<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>danielmiessler.com &#187; Postfix</title>
	<atom:link href="http://danielmiessler.com/categories/postfix/feed" rel="self" type="application/rss+xml" />
	<link>http://danielmiessler.com</link>
	<description>grep understanding</description>
	<lastBuildDate>Sun, 12 Feb 2012 09:25:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>What MTA Do The Big Universities Use?</title>
		<link>http://danielmiessler.com/blog/what-mta-do-the-big-universities-use</link>
		<comments>http://danielmiessler.com/blog/what-mta-do-the-big-universities-use#comments</comments>
		<pubDate>Sat, 14 Jun 2008 04:08:35 +0000</pubDate>
		<dc:creator>Daniel Miessler</dc:creator>
				<category><![CDATA[Academics]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Postfix]]></category>
		<category><![CDATA[System Administration]]></category>

		<guid isPermaLink="false">http://dmiessler.com/?p=2462</guid>
		<description><![CDATA[Ever wonder what mail servers people run? I found myself wondering what the top universities used, so I wrote a lame little script to go and query the top 50 schools from this list, find out their mail servers, and then netcat to them to see what they respond with. The results were interesting. I [...]]]></description>
			<content:encoded><![CDATA[<p>Ever wonder what mail servers people run? I found myself wondering what the top universities used, so I wrote <a href="http://dmiessler.com/files/check_mail_servers.sh">a lame little script</a> to go and query <a href="http://www.usnews.com/usnews/edu/college/rankings/brief/natudoc/tier1/t1natudoc_brief.php">the top 50 schools from this list</a>, find out their mail servers, and then netcat to them to see what they respond with.</p>

<p><a href="http://dmiessler.com/files/results">The results</a> were interesting. I was specifically wondering how the war between <a href="http://www.sendmail.org">Sendmail</a> and <a href="http://www.postfix.org">Postfix</a> was going. As expected, Sendmail is still winning, but Postfix seems to be holding its own.</p>

<div class="wp_syntax">
220 perseus.services.brown.edu ESMTP <strong>Sendmail</strong> X.X.X; Tue, 9 May 2006 17:06:13 -0400 (EDT)<br />
220 mailhub4.dartmouth.edu ESMTP <strong>Sendmail</strong> 8.13.5/DND2.0/8.13.5; Tue, 9 May 2006 17:06:16 -0400<br />
220 ns3.br.<em>harvard</em>.edu ESMTP <strong>Postfix</strong><br />
220 nisc.net.isc.upenn.edu ESMTP <strong>Postfix</strong><br />
220 emfw1.<em>Princeton</em>.EDU ESMTP <span style="color: red;">(0ebdea0d60768e14e7c57b1a3713dd99)</span><br />
220 mr5.its.yale.edu ESMTP <strong>server ready</strong> at Tue, 9 May 2006 17:06:18 -0400<br />
220 <em>MIT</em>.EDU ESMTP Sendmail <strong>(no collect or third party calls)</strong> at Tue, 9 May 2006 17:06:19 -0400 (EDT)<br />
220 water-ox.its.caltech.edu ESMTP Postfix<br />
220 mx4.<em>stanford</em>.edu ESMTP <strong>Postfix</strong><br />
220-pohl.acpub.duke.edu ESMTP Duke University <strong>Sendmail</strong> 8.12.10/Duke-5.0.0;<br />
220 MailRouter-2.wustl.edu ESMTP <strong>Mirapoint</strong> 3.5.8-GR; Tue, 9 May 2006 16:06:26 -0500 (CDT)<br />
220 relay.it.northwestern.edu ESMTP <strong>Postfix</strong><br />
220 ipex2.johnshopkins.edu ESMTP<br />
(&#8211;<a href="http://dmiessler.com/files/results.txt">snipped</a>&#8211;)
</div>

<p>So out of 36 responses I got 7 with Postfix in the banner. If we take that highly unscientific sample and call it legit, we&#8217;re looking at roughly 20% of top-50 universities using Postfix. Not bad.</p>

