[pfx] Re: Recommendation for dkim signing

2023-11-06 Thread Andrew Beverley via Postfix-users
On 06/11/2023 15:43, Jens Hoffrichter via Postfix-users wrote: I'm currently leaning towards trying dkimpy-milter, as it seems to be something still in active development, and if things go wrong, it is always good that the maintainer of the software is still responding  That is probably the

Re: Delivering some domain's email locally and some via relay transport

2020-06-11 Thread Andrew Beverley
On Thu, 11 Jun 2020 13:16:25 -0400 (EDT) wie...@porcupine.org wrote: > Please look at the second half of my response? I discounted the other option in the response, as at the moment most recipients are local. Thank you for the other follow up email though; I will try that shortly. Many thanks,

Re: Delivering some domain's email locally and some via relay transport

2020-06-11 Thread Andrew Beverley
Thanks for the reply Wietse, > > I have a domain, for which I would like to deliver some email locally > > (as a virtual domain) and some email via a relay (using a transport > > map). The differentiation is based on the recipient address. > > Assuming that most recipients are local, use

Delivering some domain's email locally and some via relay transport

2020-06-11 Thread Andrew Beverley
Dear all, I have a domain, for which I would like to deliver some email locally (as a virtual domain) and some email via a relay (using a transport map). The differentiation is based on the recipient address. For example, I would like us...@example.com to be delivered locally, but to have email

Re: Running a transport action only as a catch-all

2017-05-11 Thread Andrew Beverley
On Thu, 11 May 2017 12:30:11 -0400 Viktor Dukhovni wrote: > > > On May 11, 2017, at 11:55 AM, Andrew Beverley <a...@andybev.com> > > wrote: > > > > I've tried setting relay_domains and > > relay_recipient_maps accordingly, but what I failed to mention i

Re: Running a transport action only as a catch-all

2017-05-11 Thread Andrew Beverley
On Wed, 10 May 2017 19:26:48 -0400 (EDT) Wietse Venema wrote: > > Normally I would avoid a catch-all for the obvious reasons, but > > we're undertaking a migration, and for a short period we want to > > have the Postfix server relay to another MX server any messages > > that it has no specific

Running a transport action only as a catch-all

2017-05-10 Thread Andrew Beverley
Dear all, Is there a way that I can specify that a transport rule should only be carried out as a "catch all" for email addresses that are not otherwise delivered locally? Normally I would avoid a catch-all for the obvious reasons, but we're undertaking a migration, and for a short period we

Re: majordomo + postifx + virtual domains + mysql

2016-07-05 Thread Andrew Beverley
On Tue, 5 Jul 2016 09:45:22 +0100 "postmas...@quantum-radio.net" wrote: > This is the problem line that can’t be put in anything but the > standard /etc/aliases file. Or the majordomo.aliases file. > > majordomo: “|/path/to/majordomo/wrapper majordomo” Can you put that line in the /etc/aliases

Re: Postscreen protocol error rejection

2015-10-16 Thread Andrew Beverley
On Fri, 2015-10-16 at 23:11 +1300, Peter wrote: > You're not supposed to respond to the teaser, it's a spam trap. > You're supposed to wait for the real banner and respond to that. If > you wait a few seconds postfix will issue the real banner and *then* > you respond with an EHLO command.

Re: Postscreen protocol error rejection

2015-10-16 Thread Andrew Beverley
On Fri, 2015-10-16 at 06:13 -0400, Wietse Venema wrote: > You did not behave as a legitimate MTA. > > The postscreen_greet_banner "220-text..." teaser banner becomes the > first part of a multi-line server greeting. > > 220-first line from postscreen > [6-second pause] > 220 last

Re: Postscreen protocol error rejection

2015-10-16 Thread Andrew Beverley
On Thu, 2015-10-15 at 21:09 -0400, Wietse Venema wrote: > > Clearly the sending server is not talking the SMTP protocol correctly, > > but would someone mind explaining the reason why please? > > This error message is described in a "readme" tutorial. >

Re: Postscreen protocol error rejection

2015-10-16 Thread Andrew Beverley
On Fri, 2015-10-16 at 06:13 -0400, Wietse Venema wrote: > You did not behave as a legitimate MTA. > > The postscreen_greet_banner "220-text..." teaser banner becomes the > first part of a multi-line server greeting. > > 220-first line from postscreen > [6-second pause] > 220 last

Postscreen protocol error rejection

2015-10-15 Thread Andrew Beverley
Hi, I'm seeing the following postscreen rejection: PREGREET 28 after 0.1 from [72.35.20.197]:20586: HELO ics.igloosoftware.com\r\n addr 72.35.20.197 listed by domain list.dnswl.org as 127.0.10.1 NOQUEUE: reject: RCPT from [72.35.20.197]:20586: 550 5.5.1 Protocol error;

Re: AntiSpam & AntiVirus Integration with Postfix: lots of tools, but which one's AREN'T 'dead'?

2015-09-09 Thread Andrew Beverley
On Tue, 2015-09-08 at 14:06 -0700, joh...@fastmail.com wrote: > I'm now at the phase of looking into Anti-Virus and Anti-Spam. Looks > like ClamAV and Spamassassin are the main options here. > > Both of those projects seem to be pretty alive and kicking too. > > So I'm left with how to

Delivering to Chinese mail servers

2015-09-01 Thread Andrew Beverley
Hi, Does anyone have any experience of delivering to the main Chinese email providers (such as 126.com, 163.com and qq.com)? I'm experiencing the sort of behaviour that one gets when delivering bulk mail from a new IP address to the main Western providers (rejections, rate-limits etc). I'm

Re: SPF and forwarding

2015-07-28 Thread Andrew Beverley
On Tue, 2015-07-28 at 16:50 -0400, Alex wrote: Hi Andrew, This requires that you have access to the account from which the email is being forwarded, correct? In my case, it is a single remote sender that is being forwarded on to gmail. No, you need access to the account *to* which

Re: SPF and forwarding

2015-07-27 Thread Andrew Beverley
On Mon, 2015-07-27 at 09:16 -0400, Alex wrote: Hi, On Sun, Jul 26, 2015 at 7:50 AM, Andrew Beverley a...@andybev.com wrote: On Sat, 2015-07-25 at 21:04 -0400, Alex wrote: I have a postfix-2.10.5 server on fedora, and have several users that forward their mail through to gmail

Re: SPF and forwarding

2015-07-26 Thread Andrew Beverley
On Sat, 2015-07-25 at 21:04 -0400, Alex wrote: I have a postfix-2.10.5 server on fedora, and have several users that forward their mail through to gmail. This is apparently enough to break SPF and make gmail think I'm the originator of the email, instead of the actual sender. Consequently,

Re: Autoresponders

2015-07-10 Thread Andrew Beverley
On Fri, 2015-07-10 at 09:03 -0400, James B. Byrne wrote: As much as I hate these things it seems that we do have a use case for one at the present. Ideally this would run as entry in an aliased :include: mailing list. I suppose I could just put a simple bash script together and call that but

Re: sent mail goes into spam

2015-06-16 Thread Andrew Beverley
On Tue, 2015-06-16 at 17:04 +0200, z...@oper.hu wrote: When my useres send mail most of the mails goes into spam. When you start sending from a new IP address, it is not unusual for the big email providers to spam your mail initially, until they get an idea of what's coming from your server and

Re: Documentation suggestion

2015-06-09 Thread Andrew Beverley
On Mon, 2015-06-08 at 14:59 -0400, Wietse Venema wrote: Andrew Beverley: On Mon, 2015-06-08 at 11:58 -0400, Wietse Venema wrote: What other TLS settings do you consider required? Postfix does not need a client certificate for sending email. My mistake. I'd added in some of those

Documentation suggestion

2015-06-08 Thread Andrew Beverley
Hi, Just a quick suggestion for the excellent Postfix documentation. Given that SASL authentication over TLS is becoming more prevalent, I think it would be worth adding a small note to this section: http://www.postfix.org/SOHO_README.html#client_sasl_enable stating that smtp_use_tls = yes is

Re: Documentation suggestion

2015-06-08 Thread Andrew Beverley
On Mon, 2015-06-08 at 11:58 -0400, Wietse Venema wrote: What other TLS settings do you consider required? Postfix does not need a client certificate for sending email. My mistake. I'd added in some of those settings when I couldn't get it working. In actual fact I was missing:

Monitoring for failed external commands executed through aliases

2015-06-01 Thread Andrew Beverley
Dear all, I have some external scripts that are executed through a variety of aliases[1]. I just discovered recently that one of the external commands was dying prematurely, so I wondered: what is the best way for monitoring this happening? I tried setting alerts on my mail.log for messages with

Re: Monitoring for failed external commands executed through aliases

2015-06-01 Thread Andrew Beverley
On Mon, 2015-06-01 at 14:24 -0400, Wietse Venema wrote: Andrew Beverley: So, is there a way to either change the return-path for all external commands, or alternatively set a higher log level for any errors? If the error happens in the external command, then you could configure the pipe(8

Re: Monitoring for failed external commands executed through aliases

2015-06-01 Thread Andrew Beverley
On Mon, 2015-06-01 at 15:09 -0400, Wietse Venema wrote: Postfix already logs the script's output (stdout and stderr) streams, and it already logs and reports a non-zero exit status. The problem is monitoring this though: it seems that when the above are logged they are logged at a level below

Re: Mail getting flagged as spam

2014-11-01 Thread Andrew Beverley
On Sat, 2014-11-01 at 10:55 +0100, Tiemo Kieft wrote: Unfortunately there is no real way to know why Google is behaving like this. Could it be a configuration error? Personally I think that the most likely explanation is that Google does not have enough history of the IP address. The more

Postfix consultancy to tune performance

2014-07-30 Thread Andrew Beverley
Hi Guys, I am looking for somebody who can provide consultancy to help me tune some Postfix installations. Can anybody provide recommendations? I can provide further details if needed, but in a nutshell I am delivering a lot of list email which is generated using Perl scripts. I would prefer an

Re: Postfix consultancy to tune performance

2014-07-30 Thread Andrew Beverley
On Wed, 2014-07-30 at 11:12 +0200, li...@rhsoft.net wrote: Am 30.07.2014 11:06, schrieb Andrew Beverley: I am looking for somebody who can provide consultancy to help me tune some Postfix installations. Can anybody provide recommendations? tune *what* context Mail delivery. Lots

Re: Postfix consultancy to tune performance

2014-07-30 Thread Andrew Beverley
On Wed, 2014-07-30 at 11:34 +0200, li...@rhsoft.net wrote: [...] spit a lot of messages in the queue means that from the application side the sending process is done, deliver bulk mail to the final RCPT is a different story Thanks for the additional info. for *really* large amount of mails

Re: Postfix consultancy to tune performance

2014-07-30 Thread Andrew Beverley
On Wed, 2014-07-30 at 14:23 +, Viktor Dukhovni wrote: On Wed, Jul 30, 2014 at 10:06:34AM +0100, Andrew Beverley wrote: Incidentally, I am submitting using the sendmail command, rather than SMTP (against the advice of the tuning README) - how much difference is this likely to make

Re: Postfix consultancy to tune performance

2014-07-30 Thread Andrew Beverley
On Wed, 2014-07-30 at 22:43 +, Viktor Dukhovni wrote: Connection re-use does not prevent concurrency, you'd need a pool of connections or parallel submission processes pulling messages from the application queue. Concurrency is more important than connection re-use. Ah, okay. Is

Re: Backup MXs and databases

2012-09-03 Thread Andrew Beverley
On Mon, 2012-09-03 at 23:56 +0200, Titanus Eramius wrote: So, I guess my question is: How do you, good and experienced folks, keep your backup MXs updated? I've looked at two solutions so far: MySQL Replication +1 for mysql replication for backup mail servers. It's been pretty reliable for

Re: Understanding priviliges when delivering to external commands

2012-06-30 Thread Andrew Beverley
On Mon, 2012-06-04 at 15:47 -0500, /dev/rob0 wrote: I've come across instances when mail is still delivered to a command using the user nobody (such as when a mail is generated from the local server rather than delivered from an external source). You forgot to include logs and

