Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Sean Greenslade
On Fri, May 08, 2020 at 06:38:32PM +0200, michae...@rocketmail.com wrote: > Hi all, > > > I've a generic question to all more experienced than me postfix users here: > Is it nowadays (reasonable) possible to run postfix with IPv6 only? E.g > "mail.example.com" and "smtp.example.com" with only

Re: Does postfix reject spoofed senders?

2018-03-30 Thread Sean Greenslade
On Fri, Mar 30, 2018 at 08:38:34AM +0200, Lorenzo Petracchi wrote: > In the last few weeks our e-mail users are receiving many messages with > their own address as From header. > > I understand that there are many legitimate reasons why the From header is > free but I would like to understand if i

Re: Execute linux commands after receive a mail...

2017-03-17 Thread Sean Greenslade
On Thu, Mar 16, 2017 at 05:48:49PM -0700, li...@lazygranch.com wrote: > I had no idea you could receive email on any port. I wonder how many > ISPs allow this. Sure, you can run any service on any port. The default ports (e.g. 25 for SMTP) are simply there to make interoperability easy. Most ISPs

Re: Was the Dovecot working well?

2016-11-15 Thread Sean Greenslade
On Tue, Nov 15, 2016 at 04:21:17AM -0500, Ron Wheeler wrote: > Fail2ban might be able to do the whack-a-mole in a sensible manner that > allowed for innocent interruptions but banned the bad guys For the kind of attempts I typically see, F2B won't do much. It's usually not a brute force type of at

Re: Was the Dovecot working well?

2016-11-14 Thread Sean Greenslade
On Mon, Nov 14, 2016 at 08:21:24PM -0800, vod vos wrote: > so are there any configurations to auto ban this kind of visit, like postfix > postscreen? > > or, I should write firewall rules to do the job? I don't know if dovecot provides such functionality. I personally don't bother, since it quic

Re: Was the Dovecot working well?

2016-11-14 Thread Sean Greenslade
On Mon, Nov 14, 2016 at 06:39:08PM -0800, vod vos wrote: > Hi, > > > > when I read the mail.log, I found: > > > > > > Nov 14 14:45:45 mail dovecot: pop3-login: Disconnected (no auth attempts in 2 > secs): user=<>, rip=96.126.111.38, lip=108.61.22.11, TLS handshaking: > SSL_accept() syscal

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Sean Greenslade
On Tue, Oct 04, 2016 at 05:37:33PM +1300, Peter wrote: > The main problem with this is that one of the primary advantages to > using a DNSRBL is that it sits in front of SpamAssassin. DNSRBL > blockign does not require deep inspection of message content so it can > be checked first and clients blo

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Sean Greenslade
On Mon, Oct 03, 2016 at 02:59:08PM -0400, Fongaboo wrote: > > On Mon, 3 Oct 2016, Sean Greenslade wrote: > > > I personally don't use RBLs as hard blocks. Instead, I have them set up > > in my spam filter (SpamAssassin) with different weights. That way, if > > on

Re: sorbs.net blacklist too aggressive?

2016-10-03 Thread Sean Greenslade
On Mon, Oct 03, 2016 at 01:47:28PM -0400, Fongaboo wrote: > > I'm running Postfix 2.11.7 on FreeBSD 10.2-RELEASE. > > Just wanted to get folks' opinions/rationale/thoughts on behavior of some of > the RBL's. > > Specifically SORBS.NET... I first set up my server using a popular FreeBSD > tutoria

Re: Make Posfix Small Business

2016-09-23 Thread Sean Greenslade
On Fri, Sep 23, 2016 at 07:25:26PM -0300, Rodrigo Cunha wrote: > Message in ingles: > Hello Julio, i want to create a product with postfix...but i dont know if > this product is easy to sell.I think create a mail relays for mailmarketing > products.Usualli my local customers uses google mail servic

Re: Make Posfix Small Business

2016-09-23 Thread Sean Greenslade
On Fri, Sep 23, 2016 at 06:31:35PM -0300, Rodrigo Cunha wrote: > Hello everybody, > i'm from Brasil and i have a questions about business services with postfix > in small costumers. > I worked a postfix in helpdesk and suport, but i have today in my city many > enterprises migration your services f

Re: Brute-Force countermeasures with Postfix

2016-09-20 Thread Sean Greenslade
On Tue, Sep 20, 2016 at 12:03:37PM +0200, felderm wrote: > Hi All > > We operate multiple Postfix instances behind HA-Proxies. The haproxy > upstream protocol is enabled: > > smtpd_upstream_proxy_protocol=haproxy > (the IPs of the HA-proxies are in mynetworks) > > There are brute-force attacks a

Re: Moved Postfix to new server; Gmail now silently dropping messages sent from it

2016-09-20 Thread Sean Greenslade
On Tue, Sep 20, 2016 at 05:30:27PM -0400, Alex Hall wrote: > > Bottom line: on one server, everything was great. On my company's virtual > server, with the same configuration, packages, and settings, mail sent out > is silently discarded by Gmail when delivered to anyone on the company's > domain.

Re: advice on securing a transport

2016-09-05 Thread Sean Greenslade
On Mon, Sep 05, 2016 at 08:17:40PM +0200, Sebastian Nielsen wrote: > Sean Greenslade: > Thats the responsibility of the server who is authorized to act on behalf of > that domain. Yes, however I am trying to make this discussion relevant to the OP's question. Authenticating b

Re: SV: advice on securing a transport

2016-09-05 Thread Sean Greenslade
On Mon, Sep 05, 2016 at 07:23:10PM +0200, Sebastian Nielsen wrote: > No, you're wrong. What the OP should do, is to enforce SPF/DKIM on > specific RECEIVERS. For example, enforcing SPF/DKIM on for example > webappad...@example.org. It's important to remember what each step is actually authenticati

Re: advice on securing a transport

2016-09-05 Thread Sean Greenslade
On Mon, Sep 05, 2016 at 07:52:02PM +0800, Eric Abrahamsen wrote: > I have a postfix/dovecot installation on the same server as my company's > webapp. This webapp involves a lot of regular data entry, which is a > real pain to do using HTML forms. What I would really like to do is be > able to send

Re: Porn spam killer PCRE

2016-08-27 Thread Sean Greenslade
On Sat, Aug 27, 2016 at 05:27:18PM +0300, Nikolaos Milas wrote: > Thank you Sean for all your help. > > I am focusing on amavisd-new / spamassassin for my efforts. > > I have started a thread in the amavisd-new users mailing list, since > bayesian filtering is off-topic here. > > However, before

Re: Porn spam killer PCRE

2016-08-25 Thread Sean Greenslade
On Thu, Aug 25, 2016 at 05:28:35PM +0300, Nikolaos Milas wrote: > On 23/8/2016 11:58 μμ, Sean Greenslade wrote: > > > Hope this is helpful, > > Thanks Sean for your time and eagerness to help. I appreciate it. > > I am planning to try your suggestions. > > I am

Re: Porn spam killer PCRE

2016-08-23 Thread Sean Greenslade
On Tue, Aug 23, 2016 at 11:27:39PM +0300, Nikolaos Milas wrote: > On 20/8/2016 7:56 μμ, Sean Greenslade wrote: > > > ... > > - Enable & configure per-user bayesan filtering > > - Increase allowed storage space for bayesan databases > > - Update a particular per

Re: Porn spam killer PCRE

2016-08-20 Thread Sean Greenslade
On Fri, Aug 19, 2016 at 04:30:38PM +0300, Nikolaos Milas wrote: > > We are already using postscreen, many RBLs, the fqrdns.pcre, amavis, > spamassassin with scamp and we are filtering about 60-70% of total incoming > mail as spam, but there is still much more that should be filtered out. > > Any

Re: User interactive verification

2016-08-16 Thread Sean Greenslade
On August 16, 2016 4:52:22 PM EDT, Keith Williams wrote: >Hi Sean, > >Thank you for your advise, your folder solution is brilliant and >simple. >Sometimes I tend to over think the problem. > >That is going to work perfectly for my users. > >Regards, Glad I could help. --Sean

Re: User interactive verification

2016-08-16 Thread Sean Greenslade
On Tue, Aug 16, 2016 at 08:22:54PM +0200, Keith Williams wrote: > Hi all, > > I was wondering if someone might be able to point me in the right direction > as my searches proved fruitless. > > I am looking for a email verification system for postfix, but with a twist. > Not referring to http://ww