Re: Transport Maps and TCP Table -> How to realize that postfix queries for recipient AND sender ?

2012-08-20 Thread post...@netorbit.it
On 15/08/2012 22:14, Noel Jones wrote: On 8/15/2012 1:28 PM, Harakiri wrote: Is there an alternative way to have a custom TCP service answer to postfix requests to where a mail should be relayed too - when postfix supplies all the transport information (sender,recipient, sending IP) ? Postfix

How to correctly signal postfix to close the session from an TCP Table/Policy Service - Connections are kept open for 1min after service shutdown

2012-08-20 Thread Harakiri
I have a tcp table and policy service - when i shut these down, i close each open session and unbind the listener port - for some reason postfix does not close its client connection to them for about 60sec. Now, is there a sure way to tell postfix to disconnect from his client session? Here is

Re: How to correctly signal postfix to close the session from an TCP Table/Policy Service - Connections are kept open for 1min after service shutdown

2012-08-20 Thread Reindl Harald
Am 20.08.2012 14:03, schrieb Harakiri: > I have a tcp table and policy service - when i shut these down, i close each > open session and unbind the listener port - for some reason postfix does not > close its client connection to them for about 60sec. > > after i shutdown the server and made s

Re: How to correctly signal postfix to close the session from an TCP Table/Policy Service - Connections are kept open for 1min after service shutdown

2012-08-20 Thread Wietse Venema
Harakiri: > I have a tcp table and policy service - when i shut these down, i > close each open session and unbind the listener port - for some > reason postfix does not close its client connection to them for > about 60sec. Yes. Creating a connection for each query is wasteful, especially if your

Re: How to correctly signal postfix to close the session from an TCP Table/Policy Service - Connections are kept open for 1min after service shutdown

2012-08-20 Thread Harakiri
--- On Mon, 8/20/12, Wietse Venema wrote: > From: Wietse Venema > Subject: Re: How to correctly signal postfix to close the session from an TCP > Table/Policy Service - Connections are kept open for 1min after service > shutdown > You can look at "postconf | grep '= 60'" output and reduce

Re: How to correctly signal postfix to close the session from an TCP Table/Policy Service - Connections are kept open for 1min after service shutdown

2012-08-20 Thread Wietse Venema
The tcp_table client timeout is not configurable (it also is not 60s). Closing the socket after each query is wrong. First, you need to set the SO_REUSEADDR socket option on the LISTEN socket. Second, before restarting your server, you need to terminate ALL tcp table server processes. W

Re: How to correctly signal postfix to close the session from an TCP Table/Policy Service - Connections are kept open for 1min after service shutdown

2012-08-20 Thread Harakiri
--- On Mon, 8/20/12, Wietse Venema wrote: > From: Wietse Venema > Subject: Re: How to correctly signal postfix to close the session from an TCP > Table/Policy Service - Connections are kept open for 1min after service > shutdown > To: "Postfix users" > Date: Monday, August 20, 2012, 9:17 AM

TLS SUPPORT: openssl ca debug mssage

2012-08-20 Thread Feel Zhou
Hello My friend I got problem when I want to use tls support [root@mtayd CA]# pwd /etc/pki/CA [root@mtayd CA]# openssl genrsa -des3 -out cakey.pem Generating RSA private key, 512 bit long modulus . ... e is 65537 (0x10001) Enter pass phrase for cakey.pem: Verifying

Re: TLS SUPPORT: openssl ca debug mssage

2012-08-20 Thread Wietse Venema
Feel Zhou: > Hello My friend > I got problem when I want to use tls support > > [root@mtayd CA]# pwd > /etc/pki/CA > > [root@mtayd CA]# openssl genrsa -des3 -out cakey.pem Please use the CA.pl script as described in TLS_README (on-line at http://www/postfix.org/TLS_README.html). Wietse

Re: TLS SUPPORT: openssl ca debug mssage

2012-08-20 Thread Jerry
On Mon, 20 Aug 2012 23:18:24 +0800 Feel Zhou articulated: > I got problem when I want to use tls support Have you thoroughly read the documentation at this URL: . -- Jerry ✌ postfix-u...@seibercom.net __

