smtpd_recipient_restrictions -- Best Practices

everse DNS and they don't seem to be having any effect. -- Peter L. Berghold

Re: smtpd_recipient_restrictions -- Best Practices

, reject_rbl_client sbl.spamhaus.org, reject_rbl_client sbl-xbl.spamhaus.org, permit -- Peter L. Berghold

Re: Is it required to have the cert to be able to use TLS?

research first and make sure you know what you are doing. There's a lot of ways to set up an MTA badly.. -- Peter L. Berghold Brewer, Dog enthusiast, Crazy Cook

Re: Dovecot LDA - Active Directory userbase

On Wed, Jan 30, 2013 at 1:29 PM, Viktor Dukhovni wrote: > On Wed, Jan 30, 2013 at 11:34:13AM -0300, Peter von Nostrand wrote: > > > query_filter = (&(objectclass=Person)(|(mail=%s)(proxyAddresses=%s))) > > This query is perhaps wrong, the "proxyAddresses" field

StartTLS frustrations

le checked the files (especially the cert file) and they are all where I expect them to be. What in the world am I missing? -- ++++ Peter L. Berghold pe...@berghold.net Unix Professional, Beer Brewer, Dog

Re: StartTLS frustrations

On Fri, Apr 05, 2013 at 04:54:37PM +0200, Robert Schetterer wrote: > > debian chroot ? Nope. Not running chroot. -- ++++ Peter L. Berghold pe...@berghold.net Unix Professional, Beer

Re: StartTLS frustrations

CA and added those to the bundle file. Maybe I have to grab Class3 and Extended Validation as well? I also wonder about the client intermediate certs but am doubtful I need those as well. -- ++++ Peter L. Be

Re: StartTLS frustrations

meout = 3600s smtpd_use_tls = no tls_random_source = dev:/dev/urandom transport_maps = hash:/etc/postfix/transport unknown_local_recipient_reject_code = 550 virtual_alias_maps = hash:/etc/postfix/virtual -- +++

Re: StartTLS frustrations

ck on when I have some idea as to why *else* it isn't working. > -- ++++ Peter L. Berghold pe...@berghold.net Unix Professional, Beer Brewer, Dog Trainer and Patriot http://blog.berghold.net

Re: StartTLS frustrations

t is working now. Thank you all very much. -- ++++ Peter L. Berghold pe...@berghold.net Unix Professional, Beer Brewer, Dog Trainer and Patriot http://blog.berghold.net

Multiple "smart hosts?"

ng provider's SMTP server? - -- Peter L. Berghold http://www.berghold.net [EMAIL PROTECTED] Unix Professional Dog Agility Fan Crazed Cook "Those who fail to learn from history are condemned to repeat it." -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux)

Re: Multiple "smart hosts?"

between my host at home and my VPS in a long time. Oh well.. so much for that approach. I've set up the fallback relay and I'll no doubt have an opportunity to test it before long. My VPS is acting sick - -- Peter L. Berghold http://www.berghold.net [EMAIL PROTECTED]

Trying to let a "friendly" mail server in and it ain't working....

le (and ran postmap on the file afterwards, reloaded postfix, etc.) and the connections are still being rejected. What am I missing? 209.34.233.105 OK mail.skywaysoftware.com OK skywaysoftware.com OK testmail.skywaysoftware.com OK [EMAIL PROTECTED] OK - -- Pete

Re: Trying to let a "friendly" mail server in and it ain't working....

ved_header = yes smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom transport_maps = hash:/etc/postfix/transport unknown_local_recipient_reject_code = 550 virtual_alias_maps = hash:/etc/postfix/virtual - -- Peter L. Berghold http://www.berghold.net

wildcards in aliasing

Anyone used wildcards in aliasing in postfix. What I want to do is lets say all emails sent using digits forexample [EMAIL PROTECTED] redirect them to my email address. How do I do that?

custom python3 filter dies with Status: 120 with specific mail

Hi, we're using a custom python3 mail filter since ages here, but today, we stumbled across a strange behavior, that I cannot explain. First some environment specifications: Postfix 3.4.7/Python3.6.10 running on OpenSUSE Leap 15.2. The filter adheres to the simple filter "specification" from

Quick question

net} --> smtpd instance 2 I'm having issues sending email to verizon.net destinations and my ISP has offered me a third (!) IP address to use. Verizon keeps insisting I have no rDNS records and my IP is dynamically allocated. Both statements are false. -- Peter L. Berghold

Double Mails delivered with aliases.

