[pfx] Announcement - rpms available for postfix-tlspol and tlsrpt-reporter

2025-07-30 Thread Michael Webb via Postfix-users
Trust it is appropriate in this forum and useful to others to write that postfix-tlspol-1.8.12 and tlsrpt-reporter-0.5.0 are now available in the Ghettoforge repository as rpms for EL8 and 9. https://mirror.ghettoforge.net/distributions/gf/el/9/gf/x86_64/ https://mirror.ghettoforge.net

[pfx] postfix transport and mysql

2025-07-21 Thread natan via Postfix-users
Hi I known this is First world problem. I have a questions about postfix transport. I have two serwer: 1)smtp-n1 - default 2)smtp-n2 In smtp-nX i have this same query like: postmap -q u...@domain1.ltd memcache:/etc/postfix/memcache_cache.cf smtp-out sql; query = SELECT IFNULL((SELECT

[pfx] Re: Make postfix additionally relay?

2025-07-15 Thread Viktor Dukhovni via Postfix-users
On Tue, Jul 15, 2025 at 10:49:56AM -0400, Wietse Venema via Postfix-users wrote: > > Perhaps an example, like the above, that puts multiple pieces of the > > puzzle together could make a useful addition to ADDRESS_REWRITING_README? > > I've been collecting 'advan

[pfx] Re: Make postfix additionally relay?

2025-07-15 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > On Mon, Jul 14, 2025 at 01:36:00PM -0400, Wietse Venema via Postfix-users > wrote: > > > > Looks very interesting. But unfortunately there's no regexp support > > > available. > > > And the installations of pos

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Viktor Dukhovni via Postfix-users
On Mon, Jul 14, 2025 at 01:36:00PM -0400, Wietse Venema via Postfix-users wrote: > > Looks very interesting. But unfortunately there's no regexp support > > available. > > And the installations of postfix and OS are quite old. Old enough, so that i > > seriously do

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Steffen Nurpmeso via Postfix-users
Wietse Venema via Postfix-users wrote in <4bgttz1dbdzj...@spike.porcupine.org>: |Wietse Venema via Postfix-users: |> Steffen Nurpmeso via Postfix-users: |>>|Verified with |>>| |>>|postmap -q - 'pipemap:{regexp:rcpt-bcc.regexp,regexp:bcc-generic.reg\ |&g

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Wietse Venema via Postfix-users
Wietse Venema via Postfix-users: > Steffen Nurpmeso via Postfix-users: > > |Verified with > > | > > |postmap -q - > > 'pipemap:{regexp:rcpt-bcc.regexp,regexp:bcc-generic.regexp\ > > |}' > > | > > |for quoted and unquoted loca

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Wietse Venema via Postfix-users
Steffen Nurpmeso via Postfix-users: > |Verified with > | > |postmap -q - 'pipemap:{regexp:rcpt-bcc.regexp,regexp:bcc-generic.regexp\ > |}' > | > |for quoted and unquoted localparts. > > And partially quoted? I have a bit of problems with ABN

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Steffen Nurpmeso via Postfix-users
Wietse Venema via Postfix-users wrote in <4bgqh45qyzzj...@spike.porcupine.org>: |oftl--- via Postfix-users: |> On Mon, Jul 14, 2025 at 06:01:20PM +1000, Viktor Dukhovni via Postfix-us\ |> ers wrote: |>> On Sun, Jul 13, 2025 at 09:12:28PM +0200, oftl--- via Postfix-

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Wietse Venema via Postfix-users
oftl--- via Postfix-users: > On Mon, Jul 14, 2025 at 06:01:20PM +1000, Viktor Dukhovni via Postfix-users > wrote: > > On Sun, Jul 13, 2025 at 09:12:28PM +0200, oftl--- via Postfix-users wrote: > > > > > Have an already up and running postfix *also* relay everythin

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread oftl--- via Postfix-users
On Mon, Jul 14, 2025 at 06:01:20PM +1000, Viktor Dukhovni via Postfix-users wrote: > On Sun, Jul 13, 2025 at 09:12:28PM +0200, oftl--- via Postfix-users wrote: > > > Have an already up and running postfix *also* relay everything to another > > postfix. > > Yes, v

[pfx] Re: postfix-3.11-20250713 build failure

2025-07-14 Thread Wietse Venema via Postfix-users
Eray Aslan via Postfix-users: > Hi, > > postfix-3.11-20250713 build fails with > [...] > multi_server.c: In function ?multi_server_drain?: > event_server.c: In function ?event_server_drain?: > multi_server.c:300:9: error: ?return? with no value, in function returning

[pfx] Re: Patch: postfix-3.11-20250713 build failure

2025-07-14 Thread Viktor Dukhovni via Postfix-users
On Mon, Jul 14, 2025 at 10:28:17AM +0200, Eray Aslan via Postfix-users wrote: > postfix-3.11-20250713 build fails with > [...] > multi_server.c: In function ‘multi_server_drain’: > event_server.c: In function ‘event_server_drain’: > multi_server.c:300:9: error: ‘return’ with no val

[pfx] postfix-3.11-20250713 build failure

2025-07-14 Thread Eray Aslan via Postfix-users
Hi, postfix-3.11-20250713 build fails with [...] multi_server.c: In function ‘multi_server_drain’: event_server.c: In function ‘event_server_drain’: multi_server.c:300:9: error: ‘return’ with no value, in function returning non-void [-Wreturn-mismatch] 300 | return

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Viktor Dukhovni via Postfix-users
On Sun, Jul 13, 2025 at 09:12:28PM +0200, oftl--- via Postfix-users wrote: > Have an already up and running postfix *also* relay everything to another > postfix. Yes, via an envelope-recipient preserving PCRE recipient Bcc table, and helper machinery to route and unmunge the add

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Matthew via Postfix-users
To be more clear, by hardcoded addresses I meant local delivery. Postfix has local accounts which exist on the machine as local users (eg. root@mailserver) and virtual domains where there is no local user backed to it. Your question didn’t state which type of transport you’re using so I

[pfx] Re: Make postfix additionally relay?

2025-07-14 Thread Matthew via Postfix-users
://www.google.com/search?q=relayhost+postfix Such as: https://www.lunanode.com/guides/postfix_smtp_secure And: https://www.linode.com/docs/guides/postfix-smtp-debian7/ Hope this helps, Matthew > On 14 Jul 2025, at 7:30 am, oftl--- via Postfix-users > wrote: > > Hi there, > > yes

[pfx] Re: Make postfix additionally relay?

2025-07-13 Thread oftl--- via Postfix-users
Hi there, yes i did come across always_bcc. Unfortunately that's not what i'm looking for. I'd like to see how both postfixes behave when receiving the (as far as possible) same messsage. o/ On Mon, Jul 14, 2025 at 08:21:11AM +0200, Florian Piekert via Postfix-users wrote: &g

[pfx] Re: Make postfix additionally relay?

2025-07-13 Thread Florian Piekert via Postfix-users
Hallo, did you check if the always_bcc directive meets that need? Put in a dedicated recipient on the other postfix, it'll get a bcc of each message inbound/outbound of the first postfix server. Am 13.07.2025 um 21:12 schrieb oftl--- via Postfix-users: Hi! This is what i'd

[pfx] Make postfix additionally relay?

2025-07-13 Thread oftl--- via Postfix-users
Hi! This is what i'd like to do: Have an already up and running postfix *also* relay everything to another postfix. The already running one should keep doing whatever it does and *additionally* relay any and all mail to the other one. Is that possibl

[pfx] Postfix stable release 3.10.3

2025-07-10 Thread Wietse Venema via Postfix-users
[An on-line version of this announcement will be available at https://www.postfix.org/announcements/postfix-3.10.3.html] This release fixes defects that were introduced in Postfix 3.10. These were fixed first in the Postfix 3.11 unstable release. The defects exist only with the default

[pfx] Re: postfix and opendmarc

2025-07-09 Thread natan via Postfix-users
Hi Problem was not in systemd but in opendmarc-1.4.0 in debian11 I make own deb with opendmarc-1.4.2 and problem fixed Probably bug in opendmarc-1.4.0 and special e-mail After change version works fine W dniu 9.07.2025 o 12:29, Benny Pedersen via Postfix-users pisze: natan via Postfix-users

[pfx] Re: postfix and opendmarc

2025-07-09 Thread Benny Pedersen via Postfix-users
natan via Postfix-users skrev den 2025-07-09 10:44: Logs: https://paste.debian.net/1384983/ disable systemd, the milter does not need it to work from postfix milter ReportCommand /bin/true bogus ___ Postfix-users mailing list -- postfix-users

[pfx] postfix and opendmarc

2025-07-09 Thread natan via Postfix-users
Hi I found some problem with setup postfix + opendmarc. In my lab working fine but in productions opendmarc killed ? When I use older debian and remove systemd works fine. In postfix i have standard: #dkim+dmarc #dmarc -> inet:127.0.0.1:54321 smtpd_milters = inet:localhost:12301,i

[pfx] Re: postfix and randmap

2025-07-02 Thread natan via Postfix-users
Hi Thanx sorry for stupid question and trivial mistake W dniu 2.07.2025 o 17:00, Bill Cole via Postfix-users pisze: On 2025-07-02 at 10:54:47 UTC-0400 (Wed, 2 Jul 2025 16:54:47 +0200) natan via Postfix-users is rumored to have said: postmap -q u...@domain.ltd randmap:{int1,int2,int3,int4,int5

[pfx] Re: postfix and randmap

2025-07-02 Thread Bill Cole via Postfix-users
On 2025-07-02 at 10:54:47 UTC-0400 (Wed, 2 Jul 2025 16:54:47 +0200) natan via Postfix-users is rumored to have said: > postmap -q u...@domain.ltd randmap:{int1,int2,int3,int4,int5} You need quotes to protect the {} from shell expansion: $ postmap -q u...@domain.ltd 'randmap:{int1,i

[pfx] postfix and randmap

2025-07-02 Thread natan via Postfix-users
fine: query = select transport from virtual_transport where active='1' order by rand() limit 1; postmap -q u...@domain.ltd mysql:/etc/postfix/mysql_sender_default_rotate_map.cf smtp149 postmap -q u...@domain.ltd mysql:/etc/postfix/mysql_sender_default_rotate_map.cf smtp12 postmap -q u...@

[pfx] Re: Postfix authentication with LDAP

2025-07-02 Thread Viktor Dukhovni via Postfix-users
AD or maybe a MySQL server ( this is where I need help to decide) The AD approach is IMHO more sensible. > I am not sure how authentication is implemented for high traffic > postfix servers. Nothing special, SASL logins are very unlikely to be a bottleneck... The most robust solution would

[pfx] Re: Postfix authentication with LDAP

2025-07-02 Thread Jaroslaw Rafa via Postfix-users
Dnia 2.07.2025 o godz. 14:25:52 Burn Zero via Postfix-users pisze: > > They do have fixed IP addresses. But I need to implement > authentication so that they cannot just use any email address. For > example: a device configured with an account must be able to send > email

[pfx] Re: Postfix authentication with LDAP

2025-07-02 Thread Burn Zero via Postfix-users
ust be able to send email with that "from" address only (both "mail from" and "header from"). _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix authentication with LDAP

2025-07-02 Thread Burn Zero via Postfix-users
d > backend? As they are not in Active Directory, I am planning to create those in AD or maybe a MySQL server ( this is where I need help to decide) I am not sure how authentication is implemented for high traffic postfix servers. Just like when we use a SaaS solution like smtp2go, they provide

[pfx] Re: Postfix authentication with LDAP

2025-07-02 Thread Jaroslaw Rafa via Postfix-users
Dnia 2.07.2025 o godz. 11:59:09 Burn Zero via Postfix-users pisze: > > Typically, neither is a good choice for *authentication* (logins via a > > password of some sort). Are you sure you're looking for > > *authentication* rather that email address validation? >

[pfx] Re: Postfix authentication with LDAP

2025-07-01 Thread Viktor Dukhovni via Postfix-users
to create it if I am going for LDAP. How do you expect to manage the login accounts of the users that are to be authenticated? Users in ActiveDirectory, or some ad hoc password backend? -- Viktor. _______ Postfix-users mailing list -- postfix-users@p

[pfx] Re: Postfix authentication with LDAP

2025-07-01 Thread Viktor Dukhovni via Postfix-users
On Wed, Jul 02, 2025 at 12:02:44PM +0530, Burn Zero via Postfix-users wrote: > > With 400k/day, you can expect loads up to 100 requests/second. > > > > If this uses the Postfix ldap: or mysql: clients, then maybe using > > memcache: with backup=ldap:/foo or ba

[pfx] Re: Postfix authentication with LDAP

2025-07-01 Thread Burn Zero via Postfix-users
> With 400k/day, you can expect loads up to 100 requests/second. > > If this uses the Postfix ldap: or mysql: clients, then maybe using > memcache: with backup=ldap:/foo or backup=mysql:/bar can help. > Thank you, I will try using memcache. ____

[pfx] Re: Postfix authentication with LDAP

2025-07-01 Thread Burn Zero via Postfix-users
ng LDAP data. I have to create it if I am going for LDAP. _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix authentication with LDAP

2025-07-01 Thread Wietse Venema via Postfix-users
Burn Zero via Postfix-users: > Hi, > > I am trying to implement postfix authentication with LDAP (Active > Directory) where the postfix server will act as relay. The expected traffic > is huge (around 400K / day), so is it better to use LDAP as authentication > mode than MyS

[pfx] Re: Postfix authentication with LDAP

2025-07-01 Thread Viktor Dukhovni via Postfix-users
On Tue, Jul 01, 2025 at 04:32:18PM +0530, Burn Zero via Postfix-users wrote: > I am trying to implement postfix authentication with LDAP (Active > Directory) where the postfix server will act as relay. The expected traffic > is huge (around 400K / day), so is it better to us

[pfx] Postfix authentication with LDAP

2025-07-01 Thread Burn Zero via Postfix-users
Hi, I am trying to implement postfix authentication with LDAP (Active Directory) where the postfix server will act as relay. The expected traffic is huge (around 400K / day), so is it better to use LDAP as authentication mode than MySQL? Thank you

[pfx] Re: Postfix TLS Library Problem No such file

2025-06-19 Thread Viktor Dukhovni via Postfix-users
On Tue, May 06, 2025 at 11:50:55AM -0400, Jason Hirsh via Postfix-users wrote: [ Just noticed this post from May 06... ] > # TLS CONFIG > smtp_tls_note_starttls_offer = yes > smtpd_tls_key_file = /usr/local/etc/letsencrypt/live/kasdivi.com/privkey.key > smtpd_tls_cert_file = >

[pfx] Re: Postfix interaction between access map, .forward and aliases

2025-06-06 Thread Viktor Dukhovni via Postfix-users
On Fri, Jun 06, 2025 at 10:55:10AM -0400, Paul Raines via Postfix-users wrote: > I was thinking of a third way by removing proxy:unix:passwd.byname > from local_recipient_maps and adding in a hash map with just the > "enabled" user accounts. That would be take more effort thou

[pfx] Re: Postfix interaction between access map, .forward and aliases

2025-06-06 Thread Paul Raines via Postfix-users
communicate over unencrypted e-mail. _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: MTA-STS / DANE - postfix-tlspol

2025-06-05 Thread Viktor Dukhovni via Postfix-users
t; > When I use the dig command to lookup the TLSA it can find them. But somehow > with postfix not. The local resolver must not have been configured to perform DNSSEC validation. > But I now removed localhost as local DNS resolver and use google or quad9 > instead. That largely d

[pfx] Re: Postfix interaction between access map, .forward and aliases

2025-06-05 Thread Viktor Dukhovni via Postfix-users
On Thu, Jun 05, 2025 at 03:57:12PM -0400, Paul Raines via Postfix-users wrote: > As a quick fix for (1) I have changed the access map to use > olduser@primary.domain instead of just olduser@ but that only works for that > primary.domain. We have several secondary domains and I would hav

[pfx] Re: Postfix interaction between access map, .forward and aliases

2025-06-05 Thread Wietse Venema via Postfix-users
Wietse Venema via Postfix-users: > Paul Raines via Postfix-users: > > > > I moved from an old sendmail based mail server to a new Postfix one > > recently. On the old system when a user account was closed I would put an > > entry in a access map for sendmail like &g

[pfx] Re: Postfix interaction between access map, .forward and aliases

2025-06-05 Thread Wietse Venema via Postfix-users
Paul Raines via Postfix-users: > > I moved from an old sendmail based mail server to a new Postfix one > recently. On the old system when a user account was closed I would put an > entry in a access map for sendmail like > > To:olduser@ERROR:"505 Disabled user accou

[pfx] Re: MTA-STS / DANE - postfix-tlspol

2025-06-05 Thread Luca vom Bruch via Postfix-users
can find them. But somehow with postfix not. But I now removed localhost as local DNS resolver and use google or quad9 instead. For testing I tried with "dane-only" policy with and without postfix-tlspol and it works fine. Luca. -Ursprüngliche Nachricht- Von: Viktor Dukhov

[pfx] Re: MTA-STS / DANE - postfix-tlspol

2025-06-05 Thread Viktor Dukhovni via Postfix-users
On Thu, Jun 05, 2025 at 09:11:01PM +0200, Luca vom Bruch via Postfix-users wrote: > to=, relay=none, delay=0.64, > delays=0.1/0.02/0.51/0, dsn=4.7.5, status=deferred (no TLSA records found) That's odd, when I query the DNS, I see DNSSEC-signed MX records for the domain with signed

[pfx] Postfix interaction between access map, .forward and aliases

2025-06-05 Thread Paul Raines via Postfix-users
I moved from an old sendmail based mail server to a new Postfix one recently. On the old system when a user account was closed I would put an entry in a access map for sendmail like To:olduser@ERROR:"505 Disabled user account" and this would work fine to prevent any email de

[pfx] Re: MTA-STS / DANE - postfix-tlspol

2025-06-05 Thread Wietse Venema via Postfix-users
Luca vom Bruch via Postfix-users: > The log message when using postfix-tlspol > Evaluated policy for "learndmarc.com": dane-only (from cache, 15m2s > remaining) postfix-tlspol says that TLSA records must be used. And I can confirm that they exist. Command: > And mail

[pfx] MTA-STS / DANE - postfix-tlspol

2025-06-05 Thread Luca vom Bruch via Postfix-users
Dear fellow postfixers! I wanted to implement MTA-STS and for this I use postfix-tlspol It works for the most part but I am wondering why I can no longer use the test website Learndmarc.com That site gives you an email address to send mail to to test your compliance

[pfx] Re: Postfix denies regular mail

2025-06-05 Thread Christian H. Kuhn via Postfix-users
Dear Viktor, Am 30.05.2025 um 15:34 schrieb Viktor Dukhovni via Postfix-users: On Fri, May 30, 2025 at 02:31:59PM +0200, Christian H. Kuhn via Postfix-users wrote: What is the address class of the "$myorigin" domain? If "$myorigin" is the same as "$mydomain&quo

[pfx] Re: Understanding postfix/cleanup message in logs

2025-05-30 Thread Wietse Venema via Postfix-users
BuzzSaw Code via Postfix-users: > I've read the Postfix documentation trying to understand what the logs > are telling me, but this may still be a dumb question, so apologies in > advance. > > Another mail server within our own organization sends periodic > messages to

[pfx] Understanding postfix/cleanup message in logs

2025-05-30 Thread BuzzSaw Code via Postfix-users
I've read the Postfix documentation trying to understand what the logs are telling me, but this may still be a dumb question, so apologies in advance. Another mail server within our own organization sends periodic messages to us, and in the logs for those emails I see this: 2025-05-30T

[pfx] Re: Postfix denies regular mail

2025-05-30 Thread Viktor Dukhovni via Postfix-users
On Fri, May 30, 2025 at 02:31:59PM +0200, Christian H. Kuhn via Postfix-users wrote: > reject: RCPT from list.sys4.de[45.90.5.195]: 450 4.1.1 : > Recipient address rejected: unverified address: User unknown in virtual > alias table; from= > to= proto=ESMTP helo= Address veri

[pfx] Re: Postfix denies regular mail

2025-05-30 Thread Christian H. Kuhn via Postfix-users
Ingrid: > 2025-05-29T19:47:36.922543+02:00 bywater postfix/smtpd[1862185]: NOQUEUE: reject: RCPT from list.sys4.de[45.90.5.195]: 450 4.1.1 post...@qno.de>: Recipient address rejected: unverified address: User unknown in virtual alias table; from= to= proto=ESMTP helo= root@bywate

[pfx] Re: Postfix denies regular mail

2025-05-30 Thread Christian H. Kuhn via Postfix-users
Am 29.05.2025 um 14:47 schrieb Wietse Venema via Postfix-users: > If you prefer to contradict the doctor, then I can't help you. Never ever would i do such a thing. Just wanted to know what is going on. After removing smtpd_recipient_restrictions, i saw a table lookup for virtual

[pfx] Re: Postfix denies regular mail

2025-05-29 Thread Matus UHLAR - fantomas via Postfix-users
#x27;s empty. I cited from mail.info which contains log level info and higher. I added -v in master.cf, perhaps i'll get a closer hint. Am 28.05.2025 um 21:57 schrieb Wietse Venema via Postfix-users: - Next the Postfix SMTP daemon is supposed to find out if the domain exists in DNS, bu

[pfx] Re: Postfix denies regular mail

2025-05-29 Thread Wietse Venema via Postfix-users
Christian H. Kuhn via Postfix-users: > Dear Wietse, > > thank you for your answer. > > Am 28.05.2025 um 21:57 schrieb Wietse Venema via Postfix-users: > > (There should be warnings logged that saywhich table lookup failed. > > Does your system perhaps log erro

[pfx] Re: Postfix denies regular mail

2025-05-29 Thread Christian H. Kuhn via Postfix-users
Dear Wietse, thank you for your answer. Am 28.05.2025 um 21:57 schrieb Wietse Venema via Postfix-users: (There should be warnings logged that saywhich table lookup failed. Does your system perhaps log error and non-error messages to different files? That is not a good idea - it complicates

[pfx] Re: Postfix denies regular mail

2025-05-28 Thread Wietse Venema via Postfix-users
Christian H. Kuhn via Postfix-users: > from mailout1-87.xing.com[109.233.158.87] > 2025-05-28T19:05:24.783884+02:00 bywater postfix/smtpd[1610483]: > NOQUEUE: reject: RCPT from mailout1-87.xing.com[109.233 > .158.87]: 451 4.3.0 : Temporary lookup failure; > from= to= proto > =E

[pfx] Postfix denies regular mail

2025-05-28 Thread Christian H. Kuhn via Postfix-users
Hi all, i try to migrate my postfix installation to another server and to update some things. There are more traps that i could imagine ... My main domain, qno.de, is listed in virtual_alias_domains. My user qno has several aliases. Especially, recipient_delimiter=- is set, so i expect to

