Re: easiest way to reject/process emails based on Return Path

2020-05-19 Thread Jaroslaw Rafa
Dnia 18.05.2020 o godz. 22:38:11 yuv pisze: > The problem of Internet email is the problem of any federated standard. > Embrace, Extend, Extinguish. Internet email is being replaced by text > messaging, and I dare betting that fax will survive Internet email, > because fax has a niche that

Re: Outgoing DANE not working

2020-05-19 Thread Viktor Dukhovni
On Tue, May 19, 2020 at 01:44:30AM -0400, Rich Felker wrote: > > This sounds reasonable. Will there be a way for Postfix to detect the > > new library version, so that we don't disable DANE for musl-libc > > versions that do set the AD bit? > > I'm really disappointed with the detection, which

Re: Outgoing DANE not working

2020-05-19 Thread Christian
Am Dienstag, den 19.05.2020, 05:06 -0400 schrieb Viktor Dukhovni: > We have no choice, we can't ship code that silently fails to honour > its > configuration. I'm not worried about DANE "working", I'm worried > about > DANE *not* working, and the user being none-the-wiser. > Just my 50cents to

Re: On-Hold instead of sending

2020-05-19 Thread Matus UHLAR - fantomas
On 19.05.20 11:43, Daniel Ryšlink wrote: Sorry for asking instead of researching  and testing myself (time pressure), but can someone tell me how to define a transport that would move all mail from the IP x.y.z.q to the On-Hold queue instead of sending it normally? header_checks on Received:

On-Hold instead of sending

2020-05-19 Thread Daniel Ryšlink
Sorry for asking instead of researching  and testing myself (time pressure), but can someone tell me how to define a transport that would move all mail from the IP x.y.z.q to the On-Hold queue instead of sending it normally? Sorry again, I need it fast and correct, will not do this again,

Microsoft Servers with DANE & DNSSEC

2020-05-19 Thread Gerard E. Seibert
Microsoft has finally decided to add DANE and DNSSEC support to Exchange Online servers. https://techcommunity.microsoft.com/t5/exchange-team-blog/support-of-dane-and-dnssec-in-office-365-exchange-online/ba-p/1275494 -- Jerry pgpn6634G_3L3.pgp Description: OpenPGP digital signature

Re: Outgoing DANE not working

2020-05-19 Thread Wietse Venema
Viktor Dukhovni: > Robust detection of MUSL features at build time would be much > appreciated. Precludes any tests that depend on live DNS queries. > The tests need to *statically* test the features of the platform's > C library. Agreed. You're welcome to provide a reliable static test (no live

Re: Outgoing DANE not working

2020-05-19 Thread Rich Felker
On Tue, May 19, 2020 at 10:23:18AM -0400, Wietse Venema wrote: > Rich Felker: > > The is fundamentally no build-time test possible for this. Even if we > > were willing to make flags for each bug (or missing feature) that was > > ever fixed indicating the change, that would only tell you whether

Re: Outgoing DANE not working

2020-05-19 Thread Rich Felker
On Tue, May 19, 2020 at 09:22:59AM -0400, Wietse Venema wrote: > Viktor Dukhovni: > > Robust detection of MUSL features at build time would be much > > appreciated. Precludes any tests that depend on live DNS queries. > > The tests need to *statically* test the features of the platform's > > C

Re: Outgoing DANE not working

2020-05-19 Thread Wietse Venema
Rich Felker: > The is fundamentally no build-time test possible for this. Even if we > were willing to make flags for each bug (or missing feature) that was > ever fixed indicating the change, that would only tell you whether the > version present at build time had the property, not whether the >

Re: Outgoing DANE not working

2020-05-19 Thread Rich Felker
On Tue, May 19, 2020 at 05:06:10AM -0400, Viktor Dukhovni wrote: > On Tue, May 19, 2020 at 01:44:30AM -0400, Rich Felker wrote: > > > > This sounds reasonable. Will there be a way for Postfix to detect the > > > new library version, so that we don't disable DANE for musl-libc > > > versions that

Re: Outgoing DANE not working

2020-05-19 Thread Rich Felker
On Tue, May 19, 2020 at 11:11:56AM -0400, Wietse Venema wrote: > Rich Felker: > > On Tue, May 19, 2020 at 10:23:18AM -0400, Wietse Venema wrote: > > > Rich Felker: > > > > The is fundamentally no build-time test possible for this. Even if we > > > > were willing to make flags for each bug (or

Re: Outgoing DANE not working

2020-05-19 Thread Wietse Venema
Rich Felker: > On Tue, May 19, 2020 at 10:23:18AM -0400, Wietse Venema wrote: > > Rich Felker: > > > The is fundamentally no build-time test possible for this. Even if we > > > were willing to make flags for each bug (or missing feature) that was > > > ever fixed indicating the change, that would

Re: Outgoing DANE not working

2020-05-19 Thread Viktor Dukhovni
On Tue, May 19, 2020 at 10:28:57AM -0400, Rich Felker wrote: > On Tue, May 19, 2020 at 10:23:18AM -0400, Wietse Venema wrote: > > Rich Felker: > > > The is fundamentally no build-time test possible for this. Even if we > > > were willing to make flags for each bug (or missing feature) that was >

Re: Outgoing DANE not working

2020-05-19 Thread Rich Felker
On Tue, May 19, 2020 at 01:25:52PM -0400, Wietse Venema wrote: > Rich Felker: > > On Tue, May 19, 2020 at 11:11:56AM -0400, Wietse Venema wrote: > > > Rich Felker: > > > > On Tue, May 19, 2020 at 10:23:18AM -0400, Wietse Venema wrote: > > > > > Rich Felker: > > > > > > The is fundamentally no

Re: Outgoing DANE not working

2020-05-19 Thread Wietse Venema
Rich Felker: > On Tue, May 19, 2020 at 11:11:56AM -0400, Wietse Venema wrote: > > Rich Felker: > > > On Tue, May 19, 2020 at 10:23:18AM -0400, Wietse Venema wrote: > > > > Rich Felker: > > > > > The is fundamentally no build-time test possible for this. Even if we > > > > > were willing to make

Re: Outgoing DANE not working

2020-05-19 Thread Wietse Venema
Rich Felker: > > > > Do let us know when libc-musl provides an indication whether a DNS > > > > lookup result is authentic (DNSSEC pass). > > > > > > It is now in master. I've also recommended the patch to Alpine. > > > > A pointer to how one would use the updated code would be welcome, > >

Re: Outgoing DANE not working

2020-05-19 Thread Viktor Dukhovni
On Tue, May 19, 2020 at 04:08:32PM -0400, Rich Felker wrote: > I'm not encouraging any to do that; rather I've encouraged them to > take measures to both: > > (1) ensure that DANE is not silently ignored, by either patching > Postfix to work with old musl (prior to the above commit) or patching

Re: Outgoing DANE not working

2020-05-19 Thread Viktor Dukhovni
On Tue, May 19, 2020 at 05:19:26PM -0400, Wietse Venema wrote: > > https://git.musl-libc.org/cgit/musl/commit/?id=fd7ec068efd590c0393a612599a4fab9bb0a8633 > > I understand that the AD (authentic data) bit now is 'true' if > DNSSEC validation was successful. Thanks for that. > > Meanwhile I'll

Re: Outgoing DANE not working

2020-05-19 Thread Rich Felker
On Tue, May 19, 2020 at 06:51:57PM -0400, Viktor Dukhovni wrote: > On Tue, May 19, 2020 at 04:08:32PM -0400, Rich Felker wrote: > > > I'm not encouraging any to do that; rather I've encouraged them to > > take measures to both: > > > > (1) ensure that DANE is not silently ignored, by either

Re: Outgoing DANE not working

2020-05-19 Thread Rich Felker
On Tue, May 19, 2020 at 07:00:57PM -0400, Viktor Dukhovni wrote: > On Tue, May 19, 2020 at 05:19:26PM -0400, Wietse Venema wrote: > > > > https://git.musl-libc.org/cgit/musl/commit/?id=fd7ec068efd590c0393a612599a4fab9bb0a8633 > > > > I understand that the AD (authentic data) bit now is 'true' if

Re: On-Hold instead of sending

2020-05-19 Thread Daniel Ryšlink
Thank you most kindly, it works. -- S pozdravem, Daniel Ryšlink System Administrator Dial Telecom a. s. Křižíkova 36a/237 186 00 Praha 3, Česká Republika Tel.:+420.226204627 daniel.rysl...@dialtelecom.cz --- www.dialtelecom.cz Dial Telecom, a.s.