Kai Schaetzl:
[ Charset ISO-8859-1 converted... ]
> Addendum.
>
> Currently, I get client rejections with the setup shown in my last mail
> (despite the delay). I don't know if it hits *always*, though. I can't
> check if it didn't hit for some client where the name matches, there are
> too
Hi
Maybe related to some of your NS not responding certainly from the UK
that is
dig -t a mx31.harte-lyne.ca @dns01.harte-lyne.ca OK
dig -t a mx31.harte-lyne.ca @dns02.harte-lyne.ca No response
dig -t a mx31.harte-lyne.ca @dns03.harte-lyne.ca several seconds to
respond
dig
>
> On Nov 7, 2018, at 1:39 PM, Postfix User wrote:
>
> Is there any recommended schedule for regenerating DHparams for Postfix? I
> could not find anything specific about it.
Since the parameters are not secret (in fact sent to the client with every
full handshake), there's no risk of
On Wed, November 7, 2018 12:22, Paul wrote:
> Hi
>
> Maybe related to some of your NS not responding certainly from the UK
> that is
>
> dig -t a mx31.harte-lyne.ca @dns01.harte-lyne.ca OK
>
> dig -t a mx31.harte-lyne.ca @dns02.harte-lyne.ca    No
> response
>
> dig -t a
I changed my config and added/changed in main.cf
smtpd_recipient_restrictions = reject_unknown_recipient_domain,
reject_unverified_recipient, permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination
address_verify_poll_count = ${stress?1}${stress:3}
address_verify_poll_delay = 3s
Do you have a wildcard in table?
De: owner-postfix-us...@postfix.org em nome
de Fazzina, Angelo
Enviado: quarta-feira, 7 de novembro de 2018 14:27
Para: Postfix users
Assunto: looking for any options to better deal with mail looping
Hi, I have a domain that
Is there any recommended schedule for regenerating DHparams for Postfix? I
could not find anything specific about it.
--
Jerry
Wietse Venema wrote on Wed, 7 Nov 2018 12:10:40 -0500 (EST):
> HOWEVER, by default Postfix evaluates all of these at RCPT TO time.
which means smtpd_delay_reject = yes is the default?
Am I correct in assuming that with "yes" it doesn't matter if I list the
client restrictions in
On 11/7/2018 12:40 PM, Kai Schaetzl wrote:
> Wietse Venema wrote on Wed, 7 Nov 2018 12:10:40 -0500 (EST):
>
>> HOWEVER, by default Postfix evaluates all of these at RCPT TO time.
>
> which means smtpd_delay_reject = yes is the default?
Yes, that's the default, and generally should not be
>> 50DFB12B2F7 7501 Tue Nov 6 17:22:42 MAILER-DAEMON
>> (delivery temporarily suspended: Host or domain name not found.
>> Name service error for name=mx31.harte-lyne.ca type=MX: Host not
>> found, try again)
On Wed, November 7, 2018 11:30, Wietse Venema wrote:
>> I do not understand what
i have similar case and set the first relayseever inmy pool as the one on
which changes ar eonly allowed. then i do scp + service restart to the
others with bash oneliner on demand.
for the future i plan to check in config from any host to central svn/git
repo and check frequently for changes
> On Nov 7, 2018, at 3:26 PM, Fazzina, Angelo wrote:
>
> relay_recipient_maps = mysql:/etc/postfix/files/mysql_pn.cf
>
> I did a test
> postmap /etc/postfix/files/mysql_pn.cf
There's no point in trying to "postmap" MySQL, LDAP, PosgreSQL, "pcre",
"regexp", ...
tables.
Only tables that have
> On Nov 7, 2018, at 3:27 PM, James B. Byrne wrote:
>
> Neither dns02 nor dns04 are listed in the /etc/resolv.conf file on the
> affected services.
>
> With respect to Viktor's answer.
>
> My understanding is that: in the absence of a specified MX record then
> the A RR is supposed to be
On 7 Nov 2018, at 15:27, James B. Byrne wrote:
Neither dns02 nor dns04 are listed in the /etc/resolv.conf file on the
affected services.
That does not necessarily mean they are not being tried. They are half
of your authoritative nameservers and they aren't working, so unless the
I do not know what is going on here:
This is found in the maillog on inet17
Nov 7 16:40:21 inet17 postfix/smtpd[79991]: NOQUEUE: reject: RCPT
from unknown[216.185.71.31]: 450 4.1.2
: Recipient address
rejected: Domain not found; from=<>
to= proto=ESMTP
helo=
But this is what I get when I run
Noel Jones wrote on Wed, 7 Nov 2018 13:30:08 -0600:
> With the above list, check_sender_access comes first. Postfix does
> not reorder the list you have specified.
