Re: [mailop] Mailserver software

2024-07-17 Thread Stuart Henderson via mailop
On 2024/07/17 00:09, postfix--- via mailop wrote: > P.S.: reply to list only is enough. I don't need > double-copy. only write directly to me if you prefer to > reply privately. Standard etiquette on many technical mailing lists is specifically to CC the sender, as a courtesy to the person

Re: [mailop] Mailserver software

2024-07-17 Thread Stuart Henderson via mailop
On 2024/07/17 06:34, Andrew C Aitchison via mailop wrote: > On Wed, 17 Jul 2024, postfix--- via mailop wrote: > > > On 2024-07-16 14:36, Bjoern Franke via mailop wrote: > > > Which iPhone / Android clients do you mean? > > > > last time I tested Apple Mail, my IMAP server logged > > requests

Re: [mailop] Why an SPF hard bounce on ~all ?

2024-06-27 Thread Stuart Henderson via mailop
On 2024/06/27 17:46, Marco Moock via mailop wrote: > Am Thu, 27 Jun 2024 11:27:53 -0400 > schrieb "Mark E. Jeftovic via mailop" : > > > Why the hard bounce? > > Some postmasters decide not to accept them. IIRC Google had that > behavior in some cases in the past. > I assume this is the case

Re: [mailop] reverse proxy for smtp client

2024-06-24 Thread Stuart Henderson via mailop
On 2024/06/24 12:16, Marco Moock via mailop wrote: > Am 24.06.2024 um 12:03:49 Uhr schrieb Alessandro Vesely via mailop: > > > IME, large sending times are often caused by IMAP. Most clients > > operate by first sending the message and then saving it in the Sent > > IMAP folder. Just changing

Re: [mailop] how to stop this spam

2024-06-20 Thread Stuart Henderson via mailop
On 2024/06/20 10:13, Jeff Pang via mailop wrote: > Hello > > Recently i got a lot of spams like this one: > https://cloud.hostcache.com/spam.eml > > They have two features: > 1. arabic language > 2. from google groups (though i never joined those groups) I've reported a bunch of these over the

Re: [mailop] Cannot send messages to Google Mail users

2024-04-24 Thread Stuart Henderson via mailop
On 2024/04/24 12:04, Matus UHLAR - fantomas via mailop wrote: > Make sure nobody did spam/mailbomb from your domain while having matching > SPF/DKIM. I guess that could include forwarding of spam messages or > creating mail loop etc. AFAIK forwarding mail into gmail is generally not good for

Re: [mailop] Aruba Email Servers getting Authenticated SMTP sessions from Google?

2024-04-09 Thread Stuart Henderson via mailop
On 2024/04/09 09:21, Michael Peddemors via mailop wrote: > Is this something new that Google will attempt to relay out another > companies email servers with authentication? New in 2014 or so. ___ mailop mailing list mailop@mailop.org

Re: [mailop] Google unsolicited mail rejected with 421

2024-03-16 Thread Stuart Henderson via mailop
On 2024/03/14 10:28, Julian Bradfield via mailop wrote: > Their latest daftness (latest in my noticing it, anyway) is > rate-limiting on the basis of too many recipients for a single > message-id, where "too many" varies from 6 to 30. You'd think they'd > never heard of organization mailing lists.

Re: [mailop] ECDSA DKIM validation?

2023-12-21 Thread Stuart Henderson via mailop
On 2023/12/21 11:44, John R Levine via mailop wrote: > > On Thu 21/Dec/2023 10:37:52 +0100 John Levine via mailop wrote: > > > Yes, your code should handle them. No, that doesn't mean you should > > > sign with them. > > > > Yup. The question was why Gmail doesn't /verify/ ed25519 signatures. >

Re: [mailop] script to collect SPF addresses by domain?

