[pfx] Re: relay message if been deferred previously?

2025-05-01 Thread Michael Grimm via Postfix-users
Wietse Venema via Postfix-users wrote: > Michael Grimm via Postfix-users: >> I do have an smtp2go account created to get those mails sent before going >> through the tedious way of becoming delisted my IPs. >> Currently I have to modify transport_maps to get those stuck

[pfx] relay message if been deferred previously?

2025-05-01 Thread Michael Grimm via Postfix-users
an this be done without manual interference via transport_maps? Thanks in advance and regards, Michael ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: list.sys4.de

2025-04-09 Thread Michael Grimm via Postfix-users
addition to an 'unusable' /128 which comes with their public cloud instances, one may now get a /56 for their virtual network product vRACK for free. And they also allow you to delegate your /64 subnets to ip6.arpa. Thus, I am back in outgoing IPv6 ma

[pfx] Re: spamhaus/abusix in rspamd or postfix

2025-03-25 Thread Michael Grimm via Postfix-users
amd. FTR: If one is running FreeBSD then one may activate the blocklistd provided by the OS. I recently patched postscreen to communicate with the blacklistd; this patch is part of the postfix port, now. This will allow one to block all annoying bots that will try numerous times a day .

[pfx] Re: How to build current stable release on Ubuntu/Debian?

2025-03-17 Thread Michael Tokarev via Postfix-users
В Sun, 9 Mar 2025 00:08:38 +0100 Andreas Kuhlen via Postfix-users пишет: > Hi, so far I am using the postfix package of my distribution, which > is probably already considered ‘legacy’. For this reason I would like > to compile the current stable version 3.10.1. Is there any > documentation/inst

[pfx] Re: : postconf -e and missing trailing newline in main.cf

2025-03-15 Thread Michael Tokarev via Postfix-users
16.03.2025 07:26, Peter via Postfix-users wrote: You linked a debian bug, but I could not find a patch in there. The patch was in the attachment in the same email: https://marc.info/?l=postfix-users&m=174205748609705&w=2 /mjt ___ Postfix-users maili

[pfx] Re: : postconf -e and missing trailing newline in main.cf

2025-03-15 Thread Michael Tokarev via Postfix-users
16.03.2025 06:18, Peter via Postfix-users wrote: This is a relatively simple patch, for the sake of simplicity it replaces the linefeed at read time, but a slightly more complicated patch that does it when lines are output to dst might be more appropriate.  Note this is untested: FWIF, I alrea

[pfx] Re: postconf -e and missing trailing newline in main.cf

2025-03-15 Thread Michael Tokarev via Postfix-users
15.03.2025 19:40, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: I'm sure I've seen this issue before here on postfix-users. But can't find it. When main.cf does not have a trailing newline, ,..,, Well don't do that, then. Use a proper text ed

[pfx] postconf -e and missing trailing newline in main.cf

2025-03-13 Thread Michael Tokarev via Postfix-users
I'm sure I've seen this issue before here on postfix-users. But can't find it. When main.cf does not have a trailing newline, using `postconf -e foo=bar' to add new parameter makes bad main.cf. For example: $ head -c-1 /etc/postfix/main.cf > main.cf $ tail -n1 main.cf default_destination_concur

[pfx] Re: weird Spamhaus behavior

2025-03-09 Thread Michael Grimm via Postfix-users
d. Regards, Michael ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Postfix SMTP Client with GSSAPI authentication

2025-03-02 Thread michael-dev via Postfix-users
is not passed into libkrb5. Kind regards, Michael Braun ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Recommended postscreen_dnsbl_sites settings to get some security without too many blocked emails?

2025-01-23 Thread Michael Grimm via Postfix-users
CIDR_smtpd_milter_map Hope that helps and regards, Michael ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix and Spamhaus

2025-01-13 Thread Michael Grimm via Postfix-users
Michael Grimm via Postfix-users wrote: > Tomasz Pala via Postfix-users wrote: > > [Spamhaus DQS] > >> Did you switch? How long is "mykey"? > > Mine has 27 characters. Me bad, make that 26 chars. Regards, Michael

[pfx] Re: Postfix and Spamhaus

2025-01-13 Thread Michael Grimm via Postfix-users
Tomasz Pala via Postfix-users wrote: [Spamhaus DQS] > Did you switch? How long is "mykey"? Mine has 27 characters. Don't know if they all have the same size, though. Regards, Michael ___ Postfix-users mailing list -- postfix-us

[pfx] postconf master.cf editing and comments

2024-12-28 Thread Michael Tokarev via Postfix-users
Hi! After some experiments with postconf -F yesterday I noticed an interesting outcome of it. I'm editing diff a bit, to omit the unimportant details. # cp -p master.cf master.cf.sav # postconf -F '*/*/chroot=n' # diff -u master.cf master.cf.sav --- master.c +++ master.cf.sav @@ -12,6 +12,7 @@

[pfx] Re: Disable chroot.

