Re: question about man starttls and linking to cert.pem

2019-08-11 Thread Gilles Chehade
interesting to have instruction for generating self-signed cert but most people will want a cert that others will validate so it makes sense to at least extend the man page (in another diff) in my opinion. -- Gilles Chehade @poolpOrg https://www.p

Re: opensmtpd forwarding sent mail and extras-pgsql

2019-06-06 Thread Gilles Chehade
ay of it if you can't write code at the moment. Some people already wrote a few useful filters and are using them daily, so this is more than usable at this point, my plan is for the filter API to be made rock-solid for 6.6. > Once again, thank you for this amazing piece

Re: opensmtpd forwarding sent mail and extras-pgsql

2019-06-05 Thread Gilles Chehade
h identical in terms of configuration. -- Gilles Chehade @poolpOrg https://www.poolp.org tip me: https://paypal.me/poolpOrg

Re: Puffy Security smtpd out of date ( closed )

2019-03-11 Thread Gilles Chehade
; was looking for. > glad it helps, though keep in mind that I'm writing about code that is on my laptop or that's very very very fresh and likely to change. we're nearly a year apart from that post and I can't even remember all of the changes, fixes and improvements. -- Gilles Chehade @poolpOrg https://www.poolp.org tip me: https://paypal.me/poolpOrg

Re: OpenBSD 6.4 smtpd local mail delivery missing "From " when .forward (procmail)

2019-01-27 Thread Gilles Chehade
ndmail!?? A 4 line config file to have a functioning email > configuration is pretty staggering! > Cheers :-) -- Gilles Chehade @poolpOrg https://www.poolp.org tip me: https://paypal.me/poolpOrg

Re: OpenBSD 6.4 smtpd local mail delivery missing "From " when .forward (procmail)

2019-01-27 Thread Gilles Chehade
g special cases and ugly hacks such as having explicit search for the string 'procmail' in .forward files. it wasn't worth it when people can just pass procmail an option. also don't use procmail, it's trash and there are far better options for you to use today, fdm being the first to come to mind

Re: OpenSMTPD??? how do I do these things, or do I just use postfix?

2019-01-26 Thread Gilles Chehade
On Sat, Jan 26, 2019 at 09:23:37PM +1000, Stuart Longland wrote: > Hi Gilles, > On 25/1/19 11:29 pm, Gilles Chehade wrote: > > On Fri, Jan 25, 2019 at 11:15:47PM +1000, Stuart Longland wrote: > >> First and foremost is the issue of backscatter-prevention. I would like >

Re: OpenSMTPD??? how do I do these things, or do I just use postfix?

2019-01-25 Thread Gilles Chehade
directory on the VPS for my server to later ciphon > down using `rsync --remove-source-files` over SSH. (Basically, a bit > like UUCP.) > no custom mail transports in smtpd. a way to achieve what you want is to write a custom mda, and this is actually how i did it to achieve a use-case

Re: smtpd - help needed tranlsating to new virtual map syntax [FIXED]

2019-01-22 Thread Gilles Chehade
On Tue, Jan 22, 2019 at 01:11:44AM +0100, Eric Elena wrote: > On Mon, 21 Jan 2019 11:08:02 +0100 Gilles Chehade wrote: > > I may sound a bit harsh, but starting a thread with "this is my last try > > or I'll switch" (as if it actually matters) right before telling someone

Re: smtpd - help needed tranlsating to new virtual map syntax [FIXED]

2019-01-22 Thread Gilles Chehade
go check that mail > server a 7,000,000th time, this time to see what MTA is actually *running*, > not just *configured*. I'm not sure whether I want it to be such a blatant > mistake on my part or not... if yes, this all makes sense but I'm an idiot, > whe

Re: smtpd - help needed tranlsating to new virtual map syntax [FIXED]

2019-01-21 Thread Gilles Chehade
use-case that could have never worked because it not only uses the wrong _documented_ mechanism but also because the code to make your use-case work has never existed, kinds of irritates me. I don't get royalties on smtpd install, please install whatever software fits your use case, this is

Re: smtpd - help needed tranlsating to new virtual map syntax

2019-01-21 Thread Gilles Chehade
Sun ALOMs and at least one Lexmark printer that also sends email with > broken From addresses.) > I may sound a bit harsh, but starting a thread with "this is my last try or I'll switch" (as if it actually matters) right before telling someone who wants to help you that you actually t

