Re: [mailop] FIXED: Re: DNSSEC broken for mailop.org

2024-07-29 Thread Patrick Ben Koetter via mailop
thing" instead of breaking the service. This, we think, would be to limit TTLs to what the dnssec-policy says even if the zone would specify a higher limit. We'll suggest that to ISC. p@rick * Patrick Ben Koetter via mailop : > Greetings, > > we’ve migrated the DNS zone for m

[mailop] FIXED: Re: DNSSEC broken for mailop.org

2024-07-24 Thread Patrick Ben Koetter via mailop
024 ;; MSG SIZE rcvd: 164 Regards, Patrick > Am 24.07.2024 um 12:55 schrieb Patrick Ben Koetter via mailop > : > > Greetings. > > >> Am 24.07.2024 um 11:50 schrieb Serhii via mailop > <mailto:mailop@mailop.org>>: >> >> Hello, >> >&g

Re: [mailop] DNSSEC broken for mailop.org

2024-07-24 Thread Patrick Ben Koetter via mailop
Greetings. > Am 24.07.2024 um 11:50 schrieb Serhii via mailop : > > Hello, > > I have started a migration to a new MX recently and I have discovered that > new MX rejects mx.mailop.org early due to DNS failure. As I can see now, it > is related to DNSSEC problems (at a new machine, I have DNS

Re: [mailop] DKIM with 3072-bit or 4096-bit RSA signatures

2023-04-25 Thread Patrick Ben Koetter via mailop
* John Levine via mailop : > It appears that Matthäus Wander via mailop said: > >Hello everyone, > > > >what's the experience with DKIM signatures with RSA keylengths larger > >than 2048 bits? Is it supported by verifiers? Any known incompatibilities? > > All the verifiers I know pass the signat

[mailop] ANN: New open source list server

2023-03-07 Thread Patrick Ben Koetter via mailop
The postfix mailing list has moved to list.sys4.de and some other open source projects will follow. All messages from list.sys4.de will carry an ARC signature and will additionally be DKIM-signed with the sender domains DKIM key. If you'd like to add list.sys4.de as a bulk sender, here's what you

[mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-17 Thread Patrick Ben Koetter via mailop
Greetings, I'm about to setup a new mailing list server. It will use Mailman 3, which is able to add ARC signatures to incoming messages. The lists will also rewrite the From:-header and to match the lists name and domain. I'm unsure if outbound messages should also be DKIM signed or does it suffi

Re: [mailop] Use of SRV Records for SUBMISSIONS

2022-12-14 Thread Patrick Ben Koetter via mailop
* Slavko via mailop : > Dňa 13. decembra 2022 15:52:37 UTC používateľ Patrick Ben Koetter via mailop > napísal: > >Greetings, > > >Section 3.1. Email Submission of RFC 6186 specifies a DNS SRV record for > >SUBMISSION with or without encryption using START

[mailop] Use of SRV Records for SUBMISSIONS

2022-12-13 Thread Patrick Ben Koetter via mailop
Greetings, is anyone aware of a DNS SRV record / label to specify SUBMISSIONS (tcp/465) aka implicit TLS for MUAs? Playing along the examples from RFC 6186, which specify SRV records for SUBMISSION, IMAPS and POP3S, it would probably be: _submissions._tcp SRV 0 1 465 mail.example.com. Se

Re: [mailop] [EXTERNAL] TLS-RPT reporting software

2022-11-17 Thread Patrick Ben Koetter via mailop
xtract data from what Postfix logs you can create reports to fill in the General, Failure and DANE sections. And then submit it via SMTP in a DKIM signed message. p@rick > > On Thu, Nov 17, 2022 at 4:42 PM Patrick Ben Koetter via mailop < > mailop@mailop.org> wrote: > &

Re: [mailop] [EXTERNAL] TLS-RPT reporting software

2022-11-17 Thread Patrick Ben Koetter via mailop
* Brotman, Alex via mailop : > I’m not aware of one, though you may want to ask Viktor As of today the Postfix smtp client does not log everything it could to provide data for a TLS-RPT report. It also lacks additional functionality to log even more data for TLS-RPT. In other words: Postfix is not

Re: [mailop] Autodiscover in MS Outlook for POP/IMAP

2022-10-07 Thread Patrick Ben Koetter via mailop
Allessio, * Alessio Cecchi via mailop : > I was trying to configure an email account with MS Outlook via Autodiscover > (IMAP and SMTP), but it seems to not be working. The account is hosted on my > personal email server, the Autoconfig has no such problems. > > I performed some tests with other

Re: [mailop] opendkim replacement

2022-07-04 Thread Patrick Ben Koetter via mailop
Careful! dkimpy-milter has an open bug, which will let it segfault and in consequence bring the mail platform to a halt if it receives non correctly encoded headers i. e. headers with non ASCII chars. p@rick Am 04.07.22 um 10:00 schrieb Cley Faye via mailop: Hi, If you are looking for s

