TLS certificate validation woes

2011-12-20 Thread Bernhard Schmidt
Hi, I'm having an issue I can't quite understand at the moment. We are part of a larger PKI infrastructure run by the german NREN, which is in the end rooted at the Deutsche Telekom. - Deutsche Telekom Root CA 2 - DFN-Verein PCA Global - G01 - LRZ-CA - G01 -- this is ours -

hotmail rate limit

2011-12-20 Thread Helder Oliveira
Hello, Recently we start sending lots of emails to hotmail accounts and lots of them are in the active queue waiting for delivery for long time... Some of our clients have hotmail accounts for testing and are complaining about delivery times. Our server has a good reputation but that is not

Re: Vacation problems (again)

2011-12-20 Thread Claudio Prono
Il 19/12/2011 17.41, Wietse Venema ha scritto: Claudio Prono: cat 1324286018.V811I1ea270M489235.mail | strace /usr/bin/vacation -t1 testmedia But no way, no results at all This will only send a reply if the message has testmedia in the To: or Cc: header. Wietse In fact, this

Re: Vacation problems (again)

2011-12-20 Thread Ralf Hildebrandt
* Claudio Prono claudio.pr...@atpss.net: In fact, this is the header of the mail: Return-Path: clau...@mediaservice.net X-Original-To: testme...@domain.it Delivered-To: testme...@domain.it No To: or CC: header... I have also tried to specify the alias, like /usr/bin/vacation -a

Re: TLS certificate validation woes

2011-12-20 Thread Bernhard Schmidt
Am 20.12.2011 10:24, schrieb lst_ho...@kwsoft.de: Hello, Any idea how to allow all certificates issued by specific Sub-CAs, without trusting everyone? As far as i understand you have to list the complete chain but only your sub-CA to get it working. So create a smtpd_tls_CAfile with the

problem with dspam

2011-12-20 Thread fakessh @
hello list hello geek hello guru hello Fu I have done tests on my smtp server used to dspam. after problems of housing road I realized that dspam removes Return-Path header my emails are then intercepted as spam. I have not found a solution to my problem please help me i use a latest stable

Re: TLS certificate validation woes

2011-12-20 Thread lst_hoe02
Zitat von Bernhard Schmidt be...@birkenwald.de: Am 20.12.2011 10:24, schrieb lst_ho...@kwsoft.de: Hello, Any idea how to allow all certificates issued by specific Sub-CAs, without trusting everyone? As far as i understand you have to list the complete chain but only your sub-CA to get it

Re: hotmail rate limit

2011-12-20 Thread Helder Oliveira
Hello Andrew, thanks for the answer On Dec 20, 2011, at 10:16 AM, Andrew Beverley wrote: On Tue, 2011-12-20 at 09:22 +, Helder Oliveira wrote: Hello, Recently we start sending lots of emails to hotmail accounts and lots of them are in the active queue waiting for delivery for long

Re: Table has changed; restarting messages not appearing

2011-12-20 Thread Who Me
On the older box, every day I see a message stating that hash:/etc/postfix/relay_recipients has changed -- restarting. This happens when an smtpd(8) notices a table change after processing a request and just before accepting another. A sufficiently idle system will not have any mail

postfix devnull mailbox

2011-12-20 Thread Roberto Greiner
Hi, I'm trying to create a /dev/null mailbox, but didn't get much success following the recipe at http://www.serverwatch.com/columns/article.php/3844371/Forwarding-a-Postfix-Virtual-Alias-to-devnull.htm What I did was following: - Add a blackhole alias in /etc/aliases (blackhole: /dev/null),

Re: postfix devnull mailbox

2011-12-20 Thread Patrick Ben Koetter
* Roberto Greiner robe...@nead.unesp.br: I'm trying to create a /dev/null mailbox, but didn't get much success following the recipe at http://www.serverwatch.com/columns/article.php/3844371/Forwarding-a-Postfix-Virtual-Alias-to-devnull.htm What I did was following: - Add a blackhole alias

