Queue postfix sending when on failover WAN

2023-01-13 Thread Simon Wilson
for any ideas. -- Simon Wilson M: 0400 12 11 16

Re: ot: SPF/DKIM woes

2022-09-18 Thread Simon Wilson
support. YMMV. Simon. -- Simon Wilson M: 0400 12 11 16

Re: Postfix.org website

2022-09-09 Thread Simon Wilson
From: Ralph Seichter Sent: Friday, 9 September 2022 10:55 pm To: postfix-users@postfix.org Subject: Re: Postfix.org website * Simon Wilson: > Noting that whilst some may consider that block excessive, it does > appear that some 'authorities', including at least the Australian > gov

Re: Postfix.org website

2022-09-09 Thread Simon Wilson
- Message from Simon Wilson - Date: Fri, 09 Sep 2022 17:26:09 +1000 From: Simon Wilson Reply-To: si...@simonandkate.net Subject: Postfix.org website To: Postfix users Yet I cannot open www.postfix.org (either over http://www.postfix.org or https://www.postfix.org

Postfix.org website

2022-09-09 Thread Simon Wilson
direction happening? I know there was chat on the mailing list about http/https on www.postfix.org earlier in the year, but this seems odd. Simon. -- Simon Wilson M: 0400 12 11 16

Re: AW: MTA-STS implementation

2022-08-26 Thread Simon Wilson
e-mta-sts-in-postfix-without-overriding-dane -- Simon Wilson M: 0400 12 11 16

add alias without reload

2022-05-14 Thread wilson
After adding alias to: virtual_alias_maps and run: postmap virtual_alias_maps postfix can know the alias was added even if there is no postfix reload. How does postfix know the alias was added? Thanks

snappy webmail

2022-05-04 Thread wilson
has anyone been using this wm client? https://snappymail.eu/ can you share your user experience on it? thank you.

what's a encrypted email?

2022-04-27 Thread wilson
today everyone claim they are encrypted email provider. what's the definition of an encrypted email? messages and headers and logs were encrypted in the rest? Thanks

Re: Muliple mail delivery

2022-03-23 Thread Homer Wilson Smith
Aliases can take a comma-separated list of file locations, in addition to pipes, usernames, and the like. That solves what you are asking for. How would you propose to handle syncing the state of which messages have been marked read, etc? NO idea, the idea thought is simply to have a

Muliple mail delivery

2022-03-23 Thread Homer Wilson Smith
Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightlink.com Is that too much to ask? http://www.lightlink.com

Re: Removing an old post

2022-02-15 Thread Simon Wilson
) is to ask that it get deleted off the interwebs. Never mind horse bolted gate shutting... the gate hinges have rusted and the gate has fallen over on this one. It would be funny if it were not quite so disturbing. -- Simon Wilson M: 0400 12 11 16

Re: Logging silence

2021-11-28 Thread Simon Wilson
- Message from John Stoffel -    Date: Sun, 28 Nov 2021 22:58:01 -0500    From: John Stoffel Subject: Re: Logging silence      To: si...@simonandkate.net      Cc: John Stoffel , postfix-users@postfix.org "Simon" == Simon Wilson writes: Simon> - Message from

Re: Logging silence

2021-11-28 Thread Simon Wilson
- Message from John Stoffel -    Date: Sun, 28 Nov 2021 21:37:12 -0500    From: John Stoffel Subject: Re: Logging silence      To: si...@simonandkate.net      Cc: postfix-users@postfix.org "Simon" == Simon Wilson writes: Simon> I feel like I'm missing something r

Logging silence

2021-11-28 Thread Simon Wilson
d -- back to normality ...where as can be seen it was logging OK in January, then it stopped. Permissions on the log file: -rw--- 1 root root0 Nov 28 03:27 maillog What am I missing?? -- Simon Wilson

Re: Using a different DNS to ask zen.spamhaus.org for DNSBL info?