Hiya, I'm having sort of a strange problem with my postfix installation. I have Local users and users with forwards. Some can have more than one forward, say we have Original-Recipient a...@a.test that forwards to local b...@a.test and remote c...@b.test

SV: Double Mails delivered with aliases.

> Short version: > If you have a delivery address aliasing scheme set up that results in > mail being delivered to duplicate email addresses for the same user, it > is not Postfix's responsibility to de-duplicate those emails. That's on > you. Yeah, I'm aware of this. Also, So far it is doing exa

SV: Double Mails delivered with aliases.

(and now to the list instead of directly, apologies 'bout that) > >I have Local users and users with forwards. > how do they forward? Using virtual_alias_maps - Lookup into a database, that returns the field alias as destination (alias due to a backend expecting that particular fieldname). If th

SV: SV: Double Mails delivered with aliases.

Realized that my usage of "local" for my users, is wrong terminology, they are all virtual users. [...] > You haven't posted whole master nor whole xMTPDeliver (pastebin, please). > Both can contain something that causes multiple deliveries. Pastebin coming up 😊 main.cf : https://pastebin.com/rQ

[P-U] Re: Postfix lists are migrating to a new list server

would be a dmarc replacement or solution for RHEL systems? Looks like there's a COPR available with the patch for this issue: https://copr.fedorainfracloud.org/coprs/abo/opendmarc/ I can't vouch for how trustworthy it is. Peter ___ Postfi

[P-U] Re: Postfix lists are migrating to a new list server

ter maintained solution. The patch appears to be committed in github: https://github.com/andreasschulze/OpenDMARC/commit/e8e7b41fef40032398d35650489a717108ac70de.patch Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe s

[P-U] Re: Postfix lists are migrating to a new list server

opendmarc [Service] Restart=on-failure ...so that opendmarc will restart when it does crash for this or any other reason. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[P-U] Re: New List Host and Reply-to Header

st-Post: defaults to "Reply List". I've found that hiding the normal reply button in TB and enabling the smart reply button has made my world way easier when dealing with mailing lists. Peter ___ Postfix-users mailing list -- postfix-us

[P-U] Re: New List Host and Reply-to Header

en other lists explicitly exclude this step and it works well. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[P-U] Re: New List Host and Reply-to Header

On 10/03/23 09:07, Matthew McGehrin via Postfix-users wrote: Hi Peter. The Reply-To has always been the original poster for 10+ years. No sense changing it now. :) On the contrary, this is the perfect time to change it, if we're going to change it. We've already made a number of

[P-U] Re: New List Host and Reply-to Header

doesn't really say much of anything except that you should trust the middle man (who's trust is already in question). That said, it doesn't really hurt to have it and can help for gmail recipients. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[P-U] Re: New List Host and Reply-to Header

do with other messages. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[P-U] Re: The joke writes itself.

, please consider changing it. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[P-U] Re: The joke writes itself.

se of the childish reference it invokes. I don't want to see postfix associated with that reference in any way. I think that [postfix] or [postfix-users] and [postfix-devel] [postfix-announce] are just fine, but if you want shortened versions, might I suggest: [pf] [pf-dev] [pf-ann] P

[pfx] Re: Allow TLSv1 only for internal senders

en a vulnerability does get found in a cipher you will get an update to openssl from your OS vendor which will remove that cipher from the list, unless you do something like override it like you are doing above. smtpd_tls_mandatory_ciphers = high

[pfx] Re: Allow TLSv1 only for internal senders

h is not capable for TLSv1.1 and up.. As others have pointed out, TLSv1.0 is not that bad for smtp. Others have posted a solution for this, but honestly I would just allow >=TLSv1 and not worry about it. Peter ___ Postfix-users mailing li

[pfx] Re: Allow TLSv1 only for internal senders

smtpd_reject_unlisted_recipient=no -o smtpd_recipient_restrictions=$mua_recipient_restrictions -o milter_macro_daemon_name=ORIGINATING ...or similar for a submission (non-wrappermode) port. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org

[pfx] Re: Fwd: Re: Re: Allow TLSv1 only for internal senders

ing with this setting, and if you are not correct then it will cause you to downgrade potential encrypted connections to plain text. I know someone will likely argue with me, but I can really think of no valid reason to set this. Peter ___ Postf

[pfx] Re: [P-U] Re: New List Host and Reply-to Header

On 25/03/23 11:50, raf via Postfix-users wrote: On Fri, Mar 10, 2023 at 09:11:58AM +1300, Peter via Postfix-users wrote: * Don't add a Reply-To:. I actually question if this is really needed as we likely want replies to go to the list the vast majority of time anyways. I have seen

