Re: Try dane and still got "Untrusted TLS connection..."

2017-10-26 Thread Viktor Dukhovni
> On Oct 27, 2017, at 12:34 AM, g...@pztop.com wrote: > > For the DNS part (condition 1) I run a local bind DNS server. The named.conf > have lines: > > forward only; > forwarders { > 8.8.8.8; > 8.8.4.4; > }; > > dnssec-enable yes; > dnssec-validation yes; Personally, I would not

Re: Virtual Domains/ Users

2017-10-26 Thread cacook
On 10/26/2017 03:36 PM, Ralph Seichter wrote: > On 26.10.17 23:29, cac...@quantum-equities.com wrote: > >> it appears to me that Postfix has evolved organically (Read: >> disorganized) as have many legacy applications like Apache used to be. >> The documentation you refer to is there alright, but

Re: Try dane and still got "Untrusted TLS connection..."

2017-10-26 Thread gao
On 2017-10-26 17:02, Viktor Dukhovni wrote: >> On Oct 26, 2017, at 5:08 PM, Gao wrote: >> >> I am trying to setup dane on my mail server. > > Thanks for been an early adopter. Your enthusiasm is appreciated. > Don't forget to *monitor* your deployment, by periodically (at >

Re: Virtual Domains/ Users

2017-10-26 Thread Bill Cole
On 26 Oct 2017, at 22:55 (-0400), Viktor Dukhovni wrote: You're wrong of course, Postfix has been designed and implemented with much care. What we've not done is maintained a free book along with the software. Postfix comes with "reference documentation", and topic-specific tutorials:

Re: Virtual Domains/ Users

2017-10-26 Thread Viktor Dukhovni
> On Oct 26, 2017, at 5:29 PM, cac...@quantum-equities.com wrote: > > I am surprised with this sprawl, in the 21st Century. In 30 minutes > I've figured out and implemented DKIM. DKIM is comparatively simple, it does just one thing. And yet, you really should fix your DNS, you may think you

Re: Virtual Domains/ Users

2017-10-26 Thread Benny Pedersen
you dont add all virtual domains to ptr, who are you being misguiden from ? :( On 26. okt. 2017 21.37.02 cac...@quantum-equities.com wrote: On 10/26/2017 12:21 PM, cac...@quantum-equities.com wrote: the whole fact that mail was SENT by thunderbird has nothing to do with the fact that you

Re: Virtual Domains/ Users

2017-10-26 Thread Richard
> Date: Thursday, October 26, 2017 12:36:37 -0700 > From: cac...@quantum-equities.com > > On 10/26/2017 12:21 PM, cac...@quantum-equities.com wrote: >>> the whole fact that mail was SENT by thunderbird has nothing to do >>> with the >>> fact that you need mail server on quantum-equities.com if

Re: Try dane and still got "Untrusted TLS connection..."

2017-10-26 Thread Viktor Dukhovni
> On Oct 26, 2017, at 5:08 PM, Gao wrote: > > I am trying to setup dane on my mail server. Thanks for been an early adopter. Your enthusiasm is appreciated. Don't forget to *monitor* your deployment, by periodically (at least daily) checking that your DNSSEC is working and

[SOLVED] relayhost GMAIL submission (port 587)

2017-10-26 Thread sruckh
On 2017-10-26 11:23, wie...@porcupine.org wrote: Viktor Dukhovni: > On Oct 26, 2017, at 12:12 PM, sru...@gemneye.org wrote: > > #relayhost = [smtp.gmail.com]:587 > #smtpd_sasl_auth_enable = yes Look closely, that line has "smtpd_..." while all the ones below have "smtp_...". Check the docs.

Re: Try dane and still got "Untrusted TLS connection..."

2017-10-26 Thread Gao
On 2017-10-26 02:58 PM, Christian Kivalo wrote: Am 26. Oktober 2017 23:08:16 MESZ schrieb Gao : Hi, I am trying to setup dane on my mail server. But I never seen a "Verified TLS connection..." in the log. I always got: Oct 26 13:52:23 cac postfix/smtp[18165]: Untrusted TLS

Re: Virtual Domains/ Users

2017-10-26 Thread Ralph Seichter
On 26.10.17 23:29, cac...@quantum-equities.com wrote: > it appears to me that Postfix has evolved organically (Read: > disorganized) as have many legacy applications like Apache used to be. > The documentation you refer to is there alright, but it's all about > bit-twiddling, nothing about

Re: Forward local user email or another local user

2017-10-26 Thread Bill Cole
On 26 Oct 2017, at 14:24, cac...@quantum-equities.com wrote: So, passwords -can- be used with virtual users for SMTP? Yes. Any authentication identity can be used for Postfix's SMTP/Submission authentication because Postfix doesn't really do the authentication. Authentication in Postfix

Re: Try dane and still got "Untrusted TLS connection..."

