Re: Postfix stable release 3.1.2 and legacy release 3.0.6

2016-08-30 Thread Quanah Gibson-Mount
--On Tuesday, August 30, 2016 5:01 PM -0400 Wietse Venema <wie...@porcupine.org> wrote: Wietse Venema: Quanah Gibson-Mount: > --On Monday, August 29, 2016 10:40 AM -0400 Wietse Venema > <wie...@porcupine.org> wrote: > > > [An on-line version of this announcement wi

Re: Postfix stable release 3.1.2 and legacy release 3.0.6

2016-08-29 Thread Quanah Gibson-Mount
nd 3.x releases? Thanks, Quanah -- Quanah Gibson-Mount

Re: postscreen_upstream_proxy_protocol with both proxied and unproxied clients

2016-06-24 Thread Quanah Gibson-Mount
in via the haproxy or not. ;) I think we'll just need to spin up different MTAs that the haproxy points to, and then move our MX record, and move everything off the direct connections. Thanks! --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbr

postscreen_upstream_proxy_protocol with both proxied and unproxied clients

2016-06-24 Thread Quanah Gibson-Mount
re any ability to support a mixed mode, where some clients are coming in via an upstream proxy and some are not? --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of S

Re: How to correctly blacklist an IP for postscreen?

2016-06-22 Thread Quanah Gibson-Mount
--On Wednesday, June 22, 2016 11:08 PM -0700 Quanah Gibson-Mount <qua...@zimbra.com> wrote: I added an IP to the postscreen blacklist, but it still gets passed to SMTPD? Never mind, blacklist action was set to ignore instead of enforce... Fixed. --Quanah -- Quanah Gibson-Mount Pl

How to correctly blacklist an IP for postscreen?

2016-06-22 Thread Quanah Gibson-Mount
elo= zimbra@edge02e:~$ postconf postscreen_access_list postscreen_access_list = permit_mynetworks, cidr:/opt/zimbra/conf/postfix/postscreen_blacklist zimbra@edge02e:~$ cat /opt/zimbra/conf/postfix/postscreen_blacklist 10.43.0.41 reject 10.43.0.188 reject I also stop postfix, deleted the postscreen

Re: How to handle mail injected by the system sendmail command with DKIM signing

2016-06-06 Thread Quanah Gibson-Mount
rictions" I could use. ;) --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

How to handle mail injected by the system sendmail command with DKIM signing

2016-06-03 Thread Quanah Gibson-Mount
/conf$ cat tag_as_originating.re /^/ FILTER smtp-amavis:[127.0.0.1]:10026 Thanks, Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: bad.psky.me RBL?

2016-04-06 Thread Quanah Gibson-Mount
--On Wednesday, April 06, 2016 1:23 PM -0500 Noel Jones <njo...@megan.vbhcs.org> wrote: On 4/6/2016 10:52 AM, Quanah Gibson-Mount wrote: --On Wednesday, April 06, 2016 6:36 PM +0200 lst_ho...@kwsoft.de wrote: Zitat von Quanah Gibson-Mount <qua...@zimbra.com>: Is any

Re: bad.psky.me RBL?

2016-04-06 Thread Quanah Gibson-Mount
--On Wednesday, April 06, 2016 6:36 PM +0200 lst_ho...@kwsoft.de wrote: Zitat von Quanah Gibson-Mount <qua...@zimbra.com>: Is anyone familiar with this RBL and its quality? Not a whole lot of info at <http://bad.psky.me/about/>. Terms seem probably ok <http://ba

bad.psky.me RBL?

2016-04-06 Thread Quanah Gibson-Mount
Is anyone familiar with this RBL and its quality? Not a whole lot of info at <http://bad.psky.me/about/>. Terms seem probably ok <http://bad.psky.me/terms/>. Thanks, Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in

Re: Issues with postscreen and barracuda spam firewall

2016-04-01 Thread Quanah Gibson-Mount
--On Friday, April 01, 2016 11:36 AM -0700 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Thursday, March 31, 2016 9:15 PM -0400 Wietse Venema <wie...@porcupine.org> wrote: Is this a known issue with Barracuda? Anyone have an idea how to work around this? Clearly havin

