Re: postfwd domain rules

2017-03-27 Thread terry1738
I have no clue why this is but as soon as I post to a forum I work the answer out. It has to be ESP or PSI or whatever. So what I was missing was if you use containers like this &_HOSTS { client_name~=\.domain1\.com$ client_name~=\.domain2\.com$

postfwd domain rules

2017-03-27 Thread terry1738
Sorry to bother you as I can normally figure things out but I have been struggling with postfwd rules for a week and not getting anywhere I host a number of domains so I want to have different outgoing restrictions for the different domains. For example our local surf club domain has 600 members

Re: Postfix cannot start tls: handshake failure

2017-03-27 Thread oakley
Here is the contents of my: *postconf -n* alias_database = hash:/etc/postfix/virtual alias_maps = hash:/etc/postfix/virtual append_dot_mydomain = no biff = no inet_interfaces = all inet_protocols = all mailbox_size_limit = 0 mydestination = $myhostname, (mydomain.com), localhost,

Re: (Cannot start TLS: handshake failure) - Please help

2017-03-27 Thread Viktor Dukhovni
> On Mar 27, 2017, at 1:09 PM, Mark Wise wrote: > > Really sorry. > http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-td89684.html You'll need to join the postfix-users list via majord...@postfix.org, as explained at

Re: Mail queue with 110.000 mails

2017-03-27 Thread Viktor Dukhovni
> On Mar 27, 2017, at 3:30 PM, Kenneth Marshall wrote: > > If you have a shortage of entropy, and you require it for your random > number source, it can slow TLS connections. The typical solution is > to use either a pseudo-random source or a hw-based entropy source. Not in

Re: Mail queue with 110.000 mails

2017-03-27 Thread Kenneth Marshall
On Mon, Mar 27, 2017 at 04:55:46PM -0300, Roberto Carna wrote: > So should we use this setting for TLS options in main.cf in order to > slow down the key generation time: > > tls_random_source = dev:/dev/urandom > > ??? > > > Thanks again. Yes, that is what we use here. Regards, Ken

Re: Mail queue with 110.000 mails

2017-03-27 Thread Roberto Carna
So should we use this setting for TLS options in main.cf in order to slow down the key generation time: tls_random_source = dev:/dev/urandom ??? Thanks again. 2017-03-27 16:30 GMT-03:00 Kenneth Marshall : > On Mon, Mar 27, 2017 at 04:06:46PM -0300, Alejandro Cabrera Obed wrote:

Re: Mail queue with 110.000 mails

2017-03-27 Thread Kenneth Marshall
On Mon, Mar 27, 2017 at 04:06:46PM -0300, Alejandro Cabrera Obed wrote: > Dear, thanksis it possible that the STARTTLS settings slow down mail > processing? In this mail relay server, the connections as "client" to the > corporate mail server are always encrypted with the TLS, with the >

Re: Postfix cannot start tls: handshake failure

2017-03-27 Thread oakley
I'm now using port 25. I've tested to see if my firewall or what ever was blocking it, but I can connect when I tested via; *openssl s_client -connect email-smtp.eu-west-1.amazonaws.com:25 -starttls imap* OUTCOME: CONNECTED(0003) didn't found

Re: Mail queue with 110.000 mails

2017-03-27 Thread Viktor Dukhovni
> On Mar 27, 2017, at 3:06 PM, Alejandro Cabrera Obed wrote: > > Dear, thanksis it possible that the STARTTLS settings slow down mail > processing? In this mail relay server, the connections as "client" to the > corporate mail server are always encrypted with the TLS,

Re: Mail queue with 110.000 mails

2017-03-27 Thread Alejandro Cabrera Obed
Dear, thanksis it possible that the STARTTLS settings slow down mail processing? In this mail relay server, the connections as "client" to the corporate mail server are always encrypted with the TLS, with the corresponding negotiation. Thanks and I will analyze all you said. Thanks to all.

