[pfx] Re: Adaptative delivery

2025-05-13 Thread Robert Schetterer via Postfix-users
Am 13.05.25 um 19:54 schrieb Dmitriy Alekseev via Postfix-users: Postfix not the right tools for doing such filtration, it's MTA, not antispam or reputation system. Fighting outbound spam is not an easy task and requires continuous human resources no matter how your antispam is good, while send

[pfx] Re: mail forwarding loop (chaining fetchmail | spamc | sendmail)

2025-03-17 Thread Robert Schetterer via Postfix-users
Am 17.03.25 um 07:21 schrieb Paul Neuwirth via Postfix-users: On Sun, 16 Mar 2025 17:29:00 +0100 Jaroslaw Rafa via Postfix-users wrote: Dnia 16.03.2025 o godz. 15:51:42 Paul Neuwirth via Postfix-users pisze: Yes that's the problem. It should work like that (and does now - see further below):

[pfx] Re: ANN: pfxhttp - A wrapper between Postfix and HTTP

2025-01-14 Thread Robert Schetterer via Postfix-users
Am 14.01.25 um 09:11 schrieb Christian Rößner via Postfix-users: Hello, I have written a lightweight HTTP proxy for Postfix socket maps and policy services. DESCRIPTION pfxhttp is a lightweight HTTP proxy seamlessly integrated with Postfix, enabling communication with external HTTP-ba

[pfx] Re: UGFzc3dvcmQ6

2023-09-12 Thread Robert Schetterer via Postfix-users
Am 13.09.2023 um 02:54 schrieb DL Neil via Postfix-users: Have been updating the .cf files (mostly ciphers, but also...) Our old friend "UGFzc3dvcmQ6" is back. (previously bounced-off without appearing in daily pflogsumm) Grrr! ... unknown[146.247.146.134]: SASL LOGIN authentication failed: UG

[pfx] Re: Postfix: running a script on authentication failure

2023-06-22 Thread Robert Schetterer via Postfix-users
Am 22.06.23 um 19:18 schrieb Steffen Nurpmeso: Robert Schetterer wrote in : |Am 22.06.2023 um 13:58 schrieb André Rodier via Postfix-users: ... |> Shortly after it has been setup, I see brute force attacks (not |> surprising) from a whole /24 network (more surprising). ...

[pfx] Re: Postfix: running a script on authentication failure

2023-06-22 Thread Robert Schetterer via Postfix-users
Am 22.06.2023 um 13:58 schrieb André Rodier via Postfix-users: Hello, all. I just set-up a new server, running postfix, with submission(s) activated on standard ports (587, 465) Shortly after it has been setup, I see brute force attacks (not surprising) from a whole /24 network (more surpris

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Robert Schetterer via Postfix-users
Am 07.03.23 um 20:32 schrieb Charles Sprickman: On Mar 7, 2023, at 1:14 PM, Robert Schetterer via Postfix-users wrote: Am 07.03.23 um 18:57 schrieb Patrick Ben Koetter via Postfix-users: * toganm--- via Postfix-users : Maybe it would have been a better idea to check if the mail server is

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Robert Schetterer via Postfix-users
Am 07.03.23 um 18:57 schrieb Patrick Ben Koetter via Postfix-users: * toganm--- via Postfix-users : Maybe it would have been a better idea to check if the mail server is listed in any rbl sites. For one it is listed in Abusix and my server is rejected it as a result What makes you believe the

Re: Spamtrap email — milter that can still receive, but reject?

2022-05-24 Thread Robert Schetterer
Am 24.05.22 um 16:14 schrieb Dan Mahoney: Hey all, Is there a milter of some sort that I can configure to reject (for some to: addresses) at the end of DATA, but still forward the mail on? Im dealing with some deleted users who both got a lot of spam, but also were in the critical path for t

Re: Restricting MAIL_FROM based on SASL login

2022-05-06 Thread Robert Schetterer
Am 06.05.22 um 11:04 schrieb Víctor Rubiella Monfort: Thanks for the proposals, the main problem is accounts names and domains could be totally different. I'm reconsidering this approach to add only selected accounts to able to cross domains, simplifing automation and increasing security. Altho

