On 25/05/24 00:29, Benny Pedersen via Postfix-users wrote:
Northwind via Postfix-users skrev den 2024-05-24 14:17:
so, in main.cf:
smtpd_sasl_auth_enable=no
comment this out in main.cf, it already default no
It's fine to have it, it's simply redundan
:)
You may very well not see AUTH even if it's enabled with this test
depending on the smtpd_tls_auth_only setting.
If you want to be sure use openssl s_client for your test.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.o
port 25 anyways the
smtpd_tls_auth_only is immaterial to port 25 connections. This setting
does not disable plain text connections it simply disables SMTP
authentication over plain text connections.
Peter
___
Postfix-users mailing list -- postfix
stfix/blob/postfix-3.4/postfix/conf/master.cf#L29
...vs the current postfix:
https://github.com/vdukhovni/postfix/blob/master/postfix/conf/master.cf#L39
...and note that in both cases there is a -o smtpd_sasl_auth_enable=yes
line.
Peter
___
Postfix-
On 25/05/24 01:37, Matus UHLAR - fantomas via Postfix-users wrote:
He mentioned that on postfix with "smtpd_tls_auth_only=yes" (the
default) authentication is only available when TLS is active
The default is no, but it is very common to have it set to ye
.
How can I make that?
Either:
http://www.postfix.org/postconf.5.html#check_sasl_access
...or...
http://www.postfix.org/postconf.5.html#check_sender_access
...or you can configure your SASL backend (dovecot or cyrus) to only
allow access to the single user.
Peter
On 5/06/24 16:20, Viktor Dukhovni via Postfix-users wrote:
Original text:
Is there a link to the announcement online?
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
On 5/06/24 19:23, Peter via Postfix-users wrote:
On 5/06/24 16:20, Viktor Dukhovni via Postfix-users wrote:
Original text:
Is there a link to the announcement online?
I see it's from the mailop list which, unfortunately has the archives
set private so it doesn't help me to be ab
ething in the config. I’m wondering if roundcube is not
even attempt auth because postfix isn’t announcing it as a service that
it offers.
It's likely that roundcube is not configured for TLS and postfix is (as
it should be) configured not to offer AUTH until TLS is established.
Peter
___
On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote:
On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users
wrote:
It's likely that roundcube is not configured for TLS and postfix is (as it
should be) configured not to offer AUTH until TLS is established.
Yes, postfix is configur
-confirmed_reverse_DNS
* Make sure that SPF, DKIM and DMARC are correctly configured.
* Sign up for www.dnswl.org
* Check for DNSRBL entries: http://multirbl.valli.org/
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an
On 17/06/24 17:16, Peter via Postfix-users wrote:
Without seeing logs and actual config settings I can only guess. One
thing to keep in mind is that there's two types of TLS connection,
implicit TLS and explicit TLS. Implicit TLS connects to a port
dedicated to TLS connections
is is that you can then use settings such as
smtpd_sender_login_maps and reject_sender_login_mismatch in postfix to
control individual users from roundcube.
http://www.postfix.org/postconf.5.html#smtpd_sender_login_maps
http://www.postfix.org/postconf.5.html#reject_sender_login_mismat
On 18/06/24 13:00, Jeff Peng via Postfix-users wrote:
On 2024-06-18 07:30, Peter via Postfix-users wrote:
On 17/06/2024 17:28, Paul Schmehl wrote:
How do you set up roundcube to not use authentication? I really
don’t need it since it’s on the same machine as the mail server.
What config
quot;tls://..." or "ssl://" with a colon (:) not a semicolon (;).
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
always reject, so the last two rules will always reject
regardless.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
On 20/06/24 04:35, John Levine via Postfix-users wrote:
It appears that Peter via Postfix-users said:
On 19/06/24 18:51, Tan Mientras via Postfix-users wrote:
Hi
*Trying to setup email REJECT when users try to send to a no-reply email.*
There is no such thing as a no-reply email, there is
automatic response. IMHO.
A better way would be to set the From: address to someone that will
actually respond from your organization (e.g. info@, help@, etc).
