Re: Replacing initial "Received:" line on submission?

2023-01-14 Thread Viktor Dukhovni
On Sat, Jan 14, 2023 at 03:16:53PM +1300, Peter wrote: > Perhaps: > > /^(Received:.*)192\.168\.1\.2(.*)$/ REPLACE ${1}127.0.0.2${2} No. This is neither precise nor accurate. * Precision, the proposed regular expression can match unexpected parts of the "Received" header. * Accur

Re: Queue postfix sending when on failover WAN

2023-01-14 Thread Jaroslaw Rafa
Dnia 14.01.2023 o godz. 16:11:12 Simon Wilson pisze: > When the router fails over, postfix's default route to the internet > still goes through the same gateway IP and the internet is > accessible - but now postfix sees the world through the router > getting to the internet via a non-static IP, not

A little help/clarification on what SPF does please

2023-01-14 Thread Chris Green
I use postfix on my home server and deliver mail by connecting to my hosting providers' "smart host" using authenticated SMTP. My home system's hostname is zbmc.eu but I don't use that domain in my E-Mail address, I use isbd.co.uk which domain is hosted at one of my hosting providers (mythic-beast

Re: A little help/clarification on what SPF does please

2023-01-14 Thread Matus UHLAR - fantomas
On 14.01.23 11:02, Chris Green wrote: I use postfix on my home server and deliver mail by connecting to my hosting providers' "smart host" using authenticated SMTP. My home system's hostname is zbmc.eu but I don't use that domain in my E-Mail address, I use isbd.co.uk which domain is hosted at o

Re: A little help/clarification on what SPF does please

2023-01-14 Thread Gerald Galster
> However most of the time I use my hosting at gandi.net to send my > E-Mail, so mail from ch...@isbd.co.uk originates on zbmc.eu, is > transferred by authenticated SMTP to mail.gandi.net and is sent on > from there to whatever its destination is. > > As I understand it the SPF records for mail.ga

Re: Two internal servers, two inside fqdns, one outside fqdn

2023-01-14 Thread Gerben Wierda
> On 13 Jan 2023, at 16:22, Gerben Wierda wrote: > > I have created a second postfix server in my LAN. The idea is to use both in > a failover/loadbalancing setting for now. At the back are two dovecots that > replicate to each other. > > When mail is sent out via my router, it picks up anythi

Re: A little help/clarification on what SPF does please

2023-01-14 Thread Chris Green
On Sat, Jan 14, 2023 at 04:55:45PM +0100, Matus UHLAR - fantomas wrote: > On 14.01.23 11:02, Chris Green wrote: > >I use postfix on my home server and deliver mail by connecting to my > >hosting providers' "smart host" using authenticated SMTP. > > > >My home system's hostname is zbmc.eu but I don'

Re: A little help/clarification on what SPF does please

2023-01-14 Thread Chris Green
On Sat, Jan 14, 2023 at 05:03:15PM +0100, Gerald Galster wrote: > > However most of the time I use my hosting at gandi.net to send my > > E-Mail, so mail from ch...@isbd.co.uk originates on zbmc.eu, is > > transferred by authenticated SMTP to mail.gandi.net and is sent on > > from there to whatever

Re: A little help/clarification on what SPF does please

2023-01-14 Thread Gerald Galster
>> Given an email from ch...@isbd.co.uk, originating at zbmc.eu and sent >> via mail.gandi.net (authenticated smtp submission) to b...@server.com: >> >> - server.com sees the ip address of mail.gandi.net (incoming connection) >> - server.com querys DNS for ch...@isbd.co.uk (host -t txt isbd.co.uk)

Re: A little help/clarification on what SPF does please

2023-01-14 Thread Gerald Galster
>> What I'm not clear about is what happens when the mail is sent onwards >> by the 'smarthost' at Gandi. Does it change the envelope sender to > > Send an email to yourself and have a look at the headers. > Some MTAs add received headers like "received by for ". I meant Return-Path or look a

postscreen_upstream_proxy_protocol and smtpd_upstream_proxy_protocol

2023-01-14 Thread Gerben Wierda
I am looking at putting HAproxy between the internet and my two inside postfix MTA's I have a question. The documentation says: "The name of the proxy protocol used by an optional before-postscreen proxy agent ". 'Optional' seems to suggest I can safely set these to haproxy even if no haproxy i

Re: postscreen_upstream_proxy_protocol and smtpd_upstream_proxy_protocol

2023-01-14 Thread Viktor Dukhovni
On Sun, Jan 15, 2023 at 01:47:10AM +0100, Gerben Wierda wrote: > I am looking at putting HAproxy between the internet and my two inside > postfix MTA's Is there a good reason to do that? If not, don't. > I have a question. The documentation says: "The name of the proxy > protocol used by an opt

Re: Replacing initial "Received:" line on submission?

2023-01-14 Thread Peter
On 14/01/23 23:34, Viktor Dukhovni wrote: On Sat, Jan 14, 2023 at 03:16:53PM +1300, Peter wrote: Perhaps: /^(Received:.*)192\.168\.1\.2(.*)$/ REPLACE ${1}127.0.0.2${2} No. This is neither precise nor accurate. * Precision, the proposed regular expression can match unexpected pa

Re: Replacing initial "Received:" line on submission?

2023-01-14 Thread Viktor Dukhovni
On Sun, Jan 15, 2023 at 05:26:07PM +1300, Peter wrote: > But only a part with his exact IP address in it, the IP address that the > OP is trying to hide. The typical user who wants to lightly censor Received lines is not trying to hide a specific IP address, by far the more common need is to pru

Re: Replacing initial "Received:" line on submission?

2023-01-14 Thread Peter
On 15/01/23 17:34, Viktor Dukhovni wrote: The typical user who wants to lightly censor Received lines is not trying to hide a specific IP address, by far the more common need is to prune IP addresses from received headers add by a submission service. This will often also take care of hiding vari