Timed out RCPT TO

2010-06-01 Thread Kaleb Hosie
Hey All, I have a user trying to send an email however it was bounced back. After checking the maillog, I found that it was timing out when sending RCPT TO. I telnet'ed into the recipients server and started sending the series of commands to send mail and it seemed very quick up until I sent RCPT

SSL Certificates per domain

2010-06-01 Thread Eduardo Júnior
Hi, all I'm blocking the communication from MUA to MTA from port 25/tcp, doing that only through from ports 587/tcp and 465/tcp But my box Postfix provides mail services to many domains and I created a only SSL certificate with the name server as Common Name. And I get many warnings because

Re: SSL Certificates per domain

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 10:20:56AM -0400, Wietse Venema wrote: Common Name: myserver.domain.com MX for domain1: smtp.domain1.com MX for domain2: smtp.domain2.com Then, how i configure SSL Certificates per domain on Postfix? References? How would Postfix know what certificate to

Re: Postfix performance issue

2010-06-01 Thread Teh Kim Chooi
i test the command today, and found out that it only takes 1.5 secs, nothing change from the 5 secs result. I add the 192.168.1.10 to my /etc/hosts file, and it drop to 0.5 secs to inject 100 msgs. 1. Question here, if the sender IP is not in my /etc/hosts, will postfix do a reverse lookup on the

Re: SSL Certificates per domain

2010-06-01 Thread Martin Strand
On Tue, 01 Jun 2010 16:20:56 +0200, Wietse Venema wie...@porcupine.org wrote: Eduardo Júnior: But my box Postfix provides mail services to many domains and I created a only SSL certificate with the name server as Common Name. And I get many warnings because the Common Name in the

Re: Postfix performance issue

2010-06-01 Thread Wietse Venema
Teh Kim Chooi: i test the command today, and found out that it only takes 1.5 secs, nothing change from the 5 secs result. I add the 192.168.1.10 to my /etc/hosts file, and it drop to 0.5 secs to inject 100 msgs. No surprise. 1. Question here, if the sender IP is not in my /etc/hosts, will

Re: Timed out RCPT TO

2010-06-01 Thread Noel Jones
On 6/1/2010 9:01 AM, Kaleb Hosie wrote: Hey All, I have a user trying to send an email however it was bounced back. After checking the maillog, I found that it was timing out when sending RCPT TO. I telnet'ed into the recipients server and started sending the series of commands to send mail and

Re: SSL Certificates per domain

2010-06-01 Thread Terry Inzauro
On 06/01/2010 10:00 AM, Victor Duchovni wrote: On Tue, Jun 01, 2010 at 10:20:56AM -0400, Wietse Venema wrote: Common Name: myserver.domain.com MX for domain1: smtp.domain1.com MX for domain2: smtp.domain2.com Then, how i configure SSL Certificates per domain on Postfix? References? How

Re: SSL Certificates per domain

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 12:23:38PM -0500, Terry Inzauro wrote: Even with SNI support, most SMTP clients will not make use of SNI, so it will take a long time before SMTP STARTTLS servers can expect to support multiple certificates for most clients. Could this be a case where it makes

Re: SSL Certificates per domain

2010-06-01 Thread /dev/rob0
On Tue, Jun 01, 2010 at 12:23:38PM -0500, Terry Inzauro wrote: Could this be a case where it makes sense to run multiple instances of postfix which bind to different IP's and are each configured with unique certs? They don't need to be separate instances, possibly just separate smtpd(8)

Re: SSL Certificates per domain

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 12:42:06PM -0500, /dev/rob0 wrote: Is SNI defined for SMTP yet? A quick Google search didn't find it. How would that work? The client would have to tell the hostname or domain name wanted before the STARTTLS? SNI works entirely within SSL, the desired hostname is

unknown recipient issue

2010-06-01 Thread Curtis Maurand
Hello, I'm new to the list, but I've been searching the manuals, how-to's, mail archives, google, etc trying to find the answer to this quesiton. I have the following setup. Postfix 2.6.5 Amavisd-new 2.6.3 Spamassassin 3.2.5 clamav 0.96 dbmail 2.2.9 The entire set up works, amavis is a

Re: unknown recipient issue

2010-06-01 Thread Victor Duchovni
On Tue, Jun 01, 2010 at 02:09:23PM -0400, Curtis Maurand wrote: I have in the main.cf relay_domains= a couple of domains mysql:/etc/postfix/transport.cf transport_maps = mysql:/etc/postfix/transport.cf Don't use the transport table directly as a relay domain table, some day you'll need

Re: unknown recipient issue

2010-06-01 Thread Curtis Maurand
On 6/1/2010 2:22 PM, Victor Duchovni wrote: On Tue, Jun 01, 2010 at 02:09:23PM -0400, Curtis Maurand wrote: I have in the main.cf relay_domains= a couple of domains mysql:/etc/postfix/transport.cf transport_maps = mysql:/etc/postfix/transport.cf Don't use the transport table

