Firewall Ports

2022-03-08 Thread White, Daniel E. (GSFC-770.0)[NICS]
For a mail relay server running only Postfix, I am making an educated guess that the only potentially needed open ports would be 25, 465, 587, and 2525 (According to https://sectigostore.com/blog/what-is-a-secure-smtp-ssl-port-heres-what-to-know-about-smtp-security/) No need to open imap(s) and/

Re: Firewall Ports

2022-03-08 Thread Josef Vybíhal
For the smtp, you only need 25. 465 is smtps and 587 submission - sub. 2525 is not needed either. For pure relay the 25 is the only port you need, external mailservers will not relay to any other port, unless specifically configured. Josef On Tue, Mar 8, 2022 at 1:54 PM White, Daniel E. (GSFC-770

Re: [EXTERNAL] Re: Firewall Ports

2022-03-08 Thread White, Daniel E. (GSFC-770.0)[NICS]
Many thanks for the sanity check From: Josef Vybíhal Date: Tuesday, March 8, 2022 at 08:07 To: Daniel White Cc: "postfix-users@postfix.org" Subject: [EXTERNAL] Re: Firewall Ports For the smtp, you only need 25. 465 is smtps and 587 submission - sub. 2525 is not needed either. For pure relay th

Re: Firewall Ports

2022-03-08 Thread Rob McGee
On 2022-03-08 06:53, White, Daniel E. (GSFC-770.0)[NICS] wrote: For a mail relay server running only Postfix, I am making an educated guess that the only potentially needed open ports would be 25, 465, 587, and 2525 25: all mail exchange is exclusively done with connections to port 25 465: s

virus scanning

2022-03-08 Thread Zsombor B
Hi, Can you please confirm that postfix creates a file from each and every email at least once? I'm asking this because we have to switch to McAfee AV and my plan is to use it's on-access-scan feature to scan the emails. If postfix really creates a file at least once of each email then thi

Re: virus scanning

2022-03-08 Thread Zsombor B
Hi, There is no dovecot. This is a relay server and there are security constraints that must be follow. Zs. On 2022-03-08 16:07, Jeroen Geilman wrote: This is a very bad idea; google "mailscanner postfix" for why. Instead, scan your mailboxes after delivery, dovecot has hooks for this. If t

Re: virus scanning

2022-03-08 Thread Benny Pedersen
On 2022-03-08 15:57, Zsombor B wrote: Can you please confirm that postfix creates a file from each and every email at least once? incorrect question leads to incorrect answer I'm asking this because we have to switch to McAfee AV and my plan is to use it's on-access-scan feature to scan the

Re: virus scanning

2022-03-08 Thread Wietse Venema
Zsombor B: > Hi, > > > Can you please confirm that postfix creates a file from each and every > email at least once? > > I'm asking this because we have to switch to McAfee AV and my plan is to > use it's on-access-scan feature to scan the emails. > > If postfix really creates a file at least

Re: virus scanning

2022-03-08 Thread Viktor Dukhovni
On Tue, Mar 08, 2022 at 03:57:50PM +0100, Zsombor B wrote: > Can you please confirm that postfix creates a file from each and every > email at least once? Postfix queue files are in an undocumented internal format, and virus scanners at the filesystem level are not appropriate for scanning the P

Re: virus scanning

2022-03-08 Thread Jaroslaw Rafa
Dnia 8.03.2022 o godz. 15:57:50 Zsombor B pisze: > > Can you please confirm that postfix creates a file from each and > every email at least once? > > I'm asking this because we have to switch to McAfee AV and my plan > is to use it's on-access-scan feature to scan the emails. > > If postfix re

Solved sort of: postfix 3.7.0 port 25 listening stops at some point (after max a few days), no error messages

2022-03-08 Thread Gerben Wierda
Just for the record: I have been able to narrow it down to socketfilterfw (macOS Application Firewall). Basically, where it was working OK in macOS Mojave (and so I did not suspect anything — wrong), it turns out to be a real dog in Monterey. In terms of what happens, there is completely no m