[pfx] Re: OT: Turning Postfix documentation into podcasts

2024-10-08 Thread Matt Saladna via Postfix-users
On 10/8/2024 6:36 PM, Wietse Venema via Postfix-users wrote: Time to throw some generative AI into the mix, I thought. I uploaded the INSTALL instructions into Google's NotebookLM, and immediately got a one-paragraph summary that appeared to make sense. This might be useful for deciding whether

[pfx] Re: Ignoring postscreen DNSBL disposition by recipient address

2024-03-15 Thread Matt Saladna via Postfix-users
cially) Ding ding. - Matt On 3/15/2024 1:11 PM, Matt Saladna via Postfix-users wrote: Hello, I'm seeking a workaround for Microsoft's litany of IPs landing on DNSBL. They'd like all mail irrespective of DNSBL status to be delivered, which requires a skip if the sender IP is bla

[pfx] Ignoring postscreen DNSBL disposition by recipient address

2024-03-15 Thread Matt Saladna via Postfix-users
Hello, I'm seeking a workaround for Microsoft's litany of IPs landing on DNSBL. They'd like all mail irrespective of DNSBL status to be delivered, which requires a skip if the sender IP is blacklisted in postscreen. With separation between postscreen and smtpd, postscreen rejects the connecti

[pfx] Re: Exporting environment to specific pipe service

2023-09-26 Thread Matt Saladna via Postfix-users
AM, Wietse Venema via Postfix-users wrote: Matt Saladna via Postfix-users: I'd like to export a single var to a set of pipe processes without wrapping with env or setting export_environment in main.cf. This works in main.cf, export_environment=TZ MAIL_CONFIG LANG X=Y On the other hand, a

[pfx] Exporting environment to specific pipe service

2023-09-26 Thread Matt Saladna via Postfix-users
I'd like to export a single var to a set of pipe processes without wrapping with env or setting export_environment in main.cf. This works in main.cf, export_environment=TZ MAIL_CONFIG LANG X=Y On the other hand, adding -o export_environment="TZ MAIL_CONFIG LANG X=Y" in master.cf results in a

Re: systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Matt Saladna
th. - Matt On 7/23/2020 8:16 PM, Viktor Dukhovni wrote: On Thu, Jul 23, 2020 at 07:36:01PM -0500, Matt Saladna wrote: > Replace local submission with some IPC-based mechanism, e.g. SMTP. If my understanding is correct, submitting via SMTP would require credentials then to avoid anony

Re: systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Matt Saladna
ktor Dukhovni wrote: On Thu, Jul 23, 2020 at 07:17:19PM -0500, Matt Saladna wrote: Bit of a pickle here with systemd in CentOS 8. Certain protective directives, such as DynamicUser= or PrivateDevices=yes implicitly sets NoNewPrivileges=true (systemd/systemd #12476). In turn that's b

systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Matt Saladna
Hi all, Bit of a pickle here with systemd in CentOS 8. Certain protective directives, such as DynamicUser= or PrivateDevices=yes implicitly sets NoNewPrivileges=true (systemd/systemd #12476). In turn that's blocking setgid with /usr/sbin/postdrop. postdrop hangs indefinitely unable to send it

Re: Templating master.cf

2020-04-06 Thread Matt Saladna
k and Ansible is overkill. - Matt On 4/6/2020 1:35 AM, Peter wrote: On 6/04/20 6:26 pm, Matt Saladna wrote: Hello all, I provide a base master.cf part of an RPM release that I'd like to give users the ability to customize without overwriting each RPM release. You do realize that all you

Templating master.cf

2020-04-05 Thread Matt Saladna
Hello all, I provide a base master.cf part of an RPM release that I'd like to give users the ability to customize without overwriting each RPM release. Use case would be allowing per-sender bind/helos using sender_dependent_default_transport_maps or setting content milters beyond the basics t

Re: Rewriting local addresses before pickup

2018-12-22 Thread Matt Saladna
I feared that. Are there any suitable sendmail wrappers that would provide equivalent functionality? - Matt On 12/22/2018 7:47 PM, Viktor Dukhovni wrote: On Sat, Dec 22, 2018 at 07:32:37PM -0600, Matt Saladna wrote: I have an odd setup in which each base directory contains a complete

Rewriting local addresses before pickup

2018-12-22 Thread Matt Saladna
Hi all, I have an odd setup in which each base directory contains a complete virtual filesystem with potentially overlapping usernames (UIDs are unique). domain1.com could consist of system user user1 (UID: 500), user2 (UID: 501). domain2.com could consist of user1 (UID: 502), user12 (UID: 50

Re: smtpd map support for per-IP config?

2015-07-05 Thread Matt Saladna
Thanks Viktor, that worked perfectly! Are there any plans down the road to add configuration map support for smtpd processes by interface or IP? - Matt On 7/4/2015 8:56 PM, Viktor Dukhovni wrote: On Sat, Jul 04, 2015 at 01:53:06PM -0400, Matt Saladna wrote: We have a multi-homed server

smtpd map support for per-IP config?

2015-07-04 Thread Matt Saladna
Hi folks, We have a multi-homed server with ~20 IP addresses that listen for incoming mail connections. I'd like to setup a personalized SSL certificate for 1 IP address over submission (non-SNI). I know this can be accomplished by adding a custom service in master.cf that uses smtpd with a s