Re: Postfix 2.8 rc2 release notes

2011-01-18 Thread Wietse Venema
David Schweikert: > Hi, > > I just had a look at the release notes for the Postfix 2.8 release > candidate and noticed that "postscreen" isn't described as a completely > new feature. It wasn't however included in a previous stable release. Hmm. postscreen takes up about 1/3 of the release notes

Re: Postfix 2.8 rc2 release notes

2011-01-18 Thread David Schweikert
Hi Wietse, On Tue, Jan 18, 2011 at 07:00:10 -0500, Wietse Venema wrote: > > I just had a look at the release notes for the Postfix 2.8 release > > candidate and noticed that "postscreen" isn't described as a completely > > new feature. It wasn't however included in a previous stable release. > >

Re: psc_cache_update

2011-01-18 Thread Wietse Venema
Victor Duchovni: > On Mon, Jan 17, 2011 at 10:12:54PM -0500, Wietse Venema wrote: > > > > alpha smoothing should do the trick, in this case we can start with > > > > > > t_0 = 0, > > > > > > and set > > > > > > t_{n+1} = 0.95*t_{n} + 0.05*delta > > > > There are many ways to arrive at a mo

Re: Postfix 2.8 rc2 release notes

2011-01-18 Thread Wietse Venema
David Schweikert: > Hi Wietse, > > On Tue, Jan 18, 2011 at 07:00:10 -0500, Wietse Venema wrote: > > > I just had a look at the release notes for the Postfix 2.8 release > > > candidate and noticed that "postscreen" isn't described as a completely > > > new feature. It wasn't however included in a

Re: Postfix 2.8 rc2 release notes

2011-01-18 Thread David Schweikert
On Tue, Jan 18, 2011 at 07:08:51 -0500, Wietse Venema wrote: > > I noticed now the last Feature paragraph. Yes, I find it not very > > easy to understand for Postfix 2.7 users that didn't follow the > > development of the feature. > > I can put a pointer to POSTSCREEN_README at the start of that s

cloned mx server, strange headers in sent mail

2011-01-18 Thread James Chase
I have a workign mx server (virtual) which I cloned to create a second mx server. I changed the hostname and /etc/hosts and any reference I could find to the old "mx4" name to "mx2". I also made sure reverse dns and dns is OK. However, when I send mail, the recipient mail server reports the bel

Re: psc_cache_update

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 07:06:29AM -0500, Wietse Venema wrote: > > > There are many ways to arrive at a moving average. Where do these > > > magic numbers come from? > > > > The 0.05, 0.95 magic numbers give you an average over a few tens of sample > > points, that is not overly sensitive to a s

Postfix autoresponder and transport problem

2011-01-18 Thread roby65
Hi guys, i finally made it in the intent of adding an autoresponder to my postfix server, and it works, butit creates problems with dovecot! This is what i've done: master.cf: vacationunix- n n - - pipe flags=DRhuuser=vacation argv=/var/spool

Re: Postfix autoresponder and transport problem

2011-01-18 Thread Gary Chambers
i finally made it in the intent of adding an autoresponder to my postfix server, and it works, butit creates problems with dovecot! transport: myu...@mydomain.com vacation when i send a message to this account, i get the autoreply (this is ok) but the receiving account doesn't receiv

Re: Postfix autoresponder and transport problem

2011-01-18 Thread John Adams
Am 18.01.2011 17:37, schrieb roby65: Hi guys, i finally made it in the intent of adding an autoresponder to my postfix server, and it works, butit creates problems with dovecot! This is what i've done: master.cf: vacationunix- n n - - pipe flags

RE: Postfix autoresponder and transport problem

2011-01-18 Thread Mark (Lunatechnologies)
Hi, I had the same problem, but fixed it. Your problem is with your transport entry and also (possibly) your alias table. The postfixadmin vacation autoreponder works by first creating an entry in the alias table using a domain name that you have setup in the config.inc.php file for postfix.

