[00:01:11] <fholmes_laptop> Humm. For some reason I am getting warning: cannot get private key from file /etc/postfix/ssl/mailkey.pem [00:01:43] <fholmes_laptop> The file is there. [00:04:50] <fholmes_laptop> warning: TLS library problem: 13646:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:/export/builds/onnv_56/usr/src/common/openssl/crypto/x509/x509_cmp.c:399: [00:08:29] *** hparker has quit IRC [00:10:26] *** AJ_Z0 has quit IRC [00:20:19] *** j416 has joined #postfix [00:28:04] *** pirho has quit IRC [00:29:04] *** Ryushin has quit IRC [00:34:30] *** m3t3or has quit IRC [00:38:10] *** hparker has joined #postfix [00:55:51] *** olinux has quit IRC [00:58:03] *** j416 has quit IRC [00:58:15] *** j416 has joined #postfix [00:58:17] *** war has quit IRC [00:59:21] *** fholmes_laptop has quit IRC [01:18:17] <xpoint> hparker, you dont have to say you be back later :-) [01:18:17] *** marcster has quit IRC [01:19:25] <hparker> i know, but it's better then "Laterz losers!" ;) [01:21:03] *** MidBSD has quit IRC [01:26:05] <xpoint> hparker, i meant who will not be back here ? [01:26:45] <hparker> But I sometimes like.. Well.. Sleep, then it's not bbl, more like g'nite ;) [01:27:02] * xpoint vill take more coffie and be back later :-) [01:27:48] *** pickcoder has quit IRC [01:31:49] *** Taube is now known as taube [01:40:09] *** raqamy_ has joined #postfix [01:44:34] <xpoint> ah i was not even hit by a train or an airbus 380 :-) [01:46:32] <xpoint> hparker, in danmark there is a few kids that have fun make trainriding, is that known problem in you land aswell ? [01:47:38] <hparker> Not sure, I quit many years ago ;) [01:48:18] <hparker> One of the high schools I went to had a switch yard behind it... Used to hop them for a bit, bail before they got going too fast [01:49:02] <xpoint> ups, i can see it for me [01:50:09] <xpoint> sadly these kids could be good soldiers, but left the planet to fast [01:52:28] <xpoint> danmark have lost around 10 soldiers in 2007, sad but true, to what i know this is even bigger for more coutries then danmark [02:04:22] *** _Darkclaw has joined #postfix [02:05:40] *** Bronsky has quit IRC [02:07:32] *** Bronsky has joined #postfix [02:14:10] *** j416 has left #postfix [02:16:16] *** j416 has joined #postfix [02:17:34] *** Darkclaw has quit IRC [02:17:37] *** _Darkclaw is now known as Darkclaw [02:17:42] *** adf323 has quit IRC [02:18:14] *** adf323 has joined #postfix [02:19:17] *** adf323 has joined #postfix [02:27:09] <xpoint> hparker, spamikaze, the spammers table miss the country field no ? [02:27:43] <hparker> I've not used a version that had that.. you ought to join the ML [02:27:55] <xpoint> hparker, i have still not got it to work completely :/ [02:28:21] <xpoint> hparker, i am on the maillist, to quiet there [02:29:01] <hparker> I don't remember the old version I was running being too much of a pita to setup, was pretty straight forward iirc [02:30:07] <xpoint> hparker, passivetrap.pl is easely yes, but all the rest is to unstable to be usefull [02:30:29] <xpoint> hparker, rbldnsd.pl is ok [02:31:03] <hparker> I used that and the named export and the web interface for lookup/removal is about all... About all it had at the time ;) [02:31:19] <xpoint> getcountries.pl is not up with mysql [02:31:38] <hparker> Oh, I used it with pgsql, would never try it with mysql ;) [02:31:46] <xpoint> the web yes it will try this step olso [02:32:22] <xpoint> maybe pgsql works, i have not thinked about this :-) [02:33:54] <xpoint> i wait a little with mysql 5.x since the printer is out of inc to the laser :-) [02:41:01] *** robink has quit IRC [02:54:37] *** bugz_ has joined #postfix [03:05:19] *** Tachy_ has joined #postfix [03:08:39] *** AJ_Z0 has joined #postfix [03:10:31] *** sean_micken has left #postfix [03:18:08] *** KhensU has quit IRC [03:18:09] *** ^IcE-bOy^ has quit IRC [03:18:09] *** riz_ has quit IRC [03:18:10] *** xpoint has quit IRC [03:18:12] *** doomas has quit IRC [03:18:12] *** eltech has quit IRC [03:18:13] *** GutterPunk has quit IRC [03:18:14] *** wazquis_ has quit IRC [03:18:15] *** ALKH has quit IRC [03:18:15] *** tris has quit IRC [03:18:15] *** madclicker has quit IRC [03:18:16] *** mazon has quit IRC [03:18:16] *** ikaro has quit IRC [03:18:16] *** mirlyn has quit IRC [03:18:16] *** magikman has quit IRC [03:18:17] *** rodrickbrown has quit IRC [03:18:17] *** jack404 has quit IRC [03:18:18] *** confound has quit IRC [03:18:18] *** aba- has quit IRC [03:18:18] *** Dominian has quit IRC [03:18:18] *** F|oFF has quit IRC [03:18:18] *** jontow has quit IRC [03:18:19] *** glitchz has quit IRC [03:18:19] *** Radiance has quit IRC [03:18:21] *** flart has quit IRC [03:18:21] *** rob0 has quit IRC [03:18:21] *** rworkman has quit IRC [03:18:21] *** fred87 has quit IRC [03:18:21] *** nipuL has quit IRC [03:18:22] *** jpalmer has quit IRC [03:18:22] *** prebur has quit IRC [03:18:23] *** sk has quit IRC [03:18:23] *** klauwhamer has quit IRC [03:18:24] *** seather has quit IRC [03:18:24] *** ptitlouis has quit IRC [03:18:24] *** JimB has quit IRC [03:18:26] *** Darkclaw has quit IRC [03:18:26] *** GMFlash has quit IRC [03:18:27] *** Spec has quit IRC [03:18:30] *** daqqal has quit IRC [03:18:30] *** Mavvie has quit IRC [03:18:32] *** Flimqy has quit IRC [03:18:32] *** sc00p has quit IRC [03:18:32] *** mordaunt has quit IRC [03:18:32] *** neko has quit IRC [03:18:33] *** Roobarb has quit IRC [03:18:33] *** amrit|wrk has quit IRC [03:18:34] *** ircminer03 has quit IRC [03:18:35] *** vr has quit IRC [03:18:35] *** nox has quit IRC [03:18:35] *** bugz_ has quit IRC [03:18:36] *** Bronsky has quit IRC [03:18:36] *** raqamy_ has quit IRC [03:18:37] *** Tachy has quit IRC [03:18:38] *** fujin has quit IRC [03:18:38] *** _ac3_ has quit IRC [03:18:40] *** master_of_master has quit IRC [03:18:40] *** bowens has quit IRC [03:18:41] *** mustasj has quit IRC [03:18:41] *** Signum has quit IRC [03:18:42] *** luke-jr has quit IRC [03:18:43] *** bisoc has quit IRC [03:18:43] *** yess has quit IRC [03:18:43] *** sparkleytone has quit IRC [03:18:44] *** lawnchair has quit IRC [03:18:44] *** drraid has quit IRC [03:18:44] *** RT^ has quit IRC [03:18:44] *** Nockian has quit IRC [03:18:45] *** Tinozaure has quit IRC [03:18:45] *** jMCg has quit IRC [03:18:46] *** jordi has quit IRC [03:18:46] *** f3ew has quit IRC [03:18:47] *** skopii has quit IRC [03:18:47] *** Bejgli has quit IRC [03:18:47] *** scotti has quit IRC [03:18:47] *** _nalle has quit IRC [03:18:48] *** SID_seba has quit IRC [03:18:49] *** sw has quit IRC [03:18:49] *** hal1on has quit IRC [03:18:49] *** sep has quit IRC [03:18:50] *** khris has quit IRC [03:18:50] *** Ciantic has quit IRC [03:18:50] *** Zborg has quit IRC [03:18:51] *** eye69 has quit IRC [03:18:53] *** rmayorga has quit IRC [03:18:55] *** R1ck has quit IRC [03:18:55] *** roe has quit IRC [03:18:55] *** FastJack has quit IRC [03:18:56] *** St3rnchen has quit IRC [03:18:58] *** higuita has quit IRC [03:18:58] *** lennard has quit IRC [03:18:58] *** Tachy_ has quit IRC [03:18:58] *** ziro has quit IRC [03:18:58] *** dererk[work] has quit IRC [03:18:59] *** Zeit|idle has quit IRC [03:18:59] *** Kurtism has quit IRC [03:18:59] *** GodSp33d has quit IRC [03:19:00] *** StyleWarz has quit IRC [03:19:00] *** tuxick has quit IRC [03:19:01] *** hooch has quit IRC [03:19:01] *** ayeuu has quit IRC [03:19:01] *** sysmonk has quit IRC [03:19:02] *** memic has quit IRC [03:19:02] *** ptomter has quit IRC [03:19:04] *** js_ has quit IRC [03:19:04] *** j^2 has quit IRC [03:19:04] *** taube has quit IRC [03:19:04] *** enyc has quit IRC [03:19:04] *** nightswim has quit IRC [03:19:05] *** espenhn has quit IRC [03:19:05] *** lailai has quit IRC [03:36:26] *** hparker has left #postfix [03:42:17] *** adf323 has quit IRC [03:42:28] *** hparker has joined #postfix [03:42:28] *** Ryushin has joined #postfix [03:42:29] *** bugz_ has joined #postfix [03:42:29] *** Bronsky has joined #postfix [03:42:29] *** Darkclaw has joined #postfix [03:42:29] *** raqamy_ has joined #postfix [03:42:29] *** GMFlash has joined #postfix [03:42:29] *** magikman has joined #postfix [03:42:29] *** fujin has joined #postfix [03:42:29] *** Spec has joined #postfix [03:42:29] *** ^IcE-bOy^ has joined #postfix [03:42:29] *** riz_ has joined #postfix [03:42:29] *** prebur has joined #postfix [03:42:29] *** _ac3_ has joined #postfix [03:42:29] *** xpoint has joined #postfix [03:42:29] *** master_of_master has joined #postfix [03:42:29] *** bowens has joined #postfix [03:42:29] *** mustasj has joined #postfix [03:42:29] *** Signum has joined #postfix [03:42:30] *** doomas has joined #postfix [03:42:30] *** mirlyn has joined #postfix [03:42:30] *** daqqal has joined #postfix [03:42:30] *** Mavvie has joined #postfix [03:42:30] *** luke-jr has joined #postfix [03:42:30] *** eltech has joined #postfix [03:42:30] *** aba- has joined #postfix [03:42:30] *** glitchz has joined #postfix [03:42:30] *** jontow has joined #postfix [03:42:30] *** Radiance has joined #postfix [03:42:30] *** rodrickbrown has joined #postfix [03:42:30] *** jack404 has joined #postfix [03:42:30] *** F|oFF has joined #postfix [03:42:30] *** confound has joined #postfix [03:42:30] *** Dominian has joined #postfix [03:42:30] *** sk has joined #postfix [03:42:30] *** JimB has joined #postfix [03:42:30] *** seather has joined #postfix [03:42:30] *** ptitlouis has joined #postfix [03:42:31] *** klauwhamer has joined #postfix [03:42:31] *** flart has joined #postfix [03:42:31] *** jpalmer has joined #postfix [03:42:31] *** rworkman has joined #postfix [03:42:31] *** fred87 has joined #postfix [03:42:31] *** nipuL has joined #postfix [03:42:31] *** rob0 has joined #postfix [03:42:31] *** madclicker has joined #postfix [03:42:31] *** wazquis_ has joined #postfix [03:42:31] *** GutterPunk has joined #postfix [03:42:31] *** mazon has joined #postfix [03:42:31] *** ikaro has joined #postfix [03:42:31] *** ALKH has joined #postfix [03:42:31] *** tris has joined #postfix [03:42:31] *** KhensU has joined #postfix [03:42:31] *** jordi has joined #postfix [03:42:31] *** amrit|wrk has joined #postfix [03:42:31] *** sc00p has joined #postfix [03:42:32] *** Tinozaure has joined #postfix [03:42:32] *** RT^ has joined #postfix [03:42:32] *** vr has joined #postfix [03:42:32] *** Nockian has joined #postfix [03:42:32] *** Flimqy has joined #postfix [03:42:32] *** jMCg has joined #postfix [03:42:32] *** f3ew has joined #postfix [03:42:32] *** Roobarb has joined #postfix [03:42:32] *** nox has joined #postfix [03:42:32] *** neko has joined #postfix [03:42:32] *** ircminer03 has joined #postfix [03:42:32] *** lawnchair has joined #postfix [03:42:32] *** yess has joined #postfix [03:42:32] *** drraid has joined #postfix [03:42:32] *** bisoc has joined #postfix [03:42:32] *** sparkleytone has joined #postfix [03:42:44] *** j^2 has joined #postfix [03:42:44] *** taube has joined #postfix [03:42:44] *** lailai has joined #postfix [03:42:44] *** nightswim has joined #postfix [03:42:44] *** espenhn has joined #postfix [03:42:44] *** js_ has joined #postfix [03:42:44] *** enyc has joined #postfix [03:42:56] *** hooch has joined #postfix [03:42:56] *** Tachy_ has joined #postfix [03:42:56] *** dererk[work] has joined #postfix [03:42:56] *** ziro has joined #postfix [03:42:56] *** Zeit|idle has joined #postfix [03:42:56] *** Kurtism has joined #postfix [03:42:56] *** GodSp33d has joined #postfix [03:42:56] *** higuita has joined #postfix [03:42:56] *** tuxick has joined #postfix [03:42:56] *** StyleWarz has joined #postfix [03:42:56] *** lennard has joined #postfix [03:43:07] *** rmayorga has joined #postfix [03:43:07] *** roe has joined #postfix [03:43:07] *** FastJack has joined #postfix [03:43:07] *** St3rnchen has joined #postfix [03:43:07] *** eye69 has joined #postfix [03:43:07] *** R1ck has joined #postfix [03:43:23] *** SID_seba has joined #postfix [03:43:23] *** hal1on has joined #postfix [03:43:23] *** Bejgli has joined #postfix [03:43:23] *** _nalle has joined #postfix [03:43:23] *** sep has joined #postfix [03:43:23] *** skopii has joined #postfix [03:43:23] *** Zborg has joined #postfix [03:43:23] *** Ciantic has joined #postfix [03:43:23] *** sw has joined #postfix [03:43:23] *** scotti has joined #postfix [03:43:23] *** khris has joined #postfix [03:43:36] *** adf323 has joined #postfix [03:44:31] *** Spec is now known as x-spec-t [03:47:46] *** memic has joined #postfix [03:47:46] *** ptomter has joined #postfix [03:49:09] *** ayeuu has joined #postfix [03:50:23] *** sysmonk has joined #postfix [03:53:23] *** bugz_ has quit IRC [04:01:47] *** dererk[work] has quit IRC [04:05:21] *** magyar has joined #postfix [04:21:18] *** doomas_ has joined #postfix [04:35:08] *** doomas has quit IRC [04:43:57] *** rmayorga has quit IRC [04:48:44] *** MidBSD has joined #postfix [05:04:25] *** TheOutlander has joined #postfix [05:15:57] *** Motoko-chan has joined #postfix [05:22:19] *** ^IcE-bOy^ has quit IRC [05:28:29] *** DickensCider has joined #postfix [05:28:57] <DickensCider> hello, i have a question regarding redundant redundant MTA [05:29:26] <DickensCider> has anyone created redundancy using two separate servers? [05:35:21] *** Supaplex has joined #postfix [05:41:06] *** DickensCider has quit IRC [05:41:26] *** Supaplex has quit IRC [05:41:34] *** Supaplex has joined #postfix [05:48:32] *** mustasj has quit IRC [05:48:46] *** mustasj has joined #postfix [06:01:17] *** mustasj has quit IRC [06:01:31] *** mustasj has joined #postfix [06:03:30] *** rmayorga has joined #postfix [06:07:18] *** Tinozaure is now known as Tino [06:07:19] *** Tino is now known as Tinozaure [06:24:15] *** xpoint has quit IRC [06:27:25] *** nipuL_ has joined #Postfix [06:33:18] *** amrit|wrk is now known as amrit [06:38:16] *** nipuL has quit IRC [06:45:49] *** SiliconG has joined #postfix [06:49:28] <SiliconG> I need to add port 587 - anyone know where to add it - I have tried but I am thinking I am doing something