Re: no shared cipher revisited

2022-10-02 Thread Bastian Blank
On Sat, Oct 01, 2022 at 09:32:49PM +, Eddie Rowe wrote: > > You should have at least an RSA certificate (2048-bit key, not more), and > > only > I do not recall seeing this on the PostFix web site that discusses TLS > settings as I struggle to setup TLS with our existing wildcard certificate.

Re: no shared cipher revisited

2022-10-02 Thread Matus UHLAR - fantomas
On 10/1/22 16:16, Viktor Dukhovni wrote: 4096-bit RSA certificates mostly work, but are pointless crypto exhibitionism, waste CPU, can run into client implementation limitations, and so are not a good idea. On 01.10.22 17:20, Shawn Heisey wrote: My cert from letsencrypt is 4096 bit.  yes, Le

Re: no shared cipher revisited

2022-10-02 Thread Matus UHLAR - fantomas
I do have it listening on port 465, hopefully I got the config right so that does not allow authentication.  I think I also disabled TLS below 1.2 on port 587. On 10/1/22 20:44, Viktor Dukhovni wrote: What would be the use of "465" if SASL authentication is not allowed? It is should be configu

Re: no shared cipher revisited

2022-10-02 Thread Emmanuel Fusté
Le 02/10/2022 à 11:51, Matus UHLAR - fantomas a écrit : On 10/1/22 16:16, Viktor Dukhovni wrote: 4096-bit RSA certificates mostly work, but are pointless crypto exhibitionism, waste CPU, can run into client implementation limitations, and so are not a good idea. On 01.10.22 17:20, Shawn Heisey

postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Martin
Hi postfix friends, usually I've always found a solution when I ran into postfix problems. Even the change from postfix 2.11 on old 14.xx ubuntu distribution to the 20.04 LTS (forgot the postfix version) was not a big deal, everything ran smooth. But now, with a release-upgrade from 20.04 LTS

postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Martin
Hi postfix friends, with a release-upgrade from 20.04 LTS to 22.04 LTS there has been a postfix update to 3.6.4 and now not a single (sub-)process of postfix starts and there's no log entry nor error message in mail.err, the process seems to die absolutely silently. I'm still using my old configu

Re: postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Viktor Dukhovni
On Sun, Oct 02, 2022 at 08:22:39PM +, Martin wrote: > [... lots of prose ...] > > # postfix stop > postfix/postfix-script: stopping the Postfix mail system > Oct 02 16:24:11 derdickehase postfix/postfix-script[3222]: stopping the > Postfix mail system > /usr/libexec/postfix/postfix-script: 2

Re: postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Wietse Venema
Viktor Dukhovni: > On Sun, Oct 02, 2022 at 08:22:39PM +, Martin wrote: > > > [... lots of prose ...] > > > > # postfix stop > > postfix/postfix-script: stopping the Postfix mail system > > Oct 02 16:24:11 derdickehase postfix/postfix-script[3222]: stopping the > > Postfix mail system > > /us

Re: postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Shawn Heisey
On 10/2/22 14:42, Viktor Dukhovni wrote: On Sun, Oct 02, 2022 at 08:22:39PM +, Martin wrote: # postfix stop postfix/postfix-script: stopping the Postfix mail system Oct 02 16:24:11 derdickehase postfix/postfix-script[3222]: stopping the Postfix mail system /usr/libexec/postfix/postfix-scrip

manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Wietse Venema
Martin: > Today I tried to install postfix 3.7.2 manually. I was enable to include > MySQL support > as well as TLS support. But the SASL (sasl2 / cyrus) configuration as > given by page > https://www.postfix.org/SASL_README.html does not work at all. When > trying to > send mails the answer of po

Re: postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Jaroslaw Rafa
Dnia 2.10.2022 o godz. 17:23:33 Wietse Venema pisze: > > If fact it's worse: you can't mix Postfix programs and libraries > from different Postfix builds, even if they are built from the same > Postfix source. What do you mean here by "different builds"? Does it mean that if I build Postfix two

Re: manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Jaroslaw Rafa
Dnia 2.10.2022 o godz. 17:35:23 Wietse Venema pisze: > > I recommend that you use a pre-built package for your OS distribution. > That will solve the startup problem too. I guess he did use those packages, because he wrote that he did a release upgrade from Ubuntu 20.04 to 22.04 and then Postfix

Re: postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Wietse Venema
Jaroslaw Rafa: > Dnia 2.10.2022 o godz. 17:23:33 Wietse Venema pisze: > > > > If fact it's worse: you can't mix Postfix programs and libraries > > from different Postfix builds, even if they are built from the same > > Postfix source. > > What do you mean here by "different builds"? Different c

Re: postfix 3.6.4 (ubuntu server 22.04 LTS) does not start - manually build 3.7.2 denies SASL although included in make command

2022-10-02 Thread Viktor Dukhovni
On Sun, Oct 02, 2022 at 06:07:13PM -0400, Wietse Venema wrote: > > With other software, usually I was pretty successful with the following > > approach when I installed a binary package from the repository and then > > found out that something in the program needs patching: getting the > > corresp

Reject when delivering to a pipe?

2022-10-02 Thread Dan Mahoney
Hello all, If I am piping my mail to a program (in this case, day job's RT install), is there some way in which I can exit that will cause a message to be bounced back to the sender? Or do I need a full-on milter to do this kind of rejection? -Dan

Re: Reject when delivering to a pipe?

2022-10-02 Thread Charles Sprickman
I think that as long as the script returns the appropriate error code on failure you don't have to do anything special; from pipe(8): In the case of a non-zero exit status, a limited amount of command output is logged, and reported in a delivery status notification. When the

Re: Reject when delivering to a pipe?

2022-10-02 Thread Viktor Dukhovni
On Sun, Oct 02, 2022 at 03:33:52PM -0700, Dan Mahoney wrote: > If I am piping my mail to a program (in this case, day job's RT > install), is there some way in which I can exit that will cause a > message to be bounced back to the sender? > > Or do I need a full-on milter to do this kind of rejec

Re: Reject when delivering to a pipe?

2022-10-02 Thread Wietse Venema
Charles Sprickman: > I think that as long as the script returns the appropriate error > code on failure you don't have to do anything special; from pipe(8): > >In the case of a non-zero exit status, a limited amount of command >output is logged, and reported in a delivery status not