Re: Mail spool issues with Postfix

2021-08-25 Thread Matus UHLAR - fantomas
sure if it's an intended feature or not, but I'd like to disable it and remove the mail in /var/mail. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akuk

Re: Rate limit exception?

2021-08-23 Thread Matus UHLAR - fantomas
]: disconnect from mxc01.zoneedit.com[64.68.198.23] commands=0/0 Is there a way I could except that server from the rate limit? And could that be misused (a lot of spammers already send to the backup MX anyway) http://www.postfix.org/postconf.5.html#smtpd_client_event_limit_exceptions -- Matus UHLAR

Re: Hostname DNS error

2021-08-21 Thread Matus UHLAR - fantomas
whenever you run spam filter and/or DNS blocklist -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. LSD will make your ECS screen display

Re: Question on DKIM signature

2021-08-16 Thread Matus UHLAR - fantomas
;t be DKIM safe. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "Where do you want to go to die?" [Microsoft]

Re: Question on DKIM signature

2021-08-16 Thread Matus UHLAR - fantomas
is unsafe with mailing lists. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The only substitute for good manners is fast reflexes.

Re: How to force remote deliver agent to send messages via SSL only

2021-08-15 Thread Matus UHLAR - fantomas
icates for getting mail (IMAPS/POPS), rather than for sending mail (SMTP/STARTTLS). I don't know. If so, it might only affect e.g. Dovecot's choice of certificate rather than Postfix's. But chances are, if you use both, you'll probably want them to use the same certificate.

Re: How to force remote deliver agent to send messages via SSL only

2021-08-15 Thread Matus UHLAR - fantomas
On Sat, Aug 14, 2021 at 02:43:29PM +0200, Matus UHLAR - fantomas wrote: - dedicated port for smtp/ssl was deprecated (in fact never standrdized) On 15.08.21 09:04, raf wrote: I think that used to be true, but they had a rethink. This proposed standard (Jan 2018) indicates so: 3.3

Re: How to force remote deliver agent to send messages via SSL only

2021-08-14 Thread Matus UHLAR - fantomas
dized) - nowadays, dedicated port is for clients, not for server-server communication - so far most of systems try on port 25 and upgrade to SSL via STARTTLS, when possible. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to

Re: will this break DMARC?

2021-08-14 Thread Matus UHLAR - fantomas
some headers changes on transit here, dont sign every header at signing stata Sender: changed by postfix mailing list and it was in thesignature, that's why it failed. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to th

Re: delivery rules question

2021-08-13 Thread Matus UHLAR - fantomas
/reserved domain name -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "To Boot or not to Boot, that's the question." [WD1270 Caviar]

Re: EHLO argument validation

2021-08-09 Thread Matus UHLAR - fantomas
On 2021-08-08, at 16:13 (UTC+0200), Matus UHLAR - fantomas had the following to say: : are you searching for disabling particular strings in helo/ehlo command? On 08.08.21 22:04, Mono DHS wrote: No, I would like to validate the argument to the EHLO command (actually, to both the EHLO and

Re: EHLO argument validation

2021-08-08 Thread Matus UHLAR - fantomas
strings are in clients' control and anyone can change them as they wish (I personally did disable using of my hostname in HELO strings because abusers used it but that's apparently the only usage I can think of). - If not, please rephrase. -- Matus UHLAR - fantomas, uh...@fantomas

Re: Inbound/Outbound Settings on a Postfix Relay-Only

2021-08-07 Thread Matus UHLAR - fantomas
estination, so the local transport was selected. You have disabled it above. relay_transport = hash:/etc/postfix/transport .our.local.domain relay:[MDA server IP] if it has to be .our.local.domain, keep .our.local.domain out ot $mydestination -- Matus UHLAR - fantomas, uh...@f

Re: SMTP Relay

2021-08-07 Thread Matus UHLAR - fantomas
to IP 172.16.101.1 why? the DNAT is apparenly what makes it not work, SNAT (or MASQUERADE) should be enough. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: "parameter inet_interfaces: no local interface found for 127.0.0.2" at reboot, but not on manual systemctl start

2021-07-30 Thread Matus UHLAR - fantomas
7/29/2021 12:34 AM, Matus UHLAR - fantomas wrote: sorry, but this manpage says that localhost resolvs to 127.0.0.1 (as it always should). according to systemd-resolved manpage, the local host name is resolved to 127.0.0.2 (not localhost) maybe a just mistake in your description? On 29.07.21 12:1

Re: Has rfc2487 been obsoleted and mandatory TLS in smtpd is now kosher?

