Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Viktor Dukhovni
> On Aug 16, 2018, at 11:03 AM, Wietse Venema wrote: > > Are you assuming that Postfix won't run unless a library with > the right SOname exists? That is definitely not safe to assume. > > It may make sense skip the warning when both versions are known to > share the same ABI. But that knowle

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Wietse Venema
Viktor Dukhovni: > > > > On Aug 16, 2018, at 6:30 AM, A. Schulze wrote: > > > > https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_misc.c#L971 > > I am planning a patch to silence these for Postfix 3.4, and Wietse > may choose to apply the same to some or all of 3.3, 3.2, 3.1

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Gary
I suggest using port 587 (SUBMISSION). That was you can heavily firewall filter the IP space to geographic locations where you are not likely to be sending mail. Besides geographic filtering, I also limit access to 587 using my "no eyes" list of datacenters. This firewall filter list comprises m

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Viktor Dukhovni
> On Aug 16, 2018, at 6:30 AM, A. Schulze wrote: > > https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_misc.c#L971 I am planning a patch to silence these for Postfix 3.4, and Wietse may choose to apply the same to some or all of 3.3, 3.2, 3.1 and 3.0. -- Viktor.

Re: "Recipient address rejected: User unknown in virtual mailbox table" and mydomain conf line

2018-08-16 Thread Poliman - Serwis
I just deleted mailbox and maildomain and now it works like a charm. Thank you for answers and link! 2018-08-16 13:36 GMT+02:00 Wietse Venema : > If mail for colonel.com.pl must be delivered at Google (primary MX) > and not at your Postfix server, > > - Do not list colonel.com.pl in mydestination

Re: "Recipient address rejected: User unknown in virtual mailbox table" and mydomain conf line

2018-08-16 Thread Wietse Venema
If mail for colonel.com.pl must be delivered at Google (primary MX) and not at your Postfix server, - Do not list colonel.com.pl in mydestination - Do not list colonel.com.pl in virtual_alias_domains - Do not list colonel.com.pl in virtual_mailbox_domains - Do not list colonel.com.pl in transport_

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread A. Schulze
Viktor Dukhovni: Therefore, if a system is upgraded to OpenSSL 1.1.1, Postfix will use 1.1.1 without a rebuild. but the mail log get flooded with ugly warnings: https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_misc.c#L971 I do run postfix-3.3.1 + openssl-1.1.1-pre* sinc

Re: "Recipient address rejected: User unknown in virtual mailbox table" and mydomain conf line

2018-08-16 Thread Postfix User
On Thu, 16 Aug 2018 07:08:29 +0200, Poliman - Serwis stated: >1. To be honest I don't know what is top-posting. Could you explain? I will >avoid it then. ;) https://en.wikipedia.org/wiki/Posting_style -- Jerry