toad.social

Bruce HeerssenHow can my server be returning a certificate that doesn't exist?<a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> <a href="https://darkmoon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a>

Bruce HeerssenI don't understand. Dovecot refuses to issue the correct SSL cert. I've checked and triple checked the file name in /etc/dovecot/conf.d/10-ssl.conf. I've restarted the service multiple times and even rebooted.Apache issues the correct cert. They are using the exact same files.perplexing.CLI command to check dovecot: openssl s_client -connect mail.heerssen.net:465And Apache openssl s_client -connect mail.heerssen.net:443<a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> <a href="https://darkmoon.social/tags/dovecot" class="mention hashtag" rel="nofollow noopener" target="_blank">#dovecot</a> <a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a> <a href="https://darkmoon.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>

Bruce HeerssenWhew. I think I finally got spamass-milter talking to spamd. At least, there's no errors in the logs and my test emails arrive in a reasonable time frame.Now just to wait for more spam.<a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> <a href="https://darkmoon.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SpamAssassin</a>

Bruce HeerssenGrr. The SSL certs for my primary email domain expired, so I renewed them.WHY ISN'T IT WORKING?Because you didn't restart dovecot, you idiot.<a href="https://darkmoon.social/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a> <a href="https://darkmoon.social/tags/certbot" class="mention hashtag" rel="nofollow noopener" target="_blank">#certbot</a> <a href="https://darkmoon.social/tags/dovecot" class="mention hashtag" rel="nofollow noopener" target="_blank">#dovecot</a> <a href="https://darkmoon.social/tags/serverAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#serverAdmin</a>

Stumpi im Retroland<a href="https://cultur.social/@marcuwekling" class="u-url mention" rel="nofollow noopener" target="_blank">@marcuwekling</a> Großartige Idee! Ich bin (eh schon) dabei! 🙃 <a href="https://c64.social/tags/dutgemacht" class="mention hashtag" rel="nofollow noopener" target="_blank">#dutgemacht</a> <a href="https://c64.social/tags/ididit" class="mention hashtag" rel="nofollow noopener" target="_blank">#ididit</a> Hier was ich derzeit schon so nutze:- Eigener Mailserver <a href="https://c64.social/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a> <a href="https://c64.social/tags/clamav" class="mention hashtag" rel="nofollow noopener" target="_blank">#clamav</a> <a href="https://c64.social/tags/rspamd" class="mention hashtag" rel="nofollow noopener" target="_blank">#rspamd</a> <a href="https://c64.social/tags/roundcubemail" class="mention hashtag" rel="nofollow noopener" target="_blank">#roundcubemail</a> <a href="https://c64.social/tags/dovecot" class="mention hashtag" rel="nofollow noopener" target="_blank">#dovecot</a> - Notebooks auf <a href="https://c64.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> - <a href="https://c64.social/tags/pfsense" class="mention hashtag" rel="nofollow noopener" target="_blank">#pfsense</a> Firewall - <a href="https://c64.social/tags/thunderbird" class="mention hashtag" rel="nofollow noopener" target="_blank">#thunderbird</a> Selber gehostete freie Dienste/Software derzeit: - <a href="https://c64.social/tags/Nextcloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nextcloud</a> - <a href="https://c64.social/tags/PaperlessNGX" class="mention hashtag" rel="nofollow noopener" target="_blank">#PaperlessNGX</a> - <a href="https://c64.social/tags/Peertube" class="mention hashtag" rel="nofollow noopener" target="_blank">#Peertube</a> - <a href="https://c64.social/tags/HomeAssistant" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeAssistant</a> - <a href="https://c64.social/tags/Mastodon" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mastodon</a> - <a href="https://c64.social/tags/Matrix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Matrix</a> - <a href="https://c64.social/tags/Wordpress" class="mention hashtag" rel="nofollow noopener" target="_blank">#Wordpress</a> Fremdgehostete freie Dienste: - <a href="https://c64.social/tags/pixelfed" class="mention hashtag" rel="nofollow noopener" target="_blank">#pixelfed</a> - <a href="https://c64.social/tags/bigbluebutton" class="mention hashtag" rel="nofollow noopener" target="_blank">#bigbluebutton</a> - <a href="https://c64.social/tags/letsencrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#letsencrypt</a> Leider kann ich meinen Windowsrechner noch nicht loswerden <a href="https://c64.social/tags/gamer" class="mention hashtag" rel="nofollow noopener" target="_blank">#gamer</a> - aber das kommt bestimmt auch noch irgendwann... 🤞

