[pfx] Re: private/dovecot-lmtp]: Connection refused)

2024-05-11 Thread Cowbay via Postfix-users
On 2024/5/11 22:51, Jason Hirsh via Postfix-users wrote: My nonrandom action for tho morning OK I bandaided my going back to an older main.cf but updating the ssl/tls infoThat brought mail back on line Sort of Dovecot still not happy with me but this error seems more warning and best

[pfx] Re: pushing changes to remote system

2024-05-14 Thread Alex via Postfix-users
Hi guys, On Thu, Mar 7, 2024 at 6:01 PM Steffen Nurpmeso via Postfix-users < postfix-users@postfix.org> wrote: > Dan Mahoney via Postfix-users wrote in > <56abb6d4-e690-4f94-aadb-2f646a6d1...@prime.gushi.org>: > |> On Mar 6, 2024, at 16:52, Wietse Venema via Postfix-u

[pfx] Re: Mails ending up in spam when sending to gmail address

2024-05-15 Thread Peter via Postfix-users
On 16/05/24 11:54, David Mehler via Postfix-users wrote: Hello, I'm not sure if this is a Postfix or an Rspamd problem or a Gmail problem, the first two I can do something about the third one not so sure. I'm running a personal E-mail server running on a VPS via a2hosting.

[pfx] Re: Mails ending up in spam when sending to gmail address

2024-05-16 Thread Peter via Postfix-users
On 16/05/24 23:40, Jaroslaw Rafa via Postfix-users wrote: Dnia 16.05.2024 o godz. 12:05:52 Peter via Postfix-users pisze: On my side the email is accepted from here, and relayed, Rspamd does sign it, and Postfix's last message in the log is a message sent delivered, and removed from my que

[pfx] inet_interfaces and loopback

2024-05-16 Thread Alex via Postfix-users
e state DOWN group default qlen 1000 link/ether 22:67:80:40:61:5d brd ff:ff:ff:ff:ff:ff _______________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Dovecot logging to files causes postfix to break

2024-05-18 Thread Northwind via Postfix-users
Hello When postfix delivery messages to local dovecot, how does the authentication between postfix and dovecot happen? Thanks. You mean, Postfix for SMTP, Dovecot for IMAP. ___ Postfix-users mailing list -- postfix-users@postfix.org To

[pfx] Re: Selection of a custom smtp-transport based on recipient addresse's MX with check_recipient_mx_access doesn't work

2024-05-19 Thread Northwind via Postfix-users
1 4.7.500 Server busy. Please try again later..." _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Disable Non Delivery Notifications only for some adresses

2024-05-21 Thread Northwind via Postfix-users
___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Strengthen email system security

2024-05-22 Thread Northwind via Postfix-users
sword cracking, or DDoS? 2. How to strengthen email system security to stop this? Thanks in advance. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Strengthen email system security

2024-05-22 Thread Northwind via Postfix-users
solver from your ISP. _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Strengthen email system security

2024-05-22 Thread Peter via Postfix-users
On 23/05/24 10:33, Northwind via Postfix-users wrote: Hello list, In the last two days, my mail system (small size) met attacks. mail.log shows a lot of this stuff: May 23 06:24:29 mx postfix/smtpd[2655149]: warning: unknown[194.169.175.17]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May

[pfx] Re: Strengthen email system security

2024-05-22 Thread Peter via Postfix-users
On 23/05/24 10:55, Wietse Venema via Postfix-users wrote: 2. How to strengthen email system security to stop this? Don't accept mail from home networks. For example, use "reject_dbl_client zen.spamhaus.org". For this you must use your own DNS resolver, not the DNSresolve

[pfx] Re: Strengthen email system security

2024-05-22 Thread Northwind via Postfix-users
submission connections to those countries.  Note be careful not to block port 25 connections with this and realize that if you or your users ever intend to do any travelling this could be problematic. ___ Postfix-users mailing list -- postfix-users

[pfx] Re: Strengthen email system security

2024-05-23 Thread Northwind via Postfix-users
how to implement that a policy server? thanks. In addition I can add one idea: ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Strengthen email system security

