Re: What do these logs mean?

2009-01-14 Thread rafa
mouss wrote: and if the probes use multiple TCP connections (if the pop server disconnects after a failure), then he can use rate limiting in his packet filter if supported ("recent" in iptables, "overload" in pf). here is an example using iptables recent module: http://lists.opensuse.org/open

Re: Postfix - Blackberry

2009-01-23 Thread rafa
Steve Crawford wrote: postmas...@klam.ca wrote: I don't currently own a blackberry, but am thinking about getting one (the Obama effect). A friend who works in the Cellphone business has warned me that if I just setup the BB to go get my email from my postfix server this will treated as internet

Re: Replacing Message-Id for SASL authenticated senders

2009-02-08 Thread rafa
mouss wrote: and if a spam filter blocks/discards/quarantines mail because of this, it is the filter that should be blamed. I use this setup for detecting Backscatter. Until now without problems, but it's difficult to know.

No virtual alias with diferent cleanup for submission service

2009-02-12 Thread rafa
Hello everyone, I created a second cleanup for the submission service to have separate header checks from incoming emails. cleanup-out unix n - - - 0 cleanup -o header_checks=pcre:/etc/postfix/header_checks-out -o body_checks=pcre:/etc/postfix/bod

Re: No virtual alias with diferent cleanup for submission service

2009-02-13 Thread rafa
Noel Jones wrote: To fix this, just add -o receive_override_options= (ie. an empty value) to your submission service. Now it's working. Thanks. rafael.

Some Yahoo china servers using postfix + amavisd-new

2010-02-07 Thread rafa
Received: from icbu211.cnmail.cnh.yahoo.com (icbu211.cnmail.cnh.yahoo.com [119.42.242.94]) by farallon.riovia.com (Postfix) with ESMTP id B80472581C6 for ; Sun, 7 Feb 2010 12:31:03 -0200 (UYST) Received: from localhost (localhost [127.0.0.1]) by icbu211.cnmail.cnh.yahoo.c

Re: local system mail

2021-02-25 Thread Jaroslaw Rafa
content filter to running it as a milter as well. At least that was in my case :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
t;maennerchor-kirchseeon.de" from there) and also appropriate mappings for "the-grue.de" domain in /etc/postfix/vmailbox. Be aware that any local accounts - if you have any - will now become adddresses in the domain "maennerchor-kirchseeon.de" and not "the-grue.de&

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
and these addresses are accepted only in that domain and not any other. So you basically have a separate domain for the mailing list only. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
Dnia 21.03.2021 o godz. 18:48:12 Viktor Dukhovni pisze: > On Sun, Mar 21, 2021 at 05:14:39PM +0100, Jaroslaw Rafa wrote: > > > > > /^examplelist.*@list\.maennerchor-kirchseeon\.de$/DUNNO > > /@list\.maennerchor-kirchseeon\.de$/550 5.1.1 User unknown in lo

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
Dnia 21.03.2021 o godz. 18:43:40 Viktor Dukhovni pisze: > On Sun, Mar 21, 2021 at 04:22:06PM +0100, Jaroslaw Rafa wrote: > > > If you want "maennerchor-kirchseeon.de" to be a local domain instead, you > > need to make "the-grue.de" a virtual domain, > &g

Re: Echange virtual and local domain

2021-03-22 Thread Jaroslaw Rafa
counts in both domains. If you don't want this, you have to use recipient access restrictions like in the example I sent previously. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Allowing Special Characters in Email addresses

2021-03-24 Thread Jaroslaw Rafa
he receiving server (MX for "example.com" domain) to forward the mail via UUCP to the machine it knows as "joe" and deliver it to user "b" on that machine :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: inet_protocols

2021-04-01 Thread Jaroslaw Rafa
st regarding UCEPROTECT practices and basically everybody agreed that it isn't a reliable blacklist and they can't be trusted. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: problem connecting from Outlook Android

2021-04-01 Thread Jaroslaw Rafa
Dnia 1.04.2021 o godz. 19:38:30 DEPRÉ Gaëtan - NGServers.com pisze: > > I enabled port 465, but no chance. Still the same problem, only with > android/outlook... Looks like you have to sniff network traffic to see what's actually going on... -- Regards, Jaroslaw Rafa r.