Re: Opensmtpd auth in 6.4

2019-01-14 Thread Gilles Chehade
external addresses, log: > http://dpaste.com/2M8JMQC.txt > you need a rule that matches auth, for example: match auth from any for any action "relay" > On January 14, 2019 1:10:24 PM GMT+01:00, Gilles Chehade > wrote: > >On Mon, Jan 14, 2019 at 01:03:19PM

Re: Opensmtpd auth in 6.4

2019-01-14 Thread Gilles Chehade
ou're doing can you setup a temporary account, with a temporary password, authenticate to it using a regular MUA (whichever you want, just don't auth manually), then trash the account and send us logs that aren't doctored ? > On January 14, 2019 9:41:42 AM GMT+01:00, Gilles Chehade > wrote:

Re: Opensmtpd auth in 6.4

2019-01-14 Thread Gilles Chehade
quot;535 Authentication failed" > Hi, First of all, it should read mask-src and not mask-source, otherwise the auth keyword is assuming a table containing literal string "mask-source" and this will cause authentication to fail. A good method to troubleshoot, is to run smtpd in

Re: CVS: cvs.openbsd.org: src (maillog simplified)

2019-01-01 Thread Gilles Chehade
On Tue, Jan 01, 2019 at 01:14:54PM +0100, Walter Alejandro Iglesias wrote: > On Fri, Dec 21, 2018 at 06:59:58PM +0100, Gilles Chehade wrote: > > On Fri, Dec 21, 2018 at 06:56:57PM +0100, Walter Alejandro Iglesias wrote: > > > Hello Gilles, > > > > > > In a

Re: CVS: cvs.openbsd.org: src

2018-12-21 Thread Gilles Chehade
On Fri, Dec 21, 2018 at 06:56:57PM +0100, Walter Alejandro Iglesias wrote: > Hello Gilles, > > In article <20181221145201.ga90...@ams-1.poolp.org> Gilles Chehade > wrote: > > On Fri, Dec 21, 2018 at 07:41:41AM -0700, Gilles Chehade wrote: > > > CVSROOT:

could use some spamdb output

2018-12-21 Thread Gilles Chehade
that initated the connection: $ spamdb | grep -E '^(GREY|WHITE)\|' | cut -d\| -f1,2 Do not spam misc@ with that output, send it directly to me. Thanks ! -- Gilles Chehade @poolpOrg https://www.poolp.org tip me: https://paypal.me

Re: Core Dev?

2018-12-04 Thread Gilles Chehade
8sqrIraunJoXU1DeBwsRveIm9W8lQhrakOK5w/A > > LP7NegSZljctRmTvLDkSwkgdR9mH18y/DFAjj+TlA3oLNB+EkKGRgBxuEddb > > BgoAU+9+PSgpoAUGXeWGlp/Q0caUP7lM/VlovbBJF8l+1uEZtc1euwtw8fo/ > > +cxZXDiMzDbouZAvSqG/60E= > > =5R2I > > -END PGP SIGNATURE- > > > -- > Vijay Sank

Re: smtpd.conf and junk

2018-11-25 Thread Gilles Chehade
On Wed, Nov 21, 2018 at 09:21:46PM +0100, Thuban wrote: > * Gilles Chehade le [21-11-2018 21:06:39 +0100]: > > On Wed, Nov 21, 2018 at 06:38:43PM +0100, Thuban wrote: > > > * Edgar Pettijohn le [21-11-2018 11:32:43 > > > -0600]: > > > > > &g

Re: smtpd.conf and junk

2018-11-21 Thread Gilles Chehade
On Wed, Nov 21, 2018 at 09:21:46PM +0100, Thuban wrote: > * Gilles Chehade le [21-11-2018 21:06:39 +0100]: > > On Wed, Nov 21, 2018 at 06:38:43PM +0100, Thuban wrote: > > > * Edgar Pettijohn le [21-11-2018 11:32:43 > > > -0600]: > > > > > &g

