root wheel default.private
>
This is not related to smtpd itself but one thing is for sure:
-rw-r--r-- 1 root wheel default.private
^ this can't possibly be a good permission for a private key
--
Gilles Chehade
https://www.poolp.org @poo
is wrong! Could it be the '_dkimproxy'
> user or the '_smtpd' one?
>
probably _dkimproxy, smtpd doesn't do signing
> On Wed, Jul 4, 2018 at 9:03 AM, Gilles Chehade wrote:
> > On Wed, Jul 04, 2018 at 01:22:52AM +0200, Teno Deuter wrote:
> >> I had that before but then I
ship on the key to that of _dkimproxy rather
than give that user more privileges ?
> Thank you for your help
>
> On Wed, Jul 4, 2018 at 11:27 AM, Gilles Chehade wrote:
> > On Wed, Jul 04, 2018 at 10:29:51AM +0200, Teno Deuter wrote:
> >> indeed. What I'm doing is the following:
> >
hi,
the "new config" smtpd is being tested on the server running this
mailing list, please let me know if you observe something strange
gilles
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail because you are
We're not ready for the portable release yet so I didn't build the master release, it is however tagged on GitHub already so you can download a tarball for tag opensmtpd-6.4.0 thereGillesLe 22 oct. 2018 14:18, Matt Schwartz a écrit :I think it's best if you get the sources from OpenBSD CVS.On
" IRC channel for the project is at:
#OpenSMTPD @ irc.freenode.net
Reporting Bugs:
===
Please read http://www.opensmtpd.org/report.html
Security bugs should be reported directly to secur...@opensmtpd.org
Other bugs may be reported to b...@opensmtpd.org
--
Gilles Cheh
weeks so they can be tested in development.
I'll explain the plan for filters in an upcoming mail but now is time to
drink and celebrate the end of the week :-)
Gilles
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail
ite frankly: even the shittiest 30 lines of sh self-written custom
mda makes a better choice than procmail.
Please do yourselves a favor, ditch procmail in favor of fdm.
If you want to argue why procmail is a nice choice be prepared for me to
start sharing samples of code and keep reminding you
On Sun, Oct 28, 2018 at 02:34:53PM -0400, Matt Schwartz wrote:
> fdm looks a whole helluva lot easier to get going too.
>
yes, I can't find a reason why people still use procmail to be honest.
on a scale from 1 to 10 of horrible, procmail is at 100.
> On Sun, Oct 28, 2018 at 1:52
e backup one to realize the primary is up
which may take some time depending how long the primary was down.
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a m
Sorry sent too fast, wanted to add that debugging configuration without logs is difficultLe 27 oct. 2018 06:48, Gilles Chehade a écrit :This can mean you have a loop of some sort in aliases expansion, or maybe in .forward b«yÇ¢½çm+)[yÆ®±ì¨¹ªÞ²æìr¸yÛh+¢§²kivàN§²æìr¸zǧu©[h+úéì
This can mean you have a loop of some sort in aliases expansion, or maybe in .forward
Actually it makes sense having both from local and auth rules
Hi,I have started committing filters support to OpenBSD today in order to get them nice and ready for the next major release.The only part missing at this point is DATA filtering which I'll probably finish by the end of November.Filters are in development meaning that keywords will change,
there a way to get back this behaviour I had before 6.4?
>
care to show your /etc/mail/aliases ?
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
tarball and signature file:
https://www.opensmtpd.org/archives/opensmtpd-6.4.0p2.tar.gz
https://www.opensmtpd.org/archives/opensmtpd-6.4.0p2.sum.sig
The website will catch up on download links soon.
Enjoy !
--
Gilles Chehade @poolpOrg
https
that are not production critical and which have
backup MX in case they're down, we encourage you to run master branch on
OpenBSD and portable branch on other systems, to run bleeding edge code.
