[pfx] Re: Strengthen email system security

On 23/05/2024 08:33, Northwind via Postfix-users wrote: Hello list, In the last two days, my mail system (small size) met attacks. mail.log shows a lot of this stuff: May 23 06:24:29 mx postfix/smtpd[2655149]: warning: unknown[194.169.175.17]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Ma

[pfx] Re: Strengthen email system security

On 23/05/2024 14:27, Scott Techlist via Postfix-users wrote: All of these entries are using the LOGIN mech. Unless you have an extremely old outlook express MUA (or similar) you xan and should be using the PLAIN mech. You can eliminate all of the above attacks by removing LOGIN from the list of

[pfx] Re: Troubleshooting roundcube connections to postfix

On 17/06/2024 11:54, Paul Schmehl via Postfix-users wrote: I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com [SNIP] /var/www/html/webmail/program/lib/Roundcube/rcube.php on line 1794 (POST /webmail/?_task=mail&

[pfx] Re: Troubleshooting roundcube connections to postfix

On 17/06/2024 17:28, Paul Schmehl wrote: [SNIP] How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server. What config options do I need to use? That's how it works out of the box, or was when I set up up, just take the defau

[pfx] Re: Troubleshooting roundcube connections to postfix

On 18/06/2024 12:43, Paul Schmehl via Postfix-users wrote: [SNIP] roundcube would always through an error. If I used $config['smtp_host'] = ‘tls;//www.stovebolt.com'; or I used $config['smtp_host'] = ’ssl;//www.stovebolt.com'; roundcube would error out saying it couldn’t I hope the semi-colon

[pfx] Re: REJECT sending mails to no-reply accounts

On 19/06/2024 18:19, Bjoern Franke via Postfix-users wrote: Hi, Personally, I find this type of one-way communication annoying and impolite. The same goes for setting Reply-To to your personal email address after asking for help on a public mailing list. Like you did yourself? From: Ralph

[pfx] Re: Roundcube question

On 28/06/2024 19:14, Jeff Peng via Postfix-users wrote: Does one roundcube installation support only one SASL backend? For example I configure it to access aol then it cannot access gmail. Other webmail such as snappy can connect to many smtp/imap backends, such as yahoo/outlook/gmail, they ca

[pfx] Re: question again about email routing

On 10/07/2024 10:33, Phil Biggs via Postfix-users wrote: Wednesday, July 10, 2024, 8:59:57 AM, Jeff Pang via Postfix-users wrote: Hello experts, One of my customers in HK want to send bulk messages to local users (about 500/day). I plan to setup a separated sending out server in HongKong fo

[pfx] Re: webmail with multi-domains supported

On 20/07/2024 14:27, timothy via Postfix-users wrote: Hello, I know this is not a general postfix issue, but since it is related to email, I am posting it here. I use the latest version of roundcube as my webmail, and I want to allow webmail access to free.fr and gmx.it (I have accounts with t

[pfx] Re: RFC logs_check

On 24/07/2024 23:23, Allen Coates via Postfix-users wrote: On 24/07/2024 13:11, Jaroslaw Rafa via Postfix-users wrote: I want "Kill on Sight". Fastest way to me would be Postfix says it logged a connection from fluffy.cuddly.port.raping.internet-measurement.com calls my script with the IP add

[pfx] Re: RFC logs_check

On 24/07/2024 23:58, Bob via Postfix-users wrote: [SNIP] The rest of my logs are stuffed with "user<>" and "unknown" or "does not resolve to" so they can get in the sea as well. This is exactly what postscreen - which is part of postfix - and fail2ban were developed to handle. I get a lot of

[pfx] Re: RFC logs_check

On 25/07/2024 00:08, Bob via Postfix-users wrote: [SNIP] Your link has the glimmer of a plan but would I not be back to having to periodically scan stdout, a file, to check for changes needimg action? The fail2ban daemon does that for you. Once you implement postcreen and the spamhaus recomme

[pfx] Re: RFC logs_check

On 25/07/2024 00:19, Bob wrote: Thanks... Toddles of to read about PostScreen "Wietse expects that the zombie problem will get worse before things improve, if ever." Waves. Sorry if I am being ittitating. Oh, don't worry, you are showings signs of learning behaviour, something that seems all

[pfx] Re: Cant join postfix users mailing list

On 30/07/2024 15:31, Ralf Hildebrandt via Postfix-users wrote: * Ralf Hildebrandt via Postfix-users : however i dont get a message from the mail list and checking syslog shows there was no contact to the server ? 4WY0w161l3z1018 1994 Tue Jul 30 05:24:49 postfix-users-boun...@postfix.org

