Re: easiest way to reject/process emails based on Return Path

2020-05-08 Thread Gerald Galster
>> Below is the PCRE that I came up with to catch the offending messages, >> without blocking other correspondence (the contacts and their >> organizations are likely to use Google's SMTP for their regular >> emails): >> >> /^Return-Path:(.+)(calendar-server.bounces.google.com)(.*)/ REJECT No >

Need to run a Milter twice - before and after queue

2020-05-08 Thread NBNabble
Hello everybody, as a completely postfix noob, I need your help. I have a Ciphermail / Djigzo Appliance, which encrypts and decrypts mails. INTERNET <---> SMTP/25 Ciphermail <--> SMTP/25 Mailserver this works. I also have a Kaspersky Secure Mail Gateway as Antivirus and Spam protection, running

BCC on local delivery agent?

2020-05-08 Thread Admin Beckspaced
Dear postfix users, I have setup dovecot with quota warning. The quota warning email is send via Dovecot LDA (https://wiki.dovecot.org/LDA) This is the command in the shell script: /usr/lib/dovecot/dovecot-lda -f nore...@beckspaced.com -d $USER -o "plugin/quota=dict:User quota::noenforcing:

Re: BCC on local delivery agent?

2020-05-08 Thread Admin Beckspaced
Am 08.05.2020 um 10:38 schrieb Admin Beckspaced: Dear postfix users, I have setup dovecot with quota warning. The quota warning email is send via Dovecot LDA (https://wiki.dovecot.org/LDA) This is the command in the shell script: /usr/lib/dovecot/dovecot-lda -f nore...@beckspaced.com -d $US

Re: BCC on local delivery agent?

2020-05-08 Thread Gerald Galster
Hi, > The quota warning email is send via Dovecot LDA (https://wiki.dovecot.org/LDA) > > This is the command in the shell script: > > /usr/lib/dovecot/dovecot-lda -f nore...@beckspaced.com -d $USER -o > "plugin/quota=dict:User quota::noenforcing:proxy::quota" as you said the dovecot quota warn

Re: milter after queue

2020-05-08 Thread NBNabble
Hi Wietse, I have a question to your hint using a null SMTP based listener. I am Using Ciphermail as an encryption gateway. Pre-Queue mails are send to an external milter for Spam/Virus Checks. After that, post-queue, the encryption gateway is a content_filter. I am looking for a solution to re

Re: BCC on local delivery agent?

2020-05-08 Thread Admin Beckspaced
Hi, The quota warning email is send via Dovecot LDA (https://wiki.dovecot.org/LDA) This is the command in the shell script: /usr/lib/dovecot/dovecot-lda -f nore...@beckspaced.com -d $USER -o "plugin/quota=dict:User quota::noenforcing:proxy::quota" as you said the dovecot quota warning calls

Re: explicit shlib_directory in main.cf

2020-05-08 Thread Wietse Venema
Maxim Nikulin: > Sorry, I narrowed down context too much, My question was on > shlib_directory, so I assumed that "..." is a proper substitution > for all other variables. By the way, I noticed that queue_directory > and data_directory are passed to "make non-interactive-package" > but not to "post

dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found.

2020-05-08 Thread Alexander Meinhardt
Hey folks, for inexplicable reasons i don't get any results from zen.spamhaus.org anymore: Apr 08 16:20:29 [postfix/dnsblog] warning: dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found. Name service error for name=x.x.x.x.zen.spamhaus.org type=A: Hos

Re: dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found.

2020-05-08 Thread Dominic Raferd
On Fri, 8 May 2020 at 16:09, Alexander Meinhardt wrote: > for inexplicable reasons i don't get any results from zen.spamhaus.org > anymore: > > Apr 08 16:20:29 [postfix/dnsblog] warning: dnsblog_query: lookup error > for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found. > Name se

Re: dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found.

2020-05-08 Thread Wietse Venema
Alexander Meinhardt: > Hey folks, > > for inexplicable reasons i don't get any results from zen.spamhaus.org > anymore: > > Apr 08 16:20:29 [postfix/dnsblog] warning: dnsblog_query: lookup error > for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found. > Name service error for nam

Re: dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found.

2020-05-08 Thread Alexander Meinhardt
> A possible cause is that you are not using your own DNS resolver but > instead relying on a third party (such as your ISP), and their > resolver has been blocked by Spamhaus for over-usage. In which case > you need to set up your own DNS resolver (e.g. bind) and use this > instead, ensuring it do

XCLIENT

2020-05-08 Thread Paul
Hi Can  a postfix smtp client be made to  send xclient data to a xclient enabled local smtpd service ? Regards Paul

Is it necessary to declare "alias_maps" in the main.cf? t.s.

2020-05-08 Thread Thomas Strike
With all the problems that I'm having with my Postfix setup, I am taking a deeper dive into the meaning of each parameter declaration. Is it necessary to declare "alias_maps" in the main.cf or does it have a default file path that it looks to or does it just not look at alias_maps if not declare

Is it necessary to declare "alias_maps" in the main.cf? t.s.

2020-05-08 Thread Thomas Strike
With all the problems that I'm having with my Postfix setup, I am taking a deeper dive into the meaning of each parameter declaration. Is it necessary to declare "alias_maps" in the main.cf or does it have a default file path that it looks to or does it just not look at alias_maps if not declare

Re: dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found.

2020-05-08 Thread Gerald Galster
>> Does the 'test' address work? See >> https://www.spamhaus.org/faq/section/DNSBL%20Usage#366 >> >> $ dig +short 2.0.0.127.zen.spamhaus.org @DNS.server >> >> for relevant values of 'DNS.server' including 127.0.0.1. > > dig @127.0.0.1 1.0.0.127.zen.spamhaus.org +short > ; <<>> DiG 9.14.8 <<>>

RE: Is it necessary to declare "alias_maps" in the main.cf? t.s.

2020-05-08 Thread Dudi Goldenberg
Hi, postconf -d alias_maps will show the default. Regards, D. From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Thomas Strike Sent: Friday, May 08, 2020 19:24 To: postfix-us...@cloud9.net Subject: Is it necessary to declare "alias_maps" in the main.cf?

Re: Is it necessary to declare "alias_maps" in the main.cf? t.s.

2020-05-08 Thread Gerald Galster
> With all the problems that I'm having with my Postfix setup, I am taking a > deeper dive into the meaning of each parameter declaration. > Is it necessary to declare "alias_maps" in the main.cf or does it have a > default file path that it looks to or does it just not look at alias_maps if > n

Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread michae...@rocketmail.com
Hi all, I've a generic question to all more experienced than me postfix users here: Is it nowadays (reasonable) possible to run postfix with IPv6 only? E.g "mail.example.com" and "smtp.example.com" with only ipv6 records in the DNS, no A / ipv4 anymore? Michael - EOM for impatien

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Thomas Quinot
* Wietse Venema, 2019-05-18 : > smtpd_mumble_restrictions = > ... > check_ccert_access { > maptype:mapname, { search_order = cert_fingerprint, > pubkey_fingerprint, subject, issuer } > } > ... > > Where subject (or issuer) will search maptype:mapname for a match

Re: Is it necessary to declare "alias_maps" in the main.cf? t.s.

