Re: Postfix incompatibility safety net

2014-10-02 Thread Birta Levente
On 01/10/2014 18:57, Wietse Venema wrote: Postfix will log all uses of any old default value that will be affected by an incompatible change. This is not implemented yet (I installed 20141001 snapshot)? Or there is other way to see the affected parameters? Thanks, -- Levi

header_checks is checked before sender_access

2014-10-02 Thread Alberto Lepe
There is a customer that is sending mails from excel using a banned client in the server "header_checks" restrictions (client can not be changed due to technical restrictions). I allowed the customer in sender_access, however postfix is still blocking it. How can I set "sender_access" to be before

Re: header_checks is checked before sender_access

2014-10-02 Thread Alberto Lepe
On Thu, Oct 2, 2014 at 5:27 PM, Alberto Lepe wrote: > There is a customer that is sending mails from excel using a banned client > in the server "header_checks" restrictions (client can not be changed due > to technical restrictions). > I allowed the customer in sender_access, however postfix is

Book

2014-10-02 Thread Mike Cardwell
What (if there is one) is the current "recommended" book for learning Postfix? I've come across "The Book of Postfix" and "The Definitive Guide to Postfix", but the both seem to have been released years ago and I'm assuming much of the material is out of date now... Regards, -- Mike Cardwell ht

Re: Postfix incompatibility safety net

2014-10-02 Thread Fernando Maior
Wietse, That safety net of yours should be a fantastic tool, and I congratulate you for the idea and implementation. Also, I am happy for using postfix, it seems it is the only smtp service with so much valuable and good contributions from the developers and contributors net. Best regards, --- Fe

Re: Book

2014-10-02 Thread Patrick Ben Koetter
* Mike Cardwell : > What (if there is one) is the current "recommended" book for learning > Postfix? I've come across "The Book of Postfix" and "The Definitive > Guide to Postfix", but the both seem to have been released years ago > and I'm assuming much of the material is out of date now... The d

Re: header_checks is checked before sender_access

2014-10-02 Thread Charles Marcus
On 10/2/2014 4:37 AM, Alberto Lepe wrote: > On Thu, Oct 2, 2014 at 5:27 PM, Alberto Lepe > wrote: > > There is a customer that is sending mails from excel using a > banned client in the server "header_checks" restrictions (client > can not be changed due to tech

Re: Postfix incompatibility safety net

2014-10-02 Thread Wietse Venema
Birta Levente: > On 01/10/2014 18:57, Wietse Venema wrote: > > Postfix will log all uses of any old default value that will > > be affected by an incompatible change. > This is not implemented yet (I installed 20141001 snapshot)? Or there is > other way to see the affected parameters? It is logge

Re: Postfix incompatibility safety net

2014-10-02 Thread Birta Levente
On 02/10/2014 14:17, Wietse Venema wrote: Birta Levente: On 01/10/2014 18:57, Wietse Venema wrote: Postfix will log all uses of any old default value that will be affected by an incompatible change. This is not implemented yet (I installed 20141001 snapshot)? Or there is other way to see the a

Possible SHA-256 SSL cert problems?

2014-10-02 Thread Per Thorsheim
Mozilla and others have reported on old web clients that doesn't support the use of new SHA-256 signed SSL certificates on websites. In a recent thread at Mozilla https://bugzilla.mozilla.org/show_bug.cgi?id=1064387#c6, there's a reference to Qualys: "At this time, a site could use two certificate

Re: header_checks is checked before sender_access

2014-10-02 Thread li...@rhsoft.net
Am 02.10.2014 um 13:16 schrieb Charles Marcus: > On 10/2/2014 4:37 AM, Alberto Lepe wrote: >> On Thu, Oct 2, 2014 at 5:27 PM, Alberto Lepe > > wrote: >> >> There is a customer that is sending mails from excel using a banned >> client in the server "header_checks" >>

Re: Possible SHA-256 SSL cert problems?

2014-10-02 Thread li...@rhsoft.net
Am 02.10.2014 um 13:48 schrieb Per Thorsheim: > Mozilla and others have reported on old web clients that doesn't support > the use of new SHA-256 signed SSL certificates on websites. In a recent > thread at Mozilla > https://bugzilla.mozilla.org/show_bug.cgi?id=1064387#c6, there's a > reference to

Re: Postfix incompatibility safety net

2014-10-02 Thread Wietse Venema
Birta Levente: > On 02/10/2014 14:17, Wietse Venema wrote: > > Birta Levente: > >> On 01/10/2014 18:57, Wietse Venema wrote: > >>> Postfix will log all uses of any old default value that will > >>> be affected by an incompatible change. > >> This is not implemented yet (I installed 20141001 snapsho

Re: Possible SHA-256 SSL cert problems?

