[pfx] Re: SELinux silently breaking Postfix settings

2025-01-31 Thread Thomas Cameron via Postfix-users
s a ton of value for the folks on the list to hear me blathering on until I have a solution. ;-) Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SELinux silently breaking Postfix settings

2025-01-30 Thread Thomas Cameron via Postfix-users
cally also distributed, are not well documented, and don't seem to be a supported way to adjust the policy. I've concluded that the only rational choice to turn SELinux off. Foolish conclusion, but... not my circus, not my monkeys. Thomas __

[pfx] Re: SELinux silently breaking Postfix settings

2025-01-29 Thread Thomas Cameron via Postfix-users
ogged, and the tools for finding those errors and explanations as to how to fix them. Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SELinux silently breaking Postfix settings

2025-01-29 Thread Thomas Cameron via Postfix-users
adding files to the SELinux policy), or remediation (think help with building exceptions or policy modules). Feel free to reach out to me at work at tho...@redhat.com or on this list. Thanks, Thomas On 1/29/25 10:11 AM, Wietse Venema via Postfix-users wrote: There are more than a few places in

[pfx] Re: Docs: Improve delay_logging_resolution_limit

2024-11-26 Thread Thomas Landauer via Postfix-users
kers anyway. And I bet if you ask 100 users "What does round off 4.6 mean?", you will not get all 100 answers saying 5. So I still think the table says it all and is unambiguous for everybody. But OK, you're the boss ;-) Thanks! Cheers, Thomas __

[pfx] Re: Docs: Improve delay_logging_resolution_limit

2024-11-24 Thread Thomas Landauer via Postfix-users
ff" is mainly used in a non-mathematical context, e.g. "round off the evening". The function we're talking about is called "round" in all programming languages (even in MS Excel :-) and I'm sure that's the terminology must people here are used to. Thank

[pfx] Re: Pipe Transport: Answer with 500 instead of sending a bounce?

2024-11-24 Thread Thomas Landauer via Postfix-users
Hi, thanks - this is indeed better, since it just collects all messages in the deferred queue meanwhile. I was bound to the idea of informing connecting clients of the outage, but this indeed doesn't make much sense... ;-) Cheers, Thomas Am 21.11.24 um 13:26 schrieb Ralph Seichte

[pfx] Re: Pipe Transport: Answer with 500 instead of sending a bounce?

2024-11-21 Thread Thomas Landauer via Postfix-users
o requires: smtpd_delay_reject = no So maybe you could introduce a dedicated option for that?: Answer with 400 to everything, with a custom message. Cheers, Thomas Am 19.11.24 um 22:49 schrieb Wietse Venema: Thomas Landauer via Postfix-users: Hi, when handing over incoming messages to an extern

[pfx] Re: Docs: Improve delay_logging_resolution_limit

2024-11-21 Thread Thomas Landauer via Postfix-users
nd off" is misleading - should be just "round". And (while you're at it :-) please add a note to all options that have a differing behavior under overload, that the overload limit cannot be changed; this is not 100% clear IMO. Cheers, Thomas __

[pfx] Docs: Improve delay_logging_resolution_limit

2024-11-20 Thread Thomas Landauer via Postfix-users
quot;? Besides, it looks like the parameter doesn't refer to the "number of digits after the decimal point", but rather the total digits (before plus after the comma). And please replace "rounded off" by "rounded down" (I guess), since "round off" is

[pfx] Pipe Transport: Answer with 500 instead of sending a bounce?

2024-11-19 Thread Thomas Landauer via Postfix-users
queued as...` and sending a bounce? As I understand it, every mail is handed over to Postfix'es `qmgr`, which works asynchronously/independently of the SMTP session - but maybe there's a way around this? Thanks!! -- Cheers, Thomas ___ P

[pfx] Re: PSA: Access to www.postfix.org on 2024-11-27

2024-11-14 Thread Thomas Cameron via Postfix-users
On 11/14/24 3:02 PM, Wietse Venema via Postfix-users wrote: Thomas Cameron via Postfix-users: On 11/14/24 4:12 AM, Ralph Seichter via Postfix-users wrote: I have been notified about datacenter maintenance which will disrupt access to www.postfix.org. Maintenance is planned for 2024-11-27

[pfx] Re: PSA: Access to www.postfix.org on 2024-11-27

2024-11-14 Thread Thomas Cameron via Postfix-users
sure that nobody is going to be surprised. -Ralph Can someone set up a CNAME or alias for https://www.postfix.org so that https://postfix.org works? -- Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to

[pfx] Re: Suggestion: Allow prefixing the Queue-ID with a custom string

2024-11-07 Thread Thomas Landauer via Postfix-users
log) would really be cool! :-) Cheers, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Suggestion: Allow prefixing the Queue-ID with a custom string

2024-11-05 Thread Thomas Landauer via Postfix-users
kind of mail it is. Since you're creating the queue ID only after `RCPT TO`, we have the sender's and the main recipient's address at hand - that would be enough to set up something like a `queue_id_prefix_map` :-) BTW: Why don't you `enable_long_queue_ids`

[pfx] Suggestion: Allow adding `from=` to the line in the logfile containing `status=`

2024-11-04 Thread Thomas Landauer via Postfix-users
line with `from`, 1 line for each `to`). But the line that really matters (at least to me :-) is the one with `status=` - so it would be nice if this one would hold more information. Maybe through a user-defined option? Thanks! -- Cheers, Thomas ___ Pos

[pfx] Suggestion: Allow prefixing the Queue-ID with a custom string

2024-11-04 Thread Thomas Landauer via Postfix-users
efore Postfix receives the message content? After which SMTP command? Thanks! -- Cheers, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Suggestion: Add lifecycle events / pipe each logfile entry to external command

2024-11-04 Thread Thomas Landauer via Postfix-users
Hi, thanks for the hints, guys - I went for rsyslog omprog and it looks good so far :-) -- Cheers, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: `postfix-pgsql`: Issues with expansion parameters `%s`, `%u` and `%d`, and some minor bugs(?)

2024-11-04 Thread Thomas Landauer via Postfix-users
Hi, thanks for the hint with the `domain` option! :-) I had missed that :-( -- Cheers, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix Website

2024-11-01 Thread Thomas Cameron via Postfix-users
On 11/1/24 4:01 PM, Zachary Appella via Postfix-users wrote: Is it just me, or has the postfix website been down for months? Works for me. But you have to go to https://www.postfix.org, not just https://postfix.org. -- Thomas ___ Postfix-users

[pfx] Suggestion: Add lifecycle events / pipe each logfile entry to external command

2024-10-31 Thread Thomas Landauer via Postfix-users
writing them to a file) send the logfile entries to that command. Thanks! -- Cheers, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: `postfix-pgsql`: Issues with expansion parameters `%s`, `%u` and `%d`, and some minor bugs(?)

2024-10-31 Thread Thomas Landauer via Postfix-users
_part in bar.com's table. This will certainly work, but I'm wondering if there's a more straightforward way than the `'foo.com' = '%d'` hack. Thanks!! -- Cheers, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: `postfix-pgsql`: Issues with expansion parameters `%s`, `%u` and `%d`, and some minor bugs(?)

2024-10-25 Thread Thomas Landauer via Postfix-users
IN1. Then it would be clearer IMO :-) -- Cheers, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: `postfix-pgsql`: Issues with expansion parameters `%s`, `%u` and `%d`, and some minor bugs(?)

2024-10-25 Thread Thomas Landauer via Postfix-users
n I would suggest to just make `dbname` not required anymore, and that's it. Cause when user & password are optional, and dbname is required, that's a little strange, isn't it? -- Cheers, Thomas ___ Postfix-users mailing list -- postfix-u

[pfx] `postfix-pgsql`: Issues with expansion parameters `%s`, `%u` and `%d`, and some minor bugs(?)

2024-10-24 Thread Thomas Landauer via Postfix-users
SSL connection has been closed unexpectedly? Why is an SSL connection tried to localhost? (I didn't set the `sslmode` parameter, see 2) * Postfix version: 3.7.11 * postfix-pgsql/stable,stable,now 3.7.11-0+deb12u1 amd64 [installed] * Entry in `main.cf`: local_recipient_maps = regexp:/

[pfx] Re: Rejecting by top level domain?

2024-09-06 Thread Thomas Cameron via Postfix-users
too deeply. It sounds really helpful. I'm going to take this as my cue to spin up a development machine and start hammering on it. With all my free time. ;-) -- Thanks! Thomas Cameron, RHCE, AWS SA-Pro ___ Postfix-users mailing list -- postfix-use

[pfx] Re: Rejecting by top level domain?

