Re: Merging multiple aliases files together

2017-03-13 Thread Viktor Dukhovni
> On Mar 14, 2017, at 12:05 AM, Samuel Williams > wrote: > > Viktor, do you mind clarifying why you don't think it's sensible > behaviour? Like, what specifically is wrong with this approach? > Perhaps I'm missing something important. Poor orthogonality in tool design. The postmap(1) and post

Re: Merging multiple aliases files together

2017-03-13 Thread Samuel Williams
Viktor, do you mind clarifying why you don't think it's sensible behaviour? Like, what specifically is wrong with this approach? Perhaps I'm missing something important. I don't mind adding a script to merge aliases, and it may be what I end up doing. I see both pros and cons with this approach. H

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 11:19 PM, Jeronimo L. Cabral wrote: > > Dear Viktor, I setup the certificates repository for mailx and everything > works OK Congratulations, and good luck. > > $ mailx -v -r "f...@mycompany.com" -s "TLS test" -S smtp="172.16.1.1:587" -S > smtp-use-starttls -S ssl

Re: Merging multiple aliases files together

2017-03-13 Thread Noel Jones
On 3/13/2017 6:34 PM, Samuel Williams wrote: > I don't really want to add a full blown MySQL, PgSQL or LDAP daemon > for just 2-3 user accounts. It's not a primary function of the server > and adds a lot of overhead/surface area. Consider using SQLite for this. No daemon, minimal config, yet real

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Dear Viktor, I setup the certificates repository for mailx and everything works OK $ mailx -v -r "f...@mycompany.com" -s "TLS test" -S smtp="172.16.1.1:587" -S smtp-use-starttls -S ssl-verify=ignore -S nss-config-dir=/etc/pki/nssdb/ anyu...@gmail.com Really I appreciate the important help fr

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Ahh OK, and now when I try to send a mesaage with mailx, in the mail.log from Postfix I have this: Mar 13 23:52:03 RELAY1 postfix/submission/smtpd[4570]: connect from unknown[10.1.1.1] Mar 13 23:52:03 RELAY1 postfix/submission/smtpd[4570]: match_hostaddr: 10.1.1.1 ~? 127.0.0.0/8 Mar 13 23:52:03 RE

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 10:39 PM, Jeronimo L. Cabral wrote: > > After set the verbose logging: > > debug_peer_list = 10.1.1.1 (client IP) > and try to send a message with mailx, the log is empty because the STARTTLS > capabilities on port TCP/587 are nor present: That's because there's a typ

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Ok Viktor, thanks again. After set the verbose logging: debug_peer_list = 10.1.1.1 (client IP) and try to send a message with mailx, the log is empty because the STARTTLS capabilities on port TCP/587 are nor present: tail -f /var/log/mail

Re: Pay for support

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 10:23 PM, Jeronimo L. Cabral wrote: > > Dear Viktor, I need help urgently. > > Please how much does it cost for you to help me via TeamViewer ??? > > If you tell me a price maybe I can do a payment with VISA I suppose. My help is not for sale. Instead of wasting time, p

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 10:07 PM, Jeronimo L. Cabral wrote: > > Dear Viktor, I apologize for my new interruptionbut after follow your > instructions, the Postfix server doesn't show the STARTTLS support via telnet: http://www.postfix.org/DEBUG_README.html#mail http://www.postfix.org/DE

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Dear Viktor, I apologize for my new interruptionbut after follow your instructions, the Postfix server doesn't show the STARTTLS support via telnet: $ telnet 10.1.1.1 587 Trying 10.1.1.1... Connected to 10.1.1.1. Escape character is '^]'. ehlo relay.mycompany.com NOTHING TO SHOW!!! Now I hav

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 9:07 PM, Jeronimo L. Cabral wrote: > > Viktor, I have to tell you that it doesn't work for me. > > # TLS parameters (como servidor) > smtpd_tls_cert_file = /etc/postfix/SSL/publica.crt > smtpd_tls_key_file = /etc/postfix/SSL/privada.pem > smtpd_tls_security_level = may > s

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Viktor, I have to tell you that it doesn't work for me. Main.cf: smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) biff = no append_dot_mydomain = no readme_directory = no # TLS parameters (como servidor) smtpd_tls_cert_file = /etc/postfix/SSL/publica.crt smtpd_tls_key_file = /etc/postfix

