[pfx] Re: Recommended postscreen_dnsbl_sites settings to get some security without too many blocked emails?

2025-01-22 Thread Peter via Postfix-users
On 23/01/25 15:34, Christian Seberino via Postfix-users wrote: Is there a "minimal" setting for these two variables that will give *some* protection without blocking friendly sites by accident? I don't know exactly what you mean by "minimal" here

[pfx] dnsbl lookup binding address?

2025-01-23 Thread MRob via Postfix-users
___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Incorrect CN Being Reported When Using Postfix With MariaDB

2025-01-24 Thread duluxoz via Postfix-users
Thanks Victor, As I said, I didn't know if it was a Postfix, TLS Cert, or MariaDB issue. I'll post over in the MariaDB lists. On 24/1/25 18:24, Viktor Dukhovni via Postfix-users wrote: On Fri, Jan 24, 2025 at 03:30:43PM +1100, duluxoz via Postfix-users wrote: I'm using a Mar

[pfx] Incorrect CN Being Reported When Using Postfix With MariaDB

2025-01-23 Thread duluxoz via Postfix-users
ile = /etc/pki/tls/certs/mail_u...@exampl.com.crt tls_key_file = /etc/pki/tls/certs/mail_u...@exampl.com.key tls_CApath = /etc/pki/tls/certs/root_ca.crt query = SELECT TRUE FROM virtual_domains WHERE domain_name='%s' ~~~ Could someone please point me in the right direction to get this sorte

[pfx] Re: dnsbl lookup binding address?

2025-01-23 Thread MRob via Postfix-users
On 2025-01-23 14:26, Tomasz Pala via Postfix-users wrote: On 2025-01-23 12:59, MRob via Postfix-users wrote: Is that correct? If yes, can we make Postscreen dnsbl_sites lookup bind IP for lookups? I already have inet_interfaces and smtp_bind_address set so I guess that's not used for

[pfx] Re: Reduce rbldns use? postscreen_dnsbl_sites

2025-01-24 Thread MRob via Postfix-users
On 2025-01-23 20:25, Randy Bush via Postfix-users wrote: I'm using zen.spamhaus.org for blocking and list.dnswl.org (with filter) for allowlisting. zen.spamhaus.org*2 list.dnswl.org=127.0.[0..255].[1..3]*-2 Question occur to me, is there way to cease dnsrbl lookups once thresho

[pfx] Re: Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
Does that help explain things? And thanks muchly for the help  :-) On 25/1/25 20:30, Viktor Dukhovni via Postfix-users wrote: On Sat, Jan 25, 2025 at 10:06:36AM +0100, Tomasz Pala via Postfix-users wrote: Emails are permitted to be sent between all three domains. I would try: master.cf: smtpd [

[pfx] Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
nd this is the part that I'm having trouble configuring. Could someone please point me in the correct direction to accomplish this - thanks Cheers Dulux-Oz _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email

[pfx] Re: Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
acklist" to be checked somewhere in smtpd_relay_restrictions, but I didn't say anything because I didn't want to "pollute" peoples mindsets if/when they replied... And thanks very much for the help  :-) On 25/1/25 23:43, Viktor Dukhovni via Postfix-users wrote: On Sa

[pfx] Re: maillog_file Setting Breaks SELinux on RHEL

2025-01-28 Thread Peter via Postfix-users
On 29/01/25 12:56, E R via Postfix-users wrote: Yes, I wholeheartedly agree. Even if I disagreed, it would not be one of the rare Postfix bugs. 8-) As I wrote in another post, I do think it might be helpful to mention the downside of not using the default of syslog as I did. While I don&#

[pfx] Re: Searching for old Postfix 2.0.6 RPM-packaged for Red Hat 6.2 (classic)

2025-01-29 Thread Peter via Postfix-users
On 30/01/25 15:11, Peter via Postfix-users wrote: On 30/01/25 11:34, Josh Good via Postfix-users wrote: Hello all. Due to reasons which are best left untold, I am setting up a Red Hat 6.2 (classic edition) machine. This system comes with Sendmail 8.9.3, and it mainly works just fine. However

[pfx] Re: SELinux silently breaking Postfix settings

2025-01-29 Thread Peter via Postfix-users
On 30/01/25 12:00, Wietse Venema via Postfix-users wrote: If you can get them to address the root cause problem: failing syscalls without proper logging why) then people could fix these problem themselves (as the saying goes, "teach a human to fish"). Except for the very rare case of

[pfx] Re: Searching for old Postfix 2.0.6 RPM-packaged for Red Hat 6.2 (classic)

2025-01-29 Thread Peter via Postfix-users
On 30/01/25 11:34, Josh Good via Postfix-users wrote: Hello all. Due to reasons which are best left untold, I am setting up a Red Hat 6.2 (classic edition) machine. This system comes with Sendmail 8.9.3, and it mainly works just fine. However, I was looking for some old Postfix RPM package

[pfx] Re: Restricting Email Relaying For A Given Email Domain

2025-01-25 Thread duluxoz via Postfix-users
Thanks Victor (& everyone else who chimed in). I'm going to sit down with management on Monday and see if I can explain all this to them so as to get a consensus decision on what they'd like to do. Cheers Dulux-Oz On 26/1/25 12:50, Viktor Dukhovni via Postfix-users wrote:

[pfx] Re: Thunderbird says certificate is self signed

2025-01-12 Thread Peter via Postfix-users
verify return:1 depth=0 CN = mail.servicemouse.com verify return:1 250 PIPELINING DONE CONNECTED(0003) --- Certificate chain 0 s:CN = mail.servicemouse.com i:CN = mail.servicemouse.com --- On 13/01/25 11:45, Scott K via Postfix-users wrote

[pfx] Re: Postfix not listening?

2025-01-12 Thread postfix--- via Postfix-users
ot be accessible to the public. _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix with Dovecot which should be listening on port 587?

2025-01-13 Thread Peter via Postfix-users
On 14/01/25 12:31, Scott K via Postfix-users wrote: Yes, Dovecot should be listening on port 587 if using "submission" service Dovecot submission is just a proxy, it still has to pass the submitted message to postfix so there is little reason to use dovecot submission unless you

[pfx] postfix and openarc

2025-01-14 Thread natan via Postfix-users
seful and is relatively easy to implement with Postfix and milters or probbaly others 3party software. I'm asking because I have OpenARC running on one instance and I'm wondering what to do next. -- _______ Postfix-users mailing list -- postfix-us

[pfx] Re: SASL options

2024-12-22 Thread Peter via Postfix-users
On 22/12/24 23:22, Michael Tokarev via Postfix-users wrote: Cyrus SASL is a separate thing in people minds because it is a separate, independent library/subsystem.  You can install a separate package named this way.  But in Dovecot it is an integral part of a larger system, it is not viewed

[pfx] cleanup(8) not prepend Resent- headers but append

2024-12-25 Thread Cowbay via Postfix-users
to say hello. So, "Hello". There is another interesting behavior that if there is no Message-Id header, cleanup(8) won't insert the Message-Id header and append all missing Resent- headers. _______ Postfix-users mailing l

[pfx] Re: cleanup(8) not prepend Resent- headers but append

2024-12-25 Thread Cowbay via Postfix-users
On 2024/12/26 06:04, Wietse Venema via Postfix-users wrote: Cowbay via Postfix-users: Hello, My Postfix is 3.4.23-0+deb10u2. It's old. I got a rare mail with the Resent-Sender header and no other Resent- headers. Since I configured the local_header_rewrite_clients, cleanup(8) inser

[pfx] Re: maillog_file Setting Breaks SELinux on RHEL

2024-12-21 Thread Peter via Postfix-users
On 21/12/24 12:37, E R via Postfix-users wrote: Curious if there are others using the maillog_file setting who have found that "out of the box" RHEL 8+ or 9+ will not allow Postfix to start? I worked around the issue by creating a policy module for testing purposes thanks to th

[pfx] Is that correct behaviour?

