Re: WoSign/StartCom CA in the news

2016-09-28 Thread Karol Augustin
w it is acquired by Symantec so I wouldn't expect any issues. Best, Karol -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: reject_unknown_client_hostname when nameserver is unreachable

2016-11-02 Thread Karol Augustin
On 02/11/16 09:25, Karel wrote: Hello, I am using following smtpd_client_restriction: reject_unknown_client_hostname Now, both my nameservers were offline, and postfix could not resolve IP addresses and thus rejected all hosts: NOQUEUE: reject: RCPT from unknown[x.x.x.x]: 450 4.7.1 Client

Re: canonical based on login name

2018-01-22 Thread Karol Augustin
nd then vrfydmn makes sure that From: matches. In your case you can (apparently) force PHP to use fixed envelope-from address. Than you can use this milter to fix From: address. Have a look, it might be what you need. https://github.com/croessner/vrfydmn Karol -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312vrfydmn

Re: Message-ID

2018-01-27 Thread Karol Augustin
d Guy2 only one. Often this e-mail is sent in two different SMTP sessions so I don't see any possibility that Postfix can catch that. It's not a big deal so I have never looked into that but now I might. The problem with using solely Message-ID is that off-list replies will be matched with

Re: Message-ID

2018-01-27 Thread Karol Augustin
On 2018-01-27 19:30, Karol Augustin wrote: > On 2018-01-27 17:24, CP wrote: >> On 01/27/2018 02:05 PM, Matus UHLAR - fantomas wrote: >>>>> On 27.01.18 11:16, CP wrote: >>>>>> I'm trying to eliminate a problem with duplicate emails in alias &g

Re: Fwd: Re: Message-ID

2018-01-28 Thread Karol Augustin
On 2018-01-28 9:25, CP wrote: > on 01/27/2018 09:30 PM, Karol Augustin wrote: > > With Message-ID header and dovecot lmtp (I think lda works also) you > eliminate  (a lot!!) of these duplicates so try it if you have the same > problem. > In my case I have a robot account whi

Re: Two different IP for one mx

2018-01-30 Thread Karol Augustin
ou have when mailing to the outside? > - which IP you have to connect from outside in order to get to your mail > server? Hi Bill No, there is no DHCP. All I have is one interface and it's it has a fixed IP address (192.168.34.30) >From the information you provided it lo

Re: Two different IP for one mx

2018-01-30 Thread Karol Augustin
signed to the NIC. You can have private address assigned to the NIC and be perfectly capable of seeing original source address. This is how it should be configured. Karol -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: Email and information helpfull to have in the headers/logs for police enquiries

2018-01-30 Thread Karol Augustin
0169]: DISCONNECT [137.135.42.190]:1072 Jan 30 17:15:07 mail postfix/postscreen[20169]: CONNECT from [168.100.1.3]:45124 to [10.1.0.20]:25 Jan 30 17:15:07 mail postfix/postscreen[20169]: PASS OLD [168.100.1.3]:45124 Jan 30 17:15:07 mail postfix/smtpd[20618]: connect from camomile.cloud9.net[1

Re: Postfix upgrade breaks emails accounts from Mac OS X

2018-02-03 Thread Karol Augustin
things. My point is: are you sure that you upgraded just postfix or maybe you hit same issue by running apt-get upgrade or similar? I don't know what version of Mac is still using TLS1.0 as I can't stand Macs and avoid them at all cost. I also don't know if using TLS1.0 is account sticky which would be ridiculous. k. -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: Question regarding smtpd DNS resolution

2018-02-05 Thread Karol Augustin
utright rejecting mail coming from hosts with bad PTR/no PTR might prevent you from receiving legitimate e-mail as well. But, as usual, it depends on your user base and YMMV. I've heard that gmail is rejecting / spam tagging email from such hosts but never confirmed that myself. Maybe in some foreseeable future it will be safe to reject bad PTR hosts but, in my opinion, not yet. k. -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: Restricting submission to legitimate account name only

2018-02-20 Thread Karol Augustin
omeone (a company, especially) might > want an invalid sender. > > And you'll break mailing lists if you aren't careful. How? What restricting users to send mail only from addresses they own has to do with mailing lists? k. -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: Restricting submission to legitimate account name only

2018-02-20 Thread Karol Augustin
On 2018-02-20 11:07, Ralph Seichter wrote: > On 20.02.2018 10:35, Karol Augustin wrote: > >> On 2018-02-19 23:13, @lbutlr wrote: >> >> > For example, most people have many email addresses, and rather than >> > try to manage many different servers, they will p

Re: postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-03-01 Thread Karol Augustin
t in the script/config to suit your needs. Also if RBL is listing google servers they doing it wrong. I just disabled SORBS for that even though I have never hit this issue myself as I have google CIDR records whitelisted. k. -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: postwhite? (why not?)

2018-03-02 Thread Karol Augustin
voiding greylisting if some otherwise good server finds it's way to RBL. I also added some hosts to my list from banks, Amazon SES etc. I have about 800 lines in the generated file, which is reasonable. I have about 60-75% passing connections whitelisted now. Karol -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: postwhite? (why not?)

2018-03-03 Thread Karol Augustin
On 2018-03-03 5:06, MRob wrote: > On 2018-03-02 13:46, Karol Augustin wrote: >> I also added some hosts to my list from banks, Amazon SES etc. I have >> about 800 lines in the generated file, which is reasonable. I have about >> 60-75% passing connections whitelisted now.

Re: postwhite? (why not?)

2018-03-05 Thread Karol Augustin
nsbl_threshold. Hi Bill, Would you mind sharing which RBLs you recommend to use in postscreen? k. -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: Content filter with script

2018-03-08 Thread Karol Augustin
to avoid loops. When putting script at pickup I had loops. Check mtpolicyd, it has accounting plugin which might be what you are looking for. Karol -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: SMTP session caching

2018-03-15 Thread Karol Augustin
he same connection. Final effect looks like that: disconnect from localhost[127.0.0.1]:51596 ehlo=1 mail=63 rcpt=71 data=63 rset=63 quit=1 commands=262 I believe Matus is asking if that could be implemented in postfix so it connects to remote SMTP server and delivers one e-mail after another issuing RSET after each one and not disconnecting. Karol -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312

Re: Removing trace records on submission MSA

2018-04-06 Thread Karol Augustin
This expression works for me and also removes information about the connection, which in my case can tell if the mail was sent from webmail (unencrypted connection from webmail host to postfix host) or client's MUA (encrypted). It can probably fail on some systems due to .* matching, which is greedy, but I wrote it many years ago and it works, so I am not fixing it. k. -- Karol Augustin ka...@augustin.pl http://karolaugustin.pl/ +353 85 775 5312