wrong [06:50:25] <Dominian> master.cf [06:55:19] <SiliconG> I know that but what is the line to look like - I have not changed much [06:56:37] <Dominian> http://pastebin.slackadelic.com/133 [06:56:40] <Dominian> something like that [07:00:53] *** magyar has quit IRC [07:02:38] <SiliconG> nice thanks [07:03:19] <f3ew> SiliconG the submission line should already be present in master.cf [07:03:26] *** fujin has quit IRC [07:03:39] <SiliconG> ok but it is not on port 587 [07:04:36] <rob0> Yes it is, "submission" is the name for 587. [07:05:08] <rob0> "getent services submission" [07:07:08] *** raqamy_ has quit IRC [07:37:53] *** SiliconG has quit IRC [07:42:09] *** hachiya has joined #postfix [07:45:20] *** olinux has joined #postfix [07:45:25] *** ronartos has joined #postfix [07:45:33] <ronartos> hello can i ask? [07:50:38] <f3ew> yes [07:50:54] *** sn00p- has joined #postfix [07:51:41] *** rmayorga has quit IRC [07:52:48] <sn00p-> Hello I am having a problem logging in with MS outlook on my mail server, i'm using postfix, postfixadmin, dovecot, and mysql I added the users mailbox via postfixadmin I looko in the database and select the table i use and I select it and it prints out the data and I see under maildir domain.tld/user/ is that right or wrong. because when I connect using outlook dovecot spits out errors saying no user found some1 help me? [07:55:23] <ronartos> how can i send e-mail to same domain name, one domain is exist locally and another is exist online, i want to send e-mail to online domain but it is same domain name as our local mail server. [07:55:54] <ronartos> some said its like to same domain name, one exist internally and other externally [07:58:24] *** noetik has joined #postfix [08:03:17] <ronartos> postfix experts help pls [08:13:02] <rob0> !virtual [08:13:03] <knoba> rob0: 'virtual' : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html [08:13:17] <rob0> ronartos: ^^ take a look at virtual aliasing [08:13:32] <ronartos> !virtual [08:13:45] <rob0> It could also be done with a per-address transport(5) map. [08:14:41] <f3ew> http://www.postfix.org/STANDARD_CONFIGURATION_README.html#some_local [08:15:25] <rob0> sn00p-: Didn't we go through this several days ago? I'm pretty sure that your logs would show that your Outlook is not attempting authentication. [08:15:43] <sn00p-> May 14 22:10:20 tweaked dovecot: auth(default): userdb(sn00p at tweaked dot tv,24.118.18.62): user not found from userdb [08:15:51] <sn00p-> right there [08:15:56] <sn00p-> it shows, [08:16:03] <sn00p-> attempting authentication [08:16:13] <rob0> ok. But if it's not in the database ... what are you asking? [08:16:23] <sn00p-> it is in the database [08:16:31] <sn00p-> thats what i'm having problems with [08:16:32] <rob0> Dovecot disagrees. [08:16:37] <sn00p-> right [08:16:47] <sn00p-> I'm stuck [08:17:09] <rob0> I also mentioned LOGIN mechanism. [08:17:22] <sn00p-> I must of missed that [08:17:31] <sn00p-> sorry, what did you say about it? [08:17:51] <rob0> I told you to enable it. I'm telling you again. :) [08:18:02] <sn00p-> I have it enabled in my config [08:18:27] * hparker disables rob0 [08:18:45] <rob0> Now, go over to a better MUA and try the same authentication. What's different in the logs? [08:18:58] * rob0 has learned to live with disability! [08:19:10] <hparker> lol.. how's things? [08:19:19] <rob0> Things go better with Coke. [08:19:26] <rob0> I'm not fired yet. [08:19:34] <hparker> Oh, I know.. special... As in Jerry's Kids! ;) [08:19:37] <hparker> Nice! [08:19:46] <rob0> so that's good. Yes, that's me ... special. [08:19:59] <sn00p-> rob0 so your saying outlook just sucks? [08:20:02] * hparker is still running underemployed [08:20:20] <hparker> sn00p-: It's from M$, need more of a hint? ;) [08:20:34] <sn00p-> heh, well [08:20:37] <rob0> Boy, it would have sucked if they had bailed on the server while it was in your hands. [08:20:49] <Signum> And IMHO it's something that M$ even "invented" themselves. So it sucks doubly so. [08:21:05] <rob0> "userdb(sn00p at tweaked dot tv,24.118.18.62)" [08:21:09] <hparker> rob0: Yeah, no doubt [08:21:40] <rob0> I'm serious, Try it with a real MUA and it won't say the same thing in logs. And it will work! [08:21:42] <Supaplex> Signum: what's this 'something'? [08:22:31] <ronartos> still not sending [08:23:12] <Supaplex> ahh, outlook. nm. [08:24:23] <rob0> sn00p-: My theory here (I'm not familiar enough with Dovecot to say for sure) is that the string in () is the exact username that Outhouse sent. And you don't have a user called "sn00p at tweaked dot tv,24.118.18.62" in your list. [08:25:10] <sn00p-> I added it as a mailbox in postfix admin [08:25:25] <sn00p-> You think I should remove the domain and try? [08:25:43] <rob0> No kidding? Even with the comma and IP address? [08:25:56] <hparker> The normal login with postfixadmin is user at example dot com [08:26:10] <sn00p-> well thats what I did [08:26:11] <sn00p-> and it whines [08:26:22] <sn00p-> I have the user name in the data base as sn00p@domain [08:26:37] <f3ew> http://didierstevens.wordpress.com/2007/05/07/is-your-pc-virus-free-get-it-infected-here/ [08:26:44] <rob0> Where did you put the ,24.118.18.62 part? [08:26:54] <sn00p-> I didn't [08:27:00] <sn00p-> thats when I tried to login to my machine [08:27:01] <sn00p-> mailserver [08:27:03] <sn00p-> thats my i p [08:27:10] <hparker> f3ew: lol [08:29:49] <ronartos> can anyone help me send messages to a non-local main server but same doman name as our local postfix server? [08:30:14] <ronartos> example i send user at example dot com it checks if the user exist locally [08:30:31] <ronartos> and reply an delivery error or recipeint not exist [08:30:53] * hparker thinks rob0 already answered that [08:31:12] <rob0> Probably answered wrong, of course. [08:31:24] <ronartos> i want our non-local mail server to received e-mail if its not exist from local mail [08:31:25] <rob0> f3ew answered too [08:31:34] <sn00p-> rob0 when I go to postfixadmin it doesn't give me an option just to put no user name just user at domain dot tld [08:35:51] *** Motoko-chan has quit IRC [08:40:18] *** amrit is now known as amrit|zzz [08:44:05] *** mazon is now known as Mazon [08:50:30] *** abdo has joined #postfix [08:56:03] *** GodSp33d has quit IRC [09:01:40] *** abdo_ has joined #postfix [09:05:38] *** abdo_ has left #postfix [09:10:29] *** abdo has quit IRC [09:11:31] *** abdo has joined #postfix [09:13:05] *** [miles] has joined #postfix [09:21:07] *** af_ has joined #postfix [09:24:41] *** kos has joined #postfix [09:24:44] <kos> how can i enable fetchmail to be executed on boot by user xyz? [09:25:09] *** frennkie has joined #postfix [09:25:22] <Supaplex> crontab [09:25:25] <Supaplex> @reboot [09:25:27] <kos> hmm [09:26:46] <kos> all crons allow this? [09:26:48] <kos> or only fcron? [09:27:23] *** cutmasta has joined #postfix [09:28:08] *** kos has left #postfix [09:34:02] *** pmjdebruijn has joined #postfix [09:34:23] *** olinux has quit IRC [09:37:33] *** Lap_64 has joined #postfix [09:39:23] *** Jax has joined #postfix [09:42:00] *** j416 has joined #postfix [09:47:16] *** af_ has quit IRC [09:49:41] *** memetic has quit IRC [09:51:12] *** stellina has joined #postfix [09:56:49] <ronartos> can you help .. I want to sent local mails to our other mail server which exist outside our network [09:57:10] <f3ew> http://www.postfix.org/STANDARD_CONFIGURATION_README.html#some_local @ ronartos [10:00:45] <Jax> hmm.. [10:00:48] <Jax> having a little problem... [10:00:54] *** mastachand has joined #postfix [10:01:25] <Jax> i setup my mailserver to reject mails with MAIL FROM x at oneOfMyDomainsHostedByThisSystem dot tld that are not sent via my mailserver [10:01:37] <Jax> but what do i do if people decide to use their ISP's mail server to send mails instead? [10:01:43] <Jax> i have a problem then [10:02:49] *** war has joined #postfix [10:03:23] *** abdo_ has joined #postfix [10:08:22] <f3ew> Jax, nothing you can do [10:10:29] <R1ck> you can implement SPF and hope some mailservers will check SPF records [10:12:51] *** mastachand has quit IRC [10:16:46] *** abdo has quit IRC [10:16:59] *** abdo_ is now known as abdo [10:19:16] <Jax> so what do you do? [10:19:31] <Jax> leave your server open to forged mails, or not let the ISP mail servers send the mails? [10:21:18] *** bostik has joined #postfix [10:24:08] <Roobarb> Jax: you restrict people to using the submission port for sending mail from your domain [10:26:03] *** UQlev has joined #postfix [10:26:46] <f3ew> Jax, I just ignore it [10:29:32] *** GMFlash has quit IRC [10:31:28] <Jax> you ignore mails sent from your name to anybody? :D [10:32:32] *** mastachand has joined #postfix [10:32:42] <hparker> What can you do about it? [10:33:02] <hparker> asides from SPF (which has it's own problems), nothing [10:33:53] <Jax> yeah true i guess :( [10:38:47] *** sn00p- has quit IRC [10:38:50] *** Turt|e has joined #postfix [10:40:25] *** taube is now known as Taube [10:52:13] *** war has quit IRC [10:57:58] *** memetic has joined #postfix [10:58:19] *** j416 has quit IRC [10:59:11] *** cutmasta_ has joined #postfix [10:59:48] *** cutmasta has quit IRC [11:00:02] *** abdo_ has joined #postfix [11:00:20] *** cutmasta_ has quit IRC [11:00:23] *** cutmasta has joined #postfix [11:00:28] *** TheOutlander is now known as VideoMailz [11:02:06] *** memetic has quit IRC [11:05:25] *** RexMundi has joined #postfix [11:08:09] *** Zeit|idle has quit IRC [11:09:44] *** Zeit|idle has joined #postfix [11:16:32] *** ronartos has left #postfix [11:19:20] *** hparker has quit IRC [11:19:46] *** abdo has quit IRC [11:27:46] *** dinesh has joined #postfix [11:29:58] *** abdo has joined #postfix [11:31:38] *** abdo_ has quit IRC [11:44:31] *** noetik has quit IRC [11:46:06] *** JoKoT3 has joined #postfix [11:51:16] *** noetik has joined #postfix [12:04:04] *** nipuL_ is now known as nipuL [12:06:29] *** j416 has joined #postfix [12:08:41] *** JoKoT3 has quit IRC [12:15:57] *** Jax has quit IRC [12:26:01] *** torrr has joined #postfix [12:26:13] <torrr> which mail server is the best? [12:28:24] <R1ck> postfix! [12:29:10] <Roobarb> loaded question in here surely? [12:31:14] <sysmonk> nah, postfix sucks, we're just hanging around here, telling how awful postfix is! [12:31:17] <sysmonk> ;) [12:31:32] <dinesh> go for qmail [12:31:38] <dinesh> no security issue for years [12:31:42] <sysmonk> sendmail is better! [12:31:49] <sysmonk> sendmail's config files are just eaaaassyyy [12:31:54] <Roobarb> ... [12:31:55] <sysmonk> readable by every kid [12:31:56] <sysmonk> :))) [12:32:09] *** RockHound has joined #postfix [12:32:12] <Roobarb> having to use M4 to configure a configuration file is STUPID! [12:32:42] *** RockHound has quit IRC [12:33:05] <sysmonk> is it? ah well :( [12:33:46] <sysmonk> just joking around, i hate sendmail/qmail [12:33:54] *** RockHound has joined #postfix [12:34:13] <dinesh> courier-authlib takes hours to be emerged :( [12:36:39] *** JoKoT3 has joined #postfix [12:38:21] *** xpoint has joined #postfix [12:40:17] *** RockHound has quit IRC [12:41:15] *** Lap_64 has quit IRC [12:42:46] *** Lap_64 has joined #postfix [12:54:18] *** _ac3_ has quit IRC [12:56:52] *** Nesquick has joined #postfix [12:56:55] <Nesquick> hi there all... [12:57:21] <Nesquick> where can i find a good howto for installing postfix+mysql+courier-auth+sasl2 on redhat? [12:57:29] <Nesquick> or centos [12:58:10] *** cpm has joined #postfix [13:06:00] *** sysmonk has quit IRC [13:06:00] *** ayeuu has quit IRC [13:06:01] *** ptomter has quit IRC [13:06:02] *** memic has quit IRC [13:06:02] *** sw has quit IRC [13:06:02] *** Bejgli has quit IRC [13:06:03] *** SID_seba has quit IRC [13:06:03] *** skopii has quit IRC [13:06:04] *** _nalle has quit IRC [13:06:04] *** scotti has quit IRC [13:06:04] *** hal1on has quit IRC [13:06:04] *** khris has quit IRC [13:06:05] *** Ciantic has quit IRC [13:06:05] *** Zborg has quit IRC [13:06:05] *** sep has quit IRC [13:06:06] *** eye69 has quit IRC [13:06:06] *** noetik has quit IRC [13:06:07] *** Nesquick has quit IRC [13:06:08] *** R1ck has quit IRC [13:06:08] *** St3rnchen has quit IRC [13:06:08] *** FastJack has quit IRC [13:06:09] *** roe has quit IRC [13:06:11] *** lennard has quit IRC [13:06:11] *** higuita has quit IRC [13:06:14] *** Tachy_ has quit IRC [13:06:15] *** ziro has quit IRC [13:06:15] *** tuxick has quit IRC [13:06:16] *** StyleWarz has quit IRC [13:06:16] *** Kurtism has quit IRC [13:06:17] *** hooch has quit IRC [13:06:17] *** nightswim has quit IRC [13:06:18] *** j^2 has quit IRC [13:06:18] *** enyc has quit IRC [13:06:18] *** espenhn has quit IRC [13:06:18] *** Taube has quit IRC [13:06:18] *** js_ has quit IRC [13:06:19] *** lailai has quit IRC [13:06:19] *** xpoint has quit IRC [13:06:20] *** Turt|e has quit IRC [13:06:20] *** nipuL has quit IRC [13:06:21] *** MidBSD has quit IRC [13:06:21] *** doomas_ has quit IRC [13:06:21] *** riz_ has quit IRC [13:06:22] *** GutterPunk has quit IRC [13:06:23] *** wazquis_ has quit IRC [13:06:24] *** ALKH has quit IRC [13:06:24] *** eltech has quit IRC [13:06:24] *** tris has quit IRC [13:06:24] *** Ryushin has quit IRC [13:06:24] *** madclicker has quit IRC [13:06:27] *** Mazon has quit IRC [13:06:27] *** ikaro has quit IRC [13:06:28] *** F|oFF has quit IRC [13:06:28] *** rodrickbrown has quit IRC [13:06:28] *** mirlyn has quit IRC [13:06:28] *** magikman has quit IRC [13:06:29] *** Radiance has quit IRC [13:06:29] *** confound has quit IRC [13:06:29] *** Dominian has quit IRC [13:06:29] *** jack404 has quit IRC [13:06:30] *** aba- has quit IRC [13:06:30] *** jontow has quit IRC [13:06:30] *** glitchz has quit IRC [13:06:31] *** KhensU has quit IRC [13:06:32] *** fred87 has quit IRC [13:06:33] *** flart has quit IRC [13:06:33] *** jpalmer has quit IRC [13:06:33] *** rworkman has quit IRC [13:06:33] *** rob0 has quit IRC [13:06:33] *** cpm has quit IRC [13:06:34] *** Lap_64 has quit IRC [13:06:34] *** sk has quit IRC [13:06:34] *** seather has quit IRC [13:06:35] *** klauwhamer has quit IRC [13:06:35] *** ptitlouis has quit IRC [13:06:35] *** JimB has quit IRC [13:06:36] *** prebur has quit IRC [13:06:36] *** JoKoT3 has quit IRC [13:06:37] *** j416 has quit IRC [13:06:38] *** mastachand has quit IRC [13:06:38] *** stellina has quit IRC [13:06:38] *** pmjdebruijn has quit IRC [13:06:40] *** Supaplex has quit IRC [13:06:41] *** Flimqy has quit IRC [13:06:41] *** daqqal has quit IRC [13:06:42] *** sc00p has quit IRC [13:06:42] *** Mavvie has quit IRC [13:06:43] *** nox has quit IRC [13:06:43] *** neko has quit IRC [13:06:43] *** Roobarb has quit IRC [13:06:45] *** amrit|zzz has quit IRC [13:06:45] *** Darkclaw has quit IRC [13:06:46] *** RexMundi has quit IRC [13:06:46] *** torrr has quit IRC [13:06:47] *** vr has quit IRC [13:06:47] *** ircminer03 has quit IRC [13:06:48] *** x-spec-t has quit IRC [13:06:50] *** cutmasta has quit IRC [13:06:50] *** bostik has quit IRC [13:06:51] *** frennkie has quit IRC [13:06:51] *** [miles] has quit IRC [13:06:52] *** mustasj has quit IRC [13:06:53] *** bisoc has quit IRC [13:06:55] *** yess has quit IRC [13:06:55] *** sparkleytone has quit IRC [13:06:56] *** lawnchair has quit IRC [13:06:57] *** jordi has quit IRC [13:06:57] *** drraid has quit IRC [13:06:57] *** RT^ has quit IRC [13:06:58] *** Nockian has quit IRC [13:06:58] *** bowens has quit IRC [13:06:58] *** jMCg has quit IRC [13:06:59] *** Tinozaure has quit IRC [13:06:59] *** f3ew has quit IRC [13:07:00] *** master_of_master has quit IRC [13:07:00] *** Bronsky has quit IRC [13:07:00] *** Signum has quit IRC [13:07:01] *** luke-jr has quit IRC [13:07:52] *** adf323 has quit IRC [13:08:30] *** Signum has joined #postfix [13:08:30] *** mirlyn has joined #postfix [13:08:31] *** daqqal has joined #postfix [13:08:31] *** Mavvie has joined #postfix [13:08:31] *** luke-jr has joined #postfix [13:08:31] *** eltech has joined #postfix [13:08:31] *** aba- has joined #postfix [13:08:31] *** glitchz has joined #postfix [13:08:31] *** jontow has joined #postfix [13:08:31] *** Radiance has joined #postfix [13:08:31] *** rodrickbrown has joined #postfix [13:08:31] *** jack404 has joined #postfix [13:08:31] *** F|oFF has joined #postfix [13:08:31] *** confound has joined #postfix [13:08:31] *** Dominian has joined #postfix [13:08:31] *** sk has joined #postfix [13:08:31] *** JimB has joined #postfix [13:08:31] *** seather has joined #postfix [13:08:31] *** ptitlouis has joined #postfix [13:08:31] *** klauwhamer has joined #postfix [13:08:31] *** jpalmer has joined #postfix [13:08:32] *** rworkman has joined #postfix [13:08:32] *** fred87 has joined #postfix [13:08:32] *** rob0 has joined #postfix [13:08:32] *** madclicker has joined #postfix [13:08:32] *** wazquis_ has joined #postfix [13:08:32] *** GutterPunk has joined #postfix [13:08:32] *** Mazon has joined #postfix [13:08:32] *** ikaro has joined #postfix [13:08:32] *** ALKH has joined #postfix [13:08:32] *** tris has joined #postfix [13:08:32] *** KhensU has joined #postfix [13:08:32] *** jordi has joined #postfix [13:08:32] *** amrit|zzz has joined #postfix [13:08:32] *** sc00p has joined #postfix [13:08:32] *** Tinozaure has joined #postfix [13:08:32] *** RT^ has joined #postfix [13:08:32] *** vr has joined #postfix [13:08:32] *** Nockian has joined #postfix [13:08:32] *** Flimqy has joined #postfix [13:08:33] *** jMCg has joined #postfix [13:08:33] *** f3ew has joined #postfix [13:08:33] *** Roobarb has joined #postfix [13:08:33] *** nox has joined #postfix [13:08:33] *** neko has joined #postfix [13:08:33] *** ircminer03 has joined #postfix [13:08:33] *** lawnchair has joined #postfix [13:08:33] *** yess has joined #postfix [13:08:33] *** drraid has joined #postfix [13:08:33] *** bisoc has joined #postfix [13:08:33] *** sparkleytone has joined #postfix [13:08:33] *** bowens has joined #postfix [13:08:33] *** master_of_master has joined #postfix [13:08:33] *** prebur has joined #postfix [13:08:33] *** riz_ has joined #postfix [13:08:33] *** x-spec-t has joined #postfix [13:08:33] *** magikman has joined #postfix [13:08:33] *** Darkclaw has joined #postfix [13:08:34] *** Bronsky has joined #postfix [13:08:34] *** Ryushin has joined #postfix [13:08:34] *** j^2 has joined #postfix [13:08:34] *** Taube has joined #postfix [13:08:34] *** lailai has joined #postfix [13:08:34] *** nightswim has joined #postfix [13:08:34] *** espenhn has joined #postfix [13:08:34] *** js_ has joined #postfix [13:08:34] *** enyc has joined #postfix [13:08:34] *** hooch has joined #postfix [13:08:34] *** Tachy_ has joined #postfix [13:08:34] *** ziro has joined #postfix [13:08:34] *** Kurtism has joined #postfix [13:08:34] *** higuita has joined #postfix [13:08:34] *** tuxick has joined #postfix [13:08:34] *** StyleWarz has joined #postfix [13:08:34] *** lennard has joined #postfix [13:08:35] *** roe has joined #postfix [13:08:35] *** FastJack has joined #postfix [13:08:35] *** St3rnchen has joined #postfix [13:08:35] *** eye69 has joined #postfix [13:08:35] *** R1ck has joined #postfix [13:08:35] *** SID_seba has joined #postfix [13:08:35] *** hal1on has joined #postfix [13:08:35] *** Bejgli has joined #postfix [13:08:35] *** _nalle has joined #postfix [13:08:35] *** sep has joined #postfix [13:08:35] *** skopii has joined #postfix [13:08:35] *** Zborg has joined #postfix [13:08:35] *** Ciantic has joined #postfix [13:08:35] *** sw has joined #postfix [13:08:35] *** scotti has joined #postfix [13:08:35] *** khris has joined #postfix [13:08:35] *** memic has joined #postfix [13:08:35] *** ptomter has joined #postfix [13:08:35] *** ayeuu has joined #postfix [13:08:35] *** sysmonk has joined #postfix [13:08:36] *** doomas_ has joined #postfix [13:08:36] *** MidBSD has joined #postfix [13:08:36] *** Supaplex has joined #postfix [13:08:36] *** mustasj has joined #postfix [13:08:36] *** nipuL has joined #postfix [13:08:36] *** [miles] has joined #postfix [13:08:36] *** frennkie has joined #postfix [13:08:36] *** pmjdebruijn has joined #postfix [13:08:36] *** stellina has joined #postfix [13:08:36] *** bostik has joined #postfix [13:08:36] *** mastachand has joined #postfix [13:08:36] *** Turt|e has joined #postfix [13:08:36] *** cutmasta has joined #postfix [13:08:36] *** RexMundi has joined #postfix [13:08:36] *** noetik has joined #postfix [13:08:36] *** j416 has joined #postfix [13:08:36] *** torrr has joined #postfix [13:08:37] *** JoKoT3 has joined #postfix [13:08:37] *** xpoint has joined #postfix [13:08:37] *** Lap_64 has joined #postfix [13:08:37] *** Nesquick has joined #postfix [13:08:37] *** cpm has joined #postfix [13:08:48] *** j416 has quit IRC [13:08:50] *** adf323 has joined #postfix [13:12:20] <memic> anybody can tell me why smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject makes a open relay out of my server? [13:12:26] <memic> in master.cf [13:12:40] <memic> my restrictions are OK [13:12:49] <memic> im unable to send mail over port 25 [13:13:01] <f3ew> smtps == port 465 [13:13:04] <memic> without smtp auth but with tls an this line in master.cf [13:13:15] <f3ew> not 25 [13:13:18] <memic> i can send mail without auth [13:13:27] <memic> f3ew yes i know [13:13:57] <memic> why arent the restrictions working on port 465 [13:14:06] <memic> on port 25 its working [13:14:32] <f3ew> memic, s/client/recipient/ [13:16:10] <memic> means? [13:18:17] <f3ew> smtpd_recipient_restrictions [13:19:36] <dinesh> it's perl's syntax for replacing "client" by "recipient" [13:20:35] <memic> got it [13:20:41] <memic> i know [13:20:50] <memic> problem was somewhere else thx anyway [13:20:50] <JoKoT3> perl ... perl ... [13:20:55] <JoKoT3> it's sed syntax :) [13:21:35] <f3ew> ed actually, and I don't know if teco used it [13:22:51] <JoKoT3> :p [13:25:57] *** _ac3_ has joined #postfix [13:28:20] *** flami has joined #postfix [13:30:24] *** UQlev has quit IRC [13:40:18] *** ^IcE-bOy^ has joined #postfix [13:40:25] <jMCg> http://en.wikipedia.org/wiki/Text_Editor_and_Corrector#Example_TECO_session uhm.. well.. almost... [13:40:31] *** ^IcE-bOy^ has quit IRC [13:43:56] *** Taube is now known as taube [13:43:59] *** Nockian has quit IRC [13:46:17] *** ^IcE-bOy^ has joined #postfix [13:47:12] *** noetik has quit IRC [13:47:18] *** ^IcE-bOy^ has left #postfix [13:48:06] *** taube is now known as Taube [13:50:24] *** Ryushin has quit IRC [13:56:10] *** master_o1_master has joined #postfix [13:56:32] *** tim|imac has joined #postfix [13:57:57] <tim|imac> hm... the nixcartel.org (from the topic) cannot be found... [13:58:30] <tim|imac> can anyone give me some pointers towards a loadbalanced/redundant outgoing mailserver with postfix? [13:58:57] <tim|imac> loadbalanced would be prefered, but it's also important that no outgoing email is lost, even if one of the server crashes during a send [14:03:36] <flami> the nixcartel site works for me but i dont think anything you want is in there. [14:05:02] <tim|imac> hm... strange... I'm not getting a DNS response for that site... yeah, well, a SERVFAIL [14:07:09] <tim|imac> any tips on where to start my search for a solution? [14:07:17] <cpm> nixcartel works fine for me [14:08:10] <cpm> tim|imac, well, first, if you want high availability, I'd look to making sure you have solid dns [14:08:54] *** master_of_master has quit IRC [14:08:55] <tim|imac> ghe, I'm at home and probably my modem is being weird again :) the setup I'm talking about has solid everything ;-) [14:09:37] <flami> well postfix is a good start ;) solid as a rock . [14:09:58] <cpm> how much outbound email are you talking about? [14:10:33] <tim|imac> 50k emails that need to be send within 60 minutes [14:11:17] <tim|imac> postfix might be able to do that on it's own, but i would also like the redundancy/failover that a good loadbalanced setup can give me :S [14:12:15] <tim|imac> so initially loadbalanced, but if one machines quits working, the other machines should simply continue with the sending and also send the emails that were still in the queue for the b0rken machine [14:12:36] <tim|imac> i expect the last part to be the most difficult :S [14:13:10] <cpm> sounds like you should be instructing us, not the other way around then [14:13:58] *** mrivera has joined #postfix [14:14:57] <tim|imac> how come? I have no idea how to do this reliably :) [14:15:29] <tim|imac> if all else fails, I'll simply do a drbd+heartbeat failover thingy... but I was hoping you guys would know of a way to have both machines active without loss of data :) [14:15:36] <cpm> few hundred emails a second is a pretty significant load. Someone who is handling this kind of load coming to IRC for help, , , , well, , , think about it. [14:16:21] <tim|imac> it's 50k of the same mail and send to all the customers of my customer... it's not that big a setup, really :) [14:16:28] <cpm> ah, a spam shop [14:16:40] <tim|imac> no, a press release center :) [14:16:41] <flami> "customers" ^^ [14:16:44] <Lap_64> cpm 100 emails are nothing [14:17:09] <Lap_64> i have a server where they host 20 hotel booking engines [14:17:12] <tim|imac> yeah, people actually *pay* for receiving those emails... so I don't think that classifies as spam :) [14:17:20] <Lap_64> and you cant trust me if i will tell you the volume [14:19:30] <cpm> Lap_64, ahh, I misplaced a decimal, I do that. [14:20:05] <f3ew> tim|imac, hmmm? [14:20:10] <cpm> tim|imac, that's nothing a modest postfix box can't handle. If you want it to be reliable, keep it simple, don't complicate it. [14:20:20] <f3ew> outbound should be a simple function of multiple A records and a fast network [14:21:25] <f3ew> tim|imac, is that 50K individual messages, or 50K recipients getting a single message? [14:21:54] <tim|imac> 50k individual messages, they're a bit customised [14:22:04] <tim|imac> s/customised/personalised/ [14:22:48] <f3ew> So 50000/3600 or about 4 messages/second [14:23:16] <f3ew> no, 50 messages/second [14:23:29] <f3ew> grrrr [14:23:30] <f3ew> 15 [14:23:35] * f3ew activates brain [14:23:51] <cpm> 13.8- [14:23:56] * flami activates calcuator and leave the brain idle :P [14:24:04] <cpm> f3ew, I did the same thing the other way [14:24:10] <tim|imac> the setup can handle it easily... we've benchmarked it at about 200 messages/second... depending on how fast the other side responses, ofc [14:24:21] <f3ew> how much network bandwidth are we speaking about here? What latency? [14:24:22] <tim|imac> uh... add another 0 [14:24:39] <f3ew> the latency of connections will kill you [14:24:56] <cpm> tim|imac, ummm, no [14:24:57] <tim|imac> 100Mbit dedicated to Amsterdam Internet Exchange backbone net [14:25:00] <f3ew> plus random people greylisting and stuff [14:26:00] <f3ew> how many recipients on the same domain, approx? [14:26:14] <f3ew> (those can go over the same cached connection) [14:26:23] <f3ew> what size of message? [14:26:42] <tim|imac> ... that i don't know, but i expect not too many... the emails are mostly send to press departments... messages are about 100k max [14:26:51] <f3ew> Ah [14:27:28] <tim|imac> but as i said, one server should be able to handle it... but I'd like some redundancy and maybe loadbalancing so I have a nice failover... [14:27:29] <f3ew> So about 5 GB of data [14:27:45] <f3ew> multiple A records will be fine for that part [14:29:06] <tim|imac> I'm not sure that all applications used within the network are able to switch to another server if the first response is "server down" [14:29:25] <tim|imac> but I could use ldirectord to loadbalance it [14:29:30] <f3ew> you inject into Postfix via a hostname which resolves to 2 (or more) ip addresses [14:30:07] <f3ew> or just setup that Postfix on the same host as the MLM [14:30:17] *** many has joined #postfix [14:30:18] <f3ew> and have it connect to a relayhost with 2 A records [14:30:36] <tim|imac> which leaves me with a single point of failure :) [14:30:37] <many> heyho. is there a list of milter-applications that work with postfix? [14:31:12] <tim|imac> will postfix break if I have two processes using the same spool-dir? [14:31:32] * tim|imac is thinking "shared storage + ocfs2" [14:31:56] <many> and: wth is the config difference between before- and after-queue filters? [14:32:19] <many> _proxy_filter vs _content_filter? [14:32:26] <lennard> kinda [14:32:50] *** dererk[work] has joined #postfix [14:33:31] <flami> many proxy_filter will send a smtp failure to the client hat connects ( 550 - you suck damn virus .... ) the content_filter happens after the mail has been queued ( 250 thanks for you mail :P its queued) [14:34:56] <flami> if you deliver any mail to the recipient no matter if its spam or not ( to avoid false positve from your side ) you dont need smtp_proxy... ( you accept them anyway ) [14:35:06] *** noetik has joined #postfix [14:35:07] <f3ew> tim|imac yes [14:35:15] <many> nono. its what i want. to reject them before. [14:35:21] <tim|imac> damn [14:35:25] <f3ew> tim|imac, but your MLM is a single point of failure anyway [14:36:04] <f3ew> so your worst case scenario is that the MLM screws up [14:36:07] <flami> then you need smtp_proxy this will reject mail in the during the smtp connection [14:36:22] <tim|imac> how so? everything else in the network is redundant and failover :) [14:36:44] <f3ew> how does your mailing list manager share state? [14:36:45] <many> flami: that was my question :) [14:36:55] <many> thanks. [14:37:12] *** dinesh` has joined #postfix [14:37:14] <tim|imac> MySQL database on another host, in a failover setup using a shared storage :) [14:37:30] <f3ew> tim|imac, the initial queue is loaded into Postfix on the same host, which almost immediately kicks it out to another host [14:37:50] <f3ew> so if your MLM dies, or that host dies, only the last few messages on it fail [14:37:57] <dererk[work]> Good * [14:38:05] <f3ew> which has to be a contingency you have to work around [14:38:08] <flami> many, you can try amavisd-new , is pretty handy as to filter out spam + virus [14:38:09] <many> so if i smtpd_proxy_filter for example amavis (doesnt seem to work witht he milter interface) it rejects mails via the proxy_filter pipe while needing to reinject the mail when the mail is okay [14:38:19] <many> there already. :-) [14:38:24] <tim|imac> indeed, which is a thing I'm trying to avoid... it's not critical, mind... but if I can avoid it, it would be nice [14:38:33] <f3ew> two MLMs, with two Postfix injectors each, and a dual smarthost cluster [14:38:56] <f3ew> pull from MySQL, shove into Postfix, flag as sent [14:39:07] <many> flami: i just wanted to make sure i really understood what i did 8-) [14:39:08] <flami> yes postfix sends the mail over to amavis which reinjects the mail into postfx if its ok and if not it sends a reject [14:39:14] <f3ew> rinse, lather, repeat for the next set of unsent messages [14:40:22] <f3ew> have the frontends always_bcc the sent email to a special account you control on another server, which tracks the recipient and flags it as having been sent from Postfix [14:40:46] <tim|imac> ah yeah, that's a smart thing to do, indeed... nice check [14:40:49] <f3ew> or track your syslogs [14:40:52] <flami> if you look at the amais site they dont recommend it as smtp_proxy , if you have too much load you might lose mail. [14:40:58] <f3ew> or both [14:41:16] <f3ew> always_bcc from the second host to see that stuff from the first has gone through [14:41:33] <f3ew> and track the logs from that to see that your recipients have actually gone through [14:43:22] <flami> many, look at the amavis site, there are some tutorials how to get it working , and they say hat smtpd_proxy is not recommended [14:43:42] <many> not for hightraffic sites, anyway. [14:44:16] <many> the basic gotcha is that the remote smtp client may disconnect for timeout before amavis is ready with scanning. which results in the client thinking the mail is not delivery while it is [14:44:51] <flami> yep [14:45:00] <many> the con side for content_filter is that i do not want to see the stuff while not causing too much backscatter :/ [14:45:14] <dinesh`> I've got a little question ; I am trying to follow this tutorial : http://www.gentoo.org/doc/en/virt-mail-howto.xml , but at the step "./CA.pl -newca" it is asking me a "PEM pass phrase" [14:45:24] <dinesh`> what is that PEM pass phrase, and what should I put? [14:45:55] <flami> PEM passphrase is if you amke your own CA certification , you need to keep it if you want to sign your own certificates [14:46:07] <flami> its a password :P [14:46:20] *** dinesh has quit IRC [14:46:26] <many> the ca can be keyless. which is kinda... pointless. [14:46:42] <flami> many, http://www.irbs.net/internet/postfix/0407/2009.html <-- this might be interesting [14:46:49] <dinesh`> ok so I can just put anything and forget about it? [14:46:58] <flami> no [14:47:01] <flami> DONT forget it [14:47:41] <flami> youll be asked to put it in every time you sign a certificate [14:47:47] <dinesh`> oh ya [14:47:52] <many> dinesh`: its the password (or phrase, thus passphrase) which protects your ca private key. you need this password to unlock your key. [14:47:58] <dinesh`> but in the worth case, I could make a new PEM phrase [14:48:03] <dinesh`> to sign new certificates [14:48:35] <many> flami: ah, yes. thank you. [14:49:01] <flami> uhm you would need to make a new CA [14:49:18] <flami> better remember the password [14:49:31] <dinesh`> but if I put something non empty here [14:49:54] <dinesh`> I will need to enter that password everytime I will launch the SSL services of courrier-imap etc? [14:50:14] <flami> then your CA is kinda pointless because you might run the risk that someone copies your CA , which makes SSL pointless :P [14:50:16] <dinesh`> since they need to know the private key in order to be able to uncrypt the messages [14:50:20] <flami> no [14:50:34] *** Ryushin has joined #postfix [14:51:04] <many> you confuse the CA with the individual key [14:51:05] <flami> better read something about openssl . the final cert you get can e encrypted but doesnt need to [14:51:16] <flami> yeah key... [14:51:55] <dinesh`> ok, so this is only about signing the private keys and avoiding man-in-the-middle attacks [14:51:59] <many> the CA is the central key which you trust and on which you chain down your certificates - this is so you do not need to trust every individual key, but instead just trust the CA. [14:52:47] <many> the passphrasse for the CA you will need everytime you sign a certificate - every certificate can have its own passphrase, wich would then be needed when starting services [14:53:25] <dinesh`> ok [14:53:35] *** _Darkclaw has joined #postfix [14:53:51] <dinesh`> thanks [14:54:19] *** af_ has joined #postfix [14:54:59] <dererk[work]> Hi all! [14:55:18] <xpoint> user all unknown :-) [14:55:25] <dererk[work]> hahah [14:55:32] <flami> Hey dude [14:58:33] <dererk[work]> Hi :D [14:58:42] *** meandtheshell has quit IRC [14:58:44] <dererk[work]> I need a hand with a remote smtp auth throw sasl [15:03:52] <dererk[work]> I've this file, /etc/postfix/sasl_passwd with a line like this: the.remote.mail.server.com user:password [15:04:41] <dererk[work]> and in main.cfg I've enabled smtp_sender_dependent_authentication, smtp_sasl_auth_enable and posinted the smtp_sasl_password_maps to the file [15:05:05] <dererk[work]> unfortunatelly, It's simply not working or logging anything :( [15:05:56] <dererk[work]> Any idea if I've missed something ? [15:07:04] *** dinesh has joined #postfix [15:07:05] *** dinesh` has quit IRC [15:07:21] *** mindcooker has joined #postfix [15:08:24] *** Darkclaw has quit IRC [15:08:29] *** _Darkclaw is now known as Darkclaw [15:08:52] *** meandtheshell has joined #postfix [15:11:31] *** csm-laptop has joined #postfix [15:15:50] *** af_ has quit IRC [15:16:37] *** GutterPunk has quit IRC [15:19:53] <mindcooker> I have postfix working with dovecot and sql [15:20:18] <Dominian> I feel a "but" coming on... [15:20:29] <mindcooker> however dovecot(pop3) can't access maildir [15:20:45] <mindcooker> how can I change the default maildir permissions? [15:22:10] <mindcooker> maildir is under /home/virtual/user@domain [15:23:01] <Dominian> mail_extra_groups = postfix possibly [15:23:19] <mindcooker> but pop3 dont have access to /cur new/ /tmp [15:23:32] <mindcooker> only if I give 777 [15:23:49] <mindcooker> so it might be a way of changing the default maildir permissions [15:24:21] <mindcooker> Dominian, in main.cf? [15:24:54] <Dominian> no [15:24:58] <Dominian> in dovecot.conf [15:25:04] <mindcooker> ok..letme try [15:25:06] <mindcooker> :) [15:25:34] *** abdo has quit IRC [15:26:37] *** Nesquick has quit IRC [15:27:27] *** _ac3_ has quit IRC [15:28:12] <mindcooker> Dominian, no [15:28:13] <mindcooker> :/ [15:28:32] <Dominian> well are you getting any errors? [15:28:36] <mindcooker> we.. [15:28:39] <mindcooker> just a second [15:28:41] <Dominian> and what are the perms on the maildir folders? [15:28:44] <Dominian> owner/group? [15:28:46] <mindcooker> *yes [15:29:00] <mindcooker> drwxr-xr-x 3 postfix postfix 512 May 15 14:28 virtual [15:29:08] <mindcooker> drwx------ 5 postfix postfix 512 May 15 14:28 tomane at antanhol dot blogdns.org [15:29:53] <mindcooker> nfo: POP3(tomane at antanhol dot blogdns.org): Couldn't open INBOX top=0/0, retr=0/0, del=0/0, size=0 [15:32:23] <mindcooker> dovecot can't access /cur /tmp /new inside user@domain [15:32:30] <mindcooker> that's the problem [15:32:31] <mindcooker> :/ [15:32:43] *** joeSkeletti has joined #postfix [15:33:54] <Dominian> what are the perms in side the user@domain folders? [15:34:56] <mindcooker> drwx------ 2 postfix postfix 512 May 15 14:28 cur [15:34:56] <mindcooker> drwx------ 2 postfix postfix 512 May 15 14:28 new [15:34:56] <mindcooker> drwx------ 2 postfix postfix 512 May 15 14:28 tmp [15:36:52] *** fholmes_laptop has joined #postfix [15:37:01] *** joeSkeletti has quit IRC [15:37:15] <Dominian> hmm [15:37:23] <Dominian> and what user does dovecot run as? [15:38:19] <mindcooker> root 8575 0.0 0.4 1728 1060 ?? SsJ 2:28PM 0:00.08 /usr/local/sbin/dovecot [15:38:20] <mindcooker> root 8576 0.0 0.6 2632 1604 ?? SJ 2:28PM 0:00.08 dovecot-auth [15:38:20] <mindcooker> root 8577 0.0 0.5 2584 1472 ?? SJ 2:28PM 0:00.06 dovecot-auth -w [15:38:20] <mindcooker> dovecot 8578 0.0 0.6 3096 1780 ?? SJ 2:28PM 0:00.09 pop3-login [15:38:20] <mindcooker> dovecot 8580 0.0 0.6 3096 1780 ?? SJ 2:28PM 0:00.10 pop3-login [15:38:20] <mindcooker> dovecot 8581 0.0 0.6 3104 1788 ?? SJ 2:28PM 0:00.10 imap-login [15:38:22] <mindcooker> dovecot 8582 0.0 0.6 3104 1788 ?? SJ 2:28PM 0:00.10 imap-login [15:38:24] <mindcooker> dovecot 8583 0.0 0.6 3104 1788 ?? SJ 2:28PM 0:00.09 imap-login [15:38:31] <mindcooker> dovecot 8732 0.0 0.6 3096 1780 ?? SJ 2:37PM 0:00.05 pop3-login [15:39:00] <Dominian> odd [15:39:25] <Dominian> wait.. [15:39:25] *** Dr_Faust has joined #postfix [15:39:29] *** Dr_Faust has left #postfix [15:39:31] <Dominian> what's the path to your maildir folders again? [15:39:52] <mindcooker> /home/virtual/ [15:40:03] <Dominian> ls -al /home [15:40:09] <Dominian> I wanna see the perms on /home/virtual [15:40:39] <mindcooker> drwxr-xr-x 3 postfix postfix 512 May 15 14:28 . [15:41:18] <Dominian> odd [15:41:31] <Dominian> well I dunno [15:41:38] <Dominian> looks like your setup is just like mine.. and mine works fine.. [15:42:02] *** raqamy has joined #postfix [15:44:38] *** mindcooker has quit IRC [15:45:07] *** mindcooker has joined #postfix [15:45:14] <mindcooker> Dominian, sorry [15:45:17] *** craigbass1976 has joined #postfix [15:45:42] <mindcooker> even If I give 777 to /home/virtual [15:45:58] <craigbass1976> Is it possible to run postfix without dns? Can people set up their email clients to somehow just check at an IP? [15:46:09] <mindcooker> postix creates /home/virtual/user@domain [15:46:17] <mindcooker> without enough permissions [15:48:51] *** jingo has joined #postfix [15:56:55] *** j416 has joined #postfix [15:58:14] <Dominian> mindcooker: then i'd say you have an issue with your main.cf configuration.. [15:58:47] *** j416 has quit IRC [15:59:13] *** craigbass1976 has quit IRC [15:59:21] *** tiagonux has joined #postfix [16:00:02] *** j416 has joined #postfix [16:01:09] <mindcooker> Dominian, perhaps if I change virtual_uid_maps and virtual_gid_maps to dovecot [16:01:15] <mindcooker> let me try [16:04:32] *** j416 has quit IRC [16:04:47] <Dominian> I don't use those I don't think..let me look [16:05:42] <Dominian> hmmm [16:05:53] <Dominian> mindcooker: virtual_gid_maps = static:623 [16:06:03] <Dominian> and that number is the group ID of the user that postfix runs as [16:06:13] <Dominian> virtual_uid_maps = static:623 [16:06:18] <Dominian> same thing with the uid [16:06:29] <mindcooker> 623 belongs to..? [16:06:35] <Dominian> mindcooker: so with my setup.. my uid/gid is 623/623 [16:06:47] <Dominian> and the servvice runs as postfix/postfix [16:06:50] <Dominian> make sense? [16:06:56] <mindcooker> yes..sure [16:07:04] <mindcooker> thats what I had [16:07:13] <Dominian> then that isn't the problem heh [16:07:26] <mindcooker> 125:125 postfix/postfix [16:07:28] <Dominian> virtual_minimum_uid = 623 [16:07:31] <Dominian> do you have that? [16:07:57] <mindcooker> now I have changed to 143:143 dovecot/dovecot [16:08:01] <mindcooker> but same problem [16:08:17] <mindcooker> not enough permissions [16:08:18] <mindcooker> :/ [16:08:44] <Dominian> odd [16:08:52] <Dominian> it should be postfix/postfix.. not dovecot [16:09:33] <mindcooker> yes..it makes sense [16:09:46] <mindcooker> I was just trying [16:09:46] <mindcooker> :) [16:09:53] * Dominian nods [16:10:01] <Dominian> Just wish I could be of more help. [16:10:19] <dinesh> isn't it possible to have an "all-virtual" setup? why do I need to have a primary(local) domain? [16:10:35] <Dominian> dinesh: My setup is all virtual [16:10:44] <mindcooker> mine too [16:10:54] <dinesh> but in some variables you need to set your primary domain [16:11:00] <dinesh> what do you put for those variables? [16:11:02] <dinesh> like mynetwork [16:11:03] <dinesh> etc [16:11:11] <Dominian> my primary domain that it serves [16:11:15] <Dominian> slackadelic.com in my example [16:11:46] <dinesh> ok so you need at least 1 virtual domain [16:11:55] <dinesh> if you want a all-virtual setup [16:12:10] <Dominian> Well, on my initial setup dinesh .. I had one virtual domain.. my main domain which was slackadelic.com [16:12:42] <dinesh> ok thanks [16:13:12] <dinesh> just finished following a tutorial, I'll see if it is working as expected and if so try to hack some things [16:15:34] *** Nesquick has joined #postfix [16:19:29] *** UQlev has joined #postfix [16:20:22] <Dominian> ok [16:20:35] <rob0> Any Postfix can have any combination of local/virtual{alias,mailbox}/relay domains, zero or more in each class. [16:23:21] <rob0> $mynetworks is a list of IP addresses, not domain names. (Yes I know names work there, but those are resolved to addresses.) [16:24:13] <Dominian> what rob0 said [16:24:31] <rob0> :) [16:26:29] *** Mazon is now known as mazon [16:27:28] *** memetic has joined #postfix [16:27:47] <mindcooker> Dominian, http://archives.neohapsis.com/archives/postfix/2005-07/1526.html [16:27:54] <mindcooker> I have the same problem [16:29:25] <rob0> !virtual_uid_maps [16:29:25] <rob0> knoba: ping [16:29:25] <knoba> rob0: 'virtual_uid_maps' : a configuration parameter in the main.cf: Lookup tables with the per-recipient user ID that the virtual(8) delivery agent uses while writing to the recipient's mailbox. [16:29:34] <rob0> !virtual_gid_maps [16:29:35] <knoba> rob0: 'virtual_gid_maps' : a configuration parameter in the main.cf: Lookup tables with the per-recipient group ID for virtual(8) mailbox delivery. In a lookup table, specify a left-hand side of " at domain dot tld" to match any user in the specified domain that does not have a specific "user at domain dot tld" entry. [16:30:10] <rob0> For simple setups, something like "static:vmail" is fine. [16:30:39] <mindcooker> rob0, that's what I have [16:30:40] <rob0> For large hosting, you would have a different uid/gid per customer. [16:30:53] <dinesh> hm, how can I check why postfix is not delivering my emails where I want? it is replying "250 2.0.0 Ok: queued as 0554E1AEE6" , but I don't get anything in .maildir/cur [16:31:15] <mindcooker> virtual_uid_maps = static:125 [16:31:15] <mindcooker> virtual_gid_maps = static:125 [16:31:17] <Dominian> rob0: you don't have to do that though. [16:31:53] <rob0> mindcooker: basic Unix knowledge then. The virtual_[gu]id_maps should have write privileges in virtual_mailbox_base. [16:32:13] * Dominian nods [16:32:38] <mindcooker> rob0, but don't want to change permissions by hand [16:32:39] <rob0> Dominian: okay, s/would/should/ [16:32:47] <mindcooker> everytime a maildir is created [16:32:48] <Dominian> heh [16:32:48] <mindcooker> :/& [16:33:01] <Dominian> rob0: I can see sort of why you would wnat to do that. [16:33:04] <rob0> mindcooker: reread. [16:33:10] <Dominian> easy enough to change configuration if I ever need to do that though [16:34:33] <mindcooker> rob0, even with 777 in /home/virtual (base) [16:34:39] <mindcooker> doesn't work [16:34:39] <mindcooker> :) [16:34:40] <rob0> yikes [16:34:47] <Dominian> that's.. scary [16:34:52] <Dominian> I would work my way backwards [16:35:07] <Dominian> fyi.. I don't think I would put virtual in /home anyway ;) [16:35:14] <rob0> Why not? [16:35:15] <Dominian> mine is is /var/spool/mail/vritual [16:35:18] * Dominian shrugs [16:35:28] <Dominian> imo, /home should be for user accounts.. not email [16:35:35] <Dominian> just a personal preference [16:36:29] <mindcooker> Dominian, I will change that latter [16:36:44] <mindcooker> this machine I'll not have any access [16:36:45] <rob0> mindcooker: what does "postconf virtual_mailbox_base" show? [16:37:01] <mindcooker> /home/virtual [16:37:17] <mindcooker> ok..let me show you [16:37:35] <rob0> pastebin logs of a delivery to a new user [16:37:54] <rob0> and include "postconf -n" [16:38:46] <mindcooker> drwxrwxrwx 2 postfix postfix 512 May 15 15:38 virtual [16:39:14] <dererk[work]> Wahooooo! [16:39:21] <dererk[work]> It's working now! :D [16:39:48] <mindcooker> drwx------ 5 postfix postfix 512 May 15 15:39 tomane at antanhol dot blogdns.org [16:40:35] <mindcooker> drwx------ 2 postfix postfix 512 May 15 15:39 cur [16:40:35] <mindcooker> drwx------ 2 postfix postfix 512 May 15 15:39 new [16:40:35] <mindcooker> drwx------ 2 postfix postfix 512 May 15 15:39 tmp [16:40:36] *** j416 has joined #postfix [16:41:03] <rob0> BTW the postfix user/group should not be used for virtual_[gu]id_maps. You should make a user/group like "vmail" or one per domain for that. [16:41:03] <mindcooker> that's the problem [16:41:29] <rob0> Did you manually create the tomane at antanhol dot blogdns.org maildir? [16:41:32] <mindcooker> no.. [16:41:44] <mindcooker> it was created by postfix [16:41:48] <rob0> Describe the problem then. [16:42:10] <mindcooker> everything works fine [16:42:32] <mindcooker> except pop3 can't acess Maildir [16:42:33] <mindcooker> :/ [16:42:36] <dinesh> hm, when postfix gets an email for a local domain, does it fetch the MX record to make sure that it is local? [16:42:53] *** j416 has quit IRC [16:43:24] *** bowens has quit IRC [16:43:59] <rob0> So again, simple Unix file permissions. You don't have the pop3d/imapd running as the correct user (which again, should be something like "vmail". Create a different user for mailboxes.) [16:48:11] *** mod_cure has joined #postfix [16:48:29] <mod_cure> what does this mean --> warning: Illegal address syntax ? [16:48:53] <mindcooker> rob0, hum..I see..let me try [16:51:20] * cpm sets umask rob0 * [16:51:47] <rob0> Who WAS that umasked man? [16:51:52] <Dominian> bah [16:51:52] *** flami has quit IRC [16:51:57] <Dominian> set the umask to 000 and be done with him [16:53:23] *** j416 has joined #postfix [16:55:22] *** rmayorga has joined #postfix [16:56:14] *** j416 has quit IRC [16:56:49] *** j416 has joined #postfix [16:58:41] *** pmjdebruijn has quit IRC [17:01:03] <dererk[work]> have a nice day all [17:01:06] *** dererk[work] has left #postfix [17:04:21] *** mazon is now known as Mazon [17:06:08] *** noetik has quit IRC [17:06:09] *** fiftycal has joined #postfix [17:06:49] *** sparrw has joined #postfix [17:07:08] <fiftycal> hello [17:07:18] *** tim|imac has left #postfix [17:07:26] <sparrw> (250 2.7.1 Ok, discarded, UBE, id=20115-05) [17:07:46] <sparrw> does postfix make that decision itself, or should i be looking to amavis/spamassassin? [17:08:36] <R1ck> thats amavis/spamassassin [17:08:56] <sparrw> ok, thanks [17:09:00] <rob0> I would look at the ENTIRE log line and check with the program that logged it. [17:09:10] <many> 250 "Ok, discarded"? [17:09:13] <many> uh [17:09:19] <rob0> but I'm just ... odd that way. [17:09:28] <sparrw> rob0: postfix logged it [17:10:07] <rob0> Postfix is doing what it was configured to do. By default no discarding is done.' [17:10:40] <sparrw> correct [17:11:18] <many> sending 250 and silently discarding a mail is not something that alot of people would find acceptable, either. [17:11:54] <rob0> Hotmail does it (doesn't make it right.) [17:12:41] * many favors sending unreadable 550 :) [17:12:48] <many> 550 5.7.1 <bjo36ajrl at accessus dot net>: Sender address re [17:12:49] <many> jected: EP: Policy decision ((?i-mx:^ppp-)); [17:12:58] <many> like that :-P [17:13:15] <Dominian> 550 We don't like you [17:14:56] *** mordaunt has joined #postfix [17:16:18] *** taec has joined #postfix [17:19:50] *** sasch has joined #postfix [17:20:12] <sasch> hi all [17:21:24] <sasch> hi have this problem [17:21:27] <sasch> May 15 17:18:26 papinicomputer postfix/qmgr[30723]: warning: transport virtual failure -- see a previous warning/fatal/panic logfile record for the problem description [17:21:36] <sasch> can help me ??? [17:22:50] <Roobarb> sasch: only if you show the previous error as described [17:23:51] *** rootsvr has joined #postfix [17:24:31] <sasch> May 15 17:18:26 papinicomputer postfix/qmgr[30723]: warning: private/virtual socket: malformed response [17:27:56] <Roobarb> sasch: is this a recurring error or a one-off ? [17:28:46] <sasch> recurring error [17:29:02] <sparrw> many: i agree, re it being a bad design. but its not my design. [17:29:05] <sasch> every e-mail that recevie ...... excusme for my english ... but I'm italian [17:29:30] <sparrw> how can i make postfix not call amavis for authenticated users? i found a couple of tips online but they didnt cover preserving the existing filtering for non-auth connections [17:30:06] *** cutmasta is now known as mister_crabs [17:30:23] *** mister_crabs has quit IRC [17:30:32] <Roobarb> sparrw: use the submission port [17:30:37] <Zerberus> sparrw: setup submission (port 587) for the users to authenticate [17:30:58] <sparrw> i get the feeling from other sources that that isnt required [17:31:24] <sasch> i found my error [17:31:31] *** rootsvr has quit IRC [17:31:39] <sasch> is in myhostname and mydomain [17:31:58] <sasch> I have a domain that name is papinicomputer [17:32:05] <sasch> excusme papinicomputer.it [17:32:26] <sasch> the server is a ubuntu edge and called papinicomputer [17:33:21] <Zerberus> sasch: didn'T we fix this already yesterday? [17:33:36] *** renkho has joined #postfix [17:33:48] <Zerberus> sparrw: it is - amavis can't distinguish between authenticated and non-authed users [17:34:31] <Zerberus> sparrw: of course you can use a 2 IP setup [17:34:38] <sparrw> Zerberus: i dont want postfix to send authenticated users to amavis [17:34:54] *** hparker has joined #postfix [17:35:25] <many> wow. wanna see someone telling an average luser to use the submission port [17:35:49] <lennard> dunno, is it good? :) [17:36:27] <sparrw> http://www.irbs.net/internet/postfix/0508/0714.html implies that postfix can be told to not give authenticated emails to amavis [17:36:46] <many> actually its a bit different [17:37:00] <many> you can abuse transport to FILTER certain stuff only. [17:37:11] <sparrw> but i dont understand the instructions given [17:39:20] <sparrw> many: can "certain stuff" be anything not authenticated? [17:41:46] <Roobarb> sparrw: you do realise that the submission port is designed to solve exactly the problem you wish to solve [17:42:49] *** Lap_64 has quit IRC [17:43:58] <sparrw> Roobarb: by submission port, are you referring to a different SMTP port, or a different port for amavis to listen on? [17:44:01] *** joeSkeletti has joined #postfix [17:45:05] <Roobarb> sparrw: a different port with a postfix smtpd instance bound to it, using slightly different settings in master.cf (to bypass the content_filter) [17:45:26] <sparrw> that would require changing the settings on every user's client, no? [17:45:32] <Roobarb> yes [17:45:58] <sparrw> so not quite exactly the problem i wish to solve, given my problem has the "i want to solve this on the server" requirement [17:47:45] *** af_ has joined #postfix [17:47:57] *** Nesquick has quit IRC [17:48:09] <sparrw> im puzzled that this isnt trivial. i find so many mentions of solutions online, i just dont see how the config text they include applies [17:48:09] <Roobarb> sparrw: I suggest you read this: http://www.postfix.org/FILTER_README.html#remote_only [17:49:03] <sparrw> i dont have the luxury of being able to have all my users change ports [17:49:26] *** yam has joined #postfix [17:49:27] <Roobarb> as an aside, why do you want to bypass amavisd for authorized users? [17:49:33] <Roobarb> s/authorized/authenticated [17:49:58] <sparrw> because its filtering some of their email as spam [17:50:04] <sparrw> inbound false positives... meh [17:50:08] <sparrw> outbound false positives... bad [17:50:42] *** Nesquick has joined #postfix [17:51:22] *** joeSkeletti has quit IRC [17:51:23] <Roobarb> you could always just add a spamassassin rule to check for a known string unique to mail from your domain, then give it a score of -100 [17:51:44] <sparrw> thats a bit too hackish for my tastes [17:52:42] <sparrw> also, using the remote_only solution, i would need a new subdomain for my users to send mail, or they would all need the new ip address. which is no better a solution than changing ports [17:53:44] <sparrw> some solutions ive seen online hint at having two copies of amavis, with postfix sending authenticated users to the one that does only virus checking but no spam filtering [17:54:03] <sparrw> but i dont quite grasp how they do it. it seems like if thats possible, it should be even easier to just not filter authenticated users at all [17:55:27] <rob0> Rather than using content_filter for all mail, you can use FILTER as an access(5) target for desired mail. That's a bit tricky with receive_override_options, but it's described in FILTER_README. [17:58:37] <sparrw> im not sure why this seems to be such an uncommon task [17:58:57] <sparrw> i dont think ive ever USED a server that spam filtered outbound mail [17:59:15] <Roobarb> some of us don't use the same servers for inbound and outbound mail [17:59:25] <Roobarb> so we simply dont have this problem [17:59:26] <sparrw> i always have [17:59:44] <sparrw> what i mean is, as a mail user [17:59:49] <Roobarb> or, you use a different IP address/port for mail submission [18:00:19] <sparrw> ditto, ive never seen that [18:00:41] <sparrw> my experience is limited to a handful of ISPs and web/email hosting companies [18:00:46] <Roobarb> why do you think you r mail client allows you to set a port as well as a host, for sending mail ? [18:01:12] <sparrw> ive never needed to [18:01:23] <Roobarb> thats not what I said [18:01:26] *** af_ has quit IRC [18:01:39] <sparrw> you imply that its there because its commonly used [18:01:42] <sparrw> i argue it isnt [18:02:01] <Roobarb> no, it's there because you can have it set to something other than port 25 [18:02:04] <sparrw> im sure you have as many examples as i do, so its not worth it to compare, there just seems to be a divide [18:02:24] <rob0> It's useful to do virus scanning and/or rate limiting on outbound (auth'ed users or $mynetworks) if you have Windows users. [18:02:36] <sparrw> ive never encountered a mail server that filtered authenticated email, and ive never had to use nonstandard settings to see that [18:02:47] <dinesh> in a MySQL setup, I am being accepted by the "RCPT TO" command when I give an existing record in my "users" MYSQL table, but not when I give an non-existing one. But still, the mails doesn't get delivred, and I'm getting a "unknown user: ..." in the bounced message. Someone knows where it can from ? I can't find any further info in the logs [18:02:57] <sparrw> rob0: i agree. and id love to do that. but if i cant control their filtering at all then i certainly cant be picky about it. [18:03:01] <rob0> policyd.sourceforge.net is designed to do that too. [18:03:02] <Roobarb> smtp-auth doesn't prevent a mail client from sending viruses/spam [18:03:11] *** [miles] has quit IRC [18:03:40] <cpm> indeed it doesn't. [18:03:46] <sparrw> Roobarb: yes, but false positives on outbound email are infinitely worse than on inbound [18:03:52] <rob0> The whole content filtering structure is a nonstandard setting. What's the point? [18:04:00] <sparrw> right now im willing to give up outbound filtering completely to solve the issue [18:04:03] <cpm> My users are not clueful enough, or simply don't care enough to *not* send malware,malmail [18:04:16] *** leOn has joined #postfix [18:04:46] <sparrw> im stuck with users complaining "bob never got my email!" [18:04:52] * cpm filters outbound email, as part of the 'community' i consider it part of the job [18:04:56] <sparrw> and im clueless til i check the mail logs and see that it was blocked [18:05:09] <sparrw> cpm: i just take away email access if someone sends spam [18:05:09] <Roobarb> sparrw: I'd argue that if your clients appear to be sending spam to _your_ server, they'll almost certainly be marked as spam to _other_ servers. IMHO, I'd fix the root cause rather than bypassing the checks [18:05:26] <sparrw> Roobarb: i disagree. but thats up to the recipient to decide. [18:05:38] <Signum> Send the user 300 spam mails per day directly into their inbox until they learn to value your efforts. [18:05:54] <sparrw> the email in question actually wasnt spam. it just barely went over our threshold in spamassassin, and would likely have passed other places with less strict rules [18:06:08] <Roobarb> sparrw: have you actually investigated why your clients are triggering a false positive? [18:06:09] <cpm> what pushed it over the edge? [18:06:10] <sparrw> or places with no spam filtering at all [18:06:24] *** leOn has quit IRC [18:06:25] <Roobarb> maybe your score limit is too low [18:06:34] <sparrw> cpm: any single rule it "broke" would have been sufficient to stay under [18:06:37] *** tminos has joined #postfix [18:06:51] <cpm> or the users are too clueless. [18:07:07] <sparrw> Roobarb: thats moot. no matter what the limit is, a false positive is going to go just over it [18:07:26] *** leOn has joined #postfix [18:07:46] <cpm> sparrw, umm, no. [18:08:23] <sparrw> if my limit is 5 then 5.001 is blocked. if my limit is 9 then 9.001 is blocked. either case, any one rule would have come under the threshold [18:08:44] *** leOn has quit IRC [18:08:56] <cpm> yeah, but if you are hitting 5s outbound, you are sending some pretty sloppy email [18:11:37] <cpm> any inbounds to my boxes that are hitting spam scores of 5, the users will not ever see. They go into a quarantine for 45 days. And never once in over 2 years with this system has anyone ever asked for an email that was 'lost' do to a spam score of 5 or higher, never [18:11:50] *** sasch has quit IRC [18:11:59] <sparrw> my threshold is actually 3 [18:12:15] <sparrw> i get requests for quarantined email every few weeks [18:12:23] <cpm> that's still pretty sloppy, folks on my systems will get a 3, but it will be tagged [18:12:27] <sparrw> but today a user complained that one of her outbound emails disappeared [18:12:36] <cpm> why? [18:12:41] <sparrw> why did it disappear? [18:12:45] <cpm> yup [18:13:01] <Roobarb> my kill level is 7 with a level of 4.9 to trigger spam headers [18:13:11] <sparrw> good question. im trying to figure that out. i actually lost my spamassassin logs for that day (horrible coincidence), so im going to have to eyeball the email and see whats "wrong" with it [18:13:26] <cpm> lost your logs? [18:13:49] <sparrw> yes. the log rotation daemon was having a bad day, so i had empty log files that day [18:13:55] <cpm> ick [18:14:19] <sparrw> well, thats being too kind... [18:14:40] <sparrw> the author of the script used to restart amavis on my server was sloppy [18:15:04] *** UQlev has quit IRC [18:15:09] <sparrw> it restarted the wrong amavis, which means the new log file didnt get handled properly [18:15:40] <sparrw> a sad tangent, but not really relevant except that its why i cant see the spam logs for that particular email [18:16:15] <Roobarb> so send it again [18:18:03] <sparrw> yeah, im going to have her do that [18:25:12] *** hparker has quit IRC [18:29:40] *** _ac3_ has joined #postfix [18:30:51] *** x-spec-t is now known as Spec [18:31:22] *** bostik has quit IRC [18:34:11] *** hparker has joined #postfix [18:49:38] <sparrw> awesome [18:49:41] <sparrw> she deletes her sent mail [18:54:58] *** etaylor has joined #postfix [18:57:03] <dinesh> hm I just found out that my "local:" transport was not working as I wanted, but the virtual one is perfect [18:57:23] <dinesh> so I'm just going to switch to an all-virtual config [18:57:58] <Dominian> works for me [18:58:05] <rob0> local_transport left at the default (and without confusions like mailbox_command) works fine. [19:00:01] *** JoKoT3 has quit IRC [19:00:50] <dinesh> hm, seems that outlook express doesn't handle the POP3 over SSL protocol? [19:02:05] <dinesh> oh no, it was in "Advanced" .. [19:02:18] <dinesh> so that's working too, fine fine [19:02:50] <dinesh> i've got local_transport = local [19:04:59] <dinesh> even with the default value I'm still getting "(unknown user: "mdrlol") [19:06:37] <dinesh> or do I need a real unix user for every user when using local transport? [19:07:03] <dinesh> I gave the uid/gid of another user (not "mdrlol" which does not exists as UNIX user) [19:07:17] <cpm> dinesh, yes, local is local, [19:07:31] <cpm> or an alias to a local account [19:07:43] <rob0> That's the whole idea, local(8) looks up Unix accounts. [19:07:59] * cpm looks up rob0 [19:08:18] <dinesh> oh ok, so I can create a alias from mdrlol to root and it will work (being delivered to root) [19:08:50] <dinesh> thanks that explains all the problems I had [19:08:55] <cpm> best to pick a real user, set the root alias to that user (don't deliver to root where you don't absolutely have to) [19:08:55] *** mastachand has quit IRC [19:09:06] <rob0> Postfix won't deliver to root. Mail to root would be delivered with $default_privs. You should never use root for email. [19:09:31] * cpm deliver to rob0's , , , ahh, never mind [19:10:53] <dinesh> oh and , what's the difference between alias, relocated and virtual ? looks pretty similar [19:14:54] <many> alias is per user, virtual per user@domain, relocated sends an error code [19:17:05] <dinesh> ok thanks [19:17:13] <mordaunt> how can you send an email with the sendmail wrapper [19:19:01] <cpm> the same way you would were it just sendmail, the syntax is identical [19:20:18] <mordaunt> i don't know the syntax =D [19:20:32] <mordaunt> i'm not really sure what to specify after typing sendmail -bm [19:21:11] <rob0> "man sendmail" or sendmail.1.html should know all the tricks. [19:22:43] <cpm> cat rob0 | sendmail user at domain dot tld [19:23:12] <mordaunt> lol yea i just figured it out =) [19:23:21] <rob0> I was rejected as spam. :( [19:23:34] <mordaunt> sendmail -r sender@bl rcpt2 rcpt2 -bm [19:23:46] <mordaunt> then type the message and . on a separate line [19:23:49] <rob0> Must be that penis enlargement I had ;) [19:23:50] *** j416 has quit IRC [19:24:33] <cpm> how'd that work for ya? [19:25:07] *** j416 has joined #postfix [19:25:26] <cpm> mordaunt, what are you trying to accomplish? [19:25:29] <rob0> Not that well. I'm going to have to refinance my mortgage and apply at the Univ. of Phoenix to try to meet girls. [19:25:45] * cpm chuckles [19:28:40] <dinesh> hm is it normal that when I add an email only in the relocated_table the RCPT TO is being rejected by postfix, do I also have to add it in "Virtual" ? (but the latter one, I don't see any difference with the case I only put it in "virtual" and not in "relocated") [19:30:36] *** GMFlash has joined #postfix [19:31:26] * jingo hides and pokes cpm with a long stick [19:31:35] <cpm> Ouch! [19:31:42] <cpm> it's that danged jingo! [19:31:57] * cpm grabs his stash of sporks and gets ready [19:32:03] <jingo> yo! [19:32:07] <cpm> how U? [19:32:21] <jingo> okay I guess [19:32:52] <cpm> okay is good, what are you doing these days? [19:33:31] <jingo> not much, some time off! :) [19:33:40] <jingo> and you? [19:35:22] * jingo pokes Signum as well [19:35:56] <cpm> time off = good? or did you get fired again [19:36:16] *** ikaro^ has joined #postfix [19:36:21] <jingo> heh, nono. genuine time off [19:36:32] <cpm> :) [19:36:35] <cpm> cool, [19:36:38] *** ikaro has quit IRC [19:36:45] *** ikaro^ is now known as ikaro [19:36:50] <cpm> Yeah, I was out of the office for 2 weeks, just came back yesterday, am ready to leave again. [19:37:14] * hparker bets office peeps are ready for cpm to leave again as well [19:37:31] <rob0> I trust that you send out an autoresponse to every mailing list you're on? [19:37:36] <cpm> they haven't figured out I'm back yet, my phone hasn't rang once [19:37:49] <jingo> cpm: so, was all your gear still there? :D [19:38:05] <cpm> rob0, I actually go to weekly digest mode when I'm gone [19:38:13] <cpm> jingo, took it all with. :) [19:38:47] *** sepski has joined #postfix [19:39:08] * jingo has glued the monitors to the desk before he left [19:41:31] <cpm> not a bad idea. [19:41:31] <cpm> I gave up on actually having a monitor, and now just use my (personal) laptop [19:42:59] * many looks confused [19:43:16] <jingo> I need 2 screens. actually it's 3 at work (Synergy is so cool!) [19:43:32] <many> yea, s2 rocks [19:44:45] *** smesjz has joined #postfix [19:45:30] * jingo pokes smesjz [19:45:55] * smesjz stares at jingo [19:46:11] * jingo looks innocent [19:46:28] <smesjz> jingo: do I know you by any chance? [19:47:41] *** mindcooker has quit IRC [19:48:22] <jingo> I think we had a some bits of conversation here, once, long long ago? [19:48:42] <jingo> unless you are someone else and use the same name [19:49:55] <smesjz> nah, my memory isnt so good anymore. :) [19:50:30] <smesjz> are you Dutch perhaps? [19:50:42] <Signum> Hey... the old clique. :) [19:50:58] <jingo> see HE remembers! [19:51:10] <jingo> smesjz: no not Dutch [19:51:26] <smesjz> moin Chris [19:51:30] <Signum> The good old cpm, rob0, jingo, smesjz, f3ew, ChrisH (aka Signum) folks :) [19:51:34] <Signum> smesjz: Hi [19:51:49] <smesjz> s/f3ew/devdas/ [19:51:50] <Signum> www.relics-of-pound-postfix.irc [19:53:12] <smesjz> jingo: .ch then? [19:53:37] <smesjz> Signum: how's the progress on the revamped Workaround tutorial? [19:53:48] * rob0 claims to be the newest of the relics [19:54:07] <jingo> nope. I live almost next door to Signum (on a global scale) [19:54:32] <smesjz> oh [19:55:08] <Signum> smesjz: Just working on it. It will be a bit easier this time. I just can't remember if SASL could use dovecot as an authentication service or vice versa. [19:56:44] <Signum> smesjz: You are invited to co-author. :) [19:57:15] <Signum> smesjz: I decided at least to screw the idea of normalized databases and PostgreSQL. People would hate me (even more than now) for it. [19:58:26] <jingo> Signum: eh? [19:58:46] <jingo> Signum: and, dovecot? does that mean the tutorial doesn't use courier anymore? [19:59:04] <Signum> jingo: rrrrrrrright :) [19:59:11] <Signum> jingo: it's all smesjz's fault [19:59:28] <jingo> hmmm [19:59:39] *** matju has joined #postfix [20:00:21] * smesjz giggles [20:00:32] * jingo wonders what a normalized database is [20:00:51] <jingo> thinking of it in audio terms, it makes no sense [20:00:53] <Signum> jingo: A database where you store every string only once and use foreign keys to point to other entries. [20:01:21] <Signum> jingo: e.g. there is a "domains" table that has an "id" and a "name". And virtual_mailbox_maps would not mention the domain name but rather point to the "id" in the "domains" table. [20:01:40] <Signum> jingo: It's less human-readable. But it eliminates redundancy, makes things faster and allows "cascades". [20:01:51] *** vice-versa has joined #postfix [20:02:00] <jingo> whoa, cascades! [20:02:01] <Signum> jingo: Cascading means that you delete one entry from the domains table and all dependent aliases and mailboxes are deleted, too. You are always consistent. [20:02:51] * Signum is still open for suggestions - the tutorial is in the making [20:03:20] <jingo> why would someone hate you for making things faster then? [20:03:43] <Signum> It would mean to convert the whole database structure into a completely new structure. I'm not sure people will like (or understand) that. [20:04:28] <Signum> Most people who send me email regarding the tutorial have an IQ hardly above room temperature. :( [20:05:30] <jingo> huh [20:06:22] <jingo> is there an online version viewable already? [20:07:02] *** kevincody has joined #postfix [20:07:19] <Signum> jingo: do you have a subversion client installed? [20:07:48] <Signum> jingo: http://workaround.org/svn/postfix-tutorial/trunk/etch [20:07:51] <kevincody> anyone know what openldap schema i should be looking at if i want to 100% control postfix through it? [20:08:12] <kevincody> seems like there are choices, mostly old ones [20:08:21] <jingo> Signum: unfortunately