TLS certificate validation woes

2011-12-20 Thread Bernhard Schmidt
Hi, I'm having an issue I can't quite understand at the moment. We are part of a larger PKI infrastructure run by the german NREN, which is in the end rooted at the Deutsche Telekom. - Deutsche Telekom Root CA 2 - DFN-Verein PCA Global - G01 - LRZ-CA - G01 <-- this is ours - som

hotmail rate limit

2011-12-20 Thread Helder Oliveira
Hello, Recently we start sending lots of emails to hotmail accounts and lots of them are in the active queue waiting for delivery for long time... Some of our clients have hotmail accounts for testing and are complaining about delivery times. Our server has a good reputation but that is not en

Re: TLS certificate validation woes

2011-12-20 Thread lst_hoe02
Zitat von Bernhard Schmidt : Hi, I'm having an issue I can't quite understand at the moment. We are part of a larger PKI infrastructure run by the german NREN, which is in the end rooted at the Deutsche Telekom. - Deutsche Telekom Root CA 2 - DFN-Verein PCA Global - G01 - LRZ-CA - G0

Re: Vacation problems (again)

2011-12-20 Thread Claudio Prono
Il 19/12/2011 17.41, Wietse Venema ha scritto: > Claudio Prono: >> cat 1324286018.V811I1ea270M489235.mail | strace /usr/bin/vacation -t1 >> testmedia >> >> But no way, no results at all > This will only send a reply if the message has testmedia > in the To: or Cc: header. > > Wietse > I

Re: Vacation problems (again)

2011-12-20 Thread Ralf Hildebrandt
* Claudio Prono : > In fact, this is the header of the mail: > > Return-Path: > X-Original-To: testme...@domain.it > Delivered-To: testme...@domain.it No To: or CC: header... > I have also tried to specify the alias, like > > /usr/bin/vacation -a testme...@domain.it -t0 testmedia > > But no

Re: hotmail rate limit

2011-12-20 Thread Andrew Beverley
On Tue, 2011-12-20 at 09:22 +, Helder Oliveira wrote: > Hello, > > Recently we start sending lots of emails to hotmail accounts and lots of them > are in the active queue waiting for delivery for long time... > Some of our clients have hotmail accounts for testing and are complaining > abou

Re: TLS certificate validation woes

2011-12-20 Thread Bernhard Schmidt
Am 20.12.2011 10:24, schrieb lst_ho...@kwsoft.de: Hello, >> Any idea how to allow all certificates issued by specific Sub-CAs, >> without trusting everyone? > > As far as i understand you have to list the complete chain but only your > sub-CA to get it working. So create a smtpd_tls_CAfile with

Re: Vacation problems (again)

2011-12-20 Thread Wietse Venema
Useless uses of the "cat" command: > cat 1324286018.V811I1ea270M489235.mail | strace /usr/bin/vacation -t1 > testmedia > > But no way, no results at all Wietse: > This will only send a reply if the message has testmedia > in the To: or Cc: header. Claudio Prono: > In fact, this is the header

problem with dspam

2011-12-20 Thread fakessh @
hello list hello geek hello guru hello Fu I have done tests on my smtp server used to dspam. after problems of housing road I realized that dspam removes Return-Path header my emails are then intercepted as spam. I have not found a solution to my problem please help me i use a latest stable

Re: TLS certificate validation woes

2011-12-20 Thread lst_hoe02
Zitat von Bernhard Schmidt : Am 20.12.2011 10:24, schrieb lst_ho...@kwsoft.de: Hello, Any idea how to allow all certificates issued by specific Sub-CAs, without trusting everyone? As far as i understand you have to list the complete chain but only your sub-CA to get it working. So create a

Re: problem with dspam

2011-12-20 Thread Jerry
On Tue, 20 Dec 2011 14:12:16 +0100 fakessh @ articulated: > I have done tests on my smtp server used to dspam. > after problems of housing road I realized that dspam removes > Return-Path header > > my emails are then intercepted as spam. > I have not found a solution to my problem Maybe this

Re: TLS certificate validation woes

2011-12-20 Thread Bernhard Schmidt
Am 20.12.2011 14:30, schrieb lst_ho...@kwsoft.de: Hi, Any idea how to allow all certificates issued by specific Sub-CAs, without trusting everyone? >>> >>> As far as i understand you have to list the complete chain but only your >>> sub-CA to get it working. So create a smtpd_tls_CAfile

Re: hotmail rate limit

2011-12-20 Thread Helder Oliveira
Hello Andrew, thanks for the answer On Dec 20, 2011, at 10:16 AM, Andrew Beverley wrote: > On Tue, 2011-12-20 at 09:22 +, Helder Oliveira wrote: >> Hello, >> >> Recently we start sending lots of emails to hotmail accounts and lots of >> them are in the active queue waiting for delivery for

