Re: STARTTLS abuse

2021-09-07 Thread Bill Cole
On 2021-09-07 at 14:42:33 UTC-0400 (Tue, 7 Sep 2021 19:42:33 +0100) Adam Weremczuk is rumored to have said: Hi all, It's postfix 3.1.6-0+deb9u1 on Debian 9. Since enabling STARTTLS on port 25 I'm getting lots of traffic looking like this (relay attempts?): This does not actually have

Re: STARTTLS abuse

2021-09-07 Thread Viktor Dukhovni
On Tue, Sep 07, 2021 at 02:50:09PM -0400, Viktor Dukhovni wrote: > inetnum:77.247.110.0 - 77.247.110.255 > netname:PEENQ-NL-TLN-VPS-01 > country:NL > geoloc: 52.370216 4.895168 > admin-c:PA10298-RIPE > tech-c: PA10298-RIPE >

Re: STARTTLS abuse

2021-09-07 Thread Viktor Dukhovni
On Tue, Sep 07, 2021 at 07:42:33PM +0100, Adam Weremczuk wrote: > It's postfix 3.1.6-0+deb9u1 on Debian 9. > > Since enabling STARTTLS on port 25 I'm getting lots of traffic looking > like this (relay attempts?): > > Sep  6 09:17:42 localhost postfix/smtpd[14622]: connect from >

Re: STARTTLS abuse

2021-09-07 Thread Wietse Venema
Adam Weremczuk: > Sep? 6 09:17:42 localhost postfix/smtpd[14622]: disconnect from > unknown[77.247.110.240] ehlo=2 starttls=1 auth=0/1 commands=3/4 Use "auth=0/" as a pattern for fail2ban. Wietse

STARTTLS abuse

2021-09-07 Thread Adam Weremczuk
Hi all, It's postfix 3.1.6-0+deb9u1 on Debian 9. Since enabling STARTTLS on port 25 I'm getting lots of traffic looking like this (relay attempts?): Sep  6 09:17:42 localhost postfix/smtpd[14622]: connect from unknown[77.247.110.240] Sep  6 09:17:42 localhost postfix/smtpd[14622]: setting

Re: Envelope-From when forwarding

2021-09-07 Thread Wietse Venema
Welcome back, Michael. [forwarding without changing the envelope From] In a hypothetical world, all email is signed with DKIM, and forwarders don't break DKIM signatures, so that DMARC will accept the messages. The Postfix mailing list still relies on this but it is becoming a curiosity. In a

Envelope-From when forwarding

2021-09-07 Thread Michael Tokarev
Hello Postfix-users! And hello everyone who may still remember me. Wietse, Victor, maybe Ralf is still here too.. With very warm regards and memory I'm here again. LTNS, Very Long!.. :) It's been long time since I touched email as well, besides maintaining small postfix instances on servers to