Log explanation

Hello, Does anyone knows where I could find an explanation of the different fields in the logs example:34e21ed2c47fe7e3 mta delivery evpid=9765e121d002d97d from= to= rcpt=<-> source="10.1.2.2" relay="66.102.1.27 (wb-in-f27.1e100.net)" delay=1s result="Ok" stat="250 2.0.0 OK  1698365590

How to bypass rdns filter

Hello, I have this filter configuredfilter check_rdns phase connect match !rdns disconnect "550 no rDNS is so 80s" It works however all my servers on my LAN that do not have a reverse DNS entry match it. I would like this rule to be valid except for 192.168.1.0/24 Is it possible ?

Re: How to write the rule to avoid spam

Hello Thomas, Thank you for your answer.However it doesn't work because "from domain..." is an invalid syntax Le mercredi 5 avril 2023 à 11:33:09 UTC+2, Thomas Bohl a écrit : Hello, > So I would tend to write a rule such as > match ! from domain for domain action TO-CLAM_SMTPD_IN

How to write the rule to avoid spam

Hello, Sometimes I'm getting spam because I have a weakness in my configuration At the moment I have action TO-CLAM_SMTPD_IN relay host smtp://127.0.0.1:10027 match from src for domain action TO-CLAM_SMTPD_IN match from any for domain action TO-CLAM_SMTPD_IN The table clients is a file that

Re: Mails sent in IPv4 while I expect IPv6

Hello Tobias, > Did you try reloading the report page? I went on the report page again today and it seems to me that I have a better score, 8.When I was trying to set up my myserver and DNS I sometimes had a score of 4 even after improvements.So yes it seems that, we should not go too fast on

Re: Mails sent in IPv4 while I expect IPv6

Hello Tobias, This tool is a great work thank you.I had tested it a few days/weeks ago but I used it again today. I worked things to improve my score (signed the ipv6 reverse zone, added the ipv6 rdns for my mail server). Notes: - In DMARC Report Deliverability, it's written "To authorize this

Re: Mails sent in IPv4 while I expect IPv6

Hello, Sorry to ask the question again but are your mails transmitted in IPv6 ?Does opensmtpd favors IPv6 over IPv4 when it has the choice ? Regards Le jeudi 12 janvier 2023 à 02:35:41 UTC+1, Mik J a écrit : Hello John, Tobias, Thank you for your answers. I was not favoring the DNS

Re: Mails sent in IPv4 while I expect IPv6

029 match from local tag CLAM_OUT for any action VERS-DKIM_OUT action RELAIE relay match from local tag DKIM_SIGNE for any action RELAIE Does opensmtpd favors IPv6 over IPv4 or does it favor IPv4 ? Regards Le mercredi 11 janvier 2023 à 20:11:47 UTC+1, John Batteen a écrit :

Mails sent in IPv4 while I expect IPv6

Hello, My server has an IPv6 adress and is able to contact gmail mail server$ telnet 2a00:1450:400c:c0a::1a 25Trying 2a00:1450:400c:c0a::1a... Connected to 2a00:1450:400c:c0a::1a. Escape character is '^]'. 220 mx.google.com ESMTP q7-20020a05600c46c700b003d9f3cf68d3si5203102wmo.92 - gsmtp I

Re: Redirect queue to another smtp

Hello Maksim, Marcus, thank you for your answers. Le dimanche 14 août 2022 à 21:02:27 UTC+2, Marcus MERIGHI a écrit : Hello Mik, mikyde...@yahoo.fr (Mik J), 2022.08.14 (Sun) 05:14 (CEST): > I have received some mails on my "SMTP2" which is misconfigured and >

Redirect queue to another smtp

Hello, I have received some mails on my "SMTP2" which is misconfigured and mails are stuck in the queue. They look like that25eed6a533daaed1|inet4|mda||cxxx@gmail.com|m...@e.xxx|m...@e.xxx|1660443800|1660443800|0|17|pending|181|"mail.maildir: No such file or directory" Is there a

Re: Converting from old format to new format

Le 22/08/2020 à 22:23, Mik J a écrit : In old format I had accept tagged CLAM_IN for domain virtual deliver to maildir "/home/mail/%{dest.domain:lowercase}/%{dest.user:lowercase}/Maildir" In new format I wrote action DELIVRE_VIRTUELS maildir "/home/mai

Converting from old format to new format

Hello, I'm trying to convert my old configuration to the new format and I'm missing some bits I used to use the following instructionexpire 4hI'm not sure how is it known in the new format: queue ttl delay ? -- limit mta for domain gmail.com inet4I have no idea about this one --In old format I

