Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Viktor Dukhovni
On Wed, May 08, 2013 at 11:49:53PM +, Viktor Dukhovni wrote: > While the problem Ralf reported looks similar, tests against the > server he reported fail to discover any support for session reuse, > so either one has to be very lucky to re-use a session (possible > with forking servers without

Reject email

2013-05-09 Thread Héctor Moreno Blanco
Hello everybody, I would like to reject an email if the MX does not exist. We have enable the setting reject_unknown_sender_domain and reject_unknown_recipient_domain. However, if the domain has DNS and resolves it, the message is sent, and we don't want that. I have also tried with the reject

Re: Reject email

2013-05-09 Thread Reindl Harald
Am 09.05.2013 12:24, schrieb Héctor Moreno Blanco: > I would like to reject an email if the MX does not exist. We have enable the > setting /reject_unknown_sender_domain/ > and /reject_unknown_recipient_domain/. However, if the domain has DNS and > resolves it, the message is sent, and we > don

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Ralf Hildebrandt
* Viktor Dukhovni : > Does this happen consistently, or intermittently? consistently > Can you reproduce this with: > > openssl s_client \ > -cipher $(postconf -xh tls_export_cipher_list) \ > -sslv2 \ > -starttls smtp -connect mail.vex.net:25 # openssl s_client \

RE: Reject email

2013-05-09 Thread Héctor Moreno Blanco
Hello Reindl, Thanks for the tip. I will consider your advice. Thank you very much. Kind regards. Héctor Moreno Blanco -Mensaje original- De: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] En nombre de Reindl Harald Enviado el: jueves, 09 de mayo de 2013 12

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Wietse Venema
Ralf Hildebrandt: [ Charset UTF-8 unsupported, converting... ] > * Viktor Dukhovni : > > > Does this happen consistently, or intermittently? > > consistently > > > Can you reproduce this with: > > > > openssl s_client \ > > -cipher $(postconf -xh tls_export_cipher_list) \ > > -ssl

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Jerry
On Wed, 8 May 2013 16:10:52 + Viktor Dukhovni articulated: > On Wed, May 08, 2013 at 03:54:35PM +, Viktor Dukhovni wrote: > > > Can you reproduce this with: > > > > openssl s_client \ > > -cipher $(postconf -xh tls_export_cipher_list) \ > > -sslv2 \ > > -starttls smtp -co

Re: Reject email

2013-05-09 Thread Stan Hoeppner
On 5/9/2013 5:28 AM, Reindl Harald wrote: > > > Am 09.05.2013 12:24, schrieb Héctor Moreno Blanco: >> I would like to reject an email if the MX does not exist. We have enable the >> setting /reject_unknown_sender_domain/ >> and /reject_unknown_recipient_domain/. However, if the domain has DNS an

Re: Reject email

2013-05-09 Thread Reindl Harald
Am 09.05.2013 14:14, schrieb Stan Hoeppner: > On 5/9/2013 5:28 AM, Reindl Harald wrote: >> >> Am 09.05.2013 12:24, schrieb Héctor Moreno Blanco: >>> I would like to reject an email if the MX does not exist. We have enable >>> the setting /reject_unknown_sender_domain/ >>> and /reject_unknown_rec

RE: Reject email

2013-05-09 Thread Héctor Moreno Blanco
Thanks for all the answers! They helped me quite a lot :) Regards. Héctor Moreno Blanco -Mensaje original- De: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] En nombre de Reindl Harald Enviado el: jueves, 09 de mayo de 2013 14:27 Para: postfix-users@postfix

Re: Reject email

2013-05-09 Thread Stan Hoeppner
Normally I'd avoid arguing with your Reindl as it simply clutters the list. However you made some invalid points that need to be corrected for those who may browse the archives in the future. On 5/9/2013 7:26 AM, Reindl Harald wrote: > if you have a A-record for "example.com" and you incoming >

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Viktor Dukhovni
On Thu, May 09, 2013 at 06:47:08AM -0400, Jerry wrote: > On Wed, 8 May 2013 16:10:52 + > Viktor Dukhovni articulated: > > > On Wed, May 08, 2013 at 03:54:35PM +, Viktor Dukhovni wrote: > > > > > Can you reproduce this with: > > > > > > openssl s_client \ > > > -cipher $(postconf -

Re: Reject email

2013-05-09 Thread Reindl Harald
Am 09.05.2013 16:44, schrieb Stan Hoeppner: > Normally I'd avoid arguing with your Reindl as it simply > clutters the list keep this bullshit for you > On 5/9/2013 7:26 AM, Reindl Harald wrote: > >> if you have a A-record for "example.com" and you incoming >> mail-server is on this IP you do n

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Jukka Salmi
Hello Viktor Dukhovni --> postfix-users (2013-05-08 18:01:52 +): > On Wed, May 08, 2013 at 07:24:03PM +0200, Jukka Salmi wrote: > > > Funny, I was just going to report the probably same issue... > > > > I can reproduce the problem on up-to-date Linux and FreeBSD systems, but > > not on a old

