[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-25 Thread Viktor Dukhovni via Postfix-users
On Mon, Mar 25, 2024 at 09:24:23AM +0100, Alexander Leidinger wrote: > thought-chain could be: > IF there is no MITM, and IF the session is encrypted, then at least use good > encrpytion so that an attacker which is only able to listen, is not able to > get the content. But, in that case, the vas

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-25 Thread Alexander Leidinger via Postfix-users
Am 2024-03-23 17:17, schrieb Viktor Dukhovni via Postfix-users: PS: As of January 2024, the German BSI has tighten its recommendation for asymmetric algorithms over finite fields to at least 3000 bits (i.e. RSA encryption, RSA signatures and FFDH). With little thought about the opportunistic TL

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-25 Thread Alexander Leidinger via Postfix-users
Am 2024-03-23 15:58, schrieb Matthias Nagel via Postfix-users: I wonder whether setting `smtpd_tls_dh1024_param_file` to a custom 2048-bit DH group would help? But from my understanding of the docs that should not be necessary as Postfix 3.8.5 uses a built-in 2048bit group if left empty. Pos

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-23 Thread Viktor Dukhovni via Postfix-users
On Sat, Mar 23, 2024 at 03:58:15PM +0100, Matthias Nagel via Postfix-users wrote: > So the question still stand, how do I ensure that Postfix uses at > least 2048bit DH, if TLS 1.2 and FFDH have been negotiated? As an SMTP server, Postfix uses a 2048-bit build-in group, or else whatever group yo

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-23 Thread Viktor Dukhovni via Postfix-users
On Sat, Mar 23, 2024 at 12:36:23PM +0100, Matthias Nagel via Postfix-users wrote: > I am currently assessing the TLS security of a Postfix mail server and > among other things sslscan reported that the server allows a (non-EC) > DH exchange with only 1024 bits. The Postfix SMTP server uses whate

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-23 Thread Matthias Nagel via Postfix-users
I am running Postfix mail-mta/postfix-3.8.5 with dev-libs/openssl-3.0.13. If I correctly understood my Postifx server should not use a FF group with 1024 bits, but at least 2024 bits. (References to the docs are given below.) So the question still stand, how do I ensure that Postfix uses at leas

[pfx] Re: How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-23 Thread Bastian Blank via Postfix-users
On Sat, Mar 23, 2024 at 12:36:23PM +0100, Matthias Nagel via Postfix-users wrote: > I am currently assessing the TLS security of a Postfix mail server and among > other things sslscan reported that the server allows a (non-EC) DH exchange > with only 1024 bits. While one solution would be to onl

[pfx] How to set the minimum number of bits for (non-EC) DH key exchange?

2024-03-23 Thread Matthias Nagel via Postfix-users
Hi everyone, I am currently assessing the TLS security of a Postfix mail server and among other things sslscan reported that the server allows a (non-EC) DH exchange with only 1024 bits. While one solution would be to only allow ECDH(E) and disable DH(E) entirely, I would rather like to keep su

Re: How to set up a shadow server

2021-08-18 Thread Wietse Venema
Wietse Venema: > Ron Garret: > > Is there an easy way to tell postfix to send a copy of every message > > it receives to a ?shadow server? in a way that preserves the SMTP > > envelope? I?m trying to tune a spam filter on actual data, but I > > don?t want to do it on my production server because t

Re: How to set up a shadow server

2021-08-18 Thread Wietse Venema
Ron Garret: > Is there an easy way to tell postfix to send a copy of every message > it receives to a ?shadow server? in a way that preserves the SMTP > envelope? I?m trying to tune a spam filter on actual data, but I > don?t want to do it on my production server because the tuning is > likely to

How to set up a shadow server

2021-08-17 Thread Ron Garret
Is there an easy way to tell postfix to send a copy of every message it receives to a “shadow server” in a way that preserves the SMTP envelope? I’m trying to tune a spam filter on actual data, but I don’t want to do it on my production server because the tuning is likely to break things. Than

How to set

2016-01-14 Thread Eric Kom
Good day folk, I ran Postfix with Dovecot as a mailbox for years now. I noticed that, when a sender sent mails, the mailbox received it using the date and time from the sender machine not a server one. Which make the receiver mailbox saving the mails at the wrong time. Please can someone help me if

Re: How to set Postfix to accept all mail on domain and forward mail for accounts not hosted to another MTA

2015-04-22 Thread Viktor Dukhovni
On Wed, Apr 22, 2015 at 06:07:19PM +0800, Daniel Mare wrote: > We have an old Mac OS X mail server that we plan to replace with a new > Zimbra server, but we can't move all mailboxes over in one go, instead, > we plan to route all internet mail to our new Zimbra server, which has > the authoritati

Re: How to set Postfix to accept all mail on domain and forward mail for accounts not hosted to another MTA

2015-04-22 Thread Fernando Maior
Hi Daniel, Here we use another technique. For each user that we transfer from the old server to the new one, I just add a line in transport.cf saying the complete mailbox name for that user and the IP or DNS name of the new server. For example: ferna...@test.com : newserver.test.com Also, it mak

