[pfx] Re: tlsproxy service role client is not available

2025-07-31 Thread Patrick Ben Koetter via Postfix-users
* John Doe via Postfix-users : > Hi All, > > > Postfix setup is same as on old rhel7 server, now I'm using rhel8. > > Postfix version differs and it's 3.8.5 on new server. > > Old one is 3.3.6. > > Certs are there, working fine on other box. > > > Any clue what is happening here ? Are you e

[pfx] Re: list.sys4.de

2025-04-10 Thread Patrick Ben Koetter via Postfix-users
* Jack Raats via Postfix-users : > Sorry. I meant ipv4 only, so an ipv6 only server cann't connect with the > mailinglists ACK. That's the status quo and we're working with the hoster to (permanently) fix this. The platform itself consists of two mail servers for redundancy. Both have IPv6 address

[pfx] Re: I have found out the reason why Postfix keeps getting killed by OOM Killer

2025-03-03 Thread Patrick Ben Koetter via Postfix-users
* Turritopsis Dohrnii Teo En Ming via Postfix-users : > Dear Patrick Ben Koetter, > > I will suggest Virtualmin developers to use clamdscan instead of clamscan. > Looks like a re-design of Virtualmin in how it uses ClamAV to scan email > messages is required. Don't do that. Ask them to use cla

[pfx] Re: I have found out the reason why Postfix keeps getting killed by OOM Killer

2025-03-03 Thread Patrick Ben Koetter via Postfix-users
* Turritopsis Dohrnii Teo En Ming via Postfix-users : > I have no idea which one to use. I only know that ClamAV is integrated into > Virtualmin. Everything is automatic. Talk you the vendor who provided the integration and ask them to provide a useful solution. p@rick -- [*] sys4 AG https:/

[pfx] Re: I have found out the reason why Postfix keeps getting killed by OOM Killer

2025-03-03 Thread Patrick Ben Koetter via Postfix-users
* Mark via Postfix-users : > Disable clamav completely, restart your server and try it like that, > for a few days. Nope! I don't see any reason to disable ClamAV completely. What I would definitely would to is *not* use the command line scanner utility clamscan to scan messages for malware. This

[pfx] Re: postfix and openarc

2025-01-14 Thread Patrick Ben Koetter via Postfix-users
* natan via Postfix-users : > Hi > What is currently happening with the OpenArc project? On GitHub, I see the > last modifications were made 7 years ago. Has the project completely failed? > I'm asking because I see that Gmail/G-Suite are using it, and, after all, > they are trendsetters. The OpenA

[pfx] SOLVED Re: Re: Trailing dot in mail address syntax?

2025-01-13 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Mon, Jan 13, 2025 at 11:02:32AM +0100, Patrick Ben Koetter via > Postfix-users wrote: > > > Is it a valid mail address if the domainpart ends with a trailing dot. e.g. > > like this: recipi...@example.com. > > No. That i

[pfx] Trailing dot in mail address syntax?

2025-01-13 Thread Patrick Ben Koetter via Postfix-users
Greetings, is it a valid mail address if the domainpart ends with a trailing dot. e.g. like this: recipi...@example.com. AFAIK in DNS a trailing dot in a domain name is valid and we omit it usually because it's said to be implict. TIA, p@rick -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 4

[pfx] Re: MX vs local delivery table

2024-12-26 Thread Patrick Ben Koetter via Postfix-users
* Bitfox via Postfix-users : > Some of our users have set up their domain names in our email hosting > system. These domain names will be added to virtual_alias_domains. However, > for some reason, these users did not point their mx records to our mx > server, but to other hosting services, such as

[pfx] [SOLVED] Re: Re: PSA: Access to www.postfix.org on 2024-11-27

2024-11-17 Thread Patrick Ben Koetter via Postfix-users
* Wietse Venema via Postfix-users : > I'm not running the DNS or www service anymore. The work would need > to be done by Ralph (web) and sys4.de staff (DNS). As of this weekend it is possible to browse the Postfix website using https://postfix.org as URL. The new URL coexists with https://www.pos

[pfx] Re: ignored: no SASL support

2024-08-27 Thread Patrick Ben Koetter via Postfix-users
* LinuxMail.cc via Postfix-users : > Do you mean that, I should put that option in master.cf and the config > should be like: > > smtps inet n - y - - smtpd > -o syslog_name=postfix/smtps > -o smtpd_sender_login_maps = hash:/etc/postfix/controlled_envelope_se

