Re: Postfix on a system with RBAC/grsecurity

2015-08-25 Thread Wietse Venema
Thomas Keller: > I understand that this is done by the resolver library and not Postfix. > But since we are already talking here about this, can you perhaps see > what is happening ? You can watch some of its activity with the strace command. See http://www.postfix.org/DEBUG_README.html#auto_trace

Re: Postfix on a system with RBAC/grsecurity

2015-08-25 Thread Thomas Keller
On 2015-08-23 15:40, Wietse Venema wrote: > > The resolver(3) system library uses connected UDP sockets. Other > system library functions introduce their own system calls. Even if > you think you have discovered all "normal" behavior, you can expect > random failures, because the normal behavior d

Re: Postfix on a system with RBAC/grsecurity

2015-08-23 Thread Wietse Venema
Thomas Keller: > The only remote connections allowed are to udp port 53. Now RBAC is > logging following error messages: > > postfix:U:/usr/lib/postfix/smtpd denied connect() to 74.208.4.197 port > 0 sock type dgram protocol udp The resolver(3) system library uses connected UDP sockets. Other s

Re: Postfix on a system with RBAC/grsecurity

2015-08-23 Thread Viktor Dukhovni
On Sun, Aug 23, 2015 at 02:51:08PM +0200, Thomas Keller wrote: > subject /usr/lib/postfix/smtpd o { > / h > /etc/ h > /etc/gai.conf r > /etc/host.conf r > /etc/hosts

Postfix on a system with RBAC/grsecurity

2015-08-23 Thread Thomas Keller
Hello, This is a rather specific question, but I could not think of a better place to ask than this list. I am running Postfix on a system with RBAC/grsecurity. In RBAC, every Postfix process (subject) has its rules, for files which it can read/write, ports to open, etc For example, /usr/lib