This is what runs on the OpenSMTPD mailing list machine, so they are not
too unstable :-)
Cheers,
--
Gilles Chehade
https://www.opensmtpd.org/archives/opensmtpd-extras-6.4.0.sum.sig
Cheers,
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To u
On Mon, Nov 05, 2018 at 06:35:45AM -0500, Daniel Jakots wrote:
> On Mon, 5 Nov 2018 09:01:08 +0100, Gilles Chehade
> wrote:
>
> > On Sun, Nov 04, 2018 at 04:01:12PM -0500, Daniel Jakots wrote:
> > > Hi,
> > >
> > > My conf is basically
> >
we can talk.
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr
helo,
made a change to the mailing list paths on the mail server, just testing
that i didn't break something ;-)
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
On Sun, Sep 02, 2018 at 10:26:15PM -0400, Matt Schwartz wrote:
> Does anyone know how the following tables work?
> query_netaddr
> query_userinfo
> query_source
> query_mailaddr
> query_addrname
>
> I am trying to convert my setup entirely to sqlite.
>
any parti
sc+unsubscr...@opensmtpd.org
> >
>
> My bad just realized you were specifically asking about the ones not
> mentioned in the manual. I haven't used them, but I imagine it would be
> similar to how those tables work as described in table(5) just via SQL
> statements.
indeed
--
Gille
fair enough
On Mon, Sep 03, 2018 at 07:44:12AM -0400, Matt Schwartz wrote:
> Yes, I'm interested in getting those going so I can update the
> table_sqlite(5) page for you. :-) Basic files do work well enough though.
>
> On Mon, Sep 3, 2018, 4:29 AM Gilles Chehade wrote:
>
>
of people are using the smtpctl stats command as an
input to reporting utilities and maybe we should provide a better way to
do that, and maybe I already have diffs heading in that direction ;)
Gilles
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
use-case that could have never worked because it
not only uses the wrong _documented_ mechanism but also because the code
to make your use-case work has never existed, kinds of irritates me.
I don't get royalties on smtpd install, please install whatever software
fits your use case, this is
Sun ALOMs and at least one Lexmark printer that also sends email with
> broken From addresses.)
>
I may sound a bit harsh, but starting a thread with "this is my last try
or I'll switch" (as if it actually matters) right before telling someone
who wants to help you that you actually t
On Fri, Jan 18, 2019 at 02:56:10PM +0300, Tevfik Ceydeliler wrote:
> Hi
>
> Is there anu way to add diclaimer?? into?? mail by using smtpd?
>
Not yet possible easily, no
Will be doable with the next release
--
Gilles Chehade @poo
go check that mail
> server a 7,000,000th time, this time to see what MTA is actually *running*,
> not just *configured*. I'm not sure whether I want it to be such a blatant
> mistake on my part or not... if yes, this all makes sense but I'm an idiot,
> whe
On Tue, Jan 22, 2019 at 01:11:44AM +0100, Eric Elena wrote:
> On Mon, 21 Jan 2019 11:08:02 +0100 Gilles Chehade wrote:
> > I may sound a bit harsh, but starting a thread with "this is my last try
> > or I'll switch" (as if it actually matters) right before telling someone
sn't really help to figure it out though.
>
yes :-/
the problem is that the SMTP engine expects an SMTP session, and instead
it receives a blob which violates the protocol and likely contains a new
line that triggers pipeline violation mechanism.
On Wed, Dec 12, 2018 at 03:56:35PM -0500, Matt Schwartz wrote:
> Gilles,
>
> I've got some time on my hands for the next few weeks. I could work on it
> if you'd like.
>
Again it's not a matter of working on it but commiting to maintain it on
the long run.
The FAQ has be
forgotten, otherwise this means additional work for me.
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe,
On Thu, Dec 20, 2018 at 11:31:27AM +0100, Aham Brahmasmi wrote:
> Monsieur Gilles,
>
[...]
> > This will result in smtpd replacing the welcome banner with the message,
> > then dropping the client connection if they don't have a reverse DNS and
> > a matching forward DNS.
On Sat, Dec 22, 2018 at 07:23:50PM +0100, Aham Brahmasmi wrote:
> Bonjour Monsieur Gilles,
>
> To start with, Merci Beaucoup for all the effort and patience.
>
> I think there might an inadvertent interchanging of the comments
> in your blog post titled "more o
D builtin.
it was fixed three days ago in -current.
