[00:00:46] *** killown has quit IRC [00:01:01] *** rmayorga has quit IRC [00:01:36] <tuxcrafter> mh_le: i only got a problem when you do it like this and that is that also incoming connections must be authenticated and that means you are likely not to receive any mail than the one you send yourself [00:01:36] <tuxcrafter> many can you confirm this please? [00:02:11] *** aldin has joined #postfix [00:03:53] <mh_le> smtp auth is perfectly possible without blocking incomming mail... just getting it to use the db is the issue [00:05:34] <tuxcrafter> mh_le: sorry i am not experienced enough with postfix to be able to help you on this point [00:05:42] <aldin> my ISP blocks port 25 (IN/OUT) , i used smarthost -> relayhost = myISP, so now i can send mails from my machine but cant receive, what to do to be able to receive mail? thanks in advance [00:06:02] *** memic has joined #postfix [00:06:43] <aldin> hparker: many:? [00:07:58] *** rmayorga has joined #postfix [00:08:12] <blueyed> I've changed my config (e.g. to use smtpd_proxy_filter, for smtp) and now I'm getting "unknown user" bounces from pickup'ed mails. See http://pastebin.ca/523786 - what's wrong? [00:08:33] <tuxcrafter> strict_rfc821_envelopes can i use this option [00:08:43] <tuxcrafter> will it not stop email from MS clients [00:08:51] <tuxcrafter> This stops mail from poorly written software. [00:08:56] <tuxcrafter> this is not very specific [00:11:32] *** KhensU has joined #postfix [00:13:26] *** Mazon is now known as mazon [00:15:29] *** xpoint has quit IRC [00:15:38] *** xpoint has joined #postfix [00:22:20] *** sepski has quit IRC [00:22:42] *** Azhi_Dahaka has joined #POSTFIX [00:22:51] <Azhi_Dahaka> hi [00:22:56] *** james has quit IRC [00:23:07] <Azhi_Dahaka> i'm trying to setup a mail server on OsX but i'm getting this error on the smtp log [00:23:08] <Azhi_Dahaka> relay=none, delay=0, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]: Connection refused) [00:23:45] <Azhi_Dahaka> any ideas? [00:24:54] <aldin> Azhi_Dahaka: what is in ur /etc/postfix/main.cf [00:25:00] <xpoint> content_filter ? [00:25:11] <aldin> mynetworks = 127.0.0.0/8 [00:25:58] <aldin> my ISP blocks port 25 (IN/OUT) , i used smarthost -> relayhost = myISP, so now i can send mails from my machine but cant receive, what to do to be able to receive mail? thanks in advance [00:26:01] <xpoint> why is "postconf -d | grep mynetworks" needed to change ? [00:26:16] <aldin> xpoint: i just guess [00:26:20] <aldin> i am newbie too [00:26:30] <aldin> i am showing him mine main.cf which works [00:26:35] <aldin> with sending [00:26:52] <aldin> so he could compare... [00:26:57] <Azhi_Dahaka> in which part, aldin? [00:27:06] <xpoint> if your isp blocks port 25 how do you then send mail ? [00:27:30] <aldin> xpoint: i use smarthost "relayhost = mail.europronet.ba" [00:27:41] <aldin> Azhi_Dahaka: /etc/postfix/main.cf [00:27:45] <xpoint> this is still port 25 [00:28:00] <Azhi_Dahaka> aldin, i mean what are you looking for [00:28:03] <aldin> Azhi_Dahaka: in my conf it says mynetworks = 127.0.0.0/8 [00:28:03] <Azhi_Dahaka> is pretty long [00:28:16] <Azhi_Dahaka> mynetworks = 192.168.16.0/24,127.0.0.1 [00:28:21] <aldin> xpoint: i know but this work [00:28:31] <aldin> i sent succesfully mail on my gmail account [00:28:36] <aldin> and it came [00:28:45] <aldin> but withotu it connectin refused... [00:28:59] <xpoint> aldin, yes this is standard when isp require relay through them [00:29:53] *** KhensU has quit IRC [00:29:54] <xpoint> your postfix is client, but it needs to know the wan ip aswell [00:29:55] <aldin> Azhi_Dahaka: dont know u have 127.0.0.1 [00:30:07] <rob0> If the ISP blocks inbound SMTP, forget it. You have to have an MX listening on 25. [00:30:12] <aldin> xpoint: did u tell that to me or him [00:30:27] <aldin> rob0: how to do that would u help me here [00:30:53] <rob0> Get a different ISP, or tell this one to open up inbound SMTP. [00:31:04] *** brancaleone has quit IRC [00:31:18] <xpoint> Azhi_Dahaka, remove mynetworks if you are on dunamic ip [00:31:22] *** brancaleone has joined #postfix [00:31:26] <Azhi_Dahaka> ok [00:31:27] <aldin> rob0: so in is "broken" definetely? only send through relayhost can work? [00:31:44] *** brancaleone has quit IRC [00:31:44] <aldin> rob0: inbound if no 25 is open? [00:32:06] <xpoint> aldin, yes when the isp force you to use there smtp then use relayhost in postfix [00:32:06] *** CaptainMorgan has quit IRC [00:32:45] *** Mavvie has quit IRC [00:32:50] *** conico has joined #postfix [00:33:19] <xpoint> rob0, maybe Azhi_Dahaka is dynamic ip, then its perfectly ok with closed smtp port 25 to this ip [00:33:43] *** hagna has quit IRC [00:34:06] <Azhi_Dahaka> the mail is not getting out of the server [00:35:09] *** KhensU has joined #postfix [00:36:39] <Azhi_Dahaka> i can log in into the smtp server, but there are no messages getting out of it [00:36:41] <xpoint> Azhi_Dahaka, even if you configure relayhost ? [00:36:54] <Azhi_Dahaka> what's relayhost? [00:37:13] <xpoint> show postconf -n on pastebin [00:37:23] <Azhi_Dahaka> ok [00:38:33] <Azhi_Dahaka> http://pastebin.ca/523861 [00:38:47] <xpoint> if you use the computer as a local mailserver where postfix is client it should work out of the box [00:39:09] <Azhi_Dahaka> i'm using OSX [00:39:17] <Azhi_Dahaka> Server Edition [00:40:51] <tuxcrafter> bye guys [00:40:56] <tuxcrafter> need some sleep [00:41:00] *** tuxcrafter has left #postfix [00:41:15] <xpoint> Azhi_Dahaka, is 200.74.147.202 static to you ? [00:41:29] <xpoint> Azhi_Dahaka, as in newer changes ? [00:41:31] <Azhi_Dahaka> yep [00:41:40] <xpoint> good [00:41:49] <aldin> rob0: ? so to make things clear: i have 25 blocked by ISP (inbound/outbound), ok, so i made my postfix to send mail by tweaking main.cf with "relayhost = myisp", but i cant receive mail, so is it it or isn't it possible to do other tweak to accept/receive mail from others? [00:41:50] <xpoint> if it was not then remove it [00:41:53] <aldin> xpoint: ? [00:42:32] <Azhi_Dahaka> ok [00:42:44] <xpoint> aldin, your isp must then be configured to do backup mx for you i belive [00:43:06] <xpoint> Azhi_Dahaka, what error do you get ? [00:43:23] <aldin> xpoint: can u exlain what ix MX [00:43:25] *** Mavvie has joined #postfix [00:43:26] <xpoint> Azhi_Dahaka, is the content_filter working ? [00:43:29] <aldin> btw i use dynamic IP [00:43:32] <aldin> and dyndns.org [00:43:37] <Azhi_Dahaka> o=relay=none, delay=0, status=deferred (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]: Connection refused) [00:43:53] <hparker> aldin: My advice, get a business class connection with a static IP [00:44:09] <xpoint> hparker, hi :-) [00:44:17] <hparker> Azhi_Dahaka: You have a content filter configured that isn't running from the looks of it [00:44:20] <hparker> lo xpoint [00:44:29] <Azhi_Dahaka> could be that? [00:44:41] <hparker> amavisd-new or something [00:45:21] <Azhi_Dahaka> yo mean spam filter? [00:45:35] <hparker> Or something you configured that isn't running [00:45:51] <xpoint> hparker, got my single cpu opteron started againg, will just make it with a gentoo desktop, but its still working, the batteri for bios was flat and it missed a jumper, sorry for being ot :) [00:45:51] <w0rd54> anyone use assp? [00:45:59] <Azhi_Dahaka> i stopped the mail check [00:46:05] <hparker> xpoint: ;) [00:46:08] <Azhi_Dahaka> but still, nothing goes out of the queue [00:46:20] <hparker> Azhi_Dahaka: Ok, but you didn't reconfigure postfix not to use it [00:46:34] <aldin> hparker: ok, i am just ordinary user "hackin" linux... so i got mailserver to learn to work on it, but noone of u wont tell me if it is possible to "relay" so i could get mails like i "relay" for sending? [00:46:52] <Azhi_Dahaka> i turned it off on mail assistant [00:46:56] <w0rd54> anyone use assp??