Re: transport_maps not taking on

2019-08-09 Thread Kai Schaetzl
Noel Jones wrote on Thu, 8 Aug 2019 10:49:54 -0500: > That looks like a policy service and not a milter. Yeah, right. It's a dovecot authenticator I think. > > Regardless, postfix accepts mail, running it through all configured > milters, restrictions, and policy services, then puts it in the

Re: transport_maps not taking on

2019-08-08 Thread Kai Schaetzl
I have still one question, though. I fear that forwarding the mail via transport may not consult the milter. At the moment the remote Exchange is still not configured to accept the domain. I'm still waiting for that to take place. In the meantime, though, I would have expected that the course of

Re: Postfix not using LMTP Transport in map

2019-08-08 Thread Kai Schaetzl
Maztec wrote on Thu, 8 Aug 2019 01:13:18 -0700 (MST): > However, Mailman3 does not use a socket - > nonetheless I tried. I wrote that because your service specification in master.cf says it does use a Unix socket. I think you have to specify that in the mailman3 service in your master.cf!

Re: transport_maps not taking on

2019-08-08 Thread Kai Schaetzl
I went back to my original config with virtual users and domains, with and without the milter. I left transport and mynetworks as they were. I have no idea why, but it's working now and I get a bounce from the remote server (= it's not yet accepting the mail). No more attempts to deliver

Re: transport_maps not taking on

2019-08-08 Thread Kai Schaetzl
Wietse Venema wrote on Wed, 7 Aug 2019 19:33:05 -0400 (EDT): > Once a message enters in the hold queue IT WILL SIT THERE FOREVER > unless something releases it from that queue. Understood. Thanks! I should have known from the past (see below). > > You need to figure out why messages are placed

Re: transport_maps not taking on

2019-08-07 Thread Kai Schaetzl
Noel Jones wrote on Wed, 7 Aug 2019 13:37:08 -0500: > Postfix logs all delivery attempts. I thought so, but ... In that case it just hangs in the queue and nothing happens after the milter was consulted. I can see it getting logged in rspamd and then it just sits in the hold queue.

Re: transport_maps not taking on

2019-08-07 Thread Kai Schaetzl
Kai Schaetzl wrote on Wed, 07 Aug 2019 19:11:19 +0200: > Should I remove the domain from $mydestination ? I did that now and postfix still accepts the mail. However, it doesn't deliver it to the remote server. It hangs in the queue. It's possible that the remote side is not accept

Re: transport_maps not taking on

2019-08-07 Thread Kai Schaetzl
Thanks for the reply, but no. I had to, indeed, remove the domain from $mydestination to not deliver locally, but it's still not working correctly. Your map configuration lines may be wrong. I think the only thing you need is this as a destination: /^List@List\.TLD$/mailman3: (no

transport_maps not taking on

2019-08-07 Thread Kai Schaetzl
Postfix 3.1.0, set up with virtual domains and users in a database via virtual_ directives in main.cf rspamd set up as a milter -> everything works just fine. I have one server where the client wants to get mail delivered to his Exchange server remotely instead. He wants to have the mail

Re: dnsbl postscreen - not blocking

2018-12-20 Thread Kai Schaetzl
Stefan Bauer wrote on Wed, 19 Dec 2018 21:10:10 +0100: > the threshold is at default, so 1. This may not be part of your problem, but using a threshold of 1 and then using this weighting scheme is nonsense: postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 b.barracudacentral.org*1

Re: Missing something in allowing a program-alias address

2018-12-18 Thread Kai Schaetzl
Phil Stracchino wrote on Sun, 16 Dec 2018 16:34:23 -0500: > relay recipient table http://www.postfix.org/postconf.5.html#relay_recipient_maps may be helpful. Kai

Re: Re: Panic…

2018-12-14 Thread Kai Schaetzl
Btw, what sizes are we talking about here? I assume it would be really huuuge? What's the max size of the .cache file and how many mails might create this size? Kai

Re: smtpd_delay_reject with rspamd milter

2018-11-08 Thread Kai Schaetzl
Matus UHLAR - fantomas wrote on Thu, 8 Nov 2018 12:12:49 +0100: > the problem lies in "parent_domain_matches_subdomains" which is (and should > be) empty in postfix and apparently even is in new postfix version. As I wrote earlier, it *is* set implicitely by backwards-compatibilty. > First I

