Re: tls vs ssl

2010-03-01 Thread Stan Hoeppner
Daniel L. Miller put forth on 3/2/2010 1:18 AM: > OK - I'm an idiot. I'll just admit that up front and get it out of the > way. > > Now that that's settled, what is the difference between "SSL" and "TLS" > in a MUA - particularly Thunderbird - in a Postfix context? > > I would have sworn I used

tls vs ssl

2010-03-01 Thread Daniel L. Miller
OK - I'm an idiot. I'll just admit that up front and get it out of the way. Now that that's settled, what is the difference between "SSL" and "TLS" in a MUA - particularly Thunderbird - in a Postfix context? I would have sworn I used to use Thunderbird with "SSL" specified and connected to my P

Re: Postfix TLS requirements

2010-03-01 Thread Eray Aslan
On 02.03.2010 06:09, Alex wrote: > What encryption/cipher/key length, session key options, etc, choices > should I be making if I were to do this today? That is dificult to say without knowing what you are trying to protect, your threat model etc. If in doubt, go with the defaults. > Under what

Maildir ownership/permission flags

2010-03-01 Thread Jack Knowlton
Hi all, I have a Postfix virtual users setup based on mysql tables. Messages are stored in Maildir format. Maildirs are owned by "vmail:vmail" . I want another user to be able to read those Maildir files so I added him to the "vmail" group. Unfortunately Postfix seems to create the directory struc

Postfix TLS requirements

2010-03-01 Thread Alex
Hi, I have an existing old postfix TLS server set up and working successfully. It was created several years ago and has been working fine ever since.I'm wondering what the benefits would be with upgrading? In other words, I realize I can only support SSLv2, but are there other security designs and

Re: Spam Attack on Postmaster

2010-03-01 Thread mouss
Carlos Williams a écrit : > On Mon, Mar 1, 2010 at 12:28 PM, Noel Jones wrote: >> It "slips past" because there are no rules to block it. >> You can add "postmas...@your_domain REJECT" to this list if you want. > > I am assuming I would add this to 'sender_access', correct? > > On Mon, Mar 1,

Re: Milter invocation when sending to local mail

2010-03-01 Thread Wietse Venema
Yves Kreis: > Dear, > > Does Postfix invoke milter when sending a DSN for local mail? Postfix does not filter messages that it creates itself. That includes bounces. As of Postfix 2.3 this is configurable for before-queue filters (i.e. milters and header/body_checks). For details, see: http://w

Re: looking for solution

2010-03-01 Thread Ilja Beeskow
Dear Martijn Your idea did it. Other problems I had were results of misconfiguration inside tmvw. Thank you very much! Ilja Martijn de Munnik schrieb: On Mon, 2010-03-01 at 15:47 +0100, Ilja Beeskow wrote: Hello @ll I have a little problem with postfix 2.5, trendmicro viruswall and an o

Re: Maildir creation

2010-03-01 Thread Jack Knowlton
On Mon, March 1, 2010 11:34 pm, Wietse Venema wrote: > Jack Knowlton: >> I would like Postfix to >> accept mail for any recipient of that particular domain and create the matching Maildir once the first message has been received. >> Thanks, > This is possible but I don't think it is a good idea to

Milter invocation when sending to local mail

2010-03-01 Thread Yves Kreis
Dear, Does Postfix invoke milter when sending a DSN for local mail? Thanks, Yves

Re: Maildir creation

2010-03-01 Thread Wietse Venema
Jack Knowlton: > I would like Postfix to > accept mail for any recipient of that particular domain and create the > matching Maildir once the first message has been received. > Thanks, This is possible but I don't think it is a good idea to auto-create maildirs for users whose name starts with "..

Maildir creation

2010-03-01 Thread Jack Knowlton
Hi all. I have a Postfix virtual users setup based on mysql tables. Messages are stored in Maildir format. I am aware that creating a virtual alias @domain1.com -> u...@domain2.com will make Postfix accept emails for any username and deliver them to u...@domain2.com. Is it possible to do the same

Re: Spam Attack on Postmaster

2010-03-01 Thread Carlos Williams
On Mon, Mar 1, 2010 at 12:28 PM, Noel Jones wrote: > It "slips past" because there are no rules to block it. > You can add "postmas...@your_domain   REJECT" to this list if you want. I am assuming I would add this to 'sender_access', correct? On Mon, Mar 1, 2010 at 1:31 AM, LuKreme wrote: > Oft

Re: Spam Attack on Postmaster

2010-03-01 Thread Noel Jones
On 3/1/2010 10:50 AM, Carlos Williams wrote: On Mon, Mar 1, 2010 at 9:29 AM, Noel Jones wrote: That parameter doesn't prevent spammers from sending junk to postmaster, it prevents mail to postmaster from bypassing your existing anti-spam controls. Big difference. It looks like it does pass