Re: Understanding priviliges when delivering to external commands

2012-06-30 Thread Andrew Beverley
On Sat, 2012-06-30 at 22:53 +0200, Reindl Harald wrote: Am 30.06.2012 22:41, schrieb Andrew Beverley: html_directory = /usr/share/doc/postfix-2.3.3/html Hmmm, 2.3.3 is very old, and did not have support for this: Well spotted. I should have said: this is Postfix 2.7.1. That's

Re: Postfix with Mailman and DKIM signing

2012-06-29 Thread Andrew Beverley
On Fri, 2012-06-29 at 13:26 -0400, Scott Kitterman wrote: On the Mailman-users list someone suggested Postfix may be a better bet for this type of delivery, I have been looking into this over the past few days and I can get the initial Postfix set up on a test VM, but want to know the best

Understanding priviliges when delivering to external commands

2012-06-04 Thread Andrew Beverley
I've been using the default_privs setting to control which user Postfix uses to deliver mail to external commands. However, I note from the manual that this setting is only used from an aliases file that is owned by root, or when delivery is done on behalf of root. I've come across instances when

Re: permissions 777, but still denied ???

2012-04-06 Thread Andrew Beverley
On Fri, 2012-04-06 at 21:35 +0200, Reindl Harald wrote: Trying to route email to a script. what are the permissions of the parent-folders? i bet there lies the problem I've had problems in the past with scripts not owned by the user that postfix was executing them as (even though that user

Re: Dkim with postfix

2012-03-03 Thread Andrew Beverley
On Sat, 2012-03-03 at 19:15 +0700, KingT wrote: I have install Postfix + Dovecot +OpenKim When I send a email from my mail server to gmail account, a check mail header in gmail account and it show is it ok ? please help me check it Authentication-Results: mx.google.com;

RE: Dkim with postfix

2012-03-03 Thread Andrew Beverley
On Sat, 2012-03-03 at 19:31 +0700, King™ wrote: When I send a email from my mail server to gmail account, a check mail header in gmail account and it show is it ok ? please help me check it Authentication-Results: mx.google.com; spf=neutral (google.com: X.X.X.X is neither

Re: selecting outbound IP

2012-02-08 Thread Andrew Beverley
On Wed, 2012-02-08 at 16:46 +0800, Joe Wong wrote: I read the details of the multiple instance support but it's not clear to me how I can use it to achieve my goal. Do anyone have similar setup and share your configuration here? Please don't top post. You'll have to give some more details as

Specifying different source IP address when using sendmail command

2012-01-15 Thread Andrew Beverley
Hi, I currently use multiple Postfix instances to send email from my server from different IP addresses. Each Postfix instance has its own master.cf file in its own configuration directory, and I use the -C parameter of the sendmail command to specify which one to use. I was wondering whether

Re: Specifying different source IP address when using sendmail command

2012-01-15 Thread Andrew Beverley
On Sun, 2012-01-15 at 12:15 -0500, Wietse Venema wrote: Andrew Beverley: Hi, I currently use multiple Postfix instances to send email from my server from different IP addresses. Each Postfix instance has its own master.cf file in its own configuration directory, and I use the -C

Re: Specifying different source IP address when using sendmail command

2012-01-15 Thread Andrew Beverley
On Sun, 2012-01-15 at 13:32 -0500, Wietse Venema wrote: Andrew Beverley: You have not explained what problem you are trying to solve with different IP addresses for different mailings (does mail from the same sender address go out via different IP addresses?), so I won't try

Re: Specifying different source IP address when using sendmail command

2012-01-15 Thread Andrew Beverley
On Sun, 2012-01-15 at 20:49 +0100, Robert Schetterer wrote: Sorry, I should have explained. I run a bunch of mailing lists, and use different IP addresses for different mailing lists (amongst other things). Everything runs from Perl scripts, perhaps this helps, if you can wrap it somehow

Re: Some email from list not getting sent?

2011-11-01 Thread Andrew Beverley
On Mon, 2011-10-31 at 13:24 -0500, Tim Tyler wrote: I have a peculiar problem where a client is trying so send out to 1700 local email addresses to our cloud (gmail), but it only seems to be able to send out a small portion of the list successfully. This person is using Outlook 10 with the

Re: Issues with clamav-milter on Postfix

2011-06-13 Thread Andrew Beverley
On Mon, 2011-06-13 at 06:32 -0400, Scott Kitterman wrote: On Sunday, June 12, 2011 09:46:41 PM Janantha Marasinghe wrote: Hi All, I have installed clamav-milter on my postfix 2.7 which is running on ubuntu 10.04 server LTS. I have configured the config file where the socket is the

Re: example showing how to track bad/bounce emails

2011-04-03 Thread Andrew Beverley
On Thu, 2011-03-31 at 12:56 -0400, Wietse Venema wrote: marshall: Hello; I've been searching around for a while, but I've not found any documentation or examples that show how you can configure Postfix to log bad/bounce/failed emails to MySQL or how to read a log file and parse

Re: OT: How to resolve big ISP mail drop

2011-02-12 Thread Andrew Beverley
On Fri, 2011-02-11 at 13:25 -0500, Kris Deugau wrote: Gary Smith wrote: Anyway, the question is, how does the community as a whole deal with big ISP's losing email? It seems that some companies (like ATT) seem to have less and less access to tools necessary for communicating with

Re: OT: How to resolve big ISP mail drop

2011-02-09 Thread Andrew Beverley
On Fri, 2011-02-04 at 14:54 -0800, Gary Smith wrote: I have a client who sends about 600mgs/week total from their SBS server through our email relays. The relay IP has a positive reputation and isn't flagged for spam on any of the lists. Recently they had an issue in which email they sent

Re: Bounce Processing Best Practices?

2011-01-02 Thread Andrew Beverley
On Sat, 2011-01-01 at 21:36 -0800, Steve Jenkins wrote: This is a best practices question for other Postfix users who may be using Postfix to send email to large opt-in mailing lists. snip So with all that explained, I have few questions: 1) What's the optimal way for us to process the

Re: Mysql queries being performed for domains not in virtual_alias_domains

2010-11-23 Thread Andrew Beverley
On Sun, 2010-11-21 at 16:50 -0500, Jerrale G wrote: On 11/21/2010 4:40 PM, Andrew Beverley wrote: Hi, I have noticed that my Postfix (version 2.3.8) is performing a virtual_alias_maps mysql database query for every email that it is processing, even if the domain is not listed

Re: Mysql queries being performed for domains not in virtual_alias_domains

2010-11-23 Thread Andrew Beverley
On Sun, 2010-11-21 at 17:13 -0500, Victor Duchovni wrote: On Sun, Nov 21, 2010 at 04:50:21PM -0500, Jerrale G wrote: On 11/21/2010 4:40 PM, Andrew Beverley wrote: Hi, I have noticed that my Postfix (version 2.3.8) is performing a virtual_alias_maps mysql database query for every email

Re: Mysql queries being performed for domains not in virtual_alias_domains

2010-11-23 Thread Andrew Beverley
On Tue, 2010-11-23 at 13:21 -0600, Noel Jones wrote: On 11/23/2010 12:48 PM, Andrew Beverley wrote: On Sun, 2010-11-21 at 16:50 -0500, Jerrale G wrote: On 11/21/2010 4:40 PM, Andrew Beverley wrote: Hi, I have noticed that my Postfix (version 2.3.8) is performing a virtual_alias_maps

Re: Mysql queries being performed for domains not in virtual_alias_domains

2010-11-23 Thread Andrew Beverley
On Tue, 2010-11-23 at 14:22 -0500, Victor Duchovni wrote: On Tue, Nov 23, 2010 at 06:53:44PM +, Andrew Beverley wrote: Note, that the above applies also to bare domain queries, so tables with domain = constraints cannot be used to store the list of virtual_alias_domains

Mysql queries being performed for domains not in virtual_alias_domains

2010-11-21 Thread Andrew Beverley
Hi, I have noticed that my Postfix (version 2.3.8) is performing a virtual_alias_maps mysql database query for every email that it is processing, even if the domain is not listed in virtual_alias_domains. So for example, I have andybev.com in virtual_alias_domains and a database query set up for