TLS smtp_tls_CApath and /etc/ssl/certs

2010-06-08 Thread Jan C.
Hello, I have my postfix set up as a TLS client to other smtp servers. I point smtp_tls_CApath to a directory where I store my own imported trusted CAs. My question is whether or not Postfix will also load the Root CAs stored in /etc/ssl/certs. If not, does it mean that I have to set smtp_tls_CApat

Setting mime-header checking

2010-06-08 Thread Ockleford Paul (NHS Connecting for Health)
Hi, Hopefully someone on this list can help me out. I am trying to set up mime-header checking to only allow through emails with a particular file extension, that is I want to block any email without this attachment type or any other attachment type. I have created the map file with postmap an

unable to telnet localhost 25

2010-06-08 Thread Khawaja M. Jawad
Hi, I am using postfix + MailScanner + Mailwatch, Everything is working fine. postfix is relaying emails for all of my clients/domain, but I am unable to telnet localhost 25. Although I have allowed 127.0.0.0/8 range, listening on all interfaces, and is sending emails for all customer as per d

Re: Setting mime-header checking

2010-06-08 Thread Simon Waters
On Tuesday 08 June 2010 12:04:36 Ockleford Paul (NHS Connecting for Health) wrote: > I would be grateful if anybody is able to offer some assistance. > > mime_header_checks > > #!/^\s*Content-(Disposition|Type).*name\s*=\s*"{1,1}.+\.(ecf)"{1,1}\s*$/!/n >ame=[^>]*\.(ecf)/ WARN Would normally reject

Re: unable to telnet localhost 25

2010-06-08 Thread J. Roeleveld
On Tuesday 08 June 2010 13:09:02 Khawaja M. Jawad wrote: > Hi, > > I am using postfix + MailScanner + Mailwatch, Everything is working fine. > postfix is relaying emails for all of my clients/domain, but I am unable to > telnet localhost 25. Although I have allowed 127.0.0.0/8 range, listening >

RE: Setting mime-header checking

2010-06-08 Thread Ockleford Paul (NHS Connecting for Health)
Hi, Thanks for the response, what I want to do is only allow one type of attachment through though. I have a service which processes attachments, so rather than give a list of disallowed attachments, I want to do the opposite and only give a list of allowed attachments. In this case only emails

Re: Setting mime-header checking

2010-06-08 Thread Wietse Venema
Ockleford Paul (NHS Connecting for Health): > Hi, > > Hopefully someone on this list can help me out. I am trying to > set up mime-header checking to only allow through emails with a > particular file extension, that is I want to block any email > without this attachment type or any other attachme

RE: Setting mime-header checking

2010-06-08 Thread Ockleford Paul (NHS Connecting for Health)
Ok thanks, I'm not sure I completely understand the syntax of the perl reg ex. Do you know why even testing the example I was sent through this user list it still applies the reg ex to other mime headers? I understood that this expression was tested in production by users but when I look in my m

Re: Setting mime-header checking

2010-06-08 Thread Wietse Venema
Ockleford Paul (NHS Connecting for Health): > Ok thanks, I'm not sure I completely understand the syntax of the perl reg ex. > > Do you know why even testing the example I was sent through this > user list it still applies the reg ex to other mime headers? I > understood that this expression was t

Re: Submission service

2010-06-08 Thread Phil Howard
On Fri, Jun 4, 2010 at 18:31, Sahil Tandon wrote: > On Fri, 04 Jun 2010, Dan Burkland wrote: > >> Relevant configuration entries: >> >> ---main.cf >> smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination >        ^ > >> ---master.cf--- >> submissio

RE: Setting mime-header checking

2010-06-08 Thread Ockleford Paul (NHS Connecting for Health)
I could, but where as you may use a piece of code or an expression you don't fully understand I wouldn't. I would rather use tax payers money getting a working solution I understand than copy and pasting some crap someone online wrote which as they state is UNTESTED. Thanks all the same -O

