Re: Compile errors on Mac Undefined symbols for architecture x86_64: _pcre_free_study

2014-10-14 Thread James Brown
On 14 Oct 2014, at 4:13 pm, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Oct 14, 2014 at 03:16:17PM +1100, James Brown wrote: Victor, changing the order so that it is: make -f Makefile.init makefiles \ CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH \

Re: Compile errors on Mac Undefined symbols for architecture x86_64: _pcre_free_study

2014-10-14 Thread Viktor Dukhovni
On Tue, Oct 14, 2014 at 05:19:34PM +1100, James Brown wrote: Thanks for your help Victor. make -f Makefile.init makefiles \ CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH \ -DDEF_SERVER_SASL_TYPE=\dovecot\ \ -DDEF_COMMAND_DIR=\/usr/local/sbin\ \ -DDEF_CONFIG_DIR=\/usr/local/etc/postfix\ \

typo in announcements (2.11.1 vs. 2.11.2)

2014-10-14 Thread li...@rhsoft.net
http://www.postfix.org/announcements.html * link correct http://www.postfix.org/announcements/postfix-2.11.2.html * 2.11.1 in the text should be 2.11.2 October 13, 2014: Postfix stable release 2.11.1 and legacy releases 2.10.4, 2.9.10, and 2.8.18. May 7, 2014: Postfix stable release 2.11.1.

Re: Compile errors on Mac Undefined symbols for architecture x86_64: _pcre_free_study

2014-10-14 Thread James Brown
On 14 Oct 2014, at 5:26 pm, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Oct 14, 2014 at 05:19:34PM +1100, James Brown wrote: Thanks for your help Victor. make -f Makefile.init makefiles \ CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH \ -DDEF_SERVER_SASL_TYPE=\dovecot\

Re: Is it possible to require authentication based on specific properties of the MUA or its connection?

2014-10-14 Thread Ben Johnson
On 10/13/2014 9:04 PM, Noel Jones wrote: On 10/13/2014 6:54 PM, Ben Johnson wrote: Hello! Is it possible to require authentication based on specific properties of an MUA or its connection? I would like to require all connections that originate from the php-fpm daemon (or its children) on

Re: OT: Fail2ban linux

2014-10-14 Thread LuKreme
On Oct 13, 2014, at 06:48, Markus Benning i...@markusbenning.de wrote: The mtpolicyd policy daemon has a plugin for directly adding IPs to a fail2ban target without the logging/parsing. It directly uses the unix socket for communication with the fail2ban daemon. https://www.mtpolicyd.org/

Re: Is it possible to require authentication based on specific properties of the MUA or its connection?

2014-10-14 Thread Noel Jones
On 10/14/2014 9:38 AM, Ben Johnson wrote: So, your suggestion to use authorized_submit_users looks very attractive in that respect. But given that this facility only controls the system users who may submit mail, I'm left wanting for a means by which to control authentication requirements,

Re: Is it possible to require authentication based on specific properties of the MUA or its connection?

2014-10-14 Thread Wietse Venema
Noel Jones: To use more robust username/password authentication, you must use SMTP AUTH, which of course requires mail be submitted via SMTP rather than sendmail(1). For submnission with /usr/sbin/sendmail: /etc/postfix/main.cf authorized_submit_users = !uid-of-hacked-acount, static:all

Re: Compile errors on Mac Undefined symbols for architecture x86_64: _pcre_free_study

2014-10-14 Thread Viktor Dukhovni
On Tue, Oct 14, 2014 at 09:13:41PM +1100, James Brown wrote: What version of MacOSX are you running? (Post the output of uname -sr.) The Postfix makedefs script has: # Darwin 12.x (MacOS X 10.8.x), maybe earlier, needs libresolv. case $RELEASE in ?.*|1[0-1].*) ;;

Bare HELO/EHLO

2014-10-14 Thread superstator .
Hello! I have a poorly behaved voicemail system that I am trying to funnel through a postfix relay, and I haven't been able to get past the issue of the voicemail wanting to send a bare EHLO (no hostname supplied at all) at the beginning of every transaction. I started a question over at

Re: Bare HELO/EHLO

2014-10-14 Thread li...@rhsoft.net
Am 14.10.2014 um 22:32 schrieb superstator .: I have a poorly behaved voicemail system that I am trying to funnel through a postfix relay, and I haven't been able to get past the issue of the voicemail wanting to send a bare EHLO (no hostname supplied at all) at the beginning of every

