Peter Borbonus

Level 1 (140 points)

Servers Enterprise

Q: Mailman / Mailinglists on El Capitan 10.11.3 possible?

I have to migrate my Mailserver, which is actual running on MacOSX Server 10.6.8, to MacOSX 10.11.3 because of DROWN-Attack vulnerability (OpenSSL an Postfix are too old versions).

The Mailserver just offers POP/SMTP/IMAP, Webmail and around 10 mailinglists (and also iCal-Services).

In MacOSX-Server ist Mailman 2.1.14 (Mailinglists) integrated what is gone now.

Is there a possibility to offer mailinglists (Mailman?) with Server 5 (MacOSX 10.11.3)?

Thank you for your help,

Peter.

Xserve, Mac OS X (10.6.8), 4 GB RAM, 1 TB Raid (mirror)

Posted on Mar 4, 2016 4:41 AM

I have this question too

Solved

Level 6 (11,101 points)

Servers Enterprise

A:

Peter,

haven't had a need for Mailman on El Capitan yet. Last time I built it was for Yosemite. Should be pretty much the same thing. Some Postfix paths may have changed. See this for reference: https://topicdesk.com/faqs/why-do-postconf-n-and-postfix-reload-produce-unexpect ed-output-on-os-x-server-5/

HTH,
Alex

Posted on Mar 8, 2016 1:02 AM

Q: Mailman / Mailinglists on El Capitan 10.11.3 possible?

All replies

Helpful answers

by pterobyte,Helpful

pterobyte Mar 7, 2016 10:21 PM in response to Peter Borbonus
Level 6 (11,101 points)

Servers Enterprise

Mar 7, 2016 10:21 PM in response to Peter Borbonus

Peter,

if you are used to Mailman, then your best bet is to simply install Mailman yourself from source and then migrate your existing lists from the old server. Mailman requires Python and a suitable version of Python is included with OS X 10.11. You will also need Xcode to build it.

HTH,
Alex
Reply options

Link to this post

by cornelfromlarchmont,Helpful

cornelfromlarchmont Mar 7, 2016 10:21 PM in response to Peter Borbonus
Level 1 (5 points)

Mar 7, 2016 10:21 PM in response to Peter Borbonus

You will also need to add the following lines to the /Library/Server/Mail/Config/postfix/main.cf file to fix against DROWN.

smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3
smtp_tls_mandatory_protocols=!SSLv2,!SSLv3
smtpd_tls_protocols=!SSLv2,!SSLv3
smtp_tls_protocols=!SSLv2,!SSLv3

Added and confirmed fixed using https://test.drownattack.com on 10.10.5, Server 5.0.15.
Reply options

Link to this post

by Peter Borbonus,

Peter Borbonus Mar 7, 2016 10:23 PM in response to pterobyte
Level 1 (140 points)

Servers Enterprise

Mar 7, 2016 10:23 PM in response to pterobyte

Hi Alex,

thank you for your answer! I will try to compile and install Mailman on a testsystem soon.
Do you have any experience with it?

Greetings,
Peter.
Reply options

Link to this post

by Peter Borbonus,

Peter Borbonus Mar 7, 2016 10:27 PM in response to cornelfromlarchmont
Level 1 (140 points)

Servers Enterprise

Mar 7, 2016 10:27 PM in response to cornelfromlarchmont

Hi!
Do you know whether the lines you postet will work on 10.6.8 server too (postfix 2.1, I think)?
smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3
smtp_tls_mandatory_protocols=!SSLv2,!SSLv3
smtpd_tls_protocols=!SSLv2,!SSLv3
smtp_tls_protocols=!SSLv2,!SSLv3"

Thank you,
Peter
Reply options

Link to this post

by pterobyte,Solvedanswer

pterobyte Mar 8, 2016 1:02 AM in response to Peter Borbonus
Level 6 (11,101 points)

Servers Enterprise

Mar 8, 2016 1:02 AM in response to Peter Borbonus

Peter,

haven't had a need for Mailman on El Capitan yet. Last time I built it was for Yosemite. Should be pretty much the same thing. Some Postfix paths may have changed. See this for reference: https://topicdesk.com/faqs/why-do-postconf-n-and-postfix-reload-produce-unexpect ed-output-on-os-x-server-5/

HTH,
Alex
Reply options

Link to this post

by Peter Borbonus,

Peter Borbonus Mar 9, 2016 9:49 PM in response to pterobyte
Level 1 (140 points)

Servers Enterprise

Mar 9, 2016 9:49 PM in response to pterobyte

Hi Alex,
I will try it soon.
Thanks a lot, Peter.
Reply options

Link to this post