Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 04:53:22PM +, Viktor Dukhovni wrote: > On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote: > > > > What version of Postfix are you using? > > > > postfix/master[7500]: reload -- version 2.6.6, configuration /etc/postfix > > That's nearly seven years old. Wh

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 07:56:15PM +0300, Michael Peter wrote: > Just for info, How can i know the default locations for default system > certificates which postfix drag when setting smtp_tls_CAfile ? This is system-dependent: $ openssl version -d OPENSSLDIR: "/usr/pkg/etc/openssl" Look

Re: transport_maps and check_recipient_access

2015-09-25 Thread Alex JOST
Am 25.09.2015 um 18:42 schrieb Alex: Hi, I have a postfix-3.0.1 system on fedora22 that relays its mail to an internal postfix system where the users receive their mail and send as users of the domain. I have a transport map configured on the external mail system that forwards mail to the intern

Re: transport_maps and check_recipient_access

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 12:42:52PM -0400, Alex wrote: > How can I configure the external system to support the > check_recipient_access while also then forwarding on valid users to > the internal system? Why is that a question. You can just do what you said. That said, you should instead define

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Michael Peter
> On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote: > >> > What version of Postfix are you using? >> >> postfix/master[7500]: reload -- version 2.6.6, configuration >> /etc/postfix > > That's nearly seven years old. When you enable the Web PKI by > setting smtp_tls_CAfile, that versio

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote: > > What version of Postfix are you using? > > postfix/master[7500]: reload -- version 2.6.6, configuration /etc/postfix That's nearly seven years old. When you enable the Web PKI by setting smtp_tls_CAfile, that version of Postfix w

transport_maps and check_recipient_access

2015-09-25 Thread Alex
Hi, I have a postfix-3.0.1 system on fedora22 that relays its mail to an internal postfix system where the users receive their mail and send as users of the domain. I have a transport map configured on the external mail system that forwards mail to the internal server for a handful of domains. On

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Michael Peter
> On Fri, Sep 25, 2015 at 06:16:10PM +0300, Michael Peter wrote: > >> I have configured postfix to check CAfile which contains only Godaddy >> root >> certificate as follow for outgoing emails. >> >> smtp_tls_CAfile = /etc/certs/go-daddy-root-ca.crt > > Which certificates are in that file? Report

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 03:40:17PM +, Viktor Dukhovni wrote: > What version of Postfix are you using? Note that in Postfix prior to 2.8, setting a non-empty CAfile causes the default system certificate store to also be enabled. -- Viktor.

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 06:16:10PM +0300, Michael Peter wrote: > I have configured postfix to check CAfile which contains only Godaddy root > certificate as follow for outgoing emails. > > smtp_tls_CAfile = /etc/certs/go-daddy-root-ca.crt Which certificates are in that file? Report the output o

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Michael Peter
> Michael Peter: >> This makes me more confused.. >> Please advise your opinion.. > Please post your configration as requested in the welcome message. > wietse I have posted my configuration as per your request.. and i summarize my questions again as follow I have configured postfix to chec

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Wietse Venema
Michael Peter: > This makes me more confused.. > > Please advise your opinion.. Please post your configration as requested in the welcome message. wietse TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html Thank

Re: NIS and postfix

2015-09-25 Thread Il Neofita
Sorry to have wasted your time. the canonical was working, however, is the relay that I am using that is causing the problem modifying my domain. Sorry again but I missed that point.

Re: NIS and postfix

2015-09-25 Thread Il Neofita
On Thu, Sep 24, 2015 at 6:59 PM, Viktor Dukhovni < postfix-us...@dukhovni.org> wrote: > On Thu, Sep 24, 2015 at 05:15:03PM -0400, Il Neofita wrote: > > > When the server receive an email, the TO field is changed using the > domain > > from the system and not the domain configured in postfix. > >