[pfx] Re: read postscreen database?

2023-10-31 Thread Phil Biggs via Postfix-users
Wednesday, November 1, 2023, 4:38:13 AM, Michael W. Lucas via Postfix-users wrote: > On Tue, Oct 31, 2023 at 12:56:23PM -0400, Wietse Venema via Postfix-users > wrote: >> Michael W. Lucas via Postfix-users: >> > Hi, >> > >> > Is there a way to dump the postscreen database, showing which >> >

[pfx] Re: forward IP source from a postfix relay to a postfix server

2023-10-31 Thread Wietse Venema via Postfix-users
testeur via Postfix-users: > Hi, > > Thx wietse for your help. > > I can understand now more precisely where to act. > > In the External_Postfix_relay, i use too amavis, spamassassin, > policy-spf. Then i ve to indicate the "smtp_send_xforward_command=yes" > option in the master.cf . But i

[pfx] Re: forward IP source from a postfix relay to a postfix server

2023-10-31 Thread testeur via Postfix-users
Hi, Thx wietse for your help. I can understand now more precisely where to act. In the External_Postfix_relay, i use too amavis, spamassassin, policy-spf. Then i ve to indicate the "smtp_send_xforward_command=yes" option in the master.cf . But i don't know in which command precisely do i

[pfx] Re: GMail is rejecting mail I forward

2023-10-31 Thread Doug Hardie via Postfix-users
> On Oct 31, 2023, at 03:37, Matus UHLAR - fantomas via Postfix-users > wrote: > >>> On Oct 29, 2023, at 10:59, Matus UHLAR - fantomas via Postfix-users >>> wrote: >>> I did SRS by using postsrs, see https://github.com/roehling/postsrsd >>> >>> This way, even forwarding using ~user/.forward

[pfx] Re: read postscreen database?

2023-10-31 Thread Jaroslaw Rafa via Postfix-users
Dnia 31.10.2023 o godz. 14:10:40 Wietse Venema via Postfix-users pisze: > > Or copy the file with a dumb program, and use postmnap to dump that > copy. Caution: the file contains holes and may grow when copied, > as holes are filled in with nulls. When GNU cp is used with --sparse=auto

[pfx] Re: read postscreen database?

2023-10-31 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > On Tue, Oct 31, 2023 at 01:38:13PM -0400, Michael W. Lucas via Postfix-users > wrote: > > > That's what I would have thought. I can run postmap -s and postmap -q > > on the usual db files in /etc/postfix just fine, but when I try it on > >

[pfx] Re: read postscreen database?

2023-10-31 Thread Viktor Dukhovni via Postfix-users
On Tue, Oct 31, 2023 at 01:38:13PM -0400, Michael W. Lucas via Postfix-users wrote: > That's what I would have thought. I can run postmap -s and postmap -q > on the usual db files in /etc/postfix just fine, but when I try it on > /var/db/postfix/postscreen_cache.db it just hangs: That's

[pfx] Re: read postscreen database?

2023-10-31 Thread Michael W. Lucas via Postfix-users
On Tue, Oct 31, 2023 at 12:56:23PM -0400, Wietse Venema via Postfix-users wrote: > Michael W. Lucas via Postfix-users: > > Hi, > > > > Is there a way to dump the postscreen database, showing which > > addresses are cached and why? > > > > Running postfix 3.8 on FreeBSD. > > postmap -s > > The

[pfx] Re: read postscreen database?

2023-10-31 Thread Wietse Venema via Postfix-users
Michael W. Lucas via Postfix-users: > Hi, > > Is there a way to dump the postscreen database, showing which > addresses are cached and why? > > Running postfix 3.8 on FreeBSD. postmap -s The database contains tuples with (client IP address, list of timestamps). Each timestamp indicates when

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-10-31 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > My advice by the way is to use dynamic not static linking. The latter > is not recommended, especially on Solaris. Dynamic linking is much > more adept at avoiding symbol conflics, and is better "supported" on > Solaris. > > make -f Makefile.init

[pfx] Re: read postscreen database?

