Re: TLSv1 and SSLv3

2015-02-08 Thread Viktor Dukhovni
On Sun, Feb 08, 2015 at 10:41:50PM -0700, LuKreme wrote: > >> smtpd_tls_protocols = TLSv1, !SSLv2, !SSLv3 > > > > Why exclude TLSv1.1 and TLSv1.2? See the documentation. > > The default is fine, but if you must tweak, exclude just > > "SSLv2". > > > >smtpd_tls_protocols = !SSLv2 > > > > On

Re: TLSv1 and SSLv3

2015-02-08 Thread LuKreme
On Feb 7, 2015, at 10:51 PM, Viktor Dukhovni wrote: > On Sat, Feb 07, 2015 at 10:18:11PM -0700, LuKreme wrote: > >> # postconf -n | grep _tls_ >> smtp_tls_security_level = may >> smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem > > Fine so far. > >> smtpd_tls_ciphers = high > > This is too "hi

Re: Postfix stable release 3.0.0

2015-02-08 Thread Christian Rößner
> Am 08.02.2015 um 23:29 schrieb Wietse Venema : > > [An on-line version of this announcement will be available at > http://www.postfix.org/announcements/postfix-3.0.0.html] > > Postfix stable release 3.0.0 is available. This release ends support > for Postfix 2.8. Thanks very much for this gre

Postfix stable release 3.0.0

2015-02-08 Thread Wietse Venema
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-3.0.0.html] Postfix stable release 3.0.0 is available. This release ends support for Postfix 2.8. The main changes in no particular order are: * SMTPUTF8 support for internationalized domai

Re: SOLVED: Postfix configuration & postconf

2015-02-08 Thread John
Surprisingly, I found that I had only six items that were duplicated. One, a file location which I left as is following Wietse's advice. The remainder I left in place as book marks for the future. Thanks to both Wietse and Ben for their input. -- John Allen KLaM --

Re: RHEL/CentOS Postfix 3.0.0-RC1 packages for testing

2015-02-08 Thread Peter
On 02/09/2015 02:44 AM, Eliezer Croitoru wrote: > The other alternative to just trust you or distrust you is the > availability of the src.rpm package which will clarify for those who > knows how to look at them, how secure are these packages. The .src.rpm package is there as well in the gf-testin

Re: [SOLVED] Mail flow clogged by postdrop

2015-02-08 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/07/2015 11:20 PM, James Moe wrote: > postdrop: warning: mail_queue_enter: create file > maildrop/546331.4026: Permission denied > After checking the settings in main.cf and running "postifx set-permissions," this problem has gone away. Thank

Re: Mail flow clogged by postdrop

2015-02-08 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/08/2015 12:23 AM, Viktor Dukhovni wrote: > The postdrop(1) executable must be installed setgid() to the group > corresponding to the main.cf "setgid_group" parameter. This group > must have write access to the "maildrop" queue sub-directory. >

Re: Mail flow clogged by postdrop

2015-02-08 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/08/2015 12:07 AM, Patrick Ben Koetter wrote: > On SUSE Postfix packages come with different user/group settings. > Seems like your main.cf does not reflect these requirements: > > setgid_group = maildrop mail_owner = postfix > Those are the s

Re: Postfix configuration & postconf

2015-02-08 Thread btb
> On Feb 08, 2015, at 05.55, John wrote: > > Is there a way of checking for unnecessary entries in the Postfix main or > master config files. > I was looking through the mailing list and noticed the point that Victor made > about "smtpd_tls_session_cache_database" being "mostly unnecessary".

Re: Solved : Postfix configuration & postconf

2015-02-08 Thread Wietse Venema
John: > > "postconf -n" or "postconf -d" is not working for you? > > > > http://www.postfix.org/postconf.1.html > They work very well. But they do not tell me when and what options I may > have added to my config which duplicate a default option. While such > duplications are not disasters they m

Solved : Postfix configuration & postconf

2015-02-08 Thread John
On 2/8/2015 7:06 AM, Koko Wijatmoko wrote: On Sun, 8 Feb 2015 05:55:47 -0500 John wrote: Is there a way of checking for /unnecessary/ entries in the Postfix main or master config files. I was looking through the mailing list and noticed the point that Victor made about "smtpd_tls_session_cache

Re: RHEL/CentOS Postfix 3.0.0-RC1 packages for testing

2015-02-08 Thread Eliezer Croitoru
Hey Peter, The other alternative to just trust you or distrust you is the availability of the src.rpm package which will clarify for those who knows how to look at them, how secure are these packages. Eliezer On 08/02/2015 04:19, Peter wrote: Please note that these packages are not endorsed

Re: Postfix configuration & postconf

2015-02-08 Thread Koko Wijatmoko
On Sun, 8 Feb 2015 05:55:47 -0500 John wrote: > Is there a way of checking for /unnecessary/ entries in the Postfix > main or master config files. > I was looking through the mailing list and noticed the point that > Victor made about "smtpd_tls_session_cache_database" being "mostly > unnecessary

Postfix configuration & postconf

2015-02-08 Thread John
Is there a way of checking for /unnecessary/ entries in the Postfix main or master config files. I was looking through the mailing list and noticed the point that Victor made about "smtpd_tls_session_cache_database" being "mostly unnecessary". This made me wonder if I have entries in the config f