[pfx] Re: localhost.com in the logs

2024-06-06 Thread Erwan David via Postfix-users

Le 06/06/2024 à 18:57, GDS via Postfix-users a écrit :

Hello,
I am seeing hundreds of lines like the one below in my mail.log from 
this specific IP address, which belongs to Google.


Jun 5 19:09:32 arthemis postfix/error[86771]: 5D9D148296D: 
to=, orig_to=, relay=none, 
delay=4099, delays=4099/0.02/0/0, dsn=4.4.1, status=deferred (delivery 
temporarily suspended: connect to localhost.com[74.125.224.72]:25: 
Connection timed out)



I have no idea where this r...@localhost.com is coming from. It must 
be a misconfiguration but I cannot find it.


I have grep-ed /etc/postfix for all instances of localhost and there 
is nowhere an instance of localhost.com...

Also, I have /etc/hosts with "127.0.0.1 localhost" and main.cf with:
"myhostname = mydomain.com" and
"mydestination = localhost, localhost.localdomain"
I am stumped...Anywhere else I should be looking?

Thank you,
Greg


___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


Since root@localhost is rewritten in r...@localhost.com, I would also 
check in aliases/virtual_aliases, etc.


___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: force to use starttls on port 587

2024-06-03 Thread Erwan David via Postfix-users

Le 03/06/2024 à 14:55, Jeff P via Postfix-users a écrit :

Hello

I have closed sasl auth on port 25.
but users still can use port 587 for login with plain text.
how can I force users to use submission via start-tls only?
I know I can open port 465 for ssl connection. but for history reason 
the port 587 must be open.


Thanks.
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


Just use the relevant options in your master.cf for submission port. I use

submission inet n   -   n   -   -   smtpd
 -o smtpd_tls_security_level=encrypt
 -o smtpd_sasl_auth_enable=yes
 -o smtpd_client_restrictions=permit_sasl_authenticated,reject
 -o smtpd_sasl_authenticated_header=yes
 -o smtpd_tls_protocols=TLSv1.2,TLSv1.3

Important parts are tls_security_level, sasl_auth_enable and 
client_restriction which reject non authenticated email


(you may have different setting for chroot and tls_protocols)


--
Erwan David

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: disable authentication on port 25

2024-05-24 Thread Erwan David via Postfix-users

Le 24/05/2024 à 14:17, Northwind via Postfix-users a écrit :

so, in main.cf:
smtpd_sasl_auth_enable=no

then in master.cf:

submission inet n   -   y   -   -   smtpd
  -o smtpd_sasl_auth_enable=yes


Am I right? does this disable sasl_auth for port 25, but still 
authorize users on port 587/465?


Thanks a lot.

This disables it on port 25 ans enables it on 587. If you want to enable 
it on 465 you need on master.cf a second definition for submissions 
(notice the s as las letter)


submissions inet n   -   y   -   -   smtpd
  -o smtpd_sasl_auth_enable=yes

--
Erwan David

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: postfix and from

2024-03-19 Thread Erwan David via Postfix-users

Le 19/03/2024 à 11:39, natan via Postfix-users a écrit :

Hi
I have one question regarding the RFC of the FROM field: in the 
message header.


Is there any restriction that will force the FROM field to be correct 
according to the RFC?
I'm asking because one client "parses e-mails strangely" and his 
application hangs and instead of correcting it, he sends me to block 
such e-mails using Postfix.


Allowed (by the RFCs) syntaxes for addresses being very diverse, there 
is much chance that his application refuses a perfectly valid address, 
Much more than postfix allowing an illegal syntax.



--
Erwan David

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Backup outgoing mail from one user

2023-10-11 Thread Erwan David via Postfix-users

Le 11/10/2023 à 20:15, Jack Raats via Postfix-users a écrit :
One of my users (my wife)  lost her sent mail folder on her pc. She 
asked me if I had a backup of all het sent mail on my mail server, 
which I donn't.


I have a backup of all her ingoing mail using procmail, but how can I 
make a backup of all her outgoing mail?



For this I would look at sender_bcc_maps to send a copy of evrey mail 
from the given sender to an archiving address.



___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Postfix mails accepted for delivery, but never received

2023-09-10 Thread Erwan David via Postfix-users

Le 10/09/2023 à 20:12, Fred Morris via Postfix-users a écrit :
Other replies have identified what's probably happening: redirection 
to a specific mail relay or honeypot.


I have a couple of suggestions, which you should consider carefully 
(for legality and possible retaliation) before trying. I'd consider 
them ok where I am, but YMMV.


Also, consider any email you send compromised from now on. Even if you 
prevail on them to stop redirecting they've demonstrated the will as 
well as capacity to observe, modify and potentially forge traffic. 
(SSL won't help you unless you're using certs to authenticate the MTA 
at the other end.) Or, maybe they're simply compromised. :-/


On Sun, 10 Sep 2023, postfix--- via Postfix-users wrote:
Try a telnet connection to those host (gmail/mail-tester) on 25 and 
see who actually answers.


1) Send SYNs with varying TTLs to determine the number of hops to alleged
   recipient MTAs based on the minimum value which elicits a SYN/ACK. Are
   they all the same? Is it a low number?



This part can be done with  traceroute or mtr command in TCP mode


___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[P-U] Re: Poster Name not visible in Thunderbird

2023-03-07 Thread Erwan David via Postfix-users

Le 07/03/2023 à 18:42, Benny Pedersen via Postfix-users a écrit :

Matthew McGehrin via Postfix-users skrev den 2023-03-07 18:31:


Any workarounds in Thunderbird to override this behavior?


imho if you show Reply-To in this list you will see original poster ?

i have not tryed it self yet, using roundcube mostly
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

I see poster name in thunderbird. Column name is "Correspondant" in 
french, not "Expéditeur".


___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org