Re: Postfix 2.11.0 stable release available

2014-01-16 Thread li...@rhsoft.net
Am 16.01.2014 22:59, schrieb Viktor Dukhovni> On Thu, Jan 16, 2014 at 10:35:12PM +0100, li...@rhsoft.net wrote: > >>> There is no code in Postfix 2.11 that adds smtpd_relay_restrictions >>> to main.cf >> >> it's the same code which added the safety-net in 2.10 >> "postfix upgrade-configuration

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread Viktor Dukhovni
On Thu, Jan 16, 2014 at 10:35:12PM +0100, li...@rhsoft.net wrote: > > There is no code in Postfix 2.11 that adds smtpd_relay_restrictions > > to main.cf > > it's the same code which added the safety-net in 2.10 > "postfix upgrade-configuration" That "same code" is commented out in the Postfix 2.

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread li...@rhsoft.net
Am 16.01.2014 22:51, schrieb Wietse Venema: > li...@rhsoft.net: >>> There is no code in Postfix 2.11 that adds smtpd_relay_restrictions >>> to main.cf >> >> it's the same code which added the safety-net in 2.10 >> "postfix upgrade-configuration" > > That safety net is commented out in Postfix 2.11

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread Wietse Venema
li...@rhsoft.net: > > There is no code in Postfix 2.11 that adds smtpd_relay_restrictions > > to main.cf > > it's the same code which added the safety-net in 2.10 > "postfix upgrade-configuration" That safety net is commented out in Postfix 2.11, as I already mentioned. It now looks like this: #

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread li...@rhsoft.net
Am 16.01.2014 22:27, schrieb Wietse Venema: > li...@rhsoft.net: postfix *must not* add the second line at the end of "main.cf" if the first one already exists >>> >>> The only difference is that this Postfix version REPORTS >>> duplicate lines. It was added before Postfix 2.11.0 >> >> *

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread Wietse Venema
li...@rhsoft.net: > >> postfix *must not* add the second line at the end of "main.cf" if > >> the first one already exists > > > > The only difference is that this Postfix version REPORTS > > duplicate lines. It was added before Postfix 2.11.0 > > * i see this only on one machine > * the first li

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread li...@rhsoft.net
Am 16.01.2014 22:04, schrieb Wietse Venema: > li...@rhsoft.net: >> well, i found a clear bug >> >> sendmail: warning: /etc/postfix/main.cf, line 160: overriding earlier entry: >> smtpd_relay_restrictions=permit_mynetworks, permit_sasl_authenticated, >> reject_unauth_destination >> __

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread Wietse Venema
li...@rhsoft.net: > well, i found a clear bug > > sendmail: warning: /etc/postfix/main.cf, line 160: overriding earlier entry: > smtpd_relay_restrictions=permit_mynetworks, permit_sasl_authenticated, > reject_unauth_destination > __ > > cat main.cf | grep smtpd_re

Re: Postfix 2.11.0 stable release available

2014-01-16 Thread li...@rhsoft.net
well, i found a clear bug sendmail: warning: /etc/postfix/main.cf, line 160: overriding earlier entry: smtpd_relay_restrictions=permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination __ cat main.cf | grep smtpd_relay_restrictions smtpd_relay_restr

Re: Possibly OT? Re: Postfix 2.11.0 stable release available

2014-01-16 Thread Viktor Dukhovni
On Thu, Jan 16, 2014 at 06:40:49AM -0700, LuKreme wrote: > On 15 Jan 2014, at 22:52 , Viktor Dukhovni wrote: > > > IMPORTANT DISCLAIMER: If you want to try DANE security in the > > Postfix SMTP client, you MUST ensure that /etc/resolv.conf contains > > only "127.0.0.1" and/or "::1" as nameserver

Possibly OT? Re: Postfix 2.11.0 stable release available

2014-01-16 Thread LuKreme
On 15 Jan 2014, at 22:52 , Viktor Dukhovni wrote: > IMPORTANT DISCLAIMER: If you want to try DANE security in the > Postfix SMTP client, you MUST ensure that /etc/resolv.conf contains > only "127.0.0.1" and/or "::1" as nameserver entries. Is this normal? I was told, back in the previous millenni

Re: Postfix 2.11.0 stable release available

2014-01-15 Thread Viktor Dukhovni
On Wed, Jan 15, 2014 at 08:15:48PM -0500, Wietse Venema wrote: > The main changes in no particular order are: > > * Support for PKI-less TLS server certificate verification with > DANE (DNS-based Authentication of Named Entities) where the CA > public key or the server certificate is id

Re: Postfix 2.11.0 stable release available

2014-01-15 Thread Quanah Gibson-Mount
--On Wednesday, January 15, 2014 8:15 PM -0500 Wietse Venema wrote: [An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-2.11.0.html] Postfix stable release 2.11.0 is available. This release ends support for Postfix 2.7. Excellent news,

Postfix 2.11.0 stable release available

2014-01-15 Thread Wietse Venema
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-2.11.0.html] Postfix stable release 2.11.0 is available. This release ends support for Postfix 2.7. The main changes in no particular order are: * Support for PKI-less TLS server certific