Re: [courier-users] Gordon Messmer

2015-05-20 Thread Jan Ingvoldstad
On Thu, May 21, 2015 at 1:32 AM, Sam Varshavchik mr...@courier-mta.com wrote: Yeah, and you shouldn't even mention these TLDs in your email, apparently. Otherwise, Google thinks your account has been hacked, and you just sent a phishing email; so it gets displayed with a red banner warning.

Re: [courier-users] TLS1_1 or higher ONLY?

2015-03-26 Thread Jan Ingvoldstad
On Thu, Mar 26, 2015 at 4:41 PM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 25.03.15 17:23, Matus UHLAR - fantomas wrote: I have tried with debian wheezy 7.8, courier 0.68.2, openssl 1.0.1e and I can confirm the same Gerald encountered - ssl3, tls1, tls1_1 and tls1_2 are allowed by

Re: [courier-users] Block awareness in ratelimit.py

2015-03-14 Thread Jan Ingvoldstad
On Sat, Mar 14, 2015 at 3:29 AM, Sam Varshavchik mr...@courier-mta.com wrote: Lindsay Haisley writes: 3: Patch doesn't support IPv6. Which reminds me that I need to write some code to fix other IPv6 handling deficiencies with smtpaccess. That's very true. A couple of points on this, as

Re: [courier-users] IPv6 spam patterns

2015-03-14 Thread Jan Ingvoldstad
On Sat, Mar 14, 2015 at 5:52 PM, Lindsay Haisley fmouse-cour...@fmp.com wrote: Spamming engines using IPv4 addresses frequently cycle through IP addresses in order to defeat rate limiting filters. These are all generally within the same /24 block. We've seen variations in size between /30

Re: [courier-users] Passing the remote ip to authdaemond

2015-03-02 Thread Jan Ingvoldstad
On Sun, Mar 1, 2015 at 3:42 PM, Alessandro Vesely ves...@tana.it wrote: On Fri 27/Feb/2015 15:26:03 +0100 Jan Ingvoldstad wrote: On Fri, Feb 27, 2015 at 12:05 PM, Alessandro Vesely ves...@tana.it wrote: but would it be worth? Use case 1: Hi, this is $customer, could you please

Re: [courier-users] New builds of courier and cone packages

2015-03-02 Thread Jan Ingvoldstad
On Sat, Feb 28, 2015 at 7:55 PM, Sam Varshavchik mr...@courier-mta.com wrote: Download: http://www.courier-mta.org/download.html Rebuild of: courier-unicode, courier, courier-imap, sqwebmail, maildrop, courier-authlib, and cone packages. Changes: - Renamed the header files and the library

Re: [courier-users] Passing the remote ip to authdaemond

2015-03-02 Thread Jan Ingvoldstad
On Mon, Mar 2, 2015 at 5:24 PM, Alessandro Vesely ves...@tana.it wrote: How about users deploying Tor? Judging from their somewhat cute, naive paranoia, yes, they would be very interested in that kind of data. :-) No disrespect was ever intended. No problem, and sorry for blowing up.

Re: [courier-users] Passing the remote ip to authdaemond

2015-02-27 Thread Jan Ingvoldstad
On Fri, Feb 27, 2015 at 12:05 PM, Alessandro Vesely ves...@tana.it wrote: On Fri 27/Feb/2015 10:28:12 +0100 Jan Ingvoldstad wrote: I hoped I could, by using e.g. less to view the debug log (debug level 1) The debug log is useful for debugging, but lines get garbled if there are concurrent

Re: [courier-users] Passing the remote ip to authdaemond

2015-02-27 Thread Jan Ingvoldstad
On Tue, Feb 24, 2015 at 5:28 PM, Jan Ingvoldstad frett...@gmail.com wrote: If not the IP address, it would be nice to have some sort of unique session ID or similar for the logs, so that you could do single or dual pass parsing of logs. As it is now, log parsing is somewhat tedious

Re: [courier-users] Passing the remote ip to authdaemond

2015-02-25 Thread Jan Ingvoldstad
On Thu, Feb 26, 2015 at 2:42 AM, Sam Varshavchik mr...@courier-mta.com wrote: I don't know what that means. A webmail service does not need a back-end. Yes, it does. But perhaps the back-end is something that you don't think is there. In this case: the file store, in Maildir/Maildir+ format.

Re: [courier-users] Development

2015-02-14 Thread Jan Ingvoldstad
On Sat, Feb 14, 2015 at 7:44 AM, Mark Constable ma...@renta.net wrote: On 14/02/15 12:47, Zachary Grafton wrote: On my mobile at least, with Chrome, the menu is extremely tiny and practically impossible to use without zooming in about 15 times. Yep, that was my main problem too. And

Re: [courier-users] Ports, SSL and STARTTLS for ESMTP

2015-02-11 Thread Jan Ingvoldstad
On Wed, Feb 11, 2015 at 10:55 PM, Ángel González an...@16bits.net wrote: Jeff Potter wrote: (I don’t understand why Apple doesn't use SRV records — when you enter an email address, they make an HTTPS connection to their servers with the domain to see if they can auto-setup the results

Re: [courier-users] Ports, SSL and STARTTLS for ESMTP

2015-02-08 Thread Jan Ingvoldstad
On Sun, Feb 8, 2015 at 3:09 PM, Sam Varshavchik mr...@courier-mta.com wrote: That's true only if properly-signed SSL certificates are used. Since too many small to medium sized organizations (rightfully) don't feel like paying for a valid certificate for their mail server, too many mail

Re: [courier-users] Ports, SSL and STARTTLS for ESMTP

2015-02-07 Thread Jan Ingvoldstad
On Sat, Feb 7, 2015 at 6:16 AM, Lindsay Haisley fmouse-cour...@fmp.com wrote: What's the current status of port recommendations for courier for SSL and TLS (STARTTLS)? It may be my legacy configuration, but SSLPORT=465 in esmtpd-ssl here. Online resources are confusing about this, the

Re: [courier-users] Migrating from Exim + Dovecot to Courier

2015-02-03 Thread Jan Ingvoldstad
On Tue, Feb 3, 2015 at 10:12 PM, Gordon Messmer gordon.mess...@gmail.com wrote: I'm not sure about conversion issues as I haven't done so in the past. You're likely to lose things like message tags and search indexes, as well as some features that Dovecot provides which Courier IMAP does not

Re: [courier-users] autoreply script

2015-02-02 Thread Jan Ingvoldstad
On Sun, Feb 1, 2015 at 5:32 AM, Mark Constable ma...@renta.net wrote: On 31/01/15 18:52, Jan Ingvoldstad wrote: Imagine being a recipient of this, and trying to make the flood stop. Do you know how the courier mailbot program works? I was unfamiliar with it, and RFC 3834 seems

Re: [courier-users] autoreply script

2015-01-31 Thread Jan Ingvoldstad
On Fri, Jan 30, 2015 at 11:06 AM, Mark Constable ma...@renta.net wrote: I've been meaning to do this for the past decade... #!/bin/bash # autoreply 20150130 (C) Mark Constable ma...@renta.net (AGPL-3.0) # # A simple vacation autoreply script for courier-mta based mailservers. I'm not sure

Re: [courier-users] autoreply script

2015-01-31 Thread Jan Ingvoldstad
Imagine being a recipient of this, and trying to make the flood stop. And imagine forgetting the last lines of the message! Unix systems usually come with, or at least have a package for, a program for autoresponses. This program is called vacation, and it does it just right. It's been

Re: [courier-users] MX should not point to a CNAME?

2015-01-25 Thread Jan Ingvoldstad
.: foo.com with a CNAME of “bar.com” foo.com with an MX of “some-good-mailserver.example.com” On 22.01.15 19:23, Jan Ingvoldstad wrote: Well, this is in direct violation of the DNS specification for CNAME. When foo.com is a CNAME, it CANNOT have any other records, so the behaviour of that MX

Re: [courier-users] MX should not point to a CNAME?

