Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Stats Student
On Wed, Jul 8, 2020 at 4:18 PM Viktor Dukhovni wrote: > > On Wed, Jul 08, 2020 at 04:12:24PM -0700, Stats Student wrote: > > > Let me know if what I am asking isn't clear and I'll be happy to > > provide further details. I did post all of my configuration last week > > but can include it in the em

Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Viktor Dukhovni
On Wed, Jul 08, 2020 at 04:12:24PM -0700, Stats Student wrote: > Let me know if what I am asking isn't clear and I'll be happy to > provide further details. I did post all of my configuration last week > but can include it in the email, if that's the preferred method. This list is no substitute f

Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Stats Student
> > > > I don't use transport_maps currently so it's unclear to me how this > > would work with the existing setup which I assume already uses the > > virtual delivery agent with virtual_transport. Can you please show an > > example of the transport_maps with two routes? > > In that case you alread

Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Wietse Venema
Stats Student: > On Wed, Jul 8, 2020 at 1:10 PM Wietse Venema wrote: > > > > Stats Student: > > > > Again, an email address IS NOT an account. > > > > > > > > > > Ok, understood. > > > > > > > If it helps to rephrase the example: > > > > > > > > Prerequisites: > > > > foo@example delivers to s

Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Stats Student
On Wed, Jul 8, 2020 at 1:10 PM Wietse Venema wrote: > > Stats Student: > > > Again, an email address IS NOT an account. > > > > > > > Ok, understood. > > > > > If it helps to rephrase the example: > > > > > > Prerequisites: > > > foo@example delivers to script > > > foo.maildir@example del

Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Wietse Venema
Stats Student: > > Again, an email address IS NOT an account. > > > > Ok, understood. > > > If it helps to rephrase the example: > > > > Prerequisites: > > foo@example delivers to script > > foo.maildir@example delivers to maildir > > I don't know how to satisfy the last prerequisite. Ca

Re: rewrite all but one address

2020-07-08 Thread Paul Littlefield
On 08/07/2020 13:57, Viktor Dukhovni wrote: NO! The RHS value in virtual(5) tables is an*address*, not a filename. The correct syntax is: @test.com @example.com joe.blo...@test.com joe.blo...@test.com Delivering that to a particular file is done via aliases(5) or virtual_mail

Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Stats Student
> Again, an email address IS NOT an account. > Ok, understood. > If it helps to rephrase the example: > > Prerequisites: > foo@example delivers to script > foo.maildir@example delivers to maildir I don't know how to satisfy the last prerequisite. Can you help? Currently have the followi

Re: TLS verification problem - ca untrusted, but it shouldn't be

2020-07-08 Thread Rainer Ruprechtsberger
On 08.07.20 14:34, Viktor Dukhovni wrote: > > /var/spool/postfix/etc/ssl/certs/ca-certificates.crt != > /etc/ssl/certs/ca-certificates.crt > > Why are you running s_client with that particular choice of filename? > Along with any private keys, DH parameters, ... the CAfile is loaded by >

Re: lmd support -- available as an 'add on', or just 'compiled in'?

2020-07-08 Thread PGNet Dev
On 7/6/20 2:52 PM, Viktor Dukhovni wrote: > Well, Fedora 31 does provide separate packages for multiple optional > lookup table drivers: > > postfix-cdb.x86_64 : Postfix CDB map support > postfix-ldap.x86_64 : Postfix LDAP map support > postfix-mysql.x86_64 : Postfix MySQL map suppo

Re: content_filter with external script and virtual_alias_maps

2020-07-08 Thread Wietse Venema
Stats Student: > On Tue, Jul 7, 2020 at 4:19 PM Wietse Venema wrote: > > > > Stats Student: > > > On Tue, Jul 7, 2020 at 2:15 PM Wietse Venema wrote: > > > > > > > > Stats Student: > > > > > Thank you, but I still do not understand why I need to provide > > > > > additional user aliases. If my sy

Re: rewrite all but one address

2020-07-08 Thread Viktor Dukhovni
> On Jul 8, 2020, at 6:13 AM, Paul Littlefield wrote: > > $ cat /etc/postfix/virtual > @test.com @example.com > joe.blo...@test.com /home/jbloggs/.maildir NO! The RHS value in virtual(5) tables is an *address*, not a filename. The correct syntax is: @test.com @example.com joe.

Re: TLS verification problem - ca untrusted, but it shouldn't be

2020-07-08 Thread Viktor Dukhovni
On Wed, Jul 08, 2020 at 09:03:52AM +0200, Rainer Ruprechtsberger wrote: > this is not my only problem with TLS verification - and I'm struggling > to debug this: > > *mail.mail.protection.outlook.com cannot be verified by postfix: > posttls-finger: certificate verification failed for > blahblahom

Re: rewrite all but one address

2020-07-08 Thread Paul Littlefield
On 07/07/2020 18:32, Wietse Venema wrote: Rewrite the address to itself (this is how recursion stops). Is this covered by your suggestion below? (I'd use virtual_alias_maps, because canonical maps can change message headers which may not be needed). So, http://www.postfix.org/virtual.5.ht

Re: TLS verification problem - ca untrusted, but it shouldn't be

2020-07-08 Thread Rainer Ruprechtsberger
On 08.07.20 13:12, Christian Kivalo wrote: [...] > How did you call posttls-finger? Did you use "-F" and point it to > /etc/ssl/certs/ca-certificates.crt? > >> But I do trust this CA: >> smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt > This setting does not affect posttls-finger Thanks - I

Re: TLS verification problem - ca untrusted, but it shouldn't be

2020-07-08 Thread Christian Kivalo
On 2020-07-08 09:03, Rainer Ruprechtsberger wrote: Hello, this is not my only problem with TLS verification - and I'm struggling to debug this: *mail.mail.protection.outlook.com cannot be verified by postfix: posttls-finger: certificate verification failed for blahblahommited.mail.protection.ou

Re: TLS verification problem - ca untrusted, but it shouldn't be

2020-07-08 Thread Rainer Ruprechtsberger
Hi, > cat server.cer intermediate.cer > server_chain.cer > > After that in the main.cf you use the server_chain.cer as > smtpd_tls_cert_file. > my problem is the other direction - I want to verify a remote SMTP server. Postfix is a smtp client in this instance.. TLS verification is required for

Re: TLS verification problem - ca untrusted, but it shouldn't be

2020-07-08 Thread Enrico Morelli
On Wed, 8 Jul 2020 09:03:52 +0200 Rainer Ruprechtsberger wrote: > Hello, > > this is not my only problem with TLS verification - and I'm struggling > to debug this: > > *mail.mail.protection.outlook.com cannot be verified by postfix: > posttls-finger: certificate verification failed for > blahb

TLS verification problem - ca untrusted, but it shouldn't be

2020-07-08 Thread Rainer Ruprechtsberger
Hello, this is not my only problem with TLS verification - and I'm struggling to debug this: *mail.mail.protection.outlook.com cannot be verified by postfix: posttls-finger: certificate verification failed for blahblahommited.mail.protection.outlook.com[104.47.14.36]:25: untrusted issuer /C=BE/O=