Re: Issues with postscreen and barracuda spam firewall

2016-04-01 Thread Quanah Gibson-Mount
t take any actions. And yet, here we see a significant behavior change. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Issues with postscreen and barracuda spam firewall

2016-03-31 Thread Quanah Gibson-Mount
Clearly having their spam appliance be non-functional isn't a great start. ;) I think I'd choose Barracuda OR postscreen, not sure how both of them together could be useful? Dunno. :) --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leade

Issues with postscreen and barracuda spam firewall

2016-03-31 Thread Quanah Gibson-Mount
around this? Clearly having their spam appliance be non-functional isn't a great start. ;) Thanks, Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: upgrading postfix 3.0.x to 3.1

2016-03-02 Thread Quanah Gibson-Mount
ves up returning -DNO_DB. makedefs does not even try to run a actual test, it seems. but like the problem below, if it is running a 32 bit test, it wont link with a 64 bit library Sounds like a good time to ditch BDB for LMDB. ;) --Quanah -- Quanah Gibson-Mount Platform Archi

Re: [PATCH] Domain RDN sequence substitution for LDAP search base.

2016-03-02 Thread Quanah Gibson-Mount
--On Monday, October 07, 2013 3:16 PM -0700 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Monday, October 07, 2013 6:07 PM + Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: Note, the new "%" substitution pattern for a comma-separated list of DC= componen

Re: "Fail Safe" on LDAP failure

2016-02-15 Thread Quanah Gibson-Mount
tainly keeps things flowing smoothly. It also allows for things like upgrading an LDAP server w/o worrying about the rest of the infrastructure falling over. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: "Fail Safe" on LDAP failure

2016-02-15 Thread Quanah Gibson-Mount
AP map parameters to define a health-check for that. OpenLDAP has a parameter for that where it will not answer queries if it is currently refreshing. It would probably make more sense to set that instead? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc.

Re: 3.0.3: "mynetworks" values are busted and missing ipv6 info

2016-02-09 Thread Quanah Gibson-Mount
--On Tuesday, February 09, 2016 6:14 AM -0500 Wietse Venema <wie...@porcupine.org> wrote: Quanah Gibson-Mount: --On Monday, February 08, 2016 8:00 PM -0500 Wietse Venema <wie...@porcupine.org> wrote: > Quanah Gibson-Mount: >> In Postfix > 3.0.x, the value from pos

Re: 3.0.3: "mynetworks" values are busted and missing ipv6 info

2016-02-09 Thread Quanah Gibson-Mount
h is "ipv4" as the default. I realize I don't use mynetworks the way you probably anticipated. ;) I've redone my build so that it behaves the way I need it to work. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in ope

Re: 3.0.3: "mynetworks" values are busted and missing ipv6 info

2016-02-09 Thread Quanah Gibson-Mount
--On Tuesday, February 09, 2016 8:56 AM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Tuesday, February 09, 2016 11:00 AM -0500 Wietse Venema <wie...@porcupine.org> wrote: The "inet_protocols" setting is not covered by this, because it hasn't changed. BT

Re: 3.0.3: "mynetworks" values are busted and missing ipv6 info

2016-02-09 Thread Quanah Gibson-Mount
t sorted out. I was thinking the old default was host, not subnet, so had the logic reversed. ;) Thanks! --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: 3.0.3: "mynetworks" values are busted and missing ipv6 info

2016-02-09 Thread Quanah Gibson-Mount
--On Tuesday, February 09, 2016 12:36 PM -0500 Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: On Feb 9, 2016, at 12:14 PM, Quanah Gibson-Mount <qua...@zimbra.com> wrote: Even after setting the style to "host", it still generates the incorrect netmask: [zimbra@zr

Re: 3.0.3: "mynetworks" values are busted and missing ipv6 info

2016-02-08 Thread Quanah Gibson-Mount
--On Monday, February 08, 2016 8:00 PM -0500 Wietse Venema <wie...@porcupine.org> wrote: Quanah Gibson-Mount: In Postfix > 3.0.x, the value from postconf mynetworks returns incorrect netmask values, and it is missing IPv6 entirely: This depends on the inet_protocols setting. #