2024-05-23 Thread Peter via Postfix-users
On 23/05/24 16:51, Viktor Dukhovni via Postfix-users wrote: Dovecot has its own mechanism list, while Postfix has a mechanism list filter. You should be able to set: smtp_sasl_mechanism_filter = plain He's trying to prevent login on smtpd, so the setting shou

[pfx] Re: Strengthen email system security

2024-05-23 Thread Peter via Postfix-users
On 23/05/24 19:02, Jaroslaw Rafa via Postfix-users wrote: In addition I can add one idea: I have had quite a success with a policy server that rejects all connections on submission ports IF it doesn't find a currently established IMAP session from the same IP address. All "normal&quo

[pfx] Re: Strengthen email system security

2024-05-23 Thread Northwind via Postfix-users
That's great info from all you people. many thanks! > > On 23/05/24 19:02, Jaroslaw Rafa via Postfix-users wrote: > > > > > In addition I can add one idea: > > > > I have had quite a success with a policy server that rejects all > > connections

[pfx] Re: Strengthen email system security

2024-05-23 Thread Peter via Postfix-users
On 24/05/24 02:12, Matus UHLAR - fantomas via Postfix-users wrote: Zen includes the "PBL" component, which consists largely of residential and mobile consumer IPs. Yes, but these are (usually) not considered valid clients, these should use submission/submissions(smtps) p

[pfx] disable authentication on port 25

2024-05-23 Thread Northwind via Postfix-users
. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Strengthen email system security

2024-05-23 Thread Peter via Postfix-users
On 24/05/24 01:42, Bill Cole via Postfix-users wrote: Likely brute force. Not exactly. "Brute force" password cracking is almost never seen today, as it has been replaced by a practice commonly called "credential stuffing" where the attacker has some large collection of

[pfx] Re: disable authentication on port 25

2024-05-23 Thread Northwind via Postfix-users
pport. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: disable authentication on port 25

2024-05-23 Thread Peter via Postfix-users
On 24/05/24 13:08, Northwind via Postfix-users wrote: do you mean since I have been using postscreen, there is no need to manually disable authentication on port 25? since postscreen doesn't have auth support. No you definately should disable auth on port 25 regardless. It is possibl

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Northwind via Postfix-users
told to put "smtpd_sasl_auth_enable=no"  in main.cf, blocking the function everywhere, and then put "-o smtpd_sasl_auth_enable=yes" in the submission stanza(s) in master.cf, expressly enabling it *just* there. _______ Postfix-users mai

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Northwind via Postfix-users
smtpd_sasl_auth_enable=yes and restarted postfix. now I think it should be working. regards. comment this out in main.cf, it already default no ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le

[pfx] how does smtpd know the connection is a submission request, or a MX request?

2024-05-24 Thread Northwind via Postfix-users
my guess, submission clients were using ehlo, and a mx client uses helo command. so postfix differ them based on this command? regards. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Northwind via Postfix-users
___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Northwind via Postfix-users
Thank you so much. This is really important. > > Le 24/05/2024 à 14:17, Northwind via Postfix-users a écrit : > > > > > so, in main.cf: > > > > smtpd_sasl_auth_enable=no > > > > then in master.cf: > > > > submission inet n  

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Northwind via Postfix-users
___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Strengthen email system security

2024-05-24 Thread Peter via Postfix-users
On 24/05/24 21:32, Matus UHLAR - fantomas via Postfix-users wrote: On 24.05.24 12:00, Peter via Postfix-users wrote: And the OP is referring to SASL AUTH attacks which are for submission, not MX connections. But some of those log lines mention postfix/smtpd, which means they happen on port

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Peter via Postfix-users
On 25/05/24 00:17, Northwind via Postfix-users wrote: so, in main.cf: smtpd_sasl_auth_enable=no Yes, although the setting is redundant here since it defaults to no anyways it's fine to explicitly state it if you want. then in master.cf: submission inet n   -   

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Peter via Postfix-users
On 25/05/24 00:29, Benny Pedersen via Postfix-users wrote: Northwind via Postfix-users skrev den 2024-05-24 14:17: so, in main.cf: smtpd_sasl_auth_enable=no comment this out in main.cf, it already default no It's fine to have it, it's simply redundan

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Peter via Postfix-users
On 25/05/24 00:43, Benny Pedersen via Postfix-users wrote: Northwind via Postfix-users skrev den 2024-05-24 14:37: and restarted postfix. now I think it should be working. telnet localhost 25 ehlo localhost if you see AUTH in ehlo results it not done yet no AUTH results take another beer

