[pfx] Re: Help In Interpreting Postfix Log Entry - Please

2025-02-24 Thread duluxoz via Postfix-users
On 25/2/25 16:12, Viktor Dukhovni via Postfix-users wrote: Well, it leaves us in a not entirely satisfactory situation, because it is still unclear what the haproxy health check sent to Postfix, and whether it should, or should not, have been accepted. Nor it is clear what inet_protocols your P

[pfx] Re: Help In Interpreting Postfix Log Entry - Please

2025-02-24 Thread duluxoz via Postfix-users
Hi All, So, first of all, thank you all for the input, suggestions, and help - its is greatly, *greatly* appreciated. After much toing-and-froing I finally tracked down the issue, and I'm happy to say it *wasn't* postfix causing the problem at all, but haproxy. In particular it was a (health

[pfx] Help In Interpreting Postfix Log Entry - Please

2025-02-23 Thread duluxoz via Postfix-users
Hi All, I need some help in interpreting the following postfix log message, please (this is showing up all over the log): `Feb 24 17:46:55 mail postfix/smtpd[77980]: fatal: smtpd_peer_hostaddr_to_sockaddr: cannot convert client address/port to string: Servname not supported for ai_socktype`

[pfx] Re: Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
On Sun, Jan 26, 2025 at 12:11:21AM +1100, duluxoz via Postfix-users wrote: ... so no, there's no separate "mail-hub" / "edge-mail-gateway" set-up - its all the one box with the haproxy box sitting in-front. Understood, that makes the consolidated edge/hub/submission/... se

[pfx] Re: Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
acklist" to be checked somewhere in smtpd_relay_restrictions, but I didn't say anything because I didn't want to "pollute" peoples mindsets if/when they replied... And thanks very much for the help  :-) On 25/1/25 23:43, Viktor Dukhovni via Postfix-users wrote: On Sa

[pfx] Re: Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
So, the internal email domain is used by both servers sending in email alerts/reports (to the sys-ops) and by users for internal organisation communication. Those users that require external email access also have an email account in an externally-facing domain, and usually use the appropriate

[pfx] Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
Hi All, I'm not sure how to go about doing this (what I'm about to describe below) so I'm hoping someone here can point me in the right direction. My postfix box hosts multiple email domains, including one which is fully internal to our network (ie does not receive nor send emails out onto t

[pfx] Re: Incorrect CN Being Reported When Using Postfix With MariaDB

2025-01-24 Thread duluxoz via Postfix-users
Thanks Victor, As I said, I didn't know if it was a Postfix, TLS Cert, or MariaDB issue. I'll post over in the MariaDB lists. On 24/1/25 18:24, Viktor Dukhovni via Postfix-users wrote: On Fri, Jan 24, 2025 at 03:30:43PM +1100, duluxoz via Postfix-users wrote: I'm using a Mar

[pfx] Incorrect CN Being Reported When Using Postfix With MariaDB

2025-01-23 Thread duluxoz via Postfix-users
Hi All, I'm not sure if this is a Postfix issue, a TLS Certificate issue, and/or a MariaDB issue, so I'm starting here - apologises if this is not the right place. I'm using a MariaDB backend to Postfix. Everything is working correctly until I attempt to secure the Postfix<->MariaDB connecti

[pfx] Postscreen & HAProxy Protocol v2

2023-12-06 Thread duluxoz via Postfix-users
Hi All, When using `postscreen_upstream_proxy_protocol = haproxy` is there anything "special" that needs to be specified to ensure the use of v2 of the haproxy protocol, or does postfix automatically detect which version of the haproxy protocol is in use? The doco isn't clear (to me, anyway).

[pfx] Re: SELinux/SMTP Relay Handshake Failure

2023-12-04 Thread duluxoz via Postfix-users
On 04/12/2023 19:44, Carsten Strotmann (sys4) via Postfix-users wrote: Hi Dulux-Oz, On 4 Dec 2023, at 9:20, duluxoz via Postfix-users wrote: Hi All, This issue is definitely SELinux related, because it only crops up when SELinux is enabled. I'm getting a `TLS handshake failed for se

[pfx] SELinux/SMTP Relay Handshake Failure

2023-12-04 Thread duluxoz via Postfix-users
Hi All, This issue is definitely SELinux related, because it only crops up when SELinux is enabled. I'm getting a `TLS handshake failed for service=smtp peer=[104.199.96.85]:587` error when attempting to rely via mailjet (that's who's IP that is) and also brevo/sendinblue. Any one have any

[pfx] Re: [ext] non_smtpd_milters = $smtpd_milters

2023-12-01 Thread duluxoz via Postfix-users
wondering if a piece of smtp mail went through both milter lists. Cheers On 01/12/2023 20:34, Ralf Hildebrandt via Postfix-users wrote: * duluxoz via Postfix-users: A quick question (just to clarify things in my own mind): If `non_smtpd_milters = $smtpd_milters`, does this mean that an email

[pfx] non_smtpd_milters = $smtpd_milters

2023-12-01 Thread duluxoz via Postfix-users
A quick question (just to clarify things in my own mind): If `non_smtpd_milters = $smtpd_milters`, does this mean that an email received on port 25 passes through the milters twice; once for the `smtpd_milters` (from the `smtpd(8)` process) and again for the `non_smtpd_milters` (from the `clea

[pfx] Re: Turn Off Verify Service?