Re: smtpd.conf and junk

2018-11-21 Thread Gilles Chehade
uess the "junk" keyword in smtpd.conf was written to be handy, so I miss > something. Where ? > You didn't miss anything, the maildir agent only supports X-Spam headers as of today so this will need a diff to support SpamAssassin if it can't generate a X-Spam header. SpamAssassin wasn't a target when I wrote that feature but it's just one diff away ;-) -- Gilles Chehade @poolpOrg https://www.poolp.org tip me: https://paypal.me/poolpOrg

Re: smtpd.conf and junk

2018-11-21 Thread Gilles Chehade
t contains a positive X-Spam > header. > > > spams detected by spamassassin have multiple X-Spam-* headers, but aren't > placed > into Junk folder. > > Any advice ? > without seeing examples of these headers and your config, it's hard

Re: "relay as" domain rewrite in new smtpd.conf syntax

2018-11-08 Thread Gilles Chehade
is would be something like: action relay_00 relay mail-from "@foobar.org" match [...] action relay_00 -- Gilles Chehade @poolpOrg https://www.poolp.org tip me: https://paypal.me/poolpOrg

Re: spamd and google smtp ips

2018-10-30 Thread Gilles Chehade
> But you're right in principle -- I *should* really take the time out to > recreate the list of domains that went into it and just re-generate with > smtpctl spf walk something like once per day or once per week. > Like this ? https://github.com/Mailbrix/lists :-) -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OpenSMTPd: "mail.lmtp: connect: Connection refused"

2018-10-21 Thread Gilles Chehade
g only some exit codes as tempfail and all others as permfail. diff going to the tree in a minute, tested by Atanas ;-) -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Running your own mail server

2018-09-28 Thread Gilles Chehade
gt; That is exactly the case. I have a non-invasive implementation of filters which I'm happy with and which I intend to commit shortly after OpenBSD 6.4 is tagged, so we have a full release cycle to work on details, keywords and such, in order for the feature to be production ready for 6.5. I _do_ ha

Re: Issue with OpenSMTPD, procmail and comsat

2018-09-03 Thread Gilles Chehade
On Mon, Sep 03, 2018 at 12:25:55PM +0200, d.rausch...@gmail.com wrote: > Hi Gilles, > > On Sun, Sep 02, 2018 at 01:25:46PM +0200, Gilles Chehade wrote: > > Can you provide me with the corrupt line procmail includes so I can > > check if it is invalid indeed ? > > Th

Re: Issue with OpenSMTPD, procmail and comsat

2018-09-02 Thread Gilles Chehade
ou're running current, you might want to try: "|exec /usr/local/bin/procmail -f %{mbox.from} || exit 75" in case it helps procmail produce a correct sender. Can you provide me with the corrupt line procmail includes so I can check if it is invalid indeed ? -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: New laptop recommendations

2018-06-19 Thread Gilles Chehade
if only Steve Jobs would be alive and keeping >> >> Apple >>> inspired. The new models are meticulously designed to make you >> >> suffer: >>> expensive, slow cpu, soldered ram, soldered disk, small disk, bad >> >> keyboard >>> keys, wifi only, must pay extra for standard connectors. >>> >>> I have 1500EUR for a new laptop. What would you buy with it? -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd.conf new grammar

2018-05-28 Thread Gilles Chehade
action foobar maildir = action foobar mda "/usr/libexec/mail.maildir ..." action foobar maildir path = action foobar mda "/usr/libexec/mail.maildir path ..." lmtp is not easy, it requires multiple parameters and people have a lot of different use-cases with it. I can't easily provide a syntaxic sugar and we must expose -d, -f, rcpt-to, etc... this isn't acceptable for me so if you manage to make all options fit in one STRING I will be ok but if I have to add keywords specific I won't. Something like: > > > action "lmtp-local" lmtp "/var/dovecot/lmtp" would be fine by me, but people are using other parameters than just the lmtp socket, or maybe we can provide a syntaxic sugar for this case, and people using any other option must use the longer option ? -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: opensmtpd / ldap unreliable

2018-05-26 Thread Gilles Chehade
On Thu, May 24, 2018 at 11:45:40AM -0700, Paul B. Henson wrote: > > From: Gilles Chehade > > Sent: Wednesday, May 23, 2018 1:20 PM > > > > That's bad but could easily be fixed if you want to help us > > So I dropped in the latest table-ldap from git, and it still

