Multiple "from" fields

2017-02-15 Thread lists
I hope no one minds if I change the subject since SSL was no longer the topic. Regarding multiple from fields, I found this on serverfault : http://serverfault.com/questions/554520/smtp-allows-for-multiple-from-addresses-in-the-rfc-was-this-ever-useful-why-do‎ I could almost see this being legiti

Re: SSL Certificates

2017-02-15 Thread Scott Kitterman
On Wednesday, February 15, 2017 03:55:45 PM Alice Wonder wrote: > On 02/15/2017 02:22 AM, Dominic Raferd wrote: > > Thanks for your answer. > > > > There may be a problem between DMARC and mailing lists - I avoid > > p=reject or p=quarantine on domains I use for posting to mailing > > lists. > >

Re: SSL Certificates

2017-02-15 Thread Alice Wonder
On 02/15/2017 02:22 AM, Dominic Raferd wrote: Thanks for your answer. There may be a problem between DMARC and mailing lists - I avoid p=reject or p=quarantine on domains I use for posting to mailing lists. SPF proves sender identity but final recipient MTA cannot rely on it if there are any

Re: Error authentication with NTLM

2017-02-15 Thread luistkd4
Thanks a lot Viktor, I'm going check this! De: Viktor Dukhovni [via Postfix] Enviado: quarta-feira, 15 de fevereiro de 2017 19:01:42 Para: luistkd4 Assunto: Re: Error authentication with NTLM > On Feb 15, 2017, at 3:02 PM, luistkd4 <[hidden > email]> wrote: > >

Re: Error authentication with NTLM

2017-02-15 Thread Viktor Dukhovni
> On Feb 15, 2017, at 3:02 PM, luistkd4 > wrote: > > Viktor I change my smtpd.com, follow: > > log_level: 7 > pwcheck_method: auxprop > mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5 NTLM > saslauthd_path: /var/run/saslauthd/mux > ntlm_v2: yes > ntlm_server: serverad.local > > ntlm_server i set m

Re: Error authentication with NTLM

2017-02-15 Thread luistkd4
Thanks all for help. Viktor I change my smtpd.com, follow: log_level: 7 pwcheck_method: auxprop mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5 NTLM saslauthd_path: /var/run/saslauthd/mux ntlm_v2: yes ntlm_server: serverad.local ntlm_server i set my active directory, so now I can connect but have ne

Re: Error authentication with NTLM

2017-02-15 Thread Viktor Dukhovni
On Wed, Feb 15, 2017 at 12:36:52PM +, Luis Miguel Flores dos Santos wrote: > Hi, I'm trying authentic in smtp(587) in postfix using iphone with NTLM but I > have this errors: To do NTLM authentication your mail server must be a member computer of a Windows Domain, configured to authenticate

Re: Something like `flags_final' ?

2017-02-15 Thread Viktor Dukhovni
On Wed, Feb 15, 2017 at 02:04:55PM +0100, Marek Kozlowski wrote: > I'm wondering if it is possible for two parameters, let's say (not > particularly those, generally): > > sender_canonical_maps = sth1, sth2, sth3 > recipient_canonical_maps = sth4, sth5, sth6 > > 1. For `sender_canonical_maps' pr

Re: Which domain and host in main.cf

2017-02-15 Thread Viktor Dukhovni
> On Feb 15, 2017, at 5:51 AM, Henry wrote: > > For example say our public domain is mydomain.com and we have a > certificate for mail.mydomain.com and our MX points to > mail.mydomain.com So far fairly typical. > Our mail server called hermes runs our our lan whose domain is mydomain.local >

Re: Something like `flags_final' ?

2017-02-15 Thread Noel Jones
On 2/15/2017 11:13 AM, Marek Kozlowski wrote: > On 02/15/2017 02:18 PM, Marek Kozlowski wrote: >> On 02/15/2017 02:04 PM, Marek Kozlowski wrote: >>> sender_canonical_maps = sth1, sth2, sth3 >> >> One more question: >> >> Is it possible to apply different `sender_canonical_classes' for sth1, >> sth2

Re: Error authentication with NTLM

2017-02-15 Thread luistkd4
Yes, because some printers need this to work and all iphones are configured this by default, but if change authentic to "password" word but NTLM MD5 or HTTP MD5 Digest don't work -- View this message in context: http://postfix.1071664.n5.nabble.com/Error-authentication-with-NTLM-tp88865p5.h

Re: Error authentication with NTLM

2017-02-15 Thread Noel Jones
On 2/15/2017 11:24 AM, luistkd4 wrote: > Do you know how fix it? Because I need its work > Try the support channels for cyrus. Postfix is just the messenger telling you that your cyrus doesn't work. And are you sure you *require* NTLM? That sounds wonky to me. I expect you can fix it by not o

Re: Error authentication with NTLM

2017-02-15 Thread luistkd4
Do you know how fix it? Because I need its work -- View this message in context: http://postfix.1071664.n5.nabble.com/Error-authentication-with-NTLM-tp88865p3.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Something like `flags_final' ?

