[pfx] "delivered to command" config

2024-05-21 Thread Adam Weremczuk via Postfix-users
Hi all, My gitolite post-receive hook (.gitolite/local/hooks/common/post-receive) sends an email to an address: bug-sub...@mydomain.com On my Debian Postfix/Cyrus server "bug-submit" is mapped to "bugzilla" in /etc/aliases. Bugzilla runs locally on the same server. When I email "bugzi...@m

[pfx] Re: "delivered to command" config

2024-05-21 Thread Viktor Dukhovni via Postfix-users
On Tue, May 21, 2024 at 08:33:58AM +0100, Adam Weremczuk via Postfix-users wrote: > When I email "bugzi...@mydomain.com" from another account I get "Recipient > address rejected: User unknown in local recipient table". If you want this to not happen, see: https://www.postfix.org/postconf.5.

[pfx] Re: "delivered to command" config

2024-05-21 Thread Adam Weremczuk via Postfix-users
Thank you Victor. What's the easiest way to change: bugzilla@mailserver:~$ cat ~/.forward "|/vol/localhome/bugzilla/site/live/email_in.pl -vvv 2>/tmp/bz_emailin.log" to something like: remoteser...@mydomain.com:/vol/localhome/bugzilla/site/live/email_in.pl -vvv 2>/tmp/bz_emailin.log ? On 2

[pfx] Re: "delivered to command" config

2024-05-21 Thread Adam Weremczuk via Postfix-users
I obviously meant "remoteserver.mydomain.com", an external VM where Bugzilla has been migrated to. On 21/05/2024 11:10, Adam Weremczuk via Postfix-users wrote: Thank you Victor. What's the easiest way to change: bugzilla@mailserver:~$ cat ~/.forward "|/vol/localhome/bugzilla/site/live/email_i

[pfx] Re: "delivered to command" config

2024-05-21 Thread Wietse Venema via Postfix-users
Adam Weremczuk via Postfix-users: > Thank you Victor. > > What's the easiest way to change: > > bugzilla@mailserver:~$ cat ~/.forward > "|/vol/localhome/bugzilla/site/live/email_in.pl -vvv 2>/tmp/bz_emailin.log" > > to something like: > > remoteser...@mydomain.com:/vol/localhome/bugzilla/site/l

[pfx] TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Greg Sims via Postfix-users
We have been running without TLS for many years. Some of the ISPs are beginning to complain about not sending mail using TLS. We enabled outbound smtp as a result. Postfix receives email only from our private network -- we do not use inbound smtpd_tls as a result. Our main.cf contains: sm

[pfx] TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Greg Sims via Postfix-users
TLS connections are being reused about 10% of the time for larger ISPs. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Viktor Dukhovni via Postfix-users
On Tue, May 21, 2024 at 06:51:08AM -0500, Greg Sims via Postfix-users wrote: > Our main.cf contains: > smtpd_tls_cert_file = > smtpd_tls_key_file = > smtpd_tls_security_level = none There's no point in configuring SMTP server certificates when TLS is disabled in the SMTP serv

[pfx] Disable Non Delivery Notifications only for some adresses

2024-05-21 Thread Kevin Cousin via Postfix-users
Hi, We are using Postfix as relay for our internal apps. This apps are sending mails to final users with from nore...@example.net, but sometimes, adresses are wrong and a Non delivery notification is generated ans sent back to nore...@example.net. Is it any way to disable this notifications  only

[pfx] Re: TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Greg Sims via Postfix-users
Thank you Viktor. Answers: * smtp_connection_cache_on_demand = yes -- this was configured Changes: * certs back to defaults * smtp_tls_loglevel = 1 Before enabling TLS our send rate was about 4K emails per minute -- we are now seeing 300 to 500 per minute. The email creation process is se

[pfx] Re: Selection of a custom smtp-transport based on recipient addresse's MX with check_recipient_mx_access doesn't work

2024-05-21 Thread Henri Schomäcker via Postfix-users
Hi nw, yes, it's an issue with protection.outlook.com Servers, but not with a blacklist. Ourcustomers are able to deliver about betweeen 700 and 1100 mails to recipient addresses which domains MX is under protection.outlook.com. And there seems to also be a configuration option for an incom

[pfx] Re: TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Wietse Venema via Postfix-users
Greg Sims via Postfix-users: > Thank you Viktor. > > Answers: > * smtp_connection_cache_on_demand = yes -- this was configured > > Changes: > * certs back to defaults > * smtp_tls_loglevel = 1 > > Before enabling TLS our send rate was about 4K emails per minute -- we > are now seeing 300 t

[pfx] Re: Selection of a custom smtp-transport based on recipient addresse's MX with check_recipient_mx_access doesn't work

2024-05-21 Thread Bill Sommerfeld via Postfix-users
On 5/21/24 13:27, Henri Schomäcker via Postfix-users wrote: So what we need to do is to limit the sending rate to all MX servers under protection.outlook.com. But it does not work with my configuration, all mails are still beeing sent directly one after another, and I can't find out why. So

[pfx] Re: Selection of a custom smtp-transport based on recipient addresse's MX with check_recipient_mx_access doesn't work

2024-05-21 Thread Jaroslaw Rafa via Postfix-users
Dnia 21.05.2024 o godz. 22:27:04 Henri Schomäcker via Postfix-users pisze: > > So what we need to do is to limit the sending rate to all MX servers > under protection.outlook.com. Postfix does not support this, Wietse probably could explain why. You can select a transport by destination domain, b

[pfx] Re: Disable Non Delivery Notifications only for some adresses

2024-05-21 Thread Wietse Venema via Postfix-users
Kevin Cousin via Postfix-users: > Hi, > > We are using Postfix as relay for our internal apps. This apps are > sending mails to final users with from nore...@example.net, but > sometimes, adresses are wrong and a Non delivery notification is > generated ans sent back to nore...@example.net. > > I

[pfx] Re: TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Jaroslaw Rafa via Postfix-users
Dnia 21.05.2024 o godz. 16:38:21 Wietse Venema via Postfix-users pisze: > > delays=0.01/2639/25/0.41 > > delays=0.01/2639/25/0.58 > > delays=0.01/2641/25/0.58 > > delays=0.01/2644/25/0.69 > > delays=0.01/2643/25/0.58 > > delays=0.01/2640/25/0.57 [...] > c=25s. It takes a whopping 25 eco

[pfx] Re: Selection of a custom smtp-transport based on recipient addresse's MX with check_recipient_mx_access doesn't work

2024-05-21 Thread Wietse Venema via Postfix-users
Jaroslaw Rafa via Postfix-users: > Dnia 21.05.2024 o godz. 22:27:04 Henri Schom?cker via Postfix-users pisze: > > > > So what we need to do is to limit the sending rate to all MX servers > > under protection-outlook-com. > > Postfix does not support this, Wietse probably could explain why. > You

[pfx] Re: TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Wietse Venema via Postfix-users
Jaroslaw Rafa via Postfix-users: > Dnia 21.05.2024 o godz. 16:38:21 Wietse Venema via Postfix-users pisze: > > > delays=0.01/2639/25/0.41 > > > delays=0.01/2639/25/0.58 > > > delays=0.01/2641/25/0.58 > > > delays=0.01/2644/25/0.69 > > > delays=0.01/2643/25/0.58 > > > delays=0.01/2640/25

[pfx] Re: Disable Non Delivery Notifications only for some adresses

2024-05-21 Thread Northwind via Postfix-users
Can I have multi-smtpd instances by updating master.cf? for example, one instance for handling domain a.com, another instance for b.com. The two instances have different policies for incoming messages. Thanks. Configure a dedicated smtpd servicce in master.cf. Then use

[pfx] Re: TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Greg Sims via Postfix-users
TLS connection reuse is being used. About 10% of the connections are reused for large volume ISPs. Small volume ISPs do not see connection reuse. I believe this is as expected. I did some testing of our DNS setup. A DNS query using dig is less than 20 msec for both our primary and secondary dns

[pfx] TLS for SMTP Outbound -- Only One tlsproxy

2024-05-21 Thread Greg Sims via Postfix-users
TLS connection reuse is being used. About 10% of the connections are reused for large volume ISPs. Small volume ISPs do not see connection reuse. I believe this is as expected. I did some testing of our DNS setup. A DNS query using dig is less than 20 msec for both our primary and secondary dns