Re: Deprecated: white is better than black

2021-02-24 Thread Robert Schetterer
Am 24.02.21 um 23:29 schrieb Wietse Venema: j...@nunyuh.net: I've purposefully held off on responding to any of this but if the devs\list-owners are fine with the community converting this into a forum about race + software & computer terms, albeit temporarily, then fine - let's "damn the torped

Re: [OT] looking for a good mobile MUA

2020-03-21 Thread Robert Schetterer
Am 21.03.20 um 10:25 schrieb Wesley Peng: Hello On desktop I always use Thunderbird for MUA. Thunderbird is clean and lite, handling protocol well. But for mobile (I primarily use iOS), I couldn't find a good MUA to use. I tried almost every release on appStore (outlook, edison, bluemail, sp

Re: the strictest antispam laws?

2019-11-21 Thread Robert Schetterer
Am 21.11.2019 um 09:01 schrieb Wesley Peng: Hello I saw a trend that, every ESP has taken hard work on antispam policy. For example, from my test cases: 1. gmail totally can't be registered from PC, only mobile client (gmail, outlook etc) can sign up a new username. they require mobile verifi

Re: How to avoid being classified as spam by Google?

2019-10-07 Thread Robert Schetterer
Am 07.10.19 um 07:11 schrieb martin f krafft: Quoting "Wietse Venema", who wrote on 2019-10-06 at 19:13 Uhr -0400: Perhaps the SMTP client IP address 2001:db8:bad::cafe:: has no PTR record (or the name does not resolve to 2001:db8:bad::cafe::). Good point, but the address has a PTR record to a

Re: Webmin and DKIM

2019-08-27 Thread Robert Schetterer
Am 27.08.19 um 18:45 schrieb Linda Pagillo: Good day everyone. Quick question and please forgive me if this is redundant. I have a Postfix server running on CentOS7 and I use Webmin to manage it. Is there a way for me to set up and configure DKIM using Webmin? I have been searching Google and t

Re: Semi-OT: Getting blacklisted by hotmail/Google again and again

2019-03-17 Thread Robert Schetterer
Am 17.03.19 um 20:59 schrieb Erwan David: Le 17/03/2019 à 13:44, Czarek a écrit : Check if you are not an open relay. Configure SPF, DKIM, DMARC and Reverse DNS. Than contact to the spam lists. Here you can check where your IP is listed. Rgds Wesley. In my case thaere is no spam list, I am n

Re: Semi-OT: Getting blacklisted by hotmail/Google again and again

2019-03-17 Thread Robert Schetterer
Am 17.03.19 um 08:44 schrieb Matthew McGehrin: Hi Johannes, Gone are the days of being able to send normal emails to these providers. They use automated algorithms that block your email automatically. Your IP reputation has a lot to do with it as well, along with the IPs in your /24. For exam

Re: Old linux / postfix version - how add DKIM ?

2019-02-21 Thread Robert Schetterer
Am 21.02.19 um 17:03 schrieb Matus UHLAR - fantomas: On 21.02.19 10:36, Edouard Guigné wrote: My mail server is intalled in a old deprecated linux version (debian 5.0) with postfix 2.5.5 oh...  debian 7.0 is not supported for (nearly) a year, 6.0 for three years, 5.0 for seven years (debian

Re: detect fake mx, tls security encrypt

2018-12-22 Thread Robert Schetterer
Am 22.12.18 um 07:55 schrieb Stefan Bauer: nights later, a better approach seems to have a policy service that does the tls pre-checking. long time ago i wrote this https://blog.sys4.de/recipient-verification-tls-mandatory-modus-en.html perhaps it helps Something like this already around?

Re: Outbound DKIM signing milter options for Postfix?

2018-10-11 Thread Robert Schetterer
Am 11.10.2018 um 17:47 schrieb pg...@dev-mail.net: > On Thu, Oct 11, 2018, at 2:37 AM, Robert Schetterer wrote: >> http://dkimproxy.sourceforge.net/ "may" >> help for this case > > In principle. Tho, not clear yet on whether I want/prefer a milter or proxy. &g

Re: Outbound DKIM signing milter options for Postfix?

2018-10-11 Thread Robert Schetterer
Am 11.10.2018 um 10:51 schrieb Matus UHLAR - fantomas: On 11.10.18 13:35, Илья Шипицин wrote: we use opendkim (somehow it does not crash for us, yes, I seen many unresolved issues). however, I'd like to raise another question :) opendkim is attached to postfix via milter. it is pain. under high

Re: any api to read logs ?

