Re: TLS library problem after updating "openssl"

2012-04-22 Thread Julien Vehent
see which ones break: openssl s_client -connect server:25 -starttls smtp -tls1_2 openssl s_client -connect server:25 -starttls smtp -tls1_1 openssl s_client -connect server:25 -starttls smtp -tls1 openssl s_client -connect server:25 -starttls smtp -ssl3 -- Julien Vehent - http://1nw.eu/!j

Re: some postscreen(8) stats

2012-04-21 Thread Julien Vehent
On 2012-04-01 1:11, Sahil Tandon wrote: Before enabling DNSBL blocklists on one site, I was tasked with gathering some postscreen(8) statistics. I liked the information display in a previous thread[1], but did not require the geoIP and mapping features in Julien Vehent's script. So, I cobbled to

Re: Postscreen statistics gathering

2012-01-15 Thread Julien Vehent
/Postscreen-Stats - Julien -- Julien Vehent - http://1nw.eu/!j

Re: Postscreen statistics gathering

2011-11-06 Thread Julien Vehent
On 06.11.2011 17:54, Wietse Venema wrote: Julien Vehent: Also for this last query, it looks like 65% of the IPs cannot be linked to a country (XX = unknown). I'm not very familiar with the way geo-ip databases gather their data, is that normal numbers for zombies ? This is not my exper

Re: Bypass of alias lookup when using submission port 587

2011-02-04 Thread Julien Vehent
On 02/04/2011 03:05 PM, Brian Evans - Postfix List wrote: On 2/4/2011 2:59 PM, Julien Vehent wrote: -- submission inet n - - - - smtpd -o receive_override_options=no_address_mappings # -o content_filter=dksign:[127.0.0.1]:10028 The above two lines are

Bypass of alias lookup when using submission port 587

2011-02-04 Thread Julien Vehent
Hi Postfix list, I'm having a bit of a problem with aliases and receiving emails on the submission port. I have a list of aliases in /etc/aliases, such as -- root: michel, kevin, julien -- I run postalias /etc/aliases and obtain a proper db file -- # ls -l /etc/aliases* -rw-r--r-

Re: Postfix, POP/IMAP server, virtual users, web administration - what do you use?

2010-09-27 Thread Julien Vehent
On Tue, 28 Sep 2010 00:29:46 +0200, Tomasz Chmielewski wrote: > On 28.09.2010 00:15, mouss wrote: > >>> I'm interested in this topic also, if anybody knows an interface that >>> just doesn't break manual configuration, I'm in ! >> >> is there really a need for a UI to manage postfix? If so, I'm

Re: Postfix, POP/IMAP server, virtual users, web administration - what do you use?

2010-09-27 Thread Julien Vehent
On Mon, 27 Sep 2010 13:06:46 +0200, David Touzeau wrote: > You can use "Artica" > > http://www.artica.fr > > > It is an Open Source web console for > Postfix/Spamassassin/Amavis/Milter-greylist ... and cyrus-imap/pop3 with an > LDAP backend system. > Quoting the website: "Do not install a

Re: Postfix, SASL and LDAPDB [definitely solved]

2010-05-28 Thread Julien Vehent
On Mon, 24 May 2010 16:43:18 -0400, Victor Duchovni wrote: > On Mon, May 24, 2010 at 09:18:44PM +0200, Julien Vehent wrote: > >> === case 2: authentification succeeds === >> >> Same authz-regex in slapd, same smtpclient com

Re: Postfix, SASL and LDAPDB [definitely solved]

2010-05-24 Thread Julien Vehent
On Mon, 24 May 2010 14:04:45 -0400, Victor Duchovni wrote: > On Mon, May 24, 2010 at 07:30:56PM +0200, Julien Vehent wrote: > >> Final solution provided by the Openldap mailing list: >> >> > Just change your authz-regexp line to >> > >> >

Re: Postfix, SASL and LDAPDB [definitely solved]

