[pfx] Re: Documentation Prefix

2024-07-08 Thread Alexander Leidinger via Postfix-users
remaining Windows 10 installations these days. Windows 10 version 1803 and later disable Teredo by default. https://learn.microsoft.com/en-us/windows/whats-new/deprecated-features -> IPv4/6 Transition Technologies As Teredo is a MS thing (invented and propagated by them), I would call it

[pfx] Re: Handing off via localhost:10025 to spamassassin for scanning failure

2024-06-28 Thread Alexander Leidinger via Postfix-users
enough is not good enough... Did you already validate (netstat -tnl) that spamassassin listens on both addresses, 127.0.0.1 and ::1? Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.orgnetch...@freebsd.org : PGP 0x8

[pfx] Re: DANE and STS

2024-06-25 Thread Alexander Leidinger via Postfix-users
Outgoing: Postfix doesn't come with support for this out of the box. There is https://github.com/Snawoot/postfix-mta-sts-resolver but it has drawbacks (pointed out in the docu). Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeB

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Alexander Leidinger via Postfix-users
those decisions. Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.orgnetch...@freebsd.org : PGP 0x8F31830F9F2772BF signature.asc Description: OpenPGP digital signature ___ Postfix-users

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Alexander Leidinger via Postfix-users
/header_checks ---snip--- $config_directory/header_checks: ---snip--- /^Received: by your\.smtp\.server .*from userid [0-9]+\)/ IGNORE /^Received: from www \(uid 80.*/ IGNORE /^(Received: from your\.roundcube\.server)[^\n]*(.*)/ REPLACE $1 (localhost [127.0.0.1])$2 ---snip--- Bye, Al

[pfx] Re: Disable Non Delivery Notifications only for some adresses

2024-05-23 Thread Alexander Kolesnikov via Postfix-users
23.05.2024 15:38, Kevin Cousin via Postfix-users пишет: Le 2024-05-21T22:50:48.000+02:00, Wietse Venema via Postfix-users a écrit : Kevin Cousin via Postfix-users:

[pfx] Re: how disable DSN pipe

2024-05-23 Thread Alexander Kolesnikov via Postfix-users
23.05.2024 19:06, Wietse Venema via Postfix-users пишет: Aleksandr Kolesnikov via Postfix-users: if the user requests a DSN, he receives a delivery message via the ... how to prohibit the sending of such DSN?

[pfx] Re: TLS for SMTP Outbound -- Only One tlsproxy

2024-05-22 Thread Alexander Leidinger via Postfix-users
forth with guesses here on the mailinglist. Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.orgnetch...@freebsd.org : PGP 0x8F31830F9F2772BF signature.asc Description: OpenPGP digital

[pfx] Re: Is there a way to just quickly deliver "everything" to a file somewhere

2024-04-11 Thread Alexander Leidinger via Postfix-users
? Would this work for your use case? https://serverfault.com/questions/219173/configure-postfix-to-filter-email-into-hold-queue Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.orgnetch...@freebsd.org : PGP 0x8F31830F9F2772BF

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-25 Thread Alexander Leidinger via Postfix-users
not a specific recommendation for SMTP, it is a generic recommendation for encrypted communication independent from the context it is used in, so there may be no thought at all about opportunistic TLS. Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-25 Thread Alexander Leidinger via Postfix-users
gested (you could increase the smtpd_tls_loglevel to 1 and check over a suitable amount of time if someone is using those ciphers you want to disable before you actually disable them). Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeB

[pfx] Re: Postfix + Dovecot FreeBSD - a problem

2024-03-12 Thread Alexander Leidinger via Postfix-users
is postfix not only in /usr/local/, but also in /, there is a big problem. There is no postfix supposed to be in / in FreeBSD, it shall only be in /usr/local/. Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.orgnetch...@freebsd.

[pfx] Re: Postfix + Dovecot FreeBSD - a problem

2024-03-11 Thread Alexander Leidinger via Postfix-users
usr/local/etc/letsencrypt/live/domain.name/fullchain.pem smtpd_tls_key_file = /usr/local/etc/letsencrypt/live/domain.name/privkey.pem smtpd_tls_protocols = !SSLv2, !SSLv3 smtpd_tls_security_level = may smtpd_use_tls = yes Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.ne

[pfx] Re: Configuration Settings for TLS 1.2 and 1.3 with No Weak Ciphers

2024-03-01 Thread Alexander Leidinger via Postfix-users
s up 30% of the SSL Labs rating. ---snip--- The corresponding Qualys reference is: https://www.ssllabs.com/projects/rating-guide/ Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.orgnetch...@freebsd.org : PGP 0x8F31

[pfx] Re: Configuration Settings for TLS 1.2 and 1.3 with No Weak Ciphers

2024-02-29 Thread Alexander Leidinger via Postfix-users
Am 2024-02-29 10:27, schrieb Viktor Dukhovni via Postfix-users: On Thu, Feb 29, 2024 at 08:59:44AM +0100, Alexander Leidinger via Postfix-users wrote: # grep tls main.cf | grep -vE '^#' smtp_tls_security_level = encrypt smtpd_tls_ask_ccert = yes smtpd_tls_CApath = $smtp_tls_CA

[pfx] Re: Configuration Settings for TLS 1.2 and 1.3 with No Weak Ciphers

2024-02-29 Thread Alexander Leidinger via Postfix-users
AES_256_GCM_SHA384 (ecdh_x25519) - A | TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A | TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A | cipher preference: server |_ least strength: A Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F27

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-02 Thread Alexander Leidinger via Postfix-users
Am 2023-12-01 18:51, schrieb Viktor Dukhovni via Postfix-users: On Fri, Dec 01, 2023 at 01:52:19PM +0100, Alexander Leidinger wrote: > No. The problem you're reporting is with name matching. If the > certificate chain failed to be constructed, that'd be reported instead. &

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-01 Thread Alexander Leidinger via Postfix-users
Am 2023-12-01 13:44, schrieb Wietse Venema: Alexander Leidinger: Am 2023-11-30 16:53, schrieb Wietse Venema via Postfix-users: > Alexander Leidinger via Postfix-users: >> What is wrong here that [tlsproxy] doesn't establish a trusted >> connection >> to the githu

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-01 Thread Alexander Leidinger via Postfix-users
Am 2023-12-01 12:40, schrieb Byung-Hee HWANG via Postfix-users: Alexander Leidinger via Postfix-users writes: Am 2023-12-01 12:08, schrieb Byung-Hee HWANG via Postfix-users: ... Nov 30 11:31:48 mailgate postfix/tlsproxy[175]: server certificate verification failed for in-8.smtp.github.com

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-01 Thread Alexander Leidinger via Postfix-users
Am 2023-12-01 11:22, schrieb Viktor Dukhovni via Postfix-users: On Fri, Dec 01, 2023 at 09:53:25AM +0100, Alexander Leidinger via Postfix-users wrote: > > Why should it expect reply.github.com? > > Because that name is securely known from the recipient address. Because, wh

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-01 Thread Alexander Leidinger via Postfix-users
CAfile smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt # postconf -n | grep tls_CA smtp_tls_CApath = /etc/ssl/certs smtpd_tls_CApath = /etc/ssl/certs Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-01 Thread Alexander Leidinger via Postfix-users
Am 2023-12-01 09:34, schrieb Tom Hendrikx via Postfix-users: On 01-12-2023 08:59, Alexander Leidinger via Postfix-users wrote: Am 2023-11-30 16:53, schrieb Wietse Venema via Postfix-users: Alexander Leidinger via Postfix-users: What is wrong here that [tlsproxy] doesn't establish a tr

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-01 Thread Alexander Leidinger via Postfix-users
Am 2023-11-30 18:36, schrieb Viktor Dukhovni via Postfix-users: On Thu, Nov 30, 2023 at 03:37:02PM +0100, Alexander Leidinger via Postfix-users wrote: > > Nov 30 11:18:40 mailgate postfix/tlsproxy[98300]: server certificate > > verification failed for in-9.smtp.github.com[140.8

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-12-01 Thread Alexander Leidinger via Postfix-users
Am 2023-11-30 16:53, schrieb Wietse Venema via Postfix-users: Alexander Leidinger via Postfix-users: What is wrong here that [tlsproxy] doesn't establish a trusted connection to the github mailservers when posttls-finger is able to do that with the same cert store? Because ther

