[pfx] Re: uceprotect.wtf (was: Send email to one @domain.com via authenticated relay?)

2023-03-23 Thread natan via Postfix-users
Hi Today uceprotect add class /24 to blaclist ... One user (dedicated server) send probably spam but the user claims that he did not send spam only 6 e-mails in 1h. And uceprotect was blocked by the whole class ... other RBLs it was clean any IP with that class /24 Any idea ? I'm not going to

[pfx] Re: Blocked Sender

2023-03-27 Thread natan via Postfix-users
Hi Mayby this help you: /etc/postfix/sender_checks.pcre /@scripkabox\.com/ /etc/postfix/recipient_checks.pcre smtpd_sender_restrictions =     permit_mynetworks     check_sender_access pcre:/etc/postfix/sender_checks.pcre     reject_unknown_sender_domain     ... cat /etc/postfix/sender_checks.pc

[pfx] Re: destination based rate limiting

2023-03-27 Thread natan via Postfix-users
Hi Try postfwd for postfix http://postfwd.org/ratelimits.html W dniu 27.03.2023 o 13:21, Gino Ferguson via Postfix-users pisze: Hi, How can one set up outbound rate limiting for a certain mail service provider? Can postfix 'recognise' that recipientdomainA, recipientdomainB and recipientdom

[pfx] Re: Blocked Sender

2023-03-27 Thread natan via Postfix-users
/regexp but hash I use too W dniu 27.03.2023 o 14:16, Matus UHLAR - fantomas via Postfix-users pisze: On 27.03.23 12:39, natan via Postfix-users wrote: /etc/postfix/sender_checks.pcre /@scripkabox\.com/   /etc/postfix/recipient_checks.pcre smtpd_sender_restrictions

[pfx] *_error_limit and exclude

2023-04-19 Thread natan via Postfix-users
Hi I have question about *_error_limit and postfix I have separated services like smtp incomming and smtp outgoing and webmail I have roudcube which is used by several thousand users On smtp outgoing in main.cf: ... smtpd_client_connection_count_limit = 900 smtpd_hard_error_limit = 5 smtpd_soft

[pfx] Re: *_error_limit and exclude

2023-04-20 Thread natan via Postfix-users
W dniu 19.04.2023 o 17:23, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I have question about *_error_limit and postfix I have separated services like smtp incomming and smtp outgoing and webmail I have roudcube which is used by several thousand users On smtp outgoing

[pfx] smtpcheck

2023-04-20 Thread natan via Postfix-users
Hi I use keepalived and easy check like: vrrp_script chk_myscript {     script "/usr/bin/postfix-check.sh"     interval    4     fall    2     weight  10     user root } ... #!/bin/bash echo "ehlo localhost" | /bin/nc -w 1 "127.0.0.1" 25 |grep -q "250" ... It's not very pretty but d

[pfx] Re: postconf -M foo/unix='foo unix ...' get segfault if multiple entries exist in master.cf

2023-04-27 Thread natan via Postfix-users
Hi In centos7 root@node2-klone:~# postconf mail_version mail_version = 3.4.23 root@node2-klone:~# postconf -M bar/unix='foo unix - n n - - pipe argv=/bin/false' root@node2-klone:~# postconf -M bar/unix='foo unix - n n - - pipe argv=/bin/false' root@node2-klone:~# postconf -M bar/unix='foo unix

[pfx] Re: postconf -M foo/unix='foo unix ...' get segfault if multiple entries exist in master.cf

2023-04-27 Thread natan via Postfix-users
Hi In old version 3.4.x problem not exists W dniu 27.04.2023 o 14:50, Wietse Venema via Postfix-users pisze: SATOH Fumiyasu (TSUCHIDA Fumiyasu) via Postfix-users: I see the following problems. 1. `postconf -M bar/unix='foo unix ...'` will duplicates entries in master.cf. Nice find: postconf s

[pfx] postfix and ssl provlem

2023-05-08 Thread natan via Postfix-users
Hi I have some problem with cert - user who connect via 465 postfix/smtps/smtpd[6901]: warning: TLS library problem: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../ssl/record/rec_layer_s3.c:1544:SSL alert number 48: Debian10 Cert is new (renew) and  openssl x509 -in ..

[pfx] Re: postfix and ssl provlem

2023-05-08 Thread natan via Postfix-users
Hi Problem is only via web aplications (php) W dniu 8.05.2023 o 13:29, natan via Postfix-users pisze: Hi I have some problem with cert - user who connect via 465 postfix/smtps/smtpd[6901]: warning: TLS library problem: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../ssl

[pfx] Re: postfix and ssl provlem

2023-05-08 Thread natan via Postfix-users
Hi Exactly as you're saying - problem solved - CA cant load via aplications. W dniu 8.05.2023 o 15:31, Viktor Dukhovni via Postfix-users pisze: On Mon, May 08, 2023 at 01:29:55PM +0200, natan via Postfix-users wrote: I have some problem with cert - user who connect via 465 postfix/

[pfx] can't read SMFIC_OPTNEG

2023-10-17 Thread natan via Postfix-users
Hi I have a some problem with setup opendkim+opendmarc+amavisd-milter main.cf--- smtpd_milters = inet:localhost:10028,inet:localhost:10027,inet:localhost:10029 When I try local telnet 25 i get many many logs like: .. Oct 17 13:59:01 mail2 postfix/10028/smtpd[6]: connect from

[pfx] Re: can't read SMFIC_OPTNEG

2023-10-17 Thread natan via Postfix-users
Hi Thenx problem solved - problem was trivial (existing process with port 10028) W dniu 17.10.2023 o 17:37, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I have a some problem with setup opendkim+opendmarc+amavisd-milter main.cf--- smtpd_milters = inet:localhost

[pfx] postfix and smuggling spoofing

2023-12-21 Thread natan via Postfix-users
Hi I found today https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ -- ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: postfix and smuggling spoofing

2023-12-21 Thread natan via Postfix-users
Hi Thenx for info Wietse reject_unauth_pipelining in: smtpd_data_restrictions or maybe only in smtpd_end_of_data_restrictions ? W dniu 21.12.2023 o 19:11, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I found today https://sec-consult.com/blog/detail/smtp-smuggling

[pfx] Re: postfix and smuggling spoofing

2023-12-21 Thread natan via Postfix-users
Hi Why I asking beacuse I use . smtpd_end_of_data_restrictions =     check_policy_service  { inet:127.0.0.1:10040 timeout=4s, default_action=DUNNO }     permit_mynetworks,     lpolicyd smtpd_data_restrictions = reject_unauth_pipelining . W dniu 21.12.2023 o 19:41, Wietse

[pfx] Re: SMTP Smuggling, workarounds and fix // Clarification on BDAT

2023-12-29 Thread natan via Postfix-users
Hi In postfix-3.4.23 (debian) I set (I use always) smtpd_data_restrictions = reject_unauth_pipelining And today I put smtpd_discard_ehlo_keywords = chunking And I get many many logs like: ... Dec 29 10:10:13 msmtp postfix/submission/smtpd[11064]: discarding EHLO keywords: CHUNKING Dec 29 10:1

[pfx] Re: [pfx-ann] SMTP Smuggling, workarounds and fix

2023-12-29 Thread natan via Postfix-users
Hi A good idea in my opinion,  additionally add reject_sender_login_mismatch with maps (u...@domain.ltd user@domainltd) smtpd_sender_restrictions =     ...     reject_sender_login_mismatch,     ...     reject_unauth_pipelining, Than only reject_unauth_pipelining smtpd_data_restrictions = reje