@$!%!? [00:47:04] <Azhi_Dahaka> should i erase that line? [00:47:11] <hparker> aldin: I told you how... If the ISP also blocks inbound to it's residential stuff, there's nothing *you* can do [00:47:25] <hparker> Azhi_Dahaka: I have no idea about OS X [00:47:26] <w0rd54> adlin: you can get a service from noip.com to change the port [00:47:35] <w0rd54> aldin: and then you can run your own mailserver [00:47:36] <hparker> vim is my configuration tool [00:47:37] <w0rd54> it will cost you $$$ tho [00:47:43] <xpoint> aldin, if your isp agre to do backup mx for you then you can put postfix to work with smtpd, else you have to have this external [00:48:00] <Azhi_Dahaka> ok, no problem... [00:48:13] <Azhi_Dahaka> should i comment the content-filter line? [00:48:40] <xpoint> aldin, ask them about backup mx, if thay say go, then just add there smtp server as mx in your domain [00:48:58] *** hparker has quit IRC [00:49:58] <aldin> w0rd54: thanks but i am "broke" hehe i use dyndns.org and dynamic ip for "domain" just learning some stuffs (apache/samba/postfix/ssh etc) [00:50:19] <xpoint> Azhi_Dahaka, the error says that your content_filter is not working, so get it working or disable this filter [00:50:24] <aldin> ok, guys just this one could someone explain me what is mx which xpoint mention [00:50:57] <Azhi_Dahaka> already did that [00:51:00] <xpoint> aldin, you want your postfix to work as a smtpd server ? [00:51:16] <xpoint> aldin, not just as a smtp client ? [00:51:35] <xpoint> Azhi_Dahaka, then stop postfix [00:51:43] <xpoint> Azhi_Dahaka, start postfix [00:51:52] <Azhi_Dahaka> http://pastebin.ca/523891 [00:51:58] <Azhi_Dahaka> already did that [00:51:59] <xpoint> Azhi_Dahaka, postsuper -r ALL [00:52:08] <aldin> xpoint: it is server AFAIK? 220 kapetano.dyndns.org ESMTP Postfix (Ubuntu) [00:52:09] <xpoint> Azhi_Dahaka, postfix reload [00:52:32] <aldin> xpoint: is it? [00:53:12] <aldin> i have IMAP POP3 (Courier) [00:53:18] <xpoint> aldin, this is YOUR server in postfix, but if you have dunamic ip no one knows where your server is [00:53:26] <Azhi_Dahaka> nothing [00:53:42] <Azhi_Dahaka> sudo postsuper -r ALL [00:53:47] <Azhi_Dahaka> postsuper: Requeued: 20 messages [00:53:54] <aldin> smtpd - Mail proxy for firewalls with anti-spam and anti-relay features [00:53:58] <aldin> is it this? [00:54:02] <xpoint> aldin, dont confuse postfix server with couerier-pop3 [00:54:05] <w0rd54> anyone use assp? [00:54:20] <aldin> desc: Smtpd uses two programs, smtpd which listens for incoming mail and places [00:54:26] <aldin> btw i am on ubuntu 7.04 [00:54:41] <aldin> and have package called smptd not installed is that it? [00:54:54] <xpoint> Azhi_Dahaka, now postfix will deliver the queue [00:55:03] <Azhi_Dahaka> nothing [00:55:08] <Azhi_Dahaka> i got this error [00:55:10] <Azhi_Dahaka> root at it2linux dot industrialtaylor.com: [00:55:10] <Azhi_Dahaka> delivery temporarily suspended: transport is unavailable [00:55:28] <Azhi_Dahaka> at least is different [00:55:39] <xpoint> there is a transport map not working then [00:55:50] <aldin> xpoint: ? did u read? [00:55:58] <Azhi_Dahaka> sorry to be such a noob... what's a transport map? [00:56:22] <xpoint> aldin, ubuntu as server is a joke [00:56:39] <aldin> postfix 13245 0.0 0.3 6556 3080 ? S 00:51 0:00 smtpd -n smtp -t inet -u -c -s 2 [00:56:44] *** flami has joined #postfix [00:56:47] <aldin> xpoint: i am just studying [00:56:48] <xpoint> aldin, but i am confused by what you want [00:57:31] <Azhi_Dahaka> it's local mail [00:57:33] *** war has quit IRC [00:57:36] <aldin> xpoint: this, i have kapetano.dyndns.org, [00:57:37] <Azhi_Dahaka> from the server to itself [00:57:51] <aldin> i can send mails from aldin at kapetano dot dyndns.org [00:58:09] <xpoint> Azhi_Dahaka, mailbox_transport = cyrus [00:58:11] <aldin> but cant receive mails from lets say gmail.com on aldin at kapetano dot dyndns.org? [00:58:18] *** hparker has joined #postfix [00:58:23] <aldin> xpoint: so i want to receive them [00:58:26] <xpoint> Azhi_Dahaka, is cyrus working ? [00:58:36] <Azhi_Dahaka> what's cyrus... :S [00:58:51] <hparker> aldin: What's the MX or your mail server? [00:58:53] <Azhi_Dahaka> i got 2 processes [00:59:01] <Azhi_Dahaka> master and pop3d [00:59:02] <xpoint> Azhi_Dahaka, you need cyrus ? [00:59:12] <Azhi_Dahaka> i don't know what's cyrus [00:59:53] <xpoint> Azhi_Dahaka, mailbox_transport = cyrus < then why this line in main.cf ? [00:59:55] <aldin> hparker: i am newbie, how can i see that? [01:00:06] <aldin> hparker: i dont know what is MX [01:00:13] <hparker> aldin: In your DNS configuration [01:00:15] <Azhi_Dahaka> xpoint, must be the work of Server Admin [01:00:18] <hparker> Mail eXchanger [01:00:19] <Azhi_Dahaka> botches every config file [01:00:32] <Azhi_Dahaka> so, i should remove that line... [01:00:42] <hparker> Azhi_Dahaka: I do know from reading postfix-users the admin thingy is a bit limited [01:00:43] <xpoint> Azhi_Dahaka, dont use mac os x as server :-) [01:00:49] <Azhi_Dahaka> have to... [01:00:52] <Azhi_Dahaka> no choice [01:00:57] <Azhi_Dahaka> orders from the top [01:01:08] <xpoint> top is lame :-) [01:01:14] <hparker> use vim for your config editor ;) [01:01:25] <aldin> hparker: as i said i use dynamic IP, so i made account on dyndns.org so my domain is kapetano.dyndns.org [01:01:45] <aldin> i dont know DNS...stuff that u ask how can i see them? [01:01:52] <hparker> kapetano.dyndns.org has no MX record [01:01:59] <xpoint> aldin, search dyndns.org about mx backup [01:02:21] *** jtole has joined #postfix [01:02:26] <jtole> hey guys [01:02:44] <Azhi_Dahaka> commented ir [01:02:45] <Azhi_Dahaka> it [01:02:50] <aldin> xpoint: ok just sec to google it [01:03:07] <xpoint> Azhi_Dahaka, just joking a bit, mac is good as server, just the gui config editors the assume to much most of the times [01:03:10] *** mindcooker has left #postfix [01:03:34] <Azhi_Dahaka> i know [01:03:46] <Azhi_Dahaka> i had to set up apache aside and send the local web server home [01:04:00] <xpoint> Azhi_Dahaka, the try againg with postsuper -r ALL [01:04:02] <hparker> aldin: May not help, I can't get past 