Re: postfix issue with ecc certificates

2018-08-04 Thread David Mehler
Hi, Thanks, that has done it. Thanks. Dave. On 8/4/18, Viktor Dukhovni wrote: > > >> On Aug 4, 2018, at 11:15 AM, David Mehler wrote: >> >> Sorry, the parameter is smtpd_tls_eecdh_grade it was set to ultra I >> set it to strong. I don't know if that's what did it but clients can >> now send.

Re: postfix issue with ecc certificates

2018-08-04 Thread Viktor Dukhovni
> On Aug 4, 2018, at 11:15 AM, David Mehler wrote: > > Sorry, the parameter is smtpd_tls_eecdh_grade it was set to ultra I > set it to strong. I don't know if that's what did it but clients can > now send. With recent Postfix releases, and OpenSSL >= 1.0.2, the best setting for this parameter

Re: postfix issue with ecc certificates

2018-08-04 Thread David Mehler
Hi, Sorry, the parameter is smtpd_tls_eecdh_grade it was set to ultra I set it to strong. I don't know if that's what did it but clients can now send. If I'm getting what I'm reading ultra refers to p-384 bit ecc curves, while strong is p-256, that's what I've got. Thanks. Dave. On 8/4/18, Wie

Re: postfix issue with ecc certificates

2018-08-04 Thread Wietse Venema
David Mehler: > Hello, > > Thanks Wietse and Victor, > > I commented out the smtp* lines and didn't fix it. What I then did was > changed my ecc_grade from ultra to strong. Does this sound like the > solution? $ postconf|grep ecc_grade [empty output]

Re: postfix issue with ecc certificates

2018-08-04 Thread David Mehler
Hello, Thanks Wietse and Victor, I commented out the smtp* lines and didn't fix it. What I then did was changed my ecc_grade from ultra to strong. Does this sound like the solution? Thanks. Dave. On 8/3/18, Viktor Dukhovni wrote: > > >> On Aug 3, 2018, at 6:09 PM, David Mehler wrote: >> >> s

Re: postfix issue with ecc certificates

2018-08-03 Thread Viktor Dukhovni
> On Aug 3, 2018, at 6:09 PM, David Mehler wrote: > > smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1 !TLSv1.1 TLSv1.2 > smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1 !TLSv1.1 TLSv1.2 This does not leave too many working options... :-) -- Viktor.

Re: postfix issue with ecc certificates

2018-08-03 Thread Wietse Venema
David Mehler: > Aug 3 17:22:27 hostname postfix/submission/smtpd[65716]: warning: TLS > library problem: error:1408A0C1:SSL routines:ssl3_get_client_hello:no > shared cipher:s3_srvr.c:1427: ... > smtp_tls_mandatory_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, > MD5, PSK, aECDH, EDH-DSS-DES-CB

Re: Postfix Issue

2012-07-23 Thread Ansgar Wiechers
On 2012-07-23 Marius Lewies wrote: > Referring to Ansgar reply it seems that relay_domains.db is out of > date. Ansgar suggested " You need to run the command to convert the > (plain text) map into the database file that Postfix uses" How to do > or else, where can I find the instruction to do

Re: Postfix Issue

2012-07-23 Thread Reindl Harald
day, July 23, 2012 4:15 PM > To: Marius Lewies; Ansgar Wiechers; postfix-users@postfix.org > Subject: RE: Postfix Issue > > >> -Original Message- >> From: Marius Lewies [mailto:mariu...@verpakt.com] >> Sent: 23 July 2012 15:03 >> To: James Day; Ansgar Wi

RE: Postfix Issue

2012-07-23 Thread Marius Lewies
-Original Message- From: James Day [mailto:james@ontraq.com] Sent: Monday, July 23, 2012 4:15 PM To: Marius Lewies; Ansgar Wiechers; postfix-users@postfix.org Subject: RE: Postfix Issue > -Original Message- > From: Marius Lewies [mailto:mariu...@verpakt.com] > Sent

RE: Postfix Issue

2012-07-23 Thread James Day
> -Original Message- > From: Marius Lewies [mailto:mariu...@verpakt.com] > Sent: 23 July 2012 15:03 > To: James Day; Ansgar Wiechers; postfix-users@postfix.org > Subject: RE: Postfix Issue > > > > -Original Message- > From: James Day [mailto:james.

Re: Postfix Issue

2012-07-23 Thread Reindl Harald
Am 23.07.2012 16:03, schrieb Marius Lewies: please strip qutoings a little bit! > Referring to Ansgar reply it seems that relay_domains.db is out of > date. Ansgar suggested " You need to run the command to convert the > (plain text) map into the database file that Postfix uses" How to do or

RE: Postfix Issue

2012-07-23 Thread Marius Lewies
-Original Message- From: James Day [mailto:james@ontraq.com] Sent: Monday, July 23, 2012 3:45 PM To: Marius Lewies; Ansgar Wiechers; postfix-users@postfix.org Subject: RE: Postfix Issue > -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-p

RE: Postfix Issue

2012-07-23 Thread James Day
> -Original Message- > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Marius Lewies > Sent: 23 July 2012 14:32 > To: Ansgar Wiechers; postfix-users@postfix.org > Subject: RE: Postfix Issue > > Nor did I think I am.

RE: Postfix Issue

2012-07-23 Thread Marius Lewies
Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Ansgar Wiechers Sent: Monday, July 23, 2012 2:39 PM To: postfix-users@postfix.org Subject: Re: Postfix Issue Please keep this on-list. You're neither family, nor personal friend, nor p

Re: Postfix Issue

2012-07-23 Thread Ansgar Wiechers
Please keep this on-list. You're neither family, nor personal friend, nor paying customer, so you're not entitled to personal support. On 2012-07-23 Marius Lewies wrote: > Did you postmap all_ad_recipients after adding the recipient address? > = Yes did run a ./getadusers and verified that address

Re: Postfix Issue

2012-07-23 Thread Jerry
On Mon, 23 Jul 2012 12:19:18 +0200 Marius Lewies articulated: > I am new to Postfix and have taken over the admin thereof. >   > We have a situation where a certain email address get  the following > error.  All other mail gets relayed. > SMTP error from remote mail server after RCPT > TO:: host

Re: Postfix Issue

2012-07-23 Thread Ansgar Wiechers
On 2012-07-23 Marius Lewies wrote: > We have a situation where a certain email address get the following > error. All other mail gets relayed. > > SMTP error from remote mail server after RCPT > TO:: > host maila.vegaspartnerlounge.dk [196.14.16.67]: > 554 5.7.1 : Relay access denied > > Below