AW: Issues with a Rewriting Gateway

2017-04-25 Thread Dennis Weber
Hi Viktor, I have changed my configuration with your recommendation, but the Exchange server behind the gateway is still receiving mails for us...@example.com instead of user1@internal1.example. Postfix Log: postfix/smtp[15949]: 08F37AE307: to=, orig_to=, relay=10.0.0.8[10.0.0.8]:25, delay=0.4

What am I missing?

2017-04-25 Thread Michael Segel
I have two mail servers. One is an older release of Postfix and I’m building a replacement for that server. I did a test where I sent the same message to both servers. In /etc/var/maillog on the one server, when the incoming message is being delivered, I see the hostname connect. On the new

Re: Using Postfix as a smarthost for Exchange Online (O365)

2017-04-25 Thread martijn.list
On 04/25/2017 01:19 PM, robert.wo...@robertwolfe.org wrote: > On 2017-04-25 01:54, martijn.list wrote: > >> I need to configure a smart host for Exchange Online (Office 365), i.e., >> all email sent with Exchange Online should be relayed through an >> external Postfix server (smarthost). O365 allo

Re: What am I missing?

2017-04-25 Thread Noel Jones
On 4/25/2017 7:36 AM, Michael Segel wrote: > I have two mail servers. > One is an older release of Postfix and I’m building a replacement for that > server. > > I did a test where I sent the same message to both servers. > > In /etc/var/maillog on the one server, when the incoming message is

error ssl stacked error routines

2017-04-25 Thread Poliman - Serwis
Hi I have configured one line in postfix main.cf (after configure each line I check /var/log/mail.err): smtpd_tls_dh1024_param_file = /etc/postfix/dh2048.pem After setup above line I have error in above log file (these 4 lines looped): Apr 25 14:08:09 serwer-1 dovecot: imap-login: Error: SSL: Stac

Write a personalized header

2017-04-25 Thread Luis Miguel Flores dos Santos
Hi, I have the transport_maps with hash to specify where serve messages will be redirect. Can I save in header a result of the query in transport_maps each mail ? Example: 1) A client mail sent a mail(thunderbird) 2) My postfix will autentic with Active Directory 3) After mail go to a transport

Re: Write a personalized header

2017-04-25 Thread Viktor Dukhovni
> On Apr 25, 2017, at 10:49 AM, Luis Miguel Flores dos Santos > wrote: > > Hi, I have the transport_maps with hash to specify where serve messages will > be redirect. > Can I save in header a result of the query in transport_maps each mail ? No. The Postfix queue file is becomes effectively

Re: Issues with a Rewriting Gateway

2017-04-25 Thread Viktor Dukhovni
On Tue, Apr 25, 2017 at 07:26:38AM +, Dennis Weber wrote: > I have changed my configuration with your recommendation, but the Exchange > server behind the gateway is still receiving mails for us...@example.com > instead of user1@internal1.example. Please post your configuration as explained i

Re: What am I missing?

2017-04-25 Thread Michael Segel
FSCK ME! Yeah, that solved the issue. So… why would that cause the issue? Normally I’d leave this to the experts while I focus on my day job, but since this is my SOHO domain, I have to ask these questions which of course 3 months from now, I’ll forget and have to do it all over again. Do I wa

Re: What am I missing?

2017-04-25 Thread Viktor Dukhovni
On Tue, Apr 25, 2017 at 04:06:04PM +, Michael Segel wrote: > Normally I�d leave this to the experts while I focus on my day job, but > since this is my SOHO domain, I have to ask these questions which of course > 3 months from now, I�ll forget and have to do it all over again. > Do I want to e

Re: Write a personalized header

2017-04-25 Thread Luis Miguel Flores dos Santos
Thanks a lot Viktor! I wanted to make this to segment the wich server the message will be delivered because I have the problem: Today I have 10 mail server and I have created a proxy for the domain to coexist between them. And create a postfix to clients connect and send message (Previous mail

Re: Write a personalized header

2017-04-25 Thread Luis Miguel Flores dos Santos
Victor can I use "Postfix After-Queue Content Filter" to insert new header based in a query ? De: owner-postfix-us...@postfix.org em nome de Luis Miguel Flores dos Santos Enviado: terça-feira, 25 de abril de 2017 13:33:39 Para: Postfix users Assunto: Re: Write

Re: Write a personalized header

2017-04-25 Thread Viktor Dukhovni
> On Apr 25, 2017, at 1:35 PM, Luis Miguel Flores dos Santos > wrote: > > Victor can I use "Postfix After-Queue Content Filter" to insert new header > based in a query ? Wrong question. You should not have to do this at all. Why do you have a proxy that cannot do mail routing between Postf

Re: error ssl stacked error routines

2017-04-25 Thread Viktor Dukhovni
> On Apr 25, 2017, at 10:15 AM, Poliman - Serwis wrote: > > I have configured one line in postfix main.cf (after configure each line > I check /var/log/mail.err): For *Postfix* errors. > smtpd_tls_dh1024_param_file = /etc/postfix/dh2048.pem This is a reasonable Postfix setting, presumably you

Re: Write a personalized header

2017-04-25 Thread Luis Miguel Flores dos Santos
Sorry my English is very poor. I'll try describe it better now: I have 10 mail server and 9 are smartermail an 1 exchange, and same domains can exist in each one but don't mail account. An example I have a domain EXAMPLE.COM created in two plataforms: migue...@example.com --> smartermail01.dom

smtp_bind_address isn't working

2017-04-25 Thread Tumbleweed
I’m setting up my first mail server. I’ve installed Postfix, configured a few options, and can send mail successfully. I have two addresses, one IPv4 and one IPv6, and I’ve set up my SPF record to my IPv4, which is the one I’d like to use to send emails. The problem is that Postfix refuses to send