not [20:08:22] <smesjz> Signum: typo in the first line -> 'This it the ISP email tutorial for Debian Etch written in ReST format.' [20:08:25] *** VolVE has joined #postfix [20:08:49] <rob0> kevincody: good luck :) [20:09:18] <kevincody> rob0, that bad? [20:09:21] <Signum> smesjz: Rats. I have to start all over again. :) [20:09:31] <kevincody> i'm positive that i can make it work, but the schema selection will be off the hip [20:09:53] <kevincody> if there are standards buried somewhere that i can adhere to... [20:09:56] <smesjz> Signum: i'll can try to write something about Dovecot. But we need to test a full migration anyway. [20:10:09] <rob0> kevincody, I doubt there are any. [20:10:24] <kevincody> rfc1274 looks relevant, but it's 1993... [20:10:48] <Signum> smesjz: Sure. [20:11:30] * cpm thinks it makes no sense [20:11:31] <many> EHLO tutorial.POSTFIX. [20:11:58] *** fiftycal has quit IRC [20:12:50] *** amrit|zzz is now known as amrit|wrk [20:13:48] <jingo> ah, I'll just wait and see and have a look at the final product some day [20:14:00] <cpm> No. [20:14:10] <cpm> if you don't help, you can't look at it. [20:16:22] *** Taube is now known as taube [20:17:00] *** adrenaline has joined #postfix [20:17:05] <adrenaline> hello [20:17:13] <jingo> migration [20:17:16] <jingo> yuk [20:17:31] <adrenaline> I have a mail server that is running sendmail I am considereing changing to postfix [20:18:03] <adrenaline> I am in the .cf file what is the format for a multiple domain mail server [20:18:08] <adrenaline> under myhostname [20:18:31] <adrenaline> Or is it even possible to do in postfix? [20:19:00] <Signum> adrenaline: What is a "multiple domain mail server"? Are all the domains delivering email to local users? Or are there virtual users that don't exist in /etc/passwd? [20:19:08] <Signum> adrenaline: I'm not used to sendmail termini. [20:19:21] <adrenaline> I host virtual domains like 10 of them [20:19:37] <adrenaline> I need them to respond to mail.mydomain.com [20:19:46] <adrenaline> each differnet [20:20:00] <adrenaline> they are fully qualified [20:20:08] <Dominian> adrenaline: I run a multi-virtual domain postfix server.. works fine. [20:20:19] <Signum> !tell adrenaline virtual [20:20:49] <adrenaline> I have been running sendmail for so long I feel like such a newb lol [20:21:03] <Dominian> Postfix doesn't tkae that long to get into [20:21:09] <Dominian> just takes some reading up on main.cf to figure out the options. [20:21:12] <mordaunt> smesj I help administer a postfix/dovecot isp [20:21:16] <Dominian> I'm still trying to learn what they all do :) [20:21:30] <adrenaline> I need to know the format [20:21:39] <Signum> !tell adrenaline virtual [20:21:45] *** Lap_64 has joined #postfix [20:22:12] <adrenaline> Do I need to add all of the domain names to myhostname=? [20:22:18] <many> postfix isnt so different than sendmail in that respect. you just have to get used to the face that virtual doesnt resolve to user directly. [20:22:24] <many> fact [20:22:37] <Signum> !virtual [20:22:38] <knoba> Signum: 'virtual' : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html [20:22:39] <Signum> adrenaline: ^^^^^^^^ [20:22:45] <adrenaline> hmmm will it work if I don't delete sendmail [20:23:22] <Signum> adrenaline: hardly [20:23:42] <adrenaline> I just want to go back easily if I screw up [20:23:44] <Signum> adrenaline: unless you run it on another port... which is not very useful when dealing with SMTP which is almost always using TCP port 25 [20:24:10] <adrenaline> No I mean can I shut sendmail off then if I screw up turn it back on/ [20:24:13] <adrenaline> ? [20:24:14] <Signum> adrenaline: At least stop sendmail when running Postfix. You can keep both configuration and in case of an emergency stop postfix and start sendmail. [20:24:22] <adrenaline> lol [20:24:28] <adrenaline> cool [20:24:39] <Signum> adrenaline: But postfix uses binaries that are called "sendmail", too, for compatibility reasons. So that may lead to some confusion. [20:24:50] * Signum wouldn't use both at the same time [20:24:57] * Signum wouldn't use sendmail alone either :) [20:25:00] <Dominian> heh [20:26:35] * sepski switched from sendmail to postfix, and now i understand my config file :D [20:27:07] <many> atleast you think so. [20:28:02] <cpm> !Signum [20:28:02] <knoba> cpm: Error: "Signum" is not a valid command. [20:28:05] <cpm> see? [20:28:34] <jingo> !sendmail [20:28:35] <knoba> jingo: 'sendmail' : a pretty cryptic MTA that was famous in the ancient days of UNIX and still runs on a lot of mail servers. Don't confuse it with the "sendmail" command that is offered by Postfix to send emails (for compatibility reasons). [20:29:25] <cpm> !jingo [20:29:26] <knoba> cpm: Error: "jingo" is not a valid command. [20:29:28] <cpm> See? [20:29:30] *** weird_guy has joined #postfix [20:29:51] <adrenaline> what is the best spam filiter? [20:29:58] <adrenaline> I am getting hosed with spam [20:30:08] <many> there is no best. [20:30:16] <Signum> dspam and spamassassin are widely used. [20:30:20] <adrenaline> what is not hte worst? [20:30:24] * Signum prefers AMaViS with spamassassin built-in [20:30:34] <many> so are bogofilter and crm114 ;) [20:30:35] <weird_guy> hello guys. I'm trying to use implicit alias mappings for virtual domains based on the example on "the book of postfix", but it keeps complaining about no such recipient . has this feature been removed from postfix? [20:30:40] <Signum> not the worst = everything not being Mimesweeper [20:30:58] <Signum> weird_guy: implicit alias mappings? which parameter? [20:31:39] <matju> what does this mean? -> postfix/tlsmgr[15673]: fatal: unsupported transport type: fifo [20:31:57] <weird_guy> not a parameter per se... according to the book, if you define an alias like "postmaster user at otherdomain dot com" , for every virtual domain you have, postmaster will automatically be forwarded to user@otherdomain [20:32:03] <weird_guy> that is using virtual_alias_maps [20:32:23] <Signum> weird_guy: yes, that still works. [20:32:37] <Signum> weird_guy: did you define the domains in question as "virtual_alias_domains"? [20:33:04] <weird_guy> yep.. they are already accepting e-mail for the addresses where I did an explicit "user@virtual user@real" mapping in the alias table [20:33:07] <Zerberus> matju: grep tlsmgr /etc/postfix/master.cf [20:33:19] <Signum> weird_guy: you may want to read... [20:33:20] <Signum> !virtual [20:33:21] <knoba> Signum: 'virtual' : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html [20:33:39] <matju> Zerberus: tlsmgr fifo - - n 300 1 tlsmgr [20:33:53] <Zerberus> matju: use unix instead of fifo [20:35:25] <matju> Zerberus: cool, that fixed it :) [20:35:28] <matju> Zerberus: thanks :) [20:41:33] *** taube is now known as Taube [20:42:20] *** cjuner has joined #postfix [20:44:18] *** Nesquick has quit IRC [20:45:17] *** mirlyn has quit IRC [20:49:11] *** Fr0zen_ has joined #postfix [20:49:11] *** Fr0zen_ has quit IRC [20:52:14] *** j416 has left #postfix [20:56:34] *** hemry has joined #postfix [20:59:12] *** frennkie has quit IRC [21:08:16] *** cun7 has joined #postfix [21:11:19] <cun7> this is a super newb question, and i won't take any offense if someone points me to a url (as long as it answers my question... [21:11:29] <cun7> i need to set up a mail filter for multiple domains... [21:11:49] <cun7> there is no local delivery, just scan it and forward it to a centralized smtp server [21:11:50] <Dominian> !milter [21:11:50] <knoba> Dominian: Error: "milter" is not a valid command. [21:11:54] <Dominian> bah [21:12:03] <cun7> haha [21:12:08] <Dominian> cun7: are you wanting relay host? [21:12:14] <cun7> yes [21:12:16] <Dominian> postfix accepts it.. then forwards it? [21:12:21] <cun7> yup [21:12:31] <cun7> but it also needs to accept from multiple domains [21:12:56] <Dominian> Well, you could configure postfix to accept email for multiple domains... are you going to check the emails against valid users? [21:13:04] <cun7> no [21:13:05] <Dominian> or just accept everything for the domain? [21:13:07] <Dominian> ok [21:13:08] <cun7> everything [21:13:19] <sepski> cun7, so you have a catchall for all the domains ? [21:13:24] <Dominian> So doyou need to do per-domain forwarding to multiple domains? [21:13:39] <sepski> cun7, or all domains have a cathcall address ? [21:14:30] <cun7> all domains are being forwarded to one smtp server...but it's hosting multiple domains...so i guess multiple domains are being forwarded to multiple virtual hosts [21:15:02] <sepski> cun7, and you are absolutly sure that all those domains have a catchall address ? [21:15:10] <Dominian> Well, if you are just using postfix as a front-end box with no verification of domains etc.. you can just relay it to the other smtp box. [21:15:42] <Dominian> relayhost = [mailserver.isp.tld] [21:16:02] <cun7> yeah it's just a front-end, but i'm using proxsmtp to filter, and then it injects it back into the queue and is sent out [21:16:14] <cun7> hrm... [21:17:11] <cun7> Dominian: so i got that how do i get it to accept mail from each of the other domains? [21:17:14] <sepski> i use transport_maps= and in that map i have lines that say domain.tld smtp:other.smtp.server [21:17:41] <sepski> cun7, and are you 110% sure that all the domains have a catchall address ? [21:18:22] <cun7> yup [21:18:39] <cun7> well... [21:18:47] <cun7> it's an imail server hosting multiple domains [21:18:54] <cun7> i don't know shit about i mail [21:18:56] <cun7> imail* [21:19:13] <Dominian> ick.. sounds rough [21:19:20] <sepski> cun7, it's the admin of the individual domain that decide if they have a catchall or not [21:19:53] <sepski> cun7, point is if you dont know they have a catchall, and you accept and bounce (unknown recipient) you'll be generating more spam then you filter away. [21:19:55] <Dominian> Forgive my lapse in knowledge, but why the catchall? [21:20:04] <Dominian> nevermind [21:20:07] <Dominian> question answered [21:20:08] <cun7> no catchall [21:20:14] <cun7> 110% sure [21:20:15] <sepski> and i realy dislike misconfigured spam relays that do nothing but backscatter innocent 3rd persons (me) [21:20:42] <cun7> haha, i would have to agree [21:21:32] <sepski> cun7, you must either have a catchall for the domain, OR you must check for valid users on your relay box. you CAN NOT accept the mail. and then bounce it. since it's very likely to be a faked FROM: and would harm 3rd persons (who would report you and have you blacklisted) [21:21:57] <sepski> cun7, and you can not delete either, since it might be a $$$ order that someone just happened to mistype the email address on. [21:22:07] <sepski> so either check users. OR catchall. [21:22:16] <cun7> ok so catchall [21:22:30] <cun7> i guess the box i am setting up is a catchall for multiple domains [21:22:37] <cun7> would that make sense [21:22:50] <cun7> mx records for multiple domains are going to point to this box [21:23:00] <cun7> then it's suppossed to relay the messages to another server [21:23:16] <cun7> where teh domains' mailboxes are being hosted... [21:23:24] <cun7> that box is going to verify usernames [21:23:32] <sepski> cun7, personaly i am relaying for a imail site. and the 2 lines address_verify_map = btree:/home/vmail/verify-database and smtpd_recipient_restrictions = [lots of restrictions], reject_unverified_recipient, [more restrictions] does it all just fine [21:23:48] <sepski> cun7, there is 1 catchall address for each domain. [21:24:05] <many> cun7: you do know what a catchall is? [21:24:14] <sepski> cun7, and in my experience imail dont by default have a catchall. so the admin must configure the catchall address for each domain [21:24:20] <cun7> * -> domain.com ? [21:24:40] <many> no. * at domain dot com => user [21:24:46] <cun7> ahhh [21:24:53] <cun7> no, there's no catchall at all [21:25:08] <smesjz> it's evil to have catchalls anyway [21:25:09] <cun7> which i just repeated what imail dude in the room said to me [21:25:23] <sepski> cun7, then you would set up the most anoying pice of shit on the internet even a backscattering host [21:25:24] <many> so your outer MTA will accept the mail since it doesnt know what users are valid and your inner MTA will bounce invalid users [21:25:27] <many> bad [21:25:39] <sepski> people write poems about how they want to strangle people that configure backscattering host :) [21:25:49] <smesjz> hehe [21:26:32] <sepski> cun7, use postfix's recipient verification system if your to lazy to import user lists. [21:26:39] <sepski> cun7, as i mentioned above [21:26:48] <cun7> sepski: i can import user lists from imail? [21:27:01] <cun7> sepski: i mean, are you? [21:27:17] <sepski> cun7, no i use postfix's sender verification system [21:27:27] <smesjz> or use relay_recipient_maps if you can talk to imail using ldap or sql [21:27:29] <sepski> umm recipient i mean :P [21:27:38] <sepski> imail have ldap afaikl [21:28:07] *** frennkie has joined #postfix [21:29:12] <sepski> cun7, ofcourse you'r depending on that the reciving server supports recipient verification, and when you controll both hosts that's easy. since many disable that becouse of address harvesting [21:29:16] <cun7> sepski: yeah well my boss doesn't know shit about ldap...i do, but he doesn't [21:30:01] <cun7> thus nothing here is centralized... [21:30:09] <cun7> everything's an scripted [21:30:10] <sepski> cun7, the imail server have a internal ldap [21:30:24] <cun7> oh rearry?? [21:30:41] <sepski> that's where the users are stored afaik [21:30:55] <cun7> word [21:32:05] <cun7> sepski: is address_verify_map in main.cf? [21:32:09] *** frennkie has quit IRC [21:32:26] <cun7> oh, nvm [21:32:31] <sepski> cun7, if you type it in there :yes [21:32:56] *** weird_guy has left #postfix [21:33:44] <many> haha [21:35:05] <cun7> sepski: is there a tutorial you know of for this? [21:35:53] <cun7> i know you've spelled it out pretty thoroughly for me, but i need a little more background to understand what i'm doing