Need an advice about my Postfix Before-Queue filter

Hello ppl,

I've implemented a postfix mail filtering gateway and I have an stupid question.

How can I check if my before-queue filtering through amavisd-new is working correctly?

I can see the spam handled correctly, but I always see proxy-accept in logs. Is this correct?

As example:
Feb  1 14:50:23 ironforge postfix/smtpd[25299]: proxy-accept: END-OF-MESSAGE: 250 2.7.0 Ok,
discarded, id=25810-05 - spam; from=<atendimento <at> imailing.com.br> to=<lolcat <at> autolol.com>
proto=SMTP helo=<smtp6.hospedagem-de-site.info>
Feb  1 14:50:23 ironforge postfix/smtpd[25299]: proxy-accept: END-OF-MESSAGE: 250 2.7.0 Ok,
discarded, id=25810-05 - spam; from=<atendimento <at> imailing.com.br> to=<lolcat <at> autolol.com>
proto=SMTP helo=<smtp6.hospedagem-de-site.info>
Feb  1 14:50:50 ironforge postfix/smtpd[25353]: proxy-accept: END-OF-MESSAGE: 250 2.7.0 Ok,
discarded, id=25810-06 - spam; from=<dixsaude <at> host20.anuncioforte.com.br>
to=<lolcat <at> autolol.com> proto=ESMTP helo=<host20.anuncioforte.com.br>

A proxy-reject error should not be more reasonable?

Thanks in advance,
Vinícius Ferrão

Local CA on Gentoo

Hi peeps,

I would like to know if someone successfully implemented a Local CA to sign services and servers using
Gentoo or other Linux.

I'm currently in a Mixed Environment (we have: Windows 2008R2, OS X Lion, Linux and FreeBSD), and I really
want a single solution, since I need certs for my servers, as example: a Postfix Mail Gateway, a W2k8 Domain
Controller, Exchange Server, Mac OS X Time Machine Server, etc.

Thanks in advance,
Vinícius

Re: Local CA on Gentoo

Re: Local CA on Gentoo

Hi,

IMHO EJBCA (http://www.ejbca.org) from the kind people at PrimeKey is
a very good open source CA solution. It is used in many large,
professional and certified/audited environments worldwide.

Regards,

Ewald

Op 10 feb. 2012 om 02:04 heeft "Vinícius Ferrão"
<viniciusferrao <at> cc.if.ufrj.br> het volgende geschreven:

> Hi peeps,
>
> I would like to know if someone successfully implemented a Local CA to sign services and servers using
Gentoo or other Linux.
>
> I'm currently in a Mixed Environment (we have: Windows 2008R2, OS X Lion, Linux and FreeBSD), and I really
want a single solution, since I need certs for my servers, as example: a Postfix Mail Gateway, a W2k8 Domain
Controller, Exchange Server, Mac OS X Time Machine Server, etc.
>
> Thanks in advance,
> Vinícius

Re: Local CA on Gentoo

I did, but it is far from trivial to do right....
And even then the mess in certificate fields and the non-standard way
all kinds of implementations are done over various services sometimes
drives me insane.....

Anyway, if your needs are fairly simple (1-2 level CA + signing
certificates) I can definitly recommend xca:
http://xca.sourceforge.net/

I has reasonable documentation and a nice GUI. It also produces well
defined certificates and most importantly has the ability to revoke
certificates that you have issued...

If you stick it's database into a VCS you can share the work.

/Ramon

2012/2/10 Vinícius Ferrão <viniciusferrao <at> cc.if.ufrj.br>:
> Hi peeps,
>
> I would like to know if someone successfully implemented a Local CA to sign services and servers using
Gentoo or other Linux.
>
> I'm currently in a Mixed Environment (we have: Windows 2008R2, OS X Lion, Linux and FreeBSD), and I really
want a single solution, since I need certs for my servers, as example: a Postfix Mail Gateway, a W2k8 Domain
Controller, Exchange Server, Mac OS X Time Machine Server, etc.
>
> Thanks in advance,
> Vinícius