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To uns
uoting the man page:
[!] from src address |
Specify that session may only originate from string or
list table address which can be a specific address or a
subnet expressed in CIDR-notation.
you're using an older version of
On Sun, Dec 23, 2018 at 12:06:02PM +0100, Aham Brahmasmi wrote:
> Bonjour Monsieur Gilles,
>
> Merci beaucoup for your exhaustive explanations.
>
> > > 1) What is the difference between the "report" and "filter" prefixes?
> > > My current
Doable with OpenSMTPD using multiple actions and using the rcpt-to matching
criteria, however it feels kind of hackish to do it at that level.
Basically you would create one action per dovecot shard, then one match per
shard with an rcpt-to criteria pointing to a table containing the recipients
ling delivery for all virtual users.
This option is not usable with the mbox delivery method.
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail b
dy@public.domain -> andy@imap3.private
>
this will appear in Received lines though
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
y to secur...@opensmtpd.org
Other bugs may be reported to b...@opensmtpd.org
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail because you are subscribed to misc@ope
On Sun, Dec 16, 2018 at 11:11:23AM -0500, Matt Schwartz wrote:
> Hi Gilles,
>
> Stupid question but did these minor fixes come via a syspatch or do I need
> to download and compile the tarball?
>
If you're on OpenBSD 6.4 and run syspatch, you will be fine.
> On Sun, Dec
On Thu, Dec 20, 2018 at 10:13:11AM +0100, Aham Brahmasmi wrote:
> Hi Gilles,
>
Hi,
> Thank you for your elaborate response.
>
> > if someone steps up to do the work, I will happily welcome the FAQ again
> > but it needs to be someone who commits to that work, not s
you're running stable you will always be up to date with patches.
> > On 20 Dec 2018, at 6:38 pm, Gilles Chehade wrote:
> >
> > On Thu, Dec 20, 2018 at 02:52:19PM +1100, Antonino Sidoti wrote:
> >> HI,
> >>
> >> I am on OpenBSD 6.4 and I ha
oading not being very
important in my mind it might take time, if someone wanted to work on it
i'd help with getting started though ;-)
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received
On Tue, Dec 04, 2018 at 03:22:14AM +, sunil+sm...@nimmagadda.net wrote:
> Gilles Chehade wrote:
> > On Mon, Dec 03, 2018 at 06:11:29PM -0200, Cristiano Costa wrote:
> > > Hello everyone,
> > >
> > > Recently, we have updated our external MTA to u
apital. So you wait/spool
> > in London until Edinburgh airport is receiving traffic. Then then you
> > get the next flight to your final destination & Hogmanay for 3 days.
>
> Thank you for the excellent analogy.
>
> I will now never forget that Edinburgh is The P
On Wed, Dec 05, 2018 at 04:53:20AM +, sunil+sm...@nimmagadda.net wrote:
> Gilles Chehade wrote:
> [...]
> > > ascii_load_bounce_type(enum bounce_type *dest, char *buf)
> > > {
> > > if (strcasecmp(buf, "error") == 0)
> > > -
?
>
That's not possible.
If you have only 1 public IP address, how is the server supposed to know
which domain it should print on the banner when a client connects ?
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me
On Tue, Dec 04, 2018 at 01:10:13PM +, sunil+sm...@nimmagadda.net wrote:
> Gilles Chehade wrote:
> > On Tue, Dec 04, 2018 at 03:22:14AM +, sunil+sm...@nimmagadda.net wrote:
> > > Gilles Chehade wrote:
> > > > On Mon, Dec 03, 2018 at 06:11:29PM -0200, Cristian
ur machine or from others:
match auth from local [...]
match auth from any [...]
Your new ruleset should have one or two additional match rules I guess.
Also, while at it, it is now also possible to match non-network sessions
with:
match from socket [...]
This u
..@example.com. So it was relayed afterwards by the first rule.
>
> Any hint how this could be done in the new grammar? I have no idea how to
> implement the old-style => catchall.
>
grammar set aside, it's done the exact same way.
--
Gilles Chehade
On Sun, Dec 02, 2018 at 01:05:56PM +0100, Fran??ois wrote:
> Thanks Gilles for your quick answer.
