Re: Upgrade postfix 2.11 to 3.1

2016-03-03 Thread yahoogroups
The upgrade to 3.1 was uneventful. I noticed you don't need to select an option for Dovecot.  Nice work.  As an FYI, I ran the online DROWN test without blocking SSLv2 but using the updated openssl. No DROWN issue detected. Apologies for the top post due to use of a smartphone.    Original

Re: Upgrade postfix 2.11 to 3.1

2016-03-03 Thread yahoogroups
I hate to bug you gurus, but can you guys mention which config file parameters go in, that is main or master. I simply don't know postfix that well, and RTFMing requires knowing which document to read. I've been hesitant to upgrade to postfix 3 given that everything is working on 2.11, but the

Re: Security: How to limit authentication attempts?

2016-02-21 Thread yahoogroups
‎Sorry about the top posting, but I'm on my phone.  Is this supposed to be 2 and 3 also rather than 20 and 30? in master.cf submission and smtps -o smtpd_soft_error=20 -o smtpd_hard_error=30   Original Message   From: Benny Pedersen Sent: Sunday, February 21, 2016 4:13 AM To:

Re: Blocking TLDs

2016-02-19 Thread yahoogroups
Actually I have a xyz domain that mirrors my com domain. I use it for test purposes.  Sent from my BlackBerry 10 smartphone.   Original Message   From: Sebastian Nielsen Sent: Friday, February 19, 2016 3:53 PM To: postfix-users@postfix.org Subject: SV: SV: Blocking TLDs 1: REJECT tells the

Re: Feedback on Postscreen Whitelist Article

2015-11-23 Thread yahoogroups
‎Regarding Spamhaus, I am periodically blacklisted on my hosted Web service provider because somebody ‎sets up an account on the same service, then spews spam. Because I share the same IP, I'm declared toxic.  I have set up a VPS, which of course has its own IP, not to get in this boat. But I

Re: Feedback on Postscreen Whitelist Article

2015-11-23 Thread yahoogroups
‎If wishes were horses. ;-)  My xyz domain is on the VPS. I'm going to switch systems in a few days.   Original Message   From: Viktor Dukhovni Sent: Monday, November 23, 2015 2:45 PM To: postfix-users@postfix.org Reply To: postfix-users@postfix.org Subject: Re: Feedback on Postscreen Whitelist

Re: DKIM Signature fails

2015-11-19 Thread yahoogroups
FWIW, I have the same problem. I saw it  as intermittent, but now that you tracked it down to the width of the lines , this makes sense. I do have access to my server console at the moment, but I'm running the highest rev of postfix 2. I believe it is rev 11.  So is this problem present in

Re: DKIM Signature fails

2015-11-19 Thread yahoogroups
I get the body hash failure on plain text. ‎   Original Message   From: Wietse Venema Sent: Thursday, November 19, 2015 10:24 AM To: Postfix users Reply To: Postfix users Subject: Re: DKIM Signature fails Andy A: >Following is the original message which?fails?the DKIM verification >at the

Re: DKIM Signature fails

2015-11-19 Thread yahoogroups
Ignore my comment. I was thinking s/mime.‎ Sorry about that.    Original Message   From: Wietse Venema Sent: Thursday, November 19, 2015 12:33 PM To: Postfix users Reply To: Postfix users Subject: Re: DKIM Signature fails yahoogro...@lazygranch.xyz: > I get the body hash failure on plain text.

Re: rejecting email from specific domains

2015-11-16 Thread yahoogroups
FWIW, I keep an xyz tld for test purposes. Point dot com to production and dot xyz for test. Yes I know there are ways to do this with a subdomain, but dot xyz is really cheap. I never investigated if there production users of xyz.     Original Message   From: Viktor Dukhovni Sent: Monday,

Re: Weak Ciphers

2015-11-08 Thread yahoogroups
‎http://disablessl3.com/ When I ran a series of email server checks, I was surprised that one claimed to disable ssl3 to avoid the poodle hack. Seems very unlikely to me. ‎ Anyway, the link above does suggest doing that.   Original Message   From: Alice Wonder Sent: Sunday, November 8, 2015

Re: OpenDKIM

2015-11-07 Thread yahoogroups
‎Note that Domain Keys is not the same as DKIM. DKIM supercedes Domain Keys.   http://support2.constantcontact.com/articles/FAQ/2213 I'm no guru on this, so correct away if I'm wrong. I can pass DKIM, but not Domain Keys. I don't know if it is possible to pass both tests in one implementation,