Re: Setting mime-header checking

2010-06-08 Thread LuKreme
On 8-Jun-2010, at 05:51, Ockleford Paul (NHS Connecting for Health) wrote: > > Thanks for the response, what I want to do is only allow one type of > attachment through though. I have a service which processes attachments, so > rather than give a list of disallowed attachments, I want to do the

Re: Setting mime-header checking

2010-06-08 Thread LuKreme
On 8-Jun-2010, at 07:08, Ockleford Paul (NHS Connecting for Health) wrote: > > I could, but where as you may use a piece of code or an expression you don't > fully understand I wouldn't. I would rather use tax payers money getting a > working solution I understand than copy and pasting some crap

Re: Submission service

2010-06-08 Thread Larry Stone
On Tue, 8 Jun 2010, Phil Howard wrote: On Fri, Jun 4, 2010 at 18:31, Sahil Tandon wrote: On Fri, 04 Jun 2010, Dan Burkland wrote: Relevant configuration entries: ---main.cf smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination        ^ ---mas

Re: Setting mime-header checking

2010-06-08 Thread Noel Jones
On 6/8/2010 8:08 AM, Ockleford Paul (NHS Connecting for Health) wrote: I could, but where as you may use a piece of code or an expression you don't fully understand I wouldn't. I would rather use tax payers money getting a working solution I understand than copy and pasting some crap someone on

Postfix 2.7.1 stable release available

2010-06-08 Thread Wietse Venema
An on-line version of this announcement is available at http://www.postfix.org/announcements/postfix-2.7.1.html Postfix stable release 2.7.1 fixes one defect in the XFORWARD implementation (for SMTP-based content filters), improves robustness, and has updates for changes in system or library inter

Postfix 2.6.7 legacy release available

2010-06-08 Thread Wietse Venema
An on-line version of this announcement is available at http://www.postfix.org/announcements/postfix-2.6.7.html Postfix legacy release 2.6.7 contains fixes that are also included with Postfix 2.7 (stable release) and Postfix 2.8 (experimental release). NOTE: Postfix versions 2.3 and earlier are n

interesting SMTP issue /w Windows + Telnet

2010-06-08 Thread Michael Northcott
Hello all, I've got a dilly of a pickle for you. Running postfix-2.5.6-1.fc9.i386 on Fedora 9. I do a simple telnet session on one windows computer and it works, I do the exact same thing on the other windows computer and it does not work. Both run Windows XP SP3 updated to latest as of 2010-06-07

RE: Submission service

2010-06-08 Thread Dan Burkland
Using all of your helpful suggestions I was able to properly configure my Postfix server. The purpose behind master.cf makes a bit more sense now after reading your replies. Thanks again! Dan

Re: interesting SMTP issue /w Windows + Telnet

2010-06-08 Thread Wietse Venema
Michael Northcott: > 354 Start mail input; end with . That is not Postfix. Perhaps you are talking to some antivirus software. The Postfix response is: "354 End data with .". Wietse

Re: TLS smtp_tls_CApath and /etc/ssl/certs

2010-06-08 Thread Victor Duchovni
On Tue, Jun 08, 2010 at 09:31:46AM +0200, Jan C. wrote: > I have my postfix set up as a TLS client to other smtp servers. I > point smtp_tls_CApath to a directory where I store my own imported > trusted CAs. My question is whether or not Postfix will also load the > Root CAs stored in /etc/ssl/cer

Re: Submission service

2010-06-08 Thread Phil Howard
On Tue, Jun 8, 2010 at 09:47, Larry Stone wrote: > On Tue, 8 Jun 2010, Phil Howard wrote: > >> On Fri, Jun 4, 2010 at 18:31, Sahil Tandon wrote: >>> >>> On Fri, 04 Jun 2010, Dan Burkland wrote: >>> Relevant configuration entries: ---main.cf smtpd_recipient_restrict

Re: Submission service

2010-06-08 Thread Larry Stone
On Tue, 8 Jun 2010, Phil Howard wrote: On Tue, Jun 8, 2010 at 09:47, Larry Stone wrote: On Tue, 8 Jun 2010, Phil Howard wrote: On Fri, Jun 4, 2010 at 18:31, Sahil Tandon wrote: On Fri, 04 Jun 2010, Dan Burkland wrote: Relevant configuration entries: ---main.cf smtpd_recipie

RE: interesting SMTP issue /w Windows + Telnet

2010-06-08 Thread Michael Northcott
Aha! Thanks, that explains a lot. I thought I turned off the mail filtering but I guess not. So this "security" program must be mangling all SMTP sessions that do not look like Outlook - what a great "solution". This seems consistent with the overall poor quality of the rest of the security suite

Duplicate emails received

2010-06-08 Thread Sharma, Ashish
Hello, I have set up a postfix(2.6.6) mail receiving server (customized with three milters (dkim,sid, custom java milter) and two content filters (amavisd, custom java based)). Is it possible that if someone sends a mail for my postfix and it gets received in a manner that duplicate mails get

Re: Submission service

2010-06-08 Thread Phil Howard
On Tue, Jun 8, 2010 at 13:06, Larry Stone wrote: > And did you even read what I wrote? I am well aware you made a typo earlier. > I understand what you meant and said nothing about the mistake. I think this is a case of users being mixed up. I did not make the typo ... Dan did. I reported the

Re: Submission service

2010-06-08 Thread Larry Stone
On Tue, 8 Jun 2010, Phil Howard wrote: On Tue, Jun 8, 2010 at 13:06, Larry Stone wrote: And did you even read what I wrote? I am well aware you made a typo earlier. I understand what you meant and said nothing about the mistake. I think this is a case of users being mixed up. I did not mak

Re: Duplicate emails received

2010-06-08 Thread Jeroen Geilman
Hello, I have set up a postfix(2.6.6) mail receiving server (customized with three milters (dkim,sid, custom java milter) and two content filters (amavisd, custom java based)). Is it possible that if someone sends a mail for my postfix and it gets received in a manner that duplicate mails ge

Re: unable to telnet localhost 25

2010-06-08 Thread Jeroen Geilman
Hi, I am using postfix + MailScanner + Mailwatch, Everything is working fine... postfix is relaying emails for all of my clients/domain, but I am unable to telnet localhost 25. Although I have allowed 127.0.0.0/8 range, listening on all interfaces, and is sending emails for all customer as

Re: Duplicate emails received

2010-06-08 Thread Wietse Venema
Sharma, Ashish: > Is it possible that if someone sends a mail for my postfix and it > gets received in a manner that duplicate mails get generated on > my side? Yes. > In what circumstances is it possible and what kind of remedies if > any I can put in place to avoid such a thing. There are mult

RE: unable to telnet localhost 25

2010-06-08 Thread Khawaja M. Jawad
Thanks for the answer over a silly question J.Roeleveld. It was a firewall issue, I added rule for localhost to connect at port 25. Issue is resolved. -- Jawad -Original Message- From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Beha

Re: Setting mime-header checking

2010-06-08 Thread Stan Hoeppner
Noel Jones put forth on 6/8/2010 8:58 AM: > and while I've never met anyone named Wietse, I seem to remember seeing > that name in the postfix copyright statement. His advice might be worth > paying attention to. https://researcher.ibm.com/researcher/view.php?person=us-wietse http://en.wikipedia

Re: unable to telnet localhost 25

2010-06-08 Thread J. Roeleveld
On Wednesday 09 June 2010 06:39:16 Khawaja M. Jawad wrote: > Thanks for the answer over a silly question J.Roeleveld. There are no silly/stupid questions, only silly/stupid answers :) > It was a firewall issue, I added rule for localhost to connect at port 25. > Issue is resolved. Even though I