Re: smtp_bind_address isn't working

2017-04-25 Thread Dominic Raferd
On 25 April 2017 at 21:19, Tumbleweed wrote: > I’m setting up my first mail server. > > I’ve installed Postfix, configured a few options, and can send mail > successfully. I have two addresses, one IPv4 and one IPv6, and I’ve set up > my SPF record to my IPv4, which is the one I’d like to use to

Re: smtp_bind_address isn't working

2017-04-25 Thread Tumbleweed
Wow, that was easy. But… why does inet_protocols work when inet_interfaces fails? Anyway, thanks! > On Apr 25, 2017, at 16:44, Dominic Raferd [via Postfix] > wrote: > > > > On 25 April 2017 at 21:19, Tumbleweed <[hidden email] > > wrote: > I’m setting up my first mail server. > > I’ve ins

OT? SRV records etc

2017-04-25 Thread John
How likely is it for a DNS to have SRV records for such things as smtp. imap ... I know that a dumb ? but I am try to guesstimate how big an dewy eyed optomist I am being in hoping that they are common practise.

Re: One certificate per port

2017-04-25 Thread G. Schlisio
> >> On Apr 6, 2017, at 5:02 PM, G. Schlisio wrote: >> >> I wonder if it is possible to have one cert per port postfix is serving >> on, eg one for 25 and one for 587. > > Yes. > >master.cf: > submission inet ... smtpd >-o smtpd_tls_cert_file=$mua_tls_cert_file >-o smtp

Re: One certificate per port

2017-04-25 Thread Viktor Dukhovni
> On Apr 25, 2017, at 4:59 PM, G. Schlisio wrote: > >> It is also possible to avoid DANE TLSA changes while rolling over >> Let's Encrypt keys: >> >> >> http://postfix.1071664.n5.nabble.com/WoSign-StartCom-CA-in-the-news-td86436.html#a86444 >> https://community.letsencrypt.org/t/new-certbo

Re: OT? SRV records etc

2017-04-25 Thread Kevin A. McGrail
On 4/25/2017 4:57 PM, John wrote: How likely is it for a DNS to have SRV records for such things as smtp. imap ... I know that a dumb ? but I am try to guesstimate how big an dewy eyed optomist I am being in hoping that they are common practise. In my experience, very rare, not even sure what I

Re: One certificate per port

2017-04-25 Thread G. Schlisio
>> Thank you for your hints and sorry for the late followup. busy and stuff. >> thank you for your suggestions, I was aware of the csr-option but wanted >> to avoid this, since it does not well automate with certbot. > > Sine "--csr" is a certbot option I am surprised to hear you say that > "it do

AW: Issues with a Rewriting Gateway

2017-04-25 Thread Dennis Weber
Hi Viktor, thank you a lot for your time and effort! I have now activated the verbose option on my smtp and trivial-rewrite and was analyzing the connection log. Maillog of outgoing mail through the gateway: http://webertec.net/fileshare/maillog_incoming.txt Maillog of incoming mail through th

Re: Issues with a Rewriting Gateway

2017-04-25 Thread Viktor Dukhovni
> On Apr 25, 2017, at 5:31 PM, Dennis Weber wrote: > > Hi Viktor, > > thank you a lot for your time and effort! > > I have now activated the verbose option on my smtp and trivial-rewrite and > was analyzing the connection log. You made the incoming stmpd(8) verbose, but all the interesting s

Re: add header with postscreen score

2017-04-25 Thread Wietse Venema
b...@bitrate.net: > is there a way to add a postscreen score/summary header to accepted > messages? the logs are great, but this could be helpful in reviewing > messages and making improvements to the configuration. I think it would be wrong to add headers that report results for tests that weren

Re: OT? SRV records etc

2017-04-25 Thread Wietse Venema
John: > How likely is it for a DNS to have SRV records for such things as smtp. > imap ... > I know that a dumb ? but I am try to guesstimate how big an dewy eyed > optomist I am being in hoping that they are common practise. The SMTP standard RFC 5322 require MX and A lookups but no SRV lookups

Re: OT? SRV records etc

2017-04-25 Thread Viktor Dukhovni
> On Apr 25, 2017, at 8:08 PM, Wietse Venema wrote: > > The SMTP standard RFC 5322 require MX and A lookups but no SRV lookups. There is an SRV specification for MUAs in https://tools.ietf.org/html/rfc6186 The security picture for this is rather dire at present, and is largely unsupported by M

Re: OT? SRV records etc

2017-04-25 Thread Robert Moskowitz
On 04/25/2017 11:10 PM, Kevin A. McGrail wrote: On 4/25/2017 4:57 PM, John wrote: How likely is it for a DNS to have SRV records for such things as smtp. imap ... I know that a dumb ? but I am try to guesstimate how big an dewy eyed optomist I am being in hoping that they are common practise.

Re: error ssl stacked error routines

2017-04-25 Thread Poliman - Serwis
Yes I have freshly generated dh2048.pem. It's new server and I try to secure him. Should this line be uncommented? (I commented it out because of above errors) I wrote these errors here, becouse they are related to this one line from postfix. 2017-04-25 20:09 GMT+02:00 Viktor Dukhovni : > > > On