Re: Exploring DANE and Postfix

2015-07-31 Thread Viktor Dukhovni
On Fri, Jul 31, 2015 at 12:07:02PM -0400, Mike wrote: > > The key success metric will be whether you'll still remember that > > you published TLSA records when it is tme to deploy a new SSL > > certificate. > > > > https://dane.sys4.de/common_mistakes#3 > > https://dane.sys4.de/common_mis

Re: Exploring DANE and Postfix

2015-07-31 Thread Mike
On 7/31/2015 11:54 AM, Viktor Dukhovni wrote: > On Fri, Jul 31, 2015 at 11:47:55AM -0400, Mike wrote: > >> To test the server's configuration, I found this site: >> https://dane.sys4.de/ >> that lets me know if Postfix server DANE (along with DNSSEC and TLSA) is >> working as expected. So far, ev

Re: Exploring DANE and Postfix

2015-07-31 Thread Viktor Dukhovni
On Fri, Jul 31, 2015 at 11:47:55AM -0400, Mike wrote: > To test the server's configuration, I found this site: > https://dane.sys4.de/ > that lets me know if Postfix server DANE (along with DNSSEC and TLSA) is > working as expected. So far, everything is working quite well. The key success metri

Re: Exploring DANE and Postfix

2015-07-31 Thread Mike
On 7/26/2015 2:11 PM, Wietse Venema wrote: > Mike: >> Postfix 2.11.5 on FreeBSD 10.1 AMD64 >> >> I'm starting to look at implementing DANE on Postfix, and I have a >> question or two... >> >> Reading the info here: >> http://www.postfix.org/TLS_README.html#client_tls_dane >> >> I see the following

Re: check_policy_service not working - need a 4eye method or..

2015-07-31 Thread Viktor Dukhovni
On Fri, Jul 31, 2015 at 02:28:35PM +0200, Istvan Prosinger wrote: > On 2015-07-30 17:23, wie...@porcupine.org wrote: > >Istvan Prosinger: > >>Hello everyone, > >> > >>I have this im main.cf (I'ts actually an attempt to implement > >>cluebringer/policyd) > >> > >>smtpd_recipient_restrictions = chec

Re: check_policy_service not working - need a 4eye method or..

2015-07-31 Thread Istvan Prosinger
Istvan Prosinger: On 2015-07-30 17:23, wie...@porcupine.org wrote: > Istvan Prosinger: >> Hello everyone, >> >> I have this im main.cf (I'ts actually an attempt to implement >> cluebringer/policyd) >> >> smtpd_recipient_restrictions = check_policy_service >> inet:127.0.0.1:10031, >>

Re: check_policy_service not working - need a 4eye method or..

2015-07-31 Thread Wietse Venema
Istvan Prosinger: > On 2015-07-30 17:23, wie...@porcupine.org wrote: > > Istvan Prosinger: > >> Hello everyone, > >> > >> I have this im main.cf (I'ts actually an attempt to implement > >> cluebringer/policyd) > >> > >> smtpd_recipient_restrictions = check_policy_service > >> inet:127.0.0.1:10031

Re: Postfix doesn't reject hard bounced emails

2015-07-31 Thread Wietse Venema
post...@pd.lv: > Dear Postfix community, > I'm having problem with Postfix and I can't figure out what's wrong.. > > I have configured Postfix to send and receive emails, but there is an > issue with HARD bounced emails - they are not rejected and Postfix > repeats sending them every x minutes a

Re: check_policy_service not working - need a 4eye method or..

2015-07-31 Thread Koko Wijatmoko
On Fri, 31 Jul 2015 14:28:35 +0200 Istvan Prosinger wrote: > I don't think so. I've tried to give false parameters here to Postfix > that sould produce an error in the maillog, but Postfix is all happy, > carrying on... what false parameters you tried? share with us your conf.

Re: check_policy_service not working - need a 4eye method or..

2015-07-31 Thread Istvan Prosinger
On 2015-07-30 17:23, wie...@porcupine.org wrote: Istvan Prosinger: Hello everyone, I have this im main.cf (I'ts actually an attempt to implement cluebringer/policyd) smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:10031, permit_mynetworks,

Re: Tr : SMTP Error (451) Temporary lookup failure

2015-07-31 Thread Wietse Venema
Francois Martin: > Hello, > > > > I have a VM on a CentOS 7 OpenVZ and i have install Kolab. > I just follow the procedure to make the Kolab multi-domain server with the > following pages: > https://docs.kolab.org/howtos/multi-domain.html#amavisd-changes > http://kolab.org/blog/cornelius-hald/2

Tr : SMTP Error (451) Temporary lookup failure

2015-07-31 Thread Francois Martin
Hello, I have a VM on a CentOS 7 OpenVZ and i have install Kolab. I just follow the procedure to make the Kolab multi-domain server with the following pages: https://docs.kolab.org/howtos/multi-domain.html#amavisd-changes http://kolab.org/blog/cornelius-hald/2015/01/05/kolab-3.3-multi-domain-se

Postfix doesn't reject hard bounced emails

2015-07-31 Thread postfix
Dear Postfix community, I'm having problem with Postfix and I can't figure out what's wrong.. I have configured Postfix to send and receive emails, but there is an issue with HARD bounced emails - they are not rejected and Postfix repeats sending them every x minutes and user receives "Undelive