FREAK cipher-suite hygiene for Postfix

2015-03-03 Thread Viktor Dukhovni
Now that the FREAK attack is widely disclosed, those of you who run SMTP servers that peer with clients that authenticate your server (be it via the traditional PKI or via DANE), might want to tighten-up your server cipher-suite settings just in-case: smtpd_tls_exclude_ciphers = EXPORT, LOW

Re: Getting messages from queue

2015-03-03 Thread @lbutlr
On Mar 3, 2015, at 8:55 AM, Noel Jones wrote: > On 3/3/2015 9:47 AM, LuKreme wrote: >> On Mar 3, 2015, at 08:30, Noel Jones wrote: >>> >>> To manually test a message, use something like: >>> postcat -bhq QUEUEID | spamassassin >> >> I was surprised that postcat requires a full path to the file,

Re: Postfix RCPT TO parameters

2015-03-03 Thread Wietse Venema
Charles Orth: > Hi All, > > I have been looking at postfix 2.11.1 code base. > It appears SMFIR_ADDRCPT_PAR is for the milter to add new recipient with > parameters to the current message. When the Milter application receives the END-OF-MESSAGE event, it invokes the libmilter smfi_addrcpt_par()

Postfix RCPT TO parameters

2015-03-03 Thread Charles Orth
Hi All, I have been looking at postfix 2.11.1 code base. It appears SMFIR_ADDRCPT_PAR is for the milter to add new recipient with parameters to the current message. I need my milter to receive the RCPT TO parameters. Does postfix provide support for passing these arguments to the milter? Char

Re: How can postfix do this?

2015-03-03 Thread Viktor Dukhovni
On Mon, Mar 02, 2015 at 08:56:29PM -0600, helices wrote: > For each incoming message received, every outgoing "reply" must use the > "To:" address from the incoming received message as the "From:" address in > the outgoing reply. I see you're also asking the same question on the exim-users list.

Fwd: DNS Resolver

2015-03-03 Thread jason hirsh
I am not sure what has gotten through on the mailing list 1) I was unable to patch the Net::DNS version .76 I am running version .78 2( The mail system is happily using about 4 RBLs Ater updating all involved ports I am still getting 75371-06) _WARN: rules: failed to run NO_DNS_FOR_

Re: Getting messages from queue

2015-03-03 Thread Noel Jones
On 3/3/2015 9:47 AM, LuKreme wrote: > On Mar 3, 2015, at 08:30, Noel Jones wrote: >> >> To manually test a message, use something like: >> postcat -bhq QUEUEID | spamassassin > > I was surprised that postcat requires a full path to the file, but thanks for > the info in the "From " header. > I

Re: Getting messages from queue

2015-03-03 Thread LuKreme
On Mar 3, 2015, at 08:30, Noel Jones wrote: > > To manually test a message, use something like: > postcat -bhq QUEUEID | spamassassin I was surprised that postcat requires a full path to the file, but thanks for the info in the "From " header.

Re: REDIRECT with multiple recipients

2015-03-03 Thread Noel Jones
On 3/3/2015 3:58 AM, Rudy Gevaert wrote: > On 03/03/15 10:00, Rudy Gevaert wrote: > >> Thanks for the possible alternatives. >> >> In this case I chose to go with the REDIRECT because we have an >> option >> to also do REJECT. (User can chose to redirect or reject through a >> webinterface). It

Re: Getting messages from queue

2015-03-03 Thread Noel Jones
On 3/3/2015 9:14 AM, LuKreme wrote: > When I have a message in the mailq how do I get just the message out to, for > example, feeding to SpamAssassin? With postcat -bh there is no "From " header. > > (I'm not sure if SA uses the "From " header or not) > > The "From " pseudo-header is added dur

Getting messages from queue

2015-03-03 Thread LuKreme
When I have a message in the mailq how do I get just the message out to, for example, feeding to SpamAssassin? With postcat -bh there is no "From " header. (I'm not sure if SA uses the "From " header or not) --

Re: REDIRECT with multiple recipients

2015-03-03 Thread Wietse Venema
Rudy Gevaert: > I didn't see in the manual that REJECT is limited to one recipient. But > I should still test it. It does say that "redirect address" overrides all recipients, but it does not explicitly describe the result of multiple "redirect" actions (each "redirect" action overrides previous

Re: REDIRECT with multiple recipients

2015-03-03 Thread Wietse Venema
Rudy Gevaert: > I know, I'm asking what is the big difference between REJECT in an > access map and the relocated maps. The behaviour is the same (as I > currently can see). What is then different. SMTP server only: "REJECT The user has moved". All mail: relocated_maps with "u...@example.com

Re: REDIRECT with multiple recipients

2015-03-03 Thread Rudy Gevaert
On 03/03/15 11:09, Koko Wijatmoko wrote: On Tue, 03 Mar 2015 10:58:20 +0100 Rudy Gevaert wrote: Could someone tell me if there any other differences between using u...@domain.com REJECT The user has moved and a relocated map with: u...@domain.com The user has moved There is no "REJECT" in r

Re: REDIRECT with multiple recipients

2015-03-03 Thread Koko Wijatmoko
On Tue, 03 Mar 2015 10:58:20 +0100 Rudy Gevaert wrote: > Could someone tell me if there any other differences > between using > u...@domain.com REJECT The user has moved > > and a relocated map with: > u...@domain.com The user has moved > There is no "REJECT" in relocated map... http://www.post

Re: REDIRECT with multiple recipients

2015-03-03 Thread Rudy Gevaert
On 03/03/15 10:00, Rudy Gevaert wrote: Thanks for the possible alternatives. In this case I chose to go with the REDIRECT because we have an option to also do REJECT. (User can chose to redirect or reject through a webinterface). It was nice to do it in one lookup. I didn't see in the manual

Re: REDIRECT with multiple recipients

2015-03-03 Thread Rudy Gevaert
On 03/02/15 17:37, Viktor Dukhovni wrote: On Mon, Mar 02, 2015 at 11:26:14AM -0500, Wietse Venema wrote: If you want to *replace* those recipients, you could use /etc/postfix/main.cf: recipient_canonical_maps = hash:/etc/postfix/recipient_canonical recipient_canonical_classes = envel

ot: maildir has overdrawn his diskspace quota

2015-03-03 Thread Voytek
I have Postfix/Dovecot with virtual domains, same setup unaltered since quite a while ago last month, added a new virtual domain, 'just like before'. but, today noticed this in the queue/log 'overdrawn his diskspace quota'[1]: user's Maildir cur has like 48,762,696 bytes (lot less than other u