Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi there. Moving from sendmail to a macos 10.6 server that ships with postfix.. There are a few things that I'm trying to replicate from sendmail into postifx, but I'm not having much luck. Problems: 1- People on local network (e.g. from 192.168.0.0/24) can send email without authentication (so

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi again On 30 August 2010 22:56, Jean-Yves Avenard wrote: > 4- I have added in sendmail a very simple rule allowing to create > dummy email address such as: > reg-username-ser...@domain.com > > this is equivalent to usern...@domain.com > > In sendmail, I would ad in the main .mc file: > > LOCAL_

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Charles Marcus
On 2010-08-30 8:56 AM, Jean-Yves Avenard wrote: > Moving from sendmail to a macos 10.6 server that ships with postfix.. Per the welcome message you received when you joined the list: TO REPORT A PROBLEM see: http://www.postfix.org/DEBUG_README.html#mail This means, at a minimum, postfix version

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Wietse Venema
Jean-Yves Avenard: > > I thought I could add something like this in the canonical file: > > /^(reg)-(.*)-(.*)$/ ${2} > > > > However, I read in a few place that this would break recipient validation. > > Should add that while with the canonical above I do get the email to > the proper mailbox deli

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi On 30 August 2010 23:25, Charles Marcus wrote: > On 2010-08-30 8:56 AM, Jean-Yves Avenard wrote: >> Moving from sendmail to a macos 10.6 server that ships with postfix.. > > Per the welcome message you received when you joined the list: > > TO REPORT A PROBLEM see: > http://www.postfix.org/DE

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi On 30 August 2010 23:43, Wietse Venema wrote: > I kindly suggest that you read the manual (RTFM) before asking > questions that are already answered there. > > Canonical mappings can rewrite the envelope addresses (i.e.  what > Postfix delivers) without changing the addresses in the message

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
On 30 August 2010 23:58, Jean-Yves Avenard wrote: > I did *not* define remote_header_rewrite_domain anywhere, yet the > recipient is being rewritten. Unless I misread how this configuration > parameter actually works. > Oh, I see what's going on, as I'm doing my test from a local subnet, the add

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Adam Tauno Williams
On Mon, 2010-08-30 at 22:56 +1000, Jean-Yves Avenard wrote: > Hi there. > Moving from sendmail to a macos 10.6 server that ships with postfix.. > There are a few things that I'm trying to replicate from sendmail into > postifx, but I'm not having much luck. > Problems: > 2- When using a non encrypt

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi On 31 August 2010 01:00, Adam Tauno Williams wrote: > "A separate parameter controls Postfix SASL mechanism policy during a > TLS-encrypted SMTP session. The default is to copy the settings from the > unencrypted session:" > > smtpd_sasl_security_options = noanonymous, noplaintext > smtpd_sasl

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Wietse Venema
Jean-Yves Avenard: > Hi > > On 31 August 2010 01:00, Adam Tauno Williams wrote: > > "A separate parameter controls Postfix SASL mechanism policy during a > > TLS-encrypted SMTP session. The default is to copy the settings from the > > unencrypted session:" > > > > smtpd_sasl_security_options = no

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi On 31 August 2010 02:38, Wietse Venema wrote: > When reporting a problem, please follow the mailing list > welcome message's instructions. > > In particular, use "postconf -n" command output instead > of cut-and-paste from main.cf. I already posted those in an earlier message, am I supposed t

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Wietse Venema
Jean-Yves Avenard: > smtpd_sasl_auth_enable = yes > smtpd_sasl_authenticated_header = yes > smtpd_sasl_security_options = noanonymous, noplaintext > smtpd_sasl_tls_security_options = noanonymous If this does not announce the SASL mechanisms that you expect, then the missing mechanisms are not inst

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Wietse Venema
Wietse Venema: > Jean-Yves Avenard: > > smtpd_sasl_auth_enable = yes > > smtpd_sasl_authenticated_header = yes > > smtpd_sasl_security_options = noanonymous, noplaintext > > smtpd_sasl_tls_security_options = noanonymous > > If this does not announce the SASL mechanisms that you expect, then > the

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 02:57:05AM +1000, Jean-Yves Avenard wrote: > smtpd_pw_server_security_options = gssapi,cram-md5,plain,login > smtpd_recipient_restrictions = permit_sasl_authenticated > permit_mynetworks reject_unauth_destination check_policy_service > unix:private/policy permit > smtpd_sa

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Patrick Ben Koetter
I just started to follow this thread and had deleted the rest before. If I can be of any assistance in terms of Cyrus SASL let me know. Mac OS X runs its own special Cyrus SASL and I might not be able to help all the way. Anyway... p...@rick * Wietse Venema : > Wietse Venema: > > Jean-Yves Aven

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Adam Tauno Williams
On Mon, 2010-08-30 at 13:04 -0400, Wietse Venema wrote: > Jean-Yves Avenard: > > smtpd_sasl_auth_enable = yes > > smtpd_sasl_authenticated_header = yes > > smtpd_sasl_security_options = noanonymous, noplaintext > > smtpd_sasl_tls_security_options = noanonymous > If this does not announce the SASL m

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Victor Duchovni
On Mon, Aug 30, 2010 at 01:32:25PM -0400, Adam Tauno Williams wrote: > On Mon, 2010-08-30 at 13:04 -0400, Wietse Venema wrote: > > Jean-Yves Avenard: > > > smtpd_sasl_auth_enable = yes > > > smtpd_sasl_authenticated_header = yes > > > smtpd_sasl_security_options = noanonymous, noplaintext > > > sm

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi On 31 August 2010 03:04, Wietse Venema wrote: > > If this does not announce the SASL mechanisms that you expect, then > the missing mechanisms are not installed with the Cyrus SASL library. I do appreciate that you took the time to answer my questions.. Especially as I understand it you're th

Re: Migrating from sendmail, a few questions...

2010-08-30 Thread Jean-Yves Avenard
Hi On 31 August 2010 03:42, Victor Duchovni wrote: > > Probably not surprising when the Cyrus library is pre-empted by Apple's > "pw" server, and the mechanism list is defined in an Apple-specific > configuration parameter. I just compiled sendmail for mac os 10.6. And it's behaving perfectly w

Re: Migrating from sendmail, a few questions...

2010-08-31 Thread Victor Duchovni
On Tue, Aug 31, 2010 at 01:53:21PM +1000, Jean-Yves Avenard wrote: > Hi > > On 31 August 2010 03:42, Victor Duchovni > wrote: > > > > Probably not surprising when the Cyrus library is pre-empted by Apple's > > "pw" server, and the mechanism list is defined in an Apple-specific > > configuration