Re: inet_protocols

2021-04-02 Thread Jaroslaw Rafa
am-friendly company/ISP or company/isp who doesn't care). L2 and L3 lists are exactly the problem. They recently changed rules for these and now list almost everyone there ;) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're

Re: spam - Women Pictures an sharing Contact

2021-04-05 Thread Jaroslaw Rafa
write your own content filtering rules (you can use eg. spamassassin, procmail, sieve etc. to do the actual filtering - there are many tools available) that target these particular messages. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they

Re: inet_protocols

2021-04-11 Thread Jaroslaw Rafa
are... well, just strange, doing everything differently. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Postfix : corrupted SMTP transactions?

2021-04-14 Thread Jaroslaw Rafa
cleartext SMTP session (like on port 587) in case of "TLS". In recent versions they changed these settings to "TLS over dedicated port" and "STARTTLS after connection". -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Postfix : corrupted SMTP transactions?

2021-04-17 Thread Jaroslaw Rafa
; either the primary name or an alias. We can just use port number in the Postfix master.cf file, then there will be no problem, right? (I am actually running another smtps instance on a nonstandard port on my server, and use just port number in master.cf, so I guess the same applies for standard

Re: Trusting postfix client certs for relaying

2021-04-17 Thread Jaroslaw Rafa
e incoming mail, no relaying at all. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: possibly stupid question about tls

2021-04-18 Thread Jaroslaw Rafa
tings in Debian. Here is conection from Postfix list server for your message: Apr 18 12:45:31 rafa postfix/smtpd[1653]: Anonymous TLS connection established from camomile.cloud9.net[168.100.1.3]: TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
not used at all, or "hosts: files" when only /etc/hosts is used and DNS is not used at all. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
't mean split views. I meant to create different "type forward" zones in /etc/named.conf with different set of forwarders for different domain suffixes. But I don't know what to do if you have everything under the same domain suffix. -- Regards, Jaroslaw Rafa r...@rafa.eu.or

Re: Certificate Postfix.org missing?

2021-04-22 Thread Jaroslaw Rafa
uters (all newest releases) connect perfectly to http-only sites. Maybe you have HTTPS only mode turned on in the preferences (AFAIK, it is not on by default), or have some extension like "HTTPS Everywhere" installed? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years,

Re: Certificate Postfix.org missing?

2021-04-23 Thread Jaroslaw Rafa
send to them must pass SPF/DMARC check - as a method of "antispam protection" (which it isn't, because spammer can have a perfectly valid SPF/DMARC setup) - people were forced to adopt it universally, whether necessary or not (which for example causes problems with mailing lists). --

Re: AW: AW: Change default reject message

2021-04-23 Thread Jaroslaw Rafa
thing in non_smtpd_milters=. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Change default reject message

2021-04-23 Thread Jaroslaw Rafa
local mails come from existing accounts in your own domain, right? What other source could they come from? So you will be not sending bounces out to the Internet. They will stay at your local machine. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to scho

Re: Certificate Postfix.org missing?

2021-04-23 Thread Jaroslaw Rafa
Dnia 23.04.2021 o godz. 08:27:31 Phil Stracchino pisze: > On 4/23/21 5:15 AM, Jaroslaw Rafa wrote: > > However, "thanks" to Google and other > > big e-mail providers who started to enforce that EVERY email send to them > > must pass SPF/DMARC check - as a method of

Re: Certificate Postfix.org missing?

2021-04-26 Thread Jaroslaw Rafa
egards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: postfix newbe - which standard configuration to use

2021-04-28 Thread Jaroslaw Rafa
pposite: if you will only be sending mail via VPN (that means from a fixed IP address), then don't bother using submission port, just add that IP to "mynetworks" and send the mail to your server the normal way via port 25... Less to set up... -- Regards, Jaroslaw Rafa r...@rafa.

