Re: PATCH: saslauthd show remote ip address

2016-01-09 Thread Wietse Venema
Quanah Gibson-Mount: > Amavis passes it back to Postfix on port 25, and boom, the sasl bits are > called, even though no auth is involved. If you know that an SMTP daemon will not receive AUTH commands, disable SASL in master.cf, with "-o smtpd_sasl_auth_enable=no". Wietse

Re: PATCH: saslauthd show remote ip address

2016-01-09 Thread Quanah Gibson-Mount
--On Saturday, January 09, 2016 9:06 AM -0500 Wietse Venema wrote: Quanah Gibson-Mount: Amavis passes it back to Postfix on port 25, and boom, the sasl bits are called, even though no auth is involved. If you know that an SMTP daemon will not receive AUTH commands,

Re: Cert hostname does not verify...

2016-01-09 Thread Dennis Steinkamp
Thanks viktor for providing more information. Am 09.01.2016 um 19:14 schrieb Viktor Dukhovni: On Sat, Jan 09, 2016 at 10:56:40AM -0500, Wietse Venema wrote: Is CheckTLS.com just insisting that the CN of the certificate should match the mx record of the mail domain in question or is this

Re: Cert hostname does not verify...

2016-01-09 Thread Viktor Dukhovni
On Sat, Jan 09, 2016 at 10:56:40AM -0500, Wietse Venema wrote: > > Is CheckTLS.com just insisting that the CN of the certificate should > > match the mx record of the mail domain in question or is this genereally > > expected? > > Regardless of what CheckTLS.com says, what is the server name

Re: Duplicate email issue with opendkim milter

2016-01-09 Thread Viktor Dukhovni
On Fri, Jan 08, 2016 at 03:08:33PM -0800, Quanah Gibson-Mount wrote: > >I usually solve this differently. I avoid self-referential > >expansions! > > > >virtual: > > use...@example.com > > use...@mailstore-name.example.com, > >

Cert hostname does not verify...

2016-01-09 Thread Dennis Steinkamp
Hi, another weekend and another chance to spend a little bit of time with postifx. :) Today i tried to get tls to work and there is one thing (again) that i probably didn`t do right, or is at least confusing to me. Lets assume the FQDN of the server postfix is installed on is,

Re: Cert hostname does not verify...

2016-01-09 Thread Wietse Venema
Dennis Steinkamp: > Hi, > > another weekend and another chance to spend a little bit of time with > postifx. :) > Today i tried to get tls to work and there is one thing (again) that i > probably didn`t do right, or is at least confusing to me. > > Lets assume the FQDN of the server postfix is

Re: Cert hostname does not verify...

2016-01-09 Thread Dennis Steinkamp
Thank you for clarifying this up Wietse. Have a nice weekend. Am 09.01.2016 um 16:56 schrieb Wietse Venema: Dennis Steinkamp: Hi, another weekend and another chance to spend a little bit of time with postifx. :) Today i tried to get tls to work and there is one thing (again) that i probably

Re: PATCH: saslauthd show remote ip address

2016-01-09 Thread Wietse Venema
Quanah Gibson-Mount: > --On Saturday, January 09, 2016 9:06 AM -0500 Wietse Venema > wrote: > > > Quanah Gibson-Mount: > >> Amavis passes it back to Postfix on port 25, and boom, the sasl bits are > >> called, even though no auth is involved. > > > > If you know that an