Re: Various questions about Postfix

2021-11-11 Thread raf
On Sat, Nov 06, 2021 at 11:38:26PM -0500, Tyler Montney wrote: > Sorry for the long delay, wanted to do more research before posting it. > I've replaced some real values, like myhostname, with generic ones. I expect it's all fine or you would have had a response by now. I'll have a look and mak

domain email handled by postfix

2021-11-11 Thread Walt Pang
How to set up postfix to forward all my domain's email to gmail, and enable authentication for SMTP outgoing messages? Thank you.

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Viktor Dukhovni
On Thu, Nov 11, 2021 at 08:53:01PM +0100, Togan Muftuoglu wrote: > Matus> /(\d+)[.-](\d+)[.-](\d+)[.-](\d+)./ REJECT "generic DNS refused" > > Matus> (trailing . should avoid matching IP Addresses) That "." would need to be a "[.]" (or "\."), otherwise it'll match the last digit, of a 2 or 3 dec

Re: Postfix unable to locate opendmarc.sock file

2021-11-11 Thread raf
On Thu, Nov 11, 2021 at 06:39:27PM -0500, bobby wrote: > I see this error message in my mail.log file: > Nov 11 19:37:52 mail postfix/smtpd[5942]: warning: connect to Milter > service local:opendmarc/opendmarc.sock: No such file or directory > In the main.cf file, I have this line: > smtpd_milte

Re: Postfix unable to locate opendmarc.sock file

2021-11-11 Thread Bill Cole
On 2021-11-11 at 18:39:27 UTC-0500 (Thu, 11 Nov 2021 18:39:27 -0500) bobby is rumored to have said: I see this error message in my mail.log file: Nov 11 19:37:52 mail postfix/smtpd[5942]: warning: connect to Milter service local:opendmarc/opendmarc.sock: No such file or directory In the main.cf

Re: Postfix unable to locate opendmarc.sock file

2021-11-11 Thread Wietse Venema
bobby: > I see this error message in my mail.log file: > Nov 11 19:37:52 mail postfix/smtpd[5942]: warning: connect to Milter > service local:opendmarc/opendmarc.sock: No such file or directory > In the main.cf file, I have this line: > smtpd_milters = local:opendkim/opendkim.sock,local:opendmarc/o

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Togan Muftuoglu
> "toganm" == Togan Muftuoglu writes: > "Matus" == Matus UHLAR <- fantomas > writes: Matus> you can check hostnames by using pcre map in Matus> check_reverse_client_hostname_access. e.g. refuse regex ^ Matus> /(\d+)[.-](\d+)[.-](\d+)[.-](\d+)./

Postfix unable to locate opendmarc.sock file

2021-11-11 Thread bobby
I see this error message in my mail.log file: Nov 11 19:37:52 mail postfix/smtpd[5942]: warning: connect to Milter service local:opendmarc/opendmarc.sock: No such file or directory In the main.cf file, I have this line: smtpd_milters = local:opendkim/opendkim.sock,local:opendmarc/opendmarc.sock, lo

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Togan Muftuoglu
> "Matus" == Matus UHLAR <- fantomas > writes: Matus> you can check hostnames by using pcre map in Matus> check_reverse_client_hostname_access. e.g. refuse regex Matus> /(\d+)[.-](\d+)[.-](\d+)[.-](\d+)./ REJECT "generic DNS refused" Matus> (trailing . should avoid matching IP Addresses)

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Bill Cole
On 2021-11-11 at 06:06:45 UTC-0500 (Thu, 11 Nov 2021 12:06:45 +0100) Togan Muftuoglu is rumored to have said: Hi, How can I reject connections from generic Forward Confirmed Reverse DNS (FCrDNS) like “123-45-67-8.your.isp.com”. For the most cases spamhaus is able to block it but with the c

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Togan Muftuoglu
> "Matus" == Matus UHLAR <- fantomas > writes: Matus> you can check hostnames by using pcre map in Matus> check_reverse_client_hostname_access. e.g. refuse regex Matus> /(\d+)[.-](\d+)[.-](\d+)[.-](\d+)./ REJECT "generic DNS refused" Matus> (trailing . should avoid matching IP Addresses)

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Togan Muftuoglu
> "ptld" == postfix writes: >> How can I reject connections from generic Forward Confirmed Reverse DNS >> (FCrDNS) like “123-45-67-8.your.isp.com”. ptld> I do not know if there is an easier way but you could make a script using ptld> check_policy_service or a milter to check if client name

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Togan Muftuoglu
> "Ludi" == Ludi Cree writes: Ludi> Root Servers / IPs at datacenters often also get a default RDNS in that Ludi> style. Greets, Ludi Yes but if you own the domain you can ask the datacenters/cloud centers for the RDNS and your helo will match your RDNS. I am using AWS and it was done in a

Re: How to reject generic FCrDNS clients

2021-11-11 Thread Matus UHLAR - fantomas
On 11.11.21 12:06, Togan Muftuoglu wrote: >How can I reject connections from generic Forward Confirmed Reverse DNS (FCrDNS) like “123-45-67-8.your.isp.com”. For the most cases spamhaus is able to block it but with the cloud providers with FCrDNS as follows not all of them are not blocked. 123-

AW: How to reject generic FCrDNS clients

2021-11-11 Thread Ludi Cree
Root Servers / IPs at datacenters often also get a default RDNS in that style. Greets, Ludi -Ursprüngliche Nachricht- Von: owner-postfix-us...@postfix.org Im Auftrag von post...@ptld.com Gesendet: Donnerstag, 11. November 2021 14:56 An: postfix-users@postfix.org Betreff: Re: How to

Re: How to reject generic FCrDNS clients

2021-11-11 Thread postfix
> How can I reject connections from generic Forward Confirmed Reverse DNS > (FCrDNS) like “123-45-67-8.your.isp.com”. I do not know if there is an easier way but you could make a script using check_policy_service or a milter to check if client name contains client IP. However i wonder how compl

Re: Getting Delivered-To when using LDAP?

2021-11-11 Thread Wietse Venema
Jorgen Lundman: > >> I suppose there is probably nothing I can do about it? > > > > http://www.postfix.org/postconf.5.html#prepend_delivered_header > > > > currenly immplements (and detects loops) with delivery to "|command", > > /file/name, or !$HOME/.forward. > > > > Doing this also for virtu

Re: Getting Delivered-To when using LDAP?

2021-11-11 Thread Jorgen Lundman
>> I suppose there is probably nothing I can do about it? > > http://www.postfix.org/postconf.5.html#prepend_delivered_header > > currenly immplements (and detects loops) with delivery to "|command", > /file/name, or !$HOME/.forward. > > Doing this also for virtual alias expansion would require

How to reject generic FCrDNS clients

2021-11-11 Thread Togan Muftuoglu
Hi, How can I reject connections from generic Forward Confirmed Reverse DNS (FCrDNS) like “123-45-67-8.your.isp.com”. For the most cases spamhaus is able to block it but with the cloud providers with FCrDNS as follows not all of them are not blocked. 123-45-67-89.ip.linodeusercontent.com ec2

Re: Getting Delivered-To when using LDAP?

2021-11-11 Thread Wietse Venema
Joergen Lundman: > > Customers have asked if they can get the "Delivered-To" header in the case > that their > mail is sent onwards. But we do not use the regular .forward or "delivery" > style, but > rather query LDAP for "mailForwardingAddress" to send mail on. > > As in: > virtual_mailbox_maps