2021-07-29 Thread Matus UHLAR - fantomas
rt 25. They'll just require STARTTLS to be used and they'll only support TLSv1.2+. The only alternative would be to close port 25, use port 465 (TLS-only) instead, and hope that all mail servers that want to send them email try to use port 465. But that's not going to happen. man

Re: "parameter inet_interfaces: no local interface found for 127.0.0.2" at reboot, but not on manual systemctl start

2021-07-29 Thread Matus UHLAR - fantomas
sorry, but this manpage says that localhost resolvs to 127.0.0.1 (as it always should). according to systemd-resolved manpage, the local host name is resolved to 127.0.0.2 (not localhost) maybe a just mistake in your description? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/

Re: My sender_access file is not working

2021-07-28 Thread Matus UHLAR - fantomas
; 4k R$ 1.099,00 Black Ofertas Magalu - Aproveite! - [ 95271443633 ] From: Ofertas Magazine Luiza-38 header From: if often different from envelope from. postfix directives are related to envelope from. We don't see envelope from here. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: mail for 'root' delivery blocked :(

2021-07-28 Thread Matus UHLAR - fantomas
Le 28/07/2021 à 09:36, Matus UHLAR - fantomas a écrit : this mean that your server is going to send mail to "server.mydomain.com" and your postfix sees it should deliver domain to itself, but postfix does not know how to handle mail for server.mydomain.com - you h

Re: mail for 'root' delivery blocked :(

2021-07-28 Thread Matus UHLAR - fantomas
ain, 707 reject_unauth_destination, 708     reject_rbl_client sbl.spamhaus.org, 709 permit - here you define smtpd_recipient_restrictions again -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this addr

Re: receiving mail for other hosts...

2021-07-16 Thread Matus UHLAR - fantomas
and userB@host2 ? How can I make our mail server accept mail for all our local hosts? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.

Re: Bypass postscreen

2021-07-15 Thread Matus UHLAR - fantomas
ot;reject". since you only need to allow specific IPs, you apparently don't need that. I'd would set it anyway - to avoid wondering if you put "reject" there why it doesn't work. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: Conditional milter_header_checks?

2021-07-14 Thread Matus UHLAR - fantomas
ls are not DKIM signed, so of course they will fail. which means, if you use DMARC and not DKIM, don't post to mailing lists. btw, DKIM defined very shitty canonicalication, which makes it very easy to break messages by using some common formating techniques. -- Matus UHLAR - fantomas, uh..

Re: Conditional milter_header_checks?

2021-07-13 Thread Matus UHLAR - fantomas
btw, as always: what are you trying to achieve? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Silvester Stallone: Father of the RISC concept.

Re: Stopping backscatter spam to a specific domain

2021-07-13 Thread Matus UHLAR - fantomas
ipient and keep track of them (deliverable or not) which is useful for cases where you can not use local_recipient_maps -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOS

Re: Stopping backscatter spam to a specific domain

2021-07-12 Thread Matus UHLAR - fantomas
. This can be done by either providing postfix with list of existing addresses in provided domains, or by using recipient verification for those domains, and also sender verificatiom, when we're here. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish N

Re: Stopping backscatter spam to a specific domain

2021-07-11 Thread Matus UHLAR - fantomas
, reject_unauth_destination, try adding "reject_unlisted_recipient", although smtpd_reject_unlisted_recipient=yes (default) shoult take care of that. permit The problem is that a rejected recipient produces a mailer-daemon reply. only if you accept mail for such recipient. -- Matus UHLAR

Re: 554 bounce message lacks detail

2021-07-09 Thread Matus UHLAR - fantomas
On 09.07.21 08:38, Matus UHLAR - fantomas wrote: you can add info to reject messages by configuring e.g.: smtpd_reject_footer_maps=regexp:/etc/postfix/reject_footes_maps but nobody will guarantee that the sending MTA will put that info to a bounce. However, if it helps, please report this

Re: 554 bounce message lacks detail

2021-07-08 Thread Matus UHLAR - fantomas
endly HTTP error messages" was on), making error messages useless. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Windows 2000: 640

Re: Connection Timeouts during Sending

2021-07-08 Thread Matus UHLAR - fantomas
r 587. All above mentioned ports are allowed in and out of the firewall on both the NAT and endpoint computer. I just need to know what settings would be best to avert the timeout. And yes, I tried relaying and it also times out. have you tried port 25? -- Matus UHLAR - fantoma

Re: bounce_notice_receiver seems to be ignored

2021-07-08 Thread Matus UHLAR - fantomas
On 08-07-2021 12:05, Matus UHLAR - fantomas wrote: Hans van Zijst: I'm trying to get Postfix to send its bounce notices to a different address than "postmaster", so I configured notify_classes = resource, software, bounce, 2bounce bounce_notice_recipient = bou

Re: bounce_notice_receiver seems to be ignored

2021-07-08 Thread Matus UHLAR - fantomas
cal addresses and sending bounces can result into being listed in DNS blocklists. I recommmend refusing those mails and solve reason why mails to nonexistent addresses are sent to you. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail adver

Re: Clarify reject_* for smtpd_helo_restrictions

2021-07-08 Thread Matus UHLAR - fantomas
sable this or implement this check to postfix. domains can have their SPF records that say who is allowed to use their names in HELO (or mail from of course). You can use SPF to refuse such clients, although you need external policy server or milter to do that. -- Matus UHLAR - fantomas, uh...@fantomas

Re: smtp_tls*_protocols and !TLSv1

2021-07-02 Thread Matus UHLAR - fantomas
er connections. this it's mostly safe to put smtpd_tls_protocols=!SSLv2,!SSLv3 smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3,!TLSv1 or even smtpd_tls_protocols=!SSLv2,!SSLv3 smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3,!TLSv1,!TLSV1.1 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.

Re: Postconf and postmap in check_policy_service scripts

2021-07-02 Thread Matus UHLAR - fantomas
>>Matus UHLAR - fantomas: >>>I was curious if I could do a script that would do the same, with the same >>>possible issues. >>> >>>I can do perl, but it looks neither python nor perl have interface to postfix >>>what could e.g. expand maps wi

Re: Postconf and postmap in check_policy_service scripts

2021-07-02 Thread Matus UHLAR - fantomas
Matus UHLAR - fantomas: I was curious if I could do a script that would do the same, with the same possible issues. I can do perl, but it looks neither python nor perl have interface to postfix what could e.g. expand maps without calling external commands. On 01.07.21 22:49, Kevin N. wrote

Re: Postconf and postmap in check_policy_service scripts

2021-07-01 Thread Matus UHLAR - fantomas
rl, but it looks neither python nor perl have interface to postfix what could e.g. expand maps without calling external commands. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. He who laughs last thinks slowest.

Re: reject_unverified_recipient for local domains only

2021-07-01 Thread Matus UHLAR - fantomas
authenticated or in mynetworks) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Posli tento mail 100 svojim znamim - nech vidia aky si idiot

Re: SPF and DKIM and DMARC records for a relay, on my !

2021-06-28 Thread Matus UHLAR - fantomas
/ and http://www.open-spf.org/FAQ/ -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Chernobyl was an Windows 95 beta test site.

Re: can't get mails to be sent outside my server using Postfix!

2021-06-25 Thread Matus UHLAR - fantomas
Le 24/06/2021 à 17:04, Matus UHLAR - fantomas a écrit : On 24.06.21 16:55, Matus UHLAR - fantomas wrote: relayhost = [mail.'external host']:587 http://www.postfix.org/postconf.5.html#relayhost and apparently configure SMTP Authentication by using: smtp_sasl_password_maps =

Re: can't get mails to be sent outside my server using Postfix!