[pfx] Re: implementing recipient rate limits

2024-01-02 Thread natan via Postfix-users
Hi I was in the same place some time ago and I use postwfd + others for 600K users and analize via sawmill (probably 6.x) And conclusion for me ... First rate is for 1 minut id=sasl_msg_1min ;  sasl_username=~$$sender ; action=rate(sasl_username/40/60/421 4.7.1: $$sasl_username: Sorry, send to

[pfx] Re: SMTP Smuggling with long-term fix

2024-01-08 Thread natan via Postfix-users
Hi Sorry for stupid question but I dont realy undarstand I create test VPS (outside my infrastructure) and install all for python3 for testing root@hanz:~# python3 smtp_smuggling_scanner.py --sender-domain gmail.com piot...@mydomain.ltd [*] Getting MX record for domain: xx [*] Running SMTP

[pfx] Re: SMTP Smuggling with long-term fix

2024-01-08 Thread natan via Postfix-users
W dniu 8.01.2024 o 13:35, Damian via Postfix-users pisze: I create test VPS (outside my infrastructure) and install all for python3 for testing root@hanz:~# python3 smtp_smuggling_scanner.py --sender-domain gmail.com piot...@mydomain.ltd Don't use a sender-domain you don't have control over. T

[pfx] Re: SMTP Smuggling with long-term fix

2024-01-08 Thread natan via Postfix-users
Hi Yest this is e-mails body from test - only when sender domain have SPF set ~all or SPF not exist W dniu 8.01.2024 o 15:08, Damian via Postfix-users pisze: SMUGGLING WORKS with '\r\n\x00.\r\n' as "fake" end-of-data sequence! SMUGGLING WORKS with '\r.\r\n' as "fake" end-of-data sequence! SMUG

[pfx] Not a very important problem - smtpd_sender_login_maps

2024-01-11 Thread natan via Postfix-users
Hi I know it may seem quite strange, but I need it for my MX ... I need a mapping every single email to the same one in pcre for sender_login_maps.cf for reject_sender_login_mismatch ... smtpd_sender_login_maps = pcre:/etc/postfix/sender_login_maps.cf ... Yes, I can use an existing map - I hav

[pfx] postfix repo

2024-01-11 Thread natan via Postfix-users
Hi Wietse Have you thought about postfix repo for Debian, just like dovecot has for his relase ? I'm asking by the way -- ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] I don't understand the problem with DMARC and postfix

2024-02-09 Thread natan via Postfix-users
Hi I have setup postfix+SPF+DKIM+DMARK and im confused Sometimes I get in logs fail like: Feb  2 09:02:31 mail134 opendmarc[29379]: 5AB633B005D: gmail.com none Feb  2 09:02:39 mail134 opendmarc[29379]: D02333B005D: patronite.email pass Feb  2 09:02:44 mail134 opendmarc[29379]: 363153B005D: indek

[pfx] Re: I don't understand the problem with DMARC and postfix

2024-02-09 Thread natan via Postfix-users
W dniu 9.02.2024 o 15:13, Juri Haberland via Postfix-users pisze: On 09.02.24 14:58, natan via Postfix-users wrote: Hi I have setup postfix+SPF+DKIM+DMARK and im confused Sometimes I get in logs fail like: Feb  2 09:02:46 mail134 opendmarc[29379]: AE3D53B0062: allegromail.pl fail Feb  2 09:02

[pfx] postfix and smtpd_proxy_timeout

2024-02-27 Thread natan via Postfix-users
Hi I have questions about "high ability" in postfix For example setup 1)postfix + external mysql (klaster) like main.cf: ... smtpd_sender_login_maps = proxy:mysql:/etc/postfix/mysql_sender_login_maps.cf smtpd_proxy_timeout=60s ... For example I have a mysql maps - mysql_sender_login_maps.cf:

[pfx] Re: postfix and smtpd_proxy_timeout

2024-02-28 Thread natan via Postfix-users
lived move IP) All new connections work ok, but the old ones get an error connecting to the database. W dniu 27.02.2024 o 17:44, Wietse Venema via Postfix-users pisze: natan via Postfix-users: If i set smtpd_proxy_timeout=60s I "terminating" (timeout) all old connections who get &

[pfx] Re: postfix and smtpd_proxy_timeout

2024-02-28 Thread natan via Postfix-users
W dniu 28.02.2024 o 16:14, Wietse Venema via Postfix-users pisze: natan via Postfix-users: for"us...@domain.ltd" Feb 27 16:02:28 smtp1v postfix/cleanup[23476]: warning: proxy:mysql:/etc/postfix/mysql_sender_bcc_maps_user.cf-new lookup error for"us...@domain.ltd" Feb 27 16:

[pfx] postfix and from

2024-03-19 Thread natan via Postfix-users
Hi I have one question regarding the RFC of the FROM field: in the message header. Is there any restriction that will force the FROM field to be correct according to the RFC? I'm asking because one client "parses e-mails strangely" and his application hangs and instead of correcting it, he se

[pfx] Re: postfix and from

2024-03-19 Thread natan via Postfix-users
better to improve the application than to play around with postfix because you can cause a big problem I don't want to kick with the horse... W dniu 19.03.2024 o 11:43, Erwan David via Postfix-users pisze: Le 19/03/2024 à 11:39, natan via Postfix-users a écrit : Hi I have one question regard

[pfx] header_checks.pcre

2024-04-10 Thread natan via Postfix-users
Hi I try block all bc.googleusercontent.com but some adress allow Is this make sense ? cat /etc/postfix/header_checks.pcre #allow /^Received:.from.mg.gitlab.com.*bc.googleusercontent.com/ DUNNO #reject /^Received:.from.*bc.googleusercontent.com/ REJECT spam/scam/419 detected I blocked b

[pfx] spf and Permerror

2024-06-27 Thread natan via Postfix-users
Hi I have a strange problem with SPF and I honestly don't know what to pay attention to What is a Permerror in SPF In log i get: Jun 27 15:09:11 MX policyd-spf[57158]: prepend Received-SPF: Permerror (mailfrom) identity=mailfrom; client-ip=84.205.190.72; helo=h2.3hosting.pl; envelope-from=gp

[pfx] Re: spf and Permerror

2024-06-27 Thread natan via Postfix-users
W dniu 27.06.2024 o 15:39, Scott Kitterman via Postfix-users pisze: On June 27, 2024 1:30:37 PM UTC, natan via Postfix-users wrote: Hi I have a strange problem with SPF and I honestly don't know what to pay attention to What is a Permerror in SPF In log i get: Jun 27 15:09:11 MX po

[pfx] Re: spf and Permerror

2024-06-27 Thread natan via Postfix-users
W dniu 27.06.2024 o 15:48, natan via Postfix-users pisze: W dniu 27.06.2024 o 15:39, Scott Kitterman via Postfix-users pisze: On June 27, 2024 1:30:37 PM UTC, natan via Postfix-users wrote: Hi I have a strange problem with SPF and I honestly don't know what to pay attention to What

[pfx] spf

2024-07-08 Thread natan via Postfix-users
Hi What value do you use in postfix-policyd-spf in PermError_reject ? HELO_reject = Fail Mail_From_reject = Fail #update 20240706 #PermError_reject = False PermError_reject = True TempError_Defer = False I don't know if that's maybe too restrictive PermError_reject But on the other hand, the se

[pfx] Re: spf

2024-07-08 Thread natan via Postfix-users
Hi What you propose use ? Maybe instead of not accepting such mail will better is change score in SA ? W dniu 8.07.2024 o 11:36, natan via Postfix-users pisze: Hi What value do you use in postfix-policyd-spf in PermError_reject ? HELO_reject = Fail Mail_From_reject = Fail #update 20240706

