Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Fourhundred Thecat
This is not specific to postfix, but I cannot pass this opportunity to remind/inform people that chroot is itself a potential source of security vulnerabilities: Please enjoy studying this beautiful local privilege escalation bug in FreeBSD's ftpd, which was enabled by chroot jail:

Re: letsencrypt and SSL alert number 80

2022-12-12 Thread Viktor Dukhovni
On Mon, Dec 12, 2022 at 01:27:59PM -0500, Alex wrote: > Dec 12 13:12:47 xavier postfix-116/smtpd[1683671]: warning: TLS library > problem: error:0A000438:SSL routines::tlsv1 alert internal > error:ssl/record/rec_layer_s3.c:1584:SSL alert number 80: Some remote client encountered an internal (to

Re: postfix with LDAP, handles mutiple domains

2022-12-12 Thread Viktor Dukhovni
On Tue, Dec 13, 2022 at 11:23:55AM +0800, luckydog xf wrote: > # Here is my ldap query > bind = no > version = 3 > server_host = ldap://172.16.232.201:389 > start_tls = no > search_base = cn=users,cn=accounts,dc=ipa,dc=pthl,dc=hk > scope = sub > query_filter = (|(displayName=%s)(initials=%s)) >

postfix with LDAP, handles mutiple domains

2022-12-12 Thread luckydog xf
luckydog xf 11:15 AM (4 minutes ago) to postfix-users Hello, list. # Here is my ldap query bind = no version = 3 server_host = ldap://172.16.232.201:389 start_tls = no search_base = cn=users,cn=accounts,dc=ipa,dc=pthl,dc=hk scope = sub query_filter = (|(displayName=%s)(initials=%s))

Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread postfix
I apologize for the email being html-only, not my intention. I'm having trouble getting Thunderbird to do this right as I have to manually do this for every outgoing email. Tools > Settings > Composition > Sending Format > (Automatic || Only Plain Text) and Tools > Account Settings >

Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Sam
I apologize for the email being html-only, not my intention. I'm having trouble getting Thunderbird to do this right as I have to manually do this for every outgoing email. Can you please elaborate on what you mean with "problems of their own"? Anything specific comes to mind? This whole

Re: letsencrypt and SSL alert number 80

2022-12-12 Thread Gerald Galster
> I'm seeing periodic entries like this in my maillog: > > Dec 12 13:12:47 xavier postfix-116/smtpd[1683671]: warning: TLS library > problem: error:0A000438:SSL routines::tlsv1 alert internal > error:ssl/record/rec_layer_s3.c:1584:SSL alert number 80: [...] >

Re: What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Wietse Venema
Sam: [ text/html is unsupported, treating like TEXT/PLAIN ] > ?html style="direction: ltr;"? > ?head? > > ?meta http-equiv="content-type" content="text/html; charset=UTF-8"? > ?style id="bidiui-paragraph-margins" type="text/css"?body p { > margin-bottom: 0cm; margin-top: 0pt; }

What are the consequences of disabling chroot in all master services?

2022-12-12 Thread Sam
Dear postfix experts: While setting up postfix in a docker container, I have been getting the error "fatal: unknown service: smtp/tcp" when attempting to send an email. I investigated the issue, and it seems it has something to do with setting up chroot

letsencrypt and SSL alert number 80

2022-12-12 Thread Alex
Hi, I'm seeing periodic entries like this in my maillog: Dec 12 13:12:47 xavier postfix-116/smtpd[1683671]: warning: TLS library problem: error:0A000438:SSL routines::tlsv1 alert internal error:ssl/record/rec_layer_s3.c:1584:SSL alert number 80: I've searched quite a bit for more info on this