[pfx] Re: SASL authentication - first try local and then AD in postfix

2024-07-07 Thread Patrick Ben Koetter via Postfix-users
Sandeep, > Am 08.07.2024 um 07:37 schrieb hkhk_exact10 via Postfix-users > : > > Hi All, > > I want to setup SMTP authentication in such a way that the user should first > be looked locally (/etc/passwd) and then in AD. Is it possible to do so? I > was able to configure AD auth via sasl (cyru

[pfx] Re: Still no luck with Cyrus SASL

2024-07-03 Thread Patrick Ben Koetter via Postfix-users
John, * Viktor Dukhovni via Postfix-users : > On Tue, Jul 02, 2024 at 11:24:53PM -0400, John Levine via Postfix-users wrote: > > > >Have you posted "postconf -nf" and "postconf -Mf" output (with as-is > > >whitespace, including line-breaks)? > > > > I will, see below. > > Thanks, generally best

[pfx] Re: 25 years today

2023-12-15 Thread Patrick Ben Koetter via Postfix-users
Wietse, * Wietse Venema via Postfix-users : > As a few on this list may recall, it is 25 years ago today that the > "IBM secure mailer" had its public beta release. This was accompanied > by a nice article in the New York Times business section. > > There is some literature at https://www.postfix

[pfx] FOLLOW-UP Re: Re: [ext] list.sys4.de fails with starttls

2023-11-14 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Mon, Sep 25, 2023 at 04:24:55PM +0200, Patrick Ben Koetter via > Postfix-users wrote: > > > > Do you have SMTP client TLS connection reuse enabled? If so, TLS > > > connections are made via tlsproxy(8), with the smtp(8)

[pfx] Re: Recommendation for dkim signing

2023-11-06 Thread Patrick Ben Koetter via Postfix-users
Noel, * Noel Butler via Postfix-users : > > sys4.de are not removing original DKIM sigs just adding postfix.org's, > > which also fails for some reason, but ohh looky that - SPF passes :D > > Decided to have a look ater lunch, that looks like it would be because sys4 > adds footers, where previou

[pfx] Re: Recommendation for dkim signing

2023-11-06 Thread Patrick Ben Koetter via Postfix-users
* Jens Hoffrichter via Postfix-users : > Hi! > > We are looking into implementing DKIM signing for one of our services, > and there are multiple ways to implement that. > > So far I have found that you can do it with opendkim and amavis - any > recommendation for one or the other, or maybe someth

[pfx] Re: [ext] list.sys4.de fails with starttls

2023-09-25 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Sun, Sep 17, 2023 at 06:20:53PM +0200, Patrick Ben Koetter via > Postfix-users wrote: > > > Yesterday we upgraded LE certs and it seems – we haven't had time to > > investigate in that yet – SELinux bite Postfix where it sh

[pfx] Re: [ext] list.sys4.de fails with starttls

2023-09-17 Thread Patrick Ben Koetter via Postfix-users
STARTTLS should be back to normal again. My tests suceeded and I'll give it another shot when I'm home. At the moment I'm on a rather longish train ride and internet is shaky - at best. Yesterday we upgraded LE certs and it seems – we haven't had time to investigate in that yet – SELinux bite Post

[pfx] warn_if_reject and MILTER

2023-07-11 Thread Patrick Ben Koetter via Postfix-users
Greetings, I was wondering if there's something similar to warn_if_reject when it comes to dry-run / test-run MILTER applications in Postfix. The documentation on warn_if_reject does not mention MILTERs, which usually means the feature isn't there because otherwise it would be documented, and the

[pfx] Re: DANE and DNSSEC

2023-05-11 Thread Patrick Ben Koetter via Postfix-users
Hey Byung-Hee! * Byung-Hee HWANG via Postfix-users : > Hellow Postfix hackers, > > I have a questions while reading DANE docs. Is DNSSEC mandotary? For > making DANE mail server. > > For now i'm running two postfix servers in public. Actually i'm beginner > in both DANE and DNSSEC. you need DNS

[pfx] OT Re: Re: uceprotect.wtf (was: Send email to one @domain.com via authenticated relay?)