2024-12-28 Thread Michael Tokarev via Postfix-users
28.12.2024 18:19, Tommy Berglund via Postfix-users wrote: Postfix works flawlessly without any errors. Is it now safe to delete /var/spool You most likely can remove /var/spool/postfix/etc /var/spool/postfix/lib /var/spool/postfix/var /var/spool/postfix/usr - PROVIDED you don't have actual co

[pfx] Re: Disable chroot.

2024-12-28 Thread Michael Tokarev via Postfix-users
28.12.2024 13:40, Tommy Berglund via Postfix-users wrote: I am using Postfix 3.7.11 on Debian 12 How can I disable chroot in Postfix? postconf -F '*/*/chroot=n' Is it just changing the 5th column in master.cf from y to n or is there more to do, before restarting postfix? No. /mjt

[pfx] Communications, and thank you Wietse for clear brevity!

2024-12-22 Thread Michael Tokarev via Postfix-users
Hi! It seems that some my statements on this list are difficult to understand somehow. While I usually mean one context, my statements are being interpreted in another context. Postfix documentation has always been an excellent example of clear brevity to me, a high standard level which is almo

[pfx] Re: SASL options

2024-12-22 Thread Michael Tokarev via Postfix-users
22.12.2024 13:13, Tomasz Pala via Postfix-users wrote: Well, Cyrus is also not SASL-only... https://doc.dovecot.org/2.3/admin_manual/sasl/ is what I mean. Cyrus SASL is a separate thing in people minds because it is a separate, independent library/subsystem. You can install a separate packag

[pfx] Re: SASL options

2024-12-22 Thread Michael Tokarev via Postfix-users
22.12.2024 11:53, Peter via Postfix-users wrote: On 22/12/24 19:53, Michael Tokarev via Postfix-users wrote: However, there are other mechanisms being developed, for example OAUTH2, which, in terms of Cyrus SASL, does not work with saslauthd at all, I don't see why it wouldn't.

[pfx] Re: SASL options

2024-12-22 Thread Michael Tokarev via Postfix-users
22.12.2024 11:53, Peter via Postfix-users wrote: [people treat dovecot sasl as part of dovecot] I realize that, but it's fairly easy to implement and easy to configure dovecot to only provide the SASL backend plus it does appear to be the most comprehensive, easiest to implement solution for SA

[pfx] Re: PoC: `postfix chroot' command

2024-12-21 Thread Michael Tokarev via Postfix-users
22.12.2024 01:10, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: 21.12.2024 20:55, Viktor Dukhovni via Postfix-users wrote: It looks like it's hardly possible to get away from cap_dac_override, because it is relied on in a number of other places. Curr

[pfx] Re: SASL options

2024-12-21 Thread Michael Tokarev via Postfix-users
22.12.2024 03:39, Peter via Postfix-users wrote: On 22/12/24 02:54, Michael Tokarev via Postfix-users wrote: However, there are other mechanisms being developed, for example OAUTH2, which, in terms of Cyrus SASL, does not work with saslauthd at all, I don't see why it wouldn't.

[pfx] Re: PoC: `postfix chroot' command

2024-12-21 Thread Michael Tokarev via Postfix-users
21.12.2024 22:16, Michael Tokarev via Postfix-users wrote: 21.12.2024 20:55, Viktor Dukhovni via Postfix-users wrote: I suggest you take a break from high-volume extemporising, and come back with narrow, carefully thought out issues or questions tackled one at a time to a conclusion, with

[pfx] Re: PoC: `postfix chroot' command

2024-12-21 Thread Michael Tokarev via Postfix-users
21.12.2024 20:55, Viktor Dukhovni via Postfix-users wrote: On Sat, Dec 21, 2024 at 08:35:29PM +0300, Michael Tokarev via Postfix-users wrote: 21.12.2024 20:15, Michael Tokarev via Postfix-users wrote: plus a few other workarounds for lack of cap-dac-override. It looks like it's h

[pfx] Re: PoC: `postfix chroot' command

2024-12-21 Thread Michael Tokarev via Postfix-users
21.12.2024 20:15, Michael Tokarev via Postfix-users wrote: plus a few other workarounds for lack of cap-dac-override. It looks like it's hardly possible to get away from cap_dac_override, because it is relied on in a number of other places. Currently postfix happily opens non-root-owned

[pfx] Re: PoC: `postfix chroot' command

2024-12-21 Thread Michael Tokarev via Postfix-users
21.12.2024 16:30, Tomasz Pala via Postfix-users wrote: The real problem is I can't really confine local, as it's the same CGroup as the rest of postfix, so the holes punched for example for postfix-script cannot be sealed and are kept for good. As I demonstrated before, it's rather trivial to

[pfx] Re: SASL options

2024-12-21 Thread Michael Tokarev via Postfix-users
21.12.2024 19:51, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: I still yet to see the reason for this, besides a statement "chroot is painless for freebsd but for linux is unsupportable", which is nothing but a big old myth, since the two works the same.

