Re: local delivery, alias expansion, and subdomain matches

2016-01-30 Thread Viktor Dukhovni
> On Jan 30, 2016, at 8:03 PM, Curtis Villamizar > wrote: > > I'm asking a little advice. > > On most of my hosts mail is generated for root and then canonicaled to > root@fqdn and is relayed to the MSA on another host. This is by > design. > > relayhost = msa-fqdn > > There is an alias on

Re: moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread Viktor Dukhovni
> On Jan 31, 2016, at 1:01 AM, Curtis Villamizar > wrote: > > I use tcsh so: > > # sh -c 'postconf -c $(postconf -dh config_directory ) \ > -h multi_instance_directories' > postconf: warning: inet_protocols: disabling IPv4 name/address > support: Protocol not supported > # postconf -c

Re: moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread Curtis Villamizar
In message Viktor Dukhovni writes: > > On Jan 31, 2016, at 12:24 AM, Curtis Villamizar > > wrote: > > > >>> /usr/local/sbin/postconf: warning: inet_protocols: disabling IPv4 > >>> name/address support: Protocol not supported > >>> > >>> even though /etc/postfix/main.cf has inet_protocols = i

Re: Dumb Amavis/postfix question

2016-01-30 Thread Noel Jones
On 1/30/2016 9:51 PM, @lbutlr wrote: > When amavis tags a message for quarantine, what exactly does that mean? Where > does the message go? > > It appears to send the message to the LDA normally. When a message is tagged, amavisd delivers the message normally but includes **SPAM** or similar in

Re: moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread Curtis Villamizar
In message "@lbutlr" writes: > > On 30 Jan 2016, at 20:27, Curtis Villamizar wrote: > > Though postfix is compiled with /usr/local prefix (and I prefer the > > executables in /usr/local) I have configs in /etc/postfix so I start > > postfix with "-c /etc/postfix". > > ln -s /usr/local/etc/post

Re: moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread Viktor Dukhovni
> On Jan 31, 2016, at 12:24 AM, Curtis Villamizar > wrote: > >>> /usr/local/sbin/postconf: warning: inet_protocols: disabling IPv4 >>> name/address support: Protocol not supported >>> >>> even though /etc/postfix/main.cf has inet_protocols = ipv6 >> >> What happens when you run: >> >> #

Re: moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread Curtis Villamizar
In message <16f8c2b2-59cd-41b2-a452-5ec4b4442...@dukhovni.org> Viktor Dukhovni writes: > > On Jan 30, 2016, at 10:27 PM, Curtis Villamizar > > wrote: > > > > This is more of an annoyance than a serious bug since there is a > > simple workaround. But it seems to me that it is a bug. > > > > T

Re: moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread Viktor Dukhovni
> On Jan 30, 2016, at 10:27 PM, Curtis Villamizar > wrote: > > This is more of an annoyance than a serious bug since there is a > simple workaround. But it seems to me that it is a bug. > > Though postfix is compiled with /usr/local prefix (and I prefer the > executables in /usr/local) I have

Dumb Amavis/postfix question

2016-01-30 Thread @lbutlr
When amavis tags a message for quarantine, what exactly does that mean? Where does the message go? It appears to send the message to the LDA normally. Also, does amavis call spamd directly and if so should the spam lines still appear in maillog or am I running amavis AND spamd? So, two stupid

Re: moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread @lbutlr
On 30 Jan 2016, at 20:27, Curtis Villamizar wrote: > Though postfix is compiled with /usr/local prefix (and I prefer the > executables in /usr/local) I have configs in /etc/postfix so I start > postfix with "-c /etc/postfix”. ln -s /usr/local/etc/postfix /etc/ -- A: You can never go too far. B:

moving configs from /usr/local/etc/postfix to /etc/postfix

2016-01-30 Thread Curtis Villamizar
This is more of an annoyance than a serious bug since there is a simple workaround. But it seems to me that it is a bug. Though postfix is compiled with /usr/local prefix (and I prefer the executables in /usr/local) I have configs in /etc/postfix so I start postfix with "-c /etc/postfix". I get:

followup - RSA keys vs ECDSA only and CA certs

2016-01-30 Thread Curtis Villamizar
BTW- my mta2 now has RSA and ECDSA keys. mta2 and mta3 have the CA cert concatonated with the server cert since I use 2 0 1 TLSA records. There is no intermediate (I'd just replace the CA and change all of the TLSA records if the CA key was compromised). Currently MX are mta3 and mta1 for most do

local delivery, alias expansion, and subdomain matches

2016-01-30 Thread Curtis Villamizar
I'm asking a little advice. On most of my hosts mail is generated for root and then canonicaled to root@fqdn and is relayed to the MSA on another host. This is by design. relayhost = msa-fqdn There is an alias on the originating host for root but it doesn't seem to expand there. If that coul

Uncommon set-up: looking for an expert

2016-01-30 Thread Roman Doe
I'm looking for an expert who could take 30 min to 1 hour (for a fee) to assess the feasibility of the email hub I need to set-up. As a young entrepreneur this MTA is very critical for the success of my venture ; it must have specific (and quite uncommon) features: envelops and headers rewrite, bl

Re: SSL3_GET_RECORD:wrong version number:s3_pkt.c:345

2016-01-30 Thread @lbutlr
On 29 Jan 2016, at 10:17, Christian Schmitz wrote: > postconf |grep "tls" postconf -n should be used, always. (would probably have been 10-12 lines) $ postconf -n |grep "tls" smtp_tls_exclude_ciphers = MD5, aDSS, SRP, PSK, aECDH, aDH, SEED, IDEA, RC2, RC5 smtp_tls_protocols = !SSLv2, !SSLv3 smt

Re: The potential and abilities of Postfix

2016-01-30 Thread Roman Doe
Thanks Mike, I've been working on it for a few days, I'll let you know the solution I'll find (I think everything can be done with Postfix alone). Currently I am trying to find a freelance expert in mail servers (and of course especially Postfix) since there are other specific features I need to im

Re: consequences of Moving to 3.0.3 out of ports

2016-01-30 Thread @lbutlr
On Jan 28, 2016, at 11:01 PM, Curtis Villamizar wrote: > You should also set > sendmail_procname="/usr/local/sbin/sendmail" in /etc/rc.conf OK. Can’t hurt. > and set sendmail*_enable to NO (grep sendmail.\*_enable > /etc/defaults/rc.conf to see what to turn off). Those were set ages ago, but t