Re: [Solved] Postifx is pinging SMTP mail servers?

2015-05-26 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/26/2015 05:38 PM, Viktor Dukhovni wrote: >>> "Generic failure"? Does that mean "An error occurred. Good luck >>> with that."? >> >> "Generic failure" is a SASL library message. You may complain >> about the messenger, Postfix, but that won't rea

Re: need input on user .forward file format

2015-05-26 Thread Sharon Stahl
Hi Wietse, Thank you for your response. In the .forward file, I was expecting that the "username only" would get delivered because the aliases file shows that the alias for the username is username@thatsamemachine but it appears that the mail server is not recognizing that it is the one to a

Re: [Solved] Postifx is pinging SMTP mail servers?

2015-05-26 Thread Viktor Dukhovni
On Tue, May 26, 2015 at 08:32:59PM -0400, Wietse Venema wrote: > James Moe: > > 3. Now it was SASL's turn: > > 2015-05-26T14:37:21.770844-07:00 sma-station14l postfix/error[32140]: > > D0B396ECE8: to=, orig_to=, > > relay=none, delay=51828, delays=51828/0.18/0/0.06, dsn=4.7.0, > > status=deferred

Re: [Solved] Postifx is pinging SMTP mail servers?

2015-05-26 Thread Wietse Venema
James Moe: > 3. Now it was SASL's turn: > 2015-05-26T14:37:21.770844-07:00 sma-station14l postfix/error[32140]: > D0B396ECE8: to=, orig_to=, > relay=none, delay=51828, delays=51828/0.18/0/0.06, dsn=4.7.0, > status=deferred (delivery temporarily suspended: SASL authentication > failed; cannot authen

Re: need input on user .forward file format

2015-05-26 Thread Wietse Venema
Sharon Stahl: >Postfix has a much different behavior. Both "username" and "\username" > get forwarded off and then sent back (because it should have been a local > delivery) Why should this be delivered locally? A domain-less address will get @$myorigin appended. A domain is delivered local

Re: Security & Compatibility

2015-05-26 Thread Viktor Dukhovni
On Tue, May 26, 2015 at 06:21:36AM -0400, Postfix User wrote: > > > > -o smtpd_tls_dh1024_param_file=$msa_tls_dh1024_param_file > > > > > > Is that correct? It doesn't look right. > > > > Looks OK to me, provided the RHS variable is set correctly in > > main.cf. > warning: /usr/local/etc/postf

Re: [Solved] Postifx is pinging SMTP mail servers?

2015-05-26 Thread James Moe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/25/2015 12:47 PM, James Moe wrote: > Basically, Postfix is pinging the SMTP server to... do something? > Verify the connection is still active? The ping occurs about every > 5 minutes. There are four pings each time. > Found the problem. Well

need input on user .forward file format

2015-05-26 Thread Sharon Stahl
Since I did not hear from anyone, I am sending this email again in hopes of getting a reply, link to some site I have not found or suggestion of different maillist to try. I've spent some time searching and reading but have not convinced myself that I

Re: Incoing testing for new postfix installation

2015-05-26 Thread Sharon Stahl
You can go to http://en.wikipedia.org/wiki/GTUBE to test spam. You will need to be able to send message from outside your network to do a good test. Aloha, Sharon On 05/26/2015 03:14 AM, John McMonagle wrote: Migrating from a kolab installation that uses postfix to a new Debian Jessie instal

Re: Postifx is pinging SMTP mail servers?

2015-05-26 Thread Noel Jones
On 5/26/2015 12:43 AM, James Moe wrote: > On 05/25/2015 02:49 PM, Noel Jones wrote: >> Postfix logs all connections. Does the postfix smtp >> transport log a connection at the same time as your proxy >> detects a connection? > > Where are the logs stored? Logs are stored by the system, not by po

Incoing testing for new postfix installation

2015-05-26 Thread John McMonagle
Migrating from a kolab installation that uses postfix to a new Debian Jessie installation. I want to do extensive tests on incoming email before switching. Done simple internal tests but it would be nice to test with real nasty external email. Is there any way to do this? John

Re: Postifx is pinging SMTP mail servers?

2015-05-26 Thread Wietse Venema
James Moe: > On 05/25/2015 02:49 PM, Noel Jones wrote: > > Postfix logs all connections. Does the postfix smtp transport log > > a connection at the same time as your proxy detects a connection? > > > Where are the logs stored? That is NOT a Postfix question. Logging is stored by syslogd or equ

Re: Security & Compatibility

2015-05-26 Thread DTNX Postmaster
On 26 May 2015, at 12:21, Postfix User wrote: > On Tue, 26 May 2015 08:14:43 +, Viktor Dukhovni stated: > >> On Mon, May 25, 2015 at 03:49:09PM -0400, Postfix User wrote: >> >>> On Mon, 25 May 2015 13:52:07 +, Viktor Dukhovni stated: >>> -o smtpd_tls_dh1024_param_file=$msa_tls_dh1

Re: Security & Compatibility

2015-05-26 Thread Postfix User
On Tue, 26 May 2015 08:14:43 +, Viktor Dukhovni stated: > On Mon, May 25, 2015 at 03:49:09PM -0400, Postfix User wrote: > > > On Mon, 25 May 2015 13:52:07 +, Viktor Dukhovni stated: > > > > > -o smtpd_tls_dh1024_param_file=$msa_tls_dh1024_param_file > > > > Is that correct? It doesn't

Re: chacha20 cipher_algbits is 0

2015-05-26 Thread Tim Kuijsten
Op 25-05-15 om 02:40 schreef Viktor Dukhovni: Ask the LibreSSL team. Postfix outputs: cipher_usebits/cipher_algbits obtained via: cipher = SSL_get_current_cipher(ssl); cipher_usebits = SSL_CIPHER_get_bits(cipher, &cipher_algbits); If LibreSSL returns 0 for algbits, that's an

Re: Security & Compatibility

2015-05-26 Thread Viktor Dukhovni
On Mon, May 25, 2015 at 03:49:09PM -0400, Postfix User wrote: > On Mon, 25 May 2015 13:52:07 +, Viktor Dukhovni stated: > > > -o smtpd_tls_dh1024_param_file=$msa_tls_dh1024_param_file > > Is that correct? It doesn't look right. Looks OK to me, provided the RHS variable is set correctly in

Re: Security & Compatibility

2015-05-26 Thread Viktor Dukhovni
On Mon, May 25, 2015 at 05:31:31PM +0200, DTNX Postmaster wrote: > Except that the 'tls_medium_cipherlist' setting defaults to > 'aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH', and thus leaves > anonymous ciphers enabled for your MSA. Which is a feature, not a bug. > As well as PSK, DSS, SEED,