Lindsay Haisley writes:
On Wed, 2014-09-24 at 18:33 -0400, Sam Varshavchik wrote:
> With a caveat. "Most specific" here means "octet boundary". I should
clarify
> that in the man page.
>
> makesmtpaccess uses Net::CIDR to expand out CIDR to even octet boundaries.
> So, an entry for 192.168.0.
On Wed, 2014-09-24 at 18:33 -0400, Sam Varshavchik wrote:
> With a caveat. "Most specific" here means "octet boundary". I should clarify
> that in the man page.
>
> makesmtpaccess uses Net::CIDR to expand out CIDR to even octet boundaries.
> So, an entry for 192.168.0.0/22 is going to get repl
There was a security issue disclosed today regarding the bash shell. Fixes
to bash should already be available on most platforms, or will be available
shortly.
My initial analysis is that servers running Courier would only be exploitable
using this bash security issue if $HOME/.courier-defa
Bowie Bailey writes:
On 9/24/2014 4:22 PM, Lindsay Haisley wrote:
> What is the order of processing and precedence of address blocks
> in /etc/courier/smtpaccess/* ? It looks to me as if a more specific
> block, either whitelist or reject, trumps a more general block so that a
> reject of 192.1
Bowie Bailey writes:
Thanks. Now that I know to look for the spec.in file, I can see that
the dependency starts with courier-0.73.2. I do not see a dependency
listed for courier-authlib, so I guess that answers that question for now.
However, for the more general question: If I update courie
Jeff Potter writes:
Hi List,
How do we remove the initial Received header in outgoing email from our
servers, or at least mask out the IP address of our sending user?
We have an instance of smtpd running specifically for authenticated users
(AUTH_REQUIRED=1). I looked through mailing lis
Sam Varshavchik wrote:
> I still want to do some more changes to the rpm packaging script,
> first. That, pretty much, are the only pending changes I have now;
> unless they affect you, you can just take the current snapshot, and go
> with it.
I found a minor bug (wrong EOL) in courier-imap. Depen
On Wed, 2014-09-24 at 14:28 -0400, Jeff Potter wrote:
> How can we remove authed users source IP address? I would think
> removing the initial Received from header would be the cleanest way,
> but other solutions would work, too.
Removing trace headers strikes me as generally a Bad Idea. Redactin
On 9/24/2014 4:22 PM, Lindsay Haisley wrote:
> What is the order of processing and precedence of address blocks
> in /etc/courier/smtpaccess/* ? It looks to me as if a more specific
> block, either whitelist or reject, trumps a more general block so that a
> reject of 192.168.1.0/24 followed - or
What is the order of processing and precedence of address blocks
in /etc/courier/smtpaccess/* ? It looks to me as if a more specific
block, either whitelist or reject, trumps a more general block so that a
reject of 192.168.1.0/24 followed - or preceded - by a whitelist of
192.168.1.16 would block
Hi Matus,
We have a few high-visibility users for whom leaking their IP address (and thus
being able to roughly geo-locate them) isn’t good.
We have logs (e.g. /var/log/maillog) that, given a message ID, can be
correlated back to an IP address (from the auth part of the login) if that’s
ever
On 9/23/2014 7:49 PM, Sam Varshavchik wrote:
> Bowie Bailey writes:
>
>> Is the courier-unicode package actually in use yet? I don't see any
>> reference to it as a dependency in the courier or courier-authlib spec
>> files and the installation instructions on the website say that it's
>> needed a
On 24.09.14 08:37, Jeff Potter wrote:
>How do we remove the initial Received header in outgoing email from our
> servers, or at least mask out the IP address of our sending user?
why? it's much easier to track problems (both by you and remote admins) if
you don't remove those information.
--
Mat
Hi List,
How do we remove the initial Received header in outgoing email from our
servers, or at least mask out the IP address of our sending user?
We have an instance of smtpd running specifically for authenticated users
(AUTH_REQUIRED=1). I looked through mailing lists; no luck; and I tried
Hanno Böck writes:
I'd like to get the spf-related fixes and generally a new courier
version pushed to Gentoo.
I can do this with the snapshot, however I'd prefer a real release.
Sam, can you make a new release based on the latest snapshot?
I still want to do some more changes to the rpm packa
I'd like to get the spf-related fixes and generally a new courier
version pushed to Gentoo.
I can do this with the snapshot, however I'd prefer a real release.
Sam, can you make a new release based on the latest snapshot?
--
Hanno Böck
http://hboeck.de/
mail/jabber: ha...@hboeck.de
GPG: BBB51E42
16 matches
Mail list logo