[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Gary R. Schmidt via Postfix-users
On 19/06/2024 18:19, Bjoern Franke via Postfix-users wrote: Hi, Personally, I find this type of one-way communication annoying and impolite. The same goes for setting Reply-To to your personal email address after asking for help on a public mailing list. Like you did yourself? From: Ralph

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Bjoern Franke via Postfix-users
Hi, Personally, I find this type of one-way communication annoying and impolite. The same goes for setting Reply-To to your personal email address after asking for help on a public mailing list. Like you did yourself? From: Ralph Seichter via Postfix-users Reply-To: Ralph Seichter

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Peter via Postfix-users
On 19/06/24 18:51, Tan Mientras via Postfix-users wrote: Hi *Trying to setup email REJECT when users try to send to a no-reply email.* There is no such thing as a no-reply email, there is no part of the email specification that allows a message to be marked as unable to be replied to. Many

[pfx] Re: REJECT sending mails to no-reply accounts

2024-06-19 Thread Ralph Seichter via Postfix-users
* Tan Mientras via Postfix-users: > Trying to setup email REJECT when users try to send to a no-reply > email. Personally, I find this type of one-way communication annoying and impolite. The same goes for setting Reply-To to your personal email address after asking for help on a public mailing

[pfx] REJECT sending mails to no-reply accounts

2024-06-19 Thread Tan Mientras via Postfix-users
Hi *Trying to setup email REJECT when users try to send to a no-reply email.* AFAIK, this should be configuren on smtpd_recipient_restrictions using check_recipient_access. Please, let me know if I'm wrong. It's not working, so maybe it's because I don't know if rules are applied on first match

[pfx] Re: Best practices?

2024-06-19 Thread Gilgongo via Postfix-users
On Wed, 19 Jun 2024 at 03:57, Viktor Dukhovni via Postfix-users < postfix-users@postfix.org> wrote: > On Tue, Jun 18, 2024 at 04:15:33PM -0500, Cody Millard via Postfix-users > wrote: > > > The defaults for those settings, as far as postfix is concerned, are as > > follows: > > > >

[pfx] Re: Best practices?

2024-06-18 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 18, 2024 at 10:02:20PM -0500, Cody Millard via Postfix-users wrote: > as for why I set these explicitly, I figured that more random bits means > more secure. > > tls_random_bytes = 64 > tls_daemon_random_bytes = 64 No need to clutter the configuration with overzealous low-level

[pfx] Re: Best practices?

2024-06-18 Thread Cody Millard via Postfix-users
Hi Viktor. Please check my original post. Your comments are on the postfix defaults and not my current settings. as for why I set these explicitly, I figured that more random bits means more secure. tls_random_bytes = 64 tls_daemon_random_bytes = 64 On 6/18/2024 9:56 PM, Viktor Dukhovni

[pfx] Re: Best practices?

2024-06-18 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 18, 2024 at 04:15:33PM -0500, Cody Millard via Postfix-users wrote: > The defaults for those settings, as far as postfix is concerned, are as > follows: > > smtpd_tls_auth_only = no Why? Surely, "yes" is the better choice... > smtpd_tls_security_level = Why empty? Surely "may" is

[pfx] Re: Best practices?

2024-06-18 Thread Jeff Peng via Postfix-users
On 2024-06-19 05:15, Cody Millard via Postfix-users wrote: I am not sure what SRS or AUC are right now. I saw Dr. Lindenberg has a similar test suite like your site. https://blog.lindenberg.one/EmailSecurityTest ___ Postfix-users mailing list --

[pfx] Re: Rate limiting a group of domains

2024-06-18 Thread Wietse Venema via Postfix-users
785 243 via Postfix-users: > I want to implement rate limiting based on the target server rather > than by recipient domain. Specifically, I want to rate limit email > sent to domains like yahoo.com, ymail.com, aol.com, myyahoo.com, and > verizon.net as a group, since these domains appears to be

[pfx] Rate limiting a group of domains

2024-06-18 Thread 785 243 via Postfix-users
I want to implement rate limiting based on the target server rather than by recipient domain. Specifically, I want to rate limit email sent to domains like yahoo.com, ymail.com, aol.com, myyahoo.com, and verizon.net as a group, since these domains appears to be handled by the same servers. This

[pfx] Re: Best practices?

