[pfx] relayhost might not be reachable for weeks, long maximal_queue_lifetime as solution?

Hello, I have a system that happens to be disconnected from my LAN for 2 or 3 weeks, from time to time. I use Postfix to process mail generated locally, e.g. reports from unattended-upgrades. All email is then sent to my regular mail server which I, therefore, have configured as relayhost: re

[pfx] Re: [RFC, sketch] IPv6 only trust of mail network

Hi Nico, I'm a bit worried about offering/selling IPv6-only "email" services to customers, fully independent of your web of trust idea: A large fraction of the SME (small and medium sized enterprises) and public service operators, whose networks I know from supporting some business-related sof

[pfx] Re: RFC logs_check

Hi, You could use a custom Fail2Ban regular expression to ban IP addresses that cause Postfix log entries containing certain domain names. See https://en.wikipedia.org/wiki/Fail2ban https://fail2ban.readthedocs.io/en/latest/filters.html Yours, Reg > Gesendet: Dienstag, 23. Juli 2024 um 23:14 U

[pfx] Re: Postfix authenticated sender and From: header verification

> For now, enforcement of pipelining is actually available, while > enforcement of vs. is still only a hypothetical. As an average user without any special or legacy systems, I'd appreciate if one could configure Postfix as safe and secure as possible regarding this issue. So I'd value being o

[pfx] Multiple cascaded lookup tables for check_recipient_access possible?

Hello, Does Postfix support specifying multiple lookup tables for check_recipient_access? (If there's no match in the first table, look up in the next one.) smtpd_recipient_restrictions = reject_unauth_pipelining, reject_invalid_helo_hostname, reject_unknown_recipient_dom

[pfx] Mail archival like with always_bcc, but different BCC destinations by virtual mailbox domains

Hello, I have a Postfix installation for virtual mailboxes. It is the mail server (inbound MX and outbound) for a few domains. The server allows submission with SMTP AUTH (Dovecot SASL). At the moment I use always_bcc to "copy" / mirror any inbound AND outbound emails into an archive maildir.