[pfx] Re: SASL options

2024-12-21 Thread Michael Tokarev via Postfix-users
21.12.2024 18:31, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: It *feels* like postfix needs some separation of this sasl stuff into its own process somehow, similar to how proxymap is done, so that eg cyrus sasl code is not linked directly into smtp[d] with all

[pfx] Re: SASL options

2024-12-21 Thread Michael Tokarev via Postfix-users
21.12.2024 16:16, Viktor Dukhovni via Postfix-users wrote: On Sat, Dec 21, 2024 at 01:51:46PM +0300, Michael Tokarev via Postfix-users wrote: ... As far as I can see, Cyrus SASL can work with plaintext methods using saslauthd (which has very simple username,password => ok|bad protocol),

[pfx] SASL options

2024-12-21 Thread Michael Tokarev via Postfix-users
Hi! I'm trying to get a "big picture" about how postfix works with various SASL options. It looks like there's a big overview missing in the docs somehow. We've basically two big kinds of SASL mechanisms: plaintext (which are login and plain) and non-plaintest (everything else). The "everything

[pfx] Re: maillog_file Setting Breaks SELinux on RHEL

2024-12-20 Thread Michael Tokarev via Postfix-users
21.12.2024 02:37, E R via Postfix-users wrote: Curious if there are others using the maillog_file setting who have found that "out of the box" RHEL 8+ or 9+ will not allow Postfix to start? I worked around the issue by creating a policy module for testing purposes thanks to the help the SELInux

[pfx] Re: PoC: `postfix chroot' command

2024-12-19 Thread Michael Tokarev via Postfix-users
20.12.2024 03:33, Tomasz Pala via Postfix-users wrote: On 2024-12-19 22:46, Michael Tokarev via Postfix-users wrote: I'm mostly asking about the approach, if it is okay with you if some distribution is to modify code like this, adding a custom subcommand. And then you're going to

[pfx] Re: PoC: `postfix chroot' command

2024-12-19 Thread Michael Tokarev via Postfix-users
20.12.2024 03:39, Tomasz Pala via Postfix-users wrote: On 2024-12-20 01:33, Tomasz Pala via Postfix-users wrote: This seems wrong: if [ ! "$set" ]; then It is not, it tests for emptiness of the value. Not a difference between y and n, but between empty and non-empty. ...not mentio

[pfx] Re: PoC: `postfix chroot' command

2024-12-19 Thread Michael Tokarev via Postfix-users
20.12.2024 00:22, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: Here's a little change for the `postfix' command I'd love to have in Debian, - to assist its 25 years history of running postfix chrooted and to have an easier alternative, one way or t

[pfx] PoC: `postfix chroot' command

2024-12-19 Thread Michael Tokarev via Postfix-users
nly if it is actually in use - this is another PoC, I dislike the current way it is done - it should distinguish between different complex cases, like for smtp and smtpd, different things might be needed. Thanks, /mjt -- From: Michael Tokarev &2 + exit 1 +

[pfx] Re: a small experiment: restricting capabilities for postfix

2024-12-19 Thread Michael Tokarev via Postfix-users
Having written all this, I'd love to note once again: this was just a small experiment, which has shown it we're to work in this area, it should be done within postfix, not outside it, and due to its well- thought architecture, this seems to be doable (keeping the same well-thought architecture).

[pfx] Re: a small experiment: restricting capabilities for postfix

2024-12-18 Thread Michael Tokarev via Postfix-users
17.12.2024 13:25, Tomasz Pala via Postfix-users wrote: Disregarding this (e.g. LMTP, virtual mailboxes only) one could try to directly start with: User=postfix AmbientCapabilities=... which would make in turn this unnecessary: setfacl -m user:root:rwx $queue_directory/public With current

[pfx] Re: a small experiment: restricting capabilities for postfix

2024-12-18 Thread Michael Tokarev via Postfix-users
18.12.2024 01:12, Wietse Venema via Postfix-users wrote: Just for the record, Postfix requires that a system behaves as defined in POSIX (and ANSI C). That remains the baseline for what calls are expected to succeed, and for what calls are expected to fail. This is one of the possible views on

[pfx] Re: a small experiment: restricting capabilities for postfix

2024-12-17 Thread Michael Tokarev via Postfix-users
On 17.12.2024 18:14, Wietse Venema via Postfix-users wrote: Did you verify the non-daemon programs, specifically that all featrues work as promised in sendmail, postdrop, postqueue, postsuper, postmap, postalias, and postcat? Be sure to also test as a non-root and non-postfix user. Did you test

[pfx] Re: a small experiment: restricting capabilities for postfix

2024-12-17 Thread Michael Tokarev via Postfix-users
17.12.2024 13:25, Tomasz Pala via Postfix-users wrote: On 2024-12-17 06:41, Michael Tokarev via Postfix-users wrote: and repeated mentions about systemd and "real security", I decided to Well, to be honest, mantra must be repeated - "it's not about security", like no

[pfx] Re: logging, postlogd

2024-12-16 Thread Michael Tokarev via Postfix-users
15.12.2024 16:44, Tomasz Pala via Postfix-users wrote: .. In case of postfix, having magnitude of options, hardened by-default service, or at least hardening comments ("You might uncomment this if not using that") would be PITA for sure - but every journey starts from the first step. I'd love t

[pfx] a small experiment: restricting capabilities for postfix

2024-12-16 Thread Michael Tokarev via Postfix-users
So, after the discussion about chroot, and - as it turns out - some people objecting against turning it off, saying it is a useful feature - and repeated mentions about systemd and "real security", I decided to make a little experiment: to try the very first step in this direction. One of the fir

[pfx] Re: postfix-script: treat all commas as spaces in multi_instance_directories directories, not just the first one

2024-12-16 Thread Michael Tokarev via Postfix-users
09.12.2024 20:15, Michael Tokarev via Postfix-users wrote: Noticed a small error in postfix-script. The change is in sed expression - 's/,/ /' vs 'y/,/ /'. This isn't really important (it only suppresses extra check of a few dirs which are normally done for default

[pfx] Re: [chroot] tzset() is not working in glibc (anymore?)

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 17:56, Tomasz Pala via Postfix-users wrote: I mean that as /etc/localtime is frequently stat()ed for changes and must exist in chroot, the predefined TZ don't need to, so maybe set before chroot() won't require any files. Dunno, guessing. It's the case, yes. But.. Just cp /etc/local

[pfx] Re: chroot and debian: a blast from the past

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 17:41, Tomasz Pala via Postfix-users wrote: On 2024-12-16 13:22, Michael Tokarev via Postfix-users wrote: This is exactly why I started this whole thread: is chroot in postfix worth the efforts these days or not, from the upstream PoV? And the very first Linux chroot() was never

[pfx] Re: [chroot] tzset() is not working in glibc (anymore?)

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 17:28, Tomasz Pala via Postfix-users wrote: On 2024-12-16 10:36, Michael Tokarev via Postfix-users wrote: Calling tzset() before chroot() is not useful in glibc. Because while glibc caches the /etc/localtime values to avoid the need to re-read it on each use, it also *resets* the

[pfx] Re: chroot and debian: a blast from the past

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 17:18, Michael Tokarev wrote: That's basically it.  Where the difference in pain level between FreeBSD and Linux come from? Heck. I just come across examples/chroot-setup/FreeBSD2. My Postfix setup on Linux is exactly the same. Everything is chrooted (besides obvious

[pfx] Re: chroot and debian: a blast from the past

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 17:02, Michael Tokarev via Postfix-users wrote: 16.12.2024 15:45, Wietse Venema via Postfix-users wrote: So chroot is 'nice to have' but not for LINUX. I've been in this boat for 25 years myself, 120% agree with that. I want to understand the details. To clar

[pfx] Re: chroot and debian: a blast from the past

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 15:45, Wietse Venema via Postfix-users wrote: On LINUX systems, chroot is for people who want to suffer pain. On my FreeBSD server, Postfix chroot is painles. Does Cyrus SASL work on your FreeBSD with less pain than on Linux? I'd love to know the details :) Other than nsswitch lazi

[pfx] Re: chroot and debian: a blast from the past

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 14:52, Viktor Dukhovni via Postfix-users wrote: On Mon, Dec 16, 2024 at 12:03:52PM +0300, Michael Tokarev via Postfix-users wrote: The good news though is that all libnss_*.so which comes with glibc are not needed in chroot at all, they're built-in to the libc.so proper

[pfx] [chroot] tzset() is not working in glibc (anymore?)

