Kudos

2018-07-04 Thread Matt Schwartz
I have to give kudos to Gilles and his team for the truly fantastic changes that were made to the forthcoming new release of OpenSMTPD. The splitting of the action and match parts have made it easier to configure and troubleshoot. Furthermore, on restarting the daemon, whatever was queued simply

Re: DKIM DomainKey [SOLVED]

2018-07-04 Thread Teno Deuter
you couldn't be more right than that! Thank you On Wed, Jul 4, 2018 at 12:25 PM, Gilles Chehade wrote: > On Wed, Jul 04, 2018 at 11:44:00AM +0200, Teno Deuter wrote: >> makes sense indeed. >> >> In that case would be OK if I include that user in the wheel group? I >> mean from a security

Re: DKIM DomainKey

2018-07-04 Thread Gilles Chehade
On Wed, Jul 04, 2018 at 12:39:38AM +0200, Teno Deuter wrote: > Dear support team, > > in a OpenBSD 6.3 installation, what are the correct access rights for > the private DKIM DomainKey file? > > I have the following: > > in /var/dkimproxy > > -rw-r--r-- 1 root wheel default.private >

Re: DKIM DomainKey

2018-07-04 Thread Teno Deuter
indeed. What I'm doing is the following: a system user who is part of the wheel group, launches a neomutt session and sends an email. I thought that this user tries to do the dkim sign but obviously this is wrong! Could it be the '_dkimproxy' user or the '_smtpd' one? Thank you On Wed, Jul 4,

Re: Fwd: smtpd.conf configuration error (accept)

2018-07-04 Thread Reio Remma
On 04.07.2018 11:35, Teno Deuter wrote: here is what I have changed: accept from any \ for domain recipient ! \ virtual \ deliver to maildir "/var/mail/%{user.username}/Inbox" and I still get the error: invalid use of table "blacklistRecipients" as RECIPIENT

Re: Fwd: smtpd.conf configuration error (accept)

2018-07-04 Thread Teno Deuter
here is what I have changed: accept from any \ for domain recipient ! \ virtual \ deliver to maildir "/var/mail/%{user.username}/Inbox" and I still get the error: invalid use of table "blacklistRecipients" as RECIPIENT parameter Thank you On Wed, Jul 4, 2018 at 1:33

Re: DKIM DomainKey

2018-07-04 Thread Gilles Chehade
On Wed, Jul 04, 2018 at 10:29:51AM +0200, Teno Deuter wrote: > indeed. What I'm doing is the following: > > a system user who is part of the wheel group, launches a neomutt > session and sends an email. I thought that this user tries to do the > dkim sign but obviously this is wrong! Could it be

Re: Fwd: smtpd.conf configuration error (accept)

2018-07-04 Thread Teno Deuter
unfortunately, in my case, the blacklist file is empty! :( could have something to do with the permissions? Here is my current status: -rw-r--r-- 1 root wheel On Wed, Jul 4, 2018 at 11:00 AM, Reio Remma wrote: > On 04.07.2018 11:35, Teno Deuter wrote: >> >> here is what I have changed: >> >>

Re: DKIM DomainKey

2018-07-04 Thread Gilles Chehade
On Wed, Jul 04, 2018 at 11:44:00AM +0200, Teno Deuter wrote: > makes sense indeed. > > In that case would be OK if I include that user in the wheel group? I > mean from a security point of view.Any concerns about this? > why do that ? why not simply change ownership on the key to that of

Re: Fwd: smtpd.conf configuration error (accept)

2018-07-04 Thread Reio Remma
It seems empty equals broken. You need actual content in the file. Reio On 04.07.2018 12:25, Teno Deuter wrote: unfortunately, in my case, the blacklist file is empty! :( could have something to do with the permissions? Here is my current status: -rw-r--r-- 1 root wheel On Wed, Jul 4,

Re: Fwd: smtpd.conf configuration error (accept)

2018-07-04 Thread Teno Deuter
yep, that was the case! Actually the syntax was correct. From the beginning. The problem was the empty blacklist file! Thank you for your help On Wed, Jul 4, 2018 at 3:36 PM, Reio Remma wrote: > It seems empty equals broken. You need actual content in the file. > > Reio > > > On 04.07.2018

Re: Fwd: smtpd.conf configuration error (accept) [SOLVED]

2018-07-04 Thread Teno Deuter
On Wed, Jul 4, 2018 at 7:43 PM, Teno Deuter wrote: > yep, that was the case! Actually the syntax was correct. From the > beginning. The problem was the empty blacklist file! > > Thank you for your help > > > On Wed, Jul 4, 2018 at 3:36 PM, Reio Remma wrote: >> It seems empty equals broken. You