Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Matthias Andree
Am 21.03.2015 um 00:13 schrieb Wietse Venema: > Viktor Dukhovni: >> I am curious what: >> >> ldd /usr/local/lib/libssl.so.8 >> >> reports and whether there are headers and or shared objects for >> libz in ports? > > In a FreeBSD 10.1 testvm: > > # ldd -a /usr/local/lib/libssl.so.8 > /usr/loca

Transitioning from 2.5.5 to 2.10.5

2015-03-21 Thread Steve Matzura
I am usually fairly good at this, but some of the organizational and configuration symbol-name differences between Postfix 2.5.5 and 2.10.5 are, well, way out there! :-) I thought I could drop the 2.5.5 .conf file into place on the 2.10.5 system. No! To many symbols that have changed, or section fo

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 11:06, Matthias Andree pisze: > Am 21.03.2015 um 00:13 schrieb Wietse Venema: >> Viktor Dukhovni: >>> I am curious what: >>> >>> ldd /usr/local/lib/libssl.so.8 >>> >>> reports and whether there are headers and or shared objects for >>> libz in ports? >> >> In a FreeBSD 10.1

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 11:06, Matthias Andree pisze: > Am 21.03.2015 um 00:13 schrieb Wietse Venema: >> Viktor Dukhovni: >>> I am curious what: >>> >>> ldd /usr/local/lib/libssl.so.8 >>> >>> reports and whether there are headers and or shared objects for >>> libz in ports? >> >> In a FreeBSD 10.1

Re: Transitioning from 2.5.5 to 2.10.5

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 02:53:12PM -0400, Steve Matzura wrote: > I am usually fairly good at this, but some of the organizational and > configuration symbol-name differences between Postfix 2.5.5 and 2.10.5 > are, well, way out there! :-) I thought I could drop the 2.5.5 .conf > file into place on

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 09:22:25PM +0100, ?ukasz W?sikowski wrote: > I've restored mail server to previous state (with openssl from ports > with zlib enabled). Some data: > > # pkg query "%Ok %Ov" openssl > ZLIB on > > It seems that ./config sets zlib as zlib-dynamic: > > # grep zlib > ./config

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: > Showing no compile-time zlib dependencies, because zlib is dynamically > loaded. I've never tested OpenSSL's zlib-dynamic support. Have > you tried (in separate windows or otherwise concurrent, with the > server started first): > > $

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: > Showing no compile-time zlib dependencies, because zlib is dynamically > loaded. I've never tested OpenSSL's zlib-dynamic support. Have > you tried (in separate windows or otherwise concurrent, with the > server started first): > > $

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 09:50:03PM +0100, ?ukasz W?sikowski wrote: > > $ openssl s_server -nocert -cipher aNULL -accept 12345 > > > > $ openssl s_client -cipher aNULL -connect localhost:12345 > > That didn't crashed. > Did you ever post "ldd" output for your smtpd? Please do, I can't

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 21:58, Viktor Dukhovni pisze: > On Sat, Mar 21, 2015 at 09:50:03PM +0100, ?ukasz W?sikowski wrote: > >>> $ openssl s_server -nocert -cipher aNULL -accept 12345 >>> >>> $ openssl s_client -cipher aNULL -connect localhost:12345 >> >> That didn't crashed. >> > > Did you

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
?ukasz W?sikowski: > Yes, libz is linked into Postfix. > > # ldd /usr/local/libexec/postfix/smtpd > /usr/local/libexec/postfix/smtpd: > libpcre.so.1 => /usr/local/lib/libpcre.so.1 (0x80089) > libssl.so.7 => /usr/lib/libssl.so.7 (0x800b02000) > libcrypto.so.7 => /lib/lib

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Wietse Venema: > ?ukasz W?sikowski: > > Yes, libz is linked into Postfix. > > > > # ldd /usr/local/libexec/postfix/smtpd > > /usr/local/libexec/postfix/smtpd: > > libpcre.so.1 => /usr/local/lib/libpcre.so.1 (0x80089) > > libssl.so.7 => /usr/lib/libssl.so.7 (0x800b02000) > >

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
?ukasz W?sikowski: > W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: > > > Showing no compile-time zlib dependencies, because zlib is dynamically > > loaded. I've never tested OpenSSL's zlib-dynamic support. Have > > you tried (in separate windows or otherwise concurrent, with the > > server s

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Running openssl s_server and s_client from FreeBSD 10.1 ports successfully negotiates a sesion with zlib compression. As with the OP, Postfix when built with MySQL client has zlib explicitly linked in (my earlier test was done on a system where MySQL by mistake wasn't included in the build). Next

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 22:51, Wietse Venema pisze: > ?ukasz W?sikowski: >> W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: >> >>> Showing no compile-time zlib dependencies, because zlib is dynamically >>> loaded. I've never tested OpenSSL's zlib-dynamic support. Have >>> you tried (in separate wi

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 06:48:23PM -0400, Wietse Venema wrote: > Running openssl s_server and s_client from FreeBSD 10.1 ports > successfully negotiates a sesion with zlib compression. > > As with the OP, Postfix when built with MySQL client has zlib > explicitly linked in (my earlier test was do

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Wietse Venema: > As with the OP, Postfix when built with MySQL client has zlib > explicitly linked in (my earlier test was done on a system where > MySQL by mistake wasn't included in the build). > > Next step is to reproduce the smtpd crash. It negotiates a zlib-compressed session without crashi

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Wietse Venema: > Wietse Venema: > > As with the OP, Postfix when built with MySQL client has zlib > > explicitly linked in (my earlier test was done on a system where > > MySQL by mistake wasn't included in the build). > > > > Next step is to reproduce the smtpd crash. > > It negotiates a zlib-co

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 07:35:51PM -0400, Wietse Venema wrote: > Next step is either for Lukas reproduce my result, or for us to > reproduce his build from ports. Lukas, which port did you use, and > what options did you select? For OpenSSL: $ /usr/local/bin/openssl version -a OpenSSL 1.0.1m 19

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-22 o 00:35, Wietse Venema pisze: > Wietse Venema: >> Wietse Venema: >>> As with the OP, Postfix when built with MySQL client has zlib >>> explicitly linked in (my earlier test was done on a system where >>> MySQL by mistake wasn't included in the build). >>> >>> Next step is to repr

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sun, Mar 22, 2015 at 12:45:05AM +0100, ?ukasz W?sikowski wrote: > This bug is hard to reproduce - smtpd (and smtp also) crashes only when > communicating with certain hosts (for example ebay in my case). I also > saw this problem when this FreeBSD was trying to send e-mail to my other > mail se

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Viktor Dukhovni: > On Sun, Mar 22, 2015 at 12:45:05AM +0100, ?ukasz W?sikowski wrote: > > > This bug is hard to reproduce - smtpd (and smtp also) crashes only when > > communicating with certain hosts (for example ebay in my case). I also > > saw this problem when this FreeBSD was trying to send e

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 08:00:55PM -0400, Wietse Venema wrote: > > /usr/local/bin/openssl s_client -no_ssl2 -cipher aNULL -connect localhost:25 > -starttls smtp > WARNING: can't open config file: /usr/local/openssl/openssl.cnf > CONNECTED(0003) > 3438176:error:140790E5:SSL routines:SSL23

How to set wild card for rbl_override

2015-03-21 Thread L. D. James
I have a service from intuit.com that can't get past my reject_unknown_helo_hostname configuration. I'm trying to use the rbl_override to whitelist all the subhost of intuit.com. However, I can't get it to work. I have tried: /etc/postfix/rbl_override: intuit.comok .intuit.comok *.

Re: How to set wild card for rbl_override

2015-03-21 Thread Noel Jones
On 3/21/2015 7:42 PM, L. D. James wrote: > I have a service from intuit.com that can't get past my > reject_unknown_helo_hostname configuration. I'm trying to use the > rbl_override to whitelist all the subhost of intuit.com. However, I > can't get it to work. Consider if reject_unknown_helo_hos

Re: Transitioning from 2.5.5 to 2.10.5

2015-03-21 Thread Peter
On 03/22/2015 07:53 AM, Steve Matzura wrote: > I am usually fairly good at this, but some of the organizational and > configuration symbol-name differences between Postfix 2.5.5 and 2.10.5 > are, well, way out there! :-) I thought I could drop the 2.5.5 .conf > file into place on the 2.10.5 system.

Re: How to set wild card for rbl_override

2015-03-21 Thread L. D. James
On 03/21/2015 08:53 PM, Noel Jones wrote: On 3/21/2015 7:42 PM, L. D. James wrote: I have a service from intuit.com that can't get past my reject_unknown_helo_hostname configuration. I'm trying to use the rbl_override to whitelist all the subhost of intuit.com. However, I can't get it to work.

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sun, Mar 22, 2015 at 12:21:21AM +, Viktor Dukhovni wrote: > On Sat, Mar 21, 2015 at 08:00:55PM -0400, Wietse Venema wrote: > > > > > /usr/local/bin/openssl s_client -no_ssl2 -cipher aNULL -connect > > localhost:25 -starttls smtp > > WARNING: can't open config file: /usr/local/openssl/ope