Anubhav<a href="https://hachyderm.io/tags/lazyweb" class="mention hashtag" rel="nofollow noopener" target="_blank">#lazyweb</a> <a href="https://hachyderm.io/tags/askFedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#askFedi</a> Anyone know if <a href="https://hachyderm.io/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> <a href="https://hachyderm.io/tags/MTA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MTA</a> supports and will continue to support any of: ~/.forward file; a way to map one local address to multiple external ones?Point is to redirect (all) local mail of root user to external multiple users (via a relay host, or "smart host" of sendmail(8)).(rant/current situation follows)I am planning to move away from sendmail(8) which is currently included in <a href="https://hachyderm.io/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> base of v13 & v14, will be removed in v15. The version in use for below is v14.The <a href="https://hachyderm.io/tags/DragonflyMailAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#DragonflyMailAgent</a> (<a href="https://hachyderm.io/tags/dma" class="mention hashtag" rel="nofollow noopener" target="_blank">#dma</a>(8)), included in FreeBSD base, does not support ~/.forward.Per aliases(5) manual page it is for sendmail. It shows the syntax of "name: addr_1, addr_2"; file mentioned is /etc/mail/aliases.dma(8) manual page also point to same file -- /etc/aliases which is a symbolic links to /etc/mail/aliases used by sendmail(8) -- but shows the syntax of "name: addr_1 addr_2".newaliases(1) fails on the above syntax. But dma(8) does send out mail of root to multiple users as set with the earlier syntax with comma (when dma(8) is enabled via /etc/mail/mailer.conf).Fucking Confusingly Irritating.<a href="https://hachyderm.io/tags/sysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysAdmin</a> <a href="https://hachyderm.io/tags/systemAdministration" class="mention hashtag" rel="nofollow noopener" target="_blank">#systemAdministration</a>

rixxbecause running a mail server wasn’t fun enough: the Dovecot 2.3 → 2.4 update has tons of breaking config changes(h/t to <a href="https://willem.com/blog/2025-06-04_breaking-changes/" rel="nofollow noopener" translate="no" target="_blank">https://willem.com/blog/2025-06-04_breaking-changes/</a> for the exhaustive breakdown of the changes)<a href="https://chaos.social/tags/mailadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#mailadmin</a> <a href="https://chaos.social/tags/dovecot" class="mention hashtag" rel="nofollow noopener" target="_blank">#dovecot</a> <a href="https://chaos.social/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a> <a href="https://chaos.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a>

Brook MilesI have succeeded in configuring both Cyrus IMAP and Postfix to authenticate using an LLDAP server. Please clap.<a href="https://sunny.garden/tags/CyrusIMAP" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyrusIMAP</a> <a href="https://sunny.garden/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a>

Rachel RawlingsI successfully put <a href="https://mastodon.social/tags/OpenDKIM" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenDKIM</a> onto a production <a href="https://mastodon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> server today and started signing the messages that Hotmail, et.al. were rejecting, and it took me less than half a day!But I'm still going to tell my boss I want to buy a copy of <a href="https://mastodon.social/tags/RYOMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#RYOMS</a> and get reimbursed for it.

kazéI have a <a href="https://mastodon.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysAdmin</a> question: is it okay to use a local, loopback-only SMTP server (<a href="https://mastodon.social/tags/mailutils" class="mention hashtag" rel="nofollow noopener" target="_blank">#mailutils</a> + <a href="https://mastodon.social/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a>) to allow a local web app to send mails directly? Without any login/passwd?This works fine: echo [boty] | mail -s [subject] [dest]But I can’t make it work from my app (<a href="https://mastodon.social/tags/ApacheAnswer" class="mention hashtag" rel="nofollow noopener" target="_blank">#ApacheAnswer</a>), even though it does have an unauthenticated mode for SMTP. What am I missing?

🆘Bill Cole 🇺🇦Wishful thinking is so powerful. The docs for <a href="https://toad.social/tags/Postfix" class="mention hashtag" rel="tag">#Postfix</a>'s headers_checks are explicit & clear: it operates on 1 logical header line at a time, preserving no state across lines. There’s no way to combine rules logically operating on 2 different headers. The man page & the BUILTIN_FILTER_README file are clear: it is unfit for general filtering. At least monthly someone pops up on the Postfix mailing list asking whether they can combine rules that apply to different header lines.

