[pfx] Re: sendmail bounce messages

2023-06-08 Thread Víctor Rubiella Monfort via Postfix-users
As always, very grateful for your clarifications. El 8/6/23 a las 18:12, Wietse Venema via Postfix-users escribió: Wietse Venema via Postfix-users: Victor Rubiella Monfort via Postfix-users: Hi, I want to prevent that sendmail milter rejections generates bounces messages. Reading sendmail doc

[pfx] sendmail bounce messages

2023-06-08 Thread Víctor Rubiella Monfort via Postfix-users
Hi, I want to prevent that sendmail milter rejections generates bounces messages. Reading sendmail documentation I see "-N" option: echo "HELLO" | sendmail -N 'never' t...@test.es; echo $? 0 Jun  8 13:51:30 server.test postfix/cleanup[597560]: 077616620F: milter-reject: END-OF-MESSAGE from

[pfx] Re: logging strangeness

2023-05-16 Thread Víctor Rubiella Monfort via Postfix-users
Hi, But what about show user login? Currently we have issues when fail2ban blocks IPS for a high number or failed logins, but is a customer with several mail accounts and he don't know which bad-configured account is causing the ban. Would be so healpfull shows the sasl_username that produce

[pfx] temporary lookup error with utf8mb4 characters

2023-04-16 Thread Víctor Rubiella Monfort via Postfix-users
Hi, I have more info and I try to explain it better: First of all I have smtputf8_enable = no (disabled). I have several databases related with several mysql_virtual maps: - Some with utf8 + utf8_general_ci collation - Another ones with latin1 + latin1_spanish_ci. I'm using mysql-postfix (mys

[pfx] Re: temporary lookup error with utf8mb4 characters

2023-04-14 Thread Víctor Rubiella Monfort via Postfix-users
Hi, I have more info and I try to explain it better: First of all I have smtp_utf8 = no (disabled). I have several databases related with several mysql_virtual maps: - Some with utf8 + utf8_general_ci collation - Another ones with latin1 + latin1_spanish_ci. I'm using mysql-postfix (mysql_tab

[pfx] Re: temporary lookup error with utf8mb4 characters

2023-04-13 Thread Víctor Rubiella Monfort via Postfix-users
Hi again, I realized than same error is raised when database is in utf8 if email contains utf8mb4 characters. Which is the convenient database collation for postfix? We can force postfix to accept only utf8 characters?. El 13/4/23 a las 18:36, Víctor Rubiella Monfort via Postfix-users

[pfx] temporary lookup persistent after query collate error corrupt connection.

2023-04-13 Thread Víctor Rubiella Monfort via Postfix-users
When mysql_table lookup is executing nonascii characters and database is in latin1, not only fails query, all sesion/connection is corrupted and produces a lot of "temporary lookup table" errors until sesion is recreated (about 1 minute later). Today some external ip was trying to deliver an e

[pfx] warn_if_reject for milters equivalent?

2023-03-23 Thread Víctor Rubiella Monfort via Postfix-users
Hi!, There are any way to implement equivalent to "warn_id_reject" for milters? I'm deploying centralized spam milter on inet:X: and I would like to deploy as "dryrun" to evaluate rejections before full enable it, and activate it gradually on different servers. Thanks! __

bloquing phising MAIL FROM sender name

2022-11-07 Thread Víctor Rubiella Monfort
Hi! I'm having problems to block phishing email with this kind of header: From: "h...@mydomain.com ". I want to configure postifx to allow "mydomain.com" email only for certain IPS. I added this ips to smtpd_client_restrictions whitelist and added on smpd_sender_restrictions  mydomain.com R

Re: smtpd_sender_login_maps with variable SASL names

2022-07-05 Thread Víctor Rubiella Monfort
Hi, If helps, and your problem is than alias can be completly different than sasl, I'm just implementing several approach, and I configure 2 diferent maps hash:aliases.map em...@domain.tld alias,em...@domain.tld Another one with authorized domains: regexp:authdomains.map /.*@authorixed\.

