Re: tls vs ssl

2010-03-02 Thread Bill Landry
On 3/1/2010 11:51 PM, Stan Hoeppner wrote: Daniel L. Miller put forth on 3/2/2010 1:18 AM: OK - I'm an idiot. I'll just admit that up front and get it out of the way. Now that that's settled, what is the difference between SSL and TLS in a MUA - particularly Thunderbird - in a Postfix

Re: tls vs ssl

2010-03-02 Thread Stan Hoeppner
Bill Landry put forth on 3/2/2010 2:01 AM: On 3/1/2010 11:51 PM, Stan Hoeppner wrote: Daniel L. Miller put forth on 3/2/2010 1:18 AM: OK - I'm an idiot. I'll just admit that up front and get it out of the way. Now that that's settled, what is the difference between SSL and TLS in a MUA -

Re: tls vs ssl

2010-03-02 Thread Timo Sirainen
On 2.3.2010, at 9.18, Daniel L. Miller wrote: OK - I'm an idiot. I'll just admit that up front and get it out of the way. Now that that's settled, what is the difference between SSL and TLS in a MUA - particularly Thunderbird - in a Postfix context? http://wiki.dovecot.org/SSL tries to

Re: looking for solution

2010-03-02 Thread Ilja Beeskow
Dear Noel Your hint was useful too! The way suddenly seemed much too complicated and using the content_filter statement is the point where vw will definitely not be able to distinguish in- and outbound messages (in theory). Otherwise following your idea I could have forwarded outbound mail

RE: tls vs ssl

2010-03-02 Thread Jonathan Tripathy
Here is my 2 pence (Please someone correct me if I'm wrong). STARTTLS and TLS do eventually use the TLS protocol (Which I think is just an updated version of SSL). Different being is that with STARTTLS, the SMTP client (e.g. Thunderbird) will connect to the server unencrypted, then if the smtp

Bad Header: Non-encoded 8-bit data

2010-03-02 Thread Patric Falinder
Hi! I'm getting a couple of this bad header messages: 250 2.6.0 Ok, message with invalid header discarded, id=18740-03 - Non-encoded 8-bit data (char F6 hex) in message header 'Subject': Subject: Tar kraftorder i F\\366renade arabemir...) I think its because there is an ö -letter in the

Error main.cf path, is it just me or is it a bug ?

2010-03-02 Thread Gregory BELLIER
Hi ! I downloaded postfix-2.7.0 and I need to manually build it. The goal is to place everything in a different folder than usual : /opt/postfix To do that at the make install, I set the root_folder at /opt/postfix and then at the next questions, the default choice is good for me. However,

Re: Bad Header: Non-encoded 8-bit data

2010-03-02 Thread Magnus Bäck
On Tue, March 2, 2010 9:58 am, Patric Falinder said: I'm getting a couple of this bad header messages: 250 2.6.0 Ok, message with invalid header discarded, id=18740-03 - Non-encoded 8-bit data (char F6 hex) in message header 'Subject': Subject: Tar kraftorder i F\\366renade arabemir...)

Re: Error main.cf path, is it just me or is it a bug ?

2010-03-02 Thread Stan Hoeppner
Gregory BELLIER put forth on 3/2/2010 6:03 AM: Hi ! I downloaded postfix-2.7.0 and I need to manually build it. The goal is to place everything in a different folder than usual : /opt/postfix snip http://www.postfix.org/INSTALL.html 4.4 - Overriding built-in parameter default settings

Re: Error main.cf path, is it just me or is it a bug ?

2010-03-02 Thread Gregory BELLIER
Stan Hoeppner a écrit : Gregory BELLIER put forth on 3/2/2010 6:03 AM: Hi ! I downloaded postfix-2.7.0 and I need to manually build it. The goal is to place everything in a different folder than usual : /opt/postfix snip http://www.postfix.org/INSTALL.html 4.4 - Overriding

Re: Error main.cf path, is it just me or is it a bug ?

2010-03-02 Thread Wietse Venema
Gregory BELLIER: Ok then, no problem, I'll just build in a different way and at the make makefiles, I use the option CCARGS='-DDEF_CONFIG_DIR=\/opt/postfix\' Then, the make install, root_folder = /opt/postfix When the make install procedure says: Please specify the prefix for installed

virtual_mailbox_limit_maps

2010-03-02 Thread Mihamina Rakotomandimby
Manao ahoana, Hello, Bonjour, I took the administration of an old (Debian Etch + some Backports) Postfix server and in its main.cf file, there is an important parameter: virtual_mailbox_limit_maps. It is used that way: virtual_mailbox_limit_maps = proxy:mysql:/etc/postfix/sql/vmailsize

Re: virtual_mailbox_limit_maps

2010-03-02 Thread Patric Falinder
If you want you can try compiling it yourself with the VDA-patch, it's not hard. Just do step 3 on this guide: http://howtoforge.com/virtual-users-domains-postfix-courier-mysql-squirrelmail-ubuntu-9.10 Manao ahoana, Hello, Bonjour, I took the administration of an old (Debian Etch + some

Re: Postfix TLS requirements

2010-03-02 Thread Victor Duchovni
On Mon, Mar 01, 2010 at 11:09:08PM -0500, Alex wrote: I have an existing old postfix TLS server set up and working successfully. It was created several years ago and has been working fine ever since. You don't have to upgrade Postfix. I'm wondering what the benefits would be with

Re: tls vs ssl

2010-03-02 Thread Charles Marcus
On 2010-03-02 2:51 AM, Stan Hoeppner wrote: You've likely been using STARTTLS only, which doesn't require a key exchange as SSL/TLS does. ? You sure about that? I use only STARTTLS, and I always have to do the 'Confirm Security Exception' dance to accept the certificate the first time I send a

Re: tls vs ssl

2010-03-02 Thread Wietse Venema
Charles Marcus: On 2010-03-02 2:51 AM, Stan Hoeppner wrote: You've likely been using STARTTLS only, which doesn't require a key exchange as SSL/TLS does. ? You sure about that? I use only STARTTLS, and I always have to do the 'Confirm Security Exception' dance to accept the certificate

Re: Postfix TLS requirements

2010-03-02 Thread Alex
Hi, Most unlikely. I am not aware of any legacy versions of Postfix that support only SSLv2. Provided you have Postfix 2.3 or later, the TLS support is sufficiently modern and robust. I'm not happy saying that it's probably older than that. OpenSSL 1.0.0 will be released shortly, if you

Re: Postfix TLS requirements

2010-03-02 Thread Victor Duchovni
On Tue, Mar 02, 2010 at 01:15:17PM -0500, Alex wrote: Most unlikely. I am not aware of any legacy versions of Postfix that support only SSLv2. Provided you have Postfix 2.3 or later, the TLS support is sufficiently modern and robust. I'm not happy saying that it's probably older than

Re: tls vs ssl

2010-03-02 Thread Daniel L. Miller
Timo Sirainen wrote: I would have sworn I used to use Thunderbird with SSL specified and connected to my Postfix servers fine. Now, I can only connect in TLS mode. What did I break? You no longer have smtps port enabled? excerpted from master.cf - using non-standard port numbers for

Re: tls vs ssl

2010-03-02 Thread Victor Duchovni
On Tue, Mar 02, 2010 at 11:33:48AM -0800, Daniel L. Miller wrote: 192.168.0.110:126 inet n - - - - smtpd -o smtpd_tls_security_level=may -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject connect with

Re: Postfix TLS requirements

2010-03-02 Thread Alex
Hi, Postfix settings are documented in postconf(5). Unless you are an SSL expert who understands OpenSSL source code in detail, you really should not change the default settings, and generally don't need to know what they are. So is it at OpenSSL compile time that the ciphers would be

Re: Postfix TLS requirements

2010-03-02 Thread Victor Duchovni
On Tue, Mar 02, 2010 at 02:42:37PM -0500, Alex wrote: Postfix settings are documented in postconf(5). Unless you are an SSL expert who understands OpenSSL source code in detail, you really should not change the default settings, and generally don't need to know what they are. So is it

Re: tls vs ssl

2010-03-02 Thread Daniel L. Miller
Victor Duchovni wrote: On Tue, Mar 02, 2010 at 11:33:48AM -0800, Daniel L. Miller wrote: 192.168.0.110:126 inet n - - - - smtpd -o smtpd_tls_security_level=may -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject

Re: tls vs ssl

2010-03-02 Thread Victor Duchovni
On Tue, Mar 02, 2010 at 12:30:21PM -0800, Daniel L. Miller wrote: Ok - inferring from that, I tried: 192.168.0.110:128 inet n - - - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o

250 Backend Replied

2010-03-02 Thread Kaleb Hosie
When a user emailed one of our customers, this line came up in the logs: Mar 2 15:43:22 mailgate postfix/smtp[4830]: 89423170093: to=u...@domain.com, relay=domain.com.inbound15.mxlogicmx.net[208.65.144.13]:25, delay=1.4, delays=0/0/0.27/1.2, dsn=2.0.0, status=sent (250 Backend Replied

Re: 250 Backend Replied

2010-03-02 Thread Simon Morvan
Le 02/03/2010 22:01, Kaleb Hosie a écrit : When a user emailed one of our customers, this line came up in the logs: Mar 2 15:43:22 mailgate postfix/smtp[4830]: 89423170093: to=u...@domain.com, relay=domain.com.inbound15.mxlogicmx.net[208.65.144.13]:25, delay=1.4, delays=0/0/0.27/1.2,

