mailbox_command

2010-04-22 Thread Danny
mail.log LOGABSTRACT="all" VERBOSE="on" DEFAULT=~/Mail/inbox #DEFAULT=/var/mail/fetchmail PMDIR=$HOME=~/.procmail #INCLUDERC=$PMDIR/spam.rc I don't want to rewrite headers through formail or procmail. This is a home setup, and fetchmail must just go get the mail and pass it to procmail. Thank you in advance Danny

mailbox_command

2010-04-23 Thread Danny
superflous? No it is not, it is the easiest way to send a first time poster on his way. It is obviuos that you have better things to discuss on this mailing than answer simple questions. Why don't you make this list an exclusive club for the initiated and seasoned postfix user only? Thank You

mailbox_command

2010-04-23 Thread Danny
ause POSTFIX, not exim, not sendmail but POSTFIX is involved. POSTFIX calls fetchamail in the postfix main.cf via the mailbox_command. SO DO NOT TELL ME THAT I AM ON THE WRONG FREAKIN MAILING LIST. Thank You Danny > You need to show logfile evidence that Postfix is actually part of > your problem. I hope that is not too much to be asked. > > Wietse

mailbox_command

2010-04-23 Thread Danny
And you do not inspire much confidence in the IT industry if you think your answer was helpfull. My personal advice to you ... get away from your screen every now and then ... there is a real life if you just open your front door. >On Apr 23 10, /dev/rob0 : > > PS: Danny does not ins

mutt cannot authenticate

2016-11-19 Thread Danny
tp://username@10.0.0.5:25" set smtp_pass="password" set ssl_starttls=no ##### Any pointers? Thank you Danny

Adding MX record for local mail

2015-01-10 Thread Danny
rd to bind9. My local mail server is fever.havannah.local. How would I go about doing that properly? Bind9 is working properly as is all the other required stuff. Thank You Danny

Re: Adding MX record for local mail

2015-01-11 Thread Danny
> An MX record is needed ONLY if there are other mail servers on the > local network. > > For a single server, simply listing the domain in main.cf: > mydestination is sufficient. > > -- Noel Jones Thank You

Re: Adding MX record for local mail

2015-01-11 Thread Danny
> google this keywords "dns split view bind9" Phew ... a little too advanced for me ... ;) ... thank you for the link Danny

Change sender in php

2015-02-03 Thread Danny
t is not a train smash, just curious. Thank You Danny

Re: Change sender in php

2015-02-05 Thread Danny
Thanks guys, I used the php.ini suggestion but am in the process of integrating phpmailer. Thanks again for your time Danny

autogen gcc makefile.def error Postfix 2.5.6

2010-02-07 Thread Danny Edge
New install on FreeBSD 7.2, from cd /usr/ports/mail/postfix && make install clean. I have Google'd the error but haven't found anything. What else should I provide? checking whether -fkeep-inline-functions is supported... yes updating cache ./config.cache creating ./config.status creating Makefile

Re: autogen gcc makefile.def error Postfix 2.5.6

2010-02-07 Thread Danny Edge
On Sun, Feb 7, 2010 at 8:51 PM, Wietse Venema wrote: > Danny Edge: > > Stop in /usr/ports/lang/gcc42. > > *** Error code 1 > > You have a problem bulding GCC. You are about 100 miles away > from building Postfix. > >Wietse > I will try my best to

postfix/smtpd[39072]:warning: SASL authentication failure: cannot connect to Courier authdaemond: No such file or directory

2008-07-28 Thread Danny Nielsen
all help is much appreciated, i have been searching all over for an answer. Thanks Danny

Re: postfix/smtpd[39072]:warning: SASL authentication failure: cannot connect to Courier authdaemond: No such file or directory [solved]

2008-07-29 Thread Danny Nielsen
Yup that fixed it, thanks alot. I am quite new with unix systems, and mail, so i would never had thought of that, thanks man. Danny 2008/7/29 Sahil Tandon <[EMAIL PROTECTED]> > Danny Nielsen <[EMAIL PROTECTED]> wrote: > > > Hello. > > > > Im having some probl

Re: postfix/smtpd[39072]:warning: SASL authentication failure: cannot connect to Courier authdaemond: No such file or directory