2020-05-08 Thread Bill Cole
On 8 May 2020, at 12:12, Thomas Strike wrote: With all the problems that I'm having with my Postfix setup, I am taking a deeper dive into the meaning of each parameter declaration. Is it necessary to declare "alias_maps" in the main.cf or does it have a default file path that it looks to or doe

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Gerald Galster
Hi, > I've a generic question to all more experienced than me postfix users here: > Is it nowadays (reasonable) possible to run postfix with IPv6 only? E.g > "mail.example.com" and "smtp.example.com" with only ipv6 records in the > DNS, no A / ipv4 anymore? I would not yet advise to run

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Allen Coates
On 08/05/2020 17:38, michae...@rocketmail.com wrote: > Hi all, > > > I've a generic question to all more experienced than me postfix users here: > Is it nowadays (reasonable) possible to run postfix with IPv6 only? E.g > "mail.example.com" and "smtp.example.com" with only ipv6 records i

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Sean Greenslade
On Fri, May 08, 2020 at 06:38:32PM +0200, michae...@rocketmail.com wrote: > Hi all, > > > I've a generic question to all more experienced than me postfix users here: > Is it nowadays (reasonable) possible to run postfix with IPv6 only? E.g > "mail.example.com" and "smtp.example.com" with only

smtpd and submission inet_interfaces

2020-05-08 Thread Nick
Can these be different - e.g. smtpd listens on 0.0.0.0 and [::], while submission listens on 127.0.0.1 and [::1]? Adding '-o inet_interfaces=loopback-only' in master.cf under the submission service then restarting postfix made no difference, according to 'ss'. Thanks -- Nick

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Wietse Venema
Thomas Quinot: > * Wietse Venema, 2019-05-18 : > > > smtpd_mumble_restrictions = > > ... > > check_ccert_access { > > maptype:mapname, { search_order = cert_fingerprint, > > pubkey_fingerprint, subject, issuer } > > } > > ... > > > > Where subject (or issuer) will

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Wietse Venema
Nick: > Can these be different - e.g. smtpd listens on 0.0.0.0 and [::], while > submission listens on 127.0.0.1 and [::1]? > > Adding '-o inet_interfaces=loopback-only' in master.cf under the > submission service then restarting postfix made no difference, according > to 'ss'. master.cf setting

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Nick
On 2020-05-08 18:41 BST, Wietse Venema wrote: > master.cf settings override main.cf settings, and main.cf settings > override built-in default settings. > > You can configure Postfix receive email on any IP address, as long > as the IP address is configured (as primary or alias). I'll try again a

Re: XCLIENT

2020-05-08 Thread Wietse Venema
Paul: > Hi > > Can? a postfix smtp client be made to? send xclient data to a xclient > enabled local smtpd service ? This is not documented, therefore not supported. Also: $ postconf -H | grep 'smtp_.*xclient' produces no output, whereas $ postconf -H | grep 'smtp_.*xforward' does.

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Wietse Venema
Nick: > On 2020-05-08 18:41 BST, Wietse Venema wrote: > > master.cf settings override main.cf settings, and main.cf settings > > override built-in default settings. > > > > You can configure Postfix receive email on any IP address, as long > > as the IP address is configured (as primary or alias).

mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Thomas Strike
External smtp servers time out after tls v1.2 is established. the following is from the maillog; May  8 17:40:48 sleepyvalley postfix/smtps/smtpd[17534]: connect from unknown[185.50.149.12] May  8 17:40:50 sleepyvalley postfix/smtps/smtpd[17534]: Anonymous TLS connection established from unkno

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Nick
On 2020-05-08 18:59 BST, Wietse Venema wrote: > Nick: > > Can postfix be configured such that it changes to > > > > 127.0.0.1:submission > >0.0.0.0:smtp > > > > (and similarly for ipv6)? > > If you want two services to listen on different IP addresses, then > that requires an override in ma

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Wietse Venema
Nick: > On 2020-05-08 18:59 BST, Wietse Venema wrote: > > Nick: > > > Can postfix be configured such that it changes to > > > > > > 127.0.0.1:submission > > >0.0.0.0:smtp > > > > > > (and similarly for ipv6)? > > > > If you want two services to listen on different IP addresses, then > > tha

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Bill Cole
On 8 May 2020, at 12:38, michae...@rocketmail.com wrote: Hi all, I've a generic question to all more experienced than me postfix users here: Is it nowadays (reasonable) possible to run postfix with IPv6 only? E.g "mail.example.com" and "smtp.example.com" with only ipv6 records in the

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Nick
On 2020-05-08 19:26 BST, Wietse Venema wrote: > You need to specify the IP address override as > > 127.0.0.1:submission .. .. .. .. .. .. smtpd > > in master.cf. That works for ipv4 and "[::1]:submission ..." works for ipv6. I'm further than I was, thanks. Is there a way to make it

Re: mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Matus UHLAR - fantomas
On 08.05.20 13:01, Thomas Strike wrote: Subject: mail from external servers connecting but timing out after tls established. t.s. External smtp servers time out after tls v1.2 is established. the following is from the maillog; May  8 17:40:48 sleepyvalley postfix/smtps/smtpd[17534]: connect f

Re: mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Matus UHLAR - fantomas
On 08.05.20 13:01, Thomas Strike wrote: Subject: mail from external servers connecting but timing out after tls established. t.s. External smtp servers time out after tls v1.2 is established. the following is from the maillog; May  8 17:40:48 sleepyvalley postfix/smtps/smtpd[17534]: connect

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Wietse Venema
Nick: > On 2020-05-08 19:26 BST, Wietse Venema wrote: > > You need to specify the IP address override as > > > > 127.0.0.1:submission .. .. .. .. .. .. smtpd > > > > in master.cf. > > That works for ipv4 and "[::1]:submission ..." works for ipv6. I'm > further than I was, thanks. >

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Ralph Seichter
* Bill Cole: > Some have IPv6 connectivity and address space but no motivation to > make their mail systems use IPv6. A case of what we call Public Servant Mikado (whoever moves first has lost). ;-) Seriously, I think that if one can support IPv6, one should do it. Good hosting services and ISPs

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Nick
On 2020-05-08 20:03 BST, Wietse Venema wrote: > Nick: > > Is there a way to make it work for both ipv4 and ipv6 at the same time? > > I tried "127.0.0.1,[::1]:submission ..." but postfix wouldn't start. > > See: http://www.postfix.org/master.5.html I think I found the way, which is to repeat the

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Viktor Dukhovni
On Fri, May 08, 2020 at 06:38:32PM +0200, michae...@rocketmail.com wrote: > I've a generic question to all more experienced than me postfix users > here: Is it nowadays (reasonable) possible to run postfix with IPv6 > only? E.g "mail.example.com" and "smtp.example.com" with only ipv6 > recor

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Wietse Venema
Nick: > On 2020-05-08 20:03 BST, Wietse Venema wrote: > > Nick: > > > Is there a way to make it work for both ipv4 and ipv6 at the same time? > > > I tried "127.0.0.1,[::1]:submission ..." but postfix wouldn't start. > > > > See: http://www.postfix.org/master.5.html > > I think I found the way, w

Re: smtpd and submission inet_interfaces

2020-05-08 Thread Nick
On 2020-05-08 20:15 BST, Wietse Venema wrote: > Nick: > > I think I found the way, which is to repeat the entire submission > > definition in master.cf and c h a n g e the a d d r e s s [my previous > > post was bounced so I'm trying those words with spaces]. If there is a > > more succinct way, t

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Viktor Dukhovni
On Sat, May 18, 2019 at 11:01:28AM -0400, Wietse Venema wrote: > After a week of testing, Postfix snapshot 20190518 implements support > for: > > smtpd_mumble_restrictions = > ... > check_ccert_access { > maptype:mapname, { search_order = cert_fingerprint, > pubkey_finge

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Bob Proulx
Bill Cole wrote: > michaelof wrote: > > I've a generic question to all more experienced than me postfix users > > here: Is it nowadays (reasonable) possible to run postfix with IPv6 > > only? E.g "mail.example.com" and "smtp.example.com" with only ipv6 > > records in the DNS, no A / ipv4 anym

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Bill Cole
On 8 May 2020, at 15:06, Ralph Seichter wrote: * Bill Cole: Some have IPv6 connectivity and address space but no motivation to make their mail systems use IPv6. A case of what we call Public Servant Mikado (whoever moves first has lost). ;-) Yes. Seriously, I think that if one can suppor

Re: mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Thomas Strike
Matus: your right. I misused the word server. I thought that this was the test message being sent with gmail because every time I sent a new test, this IP came up in the maillog. This turns out to be a Russian IP. Geez, Louise! I have Russia trying to hack me.

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Wietse Venema
Bob Proulx: > How are working and available IPv6 DNSBLs progressing? That's a > critical component which I would love to hear is no longer a missing > component. zen.spamhaus.org blocks some 15% of IPv6 spam for me. The other 85% comes from large providers (outlook.com, gmail.com, etc) that aren'

Re: mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Christian
Am Freitag, den 08.05.2020, 15:51 -0500 schrieb Thomas Strike: > Matus: your right. I misused the word server. I thought that this was > the test message being sent with gmail because every time I sent a > new test, this IP came up in the maillog. > This turns out to be a Russian IP. Geez, Louise!

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Ralph Seichter
* Bill Cole: > The boutique hosting/connectivity/services provider I work with [...] > can provide native IPv6 to customers. None ever has ever asked for it. That's quite a sweeping statement, and I don't believe it to be true. For years I have asked every provider I have worked with if they offe

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Curtis Villamizar
In message <2eb09baa-5327-b615-47a9-0c1402385...@rocketmail.com> "michae...@rocketmail.com" writes: > > Hi all, > > I've a generic question to all more experienced than me postfix users > here: Is it nowadays (reasonable) possible to run postfix with IPv6 > only? E.g "mail.example.com" and "smtp

Re: mail from external servers connecting but timing out after tls established. t.s.

2020-05-08 Thread Thomas Strike
>On postfix itself you can use regular blocklists to prevent such obvious IPs. For the other services like imap etc. it helps to use fail2ban. I have all filtering that I know of off right now. I am just trying to establish incoming communication with other SMTP clients right now. Once I get

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Bill Cole
On 8 May 2020, at 17:26, Ralph Seichter wrote: > * Bill Cole: > >> The boutique hosting/connectivity/services provider I work with [...] >> can provide native IPv6 to customers. None ever has ever asked for it. > > That's quite a sweeping statement, and I don't believe it to be true. Calling some

mysql postfix table "alias_domain" was created PostfixAdmin but it is empty. t.s.

2020-05-08 Thread Thomas Strike
I installed PostfixAdmin with postfix and mariadb. After PostfixAdmin set up the database, I populated it with adding domains and users through the PostfixAdmin web interface. It seemed to write all the data required to all the tables except the alias_domain table which is empty. Does Postfix u

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Thomas Quinot
* Wietse Venema, 2020-05-08 : > > As far as I can tell, support for issuer and subject CN lookup > > was removed on 20200316. Is my understanding correct that support > > As far as I know it was never implemented. Sorry, I probably misunderstood the code while reading it. For the record, the cha

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Ralph Seichter
* Bill Cole: >> That's quite a sweeping statement, and I don't believe it to be true. > > Calling someone a liar is a very effective way to end a conversation. Don't know if Trump supporter or trolling... I am a scientist, and thus do not consider your claim to be true until you prove it. I have

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Allen Coates
On 08/05/2020 21:58, Wietse Venema wrote: > Bob Proulx: >> How are working and available IPv6 DNSBLs progressing? That's a >> critical component which I would love to hear is no longer a missing >> component. > > zen.spamhaus.org blocks some 15% of IPv6 spam for me. The other 85% > comes from

Re: BCC on local delivery agent?

2020-05-08 Thread @lbutlr
On 08 May 2020, at 02:54, Admin Beckspaced wrote: > ups ... I think I can answer my own question? > Why is it that the answer mostly comes once the email has been sent ;) Because if it came before, you wouldn’t sent the message! (90% of the email questions I write are never sent, hard to believe