2010-05-24 Thread Julien Vehent
Final solution provided by the Openldap mailing list: > Just change your authz-regexp line to > > authz-regexp "^uid=([^,]+).*,cn=[^,]*,cn=auth$" > "ldap:///dc=linuxwall,dc=info??sub?(|(uid=$1)(mail=$1))" And the authentication works. I think it's worth a line in the sasl howto to

Re: Postfix, SASL and LDAPDB

2010-05-24 Thread Julien Vehent
On Fri, 21 May 2010 13:12:08 +0200, Julien Vehent wrote: > > > I re-read the SASL howto and I'm quite confinced that my configuration is > fine (but once again, you're never a 100% sure). > > Any idea ? > I found something interesting in the Slapd logs. When Po

Re: Postfix, SASL and LDAPDB

2010-05-21 Thread Julien Vehent
On Thu, 20 May 2010 18:46:34 +0200, Julien Vehent wrote: > Like most of the time, I discover that I've been too hasty to answer ! > > Postfix IS chrooted on Debian by default. At least, smtpd is. And by > removing the chroot in master.conf, I can now see that DIGEST-MD5 is

Re: Postfix, SASL and LDAPDB [solved]

2010-05-20 Thread Julien Vehent
Like most of the time, I discover that I've been too hasty to answer ! Postfix IS chrooted on Debian by default. At least, smtpd is. And by removing the chroot in master.conf, I can now see that DIGEST-MD5 is negociated with Slapd. (it still doesn't work though...) - May 20 18:32:13 samchiel

Re: Postfix, SASL and LDAPDB

2010-05-20 Thread Julien Vehent
nn=53 op=1 BIND dn="cn=cyrus administrator,ou=infrastructure,dc=linuxwall,dc=info" mech=DI GEST-MD5 sasl_ssf=128 ssf=128 May 20 11:38:10 samchiel slapd[1431]: conn=53 op=1 RESULT tag=97 err=0 text= May 20 11:38:10 samchiel slapd[1431]: conn=53 op=2 PROXYAUTHZ dn="cn=julien vehent,ou=

Re: Postfix, SASL and LDAPDB

2010-05-20 Thread Julien Vehent
-U postfix -H ldap://localhost -R linuxwall.info -X u:julien SASL/DIGEST-MD5 authentication started Please enter your password: SASL username: u:julien SASL SSF: 128 SASL data security layer installed. dn:cn=julien vehent,ou=people,dc=linuxwall,dc=info > > Is your SMTP server chroote

Re: Postfix, SASL and LDAPDB

2010-05-19 Thread Julien Vehent
On Wed, 19 May 2010 14:36:24 -0400, Victor Duchovni wrote: > > This looks different from my recollection of the the smtpd.conf you > posted, you may want to make sure that the "sasl_ldapdb_id" and > passwords are the same, and I don't know what "auto_transition" > does, but it may be pertinent al

Re: Postfix, SASL and LDAPDB

2010-05-18 Thread Julien Vehent
On Tue, 18 May 2010 13:54:51 -0400, Victor Duchovni wrote: > On Tue, May 18, 2010 at 07:47:12PM +0200, Julien Vehent wrote: > > > 1.Your Postfix is not directly linked with LDAP at all, it looks like > you are on a Debian system, and the LDAP table driver is dynamically

Re: Postfix, SASL and LDAPDB

2010-05-18 Thread Julien Vehent
On Tue, 18 May 2010 12:37:47 -0400, Victor Duchovni wrote: > On Tue, May 18, 2010 at 05:44:43PM +0200, Julien Vehent wrote: > >> I want to set up SASL authentication using LDAPDB, but it seems that >> postfix connects to LDAP but doesn't send anything to it... >> &

Postfix, SASL and LDAPDB

2010-05-18 Thread Julien Vehent
Hey guys, I want to set up SASL authentication using LDAPDB, but it seems that postfix connects to LDAP but doesn't send anything to it... I try to authenticate using 'auth plain ', and I receive : 535 5.7.8 Error: authentication failed: authentication failure Connection to LDAP works fine at t

