[pfx] Re: secure the email system

2024-06-13 Thread Dimitris via Postfix-users
Στις 13/6/24 03:51, ο/η Jeff Peng via Postfix-users έγραψε: 3. use policyd-rate-limit to limit sending rate. 5. use policyd-spf to check sender IP's SPF and reject the failed one. 6. use opendmarc to check sender domain's DMARC and reject the failed one. 7. opendkim is also deployed for either i

[pfx] Re: secure the email system

2024-06-13 Thread Jeff Peng via Postfix-users
On 2024-06-13 15:07, Dimitris via Postfix-users wrote: Στις 13/6/24 03:51, ο/η Jeff Peng via Postfix-users έγραψε: 3. use policyd-rate-limit to limit sending rate. 5. use policyd-spf to check sender IP's SPF and reject the failed one. 6. use opendmarc to check sender domain's DMARC and reject t

[pfx] Working around load balancers

2024-06-13 Thread Wietse Venema via Postfix-users
On second consideration, if an *SQL "server_hosts" setting specifies only one target (host or IP address), then Postfix has little to lose if it pretends that the name is given twice, and retries once immediately, especially of it turns off the logic to avoid a failed *SQL server for 60 seconds. T

[pfx] Re: secure the email system

2024-06-13 Thread Wietse Venema via Postfix-users
A paranoid configuration could add: smtpd_reject_unlisted_sender = yes That is, do not send mail with a sender address that is known to be invalid (the SMTP server would reject mail for the address with "user unknown"). For more details (what is valid, why reject invalid senders) see https:/

[pfx] Need help with postfix

2024-06-13 Thread Paul Schmehl via Postfix-users
I’m 77. I’ve been retired for 10 years. Now I’m struggling trying to get postfix working with Dovecot and Spamasassin on a CentOS 7 server. I manage a small hobby domain for some friends (for free), and the changes in systems are so dramatic that I feel I’m losing touch. I read this doc to help

[pfx] Re: Need help with postfix

2024-06-13 Thread Paul Schmehl via Postfix-users
I trimmed a lot of my original message from this reply.. I figured out what was wrong. The spamassassin install didn’t create the spamd accont. It’s working fine now. I would appreciate if if some of you pros could look over my postconf and advise me on any settings that I need to alter or dele

[pfx] Re: Need help with postfix

2024-06-13 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > I'm 77. I've been retired for 10 years. Now I'm struggling trying > to get postfix working with Dovecot and Spamasassin on a CentOS 7 > server. I manage a small hobby domain for some friends (for free), > and the changes in systems are so dramatic that I feel I'm l

[pfx] Re: secure the email system

2024-06-13 Thread Wietse Venema via Postfix-users
Wietse Venema via Postfix-users: > A paranoid configuration could add: > > smtpd_reject_unlisted_sender = yes > > That is, do not send mail with a sender address that is known to > be invalid (the SMTP server would reject mail for the address with > "user unknown"). > > For more details (wha

[pfx] Re: Need help with postfix

2024-06-13 Thread Paul Schmehl via Postfix-users
See inline comments. Paul Schmehl paul.schm...@gmail.com > On Jun 13, 2024, at 3:12 PM, Wietse Venema via Postfix-users > wrote: > > Paul Schmehl via Postfix-users: >> I'm 77. I've been retired for 10 years. Now I'm struggling trying >> to get postfix working with Dovecot and Spamasassin on

[pfx] Re: secure the email system

2024-06-13 Thread Till Elsner via Postfix-users
Would this respect recipient_delimiter, i.e. "tagged" sender addresses? ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: secure the email system

2024-06-13 Thread Jeff Peng via Postfix-users
Hello Wietse, I have added this line: smtpd_reject_unlisted_sender = yes into main.cf. May I ask, this option is for submission request, or for MX request? Thanks. On 2024-06-14 04:14, Wietse Venema via Postfix-users wrote: Wietse Venema via Postfix-users: A paranoid configuration could

[pfx] Re: secure the email system

2024-06-13 Thread Wietse Venema via Postfix-users
Jeff Peng via Postfix-users: > Hello Wietse, > > I have added this line: > smtpd_reject_unlisted_sender = yes > > into main.cf. > May I ask, this option is for submission request, or for MX request? All services that use smtpd. Wietse > On 2024-06-14 04:14, Wietse Venema via Postf