Re: postfix-2.6-20090224-nonprod doesn't build

2009-02-25 Thread Wietse Venema
Ralf Hildebrandt: ... but then I didn't read the INSTALL document to see if something changed fundamentally... The error is: [src/postmulti] gcc -Wmissing-prototypes -Wformat -Wl,--as-needed -DUSE_TLS -DHAS_PCRE -DHAS_CDB -DSNAPSHOT -DNONPROD -g -O -I. -I../../include -DLINUX2 -c

Re: postfix-2.6-20090224-nonprod doesn't build

2009-02-25 Thread Ralf Hildebrandt
* Wietse Venema wie...@porcupine.org: gcc -Wmissing-prototypes -Wformat -Wl,--as-needed -DUSE_TLS -DHAS_PCRE -DHAS_CDB -DSNAPSHOT -DNONPROD -g -O -I. -I../../include -DLINUX2 -c postmulti.c Look at the lines in the code and remove the word static. Done. It works now. BTW, you are

smtp_tls_CAfile

2009-02-25 Thread Manuel Pégourié-Gonnard
Hi, I'm afraid I don't understand what the directive smtp_tls_CAfile does exactly. According to postconf(5), smtp_tls_CAfile (default: empty) The file with the certificate of the certification authority (CA) that issued the Postfix SMTP client certificate. This is needed only when

Re: smtp_tls_CAfile

2009-02-25 Thread Wietse Venema
Manuel P?gouri?-Gonnard: Hi, I'm afraid I don't understand what the directive smtp_tls_CAfile does exactly. According to postconf(5), smtp_tls_CAfile (default: empty) The file with the certificate of the certification authority (CA) that issued the Postfix SMTP client

smtps and sent mail

2009-02-25 Thread gianlucabrt
HiFirst question, i have a mail server with postfix, dovecot, mailscanner and fetchmail now one user has bought a certified email account on an external internet provider.He want to use internal server to sent email through his certified account, is it possible?How can i set my server to use the

Re: smtps and sent mail

2009-02-25 Thread mouss
gianluca...@interfree.it a écrit : Hi First question, i have a mail server with postfix, dovecot, mailscanner and fetchmail now one user has bought a certified email account on an external internet provider. He want to use internal server to sent email through his certified account, is it

Re: smtps and sent mail

2009-02-25 Thread swilting
http://office.microsoft.com/it-it/outlook/HA011510941040.aspx maybe ?? ;:) Le mercredi 25 février 2009 à 23:29 +0100, mouss a écrit : gianluca...@interfree.it a écrit : Hi First question, i have a mail server with postfix, dovecot, mailscanner and fetchmail now one user has bought a

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Victor Duchovni
On Wed, Feb 25, 2009 at 03:30:51PM -0600, Nick Geron wrote: Well, I have found my problem. I probably should have mentioned earlier (how many times has than appeared on this list?) that ldap is used on this system for local user authentication, meaning pam/nss are tied into ldap. I

header check for '.com' blocks non-exec with url in file name

2009-02-25 Thread Voytek Eymont
I have a header check meant to discard '.com' executables as follows [1]: however, undesired operation was just reported[2]: is there a way to 'improve' the expression to only block file names ending in .com, how ? or is there a better solution ? [1]# grep hc2 *

Re: Re: smtps and sent mail

2009-02-25 Thread gianlucabrt
Hi First question, i have a mail server with postfix, dovecot, mailscanner and fetchmail now one user has bought a certified email account on an external internet provider. He want to use internal server to sent mail through his certified account, is it possible? How can i set my server to use

Re: header check for '.com' blocks non-exec with url in file name

2009-02-25 Thread LuKreme
On 25-Feb-2009, at 15:59, Voytek Eymont wrote: [1]# grep hc2 * header_checks:/^Content-(Disposition|Type):\s+.+?(file)?name=?.+? \.com(\.\S{2,4})?(\?=)??(;|$)/ REJECT hc2 .com file attachment types not allowed First off, i think you want mime_header_checks main.cf: mime_header_checks

