Re: Rejected recipients

2024-05-27 Thread Paul M Foster
On Mon, May 27, 2024 at 01:28:28AM -0400, Paul M Foster wrote: > Folks: > > I'm running OpenSMTPD 6.8.0p2-4+b4 on Debian 12. Here's my config: > > --- > # $OpenBSD: smtpd.conf,v 1.10 2018/05/24 11:40:17 gilles Exp $ > > # This is the smtpd server system-wide configuration file. > # See

Re: apply fcrdns filter but with exemption? SOLVED

2024-05-27 Thread Ian Darwin
On 5/27/24 4:59 AM, gil...@poolp.org wrote: May 27, 2024 2:53 AM, "Ian Darwin" wrote: On 5/26/24 8:45 PM, gil...@poolp.org wrote: May 27, 2024 12:41 AM, "Ian Darwin" wrote: On 5/26/24 5:40 PM, gil...@poolp.org wrote: May 26, 2024 9:46 PM, "Ian Darwin" wrote: I'd like to use the fcrdns

Re: apply fcrdns filter but with exemption?

2024-05-27 Thread gilles
May 27, 2024 2:53 AM, "Ian Darwin" wrote: > On 5/26/24 8:45 PM, gil...@poolp.org wrote: > >> May 27, 2024 12:41 AM, "Ian Darwin" wrote: >>> On 5/26/24 5:40 PM, gil...@poolp.org wrote: May 26, 2024 9:46 PM, "Ian Darwin" wrote: > I'd like to use the fcrdns filter but one of my users

Re: apply fcrdns filter but with exemption?

2024-05-26 Thread Ian Darwin
On 5/26/24 8:45 PM, gil...@poolp.org wrote: May 27, 2024 12:41 AM, "Ian Darwin" wrote: On 5/26/24 5:40 PM,gil...@poolp.org wrote: May 26, 2024 9:46 PM, "Ian Darwin" wrote: I'd like to use the fcrdns filter but one of my users has a non-negotiable need to get mail from a site with inept

Re: apply fcrdns filter but with exemption?

2024-05-26 Thread gilles
May 27, 2024 12:41 AM, "Ian Darwin" wrote: > On 5/26/24 5:40 PM, gil...@poolp.org wrote: > >> May 26, 2024 9:46 PM, "Ian Darwin" wrote: >> >>> I'd like to use the fcrdns filter but one of my users has a non-negotiable >>> need to get mail from a >>> site with inept administration. Is there a

Re: apply fcrdns filter but with exemption?

2024-05-26 Thread Ian Darwin
On 5/26/24 5:40 PM, gil...@poolp.org wrote: May 26, 2024 9:46 PM, "Ian Darwin" wrote: I'd like to use the fcrdns filter but one of my users has a non-negotiable need to get mail from a site with inept administration. Is there a way to let this one site bypass this one filter? I have two

Re: apply fcrdns filter but with exemption?

2024-05-26 Thread gilles
May 26, 2024 9:46 PM, "Ian Darwin" wrote: > I'd like to use the fcrdns filter but one of my users has a non-negotiable > need to get mail from a > site with inept administration. Is there a way to let this one site bypass > this one filter? > > I have two fairly standard 'listen' clauses and

Re: Change "524 5.2.4 Mailing list expansion problem" to "550 Invalid recipient"?

2024-05-14 Thread Kirill A . Korinsky
On Tue, 14 May 2024 11:41:54 +0100, Jesper Wallin wrote: > > ps, while writing this mail, satanist on IRC suggested the workaround > of adding 'rcpt-to ', which might invalidate my > suggestion/patch... Still, I find the mailing list expansion error more > confusing than helpful. I use rcpt-to

Re: OpenSMTPd Denial-of-Service with table-mysql (using default configuration)

2024-05-13 Thread Omar Polo
On 2024/05/13 09:38:40 +0200, Philipp wrote: > Hi > > Sorry, this mail was overseen. Yeah, sorry. > [2022-08-30 13:23] "Tobias Fiebig" > > I just started to see some DoS issue on my OpenSMTPd with table-mysql as > > the backend. Specifically, my server ran into the user lookup process > >

Re: OpenSMTPD 7.5.0 fails to start?

2024-05-13 Thread Omar Polo
On 2024/05/11 14:35:09 +0200, Thomas Bohl wrote: > > I am on OpenBSD 7.5-current playing around a bit and noticed that > > smtpd fails to start. > > > I then ran smtpd -d and I get: > > credentials[40067]: warn: table-api: imsg_get: Result too large > > lookup: table-proc: no services registered

Re: OpenSMTPd Denial-of-Service with table-mysql (using default configuration)

2024-05-13 Thread Philipp
Hi Sorry, this mail was overseen. [2022-08-30 13:23] "Tobias Fiebig" > I just started to see some DoS issue on my OpenSMTPd with table-mysql as the > backend. Specifically, my server ran into the user lookup process eating a > full core and torturing the mysql > server after some funny

Re: OpenSMTPD 7.5.0 fails to start?

