Trusted vs Verified TLS

Hi, We are running a fairly large postfix installation, with a lot of TLS policy entries and our own curated trust store. For some TLS connections, I see in the log Trusted TLS connection established and for some, I see Verified TLS connection established Both to the same type of remote serve

Re: Trusted vs Verified TLS

On 11.10.22 10:37, Jens Hoffrichter wrote: What are the technical differences between those two methods of connecting? http://www.postfix.org/FORWARD_SECRECY_README.html Last section. Your settings influence how it determines the difference between the two security levels. OpenPGP_signature

Re: Trusted vs Verified TLS

Thanks! That was exactly the documentation I was looking for! Jens On Tue, Oct 11, 2022 at 11:05 AM Sven Schwedas wrote: > > On 11.10.22 10:37, Jens Hoffrichter wrote: > > What are the technical differences between those two methods of connecting? > > http://www.postfix.org/FORWARD_SECRECY_READ

Re: Postfix with "always_bcc" email is 2x or 3x on the always_bcc mail

Josef Karliak: > > >Good morning, > >what could cause the mail copied by postfix's always_bcc - copied > email is 2x or sometimes (?) 3x copied in the always_bcc email. > >I use DKIM and DMARC milter and Spamassasisn as a > "check_policy_service". Could the passing to the milters

How long do legit servers try to deliver email?

Sorry if this is OT. My hosting service is migrating our VPS to new hardware. I plan to shut down postfix (it's just me and the missus) and create a snapshot prior to the shutdown. How long do servers try to resend email if your server is temporarily down? The host has given themselves an 8 hour o

Re: How long do legit servers try to deliver email?

How long do servers try to resend email if your server is temporarily down? The host has given themselves an 8 hour overnight window. The default retry for postfix is 5 days. http://www.postfix.org/postconf.5.html#bounce_queue_lifetime

Re: How long do legit servers try to deliver email?

Ian Evans: > Sorry if this is OT. My hosting service is migrating our VPS to new > hardware. I plan to shut down postfix (it's just me and the missus) and > create a snapshot prior to the shutdown. > > How long do servers try to resend email if your server is temporarily down? > The host has given

Re: How long do legit servers try to deliver email?

On Tue, Oct 11, 2022, 1:00 PM Wietse Venema, wrote: > > > How long do servers try to resend email if your server is temporarily > down? > > The host has given themselves an 8 hour overnight window. > > "It depends". There is a difference between wat rules say (in this > case https://www.rfc-edit

TLS error

Hello all, I've seen this error in my maillog: Oct 11 21:49:02 baobab postfix/smtpd[21916]: connect from r164.europe-news.chanel.com[172.82.238.164] Oct 11 21:49:02 baobab postfix/smtpd[21916]: SSL_accept error from r164.europe-news.chanel.com[172.82.238.164]: -1 Oct 11 21:49:02 baobab postfi

Re: TLS error

On Tue, Oct 11, 2022 at 09:57:02PM +0200, Luciano Mannucci wrote: > I've seen this error in my maillog: > > Oct 11 21:49:02 baobab postfix/smtpd[21916]: connect from > r164.europe-news.chanel.com[172.82.238.164] > Oct 11 21:49:02 baobab postfix/smtpd[21916]: SSL_accept error from > r164.europe-

Re: TLS error

On Tue, Oct 11, 2022 at 04:37:44PM -0400, Viktor Dukhovni wrote: > > Do I have to worry? > > If Android clients aren't a concern for your MTA, you should perhaps > configure your ACME client (e.g. certbot) to build a chain file without > the cross certificate. Details on the letsencrypt.org webs

Re: Postfix with "always_bcc" email is 2x or 3x on the always_bcc mail

Hi Wietse, thank you for your help, all works fine. Best regards J.Karliak Dne 2022-10-11 11:45, Wietse Venema napsal: Josef Karliak: Good morning, what could cause the mail copied by postfix's always_bcc - copied email is 2x or sometimes (?) 3x copied in the always_bcc email.