2017-10-26 Thread Christian Kivalo
Am 26. Oktober 2017 23:08:16 MESZ schrieb Gao : >Hi, > >I am trying to setup dane on my mail server. But I never seen a >"Verified TLS connection..." in the log. I always got: >Oct 26 13:52:23 cac postfix/smtp[18165]: Untrusted TLS connection >established to

Re: Virtual Domains/ Users

2017-10-26 Thread Larry Stone
> On Oct 26, 2017, at 16:29, cac...@quantum-equities.com wrote: > I am surprised with this sprawl, in the 21st Century. In 30 minutes I've > figured out and implemented DKIM. But it appears to me that Postfix has > evolved organically (Read: disorganized) as have many legacy applications >

Try dane and still got "Untrusted TLS connection..."

2017-10-26 Thread Gao
Hi, I am trying to setup dane on my mail server. But I never seen a "Verified TLS connection..." in the log. I always got: Oct 26 13:52:23 cac postfix/smtp[18165]: Untrusted TLS connection established to gmail-smtp-in.l.google.com[74.125.124.26]:25: TLSv1.2 with cipher

Re: Virtual Domains/ Users

2017-10-26 Thread cacook
On 10/26/2017 12:21 PM, cac...@quantum-equities.com wrote: >> the whole fact that mail was SENT by thunderbird has nothing to do >> with the >> fact that you need mail server on quantum-equities.com if you want to >> RECEIVE mail for quantum-equities.com. >> >> configure postfix on

Re: Forward local user email or another local user

2017-10-26 Thread Jos Chrispijn
Op 26-10-2017 om 20:17 schreef Matus UHLAR - fantomas: if you want to send mail to a user Y and you don't want to use password of user Y, but you must use a password, you must use password of user X (whatever X and Y mean) It is all about _existing_ user accounts Using (virtual) aliases

Re: Virtual Domains/ Users

2017-10-26 Thread cacook
> the whole fact that mail was SENT by thunderbird has nothing to do > with the > fact that you need mail server on quantum-equities.com if you want to > RECEIVE mail for quantum-equities.com. > > configure postfix on quantum-equities.com that will have > "quantum-equities.com" in mydestination. >

Re: Minimun postfix

2017-10-26 Thread Viktor Dukhovni
> On Oct 26, 2017, at 2:39 PM, 9acca9 wrote: > > "2. Configure Postfix so it accepts mail that is destined for the Zimbra > server, whatever domain that is." > > And that would be?? http://www.postfix.org/BASIC_CONFIGURATION_README.html

Re: Minimun postfix

2017-10-26 Thread 9acca9
But we are gonna use zimbra in our private local server, and postfix from the hosting provider (mail relay provider). We just want probe the mechanism from zimbra with our local postfix, and later config the hosting provider (mail relay provider), his postfix. -- Sent from:

RE: Minimun postfix

2017-10-26 Thread 9acca9
Ok, thanks "2. Configure Postfix so it accepts mail that is destined for the Zimbra server, whatever domain that is." And that would be?? (sorry for my ignorance) -- Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html

Re: Virtual Domains/ Users

2017-10-26 Thread Richard
> Date: Thursday, October 26, 2017 20:00:44 +0200 > From: Matus UHLAR - fantomas > Here's what delphi-real-estate.com looks like: www 28800  A 72.251.232.102 @   28800  MX  10 mail.delphi-real-estate.com. Do you mean I need to set an

Re: Forward local user email or another local user

2017-10-26 Thread cacook
On 10/26/2017 11:09 AM, Matus UHLAR - fantomas wrote: >> On 10/26/2017 08:59 AM, Jos Chrispijn wrote: >>> Cannot use a virtual alias user (and forward to the final user Y) >>> because I have to provide a password as well. > > On 26.10.17 09:25, cac...@quantum-equities.com wrote: >> Am I

Re: relayhost GMAIL submission (port 587)

2017-10-26 Thread Wietse Venema
Viktor Dukhovni: > > > > On Oct 26, 2017, at 12:12 PM, sru...@gemneye.org wrote: > > > > #relayhost = [smtp.gmail.com]:587 > > #smtpd_sasl_auth_enable = yes > > Look closely, that line has "smtpd_..." while all the ones below > have "smtp_...". Check the docs. You need to fix that, because

Re: Minimun postfix

2017-10-26 Thread Matus UHLAR - fantomas
On 26.10.17 09:33, 9acca9 wrote: We have contracted a mail service and we want to make some changes. The idea is to install zimbra on a local server of ours and that zimbra take the mails of the postfix of the contracted service. To test, we are installing a postfix locally on another server.