Re: smtpd_delay_reject with rspamd milter

2018-11-07 Thread Kai Schaetzl
Noel Jones wrote on Wed, 7 Nov 2018 13:30:08 -0600: > With the above list, check_sender_access comes first. Postfix does > not reorder the list you have specified. Thanks for the answer. But, please look again. /etc/mail/access: createsend.com REJECT cmail20.com REJECT The order is: > >

Re: smtpd_delay_reject with rspamd milter

2018-11-07 Thread Kai Schaetzl
Wietse Venema wrote on Wed, 7 Nov 2018 12:10:40 -0500 (EST): > HOWEVER, by default Postfix evaluates all of these at RCPT TO time. which means smtpd_delay_reject = yes is the default? Am I correct in assuming that with "yes" it doesn't matter if I list the client restrictions in

Re: smtpd_delay_reject with rspamd milter

2018-11-07 Thread Kai Schaetzl
Addendum. Currently, I get client rejections with the setup shown in my last mail (despite the delay). I don't know if it hits *always*, though. I can't check if it didn't hit for some client where the name matches, there are too many entries. I expected it to carry out the helo checks before

Re: smtpd_delay_reject with rspamd milter

2018-11-07 Thread Kai Schaetzl
Carsten Rosenberg wrote on Wed, 7 Nov 2018 16:23:54 +0100: > So if you reject somebody with an access_map, you won't see any scan > result in rspamd. This would be fine ;-) > Do you have any problems with this situation? Yes, it's the other way around here. e.g. there is no rejection happening

smtpd_delay_reject with rspamd milter

2018-11-07 Thread Kai Schaetzl
I'm having trouble with access_maps kicking in after an upgrade from a Postfix 2.something to Postfix 3.1. on Ubuntu 14.06 and using postscreen and rspamd milter. After some testing I'm not sure yet, but it looks like the recommended smtpd_delay_reject = yes in connection with having the

unsubscribe

2018-10-09 Thread Kai Schaetzl
unsubscribe

Re: doveadm quota error output in some cases

2018-10-05 Thread Kai Schaetzl
I changed this now to a more standard setup using a mysql passdb/userdb for virtual users and a passwordfile auth (auth-passwordfile.ext) as described in doc/wiki/AuthDatabase.PasswdFile.txt for a few other users. I'm still getting the same errors concerning dict access when running doveadmin

doveadm quota error output in some cases

2018-09-27 Thread Kai Schaetzl
I am testing a special setup on one machine where I want to put some local users that get mail locally to /home user directories via postfix transport map local: for historical and practical reasons. Other users are setup as virtual users. The local users are *also* setup as virtual users for

Re: split auth from other logging

2018-09-26 Thread Kai Schaetzl
I forgot to mention that you have to change owner for the /var/log/dovecot directory before rsyslog can log. Kai

Re: split auth from other logging

2018-09-26 Thread Kai Schaetzl
This works for splitting off lmtp traffic, for instance. syslog_facility = uucp rsyslog: :msg, contains, "lmtp(" -/var/log/dovecot/lmtp.log & stop uucp.=debug -/var/log/dovecot/debug.log uucp.=info -/var/log/dovecot/dovecot.log uucp.=warn

Re: split auth from other logging

2018-09-26 Thread Kai Schaetzl
I'm not going to log dovecot to mail, that creates only the same mixup as before, even worse, now postfix and dovecot mixed. I had to stop/start (force-reload would also work) rsyslogd to pick up the changed config. A restart doesn't change the config as with other daemons. Now I can filter

Re: split auth from other logging

2018-09-26 Thread Kai Schaetzl
Kai Schaetzl wrote on Wed, 26 Sep 2018 12:43:28 +0200: > But it logs only to /var/log/syslog It seems that "service rsyslog restart" doesn't correctly restart rsyslogd. You have to stop and start it. Then it picks up the changed config. Kai -- Get your web at Conactive Inte

Re: split auth from other logging

2018-09-26 Thread Kai Schaetzl
I hoped I don't have to switch to syslog logging. Well, anyway. I changed 10-logging.conf: syslog_facility = uucp and commented out the other log lines. rsyslog.d/50-default.conf: uucp.debug -/var/log/dovecot/debug.log uucp.info

split auth from other logging

2018-09-26 Thread Kai Schaetzl
Is there a way to split the auth logging (logins and failed logins) from the other logging that goes to info_log_path = /var/log/dovecot/dovecot.log ? This log gets a lot of other info as well, most notably the lmtp notifications about every filed mail (with no level stamping, btw). This makes

Re: How to send mail to mailbox with disabled domain?

