Re: DKIM milter: adding a TXT record

2019-05-17 Thread Dennis Carr
On Fri, 17 May 2019 16:37:26 +0200 Christian Rößner wrote: > a little bit hard to figure out your problem. I only can guess. I was using 'dig txt chez-vrolet.net' and not turning up the correct TXT records, and should have used 'dig txt 201905._domainkey.chez-vrolet.net' instead. Oops. =D

(Disregard) Re: DKIM milter: adding a TXT record

2019-05-17 Thread Dennis Carr
On Thu, 16 May 2019 22:28:59 -0700 Dennis Carr wrote: > I'm working to implent DKIM and DMARC at this time (DMARC is next), > and I've got DKIM just about down except for one thing: the TXT > record. ...and wouldn't you know it, it's because I was digging the wrong domain name. N

DKIM milter: adding a TXT record

2019-05-16 Thread Dennis Carr
it per what I found at https://serverfault.com/questions/571720/publishing-long-domain-key-records-in-bind9. (Running 9.10.3.dfs in Debian Stable.) There doesn't seem to be a clue as to what's going on at this point, so I'm a bit lost. Help? -Dennis Carr

Re: Rejecting based on From is...not rejecting

2018-11-15 Thread Dennis Carr
On Fri, 16 Nov 2018 01:08:42 -0500 Viktor Dukhovni wrote: > On Nov 16, 2018, at 12:17 AM, Dennis Carr > wrote: > > > Suffice it to say, I seem to be doing it wrong. > > In a creatively diverse number of ways. :-) Well Viktor, we can't say I do everything right, now, ca

Rejecting based on From is...not rejecting

2018-11-15 Thread Dennis Carr
: \/.qq.com$/ REJECT ...and the reference to this file in main.cf is: smtpd_sender_restrictions = check_sender_access hash:/etc/postfix/sender_access, ... ...what'd I miss? If needed I can stick the files up on a pastebin. -Dennis Carr

Re: Problem when I send a mail

2018-05-15 Thread Dennis Carr
This is fairly normal. It just means that postfix can't figure out the name of the connecting box by resolution or host look-up. -Dennis Carr On May 15, 2018 11:34:30 AM PDT, for...@mehl-family.fr wrote: >Hi, > >When I send a mail with roundcube from my computer I find this messa

Re: Keep Postfix running in the foreground

2017-12-18 Thread Dennis Carr
ntainer dies. I don't know much about Docker, but would it be possible to just start a shell script therein that pretty much does nothing, e.g. 'while true ()' as PID 1? -Dennis Carr

Cannot send mail following upgrade to 3.1.4 - can't find user/alias info

2017-09-10 Thread Dennis Carr
hash:/etc/postfix/virtual In a nutshell: what am I missing here? -Dennis CArr

Re: [Mailman-Users] SPF best practices?

2015-08-23 Thread Dennis Carr
a bank). This means, then, that I should probably remove it from the SPF record - at its current configuration, the ~all should at least softfail while I work on getting Postfix set up for TLS. -Dennis Carr

Re: Di I need to open port 25?

2015-06-15 Thread Dennis Carr
On Sun, 14 Jun 2015 20:54:58 -0700 Jithesh AP jithesh...@gmail.com wrote: I am newbie into mail and mTA setup. Welcome. =) I have my port 465 smtps/587 (submission) working, so do i need to keep port 25 open? I am asking this because when i try to telnet gmail then it does not work, so

Aliases aren't even being looked at

2014-03-25 Thread Dennis Carr
To briefly explain my system - I have my workstation and server, both running Debian Wheezy (current stable). If I send mail, Postfix (2.9.6) passes to my server via an ssh tunnel on port 2525 (relayhost for this). Now, the relevant part. On the workstation, there are a few key aliases I have

reject_listed_domain option?