>
> Based on your recommendations, I have now only this 3 match rules :
>
> match from any mail-from for any reject
> match auth from local action relayer
> match auth from
n:
> -negation TAG tables {
> +negation TAGGED tables {
> struct table *t = $3;
>
> if (rule->flag_tag) {
>
> --
> You received this mail because you are subscribed to misc@opensmtpd.org
> To unsubscribe,
ion: error' in this DSN is non-compliant. It should be
> > 'Action: failed'. You may wish to report this to the opensmtpd developers."
>
> So maybe you would like to patch opensmtpd too.
>
> The link to the bug report is ht
On Thu, Dec 06, 2018 at 04:10:15AM +, sunil+sm...@nimmagadda.net wrote:
> adding misc@opensmtpd.org...
>
diff ok with me !
> Date: Thu, 06 Dec 2018 04:05:49 +
> From: su...@nimmagadda.net
> To: Gilles Chehade
> Cc: Cristiano Costa , misc@opensmtpd.org
> Subject:
and that will actually have their filters
evolve as we make changes to the API.
I wrote a python binding in less than 100 lines of code and will provide
it for testing, maybe some of you want to write the same kind of binding
for other popular languages, let me know.
--
Gilles Chehade
ected home computers, which is most
of the non legitimate trafic coming to my box.
The code will be part of next release in April, until then you will have
to use code from OpenBSD -current or github's master or portable branch.
Thought I'd share this with you,
Cheers,
--
Gill
;
> --
> You received this mail because you are subscribed to misc@opensmtpd.org
> To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
>
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://
of an alias.
before 6.4, this resulted in "Recipient rejected" with no indication the
reason was in the expansion, so now the recipient is rejected but we let
the postmaster know this had to do with an expansion problem.
--
Gilles Chehade
On Sun, Nov 25, 2018 at 09:11:22AM -0600, Edgar Pettijohn wrote:
>
> On Nov 25, 2018 8:24 AM, Gilles Chehade wrote:
> >
> > There seems to be something wrong with your mail encoding, the diff is
> > barely readable for me, spaces are replaced with '?' :-/
> >
&
when the Junk case is very isolated and can
be covered with a couple strcasecmp() calls.
If X-Spam-Flag had been part of the junk test in mail.maildir.c, would
this diff still had been written ? to cover which case ?
Gilles
On Sat, Nov 24, 2018 at 11:02:41AM -0600, Edgar Pettijohn III wrote:
> m
?? "sendfd proc exec id inet unix", NULL) == -1)
> ?? err(1, "pledge");
>
> event_dispatch();
>
>
> --
> You received this mail because you are subscribed to misc@opensmtpd.org
> To unsubscribe, send a mail to: misc+unsu
;
> Not sure if there's a better way to accomplish this though.
>
that's the correct way of handling it in my opinion
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this
eady quite long, it means that you have more
trust in the reliability of your secondary MX than your primary MX and
this essentially means your setup is wrong.
if you still want to do that, you should consider also looking at the
bounce warn-interval option so at the very least your s
You write your rules the same way, they are evaluated in the same order,
there are a few minor keyword changes but quite frankly I don't see what
is so complex.
Anyways, the change was mandatory to move forward so there's not much we
can do about it and there will be changes in the future again,
ke:
$ openssl s_client -host 50.55.65.87 -port 587
instead of:
$ openssl s_client -host 50.55.65.87 -port 587 -starttls smtp
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You r
established a connection then attempted TLS
negotiation. this worked fine, the MTA session played out until it hit a
TLS error that caused it to drop connection. TLS was opportunistic so it
connected again but without TLS.
The only "issue" in this log is that there w
t; relay host smtp://127.0.0.1:10025
>
> match for local action "lmtp-local"
> match tag DKIM_CHECKED from any for domain action "lmtp-local"
> match tag DKIM for any action "relay"
> match from any for domain action "relay_incoming&qu
On Tue, Sep 18, 2018 at 06:33:33PM +0200, Gilles Chehade wrote:
>
> [...]
>
> $2b$09$fEv/zNZ/5hELpDH3Vq93AuygRLnySIcNXH78rq9WxPPbZJxmcdk5m
> | | ||
> | | ||__ encrypted password
> | | |__ begining of salt
> |
s if password
was generated using the same crypt() function that will be used validate
it.