2025-01-16 Thread Tobi via Postfix-users
would have expected that postfix handles this like a temp failure of a MX and therefore try the next one. Kind regards tobi ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Is that correct behaviour?

2025-01-16 Thread Tobi via Postfix-users
On Thu, 2025-01-16 at 08:33 -0500, Wietse Venema via Postfix-users wrote: > Tobi via Postfix-users: > > Hi list > > > > we have an issue with mail delivery. We use tlspol to tell postfix > > if > > mta-sts or DANE should be used for a recipient domain. Now we

[pfx] Re: : postconf -e and missing trailing newline in main.cf

2025-03-16 Thread Peter via Postfix-users
On 16/03/25 17:48, Michael Tokarev via Postfix-users wrote: 16.03.2025 07:26, Peter via Postfix-users wrote: You linked a debian bug, but I could not find a patch in there. The patch was in the attachment in the same email: https://marc.info/?l=postfix-users&m=174205748609705&w=2 I

[pfx] Re: Documentation: please update spamhaus / lists of access restrictions usage

2025-03-24 Thread Peter via Postfix-users
On 25/03/25 07:43, Wietse Venema via Postfix-users wrote: Too late! I have already updated the documentation (on www.porcupine.org; mirrrors will pick it up in the next hour or so). I'm guessing that you added this to postscreen_dnsbl_sites and reject_rbl_client rbl_domain: "NO

[pfx] Re: TLSRPT missing negative feedback

2025-03-25 Thread Damian via Postfix-users
hat break before or after a TLS handshake _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Email mit FG Funnel /Mailgun und eigenem Postfix Server

2025-04-05 Thread christian via Postfix-users
___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] spamhaus/abusix in rspamd or postfix

2025-04-05 Thread lutz.niederer--- via Postfix-users
___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: postfix problem with resources

2025-04-05 Thread natan via Postfix-users
Hi In old server i have: max_use=180 in new serwer I have: max_use=150 I don't know if it's that important I have no idea what could be wrong. after restarting postfix everything seems to be back to normal so I don't know W dniu 3.04.2025 o 10:32, natan via Postfix-u

[pfx] Re: postfix problem with resources

2025-04-04 Thread natan via Postfix-users
x  1406128  0.0  0.0  40076  5692 ?    S    11:32   0:00 spawn -n policy-spf -t unix user=nobody argv=/usr/bin/policyd-spf Why process "still exist" after 1.5h - maby this is problem ? W dniu 3.04.2025 o 11:09, natan via Postfix-users pisze: Hi In old server i have: max_use=180

[pfx] Re: postfix problem with resources

2025-03-27 Thread natan via Postfix-users
StartLimitIntervalUSec=10s StartLimitBurst=5 StartLimitAction=none W dniu 27.03.2025 o 12:52, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I upgrade from debian10 to debian11 and init.d to systemd In old debian I dont have any probles but in debian11 in systemd (after 4h) I get

[pfx] Re: Documentation: please update spamhaus / lists of access restrictions usage

2025-03-25 Thread Peter via Postfix-users
On 26/03/25 05:02, Wietse Venema via Postfix-users wrote: "Reputation lists may have additional policies and restrictions that you need to follow when using them, you should not configure a list in Postfix until you are fully aware of its requirements." ...or something like that. Ye

[pfx] Re: postfix problem with resources

2025-03-27 Thread natan via Postfix-users
W dniu 27.03.2025 o 14:44, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I dont have selinux Hi I dot have and use apparmor to Then look for other 'security" addons such as AppArmor. https://wiki.debian.org/AppArmor/HowToUse#Disable_AppArmor

[pfx] Re: Problem Configuring Postfix to Send Messages to Dovecot using lmtp

2025-03-31 Thread Peter via Postfix-users
On 1/04/25 12:23, Herb Weiner via Postfix-users wrote: I am having problems comfiguring Postfix and Dovecot to communicate via lmtp on Ubuntu. The following is an excerpt of my Dovecot configuration: protocols = imap lmtp protocol lmtp {   postmaster_address = postmas

