Re: Question regarding use of amavisd-new

2017-12-13 Thread Dominic Raferd
On 14 December 2017 at 00:13, Maarten wrote: > Where can I find documentation on all the settings of the amavis-new > configuration file. The only documentation I can find is about how to > set it up with postfix in README.postfix. There are some comments in > the

Re: Question regarding use of amavisd-new

2017-12-13 Thread Maarten
Where can I find documentation on all the settings of  the amavis-new configuration file. The only documentation I can find is about how to set it up with postfix in README.postfix. There are some comments in the configuration file, but not clear enough for me to understand what each setting

Re: Question regarding use of amavisd-new

2017-12-13 Thread Bill Cole
On 13 Dec 2017, at 11:01 (-0500), L.P.H. van Belle wrote: No, i know it runs fine, after about 2-3 milion emails processed, i know .. Really.. My vague recollection of MailScanner's inherent risk is that it is volume-dependent, i.e. it might never cause any problem with a million messages

Re: How to restrict sending to certain local addresses except when sent from mail server

2017-12-13 Thread Justin Peavey
Thanks for the reply, unfortunately the approach doesn’t seem to work for me. It appears that that the regardless of the smtp_recipient_restrictions setting, that any addresses listed in /etc/aliases addressed to $mydomain is bypassing any blocking/filtering. Is this expected behavior? >

RE: Question regarding use of amavisd-new

2017-12-13 Thread L . P . H . van Belle
No, i know it runs fine, after about 2-3 milion emails processed, i know .. Really.. And no i did not ignore him, but i want mailscanner and i want postfix and not exim. Did you even try it and test it? And if so, what did you encounter?? I only found 1 thing and thats fixed. something with

Re: Question regarding use of amavisd-new

2017-12-13 Thread John Peach
On 12/13/2017 10:52 AM, L.P.H. van Belle wrote: Hai, mailscanner runs fine here for about 5-6 years now, with postfix. Mailscanner + postfix (postscreen) rules here :-) You *think* it's been running fine. When the author of postfix specifically warns against using it, it would be foolhardy

RE: Question regarding use of amavisd-new

2017-12-13 Thread L . P . H . van Belle
Hai, mailscanner runs fine here for about 5-6 years now, with postfix. Mailscanner + postfix (postscreen) rules here :-) But if you want a quicky to test. https://efa-project.org/ = Mailscanner + mailwatch +... Lots of extra's. Greetz, Louis > -Oorspronkelijk bericht- >

Re: Question regarding use of amavisd-new

2017-12-13 Thread Bill Cole
On 13 Dec 2017, at 4:45 (-0500), Maarten wrote: According to their documentation using MailScanner with postfix works too. https://www.mailscanner.info/postfix/ Yes, and there's a link at the bottom of that page to the postfix.org add-on page which specifically warns against MailScanner.

Re: Postfix BIMI support?

2017-12-13 Thread Viktor Dukhovni
> On Dec 13, 2017, at 3:38 AM, Jonathan Sélea wrote: > > Recently stumpled upon BIMI; > > https://authindicators.github.io/rfc-brand-indicators-for-message-identification/#rfc.section.3 > > What is your view on it? I think that BIMI is more a cosmetic thing rather > than

Re: Postfix BIMI support?

2017-12-13 Thread Wietse Venema
Jonathan S?lea: > Recently stumpled upon BIMI; > > https://authindicators.github.io/rfc-brand-indicators-for-message-identification/#rfc.section.3 > > What is your view on it? I think that BIMI is more a cosmetic thing > rather than something that prevent spoofing. > > Is there any plans to

Re: Question regarding use of amavisd-new

2017-12-13 Thread Matus UHLAR - fantomas
On 13.12.17 11:13, Maarten wrote: I'll have a look at amavisd-new after the new year since that seems to be the more update one. So with amvisd-new you can also do spam filtering, use different scanners, filename blocking etc? yes. On 2017-12-13 11:02, Ansgar Wiechers wrote: MailScanner

Re: Postfix BIMI support?