2013-02-20 Thread Dennis Carr
I'm basically looking for such an option - for all intents, if a domain is not, for some reason, in the RBLs, one could manually add the domain into such a list. In particular, I'm looking to do this to hostwinds.net and bluemountain14.com, as they do not seem to test positive in the RBLs. Or,

Odd warning in my syslog

2013-01-19 Thread Dennis Carr
Running 2.7.1 on Debian Squeeze. I'm a tad concerned when looking at my syslog on a transaction. I currently have my workstation configured to ssh tunnel into my server, the latter of which is in a remote location from me (local port is 2525, to port 25 on the server), and I've noticed this

Re: Odd warning in my syslog

2013-01-19 Thread Dennis Carr
On Sat, 19 Jan 2013 20:22:53 +0100 Reindl Harald h.rei...@thelounge.net wrote: * please do not strip most informations from log, one stripped line is not enough * which machine throws the warning That would be clever, wouldn't it? =D Here's a single transaction from bast, using account

Re: Lamentation and query

2012-11-29 Thread Dennis Carr
On Sun, 25 Nov 2012 17:08:26 -0600 Stan Hoeppner s...@hardwarefreak.com wrote: Dennis, how many computer books, or books in general, do you own? Do you have any on display? Or are they all simply hoarded away in boxes in the attic or basement? Two shelves of books I could use regularly on

Re: Lamentation and query

2012-11-29 Thread Dennis Carr
On Sat, 24 Nov 2012 12:50:48 -0700 Glenn English g...@slsware.com wrote: Have you considered printing (parts of) the website? I hadn't, but being a broke college student, it may cost a bit. I could probably pull off printing it on campus though -Dennis

Re: Lamentation and query

2012-11-29 Thread Dennis Carr
On Sun, 25 Nov 2012 16:10:11 + Viktor Dukhovni postfix-us...@dukhovni.org wrote: The basic concepts (what you need to understand) have not changed much, in that sense the old books are fine. The specific facts you need to know to tweak Postfix to do non-routine tasks may have changed a

Re: Lamentation and query

2012-11-29 Thread Dennis Carr
On Sun, 25 Nov 2012 21:35:46 +0100 Patrick Ben Koetter p...@sys4.de wrote: I am working on an updated version as time permits. Thank you, Patrick. Looking forward to the newer version when it's out there. -Dennis

Lamentation and query

2012-11-24 Thread Dennis Carr
not been updated in eight years. I miss my dead tree versions being current. =/ -Dennis Carr

Re: Lamentation and query

2012-11-24 Thread Dennis Carr
On Sat, 24 Nov 2012, Dennis Carr wrote: I miss my dead tree versions being current. =/ and having said all this, I realize I forgot the query, but it may be foregone. =) Does anyone know who's currently published the most recent documentation for Postfix in a dead-tree form? -Dennis

Re: Lamentation and query

2012-11-24 Thread Dennis Carr
On Sat, 24 Nov 2012, Wietse Venema wrote: Dennis Carr: and having said all this, I realize I forgot the query, but it may be foregone. =) Does anyone know who's currently published the most recent documentation for Postfix in a dead-tree form? Have you tried a bookseller's search

Re: please delete or hide the content in the mail

2012-06-30 Thread Dennis Carr
On Fri, 29 Jun 2012 05:18:13 + (UTC) Kshitij mali kshitij.m...@orange.com wrote: Hello sir , Please delete the thread or atleast hide the ipadress and email address in the content on the below archived post: You have already asked this. Wietse made it perfectly clear that the

Re: mail delivery system message

2012-04-07 Thread Dennis Carr
On Sat, 7 Apr 2012, Jon Miller wrote: ad...@desborough.com.au: localhost: No address associated with hostname In a nutshell, Postfix thinks that the address 'admin@$host' does not exist. What does /etc/postfix/aliases say about admin@? Vaguely important: does it point to a live account?

