Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
Oops! I forgot to check SSL. My client now seems to start a TLS session and still nothing. Here is the log with the SSL error. Thanks. Jan 2 13:02:11 fedora postfix/smtpd[20531]: connection established Jan 2 13:02:11 fedora postfix/smtpd[20531]: master_notify: status 0 Jan 2 13:02:11 fedora p

Re: Is split cleanup really needed?

2010-01-02 Thread mouss
Shaun T. Erickson a écrit : > I'm rebuilding my postfix installation from scratch. In the past, I've > split cleanup in two, to prevent address rewriting until after > filtering: > > pre-cleanup unix n - n - 0 cleanup > -o virtual_alias_maps= > -o canonical_map

Re: reason for having localhost.$mydomain, etc. in mydestination

2010-01-02 Thread mouss
Philippe Cerfon a écrit : > Hi. > > The default for mydestination = ${myhostname}, localhost.${mydomain}, > localhost > Why does it contain localhost.${mydomain}? in the default setup, @localhost gets "completed" as @localhost.$mydomain (See append_at_mydomain). Putting both localhost and localh

Re: Broken web link

2010-01-02 Thread mouss
Daniel V. Reinhardt a écrit : > [snip] > > Both links work fine for me, the first one is a shell script which is full of > text that you copy to or save link as to a directory. The second is the > download able compressed versions I imagine. > > How are you accessing the links? > > doesn'

Re: Is split cleanup really needed?

2010-01-02 Thread Shaun T. Erickson
Thanks. Further digging shows that my current setup was as described in http://www.ijs.si/software/amavisd/README.postfix.old (which wasn't old when I first started using it, heh). I see that it has been supplanted by (the now 2-3 year old) http://www.ijs.si/software/amavisd/README.postfix.html whi

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > Oops! I forgot to check SSL. > My client now seems to start a TLS session and still nothing. Here is the > log with the SSL error. TLS log. My favourite waste of time. Everything is layed out so clear... :/ There are two lines in your log that make me think (think, not know!) that

Re: Broken web link

2010-01-02 Thread Patrick Ben Koetter
* mouss : > Daniel V. Reinhardt a écrit : > > [snip] > > > > Both links work fine for me, the first one is a shell script which is full > > of text that you copy to or save link as to a directory. The second is > > the download able compressed versions I imagine. > > > > How are you accessing

Re: Broken web link

2010-01-02 Thread Patrick Ben Koetter
* Patrick Ben Koetter : > > $ wget http://ftp.wl0.org/SOURCES/postfinger > > --2010-01-02 20:10:37-- http://ftp.wl0.org/SOURCES/postfinger > > Resolving ftp.wl0.org... 141.42.206.35 > > Connecting to ftp.wl0.org|141.42.206.35|:80... connected. > > HTTP request sent, awaiting response... 403 Forbid

PATCH: bogus Berkeley DB warnings (was: smtpd crashes)

2010-01-02 Thread Wietse Venema
Ralf Hildebrandt: [ Charset UTF-8 unsupported, converting... ] > * Wietse Venema : > > >Jan 1 20:19:41 mail-ausfall postfix/verify[26329]: fatal: close database > > >/var/lib/postfix/verify.db: No such file or directory > > > > Does not reproduce on Ubuntu 9.10-server with the default Berkeley D

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
Ah you so were right. I set up postfix to use the certs that cyrus-imapd creates by default and everything works now. What's weird is that cyrus-imapd was using the same certs postfix was using and it didn't complain. I was able to receive email when I turned off TSL for postfix. So I guess the pro

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > Ah you so were right. > I set up postfix to use the certs that cyrus-imapd creates by default and > everything works now. > What's weird is that cyrus-imapd was using the same certs postfix was using > and it didn't complain. I was able to receive email when I turned off TSL > for p

Re: How to ensure that either FROM or TO is local

2010-01-02 Thread Serge Fonville
>>> Postfix, by default, only queues mail that is destined for that system >>> (mydestination or virtual settings), included in mynetworks, or listed >>> in relay_domains >>> This only changes if *you* tell Postfix not to. The config below does >>> not show any such weakness. >> Hmmm, so basically

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
What should I use keylength and digest when creating both the CA cert and the smtpd cert? Should I leave the passwords blank? Thanks On Sat, Jan 2, 2010 at 6:04 PM, Patrick Ben Koetter wrote: > * froinds J : > > Ah you so were right. > > I set up postfix to use the certs that cyrus-imapd creates

master.cf - integrating Postfix with DKIM proxy

2010-01-02 Thread Michael
In reference to the following page: http://dkimproxy.sourceforge.net/postfix-outbound-howto.html it includes the following: submission inet n - n - - smtpd -o smtpd_etrn_restrictions=reject -o smtpd_sasl_auth_enable=yes -o content_filter=dksign:[127.0.0.1]

