Re: [courier-users] smtpaccess question

2014-09-24 Thread Sam Varshavchik
Lindsay Haisley writes: On Wed, 2014-09-24 at 18:33 -0400, Sam Varshavchik wrote: > With a caveat. "Most specific" here means "octet boundary". I should clarify > that in the man page. > > makesmtpaccess uses Net::CIDR to expand out CIDR to even octet boundaries. > So, an entry for 192.168.0.

Re: [courier-users] smtpaccess question

2014-09-24 Thread Lindsay Haisley
On Wed, 2014-09-24 at 18:33 -0400, Sam Varshavchik wrote: > With a caveat. "Most specific" here means "octet boundary". I should clarify > that in the man page. > > makesmtpaccess uses Net::CIDR to expand out CIDR to even octet boundaries. > So, an entry for 192.168.0.0/22 is going to get repl

[courier-users] Bash shell security issue - CVE-2014-6271

2014-09-24 Thread Sam Varshavchik
There was a security issue disclosed today regarding the bash shell. Fixes to bash should already be available on most platforms, or will be available shortly. My initial analysis is that servers running Courier would only be exploitable using this bash security issue if $HOME/.courier-defa

Re: [courier-users] smtpaccess question

2014-09-24 Thread Sam Varshavchik
Bowie Bailey writes: On 9/24/2014 4:22 PM, Lindsay Haisley wrote: > What is the order of processing and precedence of address blocks > in /etc/courier/smtpaccess/* ? It looks to me as if a more specific > block, either whitelist or reject, trumps a more general block so that a > reject of 192.1

Re: [courier-users] courier-unicode

2014-09-24 Thread Sam Varshavchik
Bowie Bailey writes: Thanks. Now that I know to look for the spec.in file, I can see that the dependency starts with courier-0.73.2. I do not see a dependency listed for courier-authlib, so I guess that answers that question for now. However, for the more general question: If I update courie

Re: [courier-users] Remove Received headers in outgoing authed email?

2014-09-24 Thread Sam Varshavchik
Jeff Potter writes: Hi List, How do we remove the initial Received header in outgoing email from our servers, or at least mask out the IP address of our sending user? We have an instance of smtpd running specifically for authenticated users (AUTH_REQUIRED=1). I looked through mailing lis

Re: [courier-users] new release?

2014-09-24 Thread Ángel González
Sam Varshavchik wrote: > I still want to do some more changes to the rpm packaging script, > first. That, pretty much, are the only pending changes I have now; > unless they affect you, you can just take the current snapshot, and go > with it. I found a minor bug (wrong EOL) in courier-imap. Depen

Re: [courier-users] Remove Received headers in outgoing authed email?

2014-09-24 Thread Lindsay Haisley
On Wed, 2014-09-24 at 14:28 -0400, Jeff Potter wrote: > How can we remove authed users source IP address? I would think > removing the initial Received from header would be the cleanest way, > but other solutions would work, too. Removing trace headers strikes me as generally a Bad Idea. Redactin

Re: [courier-users] smtpaccess question

2014-09-24 Thread Bowie Bailey
On 9/24/2014 4:22 PM, Lindsay Haisley wrote: > What is the order of processing and precedence of address blocks > in /etc/courier/smtpaccess/* ? It looks to me as if a more specific > block, either whitelist or reject, trumps a more general block so that a > reject of 192.168.1.0/24 followed - or

[courier-users] smtpaccess question

2014-09-24 Thread Lindsay Haisley
What is the order of processing and precedence of address blocks in /etc/courier/smtpaccess/* ? It looks to me as if a more specific block, either whitelist or reject, trumps a more general block so that a reject of 192.168.1.0/24 followed - or preceded - by a whitelist of 192.168.1.16 would block

Re: [courier-users] Remove Received headers in outgoing authed email?

2014-09-24 Thread Jeff Potter
Hi Matus, We have a few high-visibility users for whom leaking their IP address (and thus being able to roughly geo-locate them) isn’t good. We have logs (e.g. /var/log/maillog) that, given a message ID, can be correlated back to an IP address (from the auth part of the login) if that’s ever

Re: [courier-users] courier-unicode

2014-09-24 Thread Bowie Bailey
On 9/23/2014 7:49 PM, Sam Varshavchik wrote: > Bowie Bailey writes: > >> Is the courier-unicode package actually in use yet? I don't see any >> reference to it as a dependency in the courier or courier-authlib spec >> files and the installation instructions on the website say that it's >> needed a

Re: [courier-users] Remove Received headers in outgoing authed email?

2014-09-24 Thread Matus UHLAR - fantomas
On 24.09.14 08:37, Jeff Potter wrote: >How do we remove the initial Received header in outgoing email from our > servers, or at least mask out the IP address of our sending user? why? it's much easier to track problems (both by you and remote admins) if you don't remove those information. -- Mat

[courier-users] Remove Received headers in outgoing authed email?

2014-09-24 Thread Jeff Potter
Hi List, How do we remove the initial Received header in outgoing email from our servers, or at least mask out the IP address of our sending user? We have an instance of smtpd running specifically for authenticated users (AUTH_REQUIRED=1). I looked through mailing lists; no luck; and I tried

Re: [courier-users] new release?

2014-09-24 Thread Sam Varshavchik
Hanno Böck writes: I'd like to get the spf-related fixes and generally a new courier version pushed to Gentoo. I can do this with the snapshot, however I'd prefer a real release. Sam, can you make a new release based on the latest snapshot? I still want to do some more changes to the rpm packa

[courier-users] new release?

2014-09-24 Thread Hanno Böck
I'd like to get the spf-related fixes and generally a new courier version pushed to Gentoo. I can do this with the snapshot, however I'd prefer a real release. Sam, can you make a new release based on the latest snapshot? -- Hanno Böck http://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: BBB51E42