2018-09-29 Thread Robert Schetterer
y of >>> message >>> > id ..." >>> > >>> > any suggestion ? > >> сб, 29 сент. 2018 г. в 16:21, Wietse Venema : >>> Open a web search engine, ask for for 'logfile analysis tools'. > http://sareport.darold.net/

Re: iOS Mail Client Not Copying to Sent Folder

2018-08-20 Thread Robert Schetterer
ls_cert_file = /etc/postfix/ssl/triata.pem > smtpd_tls_key_file = /etc/postfix/ssl/triata.key > smtpd_tls_received_header = no > smtpd_tls_security_level = may > smtpd_tls_session_cache_database = > btree:/var/spool/postfix/smtpd_tls_session_cache > transport_maps = mysql:/etc/

Re: clamav as a milter

2018-03-26 Thread Robert Schetterer
ents. Is there any > other way to do than using a milter? > > Thanks for your advices. > > André > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amts

Re: SASL login and Mail From field mismatch

2018-03-25 Thread Robert Schetterer
exist too ? > > I don't need user to be able to write as another user, so simple > variable comparison like '$sasl_user == $mail_from' would be a prefect > match. > > > Thanks in advance. > > -- > > Best regards, > Mate200 > > do want so

Re: Postfix as Relay for Exchange, User overquota

2018-01-02 Thread Robert Schetterer
mailbox quota, also the blog is old ,things may have changed , you may should cover the used port by vpn , ssltunnel etc more https://www.dovecot.org/list/dovecot/2016-July/104830.html https://wiki2.dovecot.org/Quota Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90

Re: Postfix, clamav and Spamassasin - delete high scoring spam

2017-10-25 Thread Robert Schetterer
é um dos destinatários aos quais > ela foi endereçada, por favor destrua-a e a todos os seus eventuais > anexos ou copias realizadas, imediatamente. > É proibida a retenção, distribuição, divulgação ou utilização de > quaisquer informações aqui contidas. > Por favor, informenos sobre

Re: Blocking mail from clients who

2017-10-15 Thread Robert Schetterer
te.com/> > Architecture for Real Enterprises > <https://www.infoworld.com/blog/architecture-for-real-enterprises/> at > InfoWorld > On Slippery Ice <https://eapj.org/on-slippery-ice/> at EAPJ > are you informed about dkim,spf,dmarc ? Do you relay for third party

Re: recommended smtp proxy script?

2017-10-13 Thread Robert Schetterer
.,rethink of your whole mail design , look at your logs then choose the tool or tec which design fits best for desired task Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsger

Re: Copying IMAP messages instead of Forwarding?

2017-09-25 Thread Robert Schetterer
tils some blog https://sys4.de/de/blog/2014/01/12/imap-weiterleitungen-mit-pop3toimap-als-ersatz-fur-smtp-weiterleitungen/ Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsg

Re: Postfix and Maildrop Config

2017-09-07 Thread Robert Schetterer
erhaps then no need for maildrop/procmail anymore, depends what you goal add dovecot / sieve Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorsta

Re: postscreen fail2ban filter

2017-07-17 Thread Robert Schetterer
sys4.de/de/blog/2014/03/27/fighting-smtp-auth-brute-force-attacks/ https://sys4.de/de/blog/2012/12/28/botnets-mit-rsyslog-und-iptables-recent-modul-abwehren/ Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: is there a RFC which suggests that the helo name should be DNS resolvable

2017-07-05 Thread Robert Schetterer
nd 821). > I think the question might be : is reject_unknown_helo_hostname rfc alike today, it wasnt in the past postfix faqs are only pointing on reject_non_fqdn_helo_hostname for rfc additional reject_invalid_helo_hostname is acceptable in real world setups Best Regards MfG Robert Schett

Re: What is the best anti-spam and anti-virus combos for Postfix?

