Recent content by Stoiko Ivanov

  1. Stoiko Ivanov

    Differences between the 3 "Welcome"-lists

    You need to take into account the rules and their priorities as well (e.g. in the default rule-set the Blocklist rule has a higher priority than the Welcomelist rule) The docs try to explain this with: but - put shortly - it should work as you describe it - if you get surprised by the results...
  2. Stoiko Ivanov

    Differences between the 3 "Welcome"-lists

    We have a section in our reference documentation for that because the question came up quite a few times : https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_welcomelist_overview This should explain most things I hope
  3. Stoiko Ivanov

    ClamAV main.cvd not updating on Debian 13 (Trixie) – stuck on 2021 signatures

    This seems to be the most recent version according to the ClamAV CDN's TXT records: dig +noall +answer current.cvd.clamav.net TXT @8.8.8.8 current.cvd.clamav.net. 527 IN TXT "1.0.9:62:27821:1763031600:1:90:49192:339" (the second field in the : separated list is the version of...
  4. Stoiko Ivanov

    pmg8 occasional false positive on dkim_invalid / kam_dkim_invalid

    hm - on a hunch - make sure your maxspamsize in the Spam Detector settings is as large as your max e-mail size: https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_options_2 https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_mailproxy_options else SpamAssassin could see mails as...
  5. Stoiko Ivanov

    Some questions about PMG

    mostly because PMG itself is meant to be deployed behind a firewall - see: https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#chapter_deployment But apart from that - because there are quite a few deployments which do need to adapt a few of the ports and settings - and providing a sensible...
  6. Stoiko Ivanov

    PMG 9.0.2 – “Not a HASH reference at PMG/API2/Transport.pm line 51” after adding relay/transport via pmgsh

    Yes - as said above - when you remove the files this is to be expected! - do not remove them, but truncate them (make them an empty file) how exactly do the two files look afterwards? - as said I cannot reproduce the problem when running your pmgsh command from above you could also install...
  7. Stoiko Ivanov

    PMG 9.0.2 – “Not a HASH reference at PMG/API2/Transport.pm line 51” after adding relay/transport via pmgsh

    ran that command with an rfc1918 IP (192.168.244.244) and it worked and did not break the GUI - so maybe the issue might be ansible (or python3) related? does the issue also occur if you run the command without playbook? the journal might contain some messages explaining why it's not working
  8. Stoiko Ivanov

    PMG 9.0.2 – “Not a HASH reference at PMG/API2/Transport.pm line 51” after adding relay/transport via pmgsh

    As the GUI and pmgsh use the same code-paths in the backend this sounds odd or might point to a quoting issue - which entries do you try to add/create (please anonymize what you don't want to have public - but keep it consistent (if your replace proxmox.com with xxx.domain then do so everywhere...
  9. Stoiko Ivanov

    [SOLVED] PMG DKIM keys renewal procedure

    From a quick check your analysis is correct - creating a new selector in the GUI/CLI/pmgsh will set it as the currently used one and the TXT record is only shown for the currently set selector. Options if your workaround does not work for you: * stop postfix while creating the new selector...
  10. Stoiko Ivanov

    WARNING: database "postgres" has a collation version mismatch

    Please let us know if that indeed fixes the issue! Thanks!
  11. Stoiko Ivanov

    WARNING: database "postgres" has a collation version mismatch

    it seems you're still running the postgresql server version 15 (on port 5432): see: https://pmg.proxmox.com/wiki/Upgrade_from_8_to_9#Upgrade_the_PostgreSQL_database this should take care of the collation warnings as well. I hope this helps!
  12. Stoiko Ivanov

    WARNING: database "postgres" has a collation version mismatch

    did you upgrade the postgres cluster? (did you drop the old postgres cluster after the upgrade)? here the warnings went away latest after a reboot with the system using the postgres version from trixie (without the need to run the alter database statement) I hope this helps!
  13. Stoiko Ivanov

    Delivery Status Notifications rejected by DMARC policy

    bounces generated by postfix itself do not pass through the filter processing and are thus not signed by PMG. IIRC this should not be a problem if your PMG has a dedicated hostname (which then needs to _not_ have a DMARC policy) else if you enable receiver verification at least there should...
  14. Stoiko Ivanov

    Match Archive Filename rule not blocking dangerous files inside ZIP archives

    The regex you posted works here on a test-setup (single what-object in the rule, action block). please share: * `pmgdb dump --rules active` * the logs for that mail (best from the journal)
  15. Stoiko Ivanov

    [SOLVED] Need to allow .shop through outbound

    keep in mind that receiving mail-servers might also score those mails higher. but to answer your question - you should be able to lower the score or disable the rule with a custom score (for disabling use 0 as score)...