[pfx] Re: Null MX or not?

2024-08-01 Thread John Levine via Postfix-users
It appears that Laura Smith via Postfix-users said: > > > >> My doubt is that since the outgoing email server identifies itself as >> host1.example.com in the EHLO, is there a requirement or even an >> expectation that postmas...@example.com will be able to receive email. > > >I think the

[pfx] Re: Now Dovecot doesn't like me

2024-07-12 Thread John Levine via Postfix-users
It appears that John Fawcett via Postfix-users said: >I didn't see anywhere what your value of smtpd_sasl_type is (as >applicable to the sasl type used by the smtp server. Bingo. Thanks. In my defence, if you look at https://www.postfix.org/postconf.5.html which purports to list all of the

[pfx] Re: Cyrus SASL summary

2024-07-04 Thread John Levine via Postfix-users
According to Viktor Dukhovni via Postfix-users : >I don't recommend running "saslauthd" as the "postfix" user, better to >create a suitable dedicated user instead. OK, I'll invent a user. Perhaps if we can get Scott to undo the control file move he can add a sasl user at the same time. >> Other

[pfx] Cyrus SASL summary

2024-07-03 Thread John Levine via Postfix-users
I think these are the main things I learned: * Debian moved the sasl configuration file to a nonstandard place /etc/postfix/sasl/smtpd.conf Dunno how I would have figured that out if someone here hadn't told me. * The socket that the sasl daemon uses has to be inside the postfix chroot, by

[pfx] Re: Still no luck with Cyrus SASL

2024-07-03 Thread John Levine via Postfix-users
It appears that Patrick Ben Koetter via Postfix-users said: >IIRC Debian patches Postfix and expects smtpd.conf to be located in >/etc/postfix/sasl/smtpd.conf. Have you tried this? I just did and it worked. Thanks, everyone. Now I have to back out my hacks one by one and make sure I understand

[pfx] Re: Still no luck with Cyrus SASL

2024-07-02 Thread John Levine via Postfix-users
It appears that Viktor Dukhovni via Postfix-users said: >Have you posted "postconf -nf" and "postconf -Mf" output (with as-is >whitespace, including line-breaks)? I will, see below. >> But when I try to get postfix to authenticate, I cannot get it even to talk >> to >> the daemon. > >What's

[pfx] working simple config for cyrus SASL

2024-06-26 Thread John Levine via Postfix-users
I'm trying to set up a little POP toaster on debian that has a few addreses all in virtual domains. I'm using Cyrus SASL (no Dovecot allowed for reasons) and to keep it simple, I'm using sasldb authentication. I can set up the sasldb with saslpasswd2 but I am stuck getting the Cyrus sasl daemon

[pfx] Re: SPF hostname and domainname

2024-06-20 Thread John Levine via Postfix-users
It appears that Emmanuel Fusté via Postfix-users said: >In the general case (not null sender), HELO SPF validation does not >interfere with DMARC as DMARC only use the MAIL FROM identity. >There was historically a bug in some DMARC implementation witch evaluate >whatever SPF identity check that

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread John Levine via Postfix-users
It appears that Peter via Postfix-users said: >On 19/06/24 18:51, Tan Mientras via Postfix-users wrote: >> Hi >> >> *Trying to setup email REJECT when users try to send to a no-reply email.* > >There is no such thing as a no-reply email, there is no part of the >email specification that allows

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread John Levine via Postfix-users
It appears that Matus UHLAR - fantomas via Postfix-users said: >If one of recipients wants to accept mail from a sender while another >recipient doesn't, teoretically you can reject that sender at recipient >level, but that complicates configuration (but it's possible). >This would mean that

[pfx] Fastest way to reject unwanted sender

2024-06-15 Thread John Levine via Postfix-users
People I'm working with have a short list of addresses from which they don't want to accept mail at all, and they'd like to reject as early as possible without running it through anti-spam milters, ideally by rejecting the SMTP MAIL FROM command. What's the best way to do this? The list is short

[pfx] Re: long header folding and DKIM fails

2024-04-29 Thread John Levine via Postfix-users
It appears that Steffen Nurpmeso via Postfix-users said: W> |I did not want to insult you! > |In mind i had these canon..py snippets > | > | def strip_trailing_whitespace(content): > |return re.sub(b"[\t ]+\r\n", b"\r\n", content) > | > | > | def compress_whitespace(content): > |return

[pfx] Re: Fun with line endings, was Re: Mail text wrapping

2024-04-24 Thread John Levine via Postfix-users
It appears that Viktor Dukhovni via Postfix-users said: >On Wed, Apr 24, 2024 at 01:01:46AM -0000, John Levine via Postfix-users wrote: > >> >I must be interpreting this wrong because it appears postfix is not >> >accepting that. Here is the complete process. A messa

[pfx] Re: Fun with line endings, was Re: Mail text wrapping

2024-04-23 Thread John Levine via Postfix-users
According to Doug Hardie via Postfix-users : >I must be interpreting this wrong because it appears postfix is not accepting >that. Here is the complete process. A message arrives at my MTA addressed to >a specific address. Postfix delivers that >message to a pipe to my process which reads the

[pfx] userid for file delivery ?