2023-10-31 Thread Matus UHLAR - fantomas via Postfix-users
On 31.10.23 12:26, Michael W. Lucas via Postfix-users wrote: Is there a way to dump the postscreen database, showing which addresses are cached and why? I guess postmap -s could do that. http://www.postfix.org/postmap.1.html -- Matus UHLAR - fantomas, uh...@fantomas.sk ;

[pfx] read postscreen database?

2023-10-31 Thread Michael W. Lucas via Postfix-users
Hi, Is there a way to dump the postscreen database, showing which addresses are cached and why? Running postfix 3.8 on FreeBSD. Thanks, ==ml -- Michael W. Lucashttps://mwl.io/ author of: Absolute OpenBSD, SSH Mastery, git commit murder, Absolute FreeBSD, Butterfly Stomp Waltz,

[pfx] Re: submission behind haproxy, need to use a specific principal in keytab

2023-10-31 Thread Viktor Dukhovni via Postfix-users
On Tue, Oct 31, 2023 at 08:22:50AM -0400, Brendan Kearney via Postfix-users wrote: > > But since you mentioned haproxy and multiple nodes, you're still only > > working your way up to base-camp... > > > so, yes, full blown GSSAPI with all the fixin's. > The syncing of the keytab across the

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-10-31 Thread Viktor Dukhovni via Postfix-users
On Tue, Oct 31, 2023 at 09:39:36AM -0400, Wietse Venema via Postfix-users wrote: > > make makefiles \ > > CC="/usr/bin/gcc" \ > > CCARGS="-m64 -DHAS_DB -DNO_NIS -DUSE_TLS -I/usr/openssl/3/include" > > \ > > AUXLIBS="-R/usr/openssl/3/lib -L/usr/openssl/3/lib -ldb -lssl

[pfx] Re: Postfix 3.8.2 compile problem in Solaris 11.4

2023-10-31 Thread Wietse Venema via Postfix-users
Jaco Lesch via Postfix-users: > Hello > > Has anyone been able to compile Postfix 3.8 on Solaris 11.4 using GCC, > current "gcc version 12.2.0 (GCC)", with TLS support? > > Attempting to compile with the follow settings, with OpenSSL 3.0.8 > (Library: OpenSSL 3.0.8 7 Feb 2023): > make

[pfx] Re: submission behind haproxy, need to use a specific principal in keytab

2023-10-31 Thread Brendan Kearney via Postfix-users
On 10/31/23 1:40 AM, Viktor Dukhovni via Postfix-users wrote: on Mon, Oct 30, 2023 at 08:19:16PM -0400, Brendan Kearney via Postfix-users wrote: I am setting up submission behind haproxy and want to use kerberos authentication via SASL. Do you mean *actual* Kerberos authentication (as in the

[pfx] Re: GMail is rejecting mail I forward

2023-10-31 Thread Matus UHLAR - fantomas via Postfix-users
On Oct 29, 2023, at 10:59, Matus UHLAR - fantomas via Postfix-users wrote: I did SRS by using postsrs, see https://github.com/roehling/postsrsd This way, even forwarding using ~user/.forward will get SRS'ed. However, any mail from foreign domains without DKIM may still get rejected. On

[pfx] Re: Recommendation for dkim signing

2023-10-31 Thread Jens Hoffrichter via Postfix-users
Steffen, Because Google / Gmail / Google Workspace will put out DKIM requirements for every email from bulk senders from Feb 1st - not ARC requirements. From what I understand, DMARC alignment only happens on SPF and DKIM alignment, not on ARC alignment - and because of that, DKIM is relevant for

[pfx] Re: Recommendation for dkim signing

2023-10-31 Thread Jens Hoffrichter via Postfix-users
First of all, I didn't want to start a religious discussion here about different tools - for that I apologize! Viktor, thanks for the insight, that was exactly what I was looking for, pros and cons for the tools. We are running a big service in a very slow moving industry, and I need to

[pfx] Postfix 3.8.2 compile problem in Solaris 11.4

2023-10-31 Thread Jaco Lesch via Postfix-users
Hello Has anyone been able to compile Postfix 3.8 on Solaris 11.4 using GCC, current "gcc version 12.2.0 (GCC)", with TLS support? Attempting to compile with the follow settings, with OpenSSL 3.0.8 (Library: OpenSSL 3.0.8 7 Feb 2023): make makefiles \     CC="/usr/bin/gcc" \