Re: [mailop] Microsoft Announces Tenant Trusted ARC Seal

2022-06-26 Thread Patrick Ben Koetter via mailop
FYI: After some unfruitful offlist communication with Noel we finally took the step and unsubscribed him from the mailop mailinglist and we do not intend to let him subscribe this list again. p@rick mailop postmaster team Am 19.06.22 um 09:02 schrieb Noel Butler via mailop: I dont respond

Re: [mailop] Paper on email delivery/standards adoption

2022-06-14 Thread Patrick Ben Koetter via mailop
Typo in line 4 SMPT -> SMTP Am 13.06.22 um 21:21 schrieb Tobias Fiebig via mailop: Heho, Quiet some time ago i asked the list for some help in an ongoing email measurement study; The paper is now finally out and accepted. An open-access preprint can be found here:https://pure.mpg.de/rest/item

Re: [mailop] Google considers DMARC reports to be unsolicited mail :(

2022-02-09 Thread Patrick Ben Koetter via mailop
* Bernardo Reino via mailop : > Dear all, > > I have already experienced Google ratelimiting DMARC reports every now and > then, which may be OK if they want it like that.. but this is new (to me): > > Reporting-MTA: dns; katara.bbmk.org > X-Postfix-Queue-ID: 3D2D71BE02E2 > X-Postfix-Sender: rfc8

[mailop] Failing ed25519-sha256 verfication (was: Re: DKIM signing with ed25519 keys - leap of faith)

2021-11-05 Thread Patrick Ben Koetter via mailop
* Patrick Ben Koetter via mailop : > the technical guideline TR03180 from BSI (Germany's „Federal Office of > Information Security“) will likely make ed25519 mandatory (in parallel > with rsa-sha256). And I guess the German government itself will follow > that policy soon for

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-13 Thread Patrick Ben Koetter via mailop
Hey Sidsel, Am 12.10.21 um 11:02 schrieb Sidsel Jensen via mailop: > Dear Mail Community > > We at one.com recently took another leap of faith and > started dual DKIM signing our outbound mails, so they both get DKIM > signed with rsa keys along with ed25519 keys. > > We’ve > rea

Re: [mailop] DKIM: ed22519 experiences anyone?

2021-02-15 Thread Patrick Ben Koetter via mailop
Hey Vsevolod! * Vsevolod Stakhov via mailop : > On 15/02/2021 21:02, John Levine via mailop wrote: > > In article <20210215085929.76srgtpbaqbms...@sys4.de> you write: > >> Greetings, > >> > >> is anyone using ed22519 for DKIM signatures yet and what do you see? Any > >> interop problems? > > > >

[mailop] DKIM: ed22519 experiences anyone?

2021-02-15 Thread Patrick Ben Koetter via mailop
Greetings, is anyone using ed22519 for DKIM signatures yet and what do you see? Any interop problems? TIA p@rick -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben

Re: [mailop] Weird 'tempfail too many recipients' bug/incompatibility EXIM => Postfix?

2021-01-22 Thread Patrick Ben Koetter via mailop
* ml+mailop--- via mailop : > On Fri, Jan 22, 2021, Benot Panizzon via mailop wrote: > > > Now Assume two recipients with different Anti-Spam Settings: > ... > > That's what PRDR is for, but it isn't supported by many MTAs > or setups :-( The only reference to PRDR I could find, is an expired RF

Re: [mailop] [ADMIN] List migration complete

2020-09-30 Thread Patrick Ben Koetter via mailop
Bjoern! * Bjoern Franke via mailop : > Hi, > > > > > FYI we have, finally, completed the mailing list migration to a new VM. > > > > Firstly: many, many thanks to Andy Davidson for administering & hosting the > > list on his own kit for all the years it's been running. First message sent > >

Re: [mailop] ANN: MTA-STS/TLSRPT for mailop.org MX

2020-09-30 Thread Patrick Ben Koetter via mailop
* Christof Meerwald via mailop : > On Wed, Sep 30, 2020 at 09:15:05AM +0100, Tim Bray via mailop wrote: > > Should it be using TLS for outbound connections?  I'm not seeing that? > > > > (no problem if that is something you just haven't turned on yet. And thanks > > for sorting this all out) > >

Re: [mailop] ANN: MTA-STS/TLSRPT for mailop.org MX

2020-09-30 Thread Patrick Ben Koetter via mailop
* Tim Bray via mailop : > > On 30/09/2020 08:17, Patrick Ben Koetter via mailop wrote: > > At the moment the SMTP server itself supports STARTTLS and DANE. We plan to > > add MTA-STS when the feature becomes available. > > > > > > Should it be using TL

[mailop] ANN: MTA-STS/TLSRPT for mailop.org MX

2020-09-30 Thread Patrick Ben Koetter via mailop
Greetings, as of now the MX for mailop.org offers a MTA-STS policy (see: ) as defined in RFC 8461 . This allows us to receive reports via TLSRPT (see: RFC 8640 ), wh

[mailop] ANN: mailop migration ahead: new host identity (whitelisting/reputation)

2020-09-27 Thread Patrick Ben Koetter via mailop
@all: The new host is in place and it seems everything works as it should. We plan to migrate the mailing list (including the archive etc.) within the next seven days. After the migration list traffic will come from new IPs and the SMTP service will have a new name. You might want to update your

Re: [mailop] Website down?

