[pfx] Postscreen & HAProxy Protocol v2

2023-12-06 Thread duluxoz via Postfix-users
Hi All, When using `postscreen_upstream_proxy_protocol = haproxy` is there anything "special" that needs to be specified to ensure the use of v2 of the haproxy protocol, or does postfix automatically detect which version of the haproxy protocol is in use? The doco isn't clear (to me, anyway).

[pfx] Re: SELinux/SMTP Relay Handshake Failure

2023-12-04 Thread duluxoz via Postfix-users
On 04/12/2023 19:44, Carsten Strotmann (sys4) via Postfix-users wrote: Hi Dulux-Oz, On 4 Dec 2023, at 9:20, duluxoz via Postfix-users wrote: Hi All, This issue is definitely SELinux related, because it only crops up when SELinux is enabled. I'm getting a `TLS handshake failed for service

[pfx] SELinux/SMTP Relay Handshake Failure

2023-12-04 Thread duluxoz via Postfix-users
Hi All, This issue is definitely SELinux related, because it only crops up when SELinux is enabled. I'm getting a `TLS handshake failed for service=smtp peer=[104.199.96.85]:587` error when attempting to rely via mailjet (that's who's IP that is) and also brevo/sendinblue. Any one have

[pfx] Re: [ext] non_smtpd_milters = $smtpd_milters

2023-12-01 Thread duluxoz via Postfix-users
wondering if a piece of smtp mail went through both milter lists. Cheers On 01/12/2023 20:34, Ralf Hildebrandt via Postfix-users wrote: * duluxoz via Postfix-users: A quick question (just to clarify things in my own mind): If `non_smtpd_milters = $smtpd_milters`, does this mean that an email

[pfx] non_smtpd_milters = $smtpd_milters

2023-12-01 Thread duluxoz via Postfix-users
A quick question (just to clarify things in my own mind): If `non_smtpd_milters = $smtpd_milters`, does this mean that an email received on port 25 passes through the milters twice; once for the `smtpd_milters` (from the `smtpd(8)` process) and again for the `non_smtpd_milters` (from the

[pfx] Re: Turn Off Verify Service?

2023-11-29 Thread duluxoz via Postfix-users
On 29/11/2023 20:14, Matus UHLAR - fantomas via Postfix-users wrote: On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I

[pfx] Re: Turn Off Verify Service?

2023-11-29 Thread duluxoz via Postfix-users
On 29/11/2023 19:45, Matus UHLAR - fantomas via Postfix-users wrote: On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I

[pfx] Re: Turn Off Verify Service?

2023-11-28 Thread duluxoz via Postfix-users
On 29/11/2023 15:38, Viktor Dukhovni via Postfix-users wrote: On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the master.cf

[pfx] Turn Off Verify Service?

2023-11-28 Thread duluxoz via Postfix-users
Hey All, I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the master.cf file. Is this actually good advice, or is there some sort of "gotcha" hiding in the background that'll bite us in the @rse?

[pfx] Re: TAKE NOTE 2: Future Let's Encrypt CA choice randomisation.

2023-11-23 Thread duluxoz via Postfix-users
Thanks Victor - so more t-shooting on our end, then - cool On 24/11/2023 04:16, Viktor Dukhovni via Postfix-users wrote: On Thu, Nov 23, 2023 at 07:48:33PM +1100, duluxoz via Postfix-users wrote: Hi All, This may be a stupid Q, but we're getting a `postfix/tlsproxy[89206]: TLS handshake

[pfx] Re: TAKE NOTE 2: Future Let's Encrypt CA choice randomisation.

2023-11-23 Thread duluxoz via Postfix-users
Hi All, This may be a stupid Q, but we're getting a `postfix/tlsproxy[89206]: TLS handshake failed for service=smtp peer=[104.199.96.85]:25` error in our logs when trying to relay via an SMTP Relay Service (both Mailjet and Brevo/SendInBlue). Could our issue be related to this LE issue? On

[pfx] Postfix Options Override Or Add When In Both mater.cfg & main.cfg

2023-11-02 Thread duluxoz via Postfix-users
Hi All, Quick Q: Do the individual `-o` options in the `master.cfg` file *add to* or *override* the equivalent option in the `main.cfg` file? For eg: In the `master.cfg` file I've got a `-o smtpd_relay_restriction =` line with a couple of restrictions set on the `submission` service. I've

[pfx] Re: No Permissions To TLS Certificates

2023-10-11 Thread duluxoz via Postfix-users
raised this issue, it now raises another Q in my mind: could this be something to do with SELinux interfering somehow (I'm not really up to speed on SELinux, unfortunately)? Cheers On 12/10/2023 01:40, Wietse Venema via Postfix-users wrote: duluxoz via Postfix-users: Oct 11 17:33:05

[pfx] No Permissions To TLS Certificates

2023-10-11 Thread duluxoz via Postfix-users
Hi All, Hoping someone can point me in the correct direction to solve this one (ie why is postfix "not playing well" with our TLS Certs)  This is all internal (ie NOT on the Internet), so the below logs, etc, have NOT been "edited" or obscured. We're running two (internal) email domains:

[pfx] Re: Looking For Advice/Guidance

2023-09-09 Thread duluxoz via Postfix-users
Thanks Viktor On 10/09/2023 03:02, Viktor Dukhovni via Postfix-users wrote: On Sat, Sep 09, 2023 at 06:24:27PM +1000, duluxoz via Postfix-users wrote: ***My Questions*** In the mail.example.local's postfix main.cf file: 1. Should mydomin be set to example.local or one of the external facing

[pfx] Looking For Advice/Guidance

2023-09-09 Thread duluxoz via Postfix-users
Hi All, I'm looking for some advice / guidance / help / whatever in making sure that I'm setting up my postfix installation correctly. I've gone through various on-line tutorials and read just about all of the postfix doco, but I'm still unsure / confused about exactly how to set a couple of

[pfx] Requesting A Sanity Check, Please, + A Couple Of Qs

2023-03-23 Thread duluxoz via Postfix-users
Hi All, TL:DR: Could someone(s) please have a look-see at our config as a sanity check for us, and also answer the questions at the end of this post - thanks. So we're finally putting in an email stack and while I've read just about every tutorial I can find on the web - and read *all* of

[pfx] Test Post - Please Ignore

2023-03-23 Thread duluxoz via Postfix-users
Thanks Guys  :-)___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Test Post - Please Ignore

2023-03-22 Thread duluxoz via Postfix-users
Sorry Everyone, but I need to test if my posts are going through Please ignore (or feel free to send me a confirmation) Cheers Dulux-Oz ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to