2023-10-31 Thread Stuart Henderson via mailop
On 2023/10/30 20:28, Peter Nicolai Mathias Hansteen via mailop wrote: > > On 30 Oct 2023, at 20:01, Michael W. Lucas via mailop > wrote: > > Hi, > > Trying to not reinvent the wheel here. > > I want to create an allow list of the big providers that retry from > multiple

Re: [mailop] New Gmail sender guidelines

2023-10-11 Thread Stuart Henderson via mailop
On 2023/10/11 15:05, Giovanni Bechis via mailop wrote: > Hi, > starting from 02/2024 Gmail will require authenticated email for senders who > send 5,000 or more messages a day to Gmail accounts. > However, authenticated email requirements seems to have started today, in the > past days those

Re: [mailop] IPv6 capable servers send with IPv4 to me

2023-10-06 Thread Stuart Henderson via mailop
On 2023/10/06 13:08, Marco via mailop wrote: > Am 06.10.2023 schrieb Bjørn Bürger via mailop : > > > 15 yrs ago I would have agreed to Wietse Venemas view, but nowadays > > this kind of "solution" is just adding confusion and makes debugging > > harder for everyone, unfortunately. > > And sadly

Re: [mailop] IPv6 capable servers send with IPv4 to me

2023-10-06 Thread Stuart Henderson via mailop
On 2023/10/06 11:13, Marco via mailop wrote: > Am 06.10.2023 schrieb Stuart Henderson : > > > Networks single-homed behind cogent can't connect to networks > > single-homed behind he.net and vice-versa. > > Is that related to PMTU-blackhole? > Who is guilty for t

Re: [mailop] IPv6 capable servers send with IPv4 to me

2023-10-06 Thread Stuart Henderson via mailop
On 2023/10/06 11:01, Marco wrote: > Am 06.10.2023 schrieb Stuart Henderson : > > > On 2023/10/06 10:09, Marco via mailop wrote: > > > Hello! > > > > > > I have an IPv6 and IPv4 accessible server, both protocols work and I > > > receive mails with I

Re: [mailop] IPv6 capable servers send with IPv4 to me

2023-10-06 Thread Stuart Henderson via mailop
On 2023/10/06 10:09, Marco via mailop wrote: > Hello! > > I have an IPv6 and IPv4 accessible server, both protocols work and I > receive mails with IPv6 too. > Although, I see that certain IPv6 capable servers send with IPv4 in > some cases. > I am not aware of any outages and the strange things

Re: [mailop] Google groups spam

2023-02-16 Thread Stuart Henderson via mailop
On 2023/02/16 07:17, MRob via mailop wrote: > Forgive if its already been discused but is googel already aware of ongoing > Google Groups spam? Will they stop this? Lots of recurring mails with arabic > subject and body from nonsense group names like "hghgjhghjgb": > >

Re: [mailop] IBM: [to unsubscribe] please enter your first, last name, email and country

2022-12-07 Thread Stuart Henderson via mailop
On 2022/12/06 16:43, Michael Peddemors via mailop wrote: > > People who 'gather' or require information on the opt-out pages, even if it > is just the email address (you already sent to our email address) And this is made worse because there are plenty of cases where the recipient won't know the

Re: [mailop] SPF (and other email security protocols) Survey

2022-11-21 Thread Stuart Henderson via mailop
On 2022/11/21 13:55, Taejoong (tijay) Chung via mailop wrote: > Please note that we do NOT collect any personal information, thus > the Institutional Review Board (IRB) at Virginia Tech determined the > survey as Non-Human Subjects Research. eh, that doesn't make any kind of sense.

Re: [mailop] tls certificates

2022-11-21 Thread Stuart Henderson via mailop
On 2022/11/21 10:07, Julian Bradfield via mailop wrote: > So my question is, if it is certificates (rather than ciphers - my > cipher suites are all gnutls default, so should be current), what do I The type of alert should indicate ahether it's ciphers or certs. > need to do to get everybody to

Re: [mailop] Odd DNS-cache avoidance queries (Spam Assassin / Unbound / AWS)

2022-09-13 Thread Stuart Henderson via mailop
On 2022/09/13 09:20, Cyril - ImprovMX via mailop wrote: > Nice! Good catch about the dns-0x20 implementation! I must have copy/pasted > some properties > without looking much into it. That is unlikely to be causing an actual problem here though. > > 2. The other issue is even weirder. SA is

