Re: Recipient domain substitution

2020-12-22 Thread Wietse Venema
John Schmerold: > On 12/22/2020 3:10 PM, Viktor Dukhovni wrote: > > On Tue, Dec 22, 2020 at 02:57:13PM -0600, John Schmerold wrote: > > > >> I should have looked at the log before sending this note. Postfix is > >> including a " orig_to=" header when sending to the destination server, > >> that is

Re: Recipient domain substitution

2020-12-22 Thread John Schmerold
On 12/22/2020 3:10 PM, Viktor Dukhovni wrote: On Tue, Dec 22, 2020 at 02:57:13PM -0600, John Schmerold wrote: I should have looked at the log before sending this note. Postfix is including a " orig_to=" header when sending to the destination server, that is causing our problem. There is no suc

Re: Recipient domain substitution

2020-12-22 Thread Viktor Dukhovni
On Tue, Dec 22, 2020 at 02:57:13PM -0600, John Schmerold wrote: > I should have looked at the log before sending this note. Postfix is > including a " orig_to=" header when sending to the destination server, > that is causing our problem. There is no such thing as an "orig_to=" header. > Is th

Re: Recipient domain substitution

2020-12-22 Thread John Schmerold
On 12/22/2020 2:31 PM, Wietse Venema wrote: John Schmerold: I want messages sent to lo...@tld1.com to be redirected to lo...@redirected.com Until this morning, adding canonical_maps = hash:/etc/postfix/canonical to main.cf got the job done. canonical contained: @tld1.com @redirected.com N

Re: Recipient domain substitution

2020-12-22 Thread Wietse Venema
John Schmerold: > I want messages sent to lo...@tld1.com to be redirected to > lo...@redirected.com > > Until this morning, adding canonical_maps = hash:/etc/postfix/canonical > to main.cf got the job done. > > canonical contained: >@tld1.com @redirected.com > > Now the remote server is re

Recipient domain substitution

2020-12-22 Thread John Schmerold
I want messages sent to lo...@tld1.com to be redirected to lo...@redirected.com Until this morning, adding canonical_maps = hash:/etc/postfix/canonical to main.cf got the job done. canonical contained:   @tld1.com @redirected.com Now the remote server is rejecting the message with this error

Re: Javamail connection

2020-12-22 Thread Viktor Dukhovni
On Tue, Dec 22, 2020 at 02:26:08PM -0500, James B. Byrne wrote: > > Your suspicions are unfounded. The client is rejecting the server's > > certificate chain with a fatal certificate unknown alert. That's the > > issue to fix. All else is distraction. > > After reviewing Postix logs with smtpd

Re: Javamail connection

2020-12-22 Thread Wietse Venema
James B. Byrne: [ Charset ISO-8859-1 converted... ] > > > On Tue, December 22, 2020 13:27, Viktor Dukhovni wrote: > > > > > Your suspicions are unfounded. The client is rejecting the server's > > certificate chain with a fatal certificate unknown alert. That's the > > issue to fix. All else i

Re: Javamail connection

2020-12-22 Thread James B. Byrne
On Tue, December 22, 2020 13:27, Viktor Dukhovni wrote: > > Your suspicions are unfounded. The client is rejecting the server's > certificate chain with a fatal certificate unknown alert. That's the > issue to fix. All else is distraction. > After reviewing Postix logs with smtpd_tls_loggin

Re: Javamail connection

2020-12-22 Thread Viktor Dukhovni
On Tue, Dec 22, 2020 at 01:21:06PM -0500, James B. Byrne wrote: > > You could hypothetically have different certificate settings for > > the different ports in master.cf, but if you don't then indeed > > the server side TLS behaviour is likely the same across the board. > > I do not. And, I beli

Re: Javamail connection

2020-12-22 Thread James B. Byrne
On Tue, December 22, 2020 12:46, Viktor Dukhovni wrote: > On Tue, Dec 22, 2020 at 09:24:27AM -0500, James B. Byrne wrote: > >> > It clearly supports STARTTLS, since it is actually performing the TLS >> > handshake, and abandons it after receiving certificates it is not happy >> > with. >> >> Whi

Re: Javamail connection

2020-12-22 Thread Viktor Dukhovni
On Tue, Dec 22, 2020 at 10:57:48AM -0500, James B. Byrne wrote: > Dec 22 10:10:08 mx32 postfix-p25/smtpd[12694]: SSL_accept:SSLv3/TLS read > client hello > Dec 22 10:10:08 mx32 postfix-p25/smtpd[12694]: SSL_accept:SSLv3/TLS write > server hello > Dec 22 10:10:08 mx32 postfix-p25/smtpd[12694]: SS

Re: Javamail connection

2020-12-22 Thread Viktor Dukhovni
On Tue, Dec 22, 2020 at 09:24:27AM -0500, James B. Byrne wrote: > > It clearly supports STARTTLS, since it is actually performing the TLS > > handshake, and abandons it after receiving certificates it is not happy > > with. > > Which confuses me, because I can use java to successfully negotiate a

Re: Javamail connection

2020-12-22 Thread James B. Byrne
I have been looking at the Postfix logs and wonder if this is significant: Dec 22 10:10:08 mx32 postfix-p25/smtpd[12694]: SSL_accept:SSLv3/TLS read client hello Dec 22 10:10:08 mx32 postfix-p25/smtpd[12694]: SSL_accept:SSLv3/TLS write server hello Dec 22 10:10:08 mx32 postfix-p25/smtpd[12694]: S

Re: Filename in main.cf, specifically myorigin = /etc/mailname

2020-12-22 Thread Wietse Venema
Matus UHLAR - fantomas: > >Chris Green: > >> Is the use of a filename in main.cf possible for any parameter or is > >> it only applicable to myorigin (or just to a few)? > >> > >> I notice that installing postfix on my laptop from the Ubuntu > >> repositories has set myorigin = /etc/mailname in mai

Re: Filename in main.cf, specifically myorigin = /etc/mailname

2020-12-22 Thread Matus UHLAR - fantomas
Chris Green: Is the use of a filename in main.cf possible for any parameter or is it only applicable to myorigin (or just to a few)? I notice that installing postfix on my laptop from the Ubuntu repositories has set myorigin = /etc/mailname in main.cf. This is handy in relation to my 'how to sy

Re: Javamail connection

2020-12-22 Thread James B. Byrne
On Mon, December 21, 2020 20:07, Viktor Dukhovni wrote: > It clearly supports STARTTLS, since it is actually performing the TLS > handshake, and abandons it after receiving certificates it is not happy > with. > Which confuses me, because I can use java to successfully negotiate a certificate

Re: Javamail connection

2020-12-22 Thread James B. Byrne
On Mon, December 21, 2020 20:00, Jaroslaw Rafa wrote: > > If you are able to connect via 465, then maybe the application just isn't > designed to use "inline" TLS, but rather uses only SMTP-over-TLS? The latter > is supported on port 465, while submission via port 587 requires first > plaintext

Re: Javamail connection

2020-12-22 Thread James B. Byrne
On Mon, December 21, 2020 16:12, Wietse Venema wrote: > > This test connects to a DIFFERENT Postfix service than the Javamail client. > This proves NOTHING about the service that the Javamail client connects to. > We are discussing this at cross-purposes. I understand that the service at 465