Re: Documentation update: Milter signing bounces

2014-11-30 Thread Jose Borges Ferreira
On Sun, Nov 30, 2014 at 9:00 PM, Wietse Venema wrote: > I have added this text at the end of "Non-SMTPD Milter applications": > > Wietse > > Signing internally-generated bounce messages > > Postfix normally does not apply content filters to mail that is forwarded or > aliased internally, o

Re: TLS trusted issuers

2014-11-30 Thread Robert Moskowitz
On 11/30/2014 07:12 PM, Viktor Dukhovni wrote: On Sun, Nov 30, 2014 at 07:00:15PM -0500, Robert Moskowitz wrote: I am not suggesting you do this, but since you asked... As so often, Viktor, you get right to the 'key' point. Yes, why bother. Is it any faster if it has a lot of root CA files

Re: TLS trusted issuers

2014-11-30 Thread Viktor Dukhovni
On Sun, Nov 30, 2014 at 07:00:15PM -0500, Robert Moskowitz wrote: > >I am not suggesting you do this, but since you asked... > > As so often, Viktor, you get right to the 'key' point. Yes, why bother. Is > it any faster if it has a lot of root CA files to check against? The performance cost is

Re: TLS trusted issuers

2014-11-30 Thread Robert Moskowitz
On 11/30/2014 06:50 PM, Viktor Dukhovni wrote: On Sun, Nov 30, 2014 at 06:30:51PM -0500, Robert Moskowitz wrote: On 11/30/2014 04:55 PM, Wietse Venema wrote: Robert Moskowitz: Where does Postfix get its list of trusted certificate issuers? You decide: http://www.postfix.org/postconf.5.html#

Re: TLS trusted issuers

2014-11-30 Thread Viktor Dukhovni
On Sun, Nov 30, 2014 at 06:30:51PM -0500, Robert Moskowitz wrote: > On 11/30/2014 04:55 PM, Wietse Venema wrote: > >Robert Moskowitz: > >>Where does Postfix get its list of trusted certificate issuers? > >You decide: > >http://www.postfix.org/postconf.5.html#tls_append_default_CA > > Thanks. Now

Re: TLS trusted issuers

2014-11-30 Thread Robert Moskowitz
On 11/30/2014 04:55 PM, Wietse Venema wrote: Robert Moskowitz: Where does Postfix get its list of trusted certificate issuers? You decide: http://www.postfix.org/postconf.5.html#tls_append_default_CA Thanks. Now I just have to get a CA list onto the server. As well as what format the list

Re: TLS trusted issuers

2014-11-30 Thread Wietse Venema
Robert Moskowitz: > Where does Postfix get its list of trusted certificate issuers? You decide: http://www.postfix.org/postconf.5.html#tls_append_default_CA Wietse

TLS trusted issuers

2014-11-30 Thread Robert Moskowitz
Where does Postfix get its list of trusted certificate issuers? I just caught: Nov 30 16:29:24 z9m9z postfix/smtp[21643]: certificate verification failed for ibehy-com.mail.protection.outlook.com[207.46.163.138]:25: untrusted issuer /C=IE/O=Baltimore/OU=CyberTrust/CN=Baltimore CyberTrust Roo

Documentation update: Milter signing bounces

2014-11-30 Thread Wietse Venema
I have added this text at the end of "Non-SMTPD Milter applications": Wietse Signing internally-generated bounce messages Postfix normally does not apply content filters to mail that is forwarded or aliased internally, or to mail that is generated internally such as bounces or Postmaster

Re: TLS Issue

2014-11-30 Thread Viktor Dukhovni
On Sun, Nov 30, 2014 at 09:32:43AM -0700, Steffan A. Cline wrote: > I have a web app trying to connect to postfix to send mail via TLS. It > fails right after authentication. Actually, no, it (what you show from the logs) fails during the TLS handshake, which should precede authentication. > I f

TLS Issue

2014-11-30 Thread Steffan A. Cline
I've been googling a while to find a resolution to this but am not having the best of luck. I have a web app trying to connect to postfix to send mail via TLS. It fails right after authentication. I find a BUNCH of these in the log: Nov 30 10:10:32 hosting1 postfix/smtpd[11990]: connect from

Re: no subject

2014-11-30 Thread Eric
Thanks. After some twiddling, I stumbled on the same solution I think. MAIN.CF alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix inet_interfaces = all mailbox_size_limit = 0 mydestination = ourrelay-cb01, localhos

Re: Backup mx

2014-11-30 Thread li...@rhsoft.net
Am 30.11.2014 um 18:19 schrieb Matteo Lanzoni: 2014-11-30 18:13 GMT+01:00 Viktor Dukhovni : On Sun, Nov 30, 2014 at 06:10:25PM +0100, Matteo Lanzoni wrote: Hi, I'm trying to set up a secondary mx. Can I configure postfix to accept mail only when primary is offline? Instead implement equival

Re: Backup mx

2014-11-30 Thread Viktor Dukhovni
On Sun, Nov 30, 2014 at 06:19:36PM +0100, Matteo Lanzoni wrote: > Anyway do you know if Postfix can be configured as I need/want. Dynamic configuration of access control policy that depends on varying external conditions requires a policy service or milter. It is of course also possible to run a

Re: Backup mx

2014-11-30 Thread Matteo Lanzoni
2014-11-30 18:13 GMT+01:00 Viktor Dukhovni : > On Sun, Nov 30, 2014 at 06:10:25PM +0100, Matteo Lanzoni wrote: > >> Hi, I'm trying to set up a secondary mx. >> Can I configure postfix to accept mail only when primary is offline? > > Instead implement equivalent anti-spam measure on both primary and

Re: Backup mx

2014-11-30 Thread Viktor Dukhovni
On Sun, Nov 30, 2014 at 06:10:25PM +0100, Matteo Lanzoni wrote: > Hi, I'm trying to set up a secondary mx. > Can I configure postfix to accept mail only when primary is offline? Instead implement equivalent anti-spam measure on both primary and secondary systems, with working recipient validation

Backup mx

2014-11-30 Thread Matteo Lanzoni
Hi, i'm trying to set up a secondary mx. Can i configure postfix to accept mail only when primary is offline? This resolve spam problem. Thanks Matteo