Broken Link

2017-04-19 Thread Postfix User
I am not really sure where the best place to report this is, so I will just assume this will suffice. On the http://www.postfix.org/docs.html page, the link http://yocum.org/faqs/postfix-tls-sasl.html referring to Postfix SASL + TLS + FreeBSD howto by Tim Yocum is broken. Also, the http://home.pa

Queue active for long time

2017-04-19 Thread Burn Zero
Hi, We are having postfix as on-premise SMTP server and we send email via this SMTP server to O365 cloud. Recently we got throttled by MS and our queue size increased in postfix. I was checking the logs and I found these queue active messages that stayed for long time. ( I have removed some part

Re: mydomain and myhostname

2017-04-19 Thread Wietse Venema
Christoph Pleger: > > - i.e. what you see when you type 'hostname' at the command line, which > > in > > turn is usually taken from the contents of /etc/hostname. And mydomain > > is > > by default derived from myhostname. If you update /etc/hostname you may > > also need to update /etc/hosts. >

Re: Queue active for long time

2017-04-19 Thread Wietse Venema
> 14:00:47 postfix/qmgr[25451]: 748044070E: nrcpt=1 (queue active) > 14:09:17 postfix/qmgr[25704]: 748044070E: nrcpt=1 (queue active) > 14:12:37 postfix/qmgr[25904]: 748044070E: nrcpt=1 (queue active) > 14:30:36 postfix/qmgr[26528]: 748044070E: nrcpt=1 (queue active) > 14:31:08 postfix/qmgr[266

Re: ECDSA and RSA: setting preference

2017-04-19 Thread @lbutlr
On 2017-04-13 (08:54 MDT), Phil Stracchino wrote: > > From today's log only (the rest are compressed): bzgrep "TLS connection established from.*with cipher” \ /var/log/maillog.{0..14}.bz2 | \ awk '{printf("%s %s %s %s\n", $12, $13, $14, $15)}' | \ sort | uniq -c | sort -rn -- Apple broke

Re: ECDSA and RSA: setting preference

2017-04-19 Thread @lbutlr
On 2017-04-13 (11:21 MDT), Viktor Dukhovni wrote: > > smtp_tls_exclude_ciphers = MD5, aDSS, kECDH, kDH, SEED, IDEA, RC2, RC5 I have these, but also LOW, EXPORT, and RC4. Are these not needed? -- Apple broke AppleScripting signatures in Mail.app, so no random signatures.

Re: Do you know an FOSS email system for kids?

2017-04-19 Thread Dedeco Balaco Baco
>> in the last months, I have been searching for an email system with >> some features to make it better for kids, even for younger ages, >> and also their parents. We need a few features to guarantee some >> security to free messaging among known friends, but some >> supervision for unknown addres

Re: ECDSA and RSA: setting preference

2017-04-19 Thread Philip Paeps
On 2017-04-19 13:33:13 (+0200), @lbutlr wrote: On 2017-04-13 (11:21 MDT), Viktor Dukhovni wrote: smtp_tls_exclude_ciphers = MD5, aDSS, kECDH, kDH, SEED, IDEA, RC2, RC5 I have these, but also LOW, EXPORT, and RC4. Are these not needed? That depends on the versions of Postfix and OpenSSL on

Re: ECDSA and RSA: setting preference

2017-04-19 Thread Viktor Dukhovni
> On Apr 19, 2017, at 7:45 AM, Philip Paeps wrote: > >>> smtp_tls_exclude_ciphers = MD5, aDSS, kECDH, kDH, SEED, IDEA, RC2, RC5 >> >> I have these, but also LOW, EXPORT, and RC4. Are these not needed? Reasonably current Postfix releases have "smtp_tls_ciphers = medium", which already excludes

Automatically substitute FQDN of local system in config

2017-04-19 Thread Marat Khalili
Dear all, I'm having trouble creating Postfix config (main.cf) without explicitly writing domain name in it. I'd like both myhostname and mydomain automatically set to output of `hostname -f` or contents of /etc/mailname. However, whatever combinations of myorigin, mydomain and myhostname I d

Re: Automatically substitute FQDN of local system in config

2017-04-19 Thread Viktor Dukhovni
> On Apr 19, 2017, at 10:54 AM, Marat Khalili wrote: > > I'm having trouble creating Postfix config (main.cf) without explicitly > writing domain name in it. I'd like both myhostname and mydomain > automatically set to output of `hostname -f` or contents of /etc/mailname. Email may persist in t

