Re: Outsourced anti-spam and Issues with VRFY

2013-08-04 Thread Charles Marcus
On 2013-07-31 1:44 PM, Charles Marcus cmar...@media-brokers.com wrote: On 2013-07-31 1:23 PM, wie...@porcupine.org (Wietse Venema) wie...@porcupine.org (Wietse Venema) wrote: That*is* a problem. Postfix will slow down and eventually hang up when a client sends too many commands that cause an

Re: Outsourced anti-spam and Issues with VRFY

2013-08-04 Thread DTNX Postmaster
On Aug 4, 2013, at 21:08, Charles Marcus cmar...@media-brokers.com wrote: On 2013-07-31 1:44 PM, Charles Marcus cmar...@media-brokers.com wrote: On 2013-07-31 1:23 PM, wie...@porcupine.org (Wietse Venema) wie...@porcupine.org (Wietse Venema) wrote: That *is* a problem. Postfix will slow

Re: Outsourced anti-spam and Issues with VRFY

2013-08-04 Thread Wietse Venema
Charles Marcus: We are set up for performance with VRFY probes and by modifying your postfix config file so postfix will not nave a performance issue by setting postfix option smtpd_soft_error_limit to be larger than smtpd_hard_error_limit. That is nonsense, as demonstrated below: #

Alias to command not working

2013-08-04 Thread Sam Flint
I hve an alias to a command defined in my /etc/aliases file, anytime I send to it, I get this error: This is the mail system at host mail.flintfam.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further

Three trivial filtering questions

2013-08-04 Thread Ronald F. Guilmette
Does reject_non_fqdn_helo_hostname, when placed in the smtpd_helo_restrictions, permit clients to HELO/EHLO with a square-bracket enclosed dotted quad IPv4 address? If so, is the dotted quad checked to see that it properly represents the actual IP address of the actual current client? Also, I

Re: Three trivial filtering questions

2013-08-04 Thread Noel Jones
On 8/4/2013 8:06 PM, Ronald F. Guilmette wrote: Does reject_non_fqdn_helo_hostname, when placed in the smtpd_helo_restrictions, permit clients to HELO/EHLO with a square-bracket enclosed dotted quad IPv4 address? Yes. If so, is the dotted quad checked to see that it properly represents

Re: Alias to command not working

2013-08-04 Thread Noel Jones
On 8/4/2013 7:35 PM, Sam Flint wrote: I hve an alias to a command defined in my /etc/aliases file, anytime I send to it, I get this error: This is the mail system at host mail.flintfam.org. I'm sorry to have to inform you that your message could not be delivered to one or more recipients.

Re: Three trivial filtering questions

2013-08-04 Thread Ronald F. Guilmette
In message 51ff13eb.8090...@megan.vbhcs.org, Noel Jones njo...@megan.vbhcs.org wrote: On 8/4/2013 8:06 PM, Ronald F. Guilmette wrote: Does reject_non_fqdn_helo_hostname, when placed in the smtpd_helo_restrictions, permit clients to HELO/EHLO with a square-bracket enclosed dotted quad IPv4

Re: Three trivial filtering questions

2013-08-04 Thread Stan Hoeppner
On 8/4/2013 9:54 PM, Noel Jones wrote: On 8/4/2013 8:06 PM, Ronald F. Guilmette wrote: ... Also, I have just added all of the following to my smtpd_recipient_restrictions: reject_rhsbl_reverse_client multi.surbl.org reject_rhsbl_reverse_client multi.uribl.com

Re: Three trivial filtering questions

2013-08-04 Thread Stan Hoeppner
On 8/4/2013 10:13 PM, Ronald F. Guilmette wrote: In message 51ff13eb.8090...@megan.vbhcs.org, Noel Jones njo...@megan.vbhcs.org wrote: On 8/4/2013 8:06 PM, Ronald F. Guilmette wrote: Does reject_non_fqdn_helo_hostname, when placed in the smtpd_helo_restrictions, permit clients to HELO/EHLO

TLS with Encrypted Private Key

2013-08-04 Thread Yishen Miao
Hello world, I was configuring my postfix server for TLS support today and found out that Postfix does not support encrypted private key. I wonder is there any plan about adding such feature to postfix? Best, Yishen Miao (mys_721tx)

Re: Three trivial filtering questions

2013-08-04 Thread Stan Hoeppner
On 8/4/2013 10:13 PM, Ronald F. Guilmette wrote: Do I need to use that if I want to perform RHSBL checks? BTW, if you want to maximize potential hits on RHSBLs just short of doing body checks, you may want to give Sahil Tandon's TCP server based RHSBL header checker a spin. It grabs domains

Re: TLS with Encrypted Private Key

2013-08-04 Thread Wietse Venema
Yishen Miao: Hello world, I was configuring my postfix server for TLS support today and found out that Postfix does not support encrypted private key. I wonder is there any plan about adding such feature to postfix? There are no such plans. If random people can read a private key file that

Re: TLS with Encrypted Private Key

2013-08-04 Thread Yishen Miao
I'm trying to re-use my SSL certificate for Apache on postfix which is encrypted. It would be convent if postfix can support that. Also, an encrypted private key that is read-only for root sounds more secure than a plain one in the worse problem scenarios. :-p - Yishen On Aug 4, 2013, at 9:54