spam emails with "to:" line missing

Hello, I am receiving spam emails, where the "to:" line is entirely missing in the email header. The header has "X-Original-To:" and "Delivered-To:", but no "to:" line. I have pasted the header here: https://ctxt.io/2/AABg30FRFQ How could I block such emails? Can I use header-check for this?

Re: Strange To: of e-mail on postfix-users

Daniel Azuelos wrote: > Are you still using procmail? Yes. I am still using procmail. It is powerful, mature, and stable. But more importantly you said YOU were using procmail. > I just found an email incorrectly filtered by my .procmailrc, > because the To: wasn't postfix-users@postfix.org:

Re: milter_header_checks, pcre, chroot

On 2022-04-14 16:58, Matus UHLAR - fantomas wrote: OTOH, rejecting DMARC failures with policy reject should be not a problem, since there's just a few of them. since many maillist take ownerships its not a problem at all :) but its more a fail if opendkim reject, i will let it up to the reade

Re: always_bcc for selected recipients? map support?

Try sender_bcc_maps or recipient_bcc_maps. once again, looking in the wrong place! perfect, thx.

Re: always_bcc for selected recipients? map support?

PGNet Dev: > I'd like to have my Postfix receiving instance always bcc mail for a specific > set of recipients to another , off-site server. > And to do so regardless of the intended 'main' recipient address being 'up' > for receiving @ subsequent Postfix transport delivery targets, or not. > >

Re: always_bcc for selected recipients? map support?

On 2022-04-14 19:19, PGNet Dev wrote: https://www.postfix.org/postconf.5.html#always_bcc straightforward for bcc'ing all. But I don't immediately see that it support maps. maps what ? (1) does always_bcc support maps? (doc or example?) (2) is there a better alternative that always_bcc for

Re: DMARC in postfix ?

On 2022-04-14 15:41, A. Schulze wrote: But it's also a milter. This is intentional: Wietse / http://www.postfix.org/MILTER_README.html say "Having yet another Postfix-specific version of all that software is a poor use of human and system resources." so why have rspamd ucl, and lua ? :=) if a

always_bcc for selected recipients? map support?

I'd like to have my Postfix receiving instance always bcc mail for a specific set of recipients to another , off-site server. And to do so regardless of the intended 'main' recipient address being 'up' for receiving @ subsequent Postfix transport delivery targets, or not. Reading, http

Re: DKIM signature duplicated in headers

Dnia 14.04.2022 o godz. 23:21:18 DL Neil pisze: > Have a multi-domain Postfix+Dovecot+MySQL+SpamAssassin working nicely. > Added OpenDKIM and it works, passing some 'tests', but not others. I > notice that outgoing mail appears to be signed twice. Is this correct? How do you run SpamAssassin? As a

Re: Virtual domains

On 4/14/22 9:58 AM, Wietse Venema wrote: Emmett Culley: Is there anything I can do to specify that the Recieved: headers have the "correct" domain name depending on what domain is sending an email (From:)? The Received: headers contain the value of the "myhostname" parameter, i.e. the identit

Re: Virtual domains

Emmett Culley: > Is there anything I can do to specify that the Recieved: headers > have the "correct" domain name depending on what domain is sending > an email (From:)? The Received: headers contain the value of the "myhostname" parameter, i.e. the identity of this Postfix MTA instance. This na

Re: Strange To: of e-mail on postfix-users

[ Rédigé dans le sens de lecture normal. Written in the usual reading direction. ] Le (on) 09/04/2022, Bob Proulx a écrit (wrote): [...] | For mailing lists using List-Id is the recommended method. | | :0 | * ^List-Id: .* | * ^list-Id: .*

Re: Virtual domains

On 4/14/22 8:38 AM, Shawn Heisey wrote: On 4/14/22 09:26, Emmett Culley wrote: I would include the output of postconf, but it is very large and I don't know how to narrow it down to what is needed to help resolve this issue. Try "postconf -n".  This should only show settings that are differen