I suggest your read the crypt(3) and passwd(1) man pages of your system.
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail because you are
On Wed, Dec 19, 2018 at 09:05:52AM +0100, Aham Brahmasmi wrote:
> Hi Gilles,
>
> > On Wed, Dec 12, 2018 at 06:39:59PM +, mabi wrote:
> > > Hi,
> > >
> > > I was wondering where did the FAQ section on the opensmtpd.org website
> > > disa
17 Dec 2018, at 3:15 am, Gilles Chehade wrote:
> >
> > On Sun, Dec 16, 2018 at 11:11:23AM -0500, Matt Schwartz wrote:
> >> Hi Gilles,
> >>
> >> Stupid question but did these minor fixes come via a syspatch or do I need
> >> to download and compi
th correct rDNS and fc-rDNS
- setup the mta to support TLS (if needed, not the case on OpenSMTPD)
- setup the mta to use a EHLO name matching DNS for the IP
- setup SPF
- setup DKIM
That would be my very very very very minimum requirements.
--
Gilles Chehade
On Wed, Feb 20, 2019 at 04:57:08PM +0100, Mischa wrote:
>
>
> > On 6 Feb 2019, at 17:24, Mischa wrote:
> >
> >> On 6 Feb 2019, at 15:38, Gilles Chehade wrote:
> >>
> >> On Wed, Feb 06, 2019 at 11:42:19AM +0100, Mischa wrote:
> >>> Hi
y mail-from "@opensmtpd.org" reject
there are other ways too
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
On Tue, Jan 29, 2019 at 04:23:23PM +0100, Mischa wrote:
> > On 29 Jan 2019, at 16:20, Gilles Chehade wrote:
> >
> > On Tue, Jan 29, 2019 at 01:10:47PM +0100, Mischa wrote:
> >> Hi Gilles,
> >>
> >>> well, providing the full session log from conne
On Tue, Jan 29, 2019 at 01:10:47PM +0100, Mischa wrote:
> Hi Gilles,
>
> > well, providing the full session log from connect to disconnect without
> > altering it would be a good start to troubleshoot.
>
> Yeah... not really going to happen on public mailinglist. :/
&g
in action "mlmmj"
> >
> >
>
You should really avoid using mlmmj from the config or aliases file.
You can easily plug mlmmj from .forward files which is much safer.
--
Gilles Chehade @poolpOrg
https://www.poolp.org
ost=46-23-xx-yy.domain1.nl
> Jan 18 15:56:13 mx1 smtpd[36743]: 00a1b263550db3c7 smtp failed-command
> command="RCPT TO:" result="550 Invalid recipient"
> Jan 18 15:56:13 mx1 smtpd[36743]: 00a1b263550db3c7 smtp disconnected
> reason=disconnect
>
>
On Tue, Jan 29, 2019 at 12:41:17PM +0100, Mischa wrote:
>
>
> > On 29 Jan 2019, at 12:30, Gilles Chehade wrote:
> >
> > On Fri, Jan 25, 2019 at 02:08:41PM +0100, Mischa wrote:
> >> Hi All,
> >>
> >
> > Hi,
> >
> >
>
On Tue, Feb 05, 2019 at 05:35:56PM +0100, Tor Houghton wrote:
> On Tue, Feb 05, 2019 at 04:40:20PM +0100, Gilles Chehade wrote:
> >
> > You should really avoid using mlmmj from the config or aliases file.
> >
> > You can easily plug mlmmj from .forward files which is
that allow OpenSMTPD to build with latest LibreSSL and
latest stock OpenSSL (no weird enable/disable configure flags) and which
only achieve so through use of common APIs, I'll accept them happily.
--
Gilles Chehade @poolpOrg
https://www.poolp.org
On Fri, May 17, 2019 at 02:13:46PM +0200, Harald Dunkel wrote:
> Hi Gilles,
>
Hi,
> I understand that ssl support is a highly complex issue, making it
> necessary to focus and to get rid of the cruft.
>
> It would be a pity if opensmtpd becomes "OpenBSD-only", t
still able to send me
> mail :(
>
> Any ideas ?