Re: Checking my new smtpd.conf syntax

2018-05-26 Thread Gilles Chehade
On Fri, May 25, 2018 at 09:37:07PM +0200, Walter Alejandro Iglesias wrote: > On Fri, May 25, 2018 at 03:58:59PM +0300, Consus wrote: > > On 14:31 Fri 25 May, Gilles Chehade wrote: > > > On Fri, May 25, 2018 at 02:20:50PM +0200, Walter Alejandro Iglesias wrote: > > > &g

Re: Checking my new smtpd.conf syntax

2018-05-25 Thread Gilles Chehade
On Fri, May 25, 2018 at 09:27:21AM -0400, Amelia A Lewis wrote: > On Fri, 25 May 2018 16:15:00 +0300, Consus wrote: > > On 15:14 Fri 25 May, Gilles Chehade wrote: > >> On Fri, May 25, 2018 at 03:58:59PM +0300, Consus wrote: > >>> On 14:31 Fri 25 May, Gilles Chehade

Re: Checking my new smtpd.conf syntax

2018-05-25 Thread Gilles Chehade
On Fri, May 25, 2018 at 04:15:00PM +0300, Consus wrote: > On 15:14 Fri 25 May, Gilles Chehade wrote: > > On Fri, May 25, 2018 at 03:58:59PM +0300, Consus wrote: > > > On 14:31 Fri 25 May, Gilles Chehade wrote: > > > > On Fri, May 25, 2018 at 02:20:50PM +0

Re: Checking my new smtpd.conf syntax

2018-05-25 Thread Gilles Chehade
On Fri, May 25, 2018 at 03:58:59PM +0300, Consus wrote: > On 14:31 Fri 25 May, Gilles Chehade wrote: > > On Fri, May 25, 2018 at 02:20:50PM +0200, Walter Alejandro Iglesias wrote: > > > Could someone tell me if my changes below are OK. :-) > > > > > &

Re: Checking my new smtpd.conf syntax

2018-05-25 Thread Gilles Chehade
for any relay no longer matches authenticated users -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd.conf new grammar

2018-05-25 Thread Gilles Chehade
On Thu, May 24, 2018 at 04:38:17PM -0400, Rupert Gallagher wrote: > On Thu, May 24, 2018 at 14:18, Gilles Chehade <gil...@poolp.org> wrote: > > > In effect, instead of having: > > accept from any for local deliver to mbox > > > > You will have: > >

smtpd.conf new grammar

2018-05-24 Thread Gilles Chehade
safer, removed a lot of very unpleasant side-effects most people didn't even realize existed ... until they hit that one case for which we had no way to work around. Anyways, looking forward for you to test and report how it works for you :-) -- Gilles Chehade h

Re: opensmtpd / ldap unreliable

2018-05-23 Thread Gilles Chehade
On Wed, May 23, 2018 at 10:19:47PM +0200, Gilles Chehade wrote: > On Tue, May 22, 2018 at 06:13:23PM -0700, Paul B. Henson wrote: > > So I recently converted my opensmtpd server to use ldap as the backend > > for user authentication. It seems it's a bit untolerant

Re: opensmtpd / ldap unreliable

2018-05-23 Thread Gilles Chehade
> 201601072302 (although the openbsd port appears to be 201703132115, I > guess it's not downloading it from github?). > It's been a while since the last -extras release indeed, I suppose the openbsd port pulls from github, I dunno really > It looks like the code in head still

Re: SMTP client added to -current

2018-05-10 Thread Gilles Chehade
e creep. I don't think you would have a much simpler code path if you used OpenSMTPD or added server code in front of this new SMTP client to allow enqueuing. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OpenSMTPd maillist "compatible" manager Majordomo or what?