2024-06-18 Thread Cody Millard via Postfix-users
I am not sure what SRS or AUC are right now. The defaults for those settings, as far as postfix is concerned, are as follows: |smtpd_sasl_auth_enable = no smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_tls_auth_only = no

[pfx] Re: Resetting the discussion

2024-06-18 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > > On Jun 18, 2024, at 3:33?PM, Wietse Venema via Postfix-users > > wrote: > > > > Paul Schmehl via Postfix-users: > >> [18-Jun-2024 14:53:32 -0500]: PHP Error: SMTP server does not > >> support authentication (POST > >>

[pfx] Re: Resetting the discussion

2024-06-18 Thread Paul Schmehl via Postfix-users
> On Jun 18, 2024, at 3:33 PM, Wietse Venema via Postfix-users > wrote: > > Paul Schmehl via Postfix-users: >> [18-Jun-2024 14:53:32 -0500]: PHP Error: SMTP server does not >> support authentication (POST >> /webmail/?_task=mail&_unlock=loading1718740412272&_framed=1&_action=send) > >

[pfx] Re: Resetting the discussion

2024-06-18 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > [18-Jun-2024 14:53:32 -0500]: PHP Error: SMTP server does not > support authentication (POST > /webmail/?_task=mail&_unlock=loading1718740412272&_framed=1&_action=send) Indeed, you have smtps inet n - n - - smtpd -o

[pfx] Re: Resetting the discussion

2024-06-18 Thread Paul Schmehl via Postfix-users
> On Jun 18, 2024, at 2:45 PM, Noel Jones via Postfix-users > wrote: > > >> On Jun 18, 2024, at 2:30 PM, Paul Schmehl via Postfix-users >> wrote: >> >> So, here is what I now have configued in roundcube: >> >> $config['smtp_host'] = 'tls://mail.stovebolt.com:465'; >>

[pfx] Re: Resetting the discussion

2024-06-18 Thread Paul Schmehl via Postfix-users
> On Jun 18, 2024, at 2:45 PM, Noel Jones via Postfix-users > wrote: > > >> On Jun 18, 2024, at 2:30 PM, Paul Schmehl via Postfix-users >> wrote: >> >> So, here is what I now have configued in roundcube: >> >> $config['smtp_host'] = 'tls://mail.stovebolt.com:465'; >>

[pfx] Re: Resetting the discussion

2024-06-18 Thread Wietse Venema via Postfix-users
What about providing Postfix logs? As long as you can't provide the Postfix perspective, finding help here will be difficult. Wietse ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to

[pfx] Re: Resetting the discussion

2024-06-18 Thread Noel Jones via Postfix-users
> On Jun 18, 2024, at 2:30 PM, Paul Schmehl via Postfix-users > wrote: > > So, here is what I now have configued in roundcube: > > $config['smtp_host'] = 'tls://mail.stovebolt.com:465'; > $config['smtp_auth_type'] = 'PLAIN'; > $config['smtp_user'] = '%u'; > $config['smtp_pass'] = '%p’; >

[pfx] Resetting the discussion

2024-06-18 Thread Paul Schmehl via Postfix-users
I’ve posted several times about the problems that I’m having getting roundcube to send mail through postfix. I think you can throw out all the previous posts and start anew. In one exchange, Victor pointed out that I did not have -o smtpd_tls_wrappermode=yes set in master. (It was commented

[pfx] always_add_missing_headers / local_header_rewrite_clients

2024-06-18 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > 465inet n - n - - smtpd > -o smtpd_tls_wrappermode=yes ... > -o smtpd_milters=$mua_milters > -o always_add_missing_headers=yes Nit: always_add_missing_headers is a cleanup(8) daemon feature.

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Benny Pedersen via Postfix-users
Viktor Dukhovni via Postfix-users skrev den 2024-06-18 15:27: On Tue, Jun 18, 2024 at 03:20:46PM +0200, Benny Pedersen via Postfix-users wrote: xpoint@tux ~ $ posttls-finger -w -lsecure -C "www.stovebolt.com:465" "www.stovebolt.com" posttls-finger: Connected to

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Benny Pedersen via Postfix-users
Paul Schmehl via Postfix-users skrev den 2024-06-18 08:04: posttls-finger: server certificate verification failed for mail.stovebolt.com[108.174.193.29]:465: num=62:Hostname mismatch This looks like it’s working correctly now, right? hostname mismatch means still need to reissue new cert

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 18, 2024 at 03:20:46PM +0200, Benny Pedersen via Postfix-users wrote: > xpoint@tux ~ $ posttls-finger -w -lsecure -C "www.stovebolt.com:465" > "www.stovebolt.com" > posttls-finger: Connected to www.stovebolt.com[108.174.193.28]:465 > posttls-finger: server certificate verification

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Benny Pedersen via Postfix-users
Paul Schmehl via Postfix-users skrev den 2024-06-18 06:39: On Jun 17, 2024, at 10:14 PM, Cowbay via Postfix-users wrote: On 2024/6/18 10:43, Paul Schmehl via Postfix-users wrote: The problem is neither tls nor ssl worked. No matter what config I used, roundcube would always through an error.

