Re: Whitelisting certain attachments on postfix

2014-01-05 Thread portos_latinos
Hi people, I tried to whitelist certain attachments on postfix and I can't succeed I tried to blacklist certain attachments and it worked with: mime_header_checks = regexp:/etc/postfix/mime_header_checks Append following line: /name=[^>]*\.(bat|com|exe|dll|vbs)/ REJECT I tried this: Appe

Re: New "TLS Forward Secrecy" document

2014-01-05 Thread Wietse Venema
micah: > I completely agree, however it seems we do not agree with the matching > names should be. That is precisely why I write this message. The postfix > parameter names and documentation should adopt the standardized names > that openssl is changing to. As it is written now, the postfix TLS We

Re: New "TLS Forward Secrecy" document

2014-01-05 Thread micah
Viktor Dukhovni writes: > On Sun, Jan 05, 2014 at 06:31:46PM -0500, micah wrote: > >> > Given cipherlist class names: >> > >> >kEECDH - cipher suites that support Ephemeral ECDH key exchange >> >kEDH- cipher suites that support Ephemeral DH key exchange >> >> I'm sorry, but I have n

Re: Whitelisting certain attachments on postfix

2014-01-05 Thread Noel Jones
Maybe if you explain a little more about what your goal is someone can offer some advice. On 1/5/2014 2:47 PM, portos_latinos wrote: > It seems That ! Doesn t work > > > > -- > View this message in context: > http://postfix.1071664.n5.nabble.com/Whitelisting-certain-attachments-on-postfix-t

Re: New "TLS Forward Secrecy" document

2014-01-05 Thread Viktor Dukhovni
On Sun, Jan 05, 2014 at 06:31:46PM -0500, micah wrote: > > Given cipherlist class names: > > > > kEECDH - cipher suites that support Ephemeral ECDH key exchange > > kEDH- cipher suites that support Ephemeral DH key exchange > > I'm sorry, but I have no idea what "cipherlist class nam

Re: New "TLS Forward Secrecy" document

2014-01-05 Thread micah
Hi Viktor, Thanks for the reply. Viktor Dukhovni writes: > On Thu, Jan 02, 2014 at 06:03:40PM -0500, micah wrote: > >> I notice that you are using OpenSSL's private terminology (EDH and >> EECDH) instead of the standard terminology (DHE and ECDHE). > > Given cipherlist class names: > > k

postfix-2.11 stable release candidate available

2014-01-05 Thread Wietse Venema
Postfix 2.11.0 stable release candidate 1 is uploaded to ftp.porcupine.org and will appear on mirror sites in the next 24 hours. Below is a copy of the RELEASE_NOTES file. I expect to finalize Postfix 2.11.0 before the end of this month. It was unfortunately not possible to support LMDB with thi

Re: tls_eecdh_*_curve

2014-01-05 Thread Viktor Dukhovni
On Sun, Jan 05, 2014 at 01:58:30PM +0100, Andreas Schulze wrote: > the documentation to these parameters refers the NSA website. > However the links are broken. That's the trouble with links. Anyone have suggested replacements. > Also I don't feel very comfortable these days if postfix uses cry

Re: Whitelisting certain attachments on postfix

2014-01-05 Thread portos_latinos
It seems That ! Doesn t work -- View this message in context: http://postfix.1071664.n5.nabble.com/Whitelisting-certain-attachments-on-postfix-tp63436p64125.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: tls_eecdh_*_curve

2014-01-05 Thread Robert Schetterer
Am 05.01.2014 16:22, schrieb li...@rhsoft.net: > to be honest: somebody saying "i do not trust this and that" does > not interest me as long there is nothing he can show to prove his > feelings - i am IT specialist and not a priest believing in things good point, i agree in this ! any comments to

Re: Question re: postconf -M output

2014-01-05 Thread Charles Marcus
On 2014-01-05 10:42 AM, Charles Marcus wrote: That output above was the result of postconf -Mf Sorry, in my original email I did say -M, but I meant -Mf

Re: Question re: postconf -M output

2014-01-05 Thread Charles Marcus
On 2014-01-05 10:17 AM, wie...@porcupine.org (Wietse Venema) wrote: Charles Marcus: I just noticed this and wanted to make sure this is the way it is supposed to show. When I do postconf -M, the output shows: submission inet n - n - - smtpd -o syslog_name=postfi

Re: tls_eecdh_*_curve

2014-01-05 Thread li...@rhsoft.net
Am 05.01.2014 14:40, schrieb Ansgar Wiechers: > On 2014-01-05 li...@rhsoft.net wrote: >> Am 05.01.2014 13:58, schrieb Andreas Schulze: >>> the documentation to these parameters refers the NSA website. However >>> the links are broken. Also I don't feel very comfortable these days >>> if postfix us

Re: Question re: postconf -M output

2014-01-05 Thread Wietse Venema
Charles Marcus: > Hello, > > I just noticed this and wanted to make sure this is the way it is > supposed to show. > > When I do postconf -M, the output shows: > > > submission inet n - n - - smtpd > > -o syslog_name=postfix-587 -o smtpd_tls_security_level=encrypt

Question re: postconf -M output

2014-01-05 Thread Charles Marcus
Hello, I just noticed this and wanted to make sure this is the way it is supposed to show. When I do postconf -M, the output shows: submission inet n - n - - smtpd -o syslog_name=postfix-587 -o smtpd_tls_security_level=encrypt -o smtpd_tls_auth_only=yes -

Re: tls_eecdh_*_curve

2014-01-05 Thread nano
On 5/01/2014 11:58 PM, Andreas Schulze wrote: Hello, the documentation to these parameters refers the NSA website. However the links are broken. Also I don't feel very comfortable these days if postfix uses crypto approved by NSA :-/ Andreas I don't feel comfortable with the NSA in general,

Re: tls_eecdh_*_curve

2014-01-05 Thread Ansgar Wiechers
On 2014-01-05 li...@rhsoft.net wrote: > Am 05.01.2014 13:58, schrieb Andreas Schulze: >> the documentation to these parameters refers the NSA website. However >> the links are broken. Also I don't feel very comfortable these days >> if postfix uses crypto approved by NSA :-/ > > backed by more tha

Re: tls_eecdh_*_curve

2014-01-05 Thread li...@rhsoft.net
Am 05.01.2014 13:58, schrieb Andreas Schulze: > the documentation to these parameters refers the NSA website. However the > links are broken. > Also I don't feel very comfortable these days if postfix uses crypto approved > by NSA :-/ backed by more than FUD? people tend to forget that the NSA

tls_eecdh_*_curve

2014-01-05 Thread Andreas Schulze
Hello, the documentation to these parameters refers the NSA website. However the links are broken. Also I don't feel very comfortable these days if postfix uses crypto approved by NSA :-/ Andreas