2018-03-21 Thread Gilles Chehade
it's simple and you can easily set it up from within a ~/.forward file rather than /etc/mail/aliases which has a huge security benefit. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd fails to start

2018-01-23 Thread Gilles Chehade
2.7-config /usr/local/bin/python-config > ln -sf /usr/local/bin/pydoc2.7 /usr/local/bin/pydoc > # rcctl restart smtpd > smtpd(ok) > # > > > On 01/23/18 01:31, Gilles Chehade wrote: > > On Tue, Jan 23, 2018 at 01:21:22AM -0800, Jordan Geoghegan wrote: > > >

Re: smtpd fails to start

2018-01-23 Thread Gilles Chehade
ed exist. > > Thanks for the fast response! > you need to install the opensmtpd-extras package from ports to use the table-passwd add-on -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd fails to start

2018-01-22 Thread Gilles Chehade
t; postmas...@mydomain.cajor...@mydomain.ca > webmas...@mydomain.ca jor...@mydomain.ca > jor...@mydomain.cavmail > > > *Dovecot starts without complaint with this config:* > > > passdb { > args = scheme=blf-crypt /et

Re: Does OpenSMTPD support accented characters in email addresses?

2017-12-21 Thread Gilles Chehade
DSN > 250 HELP > > I think I should see a "SMTPUTF8" extension in this list. Is that correct? > smtpd doesn't support SMTPUTF8 yet, correct. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: [PATCH] Off-by-one bug in httpd, ldapd, relayd, smtpd, switchd and ypldap

2017-08-21 Thread Gilles Chehade
> +++ usr.sbin/ypldap/parse.y 19 Aug 2017 20:15:33 - > @@ -171,7 +171,7 @@ port : PORT STRING > { > free($2); > } > | PORT NUMBER { > - if ($2 <= 0 || $2 >= (int)USHRT_MAX) { > + if ($2 <= 0 || $2 > (int)USHRT_MAX) { > yyerror("invalid port: %lld", $2); > YYERROR; > } > -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Mastering opensmtpd rules

2017-08-15 Thread Gilles Chehade
but, usually, having the "from any for any" rule in a config file is a sign that user failed to write ruleset and is using this as a fallback. The earliest the rules match the envelope, the better, as it indicates that the rule was written to match precisely. Most rulesets should finish w

Re: Mastering opensmtpd rules

2017-08-15 Thread Gilles Chehade
domain [...] accept from any for domain foobar.org [...] with: accept from any for any [...] you will match all envelopes so you're essentially creating a catch-all. virtual happens AFTER a rule has been matched so if you recipient is not found the RCPT will be rejecte

Re: multiple relays in smtpd.conf

2017-08-02 Thread Gilles Chehade
On Wed, Aug 02, 2017 at 02:47:27PM +0200, Christian Gut wrote: > > > On 2.Aug. 2017, at 14:09, Gilles Chehade <gil...@poolp.org> wrote: > > > > On Wed, Aug 02, 2017 at 01:47:09PM +0200, Kirill Miazine wrote: > >> * Eric Faurot [2017-08-02 13:24]: > >&

Re: multiple relays in smtpd.conf

2017-08-02 Thread Gilles Chehade
nts. But it's quite a big change, and we can't > > give an > > ETA right now. > > what about defining a new name in DNS containing addresses of all > smarthosts as a workaround for the OP for now? > This can work in some use-cases, this is exactly what a co-worker did to work around the limitation. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: multiple relays in smtpd.conf

2017-08-02 Thread Gilles Chehade
d there is no chance it can make it before 6.3 I have a big interest in this working so this is among my top prio work. Gilles -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd vs. uw-imap locking

2017-07-31 Thread Gilles Chehade
ery method to being easier to manage as an admin. That being said: no, no, no, * because I'm curious. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Happy birthday Theo!

2017-05-26 Thread Gilles Chehade
On Thu, May 25, 2017 at 04:20:37PM -0700, sharon s. wrote: > At some point.. birthdays stop being happy. only speaking from > experience.. :) > that reads like an early stage of depression ? you may want to M-x doctor ;-) -- Gilles Chehade https://www.

