Re: Reject but styl connection established

2018-02-28 Thread Viktor Dukhovni
> On Mar 1, 2018, at 12:42 AM, Maurizio Caloro wrote: > > I have have create any acceslist to deny, but if check me situation this will > conntecd successfuly to me maschine Postfix access lists control email delivery not connection establishment. To control connection

Re: WG: Reject but styl connection established

2018-02-28 Thread Christian Kivalo
On March 1, 2018 6:42:17 AM GMT+01:00, Maurizio Caloro wrote: >Hello > >I have have create any acceslist to deny, but if check me situation >this >will conntecd successfuly to me maschine > >But i think this way need to negotiat, but styl not working correct, >thanks >for

WG: Reject but styl connection established

2018-02-28 Thread Maurizio Caloro
Hello I have have create any acceslist to deny, but if check me situation this will conntecd successfuly to me maschine But i think this way need to negotiat, but styl not working correct, thanks for any help ! Regard Mauri Postfix 2.11.3 # cat /etc/postfix/access | grep

Re: Deprecated? smtpd_tls_session_cache_database

2018-02-28 Thread MRob
On 2018-03-01 05:16, Viktor Dukhovni wrote: On Feb 28, 2018, at 11:49 PM, MRob wrote: OK thanks Victor a lot. Does that mean I should also remove smtp_tls_session_cache_database? NO. I typoed in my last email (YES/NO), so anyways I think I understand thanks to your

Re: Deprecated? smtpd_tls_session_cache_database

2018-02-28 Thread Viktor Dukhovni
> On Mar 1, 2018, at 12:14 AM, MRob wrote: > > If I was useing smtpd_tls_session_cache_database does it disable session > tickets? No, but it wastes space on the server, caching sessions the client is unlikely to use. > BTW, are smtpd session tickets shared along

Re: Deprecated? smtpd_tls_session_cache_database

2018-02-28 Thread Viktor Dukhovni
> On Feb 28, 2018, at 11:49 PM, MRob wrote: > > OK thanks Victor a lot. Does that mean I should also remove > smtp_tls_session_cache_database? NO. -- Viktor.

Re: Deprecated? smtpd_tls_session_cache_database

2018-02-28 Thread MRob
On 2018-03-01 04:49, MRob wrote: On 2018-03-01 04:42, Viktor Dukhovni wrote: On Feb 28, 2018, at 11:35 PM, MRob wrote: I thought I had read somewhere that modern versions of Postfix you shouldn't set up smtpd_tls_session_cache_database but I can't see anything in the

Re: Deprecated? smtpd_tls_session_cache_database

2018-02-28 Thread MRob
On 2018-03-01 04:42, Viktor Dukhovni wrote: On Feb 28, 2018, at 11:35 PM, MRob wrote: I thought I had read somewhere that modern versions of Postfix you shouldn't set up smtpd_tls_session_cache_database but I can't see anything in the docs now. You're better of

postscreen_dnsbl_whitelist_threshold and SORBS and Google

2018-02-28 Thread MRob
Right now and for at least the last 24hours+ gmail IPs are on SORBS. Good, I don't mind. However, it's causing Gmail to hit after-220 deep protocol tests in postscreen and this causes long delays because Gmail rotates sending IPs. I scroe dnsbl.sorbs.net 2 points. dnswl.org:

Re: Deprecated? smtpd_tls_session_cache_database

2018-02-28 Thread Viktor Dukhovni
> On Feb 28, 2018, at 11:35 PM, MRob wrote: > > I thought I had read somewhere that modern versions of Postfix you shouldn't > set up smtpd_tls_session_cache_database but I can't see anything in the docs > now. You're better of without it, because session tickets do

Deprecated? smtpd_tls_session_cache_database

2018-02-28 Thread MRob
I thought I had read somewhere that modern versions of Postfix you shouldn't set up smtpd_tls_session_cache_database but I can't see anything in the docs now. Reading docs still it seems smtpd_tls_session_cache_database can be useful. What is behavior when its empty(default)?

Re: Question regarding VRFY

2018-02-28 Thread J Doe
Hi John, > On Feb 27, 2018, at 3:25 PM, John Fawcett wrote: > I can't think of a compelling reason either to enable VRFY or to disable > it. Disabling it stops people abusing it, but then they can just use > RCPT TO to get the same information in most cases. I disabled it

Re: ETRN use and Postfix configuration

2018-02-28 Thread J Doe
Hi Noel, > On Feb 27, 2018, at 10:18 PM, Noel Jones wrote: >> ** Is Postfix logging that ETRN is disabled on the first, unencrypted SMTP >> session and then logging this again for the encrypted session (ie: Postfix >> is just logging I disabled this and Google is not