3.0.3: "mynetworks" values are busted and missing ipv6 info

2016-02-08 Thread Quanah Gibson-Mount
Mask:255.255.255.0 inet6 addr: fe80::250:56ff:fe8f:cbcd/64 Scope:Link inet6 addr: fc00:10:137:242::53/64 Scope:Global loLink encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host --Quanah -- Quanah Gibson

Re: PATCH: saslauthd show remote ip address

2016-01-09 Thread Quanah Gibson-Mount
--On Saturday, January 09, 2016 9:06 AM -0500 Wietse Venema <wie...@porcupine.org> wrote: Quanah Gibson-Mount: Amavis passes it back to Postfix on port 25, and boom, the sasl bits are called, even though no auth is involved. If you know that an SMTP daemon will not receive AUTH co

Re: Duplicate email issue with opendkim milter

2016-01-08 Thread Quanah Gibson-Mount
The forwarding is in zimbraMailForwardingAddress This would block multiple expansions. Does that seem correct? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: PATCH: saslauthd show remote ip address

2016-01-08 Thread Quanah Gibson-Mount
--On Tuesday, January 05, 2016 12:46 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Tuesday, January 05, 2016 3:43 PM -0500 Wietse Venema <wie...@porcupine.org> wrote: I think I mentioned in this thread that the patch is not complete because the Cyrus implementa

Re: reject_rbl_client leaky?

2016-01-07 Thread Quanah Gibson-Mount
emails shoudl be blocked by postfix. If that isn't happening, then I'd be concerned. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: PATCH: saslauthd show remote ip address

2016-01-05 Thread Quanah Gibson-Mount
--On Thursday, December 10, 2015 11:49 AM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Thursday, December 10, 2015 2:29 PM -0500 Wietse Venema <wie...@porcupine.org> wrote: Quanah Gibson-Mount: --On Thursday, December 10, 2015 2:02 PM -0500 Wietse Venema <wie..

Re: PATCH: saslauthd show remote ip address

2016-01-05 Thread Quanah Gibson-Mount
ress only. Yep. We're working on completing it. ;) It just had some unanticipated side effects. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: SASL binds

2016-01-04 Thread Quanah Gibson-Mount
s. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: large mynetwork file

2015-12-29 Thread Quanah Gibson-Mount
t to investigate migrating to lmdb instead of hash dbs. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

question on missing binaries after build

2015-12-18 Thread Quanah Gibson-Mount
inclusion in a postfix build? Thanks, Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: question on missing binaries after build

2015-12-18 Thread Quanah Gibson-Mount
--On Saturday, December 19, 2015 2:40 AM + Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: On Fri, Dec 18, 2015 at 05:58:30PM -0800, Quanah Gibson-Mount wrote: However, when doing "make install" a few of these do not end up being installed: posttls-finger qmqp-sink

Re: postfix and multiple TLS certificates (SNI support?)

2015-12-14 Thread Quanah Gibson-Mount
the email proxy portion of their product (IMAP, POP, SMTP), I'd definitely avoid it. I.e., I would not recommend nginx as a solution in front of postfix to anyone. *<https://forum.nginx.org/read.php?29,252772,253147> --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. -

Re: postfix and multiple TLS certificates (SNI support?)

2015-12-14 Thread Quanah Gibson-Mount
--On Monday, December 14, 2015 6:03 PM + Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: On Mon, Dec 14, 2015 at 09:36:33AM -0800, Quanah Gibson-Mount wrote: Given nginx's complete disregard for RFC's (*) and unwillingness to examine or fix issues related to the email proxy p

Re: PATCH: saslauthd show remote ip address

2015-12-10 Thread Quanah Gibson-Mount
(or if it causes new ones). We are using this patch in our dev lab with postfix 3.0.3. So far, no problems have arisen, and it is helping us with resolving an issue we had with tracking originating IPs. Thanks! --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. ---

Re: PATCH: saslauthd show remote ip address

2015-12-10 Thread Quanah Gibson-Mount
--On Thursday, December 10, 2015 2:29 PM -0500 Wietse Venema <wie...@porcupine.org> wrote: Quanah Gibson-Mount: --On Thursday, December 10, 2015 2:02 PM -0500 Wietse Venema <wie...@porcupine.org> wrote: > This is not completely trivial because the port information needs >

Re: PATCH: saslauthd show remote ip address

2015-12-10 Thread Quanah Gibson-Mount
o know. Is there any general timeline on when that will be available for testing? Thanks, Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Issues with postfix/postdrop after package update