2018-09-17 Thread Kai Schaetzl
Thanks for all the replies. I didn't have time to reply earlier. I went with my first proposed solution. Everything else is simply too much hazzle. You would have to set this for every single exception/address/user and so on and you cannot be sure that it doesn't bite you some time later with a

Re: How to send mail to mailbox with disabled domain?

2018-09-11 Thread Kai Schaetzl
Gerald Galster wrote on Tue, 11 Sep 2018 20:49:17 +0200: > Is this a dovecot problem on your side? dovecot usually accepts mail > from MTA like postfix, so it would be better to remove example1.com from > postfix relaydomains (mailbox domains, alias domains, ...). Then there > is no delivery to

How to send mail to mailbox with disabled domain?

2018-09-11 Thread Kai Schaetzl
Given the following: mailboxes: us...@example1.com us...@example1.com us...@example1.com etc. aliases: whate...@example1.com -> us...@example1.com whate...@example2.com -> us...@example1.com whate...@example3.com -> us...@example1.com Now the problem: example1.com MX goes elsewhere (doesn't

dsync mail from a remote server

2018-09-10 Thread Kai Schaetzl
I would like to transfer mail for some users from an old dovecot (with no doveadm) to a modern dovecot (2.3.2). I've read up on https://wiki2.dovecot.org/Tools/Doveadm/Sync https://wiki2.dovecot.org/Migration/Dsync and I'm not sure if I can use doveadm for this purpose. I need doveadm to login

Re: Does domain quota work and how?

2018-09-01 Thread Kai Schaetzl
Kai Schaetzl wrote on Mon, 20 Aug 2018 13:32:59 +0200: > So, is this config correct for domain quota dictionary-based and how > should it work? Hello, resolving a problem and knowing that there is a problem are two different things. I would still like to know if this config is correct a

Re: systemd also listening on imaps port

2018-08-20 Thread Kai Schaetzl
Ok, thanks! Kai

Re: Does domain quota work and how?

2018-08-20 Thread Kai Schaetzl
So, is this config correct for domain quota dictionary-based and how should it work? Kai

systemd also listening on imaps port

2018-08-20 Thread Kai Schaetzl
I noticed that most of the time with dovecot 2.3 I get this output, showing systemd listening on the port as well: lsof -i TCP:993 systemd 1 root 38u IPv4 3388360574 0t0 TCP *:imaps (LISTEN) systemd 1 root 41u IPv6 3388360575 0t0 TCP *:imaps (LISTEN) dovecot 11607 root

Re: creation of ssl-parameters fails

2018-08-20 Thread Kai Schaetzl
Aki Tuomi wrote on Sun, 19 Aug 2018 20:56:28 +0300 (EEST): > openssl gendh 4096 > params.pem Ok. I then misunderstood what's written at https://wiki.dovecot.org/SSL/DovecotConfiguration I thought I need to create dh.pem in two steps: 1. openssl dhparam 4096 >

Re: creation of ssl-parameters fails

2018-08-19 Thread Kai Schaetzl
Well, on that machine it took now more than an hour. But it created the same 769 bytes file as on the other machines. And, foreseeable, that one fails to transform as well. -rw-r--r-- 1 root root 360 Aug 7 2017 ssl-parameters.dat -rw-r--r-- 1 root root 769 Aug 19 19:25

Re: creation of ssl-parameters fails

2018-08-19 Thread Kai Schaetzl
Aki Tuomi wrote on Sun, 19 Aug 2018 18:21:31 +0300: > Just generate new parameters on some machine with good entropy source. So, if it fails to transform (although bigger) the machine hasn't enough entropy (because it's quite new?)? I'm generating now on the original machine from last year

creation of ssl-parameters fails

2018-08-19 Thread Kai Schaetzl
I did that the last time one year ago, now on another machine with the same software (Ubuntu 16.04) it fails. openssl dhparam 4096 > /var/lib/dovecot/ssl-parameters.dat dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem last command fails

Re: dovecot and postfix, help?

2018-08-18 Thread Kai Schaetzl
Christy S wrote on Fri, 17 Aug 2018 18:05:47 -0500: > I see the > connection in the log, but no errors. what do you see? And, also, what exactly do you want to do? (e.g. with what do you send which email from->to via what, how should this affect your server and what do you check on your

Re: Does domain quota work and how?

