[pfx] Please avoid TLSA records matching retired issuing CAs.

2023-07-16 Thread Viktor Dukhovni via Postfix-users
[ Also posted to dane-us...@list.sys4.de ] There are still ~250 MX hosts with DANE TLSA records that match the retired X3 or X4 Let's Encrypt CAs. Perhaps also other retired CAs, but these are the ones I'm tracking at: https://dnssec-stats.ant.isi.edu/~viktor/x3hosts.html Please take care

[pfx] Re: search for compression switch?

2023-07-16 Thread Viktor Dukhovni via Postfix-users
On Sun, Jul 16, 2023 at 11:02:23PM +0200, Benny Pedersen via Postfix-users wrote: > > cat access | wc -l > > 2'294'583 > > > > Yes me problem are that this file are to big for me little system > > will add more memory solve it ? > > local rbldnsd ?, dont know if postfix uses less ram for

[pfx] Re: search for compression switch?

2023-07-16 Thread Benny Pedersen via Postfix-users
Maurizio Caloro via Postfix-users skrev den 2023-07-16 13:06: There's no point in postmap'ing cidr tables. http://www.postfix.org/POSTSCREEN_README.html - Permanent allow/denylist test Out of curiosity: what's your use case that requires checking the client's IP against a

[pfx] Re: search for compression switch?

2023-07-16 Thread Benny Pedersen via Postfix-users
Maurizio Caloro via Postfix-users skrev den 2023-07-16 10:05: when i want to provide the file access via postmap, it inflates to double size. cidr files should not be postmapped not even if in postgresql :) ___ Postfix-users mailing list --

[pfx] Re: search for compression switch?

2023-07-16 Thread Viktor Dukhovni via Postfix-users
On Sun, Jul 16, 2023 at 10:05:20AM +0200, Maurizio Caloro via Postfix-users wrote: > postscreen_access_list = permit_mynetworks, > cidr:/etc/postfix/whitelistCIDR+IP > cidr:/etc/postfix/access > > root postfix 47M Jul 16 08:34 /etc/postfix/access > root postfix

[pfx] Re: Problems connecting to desktop client

2023-07-16 Thread Viktor Dukhovni via Postfix-users
On Sun, Jul 16, 2023 at 03:56:36PM +0200, Wolfgang Paul Rauchholz via Postfix-users wrote: > Postfix and Dovecot are up and running, and I can send and receive emails > from CLI. Dovecot is likely listening only on the "implicit TLS" IMAP port, namely 993. - On port 993, clients start by

[pfx] Re: Problems connecting to desktop client

2023-07-16 Thread Markus Schönhaber via Postfix-users
16.07.23, 15:56 +0200, Wolfgang Paul Rauchholz via Postfix-users: I run my home server under Rocky Linux 9. The server is modem / router and as such has two firewall interfaces; internal and external. My domain is wo-lar.com Postfix and Dovecot are up and running, and I can send and receive

[pfx] Problems connecting to desktop client

2023-07-16 Thread Wolfgang Paul Rauchholz via Postfix-users
I run my home server under Rocky Linux 9. The server is modem / router and as such has two firewall interfaces; internal and external. My domain is wo-lar.com Postfix and Dovecot are up and running, and I can send and receive emails from CLI. But I cannot connect from desktop clients. I get the

[pfx] Re: search for compression switch?

2023-07-16 Thread Markus Schönhaber via Postfix-users
16.07.23, 13:06 +0200, Maurizio Caloro via Postfix-users: There's no point in postmap'ing cidr tables. http://www.postfix.org/POSTSCREEN_README.html - Permanent allow/denylist test Where does this document tell you to postmap a cidr table? Out of curiosity: what's your

[pfx] Re: Mail archival like with always_bcc, but different BCC destinations by virtual mailbox domains

2023-07-16 Thread Wietse Venema via Postfix-users
r.barclay--- via Postfix-users: > Hello, > > I have a Postfix installation for virtual mailboxes. It is the > mail server (inbound MX and outbound) for a few domains. The server > allows submission with SMTP AUTH (Dovecot SASL). > > At the moment I use always_bcc to "copy" / mirror any inbound

[pfx] Mail archival like with always_bcc, but different BCC destinations by virtual mailbox domains

2023-07-16 Thread r.barclay--- via Postfix-users
Hello, I have a Postfix installation for virtual mailboxes. It is the mail server (inbound MX and outbound) for a few domains. The server allows submission with SMTP AUTH (Dovecot SASL). At the moment I use always_bcc to "copy" / mirror any inbound AND outbound emails into an archive maildir.

[pfx] Re: search for compression switch?

2023-07-16 Thread Maurizio Caloro via Postfix-users
>There's no point in postmap'ing cidr tables. http://www.postfix.org/POSTSCREEN_README.html - Permanent allow/denylist test >Out of curiosity: what's your use case that requires checking the client's IP against a 47 MB collection of cidr patterns? Collection of Blacklisted-IP

[pfx] Re: search for compression switch?

2023-07-16 Thread Markus Schönhaber via Postfix-users
16.07.23, 10:05 +0200, Maurizio Caloro via Postfix-users: when i want to provide the file access via postmap, it inflates to double size. please is there a compression switch here? postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/whitelistCIDR+IP

[pfx] search for compression switch?

2023-07-16 Thread Maurizio Caloro via Postfix-users
when i want to provide the file access via postmap, it inflates to double size. please is there a compression switch here? postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/whitelistCIDR+IP cidr:/etc/postfix/access root postfix 47M Jul 16