Re: Connection timed out due to dns timeouts

2013-02-10 Thread Angel L. Mateo
El 08/02/13 15:29, Viktor Dukhovni escribió: On Fri, Feb 08, 2013 at 09:29:22AM +0100, Angel L. Mateo wrote: We are having problems with dns lookups to one domain. I know is not a postfix problem, but a dns configuration error in that domain. But it is affecting our servers. The easie

Re: SASL question

2013-02-10 Thread Simon Walter
On 02/11/2013 05:46 AM, Reindl Harald wrote: what are you using for IMAP? if dovecot throw away the whole SASL crap! Don't you mean "...the whole *Cyrus* SASL crap"? Isn't "smtpd_sasl_type = dovecot" using the dovecot implementation of SASL? Simon -- htholidays.com

Re: SASL question

2013-02-10 Thread Reindl Harald
Am 10.02.2013 23:59, schrieb Curtis Maurand: > My currwnt setup has the imap connecting to a remote server on a private > network. The imap server is dbmail 2.2.17. > > Postfix is a member of the sasl group. There is an sasldb2 file just in > case. i am using dovecot as proxy in front of dbmai

Re: do i understand tls_policy_maps right?

2013-02-10 Thread Viktor Dukhovni
On Sun, Feb 10, 2013 at 09:22:34PM +0100, we...@zackbummfertig.de wrote: > When I set in main.cf: > > smtp_tls_policy_maps = hash:/etc/postfix/tls_policy > > and in > > /etc/postfix/tls_policy: > > example.com encrypt > > Will then every mail leaving my server to example.com

Re: SASL question

2013-02-10 Thread Curtis Maurand
Patrick Ben Koetter wrote: > * Curtis Maurand : >> >> >> I had a server running on gentoo and it was running OK, but the latest >> updates in the gentoo tree killed it.  So I spent yesterday afternoon >> setting up new mail server using Ubuntu 12.04 LTS. >> >> It took a >> while, but I have it al

Re: SASL question

2013-02-10 Thread Patrick Ben Koetter
* Curtis Maurand : > > > I had a server running on gentoo and it was running OK, but the latest > updates in the gentoo tree killed it.  So I spent yesterday afternoon > setting up new mail server using Ubuntu 12.04 LTS. > > It took a > while, but I have it all working except for smtp authent

Re: SASL question

2013-02-10 Thread Reindl Harald
Am 10.02.2013 21:31, schrieb Curtis Maurand: > I had a server running on gentoo and it was running OK, but the latest > updates in the gentoo tree killed it. So I > spent yesterday afternoon setting up new mail server using Ubuntu 12.04 LTS. > > It took a while, but I have it all working excep

SASL question

2013-02-10 Thread Curtis Maurand
I had a server running on gentoo and it was running OK, but the latest updates in the gentoo tree killed it.  So I spent yesterday afternoon setting up new mail server using Ubuntu 12.04 LTS. It took a while, but I have it all working except for smtp authentication (which was working on the gent

SASL question

2013-02-10 Thread Curtis Maurand
I had a server running on gentoo and it was running OK, but the latest updates in the gentoo tree killed it.  So I spent yesterday afternoon setting up new mail server using Ubuntu 12.04 LTS. It took a while, but I have it all working except for smtp authentication (which was working on the

do i understand tls_policy_maps right?

2013-02-10 Thread weber
hello, when i set in main.cf: smtp_tls_policy_maps= hash:/etc/postfix/tls_policy and do in /etc/postfix/tls_policy = externaldomain.com encrpyt will then every mail leaving my server to externaldomain.com forced using tls ? and when i set i

Re: error using certificate server

2013-02-10 Thread Viktor Dukhovni
On Sun, Feb 10, 2013 at 01:46:59PM +0100, deconya wrote: > status=deferred (Server certificate not verified) > > I was looking all the information about it in howots, and seems that the > problem is when my server exchanges credentials with smarthost. It seems > that not recognizes the CA certifi

Re: Large hash access lists - performance impact?

2013-02-10 Thread Noel Jones
On 2/10/2013 4:37 AM, Stefan Foerster wrote: > Hello world, > > does anyone have experience with very large (about 2k entries) hash > tables? Hash tables scale very well to hundreds of thousands of entries; 2k entries on an Atom processor with 1G ram won't be an issue. -- Noel Jones > >

Re: error using certificate server

2013-02-10 Thread deconya
Hi Recovering this thread Im configuring the CA certificates to validate the smarthost used to filter spam. At now the connection works but appears the message status=deferred (Server certificate not verified) I was looking all the information about it in howots, and seems that the problem is wh

Large hash access lists - performance impact?

2013-02-10 Thread Stefan Foerster
Hello world, does anyone have experience with very large (about 2k entries) hash tables? I'll have to implement a check_recipient_access rule within smtpd_recipient_restrictions - it will be only temporary, three days at most, but I'm still worried about the possible performance impact. OS would