Re: header_checks bypassing discard rules

2016-06-27 Thread Zalezny
Wow, thanks for that perfect tip. On June 27, 2016 5:15:52 PM GMT+02:00, Noel Jones wrote: >On 6/27/2016 3:39 AM, Zalezny Niezalezny wrote: >> Hi, >> >> using header_checks configuration we are dropping all outgoing >> E-mails except some of them. >> >> >> #

Re: Different SMTP AUTH options and credentials for different clients

2016-06-27 Thread Rob Maidment
I think I finally have a solution - thanks to Wietse and Viktor. To recap I am replacing Sendmail with Postfix in a legacy application and I was struggling with these two requirements: 1. The server must authenticate clients differently depending on a "client connection profile"; the profile can

Re: DKIM/SPF failure to folder, not return to sender and other tricks

2016-06-27 Thread Kris Deugau
li...@lazygranch.com wrote: > > Peter wrote: > > As a relatively simple example, I use amavisd-new and Spamassassin to > > flag mail with a spam header. Then Dovecot LMTP with sieve looks for > > this header and if it is present it delivers to the user's "Spam" folder. > > Well this is

Re: header_checks bypassing discard rules

2016-06-27 Thread Noel Jones
On 6/27/2016 3:39 AM, Zalezny Niezalezny wrote: > Hi, > > using header_checks configuration we are dropping all outgoing > E-mails except some of them. > > > # discard all mails not going to cortalconsors.(de|fr) > if /^to:/ > !/^to:?$/ DISCARD discarded > endif > > Following rules dropping

OT DMARC question

2016-06-27 Thread Paul R. Ganci
I notice that postfix generates bounce messages that without going through some effort do not get DKIM signed. I have setup my incoming gateway server so that messages to my email subscribers are bounced using a local_recipient_map. However I received a report from linkedin.com because a

Re: Different SMTP AUTH options and credentials for different clients

2016-06-27 Thread Viktor Dukhovni
> On Jun 28, 2016, at 2:11 AM, Rob Maidment wrote: > > Filtering out the STARTTLS option can be achieved using > smtpd_discard_ehlo_keyword_address_maps as described above. > The smtpd_tls_security_level parameter must be set to "may" rather > than "encrypt" if there are

Re: Newbie SASL Auth with Dovecot problem

2016-06-27 Thread postfix
There is no AUTH on port 25, take 587. suomi On 06/28/2016 05:15 AM, Michael Fox wrote: I’ve been using Postfix for a while with no client submission. I’m trying to set up SASL for the first time, using Dovecot, to support virtual users. When I connect with EHLO, I do NOT see “AUTH”

No From: address in policy delegation protocol?

2016-06-27 Thread Zhang Huangbin
Dear all, I have a simple Postfix policy server, and got a problem to reject sender login mismatch (sender != sasl_username) with Outlook 2016: user is able to specify a From: address, it would be any address you want, and the From: address is not passed to policy server. I can reproduce this

Re: No From: address in policy delegation protocol?

2016-06-27 Thread Zhang Huangbin
> On Jun 28, 2016, at 1:46 PM, Zhang Huangbin wrote: > > I can reproduce this issue with a simple Python program: > > *) construct mail message with forge sender address. e.g. 'From: > ' > *) send email as normal/legal user "auth_u...@my-domain.com" with

Newbie SASL Auth with Dovecot problem

2016-06-27 Thread Michael Fox
I've been using Postfix for a while with no client submission. I'm trying to set up SASL for the first time, using Dovecot, to support virtual users. When I connect with EHLO, I do NOT see "AUTH" capabilities. Of course, I'm following: http://www.postfix.org/SASL_README.html First of

Re: DKIM/SPF failure to folder, not return to sender and other tricks

2016-06-27 Thread lists
"As a relatively simple example, I use amavisd-new and Spamassassin to flag mail with a spam header. Then Dovecot LMTP with sieve looks for this header and if it is present it delivers to the user's "Spam" folder." Well this is interesting. I have a similar setup for postfix. With my desktop

Re: DKIM/SPF failure to folder, not return to sender and other tricks

2016-06-27 Thread lists
But you need Dovecot or something similar and eventually an email client, so I don't quite follow you here. You have a client, they have filters, so just use that filter. Now if you want to set up a system where

Re: DKIM/SPF failure to folder, not return to sender and other tricks

2016-06-27 Thread Peter
On 27/06/16 18:41, li...@lazygranch.com wrote: > "As a relatively simple example, I use amavisd-new and Spamassassin > to flag mail with a spam header. Then Dovecot LMTP with sieve looks > for this header and if it is present it delivers to the user's "Spam" > folder." > > Well this is

header_checks bypassing discard rules

2016-06-27 Thread Zalezny Niezalezny
Hi, using header_checks configuration we are dropping all outgoing E-mails except some of them. # discard all mails not going to cortalconsors.(de|fr) if /^to:/ !/^to:?$/ DISCARD discarded endif Following rules dropping all outgoing e-mails with recipeint domains different than