On Wed, Apr 13, 2022 at 10:04:59PM -0400, John Levine wrote:
> >in other words if a domain is nullMx postfix still reject it, aswell for
> >senders
>
> Not all MTAs work the same.
Not even Postfix :-)
By default mail is accepted from NullMX envelope sender domains, to
reject it one must elect
It appears that Benny Pedersen said:
gmail.dk. 300 IN MX 0 .
>>>
>>> if nullMX is added then spf and dmarc can be removed
>>
>> You need both the null MX and the SPF. Null MX says you
>> don't receive mail, SPF -all says you don't send mail.
>
>why is spf needed
On 2022-04-14 02:40, John Levine wrote:
It appears that Benny Pedersen said:
On 2022-04-13 19:27, Matus UHLAR - fantomas wrote:
however, they miss the nullmx record:
gmail.dk. 300 IN MX 0 .
if nullMX is added then spf and dmarc can be removed
You need both the
It appears that Benny Pedersen said:
>On 2022-04-13 19:27, Matus UHLAR - fantomas wrote:
>
>> however, they miss the nullmx record:
>>
>> gmail.dk. 300 IN MX 0 .
>
>if nullMX is added then spf and dmarc can be removed
You need both the null MX and the SPF. Null MX sa
On 2022-04-13 19:27, Matus UHLAR - fantomas wrote:
however, they miss the nullmx record:
gmail.dk. 300 IN MX 0 .
if nullMX is added then spf and dmarc can be removed
i have localy added nullMX to bind9 here for gmail.dk
posttls -l dane plantmarknaden.com
one mor
On 2022-04-13 18:46, Wietse Venema wrote:
Benny Pedersen:
i recently begin to see domains give connection timeout
posttls-finger -l none gmail.dk
According to my DNS, gmail.dk has no MX record. Is that expected?
On 13.04.22 19:01, Benny Pedersen wrote:
in what way its not a nullMX domain
On 2022-04-13 18:46, Wietse Venema wrote:
Benny Pedersen:
i recently begin to see domains give connection timeout
posttls-finger -l none gmail.dk
According to my DNS, gmail.dk has no MX record. Is that expected?
in what way its not a nullMX domain ?
postfix deliver mail to A/ aswell
Benny Pedersen:
>
> i recently begin to see domains give connection timeout
>
> posttls-finger -l none gmail.dk
According to my DNS, gmail.dk has no MX record. Is that expected?
Wietse
i recently begin to see domains give connection timeout
posttls-finger -l none gmail.dk
i use -l none here in case it was just openssl problem, in gentoo last
openssl is compiled without weak-ssl-ciphers
postfix version 3.6.5 with default smtp_* for ciphers
is others see same problems ?
Thanks. That was the problem
Leo
On 4/6/19 10:53 pm, Bill Cole wrote:
On 4 Jun 2019, at 8:23, subscription1 wrote:
telnet on the working server shoews
---
>>> telnet 203.205.219.57 25
Trying 203.205.219.57...
Connected to 203.205.219.57.
Escape character is '^]'.
220 newxmmxsza20.qq.com MX
subscription1:
> On the failing server I get
> ---
> >>> telnet 203.205.219.57 25
> Trying 203.205.219.57...
This is no longer a Postfix question. You need to fix your network first.
Wietse
On 4 Jun 2019, at 8:23, subscription1 wrote:
telnet on the working server shoews
---
>>> telnet 203.205.219.57 25
Trying 203.205.219.57...
Connected to 203.205.219.57.
Escape character is '^]'.
220 newxmmxsza20.qq.com MX QQ Mail Server.
^]
telnet>
On the failing server I get
-
The two servers are on different machines (different continents,
actually) and different domains.
I've sent an email to the same (non-existitent) recipient
One the working server I get this
---
Jun 4 14:06:50 mail1 postfix/submission/smtpd[13650]: connect from
unknown[210.18
subscription1:
> Jun? 4 17:21:11 mail postfix/smtp[11505]: connect to
> mail1.zudiewiener.com[173.212.231.229]:25: Connection timed out
Do the two mail servers run on different machines, each with
a different IP address?
Does 'telnet 173.212.231.229 25' work from both machines,
or does it work
client from one without fail, while I get
connection timeout errors for the other
Jun 4 17:20:39 mail postfix/submission/smtpd[11500]: connect from
unknown[210.185.104.16]
Jun 4 17:20:40 mail postfix/submission/smtpd[11500]: 161365FA82:
client=unknown[210.185.104.16
Wietse Venema wrote:
> Mark Hunting:
>
>> We use Postfix for some time now, and it's really a great relieve after
>> having used qmail for years. However there's one issue I am unable to solve.