2018-08-17 Thread Kai Schaetzl
Aki Tuomi wrote on Thu, 16 Aug 2018 21:03:44 +0300 (EEST): > Can you provide doveconf -n please? Thanks for the quick reply. I think I already provided the most relevant portions of config. I ran a doveconf -n and it doesn't reveal important information like sql setup. I'll do my best to sum

Does domain quota work and how?

2018-08-16 Thread Kai Schaetzl
Hello, I'm in the process of moving users from an old dovecot setup with system users to a modern virtual user setup. I can't find good documentation on domain quota. It is mentioned in the docs as quota2 = dict:domain:%d:proxy::quota_domain but not much more. Searching the mailing list or

Re: [Freedos-user] How to

2017-05-06 Thread KAI SCHAETZL
From: Kai Schaetzl <mailli...@conactive.com> Tom Ehlert wrote on Mon, 15 Aug 2016 16:00:55 +0200: > an amazing amount of effort to get a german keyboard driver Not really once you know that you don't need the .kl file. According to http://help.fdos.org/de/hhstndrd/base/keyb.htm you ha

Re: [Freedos-user] How to

2017-05-06 Thread KAI SCHAETZL
From: Kai Schaetzl <mailli...@conactive.com> Eric Auer wrote on Sun, 14 Aug 2016 17:50:31 +0200: Hi Eric, thanks for the quick reply. In the meantime I found out that I can load a German layout with just "keyb gr", just not the layout file itself or the /E switch t

Re: [Freedos-user] How to use German keyboard layout with FreeDOS?

2016-08-18 Thread Kai Schaetzl
Tom Ehlert wrote on Mon, 15 Aug 2016 16:00:55 +0200: > an amazing amount of effort to get a german keyboard driver Not really once you know that you don't need the .kl file. According to http://help.fdos.org/de/hhstndrd/base/keyb.htm you have to run (as an example) "keyb GR,,GR GR.KL /E". You

Re: [Freedos-user] How to use German keyboard layout with FreeDOS?

2016-08-18 Thread Kai Schaetzl
Rugxulo wrote on Mon, 15 Aug 2016 11:35:27 -0500: > Assuming you have the "full" (official) FD 1.1 install, do you not > find KC.EXE anywhere? No, I don't have kc. I'm not running FreeDOS 1.1 iso. I don't remember the history. I grabbed files for FreeDOS b1.0 and 1.1 some time ago from a zip.

Re: [CentOS] how to update from 5.8 to 5.latest?

2016-08-15 Thread Kai Schaetzl
Eero Volotinen wrote on Mon, 15 Aug 2016 11:00:51 +: > Maybe your repodata cache was a bit old :) Yeah. I would have thought it checks the date of the file and tries to update it when it's that old. Anyway, clearing the whole yum cache was a good idea as I don't need the 5.8 rpms anymore.

[CentOS] how to update from 5.8 to 5.latest?

2016-08-15 Thread Kai Schaetzl
Hi! I revived an old disk with CentoS 5.8 on it and want to update it to 5.latest (=5.11). However, it insists on getting 5.8 files. From the past I remember I would get a major release jump from 5.n to 5.m automatically. Or do I remember this wrong? I googled a bit around, but couldn't really

Re: [Freedos-user] How to use German keyboard layout with FreeDOS?

2016-08-15 Thread Kai Schaetzl
Eric Auer wrote on Sun, 14 Aug 2016 17:50:31 +0200: Hi Eric, thanks for the quick reply. In the meantime I found out that I can load a German layout with just "keyb gr", just not the layout file itself or the /E switch that is mentioned in that article. I assume the gr.kl is embedded in the

[Linux-PowerEdge] bios screen text suddenly yellow

2016-08-14 Thread Kai Schaetzl
I worked on an old R200 the other day and must have fingered a weird key combo when rebooting or so. The bios screen and any other output is now not blue on white/grey (if I remember right), but it's yellow on black. It's bearable, but the original color would be better. Anyone knows what

[Freedos-user] How to use German keyboard layout with FreeDOS?