[pfx] Re: Cant join postfix users mailing list

On 30/07/2024 17:18, Philthy Steel via Postfix-users wrote: Thanks Ralf I run f2b - ill put something on the ignore list and try again. You need to look into what ban-lists your host subscribes to, blocking a fairly well-known e-mail source but letting a TPG residential IP address (that's me

[pfx] Re: [RFC, sketch] IPv6 only trust of mail network

On 15/10/2024 14:36, Nico Schottelius via Postfix-users wrote: Good morning, Jaroslaw Rafa via Postfix-users writes: Dnia 14.10.2024 o godz. 13:03:48 Nico Schottelius via Postfix-users pisze: In a nutshell the idea is to reuse the very old, existing "trust of web" idea and mix it together

[pfx] Re: [ext] Re: list message posting loop

On 25/10/2024 00:35, Ralf Hildebrandt via Postfix-users wrote: * Wietse Venema via Postfix-users : And for some reason mail from list.sys4.de has adds no DELIVERED-TO: header that would have (also) stopped this loop. That has also been added while we were at it. Can that (also) be fixed? If

[pfx] Re: Postfix stable release 3.9.1, and legacy releases 3.8.7, 3.7.12, 3.6.16

On 5/12/24 09:10, Wietse Venema via Postfix-users wrote: Postfix stable release 3.9.1, and legacy releases 3.8.7, 3.7.12, 3.6.16 [An on-line version of this announcement will be available at https://www.postfix.org/announcements/postfix-3.9.1.html] I've just built this on Solaris 11.4, and it

[pfx] Re: Date/Time String in American Format

On 15/12/24 20:06, Andreas Kuhlen via Postfix-users wrote: Hello, currently, some dates appear in American format. As can be seen at the end of the line below: 2024-12-15T09:48:57.200203+01:00 mail postfix/anvil[919910]: statistics: max cache size 1 at Dec 15 09:45:36 Is it possible to cha

[pfx] Re: Postfix not listening?

On 12/1/25 21:19, Scott K via Postfix-users wrote: I was told that postfix isn't listening on my mail server at mail.servicemouse.com Yep. $ telnet mail.servicemouse.com 25 Trying 45.79.79.188... telnet: Unable to connect to remote host: Connection refused What

[pfx] Re: mail forwarding loop (chaining fetchmail | spamc | sendmail)

On 17/3/25 18:13, Robert Schetterer via Postfix-users wrote: Am 17.03.25 um 07:21 schrieb Paul Neuwirth via Postfix-users: On Sun, 16 Mar 2025 17:29:00 +0100 Jaroslaw Rafa via Postfix-users wrote: Dnia 16.03.2025 o godz. 15:51:42 Paul Neuwirth via Postfix-users pisze: Yes that's the problem.

[pfx] Re: I have found out the reason why Postfix keeps getting killed by OOM Killer

Do you know why my ClamAV is consuming so much memory? A more pertinent question is why aren't you using clamdscan? It only uses large amounts of memory on system start-up and when it reloads the AV data. Where clamscan uses that much memory every time it starts. Cheers,

[pfx] Re: I have found out the reason why Postfix keeps getting killed by OOM Killer

On 4/3/25 00:04, Turritopsis Dohrnii Teo En Ming via Postfix-users wrote: Dear Wietse Venema, The output of LINUX command "systemctl status postfix" already shows postfix service alone was using 6.2 GB of RAM. [root@ns1 ~]# top top - 20:56:04 up 2 days, 4:01, 1 user, load average: 3.38, 3.5

[pfx] Re: dmarc, dkim & spf failed but that message was delivered anyway

On 7/3/25 04:28, Petko Manolov via Postfix-users wrote: Thanks for the detailed explanation, Bill. I ended up registering with spamhaus.org and followed their guide here: https://docs.spamhaus.com/datasets/docs/source/40-real-world-usage/MTAs/020-Postfix.html However, i'm considering postscree

[pfx] Re: lockfile problem postfix/dovecot

On 28/3/25 19:44, Paul Neuwirth via Postfix-users wrote: [SNIP] I added the following to dovecot-config: conf.d/10-mail.conf:# used only with INBOX when either its initial creation or dotlocking fails. conf.d/10-mail.conf:# Rely on O_EXCL to work when creating dotlock files. NFS supports O_EXC