[pfx] Re: DANE and DNSSEC

2023-05-18 Thread Byung-Hee HWANG via Postfix-users
Viktor Dukhovni via Postfix-users writes: > On Thu, May 18, 2023 at 09:22:34PM +0900, Byung-Hee HWANG via Postfix-users > wrote: > >> And now i added TLSA record for only *outbond* smtp server, >> . > > It is also your secondary MX host: > > https://stats.dnssec-tools.org/explore/?doraji.xyz

[pfx] Re: delivery number question

2023-05-18 Thread Viktor Dukhovni via Postfix-users
On Fri, May 19, 2023 at 08:57:34AM +0800, Tom Reed via Postfix-users wrote: > > > > On Thu, May 18, 2023 at 07:48:32PM +0800, Tom Reed via Postfix-users > > wrote: > > > >> If a sender write a message which has N recipients in the same > >> destination domain (say gmx.de), when postfix deliver th

[pfx] Re: per-domain sender_checks?

2023-05-18 Thread Viktor Dukhovni via Postfix-users
On Thu, May 18, 2023 at 07:07:55PM -0400, Alex via Postfix-users wrote: > > Is there a way to control smtpd_recipient_restrictions on a per-domain > > > basis [...] To resolve the ambiguity, you might have said: "per *recipient* domain" > If I interpret your instructions properly, this is kind o

[pfx] Re: delivery number question

2023-05-18 Thread Tom Reed via Postfix-users
> On Thu, May 18, 2023 at 07:48:32PM +0800, Tom Reed via Postfix-users > wrote: > >> If a sender write a message which has N recipients in the same >> destination domain (say gmx.de), when postfix deliver this message to >> peer MTA, will it deliver one copy, or N copies? > > For a typical messa

[pfx] Re: per-domain sender_checks?

2023-05-18 Thread Wietse Venema via Postfix-users
Alex via Postfix-users: > May 18 18:24:00 cable postfix-120/smtpd[2919509]: NOQUEUE: reject: RCPT > from send106.emailfilter.io[185.54.163.144]: 450 4.1.8 : > Sender address rejected: Domain not found; from= to=< > vojisla...@example.com> proto=ESMTP helo= This is the result of REJECT_UNKNOWN_SEND

[pfx] Re: content filter sends mail twice

2023-05-18 Thread Alex via Postfix-users
Viktor, On Thu, May 18, 2023 at 7:16 PM Viktor Dukhovni via Postfix-users < postfix-users@postfix.org> wrote: > On Thu, May 18, 2023 at 09:20:38AM -0400, Alex via Postfix-users wrote: > > > Maybe my issue is that the always_bcc user is going through a transport > at > > all, and instead should ju

[pfx] Re: content filter sends mail twice

2023-05-18 Thread Viktor Dukhovni via Postfix-users
On Thu, May 18, 2023 at 09:20:38AM -0400, Alex via Postfix-users wrote: > Maybe my issue is that the always_bcc user is going through a transport at > all, and instead should just be delivered locally, or perhaps processed > only by the local_transport? How can I do that? > > I recall many years

[pfx] Re: per-domain sender_checks?

2023-05-18 Thread Alex via Postfix-users
Hi, > Is there a way to control smtpd_recipient_restrictions on a per-domain > > basis so I can relax some of these restrictions for cases like this, > > instead of a more reactive approach where I'm always adding > > sender_checks.pcre entries? > > Instead of > > /etc/postfix/main.cf: > smtpd

[pfx] Re: DANE and DNSSEC

2023-05-18 Thread Viktor Dukhovni via Postfix-users
On Thu, May 18, 2023 at 08:54:16PM +0200, Joachim Lindenberg via Postfix-users wrote: > For Letsencrypt certificates I´d definitely go with 2 1 1 > 8D02536C887482BC34FF54E41D2BA659BF85B341A0A20AFADB5813DCFBCF286D and > optionally the R4 derivate and add their successors when these are > about to