Re: Forward local user email or another local user

2017-10-26 Thread Matus UHLAR - fantomas
On 26.10.17 17:59, Jos Chrispijn wrote: I have a service running that requires me to configure an SMTP user X with password to send daily statistics to. Cannot use a virtual alias user (and forward to the final user Y) because I have to provide a password as well. So I set up a dedicated

RE: Minimun postfix

2017-10-26 Thread Fazzina, Angelo
Hi, I'm pretty sure you need to 1. Configure Zimbra 2. Configure Postfix so it accepts mail that is destined for the Zimbra server, whatever domain that is. Then postfix is configured to relay The mail to the next hop, which sounds like the Zimbra server from your description of the mail

Re: relayhost GMAIL submission (port 587)

2017-10-26 Thread Viktor Dukhovni
> On Oct 26, 2017, at 12:12 PM, sru...@gemneye.org wrote: > > #relayhost = [smtp.gmail.com]:587 > #smtpd_sasl_auth_enable = yes Look closely, that line has "smtpd_..." while all the ones below have "smtp_...". Check the docs. > #smtp_use_tls = yes > #smtp_sasl_security_options = noanonymous

Re: Forward local user email or another local user

2017-10-26 Thread Matus UHLAR - fantomas
On 10/26/2017 08:59 AM, Jos Chrispijn wrote: Cannot use a virtual alias user (and forward to the final user Y) because I have to provide a password as well. On 26.10.17 09:25, cac...@quantum-equities.com wrote: Am I understanding correctly that there can be no email authentication with

Re: Virtual Domains/ Users

2017-10-26 Thread Matus UHLAR - fantomas
On 26.10.17 10:32, cac...@quantum-equities.com wrote: The test email I'm sending from quantum-equities.com to delphi-real-estate.com, causes the delphi postfix to try and contact quantum on port 25, for some reason. this is the reason: quantum-equities.com. 300 IN MX 0

Re: header check question

2017-10-26 Thread Wietse Venema
Conz: > On 10/26/2017 01:02 PM, Wietse Venema wrote: > > Conz: > >> On 10/26/2017 11:20 AM, Benny Pedersen wrote: > >>> On 26. okt. 2017 10.32.29 Conz wrote: > >>> > Does anyone have any advice on how to accomplish this ? > >>> no logs, no problem > >>> > >>> why enable spf test

Re: Virtual Domains/ Users

2017-10-26 Thread Matus UHLAR - fantomas
On 26.10.17 09:36, cac...@quantum-equities.com wrote: Yes I have my smtp server set to mail.delphi-real-estate.com. Maybe I have it now.  I've set my zone file so:         mail                                28800    A    72.251.232.102 Is this correct? On 26.10.17 20:00, Matus UHLAR -

Re: Virtual Domains/ Users

2017-10-26 Thread Matus UHLAR - fantomas
Here's what delphi-real-estate.com looks like: www 28800  A 72.251.232.102 @   28800  MX  10 mail.delphi-real-estate.com. Do you mean I need to set an A record for delphi-real-estate.com ? On 10/26/2017 09:18 AM, Richard wrote: No, you don't need an A-record for

Re: Virtual Domains/ Users

2017-10-26 Thread cacook
The test email I'm sending from quantum-equities.com to delphi-real-estate.com, causes the delphi postfix to try and contact quantum on port 25, for some reason. Thing is, there is nothing listening there on 25 as the test email was sent by Thunderbird. Oct 26 09:06:33 quantum

Re: Postfix, mailman, and aliases problem

2017-10-26 Thread wilfried.es...@essignetz.de
Hi, what is alias_maps? Willi Am 26.10.2017 um 16:36 schrieb James Dore: > Same: > > console@corelli:/var/log$ postconf alias_database > alias_database = hash:/etc/aliases > > J > > > >> On 26 Oct 2017, at 15:30, chaouche yacine wrote: >> >> Make sure you're

Re: Virtual Domains/ Users

2017-10-26 Thread cacook
Thank you Richard. On 10/26/2017 09:18 AM, Richard wrote: > >> Here's what delphi-real-estate.com looks like: >> >> www 28800  A 72.251.232.102 >> @   28800  MX  10 mail.delphi-real-estate.com. >> >> Do you mean I need to set an A record for delphi-real-estate.com ? > No, you don't

