Re: Postfix HELO checks

2020-01-16 Thread Matus UHLAR - fantomas
On Wed, 15 Jan 2020 at 17:43, Jaroslaw Rafa wrote: > Does Amavis actually connect to 127.0.0.1 when injecting mail back to > Postfix? If yes, then maybe you don't have 127.0.0.1 in $mynetworks > > It can also be that Amavis doesn't connect to 127.0.0.1, but to some other > IP on your server -

Re: Postfix HELO checks

2020-01-15 Thread Simon B
On Wed, 15 Jan 2020 at 18:00, Dominic Raferd wrote: > > > On Wed, 15 Jan 2020 at 16:50, Simon B wrote: >> >> On Wed, 15 Jan 2020 at 17:43, Jaroslaw Rafa wrote: >> > >> > Dnia 15.01.2020 o godz. 17:26:48 Simon B pisze: >> > > >> > > Amavis listens on 10024, and postfix listens on 10025 >> > > >>

Re: Postfix HELO checks

2020-01-15 Thread Dominic Raferd
On Wed, 15 Jan 2020 at 16:50, Simon B wrote: > On Wed, 15 Jan 2020 at 17:43, Jaroslaw Rafa wrote: > > > > Dnia 15.01.2020 o godz. 17:26:48 Simon B pisze: > > > > > > Amavis listens on 10024, and postfix listens on 10025 > > > > > > That means mail comes in on 587, it goes to amavis on 10024 and

Re: Postfix HELO checks

2020-01-15 Thread Simon B
On Wed, 15 Jan 2020 at 17:43, Jaroslaw Rafa wrote: > > Dnia 15.01.2020 o godz. 17:26:48 Simon B pisze: > > > > Amavis listens on 10024, and postfix listens on 10025 > > > > That means mail comes in on 587, it goes to amavis on 10024 and comes > > back on 10025 before going out. > [...] > > and

Re: Postfix HELO checks

2020-01-15 Thread Jaroslaw Rafa
Dnia 15.01.2020 o godz. 17:26:48 Simon B pisze: > > Amavis listens on 10024, and postfix listens on 10025 > > That means mail comes in on 587, it goes to amavis on 10024 and comes > back on 10025 before going out. [...] > and mail is flowing. I am not happy since the solution to the > original

Re: Postfix HELO checks

2020-01-15 Thread Simon B
On Wed, 15 Jan 2020 at 15:57, Dominic Raferd wrote: > > > > On Wed, 15 Jan 2020 at 13:36, Simon B wrote: >> >> On Wed, 15 Jan 2020 at 13:40, Matus UHLAR - fantomas >> wrote: >> > >> > >> On Mon, Jan 13, 2020 at 06:25:27PM +0100, Simon B wrote: >> > >> > > > >> >Since upgrading to 2.11

Re: Postfix HELO checks

2020-01-15 Thread Dominic Raferd
On Wed, 15 Jan 2020 at 13:36, Simon B wrote: > On Wed, 15 Jan 2020 at 13:40, Matus UHLAR - fantomas > wrote: > > > > >> On Mon, Jan 13, 2020 at 06:25:27PM +0100, Simon B wrote: > > >> > > > >> >Since upgrading to 2.11 yesterday (yes, I am on a path to > move up > > >> > > > >> >through debian

Re: Postfix HELO checks

2020-01-15 Thread Simon B
On Wed, 15 Jan 2020 at 13:40, Matus UHLAR - fantomas wrote: > > >> On Mon, Jan 13, 2020 at 06:25:27PM +0100, Simon B wrote: > >> > > > >> >Since upgrading to 2.11 yesterday (yes, I am on a path to move up > >> > > > >> >through debian versions), all mail coming in on > >> > > > >>

Re: Postfix HELO checks

2020-01-15 Thread Matus UHLAR - fantomas
On Mon, Jan 13, 2020 at 06:25:27PM +0100, Simon B wrote: > > > >> >Since upgrading to 2.11 yesterday (yes, I am on a path to move up > > > >> >through debian versions), all mail coming in on > > > >> >postfix/submission/smtpd is being rejected by the domain check in that > > > >> >file, even

Re: Postfix HELO checks

2020-01-15 Thread Simon B
On Mon, 13 Jan 2020 at 18:44, Viktor Dukhovni wrote: > > On Mon, Jan 13, 2020 at 06:25:27PM +0100, Simon B wrote: > > > > > >> >Since upgrading to 2.11 yesterday (yes, I am on a path to move up > > > > >> >through debian versions), all mail coming in on > > > > >> >postfix/submission/smtpd is

Re: Postfix HELO checks

2020-01-14 Thread Matus UHLAR - fantomas
Hello, Now I have notices inconsistency: On 10.01.20 12:42, Simon B wrote: For as long as I can I remember, I have blocked connections purporting to be my own domain/IP address using a postmapped file called helo_checks. [...] Since upgrading to 2.11 yesterday (yes, I am on a path to move

Re: Postfix HELO checks

2020-01-13 Thread Viktor Dukhovni
On Mon, Jan 13, 2020 at 06:25:27PM +0100, Simon B wrote: > > > >> >Since upgrading to 2.11 yesterday (yes, I am on a path to move up > > > >> >through debian versions), all mail coming in on > > > >> >postfix/submission/smtpd is being rejected by the domain check in that > > > >> >file, even

Re: Postfix HELO checks

2020-01-13 Thread Simon B
On Fri, 10 Jan 2020 at 18:22, Simon B wrote: > > On Fri, 10 Jan 2020 at 15:53, Matus UHLAR - fantomas > wrote: > > > > >> On 10.01.20 12:42, Simon B wrote: > > >> >For as long as I can I remember, I have blocked connections purporting > > >> >to be my own domain/IP address using a postmapped

Re: Postfix HELO checks

2020-01-10 Thread Simon B
On Fri, 10 Jan 2020 at 15:53, Matus UHLAR - fantomas wrote: > > >> On 10.01.20 12:42, Simon B wrote: > >> >For as long as I can I remember, I have blocked connections purporting > >> >to be my own domain/IP address using a postmapped file called > >> >helo_checks. > >> > > >> >This is checked

Re: Postfix HELO checks

2020-01-10 Thread Matus UHLAR - fantomas
On 10.01.20 12:42, Simon B wrote: >For as long as I can I remember, I have blocked connections purporting >to be my own domain/IP address using a postmapped file called >helo_checks. > >This is checked AFTER permit_sasl_authenticated. > >smtpd_recipient_restrictions = >reject_non_fqdn_sender,

Re: Postfix HELO checks

2020-01-10 Thread Simon B
On Fri, 10 Jan 2020 at 13:39, Matus UHLAR - fantomas wrote: > > On 10.01.20 12:42, Simon B wrote: > >For as long as I can I remember, I have blocked connections purporting > >to be my own domain/IP address using a postmapped file called > >helo_checks. > > > >This is checked AFTER

Re: Postfix HELO checks

2020-01-10 Thread Matus UHLAR - fantomas
On 10.01.20 12:42, Simon B wrote: For as long as I can I remember, I have blocked connections purporting to be my own domain/IP address using a postmapped file called helo_checks. This is checked AFTER permit_sasl_authenticated. smtpd_recipient_restrictions = reject_non_fqdn_sender,