Re: need help with setting LDAP search domains

2017-03-30 Thread Viktor Dukhovni
> On Mar 30, 2017, at 8:36 PM, pandorasbox55 wrote: > > From what I have read, setting the /domain/ in the LDAP table should be what > I need That's correct. With "domain" set, only lookup keys of the form "u...@example.com" where "example.com" is listed in the

Re: problem with protection.outlook.com released spam getting bounced

2017-03-30 Thread John Stoffel
> "Noel" == Noel Jones writes: Noel> On 3/30/2017 9:26 AM, John Stoffel wrote: >> >> Hi all, >> >> We're running postfix-2.6.6-6.el6_5.x86_64 on RHEL 6.6 and running >> into a problem where emails that have been released from our outside >> spam protection company,

need help with setting LDAP search domains

2017-03-30 Thread pandorasbox55
Hi - I have set up LDAP search queries for delivering mail. The queries appear to be working correctly however, when checking the LDAP logs I am seeing queries for any domain that mail is sent. (In the logs, it also appears that the queries are being re-run, after the completion of a successful

Re: problem with protection.outlook.com released spam getting bounced

2017-03-30 Thread John Stoffel
> "Wietse" == Wietse Venema writes: Wietse> Postfix reports this error because it is responsible for 'example.com' Wietse> and the message has 'Delivered-To: u...@example.com'. Thank you for your reply! And thank you for postfix in general, it's made my life simpler

Re: problem with protection.outlook.com released spam getting bounced

2017-03-30 Thread Noel Jones
On 3/30/2017 9:26 AM, John Stoffel wrote: > > Hi all, > > We're running postfix-2.6.6-6.el6_5.x86_64 on RHEL 6.6 and running > into a problem where emails that have been released from our outside > spam protection company, *.protection.outlook.com, are getting > rejected with messages like this:

Re: problem with protection.outlook.com released spam getting bounced

2017-03-30 Thread Wietse Venema
Postfix reports this error because it is responsible for 'example.com' and the message has 'Delivered-To: u...@example.com'. There are several options: 1) Your error. Your system is sending mail out after adding the 'Delivered-To: u...@example.com' header, and it comes back from outlook.com. If

Re: problem with protection.outlook.com released spam getting bounced

2017-03-30 Thread John Stoffel
> "Dominic" == Dominic Raferd writes: Dominic> On 30 March 2017 at 15:26, John Stoffel wrote: Dominic> Hi all, Dominic> We're running postfix-2.6.6-6.el6_5.x86_64 on RHEL 6.6 and running Dominic> into a problem where emails that have

Re: message_size_limit - how to configure on multiple instances ?

2017-03-30 Thread Viktor Dukhovni
> On Mar 30, 2017, at 12:35 PM, Zalezny Niezalezny > wrote: > > # postconf -d | grep message The "postconf -d" command returns compiled-in defaults. For your actual settings, try "postconf", either with no options or as "postconf -n" for just non-default

Re: message_size_limit - how to configure on multiple instances ?

2017-03-30 Thread Wietse Venema
postconf -c /path/to/config/dir message_size_limit

Re: need little help with DKIM, if possible.

2017-03-30 Thread Viktor Dukhovni
> On Mar 30, 2017, at 12:35 PM, Dominic Raferd wrote: > > As I understand it, ​DKIM requires a separate DNS record for each subdomain No, DKIM has no such requirement. The DKIM signing domain "d=" in the DKIM signature header is not constrained to match the domain in

Re: need little help with DKIM, if possible.

2017-03-30 Thread Dominic Raferd
​​ On 30 March 2017 at 16:19, Fazzina, Angelo wrote: > Thank you Dominic, > > > > I think I am starting to confuse the 2 sides of the coin and wanted > clarification. > > > > If I setup DKIM, it is to be used by whom ? > > Is it for anyone including my own domain,

message_size_limit - how to configure on multiple instances ?

2017-03-30 Thread Zalezny Niezalezny
Hi, I have a serious Problem. On my server I have 2 postfix instances. On the master instance I have changed message size limit from 10Mb to 30Mb. Unfortuantely postconf shows still 10MB. How may I change this? Postfix instances on my server: [root@unixserver5 opt]# postmulti -l -

Broken opportunistic TLS senders (was: Another yahoo problem)

2017-03-30 Thread Viktor Dukhovni
On Thu, Mar 30, 2017 at 02:54:09PM +0200, Benny Pedersen wrote: > Levente Birta skrev den 2017-03-30 14:27: > > > Mar 30 13:48:16 wsrv postfix/tlsproxy[34871]: CONNECT from > > [98.137.64.231]:33591 > > Mar 30 13:48:16 wsrv postfix/tlsproxy[34871]: warning: TLS library > > problem:

Re: Another yahoo problem

2017-03-30 Thread chaouche yacine
On Thursday, March 30, 2017 4:09 PM, "li...@lazygranch.com" wrote: >Perhaps sslv3 related. >http://disablessl3.com/ Thanks for the valuable link. -- Yassine.