[pfx] Re: New List Host and Reply-to Header

On 26/03/23 13:55, Benny Pedersen via Postfix-users wrote: Peter via Postfix-users skrev den 2023-03-26 01:05: Mailman has a setting that addresses this, reply_goes_to_list. According to mm docs, this adds the original From: address as a CC there will be a day when mailman dont sink ships

[pfx] Re: New List Host and Reply-to Header

On 26/03/23 18:37, Benny Pedersen via Postfix-users wrote: Peter via Postfix-users skrev den 2023-03-26 06:15: DKIM and ARC signatures need to be checked right after the message is received, not really, all that is needed is to frezze stata of dkim, arc, dmarc at recieve state, which

[pfx] Re: secondary MX server

nd efforts on the primary server. I am afraid the secondary MX was abused by spammers. Indeed, it often is. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: secondary MX server

On 2/04/23 09:03, Jaroslaw Rafa via Postfix-users wrote: Dnia 1.04.2023 o godz. 13:04:30 Peter via Postfix-users pisze: Secondary, or backup MXes are almost never recommended in the modern internet and tend to be a relic of the 1990s dialup internet. [...] None of this is what you are

[pfx] Re: Question to reject_rbl_client zen.spamhaus.org

other public DNS resolver (such as 8.8.8.8). You *must* run your own DNS resolver for DNSRBLs to work properly. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Question to reject_rbl_client zen.spamhaus.org

aring that limit with everyone else who uses that resolver and will not get reliable results that way. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Question to reject_rbl_client zen.spamhaus.org

t makes a difference. what action code policyd should return for passing the request to next check? "DUNNO", see access(5). Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Question to reject_rbl_client zen.spamhaus.org

and that will tell you if policyd is the issue or not. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Question to reject_rbl_client zen.spamhaus.org

On 9/04/23 23:02, Peter via Postfix-users wrote: On 9/04/23 21:23, tom--- via Postfix-users wrote: I am using the policyd-spf by default configuration (never changed a line), and this is the doc: https://manpages.debian.org/testing/postfix-policyd-spf-python/policyd-spf.conf.5.en.html But the

[pfx] Re: Question to reject_rbl_client zen.spamhaus.org

rather to defer. That said, there is nothing wrong with this setting if that's what you actually want to happen if the policyd isn't working. now it works perfectly. Excellent, glad you were able to work it out. Peter ___ Postfix-users mai

[pfx] Re: Question to reject_rbl_client zen.spamhaus.org

rred shows that this isn't the case. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: www.postfix.org certificate expired

On 22/04/23 22:18, Ralph Seichter via Postfix-users wrote: * Peter Ajamian via Postfix-users: Verify return code: 10 (certificate has expired) Thanks. For some reason, the web server had not been restarted after the last certificate update, which normally happens automatically. I just

[pfx] Re: Subject modification based on recipient

content filter. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: body_checks not catching all backscatter

ck backscatter is by using the backscatter DNSRBL. Make sure you follow the instructions for setting it up properly: https://www.backscatterer.org/?target=usage If used correctly it will only block DSNs from known backscatter sources. Peter ___ Postfix

[pfx] Re: body_checks not catching all backscatter

On 3/05/23 17:51, Ken Peng via Postfix-users wrote: But anybody can use our (even setup correctly) mailserver as backscatter source? Not if you configure postfix properly. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To

[pfx] Re: inet_interfaces documentation

Is this behavior of inet_interfaces overridden by smtp_bind_address? From the way it's worded it looks to me like the inet_interfaces setting overrides smtp_bind_address but this isn't clear to me. Can that be clarified (one way or the other)? Peter On 4/05/23 04:48, Wietse

[pfx] Re: inet_interfaces documentation

On 4/05/23 08:31, Wietse Venema via Postfix-users wrote: Peter via Postfix-users: Is this behavior of inet_interfaces overridden by smtp_bind_address? From the way it's worded it looks to me like the inet_interfaces setting overrides smtp_bind_address but this isn't clear to me. C

[pfx] Re: inet_interfaces documentation

On 4/05/23 08:31, Wietse Venema via Postfix-users wrote: Peter via Postfix-users: Is this behavior of inet_interfaces overridden by smtp_bind_address? From the way it's worded it looks to me like the inet_interfaces setting overrides smtp_bind_address but this isn't clear to me. C

[pfx] Re: inet_interfaces documentation

empty has the same effect as setting it to all (it will listen on all interfaces)? Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: postscreen sends 450 without deep tests

, though. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: logging strangeness

at the login username is until after the login completes and is reported back to Postfix by the Dovecot server. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SPF questions

Technically it's an invalid MX record because MX records must point to a hostname, not an IP address. They are probably trying (but failing) to implement a null MX record: https://www.rfc-editor.org/rfc/rfc7505 Peter On 12/06/23 19:50, wesley--- via Postfix-users wrote: Note the

[pfx] Re: Postfix: running a script on authentication failure

response of either REJECT or DUNNO and it should be called with all of the relevant info you want. See SMTPD_POLICY_README, access(5) and spawn(8). Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix

[pfx] Re: IP/CIDR based exception in smtpd_sender_restrictions?

