[pfx] Re: openarc and forwarding to gmail

2024-08-04 Thread Dusan Obradovic via Postfix-users
It will not work. This DKIM signature will never authenticate because the key length must be of least 1024 bits. What you can do as a forwarder: 1. Rewrite envelope sender using a SPF enabled domain that you control. (SRS) 2. DKIM Sign message using a domain that you control, while keeping any

Re: Avoid mail loop

2020-03-18 Thread Dusan Obradovic
> On Mar 18, 2020, at 11:45 AM, ego...@gmail.com wrote: > > host xxx-xxx.mail.protection.outlook.com[X.X.X.X] said: 554 5.4.14 Hop > count exceeded - possible mail loop ATTR1 > [xxx-xxx.prod.protection.outlook.com] (in reply to end of DATA > command) > I suspect this is based on received heade

Re: reject mail if dns and rdns differ

2019-11-12 Thread Dusan Obradovic
> On Nov 11, 2019, at 2:27 PM, ratatouille wrote: > > Hello all! > > Received: from mail.namase.de (s1.bomberg.city [62.173.139.77]) > > I would like to reject incoming email if dns- and rdns-entries differ. > Does this make sense and how could I achieve this? > > Kind regards > > Andreas

Re: custom mail forwarder/relay program?

2019-07-03 Thread Dusan Obradovic
> On Jul 1, 2019, at 8:41 PM, Viktor Dukhovni > wrote: > > The SMTP proxy can return 4XX if the HTTP POST fails. It can run > as a threaded or forking server. In Python or Perl, I'd go with a > forking server for simplicity. In Haskell, threading is very > light-weight and safe/correct con

Re: Rejecting mail if LDAP lookup returns empty

2019-06-21 Thread Dusan Obradovic
> On Jun 21, 2019, at 3:44 PM, Cooper, Robert A wrote: > > Howdy! > > We are setting up Postfix to be an on-premise mail lookup and forward service > for a cloud-based mail filter service (ProofPoint). Our campus uses LDAP to > route email from a public alias (@tamu.edu) to an internal mai

Re: Increasing Internal security

2019-05-28 Thread Dusan Obradovic
An "empty domain" sender usually refers to a mail address without domain information, f.e. rather than a null sender <>. See append_at_myorigin (default: yes) configuration parameter. > On May 15, 2019, at 6:24 PM, Peter Fraser wrote: > > Hi All > We had an auditor to an internal pentest f

Re: Proper Forwarding Procedure?

2017-07-02 Thread Dusan Obradovic
> On Jun 9, 2017, at 21:45, Steve Jenkins wrote: > > I've got a Postfix server hosting a lastname.org domain name for family > members. > > I use virtual aliasing to forward inbound mail for family members to > third-pary mail providers (mostly gmail, but a few yahoo and aol, too). > > I'v

Re: logging username

2017-01-21 Thread Dusan Obradovic
> On Jan 21, 2017, at 07:31, Kiss Gabor (Bitman) wrote: > > My logs are fullfilled with this: > > Jan 20 20:05:26 linzer postfix/smtpd[22308]: warning: hostname > c942452695-cloudp > ro-214859053.cloudatcost.com does not resolve to address 167.88.40.162: Name > or > service not known > Jan 2

Re: Retry onward server on transient error before using fallback relay

2016-12-08 Thread Dusan Obradovic
> On Dec 8, 2016, at 14:57, Dominic Raferd wrote: > > Thanks for your swift reply Dusan. What you write is logical but my postfix > doesn't seem to behave that way. I have no special setting for > maximal_queue_lifetime but I give below a recent extract from my log > (obfuscated). After tryin

Re: Retry onward server on transient error before using fallback relay

2016-12-08 Thread Dusan Obradovic
> On Dec 8, 2016, at 08:39, Dominic Raferd wrote: > > If nothing was specified as smtp_fallback_relay would it wait and try again > on a transient error or would it just give up immediately? If the former, > this would give me the behaviour I want but I really need to have the > fallback opti

Re: Let's Encrypt + Postfix TLS + iOS Mail

2016-12-04 Thread Dusan Obradovic
If the fullchain.pem file is the result of the acme client cert-bot, this file includes Let's Encrypt intermediate certificate and your server certificate. smtpd_tls_cert_file = /path/to/fullchain.pem smtpd_tls_key_file = /path/to/privkey.pem > On Nov 15, 2016, at 03:08, Steve Jenkins wrote: >

Re: Detecting non 7bit headers

2011-10-29 Thread Dusan Obradovic
On Sat, 2011-10-29 at 18:42 +, Pat wrote: > Is there a way to detect non-7bit headers such that they can be flagged for > post-queue filtering? Postfix' header_checks (with or without PCRE) would be > ideal > but I'd like to know if this is doable in Spamassassin or Amavisd-new as well. >

Any way to archive the same using regexp transport in versions 2.3+

2010-07-14 Thread Dusan Obradovic
Postfix prior version 2.3 allowed this using regexp transport_maps: /^(.*)@(.*)$/smtp:[${2}.smtp.transport.company.com] I'm looking for this result in postfix version 2.3+: u...@domain1.comsmtp:[domain1.com.smtp.transport.company.com] -- Thanks.