>>
>> Next to the usual virtual mailboxes and aliases we also provide a
>> fallback mail service to so
Mark Hunting:
> We use Postfix for some time now, and it's really a great relieve after
> having used qmail for years. However there's one issue I am unable to solve.
>
> Next to the usual virtual mailboxes and aliases we also provide a
> fallback mail service to some customers that insist on havi
We use Postfix for some time now, and it's really a great relieve after
having used qmail for years. However there's one issue I am unable to solve.
Next to the usual virtual mailboxes and aliases we also provide a
fallback mail service to some customers that insist on having their own
mail server
bharathan kailath:
> Hi
>
> Jan 13 15:43:41 relay1 postfix/smtp[18476]: 5BF411611EE: to=<
> valer...@example.com>, relay=xxx.xxx.xxx.xxx[1xxx.xxx.xxx.xxx
> ]:25, delay=101565, delays=100962/0.02/3.4/600, dsn=4.4.1, status=deferred
> (host xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx] said: 421 4
> .4.1 Connect
From: bharathan kailath
To: postfix users list
Sent: Wednesday, January 14, 2009 10:20:54 AM
Subject: connection timeout on win2007 exchange
Hi
Jan 13 15:43:41 relay1 postfix/smtp[18476]: 5BF411611EE:
to=, relay=xxx.xxx.xxx.xxx[1xxx.xxx.xxx.xxx
]:25
Hi
Jan 13 15:43:41 relay1 postfix/smtp[18476]: 5BF411611EE: to=<
valer...@example.com>, relay=xxx.xxx.xxx.xxx[1xxx.xxx.xxx.xxx
]:25, delay=101565, delays=100962/0.02/3.4/600, dsn=4.4.1, status=deferred
(host xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx] said: 421 4
.4.1 Connection timed out (in reply to end of
On Sat, Dec 20, 2008 at 9:41 PM, Wietse Venema wrote:
> Asif Iqbal:
>> Dec 20 21:25:20 improvise postfix/smtp[7157]: warning: SASL
>> authentication failure: No worthy mechs found
>
> This means that the SASL (NOT: SSL) mechanisms are not properly
> configured.
>
>> So I tried the openssl test and
Asif Iqbal:
> Dec 20 21:25:20 improvise postfix/smtp[7157]: warning: SASL
> authentication failure: No worthy mechs found
This means that the SASL (NOT: SSL) mechanisms are not properly
configured.
> So I tried the openssl test and looks like I need a real certificate?!
No, you need to fix the S
On Sat, Dec 20, 2008 at 7:51 PM, Sahil Tandon wrote:
> Asif Iqbal wrote:
>
>> I did but still failing to relay through gmail
>>
>> Dec 20 14:24:32 improvise postfix/qmgr[19372]: 4238710E3AA:
>> from=, size=444, nrcpt=1 (queue active)
>> Dec 20 14:24:32 improvise postfix/smtp[19431]: 4238710E3AA:
Asif Iqbal wrote:
> I did but still failing to relay through gmail
>
> Dec 20 14:24:32 improvise postfix/qmgr[19372]: 4238710E3AA:
> from=, size=444, nrcpt=1 (queue active)
> Dec 20 14:24:32 improvise postfix/smtp[19431]: 4238710E3AA:
> to=, relay=smtp.gmail.com[209.85.163.109]:587,
> delay=0.31
Asif Iqbal:
> On Fri, Dec 19, 2008 at 5:32 PM, Wietse Venema wrote:
> > Asif Iqbal:
> >> > need to test it. Just set:
> >> >
> >> >smtp_tls_security_level = encrypt
> >>
> >> Thanks, I will put that in
> >
> > Just checked here that Postfix can talk SSL with [smtp.gmail.com]:587
> > just f
On Fri, Dec 19, 2008 at 5:32 PM, Wietse Venema wrote:
> Asif Iqbal:
>> > need to test it. Just set:
>> >
>> >smtp_tls_security_level = encrypt
>>
>> Thanks, I will put that in
>
> Just checked here that Postfix can talk SSL with [smtp.gmail.com]:587
> just fine. But you need to set up cli
On Fri, Dec 19, 2008 at 6:06 PM, Noel Jones wrote:
> Asif Iqbal wrote:
>>
>> On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni
>> wrote:
>>>
>>> On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote:
>>>
How do I test the SSL ?
I go this with openssl
iqb...@ghar:~$ op
On Fri, Dec 19, 2008 at 6:06 PM, Noel Jones wrote:
> Asif Iqbal wrote:
>>
>> On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni
>> wrote:
>>>
>>> On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote:
>>>
How do I test the SSL ?
I go this with openssl
iqb...@ghar:~$ op
Asif Iqbal wrote:
On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni
wrote:
On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote:
How do I test the SSL ?
I go this with openssl
iqb...@ghar:~$ openssl s_client -connect smtp.gmail.com:587
You forgot "-starttls smtp". But gmail's SSL work
Asif Iqbal:
> > need to test it. Just set:
> >
> >smtp_tls_security_level = encrypt
>
> Thanks, I will put that in
Just checked here that Postfix can talk SSL with [smtp.gmail.com]:587
just fine. But you need to set up client-side SASL authentication.
Wietse
On Fri, Dec 19, 2008 at 4:41 PM, Victor Duchovni
wrote:
> On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote:
>
>> How do I test the SSL ?
>>
>> I go this with openssl
>>
>> iqb...@ghar:~$ openssl s_client -connect smtp.gmail.com:587
>
> You forgot "-starttls smtp". But gmail's SSL works,
On Fri, Dec 19, 2008 at 04:32:55PM -0500, Asif Iqbal wrote:
> How do I test the SSL ?
>
> I go this with openssl
>
> iqb...@ghar:~$ openssl s_client -connect smtp.gmail.com:587
You forgot "-starttls smtp". But gmail's SSL works, you don't really
need to test it. Just set:
smtp_tls_secu
On Fri, Dec 19, 2008 at 1:16 PM, Wietse Venema wrote:
> Asif Iqbal:
>> On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote:
>> > Asif Iqbal:
>> >> I could skip the signing part and just a .pem file. But seems like I
>> >> will also need a Thawte certificate.
>> >
>> > You need no certificate to
Asif Iqbal wrote:
>> No need to jump through such hoops. You do not need certs or .pem files to
>> relay through gmail. Search the archives of this mailing list for examples,
>
> No cert needed to relay through gmail? Let me dig in the mailing list.
> I guess that is what
> Wietse Venema meant in
On Fri, Dec 19, 2008 at 2:08 PM, Victor Duchovni
wrote:
> On Fri, Dec 19, 2008 at 01:52:11PM -0500, Asif Iqbal wrote:
>
>>
>> Useless advise really.
>
> The pointer to SOHO_README.html was provided upstream. This contains
> references to all the information you need to configure a home MTA if
> th
On Fri, Dec 19, 2008 at 01:52:11PM -0500, Asif Iqbal wrote:
>
> Useless advise really.
The pointer to SOHO_README.html was provided upstream. This contains
references to all the information you need to configure a home MTA if
that is indeed the right answer to your question.
I'd also look for a
On Fri, Dec 19, 2008 at 1:15 PM, Victor Duchovni
wrote:
> On Fri, Dec 19, 2008 at 01:06:21PM -0500, Asif Iqbal wrote:
>
>> On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote:
>> > Asif Iqbal:
>> >> I could skip the signing part and just a .pem file. But seems like I
>> >> will also need a Thaw
Asif Iqbal:
> On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote:
> > Asif Iqbal:
> >> I could skip the signing part and just a .pem file. But seems like I
> >> will also need a Thawte certificate.
> >
> > You need no certificate to SEND mail.
>
> I am trying to use gmail as my relayhost. I c
On Fri, Dec 19, 2008 at 01:06:21PM -0500, Asif Iqbal wrote:
> On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote:
> > Asif Iqbal:
> >> I could skip the signing part and just a .pem file. But seems like I
> >> will also need a Thawte certificate.
> >
> > You need no certificate to SEND mail.
>
On Fri, Dec 19, 2008 at 12:54 PM, Sahil Tandon wrote:
> On Dec 19, 2008, at 10:59 AM, "Asif Iqbal" wrote:
>
>> On Fri, Dec 19, 2008 at 6:05 AM, Sahil Tandon wrote:
>>>
>>> Asif Iqbal wrote:
>>>
You are right I cannot talk to any domain's MX. My ISP is cox and I
cannot
even talk to
On Fri, Dec 19, 2008 at 12:46 PM, Wietse Venema wrote:
> Asif Iqbal:
>> I could skip the signing part and just a .pem file. But seems like I
>> will also need a Thawte certificate.
>
> You need no certificate to SEND mail.
I am trying to use gmail as my relayhost. I cannot just send mail to
gmai
On Dec 19, 2008, at 10:59 AM, "Asif Iqbal" wrote:
On Fri, Dec 19, 2008 at 6:05 AM, Sahil Tandon
wrote:
Asif Iqbal wrote:
You are right I cannot talk to any domain's MX. My ISP is cox and
I cannot
even talk to their two MXs on port 25. I guess I could do a nmap
to find
what port they are
Asif Iqbal:
> I could skip the signing part and just a .pem file. But seems like I
> will also need a Thawte certificate.
You need no certificate to SEND mail.
Wietse
On Fri, Dec 19, 2008 at 6:05 AM, Sahil Tandon wrote:
> Asif Iqbal wrote:
>
>> You are right I cannot talk to any domain's MX. My ISP is cox and I cannot
>> even talk to their two MXs on port 25. I guess I could do a nmap to find
>> what port they are using for MX. They might require some authentic
Asif Iqbal wrote:
> You are right I cannot talk to any domain's MX. My ISP is cox and I cannot
> even talk to their two MXs on port 25. I guess I could do a nmap to find
> what port they are using for MX. They might require some authentication.
> I have no idea what my login is to my cox account.
On Fri, Dec 19, 2008 at 12:04 AM, Sahil Tandon wrote:
> Asif Iqbal wrote:
>
>> iqb...@improvise:~$ echo this is a test | mailx -s email vad...@gmail.com
>> iqb...@improvise:~$ tail -f /var/log/mail.info
>> Dec 18 23:01:16 improvise nullmailer[4322]: Rescanning queue.
>> Dec 18 23:02:48 improvise p
On Fri, Dec 19, 2008 at 12:04:52AM -0500, Sahil Tandon wrote:
> > Dec 18 23:04:26 improvise postfix/qmgr[5027]: CB66F10E395:
> > from=, size=348, nrcpt=1 (queue active)
>
> Also see:
> http://www.postfix.org/postconf.5.html#relayhost
Also won't get very far with a bogus $myorigin and no generic
Asif Iqbal wrote:
> iqb...@improvise:~$ echo this is a test | mailx -s email vad...@gmail.com
> iqb...@improvise:~$ tail -f /var/log/mail.info
> Dec 18 23:01:16 improvise nullmailer[4322]: Rescanning queue.
> Dec 18 23:02:48 improvise postfix/master[5024]: daemon started --
> version 2.5.5, config
iqb...@improvise:~$ echo this is a test | mailx -s email vad...@gmail.com
iqb...@improvise:~$ tail -f /var/log/mail.info
Dec 18 23:01:16 improvise nullmailer[4322]: Rescanning queue.
Dec 18 23:02:48 improvise postfix/master[5024]: daemon started --
version 2.5.5, configuration /etc/postfix
Dec 18 2
Wietse Venema:
> Rob Kelledy:
> > Hi,
> > I'm getting timeouts to a particular domain. When testing the
> > receiving server manually (telnet) I noticed?there is a long delay
> > between the connection starting and the 220 Ready message and if
> > anything is transmitted during that time the connec
smtp_connect_timeout = 15s
Thanks Wietse
-Original Message-
From: Wietse Venema [mailto:[EMAIL PROTECTED]
Sent: Friday, 21 November 2008 10:28 AM
To: Rob Kelledy
Cc: postfix-users@postfix.org
Subject: Re: Connection timeout
Rob Kelledy:
> Hi,
> I'm getting timeouts to a
Rob Kelledy:
> Hi,
> I'm getting timeouts to a particular domain. When testing the
> receiving server manually (telnet) I noticed?there is a long delay
> between the connection starting and the 220 Ready message and if
> anything is transmitted during that time the connection is
> terminated. I'm g
--Original Message-
From: Daniel V. Reinhardt [mailto:[EMAIL PROTECTED]
Sent: Friday, 21 November 2008 10:15 AM
To: Rob Kelledy; postfix-users@postfix.org
Subject: Re: Connection timeout
Here is what I got for that domain:
C:\Documents and Settings\dustbunny>tracert abcm.com.au
Unabl
"postfix-users@postfix.org"
>
> Sent: Friday, November 21, 2008 1:07:51 AM
> Subject: RE: Connection timeout
>
> Domain is abcm.com.au
>
> Nov 19 09:50:56 dell postfix/qmgr[32698]: 5F318E10097:
> from=, size=8197, nrcpt=1 (queue active)
> Nov 19 09:51:17
er
Nov 19 18:11:23 dell postfix/qmgr[32698]: 5F318E10097: removed
-Original Message-
From: Daniel V. Reinhardt [mailto:[EMAIL PROTECTED]
Sent: Friday, 21 November 2008 10:01 AM
To: Rob Kelledy; postfix-users@postfix.org
Subject: Re: Connection timeout
- Original Message
> From: R
- Original Message
> From: Rob Kelledy <[EMAIL PROTECTED]>
> To: "postfix-users@postfix.org"
> Sent: Friday, November 21, 2008 12:36:42 AM
> Subject: Connection timeout
>
> Hi,
> I'm getting timeouts to a particular domain. When testing the
Hi,
I'm getting timeouts to a particular domain. When testing the receiving server
manually (telnet) I noticed there is a long delay between the connection
starting and the 220 Ready message and if anything is transmitted during that
time the connection is terminated. I'm guessing this is some k
58 matches
Mail list logo