Re: Bare HELO/EHLO

2014-10-14 Thread Noel Jones
On 10/14/2014 3:32 PM, superstator . wrote: Hello! I have a poorly behaved voicemail system that I am trying to funnel through a postfix relay, and I haven't been able to get past the issue of the voicemail wanting to send a bare EHLO (no hostname supplied at all) at the beginning of every

Re: Bare HELO/EHLO

2014-10-14 Thread superstator .
That worked perfectly. Thanks! On Tue, Oct 14, 2014 at 1:48 PM, Noel Jones njo...@megan.vbhcs.org wrote: On 10/14/2014 3:32 PM, superstator . wrote: Hello! I have a poorly behaved voicemail system that I am trying to funnel through a postfix relay, and I haven't been able to get past the

Re: Bare HELO/EHLO

2014-10-14 Thread Benny Pedersen
On October 14, 2014 10:32:56 PM superstator . supersta...@gmail.com wrote: http://unix.stackexchange.com/questions/161901/disable-postfix-helo-checks-completely), and came to the conclusion that it's just not possible with postfix as is. No log, no problem to solve But post atleast postconf

Re: Compile errors on Mac Undefined symbols for architecture x86_64: _pcre_free_study

2014-10-14 Thread James Brown
On 15 Oct 2014, at 4:19 am, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Tue, Oct 14, 2014 at 09:13:41PM +1100, James Brown wrote: What version of MacOSX are you running? (Post the output of uname -sr.) The Postfix makedefs script has: # Darwin 12.x (MacOS X 10.8.x),

Re: Is it possible to require authentication based on specific properties of the MUA or its connection?

2014-10-14 Thread LuKreme
On 14 Oct 2014, at 08:38 , Ben Johnson b...@indietorrent.org wrote: Basically, my concern is that most sites have a legitimate need to send email in one form or another (notices to admins, CMS system emails, new user registrations, web form submissions, etc.), so I'd need to whitelist

mailboxes_search_base is missing

2014-10-14 Thread Téssio Fechine
Hello, I trying to configure postfix with ldap, and the howto I'm following uses the mailboxes_search_base parameter. The problem is that I can't find official documentation about this parameter anywhere! I used google site:postfix.org to search this parameter, but it isn't mentioned in the

Re: Bare HELO/EHLO

2014-10-14 Thread Noel Jones
On 10/14/2014 5:36 PM, Benny Pedersen wrote: On October 14, 2014 10:32:56 PM superstator . supersta...@gmail.com wrote: http://unix.stackexchange.com/questions/161901/disable-postfix-helo-checks-completely), and came to the conclusion that it's just not possible with postfix as is. No

Re: mailboxes_search_base is missing

2014-10-14 Thread Viktor Dukhovni
On Tue, Oct 14, 2014 at 09:18:36PM -0300, T?ssio Fechine wrote: I trying to configure postfix with ldap, and the howto I'm following uses the mailboxes_search_base parameter. See search_base in http://www.postfix.org/ldap_table.5.html and the BACKWARDS COMPATIBILITY section of that document.

Re: Compile errors on Mac Undefined symbols for architecture x86_64: _pcre_free_study

2014-10-14 Thread Viktor Dukhovni
On Wed, Oct 15, 2014 at 09:49:21AM +1100, James Brown wrote: Thanks Viktor - that worked! I added -lresolv to AUXLIBS: make -f Makefile.init makefiles \ CCARGS='-arch x86_64 -DUSE_TLS -DUSE_SASL_AUTH -DDEF_SERVER_SASL_TYPE=\dovecot\ -DDEF_COMMAND_DIR=\/usr/local/sbin\

OT: can anybody tell me what is wrong here

2014-10-14 Thread John
Sorry to bring this here but I cannot see what my problem is!! email to cogeco.ca is being rejected with the folowing message recipient address hidden host MX.cogeco.ca[216.221.81.26] said: 451 Postmaster Code 5 - #4.1.8 Domain of sender addressj...@klam.ca does not resolve. Le

Re: OT: can anybody tell me what is wrong here

2014-10-14 Thread Claus Assmann
On Tue, Oct 14, 2014, John wrote: recipient address hidden host MX.cogeco.ca[216.221.81.26] said: 451 Postmaster Code 5 - #4.1.8 Domain of sender addressj...@klam.ca does not resolve. Try again, it's just a temporary error. BTW: cool error message with those 8 bit chars in it: