Re: DMARC in postfix ?

2022-04-12 Thread Phil Stracchino
On 4/12/22 23:31, John Levine wrote: For doing DMARC validation, I know about the opendmarc milter. Is that what everyone uses? Is there anything else used in practice? I know about perl and python libraries but they don't seem to have milters or other ready to use integrations into MTAs.

DMARC in postfix ?

2022-04-12 Thread John Levine
For doing DMARC validation, I know about the opendmarc milter. Is that what everyone uses? Is there anything else used in pratice? I know about perl and python libraries but they don't seem to have milters or other ready to use integrations into MTAs. TIA, John

Re: match empty sender in hash: sender access map?

2022-04-12 Thread Greg Klanderman
> On April 10, 2022 Bill Cole > wrote: > Right, because you do not need to run 'postmap' on regex or pcre maps. The > text > format ios what Postfix uses for those types. Thank you Bill! Knowing that now, I see where postmap(1) states: | The postmap(1) command can query any

Re: setup postfix to send email

2022-04-12 Thread Byung-Hee HWANG
Dear roberts, r r writes: > Hello, > > My domain registrar has email forwarding for free. I plan to setup a > authorized SMTP in my ubuntu VPS for sending email from this domain. > I am newbie to email server and postfix. > Do you have any suggestion on doing this? Do you read rfc 8461? That

Re: timeout after END-OF-MESSAGE

2022-04-12 Thread Philippe Gramoullé
On Tue, 12 Apr 2022 10:17:40 -0400 (EDT) Wietse Venema wrote: > Philippe Gramoull?: > > Few stats from my mail server : i manage few personal domains, > > little less that 100k email over a 2 years span. > > > > Over that period of time, i count 113 emails with "timeout after > >

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Paul van der Vlis
Hi Richard, Op 12-04-2022 om 14:07 schreef Richard Rasker: Op 11-04-22 om 18:34 schreef Paul van der Vlis: Hi Richard, ... Eventually you could use my mailserver as a relayhost. That is a very friendly offer, but if I do, that would of course only be temporary, so that I can send e-mail

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Ralph Seichter
* Viktor Dukhovni: > Perhaps dane-users then. I don't find Github to be a good forum for > discussing design options. I'm happy to use dane-us...@sys4.de if you don't mind it. I consider that one pretty much *your* mailing list and did not mean to just barge in, although I had obviously hoped

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Viktor Dukhovni
> On 12 Apr 2022, at 1:05 pm, Ralph Seichter wrote: > > I invite you and other interested parties to discuss this on GitHub [1] > rather than the Postfix mailing list. Release 1.0 is meant to provide > core functionality, and follows the "release erly and often" approach. > There is of course

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Ralph Seichter
* Erwan David: > as you can see, let'sDNS would have to act in cooperation with the > certificate update. Which is exactly why I launch LetsDNS from a "dehydrated" hook whenever the latter has obtained a new certificate, but before that certificate is moved from staging into production. This

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Ralph Seichter
* Viktor Dukhovni: > My first impression reading the docs is that "letdns" is not involved > in certificate rollovers. Its job is solely to automate TLSA record > updates. Indeed. > Are TLSA records matching the previous cert/key retained? No, LetsDNS is stateless beyond the configuration

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Erwan David
Le 12/04/2022 à 18:52, Ralph Seichter a écrit : * Erwan David: Does it handle restarting/reloading a program when changing the certificate ? Postfix does not need it, but dovecot does. LetsDNS does not obtain or change TLS certificates, because that's what specialised ACME clients like

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Ralph Seichter
* Erwan David: > Does it handle restarting/reloading a program when changing the > certificate ? Postfix does not need it, but dovecot does. LetsDNS does not obtain or change TLS certificates, because that's what specialised ACME clients like "dehydrated" or "certbot" are for. A hook function in

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Viktor Dukhovni
> On 12 Apr 2022, at 12:36 pm, Erwan David wrote: > > Does it handle restarting/reloading a program when changing the certificate ? > Postfix does not need it, but dovecot does. My first impression reading the docs is that "letdns" is not involved in certificate rollovers. Its job is solely

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Erwan David
Le 12/04/2022 à 15:30, Ralph Seichter a écrit : I'm happy to announce that LetsDNS release 1.0 is now available and ready for public use. Website: https://letsdns.org GitHub : https://github.com/LetsDNS/letsdns PyPI : https://pypi.org/project/letsdns/ LetsDNS is a utility to manage

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Ralph Seichter
* Ruben Safir: > automated systems with root access are inherently not secure Ah, nothing quite like shooting sweeping statements from the hip, is there? :-) See paragraph one of https://letsdns.org/operation.html . -Ralph

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Patrick Proniewski
Hello, This statement is at best off topic. Worst case scenario, it's toxic. And you can be polite, too. Thank you. > On 12 Apr 2022, at 16:58, Ruben Safir wrote: > > automated systems with root access are inherently not secure > > > On Tue, Apr 12, 2022 at 03:30:57PM +0200, Ralph Seichter

Re: Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Ruben Safir
automated systems with root access are inherently not secure On Tue, Apr 12, 2022 at 03:30:57PM +0200, Ralph Seichter wrote: > I'm happy to announce that LetsDNS release 1.0 is now available and > ready for public use. > > Website: https://letsdns.org > GitHub :

Re: setup postfix to send email

2022-04-12 Thread Viktor Dukhovni
> On 12 Apr 2022, at 10:30 am, Bill Cole > wrote: > > Most people do not need to run their own full-function mail server from the > OS up. You can cause yourself major headaches by trying to do so, and as a > 'newbie' you are likely to do so. If your registrar supports bi-directional > relay

Re: setup postfix to send email

2022-04-12 Thread Bill Cole
On 2022-04-12 at 08:35:30 UTC-0400 (Tue, 12 Apr 2022 20:35:30 +0800) r r is rumored to have said: Hello, My domain registrar has email forwarding for free. I plan to setup a authorized SMTP in my ubuntu VPS for sending email from this domain. I am newbie to email server and postfix. Do you

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Jaroslaw Rafa
Dnia 12.04.2022 o godz. 15:03:40 Richard Rasker pisze: > > Sorry, I wasn't being clear here. What I mean to ask is if (and how) > using a mail relay for sending mail could solve the problem that at > the receiving end, reverse DNS does not match the originating > domain. Reverse DNS doesn't have

Re: timeout after END-OF-MESSAGE

2022-04-12 Thread Wietse Venema
Philippe Gramoull?: > Few stats from my mail server : i manage few personal domains, little > less that 100k email over a 2 years span. > > Over that period of time, i count 113 emails with "timeout after > END-OF-MESSAGE" > where Postfix didn't received a QUIT command. Look at the breakdown

Re: Do not use alternate MX in case of a specific message

2022-04-12 Thread Yves-Marie Le Pors Chauvel
Hi Wietse, I have a dedicated transport for this ISP, so I'll add this option right now ! Thanks, YM Le mar. 12 avr. 2022 à 15:54, Wietse Venema a écrit : > Jaros?aw Rafa: > > W dniu wto, 12.04.2022 o godzinie 13?52?+0200, u?ytkownik Matus UHLAR - > > fantomas napisa?: > > > On 12.04.22

Re: Do not use alternate MX in case of a specific message

2022-04-12 Thread Wietse Venema
Jaros?aw Rafa: > W dniu wto, 12.04.2022 o godzinie 13?52?+0200, u?ytkownik Matus UHLAR - > fantomas napisa?: > > On 12.04.22 11:21, Yves-Marie Le Pors Chauvel wrote: > > > Using Postfix 3.5.6 on debian 11, I would like to know if there is > > > any > > > possibility not to use an alternative MX

Announcement: LetsDNS release 1.0 is now available

2022-04-12 Thread Ralph Seichter
I'm happy to announce that LetsDNS release 1.0 is now available and ready for public use. Website: https://letsdns.org GitHub : https://github.com/LetsDNS/letsdns PyPI : https://pypi.org/project/letsdns/ LetsDNS is a utility to manage DANE TLSA records in DNS servers with only a few

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Richard Rasker
Op 12-04-22 om 14:20 schreef Jaroslaw Rafa: Dnia 12.04.2022 o godz. 14:07:13 Richard Rasker pisze: But according to the information supplied, I should also be able to use smtp.xs4all.nl as a relay host, see https://www.xs4all.nl/eigenmailserver/ (in Dutch -- and I already took care of the

Re: Do not use alternate MX in case of a specific message

2022-04-12 Thread Yves-Marie Le Pors Chauvel
Hi there, @Rafa is right, the recipient domain has 2 MX-es and in case of that first message, I don't wan't to my any retry on other MX. The issue it that the deferred message does not contain this very first message so I can't see it during my log analysis (bases on log message with 'to' and

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Benny Pedersen
On 2022-04-12 14:20, Jaroslaw Rafa wrote: Probably not, because smtp.xs4all.nl has IP address 195.121.65.191, and reverse DNS for 195.121.65.191 is 195-121-65-191.dc.kpn.net. So it is also a "generic" hostname which may cause some systems to reject mail sent from this address. The ISP has

setup postfix to send email

2022-04-12 Thread r r
Hello, My domain registrar has email forwarding for free. I plan to setup a authorized SMTP in my ubuntu VPS for sending email from this domain. I am newbie to email server and postfix. Do you have any suggestion on doing this? Thanks

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Benny Pedersen
On 2022-04-12 14:07, Richard Rasker wrote: Op 11-04-22 om 18:34 schreef Paul van der Vlis: Hi Richard, ... But according to the information supplied, I should also be able to use smtp.xs4all.nl as a relay host, see https://www.xs4all.nl/eigenmailserver/ (in Dutch -- and I already took care

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Jaroslaw Rafa
Dnia 12.04.2022 o godz. 14:20:11 Jaroslaw Rafa pisze: > Dnia 12.04.2022 o godz. 14:07:13 Richard Rasker pisze: > > > > But according to the information supplied, I should also be able to > > use smtp.xs4all.nl as a relay host, see > > https://www.xs4all.nl/eigenmailserver/ (in Dutch -- and I

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Jaroslaw Rafa
Dnia 12.04.2022 o godz. 14:07:13 Richard Rasker pisze: > > But according to the information supplied, I should also be able to > use smtp.xs4all.nl as a relay host, see > https://www.xs4all.nl/eigenmailserver/ (in Dutch -- and I already > took care of the Spamhaus delisting). > > Question: does

Re: Solving reverse DNS problem with Postfix configuration?

2022-04-12 Thread Richard Rasker
Op 11-04-22 om 18:34 schreef Paul van der Vlis: Hi Richard, ... Eventually you could use my mailserver as a relayhost. That is a very friendly offer, but if I do, that would of course only be temporary, so that I can send e-mail again, and I'd contact you in advance. You need a

Re: Do not use alternate MX in case of a specific message

2022-04-12 Thread Jarosław Rafa
W dniu wto, 12.04.2022 o godzinie 13∶52 +0200, użytkownik Matus UHLAR - fantomas napisał: > On 12.04.22 11:21, Yves-Marie Le Pors Chauvel wrote: > > Using Postfix 3.5.6 on debian 11, I would like to know if there is > > any > > possibility not to use an alternative MX for outbound email > > MX is

Re: Best way forwarding to Gmail

2022-04-12 Thread Byung-Hee HWANG
(... sorry for late ...) Byung-Hee HWANG writes: > Hellow, > > My final Inbox Provider is Gmail(soyeo...@gmail.com) for 13 years. Also > i added paid plan of Google Workspace for > > Someday far later i have to plan. That is to forward into > soyeo...@gmail.com all emails (on

Re: Do not use alternate MX in case of a specific message

2022-04-12 Thread Matus UHLAR - fantomas
On 12.04.22 11:21, Yves-Marie Le Pors Chauvel wrote: Using Postfix 3.5.6 on debian 11, I would like to know if there is any possibility not to use an alternative MX for outbound email MX is for inbound e-mail by definition in case of a specific message with the very first attempt ! that's

Do not use alternate MX in case of a specific message

2022-04-12 Thread Yves-Marie Le Pors Chauvel
Hi there, Using Postfix 3.5.6 on debian 11, I would like to know if there is any possibility not to use an alternative MX for outbound email in case of a specific message with the very first attempt ! This is for a specific french ISP (Orange). In some case, you can have these log messages :