Re: header_checks for IP & email destination?

2017-12-22 Thread Markus Clardy
If it is supposed to be Source IP and destination address, do you really need to do anything with the headers? What I mean is, if you know the IP, make a restriction that if a mail is being received from a specific IP, then push it onto another restriction class, which then checks the recipient,

Re: Requesting certificates

2017-12-22 Thread li...@lazygranch.com
On Fri, 22 Dec 2017 09:52:13 + Dominic Raferd wrote: > On 22 December 2017 at 09:38, li...@lazygranch.com > wrote: > > > ​... > > From main.cf (sanitized): > > > > # TLS > > smtpd_use_tls = yes > > ​​ > >

Re: Requesting certificates

2017-12-22 Thread Dominic Raferd
On 22 December 2017 at 09:38, li...@lazygranch.com wrote: > ​... > From main.cf (sanitized): > > # TLS > smtpd_use_tls = yes > ​​ > smtpd_tls_security_level = may > smtpd_tls_auth_only = yes > smtpd_tls_key_file =

Requesting certificates

2017-12-22 Thread li...@lazygranch.com
I'm not at the point where I want to verify certs and reject mail, because the mail must go through! However I would like at least for postfix to request the cert. (Forgive my terminology here if I am not phrasing this properly.) Basically I would just eyeball the header and look at the cert