2021-06-24 Thread Matus UHLAR - fantomas
On 24.06.21 16:55, Matus UHLAR - fantomas wrote: post 25 is the default. You can configure alternative port by using: "port 25" relayhost = [mail.'external host']:587 http://www.postfix.org/postconf.5.html#relayhost and apparently configure SMTP Aut

Re: can't get mails to be sent outside my server using Postfix!

2021-06-24 Thread Matus UHLAR - fantomas
mous smtp_tls_security_level=encrypt and put '[mail.'external host'] user:password' into /etc/postfix/sasl_passwd http://www.postfix.org/postconf.5.html#smtp_sasl_password_maps -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-

Re: Unable to get Postfix to respond on port 465

2021-06-15 Thread Matus UHLAR - fantomas
know it's there. We discovered this about 10 minutes before Matus responded and mentioned it. you should switch iptables from iptables-legacy to iptables-nft by using update-alternatives -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to rece

Re: Mail forward vs duplication

2021-06-15 Thread Matus UHLAR - fantomas
X-Envelope-To: header or other header your ISP uses for delivering to multidrop mailboxes. However, yes - if you already receive the same mail multiple times, you only can try to deduplicate it after that. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT

Re: Unable to get Postfix to respond on port 465

2021-06-15 Thread Matus UHLAR - fantomas
e it could be. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Nothing is fool-proof to a talented fool.

Re: Mail forward vs duplication

2021-06-15 Thread Matus UHLAR - fantomas
_client_restrictions=permit_sasl_authenticated,reject dfilt     unix    -       n       n       -       -       pipe   flags=Rq user=filter argv=/usr/local/etc/postfix/disclaimer -f ${sender} -- ${recipient} -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish N

Re: Mail forward vs duplication

2021-06-14 Thread Matus UHLAR - fantomas
_authenticated,reject dfilt     unix    -       n       n       -       -       pipe   flags=Rq user=filter argv=/usr/local/etc/postfix/disclaimer -f ${sender} -- ${recipient} -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail adverti

Re: Unable to get Postfix to respond on port 465

2021-06-13 Thread Matus UHLAR - fantomas
evel (default: empty) The SMTP TLS security level for the Postfix SMTP server; when a non-empty value is specified, this overrides the obsolete parameters smtpd_use_tls and smtpd_enforce_tls. This parameter is ignored with "smtpd_tls_wrappermode = yes". -- Matus UHLAR

Re: Setting text for concurrency limit exceeded

2021-06-12 Thread Matus UHLAR - fantomas
guess he wants to replace the "too many connections from" with customized text. this seems to be hardcoded in sources and I think it's not wise to replace it. however it can be enhanced with smtpd_reject_footer e.g. to provide localized message: http://www.postfix.org/postconf.5.

Re: Clarification request for mua_*_restrictions

2021-06-11 Thread Matus UHLAR - fantomas
nor uncomment: # smtpd_sender_restrictions=$mua_sender_restrictions - sender/recipient restrictions are the same for all clients All just to provide proper error messsages to those clients, after I noticed that unauthenticated client get rejection message for invalid EHLO/HELO. -- Matus UHLAR -

Re: Remote's Receiving mail reate issue

2021-06-07 Thread Matus UHLAR - fantomas
ssage explain enough? Isn't there any possibility that you are replying to a spammer? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu post

Re: authentication required error codes

2021-06-01 Thread Matus UHLAR - fantomas
Matus UHLAR - fantomas: Can I provide "530 5.7.0 Authentication Required." error in smtpd_client_restrictions/smtpd_helo_restrictions somehow? I can think of using: mua_client_restrictions = permit_sasl_authenticated, check_client_access static:{"530 5.7.0 Authentication R

Re: authentication required error codes

2021-06-01 Thread Matus UHLAR - fantomas
On 31.05.21 16:48, Matus UHLAR - fantomas wrote: looking at postfix logs I found out that with standard restrictions inherited from main.cf at ports 465/587, the client gets error message like: May 30 12:05:04 mail postfix/submission/smtpd[22649]: NOQUEUE: reject: RCPT from unknown[192.0.2.1

