Re: dictionary-attack

2013-04-07 Thread Benny Pedersen
On 2013-03-27 23:11, Matthew Hall wrote: I ran into a bit of an issue trying out fqrdns.pcre as recommended here in this thread. The header in the file recommended adding it into smtpd_client_restrictions. However if I place it there, I end up rejecting mail even from SASL authenticated client

Re: Enabling Postscreen'

2013-04-07 Thread LuKreme
In our previous episode (Saturday, 06-Apr-2013), Wietse Venema said: > LuKreme: >> >> I've just updated my postfix install to 2.8 patch 14 (from 2.7) >> and am looking into enabling postscreen. I've read the >> http://www.postfix.org/POSTSCREEN_README.html document, and it >> looks like I should r

Re: Enabling Postscreen'

2013-04-07 Thread Wietse Venema
LuKreme: > In our previous episode (Saturday, 06-Apr-2013), Wietse Venema said: > > LuKreme: > >> > >> I've just updated my postfix install to 2.8 patch 14 (from 2.7) > >> and am looking into enabling postscreen. I've read the > >> http://www.postfix.org/POSTSCREEN_README.html document, and it > >

Re: Enabling Postscreen'

2013-04-07 Thread LuKreme
In our previous episode (Sunday, 07-Apr-2013), Wietse Venema said: > LuKreme: >> In our previous episode (Saturday, 06-Apr-2013), Wietse Venema said: >>> LuKreme: I've just updated my postfix install to 2.8 patch 14 (from 2.7) and am looking into enabling postscreen. I've read the >

Setting up secure submission for remote users

2013-04-07 Thread LuKreme
I've long used pop-before-smtp to allow authenticated users a short window in which to send mail, but now that I've setup postfix 2.8.14 I want to also setup secure submission on port 587 with ssl and something like Kerberos 5 or MD5 challenge/response (or, frankly, even password) over SSL. I b

Re: Setting up secure submission for remote users

2013-04-07 Thread LuKreme
In our previous episode (Sunday, 07-Apr-2013), LuKreme said: > /usr/local/sbin/saslauthd -a pam -m /var/run/authdaemond one other thing I might have mentioned: # cat /usr/local/etc/authlib/authdaemonrc |egrep -v "^$|^#" authmodulelist="authmysql authpam" version="authdaemond.mysql" authmodulelist