Issue with postfix-policyd-spf-perl

2021-05-12 Thread David Mehler
Hello, I'm running Postfix 3.6, I just upgraded. I do not know if this issue occurred because of the upgrade or prior to it as I hadn't sent any mail through this account lately. I'm having an issue with spf, error log below, if I comment out check policy for spf under recipient_restrictions thin

Re: Issue with postfix-policyd-spf-perl

2021-05-12 Thread Noel Jones
On 5/12/2021 12:26 PM, David Mehler wrote: Hello, I'm running Postfix 3.6, I just upgraded. I do not know if this issue occurred because of the upgrade or prior to it as I hadn't sent any mail through this account lately. I'm having an issue with spf, error log below, if I comment out check p

Re: Issue with postfix-policyd-spf-perl

2021-05-12 Thread David Mehler
Hello, Thanks. Here's my master.cf submission entry: submission inet n - n - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o milte

Re: Issue with postfix-policyd-spf-perl

2021-05-12 Thread Noel Jones
On 5/12/2021 2:11 PM, David Mehler wrote: Hello, Thanks. Here's my master.cf submission entry: submission inet n - n - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrict

Re: Issue with postfix-policyd-spf-perl

2021-05-12 Thread Noel Jones
On 5/12/2021 2:21 PM, Noel Jones wrote: On 5/12/2021 2:11 PM, David Mehler wrote: Hello, Thanks. Here's my master.cf submission entry: submission inet n   -   n   -   -   smtpd   -o syslog_name=postfix/submission   -o smtpd_tls_security_level=encrypt -o smtpd_sasl_aut

Re: Issue with postfix-policyd-spf-perl

2021-05-12 Thread Benny Pedersen
On 2021-05-12 21:27, Noel Jones wrote: Oh, and remove any permit_sasl_authenticated from the entries in main.cf - assuming that no authenticated users should be using port 25. and make sure main.cf does not have smtpd_sasl_auth_enable=yes common mistakes

Monitoring logs for blocks and deferrals

2021-05-12 Thread Justin Lloyd
Hi all, I'm not sure if this list is completely appropriate for this question, so let me know if it's not. I have a couple of Postfix servers that are the MX servers for a couple of domains that handle a total of around 160-180k messages each week. They servers are just relays (no local accoun

Re: Monitoring logs for blocks and deferrals

2021-05-12 Thread IL Ka
> > > Postfix have any native capabilities good for detecting these issues and > acting on them, or would I just need to do some kind of checks on the > pflogsumm output each day? Obviously the sooner I can catch these messages > and act on them, the better, so the more realtime I can do this, the

Verifying recipients before checking RBL

2021-05-12 Thread Aleksei Shpakovskii
Hi, I would like to verify recipient address before hitting DNS RBL. But it seems I'm unable to do this. Am I doing something wrong? Using 32-bit Postfix 3.6.0-r0 from Alpine inside Docker container. My main.cf file looks like this: # main.cf # mydomain=example.net compatibility_level=3

Re: Verifying recipients before checking RBL

2021-05-12 Thread Wietse Venema
Aleksei Shpakovskii: > Hi, > > I would like to verify recipient address before hitting DNS RBL. But > it seems I'm unable to do this. Am I doing something wrong? > > Using 32-bit Postfix 3.6.0-r0 from Alpine inside Docker container. > > My main.cf file looks like this: > > # main.cf # >

zendesk and relay denied

2021-05-12 Thread Alex
Hi, I've set up postfix to be the mail relay for a domain so we can process it through amavis/spamassassin prior to it being forwarded on to our O365 domain. I've set up a recipient check to allow relaying for our zendesk support domain, but for some reason it's still being rejected. Is it due to

Re: zendesk and relay denied

2021-05-12 Thread IL Ka
> > > Hi, > Hello, > > I've set up postfix to be the mail relay for a domain so we can > process it through amavis/spamassassin prior to it being forwarded on > to our O365 domain. > You need to add this domain to the "relay_domains" > > I've set up a recipient check to allow relaying for our z

Re: zendesk and relay denied

2021-05-12 Thread Alex
Hi, >> I've set up postfix to be the mail relay for a domain so we can >> process it through amavis/spamassassin prior to it being forwarded on >> to our O365 domain. > > You need to add this domain to the "relay_domains" Ah yes, of course. >> I've set up a recipient check to allow relaying for

Re: zendesk and relay denied

2021-05-12 Thread Viktor Dukhovni
On Wed, May 12, 2021 at 07:49:13PM -0400, Alex wrote: > relay_domains = $mydestination, example.com > check_recipient_access pcre:$config_directory/nnnhelp-zendesk, That is not valid relay_domains syntax. For more help, see: http://www.postfix.org/DEBUG_README.html#mail -- Vik

Re: Mail deferred: TLSA lookup error

2021-05-12 Thread Viktor Dukhovni
On Tue, May 04, 2021 at 10:02:49AM +0200, Bjoern Franke wrote: > Do I miss something why postfix has the trouble with the reply? > > $ dig +dnssec -t TLSA _25._tcp.smtp-relay-in-s1.neusta.de You're testing with "dig", which is *not* the same as the C library stub DNS resolver. > ;; Truncated, r