Re: smtpd aliases file issue

2017-05-11 Thread Gilles Chehade
> $ doas cat /etc/mail/smtpd.conf > > table aliases file:/etc/mail/aliases > listen on lo0 > accept for local alias deliver to mbox > accept from local for any relay > > Regards. > -- > ~ajitabhpandey > > On Wed, May 10, 2017 at 5:25 PM, Gilles Chehade <gil...@p

Re: smtpd aliases file issue

2017-05-11 Thread Gilles Chehade
Obviously you don’t need to restart the daemon to pickup new aliases. If you are using a plain file aliases map it can be reloaded atomically at runtime using smtpctl. If you are using a db file, it can be rebuilt using the newaliases / makemap utility. I can’t tell you which one to use

Re: smtpd aliases file issue

2017-05-10 Thread Gilles Chehade
it is doing -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd log: certificate verification failed

2017-04-20 Thread Gilles Chehade
t; Is it about my server cert or the remote one? > remote one, it means that when trying to verify the certificate that was presented by the remote server, the verification failed -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OpenSMTPD "syntax error" and other problems

2017-01-16 Thread Gilles Chehade
.. is not allowed to relay based on this configuration ... > # relay > > relay as "@my-domain.com" > ... and this is where you get your syntax error, "relay as" is parameter to accept, it should read: accept [...] relay as [...] -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Is using dkim really worth?

2016-12-10 Thread Gilles Chehade
n they happen. I can understand why someone would be reluctant to setup dmarc, but dkim and spf are really a no brainer. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: How to detect this kind of attacks

2016-11-26 Thread Gilles Chehade
=failed-command address=119.141.24.19 host=119.141.24.19 command="RCPT > TO:" result="550 Invalid recipient" > Nov 26 06:06:56 server smtpd[55880]: 3bcc430eee258cd7 smtp > event=failed-command address=119.141.24.19 host=119.141.24.19 command="RCPT > TO:" result="550 Invalid recipient" > Nov 26 06:06:57 server smtpd[55880]: 3bcc430eee258cd7 smtp event=closed > address=119.141.24.19 host=119.141.24.19 reason=disconnect > -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: FW: smtpd dies on current

2016-11-11 Thread Gilles Chehade
s I'm unable to reproduce with current smtpd and older libcrypto, and able to reproduce with recent libcrypto. I'm investigating this -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OpenBSD 6.0-stable smtpd queue encryption

2016-09-04 Thread Gilles Chehade
/* set expected tag */ EVP_CIPHER_CTX_ctrl(, EVP_CTRL_GCM_SET_TAG, sizeof tag, tag); @@ -304,7 +302,7 @@ crypto_decrypt_buffer(const char *in, si len += olen; /* finalize, write last chunk if any and perform authentication check */ - if (!EVP_Decrypt

Re: DMARC and misc@ (and likely other OpenBSD lists)

2016-08-26 Thread Gilles Chehade
iguration? > > This is exactly why I hate DMARC. Some tiny bullshit change, that > requires everyone in the world to catch up to it. > > Fuck you Google. Fuck you Yahoo. Clean up your own houses before you > shit on ours. > so much hate :-p -- Gilles

Re: DigitalOcean and OpenBSD

2016-08-25 Thread Gilles Chehade
a former customer, I would recommand against them. There are other alternatives with better hardware, services and policies within the same price ranges. online.net to name one, hetzner.de to name another one. I'm only commenting because your mail didn't mention competitors and I'd hate the id

Re: Thinking about writing something I'm calling wifid

2016-08-02 Thread Gilles Chehade
anges out > > of sync with the kernel. > > Perhaps overloading kevent? EVFILT_IEEE80211? > :-| -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: opensmtd failing and a work a round

2016-06-15 Thread Gilles Chehade
the API. If you need a stable setup, don't use filters before we announce that it is a stable feature. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: SMTPD - Auth Error 535 5.7.8

2016-05-22 Thread Gilles Chehade
plied that it didn't accept your AUTH which is basically your credentials -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Suggestion: new webpage for openbsd.org

2016-05-22 Thread Gilles Chehade
edict the fate of that project. > aren't you guys even slightly tired of the bullshit ? -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Happy Birthday Theo!

2016-05-19 Thread Gilles Chehade
On Thu, May 19, 2016 at 10:57:57AM +0100, Kevin Chadwick wrote: > Happy Birthday > > >if (pledge("fun relax", NULL) == -1) { > err(1, "pledge"); > } > KNF, dammit...