2024-05-11 Thread Thomas Bohl
I am on OpenBSD 7.5-current playing around a bit and noticed that smtpd fails to start. I then ran smtpd -d and I get: credentials[40067]: warn: table-api: imsg_get: Result too large lookup: table-proc: no services registered smtpd: process lka socket closed Probably the beginning of API

Re: dual stack and secondary relays -- how to do?

2024-05-07 Thread James J. Lippard
I've found a workaround and narrowed down the source of the problem by using tables for src and helo-src (the latter of which proved unnecessary and irrelevant). It turns out that in this line: action "relayext" relay host src smtp-ext.domain.com helo smtp.domain.com pki "smtp.domain.com" ca

Re: Negative Senderscore ?

2024-05-06 Thread J Doe
On 2024-05-06 10:39, gil...@poolp.org wrote: May 5, 2024 11:34 PM, "J Doe" wrote: On 2024-05-05 17:26, gil...@poolp.org wrote: May 5, 2024 11:18 PM, "J Doe" wrote: Hello, Hello, I am using the Senderscore OpenSMTPD filter from packages on OpenBSD 7.5. All packages installed are

Re: Negative Senderscore ?

2024-05-06 Thread gilles
May 5, 2024 11:34 PM, "J Doe" wrote: > On 2024-05-05 17:26, gil...@poolp.org wrote: > >> May 5, 2024 11:18 PM, "J Doe" wrote: >> >>> Hello, >> >> Hello, >> >>> I am using the Senderscore OpenSMTPD filter from packages on OpenBSD >>> 7.5. All packages installed are up-to-date. >>> >>> In my

Re: dual stack and secondary relays -- how to do?

2024-05-05 Thread James J. Lippard
On Thu, Apr 18, 2024 at 12:18:04PM +0200, Philipp wrote: > Hi Hi, sorry about the delay. > [2024-04-16 16:44] "James J. Lippard" > > I run dual-stack IPv6/IPv4 networks, including mail servers. On occasion > > I may not have IPv6 connectivity, but have IPv4 connectivity. When that > > happens,

Re: Negative Senderscore ?

2024-05-05 Thread J Doe
On 2024-05-05 17:26, gil...@poolp.org wrote: May 5, 2024 11:18 PM, "J Doe" wrote: Hello, Hello, I am using the Senderscore OpenSMTPD filter from packages on OpenBSD 7.5. All packages installed are up-to-date. In my mail server logs I noticed: May 4 20:12:44 server smtpd[58189]:

Re: Negative Senderscore ?

2024-05-05 Thread gilles
May 5, 2024 11:18 PM, "J Doe" wrote: > Hello, > Hello, > I am using the Senderscore OpenSMTPD filter from packages on OpenBSD > 7.5. All packages installed are up-to-date. > > In my mail server logs I noticed: > > May 4 20:12:44 server smtpd[58189]: check_senderscore: > link-connect

Re: mlmmj upgrade

2024-05-02 Thread epektasis
Thanks for all your work on this project. e. On Thu, May 02, 2024 at 02:38:16PM +, gil...@poolp.org wrote: Hello misc@, The mailing list software, mlmmj, has been upgraded to its latest version. I'd appreciate a couple answers to this mail to make sure it does not introduce a

Re: mlmmj upgrade

2024-05-02 Thread gilles
And I received yours which got propagated through the list, upgrade successful. Sorry for the noise ! May 2, 2024 4:50 PM, "Chris Brannon" wrote: > gil...@poolp.org writes: > >> I'd appreciate a couple answers to this mail to make sure it does not >> introduce a regression ;-) > > I received

Re: mlmmj upgrade

2024-05-02 Thread Hagen Bauer
Looks good 02.05.2024 16:38:51 gil...@poolp.org: > Hello misc@, > > The mailing list software, mlmmj, has been upgraded to its latest version. > > I'd appreciate a couple answers to this mail to make sure it does not > introduce a regression ;-) > > Gilles

Re: mlmmj upgrade

2024-05-02 Thread Chris Brannon
gil...@poolp.org writes: > I'd appreciate a couple answers to this mail to make sure it does not > introduce a regression ;-) I received your message. -- Chris

Whoops [was Re: OpenBSD Installation Doesn't Detect NVMe SSD, but Detects My USB Drives]

2024-04-18 Thread Stuart Longland
On 19/4/24 08:54, Stuart Longland wrote: stuff not relevant to the OpenSMTPD list Apologies for the noise… auto-complete in the email client picked out the wrong email address and I blindly trusted it without checking the address properly. Problem Exists Between Keyboard And Chair. --

Re: OpenBSD Installation Doesn't Detect NVMe SSD, but Detects My USB Drives

2024-04-18 Thread Stuart Longland
On 16/4/24 04:45, Wolfgang Pfeiffer wrote: On Mon, Apr 15, 2024 at 08:38:51PM +0200, Wolfgang Pfeiffer wrote: On Mon, Apr 15, 2024 at 08:29:21AM +0200, aliyu...@tutanota.com wrote: Hello, I'm currently trying to install OpenBSD on my laptop, and I'm coming across a problem. The installation

Re: dual stack and secondary relays -- how to do?