217.199.128.178 on port 25.. [01:04:09] <Azhi_Dahaka> hate that app... and don't get me started with the blood that i sweated with natd [01:04:12] <xpoint> Azhi_Dahaka, and postfix reload [01:04:28] <Azhi_Dahaka> but, i have never configured mail [01:04:37] <Azhi_Dahaka> i'm a complete ignrant on that issue [01:05:49] <xpoint> Azhi_Dahaka, if that helps :-) [01:05:55] <jtole> I have a question about transports, I set two up today for dspam, /join #dspam [01:05:58] <jtole> oops [01:06:01] <jtole> lol [01:07:07] <Azhi_Dahaka> no idea [01:07:12] <Azhi_Dahaka> no help [01:07:35] <jtole> lol, I know [01:07:49] <jtole> ok, now a transport allows me to setup a new mail box right? [01:08:02] <Azhi_Dahaka> didn't worked out [01:08:35] *** flami has quit IRC [01:08:36] <Azhi_Dahaka> thx, guys [01:08:43] <Azhi_Dahaka> i'll be bothering tomorrow [01:08:44] <Azhi_Dahaka> .) [01:08:46] <Azhi_Dahaka> :) [01:08:49] *** Azhi_Dahaka has quit IRC [01:08:49] <xpoint> Azhi_Dahaka, what logs now ? [01:09:10] <xpoint> i take some beers until then [01:10:47] <aldin> hparker: sorry i was reading manuals on dyndns.org site what is this 217.199.128.178? [01:10:57] <aldin> Mail Exchanger (optional): [01:11:04] <aldin> what number should i put here? [01:11:29] <aldin> there is checkbox "Backup MX?" too? [01:12:13] <hparker> 217.199.128.178 is the last IP I hit on port 25, belongs to europro [01:12:23] <aldin> aha [01:12:26] <xpoint> aldin, ask your isp about backup mx, until you know it completely you cant recieve mail [01:12:34] <aldin> so they definetely block 25 in/out [01:12:51] <hparker> Why not call them and ask? [01:12:58] <aldin> hparker: i called them [01:13:03] <jtole> ok, I just answered my question about transports but I have two transports set up, one is ham.ham and one is spam.spam, I sent a e-mail to ham.ham@address and ham@address but it came back to me, now my server is setup to allow all mail at any name to come back to me [01:13:06] <aldin> but one man answered and say it is ok.. [01:13:11] <aldin> since i cant proove it [01:13:24] <xpoint> but what you can do it have dyndns.org setup as mx, and then later etrn example.tld to them :-) [01:13:25] <aldin> i will first investigate and come with evidences.. [01:13:28] <jtole> I guess my question is.. well did it go to the transport and come back to me as well or did it not go to the transport [01:13:29] <jtole> ? [01:13:55] <hparker> jtole: What do the logs say? And forwarding spam/ham trashes the headers [01:14:03] *** telmich has joined #postfix [01:14:24] <telmich> if I do not want to do address verification for a specific domain, is it possible to exclude that domain? [01:14:37] <aldin> >>You can't use Backup MX flag without value for MX record.<< [01:14:40] <jtole> hparker I was... hmm... one sec, lemme look [01:14:42] <aldin> what is that mean [01:15:15] <xpoint> aldin, that you olso need one more mx [01:15:36] <xpoint> priorty should be lover on that one [01:16:07] <xpoint> example.tld 20 mail.isp.tld [01:16:36] <xpoint> example.tld 10 yourdundns.org host [01:16:36] <aldin> xpoint: hparker can u see this and suggest me what to do [01:16:37] <aldin> http://kapetano.dyndns.org/www/kontejner/Screenshot-My%20Account%20--%20Dynamic%20DNS%20--%20kapetano.dyndns.org%20-%20Mozilla%20Firefox.png [01:18:14] <jtole> hmmm, it says originally to, and then the new to address where it looks like it was changed but it says delivered via dspam, but the transports are supposed to be handled by postfix [01:18:25] *** jkitchen has joined #postfix [01:18:58] <jtole> so, to me, it looks like the transport was never called [01:19:07] <xpoint> aldin, untic the backup mx, and write your dundnshost into the box [01:19:38] <jkitchen> http://www.postfix.org/postconf.5.html#smtp_destination_concurrency_limit <--- is there a way to do that on a per domain basis? for some domains even 5 is too much, yet for other domains, if we have it lower than 50 mail backs up like crazy [01:20:22] <aldin> xpoint: kapetano.dyndns.org or just dyndns.org? [01:20:31] <xpoint> first one [01:20:38] <aldin> xpoint: ok just sec [01:20:56] <aldin> Mail Exchanger: kapetano.dyndns.org [01:21:03] <aldin> xpoint: ? [01:21:13] <aldin> can u try digg mx [01:21:22] <xpoint> if you tic backup mx then dyndnas is olso backup mx for this domain [01:21:44] <xpoint> unticed you have to be online :-) [01:22:23] <aldin> xpoint: i dont get it what means backup sorry , and pls have understanding i am really hard working to learn this [01:22:54] <hparker> google "backup mx" [01:22:55] <aldin> hparker: what was the command to see if i have MX record (whatever it si) [01:23:15] <hparker> host -t mx domain [01:23:20] <xpoint> aldin, dns is now ok [01:23:42] <aldin> hparker: does it means that it hols my incom mails till i get online? [01:23:51] <xpoint> aldin, dig kapetano.dyndns.org mx [01:23:56] * hparker wonders how he got by all those yeras without IRC to teach him.... [01:24:23] <hparker> Didn't even have google, altavista or yahoo.... [01:24:32] <jtole> someone was alive before IRC? [01:24:37] <aldin> wow! [01:24:43] <hparker> s/altavista/just alavista/ [01:24:44] *** dbau has quit IRC [01:24:50] <pbh> does anyone know the lib??? for the sasl in postfix when typing ldd postfix? [01:24:54] <aldin> kapetano.dyndns.org has no MX record [01:24:57] <xpoint> hparker, its like my girl she asking every thing, even obervious things :-) [01:25:06] <hparker> jtole: No, I spent my time reading/learning.. Not asking someone else [01:25:47] <xpoint> hparker, gentoo people does not need to ask so much since there is good wiki/howtos :) [01:25:54] <hparker> (Even though I was running an IRC server on th eold sysopnet) [01:26:28] <jtole> well thats always where I start but I come in here in two circumstances, maybe three, first one is I don't know exactly what I am supposed to be reading to answer my question, I have read what I am supposed to read and still havn't answered my question or I am in huge hurry and hoping for some quick advice [01:26:43] <hparker> xpoint: wikis don't get updated enough for me to trust them [01:27:02] <jtole> in this case I have done some reading and am still confused but I guess it's under those principles that school systems were invented long before hparker was born ;) [01:27:13] <aldin> hparker: xpoint http://pastebin.ubuntu-nl.org/23348/ [01:27:20] <aldin> is it ok? [01:27:28] <hparker> jtole: Yes, schools do predate even my old ass ;) [01:27:53] <xpoint> hparker, same here, used mediawiki for most good to remember things and fun, i learned wiki that way on the hardway :-) [01:28:00] <jtole> lol, well I would hope so, otherwise I would be expexting vampire or some other horror movie bore ;) [01:28:01] <hparker> jtole: As for your transport/dspam problem, I've never used either.. it's not that I'm ignoring you ;0 [01:28:09] <jtole> I know [01:28:12] <jtole> I am not pressing [01:28:22] <jtole> at this point though it does look like