[pfx] Re: Help with reject_sender_login_mismatch

2024-06-18 Thread Benny Pedersen via Postfix-users
Jeff Peng via Postfix-users skrev den 2024-06-18 09:30: smtps inet n - y - - smtpd -o smtpd_sender_restrictions=permit_sasl_authenticated,reject_sender_login_mismatch,reject order matters, first wins -o

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Benny Pedersen via Postfix-users
Peter via Postfix-users skrev den 2024-06-18 04:08: On 18/06/24 13:00, Jeff Peng via Postfix-users wrote: On 2024-06-18 07:30, Peter via Postfix-users wrote: On 17/06/2024 17:28, Paul Schmehl wrote: though it's a big offtopic, may I ask that, for roundcube, how to stop users adding their

[pfx] Re: Help with reject_sender_login_mismatch

2024-06-18 Thread Jeff Peng via Postfix-users
Thanks for all the kind helps. I have resolved the issue and wrote a note for it. https://notes.postno.de/how-to-use-reject-sender-login-mismatch-in-postfix.html if you find any issue in this note, please let me know. Thanks. Oh, sorry I didn't see you weren't using

[pfx] Re: Help with reject_sender_login_mismatch

2024-06-18 Thread Gilgongo via Postfix-users
On Tue, 18 Jun 2024 at 08:55, Jeff Peng wrote: > I did have tried this line (with just one value > reject_sender_login_mismatch). > But then I even can't send mail from the valid user (the user who login > into RC). > Oh, sorry I didn't see you weren't using smtpd_sender_login_maps. I'm pretty

[pfx] Re: Help with reject_sender_login_mismatch

2024-06-18 Thread Gilgongo via Postfix-users
On Tue, 18 Jun 2024 at 08:31, Jeff Peng via Postfix-users < postfix-users@postfix.org> wrote: > Hello, > > I have this section in master.cf: > > smtps inet n - y - - smtpd >-o syslog_name=postfix/smtps >-o smtpd_tls_wrappermode=yes >-o

[pfx] Re: Help with reject_sender_login_mismatch

2024-06-18 Thread Jeff Peng via Postfix-users
On 2024-06-18 15:51, Gilgongo wrote: On Tue, 18 Jun 2024 at 08:31, Jeff Peng via Postfix-users < postfix-users@postfix.org> wrote: Hello, I have this section in master.cf: smtps inet n - y - - smtpd -o syslog_name=postfix/smtps -o

[pfx] Help with reject_sender_login_mismatch

2024-06-18 Thread Jeff Peng via Postfix-users
Hello, I have this section in master.cf: smtps inet n - y - - smtpd -o syslog_name=postfix/smtps -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_sender_restrictions=permit_sasl_authenticated,reject_sender_login_mismatch,reject

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Paul Schmehl via Postfix-users
> On Jun 18, 2024, at 1:34 AM, Viktor Dukhovni via Postfix-users > wrote: > > On Tue, Jun 18, 2024 at 01:04:25AM -0500, Paul Schmehl via Postfix-users > wrote: > >> # posttls-finger -w -lsecure -C "mail.stovebolt.com:465" "www.stovebolt.com" > > Why the "www.stovebolt.com"??? What hostname

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 18, 2024 at 01:04:25AM -0500, Paul Schmehl via Postfix-users wrote: > >> posttls-finger: warning: TLS library problem: error:1408F10B:SSL > >> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:332: > > > > Your port 465 "smtps" service is misconfigured, it is

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-18 Thread Paul Schmehl via Postfix-users
> On Jun 18, 2024, at 12:38 AM, Viktor Dukhovni via Postfix-users > wrote: > > On Mon, Jun 17, 2024 at 11:39:27PM -0500, Paul Schmehl via Postfix-users > wrote: > >> That might have uncovered a problem. >> >> # posttls-finger -w -lsecure -C "www.stovebolt.com:465" “www.stovebolt.com" >> >>

