Re: remailer for alias lists?

2022-12-05 Thread raf
On Sun, Dec 04, 2022 at 03:59:07PM -0800, Dan Mahoney wrote: > My needs are pretty much two things: > > 1) Only subscribed people may post. > 2) That post should not get killed by DMARC, which means forwarded > messages need to pass SPF/DKIM, which means remailing, not forwarding. > > The stat

Re: Send email to one @domain.com via authenticated relay?

2022-12-05 Thread John Stoffel
> "Bill" == Bill Cole writes: > On 2022-12-04 at 20:57:49 UTC-0500 (Sun, 4 Dec 2022 20:57:49 -0500) > You are missing the point here. > NO ONE running a serious mailserver will reject mail based on a > UCEPROTECT level 3 listing. It is a waste of your energy to focus on > that listing. I

Re: remailer for alias lists?

2022-12-05 Thread Phil Stracchino
On 12/5/22 06:42, raf wrote: On Sun, Dec 04, 2022 at 03:59:07PM -0800, Dan Mahoney wrote: My needs are pretty much two things: 1) Only subscribed people may post. 2) That post should not get killed by DMARC, which means forwarded messages need to pass SPF/DKIM, which means remailing, not for

Re: How to run a script on postfix authentication failure

2022-12-05 Thread postfix
Is there a way, in postfix, to run a script when the authentication fails, please ? I would like to use nftables sets, with the timeout option, to ban IP addresses. I know fail2ban exists, but I am considering other options. nftables sets, implemented in the kernel, with the timeout option, seem

Is it possible to rewrite the envelop from address for all mail that's being relayed?

2022-12-05 Thread Sean Hennessey
I'm curios if it's possible to set up postfix to rewrite the envelop from address for all email the instance is relaying? I'm doing some research and want to force the envelop from to be a known value that I know will pass spf checks. Thanks in advance. Sean

Re: Is it possible to rewrite the envelop from address for all mail that's being relayed?

2022-12-05 Thread Benny Pedersen
Sean Hennessey skrev den 2022-12-05 17:19: I'm curios if it's possible to set up postfix to rewrite the envelop from address for all email the instance is relaying? I'm doing some research and want to force the envelop from to be a known value that I know will pass spf checks. https://fuglu.org

Re: Is it possible to rewrite the envelop from address for all mail that's being relayed?

2022-12-05 Thread Scott Kitterman
On December 5, 2022 4:19:21 PM UTC, Sean Hennessey wrote: >I'm curios if it's possible to set up postfix to rewrite the envelop from >address for all email the instance is relaying? I'm doing some research and >want to force the envelop from to be a known value that I know will pass spf >ch

Re: How to run a script on postfix authentication failure

2022-12-05 Thread Wietse Venema
Andre Rodier: > Hello, all. > > Is there a way, in postfix, to run a script when the authentication > fails, please ? This is not built-in. Instead, you run a program that watches the maillog file, and that triggers on authenication errors, or other unwanted behavior. > I would like to use nfta

Re: Is it possible to rewrite the envelop from address for all mail that's being relayed?

2022-12-05 Thread Benny Pedersen
Scott Kitterman skrev den 2022-12-05 17:25: Not just using postfix. With a milter, it's quite possible. https://github.com/croessner/vrfydmn does not do exactly what you're asking for, but it's in the ballpark to give an idea of how to approach the problem. still 6 open bugs :/ and not reale

Re: Send email to one @domain.com via authenticated relay?

2022-12-05 Thread Bill Cole
On 2022-12-05 at 10:24:56 UTC-0500 (Mon, 5 Dec 2022 10:24:56 -0500) John Stoffel is rumored to have said: "Bill" == Bill Cole writes: On 2022-12-04 at 20:57:49 UTC-0500 (Sun, 4 Dec 2022 20:57:49 -0500) You are missing the point here. NO ONE running a serious mailserver will reject mai

Re: How to run a script on postfix authentication failure

2022-12-05 Thread Steffen Nurpmeso
post...@ptld.com wrote in : |> Is there a way, in postfix, to run a script when the authentication \ |> fails, please ? |> I would like to use nftables sets, with the timeout option, to ban \ |> IP addresses. I know fail2ban exists, but I am considering other options. |> nftables sets, implem

uceprotect.wtf (was: Send email to one @domain.com via authenticated relay?)

2022-12-05 Thread Rob McGee
On 12/2/2022 3:27 PM, Joachim Lindenberg wrote: UCEProtect are gangsters, even the founder admits: https://uceprotect.wtf/ > You donĀ“t want to do anything about it, except you are located in Europe> and can complain to their customers and authorities violating GDPR. Excuse me, Joachim, but did

sender issue with sasl user

2022-12-05 Thread linuxguy
Dear list, I found that when a sasl user passed the authentication, it can send email with any sender address, not only the sasl user itself. This may cause our mailsystem to be abused. How can I setup postfix to stop this behavior? Thanks in advance.

Re: sender issue with sasl user

2022-12-05 Thread Benny Pedersen
linux...@gmx.net skrev den 2022-12-06 02:06: I found that when a sasl user passed the authentication, it can send email with any sender address, not only the sasl user itself. This may cause our mailsystem to be abused. How can I setup postfix to stop this behavior? do you belive strongly th

Aw: Re: sender issue with sasl user

2022-12-05 Thread linuxguy
If I have setup this: smtpd_sender_restrictions = reject_sender_login_mismatch does it work? Thank you > Gesendet: Dienstag, 06. Dezember 2022 um 09:33 Uhr > Von: "Benny Pedersen" > An: postfix-users@postfix.org > Betreff: Re: sender issue with sasl user > > linux...@gmx.net skrev den 2022-12