postfix, cyrus imap, backscatter?

2015-02-01 Thread Carl Brewer
G'day, I've been running sendmail for years with cyrus and realtime address checking to (supposedly!) stop backscatter, but it seems to be broken, so it's probably a good time to migrate to postfix (been putting off for years ...) This document isn't very helpful : http://www.postfix.org/CY

Re: postfix, cyrus imap, backscatter?

2015-02-01 Thread Robert Schetterer
Am 01.02.2015 um 08:59 schrieb Carl Brewer: > > G'day, > I've been running sendmail for years with cyrus and realtime address > checking to (supposedly!) stop backscatter, but it seems to be broken, > so it's probably a good time to migrate to postfix (been putting off for > years ...) > > This d

Re: hostname does not resolve

2015-02-01 Thread LuKreme
> On Jan 31, 2015, at 8:59 PM, Bill Cole > wrote: > > I do not use that rejection criteria but instead use > reject_unknown_reverse_client_hostname, I do use that, and have for a long time. > which only requires that a PTR exists. On other systems I manage, I mostly DO > use reject_unknown_

Re: Am I backscattering?

2015-02-01 Thread LuKreme
On Jan 31, 2015, at 9:29 PM, Bill Cole wrote: > Which doesn't mean you don't have some other Postfix binaries lurking... Good point. There are files in /usr/sbin/ and in /usr/local/sbin/ and it appears that the command directory is set to the latter, which appears to be 2.10.5 Seeing what bre

Re: TLS Library Problem

2015-02-01 Thread LuKreme
On Jan 31, 2015, at 7:15 PM, Viktor Dukhovni wrote: > On Sat, Jan 31, 2015 at 05:16:33PM -0700, LuKreme wrote: > >> The start was just date stamp info and PID: >> >> Jan 31 01:52:10 mail postfix/smtpd[62297]: warning: TLS library problem: >> error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 ale

Re: Am I backscattering?

2015-02-01 Thread li...@rhsoft.net
Am 01.02.2015 um 10:01 schrieb LuKreme: On Jan 31, 2015, at 9:29 PM, Bill Cole wrote: Which doesn't mean you don't have some other Postfix binaries lurking... Good point. There are files in /usr/sbin/ and in /usr/local/sbin/ and it appears that the command directory is set to the latter,

Command pipelining between fully trusted Postfix servers

2015-02-01 Thread Christian Rößner
Hi, I searched allover the docs, but could not find information, if the smtp-client of Postfix can do the PIPELIING extension. I have two Postfix instances on the same host. One is MX-out and the other one is a MSA for clients. The MSA uses dane-only, while the server has the fingerprint of th

Re: postfix, cyrus imap, backscatter?

2015-02-01 Thread Carl Brewer
On 1/02/2015 7:21 PM, Robert Schetterer wrote: and where is your postfix conf..? read i.e http://de.postfix.org/httpmirror/postconf.5.html#smtpd_reject_unlisted_recipient as well as other setup examples and conf stuff I checked the server from another server, not telnet'ing from localhost

Re: TLS Library Problem

2015-02-01 Thread DTNX Postmaster
On 01 Feb 2015, at 10:13, LuKreme wrote: > On Jan 31, 2015, at 7:15 PM, Viktor Dukhovni > wrote: >> On Sat, Jan 31, 2015 at 05:16:33PM -0700, LuKreme wrote: >> >>> The start was just date stamp info and PID: >>> >>> Jan 31 01:52:10 mail postfix/smtpd[62297]: warning: TLS library problem: >>>

SMTP password authentication problem

2015-02-01 Thread Vishal Agarwal
Hi, We are using zimbra 8.0. My postfix is allowing to send email without password authentication. Although this is for inter-domain but still it should ask for password. I am in trouble. Kindly advise some solution. Regards, Vishal Agarwal

Re: Command pipelining between fully trusted Postfix servers

2015-02-01 Thread Wietse Venema
Christian R??ner: > I searched allover the docs, but could not find information, if > the smtp-client of Postfix can do the PIPELIING extension. Have you tried "man 8 smtp"? Wietse SMTP(8)SMTP(8) NAME smtp - Postfix

Re: Am I backscattering?

2015-02-01 Thread Wietse Venema
LuKreme: > >> $ postfix reload > >> postfix/postlog: fatal: bad string length 2 > 1: recipient_delimiter = +_ > >> postsuper: fatal: bad string length 2 > 1: recipient_delimiter = +_ > >> mail /etc/postfix] $ postconf recipient_delimiter mail_version > >> recipient_delimiter = +_ > >> mail_version

Re: Command pipelining between fully trusted Postfix servers

2015-02-01 Thread Christian Rößner
> Am 01.02.2015 um 13:58 schrieb Wietse Venema : > > Christian R??ner: >> I searched allover the docs, but could not find information, if >> the smtp-client of Postfix can do the PIPELIING extension. > > Have you tried "man 8 smtp“? Yes > Wietse > > SMTP(8)

Re: SMTP password authentication problem

2015-02-01 Thread Postfix User
On Sun, 1 Feb 2015 18:26:18 +0530, Vishal Agarwal stated: > We are using zimbra 8.0. My postfix is allowing to send email without > password authentication. Although this is for inter-domain but still it > should ask for password. 1) Don't use HTML email. Gmail has an option for TEXT. Use it when

