Re: run script on new connection?

2022-12-27 Thread Allen Coates
On 27/12/2022 00:15, mats wrote: > Using DNS is not a way forward for us. > Maintaining cidr lists a number of times a minute with 10:s of thousands of > ip's instead of a simple query for the ip I'm interested in, well not > interested in that either > Invert the problem:- Test ONLY for the ip(s

Connecting postfix to mysql with ssl

2022-12-27 Thread Aaron Axelsen
I've been trying to get the correct recipe of settings to allow postfix to connect to mysql where ssl is required. So far I have the following that is not working: user = mysqluser password = XXX hosts = secure-mysql-db.example.com dbname = mail query = SELECT 1 FROM users WHERE email='%s' tls_

Re: Connecting postfix to mysql with ssl

2022-12-27 Thread Phil Stracchino
On 12/27/22 12:49, Aaron Axelsen wrote: I've been trying to get the correct recipe of settings to allow postfix to connect to mysql where ssl is required. So far I have the following that is not working: user = mysqluser password = XXX hosts = secure-mysql-db.example.com dbname = mail query =

Re: run script on new connection?

2022-12-27 Thread Fred Morris
Some random thoughts along with what's a cause and what's an effect. On Mon, 26 Dec 2022, mats wrote: [...] The Challenge I want to be able to run my own "idp" type script when someone tries to connect to my mailserver. Basically I want to refuse them even a tcp connection to smtpd if the conne

Re: Connecting postfix to mysql with ssl

2022-12-27 Thread Aaron Axelsen
On 12/27/2022 11:58 AM, Phil Stracchino wrote: On 12/27/22 12:49, Aaron Axelsen wrote: I've been trying to get the correct recipe of settings to allow postfix to connect to mysql where ssl is required. So far I have the following that is not working: user = mysqluser password = XXX hosts = se

Re: Spammer succeeded in relaying through my server

2022-12-27 Thread raf
On Mon, Dec 26, 2022 at 11:45:52AM +0200, mailm...@ionos.gr wrote: > On Mon, 26 Dec 2022 20:22:19 +1100 raf wrote: > > > That issue hasn't had any response, so maybe they aren't interested. > > But I've just created a pull request to fix it: > > > > https://github.com/trusteddomainproject/Ope

Re: Spammer succeeded in relaying through my server

2022-12-27 Thread Peter
On 28/12/22 12:12, raf wrote: Actually, it's been nearly five years since the last commit. But dead is a strong word. I expect there's still a lot of people using it. And there are 21 pull requests. I've emailed the trusted domain project to ask if it's dead, and if they'd accept help. If not, a

Re: Spammer succeeded in relaying through my server

2022-12-27 Thread Peter
On 24/12/22 16:38, raf wrote: I wouldn't be too keen to do that. UNIX domain sockets are faster than TCP. This is the first time I've ever heard that. Can you back this up with a link or something, I'd like to find out more. There's nothing dirty about them. It's just another network addre

Re: Spammer succeeded in relaying through my server

2022-12-27 Thread Peter
On 23/12/22 15:19, Samer Afach wrote: Btw, the relays happened because I actively changed mynetworks_style to subnet, forgetting and not checking that all incoming connections will come from the gateway of docker subnet. Still under research to identify how that works. I would recommend that

Re: Spammer succeeded in relaying through my server

2022-12-27 Thread Dan Mahoney
(Speaking with my Trusted Domain Project hat on). Yes, we'll take help. I have commit access to all the Github repos, and am trying to push out a new release of OpenDKIM. I've been meaning to do this for months, but life and family stuff has been getting in the way. Here are the things I'd re

OT: OpenDKIM (was: Re: Spammer succeeded in relaying through my server)

2022-12-27 Thread Peter
On 28/12/22 15:06, Dan Mahoney wrote: (Speaking with my Trusted Domain Project hat on). Yes, we'll take help. I have commit access to all the Github repos, and am trying to push out a new release of OpenDKIM. I've been meaning to do this for months, but life and family stuff has been getting

Re: Spammer succeeded in relaying through my server

2022-12-27 Thread raf
On Tue, Dec 27, 2022 at 06:06:50PM -0800, Dan Mahoney wrote: > (Speaking with my Trusted Domain Project hat on). > > Yes, we'll take help. > > I have commit access to all the Github repos, and am trying to push > out a new release of OpenDKIM. I've been meaning to do this for > months, but li

Re: Connecting postfix to mysql with ssl

2022-12-27 Thread Phil Stracchino
On 12/27/22 13:12, Aaron Axelsen wrote: Output from a command line connection: mysql -h secure-mysql-db.example.com -p -u mysqluser mail --ssl Enter password: Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcom