[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Matus UHLAR - fantomas via Postfix-users
On 04.02.24 22:06, Mark via Postfix-users wrote: ->"Best practice is to require submission users sending outbound mail do so via ports 465 and/or 587." Indeed here, I'm able to connect my smtp service *only* through; port 465 - SSL only port 587 - TLS only Authentication/login is not enabled on

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Mark via Postfix-users
Hi Matus, Thanks for the idea below. I'm going to try wrapping them in $mua in main.cf . However, you said; "Looking at your smtpd_recipient_restrictions and using reject_rbl_client, you need to override them too." I really didn't get this, by "overriding" could you explain further please where

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Matus UHLAR - fantomas via Postfix-users
On 05.02.24 15:46, Mark wrote: Thanks for the idea below. I'm going to try wrapping them in $mua in main.cf . However, you said; "Looking at your smtpd_recipient_restrictions and using reject_rbl_client, you need to override them too." I really didn't get this, by "overriding" could you explai

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Mark via Postfix-users
Hi again Matus, oh, now I got it! After your reply, I now have in my master.cf ($mua_*); submission inet n - y - - smtpd -o smtpd_sasl_auth_enable=yes -o smtpd_tls_auth_only=yes -o smtpd_sender_restrictions=$mua_sender_restrictions -o smtpd_recipient_restrict

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Matus UHLAR - fantomas via Postfix-users
On 05.02.24 16:59, Mark via Postfix-users wrote: Hi again Matus, oh, now I got it! After your reply, I now have in my master.cf ($mua_*); submission inet n - y - - smtpd -o smtpd_sasl_auth_enable=yes -o smtpd_tls_auth_only=yes -o smtpd_sender_restrictions=$mua_s

[pfx] Re: Adjusting smtpd_recipient_restrictions

2024-02-05 Thread Togan Muftuoglu via Postfix-users
> "MU" == Matus UHLAR <- fantomas via Postfix-users > > writes: MU> I have tried to explain it before: you should not use DNSBLs in MU> submission/smtps services, as you can expect many your clients to MU> connect from shared or dynamic IP addresses, which are surelly listed

[pfx] Re: postscreen segfault since 3.8.4

2024-02-05 Thread Christophe Kalt via Postfix-users
no crash over the past day, so something must indeed be off with the packages, disappointing, oh well. On the bright side, I no longer depend on these getting updated. Thanks Wietse & Viktor. On Sun, Feb 4, 2024 at 10:21 PM Viktor Dukhovni via Postfix-users < postfix-users@postfix.org> wrote: >

[pfx] Re: postscreen segfault since 3.8.4

2024-02-05 Thread Steffen Nurpmeso via Postfix-users
Christophe Kalt via Postfix-users wrote in : |no crash over the past day, so something must indeed be off with the |packages, disappointing, oh well. On the bright side, I no longer depend on |these getting updated. There were often problems with the -s they use. Especially before they starte