postfix is not transporting [01:28:27] <jtole> :) [01:28:48] <jtole> well, I am not smilling at that, I am smiling at you not ignoring me and me knowing better, lol [01:29:04] <jtole> I think I will go check on my laundry before my head explodes [01:29:07] <hparker> jtole: But again, forwarding for learning isn't a good idea from my experience with spamassassin [01:29:49] <hparker> jtole: I use IMAP folders and drag the mail there so as not to alter the headers [01:29:50] <xpoint> aldin, dig @ns1-2.dyndns.org kapetano.dyndns.org mx [01:30:04] <jtole> hparker => http://dspam.nuclearelephant.com/faq.shtml#1.6 <= take a look at that question and the one right below it [01:30:11] <jtole> huh [01:30:18] <jtole> ... thats actually not a bad idea [01:30:26] <jtole> @ headers [01:30:51] <jtole> I head that mentioned in some docs I read earlier and I know imap works on my dovecot, I just have to enable it [01:31:00] * jtole goes to laundry [01:31:11] * xpoint is just using bayes in spamassassin here, catches all spam for me, scan time is below 500 ms [01:31:51] <xpoint> will newer use dspam here anymore [01:31:52] <hparker> My average time per scan is 2.5-3 seconds.. amavisd-new, spamassassin with all network tests, and clamav [01:32:18] <hparker> Very acceptable for my needs and my clean inboxes ;) [01:32:28] <xpoint> i am faster ? [01:32:59] <xpoint> 64bit power, hehe [01:33:06] <hparker> 500 ms is .5 seconds iirc [01:33:22] <hparker> Errm... mine's 64bit, though only a sempron [01:33:24] <xpoint> ah yes [01:33:31] <rob0> FSVO ms [01:33:46] <hparker> Oh, rob0 has his own version? [01:34:09] <xpoint> ms = Microsoft ? [01:34:20] <rob0> Well, there are "lite" and "regular" milliseconds. [01:34:25] <hparker> Ahh [01:34:32] *** magyar has joined #postfix [01:34:35] <rob0> probably even deluxe ones. [01:35:06] * hparker goes back to reading postfix-users.... [01:35:46] <rob0> Somebody has to do it. [01:35:57] <aldin> xpoint: dig @ns1-2.dyndns.org kapetano.dyndns.org mx what should i see with this? [01:36:01] <aldin> i run it [01:36:14] <aldin> xpoint i still cant receive mails [01:36:20] <aldin> but sending is ok [01:36:53] <xpoint> aldin, you should see that the mx is there for both or one mx [01:38:36] <xpoint> aldin, http://moensted.dk/spam/?addr=kapetano.dyndns.org&Submit=Submit [01:39:13] <aldin> wow, xpoint thanks [01:39:31] <jtole> hparker, do you use dspam? [01:39:48] <aldin> xpoint: so now i got MX do u know what is needed more? [01:39:51] <hparker> jtole: Nope, spamassassin on all of them [01:39:52] <aldin> smtpd? [01:39:59] <jtole> ah ok [01:40:17] <jtole> I was just wondering about how you setup the imap folders etc [01:40:41] <hparker> I created them in my MUA [01:40:55] <hparker> then cronjob to sa-learn them [01:41:30] <jtole> huh, thats not a bad idea [01:41:37] <jtole> mua = ? [01:41:42] <xpoint> hparker, upgraded my squirelmail to 1.4.10a then some plugins now not working more :( [01:41:52] <hparker> :( [01:42:30] <xpoint> http://bugs.gentoo.org/show_bug.cgi?id=179426 i hope its generic [01:42:43] <aldin> xpoint: hparker can u send mail to aldin at kapetano dot dyndns.org and to see will it bounce it or receive it?, i would really appriciate it, cause i dont know what to do i sent mail from gmail.com but did came [01:42:55] <aldin> *didnt [01:43:03] <rob0> telnet: connect to address 80.65.173.71: Connection timed out [01:43:27] <xpoint> aldin, you need to ask isp now [01:43:41] <xpoint> aldin, keep the dns ! [01:44:10] <aldin> what to ask them .. my ip is changed dynamically cause of billing, i have limit 16G per month [01:44:38] <xpoint> aldin, simply ask for there backup mx thats all [01:44:48] <hparker> Ask them about blocked inbound port 25 [01:45:11] <hparker> Backup MX without a list of valid addresses would suck..... [01:45:14] <xpoint> hparker, most isp can spam there custommers :-) [01:45:51] <hparker> And I don't see an ISP offering to maintain a list of users for a residential account... [01:46:19] <xpoint> hparker, not needed if you known postfix very vell [01:46:34] <hparker> Bounce to the forged from???? [01:46:46] <xpoint> nope [01:47:05] <hparker> Or /dev/null if they don't exist losing mail with To:typo? [01:47:05] <xpoint> isp should verify before accept [01:47:21] <hparker> Then they have to have a list of users [01:47:24] *** pbh has quit IRC [01:47:25] <aldin> xpoint: hparker: rob0: cpm: many: thank you guys for being patient with me, well thats it, i shot all my bullets to override 25 port issue and havent made it... [01:47:33] <hparker> this is not stuff offered on residential accounts [01:48:07] <hparker> I know I would never have even thought about doing it [01:48:32] <xpoint> hparker, my isp will do backup mx for any domain if the recipient server is behind there network [01:48:55] <hparker> xpoint: On a residential connection? [01:49:00] <xpoint> yes [01:49:30] <hparker> for $20 a month? [01:49:40] <xpoint> less, its free [01:49:55] <hparker> But, what do you pay for your connection? [01:50:01] <xpoint> :-) [01:50:07] <xpoint> to much [01:50:16] <hparker> then.... [01:50:24] <xpoint> i dont pay extra for mail [01:51:08] <xpoint> but this was my first connection where i did not have my /29 [01:52:11] <xpoint> aldin, if your isp do backup mx, add them in dyndns with priorty 20 [01:52:43] <jtole> I know this is gonna sound like an all too easy question but how does one set postfix to save mail in mailspool [01:52:47] <jtole> and not mbox [01:53:36] <xpoint> if the dir/path ends with / is maildir [01:55:19] <aldin> xpoint ok [01:55:48] *** hax has quit IRC [01:56:06] <xpoint> dyndns cant deliver to you if isp is blocking port 25 [01:56:35] <xpoint> but isp have open port 25 from them to you [01:56:48] *** pirho has quit IRC [01:57:23] <xpoint> atleast i hope :-) [01:57:37] <aldin> xpoint: aha, now i got ya [01:57:49] <aldin> xpoint: thanks [01:57:56] <xpoint> np [01:58:55] <xpoint> thats why we need 2 mx records [01:59:52] *** GMFlash has quit IRC [01:59:58] *** GMFlash has joined #postfix [02:04:20] *** killown has joined #postfix [02:04:31] *** james_ has joined #postfix [02:04:57] *** killown has quit IRC [02:06:44] *** masida has quit IRC [02:07:13] *** killown has joined #postfix [02:08:49] *** aldin has left #postfix [02:10:46] *** Spec is now known as x-spec-t [02:11:58] *** masida has joined #postfix [02:17:45] *** Eden has joined #postfix [02:20:14] *** xpoint has quit IRC [02:22:19] *** bogomips__ has joined #postfix [02:30:52] *** bogomips_ has quit IRC [02:36:25] *** feross has joined #postfix [02:51:33] *** feross has quit IRC [03:04:33] *** feross has joined #postfix [03:15:35] *** _bugz_ has quit IRC [03:19:00] *** Eden has quit IRC [03:24:30] *** magyar has quit IRC [03:26:59] *** puzzled has left #postfix [03:27:04] *** ckrueger has joined #postfix [03:27:09] <ckrueger> g'day all [03:27:59] <ckrueger> i need someone who's ridiculously well-versed in the various smtpd_client_restrictions / smtpd_helo_restrictions / smtpd_sender_restrictions / smtpd_recipient_restrictions parameters [03:28:23] <ckrueger> particularly which one validates a host's PTR record against the actual DNS records for the returned value [03:28:32] <ckrueger> for example, causing a maillog entry akin to the following [03:28:54] *** hachiya has joined #postfix [03:29:00] <ckrueger> warning: 127.0.0.1: address not listed for hostname whateveryouwantittobe.com [03:29:10] *** magyar has joined #postfix [03:29:58] *** _bugz_ has joined #postfix [03:47:37] <lunaphyte> ckrueger: that would be postfix looking up an a record, rather. [03:48:18] <ckrueger> based upon the PTR reported for that IP [03:48:26] <ckrueger> IP's PTR = onevalue.com [03:48:35] <ckrueger> reported hostname = server1.onevalue.com [03:48:44] <ckrueger> A record for onevalue.com != IP of sending server [03:49:03] <ckrueger> at least not the interface seen by the receiving server (it's another IP on the box) [03:49:22] <ckrueger> *technically* this other box is outside our control, so i want to rework Postfix to simply ignore this check [03:49:36] <ckrueger> i pulled reject_unknown_client out of every single restriction but it has not resolved the issue [03:50:03] <ckrueger> that seems to be the only option that actually references PTR records based upon Postfix's documentation [03:50:54] <lunaphyte> can you share postconf -n? [03:51:29] *** masida has quit IRC [03:52:29] <ckrueger> http://pastebin.ca/524369 [03:52:43] <ckrueger> mynetworks has been edited for privacy [03:52:46] <jtole> does anyone know of the top of their head, what the command is to turn /etc/postfix/virtal into the virtual.db? [03:52:54] <ckrueger> postmap /etc/postfix/virtual [03:52:56] <ckrueger> postfix reload [03:53:22] <lunaphyte> ckrueger: postconf mail_version ? [03:53:35] <ckrueger> 2.2.10 [03:53:40] <lunaphyte> reload isn't necessary [03:53:43] <ckrueger> stock RHEL distro [03:53:52] <ckrueger> true, it'll detect the change after a few sec [03:54:04] <ckrueger> or does postmap automatically trigger a reload? [03:54:07] <jtole> thanks ckrueger [03:54:17] <lunaphyte> the former [03:54:21] <ckrueger> coo [03:55:01] <ckrueger> i might just call the other customer whose server's PTR isn't configured correctly and have them fix it [03:55:20] <ckrueger> fortunately this is one of the rare scenarios in which both parties are on our networks [03:56:16] <lunaphyte> it's always nice to address the problem vs. the symptom. [03:56:34] <ckrueger> yeah [03:57:07] <lunaphyte> i would imagine it's one of the unknown or invalid restrictions you've included, but i'd be guessing w/out the context for that warning. [03:57:29] <lunaphyte> i see reject_unknown_client - you did try it without? [03:59:05] <lunaphyte> you might also try something along the lines of postconf | egrep '(unknown|invalid)' on the chance that redhat's monkeyed with the defaults. [04:00:28] *** conico has quit IRC [04:09:22] <jtole> is there a way to have postfix display messages success messages to people who are forwarding mail to addresses that postfix will reject, but basically don't tell the sender that it will be rejected via smtp [04:09:53] <jtole> ? [04:10:21] <jtole> basically a way to configure postfix to lie to people who are spamming? [04:14:24] <lunaphyte> you want to accept all messages, then silently discard invalid recipients? [04:14:35] <jtole> basically [04:14:37] <jtole> yeah [04:14:57] <lunaphyte> how would you know the message is spam? [04:15:55] <jtole> log reviews and greps, if someone connects to my machine and the mail log says they are sending more then X number of messages to different hostnames it is fair to assume it is not a legitimate mail server and could be deamed as a spammer [04:16:05] <jtole> which would be good for submitting to black hole lists [04:16:07] <lunaphyte> to answer your question, i'm not sure how you might convince postfix to do that, off the top of my head. [04:16:21] <lunaphyte> i suppose. [04:16:41] <jtole> well I am googling it atm, I will let you guys know if I find a solution [04:17:10] <lunaphyte> my preference would be to reject them, rather than spend more of my bandwidth on message content. [04:18:15] *** meandtheshell has quit IRC [04:21:42] *** rmayorga has quit IRC [04:22:21] <jtole> well on this box in perticular it's isolated to myself and a couple others and I don't think it could handle a fraction of the bandwidth available to the net [04:22:42] *** magyar has quit IRC [04:23:20] <rob0> jtole, you're trying to cook up tactics in the war against spam, and while your effort is to be admired, I advise you to give it up. Spammers don't read logs, in the rare cases that they even HAVE logs. [04:24:24] <rob0> If they're spamming, there's a better than 50% chance that they're already listed at Spamhaus. [04:24:46] <jtole> right, I don't care that they do, however a lot of the black hole lists are shared by other people running mail servers, they have access to who is evil before a spammer even knocks at their door [04:25:17] <jtole> right, but they don't typically spam on mail servers that don't allow it, right? [04:26:15] <rob0> Spammers continually spew, regardless of what the other side says. [04:26:22] <jtole> really? [04:26:23] <jtole> huh [04:26:56] <jtole> I am dealing with my first real spamming spew now and it's only because the mail server was misconfigured at first [04:27:03] <rob0> Once an address is on a spam list, it will receive spam until the Internet closes down. [04:27:36] <rob0> No amount of 55x's will make it stop. [04:27:59] <rob0> Spammers don't work as hard as we have to. [04:28:14] <rob0> (They're generally not even smart enough.) [04:28:35] <jtole> lol [04:28:51] <rob0> They get a miniscule return on their investment, but as long as it's a positive return, they keep at it. [04:28:53] <jtole> I am looking at spamhaus now, spamhaus.org, right? [04:29:07] <rob0> correct, check out the Zen list. [04:29:08] <hparker> Use zen.spamhaus.org [04:29:15] <hparker> Don't look back [04:30:23] <rob0> In the rare case that Zen lists a real mail server, don't worry, because they'll have trouble sending to *most* large providers ... not just to you. [04:30:47] <jtole> cool, I am not listed in sbl list etc etc lists [04:31:08] <rob0> I think I've had that happen twice. Both times, zombie spew from the same IP as a legit mail server. [04:31:08] <hparker> Check at dnsstuff.com [04:31:25] <hparker> rob0: Yeah, it's usually MTA and NAT on the same box [04:31:39] <rob0> It happened to me once. <sheepish grin> [04:31:56] <hparker> Or an ISP that forces port 25 outbound through their MTA [04:31:57] <hparker> lol [04:32:07] * hparker knew rob0 was a closet spammer [04:32:37] <rob0> We spent days thereafter cleaning up the ratware. I stopped allowing NAT of port 25 outbound. [04:33:00] <Dominian> rob0: we are about to do that as well [04:33:10] <Dominian> rob0: stop allowing clients to send email