How to set Postfix to accept all mail on domain and forward mail for accounts not hosted to another MTA

2015-04-22 Thread Daniel Mare
We have an old Mac OS X mail server that we plan to replace with a new Zimbra server, but we can't move all mailboxes over in one go, instead, we plan to route all internet mail to our new Zimbra server, which has the authoritative list of all users on the domain and can thus reject non-existent

Re: How to set wild card for rbl_override

2015-03-21 Thread L. D. James
On 03/21/2015 08:53 PM, Noel Jones wrote: On 3/21/2015 7:42 PM, L. D. James wrote: I have a service from intuit.com that can't get past my reject_unknown_helo_hostname configuration. I'm trying to use the rbl_override to whitelist all the subhost of intuit.com. However, I can't get it to work.

Re: How to set wild card for rbl_override

2015-03-21 Thread Noel Jones
On 3/21/2015 7:42 PM, L. D. James wrote: > I have a service from intuit.com that can't get past my > reject_unknown_helo_hostname configuration. I'm trying to use the > rbl_override to whitelist all the subhost of intuit.com. However, I > can't get it to work. Consider if reject_unknown_helo_hos

How to set wild card for rbl_override

2015-03-21 Thread L. D. James
I have a service from intuit.com that can't get past my reject_unknown_helo_hostname configuration. I'm trying to use the rbl_override to whitelist all the subhost of intuit.com. However, I can't get it to work. I have tried: /etc/postfix/rbl_override: intuit.comok .intuit.comok *.

Re: how to set domain alias in postfix+postfixadmin

2012-09-19 Thread Benny Pedersen
Den 2012-09-18 20:54, Leon skrev: Hi, I have running a postfix+mysql+dovecot+postfixadmin+roundcube server and it working well.Now in postfixadmin i set a domain1.com alias to domain2.com and create u...@domain2.com.I think that if someone send a mail to u...@domain1.com,i can receive the mail

how to set domain alias in postfix+postfixadmin

2012-09-18 Thread Leon
Hi, I have running a postfix+mysql+dovecot+postfixadmin+roundcube server and it working well.Now in postfixadmin i set a domain1.com alias to domain2.com and create u...@domain2.com.I think that if someone send a mail to u...@domain1.com,i can receive the mail in u...@domain2.com.but i got

Re: Postfix Bounce Messages Back & How to Set a Reply to address

2012-04-02 Thread Wietse Venema
Steve Ellis: [ Charset windows-1252 unsupported, converting... ] > Hello > > I am relatively new to postfix (great product by the way) & am > struggling with two issues. > > 1. Specifying a different Reply To > 2. Bouncing a message back to external incoming mail > > I have setup postfix as a re

Postfix Bounce Messages Back & How to Set a Reply to address

2012-04-02 Thread Steve Ellis
Hello I am relatively new to postfix (great product by the way) & am struggling with two issues. 1. Specifying a different Reply To 2. Bouncing a message back to external incoming mail I have setup postfix as a relay for our systems to send messages though which then get passed on to a central e

Re: How to set to use only trusted TLS connection to trusted networks?

2012-03-13 Thread Eray Aslan
On 2012-03-13 11:45 AM, Peter Bauer wrote: > Additionally I don't like to pay for a TLS certificate, I would like to > simply import the public key of the SMTP server of my friend into my local > postfix installation (and vice versa for him). > > How can we do that? I found no possibility to add

How to set to use only trusted TLS connection to trusted networks?

2012-03-13 Thread Peter Bauer
Hello, I would like to use only trusted TLS connections to a SMTP server of a friend of mine. If the trusted TLS connections fails, I would like that Postfix abort the sending or reception with appropriate error messages than the sender or receiver will be notified about that mail could not be

Re: How to set Postfix to send bounces to i...@mydomain.com

2011-11-19 Thread Jeroen Geilman
On 2011-11-20 03:06, peng...@sepserver.net wrote: I have three email servers in my zone: mx1.emailsrvr.compriority10 mx2.emailsrvr.compriority20 pinkie.mydomain.compriority80<--- PostFix I want all the Non Delivery Reports from pinkie.mydomain.com to go to i...@mydomain.com which is

How to set Postfix to send bounces to i...@mydomain.com

2011-11-19 Thread penguin
I have three email servers in my zone: mx1.emailsrvr.compriority10 mx2.emailsrvr.compriority20 pinkie.mydomain.compriority80 <--- PostFix I want all the Non Delivery Reports from pinkie.mydomain.com to go to i...@mydomain.com which is a mail account that exists on mx1.emailsrvr.com. D

Re: How to set catchall mailbox to /dev/null or remove at once?

2009-04-08 Thread Benny Pedersen
On Wed, April 8, 2009 05:04, wen.yongzheng wrote: > I can set catchall mailbox in virtual_mailbox_map like this: > @domain.name domain.name/catchall/ > > But I really do not want to check or read the catchall mails, The > only thing I want to do is to remove all mails in catchall maildir. > I wond

Re: How to set catchall mailbox to /dev/null or remove at once?

