[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Ralf Hildebrandt via Postfix-users
* Matus UHLAR - fantomas via Postfix-users : > On 02.11.23 10:49, Ivan Ionut via Postfix-users wrote: > > Hi, it's possible that postscreen does not block the email when > > postscreen_dnsbl_threshold is reached but to pass that email to > > spamassassin(with a score and a tag). > > Postscreen

[pfx] Re: [ext] Re: Question about postscreen

2023-11-02 Thread Ralf Hildebrandt via Postfix-users
* Matus UHLAR - fantomas via Postfix-users : > > And thus the solution is: Don't use the dnsbl in postscreen, but ONLY > > in spamassassin/rspamd instead. > > No problem, you can safely use postscreen with multiple DNSBLs and DNSWLs. > - just don't rely on single hit, unless it's your own DNSBL.

[pfx] Re: [ext] milter outgoing not working

2023-09-24 Thread Ralf Hildebrandt via Postfix-users
* Ralf Hildebrandt via Postfix-users : > * Stanislav via Postfix-users : > > Greetings, > > > > After upgrading from postfix 3.7.3 to postfix 3.8.2, I've noticed my email > > is not signed with DKIM anymore. After further investigation, I've found > > that P

[pfx] Re: [ext] milter outgoing not working

2023-09-24 Thread Ralf Hildebrandt via Postfix-users
* Stanislav via Postfix-users : > Greetings, > > After upgrading from postfix 3.7.3 to postfix 3.8.2, I've noticed my email > is not signed with DKIM anymore. After further investigation, I've found > that Postfix ignores milter on outgoing emails (incoming goes through milter > ok). How is the

[pfx] Re: [ext] pipelining issue

2023-09-20 Thread Ralf Hildebrandt via Postfix-users
* Joey J via Postfix-users : > I have been getting a ton of pipelining errors over the past few weeks and > I can't figure out why. I'm not seeing any here, so let's focus on what you're posting here. > It keeps saying queue write error, but disk & cpu performance is good, disk > space is good.

[pfx] *.mail.protection.outlook.com reporting "452 4.5.3 Too many recipients (AS780090)" for many domains

2023-10-11 Thread Ralf Hildebrandt via Postfix-users
Hi! Since this morning, various MX hosts in *.mail.protection.outlook.com reporting are reporting back temporary errors for us: Exhibit A) host ohri-ca.mail.protection.outlook.com[104.47.75.228] said: 452 4.5.3 Too many recipients (AS780090)

[pfx] Re: [ext] list.sys4.de fails with starttls

2023-03-17 Thread Ralf Hildebrandt via Postfix-users
* Benny Pedersen via Postfix-users : > Mar 17 11:38:31 localhost postfix/smtpd[22150]: lost connection after > STARTTLS from list.sys4.de[2a03:4000:10:51d:b8ce:63ff:feca:a5a0] > Mar 17 12:09:10 localhost postfix/smtpd[23415]: lost connection after > STARTTLS from

[pfx] Re: A new Postfix book in the making - "Run Your Own Mail Server"

2023-03-17 Thread Ralf Hildebrandt via Postfix-users
> The books Michael writes are little gems, nice to read, often funny, > always "to-the-point" and not expensive. This might be his most > important (technical) book. I took a quick glance, and Chapter 0 is looking good! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité -

[pfx] Re: [P-U] Re: New List Host and Reply-to Header

2023-03-12 Thread Ralf Hildebrandt via Postfix-users
* Patrick Ben Koetter via Postfix-users : > approach to subscriber self management. Once you've become a registered > MLM platform participant you can easily change settings that will apply to all > lists you've subscribed to in one place. I consider that a great usability > benefit for

[pfx] Re: [ext] Re: Configuration of postfix on Ubuntu 22

2023-03-24 Thread Ralf Hildebrandt via Postfix-users
* Aosars Repository via Postfix-users : > Hi all, > I have installed postfix on Ubuntu server 22 and configured to use gmail > smtp.But it fails to send mails. The log should inform you why it's failing. I have a config snippet here: main.cf: smtp_use_tls=yes relayhost = smtp.gmail.com:587 #

[pfx] Re: [ext] difference between relay and smtp

2023-03-22 Thread Ralf Hildebrandt via Postfix-users
* Gino Ferguson via Postfix-users : > Can you explain me the practical difference between relay and smtp delivery > on a relay server? The "relay" and "smtp" service are both "smtp" services. But: If you seperated "relay" from "smtp" you can do stuff like: defer_transports = relay without

[pfx] Re: [ext] Issues on incoming queue

2023-03-31 Thread Ralf Hildebrandt via Postfix-users
* Israel britto via Postfix-users : > Hey, I have a strange problem, my incoming queue is growing and my > active and deferred queues are low on queue items. I checked and I > have a lot of incoming mailer-daemon and double-bounce emails, is > there a way to discard these messages? Read them

