Re: Setting Up Header Checks

2022-03-04 Thread Jaroslaw Rafa
; Did you try apt-get? milter-regex is not in the Ubuntu repositories (at least for 20.04). -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
onfiguration_manual/authentication/user_databases_userdb/ -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
Dnia 21.02.2022 o godz. 13:09:19 Alexey Shpakovsky pisze: > On Mon, February 21, 2022 12:59, Jaroslaw Rafa wrote: > > > > The part I am wondering about is exactly "Dovecot accepts". As far as I > > know, Dovecot does not need to "accept" anyth

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
tion@address->mailbox. Is that your case? But this still doesn't have anything to do with Dovecot "accepting" any email addresses, because Dovecot just provides access to a mailbox. Once you properly log in, you have access to all messages stored in the mailbox, regardless of what e

Re: virtual_mailbox_maps & virtual_alias_maps

2022-02-21 Thread Jaroslaw Rafa
mpletely unneccessary in your case. What funtion exactly does it provide here? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: canonical_maps vs. *_recipient_maps

2022-02-18 Thread Jaroslaw Rafa
pretty rare case for me (I usually work with single-server setups). I did not think that it can be used in such context as rewriting by canonical maps. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpup

Re: Removing an old post

2022-02-15 Thread Jaroslaw Rafa
es where this post exists. But maybe his security team will be happy with removing it from that particular place where they found it... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: www.postfix.org not working from certain locations

2022-02-09 Thread Jaroslaw Rafa
Dnia 9.02.2022 o godz. 13:58:01 Jaroslaw Rafa pisze: > > I think it's just a routing misconfiguration at some major ISP. It might be > hepful that the OP does a traceroute to www.postfix.org and tells where it > stops. I did a traceroute to the first five sites that fail according

Re: www.postfix.org not working from certain locations

2022-02-09 Thread Jaroslaw Rafa
rg and tells where it stops. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: www.postfix.org not working from certain locations

2022-02-09 Thread Jaroslaw Rafa
ee availability test results here: > https://ping-admin.com/free_test/result/16443944516w2j65r1y4j0kca10wdw3q.html > (not sure if this link will be valid for long, though). Poland, ISP is UPC ( https://www.upc.pl/ ), works OK. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a m

Re: EHLO/HELO whitelist?

2022-02-03 Thread Jaroslaw Rafa
P address, for example by using permit_mynetworks ? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Pls Help - Postfix Multi-Domain SMTP Banner with Postscreen

2022-02-01 Thread Jaroslaw Rafa
mtpd_" :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: smtpd in master.cf

2022-01-24 Thread Jaroslaw Rafa
is run to provide this service. Both services, on port 25 and 587, are provided by two instances of the same executable, therefore "smtp" in both cases. After "smtpd" there can be arguments used to call this executable - these arguments are used to make both services operate differently. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: [Announcement] First public release of PostQF

2022-01-24 Thread Jaroslaw Rafa
;overkill" for using one simple utility? Why couldn't it just use the system-installed Python? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Why would dovecot not be answering

2022-01-23 Thread Jaroslaw Rafa
t have one in the configuration shown in your mail) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: TLS ciphers

2022-01-11 Thread Jaroslaw Rafa
Postfix authors that they have done it right. To implement TLS support, one certainly has to know more about it than an average mail administrator. So just trust them. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once

Re: Received-SPF: Softfail

2022-01-11 Thread Jaroslaw Rafa
Dnia 11.01.2022 o godz. 12:51:54 Fourhundred Thecat pisze: > > On 2022-01-11 11:32, Jaroslaw Rafa wrote: > >Dnia 11.01.2022 o godz. 05:00:43 Fourhundred Thecat pisze: > >> > >>What I am asking is, are there situations where legitimate sender > >

Re: Received-SPF: Softfail

2022-01-11 Thread Jaroslaw Rafa
Dnia 11.01.2022 o godz. 05:00:43 Fourhundred Thecat pisze: > > What I am asking is, are there situations where legitimate sender > (non-spam) would generate soft fail? Forwarding. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they

Re: TLS enforcement options?