<p>Aside from the MTA war, though, it was just interesting to see what these guys were putting in their banners. Check out the Princeton one, for example &#8212; they have some sort of secret message encoded with MD5 in theirs. And MIT points out that they don&#8217;t want any collect or third party calls. Nice.</p>

<p>Anyway, here are the results and the tool I used. Be sure to check out the raw output as well; there are quite a few interesting tidbits in there.:</p>

<h3>Files</h3>

<p>[ <a href="http://dmiessler.com/files/results.txt">The Results</a> ]<br />
[ <a href="http://dmiessler.com/files/orig_server_strings.txt">The Raw Results</a> ]<br />
[ <a href="http://dmiessler.com/files/check_mail_servers.sh.txt">The Script I Used</a> ]<br />
[ <a href="http://dmiessler.com/files/universities">The List of Universities I Used</a> ]</p>
<div id="crp_related"><h3>Related Content</h3><ul><li><a href="http://danielmiessler.com/blog/what-mail-server-do-the-big-universities-use" rel="bookmark" class="crp_title">What Mail Server Do The Big Universities Use?</a></li><li><a href="http://danielmiessler.com/blog/what-mail-server-do-the-fortune-100-companies-use" rel="bookmark" class="crp_title">What Mail Server Do The Fortune 100 Companies Use?</a></li><li><a href="http://danielmiessler.com/blog/postfix-courier-imap-mailapp-and-certificates" rel="bookmark" class="crp_title">Postfix, Courier-Imap, Mail.app, and Certificates</a></li><li><a href="http://danielmiessler.com/blog/how-to-get-postfix-to-use-smtp-auth-without-mysql" rel="bookmark" class="crp_title">How To Get Postfix To Use SMTP-AUTH *WITHOUT* MySQL</a></li><li><a href="http://danielmiessler.com/blog/an-nmap-scan-of-the-iphone-20-software" rel="bookmark" class="crp_title">An Nmap Scan of the iPhone 2.0 Software</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://danielmiessler.com/blog/what-mta-do-the-big-universities-use/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Postfix, Courier-Imap, Mail.app, and Certificates</title>
		<link>http://danielmiessler.com/blog/postfix-courier-imap-mailapp-and-certificates</link>
		<comments>http://danielmiessler.com/blog/postfix-courier-imap-mailapp-and-certificates#comments</comments>
		<pubDate>Wed, 21 Feb 2007 03:01:19 +0000</pubDate>
		<dc:creator>Daniel Miessler</dc:creator>
				<category><![CDATA[Courier]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Postfix]]></category>
		<category><![CDATA[Sysadmin]]></category>

		<guid isPermaLink="false">http://dmiessler.com/archives/1158</guid>
		<description><![CDATA[I just finished getting Mail.app to recognize two seperate SSL certs from my server &#8212; one for imap.dmiessler.com, and another for smtp.dmiessler.com. This was less than trivial (mostly due to my own stupidity). What this means is that I can finally use real domain names in my certificates (self-signed) for two separate hostnames while avoiding [...]]]></description>
			<content:encoded><![CDATA[<p>I just finished getting Mail.app to recognize two seperate SSL certs from my server &#8212; one for imap.dmiessler.com, and another for smtp.dmiessler.com. This was less than trivial (mostly due to my own stupidity).</p>

<p>What this means is that I can finally use real domain names in my certificates (self-signed) for two separate hostnames while avoiding the annoying prompts that OS X likes to throw when it senses tomfoolery.</p>

<p>Here are the steps:</p>

<ul>
    <li>Create your Postfix certificates the way Weitse wants you to, using your SMTP hostname.</li>
    <li>Import both the CA cert <strong>and</strong> your actual Postfix certificate into OS X.</li>
    <li>For IMAP, edit your imapd.cnf file to reflect your IMAP hostname, etc.</li>
    <li>Run <code>mkimapdcert</code>.</li>
    <li>Import that certificate into OS X.</li>
</ul>

<p>Now when you open Mail.app you should not get prompted to accept any certificates. The trick is that you need to import the CA&#8217;s cert on the Postfix side or it won&#8217;t work. But with courier this is not required. It has something to do with the format of the certificates being different.</p>

