Re: submission by cert verification only

2013-10-06 Thread Viktor Dukhovni
On Sun, Oct 06, 2013 at 08:52:06PM -0400, Dan Langille wrote: [ What Noel said, plus see below. ] > 10.0.0.1:submission inet n - n - - smtpd > -o smtpd_tls_req_ccert=yes Fine. > -o smtpd_tls_auth_only=no This seems silly. Since authentication gets them nowher

Re: submission by cert verification only

2013-10-06 Thread Noel Jones
On 10/6/2013 7:52 PM, Dan Langille wrote: > I managed to get this running tonight and I'm looking for sanity checking, in > case I'm completely missing something. Thanks. > > I wish to allow incoming mail from any client with a valid certificate. My > master.cf is: > > 10.0.0.1:submission ine

submission by cert verification only

2013-10-06 Thread Dan Langille
I managed to get this running tonight and I'm looking for sanity checking, in case I'm completely missing something. Thanks. I wish to allow incoming mail from any client with a valid certificate. My master.cf is: 10.0.0.1:submission inet n - n - - smtpd -o sm

Re: repairing queued messages with invalid content filter field

2013-10-06 Thread mls
On Sunday 06 October 2013 08:04:14 Noel Jones wrote: > All you need to do is requeue those messages. > > # postsuper -r QUEUEID > is sufficient for a handful of messages, or > # postsuper -r ALL > to requeue everything. Thanks, Noel, that was exactly what I was looking for.

Re: Postfix counters (was: limit and monitor too many sasl login from same user)

2013-10-06 Thread Wietse Venema
Viktor Dukhovni: > With SASL we don't know what the login name is unless authentication > succeeds. The user name encoding is mechanism specific (with GSSAPI > it is in the ticket!). Does the SASL API expose a user name for > failed logins? See discussion in my reply to Patrick. > > Did you hav

Re: repairing queued messages with invalid content filter field

2013-10-06 Thread Noel Jones
On 10/6/2013 1:46 AM, m...@jama.is wrote: > Hi all, > > I tried to install spamassassin as a postfix content filter. It did not work > well, so I deactivated it. I am now having a couple of undelivered messages > pending in DEFERRED which have in the header "contentfilter: spamfilter" set. > po

Re: repairing queued messages with invalid content filter field

2013-10-06 Thread Stan Hoeppner
On 10/6/2013 1:46 AM, m...@jama.is wrote: > Hi all, > > I tried to install spamassassin as a postfix content filter. It did not work > well, so I deactivated it. I am now having a couple of undelivered messages > pending in DEFERRED which have in the header "contentfilter: spamfilter" set. > po