Re: Postifix 2.11.3 sends some mails (not spam) to postmater@

2016-03-19 Thread Juri Haberland
Josef Karliak wrote: > Hi, > I found that only emails with "dmarc=fail" in the headers are sent to > postmaster - as it is defined in our dmarc record, but that should be > statistics, not emails... Maybe you have "CopyFailuresTo" set in your opendmarc.conf? -- Juri

Re: OT: help me confirm that thunderbird v45.2 fails with tls in default postfix smtpd_tls_*

2016-07-28 Thread Juri Haberland
On 28.07.2016 21:38, Benny Pedersen wrote: > On 2016-07-28 21:18, Noel Jones wrote: > >> openssl s_client -connect yourserver:587 -starttls smtp > > tested and it works with that one as it should > > outlook express and andreoid works aswell, it just for me thunderbird > does not Thunderbird

Re: Why no List-ID header in the postfix-users posts?

2017-02-12 Thread Juri Haberland
On 12.02.2017 03:13, Sebastian Nielsen wrote: > Theres no relay between me and postfix. And this is the report: > > Feedback-Type: auth-failure > Version: 1 > User-Agent: OpenDMARC-Filter/1.3.2 > Auth-Failure: dmarc > Authentication-Results: mx01.nausch.org; dmarc=fail header.from=sebbe.eu >

Re: Autoresponder?

2017-01-17 Thread Juri Haberland
On 2017-01-16 13:49, @lbutlr wrote: I have an email account that belonged to someone who died recently. Rather than simply shutdown the account and bounce all future emails, the family would like some sort of automated messages for at least a few months saying something like “ died in November,

Re: bits of encryption

2016-11-12 Thread Juri Haberland
On 13.11.2016 07:55, li...@lazygranch.com wrote: > On Sun, 13 Nov 2016 01:43:17 -0500 > "Bill Cole" wrote: > > >> If the NSA/GCHQ capturing all of your SMTP traffic and saving it for >> hypothetical future decryption is a realistic and significant >>

Re: bits of encryption

2016-11-11 Thread Juri Haberland
On 11.11.2016 12:21, li...@lazygranch.com wrote: > So is this level of encryption something openssl sets up? ‎That is where do I > set the parameter? You might want to read https://bettercrypto.org/static/applied-crypto-hardening.pdf It has background information and configuration examples for

Re: bits of encryption

2016-11-13 Thread Juri Haberland
On 13.11.2016 21:33, Viktor Dukhovni wrote: > On Sun, Nov 13, 2016 at 08:42:19AM +0100, Juri Haberland wrote: >> Just go with the tips from BetterCrypto.org - as the site above suggests, >> too. > > Better yet, stick with the Postfix defaults, they were chosen with >

Re: Postfix error message to Postmaster

2017-04-10 Thread Juri Haberland
On 10.04.2017 18:33, James B. Byrne wrote: > > On Mon, April 10, 2017 11:29, Wietse Venema wrote: >> James B. Byrne: >>> The issue seems to be some sort of time-out with the Amavis proxy. >>> 66 Apr 8 10:50:27 inet08 postfix-p25/smtpd[18374]: warning: >>> timeout talking to proxy

Re: Alert Trend Micro reputation LIST QIL

2017-04-28 Thread Juri Haberland
On 2017-04-28 12:03, li...@lazygranch.com wrote: ‎I'm assuming you requested to be unblocked. https://www.ers.trendmicro.com/guide/en_us/AG/Intro/Blocked.htm Check for open relay. Unless you are the only user, I don't know if you can really say you aren't sending spam.. I have the same

Re: Alert Trend Micro reputation LIST QIL

2017-04-28 Thread Juri Haberland
On 2017-04-28 14:14, Allen Coates wrote: If you check your IP address on THEIR look-up page - https://www.ers.trendmicro.com/reputations - it will tell you WHY you are black-listed. No, it just tells you, that you are listed and in what list - but not why. Juri

Re: Blocking TLD (one component access list queries)

2017-12-10 Thread Juri Haberland
On 10.12.2017 17:03, Hadmut Danisch wrote: > I'm getting tons of spam with mail senders or helo names from TLDs like > .date, e.g. > where the domain names (here: koan-shf.date) rapidly change and are > obviously randomly generated. IP addresses also change daily. > I'd therefore like to block

Re: report from google relate to failed dkim

2017-12-27 Thread Juri Haberland
On 27.12.2017 08:22, Poliman - Serwis wrote: > I configured yesterday spf, dkim, dmarc for example.com. Today I got report > in xml on my mailbox. Attached. One from addresses has dkim failed - marked > in orange. What that means and how to fix it? I use ubuntu 16.04 lts and > postfix: Judging

Re: Gmail and spam, a request

2020-04-26 Thread Juri Haberland
On 26/04/2020 13:21, Francesc Peñalvez wrote: > I don't have the correct dkim entry in the domain? In this post you have no dkim signature at all! Juri

Re: "Authentication-Results" header order

2021-07-04 Thread Juri Haberland
On 03/07/2021 13:29, Markus E. wrote: > By the way, I like the way Google merges the headers into one, like: > > Authentication-Results: mx.google.com; > dkim=pass header.i=@example.net header.s=example header.b=lXmpAXoJ; > spf=pass (google.com: domain of u...@example.net designates

Re: Milter Behavior

2021-03-14 Thread Juri Haberland
On 14.03.21 20:14, Juri Haberland wrote: > On 14.03.21 12:00, Bastian Blank wrote: >> On Sun, Mar 14, 2021 at 11:51:05AM +0100, Juri Haberland wrote: >>> You should get this information from the AR-header. It should look like >>> this: >>> Authentication-Re

Re: Milter Behavior

2021-03-14 Thread Juri Haberland
On 14.03.21 12:00, Bastian Blank wrote: > On Sun, Mar 14, 2021 at 11:51:05AM +0100, Juri Haberland wrote: >> You should get this information from the AR-header. It should look like >> this: >> Authentication-Results: mx.example.org; dmarc=pass (p=quarantine >> dis=no

Re: Milter Behavior

2021-03-14 Thread Juri Haberland
On 11/03/2021 10:22, Nick Tait wrote: > On 11/03/21 11:37 am, Dan Mahoney wrote: >> This fix has been merged to the opendmarc “Develop” branch as of a few >> minutes ago and will likely be in a 1.4.1 that comes out in the next few >> weeks, and will default to *not* quaranting the mail. The

Re: DMARC in postfix ?

2022-04-13 Thread Juri Haberland
On 13/04/2022 05:31, John Levine wrote: > For doing DMARC validation, I know about the opendmarc milter. Is that what > everyone uses? Is there anything else used in pratice? > > I know about perl and python libraries but they don't seem to have > milters or other ready to use integrations into

Re: nmap says there's vulnerability with Diffie-Hellman settings

2023-01-08 Thread Juri Haberland
On 08/01/2023 15:56, Benny Pedersen wrote: > Received: by kent.sdaoden.eu (Postfix, from userid 1000) > id 25D02B4B1E; Sat, 7 Jan 2023 19:35:21 +0100 (CET) > Date: Sat, 07 Jan 2023 19:35:21 +0100 > Author: Steffen Nurpmeso > From: Steffen Nurpmeso > > you are not using postfix imho

[pfx] Re: I don't understand the problem with DMARC and postfix

2024-02-09 Thread Juri Haberland via Postfix-users
On 09.02.24 14:58, natan via Postfix-users wrote: > Hi > I have setup postfix+SPF+DKIM+DMARK and im confused > > Sometimes I get in logs fail like: > Feb  2 09:02:46 mail134 opendmarc[29379]: AE3D53B0062: allegromail.pl fail > Feb  2 09:02:45 mail134 opendmarc[29379]: 888B43B0063 ignoring >