[pfx] Re: ARC or DKIM or SRS?

2024-02-12 Thread Alex via Postfix-users
Hi, On Mon, Feb 12, 2024 at 5:39 AM Jaroslaw Rafa via Postfix-users < postfix-users@postfix.org> wrote: > Dnia 11.02.2024 o godz. 17:47:05 Alex via Postfix-users pisze: > > My concern would be with multiple MX records for the same domain - is it > > possible it would come back to try again with

[pfx] Re: ARC or DKIM or SRS?

2024-02-12 Thread Jaroslaw Rafa via Postfix-users
Dnia 11.02.2024 o godz. 17:47:05 Alex via Postfix-users pisze: > My concern would be with multiple MX records for the same domain - is it > possible it would come back to try again with another MX and be delayed yet > again? MX are the addresses that *receive* mail for a given domain, not the

[pfx] Re: ARC or DKIM or SRS?

2024-02-11 Thread Peter via Postfix-users
On 12/02/24 11:47, Alex via Postfix-users wrote: My concern would be with multiple MX records for the same domain - is it possible it would come back to try again with another MX and be delayed yet again? Unless you're referring to your own MX records these are not relevant. That said, many

[pfx] Re: ARC or DKIM or SRS?

2024-02-11 Thread Alex via Postfix-users
Hi, > It has multiple benefits against bots, like: > > - few seconds delay for refusing clients that send helo/ehlo before > > esmtp greeting (I have used this for years with sendmail) > > - dnwsl/dnsbl scoring system. > > > > These are pretty safe to use. > > These are the tests that are enabled

[pfx] Re: ARC or DKIM or SRS?

2024-02-09 Thread Peter via Postfix-users
On 10/02/24 02:50, Matus UHLAR - fantomas via Postfix-users wrote: On 08.02.24 13:05, Doug Hardie via Postfix-users wrote: I implemented postscreen quite a while ago.  I don't see where or how it introduces a delay to force the originating MTA to queue and try later. It does not introduce

[pfx] Re: ARC or DKIM or SRS?

2024-02-09 Thread Matus UHLAR - fantomas via Postfix-users
On Feb 8, 2024, at 01:56, Matus UHLAR - fantomas via Postfix-users wrote: I have removed postgrey from servers I manage a few years ago. - without good exemption lists, you'll run into hours long waiting for email from various mail services that attempt multiple times from multiple IP

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread Bill Cole via Postfix-users
On 2024-02-08 at 16:05:16 UTC-0500 (Thu, 8 Feb 2024 13:05:16 -0800) Doug Hardie via Postfix-users is rumored to have said: I implemented postscreen quite a while ago. I don't see where or how it introduces a delay to force the originating MTA to queue and try later. If you enable the tests

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread Wietse Venema via Postfix-users
Doug Hardie via Postfix-users: > > On Feb 8, 2024, at 01:56, Matus UHLAR - fantomas via Postfix-users > > wrote: > > > > On 07.02.24 21:51, Christophe Kalt via Postfix-users wrote: > >> +1 on setting up SRS, it helps with Gmail and I believe ARC does too > >> (although I don't have hard data on

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread Doug Hardie via Postfix-users
> On Feb 8, 2024, at 01:56, Matus UHLAR - fantomas via Postfix-users > wrote: > > On 07.02.24 21:51, Christophe Kalt via Postfix-users wrote: >> +1 on setting up SRS, it helps with Gmail and I believe ARC does too >> (although I don't have hard data on this). Interesting note about postgrey, >>

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread Peter via Postfix-users
On 8/02/24 21:38, Kees van Vloten via Postfix-users wrote: A little addition that also helps a bit: move the content of the From: header to the Reply-To: header and replace From: with the local account that is forwarding the message. All mail then originates from your domain and a reply to a

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread Matus UHLAR - fantomas via Postfix-users
On 07.02.24 21:51, Christophe Kalt via Postfix-users wrote: +1 on setting up SRS, it helps with Gmail and I believe ARC does too (although I don't have hard data on this). Interesting note about postgrey, I didn't think that was effective any longer but maybe it is. I have removed postgrey

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread Matus UHLAR - fantomas via Postfix-users
Op 08-02-2024 om 04:09 schreef Peter via Postfix-users: My recommendations are as follows (other people's recommendations will vary): 1.  Don't forward mail. 2.  If you must forward mail then relay it using a different IP address to mail that originates from you, that way if the IP gets

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread Kees van Vloten via Postfix-users
Op 08-02-2024 om 04:09 schreef Peter via Postfix-users: On 8/02/24 14:23, Alex via Postfix-users wrote: I'm hoping I could ask for some advice. We have a pretty large percentage of users who forward mail through our systems to personal Gmail accounts. Sometimes it is mail from bulk senders

[pfx] Re: ARC or DKIM or SRS?

2024-02-08 Thread TSHIMANGA Minkoka via Postfix-users
Dear Peter, I do appreciate your 5 recommendations. So far I have DKIM, DMARC and others such as Postgrey Anti-Spam and SPF in place. I am planning to implement ARC as I look to also implement mailing list. But I was not aware of SRS. Finally, I am not forwarding any mail so far. Regards,

[pfx] Re: ARC or DKIM or SRS?

2024-02-07 Thread Peter via Postfix-users
On 8/02/24 14:23, Alex via Postfix-users wrote: I'm hoping I could ask for some advice. We have a pretty large percentage of users who forward mail through our systems to personal Gmail accounts. Sometimes it is mail from bulk senders like mailgun and lanyon/cvent. Before answering your

[pfx] Re: ARC or DKIM or SRS?

2024-02-07 Thread Christophe Kalt via Postfix-users
+1 on setting up SRS, it helps with Gmail and I believe ARC does too (although I don't have hard data on this). Interesting note about postgrey, I didn't think that was effective any longer but maybe it is. On Wed, Feb 7, 2024 at 9:01 PM Doug Hardie via Postfix-users < postfix-users@postfix.org>

[pfx] Re: ARC or DKIM or SRS?

2024-02-07 Thread Doug Hardie via Postfix-users
> On Feb 7, 2024, at 17:23, Alex via Postfix-users > wrote: > > Hi, > > I'm hoping I could ask for some advice. We have a pretty large percentage of > users who forward mail through our systems to personal Gmail accounts. > Sometimes it is mail from bulk senders like mailgun and