[pfx] Re: 25 years today

2023-12-26 Thread Bob Proulx via Postfix-users
Wietse Venema wrote: > As a few on this list may recall, it is 25 years ago today that the > "IBM secure mailer" had its public beta release. Thank you for Postfix and thank you all of the years of working on it! I can't imagine running a mail server using any other software. Postfix is not just

[pfx] Re: Mail delivery to a higher priority MX record for a given domain.

2023-06-23 Thread Bob Proulx via Postfix-users
anant--- wrote: > For a domain, we are finding in logs that, for most of the mails, > mails are getting delivered to a server of remote domain having lower > priority MX record. For some mails, the mail is getting delivered to > higher priority MX record server even though lower prioirity MX

[pfx] Re: How to stop delivery looping

2023-06-14 Thread Bob Proulx via Postfix-users
wesley--- via Postfix-users wrote: > may I know that, what's the mechanism for postfix to stop mail > delivery looping? > > for example, u...@foo.com forwards to u...@bar.com, and u...@bar.com > forwards back to u...@foo.com, this will be a loop. > > so how postfix find and stop this behavior?

Re: remailer for alias lists?

2022-12-06 Thread Bob Proulx
raf wrote: > Dan Mahoney wrote: > > Or the perl-based one written for perl 4 with the last release > > sometime in 2000 (majordomo)? > > Assuming that wasn't a rhetorical question, :-) > I'd consider majordomo. It probably does > what you need without being a hassle. > It works in Perl 5 too, you

Re: Wrong Domain in Null Client Setup

2022-09-27 Thread Bob Proulx
Eddie Rowe wrote: > I tried the 2nd and 3rd option during my troubleshooting before my > post, reloaded the configuration and even bounced the service > without anything changing. Option 3 of setting mydomain is guarenteed. If that failed to work for you then the problem will require you to

Re: How can I set a "Reply-To" header ?

2022-06-30 Thread Bob Proulx
Wietse Venema wrote: > White, Daniel E. (GSFC-770.0)[AEGIS]: > > I found out how to do it from command line: > > > > echo -e "Testing Mail\nThank you" | mailx -v -s "Testing Mail" -S > > "reply-to=yom...@example.com" m...@example.com > > This smells like a common

Re: Preventing .forward backscatter

2022-06-23 Thread Bob Proulx
Derek B. Noonburg wrote: > I'm running postfix to handle email for several users. One of them > has a .forward file that points to a gmail address. Gmail's servers > are rejecting some email for various causes ("low reputation of > sending domain", SPF failures). Yes. And that might occur for

Re: Gmail specific transport

2022-06-16 Thread Bob Proulx
Viktor Dukhovni wrote: > Transport resolutiont that does remote DNS lookups will be a prohibitive > performance bottleneck on systems delivering a steady non-trivial stream > of mail. The queue manager is not multi-threaded, and each recipient > domain can/will incur some delay. Yes. That would

Re: Gmail specific transport

2022-06-16 Thread Bob Proulx
Jaroslaw Rafa wrote: > Dnia 15.06.2022 o godz. 22:00:45 Bob Proulx pisze: > > It is interesting that mail to domains hosted at google that are not > > @gmail.com but other named domains delivered okay. Google accepted > > the exact same message to them fine. > >

Re: Gmail specific transport

2022-06-16 Thread Bob Proulx
Viktor Dukhovni wrote: > No, those settings are used by the queue manager to schedule deliveries > assigned to various delivery agent processes, the delivery agents > themselves only see one message at a time and can do little to affect > concurrency, and related limits. > > So these settings go

Gmail specific transport

2022-06-15 Thread Bob Proulx
I have inherited being a caretaker of a sleepy local mailing list. It has about 200 subscribers on it. Unsurprisingly a large percentage of the subscribers use Google's Gmail. Google sometimes will decide that a message will not be accepted. It will log the error like this. Jun 15

Re: Strange To: of e-mail on postfix-users

2022-04-14 Thread Bob Proulx
Daniel Azuelos wrote: > Are you still using procmail? Yes. I am still using procmail. It is powerful, mature, and stable. But more importantly you said YOU were using procmail. > I just found an email incorrectly filtered by my .procmailrc, > because the To: wasn't

Re: Strange To: of e-mail on postfix-users

2022-04-09 Thread Bob Proulx
Daniel Azuelos wrote: > I just found an email incorrectly filtered by my .procmailrc, > because the To: wasn't postfix-users@postfix.org: ... > To: postfix-us...@cloud9.net Instead of filtering on the To the better idea is to use the standard mail headers that the mailing list adds to the

Re: Is it possible to send email by copying a file or files to an appropriate queue directory?

