Search results

  1. Stoiko Ivanov

    web.de gmx.de scheitern am SPF -> Quarantäne

    T_SPF_TEMPERROR kann auf eine Problem bei der Konfiguration der DNS-Server hindeuten - also das mal überprüfen... ansonsten - bitte die logs zu den mails teilen - vl. zeigen die wo das Problem ist.
  2. Stoiko Ivanov

    Delete Deferred Mails from a specific user on PMG 8.2

    then you need to install jq - `apt install jq`
  3. Stoiko Ivanov

    Delete Deferred Mails from a specific user on PMG 8.2

    which threads are you referring to? in general for selective deletion of postfix queue - I can recommend combining `postqueue -j` (JSON-output) with a `jq` filter e.g.: postqueue -j |jq -r 'select( .sender == "address@of.hacked.sender" )|.queue_id' check the outputs before and make sure that...
  4. Stoiko Ivanov

    TLS Handshake Error with PMG Cluster

    If possible please share the complete logs as text (either attached or in a code-block) - it makes looking through them much faster/more comfortable. not sure if the screenshot captures everything - or if smtpd had an error regarding TLS configuration before - but the only thing that we see...
  5. Stoiko Ivanov

    PMG cluster with 1 node, pg_wal directory filling disk

    That's odd - and I haven't encountered this until now - the directory on a few test-instances here is < 100M ... I'd check the postgresql log, and the journal for any potential issues that might explain this. do you have any modifications in place? - did you adapt the postgresql configuration?
  6. Stoiko Ivanov

    TLS Handshake Error with PMG Cluster

    please share the logs of your PMG2 (after restarting postfix) when the error occurs - this might help to find the issue.
  7. Stoiko Ivanov

    PMG cluster with 1 node, pg_wal directory filling disk

    the PMG cluster-stack does not use postgresql replication to synchronize the rules, so this should not be the cause for the files in the pg_wal directory. * How did you come to the conclusion that the PMG cluster stack is the reason? * Why are the files problematic?
  8. Stoiko Ivanov

    Greylisting feature unreliable

    Greylisting works by sending a temporary error-code (4xx) to the sender - all sensible mail-servers will try to resend that mail after a short while (5 minutes) - and then it will pass (and the triple sender-email,recipient-email,sender-ip will not be delayed again for 30 days). That's because...
  9. Stoiko Ivanov

    Mail filter block blacklist using .TLD's regex not working (high load pmg-smtp-filter)

    Which DNSBL's are you referring to? - if the mails are blocked by postscreen in the mail-proxy this is the earliest where PMG offers such blocking. The mail filter/rule system always runs in pmg-smtp-filter and will always use some resources (mails are first evaluated for the from/to/what/when...
  10. Stoiko Ivanov

    ACME max certificate

    Why would this be nice? - At least in my experience it's nothing too common - and it does not help if you chose to change e-mail providers either While dated - and maybe not too current - I still think the points in https://www.ietf.org/rfc/rfc1912.txt have some merit. Apart from that I still...
  11. Stoiko Ivanov

    ACME max certificate

    Why do you need more than 5 domains? - Keep in mind that it is not necessary to have all domains that are sending/receiving mail through a PMG listed in the certificate! * usually you point the MX record of the domain to the hostname of PMG - so it should be enough to list that * additionally...
  12. Stoiko Ivanov

    Question on blacklist format

    The matches for Who Objects (the default Blacklist rule has a Who object with the same name) does not match subdomains for domain-objects. You can use a Regular Expression object for this: `.*xxxx.com` will match everything ending with xxxx.com (including xxxx.com itself). I hope this helps!
  13. Stoiko Ivanov

    fix Failed to start The Proxmox VE cluster filesystem.

    please share the complete journal - not just the beginning - probably better to attach it instead of pasting .... the part you shared shows nothing special/problematic - but is only the start of a normal boot (with an older kernel pointing to an outdated Proxmox VE version)....
  14. Stoiko Ivanov

    fix Failed to start The Proxmox VE cluster filesystem.

    Check the complete journal since boot for the actual cause of pve-cluster.service (pmxcfs) not starting: `journalctl -b` share the logs if you cannot find the root-cause.
  15. Stoiko Ivanov

    [SOLVED] fix HTTP ERROR 501 web UI proxmox

    Probably related or caused by: https://forum.proxmox.com/threads/fix-failed-to-start-the-proxmox-ve-cluster-filesystem.166984/ (please do not open multiple threads for one issue - it just causes twice the work)
  16. Stoiko Ivanov

    change address in email or spam report

    Set the quarantine port 443 to have it without port 8006 in the URL Plain HTTP is not supported by pmgproxy - so if you _really_ want plain http you need to configure a proxy in front of pmgproxy - see: https://pmg.proxmox.com/wiki/index.php/Quarantine_Web_Interface_Via_Nginx_Proxy I hope this...
  17. Stoiko Ivanov

    Merkwürdiger Effekt bei Exchange und automatischen Antworten

    Abwesenheitsnachnrichten werden oft mit leerem Envelope-Sender verschickt - da gibts im Trackingcenter eine eigene checkbox, die aktiviert werden muss. (und danach kann nur nach dem Empfänger gesucht werden. - Tauchen die mails dann im Trackingcenter auf? Wegen DKIM - Wenn PMG das DKIM signing...
  18. Stoiko Ivanov

    dkim header fields

    Adding a header multiple times ensures that the signature fails if someone in the middle injects another header (e.g. from) - it's also called oversigning - e.g.: https://forum.dmarcian.com/t/oversigning-headers-what-is-it-and-how-does-one-do-it/2462/2 I hope this explains it!
  19. Stoiko Ivanov

    Virenscan

    Virencheck ist im default-ruleset aktiv - zumindest für inbound mails (im Regelsystem kann dieser auch abgeschaltet werden) wie wurde die eicar-mail denn zugestellt - bei meinen tests funktioniert es zuverlässig, das eicar erkannt wird.
  20. Stoiko Ivanov

    Tracking Center Question

    nothing changed in those code-paths recently how do your files look like (filenames)? - keep in mind that the log-tracker only checks /var/log/syslog, /var/log/syslog.1, /var/log/syslog.2.gz.../var/log/syslog.31.gz for data...