Re: Command pipelining between fully trusted Postfix servers

2015-02-01 Thread Christian Rößner
>> RFC 2821 (SMTP protocol) >> --==>> RFC 2920 (SMTP Pipelining) <<==— > > Ok, I missed that, but… Ok, just looked at the RFC. I thought, it required a initial command, but it doesn’t ;-) Simply start pipelining, … Thanks Christian -- Bachelor of Science Informatik Erlenwiese 14, 36304 Al

Re: Command pipelining between fully trusted Postfix servers

2015-02-01 Thread Wietse Venema
Christian R??ner: > > ... > > RFC 1651 (SMTP service extensions) ... > > --==>> RFC 2920 (SMTP Pipelining) <<==? ... > > ? do I need an option to enable it, or does Postfix use it > automatically, if announced by the server? Instead of reading the RFC for you on the mailing list, I reco

Re: SMTP password authentication problem

2015-02-01 Thread Vishal Agarwal
Dear Sir, Pl find the below. alias_maps = hash:/etc/aliases always_add_missing_headers = yes always_bcc = xx...@xxx. bounce_notice_recipient = postmaster bounce_queue_lifetime = 6h broken_sasl_auth_clients = yes command_directory = /opt/zimbra/postfix/sbin config_directory = /opt/zimb

Re: TLS Library Problem

2015-02-01 Thread Viktor Dukhovni
On Sun, Feb 01, 2015 at 02:13:46AM -0700, LuKreme wrote: > > Which confirms that the problem is with your SMTP server as expected. > > It does? Sorry, confirms that the problem is observed on the server side. The evidence to conclude which side is not there. However, both Postfix and OpenSSL ar

Re: SMTP password authentication problem

2015-02-01 Thread Viktor Dukhovni
On Sun, Feb 01, 2015 at 07:07:42PM +0530, Vishal Agarwal wrote: > bounce_queue_lifetime = 6h > maximal_queue_lifetime = 1d Too short. The RFC recommended time is 5 days. Don't set these shorter than 2 days, allowing sites 1 day to notice a problem and another day to fix it. > message_size_limi

Backscatter

2015-02-01 Thread John
Although I do not see any signs of backscatter in my mail logs. Is there a way of testing to ensure that I am not a potential source of backscatter?

Re: Am I backscattering?

2015-02-01 Thread LuKreme
On 01 Feb 2015, at 03:13 , li...@rhsoft.net wrote: > if you build software from source build native packages for your OS, that > cleans up things and avoids the system pulling the OS vendors version which > conflicts with something below /usr/local I normally do that, but in this case I was upgr

Re: TLS Library Problem

2015-02-01 Thread LuKreme
On 01 Feb 2015, at 05:41 , DTNX Postmaster wrote: > By the way, CA-signed certificates start at less than $10/year, so if you > ever do run into an issue which might be resolved by getting one, and your > configuration isn't too complex, I would suggest spending that little bit of > money. > >

Re: TLS Library Problem

2015-02-01 Thread li...@rhsoft.net
Am 01.02.2015 um 22:26 schrieb LuKreme: On 01 Feb 2015, at 05:41 , DTNX Postmaster wrote: By the way, CA-signed certificates start at less than $10/year, so if you ever do run into an issue which might be resolved by getting one, and your configuration isn't too complex, I would suggest spe

Re: TLS Library Problem

2015-02-01 Thread Viktor Dukhovni
On Sun, Feb 01, 2015 at 10:32:53PM +0100, li...@rhsoft.net wrote: > just make it once in your lifetime, create a template for default params and > a script with minimal maintainance like for hash-method and keylength - the > script below in any case builds a self signed PEM with key and cert as we

Re: TLS Library Problem

2015-02-01 Thread li...@rhsoft.net
Am 01.02.2015 um 23:15 schrieb Viktor Dukhovni: On Sun, Feb 01, 2015 at 10:32:53PM +0100, li...@rhsoft.net wrote: just make it once in your lifetime, create a template for default params and a script with minimal maintainance like for hash-method and keylength - the script below in any case bui

Re: TLS Library Problem

2015-02-01 Thread Viktor Dukhovni
On Sun, Feb 01, 2015 at 11:42:30PM +0100, li...@rhsoft.net wrote: > >For MSAs offering service to Joe Public, sure you'll want a CA-issued > >cert. > > I only referred to "the interval between expiry is long enough that I get to > learn everything over from first principles every time I have to r

Postfix 3.0 release candidate

2015-02-01 Thread Wietse Venema
delivery status notification filters, to work-in-progress support for internationalized email addresses. The experimental release Postfix-3.1-20150201 contains the same code as the Postfix 3.0 stable release candidate. Wietse

Re: SMTP password authentication problem

2015-02-01 Thread Vishal Agarwal
Hi Victor, Thanks a lot for all the problems marked out in my postfix config file I will incorporate a those all and test further. Regards, Vishal Agarwal On Sun, Feb 1, 2015 at 11:41 PM, Viktor Dukhovni wrote: > On Sun, Feb 01, 2015 at 07:07:42PM +0530, Vishal Agarwal wrote: > >> bounce_queue