[pfx] Re: DANE and DNSSEC

2023-05-18 Thread Joachim Lindenberg via Postfix-users
Hello Byung-Hee , for testing you may want to try https://blog.lindenberg.one/EmailSecurityTest. Best Regards, Joachim -Ursprüngliche Nachricht- Von: Byung-Hee HWANG via Postfix-users Gesendet: Mittwoch, 17. Mai 2023 10:16 An: Postfix-users Betreff: [pfx] Re: DANE and DNSSEC Now i add

[pfx] Re: DANE and DNSSEC

2023-05-18 Thread Joachim Lindenberg via Postfix-users
For Letsencrypt certificates I´d definitely go with 2 1 1 8D02536C887482BC34FF54E41D2BA659BF85B341A0A20AFADB5813DCFBCF286D and optionally the R4 derivate and add their successors when these are about to expire, rather than 3 1 1 and change every two months. Best Regards, Joachim -Ursprüngl

[pfx] Re: content filter sends mail twice

2023-05-18 Thread Alex via Postfix-users
Hi, Maybe my issue is that the always_bcc user is going through a transport at all, and instead should just be delivered locally, or perhaps processed only by the local_transport? How can I do that? I recall many years ago doing that, before I set up multi-instance postfix. Thanks, Alex On Thu,

[pfx] Re: DANE and DNSSEC

2023-05-18 Thread Viktor Dukhovni via Postfix-users
On Thu, May 18, 2023 at 09:22:34PM +0900, Byung-Hee HWANG via Postfix-users wrote: > And now i added TLSA record for only *outbond* smtp server, > . It is also your secondary MX host: https://stats.dnssec-tools.org/explore/?doraji.xyz the primary MX host does not yet have TLSA records. Th

[pfx] Re: DANE and DNSSEC

2023-05-18 Thread Byung-Hee HWANG via Postfix-users
On Thu, May 18, 2023 at 09:22:34PM +0900, Byung-Hee HWANG via Postfix-users wrote: > Byung-Hee HWANG via Postfix-users writes: > > > Now i added DNSSEC. Currently it is being registra job. 10 minutes ago, > > i did make some DS record at Cloudfalre. > > > > Thanks to Joachim, Patrick and raf ^^^

[pfx] Re: DANE and DNSSEC

2023-05-18 Thread Byung-Hee HWANG via Postfix-users
Byung-Hee HWANG via Postfix-users writes: > Now i added DNSSEC. Currently it is being registra job. 10 minutes ago, > i did make some DS record at Cloudfalre. > > Thanks to Joachim, Patrick and raf ^^^ And now i added TLSA record for only *outbond* smtp server, <>. I read Patrick's blog[1]. Stil

[pfx] Re: delivery number question

2023-05-18 Thread Viktor Dukhovni via Postfix-users
On Thu, May 18, 2023 at 07:48:32PM +0800, Tom Reed via Postfix-users wrote: > If a sender write a message which has N recipients in the same > destination domain (say gmx.de), when postfix deliver this message to > peer MTA, will it deliver one copy, or N copies? For a typical message the number

[pfx] Re: content filter sends mail twice

2023-05-18 Thread Alex via Postfix-users
On Thu, May 18, 2023 at 4:39 AM Matus UHLAR - fantomas via Postfix-users < postfix-users@postfix.org> wrote: > On 17.05.23 22:11, Alex via Postfix-users wrote: > >I'm using postfix (postmulti) with amavisd and trying to have separate > >content filters based on the domain so I can make decisions o

[pfx] delivery number question

2023-05-18 Thread Tom Reed via Postfix-users
Hello, If a sender write a message which has N recipients in the same destination domain (say gmx.de), when postfix deliver this message to peer MTA, will it deliver one copy, or N copies? Thanks. -- sent from https://dkinbox.com/ ___ Postfix-user

[pfx] Re: content filter sends mail twice

2023-05-18 Thread Matus UHLAR - fantomas via Postfix-users
On 17.05.23 22:11, Alex via Postfix-users wrote: I'm using postfix (postmulti) with amavisd and trying to have separate content filters based on the domain so I can make decisions on the destiny of the email from within amavisd. Currently all mail is processed by the same amavisd policy_bank. s