Re: "generic_maps" problem

On 4/13/2013 9:27 PM, Wietse Venema wrote: > awingnut: >> Thanks. I was hoping qmgr was after smtp so that really tells me nothing >> then. I don't see any thing in the log with the string >> otheraddr...@mydomain.com. I followed the instructions for generic >> mapping but it seems to not be workin

Re: SMTPS 465

Le 13/04/2013 16:27, Viktor Dukhovni a écrit : > On Sat, Apr 13, 2013 at 03:40:59PM +0200, mouss wrote: > 2013-04-12T21:49:03.160443+02:00 server postfix/smtpd[12238]: warning: TLS > library problem: 12238:error:1409D08A:SSL > routines:ssl3_setup_key_block:cipher or hash unavailable:s3_enc.c:

Re: "generic_maps" problem

awingnut: > smtp_generic_maps = hash:/etc/postfix/generic ... > smtp unix - - n - - smtp > relay unix - - n - - smtp > -o smtp_fallback_relay= What is the output from: $ postmap -s hash:/etc/postfix/generic This shoul

Re: "generic_maps" problem

On 4/14/2013 10:43 AM, Wietse Venema wrote: > awingnut: >> smtp_generic_maps = hash:/etc/postfix/generic > ... >> smtp unix - - n - - smtp >> relay unix - - n - - smtp >> -o smtp_fallback_relay= > What is the output from

Re: SMTPS 465

On Sun, Apr 14, 2013 at 01:30:53PM +, Joan Moreau wrote: [ You're using a mail client, whose plain-text response does not properly "quote" material you're replying to. When posting to this list please use a non-HTML client that gets the plain-text message right. ] > Ok, I tried > > 1 -

Re: "generic_maps" problem

On Sun, Apr 14, 2013 at 11:24:56AM -0400, awingnut wrote: > myaddr...@mydomain.com otheraddr...@mydomain.com What evidence, if any, do you have that generic mapping is "not working". -- Viktor.

Re: "generic_maps" problem

On 4/14/2013 11:26 AM, Viktor Dukhovni wrote: > On Sun, Apr 14, 2013 at 11:24:56AM -0400, awingnut wrote: > >> myaddr...@mydomain.com otheraddr...@mydomain.com > What evidence, if any, do you have that generic mapping is "not working". > Email from myaddr...@mydomain.com is being held by the ma

Re: "generic_maps" problem

On Sun, Apr 14, 2013 at 11:59:59AM -0400, awingnut wrote: > On 4/14/2013 11:26 AM, Viktor Dukhovni wrote: > > > On Sun, Apr 14, 2013 at 11:24:56AM -0400, awingnut wrote: > > > > > myaddr...@mydomain.com otheraddr...@mydomain.com > > > > What evidence, if any, do you have that generic mapping i

Re: "generic_maps" problem

awingnut: > On 4/14/2013 10:43 AM, Wietse Venema wrote: > > awingnut: > >> smtp_generic_maps = hash:/etc/postfix/generic > > ... > >> smtp unix - - n - - smtp > >> relay unix - - n - - smtp > >> -o smtp_fallback_relay= >

Re: SMTPS 465

Le 14/04/2013 15:25, Viktor Dukhovni a écrit : On Sun, Apr 14, 2013 at 01:30:53PM +, Joan Moreau wrote: [ You're using a mail client, whose plain-text response does not properly "quote" material you're replying to. When posting to this list please use a non-HTML client that gets the plain

Re: "generic_maps" problem

On 4/14/2013 12:34 PM, Viktor Dukhovni wrote: > On Sun, Apr 14, 2013 at 11:59:59AM -0400, awingnut wrote: > >> On 4/14/2013 11:26 AM, Viktor Dukhovni wrote: >> >>> On Sun, Apr 14, 2013 at 11:24:56AM -0400, awingnut wrote: >>> myaddr...@mydomain.com otheraddr...@mydomain.com >>> What eviden

Re: "generic_maps" problem

On 4/14/2013 12:37 PM, Wietse Venema wrote: > awingnut: >> On 4/14/2013 10:43 AM, Wietse Venema wrote: >>> awingnut: smtp_generic_maps = hash:/etc/postfix/generic >>> ... smtp unix - - n - - smtp relay unix - - n - -

Re: SMTPS 465

On Sun, Apr 14, 2013 at 03:57:07PM +, Joan Moreau wrote: > >Done right, this is sufficient. Your compiler settings must > >be wrong. Post the exact command you use the create the > >Postfix "makefiles". > > make -f Makefile.init makefiles 'CCARGS=-DHAS_PCRE -DHAS_MYSQL > -DUSE_SASL_AUTH -DUSE

Re: SMTPS 465

Am 14.04.2013 17:57, schrieb Joan Moreau: > Le 14/04/2013 15:25, Viktor Dukhovni a écrit : > >> On Sun, Apr 14, 2013 at 01:30:53PM +, Joan Moreau wrote: >> >> [ You're using a mail client, whose plain-text response does not properly >> "quote" material you're replying to. When posting to thi

