RE: FW: SSL Renegotiation Attack Disabling reneotiation

2015-08-18 Thread L . P . H . van Belle
I dont know if its an option, but i suggest have a look here :   multiple packages for postfix on centos 6 http://pkgs.org/search/postfix?type=name or https://solusipse.net/blog/posts/compiling-postfix-with-postgresql-support-on-centos-7/   Not for the postgresql, but just for the upgrade of

SOLVED.. FW: ldap virtual split domain and forwarding.

2015-08-18 Thread L . P . H . van Belle
Finaly i did found the problem. In the end i did add the ldap ldap://etc/postfix/zarafa-ads-*-aliases.cf in the aliases_map and all the redirects in the virtual_alias_maps and now i did some testing with an e-mail address, .. which did not have any typos in the email adres in ldap. that

SSL Renegotiation Attack Disabling reneotiation

2015-08-18 Thread Abid Hussain
Dear All, I am using postfix 2.6 and currently cannot upgrade it. kindly advise how renegotiation can be disabled completely. Probably a command in configuration file. regards, Abid -- View this message in context:

FW: SSL Renegotiation Attack Disabling reneotiation

2015-08-18 Thread L . P . H . van Belle
Hai, As far as i know, no. Unless you are forceing all clients to use SSLv2 only (since that doesn't support renegotiation). Are you sure you want to disable it and not just prevent old clients from using the vulnerable renegotiation methods? If it's the last you'll need to upgrade to 2.8+

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Tom Browder
On Sun, Aug 16, 2015 at 3:36 PM, @lbutlr krem...@kreme.com wrote: On 16 Aug 2015, at 10:44 , Tom Browder tom.brow...@gmail.com wrote: Okay, then I guess I should pick one of the virtual hosts as the domain name and add some arbitrary host then. Does that mean it is then a real server and

RE: Folder permissions problem, /var/spool/postfix/private

2015-08-18 Thread L . P . H . van Belle
for the policy-spf, check this one. https://bananasfk.wordpress.com/2015/06/05/policyd-spf-in-debian-8-fix/ Greetz, Louis -Oorspronkelijk bericht- Van: robert.sen...@lists.microscopium.de [mailto:owner-postfix-us...@postfix.org] Namens Robert Senger Verzonden: dinsdag 18 augustus

Re: Folder permissions problem, /var/spool/postfix/private

2015-08-18 Thread Wietse Venema
Wietse Venema: Robert Senger: Hi all, I just upgraded a server from Debian Wheezy to Jessie, and moved the system partition to a new, bigger harddisk. Now I am having trouble with the permissions of the /var/spool/postfix/private folder. To fix Postfix file permissions: # postfix

Folder permissions problem, /var/spool/postfix/private

2015-08-18 Thread Robert Senger
Hi all, I just upgraded a server from Debian Wheezy to Jessie, and moved the system partition to a new, bigger harddisk. Now I am having trouble with the permissions of the /var/spool/postfix/private folder. As far as I can see all folder permissions throughout the whole system are the same as

Re: Folder permissions problem, /var/spool/postfix/private

2015-08-18 Thread Wietse Venema
Robert Senger: Hi all, I just upgraded a server from Debian Wheezy to Jessie, and moved the system partition to a new, bigger harddisk. Now I am having trouble with the permissions of the /var/spool/postfix/private folder. To fix Postfix file permissions: # postfix set-permissions If that

Re: pcre matching

2015-08-18 Thread Bill Cole
On 18 Aug 2015, at 11:43, Nicolás wrote: If you plan blocking incoming e-mails based on the From header, probably check_sender_access is more suitable in this case: This is incorrect. check_sender_access does not operate on any header, it operates on the SMTP envelope sender address.

program to read all email-adresses from ms-exchange and novell-groupwise

2015-08-18 Thread Oliver Meißner
Hello, I just want to inform you about a program that is able to read all email-adresses from MS-Exchange or Novell Groupwise and creates Postfix lookup tables with those results. (it uses the LDAP protocol, so it's easy to implement other ldap-based backends) It creates following mapfiles:

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Tom Browder
On Sun, Aug 16, 2015 at 12:23 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Sun, Aug 16, 2015 at 11:44:03AM -0500, Tom Browder wrote: Okay, then I guess I should pick one of the virtual hosts as the domain name and add some arbitrary host then. Does that mean it is then a real

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Tom Browder
On Tue, Aug 18, 2015 at 4:22 PM, Jim Reid j...@rfc1035.com wrote: On 18 Aug 2015, at 22:06, Tom Browder tom.brow...@gmail.com wrote: Okay, I assume then that this should be the only PTR record: 4.3.2.1.in-addr.arpa. IN PTR B.tld. Yes. Provided of course B.tld is The One True Hostname for