2024-12-16 Thread Michael Tokarev via Postfix-users
Dunno if this is a known fact or not, but for me it was interesting news. Calling tzset() before chroot() is not useful in glibc. Because while glibc caches the /etc/localtime values to avoid the need to re-read it on each use, it also *resets* the cached values back to defaults if it doesn't fi

[pfx] Re: logging, postlogd

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 06:05, Wietse Venema via Postfix-users wrote: Tomasz Pala via Postfix-users: Again, what about the logging from NON-DAEMON Postfix processes such as sendmail, postdrop, postqueue, and so on? They belong to their calling service. Therefore if I run sendmail from the shell, it belongs

[pfx] Re: chroot and debian: a blast from the past

2024-12-16 Thread Michael Tokarev via Postfix-users
16.12.2024 01:16, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: 09.12.2024 17:17, Wietse Venema via Postfix-users wrote: .. Does nsswitch use lazy initialization or greedy initialization? It's as lazy as possible, as it turns out, at least in glibc. I'm

[pfx] Re: chroot and debian: a blast from the past

2024-12-15 Thread Michael Tokarev via Postfix-users
09.12.2024 17:17, Wietse Venema via Postfix-users wrote: ... Setting up the necessary helper files under /var/spool/postfix (nsswitch.conf, TLS, resolv.conf, services) remains platform-specific. I was under impression postfix does not need nsswitch.conf in the chroot. But I was wrong. smtp_hos

[pfx] Re: pickup wakeup time?

2024-12-15 Thread Michael Tokarev via Postfix-users
14.12.2024 17:32, Wietse Venema via Postfix-users wrote: .. Suggesting that these programs are running continuously is not fair. Instead, they sleep. If the file system activity bothers you then somene could add a few stat() calls and skip directories that have no recently modified time stamp.

[pfx] Re: logging, postlogd

2024-12-15 Thread Michael Tokarev via Postfix-users
15.12.2024 14:33, Viktor Dukhovni via Postfix-users wrote: On Sun, Dec 15, 2024 at 11:34:54AM +0100, Tomasz Pala via Postfix-users wrote: System-wide "defaults to 1 messages in 30s" and "is applied per- service", so this can be easily resolved by providing postfix.service with: LogRateLimi

[pfx] Re: logging, postlogd

2024-12-15 Thread Michael Tokarev via Postfix-users
15.12.2024 03:07, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: ... Today systemd plays major role in linux, and linux plays major role in the IT world. And while some its ideas are questionable or may look weird, some are interesting. And logging is one of them

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-14 Thread Michael Tokarev via Postfix-users
14.12.2024 15:52, Wietse Venema via Postfix-users пишет: Michael Tokarev via Postfix-users: 09.12.2024 22:25, Wietse Venema via Postfix-users wrote: Steffen Nurpmeso via Postfix-users: postfix_status() { # As postfix does not use stdout but console, no #postfix__init

[pfx] pickup wakeup time?

2024-12-14 Thread Michael Tokarev via Postfix-users
Hi! What's the reason for the pickup daemon to be waked up every 60s? Either on a modern system, or at all? Why it needs to be awaken in the first place, - does it miss mail when the system is up and running? It looks like this wake-up time can be increased way past max_idle these days, say, to

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-13 Thread Michael Tokarev via Postfix-users
09.12.2024 22:25, Wietse Venema via Postfix-users wrote: Steffen Nurpmeso via Postfix-users: postfix_status() { # As postfix does not use stdout but console, no #postfix__init #${prog} status 2>&1 I think that was fixed in Postfix 3.8. 20230308 Cleanup: t

[pfx] [PATCH] makedefs: fix $RELEASE_MAJOR expression

2024-12-12 Thread Michael Tokarev via Postfix-users
mes: expr 0 which, in turn, is false. So while expr utility will produce "0" on output, it will ALSO exit with non-zero status. And the next "exit 1" immediately gets in, so whole makedefs terminates. Fix this by using sed instead of expr. Introduced in 3.0.2. Signed-off-

[pfx] Re: chroot and debian: a blast from the past

2024-12-09 Thread Michael Tokarev via Postfix-users
10.12.2024 02:16, Jaroslaw Rafa via Postfix-users wrote: Dnia 10.12.2024 o godz. 01:58:58 Michael Tokarev via Postfix-users pisze: Hm... read-only /etc? How do you reconfigure anything then? Remount-rw, configure, remount-ro. There's no need to configure anything during regular s

[pfx] Re: chroot and debian: a blast from the past

2024-12-09 Thread Michael Tokarev via Postfix-users
10.12.2024 02:02, Wietse Venema via Postfix-users пишет: Michael Tokarev via Postfix-users: 10.12.2024 00:46, Wietse Venema via Postfix-users wrote: The prob here is that it isn't trivial at all to set up the chroot environment, despite all the efforts to solve this so far. Many thing