Re: Mail queue with 110.000 mails

2017-03-27 Thread Geert Stappers
On Mon, Mar 27, 2017 at 06:45:05PM +, chaouche yacine wrote: > Hello, > > I am curious to know why do you have 110 000 mails in the mail queue > to begin with ? are they all deferred mail ? and if so, can you report > the log line that could contian the reason of the defer ? > > > It

Re: Mail queue with 110.000 mails

2017-03-27 Thread Viktor Dukhovni
> On Mar 27, 2017, at 2:27 PM, Roberto Carna wrote: > > Dear, yesterday I realized that the mail queue of my SMTP relay server > is about 110.000 mails, http://www.postfix.org/QSHAPE_README.html > and the warning log file tell me: > > Mar 20 10:00:08 RELAY1

Re: Mail queue with 110.000 mails

2017-03-27 Thread chaouche yacine
Hello, I am curious to know why do you have 110 000 mails in the mail queue to begin with ? are they all deferred mail ? and if so, can you report the log line that could contian the reason of the defer ? It happened to me once when I have (mis)configured quotas for my users. When a user

RE: Mail queue with 110.000 mails

2017-03-27 Thread Fazzina, Angelo
Hi, Use postqueue -p to look at what is in the queue. Use postsuper -h to move stuff to look at later. Read man pages of those commands if needed. -ALF -Angelo Fazzina Operating Systems Programmer / Analyst University of Connecticut,  UITS, SSG, Server Systems 860-486-9075 -Original

Mail queue with 110.000 mails

2017-03-27 Thread Roberto Carna
Dear, yesterday I realized that the mail queue of my SMTP relay server is about 110.000 mails, and the warning log file tell me: Mar 20 10:00:08 RELAY1 postfix/qmgr[55666]: warning: mail for [10.0.0.1] is using up 2 of 2 active queue entries Mar 20 10:00:09 RELAY1 postfix/qmgr[55666]:

Re: Postfix cannot start tls: handshake failure

2017-03-27 Thread Viktor Dukhovni
> On Mar 27, 2017, at 1:51 PM, oakley wrote: > > Appreciate the reply, Viktor. I've done everything you've suggested... Not quite, as you're not connecting to the right relay service. Do check an authoritative source on what relayhost you're supposed to use. > This is

Re: Postfix cannot start tls: handshake failure

2017-03-27 Thread oakley
Appreciate the reply, Viktor. I've done everything you've suggested and here is the report: This is when I use: *smtp_tls_security_level =encrypt* B3A80BEF2F: uid=0 from= localhost postfix/cleanup[5021]: B3A80BEF2F: message-id=<20170327174324.B3A80BEF2F@localhost.localdomain>

[no subject]

2017-03-27 Thread Soporte Infraestructura Operativa y Almacenamiento
Digest postfix-users@postfix.org end Este mensaje de correo electr?nico, incluidos los archivos adjuntos, es para el uso exclusivo de la persona a la que se ha enviado, y puede contener informaci?n que sea confidencial o protegida legalmente. Si usted no es el destinatario, o ha recibido

Re: Postfix cannot start tls: handshake failure

2017-03-27 Thread Viktor Dukhovni
> On Mar 27, 2017, at 1:09 PM, oakley wrote: >  > SSL_connect error to email-smtp.eu-west-1.amazonaws.com[52.51.114.192]:25: -1 > > localhost postfix/smtp[2100]: warning: TLS library problem: > error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO: > unknown

Re: Whitelisting past a sender with no A/MX record?

2017-03-27 Thread billgrant
Dominic On Mon, Mar 27, 2017, at 09:45 AM, Dominic Raferd wrote: > I think the rejection you are seeing is being generated by > reject_unknown_sender_domain. That's what I figured. > OKing an email in one restriction list only affects tests later in that same > list, not tests in > other

Postfix cannot start tls: handshake failure

2017-03-27 Thread oakley
Hello. Here is the situation in clear detail. I use Amazon SES and a paid email inbox, to send outgoing mail on my forum (Using MyBB) which sends out email activation links, subscriptions to threads, password reset links, etc. This has been working perfectly (without using postfix) however,

Re: Whitelisting past a sender with no A/MX record?

2017-03-27 Thread Dominic Raferd
On 27 March 2017 at 17:25, wrote: > Hello, > > I'm getting the following log msg for a user (u...@example.com), > > Mar 26 13:22:19 bigben postfix/ps2/smtpd[32481]: NOQUEUE: reject: > RCPT from chrelay.taleo.net[68.233.76.14]: 450 4.1.8 >

Whitelisting past a sender with no A/MX record?

2017-03-27 Thread billgrant
Hello, I'm getting the following log msg for a user (u...@example.com), Mar 26 13:22:19 bigben postfix/ps2/smtpd[32481]: NOQUEUE: reject: RCPT from chrelay.taleo.net[68.233.76.14]: 450 4.1.8 : Sender address rejected: Domain not found;