2021-10-21 Thread Simon Wilson
local zone RPZ overrides that I have. Simon. -- Simon Wilson M: 0400 12 11 16

Re: STARTTLS abuse

2021-09-09 Thread Simon Wilson
postfix/smtpd[817446]: disconnect from scanner21.about.spyse.com[165.227.159.53] auth=0/1 commands=0/1 (RHEL 8) -- Simon Wilson M: 0400 12 11 16

Re: reject_sender_login_mismatch

2021-07-31 Thread Simon Wilson
- Message from Wietse Venema - Date: Sat, 31 Jul 2021 09:45:00 -0400 (EDT) From: Wietse Venema Reply-To: Postfix users Subject: Re: reject_sender_login_mismatch To: Postfix users Simon Wilson: A quick query on?smtpd_sender_login_maps format. I have this working

Re: reject_sender_login_mismatch

2021-07-31 Thread Simon Wilson
Am 31. Juli 2021 06:06:17 UTC schrieb Simon Wilson : A quick query on smtpd_sender_login_maps format. I have this working well on port 587 to ensure that specified SASL-authenticated users only can send emails from their owned email addresses. So I have in a file 'controlled_envelope_senders

reject_sender_login_mismatch

2021-07-31 Thread Simon Wilson
? Or does it need to have *something* on the RHS? Thanks Simon -- Simon Wilson M: 0400 12 11 16

Re: Mail not being sent to file

2021-06-17 Thread Simon Wilson
://git.centos.org/rpms/postfix/blob/aebf407fea0eeff2335e0d09c70514d7046e7cad/f/SOURCES/postfix.service Standing by earlier comment - this was a change from C7 to C8, not a change within C8. Simon. -- Simon Wilson M: 0400 12 11 16

Re: Mail not being sent to file

2021-06-17 Thread Simon Wilson
rvada - 2:3.5.8-1 - New version Resolves: rhbz#1688389 When did you first see the change? We are possibly straying a little from this mailing list's function... Simon. -- Simon Wilson M: 0400 12 11 16

Re: Mail not being sent to file

2021-06-17 Thread Simon Wilson
to the postfix service's private /tmp. You *could* return it to the way it worked before by changing the service definition file and removing privatetmp - assuming you were comfortable with opening up postfix /tmp to be normal system /tmp - others far smarter than I with Postfix would be better

Re: Mail not being sent to file

2021-06-17 Thread Simon Wilson
;somealias: /home/simon/somefile" >> /etc/aliases && newaliases [root@emp87 ~]# echo "test" | mail somealias@localhost [root@emp87 ~]# cd /home/simon [root@emp87 simon]# cat /home/simon/somefile {content as expected} Simon. -- Simon Wilson M: 0400 12 11 16

Re: Mail not being sent to file

2021-06-16 Thread Simon Wilson
7: [root@emp75 ~]# echo "somealias: /tmp/somefile" >> /etc/aliases && newaliases [root@emp75 ~]# echo "test" | mail somealias@localhost [root@emp75 ~]# ls /tmp/somefile /tmp/somefile (contents as expected) Simon. -- Simon Wilson M: 0400 12 11 16

Re: Disable Logging By Host

2021-06-10 Thread Simon Wilson
ogd[945534]: warning: ~ action is deprecated, consider using the 'stop' statement instead [v8.1911.0-7.el8 try https://www.rsyslog.com/e/2307 ], it will still work, just with the warnings. To remove the warnings use 'stop' instead. :msg, contains, "whatever" stop -- Simon Wilson M: 0400 12 11 16

Re: discarding EHLO keywords: CHUNKING

2021-05-23 Thread Simon Wilson
"incompatibilities". There is a  Bugzilla with the info, I'll see if I can find it again.  One of them is to set CHUNKING off by default, so unless you are  already explicitly setting smtpd_discard_ehlo_keywords in your config  the new default will be applied.  Simon Wilson M: 04

Re: discarding EHLO keywords: CHUNKING

2021-05-23 Thread Simon Wilson
d it again.  One of them is to set CHUNKING off by default, so unless you are already explicitly setting smtpd_discard_ehlo_keywords in your config the new default will be applied.  Simon Wilson M: 0400 121 116 From: Viktor Dukhovni Sent: Monday, 24 May 20

