Re: Dropping Connections Upon Connect

2023-07-28 Thread Pete Long
> On 28 Jul 2023, at 20:06, Stuart D Gathman wrote: > > On Wed, 19 Jul 2023, Pete Long wrote: > >> The filter ‘works’ in the sense that I get “421 Internal Server Error” >> when something matches my regex table. > > That's more likely to discourage the s

Re: Dropping Connections Upon Connect

2023-07-20 Thread Pete Long
me=n, action=disconnect, filter=hostrejects, query=sonic304-56.consmr.mail.bf2.yahoo.com, response=550 Connection dropped. I used the same regular expression syntax as shown below ie. ^.*.yahoo.com$ Cool! Pete. > On 19 Jul 2023, at 20:18, Pete Long wrote: > > Hi all, > >

Dropping Connections Upon Connect

2023-07-19 Thread Pete Long
line or both? Please let me know if you require further information. Thanks for your time. Pete.

Re: Remove the first Received header

2023-01-26 Thread Pete Long
rst "user connection" in the mail headers? Hi Joel, listen on bge0 port submission tls-require pki mydomain.tld auth \ hostname mydomain.tld mask-src The mask-src option does the trick for me. Pete.

Re: Changing Log Messages

2022-06-23 Thread Pete
Hi, it says right there in the message... Line 13 and 26 in /usr/local/etc/mail/smtpd.conf > service smtpd restart > Performing sanity check on smtpd configuration: > /usr/local/etc/mail/smtpd.conf:13: syntax error > /usr/local/etc/mail/smtpd.conf:26: syntax error > - > Any idea where the

Re: Changing Log Messages

2022-06-22 Thread Pete
Hi, the best is probably to implement a custom report ing filter that fits you needs. http://man.openbsd.org/man7/smtpd-filters.7 > Hi, > i would like to use crowdsec to evaluate my mail logs. My current idea is to > block all users that try to login on port 25 > ``` > smtp connected

Re: Another Logging Query

2022-03-24 Thread Pete Long
On Wed, Mar 23, 2022 at 11:55:16PM +0200, Reio Remma wrote: > On 23.03.2022 23:41, Pete Long wrote: > > Hi all, > > > > When I run the following command, I see lots of useful information about > > what's happening with OpenSMTPD; particularly with filters.

Re: Filter Logging

2022-03-21 Thread Pete Long
On Mon, Mar 21, 2022 at 03:58:23PM +0200, Reio Remma wrote: > On 21.03.2022 15:54, Pete Long wrote: > > Hi all, > > > > I have a filter defined in smtpd.conf which looks like the following: > > > > filter rejects phase data match mail-from \ >

Filter Logging

2022-03-21 Thread Pete Long
nced table? Thanks for your time. Pete. smime.p7s Description: S/MIME cryptographic signature

Re: mutt can't send emails via localhost 25 with error 503 5.5.1

2022-03-06 Thread Pete Long
LAN. Here are what I believe to be the relevant config lines for Mutt. I'm using the same version as yourself: Mutt 2.1.3 (2021-09-10), which is running on OpenBSD 7.0. OpenSMTPD is version 7.0.0. set smtp_url = "smtp://ch...@chunkymonkey.tld:587/" set smtp_pass = "superpassw0rd&q

opensmtpd-filter-dnsbl

2022-02-20 Thread Pete Long
hostname mydomain.tld filter { check_rdns, dnsbl } I will shortly remove the -m flag which just adds headers rather than rejecting the mail. Pete. smime.p7s Description: S/MIME cryptographic signature

Re: dkimsign doesn't sign message sent from mail command

2021-10-21 Thread Pete
Hey, > listen on vio1 filter "dkimsign_rsa" > match from any for any action "outbound" doesn't that make your box an open relay? I gather this is an vm, but still...

Re: OpenSMTPd: Ignoring /etc/hosts file?

2021-09-13 Thread Pete
Hey, > in my smtpd.conf file I have "relay smtps://host.domain.tld" to be sure the whole smtpd.conf would be useful. Although it looks like wrong syntax. Should probably be "relay host smtps://x.y.z"

[Solved] Submission Creds Only Accepted on LAN?

2021-08-15 Thread Pete Long
is from my phone this morning: smtp connected address=85.255.235.74 host= Aug 15 08:46:41 [redacted] smtp tls ciphers=TLSv1.3:TLS_AES_256_GCM_SHA384:256 Aug 15 08:46:42 [redacted] smtpd [redacted] smtp authentication user=pete result=ok I'm not really sure if I have configured anything

Fwd: Submission Creds only Accepted on LAN?

2021-08-10 Thread Pete Long
> Begin forwarded message: > > From: Pete Long > Subject: Re: Submission Creds only Accepted on LAN? > Date: 8 August 2021 at 21:04:41 BST > To: misc@opensmtpd.org > > >> On 8 Aug 2021, at 19:55, Reio Remma wrote: >> >> On 08.08.2021 21:53, Pete

Re: Submission Creds only Accepted on LAN?

2021-08-08 Thread Pete Long
> On 8 Aug 2021, at 19:55, Reio Remma wrote: > > On 08.08.2021 21:53, Pete Long wrote: >> Hi Reio, >> >> Yes it's set with SSL (as Apple's iPhone mail app shows) on port 587. The >> authentication method is 'password'. > > Do you see from smtpd logs th

Re: Submission Creds only Accepted on LAN?

