sasl authentication - how to hash password maps

2015-12-16 Thread Zalezny Niezalezny
Dear Colleagues, I`m trying to establish TLS connection between our postfix MTA and Postfix relay server protected by password. At the moment my password map file looks like this. Plain text with domain, username and password. [root@server01 postfix]# cat sasl_passwd relay01.local test:testXX

Re: sasl authentication - how to hash password maps

2015-12-16 Thread Koko Wijatmoko
On Wed, 16 Dec 2015 09:08:34 +0100 Zalezny Niezalezny wrote: > Is it possible to hash that password some how ? This password shouldnt be > visible for the user. > If yes, how to do it then ? > the answer is here.. password must be plain-text: http://www.postfix.org/SASL_README.html#client_sasl_

[Postfix] Deferred queue ...

2015-12-16 Thread Baptiste Lhoste
Hi everybody, Could someone help me to understand the following situation : Our active queue seems empty : qshape -s active | head T 5 10 20 40 80 160 320 640 1280 1280+ TOTAL 0 0 0 0 0 0 0 0 0 0 0

Re: postfix and multiple TLS certificates (SNI support?)

2015-12-16 Thread Michael Storz
Am 2015-12-15 20:36, schrieb Viktor Dukhovni: On Mon, Dec 14, 2015 at 04:34:58PM +, Viktor Dukhovni wrote: So, we've managed to hold off on offering SNI support for a decade since TLS was integrated into Postfix 2.2. I just wanted to see whether anyone still wanted it in Postfix, but perha

postscreen: DNSBL rank not seen in logs for some ip addresses

2015-12-16 Thread btb
hi- i've become accustomed to seeing log passages like this: >grep -iF '[142.4.19.85]:52366' mail.log Dec 16 09:41:09 mta1 postfix/postscreen[27678]: CONNECT from [142.4.19.85]:52366 to [10.3.70.6]:25 Dec 16 09:41:15 mta1 postfix/postscreen[27678]: DNSBL rank 5 for [142.4.19.85]:52366 Dec 16 0

Re: postfix and multiple TLS certificates (SNI support?)

2015-12-16 Thread Alice Wonder
On 12/16/2015 02:03 AM, Michael Storz wrote: Am 2015-12-15 20:36, schrieb Viktor Dukhovni: On Mon, Dec 14, 2015 at 04:34:58PM +, Viktor Dukhovni wrote: So, we've managed to hold off on offering SNI support for a decade since TLS was integrated into Postfix 2.2. I just wanted to see whet

Re: [Postfix] Deferred queue ...

2015-12-16 Thread Noel Jones
On 12/16/2015 3:55 AM, Baptiste Lhoste wrote: > > But our deferred queue contains almost 100 000 emails : > qshape -s deferred | head >T 5 10 20 40 80 160 320 640 > 1280 1280+ > TOTAL 98743 0 0 0 0 0 8233 20178 39254 > 31078

Re: postscreen: DNSBL rank not seen in logs for some ip addresses

2015-12-16 Thread Wietse Venema
btb: > hi- > > i've become accustomed to seeing log passages like this: > > >grep -iF '[142.4.19.85]:52366' mail.log > Dec 16 09:41:09 mta1 postfix/postscreen[27678]: CONNECT from > [142.4.19.85]:52366 to [10.3.70.6]:25 > Dec 16 09:41:15 mta1 postfix/postscreen[27678]: DNSBL rank 5 for > [142.

Re: postfix and multiple TLS certificates (SNI support?)

2015-12-16 Thread Michael Storz
Am 2015-12-16 16:26, schrieb Alice Wonder: But with port 25, certificate authorities do not matter, so an admin running the same smtp server on multiple hostnames can generate a new self-signed cert at no cost every time they add a domain that resolves to that IP address. Thus even with multipl

Re: postfix and multiple TLS certificates (SNI support?)

2015-12-16 Thread Alice Wonder
On 12/16/2015 09:06 AM, Michael Storz wrote: Am 2015-12-16 16:26, schrieb Alice Wonder: But with port 25, certificate authorities do not matter, so an admin running the same smtp server on multiple hostnames can generate a new self-signed cert at no cost every time they add a domain that reso

Re: [Postfix] Deferred queue ...

2015-12-16 Thread Viktor Dukhovni
On Wed, Dec 16, 2015 at 09:47:48AM -0600, Noel Jones wrote: > > Second question, the domain.aaa and domain.bbb returned by the > > command on the deferred queue correspond to the sender domain or the > > recipient domain ? > > recipient. With "qshape -s", the grouping is by sender: Usage: q