Users June 2017

users@lists.ciphermail.com

5 participants
19 discussions

Re: [Djigzo users] Servers wont talk to me!

by Dino Edwards

There is certainly way to do it with Tomcat but I can’t really help with that, I’m not that familiar with it. I can tell you that Apache is a much more advanced http server with a lot more functionality than Tomcat. Tomcat is primarily designed to serve Java Servlets and JSPs. My method is simpler I believe because it does not require you changing the configuration of Tomcat and ciphermail. You simply put Apache in front of it with the mod_proxy_ajp module which communicates with Tomcat using the default config. Of course, it’s all up to you how you want to proceed. From: Paul Bronson [mailto:signaldeveloper@gmail.com] Sent: Monday, June 26, 2017 6:48 PM To: Dino Edwards <dino.edwards(a)mydirectmail.net> Subject: Re: [Djigzo users] Servers wont talk to me! I dont NEED to use apache, is there a way to do it with tomcat? On Mon, Jun 26, 2017 at 2:54 PM, Dino Edwards via Users <users(a)lists.djigzo.com<mailto:users@lists.djigzo.com>> wrote: The following settings in main.cf<http://main.cf> should get you started for TLS: # TLS parameters smtpd_tls_cert_file = /etc/ssl/certs/cert.cer smtpd_tls_key_file = /etc/ssl/certs/key.key smtpd_tls_CAfile = /etc/ssl/certs/root.cer #smtpd_use_tls=yes smtpd_tls_security_level = may smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_tls_loglevel = 1 I misspoke earlier. It’s been so long since I did this. Ciphermail comes bundled with Tomcat and it runs on port 8888 if I’m not mistaking. So, if you want to utilize Apache instead, you have to install mod_proxy_ajp module in Apache and setup an apache config like below: ProxyPass /djigzo http://localhost:8888/djigzo ProxyPassReverse /djigzo http://localhost:8888/djigzo ProxyPass /web http://localhost:8888/web ProxyPassReverse /web http://localhost:8888/web ProxyTimeout 3600 Changing the port has to be done within apache. So, if you want to use 443, you must of course install mod_ssl on apache, as well as certificate. I have a complete Apache config file if you want, let me know and I’ll post the relevant parts. From: Paul Bronson [mailto:signaldeveloper@gmail.com<mailto:signaldeveloper@gmail.com>] Sent: Monday, June 26, 2017 2:42 PM To: Dino Edwards <dino.edwards(a)mydirectmail.net<mailto:dino.edwards@mydirectmail.net>> Cc: users(a)lists.djigzo.com<mailto:users@lists.djigzo.com> Subject: Re: [Djigzo users] Servers wont talk to me! Okay I will try that. I am also noticing that mxtoolbox states this server isn't configured for TLS? I do not see any settings under interface for this. Is this set on postfix main.cf<http://main.cf><http://main.cf> file manually? Also if I wanted to remove the port or change the port to a default 443 do I need to do this within apache, or does the GUI do the config itself? On Mon, Jun 26, 2017 at 2:37 PM, Dino Edwards via Users <users(a)lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>>> wrote: I’m guessing sendmail got installed by accident or as part of something else. Not sure. I would either uninstall sendmail or change its port number if it’s absolutely necessary, although it doesn’t seem like that’s the case. Since the Web GUI runs on a different port, you can set whatever hostname you want in ciphermail as long as that hostname is resolvable by the outside world and as long as the back-end webserver (apache I assume) is configured to answer on that port. So, if you want the web portal to be https://webportal.domain.tld:8443/ in ciphermail under settings --> portal è Base URL you set it as follows: https://webportal.domain.tld:8443/web/portal/ From: Paul Bronson [mailto:signaldeveloper@gmail.com<mailto:signaldeveloper@gmail.com><mailto:signaldeveloper@gmail.com<mailto:signaldeveloper@gmail.com>>] Sent: Monday, June 26, 2017 2:13 PM To: Dino Edwards <dino.edwards(a)mydirectmail.net<mailto:dino.edwards@mydirectmail.net><mailto:dino.edwards@mydirectmail.net<mailto:dino.edwards@mydirectmail.net>>> Cc: users(a)lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>> Subject: Re: [Djigzo users] Servers wont talk to me! Hi Dino, Wonder why sendmail keeps trying to start then.. Odd. I'd really like to set the web portal to a different address versus the HELO name I meant, sorry. Paul On Mon, Jun 26, 2017 at 2:02 PM, Dino Edwards via Users <users(a)lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>>>> wrote: You don't need both. One or the other, although Postfix is recommended. Different site, meaning different server? -----Original Message----- From: Users [mailto:users-bounces@lists.djigzo.com<mailto:users-bounces@lists.djigzo.com><mailto:users-bounces@lists.djigzo.com<mailto:users-bounces@lists.djigzo.com>><mailto:users-bounces@lists.djigzo.com<mailto:users-bounces@lists.djigzo.com><mailto:users-bounces@lists.djigzo.com<mailto:users-bounces@lists.djigzo.com>>>] On Behalf Of Paul Bronson via Users Sent: Monday, June 26, 2017 1:57 PM To: Martijn Brinkers <martijn(a)ciphermail.com<mailto:martijn@ciphermail.com><mailto:martijn@ciphermail.com<mailto:martijn@ciphermail.com>><mailto:martijn@ciphermail.com<mailto:martijn@ciphermail.com><mailto:martijn@ciphermail.com<mailto:martijn@ciphermail.com>>>> Cc: users(a)lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>>> Subject: Re: [Djigzo users] Servers wont talk to me! IP Is not blacklisted, reverse DNS has been setup also. For some reason sendmail and postfix are using the same port? Do I need both? I would also like to set the web portal to a different site versus the hostname. On Fri, Jun 23, 2017 at 3:15 AM, Martijn Brinkers via Users < users(a)lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com><mailto:users@lists.djigzo.com<mailto:users@lists.djigzo.com>>>> wrote: > On 06/22/2017 10:32 PM, Paul Bronson via Users wrote: > > Okay here is what I have.. Still not sure what's wrong. > > > > http://imgur.com/a/k0ysM > > http://imgur.com/a/QuyaO > > http://imgur.com/a/9pNyl > > > > I have the IP listed in my networks. > > > > So my setup goes like this: > > > > Incoming email >> firewall >> email server > > > > Cipher mail is not used for incoming, but my outgoing setup is: > > > > Outgoing email >> email server >> ciphermail server >> firewall >> > internet > > > > For some reason I think something is getting clogged up on CM > > server. I have the email server (postfix) setup with a relayhost, so > > it will > forward > > all mails to the ciphermail server. The "locality" setting on my > > server > is > > "external" - does this matter? It's behind our firewall and should > > only > be > > sending mail off from our internal mail server. > > > > I had it on in the morning and the others told me they are getting a > > lot > of > > bouncebacks. I have a feeling this is because of the SFP records but > > I > want > > to make sure the server is setup properly. > > > > The OTP you helped me with works now also, thank you! > > > > Everything is inherited from global also. > > Once the email has been handled by the back-end (MPA), the email is > handed over to the MTA (Postfix). The MTA is responsible for > delivering the email. If the email is not delivered you should check > the MTA logs to see why. There can be a number of reasons why the > recipients mail server won't accept email: your IP address might be > dynamic (i.e., some consumer type ISP), there is no IP reverse name > for your IP address, the reverse IP name is not the same as the SMTP > helo name. your IP might be black-listed. > > Solving this does not involve making changes in the CipherMail global > settings. The only change in CipherMail that influences delivery is > the MTA helo name. > > Could you sent some MTA logs showing which mails were not delivered? > > What is the IP address the CipherMail gateway is using? > > Kind regards, > > Martijn Brinkers > > > -- > CipherMail email encryption > > Email encryption with support for S/MIME, OpenPGP, PDF encryption and > secure webmail pull. > > https://www.ciphermail.com > > Twitter: http://twitter.com/CipherMail > _______________________________________________ > Users mailing list > Users(a)lists.djigzo.com<mailto:Users@lists.djigzo.com><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com>><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com>>> > https://lists.djigzo.com/lists/listinfo/users > _______________________________________________ Users mailing list Users(a)lists.djigzo.com<mailto:Users@lists.djigzo.com><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com>><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com>>> https://lists.djigzo.com/lists/listinfo/users _______________________________________________ Users mailing list Users(a)lists.djigzo.com<mailto:Users@lists.djigzo.com><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com>><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com>>> https://lists.djigzo.com/lists/listinfo/users _______________________________________________ Users mailing list Users(a)lists.djigzo.com<mailto:Users@lists.djigzo.com><mailto:Users@lists.djigzo.com<mailto:Users@lists.djigzo.com>> https://lists.djigzo.com/lists/listinfo/users _______________________________________________ Users mailing list Users(a)lists.djigzo.com<mailto:Users@lists.djigzo.com> https://lists.djigzo.com/lists/listinfo/users