Re: Briteverify

2021-05-22 Thread Simon Wilson
54.225.108.187 54.235.119.112 107.20.134.42 107.20.207.58 107.20.218.183 107.20.232.98 107.20.235.139 107.20.249.220 107.21.204.157 107.22.212.75 184.72.250.175 184.73.205.138 Thanks David, this was very useful. Simon -- Simon Wilson M: 0400 12 11 16

Re: Briteverify

2021-05-22 Thread Simon Wilson
oys at briteverify. I'm assuming a 50% reduction in postscreen delay may have an unwanted impact on inbound spam :( I'll see how it goes. Thanks again Bill. Simon -- Simon Wilson M: 0400 12 11 16

Re: Briteverify

2021-05-22 Thread Simon Wilson
Simon Wilson is rumored to have said: Question about one of those services that validates email addresses on the fly when you fill in a form... There is one (Briteverify) which seems to fail email addresses at our postfix server for an unknown reason. Let's start with 2 stipulations: 1

Re: Briteverify

2021-05-22 Thread Simon Wilson
> May 22 17:17:54 emp87 postfix/smtpd[805371]: NOQUEUE: reject: RCPT  > from smtpout10.briteverify.com[107.20.235.139]: 550 5.1.1  > : > Recipient address rejected: User unknown in virtual alias table; > from= > to= > proto=SMTP  > helo= Is that your email adrress?         Wietse No. My

Briteverify

2021-05-22 Thread Simon Wilson
. Simon. -- Simon Wilson M: 0400 12 11 16

Re: RHEL packaged postfix jump

2021-05-19 Thread Simon Wilson
- Message from Viktor Dukhovni - Date: Wed, 19 May 2021 00:46:08 -0400 From: Viktor Dukhovni Reply-To: postfix-users@postfix.org Subject: Re: RHEL packaged postfix jump To: postfix-users@postfix.org On Wed, May 19, 2021 at 12:01:00PM +1000, Simon Wilson wrote

Re: RHEL packaged postfix jump

2021-05-18 Thread Simon Wilson
if needed, but if there are any obvious gotchas will look at those first. Thanks Simon. - End message from Simon Wilson - -- Simon Wilson M: 0400 12 11 16

RHEL packaged postfix jump

2021-05-18 Thread Simon Wilson
obvious gotchas will look at those first. Thanks Simon. -- Simon Wilson M: 0400 12 11 16

Re: Milters and policy

2021-04-23 Thread Simon Wilson
? (AFAIK each invocation of a policy server can only return a single action?) Hi Nick, Those are two lines from two different emails - even my slow system doesn't take 24 hours to process an email :-D Unless I am misunderstanding your question? Simon. -- Simon Wilson M: 0400 12 11 16

Re: Specific DNS server

2021-04-22 Thread Simon Wilson
- Message from Wietse Venema - Date: Thu, 22 Apr 2021 10:01:09 -0400 (EDT) From: Wietse Venema Subject: Re: Specific DNS server To: si...@simonandkate.net Cc: postfix-users@postfix.org Simon Wilson: Is there a way to make Postfix/postscreen use a specific DNS

Specific DNS server

2021-04-22 Thread Simon Wilson
the mail server... but my first question is whether postfix has or could have ability to have a specific nameserver (as Spamassassin does), or if this would be a Bad Idea (TM) for reasons unknown to me. Simon. -- Simon Wilson M: 0400 12 11 16

Re: Opendmarc in after-Amavis smtpd fails

2021-04-13 Thread Simon Wilson
s it. I know it's a different setup to yours, but may provide an alternate route. Simon. -- Simon Wilson M: 0400 12 11 16

Re: Milters and policy

2021-04-02 Thread Simon Wilson
which is why I think ***a DMARC processor that assumes any reported SPF result relates to the Mail From of the message is buggy***. Scott K" (***emphasis added***) Simon -- Simon Wilson M: 0400 12 11 16

Re: Milters and policy

2021-04-01 Thread Simon Wilson
- Message from Dan Mahoney - Date: Thu, 1 Apr 2021 16:19:05 -0700 From: Dan Mahoney Subject: Re: Milters and policy To: si...@simonandkate.net Cc: postfix-users@postfix.org On Mar 31, 2021, at 18:23, Simon Wilson wrote:  ...if multiple milters are called

Re: Milters and policy

2021-03-31 Thread Simon Wilson
Thanks again Benny. I have policyd-spf set to insert an AR header, and OpenDMARC set to trust the Authserv-Id added in Authentication-Results headers by policyd-spf and OpenDKIM. All working nicely and good to understand the sequence. Simon. -- Simon Wilson M: 0400 12 11 16

Re: Milters and policy

2021-03-31 Thread Simon Wilson
pd_milters = inet:127.0.0.1:8891,inet:127.0.0.1:8893 I.e. in the example above if OpenDMARC is to see and trust an already-run OpenDKIM Authentication-Results header is the order of specifying the milters important? Simon -- Simon Wilson M: 0400 12 11 16

Re: Milters and policy

2021-03-31 Thread Simon Wilson
- Message from Benny Pedersen - Date: Thu, 01 Apr 2021 01:50:15 +0200 From: Benny Pedersen Subject: Re: Milters and policy To: postfix-users@postfix.org On 2021-04-01 01:43, Simon Wilson wrote: Quick question please: Which does Postfix run first - a milter specified

Milters and policy

2021-03-31 Thread Simon Wilson
check_policy_service unix:private/policyd-spf permit Thanks. -- Simon Wilson M: 0400 12 11 16

Re: Setting up virtual alias domains and maps - failing to deliver

2021-03-23 Thread Simon Wilson
- Message from Simon Wilson - Date: Wed, 24 Mar 2021 09:57:37 +1000 From: Simon Wilson Reply-To: si...@simonandkate.net Subject: Re: Setting up virtual alias domains and maps - failing to deliver To: postfix-users@postfix.org - Message from Noel Jones

Re: Setting up virtual alias domains and maps - failing to deliver

2021-03-23 Thread Simon Wilson
- Message from Noel Jones - Date: Tue, 23 Mar 2021 12:46:29 -0500 From: Noel Jones Reply-To: njo...@megan.vbhcs.org Subject: Re: Setting up virtual alias domains and maps - failing to deliver To: postfix-users@postfix.org On 3/23/2021 6:31 AM, Simon Wilson wrote

Re: Setting up virtual alias domains and maps - failing to deliver

2021-03-23 Thread Simon Wilson
- Message from Simon Wilson - Date: Tue, 23 Mar 2021 21:31:29 +1000 From: Simon Wilson Reply-To: si...@simonandkate.net Subject: Re: Setting up virtual alias domains and maps - failing to deliver To: postfix-users@postfix.org - Message from Simon Wilson

Re: Sequence of checks for virtual alias

2021-03-23 Thread Simon Wilson
- Message from Matus UHLAR - fantomas - Date: Tue, 23 Mar 2021 12:15:03 +0100 From: Matus UHLAR - fantomas Subject: Re: Sequence of checks for virtual alias To: postfix-users@postfix.org On 23.03.21 14:24, Simon Wilson wrote: I have some user email addresses

Re: Setting up virtual alias domains and maps - failing to deliver

2021-03-23 Thread Simon Wilson
- Message from Simon Wilson - Date: Tue, 23 Mar 2021 17:45:56 +1000 From: Simon Wilson Reply-To: si...@simonandkate.net Subject: Setting up virtual alias domains and maps - failing to deliver To: postfix-users@postfix.org Following recommendation from Viktor

Setting up virtual alias domains and maps - failing to deliver

2021-03-23 Thread Simon Wilson
.net, chiarina.net, benjwilson.net, millikens.net, howiesue.net, tlchomeandyard.com.au, facetbd.net.au, facetbd.com.au, facetbuildingdesign.net.au, facetbuildingdesign.com.au virtual_alias_maps = hash:/etc/postfix/virtual -- Simon Wilson M: 0400 12 11 16

