Today is a good day to DANE!

2021-08-17 Thread raf
Hi, If you'd like to point DANE at your postfix server, today might be a good day to look into it. If not, please ignore the rest of this post. And apologies if this is all old news to you. If you use Debian stable, and ISC Bind, it has just become really really easy to implement DNSSEC for your

Re: Today is a good day to DANE!

2021-08-17 Thread Viktor Dukhovni
On Tue, Aug 17, 2021 at 06:12:04PM +1000, raf wrote: > If you use Debian stable, and ISC Bind, it has just > become really really easy to implement DNSSEC for your > domain(s). Indeed, BIND 9.16 makes it dramatically easier to sign your DNS zone and keep it signed reliably. It automates ZSK roll

Google spam...

2021-08-17 Thread SH Development
We have been getting inundated by spam from Google (gmail). I know that if our server gets reported for even a few spammy messages, Google won’t hesitate to block our server. Short of blocking Google on our server, is there some place to report spam we have received from the Google platform? S

Re: Google spam...

2021-08-17 Thread Viktor Dukhovni
> On 17 Aug 2021, at 5:13 pm, SH Development > wrote: > > We have been getting inundated by spam from Google (gmail). > > I know that if our server gets reported for even a few spammy messages, > Google won’t hesitate to block our server. > > Short of blocking Google on our server, is there s

Re: Google spam...

2021-08-17 Thread Dan Mahoney
> On Aug 17, 2021, at 2:13 PM, SH Development > wrote: > > We have been getting inundated by spam from Google (gmail). > > I know that if our server gets reported for even a few spammy messages, > Google won’t hesitate to block our server. > > Short of blocking Google on our server, is the

Re: Google spam...

2021-08-17 Thread Benny Pedersen
On 2021-08-17 23:35, Viktor Dukhovni wrote: Yes, but I doubt it would have any meaningful effect. :-( hope google can do better with dkim reports, not accepting reports with brokken dkim signs from google :/ You can (with much manual effort) fill in Google's abuse report form: htt

Re: Google spam...

2021-08-17 Thread Vince Heuser
What's the matter with ab...@google.com  and at spamcop.net? On 2021/08/17 17:35 PM, Viktor Dukhovni wrote: On 17 Aug 2021, at 5:13 pm, SH Development wrote: We have been getting inundated by spam from Google (gmail). I know that if our server gets reported for even a few spammy messages,

Request for help for wierd relaying...

2021-08-17 Thread fp145
I have set up a postfix/dovecot/roundcube server on an Ubuntu box. Everything works fine *except* that my personal account on that machine cannot send mail to another account I have on a different machine. Instead, it's delivered back to the sender. Specifically, if the account fp...@libertyfp.o

Re: Today is a good day to DANE!

2021-08-17 Thread raf
On Tue, Aug 17, 2021 at 12:35:40PM -0400, Viktor Dukhovni wrote: > On Tue, Aug 17, 2021 at 06:12:04PM +1000, raf wrote: > > > If you use Debian stable, and ISC Bind, it has just > > become really really easy to implement DNSSEC for your > > domain(s). > > Indeed, BIND 9.16 makes it dramaticall

Re: Request for help for wierd relaying...

2021-08-17 Thread Viktor Dukhovni
On Tue, Aug 17, 2021 at 09:18:08PM -0400, fp145 wrote: > Aug 18 02:58:09 libertyfp postfix/lmtp[11706]: D0C4941E97: >to=, orig_to=, >relay=mail.libertyfp.org[private/dovecot-lmtp], delay=0.96, >delays=0.91/0.02/0.02/0.01, dsn=2.0.0, status=sent (250 2.0.0 > +TFjIyFbHGG7LQAAHPmxyw S

AW: Google spam...

2021-08-17 Thread ludicree
Google does not honor abuse addresses, or spamcop. Which makes it the #1 scammer paradise. Greets, Ludi -Ursprüngliche Nachricht- Von: owner-postfix-us...@postfix.org Im Auftrag von Vince Heuser Gesendet: Mittwoch, 18. August 2021 02:06 An: postfix-users@postfix.org Betreff: Re: Goog

Re: Google spam...

2021-08-17 Thread Viktor Dukhovni
On Wed, Aug 18, 2021 at 07:27:38AM +0200, ludic...@gmail.com wrote: > Google does not honor abuse addresses, or spamcop. > > Which makes it the #1 scammer paradise. The key problem is that email accounts are free, and the 419 scammers are not bots, and so it is difficult to prevent them from op

AW: Google spam...

2021-08-17 Thread ludicree
Yes, many of them are regular GUI users. But also many of them do the same scheme for years now, sometimes for long periods with the same accounts. Like the notorious "Maria Elisabeth Schaeffler" mass scam every day. I do not believe Google does not know what goes on. They just don't care. Othe

Re: Request for help for wierd relaying...

2021-08-17 Thread raf
On Wed, Aug 18, 2021 at 12:43:55AM -0400, Viktor Dukhovni wrote: > > sender_dependent_relayhost_maps = hash:/etc/postfix/bysender > > Whatever, not directly relevant to your problem... > > > and here's what's in /etc/postfix/bysender > > > > % more bysender > > *@gmail.com [mail.billoblog.com

How to set up a shadow server

2021-08-17 Thread Ron Garret
Is there an easy way to tell postfix to send a copy of every message it receives to a “shadow server” in a way that preserves the SMTP envelope? I’m trying to tune a spam filter on actual data, but I don’t want to do it on my production server because the tuning is likely to break things. Than

Re: Today is a good day to DANE!

2021-08-17 Thread Marcel de Riedmatten
Le mercredi 18 août 2021 à 14:32 +1000, raf a écrit : > > It would be great if certbot supported multiple simultaneous > certificates > for a domain, so that the next certificate could be ready in advance. > Then pre/post/deploy hooks could take care of everything fairly > easily. > But I might ha