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Jim Reid
On 18 Aug 2015, at 22:06, Tom Browder tom.brow...@gmail.com wrote: Okay, I assume then that this should be the only PTR record: 4.3.2.1.in-addr.arpa. IN PTR B.tld. Yes. Provided of course B.tld is The One True Hostname for your server. BTW, you will get on a lot better if your postings

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Stephen Satchell
On 08/18/2015 06:49 AM, Koko Wijatmoko wrote: On Tue, 18 Aug 2015 07:55:00 -0500 Tom Browder tom.brow...@gmail.com wrote: So how should the DNS records look? Can anyone give me the exact settings for the A, CNAME, MX, and PTR records for A.tld and B.tld (and any other suggested records)?

RE: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread L . P . H . van Belle
Hai, ... its all about correct DNS settings, so dont say that does not matter.. Best is you read : rfc2821 section-3.6 and 4.1.1.1 ( and 10.3 thank you Michael good read, i forgot that one.. ) rfc5321 section 2.3.5 in short.. make sure your hostname has an A or record and PTR

pcre matching

2015-08-18 Thread Alex
Hi, I'm trying to match a pattern in a header_checks pcre file and can't figure out why it's not matching. In /etc/postfix/header_checks.pcre, I have: /^From:.*exampleuser@gmail\.com$/ REJECT # postmap -q 'exampleuser' pcre:/etc/postfix/header_checks.pcre # postconf -m shows pcre among the

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Koko Wijatmoko
On Tue, 18 Aug 2015 07:55:00 -0500 Tom Browder tom.brow...@gmail.com wrote: So how should the DNS records look? Can anyone give me the exact settings for the A, CNAME, MX, and PTR records for A.tld and B.tld (and any other suggested records)? this is not the best question on this list.

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Ron Wheeler
This is pretty common. The DNS does not matter all that much as long as people can find the MX server for each domain. The MX record has to point to an A or CNAME that maps to the actual machine where your main service (Postfix) runs. The A or CNAME can be in a different domain as long as that

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Michael Ströder
Ron Wheeler wrote: The MX record has to point to an A or CNAME that maps to the actual machine where your main service (Postfix) runs. IIRC the MX should not point to a CNAME as target host to make proper loop detection work. Or am I wrong? See https://tools.ietf.org/html/rfc5321#section-5.1:

Re: pcre matching

2015-08-18 Thread nicolas
El 2015-08-18 17:33, Alex escribió: Hi, If that is the preferred method, what is the real purpose of header_checks? Solely for Subject and To? Even more useful than checking the Subject, I use header_checks to check some properties on attachments. In fact, I've picked Wietse's example on

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Tom Browder
On Tue, Aug 18, 2015 at 3:58 PM, Jim Reid j...@rfc1035.com wrote: On 18 Aug 2015, at 21:55, Tom Browder tom.brow...@gmail.com wrote: Okay, now assuming my server IP address is 1.2.3.4, do the following DNS records appear reasonable? No. There should be just one PTR record for an IP address.

Re: Postfix and Mailman 2 virtual alias domain integration

2015-08-18 Thread Jim Reid
On 18 Aug 2015, at 21:55, Tom Browder tom.brow...@gmail.com wrote: Okay, now assuming my server IP address is 1.2.3.4, do the following DNS records appear reasonable? No. There should be just one PTR record for an IP address.

Re: pcre matching

2015-08-18 Thread nicolas
El 2015-08-18 16:15, Alex escribió: Hi, I'm trying to match a pattern in a header_checks pcre file and can't figure out why it's not matching. In /etc/postfix/header_checks.pcre, I have: /^From:.*exampleuser@gmail\.com$/ REJECT # postmap -q 'exampleuser' pcre:/etc/postfix/header_checks.pcre #

Re: pcre matching

2015-08-18 Thread Wolfgang Zeikat
- On 18 Aug, 2015, at 17:15, Alex mysqlstud...@gmail.com wrote: I'm trying to match a pattern in a header_checks pcre file and can't figure out why it's not matching. In /etc/postfix/header_checks.pcre, I have: /^From:.*exampleuser@gmail\.com$/ REJECT That regular expression matches

Re: pcre matching

2015-08-18 Thread Nicolás
El 18/08/15 a las 16:15, Alex escribió: Hi, I'm trying to match a pattern in a header_checks pcre file and can't figure out why it's not matching. In /etc/postfix/header_checks.pcre, I have: /^From:.*exampleuser@gmail\.com$/ REJECT # postmap -q 'exampleuser'