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Viktor Dukhovni via Postfix-users
On Mon, Jun 17, 2024 at 11:39:27PM -0500, Paul Schmehl via Postfix-users wrote: > That might have uncovered a problem. > > # posttls-finger -w -lsecure -C "www.stovebolt.com:465" “www.stovebolt.com" > > posttls-finger: Connected to www.stovebolt.com[108.174.193.28]:465 > posttls-finger:

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Paul Schmehl via Postfix-users
> On Jun 17, 2024, at 10:14 PM, Cowbay via Postfix-users > wrote: > > On 2024/6/18 10:43, Paul Schmehl via Postfix-users wrote: > The problem is neither tls nor ssl worked. No matter what config I used, > roundcube would always through an error. If I used $config['smtp_host'] = >

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Jeff Peng via Postfix-users
On 2024-06-18 10:40, postfix--- via Postfix-users wrote: To be honest, you still likely want authentication. Keep in mind that you don't need to authenticate as a single user for roundcube but rather you can have roundcube pass authentication through from it's own user login and therefore

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Gary R. Schmidt via Postfix-users
On 18/06/2024 12:43, Paul Schmehl via Postfix-users wrote: [SNIP] roundcube would always through an error. If I used $config['smtp_host'] = ‘tls;//www.stovebolt.com'; or I used $config['smtp_host'] = ’ssl;//www.stovebolt.com'; roundcube would error out saying it couldn’t I hope the

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Cowbay via Postfix-users
On 2024/6/18 10:43, Paul Schmehl via Postfix-users wrote: On Jun 17, 2024, at 6:30 PM, Peter via Postfix-users wrote: On 17/06/2024 17:28, Paul Schmehl wrote: How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server.

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
On 18/06/24 14:43, Paul Schmehl via Postfix-users wrote: If I used $config['smtp_host'] = ‘tls;//www.stovebolt.com'; or I used $config['smtp_host'] = ’ssl;//www.stovebolt.com'; roundcube would error out saying it couldn’t connect to the server. It's "tls://..." or "ssl://" with a colon (:)

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Paul Schmehl via Postfix-users
> On Jun 17, 2024, at 6:30 PM, Peter via Postfix-users > wrote: > >> On 17/06/2024 17:28, Paul Schmehl wrote: >>> How do you set up roundcube to not use authentication? I really don’t need >>> it since it’s on the same machine as the mail server. What config options >>> do I need to use? > >

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread postfix--- via Postfix-users
To be honest, you still likely want authentication. Keep in mind that you don't need to authenticate as a single user for roundcube but rather you can have roundcube pass authentication through from it's own user login and therefore support multiple users while also allowing postfix to

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
On 18/06/24 13:00, Jeff Peng via Postfix-users wrote: On 2024-06-18 07:30, Peter via Postfix-users wrote: On 17/06/2024 17:28, Paul Schmehl wrote: How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server. What config

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Jeff Peng via Postfix-users
On 2024-06-18 07:30, Peter via Postfix-users wrote: On 17/06/2024 17:28, Paul Schmehl wrote: How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server. What config options do I need to use? To be honest, you still likely

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
On 17/06/2024 17:28, Paul Schmehl wrote: How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server. What config options do I need to use? To be honest, you still likely want authentication. Keep in mind that you don't

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Peter via Postfix-users
On 17/06/24 17:16, Peter via Postfix-users wrote: Without seeing logs and actual config settings I can only guess.  One thing to keep in mind is that there's two types of TLS connection, implicit TLS and explicit TLS.  Implicit TLS connects to a port dedicated to TLS connections, for

[pfx] Re: Do I have sals authentication properly configured?

2024-06-17 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > Both apps on on the same server and *should* be using the same clock. > > > I don't want to waste any more of your time. It?s working, so I?m happy. You can make your life easier by fixing the program that is losing Postfix logging. systemd has been implicated

[pfx] Re: Do I have sals authentication properly configured?

2024-06-17 Thread Paul Schmehl via Postfix-users
> On Jun 17, 2024, at 4:27 PM, Wietse Venema via Postfix-users > wrote: > > Paul Schmehl via Postfix-users: > - Did the client send starttls? That is logged in the "disconnect > from" line. > I don't see anything in the postfix logs (/var/log/maillog) from

[pfx] Re: Do I have sals authentication properly configured?

