Postfix - SMTP mail delivery failed with "Connection timed out" error

2015-01-14 Thread Aravindhan
I have installed postfix mail server in ubuntu machine. I am facing some issues with the mail sending to other domain mail servers (Google, Yahoo, Outlook...). I am using virtual domain to send the email using SMTP of the mail server (say n...@xyz.server.com) When I try to send multiple emails thr

Re: Postfix - SMTP mail delivery failed with "Connection timed out" error

2015-01-14 Thread Wietse Venema
Aravindhan: > * Telnet to the port 25 of the specific smtp server is working randomly > (sometimes works and sometimes not). > * Ping to the SMTP server is always successfull(Telnet to port 25 fails most > of the time). Many ISPs block traffic to remote port 25. Possible solutions: - Connect to

Problem relaying through Virginmedia (ntlworld) with authentication

2015-01-14 Thread Nick Howitt
Hi, My ISP Virginmedia (VM) suddenly made authentication compulsory a couple of days ago. I use Thunderbird relaying through postfix. I did have it working a few years ago on port 587 but now they want port 465. In main.cf I've set: smtp_sasl_auth_enable

Re: Problem relaying through Virginmedia (ntlworld) with authentication

2015-01-14 Thread Wietse Venema
Nick Howitt: > > > > > > > Hi, > > My ISP Virginmedia (VM) suddenly made authentication compulsory a > couple of days ago. I use Thunderbird relaying through postfix. I > did have it working a few years ago on port 587 but now they want > port 465. Deliver

Re: Problem relaying through Virginmedia (ntlworld) with authentication

2015-01-14 Thread Viktor Dukhovni
On Wed, Jan 14, 2015 at 09:26:32PM +, Nick Howitt wrote: >In main.cf I've set: >smtp_sasl_auth_enable = yes >smtp_sasl_security_options = noanonymous >relayhost = [smtp.ntlworld.com]:465 Port 465 is not STARTTLS and is not directly supported by Postfix: http://www.postfix

Re: Problem relaying through Virginmedia (ntlworld) with authentication

2015-01-14 Thread Viktor Dukhovni
On Wed, Jan 14, 2015 at 09:54:38PM +, Viktor Dukhovni wrote: > Then with "verify = 3", stunnel will > verify the peer (until some part of the DN changes). In this case the subject DN does not appear to be decorated with any particularly volatile data. The server's chain is: subject=/C=G

smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Wietse Venema
Wietse Venema: > Delivery to port 465 is not built into the Postfix SMTP client > because that protocol has been obsolete for 10+ years. That said, > it would not take much code to support this in the SMTP client. Looks like this may be done by calling smtp_start_tls() instead of smtp_helo() and

Re: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Viktor Dukhovni
On Wed, Jan 14, 2015 at 05:27:06PM -0500, Wietse Venema wrote: > Wietse Venema: > > Delivery to port 465 is not built into the Postfix SMTP client > > because that protocol has been obsolete for 10+ years. That said, > > it would not take much code to support this in the SMTP client. > > Looks l

Re: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Jan 14, 2015 at 05:27:06PM -0500, Wietse Venema wrote: > > > Wietse Venema: > > > Delivery to port 465 is not built into the Postfix SMTP client > > > because that protocol has been obsolete for 10+ years. That said, > > > it would not take much code to support this in

Re: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Viktor Dukhovni
On Wed, Jan 14, 2015 at 06:08:16PM -0500, Wietse Venema wrote: > > The security level for "smtps" should be at least "encrypt" or > > ideally "secure", though "fingerprint" and "dane-only" might also > > options. We'd need to rule out "may" so as to avoid plaintext > > fallback. > > That does no

Behavior when mailbox limit is reached

2015-01-14 Thread Mullis, Josh (CCI-Atlanta)
Hello, Is there a way to configure postfix to remove old mail when the mailbox size limit is reached instead of new mail being rejected? The basic need is limiting the amount of disk space mailbox files are using without rejecting mail. We have a default postfix install via RHEL 5/6 rpms (versi

PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Jan 14, 2015 at 06:08:16PM -0500, Wietse Venema wrote: > > > > The security level for "smtps" should be at least "encrypt" or > > > ideally "secure", though "fingerprint" and "dane-only" might also > > > options. We'd need to rule out "may" so as to avoid plaintext > >

Re: Behavior when mailbox limit is reached

2015-01-14 Thread li...@rhsoft.net
Am 15.01.2015 um 01:20 schrieb Mullis, Josh (CCI-Atlanta): Is there a way to configure postfix to remove old mail when the mailbox size limit is reached instead of new mail being rejected? The basic need is limiting the amount of disk space mailbox files are using without rejecting mail postf

Re: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Viktor Dukhovni
On Wed, Jan 14, 2015 at 06:08:16PM -0500, Wietse Venema wrote: > I have prelimiary code almost working with little code. You likely did not patch posttls-finger(1). Patch below my signature, sample output: $ ./bin/posttls-finger -F ~/capath/bundle.pem -cw -lsecure "[smtp.ntlworld.com]:465"

Re: Behavior when mailbox limit is reached

2015-01-14 Thread Wietse Venema
Mullis, Josh (CCI-Atlanta): > Hello, > > Is there a way to configure postfix to remove old mail when the > mailbox size limit is reached instead of new mail being rejected? Deleting mailboxes is (will not be) built into Postfix. You can switch to maildir mode, which produces one file per messag

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Viktor Dukhovni
On Wed, Jan 14, 2015 at 07:33:17PM -0500, Wietse Venema wrote: > This proof-of-concept version minimizes scar tissue, by patching > into the existing code path. Things that I might want to change: > > - Move the new smtp_start_tls() call + flags twiddling ito a new > function smtp_smtps() that

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Viktor Dukhovni
On Thu, Jan 15, 2015 at 12:55:26AM +, Viktor Dukhovni wrote: > Perverse configurations with wrapper mode and a security level of > "none" are configuration errors. As is a security level of "may" which is opportunistic and supports cleartext and fallback to cleartext. By the time destination

Postfix with Postscreen and Fail2ban

2015-01-14 Thread David Mehler
Hello, Is anyone running Postfix 2.11 on an f21 machine? I'm using it and am using postscreen which I really like. The system firewall is FirewallD and I'm using fail2ban 0.9.1 to block brute force bot hits on the machine. I've got the jail Fail2ban for Postfix enabled, but the regexp don't appear

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Wietse Venema
Viktor Dukhovni: > > Also, there is no need for smtp_tls_security_level=encrypt since the > > client will not send plaintext anyway. Any smtp_tls_security_level > > that is not "none" will suffice. > > Not quite sure what the TLS library will do if handed a request to > do TLS when the security le

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Viktor Dukhovni
On Wed, Jan 14, 2015 at 09:39:21PM -0500, Wietse Venema wrote: > > Not quite sure what the TLS library will do if handed a request to > > do TLS when the security level happens to be "none". In particular, > > various TLS-related bits for the session may not be set, and crashes > > are possible.

Re: PATCH: smtps support (was: Problem relaying through Virginmedia)

2015-01-14 Thread Viktor Dukhovni
On Thu, Jan 15, 2015 at 03:20:27AM +, Viktor Dukhovni wrote: > And of course with "may", we need to avoid any attempt at cleartext > fallback if we're doing wrapper-mode SMTP. With the previous posttls-finger patch, it was still possible to attempt both wrapper-mode (-w) and TLS disabled (-l

proxymap error with mysql access table

2015-01-14 Thread Arnaud Jayet
Hello, I have a problem with a proxymap mysql access table. I'im using postfix 2.9.6 (Debian Wheezy package with mysql, ldap support). let me explain what i want to do : I migrate mailserver for my company from courier-imap to zimbra ZCS 8.x. During the migration process of an user account/ma

Re: proxymap error with mysql access table

2015-01-14 Thread Viktor Dukhovni
On Thu, Jan 15, 2015 at 07:25:58AM +0100, Arnaud Jayet wrote: > Here is part of my main.cf file: > > smtpd_recipient_restrictions = > check_recipient_access hash:/etc/postfix/users_hold_mail_migration_zimbra, > check_recipient_access > proxy:mysql:/etc/postfix/users_hold_mail_migration_zimbra.my