Re: Server side S/MIME EFail (partial) Mitigation

2018-07-02 Thread Dr. Rolf Jansen
GitHub account. Bets regards Rolf > Am 02.07.2018 um 10:55 schrieb Andreas Schamanek : > > > Hi Rolf, > > since it is off-topic for postfix-users, here is a link for you off-list that > I found interesting and relevant: > > https://blog.hboeck.de/archives/894-Efail-

Re: Server side S/MIME EFail (partial) Mitigation

2018-07-02 Thread Dr. Rolf Jansen
> Am 02.07.2018 um 03:33 schrieb martijn.list : > > On 02-07-18 01:15, Dr. Rolf Jansen wrote: >> Hello, >> >> I read carefully the technical paper about the exfiltration attack >> (efail) on decrypted S/MIME or PGP content. >> >> https://efail.

Server side S/MIME EFail (partial) Mitigation

2018-07-01 Thread Dr. Rolf Jansen
e same time, at least until most of the e-mail clients sanitize HTML mails internally - which may take a while, though. Best regards Rolf

Resolved: Re: relay okay vs. relay access denied issue

2014-01-18 Thread rolf
this >> is a postfix config issue that I just cannot see. There seems to be >> some kind of clean open relay vs. relay access denied issue? Not sure. >> >> Error >> Here is my mail.log session and I will insert a few notes in parens: >> >> rolf@www:/et

relay okay vs. relay access denied issue

2014-01-18 Thread rolf
of clean open relay vs. relay access denied issue? Not sure. Error Here is my mail.log session and I will insert a few notes in parens: rolf@www:/etc/postfix$ echo "test from my domain" | mail -s "Hello world 1349" rolf2...@gmail.com && sudo tail -f /var/log/mail.l

Re: insight to virtual mailbox config...i think...

2014-01-16 Thread rolf
On 1/16/2014 2:35 PM, Noel Jones wrote: On 1/16/2014 12:47 PM, rolf wrote: Hi folks, I'm stuck...any help is appreciated. I am by no means a postfix expert but I have it working fine for local accounts, trying now to add an account for a different domain. Apologies in advance for what

insight to virtual mailbox config...i think...

2014-01-16 Thread rolf
ault parameters-- alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no home_mailbox = Maildir/ local_recipient_maps = luser_relay = rolf@localhost mailbox_size_limit = 0 mydestination = grimdar.com eee.grimdar.com, localhost.grimdar.com, localhost myhostname = mail.grimdar.com mynetwork

Re: Correlate client IP address with queue ID

2013-04-23 Thread Rolf E. Sonneveld
On 04/23/2013 10:14 PM, Wietse Venema wrote: Rolf E. Sonneveld: Apr 23 20:26:38 helium postfix-cust1/smtpd[9220]: 3ZwCmG272nz1L8Zd: client=D57E1702.static.ziggozakelijk.nl[213.126.23.2] The above logging gives you the link between client and queue ID. client = D57E1702

Correlate client IP address with queue ID

2013-04-23 Thread Rolf E. Sonneveld
7;s not as it's rather short. If it's not unique, is there another way to reliably trace a messaging including the client IP address of the system that sent the message to this Postfix instance? /rolf -- Output of postconf -n for this instance: alias_database = alias_maps

Re: Problem with line which is longer than 256 characters

2013-02-16 Thread Rolf E. Sonneveld
On 02/11/2013 11:36 PM, Wietse Venema wrote: Rolf E. Sonneveld: In general, Postfix is running fine and this Postfix instance is also running fine. However, there is one SMTP client (of which we are not in control), that sends messages with long lines to this server running Postfix. There is a

Problem with line which is longer than 256 characters

2013-02-11 Thread Rolf E. Sonneveld
25 and I submit the same data with the same long line during SMTP DATA, I cannot reproduce this problem. However, if I do a telnet to a neighbor Solaris Sparc system (running Postfix 2.8.0) on port 25, I can reproduce this problem. So, is the problem Solaris-specific? Is it network-related? Any ideas what to check next c.q. how to debug this problem further? /rolf

Re: LDAP email-address translation

2012-01-19 Thread Rolf E. Sonneveld
_domain relay: ## Relay only mail to known external vendors # relay: # relay: # relay: # relay: # relay: --- Anyone who knows what is needed on my mailrelay for this to work ? Use a canonical map of type ldap to replace sender addresses of the form usern...@host.maymann.org with first.l...@maymann.org. /rolf

Re: Postfix-Amavisd quarantined mail inspection

2011-12-29 Thread Rolf E. Sonneveld
pic: List-Subscribe: <http://lists.amavis.org/cgi-bin/mailman/listinfo/amavis-users>, <mailto:amavis-users-requ...@amavis.org?subject=subscribe> /rolf

Re: Multiple SASL servers

2011-12-14 Thread Rolf E. Sonneveld
On 12/14/11 2:55 PM, Wietse Venema wrote: Rolf E. Sonneveld: On 12/14/11 1:00 PM, Wietse Venema wrote: Rolf E. Sonneveld: Hi, all, sorry if this has been asked before, I browsed the archives and could not find this mentioned. Running Postfix 2.8.6. I'm planning to use the Dovecot

Re: Multiple SASL servers

2011-12-14 Thread Rolf E. Sonneveld
On 12/14/11 1:00 PM, Wietse Venema wrote: Rolf E. Sonneveld: Hi, all, sorry if this has been asked before, I browsed the archives and could not find this mentioned. Running Postfix 2.8.6. I'm planning to use the Dovecot SASL implementation. Is there a way to define multiple Dovecot serve

Multiple SASL servers

2011-12-14 Thread Rolf E. Sonneveld
e one Dovecot server / process is down? /rolf

Re: CISCO breaks DKIM on their ASA/PIX (again)

2011-12-08 Thread Rolf E. Sonneveld
med it's a known bug (not published) with DKIM and smtp inspection engine in latest IOS versions. This should be fixed in some newer IOS version (8.4(10)) which is not public yet (latest is 8.4(2)). I've always wondered why they call it 'smtp protocol fixup', they'd better call it 'smtp protocol breakdown'. /rolf

Re: Per-Recipient Data Responses (was: ... per-recipient treatment of messages in a milter environment)

2011-11-23 Thread Rolf E. Sonneveld
at is often asked by ISPs who offer anti-spam/virus for their customers: some pay for additional filtering. Altough I'm not an ISP this is exactly the reason I was trying to setup per-recipient filtering and sent my question to the list. /rolf

Postfix and MIMEdefang; per-recipient treatment of messages in a milter environment

2011-11-22 Thread Rolf E. Sonneveld
destination_recipient_limit, but this does not apply to milters, as milters are typically invoked during the (SMTP) session. Any other suggestion to split up a multi-recipient message and apply a milter like MD to the resulting single-recipient message copies? Regards, /rolf -- output of po

Re: Multiple groups for user in pipe entry master.cf

2009-06-15 Thread Rolf E. Sonneveld
Wietse Venema wrote: Rolf E. Sonneveld: [ Charset ISO-8859-1 unsupported, converting... ] Hi, running Postfix 2.4.5 According to http://www.postfix.org/pipe.8.html it is possible to define a 'user:group' in a pipe entry in master.cf: *user*=/username/:

Multiple groups for user in pipe entry master.cf

2009-06-15 Thread Rolf E. Sonneveld
e 'groupname' in the pipe entry in master.cf does not allow for a list of groups? Or is it intentional that only one group can be selected (maybe for security reasons)? /rolf