@Peter
My /etc/postfix/no-reply_reject contains lines like:
do-not-re...@domain.tld REJECT This mailbox is not attended/read. Do not
reply to
nly or DKIM alignment only) but the more of those boxes that
you can successfully tick off the better chance you have for you message
to be accepted when things go wrong, or when a destination doesn't
implement one of the above checks properly.
Peter
___
On 21/06/24 21:49, Jaroslaw Rafa via Postfix-users wrote:
Dnia 21.06.2024 o godz. 18:45:15 Peter via Postfix-users pisze:
SPF/DKIM/DMARC Checklist for (IMO) the best chance of getting your
mail to be accepted:
1. HELO banner should pass SPF.
2. Envelope Sender should pass SPF.
3. Envelope
On 21/06/24 23:10, Matus UHLAR - fantomas via Postfix-users wrote:
Peter via Postfix-users skrev den 2024-06-21 08:45:
SPF/DKIM/DMARC Checklist for (IMO) the best chance of getting your
mail to be accepted:
1. HELO banner should pass SPF.
2. Envelope Sender should pass SPF.
3. Envelope
::1 would likely be another way to resolve the issue.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
On 29/06/24 03:17, Curtis J Blank via Postfix-users wrote:
Well Peter all the "mynetworks =" that I have defined explicitly state
127.0.0.1 not localhost and all the logging shows 127.0.0.1 not
localhost. So that is why I say I am using 127.0.0.1. So I cannot follow
Ralph's sugg
is why I can't
understand why ::1:10025 was being used to do the SA connection and I
still need to determine that why.
We went by what you said in your OP. You never did post your config.
It would help a great deal if you would post the output
On 29/06/24 15:16, Curtis J Blank via Postfix-users wrote:
Peter, my misunderstanding, sorry. This is what I discovered today in
my testing. I explicitly used 127.0.0.1 and not localhost or so I
thought, I explain that below.
Back on topic. I did some more testing. This was the spampd
h is defined in master.cf. As previously
requested, please show the output of:
postconf -Mf
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
. Given
this there is honestly very little to gain with a catchall in this regard.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
recommends mysql_optionsv()
instead:
https://mariadb.com/kb/en/mysql_options/
For now it should work, but we may end up needing to patch postfix once
again in the near future for this.
Peter
___
Postfix-users mailing list -- postfix-users@pos
with
mariadb into the foreseeable future. From what I can tell
mysql_optionsv can be called exactly the same as mysql_options and it
should work fine.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an em
s, not the
customer. When it's time simply take the account back, he should not
have to relinquish it himself. It should be possible to easily transfer
his stored messages to his new account name. Depending on how generous
you're feeling you can offer to assist the custom
sending servers should fall
back to plain text this is not a given and an increasing number of MTAs
are now enforcing TLS encryption. I would start by fixing this.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an
and mail.err and
just look at mail.log.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
sue where forwarding SPAM can affect your IP
reputation with gmail.
Note that this only works with gmail, I'm not aware of other major ESPs
that offer this feature.
Further info and instructions:
https://support.google.com/mail/answer/21289
Peter
le, so it's not really a disadvantage here. At
the end of the day you've already gotten into bed with google no matter
which way you send your mail to them.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send
On 5/08/24 07:38, Alex via Postfix-users wrote:
Hi,
On Sun, Aug 4, 2024 at 2:31 PM Jaroslaw Rafa via Postfix-users
mailto:postfix-users@postfix.org>> wrote:
Dnia 4.08.2024 o godz. 20:14:34 Peter via Postfix-users pisze:
> My best advice when forwarding to gmail is t
ch of
those settings does (read the docs referenced below) and look up each of
those RBLs to see for yourself what they do and if they have any special
requirements for their usage (some require registration, etc).
Reference: postconf(5), postscreen(8),
ed on). It's just that I'm
toying with the idea of giving our users (who are mostly pretty savvy)
control over their own Spamassassin user_prefs files :)
That's all well and good, but it's not a bad thing to block additional
spam first if you can be reasonably certain t
lies they get from large DNS
providers[1], like Wietse said.
You can overcome this issue by running a local forwarding DNS server
locally on your network and use this as a DSN resolver for your network.
