Re: Change return-to path in postfix

2015-12-11 Thread Wietse Venema
basil varghese: > Hi Wietse, > > Makes sense! I guess sender_canonical_classes will work for us. I am trying > to set this up for an emergency messaging system. Users can send emergency > messages to groups either from outlook or post from a web application. The > mail system has a high reputation

Re: postfix and multiple TLS certificates (SNI support?)

2015-12-11 Thread Viktor Dukhovni
On Fri, Dec 11, 2015 at 11:50:40AM -0600, Brian Sebby wrote: > other.mail.server:smtpinetn - n - 0 > smtpd > -o myhostname=other.mail.server > -o smtp_tls_cert_file=/path/to/certfile.pem > -o smtpd_tls_cert_file=/path/to/certfile.pem >

Re: postfix and multiple TLS certificates

2015-12-11 Thread Brian Sebby
This is what I do on a mail server that I set up to consolidate the functions of several previous postfix servers. In main.cf, I have it set up to listen on the primary IP address for the server, and tell it to use the certificates for that primary hostname using smtp_tls_cert_file, smtpd_tls_c

RE: postfix and multiple TLS certificates

2015-12-11 Thread José Roberto
Hi, I think it's possible based on master.cf, you could set specific doamin for a smtp or submission and you set a specific TLS certificate in that process, like we use for ehlo for a different IP and ehlo for a specific domain, but you need testing it. José RobertoE-mail: zep...@outlook.com

Re: postfix and multiple TLS certificates

2015-12-11 Thread Zalezny Niezalezny
Hi, thanks for Your feedback. I just solved my issue. I will simply generate normal key and csr with openssl command. My local certify authority will provide me certificate which will be signed with the list of specified by me domains. Then we can have single certificate which will be able to enc

Re: postfix and multiple TLS certificates

2015-12-11 Thread Tobias Reckhard
On 11.12.2015 09:11, Zalezny Niezalezny wrote: > is it possible to configure in Postfix multiple TLS certificates. AFAIK, you can configure each smtp and smtpd instance with a certificate of its own, so you could, for instance, have several smtpds listening on different IP addresses, each with an

Re: Change return-to path in postfix

2015-12-11 Thread basil varghese
Hi Wietse, Makes sense! I guess sender_canonical_classes will work for us. I am trying to set this up for an emergency messaging system. Users can send emergency messages to groups either from outlook or post from a web application. The mail system has a high reputation. If I change the envelop s

postfix and multiple TLS certificates

2015-12-11 Thread Zalezny Niezalezny
Hi, is it possible to configure in Postfix multiple TLS certificates. For example, on my LAN relay server I must configure TLS for the unix domains and for windows domains. Both domains use different names. How to manage that part ? How to generate certificates than ? Is it possible to map some h