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Peter via Postfix-users
On 25/05/24 01:12, Benny Pedersen via Postfix-users wrote: Stephan Seitz via Postfix-users skrev den 2024-05-24 15:01: Carefull, if you have „smtpd_tls_auth_only = yes” (I think), then you’ll see AUTH after STARTTLS… port 25 must not be tls only Since authentication should never be done on

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Peter via Postfix-users
On 25/05/24 09:50, Northwind via Postfix-users wrote: just to clarify, submissions is not required to set for enabling sasl_auth on port 465/587. i have tested it, no need to set a separated submissions. Incorrect. submission is *only* port 587, submissions is port 465. my postfix

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Peter via Postfix-users
On 25/05/24 01:37, Matus UHLAR - fantomas via Postfix-users wrote: He mentioned that on postfix with "smtpd_tls_auth_only=yes" (the default) authentication is only available when TLS is active The default is no, but it is very common to have it set to ye

[pfx] Re: disable authentication on port 25

2024-05-24 Thread Northwind via Postfix-users
ed it). ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] How to allow only one specific sender to use smtp ?

2024-05-25 Thread Mike via Postfix-users
___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: How to allow only one specific sender to use smtp ?

2024-05-25 Thread Northwind via Postfix-users
iptables? I have Postfix setup and use dovecot as SASL. Now, all email accounts can use the smtp server to send emails. I want to allow only one email account to send out emails and rest of others can only use POP3 or IMAP. ___ Postfix-users

[pfx] Re: How to allow only one specific sender to use smtp ?

2024-05-25 Thread Peter via Postfix-users
On 26/05/24 09:58, Mike via Postfix-users wrote: Hello, My setup like below: I have Postfix setup and use dovecot as SASL. Now, all email accounts can use the smtp server to send emails. I want to allow only one email account to send out emails and rest of others can only use POP3 or IMAP

[pfx] Re: How to allow only one specific sender to use smtp ?

2024-05-25 Thread Northwind via Postfix-users
... Instead of 'submissions', some configurations use 'smtps' for the same thing. _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] SASL login username in log

2024-05-28 Thread Northwind via Postfix-users
happened on. Thanks. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SASL login username in log

2024-05-28 Thread Northwind via Postfix-users
Wietse Venema via Postfix-users: Fixed with Postfix 3.8.3, 3.7.8, 3.6.12, 3.5.22: that's all right. thank you Wietse. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Question about the DMARC setting for lists

2024-05-29 Thread Northwind via Postfix-users
be rejected by most MTAs (following the DMARC setting). So how to handle the case? Thanks. Northwind ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Frustrated and sad - Authentication required

2024-05-30 Thread Mailman29 via Postfix-users
#transport_maps = hash:/etc/postfix/transport.map Sorry for the text dump, but I'm so frustrated here. Any ideas are appreciated.___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Frustrated and sad - Authentication required

2024-05-30 Thread Mailman29 via Postfix-users
proxy server), but if Postfix would deliver the bounce message it would get passed through the proxy to the mail server backend. Is there a way to force this? On Thursday, May 30th, 2024 at 1:46 PM, Wietse Venema via Postfix-users wrote: > Mailman29: > > > Brilliant! I had a loop

[pfx] Re: Frustrated and sad - Authentication required

2024-05-30 Thread Mailman29 via Postfix-users
30th, 2024 at 2:34 PM, Wietse Venema via Postfix-users wrote: > Mailman29 via Postfix-users: > > > Well the logs say this, which doesn't help. > > May 30 14:01:02 mail2 postfix/smtp[1390778]: C5DCBA0501: > > to=prvs=1880817b8e=myem...@somedomain.com, relay=none, delay

[pfx] Re: Frustrated and sad - Authentication required

2024-05-30 Thread Mailman29 via Postfix-users
Thursday, May 30th, 2024 at 3:39 PM, Wietse Venema via Postfix-users wrote: > Mailman29 via Postfix-users: > > > myhostname is set to "mail2" in main.cf, but the mx record points > > to mail.somedomain.com, (they share the same IP though) would it > > be doi