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-20 Thread Stuart Henderson via mailop
On 2022/08/19 10:31, Brandon Long via mailop wrote: > > Who thinks managing and refreshing client TLS certificates is easier than > OAUTH2? It's certainly easier than getting client IDs registered with whichever providers might be used. ___ mailop

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-20 Thread Stuart Henderson via mailop
On 2022/08/20 06:55, Alexander Huynh via mailop wrote: > Shameless plug: this discussion has gotten me to open-source my Office 365 > OAuth script, which should be plug-and-play compatible with mail systems > that can run python3 scripts and receive XOAUTH2 JWTs via stdin. > > If you'd like to

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Stuart Henderson via mailop
On 2022/08/19 09:08, Gellner, Oliver via mailop wrote: > Hello, > IMAP, SMTP etc are still being supported with Office365. What gets > disabled is Basic Auth for some services. Microsoft announced the > decomission of Basic Authentication three years ago and all tenant > administrators have been

Re: [mailop] I understand less and less why I accept any mail at all from Sendgrid

2022-08-15 Thread Stuart Henderson via mailop
On 2022/08/16 02:03, Ángel via mailop wrote: > On 2022-08-13 at 18:46 -0400, John Levine wrote: > > Subject: IP address blacklisted(Child Pornography Act 1996 violated) > > > > Hello, > > > > We have found instances of child pornography accessed from your IP > > address. This is a punishable

Re: [mailop] Disabling TLS 1.0 and 1.1 for MTA to MTA communication

2022-08-03 Thread Stuart Henderson via mailop
On 2022/08/03 14:01, Jarland Donnell via mailop wrote: > > The MTA-MTA encryption is weak at best: because the client doesn't > > (can't, actually) verify that the certificate is appropriate for that > > MTA, any MITM attack is easily accomplished. End users get virtually no > > indication that

Re: [mailop] Question for Google -- how am I able to be added to google groups without opting in?

2022-07-04 Thread Stuart Henderson via mailop
On 2022/07/02 20:00, Suresh Ramasubramanian via mailop wrote: > Spammers in the middle east and Pakistan seem to love doing this. I finally > set my google > settings to “don’t add me to any google group without my requesting to join > it” and that solved > the issue, at least from the POV of

Re: [mailop] No MX? use A/AAAA

2022-06-21 Thread Stuart Henderson via mailop
On 2022/06/20 15:39, Jarland Donnell via mailop wrote: > I've seen it work but frankly, I don't bother with it anymore. No MX for > sender or recipient, I don't send it. This rspamd module right here: > https://rspamd.com/doc/modules/mx_check.html That is not what mx_check does at all. It looks

Re: [mailop] Question for Google -- how am I able to be added to google groups without opting in?

2022-06-17 Thread Stuart Henderson via mailop
On 2022/06/16 19:42, Jaroslaw Rafa via mailop wrote: > However, I am not sure if Google Groups sends an email to the user who is > being added informing him/her about that if you do not enter any "welcome > message" in the appropriate field when adding users. In my opinion, for > users who are

Re: [mailop] Why TLS is better without STARTTLS

2021-08-10 Thread Stuart Henderson via mailop
On 2021/08/10 10:28, Andrew C Aitchison via mailop wrote: > On Mon, 9 Aug 2021, Thomas Walter via mailop wrote: > > > https://nostarttls.secvuln.info/ > > > > Their conclusion is that all vulnerabilities rely on the transition of > > an insecure connection to a secure connection. > > If

Re: [mailop] free.fr / tdsnet.com / zeelandnet.nl bounces

2021-08-07 Thread Stuart Henderson via mailop
On 2021/08/06 11:31, Stephen Frost via mailop wrote: > Greetings, > > We have quite a few folks with @free.fr addresses, and a few with the > other domains listed in $subject, on the @postgresql.org mailing lists > and recently we've started getting bounces back for some of the emails > we send

Re: [mailop] Outlook strange behavior from Outlook.com (not a surprise... but...)

