Re: TLS Encription and server verification

2013-09-08 Thread Viktor Dukhovni
On Sun, Sep 08, 2013 at 11:56:32AM +0200, Luigi Rosa wrote: > Per http://www.postfix.org/postconf.5.html#smtpd_tls_policy_maps if I use > fingerprint in smtp_tls_policy_maps "there are no trusted certificate > authorities. The certificate trust chain, expiration date, ... > are not checked" Yes,

Re: sending mail using more then one smarthost\relayhost and sasl?

2013-09-08 Thread Jeroen Geilman
On 09/02/2013 10:56 PM, Eliezer Croitoru wrote: Hey, I have a situation with a working postfix install which I am not sure how to implement. You're not sure how to implement... a working situation ? the main problem is that from time to time I get a "rejected" mail from a remote system and w

Re: Postfix SMTP server: errors from mail-ve0-f174.google.com[209.85.128.174]

2013-09-08 Thread Jeroen Geilman
On 09/02/2013 08:11 AM, Eric Kom wrote: Good day, Please my smtp based on postfix its sending me a messages with the above subject and body: Postfix SMTP server: errors from mail-ve0-f174.google.com[209.85.128.174] Transcript of session follows. Out: 220 Great Kom Networks (Pty) LTD, Ready

Re: Handling quotas.

2013-09-08 Thread Bruce Markey
Sahil, Thanks for the link. I've been thinking moving to dovecot for a few reasons, this just adds to that. Bruce -- Please use PGP, ENCRYPT everything. For information about acquiring a secryption.com account, email me. My public key: https://www.secryption.com/BruceMarkey.asc or

Re: TLS Encription and server verification

2013-09-08 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerry said the following on 08/09/2013 13:24: >> So maybe there is something in the configuration that does not tell >> Postfix do use smtp_tls_policy_maps > > Why don't you post the output of: "postconf -n" and then we could tell > you. alias_da

Re: TLS Encription and server verification

2013-09-08 Thread Jerry
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, 08 Sep 2013 12:42:46 +0200 Luigi Rosa articulated: > Patrick Ben Koetter said the following on 08/09/2013 12:17: > > > You don't tell Postfix where to find the CA file that holds all CAs > > you trust. Without a CA cert Postfix cannot verif

Re: TLS Encription and server verification

2013-09-08 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Patrick Ben Koetter said the following on 08/09/2013 12:17: > You don't tell Postfix where to find the CA file that holds all CAs you > trust. Without a CA cert Postfix cannot verify a server cert. But, according to documentation, setting smtp_tls_po

Re: TLS Encription and server verification

2013-09-08 Thread Patrick Ben Koetter
* Luigi Rosa : > My goal is to use self-issued certificates to encrypt the communications > between two Postfix MTAs and validate their identities > > Per http://www.postfix.org/postconf.5.html#smtpd_tls_policy_maps if I use > fingerprint in smtp_tls_policy_maps "there are no trusted certificate >

TLS Encription and server verification

2013-09-08 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 My goal is to use self-issued certificates to encrypt the communications between two Postfix MTAs and validate their identities Per http://www.postfix.org/postconf.5.html#smtpd_tls_policy_maps if I use fingerprint in smtp_tls_policy_maps "there are no