2021-08-08 Thread Pete Long
Hi Reio, Yes it's set with SSL (as Apple's iPhone mail app shows) on port 587. The authentication method is 'password'. Pete. > On 8 Aug 2021, at 19:46, Reio Remma wrote: > > Hello! > > Is your phone configured to submit to port 587? > > Good luck > Reio >

Submission Creds only Accepted on LAN?

2021-08-08 Thread Pete Long
Oops, I hope this is now visible. Pete. > Begin forwarded message: > > From: Pete Long > Subject: Submission Creds only Accepted on LAN? > Date: 8 August 2021 at 18:46:49 BST > To: misc+h...@opensmtpd.org > > Hi, > > I've just begun using OpenSMTP and find

Re: max-message-size

2021-07-13 Thread Pete
You're right. After a second thought i guess it's not a very good idea.

Re: max-message-size

2021-07-12 Thread Pete
Would it be possible to add an max-msgsize option to the match clause to get the desired result?

Re: Filter issue

2021-06-04 Thread Pete
>It seems that the reality is "Finally, a number of decisions must >(mandatory) be taken:" Well sure. A decison has to be made. > filter whitelist \ > chain { test-rdns , test-fcrdns } \ > bypass Is this even valid syntax? AFAIR the decision needs to be specified with the filter. I

Re: Filter issue

2021-06-02 Thread Pete
Hey, AFAIK it is not. But you can always chain filters like filter "rdns" phase connect match !rdns disconnect "550 rDNS check failed" filter "fcrdns" phase connect match !fcrdns disconnect "550 fc-rDNS check failed" filter "inbound" chain { "rdns","fcrdns" } > filter whitelist \ > phase

Re: how to reject a spoofed "From: " address?

2021-01-08 Thread Pete
Hi, > EMails with a spoofed "From: " address in the EMail header, > matching my own domain? AFAIR the only way to achieve that is a custom filter. > match from any mail-fromfor any reject > match mail-from for any reject These just look at the

Re: Usage example for filter-dnsbl

2020-08-17 Thread Pete
Hey, I use the dnsbl filter from umaxx.net so i don't know that specific filter, but something along those lines should do: filter "dnsbl" proc-exec "filter-dnsbl" my.dnsblprovider.com listen on egress filter dnsbl > Hey, > i installed the filter "filter-dnsbl" from here >

Re: Filter trustee src bypass - syntax error

2020-04-28 Thread Pete
Hi, filter ... bypass is not a valid syntax in 6.6 release. I assume it will be in 6.7. > Dear all, > Hi! This is the first time I'm posting to this mailinglist. English is > not my native language, so if I'm not making sense, then accept my > apologies. > First of all I would like to tell

Re: Unable to setup my OpenSMTPd (version 6.6.4p1)

2020-04-15 Thread Pete
Hey, > match from any for rcpt-to action action_relay shouldn't that be: match from any for domain mydoain.com rcpt-to action action_relay

Re: 550 invalid recipient issue

2019-03-18 Thread Pete
Hi, shouldn't that read more like >user1:password::userdb_quota_rule=*:storage=1G without the domain part in the passwd file? > > My passwd file where the user mail address are is: >

Re: OpenSMTPD filters

2018-11-03 Thread Pete
Yay, Christmas is pretty early this year. ;) > Hi, > I have started committing filters support to OpenBSD today in order > to get them nice and ready for the next major release. > The only part missing at this point is DATA filtering which I'll > probably finish by the end of November. >

Re: smtpctl: need root privileges

2018-09-25 Thread Pete
Hi, it sure is. doas.conf: permit nopass telegraf as root cmd smtpctl args show stats should do the trick. > I've allowed a passwordless sudo in sudoers on CentOS 7 for a certain > user to be able to execute specific smtpd commands. > Albeit, I have no idea if the same is possible on

Re: No Error When Failing To Deliver To Maildir

2016-07-14 Thread pete wright
On Thu, Jul 14, 2016 at 10:59 AM, pete wright <nomadlo...@gmail.com> wrote: > Hello, > I am migrating a currently running Postfix+Dovecot-IMAP system to > OpenSMTPd+Dovecot-IMAP system and am running into an odd issue. > > I am unable to deliver messages to the Maildir th

Re: Verifying addresses on Exchange/AD from an edge server

2016-02-19 Thread Pete
Hi, i also use table_ldap. However i use a slightly patched version (https://marc.info/?l=opensmtpd-misc=142506912505805=2), because if i remember correctly Exchange will close idle connections and table_ldap as it is won't recover from it. /etc/mail/ldap_pdc.conf url

Re: logging filters

2015-07-10 Thread Pete
But i can't get any logging from it in syslog. Is that by design, or am i missing something obvious? Yes, you are :^) man 5 syslog.conf Hint: facility, level and prog. Well, probably not something _that_ obvious. ;) Even with below config nothing turns up. But when looking at the code,

Re: logging filters

2015-07-10 Thread Pete
smtpd -d gives me this: [...] info: filter-clamav: result stream: Eicar-Test-Signature FOUND warn: clamav_filter: on_eom: REJECT virus id=44fa746c81ec2474 [...] But i can't get any logging from it in syslog. Is that by design, or am i missing something obvious? For