[pfx] Re: documentation for tags that appear after 'disconnect from' log lines?

2025-01-02 Thread Greg Klanderman via Postfix-users
>>>>> On January 2, 2025 Bill Cole via Postfix-users >>>>> wrote: > On 2025-01-01 at 20:13:35 UTC-0500 (Wed, 01 Jan 2025 20:13:35 -0500) > Greg Klanderman via Postfix-users is rumored to > have said: >> I just noticed a single unknown host is c

[pfx] Re: documentation for tags that appear after 'disconnect from' log lines?

2025-01-01 Thread Greg Klanderman via Postfix-users
>>>>> On January 1, 2025 Wietse Venema via Postfix-users >>>>> wrote: > Greg Klanderman via Postfix-users: >> >> Hello all and Happy New Year! >> >> Is there some documentation for the list of tags, their meanings, >> and the format

[pfx] Re: documentation for tags that appear after 'disconnect from' log lines?

2025-01-01 Thread Greg Klanderman via Postfix-users
>>>>> On January 1, 2025 Viktor Dukhovni via Postfix-users >>>>> wrote: > On Wed, Jan 01, 2025 at 08:13:35PM -0500, Greg Klanderman via > Postfix-users wrote: >> I'm fine with allowing a little probing, especially if the host >> doing so has

[pfx] Re: distinguishing submission from smtp log lines

2025-01-09 Thread Greg Klanderman via Postfix-users
> On January 7, 2025 Viktor Dukhovni via Postfix-users > wrote: >> I found smtpd_service_name, and guessing I could use that to >> replace the part after '/'? Would changing that have any >> functional impact, or only the logs? > Yes, it would break tools like "collate" that you might

[pfx] Re: documentation for tags that appear after 'disconnect from' log lines?

2025-01-02 Thread Greg Klanderman via Postfix-users
>>>>> On January 2, 2025 Bill Cole via Postfix-users >>>>> wrote: > On 2025-01-02 at 16:47:00 UTC-0500 (Thu, 02 Jan 2025 16:47:00 -0500) > Greg Klanderman via Postfix-users is rumored to > have said: >>>>>>> On January 2, 202

[pfx] documentation for tags that appear after 'disconnect from' log lines?

2025-01-01 Thread Greg Klanderman via Postfix-users
Hello all and Happy New Year! Is there some documentation for the list of tags, their meanings, and the format for the value after '=' for the 'disconnect from' log lines? For example: | disconnect from X[IP] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4 I believe auth=0/1 indicates that aut

[pfx] Re: documentation for tags that appear after 'disconnect from' log lines?

2025-01-01 Thread Greg Klanderman via Postfix-users
> On January 1, 2025 Viktor Dukhovni via Postfix-users > wrote: > As the operator of a "responsible" SMTP survey engine: > https://stats.dnssec-tools.org/about.html > https://stats.dnssec-tools.org/ > that connects just a few times a day (once per IP address of an MX > host, wi

[pfx] distinguishing submission from smtp log lines

2025-01-07 Thread Greg Klanderman via Postfix-users
Hi, I just tried adding '-o syslog_name=postfix/submission' to master.cf for my submission port, as I would like to be able to distinguish log lines for the two smtpd ports. I had expected it to completely replace 'postfix/smtpd' at the beginning of the log line, but now see it only replaces 'p

[pfx] postscreen after greeting tests?

2025-04-17 Thread Greg Klanderman via Postfix-users
Hi, Am I correct that the after greeting tests are turned off by default? I believe they are controlled with the variables postscreen_pipelining_enable, postscreen_non_smtp_command_enable, and postscreen_bare_newline_enable which are all set to no on my mail server, but I am seeing the logging

[pfx] Re: postscreen after greeting tests?

2025-04-17 Thread Greg Klanderman via Postfix-users
Hi Bill Thanks for your reply.. >>>>> On April 17, 2025 Bill Cole via Postfix-users >>>>> wrote: > On 2025-04-17 at 16:15:20 UTC-0400 (Thu, 17 Apr 2025 16:15:20 -0400) > Greg Klanderman via Postfix-users > is rumored to have said: >> Hi, >

[pfx] Re: postscreen_access_list limitations?

2025-04-13 Thread Greg Klanderman via Postfix-users
>>>>> On April 13, 2025 Viktor Dukhovni via Postfix-users >>>>> wrote: > On Sun, Apr 13, 2025 at 08:12:26PM -0400, Greg Klanderman via Postfix-users > wrote: >> Am I not able to match on the client FQDN in postscreen_access_list? >> I.e. us

[pfx] postscreen_access_list limitations?

2025-04-13 Thread Greg Klanderman via Postfix-users
Am I not able to match on the client FQDN in postscreen_access_list? I.e. using a hash: table? I was hoping I could kill .ip.linodeusercontent.com and other such garbage very early/quickly and just switched to using postscreen to implement that.. Is the only option to turn off smtpd_delay_rejec

[pfx] Re: postscreen_access_list limitations?

2025-04-14 Thread Greg Klanderman via Postfix-users
>>>>> On April 13, 2025 Viktor Dukhovni via Postfix-users >>>>> wrote: > On Sun, Apr 13, 2025 at 10:19:29PM -0400, Greg Klanderman via Postfix-users > wrote: >> > This has little to do with hash tables, but as documented in >> > https://

[pfx] Re: postscreen_access_list limitations?

2025-04-15 Thread Greg Klanderman via Postfix-users
> On April 14, 2025 Wietse Venema via Postfix-users > wrote: > 100% of the clients that pregreet will be in error. Great, thank you Wietse! > Allowlisting remote domains based on their reverse DNS is pointless. I was only interested in blocking based on reverse DNS. (given your confir