Kevin Karhan :verified:<a href="https://mastodon.sdf.org/@ytc1" class="u-url mention" rel="nofollow noopener" target="_blank">@ytc1</a> <a href="https://mas.to/@DenOfEarth" class="u-url mention" rel="nofollow noopener" target="_blank">@DenOfEarth</a> <a href="https://mastodon.social/@aka_pugs" class="u-url mention" rel="nofollow noopener" target="_blank">@aka_pugs</a> I know.And espechally in <a href="https://infosec.space/tags/ScientificComputing" class="mention hashtag" rel="nofollow noopener" target="_blank">#ScientificComputing</a> a lot of researchers loved working with <a href="https://infosec.space/tags/SunMicrosystems" class="mention hashtag" rel="nofollow noopener" target="_blank">#SunMicrosystems</a> and when <a href="https://infosec.space/tags/Oracle" class="mention hashtag" rel="nofollow noopener" target="_blank">#Oracle</a> took over that relationship got sour'd instantly due to <a href="https://infosec.space/tags/Oracle" class="mention hashtag" rel="nofollow noopener" target="_blank">#Oracle</a> <a href="https://infosec.space/tags/CEO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CEO</a> <a href="https://infosec.space/tags/LarryEllison" class="mention hashtag" rel="nofollow noopener" target="_blank">#LarryEllison</a>...-> <a href="https://infosec.space/@kkarhan/114682503920794745" translate="no" rel="nofollow noopener" target="_blank">https://infosec.space/@kkarhan/114682503920794745</a>One of the big successes of <a href="https://infosec.space/tags/Sun" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sun</a> was that they basically declared a unilateral "ceasefire" in terms of <a href="https://infosec.space/tags/IP" class="mention hashtag" rel="nofollow noopener" target="_blank">#IP</a> & <a href="https://infosec.space/tags/Patents" class="mention hashtag" rel="nofollow noopener" target="_blank">#Patents</a> re: <a href="https://infosec.space/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a>. Whereas Oracle didn't seem willing to honour that.<ul><li>Without that cooperative atmosphere we saw <a href="https://infosec.space/tags/OpenOffice" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenOffice</a> devs literally forking off into <a href="https://fosstodon.org/@libreoffice" class="u-url mention" rel="nofollow noopener" target="_blank">@libreoffice</a> and projects like <a href="https://infosec.space/tags/illumos" class="mention hashtag" rel="nofollow noopener" target="_blank">#illumos</a> and <a href="https://mastodon.social/@openzfs" class="u-url mention" rel="nofollow noopener" target="_blank">@openzfs</a> scramble to save what was OpenSource'd and also rescue that.</li></ul>Obviously <a href="https://infosec.space/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> with it's <a href="https://infosec.space/tags/GPLv2only" class="mention hashtag" rel="nofollow noopener" target="_blank">#GPLv2only</a>-Kernel and most of it's Userland could not get 'closed-sourced' like <a href="https://infosec.space/tags/OpenSolaris" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSolaris</a> which instantly got stomped out by Oracle as they wanted to sqeeze <a href="https://infosec.space/tags/Solaris" class="mention hashtag" rel="nofollow noopener" target="_blank">#Solaris</a> for profits and milk their clients in typical Oracle fashion...<ul><li>Which is sad because <a href="https://infosec.space/tags/competition" class="mention hashtag" rel="nofollow noopener" target="_blank">#competition</a> breeds <a href="https://infosec.space/tags/innovation" class="mention hashtag" rel="nofollow noopener" target="_blank">#innovation</a> and a lot of stuff like <a href="https://infosec.space/tags/Zones" class="mention hashtag" rel="nofollow noopener" target="_blank">#Zones</a> in Solaris really were at their time really forcing <a href="https://infosec.space/tags/KVM" class="mention hashtag" rel="nofollow noopener" target="_blank">#KVM</a>, <a href="https://infosec.space/tags/bhyve" class="mention hashtag" rel="nofollow noopener" target="_blank">#bhyve</a> and <a href="https://infosec.space/tags/BSDjails" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSDjails</a> to up their game for good.</li></ul>Now granted, I do know someone who for most of their life made their money dealing with the intricacies of setting up <a href="https://infosec.space/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a>, <a href="https://infosec.space/tags/sendmail" class="mention hashtag" rel="nofollow noopener" target="_blank">#sendmail</a> and <a href="https://infosec.space/tags/courier" class="mention hashtag" rel="nofollow noopener" target="_blank">#courier</a> <a href="https://infosec.space/tags/MailServers" class="mention hashtag" rel="nofollow noopener" target="_blank">#MailServers</a> on Solaris and if I ask said person about that they give me a kilometer stare, so OFC like a <a href="https://infosec.space/tags/SysV" class="mention hashtag" rel="nofollow noopener" target="_blank">#SysV</a> - <a href="https://infosec.space/tags/Unix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Unix</a> systems Solaris and <a href="https://infosec.space/tags/SunOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SunOS</a> really are one of the reasons <a href="https://infosec.space/tags/WindowsNT" class="mention hashtag" rel="nofollow noopener" target="_blank">#WindowsNT</a> won the "<a href="https://infosec.space/tags/WorkstationWar" class="mention hashtag" rel="nofollow noopener" target="_blank">#WorkstationWar</a>" and why - if anyone - <a href="https://infosec.space/tags/Apple" class="mention hashtag" rel="nofollow noopener" target="_blank">#Apple</a> won the last "<a href="https://infosec.space/tags/UnixWar" class="mention hashtag" rel="nofollow noopener" target="_blank">#UnixWar</a>"...<ul><li>Still I do am sad that I declined that <a href="https://infosec.space/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> position at a leading research center I'm not at liberty to name and I do know there's OFC still some critical infrastructure running even older Solaris servers...</li></ul><a href="https://mastodon.sdf.org/@ytc1/114689337148586939" rel="nofollow noopener" translate="no" target="_blank">https://mastodon.sdf.org/@ytc1/114689337148586939</a>