[pfx] Re: Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-11-30 Thread Alexander Leidinger via Postfix-users
Am 2023-11-30 15:03, schrieb Bill Cole via Postfix-users: On 2023-11-30 at 08:03:09 UTC-0500 (Thu, 30 Nov 2023 14:03:09 +0100) Alexander Leidinger via Postfix-users is rumored to have said: My main.cf contains the same certs-path for smtp and smtpd TLS connections: ---snip--- # grep CApath

[pfx] Some TLS connections untrusted in postfix but trusted with posttls-finger

2023-11-30 Thread Alexander Leidinger via Postfix-users
ttls-finger is able to do that with the same cert store? Bye, Alexander. -- http://www.Leidinger.net alexan...@leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.orgnetch...@freebsd.org : PGP 0x8F31830F9F2772BF signature.asc Des

[pfx] Re: check sender trouble

2023-11-18 Thread Alexander Kolesnikov via Postfix-users
18.11.2023 17:32, Matus UHLAR - fantomas via Postfix-users пишет: On 18.11.23 07:30, Alexander Kolesnikov via Postfix-users wrote: 192.168.250.35:27 inet n -   n   -   -   smtpd -o syslog_name=postfix/$service_name -o

[pfx] check sender trouble

2023-11-17 Thread Alexander Kolesnikov via Postfix-users
by foreign host.    I'm sorry, but I haven't fixed the problem. What do I need to do so that the postfix does not accept messages with an incomplete sender address (without the domain part)? Regards, Alexander _

[pfx] Send every mail to external antispam gateway

2023-07-10 Thread Alexander Rehbein via Postfix-users
Hello, I'm looking for a solution to send every mail, also from one internal mailbox to another internal mailbox, to an external server which check the mails. The external server will send every mail back to postfix. Also every external mail will only come from this external server. Mails from the

Re: SMTPD delay rejects evaluation]

2022-01-03 Thread Alexander Stienstra
On 29-12-2021 11:13, Matus UHLAR - fantomas wrote: - With smtpd_delay_reject=no, Postfix will log a DNSBL 'reject' in smtpd_client_restrictions without any sender or recipient information. That makes it difficult to answer questions about "missing" email. And when SASL is used with delays

Conditional relayhost based on message size

2021-01-16 Thread Alexander
Hello, My goal is to conditionally select the relayhost based on the total size of the outgoing message. The rationale is that I'm using Amazon AWS SES for the most part. Alas, SES only accepts messages up to 10 MB in size (this includes images and attachments that are part of the message), an

Re: Architectural question for handing submission mail to a smarthost

2020-06-01 Thread Alexander Perlis
Wietse asked: > What should happen with local submissions via /usr/sbin/sendmail? Thanks, I forgot about those, they too should go to the separate smarthost. Your follow-up message passing options to pickup(8) would seem to take care of that. > /etc/postfix/master.cf > submission .. .. .. .. ..

Architectural question for handing submission mail to a smarthost

2020-06-01 Thread Alexander Perlis
Hello, I seek advice. For mail received on port 25 for my domain, the usual local transport should be used (as accomplished with mydestination=mydomain), but for mail submitted by authorized users on port 587, I want all such mail (even for recipients@mydomain) to get sent via SMTP to a separate

Appropriate mydestination/local_transport setting for a split server config?

2020-05-30 Thread Alexander Perlis
Some of my users want to migrate to a cloud mail provider (with the same mail domain name), while others want to stay on my on-premise postfix server. Thus I seek to set up a "split server config", essentially using the cloud server as a smarthost to be both an outbound and inbound gateway. A co

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-15 Thread Alexander Vasarab
to have been resolved. Thank you for your time and effort. Alexander

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-14 Thread Alexander Vasarab
ections to pgsql, so I'm going to try juggling versions of buster's postfix-pgsql to see if the issue lay there. On 14/05/20 08:06 -0400, Scott Kitterman wrote: Debian automatically builds debug symbol packages for ~all packages. They are located in a separate package repository. For

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-14 Thread Alexander Vasarab
On 13/05/20 21:58 -0400, Viktor Dukhovni wrote: Please rebuild, and post another similar set of logs. Thanks. Attached. Alexander May 13 21:56:38 vasaconsulting postfix/smtpd[25599]: connect from [] May 13 21:56:38 vasaconsulting postfix/smtpd[25599]: tls_bio: hsfunc=0x7f310ef3a780, rfunc