2022-03-22 Thread Bob Proulx
Edward Sandberg wrote: > You could use inotify to monitor a directory and trigger a script to send > the mail. Or just poll the directory every N number of seconds. That's also very low overhead. Since the directory contents will be cached in the file buffer cache of the kernel. But inotify is

Re: TLS 1.0 with Outlook 2010 and Windows XP

2022-03-14 Thread Bob Proulx
lst_ho...@kwsoft.de wrote: > we have a Postfix Server Version 3.3 and Openssl 1.1.1 on Ubuntu 18.04 LTS. > One user has the need to send e-mail from an age old Windows XP VM used > because of a special not any more available software. I have tried to not > deactivate TLS 1.0 as Outlook/XP should

Re: How to filter email (DKIM) without keeping the message in memory and without writing it to disc twice?

2022-01-15 Thread Bob Proulx
Robert Siemer wrote: > Gmail allows 150MB. Ok? And with that they are right. That is not > "insane". Insane is the opposite: to reject an email, because a > single file attachment ended up a little bigger than expected. Total > user experience disaster. I think you have me confused with someone

Re: How to filter email (DKIM) without keeping the message in memory and without writing it to disc twice?

2022-01-15 Thread Bob Proulx
Robert Siemer wrote: > I need to DKIM sign possibly huge emails (up to 150MB). I know you say you need this. But even if you had it would it actually be useful to you? DKIM is needed to interchange email with random email servers around the Internet. Because said random servers will reject the

Re: After network outage postfix found not running

2021-12-23 Thread Bob Proulx
Viktor Dukhovni wrote: > Could a watchdog timer have killed master(8) if it were suspended > long enough? Seems plausible. I could see something in the code timing out since things would be blocked waiting for I/O for so long.a > Demi Marie Obenour: > > My intuition is that either some timeout

Re: After network outage postfix found not running

2021-12-23 Thread Bob Proulx
Wietse Venema wrote: > Postfix was only the messenger of bad news. It does not > spontaneously self-destruct. I have always found Postfix to be extremely reliable and robust. Which was why this happening on two different systems was such an oddity. Bob

Re: After network outage postfix found not running

2021-12-23 Thread Bob Proulx
Matus UHLAR - fantomas wrote: > it's still possible that: > - postfix was killed by e.g. OOM killer, in which case it could not log that. I disable the OOM with vm.overcommit_memory = 2 so that particular thing won't be it. > - the logs were lost because of systemd's log limits That is

Re: After network outage postfix found not running

2021-12-22 Thread Bob Proulx
Wietse Venema wrote: > Bob Proulx: > > Any ideas on why postfix would not be running after such an event on > > two of the systems but okay on the others? > > LOGS. Postfix logs a sh*load, including processes that fail to > start. If the systems were unable to recor

After network outage postfix found not running

2021-12-22 Thread Bob Proulx
Everything is good so no stress about anything here but I am poking at the log files with a stick after a strange incident. Perhaps this tripped over some problem that discussing it might either enlighten me or perhaps unlikely improve things. Who knows? The GNU Savannah software forge had a

Re: Using a different DNS to ask zen.spamhaus.org for DNSBL info?

2021-10-21 Thread Bob Proulx
Gerben Wierda wrote: > Actually, the whole question was based on a misunderstanding what was going > wrong. Glad to hear that you think the problem is resolved. > My standard DNS forwards to cloud9 (9.9.9.9) because cloud9 blocks > bad actors. But that means that DNSBL from spamhaus doesn?t

Re: Debugging Relay Access Denied

2021-10-18 Thread Bob Proulx
Viktor Dukhovni wrote: > Bob Proulx wrote: > > I am helping a friend with his system. As such things are not as I > > would set them up. But just the same I can't figure out this > > problem. So I come here seeking a second set of eyes on it. What is > > the proble

Debugging Relay Access Denied

2021-10-18 Thread Bob Proulx
I am helping a friend with his system. As such things are not as I would set them up. But just the same I can't figure out this problem. So I come here seeking a second set of eyes on it. What is the problem that I am not seeing here? rwp@teton:~$ echo test | mailx -s test b...@proulx.com

Re: Is postfix the right tool for detecing and stripping out email addresses that forward to the same address?

2021-09-02 Thread Bob Proulx
Steve Dondley wrote: > raf wrote: > > Postfix isn't the right thing for that. It's a mail > > server, not a mail client. Agreed. But adding my comments to this too. > > For example, with mutt, you can give it a list of all Mutt is very good. :-) > > Another alternative that could involve

Re: Mail not being sent to file

2021-06-16 Thread Bob Proulx
Jeremiah Rothschild wrote: > * OS: CentOS 8.4.2105 x64 (fully updated) I tested this on CentOS 7 and it worked okay for me. No problem. I don't know anything about CentOS 8. > [root@c8vm ~]# ls -l /tmp/somefile > ls: cannot access '/tmp/somefile': No such file or directory Is your postfix

Re: Message sent by SMTP get lost whereas those via pickup(sendmail) are OK

2021-05-16 Thread Bob Proulx
Chris Green wrote: > I am trying to debug it by connecting directly to port 25 on localhost > using telnet and composing mail that way. I highly recommend "swaks" the Swiss Army Knife SMTP, the all-purpose SMTP transaction tester utility program for generating test emails using SMTP transactions.

Re: mailq timezone? UTC versus local?

2021-03-10 Thread Bob Proulx
Wietse Venema wrote: > You could also override the timezone in main.cf: > > /etc/postfix/main.cf: > # Take output from "postconf -d import_environment", then update TZ > import_environment = TZ=whatever ... That is a pretty interesting idea. I might do this to set TZ=UTC for here

Re: mailq timezone? UTC versus local?

2021-03-10 Thread Bob Proulx
Viktor Dukhovni wrote: > Set your timezone consistently. When running as a non-root user, setgid > programs such as "postqueue" ignore their environment, including TZ. > When running as "root" they honour it. I would have said that 100% of everything was consistently using local time,

mailq timezone? UTC versus local?

2021-03-09 Thread Bob Proulx
The time reported by mailq seems confusing. Sometimes it seems to be reporting in system time and sometimes UTC time? rwp@havoc:~$ mailq -Queue ID- --Size-- Arrival Time -Sender/Recipient--- 7C0CC451* 75575 Wed Mar 10 00:54:52 mailman-boun...@gnu.org

reload, main.cf, and tables updates...

2021-02-22 Thread Bob Proulx
Viktor Dukhovni wrote: > Actually, to expedite the visibility configuration changes, it is generally > sufficient to do a "graceful" reconfiguration via "postfix reload". Or > just do nothing, and let the change take place incrementally as processes > "age out" (subject to $max_use and $max_idle)

Re: TCP wrappers and Postfix

2021-02-15 Thread Bob Proulx
Michael Orlitzky wrote: > Eugene Podshivalov wrote: > > Generic approach to system administration and access control > > reconfiguration at runtime (without service reload). > > If you want something more generic than what's already in postfix, the > next level up is probably iptables. +1. I

Re: TCP wrappers and Postfix

2021-02-15 Thread Bob Proulx
Eugene Podshivalov wrote: > Is it by chance possible that tcp wrappers will be supported in future at > least as an optionally compiled feature? One can't say something will never happen. But why would it be needed? As others have said Postfix already supports all of the same feature set but in

Re: Cloud9.net related responses

2021-02-11 Thread Bob Proulx
Bryan L. Gay wrote: > I'm seeing some mailing list messages with to: > postfix-us...@cloud9.net in the header. I had to update my filters to > get them sorted into my postfix mailing list folder. If one is filtering mail selecting for mail through a mailing list then one should not use the To: or

Re: client and ehlo hostname mismatch

2021-02-11 Thread Bob Proulx
Nick Tait wrote: > Nick Tait wrote: > > Perhaps the advice should be: If you are using Sendmail, then (a) you > > shouldn't publish a DMARC policy and (b) you shouldn't reject emails > > based on failed DMARC check; but if you aren't using Sendmail then as > > long as you don't mind rejecting

Re: Can I get postfix to use what's returned by dnsdomainname for mydomain?

2021-02-11 Thread Bob Proulx
Chris Green wrote: > Matus UHLAR - fantomas wrote: > > >chris@isbdGandi$ more /etc/hosts > > >127.0.0.1 isbdGandi.isbd.uk isbdGandi isbd localhost > > > > no no no. > > 127.0.0.1 is always supposed to resolve to "localhost". > > If those hosts don't have their assigned IP, Debian

Re: client and ehlo hostname mismatch

2021-02-10 Thread Bob Proulx
Eugene Podshivalov wrote: > Then what is the sense of doing this if the name can be whoever else's name? For anti-spam and anti-abuse software. It's all available for the anti-spam to use to decided how to classify the message. Perhaps not as a hard block as that would definitely have false

Re: client and ehlo hostname mismatch

2021-02-10 Thread Bob Proulx
Eugene Podshivalov wrote: > I've just received a spam email from a client who presented itself as > emx.mail.ru but its ip 117.30.137.22 resolves to > 22.137.30.117.broad.xm.fj.dynamic.163data.com.cn > > Are reverse client hostname and the ehlo one not supposed to match? It's been an old

Re: Can I get postfix to use what's returned by dnsdomainname for mydomain?

