postfix + mysql + sasl + pam

2013-09-03 Thread Antonio Tommasi
Hi to all i've postfix 2.9.3 on ubuntu server with sasl+pam authentication to send email. I've a mysql backhand to store users password. In this table i've a field that i use to prevent spam set to value 'Y' or 'N' to permit a user to send (Y value) or not to send (N value) email. If i change

Re: postfix + mysql + sasl + pam

2013-09-03 Thread Wietse Venema
Antonio Tommasi: Hi to all i've postfix 2.9.3 on ubuntu server with sasl+pam authentication to send email. I've a mysql backhand to store users password. In this table i've a field that i use to prevent spam set to value 'Y' or 'N' to permit a user to send (Y value) or not to send (N

smtp relay insertion between internet and mx

2013-09-03 Thread Fabio Sangiovanni
Hello list, I need to put a SMTP relay between Internet and my company's mx (which stores inboxes), in order to do some processing. Current situation is that the mx receives messages directly from the Internet, without hops inbetween; on the mx, postfix is configured to retrieve allowed

Re: Exim, DH, GnuTLS interop

2013-09-03 Thread Jerry
On Mon, 2 Sep 2013 22:14:42 + Viktor Dukhovni articulated: On Mon, Sep 02, 2013 at 03:03:36AM +, Viktor Dukhovni wrote: On Mon, Sep 02, 2013 at 01:25:02AM +, Viktor Dukhovni wrote: If Peer Heinlein would be kind enough to post the Exim version that exhibits the problem

Re: smtp relay insertion between internet and mx

2013-09-03 Thread Wietse Venema
Fabio Sangiovanni: Hello list, I need to put a SMTP relay between Internet and my company's mx (which stores inboxes), in order to do some processing. Current situation is that the mx receives messages directly from the Internet, without hops inbetween; on the mx, postfix is configured to

Re: Anyone use this email server configuration ?

2013-09-03 Thread DTNX Postmaster
On Sep 2, 2013, at 23:13, LuKreme krem...@kreme.com wrote: For servers? Encrypting the drive on a always-on server seems a bit pointless. Once the machine is up and running, the drive is, as you said, unencrypted. However, if someone comes in to seize the machines, they will have to power

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread Viktor Dukhovni
On Tue, Sep 03, 2013 at 11:39:28AM -0700, FliedRice wrote: I do not know if this is just a strange coincidence or what, but now the google error has returned: Sep 3 10:22:03 boaz postfix/smtp[19614]: certificate verification failed for gmail-smtp-in.l.google.com[74.125.142.26]:25: untrusted

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread FliedRice
I do not know if this is just a strange coincidence or what, but now the google error has returned: Sep 3 10:22:03 boaz postfix/smtp[19614]: certificate verification failed for gmail-smtp-in.l.google.com[74.125.142.26]:25: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread FliedRice
Thanks Victor, but I believe it does have something to do with my servers ability to deliver email to Gmail, does it not? http://productforums.google.com/forum/#!topic/gmail/7QWAO_aunhc This server has a newsletter program which sends a lot of email to Gmail, it is important to comply with any

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-03 Thread Viktor Dukhovni
On Tue, Sep 03, 2013 at 12:24:30PM -0700, FliedRice wrote: Thanks Victor, but I believe it does have something to do with my servers ability to deliver email to Gmail, does it not? No, certificate verification is irrelevant. Gmail can't know whether you verified their certificate or not.

Re: Exim, DH, GnuTLS interop

2013-09-03 Thread Peer Heinlein
Am 03.09.2013 21:41, schrieb Phil Pennock: Hi, Debian used to patch, in their build system, the value passed to gnutls_dh_set_prime_bits() from 1024 to 2048. This is the value of the size of the DH parameters which is the minimum considered acceptable. So Debian broke interop with

Re: Exim, DH, GnuTLS interop

2013-09-03 Thread Viktor Dukhovni
On Tue, Sep 03, 2013 at 12:41:46PM -0700, Phil Pennock wrote: Okay, I have identified the root cause. The systems that need to be placated are older Debian installs, and the method should be broadly compatible. Debian used to patch, in their build system, the value passed to