2009-04-08 Thread wen.yongzheng
Barney Desmond 写道: 2009/4/8 wen.yongzheng : I can set catchall mailbox in virtual_mailbox_map like this: @domain.name domain.name/catchall/ But I really do not want to check or read the catchall mails, The only thing I want to do is to remove all mails in catchall maildir. I wonder if I can

Re: How to set catchall mailbox to /dev/null or remove at once?

2009-04-07 Thread Barney Desmond
2009/4/8 wen.yongzheng : > I can set catchall mailbox in virtual_mailbox_map like this: > @domain.name domain.name/catchall/ > > But I really do not want to check or read the catchall mails, The only > thing I want to do is to remove all mails in catchall maildir. I wonder > if I can set my catchal

RE: How to set catchall mailbox to /dev/null or remove at once?

2009-04-07 Thread MacShane, Tracy
> -Original Message- > From: owner-postfix-us...@postfix.org > [mailto:owner-postfix-us...@postfix.org] On Behalf Of wen.yongzheng > Sent: Wednesday, 8 April 2009 1:04 PM > To: postfix-users@postfix.org > Subject: How to set catchall mailbox to /dev/null or remove a

How to set catchall mailbox to /dev/null or remove at once?

2009-04-07 Thread wen.yongzheng
Hello everybody: I can set catchall mailbox in virtual_mailbox_map like this: @domain.name domain.name/catchall/ But I really do not want to check or read the catchall mails, The only thing I want to do is to remove all mails in catchall maildir. I wonder if I can set my catchall mailbox directly

Re: How to set client_encoding in Postfix -> PostgreSQL lookups

2009-02-06 Thread Victor Duchovni
On Fri, Feb 06, 2009 at 11:49:07AM +0100, Michael Monnerie wrote: > On Donnerstag 05 Februar 2009 Victor Duchovni wrote: > > Configure your Postgres database to use a LATIN-1 encoding. WIth this > > you get a single-byte per character encoding and all byte patterns > > are valid strings. > > The

Re: How to set client_encoding in Postfix -> PostgreSQL lookups

2009-02-06 Thread Michael Monnerie
On Donnerstag 05 Februar 2009 Victor Duchovni wrote: > Configure your Postgres database to use a LATIN-1 encoding. WIth this > you get a single-byte per character encoding and all byte patterns > are valid strings. The problem is IMAP and POP couldn't convert entries to the client's charset of co

Re: How to set client_encoding in Postfix -> PostgreSQL lookups

2009-02-05 Thread Victor Duchovni
On Thu, Feb 05, 2009 at 02:32:59AM +0100, Michael Monnerie wrote: > On Dienstag 20 Januar 2009 Wietse Venema wrote: > > I have a postfix making SQL queries > > > > > to PostgreSQL, and can see from postgresql logs that postfix does > > > set client_encoding to 'LATIN1' > > > How can I change that

Re: How to set client_encoding in Postfix -> PostgreSQL lookups

2009-02-04 Thread Michael Monnerie
On Dienstag 20 Januar 2009 Wietse Venema wrote: > I have a postfix making SQL queries > > > to PostgreSQL, and can see from postgresql logs that postfix does > > set client_encoding to 'LATIN1' > > How can I change that to use UTF8? > > SMTP is an ASCII protocol, and that is likely not to change.

Re: How to set client_encoding in Postfix -> PostgreSQL lookups

2009-01-20 Thread Wietse Venema
Michael Monnerie: > Dear list, I've read > http://www.postfix.org/PGSQL_README.html > but there's no word about encoding. I have a postfix making SQL queries > to PostgreSQL, and can see from postgresql logs that postfix does > set client_encoding to 'LATIN1' > How can I change that to use UTF8?

How to set client_encoding in Postfix -> PostgreSQL lookups

2009-01-19 Thread Michael Monnerie
Dear list, I've read http://www.postfix.org/PGSQL_README.html but there's no word about encoding. I have a postfix making SQL queries to PostgreSQL, and can see from postgresql logs that postfix does set client_encoding to 'LATIN1' How can I change that to use UTF8? mfg zmi -- // Michael Monneri

Re: how to set different send rate to different destination[ip]

2008-12-16 Thread Wietse Venema
You can set different rates for different destinations. For this, you MUST READ the rest of the URLs in my response. - specify a different (master.cf) transport for rate limited destinations. - specify (main.cf) mumble_destination_rate_delay values in main.cf. - specify a (main.cf) transport map

how to set different send rate to different destination[ip]

2008-12-16 Thread tony liu
As kindly suggested, I set /etc/postfix/main.cf: smtp_destination_rate_delay = 2 , It does work. but Is it possible to give different sending rates for different destination[ip], ex, for hotmail 30mails/minute, but for Gmail, 60 mails/minute etc. Thanks in advance. Tony. -邮件原件- 发件人: