Howto tell postfix to don't reread it's configuration file automatically

2010-08-24 Thread Thomas Glanzmann
Hello everyone, a week ago I had a problem with a productive e-mail server rejecting e-mail because an automatic configuration tool (cfengine) failed on me and rolled out the wrong configuration file. After a very short amount of time (less than an hour) postfix picked up the new configuration

Re: Howto tell postfix to don't reread it's configuration file automatically

2010-08-24 Thread Magnus Bäck
On Tuesday, August 24, 2010 at 09:40 CEST, Thomas Glanzmann tho...@glanzmann.de wrote: a week ago I had a problem with a productive e-mail server rejecting e-mail because an automatic configuration tool (cfengine) failed on me and rolled out the wrong configuration file. After a very

submission port annoyance

2010-08-24 Thread Edward avanti
Halo, We are have odd occasional problem where, some customer that have made up name in hostname on pc and try send mail get rejected by us submission is told use - submission inet n - n - - smtpd -o smtpd_sasl_auth_enable=yes -o

Re: Selective smtpd_helo_restrictions question

2010-08-24 Thread Wietse Venema
Charles Marcus: On 2010-08-22 8:38 PM, Stan Hoeppner s...@hardwarefreak.com wrote: Stan Hoeppner put forth on 8/22/2010 7:34 PM: So if we reverse the scenario and put the REJECT first, it's a final decision? If so, and if I've described the situation correctly, why do we have this

Re: submission port annoyance

2010-08-24 Thread Noel Jones
On 8/24/2010 7:24 AM, Edward avanti wrote: Halo, We are have odd occasional problem where, some customer that have made up name in hostname on pc and try send mail get rejected by us submission is told use - submission inet n - n - - smtpd -o

Re: submission port annoyance

2010-08-24 Thread Jerry
On Tue, 24 Aug 2010 22:24:44 +1000 Edward avanti edward.ava...@gmail.com articulated: Halo, We are have odd occasional problem where, some customer that have made up name in hostname on pc and try send mail get rejected by us submission is told use - submission inet n - n

Re: Delay deliver to a group of domains

2010-08-24 Thread Pablo Garcia Melga
I added the following lines to the configuration master.cf smtpslow unix - - n - - smtp transport yahoo.com smtpslow: yahoo.com.arsmtpslow: yahoo.com.mxsmtpslow: ymail.com smtpslow: main.cf transport_maps = hash:/etc/postfix/transport

Re: Selective smtpd_helo_restrictions question

2010-08-24 Thread Noel Jones
On 8/24/2010 7:41 AM, Charles Marcus wrote: On 2010-08-22 8:38 PM, Stan Hoeppners...@hardwarefreak.com wrote: Stan Hoeppner put forth on 8/22/2010 7:34 PM: So if we reverse the scenario and put the REJECT first, it's a final decision? If so, and if I've described the situation correctly, why

Postfix/LDAP beginner question

2010-08-24 Thread Zhou, Yan
Hi there, I am using Postfix 2.4.3. As my first step to integrate with Postfix, I wish to look up LDAP for local user. I did not recompile Postfix because I thought it comes with LDAP support. My ldap log does show that Postfix is trying to look up, so I think it is fine there. main.cf reads

Re: virtual MAILBOX: separate domains, non-UNIX accounts

2010-08-24 Thread Mike
On Tue, Aug 24, 2010 at 6:17 AM, Magnus Bäck mag...@dsek.lth.se wrote: On Monday, August 23, 2010 at 23:20 CEST, Mike 1100...@gmail.com wrote: Noip.com manages DNS for my FQDN. Should virtual_mailbox_domains = mail.example.com or only example.com That depends on whether you want

Re: Delay deliver to a group of domains

2010-08-24 Thread Pablo Garcia Melga
Thanks Wietse, works just fine. On Tue, Aug 24, 2010 at 10:12 AM, Wietse Venema wie...@porcupine.org wrote: Pablo Garcia Melga: I added the following lines to the configuration master.cf smtpslow  unix  -       -       n       -       -       smtp transport yahoo.com     smtpslow:

Re: per domain TLS

2010-08-24 Thread Vernon A. Fort
On Tue, 2010-08-24 at 10:29 -0500, Noel Jones wrote: On 8/24/2010 10:24 AM, Vernon A. Fort wrote: We have a few companies that we need have ALL email traffic encrypted. We can no longer 'blindly trust' the end user to not include sensitive information in email. A VPN would be a easier

Re: DNS Whitelisting

2010-08-24 Thread Wietse Venema
Stan Hoeppner: Wietse Venema put forth on 8/23/2010 10:11 AM: Noel Jones: (Might be time to revisit DNS whitelists in postfix.) Maybe someone can draft a strawman user interface: - what is the configuration syntax - what does that syntax mean - how to make it safe (

TLS with Subject Alternative Name

2010-08-24 Thread Clayton Keller
First off, my apologies if this strays a bit off-list. I'm trying to setup a test environment using TLS and a self-signed certificate using Subject Alternative Name. From my research this should allow me to use multiple hostnames with a single certificate. I have no issues using TLS and a

Re: TLS with Subject Alternative Name

2010-08-24 Thread Dieter Kluenter
Clayton Keller inetad...@ruraltel.net writes: First off, my apologies if this strays a bit off-list. I'm trying to setup a test environment using TLS and a self-signed certificate using Subject Alternative Name. From my research this should allow me to use multiple hostnames with a single

Re: Multi-domain certificates and TLS

2010-08-24 Thread Alex
Hi, When the Subject Alternative Name extension is present in a server certificate, Postfix will use the first domain listed in that extension as the verified peer name, unless one of the other domains satisfies the matching rules for the destination TLS policy. Aug  6 09:44:20 smtp01

Multiple Domains; No Local Accounts - bad uid in virtual_uid_maps

2010-08-24 Thread Mike
Incoming mail is getting dropped into /var/spool/postfix/defer . I'm seeing this error in /var/log/messages: Aug 24 17:21:48 sato postfix/virtual[581]: warning: recipient m...@example.com: bad uid example.com/mike/ 3001 3001 in virtual_uid_maps Aug 24 17:21:48 sato postfix/virtual[581]:

Re: Multi-domain certificates and TLS

2010-08-24 Thread Victor Duchovni
On Tue, Aug 24, 2010 at 05:35:42PM -0400, Alex wrote: mail.messaging.microsoft.com[65.55.88.22]:25: Matched subject_CN=*.messaging.microsoft.com, issuer_CN=Cybertrust SureServer Standard Validation CA ... What is your TLS policy for this destination? The wildcard Subject Alt Name

Re: Multiple Domains; No Local Accounts - bad uid in virtual_uid_maps

2010-08-24 Thread mouss
Le 24/08/2010 23:49, Mike a écrit : Incoming mail is getting dropped into /var/spool/postfix/defer . I'm seeing this error in /var/log/messages: Aug 24 17:21:48 sato postfix/virtual[581]: warning: recipient m...@example.com mailto:m...@example.com: bad uid example.com/mike/

Re: Rewriting Date header for local senders, or something like that.

2010-08-24 Thread mouss
Le 23/08/2010 04:47, Jose Ildefonso Camargo Tolosa a écrit : Hi! I got a curiosity, I have noted that the Date header the mail takes comes from the client computer, so, if my computer have a wrong date, my mail will go out with a wrong date too. there is nothing curious about that. the Date

Re: Multiple Domains; No Local Accounts - bad uid in virtual_uid_maps

2010-08-24 Thread Mike
Thank you, gentlemen. I always appreciate a good RTFM from talented folks who actually know where they are pointing. :-) I do appreciate the help and definitely do not intend to aggravate and vex. Mike

Re: Rewriting Date header for local senders, or something like that.

2010-08-24 Thread Jose Ildefonso Camargo Tolosa
Hi! Thanks for your answer! On Tue, Aug 24, 2010 at 7:31 PM, mouss mo...@ml.netoyen.net wrote:  Le 23/08/2010 04:47, Jose Ildefonso Camargo Tolosa a écrit : Hi! I got a curiosity, I have noted that the Date header the mail takes comes from the client computer, so, if my computer have a