2024-09-05 Thread Thomas Cameron via Postfix-users
it's not practical for our use. But I like the idea a lot. -- Thanks! Thomas Cameron, RHCE, AWS SA-Pro ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Rejecting by top level domain?

2024-09-05 Thread Thomas Cameron via Postfix-users
On 9/5/24 12:53 PM, Noel Jones via Postfix-users wrote: On 9/5/2024 12:45 PM, Noel Jones via Postfix-users wrote: On 9/5/2024 9:05 AM, Thomas Cameron via Postfix-users wrote: smtpd_recipient_restrictions = check_sender_access regexp:/etc/postfix/sender_access permit_mynetworks

[pfx] Re: Rejecting by top level domain?

2024-09-05 Thread Thomas Cameron via Postfix-users
On 9/5/24 12:19 PM, Bastian Blank via Postfix-users wrote: Hi My sender_access file looks like this: /@*.onmicrosoft\.com/ REJECT /\.pro$/ REJECT We reject all .pro domains. Contact thomas dot cameron at camerontech dot com from a trusted email service if you need assistance. You

[pfx] Re: Rejecting by top level domain?

2024-09-05 Thread Thomas Cameron via Postfix-users
On 9/5/24 10:20 AM, Serhii via Postfix-users wrote: 2024-09-05T14:07:05Z Thomas Cameron via Postfix-users : Am I smoking crack? Or is this pretty reasonable? Or should I just knuckle down and set up Spamassassin or some other anti-spam tool (I'm totally open to suggestions, I just

[pfx] Rejecting by top level domain?

2024-09-05 Thread Thomas Cameron via Postfix-users
= $smtpd_milters milter_default_action = accept So my overarching question is, am I being dense by rejecting these spammy domains? My sender_access file looks like this: /@*.onmicrosoft\.com/ REJECT /\.pro$/ REJECT We reject all .pro domains. Contact thomas dot cameron at camerontech dot com from a

[pfx] Re: Postfix ignores message id when threaded bounces are enabled if RFC-5322 header folding is used

2024-09-05 Thread Thomas Mörbauer via Postfix-users
re are no clear cut rules on what to do with folding in the >middle of the Message-ID payload, and it has long been obsolete, >so just tolerating whitespace after the header label should >be sufficient. I agree on that. Is there any fix for this special case in sight or would you accept

[pfx] Re: Postfix ignores message id when threaded bounces are enabled if RFC-5322 header folding is used

2024-09-05 Thread Thomas Mörbauer via Postfix-users
For example Message-ID: would not be written into the In-Reply-To. So a simple crlf with space. Thomas - Original Message - From: "Wietse Venema via Postfix-users" To: "Postfix users" Sent: Thursday, 5 September, 2024 14:12:32 Subject: [pfx] Re: Postfix ign

[pfx] Postfix ignores message id when threaded bounces are enabled if RFC-5322 header folding is used

2024-09-05 Thread Thomas Mörbauer via Postfix-users
intended behavior to only allow single-line message-ids? Kind regards, Thomas. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-11-02 Thread Thomas Wagner via Postfix-users
> This can be verified on Solaris with: > > /usr/bin/elfdump -re 'dyn:' path/to/binary_or_library sorry, this must read: (solaris elfedit in read-only-mode) /usr/bin/elfedit -re 'dyn:' path/to/binary_or_library ___ Postfix-users mailing list

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-11-02 Thread Thomas Wagner via Postfix-users
needed. or check what the actual run would load with: ldd -r path/to/binary_or_library or watch the whole lengthy search-and-load process the runtime linker does: LD_DEBUG=files,libs path/to/binary (or even: LD_DEBUG=files,libs,bindings path/to/binary) Even a daemon not normally called by the user should output useful information to verify linking to correct library entities. Regards, Thomas ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

Re: I got an email from "myself?" what the heck!

2021-10-24 Thread Thomas Anderson
The IP it came from was outside my network. I think it's just a spoofing email. I had not actually seen on, so that raised my alarm, but I think it's ok. I need to go through and make sure my SFP and DMARC are sound. I just checked my DKIM couple days ago, so that's good. Thanks for the repl

I got an email from "myself?" what the heck!