Peter
[1] https://www.spamhaus.org/faq/section/DNSBL%20Usage#365
chroot because they want to,
not because of any difficulty in making the change.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
open the port.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
tc
Of course it is possible you've configured your server's firewall to
block those but usually you would configure your server to block inbound
ports, not outbound.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsub
link above?
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
{ smtpd_client_restrictions = check_policy_service
unix:private/myservice }
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
al 2.5
release was in February 2012. This isn't the only time MacOS has
carried an ancient version of some software and I highly recommend that
you use a much newer version. Even if/when you install on a new mac
there is a high probability that it won'
ted problem address being rejected.
Just postconf -n. -f wasn't supported until 2.9.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
spam
onto the other server. This includes things such as postscreen cache,
Bayes database files, etc.
I would recommend revisiting your reasoning for wanting a second server,
they are usually not needed and require a lot of extra work to set up
and maintain than just a single server.
n to my server.
If that is really the case I would ditch Outlook faster than you can
blink and install and use Thunderbird instead ... just saying.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
On 28/10/24 20:07, Peter Ajamian via Postfix-users wrote:
On 28/10/24 20:02, Wesley wrote:
That VM provider Crunchbits blocks all traffic to external ports of
25, 587, 465, 2525 etc. under this case how the customer can access my
mailserver via SMTP for submissions?
Postfix can listen on
(smtp) should really be used for MX communication only and
not for relaying mail to a submission server.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
arious components can access.
This could all be done on the same host.
I don't know if this makes 127.0.0.1 "the norm" but it is far from an
unusual configuration.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.or
rnative ports on
their service for the very same reason.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
will be larger, but it's not
recommended to set it to 0 (unlimited) as it is a protection against
certain SMTP attack vectors. If you're not sure about this just leave
it at the default unless / until you have a good reason to increase it
= 2048
This is fine, though keep what I said about other servers above in mind.
And in dovecot's 90-quota.conf I have the practical value set for virtual
mailbox size.
Right.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.o
from this thread).
I take it this change would appear in Postfix 3.10.0?
Will this bump the minimum openssl version to 3.x? If so what would be
the exact minimum version? For my EL8 and 9 builds I can work with a
minimum openssl version <= 3.0.7.
Thanks,
Peter
" (without the "s" on the end) is port 587.
Find the "smtps" or "submissions" section in your master.cf file and
uncomment it, then stop and start postfix.
Peter
___
Postfix-users mailing list -- postfix-users@
This is also quite easy using an Apache Redirect directive (or
equivalent for nginx, etc).
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
g/official/2.0/RPMS-rh6x-i386/
...and checking the latest of these, it's still archived and can be
downloaded:
https://web.archive.org/web/20160426072839/http://ftp.wl0.org/official/2.0/RPMS-rh6x-i386/postfix-2.0.20-1.rh6x.i386.rpm
...which appears to be the exact rpm you&#x
s, or at least
not by default. This was a change in the expected norm and the cause of
quite a bit of logs getting dropped and not being noticed until the most
in-opportune time. Before journald writing to syslogd was reliable, you
could do so on any unix system and your log entry would get rec
time out before being woken up again (unless these settings are
changed). Please correct me if I'm wrong here.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
s to do the actual
authentication. Client auth is only supported for cyrus but here
postfix actually does the authentication itself using the cyrus sasl
libs. It is entirely possible (and even quite common) to have a postfix
server which uses dovecot on the backend for serve
s own password or
key. It is true, however, that for ALL mechs some sort of
authentication token must be available in plain text at some point on
the client side.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an
On 22/12/24 19:53, Michael Tokarev via Postfix-users wrote:
22.12.2024 03:39, Peter via Postfix-users wrote:
On 22/12/24 02:54, Michael Tokarev via Postfix-users wrote:
However, there are other mechanisms being developed, for example OAUTH2,
which, in terms of Cyrus SASL, does not work with
use I use after-220 tests so the
whitelists are important to allow legitimate servers to bypass those and
dnswl is not in and of itself sufficient to allow all the major ESPs to
bypass. Adding abusix, mailspike and senderscore has helped immensely
rce 0` and if something
that wasn't working magically starts working then you know it's selinux.
