Disable DSN success notifications

Hello, we are using Debian 8 with Postfix 2.11.3 installed from Debian Repo and want to disable DSN reports only for success notifications because we are receiving many backscatter like this in the past days: "MESSAGE DELIVERED SUCCESSFULLY Your E-mail requested a delivery notice/return rece

Re: reject_unknown_sender_domain and TXT record

On 17.08.17 14:00, Brett @Google wrote: Recently noticed some "domain not found" errors by reject_unknown_sender_domain in sender_recipient_checks. Following up I noticed : The domain in the From: address has a SPF record (ONLY) : [deleted] I guess this is just "wrong" in that there should be

Re: Disable DSN success notifications

On 17.08.17 11:18, Steven Conrad Bayer wrote: we are using Debian 8 with Postfix 2.11.3 installed from Debian Repo and want to disable DSN reports only for success notifications because we are receiving many backscatter like this in the past days: "MESSAGE DELIVERED SUCCESSFULLY Your E-mail r

Another postfix service ? Injection of original message

Hello, I'm using postfix on RHEL and looking to accomplish the following : We have a postfix instance running were traffic from another smtp server ( smtp server A ) is being handled Postfix now does simple header_checks and reroutes to several other smtp servers, via sender based routing. I bel

Strategies for using backup MX records

This is a fairly naive and open-ended question I'm afraid but I'm sure others here may have similar setups and thus have answers. I run Postfix on a home server which is on all the time of course but, as it's connected via a 'domestic' broadband service it's not a 100% reliable connection. There a

Re: Strategies for using backup MX records

On Thu, Aug 17, 2017 at 01:38:18PM +0100, Chris Green wrote: > This is a fairly naive and open-ended question I'm afraid but I'm sure > others here may have similar setups and thus have answers. > > I run Postfix on a home server which is on all the time of course but, > as it's connected via a 'd

Re: Strategies for using backup MX records

On 8/17/2017, 8:38:18 AM, Chris Green wrote: > What sort of strategies are available for coping with the (rare) > disconnections of a few hours that occasionally occur? I know that > SMTP delivery is fairly robust and, as far as I know, the backing off > and retrying seems to work pretty well but

Re: Strategies for using backup MX records

On 08/17/17 08:38, Chris Green wrote: > This is a fairly naive and open-ended question I'm afraid but I'm sure > others here may have similar setups and thus have answers. > > I run Postfix on a home server which is on all the time of course but, > as it's connected via a 'domestic' broadband serv

Re: Strategies for using backup MX records

On 8/17/2017, 8:56:53 AM, Phil Stracchino wrote: > I have a single secondary MX at a domain controlled by another competent > individual whom I know. It's useful in the event of a sustained service > outage or other delivery problems (say, if the main application server > went down and I had to r

Re: Strategies for using backup MX records

On 17/08/17 13:38, Chris Green wrote: > I run Postfix on a home server which is on all the time of course but, > as it's connected via a 'domestic' broadband service it's not a 100% > reliable connection. There are also times when I reconfigure things > (e.g. upgrade the server) that cause downti

Double Mails delivered with aliases.

Hiya, I'm having sort of a strange problem with my postfix installation. I have Local users and users with forwards. Some can have more than one forward, say we have Original-Recipient a...@a.test that forwards to local b...@a.test and remote c...@b.test

Re: Strategies for using backup MX records

On 08/17/17 09:04, Tanstaafl wrote: > In the vast majority of cases, the perceived benefit is simply not worth > the trouble. If your server is down for more than 3 days, then you have > bigger problems, and the vast majority of the emails you would have held > will have lost their value (if they h

Re: Double Mails delivered with aliases.

On 08/17/17 09:27, Søren Peter Skou wrote: > Hiya, > > I’m having sort of a strange problem with my postfix installation. > > I have Local users and users with forwards. Some can have more than one > forward, say we have Original-Recipient a...@a.test that > forwards to local

SV: Double Mails delivered with aliases.

> Short version: > If you have a delivery address aliasing scheme set up that results in > mail being delivered to duplicate email addresses for the same user, it > is not Postfix's responsibility to de-duplicate those emails. That's on > you. Yeah, I'm aware of this. Also, So far it is doing exa

Re: Double Mails delivered with aliases.

On 17.08.17 13:27, Søren Peter Skou wrote: I have Local users and users with forwards. how do they forward? [...] Postfix receives the mail, handles greylisting, quota, spf, dkim and other lovelies. Then sends it off via "content_filter=scan:127.0.0.1:10025" to clamsmtp. This returns on por

OT: Re: Strategies for using backup MX records

On 8/17/2017, 9:28:00 AM, Phil Stracchino wrote: > This is nice in theory but doesn't work in practice, This statement is most assuredly not true in a general sense. The reality is, it works very well in the vast majority of cases. > because not every sender particularly closely follows the app

SV: Double Mails delivered with aliases.

