[pfx] Re: Potential bug in milter interface, can't change first header field

2024-02-21 Thread Taco de Wolff via Postfix-users
b 21, 2024 at 8:01 PM Steffen Nurpmeso via Postfix-users < postfix-users@postfix.org> wrote: > Taco de Wolff via Postfix-users wrote in > : > |While writing a milter for use with Postfix, I was unable to change the > |first header field and instead of changing it, Postfix appen

[pfx] Potential bug in milter interface, can't change first header field

2024-02-21 Thread Taco de Wolff via Postfix-users
Hi, While writing a milter for use with Postfix, I was unable to change the first header field and instead of changing it, Postfix appends it to the end of the header. Incidentally, as I believed this was a bug with the milter library, I rewrote the milter server implementation from scratch and ca

[pfx] Re: Enabling TLS1.3 and allow sending over SMTPS/465

2024-01-22 Thread Taco de Wolff via Postfix-users
postfix-users@postfix.org> wrote: > On Mon, Jan 22, 2024 at 11:44:40AM -0300, Taco de Wolff via Postfix-users > wrote: > > > Two questions really, one is that I can't enable TLS1.3 whatever I try. > > Running CentOS8 with OpenSSL v1.1.1k-FIPS and Postfix v3.5.8, I confir

[pfx] Re: Enabling TLS1.3 and allow sending over SMTPS/465

2024-01-22 Thread Taco de Wolff via Postfix-users
thias.schnei...@rmail.de> wrote: > >> Hi, >> >> i think this has something todo with smtpd_tls_fingerprint_digest: >> >> smtpd_tls_fingerprint_digest = ${{$compatibility_level} > {md5} : {sha256}} >> >> since you have 3.5 its using md5, try to set this

[pfx] Re: Enabling TLS1.3 and allow sending over SMTPS/465

2024-01-22 Thread Taco de Wolff via Postfix-users
his value to sha256 > > best regards > Matthias > > -- > *Von: *"Taco de Wolff via Postfix-users" > *An: *"postfix-users" > *Gesendet: *Montag, 22. Januar 2024 15:44:40 > *Betreff: *[pfx] Enabling TLS1.3 and allow sending over SMTPS/465 > > Hi

[pfx] Enabling TLS1.3 and allow sending over SMTPS/465

2024-01-22 Thread Taco de Wolff via Postfix-users
Hi, Two questions really, one is that I can't enable TLS1.3 whatever I try. Running CentOS8 with OpenSSL v1.1.1k-FIPS and Postfix v3.5.8, I confirm that TLS1.3 ciphers are available: # openssl version OpenSSL 1.1.1k FIPS 25 Mar 2021 # postconf -T compile-version OpenSSL 1.1.1k FIPS 25 Mar 2021

[pfx] Regarding reject_unlisted_sender and preventing sender address spoofing

2024-01-05 Thread Taco de Wolff via Postfix-users
Hi, I'm trying to understand how the reject_unlisted_sender option works in the smtpd_sender_restrictions option. This is what I understand it to do: For any received mail (it is an smtpd option after all), either for receiving mail from an external server or for sending mail from a logged in use