Re: Spam Attack on Postmaster

2010-03-01 Thread Carlos Williams
On Mon, Mar 1, 2010 at 9:29 AM, Noel Jones wrote: > That parameter doesn't prevent spammers from sending junk to postmaster, it > prevents mail to postmaster from bypassing your existing anti-spam controls. >  Big difference. It looks like it does pass my 'anti-spam' controls however & I am not s

Re: Spam Attack on Postmaster

2010-03-01 Thread LuKreme
On 01-Mar-10 06:08, Ralf Hildebrandt wrote: * Stan Hoeppner: If you sub the list, ask Rich K about ipdeny. I learned about it from him. He's been a spam fighter since 1994 (maybe earlier). He's old school. Yay, I'm old school :) You're so old school you're PRE school! No, wait, that's

Re: RBL problem?

2010-03-01 Thread David Schraeder
On 2/26/2010 3:09 PM, Wietse Venema wrote: > David Schraeder: >> How are you guys getting those stats on the blocks? > > awk ' > /blocked using [^;]+;/ { stats[$20]++ } > END { for (name in stats) print name, " ", stats[name] } > ' /var/log/maillog > > Wietse Thanks for the infor

Re: Out: 452 Insufficient system storage

2010-03-01 Thread lst_hoe02
Zitat von donovan jeffrey j : Greetings I had several of these on my primary MX this weekend and one just popped up. Can someone explain where this Insufficient system storage is ? both mail queues are empty, and DF shows < 20% on the reporting system. Out: 220 mx2.beth.k12.pa.us ESMTP

Re: looking for solution

2010-03-01 Thread Noel Jones
On 3/1/2010 8:47 AM, Ilja Beeskow wrote: Hello @ll I have a little problem with postfix 2.5, trendmicro viruswall and an old exchange 2k behind it. Perhaps somebody could give me a hint because I'm really confused after some days of trying different things. for incoming mail everything is clear

Re: looking for solution

2010-03-01 Thread Martijn de Munnik
On Mon, 2010-03-01 at 15:47 +0100, Ilja Beeskow wrote: > Hello @ll > > I have a little problem with postfix 2.5, trendmicro viruswall and an old > exchange 2k behind it. Perhaps somebody could give me a hint because I'm > really confused after some days of trying different things. > > for incom

looking for solution

2010-03-01 Thread Ilja Beeskow
Hello @ll I have a little problem with postfix 2.5, trendmicro viruswall and an old exchange 2k behind it. Perhaps somebody could give me a hint because I'm really confused after some days of trying different things. for incoming mail everything is clear: relay_domains and transport_maps, tm

Re: Added a Check - Asking for a Review

2010-03-01 Thread Noel Jones
On 2/28/2010 2:26 PM, Carlos Williams wrote: On Wed, Jan 20, 2010 at 10:34 AM, Ralf Hildebrandt wrote: /^localhost$/ 550 Don't use my own domain (localhost)! /^iamghost.\com$/ 550 Don't use my own domain! /^64\.95\.64\.198$/ 550 Your spam was rej

Re: Spam Attack on Postmaster

2010-03-01 Thread Noel Jones
On 2/28/2010 1:55 PM, Carlos Williams wrote: On Tue, Oct 27, 2009 at 8:55 AM, Noel Jones wrote: Or you can have postfix add it to main.cf for you by typing the command: # postconf -e 'address_verify_sender=$double_bounce_sender' I added the above parameter (address_verify_sender=$double_boun

Out: 452 Insufficient system storage

2010-03-01 Thread donovan jeffrey j
Greetings I had several of these on my primary MX this weekend and one just popped up. Can someone explain where this Insufficient system storage is ? both mail queues are empty, and DF shows < 20% on the reporting system. Out: 220 mx2.beth.k12.pa.us ESMTP Postfix In: EHLO mx1.beth.k12.pa.

Re: Spam Attack on Postmaster

2010-03-01 Thread Ralf Hildebrandt
* Stan Hoeppner : > If you sub the list, ask Rich K about ipdeny. I learned about it from him. > He's been a spam fighter since 1994 (maybe earlier). He's old school. Yay, I'm old school :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin

Re: Spam Attack on Postmaster

2010-03-01 Thread Stan Hoeppner
Carlos Williams put forth on 2/28/2010 10:02 PM: > On Sun, Feb 28, 2010 at 5:27 PM, Stan Hoeppner wrote: >> Carlos, I think it's time you join spam-l and learn all the tricks to >> fighting spam. http://spam-l.com/mailman/listinfo/spam-l > > Thanks. I will research this and see what I can learn