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-09 Thread Michael Tokarev via Postfix-users
10.12.2024 01:16, Kenneth Porter via Postfix-users wrote: I have a systemd unit on another distro that submits mail with /bin/mail (part of mailx) at boot and shutdown. What dependencies are needed to make that work here? (This notifies me when a remote system comes up that it was gracefully shu

[pfx] Re: chroot and debian: a blast from the past

2024-12-09 Thread Michael Tokarev via Postfix-users
10.12.2024 01:31, Jaroslaw Rafa via Postfix-users wrote: Dnia 10.12.2024 o godz. 01:21:51 Michael Tokarev via Postfix-users pisze: It redirected a few (maybe just one) runtime-info file from /etc to /run - this way, /etc can be read-only (I used RO /etc for years before systemd). Hm... read

[pfx] Re: chroot and debian: a blast from the past

2024-12-09 Thread Michael Tokarev via Postfix-users
10.12.2024 00:46, Wietse Venema via Postfix-users wrote: The prob here is that it isn't trivial at all to set up the chroot environment, despite all the efforts to solve this so far. Many things can be simplified greatly by using proxy maps for example, and that probably will be the way I'll re

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-09 Thread Michael Tokarev via Postfix-users
10.12.2024 00:22, Wietse Venema via Postfix-users wrote: On my FreeBSSD system, Postfix has only one startup dependency, and that is "LOGIN". If the system isn't ready for users then it should not be running Postfix. Would that be possible with systemd? Or is that too simple. We're comparing ap

[pfx] Re: postfix-script: treat all commas as spaces in multi_instance_directories directories, not just the first one

2024-12-09 Thread Michael Tokarev via Postfix-users
09.12.2024 21:52, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: Noticed a small error in postfix-script. The change is in sed expression - 's/,/ /' vs 'y/,/ /'. This isn't really important (it only suppresses extra check of a few dirs wh

[pfx] Re: chroot and debian: a blast from the past

2024-12-09 Thread Michael Tokarev via Postfix-users
09.12.2024 17:17, Wietse Venema via Postfix-users wrote: Turning on chroot is possible for most master.cf entries except those that use proxymap, postlogd, pipe, local, spawn (I may be missing one). You can use "postconf -F "*/*/command" to find these, and "postconf -F xxx/yyy/chroot=y" to turn

[pfx] postfix-script: treat all commas as spaces in multi_instance_directories directories, not just the first one

2024-12-09 Thread Michael Tokarev via Postfix-users
Noticed a small error in postfix-script. The change is in sed expression - 's/,/ /' vs 'y/,/ /'. This isn't really important (it only suppresses extra check of a few dirs which are normally done for default instance only), but it's better to fix it. Signed-off-by:

[pfx] chroot and debian: a blast from the past

2024-12-09 Thread Michael Tokarev via Postfix-users
Hi! It's been a very long story with debian installing postfix chrooted by default. For about 25 years there were multiple, endless bug reports here on postfix- users, in debian bug tracker, in ubuntu bug tracker and elsewhere, all kinds of issues and workarounds has been faced. #151692 is one of

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-09 Thread Michael Tokarev via Postfix-users
09.12.2024 00:56, Wietse Venema via Postfix-users пишет: Michael Tokarev via Postfix-users: Just to demonstrate what's in debian about the matter, which I basically just removed a few days ago: https://salsa.debian.org/postfix-team/postfix-dev/-/commit/60a176aeee7dc0397037bc7980d5f3f265b

[pfx] multiple instances in downstream environment

2024-12-09 Thread Michael Tokarev via Postfix-users
Hi! Yesterday I mentioned a way how multiple postfix instances are managed in Debian. And I'm trying to find out what's the right way to do this, if at all. As far as I can see, the only thing needed to manage a custom instance is to have a custom config with main.cf and master.cf in there, whi

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 19:59, Viktor Dukhovni via Postfix-users wrote: https://bugs.debian.org/882141 -- this is what we have in debian, and the current solution: ln -s "$SERVICEFILE" "$WANTDIR/postfix@-.service" for DIR in $(postconf -h multi_instance_directories); do ln -s "$SERVICEFILE" "$WANTDIR/p

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 19:10, Viktor Dukhovni via Postfix-users wrote: DO NOT attempt to build database tables, except just-in-time, shortly before Postfix is ready to be started. Otherwise, you cannot know the desired value of various supporting parameters, that may depend on the system environment:

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 19:10, Viktor Dukhovni via Postfix-users пишет: On Sun, Dec 08, 2024 at 05:43:38PM +0300, Michael Tokarev via Postfix-users wrote: But a package might be installed from another system for example (bootstrapping) where host name is not required to be set, or during regular system

[pfx] Re: some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
08.12.2024 18:12, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: One example is `newaliases' run at the end of the startup procedure in debian, - it has numerous rather complex workarounds, and yet there are open bug reports still, for many years. The s

[pfx] some helper tools requiring various parameters to be set, can we avoid it?