[pfx] Re: : postconf -e and missing trailing newline in main.cf

2025-03-15 Thread Peter via Postfix-users
On 16/03/25 17:13, Michael Tokarev via Postfix-users wrote: 16.03.2025 06:18, Peter via Postfix-users wrote: This is a relatively simple patch, for the sake of simplicity it replaces the linefeed at read time, but a slightly more complicated patch that does it when lines are output to dst

[pfx] Re: [pfx][patch] Re: postconf -e and missing trailing newline in main.cf

2025-03-15 Thread Peter via Postfix-users
On 16/03/25 10:39, Wietse Venema via Postfix-users wrote: That said, it should not be difficult for Postfix code to always strip line breaks on input and to always append line breaks on output. That is fundmentally how all message content is handeld everywhere, regardless off whether the line

[pfx] Re: [pfx][patch] Re: postconf -e and missing trailing newline in main.cf

2025-03-15 Thread Peter via Postfix-users
On 16/03/25 16:18, Peter via Postfix-users wrote: This is a relatively simple patch, for the sake of simplicity it replaces the linefeed at read time, but a slightly more complicated patch that does it when lines are output to dst might be more appropriate.  Note this is untested: ...and I

[pfx] pipe service program failing (signal handler?)

2025-04-11 Thread bergman--- via Postfix-users
2 but I'm hoping someone here has any suggestions about controlling (permitting?) programs called as a pipe service by postfix to set their own signal handlers. Thanks, Mark _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe s

[pfx] Re: per-domain header checks?

2025-04-17 Thread Alex via Postfix-users
r('From', 'Alex ') syslog: mail-lf1-f42.google.com [209.85.167.42]: REJECT: bad address, HELO: mail-lf1-f42.google.com, FROM: , RCPT: , From: Alex , To: , Subject: alex ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] per-domain header checks?

2025-04-15 Thread Alex via Postfix-users
reading, it appears that the above is not the right approach. What other methods exist to do this? https://serverfault.com/questions/1052369/postfix-header-check-regex-with-if-conditional-not-matching-change-sender-addr Thanks, Alex ___ Postfix-users

[pfx] Re: haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
Hi Problem solved but thenx W dniu 17.04.2025 o 15:40, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I known that but I terminated tls via haproxy Then this is better discussed on an HaProxy forum. Wietse ___ Postfix

[pfx] Headers Changing

2025-04-17 Thread anant--- via Postfix-users
l and destroy all copies of the original message. Website: https://www.ursc.gov.in -- ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an ema

[pfx] Re: haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
W dniu 17.04.2025 o 14:11, natan via Postfix-users pisze: Hi For test I use setup like haproxy + postfix - works fine via 587 / 587+tls and I have problem with 465 frontend ft_submission   bind 0.0.0.0:587   mode tcp   timeout client 1m   log global   default_backend bk_submission

[pfx] Re: haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
check maxconn 2000 weight 2 W dniu 17.04.2025 o 14:40, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi For test I use setup like haproxy + postfix - works fine via 587 / 587+tls and I have problem with 465 The port 465 service MUST have "-o smtpd_tls_wrappermode=ye

[pfx] haproxy behind smtp

2025-04-17 Thread natan via Postfix-users
-- ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] warning: table lmdb key malformed value

2025-05-06 Thread lejeczek via Postfix-users
many thanks, L._______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: warning: table lmdb key malformed value

2025-05-06 Thread lejeczek via Postfix-users
thanks, Even had it my notes, I skipped two releases of OS and some changes to binaries made me anxious a bit, unnecessarily. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: per-domain header checks?

2025-04-18 Thread Alex via Postfix-users
regex.conf: >> reject >> header /From/ /^user@baddom\.tld$/i and envrcpt /@example\.com$/i >> > It looks like this is the place to start? https://github.com/milter-regex/milter-regex/tree/main Can I ask usage questions about this plugin here? Thanks, Alex __

[pfx] BDAT and the line length limit

2025-02-17 Thread Damian via Postfix-users
inary-capable" from "not BINARYMIME-capable". Also note that although RFC1652 (8BITMIME) explicitly mentions the 1000 octet limit itself, it also mentions dot-stuffing, which Postfix (rightfully) ignores when using BDAT. ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: BDAT and the line length limit

2025-02-17 Thread Damian via Postfix-users
to be announced by a specifically named EHLO keyword defined by a specifically numbered RFC. In my opinion, BDAT itself could already be meant to signal support for binary payload, as the name most probably stands for Binary DATa. ___ Postfix-users ma

[pfx] Re: BDAT and the line length limit

2025-02-17 Thread Damian via Postfix-users
ot by RFC2045. Or would you say that it is impossible to design an SMTP-unrelated binary-capable protocol that can transport RFC2045-compliant Binary Data?___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to po

[pfx] Missing first GPG key for 3.10.0

2025-02-18 Thread Peter via Postfix-users
On the download page the first GPG key links to http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.10.0.tar.gz.gpg0 which is a 404. Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to

[pfx] Re: BDAT and the line length limit

2025-02-17 Thread Damian via Postfix-users
compliance from the presence or absence of SMTP features. _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: I have found out the reason why Postfix keeps getting killed by OOM Killer

2025-03-03 Thread Mark via Postfix-users
Disable clamav completely, restart your server and try it like that, for a few days. ClamAV is a RAM killer! On Mon, Mar 3, 2025 at 5:34 PM Turritopsis Dohrnii Teo En Ming via Postfix-users wrote: > > Dear Varadi Gabor, > > I have just asked ChatGPT Artificial Intelligence (AI) fo

[pfx] double dkim signature (sendmail)

2025-03-07 Thread roughnecks via Postfix-users
_____ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: double dkim signature (sendmail)

2025-03-07 Thread roughnecks via Postfix-users
Il 07/03/2025 22:13, Wietse Venema via Postfix-users ha scritto: By far the easiest is to stop using content_filter and to use an rspamd milter or the like do the signing. Thanks, but I don't want to "overturn" everything; yes I'm running spamassassin. ATM I just fo

[pfx] Re: dmarc, dkim & spf failed but that message was delivered anyway

2025-03-07 Thread Peter via Postfix-users
t starting a new thread for that, though. Peter ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Mail routing with virtual_alias_domains and transport_maps

2025-03-13 Thread rog7993--- via Postfix-users
riant 2 did not work. The generic rewrite does not take place. So the verbatim.invalid address is used for the final delivery. Regards, Ingo Am 13.03.25 um 15:17 schrieb Viktor Dukhovni via Postfix-users: On Thu, Mar 13, 2025 at 02:55:00PM +0100, rog7993--- via Postfix-users wrote: In simple

[pfx] Mail routing with virtual_alias_domains and transport_maps

2025-03-13 Thread rog7993--- via Postfix-users
d in the existing configuration with virtual_alias_maps? Ingo ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] postfix greylist

2025-02-14 Thread natan via Postfix-users
the wheel? -- _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Help In Interpreting Postfix Log Entry - Please

2025-02-24 Thread duluxoz via Postfix-users
r it was a (health) `check` statement on the offending port in the haproxy config. Removing that statement and the error messages disappeared. Problem solved (or at least side-stepped) Thank you again for all your help Cheers Dulux-Oz On 25/2/25 06:36, Wietse Venema via Postfix-users wrote: Vikto

[pfx] Re: Help In Interpreting Postfix Log Entry - Please

2025-02-24 Thread duluxoz via Postfix-users
On 25/2/25 16:12, Viktor Dukhovni via Postfix-users wrote: Well, it leaves us in a not entirely satisfactory situation, because it is still unclear what the haproxy health check sent to Postfix, and whether it should, or should not, have been accepted. Nor it is clear what inet_protocols your

[pfx] Help In Interpreting Postfix Log Entry - Please

2025-02-23 Thread duluxoz via Postfix-users
e to ask if required  :-) Thanks in advance Dulux-Oz _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: postfix problem with resources

2025-04-03 Thread natan via Postfix-users
in/chronyd (1374)    /usr/sbin/chronyd (1389) 0 processes are unconfined but have a profile defined. And Realy I dont have any problem whats going on I must mention that my traffic is about 40 requests per second W dniu 27.03.2025 o 20:32, Wietse Venema via Postfix-users pisze: natan via Postfix

[pfx] Help with SASL Authentication Using /etc/sasldb2 in Postfix

2025-04-03 Thread wouldsmina via Postfix-users
persistently available? To configure sasl, I used (among other things) this documentation: https://www.postfix.org/SASL_README.html Thanks in advance for your help! OS : DEBIAN 12 Postfix version : 3.7.11 Best regards, Wouldsmina ___ Postfix-users mailing

[pfx] Re: Help with SASL Authentication Using /etc/sasldb2 in Postfix

2025-04-03 Thread wouldsmina via Postfix-users
. Some Debian-based Postfix distributions ignore the "cyrus_sasl_config_path" parameter setting, and force Postfix to open the file /etc/postfix/sasl/smtpd.conf. Thank you for your help. Le jeu. 3 avr. 2025 à 19:11, Wietse Venema via Postfix-users < postfix-users@postfix

[pfx] TLSRPT missing negative feedback

2025-03-25 Thread Damian via Postfix-users
A tcpdump between smtp and smtpd shows a TCP handshake but no payload at all. On the tlsrpt socket, I would expect negative feedback signaling "starttls-no-supported" and "dnssec-invalid" or "dane-required". ___________ Postfix-users m

[pfx] postfix problem with resources

2025-03-27 Thread natan via Postfix-users
= 6 I dont have any idea -- ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: postfix problem with resources

2025-03-27 Thread natan via Postfix-users
Hi I dont have selinux W dniu 27.03.2025 o 12:52, Wietse Venema via Postfix-users pisze: natan via Postfix-users: Hi I upgrade from debian10 to debian11 and init.d to systemd In old debian I dont have any probles but in debian11 in systemd (after 4h) I get many ar 27 10:17:01 node2 postfix

[pfx] Re: postfix problem with resources

2025-04-03 Thread natan via Postfix-users
u 3.04.2025 o 12:56, natan via Postfix-users pisze: Hi maby this is problem: root@node2:~# date czw, 3 kwi 2025, 12:52:33 CEST root@node2:~# ps -aux |egrep '(lemat3|spf)'|head -n2 postfix  1406118  0.0  0.0  40076  5668 ?    S    11:32   0:00 spawn -n policyd-lemat3 -t unix user=nob

[pfx] Re: Rate limit for authenticated users ?

2025-05-16 Thread vom513 via Postfix-users
> On May 15, 2025, at 9:53 AM, vom513 wrote: > > > >> On May 14, 2025, at 11:24 AM, Matus UHLAR - fantomas via Postfix-users >> wrote: >> >> On 14.05.25 10:37, vom513 via Postfix-users wrote: >>> I see docs on how to rate limit for certain netwo

[pfx] Rate limit for authenticated users ?

2025-05-14 Thread vom513 via Postfix-users
Hello all, I see docs on how to rate limit for certain networks / IPs - but can custom rate limiting be applied to authenticated users ? Thanks. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users

[pfx] quieting postscreen logging of dnsbl-rejected connections?

2025-05-17 Thread pgnd via Postfix-users
e certainly not taxed. and, i know i can filter log output with grep or rsyslog. can pf's logging config itself, for these connections, be directly quieted -- or at least better aggregated? if so, how? if not, ndb -- just an inconvenience. _______ Postfi

[pfx] Re: quieting postscreen logging of dnsbl-rejected connections?

2025-05-17 Thread pgnd via Postfix-users
possible. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Rate limit for authenticated users ?

2025-05-15 Thread vom513 via Postfix-users
> On May 14, 2025, at 11:24 AM, Matus UHLAR - fantomas via Postfix-users > wrote: > > On 14.05.25 10:37, vom513 via Postfix-users wrote: >> I see docs on how to rate limit for certain networks / IPs - but can custom >> rate limiting be applied to authenticated users

[pfx] Re: TLSRPT support

2025-06-02 Thread Peter via Postfix-users
On 3/06/25 09:13, Luca vom Bruch via Postfix-users wrote: I wanted to implement TLSRPT and added the Ghettoforge repo to Alma9 to get the latest 3.10.x release of Postfix, but now I found out that TLSRPT support is not compiled in the RPM Will it ever find its way into a regular .rpm? As

[pfx] Re: TLSRPT support

2025-06-14 Thread Peter via Postfix-users
On 3/06/25 14:25, Peter via Postfix-users wrote: On 3/06/25 09:13, Luca vom Bruch via Postfix-users wrote: I wanted to implement TLSRPT and added the Ghettoforge repo to Alma9 to get the latest 3.10.x release of Postfix, but now I found out that TLSRPT support is not compiled in the RPM Will

[pfx] more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
fix_postdrop_t,cluster_t,fifo_file,write ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
   -   n   -   -   lmtp anvil  unix  -   -   n   -   1   anvil scache unix  -   -   n   -   1   scache postlog    unix-dgram n  -   n   -   1   postlogd _______ Postfix-users mailing list

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
id_maps = static:2000 ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
-c /etc/postfix_relay/ | egrep -i fifo (no results) But as far as postifx's binaries go - there is only one install/package on each box. ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: more SELinux denials - fifo_file

2025-06-17 Thread lejeczek via Postfix-users
r {   unix_listener login/director {     #mode = 0666   }   fifo_listener login/proxy-notify {     #mode = 0666   }   unix_listener director-userdb {     #mode = 0600   }   inet_listener {     #port =   } } ... My postfix also uses amavisd &  pyspf-milter. many thanks, L._______

[pfx] Re: more SELinux denials - fifo_file

2025-06-18 Thread lejeczek via Postfix-users
vent" mail delivery? b) what to "fix" on "external" mail tools' end in order to adhere to system's default mail delivery? I think "a" is preferable. many thanks, L.___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: TLSRPT: master.cf overrides are being ignored and warning logs when relaying TLS report emails generated by sys4 tlsrpt-reporter

2025-06-19 Thread A.Schulze via Postfix-users
Am 19.06.25 um 11:24 schrieb Michael Webb via Postfix-users: In my master.cf I have defined a dedicated listener (port 10032) to receive TLS reports from the tlsrpt-reporter package so they can be relayed without generating another TLS report (to avoid a report loop). I tried to use these

[pfx] smtpd_sasl_auth_enable=no and smtpd_sender_restrictions=reject_sender_login_mismatch

2025-06-22 Thread Matthew via Postfix-users
the From: header has no protection from forged headers, but this is not what I am querying. Is this a known issue or have I uncovered an interesting MAIL FROM spoofing edge case? Kind Regards, Matthew P.s. "Reporting problems to postfix-users@postfix.org" on

[pfx] Re: smtpd_sasl_auth_enable=no and smtpd_sender_restrictions=reject_sender_login_mismatch

2025-06-22 Thread Matthew via Postfix-users
s, Matthew On 22/06/2025 12:57, Matus UHLAR - fantomas via Postfix-users wrote: On 22.06.25 12:44, Matthew via Postfix-users wrote: I'm a new user and during my testing I noticed some potentially unintended behaviour with "reject_sender_login_mismatch" when SASL is disabled on

[pfx] Re: smtpd_sasl_auth_enable=no and smtpd_sender_restrictions=reject_sender_login_mismatch

2025-06-22 Thread Matthew via Postfix-users
n and as my server is purely a personal server used solely by me you would think I would notice if someone pretends to be me to me :). Kind Regards, Matthew On 22/06/2025 13:50, Viktor Dukhovni via Postfix-users wrote: On Sun, Jun 22, 2025 at 01:39:09PM +0100, Matthew via Postfix-users wrote: Than