2024-06-17 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > >>> - Did the client send starttls? That is logged in the "disconnect > >>> from" line. > >>> > >> > >> I don't see anything in the postfix logs (/var/log/maillog) from > >> roundcube. I guess I need to enable debug. > > > > No debug logging needed. This

[pfx] Re: Do I have sals authentication properly configured?

2024-06-17 Thread Paul Schmehl via Postfix-users
> On Jun 17, 2024, at 7:12 AM, Wietse Venema via Postfix-users > wrote: > > Paul Schmehl via Postfix-users: >>> On Jun 16, 2024, at 5:02?PM, Wietse Venema via Postfix-users >>> wrote: >>> >>> Paul Schmehl via Postfix-users: I?m trying to sort out a problem with Roundcube failing to send

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > > On Jun 17, 2024, at 4:43?AM, Jaroslaw Rafa via Postfix-users > > wrote: > > > > Dnia 16.06.2024 o godz. 20:54:34 Paul Schmehl via Postfix-users pisze: > >> > >> The odd thing is, I don't see any connection attempts at all in the mail > >> logs. > > > > May

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Paul Schmehl via Postfix-users
> On Jun 17, 2024, at 4:43 AM, Jaroslaw Rafa via Postfix-users > wrote: > > Dnia 16.06.2024 o godz. 20:54:34 Paul Schmehl via Postfix-users pisze: >> >> The odd thing is, I don’t see any connection attempts at all in the mail >> logs. > > May seem a strange question, but it's always first

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Benny Pedersen via Postfix-users
Jeff Peng via Postfix-users skrev den 2024-06-17 14:18: $config['imap_host'] = 'ssl://localhost:993'; then RC will connect to server failed due to mis-configured certs. $config['imap_conn_options'] = array ( 'ssl' => array ( 'verify_peer' => false, 'verify_peer_name' => false, ), ); but

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Bill Cole via Postfix-users
On 2024-06-16 at 21:54:34 UTC-0400 (Sun, 16 Jun 2024 20:54:34 -0500) Paul Schmehl via Postfix-users is rumored to have said: I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com PIPELINING SIZE 9 VRFY ETRN

[pfx] Re: End of Data from client or postfix

2024-06-17 Thread Wietse Venema via Postfix-users
a49093915 via Postfix-users: > Thank you very much for your detailed response. > > So as far as I understand Postfix can receive "." or > "." or even other "End of DATA's", > but will always strip them and add its own "." "End of DATA" > for outgoing SMTP. > (Additionally it also strips and

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Jeff Peng via Postfix-users
I am also using roundcube + postfix + dovecot. the host configuration for roundcube should be FQDN. for example, mine is: $config['imap_host'] = 'ssl://mail.tls-mail.com:993'; $config['smtp_host'] = 'ssl://mail.tls-mail.com:465'; you can't use something like: $config['imap_host'] =

[pfx] Re: Do I have sals authentication properly configured?

2024-06-17 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > > On Jun 16, 2024, at 5:02?PM, Wietse Venema via Postfix-users > > wrote: > > > > Paul Schmehl via Postfix-users: > >> I?m trying to sort out a problem with Roundcube failing to send email with > >> an error message that says SMTP Error(): authentication

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Gary R. Schmidt via Postfix-users
On 17/06/2024 17:28, Paul Schmehl wrote: [SNIP] How do you set up roundcube to not use authentication? I really don’t need it since it’s on the same machine as the mail server. What config options do I need to use? That's how it works out of the box, or was when I set up up, just take the

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Jaroslaw Rafa via Postfix-users
Dnia 16.06.2024 o godz. 20:54:34 Paul Schmehl via Postfix-users pisze: > > The odd thing is, I don’t see any connection attempts at all in the mail > logs. May seem a strange question, but it's always first thing I check in case I don't see any connection attempt in logs: Is your Roundcube

[pfx] Re: Do I have sals authentication properly configured?