Jan Wildeboer 😷:krulorange:<a href="https://social.wildeboer.net/tags/NerdSpeak" class="mention hashtag" rel="nofollow noopener" target="_blank">#NerdSpeak</a> Some mail senders are exposing internal, non-resolving host names in the EHLO/HELO phase when sending mails, causing my mail server to (correctly) refuse them. However, in some cases I have to begrudgingly accept their broken config as the mails they send are actually legitimate and important. Looking at you, Drillisch Online. Fix your shit. Anyway, here's how I did it on my <a href="https://social.wildeboer.net/tags/postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#postfix</a> server: <a href="https://codeberg.org/jwildeboer/gists/src/branch/main/2025/20250615HELOAllowlistPostfix.md" rel="nofollow noopener" translate="no" target="_blank">https://codeberg.org/jwildeboer/gists/src/branch/main/2025/20250615HELOAllowlistPostfix.md</a>1/3

Brook MilesAgainst all odds I have configured a test Cyrus IMAP + Postfix server that both sends and receives email. :goose_hacker: It's jank as heck, and absolutely not a useful production setup, but it does "work", and only took 3 hours.<a href="https://sunny.garden/tags/CyrusIMAP" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyrusIMAP</a> <a href="https://sunny.garden/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a>

Bruce HeerssenPlaying with email again. Since I have an email server and a mastodon server, I figured why not have an email address for my mastodon account. So I did. If you want to email me (and I don't know why you would) you can now send mail to my mastodon handle, omitting the leading @.I might come to regret this. 😅 <a href="https://darkmoon.social/tags/MastoAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#MastoAdmin</a> <a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a> <a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a>

Rob Carlson :ally: :BLM:Finally gave in and wrote some Postfix rules to route SMTP traffic for *.outlook.com hosted domains (basically any school or government I email) through IPv4 instead of IPv6 to stop being blocked by Spamhaus false positives on "my" shared v6/64. <a href="https://epistolary.org/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a> <a href="https://epistolary.org/tags/SpamHaus" class="mention hashtag" rel="nofollow noopener" target="_blank">#SpamHaus</a> <a href="https://epistolary.org/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a>

Bruce HeerssenQuestion for postfix folks:I have a Postfix instance handling two virtual domains on a VPS, and both currently share the same ipv4 and ipv6 addresses. I would like to properly configure dmarc, but that requires separate IP addresses for each domain. My provider is loathe to give me a second ipv4 address, claiming scarcity. Fair enough. They did provide an ipv6 range that I can use.So, are there still issues with ditching ipv4 altogether for at least one of the domains?<a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> <a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a>

Bruce HeerssenWell, this blows. Spamhaus has blocked the entire 2600:3c00::/64 IPv6 range, which includes my email server. That seems a little excessive.I found out because I tried to send an email to my employer, and they use Spamhaus. This is a problem for me and I'm not sure what to do. Maybe I can disable IPv6 for sending email. I dunno.<a href="https://check.spamhaus.org/results/?query=2600:3c00::f03c:94ff:fe85:b6ee" rel="nofollow noopener" translate="no" target="_blank">https://check.spamhaus.org/results/?query=2600:3c00::f03c:94ff:fe85:b6ee</a><a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a> <a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> <a href="https://darkmoon.social/tags/Spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Spam</a>

Bruce HeerssenI finally got my first bit of legitimate spam (is that even a thing?) since installing SpamAssassin on my mail server. SpamAssissin did its job and correctly tagged the message as spam. Honestly, when I first set up my mail server, I thought I'd get a lot more spam. Either I've been lucky, or my internet hygiene is pretty okay.<a href="https://darkmoon.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SpamAssassin</a> <a href="https://darkmoon.social/tags/Spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Spam</a> <a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a> <a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a>

Bruce HeerssenWoohoo! I got spamassassin working. Now to wait for some more spam. I never thought that would be something I'd write. 😆 <a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerAdmin</a> <a href="https://darkmoon.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#SpamAssassin</a> <a href="https://darkmoon.social/tags/Spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Spam</a> <a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postfix</a>

Recent searches

Search options

Administered by:

Server stats:

#postfix