Coincidentally I'm writing a blog post about this (not ready yet).
* Domain Takeover
* Infrastructure Takeover
* Sending vs receiving
If somebody takes over your domain they can change host addresses as well
as MX hosts and SPF.
Most of our efforts are focused on receiving mail, but it's wort
On Tue, 4 Jun 2024, Chris Green via Postfix-users wrote:
I run dnsmasq instead of systemd-resolved on all my systems.
You need to make sure you've disabled it and whatever associated
scaffolding edits resolv.conf or that you understand the mechanism.
[...]
It turned out that the file /var/s
Here are a couple more jails + filters. Be aware that email can wrap
things. The first failregex is three lines, the second one is one line
(the lines end in "\b")
--
Fred Morris, internet plumber
--
::
jail.d/pf-connect.local
::
[pf-connect]
enabled = true
findtime =
Let's step out of the echo chamber or petri dish or whatever.
On Sun, 5 Nov 2023, Jaroslaw Rafa via Postfix-users wrote:
Dnia 5.11.2023 o godz. 13:53:46 Noel Butler via Postfix-users pisze:
If correctly forwarded it does not break SPF, since correctly
forwarding rewrites the sender
It's a ne
Looks like you've got the general idea.
On Mon, 11 Sep 2023, Jesper Hansen via Postfix-users wrote:
[...]
All the non port 25 tests, took about 15-27 hops.
But the port 25 ones only took 7 or 8, and have a look at the IP at the
next-to-last hop of the route.
192.168.20.20?? What?
[...]
5 16
On Sun, 10 Sep 2023, Erwan David via Postfix-users wrote:
On Sun, 10 Sep 2023, postfix--- via Postfix-users wrote:
Try a telnet connection to those host (gmail/mail-tester) on 25 and see
who actually answers.
1) Send SYNs with varying TTLs to determine the number of hops to alleged
rec
Other replies have identified what's probably happening: redirection to a
specific mail relay or honeypot.
I have a couple of suggestions, which you should consider carefully (for
legality and possible retaliation) before trying. I'd consider them ok
where I am, but YMMV.
Also, consider any
I basically agree with you, but here's why so you don't keep banging your
head on the wall.
On Tue, 11 Jul 2023, Ken Gillett via Postfix-users wrote:
[...] So, as I said, email to user@home works from
other hosts on the LAN, but if I try to send using (postfix)sendmail
on the Mini itself.
The
