[pfx] Re: Masters.cf

2024-05-29 Thread John Hill via Postfix-users
On 5/28/24 10:15 PM, John Hill via Postfix-users wrote: On 5/28/24 10:11 PM, Viktor Dukhovni via Postfix-users wrote: On Wed, May 29, 2024 at 11:58:31AM +1000, Viktor Dukhovni via Postfix-users wrote: You might in fact want to reject XBL IPs early, before they even attempt authentication. 

[pfx] Re: Masters.cf

2024-05-29 Thread Viktor Dukhovni via Postfix-users
On Wed, May 29, 2024 at 07:26:10AM -0400, John Hill via Postfix-users wrote: > > > The wrapper-mode TLS "smtps" rejects are naturally after the TLS > > > handshake. > > > > > > >    465    inet  n   -   n   -   -   smtpd > >     -o smtpd_delay_reject=no > >     -o

[pfx] Re: Masters.cf

2024-05-29 Thread Bill Cole via Postfix-users
On 2024-05-28 at 20:25:14 UTC-0400 (Wed, 29 May 2024 02:25:14 +0200) John Fawcett via Postfix-users is rumored to have said: On 29/05/2024 01:11, Bill Cole via Postfix-users wrote: On 2024-05-28 at 18:50:11 UTC-0400 (Wed, 29 May 2024 00:50:11 +0200) John Fawcett via Postfix-users is rumored t

[pfx] Re: Masters.cf

2024-05-29 Thread Benny Pedersen via Postfix-users
Viktor Dukhovni via Postfix-users skrev den 2024-05-29 14:07: Perhaps a bit of luck? For me, the XBL only catches around 10% of the SASL probes. May your luck hold up. https://www.abuseipdb.com/user/139902 enless tryes :) all zen.spamhaus.org should be used as authbl, but not pbl 127.0.0.10

[pfx] Re: Masters.cf

2024-05-29 Thread John Hill via Postfix-users
On 5/29/24 8:31 AM, Benny Pedersen via Postfix-users wrote: Viktor Dukhovni via Postfix-users skrev den 2024-05-29 14:07: Perhaps a bit of luck?  For me, the XBL only catches around 10% of the SASL probes.  May your luck hold up. https://www.abuseipdb.com/user/139902 enless tryes :) all zen

[pfx] Change Domain of "from="

2024-05-29 Thread Greg Sims via Postfix-users
Hello, We found the following in our email logs this morning. I ran "collate" and here is the result: May 29 02:10:04 mail01.raystedman.org postfix/bounce[31220]: AFC7030537E6: postmaster non-delivery notification: 7A80D32EDB2C May 29 02:10:04 mail01.raystedman.org postfix/cleanup[31245]: 7A

[pfx] Re: Masters.cf

2024-05-29 Thread Viktor Dukhovni via Postfix-users
On Wed, May 29, 2024 at 08:40:50AM -0400, John Hill via Postfix-users wrote: > On 5/29/24 8:31 AM, Benny Pedersen via Postfix-users wrote: > > Viktor Dukhovni via Postfix-users skrev den 2024-05-29 14:07: > > > > > Perhaps a bit of luck?  For me, the XBL only catches around 10% of the > > > SASL

[pfx] Re: Masters.cf

2024-05-29 Thread Bill Cole via Postfix-users
On 2024-05-29 at 10:02:59 UTC-0400 (Thu, 30 May 2024 00:02:59 +1000) Viktor Dukhovni via Postfix-users is rumored to have said: [...] I'd be curious to hear whether you'll find much AUTH brute-force activity from SBL + CSS (and not XBL) and as mentioned previously, blocking based on PBL is not v

[pfx] Re: "delivered to command" config

2024-05-29 Thread Adam Weremczuk via Postfix-users
After adding both lines and running postmap on /etc/postfix/virtual, both the base address and the alias reach the destination machine (server2). Thank you sir! On 28/05/2024 19:27, Wietse Venema via Postfix-users wrote: Wietse Venema via Postfix-users: Adam Weremczuk via Postfix-users: I've

