Re: Recommendation for updating msg_panic() to msg_warn() in certain circumstances

2018-01-12 Thread Wietse Venema
I have sent the poster a message explaining that replacing panic calls with warnings would be a mistake. panic is for program errors that Postfix developers must fix fatal is for Postfix/system configuration errors that users must fix warning is for non-fatal errors including protol (SMTP, TLS, DN

Create exception for some senders in header_checks

2018-01-12 Thread Fabio S. Schmidt
Hi, I've created the rules to block forged Reply-to and Return-Path using my domains. I've followed the examples in http://www.postfix.org/BACKSCATTER_README.html. This is my rule: /^(From|Return-Path|Reply-To):.*\b(domain\.com\.br)\b/ discard forged sender address in $1: header: $2 We

Postfix not delivering mail

2018-01-12 Thread James Moe
postfix v3.2.0 linux v4.4.103-36-default x86_64 Postfix has once again decided not to deliver mail. (I do not know why I have such a hard time keeping postfix sane. I do not recall making any changes either.) Below is the session log. Lots of "unknown" features. Not helpful. Postfix is the loc

Re: Postfix not delivering mail

2018-01-12 Thread etech3
On 01/12/2018 03:13 PM, James Moe wrote: postfix v3.2.0 linux v4.4.103-36-default x86_64 Postfix has once again decided not to deliver mail. (I do not know why I have such a hard time keeping postfix sane. I do not recall making any changes either.) Below is the session log. Lots of "unknown"

Re: Postfix not delivering mail

2018-01-12 Thread Viktor Dukhovni
> On Jan 12, 2018, at 3:13 PM, James Moe wrote: > > 2018-01-12T12:29:40-0700 sma-server3 postfix/smtp[26035]: fatal: unknown > service: smtp/tcp > 2018-01-12T12:29:40-0700 sma-server3 postfix/smtp[26036]: fatal: unknown > service: smtp/tcp Your problem is a misconfigured chroot-jail, or permis

Re: Postfix not delivering mail

2018-01-12 Thread Bill Cole
On 12 Jan 2018, at 15:13, James Moe wrote: > smtp:126 inet n - y -- smtpd Do not do this...^ OR: put copies of all the needed files into the chroot jail.

Offering STARTTLS in postfix. need help!

2018-01-12 Thread Sean Son
hello everyone I hope you all had a wonderful holiday season. How does one configure an internet facing Postfix SMTP mail relay server, to offer STARTTLS? I have been googling around and seeing various different articles and blog entries, but I cannot figure out what is the quickest and easiest

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Philip Paeps
On 2018-01-12 15:45:33 (-0500), Sean Son wrote: How does one configure an internet facing Postfix SMTP mail relay server, to offer STARTTLS? I have been googling around and seeing various different articles and blog entries, but I cannot figure out what is the quickest and easiest way to do so

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Sean Son
On Fri, Jan 12, 2018 at 3:48 PM, Philip Paeps wrote: > On 2018-01-12 15:45:33 (-0500), Sean Son wrote: > >> How does one configure an internet facing Postfix SMTP mail relay server, >> to offer STARTTLS? I have been googling around and seeing various >> different articles and blog entries, but I

RE: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Fazzina, Angelo
My RHEL7 install but it install Postfix 2.10 and I use a LDAP backend for password storage. Not sure it helps you ? -ALF RAN vi /etc/postfix/master.cf submission inet n - n - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_secur

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Viktor Dukhovni
> On Jan 12, 2018, at 3:55 PM, Sean Son > wrote: > > By default, TLS is disabled in the Postfix SMTP server, so no difference to > plain Postfix is visible. Explicitly switch it on with > "smtpd_tls_security_level = may". > > Example: > > /etc/postfix/main.cf > : > > smtpd_tls_secur

Re: [SOLVED] Postfix not delivering mail

2018-01-12 Thread James Moe
On 01/12/2018 01:37 PM, Viktor Dukhovni wrote: > >> 2018-01-12T12:29:40-0700 sma-server3 postfix/smtp[26036]: fatal: unknown >> service: smtp/tcp > Your problem is a misconfigured chroot-jail, or permission issues reading > /etc/services. > Quite so. That is a change that I made recently and then

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Sean Son
On Fri, Jan 12, 2018 at 4:06 PM, Viktor Dukhovni wrote: > > > > On Jan 12, 2018, at 3:55 PM, Sean Son > wrote: > > > > By default, TLS is disabled in the Postfix SMTP server, so no difference > to plain Postfix is visible. Explicitly switch it on with > "smtpd_tls_security_level = may". > > > >

Curious startup warning

2018-01-12 Thread James Moe
postfix v3.2.0 linux v4.4.103-36-default x86_64 Whenever postfix (re-)starts, the message below is emitted. Jan 12 13:59:28 sma-server3 postfix/postfix-script[32024]: warning: group or other writable: /etc/postfix/./ssl/cacerts Jan 12 13:59:28 sma-server3 postfix/postfix-script[32040]: starting

Re: Curious startup warning

2018-01-12 Thread Bill Cole
On 12 Jan 2018, at 16:51 (-0500), James Moe wrote: postfix v3.2.0 linux v4.4.103-36-default x86_64 Whenever postfix (re-)starts, the message below is emitted. Jan 12 13:59:28 sma-server3 postfix/postfix-script[32024]: warning: group or other writable: /etc/postfix/./ssl/cacerts Jan 12 13:59:2

Re: Curious startup warning

2018-01-12 Thread Wietse Venema
James Moe: Checking application/pgp-signature: FAILURE -- Start of PGP signed section. > postfix v3.2.0 > linux v4.4.103-36-default x86_64 > > Whenever postfix (re-)starts, the message below is emitted. > Jan 12 13:59:28 sma-server3 postfix/postfix-script[32024]: warning: > group or other writa