2016-08-14 Thread Kai Schaetzl
I've been trying for the last two hours or so to find out how to use a German keyboard with FreeDOS. There is enough information, but some of the files cannot be downloaded anywhere. I'm running in circles. Or I'm missing something obvious. What I found out: I have to use keyb with a command

Re: [CentOS] PHP version not enough for developers

2015-10-22 Thread Kai Schaetzl
I've been using IUS in the past. They have a good way of naming their rpms, so they don't interfere with the RH rpms. But they don't support older CentOS versions still on extended support as long as I needed them. And they don't provide as much php-related rpms (f.i. pecl-stuff) as remi does.

Re: [CentOS] PHP version not enough for developers

2015-10-22 Thread Kai Schaetzl
Nux! wrote on Thu, 22 Oct 2015 17:27:26 +0100 (BST): > It's irrelevant in this case that PHP 5.3 is EOL. It will continue > to be supported by Red Hat with security patches. Exactly. Nevertheless, PHP 5.6 is not "bleeding edge" as someone else said. 5.5 and 5.6 are really state of the art and

Re: [CentOS] Asymmetric encryption for very large tar file

2014-12-18 Thread Kai Schaetzl
I would rather work on single files or tars on directory basis. Using a single big file creates a very large single point of failure. Or use an encrypted file system (of course, also a single point of failure, but probably better handling). Kai ___

Re: .co.at

2014-11-20 Thread Kai Schaetzl
As you learned by now co.at ist just as valid as any other TLD. There are many like that. Some have just shifted to that scheme, others are moving away from it (for instance uk is now offering raw .uk registrations which you couldn't get until last year or so). Unfortunately, there's no

Re: [CentOS] Not To James B. Byrne

2014-11-12 Thread Kai Schaetzl
That's ridiculous, you don't even know what's wrong or if it's wrong at all or what you want him to do but you have to cry it out loud to the list to put social pressure on him. Please move this to private mail and understand that Gmail is *not* what rules email best practice and also try to

Re: [CentOS] Not To James B. Byrne

2014-11-12 Thread Kai Schaetzl
Les Mikesell wrote on Wed, 12 Nov 2014 10:13:07 -0600: Well, no. Well, *yes*. It's not business to be carried out on the list nor does the guy who moans about it seem to know why. And if you are the second from Gmail then please move it off-list as well. It's really not anyone's problem on

Re: [CentOS] Bash still vulnerable

2014-10-09 Thread Kai Schaetzl
I noticed this as well but did some homework ;-) https://bugzilla.redhat.com/show_bug.cgi?id=1147189 https://access.redhat.com/security/cve/CVE-2014-6277 If I understand it correctly they think it's not exploitable anymore. Still think it should get patched immediately as there is an upstream

Re: [CentOS] restarting mysql databases

2014-10-07 Thread Kai Schaetzl
What you want to do it seems is change the hostname for access of some users. Although, if it is local access, they should have access to localhost and it doesn't matter which hostname the machine has. Also, initially, you have to set the root password. Almost everyone uses PHPMyAdmin to

Re: [CentOS] centos 5.11 and postfix

2014-10-06 Thread Kai Schaetzl
I made a test update of only Postfix and don't see a problem. There's indeed a new main.cf file saved as main.cf.rpmnew and there's also a new main.cf.default file which contains all default settings of postconf. The data_directory apparently changed from /etc/postfix to /var/lib/postfix which

Re: half-OT: please remove spam-markers from subjects

2014-10-03 Thread Kai Schaetzl
FYI, this person is banned from some lists for trolling. Might be worthwhile for list-admin to consider that. https://www.google.de/search?hl=deas_q=Harald+Reindl+troll Kai

Re: [CentOS] Need to Understand booting process of CENTOS-7

2014-10-01 Thread Kai Schaetzl
Digimer wrote on Tue, 30 Sep 2014 17:18:17 -0400: I think it would be really good if everyone took a step back, took a deep breath, and relaxed. This thread has generated a surprisingly (and to me baffling) amount of negativity. I don't know how long you have been on this list, but it's a

Re: [CentOS] Weird output of system load

2014-09-12 Thread Kai Schaetzl
Mingfei Hua wrote on Thu, 11 Sep 2014 15:05:33 +: This issue happened again, who can help on this? system load up to 72, but /proc/stat only show that 2 processes were running and no process blocked As others have already said, you are not giving and you are not looking at relevant

Re: SA works great!