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Wietse Venema via Postfix-users
Greg Sims via Postfix-users: > Hello, > > We found the following in our email logs this morning. I ran > "collate" and here is the result: > > May 29 02:10:04 mail01.raystedman.org postfix/bounce[31220]: > AFC7030537E6: postmaster non-delivery notification: 7A80D32EDB2C > May 29 02:10:04 mai

[pfx] Re: Masters.cf

2024-05-29 Thread John Fawcett via Postfix-users
On 29/05/2024 14:07, Viktor Dukhovni via Postfix-users wrote: On Wed, May 29, 2024 at 07:26:10AM -0400, John Hill via Postfix-users wrote: The wrapper-mode TLS "smtps" rejects are naturally after the TLS handshake.    465    inet  n   -   n   -   -   smtpd     -

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Bastian Blank via Postfix-users
On Wed, May 29, 2024 at 11:24:58AM -0400, Wietse Venema via Postfix-users wrote: > How about using sender_canoical_maps? > > sender_canonical_maps = inline:{ > { double-bou...@mail01.raystedman.ora = double_bou...@raystedman.org } } > > Why are you sending these notifications to Google?

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Greg Sims via Postfix-users
> > > > main.cf contains: > > > > # 24-05-28 > > # email comes from raystedman.org instead of mail0.raystedman.org > > # note: the mail01 subdomain does not need a SPF record in DNS as a > result > > myorigin = raystedman.org > > > > I hoped this would allow the message being sent to be > >

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Wietse Venema via Postfix-users
Wietse Venema via Postfix-users: > Greg Sims via Postfix-users: > > Hello, > > > > We found the following in our email logs this morning. I ran > > "collate" and here is the result: > > > > May 29 02:10:04 mail01.raystedman.org postfix/bounce[31220]: > > AFC7030537E6: postmaster non-delivery n

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Wietse Venema via Postfix-users
Greg Sims via Postfix-users: > I wrote software that reviews the bounces in the Gmail mailbox and > unsubscribes email addresses from the daily devotion distribution as > needed.The software is very conservative in the way this is done. > Bounces 3 out of 5 consecutive days and only for certain

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Greg Sims via Postfix-users
On Wed, May 29, 2024 at 2:52 PM Wietse Venema via Postfix-users wrote: > Presumably you have to DKIM or SPF or DMARC for hostname.raystedman.org, > so any way to get double-bou...@raystedman.org should help. > > You have to be careful about mailer loops, though. > > Postfix gives special treatmen

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Wietse Venema via Postfix-users
Greg Sims via Postfix-users: > On Wed, May 29, 2024 at 2:52?PM Wietse Venema via Postfix-users > wrote: > > > Presumably you have to DKIM or SPF or DMARC for hostname.raystedman.org, > > so any way to get double-bou...@raystedman.org should help. > > > > You have to be careful about mailer loops,

[pfx] Question about the DMARC setting for lists

2024-05-29 Thread Northwind via Postfix-users
Hello the list, I saw some open source providers who have these dmarc settings: _dmarc.disroot.org. 3495 IN TXT "v=DMARC1; p=reject; adkim=s; aspf=s; rua=mailto:ab...@disroot.org; ruf=mailto:ab...@disroot.org;"; _dmarc.autistici.org. 3504 IN TXT "v=DMARC1; p=reject; adkim=s; aspf=s; rua=mail

[pfx] Re: Change Domain of "from="

2024-05-29 Thread Greg Sims via Postfix-users
On Wed, May 29, 2024 at 5:49 PM Wietse Venema via Postfix-users wrote: > I think it's a bad idea to send your double bounces to a different site. > The Postfix design really wants to handle them locally. Thank you Wietse. I moved to a conservative configuration for tonight including deleting th