2024-12-08 Thread Michael Tokarev via Postfix-users
Hi! I'm revisiting debian packaging of postfix, and noticed that a lot of stuff is done in quite sophisticated, twisty, or outright wrong way due to a simple issue: many postfix utilities require certain parameters to be set. One example is `newaliases' run at the end of the startup procedure

[pfx] Re: PATCH: 8bit GECOS in From not encoded?

2024-12-02 Thread Michael Tokarev via Postfix-users
02.12.2024 02:04, Wietse Venema via Postfix-users : Wietse Venema via Postfix-users: The cleanup_out_header() function autodetects that a header needs SMTPUTF8, including headers added with a header_checks PREPEND action, but that function is not called for headers that are generated by Postfix

[pfx] Re: 8bit GECOS in From not encoded?

2024-12-01 Thread Michael Tokarev via Postfix-users
01.12.2024 19:40, Viktor Dukhovni via Postfix-users wrote: On Sun, Dec 01, 2024 at 07:21:13PM +0300, Michael Tokarev via Postfix-users wrote: On the other hand, it shouldn't be a very difficult task to implement this for local submission given postfix has all the infrastructure available

[pfx] Re: 8bit GECOS in From not encoded?

2024-12-01 Thread Michael Tokarev via Postfix-users
01.12.2024 19:07, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: Dec 01 18:42:57 isrv postfix/smtp[3009]: < mailly.debian.org[82.195.75.114]:25: 250-SMTPUTF8 Dec 01 18:42:57 isrv postfix/smtp[3009]: > mailly.debian.org[82.195.75.114]:25: MAIL FROM: SIZE=58

[pfx] Re: 8bit GECOS in From not encoded?

2024-12-01 Thread Michael Tokarev via Postfix-users
01.12.2024 18:19, Wietse Venema via Postfix-users wrote: Michael Tokarev via Postfix-users: And while it's definitely true there's no encoding specified for the GECOS field in /etc/passwd, the common practice over last couple decades is to use utf8 in there. Also we've $LAN

[pfx] Re: 8bit GECOS in From not encoded?

2024-12-01 Thread Michael Tokarev via Postfix-users
01.12.2024 17:26, Matthias Andree via Postfix-users wrote: Am 01.12.24 um 14:34 schrieb Michael Tokarev via Postfix-users:   From: Михаил Токарев Shouldn't postfix at least try to generate valid email message in such case? How exactly does that mail that you claim Postfix trans

[pfx] 8bit GECOS in From not encoded?

2024-12-01 Thread Michael Tokarev via Postfix-users
Hi! For a long time I thought this problem is due to limitation of mailx email submission program - when our users submit email message using mailx, their From: header (which is filled using getpwnam(), with proper First.M.Last) is not encoded properly but is left as plain 8-bit. But today I fou

[pfx] Re: Debian Postfix Maintainer Update

2024-11-30 Thread Michael Tokarev via Postfix-users
30.11.2024 19:32, Scott Kitterman via Postfix-users wrote: For those of you who care about Debian (and to some extent its derivatives), I'm passing maintainership of the Debian Postfix package to Michael Tokarev. He's been a long term participant in both Debian and the Postfix communi

[pfx] Re: Update issue 3.8.5-3.9.0

2024-08-31 Thread Michael Orlitzky via Postfix-users
On Sat, 2024-08-31 at 15:33 -0400, Phil Stracchino via Postfix-users wrote: > > My conclusion is: The mail_version set by 3.9.0 is not what is > expected, but *this will only be a problem to you* if you have config > directives that you no longer need ANYWAY. Go through main.cf and clean > up

[pfx] Re: Update issue 3.8.5-3.9.0

2024-08-31 Thread Michael Orlitzky via Postfix-users
On Sun, 2024-09-01 at 04:41 +1000, Viktor Dukhovni via Postfix-users wrote: > > How did you get Postfix to believe its version is "3.9". There was > never such a release. Official Postfix release versions always have > a micro "patch level". Looks to be from #define MAIL_VERSION_NUMBER "3.