2024-06-17 Thread Daryl via Postfix-users
Does your roundcube config.inc.php have the smtp_host as 'tls://mail.stovebolt.com:587'; ? It will need the FQDN and not localhost hence failing authentication??? I know somethig similar happened to me a while back Daryl On 24-06-16 16:00:35, Paul Schmehl via Postfix-users wrote: >I'm

[pfx] Re: End of Data from client or postfix

2024-06-17 Thread a49093915 via Postfix-users
> Line endings depends on context. UNIX files and commands use , > > whereas SMTP and LMTP use . Instead of picking a specific > > line ending, Postfix uses none. Instead it stores a length and text. > > When delivering mail, Postfix ADDS the line endings that are appropriate. > > - The

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Benny Pedersen via Postfix-users
Paul Schmehl via Postfix-users skrev den 2024-06-17 06:49: I’m hoping I have solved the problem. I have roundcube sending mail on port 25 with no auth (all daemons are running on the same server), and it is sending mail. Gmail rejects it, but I’ve altered my spf record to include localhost. I

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Paul Schmehl via Postfix-users
> On Jun 17, 2024, at 12:16 AM, Peter via Postfix-users > wrote: > > On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: >> On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users >> wrote: >>> >>> >>> It's likely that roundcube is not configured for TLS and postfix is (as it >>>

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-17 Thread Alexander Leidinger via Postfix-users
Am 2024-06-17 06:49, schrieb Paul Schmehl via Postfix-users: On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users wrote: It's likely that roundcube is not configured for TLS and postfix is (as it should be) configured not to offer AUTH until TLS is established. Yes, postfix is

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Gary R. Schmidt via Postfix-users
On 17/06/2024 11:54, Paul Schmehl via Postfix-users wrote: I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com [SNIP] /var/www/html/webmail/program/lib/Roundcube/rcube.php on line 1794 (POST

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: Gmail rejects it, but I’ve altered my spf record to include localhost. I hope once that propagates my problems with be solved. This will not do anythi9ng for you, you cannot put localhost in an SPF record. There are many reasons why

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 16:49, Paul Schmehl via Postfix-users wrote: On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users wrote: It's likely that roundcube is not configured for TLS and postfix is (as it should be) configured not to offer AUTH until TLS is established. Yes, postfix is configured to

[pfx] Re: questions around the configuration

2024-06-16 Thread Jeff Peng via Postfix-users
Got it. Thanks Victor very much. On 2024-06-17 12:18, Viktor Dukhovni via Postfix-users wrote: On Mon, Jun 17, 2024 at 09:54:01AM +0800, Jeff Peng via Postfix-users wrote: smtp_use_tls = yes Obsolete, ignored when the preferred form below is specified. smtp_tls_security_level = may

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Paul Schmehl via Postfix-users
On Jun 16, 2024, at 10:30 PM, Peter via Postfix-users wrote: > > > It's likely that roundcube is not configured for TLS and postfix is (as it > should be) configured not to offer AUTH until TLS is established. > Yes, postfix is configured to use TLS, and no roundcube is not. When I

[pfx] Re: questions around the configuration

2024-06-16 Thread Viktor Dukhovni via Postfix-users
On Mon, Jun 17, 2024 at 09:54:01AM +0800, Jeff Peng via Postfix-users wrote: > smtp_use_tls = yes Obsolete, ignored when the preferred form below is specified. > smtp_tls_security_level = may Keep this one. > smtpd_use_tls = yes Obsolete, ignored when the preferred form below is specified.

[pfx] Re: Troubleshooting roundcube connections to postfix

2024-06-16 Thread Peter via Postfix-users
On 17/06/24 13:54, Paul Schmehl via Postfix-users wrote: I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com PIPELINING SIZE 9 VRFY ETRN STARTTLS ENHANCEDSTATUSCODES 8BITMIME DSN SMTPUTF8 CHUNKING (Code:

[pfx] Troubleshooting roundcube connections to postfix

2024-06-16 Thread Paul Schmehl via Postfix-users
I’m seeing this error in the roundcube logs: [16-Jun-2024 20:28:58 -0500]: SMTP Error: Authentication failure: mail.stovebolt.com PIPELINING SIZE 9 VRFY ETRN STARTTLS ENHANCEDSTATUSCODES 8BITMIME DSN SMTPUTF8 CHUNKING (Code: 250) in /var/www/html/webmail/program/lib/Roundcube/rcube.php

[pfx] questions around the configuration

2024-06-16 Thread Jeff Peng via Postfix-users
Hello experts, for my these settings, smtp_use_tls = yes smtp_tls_security_level = may smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_use_tls = yes smtpd_tls_security_level = may smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache my questions

[pfx] Re: Do I have sals authentication properly configured?

2024-06-16 Thread Jeff Peng via Postfix-users
- Did the client connect to port 25 or 578? 578 isn't the port 587? :) ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

[pfx] Re: Best practices?