[P-U] Postfix lists have migrated to a new list manager

2023-03-07 Thread Wietse Venema via Postfix-users
e new From: header address is postfix-mum...@postfix.org for mumble in [announce, devel, users]. The original sender address is added as a Reply-To address. - There is a new DKIM signature from the domain postfix.org. Wietse _______ Postfix-users ma

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Gerald Galster via Postfix-users
ail-archive.com, ... ? Best regards, Gerald _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Wietse Venema via Postfix-users
Gerald Galster via Postfix-users: > > >> Out of sheer curiosity ... Mailman 2 or 3? > > > > Mailman 3 with ARC support enabled. Additionally all listmail will be DKIM > > signed. > > Do you plan to enable a public archive at > https://list.sys4.de/hyper

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Gerald Galster via Postfix-users
//lists.mailman3.org/archives/list/mailman-us...@mailman3.org/thread/YWGG2KTDLRYL3DM4YCDYVD73TOXXLJSX/ There may be leftovers that hyperkitty finds. Best regards Gerald ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Wietse Venema via Postfix-users
Gerald Galster via Postfix-users: > The tab "Archiving" under "List Settings" offers "Archive policy": > "Public archives", "Private archives", "Do not archive this list". These settings are mutually exclusive, i.e. the setting &qu

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Benny Pedersen via Postfix-users
Patrick Ben Koetter via Postfix-users skrev den 2023-03-07 17:16: I'll let Jörg at sys4 take a look at this. +1 X-Spam-Status: No, score=-1.8 required=5.0 tests=ARC_INVALID,ARC_SIGNED,AWL, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_MISSING, KAM_

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Harald Koch via Postfix-users
On Tue, Mar 7, 2023, at 12:02, Benny Pedersen via Postfix-users wrote: > > why is arc invalid ? My email provider is adding a little more detail: Authentication-Results: pb-mx20.pobox.com; arc=invalid (as.1.list.sys4.de=invalid (public key: does not support hash algorithm &

[P-U] Poster Name not visible in Thunderbird

2023-03-07 Thread Matthew McGehrin via Postfix-users
Hello. Sadly, when viewing this list in Thunderbird, it only displays "Postfix Users" as the From address, versus showing the posters name. I tend to ignore posters I don't recognize, and now i need to open each post to see who replied. Any workarounds in Thunderbird t

[P-U] Re: Poster Name not visible in Thunderbird

2023-03-07 Thread Benny Pedersen via Postfix-users
Matthew McGehrin via Postfix-users skrev den 2023-03-07 18:31: Any workarounds in Thunderbird to override this behavior? imho if you show Reply-To in this list you will see original poster ? i have not tryed it self yet, using roundcube mostly

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Benny Pedersen via Postfix-users
toganm--- via Postfix-users skrev den 2023-03-07 18:32: Abusix Mail Intelligence; https://lookup.abusix.com/search?q=188.68.34.52 https://multirbl.valli.org/lookup/188.68.34.52.html not even on dnswl.org :/ ___ Postfix-users mailing list -- postfix

[P-U] Re: Poster Name not visible in Thunderbird

2023-03-07 Thread Noel Jones via Postfix-users
On 3/7/2023 11:31 AM, Matthew McGehrin via Postfix-users wrote: Hello. Sadly, when viewing this list in Thunderbird, it only displays "Postfix Users" as the From address, versus showing the posters name. I tend to ignore posters I don't recognize, and now i need to open each

[P-U] Re: Poster Name not visible in Thunderbird

2023-03-07 Thread Erwan David via Postfix-users
Le 07/03/2023 à 18:42, Benny Pedersen via Postfix-users a écrit : Matthew McGehrin via Postfix-users skrev den 2023-03-07 18:31: Any workarounds in Thunderbird to override this behavior? imho if you show Reply-To in this list you will see original poster ? i have not tryed it self yet

<    6   7   8   9   10   11   12   13   14   15   >