2021-02-10 Thread Bob Proulx
Chris Green wrote: > Viktor Dukhovni wrote: > > Chris Green wrote: > > > Local hostname doesn't have FQDN by default though:- > > > > > > chris@isbdGandi$ hostname > > > isbdGandi > > > chris@isbdGandi$ hostname -f > > > isbdGandi.isbd.uk > > > > > > > Do your OS instances have

Re: User script for modifying main.cf and other config files

2021-02-08 Thread Bob Proulx
Alex wrote: > it's not so much that end-users are modifying the config in the same > way as webmin does, like making changes directly to main.cf, but > type in the name of a new domain to be added to relay_domains, for > example. The script then then modifies main.cf to apply that change. In that

Re: fork_attempts=10 ?

2021-02-08 Thread Bob Proulx
Marek Kozlowski wrote: > My system is not overloaded and - in many aspects quite typical one. Great! I believe you. But then there was absolutely no reason to double a limit that would never have been hit. If the system is not overloaded the the initial fork() will always succeed and there

Re: fork_attempts=10 ?

2021-02-07 Thread Bob Proulx
Marek Kozlowski wrote: > Have you ever read you own code (or quick fixes) written >5 years > ago if you'd forgotten to place comments? ;-) I often say, "I miss my younger brain." Back then I could remember all of the details. These days I write notes to my future self. My future self who will

Re: User script for modifying main.cf and other config files

2021-02-07 Thread Bob Proulx
Alex wrote: > Yes, it's a web front-end, using apache and php-fpm. > It's written using laravel and PHP. It relieves me (Whew!) that it is not using WP which historically has had deep security vulnerabilities quite often. And therefore in the situation you are proposing would be a likely

Re: User script for modifying main.cf and other config files

2021-02-07 Thread Bob Proulx
Alex wrote: > I'm working on a front-end to modify our main.cf and other config > files, such as the transport and relay_recips file Hmm... A front-end? Should we assume this is a web UI frontend? Because although most of us use $EDITOR for those files the official frontend is "postconf" for

Re: ipv6, SPF, DMARC

2021-02-07 Thread Bob Proulx
Jeff Abrahamson wrote: > Setting > inet_protocols = ipv4 > fixes the issue. I have heard (so apply the rumor filter accordingly) that Google's Gmail is more strict for IPv6 clients than IPv4 clients. When SPF, DKIM, DMARC fails then for IPv4 clients it is more likely it will be accepted and

Re: Postfix advice requested

2021-02-02 Thread Bob Proulx
david wrote: > 1) mydomain = d1.tld > 2) mydestination= localhost.$mydomain localhost $mydomain > 3) virtual_alias_domains= d2.tld > 4) virtual_alias_maps = hash:/etc/postfix/virtualusers What's the value of myorigin for you? I expect it will be the

Re: Postfix advice requested

2021-02-02 Thread Bob Proulx
ntains: > root: owner_d1 > > and the file /etc/postfix/virtualusers contains: > > a...@d1.tld d1_a > b...@d1.tld d1_b > @d1.tld owner_d1 > @d2.tld owner_d2 Viktor Dukhovni wrote: > Bob Proulx wrote: > > I don't see anything wrong as such with

Re: Postfix advice requested

2021-02-02 Thread Bob Proulx
david wrote: > To accomplish this, I set values in /etc/postfix/main.cf: > > mydomain = d1.tld > mydestination = localhost.$mydomain localhost $mydomain > virtual_alias_domains = d2.tld > virtual_alias_maps = hash:/etc/postfix/virtualusers > > The file /etc/aliases contains: > root:

Re: Stucked with "unable to look up host"

2021-01-30 Thread Bob Proulx
Daniel Armando Rodriguez wrote: > , relay=none, delay=1.2, delays=0.15/0.01/1/0, dsn=5.3.0, status=bounced > (unable to look up host host.domain.com: No address associated with > hostname) > > However, DNS resolution works as expected and has a PTR record associated > with it. It is very common