2024-06-16 Thread Jeff Peng via Postfix-users
# SMTPd SERVER TLS/SSL Settings tls_daemon_random_bytes = 64 tls_random_bytes = 64 smtpd_tls_cert_file = /etc/letsencrypt/live/email.broker/fullchain.pem smtpd_tls_key_file = /etc/letsencrypt/live/email.broker/privkey.pem smtpd_tls_security_level = may smtpd_tls_auth_only = yes

[pfx] Re: Do I have sals authentication properly configured?

2024-06-16 Thread Paul Schmehl via Postfix-users
> On Jun 16, 2024, at 5:02 PM, Wietse Venema via Postfix-users > wrote: > > Paul Schmehl via Postfix-users: >> I?m trying to sort out a problem with Roundcube failing to send email with >> an error message that says SMTP Error(): authentication failed. In the >> roundcube error log I find

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread Viktor Dukhovni via Postfix-users
On Sun, Jun 16, 2024 at 01:41:44PM -0400, John Levine via Postfix-users wrote: > Turns out it's more complicated than I thought, they want a restricted > sending address to be able to send only to particular recipients. > Suggestions? If the allowed recipients are the same for all restricted

[pfx] Best practices?

2024-06-16 Thread Cody Millard via Postfix-users
Hi list. I am a novice postmaster that started a email server last year. There is nothing wrong that I can currently tell but I am the only user and there is only so much that I can test. Here are my config files, I am curious to know what seasoned postmasters think.

[pfx] Re: Do I have sals authentication properly configured?

2024-06-16 Thread Wietse Venema via Postfix-users
Paul Schmehl via Postfix-users: > I?m trying to sort out a problem with Roundcube failing to send email with an > error message that says SMTP Error(): authentication failed. In the roundcube > error log I find this: > > [16-Jun-2024 13:58:24 -0500]: <5s9tomcd> PHP Error: SMTP server does not

[pfx] Do I have sals authentication properly configured?

2024-06-16 Thread Paul Schmehl via Postfix-users
I’m trying to sort out a problem with Roundcube failing to send email with an error message that says SMTP Error(): authentication failed. In the roundcube error log I find this: [16-Jun-2024 13:58:24 -0500]: <5s9tomcd> PHP Error: SMTP server does not support authentication (POST

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread Wietse Venema via Postfix-users
John Levine via Postfix-users: > Turns out it's more complicated than I thought, they want a restricted > sending address to be able to send only to particular recipients. > Suggestions? Here is a non-intuitive solution, based on https://www.postfix.org/RESTRICTION_CLASS_README.html

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread Matus UHLAR - fantomas via Postfix-users
It appears that Matus UHLAR - fantomas via Postfix-users said: If one of recipients wants to accept mail from a sender while another recipient doesn't, teoretically you can reject that sender at recipient level, but that complicates configuration (but it's possible). This would mean that for

[pfx] Re: Fastest way to mostly reject unwanted sender

2024-06-16 Thread John Levine via Postfix-users
It appears that Matus UHLAR - fantomas via Postfix-users said: >If one of recipients wants to accept mail from a sender while another >recipient doesn't, teoretically you can reject that sender at recipient >level, but that complicates configuration (but it's possible). >This would mean that

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Noel Jones via Postfix-users
On 6/16/2024 9:06 AM, Wietse Venema via Postfix-users wrote: # Don't indent text between IF and ENDIF. IF /^MAIL FROM:/ /^MAIL FROM:/ QUIT /^MAIL FROM:/ QUIT ... ENDIF Seems like if this is talking to a real MTA this would be a connection amplifier. The sending MTA would see this as a

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > On Sun, Jun 16, 2024 at 10:06:41AM -0400, Wietse Venema via Postfix-users > wrote: > > John R. Levine via Postfix-users: > > > On Sat, 15 Jun 2024, Jeff Peng wrote: > > > > I think postscreen can block them easily. > > > > > > I'm looking at the postscreen

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Viktor Dukhovni via Postfix-users
On Sun, Jun 16, 2024 at 10:06:41AM -0400, Wietse Venema via Postfix-users wrote: > John R. Levine via Postfix-users: > > On Sat, 15 Jun 2024, Jeff Peng wrote: > > > I think postscreen can block them easily. > > > > I'm looking at the postscreen man page and I don't see anything about mail > >

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Wietse Venema via Postfix-users
John R. Levine via Postfix-users: > On Sat, 15 Jun 2024, Jeff Peng wrote: > > I think postscreen can block them easily. > > I'm looking at the postscreen man page and I don't see anything about mail > addresses. Am I missing something? That is a bad suggestion, please ignore. > I do see