[pfx] Re: Killed postfix

2025-05-28 Thread Jason Hirsh via Postfix-users
> On May 27, 2025, at 10:21 PM, Viktor Dukhovni via Postfix-users > wrote: > > On Tue, May 27, 2025 at 12:22:17PM -0400, Jason Hirsh wrote: >>> From: Jason Hirsh >>> Subject: Killed postfix >>> Date: May 27, 2025 at 12:11:13 PM EDT >>> To: po

[pfx] Re: Fwd: Killed postfix

2025-05-27 Thread Viktor Dukhovni via Postfix-users
On Tue, May 27, 2025 at 12:22:17PM -0400, Jason Hirsh wrote: > > From: Jason Hirsh > > Subject: Killed postfix > > Date: May 27, 2025 at 12:11:13 PM EDT > > To: postfix-u...@postfix.org [ Please format list posts as simple text, rather than HTML markup. ] > > Sin

[pfx] Re: postfix/cleanup warning: unsupported dictionary type: PATH=/bin.

2025-05-26 Thread Jason Hirsh via Postfix-users
Ok I thought that was what BUT reloading got me this warning: /usr/local/etc/postfix/main.cf, line 752: overriding earlier entry: header_checks=regexp:$config_directory/header_checks I removed the line and removed the “spaced” debugger command and postfix seems to be happy. BUT I could

[pfx] Re: postfix/cleanup warning: unsupported dictionary type: PATH=/bin.

2025-05-25 Thread Viktor Dukhovni via Postfix-users
On Sun, May 25, 2025 at 04:43:58PM -0400, Jason Hirsh wrote: > I am getting this error > > ay 25 14:10:18 triggerfish postfix/cleanup[71521]: error: unsupported > dictionary type: PATH=/bin > > > I know nothing about “cleanup”. But since master.c > <http://master

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-15 Thread Bill Cole via Postfix-users
On 2025-05-14 at 21:29:59 UTC-0400 (Thu, 15 May 2025 11:29:59 +1000) Viktor Dukhovni via Postfix-users is rumored to have said: On Wed, May 14, 2025 at 11:47:25AM -0400, Sean McBride via Postfix-users wrote: On 13 May 2025, at 13:02, Bill Cole via Postfix-users wrote: The simplest setup

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-15 Thread Matthew J Black via Postfix-users
On 15/5/25 00:20, Jaroslaw Rafa via Postfix-users wrote: Dnia 14.05.2025 o godz. 20:37:40 Matthew J Black via Postfix-users pisze: - as you are no doubt aware, I had an "interesting" situation where my email were being turned into html by a service I am no-longer using. Hopefully

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Viktor Dukhovni via Postfix-users
On Wed, May 14, 2025 at 11:47:25AM -0400, Sean McBride via Postfix-users wrote: > On 13 May 2025, at 13:02, Bill Cole via Postfix-users wrote: > > > The simplest setup is to have the full chain in a single file > > referred to by smtpd_tls_cert_file and NO smtpd_tls_chain_file.

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Sean McBride via Postfix-users
On 14 May 2025, at 12:06, Bill Cole via Postfix-users wrote: >> OTOH that setup doesn't seem so simple in that (AFAICT) neither certbot nor >> acme.sh can generate such a combined file. > > Really? > > $ postconf smtpd_tls_eccert_file > smtpd_tls_

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Bill Cole via Postfix-users
On 2025-05-14 at 11:47:25 UTC-0400 (Wed, 14 May 2025 11:47:25 -0400) Sean McBride via Postfix-users is rumored to have said: On 13 May 2025, at 13:02, Bill Cole via Postfix-users wrote: The simplest setup is to have the full chain in a single file referred to by smtpd_tls_cert_file and NO

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Erwan David via Postfix-users
On Wed, May 14, 2025 at 05:47:25PM CEST, Sean McBride via Postfix-users said: > On 13 May 2025, at 13:02, Bill Cole via Postfix-users wrote: > > > The simplest setup is to have the full chain in a single file referred to > > by smtpd_tls_cert_file and NO smtpd_tls_chain_fi

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Sean McBride via Postfix-users
On 13 May 2025, at 13:02, Bill Cole via Postfix-users wrote: > The simplest setup is to have the full chain in a single file referred to by > smtpd_tls_cert_file and NO smtpd_tls_chain_file. OTOH that setup doesn't seem so simple in that (AFAICT) neither certbot nor acme.sh can gene

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Jaroslaw Rafa via Postfix-users
Dnia 14.05.2025 o godz. 20:37:40 Matthew J Black via Postfix-users pisze: > - as you are no doubt aware, I had an "interesting" situation where > my email were being turned into html by a service I am no-longer > using. Hopefully this email (which uses a different system/se

