Re: Reject Chinese mail

2019-11-23 Thread Dominic Raferd
On Sun, 24 Nov 2019 at 07:24, Jeffrey 'jf' Lim wrote: > On Sat, 23 Nov 2019 at 10:00, 황병희 wrote: > >> merr...@fn.de writes: >> >> > [...] do you think if it is possible to reject all mails from China? >> Thanks >> >> How about moving to Gmail(Google Apps)? Gmail's spam defense is not bad, i >>

Re: Reject Chinese mail

2019-11-23 Thread Jeffrey 'jf' Lim
On Sat, 23 Nov 2019 at 10:00, 황병희 wrote: > merr...@fn.de writes: > > > [...] do you think if it is possible to reject all mails from China? > Thanks > > How about moving to Gmail(Google Apps)? Gmail's spam defense is not bad, i > think. I disagree. It often labels mailing list email as spam,

Re: Reject Chinese mail

2019-11-23 Thread 황병희
> By the way, you can find ASIA NETBLOCK on the internet and block them all > easily. My Postfix is running on Google Compute Engine's Ubuntu 18.04. Actually i do not block anyone, any clients, any ip addresses. #+BEGIN_SRC sh soyeomul@bionic190316003:~$ cat ~/.forward soyeomul+...@gmail.com

Re: Validation DMARC

2019-11-23 Thread Richard Damon
On 11/23/19 12:30 PM, Ralph Seichter wrote: > * Roland Köbler: > >> Or in short: DMARC intentionally breaks every mailinglist and every >> mail-forwarding. > I doubt that it is broken "intentionally". ;-) > > "[Ich habe] gefunden, daß Mißverständnisse und Trägheit vielleicht > mehr Irrungen in

Re: Sieve vacation and smtp_sasl_password_maps

2019-11-23 Thread @lbutlr
On 23 Nov 2019, at 10:13, Gianni Angelozzi wrote: > Yes, I need smtp_sender_dependent_authentication because the upstream ISP > will only accept incoming mails from the authenticated user. That doesn’t imply a need for smtp_sender_dependent_authentication. That is needed, AIUI, when you have

Re: Reject Chinese mail

2019-11-23 Thread @lbutlr
On 20 Nov 2019, at 21:51, merr...@fn.de wrote: > We did get a lot of spam messages from Chinese providers. We speak not > Chinese, do you think if it is possible to reject all mails from China? > Thanks This is what I do: In crontab for root: @reboot bash -c 'pfctl -t badguys -T add $(cat

Re: Sieve vacation and smtp_sasl_password_maps

2019-11-23 Thread Gianni Angelozzi
Thanks for the reply. Yes, I need smtp_sender_dependent_authentication because the upstream ISP will only accept incoming mails from the authenticated user. The feature you suggest may not work on my scenario, because if I send email from user1 but authenticating with user2 (the default

Re: Sieve vacation and smtp_sasl_password_maps

2019-11-23 Thread Wietse Venema
Gianni Angelozzi: [ Charset ISO-8859-15 converted... ] > Hi, > > I've set up sieve vacation reply but my postfix setup is using > smtp_sasl_password_maps and smtp_sender_dependent_authentication. > > The problem is that Sieve will send the reply with "from=<>" to prevent > bounces. > > This

Re: Reject Chinese mail

2019-11-23 Thread John Hudak
+1 E10. A colleague has dealt with them directly on technical/product and process issues and their business and product ethics when compared to ours, leave a lot to be desired. "blocking China is blocking money" => sell ones soul to the devil. On Sat, Nov 23, 2019 at 6:35 AM Rafael Azevedo

Re: Validation DMARC

2019-11-23 Thread Richard Damon
On 11/23/19 4:13 AM, Roland Köbler wrote: > Hi, > >> when validating DMARC, it use the envelop address, or use from address from >> the header? > it unfortunately uses the from-header. > (If it would use the envelope address, it would not cause that much > problems.) > > Or in short: DMARC

Re: Validation DMARC

2019-11-23 Thread Richard Damon
On 11/23/19 4:26 AM, Dominic Raferd wrote: > > > On Sat, 23 Nov 2019 at 09:14, Roland Köbler > mailto:rk-l...@simple-is-better.org>> > wrote: > > Hi, > > > when validating DMARC, it use the envelop address, or use from > address from the header? > it unfortunately uses the

Re: Reject Chinese mail

2019-11-23 Thread Matthew McGehrin
Hello, There is a DNSBL maintained by bit.nl that allows you to block countries with relative ease. URL: https://noc.bit.nl/dnsbl/ascc/ IE: cn.ascc.dnsbl.bit.nl This zone contains data regarding the ISO3166 countrycode and BGP Autonomous System for any given IPv4 or IPv6 address. Every

Re: Reject Chinese mail

2019-11-23 Thread Wesley Peng
Or maybe block them by ESP? I saw there is a Perl module listing those big providers in China. https://metacpan.org/pod/Data::ChineseESP regards On Sat, Nov 23, 2019, at 7:33 PM, Rafael Azevedo wrote: > I've blocked the entire ASIA netblocks in my ASN. > We don't exchange any information with

Re: Validation DMARC

2019-11-23 Thread Wesley Peng
I’m not sure , you may refer this discussion, https://serverfault.com/questions/779730/why-dont-my-domains-messages-to-a-google-group-get-their-headers-rewritten-so On Sat, Nov 23, 2019, at 7:23 PM, Jaroslaw Rafa wrote: > Dnia 23.11.2019 o godz. 19:10:51 Wesley Peng pisze: > > > > if you have

Re: Reject Chinese mail

2019-11-23 Thread Rafael Azevedo
I've blocked the entire ASIA netblocks in my ASN. We don't exchange any information with that part of the world, neither any of our customers. All we get from that part of the world is DDoS attacks, brute force attacks and spam. Sorry for those who don't agree with me, its ok, but I got tired of

Re: Validation DMARC

2019-11-23 Thread Jaroslaw Rafa
Dnia 23.11.2019 o godz. 19:10:51 Wesley Peng pisze: > > if you have used a mail.ru email for google groups, when you posted > message to group, it will replace From header with the list address. Does it re-sign the message then? Because replacing the From: header would break DKIM, as this header

Re: Reject Chinese mail

2019-11-23 Thread Wesley Peng
I totally agreed with you @Rafa. btw, is there any good reputation, strict standard email hosting for suggestions? I currently use fastmail, it is good for personal usage, but I heard some privacy problems for commercial use. thanks. On Sat, Nov 23, 2019, at 6:35 PM, Jaroslaw Rafa wrote: >

Re: Validation DMARC

2019-11-23 Thread Wesley Peng
Hello if you have used a mail.ru email for google groups, when you posted message to group, it will replace From header with the list address. On Sat, Nov 23, 2019, at 6:43 PM, Jaroslaw Rafa wrote: > Dnia 23.11.2019 o godz. 17:19:53 Wesley Peng pisze: > > Google groups replace the from: with

Re: Validation DMARC

2019-11-23 Thread Jaroslaw Rafa
Dnia 23.11.2019 o godz. 17:19:53 Wesley Peng pisze: > Google groups replace the from: with their group address. I have never seen it and I'm subscribed to many Google-based mailing lists. They replace the envelope from address (like almost every mailing list server does), but keep the original

Re: Reject Chinese mail

2019-11-23 Thread Jaroslaw Rafa
Dnia 23.11.2019 o godz. 10:59:24 황병희 pisze: > > How about moving to Gmail(Google Apps)? If someone is running their own mail server, do not ask them to move to Gmail. That's what the big players like Google want - that everyone uses their service and there are no more small, independent servers

Re: Validation DMARC

2019-11-23 Thread Dominic Raferd
On Sat, 23 Nov 2019 at 09:14, Roland Köbler wrote: > Hi, > > > when validating DMARC, it use the envelop address, or use from address > from the header? > it unfortunately uses the from-header. > (If it would use the envelope address, it would not cause that much > problems.) > > Or in short:

Re: Validation DMARC

2019-11-23 Thread Wesley Peng
Google groups replace the from: with their group address. What I know the big providers having strict DMARC setting are: mail.ru laposte.net I am glad the more large providers like gmail, outlook don’t have this stupid setting. Regards On Sat, Nov 23, 2019, at 5:13 PM, Roland Köbler wrote: >

Re: Validation DMARC

2019-11-23 Thread Roland Köbler
Hi, > when validating DMARC, it use the envelop address, or use from address from > the header? it unfortunately uses the from-header. (If it would use the envelope address, it would not cause that much problems.) Or in short: DMARC intentionally breaks every mailinglist and every