[pfx] Re: Frustrated and sad - Authentication required

2024-05-30 Thread Mailman29 via Postfix-users
Have a good pub visit. Changing the "myhostname" line in postfix has zero effect. It still says "loops back to myself" :( On Thursday, May 30th, 2024 at 4:07 PM, Wietse Venema via Postfix-users wrote: > Mailman29 via Postfix-users: > > > The network

[pfx] Re: Frustrated and sad - Authentication required

2024-05-30 Thread Mailman29 via Postfix-users
tse Venema via Postfix-users wrote: > Mailman29 via Postfix-users: > > > Have a good pub visit. > > Changing the "myhostname" line in postfix has zero effect. It still says > > "loops back to myself" :( > > > Having a prob

[pfx] Re: HAproxy 4.3 thinks one of my postfixes (3.9) is down on SMTP, but it sees another (3.8.6) as up on SMTP (SMTPD/postscreen are OK on both sides)

2024-05-31 Thread patpro--- via Postfix-users
Hello, Any sign of postfix 3.9 blacklisting HAproxy because of SMTP errors/abuse/half-baked connections? May 31, 2024 1:06 PM, "Gerben Wierda via Postfix-users" wrote: Hmm, I just noticed (all outgoing smtp was going to a backup server that works) that one of my postfix instances c

[pfx] Re: Frustrated and sad - Authentication required

2024-05-31 Thread Mailman29 via Postfix-users
email. On Friday, May 31st, 2024 at 2:45 AM, Viktor Dukhovni via Postfix-users wrote: > On Fri, May 31, 2024 at 12:33:34AM +, Mailman29 via Postfix-users wrote: > > > Yeah, so even changing the domain name on the server (Ubuntu) itself > > doesn't fix the issue. It

[pfx] Re: Frustrated and sad - Authentication required

2024-05-31 Thread Mailman29 via Postfix-users
I thought that may be right, but if I comment out the "inet_interfaces" it fails to take mail from the main server for outbound delivery. Sent with Proton Mail secure email. On Friday, May 31st, 2024 at 1:32 PM, Wietse Venema via Postfix-users wrote: > Mailman29 via

[pfx] managesieve filter not working

2024-06-04 Thread Celal.Dikici via Postfix-users
;mailto']; $config['managesieve_raw_editor'] = true; $config['managesieve_disabled_actions'] = []; $config['managesieve_allowed_hosts'] = null; ls /home/c_dikici/sieve/ dovecot.svbin managesieve.sieve managesieve.svbin tmp USER.sieve cat /home/c_dikici/sieve/managesieve.sieve require ["fileinto","variables"]; set "EDITOR" "Roundcube (Managesieve)"; set "EDITOR_VERSION" "9.4"; # rule:[test] if header :contains "subject" "test" { fileinto "spam-mail"; } ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: FYI: SORBS Closing announcement from the mailop list.

2024-06-05 Thread Peter via Postfix-users
On 5/06/24 16:20, Viktor Dukhovni via Postfix-users wrote: Original text: Is there a link to the announcement online? Peter ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: FYI: SORBS Closing announcement from the mailop list.

2024-06-05 Thread Peter via Postfix-users
On 5/06/24 19:23, Peter via Postfix-users wrote: On 5/06/24 16:20, Viktor Dukhovni via Postfix-users wrote: Original text: Is there a link to the announcement online? I see it's from the mailop list which, unfortunately has the archives set private so it doesn't help me to be ab

[pfx] Re: FYI: SORBS Closing announcement from the mailop list.

2024-06-05 Thread Gilgongo via Postfix-users
n't coming up with any other information about it. Are you able to get back to Michelle to ask her? Thanks. On Wed, 5 Jun 2024 at 08:48, Peter via Postfix-users < postfix-users@postfix.org> wrote: > On 5/06/24 19:23, Peter via Postfix-users wrote: > > On 5/06/24 16:20, Vik

[pfx] ehlo=2

2024-06-05 Thread postfix--- via Postfix-users
-ENHANCEDSTATUSCODES 250-8BITMIME 250-SMTPUTF8 250 CHUNKING Is anything missing? Any idea why the ehlo=2 is on most deliveries? ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] localhost.com in the logs

2024-06-06 Thread GDS via Postfix-users
localhost.com...Also, I have /etc/hosts with "127.0.0.1 localhost" and main.cf with:"myhostname = mydomain.com" and "mydestination = localhost, localhost.localdomain" I am stumped...Anywhere else I should be looking? Thank you, Greg _______

[pfx] Re: localhost.com in the logs

2024-06-06 Thread postfix--- via Postfix-users
that would alter anything postfix tried sending to root of localhost. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: localhost.com in the logs

2024-06-06 Thread GDS via Postfix-users
PM EDT, postfix--- via Postfix-users wrote: >> I have no idea where this r...@localhost.com is coming from. It must be a >> misconfiguration but I cannot find it. > Since root@localhost is rewritten in r...@localhost.com, I would also check > in aliases/virtual_aliases,

[pfx] Re: localhost.com in the logs

2024-06-06 Thread postfix--- via Postfix-users
_maps relay_domains masquerade_domains ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SMTP command trace

2024-06-06 Thread postfix--- via Postfix-users
I tried with debug_peer_list and debug_peer_level, but it looked like not all commands are included Did you increase the level higher than 2? debug_peer_level = 5 should show all SMTP commands issued. ___ Postfix-users mailing list -- postfix-users

[pfx] Re: Help to debug smtp_sasl_password_maps usage via hash or mysql

2024-06-06 Thread postfix--- via Postfix-users
specify the "[" and "]" in the relayhost destination, then you must use the same form in the smtp_sasl_password_maps file. Are you using the same [ ] formatting in both places? _______ Postfix-users mailing list -- postfix-users@postfix.org To

[pfx] Re: SMTP command trace

2024-06-06 Thread postfix--- via Postfix-users
he levels. _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Looking for a neat way to determine the time a mail sits in active queue

2024-06-07 Thread Tobi via Postfix-users
ueue" for each message in active? Kind regards and have a good one tobi _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Sanity check/suggestions appreciated

2024-06-10 Thread Gilgongo via Postfix-users
le of questions in as comments in the configs - any thoughts/suggestions very much appreciated! :-) Jonathan _______________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Sanity check/suggestions appreciated

2024-06-10 Thread Gilgongo via Postfix-users
On Mon, 10 Jun 2024, 12:37 pm Jeff Peng via Postfix-users, < postfix-users@postfix.org> wrote: > why not postscreen for this purpose? > Thanks - I thought about postscreen, but wasn't sure if it would be overkill for such a small server? Could

[pfx] Re: Sanity check/suggestions appreciated

2024-06-10 Thread Gilgongo via Postfix-users
On Mon, 10 Jun 2024 at 12:58, Matus UHLAR - fantomas via Postfix-users < postfix-users@postfix.org> wrote: > > 3. > smtpd_recipient_restrictions = permit_mx_backup > > avoid this whenever possible. Or at least define permit_mx_backup_networks > > Thanks - I forgot to as

[pfx] Re: Sanity check/suggestions appreciated

2024-06-11 Thread Gilgongo via Postfix-users
On Tue, 11 Jun 2024 at 05:17, Noel Jones via Postfix-users < postfix-users@postfix.org> wrote: > You should remove permit_mx_backup. > > This feature is intended for ISP-scale users that may not have a > complete list of domains that use their server as a backup

[pfx] Re: Sanity check/suggestions appreciated

2024-06-11 Thread Gilgongo via Postfix-users
On Tue, 11 Jun 2024 at 10:36, Matus UHLAR - fantomas via Postfix-users < postfix-users@postfix.org> wrote: > > >BTW in the meantime, if I add this (where mx2.mydomain.com is our > secondary > >MX hostname), I take it that would be a good idea: > > > >permit_

[pfx] Re: Sanity check/suggestions appreciated

2024-06-11 Thread Gilgongo via Postfix-users
On Tue, 11 Jun 2024 at 11:52, Matus UHLAR - fantomas via Postfix-users < postfix-users@postfix.org> wrote: > On 11.06.24 11:02, Gilgongo via Postfix-users wrote: > >OK so I assume I can use the IP address of the primary and secondary MX > >servers, since all our domains ar