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Matthew J Black via Postfix-users
ic recreation of the relevant sni map file with the new/renewed LE Certificates.Thank you all - issue(s) resolved, thread (can be) closed.On 14/5/25 15:33, Viktor Dukhovni via Postfix-users wrote:> On Wed, May 14, 2025 at 01:36:09AM +1000, Matthew J Black via Postfix-users wrote:>>> But what d

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Viktor Dukhovni via Postfix-users
On Wed, May 14, 2025 at 01:36:09AM +1000, Matthew J Black via Postfix-users wrote: > But what do you get with 'openssl s_client -starttls smtp -connect > mail.peregrineit.net:587' - cause I get : The difference is that OpenSSL defaults to sending an SNI extension with the server

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Tom Mittelstädt via Postfix-users
On Tue, May 13 2025, 19:28:58 CEST Jaroslaw Rafa wrote via Postfix-users: > Please, please, don't send HTML-only mail to the list. It's a part of > longstanding mailing list etiquette that you don't do this. Some of us are > reading the eamil in plain text. There is som

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Jaroslaw Rafa via Postfix-users
Dnia 13.05.2025 o godz. 23:42:54 Matthew J Black via Postfix-users pisze: > src="https://gfbjcce.r.bh.d.sendibt3.com/tr/op/BRjIpuSsyQ_w30QEpE8hT7WGsqTTSw7PbBYo5UxUvIOxN20GTDi-gVg1bX96dW3hiLDLftCm8Pigp2CkYTOrVRd8yWdmXZQDeohq0zk8PfSe8zRGbbmtIuZu8CgJLbNfpQ4Xb8scxKZpR8e0yjwxpH3zFb5Yvp

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matus UHLAR - fantomas via Postfix-users
On 13.05.25 23:42, Matthew J Black via Postfix-users wrote: This is really weird - Our Postfix server is presenting old/expired LE TLS Certs, even though we've updated the certs AND restarted Postfix (and Dovecot) (and even rebooted the server) multiple times. I've done

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Bill Cole via Postfix-users
On 2025-05-13 at 11:36:09 UTC-0400 (Wed, 14 May 2025 01:36:09 +1000) Matthew J Black via Postfix-users is rumored to have said: Cool - that's what I get But what do you get with 'openssl s_client -starttls smtp -connect mail.peregrineit.net:587' - cause I get : depth=0 CN=

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Viktor Dukhovni via Postfix-users
On Tue, May 13, 2025 at 05:07:04PM +0200, Matus UHLAR - fantomas via Postfix-users wrote: > any reverse proxy between you and server? > no multiple postfix instances used? Let's not encourage further pointless waste of time. The OP needs to post: $ postconf -nf $ postconf -M

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Tom Mittelstädt via Postfix-users
On Tue, May 13 2025 at 17:19:19 CEST Matthew J Black wrote via Postfix-users: > so if there are suggesting (...) I'm more than happy to hear them and > try them. Please stop sending HTML-only. -- Thanks Tom _______ Postfix-users m

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Viktor Dukhovni via Postfix-users
On Wed, May 14, 2025 at 12:56:34AM +1000, Matthew J Black via Postfix-users wrote: > > There's no magic, Postfix loads certificates and keys from the > > configured locations. > > > > https://www.postfix.org/DEBUG_README.html#mail > > Yeah, I real

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
4/5/25 01:20, Viktor Dukhovni via Postfix-users wrote: On Tue, May 13, 2025 at 05:07:04PM +0200, Matus UHLAR - fantomas via Postfix-users wrote: any reverse proxy between you and server? no multiple postfix instances used? Let's not encourage further pointless waste of time. The OP needs to p

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
On 14/5/25 00:08, Matus UHLAR - fantomas via Postfix-users wrote:>> are you sure the proper smtpd_tls_cert_file and smtpd_tls_key_file are > configured in postfix configuration?>Triple-checked it  :-)And as I said, I can't find the old certs on the box anywhere, so even if they

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
On 14/5/25 01:07, Matus UHLAR - fantomas via Postfix-users wrote:>>   >> On 14/5/25 00:08, Matus UHLAR - fantomas via Postfix-users wrote:>>   >> >>>   >> > are you sure the proper smtpd_tls_cert_file and >> smtpd_tls_key_file>>   >> &

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
On 14/5/25 01:12, Viktor Dukhovni via Postfix-users wrote:> On Wed, May 14, 2025 at 12:56:34AM +1000, Matthew J Black via Postfix-users wrote:>>>> There's no magic, Postfix loads certificates and keys from the>>> configured locations.>>>>>> https://w

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matus UHLAR - fantomas via Postfix-users
>> On 14/5/25 00:08, Matus UHLAR - fantomas via Postfix-users wrote: >> > >> > are you sure the proper smtpd_tls_cert_file and smtpd_tls_key_file >> > are >> > configured in postfix configuration? > On Wed, May 14, 2025 at 12:17:29AM +10