Sequence of checks for virtual alias

2021-03-22 Thread Simon Wilson
, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_rbl_client zen.spamhaus.org, check_policy_service unix:private/policyd-spf permit -- Simon Wilson M: 0400 12 11 16

Re: Rewrite user xxx in a specific local domain

2021-03-22 Thread Simon Wilson
- Message from Simon Wilson -     Date: Tue, 23 Mar 2021 11:23:58 +1000     From: Simon Wilson Reply-To: si...@simonandkate.net Subject: Re: Rewrite user xxx in a specific local domain       To: postfix-users@postfix.org - Message from Viktor Dukhovni -    Date: Mon

Re: Rewrite user xxx in a specific local domain

2021-03-22 Thread Simon Wilson
Wilson wrote: I run multiple local domains, and for the first time need to have the same username in two of them go to different local accounts. I.e. my son has a local (LDAP) account "dom". Mail sent to dom@his-personal-domain reaches that mailbox fine. He now has a business domain,

Rewrite user xxx in a specific local domain

2021-03-22 Thread Simon Wilson
fine already dom@his-business-domain:dom.w # this is the bit I want to add How do I achieve this with rewriting or aliasing, i.e. without having to move to virtual domains? Simon -- Simon Wilson M: 0400 12 11 16

Re: upgrade 2.10 - 3.3 config compatibility

2021-03-22 Thread Simon Wilson
Wilson wrote: I have temporarily set it at 0 after reading http://www.postfix.org/COMPATIBILITY_README.html to ensure that I pick up in logging if/when backwards-compatibility is triggered by the legacy settings as follows (from http://www.postfix.org/COMPATIBILITY_README.html): Logged

Re: Double-bounce to ISP's server

2021-03-21 Thread Simon Wilson
- Message from Phil Biggs - Date: Mon, 22 Mar 2021 14:34:44 +1100 From: Phil Biggs Subject: Re: Double-bounce to ISP's server To: postfix-users@postfix.org Monday, March 22, 2021, 1:49:53 PM, Simon Wilson wrote: Your IP address resolves back to aussiebb: You need

Re: Double-bounce to ISP's server

2021-03-21 Thread Simon Wilson
- Message from Simon Wilson - Date: Mon, 22 Mar 2021 12:49:53 +1000 From: Simon Wilson Reply-To: si...@simonandkate.net Subject: Re: Double-bounce to ISP's server To: postfix-users@postfix.org - Message from Phil Biggs - Date: Mon, 22 Mar 2021 13:35

Re: Double-bounce to ISP's server

2021-03-21 Thread Simon Wilson
Non-authoritative answer: Name: mail.simonandkate.net Address: 119.18.34.29 [root@emp87 ~]# nslookup 119.18.34.29 29.34.18.119.IN-ADDR.ARPA name = mail.simonandkate.net. Simon -- Simon Wilson M: 0400 12 11 16

Re: upgrade 2.10 - 3.3 config compatibility

2021-03-21 Thread Simon Wilson
Wilson wrote: I've removed mynetworks_style based on improved knowledge as noted above; commented out append_dot_mydomain and relay_domains, have set compatibility_level to 0, and will monitor for messages. The right compatibility level to set after you're comfortable with your main.cf file

Re: upgrade 2.10 - 3.3 config compatibility

2021-03-21 Thread Simon Wilson
n If I do those should I explicitly set compatibility_level, or would it not be needed because I have addressed the compatibility issues? And are there any other 'gotchas' to be aware of with this upgrade? On 21.03.21 21:57, Simon Wilson wrote: Ok, I migrated the config from the 2.10 server, and

Re: upgrade 2.10 - 3.3 config compatibility

2021-03-21 Thread Simon Wilson
- Message from Simon Wilson - Date: Fri, 19 Mar 2021 13:40:11 +1000 From: Simon Wilson Reply-To: si...@simonandkate.net Subject: upgrade 2.10 - 3.3 config compatibility To: postfix-users@postfix.org I have a well established 2.10 Postfix instance on 2.10 (CentOS7