Re: empty message-ID

2020-11-23 Thread Bob Proulx
@lbutlr wrote: > Bob Proulx wrote: > > But so many people use Gmail these days that they have gotten used to > > the way Gmail does things. And Gmail de-duplicates and saves the > > first message with any particular message-id that arrives. And then > > displays

Re: empty message-ID

2020-11-23 Thread Bob Proulx
@lbutlr wrote: > On 23 Nov 2020, at 15:27, Jaroslaw Rafa wrote: > > Dnia 23.11.2020 o godz. 11:49:39 D'Arcy Cain pisze: > >> > >> If someone replies to a mailing list and copies the sender then that > >> person gets two copies. The above recipe avoids that. > > > Moreover, it breaks the

Re: empty message-ID

2020-11-23 Thread Bob Proulx
Jaroslaw Rafa wrote: > Dnia 23.11.2020 o godz. 10:18:39 D'Arcy Cain pisze: > > After the first message was accepted all of the rest > > were silently dropped as duplicates due to a very standard procmail > > recipe: > > > > :0 Wh: msgid.lock > > | formail -D 65536 $HOME/.msgid.cache > > Who uses

Re: 4xx on rejected host. Why?

2020-11-21 Thread Bob Proulx
Gerben Wierda wrote: > WHen a client is rejected because of a mssing reverse hostname, I see: > > Nov 21 15:37:02 mail smtp/smtpd[2168]: NOQUEUE: reject: RCPT from > unknown[46.221.40.2]: 450 4.7.1 Client host rejected: cannot find your > reverse hostname, [46.221.40.2]; from= > to=

Re: Configuration problem — Postfix + Sympa

2020-11-02 Thread Bob Proulx
Benny Pedersen wrote: > /more rants > > mailman breaks dkim Anything that supports adding subject tags or adding body footers breaks DKIM and at the same time if one doesn't do those things then Mailman works fine with DKIM. Doctor, it hurts when I do this. Well then don't do that. However do

Re: 'temporary error condition' overrides of unknown_client_reject_code 450?

2020-10-29 Thread Bob Proulx
PGNet Dev wrote: > legitsen...@example.com > > my postfix instance does what I intend, and 'rejects' ... I assume this is due to use of reject_unknown_sender_domain in which case unknown_address_reject_code applies. http://www.postfix.org/postconf.5.html#unknown_address_reject_code >

Re: sanity-check postfix XCLIENT usage ?

2020-10-22 Thread Bob Proulx
Wietse Venema wrote: > Enough already. Here's a From: header > > From: Firstname Lastname > display name email address > > Many mail user agents, especially the GUI based ones, display the > "Firstname Lastname" part, not the sender address. To see the address > one has

Re: sanity-check postfix XCLIENT usage ?

2020-10-22 Thread Bob Proulx
Demi M. Obenour wrote: > Viktor Dukhovni wrote: > >> Demi M. Obenour wrote: > >> This is really a security hole in gmail. Given the popularity of > >> gmail, however, I seriously suggest somehow treating gmail as if it > >> had p=reject, as it should. > > No it should not have "p=reject" that's

Re: Is changing "Hostname" mandatory?

2020-10-21 Thread Bob Proulx
Jason Long wrote: > For configuration Postfix, is changing "hostname" to something like > "Mail.example.net" mandatory? For example, my server running Apache > and I don't like to change its name. Your hostname can be almost anything you feel like completely independent of running either Postfix

Re: Limiting HELO spoofing in Postfix?

2020-10-19 Thread Bob Proulx
Rich Wales wrote: > I did find some generally suspicious things in my web server logs -- > including lots of clients looking for the following item: > > /nette.micro?callback=shell_exec=ifconfig > > but there isn't any /nette.micro anywhere on my server, and all these > GET requests

Re: Host not found?

2020-10-19 Thread Bob Proulx
@lbutlr wrote: > Bob Proulx wrote: > > Since 199.5.50.180 does not appear in the allowance for the SPF > > records that I can see > > dig -x 199.5.50.180 +short > br2.vw.com. > > VW does own Audi, so... mystery deepens? That's simply the reverse DNS PTR record.

Re: Mail server recently became an open relay

2020-10-19 Thread Bob Proulx
Bob Proulx wrote: > The default PHP "mail()" method sends mail by using the system's > /usr/sbin/sendmail interface rather than SMTP. > > https://www.php.net/manual/en/mail.requirements.php > https://www.php.net/manual/en/function.mail.php Oh! It depends

Re: Mail server recently became an open relay

2020-10-19 Thread Bob Proulx
Rich Wales wrote: > If the problem were in fact due to a hijacked PHP page, btw, would this > necessarily require the page to be using e-mail or TCP connections > already for its own legitimate purposes, but being co-opted by a hacker > to nefarious ends? Or could *any* PHP script theoretically

Re: Host not found?

2020-10-19 Thread Bob Proulx
Joey J wrote: > I'm trying to understand why this is telling me host not found. > On that same server if I nslookup the ip it does resolve. > > Oct 18 16:00:51 mgw postfix/smtpd[24119]: NOQUEUE: reject: RCPT from > unknown[199.5.50.180]: 450 4.7.1 : Helo command rejected: Host > not found; from=

Re: reject mail to all local system accounts

2020-10-15 Thread Bob Proulx
cody wrote: > How do i reject incoming e-mail's from remote servers to all local system > accounts? > I can list them in a map via smtpd_recipient_restriction but wonder if there > is an easier way to do that. One of the standard configurations is as a "null client".

Re: PostFix not working after update

2020-10-13 Thread Bob Proulx
Paul Lauzon wrote: > I have kept Postfix and many other services disabled at power-up since last > year and it works well for me that way. I did that last year after I got > DDOS and spammed tons of mail with virus attachments and my server was so > overwhelmed that I could not use it for days

Re: PostFix not working after update

2020-10-12 Thread Bob Proulx
Paul Lauzon wrote: > PostFix does not seem to work anymore. There are an infinite number of ways for something to fail but only exactly one correct way for it to work. In addition to the other comments I see this: > # service postfix status >? postfix.service - Postfix Mail Transport Agent

Re: strange issue with postfix

2020-10-05 Thread Bob Proulx
Erik Thuning wrote: > Ranjan Maitra wrote: > > Thanks, I am not very knowledgeable with regard to postfix being a > > simple user, so do you mind letting me/us know what you had to fix? It > > is kind of forbidding to me. > > > > > Thank you! I had this exact issue and just couldn't wrap my head

Re: strange issue with postfix

2020-10-01 Thread Bob Proulx
Ranjan Maitra wrote: > > > Oct 1 14:08:00 localhost postfix/smtpd[4142479]: fatal: in parameter > > > smtpd_relay_restrictions or smtpd_recipient_restrictions, specify at > > > least one working instance of: reject_unauth_destination, > > > defer_unauth_destination, reject, defer,

Re: Comcast 421 throttling multiple recipients

2020-09-28 Thread Bob Proulx
Viktor Dukhovni wrote: > Bob Proulx wrote: > > > > ... http://postmaster.comcast.net/smtp-error-codes.php#RL01 (in > > > > reply to MAIL FROM command)) > > > > > > Look carefully at the log entry. The "421" is send in response to &q

Re: Send only configuration best practices?

2020-09-28 Thread Bob Proulx
Bastian Blank wrote: > Bob Proulx wrote: > > What's the best configuration for a web server that does not receive > > mail but needs to send mail? > > Send only does not exist. Every e-mail can produce bounces, which are > sent to the sender of the original e-mail

Re: Comcast 421 throttling multiple recipients

2020-09-24 Thread Bob Proulx
Viktor Dukhovni wrote: > Bob Proulx wrote: > > ... http://postmaster.comcast.net/smtp-error-codes.php#RL01 (in reply > > to MAIL FROM command)) > > Look carefully at the log entry. The "421" is send in response to "MAIL > FROM", not "RCPT TO

Re: Send only configuration best practices?

2020-09-24 Thread Bob Proulx
Kris Deugau wrote: > Bob Proulx wrote: > > The problem is *other* sites. I am starting to get a trickle of > > complaints from people who are not receiving password reset emails. > > And the problem seems to be other sites that are requiring that > > senders ha

Comcast 421 throttling multiple recipients

2020-09-24 Thread Bob Proulx
Question about a different system. Pretty much every question of mine is related to a different oddball case. Here I am helping a friend out and they encountered this problem. I'll change the 3rd party addresses so as not to annoy them but the data is otherwise verbatim. Sep 23 14:38:23

Re: Send only configuration best practices?

2020-09-24 Thread Bob Proulx
Doug Hardie wrote: > Bob Proulx wrote: > > Sigh. I was hoping to be able to avoid this. But both of the > > responses were basically, set up something to handle incoming mail. > > Check and see if DMA, Dragonfly mail agent, is available for your > machine. It is a ve

Re: Send only configuration best practices?