Minimun postfix

2017-10-26 Thread 9acca9
Hello everyone. We have contracted a mail service and we want to make some changes. The idea is to install zimbra on a local server of ours and that zimbra take the mails of the postfix of the contracted service. To test, we are installing a postfix locally on another server. (ie zimbra and

Re: Forward local user email or another local user

2017-10-26 Thread cacook
On 10/26/2017 08:59 AM, Jos Chrispijn wrote: > I have a service running that requires me to configure an SMTP user X > with password to send daily statistics to. > > Cannot use a virtual alias user (and forward to the final user Y) > because I have to provide a password as well. > > So I set up a

Re: Virtual Domains/ Users

2017-10-26 Thread Richard
> Date: Thursday, October 26, 2017 08:40:13 -0700 > From: cac...@quantum-equities.com > To: postfix-users@postfix.org > > On 10/25/2017 12:39 PM, Richard wrote: >> >>> Date: Wednesday, October 25, 2017 11:55:13 -0700 >>> From: cac...@quantum-equities.com >>> >>> Sending an email from a remote

relayhost GMAIL submission (port 587)

2017-10-26 Thread sruckh
I have read several guides from the internet including the ones from postfix forums. It would appear that several people have configured their postfix environments to use GMAIL as a relayhost and to use port 587 for communication. Currently my relay host is setup for my ISP's email server

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Postfix User
On Thu, 26 Oct 2017 14:20:47 +0200, Poliman - Serwis stated: >It's just unconditioned reaction. I also post this message to some forums, >you know. I am affaird that hotmail.com / outlook.com and all microsoft >email domains are configured to block emails from new/fresh domain and >newly created

Forward local user email or another local user

2017-10-26 Thread Jos Chrispijn
I have a service running that requires me to configure an SMTP user X with password to send daily statistics to. Cannot use a virtual alias user (and forward to the final user Y) because I have to provide a password as well. So I set up a dedicated user X account (with password) for this to

Re: Virtual Domains/ Users

2017-10-26 Thread cacook
On 10/25/2017 12:39 PM, Richard wrote: > >> Date: Wednesday, October 25, 2017 11:55:13 -0700 >> From: cac...@quantum-equities.com >> >> Sending an email from a remote machine pretends like it goes out >> just fine.  But it never arrives in the server's mail folder.  >> Zero goes into maillog,

Re: Postfix, mailman, and aliases problem

2017-10-26 Thread James Dore
Same: console@corelli:/var/log$ postconf alias_database alias_database = hash:/etc/aliases J > On 26 Oct 2017, at 15:30, chaouche yacine wrote: > > Make sure you're using the /etc/aliases is actually used as your > alias_database > > >

Re: Postfix, mailman, and aliases problem

2017-10-26 Thread chaouche yacine
Make sure you're using the /etc/aliases is actually used as your alias_database root@messagerie[10.10.10.19] ~ # postconf alias_database alias_database = hash:/etc/aliases root@messagerie[10.10.10.19] ~ # Here's mine root@messagerie[10.10.10.19] ~ # cat /etc/aliases # /etc/aliases

Re: Postfix, clamav and Spamassasin - delete high scoring spam

2017-10-26 Thread Emanuel
It's possible. I do not find how to configure clamav-milter in postfix. El 26/10/17 a las 10:33, Benny Pedersen escribió: maybe just need clamav-milter in your current setup? -- envialosimple.com Emanuel Gonzalez Deliverability Specialist

RE: Postfix, mailman, and aliases problem

2017-10-26 Thread Dino Edwards
Are you using system users or virtual users in your system? /etc/aliases are for system users in the system. You may be looking for virtual_alias_maps instead? -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of James Dore

Postfix, mailman, and aliases problem

2017-10-26 Thread James Dore
Hi list, I recently migrated our mailman server from an old SLES 11 box to Ubuntu 16.04.3 LTS, and installed Mailman from the Ubuntu repositories along with Postfix and other prerequisites. Mailman itself is working fine, but I have a handful of regular email aliases in /etc/aliases which do

Re: Postfix, clamav and Spamassasin - delete high scoring spam

2017-10-26 Thread Benny Pedersen
maybe just need clamav-milter in your current setup?

