Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Slavko via mailop
Ahoj, Dňa Tue, 28 Dec 2021 18:08:24 +0100 Nicolas JEAN via mailop napísal: > Did you encounter the issue of the first IMAP connection not > forwarding the actual client IP to dovecot? OK, i try it, and i see it: imap-login: Login: user=, method=PLAIN, rip=::1, ... imap-login: Login: user=,

Re: [mailop] Walled gardens

2021-12-28 Thread John Levine via mailop
It appears that yuv via mailop said: >The first thing to make internet email viable for the future is to >establish a defensible perimeter and keep bad actors out. Easier said >than done. ... Unfortunately, e-mail walled gardens are a Well Known Bad Idea. The short version is that any

Re: [mailop] What a drag it is sending DMARC reports

2021-12-28 Thread John Levine via mailop
It appears that Hans-Martin Mosner via mailop said: >I'm working on a reputation based system which would use a p2p network to >transmit reputation opinions very quickly, >allowing each node's policy to decide who to trust and what actions to take. Web of Trust is another WKBI. I'd suggest

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Noel Butler via mailop
On 29/12/2021 03:50, Jaroslaw Rafa via mailop wrote: It is Roundcube that is actually connecting to Dovecot/Postfix and receiving/sending mail, not the user's browser, so the connecting IP that Dovecot/Postfix gets is technically correct. No need to change it. On the other hand, user's

Re: [mailop] Gmail Postmaster Not Showing Domain Reputation

2021-12-28 Thread Jenny Nespola via mailop
You are not alone. This is a problem being seen by many people. I've been told Google is aware. So now we need to just give them some time to revive it. On Tue, Dec 28, 2021 at 8:10 AM Alson Wong via mailop wrote: > Hello, > > Looks like Gmail Postmaster has not been updating its domain

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Nicolas JEAN via mailop
Il 28/12/2021 20:00, Andrew C Aitchison via mailop ha scritto: On Tue, 28 Dec 2021, Jaroslaw Rafa via mailop wrote: Can't these restrictions be just moved from Dovecot/Postfix to Roundcube itself? Roundcube definitely knows the value of the $_SERVER["REMOTE_ADDR"] variable and can make use of

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Nicolas JEAN via mailop
Hi Slavko, Il 28/12/2021 17:35, Slavko via mailop ha scritto: Dňa 28. decembra 2021 15:55:57 UTC používateľ Nicolas JEAN via mailop napísal: At least with dovecot you can usehttps://gitlab.com/takerukoushirou/roundcube-dovecot_client_ip which can add client's IP to login information (via

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Andrew C Aitchison via mailop
On Tue, 28 Dec 2021, Jaroslaw Rafa via mailop wrote: Dnia 28.12.2021 o godz. 07:17:43 Michael Peddemors via mailop pisze: For us, the security value of passing the originating IP to the Dovecot or SMTP layers for auth restrictions is paramount, as well as other details on the originating

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Slavko via mailop
Dňa 28. decembra 2021 17:08:24 UTC používateľ Nicolas JEAN via mailop napísal: >Did you encounter the issue of the first IMAP connection not forwarding >the actual client IP to dovecot? (the one sent from roundcube's login page) Terrible to tell now, as i didn't care before and i am not at PC

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Nicolas JEAN via mailop
Bonjour Dominique, and thanks for your comments! Il 28/12/2021 17:23, Dominique Rousseau via mailop ha scritto: Le Tue, Dec 28, 2021 at 04:55:57PM +0100, Nicolas JEAN via mailop [mailop@mailop.org] a écrit: (...) My conclusion is that today, there's no technical way to forward client IPs from

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Jay Hennigan via mailop
On 12/28/21 09:27, Steven Champeon via mailop wrote: I hope to die before that logic extends to hiding what channel you are tuned into on a TV or radio for "privacy reasons". Infrastructure is infrastructure, it's not like every packet you send has a social security number or bank account

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Richard W via mailop
On 2021-12-28 11:27 a.m., Steven Champeon via mailop wrote: I hope to die before that logic extends to hiding what channel you are tuned into on a TV or radio for "privacy reasons". Infrastructure is infrastructure, it's not like every packet you send has a social security number or bank

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Steven Champeon via mailop
on Tue, Dec 28, 2021 at 07:17:43AM -0800, Michael Peddemors via mailop wrote: > The problem isn't 'technical', but rather political. There are > those out there that believe by including the originating IP > Address, you are exposing PPI (Private Personal Information) by > including the IP

