Re: Is TLS strictly required?

2009-10-16 Thread LuKreme
On 16-Oct-2009, at 13:31, Matt Friedman wrote: For an internet facing postfix server, is TLS strictly required? Of course not. Do I need to obtain an SSL certificate for this? You can, but you can also use a self-signed cert. What would happen if I didn't use TLS? Would I be inviting spam

Re: How can I has postfix reporting errors with an email address

2009-10-16 Thread Victor Duchovni
On Fri, Oct 16, 2009 at 01:32:11PM -0700, Mark Johnson wrote: > Is there any way to config postfix reporting errors with an invalid > email address? Unfortunately, given the very brief description of the problem, no answer is possible. You need to describe your problem in more detail, giving exam

Re: How can I has postfix reporting errors with an email address

2009-10-16 Thread Wietse Venema
Mark Johnson: > Is there any way to config postfix reporting errors with an invalid email >-address? Choose one of the following: 1) A client sends a non-existent address to the Postfix SMTP server. 2) A client sends a malformed address to the Postfix SMTP server. 3) A local program passes a n

How can I has postfix reporting errors with an email address

2009-10-16 Thread Mark Johnson
Is there any way to config postfix reporting errors with an invalid email address? Thanks. MJ

Re: Is TLS strictly required?

2009-10-16 Thread Victor Duchovni
On Fri, Oct 16, 2009 at 03:50:30PM -0400, Matt Friedman wrote: > Thanks Brian, > > Sorry if my questions are a bit inane. Feel free to point me at > reading material if I'm being too much of a noob. > > Ok, so based on what you are saying postfix can be made sufficiently > secure without TLS or

Re: Is TLS strictly required?

2009-10-16 Thread Victor Duchovni
On Fri, Oct 16, 2009 at 03:38:26PM -0400, Brian Evans - Postfix List wrote: > > What would happen if I didn't use TLS? Would I be inviting spammers > > and hackers to take over my postfix installation? Are there > > alternative security measures that are as secure or better? > > > > TLS is to

Re: Is TLS strictly required?

2009-10-16 Thread Matt Friedman
Thanks Brian, Sorry if my questions are a bit inane. Feel free to point me at reading material if I'm being too much of a noob. Ok, so based on what you are saying postfix can be made sufficiently secure without TLS or and SSL certificate. I'm thinking about when users login to fetch their email

Re: Is TLS strictly required?

2009-10-16 Thread Brian Evans - Postfix List
Matt Friedman wrote: > Hi, > > For an internet facing postfix server, is TLS strictly required? Do I > need to obtain an SSL certificate for this? > No and No. > What would happen if I didn't use TLS? Would I be inviting spammers > and hackers to take over my postfix installation? Are there >

Is TLS strictly required?

2009-10-16 Thread Matt Friedman
Hi, For an internet facing postfix server, is TLS strictly required? Do I need to obtain an SSL certificate for this? What would happen if I didn't use TLS? Would I be inviting spammers and hackers to take over my postfix installation? Are there alternative security measures that are as secure or

Re: Postfix, fetchmail, and forwarding loop

2009-10-16 Thread John te Bokkel / Tempus
So which one is the guilty party in adding the Delivered-To header? I didn't think that fetchmail touched the headers. I don't think that fetchmail should have even been involved in this transaction, but it looks like it did. Received: from localhost [127.0.0.1] by localhost with IMAP (fetc

Re: Postfix, fetchmail, and forwarding loop

2009-10-16 Thread Wietse Venema
John te Bokkel / Tempus: > I am not sure why this is happening now, I haven't made any changes to > configurations in the last while. The Postfix local delivery agent will report a loop when it tries to deliver mail to u...@example.com, and that message already has a "Delivered-To: u...@example.co

Re: S/Mime with Postfix?

