Re: "Too many errors" messages

2013-12-24 Thread Viktor Dukhovni
On Tue, Dec 24, 2013 at 03:11:11PM -0500, Wietse Venema wrote: > > Dec 24 11:33:10 mail02 postfix/smtpd[8603]: too many errors after DATA > > from unknown[23.92.90.231] NetRange: 23.92.90.224 - 23.92.90.239 CIDR: 23.92.90.224/28 OriginAS: AS19531 NetName:

Re: "Too many errors" messages

2013-12-24 Thread Wietse Venema
Alex: > I'm receiving messages similar to the following on three mail servers > on two separate networks with postfix-2.9: > > Dec 24 11:33:10 mail02 postfix/smtpd[8603]: too many errors after DATA > from unknown[23.92.90.231] > Dec 24 11:48:06 mail01 postfix/smtpd[14470]: too many errors after >

"Too many errors" messages

2013-12-24 Thread Alex
Hi, I'm receiving messages similar to the following on three mail servers on two separate networks with postfix-2.9: Dec 24 11:33:10 mail02 postfix/smtpd[8603]: too many errors after DATA from unknown[23.92.90.231] Dec 24 11:48:06 mail01 postfix/smtpd[14470]: too many errors after RCPT from mail.

Re: Bug in Postfix 2.10.2 milter interface regarding sender/recipient rewrite?

2013-12-24 Thread Wietse Venema
Benoit Panizzon: > compute SRS sender > change_sender($srs-sender) > delete_recipient(ben...@ambonet.ch) > add_recipient(ben...@ambonet.ch) > add_recipient(te...@example.com) > add_recipient(te...@example.com) > add_recipient(te...@example.com) > > Same result, only local delivery. It will help i

Re: Certificate Error (android client)

2013-12-24 Thread li...@rhsoft.net
Am 24.12.2013 19:13, schrieb Viktor Dukhovni: > On Tue, Dec 24, 2013 at 06:36:08PM +0100, li...@rhsoft.net wrote: > >> For me it looked logical that if I have the two params for >> smtpd_ and there are identical for smtp_ they should be both >> used with the same cert >> >> smtpd_tls_cert_file =

Re: Certificate Error (android client)

2013-12-24 Thread Viktor Dukhovni
On Tue, Dec 24, 2013 at 06:36:08PM +0100, li...@rhsoft.net wrote: > For me it looked logical that if I have the two params for > smtpd_ and there are identical for smtp_ they should be both > used with the same cert > > smtpd_tls_cert_file = /etc/postfix/certs/localhost.pem > smtpd_tls_key_file

Re: Certificate Error (android client)

2013-12-24 Thread li...@rhsoft.net
Am 24.12.2013 18:13, schrieb Viktor Dukhovni: > On Tue, Dec 24, 2013 at 05:45:21PM +0100, li...@rhsoft.net wrote: > >> Maybe a good idea to consider using the wildcard-certificate >> with SHA2 for outgoing messages and order a 3072/SHA1 for the >> MX and use the wildcard for all other services > >

Re: Bug in Postfix 2.10.2 milter interface regarding sender/recipient rewrite?

2013-12-24 Thread Wietse Venema
What is the Postfix version. Milter support has evolved in the 8 years. Wietse

Re: Certificate Error (android client)

2013-12-24 Thread Viktor Dukhovni
On Tue, Dec 24, 2013 at 05:45:21PM +0100, li...@rhsoft.net wrote: > Maybe a good idea to consider using the wildcard-certificate > with SHA2 for outgoing messages and order a 3072/SHA1 for the > MX and use the wildcard for all other services You don't need to, and SHOULD NOT, configure a client c

Re: Bug in Postfix 2.10.2 milter interface regarding sender/recipient rewrite?

2013-12-24 Thread moparisthebest
I can't tell for sure because those emails are examples, but depending how you get the recipient to delete in the first place, you might be getting it with the wrong case, refer to this thread: http://postfix.1071664.n5.nabble.com/case-related-milter-bug-td62886.html#a62890 In short, the milter

Re: Postfix+LDAP nolocal delivery

2013-12-24 Thread Viktor Dukhovni
On Tue, Dec 24, 2013 at 11:52:37AM +0100, Zeljko Culek wrote: > Qmail did not deliver mail to the list "mailbox", only to the > accounts on the list/group. > > Now with Postfix I can't achieve the same behaviour. Can Postfix (I > now it can, but don't know how :)) be set up not to deliver the mai

Re: Certificate Error (android client)

2013-12-24 Thread li...@rhsoft.net
Am 24.12.2013 17:33, schrieb Viktor Dukhovni: > On Tue, Dec 24, 2013 at 11:16:50AM +0100, li...@rhsoft.net wrote: > >>> The symptom would be that your certificate chain is not verifiable, >>> verify error:num=7:certificate signature failure >> >> Thank you for that. >> >> Am I right that this do

Re: Certificate Error (android client)

2013-12-24 Thread Viktor Dukhovni
On Tue, Dec 24, 2013 at 11:16:50AM +0100, li...@rhsoft.net wrote: > > The symptom would be that your certificate chain is not verifiable, > > verify error:num=7:certificate signature failure > > Thank you for that. > > Am I right that this does not break opportunistic TLS at a whole > for such d

Re: Postfix+LDAP nolocal delivery

2013-12-24 Thread Wietse Venema
Zeljko Culek: [ Charset ISO-8859-2 unsupported, converting... ] > Hello everyone, > > I need some help with postfix+LDAP config and delivery mode. > > We're using Postfix 2.6.6 on Centos 6.4. Before, we used Qmail with the > same LDAP (on old Debian). Our LDAP accounts have the attribute > > de

Re: Bug in Postfix 2.10.2 milter interface regarding sender/recipient rewrite?

2013-12-24 Thread Wietse Venema
What Postfix version?

Re: Postfix+LDAP nolocal delivery

2013-12-24 Thread Achim Gottinger
Am 24.12.2013 11:52, schrieb Zeljko Culek: Hello everyone, I need some help with postfix+LDAP config and delivery mode. We're using Postfix 2.6.6 on Centos 6.4. Before, we used Qmail with the same LDAP (on old Debian). Our LDAP accounts have the attribute deliveryMode which we used for mail

Postfix+LDAP nolocal delivery

2013-12-24 Thread Zeljko Culek
Hello everyone, I need some help with postfix+LDAP config and delivery mode. We're using Postfix 2.6.6 on Centos 6.4. Before, we used Qmail with the same LDAP (on old Debian). Our LDAP accounts have the attribute deliveryMode which we used for mailing lists (OK, they are in fact "mailing gro

Re: Certificate Error (android client)

2013-12-24 Thread li...@rhsoft.net
Am 24.12.2013 04:03, schrieb Viktor Dukhovni: > On Tue, Dec 24, 2013 at 01:16:33AM +0100, li...@rhsoft.net wrote: >>> Deploying digests beyond SHA1 will cause interoperability problems >>> with systems that don't yet support the SHA2 family >> >> Are you aware of systems / mailservers which would

Bug in Postfix 2.10.2 milter interface regarding sender/recipient rewrite?

2013-12-24 Thread Benoit Panizzon
Hello We use MIMEDefang to do spam/virus scanning and also to forward emails in a SRS compatible way, count bounces and do some phishing detection. Now I have found out, that sometimes the functions to change the sender or delete / add recipients do not work. Its is mostly reproducable with th