Re: International email addresses (RFC 6531)

2013-12-30 Thread Andreas Kasenides
On 29-12-2013 22:05, lst_ho...@kwsoft.de wrote: Zitat von Freek Dijkstra pub...@macfreek.nl: Hi all, Postfix does not support international email addresses, such as josé@example.org, as described by RFC 6530-6532. To be precise, the SMPTUTF8 (previously: UTF8SMTP) SMTP extension is not

Re: OT: Large corporate email systems - Exchange vs open source *nix based

2013-12-11 Thread Andreas Kasenides
On 10-12-2013 18:12, moparisthebest wrote: Hello, I don't know if you want to go this far as it requires slight customization, but my setup is postfix+postfixadmin+dovecot with owncloud providing storage (webdav), calendar (caldav), and contacts (carddav) as well as a nice web interface if you

Re: Postfix smtp relay in DMZ

2013-12-09 Thread Andreas Kasenides
On 06-12-2013 12:01, Robert Sander wrote: On 06.12.2013 10:13, Andreas Kasenides wrote: The scenario is a classic one: 1. one or more relay SMTP servers in DMZ 2. one or more backend SMTP servers on the inside network 3. There may or may not be separate incoming or outgoing designated SMTP

Postfix smtp relay in DMZ

2013-12-06 Thread Andreas Kasenides
Hi everyone. Probably this has been discussed before but could not find any good methods yet. The scenario is a classic one: 1. one or more relay SMTP servers in DMZ 2. one or more backend SMTP servers on the inside network 3. There may or may not be separate incoming or outgoing designated

reject_unknown_client

2013-12-05 Thread Andreas Kasenides
Hi All! On one of the servers I manage I have smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated reject_unknown_client permit Obviously this rejects any requests where the DNS (forward or reverse) fails. I am under increasing pressure to

Re: reject_unknown_client

2013-12-05 Thread Andreas Kasenides
Thank you for the reply. On 05-12-2013 15:26, Charles Marcus wrote: On 2013-12-05 7:50 AM, Andreas Kasenides andr...@cymail.eu wrote: smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated reject_unknown_client permit Obviously this rejects any requests where

Re: Server to Server TLS encryption?

2013-08-18 Thread Andreas Kasenides
My understanding is that this happens automatically during the negotiation phase if the remote server advertises TLS. At least this is what I thought happened during a recent test. And I was certainly using self-signed certificates. Actually very nice things begin to happen when TLS is enabled.

Re: Is this an attack?

2013-06-21 Thread Andreas Kasenides
On 20-06-2013 19:48, Noel Jones wrote: On 6/20/2013 5:49 AM, Andreas Kasenides wrote: Apparently there has been some harvesting going on of mail addresses where everything that has a @ is picked up. The question is: was this harvesting from our log files or our mail storage - a very serious

Re: Is this an attack?

2013-06-20 Thread Andreas Kasenides
On 19-06-2013 14:37, lst_ho...@kwsoft.de wrote: Zitat von Andreas Kasenides andr...@cymail.eu: One of my mail servers (postfix 2.6) has been target of what seems to me to be an attack. The attacker tried to deliver messages to a non-existent user names formed as a long hex string. It only

Is this an attack?

2013-06-19 Thread Andreas Kasenides
One of my mail servers (postfix 2.6) has been target of what seems to me to be an attack. The attacker tried to deliver messages to a non-existent user names formed as a long hex string. It only happened once from one particular client and kept going for some time. SMTP sessions were coming in