directly from their IPs [04:33:22] <Dominian> we've had a few of our dynamic IPs end up on blacklists.. not cool [04:33:31] <rob0> Mine was a small business site, dual T1's. [04:33:48] <Dominian> yah [04:33:58] <Dominian> rob0: we had one of our email servers get blacklisted [04:34:08] *** charkins has joined #postfix [04:34:08] <Dominian> rob0: because stupid users with webmail access had easily crackable passwords [04:34:11] <rob0> Sign your entire dynamic netblocks up for inclusion on PBL. [04:34:46] <rob0> hparker, I've come out of the closet. ;) [04:34:48] <Dominian> rob0: nah..we are going to block outbound 25 from dynamic and other IPs that don't need to send out 25 and force them to use our server wher ewe can do the spam/virus filtering from there [04:35:12] <rob0> and rate limiting [04:35:12] <jtole> well I am off to bed [04:35:15] <jtole> cheers guys [04:35:20] <rob0> 'night [04:35:44] <charkins> How can I get postfix to temporarily reject *all mail* (error 450)? [04:36:51] <rob0> smtpd_client_restriction = reject [04:36:58] <rob0> soft_bounce = yes [04:37:03] <hparker> Pull the ethernet cable [04:37:04] <rob0> smtpd_client_restrictions = reject [04:37:15] <rob0> (mised the plural) [04:37:32] <charkins> hparker: :-) [04:37:45] <hparker> it's effective [04:37:52] <hparker> Good spam blocker as well [04:38:17] <rob0> greylisting taken to the next level [04:45:30] *** rmayorga has joined #postfix [05:07:04] <jtole> hey, I just got out of the shower and before I hit the sack I have to ask, where do spammers get their e-mails from? [05:07:23] <jtole> I mean the actual addresses that they litter [05:07:35] *** nxvl has left #postfix [05:08:31] <jtole> hmmm, I am with hparker on pull the ethernet cable [05:10:18] <jtole> alright, well I got enough done today and I am tired so I am going to hit the sack, cheers ladies and gents [05:13:01] <rob0> jtole: Web and Usenet harvesting, "unsubscribe" links, spyware/viruses, maybe more! [05:14:41] <jtole> what is a unsubscribe link? [05:15:21] <rob0> Spammers send them out in their spams. "If you don't want to receive these, click here." [05:15:29] <jtole> ah [05:15:33] <jtole> huh [05:15:36] <jtole> makes sense [05:15:45] <jtole> good thing I have always just blocked them [05:15:46] <jtole> lol [05:15:49] <jtole> alright [05:16:27] <jtole> night, bye, I be gone... oh and thanks for the input tonight <= what I would sound like if I did too many drugs or was pretty drunk I guess [05:33:11] *** qiyong has joined #postfix [05:33:12] <qiyong> is client certificate used widely for mta/postfix? [05:35:47] *** charkins has quit IRC [05:52:43] *** ckrueger has quit IRC [05:56:49] *** Motoko-chan has joined #postfix [06:01:47] *** GutterPunk has quit IRC [06:01:48] *** mofino has quit IRC [06:01:48] *** RT^ has quit IRC [06:01:48] *** hooch has quit IRC [06:01:48] *** ikaro has quit IRC [06:01:49] *** fluxdude has quit IRC [06:01:49] *** tris has quit IRC [06:06:51] *** ikaro^ has joined #postfix [06:06:54] *** tris has joined #postfix [06:07:31] *** RT^ has joined #postfix [06:09:13] *** cilly has quit IRC [06:09:45] *** cilly has joined #postfix [06:10:01] *** ikaro^ is now known as ikaro [06:13:22] *** GutterPunk has joined #postfix [06:13:22] *** mofino has joined #postfix [06:13:22] *** hooch has joined #postfix [06:13:22] *** fluxdude has joined #postfix [06:13:55] *** Kurtism has quit IRC [06:15:57] *** Tino is now known as Tinozaure [06:16:32] *** hooch_ has joined #postfix [06:18:20] *** mofino has quit IRC [06:18:20] *** fluxdude has quit IRC [06:18:20] *** GutterPunk has quit IRC [06:18:22] *** hooch has quit IRC [06:22:38] *** mofino has joined #postfix [06:25:38] *** killown has quit IRC [06:32:18] *** hooch_ is now known as hooch [06:34:56] *** killown has joined #postfix [06:47:29] *** GutterPunk has joined #postfix [06:47:29] *** fluxdude has joined #postfix [06:52:41] *** fluxdude has quit IRC [06:52:41] *** GutterPunk has quit IRC [06:54:20] *** GutterPunk has joined #postfix [06:54:20] *** fluxdude has joined #postfix [06:57:38] *** hparker has quit IRC [07:02:32] *** henno has quit IRC [07:08:15] *** henno has joined #postfix [07:19:14] *** Chaotic_Reality has joined #postfix [07:22:43] <Chaotic_Reality> i'm new to postfix and am trying to set it up for multiple domains. i've also setup squirrelmail (using dovecot for pop/imap) - is it correct to assume that there's no separation of users between domains? for example if i have domain1.com and domain2.com in the virtual file and then user at domain1 dot com user and user at domain2 dot com user, all mail is going to go to that user regardless of the domain? [07:23:18] *** Spec has joined #postfix [07:23:31] <Chaotic_Reality> reason i ask is because i can login to the webmail with user regardless of the domain i'm accessing the webmail from. [07:23:44] *** x-spec-t has quit IRC [07:24:00] <Chaotic_Reality> if i login with user, it shows the same emails if i'm pulling up domain1.com/webmail or domain2.com/webmail [07:25:13] *** Tinozaure is now known as Tino [07:33:08] *** Tino is now known as Tinozaure [07:42:08] *** aozturk has quit IRC [07:46:34] *** fujin has quit IRC [07:49:31] <Motoko-chan> Chaotic_Reality, you can use virtual users. [07:50:04] <Motoko-chan> If you use system users, you are correct. [07:50:23] <Motoko-chan> Although you can use some fancy rewrite rules to allow for the same name at different domains. [07:51:36] <Chaotic_Reality> Motoko-chan: hmm...well i do have each unique domain listed in the virtuals file in /etc/postfix but i suppose they are pointing to the system users. how would i go about making them unique for each domain, so i can use the same username on different domains? [07:52:44] <Chaotic_Reality> i'd like to authenticate with user at domain1 dot com instead of user. obviously this will make it unique on a domain basis. through all my reading and such i haven't found a way to do that though. [07:52:53] <Motoko-chan> Use rewrites and have the system usernames be different like with prefixed. [07:53:07] <Motoko-chan> If you want to auth with full username, look at virtual users. [07:53:17] <Motoko-chan> You can use many storage mechanisms, including SQL. [07:55:17] <Chaotic_Reality> i only have about 3 domains, and not many mail boxes for each domain so using a database to store the information is a little more complex than what i need for now. i actually only have one username that i'd like to use on each domain heh [07:57:22] *** henno has quit IRC [07:58:29] <Motoko-chan> domain1_user [07:58:32] <Motoko-chan> domain2_user [07:58:33] <Motoko-chan> etc [07:58:45] <Motoko-chan> Then use the aliases table to re-write to the system boxes. [08:01:53] <Chaotic_Reality> well that's essentially what i already have in my /etc/postfix/virtual file. i have domain1.com OK (newline) user at domain1 dot com user (newline) then domain2.com OK (newline) user at domain2 dot com user [08:02:38] <Chaotic_Reality> those