[pfx] Re: multiple certs for postfix

2024-08-17 Thread Michael W. Lucas via Postfix-users
; > That is a more complicated case. > Where SNI is maybe required. It's actually no more complicated. SAN is what you want. If you go to my web site and look at the cert, it has ten names in several domains. Works perfectly. ==ml -- Michael W.(Warren) Lucashttps://mwl.io/

[pfx] Re: multiple certs for postfix

2024-08-16 Thread Michael W. Lucas via Postfix-users
tfix? > > Thank you. > > -- > https://wespeng.pages.dev/ > ___ > Postfix-users mailing list -- postfix-users@postfix.org > To unsubscribe send an email to postfix-users-le...@postfix.org -- Michael W.(Warren) Lucashttps://mwl.io/

[pfx] Re: question about postmaster account

2024-07-28 Thread Michael W. Lucas via Postfix-users
in RFC 822, and > in its successors up to and including RFC 5322. > > -Ralph Also: mail from him will be regarded as coming from your official business org, not a customer. As far as the Internet is concerned, this customer speaks for you. -- Michael W. Lucashttps://mwl.io/

[pfx] Re: DANE and STS

2024-06-27 Thread Michael Grimm via Postfix-users
Michael Grimm wrote: > [see Viktors link: http://dnssec-stats.ant.isi.edu/~viktor/x3hosts.html] > <http://dnssec-stats.ant.isi.edu/~viktor/x3hosts.html%5D> correction: http://dnssec-stats.ant.isi.edu/~viktor/x3hosts.html Rega

[pfx] Re: DANE and STS

2024-06-27 Thread Michael Grimm via Postfix-users
ons: I publish a '3 1 1' record derived from a self-signed certificate in addition, mainly for manually interventions in potential LE disaster recovery purposes.) Regards, Michael ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: discard message

2024-06-20 Thread Michael Grimm via Postfix-users
Viktor Dukhovni via Postfix-users wrote: > On Thu, Jun 20, 2024 at 02:33:08PM +0200, Michael Grimm via Postfix-users > wrote: >>> One could try some variant of /^X-Spam-Status: Yes, score=[5-9]/ >> >> Please correct me if I am mistaken, but that won't catch sc

[pfx] Re: discard message

2024-06-20 Thread Michael Grimm via Postfix-users
tus: Yes, score=[5-9]/ Please correct me if I am mistaken, but that won't catch scores >= 10? But I don't know how such a regex should be defined. Regards, Michael ___ Postfix-users mailing list -- postfix-users@postfix.org To un

[pfx] Re: mta-sts and smtp_tls_security_level

2024-03-08 Thread Michael W. Lucas via Postfix-users
On Fri, Mar 08, 2024 at 03:05:43PM -0500, Viktor Dukhovni via Postfix-users wrote: > On Fri, Mar 08, 2024 at 01:28:00PM -0500, Michael W. Lucas via Postfix-users > wrote: > > > Realistically, Gmail and Yahoo do not care about my MTA-STS > > reports. All they care about is

[pfx] mta-sts and smtp_tls_security_level

2024-03-08 Thread Michael W. Lucas via Postfix-users
MTA-STS reports. All they care about is that I validate their X.509 certs. Is there any reason to use something like mta-sts-daemon in that transport instead of just setting smtp_tls_security_level=verify ? Thanks, ==ml -- Michael W. Lucashttps://mwl.io/ author of: Absolute OpenBSD, SSH

[pfx] Re: Which DKIM application for postfix 3.9.0

2024-03-07 Thread Michael W. Lucas via Postfix-users
e most recommended, however, > other research states the opendkim has been abandoned by it's maintainers. I use the rspamd DKIM module, seems fine for signing and validation alike. ==ml -- Michael W. Lucashttps://mwl.io/ author of: Absolute OpenBSD, SSH Mastery, git commit

[pfx] sending not trying TLS?

2024-02-15 Thread Michael W. Lucas via Postfix-users
me_mask: software Feb 15 18:14:53 mail postfix/cleanup[52642]: C36BC83C1: message-id=<20240215231453.c36bc8...@mail.ratoperatedvehicle.com> Feb 15 18:14:53 mail postfix/bounce[53616]: 49EC181FB: sender non-delivery notification: C36BC83C1 Feb 15 18:14:53 mail postfix/qmgr[45613]: C36BC83C1: from=<>, si

[pfx] Re: Are multiple white spaces allowed in a date in headers?

2024-01-31 Thread Michael Storz via Postfix-users
Am 2024-01-31 15:09, schrieb David Bürgin via Postfix-users: Michael Storz: FWS =   ([*WSP CRLF] 1*WSP) /  obs-FWS A FWS can be a single WSP or a folded line. Therefore the date "Fri,  5 Jan 2024 16:48:37 -0500 (EST)" is syntactically incorrect, because there can b

  1   2   3   4   5   6   7   8   9   10   >