Re: postfix + mysql + sasl + pam

2013-09-03 Thread Wietse Venema
Antonio Tommasi: > Hi to all > i've postfix 2.9.3 on ubuntu server with sasl+pam authentication to send > email. > I've a mysql backhand to store users password. > In this table i've a field that i use to prevent spam set to value > 'Y' or 'N' to permit a user to send (Y value) or not to send (N >

smtp relay insertion between internet and mx

2013-09-03 Thread Fabio Sangiovanni
Hello list, I need to put a SMTP relay between Internet and my company's mx (which stores inboxes), in order to do some processing. Current situation is that the mx receives messages directly from the Internet, without hops inbetween; on the mx, postfix is configured to retrieve allowed recipi

Re: Exim, DH, GnuTLS & interop

2013-09-03 Thread Jerry
On Mon, 2 Sep 2013 22:14:42 + Viktor Dukhovni articulated: > On Mon, Sep 02, 2013 at 03:03:36AM +, Viktor Dukhovni wrote: > > > On Mon, Sep 02, 2013 at 01:25:02AM +, Viktor Dukhovni wrote: > > > > > If Peer Heinlein would be kind enough to post > > > the Exim version that exhibits th

Re: smtp relay insertion between internet and mx

2013-09-03 Thread Wietse Venema
Fabio Sangiovanni: > Hello list, > > I need to put a SMTP relay between Internet and my company's mx (which > stores inboxes), in order to do some processing. > Current situation is that the mx receives messages directly from the > Internet, without hops inbetween; on the mx, postfix is configur

Re: Anyone use this email server configuration ?

2013-09-03 Thread DTNX Postmaster
On Sep 2, 2013, at 23:13, LuKreme wrote: > For servers? Encrypting the drive on a always-on server seems a bit > pointless. Once the machine is up and running, the drive is, as you said, > unencrypted. However, if someone comes in to seize the machines, they will > have to power them off and t

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread Viktor Dukhovni
On Tue, Sep 03, 2013 at 11:39:28AM -0700, FliedRice wrote: > I do not know if this is just a strange coincidence or what, but now the > google error has returned: > Sep 3 10:22:03 boaz postfix/smtp[19614]: certificate verification failed > for gmail-smtp-in.l.google.com[74.125.142.26]:25: untrust

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread FliedRice
I do not know if this is just a strange coincidence or what, but now the google error has returned: Sep 3 10:22:03 boaz postfix/smtp[19614]: certificate verification failed for gmail-smtp-in.l.google.com[74.125.142.26]:25: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority I

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread FliedRice
Thanks Victor, but I believe it does have something to do with my servers ability to deliver email to Gmail, does it not? http://productforums.google.com/forum/#!topic/gmail/7QWAO_aunhc This server has a newsletter program which sends a lot of email to Gmail, it is important to comply with any nee

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread Viktor Dukhovni
On Tue, Sep 03, 2013 at 12:24:30PM -0700, FliedRice wrote: > Thanks Victor, but I believe it does have something to do with my servers > ability to deliver email to Gmail, does it not? No, certificate verification is irrelevant. Gmail can't know whether you verified their certificate or not. >

Re: Exim, DH, GnuTLS & interop

2013-09-03 Thread Peer Heinlein
Am 03.09.2013 21:41, schrieb Phil Pennock: Hi, > Debian used to patch, in their build system, the value passed to > gnutls_dh_set_prime_bits() from 1024 to 2048. This is the value of the > size of the DH parameters which is the "minimum considered acceptable". > So Debian broke interop with "66

Re: Exim, DH, GnuTLS & interop

2013-09-03 Thread Viktor Dukhovni
On Tue, Sep 03, 2013 at 12:41:46PM -0700, Phil Pennock wrote: > Okay, I have identified the root cause. The systems that need to be > placated are older Debian installs, and the method should be broadly > compatible. > > Debian used to patch, in their build system, the value passed to > gnutls_d