Re: Merging multiple aliases files together

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 7:56 PM, Samuel Williams > wrote: > > Just wondering, looking at the source code, it should be possible to > create a merge mode for postalias. Would you accept a PR for this? So > the use case would be something like > > cat /etc/postfix/aliases /etc/postfix/aliases.d/*

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 7:37 PM, Jeronimo L. Cabral wrote: > > Dear Viktor. sorry but I'll try to be more explicit because > I have to put to work the submission and I can't: > > main.cf: > > smtp_tls_cert_file = /etc/postfix/SSL/publica.crt > smtp_tls_key_file = /etc/postfix/SSL/privada.pem Th

Re: Merging multiple aliases files together

2017-03-13 Thread Samuel Williams
Just wondering, looking at the source code, it should be possible to create a merge mode for postalias. Would you accept a PR for this? So the use case would be something like cat /etc/postfix/aliases /etc/postfix/aliases.d/* | postalias -Mi aliases And it would merge together records if there we

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Dear Viktor. sorry but I'll try to be more explicite because I have to put to work the submission and I can't: main.cf: # TLS parameters (server side) smtpd_tls_cert_file=/etc/ssl/certs/relay.pem smtpd_tls_key_file=/etc/ssl/private/key.pem smtpd_tls_security_level = may smtpd_tls_loglevel = 2 #

Re: Merging multiple aliases files together

2017-03-13 Thread Samuel Williams
Thanks Viktor. > Automatic combination of multiple results into a single comma-separated outcome is a feature of the LDAP, MySQL and PgSQL table drivers. > Put your aliases into a database, and you'll get the automatic merging of multiple lookup results. It's possible to achieve what I want just

Re: Merging multiple aliases files together

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 7:04 PM, Samuel Williams > wrote: > > I have 0 or more of these user packages, and I want to, some how, > merge all these aliases together. So, if another user has `root: > dole`, the final entry would be equivalent to `root: bob, dole`. Automatic combination of multiple

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
> On Mar 13, 2017, at 6:53 PM, Jeronimo L. Cabral wrote: > > $ mailx -v -r "f...@mycompany.com" -s "TLS test" -S smtp="10.1.1.1:587" -S > smtp-use-starttls -S ssl-verify=ignore any_u...@gmail.com > > the command never ends in the shell and the Postfix log just says: > > Mar 13 19:41:56 MITLPS

Merging multiple aliases files together

2017-03-13 Thread Samuel Williams
I don't know the best way to achieve this. I have some "user" packages which install various users on a linux system. I want the setup to be entirely automated, and as part of this I want to set up some mail aliases for each user, and add their alias to the root alias. Essentially, the following r

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Daer Viktor, I´ve followed your instructions and setup the submission port in master.cf as you said: Mail client ---STARTTLS Postfix listening on Port TCP/587 - Internet SMTP servers But when I execute from a client 172.1.1.1 to the Postfix server 10.1.1.1: $ mailx -v -r "f...@mycompany.com

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Alejandro Cabrera Obed
Sorry but why do you suggest yo use port 587 for TLS optional for auth + data , and not port 25 for the same proposal, if the goal is using TLS if possible? Thanking un advance. El 13 mar. 2017 5:18 PM, "Viktor Dukhovni" escribió: > On Mon, Mar 13, 2017 at 04:49:23PM -0300, Jeronimo L. Cabral w

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
On Mon, Mar 13, 2017 at 04:49:23PM -0300, Jeronimo L. Cabral wrote: > At the moment, the mail relay is reached just from inside our company and > several applications use it to send mail through Internet. If the submission port is only reachable from internal trusted networks, then authentication

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
At the moment, the mail relay is reached just from inside our company and several applications use it to send mail through Internet. In this scenario, one of these applications take the user "f...@mycompany.com" and send mail to the Postfix relay. So the apps will be configured in this way (after y

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
On Mon, Mar 13, 2017 at 04:33:15PM -0300, Jeronimo L. Cabral wrote: > Sorry, I repeat Postfix doesn't need to authenticate any user sending > through it (not login/password) Why is that? How are you planning to prevent abuse by spammers exploiting open relays? -- Viktor.