Re: postfix newbe - which standard configuration to use

2021-04-28 Thread Jaroslaw Rafa
his Postfix server) without the need to add authentication to it... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Postfix shows unknown instead of resolved hostname

2021-04-29 Thread Jaroslaw Rafa
;t match, sendmail logged something like unknown (reverse.dns.hostname) [ip.ad.dr.ess] and when they match, it logged just reverse.dns.hostname [ip.ad.dr.ess] I guess the OP would be satisfied if Postfix did something similar? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million

Re: Postfix shows unknown instead of resolved hostname

2021-04-29 Thread Jaroslaw Rafa
I thought that sendmail logs the HELO > > unknown (HELO-or-EHLOname [ipaddress]) Maybe you're right, I don't remember too well, as I stopped using sendmail quite long time ago. However, I'm sure it also logged non-matching DNS in somehow similar way... -- Regards, Jaroslaw Ra

Re: Controlling maildir sub-folder delivery?

2021-05-04 Thread Jaroslaw Rafa
e (delivering to Sent folder) it works well. You can think of creating something similar if you only want to deliver to a particular folder. For something more general, however, using sieve (or even procmail, as mentioned) would be definitely a better solution. -- Regards, Jaroslaw Rafa r

Re: Override relayhost by MX

2021-05-06 Thread Jaroslaw Rafa
t is described here: http://www.postfix.org/tcp_table.5.html Seems like this can be a solution for you. You have of course to write the appropriate program that replies with the correct server address depending on recipient's email adress. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -

Re: Override relayhost by MX

2021-05-06 Thread Jaroslaw Rafa
hat users have full control over, you usually send mail directly and not via relayhost. In both cases there's no issue. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Message sent by SMTP get lost whereas those via pickup(sendmail) are OK

2021-05-16 Thread Jaroslaw Rafa
rpose > SMTP transaction tester utility program for generating test emails > using SMTP transactions. For example: Ubuntu desktop should have Thunderbird preinstalled. Why not just try to send mail using a regular mail client? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a mill

Re: Message sent by SMTP get lost whereas those via pickup(sendmail) are OK

2021-05-17 Thread Jaroslaw Rafa
sendmail. Thunderbird, as far as I remember (I haven't used it for a few years, I use Evolution as my desktop client now) can be configured to use locally installed sendmail, but this is a special case. Submission or SMTP is still the default method of sending mail it uses. -- Regards, Ja

Re: Message sent by SMTP get lost whereas those via pickup(sendmail) are OK

2021-05-17 Thread Jaroslaw Rafa
mandatory) TLS whenever possible, only if the server does not offer it, but offers TLS-wrapped port 465, fall back to that instead. But all this discussion has nothing to the original question, as the OP explictly wanted to test sending mail via port 25. -- Regards, Jaroslaw Rafa r...@rafa.e

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
connection between server X and server Y so that only server Y can access the services on server X (iptables). -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
al mail if not deliver it locally? Where else can it be delivered if there is only one server? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
Dnia 18.05.2021 o godz. 13:47:15 post...@ptld.com pisze: > >On 05-18-2021 12:36 pm, Jaroslaw Rafa wrote: > >If Postfix on server X is only for submission, then how does Postfix on > >server Y deliver mail to server X? > > It doesn't because as you said, server X is o

Re: too many errors after RCPT

2021-05-18 Thread Jaroslaw Rafa
a single message with multiple recipients? Tell him to use some software that will send one message per recipient and per session. This will take time, but it should be basically one-time job and will allow him to catch the bounces and remove the bouncing addresses from his list. -- Regards,

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
needs to be available: "The Dovecot SMTP submission service directly proxies the mail transaction to the SMTP relay configured with the following settings:" -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
service. And if Postfix weren't there, then Dovecot submission service will relay mail via...? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: authentication required error codes

2021-05-31 Thread Jaroslaw Rafa
strictions > # -o smtpd_sender_restrictions=$mua_sender_restrictions > > but no proposed values for those. These lines are commented out. Did you uncomment them in master.cf? If you didn't, then you are probably keeping global values from main.cf for these parameters without overriding them. --

Re: Does smtpd_milters=inet:.... round-robin if the hostname has multiple IPs?

2021-05-31 Thread Jaroslaw Rafa
-- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Unable to get Postfix to respond on port 465

2021-06-14 Thread Jaroslaw Rafa
Dnia 14.06.2021 o godz. 09:51:30 Linda Pagillo pisze: > > Any other ideas of what may be causing this? Is it possible that the client is trying STARTTLS (and not TLS-wrapped SMTP) on port 465? Have you tried a different mail client instead of Outlook? -- Regards, Jaroslaw Raf

Re: Has rfc2487 been obsoleted and mandatory TLS in smtpd is now kosher?

2021-07-29 Thread Jaroslaw Rafa
now have a formal business justification to be not compliant with the mentioned security guidelines - because they will be unable to communicate with their customers if they comply. That's just how the corporate bureaucracy works... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a

Re: Best current practice to analyze brute force login attempts?

2021-07-30 Thread Jaroslaw Rafa
t; failure, with the time stamp as the only link between both. Well, maybe I'm using quite old versions of Postfix and Dovecot, but with default logging setup on Debian plus "auth_verbose=yes" in Dovecot config I get in /var/log/mail.log lines like: Jul 30 23:15:17 rafa postfix/smtpd

Re: Google spam...

2021-08-18 Thread Jaroslaw Rafa
elps. At least they will know :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: STARTTLS abuse

2021-09-09 Thread Jaroslaw Rafa
7;t > really know. Whatever SASL layer Postfix is using obviously must > know, but it is likely not to log it. I have asked this already here, but nobody replied. Maybe I try again :) When and why was the logging regarding AUTH failures changed? Because in quite old version of Postfix I ca

Re: Problems emailing bell.net or sympatico.ca addresses

2021-09-18 Thread Jaroslaw Rafa
t it doesn't let > you see anyone else's content. Wierdly unhelpful. I vaguely remember that this topic has been discussed several times on mai...@mailop.org mailing list. I highly recommend this mailing list for dealing with deliverability issues. -- Regards, Jaroslaw Rafa r...@r

Re: Rewriting the MAILER-DAEMON address and header formats

2021-09-18 Thread Jaroslaw Rafa
es seem to enable DKIM signing for them > (via the milter application that I've configured), it still does not > apply any header checks to them. If you are able to apply a milter to them, you can write a milter that rewrites those headers. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Having unexpected results using sender_canonical_maps

2021-11-04 Thread Jaroslaw Rafa
to include some.domain literally in your regular expression, then it won't match again on the already transformed address, which does not contain some.domain. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once ther

Re: method to discard email with body containing gmail address

2021-11-07 Thread Jaroslaw Rafa
essage in mutt, it puts the e-mail address of the original sender (not you) at the beginning of the subject of the forwarded message. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she

Re: Nessus says I have an open relay

2021-11-09 Thread Jaroslaw Rafa
ix should outright reject the message without trying to deliver it. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: [EXTERNAL] Nessus says I have an open relay

2021-11-09 Thread Jaroslaw Rafa
tant one) and there's no reason to replace them (or sometimes there isn't even anything to replace them with). The concept of trusted hosts/networks has a reason behind it and cannot be abandoned so simply... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids

Re: Postgrey - whitelisting subdomains

2021-11-26 Thread Jaroslaw Rafa
ion.outlook.com). The *client* address in your case is mx0f-00376703.gpphosted.com, so it is *not* from domain dhs.gov. So it was not whitelisted. As far as I know, there's no option to whitelist *sender* addresses in postgrey. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a m

Re: Changing Message-Id for authenticated users

2021-12-01 Thread Jaroslaw Rafa
this check for authenticated users (ie. submission ports). -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: are my helo restrictions too strict ?

2021-12-03 Thread Jaroslaw Rafa
own reject_unknown_helo_hostname is known to produce quite a lot of false positives, and it is not recommended to use this restriction. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: virtual mailbox domains??

2021-12-06 Thread Jaroslaw Rafa
you should try to configure an email client like Thunderbird and check email sending/receiving with it. Not everything at once! -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with

Re: virtual mailbox domains??