[pfx] Re: [ext] Re: Issues on incoming queue

2023-03-31 Thread Ralf Hildebrandt via Postfix-users
* Wietse Venema via Postfix-users : > Start by looking for "@domain" wildcards in virtual_alias_maps or Somewhat related: I was under the impression that virtual_alias_maps "@domainA @domainB" did NOT break recipient verifiction. Or am I hallucinating? -- Ralf Hildebrandt Geschäftsbereich IT

[pfx] Re: [ext] Question to reject_rbl_client zen.spamhaus.org

2023-04-09 Thread Ralf Hildebrandt via Postfix-users
> smtpd_recipient_restrictions = >permit_mynetworks, >permit_sasl_authenticated, >reject_unauth_destination, >check_policy_service unix:private/policyd-spf, >reject_rbl_client zen.spamhaus.org, >reject_rbl_client bl.spamcop.net > > When I sent message from a Spamhaus Zen

[pfx] Re: [ext] secondary MX server

2023-03-31 Thread Ralf Hildebrandt via Postfix-users
* Corey Hickman via Postfix-users : > Since almost every sending MTA has the queues, do I need a secondary MX for > my domain email? I don't know if the RFC mandate it, but nowadays everbody knows better, so WTF. > I am afraid the secondary MX was abused by spammers. Indeed. The secondary

[pfx] Re: [ext] Help with spamhaus listing

2023-07-07 Thread Ralf Hildebrandt via Postfix-users
* Tom Reed via Postfix-users : > > Dear lists, > > I in fact use rarely this mailbox: t...@dkinbox.com > But today I found both my domain "dkinbox.com" and the mailserver IP: > 38.45.66.54 are listed into spamhaus "css" and "dbl" blacklists. Checking

[pfx] Re: [ext] warn_if_reject and MILTER

2023-07-11 Thread Ralf Hildebrandt via Postfix-users
* Patrick Ben Koetter via Postfix-users : > Greetings, > > I was wondering if there's something similar to warn_if_reject when it comes > to dry-run / test-run MILTER applications in Postfix. The documentation on > warn_if_reject does not mention MILTERs, which usually means the feature isn't >

[pfx] Re: [ext] TLS issues

2023-07-12 Thread Ralf Hildebrandt via Postfix-users
> smtpd_tls_cert_file = /etc/pki/tls/certs/postfix.pem > smtpd_tls_key_file = /etc/pki/tls/private/postfix.key Try adding: smtp_tls_key_file = $smtpd_tls_key_file smtp_tls_cert_file = $smtpd_tls_cert_file -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité -

[pfx] Re: [ext] Re: DKIM and DMARC

2023-05-16 Thread Ralf Hildebrandt via Postfix-users
* Scott Kitterman via Postfix-users : > DKIM has no policy mechanism associated with it, so there's no basis in any > standardized mechanism to determine if a DKIM failure should be cause for > rejection. I don't think it makes logical sense to treat a message with a > DKIM signature that

[pfx] Re: [ext] multi smtp servers question

2023-05-04 Thread Ralf Hildebrandt via Postfix-users
* Corey Hickman via Postfix-users : > Hello list, > > We have 3 smtp servers for sending messages. When mail in one server has > delivery issue, how can we setup it to use another more servers for > second/third delivery? You could use smtp_fallback_relay -- Ralf Hildebrandt Geschäftsbereich

[pfx] Re: [ext] how to implement plus address

2023-05-12 Thread Ralf Hildebrandt via Postfix-users
* Tom Reed via Postfix-users : > Hello > > How can I implement the following feature? > the messages sent to: > > foo+la...@sample.com > foo+lab...@sample.com > ... > > all them will be delivered into: > f...@sample.com recipient_delimiter = + -- Ralf Hildebrandt Geschäftsbereich IT |

[pfx] Re: transport_maps : fatal: garbage after "]" in server description...

2024-02-20 Thread Ralf Hildebrandt via Postfix-users
> i am running Postfix 3.4.14 and try to set up mailrouting to multiple > smtp hosts. > transport_maps = hash:/etc/postfix/mailertable > > example.com smtp:[mx1.foobar.com],smtp:[mx2.foobar.com] > > However i get: > fatal: garbage after "]" in server description: >

[pfx] Re: [ext] reject_unverified_recipient triggers Recipient address rejected

2024-02-20 Thread Ralf Hildebrandt via Postfix-users
> postfix/submission/smtpd[23263]: NOQUEUE: reject: RCPT from > unknown[21.193.143.55]: 450 4.1.1 : Recipient address rejected: > unverified address: unknown mail transport error; from= > to= proto=ESMTP helo= The verification fails with a "unknown mail transport error" Check the logs (on both

[pfx] Re: [ext] 25 years today

2023-12-14 Thread Ralf Hildebrandt via Postfix-users
* Wietse Venema via Postfix-users : > As a few on this list may recall, it is 25 years ago today that the > "IBM secure mailer" had its public beta release. This was accompanied > by a nice article in the New York Times business section. Ah, it's today. Recently I scrolled through the Changelog

[pfx] Downloadlinks for postfix-3.9-20240109 seem to be broken

2024-01-10 Thread Ralf Hildebrandt via Postfix-users
http://ftp.porcupine.org/mirrors/postfix-release/index.html lists: http://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-3.9-20240109.tar.gz http://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-3.9-20240109.HISTORY both of which report: The requested URL

[pfx] Re: [ext] Logging of SMTP smuggling mitigation

2024-01-11 Thread Ralf Hildebrandt via Postfix-users
> Would it be possible to log at least the queue-id as well? Also sender > and/or recipient would be nice ;-) Or is it for security that no more > information is logged? 20240104 Cleanup: when the Postfix SMTP server rejects bare , log the helo, mail and rcpt information if available. Files:

[pfx] Re: [ext] gmail failing SPF/DKIM

2023-11-27 Thread Ralf Hildebrandt via Postfix-users
* Linkcheck via Postfix-users : > If someone wishes to check this, a typical form (which is sent to me with > copy to "you") is at > https://www.linkcheck.co.uk/ > under menu option Contact & Enquiries. I tried your form: Authentication-Results: mail-cbf-ext.charite.de; dkim=pass

[pfx] Re: [ext] Why can't I get /etc/aliases to do anything?

2023-12-05 Thread Ralf Hildebrandt via Postfix-users
* Chris Green via Postfix-users : > On Tue, Dec 05, 2023 at 05:41:11PM +0100, Ralf Hildebrandt via Postfix-users > wrote: > > * Chris Green via Postfix-users : > > > > > mydestination = > > > > no mail is delivered locally. Thus "/etc/alias

[pfx] Re: [ext] Why can't I get /etc/aliases to do anything?

2023-12-05 Thread Ralf Hildebrandt via Postfix-users
* Chris Green via Postfix-users : > mydestination = no mail is delivered locally. Thus "/etc/aliases" doesn't get to do anything -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration Invalidenstraße 120/121 | D-10115 Berlin Tel. +49 30 450 570 155 | Fax:

[pfx] Re: [ext] non_smtpd_milters = $smtpd_milters

2023-12-01 Thread Ralf Hildebrandt via Postfix-users
* duluxoz via Postfix-users : > A quick question (just to clarify things in my own mind): > > If `non_smtpd_milters = $smtpd_milters`, does this mean that an email > received on port 25 passes through the milters twice; once for the > `smtpd_milters` (from the `smtpd(8)` process) and again for

[pfx] Re: [ext] CORRECTION: How to temporarily pause virtual mail delivery

2023-11-24 Thread Ralf Hildebrandt via Postfix-users
* Wietse Venema via Postfix-users : > Wietse Venema via Postfix-users: > > If you use defer_transports to freeze mail deliveries, then some > > messages may get close to the bounce_queue_lifetime, meaning that > > Postfix will try to deliver them only once. > > And that was incorrect.

[pfx] Feature request

2024-03-20 Thread Ralf Hildebrandt via Postfix-users
Hi! I wonder if this is possible: If a PCRE/regexp style map is triggering, it can be quite hard to find out WHICH pattern actually caused the action. So maybe postmap (when invoked with "-b", "-h" or "-q key") could emit which regular expression (or which line it was in) actually matched.

[pfx] Re: [ext] Re: Feature request

2024-03-20 Thread Ralf Hildebrandt via Postfix-users
* Allen Coates via Postfix-users : > > Better yet, don't be lazy, include a fingerprint string in your RHS > > reject rule values. > Postscreen doesn't have the option of unique RHS fingerprints;  nonetheless, > it would useful to see which (of several) > ACLs was rejecting an incoming

[pfx] [OT] postfwd3 as check_policy_service hogging the CPU

2024-03-07 Thread Ralf Hildebrandt via Postfix-users
I'm using postfwd3 as a policy service for rate limiting based on the envelope sender address and number of recipients. We're both limiting "freemailer" senders (they can only reach a low number of internal recipients before being restricted) as well as our internal users (they can only reach a

[pfx] Re: [ext] Re: [OT] postfwd3 as check_policy_service hogging the CPU

2024-03-07 Thread Ralf Hildebrandt via Postfix-users
* Viktor Dukhovni via Postfix-users : > Note that if you want the actual recipient addresses, (not just a > count), I just need the count in this case > you'll need to also intercept recipient restrictions. oh! > The Postfix smtpd(8) server does not keep the recipient list in memory, the >

[pfx] Re: [ext] Re: [OT] postfwd3 as check_policy_service hogging the CPU

2024-03-07 Thread Ralf Hildebrandt via Postfix-users
* Matus UHLAR - fantomas via Postfix-users : > > envelope sender address and number of recipients. > > not authenticated user? ;-) Yes, I'm also checking if the come from our exchangeserver. > if you want to see/process mail size, using it in > smtpd_end_of_data_restrictions is necessary. > if

[pfx] Re: [ext] active queue is too high

2024-04-19 Thread Ralf Hildebrandt via Postfix-users
* Gino Ferguson via Postfix-users : > Hi, > > > We have a relay server which has been working fine (postfix 3.3.0-1ubuntu0.4) > > Now there are ~20K mails in the active queue for a certain recipient and they > are just sitting there. mailq is reporting what reason? > Such an email just