2015-01-22 Thread Jan Ingvoldstad
On Thu, Jan 22, 2015 at 3:06 PM, Jeff Potter jpotter-cour...@codepuppy.com wrote: ... My understanding of why CNAMEs are prohibited for MX hosts is that they can introduce loops. The last paragraph of Section 5.1 explains how a sender should attempt to locate itself in the list of MXes,

Re: [courier-users] smtpaccess and 517 rejects woes

2014-11-30 Thread Jan Ingvoldstad
On Sun, Nov 30, 2014 at 3:19 PM, Sam Varshavchik mr...@courier-mta.com wrote: I'll confirm that a HELO check blocks a lot of junk. The default settings do not enable SPF checking at all; so the default configuration does not check the HELO. But, if someone wants to do that, this setting is

Re: [courier-users] smtpaccess and 517 rejects woes

2014-11-30 Thread Jan Ingvoldstad
On Sun, Nov 30, 2014 at 7:06 PM, Sam Varshavchik mr...@courier-mta.com wrote: Jan Ingvoldstad writes: On Sun, Nov 30, 2014 at 3:19 PM, Sam Varshavchik URL:mailto: mr...@courier-mta.commr...@courier-mta.com wrote: At some point, I suppose that the junk senders will wise up

Re: [courier-users] Violation to RFC1035 (IP in MX)

2014-11-19 Thread Jan Ingvoldstad
On Thu, Nov 20, 2014 at 6:39 AM, Bernd Wurst be...@bwurst.org wrote: I don't say that this rule is bullshit or it must be changed. I just wonder why most of the folks out there managed to handle it the other way and courier does not. I think you're wrong about your most of the folks out

Re: [courier-users] Offline maildir reader

2014-08-08 Thread Jan Ingvoldstad
On Fri, Aug 8, 2014 at 10:53 AM, Lisa Muir 34.24...@gmail.com wrote: Hi Guys, Hi Lisa! GOing to be decommisioing a bunch of email accounts for an organisation today as we migrate them from an old courier server to a new one. All the accounts were accessed as IMAP accounts. Told them I

Re: [courier-users] iphone woes

2014-07-31 Thread Jan Ingvoldstad
On Thu, Jul 31, 2014 at 9:29 PM, Zenon Panoussis ora...@provocation.net wrote: An iphone that was working flawlessly with courier imap, suddenly can't connect any more. The user did nothing, so the problem likely stems from some automatic update on the phone. This has been happening on and

Re: [courier-users] Priority of Ciphers

2013-09-11 Thread Jan Ingvoldstad
On Wed, Sep 11, 2013 at 11:59 AM, Matthias Wimmer m...@tthias.eu wrote: Hi Anders, El 2013-09-11 09:41:42, Anders escribió: A side note, I wonder why courier doesn't use IPv6 by default? +1 (Me and others already asked for that as well.) As I remember, Sam doesn't like this idea very

Re: [courier-users] SPF check fails on items that used to work?

2013-09-04 Thread Jan Ingvoldstad
On Wed, Sep 4, 2013 at 4:01 PM, Matus UHLAR - fantomas uh...@fantomas.skwrote: I still see no sane reason for removing SPF record from DNS. Adding support for a new, optional record type is always a hassle. Supporting the TXT record that SPF was designed for in the first place is easy, no

Re: [courier-users] Relay Control

2013-08-30 Thread Jan Ingvoldstad
I know I said I would shut up, but this is a bit of a nit I have to pick. On Fri, Aug 30, 2013 at 12:25 AM, Sam Varshavchik mr...@courier-mta.comwrote: The general idea here is to limit your customer to some reasonable limit, say a hundred email messages per hour. A typical customer will never

Re: [courier-users] Relay Control

2013-08-26 Thread Jan Ingvoldstad
On Mon, Aug 26, 2013 at 8:44 AM, Matus UHLAR - fantomas uh...@fantomas.skwrote: At my former job (an ISP), I recommended users to use SMTP service from they e-mail providers, because - if someone gets paid for mail service, they should provide SMTP too and not leave the expense from spam

