Re: Wondering about ": End-of-data rejected: "

2014-04-19 Thread Viktor Dukhovni
On Sat, Apr 19, 2014 at 11:10:13PM +0200, Axel Luttgens wrote: > >> Can it be avoided? > > > > No. > > Well... This is perhaps the opportunity for a feature request? Unlikely to happen in this case. Far more important than the user understanding the message is that the postmaster understands t

Re: Wondering about ": End-of-data rejected: "

2014-04-19 Thread Axel Luttgens
Le 19 avr. 2014 à 20:01, Viktor Dukhovni a écrit : > On Sat, Apr 19, 2014 at 07:01:45PM +0200, Axel Luttgens wrote: > >> action=REJECT Mailbox is unavailable >> >> This is then what I get in the SMTP conversation: >> >> 554 5.7.1 : End-of-data rejected: Mailbox is unavailable >> >> W

Re: Wondering about ": End-of-data rejected: "

2014-04-19 Thread Viktor Dukhovni
On Sat, Apr 19, 2014 at 07:01:45PM +0200, Axel Luttgens wrote: > action=REJECT Mailbox is unavailable > > This is then what I get in the SMTP conversation: > > 554 5.7.1 : End-of-data rejected: Mailbox is unavailable > > Where does this substring ": End-of-data rejected: " come > f

Wondering about ": End-of-data rejected: "

2014-04-19 Thread Axel Luttgens
Hello, I'm experimenting with policy servers. (this is with postfix 2.11.0) Let's say that such a server, when invoked from a smtpd_end_of_data_restrictions, writes on STDOUT: action=REJECT Mailbox is unavailable This is then what I get in the SMTP conversation: 554 5.7.1 : En

Re: Can you run postfix with two different types of alias files at the same time?

2014-04-19 Thread Viktor Dukhovni
On Sat, Apr 19, 2014 at 09:58:10AM -0500, Jamie Lagarde wrote: > I need to apply a regex rule to inbound mail to route some of the mail > to a different local mailbox. I need to do this while still > maintaining the existing "standard" /etc/aliases file. I can't seem > to get postfix to use both

Re: Changing SSL certificates - switching from self-signed to RapidSSL

2014-04-19 Thread Viktor Dukhovni
On Sat, Apr 19, 2014 at 07:06:31AM -0400, Charles Marcus wrote: > I hate to keep imposing on you, but since I don't have the postfinger tool, Your submission service configuration is now correct. In each pair of lines the "issuer" is the name of the certification authority that signed the certif

Re: New Greylisting daemon

2014-04-19 Thread Nicolas HAHN
I'll answer you in private soon Beeny to not polute postfix mailing list. Le 19/04/2014 14:44, Benny Pedersen a écrit : if its time to test it ? is there a maillist for this project ? or even code download link ? wiki ? <>

Can you run postfix with two different types of alias files at the same time?

2014-04-19 Thread Jamie Lagarde
Hello, I need to apply a regex rule to inbound mail to route some of the mail to a different local mailbox. I need to do this while still maintaining the existing "standard" /etc/aliases file. I can't seem to get postfix to use both alias files. Is this even possible? In main.cf I have it curr

Re: New Greylisting daemon

2014-04-19 Thread Wietse Venema
Nicolas HAHN: > > This is preferred usage. Closing the socket after each reply is wasteful. > > Thanks for the answer. Comments from Jan P. Kessler helped also. [...] > I see my processing childs dying after having processed 100 postfix > requests, for the ones not dying because of the timeout.

Re: New Greylisting daemon

2014-04-19 Thread Benny Pedersen
Nicolas HAHN skrev den 2014-04-18 20:22: This is preferred usage. Closing the socket after each reply is wasteful. Thanks for the answer. Comments from Jan P. Kessler helped also. if its time to test it ? is there a maillist for this project ? or even code download link ? wiki ?

Re: SOLVED - Re: Changing SSL certificates - switching from self-signed to RapidSSL

2014-04-19 Thread li...@rhsoft.net
Am 19.04.2014 12:59, schrieb Charles Marcus: > On 4/18/2014 6:52 PM, li...@rhsoft.net wrote: >> cat whatever-filename.crt your-private.key intermediate-a.crt > your.pem >> >> you are done, use that for *whatever* sevrer-software (httpd, postfix, ATS, >> dovecot) >> as key and or certificate

Re: Changing SSL certificates - switching from self-signed to RapidSSL

2014-04-19 Thread Charles Marcus
On 4/19/2014 6:32 AM, Charles Marcus wrote: Would you mind a quick check of both our smtp. and mail. (I'm guessing that I would need to do the same thing for dovecot's cert too)? Hi Victor, I hate to keep imposing on you, but since I don't have the postfinger tool, and have a hard time inter

SOLVED - Re: Changing SSL certificates - switching from self-signed to RapidSSL

2014-04-19 Thread Charles Marcus
On 4/18/2014 6:52 PM, li...@rhsoft.net wrote: cat whatever-filename.crt your-private.key intermediate-a.crt > your.pem you are done, use that for*whatever* sevrer-software (httpd, postfix, ATS, dovecot) as key and or certificate file Apparently not, if the certs you get are from RapidSS

Re: Changing SSL certificates - switching from self-signed to RapidSSL

2014-04-19 Thread li...@rhsoft.net
Am 19.04.2014 12:46, schrieb Charles Marcus: > On 4/19/2014 6:32 AM, Charles Marcus wrote: >> Thanks again Victor, without the support on this list many of us wanna-be >> admins would be in way over our heads... > > One other question... > > Would I be correct that the following error I'm now

Re: Changing SSL certificates - switching from self-signed to RapidSSL

2014-04-19 Thread Charles Marcus
On 4/19/2014 6:32 AM, Charles Marcus wrote: Thanks again Victor, without the support on this list many of us wanna-be admins would be in way over our heads... One other question... Would I be correct that the following error I'm now seeing since changing the certs could be caused by some peo

Re: Changing SSL certificates - switching from self-signed to RapidSSL

2014-04-19 Thread Charles Marcus
On 4/18/2014 5:14 PM, Viktor Dukhovni wrote: Though many/most client implementations may not mind, the certificate chain is not quite in the right order: $ posttls-finger -cC -Lsummary smtp.media-brokers.com:587 | openssl crl2pkcs7 -nocrl -certfile /dev/stdin | openssl