Re: need little help with DKIM, if possible.

2017-03-30 Thread P.V.Anthony
On 30/03/2017 23:19, Fazzina, Angelo wrote: If I setup DKIM, it is to be used by whom ? Is it for anyone including my own domain, when an @uconn.edu email is received, it is to be checked ? A. Does my DKIM entry in DNS help with sending from x...@example.com to

Re: problem with protection.outlook.com released spam getting bounced

2017-03-30 Thread Dominic Raferd
On 30 March 2017 at 15:26, John Stoffel wrote: > > Hi all, > > We're running postfix-2.6.6-6.el6_5.x86_64 on RHEL 6.6 and running > into a problem where emails that have been released from our outside > spam protection company, *.protection.outlook.com, are getting > rejected

Re: No milters have been used at around midnight

2017-03-30 Thread Viktor Dukhovni
> On Mar 30, 2017, at 11:15 AM, Christian Rößner > wrote: > > It is a VM, but the host uses ECC-RAM. No errors were reported to the kernel > message buffer. Is it possible that some log messages were lost when the log socket got re-created as part of

RE: need little help with DKIM, if possible.

2017-03-30 Thread Fazzina, Angelo
Thank you Dominic, I think I am starting to confuse the 2 sides of the coin and wanted clarification. If I setup DKIM, it is to be used by whom ? Is it for anyone including my own domain, when an @uconn.edu email is received, it is to be checked ? A. Does my DKIM entry in DNS help with

Re: No milters have been used at around midnight

2017-03-30 Thread Christian Rößner
> Am 30.03.2017 um 16:00 schrieb Wietse Venema : > > Nothing was changed, but something stopped working. Do you have ECC > memory enabled? It is a VM, but the host uses ECC-RAM. No errors were reported to the kernel message buffer. Christian -- Erlenwiese 14, 36304

Re: Another yahoo problem

2017-03-30 Thread lists
Perhaps sslv3 related. http://disablessl3.com/   Original Message   From: Levente Birta Sent: Thursday, March 30, 2017 5:28 AM To: Postfix users Subject: Another yahoo problem Hi I have a problem with getting mails from yahoo, only from yahoo but now from all servers. here is the log: Mar 30

problem with protection.outlook.com released spam getting bounced

2017-03-30 Thread John Stoffel
Hi all, We're running postfix-2.6.6-6.el6_5.x86_64 on RHEL 6.6 and running into a problem where emails that have been released from our outside spam protection company, *.protection.outlook.com, are getting rejected with messages like this: Mar 26 06:00:56 mailhost postfix/smtpd[2270]:

Re: Queue ID availability for milters on multi-message connections/sessions?

2017-03-30 Thread Kris Deugau
Wietse Venema wrote: Below are the SMTP commands/responses, and the test-milter output showing that the second "DATA" event is reported with the correct queue ID. OK, thanks! I'll take it up further with the milter authors. -kgd

Re: No milters have been used at around midnight

2017-03-30 Thread Wietse Venema
Nothing was changed, but something stopped working. Do you have ECC memory enabled? Wietse

Re: Another yahoo problem

2017-03-30 Thread Benny Pedersen
Levente Birta skrev den 2017-03-30 14:27: Mar 30 13:48:16 wsrv postfix/tlsproxy[34871]: CONNECT from [98.137.64.231]:33591 Mar 30 13:48:16 wsrv postfix/tlsproxy[34871]: warning: TLS library problem: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1275:SSL

Another yahoo problem

2017-03-30 Thread Levente Birta
Hi I have a problem with getting mails from yahoo, only from yahoo but now from all servers. here is the log: Mar 30 13:48:16 wsrv postfix/tlsproxy[34871]: CONNECT from [98.137.64.231]:33591 Mar 30 13:48:16 wsrv postfix/tlsproxy[34871]: warning: TLS library problem: error:14094416:SSL

Re: Postfix cannot start tls: handshake failure

2017-03-30 Thread Den1
Viktor Dukhovni wrote >> On Mar 30, 2017, at 12:03 AM, Den1 > webmaster@ > wrote: >> >>> smtp_tls_ciphers = medium >>> smtp_tls_exclude_ciphers = >>> MD5,SRP,PSK,aDSS,kECDH,kDH,SEED,IDEA,RC2,RC5,RC4 >> >> Why would you exclude these ciphers > > Because: > > * MD5 is weak, obsolete and

No milters have been used at around midnight

2017-03-30 Thread Christian Rößner
Hi, this morning I found a spam mail in my inbox, which normally should have been triggered by my spam milter. As I checked the headers, I found out that the milter service did not add any headers. I checked the logs for the QID and found out that the milter was not even requested. Further I