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-13 Thread Alexander Vasarab
OpenSSL 1.1.1d 10 Sep 2019 What OS are you running? Debian GNU/Linux 10 (buster aka stable). Yesterday, I bumped libssl1.1 to the version available in the testing distribution, which is 1.1.1g, and noticed no change in the faulty behavior. Now I'm back to stable's 1.1.1d. Alexander

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-13 Thread Alexander Vasarab
On 13/05/20 16:20 -0400, Viktor Dukhovni wrote: Try the below. Note, if build as below, it will not replace your system The output is attached. Alexander May 13 16:31:24 vasaconsulting postfix/smtpd[14216]: connect from [] May 13 16:31:24 vasaconsulting postfix/smtpd[14216]: tls_bio

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-13 Thread Alexander Vasarab
nt every 5 seconds through the mail server to keep the "TLS warning" state warm, allowing real emails to get through via TLS on their first attempt. As not every mail server immediately retries not over TLS upon a TLS failure, this issue is impacting delivery to a non-insignificant extent. Alexander

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-13 Thread Alexander Vasarab
On 13/05/20 13:56 -0400, Viktor Dukhovni wrote: If you're willing to rebuild Postfix from source, then I can provide a patch that would log more details. Yes, absolutely willing. Thank you. Alexander

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-13 Thread Alexander Vasarab
On 12/05/20 23:27 -0400, Viktor Dukhovni wrote: Once again out of the blue, a lost connection. The SMTP server is trying to read the next command after sending "RCPT TO" and encounters an EOF condition, for no apparent reason. At this point, I'd guess your SSL library is broken... I was able

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Alexander Vasarab
interpretation, but I'm ignorant to the arcana that's on full display in this log. Alexander May 12 19:04:06 vasaconsulting postfix/smtpd[3301]: reply: SMFIR_CONTINUE data 0 bytes May 12 19:04:06 vasaconsulting postfix/smtpd[3301]: before input_transp_cleanup: cleanup flags =

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Alexander Vasarab
or first frame: 0.907756000 seconds] Transmission Control Protocol, Src Port: 587, Dst Port: 37049, Seq: 7302, Len: 0 Flags: 0x004 (RST) Alexander

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-11 Thread Alexander Vasarab
I've also seen at least one sender (notably, GMAIL) connect, elicit the SSL_Shutdown error, and yet their message gets queued and delivered without another try being needed. Alexander postfix-SSL_Shutdown.pcap Description: application/vnd.tcpdump.pcap May 11 19:29:04 vasaconsulting post

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-11 Thread Alexander Vasarab
packet from the foreign mailserver. I'm not certain on the norms of this mailing list but I can put the entire pcap somewhere if it would be helpful, it's 35 frames long. Alexander

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-11 Thread Alexander Vasarab
SSL to 1.1.1g, but it would go outside of the stable "channel" of my distribution, so it's not a preferred approach. I recognize that this is a symptom of an underlying problem, just trying to figure out what that underlying problem might be. Thanks. Alexander

"SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-11 Thread Alexander Vasarab
nd expected but most fail due to this error and I haven't been able to identify a pattern. A survey of the mailing list suggests the problem as experienced by another user may have been related to tlsproxy but I have smtp_tls_connection_reuse set to no. Thanks and regards, Alexander Vasarab

Re: dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found.

2020-05-08 Thread Alexander Meinhardt
> A possible cause is that you are not using your own DNS resolver but > instead relying on a third party (such as your ISP), and their > resolver has been blocked by Spamhaus for over-usage. In which case > you need to set up your own DNS resolver (e.g. bind) and use this > instead, ensuring it do

dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found.

