Re: systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Matt Saladna
> You could of course populate: > > /var/spool/ccerts//chain.pem Thanks, that's perfect. Each PHP pool runs as a separate user and that'd provide equivalent accountability to SO_PEERCRED. It's never worth it until you get victimized by StealRat or some other piece of malicious code that b

Re: systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Viktor Dukhovni
On Thu, Jul 23, 2020 at 07:36:01PM -0500, Matt Saladna wrote: > > Replace local submission with some IPC-based mechanism, e.g. SMTP. > > If my understanding is correct, submitting via SMTP would require > credentials then to avoid anonymity of TCP unless there's a specific > service that would

Re: systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Matt Saladna
> Replace local submission with some IPC-based mechanism, e.g. SMTP. If my understanding is correct, submitting via SMTP would require credentials then to avoid anonymity of TCP unless there's a specific service that would work over a UDS so it can pass SO_PEERCRED along to Postfix. Is there

Re: systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Viktor Dukhovni
On Thu, Jul 23, 2020 at 07:17:19PM -0500, Matt Saladna wrote: > Bit of a pickle here with systemd in CentOS 8. Certain protective > directives, such as DynamicUser= or PrivateDevices=yes implicitly sets > NoNewPrivileges=true (systemd/systemd #12476). In turn that's blocking > setgid with /usr/

systemd/NoNewPrivileges + postdrop

2020-07-23 Thread Matt Saladna
Hi all, Bit of a pickle here with systemd in CentOS 8. Certain protective directives, such as DynamicUser= or PrivateDevices=yes implicitly sets NoNewPrivileges=true (systemd/systemd #12476). In turn that's blocking setgid with /usr/sbin/postdrop. postdrop hangs indefinitely unable to send it

Connection Caching for One Transport

2020-07-23 Thread Greg Sims
> What is the best way to configure for the following message from outlook.com > in the maillog: > > said: 451 4.7.652 The mail server [] has exceeded the > maximum number of connections. > > Please note the email is being created on a VM with . > The email is then sent to our new mail server v

Re: 2 factor authentication for postfix

2020-07-23 Thread Wietse Venema
natan maciej milaszewski: > On 23.07.2020 16:41, Wietse Venema wrote: > > natan maciej milaszewski: > >> Hi > >> I am looking for a solution or some faq to running 2 factor > >> authentication for Postfix3.x > > To SEND mail? > > > > To RECEIVE mail? > Only to send mail This should be possible by

Re: Postfix failed to start at boot

2020-07-23 Thread Christian Kivalo
On July 23, 2020 2:33:04 PM GMT+02:00, Linkcheck wrote: >I have a private postfix server on my local network. It runs under >Manjaro. On booting Manjaro I get half a dozen ERROR lines as: > >FAILED: Failed to start (eg) Postfix > >All are to do with postfix, dmarc, dkim etc. > >I've wondered

Re: 2 factor authentication for postfix

2020-07-23 Thread Benny Pedersen
natan maciej milaszewski skrev den 2020-07-23 16:35: That easy in theory postfix + radius + 2fa (I found pam_google_authenticator) is a dokumented no go ?

Re: 2 factor authentication for postfix

2020-07-23 Thread natan maciej milaszewski
On 23.07.2020 16:41, Wietse Venema wrote: > natan maciej milaszewski: >> Hi >> I am looking for a solution or some faq to running 2 factor >> authentication for Postfix3.x > To SEND mail? > > To RECEIVE mail? Only to send mail

Re: 2 factor authentication for postfix

2020-07-23 Thread Wietse Venema
natan maciej milaszewski: > Hi > I am looking for a solution or some faq to running 2 factor > authentication for Postfix3.x To SEND mail? To RECEIVE mail?

Re: 2 factor authentication for postfix

2020-07-23 Thread natan maciej milaszewski
On 23.07.2020 16:31, Phil Stracchino wrote: > On 2020-07-23 09:57, natan maciej milaszewski wrote: >> Hi >> I am looking for a solution or some faq to running 2 factor >> authentication for Postfix3.x > > U. Postfix is a mail *transfer* agent. It moves mail from > system to system and de

Re: 2 factor authentication for postfix

2020-07-23 Thread Phil Stracchino
On 2020-07-23 09:57, natan maciej milaszewski wrote: > Hi > I am looking for a solution or some faq to running 2 factor > authentication for Postfix3.x U. Postfix is a mail *transfer* agent. It moves mail from system to system and delivers it to users' mailboxes. It does not provide a

2 factor authentication for postfix

2020-07-23 Thread natan maciej milaszewski
Hi I am looking for a solution or some faq to running 2 factor authentication for Postfix3.x

Re: antispam system powered by machine learning

2020-07-23 Thread Gerald Galster
>> Would you please suggest the antispam system which is powered by machine >> learning model/policy? >> I am working on ML/DL research filed and would like to know this industry >> system. > > I am not sure if this fits the requirement. I use rspamd.com. Works great for > me. > > They do have

Postfix failed to start at boot

2020-07-23 Thread Linkcheck
I have a private postfix server on my local network. It runs under Manjaro. On booting Manjaro I get half a dozen ERROR lines as: FAILED: Failed to start (eg) Postfix All are to do with postfix, dmarc, dkim etc. I've wondered for some time now why I have to start postfix manually after reboot

Using provider SMTP (Gmail)

2020-07-23 Thread Forums
Hello all. Sorry for my english I'm french. Due to some problems with my provider (using my private SMTP server prevents some emails from happening, issue with IP) I have to use an external SMTP (Gmail) as a relay. It works without issue but... When I send an email it is received with "From

Re: antispam system powered by machine learning

2020-07-23 Thread P V Anthony
On 23/7/2020 5:12 pm, Tessa Plum wrote: Would you please suggest the antispam system which is powered by machine learning model/policy? I am working on ML/DL research filed and would like to know this industry system. I am not sure if this fits the requirement. I use rspamd.com. Works grea

Re: postfix 3.5.4 centos 8 hardcoded crypto settings?

2020-07-23 Thread ratatouille
Leonardo Rodrigues schrieb am 21.07.20 um 08:44:21 Uhr: > Em 20/07/2020 22:44, Viktor Dukhovni escreveu: > > If CentOS 8 requires a default floor of TLS 1.2, and have not patched > > Postfix to relax that system-default constraint, then you're stuck > > with TLS >= 1.2 until a suitable work-arou

antispam system powered by machine learning

2020-07-23 Thread Tessa Plum
Hello, Would you please suggest the antispam system which is powered by machine learning model/policy? I am working on ML/DL research filed and would like to know this industry system. Thank you. -- Tessa Plum https://plum.ovh/