[pfx] Re: Sanity check/suggestions appreciated

2024-06-11 Thread Gilgongo via Postfix-users
On Tue, 11 Jun 2024 at 16:14, Noel Jones via Postfix-users < postfix-users@postfix.org> wrote: > If you need permit_mx_backup, that means postfix doesn't have a > clear idea of domains it is responsible for. > > Please read and study: > http://www.postfix.org/BASIC

[pfx] Re: secure the email system

2024-06-13 Thread Dimitris via Postfix-users
Στις 13/6/24 03:51, ο/η Jeff Peng via Postfix-users έγραψε: 3. use policyd-rate-limit to limit sending rate. 5. use policyd-spf to check sender IP's SPF and reject the failed one. 6. use opendmarc to check sender domain's DMARC and reject the failed one. 7. opendkim is also deployed

[pfx] End of Data from client or postfix

2024-06-14 Thread a49093915 via Postfix-users
characters, which seems to indicate to me, that postfix sends its own. I would be happy to receive information regarding this. Best Regards, Alto___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le

[pfx] Re: End of Data from client or postfix

2024-06-14 Thread a49093915 via Postfix-users
er on the basis that the "end of DATA part must be terminated with a .". Now I am unsure whether this is caused by postfix or the PHP-Mailer sending to the receiving MTA server via postfix. ___________ Postfix-users mailing list -- postfix-users@postfix.o

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 13:54, Paul Schmehl via Postfix-users wrote: I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com PIPELINING SIZE 9 VRFY ETRN STARTTLS ENHANCEDSTATUSCODES 8BITMIME DSN SMTPUTF8 CHUNKING (Code

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users wrote: It's likely that roundcube is not configured for TLS and postfix is (as it should be) configured not to offer AUTH until TLS is established. Yes, postfix is configur

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: Gmail rejects it, but I’ve altered my spf record to include localhost. I hope once that propagates my problems with be solved. This will not do anythi9ng for you, you cannot put localhost in an SPF record. There are many reasons why

[pfx] Re: End of Data from client or postfix

2024-06-17 Thread a49093915 via Postfix-users
and add its own "." "End of DATA" for outgoing SMTP. (Additionally it also strips and adds parts of the DATA itself.) Is there a ways to verify this on the postfix server? Or would it be required to setup another SMTP server and somehow watch the incoming mails on that one? Alto ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Do I have sals authentication properly configured?

2024-06-17 Thread Daryl via Postfix-users
Does your roundcube config.inc.php have the smtp_host as 'tls://mail.stovebolt.com:587'; ? It will need the FQDN and not localhost hence failing authentication??? I know somethig similar happened to me a while back Daryl On 24-06-16 16:00:35, Paul Schmehl via Postfix-users wrote

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
On 17/06/24 17:16, Peter via Postfix-users wrote: Without seeing logs and actual config settings I can only guess.  One thing to keep in mind is that there's two types of TLS connection, implicit TLS and explicit TLS.  Implicit TLS connects to a port dedicated to TLS connections

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
ch Peter _______ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
On 18/06/24 13:00, Jeff Peng via Postfix-users wrote: On 2024-06-18 07:30, Peter via Postfix-users wrote: On 17/06/2024 17:28, Paul Schmehl wrote: How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server. What config

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread postfix--- via Postfix-users
etting that disables the ability of users to create or edit identities in the web interface keeping them stuck using only the From: address their roundcube account was created with. $config['identities_level'] = 3; _______ Postfix-users

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
On 18/06/24 14:43, Paul Schmehl via Postfix-users wrote: If I used $config['smtp_host'] = ‘tls;//www.stovebolt.com'; or I used $config['smtp_host'] = ’ssl;//www.stovebolt.com'; roundcube would error out saying it couldn’t connect to the server. It's &

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Cowbay via Postfix-users
On 2024/6/18 10:43, Paul Schmehl via Postfix-users wrote: On Jun 17, 2024, at 6:30 PM, Peter via Postfix-users wrote: On 17/06/2024 17:28, Paul Schmehl wrote: How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server

[pfx] Re: Help with reject_sender_login_mismatch

2024-06-18 Thread Gilgongo via Postfix-users
On Tue, 18 Jun 2024 at 08:31, Jeff Peng via Postfix-users < postfix-users@postfix.org> wrote: > Hello, > > I have this section in master.cf: > > smtps inet n - y - - smtpd >-o syslog_name=postfix/smtps >-o smtpd_

[pfx] Re: Help with reject_sender_login_mismatch

2024-06-18 Thread Gilgongo via Postfix-users
_sender_login_maps. I'm pretty sure you'll need that to list the allowed logins (and/or their aliases if needed). See https://www.postfix.org/postconf.5.html for how that works. ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsub

[pfx] Re: Best practices?

