Re: Postfix, and MX record questions

2013-12-13 Thread tejas sarade
No. You won't need split DNS unless Postfix(with private IP) is delevering mails to other internal MTA(with private IP) for which MX records points to public IP. And from the perspective of Postfix split DNS is nothing but a DNS server running with customized DNS zones on internal network. On

Re: When to use proxymap

2013-12-13 Thread E.B.
On Tuesday, August 14, 2012 6:19 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Aug 14, 2012 at 07:18:09PM -0400, Wietse Venema wrote: I read somewhere on this list that it's not necessary to use proxymap for transport table lookups. It is undesirable with

Re: When to use proxymap

2013-12-13 Thread Noel Jones
On 12/13/2013 5:55 AM, E.B. wrote: Is there anywhere to find a list of the tables used by a process like trivial-rewrite? Each postfix man page lists relevant configuration parameters, including parameters that accept tables. http://www.postfix.org/trivial-rewrite.8.html

OT - Dane, TLSA

2013-12-13 Thread John Allen
Does anybody know of a good,but simple write up on DANE and TLSA. It has to be simple enough for me to understand (assume idiot). John A

Re: OT - Dane, TLSA

2013-12-13 Thread Viktor Dukhovni
On Fri, Dec 13, 2013 at 03:11:38PM -0500, John Allen wrote: Does anybody know of a good,but simple write up on DANE and TLSA. It has to be simple enough for me to understand (assume idiot). An explanation of what DANE TLSA is for[*]? Or how to set up a Postfix to work with it? If the latter,

Re: Random 550 5.1.1 when sending mail to a virtual domain alias

2013-12-13 Thread Venkat
Quite possibly it is, see: http://www.postfix.org/DATABASE_README.html#safe_db The best solution is to use CDB, rather than Berkeley DB for these, if your Postfix package supports CDB, use it. CDB performs updates atomically and uses less memory, ... If switching to CDB is not

Is it possible to verify from: header addresses?

2013-12-13 Thread Adam Moffett
We're doing sender verification for our local domains, so a message sent from f...@plexicomm.net gets rejected. A message with an envelope sender of va...@spammer.com with a from: header of f...@plexicomm.net gets accepted. Is there a way to enable verification on from: header addresses? I

Re: Is it possible to verify from: header addresses?

2013-12-13 Thread li...@rhsoft.net
Am 14.12.2013 00:18, schrieb Adam Moffett: We're doing sender verification for our local domains, so a message sent from f...@plexicomm.net gets rejected. A message with an envelope sender of va...@spammer.com with a from: header of f...@plexicomm.net gets accepted. Is there a way to

Re: OT - Dane, TLSA

2013-12-13 Thread John Allen
On 13/12/2013 3:50 PM, Viktor Dukhovni wrote: On Fri, Dec 13, 2013 at 03:11:38PM -0500, John Allen wrote: Does anybody know of a good,but simple write up on DANE and TLSA. It has to be simple enough for me to understand (assume idiot). An explanation of what DANE TLSA is for[*]? Or how to

Re: OT - Dane, TLSA

2013-12-13 Thread Viktor Dukhovni
On Sat, Dec 14, 2013 at 12:04:15AM -0500, John Allen wrote: The main difficulty with server-side DANE is that your zone must be DNSSEC signed. Deployment of DNSSEC is still fairly thin. With a bit of luck DANE might motivate folks to consider DNSSEC. My interest in TLSA was