Re: TLS library problem after updating openssl

2012-04-22 Thread Julien Vehent
-starttls smtp -tls1_2 openssl s_client -connect server:25 -starttls smtp -tls1_1 openssl s_client -connect server:25 -starttls smtp -tls1 openssl s_client -connect server:25 -starttls smtp -ssl3 -- Julien Vehent - http://1nw.eu/!j

Re: some postscreen(8) stats

2012-04-21 Thread Julien Vehent
On 2012-04-01 1:11, Sahil Tandon wrote: Before enabling DNSBL blocklists on one site, I was tasked with gathering some postscreen(8) statistics. I liked the information display in a previous thread[1], but did not require the geoIP and mapping features in Julien Vehent's script. So, I cobbled

Re: Postscreen statistics gathering

2012-01-15 Thread Julien Vehent
/Postscreen-Stats - Julien -- Julien Vehent - http://1nw.eu/!j

Re: Postscreen statistics gathering

2011-11-06 Thread Julien Vehent
On 06.11.2011 17:54, Wietse Venema wrote: Julien Vehent: Also for this last query, it looks like 65% of the IPs cannot be linked to a country (XX = unknown). I'm not very familiar with the way geo-ip databases gather their data, is that normal numbers for zombies ? This is not my experience

Bypass of alias lookup when using submission port 587

2011-02-04 Thread Julien Vehent
Hi Postfix list, I'm having a bit of a problem with aliases and receiving emails on the submission port. I have a list of aliases in /etc/aliases, such as -- root: michel, kevin, julien -- I run postalias /etc/aliases and obtain a proper db file -- # ls -l /etc/aliases*

Re: Postfix, POP/IMAP server, virtual users, web administration - what do you use?

2010-09-27 Thread Julien Vehent
On Mon, 27 Sep 2010 13:06:46 +0200, David Touzeau da...@touzeau.eu wrote: You can use Artica http://www.artica.fr It is an Open Source web console for Postfix/Spamassassin/Amavis/Milter-greylist ... and cyrus-imap/pop3 with an LDAP backend system. Quoting the website: Do not

Re: Postfix, POP/IMAP server, virtual users, web administration - what do you use?

2010-09-27 Thread Julien Vehent
On Tue, 28 Sep 2010 00:29:46 +0200, Tomasz Chmielewski man...@wpkg.org wrote: On 28.09.2010 00:15, mouss wrote: I'm interested in this topic also, if anybody knows an interface that just doesn't break manual configuration, I'm in ! is there really a need for a UI to manage postfix? If so,

Re: Postfix, SASL and LDAPDB [definitely solved]

2010-05-28 Thread Julien Vehent
On Mon, 24 May 2010 16:43:18 -0400, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Mon, May 24, 2010 at 09:18:44PM +0200, Julien Vehent wrote: === case 2: authentification succeeds === Same authz-regex in slapd, same smtpclient command, I just

Re: Postfix, SASL and LDAPDB

2010-05-24 Thread Julien Vehent
On Fri, 21 May 2010 13:12:08 +0200, Julien Vehent jul...@linuxwall.info wrote: I re-read the SASL howto and I'm quite confinced that my configuration is fine (but once again, you're never a 100% sure). Any idea ? I found something interesting in the Slapd logs. When Postfix sends

Re: Postfix, SASL and LDAPDB [definitely solved]

2010-05-24 Thread Julien Vehent
Final solution provided by the Openldap mailing list: Just change your authz-regexp line to authz-regexp ^uid=([^,]+).*,cn=[^,]*,cn=auth$ ldap:///dc=linuxwall,dc=info??sub?(|(uid=$1)(mail=$1)) And the authentication works. I think it's worth a line in the sasl howto to

Re: Postfix, SASL and LDAPDB [definitely solved]

2010-05-24 Thread Julien Vehent
On Mon, 24 May 2010 14:04:45 -0400, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Mon, May 24, 2010 at 07:30:56PM +0200, Julien Vehent wrote: Final solution provided by the Openldap mailing list: Just change your authz-regexp line to authz-regexp ^uid=([^,]+).*,cn

Re: Postfix, SASL and LDAPDB

2010-05-21 Thread Julien Vehent
On Thu, 20 May 2010 18:46:34 +0200, Julien Vehent jul...@linuxwall.info wrote: Like most of the time, I discover that I've been too hasty to answer ! Postfix IS chrooted on Debian by default. At least, smtpd is. And by removing the chroot in master.conf, I can now see that DIGEST-MD5

Re: Postfix, SASL and LDAPDB

2010-05-20 Thread Julien Vehent
-R linuxwall.info -X u:julien SASL/DIGEST-MD5 authentication started Please enter your password: SASL username: u:julien SASL SSF: 128 SASL data security layer installed. dn:cn=julien vehent,ou=people,dc=linuxwall,dc=info Is your SMTP server chrooted? Have you configured a non-default

Re: Postfix, SASL and LDAPDB

2010-05-20 Thread Julien Vehent
20 11:38:10 samchiel slapd[1431]: conn=53 op=2 PROXYAUTHZ dn=cn=julien vehent,ou=people,dc=linuxwall,dc=info May 20 11:38:10 samchiel slapd[1431]: conn=53 op=2 EXT oid=1.3.6.1.4.1.4203.1.11.3 May 20 11:38:10 samchiel slapd[1431]: conn=53 op=2 WHOAMI May 20 11:38:10 samchiel slapd[1431]: conn=53 op

Re: Postfix, SASL and LDAPDB [solved]

2010-05-20 Thread Julien Vehent
Like most of the time, I discover that I've been too hasty to answer ! Postfix IS chrooted on Debian by default. At least, smtpd is. And by removing the chroot in master.conf, I can now see that DIGEST-MD5 is negociated with Slapd. (it still doesn't work though...) - May 20 18:32:13 samchiel

Re: Postfix, SASL and LDAPDB

2010-05-19 Thread Julien Vehent
On Tue, 18 May 2010 13:54:51 -0400, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Tue, May 18, 2010 at 07:47:12PM +0200, Julien Vehent wrote: 1.Your Postfix is not directly linked with LDAP at all, it looks like you are on a Debian system, and the LDAP table driver

Re: Postfix, SASL and LDAPDB

2010-05-19 Thread Julien Vehent
On Wed, 19 May 2010 14:36:24 -0400, Victor Duchovni victor.ducho...@morganstanley.com wrote: This looks different from my recollection of the the smtpd.conf you posted, you may want to make sure that the sasl_ldapdb_id and passwords are the same, and I don't know what auto_transition does,

Postfix, SASL and LDAPDB

2010-05-18 Thread Julien Vehent
Hey guys, I want to set up SASL authentication using LDAPDB, but it seems that postfix connects to LDAP but doesn't send anything to it... I try to authenticate using 'auth plain base64', and I receive : 535 5.7.8 Error: authentication failed: authentication failure Connection to LDAP works

Re: Postfix, SASL and LDAPDB

2010-05-18 Thread Julien Vehent
On Tue, 18 May 2010 12:37:47 -0400, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Tue, May 18, 2010 at 05:44:43PM +0200, Julien Vehent wrote: I want to set up SASL authentication using LDAPDB, but it seems that postfix connects to LDAP but doesn't send anything to it... I try

Re: OT: The Book of Postfix

2010-01-27 Thread Julien Vehent
On Wed, 27 Jan 2010 19:29:17 +0100, Patrick Ben Koetter p...@state-of-mind.de wrote: * JORGE CARMINATI jcarmin...@pluspetrol.net: Hi! I just want to know if the authors of this book are planning to release an updated revision with erratas fixes, etc and when (if applies). Thanks in advance.

smtp library in C

2010-01-25 Thread Julien Vehent
Hello Postfix folks, This question doesn't concern postfix directly, but since many of you are developpers... I would like to experiment a bit with writing a module for postfix, in C (not perl or python), and I'm looking for a SMTP and a MIME library. I would like postfix to submit emails to

Re: Server-side mail filtering (postfix+cyrus-imap)

2009-11-13 Thread Julien Vehent
Can you send the result of grep sieve /etc/imapd.conf, I wonder if your sieve configuration in /etc/imapd.conf is correct... maybe the path of sievedir leads to a directory that's not writable... On Fri, 13 Nov 2009 13:30:23 +0100, nunatarsuaq nunatars...@gmail.com wrote: Same thing. I logged

Re: Server-side mail filtering (postfix+cyrus-imap)

2009-11-10 Thread Julien Vehent
On 11/10/2009 02:35 PM, Eero Volotinen wrote: nunatarsuaq wrote: Anybody knows how to set up server-side filtering using Sieve? My server is running openSuse with postfix and cyrus-imap. I guess both of them have to be somehow configured to use Sieve as a filter. I need to move all messages

Re: how can I search this mailing list

2009-08-26 Thread Julien Vehent
On Wed, 26 Aug 2009 15:08:15 +0300, Hilel New hile...@gmail.com wrote: how can I search all the archives of this mailing list for some key work or expression? Why not asking google ? Use the following site command with your keywords site:http://archives.neohapsis.com/archives/postfix/ SEARCH

Re: Forwarding to two servers

2009-08-26 Thread Julien Vehent
Michael Orlitzky wrote: Jie Wang wrote: Hello everyone, Here is my question: I use Postfix as a SMTP gateway, and need to forward each email to two mail servers with the same domain names but different IP addresses. More specifically, I have two email servers, with ip_address_1 and

Non deterministic usage of STARTTLS

2009-08-24 Thread Julien Vehent
Hello guys, This is my first email on the list, so I hope it doesn't break any rule :) I've been playing around with my postfix logs to evaluate the percentage of MTA that are using STARTTLS when sending me emails. The result is pretty interesting, because some MTA are using TLS, but not all

Re: Non deterministic usage of STARTTLS

2009-08-24 Thread Julien Vehent
On Mon, 24 Aug 2009 10:33:31 -0500, Noel Jones njo...@megan.vbhcs.org wrote: On 8/24/2009 9:51 AM, Julien Vehent wrote: Hello guys, This is my first email on the list, so I hope it doesn't break any rule :) I've been playing around with my postfix logs to evaluate the percentage of MTA

Re: Non deterministic usage of STARTTLS

2009-08-24 Thread Julien Vehent
Wietse Venema wrote: Noel Jones: -- Aug 22 07:52:12 zerhuel postfix/smtpd[2109]: initializing the server-side TLS engine This is logged ONCE when a postfix/smtpd process starts up. Then, it handles one or more SMTP clients. So, 'initializing the server-side TLS engine' is logged only