Re: psc_cache_update

2011-01-18 Thread Wietse Venema
Victor Duchovni: > On Tue, Jan 18, 2011 at 07:06:29AM -0500, Wietse Venema wrote: > > > > > There are many ways to arrive at a moving average. Where do these > > > > magic numbers come from? > > > > > > The 0.05, 0.95 magic numbers give you an average over a few tens of sample > > > points, that

Re: psc_cache_update

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 12:42:12PM -0500, Wietse Venema wrote: > > > > > There are many ways to arrive at a moving average. Where do these > > > > > magic numbers come from? > > You are describing basic math to someone with a master's degree in > roughly 50% math and 50% physics :-) (My PhD was

Re: Postfix autoresponder and transport problem

2011-01-18 Thread Charles Marcus
On 2011-01-18 12:06 PM, Mark (Lunatechnologies) wrote: > If you look at the alias table (or file depending on your setup) for any > users that have activated VACATION, you should see something like this... > > u...@domain.com u...@domain.com, u...@autoreply.domain.com Correction: the above

postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Mark Martinec
I must be doing something silly, but I can't see my mistake. $ postconf postscreen_dnsbl_sites postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2,3,4..8,10..11] postfix/postscreen[26161]: fatal: bad DNSBL filter syntax: need "," or "]" at "127.0.0.[2><" Or to simplify the matter: $ postconf

unknown tls_disable_workarounds value

2011-01-18 Thread Steve Jenkins
I just built and installed Postfix 2.8-RC2 using "make upgrade" (upgraded from 2.3.3) and I'm getting the following warning in my maillog: postfix/smtpd[27208]: warning: unknown tls_disable_workarounds value "CVE-2010-4180" in "CVE-2005-2969 CVE-2010-4180" I'm able to make the error go away by ad

Patch 2.8.0-RC[12]: was: unknown tls_disable_workarounds value

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 12:20:16PM -0800, Steve Jenkins wrote: > I just built and installed Postfix 2.8-RC2 using "make upgrade" > (upgraded from 2.3.3) and I'm getting the following warning in my > maillog: > > postfix/smtpd[27208]: warning: unknown tls_disable_workarounds value > "CVE-2010-4180

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 09:19:50PM +0100, Mark Martinec wrote: > $ postconf postscreen_dnsbl_sites > postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2,3,4..8,10..11] > > postfix/postscreen[26161]: fatal: bad DNSBL filter syntax: need "," or "]" at > "127.0.0.[2><" There is a parser issue her

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Wietse Venema
Mark Martinec: > I must be doing something silly, but I can't see my mistake. > > $ postconf postscreen_dnsbl_sites > postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2,3,4..8,10..11] > > postfix/postscreen[26161]: fatal: bad DNSBL filter syntax: need "," or "]" at > "127.0.0.[2><" The proble

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Noel Jones
On 1/18/2011 2:46 PM, Wietse Venema wrote: Mark Martinec: I must be doing something silly, but I can't see my mistake. $ postconf postscreen_dnsbl_sites postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2,3,4..8,10..11] postfix/postscreen[26161]: fatal: bad DNSBL filter syntax: need "," or "]

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 03:36:12PM -0500, Victor Duchovni wrote: > On Tue, Jan 18, 2011 at 09:19:50PM +0100, Mark Martinec wrote: > > > $ postconf postscreen_dnsbl_sites > > postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2,3,4..8,10..11] > > > > postfix/postscreen[26161]: fatal: bad DNSBL fi

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Wietse Venema
Victor Duchovni: > On Tue, Jan 18, 2011 at 03:36:12PM -0500, Victor Duchovni wrote: > > > On Tue, Jan 18, 2011 at 09:19:50PM +0100, Mark Martinec wrote: > > > > > $ postconf postscreen_dnsbl_sites > > > postscreen_dnsbl_sites = zen.spamhaus.org=127.0.0.[2,3,4..8,10..11] > > > > > > postfix/posts

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 03:56:45PM -0500, Wietse Venema wrote: > Something along the lines of: > > /* > * Workaround. The "," was already in use as dnsbl list separator. > */ > for (keep = 0, cp = var_psc_dnsbl_sites; *cp; cp++) { > if (*cp == '[') { > keep++

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Wietse Venema
Victor Duchovni: > On Tue, Jan 18, 2011 at 03:56:45PM -0500, Wietse Venema wrote: > > > Something along the lines of: > > > > /* > > * Workaround. The "," was already in use as dnsbl list separator. > > */ > > for (keep = 0, cp = var_psc_dnsbl_sites; *cp; cp++) { > > if

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Patrick Ben Koetter
* Wietse Venema : > Victor Duchovni: > > On Tue, Jan 18, 2011 at 03:56:45PM -0500, Wietse Venema wrote: > > > > > Something along the lines of: > > > > > > /* > > > * Workaround. The "," was already in use as dnsbl list separator. > > > */ > > > for (keep = 0, cp = var_psc_dnsbl

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 04:08:12PM -0500, Wietse Venema wrote: > But having "," inside an access control feature it is likely to > break third-party tools that maintain Postfix configuration files. > > The alternative is to [modify] the address filter syntax, and to > replace "," by a different s