(and now to the list instead of directly, apologies 'bout that) > >I have Local users and users with forwards. > how do they forward? Using virtual_alias_maps - Lookup into a database, that returns the field alias as destination (alias due to a backend expecting that particular fieldname). If th

Re: reject_unknown_sender_domain and TXT record

Matus UHLAR - fantomas skrev den 2017-08-17 12:04: On 17.08.17 14:00, Brett @Google wrote: Should they be ? I guess in this case the servers generate mail only. no. if servers generate mail, their from: domain has to exist. mta does not care of from: postfix only care of return-path: header

Re: reject_unknown_sender_domain and TXT record

On 17.08.17 14:00, Brett @Google wrote: Should they be ? I guess in this case the servers generate mail only. Matus UHLAR - fantomas skrev den 2017-08-17 12:04: no. if servers generate mail, their from: domain has to exist. On 17.08.17 16:27, Benny Pedersen wrote: mta does not care of from

Re: Postfix, Kerberos and dns_canonicalize_hostname = false

On Wed, Aug 16, 2017 at 10:09:06PM -0400, Robert Marcano wrote: > I have been using Postfix with Kerberos without problem for a few years. > Our setup uses a DNS alias (CNAME) for the hostname. Let call it > smtp.example.com, pointing to the real hostname server.example.com. Is this an MX hostnam

Re: Strategies for using backup MX records

On Thu, Aug 17, 2017 at 08:49:20AM -0400, Tanstaafl wrote: > On 8/17/2017, 8:38:18 AM, Chris Green wrote: > > What sort of strategies are available for coping with the (rare) > > disconnections of a few hours that occasionally occur? I know that > > SMTP delivery is fairly robust and, as far as I

Re: Strategies for using backup MX records

On Thu, Aug 17, 2017 at 09:04:45AM -0400, Tanstaafl wrote: > On 8/17/2017, 8:56:53 AM, Phil Stracchino wrote: > > I have a single secondary MX at a domain controlled by another competent > > individual whom I know. It's useful in the event of a sustained service > > outage or other delivery probl

Re: Strategies for using backup MX records

On Thu, Aug 17, 2017 at 02:24:45PM +0100, Allen Coates wrote: > > > On 17/08/17 13:38, Chris Green wrote: > > I run Postfix on a home server which is on all the time of course but, > > as it's connected via a 'domestic' broadband service it's not a 100% > > reliable connection. There are also tim

Re: Postfix, Kerberos and dns_canonicalize_hostname = false

On 08/17/2017 10:47 AM, Viktor Dukhovni wrote: Only by setting "myhostname" as explained above, but you can also set: smtpd_sasl_type = dovecot And let dovecot handle GSSAPI authentication also for Postfix. I have: dovecot.conf: auth_mechanisms = gssapi plain auth_gs

X Header Logging Postfix

Hello, for incoming mails logging the X-Headers works pretty fine by using: header_checks = regexp:/etc/postfix/header_checks the file header_checks contains: /^X-.*:/INFO Logfile: Aug 17 16:56:31 mta01 postfix/cleanup[15387]: 3xY8Rz2rFJzDxk2: info: header X-TEST: value from localhos

Re: Strategies for using backup MX records

The thing I liked about my pop-3 solution was, if my server blew up and I had to rebuild from scratch with new hardware, I could still read my emails via my (almost redundant) ISP account Allen C On 17/08/17 16:10, Chris Green wrote: > On Thu, Aug 17, 2017 at 02:24:45PM +0100, Allen Coates wrote:

smtpd_recipient_restrictions and smtpd_relay_restrictions difference ??

Hi, I am reading "man 5 postconf" of version 2.10.1 I am building new server with it, from old 2.6.6. My question is my server with 2.6 has smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/maps/block_to, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destinatio

Postfix with no SASL: build problems

In another thread we discussed having TLS but no SASL. I have tried the latest experimental Postfix and have dropped back to using v3.2.2. I am using this configuration: make makefiles CCARGS="-DUSE_TLS -DNO_IP_CYRUS_SASL_AUTH" I am using the Debian 8 (wheezy) openssl which is 1.0.1t. During

Re: Postfix with no SASL: build problems

On Thu, Aug 17, 2017 at 1:13 PM, Tom Browder wrote: > In another thread we discussed having TLS but no SASL. > > I have tried the latest experimental Postfix and have dropped back to > using v3.2.2. Please disregard, this "problem" which I'm pretty sure I caused. I'll report the solution when I

Re: X Header Logging Postfix

On 8/17/2017 10:33 AM, Matthias Schneider wrote: > For sending mails using `smtp_header_checks` it _only_ logs the > headers if a connection to the destination server was established: > > Aug 17 16:48:48 mta01 postfix/smtp[14811]: 3xY8Rz2rFJzDxk2: info: > header X-TEST: value > > in case of a tem

Re: Postfix, Kerberos and dns_canonicalize_hostname = false

On Thu, Aug 17, 2017 at 11:24:44AM -0400, Robert Marcano wrote: > > And let dovecot handle GSSAPI authentication also for Postfix. I > > have: > > > > dovecot.conf: > > auth_mechanisms = gssapi plain > > auth_gssapi_hostname = "$ALL" > > auth_krb5_keytab = /var/spool/keytabs/ima