Re: password security

2022-04-26 Thread Mauricio Tavares
On Tue, Apr 26, 2022 at 1:54 AM wrote: > > Hello, > > This is off topic anyway but I think you're right. Fail2ban is not for the > lazy, it's for people who have a lot of time to lose in an inefficient > solution. Before cloud era F2B was a really great solution, but as it's been > pointed

Re: password security

2022-04-25 Thread Mauricio Tavares
On Mon, Apr 25, 2022 at 12:28 AM ミユナ (alice) wrote: > > do you know how to stop passwords from being brute-forced for a > mailserver? do you have any practical guide? > What about multifactor authentication? > thank you.

Re: Deprecated: white is better than black

2021-02-24 Thread Mauricio Tavares
On Wed, Feb 24, 2021 at 4:58 PM Emmett Culley wrote: > > On 2/24/21 12:40 PM, Dirk Stöcker wrote: > > On Wed, 24 Feb 2021, Wietse Venema wrote: > > > >> Postfix version 3.6 deprecates terminology that implies white is > >> better than black. Instead, Postfix prefers 'allowlist', 'denylist', > >>

Re: HELO and nothing else

2021-02-10 Thread Mauricio Tavares
On Wed, Feb 10, 2021 at 4:21 PM Ron Garret wrote: > > Hello (not helo :-) > > I am working on a spam filter and so I find myself spending a lot more > quality time with mail logs than I used to. One of the things I have noticed > is that I will get a lot of connections that send a HELO command

Re: postfix for IoT

2020-01-20 Thread Mauricio Tavares
On Sun, Jan 19, 2020 at 7:40 PM Wesley Peng wrote: > > How to compile postfix into the Embedded operating system (such as the home > router) and make it as a mail gateway for Smart home appliances? > Main issue I have here is your router has a very important job to do (routing traffic)

Re: pishing from ME

2019-03-22 Thread Mauricio Tavares
On Fri, Mar 22, 2019 at 9:46 PM Bill Cole wrote: > > On 22 Mar 2019, at 19:19, Christian Schmitz wrote: > > > Hi everyone: > > I have a small mail server with fewer emails account, The server is: > > Opensuse/Postfix/apache > > > > Today i receive a pishing email Words more or less say that

Re: stress tested postfix

2019-03-06 Thread Mauricio Tavares
On Wed, Mar 6, 2019 at 7:50 AM De Petter Mattheas wrote: > > Comments below > > Thanks for the help by the way :) > > -Original Message- > From: patpro > Sent: 06 March 2019 13:34 > To: De Petter Mattheas > Cc: Postfix users ; owner-postfix-us...@postfix.org > Subject: Re: stress tested

Re: Blocked by yahoo.com

2019-01-30 Thread Mauricio Tavares
On Wed, Jan 30, 2019 at 2:51 PM Paul C wrote: > > mxtoolbox is a great tool to see almost all blacklists on your ips, as > Luciano mentioned, but yahoo doesn't report their own blacklists so > that tool can only tell you if the ips have been blacklisted in other > places. TSS09 is the same as

Re: why postfix duplicate files

2017-10-25 Thread Mauricio Tavares
On Wed, Oct 25, 2017 at 3:46 AM, Petri Riihikallio wrote: >> Hi, I have found in my /etc/postfix directory list of duplicated files. I >> attach .txt file with this list. I don't do anything with postfix from few >> months. If it's not normal please tell me how fix

Re: Ban IP or Host

2017-10-16 Thread Mauricio Tavares
On Mon, Oct 16, 2017 at 7:32 AM, Maurizio Caloro wrote: > Hello Together > Please i have a lot of this messages, exist here any possibilities to ban > this ip or host, so this will try every view min. > > > > Oct 16 12:33:59 mail postfix/smtpd[23436]: warning: hostname

Re: Autoresponder

2016-04-16 Thread Mauricio Tavares
On Sat, Apr 16, 2016 at 7:28 AM, Peter wrote: > On 16/04/16 06:59, David Mehler wrote: >> I'm looking for an autoresponder, free, and one that does not rely on >> postfixadmin. > > > In addition to sieve which was already mentioned the vacation script > that comes with

Re: mail sent via sendmail is queued and delayed for approx. 300 seconds

2016-03-02 Thread Mauricio Tavares
On Wed, Mar 2, 2016 at 12:37 PM, Dietrich Streifert wrote: > Hi Mauricio, > > no, there is nothing in the log file. Here is the output for one sending > attempt: > > mail() on [/data/development/phpmail/mail.php:9]: To: > dietrich.streif...@googlemail.com --

Re: mail sent via sendmail is queued and delayed for approx. 300 seconds

2016-03-02 Thread Mauricio Tavares
On Wed, Mar 2, 2016 at 12:09 PM, Dietrich Streifert wrote: > Hi all, > > I'm running centos 7.2 with postfix 2.10.1, installed from the standard > centos 7 repo which corresponds to rhel 7. > > I'm using php mail to send mails which uses /usr/sbin/sendmail -t

Re: How to rewrite incoming & outgoing headers?

