Response to sender when mail is put to hold queue

2018-01-24 Thread Dominic Raferd
I don't know what response is given to the sending client when postfix puts an incoming mail into the hold queue, say because of an access table HOLD action. At the time of actioning the hold, is sender told the mail has been delivered (250), or something else - or is no response given at all? Is

Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Sohin Vyacheslav
Hi, Sometimes when server is busy Postfix does not write all the data to maillog. I see difference between data from maillog and content of file with data in format: Date --From email --To email It's seems that drops some info before writing to maillog i.e. maillog does not contain every activity

Re: Response to sender when mail is put to hold queue

2018-01-24 Thread Bastian Blank
On Wed, Jan 24, 2018 at 10:17:25AM +, Dominic Raferd wrote: > I don't know what response is given to the sending client when postfix > puts an incoming mail into the hold queue, say because of an access > table HOLD action. > At the time of actioning the hold, is sender told the mail has been >

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Bastian Blank
On Wed, Jan 24, 2018 at 12:19:39PM +0200, Sohin Vyacheslav wrote: > Sometimes when server is busy Postfix does not write all the data to > maillog. Postfix does never write directly to the maillog. This is delegated to your syslog server. If this one drops messages you have to fix it. >

Re: Response to sender when mail is put to hold queue

2018-01-24 Thread Dominic Raferd
On 24 January 2018 at 10:52, Bastian Blank wrote: > On Wed, Jan 24, 2018 at 10:17:25AM +, Dominic Raferd wrote: >> I don't know what response is given to the sending client when postfix >> puts an incoming mail into the hold queue, say because of an access >> table HOLD action. >> At the time

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Sohin Vyacheslav
24.01.2018 12:54, Bastian Blank пишет: > On Wed, Jan 24, 2018 at 12:19:39PM +0200, Sohin Vyacheslav wrote: >> Sometimes when server is busy Postfix does not write all the data to >> maillog. > > Postfix does never write directly to the maillog. This is delegated to > your syslog server. If thi

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Sohin Vyacheslav
24.01.2018 12:54, Bastian Blank пишет: >> I see difference between data from maillog and content of file >> with data in format: Date --From email --To email > I have no idea what you are telling me. Postfix does not log the > contents ot the From or To headers. > in master.cf exists

Re: 4.7.0 too many connections from Tbird client

2018-01-24 Thread Voytek
On Wed, January 24, 2018 9:34 am, Noel Jones wrote: > and a few seconds later STARTTLS succeeds, and that IP successfully sends > mail from user hr@ to 10 recipients. > > Are there many users on that same IP via a NAT? Noel, just noticed I do NOT have that IP entered in 'mynetworks =', it used t

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Wietse Venema
Sohin Vyacheslav: > Hi, > > Sometimes when server is busy Postfix does not write all the data to > maillog. I see difference between data from maillog and content of file > with data in format: Date --From email --To email > > It's seems that drops some info before writing to maillog i.e. maillog

Re: using two different sending domains and IP addresses on one postfix server

2018-01-24 Thread Wietse Venema
Anvar Kuchkartaev: > Hello, > > I am configuring postfix send only mail server with 2x sending domain > lets say mail.domain1.com and mail.domain2.com. I have configured almost If you want multiple mail sending and receiving personalities, see http://www.postfix.org/MULTI_INSTANCE_README.html

Re: 4.7.0 too many connections from Tbird client

2018-01-24 Thread Matus UHLAR - fantomas
On Wed, January 24, 2018 9:34 am, Noel Jones wrote: and a few seconds later STARTTLS succeeds, and that IP successfully sends mail from user hr@ to 10 recipients. Are there many users on that same IP via a NAT? On 24.01.18 22:50, Voytek wrote: just noticed I do NOT have that IP entered in 'my

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Sohin Vyacheslav
24.01.2018 13:56, Wietse Venema пишет: > As others have pointed out, Postfix does not write syslog files. > Depending on your OS, logging is handled by system-effing-d, which > by default unhelpfully rate-limits logging. i.e. need to adjust systemd logging settings? -- Vyacheslav

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Wietse Venema
Wietse: > As others have pointed out, Postfix does not write syslog files. > Depending on your OS, logging is handled by system-effing-d, which > by default unhelpfully rate-limits logging. Sohin Vyacheslav: > i.e. need to adjust systemd logging settings? Unfortunately, systemd is not part of Pos

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Sohin Vyacheslav
24.01.2018 14:06, Wietse Venema пишет: >> i.e. need to adjust systemd logging settings? > Unfortunately, systemd is not part of Postfix. Fortunately, there > are excellent web search engines that can help you find the answer. it's seems that rsyslogd writes a postfix log: $ sudo lsof /var/log/ma

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Stephen Satchell
On 01/24/2018 02:54 AM, Bastian Blank wrote: On Wed, Jan 24, 2018 at 12:19:39PM +0200, Sohin Vyacheslav wrote: Sometimes when server is busy Postfix does not write all the data to maillog. Postfix does never write directly to the maillog. This is delegated to your syslog server. If this one d

