Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-09 Thread Benning, Markus
On 2016-03-03 08:12, Eero Volotinen wrote: Can some one give working migation intructions for postfix 2.3 (postfix-2.3.3-7.el5) many of instructions are not working correctly on so old version. (as settings are not supported) Just install the RHSA errata:

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-08 Thread Blake Hudson
Eero Volotinen wrote on 3/3/2016 1:12 AM: Hi, Can some one give working migation intructions for postfix 2.3 (postfix-2.3.3-7.el5) many of instructions are not working correctly on so old version. (as settings are not supported) thanks, -- Eero Eero, I believe you simply need to apply the

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-08 Thread Eero Volotinen
Well. 'You need to use sendmail' :) Maybe I just need to download postfix.src.rpm and rpmbuild --rebuild. Eero 2016-03-08 19:11 GMT+02:00 /dev/rob0 : > > 2016-03-08 18:55 GMT+02:00 Viktor Dukhovni : > > > > > On Tue, Mar 08, 2016 at 06:48:11PM +0200,

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-08 Thread /dev/rob0
> 2016-03-08 18:55 GMT+02:00 Viktor Dukhovni : > > > On Tue, Mar 08, 2016 at 06:48:11PM +0200, Eero Volotinen wrote: > > > > > Err. Is there patch to disable sslv2 in postfix 2.3 ? > > > > No. The supported Postfix releases are at this time 2.10, 2.11, > > 3.0 and

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-08 Thread Viktor Dukhovni
On Tue, Mar 08, 2016 at 07:00:09PM +0200, Eero Volotinen wrote: > Err. I am using RHEL 5 that is still supported, but there is no way to > disable sslv2 in postfix.. really insane support policy in RHEL 5? I'm sure RedHat can backport appropriate fixes to Postfix, OpenSSL or both as they see

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-08 Thread Eero Volotinen
Err. I am using RHEL 5 that is still supported, but there is no way to disable sslv2 in postfix.. really insane support policy in RHEL 5? Eero 2016-03-08 18:55 GMT+02:00 Viktor Dukhovni : > On Tue, Mar 08, 2016 at 06:48:11PM +0200, Eero Volotinen wrote: > > > Err. Is

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-08 Thread Viktor Dukhovni
On Tue, Mar 08, 2016 at 06:48:11PM +0200, Eero Volotinen wrote: > Err. Is there patch to disable sslv2 in postfix 2.3 ? No. The supported Postfix releases are at this time 2.10, 2.11, 3.0 and 3.1. Since the underlying issue is in OpenSSL, instead disable SSLv2 in OpenSSL, unless you're also

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-08 Thread Eero Volotinen
Err. Is there patch to disable sslv2 in postfix 2.3 ? Eero 2016-03-03 9:21 GMT+02:00 Viktor Dukhovni : > > > On Mar 3, 2016, at 2:12 AM, Eero Volotinen > wrote: > > > > Hi, > > > > Can some one give working migation intructions for postfix 2.3

Re: postfix drown attack migation on version 2.3 (rhel5)?

2016-03-02 Thread Viktor Dukhovni
> On Mar 3, 2016, at 2:12 AM, Eero Volotinen wrote: > > Hi, > > Can some one give working migation intructions for postfix 2.3 > (postfix-2.3.3-7.el5) many of instructions are not working correctly on so > old version. (as settings are not supported) Postfix 2.3 is

postfix drown attack migation on version 2.3 (rhel5)?

2016-03-02 Thread Eero Volotinen
Hi, Can some one give working migation intructions for postfix 2.3 (postfix-2.3.3-7.el5) many of instructions are not working correctly on so old version. (as settings are not supported) thanks, -- Eero