Re: Statistics on TLS certificates used when sending with opportunistic TLS

2014-03-17 Thread Robert Schetterer
Am 17.03.2014 12:39, schrieb Viktor Dukhovni: > Fortunately, more and more smtp servers offer STARTTLS. >> I would like to analyze the certificates used when employing STARTTLS >> "opportunistically". there is always the chance to write a script doing tls checks and perhaps grep log to store resul

Re: postmap btree sorted source?

2014-03-17 Thread Craig R. Skinner
On 2014-03-17 Mon 14:46 PM |, Viktor Dukhovni wrote: > > 20k records may seem like a lot of entries, but it is comparatively > a tiny Berkeley DB table. You've no reason to care about optimizing > it. Thanks. > If you don't plan incremental updates, I'd like to suggest > CDB, because the on-dis

Re: postmap btree sorted source?

2014-03-17 Thread Viktor Dukhovni
On Mon, Mar 17, 2014 at 02:30:32PM +, Craig R. Skinner wrote: > On 2014-03-17 Mon 14:08 PM |, Viktor Dukhovni wrote: > > > > > Do btree source files need to be sorted before postmapping? > > > > No, but time to insert millions of records may depend on the order > > of the keys. Do you plan

Re: reliable audit trail info - was Statistics on TLS certificates used when sending with opportunistic TLS

2014-03-17 Thread Viktor Dukhovni
On Mon, Mar 17, 2014 at 03:17:01PM +0100, Ralf Hauser wrote: > > This is not practical. We could optionally log the public key > > digest of the leaf certificate at a lower log level, or if you > > really must log the public key digest of each certificate in the > > chain. What do you actually w

Re: postmap btree sorted source?

2014-03-17 Thread Craig R. Skinner
On 2014-03-17 Mon 14:08 PM |, Viktor Dukhovni wrote: > > > Do btree source files need to be sorted before postmapping? > > No, but time to insert millions of records may depend on the order > of the keys. Do you plan to have enormous btree lookup tables? > Not this year ~100, maybe eventua

Re: postmap btree sorted source?

2014-03-17 Thread Viktor Dukhovni
On Mon, Mar 17, 2014 at 02:00:53PM +, Craig R. Skinner wrote: > Do btree source files need to be sorted before postmapping? > > [...] > > http://thread.gmane.org/gmane.mail.postfix.user/17650/ In that thread I pointed out that bulk testing btree *lookup* performance is best done with lookup k

Re: postmap btree sorted source?

2014-03-17 Thread Viktor Dukhovni
On Mon, Mar 17, 2014 at 02:00:53PM +, Craig R. Skinner wrote: > Do btree source files need to be sorted before postmapping? No, but time to insert millions of records may depend on the order of the keys. Do you plan to have enormous btree lookup tables? -- Viktor.

postmap btree sorted source?

2014-03-17 Thread Craig R. Skinner
Do btree source files need to be sorted before postmapping? DATABASE_README says about btree: "A sorted, balanced tree structure." http://www.postfix.org/DATABASE_README.html#types >From the 8/11 year old archives below, I think:- With an unsorted source file, postmap produces a "sorted" btree d

Re: Postfix badmailfromto filtering

2014-03-17 Thread Ahmad riza h nst
> > For a more scalable approach, you can use an external policy service > such as postfwd, or write your own. All, I did it with postfwd. Thank you. > http://www.postfix.org/SMTPD_POLICY_README.html > http://www.postfix.org/addon.html#policy > > Or use a milter. There are probably existing mi

Configuring Postfix with Amazon SES

2014-03-17 Thread Raphael Rabelo
Hello, I'm trying to configure postfix to send mail by amazon ses services, I follow this steps of Amazon Docs, but unsuccessful. http://docs.aws.amazon.com/ses/latest/DeveloperGuide/postfix.html The objective is a transactional mail server, so, just a app server can send mail using this postfix