: 1.2.3.0/24 OK 5.6.7.128/25 OK main.cf: smtpd_sender_restrictions = check_client_access cidr:/etc/postfix/sender_override.cidr check_sender_access type:table Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email

[pfx] Re: smtp auth on port 25

. Don't try to use a service that is meant for a different purpose for this. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: smtp auth on port 25

On 15/08/23 21:08, Benny Pedersen via Postfix-users wrote: Peter via Postfix-users skrev den 2023-08-15 10:44: This is a bad idea for several reasons.  If you want submission use ports 465 and/or 587 as they are intended.  Don't try to use a service that is meant for a different purpos

[pfx] Re: How can I set up a very simple postfix server

ls_security_level = none smtp_tls_security_level = none smtp_sasl_auth_enable = no smtp_use_tls = no You forgot: smtpd_tls_auth_only = no Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: How can I set up a very simple postfix server

On 22/08/23 22:59, Peter via Postfix-users wrote: You forgot: smtpd_tls_auth_only = no Sorry, scratch this last bit, it's only if you need to do AUTH without TLS, and I don't think you're trying to do AUTH here. Peter ___ Postfi

[pfx] Re: How can I set up a very simple postfix server

t a custom configuration (directory), you need command line options. Or you can set the MAIL_CONFIG environment variable, which should be easy enough to do system-wide. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscri

[pfx] Re: configure a relayhost

ned for mail.gmx.com, either change the relayhost setting to reflect this or create a new cert that also includes smtp.gmx.com. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: UGFzc3dvcmQ6

e setting to get rid of these dozens of false-attempts from diverse IPaddresses, please? Disable the LOGIN mech? Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

on the EL track I recommend Rocky Linux or Alma Linux as CentOS no longer provides a stable Linux platform beyond CentOS 7. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: IPv6 and Cloud server CPU

ith other supporting software that is only available from 3rd-party repos or where 3rd-party repos have newer versions taht you want to use, but not for ARM. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an em

[pfx] [off-topic] aarch inclusion in Linux distros (was: IPv6 and Cloud server CPU)

nt to support and that does not reflect on the support by the distro itself. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: [off-topic] aarch inclusion in Linux distros (was: IPv6 and Cloud server CPU)

On 24/11/23 19:52, Peter via Postfix-users wrote: It's not the distro.  It's common for Linux distros to fully support ARM, but that does not put any obligation on 3rd-party distros, just like if someone were to create a 3rd-party distro for BSD it would be up to them to decide wh

[pfx] Re: [ext] gmail failing SPF/DKIM

This would result in SPF failing when an IPv6 connection is established. This, of course, is just a WAG. If you want someone to review the issues with google then you'll need to show headers and/or logs from the connection to google. Protonmail headers doesn't really help for this

[pfx] Re: How to configure lmtp delivery

ge or add to it. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: How to configure lmtp delivery

page which is broken, it means that page was not properly ported. Please post to the dovecot mailing list and let them know as this is something they need to fix. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an

[pfx] Re: How to configure lmtp delivery

On 3/01/24 01:27, Peter via Postfix-users wrote: There is a link at the bottom to the postfix-specific lmtp configuration page which is broken, it means that page was not properly ported. Please post to the dovecot mailing list and let them know as this is something they need to fix. In the

[pfx] Re: postfix repo

e responsibility on Wietse to try to build binary rpms for every distro under the sun. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: postfix repo

asier programs to build in my experience. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Documentation on upgrade 2.10 to 3.5

t; has any significant workload (VirtualBox host). The others are all test > beds. Glad to hear you've upgraded nearly all of your machines, though I would have recommended a different approach to Elevate (as stated above). Peter ___ Post

[pfx] Re: ARC or DKIM or SRS?

ther things you do for mail that you originate (SPF, DKIM, DMARC, etc). Good luck, Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: ARC or DKIM or SRS?

this approach. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: ARC or DKIM or SRS?

nding server to defer (disconnect and try again later). This is very similar to how greylisting works. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Understanding log entries

ge*, so in a manner of speaking the message is still valid and a different connection might accept it (e.g. by attempting a different MX). An MTA that wants to reject the message should should wait until after the RCPT TO command to reject the actual message

[pfx] Re: ARC or DKIM or SRS?

