[pfx] Re: Still no luck with Cyrus SASL

2024-07-02 Thread Jim P. via Postfix-users
ot 12288 Jun 22 23:36 /var/spool/postfix/etc/sasldb2 After all that is in place, I use the following to add/list/delete accounts: saslpasswd2 -c me@desktop saslpasswd2 -c me@oldPC sasldblistusers2 hth, -Jim P. ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org

Re: Error 46 with TLS

2019-09-21 Thread Jim P.
e/smtp.domainmail.net/privkey.pem smtpd_tls_cert_file=/etc/letsencrypt/live/smtp.domainmail.net/cert.pem smtpd_tls_CAfile=/etc/letsencrypt/live/smtp.domainmail.net/fullchain.pem smtpd_tls_CApath=/etc/ssl/certs/ -Jim P.

Re: Can postscreen whitelist?

2019-04-15 Thread Jim P.
On Mon, 2019-04-15 at 10:21 -0600, Shawn Heisey wrote: > On 4/15/2019 10:02 AM, Jim P. wrote: > > Sure. You want postscreen_access_list, which defaults to permit_mynetworks. > > Just add it to your config with a lookup table like so: > > > > postscreen_access_list = p

Re: Can postscreen whitelist?

2019-04-15 Thread Jim P.
permit # camomile.cloud9.net 168.100.1.4 permit # russian-caravan.cloud9.net 2604:8d00:0:1::4permit # russian-caravan.cloud9.net 168.100.1.7 permit # english-breakfast.cloud9.net 2604:8d00:0:1::7permit # english-breakfast.cloud9.net hth, -Jim P.

Re: OpenDKIM not signing

2019-04-09 Thread Jim P.
Try using ExternalIgnoreList (i don't know why it works, but it does) #InternalHosts refile:/etc/opendkim/InternalHosts ExternalIgnoreList refile:/etc/opendkim/InternalHosts hth, -Jim P.

Re: SSL not working after unwanted server migration

2018-12-10 Thread Jim P.
gth, it's default on Debian is 1024. -Jim P.

Re: Installing LetsEncrypt For Postfix and Dovecot

2018-11-29 Thread Jim P.
On Thu, 2018-11-29 at 09:28 +0100, Matus UHLAR - fantomas wrote: > > On Wed, 2018-11-28 at 10:03 +0100, Matus UHLAR - fantomas wrote: > > > But I prefer dehydrated over bloated certbot. > > On 28.11.18 09:49, Jim P. wrote: > > This comes up enough to warrant the foll

Re: Installing LetsEncrypt For Postfix and Dovecot

2018-11-28 Thread Jim P.
On Wed, 2018-11-28 at 12:25 -0500, Viktor Dukhovni wrote: > > On Nov 28, 2018, at 9:49 AM, Jim P. wrote: > > > > 1) What do you do about restarting services after automatic cert > > renewals in the middle of a holiday weekend?  (i.e. renew_hook in > > /etc/letsencr

Re: Installing LetsEncrypt For Postfix and Dovecot

2018-11-28 Thread Jim P.
middle of a holiday weekend? (i.e. renew_hook in /etc/letsencrypt/renewal/*.conf) 2) What do you do to list all certs to show revocation, expiration, renewal status (e.g. certbot certificates) -Jim P.

Re: [Postfix] Re: [Postfix] Re: [Postfix] Re: Question about disabling SSLv2 and SSLv3 and Opportunistic TLS

2018-05-29 Thread Jim P.
On Tue, 2018-05-29 at 13:57 -0400, Viktor Dukhovni wrote: > > On May 29, 2018, at 1:54 PM, Jim P. wrote: > > > > It's more of a language "feature".  This works: > > > > LANG=C comm -1 -2 <(postconf -n) <(postconf -d) > > >

Re: [Postfix] Re: [Postfix] Re: Question about disabling SSLv2 and SSLv3 and Opportunistic TLS

2018-05-29 Thread Jim P.
On Tue, 2018-05-29 at 13:32 -0400, Viktor Dukhovni wrote: > > On May 29, 2018, at 12:28 PM, Jim P. wrote: > > > > FWIW, I had to use this: > > > > comm -1 -2 <(postconf -n|sort) <(postconf -d|sort) > > That'd only be needed if you have a funny

Re: [Postfix] Re: Question about disabling SSLv2 and SSLv3 and Opportunistic TLS

2018-05-29 Thread Jim P.
everything identical to > > default. > > You can get changed parameters that are at their default value with: > > comm -1 -2 <(postconf -n) <(postconf -d) FWIW, I had to use this: comm -1 -2 <(postconf -n|sort) <(postconf -d|sort) -Jim P.