Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-14 Thread Viktor Dukhovni
On Fri, Oct 14, 2011 at 02:04:03PM -0500, Noel Jones wrote: > >> Typically these would be set to the same cert & keys as used by smtpd. > > > > Since these are self-signed certificates, would it be possible to use > > a URL for the CA file? > > No, the documentation says a file, not a URL. > Or

Re: Mail is delivered locally rather than remotely

2011-10-14 Thread Tim Johnson
* Noel Jones [111014 11:06]: > On 10/14/2011 1:51 PM, Tim Johnson wrote: > > Messages are being sent to my machine rather than to my domain > > hoster's mail server. > > I.E. If I send a message to myself, it goes directly to > > /var/mail/, rather than to the mailbox at my domain hoster. > > Sou

Messages successfully sent through MX relay still deferred

2011-10-14 Thread Jeroen van Vianen
Hi, I have the following problem: I have two postfix mail servers, one for my own domain on my home server and another one running on an external server that's sending mail to my own domainname.tld. My ISP blocks incoming port 25 and I therefore have to use a mail relay: DNS: mydomain.tld.

Re: Mail is delivered locally rather than remotely

2011-10-14 Thread Tim Johnson
* Tim Johnson [111014 11:06]: > FYI: Experienced with linux (ubuntu). New to Mac Lion. > Configuring Lion to send mail via postfix. > > Messages are being sent to my machine rather than to my domain > hoster's mail server. > I.E. If I send a message to myself, it goes directly to > /var/mail/, ra

Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-14 Thread Noel Jones
On 10/14/2011 1:55 PM, Simon Brereton wrote: > On 13 October 2011 20:11, Noel Jones wrote: >> On 10/13/2011 6:39 PM, Simon Brereton wrote: >>> smtp_tls_CAfile = ? >>> smtp_tls_cert_file = ? >>> smtp_tls_key_file = ? >> >> Typcially these would be set to the same cert & keys as used by smtpd. > >

Re: Mail is delivered locally rather than remotely

2011-10-14 Thread Noel Jones
On 10/14/2011 1:51 PM, Tim Johnson wrote: > Messages are being sent to my machine rather than to my domain > hoster's mail server. > I.E. If I send a message to myself, it goes directly to > /var/mail/, rather than to the mailbox at my domain hoster. Sounds as if you set mydestination incorrectly.

Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-14 Thread Simon Brereton
On 13 October 2011 20:11, Noel Jones wrote: > On 10/13/2011 6:39 PM, Simon Brereton wrote: >> smtp_tls_CAfile = ? >> smtp_tls_cert_file = ? >> smtp_tls_key_file = ? > > Typcially these would be set to the same cert & keys as used by smtpd. Since these are self-signed certificates, would it be pos

Mail is delivered locally rather than remotely

2011-10-14 Thread Tim Johnson
FYI: Experienced with linux (ubuntu). New to Mac Lion. Configuring Lion to send mail via postfix. Messages are being sent to my machine rather than to my domain hoster's mail server. I.E. If I send a message to myself, it goes directly to /var/mail/, rather than to the mailbox at my domain hoster.

Re: [SOLVED] Postfix - Problem message delivery between MX servers

2011-10-14 Thread Michel Bulgado
Kamil Raczyński wrote: On 2011-10-14 17:40, Michel Bulgado wrote: Before implementing SASL, you explain that anyone from my local network, could through the command line, telnet to port smtp server and send messages. Assuming that your email address and my email is ka...@home.com email address

Re: Postfix - Problem message delivery between MX servers

2011-10-14 Thread Noel Jones
On 10/14/2011 9:37 AM, Michel Bulgado wrote: > > smtpd_recipient_restrictions and smtpd_sender_restrictions > > smtpd_recipient_restrictions = permit_sasl_authenticated, > reject_unauth_destination, reject > > smtpd_sender_restrictions = permit_sasl_authenticated, > check_sender_access hash: / e

Re: TLS Issues. certificate unknown: SSL alert number 46:

2011-10-14 Thread Viktor Dukhovni
On Thu, Oct 13, 2011 at 07:11:27PM -0500, Noel Jones wrote: > Typically these would be set to the same cert & keys as used by smtpd. My recommendation is to leave the client key/cert settings empty. These should only be set for transports used with TLS client auth by mutual arrangement with a des

Re: Postfix - Problem message delivery between MX servers

2011-10-14 Thread Kamil Raczyński
On 2011-10-14 17:40, Michel Bulgado wrote: Before implementing SASL, you explain that anyone from my local network, could through the command line, telnet to port smtp server and send messages. Assuming that your email address and my email is ka...@home.com email address is mic...@home.com. M

Re: Postfix - Problem message delivery between MX servers

2011-10-14 Thread Michel Bulgado
Kamil Raczyński wrote: On 2011-10-14 16:37, Michel Bulgado wrote: >> If your intention is to accept emails *only* from your external MX >> server and from authenticated clients, then you can add >> check_client_access in smtpd_recipient_restrictions and >> smtpd_sender_restrictions. > > But at t

Re: Postfix - Problem message delivery between MX servers

2011-10-14 Thread Kamil Raczyński
On 2011-10-14 16:37, Michel Bulgado wrote: >> If your intention is to accept emails *only* from your external MX >> server and from authenticated clients, then you can add >> check_client_access in smtpd_recipient_restrictions and >> smtpd_sender_restrictions. > > But at the same time, anyone cou

Re: Postfix - Problem message delivery between MX servers

2011-10-14 Thread Michel Bulgado
Kamil Raczyński wrote: On 2011-10-14 00:37, Michel Bulgado wrote: [...] I was wondering if you can implement a white list in postfix, to accept smtp connections from the IP address of my mx server without any authentication. [...] If your intention is to accept emails *only* from your externa

RE: Attachment Limit Size

2011-10-14 Thread Joel Roberts
Wietse, Thanks for the post, it was very helpful. The testing did complete successfully, suggesting that the issue does exist on the Exchange server itself. I'll start digging deeper there looking for the cause. Thank you, Joel Roberts Network Administrator -Original Message- From: o

Re: Postfix - Problem message delivery between MX servers

2011-10-14 Thread Michel Bulgado
Stan Hoeppner wrote: On 10/13/2011 11:44 PM, mic...@casa.co.cu wrote: In the internal mail server, I enable the use of SASL for the local network, but external mail server (mx) is not. Perhaps this will be the problem? Perhaps. Did the two servers exchange emails without problem bef

Re: Confusing part of Docs

2011-10-14 Thread Wietse Venema
Mark Goodge: > On 14/10/2011 08:13, Peter wrote: > > > > ...and when someone comes into the #postfix IRC channel (like they did > > earlier today) seeking help because they read that last sentence in the > > docs and thought, "I have a dedicated server, I should set that to > > 'enforce'." and I lo

Re: Attachment Limit Size

2011-10-14 Thread Charles Marcus
On 2011-10-13 6:50 PM, Joel Roberts wrote: Nothing shows in the POSTFIX log if I’m tailing it while testing it. That only proves that either: 1. You are looking at the wrong logs or the right logs for the wrong server, or 2. The message is never hitting the server. -- Best regards, Char

Re: Confusing part of Docs

2011-10-14 Thread Stan Hoeppner
On 10/14/2011 2:37 AM, Mark Goodge wrote: > FWIW, I agree with Peter here. The documentation should avoid using > terminology where the contemporary meaning is significantly different to > the traditional meaning, otherwise there will always be scope for > misunderstanding. > > I'd rewrite that l

Re: Confusing part of Docs

2011-10-14 Thread Reindl Harald
Am 14.10.2011 08:58, schrieb Stan Hoeppner: > On 10/13/2011 10:04 PM, Peter wrote: > >> This is what I (and I think most people) understand "dedicated server" >> to mean. There must be a better term for this that is less confusing. > > This is a result of your limited background and education

Re: Confusing part of Docs

2011-10-14 Thread Mark Goodge
On 14/10/2011 08:13, Peter wrote: ...and when someone comes into the #postfix IRC channel (like they did earlier today) seeking help because they read that last sentence in the docs and thought, "I have a dedicated server, I should set that to 'enforce'." and I looked at that section of the docs

Re: Confusing part of Docs

2011-10-14 Thread Peter
On 14/10/11 19:58, Stan Hoeppner wrote: > This is a result of your limited background and education Peter. The > term "server" was used to describe a software program's role long before > hardware companies adopted the word "server" to describe a class of > machines. You don't know me or my backg