2008-07-31 Thread Danny Nielsen
2008/7/29 Sahil Tandon <[EMAIL PROTECTED]> > Danny Nielsen <[EMAIL PROTECTED]> wrote: > > > Hello. > > > > Im having some problem sending mail, i can receive mails but not send. > > > > The system is FreeBSD 6.3, im trying to make a mail server

Re: spf fail on ietf.org

2015-09-29 Thread Danny Horne
The tech contact for the domain is listed as gdm...@gmail.com Might be worth dropping them an email On 29/09/2015 9:43 pm, Benny Pedersen wrote: > https://dmarcian.com/spf-survey/ietf.org > > fail is p6 should be ip6 > > help me to solve it signature.asc Description: OpenPGP digital signature

Re: I can't find the reason for this smtpd/opendmarc warning.

2015-12-04 Thread Danny Horne
My first thought is that is anything actually running on port 8893? On 04/12/2015 10:19 am, Robert Chalmers wrote: > I have opendmarc configured in postfix main.cf > > ### > # dkim & dmarc > smtpd_milters = inet:127.0.0.1:8891, inet:127.0.0.1:8893 > non_smtpd_milters =

Re: 53% of Postfix servers are black-listed (DNSBL)

2015-12-29 Thread Danny Horne
Nothing at all, as long as you take the time to learn how to configure it properly, all your stats seem to show is that many admins are too lazy (or not capable) of doing this. That being the case, I suggest you use a third party mail provider or learn how to configure Postfix On 29/12/2015 12:01

Can anyone decipher this Policyd-spf error?

2016-02-04 Thread Danny Horne
Hi all, I am getting the following error on just one email address from policyd-spf, called from Postfix. No other email address has caused me problems (as far as I'm aware) and I had to completely disable policyd-spf in Postfix to allow the email through. Can anyone decipher what the problem wa

Re: Can anyone decipher this Policyd-spf error?

2016-02-04 Thread Danny Horne
help On 04/02/2016 9:34 pm, Scott Kitterman wrote: > On Thursday, February 04, 2016 04:19:54 PM Bill Cole wrote: >> On 4 Feb 2016, at 15:52, Danny Horne wrote: >>> Hi all, >>> >>> I am getting the following error on just one email address from >>> polic

Re: Can anyone decipher this Policyd-spf error?

2016-02-05 Thread Danny Horne
I've decided to stop using SPF checking until I've got the later version of python-ipaddr (or whatever it was called) On 05/02/2016 2:49 pm, Scott Kitterman wrote: > On Friday, February 05, 2016 11:09:03 AM L.P.H. van Belle wrote: >> Switch to the perl version of this and your problem is fixed. >>

Re: Freelance to recommand?

2016-02-15 Thread Danny Horne
What are you trying to achieve? There's plenty of experts here (not me I hasten to add!!) On 15/02/2016 8:52 pm, Roman Doe wrote: > I'm struggling finding a postfix expert, any contact to suggest? > > Thank you very much. signature.asc Description: OpenPGP digital signature

Re: [SOLVED] Re: A bug, maybe?

2016-02-22 Thread Danny Horne
On 22/02/2016 7:57 pm, Curtis Maurand wrote: > > The problem was in the /etc/nsswitch.conf. > > I changed the line > > hosts: files dns > > to > > hosts:dns files > > and that solved the trouble. Interesting, I got the IP result Viktor got, but have the same nsswitch.conf setting as

Re: Starting postfix at boot time on Centos 7

2016-02-24 Thread Danny Horne
Because you installed for source rather than through Yum, you haven't got the System V init scripts. If you try to install these via Yum it'll want to install Postfix as well, to avoid that run - |rpm -Uvh --nodeps $(repoquery --location postfix-sysvinit)| Then you'll be able to run - systemctl

Re: Starting postfix at boot time on Centos 7

2016-02-24 Thread Danny Horne
This command should just read rpm -Uvh --nodeps $(repoquery --location postfix-sysvinit) On 24/02/2016 5:48 pm, Danny Horne wrote: > rpm -Uvh --nodeps $(repoquery --location postfix-sysvinit) signature.asc Description: OpenPGP digital signature

Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2016-04-19 Thread Danny Horne
Can anyone follow up on this? In other words, are any of you using Let's Encrypt certificates with any of the TLSA options written about? I'm considering moving to LE but would like some feedback (last post on this thread was four months ago so early adopters should have experienced a renewal by

Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2016-04-19 Thread Danny Horne
On 19/04/2016 3:51 pm, Philip McGaw wrote: > See my attempt. > > https://skippy.org.uk/lets-encrypt-postfix-and-dovecot/ > > Sent from my iPhone > > Are you using TLSA records though? That was what I really wanted feedback on signature.asc Description: OpenPGP digital signature

Re: Let's Encrypt certificates for port 25 SMTP and DANE TLSA

2016-04-20 Thread Danny Horne
On 19/04/2016 4:19 pm, Dirk Stöcker wrote: > In case you do not know: > > There are two other options for free domain verified certificates: > > https://www.startssl.com/ - per cert: 1 domain, 1 year > https://buy.wosign.com/free/?lan=en - per cert: up to 5 domains, 1-3 > years > > Ciao Thanks f

Re: Helpdesk ticket system

2016-04-26 Thread Danny Horne
On 26/04/2016 7:10 am, Julian Kippels wrote: > Hi, we are using OTRS for this. Julian +1 for OTRS signature.asc Description: OpenPGP digital signature

Single to virtual domains tutorial

2016-08-01 Thread Danny Horne
Hi all, Can someone point me to an easy to understand tutorial on reconfiguring Postfix from serving a single domain to serving virtual domains? Here's my setup - Postfix 3.1.1 Uses Unix system accounts Dovecot IMAP server TLS / DKIM / DMARC used Probably other stuff I've forgotten, if you need

Re: Single to virtual domains tutorial

2016-08-01 Thread Danny Horne
On 01/08/2016 3:01 pm, /dev/rob0 wrote: > On Mon, Aug 01, 2016 at 12:31:33PM +0100, Danny Horne wrote: >> Can someone point me to an easy to understand tutorial on >> reconfiguring Postfix from serving a single domain to serving >> virtual domains? Here's my setup

Problems with IPv6

2016-09-08 Thread Danny Horne
Hi all, It's just been made aware to me that my Postfix (version 3.1.2) is having problems with IPv6. Here's the sort of thing I see in the logs, note it gives no indication it's an IPv6 problem Sep 7 16:12:59 turing postfix/smtpd[12487]: NOQUEUE: reject: RCPT from mail-lf0-x22c.google.com[2a00

Re: Problems with IPv6

2016-09-08 Thread Danny Horne
Thanks for the reply, I found the following site which showed me I was seriously lacking in my IPv6 config. I think I've got it fixed now (email from GMail came through on an IPv6 address) http://www.postfix.org/IPV6_README.html signature.asc Description: OpenPGP digital signature

Re: Problems with IPv6

2016-09-08 Thread Danny Horne
On 08/09/2016 9:45 pm, Allen Coates wrote: > I would be interested to know the measures other people use. Maybe I've just been lucky with spam, but I just use greylisting, my thought being that most spam will be sent from scripts rather than a well configured mail server, and these scripts won't c

Re: OpenDkim signs incoming emails ???

2015-04-16 Thread Danny Horne
> Apr 16 17:18:46 dante opendkim[17056]: (unknown-jobid): not authenticated > > Apr 16 17:18:46 dante opendkim[17056]: 9AB782118043: no signature data > > Apr 16 17:18:46 dante postfix/qmgr[17770]: 9AB782118043: > from=, size=19094, nrcpt=1 (queue active) > > Apr 16 17:18:46 dante postfix/smtpd[

Re: smtpd: warning: hostname does not resolve to address Name or service not known

2015-04-18 Thread Danny Horne
On 17/04/2015 1:02 pm, Krzs wrote: > :~$ telnet smtp.myFQDN 25 > Trying 1.2.3.4 ... > Connected to myFQDN. > Escape character is '^]'. > 220 smtp.myFQDN ESMTP Postfix > ehlo smtp.myFQDN > 250-smtp.myFQDN > 250-PIPELINING > 250-SIZE 1024 > 250-ETRN > 250-STARTTLS > 250-ENHANCEDSTATUSCODES > 25

Re: smtpd: warning: hostname does not resolve to address Name or service not known

2015-04-18 Thread Danny Horne
On 18/04/2015 2:08 pm, Krzs wrote: > SMTPD does starttls > >> 220 2.0.0 Ready to start TLS 'Ready to start TLS' isn't the same as a running TLS connection, you've shown no evidence of the key negotiation (if that's what it's called) required to create the encrypted connection, and I don't belie