2015-12-10 Thread Quanah Gibson-Mount
trigger it every few weeks. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Issues with postfix/postdrop after package update

2015-12-10 Thread Quanah Gibson-Mount
et-gid write permissions. Thanks. Was more just trying to understand the cause than blaming the messenger. ;) Now I have a good avenue to pursue. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Issues with postfix/postdrop after package update

2015-12-10 Thread Quanah Gibson-Mount
. Thanks, Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Issues with postfix/postdrop after package update

2015-12-10 Thread Quanah Gibson-Mount
--On Thursday, December 10, 2015 2:45 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Thursday, December 10, 2015 4:35 PM -0500 Wietse Venema <wie...@porcupine.org> wrote: If some breakage is specific to one software distribution, then I would investigate the

Re: Duplicate email issue with opendkim milter

2015-11-30 Thread Quanah Gibson-Mount
o scan the same content multiple times. Hi Viktor, Thanks for the reply! I've been on vacation so catching up on email. It sounds like the better solution then is to add: -o default_destination_recipient_limit=5000 to the content filter definitions? ;) --Quanah -- Quanah Gibso

Re: Duplicate email issue with opendkim milter

2015-11-30 Thread Quanah Gibson-Mount
--On Monday, November 30, 2015 7:00 AM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: I've always (since ~2001) used large recipient limits with filter transports, this also improves efficiency, no need to scan the same content multiple times. Hi Viktor, Thanks for the reply!

Re: Duplicate email issue with opendkim milter

2015-11-30 Thread Quanah Gibson-Mount
--On Monday, November 30, 2015 3:01 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Monday, November 30, 2015 2:56 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Monday, November 30, 2015 7:00 AM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wr

Re: Duplicate email issue with opendkim milter

2015-11-30 Thread Quanah Gibson-Mount
--On Tuesday, December 01, 2015 12:03 AM + Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: On Mon, Nov 30, 2015 at 03:11:39PM -0800, Quanah Gibson-Mount wrote: --On Monday, November 30, 2015 3:08 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote

Re: Duplicate email issue with opendkim milter

2015-11-30 Thread Quanah Gibson-Mount
--On Monday, November 30, 2015 3:08 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: Either default_destination_recipient_limit has to be bumped up via postconf, or -o receive_override_options=no_address_mappings requires setting to resolve this so far. Hm, so according to our c

Re: Duplicate email issue with opendkim milter

2015-11-30 Thread Quanah Gibson-Mount
--On Monday, November 30, 2015 2:56 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: --On Monday, November 30, 2015 7:00 AM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: I've always (since ~2001) used large recipient limits with filter transports, this also improve

Duplicate email issue with opendkim milter

2015-11-23 Thread Quanah Gibson-Mount
. I've been reading over the docs, and it seems that this is a bit aggressive. However, it does seem that at least some set of these options should be set. I believe it is only necessary to set "no_address_mappings". Does that seem correct? Thanks, Quanah -- Quanah Gibson-Moun

Re: LMTP TLS delivery failure with 3.0.3 (regression from 2.11.4)

2015-11-22 Thread Quanah Gibson-Mount
l poke at my other SSL/TLS settings and see if I can track down why OpenSSL is unhappy now. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

LMTP TLS delivery failure with 3.0.3 (regression from 2.11.4)

2015-11-22 Thread Quanah Gibson-Mount
.4 Setting lmtp_tls_security_level to none allows mail delivery to succeed. --Quana -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: LMTP TLS delivery failure with 3.0.3 (regression from 2.11.4)

2015-11-22 Thread Quanah Gibson-Mount
--On Sunday, November 22, 2015 6:49 PM -0800 Quanah Gibson-Mount <qua...@zimbra.com> wrote: Setting lmtp_tls_security_level to none allows mail delivery to succeed. Setting lmtp_tls_CApath fixed this (although that wasn't necessary in 2.11.4). Sorry for the noise. :) --Quanah --

Re: LMTP TLS delivery failure with 3.0.3 (regression from 2.11.4)

2015-11-22 Thread Quanah Gibson-Mount
--On Monday, November 23, 2015 3:36 AM + Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: On Sun, Nov 22, 2015 at 07:29:56PM -0800, Quanah Gibson-Mount wrote: --On Monday, November 23, 2015 3:13 AM + Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: >> Setti

Re: DSpam and Postfix

2015-10-14 Thread Quanah Gibson-Mount
/32585111/>. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: blocking compromised sasl users ?