[pfx] Re: spf and Permerror

2024-07-08 Thread natan via Postfix-users
: _spf.cyberfolks.pl: include:_spf.cyberfolks.pl. Please see http://www.openspf.net/Why?s=mfrom;id=x...@wrap-zone.pl;ip=193.17.184.42;r=; from= to= proto=ESMTP helo= W dniu 27.06.2024 o 16:21, Carlos Velasco via Postfix-users pisze: natan via Postfix-users escribió el 27/06/2024 a las 15:48: W dniu

[pfx] Re: spf

2024-07-19 Thread natan via Postfix-users
W dniu 15.07.2024 o 12:06, Matus UHLAR - fantomas via Postfix-users pisze: On 08.07.24 11:42, natan via Postfix-users wrote: What you propose use ? Maybe instead of not accepting such mail will better is change score in SA ? This is a policy issue. You can choose your policy to be

[pfx] gmail and vacations problem

2024-08-23 Thread natan via Postfix-users
Hi I have that scenario My client have e-mail @domain.ltd and have correct SPF DKIM and DMARC (politic reject) When my klient set "vacations" in sieve filter all works fine but have problem with gmail (I guess because of redirects) The information flow looks like this: ---incomming-email>

[pfx] postfix + subject tag [exernal} and [Internal] works but ...

2024-09-10 Thread natan via Postfix-users
Hi Is avilable to run thats setup use postfix+milter ? For test I run thats setup: 1)enable addheaders on dovecot 2)create special rules in sieve like: if allof (header :contains "return-path" "@domain.ltd",   header :contains "Received" "domai",   header :contains "X-HEADERS" "do

[pfx] Re: postfix + subject tag [exernal} and [Internal] works but ...

2024-09-11 Thread natan via Postfix-users
Hi Thenx for replay Bill I have seperate setup like 1)one serve for outgoing 2)one server for incomming + dovecot cluster W dniu 10.09.2024 o 18:07, Bill Cole via Postfix-users pisze: On 2024-09-10 at 08:05:21 UTC-0400 (Tue, 10 Sep 2024 14:05:21 +0200) natan via Postfix-users is rumored to

[pfx] Re: postfix + subject tag [exernal} and [Internal] works but ...

2024-09-11 Thread natan via Postfix-users
W dniu 11.09.2024 o 11:34, Matus UHLAR - fantomas via Postfix-users pisze: On 11.09.24 09:11, natan via Postfix-users wrote: Bill I have seperate setup like 1)one serve for outgoing 2)one server for incomming + dovecot cluster I personally still don't knbow how your system works. W

[pfx] Re: postfix + subject tag [exernal} and [Internal] works but ...

2024-09-11 Thread natan via Postfix-users
W dniu 11.09.2024 o 15:14, Matus UHLAR - fantomas via Postfix-users pisze: On 11.09.24 09:11, natan via Postfix-users wrote:    The problem is with DKIM signing when I try to reply to a message    and the external recipient has DMARC verification    If I have a p=none policy in DMARC it

[pfx] Re: postfix + subject tag [exernal} and [Internal] works but ...

2024-09-11 Thread natan via Postfix-users
Hi I would be happy to privately send sample emails with someone between domains that have a DMARC reject policy. W dniu 11.09.2024 o 15:49, natan via Postfix-users pisze: W dniu 11.09.2024 o 15:14, Matus UHLAR - fantomas via Postfix-users pisze: On 11.09.24 09:11, natan via Postfix-users

[pfx] greylisting for some domain

2024-11-13 Thread natan via Postfix-users
Hi I have working setup without greylisting I try run greylisting (via mtpolicyd) but only in some domain I thinking something concept like: main.cf: ... smtpd_recipient_restrictions =         check_recipient_access hash:/etc/postfix/special_domains,     master.cf: ... mtp

[pfx] Re: greylisting for some domain

2024-11-13 Thread natan via Postfix-users
24 o 13:36, Viktor Dukhovni via Postfix-users pisze: On Wed, Nov 13, 2024 at 12:46:10PM +0100, natan via Postfix-users wrote: main.cf: ... smtpd_recipient_restrictions =         check_recipient_access hash:/etc/postfix/special_domains,     Add: smtpd_restricti

[pfx] Re: greylisting for some domain

2024-11-13 Thread natan via Postfix-users
Hi Thanx for reply problem solved :) This is exactly what I've come to W dniu 13.11.2024 o 15:11, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi Thenx for replay but im doing something wrong smtpd_restriction_classes=lpolicyd, greylist lpolicyd=check_policy_se

[pfx] Re: postfix and problem with scripts connect

2024-11-29 Thread natan via Postfix-users
Hi The logs show that Postfix does not pass the from key because the From header comes from the message body, and Postfix by default only supports sender information from the Envelope From (sender). Right? I'm trying to write something "like DMARC" in Python to reject if the From and return-p

[pfx] postfix and problem with scripts connect

2024-11-28 Thread natan via Postfix-users
Hi I have some problem with comunications postfix + python in main.cf: ... smtpd_restriction_classes=testowy testowy=check_policy_service { unix:private/testowy, timeout=4s, default_action=DUNNO } smtpd_recipient_restrictions =     check_recipient_access inline:{{testdomain.ltd=testowy}},

[pfx] Re: postfix and problem with scripts connect

2024-11-28 Thread natan via Postfix-users
  sys.stdout.write("action=DUNNO\n\n")     sys.stdout.flush() if __name__ == "__main__":     main() ... W dniu 28.11.2024 o 13:57, natan via Postfix-users pisze: Hi I have some problem with comunications postfix + python in main.cf: ... smtpd_restriction_classes=testowy tes

[pfx] Re: postfix and problem with scripts connect

2024-11-28 Thread natan via Postfix-users
Hi I'm trying to write something like DMARC in Python to reject if the from and return-path for the selected domain are different Because these similar solutions like vrfydmn (in Perl) are not very user-friendly W dniu 28.11.2024 o 13:57, natan via Postfix-users pisze: Hi I have

[pfx] from and return-path

2024-11-20 Thread natan via Postfix-users
Hi I have a specific problem - yes, I can solve it with opendmarc and opendkim, and score in spamassassin but that's out of the question - I only need to domain in "return-patch" and "From" for one specific domain and if it's different, then reject. I thought about doing something at the milte

[pfx] Re: from and return-path

2024-11-20 Thread natan via Postfix-users
W dniu 20.11.2024 o 12:53, Matus UHLAR - fantomas via Postfix-users pisze: On 20.11.24 11:48, natan via Postfix-users wrote: I have a specific problem - yes, I can solve it with opendmarc and opendkim, and score in spamassassin but that's out of the question - I only need to domain in &q

[pfx] Re: from and return-path

2024-11-20 Thread natan via Postfix-users
W dniu 20.11.2024 o 12:06, Ralph Seichter via Postfix-users pisze: * natan via Postfix-users: If @domain.ltd in return-path and from: is dfferend then Reject "non allowed" That kind of rejection can be realised easily using milter-regex [1]. Simply combine "envfrom" and

[pfx] Re: [ext] milter-regex.sock problem

2024-12-05 Thread natan via Postfix-users
W dniu 5.12.2024 o 13:17, Matus UHLAR - fantomas via Postfix-users pisze: On 05.12.24 12:32, natan via Postfix-users wrote: Maybe change from: cleanup    unix  n   -   y   -   0   cleanup to: cleanup    fifo  n   -   y   -   0   cleanup But I don't

[pfx] Re: milter-regex.sock problem

2024-12-05 Thread natan via Postfix-users
Hi In process list I sow always milter mailregx 42670 16.6  0.0 920172  6000 ?    Ssl  11:19   2:54 /usr/bin/milter-regex -c /etc/postfix/milter-regex.conf -u mailregx -G postfix -p /var/run/milter/milter-regex.sock W dniu 5.12.2024 o 11:34, natan via Postfix-users pisze: Hi Today i run

[pfx] milter-regex.sock problem

2024-12-05 Thread natan via Postfix-users
Hi Today i run setup postfix+milter-regex.sock Some times in log I get: tail -f /var/log/mail.log |grep milter Dec  5 11:23:03 mx-node2 postfix/cleanup[45922]: warning: connect to Milter service unix:/var/run/milter/milter-regex.sock: No such file or directory Dec  5 11:23:25 mx-node2 postfix/

[pfx] postfix-3.9 and utf8mb4

2024-12-11 Thread natan via Postfix-users
Hi I upgrade from postfix-3.7.x to postfix-3.9.x (Almalinux and repo GT-plus) and i get problem Dec 11 23:58:31 smtp2 postfix/postmap[24258]: warning: dict_mysql: mysql_set_character_set 'utf8mb4' failed: Unknown character set: 'utf8mb4' Dec 11 23:58:31 smtp2 postfix/postmap[24258]: fatal: tab

[pfx] Re: postfix-3.9 and utf8mb4

2024-12-13 Thread natan via Postfix-users
W dniu 12.12.2024 o 15:00, Viktor Dukhovni via Postfix-users pisze: On Thu, Dec 12, 2024 at 02:40:29AM +0100, natan via Postfix-users wrote: I upgrade from postfix-3.7.x to postfix-3.9.x (Almalinux and repo GT-plus) and i get problem Dec 11 23:58:31 smtp2 postfix/postmap[24258]: warning

[pfx] Re: [ext] milter-regex.sock problem

2024-12-05 Thread natan via Postfix-users
Hi In the case you are talking about it would be every time and this happens sporadically W dniu 5.12.2024 o 11:50, Ralf Hildebrandt via Postfix-users pisze: * natan via Postfix-users : Hi Today i run setup postfix+milter-regex.sock Some times in log I get: tail -f /var/log/mail.log |grep

[pfx] Re: [ext] milter-regex.sock problem

2024-12-05 Thread natan via Postfix-users
t via Postfix-users pisze: * natan via Postfix-users : Hi Today i run setup postfix+milter-regex.sock Some times in log I get: tail -f /var/log/mail.log |grep milter Dec  5 11:23:03 mx-node2 postfix/cleanup[45922]: warning: connect to Milter service unix:/var/run/milter/milter-regex.sock: No such fi

[pfx] Re: [ext] milter-regex.sock problem

2024-12-05 Thread natan via Postfix-users
W dniu 5.12.2024 o 13:41, Matus UHLAR - fantomas via Postfix-users pisze: On 05.12.24 12:32, natan via Postfix-users wrote: Maybe change from: cleanup    unix  n   -   y   -   0 cleanup to: cleanup    fifo  n   -   y   -   0 cleanup But I don't know if it

[pfx] postfix and openarc

2025-01-14 Thread natan via Postfix-users
Hi What is currently happening with the OpenArc project? On GitHub, I see the last modifications were made 7 years ago. Has the project completely failed? I'm asking because I see that Gmail/G-Suite are using it, and, after all, they are trendsetters. The OpenARC project seems quite useful and

[pfx] Re: postfix problem with resources

2025-04-05 Thread natan via Postfix-users
Hi In old server i have: max_use=180 in new serwer I have: max_use=150 I don't know if it's that important I have no idea what could be wrong. after restarting postfix everything seems to be back to normal so I don't know W dniu 3.04.2025 o 10:32, natan via Postfix-u

[pfx] Re: postfix problem with resources

2025-04-04 Thread natan via Postfix-users
x  1406128  0.0  0.0  40076  5692 ?    S    11:32   0:00 spawn -n policy-spf -t unix user=nobody argv=/usr/bin/policyd-spf Why process "still exist" after 1.5h - maby this is problem ? W dniu 3.04.2025 o 11:09, natan via Postfix-users pisze: Hi In old server i have: max_use=180

