Re: Mail for localhost only

2015-05-23 Thread Santiago Vila
On Sat, May 23, 2015 at 08:59:42AM -0400, Bruce Hyatt wrote: > I have a linux (Ubuntu 14.04) samba server and I need to retrieve mail sent > to root from cron and such. Most information I find seems to, or explicitly > states that I will need a fully-qualified domain name to configure Postfix. > I

Re: Security & Compatibility

2015-05-23 Thread Noel Jones
On 5/23/2015 10:01 AM, Grant wrote: > Currently I have the following in main.cf: > > smtp_tls_exclude_ciphers = aNULL > smtpd_tls_exclude_ciphers = aNULL > > According to weakdh.org/sysadmin.html, I should have this: > > smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, > aEC

Re: Is it possible to stop a localhost system account being used in relay attempts?

2015-05-23 Thread Noel Jones
On 5/23/2015 4:03 AM, Robert Chalmers wrote: > I’ve checked this server against the Relay Test servers about the > place and it seems to be fine. No Relay allowed. I used a number of > test servers around the internet. > > However, I came in this morning and found a list of attempted spam > that h

Security & Compatibility

2015-05-23 Thread Grant
Currently I have the following in main.cf: smtp_tls_exclude_ciphers = aNULL smtpd_tls_exclude_ciphers = aNULL According to weakdh.org/sysadmin.html, I should have this: smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-D

Re: Is it possible to stop a localhost system account being used in relay attempts?

2015-05-23 Thread Robert Senger
> Thanks Robert and Koko. Most helpful. > > Can I ask, the “permit” on the end of smtp_recepient_restrictions, who > or what does that “permit”? > AFAIK it permits everything. The directives are processed in the order they are listed, so the first one permits authenticated users to send mail eve

Re: Mail for localhost only

2015-05-23 Thread Wietse Venema
Bruce Hyatt: > I have a linux (Ubuntu 14.04) samba server and I need to retrieve mail sent > to root from cron and such. Most information I find seems to, or explicitly > states that I will need a fully-qualified domain name to configure Postfix. > I did see one screenshot that included a local-onl

Mail for localhost only

2015-05-23 Thread Bruce Hyatt
I have a linux (Ubuntu 14.04) samba server and I need to retrieve mail sent to root from cron and such. Most information I find seems to, or explicitly states that I will need a fully-qualified domain name to configure Postfix. I did see one screenshot that included a local-only selection for insta

Re: Is it possible to stop a localhost system account being used in relay attempts?

2015-05-23 Thread Jason Woods
> On 23 May 2015, at 10:03, Robert Chalmers wrote: > And what is happening looks like this > > zeus:log robert$ telnet 192.168.0.15 25 > Trying 192.168.0.15... > Connected to zeus. > Escape character is '^]'. > 220 zeus.localhost ESMTP Postfix > helo inmailwetrust.com > 250 zeus.localhost > mail

Re: Is it possible to stop a localhost system account being used in relay attempts?

2015-05-23 Thread Robert Senger
Hi Robert, I just tried your telnet examples with a number of local system accounts and valid virtual users with my own postfix installation, and I always get the correct answer: 554 5.7.1 : Relay access denied Maybe your issue is caused by the settings and the order of the options in smtpd_XXX_

Re: Is it possible to stop a localhost system account being used in relay attempts?

2015-05-23 Thread Koko Wijatmoko
On Sat, 23 May 2015 10:31:05 +0100 Robert Chalmers wrote: > I may have solved it. I hope > > Connected to localhost. > Escape character is '^]'. > 220 zeus.localhost ESMTP Postfix ^^ > helo inmailwetrust.com > 250 zeus.localhost ^^ it should FQDN... zeus.what

Re: Is it possible to stop a localhost system account being used in relay attempts?

2015-05-23 Thread Robert Chalmers
I may have solved it. I hope Connected to localhost. Escape character is '^]'. 220 zeus.localhost ESMTP Postfix helo inmailwetrust.com 250 zeus.localhost mail from: _www@zeus.localhost 250 2.1.0 Ok rcpt to:moff_yespas_1...@inmailwetrust.com 450 4.1.8 <_www@zeus.localhost>: Sender address rejected

Is it possible to stop a localhost system account being used in relay attempts?

2015-05-23 Thread Robert Chalmers
I’ve checked this server against the Relay Test servers about the place and it seems to be fine. No Relay allowed. I used a number of test servers around the internet. However, I came in this morning and found a list of attempted spam that has somehow been added to the queue. Undelivered, but r

Re: What is a good and (very) secure configuration for public postfix server nowadays?

2015-05-23 Thread Viktor Dukhovni
On Fri, May 22, 2015 at 12:26:41PM -0600, @lbutlr wrote: > On 22 May 2015, at 07:42, Viktor Dukhovni wrote: > > # Avoid obsolete protocol versions > > # > > smtpd_tls_protocols = !SSLv2, !SSLv3 > > smtp_tls_protocols = !SSLv2, !SSLv3 > > Quick question. > > On 8 Feb 2015, you sai