2020-05-08 Thread Alexander Meinhardt
Hey folks, for inexplicable reasons i don't get any results from zen.spamhaus.org anymore: Apr 08 16:20:29 [postfix/dnsblog] warning: dnsblog_query: lookup error for DNS query x.x.x.x.zen.spamhaus.org: Host or domain name not found. Name service error for name=x.x.x.x.zen.spamhaus.org type=A: Hos

Re: Postfix log

2019-08-09 Thread Alexander Wirt
On Fri, 09 Aug 2019, Benny Pedersen wrote: Hi, > > Thanks, postscript is not part of the Debian package. I'll try to put: > > service postfix restart > > this is not working, postfix send logs to syslogd, so restarting postfix is > not what to do, restart the syslogd will work > > please create

Re: Use postfix and spamassassin packages on CentOS 6 to reject SPAM

2014-08-12 Thread Alexander Farber
Hello again, On Tue, Aug 12, 2014 at 9:34 AM, Alexander Farber < alexander.far...@gmail.com> wrote: > On 11 Aug 2014, at 10:22, li...@rhsoft.net wrote: >> >>> http://serverfault.com/questions/619537/use-postfix- >>> and-spamassassin-packages-on-centos-6-to-rej

Re: Use postfix and spamassassin packages on CentOS 6 to reject SPAM

2014-08-12 Thread Alexander Farber
On Tue, Aug 12, 2014 at 1:44 AM, Bill Cole < postfixlists-070...@billmail.scconsult.com> wrote: > On 11 Aug 2014, at 10:22, li...@rhsoft.net wrote: > >> http://serverfault.com/questions/619537/use-postfix- >> and-spamassassin-packages-on-centos-6-to-reject-spam-without-custo >> > > Also worth noti

Re: Disabling Anonymous Diffie Hellman

2014-05-20 Thread Alexander Hoogerhuis
scores it does. So basically, untill the site can relfect the real world, it seem to be of limited use. mvh, A -- Alexander Hoogerhuis | http://no.linkedin.com/in/alexh Boxed Solutions AS | +47 908 21 485 - al...@boxed.no "Given enough eyeballs, all bugs are shallow." -Eric S. Raymond

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
I see, thanks to you both! The #danger doc not probably doesn't apply here, but still good to know.

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
postconf |grep smtpd_recipient_restrictions smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
/virtual On Sat, Nov 23, 2013 at 3:16 PM, tejas sarade wrote: > I would like to know current recipient restrictions. What is the output of > following command. > > grep smtpd_recipient_restrictions /etc/postfix/main.cf > > > > On Sat, Nov 23, 2013 at 4:43 PM, Alexander

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
Does this doc really apply to my situation? (I'd like to discard some of the mails sent out by my CMS) On Sat, Nov 23, 2013 at 11:42 AM, tejas sarade wrote: > > http://www.postfix.org/SMTPD_ACCESS_README.html > Regards Alex

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-23 Thread Alexander Farber
Hello Peter and others, On Sat, Nov 23, 2013 at 1:38 AM, Peter wrote: > On 11/23/2013 12:38 AM, Alexander Farber wrote: > > /etc/postfix/header_checks: > > /^To: \S+\.\S+\.\S+\.\s...@gmail.com <mailto:s...@gmail.com>$/i DISCARD > > > > /etc/postfix/main.cf &l

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
Yes, ok - it's my fault. Next time I will ask a Postfix question here, I shouldn't forget to add a disclaimer "and please no CMS or web admin advice needed" ;-)

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
I've spent last 2 hours with Drupal CAPTCHA module - the default image and math captchas didn't stop any spam user at all - I could see fake users still registering - every few seconds (scary!). I have uploaded a russian font then and configured the CAPTCHA to use russian letters only (since my si

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
Yes, Reindl, thanks again for all these _obvious_ advices, while I was just asking a specific Postfix-related one. On Fri, Nov 22, 2013 at 1:03 PM, li...@rhsoft.net wrote: > my last post in this thread because we are going off-topic > > discard messages on a MTA is the *last resort* if nothing

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
I admin this website for 3 years already and despite it being just a small obscure card game - there haven't been a month without a challenge, where I had to go and change something manually. This postfix workaround is pretty perfect for now, I enjoy looking at maillog right now and see the Nov 2

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
Thanks, I agree with all general advices... But for now I just want to stop the flood (and also Drupal is difficult to modify for me + I don't want to add CAPTCHA to my already overloaded reg. form, etc., etc.). So the following seems to work for me for now - /etc/postfix/header_checks: /^To: \S

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
Hello, I know regexes well - but can't figure out, where to applly them in Postfix, since smtp_header_checks with DISCARD action seems not to be supported with OUTGOING mail? On Fri, Nov 22, 2013 at 11:22 AM, Robert Schetterer wrote: > > > Am 22.11.2013 10:48, schrieb Al

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
I think I'd like to use smtp_header_checks with DISCARD action - but http://postfix.org/header_checks.5.html says such a combination is not supported?