2014-09-02 Thread Kai Schaetzl
Ted Mittelstaedt wrote on Sun, 31 Aug 2014 07:08:11 -0700: Out of the box the default decision point of 5 is too high anyway. No. You can always lower it yourself. With the result of more FPs. If you or your users can live with that. Fine. Many can't. I think the emphasis on avoiding false

Re: [CentOS] Dual boot with Windows 8.1, UEFI

2014-08-28 Thread Kai Schaetzl
EasyBCD is an extra software, just google it. Kai ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Port scanning from MicroSoft?

2014-08-20 Thread Kai Schaetzl
James B. Byrne wrote on Wed, 20 Aug 2014 11:06:20 -0400: 23.102.173.124 Google says: http://security.stackexchange.com/questions/26486/failed-rdp -brute-force-attack-from-microsoft-ip-address Kai ___ CentOS mailing list CentOS@centos.org

[CentOS] sshd_config AllowUsers syntax wrong in documentation

2014-06-26 Thread Kai Schaetzl
It seems the syntax for AllowUsers in sshd_config is not the same that is given in man sshd_config and in several documentation on the web. (http://www.openssh.com/cgi-bin/man.cgi?query=sshd_config) e.g. AllowUsers root does work. AllowUsers root username does not work. If I try to login as

Re: [CentOS] sshd_config AllowUsers syntax wrong in documentation

2014-06-26 Thread Kai Schaetzl
Reindl Harald wrote on Thu, 26 Jun 2014 13:04:21 +0200: not true Don't say it's not true. ;-) I tried it at least half an hour with all possible combinations and only the user@* pattern worked. I made absolutely sure that I restarted the ssh server each time. I know also pretty well, that I

Re: [CentOS-virt] Xen DomU supoprt in RHEL 7 and the CentOS Plan

2014-06-03 Thread Kai Schaetzl
David Vrabel wrote on Tue, 27 May 2014 13:04:21 +0100: still do a text-console (in theory). Is this an interesting use case? It comes in handy for instance if there's something wrong with networking in the guest ;-) Also, I've used it in cases where the load was very high or when the

Re: BAYES_999 of score 1.0 (default)

2014-02-20 Thread Kai Schaetzl
Lennart Johansson wrote on Thu, 20 Feb 2014 13:58:21 +0100: Which SA versions do get this new 999 rule? e.g. I have also older installations with 3.2.4 and 3.2.5 that would need careful updating. Just adding your rule seems to add 999 to the set of older setups as well, although it wasn't

Re: BAYES_999 of score 1.0 (default)

2014-02-20 Thread Kai Schaetzl
Kevin A. McGrail wrote on Thu, 20 Feb 2014 10:06:59 -0500: 3.2.0 hasn't had updates since at least Jan of 2010 from looking I thought there may not have been any updates since then. Time to do upgrades :-) But the eval rule nevertheless works if you add it manually. Thanks for all your hard

Re: [CentOS] OT hard disk geometry

2014-02-08 Thread Kai Schaetzl
Timothy Murphy wrote on Fri, 07 Feb 2014 23:40:24 +: As you see, there is an empty (and slightly smaller) slot between the SATA connectors and the power connector. That power connector is a jumper bay. As Miguel explains the two L- shaped things are what gets used for SATA (the short one

Re: [CentOS] OT hard disk geometry

2014-02-08 Thread Kai Schaetzl
Timothy Murphy wrote on Sat, 08 Feb 2014 13:28:18 +: I had better check if these do support SATA3 drives. That jumper bay usually allows for setting to slower speeds. There should have been a small leaflet with the drive explaining it. Kai ___

Re: [CentOS] OpenVPN problem

2014-02-08 Thread Kai Schaetzl
Timothy Murphy wrote on Sat, 08 Feb 2014 13:50:07 +: I'm having problems communicating with a remote server, with openvpn. First, did you check that it works fine without OpenVPN (e.g. firewall open)? Second, what exactly are you doing/do you want to achieve? VPN makes sense if you go

Re: [CentOS] Linux reinstallation without rebooting? Alternative to kickstart and other such tools?

2014-01-11 Thread Kai Schaetzl
Andrew Holway wrote on Sat, 11 Jan 2014 11:05:37 +: You will need another server set up on the same L2 network that will serve DHCP and TFTP and HTTP. You can set it up similar to the following. Well, I think he's lacking that option (e.g. setup DHCP in the same network). What he wants

Re: [CentOS] ADMIN issue - manitu

2013-12-06 Thread Kai Schaetzl
m.r...@5-cent.us wrote on Thu, 5 Dec 2013 14:37:29 -0500: And here's two thoughts that just struck me: first, they have no way to apply to be whitelisted. I think there are ways, they do maintain a whitelist. Maybe Hostmonster is just not good enough to get on it. Did you consider that?

Re: [CentOS] ADMIN issue - manitu

2013-12-06 Thread Kai Schaetzl
m.r...@5-cent.us wrote on Thu, 5 Dec 2013 16:47:37 -0500: I keep hoping, perhaps foolishly, that others who get hit with this will add their voice, and that the list might go to using some other source to block spam. Oh, yeah, until the day where that list adds Hostmonster as well and

Re: [CentOS] ADMIN issue - manitu

2013-12-06 Thread Kai Schaetzl
The list pays very well. It's just that your hosting provider is regularly or irregularly on it. That's the only reason you think it doesn't pay. Not a good reason. It pays for everybody else on this list except you. Consider that. It may even pay for you, just that you don't notice (less

Re: [CentOS] ADMIN issue - manitu

2013-12-05 Thread Kai Schaetzl
Actually, Manitu, also known as NIXSpam, is quite a good list. I've been using only this one and Spamhaus for years. Very good FP:Spam ratio. I, too, had an issue with the list lately and contacted the maintainer of the project who gave me a good explanation of why Facebook servers may be

Re: Feedback on blacklist rule I plan to write

2013-10-30 Thread Kai Schaetzl
William A. Fink wrote on Wed, 30 Oct 2013 10:41:52 -0400: My question is: The SMTP protocol allows a return address to be 'u...@ip-address.com' and 'u...@ip-address.com' and some other variations, I'll assume. Are you really talking about ip-address.*com* or just ip-address? SMTP allows

Re: Feedback on blacklist rule I plan to write

2013-10-30 Thread Kai Schaetzl
Why so complicated? For literals just look for [ and ]. They can only be around a literal IP address. Or if you want to block only the non-routable addresses use these for regexp. Your regexp seems to be ok to me, but I'm not an expert in regexp and I don't know if you can use it there (it's

Re: [CentOS] HP annoyances

2013-10-30 Thread Kai Schaetzl
Why do you post this statement to this list? Also, poweroff does not mean for a server that it's not on power, it's just not started. BMC, fans etc. are running. Kai ___ CentOS mailing list CentOS@centos.org

Re: Explanation of message of RDNS_NONE??

2013-10-22 Thread Kai Schaetzl
Webmaster DKDB wrote on Tue, 22 Oct 2013 08:08:01 +0200: dkdb.dk.37.66.77.in-addr.arpa Probably because of this. This reverse DNS is not under an existing top- level-domain and looks very much like a normal reverse lookup (and not the result). Have them set it to a real public hostname. Kai

Re: [CentOS] - multiple virtual host on httpd

2013-10-21 Thread Kai Schaetzl
do not see anything is not a problem description that gives any information to someone who wants to help you. If you do not know if you can reach the correct website then place a simple index.htm in the root that makes it identifable. Then access this file. If you can view it then the httpd

Re: Strange URIBL_SBL false positive?

2013-10-17 Thread Kai Schaetzl
Neil Schwartzman wrote on 17 Oct 2013 07:01:00 -0700: incorrect, not false, which implies maliciousness. I believe Spamhaus only recently, for some value of recently, started doing NS listings with deeper dives that show up on an SBL listing. They didn't list any NS IP. If you look at the

Re: Strange URIBL_SBL false positive?

2013-10-17 Thread Kai Schaetzl
Axb wrote on Thu, 17 Oct 2013 17:05:48 +0200: 15 live SBL listings aren't collateral damage: It doesn't matter if there is more evidence. The scoring via URIBL_SBL would have happened no matter whether the other 14 exist or not. It doesn't get the nameserver, it gets the NS IP What's the

Re: Available of 3.4.0 Release Candidate 3

2013-10-15 Thread Kai Schaetzl
That's much better, thanks! I wasn't sure about this also Because LWP does not support IPv6. It *could* mean that LWP generally does support IPv6, but mine doesn't. As I understand it now it means that LWP in general doesn't support it. Kai -- Get your web at Conactive Internet Services:

Re: Available of 3.4.0 Release Candidate 3

2013-10-15 Thread Kai Schaetzl
Thanks for the explanation. So I just forget about this new module, I don't need it. Just thought it might hold other advantages as the make output seems to suggest it does. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Available of 3.4.0 Release Candidate 3

