TLS library problem

2010-12-03 Thread Mickael MONSIEUR
Hello, I have this problem with receiving emails from outside in SSL / TLS. Can you help me because I have some emails blocked because of it. Dec 3 09:56:13 mail postfix/smtpd[13307]: warning: 212.35.xxx.xx: hostname 212.35.xxx.xx.x.xx verification failed: Name or service not known Dec 3 09:

Re: TLS library problem

2010-12-03 Thread Ralf Hildebrandt
* Mickael MONSIEUR : > Hello, > I have this problem with receiving emails from outside in SSL / TLS. > Can you help me because I have some emails blocked because of it. Where does it show that the mails are being blocked? > Dec 3 09:56:13 mail postfix/smtpd[13307]: warning: 212.35.xxx.xx: hostn

Re: Restrict incoming emails by source domain

2010-12-03 Thread Martin Schiøtz
Hi Ralf Thank you - I will take a look at that:-) On Thu, Dec 2, 2010 at 10:15 PM, Ralf Hildebrandt wrote: > * Martin Schiøtz : >> Hi good people >> >> It's a special case I know but I would like in postfix to restrict >> incoming emails from outside world by the senders from domain? > > Like wh

Re: TLS library problem

2010-12-03 Thread Mickael MONSIEUR
2010/12/3 Ralf Hildebrandt > * Mickael MONSIEUR : > > Hello, > > I have this problem with receiving emails from outside in SSL / TLS. > > Can you help me because I have some emails blocked because of it. > > Where does it show that the mails are being blocked? > They are blocked or rejected, bec

Re: TLS library problem

2010-12-03 Thread Ralf Hildebrandt
* Mickael MONSIEUR : > > OK, it's an SSL Problem. But since we don't know what 212.35.xxx.xx is > > (MTA? MUA?) it's hard to say anything. Also, since you don't say > > anything about your server (config and such) it's also really hard. > > I do not think this is the SMTP 212.35.xxx.xx the proble

Re: TLS library problem

2010-12-03 Thread Mickael MONSIEUR
alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no body_checks = regexp:/etc/postfix/maps/body_checks broken_sasl_auth_clients = yes config_directory = /etc/postfix header_checks = regexp:/etc/postfix/maps/header_checks inet_interfaces = all mailbox

Re: TLS library problem

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 10:12:07AM +0100, Mickael MONSIEUR wrote: > I have this problem with receiving emails from outside in SSL / TLS. > Can you help me because I have some emails blocked because of it. The messages are not "blocked", rather the SMTP client fails to establish a TLS handshake wi

error for some particuliar addresses ?

2010-12-03 Thread Frank Bonnet
Hello I need to tell postfix respond with an SMTP error code for some internal particuliars addresses used by inhouse applications. Is it possible ? If yes how ? Thank you

Re: error for some particuliar addresses ?

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 04:34:27PM +0100, Frank Bonnet wrote: > Hello > > I need to tell postfix respond with an SMTP error code > for some internal particuliars addresses used by inhouse > applications. > > Is it possible ? If yes how ? http://www.postfix.org/SMTPD_ACCESS_README.html ht

Re: Maildrop filtering

2010-12-03 Thread Ben
Le 01/12/2010 17:52, Christoph Anton Mitterer a écrit : On Wed, 2010-12-01 at 17:41 +0100, Ben wrote: Postfix choose local to deliver the mail, but I can't find why. I would like it uses maildrop instead. You need to set up your hosted domains to be virtual hosted (http://www.postfix.org/VIRTUA

Re: error for some particuliar addresses ?

2010-12-03 Thread mouss
Le 03/12/2010 16:34, Frank Bonnet a écrit : Hello I need to tell postfix respond with an SMTP error code for some internal particuliars addresses used by inhouse applications. Is it possible ? If yes how ? smtpd_sender_restrictions = check_recipient_access cdb:/etc/postfix/rcpt_foo

Re: Maildrop filtering

2010-12-03 Thread mouss
Le 03/12/2010 17:28, Ben a écrit : Le 01/12/2010 17:52, Christoph Anton Mitterer a écrit : On Wed, 2010-12-01 at 17:41 +0100, Ben wrote: Postfix choose local to deliver the mail, but I can't find why. I would like it uses maildrop instead. You need to set up your hosted domains to be virtual h

Re: error for some particuliar addresses ?

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 05:29:17PM +0100, mouss wrote: > pas...@example.com550 5.1.1 User drunk > dorm...@example.net 550 5.1.1 Wake me up > ... > Note: do not invent codes when talking to the public. Which means either use "REJECT" (which just reports a "blocked by policy"

Re: Maildrop filtering

2010-12-03 Thread Ben
Le 03/12/2010 17:39, mouss a écrit : Le 03/12/2010 17:28, Ben a écrit : Le 01/12/2010 17:52, Christoph Anton Mitterer a écrit : On Wed, 2010-12-01 at 17:41 +0100, Ben wrote: Postfix choose local to deliver the mail, but I can't find why. I would like it uses maildrop instead. You need to set

Re: TLS library problem

2010-12-03 Thread Ralf Hildebrandt
* Victor Duchovni : > The remote SSL client sends "alert 0" which according to > > http://tools.ietf.org/html/rfc2246#section-7.2 > > is a "close_notify" alert. So the remote client called the equivalent of > SSL_shutdown() in the middle of the SSL handshake. Perhaps the client was > "unimpr

Re: TLS library problem

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 07:09:05PM +0100, Ralf Hildebrandt wrote: > * Victor Duchovni : > > > The remote SSL client sends "alert 0" which according to > > > > http://tools.ietf.org/html/rfc2246#section-7.2 > > > > is a "close_notify" alert. So the remote client called the equivalent of > >

Re: TLS library problem

2010-12-03 Thread Ralf Hildebrandt
* Victor Duchovni : > > This happens if the client doesn't like the certificate, because it is > > not signed by a trusted CA. > > This is a reasonably plausible conjecture, but not yet a fact. Yup. > > Which machine is it, so we can have a look with s_client? > > More importantly, the OP has

Should I have postgrey listen on a socket?

2010-12-03 Thread Grant
I just noticed that postgrey is listening on localhost:10030. Would it be better to have it listen to a socket? - Grant

Re: Should I have postgrey listen on a socket?

2010-12-03 Thread lst_hoe02
Zitat von Grant : I just noticed that postgrey is listening on localhost:10030. Would it be better to have it listen to a socket? Why? If its working as it should, leave it that way. It would be more complicated if running smtpd chrooted and using a unix-socket i guess... Regards Andreas

Blocking senders

2010-12-03 Thread Craig Baird
After staring at my Postfix config for hours on end, I still can't seem to find the problem here. I'm sure I've done something stupid, but I'm not seeing it. I'm trying to block a sender by e-mail address using smtpd_recipient_restrictions and check_sender_access. Obviously, it's not wor

Re: Blocking senders

2010-12-03 Thread Stan Hoeppner
Craig Baird put forth on 12/3/2010 6:57 PM: > After staring at my Postfix config for hours on end, I still can't seem > to find the problem here. I'm sure I've done something stupid, but I'm > not seeing it. I'm trying to block a sender by e-mail address using > smtpd_recipient_restrictions and c

Re: Blocking senders

2010-12-03 Thread Craig Baird
Quoting Stan Hoeppner : The list welcome message directs you to include relevant log entries (as well as postconf -n output). I see no log entries, and thus no error messages to troubleshoot. Thus, I must speculate that you probably didn't run postmap /etc/postfix/sender_blacklist postfix rel

Re: Blocking senders

2010-12-03 Thread Noel Jones
On 12/3/2010 9:41 PM, Craig Baird wrote: Quoting Stan Hoeppner : The list welcome message directs you to include relevant log entries (as well as postconf -n output). I see no log entries, and thus no error messages to troubleshoot. Thus, I must speculate that you probably didn't run postmap /

Re: Blocking senders

2010-12-03 Thread Craig Baird
Quoting Noel Jones : smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/sender_blacklist, check_recipient_access hash:/etc/postfix/recipient_blacklist, If you intend the above two checks evaluate before permit_mynetworks and -- more importantly -- before reject_unauth_desti