2021-10-24 Thread Thomas Anderson
Yes, it was spam, and it was caught by SpamAssassin. It was some bitcoin plot or something. The characters were not anything I could read, and the few I could make out were of a south-east asian descent. My concern is that the email APPEARED to come from me! I was listed as the sender. I e

Re: can't send to GSuite mailserver via IPv6 protocol

2021-03-01 Thread Thomas
Please see this description which is similar to mine: https://serverfault.com/questions/655250/gmail-bouncing-mail-sent-over-ipv6-ipv4-working And the answers look interesting. Regards.

Re: can't send to GSuite mailserver via IPv6 protocol

2021-03-01 Thread Thomas
No I don't have reverse DNS record for IPv6. I will try that. thank you. On Mon, Mar 1, 2021, at 4:44 PM, Erwan David wrote: > Le 01/03/2021 à 07:01, Philip a écrit : > > > > If IPv4 works then maybe IPv6 isn't set up? > > > > ping6 ipv6.google.com >

can't send to GSuite mailserver via IPv6 protocol

2021-02-28 Thread Thomas
Postfix can't send email to gsuite's MTA via IPV6 interface. But if I change this item to: inet_protocols = ipv4 It works. Can you help explain this? Thank you.

Re: Question about nested LDAP queries

2021-01-08 Thread Thomas GUIRRIEC
Best regards. Le 07/01/2021 à 23:04, Viktor Dukhovni a écrit : On Thu, Jan 07, 2021 at 10:24:23PM +0100, Thomas GUIRRIEC wrote: I have configured Postfix  (3.5.8 from Alpine Linux) with "recipient_canonical_classes = envelope_recipient" & "recipient_canonical_maps = ldap:/etc

Question about nested LDAP queries

2021-01-07 Thread Thomas GUIRRIEC
-recipi...@guirriec.fr cleanup[86]: mail_addr_map:bob-recipi...@guirriec.fr -> 0:bob-recipi...@guirriec.fr cleanup[86]: been_here:rfc822;b...@guirriec.fr?0?b...@guirriec.fr?bob-recipi...@guirriec.fr: 0 cleanup[86]: initial envelope M I don't understand why Postix does the second LDAP Query with (mail=bob-recipi...@guirriec.fr) filter . Can someone explain me ? Best regards. Thomas

Re: noreply email technisch und für Empfänger zum Ausdruck bringen

2020-05-28 Thread Thomas
Am 23.05.20 um 18:00 schrieb Ralph Seichter: From: Thomas Mustermann with the address nore...@domain.tld being *unknown* on your MX. That should result in a generic 5xx rejection. If you want more control over the rejection message, you can use something like the following: # /etc

Re: noreply email technisch und für Empfänger zum Ausdruck bringen

2020-05-28 Thread Thomas
Am 28.05.20 um 23:48 schrieb @lbutlr: On 28 May 2020, at 15:29, Thomas wrote: I of cource use my own domain where I pay for. Yes, but read the rest of what I wrote, especially the parts I've highlighted: Do not create a fake address with someone else's domain. Do not use mu

Re: noreply email technisch und für Empfänger zum Ausdruck bringen

2020-05-28 Thread Thomas
Am 25.05.20 um 16:17 schrieb Jaroslaw Rafa: Dnia 25.05.2020 o godz. 14:33:36 Thomas pisze: FAX is much better because FAX is same as letter and working digital, nearly 100% yes or no. Email I did not know if it is arrived, [...] What do you actually want to achieve? Because from your

Re: noreply email technisch und für Empfänger zum Ausdruck bringen

2020-05-28 Thread Thomas
Am 27.05.20 um 17:20 schrieb @lbutlr: As I said, use a valid domain THAT YOU CONTROL. Hi, I of cource use my own domain where I pay for. thanks

Re: noreply email technisch und für Empfänger zum Ausdruck bringen

2020-05-25 Thread Thomas
Am 24.05.20 um 17:19 schrieb @lbutlr: On 23 May 2020, at 08:52, Thomas wrote: or The norm is to use an address along the lines you describe there. I use no-reply@. Emails to that address are accepted and discarded. Do not use a fake domain or someone else's domain, of course. Yo

Re: noreply email technisch und für Empfänger zum Ausdruck bringen

2020-05-25 Thread Thomas
Am 24.05.20 um 17:19 schrieb @lbutlr: On 23 May 2020, at 08:52, Thomas wrote: or The norm is to use an address along the lines you describe there. I use no-reply@. Emails to that address are accepted and discarded. Do not use a fake domain or someone else's domain, of course. Yo

