Re: non-alpha HELO

2009-03-15 Thread Noel Jones
LuKreme wrote: Authentication is another matter, but as I recall, that is outside postfix purview and I need to go dink with cyrus-sasl-saslauthd for that. Mar 15 12:54:40 mail submit/smtpd[7403]: Anonymous TLS connection established from c-67-164-162-51.hsd1.co.comcast.net[67.164.162.51]: TL

Re: non-alpha HELO

2009-03-15 Thread LuKreme
On 14-Mar-2009, at 22:53, Noel Jones wrote: But you should really be testing with telnet and openssl s_client before you start testing with a MUA. Yep. Like I said this was just a "let's see what we get in the logs" little test. Mucking about some more with it, TLS at least is working now

Re: non-alpha HELO

2009-03-14 Thread Noel Jones
LuKreme wrote: On 14-Mar-2009, at 13:02, mouss wrote: test the connection manually: $ telnet yourserv 587 ... EHLO yourclienthostname ... QUIT Right, I do know that. Sorry if I wasn't clear, my only point was that what was actaully logged under submit was not useful and expressing disappoi

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 14-Mar-2009, at 13:02, mouss wrote: test the connection manually: $ telnet yourserv 587 ... EHLO yourclienthostname ... QUIT Right, I do know that. Sorry if I wasn't clear, my only point was that what was actaully logged under submit was not useful and expressing disappointment that th

Re: non-alpha HELO

2009-03-14 Thread mouss
LuKreme a écrit : > On 13-Mar-2009, at 14:51, Jorey Bump wrote: >> submission inet n - n - - smtpd >> -o smtpd_tls_security_level=encrypt >> -o smtpd_sasl_auth_enable=yes >> -o smtpd_client_restrictions=permit_sasl_authenticated,reject > > Yeah, once I get TLS setup.

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 14-Mar-2009, at 11:05, Jorey Bump wrote: LuKreme wrote, at 03/14/2009 12:19 PM: submit/smtpd[32686]: connect from c-67-164-162-51.hsd1.co.comcast.net[67.164.162.51] submit/smtpd[32686]: lost connection after EHLO from c-67-164-162-51.hsd1.co.comcast.net[67.164.162.51] submit/smtpd[32686]: dis

Re: non-alpha HELO

2009-03-14 Thread Sahil Tandon
On Mar 14, 2009, at 12:20 PM, LuKreme wrote: On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I g

Re: non-alpha HELO

2009-03-14 Thread Jorey Bump
LuKreme wrote, at 03/14/2009 12:19 PM: > On 13-Mar-2009, at 14:51, Jorey Bump wrote: >> submission inet n - n - - smtpd >> -o smtpd_tls_security_level=encrypt >> -o smtpd_sasl_auth_enable=yes >> -o smtpd_client_restrictions=permit_sasl_authenticated,reject > > Yeah, o

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get TLS setup. I am running 2.5.6. I did chang

Re: non-alpha HELO

2009-03-14 Thread LuKreme
On 13-Mar-2009, at 14:51, Jorey Bump wrote: submission inet n - n - - smtpd -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject Yeah, once I get TLS setup. I am running 2.5.6. I did chang

Re: non-alpha HELO

2009-03-13 Thread Jorey Bump
Sahil Tandon wrote, at 03/13/2009 08:36 PM: > Jorey Bump wrote: >> LuKreme wrote, at 03/13/2009 04:26 PM: >>> On 13-Mar-2009, at 10:49, Bill Cole wrote: >>> If you have a good port 587 config in master.cf, you may need no changes there. My submission entry for a server that accepts no por

Re: non-alpha HELO

2009-03-13 Thread Sahil Tandon
Jorey Bump wrote: LuKreme wrote, at 03/13/2009 04:26 PM: On 13-Mar-2009, at 10:49, Bill Cole wrote: If you have a good port 587 config in master.cf, you may need no changes there. My submission entry for a server that accepts no port 25 submission from outside the LAN is: submissioninet