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Ralf Hildebrandt
* Viktor Dukhovni : > On Wed, May 08, 2013 at 03:54:35PM +, Viktor Dukhovni wrote: > > > Can you reproduce this with: > > > > openssl s_client \ > > -cipher $(postconf -xh tls_export_cipher_list) \ > > -sslv2 \ > > -starttls smtp -connect mail.vex.net:25 > > Sorry that should

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Ralf Hildebrandt
* Jukka Salmi : > Funny, I was just going to report the probably same issue... :) > When sending several mails in succession, failure and success seem to > alternate (i.e. exactly one failed handshake, then a successful one, > then a failed one again, etc.). And not using a TLS session cache fo

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Viktor Dukhovni
On Thu, May 09, 2013 at 06:52:49PM +0200, Jukka Salmi wrote: > > Indeed handshakes fail for resumed sessions. What version of > > Postfix and OpenSSL is installed on rho.salmi.ch? > > It's a NetBSD/amd64 5.1_STABLE system running Postfix 2.8.3; OpenSSL is > at 0.9.9: > > $ openssl version -a

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Ralf Hildebrandt
* Viktor Dukhovni : > Any information on the server's O/S, OpenSSL and Postfix version > and whether the Postfix TLS session cache database is enabled would > be most helpful. If I get any info about this from vex, I'll share it with you -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Fran

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Viktor Dukhovni
On Thu, May 09, 2013 at 07:28:09PM +0200, Ralf Hildebrandt wrote: > * Jukka Salmi : > > > Funny, I was just going to report the probably same issue... > > :) > > > When sending several mails in succession, failure and success seem to > > alternate (i.e. exactly one failed handshake, then a succ

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Ralf Hildebrandt
* Viktor Dukhovni : > On Thu, May 09, 2013 at 07:28:09PM +0200, Ralf Hildebrandt wrote: > > > * Jukka Salmi : > > > > > Funny, I was just going to report the probably same issue... > > > > :) > > > > > When sending several mails in succession, failure and success seem to > > > alternate (i.e. e

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Ralf Hildebrandt
First: Thanks for answering at all. It's not commonplace nowadays to find a contact and if one does to get an answer at all! :) The whole thread (two people have similar issues with vex.net) can be found here: http://archives.neohapsis.com/archives/postfix/2013-05/thread.html#160 > Odd. N

Re: "bad digest length:s3_both.c:239:" when sending to mail.vex.net?

2013-05-09 Thread Viktor Dukhovni
On Thu, May 09, 2013 at 02:03:38PM -0400, D'Arcy J.M. Cain wrote: > On Thu, 9 May 2013 19:42:16 +0200 > > > > > > When sending several mails in succession, failure and success > > > > > seem to alternate (i.e. exactly one failed handshake, then a > > > > > successful one, then a failed one again,

[no subject]

2013-05-09 Thread Christopher Adams
hello, I am having problems with getting mail delivered through our Mailman mailing list server. Things were working fine until late yesterday. I include a log from a posting below. The message is sent to the alias, then is removed from the queue. It is never delivered to the person behind the ali

Postfix not speaking with amavis?

2013-05-09 Thread Postfix
Hi, Sorry if this is the wrong list. I have a debian system, installed the amavis packages etc following one of the many how toos. I installed postfix from source. Everything seems to work ok, no error message in logs. However, incoming and outgoing email just sits in the postfix/hold fol

Re:

2013-05-09 Thread Noel Jones
On 5/9/2013 3:53 PM, Christopher Adams wrote: > hello, > > I am having problems with getting mail delivered through our Mailman > mailing list server. Things were working fine until late yesterday. > I include a log from a posting below. The message is sent to the > alias, then is removed from the

Re: Postfix not speaking with amavis?

2013-05-09 Thread Noel Jones
On 5/9/2013 4:43 PM, Postfix wrote: > Hi, > > Sorry if this is the wrong list. > > > > I have a debian system, installed the amavis packages etc following > one of the many how toos. > > > > I installed postfix from source. Everything seems to work ok, no > error message in logs. > > Howe

RE: Postfix not speaking with amavis?

2013-05-09 Thread Postfix
The logs don't have any errors for postfix. Postfix shows it receiving email, etc. Telnet gives me a response from amavis new. The only thing I see in the logs related to amavis that might be an error is: May 9 11:18:01 /USR/SBIN/CRON[22335]: (amavis) CMD (test -e /usr/sbin/amavisd-new-cronjob

Re: Reject email

2013-05-09 Thread Stan Hoeppner
On 5/9/2013 9:55 AM, Reindl Harald wrote: > > Am 09.05.2013 16:44, schrieb Stan Hoeppner: >> Normally I'd avoid arguing with your Reindl as it simply >> clutters the list > > keep this bullshit for you Nice etiquette... >> On 5/9/2013 7:26 AM, Reindl Harald wrote: >> >>> if you have a A-record