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
On Fri, Nov 22, 2013 at 10:45 AM, li...@rhsoft.net wrote: > > problems needs to be solved on the root cause not worked around somewhere > else > No, at the moment I am looking for the Postfix workaround. I'd like my postfix to drop OUTGOING mail silently if addressed to us.er.n.a...@gmail.com

Re: Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
Should I use smtp_header_checks here? I have also asked the question at http://serverfault.com/questions/556723/silently-drop-outgoing-mails-to-us-er-n-a-megmail-com-more-than-3-dots-in-user (And I apologize for my mail being not in plain text - I use Gmail and they have changed their interface a

Do not send mails to addresses with more than 3 dots in username part

2013-11-22 Thread Alexander Farber
Hello, I run a Drupal 7 website on a CentOS 6.4 server with postfix-2.6.6-2.2.el6_1.x86_64. In the last few months the amount of fake users trying to register at my website has increased dramatically - I get 2 or 3 of such registrations per minute. Mostly they have fake mail adresses with many d

Re: Google rejecting IPv6 mails

2013-10-10 Thread Alexander Wasmuth
On 10.10.2013, at 14:55, Andreas Herrmann wrote: > <***@gmail.com>: host gmail-smtp-in.l.google.com[2a00:1450:4001:c02::1a] >said: 550-5.7.1 [2a01:4f8:d16:4114:feed:1bad:beef:dead 1] Our > system >has 550-5.7.1 detected an unusual rate of unsolicited mail > originating from >you

Re: Using postfix in CentOS 6 to relay mails to first.l...@gmail.com

2013-01-18 Thread Alexander Farber
Hello Wietse - On Wed, Jan 16, 2013 at 2:43 PM, Wietse Venema wrote: > Alexander Farber: > HOWEVER, there is one problem that you need to be aware of. If your > machine forwards SPAM to gmail, then gmail will decide that your > server is a spammer. Gmail may then file "goo

Re: Using postfix in CentOS 6 to relay mails to first.l...@gmail.com

2013-01-16 Thread Alexander Farber
Hello - On Tue, Jan 15, 2013 at 3:05 PM, Wietse Venema wrote: > http://www.postfix.org/BASIC_CONFIGURATION_README.html with CentOS 6 I've ended up adding inet_interfaces = all virtual_alias_domains = videoskat.de balkan-preferans.de to /etc/postfix/main.cf and @balkan-preferans.de

Re: Using postfix in CentOS 6 to relay mails to first.l...@gmail.com

2013-01-15 Thread Alexander Farber
Hello - On Tue, Jan 15, 2013 at 2:36 PM, Reindl Harald wrote: > so the domain "videoskat.de" is not listed in your postfix config > > mydestination > local_recipient_maps > > did you read any documentation or are you starting blindly > from the centos-defaults and try to figure all knowledge > ou

Re: Using postfix in CentOS 6 to relay mails to first.l...@gmail.com

2013-01-15 Thread Alexander Farber
Thanks for replying - On Tue, Jan 15, 2013 at 1:55 PM, Wietse Venema wrote: > Alexander Farber: >> And have opened port 25 in the firewall: >> >> But now when I send a mail to s...@videoskat.de >> there is nothing to see in postfix logs: > > Nothing happens

Using postfix in CentOS 6 to relay mails to first.l...@gmail.com

2013-01-15 Thread Alexander Farber
Hello, I'm using: # cat /etc/*release CentOS release 6.3 (Final) # rpm -qa | grep post postfix-2.6.6-2.2.el6_1.x86_64 on 2 servers: preferans.de and (yes, funny name) static.103.78.9.176.clients.your-server.de I own several domains and would like all incoming mails addressing those domains to b

Re: LDAP schema for Postfix ? (Out of Office Notice)

