Re: TLS enforcement options?

2022-01-09 Thread Brett Dikeman
On Sun, Jan 9, 2022 at 5:29 PM raf wrote: Maybe in terms of money, but that's not the only consideration. > If a mail server cannot (for any of a number of reasons) fire up > a web server for LetsEncrypt domain ownership verification, then > it gets more complicated A DNS based challenge is als

reject_unknown_sender_domain and TXT record

2017-08-16 Thread Brett @Google
kent676.kent.gov.uk *** Can't find kent676.kent.gov.uk: No answer I guess this is just "wrong" in that there should be an A or MX record. Are the allowed DNS record types for reject_unknown_sender_domain configurable ? Should they be ? I guess in this case the servers generate mail only. Cheers Brett

Re: How to bounce a queued mail

2017-06-15 Thread Brett Maxfield
e.com AND ip is a.b.c.d, THEN allow loose recipient ? in short : can we do and queries and bind several different (sender|recipient)_checks with an AND logic ? can we configure some classes of failures, such as dns, to fail more quickly ? Cheers Brett > On 15 Jun 2017, at 4:42 pm, Domini

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Brett @Google
a different solution. Probably simpler to keep using your same product, if they fix the empty base search. Cheers Brett

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Brett Maxfield
> I’ve notified them about this, but I guess if can workaround it in postfix…. > it seems not. > > Regards, > Paolo. > >>> On 4 Apr 2017, at 12:22, Michael Ströder wrote: >>> >>> Paolo Barbato wrote: >>> postmap: warning: dict_ldap_lookup

Re: smtpd_recipient_restrictions with ldap

2017-04-04 Thread Brett Maxfield
-q as that does what postfix does server configuration error means the ldap query is failing entirely, not that the email is not found, so its something that caused the query to fail, a successful query succeeds but return 0 results, not an error, which is what you are getting.. Cheers Brett

Re: OT: dnsbl.sorbs.net - help explaining to Mozilla list maintainers why outright blocking is bad

2016-06-17 Thread Brett Maxfield
sorbs is not always a consistent organization, both listing and delisting can be chaotic, i don't think they have a policy based system, it has in the past been based on reporting that is vetted only sporadically, you'd think mozilla would only use dnsbl from larger organisations with a policy

Re: Mail is not being rejected with check_policy_server when SPF fails?

2016-05-12 Thread Brett @Google
emails and log failures, but not actually reject mail. http://manpages.ubuntu.com/manpages/wily/man5/policyd-spf.conf.5.htm Cheers Brett

Re: Thousands of login attempts

2016-03-21 Thread Brett
downside is at first, my user base sometimes locked themselves out. I have white listed the main IP addresses my clients use. After about 6 months, the users have become better about logging in, and I haven't had a lock out complaint since. Cheers, Dimitar --- Brett

Re: upgrading postfix 3.0.x to 3.1

2016-03-08 Thread Brett @Google
On Wed, Mar 2, 2016 at 10:20 PM, Wietse Venema wrote: > Brett @Google: > > Hello, > > > > I am upgrading 3.0.x to 3.1 it seems the build process has changed, there > > are a few issues at least on solaris, maybe due to the dual 32/64 bit > > libra

Re: upgrading postfix 3.0.x to 3.1

2016-03-02 Thread Brett @Google
On Thu, Mar 3, 2016 at 6:54 AM, Viktor Dukhovni wrote: > On Wed, Mar 02, 2016 at 06:27:26PM +1000, Brett @Google wrote: > > > I am upgrading 3.0.x to 3.1 it seems the build process has changed, there > > are a few issues at least on solaris, maybe due to the dual 32/64 bit &

upgrading postfix 3.0.x to 3.1

2016-03-02 Thread Brett @Google
DEF_QUEUE_DIR=\"/data/postfix/spool\" -DDEF_SENDMAIL_PATH=\"/usr/local/postfix/sbin/sendmail\" -DDEF_SHLIB_DIR=\"/usr/local/postfix/libexec\" -DDEF_MANPAGE_DIR=\"/usr/local/postfix/man\" -DUSE_DYNAMIC_LIBS -DUSE_DYNAMIC_MAPS $(WARN) ...etc WARN= -w Cheers Brett -- Yesterday is history and tomorrow is a mystery, the gift is now which is why it is called the present..

best practice for multiple hostnames but only specific username-domain combinations?

2011-07-11 Thread Brett Dikeman
towards overriding or conflicting directives and can't think of any. Suggestions are appreciated - much obliged, Brett

non-Latin characters in domain names

2009-11-03 Thread Brett Kislin
be expected? Thanks in advance for your help! -- Brett

Re: Postfix Setup

2009-05-05 Thread Brett Dikeman
really no need to berate me and otherwise treat me like a > buffoon Victor. Is there someone willing to help? Please? You're being berated because there is specific documentation for this simple, common task. Brett