Re: _time_limit

2021-03-20 Thread Simon Wilson
- Message from Simon Wilson - Date: Sat, 20 Mar 2021 19:19:49 +1000 From: Simon Wilson Reply-To: si...@simonandkate.net Subject: _time_limit To: postfix-users@postfix.org According to  Postfix SMTP Access Policy Delegation[1] "_time_limit" takes

_time_limit

2021-03-20 Thread Simon Wilson
parameter: policyd-spf_time_limit=3600 This is on Postfix 3.3 on RHEL8 What am I doing wrong here, or is this just because the name is a transportname_parameter construct? Simon Links: -- [1] http://www.postfix.org/SMTPD_POLICY_README.html -- Simon Wilson M: 0400 12 11 16

upgrade 2.10 - 3.3 config compatibility

2021-03-18 Thread Simon Wilson
/8, 192.168.1.0/24") 3. explicitly set relay_domains=$mydestination If I do those should I explicitly set compatibility_level, or would it not be needed because I have addressed the compatibility issues? And are there any other 'gotchas' to be aware of with this upgrade? Thank you kindly. Simon -- Simon Wilson M: 0400 12 11 16

Re: Postfix 2.10 Failed to Start Centos 7

2021-01-02 Thread CRAIG WILSON
No, I didn't upgrade Postfix. As the top of my thread, I "yum upgrade" my Centos Server. Postfix is 2.10. It worked previously but since yum upgrade, has failed. Thanks! > On 2 Jan 2021, at 21:34, "Wietse Venema" wrote: > > CRAIG WILSON: >> Hi, >>

Postfix 2.10 Failed to Start Centos 7

2021-01-02 Thread CRAIG WILSON
Hi, I have recently "yum upgrade" my Centos Linux 7 Server. I had a fully working Postfix 2.10 system prior to that. My Postfix service won't start. This is the error: Jan 01 20:36:02 pbx.myrevtel.comsystemd[1]: Starting Postfix Mail Transport Agent... Jan 01 20:36:02

Duplicate mail servers again

2019-07-15 Thread Homer Wilson Smith
totally. Homer Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightlink.com Is that too much to ask? http

Permanent store of incoming mail.

2019-03-20 Thread Homer Wilson Smith
an auto deliver and then also forward? Thanks Homer W Smith CEO Lightlink Internet Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet

Re: SASL auth only on port 25

2017-07-19 Thread Simon Wilson
On Apr 27, 2017, at 12:45 PM, Simon Wilson <si...@simonandkate.net> wrote: smtpd_recipient_restrictions = check_client_access hash:/etc/postfix/client_checks, permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/etc/postfix/sender_access, That

Internal IP range bypass filters

2017-07-18 Thread Simon Wilson
straight through postfix to delivery? Ideally I want something along the lines of IF((source IP = 192.168.1.0/24) AND (destination = (root,si...@simonandkate.net,whatever_other_internal)) THEN: send through aliases and to delivery transport. Simon. -- Simon Wilson M: 0400 12 11 16

PLEASE! httpd and maildrop

2017-06-14 Thread Homer Wilson Smith
How exactly does httpd drop mail into maildrop hundreds per minutes and I can't find any process at all that indicates this is going on even while it is going on. Homer Homer Wilson Smith Clean Air, Clear Water

pickup/maildrop being used to spam through my machine.