2020-09-04 Thread Patrick Ben Koetter via mailop
Chris, * Chris Vitulski via mailop : > I have been trying to reach your site since last week and keep getting > error pages. For some reason when I signed up for the list I don't get the > real time emails, I only get the digest version. Will the website be back > up soon, or can you possibly ch

Re: [mailop] test Wed, 19 Aug 2020 20:55:45 +0200

2020-08-19 Thread Patrick Ben Koetter via mailop
Duh! Please ignore this test message. It was supposed to stay locked on the new mailop.org mailserver. p@ Am 19.08.20 um 20:55 schrieb p...@sys4.de: > This is a test mailing > -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: M

Re: [mailop] ADMIN: Mailop in 2020

2020-02-18 Thread Patrick Ben Koetter via mailop
* Graeme Fowler via mailop : > On 12 Feb 2020, at 16:39, I wrote: > > Step 2 is about to happen: I’m about to change the registered nameservers > > for the domain. > > When I wrote "about to happen" I did not factor in some really strange > behaviour from OpenSRS, which we've now managed to get

Re: [mailop] [EXTERNAL] Re: Business justification to use noreply sender addresses?

2020-02-06 Thread Patrick Ben Koetter via mailop
* Philip Paeps via mailop : > On 2020-02-06 12:06:18 (-0800), Patrick Ben Koetter via mailop wrote: > > * Michael Wise via mailop : > > > If your MAIL FROM: is <>, we're gonna treat it like a bounce of mail > > > we didn't send. > > > > >

Re: [mailop] [EXTERNAL] Re: Business justification to use noreply sender addresses?

2020-02-06 Thread Patrick Ben Koetter via mailop
Aloha Michael! * Michael Wise via mailop : > If your MAIL FROM: is <>, we're gonna treat it like a bounce of mail we > didn't send. > > Kiss your deliverability GOODBYE. > > And you won’t be able to do bounce processing, which you really should be > doing. So the business justification is to

[mailop] Business justification to use noreply sender addresses?

2020-02-06 Thread Patrick Ben Koetter via mailop
Greetings, why is it that everyone is still using noreply addresses to send notifications and other one-way messages? It seems to be common understanding to use e.g. nore...@example.com to keep people from replying to mail from example.com. The typical policy is to reject or discard any mail that

Re: [mailop] Reasons to add plain text alternative to email?

2019-12-09 Thread Patrick Ben Koetter via mailop
* Maarten Oelering via mailop : > Multipart messages with html and text alternatives are generally considered > best practice. Senders with html templates should add a text version is the > common believe. > > But it's almost 2020, and we were wondering if there's still a good reason > for addi

Re: [mailop] Can someone write me a prescription for a sane MTA? I'm allergic to Postfix.

2019-12-06 Thread Patrick Ben Koetter via mailop
* Mike via mailop : > On 12/5/2019 7:26 PM, Large Hadron Collider via mailop wrote: > > [snip] > > > One of my requirements is that the MTA be capable of punting emails that > > are destined for a UUCP host (either as defined in a forwarding file, or > > explicitly named with a bangpath) into Unix-

Re: [mailop] BIMI

2019-12-06 Thread Patrick Ben Koetter via mailop
* Thomas Walter via mailop : > > > On 05.12.19 02:20, Matt Vernhout via mailop wrote: > > Stay tuned for more info on the bimigroup.org website, we are planning to > > add more info very soon. > > But why? Here's what I have heard, but haven't had time yet to verify or read deeper into. Not s

Re: [mailop] [ext] Just a word of thanks....

2019-10-30 Thread Patrick Ben Koetter via mailop
* Patrick Ben Koetter via mailop : > * Ralf Hildebrandt via mailop : > > * Eric Tykwinski via mailop : > > > > > So if Viktor's on the list, or anyone knows him, I owe him a beer. > > > > Will forward it. Problem: Everybody owes him a beer :) >

Re: [mailop] [ext] Just a word of thanks....

2019-08-29 Thread Patrick Ben Koetter via mailop
* Ralf Hildebrandt via mailop : > * Eric Tykwinski via mailop : > > > So if Viktor's on the list, or anyone knows him, I owe him a beer. > > Will forward it. Problem: Everybody owes him a beer :) Given the fact that Viktor does not drink alcohol we might consider changing the "IOU"-model on our