Re: Are sha1 & TLSv1 fully deprecated wrt mail, and time to block them?

2018-10-15 Thread Kris Deugau
Laura Smith wrote: Honestly, you are most likely wasting your time on that point because all that you are likely to get back is a page of waffle saying "blah blah blah ... security reasons... blah blah blah" I know this because a sysadmin ex-colleague was having problems creating accounts with

How to run 2 content filters in parrallel?

2018-10-15 Thread Mike Schleif
CentOS Linux release 7.5.1804 (Core) mail_version = 2.10.1 Several years funning one content filter: 127.0.0.1:10025 inet n - n - - smtpd -o content_filter=filter:dummy ... Now, we need an autoresponder for one incoming address. Trying to use this: https://www.howtofor

Re: Renewal of Let's encrypt certs being used in postfix

2018-10-15 Thread C. Petro
> I don't see readon to reboot servers periodically. I have 2 reasons, neither having anything to do with postfix: 1) If you are using a filesystem type that wants to be checked every 180+ days, you will want to do a controlled reboot when YOU want your server offline for a while, not when Thor,

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Wietse Venema
Mike Schleif: > CentOS Linux release 7.5.1804 (Core) > mail_version = 2.10.1 > > Several years funning one content filter: > 127.0.0.1:10025 inet n - n - - smtpd > -o content_filter=filter:dummy > ... > > Now, we need an autoresponder for one incoming address. Trying t

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Mike Schleif
content_filter=filter:dummy This filter has been running for years, massaging all messages as we require, and must continue to run on all messages. Microsoft Exchange users require this, and must receive all messages. content_filter=autoresponder One virtual email address must generate an autoresp

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Wietse Venema
Mike Schleif: > content_filter=filter:dummy > This filter has been running for years, massaging all messages as we > require, and must continue to run on all messages. Microsoft Exchange users > require this, and must receive all messages. All addresses INCLUDING the special address? > content_fi

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Mike Schleif
All addresses INCLUDING the special address? - yes The special address is subject to ONLY this filter or BOTH filters? - BOTH filters Perhaps, there is another solution? All I'm trying to add is an out-of-office message to one incoming address. However, this OOO message must run 5pm-8am weekday

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Wietse Venema
Mike Schleif: > All addresses INCLUDING the special address? - yes > > The special address is subject to ONLY this filter or BOTH filters? - BOTH > filters > > Perhaps, there is another solution? All I'm trying to add is an > out-of-office message to one incoming address. However, this OOO mess

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Mike Schleif
No parallel content_filter processing? http://www.postfix.org/FILTER_README.html Advanced content filter: sending unfiltered mail to the content filter RE: "scan" This runs up to 10 content filters in parallel. What am I missing? ~ Mike On Mon, Oct 15, 2018 at 1:47 PM Wietse Venema wrote:

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Mike Schleif
On Mon, Oct 15, 2018 at 3:09 PM Wietse Venema wrote: > Mike Schleif: > > All addresses INCLUDING the special address? - yes > > > > The special address is subject to ONLY this filter or BOTH filters? - > BOTH > > filters > > > > Perhaps, there is another solution? All I'm trying to add is an >

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Noel Jones
The readme is referring to running 10 instances of the same content filter in parallel to increase performance. You appear to be using the "simple" content filter method, where each filter reinjects mail to postfix by using the sendmail command. The normal method of chaining multiple filters by cy

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Bill Cole
On 15 Oct 2018, at 15:51, Mike Schleif wrote: All addresses INCLUDING the special address? - yes The special address is subject to ONLY this filter or BOTH filters? - BOTH filters Perhaps, there is another solution? All I'm trying to add is an out-of-office message to one incoming address.

Re: Use postfix with submission proxy (AUTH in MAIL FROM command)

2018-10-15 Thread Vadim S. Ivanov
I agree. I looked at rfc4422. Treating identity in MAIL FROM command as sasl authenticated will violate rfc itself (no auth mechanisms was involved). I won't be able do run smtpd_sender_login_mismatch, smtpd_sender_login_maps checks. But rfc4954 section 5 states: The optional AUTH par

Re: Are sha1 & TLSv1 fully deprecated wrt mail, and time to block them?

2018-10-15 Thread curtis
October 15 2018 11:19 AM, "Kris Deugau" wrote: > Laura Smith wrote: > >> Honestly, you are most likely wasting your time on that point because all >> that you are likely to >> get back is a page of waffle saying "blah blah blah ... security reasons... >> blah blah blah" >>> I know this because

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Wietse Venema
Mike Schleif: > No parallel content_filter processing? > > http://www.postfix.org/FILTER_README.html > > Advanced content filter: sending unfiltered mail to the content filter > > RE: "scan" > This runs up to 10 content filters in parallel. > > What am I missing? I need to know how your filter

Re: How to run 2 content filters in parrallel?

2018-10-15 Thread Wietse Venema
Mike Schleif: > Is this what you're looking for? > > filterunix - n n - 10 pipe > flags=Rq user=filter null_sender= > argv=/var/spool/filter/bin/filter.sh -f ${sender} -- ${recipient} That is the 'simple' filter, which uses pipes, not SMTP. > autoresponder u

Re: Use postfix with submission proxy (AUTH in MAIL FROM command)

2018-10-15 Thread Wietse Venema
Vadim S. Ivanov: > I agree. I looked at rfc4422. Treating identity in MAIL FROM command as > sasl authenticated will violate rfc itself (no auth mechanisms was > involved). > I won't be able do run smtpd_sender_login_mismatch, > smtpd_sender_login_maps checks. > > > But rfc4954 section 5 state