Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Matthias Andree
Am 21.03.2015 um 00:13 schrieb Wietse Venema: Viktor Dukhovni: I am curious what: ldd /usr/local/lib/libssl.so.8 reports and whether there are headers and or shared objects for libz in ports? In a FreeBSD 10.1 testvm: # ldd -a /usr/local/lib/libssl.so.8

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 11:06, Matthias Andree pisze: Am 21.03.2015 um 00:13 schrieb Wietse Venema: Viktor Dukhovni: I am curious what: ldd /usr/local/lib/libssl.so.8 reports and whether there are headers and or shared objects for libz in ports? In a FreeBSD 10.1 testvm: # ldd -a

Transitioning from 2.5.5 to 2.10.5

2015-03-21 Thread Steve Matzura
I am usually fairly good at this, but some of the organizational and configuration symbol-name differences between Postfix 2.5.5 and 2.10.5 are, well, way out there! :-) I thought I could drop the 2.5.5 .conf file into place on the 2.10.5 system. No! To many symbols that have changed, or section

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: Showing no compile-time zlib dependencies, because zlib is dynamically loaded. I've never tested OpenSSL's zlib-dynamic support. Have you tried (in separate windows or otherwise concurrent, with the server started first): $

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 09:50:03PM +0100, ?ukasz W?sikowski wrote: $ openssl s_server -nocert -cipher aNULL -accept 12345 $ openssl s_client -cipher aNULL -connect localhost:12345 That didn't crashed. Did you ever post ldd output for your smtpd? Please do, I can't seem to

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 11:06, Matthias Andree pisze: Am 21.03.2015 um 00:13 schrieb Wietse Venema: Viktor Dukhovni: I am curious what: ldd /usr/local/lib/libssl.so.8 reports and whether there are headers and or shared objects for libz in ports? In a FreeBSD 10.1 testvm: # ldd -a

Re: Transitioning from 2.5.5 to 2.10.5

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 02:53:12PM -0400, Steve Matzura wrote: I am usually fairly good at this, but some of the organizational and configuration symbol-name differences between Postfix 2.5.5 and 2.10.5 are, well, way out there! :-) I thought I could drop the 2.5.5 .conf file into place on

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 09:22:25PM +0100, ?ukasz W?sikowski wrote: I've restored mail server to previous state (with openssl from ports with zlib enabled). Some data: # pkg query %Ok %Ov openssl ZLIB on It seems that ./config sets zlib as zlib-dynamic: # grep zlib ./config

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: Showing no compile-time zlib dependencies, because zlib is dynamically loaded. I've never tested OpenSSL's zlib-dynamic support. Have you tried (in separate windows or otherwise concurrent, with the server started first): $

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Wietse Venema: ?ukasz W?sikowski: Yes, libz is linked into Postfix. # ldd /usr/local/libexec/postfix/smtpd /usr/local/libexec/postfix/smtpd: libpcre.so.1 = /usr/local/lib/libpcre.so.1 (0x80089) libssl.so.7 = /usr/lib/libssl.so.7 (0x800b02000)

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 22:51, Wietse Venema pisze: ?ukasz W?sikowski: W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: Showing no compile-time zlib dependencies, because zlib is dynamically loaded. I've never tested OpenSSL's zlib-dynamic support. Have you tried (in separate windows or

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Wietse Venema: Wietse Venema: As with the OP, Postfix when built with MySQL client has zlib explicitly linked in (my earlier test was done on a system where MySQL by mistake wasn't included in the build). Next step is to reproduce the smtpd crash. It negotiates a zlib-compressed

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 07:35:51PM -0400, Wietse Venema wrote: Next step is either for Lukas reproduce my result, or for us to reproduce his build from ports. Lukas, which port did you use, and what options did you select? For OpenSSL: $ /usr/local/bin/openssl version -a OpenSSL 1.0.1m 19

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Viktor Dukhovni: On Sun, Mar 22, 2015 at 12:45:05AM +0100, ?ukasz W?sikowski wrote: This bug is hard to reproduce - smtpd (and smtp also) crashes only when communicating with certain hosts (for example ebay in my case). I also saw this problem when this FreeBSD was trying to send e-mail

