[pfx] Mx has ip6 only

2023-05-24 Thread Ken Peng via Postfix-users
If the MX hostname has only IPv6 resolved, does it have problems in mail functions? Thanks. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: stop bulk messages

2023-05-06 Thread Ken Peng via Postfix-users
May 6, 2023 at 8:14 PM, "Ralph Seichter via Postfix-users" wrote: > > * Corey Hickman via Postfix-users: > > > > > Some clients abuse the outgoing smtp server for sending bulk messages. > > [...] Do you know how to stop this behavior? > > > > There is 'default_destination_recipient_limit'

[pfx] Re: TLS Library Problem? (SSL_accept error from ...)

2023-05-05 Thread Ken Peng via Postfix-users
> > > > Because TLS/SSL things are very complex, you have to show us real > settings all. Like me: (yw-0919: inbound, yw-1204: outbound) > [1] https://gitlab.com/soyeomul/Gnus/-/raw/master/DKIM/smtp-conf.yw-0919 > [2] https://gitlab.com/soyeomul/Gnus/-/raw/master/DKIM/smtp-conf.yw-1204 > And P

[pfx] Question on the CNAME

2023-05-03 Thread Ken Peng via Postfix-users
Hello, I am just not sure, for this domain SpaceMail.com, who has a CNAME to CDN for the root domain, every query to this domain will get a CNAME. for instance, $ dig spacemail.com mx +nocmd +noall +answer spacemail.com. 60 IN CNAME spacemail.com.cdn.cloudflare.net. $ dig

[pfx] Re: Hello Baknu of DANE-for-SMTP?

2023-05-03 Thread Ken Peng via Postfix-users
Please contact Dennis: dennis baaten.com regards > > Hello, > > is Baknu, the author of https://github.com/baknu/DANE-for-SMTP around here? > Or does someone know her/his personal email address and can forward this > message as I´d like to get in contact? > Thanks, > > Joachim > -- https:

[pfx] Re: body_checks not catching all backscatter

2023-05-03 Thread Ken Peng via Postfix-users
lock backscatter is by using the > > > backscatter DNSRBL. Make sure you follow the instructions for setting it > > > up properly: > > > > > > https://www.backscatterer.org/?target=usage > > > > > > If used correctly it will only bl

[pfx] Re: body_checks not catching all backscatter

2023-05-02 Thread Ken Peng via Postfix-users
May 3, 2023 at 1:43 PM, "Peter via Postfix-users" wrote: > > On 28/04/23 03:59, Sebastian Wiesinger via Postfix-users wrote: > > > > > Hi everyone, > > I'm not sure if I'm missing something but I can't find out why my > > body_checks doesn't catch all the backscatter I'm getting right now.

[pfx] Re: icloud mx ip

2023-05-02 Thread Ken Peng via Postfix-users
Since mx1 and mx2 have the same IPs included, it's a waste to postfix's chosen space for IP addresses. For example, the 5 MX IPs could have 2 duplicates. So I am not sure why apple has this wasted setup. Thank you. > > Ken Peng via Postfix-users: > > > > > H

[pfx] icloud mx ip

2023-05-02 Thread Ken Peng via Postfix-users
Hello iCloud mail has two MX RR: icloud.com. 3600IN MX 10 mx01.mail.icloud.com. icloud.com. 3600IN MX 10 mx02.mail.icloud.com. But these two MX have the same IPs included. mx01: mx01.mail.icloud.com. 300 IN A 17.42.251.62 mx01

[pfx] Re: Njal.la

2023-05-02 Thread Ken Peng via Postfix-users
May 2, 2023 at 4:42 PM, "pripercat--- via Postfix-users" wrote: > > Hi, my hosting Njal.la don't permit send email from my postfix server port > number 25 to prevent spam. > > But they say that i can use this setup > https://njal.la/docs/postfix-smarthost/ > > with; > relayhost = [emailserve

[pfx] Re: E-mail problem

2023-04-30 Thread Ken Peng via Postfix-users
This is typical networking issues. Nothing about postfix. Regards > > So I have a bizarre problem. I can't send e-mail to some servers but I can to > others. The e-mail that doesn't get sent is due to the connection timing out > to the remote server. > > Another strange problem is that some

[pfx] Re: postscreen question

2023-04-29 Thread Ken Peng via Postfix-users
Hello For this parameter of postscreen: postscreen_dnsbl_allowlist_threshold The docs says: 1. Specify a negative value to enable this feature. 2. This feature is available in Postfix 3.6 and later. Available as postscreen_dnsbl_whitelist_threshold in Postfix 2.11 - 3.5. So my questions are:

[pfx] Re: Painful Postfix

2023-04-29 Thread Ken Peng via Postfix-users
> > > > When I create a raw socket to the receiving e-mail server, I can send and > > receive commands to it just fine. > > > >   Are you sure there is no net filters or ISP blocking issues? they block external port 25, other ports like 587/465 may have no problem. regards.

[pfx] Re: Painful Postfix

2023-04-29 Thread Ken Peng via Postfix-users
April 29, 2023 at 6:40 PM, "Kolusion K via Postfix-users" wrote: > > Hello > >   > >   > > I am having a painful experience with Postfix and I hope that someone can > help me. > >   > > I am trying to send an e-mail, but the receving e-mail server is timing out, > as per Postfix's mail

[pfx] Re: postscreen question

2023-04-29 Thread Ken Peng via Postfix-users
_action = enforce Thanks. > > On Sat, 29 Apr 2023, Ken Peng via Postfix-users wrote: > > > > > Hello > > > > When I enabled postscreen, why even gmail's sender IP was greylisted? > > > > Did you expect or configure to deal with gmail dif

[pfx] Re: postscreen question

2023-04-29 Thread Ken Peng via Postfix-users
Hello When I enabled postscreen, why even gmail's sender IP was greylisted? The log says: Apr 29 15:35:35 mxin postfix/postscreen[59408]: NOQUEUE: reject: RCPT from [209.85.160.53]:50219: 450 4.3.2 Service currently unavailable; from=, to=, proto=ESMTP, helo= And this is my configuration fo

[pfx] Re: postscreen question

2023-04-28 Thread Ken Peng via Postfix-users
April 28, 2023 at 1:02 AM, "Phil Stracchino via Postfix-users" wrote: > > On 4/27/23 04:47, Ralph Seichter via Postfix-users wrote: > > > > > * Ken Peng via Postfix-users: > > Using rspamd instead of postscreen? > > I'm not quite sure what

[pfx] Re: Deny any sender address with subdomain

2023-04-28 Thread Ken Peng via Postfix-users
April 29, 2023 at 12:38 AM, "Jaroslaw Rafa via Postfix-users" wrote: > > Dnia 28.04.2023 o godz. 15:59:53 Gerd Hoerst via Postfix-users pisze: > > > > > question 1st : is it a good idea to reject any email which is not > > sent from a domain  (means sen...@domain.tld) any other like > > se

[pfx] Domain scoring

2023-04-27 Thread Ken Peng via Postfix-users
Do you know any plugins for scoring a domain? For example, new registered domain, free domain get the low scores. Thanks. -- https://kenpeng.pages.dev/ ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-u

[pfx] Re: postscreen question

2023-04-26 Thread Ken Peng via Postfix-users
Using rspamd instead of postscreen? > > Dear All, > > I am building a new server where I would like to build the best spam filter > possible :) > I am checking postscreen these days. I am planning to turn on the "deep > tests" as well, but it seems to be really scary to me :) > > In the doc th

[pfx] DKIM questions

2023-04-25 Thread Ken Peng via Postfix-users
Hello Can the domain certificates sign its sub domain? For example, mail.a.com was signed by certs of a.com. If so, does this make sense to DMRC of mail.a.com? Thanks. -- https://kenpeng.pages.dev/ ___ Postfix-users mailing list -- postfix-users@postfi

[pfx] Re: invalid and non-fqdn hostname

2023-04-06 Thread Ken Peng via Postfix-users
i have the similar questions on these two clauses: reject_unknown_reverse_client_hostname reject_unknown_client_hostname I know the first one require the sender IP has a valid PTR. but for the second one, what's unknown client hostname? does it mean the PTR hostname must point to the sender IP a

[pfx] Re: invalid and non-fqdn hostname

2023-04-06 Thread Ken Peng via Postfix-users
On 2023-04-06 20:09, Emmanuel Fusté via Postfix-users wrote: If we are ignoring the remaining IDNA2003 UTF8 domains corner case (which are practically unusable in real world if there is still sommes), there is no good reason to see utf8 fqdn in the HELO/EHLO context. Postfix is right. I got

[pfx] Re: invalid and non-fqdn hostname

2023-04-06 Thread Ken Peng via Postfix-users
On 2023-04-06 19:07, Jaroslaw Rafa via Postfix-users wrote: I just now learned about the UTF8 thing, I would never think of using non-ASCII characters in host/domain names :) You can dig the UTF8 hostname, they are valid for query. $ dig 腾讯.公司 ns +short ns1.brandcloudns.com. ns2.brandcloudns

[pfx] Re: invalid and non-fqdn hostname

2023-04-05 Thread Ken Peng via Postfix-users
On 2023-04-06 09:32, Sean Gallagher via Postfix-users wrote: From reading the code, these two restrictions seem equivalent except when SMTPUTF8 extension is used. when the SMTPUTF8 is in play, reject_non_fqdn_helo_hostname will convert a hostname containing UTF to an internationalized domain nam