Configuring Two Postfix mail servers behind HA Proxy load balancer.

2009-11-26 Thread Manoj Burande
Hello All, I am trying to setup a Postfix Mail Server on Fedora10. I am trying to learn the basic process of setting up and manage a Postfix Mail Server. Also trying to build a High-Available Postfix Mail Server set. I have already configured HA Proxy load balancer servers. I just wanted to p

Configuring Two Postfix mail servers behind HA Proxy load balancer.

2009-11-26 Thread Manoj Burande
Hello All, I am trying to setup a Postfix Mail Server on Fedora10. I am trying to learn the basic process of setting up and manage a Postfix Mail Server. Also trying to build a High-Available Postfix Mail Server set. I have already configured HA Proxy load balancer servers. I just wanted to p

Postfix Deployment

2009-11-26 Thread Roman Gelfand
Is it preferable that machine running postfix should have publlic address as opposed NATed address? It appeas that as postfix handing control to various plugins, the source address of the message is 127.0.0.1. Is there a configuration in postfix that would ignore the localhost and show original s

SSL_accept error from unknown[x.x.x.]: -1

2009-11-26 Thread sosogh
Hi list I am running two postfix on two servers.One acts as smtp tls client, the other one acts as smtpd tls server. I tried to send mails from smtp tls client to smtpd tls server --- IP are: smtp tls client:1.1.1.1 (postfix v

Re: CMD tool to check if next SMTP hop can use TLS for messages?

2009-11-26 Thread Victor Duchovni
On Thu, Nov 26, 2009 at 05:02:33AM -0800, Harakiri wrote: > I have a filter which does some things to outgoing mail, now i would > like to check if this mail will possibly sent using TLS (config is, > try TLS if available, if not just sent plain). What will you do differently if the remote server

Re: Impact of SSL renegotiation attacks on SMTP mail - REMOTE system compatibility with openssl 0.9.8l

2009-11-26 Thread Victor Duchovni
On Thu, Nov 26, 2009 at 04:21:29PM +0100, gmx wrote: > Anybody on the list has practical experience - e.g. > 4) with MS-Outlook and > 5) Thunderbird directly connecting to postfix or > 6) MS-Exchange > 7) Any of the usual gateway suspects like IronPort, Borderware, ... > or does any of them regul

Re: sender check

2009-11-26 Thread Ralf Hildebrandt
* Marco Giardini : > > smtpd_recipient_restrictions = > > permit_mynetworks permit_sasl_authenticated reject > > > > Wietse > > i do use: > smtpd_recipient_restrictions = > permit_mynetworks > permit_sasl_authenticated > reject_unauth_destination > > but it seem

Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini: > * Wietse Venema [2009-11-26 12:20:19 -0500]: > > > Marco Giardini: > > > I have a barracuda server that receives mails, filter them and forward > > > to a > > > linux system running postfix. > > > > > > Both machine have a public IP (static). > > > > > > The linux system is

Re: sender check

2009-11-26 Thread John Peach
On Thu, 26 Nov 2009 18:29:00 +0100 Marco Giardini wrote: > * Wietse Venema [2009-11-26 12:20:19 -0500]: > > > Marco Giardini: > > > I have a barracuda server that receives mails, filter them and forward > > > to a > > > linux system running postfix. > > > > > > Both machine have a public IP

Altermime breaks with quotes (maybe OT)

2009-11-26 Thread Luis Daniel Lucio Quiroz
I hope altermime author could read this. Some mail servers sends emails with invalid quoites, like this: To: Complete Name <'u...@domain'> Look quoites. Postfix works okay with that and it can deal but altermime breaks. I know this is a bug of altermime, but I wonder if there is a way to wor

Re: sender check

2009-11-26 Thread Marco Giardini
* Wietse Venema [2009-11-26 12:20:19 -0500]: > Marco Giardini: > > I have a barracuda server that receives mails, filter them and forward to a > > linux system running postfix. > > > > Both machine have a public IP (static). > > > > The linux system is configured to be used as SMTP for sasl au

Re: sender check

2009-11-26 Thread Wietse Venema
Marco Giardini: > I have a barracuda server that receives mails, filter them and forward to a > linux system running postfix. > > Both machine have a public IP (static). > > The linux system is configured to be used as SMTP for sasl authenticated > users as well, besides to be used as SMTP for t

Re: Re[2]: Incoming mail archiving with Postfix

2009-11-26 Thread Wietse Venema
Zohan: > Wietse, thank you, > > > Postfix local/pipe/virtual delivery agents record the delivered > > to address in the Delivered-To: header That is, the final recipient address after alias processing and forwarding. All mail that is delivered to the same mailbox has the same Delivered-To: addres

sender check

2009-11-26 Thread Marco Giardini
I have a barracuda server that receives mails, filter them and forward to a linux system running postfix. Both machine have a public IP (static). The linux system is configured to be used as SMTP for sasl authenticated users as well, besides to be used as SMTP for the people on $mynetworks (perm

Re: CMD tool to check if next SMTP hop can use TLS for messages?

2009-11-26 Thread suomi
EHLO reply suomi On 2009-11-26 14:02, Harakiri wrote: Hi, i have a filter which does some things to outgoing mail, now i would like to check if this mail will possibly sent using TLS (config is, try TLS if available, if not just sent plain). Is there a tool (except openssl) from postfix to

Re: Impact of SSL renegotiation attacks on SMTP mail - REMOTE system compatibility with openssl 0.9.8l

2009-11-26 Thread gmx
>> 1) will >> a) smtpd_tls_ask_ccert, >> b) smtpd_tls_wrappermode, >> c) smtpd_use_tls, >> d) smtpd_enforce_tls >> still work with the new openssl 0.9.8l >> http://marc.info/?l=openssl-users&m=125751806022186&w=2 ? > 2) should I upgrade the openssl on the MTA to that version? > > They w

Re[2]: Incoming mail archiving with Postfix

2009-11-26 Thread Zohan
Wietse, thank you, > Postfix local/pipe/virtual delivery agents record the delivered > to address in the Delivered-To: header Then, in which way would you recommend to copy such a message to special arch...@mydomain mailbox, retaining Delivered-To: header? (and not replacing it with "arch...@my

Re: postfix+sasl+dovecot script help!

2009-11-26 Thread /dev/rob0
On Thu, Nov 26, 2009 at 01:50:14AM -0800, Tudod Ki wrote: > postfix+sasl+dovecot script help! snip > I run it after a fresh Lenny netinstall, on VirtualBox. > > If someone knows, what am I missing, please help me :\ Missing the right forum, for one thing. It seems that you want a Debian automated

Re: Impact of SSL renegotiation attacks on SMTP mail

2009-11-26 Thread Wietse Venema
gmx: > In-Reply-To-Message-ID: 20091109012901.6d90f1f3...@spike.porcupine.org > > Hi Wietse and Victor, > > Thank you very much for your analyses > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555 . > > As a practitioner, the following question arises as we are in a business > partne

Re: Incoming mail archiving with Postfix

2009-11-26 Thread Wietse Venema
Zohan: > Hi, > > I need to archive all incoming mail for my virtual domains (by > copying mail to dedicated archive mailbox) and then sort it > according to address it has been delivered to. Postfix local/pipe/virtual delivery agents record the delivered to address in the Delivered-To: header. >

Incoming mail archiving with Postfix

2009-11-26 Thread Zohan
Hi, I need to archive all incoming mail for my virtual domains (by copying mail to dedicated archive mailbox) and then sort it according to address it has been delivered to. One major drawback of existing milter-based solutions, as well as of virtual aliasing and BCC maps, is that in some case

CMD tool to check if next SMTP hop can use TLS for messages?

2009-11-26 Thread Harakiri
Hi, i have a filter which does some things to outgoing mail, now i would like to check if this mail will possibly sent using TLS (config is, try TLS if available, if not just sent plain). Is there a tool (except openssl) from postfix to verify if a message could be sent via TLS to a host? I lik

Re: postfix+sasl+dovecot script help!

2009-11-26 Thread Eero Volotinen
Quoting Tudod Ki : postfix+sasl+dovecot script help! Hi everybody! I am trying to get the solution for days now, and I don't know what to do really :S See url for postfix+dovecot sasl configration: http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL -- Eero

postfix+sasl+dovecot script help!

2009-11-26 Thread Tudod Ki
postfix+sasl+dovecot script help! Hi everybody! I am trying to get the solution for days now, and I don't know what to do really :S I just want to write a script, what does automatically install postfix, dovecot, and it configures sasl authentication for the clients. I'm here right now [the s