Viewing entries tagged with 'postfix'

CISCO breaks DKIM on their ASA/PIX (again)

Posted by Ralf Hildebrandt on 8 December 2011 | 0 Comments

Tags: , , ,

 

site which was using Postfix and a CISCO ASA with "smtp protocol
fixup" enabled.
I was able to work around the delivery problems by stripping the DKIM
headers on outgoing mails (as so often).
Some interesting info got out:
I've also discussed these results with local Cisco support and they
confirmed it's a known bug (not published) with DKIM and smtp inspection
engine in latest IOS versions.
This should be fixed in some newer IOS version (8.4(10)) which is not
public yet (latest is 8.4(2)).

Over the last few days I discussed SMTP delivery problems with a czech site which was using Postfix and a CISCO ASA with "smtp protocol fixup" enabled.

0 comments | Read the full post

Working around broken CISCO/PIX or ASA installations

Posted by Ralf Hildebrandt on 20 June 2011 | 0 Comments

Tags: , , ,

CISCOS's firewalls, predominantly the PIX and ASA have a feature called "smtp protocol fixup".

0 comments | Read the full post

New fail2ban rules for postscreen

Posted by Ralf Hildebrandt on 2 June 2011 | 0 Comments

Tags: , ,

fail2ban doesn't work properly with the new postscreen log entries, since those are different from the ones smtpd is generating.

0 comments | Read the full post

Postfix on ZFS woes

Posted by Ralf Hildebrandt on 19 February 2011 | 0 Comments

Tags: , ,

See this bugreport by Mark Martinec:

0 comments | Read the full post

ECC in Postfix

Posted by Ralf Hildebrandt on 26 January 2011 | 0 Comments

Tags: ,

Postfix (when linked against OpenSSL 1.x) can use ECC (elliptic curve cryptography)

0 comments | Read the full post

smf-sav milter vs. postfix-2.8.x

Posted by Ralf Hildebrandt on 26 January 2011 | 0 Comments

Tags: , , ,

Some people seem to use the smf-sav milter to implement sender address verification in Sendmail.

0 comments | Read the full post

DNS whitelisting support for Postfix

Posted by Ralf Hildebrandt on 6 November 2010 | 0 Comments

Tags: ,

postfix-2.8-20101105-nonprod is supporting DNS whitelist lookups now:

0 comments | Read the full post

Open Source Trends Days in Steinfurt

Posted by Ralf Hildebrandt on 24 September 2010 | 0 Comments

Tags: ,

Ich bin gerade zurück von zwei Tagen "Open Source Trend Days" in Steinfurt bei Ralf Spenneberg.

0 comments | Read the full post

New postscreen version

Posted by Ralf Hildebrandt on 12 September 2010 | 0 Comments

Tags: ,

Today I installed the new Postfix snapshot, containing a new version of the postscreen daemon.

0 comments | Read the full post

Reimplementation of fuzzy

Posted by Ralf Hildebrandt on 25 August 2010 | 0 Comments

Tags: , ,

Today I re-implemented "fuzzy" in Perl and transformed it into a policy-daemon. "fuzzy" used to create bounces containing helpful information on what the intended recipient might have been.

0 comments | Read the full post