Re: TCP wrappers and Postfix

2021-02-15 Thread Wietse Venema
Viktor Dukhovni: > > On Feb 15, 2021, at 9:57 PM, Wietse Venema wrote: > > > > I just verified that TLS works when running "sendmail -bs" as user > > 'postfix' from inetd. But I agree that this mode of operation is > > suitable only for extraordinary cases. > > How was the SMTP server able to lo

Re: TCP wrappers and Postfix

2021-02-15 Thread Bob Proulx
Michael Orlitzky wrote: > Eugene Podshivalov wrote: > > Generic approach to system administration and access control > > reconfiguration at runtime (without service reload). > > If you want something more generic than what's already in postfix, the > next level up is probably iptables. +1. I agr

Re: TCP wrappers and Postfix

2021-02-15 Thread Viktor Dukhovni
> On Feb 15, 2021, at 9:57 PM, Wietse Venema wrote: > > I just verified that TLS works when running "sendmail -bs" as user > 'postfix' from inetd. But I agree that this mode of operation is > suitable only for extraordinary cases. How was the SMTP server able to load the certificate chain? The

Re: TCP wrappers and Postfix

2021-02-15 Thread Michael Orlitzky
On Tue, 2021-02-16 at 01:51 +0300, Eugene Podshivalov wrote: > Generic approach to system administration and access control > reconfiguration at runtime (without service reload). > If you want something more generic than what's already in postfix, the next level up is probably iptables.

Re: TCP wrappers and Postfix

2021-02-15 Thread Wietse Venema
Viktor Dukhovni: > > On Feb 15, 2021, at 9:03 PM, Wietse Venema wrote: > > > >> Is it by chance possible that tcp wrappers will be supported in future at > >> least as an optionally compiled feature? > > > > If you must, you can run "/usr/sbin/sendmail -bs" as user "postfix" > > under TCP Wrappe

Re: TCP wrappers and Postfix

2021-02-15 Thread Viktor Dukhovni
> On Feb 15, 2021, at 8:51 PM, Eugene Podshivalov wrote: > > Generic approach to system administration and access control reconfiguration > at runtime (without service reload). If your max_idle and max_use are not too high, Postfix does not need to be "reloaded" to detect changes in main.cf. Ea

Re: TCP wrappers and Postfix

2021-02-15 Thread Viktor Dukhovni
> On Feb 15, 2021, at 9:03 PM, Wietse Venema wrote: > >> Is it by chance possible that tcp wrappers will be supported in future at >> least as an optionally compiled feature? > > If you must, you can run "/usr/sbin/sendmail -bs" as user "postfix" > under TCP Wrappers from inetd. Please don't re

Re: TCP wrappers and Postfix

2021-02-15 Thread Wietse Venema
Eugene Podshivalov: > Is it by chance possible that tcp wrappers will be supported in future at > least as an optionally compiled feature? If you must, you can run "/usr/sbin/sendmail -bs" as user "postfix" under TCP Wrappers from inetd. I prefer to spend my limited development cycles on things t

Re: TCP wrappers and Postfix

2021-02-15 Thread Eugene Podshivalov
Generic approach to system administration and access control reconfiguration at runtime (without service reload). вт, 16 февр. 2021 г. в 01:24, Bob Proulx : > Eugene Podshivalov wrote: > > Is it by chance possible that tcp wrappers will be supported in future at > > least as an optionally compile

Re: TCP wrappers and Postfix

2021-02-15 Thread Bob Proulx
Eugene Podshivalov wrote: > Is it by chance possible that tcp wrappers will be supported in future at > least as an optionally compiled feature? One can't say something will never happen. But why would it be needed? As others have said Postfix already supports all of the same feature set but in

Re: TCP wrappers and Postfix

2021-02-15 Thread Eugene Podshivalov
Is it by chance possible that tcp wrappers will be supported in future at least as an optionally compiled feature? пн, 8 февр. 2021 г. в 23:00, Eugene Podshivalov : > Thanks, Noel! Your comments are helpful indeed. > > пн, 8 февр. 2021 г. в 22:37, Noel Jones : > >> >> On 2/8/2021 11:45 AM, Eugene