Re: PATCH: bogus Berkeley DB warnings (was: smtpd crashes)

2010-01-02 Thread Wietse Venema
Wietse Venema: > Ralf Hildebrandt: > > * Wietse Venema : > > > >Jan 1 20:19:41 mail-ausfall postfix/verify[26329]: fatal: close > > > >database /var/lib/postfix/verify.db: No such file or directory > > > > > > Does not reproduce on Ubuntu 9.10-server with the default Berkeley DB 4.7. > > > > >

Quotes with Dovecot+Ldap

2010-01-02 Thread Alejandro Esteban Galvez
Hi! I have a Postfix+Dovecot+Ldap system, and this work is OK, but I need to run the quotes user using dovecot+ldap system. Any reply or idea for here? -- Infomed - Red de Salud de Cuba http://www.sld.cu/ -- Este mensaje le ha llegado mediante el servicio de correo

Re: Quotes with Dovecot+Ldap

2010-01-02 Thread Wietse Venema
Alejandro Esteban Galvez: > Hi! I have a Postfix+Dovecot+Ldap system, and this work is OK, > but I need to run the quotes user using dovecot+ldap system. Any > reply or idea for here? Perhaps you mean quotas? Wietse

Re: Quotes with Dovecot+Ldap

2010-01-02 Thread Alejandro Esteban Galvez
quotas ok Mensaje citado por Wietse Venema : --- Alejandro Esteban Galvez: --- > Hi! I have a Postfix+Dovecot+Ldap system, and this work is OK, --- > but I need to run the quotes user using dovecot+ldap system. Any --- > reply or idea for here? --- --- Perhaps you mean quotas? --- --- Wietse

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
On Sat, Jan 2, 2010 at 2:26 AM, Patrick Ben Koetter wrote: > * froinds J : > > Hello, > > I'm having a problem with postfix in F12. > > I used to have my email server setup with F10. My setup had TLS > > enabled (self signed certs) with SASL using pwcheck_method=auxprop and > > CRAM-MD5 DIGEST-MD

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > My problem is: if I allow TLS I cannot authenticate. Without TLS everything > works. Here is the output from saslfinger. > Thanks for your help. > > saslfinger - postfix Cyrus sasl configuration Sat Jan 2 02:12:49 EST 2010 > version: 1.0.2 > mode: server-side SMTP AUTH > > -

smtpd crashes

2010-01-02 Thread Ralf Hildebrandt
Today I found: Dec 31 20:05:54 mail-ausfall kernel: [876822.781710] smtpd[27410] general protection ip:80813d8 sp:bf9c2d68 error:0 in smtpd[8048000+53000] Jan 1 21:22:23 mail-ausfall kernel: [967812.555067] smtpd[1590] general protection ip:80813d8 sp:bfbebe28 error:0 in smtpd[8048000+53000] Ja

Re: smtpd crashes

2010-01-02 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > I updated to postfix-2.7-20100101 these minutes; maybe something > changes. postfix-2.7-20091228-nonprod was the old version that caused all the logentries. -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benj

Re: Broken web link

2010-01-02 Thread Markus Schönhaber
01.01.2010 16:55, Ralf Hildebrandt: > * Jerry : >> On this URL: http://www.postfix.com/DEBUG_README.html, this link: >> http://ftp.wl0.org/SOURCES/postfinger results in this error message: >> >> Forbidden > I fixed it. http://ftp.wl0.org/SOURCES/postfinger still gives me a 403. http://ftp.wl0.o

Re: Broken web link

2010-01-02 Thread Jerry
On Sat, 02 Jan 2010 13:34:44 +0100 Markus Schönhaber replied: >01.01.2010 16:55, Ralf Hildebrandt: > >> * Jerry : >>> On this URL: http://www.postfix.com/DEBUG_README.html, this link: >>> http://ftp.wl0.org/SOURCES/postfinger results in this error message: >>> >>> Forbidden > >> I fixed it. > >ht

Re: Broken web link

2010-01-02 Thread Mehul Ved
On Sat, Jan 2, 2010 at 6:25 PM, Jerry wrote: >>http://ftp.wl0.org/SOURCES/postfinger >>still gives me a 403. 403 for me too >>http://ftp.wl0.org/postfinger >>does work, though. works

Re: smtpd crashes

2010-01-02 Thread Wietse Venema
Ralf Hildebrandt: > * Ralf Hildebrandt : > > > I updated to postfix-2.7-20100101 these minutes; maybe something > > changes. > > postfix-2.7-20091228-nonprod was the old version that caused all the > logentries. Introduced 20091227, fixed 20091230 (dangling pointer in event manager). Sometimes