Re: postfix devnull mailbox

2011-12-20 Thread /dev/rob0
On Tuesday 20 December 2011 12:35:40 Roberto Greiner wrote: I'm trying to create a /dev/null mailbox, but didn't get much success following the recipe at http://www.serverwatch.com/columns/article.php/3844371/Forwarding-a -Postfix-Virtual-Alias-to-devnull.htm What I did was following: -

Re: postfix devnull mailbox

2011-12-20 Thread Dennis Carr
On Tue, 20 Dec 2011, /dev/rob0 wrote: Why do you want to do that? What would be wrong with rejecting that address? /dev/null is just the proper repository to recycle bits. We don't want to run out. =^_^= In all seriousness, I guess it depends on who you ask. For the original poster's

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 10:11, Dennis Carr wrote: In all seriousness, I guess it depends on who you ask. For the original poster's case, it's going to a noreply address, and I've seen cases where nore...@foo.bar is simply eaten, more often than not, rather than rejected. Besides, as far as I'm concerned,

Re: postfix devnull mailbox

2011-12-20 Thread Reindl Harald
Am 21.12.2011 00:47, schrieb Peter: On 21/12/11 10:11, Dennis Carr wrote: In all seriousness, I guess it depends on who you ask. For the original poster's case, it's going to a noreply address, and I've seen cases where nore...@foo.bar is simply eaten, more often than not, rather than

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 13:21, Reindl Harald wrote: so why does he not use the reply-button and what is he thinking does nore...@mail.tld mean? if you do not read the noreply-address it is the same as drop the messages, the only difference is on the storage I am not excusing the sender's actions, I am

Re: TLS certificate validation woes

2011-12-20 Thread Viktor Dukhovni
On Tue, Dec 20, 2011 at 10:24:04AM +0100, lst_ho...@kwsoft.de wrote: As far as I understand you have to list the complete chain but only your sub-CA to get it working. This is not the case: http://www.postfix.org/TLS_README.html#server_access Allow the remote SMTP client request

Re: warning: problem talking to service private/scache: Operation timed out

2011-12-20 Thread Sahil Tandon
On Thu, 2011-12-15 at 19:26:39 -0500, Wietse Venema wrote: In the scache client, the file descriptor sending operation is always preceeded and followed by a data read. For this reason we can't be triggering the same bug that postscreen triggered, but maybe there is another bug in FreeBSD file

Re: postfix devnull mailbox

2011-12-20 Thread Reindl Harald
Am 21.12.2011 01:29, schrieb Peter: On 21/12/11 13:21, Reindl Harald wrote: so why does he not use the reply-button and what is he thinking does nore...@mail.tld mean? if you do not read the noreply-address it is the same as drop the messages, the only difference is on the storage I am

Re: postfix devnull mailbox

2011-12-20 Thread Stan Hoeppner
On 12/20/2011 6:29 PM, Peter wrote: On 21/12/11 13:21, Reindl Harald wrote: so why does he not use the reply-button and what is he thinking does nore...@mail.tld mean? if you do not read the noreply-address it is the same as drop the messages, the only difference is on the storage I am not

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 16:01, Stan Hoeppner wrote: The act of delivery to a mailbox does not guarantee the message will be read by a human, nor replied to, ever. Thus there is zero practical difference, from the sender's POV, in this case, between delivering to /dev/null and to a mailbox whose contents

Re: postfix devnull mailbox

2011-12-20 Thread Peter
On 21/12/11 15:19, Reindl Harald wrote: Am 21.12.2011 01:29, schrieb Peter: On 21/12/11 13:21, Reindl Harald wrote: so why does he not use the reply-button and what is he thinking does nore...@mail.tld mean? if you do not read the noreply-address it is the same as drop the messages, the

Envelope sender address authorization and command line tool mail

2011-12-20 Thread Bartłomiej Romański
Hi Is there a way to restrict the From field for messages sent with the command line tool mail? For messages sent with SMTP we can simply do this: http://www.postfix.org/SASL_README.html#server_sasl_authz_envelope and it works fine, but users can execute: mail t...@test.test -a 'From: