Re: Transport based on domain?

2022-01-27 Thread Benny Pedersen
On 2022-01-27 23:14, Alex wrote: btw, off-topic, but is anyone using fuglu in place of amavisd, which seems kind of dead now? so lets be offtopic, i do use fuglu in prequeue setup with postfix more info in maillist or on fuglu https://gitlab.com/fumail/fuglu

Re: Transport based on domain?

2022-01-27 Thread Kris Deugau
Alex wrote: Hi, I have postfix-3.5.10 configured as a multi-instance along with amavisd for spam filtering. Amavis is limited in its ability to create different filtering policies for individual domains, Unless a lot of functionality has been dropped since I last took a dive in the Amavis

Re: Transport based on domain?

2022-01-27 Thread Wietse Venema
Viktor Dukhovni: > On Thu, Jan 27, 2022 at 05:14:06PM -0500, Alex wrote: > > > I have postfix-3.5.10 configured as a multi-instance along with > > amavisd for spam filtering. > > One of the key features of a multi-instance pipeline with separate input > and output instances is that routing of

Re: Transport based on domain?

2022-01-27 Thread Viktor Dukhovni
On Thu, Jan 27, 2022 at 05:14:06PM -0500, Alex wrote: > I have postfix-3.5.10 configured as a multi-instance along with > amavisd for spam filtering. One of the key features of a multi-instance pipeline with separate input and output instances is that routing of messages into content filters

Transport based on domain?

2022-01-27 Thread Alex
Hi, I have postfix-3.5.10 configured as a multi-instance along with amavisd for spam filtering. Amavis is limited in its ability to create different filtering policies for individual domains, so I wanted to be able to have amavisd run on one port for one domain and another port for another domain.

main.cf += support (was: Debugging import_environment)

2022-01-27 Thread Wietse Venema
Viktor Dukhovni: > It is unfortunate that Postfix does not support "+=" main.cf settings > that augment the default value of a given parameter. In the case The semantics have not been worked out. Below is an attempt. Here, the parameter value should be 'whatever bar'. main.cf #

Re: Inbound Mail Gateway Doubts

2022-01-27 Thread Víctor Rubiella Monfort
Thanks a lot Wietse and Viktor for quick and util responses!. bent smtpprox samples are so useful it's just what i was looking for. Consider recheck doc link on this page http://www.postfix.org/FILTER_README.html because is not upgraded (it's ok on

Re: Debugging import_environment = KRB5_KTNAME=/etc/postfix/smtp.keytab

2022-01-27 Thread Brian J. Murrell
On Thu, 2022-01-27 at 14:46 -0500, Viktor Dukhovni wrote: > In the case > of "import_environment" you really need to retain most of the > default imports: > >     import_environment = >     MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ >     LANG=C POSTLOG_SERVICE POSTLOG_HOSTNAME >     #

Re: Debugging import_environment = KRB5_KTNAME=/etc/postfix/smtp.keytab

2022-01-27 Thread Brian J. Murrell
So the missing key here was not having "keytab: /etc/postfix/smtp.keytab" in /etc/sasl2/smtpd.conf. Interesting that this was not required in the previous version of postfix/sasl/kerberos. Cheers, b. signature.asc Description: This is a digitally signed message part

Re: Debugging import_environment = KRB5_KTNAME=/etc/postfix/smtp.keytab

2022-01-27 Thread Viktor Dukhovni
On Thu, Jan 27, 2022 at 02:46:04PM -0500, Viktor Dukhovni wrote: > Perhaps your Kerberos (GSSAPI via SASL?) library is ignoring environment > variables in processes that change uids (smtpd starts as root and then > drops privs). Of course that makes sense for a setuid process, but not > so much

Re: Debugging import_environment = KRB5_KTNAME=/etc/postfix/smtp.keytab

2022-01-27 Thread Viktor Dukhovni
On Thu, Jan 27, 2022 at 02:18:23PM -0500, Brian J. Murrell wrote: > I have a Postfix postfix-3.5.8 installation on EL8 which I just > recently upgraded from 2.10.1 on EL7. > > The installation is configured to authenticate with GSSAPI and > accordingly has: > > import_environment =

Debugging import_environment = KRB5_KTNAME=/etc/postfix/smtp.keytab

2022-01-27 Thread Brian J. Murrell
I have a Postfix postfix-3.5.8 installation on EL8 which I just recently upgraded from 2.10.1 on EL7. The installation is configured to authenticate with GSSAPI and accordingly has: import_environment = KRB5_KTNAME=/etc/postfix/smtp.keytab defined in main.cf. The /etc/postfix/smtp.keytab file

Re: Inbound Mail Gateway Doubts

2022-01-27 Thread Viktor Dukhovni
On Thu, Jan 27, 2022 at 06:57:12PM +0100, Víctor Rubiella Monfort wrote: > First of all if someone can provide some links with more info about > configuration and architecture on this kind of layered aproach > (GW->postfix->dovecot) I will be very grateful :D. (something more than > official

Re: Inbound Mail Gateway Doubts

2022-01-27 Thread Wietse Venema
V?ctor Rubiella Monfort: > Hi!, > > I'm working on redefine inbound mail delivery but I have some basic > "mixconceptions". > Now I have several separate inbound servers. I want to improve deploying > MX gateway postfix gateways, improve content filtering, etc. > > First of all if someone can

Inbound Mail Gateway Doubts

2022-01-27 Thread Víctor Rubiella Monfort
Hi!, I'm working on redefine inbound mail delivery but I have some basic "mixconceptions". Now I have several separate inbound servers. I want to improve deploying MX gateway postfix gateways, improve content filtering, etc. First of all if someone can provide some links with more info

Re: Non-unique Message ID in mail messages

2022-01-27 Thread Wietse Venema
Daniel Ry?link: > Hello! > > I apologize for bringing perhaps trivial/well-known matter, but I am > interested in your opinion. > > RFC 5322 clearly states that mail messages SHOULD contain a Message ID > identifier, but if the do contain it, it MUST be globally unique. And when the mesage is

Non-unique Message ID in mail messages

2022-01-27 Thread Daniel Ryšlink
Hello! I apologize for bringing perhaps trivial/well-known matter, but I am interested in your opinion. RFC 5322 clearly states that mail messages SHOULD contain a Message ID identifier, but if the do contain it, it MUST be globally unique. Despite this requirement, I have encountered