Basic question...

2019-06-10 Thread Michael Segel
All, sorry for posting a basic question… I’ve got an old box running as my mail server. I want to bring up Postfix on my new box and not only have it as my secondary MX server, I’ like to have my mail from the first server replicated to the second server. What’s the best/easiest way to do

Re: Keep Postfix running in the foreground

2018-04-02 Thread Michael Segel
Hi, Jumping late in to this thread… Has anyone successfully implemented a Kubernetes / Docker container setup for Postfix/Dovecot? > On Dec 19, 2017, at 9:06 AM, Wietse Venema wrote: > > Stephen Satchell: >> On 12/19/2017 05:25 AM, Wietse Venema wrote: >>> As for

weird error w procmail and spamassassin

2017-10-19 Thread Michael Segel
I’m configuring a new mail server and I’ve set up postfix to call procmail which then calls spam assassin. The problem is that spam assassin doesn’t seem to be getting hit. I looked at the logs and I see postfix making a call to procmail but then nothing happens. What am I missing? What

Re: Trace spam activity on mail server

2017-05-03 Thread Michael Segel
Now thats a name from the past. Bill, you’d probably know some of the spammer domains where they complained about spamhaus and other RBLs… Its been a while since I followed all of this stuff from Usenet days… > On May 3, 2017, at 10:25 AM, Bill Cole >

Sending mail to two streams...

2017-05-02 Thread Michael Segel
Hi, I am curious about being able to send email to both Dovecot for the end user’s mail box and then also on to a stream where one can do some analytics? Or chain the streams so that you can do analytics on both in-bound and out-bound and then deliver it? I know that it can be done

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
, I provide log data. That is how it should be done. > > Two easy things to harden your server: > 1) no web mail > 2) all accounts use TLS > > > > Original Message > From: Michael Segel > Sent: Tuesday, May 2, 2017 9:02 AM > To: Kevin A. McGrail > Cc:

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
First, honey pots aren’t an issue and spoofing an IP address is fairly easy to pickup. As to spam is in the eye of the beholder, if you go back to my questions… You’ll see that I asked about the OP’s mail list. Free clue… if you purchased a list of potential customers… you’re a spammer. If

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
May 2, 2017, at 8:56 AM, Kevin A. McGrail <kmcgr...@pccc.com> wrote: > > On 5/2/2017 9:51 AM, Michael Segel wrote: >> You can run a check on your MX Server… there are a couple of web sites that >> do this… and I think one or two will identify the RBLs that include you. >

Re: Trace spam activity on mail server

2017-05-02 Thread Michael Segel
Ok, This is a little bit off topic for the mail list. Assuming as you say, you don’t spam… You may be included in a RBL if you reside on a net block that has a spammer on it. So while your domain isn’t spamming, if your next door virtual neighbor is… you’re SOL (Shit Out of Luck) until

Re: SASL auth only on port 25

2017-04-27 Thread Michael Segel
I’d upgrade the version of Centos 5 is kind of old. > On Apr 27, 2017, at 8:51 AM, Simon Wilson wrote: > > Hi all, I'm tightening up my (pre-postscreen postfix 2.3.3 on CentOS 5) mail > server as I get quite a few hits on the open ports from bot nets trying to >

Re: What am I missing?

2017-04-25 Thread Michael Segel
want to eventually run this with chroot? Thanks again to everyone. -Mike On Apr 25, 2017, at 8:41 AM, Noel Jones <njo...@megan.vbhcs.org<mailto:njo...@megan.vbhcs.org>> wrote: On 4/25/2017 7:36 AM, Michael Segel wrote: I have two mail servers. One is an older release of Postfix and

What am I missing?

2017-04-25 Thread Michael Segel
I have two mail servers. One is an older release of Postfix and I’m building a replacement for that server. I did a test where I sent the same message to both servers. In /etc/var/maillog on the one server, when the incoming message is being delivered, I see the hostname connect. On the

Re: Need help with TLS keys...

2017-04-24 Thread Michael Segel
> On Apr 24, 2017, at 12:15 PM, Viktor Dukhovni <postfix-us...@dukhovni.org> > wrote: > > >> On Apr 24, 2017, at 12:51 PM, Michael Segel <dovecot_...@hotmail.com> wrote: >> >> I wouldn’t say fashionista… >> >> More of an experiment sinc

Re: Need help with TLS keys...

2017-04-24 Thread Michael Segel
pr 24, 2017, at 10:20 AM, Michael Segel <dovecot_...@hotmail.com> wrote: >> >> (Of course the cert is 8192 which may be a bit excessive over 2048) > > Don't be a crypto fashionista. Generate a 2048-bit key and obtain and > deploy a corresponding 2048-bit certificate. > > -- > Viktor. >

Re: Need help with TLS keys...

2017-04-24 Thread Michael Segel
t 2:41 PM, Viktor Dukhovni <postfix-us...@dukhovni.org> > wrote: > > >> On Apr 20, 2017, at 2:48 PM, Michael Segel <dovecot_...@hotmail.com> wrote: >> >> warning: cannot get RSA certificate from file /etc/pki/dovecot/mailCert.pem: >> disabling TLS

How does Postfix validate IP of sender on incoming messages?

2017-04-21 Thread Michael Segel
I’m trying to debug my new mail server… I’m testing with incoming messages from an external account and while my old mail server can correctly identify the IP address of the host, my new server doesn’t. I checked the inbound IP address with both dig -x and nslookup. In both cases both

Working thru some issues in configuring my postfix setup

2017-04-20 Thread Michael Segel
I’m working thru some issues on my new server setup. I wanted to set up some virtual user mailboxes so I don’t have to create actual accounts but add them to the mySQL (MariaDB) database. I am having an issue with the following : postfix/trivial-rewrite[8120]: warning: do not list domain

Re: Need help with TLS keys...

2017-04-20 Thread Michael Segel
of a problem than it's worth, gave me weird errors. Try turning it off and see what happens. Hth Dave. On 4/20/17, Michael Segel <dovecot_...@hotmail.com<mailto:dovecot_...@hotmail.com>> wrote: I’ll cut n paste those in a sec… On a whim, I took a peek at the /var/log/secure and fou

Need help with TLS keys...

2017-04-20 Thread Michael Segel
Here’s my setup.: Postfix 2.10.1 - Centos Webmin Dovecot MariaDB (MySQL) I’m setting up a new box and I’ve got a couple of errors… The first one I’m trying to clean up is the following: warning: cannot get RSA certificate from file /etc/pki/dovecot/mailCert.pem: disabling TLS support The first