If there's no denial entries in the audit log then it will indeed be
one of those "hidden" log entries and you will need to run a command
like you mentioned to be able to s
On 30/01/25 15:11, Peter via Postfix-users wrote:
On 30/01/25 11:34, Josh Good via Postfix-users wrote:
Hello all.
Due to reasons which are best left untold, I am setting up a Red Hat 6.2
(classic edition) machine.
This system comes with Sendmail 8.9.3, and it mainly works just fine.
However
along with actual steps that
you can take to fix the issue.
This is no worse, imo than any other type of logs, including Postfix
logs which can be difficult for a newcomer to fully understand and which
has collate to help organise the logs to better present them
://developers.redhat.com/blog/2016/03/31/no-cost-rhel-developer-subscription-now-available#
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
:
From my main.cf <http://main.cf>:
Show the output of `postconf -Mf`
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
uld consider using port 465 (submissions) instead of 587 (submission).
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
ASL implementation which means that postfix can be directly
linked (similar to the cyrus SASL libs) and offer this type of SASL
directly. I don't know if it's worth the trouble of implementing, but
it would seem to be at least close to what you're asking for which is
why I mentioned it.
at under
normal circumstances allowing various different programs to directly
write to maillog can be a major security hole. This is not very
difficult to do, just run audit2why against your audit.log file with the
denials in it and it will tell you exactly what you need
On 16/03/25 17:48, Michael Tokarev via Postfix-users wrote:
16.03.2025 07:26, Peter via Postfix-users wrote:
You linked a debian bug, but I could not find a patch in there.
The patch was in the attachment in the same email:
https://marc.info/?l=postfix-users&m=174205748609705&w=2
I
n
Postfix until you are fully aware of its requirements."
...or something like that.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
prefer to see more emphasis on this point.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
mode = 0600
user = postfix
}
}
protocol lmtp {
mail_plugins = quota sieve
postmaster_address = postmas...@example.com
}
Postfix:
virtual_transport = lmtp:unix:private/dovecot-lmtp
(I don't use lmtp for local delivery, but if you do then use a
m
On 16/03/25 17:13, Michael Tokarev via Postfix-users wrote:
16.03.2025 06:18, Peter via Postfix-users wrote:
This is a relatively simple patch, for the sake of simplicity it
replaces the linefeed at read time, but a slightly more complicated
patch that does it when lines are output to dst
) {
+ VSTRING_ADDCH(buf, '\n');
if (lineno)
*lineno += 1;
if ((cp = pcf_find_cf_info(buf, dst)) != 0)
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
On 16/03/25 16:18, Peter via Postfix-users wrote:
This is a relatively simple patch, for the sake of simplicity it
replaces the linefeed at read time, but a slightly more complicated
patch that does it when lines are output to dst might be more
appropriate. Note this is untested:
...and I
On the download page the first GPG key links to
http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.10.0.tar.gz.gpg0
which is a 404.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to
EN_README.html
http://www.postfix.org/postscreen.8.html
Also all of the postscreen-related settings in postconf(5):
http://www.postfix.org/postconf.5.html#postscreen_access_list
After that if you have any questions please feel free to ask them here.
I sugges
answered in IRC and on the GhettoForge Mailing list, yes support for
TLSRPT is in the works, I expect to have it in the release.
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le
On 3/06/25 14:25, Peter via Postfix-users wrote:
On 3/06/25 09:13, Luca vom Bruch via Postfix-users wrote:
I wanted to implement TLSRPT and added the Ghettoforge repo to Alma9
to get the latest 3.10.x release of Postfix, but now I found out that
TLSRPT support is not compiled in the RPM
Will
/index.php/Moving
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
You put a quotation mark (") at the end of the link, making it invalid,
can you please fix that?
Thanks,
Peter Ajamian
On 21/07/25 22:47, Wietse Venema via Postfix-users wrote:
Peter via Postfix-users:
Can you please update the link for GhettoForge on the "Packages and
Ports&qu
Can you please update the link for GhettoForge on the "Packages and
Ports" web page to the following?
http://www.ghettoforge.net/index.php/Postfix3
Thanks,
Peter Ajamian
___
Postfix-users mailing list -- postfix-users@postfix.org
To u
Thanks for fixing it.
