Timed out RCPT TO

2010-06-01 Thread Kaleb Hosie
Hey All, I have a user trying to send an email however it was bounced back. After checking the maillog, I found that it was timing out when sending "RCPT TO". I telnet'ed into the recipients server and started sending the series of commands to send mail and it seemed very quick up until I sent RCP

SSL Certificates per domain

2010-06-01 Thread Eduardo Júnior
Hi, all I'm blocking the communication from MUA to MTA from port 25/tcp, doing that only through from ports 587/tcp and 465/tcp But my box Postfix provides mail services to many domains and I created a only SSL certificate with the name server as Common Name. And I get many warnings because t

Re: SSL Certificates per domain

2010-06-01 Thread Wietse Venema
Eduardo J?nior: > Hi, all > > > I'm blocking the communication from MUA to MTA from port 25/tcp, > doing that only through from ports 587/tcp and 465/tcp > > > But my box Postfix provides mail services to many domains and I created > a only SSL certificate with the name server as Common Name. >

Re: SSL Certificates per domain

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 10:20:56AM -0400, Wietse Venema wrote: > > Common Name: myserver.domain.com > > MX for domain1: smtp.domain1.com > > MX for domain2: smtp.domain2.com > > > > Then, how i configure SSL Certificates per domain on Postfix? > > References? > > How would Postfix know what cert

Re: Postfix performance issue

2010-06-01 Thread Teh Kim Chooi
i test the command today, and found out that it only takes 1.5 secs, nothing change from the 5 secs result. I add the 192.168.1.10 to my /etc/hosts file, and it drop to 0.5 secs to inject 100 msgs. 1. Question here, if the sender IP is not in my /etc/hosts, will postfix do a reverse lookup on the

Re: SSL Certificates per domain

2010-06-01 Thread Martin Strand
On Tue, 01 Jun 2010 16:20:56 +0200, Wietse Venema wrote: Eduardo Júnior: But my box Postfix provides mail services to many domains and I created a only SSL certificate with the name server as Common Name. And I get many warnings because the Common Name in the certificate doesn't match

Re: Postfix performance issue

2010-06-01 Thread Wietse Venema
Teh Kim Chooi: > i test the command today, and found out that it only takes 1.5 secs, nothing > change from the 5 secs result. I add the 192.168.1.10 to my /etc/hosts file, > and it drop to 0.5 secs to inject 100 msgs. No surprise. > 1. Question here, if the sender IP is not in my /etc/hosts, wil

Re: Timed out RCPT TO

2010-06-01 Thread Noel Jones
On 6/1/2010 9:01 AM, Kaleb Hosie wrote: Hey All, I have a user trying to send an email however it was bounced back. After checking the maillog, I found that it was timing out when sending "RCPT TO". I telnet'ed into the recipients server and started sending the series of commands to send mail an

Re: SSL Certificates per domain

2010-06-01 Thread Terry Inzauro
On 06/01/2010 10:00 AM, Victor Duchovni wrote: > On Tue, Jun 01, 2010 at 10:20:56AM -0400, Wietse Venema wrote: > >>> Common Name: myserver.domain.com >>> MX for domain1: smtp.domain1.com >>> MX for domain2: smtp.domain2.com >>> >>> Then, how i configure SSL Certificates per domain on Postfix? >>>

Re: SSL Certificates per domain

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 12:23:38PM -0500, Terry Inzauro wrote: > > Even with SNI support, most SMTP clients will not make use of SNI, so > > it will take a long time before SMTP STARTTLS servers can expect to > > support multiple certificates for most clients. > > > > Could this be a case where

Re: SSL Certificates per domain

2010-06-01 Thread /dev/rob0
On Tue, Jun 01, 2010 at 12:23:38PM -0500, Terry Inzauro wrote: > Could this be a case where it makes sense to run multiple > instances of postfix which bind to different IP's and are each > configured with unique certs? They don't need to be separate instances, possibly just separate smtpd(8) li

Re: SSL Certificates per domain

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 12:42:06PM -0500, /dev/rob0 wrote: > Is SNI defined for SMTP yet? A quick Google search didn't find it. > How would that work? The client would have to tell the hostname or > domain name wanted before the STARTTLS? SNI works entirely within SSL, the desired hostname is s

unknown recipient issue

2010-06-01 Thread Curtis Maurand
Hello, I'm new to the list, but I've been searching the manuals, how-to's, mail archives, google, etc trying to find the answer to this quesiton. I have the following setup. Postfix 2.6.5 Amavisd-new 2.6.3 Spamassassin 3.2.5 clamav 0.96 dbmail 2.2.9 The entire set up works, amavis is a memory

Re: unknown recipient issue

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 02:09:23PM -0400, Curtis Maurand wrote: > I have in the main.cf > > relay_domains= < a couple of domains> mysql:/etc/postfix/transport.cf > transport_maps = mysql:/etc/postfix/transport.cf Don't use the transport table directly as a relay domain table, some day you'll ne

Re: unknown recipient issue

2010-06-01 Thread Curtis Maurand
On 6/1/2010 2:22 PM, Victor Duchovni wrote: On Tue, Jun 01, 2010 at 02:09:23PM -0400, Curtis Maurand wrote: I have in the main.cf relay_domains=< a couple of domains> mysql:/etc/postfix/transport.cf transport_maps = mysql:/etc/postfix/transport.cf Don't use the transport table d