Re: Automatically substitute FQDN of local system in config

2017-04-19 Thread Marat Khalili
Thank you for the reply. I think my question needs clarification. I'm trying to create single configuration file that I'd be able to clone across different servers. Manual correction of this file for every machine is a time-consuming and error-prone step I'd like to avoid. All servers have sta

Re: Automatically substitute FQDN of local system in config

2017-04-19 Thread Philip Paeps
On 2017-04-19 17:54:32 (+0300), Marat Khalili wrote: I'm having trouble creating Postfix config (main.cf) without explicitly writing domain name in it. I'd like both myhostname and mydomain automatically set to output of `hostname -f` or contents of /etc/mailname. However, whatever combination

Re: Automatically substitute FQDN of local system in config

2017-04-19 Thread Marat Khalili
On 19/04/17 18:39, Philip Paeps wrote: Linux systems often only configure their shortname with `sethostname()` (for reasons I've never understood). If you set a FQDN though, it will be returned with `gethostname()`. Try to figure out where your particular flavour of Linux sets its hostname a

Re: Automatically substitute FQDN of local system in config

2017-04-19 Thread Philip Paeps
On 2017-04-19 18:52:56 (+0300), Marat Khalili wrote: On 19/04/17 18:39, Philip Paeps wrote: Linux systems often only configure their shortname with `sethostname()` (for reasons I've never understood). If you set a FQDN though, it will be returned with `gethostname()`. Try to figure out wher

Re: Automatically substitute FQDN of local system in config

2017-04-19 Thread Marat Khalili
On 19/04/17 19:00, Philip Paeps wrote: For what it's worth, I've never encountered anything that *relies* on the weird Linux behaviour. Well, my .bashrc ... :) [But plenty of things that don't work around it as elegantly as Postfix does by appending .localdomain!] I don't want to complain rig

Re: Do you know an FOSS email system for kids?

2017-04-19 Thread Kevin A. McGrail
On 4/19/2017 7:43 AM, Dedeco Balaco Baco wrote: in the last months, I have been searching for an email system with some features to make it better for kids, even for younger ages, and also their parents. We need a few features to guarantee some security to free messaging among known friends, but

Re: Automatically substitute FQDN of local system in config (THREAD CLOSED)

2017-04-19 Thread Viktor Dukhovni
> On Apr 19, 2017, at 12:16 PM, Marat Khalili wrote: > > I don't want to complain right away, but the proper fix would be > to obtain actual FQDN regardless of system default for hostname. There's no magic, the FQDN has to come from some stable source. As already explained, DNS resolution is no

Re: Automatically substitute FQDN of local system in config (THREAD CLOSED)

2017-04-19 Thread Wietse Venema
Viktor Dukhovni: > > > On Apr 19, 2017, at 12:16 PM, Marat Khalili wrote: > > > > I don't want to complain right away, but the proper fix would be > > to obtain actual FQDN regardless of system default for hostname. > > There's no magic, the FQDN has to come from some stable source. > As alread

Re: Automatically substitute FQDN of local system in config (THREAD CLOSED)

2017-04-19 Thread Marat Khalili
Thank you guys for explanations and workarounds. Sorry if I hurt someone's feelings: postfix is already great and so on. I received answer on my question and will fill in myhostname with sed for now. -- With Best Regards, Marat Khalili

gmgr and content_filter

2017-04-19 Thread Robert Moskowitz
This is for a test system on Centos7 In main.cf I have: content_filter = amavis:[127.0.0.1]:10024 Then in master.cf, I have an -ocontent_filter = For those services (like pickup) that I have figured out should not feed into amavis. I am looking at maillog at an email generated by l

Re: qmgr and content_filter

2017-04-19 Thread Viktor Dukhovni
> On Apr 19, 2017, at 5:24 PM, Robert Moskowitz wrote: > > I am looking at maillog at an email generated by logwatch and see gmgr > calling amavis a few times. So I am asking if gmgr should have the > content_filter = ? No, because the queue manager does not create queue files, and the content

Re: qmgr and content_filter

2017-04-19 Thread Robert Moskowitz
Viktor, thanks for this explanation. I was trying to figure it out from the man for gmgr, and I was getting, that gmgr was not what was triggering amavis. Now I see I actually did get that right. Onward! On 04/19/2017 05:40 PM, Viktor Dukhovni wrote: On Apr 19, 2017, at 5:24 PM, Robert Mo