Thanks for the answer. But, please look again.
/etc/mail/access:
createsend.com REJECT
cmail20.com REJECT
The order is:
> >
> On Nov 7, 2018, at 6:08 PM, Viktor Dukhovni
> wrote:
>
> Your DNS is broken. Fix it! At the .CA level you have:
>
> harte-lyne.ca. IN NS dns04.harte-lyne.ca. ; AD=0
> harte-lyne.ca. IN NS dns03.harte-lyne.ca. ; AD=0
> harte-lyne.ca. IN NS dns01.harte-lyne.ca. ; AD=0
> harte-lyne.ca.
> On Nov 7, 2018, at 5:14 PM, James B. Byrne wrote:
>
> I do not know what is going on here:
>
> This is found in the maillog on inet17
>
> Nov 7 16:40:21 inet17 postfix/smtpd[79991]: NOQUEUE: reject: RCPT
> from unknown[216.185.71.31]: 450 4.1.2
> : Recipient address
> rejected: Domain not
On Thu, 8 Nov 2018 at 07:35, Poliman - Serwis wrote:
> I have domain kamir-transport.pl deployed on the server with dns zone
> where are configured google MX servers like aspmx.l.google.com,
> alt1.aspmx.l.google.com (and few more). Mailboxes are not on my server,
> all email things are deployed
Viktor Dukhovni:
It is easy to set up a cron job that runs every 30 days,
Hello,
that's the first time I personally note a specific time windows.
Thanks for sharing your position.
I also regenerate dhparameter on monthly base,
not every month but approximately every half year...
if [
I have domain kamir-transport.pl deployed on the server with dns zone where
are configured google MX servers like aspmx.l.google.com,
alt1.aspmx.l.google.com (and few more). Mailboxes are not on my server, all
email things are deployed on google. Yesterday I saw in log the message:
9FBE713D05F
I have been asked how I turn on /var/log/mail.log for postfix on a Mac running
Mohave.
I have it running on mine, but it always has - but I can’t remember if I had to
do anything special to turn it on.
The person asking has no /var/log/mail.log at all and now I’m curious.
thanks
robert
Not sure I understand the suggestions fully.The configuration management
systems I've found for postfix, are all concentrated on a single postfix
system?Containers? Like in Docker? Why? I have the servers set up already?Not
sure what the Makefile should do in the configuration context.
It's
Hi all
I'm contemplating on how I best keep all our relay servers synchronized in
their config.They are set up as round robin servers in the DNS, so they
distribute the load pretty ok.My first idea was to set up some rsync to copy
the relevant directories like /etc/postfix and
Ahh, yes, much better idea, thanks!
Den onsdag den 7. november 2018 09.18.40 CET skrev Viktor Dukhovni
:
> On Nov 7, 2018, at 3:08 AM, K F wrote:
>
> I can see in our outgoing mailqueue, that some users consistently spells
> their email addresses wrong.
> Ie. gmail.dk instead of
* K F :
> Not sure I understand the suggestions fully.The configuration management
> systems I've found for postfix, are all concentrated on a single postfix
> system?Containers? Like in Docker? Why? I have the servers set up already?Not
> sure what the Makefile should do in the configuration
Patrick Ben Koetter:
> * K F :
> > Hi all
> > I'm contemplating on how I best keep all our relay servers synchronized in
> > their config.They are set up as round robin servers in the DNS, so they
> > distribute the load pretty ok.My first idea was to set up some rsync to
> > copy the relevant
* K F :
> Hi all
> I'm contemplating on how I best keep all our relay servers synchronized in
> their config.They are set up as round robin servers in the DNS, so they
> distribute the load pretty ok.My first idea was to set up some rsync to copy
> the relevant directories like /etc/postfix and
> On Nov 5, 2018, at 10:18 PM, Alice Wonder wrote:
>
> if not using keyUsage but using extendedKeyUsage within req_extensions should
> digitalSignature be used?
>
> I basically do the following for my postfix certs
>
> [req]
> distinguished_name = dn
> req_extensions = ext
>
I can see in our outgoing mailqueue, that some users consistently spells their
email addresses wrong.Ie. gmail.dk instead of gmail.comI've looked into the
'virtual' setup, but I'm not sure if that can be used, as it sounds like that
is only for incoming domains?So our setup is:mail generator ->
> On Nov 7, 2018, at 3:08 AM, K F wrote:
>
> I can see in our outgoing mailqueue, that some users consistently spells
> their email addresses wrong.
