Checked 127.0.0.1 works also local net ip as well. Mailbox.com saw no
problems.
always good to check.
thx
--john
On 12/18/24 11:34 AM, Wietse Venema via Postfix-users wrote:
John Hill via Postfix-users:
I use bind9 on Debian. I will look closer to see if it needs some work.
Using BIND
I use bind9 on Debian. I will look closer to see if it needs some work.
Thx
--john
On 12/18/24 10:04 AM, Bill Cole via Postfix-users wrote:
On 2024-12-18 at 08:03:12 UTC-0500 (Wed, 18 Dec 2024 08:03:12 -0500)
John Hill via Postfix-users
is rumored to have said:
Today I feel like an
Today I feel like an old ham radio operator during the citizen band years.
I am having a slew of spf, hostname , dkim and dmarc failures.
I look them up and yep no reverse, dkim, dmarc or it is unknown.
Hell, one of my doctors uses a service that his email fails dkim. In all
my years I have n
via Postfix-users wrote:
main.cf:
indexed = ${default_database_type}:${config_directory}/
smtpd_recipient_restrictions = ${indexed}recipient-access
And of course it really should be:
smtpd_recipient_restrictions =
check_recipient_access ${indexed}recipient-access
main.cf:
indexed = ${default_database_type}:${config_directory}/
smtpd_recipient_restrictions = ${indexed}recipient-access
I see what your doing here.
It is less to type.
Is there any other advantage?
--john
___
Postfix-users mailing list -- po
On 5/29/24 8:31 AM, Benny Pedersen via Postfix-users wrote:
Viktor Dukhovni via Postfix-users skrev den 2024-05-29 14:07:
Perhaps a bit of luck? For me, the XBL only catches around 10% of the
SASL probes. May your luck hold up.
https://www.abuseipdb.com/user/139902 enless tryes :)
all zen
On 5/28/24 10:15 PM, John Hill via Postfix-users wrote:
On 5/28/24 10:11 PM, Viktor Dukhovni via Postfix-users wrote:
On Wed, May 29, 2024 at 11:58:31AM +1000, Viktor Dukhovni via
Postfix-users wrote:
You might in fact want to reject XBL IPs early, before they even
attempt authentication
On 5/28/24 10:11 PM, Viktor Dukhovni via Postfix-users wrote:
On Wed, May 29, 2024 at 11:58:31AM +1000, Viktor Dukhovni via Postfix-users
wrote:
You might in fact want to reject XBL IPs early, before they even
attempt authentication. So I have:
465inet n - n
On 5/28/24 9:58 PM, Viktor Dukhovni via Postfix-users wrote:
On Tue, May 28, 2024 at 09:32:29PM -0400, John Hill via Postfix-users wrote:
On 5/28/24 9:23 PM, Viktor Dukhovni via Postfix-users wrote:
-o { smtpd_recipient_restrictions =
reject_rbl_client zen.spamhaus.org
On 5/28/24 9:23 PM, Viktor Dukhovni via Postfix-users wrote:
-o { smtpd_recipient_restrictions =
reject_rbl_client zen.spamhaus.org=127.0.0.4,
reject_sender_login_mismatch,
permit_sasl_authenticated,
reject }
I had experimented and came c
On 5/28/24 8:10 PM, John Hill via Postfix-users wrote:
On 5/28/24 8:00 PM, Bill Cole via Postfix-users wrote:
On 2024-05-28 at 19:18:10 UTC-0400 (Tue, 28 May 2024 19:18:10 -0400)
John Hill via Postfix-users
is rumored to have said:
[...
On 5/28/24 7:13 PM, Bill Cole via Postfix-users wrote
On 5/28/24 8:00 PM, Bill Cole via Postfix-users wrote:
On 2024-05-28 at 19:18:10 UTC-0400 (Tue, 28 May 2024 19:18:10 -0400)
John Hill via Postfix-users
is rumored to have said:
[...
On 5/28/24 7:13 PM, Bill Cole via Postfix-users wrote:
On 2024-05-28 at 19:04:37 UTC-0400 (Tue, 28 May 2024
On 5/28/24 7:18 PM, John Hill via Postfix-users wrote:
On 5/28/24 7:13 PM, Bill Cole via Postfix-users wrote:
On 2024-05-28 at 19:04:37 UTC-0400 (Tue, 28 May 2024 19:04:37 -0400)
John Hill via Postfix-users
is rumored to have said:
On 5/28/24 6:54 PM, Bill Cole via Postfix-users wrote:
-o
On 5/28/24 7:13 PM, Bill Cole via Postfix-users wrote:
On 2024-05-28 at 19:04:37 UTC-0400 (Tue, 28 May 2024 19:04:37 -0400)
John Hill via Postfix-users
is rumored to have said:
On 5/28/24 6:54 PM, Bill Cole via Postfix-users wrote:
-o { smtpd_client_restrictions=permit_mynetworks
On 5/28/24 6:54 PM, Bill Cole via Postfix-users wrote:
-o { smtpd_client_restrictions=permit_mynetworks,reject_rbl_client
xbl.spamhaus,org=127.0.0.4,permit_sasl_authenticated,reject }
tried to rspond
Sending of the message failed.