2022-01-10 Thread Jaroslaw Rafa
your metadata. And you are right with regard to the fact that metadata is often more important in "spying" on the individual than the actual data transmitted; but simple solutions like HTTPS don't protect you from metadata being collected. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- &qu

Re: TLS enforcement options?

2022-01-10 Thread Jaroslaw Rafa
pient of the mail can access its content. No operator of any mail server is able to read your message. If you use only level 2, then operators of both sending and receiving server (and any intermediate server, if there are any) can have access to the message in plaintext form. -- Regards,

Re: TLS enforcement options?

2022-01-10 Thread Jaroslaw Rafa
somehow commerce-related and collect personal data. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: TLS enforcement options?

2022-01-09 Thread Jaroslaw Rafa
it is not - and *should not* be - mandatory. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: question for the part location of multipart message

2022-01-02 Thread Jaroslaw Rafa
all text/plain parts from multipart messages, up to 5 levels nesting of multipart messages one inside another (that level is configurable via a parameter in the script). If you want to look at it, it's here: http://rafa.eu.org/media/textconv.pl -- Regards, Jaroslaw Rafa r...@rafa.eu.org -

Re: Google and UK.COM domains

2021-12-14 Thread Jaroslaw Rafa
Dnia 14.12.2021 o godz. 13:06:49 Andrew Sullivan pisze: > On Mon, Dec 13, 2021 at 12:31:07PM +0100, Jaroslaw Rafa wrote: > >That's exactly what Public Suffix List is for. It lists all such domains. > > Well, to be a little more pointed about it, it attempts to provide a > volu

Re: Google and UK.COM domains

2021-12-14 Thread Jaroslaw Rafa
and policy, and maybe be able to demonstrate a bunch of actual independent subdomains registered under this domain, run by someone else than you? Because that's the way eu.org, uk.com and similar operate. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years,

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
not use any generic SLDs under country's TLD (at least not mandatory ones), but just allow to register names directly under country's TLD, like somename.de, somename.hu, somename.nl etc. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
lic Suffix List is for. It lists all such domains. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
at PSL is for - to specify which domains should *not* be mixed up with one another. Don't defend Google's email service, it's already so bad that it's not worth defending... Friends should not let friends use Gmail - that's all that can be said about it. -- Regards, Jaroslaw Rafa r...@rafa.eu.org

Re: Google and UK.COM domains

2021-12-13 Thread Jaroslaw Rafa
yes, Google IS dumb enough to do so. > If so, given they allow spammers virtually free range to send FROM > gmail this is a bit hypocritical. 100% agree. They simply don't care about anyone that isn't using Gmail. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, wh

Re: what's best guess record for SPF

2021-12-09 Thread Jaroslaw Rafa
fix) usually use. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: virtual mailbox domains??

2021-12-06 Thread Jaroslaw Rafa
0.0, status=sent (250 2.0.0 V/yJDH9grmHtmgAAdabr2Q Saved) Dec 6 19:11:59 softlinksys postfix/qmgr[38286]: 04E4CA06C5: removed It's only strange why your qmgr is logging empty "from", and lmtp empty "to". But this message should be somewhere on your system; look for it. -- Reg

Re: virtual mailbox domains??

2021-12-06 Thread Jaroslaw Rafa
you should try to configure an email client like Thunderbird and check email sending/receiving with it. Not everything at once! -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with h

Re: are my helo restrictions too strict ?

2021-12-03 Thread Jaroslaw Rafa
known reject_unknown_helo_hostname is known to produce quite a lot of false positives, and it is not recommended to use this restriction. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Changing Message-Id for authenticated users

2021-12-01 Thread Jaroslaw Rafa
check for authenticated users (ie. submission ports). -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Postgrey - whitelisting subdomains

2021-11-26 Thread Jaroslaw Rafa
k.com). The *client* address in your case is mx0f-00376703.gpphosted.com, so it is *not* from domain dhs.gov. So it was not whitelisted. As far as I know, there's no option to whitelist *sender* addresses in postgrey. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, w

Re: [EXTERNAL] Nessus says I have an open relay

2021-11-09 Thread Jaroslaw Rafa
ne) and there's no reason to replace them (or sometimes there isn't even anything to replace them with). The concept of trusted hosts/networks has a reason behind it and cannot be abandoned so simply... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school,

Re: Nessus says I have an open relay

2021-11-09 Thread Jaroslaw Rafa
ix should outright reject the message without trying to deliver it. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: method to discard email with body containing gmail address

2021-11-07 Thread Jaroslaw Rafa
e in mutt, it puts the e-mail address of the original sender (not you) at the beginning of the subject of the forwarded message. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived

Re: Having unexpected results using sender_canonical_maps

2021-11-04 Thread Jaroslaw Rafa
nclude some.domain literally in your regular expression, then it won't match again on the already transformed address, which does not contain some.domain. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpup

Re: Rewriting the MAILER-DAEMON address and header formats

2021-09-18 Thread Jaroslaw Rafa
; (via the milter application that I've configured), it still does not > apply any header checks to them. If you are able to apply a milter to them, you can write a milter that rewrites those headers. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Problems emailing bell.net or sympatico.ca addresses

2021-09-18 Thread Jaroslaw Rafa
doesn't let > you see anyone else's content. Wierdly unhelpful. I vaguely remember that this topic has been discussed several times on mai...@mailop.org mailing list. I highly recommend this mailing list for dealing with deliverability issues. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- &

Re: Google spam...

2021-08-18 Thread Jaroslaw Rafa
At least they will know :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Best current practice to analyze brute force login attempts?

2021-07-30 Thread Jaroslaw Rafa
, with the time stamp as the only link between both. Well, maybe I'm using quite old versions of Postfix and Dovecot, but with default logging setup on Debian plus "auth_verbose=yes" in Dovecot config I get in /var/log/mail.log lines like: Jul 30 23:15:17 rafa postfix/smtpd[23291]: warnin

Re: Has rfc2487 been obsoleted and mandatory TLS in smtpd is now kosher?

2021-07-29 Thread Jaroslaw Rafa
w have a formal business justification to be not compliant with the mentioned security guidelines - because they will be unable to communicate with their customers if they comply. That's just how the corporate bureaucracy works... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million y

Re: Unable to get Postfix to respond on port 465

2021-06-14 Thread Jaroslaw Rafa
Dnia 14.06.2021 o godz. 09:51:30 Linda Pagillo pisze: > > Any other ideas of what may be causing this? Is it possible that the client is trying STARTTLS (and not TLS-wrapped SMTP) on port 465? Have you tried a different mail client instead of Outlook? -- Regards, Jaroslaw Raf

Re: Does smtpd_milters=inet:.... round-robin if the hostname has multiple IPs?

2021-05-31 Thread Jaroslaw Rafa
-- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: authentication required error codes

2021-05-31 Thread Jaroslaw Rafa
strictions > # -o smtpd_sender_restrictions=$mua_sender_restrictions > > but no proposed values for those. These lines are commented out. Did you uncomment them in master.cf? If you didn't, then you are probably keeping global values from main.cf for these parameters without overriding them. -- Reg

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
service. And if Postfix weren't there, then Dovecot submission service will relay mail via...? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
to be available: "The Dovecot SMTP submission service directly proxies the mail transaction to the SMTP relay configured with the following settings:" -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: too many errors after RCPT

2021-05-18 Thread Jaroslaw Rafa
ngle message with multiple recipients? Tell him to use some software that will send one message per recipient and per session. This will take time, but it should be basically one-time job and will allow him to catch the bounces and remove the bouncing addresses from his list. -- Regards,

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
Dnia 18.05.2021 o godz. 13:47:15 post...@ptld.com pisze: > >On 05-18-2021 12:36 pm, Jaroslaw Rafa wrote: > >If Postfix on server X is only for submission, then how does Postfix on > >server Y deliver mail to server X? > > It doesn't because as you said, server X is only f

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
al mail if not deliver it locally? Where else can it be delivered if there is only one server? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Mail sent thru submission to user on same server.

