TLSA and .mil dns servers

2015-11-09 Thread Patrick Domack
I have been using dane for awhile now, and thought I would push it out to a few more systems, since I have not run into any problems over the last year with my current one. Due to this, I found more .mil dns issues causing this to not function. The .gov has had broken dnssec for years

Re: Disable spooling

2015-11-09 Thread Noel Jones
On 11/9/2015 3:46 AM, Paulo Matos wrote: > Hi, > > I have configured postfix with virtual users and virtual domains so I > have it configured to serve two domains AAA.com and BBB.com. However, > the machine hostname > is centauri (none of the hostname its serving). Reverse DNS is enabled > to one

Re: TLSA and .mil dns servers

2015-11-09 Thread Viktor Dukhovni
On Mon, Nov 09, 2015 at 04:32:09PM +, Viktor Dukhovni wrote: > If you want a more comprehensive list of domains with DNS problems, > ... I just happen to have one. :-) To put that list of ~230 broken domains in context, I've surveyed over 5 million domains, and found ~100 thousand domains

address rewrite

2015-11-09 Thread Paul A
I have a situation where an email from Comcast alert services is getting rejected, as the email comes in to my postfix server it gets forward to my phone and the service provider looks up SPF for my domain and rejects the email as it should. I wanted to rewrite the address to remove the

RE: OpenDKIM

2015-11-09 Thread George Kasica
Steve & others: I see references to RPM installs in Fedora and CentOS. Anything out there for the Ubuntu 14.x product? George From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Steve Jenkins Sent: Friday, November 06, 2015 13:16 To: John Allen

Re: TLSA and .mil dns servers

2015-11-09 Thread Viktor Dukhovni
On Mon, Nov 09, 2015 at 09:08:35AM -0500, Patrick Domack wrote: > Due to this, I found more .mil dns issues causing this to not function. The > .gov has had broken dnssec for years now, and .mil has had flaky dns servers > and mtu issues, but now it seems that the .mil dns servers just drop all >

Re: TLSA and .mil dns servers

2015-11-09 Thread Viktor Dukhovni
On Mon, Nov 09, 2015 at 11:10:05AM -0500, Patrick Domack wrote: > domain-insecure: "mail.mil." > > The above seems to be functioning, I'll do larger tests tonight. Also see if > I hit any other systems like this, as I start testing against more and more > servers. > > The domain-insecure:

Re: TLSA and .mil dns servers

2015-11-09 Thread Benny Pedersen
Patrick Domack skrev den 2015-11-09 15:08: Is there something I can do to disable dane lookups for all .mil? or do I have to specify each subdomain. https://dane.sys4.de/smtp/mail.mil dont shoot you self in foot if there is no mx record the tlsa most be on _25._tcp.mail.mil if there is a

RE: Disable spooling

2015-11-09 Thread L . P . H . van Belle
> -Oorspronkelijk bericht- > Van: njo...@megan.vbhcs.org [mailto:owner-postfix-us...@postfix.org] > Namens Noel Jones > Verzonden: maandag 9 november 2015 16:05 > Aan: postfix-users@postfix.org > Onderwerp: Re: Disable spooling > > On 11/9/2015 3:46 AM, Paulo Matos wrote: > > Hi, > > > >

Re: TLSA and .mil dns servers

2015-11-09 Thread Patrick Domack
domain-insecure: "mail.mil." The above seems to be functioning, I'll do larger tests tonight. Also see if I hit any other systems like this, as I start testing against more and more servers. The domain-insecure: "eemsg.mail.mil.", kept failing randoming, I believe this was due again to

procmail as a content_filter with dovecot under postfix

2015-11-09 Thread Vicki Brown
I am using Mac OS X Server. OS X Server uses postfix with dovecot set as mail_transport. I want to add procmail to the mix. I cannot use the (typical) mailbox_command = procmail -a "$EXTENSION" because mailbox_transport = dovecot overrides any mailbox_command parameter and it is NOT

Disable spooling

2015-11-09 Thread Paulo Matos
Hi, I have configured postfix with virtual users and virtual domains so I have it configured to serve two domains AAA.com and BBB.com. However, the machine hostname is centauri (none of the hostname its serving). Reverse DNS is enabled to one of the domains. I think that as a result of this setup