2021-06-16 Thread Stuart Henderson via mailop
On 2021/06/16 09:04, Xavier Beaudouin via mailop wrote: > Hello there, > > I have a setup with 2 MX : > > domain.tld mx 10 mx1.domain.tld > domain.tld mx 30 mx3.domain.tld > > For some operational reason mx3 replys all mail with a 454 which is TEMPORALY > error... : > Jun 14 23:22:55 mx3

Re: [mailop] DANE for SMTP Survey

2021-06-10 Thread Stuart Henderson via mailop
On 2021/06/10 15:48, Moritz Müller via mailop wrote: > Together with researchers from Seoul National University, Virginia Tech and > the University of Twente, we would like to understand which challenges > operators face when deploying DANE for SMTP. > Also, we would like to understand how

Re: [mailop] Greylisting never passing on retry

2021-04-21 Thread Stuart Henderson via mailop
On 2021/04/21 10:23, Neil Youngman via mailop wrote: > On 21/04/2021 11:00, Chris wrote: > > Aside from the possibility that the message is simply wrong, or the > > implementation broken, is your mail server acting like most other > > servers when presented with a failure (soft or hard)? > > > >

Re: [mailop] Greylisting never passing on retry

2021-04-21 Thread Stuart Henderson via mailop
On 2021/04/21 12:55, Tim Bray via mailop wrote: > Like fire up an exim? This exim? https://www.openwall.com/lists/oss-security/2021/04/21/1 "The current Exim versions (and likely older versions too) suffer from several exploitable vulnerabilities. These vulnerabilities were reported by Qualys

Re: [mailop] GMail DKIM support for ed25519-sha256

2021-04-15 Thread Stuart Henderson via mailop
On 2021/04/15 10:58, Odhiambo Washington via mailop wrote: > > On Tue, Apr 13, 2021 at 6:44 PM Stuart Henderson via mailop < > mailop@mailop.org> wrote: > > I don't know specifically about gmail, but generally support for > ed25519 > in DKIM is still a bit

Re: [mailop] GMail DKIM support for ed25519-sha256

2021-04-13 Thread Stuart Henderson via mailop
On 2021/04/13 11:11, Wolfgang Rosenauer via mailop wrote: > Hi, > > I'm seeing issues with GMail not recognizing a valid DKIM signature. > > Message is correctly signed like: > DKIM-Signature: v=1; a=ed25519-sha256; > > GMail reports > dkim=neutral (no key) > > while most DKIM validators

Re: [mailop] Autoresponder for EAI mail

2021-02-04 Thread Stuart Henderson via mailop
On 2021/02/04 16:20, John Levine via mailop wrote: > Is anyone aware of autoresponder code that works with UTF8SMTP mail? It's > not hard > to write one, but why reinvent a wheel if I can steal the code. Not sure about this, but.. > Also, has anyone ever written down in one place the best

Re: [mailop] Current OSS anti-spam software best practice?

2020-12-16 Thread Stuart Henderson via mailop
On 2020/12/16 09:03, Dr. Christopher Kunz via mailop wrote: > We are still using Spam Assassin on our main setup, but I feel that it's not > aggressive enough to cope with current spam patterns, especially with > regards to its rather conservative bayesian learning parameters. > > Is it generally

Re: [mailop] open RBL and RHSBL lists these days?

2020-12-14 Thread Stuart Henderson via mailop
On 2020/12/15 00:28, Mary via mailop wrote: > > Indeed, I am not blocking it for two reasons: > > 1) I was never sure why 50% of all gmail spam seem to originate from > trix.bounces.google. > > 2) The other 50% has regular gmail received headers. > > > For example, trix.bounces.google spam

Re: [mailop] scam prevention

2020-12-08 Thread Stuart Henderson via mailop
On 2020/12/08 13:09, Tim Bray via mailop wrote: > On 08/12/2020 12:32, Mary via mailop wrote: > > A solid idea, but you would have to avoid modifications to DKIM signed > > emails that sign the From header field via the h= tag as specified by > > RFC6376 secton 5.4 and 5.4.1. > > They aren't

Re: [mailop] New server email being treated as spam by Google

2020-11-21 Thread Stuart Henderson via mailop
On 2020/11/21 13:59, Thomas Walter via mailop wrote: > Hello, > > On 21.11.20 12:54, Jaroslaw Rafa via mailop wrote: > > You can configure your MTA to disable IPv6 only for delivery to Google - at > > least with Postfix it should be possible. > > how would one do that?