2009-10-16 Thread Victor Duchovni
On Fri, Oct 16, 2009 at 06:36:59PM +0100, Paul Hutchings wrote: > After a little guidance on what those of you using Postfix as a gateway > are using for doing s/mime email encryption? S/MIME is in theory an MUA issue, MTAs just move the mail. This said, if an end-to-end approach is not for you (

Postfix, fetchmail, and forwarding loop

2009-10-16 Thread John te Bokkel / Tempus
I am not sure why this is happening now, I haven't made any changes to configurations in the last while. It seems that fetchmail is catching mail that it shouldn't. Here is an example of an email that got bounced. It was sent locally in a backup script. >From MAILER-DAEMON Fri Oct 16 12:31:13

Re: can't stop anvil

2009-10-16 Thread Len Conrad
-- Original Message -- From: wie...@porcupine.org (Wietse Venema) Date: Fri, 16 Oct 2009 12:38:22 -0400 (EDT) >Len Conrad: >> postconf mail_version >> mail_version = 2.3-20060126 >> >> postconf | egrep smtpd_client_connection_rate_limit >> smtpd_client_con

S/Mime with Postfix?

2009-10-16 Thread Paul Hutchings
After a little guidance on what those of you using Postfix as a gateway are using for doing s/mime email encryption? I did some digging and it seems you can get certificates that authenticate a company for s/mime rather than needing to authenticate each individual using a cert on their MUA. Of

Re: can't stop anvil

2009-10-16 Thread Victor Duchovni
On Fri, Oct 16, 2009 at 06:11:19PM +0200, Len Conrad wrote: > postconf mail_version > mail_version = 2.3-20060126 > > postconf | egrep smtpd_client_connection_rate_limit > smtpd_client_connection_rate_limit = 0 This is the default value. To disable anvil in an otherwise default configuration:

Re: can't stop anvil

2009-10-16 Thread Wietse Venema
Len Conrad: > postconf mail_version > mail_version = 2.3-20060126 > > postconf | egrep smtpd_client_connection_rate_limit > smtpd_client_connection_rate_limit = 0 > > but after a few minutes of running, maillog is flooded with 1000s of > > Oct 16 12:11:45 postfix/smtpd[82433]: warning: connect t

can't stop anvil

2009-10-16 Thread Len Conrad
postconf mail_version mail_version = 2.3-20060126 postconf | egrep smtpd_client_connection_rate_limit smtpd_client_connection_rate_limit = 0 but after a few minutes of running, maillog is flooded with 1000s of Oct 16 12:11:45 postfix/smtpd[82433]: warning: connect to private/anvil: Connection r

Re: postscreen lookalike, but in FreeBSD kernel (presentation)

2009-10-16 Thread Victor Duchovni
On Thu, Oct 15, 2009 at 09:05:17PM -0400, Wietse Venema wrote: > Postscreen's greetpause is only the first step in a sequence of > barriers that I expect will be needed. Adding greylisting support > would be a next step. Adding greylist support to a kernel-based > implementation looks unattractive

Re: address lookup/verify question

2009-10-16 Thread Wietse Venema
http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall http://www.postfix.org/postconf.5.html#parent_domain_matches_subdomains Wietse

Re: question about fiters

2009-10-16 Thread Mikael Bak
Cottalorda Sébastien wrote: > Sorry, I've courier-imap, and I use roundcubemail as webmail. > I also add to roundcube the vacation plugin that allow my users to program > themselves theirs vacations. > Everything is good, the link between the mysql database and the plugin, but > now I want to conne

Re: question about fiters

2009-10-16 Thread Charles Marcus
On 10/16/2009 Cottalorda Sébastien wrote: I think I will use the "vacation.pl" program given with the posfixadmin suite, maybe it follows what you said As long as you're running the latest version (not latest stable, but latest from svn)...

Re: question about fiters

2009-10-16 Thread Cottalorda Sébastien
On Fri, 16 Oct 2009 00:33:19 +0200, mouss wrote: > Cottalorda Sébastien a écrit : >> Hi all, >> >> I need to add a vacation function into an existing postfix server which >> is already protected by an Antispam/Antivirus software that uses >> advanced filter. >> >> I've that configuration: >> >>