Re: spam to postmaster

2012-02-17 Thread Dennis Carr
On Sat, 18 Feb 2012, Reindl Harald wrote: what i do not understand is how f^%@#!!$ stupid people are spamming to postmaster/abuse-addresses (bowdlerized for comical effect -ed) As near as I can tell, the spammers just run under a few assumptions. RFC requires one to maintain those

Re: spam to postmaster

2012-02-17 Thread Dennis Carr
On Sat, 18 Feb 2012, Reindl Harald wrote: what i do not understand is how %#^%$@!! stupid people are spamming to postmaster/abuse-addresses Oh. One other thing - they don't care. There is no courtesy. They don't care if you scream at them, yell at them, because people are paying them to

Re: Disable sending mails via telnet

2012-01-11 Thread Dennis Carr
On Wed, 11 Jan 2012, Rod Dorman wrote: The suggested (i.e. SHOULD) SMTP timeouts are given in minutes. No human typing the commands is going to have any difficulty. Never underestimate the power (or lack thereof) of a hunt-and-pecker unfamiliar with coputers tasked with doing this. =)

Re: Disable sending mails via telnet

2012-01-11 Thread Dennis Carr
On Wed, 11 Jan 2012, Leslie León Sinclair wrote: I´m testing a server, so I need to unable people[users], to connect via telnet[smtp.mydomain.com:25] to the mail server. If you're testing it, your best bet is to either a) bring it up as long as you need to test it, and then shut it down when

Re: Disable sending mails via telnet

2012-01-10 Thread Dennis Carr
On Tue, 10 Jan 2012, Leslie León Sinclair wrote: Can anyone point me in the right direction, I´m stucked here and Google is not helping... If you mean the act of disabling the ability of using a telnet client to connect to port 25, you're best not doing this - or, just set any session

Re: Upgrade ...

2011-12-29 Thread Dennis Carr
On Thu, 29 Dec 2011, Barbara M. wrote: My plan is to update Postfix (and dovecot, procmail), in the old box to the release in the new box and when tested, move user/data to the new box (new box is 64 bit while old box is 32 bit, but hope this isn't a problem). Copying the old /etc/postfix dir

Re: Do you people ever rest

2011-12-24 Thread Dennis Carr
On Sat, 24 Dec 2011, Andreas Berton wrote: Merry christmas to you all! You as well! Have a safe and happy holiday, and a prosperous 2012! ANd as to the subject - no, I don't rest. This is what espresso and Red Bull are for. =D -Dennis

Re: postfix devnull mailbox

2011-12-22 Thread Dennis Carr
On Thu, 22 Dec 2011, Sahil Tandon wrote: Because this thread has veered off into a general discussion about mail operation/policy, would you consider taking it off-list or to a more appropriate forum, e.g. the mailop list? Agreed. I'm stunned that a tongue in cheek comment of mine has

Re: postfix devnull mailbox

2011-12-20 Thread Dennis Carr
On Tue, 20 Dec 2011, /dev/rob0 wrote: Why do you want to do that? What would be wrong with rejecting that address? /dev/null is just the proper repository to recycle bits. We don't want to run out. =^_^= In all seriousness, I guess it depends on who you ask. For the original poster's

Migration from one server to another - best practices?

2011-11-17 Thread Dennis Carr
this, or some sort of online guide I can follow that can guide me through the process? -Dennis Carr

Re: Printing received mails

2011-11-03 Thread Dennis Carr
On Thu, 3 Nov 2011, Daniel L. Miller wrote: We're now using a hosted fax service and receive our faxes via email to a dedicated address. Is there a method via Postfix I can have these printed when received? Or do I handle this via mda scripting (at the moment, Dovecot with Sieve).

Re: mailing lists software ?

2011-09-16 Thread Dennis Carr
Throwing one more in for Mailman. -Dennis Carr -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. Frank Bonnet f.bon...@esiee.fr wrote: Hello We are moving our old LISTSERV server after 15 years of very good services :-) Lsoft prices have grown up amazingly so I plan

Re: sending mass mail

2011-08-09 Thread Dennis Carr
Check with your ISP, make sure spf and domain keys are up to date, and install a mailing list manager like Mailman. -Dennis Carr -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. Amira Othman a.oth...@cairosource.com wrote: Hi all I want to send mails to all users I have

Re: Accepting email regardless of address

2011-08-02 Thread Dennis Carr
I'd suggest configuring as secondary, setting the MX record for this box as a primary, and use transport maps as suggested. -Dennis Carr -- Sent from my Android phone with K-9 Mail. Please excuse my brevity and top posting. Jason Gauthier jgauth...@lastar.com wrote: Greetings, Due

Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine - but apparently isn't. HELO message comes from chez-vrolet.net which is in my $mynetworks setting, but the IP address for the incoming machine does not match DNS. What adjustment in

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Reindl Harald wrote: mynetworks has nothing to do with DNS/PTR/HELO mynetworks is for IP-ADDRESSES/NETWORKS which are allowed to relay and override settings in smtp-restricitions That does eliminate it from the equation, but I still need to block this crap from coming

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Reindl Harald wrote: in your case you have to place the check_sender_access policy in smtpd_recipient_restrictions AFTER permit_mynetworks and permit_sasl_authenticated so only internal hosts and authenticated users are allowed to use in this policy listed domains Being

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Reindl Harald wrote: and how will HELO change anything in Over the past couple days I'm noticing mail coming in from outside that is supposedly from users of mine? sure you can restrict HELO but it solves not the real problem that you will stop forged-from of your domains

Re: Blocking mail supposedly from my domain

2011-05-07 Thread Dennis Carr
On Sat, 7 May 2011, Michael Orlitzky wrote: If he wants to reject hosts that HELO as his own, he can check his own SPF record, and reject anything that softfails. ...spf does that? -Dennis

RE: need help for controlling authenticated realy

2011-04-24 Thread Dennis Carr
mallah.raj...@gmail.com mallah.raj...@gmail.com wrote: Coming back to real issue,i have already initiated password policy control. But i feel its not impossible for the enduser to somehow leak the password, passwords are commonly remembered by muas and possibility of virus and malware

Re: The future of SMTP ?

2011-03-13 Thread Dennis Carr
On Sun, 13 Mar 2011, Frank Bonnet wrote: But to fight spam and all other malicious problems it's getting more and more sophisticated and complex to configure every day. It is not a criticism it is a fact that jump to every sysadmin's face. Does anyone has knowing of the future of SMTP ? Is

Re: The future of SMTP ?

2011-03-13 Thread Dennis Carr
On Sun, 13 Mar 2011, Reindl Harald wrote: Am 13.03.2011 12:38, schrieb Steve: I really don't understand why people keep telling that spam is a problem? because there are peopole out their whose time costs money? This prt of the problem I suspect is marginal. It's not the cost, it's

Re: my postfix mail server sending spam mail out

2011-01-06 Thread Dennis Carr
On Fri, 7 Jan 2011, Makara wrote: Hi All, I'm plesk control panel administrator. In this few days I found there are many deferred message in mailq and I know that hosting server is sending hug spam message out. Here is the log from postfix. Turn up the log deg level a bit and it will show

Re: metrics to show benefits of postfix vs. sendmail?

2010-09-22 Thread Dennis Carr
On Tue, 21 Sep 2010, Jay G. Scott wrote: they haven't started shouting yet, but i sense it's coming. i don't think i need to be exhaustive. but right now i don't have anything i can use to win this argument, objectively, anyway. And ed is the standard editor, and has a great memory

Re: Postfix MX Real-Time Anit-SPAM Firewall

2010-08-06 Thread Dennis Carr
On Fri, 6 Aug 2010, junkyardma...@verizon.net wrote: See Zip Attachment I see it. What is this? -Dennis

Set up SMTP AUTH/SASL, can't log in

2010-03-25 Thread Dennis Carr
I just set up basic configurations for SMTP AUTH (and, the next step, SASL) for my server, however I cannot seem to make it work quite right. Using the instructions at http://www.postfix.org/SASL_README.html, focusing on using dovecot as it is present. (Note, dovecot is not the active POP3/IMAP4

ssh tunnel triggered on usage?

2010-01-07 Thread Dennis Carr
) A better way to do this, using already existing mechanisms in Postfix, or... 2) a way to tell Postfix to turn on the ssh tunnel for the period required to deliver mail on delivery to the daemon, and then flush the queue, at which point the tunnel is closed? -Dennis Carr

A better backscatter killer?

2009-04-13 Thread Dennis Carr
Looking at options here for eliminating backscatter. I've reviewed the Howto for this, but it only seems to be effective against backscatter where one's home domain is forged - not too useful, IMNSHO, because spammers aren't always going to forge the home domain. One thing I've been looking