2017-02-15 Thread Marek Kozlowski
On 02/15/2017 02:18 PM, Marek Kozlowski wrote: > On 02/15/2017 02:04 PM, Marek Kozlowski wrote: >> sender_canonical_maps = sth1, sth2, sth3 > > One more question: > > Is it possible to apply different `sender_canonical_classes' for sth1, > sth2 and sth3 respectively? OK, I'll explain it more thor

Re: Something like `flags_final' ?

2017-02-15 Thread Marek Kozlowski
On 02/15/2017 05:07 PM, Mickaël DEQUIDT wrote: > > Le 15/02/2017 à 17:00, Marek Kozlowski a écrit : >> But I don't want postsrsd to manipulate "from:" header fields. How can I >> achieve it? > > I believe setting : > > sender_canonical_classes = envelope_sender > > should do the trick : as long

Re: Error authentication with NTLM

2017-02-15 Thread Luis Miguel Flores dos Santos
Do you know how fix it? Because I need its work De: owner-postfix-us...@postfix.org em nome de Luis Miguel Flores dos Santos Enviado: quarta-feira, 15 de fevereiro de 2017 10:36:52 Para: postfix-users@postfix.org Assunto: Error authentication with NTLM Hi, I'm

Re: Something like `flags_final' ?

2017-02-15 Thread Mickaël DEQUIDT
Le 15/02/2017 à 17:00, Marek Kozlowski a écrit : But I don't want postsrsd to manipulate "from:" header fields. How can I achieve it? I believe setting : sender_canonical_classes = envelope_sender should do the trick : as long as you don't specify "header_sender" in sender_canonical_classe

Re: Something like `flags_final' ?

2017-02-15 Thread Noel Jones
On 2/15/2017 10:00 AM, Marek Kozlowski wrote: > I need canonical for rewriting senders' addresses (both: "MAIL FROM:" > and "from:" to completely different ones and I decided to add postsrsd. > But I don't want postsrsd to manipulate "from:" header fields. How can I > achieve it? That would need

Re: Something like `flags_final' ?

2017-02-15 Thread Marek Kozlowski
On 02/15/2017 04:26 PM, Noel Jones wrote: > On 2/15/2017 7:18 AM, Marek Kozlowski wrote: >>> >>> That is: `sender_canonical_maps' allows several rewrites for a single >>> entry while `recipient_canonical_maps' only one (the very first found). >> >> One more question: >> >> Is it possible to apply d

Re: Postfix 20 years ago

2017-02-15 Thread John Allen
Many thanks to Dr. Venema for all the hard work he has done in developing one of the greatest software programs around. I would also like to thank him (together with many others) for his unending patience in answering my, sometimes moronic, questions. Thank you very much. John A On 2017-02

Re: Error authentication with NTLM

2017-02-15 Thread Noel Jones
On 2/15/2017 6:36 AM, Luis Miguel Flores dos Santos wrote: > Hi, I'm trying authentic in smtp(587) in postfix using iphone > with NTLM but I have this errors: ... > unknown[0.0.0.0]: 250-AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5 NTLM ... > Feb 15 11:52:29 ubmsa01test postfix/smtpd[30317]: *warning: SA

Re: Something like `flags_final' ?

2017-02-15 Thread Noel Jones
On 2/15/2017 7:18 AM, Marek Kozlowski wrote: >> >> That is: `sender_canonical_maps' allows several rewrites for a single >> entry while `recipient_canonical_maps' only one (the very first found). > > One more question: > > Is it possible to apply different `sender_canonical_classes' for sth1, > s

Re: Something like `flags_final' ?

2017-02-15 Thread Marek Kozlowski
On 02/15/2017 02:04 PM, Marek Kozlowski wrote: > :-) > > I'm wondering if it is possible for two parameters, let's say (not > particularly those, generally): > > sender_canonical_maps = sth1, sth2, sth3 > recipient_canonical_maps = sth4, sth5, sth6 > > (`sth' is any source, it doesn't matter I h

Something like `flags_final' ?

2017-02-15 Thread Marek Kozlowski
:-) I'm wondering if it is possible for two parameters, let's say (not particularly those, generally): sender_canonical_maps = sth1, sth2, sth3 recipient_canonical_maps = sth4, sth5, sth6 (`sth' is any source, it doesn't matter I hope) to force the following behavor: 1. For `sender_canonical_ma

Error authentication with NTLM

2017-02-15 Thread Luis Miguel Flores dos Santos
Hi, I'm trying authentic in smtp(587) in postfix using iphone with NTLM but I have this errors: Feb 15 11:52:29 ubmsa01test postfix/smtpd[30317]: match_list_match: 0.0.0.0: no match Feb 15 11:52:29 ubmsa01test postfix/smtpd[30317]: > unknown[0.0.0.0]: 250-UBSMTPPROXY01 Feb 15 11:52:29 ubmsa01te