Re: [mailop] New server email being treated as spam by Google

2020-11-19 Thread Stuart Henderson via mailop
On 2020/11/19 13:47, Paul Waring via mailop wrote: > On Thu, Nov 19, 2020 at 01:29:48PM +, Chris Woods wrote: > > I dropped the TTL on the MX, SPF, DKIM and DMARC records to 300 about 36 > > hours before starting the migration, and published the new DKIM key as > > well. I left the

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-07 Thread Stuart Henderson via mailop
On 2020/07/07 10:27, Noel Butler via mailop wrote: > On 07/07/2020 01:01, Johann Klasek via mailop wrote: > > > I have been told that DoH is set into place to solve the privacy > problem. On a small DNS workgroup meeting I saw a presentation on how > they statistically identify users

Re: [mailop] How to allow different domain in envelope and header from? (Is Gmails DMARC check broken?)

2020-06-04 Thread Stuart Henderson via mailop
On 2020/06/04 12:05, Andrew C Aitchison via mailop wrote: > On Thu, 4 Jun 2020, Benoît Panizzon via mailop wrote: > > [ Not replying to the list as this may be off topic, > but you are welcome to bring it back on list if you wish. ] Unfortunately this is one of those mailing lists using

Re: [mailop] Force double opt in for marketing list companies per email address

2020-06-02 Thread Stuart Henderson via mailop
On 2020/06/02 14:35, Tim Bray via mailop wrote: > My question to mailchimp et al: > > Is there way I could force my email address to be double opt in? Like > register with you, confirm my address, and then any of your customers who > try to add me, I get a `please confirm` email. This, but

Re: [mailop] Google: 'Low reputation of the sending domain'

2020-06-02 Thread Stuart Henderson via mailop
On 2020/06/02 10:37, Benoit Panizzon via mailop wrote: > <<< 550-5.7.1 [2001:4060:dead:beef::1 19] Our system has detected that > this > <<< 550-5.7.1 message is likely suspicious due to the very low reputation of > the > <<< 550-5.7.1 sending domain. "due to the very low reputation of the

[mailop] MX fallback and TLS problems

2020-05-19 Thread Stuart Henderson via mailop
It seems that if gmail has a problem making a TLS connection to the highest priority MX, it does not fallback to lower priority ones. Is this common with other senders too? ___ mailop mailing list mailop@mailop.org

Re: [mailop] mailbox auth for system integration

2020-02-07 Thread Stuart Henderson via mailop
On 2020/02/07 14:36, Philip Paeps via mailop wrote: > On 2020-02-07 14:32:50 (-0800), Stuart Henderson wrote: > > On 2020/02/07 13:41, Philip Paeps via mailop wrote: > > > I think the only viable solution will be to set up forwarders > > > > Or pass it t

Re: [mailop] mailbox auth for system integration

2020-02-07 Thread Stuart Henderson via mailop
On 2020/02/07 13:41, Philip Paeps via mailop wrote: > I think the only viable solution will be to set up forwarders Or pass it through a proxy which knows how to authenticate. I'm not aware of any that have been written yet but it shouldn't be too complex. > Unless fetchmail starts supporting

Re: [mailop] +-addressing support

2020-02-06 Thread Stuart Henderson via mailop
On 2020/02/06 17:02, Bill Cole via mailop wrote: > On 6 Feb 2020, at 16:04, Jaroslaw Rafa via mailop wrote: > > > Dnia 6.02.2020 o godz. 12:43:52 Philip Paeps via mailop pisze: > > > > > > Why are there still setups in 2020 that don't support this? > > > > Especially that all main MTAs have

Re: [mailop] Abandoning self hosting and moving to Protonmail - experiences?

2020-01-27 Thread Stuart Henderson via mailop
On 2020/01/27 13:57, Lennert Van Alboom via mailop wrote: > Alternatives? fastmail ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] suddenly sendmail cannot make tls connections

2020-01-25 Thread Stuart Henderson via mailop
On 2020/01/24 21:07, John Covici via mailop wrote: > So, I have now solved the problem (sort of). On my other box, I had > no trouble connecting to at least one of those servers and so I had to > figure out why. So, I looked at the /etc/ssl/openssl.cnf and compared > them on both systems and

Re: [mailop] mx abuse listed in spamhaus?