>
the 'from rdns' criteria will fail to match if the client doesn't have a
reverse dns, so a way to catch them would be:
match !from rdns regex '^.*$' [...]
i'll have a look at how to extend the criteria so we can do:
m
On Wed, May 29, 2019 at 09:54:36AM +0200, Pierre-Edouard wrote:
>
> Le 26/05/2019 ?? 17:22, Gilles Chehade a ??crit??:
> > On Sun, May 26, 2019 at 09:53:46AM +0200, Pierre-Edouard wrote:
> > > Hi All,
> > >
> > Hi,
> >
> >
> > > I a
Recipient ok
RCPT TO:
250 2.1.5 Destination address valid: Recipient ok
RCPT TO:
250 2.1.5 Destination address valid: Recipient ok
RCPT TO:
250 2.1.5 Destination address valid: Recipient ok
RCPT TO:
250 2.1.5 Destination address valid: Recipient ok
^C
I think your issues isn't with OpenSMTP
t) or add a domain?
>
> Thanks again and have a great weekend!
>
Yup, the fix will be committed to -current today
--
Gilles Chehade @poolpOrg
https://www.poolp.org tip me: https://paypal.me/poolpOrg
--
You received thi
On Sun, May 19, 2019 at 10:24:07AM +0200, Gilles Chehade wrote:
> On Sat, May 18, 2019 at 02:55:05PM +0200, David Flatz wrote:
> > Hello everybody
> >
>
> Hello,
>
>
> > Delivery to dovecot works pretty good for normal mails locally with sendmail
> > an
On Sun, May 19, 2019 at 12:16:40PM +0200, David Flatz wrote:
> Gilles Chehade (2019-05-19 10:39+0200):
> > On Sun, May 19, 2019 at 10:24:07AM +0200, Gilles Chehade wrote:
> > > On Sat, May 18, 2019 at 02:55:05PM +0200, David Flatz wrote:
> > > > Delivery to doveco
ing EMails.
>
without your configuration it's hard to determine what's wrong
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
t; [1] - https://man.openbsd.org/OpenBSD-6.5/smtpd.conf
> > [2] - https://man.openbsd.org/smtpd.conf
> > [3] - https://www.openbsd.org/65.html
> > -|-|-|-|-|-|-|--
> >
>
> --
> You receiv
plaintext channels.
it is not an SMTP limitation, it is a decision we made years ago and you
will not have a work-around for this.
there's no excuse in 2019 to allow AUTH over plaintext :-)
--
Gilles Chehade @poolpOrg
https://www.poolp.org
find anything on opensmtpd.org. Or
> should I just check the source code of already existing filters as example?
>
the filter API is not yet documented, i'm working on it at the moment.
if you plan on working on filters, you should join our IRC channel or be
prepared to face subtle c
opportunistic tls, so it'll do tls no-verify
but will fallback to plaintext if no tls is available.
tls no-verify won't hard fail if certificate is invalid, but it won't go
to plaintext either.
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You receiv
helo,
this is just a question out of curiosity
I know plenty of people use the lmtp action to deliver mail through LMTP
and I'm genuinely curious: what is your use-case ?
Why do you deliver to LMTP ?
--
Gilles Chehade @poolpOrg
https
t;
> smtp-out: Server certificate verification failed on session 3ba547f4f7b77d56c
>
>
> What am I doing wrong?
>
nothing
no-verify only means that if certificate does not validate, connection
will be dropped, the log will still be visible.
--
Gilles Chehade
On Fri, Jul 05, 2019 at 04:57:51PM +0200, Gilles Chehade wrote:
> helo,
>
> this is just a question out of curiosity
>
> I know plenty of people use the lmtp action to deliver mail through LMTP
> and I'm genuinely curious: what is your use-case ?
>
> Why do you deli
to avoid LibreSSL through local patches,
but once we've switched to libtls, work can start to create a version
of libtls that works with OpenSSL, this will keep most complexity out
of OpenSMTPD and make us work again with OpenSSL without hacks.
Cheers,
--
Gilles Chehade
701 - 800 of 859 matches
Mail list logo