2020-09-23 Thread Bob Proulx
Viktor Dukhovni wrote: > On Wed, Sep 16, 2020 at 04:39:12PM -0600, Bob Proulx wrote: > > What's the best configuration for a web server that does not receive > > mail but needs to send mail? > > Send via a smarthost relay. Use a valid envelope sender domai

Re: Send only configuration best practices?

2020-09-23 Thread Bob Proulx
John Stoffel wrote: > Bob> What's the best configuration for a web server that does not > Bob> receive mail but needs to send mail? Password resets. Bug > Bob> ticket update notifications. That type of email. > > I would push all the email to the mailserver for the domain served by > that web

Send only configuration best practices?

2020-09-16 Thread Bob Proulx
What's the best configuration for a web server that does not receive mail but needs to send mail? Password resets. Bug ticket update notifications. That type of email. (Plus admin mail such as cron output to root. But I can ensure that is delivered to me and read.) But the host never needs to

Re: Temporary Lookup Failure

2020-08-29 Thread Bob Proulx
@lbutlr wrote: > Bind is running, and I can manually lookup the domains and dig -x > the IPs, so I don’t think bind is the issue? Although dig and drill are good for tracing DNS queries the better tool for tracing system default lookups is 'getent'. It will perform a lookup using the same libc

Re: how do I pass thru incomplete destination email addr to relayhost for 'To' rewrite?

2020-08-20 Thread Bob Proulx
Matthew Patton wrote: > > Why send mail as user@myhostname, when the named host will never > > ever receive email? > > Because I need to retain FROM what host it originated. If I see an > email from root@domain I have no idea which host it came from. In my mailer I would immediately look at the

Re: Postfix is no longer forwarding root mail after I changed the forwarding address

2020-08-09 Thread Bob Proulx
PopeRigby wrote: > I have Postfix setup to automatically forward any mail that goes to root to > an > external address. I just recently changed my email main email address from a > Tutanota one to a Mailbox.org one. I went into /etc/aliases and switched out > my addresses there, so now it

Re: Forwarding best practices

2020-08-05 Thread Bob Proulx
John Regan wrote: > Subject: Forwarding best practices ... > Can someone recommend a set of best practices for using postfix to relay > mail to yahoo/gmail in this way? The Best Practice for forwarding today is not to do it. It has long been a friendly allowed practice on the net. But as Yahoo,

Re: How To Rewrite "Mail From:"?

2020-07-09 Thread Bob Proulx
Drew Tomlinson wrote: > > >The simplest thing to do is to encapsulate the original message > > >as attachment to a new message. > > > > yes, this should work too. > > But wouldn't this make all my email appear to come from me and I'd > have to go into each email to see the original email? Yes.

Re: CentOS 8 KVM -- Reboot Yields fatal: parameter inet_interfaces Error

2020-06-24 Thread Bob Proulx
Greg Sims wrote: > fatal: parameter inet_interfaces: no local interface found for 10.81.198.165 How is the network configured? Netplan? If netplan then what "renderer" is configured? systemd-networkd? Is it a local static IP configuration? Or DHCP? I have observed systemd-networkd to not

Re: setup issue -- debian /ubuntu 16.04.1 "bad string length 0 < 1: setgid_group ="

2020-06-17 Thread Bob Proulx
Scott Kitterman wrote: > Those are both good points, but it's also worth noting that typically > submission requires SMTP Auth which you will have to configure manually after > doing the above. Right. But there are many good guides on the net available that describe setting up SMTP Auth in

Re: setup issue -- debian /ubuntu 16.04.1 "bad string length 0 < 1: setgid_group ="

2020-06-16 Thread Bob Proulx
Gary Aitken wrote: > Wietse Venema wrote: > > Perhaps you're better of with > > - uninstall Postfix > > - reinstall Postfix > > > > and only after doing that edit Postfix config files. > > A simple uninstall and reinstall of postfix could not be used, as the > uninstall > would remove another

Re: Solving a misdelivery puzzle

2020-06-02 Thread Bob Proulx
Wietse Venema wrote: > The net result was that mail for a virtual alias, that should be > forwarded to a remote address, was sometimes delivered to the local > spam folder. But only because a half-dozen conditions were met. Wow! I can see each of the decisions the local admin made when they made

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-08 Thread Bob Proulx
Bill Cole wrote: > michaelof wrote: > > I've a generic question to all more experienced than me postfix users > > here: Is it nowadays (reasonable) possible to run postfix with IPv6 > > only? E.g "mail.example.com" and "smtp.example.com" with only ipv6 > > records in the DNS, no A / ipv4

Re: filtering locally submitted emails / tidying up the config

2020-05-02 Thread Bob Proulx
Patrick Proniewski wrote: > In mean time I've changed my all setup to use only > milters (more readable config). Seems reasonable to me. > Unfortunately I've discovered that Amavisd is unable to add headers > I want as it would do as an smtp proxy filter. > It will properly add: > >

Re: Replace null sender addresses?