[pfx] Re: postfix problem with resources

2025-03-27 Thread natan via Postfix-users
StartLimitIntervalUSec=10s StartLimitBurst=5 StartLimitAction=none W dniu 27.03.2025 o 12:52, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I upgrade from debian10 to debian11 and init.d to systemd In old debian I dont have any probles but in debian11 in systemd (after 4h) I get

[pfx] Re: postfix problem with resources

2025-03-27 Thread natan via Postfix-users
W dniu 27.03.2025 o 14:44, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I dont have selinux Hi I dot have and use apparmor to Then look for other 'security" addons such as AppArmor. https://wiki.debian.org/AppArmor/HowToUse#Disable_AppArmor

[pfx] Re: haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
Hi Problem solved but thenx W dniu 17.04.2025 o 15:40, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I known that but I terminated tls via haproxy Then this is better discussed on an HaProxy forum. Wietse ___ Postfix

[pfx] Re: haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
W dniu 17.04.2025 o 14:11, natan via Postfix-users pisze: Hi For test I use setup like haproxy + postfix - works fine via 587 / 587+tls and I have problem with 465 frontend ft_submission   bind 0.0.0.0:587   mode tcp   timeout client 1m   log global   default_backend bk_submission

[pfx] Re: haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
check maxconn 2000 weight 2 W dniu 17.04.2025 o 14:40, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi For test I use setup like haproxy + postfix - works fine via 587 / 587+tls and I have problem with 465 The port 465 service MUST have "-o smtpd_tls_wrappermode=ye

[pfx] haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
Hi For test I use setup like haproxy + postfix - works fine via 587 / 587+tls and I have problem with 465 frontend ft_submission   bind 0.0.0.0:587   mode tcp   timeout client 1m   log global   default_backend bk_submission backend bk_submission   mode tcp     timeout server 1m   

[pfx] postfix greylist

2025-02-14 Thread natan via Postfix-users
Hi For test i run setup with postgrey like: ... smtpd_restriction_classes=greylist greylist=check_policy_service { inet:127.0.0.1:12345, timeout=4s, default_action=DUNNO } smtpd_recipient_restrictions = check_recipient_access inline:{{foo.bar.ltd=greylist}}, ... It works ok - but for one/two

[pfx] Re: postfix problem with resources

2025-04-03 Thread natan via Postfix-users
in/chronyd (1374)    /usr/sbin/chronyd (1389) 0 processes are unconfined but have a profile defined. And Realy I dont have any problem whats going on I must mention that my traffic is about 40 requests per second W dniu 27.03.2025 o 20:32, Wietse Venema via Postfix-users pisze: natan via Postfix

[pfx] postfix problem with resources

2025-03-27 Thread natan via Postfix-users
Hi I upgrade from debian10 to debian11 and init.d to systemd In old debian I dont have any probles but in debian11 in systemd (after 4h) I get many ar 27 10:17:01 node2 postfix/smtpd[4005054]: warning: connect to private/policy-spf: Resource temporarily unavailable Mar 27 10:17:01 node2 post

[pfx] Re: postfix problem with resources

2025-03-27 Thread natan via Postfix-users
Hi I dont have selinux W dniu 27.03.2025 o 12:52, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I upgrade from debian10 to debian11 and init.d to systemd In old debian I dont have any probles but in debian11 in systemd (after 4h) I get many ar 27 10:17:01 node2 postfix

[pfx] Re: postfix problem with resources

2025-04-03 Thread natan via Postfix-users
ody argv=/usr/local /bin/policyd-lemat3 postfix  1406128  0.0  0.0  40076  5692 ?    S    11:32   0:00 spawn -n policy-spf -t unix user=nobody argv=/usr/bin/policyd-spf Why process "still exist" after 1.5h - maby this is problem ? W dniu 3.04.2025 o 11:09, natan via Postfix-user