[pfx] Re: GMail is rejecting mail I forward

2023-11-07 Thread Byung-Hee HWANG via Postfix-users 
Byung-Hee HWANG via Postfix-users  writes:

>> https://gitlab.com/soyeomul/Gnus/-/raw/karma/DKIM/setup-policy.lua?ref_type=heads
>
> And because i have to prove myself, See:
> https://gitlab.com/soyeomul/Gnus/-/commit/59122d99bd6a0b01d293c0a2f46d5343e54bbc4e

This is more powerful screenshots, with dmarc p=reject. And forwarding it
is surprisingly successful: (attached 3 items)

https://gitlab.com/soyeomul/Gnus/-/commit/9e77df267523c3a9bd0232a3f30a08bd1d3f0579

Sincerely, Byung-Hee

-- 
^고맙습니다 _布德天下_ 감사합니다_^))//
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

2023-11-06 Thread Byung-Hee HWANG via Postfix-users 
> https://gitlab.com/soyeomul/Gnus/-/raw/karma/DKIM/setup-policy.lua?ref_type=heads

And because i have to prove myself, See:
https://gitlab.com/soyeomul/Gnus/-/commit/59122d99bd6a0b01d293c0a2f46d5343e54bbc4e

Sincerely, Byung-Hee

-- 
^고맙습니다 _布德天下_ 감사합니다_^))//
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

2023-11-03 Thread Byung-Hee HWANG via Postfix-users 
> I have set up SPF for my domain, but I don't think that is relevant to 
> FORWARDING mail (is it?).

I use Gmail forwarding like you. DKIM is my friend.
This is my configuration [1].

Sincerely, Byung-Hee

[1]
https://gitlab.com/soyeomul/Gnus/-/raw/karma/DKIM/setup-policy.lua?ref_type=heads

-- 
^고맙습니다 _布德天下_ 감사합니다_^))//
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

2023-10-31 Thread Doug Hardie via Postfix-users 
> On Oct 31, 2023, at 03:37, Matus UHLAR - fantomas via Postfix-users 
>  wrote:
> 
>>> On Oct 29, 2023, at 10:59, Matus UHLAR - fantomas via Postfix-users 
>>>  wrote:
>>> I did SRS by using postsrs, see https://github.com/roehling/postsrsd
>>> 
>>> This way, even forwarding using ~user/.forward will get SRS'ed.
>>> 
>>> However, any mail from foreign domains without DKIM may still get rejected.
> 
> On 29.10.23 11:57, Doug Hardie via Postfix-users wrote:
>> I run a similar mail server.  I use SRS and it "works" - well sort of.  Most 
>> of the mail gets eventually accepted although it is delayed many hours.  The 
>> delay range is about 1.5 to 27 hours.
> 
> Delayed how? Is the destination mailserver refusing the mail with temporary 
> error?
> 

Yes.

>> I am pretty sure that much of the long delayed mail is actually spam.  I 
>> created a log scanner to find the sources for the messages that are delayed 
>> to see if there is any conistency but there are no significant differences 
>> in the number of delayed mail baed on source IP.
> 


-- Doug
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

2023-10-31 Thread Matus UHLAR - fantomas via Postfix-users 

On Oct 29, 2023, at 10:59, Matus UHLAR - fantomas via Postfix-users 
 wrote:
I did SRS by using postsrs, see https://github.com/roehling/postsrsd

This way, even forwarding using ~user/.forward will get SRS'ed.

However, any mail from foreign domains without DKIM may still get rejected.


On 29.10.23 11:57, Doug Hardie via Postfix-users wrote:
I run a similar mail server.  I use SRS and it "works" - well sort of.  
Most of the mail gets eventually accepted although it is delayed many 
hours.  The delay range is about 1.5 to 27 hours.


Delayed how? Is the destination mailserver refusing the mail with temporary 
error?


I am pretty sure that 
much of the long delayed mail is actually spam.  I created a log scanner 
to find the sources for the messages that are delayed to see if there is 
any conistency but there are no significant differences in the number of 
delayed mail baed on source IP.




--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
If Barbie is so popular, why do you have to buy her friends?
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

2023-10-29 Thread Peter via Postfix-users 

On 30/10/23 05:43, Robert Inder via Postfix-users wrote:
For 10 years now I've been running a Linux (CentOS 7) server, using 
Postfix to handle mail for a handful of users.
Specifically, I'm running Postfix 2.2, because that is the most recent 
version yum will fetch

from the current/default set of repositories.


CentOS 7 comes with Postfix 2.10.1.  If you want to update to the latest 
postfix in CentOS 7 you can get it from the ghettoforge repositories 
(see: http://ghettoforge.org/index.php/Postfix3) which currently has 
Postfix 3.8.1 for CentOS 7.


If you're really running 2.2 as you say, you would have to be running an 
EOL operating system to be running such an old version of postfix. 
CentOS 4 is the most recent version of CentOS which shipped with Postfix 
2.2 and it went EOL in February of 2012. If you're running CentOS 4 then 
you haven't gotten any updates for well over ten years and it will be 
very full of several major security vulnerabilities, not just in postfix 
but throughout your operating system.


Some users want to use GMail, so I have used an alias (in an aliases 
file) to forward their mail to their GMail account, making

        person at my.domain
an alias for
   same_person at gmail.com 

Recently, users have told me they have discovered that mail has not 
reached them because it was rejected by GMail.


The rejection mail I have seen says GMail rejected the message because 
the IP address of my server did not pass

DKIM or SPF for the source of the email.


You have discovered one of the primary issues with forwarding mail.  The 
other one is that any SPAM that you inadvertently forward will be 
attributed to your server and it can get blocklisted as a source of SPAM.


I have set up SPF for my domain, but I don't think that is relevant to 
FORWARDING mail (is it?).


No, since you're forwarding mail with an envelope sender from other domains.


So I'm not sure what to do next.


My best recommendation is to allow POP3 retrieval of messages (dovecot, 
courier, as well as several other agents offer POP3 services).  Then 
gmail has a setting where it can be configured to fetch messages via 
POP3 from the connection.  This should bypass all of the google SPAM 
filters and allow retrieval into the user's mailbox directly without 
having to forward.



Do I have to set up DKIM?


No, but it's now recommended to help with deliverability, as well as 
several other things.



Can I do that with Postfix 2.2?


Milter support, which is generally what is used for DKIM signing, was 
first introduced in Postfix 2.3, so probably not.  If you're running 
Postfix 2.10 then you'll be fine, although updating to 3.8.1 from 
Ghettoforge would not be a bad idea.  Also keep in mind that CentOS 7 is 
very close to EOL as well (CentOS 7 is due to go EOL on 30 June of next 
year), you should plan to migrate to a new OS now.  If you want to stay 
on the EL track I recommend Rocky Linux or Alma Linux as CentOS no 
longer provides a stable Linux platform beyond CentOS 7.



Peter
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

2023-10-29 Thread Doug Hardie via Postfix-users 

-- Doug

> On Oct 29, 2023, at 10:59, Matus UHLAR - fantomas via Postfix-users 
>  wrote:
> 
> On 29.10.23 16:43, Robert Inder via Postfix-users wrote:
>> For 10 years now I've been running a Linux (CentOS 7) server, using
>> Postfix to handle mail for a handful of users.
>> Specifically, I'm running Postfix 2.2, because that is the most recent
>> version yum will fetch
>> from the current/default set of repositories.
>> 
>> Some users want to use GMail, so I have used an alias (in an aliases file)
>> to forward their mail to their GMail account, making
>>  person at my.domain
>> an alias for
>> same_person at gmail.com
>> 
>> Recently, users have told me they have discovered that mail has not reached
>> them because it was rejected by GMail.
>> 
>> The rejection mail I have seen says GMail rejected the message because the
>> IP address of my server did not pass
>> DKIM or SPF for the source of the email.
> 
>> Can I do that with Postfix 2.2?
> 
> not with postfix itself. 
> I did SRS by using postsrs, see https://github.com/roehling/postsrsd
> 
> This way, even forwarding using ~user/.forward will get SRS'ed.
> 
> However, any mail from foreign domains without DKIM may still get rejected.

I run a similar mail server.  I use SRS and it "works" - well sort of.  Most of 
the mail gets eventually accepted although it is delayed many hours.  The delay 
range is about 1.5 to 27 hours.  I am pretty sure that much of the long delayed 
mail is actually spam.  I created a log scanner to find the sources for the 
messages that are delayed to see if there is any conistency but there are no 
significant differences in the number of delayed mail baed on source IP.  

-- Doug


___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: GMail is rejecting mail I forward

2023-10-29 Thread Matus UHLAR - fantomas via Postfix-users 

On 29.10.23 16:43, Robert Inder via Postfix-users wrote:

For 10 years now I've been running a Linux (CentOS 7) server, using
Postfix to handle mail for a handful of users.
Specifically, I'm running Postfix 2.2, because that is the most recent
version yum will fetch
from the current/default set of repositories.

Some users want to use GMail, so I have used an alias (in an aliases file)
to forward their mail to their GMail account, making
  person at my.domain
an alias for
 same_person at gmail.com

Recently, users have told me they have discovered that mail has not reached
them because it was rejected by GMail.

The rejection mail I have seen says GMail rejected the message because the
IP address of my server did not pass
DKIM or SPF for the source of the email.


To be more precise, the message did not pass neither DKIM nor SPF check.


I have set up SPF for my domain, but I don't think that is relevant to
FORWARDING mail (is it?).


It may be. SPF uses envelope from: header and when you forward in 
/etc/aliases, the original sender's envelope from: is used, you often fail 
SPF check.



So I'm not sure what to do next.

Do I have to set up DKIM?


You can only set up DKIM for your own domain, since DKIM signs domain in 
header "From:".



Can I do that with Postfix 2.2?


not with postfix itself. 


I did SRS by using postsrs, see https://github.com/roehling/postsrsd

1. main/default postfix instance
- uses recipient_canonical_maps and recipient_canonical_classes (postsrs)
- relayhost points to separate instance for outgoing mail

2. separate postfix instances for outgoing mail 
- only listens on mail from localhost

- uses sender_canonical_maps and sender_canonical_classes (postsrs)

3. hidden BCC of srs[01]+ to postmaster (me) so I find out when someone's 
mail bounces back (e.g. invalid destination address).

- used on main postfix instance


This way, even forwarding using ~user/.forward will get SRS'ed.

However, any mail from foreign domains without DKIM may still get rejected.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Christian Science Programming: "Let God Debug It!".
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org