[pfx] Re: Turn Off Verify Service?

2023-11-28 Thread duluxoz via Postfix-users
On 29/11/2023 15:38, Viktor Dukhovni via Postfix-users wrote: On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the master.cf

[pfx] Re: Turn Off Verify Service?

2023-11-28 Thread Viktor Dukhovni via Postfix-users
On Wed, Nov 29, 2023 at 03:00:24PM +1100, duluxoz via Postfix-users wrote: > I was reading an on-line guide about hardening Postfix and came across > a line that said that the Verify service could/should be turned off I > the master.cf file. > > Is this actually good advice, or is there some

[pfx] Turn Off Verify Service?

2023-11-28 Thread duluxoz via Postfix-users
Hey All, I was reading an on-line guide about hardening Postfix and came across a line that said that the Verify service could/should be turned off I the master.cf file. Is this actually good advice, or is there some sort of "gotcha" hiding in the background that'll bite us in the @rse?

[pfx] Re: What does postfix do with malformed messages?

2023-11-28 Thread Viktor Dukhovni via Postfix-users
On Tue, Nov 28, 2023 at 10:04:53PM -0500, John Levine via Postfix-users wrote: > If a malformed mail message shows up by SMTP (not local sendmail or > submission), will postfix generally try to clean it up or just > pass it along? You have to be a bit more specific. What does "malformed" mean?

[pfx] What does postfix do with malformed messages?

2023-11-28 Thread John Levine via Postfix-users
If a malformed mail message shows up by SMTP (not local sendmail or submission), will postfix generally try to clean it up or just pass it along? I see the cleanup program and all the options about when to run it and what to tell it to do, but in practice, will a typical system clean everything

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Matthew McGehrin via Postfix-users
Hello. I was able to replicate this error, however it's not a misconfiguration in Postfix, but rather a policy change by Google. I didn't notice the bounce message sooner, since it was routed to my SPAM folder on Gmail. If I use a GMAIL From: address and attempt to email another GMAIL

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Wietse Venema via Postfix-users
Linkcheck via Postfix-users: > On 28/11/2023 3:07 pm, Bill Cole via Postfix-users wrote: > > That's not a result, that's part of the DMARC policy > > Oh. Thank you for the correction, Bill. :) > > > That should not be enough... > > Something is wrong. I wonder if there is a DNS-resolving delay

[pfx] Re: Postfix authenticated sender and From: header verification

2023-11-28 Thread Wietse Venema via Postfix-users
Wietse Venema via Postfix-users: > Vijay S Sarvepalli via Postfix-users: > > Hello Postfix community, > > > > This may be a feature request. As far as I can tell it is currently > > not possible to verify if an authenticated user has sent email > > that uses a From: header (After DATA command)

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
On 28/11/2023 3:07 pm, Bill Cole via Postfix-users wrote: That's not a result, that's part of the DMARC policy Oh. Thank you for the correction, Bill. :) > That should not be enough... Something is wrong. I wonder if there is a DNS-resolving delay but I guess Im not going to easily discover

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-28 Thread Bill Cole via Postfix-users
On 2023-11-28 at 06:21:14 UTC-0500 (Tue, 28 Nov 2023 11:21:14 +) Linkcheck via Postfix-users is rumored to have said: If it's only "largely redundant" I would expect G to possibly ignore it but not fail on it. The expectations of others are known to be poor predictors of GMail behavior.

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Bill Cole via Postfix-users
On 2023-11-28 at 06:15:47 UTC-0500 (Tue, 28 Nov 2023 11:15:47 +) Linkcheck via Postfix-users is rumored to have said: The dmarc results are ambiguous: r That's not a result, that's part of the DMARC policy pass although dkim fails both tests. So, DKIM signatures are failing.

[pfx] Re: Postfix authenticated sender and From: header verification

2023-11-28 Thread Bill Cole via Postfix-users
On 2023-11-27 at 17:55:32 UTC-0500 (Mon, 27 Nov 2023 22:55:32 +) Vijay S Sarvepalli via Postfix-users is rumored to have said: Hello Postfix community, This may be a feature request. As far as I can tell it is currently not possible to verify if an authenticated user has sent email that

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
> ipv6 I have... inet_protocols = ipv4 ... with no AAA record But thanks anyway, Peter. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
If it's only "largely redundant" I would expect G to possibly ignore it but not fail on it. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Linkcheck via Postfix-users
The dmarc results are ambiguous: r pass although dkim fails both tests. = google.com noreply-dmarc-supp...@google.com https://support.google.com/a/answer/2466580 10845692433607357330 1701043200 1701129599

[pfx] Re: gmail-headers

2023-11-28 Thread Linkcheck via Postfix-users
Thanks for that, Matthew. So not all gmail ones fail. Hmm. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: gmail failing SPF/DKIM

2023-11-28 Thread Byung-Hee HWANG via Postfix-users
Wietse Venema via Postfix-users writes: > (...) > gmail rejects all messsages with that sender domain name? Some > messages? I have found that Gmail may treat some 'soft' errors (DNS > timeout) as 'hard' errors. My workaround is to retry deliveries. > > /etc/postfix/main.cf: > transport_maps