are both using the system user though. if i change the user to user at domain1 dot com and user at domain2 dot com, will that work? [08:04:31] *** henno has joined #postfix [08:10:49] <Chaotic_Reality> looks like i found some documentation on the postfix site for this - thanks for the push in the right direction Motoko-chan. [08:20:15] *** tibyke has quit IRC [08:21:49] *** Eden has joined #postfix [08:32:14] *** killown has quit IRC [08:36:52] *** mazon is now known as Mazon [08:50:20] *** pmjdebruijn has joined #postfix [08:52:37] *** feross has quit IRC [08:53:11] *** Motoko-chan has quit IRC [08:55:26] *** thojo has joined #postfix [08:58:32] *** rmayorga has quit IRC [08:59:51] <kciR> is a 450 a temporary failure, i.e. try again later? [09:06:28] <enyc> kciR: yes [09:06:40] <enyc> kciR: (or try backup MX or whatever) [09:07:07] <enyc> kciR: iirc 2xx = OK 4xx = Temporary problem 5xx = Permanent problem [09:08:43] *** Chaotic_Reality has quit IRC [09:09:45] *** sc00p has quit IRC [09:09:46] *** CaptainMorgan has joined #postfix [09:10:13] <CaptainMorgan> I think I might have an isp that blocks port 25, is it possible to configure postfix to use their smtp ? [09:11:21] *** [miles] has joined #postfix [09:16:01] <f3ew> !relayhost [09:16:02] <knoba> f3ew: 'relayhost' : a configuration parameter in the main.cf: The default host to send non-local mail to when no entry is matched in the optional transport(5) table. When no relayhost is given, mail is routed directly to the destination. [09:24:53] *** bostik has joined #postfix [09:28:36] *** rootsvr has joined #postfix [09:43:30] *** sc00p has joined #postfix [09:48:06] *** rootsvr has quit IRC [09:49:49] *** stellina has joined #postfix [09:50:07] <stellina> goodmorning [09:50:16] <stellina> does anyone use gnarwl for vacation messages? [09:50:40] <stellina> It doesn't work for me [09:51:10] *** frennkie has joined #postfix [10:01:36] *** war has joined #postfix [10:12:23] <qiyong> should I start some sasl daemon in order to get sasl work? [10:13:56] *** hax has joined #postfix [10:15:55] *** JoKoT3 has joined #postfix [10:27:35] *** Zeit|awy has joined #postfix [10:28:37] *** war has quit IRC [10:29:43] <qiyong> how to know what sasl implementation the postfix is using? [10:32:23] *** jMCg has joined #Postfix [10:37:17] *** xpoint has joined #postfix [10:41:44] *** cutmasta has joined #postfix [10:42:14] *** Zeit|idle has quit IRC [10:43:57] <Signum> qiyong: the cyrus sasl library [10:44:20] <qiyong> Signum, is there a separate sasl daemon? [10:44:22] <Signum> qiyong: you can either start the saslauthdaemon or rather use the "auxprop" method [10:44:27] *** war has joined #postfix [10:44:34] <qiyong> !auxprop [10:44:35] <knoba> qiyong: Error: "auxprop" is not a valid command. [10:44:36] <Signum> qiyong: IMHO the daemon doesn't have any advantage [10:45:17] <qiyong> Signum, what packages to install? [10:45:47] <qiyong> how to use auxprop? Signum [10:53:43] <Signum> qiyong: see http://www.postfix.org/SASL_README.html [11:04:16] *** rdallarmi has joined #postfix [11:04:28] <rdallarmi> Hi, I am trying to set up a mail server, I can deliver successfully mail to it, but when I try to retrieve it I get the error: courierpop3login: chdir Maildir: No such file or directory. WIthout telling me what Maildir he is attempting to access. Is there a way I can get more information? or what setting should I look at? [11:04:31] *** jMCg has quit IRC [11:04:34] *** jMCg has joined #Postfix [11:20:08] <adaptr> does the MTA even deliver to maildirs ? [11:21:34] <rdallarmi> MTA? [11:22:07] <adaptr> Postfix is an MTA [11:22:11] *** keck0f has joined #postfix [11:22:14] <keck0f> hi. [11:22:17] <keck0f> how can i force the content of a user's mailspoolfile to be delivered again. (i've got mail in /var/spool/mail/me, added an alias "me: me at myserver dot com" and would like to redirect all my mail in the spoolfile to my new emailadress. How? something like "cat /var/spool/mail/me | format -s sendmail -t"?) [11:22:39] <adaptr> your courier question is not, strictly speaking, a Postfix question, seeing as Postfix is not Courier, but we'll see [11:23:08] <rdallarmi> I just su and gone to the delivery directory, the mail is there [11:23:24] <adaptr> keck0f you mean how can you forward it after the fact [11:23:39] <adaptr> rdallarmi the deliver directory being ? [11:24:16] <rdallarmi> it is " /var/mail/vmail/rdallarmi at eudelaers dot com" ( I am using postfixadmin) [11:24:52] <adaptr> and it's not a Maildir [11:25:01] <rdallarmi> ? [11:25:20] <adaptr> a maildir has a specific structure [11:25:49] <rdallarmi> I am using the postfixadmin setup with a postgres back end for handling virtual domains [11:26:05] <keck0f> adaptr: thank you for the hint. I think of just placing the content of the users Maildir back to the postfix-queue that will deliver the mail. [11:26:40] <adaptr> rdallarmi who cares ? your stated question was: why is courier telling me it cannot access the maildir [11:27:06] <adaptr> rdallarmi there can be only two reasons for that: either you're not using maildirs, or courier isn't configured properly [11:27:21] <adaptr> since this is not a courier channel, I opted for #1 [11:27:23] *** amrit|wfh is now known as amrit|zzz [11:27:56] <rdallarmi> fair enough [11:29:02] <keck0f> apaptr: is there a way to redirect the messages stored in a user's maildir to another emailadress? (great would be if there is not "via"-Tag) [11:31:54] <adaptr> keck0f well, no, not that I know of, since an MTA does not read maildirs, it only delivers - you'll have to build somethign yourself, or use a utility that was made for that [11:32:25] *** sc00p has quit IRC [11:32:42] *** sc00p has joined #postfix [11:35:19] *** Tinozaure is now known as Tino [11:36:41] <rdallarmi> adaptr, one question. the mail delivery directory has a permission structure I do not understand, do you know what drwx--S--- 5 stands for? [11:36:56] <rdallarmi> ok , the drwx is clear, the rest no [11:38:09] <Roobarb-Work> its an S not a 5 (letter not number) [11:38:25] <many> man chmod [11:39:10] <koollman> "set-group-ID bit is set but the corresponding executable bit is not set." ... for a directory, I am not sure what it means [11:39:49] <many> it means rw- for group plus setgroupID, i.e. new files get the group of the parent directory automagically [11:40:12] <many> touch a file in the directory and compare ls -l newfile vs ls -l .. [11:40:15] <many> touch a file in the directory and compare ls -l newfile vs ls -ld .. [11:40:59] <adaptr> rdallarmi yes, I probably do [11:41:35] <rdallarmi> the fact it is a capital "s" does make sense? in the man chod they are all lowercase [11:42:08] <rdallarmi> chmod [11:42:24] <koollman> rdallarmi: that's a differentiation from ls (with setgid, and without execute -> S) [11:42:27] *** meandtheshell has joined #postfix [11:43:03] <adaptr> my maildirs don't have SGID bits [11:45:46] *** fujin has joined #postfix [11:55:12] *** raqamy has quit IRC [11:58:40] *** mastachand has joined #postfix [12:01:18] *** Eden has quit IRC [12:02:07] <f3ew> good [12:05:28] *** conico has joined #postfix [12:06:32] *** henno_ has joined #postfix [12:06:42] <adaptr> it was just an observation... [12:08:21] *** rdallarmi has quit IRC [12:14:22] *** fujin has quit IRC [12:15:17] *** raqamy has joined #postfix [12:17:58] *** henno has quit IRC [12:18:06] <keck0f> adaptr: tahnk you. [12:18:20] <adaptr> found anything ? [12:20:32] *** keck0f has quit IRC [12:39:39] *** baggito has joined #postfix [12:42:12] <baggito> can someone tell me what this containment is called? Subject: =?UTF-8?B?W0Z3ZDogTmV3IHF1b3RlOiA0Mjk2LXYtMTsgbjogTXIgQnJpYW4gTGU=?