[pfx] Postfix to other mta

In default setup when postfix deliver messages to other MTA, is it going by ssl/tls or plaintext? Thank you. -- Jeff Pang jeffp...@aol.com ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le.

[pfx] Re: sending email to FQDN address without DNS

On 2024-07-12 09:45, Viktor Dukhovni via Postfix-users wrote: But, another option, which I'd prefer whenever possible, is to route the messages via a relay host that does have DNS. main.cf: # Punt external mail to a relay that can do DNS default_transport = smtp:[192.0.2.

[pfx] Re: sending email to FQDN address without DNS

If example.com has an A RR (or defined in hosts file) then even no MX RR the message should get delivered. I made no test on it though. On 2024-07-12 00:53, Adam Weremczuk via Postfix-users wrote: Hi all, I have a highly isolated host (e.g. most outgoing traffic blocked, no DNS) but I would l

[pfx] Re: host said: 452 4.5.3 Too many recipients

On 2024-07-10 17:06, Fourhundred Thecat via Postfix-users wrote: Hello, I sent an email with one "to" and one "cc", and in the logs, I see: host said: 452 4.5.3 Too many recipients but the next line says: Queued mail for delivery Your message was not delivered to peer MTA, and was cac

[pfx] question again about email routing

Hello experts, One of my customers in HK want to send bulk messages to local users (about 500/day). I plan to setup a separated sending out server in HongKong for him. my question is how to route messages for a specific account to a specific postfix server to send out? Thanks in advance --

[pfx] Re: spf

I am using the default value: PermError_reject = True But it totally depends by you. On 2024-07-08 17:36, natan via Postfix-users wrote: Hi What value do you use in postfix-policyd-spf in PermError_reject ? HELO_reject = Fail Mail_From_reject = Fail #update 20240706 #PermError_reject = False

[pfx] Re: DANE and STS

Does LE company have commercial revenue? I thought it was a non-profit organization. generate yourself and don't have to deal with LE's high turnover intermediaries nonsense. -- Jeff Pang j...@simplemail.co.in ___ Postfix-users mailing list -- post

[pfx] Re: DANE and STS

I am sorry to see pphosted.com and mimecast.com have no DANE deployed, since proofpoint and mimecast are the lartest email protection companies here. Can you also add SecuMail.de into the list? Thanks victor. Global:https://dnssec-stats.ant.isi.edu/~viktor/hosters.html -- Jeff Pan

[pfx] Re: DANE and STS

thank you so much victor for letting us know. - gmail: NO - yahoo: NO - outlook: - outbound: YES - inbound: Still in development/pilot phase, with initial deployments at: - hotmail.cz - hotmail.nl - uoou.cz

[pfx] Re: DANE and STS

May I ask if the main providers like gmail, outlook, yahoo, proton, gmx etc, have smtp-dane deployed? Thanks That's the reason you're unable to verify your TLSA records, the resolver in /etc/resolv.conf is not a DNSSEC-validating resolver, or you're missing "options trust-ad" in /etc/resol

[pfx] Re: DANE and STS

I asked the question "what's smtp dane in modern email system?" to chatgpt. Here is gpt's answer which I think to be valueful. so I share here. -- SMTP DANE (DNS-based Authentication of Named Entities) is a security protocol used in modern email systems to ensure secure and authenticated

[pfx] Re: DANE and STS

Thanks alex so much for the great info. Am 2024-06-25 08:44, schrieb Jeff Pang via Postfix-users: Hello sorry for the beginner question. how to deploy the following email security features? RFC 7672 SMTP-DANE Outgoing: # validate DANE smtp_dns_support_level = dnssec

[pfx] DANE and STS

Hello sorry for the beginner question. how to deploy the following email security features? RFC 7672 SMTP-DANE RFC 8461 MTA-STS is there a guide for that? Thanks -- Jeff Pang jeffp...@aol.com ___ Postfix-users mailing list -- postfix-users

[pfx] Re: inquiry for milter server

Thank you. I will check the doc of MIMEDefang. I am also quite familar with MIME::Lite (source level). I don't know what you consider qualifies as "mainstream" but if you need customized analysis, the most widely used FOSS milter for that is MIMEDefang, which has a rewrite by the original au

[pfx] No email forwarding?

I know how to setup postfix + opensrs for email forwarding. But google "why email forwarding is a bad idea" will get a lot of results. Should we not enable forwarding in now days? Thanks Jeff Pang jeffp...@aol.com ___ Postfix-users mailing list -- pos