[pfx] tls_high_cipherlist parameter

2023-05-01 Thread Kolusion K via Postfix-users
Hello     Postfix's documentation for the tls_high_cipherlist parameter states to see the output of the command 'postconf -d' to see the default setting.   Sadly, the documentation lacks specificness, and the output spit out about 500 lines, so I am not sure what I am suppose to be looking at.

[pfx] Re: tls_high_cipherlist parameter

2023-05-01 Thread Bernardo Reino via Postfix-users
On Mon, 1 May 2023, Kolusion K via Postfix-users wrote: Hello   Postfix's documentation for the tls_high_cipherlist parameter states to see the output of the command 'postconf -d' to see the default setting. Sadly, the documentation lacks specificness, and the output spit out about 500 lines

[pfx] smtp_tls_verify_cert_match parameter

2023-05-01 Thread Kolusion K via Postfix-users
Hello     Regarding the smtp_tls_verify_cert_match parameter, is the configuration 'dot-nexthop' more stringent than 'nexthop'?   Thank you     Sincerely,   Kolusion ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send

[pfx] Re: Painful Postfix

2023-05-01 Thread Bernardo Reino via Postfix-users
On Mon, 1 May 2023, Kolusion K via Postfix-users wrote: When I open a raw socket to the remote server on port 25 using telnet, I am able to connect and see the server announce itself, so, it is reasonable to assume that Postfix is doing the same and timing out during the SMTP transaction becau

[pfx] Re: smtp_tls_verify_cert_match parameter

2023-05-01 Thread Sean Gallagher via Postfix-users
The question is wrong. One is not "more-stringent" than the other, they just check for different things. As TLS is not mandatory for SMTP over the general internet, it's availability is patchy at best. For the servers that do provide STARTTLS and a certificate, what's actually on the certifica

[pfx] E-mail delivery problem

2023-05-01 Thread Kolusion K via Postfix-users
Hello I e-mailed the mailing list earlier on about this problem, but now I am on my computer and I have gone over my e-mail server and VPS with a fine comb and confirmed everything looks good. So, I have a problem with e-mail delivery where I can receive e-mail from some people but not others

[pfx] Re: E-mail problem

2023-05-01 Thread Wietse Venema via Postfix-users
Kolusion K via Postfix-users: > Hello > > > So I have a problem sending and receiving e-mail from some people. > > The problem I have sending e-mail to some people is that Postfix > says the connection times out when attempting to connect to the > server. > > This is my setup: > [amazing complexi

[pfx] Re: E-mail problem

2023-05-01 Thread Wietse Venema via Postfix-users
Kolusion K: > Ok, I did what you asked and I got this: > > reading from file dump.txt, link-type LINUX_SLL (Linux cooked v1) > 23:11:23.019120 IP 192.168.2.2.40415 > 47.246.137.47.smtp: Flags [S], seq > 3300139944, win 65280, options [mss 1360,sackOK,TS val 912070706 ecr > 0,nop,wscale 7], lengt

[pfx] Re: E-mail delivery problem

2023-05-01 Thread Matus UHLAR - fantomas via Postfix-users
On 01.05.23 14:24, Kolusion K via Postfix-users wrote: E-mail server enp0s3 interface IP address: 192.168.1.2 E-mail server ppp0 interface IP address: 192.168.2.2 VPS enp6s18 interface IP address: 1.2.3.4 What could be causing my e-mail delivery problem? your firewall rules show nopthing spe

[pfx] Re: tls_high_cipherlist parameter

2023-05-01 Thread Viktor Dukhovni via Postfix-users
On Mon, May 01, 2023 at 11:01:56AM +0200, Bernardo Reino via Postfix-users wrote: > > Sadly, the documentation lacks specificness, and the output spit out about > > 500 lines, so I am not sure what I am suppose to be looking at. > > postconf -d will print all the (default) settings, you can use

[pfx] Re: tls_high_cipherlist parameter

2023-05-01 Thread Bill Cole via Postfix-users
On 2023-05-01 at 04:45:37 UTC-0400 (Mon, 1 May 2023 10:45:37 +0200) Kolusion K via Postfix-users is rumored to have said: Hello Postfix's documentation for the tls_high_cipherlist parameter states to see the output of the command 'postconf -d' to see the default setting. Sadly, the d

[pfx] Future Date:

2023-05-01 Thread Jon LaBadie via Postfix-users
I've been getting a lot of spam with Date: headers containing future dates, typically 1 year. I don't find any header checks that would look for this type of message. Have I over looked it? In the meantime I've implemented a script and procmail rule to examine my messages. But that is post-d

[pfx] Re: Future Date:

2023-05-01 Thread Noel Jones via Postfix-users
On 5/1/2023 2:41 PM, Jon LaBadie via Postfix-users wrote: I've been getting a lot of spam with Date: headers containing future dates, typically 1 year. I don't find any header checks that would look for this type of message.  Have I over looked it? In the meantime I've implemented a script and

[pfx] Re: Future Date:

2023-05-01 Thread Wietse Venema via Postfix-users
Jon LaBadie via Postfix-users: > > I've been getting a lot of spam with Date: headers > containing future dates, typically 1 year. > > I don't find any header checks that would look for > this type of message. Have I over looked it? > > In the meantime I've implemented a script and procmail > r

[pfx] Re: Future Date:

2023-05-01 Thread Viktor Dukhovni via Postfix-users
On Mon, May 01, 2023 at 03:41:37PM -0400, Jon LaBadie via Postfix-users wrote: > I've been getting a lot of spam with Date: headers > containing future dates, typically 1 year. > > I don't find any header checks that would look for > this type of message. Have I over looked it? > > In the meant

[pfx] postscreen and checking proper operation

2023-05-01 Thread Alex via Postfix-users
Hi, I have postscreen implemented on postfix-3.7.3 on fedora37, and not sure I understand if it's working properly. Sometimes I see the postscreen/dnsblog combination ending with a simple DISCONNECT. In this case, it met the 8-point threshold to be rejected, but appears to only received a DISCONNE