Re: Postfix : corrupted SMTP transactions?

2021-04-16 Thread Bill Cole
On 16 Apr 2021, at 2:59, @lbutlr wrote: On 15 Apr 2021, at 16:23, Rob McGee wrote: Being pedantic, however, I'd suggest using the IANA and RFC 8314 port name, "submissions", because that's more specific and correct than "smtps", which name implies that it might be a substitute port for smtp,

Re: Postfix : corrupted SMTP transactions?

2021-04-16 Thread @lbutlr
> On 16 Apr 2021, at 05:52, Bill Cole > wrote: > > On 16 Apr 2021, at 2:59, @lbutlr wrote: > >> On 15 Apr 2021, at 16:23, Rob McGee wrote: >>> Being pedantic, however, I'd suggest using the IANA and RFC 8314 port name, >>> "submissions", because that's more specific and correct than "smtps

Re: message size

2021-04-16 Thread natan
Hi What I do wrong ? smtpd_data_restrictions =     check_policy_service  { inet:127.0.0.1:10040 timeout=2s, default_action=DUNNO } postfwd.cf: id=SIZE01 ;  state==END_OF_DATA ;  recipient==piot...@mail2.domain.ltd ; action==REJECT; size==100; On 15.04.2021 18:14, Wietse Venema wrote: >

Re: message size

2021-04-16 Thread Benny Pedersen
On 2021-04-16 14:00, natan wrote: Hi What I do wrong ? smtpd_data_restrictions =     check_policy_service  { inet:127.0.0.1:10040 timeout=2s, default_action=DUNNO } postfwd.cf: id=SIZE01 ;  state==END_OF_DATA ;  recipient==piot...@mail2.domain.ltd ; action==REJECT; size==100; imho y

Re: message size

2021-04-16 Thread Wietse Venema
natan: > Hi > What I do wrong ? > > smtpd_data_restrictions = This says DATA > ??? check_policy_service? { inet:127.0.0.1:10040 timeout=2s, > default_action=DUNNO } > > postfwd.cf: > id=SIZE01 ;? state==END_OF_DATA ;? recipient==piot...@mail2.domain.ltd ; > action==REJECT; size==100; T

Re: message size

2021-04-16 Thread natan
Hi Beny no :) I have default value for everyone: "message_size_limit = 146800640" I try to set another message_size_limit for two recipient ~10MB On 16.04.2021 14:39, Benny Pedersen wrote: > > imho you maked it incorrect, one user is allowed to send more data, > but all others have unlimited ? >

Policy Server Development

2021-04-16 Thread postfix
I am writing a policy server in PHP. I am confused by some of postfix behavior. I designed the PHP service in this manner; /usr/libexec/postfix/per-user-policy: #!/usr/bin/php master.cf: userpolicy unix - n n - 0 spawn user=mail argv=/usr/libexec/postfix/per-user-policy main.cf: userpoli

Re: Policy Server Development

2021-04-16 Thread Wietse Venema
post...@ptld.com: > As of now the policy script writes values supplied by postfix to a log > file and returns the expected action=dunno and empty line. I designed > the PHP to run in a loop with no time outs for it to be available for > multiple request. My understanding of SMTPD_POLICY_README i

postfix

2021-04-16 Thread natan
Hi Wetse and others. I'd like to say you guys are doing a really good job :) --

Re: Policy Server Development

2021-04-16 Thread Viktor Dukhovni
On Fri, Apr 16, 2021 at 11:50:12AM -0400, post...@ptld.com wrote: > master.cf: >userpolicy unix - n n - 0 spawn user=mail > argv=/usr/libexec/postfix/per-user-policy This means one process per connection. So when there are multiple smtpd(8) processes, each one will spawn a separate policy s

Re: Policy Server Development

2021-04-16 Thread postfix
There are no errors or warnings. The script runs and works. I can see the values (request=smtpd_access_policy, etc) saved by the script to log. I can also run the script from console with no errors or warnings. Everything works, only problem is script never ends and becomes zombie. What should

REDIRECT overrides always_bcc

2021-04-16 Thread Dominic Raferd
I have started using a REDIRECT action in a header_checks table which works but seems to prevent always_bcc from operating - the email is not bcc'd. I tried adding a subsequent BCC action triggered by the same header text but it has no effect. I realise that this is consistent with documentat

Re: Policy Server Development

2021-04-16 Thread Wietse Venema
post...@ptld.com: > There are no errors or warnings. The script runs and works. I can see > the values (request=smtpd_access_policy, etc) saved by the script to > log. I can also run the script from console with no errors or warnings. > Everything works, only problem is script never ends and bec

Re: Policy Server Development

2021-04-16 Thread postfix
On 04-16-2021 12:43 pm, Viktor Dukhovni wrote: On Fri, Apr 16, 2021 at 11:50:12AM -0400, post...@ptld.com wrote: master.cf: userpolicy unix - n n - 0 spawn user=mail argv=/usr/libexec/postfix/per-user-policy This means one process per connection. So when there are multiple smtpd(8) proce

Re: Policy Server Development

2021-04-16 Thread postfix
On 04-16-2021 1:04 pm, Wietse Venema wrote: What evidence do you have that you have zombie processes, and not simply processes that are idle waiting for work? Wietse Watching ps, for each incoming email a new spfpolicy and userpolicy gets spawned. After a few minutes each spfpolicy t