2017-12-13 Thread Patrick Ben Koetter
Jonathan, BIMI adds an URI as header to a message. It is supposed to point to a location, where mail clients can download an image, which is supposed to show a brand indicator, vulgo "logo". Which kind of support would you expect from an MTA such as Postfix? p@rick Am 13.12.2017 um 09:38

Sending only local mail to another mail server

2017-12-13 Thread Martin Brampton
I'm running a Postfix server that receives mail for a number of domains, and provides service for mail users via Dovecot. It's not used for sending mail from users, another server acts as the mail relay. Is it possible to configure my Postfix server so that locally generated mail (e.g. from

Re: Question regarding use of amavisd-new

2017-12-13 Thread Maarten
I'll have a look at amavisd-new after the new year since that seems to be the more update one. So with amvisd-new you can also do spam filtering, use different scanners, filename blocking etc? On 2017-12-13 11:02, Ansgar Wiechers wrote: On 2017-12-13 Maarten wrote: According to their

Re: Question regarding use of amavisd-new

2017-12-13 Thread Ansgar Wiechers
On 2017-12-13 Maarten wrote: > According to their documentation using MailScanner with postfix works > too. > > https://www.mailscanner.info/postfix/ MailScanner operates on Postfix internal structures (namely the mail queue). Postfix does not make guarantees about these (meaning they might be

Re: Question regarding use of amavisd-new

2017-12-13 Thread Maarten
According to their documentation using MailScanner with postfix works too. https://www.mailscanner.info/postfix/ What would be the advantage to switching to something like amavisd-new? . On 2017-12-13 10:28, Benny Pedersen wrote: Maarten skrev den 2017-12-13 10:11: I use MailScanner, I'm

Re: Question regarding use of amavisd-new

2017-12-13 Thread Benny Pedersen
Maarten skrev den 2017-12-13 10:11: I use MailScanner, I'm happy so far with it. bad solotion with postfix, since mailscanner uses queue dirs directly, this is not supported in postfix, mailscanner is designed for sendmail only, dont try other mta with it

Re: Question regarding use of amavisd-new

2017-12-13 Thread Maarten
I use MailScanner, I'm happy so far with it. On 2017-12-13 10:05, Benny Pedersen wrote: John Stoffel skrev den 2017-12-12 16:53: Now to figure out why spamassisin as a milter ain't working properly... try rmilter, configure it for spamd, so you dont need to use spamc :=) same auhor as

Re: Question regarding use of amavisd-new

2017-12-13 Thread Benny Pedersen
John Stoffel skrev den 2017-12-12 16:53: Now to figure out why spamassisin as a milter ain't working properly... try rmilter, configure it for spamd, so you dont need to use spamc :=) same auhor as rspamd maked it, rmilter is now depricated, hopefully he wont delete it ucl was born to

Re: Question regarding use of amavisd-new

2017-12-13 Thread Benny Pedersen
Sven Schwedas skrev den 2017-12-12 16:12: On 2017-12-12 10:55, J Doe wrote: I was wondering if fellow Postfix users would still recommend using amavisd-new when integrating AV (ClamAV), and spam filtering (SpamAssasin) ? There's nothing wrong with Amavis. The only decent alternative I know

Postfix BIMI support?

2017-12-13 Thread Jonathan Sélea
Recently stumpled upon BIMI; https://authindicators.github.io/rfc-brand-indicators-for-message-identification/#rfc.section.3 What is your view on it? I think that BIMI is more a cosmetic thing rather than something that prevent spoofing. Is there any plans to implement support for it in

Re: DKIM signing for wildcard sub domains

2017-12-13 Thread Benny Pedersen
Kent skrev den 2017-12-13 08:40: Is this possible ? no http://www.opendkim.org/opendkim-atpszone.8.html unless its atps signed imho your server hostnaame must be dkim signed then you can reuse keys to subdomain signing its complex setup, so join opendkim maillist asking specific to this

Re: DKIM signing for wildcard sub domains

2017-12-13 Thread Anvar Kuchkartaev
Just quick fix I wrote wrong instructions s=* means for all services. You have to edit  /etc/opendkim.conf  Subdomains Yes And  /etc/opendkim/SigningTable example.com default._domainkey.example.com .example.com default._domainkey.example.com Anvar Kuchkartaev  an...@anvartay.com   Original

Re: DKIM signing for wildcard sub domains

2017-12-13 Thread Anvar Kuchkartaev
In your case you are using selector with the name default. If you use opendkim-genkey -s mx0 then it will generate key for mx0 selector‎ (you must update dns records accordingly instead of default._domainkey.school.kiwi mx0._domainkey.school.kiwi and for mx1 generate with selector mx1 and dns