2017-04-28 Thread Robert Schetterer
curity signatures, rspamd Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: F

Re: Recommended way to pause postfix local delivery while taking snapshot for backup

2017-04-09 Thread Robert Schetterer
Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Postfix, Hotmail never arrive

2017-03-05 Thread Robert Schetterer
Am 05.03.2017 um 17:16 schrieb Maurizio Caloro: > But you here in this Thread have you all three possiblities installed? > - SPF, DMARC, and DKIM ? yeah all full implemented Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße

Re: Postfix, Hotmail never arrive

2017-03-05 Thread Robert Schetterer
Am 05.03.2017 um 16:27 schrieb Michael Neurohr: > On 2017-03-05 10:01, Robert Schetterer wrote: >> Am 05.03.2017 um 09:11 schrieb Robert Schetterer: >>> >>> Hi Viktor, seems that hotmail etc has included some new antispam >>> procedures and now blocks big ip ra

Re: Postfix, Hotmail never arrive

2017-03-05 Thread Robert Schetterer
Am 05.03.2017 um 09:11 schrieb Robert Schetterer: > Am 04.03.2017 um 23:18 schrieb Viktor Dukhovni: >> >>> On Mar 4, 2017, at 4:50 PM, Maurizio Caloro wrote: >>> >>> If i send any mail go @hotmail this will never arrive, but Postfix Log are >>> here

Re: Postfix, Hotmail never arrive

2017-03-05 Thread Robert Schetterer
would help > your mail not get junked. > Hi Viktor, seems that hotmail etc has included some new antispam procedures and now blocks big ip ranges ( i.e Hetzner ) , spf, dkim etc does not help i filled out a form to get my servers ip open again , however their whole new antispam seems s

Re: postfix with possibilities for blackberry integration

2017-03-04 Thread Robert Schetterer
communicate with it? > > Thanks for any feedback > > Mauri > > as long you have a mail app that does smtp , imap, pop3 this should work found by google http://support.blackberry.com/kb/articleDetail?ArticleNumber=10154 Best Regards MfG Robert Schetterer -- [*] sys4 AG

Re: How to route mail to different isp-smarthosts depending on reply-to address

2017-02-19 Thread Robert Schetterer
hm perhaps try with header checks on reply-to headers action transport but i think that can result in unwanted routings cause in standard every mail will pass header checks...wait for list better ideas Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schle

Re: Postfix 20 years ago

2017-02-12 Thread Robert Schetterer
is not visible as new features (thought there > still are enough to make an upgrade worthwhile), but happens behind > the scenes as improvements to internal code, and updated tests to > ensure that future changes won't inadvertantly break something. > > Wietse >

Re: Effects of very large message_size_limit?

2016-09-14 Thread Robert Schetterer
crazy, but maybe I don't understand the risks well enough. some freemailers have a limit of 10 MB, so its perhaps a good choice to set it for outgoing external mail, for inside a higher amount up to 50 sometimes makes sense Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sy

Re: Administration for PostFix 3.0 Using SMTPUTF8

2016-08-21 Thread Robert Schetterer
Am 21.08.2016 um 19:01 schrieb Benny Pedersen: > On 2016-08-21 18:48, Robert Schetterer wrote: > >>> does dns servers support it aswell as idn ? >> sombody checked modoboa ? > > somebody created a ebuild for it ? > > i still miss your gentoo-overlay name :=) &

Re: Administration for PostFix 3.0 Using SMTPUTF8

2016-08-21 Thread Robert Schetterer
putf8 work imho > > and yes it being a problem for so long, that i just hack it to > postfixadmin adding the idn dns name to mysql, and it works, personly i > dont need smtputf8 here > > does dns servers support it aswell as idn ? > > > sombody checked modoboa ?

Re: Extracting delivery attempts from log files

2016-08-21 Thread Robert Schetterer
Am 21.08.2016 um 14:13 schrieb Wietse Venema: > Robert Schetterer: >> Am 21.08.2016 um 05:10 schrieb Steve Atkins: >>> I find I need to extract a list of deliveries, and delivery attempts, from >>> postfix logs. Ideally I'd like to feed /var/log/mail.log i

Re: Extracting delivery attempts from log files

2016-08-21 Thread Robert Schetterer
> message-id} for every email. > > Does anyone know of a log analyzer or some other script that'll do that? > > Cheers, > Steve > http://linux.die.net/man/1/pflogsumm https://github.com/benningm/saftpresse https://sourceforge.net/projects/logwatch/ Best Regards MfG

Re: Dynamic "MAIL FROM" / 5321.MailFrom

2016-08-15 Thread Robert Schetterer
For example, if a DMARC policy query for "blue.example.com" contained "rua=mailto:repo...@red.example.net";, the host extracted from the latter ("red.example.net") does not match "blue.example.com", so this procedure is enacted. A TXT query for "

Re: OT: ISP just gave be 13 days to switch IPs

2016-07-27 Thread Robert Schetterer
orried about doing. > > Thanks, > > Ben > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Brute force attacks in various ports

2016-07-26 Thread Robert Schetterer
r problem exactly Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Is it me, or is there a problem elsewhere?

