Re: TLS client certs question

2021-08-07 Thread Chris Bamford
Thanks Wietse, I missed this first time, this must be the walkthrough that Viktor mentioned. Very useful, I will take a closer look on Monday. Best, Chris On Aug 7, 2021, 15:19, at 15:19, Wietse Venema wrote: >Chris Bamford: >> Hello, >> >> I would like to know how Postfix handles client

Re: TLS client certs question

2021-08-07 Thread Chris Bamford
Thanks Viktor, That's good to know. Where can I find this walkthrough? Chris On Aug 7, 2021, 17:25, at 17:25, Viktor Dukhovni wrote: >On Sat, Aug 07, 2021 at 11:10:39AM +0100, Chris Bamford wrote: > >> I would like to know how Postfix handles client certificates for >delivery >> i.e. when it

Re: TLS client certs question

2021-08-07 Thread Viktor Dukhovni
On Sat, Aug 07, 2021 at 11:10:39AM +0100, Chris Bamford wrote: > I would like to know how Postfix handles client certificates for delivery > i.e. when it makes a remote connection to deliver email. > > Is it possible to control the certificate that is used per domain? Wietse posted a detailed

Re: SMTP Relay

2021-08-07 Thread Viktor Dukhovni
On Sat, Aug 07, 2021 at 11:51:33AM +, masstransitk...@365stops.org wrote: > At the moment, I need to know what in this configuration could be > causing the mail to bounce back to me. At the moment, only local mail is > delivered. Can you also explain the consistent failure to be helped by

Re: Inbound/Outbound Settings on a Postfix Relay-Only

2021-08-07 Thread Matus UHLAR - fantomas
On 05.08.21 18:14, White, Daniel E. (GSFC-770.0)[NICS] wrote: On my relay, I tried these settings: local_transport = error: local mail delivery is disabled And when I send mail, I get "Recipient address rejected: local mail delivery is disabled" the destination domain is in

Re: SMTP Relay

2021-08-07 Thread Matus UHLAR - fantomas
On 02.08.21 14:29, Eric Shields | Mass Transit Honchkrow wrote: *nat -A PREROUTING -p tcp -m tcp --dport 587 -j DNAT --to-destination 172.16.101.1:587 -A PREROUTING -p tcp -m tcp --dport 465 -j DNAT --to-destination 172.16.101.1:465 so, you redirect all outgoing communication to ports 465/587

Re: TLS client certs question

2021-08-07 Thread Wietse Venema
Chris Bamford: > Hello, > > I would like to know how Postfix handles client certificates for delivery > i.e. when it makes a remote connection to deliver email. > > Is it possible to control the certificate that is used per domain? The client certificate is a Postfix SMTP client setting; the

Re: SMTP Relay

2021-08-07 Thread tobi
> relayhost = [mx.krowverse.services] If I got your first post right you only have nat rules for port 465 and 587 but the setting above implies usage of port 25. Ever tried to add :587 to your postfix relayhost setting? Am 7. August 2021 11:51:33 UTC schrieb masstransitk...@365stops.org: >When

Re: SMTP Relay

2021-08-07 Thread masstransitkrow
When I replied, I did not notice that Thunderbird had rewritten the header. At the moment, I need to know what in this configuration could be causing the mail to bounce back to me. At the moment, only local mail is delivered. I simply need the mail to exit my server after it is sent without

TLS client certs question

2021-08-07 Thread Chris Bamford
Hello, I would like to know how Postfix handles client certificates for delivery i.e. when it makes a remote connection to deliver email. Is it possible to control the certificate that is used per domain? Thanks, - Chris