2020-05-01 Thread Bob Proulx
Hello Jason, I do not know why but you sent out three copies of my email message in full unquoted as a reply. And then in between the 2nd and 3rd copies you wrote your own response. That made the message rather unreadable. Please in the future double check the message before hitting send.

Re: Replace null sender addresses?

2020-05-01 Thread Bob Proulx
Wietse Venema wrote: > Jason Bailey: > > I've got notification emails from a legacy system passing through a > > Postfix install I'm using to relay messages to the proper outbound Are the notification mails coming from an internal system? That's okay. But why are the recipients undeliverable?

Re: delaying postfix until/unless VPN is up/connected

2020-03-31 Thread Bob Proulx
Peter wrote: > Bob Proulx wrote: > >iptables -A OUTPUT -o 93.184.216.34 -m tcp --dport 25 -j ACCEPT > >iptables -A OUTPUT -m tcp --dport 25 -j REJECT > > > > But replace 93.184.216.34 with the IP address of your VPN relay host. > > I simply used an

Re: delaying postfix until/unless VPN is up/connected

2020-03-30 Thread Bob Proulx
Ranjan Maitra wrote: > Bastian Blank wrote: > > I would just reject SMTP connections outgoing on your non-VPN interfaces. > > | iptables -A OUTPUT -o $vpn -m tcp --dport 25 -j ACCEPT > > | iptables -A OUTPUT -m tcp --dport 25 -j REJECT > > So, I was trying this out: > > $ sudo iptables -A OUTPUT

Re: Postfix as a backup MX

2020-03-29 Thread Bob Proulx
@lbutlr wrote: > Linda Pagillo wrote: > > I want to set up Postfix as a backup MX for a few of my > > Windows-based mail servers. I have never done this before so I > > have been researching to see what I could find. > > Reconsider. +1 to this. Back in the days when systems were not directly

Re: delaying postfix until/unless VPN is up/connected

2020-03-25 Thread Bob Proulx
Wietse Venema wrote: > Ranjan Maitra: > > Thanks, except that it does not send even when VPN is up. I get > > the same message and I can get it to send only when I change my > > relayhost back to the default. What is your relayhost setting? > 2) the remote relayhost must only accept mail when

Re: delaying postfix until/unless VPN is up/connected

2020-03-23 Thread Bob Proulx
Scott Kitterman wrote: > On Monday, March 23, 2020 7:47:25 PM EDT Bob Proulx wrote: But don't forget I also said: > > I know you said you are running Fedora but I imagine that Fedora > > has something like this but in a different place. Doesn't Fedora > > have a /etc/sysc

Re: delaying postfix until/unless VPN is up/connected

2020-03-23 Thread Bob Proulx
Ranjan Maitra wrote: > I am using postfix to deliver my work mail from a remote > location. This works fine when I am on VPN (the postfix traffic goes > through VPN then). However, it gets identified as spam when VPN is > not up while sending the e-mail. Since most people do not routinely > check

Re: delaying postfix until/unless VPN is up/connected

2020-03-23 Thread Bob Proulx
Leonid Isaev wrote: > This depends on your distribution and VPN settings. For example, on my > ArchLinux system which uses OpenVPN, I'd make this a systemd unit that binds > to > the tun network interface... I know you said you are running Fedora but I imagine that Fedora has something like this

Re: should we use plaintext for message?

2020-03-21 Thread Bob Proulx
Darac Marjal wrote: > This is where your ~/.mailcap file comes in. This is a great file > for registering viewers for MIME types. So, for example, I have the > following in my Mailcap: ... > application/pdf; pdftotext %s -; copiousoutput I suggest using the pdftotext -layout option. It can

Re: should we use plaintext for message?

2020-03-19 Thread Bob Proulx
Wietse Venema wrote: > I think this train has left the station almost 30 years ago. The > only people who care about plaintext are people who were born before > circa 1980, or who are part of some extremist minority. That isn't required to be a logical OR condition. It is possible for me to be

  1   2   >