2020-01-14 Thread Stuart Henderson via mailop
On 2020/01/14 12:32, Laura Atkins wrote: > > On 14 Jan 2020, at 11:58, Stuart Henderson via mailop > wrote: > > On 2020/01/14 11:37, Ken O'Driscoll via mailop wrote: > > On Tue, 2020-01-14 at 10:44 +, J Orlando Letra via mailop wrote: > >

Re: [mailop] mx abuse listed in spamhaus?

2020-01-14 Thread Stuart Henderson via mailop
On 2020/01/14 11:37, Ken O'Driscoll via mailop wrote: > On Tue, 2020-01-14 at 10:44 +, J Orlando Letra via mailop wrote: > > does any one have this problem? > > > > As per https://www.abuseat.org/lookup.cgi?ip=64.57.183.53 the IP was > detected sending or relaying IP traffic which matches a

Re: [mailop] G-Suite removing LSA functionality

2019-12-16 Thread Stuart Henderson via mailop
On 2019/12/16 12:42, Brandon Long via mailop wrote: > As for tools, last year I added support for OAUTHBEARER to mutt but by > shelling out to https:// > github.com/google/gmail-oauth2-tools/blob/master/python/oauth2.py for > generating tokens.  The > sasl level code to send the tokens is pretty

Re: [mailop] Can someone write me a prescription for a sane MTA? I'm allergic to Postfix.

2019-12-10 Thread Stuart Henderson via mailop
On 2019/12/10 08:31, John Covici via mailop wrote: > So, what would be an appropriate replacement for procmail, I think in > my distro its a hard dependency of sendmail, but maybe there is > something better? If you use software which already implements Sieve (Dovecot and Cyrus are probably the

Re: [mailop] Can someone write me a prescription for a sane MTA? I'm allergic to Postfix.

2019-12-10 Thread Stuart Henderson via mailop
On 2019/12/09 14:16, Jaroslaw Rafa via mailop wrote: > Well... I'd rather do such things in procmail Be aware, procmail's last maintainer said, "the code is not safe and should not be used as a basis for any further work". https://marc.info/?l=openbsd-ports=141634350915839=2

Re: [mailop] Moving to a new outbound IP range

2019-07-01 Thread Stuart Henderson via mailop
On 2019/07/01 15:39, Ken O'Driscoll via mailop wrote: > On Mon, 2019-07-01 at 12:55 +0100, Simplelists - Andrew Beverley via mailop > wrote: > > Would it be better to go for the brand new block? Obviously any > > existing block could be checked in DNSBLs etc, but are there any > > advantages of

Re: [mailop] CVE-2019-10149 Exim 4.87 - 4.91 possible remote exploit

2019-06-05 Thread Stuart Henderson via mailop
On 2019/06/05 17:20, Heiko Schlittermann via mailop wrote: > The fix for CVE-2019-10149 is public now. > > https://git.exim.org/exim.git > Branch exim-4_91+fixes. > > Thank you to > - Qualys for reporting it. > - Jeremy for fixing it. > - you for using Exim. > > Sorry for

Re: [mailop] Hetzner blocking Gmail IPv6?

2019-05-15 Thread Stuart Henderson via mailop
On 2019/05/15 19:30, Yiorgos [George] Adamopoulos via mailop wrote: > I just tried to reply to a Hetzner support request from our GSuite > account and got back this: > > 550 Unfortunately we cannot currently accept your e-mail due to the > amount of spam we are receiving from your server. Please

Re: [mailop] Mailing List Address Formats..

2019-01-11 Thread Stuart Henderson
On 2019/01/11 10:07, Michael Peddemors wrote: > For the record, we aren't speaking about 'Friendly Names', but the userpart > of the addr-spec address > > But a pointer to an RFC where it is permitted, that I don't find.. RFC5322 and predecessors. Either dot-atom or quoted-string are permitted