Testing Postfix EECDH support with OpenSSL 1.0.0

2010-06-01 Thread Victor Duchovni
I've recently enabled Ephemeral Elliptic Curve Diffie-Hellman (EECDH) key exchange on our inbound Postfix servers (Postfix compliled and linked with OpenSSL 1.0.0), by setting: smtpd_tls_eecdh_grade = strong Counting recently logged ciphers yields: 33258 DHE-RSA-AES256-SHA 131

Re: Postfix + stunnel SMTPS = address rewriting issue

2010-06-01 Thread Jack Browning
On Fri, May 28, 2010 at 1:27 PM, Wietse Venema wrote: > Jack Browning: >> I'm curious as to why the generic map isn't working for mail sent to >> the relayhost. > > Generic mapping is implemented in the Postfix SMTP client, so you > need to configure the Postfix SMTP client appropriately.  Setting

Re: Postfix + stunnel SMTPS = address rewriting issue

2010-06-01 Thread Noel Jones
On 6/1/2010 3:08 PM, Jack Browning wrote: On Fri, May 28, 2010 at 1:27 PM, Wietse Venema wrote: Jack Browning: I'm curious as to why the generic map isn't working for mail sent to the relayhost. Generic mapping is implemented in the Postfix SMTP client, so you need to configure the Postfix S

Re: Postfix + stunnel SMTPS = address rewriting issue

2010-06-01 Thread Jack Browning
On Tue, Jun 1, 2010 at 3:16 PM, Noel Jones wrote: > Add a password map entry for the local unwritten address. Wow. That's all it took. Case closed. I will try and decipher why that worked off-list. Thanks, man. JEB

Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Wietse Venema
I just uploaded new versions of Postfix 2.8-20100601 "experimental" and a release candidate for Postfix 2.7.1 "stable". Both versions have the same fixes/workarounds for incompatible changes in MacOS 10.6, OpenSSL 1.0.0, and Berkeley DB 5.0.21, which were contributed from var

Virtual domains

2010-06-01 Thread curtis
The virtual domain hosting stuff in the documentation is pretty confusing. I haven't yet seen an example of what it is that I'm trying to accomplish. I have several domains that I have non-unix mailboxes (they are stored by sql using an alternative lmtp daemon after running them through amavisd-n

Re: Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Matt Hayes
On 06/01/2010 08:30 PM, Wietse Venema wrote: > I just uploaded new versions of Postfix 2.8-20100601 "experimental" > and a release candidate for Postfix 2.7.1 "stable". > > Both versions have the same fixes/workarounds for incompatible > changes in MacOS 1

Re: Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Sahil Tandon
On Tue, 01 Jun 2010, Matt Hayes wrote: > On 06/01/2010 08:30 PM, Wietse Venema wrote: > > I just uploaded new versions of Postfix 2.8-20100601 "experimental" > > and a release candidate for Postfix 2.7.1 "stable". > > > > Both versions have the same

Re: Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Matt Hayes
On 06/01/2010 08:50 PM, Sahil Tandon wrote: > On Tue, 01 Jun 2010, Matt Hayes wrote: > >> On 06/01/2010 08:30 PM, Wietse Venema wrote: >>> I just uploaded new versions of Postfix 2.8-20100601 "experimental" >>> and a release candidate for Postfix 2.7.1

Virtual domains (more)

2010-06-01 Thread curtis
Can I also assume that I would use relay_domains and relay_transport? Correct?

Re: Virtual domains

2010-06-01 Thread Sahil Tandon
On Tue, 01 Jun 2010, cur...@maurand.com wrote: [ .. ] > At Victor's urging, this afternoon, I enabled the relay_recipient_maps and > that solved the rejecting unknown before the handoff to the amavisd-new, > but broke the domains that I need to forward all mail for. Explain what you mean by 'bro

Re: Virtual domains

2010-06-01 Thread curtis
> On Tue, 01 Jun 2010, cur...@maurand.com wrote: > > [ .. ] > >> At Victor's urging, this afternoon, I enabled the relay_recipient_maps >> and >> that solved the rejecting unknown before the handoff to the amavisd-new, >> but broke the domains that I need to forward all mail for. > > Explain what y

Re: Virtual domains

2010-06-01 Thread Sahil Tandon
On Tue, 01 Jun 2010, cur...@maurand.com wrote: > > On Tue, 01 Jun 2010, cur...@maurand.com wrote: > > > > [ .. ] > > > >> At Victor's urging, this afternoon, I enabled the > >> relay_recipient_maps and that solved the rejecting unknown before > >> the handoff to the amavisd-new, but broke the doma

Re: Postfix + stunnel SMTPS = address rewriting issue

2010-06-01 Thread Jack Browning
On Tue, Jun 1, 2010 at 6:17 PM, Wietse Venema wrote: > Jack Browning: >> No address rewriting is occurring even though Postfix is invoking its >> SMTP client to deliver the mail to the remote host, and my generic map >> (after postmap and a reload) contains an entry like this: >> >> zzz...@jnjroo