An error occurred while sending mail. The mail server respo
On 5/28/24 4:50 PM, John Hill via Postfix-users wrote:
On 5/28/24 4:43 PM, Benny Pedersen via Postfix-users wrote:
John Hill via Postfix-users skrev den 2024-05-28 22:12:
On 5/28/24 3:38 PM, Benny Pedersen via Postfix-users wrote:
John Hill via Postfix-users skrev den 2024-05-28 21:14:
I
On 5/28/24 4:43 PM, Benny Pedersen via Postfix-users wrote:
John Hill via Postfix-users skrev den 2024-05-28 22:12:
On 5/28/24 3:38 PM, Benny Pedersen via Postfix-users wrote:
John Hill via Postfix-users skrev den 2024-05-28 21:14:
I had dumped the configs but here is what I had
On 5/28/24 3:38 PM, Benny Pedersen via Postfix-users wrote:
John Hill via Postfix-users skrev den 2024-05-28 21:14:
I had dumped the configs but here is what I had.
submission inet n - y - - smtpd
-o smtpd_tls_security_level=encrypt
-o
On 5/28/24 11:48 AM, Wietse Venema via Postfix-users wrote:
postconf -Mf submission/inet".
May 28 10:51:07 proteus.noach.com postfix/submission/smtpd[57120]:
warning: malformed map specification: '{ reject_rbl_client
xbl.spamhaus.org }'
May 28 10:51:07 proteus.noach.com postfix/submission/s
Not working had recipient instead of client. Fixed that and then is says
its not a map.
On 5/28/24 10:36 AM, John Hill via Postfix-users wrote:
Here is what IS NOT causing postfix to dump, not sure if it will work.
main.cf
submission_recipient_restrictions = reject_rbl_client
Here is what IS NOT causing postfix to dump, not sure if it will work.
main.cf
submission_recipient_restrictions = reject_rbl_client xbl.spamhaus.org
master.cf
submission
-o
smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,{
$submission_recipient_restrictions },reject
I have yet to get a proper configuration to add xbl.spamhaus.org to
submission.
-o
smtpd_client_restrictions=permit_mynetworks,permit_sasl_authenticated,reject
Everything I try fails.
I have researched the list but can't find the answer.
I'm still getting hammered by SASL failures.
I check
On 5/28/24 5:39 AM, Christophe Kalt via Postfix-users wrote:
smtpd_delay_reject to no
I had it at yes.
Changed it.
--john
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
On 5/27/24 4:13 AM, Matus UHLAR - fantomas via Postfix-users wrote:
> postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2..11]
John Hill via Postfix-users:
Is this the same thing?
On 25.05.24 15:54, Wietse Venema via Postfix-users wrote:
See https://www.spamhaus.org/faqs/dnsbl-us
On 5/25/24 3:54 PM, Wietse Venema via Postfix-users wrote:
John Hill via Postfix-users:
postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2..11]
Is this the same thing?
See https://www.spamhaus.org/faqs/dnsbl-usage/#200 for a table
with the purpose of different lookup results.
To block xbl
On 5/25/24 11:22 AM, John Fawcett via Postfix-users wrote:
On 24/05/2024 03:03, John Hill via Postfix-users wrote:
I learn something every time I read this group, when I can keep up
with the conversation!
I had auth on ports I did not need. I use auth on submission port
587, for users
On 5/24/24 9:33 AM, Matus UHLAR - fantomas via Postfix-users wrote:
On 24.05.24 07:36, John Hill via Postfix-users wrote:
What command do you use to reset the connection?
no command, just rule in OUTPUT chain:
1710 649K REJECT 6 -- * * 0.0.0.0/0
0.0.0.0/0
What command do you use to reset the connection?
On 5/24/24 6:18 AM, Matus UHLAR - fantomas via Postfix-users wrote:
On 23.05.24 21:03, John Hill via Postfix-users wrote:
I use Fail2Ban to block the failed IP. The script writes it into the
nftables table immediately.
I think this keeps
Will do it. Tonight.
Thanks
On May 23, 2024 9:11 PM, Wietse Venema via Postfix-users
wrote:
John Hill via Postfix-users:
> I learn something every time I read this group, when I can keep up with
> the conversation!
>
> I had auth on ports I did not need. I use auth on sub
I learn something every time I read this group, when I can keep up with
the conversation!
I had auth on ports I did not need. I use auth on submission port 587,
for users access.
I do get a boat load of failed login attempts on 587. Funny how a China,
US, Argentina, you name it, hosts, will
On 2/14/24 8:07 AM, Nikolai Lusan via Postfix-users wrote:
On Wed, 2024-02-14 at 11:34 +0100, Matus UHLAR - fantomas via Postfix-
users wrote:
>> On Wed, 2024-02-07 at 12:15 -0500, Viktor Dukhovni via Postfix-users
>> wrote:
>>> I prefer to have logs that record what I'm blocking. With
>>> firew
On 2/14/24 4:18 AM, Nikolai Lusan via Postfix-users wrote:
On Wed, 2024-02-07 at 10:51 -0500, Phil Stracchino via Postfix-users
wrote:
> On 2/7/24 10:41, John Hill via Postfix-users wrote:
>> Good info.
>>
>> This site sends nothing but junk. IN fact the domain is known
On 2/7/24 12:53 PM, John Hill via Postfix-users wrote:
On 2/7/24 12:15 PM, Viktor Dukhovni via Postfix-users wrote:
On Wed, Feb 07, 2024 at 11:21:10AM -0500, John Hill via Postfix-users
wrote:
I use fail2ban as well. I'm just going to see if the sender sever
will give
up!
I pref
On 2/7/24 12:56 PM, Matus UHLAR - fantomas via Postfix-users wrote:
On 2/7/24 10:48, Matus UHLAR - fantomas via Postfix-users wrote:
postscreen is great against bots, but fail2ban with firwall are
still better
against abusers.
On 07.02.24 10:52, Phil Stracchino via Postfix-users wrote:
And
On 2/7/24 12:15 PM, Viktor Dukhovni via Postfix-users wrote:
On Wed, Feb 07, 2024 at 11:21:10AM -0500, John Hill via Postfix-users wrote:
I use fail2ban as well. I'm just going to see if the sender sever will give
up!
I prefer to have logs that record what I'm blocking. With fire
On 2/7/24 10:51 AM, Phil Stracchino via Postfix-users wrote:
On 2/7/24 10:41, John Hill via Postfix-users wrote:
Good info.
This site sends nothing but junk. IN fact the domain is known for it.
I tried just rejecting the email address. But they just change it.
So I blocked the IP, they have
On 2/7/24 10:48 AM, Matus UHLAR - fantomas via Postfix-users wrote:
On 07.02.24 10:41, John Hill via Postfix-users wrote:
This site sends nothing but junk. IN fact the domain is known for it.
I tried just rejecting the email address. But they just change it.
So I blocked the IP, they have
I have become somewhat of a challenge.
I'll try using postscreen and see how it shakes out.
Thanks
--john
On 2/7/24 10:05 AM, Viktor Dukhovni via Postfix-users wrote:
On Wed, Feb 07, 2024 at 07:59:44AM -0500, John Hill via Postfix-users wrote:
Do mail servers as a whole stop sending an
I figured. I block on the ingress so it is minimal network but maximum
pain in the A$$.
Thanks.
On 2/7/24 8:06 AM, Matus UHLAR - fantomas via Postfix-users wrote:
On 07.02.24 07:59, John Hill via Postfix-users wrote:
Do mail servers as a whole stop sending an email after a few errors
Do mail servers as a whole stop sending an email after a few errors?
I have a server I have blocked in my firewall. It continues to try and
is blocked as many as 4000+ times a day.
If postscreen was set to deny it, would that signal the server and limit
the attempts?
Thanks
--john
_
I added onmicrosoft.com to my sender access file, I've dumped 10 so far.
On 1/7/24 1:41 PM, Matus UHLAR - fantomas via Postfix-users wrote:
On 07.01.24 10:17, John Hill via Postfix-users wrote:
First I am really amazed at the amount of support, that's not true
everywhere. I also lik
p;& MISSING_HEADERS
&& !__SPAM_DOMAIN_OUTLOO5)
score SPAM_DOMAIN_OUTLOO9 15.0
describeSPAM_DOMAIN_OUTLOO9 Outlook spam with missing headers,
missing To (outloo)
On Sun, 7 Jan 2024 10:17:56 -0500 John Hill via Postfix-users
wrote:
First I
First I am really amazed at the amount of support, that's not true
everywhere. I also like the tone of the posts, very respectful.
I have 3.7.9 and all the settings.
Outlook protection is slamming me, 6 to 10 worthless emails every day.
glad they don't make condoms.
I have sent everyone with
I am a retired System Administrator. I have used Postfix to feed
Exchange servers. I trust Postfix on the front line.
Now as a hobbyist I use it for my personal domain.
Thank you for the continued dedication to the project.
25 years is a huge accomplishment.
Congratulations!
--john
On 12
44 matches
Mail list logo