4 years, 5 months

[Djigzo users] DLP Encryption

by Paul Bronson

On other solutions it's possible to select HIPAA triggers in DLP and just encrypt it and let it go out. Does this solution do it? Paul

4 years, 5 months

[Djigzo users] Servers wont talk to me!

by Paul Bronson

Okay here is what I have.. Still not sure what's wrong. http://imgur.com/a/k0ysM http://imgur.com/a/QuyaO http://imgur.com/a/9pNyl I have the IP listed in my networks. So my setup goes like this: Incoming email >> firewall >> email server Cipher mail is not used for incoming, but my outgoing setup is: Outgoing email >> email server >> ciphermail server >> firewall >> internet For some reason I think something is getting clogged up on CM server. I have the email server (postfix) setup with a relayhost, so it will forward all mails to the ciphermail server. The "locality" setting on my server is "external" - does this matter? It's behind our firewall and should only be sending mail off from our internal mail server. I had it on in the morning and the others told me they are getting a lot of bouncebacks. I have a feeling this is because of the SFP records but I want to make sure the server is setup properly. The OTP you helped me with works now also, thank you! Everything is inherited from global also. thanks so much for your help

4 years, 5 months

[Djigzo users] Template

by Paul Bronson

Hi everyone, Can someone help me with inserting HTML into the OTP template? I have tired many different times and I am not familiar with the syntax that the system users. Any help would be appreciated. I have tried looking at websites for learning the syntax but It doesn't give a clear understanding of inserting the HTML.

4 years, 5 months

Re: [Djigzo users] Servers wont talk to me!

by Paul Bronson

Hi, Under settings >> general I Just don't know why it isn't working. Also, sendmail and postfix keep killing each other stating port already in use On Thu, Jun 22, 2017 at 4:56 PM, Stefan Michael Guenther < s.guenther(a)in-put.de> wrote: > Hi, > > > all mails to the ciphermail server. The "locality" setting on my server > is > > "external" - does this matter? It's behind our firewall and should only > be > > sending mail off from our internal mail server. > > > where did you define "external"? In the domain or user setting? Based on > "internal/external" ciphermail decides whether an email has to decrypted or > encrypted. This has nothing to with the location of the ciphermail server > in your network. > > Stefan >

4 years, 5 months

[Djigzo users] HTML Notifications

by Paul Bronson

hi, I'd like to add some HTML into mt OTP notifications. Is this possible? I have tried inserted and it gives me a big exception into MPA. - Paul

4 years, 5 months

[Djigzo users] Encryption Issue

by Paul Bronson

Hi All, I setup a new Ciphermail server and am getting some errors. Everything works except for the fact that I have my internal mail server relaying to the cipher mail server for PDF encryption but I am getting the following error: PDF encryption is disabled for the sender I have the following enabled: http://i63.tinypic.com/esuqma.png The configuration settings are extremely confusing. I want all mail NOT to be encryption EXCEPT for the subject tag set to [encrypt] If thats set, the message should get encrypted. Can someone help me out with which settings I need to turn on and off?

4 years, 5 months

[Djigzo users] Experience and Implementation Guide for RSASSA-PSS / BDEW EDI Energy

by Wolfgang Krauss

Dear Group since the 1st of June RSASSA-PSS is mandatory to be used in the German energy market for communication between market partners. What are your operational and implementation experiences ? For S/MIME we are using AES128 / Encryption with RAES-PKCS-1-v1_5 and signing algo. with RSA-PSS SHA512. For PGP our setup is SHA512 and encryption AES-128. Kind regards Wolfgang

4 years, 6 months

[Djigzo users] User password reset

by Laz C. Peterson

Hello everyone, I couldn't find any clear information on allowing existing users to reset a forgotten password. To recover the admin password, yes. But for an external or internal user, if they had received an encrypted mail in the distant past, created a password and have since forgotten ... what is the approach for allowing them to self-service their password reset? Much thanks for any help! ~ Laz Peterson

4 years, 6 months

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

Users June 2017