Re: empty sender in bounce message

2021-06-01 Thread Matus UHLAR - fantomas
end as <> (in reply to RCPT TO command)) they refuse smpty senders. That's violation of RFCs, which say that empty envelope from must not be rejected. you can try listing them in rfc-clueless.org list. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

authentication required error codes

2021-05-31 Thread Matus UHLAR - fantomas
hError z19sm15110351wmk.8 - gsmtp 530 5.7.57 Client not authenticated to send mail. and I think "530 5.7.0 Authentication Required." would be better message on those ports. what's the cleanest way to force this error? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fan

Re: Use both recipient_bcc_maps and always_bcc

2021-05-31 Thread Matus UHLAR - fantomas
not define more than 1 address. But would 2 addresses work using a combination of always_bcc AND recipient_bcc_maps? Or does one of these options render the other one unusable? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Logging - Connect Order

2021-05-30 Thread Matus UHLAR - fantomas
ferent based if there was a previous warning or not. I think guys here mentioned a script that parsed and reorders matching log lines, unfortunately I forgot its name... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Briteverify

2021-05-22 Thread Matus UHLAR - fantomas
browser, safe mode or contact them different way. not a postfix problem though -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I intend to

Re: Question about retaining mail authenticated user

2021-05-21 Thread Matus UHLAR - fantomas
both STRIP/IGNORE in header_checks and PREPEND in policy filter, which makes sure the header you use will be deleted from input stream. but still explaining what you want could lead to better solution for your problem. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I w

Re: Question about retaining mail authenticated user

2021-05-21 Thread Matus UHLAR - fantomas
is it you want to do when delivering mail from different users? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. LSD will make your

Re: Can't disable mx lookup with square brackets in transport map

2021-05-20 Thread Matus UHLAR - fantomas
t IP address into the brackets. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux - It's now safe to turn on your computer. Linux - Teraz mozete pocitac bez obav zapnut.

Re: Emails sent as an authenticated user does not route throu amavis

2021-05-19 Thread Matus UHLAR - fantomas
ess - look at your milters' docs. If users are sending mail over ports 465/587, those ports can have different settings, e.g. disable milters - look at master.cf. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Mail sent thru submission to user on same server.

2021-05-19 Thread Matus UHLAR - fantomas
On 05-18-2021 2:12 pm, Matus UHLAR - fantomas wrote: so, you have multiple instances? On 18.05.21 14:37, post...@ptld.com wrote: No, i don't have multiple instances of a postfix install. Postfix has multiple instances as in: in your other mail you still refer to them as two separate se

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Matus UHLAR - fantomas
the final destination for that To: domain otherwise bounce as user unknown. Easy on two server setup, so far only suggestion to do this on single server setup is by multi-instance setup. You have already said above that you have multiple instances. -- Matus UHLAR - fantomas, uh...@fantomas

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Matus UHLAR - fantomas
On 05-18-2021 11:17 am, Matus UHLAR - fantomas wrote: So, you want postfix X to deliver mail to whatever server is MX for the recipient domain. On 18.05.21 11:45, post...@ptld.com wrote: Yes, and postfix X is not the MX server for the recipient domain. no mailservers I know care about MX

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Matus UHLAR - fantomas
to be delivered locally. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 10 GOTO 10 : REM (C) Bill Gates 1998, All Rights Reserved!

Re: Empty/malformed sender address accepted

2021-05-14 Thread Matus UHLAR - fantomas
allow this address (you can get blacklisted if you refuse it). The point of empty envelope from is to allow notifications about mail, which should not be replied to. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this a

Re: domain.ch in BOTH virtual_mailbox_domains and relay_domains ?

2021-05-14 Thread Matus UHLAR - fantomas
rejected due to: SPF fail - not authorized. Please see http://www.openspf.net/Why?s=mfrom;id=recruit...@kncareers.com;ip=208.185.23 5.45;r=; from= to= proto=ESMTP helo= Isn't ld4prd5.mx.csod.com[208.185.235.45] your backup MX ? you should whitelist those from SPF checks -- Matus

Re: Block auth senders using other domains

2021-05-13 Thread Matus UHLAR - fantomas
; because some users need to be able to send from >1 name (all @mydomain) but using 1 login. I think I want 'reject_unlisted_sender_domain' (which does not exist). On 13/05/2021 12:26, Matus UHLAR - fantomas wrote: you can allow logins/senders with smtpd_sender_login_maps and aft

Re: Block auth senders using other domains

2021-05-13 Thread Matus UHLAR - fantomas
' because some users need to be able to send from >1 name (all @mydomain) but using 1 login. I think I want 'reject_unlisted_sender_domain' (which does not exist). you can allow logins/senders with smtpd_sender_login_maps and after that disable sender - only what you allow as s

Re: SMTP Smart Host Security Best Practices?