Re: Policy Server Development

2021-04-16 Thread postfix
On 04-16-2021 1:04 pm, Wietse Venema wrote: As Viktor noted, each smtpd(8) process makes its own connection to a policy service. Then, an smtpd(8) process will reuse its own policy service connection, not a connection that belongs to a different smtpd(8) process. Okay, if im understanding, the

Re: Policy Server Development

2021-04-16 Thread Viktor Dukhovni
On Fri, Apr 16, 2021 at 01:22:25PM -0400, post...@ptld.com wrote: > On 04-16-2021 1:04 pm, Wietse Venema wrote: > > As Viktor noted, each smtpd(8) process makes its own connection to > > a policy service. Then, an smtpd(8) process will reuse its own > > policy service connection, not a connection

Re: Policy Server Development

2021-04-16 Thread postfix
On 04-16-2021 1:28 pm, Viktor Dukhovni wrote: Of course. Since it is spawned for a single connection, once that connection is closed, it couldn't possibly get any further requests. This is not the same as handling one request, you still need a loop to handle one or requests until EOF. I will

Re: REDIRECT overrides always_bcc

2021-04-16 Thread Wietse Venema
Dominic Raferd: > I have started using a REDIRECT action in a header_checks table which > works but seems to prevent always_bcc from operating - the email is not > bcc'd. REDIRECT is a blunt tool that ignores all recipients. If there are multiple redirect actions, then the last action will take

Re: Policy Server Development

2021-04-16 Thread Wietse Venema
post...@ptld.com: > On 04-16-2021 1:04 pm, Wietse Venema wrote: > > As Viktor noted, each smtpd(8) process makes its own connection to > > a policy service. Then, an smtpd(8) process will reuse its own > > policy service connection, not a connection that belongs to a > > different smtpd(8) process.

How to start a script for every outgoing email?

2021-04-16 Thread Stefan Günther
Hello, I'm looking for a solution for the following requirement: E-mails send from internal to external should be queued and a script (in whatever language) should be executed, with the senders e-mail address and maybe the mail id as parameters. After the script hast finished successfully (we

Re: REDIRECT overrides always_bcc

2021-04-16 Thread Dominic Raferd
On 16/04/2021 18:39, Wietse Venema wrote: Dominic Raferd: I have started using a REDIRECT action in a header_checks table which works but seems to prevent always_bcc from operating - the email is not bcc'd. REDIRECT is a blunt tool that ignores all recipients. If there are multiple redirect act

OpenDMARC 1.4.1 pre-release announcement

2021-04-16 Thread Dan Mahoney (Gushi)
All, Apologies that this isn't postfix software specific. Because it gets discussed enough here, myself and the others on the opendmarc team are coming pretty close to releasing opendmarc 1.4.1, which includes a lot of rework to both our own inbuilt SPF handling code, as well as a number of o

Re: How to start a script for every outgoing email?

2021-04-16 Thread Wietse Venema
Stefan G?nther: > Hello, > > I'm looking for a solution for the following requirement: > > E-mails send from internal to external should be queued and a script (in > whatever language) should be executed, with the senders e-mail address and > maybe the mail id as parameters. After the script ha

Re: How to start a script for every outgoing email?

2021-04-16 Thread Wietse Venema
Wietse Venema: > Stefan G?nther: > > Hello, > > > > I'm looking for a solution for the following requirement: > > > > E-mails send from internal to external should be queued and a script (in > > whatever language) should be executed, with the senders e-mail address and > > maybe the mail id as

Re: REDIRECT overrides always_bcc

2021-04-16 Thread Rob McGee
On 2021-04-16 12:03, Dominic Raferd wrote: I have started using a REDIRECT action in a header_checks table which works but seems to prevent always_bcc from operating - the email is not bcc'd. It's ugly, but a possible workaround: REDIRECT to an address which runs a script (transport_maps entry

Re: Postfix : corrupted SMTP transactions?

2021-04-16 Thread Rob McGee
On 2021-04-15 21:02, Bill Cole wrote: On 15 Apr 2021, at 18:23, Rob McGee wrote: Being pedantic, however, I'd suggest using the IANA and RFC 8314 port name, "submissions", It would be good to first confirm and/or fix what is in the /etc/services file on the system in question before making th

Re: Postfix : corrupted SMTP transactions?

2021-04-16 Thread Benny Pedersen
On 2021-04-16 21:27, Rob McGee wrote: On 2021-04-15 21:02, Bill Cole wrote: On 15 Apr 2021, at 18:23, Rob McGee wrote: Being pedantic, however, I'd suggest using the IANA and RFC 8314 port name, "submissions", It would be good to first confirm and/or fix what is in the /etc/services file on

Re: Postfix : corrupted SMTP transactions?

2021-04-16 Thread Bill Cole
On 16 Apr 2021, at 15:27, Rob McGee wrote: On 2021-04-15 21:02, Bill Cole wrote: On 15 Apr 2021, at 18:23, Rob McGee wrote: Being pedantic, however, I'd suggest using the IANA and RFC 8314 port name, "submissions", It would be good to first confirm and/or fix what is in the /etc/services fi

Re: Postfix : corrupted SMTP transactions?

2021-04-16 Thread Viktor Dukhovni
On Fri, Apr 16, 2021 at 05:30:43PM -0400, Bill Cole wrote: > No two current OS/distro 'families' of the 6 that I've checked have > the same 465/tcp entry, and only Debian has 'submissions' as the > primary name. None include it as an alias. All except MacOS have > smtps as either the primary name