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
On 14/5/25 00:48, Viktor Dukhovni via Postfix-users wrote:> On Wed, May 14, 2025 at 12:17:29AM +1000, Matthew J Black via Postfix-users wrote:>>> [q2AY6ESDEdxdcaKPIjGrwB1r7irZNrS9NMjjOyd3RyDvDnZMS2-sTQhrV

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Viktor Dukhovni via Postfix-users
On Wed, May 14, 2025 at 12:17:29AM +1000, Matthew J Black via Postfix-users wrote: > [q2AY6ESDEdxdcaKPIjGrwB1r7irZNrS9NMjjOyd3RyDvDnZMS2-sTQhrVffoXSQ5YfoHS >mIcYF9Dtgcyg6uqQNRONtN6fjtE7FhanYwbNm07AoA0WypPtbent8SCQHFw3oKlNw

[pfx] Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
Hi All,This is really weird - Our Postfix server is presenting old/expired LE TLS Certs, even though we've updated the certs AND restarted Postfix (and Dovecot) (and even rebooted the server) multiple times.I've done a thorough search of the box for the old certs and can find nothing.I

[pfx] Re: [pxf] How Postfix send data to the milter?

2025-05-07 Thread Mike Teplynin via Postfix-users
On Wed, May 7, 2025 at 10:15 AM Tom Hendrikx via Postfix-users wrote: > In the past, I've used the test tools (milter-test-server, > milter-test-client) from https://github.com/milter-manager/milter-manager Very nice link, thank you! -- Best re

[pfx] Re: How does Postfix send data to the milter?

2025-05-07 Thread Bill Cole via Postfix-users
On 2025-05-06 at 14:44:24 UTC-0400 (Tue, 6 May 2025 18:44:24 +) Claus Assmann via Postfix-users is rumored to have said: On Tue, May 06, 2025, Bill Cole via Postfix-users wrote: Sadly, there has never been robust definitive docs for the Milter API. What is missing from the

[pfx] Re: [pxf] How Postfix send data to the milter?

2025-05-07 Thread Tom Hendrikx via Postfix-users
On 06-05-2025 18:58, Mike Teplynin via Postfix-users wrote: After my previous question about mail archiving, I tried to write a milter that will save copies of emails in a way convenient for me. And now my question is about how Postfix sends headers and message body to milter. Everything that is

[pfx] Re: How does Postfix send data to the milter?

2025-05-06 Thread Wietse Venema via Postfix-users
Steffen Nurpmeso via Postfix-users: > Claus Assmann via Postfix-users wrote in > <20250506184424.ga35...@veps.esmtp.org>: > |On Tue, May 06, 2025, Bill Cole via Postfix-users wrote: > | > |> Sadly, there has never been robust definitive docs for the Milter API. >

[pfx] Re: How does Postfix send data to the milter?

2025-05-06 Thread Steffen Nurpmeso via Postfix-users
Claus Assmann via Postfix-users wrote in <20250506184424.ga35...@veps.esmtp.org>: |On Tue, May 06, 2025, Bill Cole via Postfix-users wrote: | |> Sadly, there has never been robust definitive docs for the Milter API. | |What is missing from the documentation in libmilter/docs/ |whic

[pfx] Re: How does Postfix send data to the milter?

2025-05-06 Thread Claus Assmann via Postfix-users
On Tue, May 06, 2025, Bill Cole via Postfix-users wrote: > Sadly, there has never been robust definitive docs for the Milter API. What is missing from the documentation in libmilter/docs/ which is part of the sendmail open source distribution? -- Please don't Cc: me, use only the

[pfx] Fwd: Postfix TLS Library Problem No such file

2025-05-06 Thread Jason Hirsh via Postfix-users
> Begin forwarded message: > > From: Jason Hirsh > Subject: Re: [pfx] Postfix TLS Library Problem No such file > Date: May 6, 2025 at 2:27:43 PM EDT > To: postfix-u...@postfix.org > Cc: Bill Cole > > >> On May 6, 2025, at 12:43 PM, Bill Cole via Postfix-us

[pfx] Re: [pxf] How Postfix send data to the milter?

2025-05-06 Thread Wietse Venema via Postfix-users
. } } For each filter process end of connection (xxfi_close) } ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: [pxf] How Postfix send data to the milter?

2025-05-06 Thread Bill Cole via Postfix-users
On 2025-05-06 at 12:58:27 UTC-0400 (Tue, 6 May 2025 19:58:27 +0300) Mike Teplynin via Postfix-users is rumored to have said: After my previous question about mail archiving, I tried to write a milter that will save copies of emails in a way convenient for me. And now my question is about how

  1   2   3   4   5   6   7   8   9   10   >