Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
I managed to get multiple SSL certs working on multiple virtual IPs on the same server so vhost domains appeared to be completely independent from the base server. I'd like an opinion as to whether this is the right or best way to do this... domain1.com = 12.34.56.78 /etc/postfix/master.cf

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
On 16/04/12 21:57, DTNX Postmaster wrote: I would not bother with prettifying headers or SMTP transaction output that is generally only seen by automated systems, It's mainly for vanity virtual hosting so our clients can be assured they have their own fully branded mail service. More

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
On 16/04/12 23:13, Reindl Harald wrote: More importantly, with the -o myhostname=domain1.com they can fully pass any hardfail SPF test this has nothing to do with the hostname True from a fail/pass SPF inspection by the remote mailserver but not from a support techie eyeball point of view.

Re: Multiple SSL certs on multiple IPs

2012-04-23 Thread Mark Constable
On 16/04/12 23:14, Wietse Venema wrote: 12.34.56.78:smtp inet n - - - - smtpd -o myhostname=domain1.com This change all SMTP server responses that depend on the myhostname settings. Any thoughts or suggestions on how to improve this strategy? Use separate MTA instances. FWIW Courier

Re: Postfix, Dovecot, Memory ?

2017-02-05 Thread Mark Constable
On 05/02/17 16:04, Dominic Raferd wrote: In contrast a "full service" mailcow install requires 800Mb at the very least and 1Gb with some usage. Clamav is the real ram killer. ​At the risk of going off-topic, is it worth using clamav? I run it (via amavis) but it last picked up something 'real'

Re: Postfix, Dovecot, Memory ?

2017-02-04 Thread Mark Constable
On 04/02/17 21:35, A. Schulze wrote: if i will run Debian, Postfix + Dovecot on a VPS Machine what i need about memeory that this application can run without any Problem, 256Mb are not enough? works as long you avoid antivirus snakeoil and perl based spam filtering. Totally agree with this,

Domains on different IPs

2016-12-17 Thread Mark Constable
I want to supply separate Letsencrypt certificates for each virtual domain and seeing that SNI does not work I need to allocate separate IPs. Could anyone give some pointers, or keywords to search for, on... a) how to make postfix listen for different domains on different IPs? b) how to

Re: separate TLS certificates for virtual domains - how ?

2017-03-23 Thread Mark Constable
On 23/03/17 23:06, Viktor Dukhovni wrote: is it possible to setup separate SSL certificates for an each virtual domain ? The Postfix smtpd(8) service does not support SNI-based certificate selection. And this is not needed. Just point all the virtual domains at a common MX host with a single

Re: separate TLS certificates for virtual domains - how ?

2017-03-23 Thread Mark Constable
On 24/03/17 00:30, Viktor Dukhovni wrote: That answer was for the port 25 inbound MX relay host, which can be changed by updating MX records without any interaction with the users. [...] You are conflating MX hosts with MSAs. Users don't configure their MUAs to talk to MX hosts. Not quite. In

Re: reloading postfix with systemd

2017-08-10 Thread Mark Constable
On 11/08/17 05:20, Michael Fox wrote: # cat /usr/lib/systemd/system/postfix.service Hmm. My Ubuntu system has no such file. On *buntu/deb machines it's... /lib/systemd/system/postfix.service dpkg -L postfix | grep service

Re: Override global @catch-all alias

2017-07-04 Thread Mark Constable
On 04/07/17 14:08, Bill Cole wrote: I have a global alias @example.com pointing to ad...@example.com, which works fine, but when I add a real user, like m...@example.com, the global alias overrides the real entry in virtual_mailbox_maps (mysql). See the VIRTUAL_README and ADDRESS_CLASS_README

Re: What is the best anti-spam and anti-virus combos for Postfix?

2017-04-28 Thread Mark Constable
On 29/4/17 5:26 am, Linda Pagillo wrote: Hi everyone. I was wondering which anti-spam and anti-virus programs do you all use with Postifx? Any advice on which programs work best? I'm not sure about the absolute best spam filtering system but the simplest lightweight solution (for me) is

Re: What is the best anti-spam and anti-virus combos for Postfix?

2017-05-07 Thread Mark Constable
On 5/7/17 9:58 PM, pbw wrote: ...the simplest lightweight solution (for me) is postscreen, SPF/ DKIM and Spamprobe via dovecot/sieve filters. Your approach seems applicable to me. I have set up postscreen from the postfix docs. What is the best documentation for the remainder of your setup?

Re: Allow unauth for some users on port 465

2021-02-12 Thread Mark Constable
On 12/2/21 3:14 pm, Viktor Dukhovni wrote: Hi, I have a fairly typical postfix install with port 465 requiring authentication. I'd like to allow one sender (email address or IP) to inject email on port 465 without providing login/password authentication. The port number and TLS encryption are

Connect hostname for 25 vs 465

2021-02-21 Thread Mark Constable
If I connect to port 25 the connect host in the logs is my FQDN... telnet 12.34.56.78 25 ehlo mail.my.fqdn connect from mail.my.fqdn[78.56.34.12] If I try the same via port 465 then I always get "unknown"... openssl s_client -crlf -quiet -connect 12.34.56.78:465 ehlo mail.my.fqdn connect from

Re: Connect hostname for 25 vs 465

2021-02-21 Thread Mark Constable
On 22/2/21 00:26, Wietse Venema wrote: If I connect to port 25 the connect host in the logs is my FQDN... If I try the same via port 465 then I always get "unknown"... What is the output from: # postconf -F '*/inet/chroot' If they are different, then you have a broken chroot setup. ~

Allow unauth for some users on port 465

2021-02-11 Thread Mark Constable
Hi, I have a fairly typical postfix install with port 465 requiring authentication. I'd like to allow one sender (email address or IP) to inject email on port 465 without providing login/password authentication. Is this somehow possible?

[pfx] Re: Recommendation for dkim signing

2023-10-30 Thread Mark Constable via Postfix-users
with this config file... https://github.com/markc/sh/blob/main/etc/_etc_opendkim.conf and with this added to /etc/postfix/main.cf... smtpd_milters = inet:127.0.0.1:8891,inet:127.0.0.1:54321 -- Cheers, Mark Constable :: +61 0419 530 037 ___ Postfix

[pfx] Wildcard sender_transport

2023-10-23 Thread Mark Constable via Postfix-users
: * smtp2-out: If possible then what is the exact config entry for a "wildcard" in this situation? -- Cheers, Mark Constable :: +61 0419 530 037 ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email