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Dominic Raferd
> > > 2017-10-26 14:33 GMT+02:00 Dominic Raferd : > >> You could use a mail relaying service such as Sendgrid. ​.. >>> ​​ > > On 26 October 2017 at 13:37, Poliman - Serwis wrote: > >> Thank you Dominic for answer. It's kind of workaround,

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Dominic Raferd
On 26 October 2017 at 12:28, Victoriano Giralt wrote: > On 26/10/17 13:14, Dominic Raferd wrote: > > On 26 Oct 2017 6:34 am, "Poliman - Serwis" >> I know that MS has own black list but why they block me. Domain > >> which I use to send confirmation

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Dominic Raferd
On 26 October 2017 at 12:16, Poliman - Serwis wrote: > These emails are filtered somehow that they can reach MS domains? > > 2017-10-26 13:14 GMT+02:00 Dominic Raferd : > >> >> >> On 26 Oct 2017 6:34 am, "Poliman - Serwis" wrote: >>

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Poliman - Serwis
It's just unconditioned reaction. I also post this message to some forums, you know. I am affaird that hotmail.com / outlook.com and all microsoft email domains are configured to block emails from new/fresh domain and newly created email accounts, which have quite low reputation. I read that they

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Matus UHLAR - fantomas
On 26.10.17 12:33, Poliman - Serwis wrote: I have strange irritating problem. When I send emails from my server to any email address to any domain they reach the target without any problem. But when I try send to address in "hotmail.com" I got bounce: : host

Re: header check question

2017-10-26 Thread Conz
On 10/26/2017 01:02 PM, Wietse Venema wrote: Conz: On 10/26/2017 11:20 AM, Benny Pedersen wrote: On 26. okt. 2017 10.32.29 Conz wrote: Does anyone have any advice on how to accomplish this ? no logs, no problem why enable spf test on anyhing not port 25, post postconf -n with

Re: Postfix, clamav and Spamassasin - delete high scoring spam

2017-10-26 Thread Emanuel
Hello, Thanks for your help. I'm going to read about Amavis and spamass-milter. Regards, Emanuel. El 25/10/17 a las 16:06, Robert Schetterer escribió: Am 25.10.2017 um 20:55 schrieb Emanuel: Hello, I use Postfix, clamav and spamassain to figth the spam in my server. I my custom_rules

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Victoriano Giralt
On 26/10/17 13:14, Dominic Raferd wrote: > On 26 Oct 2017 6:34 am, "Poliman - Serwis" > I know that MS has own black list but why they block me. Domain >> which I use to send confirmation links is clear (checked in), ip >> address of my server also is clear. >> >

Re: unable to send email to hotmail.com domain

2017-10-26 Thread Dominic Raferd
On 26 Oct 2017 6:34 am, "Poliman - Serwis" wrote: I have strange irritating problem. When I send emails from my server to any email address to any domain they reach the target without any problem. But when I try send to address in "hotmail.com" I got bounce:

Re: header check question

2017-10-26 Thread Wietse Venema
Conz: > On 10/26/2017 11:20 AM, Benny Pedersen wrote: > > On 26. okt. 2017 10.32.29 Conz wrote: > > > >> Does anyone have any advice on how to accomplish this ? > > > > no logs, no problem > > > > why enable spf test on anyhing not port 25, post postconf -n with logs > > that shows

Re: unable to send email to hotmail.com domain

2017-10-26 Thread wilfried.es...@essignetz.de
Follow the given guidelines from bouncemessage. Otherwise, you could think about the chances of an ant fighting an elephant or an hippo. Willi Am 26.10.2017 um 12:33 schrieb Poliman - Serwis: > I have strange irritating problem. When I send emails from my server to any > email address to any

unable to send email to hotmail.com domain

2017-10-26 Thread Poliman - Serwis
I have strange irritating problem. When I send emails from my server to any email address to any domain they reach the target without any problem. But when I try send to address in "hotmail.com" I got bounce: : host hotmail-com.olc.protection.outlook.com[104.47.40.33]

Re: header check question

2017-10-26 Thread Conz
On 10/26/2017 11:20 AM, Benny Pedersen wrote: On 26. okt. 2017 10.32.29 Conz wrote: Does anyone have any advice on how to accomplish this ? no logs, no problem why enable spf test on anyhing not port 25, post postconf -n with logs that shows error It's spamassassin amongst

Re: header check question

2017-10-26 Thread Benny Pedersen
On 26. okt. 2017 10.32.29 Conz wrote: Does anyone have any advice on how to accomplish this ? no logs, no problem why enable spf test on anyhing not port 25, post postconf -n with logs that shows error

header check question

2017-10-26 Thread Conz
I have a stand-alone mail server with postfix 2.10.1 (CentOS7) that also has an anti spam setup. For privacy reasons I added a header check to submission to change the header on incoming mails from authenticated users so the anti spam won't freak out about SPF etc. Because of roaming mobile