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Jaroslaw Rafa via mailop
Dnia 28.12.2021 o godz. 07:17:43 Michael Peddemors via mailop pisze: > > For us, the security value of passing the originating IP to the > Dovecot or SMTP layers for auth restrictions is paramount, as well > as other details on the originating sender. (Country AUTH > restrictions, OS Detection,

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread G. Miliotis via mailop
On 2021-12-28 17:55, Nicolas JEAN via mailop wrote: My conclusion is that today, there's no technical way to forward client IPs from roundcube to dovecot/postfix. Doesn't the XFORWARD feature work for postfix? I thought that's how amavis for example talks to postfix. Usually via a dedicated

Re: [mailop] Gmail Postmaster Not Showing Domain Reputation

2021-12-28 Thread Allen Kevorkov via mailop
Same here. ~ Allen K On Tuesday, December 28, 2021, 08:09:23 AM EST, Alson Wong via mailop wrote: Hello, Looks like Gmail Postmaster has not been updating its domain reputation since last week. The last domain reputation shown was from 17th of December. Are you guys having the same

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Slavko via mailop
Dňa 28. decembra 2021 15:55:57 UTC používateľ Nicolas JEAN via mailop napísal: >Still, even if I'm going to have all legalities cleared and my terms of >service updated... >My conclusion is that today, there's no technical way to forward client >IPs from roundcube to dovecot/postfix. At

Re: [mailop] Roundcube client IPs ??? dovecot, postfix

2021-12-28 Thread Dominique Rousseau via mailop
Hi, Le Tue, Dec 28, 2021 at 04:55:57PM +0100, Nicolas JEAN via mailop [mailop@mailop.org] a écrit: (...) > >Possibly on install, it should ask the email operator for their > >position, and 'maybe' warning them they should indicate that occurs > >on their terms of service.  But of course, most

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Nicolas JEAN via mailop
Hi Michael, Il 28/12/2021 16:17, Michael Peddemors via mailop ha scritto: The problem isn't 'technical', but rather political.  There are those out there that believe by including the originating IP Address, you are exposing PPI (Private Personal Information) by including the IP Address.

Re: [mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Michael Peddemors via mailop
Hi Nicolas, The problem isn't 'technical', but rather political. There are those out there that believe by including the originating IP Address, you are exposing PPI (Private Personal Information) by including the IP Address. Of course, I personally think this is baloney, as the email

Re: [mailop] What a drag it is sending DMARC reports

2021-12-28 Thread Hans-Martin Mosner via mailop
Am 28.12.21 um 14:31 schrieb yuv via mailop: On Tue, 2021-12-28 at 12:11 +0100, Hans-Martin Mosner via mailop wrote: I'm working on a reputation based system which would use a p2p network to transmit reputation opinions very quickly, COMPLICATED. The problem is behavioral, not

[mailop] Roundcube client IPs → dovecot, postfix

2021-12-28 Thread Nicolas JEAN via mailop
Hi everyone, I'd like to gather some thoughts on the following issue. *Problem* By default, roundcube login attempts (imap, smtp) are forwarded to dovecot/postfix without the original client IP that makes the request (possibly true of other webmail software). This can't benefit from

Re: [mailop] What a drag it is sending DMARC reports

2021-12-28 Thread yuv via mailop
On Tue, 2021-12-28 at 12:11 +0100, Hans-Martin Mosner via mailop wrote: > Am 28.12.21 um 11:08 schrieb Alessandro Vesely via mailop: > > OTOH, if it were possible to ascribe each nastiness to its actual > > culprit UNNECESSARY AND > I'm working on a reputation based system which would use a p2p

[mailop] Gmail Postmaster Not Showing Domain Reputation

2021-12-28 Thread Alson Wong via mailop
Hello, Looks like Gmail Postmaster has not been updating its domain reputation since last week. The last domain reputation shown was from 17th of December. Are you guys having the same situation too or is it just me ? Thanks. Alson ___ mailop

Re: [mailop] What a drag it is sending DMARC reports

2021-12-28 Thread Hans-Martin Mosner via mailop
Am 28.12.21 um 11:08 schrieb Alessandro Vesely via mailop: Yeah, we inevitably fall back to IP address lists.  Perhaps not so much because it's easier to outline a perimeter using numbers than names, but because it's rather immediate to operate on the former.  A set of good names would sound

Re: [mailop] What a drag it is sending DMARC reports

2021-12-28 Thread Alessandro Vesely via mailop
On Mon 27/Dec/2021 17:50:11 +0100 yuv wrote: The first thing to make internet email viable for the future is to establish a defensible perimeter and keep bad actors out. Easier said than done. The problem does not affect email only. It affects anything internet. Lacking a proper perimeter,