Re: Ubuntu Upgrade broke my TLS

2012-12-12 Thread Reindl Harald
Am 13.12.2012 07:26, schrieb Stan Hoeppner: > On 12/12/2012 6:05 PM, Tony Nelson wrote: > >> I think it's in my best interest to get TLS operational again. > > So, you encrypt the transmission from the internal corporate groupware > server to the gateway server via a private network that you co

Re: Ubuntu Upgrade broke my TLS

2012-12-12 Thread Stan Hoeppner
On 12/12/2012 6:05 PM, Tony Nelson wrote: > I think it's in my best interest to get TLS operational again. So, you encrypt the transmission from the internal corporate groupware server to the gateway server via a private network that you completely control. But then you relay the same message ov

Re: Ubuntu Upgrade broke my TLS

2012-12-12 Thread Tony Nelson
On Dec 12, 2012, at 7:20 PM, Scott Kitterman wrote: > On Wednesday, December 12, 2012 07:05:51 PM Tony Nelson wrote: >> I just upgraded my Ubuntu server from 10.04 to 12.04 which upgraded Postfix >> to 2.9.1-4. The postfix server sits behind my firewall, in front of my >> corporate Exchange serv

Re: Ubuntu Upgrade broke my TLS

2012-12-12 Thread Tony Nelson
On Dec 12, 2012, at 7:10 PM, Will wrote: On 12/12/12 18:05, Tony Nelson wrote: I just upgraded my Ubuntu server from 10.04 to 12.04 which upgraded Postfix to 2.9.1-4. The postfix server sits behind my firewall, in front of my corporate Exchange servers. After the upgrade I found that my exch

Re: Ubuntu Upgrade broke my TLS

2012-12-12 Thread Scott Kitterman
On Wednesday, December 12, 2012 07:05:51 PM Tony Nelson wrote: > I just upgraded my Ubuntu server from 10.04 to 12.04 which upgraded Postfix > to 2.9.1-4. The postfix server sits behind my firewall, in front of my > corporate Exchange servers. > > After the upgrade I found that my exchange server

Re: Ubuntu Upgrade broke my TLS

2012-12-12 Thread Will
On 12/12/12 18:05, Tony Nelson wrote: I just upgraded my Ubuntu server from 10.04 to 12.04 which upgraded Postfix to 2.9.1-4. The postfix server sits behind my firewall, in front of my corporate Exchange servers. After the upgrade I found that my exchange servers would/could no longer send

Ubuntu Upgrade broke my TLS

2012-12-12 Thread Tony Nelson
I just upgraded my Ubuntu server from 10.04 to 12.04 which upgraded Postfix to 2.9.1-4. The postfix server sits behind my firewall, in front of my corporate Exchange servers. After the upgrade I found that my exchange servers would/could no longer send mail. I got the following error: Dec 12

Re: Change headers in outgoing email

2012-12-12 Thread Benny Pedersen
Ali Jawad skrev den 12-12-2012 21:35: Thank you for the prompt reply, basically I want it to show information other than what is in the hosts file, why ? I do have postfix with 7 instances and I want each instance to show it's own IP, instead it is showing the hostname in /etc/hosts do you

Re: Change headers in outgoing email

2012-12-12 Thread Ali Jawad
Hi Benny Thank you for the prompt reply, basically I want it to show information other than what is in the hosts file, I do have postfix with 7 instances and I want each instance to show it's own IP, instead it is showing the hostname in /etc/hosts Regards On Wed, Dec 12, 2012 at 10:30 PM, Benny P

Re: Change headers in outgoing email

2012-12-12 Thread Benny Pedersen
Ali Jawad skrev den 12-12-2012 21:10: How can I change this ? is /etc/hosts correct ? what is your login shell telling ? does it show unknown ? order in /etc/hosts is important that fqdn must be first listed after each ip # incorrect 127.0.0.1 localhost localhost.localdomain # correct 1

Re: Gmail stop support self signed SSL

2012-12-12 Thread J Gao
On 12-12-12 12:12 PM, Benny Pedersen wrote: J Gao skrev den 12-12-2012 19:44: http://productforums.google.com/forum/#!topic/gmail/uPP9EsiY1rA did you google free certs ? start point is http://www.cacert.org/ self signed have always being a bad idear, free signers is accepted if you can get

Re: Gmail stop support self signed SSL

2012-12-12 Thread Benny Pedersen
J Gao skrev den 12-12-2012 19:44: http://productforums.google.com/forum/#!topic/gmail/uPP9EsiY1rA did you google free certs ? start point is http://www.cacert.org/ self signed have always being a bad idear, free signers is accepted if you can get google to use cacert public root certs i j

Re: Gmail stop support self signed SSL

2012-12-12 Thread J Gao
On 12-12-12 11:54 AM, Javier Henderson wrote: On Wed, Dec 12, 2012 at 1:44 PM, J Gao mailto:j...@veecall.com>> wrote: Hi, all, My question may be OT but I'd like ask here so please forgive me. I have a mail server use postfix/courier and few of our users report having proble

Re: Gmail stop support self signed SSL

2012-12-12 Thread Javier Henderson
On Wed, Dec 12, 2012 at 1:44 PM, J Gao wrote: > Hi, all, > > My question may be OT but I'd like ask here so please forgive me. > > I have a mail server use postfix/courier and few of our users report > having problem if they use Gmail to retrieve emails from my server. I > googled and it seems Gm