2013-10-15 Thread Kai Schaetzl
Kevin A. McGrail wrote on Sun, 13 Oct 2013 14:14:02 -0400: I don't use MailScanner and have no input on this issue, sorry. I've installed my 3.4.0 rpm on two systems with MailScanner now, one of them in production. I've also tested compiling rules. It seems to be working just fine without any

Re: Available of 3.4.0 Release Candidate 3

2013-10-14 Thread Kai Schaetzl
You are missing the local.cf or any similar local config. MailScanner puts a mailscanner.cf symlink there that points to /etc/MailScanner/spamassassin.prefs.conf The symlink seems to have been deleted. I usually do it a bit different. I maintain my own local.cf in /etc/mail/spamassassin and

Re: Available of 3.4.0 Release Candidate 3

2013-10-14 Thread Kai Schaetzl
Kevin A. McGrail wrote on Sun, 13 Oct 2013 14:14:02 -0400: Preferably a perl module IO::Socket::IP is used (if it is available) for network communication regardless of a protocol family - for DNS queries, by spamd server side, and by a client code in Mail::SpamAssassin::Client. As a fallback

Re: Available of 3.4.0 Release Candidate 3

2013-10-14 Thread Kai Schaetzl
Mark Martinec wrote on Sun, 13 Oct 2013 20:16:05 +0200: Don't bother with fetch, it's FreeBSD -specific. Ah, then the mention of it in the make output is confusing. Thanks. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Available of 3.4.0 Release Candidate 3

2013-10-13 Thread Kai Schaetzl
I've just tested building 3.4.0 on Centos 5 system where I also built 3.3.2. make and make test worked fine. I'm not sure if I can make it an inplace replacement, though. Has anyone running MailScanner tried 3.4.0? So, I haven't installed it yet. Observations: I'm missing a spec file. Earlier

Re: Available of 3.4.0 Release Candidate 3

2013-10-13 Thread Kai Schaetzl
what is the startup message as expected? MailScanner message? Does it lint correctly (MS)? I've just built an rpm and installed it on a test system. So far it looks good, but I have to send some mail to it now as this system normally doesn't get mail. Kai -- Get your web at Conactive

Re: Available of 3.4.0 Release Candidate 3

2013-10-13 Thread Kai Schaetzl
seems to be working on the test system. Oct 13 15:56:31 news MailScanner[21325]: Requeue: 225071157F.A48D0 to 3B69711588 Oct 13 15:56:31 news MailScanner[21325]: Requeue: 22356114B9.A4C8E to 015801157F Oct 13 15:56:31 news MailScanner[21325]: Uninfected: Delivered 2 messages Oct 13 15:56:31

Re: [CentOS] CENTOS 5 incoming SFTP

2013-10-01 Thread Kai Schaetzl
John McKelvey wrote on Mon, 30 Sep 2013 23:27:55 -0400: The catch is that I can not connect to the box using SSH That's obviously not true or just half of the story. Did you actually try *sshing* in? Your title mentions sftp, not ssh. So, what software are you using to connect? I would

Re: [users] clamd i386 update...

2013-09-28 Thread Kai Schaetzl
Just wanted to say thank you very much to everybody who made rpmforge/repoforge go on with updates, especially Dag und David. Your efforts are very much appreciated. Thanks! Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: [CentOS] Run one-time startup script

2013-09-25 Thread Kai Schaetzl
Reindl Harald wrote on Fri, 20 Sep 2013 14:32:46 +0200: /etc/rc.d/rc.local Thanks for all the answers. First, I omitted to explicitely state that these are web servers. There is no dhcp, only one or, in a few cases, a few IP static IP addresses. Mostly Centos 5. Changing the data is *not*

Re: [CentOS] Run one-time startup script

2013-09-25 Thread Kai Schaetzl
Kai Schaetzl wrote on Wed, 25 Sep 2013 10:58:51 +0200: Google suggests a file /etc/rc.shutdown (or rc.local.shutdown?) which, if I understand correctly, would be carried out after the init stuff for the shutdown (rc0) has been done. rc.local.shutdown or rc.halt don't work. Seems I have

Re: [CentOS] php fopen ssl error

2013-09-25 Thread Kai Schaetzl
This should really be directed at a PHP forum. I would suspect that something with the server certificate is not ok. Kai ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

  1   2   3   4   5   6   7   8   9   10   >