2024-06-18 Thread Gilgongo via Postfix-users
On Wed, 19 Jun 2024 at 03:57, Viktor Dukhovni via Postfix-users < postfix-users@postfix.org> wrote: > On Tue, Jun 18, 2024 at 04:15:33PM -0500, Cody Millard via Postfix-users > wrote: > > > The defaults for those settings, as far as postfix is concerne

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Peter via Postfix-users
On 19/06/24 18:51, Tan Mientras via Postfix-users wrote: Hi *Trying to setup email REJECT when users try to send to a no-reply email.* There is no such thing as a no-reply email, there is no part of the email specification that allows a message to be marked as unable to be replied to. Many

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Peter via Postfix-users
On 20/06/24 04:35, John Levine via Postfix-users wrote: It appears that Peter via Postfix-users said: On 19/06/24 18:51, Tan Mientras via Postfix-users wrote: Hi *Trying to setup email REJECT when users try to send to a no-reply email.* There is no such thing as a no-reply email, there is

[pfx] Re: discard message

2024-06-19 Thread postfix--- via Postfix-users
__ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Peter via Postfix-users
On 20/06/24 17:47, Tan Mientras via Postfix-users wrote: So many replies! @Ralph Is an automated/unattended email notifying the user about something, providing proper ways of contacting. As this email is not read in any way, rejecting the mail would be a better way to handle than an

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-20 Thread postfix--- via Postfix-users
. People will do sender callout and then reject all e-mail with this as sender. An option is to have noreply@ delivered to /dev/null. It's valid and a trash can. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an ema

[pfx] Re: SPF hostname and domainname

2024-06-20 Thread Gilgongo via Postfix-users
On Thu, 20 Jun 2024, 2:01 pm Emmanuel Seyman via Postfix-users, < postfix-users@postfix.org> wrote: > > So there's a confusion between the hostname of the mailer and the > doamin to be used for the SPF check. Is anybody else seeing this ? > Yes, I had to recently add a

[pfx] Re: SPF hostname and domainname

2024-06-20 Thread postfix--- via Postfix-users
sistent on having the HELO be something other than the hostname? ___________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SPF hostname and domainname

2024-06-20 Thread Peter via Postfix-users
On 21/06/24 07:13, Wietse Venema via Postfix-users wrote: Bounces are sent with the null envelope.from address which has no domain. Therefore, SPF applies policy to a surrogate: the hostname in the SMTP client's HELO/EHLO command (as if the envelope.from address was postmaster@helo-arg

[pfx] Re: SPF hostname and domainname

2024-06-21 Thread Peter via Postfix-users
On 21/06/24 21:49, Jaroslaw Rafa via Postfix-users wrote: Dnia 21.06.2024 o godz. 18:45:15 Peter via Postfix-users pisze: SPF/DKIM/DMARC Checklist for (IMO) the best chance of getting your mail to be accepted: 1. HELO banner should pass SPF. 2. Envelope Sender should pass SPF. 3. Envelope

[pfx] Re: SPF hostname and domainname

2024-06-21 Thread Peter via Postfix-users
On 21/06/24 23:10, Matus UHLAR - fantomas via Postfix-users wrote: Peter via Postfix-users skrev den 2024-06-21 08:45: SPF/DKIM/DMARC Checklist for (IMO) the best chance of getting your mail to be accepted: 1.  HELO banner should pass SPF. 2.  Envelope Sender should pass SPF. 3.  Envelope

[pfx] Re: DANE and STS

2024-06-26 Thread Dimitris via Postfix-users
Στις 26/6/24 14:19, ο/η Jeff Pang via Postfix-users έγραψε: May I ask if the main providers like gmail, outlook, yahoo, proton, gmx etc, have smtp-dane deployed? there is also this online test tool : https://en.internet.nl/mail/gmail.com/1276778/ https://en.internet.nl/mail/outlook.com

<    2   3   4   5   6   7   8   9   10   11   >