2015-10-23 Thread Mauricio Tavares
On Fri, Oct 23, 2015 at 6:02 AM, Wietse Venema wrote: > helices: > [ Charset windows-1252 converted... ] >> I've been through this before. Yes, I know MTA isn't preferred for such. >> This isn't happening elsewhere. >> >> We have 100s of domains. For example,

Re: Reject Emails with .review extension

2015-08-13 Thread Mauricio Tavares
On Aug 13, 2015 5:20 PM, Leonardo Rodrigues leolis...@solutti.com.br wrote: Em 13/08/15 12:07, Motty Cruz escreveu: Hello, Can I configure Postfix to reject emails with extensions .review? I get a lot of emails with extensions .date, .br. attachments can be encoded in lots of

Re: Postfix + Courier or Dovecot?

2015-06-18 Thread Mauricio Tavares
On Wed, Jun 17, 2015 at 8:23 PM, Noel Jones njo...@megan.vbhcs.org wrote: Postfix plays well with both of these, there should be no unexpected behavior whichever you choose. I personally think dovecot is easy to set up and simple to interface with postfix, so that's the way I lean. Dovecot

Re: Attack on my mailsystem

2015-06-16 Thread Mauricio Tavares
On Tue, Jun 16, 2015 at 9:51 AM, Jithesh AP jithesh...@gmail.com wrote: Ok thank you for the info, this did scare me :). Its taxing my small system. Have you considered running something like fail2ban on the system? It would temporarily (you set the time) block said IP at the firewall,

Re: Goodbye IBM, Hello Google

2015-03-24 Thread Mauricio Tavares
Congratulations to both you and Google! On Tue, Mar 24, 2015 at 4:00 PM, Wietse Venema wie...@porcupine.org wrote: After 18 years, including the best of my career, I decided that it was time to move on. I'll be working on security at Google NY. Please, there is no reason to say

Re: Signing-milter - are postfix tampering with messages?

2015-02-25 Thread Mauricio Tavares
On Wed, Feb 25, 2015 at 7:20 AM, Wietse Venema wie...@porcupine.org wrote: Sebastian Nielsen: I have a problem with signing-milter (http://www.signing-milter.org) that seem to be that postfix ?sabotage? the signed mail in its post-processing by doing something with the newlines. You must

Re: detecting encryption for outgoing mail

2015-02-15 Thread Mauricio Tavares
On Sun, Feb 15, 2015 at 9:12 AM, John j...@klam.ca wrote: A couple of the servers I support are medical offices, and for patient confidentiality reasons they need to send email out encrypted. After a lot of discussion they have come to the conclusion that in order to avoid accidentally

Re: Temporarily block all messages from a particular IP

2015-01-20 Thread Mauricio Tavares
On Tue, Jan 20, 2015 at 12:11 PM, li...@rhsoft.net li...@rhsoft.net wrote: Am 20.01.2015 um 17:49 schrieb Rosenbaum, Larry M.: What would be the best method for (temporarily) blocking all mail from a particular (internal) IP? Or alternatively, blocking all mail with a particular “MAIL FROM”

Re: On DKIM and Content-Transfer-Encoding

2014-07-02 Thread Mauricio Tavares
On Sun, Jun 29, 2014 at 8:20 AM, Wietse Venema wie...@porcupine.org wrote: Mauricio Tavares: [-] 220 mail.domain.com Test Mail Server [-] HELO raub.internal.domain.com [-] 250 mail.domain.com [-] MAIL FROM:r...@desktop.internal.domain.com You send HELO. That means you can only send 7-bit

Re: On DKIM and Content-Transfer-Encoding

2014-06-29 Thread Mauricio Tavares
On Tue, Jun 24, 2014 at 10:58 AM, Wietse Venema wie...@porcupine.org wrote: Mauricio Tavares: This email is mostly about understanding what is going on, how the process works than whether my install of postfix is working properly or the MUA is lying. In fact, I am using ssmtp to send

On DKIM and Content-Transfer-Encoding

2014-06-24 Thread Mauricio Tavares
This email is mostly about understanding what is going on, how the process works than whether my install of postfix is working properly or the MUA is lying. In fact, I am using ssmtp to send the email to postfix because I want to make my test as simple as possible (avoid helpful MUAs adding

Re: Regarding DNS lookup

2014-04-16 Thread Mauricio Tavares
On Wed, Apr 16, 2014 at 8:40 AM, Joy pj.netfil...@gmail.com wrote: Dear Expert, I have configured my postfix to lookup against LDAP server which hosts multiple domain all working fine but in case any domain moves from my mail server to another server like yahoo or

Re: can not telnet port 25

2014-02-20 Thread Mauricio Tavares
On Thu, Feb 20, 2014 at 9:31 PM, Feel Zhou feelz...@gmail.com wrote: Hello, My friend This is Tom, I'm sending my greeting from China. Today, one of my postfix server can not telnet any other mail server's port 25. It's working before 9:00am(bejing time CHina), I have restart the mail server

Re: network is unreachable

2014-02-11 Thread Mauricio Tavares
On Tue, Feb 11, 2014 at 9:34 AM, c cc sub...@gmail.com wrote: Andreas, Thanks for your quick reply--is there a setting in Postfix that I should configure to fix this problem? Thanks! Forget about postfix. First validate you have connection to that server. i.e. can you reach that port