Re: Self-signed TLS certificates

2018-01-24 Thread Danny Horne
On 22/01/2018 3:52 pm, Viktor Dukhovni wrote: > >> On Jan 22, 2018, at 10:06 AM, Danny Horne wrote: >> >> Private CA sounds interesting, will have to read up about it > You can get away with a lot less complexity than the usual OpenSSL CA. > See, for example: > > > https://raw.githubuserconten

Re: 4.7.0 too many connections from Tbird client

2018-01-24 Thread Noel Jones
On 1/24/2018 5:50 AM, Voytek wrote: > On Wed, January 24, 2018 9:34 am, Noel Jones wrote: > >> and a few seconds later STARTTLS succeeds, and that IP successfully sends >> mail from user hr@ to 10 recipients. >> >> Are there many users on that same IP via a NAT? > > Noel, > > just noticed I do N

Re: Postfix sometimes does not write all the data to maillog

2018-01-24 Thread Sohin Vyacheslav
24.01.2018 15:34, Stephen Satchell пишет: > My colleague found that there is a rate-limit parameter in the > implementation of syslog we were using, and he was exceeding that limit. >  It's a knob you can turn. > > http://www.rsyslog.com/changing-the-settings/ Thank you, Stephen I hope it will

Re: Self-signed TLS certificates

2018-01-24 Thread Viktor Dukhovni
> On Jan 24, 2018, at 9:21 AM, Danny Horne wrote: > >> You can get away with a lot less complexity than the usual OpenSSL CA. >> See, for example: >> >> >> https://raw.githubusercontent.com/openssl/openssl/master/test/certs/mkcert.sh >> >> which creates certificates via "openssl x509 -req"

Re: Self-signed TLS certificates (Minimal setup)

2018-01-24 Thread Dirk Stöcker
On Wed, 24 Jan 2018, Danny Horne wrote: On 22/01/2018 3:52 pm, Viktor Dukhovni wrote: On Jan 22, 2018, at 10:06 AM, Danny Horne wrote: Private CA sounds interesting, will have to read up about it You can get away with a lot less complexity than the usual OpenSSL CA. See, for example: h

Re: Self-signed TLS certificates (Minimal setup)

2018-01-24 Thread Viktor Dukhovni
> On Jan 24, 2018, at 11:37 AM, Dirk Stöcker wrote: > > 1) Create a new CA (only once - it is a good idea to add a date in name, in > case you have to change it later): > openssl req -new -x509 -nodes -subj > '/C=DE/ST=Germany/L=Berlin/O=Company/CN=Company Root Certificate > 2018/emailAddres

Re: Self-signed TLS certificates (Minimal setup)

2018-01-24 Thread Dirk Stöcker
On Wed, 24 Jan 2018, Viktor Dukhovni wrote: One one want to start with "umask 077", to avoid creating world-readable private key files. This should not be necessary with OpenSSL 1.1.0 and later, but older versions (e.g. OpenSSL 1.0.2) create all output files with default permissions, constraine

mass mailing management web interface recomendation

2018-01-24 Thread anvartay
Hello, I would like to ask what is the best web gui to manage mass mailing with postfix? Any advices greatly appreciated. Anvar -- Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html

Re: Self-signed TLS certificates (Minimal setup)

2018-01-24 Thread Harald Koch
On Wed, Jan 24, 2018, at 08:37, Dirk Stöcker wrote: > > It's not sooo complicated: The length of your message contradicts that statement. (These days I recommend https://github.com/square/certstrap because it's easily scripted. I'm currently using it in several ansible playbooks, for example.)

Re: removing postgrey - reconfigring postix

2018-01-24 Thread Peter
On 24/01/18 19:32, john wrote: > Is there a write up of how to setup up postscreen for maximum spam control. Of course there's the official docs, POSTSCREEN_README and postscreen(8). I also recommend this: http://rob0.nodns4.us/postscreen.html Peter

Re: 4.7.0 too many connections from Tbird client

2018-01-24 Thread Voytek
On Thu, January 25, 2018 2:58 am, Noel Jones wrote: > Instead of adding them to mynetworks, add that IP (and any other > remote offices) to smtpd_client_event_limit_exceptions. On Wed, January 24, 2018 10:59 pm, Matus UHLAR - fantomas wrote: > submission service usually does not use mynetworks.

warning: TLS library problem

2018-01-24 Thread li...@lazygranch.com
postfix/smtpd[14755]: warning: TLS library problem: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640: Should I be blocking some encryption method? I thought openssl dropped support for the hackable protocols.

Re: warning: TLS library problem

2018-01-24 Thread Viktor Dukhovni
> On Jan 24, 2018, at 9:25 PM, li...@lazygranch.com wrote: > > postfix/smtpd[14755]: warning: TLS library problem: error:140760FC:SSL > routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640: > > Should I be blocking some encryption method? I thought openssl dropped > support for the h