per domain virtual_transport

2016-04-20 Thread Udo Rader
Hi, so far I've setup multiple postfix instances being final destinations for one or more domains and I have successfully setup some postfix instances being proxying spam/virus checking gateways only. For final destination delivery, we are utilizing LDAP that is all well integrated using virtual_

Re: per domain virtual_transport

2016-04-20 Thread Wietse Venema
Udo Rader: > Hi, > > so far I've setup multiple postfix instances being final destinations > for one or more domains and I have successfully setup some postfix > instances being proxying spam/virus checking gateways only. > > For final destination delivery, we are utilizing LDAP that is all well

Re: per domain virtual_transport

2016-04-20 Thread Udo Rader
>> Now the only option I find for such a task is virtual_transport, but as >> it seems, this option is not table capable (or am I wrong)? > > You specify an LMTP or SMTP client that forwards mail to the final > destination. > >> with "virtual_transport_map" then containing something like this >>

Re: per domain virtual_transport

2016-04-20 Thread Wietse Venema
Udo Rader: > Can I specify per domain virtual transports in virtual_transport? No, you use TRANSPORT_MAPS with per-domain entries that deliver mail over SMTP or LMTP to its final destinnation. Wietse

Re: Custom logging in postfix

2016-04-20 Thread Steven Peterson
> When a destination blocks all mail, the queue manager skips > the SMTP client and defers email with the error daemon, for > some configurable amount of time (no time to look that up). Thanks, this helps my understanding. But I plead for additional clues. I searched through all the configuratio

Re: Custom logging in postfix

2016-04-20 Thread Wietse Venema
Steven Peterson: > > When a destination blocks all mail, the queue manager skips > > the SMTP client and defers email with the error daemon, for > > some configurable amount of time (no time to look that up). > > Thanks, this helps my understanding. But I plead for additional clues. I > searched

Re: Custom logging in postfix

2016-04-20 Thread Viktor Dukhovni
On Wed, Apr 20, 2016 at 08:53:42AM -0400, Steven Peterson wrote: > > When a destination blocks all mail, the queue manager skips > > the SMTP client and defers email with the error daemon, for > > some configurable amount of time (no time to look that up). > > Thanks, this helps my understanding.

Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2016-04-20 Thread Viktor Dukhovni
On Tue, Apr 19, 2016 at 04:23:08PM +, Viktor Dukhovni wrote: > > >In my survey of 12000 DANE TLSA-enabled domains 545 are using LE > > >certificates. > > > > Is this compared to the ~9600 in December last year? That would be 25% > > increase in your survey? > > Yes, but some of that is due t

address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread jasonsu
Do address_verification probes work when checking aliased or plus-addressed addresses? E.g., I have a REAL address defined, m...@example.com address_verification probes work, and the mail's passed. Atm, however, mail to both me.al...@example.com (aliased to m...@example.com) and me+p

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread Wietse Venema
jaso...@mail-central.com: > Do address_verification probes work when checking aliased or > plus-addressed addresses? > Verify probes work in the same way as real email, except that they are not delivered (with SMTP, Postfix aborts the transaction before sending the DATA command). It's just a bit

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread jasonsu
On Wed, Apr 20, 2016, at 10:25 AM, Wietse Venema wrote: > jaso...@mail-central.com: > > Do address_verification probes work when checking aliased or > > plus-addressed addresses? > > > Verify probes work in the same way as real email, except that they > are not delivered (with SMTP, Postfix aborts

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread Wietse Venema
jaso...@mail-central.com: > On Wed, Apr 20, 2016, at 10:25 AM, Wietse Venema wrote: > > jaso...@mail-central.com: > > > Do address_verification probes work when checking aliased or > > > plus-addressed addresses? > > > > > Verify probes work in the same way as real email, except that they > > are

Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2016-04-20 Thread Danny Horne
On 19/04/2016 4:19 pm, Dirk Stöcker wrote: > In case you do not know: > > There are two other options for free domain verified certificates: > > https://www.startssl.com/ - per cert: 1 domain, 1 year > https://buy.wosign.com/free/?lan=en - per cert: up to 5 domains, 1-3 > years > > Ciao Thanks f

Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2016-04-20 Thread /dev/rob0
On Wed, Apr 20, 2016 at 03:53:24PM +, Viktor Dukhovni wrote: > If any of this encourages some readers of this list to deploy > DNSSEC+DANE, I urge you to make sure that: > > * You have publically discoverable email contact addresses > either via "whois", or the "mrname" of DNS SOA re

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread jasonsu
On Wed, Apr 20, 2016, at 11:08 AM, Wietse Venema wrote: > SENDMAIL(1) SENDMAIL(1) > > ... >-bvDo not collect or deliver a message. Instead, send an email > report after verifying each recipient address.

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread Noel Jones
On 4/20/2016 1:36 PM, jaso...@mail-central.com wrote: > > > On Wed, Apr 20, 2016, at 11:08 AM, Wietse Venema wrote: >> SENDMAIL(1) SENDMAIL(1) >> >> ... >>-bvDo not collect or deliver a message. Instead, send an >> email >

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread Wietse Venema
jaso...@mail-central.com: > > > On Wed, Apr 20, 2016, at 11:08 AM, Wietse Venema wrote: > > SENDMAIL(1)SENDMAIL(1) > > > > ... > >-bvDo not collect or deliver a message. Instead, send an > > email > > report

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread jasonsu
On Wed, Apr 20, 2016, at 12:34 PM, Wietse Venema wrote: > As Noel says, keep it simple. Only when it works, add complexity. Which is exactly what I'm trying to do. I've got a completely working frontend/backend setup. No errors in logs. When I add *one* thing, the address_verification step, it

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread Wietse Venema
jaso...@mail-central.com: > On Wed, Apr 20, 2016, at 12:34 PM, Wietse Venema wrote: > > As Noel says, keep it simple. Only when it works, add complexity. > > Which is exactly what I'm trying to do. No, you are adding address verification to a complex system. Make it work on a simple system, then

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread jasonsu
I invoke the address verification at the postscreen handoff smtpd. >From the log you can see connect from outside Apr 20 15:28:35 mail01 postfix/postscreen[10625]: CONNECT from [66.111.4.25]:42434 to [192.0.2.16]:25 dnsbl checks & pass Apr 20 15:28:35 mail01 postfix/dnsblog[1

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread Wietse Venema
jaso...@mail-central.com: > All that's involved here is postscreen, its handoff smtp, and the > address verification step against the backend. How am I supposed > to get this simpler without removing postscreen or the address > verification step or the backend? Sorry, reality is different. I men

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread jasonsu
On Wed, Apr 20, 2016, at 05:13 PM, Wietse Venema wrote: > This is what happens in the simple case. > > 1) smtpd talks to the cleanup server. > > 2) cleanup writes a probe message to the queue. > > 3) qmgr selects a delivery agent. > > 4) The delivery agent does a partial delivery attempt and

Re: address_verification probes -- are they supposed to work for aliases & +plus addresses?

2016-04-20 Thread jasonsu
On Wed, Apr 20, 2016, at 05:13 PM, Wietse Venema wrote: > 3) qmgr selects a delivery agent. > > 4) The delivery agent does a partial delivery attempt and reports >results to the verify daemon. IIUC, looking at that^ and http://www.postfix.org/OVERVIEW.html#delivering in my case, that^ del