users
Hi there. I hope this is the right forum for reporting a possible bug in Postscreen? (Apologies if it isn't...) I've been using Postscreen without "deep protocol tests" for a long time, and it has been doing a fantastic job. I recently noticed a log entry from Postscreen saying "warning: con

[pfx] Re: more SELinux denials - fifo_file

2025-06-18 Thread Viktor Dukhovni via Postfix-users
On Wed, Jun 18, 2025 at 09:13:25AM +0200, lejeczek via Postfix-users wrote: > All these SELinux denials were caused by an external tool (part of the HA > management actually & running on the same box as postfix), a script which > part is: > >     sendmail) >     sendmail -t -r "${emai

[pfx] Re: more SELinux denials - fifo_file

2025-06-18 Thread lejeczek via Postfix-users
hi guys. All these SELinux denials were caused by an external tool (part of the HA management actually & running on the same box as postfix), a script which part is:     sendmail)     sendmail -t -r "${email_sender}" <<__EOF__ From: ${email_sender} To: ${email_recipient} Return-Pat