[opensuse-security] SUSE-SA:2010:011 postfix update
Hi, Can some one explain the reason behind modifying the /etc/sysconfing/postfix in a such a way that the custom additions that were added to the above mentioned file with POSTFIX_ADD_ have been removed after the update. Thank god I had set MAIL_CREATE_CONFIG="no" so /etc/postfix/main.cf is not altered and the mail system is working. But now I have to start editing allover again. What an update Togan -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org
Togan Muftuoglu wrote:
Can some one explain the reason behind modifying the /etc/sysconfing/postfix in a such a way that the custom additions that were added to the above mentioned file with POSTFIX_ADD_ have been removed after the update. Thank god I had set MAIL_CREATE_CONFIG="no" so /etc/postfix/main.cf is not altered and the mail system is working. But now I have to start editing allover again. What an update
Tell me about it... Could you post your /etc/sysconfing/postfix so we can try to reproduce? cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org
Hi,
Tell me about it... Could you post your /etc/sysconfing/postfix so we can try to reproduce?
Now, bug is also tracked in Bugzilla. https://bugzilla.novell.com/show_bug.cgi?id=580124 Greetings, Chris -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org
Ludwig Nussel wrote:
Tell me about it... Could you post your /etc/sysconfing/postfix so we can try to reproduce?
Well in one system all my POSTFIX_ADD_ additions have gone and on another one although my additions seem to stay below them the update has added the default settings. So for the first one I can not send I have to recreate the addons from the main.cf. I do not have a backup of the /etc/sysconfig/postfix (lesson learned create a backup always). I believe it has to do something the way I added the POSTFIX_ADD_ with a comment or without or have a space left above the default SUSE parameters. I can send you the additions that were placed into /etc/postfix/main.cf default_process_limit = 50 smtpd_timeout = ${stress?10}${stress:300}s smtpd_hard_error_limit = ${stress?1}${stress:20} smtpd_junk_command_limit = ${stress?1}${stress:100} header_checks = regexp:/etc/postfix/header_checks smtpd_sender_restrictions = "reject_unauth_pipelining, check_sender_access regexp:/etc/postfix/tag_as_originating.re, permit_mynetworks, permit_sasl_authenticated, permit_tls_clientcerts, check_client_access hash:/etc/postfix/relay, check_client_access hash:/etc/postfix/access, check_sender_access regexp:/etc/postfix/tag_as_foreign.re, reject_unknown_client" Togan -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org
Togan Muftuoglu wrote:
Ludwig Nussel wrote:
Tell me about it... Could you post your /etc/sysconfing/postfix so we can try to reproduce?
Well in one system all my POSTFIX_ADD_ additions have gone and on another one although my additions seem to stay below them the update has added the default settings. So for the first one I can not send I have to recreate the addons from the main.cf. I do not have a backup of the /etc/sysconfig/postfix (lesson learned create a backup always). I believe it has to do something the way I added the POSTFIX_ADD_ with a comment or without or have a space left above the default SUSE parameters. I can send you the additions that were placed into /etc/postfix/main.cf
default_process_limit = 50 smtpd_timeout = ${stress?10}${stress:300}s smtpd_hard_error_limit = ${stress?1}${stress:20} smtpd_junk_command_limit = ${stress?1}${stress:100} header_checks = regexp:/etc/postfix/header_checks smtpd_sender_restrictions = "reject_unauth_pipelining, check_sender_access regexp:/etc/postfix/tag_as_originating.re, permit_mynetworks, permit_sasl_authenticated, permit_tls_clientcerts, check_client_access hash:/etc/postfix/relay, check_client_access hash:/etc/postfix/access, check_sender_access regexp:/etc/postfix/tag_as_foreign.re, reject_unknown_client"
That smtpd_sender_restrictions value could be the reason. fillup produces garbage if POSTFIX_SMTPD_SENDER_RESTRICTIONS is set as the example in /etc/sysconfig/postfix suggests. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org
Ludwig Nussel wrote:
That smtpd_sender_restrictions value could be the reason. fillup produces garbage if POSTFIX_SMTPD_SENDER_RESTRICTIONS is set as the example in /etc/sysconfig/postfix suggests.
While in testing I had the SASL and the TLS options disabled but later when enabled the created main.cf was reverting back to pre-coded POSTFIX_SMTPD_SENDER_RESTRICTIONS. Since SuSEconfig did not create the desired main.cf when I edited the relevant the part in /etc/sysconfig/postfix I added as a POSTFIX_ADD then SuSEconfig was able to creat the desired main.cf Togan -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org
participants (3)
-
Christian Dengler -
Ludwig Nussel -
Togan Muftuoglu