2024-04-18 Thread Philipp
Hi [2024-04-16 16:44] "James J. Lippard" > I run dual-stack IPv6/IPv4 networks, including mail servers. On occasion > I may not have IPv6 connectivity, but have IPv4 connectivity. When that > happens, I find that my mail queue accumulates mail that arrives over > IPv6, but cannot be sent out on

Re: Samsung printer stopped working w/ opensmtpd - Message is not RFC 2822 compliant"

2024-04-18 Thread Lévai , Dániel
On Wednesday, April 17th, 2024 at 11:51, Philipp wrote: [...] > > Looking at the new trace I see the reason[0] for the error. Other then > I supected it's the body seperator, which does in your case start with > a WSP. A wild guess is that the boundery parameter of the working mails > contain

Re: Inject Date and Message-Id

2024-04-17 Thread Kirill A . Korinsky
Hi, On Wed, 17 Apr 2024 13:18:47 +0200, Philipp wrote: > > There was a bug in the code which mixed the byteorder of the port. This > is fixed in 7.4. So an update might help. > Confirmed, that upgrade to OpenBSD 7.5 fixes an issue. -- wbr, Kirill

Re: Inject Date and Message-Id

2024-04-17 Thread Philipp
Hi [2024-04-17 11:34] Kirill A. Korinsky > On Wed, 17 Apr 2024 09:48:14 +0200, > Kirill A. Korinsky wrote: > > > > As simpler solution I see the behaviour for OpenSMTPd to inject MessageId > > (when it missed) or date. > > > > Or it's bad idea? > > > > After reading the code I see that it

Re: Samsung printer stopped working w/ opensmtpd - Message is not RFC 2822 compliant"

2024-04-17 Thread Philipp
[2024-04-16 14:49] Lévai, Dániel > On Tuesday, April 16th, 2024 at 13:52, Philipp wrote: > > [2024-04-15 10:11] Lévai, Dániel l...@ecentrum.hu > > > > > I've been using this Samsung C480FW printer/scanner forever with > > > OpenSMTPD and suddenly (no upgrades to OpenSMTPD or changes in the > >

Re: Inject Date and Message-Id

2024-04-17 Thread Kirill A . Korinsky
On Wed, 17 Apr 2024 09:48:14 +0200, Kirill A. Korinsky wrote: > > As simpler solution I see the behaviour for OpenSMTPd to inject MessageId > (when it missed) or date. > > Or it's bad idea? > After reading the code I see that it should insert Date and MessageId if client is connected to 587

Re: Samsung printer stopped working w/ opensmtpd - Message is not RFC 2822 compliant"

2024-04-16 Thread Lévai , Dániel
On Tuesday, April 16th, 2024 at 13:52, Philipp wrote: > > > Hi > > [2024-04-15 10:11] Lévai, Dániel l...@ecentrum.hu > > > I've been using this Samsung C480FW printer/scanner forever with OpenSMTPD > > and suddenly (no upgrades to OpenSMTPD or changes in the > > configuration) it started to

Re: Samsung printer stopped working w/ opensmtpd - Message is not RFC 2822 compliant"

2024-04-16 Thread Philipp
Hi [2024-04-15 10:11] Lévai, Dániel > I've been using this Samsung C480FW printer/scanner forever with OpenSMTPD > and suddenly (no upgrades to OpenSMTPD or changes in the > configuration) it started to complain (it's trying to send scanned documents > via e-mail): Has something on the

Re: list server maintenance

2024-04-12 Thread gilles
April 12, 2024 5:18 PM, "Gilles Chehade" wrote: > PONG ! > > On Fri, Apr 12, 2024 at 5:14 PM wrote: > >> April 12, 2024 4:38 PM, gil...@poolp.org wrote: >> >>> Helo, >>> >>> The list server will be upgraded to OpenBSD 7.5 shortly, >>> there may be minor disruptions and I'll send a mail when

Re: list server maintenance

2024-04-12 Thread Gilles Chehade
PONG ! On Fri, Apr 12, 2024 at 5:14 PM wrote: > April 12, 2024 4:38 PM, gil...@poolp.org wrote: > > > Helo, > > > > The list server will be upgraded to OpenBSD 7.5 shortly, > > there may be minor disruptions and I'll send a mail when it's back to > verify it is dispatched. > > > > Sorry for the

Re: list server maintenance

2024-04-12 Thread gilles
April 12, 2024 4:38 PM, gil...@poolp.org wrote: > Helo, > > The list server will be upgraded to OpenBSD 7.5 shortly, > there may be minor disruptions and I'll send a mail when it's back to verify > it is dispatched. > > Sorry for the noise. PING ?

