Re: Milters and policy

2021-04-01 Thread Dan Mahoney
Replied inline and snipped. Apologies if my mail.app gets this wrong. > On Apr 1, 2021, at 7:49 PM, Simon Wilson wrote: > > - Message from Dan Mahoney - > Date: Thu, 1 Apr 2021 16:19:05 -0700 > From: Dan Mahoney > Subject: Re: Milters and policy > To:

Re: Milters and policy

2021-04-01 Thread Simon Wilson
- Message from Dan Mahoney - Date: Thu, 1 Apr 2021 16:19:05 -0700 From: Dan Mahoney Subject: Re: Milters and policy To: si...@simonandkate.net Cc: postfix-users@postfix.org On Mar 31, 2021, at 18:23, Simon Wilson wrote:  ...if multiple milters are called are

Re: Milters and policy

2021-04-01 Thread Dan Mahoney
> On Mar 31, 2021, at 18:23, Simon Wilson wrote: > >  >> >>> ...if multiple milters are called are they run in order specified? >>> >>> smtpd_milters = inet:127.0.0.1:8891,inet:127.0.0.1:8893 >> >> yes >> >>> I.e. in the example above if OpenDMARC is to see and trust an >>>

RE: problem connecting from Outlook Android

2021-04-01 Thread DEPRÉ Gaëtan - NGServers . com
Done ! Default for tls_wrappermode is 'no'. I changed the values. Bad to have to enable 465 port just for using outlook mobile. I could change, but customers won't, and they would complain... Thx again for your daily help, Viktor and everyone in this ML  -Message d'origine- De :

Re: problem connecting from Outlook Android

2021-04-01 Thread Viktor Dukhovni
On Thu, Apr 01, 2021 at 08:31:59PM +0200, DEPRÉ Gaëtan - NGServers.com wrote: > You're right, Viktor. > > See below : > > smtp inet n - y - 1 postscreen > -o smtpd_sasl_auth_enable=no > smtpd pass - - y - - smtpd >

RE: problem connecting from Outlook Android

2021-04-01 Thread DEPRÉ Gaëtan - NGServers . com
-Message d'origine- De : owner-postfix-us...@postfix.org De la part de Jaroslaw Rafa Envoyé : jeudi 1 avril 2021 20:54 À : postfix-users@postfix.org Objet : Re: problem connecting from Outlook Android Dnia 1.04.2021 o godz. 19:38:30 DEPRÉ Gaëtan - NGServers.com pisze: > > I enabled

Re: problem connecting from Outlook Android

2021-04-01 Thread Jaroslaw Rafa
Dnia 1.04.2021 o godz. 19:38:30 DEPRÉ Gaëtan - NGServers.com pisze: > > I enabled port 465, but no chance. Still the same problem, only with > android/outlook... Looks like you have to sniff network traffic to see what's actually going on... -- Regards, Jaroslaw Rafa r...@rafa.eu.org --

RE: problem connecting from Outlook Android

2021-04-01 Thread DEPRÉ Gaëtan - NGServers . com
You're right, Viktor. See below : smtp inet n - y - 1 postscreen -o smtpd_sasl_auth_enable=no smtpd pass - - y - - smtpd dnsblogunix - - y - 0 dnsblog tlsproxy unix - -

Re: problem connecting from Outlook Android

2021-04-01 Thread Viktor Dukhovni
> On Apr 1, 2021, at 1:38 PM, DEPRÉ Gaëtan - NGServers.com > wrote: > > I enabled port 465, but no chance. Still the same problem, only with > android/outlook... This would be far more productive if you also post configuration details. $ postconf -Mf $ postconf -nf --

RE: problem connecting from Outlook Android

2021-04-01 Thread DEPRÉ Gaëtan - NGServers . com
Thx for reply. I enabled port 465, but no chance. Still the same problem, only with android/outlook... Apr 1 19:11:16 mail postfix/smtpd[14020]: connect from lfbn-nan-1-1-164.w90-49.abo.wanadoo.fr[90.49.0.164] Apr 1 19:11:16 mail postfix/smtpd[14020]: lost connection after CONNECT from

Re: inet_protocols

2021-04-01 Thread Phil Stracchino
On 4/1/21 12:38 PM, Jaroslaw Rafa wrote: > Dnia 1.04.2021 o godz. 18:02:19 Michael Grimm pisze: >> >> One of the bigger email providers in Germany (t-online.de = TOL) started >> to block my IPv4 address. I do assume that this has to do with being >> blocklisted (see >>

Re: inet_protocols

2021-04-01 Thread Jaroslaw Rafa
Dnia 1.04.2021 o godz. 18:02:19 Michael Grimm pisze: > > One of the bigger email providers in Germany (t-online.de = TOL) started > to block my IPv4 address. I do assume that this has to do with being > blocklisted (see > http://www.uceprotect.net/en/rblcheck.php?ipr=135.125.211.209), although >

Re: inet_protocols

2021-04-01 Thread Viktor Dukhovni
> On Apr 1, 2021, at 12:02 PM, Michael Grimm wrote: > > > But it is good to know that smtp_address_preference might help me with other > ISP blocking my IPv4. For such cases I use the transport table: master.cf: smtp unix ... smtp smtp4 unix ... smtp -o inet_protocols=ipv4

Re: inet_protocols

2021-04-01 Thread Michael Grimm
Wietse Venema wrote: > Michael Grimm: >> On 1. Apr 2021, at 14:45, Viktor Dukhovni wrote: On Apr 1, 2021, at 8:40 AM, Michael Grimm wrote: Is inet_protocols 'order sensitive'? >>> >>> No. > You can specity a preference with: > >

Re: inet_protocols

2021-04-01 Thread Wietse Venema
Michael Grimm: > On 1. Apr 2021, at 14:45, Viktor Dukhovni wrote: > >> On Apr 1, 2021, at 8:40 AM, Michael Grimm wrote: > > >> Is inet_protocols 'order sensitive'? > > > > No. > [..] > > No. See: http://www.postfix.org/postconf.5.html#smtp_balance_inet_protocols > > Thanks for your

Re: problem connecting from Outlook Android

2021-04-01 Thread @lbutlr
On 31 Mar 2021, at 23:26, gde...@ngservers.com wrote: > root@server:~# telnet mailserver.blabla.com 587 Does your server support port 465? That should be configured to always use SSL without the need for STARTTLS. Perhaps outlook is simply not sending STARTTLS (which makes sense, as Outlook

IMPORTANT: Please ensure your NSEC3 iteration count is sufficiently low

2021-04-01 Thread Viktor Dukhovni
[ If your domain is DNSSEC signed and employs NSEC3 for authenticated denial of existence, or you're considering deploying DNSSEC at some point, read on... ] RFC 5155 defined NSEC3 iterations to scale up with the RSA/DSA key size up to perhaps as high as 2500 iterations for 4096-bit keys. In

Re: inet_protocols

2021-04-01 Thread Michael Grimm
On 1. Apr 2021, at 14:45, Viktor Dukhovni wrote: >> On Apr 1, 2021, at 8:40 AM, Michael Grimm wrote: >> Is inet_protocols 'order sensitive'? > > No. [..] > No. See: http://www.postfix.org/postconf.5.html#smtp_balance_inet_protocols Thanks for your clarification and regards, Michael

Re: inet_protocols

2021-04-01 Thread Viktor Dukhovni
> On Apr 1, 2021, at 8:40 AM, Michael Grimm wrote: > > Is inet_protocols 'order sensitive'? No. > What I mean is, does postfix follow the order of the following settings: > > inet_protocols = ipv4, ipv6 > inet_protocols = ipv6, ipv4 No. > Would the latter definition tell postfix

inet_protocols

2021-04-01 Thread Michael Grimm
Hi, is inet_protocols 'order sensitive'? What I mean is, does postfix follow the order of the following settings: inet_protocols = ipv4, ipv6 inet_protocols = ipv6, ipv4 Would the latter definition tell postfix to try ipv6 first and ipv4 second? Thanks and regards, Michael