[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. On 14.11.23 18:13, Benny Pedersen via Postfix-users wrote: https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have Matus UHLAR - fantomas via Postfix-users skrev

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have This is a confusing statement. in what way ? amavisd-milter was already part of Dino's smtpd_milters. It is like you would have said: > http://www.postfix.org/. Just use that, it replaces the /etc you

[pfx] TAKE NOTE: "2 1 1" TLSA records vs. apparent change of Let's Encrypt default certificate chain

2023-11-14 Thread Viktor Dukhovni via Postfix-users
The DANE/DNSSEC survey () has seen a recent spike in the number of MX hosts whose "2 1 1" TLSA records no longer match their certificate chain. The records in question all shar the same digest value, for various TLSA base domains: _25._tcp.mx1.example. IN TLSA

[pfx] Re: FOLLOW-UP Re: Re: [ext] list.sys4.de fails with starttls

2023-11-14 Thread raf via Postfix-users
On Tue, Nov 14, 2023 at 03:56:25PM +0100, Patrick Ben Koetter via Postfix-users wrote: > * Viktor Dukhovni via Postfix-users : > > On Mon, Sep 25, 2023 at 04:24:55PM +0200, Patrick Ben Koetter via > > Postfix-users wrote: > > > > > > Do you have SMTP client TLS connection reuse enabled? If

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Benny Pedersen via Postfix-users
Matus UHLAR - fantomas via Postfix-users skrev den 2023-11-14 19:44: Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. On 14.11.23 18:13, Benny Pedersen via Postfix-users wrote: https://amavisd-milter.sourceforge.net/ just use that, it replace

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Benny Pedersen via Postfix-users
Damian via Postfix-users skrev den 2023-11-14 19:28: https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have This is a confusing statement. in what way ?, if you can configure opendmarc with postfix why is amavisd milter a problem ? amavisd only miss

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. On 14.11.23 18:13, Benny Pedersen via Postfix-users wrote: https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have it's the same as

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have This is a confusing statement. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: LDAP - how to design a virtual domain alias table?

2023-11-14 Thread Francis Augusto Medeiros-Logeay via Postfix-users
> On Nov 14, 2023, at 19:09, Viktor Dukhovni via Postfix-users > wrote: > > On Tue, Nov 14, 2023 at 06:32:55PM +0100, Francis Augusto Medeiros-Logeay via > Postfix-users wrote: > >> I figured out all the queries I need, except one. You see, right now, >> I use Postfixadmin and my query for

[pfx] Re: FOLLOW-UP Re: Re: [ext] list.sys4.de fails with starttls

2023-11-14 Thread Viktor Dukhovni via Postfix-users
On Tue, Nov 14, 2023 at 03:56:25PM +0100, Patrick Ben Koetter via Postfix-users wrote: > It turned out that RedHat's SELinux policy does not cover Postfix' tlsproxy > and whenever tlsproxy takes out to do what Postfix wants it to do SELinux will > interfere and prohibit it from doing that. That

[pfx] Re: LDAP - how to design a virtual domain alias table?

2023-11-14 Thread Viktor Dukhovni via Postfix-users
On Tue, Nov 14, 2023 at 06:32:55PM +0100, Francis Augusto Medeiros-Logeay via Postfix-users wrote: > I figured out all the queries I need, except one. You see, right now, > I use Postfixadmin and my query for virtual_mailbox_domains is like > this: > > query = SELECT goto > FROM alias,

[pfx] LDAP - how to design a virtual domain alias table?

2023-11-14 Thread Francis Augusto Medeiros-Logeay via Postfix-users
Hi, I have been using Postfix with MySQL for a few years now, but I want to move to LDAP (FreeIPA) to store my user’s data. I figured out all the queries I need, except one. You see, right now, I use Postfixadmin and my query for virtual_mailbox_domains is like this: query = SELECT goto FROM

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Benny Pedersen via Postfix-users
Dino Edwards via Postfix-users skrev den 2023-11-14 13:43: I would appreciate some assistance. https://amavisd-milter.sourceforge.net/ just use that, it replace all milters you have ___ Postfix-users mailing list -- postfix-users@postfix.org To

