Re: Documentation suggestion

2015-06-08 Thread Wietse Venema
Andrew Beverley: On Mon, 2015-06-08 at 11:58 -0400, Wietse Venema wrote: What other TLS settings do you consider required? Postfix does not need a client certificate for sending email. My mistake. I'd added in some of those settings when I couldn't get it working. In actual fact I was

Re: what is the reason for THIS spf failure?

2015-06-08 Thread Wietse Venema
M. Fioretti: As confirmation of my earlier answer, please note the Received: and Receive-SPF headers of the rejected message, which do NOT report 81.88.62.172 as source, or spf failures... So THEY acknowledge I emailed from 213.179.193.33, THEY say SPF-pass, then THEY reject because of

Re: backwards-compatible settings

2015-06-08 Thread Alex Regan
Hi, I've upgraded from postfix-2.10.5 on fedora20 to postfix-3.0.1 on fedora22 and receiving the backwards-compatibility warning. I've checked all of the settings on the COMPATIBILITY_README page, and adjusted the relay_domains setting, which was the only one that applied to my config. I'm

Re: what is the reason for THIS spf failure?

2015-06-08 Thread M. Fioretti
On 2015-06-08 17:46, DTNX Postmaster wrote: Have you followed the link in the error message, and read the explanation? Of course I have. But, with all respect, it have to ask if YOU read my email. If I send email from the same computer, webmail etc.. I only get spf failure from that and

Re: what is the reason for THIS spf failure?

2015-06-08 Thread M. Fioretti
On 2015-06-08 20:06, M. Fioretti wrote: On 2015-06-08 17:46, DTNX Postmaster wrote: Have you followed the link in the error message, and read the explanation? Of course I have. But, with all respect, it have to ask if YOU read my email. As confirmation of my earlier answer, please note

Re: backwards-compatible settings

2015-06-08 Thread Alex Regan
Hi, I've upgraded from postfix-2.10.5 on fedora20 to postfix-3.0.1 on fedora22 and receiving the backwards-compatibility warning. I've checked all of the settings on the COMPATIBILITY_README page, and adjusted the relay_domains setting, which was the only one that applied to my config. I'm

Re: backwards-compatible settings

2015-06-08 Thread Wietse Venema
Alex Regan: Hi, I've upgraded from postfix-2.10.5 on fedora20 to postfix-3.0.1 on fedora22 and receiving the backwards-compatibility warning. I've checked all of the settings on the COMPATIBILITY_README page, and adjusted the relay_domains setting, which was the only one that applied to

Re: Very Basic SPF Record

2015-06-08 Thread Michael B Allen
On Tue, Jun 9, 2015 at 12:42 AM, DTNX Postmaster postmas...@dtnx.net wrote: On 09 Jun 2015, at 05:20, Michael B Allen iop...@gmail.com wrote: I have never setup SPF records before. I have one server doing everything although it has two names www.busicorp.com and mail.busicorp.com. My

Re: backwards-compatible settings

2015-06-08 Thread Viktor Dukhovni
On Mon, Jun 08, 2015 at 09:30:59PM -0400, Alex Regan wrote: Jun 8 21:20:03 mail02 postfix[22018]: Postfix is running with backwards-compatible default settings Meaning the compatibility level is not set the requisuite minimum value. This applies whether or not the relevant parameters have

Re: what is the reason for THIS spf failure?

2015-06-08 Thread DTNX Postmaster
On 08 Jun 2015, at 20:14, M. Fioretti mfiore...@nexaima.net wrote: On 2015-06-08 20:06, M. Fioretti wrote: On 2015-06-08 17:46, DTNX Postmaster wrote: Have you followed the link in the error message, and read the explanation? Of course I have. But, with all respect, it have to ask if YOU

Re: Very Basic SPF Record

2015-06-08 Thread DTNX Postmaster
On 09 Jun 2015, at 05:20, Michael B Allen iop...@gmail.com wrote: I have never setup SPF records before. I have one server doing everything although it has two names www.busicorp.com and mail.busicorp.com. My understanding is the following is probably what I want: v=spf1 mx ~all

Re: what is the reason for THIS spf failure?