Re: Gmail stop support self signed SSL

2012-12-12 Thread Noel Jones
On 12/12/2012 12:44 PM, J Gao wrote: > Hi, all, > > My question may be OT but I'd like ask here so please forgive me. > > I have a mail server use postfix/courier and few of our users report > having problem if they use Gmail to retrieve emails from my server. > I googled and it seems Gmail is ti

Re: Gmail stop support self signed SSL

2012-12-12 Thread Wietse Venema
J Gao: > Hi, all, > > My question may be OT but I'd like ask here so please forgive me. > > I have a mail server use postfix/courier and few of our users report > having problem if they use Gmail to retrieve emails from my server. I That would be a question for the COURIER mailing list. Postfi

Gmail stop support self signed SSL

2012-12-12 Thread J Gao
Hi, all, My question may be OT but I'd like ask here so please forgive me. I have a mail server use postfix/courier and few of our users report having problem if they use Gmail to retrieve emails from my server. I googled and it seems Gmail is tighten up its security. The are people have the

Re: Block ip address on ratelimit

2012-12-12 Thread /dev/rob0
On Wed, Dec 12, 2012 at 08:18:34PM +0530, Ram wrote: > Our client's postfix servers are being frequently getting attacks > using compromised accounts > In most cases it seems the spammer simply uses a phished > username/password , sends a whole lot of 419ers until we manually > change the password

Re: Block a domain via smtpd_sender_restrictions ?

2012-12-12 Thread /dev/rob0
On Wed, Dec 12, 2012 at 10:39:23AM +0100, Frank Bonnet wrote: > is it possible to block all a domain using > smtpd_sender_restrictions ? > > @spammers.com DISCARD First, why/who do you want to block? Almost all spam is sent with forged sender addresses, not the actual spammer's address. Blockin

Re: Block a domain via smtpd_sender_restrictions ?

2012-12-12 Thread Benny Pedersen
Frank Bonnet skrev den 12-12-2012 10:39: is it possible to block all a domain using smtpd_sender_restrictions ? @spammers.com DISCARD remove @ if its a subdomain its .example.org DISCARD its just that this helps other spammers use your domain as sender, with exspands the problem

Re: Block ip address on ratelimit

2012-12-12 Thread lconrad
On Wednesday 12/12/2012 at 8:48 am, Ram wrote: Our client's postfix servers are being frequently getting attacks using compromised accounts In most cases it seems the spammer simply uses a phished username/password , sends a whole lot of 419ers until we manually change the password , but t

Re: Block ip address on ratelimit

2012-12-12 Thread Dominik George
Hi, look at postfwd. Cheers, Nik Ram schrieb: >Our client's postfix servers are being frequently getting attacks using > >compromised accounts >In most cases it seems the spammer simply uses a phished >username/password , sends a whole lot of 419ers until we manually >change >the password

Block ip address on ratelimit

2012-12-12 Thread Ram
Our client's postfix servers are being frequently getting attacks using compromised accounts In most cases it seems the spammer simply uses a phished username/password , sends a whole lot of 419ers until we manually change the password , but the damage is already done Implementing ratelimits

Re: reject_rbl_client syntax problem: fatal: RBL reply error: missing "]" character

2012-12-12 Thread martijn.list
On 12/12/2012 01:00 PM, Stan Hoeppner wrote: On 12/11/2012 2:03 AM, martijn.list wrote: I guess in practice hardly no one will use it in this form but since I'm working on a web gui on which users can enter some RBL syntax I had to check what formats are accepted or not. Then you need to read

Re: reject_rbl_client syntax problem: fatal: RBL reply error: missing "]" character

2012-12-12 Thread Stan Hoeppner
On 12/11/2012 2:03 AM, martijn.list wrote: > I guess in practice hardly no one will use it in this form but since I'm > working on a web gui on which users can enter some RBL syntax I had to > check what formats are accepted or not. Then you need to read the RFC here: http://tools.ietf.org/html/r

Re: test only. do not read.

2012-12-12 Thread Pau Amma
On Tue, December 11, 2012 8:16 pm, Noel Jones wrote: > On 12/11/2012 2:02 PM, Gary Baribault wrote: >> Oh no!! Your curiosity got me to read it too .. countdown has >> started to armageddon, 10 days and counting!! >> > Somehow, Armageddon seems wrong for the Mayan end-of-time. > https://www.youtube

Re: {?} Re: TNEF

2012-12-12 Thread post...@netorbit.it
On 10/12/2012 16:09, The Doctor wrote: On Mon, Dec 10, 2012 at 02:59:25PM +, Duane Hill wrote: On Monday, 10 December, 2012 at 14:49:47 UTC, doc...@doctor.nl2k.ab.ca confabulated: Direct Question: How can postfix used TNEF without an external agent such as Amavis or MailSCanner? There's Y

Re: Block a domain via smtpd_sender_restrictions ?

2012-12-12 Thread Muzaffer Tolga Özses
On 12/12/2012 11:39 AM, Frank Bonnet wrote: Hello is it possible to block all a domain using smtpd_sender_restrictions ? @spammers.com DISCARD Thank you Read http://www.postfix.org/postconf.5.html#smtpd_sender_restrictions Muzaffer,

Re: virtual_alias_maps map lookup problem

2012-12-12 Thread Muzaffer Tolga Özses
On 12/12/2012 02:01 AM, Wietse Venema wrote: Muzaffer: virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf .. Dec 12 01:11:27 kartagis postfix/trivial-rewrite[24213]: warning: connect to mysql serve

Block a domain via smtpd_sender_restrictions ?

2012-12-12 Thread Frank Bonnet
Hello is it possible to block all a domain using smtpd_sender_restrictions ? @spammers.com DISCARD Thank you