Re: DKIM smtpd_milter before SA content-filter: still valid signing

2015-03-02 Thread A. Schulze
André Peters: I run a smtpd_milter to sign mail via OpenDKIM. This happens before-queue, right? in your setup, right. Next this signed mail goes through a Spamassassin content-filter, which adds some X-Headers after-queue. How can this mail still have a valid DKIM signature? OpenDKIM don'

DKIM smtpd_milter before SA content-filter: still valid signing

2015-03-02 Thread André Peters
Hello, I am a bit curious about this: I run a smtpd_milter to sign mail via OpenDKIM. This happens before-queue, right? Next this signed mail goes through a Spamassassin content-filter, which adds some X-Headers after-queue. How can this mail still have a valid DKIM signature? Don't get me wro

Re: How can postfix do this?

2015-03-02 Thread Viktor Dukhovni
On Mon, Mar 02, 2015 at 08:56:29PM -0600, helices wrote: > I am tasked to design, build and maintain a new MTA. The company has one > special requirement, for which I'm investigating the simplest solution: > > For each incoming message received, every outgoing "reply" must use the > "To:" addres

How can postfix do this?

2015-03-02 Thread helices
I am tasked to design, build and maintain a new MTA. The company has one special requirement, for which I'm investigating the simplest solution: For each incoming message received, every outgoing "reply" must use the "To:" address from the incoming received message as the "From:" address in t

Re: TLS whoes

2015-03-02 Thread Paul
Viktor Thank you for your response which clarifies all my concerns. Paul On 02/03/2015 22:05, Viktor Dukhovni wrote: On Mon, Mar 02, 2015 at 08:40:17PM +, Paul wrote: I have a Ubuntu Postfix (2.11) setup which only delivers locally submitted mail. I have enabled outgoing TLS support

Re: Signing-milter - What are exactly causing these "tampered" errors?

2015-03-02 Thread Wietse Venema
Sebastian Nielsen: > What exactly is wrong with my MIME? > > Wietse and A Schulze says my MIME mail is not properly formatted, but in > which way? > > I did this now (look in mimeparser.pl), this milter is placed before > signing-milter. > What it does, is take the whole mail and put into a loo

Signing-milter - What are exactly causing these "tampered" errors?

2015-03-02 Thread Sebastian Nielsen
What exactly is wrong with my MIME? Wietse and A Schulze says my MIME mail is not properly formatted, but in which way? I did this now (look in mimeparser.pl), this milter is placed before signing-milter. What it does, is take the whole mail and put into a loose MIME Parser, and then reencodes

Re: TLS whoes

2015-03-02 Thread Viktor Dukhovni
On Mon, Mar 02, 2015 at 08:40:17PM +, Paul wrote: > I have a Ubuntu Postfix (2.11) setup which only delivers locally submitted > mail. I have enabled outgoing TLS support It seems to be working just fine. http://permalink.gmane.org/gmane.mail.postfix.user/249429 http://permalink.gma

Re: TLS whoes

2015-03-02 Thread Paul
On 02/03/2015 21:19, Wietse Venema wrote: Paul: root@rowan:/etc/postfix# posttls-finger -F You should never run this test as root, if only because the Postfix SMTP client does not run as root. If that does not explain the difference, try turning off chroot in master.cf: # service type priv

Re: TLS whoes

2015-03-02 Thread Wietse Venema
Paul: > root@rowan:/etc/postfix# posttls-finger -F You should never run this test as root, if only because the Postfix SMTP client does not run as root. If that does not explain the difference, try turning off chroot in master.cf: # service type private unpriv chroot wakeup maxproc command

TLS whoes

2015-03-02 Thread Paul
Hi list I have a Ubuntu Postfix (2.11) setup which only delivers locally submitted mail. I have enabled outgoing TLS support root@rowan:/etc/postfix# postconf -n | grep tls smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_loglevel = 1 smtp_tls_note_starttls_offer = yes smtp_tls_se

Re: REDIRECT with multiple recipients

2015-03-02 Thread Viktor Dukhovni
On Mon, Mar 02, 2015 at 11:26:14AM -0500, Wietse Venema wrote: > > > If you want to *replace* those recipients, you could use > > > > > > /etc/postfix/main.cf: > > > recipient_canonical_maps = hash:/etc/postfix/recipient_canonical > > > recipient_canonical_classes = envelope_recipient >

Re: REDIRECT with multiple recipients

2015-03-02 Thread Wietse Venema
Viktor Dukhovni: > On Mon, Mar 02, 2015 at 09:42:27AM -0500, Wietse Venema wrote: > > > > Is there a way that I can still use the REDIRECT statement to achieve > > > the same result but without braking delivery? > > > > If you want to *replace* those recipients, you could use > > > > /etc/post

Re: REDIRECT with multiple recipients

2015-03-02 Thread Viktor Dukhovni
On Mon, Mar 02, 2015 at 09:42:27AM -0500, Wietse Venema wrote: > > Is there a way that I can still use the REDIRECT statement to achieve > > the same result but without braking delivery? > > If you want to *replace* those recipients, you could use > > /etc/postfix/main.cf: > recipient_cano

Re: REDIRECT with multiple recipients

2015-03-02 Thread Wietse Venema
Rudy Gevaert: > Hallo, > > I configured smtpd_recipient_restrictions to look in an access table. I > was intending to use the REDIRECT statement to redirect mails for > certain recipients. > > unfortunately, after a selected roll out into production we noticed that > this has issues for messa

Re: REDIRECT with multiple recipients

2015-03-02 Thread Noel Jones
On 3/2/2015 7:59 AM, Rudy Gevaert wrote: > Hallo, > > I configured smtpd_recipient_restrictions to look in an access > table. I was intending to use the REDIRECT statement to redirect > mails for certain recipients. > > unfortunately, after a selected roll out into production we noticed > that t

REDIRECT with multiple recipients

2015-03-02 Thread Rudy Gevaert
Hallo, I configured smtpd_recipient_restrictions to look in an access table. I was intending to use the REDIRECT statement to redirect mails for certain recipients. unfortunately, after a selected roll out into production we noticed that this has issues for messages sent to multiple recipie