Re: noreply email technisch und f??r Empf??nger zum Ausdruck bringen

2020-05-23 Thread Thomas
<> USE LETTER AND STAMP or that her understand if he receive my Email, and second I should use 5XX if he answer if he will not understand? best regards Thomas

Re: noreply email technisch und f??r Empf??nger zum Ausdruck bringen

2020-05-23 Thread Thomas
oh, sorry, I wanted to send my question to german mailing list. Thomas Am 23.05.20 um 14:17 schrieb Claus Assmann: Please use an address for which you can receive at least non delivery status information. Otherwise, why do you expect the recipient to handle your non-replyable address in any

noreply email technisch und für Empfänger zum Ausdruck bringen

2020-05-23 Thread Thomas
Hallo, ich sende ab und an etwas an Ämter vorab. Die kommen mittlerweile sogar mit pdf zurecht! Vorab per Email (früher vorab per FAX), steht auch so im Briefkopf und dann zusätzlich als normalen Brief. Manchmal eben auch per Einschreiben statt Brief, kommt auf die Üblichkeit/Wichtigkeit an.

Re: Postfix is trying to access the aliases table in my db with a wrong file name and directory. t.s.

2020-05-15 Thread Thomas Strike
On 5/14/20 3:08 PM, Wietse Venema wrote: Wietse Venema: Thomas Strike: Thought: I am assuming that Postfix is only reading from the main.cf and master.cf files. Could it be possible that Postfix is trying to use main.cf* and master.cf*? On 5/14/20 12:28 PM, Wietse Venema wrote: Type "po

Re: I am having an email I'm trying to post here bounce for no apparent reason.

2020-05-14 Thread Thomas Strike
On 5/14/20 2:51 PM, Wietse Venema wrote: Thomas Strike: The following cryptic line is given as the reason; . . . . BOUNCE postfix-users@postfix.org: Admin request of type /^\s*config\b/i at line 3 How do I correct this? Look at line 3 of the rejected email message

Re: Postfix is trying to access the aliases table in my db with a wrong file name and directory. t.s.

2020-05-14 Thread Thomas Strike
Which logs are you talking about. After setting up Postfix and Dovcot, everything reports to var/log/maillog. Postfix doesn't report it's conf files that it loaded from there, only that it reloaded. Is there other logs hidden somewhere? On 5/14/20 12:28 PM, Wietse Venema wrote: Tho

Re: I am having an email I'm trying to post here bounce for no apparent reason.

2020-05-14 Thread Thomas Strike
On 5/14/20 2:33 PM, Ralph Seichter wrote: * Thomas Strike: The following cryptic line is given as the reason Not quite cryptic, just a regular expression. ;-) Make sure your subject line does not match this expression (the first case-insensitive word of the subject, after 0-n optional

I am having an email I'm trying to post here bounce for no apparent reason.

2020-05-14 Thread Thomas Strike
The following cryptic line is given as the reason; . . . . BOUNCE postfix-users@postfix.org: Admin request of type /^\s*config\b/i at line 3 How do I correct this?

Re: Postfix is trying to access the aliases table in my db with a wrong file name and directory. t.s.

2020-05-14 Thread Thomas Strike
f -x | egrep 'mysql-aliases.cf' nothing found. 3. postconf -M | egrep 'mysql-aliases.cf' nothing found. By the way, I do appreciate all the help I can get. Thanks, Tom On 5/14/20 12:37 PM, Viktor Dukhovni wrote: On Thu, May 14, 2020 at 12:06:34PM -0500, Thomas Strike wrot

Re: Postfix is trying to access the aliases table in my db with a wrong file name and directory. t.s.

2020-05-14 Thread Thomas Strike
On 5/14/20 2:18 AM, Viktor Dukhovni wrote: Have you looked in master.cf? Are you looking at the right main.cf file? Look in the output of "postconf -n" and "postconf -M". Yes. and postconf doesn't list this path/file in any -n, -m, -M, -p, or -d.  I have only one main.cf and one master.cf fi

Re: Postfix is trying to access the aliases table in my db with a wrong file name and directory. t.s.

2020-05-14 Thread Thomas Strike
On 5/13/20 4:29 PM, Viktor Dukhovni wrote: On Wed, May 13, 2020 at 03:42:47PM -0500, Thomas Strike wrote: Postfix is trying to access the aliases table in the postfix db with a wrong file name and directory. I thought I had this fixed yesterday but it is showing up again today. I changed the

Postfix is trying to access the aliases table in my db with a wrong file name and directory. t.s.