2024-02-28 Thread John Levine via Postfix-users
Here's another question that might be answered in the documentation but I can't find it. If I have a file delivery like this in the /etc/aliases file foo: /a/b/somefile what userid writes to the file? postfix? nobody? I realize that for user mailboxes it's the user, but in this case, there's

[pfx] dumb-ish question about submission rewriting

2024-02-23 Thread John Levine via Postfix-users
I am trying to tidy up a complicated and messy postfix config that has all the issues you'd expect in one that has been twiddled by many people over a decade to handle multiple sort of related mail streams. Today's issue is ensuring that we only do submission rewrites on outgoing mail, not

[pfx] Re: The SMTP HELP command

2023-12-29 Thread John Levine via Postfix-users
It appears that Joachim Lindenberg via Postfix-users said: >Hello John, >are you willing to share what direction you/IETF are working towards? It's the EMAILCORE working group. You can see the documents here: https://datatracker.ietf.org/wg/emailcore/documents/ >What I am really missing is

[pfx] Re: The SMTP HELP command

2023-12-29 Thread John Levine via Postfix-users
It appears that Phil Biggs via Postfix-users said: >Where do see the "mandatory" requirement? > >Section 4.1.1.8 says: > > SMTP servers SHOULD support HELP without arguments and MAY support it > with arguments. SHOULD is IETF-ese for you have to, except that there might be reasons not to

[pfx] The SMTP HELP command

2023-12-28 Thread John Levine via Postfix-users
Over in the IETF we're slowly working on updating RFC 5321. Today's topic is the HELP command. The current spec says that it is mandatory to implment it. Most MTAs implement it by returning a fixed string, or something close to fixed, e.g., gmail's answer appears to include a code that tells you

[pfx] SMTP smuggling in Postfix

2023-12-19 Thread John Levine via Postfix-users
This paper describes a clever hack that uses defective line endings to embed a second SMTP session inside a first one, which has the practical effect of letting you send fake authenticated mail from anyone else who uses the same mail system you do. If that system is MS Outlook, that's a lot of

[pfx] What does postfix do with malformed messages?

2023-11-28 Thread John Levine via Postfix-users
If a malformed mail message shows up by SMTP (not local sendmail or submission), will postfix generally try to clean it up or just pass it along? I see the cleanup program and all the options about when to run it and what to tell it to do, but in practice, will a typical system clean everything

[pfx] Re: SMTP Require TLS Option?

2023-10-13 Thread John Levine via Postfix-users
It appears that Viktor Dukhovni via Postfix-users said: >Postfix supports DANE, but there's no MTA-STS support. And I've not >seen much by way of receiving MTAs advertising REQUIRETLS as a >capability I did a proof of concept implementation that advertises REQUIRETLS and then ignores it. As

[pfx] Re: A strange DMARC failure

2023-05-16 Thread John Levine via Postfix-users
It appears that Tom Reed via Postfix-users said: >Since the message was sent to mailing list which rewrites envelope address >and adds list signature, so: > >1) SPF for header From: address won't get pass due to SRS. >2) DKIM won't get pass due to list signature. > >So the DMARC failed totally

[pfx] Re: any web.de staff here?

2023-04-16 Thread John Levine via Postfix-users
It appears that Jaroslaw Rafa via Postfix-users said: >Dnia 16.04.2023 o godz. 16:32:41 Gerald Galster via Postfix-users pisze: >> >> Mails classified as spam or external forwards seemingly take another route >> via mout-xforward.web.de. These servers are SBL-listed by intention, most >> likely

[pfx] Re: any web.de staff here?

2023-04-16 Thread John Levine via Postfix-users
It appears that tom--- via Postfix-users said: >$ dig -x 82.165.159.35 +short >mout-xforward.web.de. > >Can anyone from web.de help with this? The only people who should be able to send mail through that server are web.de customers. If you are a customer, what happened when you contacted them