Re: non-alpha HELO

2009-03-13 Thread mouss
LuKreme a écrit : > I have the following helo restriction in a pcre file: > > !/[[:alpha:]]/REJECT helo non-alpha helo not allowed > > I ran it with WARN for quite a while and didn't see any legitimate > messages that hit it, so I moved it to REJECT. However, my mailserver >

Re: non-alpha HELO

2009-03-13 Thread Jorey Bump
LuKreme wrote, at 03/13/2009 04:26 PM: > On 13-Mar-2009, at 10:49, Bill Cole wrote: > >> If you have a good port 587 config in master.cf, you may need no >> changes there. My submission entry for a server that accepts no port >> 25 submission from outside the LAN is: >> >> submissioninetn

Re: non-alpha HELO

2009-03-13 Thread LuKreme
On 13-Mar-2009, at 10:49, Bill Cole wrote: Hi Bill! Postfix is a little more complicated than SIMS, isn't it :) If you have a good port 587 config in master.cf, you may need no changes there. My submission entry for a server that accepts no port 25 submission from outside the LAN is: subm

Re: non-alpha HELO

2009-03-13 Thread Bill Cole
LuKreme wrote, On 3/13/09 11:53 AM: On 13-Mar-2009, at 09:04, Jorey Bump wrote: For the people still supporting the antiquated model of accepting mail submission via SMTP rather than a proper port 587 daemon, it is important to make allowances for the fact that MUA's frequently have no better c

Re: non-alpha HELO

2009-03-13 Thread Noel Jones
LuKreme wrote: On 13-Mar-2009, at 09:04, Jorey Bump wrote: For the people still supporting the antiquated model of accepting mail submission via SMTP rather than a proper port 587 daemon, it is important to make allowances for the fact that MUA's frequently have no better choice for their HELO

Re: non-alpha HELO

2009-03-13 Thread Jorey Bump
LuKreme wrote, at 03/13/2009 11:53 AM: > On 13-Mar-2009, at 09:04, Jorey Bump wrote: >>> For the people still supporting the antiquated model of accepting mail >>> submission via SMTP rather than a proper port 587 daemon, it is >>> important to make allowances for the fact that MUA's frequently ha

Re: non-alpha HELO

2009-03-13 Thread LuKreme
On 13-Mar-2009, at 09:04, Jorey Bump wrote: For the people still supporting the antiquated model of accepting mail submission via SMTP rather than a proper port 587 daemon, it is important to make allowances for the fact that MUA's frequently have no better choice for their HELO argument tha

Re: non-alpha HELO

2009-03-13 Thread Jorey Bump
Bill Cole wrote, at 03/13/2009 10:23 AM: > Jorey Bump wrote, On 3/13/09 8:51 AM: >> LuKreme wrote, at 03/13/2009 07:22 AM: >> >>> So I thought I'd see if anyone else thought that a helo in the form >>> [12.34.56.789] SHOULD be allowed. I mean, as far as I recall, this is >>> still technically allow

Re: non-alpha HELO

2009-03-13 Thread Bill Cole
Jorey Bump wrote, On 3/13/09 8:51 AM: LuKreme wrote, at 03/13/2009 07:22 AM: So I thought I'd see if anyone else thought that a helo in the form [12.34.56.789] SHOULD be allowed. I mean, as far as I recall, this is still technically allowed, right? A bracketed IP address is valid in a HELO/EH

Re: non-alpha HELO

2009-03-13 Thread Jorey Bump
LuKreme wrote, at 03/13/2009 07:22 AM: > So I thought I'd see if anyone else thought that a helo in the form > [12.34.56.789] SHOULD be allowed. I mean, as far as I recall, this is > still technically allowed, right? A bracketed IP address is valid in a HELO/EHLO, but is so rare in legitimate mai