Optimizing rules and tables

2013-10-16 Thread Clint Pachl
In a situation where you have many virtual domains with many users, is it most optimal to have separate rules for each domain and separate user tables for each domain? Or, is it better to have one rule for all virtual domains and a single user table? For example, multiple rules/tables:

Re: certificates

2014-03-31 Thread Clint Pachl
Gilles Chehade wrote, On 03/31/14 01:31: ok, well there's no such thing ashttps://www.opensmtpd.org, I will make sure nginx does not redirect to poolp.org in such case FYI, the OpenBSD website links to http://www.opensmtpd.org/. So I'm guessing OpenSMTPD's unsecured site is valid. Correct?

Meaning of from local

2014-05-30 Thread Clint Pachl
The directive for from local in the smtpd.conf(5) man page states: The rule matches only locally originating connections. But what exactly does locally originating mean? My network consists of two subnets: 10.0.9.0/24 and 10.0.10.0/24. The OpenSMTPD server is at 10.0.9.20. The email client

Re: Meaning of from local

2014-05-30 Thread Clint Pachl
Panagiotis Atmatzidis wrote, On 05/30/14 05:58: My network consists of two subnets: 10.0.9.0/24 and 10.0.10.0/24. The OpenSMTPD server is at 10.0.9.20. The email client is at 10.0.10.24. The mail server will relay mail to the Internet for the client with the following single rule: accept

Re: Meaning of from local

2014-05-30 Thread Clint Pachl
required by the mail server. Thanks, Clint Clint Pachl wrote, On 05/30/14 16:26: Panagiotis Atmatzidis wrote, On 05/30/14 05:58: My network consists of two subnets: 10.0.9.0/24 and 10.0.10.0/24. The OpenSMTPD server is at 10.0.9.20. The email client is at 10.0.10.24. The mail server will relay

Table key-value separator

2014-05-31 Thread Clint Pachl
In my original smtpd.conf, I see I was using = as the key/value separator. However, in table(5), = is used as the separator. Is = deprecated? I kind of like it better; it shows association like a Ruby hash. -- You received this mail because you are subscribed to misc@opensmtpd.org To

Re: Why use lda or lmtp at all?

2014-06-07 Thread Clint Pachl
And thank you Martin for asking. I had the same ideas and questions as you. I don't use any incoming filtering with Dovecot and my mailboxes only have around 10k messages, so I just have OpenSMTPD setup as the MDA. Previously, I was using Postfix+Dovecot for years. I configured Postfix to

Client certificate verification prompt

2014-06-19 Thread Clint Pachl
When I submit mail to smtpd, Mozilla Seamonkey prompts me with the following: This site has requested that you identify yourself with a certificate: mail.targetmeister.com:587 Organization: Issued Under: StartCom Ltd. The above prompt only occurs the first time I send mail after

Re: Is my server relaying or sending spam?

2015-03-17 Thread Clint Pachl
Hugo Osvaldo Barrera wrote, On 03/16/15 04:15: On 2015-03-14 18:27, Clint Pachl wrote: snip Subject: Delivery status notification: error From: Mailer Daemon mailer-dae...@mail.targetmeister.com To: israel.5...@cantv.net Date: Fri, 13 Mar 2015 06:49:23 -0700 (MST) Hi

Re: Virtual users with valid email addresses for usernames?

2015-03-07 Thread Clint Pachl
Seth wrote, On 02/12/15 23:09: So maybe the full email address can in fact be used as the login name for SMTPAUTH and a virtual mail user setup? I've been using email addresses as the username in my credentials table since OpenSMTPD made it into the OpenBSD base system. Works like a charm.

The death of TLSv1.0

2016-01-08 Thread Clint Pachl
Hello everyone! I originally asked back in June 2014 if there was a config to turn off SSL3 because at that time offering SSL3 connections resulted in failing my PCI-DSS compliance. Gilles kindly and rationally replied: Gilles Chehade wrote, On 06/08/14 05:40: > no, we don't want to make

Re: The death of TLSv1.0

2016-01-09 Thread Clint Pachl
Tom Smyth wrote on 01/08/16 16:40: Pardon my ignorance what is the major risk of leaving tls 1.0 enabled... I think leaving an encryption method enabled once highergrade encryptionmethods are chosen if both parties support is a more sensible To be honest, I have no idea because I am not a