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Nick Geron
Victor Duchovni wrote: On Wed, Feb 25, 2009 at 03:30:51PM -0600, Nick Geron wrote: Well, I have found my problem. I probably should have mentioned earlier (how many times has than appeared on this list?) that ldap is used on this system for local user authentication, meaning pam/nss are

Re: smtps and sent mail

2009-02-25 Thread LuKreme
On 25-Feb-2009, at 16:25, gianluca...@interfree.it wrote: ok, i have configured postfix to sent mail trhough the smtp of my internet service provider. Now one user have a certified email account and he wants to sent mail by my server trhough the smtps. I have seen that with postfix is

Re: header check for '.com' blocks non-exec with url in file name

2009-02-25 Thread LuKreme
On 25-Feb-2009, at 16:31, LuKreme wrote: /^\s*Content-(Disposition|Type).*name\s*=\s*?(.*\.(ade|adp|bas|bat| chm|cmd|com|cpl|crt|dll|exe|hlp|hta|inf|ins|isp|js|jse|lnk|mdb|mde| mdt|mdw|msc|msi|msp|mst|nws|ops|pcd|pif|prf|reg|scf|scr\??|sct|shb|

Re: Re: Re: smtps and sent mail

2009-02-25 Thread gianlucabrt
ok, i have configured postfix to sent mail trhough the smtp of my internet service provider. Now one user have a certified email account and he wants to sent mail by my server trhough the smtps. I have seen that with postfix is possible to use two different smtp but is possible to use a

Re: Problem with ldap table lookups and TLS

2009-02-25 Thread Victor Duchovni
On Wed, Feb 25, 2009 at 05:34:26PM -0600, Nick Geron wrote: This is an OpenLDAP API design issue. The OpenLDAP library (at least up to version 2.3) has a single global SSL_CTX object, that is initialized just once by the first call that creates an SSL-protected LDAP connection. All requests

Re: header check for '.com' blocks non-exec with url in file name

2009-02-25 Thread Voytek Eymont
On Thu, February 26, 2009 10:31 am, LuKreme wrote: First off, i think you want mime_header_checks main.cf: mime_header_checks = pcre:$config_directory/mime_headers.pcre LuKreme, thanks. ahem, what else might be worthwile to put into mime header check ? single rule mime header check seems

Re: header check for '.com' blocks non-exec with url in file name

2009-02-25 Thread Jan P. Kessler
Voytek Eymont schrieb: ahem, what else might be worthwile to put into mime header check ? single rule mime header check seems lonely... http://en.wikipedia.org/wiki/KISS_principle

Re: weird postfix TLS behaviour

2009-02-25 Thread Victor Duchovni
On Wed, Feb 25, 2009 at 04:50:49PM -0800, J Sloan wrote: We have just started doing business with a firm that uses an ironport device, and discovered that postfix will not issue a STARTTLS to that host, whether it's listed in tls_policy_maps with may or encrypt protocols=TLSv1 The policy

Re: weird postfix TLS behaviour

2009-02-25 Thread Victor Duchovni
On Wed, Feb 25, 2009 at 05:50:07PM -0800, J Sloan wrote: Victor Duchovni wrote: On Wed, Feb 25, 2009 at 04:50:49PM -0800, J Sloan wrote: We have just started doing business with a firm that uses an ironport device, and discovered that postfix will not issue a STARTTLS to that

Re: weird postfix TLS behaviour (solved)

2009-02-25 Thread J Sloan
Victor Duchovni wrote: The policy table lookup key does not match the destination nexthop, or That's exactly the problem. I think you should be able to figure this out, even without reading the below, but if you are in a hurry try the documentation:

STMP AUTH question...

2009-02-25 Thread Alberto Lepe
Hi, I'm new in this mailing list, I have setup a test server (localhost) with POSTFIX (of course!)+DOVECOT+SASL+UBUNTU 8.10 with Virtual Mailboxes. I'm testing the SMTP authorization system and it seems to work fine: In order to send an email from a test account, I'm using the Username and

Re: STMP AUTH question...

2009-02-25 Thread Barney Desmond
But, (THIS IS THE IMPORTANT PART): If I uncheck the Username and Password option, the mail is sent successfully... What I want is to block anonymous requests... In other words, ONLY send those mails when the user is SASL authenticated. It is possible? Am I missing something in the