Re: Configuring DANE TLSA - "wizard"

2015-06-02 Thread Danny Horne
I think this is what I used...a fair bit of scrolling to get to relevant information but I hope it helps https://ripe68.ripe.net/presentations/253-DANEs_don%27t_lie-20140512.pdf On 02/06/2015 9:35 am, Per Thorsheim wrote: > Cannot find a simple process guide for configuring DANE TLSA support & >

Need help deciphering log entry

2017-01-25 Thread Danny Horne
Hi all, Can anyone decipher this? If by 'recipient address' they mean mine, I receive email from many different sources on that address all the time, so don't know what this entry is telling me. Jan 25 19:06:59 turing postfix/smtpd[7772]: NOQUEUE: reject: RCPT from mx-out-04c.sjc1.discourse.org[

Re: Need help deciphering log entry

2017-01-25 Thread Danny Horne
On 25/01/2017 7:31 pm, Dominic Raferd wrote: > The key text must be 'Server configuration problem'. I think you > should look at earlier lines in your log which might tell you what > your configuration problem is. See > http://www.postfix.org/DEBUG_README.html. I note that the incoming > mail was v

Self-signed TLS certificates

2018-01-21 Thread Danny Horne
Hi all, Apologies if this has been discussed before, but currently I use self-signed certificates on my Postfix servers for TLS negotiation, I'm doing this mainly to keep the costs down.  As far as I'm aware I don't have any problems sending / receiving email to / from the major providers, but cou

Re: Self-signed TLS certificates

2018-01-21 Thread Danny Horne
On 21/01/2018 8:47 pm, Viktor Dukhovni wrote: >> I see wildcard SSL certificates are coming down in price, I use >> SSL on one or two websites and am starting to consider one of these >> to cover everything I do. Am I right in assuming a standard wildcard >> SSL certificate will be usable on both

Re: Self-signed TLS certificates

2018-01-22 Thread Danny Horne
On 21/01/2018 9:35 pm, Viktor Dukhovni wrote: > > Indeed stick with what you've got. You could (if not intimidated by the > logistics, but we may have more tools for you in this space soonish) also > implement a private CA that signs your no-longer self-signed server cert. > This makes it possible

Re: Self-signed TLS certificates

2018-01-24 Thread Danny Horne
On 22/01/2018 3:52 pm, Viktor Dukhovni wrote: > >> On Jan 22, 2018, at 10:06 AM, Danny Horne wrote: >> >> Private CA sounds interesting, will have to read up about it > You can get away with a lot less complexity than the usual OpenSSL CA. > See, f

Achieving trusted TLS connection

2018-01-31 Thread Danny Horne
Hi all, I've read what Postfix documentation I can find on the subject, and I don't understand why I'm seeing untrusted connections rather than trusted.  I'm using an account at mailbox.org for testing purposes, they use DNSSEC / DANE for there server (as do I), and I see a verified connection whe

Re: Achieving trusted TLS connection

2018-01-31 Thread Danny Horne
Thanks for the reply, I didn't think achieving an inbound trusted TLS connection required DANE, merely a trusted certificate (which was verifiable through my trusted CA file. Maybe I misunderstood the documentation

Re: Achieving trusted TLS connection

2018-01-31 Thread Danny Horne
On 31/01/2018 9:12 pm, Bastian Blank wrote: > On Wed, Jan 31, 2018 at 03:31:08PM -0500, Viktor Dukhovni wrote: >> Is "SwissSign Silver CA - G2" included in your "ca bundle"? > Also, is this server known to provide a client cert? > > Bastian > Not sure about 'provide', but the following shows it doe

Re: Achieving trusted TLS connection

2018-02-01 Thread Danny Horne
On 31/01/2018 8:31 pm, Viktor Dukhovni wrote: > You report settings of: > smtpd_tls_CApath = /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt > smtpd_tls_ask_ccert = yes > smtpd_tls_ccert_verifydepth = 2 > > Surely "ca-bundle.trust.crt" is a file not a directory. This would work as >