2012-03-02 Thread Alexander Trentini
(1) 699 33 99-0 oder via Email an . mit freundlichen Grüßen, Alexander J. Trentini ITdesign Software Projects & Consulting GmbH Anton Freunschlag-Gasse 49, A-1230 Wien Tel.: +43 (1) 699 33 99-58, Fax: DW -33 Mobil +43 (664) 811 49 82 mailto:alexander.trent...@itdesign.at http://www.itdesig

duplicate mail elimination

2011-08-29 Thread Alexander 'Leo' Bergolth
Hi! I am trying to understand how duplicate mail elimination works in postfix. According to previous postings, mails that are duplicated by resolving multiple recipient aliases that refer to the same final address cannot be suppressed because local(8) doesn't currently handle that case. http://t

Re: Postfix STARTTLS bug on SLES11 SP1 still unfixed ? (solved !)

2011-04-26 Thread Alexander Grüner
Hi, just for info, it has been fixed on saturday. postconf | grep mail_ver mail_version = 2.5.6 rpm -qa | grep postfix postfix-2.5.6-5.6.1 Nessus scan is fine. Best regards, Alexander

Re: Postfix STARTTLS bug on SLES11 SP1 still unfixed ?

2011-04-15 Thread Alexander Grüner
ot; Fine. Have a nice weekend. Alexander

Re: Postfix STARTTLS bug on SLES11 SP1 still unfixed ?

2011-04-15 Thread Alexander Grüner
> The right forum is a SuSE support forum. Ok, I will go there. Your server needs to be patched if either: - remote sites verify your certificate when sending email over TLS. This is the case on my server. Thanks for the answer anyway :-) Best regards, Alexander

Postfix STARTTLS bug on SLES11 SP1 still unfixed ?

2011-04-14 Thread Alexander Grüner
best regards, Alexander

Best practices for implementing SRS or another SPF forwarding solution

2011-03-14 Thread Alexander 'Leo' Bergolth
Hi! I'd like to implement SRS (or another solution that rewrites the envelope sender on forwarding) using a milter plugin or an SMTP based content filter. What are your experiences? Does anyone already use such a solution? Which plugins are you using? Thanks in advance, --leo -- e-mail ::: Le

Re: X-Original-To: and smtpd_proxy_filter

2010-12-28 Thread Alexander Moisseev
Jeroen Geilman wrote: On 12/28/10 7:58 AM, Alexander Moisseev wrote: m...@domain.tld has an alias al...@domain.tld and mail sent to alias. X-Original-To: al...@domain.tld prepends to the message. It's OK. If the before-queue content filter enabled as shown below then X-Original-To:

X-Original-To: and smtpd_proxy_filter

2010-12-27 Thread Alexander Moisseev
tions= -o mynetworks=127.0.0.0/8 -o receive_override_options=no_unknown_recipient_checks -- Thanks in advance, Alexander Moisseev

Re: postfix/local: Too many open files when opening .forward

2010-09-24 Thread Alexander 'Leo' Bergolth
On 09/24/2010 04:56 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >>> Even then, a 1000 recipient list should be spread across two local(8) >>> processes, each delivering transactions of 50 recipients side by side. >>> I don't see that happen,

Re: postfix/local: Too many open files when opening .forward

2010-09-24 Thread Alexander 'Leo' Bergolth
On 09/24/2010 03:44 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> On 09/24/2010 02:31 PM, Wietse Venema wrote: >>> Alexander 'Leo' Bergolth: >>>>> Have you already tried the "no RESET_OWNER_ATTR()" solution? >>>&g

Re: postfix/local: Too many open files when opening .forward

2010-09-24 Thread Alexander 'Leo' Bergolth
On 09/24/2010 02:31 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >>> Have you already tried the "no RESET_OWNER_ATTR()" solution? >> >> I did a test run with the following aliases: >> >> testlist: member1, member2, leo2 >&g

Re: postfix/local: Too many open files when opening .forward

2010-09-24 Thread Alexander 'Leo' Bergolth
On 09/24/2010 03:07 PM, Alexander 'Leo' Bergolth wrote: > On 09/24/2010 02:31 PM, Wietse Venema wrote: >> Alexander 'Leo' Bergolth: >>>> Have you already tried the "no RESET_OWNER_ATTR()" solution? >>> >>> I did a test run wit