Re: "generic_maps" problem

> This sends mail from me to me, but smtp_generic_maps replaces all > the addresses with postmaster. > > Commands: > % postconf smtp_generic_maps > smtp_generic_maps = hash:/etc/postfix/generic > % postmap -q wie...@porcupine.org hash:/etc/postfix/generic > postmas...@porcupine.org > % date | mail

Re: SMTPS 465

On Sun, Apr 14, 2013 at 07:22:28PM +0200, Reindl Harald wrote: > > -UHAS_IPV6 -DUSE_TLS -I/usr/include/mysql/ -I/usr/include/sasl ' > > 'AUXLIBS=-L/usr/lib/mysql/ -lmysqlclient -lssl > > -lcrypto -lz -lm -lpcre -lsasl2' > > i am missing here the path to openssl > below the ARGS from my fedora-rp

Re: SMTPS 465

Le 14/04/2013 17:21, Viktor Dukhovni a écrit : On Sun, Apr 14, 2013 at 03:57:07PM +, Joan Moreau wrote: Done right, this is sufficient. Your compiler settings must be wrong. Post the exact command you use the create the Postfix "makefiles". make -f Makefile.init makefiles 'CCARGS=-DHAS_PCR

Re: Another sanity check request

Le 13/04/2013 21:33, Russell Jones a écrit : > Hi all, > > Upgrading mail server from Postfix 2.9 to 2.10. Could I get a quick > sanity check to ensure my (fairly simple) setup is sane with the new > smtpd_relay_restrictions? Thanks :-) > > smtpd_relay_restrictions = permit_mynetworks permit_sa

Re: SMTPS 465

Am 14.04.2013 19:24, schrieb Viktor Dukhovni: > On Sun, Apr 14, 2013 at 07:22:28PM +0200, Reindl Harald wrote: > >>> -UHAS_IPV6 -DUSE_TLS -I/usr/include/mysql/ -I/usr/include/sasl ' >>> 'AUXLIBS=-L/usr/lib/mysql/ -lmysqlclient -lssl >>> -lcrypto -lz -lm -lpcre -lsasl2' >> >> i am missing here t

Re: Sending mail with specific address in own domain to relay.

Le 13/04/2013 18:11, Peter Welzien a écrit : > Hi. The situation is as follows: > > I get all my mail to my domain to the web hotel where I've registered the > domain. > > I fetch my mail using Fetchmail and deliver it to my server running > Dovecot + Postfix. > > Outgoing mail is relayed to my ISP

Re: SMTPS 465

On Sun, Apr 14, 2013 at 07:33:21PM +0200, Reindl Harald wrote: > Am 14.04.2013 19:24, schrieb Viktor Dukhovni: > > On Sun, Apr 14, 2013 at 07:22:28PM +0200, Reindl Harald wrote: > > > >>> -UHAS_IPV6 -DUSE_TLS -I/usr/include/mysql/ -I/usr/include/sasl ' > >>> 'AUXLIBS=-L/usr/lib/mysql/ -lmysqlcli

Re: Setting up secure submission for remote users

Le 12/04/2013 02:11, LuKreme a écrit : > Reindl Harald opined on Thursday 11-Apr-2013@16:58:28 >> mynetworks should be genrally used with care and only for specific >> address instead whole networks with sooner or later potentially >> infected clients which can be banned if using auth even if the >

IP in headers and spam detection

Hi List, I have a question regarding running Postfix in a DMZ. I have a UTM with a single IP address on it's red interface but our ISP provides a range of 15 IPs for hosting websites, mail, etc.. I have an external IP allocated and forwarded to the mail server, but when remote servers perfo

Re: IP in headers and spam detection

Julian Pilfold-Bagwell: > Hi List, > > I have a question regarding running Postfix in a DMZ. I have a UTM with > a single IP address on it's red interface but our ISP provides a range > of 15 IPs for hosting websites, mail, etc.. > > I have an external IP allocated and forwarded to the mail se

Re: IP in headers and spam detection

Le 14/04/2013 20:08, Julian Pilfold-Bagwell a écrit : > Hi List, > > I have a question regarding running Postfix in a DMZ. I have a UTM > with a single IP address on it's red interface but our ISP provides a > range of 15 IPs for hosting websites, mail, etc.. > > I have an external IP allocated an

Re: SMTPS 465

Le 14/04/2013 17:45, Viktor Dukhovni a écrit : > On Sun, Apr 14, 2013 at 07:33:21PM +0200, Reindl Harald wrote: > Am 14.04.2013 19:24, schrieb Viktor Dukhovni: On Sun, Apr 14, 2013 at > 07:22:28PM +0200, Reindl Harald wrote: -UHAS_IPV6 -DUSE_TLS > -I/usr/include/mysql/ -I/usr/include/sasl ' '

Re: Sending mail with specific address in own domain to relay.

mouss wrote: >> How can I make Postfix relay any mail with her address as recipient to my ISP? > transport_maps should work. > otherwise, a combination of virtual_alias_maps and smtp_generic_maps also works (and is recommended for those who have a lot of traffic, but this dooes not look to be you

Re: SMTPS 465

On Sun, Apr 14, 2013 at 06:31:48PM +, Joan Moreau wrote: > Ok, I have now proper install of postfix / openssl / cyrsus / etc... > > I still get : > > 2013-04-14T20:29:45.074096+02:00 server postfix/smtpd[12926]: warning: > TLS library problem: 12926:error:1409D08A:SSL > routines:SSL3_SETUP

Re: SMTPS 465

Le 14/04/2013 19:46, Viktor Dukhovni a écrit : On Sun, Apr 14, 2013 at 06:31:48PM +, Joan Moreau wrote: Ok, I have now proper install of postfix / openssl / cyrsus / etc... I still get : 2013-04-14T20:29:45.074096+02:00 server postfix/smtpd[12926]: warning: TLS library problem: 12926:err

Re: SMTPS 465

On Sun, Apr 14, 2013 at 08:49:11PM +, Joan Moreau wrote: > >$ openssl s_client -state -connect 127.0.0.1:12345 2>&1 | tee client.out > > Ok, here it is below > Please also report "openssl version -a". > client.out : > > New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 > Server publi

Re: SMTPS 465

Le 14/04/2013 21:21, Viktor Dukhovni a écrit : On Sun, Apr 14, 2013 at 08:49:11PM +, Joan Moreau wrote: $ openssl s_client -state -connect 127.0.0.1:12345 2>&1 | tee client.out Ok, here it is below Please also report "openssl version -a". Here : OpenSSL 1.0.1e 11 Feb 2013 built on: Sun

Re: SMTPS 465

On Sun, Apr 14, 2013 at 09:21:16PM +, Viktor Dukhovni wrote: > > Protocol : TLSv1.2 > > Cipher: ECDHE-RSA-AES256-GCM-SHA384 > > This looks fine, OpenSSL inter-operates with itself selecting a TLSv1.2 > ciphersuite. Now try: > > (sleep 2; printf "%s\r\n" QUIT) | > openssl s_cl

Re: SMTPS 465

Le 14/04/2013 22:02, Viktor Dukhovni a écrit : > On Sun, Apr 14, 2013 at 09:21:16PM +, Viktor Dukhovni wrote: > Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 This looks fine, > OpenSSL inter-operates with itself selecting a TLSv1.2 ciphersuite. Now try: > (sleep 2; printf "%srn"

Re: SMTPS 465

On Sun, Apr 14, 2013 at 10:08:52PM +, Joan Moreau wrote: > #define OpenSSL_add_ssl_algorithms() SSL_library_init() > > which adds all libcrypto digests. > > Same : in /usr/include/openssl/ssl.h, I have : > > #define OpenSSL_add_ssl_algorithms() SSL_library_init() > #define SSLeay_add_ssl_a

Re: SMTPS 465

Le 14/04/2013 22:08, Joan Moreau a écrit : > Le 14/04/2013 22:02, Viktor Dukhovni a écrit : > > On Sun, Apr 14, 2013 at 09:21:16PM +, Viktor Dukhovni wrote: > Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 This looks fine, > OpenSSL inter-operates with itself selecting a TLSv1.2

Re: SMTPS 465

On Sun, Apr 14, 2013 at 10:21:58PM +, Joan Moreau wrote: > However, how can postfix NOT use the only openssl library ? or fail to > have SHA2 when loading the .so ? Find a less broken operating system. This works on every system I've ever used, and finding out what's wrong with yours is not

Re: SMTPS 465

Le 14/04/2013 22:24, Viktor Dukhovni a écrit : On Sun, Apr 14, 2013 at 10:21:58PM +, Joan Moreau wrote: However, how can postfix NOT use the only openssl library ? or fail to have SHA2 when loading the .so ? Find a less broken operating system. This works on every system I've ever used,

Re: SMTPS 465

Am 15.04.2013 00:30, schrieb Joan Moreau: > Le 14/04/2013 22:24, Viktor Dukhovni a écrit : > >> On Sun, Apr 14, 2013 at 10:21:58PM +, Joan Moreau wrote: >> >> However, how can postfix NOT use the only openssl library ? or fail to have >> SHA2 when loading the .so ? >> >> Find a less broken

Re: SMTPS 465

On 4/12/2013 2:03 PM, Joan Moreau wrote: > I am stuck with making my SSL SMTPS (port 465) works, while it was > working fine since ever. > > I upgraded my kernel to 3.8.6 and since then, nothing works :( On 4/14/2013 5:24 PM, Viktor Dukhovni wrote: > On Sun, Apr 14, 2013 at 10:21:58PM +, Joan