Viktor Dukhovni via Postfix-users:
Don't set
smtpd_tls_security_level = encrypt
in main.cf. Instead use a master.cf override for just the port 25
service:
smtp inet n - n - - smtpd
-o smtpd_tls_security_level=encrypt
I am using pos
how about setup a whitelist domains list?
for instance, only allow .com, .net, .org, .de, .ca and some coutries
TLD to be passed through.
Phil Stracchino via Postfix-users:
There are a few ccTLDs that I block completely (looks like four), all of
them problematic ccTLDs from which I have only
Hello,
In my main.cf I have this setting,
smtpd_reject_unlisted_sender = yes
which I know the reason for existing.
But in master.cf I see this option,
submission inet n - y - - smtpd
-o smtpd_reject_unlisted_recipient=no
...
why set smtpd_reject_unlisted_r
IIRC for the group of IPs with the same weight,
Postfix put them into a array with max size 8, and pick up one from the
array by round robin.
On 2024-09-03 05:35, Pedro David Marco via Postfix-users wrote:
Hi everybody...
i think Wietse has explaned this before, but i cannot find the posts
Hello community,
Today I found a strange event. when I used these options (defaut) for
smtps,reject_sender_login_mismatch won't work.
smtps inet n - y - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
Thanks victor. i have followed your suggestion to fix it up.
regards.
Viktor Dukhovni via Postfix-users:
That parameter assignment serves no purpose.
"reject_sender_login_mismatch" is an action (verb) for use a restriction
list. It isn't a boolean configuration parameter (noun)
Hello victor,
Thank you so much for the help. Now I have resolved the issue. The logs
show nothing that error for now.
Aug 28 06:15:49 linuxmail postfix/smtpd[39646]: connect from
mail-oo1-f65.google.com[209.85.161.65]
Aug 28 06:15:49 linuxmail policyd-spf[39652]: prepend Received-SPF: Pass
But I have to disable sasl on port 25.
And I did enable sasl on port 465 (smtps).
So I think the option 'smtpd_sender_login_maps' should be put in
master.cf in smtps section.
Am i right?
Patrick Ben Koetter via Postfix-users:
Enable SASL in Postfix' smtpd server.
Do you mean that, I should put that option in master.cf and the config
should be like:
smtps inet n - y - - smtpd
-o syslog_name=postfix/smtps
-o smtpd_sender_login_maps =
hash:/etc/postfix/controlled_envelope_senders
...
Am I right? thank you in adva
