Re: DANE logs

2017-10-13 Thread Viktor Dukhovni
On Fri, Oct 13, 2017 at 08:35:10PM +1030, Mal wrote: > > With DANE turned on, when you send email to a destination with > > DNSSEC and correctly configured TLSA records, the delivery is logged > > as "Verified" at smtp_tls_loglevel=1. Barring any explicit tls > > policies for some special

Re: recommended smtp proxy script?

2017-10-13 Thread Håkon Alstadheim
Den 13. okt. 2017 18:40, skrev Matus UHLAR - fantomas: > On 13.10.17 12:25, Håkon Alstadheim wrote: >> I'm thinking about hacking on a before queue proxy filter, but the link > > the only important part is - you apparently should not use milter on > submission ports. Forgot answering this

Re: recommended smtp proxy script?

2017-10-13 Thread Håkon Alstadheim
Den 13. okt. 2017 18:40, skrev Matus UHLAR - fantomas: > On 13.10.17 12:25, Håkon Alstadheim wrote: >> I'm thinking about hacking on a before queue proxy filter, but the link >> to suggested perl framework at >> http://www.postfix.org/SMTPD_PROXY_README.html seems dead. I googled >> "Bennett

Re: recommended smtp proxy script?

2017-10-13 Thread Daniele Nicolodi
On 13/10/17 15:30, Robert Schetterer wrote: > Am 13.10.2017 um 20:42 schrieb Daniele Nicolodi: >> On 13/10/17 10:40, Matus UHLAR - fantomas wrote: >>> the only important part is - you apparently should not use milter on >>> submission ports. >> >> Why? >> > > some milters are fine to use with

Re: recommended smtp proxy script?

2017-10-13 Thread Robert Schetterer
Am 13.10.2017 um 20:42 schrieb Daniele Nicolodi: > On 13/10/17 10:40, Matus UHLAR - fantomas wrote: >> the only important part is - you apparently should not use milter on >> submission ports. > > Why? > > Cheers, > Dan > some milters are fine to use with submission others not, i.e

Re: recommended smtp proxy script?

2017-10-13 Thread Daniele Nicolodi
On 13/10/17 10:40, Matus UHLAR - fantomas wrote: > the only important part is - you apparently should not use milter on > submission ports. Why? Cheers, Dan

Re: recommended smtp proxy script?

2017-10-13 Thread Matus UHLAR - fantomas
On 13.10.17 12:25, Håkon Alstadheim wrote: I'm thinking about hacking on a before queue proxy filter, but the link to suggested perl framework at http://www.postfix.org/SMTPD_PROXY_README.html seems dead. I googled "Bennett Todd smtp proxy", which brings mee to a git repo last updated five years

recommended smtp proxy script?

2017-10-13 Thread Håkon Alstadheim
I'm thinking about hacking on a before queue proxy filter, but the link to suggested perl framework at http://www.postfix.org/SMTPD_PROXY_README.html seems dead. I googled "Bennett Todd smtp proxy", which brings mee to a git repo last updated five years ago. What is the current best starting

Re: DANE logs

2017-10-13 Thread Mal
Very helpful.. On 13/10/2017 7:13 PM, Viktor Dukhovni wrote: > On Fri, Oct 13, 2017 at 04:53:57AM +, Mal wrote: > >> Wondering if Postfix logs any DANE operations? > > With DANE turned on, when you send email to a destination with > DNSSEC and correctly configured TLSA records, the

Re: DANE logs

2017-10-13 Thread Viktor Dukhovni
On Fri, Oct 13, 2017 at 04:53:57AM +, Mal wrote: > Wondering if Postfix logs any DANE operations? With DANE turned on, when you send email to a destination with DNSSEC and correctly configured TLSA records, the delivery is logged as "Verified" at smtp_tls_loglevel=1. Barring any explicit

Re: DANE logs

2017-10-13 Thread wilfried.es...@essignetz.de
Possibly setting smtp_tls_loglevel to "1", or higher, will help. A warning from the docs: "Do not use "smtp_tls_loglevel = 2" or higher except in case of problems. Use of loglevel 4 is strongly discouraged." (Same with smtpd_tls_loglevel for incomming connections.) Willi Am 13.10.2017 um