Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Viktor Dukhovni
> On Aug 16, 2018, at 11:03 AM, Wietse Venema wrote: > > Are you assuming that Postfix won't run unless a library with > the right SOname exists? That is definitely not safe to assume. > > It may make sense skip the warning when both versions are known to > share the same ABI. But that

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Wietse Venema
Viktor Dukhovni: > > > > On Aug 16, 2018, at 6:30 AM, A. Schulze wrote: > > > > https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_misc.c#L971 > > I am planning a patch to silence these for Postfix 3.4, and Wietse > may choose to apply the same to some or all of 3.3, 3.2,

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Gary
  Original Message   From: robac...@fastmail.us Sent: August 15, 2018 2:51 AM To: postfix-users@postfix.org Subject: Re: New to Postfix. 3 questions about security functions. Thanks alot for the comments so far! >> (1) >> >>What do folks here recommend to use? > On my curren

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread Viktor Dukhovni
> On Aug 16, 2018, at 6:30 AM, A. Schulze wrote: > > https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_misc.c#L971 I am planning a patch to silence these for Postfix 3.4, and Wietse may choose to apply the same to some or all of 3.3, 3.2, 3.1 and 3.0. -- Viktor.

Re: New to Postfix. 3 questions about security functions.

2018-08-16 Thread A. Schulze
Viktor Dukhovni: Therefore, if a system is upgraded to OpenSSL 1.1.1, Postfix will use 1.1.1 without a rebuild. but the mail log get flooded with ugly warnings: https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_misc.c#L971 I do run postfix-3.3.1 + openssl-1.1.1-pre*

Re: New to Postfix. 3 questions about security functions.

2018-08-15 Thread Viktor Dukhovni
> On Aug 15, 2018, at 8:54 AM, Bill Cole > wrote: > >> But I don't want to make the mistake of turning it on just to be current, if >> I then make it impossible to communicate with my servers. > > Typically there is no need to "turn on" TLS versions in Postfix, it is only a > matter of

Re: New to Postfix. 3 questions about security functions.

2018-08-15 Thread Viktor Dukhovni
> On Aug 15, 2018, at 5:51 AM, robac...@fastmail.us wrote: > > Back to the TESTing question. How does Postfix notify you if you do? > > Only in the error logs? Or some response that I should get as a response in > my mailer? I would set: delay_warning_time = 2h and if any mail

Re: New to Postfix. 3 questions about security functions.

2018-08-15 Thread Bill Cole
On 14 Aug 2018, at 23:05 (-0400), robac...@fastmail.us wrote: Hello, I'm starting the process of moving my mail from a hosted service to my own. It'll include a Postfix server. I got a test server running locally and 'sending & receiving' mail inside my lan. Now I'm doing my reading on

Re: New to Postfix. 3 questions about security functions.

2018-08-15 Thread Dominic Raferd
On Wed, 15 Aug 2018 at 10:52, wrote: > That 'trusteddomainproject' sounds a bit more official. Or at least > broader. But I really don't know. Seems like there aren't a lot of people > working on it. Or that bugs get the attention they need. > That is the home of opendkim and opendmarc (and

Re: New to Postfix. 3 questions about security functions.

2018-08-15 Thread robacons
Thanks alot for the comments so far! >> (1) >> >>What do folks here recommend to use? > On my current server, I skipped amavisd-new because sometimes it stalls the > mail queue. Nor do I run SpamAssassin. I'm happy just using RBLs. I'm running > opendkim, openspf, and opendmarc. > Regarding

Re: New to Postfix. 3 questions about security functions.

2018-08-15 Thread Dominic Raferd
On Wed, 15 Aug 2018 at 09:32, Gary wrote: > ... > I'm guessing you will be using a VPS. I'm on Digital Ocean running Centos. > But I assume this is a function of what country you reside in. Some > sysadmins will assume if you are on a VPS, you are a spammed. ATT for > example. They will

Re: New to Postfix. 3 questions about security functions.

2018-08-15 Thread Gary
mail queue. Nor do I run SpamAssassin. I'm happy just using RBLs. I'm running opendkim, openspf, and opendmarc.   Original Message   From: robac...@fastmail.us Sent: August 14, 2018 8:06 PM To: postfix-users@postfix.org Subject: New to Postfix. 3 questions about security functions. Hello, I'

Re: New to Postfix. 3 questions about security functions.

2018-08-14 Thread Viktor Dukhovni
> On Aug 14, 2018, at 11:53 PM, Viktor Dukhovni > wrote: > > DANE is ready for adoption, with multiple fielded implementations and many > (312 thousand inbound plus some large ones still outbound only) live domains. > > Outbound DANE is simple. Make sure you have a DNSSEC-validating

Re: New to Postfix. 3 questions about security functions.

2018-08-14 Thread Viktor Dukhovni
> On Aug 14, 2018, at 11:05 PM, robac...@fastmail.us wrote: > > (2) > > Is it time -- in the real-world -- to force STARTTLS yet? Google reports ~90% of email (volume) inbound/outbound to Gmail uses TLS. That 10% by volume is probably a larger fraction by count of destination domains.

New to Postfix. 3 questions about security functions.

2018-08-14 Thread robacons
Hello, I'm starting the process of moving my mail from a hosted service to my own. It'll include a Postfix server. I got a test server running locally and 'sending & receiving' mail inside my lan. Now I'm doing my reading on security issues, authentication, and the like. I've got stacks of

New Version Postfix

2011-04-29 Thread Ravindra Gupta // Viva
Hi Team, Please confirm the latest version of postfix.

Re: New Version Postfix

2011-04-29 Thread Reindl Harald
Am 29.04.2011 15:09, schrieb Ravindra Gupta // Viva: Hi Team, Please confirm the latest version of postfix. there is nothing to confirm the download-page says 2.8.2 http://www.postfix.org/download.html signature.asc Description: OpenPGP digital signature

Re: New Version Postfix

2011-04-29 Thread Ralf Hildebrandt
* Ravindra Gupta // Viva ravin...@vivainfomedia.com: Hi Team, Please confirm the latest version of postfix. Confirmed!

Re: New Version Postfix

2011-04-29 Thread Jerry
On Fri, 29 Apr 2011 18:39:45 +0530 Ravindra Gupta // Viva ravin...@vivainfomedia.com articulated: Hi Team, Please confirm the latest version of postfix. Hi Ravindra, Please check out: http://www.postfix.com/announcements.html While you are at it, lose the HTML posting format style. --

Re: New Version Postfix

2011-04-29 Thread Jeroen Geilman
On 04/29/2011 03:09 PM, Ravindra Gupta // Viva wrote: Hi Team, Please confirm the latest version of postfix. I'm sorry Dave, I cannot confirm that. -- J.

Re: 1st post new to postfix and fixing a server crash!

2011-03-19 Thread Sahil Tandon
On Fri, 2011-03-18 at 20:06:35 -0400, lance raymond wrote: Your right on the error, but the other part of the thread was about postfix virtual users, etc which also needed answering. Please do not top-post. I cannot see any discussion of a Postfix problem on your system. User management,

1st post new to postfix and fixing a server crash!

2011-03-18 Thread lance raymond
What a way to welcome myself to the group! But with that, the mailserver crashed (HD fail) and the backups from last night were in tact. Problem is the old os was a RH9 (I know) system, built from source, etc. The new box is staged (CentOS5), postfix installed via YUM and the config was then

Re: 1st post new to postfix and fixing a server crash!

2011-03-18 Thread Steve Jenkins
On Mar 18, 2011, at 2:50 PM, lance raymond lance.raym...@gmail.com wrote: What a way to welcome myself to the group! But with that, the mailserver crashed (HD fail) and the backups from last night were in tact. Problem is the old os was a RH9 (I know) system, built from source, etc. The

Re: 1st post new to postfix and fixing a server crash!

2011-03-18 Thread Sahil Tandon
On Fri, 2011-03-18 at 16:50:08 -0400, lance raymond wrote: What a way to welcome myself to the group! But with that, the mailserver crashed (HD fail) and the backups from last night were in tact. Problem is the old os was a RH9 (I know) system, built from source, etc. The new box is staged

Re: 1st post new to postfix and fixing a server crash!

2011-03-18 Thread lance raymond
Your right on the error, but the other part of the thread was about postfix virtual users, etc which also needed answering. On Mar 18, 2011 7:39 PM, Sahil Tandon sa...@freebsd.org wrote: On Fri, 2011-03-18 at 16:50:08 -0400, lance raymond wrote: What a way to welcome myself to the group! But

Re: new to postfix

2008-09-12 Thread Carlos Williams
On Fri, Sep 12, 2008 at 7:59 AM, David Ballano [EMAIL PROTECTED] wrote: Hello people, I'm new Here, and I have a lot of questions for you, thanks in advance :) I'm configuring a postfix 2.3 server in a debian etch, I'ts my first time so I would like to do a simple configuration. First you

Re: new to postfix

2008-09-12 Thread Алексей Доморадов
Hello people, I'm new Here, and I have a lot of questions for you, thanks in advance :) I'm configuring a postfix 2.3 server in a debian etch, I'ts my first time so I would like to do a simple configuration. I've been reading de documentation of postfix.org, believe me. That is

Re: new to postfix

2008-09-12 Thread Brian Evans - Postfix List
David Ballano wrote: Hello people, I'm new Here, and I have a lot of questions for you, thanks in advance :) I'm configuring a postfix 2.3 server in a debian etch, I'ts my first time so I would like to do a simple configuration. I've been reading de documentation of postfix.org, believe

Re: new to postfix

2008-09-12 Thread David Ballano
2008/9/12 Brian Evans - Postfix List [EMAIL PROTECTED]: David Ballano wrote: Hello people, I'm new Here, and I have a lot of questions for you, thanks in advance :) I'm configuring a postfix 2.3 server in a debian etch, I'ts my first time so I would like to do a simple configuration.