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread Benny Pedersen via Postfix-users
John R. Levine via Postfix-users skrev den 2024-06-16 15:18: I'm looking at the postscreen man page and I don't see anything about mail addresses. Am I missing something? postscreen is not smtpd I do see smtpd_command_filter. How about if I map MAIL FROM: to QUIT? so this needs smtpd

[pfx] Re: Fastest way to reject unwanted sender

2024-06-16 Thread John R. Levine via Postfix-users
On Sat, 15 Jun 2024, Jeff Peng wrote: I think postscreen can block them easily. I'm looking at the postscreen man page and I don't see anything about mail addresses. Am I missing something? I do see smtpd_command_filter. How about if I map MAIL FROM: to QUIT? Regards, John Levine,

[pfx] Re: distributed email system

2024-06-15 Thread Wietse Venema via Postfix-users
Jeff Peng via Postfix-users: > On 2024-06-15 21:35, Wietse Venema via Postfix-users wrote: > > > > > This is a bit off topic for Postfix, but a comnmon approach is to > > shard a global database into regional ones and limit the impact of > > outages. Some database systems support sharding out of

[pfx] Re: myorigin usage for ONLY unqualified addresses

2024-06-15 Thread Dan Mahoney via Postfix-users
> On Jun 15, 2024, at 15:03, Wietse Venema via Postfix-users > wrote: > > One addendum about how to distinguish from root@mydomain > from different hosts. > > Dan Mahoney via Postfix-users: >>> Use a virtual alias mapping from "r...@dayjob.org" to the collector >>> email address. This is a

[pfx] Re: myorigin usage for ONLY unqualified addresses

2024-06-15 Thread Wietse Venema via Postfix-users
One addendum about how to distinguish from root@mydomain from different hosts. Dan Mahoney via Postfix-users: > > Use a virtual alias mapping from "r...@dayjob.org" to the collector > > email address. This is a variation on > > > > /usr/local/etc/postfix/main.cf: > > virtual_alias_maps =

[pfx] Re: distributed email system

2024-06-15 Thread Jeff Peng via Postfix-users
On 2024-06-15 21:35, Wietse Venema via Postfix-users wrote: This is a bit off topic for Postfix, but a comnmon approach is to shard a global database into regional ones and limit the impact of outages. Some database systems support sharding out of the box (for example, MongoDB, supported by

[pfx] Re: myorigin usage for ONLY unqualified addresses

2024-06-15 Thread Wietse Venema via Postfix-users
Dan Mahoney via Postfix-users: > > Use a virtual alias mapping from "r...@dayjob.org" to the collector > > email address. This is a variation on > > > > /usr/local/etc/postfix/main.cf: > > virtual_alias_maps = hash:/local/etc/postfix/virtual-for-root > > > >

[pfx] Re: myorigin usage for ONLY unqualified addresses

2024-06-15 Thread Dan Mahoney via Postfix-users
> On Jun 15, 2024, at 06:19, Wietse Venema via Postfix-users > wrote: > > Dan Mahoney via Postfix-users: >> Hello, >> >> We currently have myorigin = $mydomain, and mydomain = dayjob.org >> on one of our border MXes, which is also the outbound MX for our >> whole organization. We are a

[pfx] Re: distributed email system

2024-06-15 Thread Wietse Venema via Postfix-users
Joachim Lindenberg via Postfix-users: > sql databases optimize for consistency instead of availability. > And even if you design your data model not to rely on joins, to > use unique ids per node, and to replicate both directions or > disallow writes on the slave, at least MariaDB failed on

[pfx] Re: myorigin usage for ONLY unqualified addresses

2024-06-15 Thread Viktor Dukhovni via Postfix-users
On Sat, Jun 15, 2024 at 09:19:58AM -0400, Wietse Venema via Postfix-users wrote: > > However, we would like our rootmail to respect our aliases file, > > which tells root to go to a specific mail destination on a specific > > box. > > Use virtual_alias_maps, as shown below. The null-client

[pfx] Re: myorigin usage for ONLY unqualified addresses

2024-06-15 Thread Wietse Venema via Postfix-users
Dan Mahoney via Postfix-users: > Hello, > > We currently have myorigin = $mydomain, and mydomain = dayjob.org > on one of our border MXes, which is also the outbound MX for our > whole organization. We are a fairly large site with mxes in two > locations and many machines which send mail which

<    1   2   3   4   5   6   7   8   9   10   >