2016-07-21 Thread Robert Schetterer
t not found, try again. > > $ host 2.0.0.127.bl.mailspike.net > 2.0.0.127.bl.mailspike.net has address 127.0.0.2 > 2.0.0.127.bl.mailspike.net has address 127.0.0.10 > >> On 21/07/16 20:54, Dominik Chilla wrote: > > Aloha mai Nai`a. > same here, i disabled bl.mailsp

Re: OT: ANN: rulestats - spamassassin and rspamd daily rule statistics

2016-07-20 Thread Robert Schetterer
Am 20.07.2016 um 19:20 schrieb Christian Rößner: > >> Am 20.07.2016 um 17:59 schrieb Robert Schetterer : >> >> Am 20.07.2016 um 09:17 schrieb Christian Rößner: >>> Hi, >>> >>> I was interested which spamassassin (including dspam) and rspamd rules a

Re: OT: ANN: rulestats - spamassassin and rspamd daily rule statistics

2016-07-20 Thread Robert Schetterer
ure spamass-milter but however very good idea Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: OT: ANN: S/MIME signing milter (for Postfix)

2016-07-13 Thread Robert Schetterer
try: > > https://signing-milter.org (Thanks to Andreas Schulze for the home) > > Code: https://github.com/croessner/sigh > > Feedback very welcome > > Christian > Hi Christian, do you plan SMIMEA Support on the long run ? https://tools.ietf.org/html/draft-ietf-dane-smim

Re: Brutal attacks

2016-07-09 Thread Robert Schetterer
Am 09.07.2016 um 19:40 schrieb Lefteris Tsintjelis: > On 09 Jul 2016, at 19:34, Robert Schetterer wrote: > > Am 09.07.2016 um 17:07 schrieb Lefteris Tsintjelis: >> Is this a good postfix way to stall attackers (besides log parsing and >> fire walling)? Bots are increasing dr

Re: Brutal attacks

2016-07-09 Thread Robert Schetterer
abwehr-des-botnets-pushdo-cutwail-ehlo-ylmf-pc-mit-iptables-string-recent-smtp/ additional fail2ban, but log parse was to slow at my side and for sure use postscreen if they love you , dont expect any better time with whatever solution you use, but if youre in luck its only a wave Best Regards MfG

Re: Ordering the preque filtering?

2016-05-22 Thread Robert Schetterer
Am 22.05.2016 um 19:00 schrieb Phil Stracchino: > On 05/22/16 12:30, Robert Schetterer wrote: >> loose mail means silent discard, this should never happen >> you might not get the mail or some bounce ,but there is less you can do >> with "broken" forwarders in any ca

Re: Ordering the preque filtering?

2016-05-22 Thread Robert Schetterer
t discard, this should never happen you might not get the mail or some bounce ,but there is less you can do with "broken" forwarders in any case. If someone decides to act as forwarder he has to honor existing dkim/dmarc/spf cases Best Regards MfG Robert Schetterer -- [*] sys4 AG http

Re: reality-check on 2016 practical advice re: requiring inbound TLS?

2016-04-12 Thread Robert Schetterer
make detection of these identification methods more automatic. > > Hats off to programmers for providing/maintaining tools that the masses don't > appreciate. > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 816

Re: Webmin with Postfix: recommended or not.