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Patrick Ben Koetter
* Patrick Ben Koetter : > * Wietse Venema : > > Victor Duchovni: > > > On Tue, Jan 18, 2011 at 03:56:45PM -0500, Wietse Venema wrote: > > > > > > > Something along the lines of: > > > > > > > > /* > > > > * Workaround. The "," was already in use as dnsbl list separator. > > > > */ >

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Wietse Venema
Patrick Ben Koetter: > * Wietse Venema : > > Victor Duchovni: > > > On Tue, Jan 18, 2011 at 03:56:45PM -0500, Wietse Venema wrote: > > > > > > > Something along the lines of: > > > > > > > > /* > > > > * Workaround. The "," was already in use as dnsbl list separator. > > > > */ > >

Re: postscreen_dnsbl_sites filter syntax?

2011-01-18 Thread Wietse Venema
Wietse Venema: > > * Wietse Venema : > > > Victor Duchovni: > > > > On Tue, Jan 18, 2011 at 03:56:45PM -0500, Wietse Venema wrote: > > > > > > > > > Something along the lines of: > > > > > > > > > > /* > > > > > * Workaround. The "," was already in use as dnsbl list separator. > > > > >

Re: About website www.postfix.org

2011-01-18 Thread mouss
Le 17/01/2011 22:29, Steve Linford a écrit : > On 16 Jan 2011, at 23:49, Неворотин Вадим wrote: > >> It's a... nonsense! When somebody ask "tell me an address of website", >> nobody and never start their answers with W...W...W > > I do. If you try to go to http://spamhaus.org you get a

Re: About website www.postfix.org

2011-01-18 Thread Patrick Ben Koetter
* mouss : > Le 17/01/2011 22:29, Steve Linford a écrit : > > On 16 Jan 2011, at 23:49, Неворотин Вадим wrote: > > > >> It's a... nonsense! When somebody ask "tell me an address of > >> website", nobody and never start their answers with W...W...W > > > > I do. If you try to go to http:/

SSL/TLS issue

2011-01-18 Thread IT geek 31
I have an issue regarding SSL/TLS. I have configured my certificates and STARTTLS works fine. Out of curosity, I wanted to get SSL over tcp/465 working. I uncommented the following line in master.cf: smtps inet n - n - - smtpd And netsat shows the serve

Re: SSL/TLS issue

2011-01-18 Thread Wietse Venema
IT geek 31: > I have an issue regarding SSL/TLS. > > I have configured my certificates and STARTTLS works fine. Out of > curosity, I wanted to get SSL over tcp/465 working. Port 465 uses a different protocol than port 25. On port 25, the session starts in plaintext, and the client sends STARTTL

Re: SSL/TLS issue

2011-01-18 Thread IT geek 31
On 18 January 2011 22:22, Wietse Venema wrote: > IT geek 31: >> I have an issue regarding SSL/TLS. >> >> I have configured my certificates and STARTTLS works fine.  Out of >> curosity, I wanted to get SSL over tcp/465 working. > Port 465 uses a different protocol than port 25. > > On port 25, the

Re: Patch 2.8.0-RC[12]: was: unknown tls_disable_workarounds value

2011-01-18 Thread Steve Jenkins
On Tue, Jan 18, 2011 at 12:34 PM, Victor Duchovni wrote: > Sorry, my mistake, when the OpenSSL team removes a work-around from > SSL_OP_ALL, we should not remove its name from the list of names Postfix > recognizes. It will do no harm. > > Please apply the following patch to 2.8.0-RC[12] or 2.9-20

Re: SSL/TLS issue

2011-01-18 Thread Wietse Venema
IT geek 31: > On 18 January 2011 22:22, Wietse Venema wrote: > > IT geek 31: > >> I have an issue regarding SSL/TLS. > >> > >> I have configured my certificates and STARTTLS works fine. ?Out of > >> curosity, I wanted to get SSL over tcp/465 working. > > > Port 465 uses a different protocol than

Re: Patch 2.8.0-RC[12]: was: unknown tls_disable_workarounds value

2011-01-18 Thread Wietse Venema
Steve Jenkins: > On Tue, Jan 18, 2011 at 12:34 PM, Victor Duchovni > wrote: > > Sorry, my mistake, when the OpenSSL team removes a work-around from > > SSL_OP_ALL, we should not remove its name from the list of names Postfix > > recognizes. It will do no harm. > > > > Please apply the following pa

