[pfx] dmarc reports from Microsoft (possibly off topic)

2024-03-06 Thread Alan Munday via Postfix-users
As of the 22 Feb 2024 I have been seeing invalid MAIL FROM address from Microsoft: In:  MAIL FROM: XATTRDIRECT=Originating XATTRORGID=xorgid:96f9e21d-a1c4-44a3-99e4-37191ac61848 Clearly an issue with line termination, but one I have yet to find reported online. I have seen a couple o

[pfx] Re: TAKE NOTE 2: Future Let's Encrypt CA choice randomisation.

2023-11-23 Thread Alan Munday via Postfix-users
On 19/11/2023 06:24, Viktor Dukhovni via Postfix-users wrote: On Sat, Nov 18, 2023 at 04:33:46PM +0900, Byung-Hee HWANG via Postfix-users wrote: or if you prefer: _25._tcp.mx1.org.example. IN CNAME _25._tlsa.org.example. _25._tcp.mx2.org.example. IN CNAME _25._tlsa.org.example.

Re: DNSWL with Postfix

2015-03-05 Thread Alan Munday
On 05/03/15 08:37, Michael wrote: Hi, because Postfix 2.11 config has been blocking legitimate servers in the past, I added a white list before the reject_rbl_client listings. smtpd_client_restrictions = permit_dnswl_client list.dnswl.org, reject_rbl_client ix.dnsbl.manitu.net

Re: Postfix with Postscreen and Fail2ban

2015-01-15 Thread Alan Munday
On 15/01/15 02:16, David Mehler wrote: Hello, Is anyone running Postfix 2.11 on an f21 machine? I'm using it and am using postscreen which I really like. The system firewall is FirewallD and I'm using fail2ban 0.9.1 to block brute force bot hits on the machine. I've got the jail Fail2ban for Pos

Re: Problems receiving mail from outlook.com

2014-02-08 Thread Alan Munday
Viktor Dukhovni wrote the following on 08/02/14 03:21: On Fri, Feb 07, 2014 at 11:49:55PM +, Alan Munday wrote: Does this imply that, for users like me, the "Getting started, quick and dirty" section of the Postfix TLS support could be further simplified? Yes. I did not

Re: Problems receiving mail from outlook.com

2014-02-07 Thread Alan Munday
Viktor Dukhovni wrote the following on 07/02/14 23:13: On Fri, Feb 07, 2014 at 10:40:37PM +, Alan Munday wrote: Should not be too hard. In your case, as I suggested upstream, a simple self-signed certificate with no issuing CA is quite sufficient: Assuming a suitable private key in

Re: Problems receiving mail from outlook.com

2014-02-07 Thread Alan Munday
Viktor Dukhovni wrote the following on 07/02/14 19:07: On Thu, Feb 06, 2014 at 05:37:16PM +, Alan Munday wrote: >> I did try CA:FALSE but this was causing outlook.com mail to fail >> (and, as Viktor stated, mail from other domains as well). > > Usually, the CA certificat

Re: Problems receiving mail from outlook.com

2014-02-06 Thread Alan Munday
Alan Munday wrote the following on 06/02/14 17:37: Viktor Dukhovni wrote the following on 05/02/14 20:44: On Wed, Feb 05, 2014 at 08:28:51PM +, Alan Munday wrote: Viktor Dukhovni wrote the following on 05/02/14 18:45: And of course mx3 is still broken, STARTTLS hangs, because it is

Re: Problems receiving mail from outlook.com

2014-02-06 Thread Alan Munday
Viktor Dukhovni wrote the following on 05/02/14 20:44: On Wed, Feb 05, 2014 at 08:28:51PM +, Alan Munday wrote: Viktor Dukhovni wrote the following on 05/02/14 18:45: Now for the record your leaf certificate is also a CA, which is harmless I imagine, but keep that in mind if you run into

Re: Problems receiving mail from outlook.com

2014-02-05 Thread Alan Munday
Alan Munday wrote the following on 05/02/14 21:29: Rather than tie up peoples time is there a reference I can go to and I'll work through things from scratch. And replying to my own question, I've found the TLS-README...

Re: Problems receiving mail from outlook.com

2014-02-05 Thread Alan Munday
Viktor Dukhovni wrote the following on 05/02/14 20:44: On Wed, Feb 05, 2014 at 08:28:51PM +, Alan Munday wrote: Viktor Dukhovni wrote the following on 05/02/14 18:45: On Wed, Feb 05, 2014 at 05:07:27PM +, Alan Munday wrote: Feb 5 16:01:21 mx1 postfix/smtpd[22789]: Anonymous TLS

Re: Problems receiving mail from outlook.com

2014-02-05 Thread Alan Munday
Viktor Dukhovni wrote the following on 05/02/14 18:45: On Wed, Feb 05, 2014 at 05:07:27PM +, Alan Munday wrote: Feb 5 16:01:21 mx1 postfix/smtpd[22789]: Anonymous TLS connection established from mail-db3lp0084.outbound.protection.outlook.com[213.199.154.84]: TLSv1 with cipher

Re: Problems receiving mail from outlook.com

2014-02-05 Thread Alan Munday
Viktor Dukhovni wrote the following on 05/02/14 18:45: On Wed, Feb 05, 2014 at 05:07:27PM +, Alan Munday wrote: Viktor Thank you. I'll work through the points you've highlighted. Alan

Problems receiving mail from outlook.com

2014-02-05 Thread Alan Munday
I found a problem in my logs with respect to receiving email from outlook.com. When I looked into it I thought it was due to the TLS certs having expired. I've created new certificates (self-signed) but the problem is continuing. I'm seeing trusted/untrusted/anonymous connections established

Re: Google rejecting IPv6 mails

2013-10-07 Thread Alan Munday
Manuel Bieling wrote the following on 07/10/13 12:45: Wietse explained this a few weeks ago: /etc/postfix/transport: example.comsmtp-ipv4-only: example.net smtp-upv6-only: /etc/postfix/master.cf: smtp-ipv4-only unix - - n - - smtp

Re: Fedora10 RPM build from src fails.

2009-03-23 Thread Alan Munday
James A R Brown wrote the following on 23/03/09 14:38: > Hi, > > Hopefully someone can point me in the right direction to resolving the > following attempted RPM build on Fedora10 X86_64. > > I have tried this now on 2 F10 machines. > > I also revisited Postfix 2.4.5 src which used to build on F