Re: Suggestion: new webpage for openbsd.org

2016-05-18 Thread Gilles Chehade
On Wed, May 18, 2016 at 06:08:52PM +0200, Joakim Frosteg??rd wrote: > > [...] > > @Gilles Chehade: > If you're not being sarcastic, I would be happy to contribute to that > project as well. > Didn't know I came off sarcastic naturally, achievement unlocked ! I w

Re: Suggestion: new webpage for openbsd.org

2016-05-17 Thread Gilles Chehade
If yes, we would also need to make sure that the creator of > the nice openbsd logo included is happy with us using it for > the webpage. Apart from that, I would be happy to license > my work under BSD, MIT or whatever you want. > I don't know if it's of any interest for op

Re: OpenSMTPD with filter-spamassassin / max-children

2016-04-20 Thread Gilles Chehade
re already enough pending sessions I don't know. What I know is that max-inflight is not THE solution for sure. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd : reject with a message

2016-04-17 Thread Gilles Chehade
): error:code message A status code and message to return. The code must be 3 digits, starting 4XX (TempFail) or 5XX (PermFail). The message must be present and can be freely chosen. note that only single-line messages are support

Re: OpenSMTPD on OpenBSD 5.9

2016-04-13 Thread Gilles Chehade
> After reading the whole thread, I still don't understand your problem, what you're trying to achieve and what information you're looking for. > I would love to see someone reply telling me that I have bad eyes and a > 5.9 is running and it's getting it correct. > I'd love to tell you that you have bad eyes, but not knowing what is your problem nor what you're trying to achieve, I wouldn't know what I should look for. > Meanwhile I have to bring up a new server and Postfix seems to be the > only candidate. > > At least I can build a mailserver that works on that. > Again, good choice, if you're comfortable with running Postfix and you can't get OpenSMTPD running, I don't know why you're struggling :-) > Sorry for the noise > np -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OT: Looking for email host with qmail like minus-addressing for custom domain

2016-03-03 Thread Gilles Chehade
On Thu, Mar 03, 2016 at 02:02:22PM -0600, Claus wrote: > On 3/3/2016 3:14 AM, Gilles Chehade wrote: > >On Thu, Mar 03, 2016 at 01:54:16AM +0100, ropers wrote: > >Won't question your need however this + vs - thing has come up often and > >I'd like to stress out

Re: OT: Looking for email host with qmail like minus-addressing for custom domain

2016-03-03 Thread Gilles Chehade
On Thu, Mar 03, 2016 at 01:39:54PM -0700, Andy Bradford wrote: > Thus said Gilles Chehade on Thu, 03 Mar 2016 10:14:48 +0100: > > > Who should get mail for foo-bar@ ? > > The MTA will decide who will get foo-bar@. > How ? > > This just doesn't happen with + be

Re: OT: Looking for email host with qmail like minus-addressing for custom domain

2016-03-03 Thread Gilles Chehade
e is concerned, what you could do if you can't go without - is to take an account anywhere that supports + then just setup a simple mail forwarder at a vps host to rewrite - to +, this way you'll be able to transition without being limited in hosting c

Re: Fwd: CVS: cvs.openbsd.org: src

2015-11-30 Thread Gilles Chehade
to use after > it wad configure. (:< > > Oh well. > > I will switch back to makemap then. > > I hope I understand your explication as this being still valid: > > table vusers db:/etc/mail/vusers.db > table vdomains db:/etc/mail/vdomains.db > yes, this is still valid -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd with accept from any for domain alias relay via smtp://127.0.0.1:10025 doesn't support check?

2015-10-30 Thread Gilles Chehade
se the 'recipient' keyword: accept [...] for domain recipient [...] Goal of aliases / virtual is to resolve a user-part/address into a local delivery ... which makes no sense if your mail is not local. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Is OpenSMTPD worthy of OpenBSD inclusion?

2015-10-05 Thread Gilles Chehade
You told me once that you were a "security expert" and that we could sit around a beer so you'd tell me what's wrong in our design. If it is true that you want the project to succeed and if you really are a security expert then the project would have surely made a better use of a design analysis report than this mail. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Opensmtpd+user forom "table baseuser"

2015-10-02 Thread Gilles Chehade
unless you provide the full configuration file and some logs, this is not enough to even begin to understand what happened. on the top of my head: you're not matching the rule you think you are -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Show us your /etc/profile

2015-08-01 Thread Gilles Chehade
On Fri, Jul 31, 2015 at 05:25:49PM -0300, listas...@dna.uba.ar wrote: Hello everybody Hello, alias ducks='du -cks * |sort -rn |head -11' I'm stealing this one ;-) -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Sluggish/laggy browser behaviour