Re: Virtual domains

On 4/14/22 09:26, Emmett Culley wrote: I would include the output of postconf, but it is very large and I don't know how to narrow it down to what is needed to help resolve this issue. Try "postconf -n".  This should only show settings that are different from default. elyograg@bilbo:~$ po

Virtual domains

I run a couple of mail servers using postfix, currently at version 2.10.1. They are set up to send and receive email for multiple virtual domains and have been doing that beautifully for years. I recently changed the host name of one of the servers from one domain I am hosting to another of th

Re: milter_header_checks, pcre, chroot

On 2022-03-19 17:49, Matus UHLAR - fantomas wrote: this should be fixable by using proxymap, better than disabling chroot http://www.postfix.org/proxymap.8.html On 20.03.22 17:29, Jesper Dybdal wrote: Thanks.  As far as I can see, I need to add    proxy:regexp:/etc/postfix/regexp_milter_header

Re: 10s of REJECT messages multiple times a day

> "DE" == Dino Edwards writes: DE> Hello, We have various IPs that throughout the day hammer our server DE> attempting to deliver messages to non-existent recipients. The messages DE> get rejected because the recipients do not exist. This results with having DE> 30 to 100 rejected emails at a

Re: 10s of REJECT messages multiple times a day

Sven Schwedas wrote in <1d9d281d-de64-8299-2bed-35fc9889f...@tao.at>: | |> What is the recommended way to combat this behavior? | |I'd personally lean towards fail2ban or comparable solutions to |aggregate Rejects with other suspicious behaviour on other ports and |react with system-wide I

Re: DMARC in postfix ?

Am 13.04.22 um 05:31 schrieb John Levine: > For doing DMARC validation, I know about the opendmarc milter. Is that what > everyone uses? Is there anything else used in pratice? Hello John, rspamd handle DMARC as well. But it's also a milter. This is intentional: Wietse / http://www.postfi

Re: DKIM signature duplicated in headers

Mail is signed twice because Postfix receives it twice. I suggest that you correlate the Received: headers with the DKIM signatures, and decide where to enable DKIM signing. It may be easier to configure this per-service in master.cf than globally in main.cf. Wietse

Re: 10s of REJECT messages multiple times a day

What is the recommended way to combat this behavior? I'd personally lean towards fail2ban or comparable solutions to aggregate Rejects with other suspicious behaviour on other ports and react with system-wide IP bans. Fail2ban e.g. has examples for catching REJECTs in its wiki: http://www

10s of REJECT messages multiple times a day

Hello, We have various IPs that throughout the day hammer our server attempting to deliver messages to non-existent recipients. The messages get rejected because the recipients do not exist. This results with having 30 to 100 rejected emails at a time. What is the recommended way to combat this

Re: Best way forwarding to Gmail

(sorry i forgot one file) > After all, i did make decision. See here: > This is the full headers: (the above thing)

DKIM signature duplicated in headers

Have a multi-domain Postfix+Dovecot+MySQL+SpamAssassin working nicely. Added OpenDKIM and it works, passing some 'tests', but not others. I notice that outgoing mail appears to be signed twice. Is this correct? The two signatures are otherwise identical but with marginally different timestamps (an

Re: DMARC in postfix ?

There is no need to build it in. There are excellent implementations available. But exim does X does not convince me. Wietse

Re: DMARC in postfix ?

On 4/12/22 23:31, John Levine wrote: > For doing DMARC validation, I know about the opendmarc milter. Is that what > everyone uses? Is there anything else used in pratice? > > I know about perl and python libraries but they don't seem to have > milters or other ready to use integrations into MTA

Re: match empty sender in hash: sender access map?

On 12.04.22 23:06, Greg Klanderman wrote: Thank you Bill! Knowing that now, I see where postmap(1) states: | The postmap(1) command can query any supported file type, but it can | create only the following file types: | ... [types not including 'regexp' or 'pcre'] Also, the error if you 'pos