Peter
On 22/07/25 23:57, Wietse Venema via Postfix-users wrote:
Peter via Postfix-users:
You put a quotation mark (") at the end of the link, making it invalid,
can you please fix that?
There was a missing quote at the left of the URL.
W
s never printed out when postmap -q is run.
Either don't use use \d or \b or use pcre: (which does support \d and
\b) instead of regex:
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
On 9/03/23 08:11, Peter wrote:
On 8/03/23 15:46, Scott Kitterman via Postfix-users wrote:
For Debian, if someone can find/test patches, I can get them into
Debian's package. I assume other distributors are similar. Feel free
to update the Debian bug with information. It's unfo
Verify return code: 10 (certificate has expired)
...
Issuer: C=US, O=Let's Encrypt, CN=R3
Validity
Not Before: Jan 21 22:10:55 2023 GMT
Not After : Apr 21 22:10:54 2023 GMT
Subject: CN=www.postfix.com
b.host.com, and
web.host.com points to that IP correctly.
But my mailserver doesn't use web.host.com as HELO hostname, instead
it's using mail.host.com which has correct A RR, though that IP address
doesn't resolve back to mail.host.com.
Does this have an adverse effect on sendi
], mail2.example.com
relayhost = [mail1.example.com], [mail2.example.com]
Best regards,
Peter
[0] https://www.postfix.org/postconf.5.html#relayhost
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le
On 2023-12-12 15:51:58 +0100, Wietse Venema via Postfix-users wrote:
Peter Wienemann via Postfix-users:
Dear Postfix experts,
checking the documentation for the relayhost parameter [0] I find no
indication how Postfix behaves in case of multiple relay hosts with
multiple DNS entries. Let us
Hello everyone,
I need an easy way to add a custom header that depends on the domain part
of the envelope rcpt to. If the receiving domain matches the custom header
should be added. I know about header_checks, but that can´t be used because
the receiver is not included in the header to.
__
Dear Wietse,
On 2023-12-15 22:17:08 +0100, Wietse Venema via Postfix-users wrote:
Peter Wienemann via Postfix-users:
Thanks Wietse! Your pseudo-code clarifies the approach chosen by
Postfix. What still remains unclear to me is the order in which
destinations are tried. Let us again consider
Hi Wietse,
On 2023-12-29 18:36:59 +0100, Wietse Venema via Postfix-users wrote:
Peter Wienemann via Postfix-users:
On 2023-12-15 22:17:08 +0100, Wietse Venema via Postfix-users wrote:
There is no such thing as falling back to A or records after
trying MX records. The two are mutually
implemented on the level of individual entries of the relay host list
rather than on the ensemble of relay host entries. Maybe it is worth
clarifying this point in the Postfix documentation.
Best regards,
Peter
___
Postfix-users mailing list -- postfix
few words directly in the Postfix documentation rather
than refer to the RFC, but this would be really tough to achieve.
Best regards,
Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
Dear Wietse,
thanks for your careful review.
On 2024-01-05 16:11:56 +0100, Wietse Venema via Postfix-users wrote:
Peter Wienemann via Postfix-users:
smtp(8):
The Postfix SMTP+LMTP client supports multiple destinations
Dear Viktor, dear Wietse,
thanks again for your vigilant eyes.
On 2024-01-05 19:31:35 +0100, Viktor Dukhovni via Postfix-users wrote:
On Fri, Jan 05, 2024 at 06:46:01PM +0100, Peter Wienemann via Postfix-users
wrote:
RFC 2033 says: "The LMTP protocol is identical to the SMTP protocol
r orig_to recipients in "other.domain".
Thanks in advance for any help on where to start
Peter
Here comes my setup:
# postconf -c /etc/postfix-common/ -nf
alias_maps = hash:/etc/aliases
append_at_myorigin = no
authorized_submit_users = root
bounce_queue_lifetime = 3d
compatibility_lev
801 - 900 of 905 matches
Mail list logo
