[pfx] Re: Not all errors are postfix's fault

2023-12-28 Thread Linkcheck via Postfix-users
Victor, thank you for your help. It prompted me first to look again at opendkim.conf and the various files of hosts, which were not entirely correct. Still one problem left after the corrections which, with your prompt re: macros, I tracked down to milter_mail_macros = i b in main.cf, which I

[pfx] Re: SMTP Smuggling short & long term fixes

2023-12-20 Thread Linkcheck via Postfix-users
Thanks, Bill. That did it. :) ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: SMTP Smuggling short & long term fixes'

2023-12-20 Thread Linkcheck via Postfix-users
I assumed it should be in main.cf. I meant which section. I tried to redefine it in smtpd_helo_restrictions since that seemed reasonable. Running postconf shows it, as you say set to no but I cannot set it to yes. -- Dave Stiles Linkcheck Bristol Web Design Tel: 0117 9248413

[pfx] Re: SMTP Smuggling short & long term fixes

2023-12-20 Thread Linkcheck via Postfix-users
On 20/12/2023 3:51 pm, Wietse Venema via Postfix-users wrote: "smtpd_forbid_unauth_pipelining = yes I tried that (3.7.6) and got... warning: unknown smtpd restriction: "smtpd_forbid_unauth_pipelining" Where should I have placed it? ___

[pfx] Re: Not all errors are postfix's fault

2023-12-20 Thread Linkcheck via Postfix-users
Thanks, I've now enabled that. I'm ptrty sure the reason, though, is the single Received line, which does (can) not give the domain's signing key from DNS. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to

[pfx] Re: Not all errors are postfix's fault

2023-12-20 Thread Linkcheck via Postfix-users
Thank you for your response, Viktor. > How does your milter decide which messages to sign? Does it perhaps look for: > milter_macro_daemon_name=ORIGINATING I originally had this in place but could find no reason for it online nor any sufficient reason to use it, so I removed it, with no

[pfx] Not all errors are postfix's fault

2023-12-19 Thread Linkcheck via Postfix-users
Saturday morning I put my new postfix mail server into operation, replacing a years-old previous incarnation (about 15 user domains). The new one, which has been under test for a long time, seemed to work with no problems. Monday morning I had two user complaints - could not send mail from

[pfx] Re: gmail failing SPF/DKIM

2023-11-30 Thread Linkcheck via Postfix-users
Thanks for all your help, guys. Appreciated! ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-29 Thread Linkcheck via Postfix-users
> GMAIL From: address From and replyto adresses are all based on the sender domain, so not appropriate. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-29 Thread Linkcheck via Postfix-users
> ... soft_bounce turned on. Thanks, Wietse, I'll look into it. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
On 28/11/2023 3:07 pm, Bill Cole via Postfix-users wrote: That's not a result, that's part of the DMARC policy Oh. Thank you for the correction, Bill. :) > That should not be enough... Something is wrong. I wonder if there is a DNS-resolving delay but I guess Im not going to easily discover

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
> ipv6 I have... inet_protocols = ipv4 ... with no AAA record But thanks anyway, Peter. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
If it's only "largely redundant" I would expect G to possibly ignore it but not fail on it. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
The dmarc results are ambiguous: r pass although dkim fails both tests. = google.com noreply-dmarc-supp...@google.com https://support.google.com/a/answer/2466580 10845692433607357330 1701043200 1701129599

[pfx] Re: gmail-headers

2023-11-28 Thread Linkcheck via Postfix-users
Thanks for that, Matthew. So not all gmail ones fail. Hmm. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-27 Thread Linkcheck via Postfix-users
Thanks, Shawn, appreciated. Hadn't thought of the dmarc report; I'll check it out. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-27 Thread Linkcheck via Postfix-users
I know that comment was not aimed at me but: I meant to include the protonmail header at the outset but forgot. Sorry. Below is all the header except protonmail's anti-spam section; I hope it helps. == Return-Path: X-Original-To: linkch...@protonmail.com Delivered-To:

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-27 Thread Linkcheck via Postfix-users
Thank you, Ralf; I got the form ok. > Looking good if you ask me Thanks. I couldn't fault it, either. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-27 Thread Linkcheck via Postfix-users
(Sorry, Wietse, I always forget to change the To field) > gmail rejects all messsages Seemingly only from web forms. We are in daily contact with at least one gmail user, with no problem, using the example domain I posted and with which I'm posting this. We do get a small number of genuine

[pfx] gmail failing SPF/DKIM

2023-11-27 Thread Linkcheck via Postfix-users
I maintain several web sites containing at least one web form. Forms are sent to my established postfix server to be turned into properly constructed email and sent on. The server is used for many conventional emails per day and set up to provide suitable dkim etc. All domains have correct