Re: tls vs ssl

2010-03-02 Thread Noel Jones
On 3/2/2010 2:30 PM, Daniel L. Miller wrote: Victor Duchovni wrote: On Tue, Mar 02, 2010 at 11:33:48AM -0800, Daniel L. Miller wrote: 192.168.0.110:126 inet n - - - - smtpd -o smtpd_tls_security_level=may -o smtpd_sasl_auth_enable=yes -o

Re: Postfix TLS requirements

2010-03-02 Thread Victor Duchovni
On Tue, Mar 02, 2010 at 04:04:29PM -0500, Alex wrote: It's not possible to figure out which ciphers are offered to TLS clients on my server? It is possible, but you will most likely shoot yourself in the foot if you try to use this information to adjust Postfix settings. The

Re: 250 Backend Replied

2010-03-02 Thread Ralf Hildebrandt
* Kaleb Hosie kho...@spectraaluminum.com: When a user emailed one of our customers, this line came up in the logs: Mar 2 15:43:22 mailgate postfix/smtp[4830]: 89423170093: to=u...@domain.com, relay=domain.com.inbound15.mxlogicmx.net[208.65.144.13]:25, delay=1.4, delays=0/0/0.27/1.2,

Re: Out: 452 Insufficient system storage

2010-03-02 Thread donovan jeffrey j
On Mar 1, 2010, at 10:56 AM, lst_ho...@kwsoft.de wrote: Zitat von donovan jeffrey j dono...@beth.k12.pa.us: Greetings I had several of these on my primary MX this weekend and one just popped up. Can someone explain where this Insufficient system storage is ? both mail queues are

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Daniel V. Reinhardt
this is default on all my systems. MX1 /dev/disk1s3 77G51G26G66%/ MX2 /dev/disk0s3 234G46G 187G20%/ Can you show the partitioning of these systems? Thanks Daniel Reinhardt Website: www.cryptodan.com Email:

Re: Out: 452 Insufficient system storage

2010-03-02 Thread donovan jeffrey j
On Mar 2, 2010, at 7:31 PM, Daniel V. Reinhardt wrote: this is default on all my systems. MX1 /dev/disk1s3 77G51G26G66%/ MX2 /dev/disk0s3 234G46G 187G20%/ Can you show the partitioning of these systems? Thanks thats all i

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Wietse Venema
donovan jeffrey j: On Mar 2, 2010, at 7:31 PM, Daniel V. Reinhardt wrote: this is default on all my systems. MX1 /dev/disk1s3 77G51G26G66%/ MX2 /dev/disk0s3 234G46G 187G20%/ It may be worthwhile to run the Postfix

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Stan Hoeppner
donovan jeffrey j put forth on 3/1/2010 8:06 AM: Greetings I had several of these on my primary MX this weekend and one just popped up. Can someone explain where this Insufficient system storage is ? What filesystem are you using? Are you running out of inodes? /$ df -i -- Stan

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Wietse Venema
Wietse Venema: donovan jeffrey j: On Mar 2, 2010, at 7:31 PM, Daniel V. Reinhardt wrote: this is default on all my systems. MX1 /dev/disk1s3 77G51G26G66%/ MX2 /dev/disk0s3 234G46G 187G20%/ It may be

Re: Out: 452 Insufficient system storage

2010-03-02 Thread donovan jeffrey j
On Mar 2, 2010, at 9:03 PM, Wietse Venema wrote: It may be worthwhile to run the Postfix fsspace test program. - Download any Postfix source code that compiles on your system. - cd into the source tree, then execute the following commands: make makefiles cd src/util make fsspace

Re: Out: 452 Insufficient system storage

2010-03-02 Thread Wietse Venema
donovan jeffrey j: On Mar 2, 2010, at 9:03 PM, Wietse Venema wrote: It may be worthwhile to run the Postfix fsspace test program. - Download any Postfix source code that compiles on your system. - cd into the source tree, then execute the following commands: make makefiles

Re: Bad Header: Non-encoded 8-bit data

2010-03-02 Thread mouss
Magnus Bäck a écrit : On Tue, March 2, 2010 9:58 am, Patric Falinder said: I'm getting a couple of this bad header messages: 250 2.6.0 Ok, message with invalid header discarded, id=18740-03 - Non-encoded 8-bit data (char F6 hex) in message header 'Subject': Subject: Tar kraftorder i

RE: Recipient limit..but where?

2010-03-02 Thread Niemi Hannu
As a flashback. We could pinpoint the problem and it wasn't Postfix but sort of email scanner as suggested here Sorry for bothering you, though it might have taken a bit more to find the problem without excluding Postfix branch first Thank you a lot best regards hannu -Original