Re: RC4 in live email servers?

2015-07-20 Thread A. Schulze
Viktor Dukhovni: So, if you have any data on long-term trends in RC4 use, especially from a site with a high volume of traffic (1 million messages per day or more), please post your findings. Is RC4 disappearing from SMTP TLS, or continuing to be used by laggards resistant to change? Viktor,

makedefs.out

2015-07-20 Thread @lbutlr
Is there a simple way to use the makedefs.conf file to recompile a new version of Postfix?

Re: rejecting relay from localhost?

2015-07-20 Thread Benny Pedersen
On July 20, 2015 1:13:40 PM Carl Brewer wrote: inet_protocols = Comment that line, you are ready to run dual stacked mta with ipv4 and ipv6, possible check mynetworks does include all ips

Re: rejecting relay from localhost?

2015-07-20 Thread Carl Brewer
On 21/07/2015 1:44 AM, Viktor Dukhovni wrote: Try: mynetworks = 127.0.0.1/32, hash:/etc/pkg/etc/postfix/network_table That fixed it smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination reject_unknown_recipient_domain reject_un

Re: RC4 in live email servers?

2015-07-20 Thread DTNX Postmaster
On 20 Jul 2015, at 18:20, Viktor Dukhovni wrote: > You'll get the same result, without losing interop with RC4-only > systems (if any) via the above. However, you'll still break Exchange > 2003, unless you arrange to rank 3DES below RC4, or disable 3DES > (don't know of any systems that have wor

Re: RC4 in live email servers?

2015-07-20 Thread Viktor Dukhovni
On Mon, Jul 20, 2015 at 12:06:39PM -0400, Harald Koch wrote: > In my case It turned out to be me being incredibly stupid; I had > > smtpd_tls_mandatory_exclude_ciphers = RC4 A sensible setting to make sure that submission clients (port 587, where TLS should be mandatory) using AUTH PLAIN are pro

Re: RC4 in live email servers?

2015-07-20 Thread Harald Koch
In my case It turned out to be me being incredibly stupid; I had smtpd_tls_mandatory_exclude_ciphers = RC4 instead of smtpd_tls_exclude_ciphers = RC4 yahoo.com is using AES128 now. *looks embarrassed...* -- Harald

Re: rejecting relay from localhost?

2015-07-20 Thread Viktor Dukhovni
On Mon, Jul 20, 2015 at 09:12:53PM +1000, Carl Brewer wrote: > bash-4.3# telnet localhost 25 > 220 rollcage3.bl.echidna.id.au ESMTP Postfix > ehlo localhost > 250-rollcage3.bl.echidna.id.au > 250 DSN > mail from: c...@aboc.com.au > 250 2.1.0 Ok > rcpt to: carl.i.bre...@gmail.com > 554 5.7.1 : Rela

Re: Send a DSN report only to one specified email address

2015-07-20 Thread Wietse Venema
Ray: > > DSNs are sent to the envelope sender, VERP changes the envelope > > sender, therefore VERP has effect for all DSNs. > > > Wietse > > OK, I will checkout VERP, sounds exactly like what I would need > indeed. My remaining question would be on how to activate the > Success DSN reports? Pos

Re: Send a DSN report only to one specified email address

2015-07-20 Thread Ray
> DSNs are sent to the envelope sender, VERP changes the envelope > sender, therefore VERP has effect for all DSNs. > Wietse OK, I will checkout VERP, sounds exactly like what I would need indeed. My remaining question would be on how to activate the Success DSN reports? Best Ray --

Re: Send a DSN report only to one specified email address

2015-07-20 Thread Wietse Venema
Ray: > > Use VERP! > > That way bounces come back to a single address and can be processed. > > Vacatrion and other autoreplies use the From: header address when > > sending a reply. > > Hello, > > using VERP seems interesting, but the bounces I have already covered native > with postfix (notif

Re: Send a DSN report only to one specified email address

2015-07-20 Thread Ray
> Use VERP! > That way bounces come back to a single address and can be processed. > Vacatrion and other autoreplies use the From: header address when > sending a reply. Hello, using VERP seems interesting, but the bounces I have already covered native with postfix (notify_class and some recipi

postfix with opendkim: dkim signed forwarded emails fail verification

2015-07-20 Thread level420
Hi all, I'm very new to postfix, opendkim, postsrsd et al, but managed to configure a server setup which dkim signs locally submitted messages successfully. So far so good (I hope). I have additionally installed postsrsd with the intention to raise acceptance of mail forwarded (aliased?) by my

Re: Send a DSN report only to one specified email address

2015-07-20 Thread Ralf Hildebrandt
* Ray : > Hello, > > we are a travel agency and have lot's of outbound email (confirmations, > vouchers, etc.). What I want to integrate now is DSN report information in > our backend management software. We want the agent in the callcenter be able > to see an email has been sent and the Deliv

Send a DSN report only to one specified email address

2015-07-20 Thread Ray
Hello, we are a travel agency and have lot's of outbound email (confirmations, vouchers, etc.). What I want to integrate now is DSN report information in our backend management software. We want the agent in the callcenter be able to see an email has been sent and the Delivery information (Sen

rejecting relay from localhost?

2015-07-20 Thread Carl Brewer
G'day, I've got a moderately new postfix setup on NetBSD 5.x running from pkgsrc, postfix 2.11.5 I'm having trouble with squirrelmail on localhost sending outbound email, and also if I just telnet to it from itself, so it's not trusting localhost, the error : bash-4.3# telnet localhost 25

Re: Get a copy of email sent by null sender

2015-07-20 Thread Wietse Venema
Alexandre Ellert: > Hello, > > I often use sender_bcc_maps to audit suspicious account and it works great. > Today, I need to have a look at email sent by null sender <> > > Here is my relevant configuration : > > # grep sender_bcc_maps /etc/postfix/main.cf > sender_bcc_maps = regexp:/etc/postf

Get a copy of email sent by null sender

2015-07-20 Thread Alexandre Ellert
Hello, I often use sender_bcc_maps to audit suspicious account and it works great. Today, I need to have a look at email sent by null sender <> Here is my relevant configuration : # grep sender_bcc_maps /etc/postfix/main.cf sender_bcc_maps = regexp:/etc/postfix/sender_bcc_maps # cat /etc/postf

Re: Userwise Attachment size postfix

2015-07-20 Thread Peter
On 07/20/2015 07:18 PM, Vishal Agarwal wrote: > Hi, > > I am looking for some settings to be incorporated in postfix > comfiguration for sending attachments > ​ size ​ > user wise. > Like 2-3 users will be allow > ​ed to​ > send 15MB attachments and others will be allowed for 5 MB only. > > Pl a

Re: Userwise Attachment size postfix

2015-07-20 Thread Benny Pedersen
Vishal Agarwal skrev den 2015-07-20 09:18: Pl advise is any setting is there for the same if yes then how it can be. i wont do it, reson its defaults is that if you set it more high then other mtas you will have to accept and bounce localy if size is highter then what remote mta allow, this

Userwise Attachment size postfix

2015-07-20 Thread Vishal Agarwal
Hi, I am looking for some settings to be incorporated in postfix comfiguration for sending attachments ​ size ​ user wise. Like 2-3 users will be allow ​ed to​ send 15MB attachments and others will be allowed for 5 MB only. Pl advise is any setting is there for the same if yes then how it can be