Re: OT: The Book of Postfix

2010-01-27 Thread Julien Vehent
On Wed, 27 Jan 2010 19:29:17 +0100, Patrick Ben Koetter wrote: > * JORGE CARMINATI : >> Hi! I just want to know if the authors of this book are planning to >> release >> an updated revision with erratas fixes, etc and when (if applies). >> Thanks >> in advance. > > Good news: We are in the middl

smtp library in C

2010-01-25 Thread Julien Vehent
Hello Postfix folks, This question doesn't concern postfix directly, but since many of you are developpers... I would like to experiment a bit with writing a module for postfix, in C (not perl or python), and I'm looking for a SMTP and a MIME library. I would like postfix to submit emails to thi

Re: Server-side mail filtering (postfix+cyrus-imap)

2009-11-13 Thread Julien Vehent
Can you send the result of "grep sieve /etc/imapd.conf", I wonder if your sieve configuration in /etc/imapd.conf is correct... maybe the path of sievedir leads to a directory that's not writable... On Fri, 13 Nov 2009 13:30:23 +0100, nunatarsuaq wrote: > Same thing. > I logged in with a persona

Re: Server-side mail filtering (postfix+cyrus-imap)

2009-11-12 Thread Julien Vehent
Please Copy the list in your replies :) On Thu, 12 Nov 2009 17:01:09 +0100, nunatarsuaq wrote: > This is a good tutorial but when a newly created filter file should be > written? > > When I invoke > > # sieveshell -u cyrus -a cyrus localhost > First, you should log in with your personal accou

Re: Server-side mail filtering (postfix+cyrus-imap)

2009-11-10 Thread Julien Vehent
On 11/10/2009 02:35 PM, Eero Volotinen wrote: nunatarsuaq wrote: Anybody knows how to set up server-side filtering using Sieve? My server is running openSuse with postfix and cyrus-imap. I guess both of them have to be somehow configured to use Sieve as a filter. I need to move all messages ma

Re: Forwarding to two servers

2009-08-26 Thread Julien Vehent
Michael Orlitzky wrote: Jie Wang wrote: Hello everyone, Here is my question: I use Postfix as a SMTP gateway, and need to forward each email to two mail servers with the same domain names but different IP addresses. More specifically, I have two email servers, with ip_address_1 and ip_ad

Re: how can I search this mailing list

2009-08-26 Thread Julien Vehent
On Wed, 26 Aug 2009 15:08:15 +0300, Hilel New wrote: > how can I search all the archives of this mailing list for some key > work or expression? Why not asking google ? Use the following site command with your keywords site:http://archives.neohapsis.com/archives/postfix/ Julien -- http://

Re: Non deterministic usage of STARTTLS

2009-08-24 Thread Julien Vehent
Wietse Venema wrote: Noel Jones: -- Aug 22 07:52:12 zerhuel postfix/smtpd[2109]: initializing the server-side TLS engine This is logged ONCE when a postfix/smtpd process starts up. Then, it handles one or more SMTP clients. So, 'initializing the server-side TLS engine' is logged only b

Re: Non deterministic usage of STARTTLS

2009-08-24 Thread Julien Vehent
On Mon, 24 Aug 2009 10:33:31 -0500, Noel Jones wrote: > On 8/24/2009 9:51 AM, Julien Vehent wrote: >> Hello guys, >> >> This is my first email on the list, so I hope it doesn't break any rule >> :) >> >> I've been playing around with my postfix l

Non deterministic usage of STARTTLS

2009-08-24 Thread Julien Vehent
Hello guys, This is my first email on the list, so I hope it doesn't break any rule :) I've been playing around with my postfix logs to evaluate the percentage of MTA that are using STARTTLS when sending me emails. The result is pretty interesting, because some MTA are using TLS, but not all the