[pfx] Re: Looking for a neat way to determine the time a mail sits in active queue

Tobi via Postfix-users: > Hi list > > maybe someone has a good idea :-) > > I'm looking for a way to reliably determine how long a message sits in > active queue. Currently I use postqueue -j and pipe it to jq, get only > hits from queue_id==active and then get arrival time, sort it by > arrival

[pfx] Re: TLSv1 from major mailprovider?

On Fri, Jun 07, 2024 at 11:31:04AM +0200, Daniel Hiepler via Postfix-users wrote: > TLSv1.0 and TLSv1.1 were deprecated long ago (e.g. RFC 8996) and some > legislation suggest or even requires to disable them. Doesn't that > ">=TLSv1" statement mean "TLS1.0 or higher?". Yes, it allows TLS 1.0 a

[pfx] Re: TLSv1 from major mailprovider?

On Fri, Jun 07, 2024 at 10:20:58AM +0200, Daniel Hiepler via Postfix-users wrote: > I'm trying to rule out a config error on my setup since Postfix is a > beast and I'm no beastmaster :) If you're willing to keep making progress, just give it time... > When I enabled "reject_plaintext_session"

[pfx] Re: TLSv1 from major mailprovider?

Daniel Hiepler via Postfix-users skrev den 2024-06-07 10:20: My cipher config is: smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = aNULL, eNULL, LOW, 3DES, MD5, EXP, PSK, SRP, DSS, DES, RC4, PSK smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1,!TLSv1.1 tls_medium

[pfx] Looking for a neat way to determine the time a mail sits in active queue

Hi list maybe someone has a good idea :-) I'm looking for a way to reliably determine how long a message sits in active queue. Currently I use postqueue -j and pipe it to jq, get only hits from queue_id==active and then get arrival time, sort it by arrival time, take the oldest and calculate the

[pfx] More changes (2024-06-06) at Let's Encrypt affecing DANE-TA(2) TLSA records

On Fri, Dec 08, 2023 at 02:00:56PM -0500, Viktor Dukhovni wrote: > It now turns out that they will also be switching to new underlying > intermediate CAs. So you'll a random choice of *new* issuers. > > > https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/L7XoAXt_s1c/m/k_vdk9rQ

[pfx] TLSv1 from major mailprovider?

Dear List, I'm trying to rule out a config error on my setup since postfix is a beast and I'm no beastmaster :) When I enabled "reject_plaintext_session" for smtpd_sender/relay/client_restrictions, I got the following log output from some big national mailprovider. Does that mean, that the