Re: New default settings for "submission" service?

2012-03-15 Thread Ed W
On 15/03/2012 13:01, Victoriano Giralt wrote: DTNX/NGMX Postmaster wrote: I don't know about Android, but we have not seen any issues with the iPhone/iPad. Works fine with TLS 'encrypt' in our setups, as suggested above. In my experience, both the manufacturer provided and added mail clients

Re: Building Postfix RHEL RPMs with custom LDAP packages

2012-03-15 Thread Wietse Venema
Nikolaos Milas: > > If you just copy old config files over a new Postfix installation > > then you will end up with a broken system. > > Hmm, could you please provide some more details on it? Why so? I would > imagine that a full set of master.cf, main.cf and any other files used > therein (hash

Re: high-availability configurations?

2012-03-15 Thread Miles Fidelman
Jeroen Geilman wrote: On 03/14/2012 04:19 PM, Miles Fidelman wrote: Hi Folks, I'm currently running a pretty basic high-availability configuration for our mail server (postfix) - it simply runs in a Xen virtual machine, with mirrored disks across two machines (DRBD), and failover of the VM i

Re: How to accept but delete all incoming mail

2012-03-15 Thread Jeroen Geilman
On 03/12/2012 06:05 PM, Janne H wrote: Hello. I've setup a null client (from the postfix doc) to use a sender rewrite with sender_canonical_maps to send mail from serv...@foo.bar through a mailgateway. And before finishing of the mailgateway config, I got a bounce back. So how can I fix the n

Re: high-availability configurations?

2012-03-15 Thread Jeroen Geilman
On 03/14/2012 04:19 PM, Miles Fidelman wrote: Hi Folks, I'm currently running a pretty basic high-availability configuration for our mail server (postfix) - it simply runs in a Xen virtual machine, with mirrored disks across two machines (DRBD), and failover of the VM if something goes wrong

Re: Building Postfix RHEL RPMs with custom LDAP packages

2012-03-15 Thread Nikolaos Milas
On 15/3/2012 7:56 μμ, Nikolaos Milas wrote: So, I guess that if I upgrade using an RPM (through "rpm -Uvh"), as I described, the upgrade is expected to be successful too? I would like to also clarify that the system shows: # rpm -qa | grep postfix postfix-2.3.3-2.1.el5_2 because the s

Re: Building Postfix RHEL RPMs with custom LDAP packages

2012-03-15 Thread Nikolaos Milas
On 15/3/2012 4:01 μμ, Wietse Venema wrote: Instead, use "make upgrade" which updates main.cf and master.cf to maintain compatibility with the earlier version. Thank you Wietse. That's how I've been upgrading until now (using "make upgrade"). But now I want to switch from source-compilation t

Re: Perl milters?

2012-03-15 Thread Kris Deugau
Ben Rosengart wrote: What is the best Perl interface for milters? I found several: Sendmail::Milter is way old, and demands "-Dusethreads" -- my perl is built with "-Duseithreads". Sendmail::Pmilter is recent, but lacks a maintainer. No traffic on its mailing list since 2009.

Re: Building Postfix RHEL RPMs with custom LDAP packages

2012-03-15 Thread Wietse Venema
Nikolaos Milas: > Is there a way to completely uninstall this version? That would be a mistake - you'd lose your configuration. Instead, use "make upgrade" which updates main.cf and master.cf to maintain compatibility with the earlier version. If you just copy old config files over a new Postfix

Re: Building Postfix RHEL RPMs with custom LDAP packages

2012-03-15 Thread Nikolaos Milas
On 15/3/2012 12:46 μμ, Nikolaos Milas wrote: Now I'll have to setup an installation to test everything and confirm correct software operation. I would like to test the new RPMs on a server (CentOS 5.8 x86_64) where there is already a Postfix v2.8.2 built from source (following directions:

Re: New default settings for "submission" service?

2012-03-15 Thread Victoriano Giralt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 DTNX/NGMX Postmaster wrote: >I don't know about Android, but we have not seen any issues with the >iPhone/iPad. Works fine with TLS 'encrypt' in our setups, as suggested >above. In my experience, both the manufacturer provided and added mail clie

OT Re: New default settings for "submission" service?

2012-03-15 Thread Victoriano Giralt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 SamLT wrote: >Sorry for the OT, but does s_client even works with IPv6? I've never >found how? In my experience, limited to bare IPv6 addresses, it does not. - -- Victoriano Giralt Enviado desde el movil / Sent from mobile -BEGIN PGP SIGNATU

Re: New default settings for "submission" service?

2012-03-15 Thread DTNX/NGMX Postmaster
On Mar 14, 2012, at 21:03, Patrick Ben Koetter wrote: > * Charles Marcus : >> On 2012-03-14 2:39 PM, Ed W wrote: >>> I see no reason to *require* encryption on the submission port (RFC >>> aside). >> >> Unless you prefer that sniffers not be able to see your passwords >> crossing the wire in pla

Re: New default settings for "submission" service?

2012-03-15 Thread DTNX/NGMX Postmaster
On Mar 14, 2012, at 19:39, Ed W wrote: > On 13/03/2012 23:50, Wietse Venema wrote: >> #submission inet n - n - - smtpd >> # -o syslog_name=postfix/submission >> # -o smtpd_tls_security_level=encrypt > > I forget the exact details now, but one mail client, I think i

Re: New default settings for "submission" service?

2012-03-15 Thread SamLT
On Thu, Mar 15, 2012 at 10:44:33AM +0100, Victoriano Giralt wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > > Victoriano Giralt wrote: > > >And I have found that gnutls-climate is better for testing IPv6 > >servers. > Stupid autocorrection, I meant gnutls-cli Sorry for the OT

Re: Building Postfix RHEL RPMs with custom LDAP packages

2012-03-15 Thread Nikolaos Milas
On 15/3/2012 3:14 πμ, Sahil Tandon wrote: Does your /etc/ld.so.conf contain the appropriate paths, and is your hints file up to date? Thank you Sahil, Your hint gave me a solution: I found that there was no ld path configured for these libraries. I created a file: /etc/ld.so.conf.d/openldap

Re: New default settings for "submission" service?

2012-03-15 Thread Victoriano Giralt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Victoriano Giralt wrote: >And I have found that gnutls-climate is better for testing IPv6 >servers. Stupid autocorrection, I meant gnutls-cli - -- Victoriano Giralt Enviado desde el movil / Sent from mobile -BEGIN PGP SIGNATURE- Version:

Re: New default settings for "submission" service?

2012-03-15 Thread Victoriano Giralt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ulrich Zehl wrote: >For basic testing, I tend to use "gnutls-cli --starttls", where it >starts a >plain text session, and only begins TLS negotiation when you send it >EOF >(or SIGALRM, but ^D has always been easy enough for me). >As far as I kno

Re: New default settings for "submission" service?

2012-03-15 Thread Ulrich Zehl
On Wed, Mar 14, 2012 at 08:52:54PM -0500, Noel Jones wrote: > Yes, I would always choose telnet first. Unfortunately, if you want > to test an encrypted session telnet fails miserably. > > The [press R to renegotiate] behavior of s_client is documented and, > last time I looked, can't be disabled