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-21 o 21:58, Viktor Dukhovni pisze: On Sat, Mar 21, 2015 at 09:50:03PM +0100, ?ukasz W?sikowski wrote: $ openssl s_server -nocert -cipher aNULL -accept 12345 $ openssl s_client -cipher aNULL -connect localhost:12345 That didn't crashed. Did you ever post ldd

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Wietse Venema: As with the OP, Postfix when built with MySQL client has zlib explicitly linked in (my earlier test was done on a system where MySQL by mistake wasn't included in the build). Next step is to reproduce the smtpd crash. It negotiates a zlib-compressed session without crashing,

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sun, Mar 22, 2015 at 12:45:05AM +0100, ?ukasz W?sikowski wrote: This bug is hard to reproduce - smtpd (and smtp also) crashes only when communicating with certain hosts (for example ebay in my case). I also saw this problem when this FreeBSD was trying to send e-mail to my other mail

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
?ukasz W?sikowski: Yes, libz is linked into Postfix. # ldd /usr/local/libexec/postfix/smtpd /usr/local/libexec/postfix/smtpd: libpcre.so.1 = /usr/local/lib/libpcre.so.1 (0x80089) libssl.so.7 = /usr/lib/libssl.so.7 (0x800b02000) libcrypto.so.7 =

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
?ukasz W?sikowski: W dniu 2015-03-21 o 21:35, Viktor Dukhovni pisze: Showing no compile-time zlib dependencies, because zlib is dynamically loaded. I've never tested OpenSSL's zlib-dynamic support. Have you tried (in separate windows or otherwise concurrent, with the server started

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Wietse Venema
Running openssl s_server and s_client from FreeBSD 10.1 ports successfully negotiates a sesion with zlib compression. As with the OP, Postfix when built with MySQL client has zlib explicitly linked in (my earlier test was done on a system where MySQL by mistake wasn't included in the build).

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 06:48:23PM -0400, Wietse Venema wrote: Running openssl s_server and s_client from FreeBSD 10.1 ports successfully negotiates a sesion with zlib compression. As with the OP, Postfix when built with MySQL client has zlib explicitly linked in (my earlier test was done

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Łukasz Wąsikowski
W dniu 2015-03-22 o 00:35, Wietse Venema pisze: Wietse Venema: Wietse Venema: As with the OP, Postfix when built with MySQL client has zlib explicitly linked in (my earlier test was done on a system where MySQL by mistake wasn't included in the build). Next step is to reproduce the smtpd

Re: Postfix / OpenSSL signal 11 on delivery from ebay

2015-03-21 Thread Viktor Dukhovni
On Sat, Mar 21, 2015 at 08:00:55PM -0400, Wietse Venema wrote: /usr/local/bin/openssl s_client -no_ssl2 -cipher aNULL -connect localhost:25 -starttls smtp WARNING: can't open config file: /usr/local/openssl/openssl.cnf CONNECTED(0003) 3438176:error:140790E5:SSL

Re: How to set wild card for rbl_override

2015-03-21 Thread Noel Jones
On 3/21/2015 7:42 PM, L. D. James wrote: I have a service from intuit.com that can't get past my reject_unknown_helo_hostname configuration. I'm trying to use the rbl_override to whitelist all the subhost of intuit.com. However, I can't get it to work. Consider if

Re: Transitioning from 2.5.5 to 2.10.5

2015-03-21 Thread Peter
On 03/22/2015 07:53 AM, Steve Matzura wrote: I am usually fairly good at this, but some of the organizational and configuration symbol-name differences between Postfix 2.5.5 and 2.10.5 are, well, way out there! :-) I thought I could drop the 2.5.5 .conf file into place on the 2.10.5 system.

How to set wild card for rbl_override

2015-03-21 Thread L. D. James
I have a service from intuit.com that can't get past my reject_unknown_helo_hostname configuration. I'm trying to use the rbl_override to whitelist all the subhost of intuit.com. However, I can't get it to work. I have tried: /etc/postfix/rbl_override: intuit.comok .intuit.comok

Re: How to set wild card for rbl_override

2015-03-21 Thread L. D. James
On 03/21/2015 08:53 PM, Noel Jones wrote: On 3/21/2015 7:42 PM, L. D. James wrote: I have a service from intuit.com that can't get past my reject_unknown_helo_hostname configuration. I'm trying to use the rbl_override to whitelist all the subhost of intuit.com. However, I can't get it to