[pfx] Re: One user unable to send email

2024-02-06 Thread Viktor Dukhovni via Postfix-users
On Tue, Feb 06, 2024 at 10:27:17PM -0500, Ken Wright via Postfix-users wrote:

> I honestly don't know if this is an issue with Postfix or Roundcube,
> but I thought I'd start here.
> 
> I'm running Postfix 3.8.1 on Ubuntu Server 23.10 and I'm hosting a
> friend's website and email in addition to my own.  My problem is, my
> friend (who usually accesses her email on her phone via Roundcube) is
> unable to send email, getting a 451 error when she tries.  She can
> receive emails without difficulty.  I am able to send and receive
> emails, both through a conventional mail client (Evolution) and the
> Roundcube webmail interface.  I know there are ways to throttle
> Postfix, but I can't find them in either main.cf or master.cf.  Can
> anyone offer any insights?

Curious anecdote (je suis désolé), but if you're looking for help, and
not sympathy:

http://www.postfix.org/DEBUG_README.html#mail

-- 
Viktor.
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] One user unable to send email

2024-02-06 Thread Ken Wright via Postfix-users
I honestly don't know if this is an issue with Postfix or Roundcube,
but I thought I'd start here.

I'm running Postfix 3.8.1 on Ubuntu Server 23.10 and I'm hosting a
friend's website and email in addition to my own.  My problem is, my
friend (who usually accesses her email on her phone via Roundcube) is
unable to send email, getting a 451 error when she tries.  She can
receive emails without difficulty.  I am able to send and receive
emails, both through a conventional mail client (Evolution) and the
Roundcube webmail interface.  I know there are ways to throttle
Postfix, but I can't find them in either main.cf or master.cf.  Can
anyone offer any insights?

Ken Wright
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: why tls library problem?

2024-02-06 Thread Viktor Dukhovni via Postfix-users
On Tue, Feb 06, 2024 at 06:50:28PM +0100, Maurizio Caloro via Postfix-users 
wrote:

> Feb6 time P postfix/tlsproxy[300980]: warning: TLS library problem:
>   error:1417A0C1:SSL routines:tls_post_process_client_hello:
>   no shared cipher:../ssl/statem/statem_srvr.c:2283:

This looks like a client connection to your server, that was mediated by
tlsproxy(8) on behalf of postscreen(8).   The remote client's TLS client
hello message did not list any ciphers that are enabled in your
configuation and supported by your server's underlying OpenSSL library.

If the client were on the postscreen whitelist, the connection would
have been immediately handed off to smtpd(8), well before STARTTLS.
Therefore, this was either a blacklisted client, or else a "new" client,
whose IP address has either expired from the cache or has never before
connected.

It could also, for example, be one of the security scanners (shodan,
...) that specifically tests deprecated ciphers.

That said, you've provided no information about your configuration:

https://www.postfix.org/DEBUG_README.html#mail

so more specific advice is not possible.

-- 
Viktor.
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: why tls library problem?

2024-02-06 Thread Wietse Venema via Postfix-users
Maurizio Caloro via Postfix-users:
> Please, i see often on log file

See text after 
 
> Feb6 time P postfix/tlsproxy[300980]: warning: TLS library problem:
> error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared
> cipher:../ssl/statem/statem_srvr.c:2283:

Wietse
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] why tls library problem?

2024-02-06 Thread Maurizio Caloro via Postfix-users
Please, i see often on log file

 

Feb6 time P postfix/tlsproxy[300980]: warning: TLS library problem: 
error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared 
cipher:../ssl/statem/statem_srvr.c:2283:

Feb6 time P postfix/tlsproxy[300980]: warning: TLS library problem: 
error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared 
cipher:../ssl/statem/statem_srvr.c:2283:

 

​I have to do something here?

Thanks

 

--

Debian bullseye 11.8 | Postifix 3.5.23

 

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Forward mails if user unknown in local recipient table

2024-02-06 Thread Viktor Dukhovni via Postfix-users
On Tue, Feb 06, 2024 at 10:31:06PM +0530, Akshay Pushparaj via Postfix-users 
wrote:

> I would like to know if i can configure postfix to forward mails if user not
> found in local recipient table.

That's not the right question.  The right question is:

- How to deliver some users for a domain locally and and some to a
  remote server?

For that, I'd typically configure the domain as a relay domain, and
*rewrite* the addresses that should be delivered locally to a local
or virtual mailbox (mydestination or virtual_mailbox_domains) domain.

My actual preference is to make such domains be virtual alias domains,
and rewrite both the forwarded and the local recipients to internal
domains, with some forwarded and some delivered locally.  But that's
a bit more complicated when the relay destination expects unmodified
envelope recipients.  It may be possible to give the relay recipients
*additional* internal addresses and rewrite to that form...

-- 
Viktor.
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Forward mails if user unknown in local recipient table

2024-02-06 Thread Wietse Venema via Postfix-users
Akshay Pushparaj via Postfix-users:
> Hi,
> I would like to know if i can configure postfix to forward mails if user 
> not found in local recipient table.

That is possible (with static: mapping) but not a good idea.

> Usecase:
> 
> Users are split between LDAP in my server and a remote server for 
> example.com. So if u...@example.com is not present in LDAP it must 
> forward to remote server.

How would Postfix know that the address is valid? If your answer
is: return the message to the sender if ther recipient is not valid,
then that is the wrong reply.

Wietse
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Forward mails if user unknown in local recipient table

2024-02-06 Thread Akshay Pushparaj via Postfix-users

Hi,
I would like to know if i can configure postfix to forward mails if user 
not found in local recipient table.


Usecase:

Users are split between LDAP in my server and a remote server for 
example.com. So if u...@example.com is not present in LDAP it must 
forward to remote server.


Any idea on how i could do this? Thanks.

--
Akshay
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Bug in COMPATIBILITY_README

2024-02-06 Thread Wietse Venema via Postfix-users
Rune Philosof via Postfix-users:
> Mismatching between compatibility_level in overview and explanations for
> http://www.postfix.org/COMPATIBILITY_README.html#relay_restrictions
> and
> http://www.postfix.org/COMPATIBILITY_README.html#smtputf8_enable
> 
> The overview lists them as compatibility_level < 2 and the detailed 
> explanation says < 1.

I have moved smtpd_relay_restrictions and smtputf8_enable under the
right grouping.

Wietse
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Bug in COMPATIBILITY_README

2024-02-06 Thread Rune Philosof via Postfix-users
Mismatching between compatibility_level in overview and explanations for
http://www.postfix.org/COMPATIBILITY_README.html#relay_restrictions
and
http://www.postfix.org/COMPATIBILITY_README.html#smtputf8_enable

The overview lists them as compatibility_level < 2 and the detailed explanation 
says < 1.
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org