SOLVED Re: force aes 256 encryption

2010-10-15 Thread Egoitz Aurrekoetxea Aurre
Uqlev advised me to use 2048 bit certs... after doing that... just the mail client has limited to 128 bit session keys with thunderbird for example no problem to get 256 bit session keys. Thanks bye!! El 15/10/2010, a las 11:16, Egoitz Aurrekoetxea Aurre escribió: Hi all, How could I

Re: checking relay_recipient_maps before greylisting ?

2010-10-15 Thread Frank Bonnet
Thank you Wiese. On 10/15/2010 12:43 PM, Wietse Venema wrote: Frank Bonnet: Hello Is it possible to check the relay_recipient_maps BEFORE greylisting ? By default, Postfix rejects unknown recipients at the end of smtpd_recipient_restrictions, but you can reject them earlier. See:

Re: verify db with mysql

2010-10-15 Thread Stefan
Hi list, in the appendix you will find a patch against Postfix 2.7.1 which adds write support to Postfix' MySQL client. If someone like to test it, then he will find Postfix RPMs with MySQL write support for recent versions of *SUSE linux here:

inline comments in map file

2010-10-15 Thread pf at alt-ctrl-del.org
Are inline comments in map files ok to use? Will they break anything? check_reverse_client_hostname_access... /sip\..*\.bellsouth.net$/ DUNNO #static.bellsouth address I don't see any errors in the log, but I don't want to create a nightmare later.

Re: intermittent hang on postfix stop; doesn't return terminating on signal

2010-10-15 Thread Wietse Venema
Scott Brown: Usually, when the update-postfix.pl script runs, it tells Postfix to shut down and we get a logged message that says postfix/postfix-script: stopping the Postfix mail system. Right after that, postfix responds with something like postfix/master[11211]: terminating on signal

Re: verify db with mysql

2010-10-15 Thread Victor Duchovni
On Fri, Oct 15, 2010 at 03:05:33PM +0200, Stefan wrote: in the appendix you will find a patch against Postfix 2.7.1 which adds write support to Postfix' MySQL client. If someone like to test it, then he will find Postfix RPMs with MySQL write support for recent versions of *SUSE linux

Re: multiples values in sender_bcc entry

2010-10-15 Thread Victor Duchovni
On Fri, Oct 15, 2010 at 12:46:29PM -0200, maximatt wrote: i use postfix v2.4.3 and i have the following error message using sender_bcc_maps parameter: Oct 15 12:26:12 maximatt postfix/error[16207]: 8639F66C924: to= s...@maximatt.com, sec2, orig_to=s...@maximatt.com, s...@maximatt.com,

Re: intermittent hang on postfix stop; doesn't return terminating on signal

2010-10-15 Thread Scott Brown
Wietse, Awesome response - thank you very much! You have really demystified a lot of what's going on for me. I see what you're saying about there being better ways to update the Berkeley .db files. It does seem like an upgrade to a less disruptive approach would be in order. But at the same

Fighting Backscatter

2010-10-15 Thread Steve Jenkins
I've read through the readme at: http://www.postfix.org/BACKSCATTER_README.html and thought I was doing everything right. but my personal mail server is still getting listed at Backscatterer.org. :( I'm running 2.6.5 and here's my postconf -n: alias_database = hash:/etc/aliases alias_maps =

Re: multiples values in sender_bcc entry

2010-10-15 Thread maximatt
ok, i understand you.. Thanks! 2010/10/15 Victor Duchovni victor.ducho...@morganstanley.com On Fri, Oct 15, 2010 at 12:46:29PM -0200, maximatt wrote: i use postfix v2.4.3 and i have the following error message using sender_bcc_maps parameter: Oct 15 12:26:12 maximatt

Re: intermittent hang on postfix stop; doesn't return terminating on signal

2010-10-15 Thread Wietse Venema
Scott Brown: Wietse, Awesome response - thank you very much! You have really demystified a lot of what's going on for me. I see what you're saying about there being better ways to update the Berkeley .db files. It does seem like an upgrade to a less disruptive approach would be in

[JOB] Email Sys Admin, NYC | 80-100k+

2010-10-15 Thread Beau Gould
My New York City client near Penn Station is a leading travel deals and destination advice publishing firm (online and print). They are seeking a full-time, on-site, salaried Email Systems Administrator to join their technology team in the $80,000 to $100,000 range + benefits. They follow

Re: Fighting Backscatter

2010-10-15 Thread Wietse Venema
Steve Jenkins: I've read through the readme at: http://www.postfix.org/BACKSCATTER_README.html and thought I was doing everything right. but my personal mail server is still getting listed at Backscatterer.org. :( Have you looked in your logfile for mail from , that is sent by your

Re: intermittent hang on postfix stop; doesn't return terminating on signal

2010-10-15 Thread Scott Brown
Wietse, Thanks again for your help. Also thanks to Viktor for his thoughts about the version. I checked and I see I do in fact have an old version of postfix installed, which is 2.3.3. This is surprising because I installed it using yum install postfix, which I had assumed would install the

Extra permissions restrictions with pipe commands?