Re: postfix/local: Too many open files when opening .forward

2010-09-24 Thread Alexander 'Leo' Bergolth
On 09/24/2010 02:31 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >>> Have you already tried the "no RESET_OWNER_ATTR()" solution? >> >> I did a test run with the following aliases: >> >> testlist: member1, member2, leo2 >&g

Re: postfix/local: Too many open files when opening .forward

2010-09-24 Thread Alexander 'Leo' Bergolth
On 09/24/2010 12:42 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> On 09/24/2010 01:26 AM, Wietse Venema wrote: >>> Alexander 'Leo' Bergolth: >>>> The other misfeature that I'd like to point out again is the behavior of &g

Re: postfix/local: Too many open files when opening .forward

2010-09-24 Thread Alexander 'Leo' Bergolth
On 09/24/2010 01:26 AM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> The other misfeature that I'd like to point out again is the behavior of >> been_here() when the hash table is full. > > The alternatives to a limited-size hash are a) run out

Re: postfix/local: Too many open files when opening .forward

2010-09-23 Thread Alexander 'Leo' Bergolth
On 09/23/2010 11:03 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> OK, now I know why my messages are not requeued. >> >> First of all: The owner- alias IS REALLY set up correctly. :-) >> >> But if members of the list are aliases themselves, r

Re: postfix/local: Too many open files when opening .forward

2010-09-23 Thread Alexander 'Leo' Bergolth
On 09/23/2010 03:48 PM, Victor Duchovni wrote: > On Thu, Sep 23, 2010 at 03:36:27PM +0200, Alexander 'Leo' Bergolth wrote: >> When the owner- alias IS configured correctly, HOW is delivery >> distributed to multiple processes? > > See the deliver_indirect() code. A

Re: postfix/local: Too many open files when opening .forward

2010-09-23 Thread Alexander 'Leo' Bergolth
On 09/23/2010 01:11 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> However, I didn't notice any change such as separate processing of >> destination addresses. >> >> And I also cannot confirm that it uses a new queue id for each >> r

Re: postfix/local: Too many open files when opening .forward

2010-09-23 Thread Alexander 'Leo' Bergolth
On 09/23/2010 01:01 AM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> Ah! The problem seems to be the duplicate_filter_limit! >> >> I set it to 1 and now everything works fine! > > For the last time, you really should use the proper owner- alias &

Re: postfix/local: Too many open files when opening .forward

2010-09-22 Thread Alexander 'Leo' Bergolth
On 09/22/2010 04:53 PM, Alexander 'Leo' Bergolth wrote: > On 09/22/2010 01:22 AM, Wietse Venema wrote: >> Alexander 'Leo' Bergolth: >>> On 09/21/2010 10:57 PM, Wietse Venema wrote: >>>> Alexander 'Leo' Bergolth: >>>>> Sinc

Re: postfix/local: Too many open files when opening .forward

2010-09-22 Thread Alexander 'Leo' Bergolth
On 09/22/2010 01:22 AM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> On 09/21/2010 10:57 PM, Wietse Venema wrote: >>> Alexander 'Leo' Bergolth: >>>> Since yesterday I am experiencing big problems when delivering mail to >>>&

Re: postfix/local: Too many open files when opening .forward

2010-09-22 Thread Alexander 'Leo' Bergolth
On 09/22/2010 05:20 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> The file contains: >> 8< >> x...@gmail.com >> \lhock > > Your loop does not reproduce. I know. :( I don't think that the .forw

Re: postfix/local: Too many open files when opening .forward

2010-09-22 Thread Alexander 'Leo' Bergolth
On 09/22/2010 01:22 AM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> On 09/21/2010 10:57 PM, Wietse Venema wrote: >>> Alexander 'Leo' Bergolth: >>>> Since yesterday I am experiencing big problems when delivering mail to >>>&

Re: postfix/local: Too many open files when opening .forward

2010-09-21 Thread Alexander 'Leo' Bergolth
On 09/21/2010 10:57 PM, Wietse Venema wrote: > Alexander 'Leo' Bergolth: >> Since yesterday I am experiencing big problems when delivering mail to >> an alias-list. (Yes, I have set up an owner-listname alias. :-)) > > Do you have the RIGHT owner-listname alias. T

  1   2   >