Re: Non stop /bsd: smtpctl[51626]: pledge "fattr", syscall 124

ohannes Krottmayer wrote: > On 07.01.20 at 07:22,  Mik J wrote: >> Hello, >> >> I keep having these logs in my /var/log/messages do you know what this >> means ? >> Jan  7 06:51:01 v /bsd: smtpctl[51626]: pledge "fattr", syscall 124 >> Jan  7 06:52:01 v /b

Non stop /bsd: smtpctl[51626]: pledge "fattr", syscall 124

Hello, I keep having these logs in my /var/log/messages do you know what this means ?Jan  7 06:51:01 v /bsd: smtpctl[51626]: pledge "fattr", syscall 124 Jan  7 06:52:01 v /bsd: smtpctl[64532]: pledge "fattr", syscall 124 Jan  7 06:52:01 v /bsd: smtpctl[13532]: pledge "fattr", syscall 124 Jan  7

Re: RBLs?

by native. Probably you'll answer that the goal of smtpd is to deliver mails not to do this kind of tasks. Regards Le dimanche 30 juin 2019 à 13:47:04 UTC+2, Gilles Chehade a écrit : On Sat, Jun 29, 2019 at 01:03:46PM +, Mik J wrote: >  Hello, Hello, > I'm also inter

Re: RBLs?

Hello, I'm also interested in this topic. A lot of spam are still passing through. On my personal mailbox, I receive almost no spam.But on addresses that are visible on a website I receive spam, two/three per day many are blocked though. I have the same strategy as Thomas and use spamd and spam

Intercepting mails with opensmtpd

Hello, I didn't find the right syntax to intercept a mail. Server (www) => Server opensmtpd (relay) => other server such as gmail There is spam (along with legitimate mails) coming from the www server and opensmtp is relaying them to other mtas such as gmail. I wanted for a short time period

Rule to prevent spam from my domain

Hello, I have wrote rules for my opensmtpd but some spams are passing through. The ones that I go through have a source like em...@mydomain.org and are sent to i...@mydomain.org I'm wondering if some of you have written this kind of rule ? reject from source ! sender for domain Regards

root privileges for smtpctl show stats

Hello, I can see that retriving the statistics requires root privileges $ /usr/sbin/smtpctl show stats smtpctl: need root privileges But in my opinion some users should be able to retrieve these stats. In my context, it's the snmpd process which tries to retrieve the stats. Regards

Re: Opensmtpd failover

Thank you everyone for replying to my question. First I think to work on the backup mx server (without any storage), as it was suggested. And see how it goes. Le mercredi 5 décembre 2018 à 10:31:35 UTC+1, Gilles Chehade a écrit : On Wed, Dec 05, 2018 at 10:21:13AM +0100, Aham

root privileges for smtpctl show stats

Hello, I can see that retriving the statistics requires root privileges $ /usr/sbin/smtpctl show stats smtpctl: need root privileges But in my opinion some users should be able to retrieve these stats. In my context, it's the snmpd process which tries to retrieve the stats. Regards

Opensmtpd failover

Hello, I'm wondering how to do a proper mail server failover. Let's say smtp1 is down, the internet client resolves the other mx with a lower priority and the mail goes to smtp2. Now smtp2 writes the message on the disk in order to store it. What do you people do in order to have a common

Re: people using elk / grafana ?

Hello Gilles, I use ELK and cacti, that's why I made a feature request a few months ago regarding the monitoring. In cacti/snmp: I want to poll OID and see if mail volume grow. Long term trends In ELK: I want to detect spam, where is it comming from etc. if you can see the image, this is what

Re: How to deal with spam and opensmtpd

écrit : Hello Mik, On 04/19/18 13:18, Mik J wrote: > Thank you Simon for your answer. > > Actually, this marketing company is not doing heavy spam so they qualify mail > adresses then have time to retry to send their email. > Their unsubscribe button is worthless. >

Re: How to deal with spam and opensmtpd

was wondering what do you guys use to filter content of emails at the smtp server level. Regards Le mercredi 18 avril 2018 à 22:50:32 UTC+2, Simon McFarlane <s...@desu.ne.jp> a écrit : On 04/18/2018 01:44 AM, Mik J wrote:> What other (not spamd and spamassassing) do you use ? I use bgp

How to deal with spam and opensmtpd

Hello, I'm using Openbsd and Opensmtpd + Spamd. I have been able to reduce the spam. However there are some marketing companies that constantly change their IPs and pass through the greylisting, they really attempt to send the mail (multiple times). I looked at bogofilter and it looks

Re: warn: smtpd: parent_forward_open

02, 2018 at 09:43:52AM -0500, Scott Court wrote: On 01/01/2018 07:19 PM, Mik J wrote: # smtpd -h version: OpenSMTPD 6.0.0 Also, if anyone knows why 6.0.2 is not the version shipped in the latest 6.2 openbsd. Thanks I have been wondering about this myself. After taking a look at the code i

warn: smtpd: parent_forward_open

Hello, I have this message in my logs but it's surprising since no reference to /var/mail is present in my opensmtpd.conf smtpd[78301]: warn: smtpd: parent_forward_open: /var/rep/_vmail: No such file or directory table utilisateurs file:/etc/mail/utilisateurs accept tagged CLAM_IN for domain

Syslog messages and opensmtpd

Hello, Do you know where I can find a full list of different syslog messages that can be sent by opensmtpd ? I'm using logstash to match parameters but the syslog messages are not clear to me exemples:6a933eae3e6c0974 smtp event=closed reason=quit6a933eadd23a179c mta event=closed reason=quit

Re: Grok patterns for opensmtpd

Le Mardi 23 mai 2017 9h47, Mik J <mikyde...@yahoo.fr> a écrit : Hello,I would like to know if some of you already worked on Grok patterns for opensmtpd with logstash.

Re: Messages stuck in queue don't show up with smtpctl

Le Mardi 23 mai 2017 10h09, Mik J <mikyde...@yahoo.fr> a écrit : Version: 6.0.2 Hello, The smtpctl don't show me any result# smtpctl show queue # smtpctl show message 03fbbf757050fe8c smtpctl: fopen: No such file or directory# smtpctl show envelope 03fbbf757050fe8c smtpctl:

Re: Opensmtpd with multiple certificates

17 16h16, Bruno Pagani <bruno.pag...@ens-lyon.org> a écrit : Le 14/05/2017 à 15:45, Edgar Pettijohn a écrit : On 05/14/17 07:20, Bruno Pagani wrote: Le 14/05/2017 à 09:59, Mik J a écrit : Thank you Edgar, You wrote multiple IP adresses. Does it mean that 1 IP address

Opensmtpd with multiple certificates

Hello, I would like to know if it's possible to use multiple certificates/keys with opensmtpd domain.com has MX mx.domain.comacme.com has MX mx.acme.com When a clients (remote mta such as gmail) connects to my server, my opensmtpd should send the according certificate.Something like virtual

Spamd question with Spamtrap

Hello, Spamd has been really efficient in blocking spam. A few of them passed through once in a while but there's no discomfort. But, I'm not able to use spamtrap. #spamdb -T -a ""# spamdb | grep SPAMTRAP SPAMTRAP| But when I telnet port 25 and try

Re: plans for 2017

Hello Gilles, Thanks too for sharing. I've implemented a quick and dirty way to retrieve statistics with bind and spamd through snmp. I could do the same with opensmtpd but the trafic of my mail server is close from 0 at the moment.I just wanted to say that in a real production environnement

Re: OpenSmtpd not RFC compliant ?

Thank you Gilles for this clarification > Le Lundi 30 janvier 2017 9h35, Gilles Chehade <gil...@poolp.org> a écrit : > > On Sun, Jan 29, 2017 at 08:12:21PM +, Mik J wrote: >> Hello Gilles, >> Thank you for your answer. >> For the first point I have this

Difference between rcpt and dest

Hello, I didn't understand the difference between %{rcpt.user} and %{dest.user} %{rcpt.domain} and %{dest.domain} I've had issues with rcpt.xxx when I tried to redirect mails webmas...@mydomain1.org to u...@mydomain.org It worked only with dest.xxx and I'll probably stick with it. My question

Re: OpenSmtpd not RFC compliant ?

explanations Le Dimanche 29 janvier 2017 17h09, Gilles Chehade <gil...@poolp.org> a écrit : On Sat, Jan 28, 2017 at 09:35:01PM +, Mik J wrote: > Version: OpenSMTPD 5.9.2 > Hello, Hello, > I know that my version is not the latest but my question might still be valid.

OpenSmtpd not RFC compliant ?

Version: OpenSMTPD 5.9.2 Hello, I know that my version is not the latest but my question might still be valid. * The RFC5321 states in paragraph 2.4 that "Mailbox domains follow normal DNS rules and are hence not case sensitive."But when I write to emails like u...@mydomain.org or

How to both redirect to console and screen

Hello, It is possible to redirect the boot sequence to the console using # cat /etc/boot.conf set tty com0 But then there is no screen output. How is it possible to have both of them ? Thank you -- You received this mail because you are subscribed to misc@opensmtpd.org To unsubscribe, send a

Re: My aliases don't work

eb server should use my local mail server as a relay which is going to sign emails etc. Thank you Le Mercredi 7 septembre 2016 0h34, Edgar Pettijohn <ed...@pettijohn-web.com> a écrit : > > >On 16-09-06 21:53:14, Mik J wrote: > >> Hello, >> This is a very

My aliases don't work

Hello, This is a very simple question but yet didn't find the answer.I have a machine m1 which is a webserver. On openbsd there are daily reports and I want them to be sent to an external address. # grep ^root /etc/mail/aliasesroot: myexternaladdress@mydomain.orgAfter modifying the aliases

Re: Can't map an address to another one

draining [relay:127.0.0.1,port=10023,mx] refcount=2, ntask=1, nconnector=1, nconn=0 debug: mta: scheduling relay [relay:127.0.0.1,port=10023,mx] in 1s... debug: mta: flush for 3ff99b9d4918e017 (-> i...@mydomain.org) smtp-in: Closing session 7c7d334d52c5ec39 Le Dimanche 21 août 2016 9h54, M

Re: Can't map an address to another one

h: personaladd@gmail.comDelivered-To: i...@mydomain.org... Received: by mail-x-x.google.com with SMTP id l203so114910462oib.1     for <i...@mydomain.org>; Sun, 21 Aug 2016 00:38:05 -0700 (PDT) Regards Le Dimanche 21 août 2016 1h14, Edgar Pettijohn <ed...@pettijohn-web.com> a é

Can't map an address to another one

Hello, I want to use some kind of alias addresses like mails sent to i...@mydomain.org would arrive in u...@mydomain.org. Both are on my mail server. # cat /etc/mail/usersi...@mydomain.org user@mydomain.orgu...@mydomain.org vmail In my smtpd.conftable users file:/etc/mail/usersaccept tagged

Re: What is the correct syntax in opensmtpd

Thank you for your answer. Indeed I didn't think about this option. Le Mercredi 17 août 2016 21h50, Edgar Pettijohn <ed...@pettijohn-web.com> a écrit : Sent from my iPhone On Aug 17, 2016, at 2:41 PM, Mik J <mikyde...@yahoo.fr> wrote: Hello, I have two rules like thes

What is the correct syntax in opensmtpd

Hello, I have two rules like theseaccept from local for domain relay via smtp://127.0.0.1:10023 accept from source for domain relay via smtp://127.0.0.1:10023 Is there a way to make only one rule ? If a mail is local OR coming from some ips I trust then relay the mails Regards

Monitoring opensmtpd with snmp

Hello, I would like to know if monitoring opensmtpd with snmp is supportedIf yes what are the OIDs ?The goal would be something like monitoring the queue and retrieve the statistics in a standard way (snmp) Regards

Re: How to have two different policies to send emails

Samedi 30 juillet 2016 14h57, Olivier Burelli <oliv...@burelli.fr> a écrit : On Fri, 29 Jul 2016 13:02:58 + (UTC) Mik J <mikyde...@yahoo.fr> wrote: Hello Mik J. egress is the routed interface. If i understood your case you have to : _ configure PF (with divert-to) for yo

Start Opensmtpd with a key protected by password

Hello, I'm able to start opensmtpd manually as it prompts me the password for the private keyHowever don't know how to do this automatically so opensmtpd starts at boot. # /etc/rc.d/smtpd start smtpdpassphrase for hostname.org: I looked at the man but didn't find any directive. Regards

How to have two different policies to send emails

Hello, I would like to have two different policies for clients (MUA) that send mails.- Clients (applications) that send mails without authentication, they have a specific IP address - Clients (users) that send mails with an authentication, I don't know their IP address For case 1, it

Opensmtpd crash because of loop (version: 5.9.1)

version: 5.9.1 Hello,I'm configuring Opensmtpd with dkimproxy and of course I did many tests but one email is stuck somewhere and makes the daemon to crash. smtpd.conf listen on 127.0.0.1 listen on 127.0.0.1 port 10028 tag DKIM_OUT # Emails from dkimproxy listen on 10.x.x.x # Emails from clients#

Unix users and Virtual users

version: OpenSMTPD 5.4.4 Hello,I already asked a similar question a long time ago but OpenSmtp has changed a lot since then. a) For the same domain domain.xx, I would like that both, my unix user r...@domain.xx and my virtual user v...@domain.xx, receive mails.Do I have to make my domain