Testing Postfix EECDH support with OpenSSL 1.0.0

2010-06-01 Thread Victor Duchovni
I've recently enabled Ephemeral Elliptic Curve Diffie-Hellman (EECDH) key exchange on our inbound Postfix servers (Postfix compliled and linked with OpenSSL 1.0.0), by setting: smtpd_tls_eecdh_grade = strong Counting recently logged ciphers yields: 33258 DHE-RSA-AES256-SHA

Re: Postfix + stunnel SMTPS = address rewriting issue

2010-06-01 Thread Jack Browning
On Fri, May 28, 2010 at 1:27 PM, Wietse Venema wie...@porcupine.org wrote: Jack Browning: I'm curious as to why the generic map isn't working for mail sent to the relayhost. Generic mapping is implemented in the Postfix SMTP client, so you need to configure the Postfix SMTP client

Re: Postfix + stunnel SMTPS = address rewriting issue

2010-06-01 Thread Noel Jones
On 6/1/2010 3:08 PM, Jack Browning wrote: On Fri, May 28, 2010 at 1:27 PM, Wietse Venemawie...@porcupine.org wrote: Jack Browning: I'm curious as to why the generic map isn't working for mail sent to the relayhost. Generic mapping is implemented in the Postfix SMTP client, so you need to

Re: Postfix + stunnel SMTPS = address rewriting issue

2010-06-01 Thread Jack Browning
On Tue, Jun 1, 2010 at 3:16 PM, Noel Jones njo...@megan.vbhcs.org wrote: Add a password map entry for the local unwritten address. Wow. That's all it took. Case closed. I will try and decipher why that worked off-list. Thanks, man. JEB

Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Wietse Venema
I just uploaded new versions of Postfix 2.8-20100601 experimental and a release candidate for Postfix 2.7.1 stable. Both versions have the same fixes/workarounds for incompatible changes in MacOS 10.6, OpenSSL 1.0.0, and Berkeley DB 5.0.21, which were contributed from various places

Virtual domains

2010-06-01 Thread curtis
The virtual domain hosting stuff in the documentation is pretty confusing. I haven't yet seen an example of what it is that I'm trying to accomplish. I have several domains that I have non-unix mailboxes (they are stored by sql using an alternative lmtp daemon after running them through

Re: Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Matt Hayes
On 06/01/2010 08:30 PM, Wietse Venema wrote: I just uploaded new versions of Postfix 2.8-20100601 experimental and a release candidate for Postfix 2.7.1 stable. Both versions have the same fixes/workarounds for incompatible changes in MacOS 10.6, OpenSSL 1.0.0, and Berkeley DB 5.0.21, which

Re: Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Sahil Tandon
On Tue, 01 Jun 2010, Matt Hayes wrote: On 06/01/2010 08:30 PM, Wietse Venema wrote: I just uploaded new versions of Postfix 2.8-20100601 experimental and a release candidate for Postfix 2.7.1 stable. Both versions have the same fixes/workarounds for incompatible changes in MacOS 10.6

Re: Postfix 2.8 and 2.7 updates ready for testing

2010-06-01 Thread Matt Hayes
On 06/01/2010 08:50 PM, Sahil Tandon wrote: On Tue, 01 Jun 2010, Matt Hayes wrote: On 06/01/2010 08:30 PM, Wietse Venema wrote: I just uploaded new versions of Postfix 2.8-20100601 experimental and a release candidate for Postfix 2.7.1 stable. Both versions have the same fixes/workarounds

Virtual domains (more)

2010-06-01 Thread curtis
Can I also assume that I would use relay_domains and relay_transport? Correct?

Re: Virtual domains

2010-06-01 Thread Sahil Tandon
On Tue, 01 Jun 2010, cur...@maurand.com wrote: [ .. ] At Victor's urging, this afternoon, I enabled the relay_recipient_maps and that solved the rejecting unknown before the handoff to the amavisd-new, but broke the domains that I need to forward all mail for. Explain what you mean by

Re: Virtual domains

2010-06-01 Thread curtis
On Tue, 01 Jun 2010, cur...@maurand.com wrote: [ .. ] At Victor's urging, this afternoon, I enabled the relay_recipient_maps and that solved the rejecting unknown before the handoff to the amavisd-new, but broke the domains that I need to forward all mail for. Explain what you mean by

Re: Virtual domains

2010-06-01 Thread Sahil Tandon
On Tue, 01 Jun 2010, cur...@maurand.com wrote: On Tue, 01 Jun 2010, cur...@maurand.com wrote: [ .. ] At Victor's urging, this afternoon, I enabled the relay_recipient_maps and that solved the rejecting unknown before the handoff to the amavisd-new, but broke the domains that I need