> Ie. gmail.dk instead of gmail.com
When you say "their email address", is that the user's own (sender) address,
or the addresses of remote
I'm having trouble with access_maps kicking in after an upgrade from a
Postfix 2.something to Postfix 3.1. on Ubuntu 14.06 and using postscreen
and rspamd milter.
After some testing I'm not sure yet, but it looks like the recommended
smtpd_delay_reject = yes in connection with having the
On Wed, Nov 07, 2018 at 11:06:08AM -0500, James B. Byrne wrote:
> 50DFB12B2F7 7501 Tue Nov 6 17:22:42 MAILER-DAEMON
> (delivery temporarily suspended: Host or domain name not found. Name
> service error for name=mx31.harte-lyne.ca type=MX: Host not found, try
> again)
Note that the lookup
Viktor
On Wed, Nov 7, 2018, at 8:34 AM, Viktor Dukhovni wrote:
> ...
Thx for the clarifications!
> That's TLS 1.3, which as I mentioned is a different beast. It
> always does PFS, and never RSA key exchange, but this is not reflected
> in the cipher name, because the ciphers no longer specify
On Wed, Nov 07, 2018 at 08:52:26AM -0800, pg...@dev-mail.net wrote:
> Re: this particular, *internal* connection,
>
> Nov 4 15:21:45 mx postfix/postscreen-internal/smtpd[15675]:
> Anonymous TLS connection established from mx.example.com[XX.XX.XX.XX]:
> TLSv1.3 with cipher
Addendum.
Currently, I get client rejections with the setup shown in my last mail
(despite the delay). I don't know if it hits *always*, though. I can't
check if it didn't hit for some client where the name matches, there are
too many entries.
I expected it to carry out the helo checks before
Kai,
both are running simultaneously. So at smtpd_recipient_restriction stat
the milter will also get the recipients. As far as I have seen the
postfix restriction react faster.
So if you reject somebody with an access_map, you won't see any scan
result in rspamd. Only the milter connect,
Viktor,
On Wed, Nov 7, 2018, at 12:03 AM, Viktor Dukhovni wrote:
> Check your logs for evidence of TLS <= 1.2 ciphers
Doing the quick check you mentioned, first for my messy 'test' server, results
are just
11 TLS_AES_256_GCM_SHA384
Those log messages, for me, are all generated on
Carsten Rosenberg wrote on Wed, 7 Nov 2018 16:23:54 +0100:
> So if you reject somebody with an access_map, you won't see any scan
> result in rspamd.
This would be fine ;-)
> Do you have any problems with this situation?
Yes, it's the other way around here. e.g. there is no rejection happening
Hi, I have a domain that has MX point to O365 and then O365 relays mail to
Postfix server.
Currently, Postfix does a lookup in a MySql table to know where to relay the
email to, AFA next hop. If not found in table Postfix looks up MX and relays
the email.
I want to know if there is a more
On our IMAP service host I am seeing messages in the mailq similar to
the following:
50DFB12B2F7 7501 Tue Nov 6 17:22:42 MAILER-DAEMON
(delivery temporarily suspended: Host or domain name not found. Name
service error for name=mx31.harte-lyne.ca type=MX: Host not found, try
again)
It's probably backscatter:
http://www.postfix.org/BACKSCATTER_README.html
-Original Message-
From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org]
On Behalf Of James B. Byrne
Sent: Wednesday, November 7, 2018 11:06 AM
To: postfix-us...@cloud9.net
Subject:
James B. Byrne:
> On our IMAP service host I am seeing messages in the mailq similar to
> the following:
>
> 50DFB12B2F7 7501 Tue Nov 6 17:22:42 MAILER-DAEMON
> (delivery temporarily suspended: Host or domain name not found. Name
> service error for name=mx31.harte-lyne.ca type=MX: Host not
On Wed, Nov 07, 2018 at 08:07:40AM -0800, pg...@dev-mail.net wrote:
> On Wed, Nov 7, 2018, at 12:03 AM, Viktor Dukhovni wrote:
> > Check your logs for evidence of TLS <= 1.2 ciphers
>
> Doing the quick check you mentioned, first for my messy 'test' server,
> results are just
>
> 11
Fazzina, Angelo:
> Hi, I have a domain that has MX point to O365 and then O365 relays
> mail to Postfix server. Currently, Postfix does a lookup in a
> MySql table to know where to relay the email to, AFA next hop. If
> not found in table Postfix looks up MX and relays the email.
Postfix should
45 matches
Mail list logo