Re: Achieving trusted TLS connection

2018-02-01 Thread Danny Horne
Ok, didn't fully understand some of what you've said, so I'll just post what I see (no hexadecimal symlinks found).  I've changed smtpd_tls_CApath to /etc/pki/ca-trust/extracted/pem but that hasn't made any difference [root@indium tls]# openssl version -d OPENSSLDIR: "/etc/pki/tls" [root@indium tl

Re: Achieving trusted TLS connection

2018-02-01 Thread Danny Horne
On 01/02/2018 4:56 pm, Viktor Dukhovni wrote: > A simpler way to achieve the same goal would have been: > http://www.postfix.org/postconf.5.html#tls_append_default_CA > > tls_append_default_CA = yes > > bearing in mind the caution in the documentation, when enabling the > panoply of Web

Re: Achieving trusted TLS connection

2018-02-01 Thread Danny Horne
On 01/02/2018 5:10 pm, Danny Horne wrote: > Ok, adding tls_append_default_CA = yes has finally given me trusted TLS > connections, but I do wonder if it was worth it in the end!! > > I am not using permit_tls_all_clientcerts > I forgot to add, thank you all for your help, though it

Re: Achieving trusted TLS connection

2018-02-01 Thread Danny Horne
On 01/02/2018 5:59 pm, Viktor Dukhovni wrote: > This both loads the default CAfile and sets up the default CApath, so > we don't yet know whether your CApath directory is fully prepared or > not... So now you could try reverting to: > > tls_append_default_CA = no > smtpd_tls_CApath = /

Re: Achieving trusted TLS connection

2018-02-01 Thread Danny Horne
On 01/02/2018 6:40 pm, Viktor Dukhovni wrote: > >> On Feb 1, 2018, at 1:26 PM, Danny Horne wrote: >> >> I might have a go at that later (can't find >> c_rehash anywhere but do have csplit available) > https://www.openssl.org/docs/man1.1.0/apps/openssl-reha

Re: Problem when I send a mail

2018-05-15 Thread Danny Horne
On 15/05/18 19:34, for...@mehl-family.fr wrote: > > Hi, > > When I send a mail with roundcube from my computer I find this message > on my maillog : > > /*May 15 20:16:51 MYSERVER postfix/smtpd[29843]: connect from > unknown[192.168.1.1]*/ > > I think all that means is Postfix can't resolve the IP

Re: Self-signed TLS certificates (Minimal setup)

2018-07-13 Thread Danny Horne
On 24/01/18 16:37, Dirk Stöcker wrote: > It's not sooo complicated: > > Short guide for UNIXoid systems: > After a long gap (and a recent server rebuild), I've revisited this and after a few false starts think I've created the CA and server certificates correctly using Dirk's instructions.  On impl

Switching final delivery from Postfix to Dovecot

2018-07-26 Thread Danny Horne
Hi, After using local filters (on Thunderbird) for a long time I'm trying to get Dovecot / Sieve filtering working.  I think I'm almost there but can't get Postfix to allow Dovecot to do the final delivery, which is (I believe) the only thing stopping things working. Here's my postconf -n output,

Re: Switching final delivery from Postfix to Dovecot

2018-07-26 Thread Danny Horne
On 26/07/18 10:56, Wietse Venema wrote: > Danny Horne: >> Hi, >> >> After using local filters (on Thunderbird) for a long time I'm trying to >> get Dovecot / Sieve filtering working.? I think I'm almost there but >> can't get Postfix to all

Re: Switching final delivery from Postfix to Dovecot

2018-07-26 Thread Danny Horne
On 26/07/18 10:56, Wietse Venema wrote: > Danny Horne: >> Hi, >> >> After using local filters (on Thunderbird) for a long time I'm trying to >> get Dovecot / Sieve filtering working.? I think I'm almost there but >> can't get Postfix to all

Could somebody check my Postscreen setup?

2018-08-13 Thread Danny Horne
Hi all, I'm trying out Postscreen after having used Postgrey for some time.  The reason for the switch is that Postgrey can cause emails from Google etc. to take a long time to come through due to the large number of IP addresses they use (and I don't want to whitelist the GMail addresses). Here'

Re: Could somebody check my Postscreen setup?

2018-08-14 Thread Danny Horne
On 14/08/18 10:36, Matus UHLAR - fantomas wrote: > > so, what is the problem? > None as far as I'm aware, but this is my first time using Postscreen, so wanted to check that I hadn't messed anything up