7;m not sure I ever managed to set it up successfully, however. Right, postscreen has similar functionality to greylisting, but since it has a different goal there are some features of postgrey that aren't present in postscreen. Peter ___ Postfi

[pfx] Re: Update: What features to deprecate

postfix start, start-fg, check, reload, or status. Just a quick thought here. I think it would make sense to release this as Postfix 4.0 since removing and deprecating a large number of features should probably be considered quite a major change. Peter

[pfx] Re: Update: What features to deprecate

On 21/02/24 12:40, Wietse Venema via Postfix-users wrote: Peter via Postfix-users: A quick status update. First, several features have been logging warnings that they would be removed for 10 years or more, so we could delete them in good conscience (perhaps keeping the warning with the

[pfx] Re: hmm spf is missing :)

e sender and From: header are all changed to postfix.org so it's all in alignment. Just to be clear, both porcupine.org and postfix.org have SPF and DKIM policies and Wietse's messages pass both when passing through the list. Peter ___ Pos

[pfx] Re: Which DKIM application for postfix 3.9.0

27;re going to run down the postfix list for your own failure at least have the decency to do it *on* the postfix list. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: hmm spf is missing :)

On 25/04/24 19:42, Benny Pedersen via Postfix-users wrote: Peter via Postfix-users skrev den 2024-04-25 09:19: On 15/04/24 10:14, Benny Pedersen via Postfix-users wrote: Authentication-Results    list.sys4.de; dkim=pass header.d=porcupine.org; arc=none (Message is not ARC signed); dmarc=pass

[pfx] Different SMTP access/relay control for ipv4 vs ipv6?

= ipv6, inet_interfaces = a:b:c::d, mynetworks, smtpd__restrictions, etc). Am I on the right track with the previous paragraph, or is/are there better way(s) to accomplish this? Sincerely, Peter ___ Postfix-users mailing list -- postfix-users@postfix.o

[pfx] Re: Mails ending up in spam when sending to gmail address

, an SPF and DKIM both pass. I am open to suggestions. It's probably just IP reputation and you need to let it build up with google, but see: https://support.google.com/mail/answer/81126 Peter ___ Postfix-users mailing list -- postfix-users@

[pfx] Re: Mails ending up in spam when sending to gmail address

On 16/05/24 23:40, Jaroslaw Rafa via Postfix-users wrote: Dnia 16.05.2024 o godz. 12:05:52 Peter via Postfix-users pisze: On my side the email is accepted from here, and relayed, Rspamd does sign it, and Postfix's last message in the log is a message sent delivered, and removed from my que

[pfx] Re: Strengthen email system security

be careful not to block port 25 connections with this and realize that if you or your users ever intend to do any travelling this could be problematic. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to pos

[pfx] Re: Strengthen email system security

r from your ISP. He's having problems with authentication attempts. This is a bad idea for submission as it would effectively block home users from submitting email. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscr

[pfx] Re: Strengthen email system security

ld be smtpd_sasl_mechanism_filter. or, in dovecot.conf, set: auth_mechanisms = plain Indeed, probably both is the way to go. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Strengthen email system security

e of such being a null client such as submitting mail from a server. Also this should *not* be a substitute for SASL AUTH, but rather an added check. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Strengthen email system security

orts where reject_rbl_client and/or zen.spamhaus.orgshould not be used. And the OP is referring to SASL AUTH attacks which are for submission, not MX connections. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email

[pfx] Re: Strengthen email system security

s to pick a different username to their primary mailbox email address can be problematic. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: disable authentication on port 25

le in main.cf and instead explicitly set it on your submission and/or submissions service in master.cf instead. When it comes to things like this it is generally better to default to off and explicitly turn on rather than default to on and explicitly turn off.

[pfx] Re: Strengthen email system security

On 24/05/24 21:32, Matus UHLAR - fantomas via Postfix-users wrote: On 24.05.24 12:00, Peter via Postfix-users wrote: And the OP is referring to SASL AUTH attacks which are for submission, not MX connections. But some of those log lines mention postfix/smtpd, which means they happen on port

[pfx] Re: disable authentication on port 25

o the submissions (or may be smtps) section as well. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

<    3   4   5   6   7   8   9   10   >