2021-12-06 Thread Jaroslaw Rafa
19/0.01/0.01/0.02, dsn=2.0.0, status=sent (250 2.0.0 V/yJDH9grmHtmgAAdabr2Q Saved) Dec 6 19:11:59 softlinksys postfix/qmgr[38286]: 04E4CA06C5: removed It's only strange why your qmgr is logging empty "from", and lmtp empty "to". But this message should be somewhere on you

Re: what's best guess record for SPF

2021-12-09 Thread Jaroslaw Rafa
(eg. Postfix) usually use. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
ut yes, Google IS dumb enough to do so. > If so, given they allow spammers virtually free range to send FROM > gmail this is a bit hypocritical. 100% agree. They simply don't care about anyone that isn't using Gmail. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
7;s what PSL is for - to specify which domains should *not* be mixed up with one another. Don't defend Google's email service, it's already so bad that it's not worth defending... Friends should not let friends use Gmail - that's all that can be said about it. -- Regar

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
y what Public Suffix List is for. It lists all such domains. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
ries do not use any generic SLDs under country's TLD (at least not mandatory ones), but just allow to register names directly under country's TLD, like somename.de, somename.hu, somename.nl etc. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Google and UK.COM domains

2021-12-14 Thread Jaroslaw Rafa
on procedure and policy, and maybe be able to demonstrate a bunch of actual independent subdomains registered under this domain, run by someone else than you? Because that's the way eu.org, uk.com and similar operate. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a millio

Re: Google and UK.COM domains

2021-12-14 Thread Jaroslaw Rafa
Dnia 14.12.2021 o godz. 13:06:49 Andrew Sullivan pisze: > On Mon, Dec 13, 2021 at 12:31:07PM +0100, Jaroslaw Rafa wrote: > >That's exactly what Public Suffix List is for. It lists all such domains. > > Well, to be a little more pointed about it, it attempts to provide a >

Re: question for the part location of multipart message

2022-01-02 Thread Jaroslaw Rafa
all text/plain parts from multipart messages, up to 5 levels nesting of multipart messages one inside another (that level is configurable via a parameter in the script). If you want to look at it, it's here: http://rafa.eu.org/media/textconv.pl -- Regards, Jaroslaw Rafa r...@rafa.eu.

Re: TLS enforcement options?

2022-01-09 Thread Jaroslaw Rafa
etc. but it is not - and *should not* be - mandatory. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: TLS enforcement options?

2022-01-10 Thread Jaroslaw Rafa
somehow commerce-related and collect personal data. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: TLS enforcement options?

2022-01-10 Thread Jaroslaw Rafa
pient of the mail can access its content. No operator of any mail server is able to read your message. If you use only level 2, then operators of both sending and receiving server (and any intermediate server, if there are any) can have access to the message in plaintext form. -- Regards,

Re: TLS enforcement options?

2022-01-10 Thread Jaroslaw Rafa
nd sell your metadata. And you are right with regard to the fact that metadata is often more important in "spying" on the individual than the actual data transmitted; but simple solutions like HTTPS don't protect you from metadata being collected. -- Regards, Jaroslaw Rafa r..

Re: Received-SPF: Softfail

2022-01-11 Thread Jaroslaw Rafa
Dnia 11.01.2022 o godz. 05:00:43 Fourhundred Thecat pisze: > > What I am asking is, are there situations where legitimate sender > (non-spam) would generate soft fail? Forwarding. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they

Re: Received-SPF: Softfail

2022-01-11 Thread Jaroslaw Rafa
Dnia 11.01.2022 o godz. 12:51:54 Fourhundred Thecat pisze: > > On 2022-01-11 11:32, Jaroslaw Rafa wrote: > >Dnia 11.01.2022 o godz. 05:00:43 Fourhundred Thecat pisze: > >> > >>What I am asking is, are there situations where legitimate sender > >

Re: TLS ciphers

2022-01-11 Thread Jaroslaw Rafa
et's trust Postfix authors that they have done it right. To implement TLS support, one certainly has to know more about it than an average mail administrator. So just trust them. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're go

Re: Why would dovecot not be answering

2022-01-23 Thread Jaroslaw Rafa
t have one in the configuration shown in your mail) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: [Announcement] First public release of PostQF

2022-01-24 Thread Jaroslaw Rafa
v an "overkill" for using one simple utility? Why couldn't it just use the system-installed Python? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: smtpd in master.cf

2022-01-24 Thread Jaroslaw Rafa
is run to provide this service. Both services, on port 25 and 587, are provided by two instances of the same executable, therefore "smtp" in both cases. After "smtpd" there can be arguments used to call this executable - these arguments are used to make both services operate differently. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Pls Help - Postfix Multi-Domain SMTP Banner with Postscreen

2022-02-01 Thread Jaroslaw Rafa
mtpd_" :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: EHLO/HELO whitelist?

2022-02-03 Thread Jaroslaw Rafa
P address, for example by using permit_mynetworks ? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: www.postfix.org not working from certain locations

2022-02-09 Thread Jaroslaw Rafa
ee availability test results here: > https://ping-admin.com/free_test/result/16443944516w2j65r1y4j0kca10wdw3q.html > (not sure if this link will be valid for long, though). Poland, ISP is UPC ( https://www.upc.pl/ ), works OK. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a mill

Re: www.postfix.org not working from certain locations

2022-02-09 Thread Jaroslaw Rafa
.postfix.org and tells where it stops. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: www.postfix.org not working from certain locations

2022-02-09 Thread Jaroslaw Rafa
Dnia 9.02.2022 o godz. 13:58:01 Jaroslaw Rafa pisze: > > I think it's just a routing misconfiguration at some major ISP. It might be > hepful that the OP does a traceroute to www.postfix.org and tells where it > stops. I did a traceroute to the first five sites that fail acco

Re: Removing an old post

2022-02-15 Thread Jaroslaw Rafa
where this post exists. But maybe his security team will be happy with removing it from that particular place where they found it... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: canonical_maps vs. *_recipient_maps

2022-02-18 Thread Jaroslaw Rafa
pretty rare case for me (I usually work with single-server setups). I did not think that it can be used in such context as rewriting by canonical maps. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hu

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
al_alias_maps seems completely unneccessary in your case. What funtion exactly does it provide here? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
maps mapping destination@address->mailbox. Is that your case? But this still doesn't have anything to do with Dovecot "accepting" any email addresses, because Dovecot just provides access to a mailbox. Once you properly log in, you have access to all messages stored in the mailbox, re

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
Dnia 21.02.2022 o godz. 13:09:19 Alexey Shpakovsky pisze: > On Mon, February 21, 2022 12:59, Jaroslaw Rafa wrote: > > > > The part I am wondering about is exactly "Dovecot accepts". As far as I > > know, Dovecot does not need to "accept" anything, becaus

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
onfiguration_manual/authentication/user_databases_userdb/ -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Setting Up Header Checks

2022-03-04 Thread Jaroslaw Rafa
you try apt-get? milter-regex is not in the Ubuntu repositories (at least for 20.04). -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: virus scanning

2022-03-08 Thread Jaroslaw Rafa
ely on random on-access file scanning. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Securing a local mail app that is unable to smtp auth

2022-03-14 Thread Jaroslaw Rafa
kind of password. You may also (again if this is possible in setroubleshootd) insert a very specific header into the message and use a milter to reject message if the header is not present. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Unexpected Alias Behavior

2022-03-26 Thread Jaroslaw Rafa
ltiple "department" (or how do you call them) mail servers that relay mail to a central server. Then you can very easily have mail-from and rcpt-to equal on port 25. Seems like a pretty valid case to me. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids

Re: Do not use alternate MX in case of a specific message

2022-04-12 Thread Jarosław Rafa
ound email > > MX is for inbound e-mail by definition I think what the OP meant is that recipient domain has two MX-es and the goal is that the Postfix doesn't try the second MX in case the first one rejects with 4xx but defers the message immediately (for this specific recipient domain

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Jaroslaw Rafa
oIP provider is using separate login & password for each phone line). This setup will work for any ISP as long as ISP isn't blocking inbound UDP ports 5060/5061. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

  1   2   3   4   5   >