2023-03-23 Thread Patrick Ben Koetter via Postfix-users
* natan via Postfix-users : > Hi > Today uceprotect add class /24 to blaclist ... One user (dedicated server) > send probably spam but the user claims that he did not send spam only 6 > e-mails in 1h. And uceprotect was blocked by the whole class ... > > other RBLs it was clean any IP with that cl

[pfx] Re: /etc/postfix/access only doamin is blocked

2023-03-15 Thread Patrick Ben Koetter via Postfix-users
* Gerd Hoerst via Postfix-users : > > Hi ! > > in my /etc/postfix/main.cf > > parent_domain_matches_subdomains = . . smtpd_access_maps > .. > smtpd_sender_restrictions = .. check_sender_access > hash:/etc/postfix/access > > > > in my main.cfs > > domain.com DISCARD Spam rule dom

[pfx] Re: [P-U] Re: New List Host and Reply-to Header

2023-03-10 Thread Patrick Ben Koetter via Postfix-users
* Gerald Galster via Postfix-users : > >>> This list uses Mailman configuration settings, not handcrafted code. > >>> If people believe that it is worthwhile to change the Mailman > >>> implementation or the DMARC spec, then I suggest that they work > >>> with the people responsible for that. > >>

[pfx] Re: [P-U] Re: The joke writes itself.

2023-03-10 Thread Patrick Ben Koetter via Postfix-users
* Phil Biggs via Postfix-users : > Friday, March 10, 2023, 5:54:02 PM, Viktor Dukhovni via Postfix-users wrote: > > > I was also quite happy with no tags at all. In the old days I used the tags to filter my messages and place them in the right mailbox. With the advent of DMARC I stopped that and

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Wed, Mar 08, 2023 at 07:42:56AM +0100, Patrick Ben Koetter via > Postfix-users wrote: > > > - The key material is 4096 Bit and it was brought to my attention there's a > > bug / missing functionality (?) in opendmarc wh

[P-U] FOLLOWUP Re: Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Patrick Ben Koetter via Postfix-users : > * Scott Kitterman via Postfix-users : > > ... > > > For Debian, if someone can find/test patches, I can get them into Debian's > > package. I assume other distributors are similar. Feel free to update the > >

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Scott Kitterman via Postfix-users : ... > For Debian, if someone can find/test patches, I can get them into Debian's > package. I assume other distributors are similar. Feel free to update the > Debian bug with information. It's unfortunate we don't have a better > maintained solution. I

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* postfix--- via Postfix-users : > > > > OpenDMARC is segfaulting. That's what 'signal 11' means. Postfix fails > > > > to get an answer to its end-of-body milter call because of the segfault > > > > closing the other end of that socket. That failure results in Postfix > > > > sending a 4xx to t

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Michael Grimm via Postfix-users : > toganm--- via Postfix-users wrote: > > > Maybe it would have been a better idea to check if the mail server is listed > > in any rbl sites. > > If you really were in mailing business for some time you would know how RBLs > work: They react, they do not read

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* toganm--- via Postfix-users : > > Hi, > > Maybe it would have been a better idea to check if the mail server is listed > in any rbl sites. For one it is listed in Abusix and my server is rejected it > as a result > > Abusix Mail Intelligence; https://lookup.abusix.com/search?q=188.68.34.52 l

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* toganm--- via Postfix-users : > Maybe it would have been a better idea to check if the mail server is listed > in any rbl sites. For one it is listed in Abusix and my server is rejected it > as a result What makes you believe the IP had been blocklisted before? The IP was blocklisted today. It

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Harald Koch via Postfix-users : > On Tue, Mar 7, 2023, at 12:02, Benny Pedersen via Postfix-users wrote: > > > > why is arc invalid ? > > My email provider is adding a little more detail: > > Authentication-Results: pb-mx20.pobox.com; > arc=invalid > (as.1.list.sys4.de=invalid (public

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Wietse Venema via Postfix-users : > Gerald Galster via Postfix-users: > > > > >> Out of sheer curiosity ... Mailman 2 or 3? > > > > > > Mailman 3 with ARC support enabled. Additionally all listmail will be DKIM > > > signed. > > > > Do you plan to enable a public archive at > > https://list.