2014-10-02 Thread Wietse Venema
Per Thorsheim: > Mozilla and others have reported on old web clients that doesn't support > the use of new SHA-256 signed SSL certificates on websites. In a recent > thread at Mozilla > https://bugzilla.mozilla.org/show_bug.cgi?id=1064387#c6, there's a > reference to Qualys: > > "At this time, a s

Re: header_checks is checked before sender_access

2014-10-02 Thread Wietse Venema
Alberto Lepe: > There is a customer that is sending mails from excel using a banned client > in the server "header_checks" restrictions (client can not be changed due > to technical restrictions). > I allowed the customer in sender_access, however postfix is still blocking > it. > How can I set "se

Re: Book

2014-10-02 Thread Stephen Satchell
On 10/02/2014 01:44 AM, Mike Cardwell wrote: > What (if there is one) is the current "recommended" book for learning > Postfix? I've come across "The Book of Postfix" and "The Definitive > Guide to Postfix", but the both seem to have been released years ago > and I'm assuming much of the material i

Re: Possible SHA-256 SSL cert problems?

2014-10-02 Thread Per Thorsheim
Den 02.10.2014 14:38, skrev Wietse Venema: > Per Thorsheim: >> Mozilla and others have reported on old web clients that doesn't support >> the use of new SHA-256 signed SSL certificates on websites. In a recent >> thread at Mozilla >> https://bugzilla.mozilla.org/show_bug.cgi?id=1064387#c6, there's

Re: Possible SHA-256 SSL cert problems?

2014-10-02 Thread Wietse Venema
Per Thorsheim: > "If connecting client/server supports SHA-256 signed cert than use that > from our side, else fallback to SHA-1 certificate from our side, with > fallback to plaintext as last resort." This will have to wait for Viktor. Wietse

Re: Book

2014-10-02 Thread Wietse Venema
Patrick Ben Koetter: > * Mike Cardwell : > > What (if there is one) is the current "recommended" book for learning > > Postfix? I've come across "The Book of Postfix" and "The Definitive > > Guide to Postfix", but the both seem to have been released years ago > > and I'm assuming much of the materi

Re: Book

2014-10-02 Thread Venkat
On Oct 2, 2014 1:44 AM, "Mike Cardwell" wrote: > > What (if there is one) is the current "recommended" book for learning > Postfix? I've come across "The Book of Postfix" and "The Definitive > Guide to Postfix", but the both seem to have been released years ago > and I'm assuming much of the mater

Re: Postfix incompatibility safety net

2014-10-02 Thread Birta Levente
On 02/10/2014 15:36, Wietse Venema wrote: Birta Levente: On 02/10/2014 14:17, Wietse Venema wrote: Birta Levente: On 01/10/2014 18:57, Wietse Venema wrote: Postfix will log all uses of any old default value that will be affected by an incompatible change. This is not implemented yet (I insta

Re: Postfix incompatibility safety net

2014-10-02 Thread Wietse Venema
Birta Levente: > > The full story is in the RELEASE_NOTES. I will move that text into > > postconf.5. > > > > Other than that, do the solution and documentation make sense? > > > > Wietse > After reading the RELEASE_NOTES too, I'm a little bit confused: > > Let's say I haven't specified at al

Forwarding mail to hotmail.com

2014-10-02 Thread Daniele Nicolodi
Hello, I have a system with a few local users where some of them are configured for forwarding all incoming messages to external addresses via the use of .forward. One of those users forwards mail to an hotmail.com address. When mail is delivered to this address this is what happens: > Oct 2 1

Re: Forwarding mail to hotmail.com

2014-10-02 Thread li...@rhsoft.net
Am 02.10.2014 um 16:10 schrieb Daniele Nicolodi: > I have a system with a few local users where some of them are configured > for forwarding all incoming messages to external addresses via the use > of .forward. > > One of those users forwards mail to an hotmail.com address. > > When mail is del

Re: Forwarding mail to hotmail.com

2014-10-02 Thread li...@rhsoft.net
Am 02.10.2014 um 16:16 schrieb li...@rhsoft.net: > Am 02.10.2014 um 16:10 schrieb Daniele Nicolodi: >> I have a system with a few local users where some of them are configured >> for forwarding all incoming messages to external addresses via the use >> of .forward. >> >> One of those users forward

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Daniele Nicolodi
On 02/10/14 16:16, li...@rhsoft.net wrote: > > Am 02.10.2014 um 16:10 schrieb Daniele Nicolodi: >> I have a system with a few local users where some of them are configured >> for forwarding all incoming messages to external addresses via the use >> of .forward. >> >> One of those users forwards ma

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Daniele Nicolodi
On 02/10/14 16:22, li...@rhsoft.net wrote: > > Am 02.10.2014 um 16:16 schrieb li...@rhsoft.net: >> Am 02.10.2014 um 16:10 schrieb Daniele Nicolodi: >>> I have a system with a few local users where some of them are configured >>> for forwarding all incoming messages to external addresses via the us