2016-03-28 Thread Robert Schetterer
ed it on relays , and limited the funkcions of the module to do very small changes on a few tables for total postfix ignorant users, you shouldnt use it as a general config tool > > -Tom Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziska

Re: RHEL / CentOS 7 RPMs

2016-03-14 Thread Robert Schetterer
e compilation options in the spec > file to fit our build needs. (Yet, I cannot pretend I am the best of > builders around. If I continue with these sRPMs, I might have to contact > the author for some assistance.) > > So, the issue still remains open to me. > > All the be

Re: RHEL / CentOS 7 RPMs

2016-03-12 Thread Robert Schetterer
If someone can advise me on this subject, I would appreciate any and all > feedback. > > Thanks in advance. > > All the best, > Nick http://repo.mailserver.guru/7/os/x86_64/repoview/postfix.html http://repo.mailserver.guru/7/os/x86_64/Packages/postfix-2.11.6-1.el7.centos.x86_6

Re: SV: Security: How to limit authentication attempts?

2016-02-21 Thread Robert Schetterer
ork at migrate > >>> The problem is already solved by Allen Coates. :-) >> >> what problem ? > > "how to configure smtpd to close connection after 3 authentication error"? > http://article.gmane.org/gmane.mail.postfix.user/254364 > > Gabor >

Re: Security: How to limit authentication attempts?

2016-02-21 Thread Robert Schetterer
NOT drop the connection until at least 3 attempts to >>authenticate have failed. >> >> The affected Postfix version is 2.11.3, our old MTA. >> The new one is not found yet by the bad guys. >> >> Regards >> >> Gabor > > Best Regards

Re: SV: SV: SV: Blocking TLDs

2016-02-20 Thread Robert Schetterer
hem or simply reject at the start when you recieve it, and only if your customer ordered you to do so but in general you are not allowed to burn otherones letters Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz

Re: Spawning milter processes

2016-01-31 Thread Robert Schetterer
Am 31.01.2016 um 18:04 schrieb Ron Garret: > > On Jan 31, 2016, at 1:28 AM, Robert Schetterer wrote: > >> Am 31.01.2016 um 09:56 schrieb Ron Garret: >>> Hello, >>> >>> What is the usual way to start a milter process? Can postfix be configured >>

Re: Spawning milter processes

2016-01-31 Thread Robert Schetterer
> rg > milters are usually seperate services Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsich

Re: How to configure postfix so that mail are received using time from the server

2016-01-15 Thread Robert Schetterer
lbox saving the mails at the wrong time. > Please can someone help me if something have to be done regarding this > issue? > Thanks > do you mean issue to fix with this plugin ? https://addons.mozilla.org/de/thunderbird/addon/imap-received-date/?src=search Best Regards MfG Robert Schett

Re: Postfix + Dovecot and the purpose of LMTP

2016-01-06 Thread Robert Schetterer
ailbox_base = /usr/local/virtual virtual_minimum_uid = 1001 virtual_uid_maps = static:1001 virtual_gid_maps = static:1001 both postfix an dovecot have more data in sql so its a question of "design" what you want Best Regards MfG Robert Schetterer -- [*] sys4 AG http://s

Re: Which Postfix Book do you recommend?

2015-12-30 Thread Robert Schetterer
try google dovecot postfix ubuntu to find masses of step by step instructions also http://wiki2.dovecot.org/HowTo should help and for sure the well done postfix doku > > > Am 30.12.2015 um 23:02 schrieb Robert Schetterer: >> Am 30.12.2015 um 21:47 schrieb Dennis Steinkamp: &

Re: Which Postfix Book do you recommend?

2015-12-30 Thread Robert Schetterer
dont know if it covers your needs > > Thank you for answering. > > Dennis Printed books in general can t be up2date these days as both projects postfix and dovecot are very active but they can teach basics Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90

Re: Save outgoing messages

2015-12-28 Thread Robert Schetterer
ern/ sorry german only Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: cleanup service and removing headers

2015-12-20 Thread Robert Schetterer
;> client=sage.inside.example.com[192.168.1. >> 7], sasl_method=PLAIN, sasl_username=alex >> Dec 13 21:57:00 orion postfix/auth-cleanup/cleanup[30346]: >> DE862A60121: message-id=<566e2ffc.20...@example.com> >> >> I'm not very good with regular expressions.

Re: cleanup service and removing headers

2015-12-20 Thread Robert Schetterer
;> client=sage.inside.example.com[192.168.1. >> 7], sasl_method=PLAIN, sasl_username=alex >> Dec 13 21:57:00 orion postfix/auth-cleanup/cleanup[30346]: >> DE862A60121: message-id=<566e2ffc.20...@example.com> >> >> I'm not very good with regular expre

Re: For wrong auth , how to block IP or introduce delay for sender in real time ?