Re: Separate domain sender reject for inbound and outbound

2022-06-22 Thread Víctor Rubiella Monfort
Totally true. Sorry and thanks! El 21/6/22 a las 19:20, Viktor Dukhovni escribió: smtpd_sender_restrictions =

Separate domain sender reject for inbound and outbound

2022-06-21 Thread Víctor Rubiella Monfort
Hi, I'm trying to define independent domain reject list for inboud than outbound: This works fine configuring: smtpd_sender_restrictions = permit_mynetworks, check_sender_access hash:/etc/postfix/domainslist_in Works ok, but for in and out with the same file. I have not found a way

Re: Restricting MAIL_FROM based on SASL login

2022-05-06 Thread Víctor Rubiella Monfort
Thanks for the proposals, the main problem is accounts names and domains could be totally different. I'm reconsidering this approach to add only selected accounts to able to cross domains, simplifing automation and increasing security. Although it requires more config for client. Thanks a lot.

Re: Restricting MAIL_FROM based on SASL login

2022-05-04 Thread Víctor Rubiella Monfort
El 4/5/22 a las 12:27, Matus UHLAR - fantomas escribió: On 04.05.22 10:50, Víctor Rubiella Monfort wrote: I'm working on a map for restrict MAIL_FROM declared on mail based on sasl user authenticated. For example if we want that all accounts for domain @domain1.com can define MAIL

Restricting MAIL_FROM based on SASL login

2022-05-04 Thread Víctor Rubiella Monfort
Hello, I'm working on a map for restrict MAIL_FROM declared on mail based on sasl user authenticated. For example if we want that all accounts for domain @domain1.com can define MAIL_FROM @domain1.com and @domain2.com accounts: @domain1.com accou...@domain1.com accou...@domain2.com accou..

Catch all deliveries

2022-02-22 Thread Víctor Rubiella Monfort
Hi, I'm changing postfix local delivery to LMTP dovecot delivery and I'm have some doubts: Before to move to LMTP I have something like this: virtual_mailbox_maps: h...@example.com maildir1/ ad...@example.com maildir2/  @example.com   maildir1/ This works ok with "@example.com" as catcha

Re: filter not being applied

2022-02-10 Thread Víctor Rubiella Monfort
when u send by localhost sendmail filters layers not raised. you need to send mail via regular smtp 25. El 10/2/22 a las 20:50, Edward Sandberg escribió: I am attempting to configure content filtering by following this guide: http://www.postfix.org/FILTER_README.html I have added the filter s

HIgh availability thougts

2022-02-08 Thread Víctor Rubiella Monfort
Hello, I continue working on redesign separate isolate postfix instantes on new highavailable architecture for inboud mail. At the moment I have functional PoC (Proof of concept) with this components: haproxy => postfix gateway => (SMTP/Relay) postfix (filtering) => (LMTP) dovecot The confi

Postfix high traffic (max proc) considerations

2022-02-07 Thread Víctor Rubiella Monfort
Hello, I'm was reading http://www.postfix.org/TUNING_README.html about increase number of process configurations related. We can increase smtp easly to 1000 connections for example to allow multiple incoming connections. But what about pickup and qmsg processes? by default is configuret to 1

Re: Inbound Mail Gateway Doubts

2022-01-27 Thread Víctor Rubiella Monfort
Thanks a lot Wietse and Viktor for quick and util responses!. bent smtpprox samples are so useful it's just what i was looking for. Consider recheck doc link on this page http://www.postfix.org/FILTER_README.html because is not upgraded (it's ok on http://www.postfix.org/SMTPD_PROXY_README.htm

Inbound Mail Gateway Doubts

2022-01-27 Thread Víctor Rubiella Monfort
Hi!, I'm working on redefine inbound mail delivery but I have some basic "mixconceptions". Now I have several separate inbound servers. I want to improve deploying MX gateway postfix gateways, improve content filtering, etc. First of all if someone can provide some links with more info about