Windows 2003 / OpenSSL 1.x interoperability

2014-04-24 Thread Philipp Gesang
First off I apologize if this message is delivered twice: The first version I sent doesn't appear to have reached the list. - Dear list, this is a follow-up on the interoperability issues between Windows 2003 servers and OpenSSL ver

Re: Accept external SMTP traffic only from MX hosts

2014-04-24 Thread Lewin Bormann
It sounds as if you want something like SPF and a policy daemon. Just google it.

Mail regularly delayed by 10-15 min

2014-04-24 Thread Peter Smith
Hi, I run a moderately busy mail server (postfix + dovecot + amavis). Every day, during peak times (around 10am to 2pm), we see delays in the delivery of mail (both incoming and outgoing) of around 5 to 10 minutes. I appreciate this isn't a big delay, but I'm getting frustrated trying to figure ou

Re: Mail regularly delayed by 10-15 min

2014-04-24 Thread Wietse Venema
Peter Smith: > Amavis + SpamAssassin + ClamAV are being used for scanning mail > (incoming only). Again, this would be a likely source of delay, but > amavis never reaches its max connections (we typically only see half > this figure). I've also enabled verbose logging in amavis, and it > never tak

lost mail because of vacation responser

2014-04-24 Thread Charles Richard
Hi, I have an issue with the postfix vacation responder that makes no sense to me and since I'm not a mail expert, I'm hoping this might make sense to somebody. We are using postfix 2.5.9, postfix admin 2.3.2 . My boss was going on vacation so I setup the "set vacation" message while she was awa

Re: Windows 2003 / OpenSSL 1.x interoperability

2014-04-24 Thread Viktor Dukhovni
On Thu, Apr 24, 2014 at 09:24:39AM +0200, Philipp Gesang wrote: > The system was patched appropriately and capable of making 3DES > connections. It did, however fail to accept connections without > tweaking due to the multitude of additional cipher suites > available in OpenSSL 1.0.1g. Were the p

Re: Windows 2003 / OpenSSL 1.x interoperability

2014-04-24 Thread Philipp Gesang
-<| Quoting Viktor Dukhovni , on Thursday, 2014-04-24 13:15:54 |>- > On Thu, Apr 24, 2014 at 09:24:39AM +0200, Philipp Gesang wrote: > > > The system was patched appropriately and capable of making 3DES > > connections. It did, however fail to accept connections without > > tweaking due to the m

Re: server side postfix tactics.

2014-04-24 Thread Ron Wheeler
People use phones with our e-mail setup. ( There are only a few dinosaurs using a desktop for communication). On 23/04/2014 11:14 PM, John Griessen wrote: On 04/23/2014 08:30 PM, Ron Wheeler wrote: If you are using Postfix, you will find the recipes in "The Book of Postfix" which is worth b

Re: Windows 2003 / OpenSSL 1.x interoperability

2014-04-24 Thread Viktor Dukhovni
On Thu, Apr 24, 2014 at 04:05:54PM +0200, Philipp Gesang wrote: > > Were the patches in question for Exchange 2003 or for Microsoft's > > Schannel SSL/TLS library? > > According to the client the entire system was on the latest > patchlevel. I'm afraid I can't be more specific than that. That's

Re: Cassandra/NoSQL table support

2014-04-24 Thread List
On 4/23/14, 3:24 PM, Wietse Venema wrote: List: Are there any plans or existing projects that support connecting Postfix to a Cassandra cluster to execute CQL queries for table lookups? Or any other NoSQL databases? If someone has a plan, then they are welcome to implement it! For a simple ex

Re: Cassandra/NoSQL table support

2014-04-24 Thread Wietse Venema
List: > On 4/23/14, 3:24 PM, Wietse Venema wrote: > > List: > >> Are there any plans or existing projects that support connecting Postfix > >> to a Cassandra cluster to execute CQL queries for table lookups? Or any > >> other NoSQL databases? > > If someone has a plan, then they are welcome to imp

Re: Accept external SMTP traffic only from MX hosts

2014-04-24 Thread Ron Wheeler
On 23/04/2014 7:43 PM, John Griessen wrote: On 04/23/2014 04:07 PM, Ron Wheeler wrote: Another approach to reduce SPAM would be to use fail2ban for a "reasonable" period to shut out IP addresses for a "reasonable" period that are sending a "lot" of SPAM in a "short" period. Hi, Are you mean

Re: lost mail because of vacation responser

2014-04-24 Thread Noel Jones
On 4/24/2014 7:31 AM, Charles Richard wrote: > Hi, > > I have an issue with the postfix vacation responder that makes no > sense to me and since I'm not a mail expert, I'm hoping this might > make sense to somebody. > > We are using postfix 2.5.9, postfix admin 2.3.2 . > > My boss was going on v

Feature Discussion: Handling large numbers of IPv6 Remote Sessions in Anvil

2014-04-24 Thread Ray Hunter
Hi. Long time user of postfix here wanting to discuss Anvil. In IPv4, the max number of sessions per remote site is pretty much limited by the scarcity of IPv4 together with 65535 source port numbers. So individual remote sites were limited in what they could do by the underlying infrastructur

Re: Feature Discussion: Handling large numbers of IPv6 Remote Sessions in Anvil

2014-04-24 Thread Wietse Venema
Ray Hunter: > Can Anvil store enough state to be able to track (and filter) a DoS > attack or resource depletion attack from an individual IPv6 site, whilst > still being able to provide service to other remote sites, and not > hogging the host machines resources entirely? Anvil currently does

Re: Feature Discussion: Handling large numbers of IPv6 Remote Sessions in Anvil

2014-04-24 Thread Robert Schetterer
Am 24.04.2014 20:40, schrieb Ray Hunter: > The parameters would be: > single attacker with access to a few /64's or /48's of address space. > Not trying to fend off a distributed million-node botnet. > mail server with 100Mbps full-duplex Internet connection = 5 > sessions per second approx (10

Proper location for content_filter?

2014-04-24 Thread Tim Hogan
I was looking for a way to skip the content_filter for connections to localhost. Looking at http://www.postfix.org/FILTER_README.html I found that the only way was to configure each interface in the master.cf file. So what I had was the following line in my main.cf content_filter = smtp-amavis:[

Re: Proper location for content_filter?

2014-04-24 Thread Noel Jones
On 4/24/2014 8:21 PM, Tim Hogan wrote: > I was looking for a way to skip the content_filter for connections to > localhost. Looking at http://www.postfix.org/FILTER_README.html I found > that the only way was to configure each interface in the master.cf > file. So what I had was the following lin