Re: Error 550

2013-07-18 Thread Mauricio Tavares
On Thu, Jul 18, 2013 at 8:44 AM, Roman Gelfand rgelfa...@gmail.com wrote: would you have more info on this, as far as, how to go about researching this? Thanks again You probably will need to check the qmail server's log to see WTF is going on. If you stare at the log in the qmail server

Re: Do you people ever rest

2011-12-24 Thread Mauricio Tavares
On Sat, Dec 24, 2011 at 6:10 AM, Jerry postfix-u...@seibercom.net wrote: On Sat, 24 Dec 2011 06:34:37 +0100 (CET) Andreas Berton articulated: Merry christmas to you all! Have you ever considered the irony in the fact that we celebrate Christ's birthday every year by ignoring the fact that

Re: Need help setting up Postfix

2011-12-23 Thread Mauricio Tavares
On Fri, Dec 23, 2011 at 10:43 PM, . pe...@aleksandrsolzhenitsyn.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm very new at mail server stuff and not too technical in experiencebut can follow well written instructions. The first difficulty I had after installation of

Re: Low Budget Backups

2011-12-05 Thread Mauricio Tavares
On Sat, Dec 3, 2011 at 10:18 PM, email builder emailbuilde...@yahoo.com wrote: I'm currently backing up my machine at home to a WD My Passport USB drive, doing a monthly full and nightly differential, using a script that employs rsync.  Each backup set looks like a full backup.  Works

Re: Low Budget Backups

2011-12-03 Thread Mauricio Tavares
Sent from my Blackberry On Dec 3, 2011 9:59 AM, Wietse Venema wie...@porcupine.org wrote: Jim Seymour: On Fri, 2 Dec 2011 21:52:54 -0800 (PST) email builder emailbuilde...@yahoo.com wrote: [snip] As know one seems to have any other ideas, looks like it has to be some rsynch variant

Re: Chinese characters

2011-11-22 Thread Mauricio Tavares
On Tue, Nov 22, 2011 at 9:09 AM, Tolga to...@ozses.net wrote: Hi, Our mail server is getting A LOT of Chinese spam e-mails. How can I block these? In fact, how do I block e-mail with Chinese characters in Subject? Thanks, spamassassin or something similar would help you out with that;

Re: No STARTTLS when sending email to a BlackBerry device?

2011-09-29 Thread Mauricio Tavares
On Thu, Sep 29, 2011 at 4:18 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 29.09.2011 22:12, schrieb Ralf Hildebrandt: * Reindl Harald h.rei...@thelounge.net: None of these hosts supports any kind of transport level security (e.g. encryption using STARTTLS) you should complain to

Re: Postfix with virtual domains and the username

2011-02-02 Thread Mauricio Tavares
On Wed, Feb 2, 2011 at 5:10 PM, Matt mhop...@gmail.com wrote: I'm working on replacing an ageing Posfix install with a new server. On the old and new server we use virtual domains. On the old server we login with: username.domain.com On the new server Postfix is configured to allow login as:

Re: Open relay question

2010-11-05 Thread Mauricio Tavares
On 11/05/2010 03:41 PM, Alejandro Facultad wrote: Thanks but, is it right if coming from Internet I enter to your mail server and after that I send a message from your mail account to your project manager's mail account telling he's an asshole ??? I now SPF is ideal for avoid this behavior, but

Re: how to protect against directory attack?

2010-06-21 Thread Mauricio Tavares
On Mon, Jun 21, 2010 at 3:59 PM, motty.cruz motty.c...@gmail.com wrote: Hello all, What is the best way to protect against directory attack? Below is my log file and postconf -n! Thanks in advance! Jun 21 12:39:06 machine1 postfix/smtpd[72653]: lost connection after RCPT from

Re: quick and dirty SASL

2009-11-11 Thread Mauricio Tavares
On Wed, Nov 11, 2009 at 12:05 PM, Eero Volotinen eero.voloti...@iki.fi wrote: Rick Zeman wrote: On Wed, Nov 11, 2009 at 11:20 AM, Eero Volotinen eero.voloti...@iki.fi wrote: Rick Zeman wrote: http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL Whoops...been so long since I set that up

Re: No hash in Solaris 10

2009-08-05 Thread Mauricio Tavares
Brian Evans - Postfix List wrote: Mauricio Tavares wrote: I am compiling postfix 2.6.1 in a Solaris 10 box using the following script: #!/bin/bash make tidy make makefiles CC=gcc \ CCARGS='-DUSE_TLS -DHAS_PCRE -DUSE_SASL_AUTH \ -DDEF_SERVER_SASL_TYPE=\dovecot\ \ -I/usr/sfw/include

smtp authenticating for outside domain

2009-08-05 Thread Mauricio Tavares
Here is another trivial question: I have a postfix box I want to let a specific user in another domain, say otherdomain.com, to use it as his smtp. So, he would authenticate against it but would not have an email account in the machine. And, of course, nobody else but him from that