RE: Trouble using StartSSL certificate for tls

2012-06-23 Thread Neil Aggarwal
Patrick: > openssl s_client -connect mail.nsa-lp.com:25 -starttls smtp -CAfile > /etc/ssl/ca-bundle.cer The complaint about the self signed certificate disappears when I do that. So, it seems the problem is that openssl does not recognize the CA cert. > The SMTP server is dispassionate about yo

RE: Trouble using StartSSL certificate for tls

2012-06-23 Thread Neil Aggarwal
Alvin: I am actually using their class 2 certificate so I did this: cat mail.nsa-lp.com.crt sub.class2.server.ca.cer ca.cer > mail.nsa-lp.com.all.crt Then, I changed my main.cf file to reference it: # Enable SMTP TLS smtpd_tls_cert_file = /etc/ssl/mail.nsa-lp.com.all.crt smtpd_tls_key_file = /e

RE: Trouble using StartSSL certificate for tls

2012-06-23 Thread Neil Aggarwal
Patrick: I tried manually sending a test message using the -CAfile argument to openssl. I do not get a complaint about the self signed certificate, but I still get the no valid recipients error, so it looks like the problem lies somewhere in my configuration of postfix, not the SSL certificate.

Re: Trouble using StartSSL certificate for tls

2012-06-23 Thread Wietse Venema
Neil Aggarwal: > Hmmm. I was testing this because Outlook is not able to send a > test message through my server. What are the symptoms: Does Outlook connect to TCP port 25 (smtp), 465 (smtps), or 587 (submission)? Each port has a different configuration template in master.cf. POSTFIX logging.

RE: Trouble using StartSSL certificate for tls

2012-06-23 Thread Neil Aggarwal
Wieste: It looks like I have a bigger problem. I am trying to use port 25. When I do telnet mail.nsa-lp.com 25 on my local computer, I get a connection time out. I wonder if my ISP is blocking port 25. I can connect to port 995 just fine. I tried to telnet to port 465 and it hits the firewall o

Re: Trouble using StartSSL certificate for tls

2012-06-23 Thread Wietse Venema
Neil Aggarwal: > Wieste: > > It looks like I have a bigger problem. > > I am trying to use port 25. > When I do telnet mail.nsa-lp.com 25 on my local computer, > I get a connection time out. Port 25 is for MTA-to-MTA connection. The (legacy) smtps and (preferred) submission ports are for MUA-to

RE: Trouble using StartSSL certificate for tls

2012-06-23 Thread Neil Aggarwal
Wietse: I see, port 587 is the submission port. I will use that. Thanks for the info! Neil -- Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos Virtual private server with CentOS 6 preinstalled Unmetered bandwidth = no overage charges -Original Message- The (legacy) smtps an

RE: Trouble using StartSSL certificate for tls

2012-06-23 Thread njo...@vbhcs.org
Neil Aggarwal wrote: >Patrick: > >I tried manually sending a test message using the -CAfile argument >to openssl. I do not get a complaint about the self signed >certificate, >but I still get the no valid recipients error, so it looks like the >problem >lies somewhere in my configuration of po

How to move msgs from deferred to HOLD?

2012-06-23 Thread Len Conrad
Releasing from HOLD to deliverable is clear (and used often) but how to move deferred to HOLD? Len

Re: How to move msgs from deferred to HOLD?

2012-06-23 Thread Ansgar Wiechers
On 2012-06-23 Len Conrad wrote: > Releasing from HOLD to deliverable is clear (and used often) > > but how to move deferred to HOLD? man postsuper | grep -A 11 -- " -h" -h queue_id Put mail "on hold" so that no attempt is made to deliver it. Move one message with the named queu

Re: How to move msgs from deferred to HOLD?

2012-06-23 Thread Wietse Venema
Len Conrad: > Releasing from HOLD to deliverable is clear (and used often) > > but how to move deferred to HOLD? # find /var/spool/postfix/deferred -type f | sed 's;.*/;;' | postsuper -H - Wietse