2015-10-17 Thread Robert Schetterer
haps you wanna poke with this https://sys4.de/de/blog/2014/03/27/fighting-smtp-auth-brute-force-attacks/ https://sys4.de/de/blog/2012/12/28/botnets-mit-rsyslog-und-iptables-recent-modul-abwehren/ http://blog.schaal-24.de/firewall/postfix-postscreen-ip-in-die-firewall-eintragen/ Best Regards MfG R

Re: Can Postscreen and Smapassassin be used together

2015-09-10 Thread Robert Schetterer
Am 10.09.2015 um 10:47 schrieb Peter: > What you don't want to do is run postscreen and postgrey on the same > system. you can do it if you use i.e postgrey very selective but for sure portscreen leaves not very much for postgrey Best Regards MfG Robert Schetterer -- [*] sys4 AG

Re: Can Postscreen and Smapassassin be used together

2015-09-10 Thread Robert Schetterer
Am 10.09.2015 um 08:37 schrieb Robert Chalmers: > I’m currently running postscreen, and am wondering how I would add > spamassassin to the main.cf configuration, or are they mutually exclusive? > > no problem works nice , perhaps use it as milter Best Regards MfG Rober

Re: Postfix 3.x for RedHat/CentOS 7.x

2015-09-06 Thread Robert Schetterer
ackage it may be possible futher > improve the updated package and do an non-maintainer upload. Yes, yes, yes Debian/Ubuntu should go Postfix 3.x soon Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesell

Re: Postfix 3.x for RedHat/CentOS 7.x

2015-09-05 Thread Robert Schetterer
dex.html Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Tons of SMTP AUTH failures in logs

2015-08-28 Thread Robert Schetterer
Am 28.08.2015 um 20:28 schrieb Forrest: > On 8/28/15 2:09 PM, Robert Schetterer wrote: >> Am 28.08.2015 um 20:03 schrieb Forrest: >>> I've become used to the script kiddies sending out large connection >>> requests (I do have a threshold set). They are ab

Re: Tons of SMTP AUTH failures in logs

2015-08-28 Thread Robert Schetterer
> > I do block the IP spaces when I see this, which is a no-brainer. But I > wonder how others are mitigating this activity. Pointers, advice > welcomed (and thanks in advance). > > > _F > > if youre the only user, postscreen and fail2ban should be fine Be

Re: 554 5.6.1 Body type not supported by Remote Host

2015-08-28 Thread Robert Schetterer
Am 28.08.2015 um 19:56 schrieb Per olof Ljungmark: > > > On 2015-08-28 19:55, Robert Schetterer wrote: >> Am 28.08.2015 um 19:46 schrieb Per olof Ljungmark: >>> On 2015-08-28 18:07, Viktor Dukhovni wrote: >>>> On Fri, Aug 28, 2015 at 05:59:08PM +0200, Per

Re: 554 5.6.1 Body type not supported by Remote Host

2015-08-28 Thread Robert Schetterer
; Content-Description: Endast text-meddelande > Content-Disposition: inline > Content-Transfer-Encoding: 8bit > > As my knowledge sort of ends here I will ask our sysadmin Monday to look > over what is coming out of IMP, but I seriously doubt that it is > anythi

Re: Looking for pointers to assist me

2015-08-23 Thread Robert Schetterer
fore relaying it into the internal host. > depends on your network/firewall setup you may simply use sql as before , another option use smtp verify, or create static tables at/from sql change time with secure copy etc Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89)

Re: SPF and forwarding

2015-07-25 Thread Robert Schetterer
6B731HQXCHA402bes_"; > type="multipart/alternative" > MIME-Version: 1.0 > > Any ideas greatly appreciated. > Thanks, > Alex > https://de.wikipedia.org/wiki/Sender_Rewriting_Scheme perhaps with fedora read https://www.mind-it.info/forward-

Re: Transparent Proxy?

