[pfx] example smarthost (Was: Re: Postfix + Dovecot FreeBSD - a problem)

[황병희]

To Glenn:

On Tue, 2024-03-12 at 02:08 -0400, Viktor Dukhovni via Postfix-users
wrote:
> (...)
> Your intuiting is way off base, best to resist the temptation to make
> guesses.  If you don't know, that's fine, no need to waste time
> chasing
> shadows, just ask.
> 


Return-Path: 
Received: from thinkpad-e495.YW ([223.39.248.127])
by smtp.gmail.com with ESMTPSA id f49-
20020a056a000b3100b006e4dad633e1sm5738341pfu.177.2024.03.12.01.40.33
for 
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 12 Mar 2024 01:40:33 -0700 (PDT)
Received: by thinkpad-e495.YW (Postfix, from userid 1000) id
4C35CD816F8; Tue, 12 Mar 2024 17:40:28 +0900 (KST)
Date: Tue, 12 Mar 2024 17:40:28 +0900
From: Byunghee HWANG 
To: soyeo...@gmail.com
Subject: 123
Message-ID: <20240312084028.ga18...@thinkpad-e495.yw>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
User-Agent: Mutt/1.9.4 (2018-02-28)



Mar 12 17:40:07 thinkpad-e495 postfix/postfix-script[18629]: starting
the Postfix mail system
Mar 12 17:40:07 thinkpad-e495 postfix/master[18631]: daemon started --
version 3.3.0, configuration /etc/postfix
Mar 12 17:40:28 thinkpad-e495 postfix/pickup[18632]: 4C35CD816F8:
uid=1000 from=
Mar 12 17:40:28 thinkpad-e495 postfix/cleanup[18661]: 4C35CD816F8:
message-id=<20240312084028.ga18...@thinkpad-e495.yw>
Mar 12 17:40:28 thinkpad-e495 postfix/qmgr[18633]: 4C35CD816F8: from=<
soyeo...@thinkpad-e495.yw>, size=517, nrcpt=1 (queue active)
Mar 12 17:40:34 thinkpad-e495 postfix/smtp[18663]: 4C35CD816F8: to=<
soyeo...@gmail.com>, relay=smtp.gmail.com[64.233.188.108]:587,
delay=6.4, delays=0.02/0.03/4.9/1.4, dsn=2.0.0, status=sent (250 2.0.0
OK  1710232834 f49-20020a056a000b3100b006e4dad633e1sm5738341pfu.177 -
gsmtp)
Mar 12 17:40:34 thinkpad-e495 postfix/qmgr[18633]: 4C35CD816F8: removed



smtp_tls_security_level = encrypt
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl/gmail_passwd
smtp_sasl_tls_security_options = noanonymous
relayhost = [smtp.gmail.com]:587



$ ls -l /etc/postfix/sasl
total 12
-rw--- 1 root root57 Mar 12 16:56 gmail_passwd
-rw-r--r-- 1 root root 12288 Mar 12 16:57 gmail_passwd.db



[smtp.gmail.com]:587 soyeo...@gmail.com:my_app_password_16_digit


set realname = "Byunghee HWANG"
set from = "soyeo...@doraji.xyz"
set charset = UTF-8


This is minimal example for smarthost with gmail. You should check log
carefully. Then try again repeat until you succeed. In my case, it took
me 15 attempts before I succeeded. 


Thanks, Byunghee from South Korea


signature.asc
Description: This is a digitally signed message part
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Postfix + Dovecot FreeBSD - a problem

[황병희]

On Mon, 2024-03-11 at 08:57 +0100, Alexander Leidinger via Postfix-
users wrote:
> Am 2024-03-11 05:19, schrieb Glenn Tenney via Postfix-users:
> 
> > (2) Postfix sends to gmail, but does not encrypt when sending.
> 
> You only tell the receiving side of postfix to set the encrypt level
> to 
> "may". For the sending side you do not have such a setting:
>  smtp_tls_security_level = ...
> 

To Glenn:

In addition, *smtp_tls_policy_maps* is good for detail setting: 
https://www.postfix.org/TLS_README.html#client_tls_encrypt


