dns lookup problem

2017-11-13 Thread zhong ming wu
Hello I am getting a dns lookup problem when I move a postfix server inside a docker container. (the sole purpose of this internal server to deliver mail for the virtual addresses. Here are the logs Nov 11 15:32:22 hog docker/imap-in/trivial-rewrite[112]: warning: connect to pgsql server pg

Re: guidance on data persistence?

2017-11-10 Thread zhong ming wu
> On Nov 9, 2017, at 7:07 AM, Wietse Venema wrote: > > zhong ming wu: >> Hello >> >> When moving postfix to docker, I run into the issue that when the >> containers go away postfix queued mail will get lost unless I made an >> effort to persist on the

guidance on data persistence?

2017-11-08 Thread zhong ming wu
Hello When moving postfix to docker, I run into the issue that when the containers go away postfix queued mail will get lost unless I made an effort to persist on the host. A naive attempt to simply map an empty folder on the host as `/var/spool/postifx` on the container does not work, because po

Re: directing logs to remote syslog with any local syslog instance

2017-11-01 Thread zhong ming wu
On Tue, Oct 31, 2017 at 7:35 AM, Wietse Venema wrote: > zhong ming wu: > > On Mon, Oct 30, 2017 at 8:45 AM, Wietse Venema > wrote: > > > > > Wietse Venema: > > > > zhong ming wu: > > > > > Hello, > > > > > I had succ

Re: directing logs to remote syslog with any local syslog instance

2017-10-31 Thread zhong ming wu
On Mon, Oct 30, 2017 at 8:45 AM, Wietse Venema wrote: > Wietse Venema: > > zhong ming wu: > > > Hello, > > > I had successfully used postfix for years and now I am trying to > recreate > > > postfix clusters in docker and in particular interested in how I c

directing logs to remote syslog with any local syslog instance

2017-10-29 Thread zhong ming wu
Hello, I had successfully used postfix for years and now I am trying to recreate postfix clusters in docker and in particular interested in how I can direct all postfix logs from a container to other places. I do not find in postfix configuration how one can achieve this without any local syslog d

Re: Require TLS and authentication with Postfix + Dovecot

2010-11-21 Thread zhong ming wu
On Sun, Nov 21, 2010 at 9:41 PM, chris guirl wrote: > Hi, > > I've setup a Postfix server to handle SMTP for a few domains on my > local network. I don't want to rely on clients to "do the right thing" > and trust them to enable encryption and authentication on their own. > So, I'd like to disable

Re: how to direct local mail on secondary back up mx server

2010-11-19 Thread zhong ming wu
On Fri, Nov 19, 2010 at 9:25 PM, zhong ming wu wrote: > Hello > On backup server, postconf -n > > alias_maps = > inet_interfaces = 9.8.7.6 > mynetworks = 127.0.0.0/8 > myorigin = example.com Please igore my post as I've figure it out. Sorry for the noise.

how to direct local mail on secondary back up mx server

2010-11-19 Thread zhong ming wu
Hello Following online documentation I have properly set up a secondary back up mx server (for domain example.com) which relay email properly to primary. But there is a problem with how to have mails generated automatically such as mails from cron delivered to fully qualified example.com addresse

Re: Active Directory and virtual delivery agent

2010-08-16 Thread zhong ming wu
On Fri, Aug 13, 2010 at 9:18 AM, Aaron Roberts wrote: > Hi, >        I'm looking for a bit of inspiration... > > I have a number of linux boxes using winbind to provide UNIX system users > from a Win2008R2 Active Directory domain.  I'm using winbind's RID idmap > backend thing to provide consist

Re: set a catch-all for users that not exists in database

2010-07-01 Thread zhong ming wu
On Wed, Jun 30, 2010 at 9:39 AM, David Touzeau wrote: > Dear > > I would like to redirect messages that recipient are not listed in aliases > to a single mailbox > > have set > > virtual_alias_maps=hash:/etc/postfix/virtual > > use...@domain.tld use...@domain.tld > use...@domain.tld use...@domain.