2010-10-15 Thread Andy Theuninck
I'm trying to write a python script that accepts input from pipe. I'm encountering permission issues that I don't understand. According to postfix's configuration, pipe commands are run as nobody:nobody. Logging from my script to /tmp agrees confirms this is the case. When my script is called by

Re: Extra permissions restrictions with pipe commands?

2010-10-15 Thread Victor Duchovni
On Fri, Oct 15, 2010 at 11:22:34AM -0500, Andy Theuninck wrote: 4. Cannot write to locations that are group-writable and set to some other group - even if the user nobody is part of the relevant group. Postfix does not initialize secondary groups when running commands as the $default_privs

Re: OT: dns whitelisting with a postfix policy service

2010-10-15 Thread Christian Roessner
Hi, today I added full IPv6 support and the amavisd-new bindings. Now it's possible to have dnswl.py used as policy-service in postfix and if it find a MTA on a whitelist, it automatically gets soft-whitelisted in amavis (using SQL). I will put the new version on my side later on. Have fun

RE: Fighting Backscatter

2010-10-15 Thread Steve Jenkins
There are a few entries in there that seem to match the bill, but I'm not sure I'm understanding what they're saying, or even what I should be looking for to troubleshoot. For some background, this is my personal server that I run my family's mail on. There are a few local IMAP/POP accounts for

Re: Fighting Backscatter

2010-10-15 Thread Wietse Venema
Steve Jenkins: There are a few entries in there that seem to match the bill, but I'm not sure I'm understanding what they're saying, or even what I should be looking for to troubleshoot. For some background, this is my personal server that I run my family's mail on. There are a few local

Re: intermittent hang on postfix stop; doesn't return terminating on signal

2010-10-15 Thread Scott Brown
Thanks Viktor! For anyone who runs into the same/similar problem: it seems no more up-to-date yum package is available for CentOS. I found some pre-compiled packages for CentOS 5 at http://www.linuxmail.info/postfix-rpm-packages/. I was able to do an rpm install of the 2.5.1 postfix

RE: Fighting Backscatter

2010-10-15 Thread Steve Jenkins
Hi, Wietse. Thanks for the speedy reply. I'm a big fan of Postfix, so first of all, thank you for developing such a great product. I cringe thinking about the days when I used to have to run Sendmail (shudder). Ok... so let me see if I understand what is happening on my server. 1) SpamCo forges

Re: intermittent hang on postfix stop; doesn't return terminating on signal

2010-10-15 Thread Victor Duchovni
On Fri, Oct 15, 2010 at 12:42:17PM -0700, Scott Brown wrote: Thanks Viktor! For anyone who runs into the same/similar problem: it seems no more up-to-date yum package is available for CentOS. I found some pre-compiled packages for CentOS 5 at

Re: Fighting Backscatter

2010-10-15 Thread Victor Duchovni
On Fri, Oct 15, 2010 at 12:47:31PM -0700, Steve Jenkins wrote: 2) My server (familyname.com) accepts the message because mya...@familyname is a valid recipient that appears in my virtual aliases file, then forwards the message (based on the info in that virtual aliases file) to my aunt's

Re: Fighting Backscatter

2010-10-15 Thread Wietse Venema
Steve Jenkins: Hi, Wietse. Thanks for the speedy reply. I'm a big fan of Postfix, so first of all, thank you for developing such a great product. I cringe thinking about the days when I used to have to run Sendmail (shudder). Ok... so let me see if I understand what is happening on my

Re: Resend Messages in Maildrop queue?

2010-10-15 Thread Jeroen Geilman
On 10/15/2010 06:07 PM, Rafael Andrade wrote: uid=1001 from=finhasch...@hotmail.com That looks like somebody is either impersonating on your server, or they hacked it. smart:/var/spool/postfix/maildrop# mailq | head -Queue ID- --Size-- Arrival Time -Sender/Recipient---

Re: Extra permissions restrictions with pipe commands?

2010-10-15 Thread Jeroen Geilman
On 10/15/2010 06:22 PM, Andy Theuninck wrote: I'm trying to write a python script that accepts input from pipe. I'm encountering permission issues that I don't understand. According to postfix's configuration, pipe commands are run as nobody:nobody. The documentation doesn't say this

Re: Extra permissions restrictions with pipe commands?

2010-10-15 Thread Wietse Venema
Andy Theuninck: I'm trying to write a python script that accepts input from pipe. I'm encountering permission issues that I don't understand. According to postfix's configuration, pipe commands are run as nobody:nobody. Logging from my script to /tmp agrees confirms this is the case.

Postfix as SMTP Gateway *and* Delivery for Local Email Addresses

2010-10-15 Thread Aaron Clausen
I've been running Postfix+SpamAssassin+ClamAV for some time quite successfully as the email gateway for our internal MS-Exchange server. However, recently, my organization has been looking at setting up a POP3/IMAP server for one of our domains. We don't need any of Exchange's features, and