> Maybe you also want to set the TLS protocols for the sending side 
> (sending and receiving side have different config options, "smtp_..."
> vs 
> "smtpd_..."):
>  smtp_tls_protocols = ...
> 
> > smtp_tls_CApath = /etc/ssl/certs
> > smtp_tls_loglevel = 1
> > smtpd_tls_cert_file = 
> > /usr/local/etc/letsencrypt/live/domain.name/fullchain.pem
> > smtpd_tls_key_file = 
> > /usr/local/etc/letsencrypt/live/domain.name/privkey.pem
> > smtpd_tls_protocols = !SSLv2, !SSLv3
> > smtpd_tls_security_level = may
> > smtpd_use_tls = yes
> 
> Bye,
> Alexander.
> 


Thanks, Byunghee from South Korea


signature.asc
Description: This is a digitally signed message part
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Which DKIM application for postfix 3.9.0

[황병희]

On Fri, 2024-03-08 at 00:11 +0100, A. Schulze via Postfix-users wrote:
> 
> Am 07.03.24 um 23:06 schrieb postfix--- via Postfix-users:
> > I have done some research and opendkim is the most recommended,
> > however, other research states the opendkim has been abandoned by
> > it's maintainers.
> 
> well, long story. yes, it //seem// to be abandoned, but you may use
> it on production level.
> 
> > I run Solaris and therefore need to compile my applications,
> > postfix and dkim.
> 
> then you could give opendkim a change. use this branch as starting
> point:
> https://github.com/trusteddomainproject/OpenDKIM/tree/develop
> At the end you get signing+validation for rsa, ed25519 using openssl3
> 
> btw: there is a mailing-list dedicated to OpenDKIM:
> 
> List-Help: 
> List-Unsubscribe:  ubject=unsubscribe>
> List-Id: 
> List-Subscribe:  ject=subscribe>
> List-Owner: 
> List-Post: 
> 
> last post was in may 2023, maybe it's still operational.
> well, long story ...
> 
> Andreas
> 

+1; 

And there is opendkim-lua scripts. It is useful to more deep operation.


Thanks, Byunghee from South Korea


signature.asc
Description: This is a digitally signed message part
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Is there a way to reject an internal domain on our border MXes

[황병희]

Hellow Jaroslaw,

On Sat, 2024-02-03 at 22:17 +0100, Jaroslaw Rafa via Postfix-users
wrote:
> Dnia  3.02.2024 o godz. 12:59:27 Viktor Dukhovni via Postfix-users
> pisze:
> > 
> > These days, users are far better off with delivery to an IMAP store
> > that
> > is not tied directly to any login account they may or may not have.
> > Perhaps they authenticate to Dovecot via PAM, but the mail store
> > should
> > own the mailbox, not the user.
> 
> Well, I'm an old school type... :) I prefer to ssh to the server and
> launch
> mutt or something similar to access my mail :)

Me, too.

Sometimes, i do like you. The yw-0919.doraji.xyz is spam filtering
server. At there i check spam folder with Mutt (Mutt/1.9.4 (2018-02-
28)) every week!

Usually, i see normal emails from Gmail IMAP with GNOME Evolution.


Sincerely, Byunghee

-- 
^고맙습니다 _布德天下_ 감사합니다_^))//
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Re: Choosing relay based on sasl username?

[황병희]

Charles Sprickman  writes:

> [...]
> In the above configuration, when I connect to relay using any of those
> accounts, there is no match and the default transport is used.
>
> If I add an entry to match the From address, that works fine, as expected.
>
> So can I do this, but use the SASL username?

Currently i'm using Postfix with sender_dependent_relayhost_maps in
Google Computer Engine (Ubuntu 18.04 LTS). And it works very well!

Reference: 

> Thanks,
>
> Charles

Sincerely, Linux fan Byung-Hee

-- 
^고맙습니다 _救濟蒼生_ 감사합니다_^))//

Re: www.postfix.org not working from certain locations

[황병희]

Vladimir Mishonov  writes:

> Hello again.
>
> It looks like www.postfix.org is not available if browsing from
> certain locations within Russia and Belarus, and some other European
> countries (Netherlands, Norway, Ukraine) seem to be partially affected
> too. See availability test results here: 
> https://ping-admin.com/free_test/result/16443944516w2j65r1y4j0kca10wdw3q.html
> (not sure if this link will be valid for long, though).
>
> I remember I was able to open the site just fine a couple days ago,
> but now I simply get a "connection timed out" error. Looks like a
> firewall of some kind on the remote side is blocking the connection.
>
> If possible, please investigate and try to resolve this issue.

South Korea, Firefox (Debian 11) no problem, just a feedback.

Sincerely, Byung-Hee from South Korea

Re: thanks and a little bit question

[황병희]

Dear Sam and Viktor,

Viktor Dukhovni  writes:

> On Sun, Dec 13, 2020 at 03:15:11PM +0100, Sam Tuke wrote:
>
>> On 13 December 2020 12:19:22 CET, "황병희"  wrote:
>>
>> >Hello, it is a pleasure to use Postfix which runs on my personal Google
>> >Cloud Platform. So I'm interested in somewhat internal things about
>> >Postfix. Where is the main reposiotry, GitLab? or Other server?
>>
>> Here's the source code repo: 
>> 
>> https://github.com/vdukhovni/postfix
>
> The primary location of Postfix source code is:
>
> http://www.postfix.org/download.html
>
> The source code is made available in the form of "tarballs" of
> (official) releases and (experimental) development snapshots.
>
> Most of the mirror sites mirror only the official releases, while
> Wietse's FTP server also provides access to the snapshots.
>
> My Postfix repository on Github is an informal copy of the evolving
> Postfix codebase.  It is not monitored for pull-requests or issues.
> You can clone it and use it at your convenience.
>
> There are branches for each official release, and for "nonprod"
> snapshots.  There are also tags for each patch level of an official
> release.
>
> The repository is probably missing a few old snapshots that were no longer
> easy to find by the time I got around to creating the Github repository.

I now understood whole story on repository. Thanks and happy day^^^

Sincerely, Postfix user Byung-Hee

-- 
^고맙습니다 _白衣從軍_ 감사합니다_^))//

thanks and a little bit question

[황병희]

Hellow i'm pleasure to using Postfix which runs at my personal Google Cloud 
Platform. So i'm interested in somewhat internal things about Postfix. Where is 
the main reposiotry, GitLab? or Other server?

Thanks for any comments welcome!

Sincerley, Postfix user Byung-Hee

-- 
^고맙습니다 _布德天下_ 감사합니다_^))//

Re: Using provider SMTP (Gmail)

[황병희]

> When I send an email it is received with "From: " equal to Gmail account 
> (From: xx...@gmail.com) instead of my
> personnal email (From: xx...@mehl-family.fr).

That is easy. Just use Google Apps (currently G Suit) ;;;

Sincerely,

-- 
^고맙습니다 _救濟蒼生_ 감사합니다_^))//

Re: should we use plaintext for message?

[황병희]

Wesley Peng  writes:

> ...
> Shall we use plaintext message in regular email communication?

If somebody use Linux/*BSD, i would like to accept HTML messages with
pleasure! Because most Linux/*BSD users send messages as plaintext. It
was just personal opinion.

Sincerely, Byung-Hee

-- 
^고맙습니다 _白衣從軍_ 감사합니다_^))//

Re: [OT] looking for a good mobile MUA

[황병희]

Robert Schetterer  writes:

> ...
> https://alternativeto.net/software/k-9/?platform=iphone

+1, k-9 was/is good for me(android user) ;;;

Sincerely, Byung-Hee

-- 
^고맙습니다 _白衣從軍_ 감사합니다_^))//

Re: Reject Chinese mail

[황병희]

Hello Jeffrey again^^^

>  How about moving to Gmail(Google Apps)? Gmail's spam defense is not bad, i
>  think.
>
> I disagree. It often labels mailing list email as spam, [...]

Personally i read public mailing  lists' messages by Gmane. There is
example screenshot [0]. So i have no problem about that.

Sincerely,

[0] 
https://gitlab.com/soyeomul/Gnus/blob/master/ss/IMG_20191127_104651_resized_20191127_104806025.jpg

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: how to setup a privacy oriented mailserver

[황병희]

> Is there any guide for it?

For sending mail to public mailing lists, Gmane is good. Gmane keep your
privacy all the time.

Also MX is good to use Cloud VM such as AWS, Google Cloud Platform if
you install Postfix.

Sincerely,

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: Reject Chinese mail

[황병희]

Hello Jeffrey,

> I don’t get the logic of this statement. [...]

There are my several cousin brothers, friends over the world. So i can't
block any regions. The word money is not money in the statement.

Sincerely,

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: Reject Chinese mail

[황병희]

> I don't block based on country but I do add some weighting in Spamassassin 
> for [...]

Absolutely i agree with you Dominic, thanks^^^

Sincerely,

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: Reject Chinese mail

[황병희]

> By the way, you can find ASIA NETBLOCK on the internet and block them all 
> easily.

My Postfix is running on Google Compute Engine's Ubuntu 18.04. 
Actually i do not block anyone, any clients, any ip addresses.

#+BEGIN_SRC sh
soyeomul@bionic190316003:~$ cat ~/.forward
soyeomul+...@gmail.com
#+END_SRC

All incoming spams go to Gmail's Spam folder so i have no stress with
spam things.

Sincerely,

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: Reject Chinese mail

[황병희]

merr...@fn.de writes:

> [...] do you think if it is possible to reject all mails from China? Thanks 

How about moving to Gmail(Google Apps)? Gmail's spam defense is not bad, i
think. Plus don't block China. Blocking China is blocking money.

Sincerely,

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: Question about DMARC

[황병희]

> Am I right?

Yes Wesley you are right. So i don't like DMARC (with SPF).

Sincerely,

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: reject mail if dns and rdns differ

[황병희]

[Sorry for late, Ralph.]

Ralph Seichter  writes:

> * 황병희:
>
>> i did not setup SPF. Instead i think User-Agent/X-Mailer are
>> important.
>
> The contents of these headers are easily faked, so relying on them is
> questionable to me. Also, you will encounter User-Agent headers
> generated by various libraries, like Java SMTP implementations. Finally,
> what about emails without User-Agent header, which are perfectly valid?
>
> SPF, by contrast, has at least some benefit when it comes to spam
> prevention.

Totally you are right.

Though let me say more comments.

My point was sending email with good manners. So i am interested in good
software such as Mutt, Gnus, etc. Sorry man, my considering in email
culture is somewhat another universe.

Sincerely, Byung-Hee from South Korea.

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: reject mail if dns and rdns differ

[황병희]

> I am a big fan of rigid adherence to rDNS & SPF rules, doing so,
> [...]

Well i don't know what rules are right things. Still i did not setup
SPF. Instead i think User-Agent/X-Mailer are important. In most case
linux softwares[1] have good manners in email world.

Sincerely,

[1] Mutt, ELM, PINE, Alpine, Evolution, Thunderbird, Sylpheed,
ClawsMail, Emacs, etc.

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: Ubuntu 18.04 /etc/aliases

[황병희]

> For Debian and derivatives like Ubuntu, yes.

Thanks for confirmation!!!

Sincerely, Byung-Hee from South Korea.

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Ubuntu 18.04 /etc/aliases

[황병희]

i just did install postfix in Ubuntu 18.04 by `sudo apt-get install
postfix'. then just did type `cat /etc/aliases'.
#+BEGIN_SRC: text
(bionic)soyeomul@localhost:~$ cat /etc/aliases
# See man 5 aliases for format
postmaster:root
#+END_SRC

by the way there is no MAILER-DAEMON thing. is that normal state?

-- 
^고맙습니다 _地平天成_ 감사합니다_^))//

Re: Recommendations on an spf record?

[Byung-Hee HWANG (황병희, 黃炳熙)]

In Article