2021-05-18 Thread Jaroslaw Rafa
ween server X and server Y so that only server Y can access the services on server X (iptables). -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Message sent by SMTP get lost whereas those via pickup(sendmail) are OK

2021-05-17 Thread Jaroslaw Rafa
tory) TLS whenever possible, only if the server does not offer it, but offers TLS-wrapped port 465, fall back to that instead. But all this discussion has nothing to the original question, as the OP explictly wanted to test sending mail via port 25. -- Regards, Jaroslaw Rafa r...@ra

Re: Message sent by SMTP get lost whereas those via pickup(sendmail) are OK

2021-05-17 Thread Jaroslaw Rafa
ail. Thunderbird, as far as I remember (I haven't used it for a few years, I use Evolution as my desktop client now) can be configured to use locally installed sendmail, but this is a special case. Submission or SMTP is still the default method of sending mail it uses. -- Regards, Jar

Re: Message sent by SMTP get lost whereas those via pickup(sendmail) are OK

2021-05-16 Thread Jaroslaw Rafa
rpose > SMTP transaction tester utility program for generating test emails > using SMTP transactions. For example: Ubuntu desktop should have Thunderbird preinstalled. Why not just try to send mail using a regular mail client? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a mill

Re: Override relayhost by MX

2021-05-06 Thread Jaroslaw Rafa
have full control over, you usually send mail directly and not via relayhost. In both cases there's no issue. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Override relayhost by MX

2021-05-06 Thread Jaroslaw Rafa
here: http://www.postfix.org/tcp_table.5.html Seems like this can be a solution for you. You have of course to write the appropriate program that replies with the correct server address depending on recipient's email adress. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million

Re: Controlling maildir sub-folder delivery?

2021-05-04 Thread Jaroslaw Rafa
t folder) it works well. You can think of creating something similar if you only want to deliver to a particular folder. For something more general, however, using sieve (or even procmail, as mentioned) would be definitely a better solution. -- Regards, Jaroslaw Rafa r...@rafa

Re: Postfix shows unknown instead of resolved hostname

2021-04-29 Thread Jaroslaw Rafa
ought that sendmail logs the HELO > > unknown (HELO-or-EHLOname [ipaddress]) Maybe you're right, I don't remember too well, as I stopped using sendmail quite long time ago. However, I'm sure it also logged non-matching DNS in somehow similar way... -- Regards, Jaroslaw Rafa r...@rafa.eu.o

Re: Postfix shows unknown instead of resolved hostname

2021-04-29 Thread Jaroslaw Rafa
sendmail logged something like unknown (reverse.dns.hostname) [ip.ad.dr.ess] and when they match, it logged just reverse.dns.hostname [ip.ad.dr.ess] I guess the OP would be satisfied if Postfix did something similar? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, wh

Re: postfix newbe - which standard configuration to use

2021-04-28 Thread Jaroslaw Rafa
his Postfix server) without the need to add authentication to it... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: postfix newbe - which standard configuration to use

2021-04-28 Thread Jaroslaw Rafa
pposite: if you will only be sending mail via VPN (that means from a fixed IP address), then don't bother using submission port, just add that IP to "mynetworks" and send the mail to your server the normal way via port 25... Less to set up... -- Regards, Jaroslaw Rafa r...@rafa.eu.org --

Re: Certificate Postfix.org missing?

2021-04-26 Thread Jaroslaw Rafa
egards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Certificate Postfix.org missing?

2021-04-23 Thread Jaroslaw Rafa
Dnia 23.04.2021 o godz. 08:27:31 Phil Stracchino pisze: > On 4/23/21 5:15 AM, Jaroslaw Rafa wrote: > > However, "thanks" to Google and other > > big e-mail providers who started to enforce that EVERY email send to them > > must pass SPF/DMARC check - as a method

Re: Change default reject message

2021-04-23 Thread Jaroslaw Rafa
local mails come from existing accounts in your own domain, right? What other source could they come from? So you will be not sending bounces out to the Internet. They will stay at your local machine. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to scho

Re: AW: AW: Change default reject message

2021-04-23 Thread Jaroslaw Rafa
h a thing in non_smtpd_milters=. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Certificate Postfix.org missing?