<p>It&#8217;s on my list of things to research, but for now I&#8217;m just happy I got it working exactly as I want it.</p>
<div id="crp_related"><h3>Related Content</h3><ul><li><a href="http://danielmiessler.com/blog/linux-filtering-spam-and-viruses-without-amavis" rel="bookmark" class="crp_title">Linux: Filtering Spam And Viruses Without Amavis</a></li><li><a href="http://danielmiessler.com/blog/mailapp-is-imap-retarded" rel="bookmark" class="crp_title">Mail.app is IMAP-Retarded</a></li><li><a href="http://danielmiessler.com/blog/how-to-get-postfix-to-use-smtp-auth-without-mysql" rel="bookmark" class="crp_title">How To Get Postfix To Use SMTP-AUTH *WITHOUT* MySQL</a></li><li><a href="http://danielmiessler.com/blog/filtering-non-gmail-email-with-gmail" rel="bookmark" class="crp_title">Filtering Non-Gmail Email With Gmail</a></li><li><a href="http://danielmiessler.com/blog/what-mail-server-do-the-big-universities-use" rel="bookmark" class="crp_title">What Mail Server Do The Big Universities Use?</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://danielmiessler.com/blog/postfix-courier-imap-mailapp-and-certificates/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How To Get Postfix To Use SMTP-AUTH *WITHOUT* MySQL</title>
		<link>http://danielmiessler.com/blog/how-to-get-postfix-to-use-smtp-auth-without-mysql</link>
		<comments>http://danielmiessler.com/blog/how-to-get-postfix-to-use-smtp-auth-without-mysql#comments</comments>
		<pubDate>Sat, 28 Oct 2006 19:49:12 +0000</pubDate>
		<dc:creator>Daniel Miessler</dc:creator>
				<category><![CDATA[Gentoo]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Postfix]]></category>

		<guid isPermaLink="false">http://dmiessler.com/archives/985</guid>
		<description><![CDATA[I just finished moving my email infrastructure to the new server (Gentoo + Deathgod Box of Doom). I had to wrangle quite a bit with SMTP-AUTH this time, and found very little help out there that didn&#8217;t have to do with using MySQL for the authentication piece. For me (and probably many others), that&#8217;s just [...]]]></description>
			<content:encoded><![CDATA[<p>I just finished moving my email infrastructure to the new server (<a href="http://www.gentoo.org">Gentoo</a> + Deathgod Box of Doom). I had to wrangle quite a bit with SMTP-AUTH this time, and found very little help out there that didn&#8217;t have to do with using MySQL for the authentication piece. For me (and probably many others), that&#8217;s just overkill.</p>

<p>So after figuring out how to do it I decided to do a writeup on it. I would very much like to save others from having to go through the same thing I did. Plus, when I inevitably forget a step someday I&#8217;ll have this to refer to:</p>

<p><a href="http://dmiessler.com/study/postfix">How To Get Postfix To Use SMTP-AUTH <em>WITHOUT</em> Using MySQL</a></p>

<p><a href="http://dmiessler.com/study/postfix" /></p>
<div id="crp_related"><h3>Related Content</h3><ul><li><a href="http://danielmiessler.com/blog/postfix-courier-imap-mailapp-and-certificates" rel="bookmark" class="crp_title">Postfix, Courier-Imap, Mail.app, and Certificates</a></li><li><a href="http://danielmiessler.com/blog/using-posfix-to-reject-spam-the-helo-technique" rel="bookmark" class="crp_title">Using Posfix To Reject Spam: The HELO Technique</a></li><li><a href="http://danielmiessler.com/blog/the-power-of-linux" rel="bookmark" class="crp_title">The Power of Linux</a></li><li><a href="http://danielmiessler.com/blog/what-mail-server-do-the-big-universities-use" rel="bookmark" class="crp_title">What Mail Server Do The Big Universities Use?</a></li><li><a href="http://danielmiessler.com/blog/what-mta-do-the-big-universities-use" rel="bookmark" class="crp_title">What MTA Do The Big Universities Use?</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>http://danielmiessler.com/blog/how-to-get-postfix-to-use-smtp-auth-without-mysql/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