2021-05-11 Thread Matus UHLAR - fantomas
"best practices" for this kind of situation? If you accept mail from anyone and pass it further, using different server may be good in case they cause spam outbreak - it will be another server that's flooded off, slow to accept and process mail, getting to blacklists. -- Matus UHLAR

Re: Postfix: SASL authentication failure

2021-05-10 Thread Matus UHLAR - fantomas
saslauthd should run with option "-m /var/spool/postfix/var/run/saslauthd" -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. You h

Re: Override relayhost by MX

2021-05-06 Thread Matus UHLAR - fantomas
te, as some customers have their own NS. "check_recipient_mx_access" option looked promising. On 2021-05-06 12:42, Matus UHLAR - fantomas wrote: this applies for incoming mail, not outgoing. On 06.05.21 14:07, Vytenis Adm wrote: Outbound (SMTP-AUTH) Postfix instance receives mail from our user

Re: Override relayhost by MX

2021-05-06 Thread Matus UHLAR - fantomas
tried looking at transport_maps ? http://www.postfix.org/postconf.5.html#transport_maps you should be able to configure where to send mail to different domains, and "relayhost" would only be applied for default mail -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wi

Re: Redirect emails from localhost to a given host, and normally route the other emails

2021-05-03 Thread Matus UHLAR - fantomas
d mail? If so, try http://www.postfix.org/postconf.5.html#sender_dependent_relayhost_maps note that sender_dependent_relayhost_maps use sender mail address, not sending IP. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising t

Re: Redirect emails from localhost to a given host, and normally route the other emails

2021-05-03 Thread Matus UHLAR - fantomas
tried to only reroute the mails coming from localhost. I couldn't manage to implement both options. What's different on hosts in 192.168.1.0/24 that you want to avoid everything you want to apply for localhost? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/

Re: Postfix shows unknown instead of resolved hostname

2021-04-29 Thread Matus UHLAR - fantomas
] instead of  connect from zg-0416b-243.stretchoid.com[192.241.220.141] The IP has DNS record, so even when reverse does not work, I would like to see the hostname that is connecting can this be configured? On 2021-04-29 10:25, Matus UHLAR - fantomas wrote: no. There's no poing in tru

Re: Postfix shows unknown instead of resolved hostname

2021-04-29 Thread Matus UHLAR - fantomas
Anyone can poing their reverse DNS to any domain they don't own. Get proper reverse/forward name, possibly not generic. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu c

Re: use relay host on direct connection failure

2021-04-29 Thread Matus UHLAR - fantomas
nt.com/?ip=XXX.XXX.XXX.XXX are you sure you are supposed to send mail to outside through port 25? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: Clients Sending Phantom Email

2021-04-29 Thread Matus UHLAR - fantomas
that the client is connecting to the server. ask for their clients' logs. Ask for screenshot of their setup. They apparently don't use your server or their connections are redirected. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to rece

Re: postfix newbe - which standard configuration to use

2021-04-28 Thread Matus UHLAR - fantomas
ter to separate submssion from incoming mail and use proper ports for that. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Saving Private Ry

Re: Want to configure domain localhost to support root

2021-04-26 Thread Matus UHLAR - fantomas
an I mix virtual and real email users on different domains. Why is localhost not allowed, seems like special case might be an answer. Also trying to figure out what configuration to change postfixadmin or postfix. Thanks in advance for your help. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; ht

Re: Specific DNS server

2021-04-22 Thread Matus UHLAR - fantomas
mend people running mailservers and/or spamfilters NOT to use forwarding DNS. perhaps you should use non-forwarding server/view for postfix/spamfilter resolution and forwarding server/view for other resolution. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT

Re: Configuring always_bcc

2021-04-22 Thread Matus UHLAR - fantomas
because is it NOT possible to deliver unchanged mail to always_bcc address, when the always_bcc happens AFTER the mail is changed. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Spam is for losers who can't get business any other way.

Re: Configuring always_bcc

2021-04-21 Thread Matus UHLAR - fantomas
ers,no_address_mappings -o local_header_rewrite_clients= I recomment doing no_address_mappings on port 10025 when receiving mail from amavis, and not globally in the main.cf. On 21.04.21 12:49, Alex wrote: This actually doesn't appear to have made any difference. What could I be doing wr

Re: REDIRECT overrides always_bcc

2021-04-20 Thread Matus UHLAR - fantomas
which reminds me, I have simply added the address in always_bcc to an alias where such mail is redirected. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek re

Re: connect then disconnect; backscatter?

2021-04-18 Thread Matus UHLAR - fantomas
only more efficient solution is afaik nullrouting them with rp_filter, but that disables all packets from such IP I have configured fail2ban with ipset and found it very efficient and easy to maintain with other firewalling system. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: Postfix : corrupted SMTP transactions?

2021-04-15 Thread Matus UHLAR - fantomas
to actually work as expected, as well as, I believe, sasl_type? you should better put sasl options to main.cf, unless you are going to use different SASL types on different ports. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: Postfix : corrupted SMTP transactions?

2021-04-14 Thread Matus UHLAR - fantomas
us output from "postconf -M smtps". this looks like you are running plaintext SMTP on ssl port. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek r

Re: No bayes filtering with a virtual alias. How can I fix?

2021-04-12 Thread Matus UHLAR - fantomas
level could be harder (you can disable it) and still you reject part of spam. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. M$ Win's are shit, do not use it !

Re: alias group and limit

2021-04-12 Thread Matus UHLAR - fantomas
, dsn=2.0.0, status=sent (250 2.0.0 gDnmAMdadGBUTgAA7aWK2g Saved) ... and? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I wonder how m

Re: No bayes filtering with a virtual alias. How can I fix?

2021-04-12 Thread Matus UHLAR - fantomas
nside of your solution is that each mail can be spamassassin-scanned multiple times (once per recipient), which may hugely increase system load. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: n

Re: No bayes filtering with a virtual alias. How can I fix?

2021-04-12 Thread Matus UHLAR - fantomas
ive_override_options=no_address_mappings -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95

Re: inet_protocols

2021-04-11 Thread Matus UHLAR - fantomas
he world. They are... well, just strange, doing everything differently. looks like they are going to stop communicating with part of the world. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovan

Re: warning: dnsblog_query lookup error

2021-04-08 Thread Matus UHLAR - fantomas
On 2021-04-08 14:16, Matus UHLAR - fantomas wrote: in addition to this, you can whitelist outlook's IP ranges at postscreen level, as they "likely" aren't what postscreen is supposed to stop - bots. On 08.04.21 15:31, Benny Pedersen wrote: there is bots at microsoft, th

Re: warning: dnsblog_query lookup error

2021-04-08 Thread Matus UHLAR - fantomas
ey "likely" aren't what postscreen is supposed to stop - bots. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 10 GOTO 10 : REM

Re: Milter calls based on conditions and deliberate delays

2021-04-08 Thread Matus UHLAR - fantomas
s to be able to hold sender's session so you can reject mail during SMTP transaction. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I in

Re: Emails not received when attempting per-user spamassassin command when sending to multiple recipients on a server

2021-04-06 Thread Matus UHLAR - fantomas
ilter (requires amavis). That can refuse spam at SMTP level. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. WinError #9: Out of error messages.

Re: spam - Women Pictures an sharing Contact

2021-04-05 Thread Matus UHLAR - fantomas
- - - 1 postscreen -o content_filter=spamassassin I think content_filter is not option for postscreen. try using spamass-milter or amavisd-milter instead of content_filter. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: problem connecting from Outlook Android

2021-04-02 Thread Matus UHLAR - fantomas
macro_daemon_name=ORIGINATING -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Fucking windows! Bring Bill Gates! (Southpark the movie)

<    2   3   4   5   6   7   8   9   10   11   >