Re: Spam email containing Hidden Text

2014-03-17 Thread jason hirsh
Sorry I am using Postfix with Amasvid-new/spam assassin and Dovecot Over all doing pretty good catching stuff but this is combination is new to me and the only guides that discuss it seem to be trying to sell a product On Mar 15, 2014, at 3:10 PM, Nikolaos Milas wrote: > On 15/3/2014 8:28

Re: Limit number of Cci recipient

2014-03-17 Thread Viktor Dukhovni
On Mon, Mar 17, 2014 at 12:39:52PM +0100, li...@rhsoft.net wrote: > Am 17.03.2014 12:36, schrieb Alexandre Ellert: > > Some of our customers have bad malling practices and I want to limit the > > max number of Cci recipient. > > I already use smtpd_recipient_limit but I would like to use a lower

Re: Limit number of Cci recipient

2014-03-17 Thread li...@rhsoft.net
Am 17.03.2014 12:36, schrieb Alexandre Ellert: > Some of our customers have bad malling practices and I want to limit the max > number of Cci recipient. > I already use smtpd_recipient_limit but I would like to use a lower value for > Cci. > Do you know how can I achieve this using Postfix? on

Re: Statistics on TLS certificates used when sending with opportunistic TLS

2014-03-17 Thread Viktor Dukhovni
On Sun, Mar 16, 2014 at 05:04:11PM +0100, Ralf Hauser wrote: > Fortunately, more and more smtp servers offer STARTTLS. > I would like to analyze the certificates used when employing STARTTLS > "opportunistically". What does "analyze" mean? Certificate chains are often multi-kilobyte objects (at

Limit number of Cci recipient

2014-03-17 Thread Alexandre Ellert
Hello, Some of our customers have bad malling practices and I want to limit the max number of Cci recipient. I already use smtpd_recipient_limit but I would like to use a lower value for Cci. Do you know how can I achieve this using Postfix ? Thanks. Alexandre

Re: Permit SASL authenticated users to bypass DMARC

2014-03-17 Thread Andreas Schulze
Oriental Sensation: smtps inet n - n - - smtpd -o smtpd_milters=inet:smtp:10025 I used to define macros for each milter in main.cf: dkim_milter = inet:[127.0.0.1]:10025 dmarc_milter = inet:[127.0.0.1]:10026 and use them in master.cf: smtp inet

Re: Permit SASL authenticated users to bypass DMARC

2014-03-17 Thread Oriental Sensation
Birta, Thanks for the prompt input. I think the correct way is the following, though: smtps inet n - n - - smtpd -o smtpd_milters=inet:smtp:10025 Which basically will apply DKIM signatures but jump over DMARC auth. This was easy indeed, thanks :) /

Re: Permit SASL authenticated users to bypass DMARC

2014-03-17 Thread Birta Levente
On 17/03/2014 10:32, Oriental Sensation wrote: Hello group, I have an issue with Postfix, Dovecot, OpenDKIM and OpenDMARC cooperating together to achieve the following: Enable me to send Email from my phone device after authenticating my identity with SASL. It seems OpenDMARC is not recognizing

Permit SASL authenticated users to bypass DMARC

2014-03-17 Thread Oriental Sensation
Hello group, I have an issue with Postfix, Dovecot, OpenDKIM and OpenDMARC cooperating together to achieve the following: Enable me to send Email from my phone device after authenticating my identity with SASL. It seems OpenDMARC is not recognizing the IP (obviously an arbitrary one where my devi

Re: Mail Server Accused of Spam!

2014-03-17 Thread Wolfgang Zeikat
In an older episode, on 2014-03-17 07:22, Thomas Harold wrote: GMail has the ability where those users could setup GMail to pull from your POP3 server. There's no need for you to be forwarding mail to a GMail account. (It's under Settings, Accounts in GMail.) Note: That means that users woul

Re: Force "AUTH" before "MAIL FROM" command for submission port 587

2014-03-17 Thread Andreas Schulze
lists: To get a "+", the descriptions says: "Your system requires authentication (AUTH) on port 587 before the MAIL FROM command is issued" that is pure nonsense +1 you cannot enforce any client to not send any command. but you can enforce proper answers. Andreas