2015-06-09 Thread Robert Schetterer
a script in Python... to do the re-writes if necessary) > > Any advice is welcomed. Thank you all in advance. > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht Mü

Re: certificate verification failed

2015-05-14 Thread Robert Schetterer
x27;ve an hotmail.it account and no email has come (also inside spam/junk). > > thanks > > Pol > http://mail.live.com/mail/policies.aspx Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gese

Re: certificate verification failed

2015-05-14 Thread Robert Schetterer
rust failure your mail was delivered to hotmail, ask them what happened to it perhaps it went to some Junk folder etc Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München:

Re: Send copy of incoming email to old mail server

2015-05-07 Thread Robert Schetterer
e requirment . > if ve written a blog which might help, but does not exact match what you want , but it should help with mail routing basics https://sys4.de/de/blog/2015/05/04/postfix-gateway-virtual-bcc-multiplicator/ additional read docs from victors advice !!! Best Regards MfG Robert Schett

Re: Postfix forward mail to other server but leaving a copy...

2015-05-04 Thread Robert Schetterer
.html > Sent from the Postfix Users mailing list archive at Nabble.com. > read http://www.postfix.org/ADDRESS_REWRITING_README.html#auto_bcc http://www.postfix.org/postconf.5.html#recipient_bcc_maps Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Fra

Re: Spammer getting through despite RBL use

2015-04-26 Thread Robert Schetterer
is they use differing responses based on > some criteria about a spammer. Is that useful to Postfix? > show the log related to that host, show the whole main.cf Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 M

Re: Blocking compromised accounts (outgoing spam) and auth cracking

2015-04-18 Thread Robert Schetterer
generate strong random passwords for submission > users, these are not passwords users type in very often. The MUA > will store the password, so there's no reason to have a "memorable" > one. This also avoids passwords that are used at multiple sites > and get compromi

Re: always bcc and maps?

2015-04-03 Thread Robert Schetterer
07/mailarchiv-mit-dovecot-und-postfix-sortiert-nach-datum-mailadressen-und-ein-ausgehend-unterordnern/ sorry german only , but tec side should be understandable anyway Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz d

Re: Saslfinger download link

2015-02-26 Thread Robert Schetterer
can find it in third-party resources (RPM and DEB file). > > Just out of curiosity, what happened to *original* download link > http://postfix.state-of-mind.de/patrick.koetter/saslfinger/ ? > I think it moved or is in migration, stay tuned for more info Best Regards MfG Robert Schet

Re: Domain-dependent milter?

2015-02-22 Thread Robert Schetterer
Wietse > "perhaps" milter-manager can do it to http://milter-manager.sourceforge.net/reference/configuration.html Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München,

Re: Dovecot on a separate server as LDA

2015-02-18 Thread Robert Schetterer
no dovecot-lda on the > Postfix VM. > > Please give a tip. > Thanks in advance! use lmtp see https://sys4.de/de/blog/2014/11/17/sicheres-lmtp-mit-starttls-in-dovecot/ but you should not do it via internet link ( however ssl is now possible ), setup additional private network interfac

Re: Unwanted mail from Users (Backscatter mail)

2015-02-07 Thread Robert Schetterer
to do so that my smtp don't receive those mail and won't get > black listed. > > Please help. > > Regards. > > Tuhin. > Dhaka. BD. > do strong outgoing spam filtering, i.e with clamav-milter, spamassassin , or as framework amavis Best Regards MfG

Re: postfix, cyrus imap, backscatter?

2015-02-01 Thread Robert Schetterer
a with . > oh .. > > . > 250 2.0.0 Ok: queued as 7F1EA1B3D454 > quit > 221 2.0.0 Bye > Connection closed by foreign host. > > > > Thank you > > Carl > > > and where is your postfix conf..? read i.e http://de.postfix.org/httpmirror/postconf

Re: Postfix SMTP mail is sent to SPAM

2015-01-29 Thread Robert Schetterer
will spam-tag perfect mail from new > domains and/or new IP addresses, especially if a "large" amount of > mail shows up from that new domain or IP. For some undefined value > of large. > > See if you can sign up for the bulk mail feedback loop or whatever > bulk sender pro

Re: SPF configurations

2015-01-21 Thread Robert Schetterer
ain basis rather than globally. Example: Reject_Not_Pass_Domains = aol.com,hotmail.com thx Scott taking care of mail stuff in ubuntu Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der

  1   2   3   4   5   6   7   8   >