2015-07-29 Thread Gilles Chehade
related projects don't tend to hide issues under the carpet. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: elementary opensmtpd setting on rental server

2015-07-23 Thread Gilles Chehade
need a rule that states: accept from local for any relay It needs to be at the bottom of your config, right where you added this reject rule (which serves no purpose btw since this is the default). -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: GROUP CHANGED

2015-06-14 Thread Gilles Chehade
.] Thank fro reply. wheel is the new root. https://en.wikipedia.org/wiki/Wheel_(Unix_term) -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Logjam Attack: is OpenIKED and OpenSMTPD vulnerable?

2015-05-20 Thread Gilles Chehade
it to be at least 2048-bits, however before we bump this default, we need a fair amount of testing: last time I tried, it broke A LOT of exchanges. Discussions will take place with regard to what we'll do anways... -- Gilles Chehade https://www.poolp.org

Re: smtpd(8): running as backup MX with +TAG addresses

2015-01-05 Thread Gilles Chehade
hard to implement though, I'll see if I can get it done this week. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: smtpd(8): running as backup MX with +TAG addresses

2015-01-05 Thread Gilles Chehade
)) return 0; + } return 1; } -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OpenSMTPD: SMTP_LIMIT_MAIL and SMTP_LIMIT_RCPT

2014-12-08 Thread Gilles Chehade
are you unhappy with the defaults ? -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OpenSMTPD: SMTP_LIMIT_MAIL and SMTP_LIMIT_RCPT

2014-12-08 Thread Gilles Chehade
to escape 452 4.5.3 Too many recipients: Too many messages sent ??? //mxb On 8 dec 2014, at 11:14, Gilles Chehade gil...@poolp.org wrote: On Mon, Dec 08, 2014 at 11:00:50AM +0100, mxb wrote: Hello @list, are there any plans for those constants to be configurable via smtpd.conf

Re: smtpd: mail stuck in queue

2014-11-29 Thread Gilles Chehade
On Sat, Nov 29, 2014 at 02:13:46AM +0200, Liviu Daia wrote: On 28 November 2014, Gilles Chehade gil...@poolp.org wrote: On Thu, Nov 27, 2014 at 10:00:19PM -0500, Hugo Villeneuve wrote: [...] No, it is not proper behavior. As a store and forward system with potentially 4-5 days between

Re: smtpd: mail stuck in queue

2014-11-28 Thread Gilles Chehade
to prevent you from reevaluating mails that are already in queue ? Nope, but IMO the proper fix is not to turn the daemon into a smart guesser but rather to enhance smtpctl so that when an admin makes a config change, (s)he can decide to reevalute or not some envelopes or not. -- Gilles Chehade

Re: smtpd: mail stuck in queue

2014-11-28 Thread Gilles Chehade
that first.) Good luck. Hopefully it will get fixed. As I wrote in the other mail, I think the proper fix is to provide admin the right tool. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: move to git?

2014-09-24 Thread Gilles Chehade
=openbsd+git 2nd link. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: Help w/ masquerade feature now that sendmail[1] has been removed from base

2014-09-16 Thread Gilles Chehade
we don't work as fast as you'd like but things are moving forward and they do at our pace, asking again and again and again is not going to make a change in how fast we work. -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: dual separator?

2014-09-01 Thread Gilles Chehade
. There is currently no way of specifying the delimiter, it can only be + someone opened a ticket on our tracker and after we discuss it it might change -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: openssh

2014-07-03 Thread Gilles Chehade
, French researchers have found _at least_ one way to DDoS this transport and make it unusable with very few resources: http://french.about.com/od/vocabulary/a/operationescargot.htm -- Gilles Chehade https://www.poolp.org @poolpOrg

Re: OpenSMTPD recipient table with db file

2014-06-03 Thread Gilles Chehade
AMD64. Kind regards, Hi, support for recipient using db tables has been added after 5.5: http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/table_db.c.diff?r1=1.5;r2=1.6;f=h the diff will apply as is on smtpd from 5.5 so you can backport it -- Gilles Chehade https

  1   2   3   4   5   6   >