Re: Table has changed; restarting messages not appearing

2011-12-20 Thread Who Me
> > On the older box, every day I see a message stating that > > hash:/etc/postfix/relay_recipients has changed -- restarting. > > This happens when an smtpd(8) notices a table change after processing > a request and just before accepting another. A sufficiently idle > system will not have any m

postfix devnull mailbox

2011-12-20 Thread Roberto Greiner
Hi, I'm trying to create a /dev/null mailbox, but didn't get much success following the recipe at http://www.serverwatch.com/columns/article.php/3844371/Forwarding-a-Postfix-Virtual-Alias-to-devnull.htm What I did was following: - Add a "blackhole" alias in /etc/aliases (blackhole: /dev/null)

Re: postfix devnull mailbox

2011-12-20 Thread Patrick Ben Koetter
* Roberto Greiner : > I'm trying to create a /dev/null mailbox, but didn't get much > success following the recipe at > http://www.serverwatch.com/columns/article.php/3844371/Forwarding-a-Postfix-Virtual-Alias-to-devnull.htm > > What I did was following: > - Add a "blackhole" alias in /etc/aliase

Re: postfix devnull mailbox

2011-12-20 Thread /dev/rob0
On Tuesday 20 December 2011 12:35:40 Roberto Greiner wrote: > I'm trying to create a /dev/null mailbox, but didn't get much > success following the recipe at > http://www.serverwatch.com/columns/article.php/3844371/Forwarding-a > -Postfix-Virtual-Alias-to-devnull.htm > > What I did was following:

Re: postfix devnull mailbox

2011-12-20 Thread Dennis Carr
On Tue, 20 Dec 2011, /dev/rob0 wrote: Why do you want to do that? What would be wrong with rejecting that address? /dev/null is just the proper repository to recycle bits. We don't want to run out. =^_^= In all seriousness, I guess it depends on who you ask. For the original poster's ca

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 10:11, Dennis Carr wrote: > In all seriousness, I guess it depends on who you ask. For the original > poster's case, it's going to a "noreply" address, and I've seen cases > where nore...@foo.bar is simply eaten, more often than not, rather than > rejected. Besides, as far as I'm conce

Re: postfix devnull mailbox

2011-12-20 Thread Reindl Harald
Am 21.12.2011 00:47, schrieb Peter: > On 21/12/11 10:11, Dennis Carr wrote: >> In all seriousness, I guess it depends on who you ask. For the original >> poster's case, it's going to a "noreply" address, and I've seen cases >> where nore...@foo.bar is simply eaten, more often than not, rather th

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 13:21, Reindl Harald wrote: > so why does he not use the reply-button and what is he thinking does > "nore...@mail.tld" mean? if you do not read the noreply-address it > is the same as drop the messages, the only difference is on the storage I am not excusing the sender's actions, I am

Re: TLS certificate validation woes

2011-12-20 Thread Viktor Dukhovni
On Tue, Dec 20, 2011 at 10:24:04AM +0100, lst_ho...@kwsoft.de wrote: > As far as I understand you have to list the complete chain but only > your sub-CA to get it working. This is not the case: http://www.postfix.org/TLS_README.html#server_access Allow the remote SMTP client request

Re: warning: problem talking to service private/scache: Operation timed out

2011-12-20 Thread Sahil Tandon
On Thu, 2011-12-15 at 19:26:39 -0500, Wietse Venema wrote: > In the scache client, the file descriptor sending operation is > always preceeded and followed by a data read. For this reason we > can't be triggering the same bug that postscreen triggered, but > maybe there is another bug in FreeBSD f

Re: postfix devnull mailbox

2011-12-20 Thread Reindl Harald
Am 21.12.2011 01:29, schrieb Peter: > On 21/12/11 13:21, Reindl Harald wrote: >> so why does he not use the reply-button and what is he thinking does >> "nore...@mail.tld" mean? if you do not read the noreply-address it >> is the same as drop the messages, the only difference is on the storage >

Re: postfix devnull mailbox

2011-12-20 Thread Stan Hoeppner
On 12/20/2011 6:29 PM, Peter wrote: > On 21/12/11 13:21, Reindl Harald wrote: >> so why does he not use the reply-button and what is he thinking does >> "nore...@mail.tld" mean? if you do not read the noreply-address it >> is the same as drop the messages, the only difference is on the storage > >

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 16:01, Stan Hoeppner wrote: > The act of delivery to a mailbox does not guarantee the message will be > read by a human, nor replied to, ever. Thus there is zero practical > difference, from the sender's POV, in this case, between delivering to > /dev/null and to a mailbox whose conten

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 15:19, Reindl Harald wrote: > > > Am 21.12.2011 01:29, schrieb Peter: >> On 21/12/11 13:21, Reindl Harald wrote: >>> so why does he not use the reply-button and what is he thinking does >>> "nore...@mail.tld" mean? if you do not read the noreply-address it >>> is the same as drop the

Envelope sender address authorization and command line tool "mail"

2011-12-20 Thread Bartłomiej Romański
Hi Is there a way to restrict the "From" field for messages sent with the command line tool "mail"? For messages sent with SMTP we can simply do this: http://www.postfix.org/SASL_README.html#server_sasl_authz_envelope and it works fine, but users can execute: mail t...@test.test -a 'From: some