Re: Forwarding mail to hotmail.com

2014-10-02 Thread li...@rhsoft.net
Am 02.10.2014 um 16:27 schrieb Daniele Nicolodi: > On 02/10/14 16:22, li...@rhsoft.net wrote: >> Am 02.10.2014 um 16:16 schrieb li...@rhsoft.net: >>> Am 02.10.2014 um 16:10 schrieb Daniele Nicolodi: I have a system with a few local users where some of them are configured for forwarding a

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Viktor Dukhovni
On Thu, Oct 02, 2014 at 04:10:04PM +0200, Daniele Nicolodi wrote: > > Oct 2 13:50:59 zed postfix/smtpd[1063]: NOQUEUE: reject: RCPT from > > bay004-omc1s27.hotmail.com[65.54.190.38]: 450 4.1.8 > > : Sender address rejected: > > Domain not found; from= > > to= proto=ESMTP helo= > > Oct 2 13:5

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Viktor Dukhovni
On Thu, Oct 02, 2014 at 04:43:13PM +0200, li...@rhsoft.net wrote: > what makes you sure that your outgoing mail and the incoming connection > are related? for that evidence it needs to happen almost every time There is little reason for *you* to be so sure they aren't. Please back off. Thanks.

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Daniele Nicolodi
On 02/10/14 16:43, li...@rhsoft.net wrote: > Am 02.10.2014 um 16:27 schrieb Daniele Nicolodi: >> The connection to the delivery attempt from accounts.microsoft.com to >> grinta.net is correlated to the forwarding only by its timing > > what makes you sure that your outgoing mail and the incoming c

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Daniele Nicolodi
On 02/10/14 16:49, Viktor Dukhovni wrote: > On Thu, Oct 02, 2014 at 04:10:04PM +0200, Daniele Nicolodi wrote: > >>> Oct 2 13:50:59 zed postfix/smtpd[1063]: NOQUEUE: reject: RCPT from >>> bay004-omc1s27.hotmail.com[65.54.190.38]: 450 4.1.8 >>> : Sender address rejected: >>> Domain not found; fr

Re: Postfix incompatibility safety net

2014-10-02 Thread Viktor Dukhovni
On Thu, Oct 02, 2014 at 08:36:47AM -0400, Wietse Venema wrote: > Other than that, do the solution and documentation make sense? I for one this is a sound idea. I said as much back in Feb 2004: http://archives.neohapsis.com/archives/postfix/2004-02/1020.html While we are talking about t

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Viktor Dukhovni
On Thu, Oct 02, 2014 at 04:59:45PM +0200, Daniele Nicolodi wrote: > Sending a message directly to the user account does not result in a > delivery attempt from account.microsoft.com, therefore I believe there > is not an auto-responder in action on the user account. In that case something more co

Re: Possible SHA-256 SSL cert problems?

2014-10-02 Thread Viktor Dukhovni
On Thu, Oct 02, 2014 at 01:48:10PM +0200, Per Thorsheim wrote: > Mozilla and others have reported on old web clients that doesn't support > the use of new SHA-256 signed SSL certificates on websites. In a recent > thread at Mozilla > https://bugzilla.mozilla.org/show_bug.cgi?id=1064387#c6, there's

Re: Possible SHA-256 SSL cert problems?

2014-10-02 Thread Viktor Dukhovni
On Thu, Oct 02, 2014 at 02:54:45PM +0200, Per Thorsheim wrote: > "If connecting client/server supports SHA-256 signed cert than use that > from our side, else fallback to SHA-1 certificate from our side, with > fallback to plaintext as last resort." This is not possible due to TLS protocol limita

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Blake Hudson
li...@rhsoft.net wrote on 10/2/2014 9:16 AM: Am 02.10.2014 um 16:10 schrieb Daniele Nicolodi: I have a system with a few local users where some of them are configured for forwarding all incoming messages to external addresses via the use of .forward. One of those users forwards mail to an hotm

Re: Forwarding mail to hotmail.com

2014-10-02 Thread Viktor Dukhovni
[ Bcc to someone at Microsoft who may be able to fix this. ] On Thu, Oct 02, 2014 at 10:52:52AM -0500, Blake Hudson wrote: > FYI, Microsoft took records for account.microsoft.com out of DNS yesterday. > I attempted to reach someone at Microsoft that was clueful or helpful, but > had no success at

Re: Book

2014-10-02 Thread phil
On 02/10/14 23:22, Venkat wrote: On Oct 2, 2014 1:44 AM, "Mike Cardwell" mailto:post...@lists.grepular.com>> wrote: > > What (if there is one) is the current "recommended" book for learning > Postfix? I've come across "The Book of Postfix" and "The Definitive > Guide to Postfix", but the bo

Re: Book

2014-10-02 Thread Jerry
On Fri, 03 Oct 2014 07:08:17 +1000, phil stated: > > On 02/10/14 23:22, Venkat wrote: > > > > On Oct 2, 2014 1:44 AM, "Mike Cardwell" > > wrote: > > > > > > What (if there is one) is the current "recommended" book for learning > > > Postfix? I've come across