2015-06-08 Thread DTNX Postmaster
I think we're wandering into the reasons why SPF discussions are usually off-limits on this mailinglist, again. For further assistance with setting up SPF, and debugging the quirks you'll run into, use the support resources dedicated to the topic, such as the ones listed on the OpenSPF

Very Basic SPF Record

2015-06-08 Thread Michael B Allen
I have never setup SPF records before. I have one server doing everything although it has two names www.busicorp.com and mail.busicorp.com. My understanding is the following is probably what I want: v=spf1 mx ~all Would you agree? Mike

Re: Return-Path gets rewritten

2015-06-08 Thread Peter
Yes mate, bingo! You saved another day that I'd probably spend on troubleshooting this. http://www.postfix.org/postconf.5.html#masquerade_domains This is the answer P. On Mon, Jun 8, 2015, at 11:31 AM, Peter wrote: On 06/08/2015 08:58 PM, Peter wrote: I use sendmail -f

Re: Return-Path gets rewritten

2015-06-08 Thread Peter
On 06/08/2015 08:58 PM, Peter wrote: I use sendmail -f nore...@mail.example.com to send emails I hope you actually have some sort of program, script or human monitoring that address to handle bounces. I see that the from address is already altered in the postfix log file to

Return-Path gets rewritten

2015-06-08 Thread Peter
I have been changing my mailing addresses from example.com to sub domains - say mail.example.com to configure no-reply addresses there. I use sendmail -f nore...@mail.example.com to send emails to make sure the Return-Path is correct. My mail delivery chain looks as follows: SENDING SERVER --

Re: backwards-compatible settings

2015-06-08 Thread Wietse Venema
Alex Regan: Hi, I've upgraded from postfix-2.10.5 on fedora20 to postfix-3.0.1 on fedora22 and receiving the backwards-compatibility warning. I've checked all of the settings on the COMPATIBILITY_README page, and adjusted the relay_domains setting, which was the only one that applied to

what is the reason for THIS spf failure?

2015-06-08 Thread M. Fioretti
Greetings, I had my SPF/Dkim setup all set, also thanks to help from this list.. until 2/3 days ago. Since then, I have received 2/3 rejected messages, from unrelated servers, all very similar to the one below, from which I have only removed the subject and original body. I sent that email 10

Documentation suggestion

2015-06-08 Thread Andrew Beverley
Hi, Just a quick suggestion for the excellent Postfix documentation. Given that SASL authentication over TLS is becoming more prevalent, I think it would be worth adding a small note to this section: http://www.postfix.org/SOHO_README.html#client_sasl_enable stating that smtp_use_tls = yes is

Re: what is the reason for THIS spf failure?

2015-06-08 Thread DTNX Postmaster
On 08 Jun 2015, at 18:03, M. Fioretti mfiore...@nexaima.net wrote: I had my SPF/Dkim setup all set, also thanks to help from this list.. until 2/3 days ago. Since then, I have received 2/3 rejected messages, from unrelated servers, all very similar to the one below, from which I have only

Re: Documentation suggestion

2015-06-08 Thread Viktor Dukhovni
On Mon, Jun 08, 2015 at 04:35:01PM +0100, Andrew Beverley wrote: Given that SASL authentication over TLS is becoming more prevalent, I think it would be worth adding a small note to this section: http://www.postfix.org/SOHO_README.html#client_sasl_enable stating that smtp_use_tls = yes is

Re: Documentation suggestion

2015-06-08 Thread Andrew Beverley
On Mon, 2015-06-08 at 11:58 -0400, Wietse Venema wrote: What other TLS settings do you consider required? Postfix does not need a client certificate for sending email. My mistake. I'd added in some of those settings when I couldn't get it working. In actual fact I was missing: