[pfx] Re: 25 years today

2023-12-15 Thread Patrick Ben Koetter via Postfix-users
Wietse, * Wietse Venema via Postfix-users : > As a few on this list may recall, it is 25 years ago today that the > "IBM secure mailer" had its public beta release. This was accompanied > by a nice article in the New York Times business section. > > There is some literature at

[pfx] FOLLOW-UP Re: Re: [ext] list.sys4.de fails with starttls

2023-11-14 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Mon, Sep 25, 2023 at 04:24:55PM +0200, Patrick Ben Koetter via > Postfix-users wrote: > > > > Do you have SMTP client TLS connection reuse enabled? If so, TLS > > > connections are made via tlsproxy(8), with the smtp(8)

[pfx] Re: Recommendation for dkim signing

2023-11-06 Thread Patrick Ben Koetter via Postfix-users
Noel, * Noel Butler via Postfix-users : > > sys4.de are not removing original DKIM sigs just adding postfix.org's, > > which also fails for some reason, but ohh looky that - SPF passes :D > > Decided to have a look ater lunch, that looks like it would be because sys4 > adds footers, where

[pfx] Re: Recommendation for dkim signing

2023-11-06 Thread Patrick Ben Koetter via Postfix-users
* Jens Hoffrichter via Postfix-users : > Hi! > > We are looking into implementing DKIM signing for one of our services, > and there are multiple ways to implement that. > > So far I have found that you can do it with opendkim and amavis - any > recommendation for one or the other, or maybe

[pfx] Re: [ext] list.sys4.de fails with starttls

2023-09-25 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Sun, Sep 17, 2023 at 06:20:53PM +0200, Patrick Ben Koetter via > Postfix-users wrote: > > > Yesterday we upgraded LE certs and it seems – we haven't had time to > > investigate in that yet – SELinux bite Postfix where it shouldn

[pfx] Re: [ext] list.sys4.de fails with starttls

2023-09-17 Thread Patrick Ben Koetter via Postfix-users
STARTTLS should be back to normal again. My tests suceeded and I'll give it another shot when I'm home. At the moment I'm on a rather longish train ride and internet is shaky - at best. Yesterday we upgraded LE certs and it seems – we haven't had time to investigate in that yet – SELinux bite

[pfx] warn_if_reject and MILTER

2023-07-11 Thread Patrick Ben Koetter via Postfix-users
Greetings, I was wondering if there's something similar to warn_if_reject when it comes to dry-run / test-run MILTER applications in Postfix. The documentation on warn_if_reject does not mention MILTERs, which usually means the feature isn't there because otherwise it would be documented, and

[pfx] Re: DANE and DNSSEC

2023-05-11 Thread Patrick Ben Koetter via Postfix-users
Hey Byung-Hee! * Byung-Hee HWANG via Postfix-users : > Hellow Postfix hackers, > > I have a questions while reading DANE docs. Is DNSSEC mandotary? For > making DANE mail server. > > For now i'm running two postfix servers in public. Actually i'm beginner > in both DANE and DNSSEC. you need

[pfx] OT Re: Re: uceprotect.wtf (was: Send email to one @domain.com via authenticated relay?)

2023-03-24 Thread Patrick Ben Koetter via Postfix-users
* natan via Postfix-users : > Hi > Today uceprotect add class /24 to blaclist ... One user (dedicated server) > send probably spam but the user claims that he did not send spam only 6 > e-mails in 1h. And uceprotect was blocked by the whole class ... > > other RBLs it was clean any IP with that

[pfx] Re: /etc/postfix/access only doamin is blocked

2023-03-15 Thread Patrick Ben Koetter via Postfix-users
* Gerd Hoerst via Postfix-users : > > Hi ! > > in my /etc/postfix/main.cf > > parent_domain_matches_subdomains = . . smtpd_access_maps > .. > smtpd_sender_restrictions = .. check_sender_access > hash:/etc/postfix/access > > > > in my main.cfs > > domain.com DISCARD Spam rule

[pfx] Re: [P-U] Re: New List Host and Reply-to Header

2023-03-10 Thread Patrick Ben Koetter via Postfix-users
* Gerald Galster via Postfix-users : > >>> This list uses Mailman configuration settings, not handcrafted code. > >>> If people believe that it is worthwhile to change the Mailman > >>> implementation or the DMARC spec, then I suggest that they work > >>> with the people responsible for that. > >>

[pfx] Re: [P-U] Re: The joke writes itself.

2023-03-10 Thread Patrick Ben Koetter via Postfix-users
* Phil Biggs via Postfix-users : > Friday, March 10, 2023, 5:54:02 PM, Viktor Dukhovni via Postfix-users wrote: > > > I was also quite happy with no tags at all. In the old days I used the tags to filter my messages and place them in the right mailbox. With the advent of DMARC I stopped that

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Viktor Dukhovni via Postfix-users : > On Wed, Mar 08, 2023 at 07:42:56AM +0100, Patrick Ben Koetter via > Postfix-users wrote: > > > - The key material is 4096 Bit and it was brought to my attention there's a > > bug / missing functionality (?) in opendmarc which r

[P-U] FOLLOWUP Re: Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Patrick Ben Koetter via Postfix-users : > * Scott Kitterman via Postfix-users : > > ... > > > For Debian, if someone can find/test patches, I can get them into Debian's > > package. I assume other distributors are similar. Feel free to update the > > Debi

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Scott Kitterman via Postfix-users : ... > For Debian, if someone can find/test patches, I can get them into Debian's > package. I assume other distributors are similar. Feel free to update the > Debian bug with information. It's unfortunate we don't have a better > maintained solution.

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* postfix--- via Postfix-users : > > > > OpenDMARC is segfaulting. That's what 'signal 11' means. Postfix fails > > > > to get an answer to its end-of-body milter call because of the segfault > > > > closing the other end of that socket. That failure results in Postfix > > > > sending a 4xx to

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Michael Grimm via Postfix-users : > toganm--- via Postfix-users wrote: > > > Maybe it would have been a better idea to check if the mail server is listed > > in any rbl sites. > > If you really were in mailing business for some time you would know how RBLs > work: They react, they do not read

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* toganm--- via Postfix-users : > > Hi, > > Maybe it would have been a better idea to check if the mail server is listed > in any rbl sites. For one it is listed in Abusix and my server is rejected it > as a result > > Abusix Mail Intelligence; https://lookup.abusix.com/search?q=188.68.34.52

[P-U] Re: sys4 is listed in Abusix

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* toganm--- via Postfix-users : > Maybe it would have been a better idea to check if the mail server is listed > in any rbl sites. For one it is listed in Abusix and my server is rejected it > as a result What makes you believe the IP had been blocklisted before? The IP was blocklisted today. It

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Harald Koch via Postfix-users : > On Tue, Mar 7, 2023, at 12:02, Benny Pedersen via Postfix-users wrote: > > > > why is arc invalid ? > > My email provider is adding a little more detail: > > Authentication-Results: pb-mx20.pobox.com; > arc=invalid > (as.1.list.sys4.de=invalid

[P-U] Re: Postfix lists are migrating to a new list server

2023-03-07 Thread Patrick Ben Koetter via Postfix-users
* Wietse Venema via Postfix-users : > Gerald Galster via Postfix-users: > > > > >> Out of sheer curiosity ... Mailman 2 or 3? > > > > > > Mailman 3 with ARC support enabled. Additionally all listmail will be DKIM > > > signed. > > > > Do you plan to enable a public archive at > >