Re: smtpd crashes

2010-01-02 Thread Len Conrad
>Dec 31 20:05:54 mail-ausfall kernel: [876822.781710] smtpd[27410] general >protection ip:80813d8 sp:bf9c2d68 error:0 in smtpd[8048000+53000] ...I have none of these. >Jan 1 20:19:41 mail-ausfall postfix/verify[26329]: fatal: close database >/var/lib/postfix/verify.db: No such file or directo

Re: smtpd crashes

2010-01-02 Thread Wietse Venema
Len Conrad: > > >Dec 31 20:05:54 mail-ausfall kernel: [876822.781710] smtpd[27410] general > >protection ip:80813d8 sp:bf9c2d68 error:0 in smtpd[8048000+53000] > > ...I have none of these. > > >Jan 1 20:19:41 mail-ausfall postfix/verify[26329]: fatal: close database > >/var/lib/postfix/verify

smtp_sasl_auth_enable?

2010-01-02 Thread john
I understand that setting "smtp_sasl_auth_enable" to yes, enables sasl authentication in the SMTP client, but does it make it mandatory. If I do not have an entry in the sasl password list for a particular smarthost/relay will I have a problem. TIA JLA

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
I made the changes you suggested and still can't authenticate. Here is the log from maillog. Thanks Jan 2 10:14:41 fedora postfix/smtpd[17435]: connection established Jan 2 10:14:41 fedora postfix/smtpd[17435]: master_notify: status 0 Jan 2 10:14:41 fedora postfix/smtpd[17435]: name_mask: res

Is split cleanup really needed?

2010-01-02 Thread Shaun T. Erickson
I'm rebuilding my postfix installation from scratch. In the past, I've split cleanup in two, to prevent address rewriting until after filtering: pre-cleanup unix n - n - 0 cleanup -o virtual_alias_maps= -o canonical_maps= -o sender_canonical_maps= -o re

Re: Broken web link

2010-01-02 Thread Daniel V. Reinhardt
- Original Message > From: Jerry > To: postfix-users@postfix.org > Sent: Sat, January 2, 2010 12:55:56 PM > Subject: Re: Broken web link > > On Sat, 02 Jan 2010 13:34:44 +0100 > Markus Schönhaber replied: > > >01.01.2010 16:55, Ralf Hildebrandt: > > > >> * Jerry : > >>> On this URL: h

Berkeley DB warnings (was: smtpd crashes)

2010-01-02 Thread Wietse Venema
>Jan 1 20:19:41 mail-ausfall postfix/verify[26329]: fatal: close database >/var/lib/postfix/verify.db: No such file or directory Does not reproduce on Ubuntu 9.10-server with the default Berkeley DB 4.7. Can you check if this warning (and the warning for postscreen) goes away when automatic cac

Re: Berkeley DB warnings (was: smtpd crashes)

2010-01-02 Thread Wietse Venema
Wietse Venema: > >Jan 1 20:19:41 mail-ausfall postfix/verify[26329]: fatal: close database > >/var/lib/postfix/verify.db: No such file or directory Testing the same bogus error with postscreen: > Does not reproduce on Ubuntu 9.10-server with the default Berkeley DB 4.7. Also not on Fedora Core

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > I made the changes you suggested and still can't authenticate. > Here is the log from maillog. Thanks You client does not start a TLS session. p...@rick > > Jan 2 10:14:41 fedora postfix/smtpd[17435]: connection established > > Jan 2 10:14:41 fedora postfix/smtpd[17435]: ma

Re: smtp_sasl_auth_enable?

2010-01-02 Thread Patrick Ben Koetter
* john : > I understand that setting "smtp_sasl_auth_enable" to yes, enables > sasl authentication in the SMTP client, but does it make it > mandatory. It makes it mandatory only for hosts listed in a sasl password map. > If I do not have an entry in the sasl password list for a particular > smar

Re: smtpd crashes

2010-01-02 Thread Ralf Hildebrandt
* Wietse Venema : > Introduced 20091227, fixed 20091230 (dangling pointer in event manager). Yes, I'm not seeing those in 20100101 > Sometimes non-production software has a defect. That's why I'm reporting them... -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Un

Re: Berkeley DB warnings (was: smtpd crashes)

2010-01-02 Thread Ralf Hildebrandt
* Wietse Venema : > >Jan 1 20:19:41 mail-ausfall postfix/verify[26329]: fatal: close database > >/var/lib/postfix/verify.db: No such file or directory > > Does not reproduce on Ubuntu 9.10-server with the default Berkeley DB 4.7. > > Can you check if this warning (and the warning for postscreen