2021-04-23 Thread Jaroslaw Rafa
to them must pass SPF/DMARC check - as a method of "antispam protection" (which it isn't, because spammer can have a perfectly valid SPF/DMARC setup) - people were forced to adopt it universally, whether necessary or not (which for example causes problems with mailing lists). -- Regards,

Re: Certificate Postfix.org missing?

2021-04-22 Thread Jaroslaw Rafa
(all newest releases) connect perfectly to http-only sites. Maybe you have HTTPS only mode turned on in the preferences (AFAIK, it is not on by default), or have some extension like "HTTPS Everywhere" installed? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
't mean split views. I meant to create different "type forward" zones in /etc/named.conf with different set of forwarders for different domain suffixes. But I don't know what to do if you have everything under the same domain suffix. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
t all, or "hosts: files" when only /etc/hosts is used and DNS is not used at all. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: possibly stupid question about tls

2021-04-18 Thread Jaroslaw Rafa
tings in Debian. Here is conection from Postfix list server for your message: Apr 18 12:45:31 rafa postfix/smtpd[1653]: Anonymous TLS connection established from camomile.cloud9.net[168.100.1.3]: TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -

Re: Trusting postfix client certs for relaying

2021-04-17 Thread Jaroslaw Rafa
relaying at all. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Postfix : corrupted SMTP transactions?

2021-04-17 Thread Jaroslaw Rafa
or an alias. We can just use port number in the Postfix master.cf file, then there will be no problem, right? (I am actually running another smtps instance on a nonstandard port on my server, and use just port number in master.cf, so I guess the same applies for standard ports) -- Regards, J

Re: Postfix : corrupted SMTP transactions?

2021-04-14 Thread Jaroslaw Rafa
artext SMTP session (like on port 587) in case of "TLS". In recent versions they changed these settings to "TLS over dedicated port" and "STARTTLS after connection". -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: inet_protocols

2021-04-11 Thread Jaroslaw Rafa
ll, just strange, doing everything differently. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: spam - Women Pictures an sharing Contact

2021-04-05 Thread Jaroslaw Rafa
write your own content filtering rules (you can use eg. spamassassin, procmail, sieve etc. to do the actual filtering - there are many tools available) that target these particular messages. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they

Re: inet_protocols

2021-04-02 Thread Jaroslaw Rafa
iendly company/ISP or company/isp who doesn't care). L2 and L3 lists are exactly the problem. They recently changed rules for these and now list almost everyone there ;) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: onc

Re: problem connecting from Outlook Android

2021-04-01 Thread Jaroslaw Rafa
Dnia 1.04.2021 o godz. 19:38:30 DEPRÉ Gaëtan - NGServers.com pisze: > > I enabled port 465, but no chance. Still the same problem, only with > android/outlook... Looks like you have to sniff network traffic to see what's actually going on... -- Regards, Jaroslaw Rafa r...@ra

Re: inet_protocols

2021-04-01 Thread Jaroslaw Rafa
garding UCEPROTECT practices and basically everybody agreed that it isn't a reliable blacklist and they can't be trusted. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Allowing Special Characters in Email addresses

2021-03-24 Thread Jaroslaw Rafa
eiving server (MX for "example.com" domain) to forward the mail via UUCP to the machine it knows as "joe" and deliver it to user "b" on that machine :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Echange virtual and local domain

2021-03-22 Thread Jaroslaw Rafa
counts in both domains. If you don't want this, you have to use recipient access restrictions like in the example I sent previously. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
Dnia 21.03.2021 o godz. 18:43:40 Viktor Dukhovni pisze: > On Sun, Mar 21, 2021 at 04:22:06PM +0100, Jaroslaw Rafa wrote: > > > If you want "maennerchor-kirchseeon.de" to be a local domain instead, you > > need to make "the-grue.de" a virtual domain, > &g

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
Dnia 21.03.2021 o godz. 18:48:12 Viktor Dukhovni pisze: > On Sun, Mar 21, 2021 at 05:14:39PM +0100, Jaroslaw Rafa wrote: > > > > > /^examplelist.*@list\.maennerchor-kirchseeon\.de$/DUNNO > > /@list\.maennerchor-kirchseeon\.de$/550 5.1.1 User unknown in lo

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
dresses are accepted only in that domain and not any other. So you basically have a separate domain for the mailing list only. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Echange virtual and local domain

2021-03-21 Thread Jaroslaw Rafa
nerchor-kirchseeon.de" from there) and also appropriate mappings for "the-grue.de" domain in /etc/postfix/vmailbox. Be aware that any local accounts - if you have any - will now become adddresses in the domain "maennerchor-kirchseeon.de" and not "the-grue.de" as p

Re: local system mail

2021-02-25 Thread Jaroslaw Rafa
ntent filter to running it as a milter as well. At least that was in my case :) -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Deprecated: white is better than black

2021-02-24 Thread Jaroslaw Rafa
Americans. In my country there is a proverb, which literally translated means "being more popish than the Pope himself". This is exactly what happened here. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was

Re: replying with OK

2021-02-24 Thread Jaroslaw Rafa
to a non-existent user WILL get a rejection and must be prepared to handle this. -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Cloud9.net related responses

2021-02-12 Thread Jaroslaw Rafa
use actual mailing list software for that? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Can I get postfix to use what's returned by dnsdomainname for mydomain?

2021-02-10 Thread Jaroslaw Rafa
ess there are still some things you didn't describe... -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: Can I get postfix to use what's returned by dnsdomainname for mydomain?

2021-02-10 Thread Jaroslaw Rafa
some placeholder in your "master" cf file instead of domain name, that gets replaced by a proper value during copying file to the destination server. This would probably require adding some custom script to the command that deploys files onto the target that modifies the file after downloading

Re: why people connect clamav as milter in main.cf and smapassassin in master.cf?

2021-02-10 Thread Jaroslaw Rafa
amavis, very popular, that integrates clamav and spamassassin. Myself I stopped using spamassassin as content filter when I needed to implement DKIM signing milter in my server, because use of a content filter caused outgoing mail to be signed twice - and switched to spamass-milter. -- Regards,

Re: Can I get postfix to use what's returned by dnsdomainname for mydomain?

2021-02-10 Thread Jaroslaw Rafa
ot - it is enough to set it once. So I would try to set it in a script that deploys/copies Postfix configuration to the target machine. -- Pozdrowienia, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: ipv6, SPF, DMARC

2021-02-06 Thread Jaroslaw Rafa
l-smtp-in.l.google.com has address 64.233.162.27 gmail-smtp-in.l.google.com has address 64.233.162.26 gmail-smtp-in.l.google.com has IPv6 address 2a00:1450:4010:c05::1a gmail-smtp-in.l.google.com has IPv6 address 2a00:1450:4010:c05::1b raj@jarek-02:~$ -- Regards, Jaroslaw Rafa r...@rafa.

Re: on not being spam - mostly about DKIM and DMARC

2021-02-04 Thread Jaroslaw Rafa
or perfectly correctly DKIM signed messages. I don't know why it is so, but I see it in SA results all the time. As I totally do not care about DKIM and it is by no way a spam mark to me, I had no motivation to investigate it any further. Maybe someone knows more... -- Regards, Jaroslaw Ra

Re: bl.spamcop.net false positives

2021-02-01 Thread Jaroslaw Rafa
d instead of just returning NXDOMAIN? -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years, when kids go to school, they're gonna know: once there was a Hushpuppy, and she lived with her daddy in the Bathtub."

Re: bl.spamcop.net false positives

2021-01-31 Thread Jaroslaw Rafa
l.spamcop.net. 300 IN A 91.195.240.87 But isn't this a commonly accepted conventions for RBLs that they return addresses from 127.0.0.0/8 only in case of positive response? Shouldn't Postfix (or any other MTA) ignore the RBL response if it's not from 127.0.0.0/8 range? -- Regard

Re: batching all mails to one or more domains to a non-permanently-powered machine with dynamic addresses

2021-01-29 Thread Jaroslaw Rafa
from a single drop box on an ISP and SMTP-forwarding it based on header addresses. (We don't really recommend this, though, as it may lose important envelope-header information. ETRN or a UUCP connection is better.)" -- Regards, Jaroslaw Rafa r...@rafa.eu.org -- "In a million years

<    1   2   3   4   5   >