Re: TLS Client certificate expiry?

2010-05-16 Thread zhong ming wu
On Sun, May 16, 2010 at 6:03 AM, Hadmut Danisch wrote: > On 16.05.2010 01:24, zhong ming wu wrote: >> On Sat, May 15, 2010 at 6:52 PM, Hadmut Danisch wrote: >>> I am running a postfix server which allows relaying and using particular >>> sender domains for some peo

Re: How to compile postfix with dovecot and sasl support

2010-05-13 Thread zhong ming wu
2010/5/12 Wilberth Pérez : > > make makefiles CCARGS=" -DHAS_SSL -DUSE_SASL_AUTH > -I/usr/local/ssl/include -I/usr/local/include/sasl > -I/usr/local/BerkeleyDB/include" AUXLIBS="-L/usr/local/lib > -L/usr/local/ssl/lib -L/usr/local/lib/sasl -L/usr/local/BerkeleyDB/lib > -lssl -lcrypto -lsasl -ldb"

Re: crl support?

2010-04-16 Thread zhong ming wu
On Thu, Apr 15, 2010 at 11:52 PM, Victor Duchovni wrote: > On Thu, Apr 15, 2010 at 07:16:58PM -0400, zhong ming wu wrote: > >> I don't find anywhere in TLS documentation how to make postfix respect a crl >> so that client's whose certs have been revoked cannot u

crl support?

2010-04-15 Thread zhong ming wu
Dear List I don't find anywhere in TLS documentation how to make postfix respect a crl so that client's whose certs have been revoked cannot use the submission server. Can someone please confirm that this feature is supported or not? Thanks

Re: master.cf override main.cf parameters exception list?

2010-03-19 Thread zhong ming wu
On Thu, Mar 18, 2010 at 7:16 PM, /dev/rob0 wrote: > On Thu, Mar 18, 2010 at 06:12:32PM -0400, zhong ming wu wrote: > > "Personalities" is not a valid concept here, but I think my guess > might point you in the right direction. > This is the terminology used in master

master.cf override main.cf parameters exception list?

2010-03-18 Thread zhong ming wu
Hi List I find that not all parameters in main.cf can be overridden in master.cf with -o. So far I find that for example header_check , smtpd_data_restrictions, and inet_interfaces cannot be overridden in master.cf Is there a list of such parameters documented somewhere? I am using three differe

Re: client certificate handling with TLS + sasl

2010-02-25 Thread zhong ming wu
On Thu, Feb 25, 2010 at 12:48 AM, Victor Duchovni wrote: > Postfix does not implement the "external" SASL mechanism for > authenticating users via TLS client certs. So it sends user/password to dovecot socket and get yes/no answer? > > TLS is hop-by-hop, not end to end. With TLS the client auth

client certificate handling with TLS + sasl

2010-02-24 Thread zhong ming wu
Dear List I am using dovecot sasl with postfix smtp-auth. I also use tls with both dovecot imap/pop server to retrieve mails and also tls with postfix for submission to the relay server. With dovecot I can have my mail client send a certificate and make dovecote use CN field of the cert as usern

Re: allow mail delivery during sasl server downtime?

2010-02-20 Thread zhong ming wu
> > The solution: > > 1) Do not enable SASL authentication on port 25. This is >   used for mail from the Internet. > > 2) Enable SASL authentication on the submission port. This is >   used for user mail clients. An example submission service is >   commented out in the default master.cf file. > >

allow mail delivery during sasl server downtime?

2010-02-20 Thread zhong ming wu
Dear List Last time I have configured postfix was many years ago with version 2.3. Now I wish to upgrade to 2.7 and also change configuration by adding dovecot sasl authentication. It is working as expected. Public can deliver mail to my domain without authentication. authenticated users can