2015-10-07 Thread Quanah Gibson-Mount
ount is unlocked. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: blocking compromised sasl users ?

2015-10-07 Thread Quanah Gibson-Mount
--On Wednesday, October 07, 2015 11:07 PM + Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: On Wed, Oct 07, 2015 at 02:52:36PM -0700, Quanah Gibson-Mount wrote: > What would help is putting the "check_sasl_access" table in SQL. > >> I should've s

Re: blocking compromised sasl users ?

2015-10-07 Thread Quanah Gibson-Mount
s" an auth for every one of the emails sent out over the persistent connection, even thought they actually only have auth'd when initially opening the connection. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open

Re: LMTP delivery failover

2015-06-02 Thread Quanah Gibson-Mount
--On Tuesday, March 17, 2015 12:00 PM -0700 Quanah Gibson-Mount qua...@zimbra.com wrote: Hi Viktor, We've been able to start testing this patch. So far, it is working as expected. It has continued to hold up through more extensive testing. Will this make it into Postfix 3.1 or the next

Re: LMTP delivery failover

2015-06-02 Thread Quanah Gibson-Mount
--On Tuesday, June 02, 2015 5:26 PM -0400 Wietse Venema wie...@porcupine.org wrote: Quanah Gibson-Mount: --On Tuesday, March 17, 2015 12:00 PM -0700 Quanah Gibson-Mount qua...@zimbra.com wrote: Hi Viktor, We've been able to start testing this patch. So far, it is working as expected

Re: Stan Hoeppner's fqrdns.pcre file?

2015-04-28 Thread Quanah Gibson-Mount
. The version I downloaded at that time has a timestamp of: # Postfix PCRE bot spam killer # # Updated 10/2/2014 # If you want a copy, let me know. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: LMTP delivery failover

2015-03-17 Thread Quanah Gibson-Mount
--On Monday, January 27, 2014 6:46 PM -0800 Quanah Gibson-Mount qua...@zimbra.com wrote: --On Tuesday, January 28, 2014 2:40 AM + Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Jan 28, 2014 at 01:02:45AM +, Viktor Dukhovni wrote: The patch below may not even compile

Incorrect postscreen documentation

2015-03-12 Thread Quanah Gibson-Mount
http://www.postfix.org/postscreen.8.html Says that postscreen_dnsbl_timeout is available in Postfix 2.11 or later. This is not correct. It is in postfix 3.0 and later. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-27 Thread Quanah Gibson-Mount
--On Thursday, February 26, 2015 12:17 AM + Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Wed, Feb 25, 2015 at 02:03:52PM -0800, Quanah Gibson-Mount wrote: --On Wednesday, February 25, 2015 9:17 PM + Viktor Dukhovni postfix-us...@dukhovni.org wrote: --- Editorial

SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
to get this lookup to succeed AND have it then go through SRS. Is something like: sender_canonical_maps = proxy:ldap:/opt/zimbra/conf/ldap-scm.cf, lmdb:/etc/postfix/pfix-no-srs.cf, tcp:127.0.0.1:10001 Workable? Thanks! --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
--On Wednesday, February 25, 2015 4:17 PM -0500 Wietse Venema wie...@porcupine.org wrote: Quanah Gibson-Mount: We're looking to implement SRS support along the lines of https://www.mind-it.info/forward-postfix-spf-srs/. The primary issue I see when looking at this is we already have

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
--- It would not surprise me at all if this were set up incorrectly to start with back in postfix 2.0, and has simply been pushed forward ever since. I'll file a bug to re-examine the use of sender canonical maps here. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
address of char...@bbc.com configured. So alice sends email to bob, and bob returns as being forwarded to charlie. I.e., our MTA sends it on to bbc.com because of forwarding being configured for bob. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

Re: SRS support when sender_canonical_maps is already used for other purposes

2015-02-25 Thread Quanah Gibson-Mount
--On Wednesday, February 25, 2015 5:55 PM -0500 Wietse Venema wie...@porcupine.org wrote: Quanah Gibson-Mount: Imagine al...@example.com e-mails b...@zimbra.com, but bob has set up e-mail forwarding to char...@bbc.com al...@example.com - b...@zimbra.com - char...@bbc.com Standard scenario

bug: postconf keys have default btree values when no BDB support is compiled in

2015-02-10 Thread Quanah Gibson-Mount
will result in automatic failure (This issue was raised by one of our clients who ran into this problem after enabling address_verify_map be used). I would think the default values should not include unsupported database formats. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

Re: address_verify_map and lmdb database

2015-01-15 Thread Quanah Gibson-Mount
--On Thursday, January 15, 2015 4:43 PM -0500 Wietse Venema wie...@porcupine.org wrote: Quanah Gibson-Mount: Hi, I see on http://www.postfix.org/ADDRESS_VERIFICATION_README.html, it recommends using a btree database for the address verify map. For example: # Default setting

address_verify_map and lmdb database

2015-01-15 Thread Quanah Gibson-Mount
is a suitable replacement for btree (and request a doc update if that is correct). Thanks! --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: cidr:/ lookup using network map [e.g. mysql]

2014-12-15 Thread Quanah Gibson-Mount
is trimmed down significantly, but you can get the idea. There's no reason such a thing couldn't be processed as an ordered value. If you were trying to store it in a multi-valued LDAP attribute, that would be problematic, since return order is not guaranteed. --Quanah -- Quanah Gibson-Mount

Re: sender login maps and alias domains

2014-11-21 Thread Quanah Gibson-Mount
--On November 19, 2014 at 7:40:07 PM -0500 Wietse Venema wie...@porcupine.org wrote: Viktor Dukhovni: On Wed, Nov 19, 2014 at 03:07:19PM -0800, Quanah Gibson-Mount wrote: Sorry, the login table lookup must handle the original address as the lookup key via a single query. And clearly

Re: sender login maps and alias domains

2014-11-21 Thread Quanah Gibson-Mount
theoretically then, I'd assume I could then just use two ldap maps... One to do the domain rewrite, the second to look up where to deliver. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

sender login maps and alias domains

2014-11-19 Thread Quanah Gibson-Mount
this: zimbraMailCatchAllForwardingAddress: @zre-ldap003.eng.zimbra.com which is set on the alias domain. Thanks! --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

Re: sender login maps and alias domains

2014-11-19 Thread Quanah Gibson-Mount
to proceed. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

Re: sender login maps and alias domains

2014-11-19 Thread Quanah Gibson-Mount
is the postfix piece to utilize LDAP. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

Re: sender login maps and alias domains

2014-11-19 Thread Quanah Gibson-Mount
table lookup must handle the original address as the lookup key via a single query. And clearly postfix is already designed in some cases to do multiple queries based on the results of previous queries. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc Zimbra

Re: sender login maps and alias domains

2014-11-19 Thread Quanah Gibson-Mount
is aliased to. And even if it did, what address should it look up in the sender login map? foo? bar? baz? All three of them? And what if the client sends mail from bar? They're required to use user@domain for the login. There won't be an issue of foo vs bar vs baz. --Quanah -- Quanah Gibson

Re: sender login maps and alias domains

2014-11-19 Thread Quanah Gibson-Mount
--On November 19, 2014 at 11:14:49 PM + Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Wed, Nov 19, 2014 at 03:07:19PM -0800, Quanah Gibson-Mount wrote: Sorry, the login table lookup must handle the original address as the lookup key via a single query. And clearly postfix

Re: RFC 6710 support?

2014-09-24 Thread Quanah Gibson-Mount
for their outgoing bulk mailings so as not to impact the more critical functions. --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

RFC 6710 support?

2014-09-23 Thread Quanah Gibson-Mount
We've had one request so far for RFC 6710 support with Zimbra. Just curious if there are any plans on the table for implementation of this RFC within Postfix for 2.12 (or later). Thanks! --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra

Re: Correct cert handling when hosting multiple domains?

2014-09-10 Thread Quanah Gibson-Mount
on traffic patterns, but it overall does indicate to me that securing the smtpd layer is of importance to a number of organizations. --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Correct cert handling when hosting multiple domains?

2014-09-10 Thread Quanah Gibson-Mount
to the clients. I'm guessing what they really just want is encrypted SMTPD, which as you note, can work just fine with any valid certificate setup. --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Correct cert handling when hosting multiple domains?

2014-09-08 Thread Quanah Gibson-Mount
.pem -o smtpd_tls_key_file=domain2.key 10.0.0.103:25 inet . . . smtpd -o smtpd_tls_cert_file=domain3.pem -o smtpd_tls_key_file=domain3.ky Thanks, Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Blocked via Spamhaus

2014-09-04 Thread Quanah Gibson-Mount
listed. You list zen first, so it is tested first. If it gets rejected by that RBL, then there is no reason to evaluate any further RBLs. Thus if you see anything being blocked by something other than zen, it means it isn't in the zen list, but is listed elsewhere. --Quanah -- Quanah Gibson

Re: Blocked via Spamhaus

2014-09-04 Thread Quanah Gibson-Mount
Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: pflogsum don't count postscreen rejects

2014-08-25 Thread Quanah Gibson-Mount
=jchzfsrgvu pflogsumm don't count postscreen RBL rejects already using pflogsumm-1.1.5.tar.gz Beta sadly mailgraph and logwatch also hide them :-( If you file a bug for postfix-logwatch with the pertinent info, I'll see what I can do about adding it. --Quanah -- Quanah Gibson-Mount Server

Re: pflogsum don't count postscreen rejects

2014-08-25 Thread Quanah Gibson-Mount
--On Tuesday, August 26, 2014 1:05 AM +0200 li...@rhsoft.net wrote: Am 25.08.2014 um 23:42 schrieb Quanah Gibson-Mount: --On Monday, August 25, 2014 5:12 PM +0200 li...@rhsoft.net wrote: Aug 25 14:55:15 mail-gw postfix/postscreen[29302]: NOQUEUE: reject: RCPT from [119.75.11.68]:53210: 550

manually testing postfix submission on port 587

2014-08-14 Thread Quanah Gibson-Mount
as 8AD091212CC Thanks! --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: manually testing postfix submission on port 587

2014-08-14 Thread Quanah Gibson-Mount
by user testus...@zre-ldap003.eng.zimbra.com So I'll need to debug that next. :) --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: manually testing postfix submission on port 587

2014-08-14 Thread Quanah Gibson-Mount
--On Thursday, August 14, 2014 3:32 PM -0700 Quanah Gibson-Mount qua...@zimbra.com wrote: 235 2.7.0 Authentication successful mail from:testus...@zre-ldap003.eng.zimbra.com 250 2.1.0 Ok rcpt to:testus...@zre-ldap002.eng.zimbra.com 553 5.7.1 testus...@zre-ldap003.eng.zimbra.com: Sender address

Re: manually testing postfix submission on port 587

2014-08-14 Thread Quanah Gibson-Mount
address rejected: not owned by user testus...@zre-ldap003.eng.zimbra.com quit ;) I was trying both with and without them just to ensure it wasn't something stupid about the 's. ;) --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra :: the leader

Re: manually testing postfix submission on port 587

2014-08-14 Thread Quanah Gibson-Mount
=reject_authenticated_sender_login_mismatch is not a configuration we officially support anyway. Once I have it configured per our supported bits (doing lookups out of ldap) it behaves correctly. Thanks! --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra

Re: _sasl_set_path not found error

2014-07-15 Thread Quanah Gibson-Mount
; foreach $file (@files) { unlink $file } foreach $prev (@preserve) { ($name, $junk) = split(/.3.0.$so.so/,$prev,2); $fullname = $name..so.3.0.$so; symlink($fullname, $dir/$name.so); } --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. Zimbra

Re: Berkeley DB6 and Postfix

2014-05-15 Thread Quanah Gibson-Mount
for use by SpamAssassin. I've been (slowly) hacking up a LMDB version of the Bayes DB for SA, but I keep having to defer that for other work. So someone else may beat me to it. --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc Zimbra :: the leader in open

Re: Berkeley DB6 and Postfix

2014-05-12 Thread Quanah Gibson-Mount
. This is one reason there has been a movement to replace BDB with LMDB in a number of software packages. --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

  1   2   3   >