here...the more i work on this the more confused i get [21:36:59] <cun7> such as what format is the verify-database file that you're talking about [21:37:17] <cun7> sepski: ^^ [21:38:18] <dinesh> thanks all for your help, my installation is now fully working [21:39:14] <sepski> cun7, the verify database is generated by postfix. never ever touch it [21:39:47] <sepski> cun7, you just specify the filename you want it to have. [21:40:15] <sepski> http://www.postfix.org/ADDRESS_VERIFICATION_README.html [21:41:35] <cun7> sepski: see, the problem is that there are probably 3 domains that are going to filtered by this server...one in particular gets > 200,000 messages /day...mostly spam [21:41:38] <many> callback?? [21:41:48] <cun7> bunch-o-dialup mail accounts [21:42:02] <smesjz> using blacklists? [21:42:32] <cun7> they should be, however to make a long story short this guy is moving his mail from one server to one of ours... [21:42:42] <sepski> cun you should serisously consider importing the users. [21:43:00] <cun7> we have a barracuda that filters for our smtp server, however, when it has to filter for this domain (it has in the past) it gets absolutely bogged down... [21:43:01] <sepski> since you might have performance issues if you need to do ldap or recipient verification on each meessages [21:43:06] <cun7> i'm talking 1hr delays for delivery [21:43:13] <many> how is callback helping against backscatter? [21:43:35] <sepski> many, what do you mean by callback ? [21:43:36] <many> barracuda. shudder [21:43:51] <many> sender address ber [21:44:00] <many> sender address verification [21:44:11] <sepski> many, we are talking about recipient address verification. [21:44:13] <smesjz> for all domains? [21:44:35] <many> huhmkay [21:44:41] <sepski> for the relay domains [21:44:55] <cun7> sepski: you mind if i pm? [21:45:23] <sepski> cun7, you want to stop most mails as early as possible. blacklists, + greylists + header checks. [21:45:31] <sepski> cun7, talk in channel it benefits more people [21:45:36] <cun7> cool [21:45:46] <smesjz> you should really get relay_recipient_maps going by either SQL or LDAP, that's a good way to stop backscatter [21:46:12] <cun7> well, i have < 24hrs to get this done [21:46:32] <cun7> so i gotta have something working by early tommorrow morning [21:46:35] <smesjz> hmm, get rid of that imail box [21:46:36] <smesjz> :) [21:46:43] <cun7> smesjz: yeah i hate it [21:50:08] *** cjuner has quit IRC [21:50:09] <smesjz> but cant you setup a dedicated box with postfix/dovecot or courier and eliminate imail & barracuda etc [21:50:12] <smesjz> you can put it in a vmware if you only need to demonstrate it [21:51:41] <sepski> cun7, besides i think the "export usernames" is in the imail faq. [21:52:10] <sepski> then you can export it and make a relay_recipient_maps out of it. [21:52:33] <sepski> when you have it working you can automate it to do it once every $time interval [21:53:09] <cun7> sepski: alright, so first question - how do i get postfix to accept mail from these multiple domains? [21:53:12] <cun7> heh...babysteps [21:53:44] <cun7> i'll import a user list, but for right now i just want it to atleast allow these messages in [21:53:48] <cun7> ...and get them out [21:54:23] <cun7> no user auth, just domain auth... [21:54:33] <cun7> see, technically all of these domains are part of ourr network [21:54:47] <cun7> so i can let it relay for a class c subnet [21:54:54] <sepski> cun7, personaly i use a transport_maps = [21:55:40] <many> you dont accept mails "from domains" [21:56:16] <cun7> many, ok from *@domain [21:56:18] *** james has joined #postfix [21:56:53] *** cpm has quit IRC [21:56:54] <many> you do accept from source-ip OR to dest-user@domain [21:57:00] <many> but not from domain [21:58:18] <cun7> wait, what? [21:58:36] <cun7> lol, my head hurts so much right now : / [21:59:16] <sepski> cun7, make a file you can call /etc/postfix/transport write a single line in it saying. "domain.com smtp:imail.hostname" (or smtp:[ip.add.ress.e] [22:00:43] <sepski> then run postmap /etc/postfix/transport and put transport_maps = hash:/etc/postfix/transport in main.cf [22:01:24] <sepski> also add address_verify_map = btree:/etc/postfix/verify-database [22:02:08] *** Lap_64 has quit IRC [22:03:07] *** Lap_64 has joined #postfix [22:03:26] <sepski> and something like smtpd_recipient_restrictions = reject_rbl_client zombie.dnsbl.sorbs.net, reject_rbl_client 11.spews.dnsbl.sorbs.net reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_non_fqdn_recipient, reject_non_fqdn_sender, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unverified_recipient [22:04:01] <cun7> in main.cf? [22:04:04] <cun7> for the last one? [22:04:09] <many> yes [22:04:28] <sepski> cun7, verify that i got it all right, and never trust madmed on irc ! [22:05:48] <sepski> look up each of those on http://www.postfix.org/postconf.5.html#smtpd_recipient_restrictions and see that they are ok for you [22:05:58] <cun7> sepski: can the smtpd_restrictions have \n or \r's in it or is it all one line? [22:06:08] <cun7> sepski: ok, i will [22:06:11] <sepski> cun i have them like [22:06:12] <sepski> smtpd_recipient_restrictions = [22:06:12] <sepski> reject_unknown_sender_domain, [22:06:13] <sepski> reject_unknown_recipient_domain, [22:06:15] <sepski> that [22:06:18] <cun7> ok [22:07:25] <sepski> cun7, and add your ip series (that you want to allow sending for) to mynetworks= [22:08:03] *** rmayorga has quit IRC [22:08:06] <sepski> cun7, the restrictions is done in order. so the restrictions before permit_mynetworks will also apply to your internal machines. [22:08:44] *** technoid- has joined #postfix [22:09:02] <sepski> personaly i dont have any ip's in mynetworks since i force SMTPAUTH on everyone [22:09:14] <sepski> but that's a whole other ballgame :) [22:09:39] <sepski> cun7, make sure you have the ligth checks first. and you might consider running a dns cache localy. [22:09:50] <sepski> since many of the checks are dns lookup based [22:10:21] *** rmayorga has joined #postfix [22:15:20] <cun7> sepski: yay [22:15:52] *** AJ__Z0 has joined #postfix [22:17:47] *** Nockian has joined #postfix [22:21:11] <cun7> sepski: yeah, it's working...i just need to get my proxy setup [22:21:21] *** mrivera has quit IRC [22:21:36] <cun7> it's filtering but it's not relaying it back to the smtp server [22:21:51] <cun7> (my test account is using the same smtp server) [22:22:15] <sepski> same ? [22:22:34] <sepski> did you configure the transport_maps correctly ? [22:22:39] <cun7> ya [22:22:52] <sepski> run mailq , is your mail there ? whats it doing ?= [22:23:02] <sepski> or did you get it in return (what was the error? ) [22:23:30] <cun7> it's looping in the queue until it drops it [22:23:44] <sepski> drops ! [22:24:01] <cun7> ? [22:24:08] *** AJ_Z0 has quit IRC [22:24:18] <sepski> sounds like you configured a smtp:HOSTNAME where hostname points to the server your on and not to the imail server [22:24:29] <sepski> try with [ip.ad.re.ss] [22:24:34] <cun7> ok [22:24:38] <sepski> try with domain.com smtp:[ip.ad.re.ss] [22:24:45] <sepski> ip addres sif for imail ofcourse [22:24:58] <sepski> postmap /etc/postfix/transport afterwards [22:26:34] *** Turt|e has quit IRC [22:29:39] <cun7> sepski: it's still dropping [22:29:45] *** raqamy has quit IRC [22:29:54] <cun7> actually scratch that it's just looping in the queue [22:30:05] *** xpoint has quit IRC [22:32:12] <sepski> cun7, you dont have your domainname in mydomains i hope ? [22:32:41] <cun7> not that i know of, but i'll check... [22:32:42] <cun7> http://pastebin.ca/490051 [22:34:12] <cun7> sepski: ^^ maillog [22:34:12] <cun7> sepski: no, it's not in mydomains [22:34:12] <cun7> just the default [22:34:13] *** csm-laptop has quit IRC [22:34:14] <cun7> (which is my domain technically) [22:34:21] <cun7> lol [22:34:38] <cun7> # The mydomain parameter specifies the local internet domain name. [22:34:39] <cun7> # The default is to use $myhostname minus the first component. [22:34:39] <cun7> # $mydomain is used as a default value for many other configuration [22:34:39] <cun7> # parameters. [22:35:13] *** AJ__Z0 is now known as AJ_Z0 [22:35:57] <sepski> you can't have that [22:36:34] <sepski> anyway hopefully youll get more help , since now im beeing dragged to bed. [22:36:36] <sepski> night all [22:36:40] <cun7> night man [22:36:52] <cun7> sepski: thank you! [22:36:58] <sepski> good luck :) [22:37:21] *** sepski has quit IRC [22:38:07] *** fzzzt has joined #postfix [22:38:48] <fzzzt> hey guys, does this mean the server sent a message: "0DDE3B802C: to=<user at domain dot com>, relay=1.2.3.4[1.2.3.4]:25, delay=0.35, delays=0.01/0.01/0.2/0.13, dsn=2.1.5, status=deliverable (250 2.1.5 user at domain dot com)" [22:38:59] <fzzzt> or just that it checked and the user was a valid recipient [22:39:05] <fzzzt> :/ [22:39:24] <fzzzt> afaict it looks like it sent two messages, the actual one and this "deliverable" one [22:40:34] <fzzzt> hmm or maybe that IS the actual message being sent [22:41:13] <smesjz> nah, it's sender address verification [22:41:19] <fzzzt> yeah [22:41:20] <smesjz> it's a probe actually [22:41:39] <fzzzt> so it's not sending 2 messages? [22:41:44] <fzzzt> i dont remember seeing that before [22:41:48] <smesjz> the connection is terminated and Postfix doesn't issue the DATA command [22:41:53] <smesjz> no, it's not [22:42:08] <fzzzt> cool [22:42:08] <smesjz> otherwise there would have been: status=Sent or so [22:42:18] <smesjz> deliverable != delivered [22:42:19] <fzzzt> ahh, gotcha [22:42:28] <fzzzt> thanks [22:42:56] *** j416 has joined #postfix [22:43:13] *** etaylor has quit IRC [22:47:43] <fzzzt> hmm it shouldn't be relaying to the IP in that line though [22:47:43] <fzzzt> bah [22:52:35] <smesjz> check smtpd_recipient_restrictions [22:53:00] <fzzzt> i have relay_transport = amavisd-new:... [22:53:06] <fzzzt> but its getting the IP from somewhere [23:01:43] *** fzzzt has quit IRC [23:02:51] *** smesjz has quit IRC [23:13:06] *** j416 has left #postfix [23:16:29] *** Mazon is now known as mazon [23:20:06] *** hemry has quit IRC [23:23:14] *** pirho has joined #postfix [23:26:23] *** cilly has joined #postfix [23:33:22] *** hparker has quit IRC [23:36:04] *** AJ_Z0 has quit IRC [23:36:47] *** AJ_Z0 has joined #postfix [23:37:15] *** kevincody has left #postfix [23:37:16] *** Rashad has joined #postfix [23:37:29] <Rashad> hi all [23:38:50] <Rashad> I'm new with postfix, so I have one stupid question, is postfix not a pop3 server and I need to install some thing like dovecot to make it work [23:40:16] <Rashad> hello [23:40:23] <Rashad> I need your help [23:41:38] *** magyar has joined #postfix [23:41:47] <Signum> Rashad: correct [23:42:01] <Rashad> thank you [23:42:13] <Rashad> so what is the best pop3 server [23:42:22] <Signum> Microsoft Exchange. [23:42:33] <Rashad> :-) [23:42:46] <Rashad> let's talk about linux [23:42:48] <Signum> There are multiple and the choice is yours. uw-pop3d works good for local users. courier and dovecot work well for virtual accounts. [23:43:08] *** Bronsky has quit IRC [23:43:19] <Rashad> thank you agai Signum [23:43:24] <Signum> Rashad: You're welcome. :) [23:44:36] <rob0> FSVO "good". IMO both dovecot and courier are better than uw for local users. [23:49:16] *** AcidStriker has joined #postfix [23:50:36] <AcidStriker> I am trying to configure a mail server on ubuntu 6.0, Everything was going right but I did a netstat -an|grep listen to see if all the ports where listening but the 25 wasn't, I try to do a telnet localhost 25 and nothing, how can I activate the smtp on postfix [23:51:16] <Signum> AcidStriker: it's activated by default. is postfix running? (ps ax | grep master) does "postfix check" complain about anything? [23:51:32] *** rootsvr has joined #postfix [23:52:02] <AcidStriker> this is the output [23:52:40] <AcidStriker> 9653 ? Ss 0:00 /usr/sbin/cyrmaster -d [23:53:02] <AcidStriker> 9860 pts/0 0:00 grep master [23:53:03] <Signum> So Postfix is not running. [23:53:24] <AcidStriker> yeah, I even restart it a couple of time, but it didn't work [23:53:39] <Signum> so what did the check print? [23:54:04] *** RedShift has joined #postfix [23:54:06] <RedShift> hi all [23:54:23] <RedShift> how can I say, all mail received for @opengate.be should be relayed to [81.95.112.248] [23:54:31] <AcidStriker> nothing, it didn't output nothing [23:54:37] <Signum> !tell RedShift transport_maps [23:54:41] <RedShift> I added opengate.be [81.95.112.248] to /etc/postfix/transport [23:54:42] <Signum> AcidStriker: anything in the mail.log? [23:54:47] <RedShift> but still the server replies with "user not found" [23:54:57] <Signum> RedShift: the remote server replies with "user not found"? [23:55:12] <RedShift> Signum: no, the server that should be relaying answers with user not found [23:55:49] <RedShift> like it's not processing the transport map [23:56:08] *** Ryushin has quit IRC [23:56:09] <AcidStriker> Signum, I don't see anything wrong [23:56:22] <AcidStriker> I can paste the file if you want to [23:56:28] <Signum> RedShift: is the domain listed in relay_domains? or do you inject the mail locally? [23:56:32] <Signum> AcidStriker: sure [23:56:55] <AcidStriker> where do you want me to send it [23:57:01] <Signum> !pastebin [23:57:01] <knoba> Signum: 'pastebin' : a way to paste larger amounts of text so that other people can read it. Try http://www.rafb.net/paste/ or http://paste.debian.net/ - Do not forget to tell us the URL where you pasted it. [23:57:37] <RedShift> Signum: aha, I get 554 relay acces denied [23:57:55] *** dinesh has quit IRC [23:58:10] <Signum> RedShift: so you don't allow relaying. fix that first :) [23:58:47] <AcidStriker> here it is http://rafb.net/p/M9Demi80.html [23:59:22] <Signum> AcidStriker: that log file doesn't talk about postfix at all. just cyrus. [23:59:41] <AcidStriker> that is what mail.og had [23:59:49] <Signum> AcidStriker: did you even start postfix? [23:59:55] <AcidStriker> yeah