Re: Which domain and host in main.cf

2017-02-15 Thread Wietse Venema
Henry: > When reading through main.cf and configuring postfix I am unsure of > which domain, origin and hostname values to use. myhostname is the unique name that the MTA will use in a) server greetings, b) EHLO commands, and c) in delivery status notifications. Because of b) it is important that

Re: Getting bounces from only one server

2017-02-15 Thread Matthew McGehrin
Hello, On Server2, configure bounce_notice_recipient to a e-mail address that is located on server1. By default it's using Postmaster. Otherwise, on Server2, forward mail from the Postmaster account to server2. Marco Pizzoli wrote: Dear all, I need to find a workaround an issue I am facing

Re: Which domain and host in main.cf

2017-02-15 Thread Dominic Raferd
On 15 February 2017 at 10:51, Henry wrote: > When reading through main.cf and configuring postfix I am unsure of > which domain, origin and hostname values to use. > > For example say our public domain is mydomain.com and we have a > certificate for mail.mydomain.com and our MX points to > mail.my

Re: SSL Certificates

2017-02-15 Thread Richard James Salts
On 15 February 2017 8:34:55 PM AEDT, Viktor Dukhovni wrote: > >> On Feb 15, 2017, at 4:27 AM, Henry wrote: >> >> With this being the case what is the point of using SSL certificates >> for sending? > >I repeat myself. Typically none. They largely only cause some harm. > >> There is a long d

Which domain and host in main.cf

2017-02-15 Thread Henry
When reading through main.cf and configuring postfix I am unsure of which domain, origin and hostname values to use. For example say our public domain is mydomain.com and we have a certificate for mail.mydomain.com and our MX points to mail.mydomain.com Our mail server called hermes runs our our

Re: SSL Certificates

2017-02-15 Thread Dominic Raferd
On 15 February 2017 at 09:34, Alice Wonder wrote: > On 02/15/2017 12:32 AM, Dominic Raferd wrote: >> >> On 15 February 2017 at 07:58, Richard James Salts >> wrote: >>> >>> >>> >>> On 15 February 2017 6:47:31 PM AEDT, Viktor Dukhovni >>> wrote: Please do not encourage novice users

Re: SSL Certificates

2017-02-15 Thread Alice Wonder
On 02/15/2017 01:27 AM, Henry wrote: On Wed, Feb 15, 2017 at 6:51 PM, Viktor Dukhovni wrote: On Feb 15, 2017, at 2:47 AM, Henry wrote: So you are saying there is no point in securing outbound email in postfix? I am saying SSL certificates on the sending side have nothing (good) to do with

Re: SSL Certificates

2017-02-15 Thread Alice Wonder
On 02/15/2017 12:32 AM, Dominic Raferd wrote: On 15 February 2017 at 07:58, Richard James Salts wrote: On 15 February 2017 6:47:31 PM AEDT, Viktor Dukhovni wrote: Please do not encourage novice users to configure DMARC. This does much more harm than good. DMARC is legitimately for the f

Re: SSL Certificates

2017-02-15 Thread Viktor Dukhovni
> On Feb 15, 2017, at 4:27 AM, Henry wrote: > > With this being the case what is the point of using SSL certificates > for sending? I repeat myself. Typically none. They largely only cause some harm. > There is a long discussion on using is here however I am > not unsure of the purpose. Cer

Re: SSL Certificates

2017-02-15 Thread Henry
On Wed, Feb 15, 2017 at 6:51 PM, Viktor Dukhovni wrote: > >> On Feb 15, 2017, at 2:47 AM, Henry wrote: >> >> So you are saying there is no point in securing outbound email in postfix? > > I am saying SSL certificates on the sending side have nothing (good) > to do with securing outbound mail. Wi

Re: SSL Certificates

2017-02-15 Thread Alice Wonder
On 02/14/2017 11:17 PM, Viktor Dukhovni wrote: On Feb 15, 2017, at 2:10 AM, Henry wrote: When I send a message to Gmail I am informed that it could not be authenticated and will probably end in the spam folder. This is largely misinformation. Sites that send bulk mail that might get classi

Re: milter macro names (potential patch)''

2017-02-15 Thread Matthias Schneider
This breaks milter_macro_defaults lookups, which always require the form {name}. This would have been found immediately if the library had tests. Wietse I don't use the new milter_macro_defaults feature yet, so Viktors patch is ok for now. Hope you can find a good long term solution,

Getting bounces from only one server

2017-02-15 Thread Marco Pizzoli
Dear all, I need to find a workaround an issue I am facing due to the limitation of an external product I am using to send/receive emails. Long story short: - 2 postfix servers acting both as sending as receiving servers from/to the Internet. - 1 application server sending to the Internet via both

Re: SSL Certificates

2017-02-15 Thread Dominic Raferd
On 15 February 2017 at 07:58, Richard James Salts wrote: > > > On 15 February 2017 6:47:31 PM AEDT, Viktor Dukhovni > wrote: >> >>Please do not encourage novice users to configure DMARC. This does >>much >>more harm than good. DMARC is legitimately for the few likePayPal, >>abusively >>for too