Re: Blocking executables. What did I miss?

2014-05-31 Thread Viktor Dukhovni
On Sun, Jun 01, 2014 at 08:11:42AM +0300, Inteq Solution - Dep. Tehnic wrote: > I am blocking executables and potentially dangerous extensions with > header_checks = pcre:/etc/postfix/header_checks.pcre > > Inside header_checks.pcre I have: > > /^Content-(Disposition|Type).*name\s*=\s*"?(.*(\.|=

Blocking executables. What did I miss?

2014-05-31 Thread Inteq Solution - Dep. Tehnic
Hello Tonight, while checking Postfix config, I have stumbled upon something weird. I am blocking executables and potentially dangerous extensions with header_checks = pcre:/etc/postfix/header_checks.pcre Inside header_checks.pcre I have: /^Content-(Disposition|Type).*name\s*=\s*"?(.*(\.|

Re: Want to Improve SSL/TLS security

2014-05-31 Thread Viktor Dukhovni
On Sat, May 31, 2014 at 10:50:10PM +, Juan Pablo wrote: > I will be going encrypted connections only soon (yes I realize the > consequences) For inbound submission? To a dedicated upstream relay host? With selected peer systems? > so I would like to be able to at the very least disable the >

Re: Want to Improve SSL/TLS security

2014-05-31 Thread Viktor Dukhovni
On Sat, May 31, 2014 at 10:14:58PM +, Juan Pablo wrote: > Afternoon postfix users. I am trying to improve the encrypted connection > to my mail server running postfix 2.7.0-1ubuntu0.2 but doing tests with > https://starttls.info/ I am getting very low scores (E grade) for a number > of reaso

Re: Want to Improve SSL/TLS security

2014-05-31 Thread Juan Pablo
On 2014-05-31 22:34, li...@rhsoft.net wrote: *forget* them, they don't understand E-Mail and are too dumb for realize the difference between http/smtp OK forgetting them. I will be going encrypted connections only soon (yes I realize the consiquences) so I would like to be able to at the very

Re: Want to Improve SSL/TLS security

2014-05-31 Thread li...@rhsoft.net
Am 01.06.2014 00:14, schrieb Juan Pablo: > Afternoon postfix users. I am trying to improve the encrypted connection to > my mail server running postfix > 2.7.0-1ubuntu0.2 but doing tests with https://starttls.info/ I am getting > very low scores (E grade) for a number of > reasons despite maki

Want to Improve SSL/TLS security

2014-05-31 Thread Juan Pablo
Afternoon postfix users. I am trying to improve the encrypted connection to my mail server running postfix 2.7.0-1ubuntu0.2 but doing tests with https://starttls.info/ I am getting very low scores (E grade) for a number of reasons despite making what I though were necessary changes 1) "Ther

Re: Troubleshooting a delivery failure

2014-05-31 Thread Viktor Dukhovni
On Fri, May 30, 2014 at 03:52:21PM -0400, Tony Nelson wrote: > One of my users is sending a message to an external organization and it > bounced. It bounced deep inside the mail system of the recipient's organization. This is not your problem. > Received-SPF: pass (mail215-ch1: domain of starpo

RE: Troubleshooting a delivery failure

2014-05-31 Thread Marius Gologan
It looks to me that is more related to Exchange server, not Postfix. More likely the recipient(s) (users or groups) are limited to authenticated senders (internal). http://social.technet.microsoft.com/Forums/exchange/en-US/b7128bf2-4ec0-4508 -840f-32a34a12ac8b/550-571-resolverrstauthrequired-a

Re: Troubleshooting a delivery failure

2014-05-31 Thread Charles Marcus
On 5/30/2014 3:52 PM, Tony Nelson wrote: And for completeness, the full bounce is at the end of this message. Try again. Your report won't be complete until you show the full logs for this event. The bounce notification, while not totally useless, is not necessary. Best regards, Charles