2017-06-13 Thread Homer Wilson Smith
Running postfix 2.3.3 CentOS 5.x This is a simple apache 2 web server running postfix for incoming mail for shell users on the same server. Very low key, almost no traffic, outside is not allowed to connect to the postfix on this machine. This machine's only handles shell users

Re: Optimising new system and postscreen questions

2017-05-01 Thread Simon Wilson
Viktor Dukhovni: > On May 1, 2017, at 8:17 AM, Simon Wilson <si...@simonandkate.net> wrote: > > ostscreen is using (threshold 3): > >zen.spamhaus.org*3 >bl.mailspike.net*2 >b.barracudacentral.org*2 >bl.spameatingmonk

Re: Optimising new system and postscreen questions

2017-05-01 Thread Simon Wilson
Simon Wilson: On my new Postfix 2.10 system incoming mail is slow to process (about 15 seconds end to end), and I think it is mainly because DNS queries are slowing things down. The server runs local caching DNS BIND, so it's as quick as I can get it on the slow Internet connection we

Re: Optimising new system and postscreen questions

2017-05-01 Thread Simon Wilson
rmit you to reduce the network dependency. Worth a try. Marco Thanks Marco, I'll investigate that. :) Simon -- Simon Wilson M: 0400 12 11 16

Re: Optimising new system and postscreen questions

2017-05-01 Thread Simon Wilson
- Message from Simon Wilson <si...@simonandkate.net> - Date: Mon, 01 May 2017 18:43:41 +1000 From: Simon Wilson <si...@simonandkate.net> Reply-To: si...@simonandkate.net Subject: Optimising new system and postscreen questions To: Postfix users <postfix-us

Optimising new system and postscreen questions

2017-05-01 Thread Simon Wilson
. Is it worth running postscreen in more detailed (verbose?) mode to see what it is doing? Simon. -- Simon Wilson M: 0400 12 11 16

Next steps to migrating, WAS Re: SASL auth only on port 25

2017-04-29 Thread Simon Wilson
oint Horde to the new IMAP server, and set new postfix to deliver to local cyrus-imapd socket again. All sound reasonable? The big test will be inbound SMTP, but that will have to wait until I can get on to my router and change port forward rules. -- Simon Wilson M: 0400 12 11 16

Re: SASL auth only on port 25

2017-04-28 Thread Simon Wilson
, reject_unknown_recipient_domain, reject_rbl_client zen.spamhaus.org, check_policy_service unix:private/policy-spf permit -- Simon Wilson M: 0400 12 11 16

Re: SASL auth only on port 25

2017-04-27 Thread Simon Wilson
fix users <postfix-users@postfix.org> On Apr 27, 2017, at 12:45 PM, Simon Wilson <si...@simonandkate.net> wrote: smtpd_recipient_restrictions = check_client_access hash:/etc/postfix/client_checks, permit_mynetworks, permit_sasl_authenticated, check_s

Re: SASL auth only on port 25

2017-04-27 Thread Simon Wilson
On Thu, Apr 27, 2017 at 11:51:06PM +1000, Simon Wilson wrote: 1. At the moment when a bot knocks on the postfix server I see postfix/smtpd[pid] etc. in maillog: can that message show if the knock is on port 25 or 587? Sufficiently new versions of the stock Postfix master.cf file have: #sub

Re: SASL auth only on port 25

2017-04-27 Thread Simon Wilson
fix users <postfix-users@postfix.org> On Apr 27, 2017, at 11:54 AM, Simon Wilson <si...@simonandkate.net> wrote: # -o smtpd_client_restrictions=$mua_client_restrictions # -o smtpd_helo_restrictions=$mua_helo_restrictions # -o smtpd_sender_restrictions=$mua_sender_restrictio

Re: SASL auth only on port 25

2017-04-27 Thread Simon Wilson
of main.cf, the idea being they can be appended to here? Simon. ___ Simon Wilson M: 0400 12 11 16

Re: SASL auth only on port 25

2017-04-27 Thread Simon Wilson
On Thu, Apr 27, 2017 at 11:51:06PM +1000, Simon Wilson wrote: 1. At the moment when a bot knocks on the postfix server I see postfix/smtpd[pid] etc. in maillog: can that message show if the knock is on port 25 or 587? Sufficiently new versions of the stock Postfix master.cf file have: #sub

Re: SASL auth only on port 25

2017-04-27 Thread Simon Wilson
ut = 3600s - End message from Noel Jones <njo...@megan.vbhcs.org> ----- -- Simon Wilson M: 0400 12 11 16

SASL auth only on port 25

2017-04-27 Thread Simon Wilson
smtpd_tls_security_level = may smtpd_tls_auth_only = yes smtpd_tls_loglevel = 1 smtpd_tls_session_cache_timeout = 3600s -- Simon Wilson M: 0400 12 11 16

Re: Postfix 20 years ago

2017-02-13 Thread Homer Wilson Smith
Yeah, no truer words ever said. Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightlink.com Is that too much to ask

Re: DNS IP <-> domain <-> IP2 unblocking

2016-07-06 Thread Homer Wilson Smith
On Fri, 3 Jun 2016, Noel Jones wrote: On 6/3/2016 6:39 PM, Homer Wilson Smith wrote: The following main.cf, thanks to Noel, blocks mail whose DNS is misconfigured as follows. 1.) IP -> nothing 2.) IP -> domain -> nothing 3.) IP -> domain -> IP2

Blocking on header From: or To: lines.

2016-06-03 Thread Homer Wilson Smith
I believe postfix uses the envelope From and To in order determine what to block. Is there a way to have postfix use the header From and To instead? Homer CEO Lightlink Internet Homer Wilson Smith

DNS IP <-> domain <-> IP2 unblocking

2016-06-03 Thread Homer Wilson Smith
The following main.cf, thanks to Noel, blocks mail whose DNS is misconfigured as follows. 1.) IP -> nothing 2.) IP -> domain -> nothing 3.) IP -> domain -> IP2 It accepts only mail where 4.) IP -> domain -> IP I find that 1 and 2 block most of the spam,

Re: Whitelisting client IP by recipient addresses (fwd)

2015-11-25 Thread Homer Wilson Smith
smtpd_CLIENT_restrictions= reject_unknown_reverse_client_hostname <- applies to everyone check_RECIPIENT_access hash:/etc/postfix/unknown_client_override reject_unknown_client_hostname <- applies to those not in the file Yes, that will work, as long as you keep the default

Whitelisting client IP by recipient addresses (fwd)

2015-11-24 Thread Homer Wilson Smith
age_directory: The location of the Postfix on-line manual pages. # manpage_directory = /usr/local/man # sample_directory: The location of the Postfix sample configuration files. # This parameter is obsolete as of Postfix 2.1. # sample_directory = /etc/postfix # readme_directory: The location of the Postfix README files. # readme_directory = no data_directory = /var/lib/postfix Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightlink.com Is that too much to ask? http://www.lightlink.com

Re: Vanishing Mail

2015-10-28 Thread Homer Wilson Smith
Hi Victor, The point is the mail was never delivered, this is known. Kind of a coincidence that the mail was not delivered and also that the logs show it is missing. Homer Homer Wilson Smith Clean Air

Re: Vanishing Mail

2015-10-18 Thread Homer Wilson Smith
(250 Ok: queued as 849732002463) Oct 2 13:01:23 light postfix/qmgr[5882]: EF4AF7C0A3: removed Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightl

Vanishing Mail

2015-10-17 Thread Homer Wilson Smith
437: from=<ssrs_d...@corning.com>, size=137677, nrcpt=6 (queue active) -------- Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightli

smtp-source time out?

2015-09-08 Thread Homer Wilson Smith
for a few seconds before giving up, hopefully with an appropriate failure code. Thanks in advance, Postfix rocks! Homer W. Smith CEO Lightlink Internet Homer Wilson Smith Clean Air, Clear Water,Art Matrix

Compromised Passwords

2014-03-04 Thread Homer Wilson Smith
Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightlink.com Is that too much to ask? http://www.lightlink.com

Re: BUDDY SERVER

2013-12-17 Thread Homer Wilson Smith
Wow. Homer Wilson Smith Clean Air, Clear Water,Art Matrix - Lightlink (607) 277-0959 A Green Earth, and Peace, Internet, Ithaca NY ho...@lightlink.com Is that too much to ask? http://www.lightlink.com

  1   2   >