Re: domain resolution in check_client_access tables

2013-11-18 Thread E.B.
Thank you to Wietse and Viktor for the replies. Appreciate explanations very much. On Sunday, November 17, 2013 4:42 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Sun, Nov 17, 2013 at 07:34:47PM -0500, Wietse Venema wrote: I wanted to allow certain clients to relay by

Client host name resolution

2013-11-18 Thread E.B.
Hello, My understanding was clients for whom you see this in the logs: connect from unknown[1.2.3.4] Do not have a PTR/rDNS set up for themselves.  However, I recently tested a connection (using telnet on the client side, connecting to port 25) from a server that does have rDNS in place, but

Re: Client host name resolution

2013-11-18 Thread li...@rhsoft.net
Am 18.11.2013 12:43, schrieb E.B.: My understanding was clients for whom you see this in the logs: connect from unknown[1.2.3.4] Do not have a PTR/rDNS set up for themselves. However, I recently tested a connection (using telnet on the client side, connecting to port 25) from a

Re: Client host name resolution

2013-11-18 Thread Bastian Blank
On Mon, Nov 18, 2013 at 03:43:17AM -0800, E.B. wrote: I did dig -x 1.2.3.4 on the server for the same IP address and the result came back with the correct domain name. So why didn't postfix see the host name? I restarted postfix in case it was caching, but it didn't help. Show proof.

Re: Diffie-Hellman parameters

2013-11-18 Thread Viktor Dukhovni
On Mon, Nov 18, 2013 at 10:53:19AM +0100, Andreas Schulze wrote: On the other hand, some Exim MTA SMTP clients (patched by a well-meaning, but under-informed Debian maintainer) don't support DH primes shorter than 2048 bits. I had trouble to receive messages from those sites too. I

Re: Diffie-Hellman parameters

2013-11-18 Thread Andreas Schulze
Zitat von Viktor Dukhovni postfix-us...@dukhovni.org: Any evidence of other legitimate MTAs that now routinely fail TLS handshakes? no, I don't saw more TLS errors. There is a usual noise of TLS failures that didn't changed. Andreas

Re: Diffie-Hellman parameters

2013-11-18 Thread LuKreme
On 18 Nov 2013, at 02:53 , Andreas Schulze s...@andreasschulze.de wrote: I changed smtpd_tls_dh1024_param_file to use a 2k dh key at the mx server. That solved the problem ... I can't imagine that that didn't cause other problems. If a server negotiates for a dh1024 key and is expecting a

Re: Diffie-Hellman parameters

2013-11-18 Thread Viktor Dukhovni
On Mon, Nov 18, 2013 at 08:03:00AM -0700, LuKreme wrote: I changed smtpd_tls_dh1024_param_file to use a 2k dh key at the mx server. That solved the problem ... I can't imagine that that didn't cause other problems. If a server negotiates for a dh1024 key and is expecting a dh1024 key and

Re: Client host name resolution

2013-11-18 Thread Kris Deugau
E.B. wrote: Hello, My understanding was clients for whom you see this in the logs: connect from unknown[1.2.3.4] Do not have a PTR/rDNS set up for themselves. For Postfix to include the rDNS in the log and Received: header, the PTR name must then resolve back to that same IP as well.

Need Help: Postfix Relayhost Setup and Dovecot

2013-11-18 Thread Dominique
Hi, I am trying to migrate from cyrus - (Ubuntu 12.04 LTS Server, Mysql Postfix, cyrus, webcyradmin, saslauth) to dovecot - (Ubuntu 12.04 LTS Server, Mysql Postfix, Dovecot, Postfixadmin, saslauth) It all works fine with postfix/cyrus. However under postfix/dovecot, I have a problem with my

relaying individual virtual domain to new postfix server ?

2013-11-18 Thread lists
I would like to transfer some virtual domains to a new postfix server, what is the proper way to do so, I've tried adding to /etc/main.cf like: relay_domains = dom.org.au transport_maps = hash:$config_directory/transport and /etc/transport dom.org.au smtp:[emu.sbt.net.au] that returned a