2020-05-13 Thread Thomas Strike
Postfix is trying to access the aliases table in the postfix db with a wrong file name and directory. I thought I had this fixed yesterday but it is showing up again today. I changed the property, alias_maps = /etc/postfix/mysql-aliases.cf to mysql:/etc/postfix/sql/mysql_virtual_alias_maps.cf,

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-09 Thread Thomas Quinot
the removal of the feature from the unstable release; what I was wondering was whether the use of an external policy server was the appropriate/recommended approach. Thomas.

Re: BCC on local delivery agent?

2020-05-09 Thread Thomas Strike
Me to. There is something about writing out your problem in detail that provides a moment of clarity. On 5/9/20 1:40 AM, @lbutlr wrote: On 08 May 2020, at 02:54, Admin Beckspaced wrote: ups ... I think I can answer my own question? Why is it that the answer mostly comes once the email has bee

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Thomas Quinot
or the record, the change I was referring to is the following: 20200316 Removed the issuer_cn and subject_cn matches from check_ccert_access. Files: smtpd/smtpd_check.c, proto/postconf.proto. Thomas.

mysql postfix table "alias_domain" was created PostfixAdmin but it is empty. t.s.

2020-05-08 Thread Thomas Strike
I installed PostfixAdmin with postfix and mariadb. After PostfixAdmin set up the database, I populated it with adding domains and users through the PostfixAdmin web interface. It seemed to write all the data required to all the tables except the alias_domain table which is empty. Does Postfix u

Re: mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Thomas Strike
>On postfix itself you can use regular blocklists to prevent such obvious IPs. For the other services like imap etc. it helps to use fail2ban. I have all filtering that I know of off right now. I am just trying to establish incoming communication with other SMTP clients right now. Once I get

Re: mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Thomas Strike
Matus: your right. I misused the word server. I thought that this was the test message being sent with gmail because every time I sent a new test, this IP came up in the maillog. This turns out to be a Russian IP. Geez, Louise! I have Russia trying to hack me.

mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Thomas Strike
External smtp servers time out after tls v1.2 is established. the following is from the maillog; May  8 17:40:48 sleepyvalley postfix/smtps/smtpd[17534]: connect from unknown[185.50.149.12] May  8 17:40:50 sleepyvalley postfix/smtps/smtpd[17534]: Anonymous TLS connection established from unkno

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Thomas Quinot
of the client certificate is no longer built-in? Should this use case be handled using an external policy server? Thomas.

Is it necessary to declare "alias_maps" in the main.cf? t.s.

2020-05-08 Thread Thomas Strike
With all the problems that I'm having with my Postfix setup, I am taking a deeper dive into the meaning of each parameter declaration. Is it necessary to declare "alias_maps" in the main.cf or does it have a default file path that it looks to or does it just not look at alias_maps if not declare

Is it necessary to declare "alias_maps" in the main.cf? t.s.

2020-05-08 Thread Thomas Strike
With all the problems that I'm having with my Postfix setup, I am taking a deeper dive into the meaning of each parameter declaration. Is it necessary to declare "alias_maps" in the main.cf or does it have a default file path that it looks to or does it just not look at alias_maps if not declare

function difference between and access_recipient

2020-02-12 Thread Thomas
Hello, I habe a problem to understand function of # /etc/aliases # /etc/postfix/access_recipient It seemed to be that aliases is OK for receive emails for recipients. But what it make sence to use additional access_recipient or whats function of access_recipient. thanks Thomas

email server secured data communication state of the art

2020-01-16 Thread Thomas
"from such operators: " matter that communication has chosen the unencrypted e-mail communication with all its dangers ..." Thanks Thomas

Re: Postfix on docker

2019-09-26 Thread Christopher Thomas
Ok davide, does docker run on old cpu's, or how compatible is it with arm cpu's? ever run an alpha dec? postfix just provide the code, which compiles into binaries, postfix don't get involved with packaging, thats the job of vendors. thats why there are no official postfix docker images, ca

Re: Postfix on docker

2019-09-26 Thread Christopher Thomas
I have a dockerised set of images and kubernetes deployments for you to look at if you're interested. They work well and serve my domains without much problem https://github.com/orgs/kubernetes-mail-server/dashboard Take a look, maybe there is some contribution you want to make. Chris On 26.

unknown tls certificate problem: EVP_MD_size:message digest is null

2019-04-19 Thread Chris Thomas
Hi, I am using a letsencrypt tls cert and whenever I receive email, I get the following error. Is this a problem with my certificate? Or with the configuration or something?? postfix/smtpd[526]: warning: TLS library problem: error:060A209F:digital envelope routines:EVP_MD_size:message digest is n

Re: Postfix 3.4.4 compile problems on Solaris 11

2019-04-01 Thread Thomas Wagner
oh, right. reading your reply, I re-discovered my local fix I use for the SFE packaging project: == #fix unlucky selection of name for struct (introduced in some 3.4.x version) grep "struct sockaddr_un sun;" src/util/unix_dgram_connect.c \ && gsed -i.bak_undef_sun -e '/struct sockaddr_un sun;/

Re: Unexpected directories in virtual_mailbox_base

2019-03-07 Thread Thomas Seilund
On 03/03/2019 21.31, Bill Cole wrote: On 1 Mar 2019, at 9:21, Thomas Seilund wrote: On 01/03/2019 08.39, Andrey Repin wrote: Greetings, Thomas Seilund! smtp  inet  n   - n   -   -   smtpd -o content_filter=spamfilter -o receive_override_options=no_address_mappings

Re: Unexpected directories in virtual_mailbox_base

2019-03-03 Thread Thomas Seilund
On 02/03/2019 13.38, @lbutlr wrote: On 01 Mar 2019, at 07:21, Thomas Seilund wrote: -- Once a day for each user I clear the bayes files and rebuild bayes files with: You are removing the bases entries daily and rebuilding them based on a very few (if any) messages in your LaernAs folders

Re: Unexpected directories in virtual_mailbox_base

2019-03-01 Thread Thomas Seilund
On 01/03/2019 08.39, Andrey Repin wrote: Greetings, Thomas Seilund! smtp  inet  n   -   n   -   -   smtpd -o content_filter=spamfilter -o receive_override_options=no_address_mappings spamfilter    unix  -   n   n   -   -   pipe flags=Rq user=vmail

Re: Unexpected directories in virtual_mailbox_base

2019-02-28 Thread Thomas Seilund
On 28/02/2019 22.38, Bill Cole wrote: On 28 Feb 2019, at 0:55, Thomas Seilund wrote: On 27/02/2019 23.50, John Fawcett wrote: On 27/02/2019 17:56, Thomas Seilund wrote: Hi All, I run a mail server with Postfix (version 2.6.6), Dovecot and Spamassassin. The first time I saw an unexpected

Re: Unexpected directories in virtual_mailbox_base

2019-02-27 Thread Thomas Seilund
On 27/02/2019 23.50, John Fawcett wrote: On 27/02/2019 17:56, Thomas Seilund wrote: Hi All, I run a mail server with Postfix (version 2.6.6), Dovecot and Spamassassin. The first time I saw an unexpected directory in virtual_mailbox_base what medio dec. 2018. The mail server has been running

Unexpected directories in virtual_mailbox_base

2019-02-27 Thread Thomas Seilund
mysql/virtual_mailbox_maps.cf virtual_minimum_uid = 2000 virtual_transport = lmtp:unix:private/dovecot-lmtp virtual_uid_maps = static:2000 [ec2-user@ec2 ~]$ Any help would be appreciated Thomas S

Re: TLSv1.2 only for auth connection

2018-10-26 Thread Thomas Bourdon
That's what I do, it works perfectly. Thanks. Le 25.10.2018 19:39, Wietse Venema a écrit : Thomas Bourdon: Hi, First of all, I apologize for my bad english. I use postfix-3.3.1 and openssl-1.0.2. Actual ssl config : tlsv1.0 minimum is set for smtp and smtpd. tlsv1.2 minimum is se

Re: TLSv1.2 only for auth connection

2018-10-25 Thread Thomas Bourdon
Thank you guys to explain me how works smtp<->smtp. I set up tlsv1.0 minimum for smtp<->smtp and tlsv1.2 minimum for auth connections, it seems working. :) Thanks again ! Le 25.10.2018 15:10, B. Reino a écrit : On Thu, 25 Oct 2018, Thomas Bourdon wrote: Because mail providers sen