2023-11-29 Thread duluxoz via Postfix-users
On 29/11/2023 20:14, Matus UHLAR - fantomas via Postfix-users wrote: On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the

[pfx] Re: Turn Off Verify Service?

2023-11-29 Thread duluxoz via Postfix-users
On 29/11/2023 19:45, Matus UHLAR - fantomas via Postfix-users wrote: On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the

[pfx] Re: Turn Off Verify Service?

2023-11-28 Thread duluxoz via Postfix-users
On 29/11/2023 15:38, Viktor Dukhovni via Postfix-users wrote: On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the master.cf

[pfx] Turn Off Verify Service?

2023-11-28 Thread duluxoz via Postfix-users
Hey All, I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the master.cf file. Is this actually good advice, or is there some sort of "gotcha" hiding in the background that'll bite us in the @rse? Th

[pfx] Re: TAKE NOTE 2: Future Let's Encrypt CA choice randomisation.

2023-11-23 Thread duluxoz via Postfix-users
Thanks Victor - so more t-shooting on our end, then - cool On 24/11/2023 04:16, Viktor Dukhovni via Postfix-users wrote: On Thu, Nov 23, 2023 at 07:48:33PM +1100, duluxoz via Postfix-users wrote: Hi All, This may be a stupid Q, but we're getting a `postfix/tlsproxy[89206]: TLS hand

[pfx] Re: TAKE NOTE 2: Future Let's Encrypt CA choice randomisation.

2023-11-23 Thread duluxoz via Postfix-users
Hi All, This may be a stupid Q, but we're getting a `postfix/tlsproxy[89206]: TLS handshake failed for service=smtp peer=[104.199.96.85]:25` error in our logs when trying to relay via an SMTP Relay Service (both Mailjet and Brevo/SendInBlue). Could our issue be related to this LE issue? On 1

[pfx] Postfix Options Override Or Add When In Both mater.cfg & main.cfg

2023-11-02 Thread duluxoz via Postfix-users
Hi All, Quick Q: Do the individual `-o` options in the `master.cfg` file *add to* or *override* the equivalent option in the `main.cfg` file? For eg: In the `master.cfg` file I've got a `-o smtpd_relay_restriction =` line with a couple of restrictions set on the `submission` service. I've go

[pfx] Re: No Permissions To TLS Certificates

2023-10-11 Thread duluxoz via Postfix-users
aving raised this issue, it now raises another Q in my mind: could this be something to do with SELinux interfering somehow (I'm not really up to speed on SELinux, unfortunately)? Cheers On 12/10/2023 01:40, Wietse Venema via Postfix-users wrote: duluxoz via Postfix-users: Oct 1

[pfx] No Permissions To TLS Certificates

2023-10-11 Thread duluxoz via Postfix-users
Hi All, Hoping someone can point me in the correct direction to solve this one (ie why is postfix "not playing well" with our TLS Certs) 🙂 This is all internal (ie NOT on the Internet), so the below logs, etc, have NOT been "edited" or obscured. We're running two (internal) email domains: m

[pfx] Re: Looking For Advice/Guidance

2023-09-09 Thread duluxoz via Postfix-users
Thanks Viktor On 10/09/2023 03:02, Viktor Dukhovni via Postfix-users wrote: On Sat, Sep 09, 2023 at 06:24:27PM +1000, duluxoz via Postfix-users wrote: ***My Questions*** In the mail.example.local's postfix main.cf file: 1. Should mydomin be set to example.local or one of the external f

[pfx] Looking For Advice/Guidance

2023-09-09 Thread duluxoz via Postfix-users
Hi All, I'm looking for some advice / guidance / help / whatever in making sure that I'm setting up my postfix installation correctly. I've gone through various on-line tutorials and read just about all of the postfix doco, but I'm still unsure / confused about exactly how to set a couple of

[pfx] Requesting A Sanity Check, Please, + A Couple Of Qs

2023-03-23 Thread duluxoz via Postfix-users
Hi All, TL:DR: Could someone(s) please have a look-see at our config as a sanity check for us, and also answer the questions at the end of this post - thanks. So we're finally putting in an email stack and while I've read just about every tutorial I can find on the web - and read *all* of th

[pfx] Test Post - Please Ignore

2023-03-22 Thread duluxoz via Postfix-users
Thanks Guys  :-)___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Test Post - Please Ignore

2023-03-22 Thread duluxoz via Postfix-users
Sorry Everyone, but I need to test if my posts are going through Please ignore (or feel free to send me a confirmation) Cheers Dulux-Oz ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@pos