Re: Patch 2.8.0-RC[12]: was: unknown tls_disable_workarounds value

2011-01-18 Thread Steve Jenkins
On Tue, Jan 18, 2011 at 2:35 PM, Wietse Venema wrote: > > The patch applies without error here. Be sure not to corrupt the > file content with some word-wrapping program, or some DOS editor > that appends control-z. > >        Wieste Confirmed. I had initially copied and pasted it from my Gmail c

Re: SSL/TLS issue

2011-01-18 Thread IT geek 31
On 18 January 2011 22:34, Wietse Venema wrote: > IT geek 31: >> On 18 January 2011 22:22, Wietse Venema wrote: >> > IT geek 31: >> >> I have an issue regarding SSL/TLS. >> >> >> >> I have configured my certificates and STARTTLS works fine. ?Out of >> >> curosity, I wanted to get SSL over tcp/465

Re: SSL/TLS issue

2011-01-18 Thread Reindl Harald
in thunderbird you have two options "SSL/TLS" "StARTTLS" on port 465 you have to use "SSL/TLS" the same for imaps/pop3s on dedicated ports if port / enycryption is in the wrong combination it will not work, happens most time if you changed the ports manually while doing some tests, after that th

Re: Patch 2.8.0-RC[12]: was: unknown tls_disable_workarounds value

2011-01-18 Thread Victor Duchovni
On Tue, Jan 18, 2011 at 02:45:06PM -0800, Steve Jenkins wrote: > Confirmed. I had initially copied and pasted it from my Gmail client > window to my Linux editor. Copying it from the message source instead > did the trick. > > Will this patched version of tls_misc.c be in the final 2.8 release?

dovecot LDA, email sent to mailman list got rejected

2011-01-18 Thread Umarzuki Mochlis
after a few discussion http://www.mail-archive.com/mailman-users@python.org/msg58378.html i still am getting Jan 19 15:41:48 mail-server postfix/pipe[3724]: A502F19C8A57: to=, relay=dovecot, delay=60040, delays=60002/36/0/2.1, dsn=4.3.0, status=deferred (temporary failure) postfix version: 2.5.9

Re: dovecot LDA, email sent to mailman list got rejected

2011-01-18 Thread Wietse Venema
Umarzuki Mochlis: > after a few discussion > http://www.mail-archive.com/mailman-users@python.org/msg58378.html > > i still am getting > > Jan 19 15:41:48 mail-server postfix/pipe[3724]: A502F19C8A57: > to=, relay=dovecot, delay=60040, delays=60002/36/0/2.1, > dsn=4.3.0, status=deferred (temporar

postfix-2.8.0-RC3 and postfix-2.9-20110118

2011-01-18 Thread Wietse Venema
I have uploaded new tarballs to ftp.porcupine.org. Let's hope that things stabilize this week. Below are the changes since RC2. URL: ftp://ftp.porcupine.org/mirrors/postfix-release/index.html Wietse 20110118 Bugfix: the tls_disable_workarounds word list only inc

Re: dovecot LDA, email sent to mailman list got rejected

2011-01-18 Thread Umarzuki Mochlis
2011/1/19 Wietse Venema > > This means that the Dovecot mail delivery program terminates with > exit status code 75 (EX_TEMPFAIL, as defined in /usr/include/sysexits.h). > > To find out WHY dovecot does this, you are on the wrong mailing > list. This mailing list is about Postfix not Dovecot > >

Postfix 2.8 not alone in enabling ECDHE ciphers.

2011-01-18 Thread Victor Duchovni
The Postfix 2.8 SMTP server will not be alone in enabling server-side Elliptic Curve Diffie-Hellman key-agreement. Hosted domains served by smtproutes.com (e.g. saybrook.edu) have ECDHE ciphers enabled: Trusted TLS connection established to saybrook.edu.pri-mx.smtproutes.com[174.36.154.1

authentication

2011-01-18 Thread Ejaz
Hello, We are and ISP our mail environment is follows Front End Mail server =: (postfix/mailscanner/clamav/spamasssin) where there are no actual mailboxes, just role of this server is to filter the incoming and outgoing email. After that all the incoming emails will sent to the its act

Re: authentication

2011-01-18 Thread Patrick Ben Koetter
* Ejaz : > We are and ISP our mail environment is follows > > Front End Mail server =: (postfix/mailscanner/clamav/spamasssin) where there > are no actual mailboxes, just role of this server is to filter the incoming > and outgoing email. After that all the incoming emails will sent to the its >