Re: Disabling incoming SMTP connections: Client limit reached

2024-04-12 Thread Kirill A . Korinsky
CM-SHA384:256 Apr 10 23:34:51 mx1 smtpd[84358]: warn: Disabling incoming SMTP connections: Client limit reached Apr 10 23:35:21 mx1 smtpd[84358]: 6ccf0806a1883889 smtp authentication user=te...@catap.net result=permfail Apr 10 23:35:21 mx1 smtpd[84358]: 6ccf0806a1883889 smtp failed-

Re: Disabling incoming SMTP connections: Client limit reached

2024-04-12 Thread gilles
April 11, 2024 11:37 PM, "Kirill A. Korinsky" wrote: > Greetings, > Hello, > I've noticed that my personal mail stop to working. After some digging in > the log I discovered the magic line: > > Apr 10 23:37:43 mx1 smtpd[84358]: warn: Disabling incoming SMTP connections: > Client limit

Re: DKIM Verification Failures

2024-04-06 Thread Robert B. Carleton
Lucas Gabriel Vuotto writes: > On Fri, Apr 05, 2024 at 08:29:20PM -0500, Robert B. Carleton wrote: >> ---cut here--- >> 600 IN TXT "v=spf1 ip4:155.138.244.69 >> ip6:2001:19f0:6402:39e:5400:4ff:fe49:8b44 a mx -all" >> _dmarc 600 IN TXT >>

Re: DKIM Verification Failures

2024-04-06 Thread Lucas Gabriel Vuotto
On Fri, Apr 05, 2024 at 08:29:20PM -0500, Robert B. Carleton wrote: > ---cut here--- > 600 IN TXT "v=spf1 ip4:155.138.244.69 > ip6:2001:19f0:6402:39e:5400:4ff:fe49:8b44 a mx -all" > _dmarc 600 IN TXT >

Re: DKIM Verification Failures

2024-04-05 Thread Thomas Bohl
Hi, DKIM verfication of my emails has been failing for outbound email when received by other systems. This email contains those signatures. I don't check DKIM inbound so that's not a concern. I created DNS entries for both rsa and ed25519 keys. The public TXT DNS record of

RE: DKIM Verification Failures

2024-04-05 Thread Andrew Stuart
Something appears to be wrong with your DNS records. Using mxtoolbox and easydmarc's dkim validators with your selectors, the response is only v=DKIM1 and is missing the public key p= portion. I would start with wrapping the text portion with quotes. Otherwise your DNS server may need the key

RE: How to terminate smtpd filters?

2024-04-02 Thread andrew
Thank you for your assistance. -Andrew -Original Message- From: Tassilo Philipp Sent: Tuesday, April 2, 2024 1:22 AM To: gil...@poolp.org Cc: and...@tekrealm.net; misc@opensmtpd.org Subject: Re: How to terminate smtpd filters? I agree with Gilles, your filter should react on stdin closing,

Re: [PATCH] DSNs to follow more closely RFCs

2024-04-02 Thread gilles
April 2, 2024 6:00 PM, "Tassilo Philipp" wrote: > Hi, > > Find attached the first stab at a final patch making generated bounce mails > follow more closely the > RFCs 3461, 3464 and 6522. The attached file includes the patch from my > previous mail in this > thread. > > The patch is based on

Re: How to terminate smtpd filters?

2024-04-02 Thread Tassilo Philipp
I agree with Gilles, your filter should react on stdin closing, but not sure how your filter is set up. Also, just a guess... are you running smtpd on Linux? Linux doesn't kill children when the parent process dies, maybe that's related? (To make it do that prctl(2) would need to be used w/

Re: How to terminate smtpd filters?

2024-04-02 Thread gilles
April 2, 2024 4:47 AM, and...@tekrealm.net wrote: > What signals a termination for smtpd filters? > > I'm using the code at > https://github.com/Beutlin/howto-opensmtpd-filters-and-reports, > Which works great, except for when smtpd gets shutdown. The script continues > to run and > consumes up

Re: [PATCH] Re: OpenSMTPD 7.5.0 RC1

2024-03-20 Thread Tassilo Philipp
Perfect, thanks! You are right, this didn't copy anything. I just noticed it now, b/c I need that param for the DSN work I'm currently working on. And sorry for not spotting this earlier, when I tested that final version of the ORCPT patch, a while ago. :) On Wed, Mar 20, 2024 at

Re: [PATCH] Re: OpenSMTPD 7.5.0 RC1

2024-03-20 Thread Omar Polo
On 2024/03/20 17:36:01 +0100, Tassilo Philipp wrote: > Hi, > > while working on the DSN patches mentioned in another thread, I came > across an oversight in the final ORCPT patch that will be part of 7.5.0. > > Find the patch attached - IMHO, this patch should make it into 7.5.0, as > it's

[PATCH] Re: OpenSMTPD 7.5.0 RC1

2024-03-20 Thread Tassilo Philipp
changes: - re-add ASR_IPV4_BEFORE_IPV6 compile-time knob to prefer connecting to IPv6 instead of IPv4. - update asr(3) and imsg with OpenBSD. - configure: readd -R usage on NetBSD mistakenly dropped in previous release. Thanks, Omar Polo --- ./usr.sbin/smtpd/smtp_session.c.orig2024-03-20

Re: DSN message format: shouldn't this use multipart/report (as of RFC3464)

2024-03-19 Thread Tassilo Philipp
Alright, find attached a first patch, fixing up some content-type headers, as outlined by RFC3464 and RFC6522 - in detail: The patch's first hunk follows RFC3464, which specifies that a DSN should have a top-level type of "multipart/report" with a parameter "report-type=delivery-status"; the

Re: OpenSMTPD 7.5.0 RC1

2024-03-18 Thread Richard Narron
The new OpenSMTPD 7.5.0rc1 works well with LibreSSL on Slackware64 Linux. My compile script uses CFLAGS and LDFLAGS like this: CFLAGS="... -I/usr/include/libressl" \ LDFLAGS="-L/usr/lib64/libressl -lcrypto -lssl \ -Wl,-rpath=/usr/lib64/libressl" \ ./configure \ ...

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-15 Thread Bruno Flückiger
On 11.03.2024 09:03, Gilles CHEHADE wrote: Since people are sharing posts / articles, if others have written such articles feel free to share in this thread, I’m curious :-) You can find mine here: https://www.bsdhowto.ch/mxpop3.html I update it every now and then, mostly when I figure out

Re: DSN message format: shouldn't this use multipart/report (as of RFC3464)

2024-03-13 Thread Tassilo Philipp
Ok, will get busy... I also noticed two other issues, one related to ENVID= (should be generated for DSNs), and some data in the DSN's message/delivery-status parts, that must be generated according to eh RFC, when ENVID= or ORCPT= are present, which are not, currently. Will look at those, as

Re: DSN message format: shouldn't this use multipart/report (as of RFC3464)

2024-03-13 Thread gilles
March 13, 2024 10:31 AM, "Tassilo Philipp" wrote: > Hello, > > I noticed that DSNs generated by OpenSMTPd use "Content-Type: > multipart/mixed", instead of > "Content-Type: multipart/report", as defined by RFC3461 (and described in > RFC3464 and RFC3462). I > wonder if there's a reason for

Re: Restricting submission username to match authenticated username

2024-03-13 Thread Rodolphe Bréard
Hi! On 13/03/2024 08:37, SeraphJACK wrote: I am wondering is there any solution to reject submissions whose sender name does not match the authenticated username? I think you are looking for this: listen on [...] senders masquerade As stated in smtpd.conf: Look up the authenticated user

Re: match from mail-from reject not working

2024-03-12 Thread Simon Hoffmann
Thomas Bohl wrote: > > > > match from mail-from reject > > That line doesn't have a for option, so "for local" is implied. > > match from any for any mail-from reject > > should do the trick. Yes it did! Thank you very much. I completely forgot that not specifying for means for local

Re: match from mail-from reject not working

2024-03-12 Thread Simon Hoffmann
Otto Retter wrote: > Simon, > > I have similar functionality working with a filter. Have you tried > using a filter for this? No, I have not yet tried that. I wanted to try the "simpler" solution first. :) > > Here are some anonymized snippets from my smtpd.conf: > > ``` > table bad_guys

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Jarod G.
No, for a lot of reasons. (ethical and legals ones) If you want something to translate the page, you can always use a browser extension. (DeepL, Google Translate, etc...) PS : Your DMARC policy wants a valid DKIM, however i don't see DKIM signatures in your emails. - Jarod Le 11/03/2024 à

Re: match from mail-from reject not working

2024-03-11 Thread Thomas Bohl
match from mail-from reject That line doesn't have a for option, so "for local" is implied. match from any for any mail-from reject should do the trick. However, if i use telnet/openssl s_client to connect to the server, I get an OK in response to MAIL FROM: and can state RCPT TO and

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Peter Thurner | Blunix GmbH
Love it! Will write another blogposts soon :)) On Mon, Mar 11, 2024 at 09:20:04PM +, Simon Harrison wrote: > On Mon, 11 Mar 2024 13:59:17 + > gil...@poolp.org wrote: > > > I created a Wiki page on the public repository for OpenSMTPD: > > > >

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Simon Harrison
On Mon, 11 Mar 2024 13:59:17 + gil...@poolp.org wrote: > I created a Wiki page on the public repository for OpenSMTPD: > > https://github.com/OpenSMTPD/OpenSMTPD/wiki/OpenSMTPD-articles-and-posts > > List to be completed ;-) > Great idea! Might even inspire users to create their own to be

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Peter Thurner | Blunix GmbH
Can you add a google translation button? On Mon, Mar 11, 2024 at 06:34:04PM +0100, Jarod G. wrote: > Hey! > > I got this one i wrote in 2021 and kept updated ever since : > https://blog.gamindustri.fr/setup-un-serveur-mail-avec-opensmtpd-dovecot-rspamd-et-postgresql-sur-openbsd/ > > - Jarod

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Jarod G.
Hey! I got this one i wrote in 2021 and kept updated ever since : https://blog.gamindustri.fr/setup-un-serveur-mail-avec-opensmtpd-dovecot-rspamd-et-postgresql-sur-openbsd/ - Jarod Le 11/03/2024 à 09:03, Gilles CHEHADE a écrit : Since people are sharing posts / articles, if others have

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Joel Carnat
I keep a couple of notes here: https://www.tumfatig.net/tags/opensmtpd/ Le 11/03/2024 à 14:59, gil...@poolp.org a écrit : I created a Wiki page on the public repository for OpenSMTPD: https://github.com/OpenSMTPD/OpenSMTPD/wiki/OpenSMTPD-articles-and-posts List to be completed ;-)

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread gilles
I created a Wiki page on the public repository for OpenSMTPD: https://github.com/OpenSMTPD/OpenSMTPD/wiki/OpenSMTPD-articles-and-posts List to be completed ;-)

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Rodolphe Bréard
On 11/03/2024 09:03, Gilles CHEHADE wrote: Since people are sharing posts / articles, if others have written such articles feel free to share in this thread, I’m curious :-) I wrote one in 2013 and regularly updated it since. I still have a few updates in mind, therefore it may be improved

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Peter Thurner | Blunix GmbH
*like* Both look helpful. Maybe update the code blocks a bit - in my experience thats what people are most looking out for - copy pastable content. I use https://prismjs.com/ for my blog and am pretty happy with it. On Mon, Mar 11, 2024 at 09:26:27AM +, Simon Harrison wrote: > On Mon,

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Simon Harrison
On Mon, 11 Mar 2024 09:03:44 +0100 Gilles CHEHADE wrote: > Since people are sharing posts / articles, if others have written > such articles feel free to share in this thread, I’m curious :-) I've posted a couple. Mainly as a reference for myself although I've had a few emails saying they've

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-11 Thread Gilles CHEHADE
Since people are sharing posts / articles, if others have written such articles feel free to share in this thread, I’m curious :-) > On 8 Mar 2024, at 22:53, Peter Thurner | Blunix GmbH > wrote: > > Hello misc@opensmtpd.org, > > I just wrote a blogpost that explains how to configure

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-10 Thread Stuart D Gathman
On Sat, 9 Mar 2024, Paul Pace wrote: That said, you are exactly correct about the problem with Postfix being an enterprise-grade tool that retains its enterprise-grade complexity. Being "easier to configure than Sendmail" is too low of a bar and I really think that OpenSMTPD is what that vast

Re: need test from MacOS not Sonoma

2024-03-10 Thread Kirill A. Korinsky
Hey, I do have a collection of macOS 10.5…13 -- wbr, Kirill > On 9. Mar 2024, at 12:22, gil...@poolp.org wrote: > > Hello, > > Anyone on the list has a MacOS that's not Sonoma and can help track a bug ? > > Gilles >

Re: need test from MacOS not Sonoma

2024-03-10 Thread gilles
Hello, Thanks, I'll provide detailed instructions so you can simply follow step by step: 1- fetch the archive and install in a temporary directory: $ sudo brew install libevent $ wget https://www.opensmtpd.org/archives/opensmtpd-7.5.0rc1.tar.gz $ tar -zxvf

Re: need test from MacOS not Sonoma

2024-03-09 Thread ED Fochler
I can take that. Tell me what you need. ED. > On Mar 9, 2024, at 6:21 AM, gil...@poolp.org wrote: > > Hello, > > Anyone on the list has a MacOS that's not Sonoma and can help track a bug ? > > Gilles >

Re: OpenSMTPD 7.5.0 RC1

2024-03-09 Thread Omar Polo
On 2024/03/09 09:04:29 -0800, Andi Vajda wrote: > Yes, that fixes it: > > $ sudo ./local/sbin/smtpd -d -f /usr/pkg/etc/smtpd/smtpd.conf > info: OpenSMTPD 7.5.0-portable starting > dnsbl: config|smtpd-version|7.5.0-portable > dnsbl: config|smtp-session-timeout|300 > dnsbl:

Re: OpenSMTPD 7.5.0 RC1

2024-03-09 Thread Andi Vajda
Hi Omar, On Sat, 9 Mar 2024, Omar Polo wrote: Now, back to the problem, the issue is that on NetBSD seteuid() breaks setuid() and that inbetween 7.3 and 7.4 I lost the check for the setreuid() function. So, in openbsd-compat/resuid.c we end up calling seteuid() and then setuid(), which

Re: Wrote a blogpost on OpenSMTPD mailrelay - feedback appreciated

2024-03-09 Thread Paul Pace
On 2024-03-08 13:53, Peter Thurner | Blunix GmbH wrote: Hello misc@opensmtpd.org, I just wrote a blogpost that explains how to configure OpenSMTPD as a mailrelay for (Debian based) servers. I wanted to link it here in the hopes that somebody could find any mistakes I might have possibly

Re: match from mail-from reject not working

2024-03-09 Thread Otto Retter
Simon, I have similar functionality working with a filter. Have you tried using a filter for this? Here are some anonymized snippets from my smtpd.conf: ``` table bad_guys file:/etc/mail/bad_guys filter "bad_guys" phase mail-from match mail-from regex reject "550 Bad Guys" listen on ...