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
On Mon, Mar 13, 2017 at 04:19:48PM -0300, Jeronimo L. Cabral wrote: > I need STARTTLS server side connection, because the client side connection > is working OK. This may mean something to you, but I for one have no idea what you have in mind when you say that. > I have Postfix 2.11, so you say

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Sorry, I repeat Postfix doesn't need to authenticate any user sending throug it (not login/password) This implies an extra configuration line? Thanks again. On Mon, Mar 13, 2017 at 4:19 PM, Jeronimo L. Cabral wrote: > Thanks to both of you !!! > > I need STARTTLS server side connection, becaus

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Thanks to both of you !!! I need STARTTLS server side connection, because the client side connection is working OK. I have Postfix 2.11, so you say if I use STARTTLS with port TCP/25 the authentication is in plain text...but if I set up STARTTLS on port TCP/587 the authentication is encrypted too

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Noel Jones
On 3/13/2017 2:04 PM, Viktor Dukhovni wrote: > On Mon, Mar 13, 2017 at 01:47:49PM -0500, Noel Jones wrote: > >>> smtpd_use_tls=yes >> >> postfix requires spaces around the " = " in the above parameters in >> main.cf > > That's not accurate, while " = " is the "normal form" of main.cf > settings a

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
On Mon, Mar 13, 2017 at 01:47:49PM -0500, Noel Jones wrote: > > smtpd_use_tls=yes > > postfix requires spaces around the " = " in the above parameters in > main.cf That's not accurate, while " = " is the "normal form" of main.cf settings as output by "postconf -n", the spaces are optional. > >

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Viktor Dukhovni
On Mon, Mar 13, 2017 at 03:18:07PM -0300, Jeronimo L. Cabral wrote: > Dear, I want mail clients to send messages to Internet through an own mail > relay Posfix as smtpd server (no as client), let's say: This is not a well formed question. There is no such thing as sending mail as a server vs as

Re: TLS support for Postfix server on port TCP/25

2017-03-13 Thread Noel Jones
On 3/13/2017 1:18 PM, Jeronimo L. Cabral wrote: > Dear, I want mail clients to send messages to Internet through an > own mail relay Posfix as smtpd server (no as client), let's say: > > Mail client ---STARTTLS Postfix listening on Port TCP/25 --- > Internet SMTP servers > > Also, I don't ne

TLS support for Postfix server on port TCP/25

2017-03-13 Thread Jeronimo L. Cabral
Dear, I want mail clients to send messages to Internet through an own mail relay Posfix as smtpd server (no as client), let's say: Mail client ---STARTTLS Postfix listening on Port TCP/25 --- Internet SMTP servers Also, I don't need authentication to send mails from the Postfix mail relay.

Re: How do I move messages from a sender to the HOLD queue?

2017-03-13 Thread Sean Son
On Mon, Mar 13, 2017 at 2:02 PM, Fazzina, Angelo wrote: > Yes, > > But obviously you have to change the grep to grab your emails and not > everything from March 10th. > > Also you may want to test it on one email to learn how it works, and not > blindly do what I suggest. Up to you. > > After you

Re: How do I move messages from a sender to the HOLD queue?

2017-03-13 Thread Sean Son
On Mon, Mar 13, 2017 at 1:57 PM, Fazzina, Angelo wrote: > Example > > > > > > [root@mta1 ~]# postqueue -p|grep "Mar 10" > > 9A9AD2B23 1925 Fri Mar 10 06:00:03 owner-CT_FOOD_SYSTEM_LEADER-L* > cam**AMENDORGANICS*-c...@listserv.uconn.edu > > 9D3A41B01 958 Fri Mar 10 23:57:26 MAILER-DAE

RE: How do I move messages from a sender to the HOLD queue?

2017-03-13 Thread Fazzina, Angelo
Hi again, You may need to run Postqueue –p First go get the users emails. Grep out the ones you need. -ALF -Angelo Fazzina Operating Systems Programmer / Analyst University of Connecticut, UITS, SSG, Server Systems 860-486-9075 From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@p

RE: How do I move messages from a sender to the HOLD queue?

2017-03-13 Thread Fazzina, Angelo
Read man page on Postsuper. -Angelo Fazzina Operating Systems Programmer / Analyst University of Connecticut, UITS, SSG, Server Systems 860-486-9075 From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Sean Son Sent: Monday, March 13, 2017 1:47 PM To: pos

How do I move messages from a sender to the HOLD queue?

2017-03-13 Thread Sean Son
Hello all We have over a thousand messages from a certain user that are stuck in our mail queue. Is there a way to move those messages to the HOLD queue for now? I want to move all messages from that specific sender, to the HOLD queue. All help is greatly appreciated! Thanks S