Re: TLSv1.2 only for auth connection

2018-10-25 Thread Thomas Bourdon
Because mail providers send mail to my smtp server through this port, don't they ? Le 25.10.2018 15:00, B. Reino a écrit : On Thu, 25 Oct 2018, Thomas Bourdon wrote: Is there a way to allow tlsv1.0 minimum for unauth connection and allow tlsv1.2 minimum for auth connection on por

TLSv1.2 only for auth connection

2018-10-25 Thread Thomas Bourdon
nimum for submission/starttls. I thought about disable auth connection using 465 port but I don't want to force my users to strictly use starttls. Is there a way to allow tlsv1.0 minimum for unauth connection and allow tlsv1.2 minimum for auth connection on port 465 ? Have a nice day!

Re: Reject mails coming from mailservers whos reverse DNS resolution match a certain pattern

2018-08-27 Thread Thomas Glanzmann
Hello Matus, > for blocking .artegic.net you don't need to use pcre. > simple hash table containing ".artegic.net" would be faster. I see. Thanks a lot. Cheers, Thomas

Re: Reject mails coming from mailservers whos reverse DNS resolution match a certain pattern

2018-08-26 Thread Thomas Glanzmann
tions but as hash. Thank you for helping me block these spammers. Cheers, Thomas

Reject mails coming from mailservers whos reverse DNS resolution match a certain pattern

2018-08-26 Thread Thomas Glanzmann
n *.artegic.net How can I obtain that? Cheers, Thomas

Timed out while sending end of data -- message may be sent more than once

2018-08-12 Thread Thomas Kristensen
e the sender resend it, so it is a whole new message in postfix, it goes fine without problems. So the question is, why does some of the mails fail on the server, with no option to requeue them? Med venlig hilsen Thomas Kristensen Storhaven 12 - 7100 Vejle Tlf: 75 72 54 99 - Fax: 75 72 65 33 E-ma

Re: How to autoreply with "Undelivered Mail Returned to Sender" unknown user for user+doesnotex...@domain.org

2018-07-11 Thread Thomas Nyberg
"postmap hash:/etc/postfix/transport". Wietse Thank you very much this worked perfectly! Cheers, Thomas

How to autoreply with "Undelivered Mail Returned to Sender" unknown user for user+doesnotex...@domain.org

2018-07-11 Thread Thomas Nyberg
would I do this? I naively tried adding user+doesnotexist: doesnoteixst to my /etc/aliases file, but it was still delivered to my user account. Thanks for any help. Cheers, Thomas

real life reasons not to use reject_unknown_client_hostname

2018-05-12 Thread Thomas Smith
.html#reject_unknown_client_hostname Thomas

Re: policyd-spf and temperrors

2017-03-17 Thread Thomas Leuxner
achine? Regards Thomas signature.asc Description: Digital signature

Re: policyd-spf and temperrors

2017-03-17 Thread Thomas Leuxner
s Postfix is unable to communicate with the UNIX socket policy-spf is supposed to listen on. Regards Thomas signature.asc Description: Digital signature

Re: Problems with lmtp

2017-03-17 Thread Thomas Leuxner
* chaouche yacine 2017.03.17 14:52: > Thank you Thomas, so if I understand correctly in Viktor's config dovecot is > only used by postfix as a backend to query for valid virtual email addresses ? Hi Yassine, one of the benefits of using Dovecot's MDAs besides Sieve, is that

Re: Problems with lmtp

2017-03-17 Thread Thomas Leuxner
: user1@virtual.invalid user1/ user2@virtual.invalid user2/ Regards Thomas signature.asc Description: Digital signature

Re: smtp-cache problem

2017-02-26 Thread Thomas Minor
st for this sometime. --Thomas Am 27.02.2017 um 00:15 schrieb Viktor Dukhovni: >> On Feb 26, 2017, at 5:56 PM, Thomas Minor wrote: >> >> And, on the other side, postfix as a client >> should not reuse a dead connection. > Postfix (somewhat obviously) cannot "reus

Re: smtp-cache problem

2017-02-26 Thread Thomas Minor
on. Yours, --Thomas Am 24.02.2017 um 12:31 schrieb Alex JOST: > Am 24.02.2017 um 09:03 schrieb Thomas Minor: >> Hmm, ok, >> >> I did search but found nothing. I'll check again. > > http://marc.info/?t=14876316702&r=1&w=2 > -- Thomas Minor, Development

  1   2   3   4   >