Re: [courier-users] Relay Control

2013-08-26 Thread Jan Ingvoldstad
On Mon, Aug 26, 2013 at 2:43 PM, Alessandro Vesely ves...@tana.it wrote: On Mon 26/Aug/2013 10:00:52 +0200 Jan Ingvoldstad wrote: One reason for this is that compromised computers can then effectively be taken out of circulation by the ISP. Not for local networks using NAT. The ISP can

Re: [courier-users] Greetings and feature request

2013-07-30 Thread Jan Ingvoldstad
On Tue, Jul 30, 2013 at 7:16 PM, Keith Dart ke...@dartworks.biz wrote: Hello, Greetings. I've been using the courier suite for some time and I really like it. The imapd outbox feature comes a real handy some times. I also use spamassassin to filter incoming email. However, some spam does get

Re: [courier-users] identlookup vs noidentlookup

2013-05-23 Thread Jan Ingvoldstad
On Thu, May 23, 2013 at 6:24 PM, Kristian Duus Østergaard krist...@duus.com wrote: Hi, Hi there! I'll just start with noting that I come from a different school of MTA administration than Matus Uhlar, so I've learned things differently. My smtp server is currently using identlookup and

Re: [courier-users] identlookup vs noidentlookup

2013-05-23 Thread Jan Ingvoldstad
On Thu, May 23, 2013 at 9:47 PM, Matus UHLAR - fantomas uh...@fantomas.skwrote: This is not what I was saying. I have said that if someone provides IDENT lookups, the response will be used and the client is rewarded with avoiding the timeout when waiting to timeout. I'm sorry for

Re: [courier-users] Misconfigured Exchange Servers

2013-03-21 Thread Jan Ingvoldstad
On Thu, Mar 21, 2013 at 6:49 PM, Lindsay Haisley fmouse-cour...@fmp.com wrote: Second, is Courier unique in exciting this particular config bug? Surely many or most sending SMTP servers attempt to use STARTTLS if the receiving server advertises support for it, and the mail admins of the

Re: [courier-users] RFC 1035

2012-06-27 Thread Jan Ingvoldstad
On Tue, Jun 26, 2012 at 11:16 PM, Lucio Crusca lu...@sulweb.org wrote: Alessandro Vesely wrote: For example, Lucio's server could have matched the bad MX 20 of domain.com, unable to recognize its own IP address because it sits behind a NAT, and unable to recognize its own name since the

Re: [courier-users] RFC 1035

2012-06-26 Thread Jan Ingvoldstad
On Tue, Jun 26, 2012 at 12:52 PM, Sam Varshavchik mr...@courier-mta.comwrote: There are no prescribed means for handling bad DNS data. If DNS is wrong, one cannot have any expectation that it will work in any particular way, even if some parts of it are correct. That's not quite correct,

Re: [courier-users] RFC 1035

2012-06-26 Thread Jan Ingvoldstad
On Tue, Jun 26, 2012 at 3:58 PM, Alessandro Vesely ves...@tana.it wrote: On Tue 26/Jun/2012 13:14:34 +0200 Jan Ingvoldstad wrote: On Tue, Jun 26, 2012 at 12:52 PM, Sam Varshavchik mr...@courier-mta.com mailto:mr...@courier-mta.com wrote: There are no prescribed means for handling bad

Re: [courier-users] authuserdb: why do I need home directories?

2011-12-14 Thread Jan Ingvoldstad
On Wed, Dec 14, 2011 at 13:15, Matus UHLAR - fantomas uh...@fantomas.sk wrote: I guess that for imap, only mail= is used. I guess the home= is not used in such case. But I advise you not to change this schema. In the virtual account setup we use at $orkplace, a typical userdb entry does NOT

Re: [courier-users] authuserdb: why do I need home directories?

2011-12-13 Thread Jan Ingvoldstad
On Wed, Dec 14, 2011 at 06:00, Sam Varshavchik mr...@courier-mta.com wrote: Well, where exactly do you expect to find a $HOME/Maildir, in that case. After all, that's where you'll find your mailbox, in a real account. So, that's exactly where you'd logically find it in a virtual account, then.