Re: OpenSMTPD 7.5.0 RC1

2024-03-09 Thread Omar Polo
On 2024/03/08 16:11:45 -0800, Andi Vajda wrote: > > On Fri, 8 Mar 2024, Andi Vajda wrote: > > > With this configuration, the build succeeds on netbsd 10.0_rc5, but I get > > the > > same setuid failure as with 7.4.0p1 (but not with 7.3.0p2): > > Thanks to Gilles I had the chance to debug

Re: MDA exited prematurely when using custom script

2024-03-09 Thread Simon Hoffmann
Philipp wrote: > [2024-03-05 17:07] Simon Hoffmann > > hmm... Based on Philipps idea I have modified my script as follows: > > > > > > > > #!/bin/bash > > > > cat - > /tmp/notfallemail > > Have you notice that this is racy? A better (not elegant solution) is > something like: > > mail=`cat`

Re: relay only for IPv4-only mailservers

2024-03-08 Thread Stuart Longland
(Re-send due to me accidentally sending with the wrong From: address, apologies to the moderators for the noise.) On 9/3/24 09:14, Thomas Groman wrote: Is there any way to configure OpenSMTPd to relay to another mail server only for outgoing emails to MXs that do not have IPv6 native addresses

Re: OpenSMTPD 7.5.0 RC1

2024-03-08 Thread Andi Vajda
On Fri, 8 Mar 2024, Andi Vajda wrote: With this configuration, the build succeeds on netbsd 10.0_rc5, but I get the same setuid failure as with 7.4.0p1 (but not with 7.3.0p2): Looking at obvious differences in the 7.3.0p2, 7.4.0p1 and 7.5.0rc1 smtpd executables. From ldd's standpoint,

Re: OpenSMTPD 7.5.0 RC1

2024-03-08 Thread Andi Vajda
On Fri, 8 Mar 2024, Andi Vajda wrote: I verified that configure works again with this statement: Sorry for the noise, the configure statement is: $ ./configure --prefix=`pwd`/local \ --with-libssl=/home/vajda/libressl-3.8.2/local --with-libevent=/usr/pkg \

Re: OpenSMTPD 7.5.0 RC1

2024-03-08 Thread Andi Vajda
Hi Omar, On Fri, 8 Mar 2024, Omar Polo wrote: Tarballs are available on the official mirror or on GitHub: https://opensmtpd.org/archives/opensmtpd-7.5.0rc1.tar.gz https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/7.5.0rc1 Verify the tarball with signify(1) and the usual public

Re: OpenSMTPD 7.5.0 RC1

2024-03-08 Thread gilles
I somehow uploaded the correct sum.sig but an older version of the tarball, let's pretend I did this to ensure someone made a verify test ;-) Anyways... the tarball has been reuploaded: $ signify -C -e -p opensmtpd-20181026.pub -x opensmtpd-7.5.0rc1.sum.sig Signature Verified

Re: OpenSMTPD 7.5.0 RC1

2024-03-08 Thread Richard Narron
On Fri, 8 Mar 2024, Omar Polo wrote: ... > Tarballs are available on the official mirror or on GitHub: > > https://opensmtpd.org/archives/opensmtpd-7.5.0rc1.tar.gz > https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/7.5.0rc1 > > Verify the tarball with signify(1) and the usual public

Re: MDA exited prematurely when using custom script

2024-03-07 Thread Philipp
[2024-03-05 17:07] Simon Hoffmann > hmm... Based on Philipps idea I have modified my script as follows: > > > > #!/bin/bash > > cat - > /tmp/notfallemail Have you notice that this is racy? A better (not elegant solution) is something like: mail=`cat` > from=`cat /tmp/notfallemail | head -n 50

Re: issues on netbsd

2024-03-06 Thread Andi Vajda
make your original ./configure invocation (i.e. without the -R flag in LDFLAGS and with --with-libssl) to work out-of-the-box again, hopefully! I was able to apply the patch. also, remember to run ./bootstrap after applying the patch to re-generate the configure script. There is no file named

Re: issues on netbsd

2024-03-06 Thread Omar Polo
o run ./bootstrap after applying the patch to re-generate the configure script. > [...] > Next problem: starting opensmtpd-7.4.0p1 fails with the setuid error seen > earlier when building from pkgsrc :-( (ie, pkgsrc is not the problem): > > $ sudo ./local/sbin/smtpd -d -f /usr/p

Re: IO Error: certificate verification failed: certificate has expired

2024-03-06 Thread Zé Loff
On Wed, Mar 06, 2024 at 06:19:10PM +, Simon Harrison wrote: > I've got an odd problem. I'm using smtpd as a relay. Everything works > fine, except, every 2-3 weeks I get the following error (on my local > machine): > > 47b6501430167caa mta error reason=IO Error: certificate verification >

Re: issues on netbsd

2024-03-06 Thread Andi Vajda
On Wed, 6 Mar 2024, Omar Polo wrote: So the issue is that at runtime ld.so fails to load libevent2 somehow... I took a closer look at config.log files produced opensmtpd-7.3.0p2 and opensmtpd-7.4.0p1. The difference is that 7.3.0p2 uses -R flags, 7.4.0p1 does not. The configure command

Re: issues on netbsd

2024-03-06 Thread Omar Polo
On 2024/03/04 09:32:14 -0800, Andi Vajda wrote: > > On Mon, 4 Mar 2024, Omar Polo wrote: > > > Sorry, I made a typo. It should be > > > >./configure CFLAGS='-I/home/vajda/libressl-3.8.2/local/include/ > > -I/usr/pkg/include' > > > > I missed the /include at the end of both -I args. > > >

Re: MDA exited prematurely when using custom script

2024-03-05 Thread Simon Hoffmann
hmm... Based on Philipps idea I have modified my script as follows: #!/bin/bash cat - > /tmp/notfallemail from=`cat /tmp/notfallemail | head -n 50 | grep -i ^From` from=${from// /+} subject=`cat /tmp/notfallemail | head -n 50 | grep -i ^Subject` subject=${subject// /+} out=`curl -g

Re: MDA exited prematurely when using custom script

2024-03-05 Thread gilles
March 5, 2024 4:19 PM, "Simon Hoffmann" wrote: > gil...@poolp.org wrote: > >> Does your script exit with 0 ? > > If the curl output is "OK", then I exit with "exit 0". I have even removed > the "if" > and have just set a static "exit 0" at the end no matter if the curl before > was >

Re: MDA exited prematurely when using custom script

2024-03-05 Thread Simon Hoffmann
Philipp wrote: > Hi Simon > > [2024-03-05 10:49] Simon Hoffmann > > in my virtual users file, I have specified an external script additionally > > to > > delivery to mailboxes. > > > > > > emerge...@domain.tlduser1,user2,|/etc/smtpd/send_sms.sh > > > > Local delivery to the mailboxes

Re: MDA exited prematurely when using custom script

2024-03-05 Thread Simon Hoffmann
gil...@poolp.org wrote: > Does your script exit with 0 ? If the curl output is "OK", then I exit with "exit 0". I have even removed the "if" and have just set a static "exit 0" at the end no matter if the curl before was successful or not. This did not work as well. However, Philipp might be

Re: MDA exited prematurely when using custom script

2024-03-05 Thread Philipp
Hi Simon [2024-03-05 10:49] Simon Hoffmann > in my virtual users file, I have specified an external script additionally to > delivery to mailboxes. > > > emerge...@domain.tlduser1,user2,|/etc/smtpd/send_sms.sh > > Local delivery to the mailboxes works fine. > The script itself is

Re: MDA exited prematurely when using custom script

2024-03-05 Thread gilles
Does your script exit with 0 ? March 5, 2024 10:49 AM, "Simon Hoffmann" wrote: > Hey list, > > in my virtual users file, I have specified an external script additionally to > delivery to mailboxes. > > emerge...@domain.tld user1,user2,|/etc/smtpd/send_sms.sh > > Local delivery to the

Re: issues on netbsd

2024-03-04 Thread Andi Vajda
On Mon, 4 Mar 2024, Omar Polo wrote: Sorry, I made a typo. It should be ./configure CFLAGS='-I/home/vajda/libressl-3.8.2/local/include/ -I/usr/pkg/include' I missed the /include at the end of both -I args. If it still doesn't work, can you please include the `config.log' file? Feel

Re: issues on netbsd

2024-03-04 Thread Omar Polo
On 2024/03/03 16:42:55 -0800, Andi Vajda wrote: > > On Sun, 3 Mar 2024, Omar Polo wrote: > > > ouch! Don't know much of how pkgsrc works, but this seems strange. Can > > you make sure the users were created? `grep smtp /etc/passwd' should be > > enough. > > Yes, both users exist. I created

Re: issues on netbsd

2024-03-03 Thread Andi Vajda
On Sun, 3 Mar 2024, Andi Vajda wrote: On Sun, 3 Mar 2024, Omar Polo wrote: ouch! Don't know much of how pkgsrc works, but this seems strange. Can you make sure the users were created? `grep smtp /etc/passwd' should be enough. Yes, both users exist. I created them with id 1012 and 1013

Re: issues on netbsd

2024-03-03 Thread Andi Vajda
On Sun, 3 Mar 2024, Omar Polo wrote: ouch! Don't know much of how pkgsrc works, but this seems strange. Can you make sure the users were created? `grep smtp /etc/passwd' should be enough. Yes, both users exist. I created them with id 1012 and 1013 and they work fine with 7.3.0p2 built

  1   2   3   4   5   6   7   8   9   10   >