[pfx] Re: logging username in a failed smtp attemps

2023-10-24 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > On Tue, Oct 24, 2023 at 12:52:37PM +0200, Paul Menzel via Postfix-users wrote: > > > Jozsef Kadlecsik submitted a patch, and it was accepted and is going to be > > available in the 3.9 release [1]. > > > > > 20231006 > > > > > > Cleanup: attempt to log the

[pfx] Re: logging username in a failed smtp attemps

2023-10-24 Thread Viktor Dukhovni via Postfix-users
On Tue, Oct 24, 2023 at 07:05:13PM +0200, Eric Doutreleau wrote: > then i have to check in the cyrus-sasl side Cyrus SASL is just a library. It isn't its job to make independent decisions about what to log. It may have a "debug level" knob that Postfix could tweak, but running in "debug mode"

[pfx] Re: logging username in a failed smtp attemps

2023-10-24 Thread Eric Doutreleau via Postfix-users
thanks for the reply then i have to check in the cyrus-sasl side Le 24/10/2023 à 19:01, Viktor Dukhovni via Postfix-users a écrit : On Tue, Oct 24, 2023 at 12:52:37PM +0200, Paul Menzel via Postfix-users wrote: Jozsef Kadlecsik submitted a patch, and it was accepted and is going to be

[pfx] Re: logging username in a failed smtp attemps

2023-10-24 Thread Viktor Dukhovni via Postfix-users
On Tue, Oct 24, 2023 at 12:52:37PM +0200, Paul Menzel via Postfix-users wrote: > Jozsef Kadlecsik submitted a patch, and it was accepted and is going to be > available in the 3.9 release [1]. > > > 20231006 > > > > Cleanup: attempt to log the SASL username after authentication > >

[pfx] Re: Wildcard sender_transport

2023-10-24 Thread Wietse Venema via Postfix-users
Mark Constable via Postfix-users: > Hi folks, I have googled for this but not found a definitive answer. > > I have two IPs for my postfix server and want to send out most emails > from one IP but a few via the alternate IP. I'm using this in main.cf... > >

[pfx] Re: dkim and submission and opendkim

2023-10-24 Thread Nick Edwards via Postfix-users
Hey, I'm fully aware DMARC does not sign,but thanks for the clarification on if I dont specify smtpd_milters in smtps or submission it's still implied from the main.cf entry, will use the logwhy advice in the morning, thanks heaps On Tue, Oct 24, 2023 at 7:46 PM Matus UHLAR - fantomas via

[pfx] Re: [CERT-Bund#2023092728001552] Vulnerability report regarding postfix and postfix-mta-sts-resolver

2023-10-24 Thread Wietse Venema via Postfix-users
I am the main Postfix author. At this time, there is no MTA-STS support in the software that is distributed by the Postfix project. The postfix-mta-sts-resolver software is a third-party extension that is developed and maintained separately from Postfix. I suggest that you contact their authors

[pfx] Re: logging username in a failed smtp attemps

2023-10-24 Thread Paul Menzel via Postfix-users
Dear Eric, Am 24.10.23 um 11:32 schrieb Eric Doutreleau via Postfix-users: i m using on my server postfix-3.5.8 and cyrus-sasl-2.1.27 I m using fail2ban too to prevent brute force attack. my problem is that when a connection failed because of wrong password i don't know what account is

[pfx] Re: logging username in a failed smtp attemps

2023-10-24 Thread Jaroslaw Rafa via Postfix-users
Dnia 24.10.2023 o godz. 11:32:58 Eric Doutreleau via Postfix-users pisze: > Oct  5 11:07:52 hermes postfix/smtpd[277411]: warning: > unknown[122.179.129.110]: SASL LOGIN authentication failed: > authentication failure > > There s no username logged. > > Is there a way to log this username?

[pfx] Re: Wildcard sender_transport

2023-10-24 Thread Matus UHLAR - fantomas via Postfix-users
On 24.10.23 14:00, Mark Constable via Postfix-users wrote: Hi folks, I have googled for this but not found a definitive answer. I have two IPs for my postfix server and want to send out most emails from one IP but a few via the alternate IP. I'm using this in main.cf...

[pfx] Re: dkim and submission and opendkim

2023-10-24 Thread Matus UHLAR - fantomas via Postfix-users
On 24.10.23 14:35, Nick Edwards via Postfix-users wrote: I need a refresher hand with DKIM, we have in main.cf smtpd_milters = inet:127.0.0.1:8891,inet:127.0.0.1:8892 non_smtpd_milters = $smtpd_milters milter_default_action = accept spfpolicy_time_limit = 3600 milter_protocol = 6 DKIM is 8891,

[pfx] logging username in a failed smtp attemps

2023-10-24 Thread Eric Doutreleau via Postfix-users
Hi i m using on my server postfix-3.5.8 and cyrus-sasl-2.1.27 I m using fail2ban too to prevent brute force attack. my problem is that when a connection failed because of wrong password i don't know what account is targeted the line is Oct  5 11:07:52 hermes postfix/smtpd[277411]: warning: