Re: Understanding master.cf

2019-10-06 Thread Gerben Wierda
> On 5 Oct 2019, at 18:43, Viktor Dukhovni wrote: Thank you. That helped (more to point out I had made a stupid mistake). > On Sat, Oct 05, 2019 at 11:51:24AM +0200, Gerben Wierda wrote: > >> [...], my log says: >> >> Oct 05 11:35:21 mail postfix/smtpd[2218]: cannot load Certification >> Auth

Only logging from a connection when an unrelated error is forced in main.cf

2019-10-06 Thread Gerben Wierda
Using postfix 3.4.6 on macOS. Using maillog as syslog is broken on macOS. The postfix server is running on 192.168.2.66, dovecot and other parts of the mail setup not yet. I am connecting from 192.168.2.67 on port 25, using telnet. I’m issuing an HELO and a VRFY (turned on temporarily in main.cf

Re: Only logging from a connection when an unrelated error is forced in main.cf

2019-10-06 Thread Wietse Venema
Gerben Wierda: > When I remove the forced error > > check_client_access regexp:/opt/local/etc/postfix/rna_rbl_whitelist_clients > > I see nothing. No ?connect from unknown[192.168.2.67]?. Nothing. > This baffles me. Why do I only see logging in my maillog (including > debug_peer) when I introduce

Re: Limiting mail relay

2019-10-06 Thread Patrick Mahan
Many thanks. Especially for the GeoIP reference. I will take steps to clean up that account. Again, thanks. Patrick On Sat, Oct 5, 2019 at 11:45 PM Viktor Dukhovni wrote: > > On Oct 6, 2019, at 2:09 AM, Patrick Mahan wrote: > > > > I am trying to understand how I am being a mail relay for (

How to avoid being classified as spam by Google?

2019-10-06 Thread martin f krafft
Folks, I hope this is not too off-topic, but I figure this is the best mailing list because we're probably not in this boat alone, wherein we're annoyed (very) and a bit helpless about Google. I have to ask here, because Google of course doesn't care about us. We operate several postfix mail

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread Benny Pedersen
martin f krafft skrev den 2019-10-06 18:36: Authentication-Results: mx.google.com; dkim=pass (test mode) header.i=@example.org header.s=2015-11-14 header.b=T7jbyqDv; spf=pass (google.com: best guess record for domain of madd...@example.org designates 2001:db8:bad::cafe:: as permitte

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread Bill Cole
On 6 Oct 2019, at 12:36, martin f krafft wrote: Folks, I hope this is not too off-topic, but I figure this is the best mailing list because we're probably not in this boat alone, wherein we're annoyed (very) and a bit helpless about Google. I have to ask here, because Google of course doesn'

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread Benny Pedersen
Bill Cole skrev den 2019-10-06 18:50: The MailOp list is probably a better choice: https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop NET::ERR_CERT_SYMANTEC_LEGACY Actual Google mail admins respond to such queries there. Really. if recipient keeps mails in spam folder how could go

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread martin f krafft
Quoting "Benny Pedersen", who wrote on 2019-10-06 at 18:44 Uhr +0200: dkkim running in test mode ?, see if domain have t= in dns Yes, on some domains it's still running in test mode. Is that enough reason for Google admins to flick us the finger? -- @martinkrafft | https://riot.im/app/#/room

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread martin f krafft
Quoting "Bill Cole", who wrote on 2019-10-06 at 12:50 Uhr -0400: The MailOp list is probably a better choice: https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop Thanks! I didn't know about that. Will re-ask there. Sorry for the noise. -- @martinkrafft | https://riot.im/app/#/room/#m

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread Benny Pedersen
martin f krafft skrev den 2019-10-06 19:03: Quoting "Bill Cole", who wrote on 2019-10-06 at 12:50 Uhr -0400: The MailOp list is probably a better choice: https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop Thanks! I didn't know about that. Will re-ask there. Sorry for the noise. not

Re: Understanding master.cf

2019-10-06 Thread Viktor Dukhovni
On Sun, Oct 06, 2019 at 12:18:05PM +0200, Gerben Wierda wrote: > Yes, it works with postfix when it can be read. It is a full letsencrypt > chain. I am puzzled as to why you're trying to set this as your "CAfile". It is not a file containing trust anchors (root CAs). And, unless your SMTP serv

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread Jaroslaw Rafa
Dnia 6.10.2019 o godz. 12:50:27 Bill Cole pisze: > > The MailOp list is probably a better choice: > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop I have the very same issue as the OP, thanks for pointing to that list! -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a milli

Re: Only logging from a connection when an unrelated error is forced in main.cf

2019-10-06 Thread Wietse Venema
Gerben Wierda: > For some reason, I don?t get smtpd logging at all. E.g. when sending a mail > from Apple Mail.app MUA, this is all I see: > > Oct 06 22:42:21 mail postfix/cleanup[1020]: AE6C5504A6F: > message-id=<8f0db894-0b5a-407c-82fd-1cfb8ef77...@rna.nl> > Oct 06 22:42:21 mail postfix/qmgr[3

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread Wietse Venema
martin f krafft: > Authentication-Results: mx.google.com; dkim=pass (test mode) > header.i=@example.org header.s=2015-11-14 header.b=T7jbyqDv; > spf=pass (google.com: best guess record for domain of > madd...@example.org designates 2001:db8:bad::cafe:: as > permitted sender) smtp.

Re: Only logging from a connection when an unrelated error is forced in main.cf

2019-10-06 Thread Gerben Wierda
> On 7 Oct 2019, at 01:10, Wietse Venema wrote: > > Gerben Wierda: >> For some reason, I don?t get smtpd logging at all. E.g. when sending a mail >> from Apple Mail.app MUA, this is all I see: >> >> Oct 06 22:42:21 mail postfix/cleanup[1020]: AE6C5504A6F: >> message-id=<8f0db894-0b5a-407c-82fd

Is this a good smtpd restrictions set?

2019-10-06 Thread Gerben Wierda
I am revisiting my config and my config was made a long time ago (before relay_restrictions) Would this be a good restrictions set? I think it is but I’m not 100% certain if this is efficient for instance. For instance, I am blocking reject_non_fqdn_recipient in smtpd_recipient_restrictions wi

Re: Only logging from a connection when an unrelated error is forced in main.cf

2019-10-06 Thread Gerben Wierda
And I forgot to mention, now that it isn’t running chroot-ed, the DNS reverse lookups suddenly also work. Apparently, running chrooted is somewhat more difficult that imagined. > Oct 07 01:26:20 mail postfix/master[18890]: daemon started -- version 3.4.6, > configuration /opt/local/etc/postfix

Re: How to avoid being classified as spam by Google?

2019-10-06 Thread martin f krafft
Quoting "Wietse Venema", who wrote on 2019-10-06 at 19:13 Uhr -0400: Perhaps the SMTP client IP address 2001:db8:bad::cafe:: has no PTR record (or the name does not resolve to 2001:db8:bad::cafe::). Good point, but the address has a PTR record to a name with an record pointing to the addr