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
this does not make sense unless you use it somewhere. Can you elaborate? yes, the configuration variable you showed is not used by anything, unless you refer to it elsewhere in postfix configuration. what do logs say? On 14.11.23 11:16, Dino Edwards via Postfix-users wrote: Logs don't

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread mailmary--- via Postfix-users
it happens to me sometimes, I make changes to the postfix configuration and I forget to restart postfix for it to take effect (systemctl restart postfix opendkim opendmarc etc). Could it be that simple? On Tue, 14 Nov 2023 11:16:18 -0500 Dino Edwards via Postfix-users wrote: > Logs

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
By “getting skipped” I mean I have no logs of opendmarc doing anything. Do you have logs of opendmarc doing anything if you remove Amavis from smtpd_milters? I don’t understand how I would disable dkim in my content_filter policy. Dkim verification is either enabled or disabled in Amavis

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Dino Edwards via Postfix-users
-Original Message- From: Matus UHLAR - fantomas via Postfix-users Sent: Tuesday, November 14, 2023 8:04 AM To: postfix-users@postfix.org Subject: [pfx] Re: Postfix, Amavis DKIM and DMARC >this does not make sense unless you use it somewhere. Can you elaborate? >what do logs say?

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Dino Edwards via Postfix-users
By “getting skipped” I mean I have no logs of opendmarc doing anything. I don’t understand how I would disable dkim in my content_filter policy. Dkim verification is either enabled or disabled in Amavis unless I’m not understanding what you mean. From: Damian via Postfix-users Sent:

[pfx] Re: LMTP delivery failing for all backend during single backend failure

2023-11-14 Thread Wietse Venema via Postfix-users
seena--- via Postfix-users: > we have a single lmtp end point which is pointing load balancer . > > Lmtp endpoint ---> Load balance --> Dovecot director --> Dovecot > backend What is an endpoint: TCP socket, UNIX-domain socket, avian carriers, and how is Postfix configured to CONNECT TO that

[pfx] FOLLOW-UP Re: Re: [ext] list.sys4.de fails with starttls

2023-11-14 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Mon, Sep 25, 2023 at 04:24:55PM +0200, Patrick Ben Koetter via > Postfix-users wrote: > > > > Do you have SMTP client TLS connection reuse enabled? If so, TLS > > > connections are made via tlsproxy(8), with the smtp(8) client > > > unaware of any

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Damian via Postfix-users
I tried this config but sadly it doesn’t work, OpenDMARC (127.0.0.1:54321) gets skipped completely If "getting skipped" means that you don't see Authentication-Results for DMARC, I have a feeling that you didn't disable DKIM verification on your content_filter Interface Policy. Amavis will

[pfx] Re: [Thunderbird email client] Composing email: Clicking Options > Delivery Status Notification Does Not Work At All!!!

2023-11-14 Thread Yassine Chaouche via Postfix-users
Le 11/13/23 à 14:45, Stephen Satchell via Postfix-users a écrit : [...] 3.  Thunderbird sends out the delivery status return receipt request.  I must emphasize, REQUEST.  Mail recipients are free to ignore such requests.  For example, I have my all my instances of Thunderbird set to ignore

[pfx] Re: Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Matus UHLAR - fantomas via Postfix-users
On 14.11.23 07:43, Dino Edwards via Postfix-users wrote: I have been using OpenDKIM and OpenDMARC as smtpd_milters in Postfix and Amavis as a content filter. I'm trying to replace OpenDKIM with Amavis for DKIM verify and signing. The problem is that since Amavis is setup as an after-queue

[pfx] Postfix, Amavis DKIM and DMARC

2023-11-14 Thread Dino Edwards via Postfix-users
Hello, I have been using OpenDKIM and OpenDMARC as smtpd_milters in Postfix and Amavis as a content filter. I'm trying to replace OpenDKIM with Amavis for DKIM verify and signing. The problem is that since Amavis is setup as an after-queue content_filter and OpenDMARC is a pre-queue

[pfx] LMTP delivery failing for all backend during single backend failure

2023-11-14 Thread seena--- via Postfix-users
Hi,we have a single lmtp end point which is pointing load balancer .Lmtp endpoint  ---> Load balance --> Dovecot director --> Dovecot  backendIf any one of the backend failed we are seeing the delay in lmtp delivery to even the other backend which are healthy. How to solve this issue is this due