Re: TLS SUPPORT: openssl ca debug mssage

2012-08-20 Thread Feel Zhou
Thanks I read the web page http://www.postfix.org/TLS_README.html at the almost the last page. begin with Getting started, quick and dirty I do not have CA.pl in the centos system only can use openssl and the wrong command is also in the web page. but mine is not working well Tom 2012/8/20 Wiets

Re: TLS SUPPORT: openssl ca debug mssage

2012-08-20 Thread Wietse Venema
2012/8/20 Wietse Venema > > Please use the CA.pl script as described in TLS_README (on-line at > > http://www/postfix.org/TLS_README.html). Feel Zhou: > Thanks > I read the web page > http://www.postfix.org/TLS_README.html > at the almost the last page. begin with > Getting started, quick and di

Re: TLS SUPPORT: openssl ca debug mssage

2012-08-20 Thread Feel Zhou
Thanks, Wietse and all my friend I just do the command: yum install openssl-perl When I test again still have the same wrong message I really need to read the two document thoroughly http://www.postfix.org/TLS_README.html http://www.postfix.org/TLS_LEGACY_README.html Thanks again! Have a good day!

Re: TLS SUPPORT: openssl ca debug mssage

2012-08-20 Thread Wietse Venema
Feel Zhou: > Thanks, Wietse and all my friend > I just do the command: > yum install openssl-perl > When I test again > still have the same wrong message Please show the command and output for each step in TLS_README. You can capture the session with the script command. script name-of-file $ /som

Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Asai
Greetings, I am having some issues which I don't understand fully, and I'm hoping you can point out to me what I'm doing wrong here. I have a client who's using Windows 7 phone, and she's unable to send mail due to Spamhaus blocking her 'direct-to-mx' IP range. SMTP authentication is turned

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Ralf Hildebrandt
* Asai : > Greetings, > > I am having some issues which I don't understand fully, and I'm > hoping you can point out to me what I'm doing wrong here. > > I have a client who's using Windows 7 phone, and she's unable to send > mail due to Spamhaus blocking her 'direct-to-mx' IP range. SMTP > authe

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Asai
* Asai : Greetings, I am having some issues which I don't understand fully, and I'm hoping you can point out to me what I'm doing wrong here. I have a client who's using Windows 7 phone, and she's unable to send mail due to Spamhaus blocking her 'direct-to-mx' IP range. SMTP authentication is t

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Ralf Hildebrandt
* Asai : > Thanks, I thought that may be that case, and unfortunately there > doesn't seem to be any way in the Windows 7 phone configuration to > manually set the port it's connecting to. Although I do have it set > to use SSL (TLS isn't an option), so I'd think that it would connect > to 993 at

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Reindl Harald
Am 20.08.2012 22:41, schrieb Asai: > Thanks, I thought that may be that case, and unfortunately there doesn't seem > to be any way in the Windows 7 phone > configuration to manually set the port it's connecting to. Although I do > have it set to use SSL (TLS isn't an > option), so I'd think th

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Asai
On 8/20/2012 1:49 PM, Reindl Harald wrote: Am 20.08.2012 22:41, schrieb Asai: Thanks, I thought that may be that case, and unfortunately there doesn't seem to be any way in the Windows 7 phone configuration to manually set the port it's connecting to. Although I do have it set to use SSL (TL

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Benny Pedersen
Den 2012-08-20 22:22, Asai skrev: I'm sure I'm missing something, but I don't know what at this point. is smtp auth enabled in the phone ? show postfix logs postfix -n seems to have it all ok from here, so only the phone is left

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Benny Pedersen
Den 2012-08-20 22:41, Asai skrev: Thanks, I thought that may be that case, and unfortunately there doesn't seem to be any way in the Windows 7 phone configuration to manually set the port it's connecting to. Although I do have it set to use SSL (TLS isn't an option), so I'd think that it would

Re: Postscreen, DNSBL, and Windows Phone

2012-08-20 Thread Benny Pedersen
Den 2012-08-20 22:49, Reindl Harald skrev: this is a absolutely common way to specify host:port for all sort of service-types and clients microsoft try to sell better manuels as a thing that cost more :=)