= [12:42:43] <f3ew> base 64 encoding [12:44:23] <baggito> i guessed it looks like base64, but what do you call that =?UTF-8?B? .... =?= stuff? [12:45:45] <xpoint> unicode in base64 [12:49:51] *** MicW has joined #postfix [12:49:53] <MicW> hi [12:50:42] <MicW> can i configure source-address-based relaying for postfix? (e.g. relay xy at web dot de over the web.de mx, using smtp-auth)? [12:52:00] <baggito> well [12:52:17] *** bogomips_ has joined #postfix [12:52:28] <baggito> =?UTF-8?B? i just want to know really what standard or whatever that is defined in [12:52:33] <james_> hello everybody, is there any way i can get postfix to log the password when trying to auth please ? [12:53:31] <baggito> it's impossible to google for [12:54:01] <Signum> baggito: RFC 1522 -> quoted printable [12:54:49] *** aozturk has joined #postfix [12:57:07] <MicW> and can i configure postfix to deliver address-a@mydomain locally if there's a mailbox but relay address-b@mydomain if not? [12:57:36] <Signum> MicW: try transport_maps [12:57:47] *** tibyke has joined #postfix [12:58:24] <MicW> Signum: i need that that behaviour depends on weather there's a mailbox or not [12:58:59] <MicW> because if a user has a local ldap account, he has a local mailbox. when a mail is sent to this user, it should be delivered locally [12:59:39] <MicW> but if a user (with the same domain) has no local mailbox, it needs to be relayed to the normal mx for my domain [12:59:40] <Signum> MicW: you can connect your transport_maps to your ldap database [13:00:33] *** bogomips__ has quit IRC [13:13:48] <Signum> !learn quotedprintable as a way to encode non-ASCII (non 7-bit) characters by using base64 in mail headers. See the RFC1522 and search for "quoted printable". [13:14:15] *** David-B has joined #postfix [13:14:38] <David-B> Hello everyone [13:14:59] <David-B> I have a problem regarding maildrop in combination with postfix [13:15:37] *** cutmasta has quit IRC [13:15:45] <David-B> When postfix runs maildrop i gives me an: invalid user specified... [13:16:18] <David-B> when I run maildrop directly from root [13:16:23] <David-B> is gives me this: [13:16:24] <David-B> root@VirtualUbuntu:/# maildrop -V 5 -d bamm.bamm at example dot com [13:16:24] <David-B> maildrop: authlib: groupid=2005 [13:16:24] <David-B> maildrop: authlib: userid=2005 [13:16:24] <David-B> maildrop: authlib: logname=bamm.bamm at example dot com, home=/var/spool/virtual_mailbo xes/, mail=example.com/bamm.bamm/Maildir [13:16:24] <David-B> maildrop: Changing to /var/spool/virtual_mailboxes/ [13:16:25] <David-B> maildrop: Home directory owned by wrong user. [13:17:06] <David-B> var and spool are owned by root [13:17:06] <David-B> virtual_mailboxes and example.com by vmail [13:17:06] <David-B> vmail is the user witch postfix uses to run maildrop [13:17:06] <David-B> bamm.bamm and every other dir under this is owned by the virtual user specified in the SQL db. in this case 2005 [13:17:06] <David-B> what am I missing here? [13:26:13] <frennkie> hi, is there a way to find out how many of my mails are outgoing/ incoming? I tried writing a script that parses mail.log.. but i haven't found anything that distinguishes these both types.. [13:28:24] <f3ew> define outgoing [13:32:27] <frennkie> mail which is either send through my webfrontend, or my a user through smtp (with sasl auth) [13:48:12] *** frennkie has quit IRC [13:48:16] <james_> hello everybody, any idea why wouldn't postfix send STARTTLS auth method please ? postconf : http://pastebin.ca/525482 [13:57:23] *** jtole has quit IRC [13:59:03] *** frennkie has joined #postfix [13:59:55] *** GMFlash has quit IRC [14:00:01] *** GMFlash has joined #postfix [14:00:17] <james_> it does but clients don't understand [14:00:37] *** rcsu has joined #postfix [14:01:52] <frennkie> sry, my connection broke down.. I asked whether it is possible to get a statistic how many of the mails postfix is processing originate from my sasl-authenticated users. Hope I didn't miss an answer.. ^^ [14:09:05] *** possie has joined #postfix [14:10:04] <possie> is there away to fill in more then one relayhosts in main.cf ? [14:10:42] <tibyke> yes [14:11:14] <tibyke> sorry, i meant relay_domains [14:13:30] *** jbt1 has joined #postfix [14:13:59] <possie> but there is noway to filli n more then one relayhost? [14:14:17] <possie> i don't want to be dependent on just one relay host for my outgoing mail [14:18:11] *** macsim has joined #postfix [14:20:47] <macsim> hi, my postfix-mysql works fine, but it a bit slow when it send email, here is mysq postconf -n (http://pastebin.ca/525536), do you see something strange on it ? [14:21:12] <stellina> I need some help [14:21:23] <james_> hello everybody, why will postfix reject relay to me at gmail dot com before even checking if user is authentified please ? Trying to let it to relay any mail from authetified users ... postconf : http://pastebin.ca/525482 [14:21:58] <stellina> I have created an alias in my ldap which returns the mail of the recipented plus the string " at autoreply dot mydomain.com" [14:22:30] <stellina> for example the alias would be user at mydomain@autoreply dot mydomain.com. And in transports I have autoreply.mydomain.com gnarwl: [14:23:09] <stellina> the mail never goes through the transport... I would go only if the alias didn't have 2 "@" in the mail [14:23:25] <stellina> but the manual says that the correct way is as I did it [14:25:50] <vice-versa> macsim: in your rbl client list, I'm pretty sure opm.blitzed.org is no longer available [14:26:23] <vice-versa> macsim: but that's not your issue, just happened to see it ;) [14:27:12] *** Arsenick-TC2L has quit IRC [14:28:57] <macsim> vice-versa: I try it ;) thx [14:29:08] *** Juai0 has joined #postfix [14:29:26] <Juai0> Hi, what is the way to disable vrfy, rcpt to bruteforce attack? [14:31:31] <macsim> vice-versa: it's seems to be the problem I remove it and no mails are send faster [14:32:00] <macsim> s/no/now [14:32:03] *** baggito has left #postfix [14:32:56] <vice-versa> macsim: ahh great, so it was just dns lookup timeout for you then [14:33:14] <macsim> vice-versa: yes thx a lot ;) [14:33:19] <vice-versa> np [14:34:57] <Juai0> it is possible to return ah 250 return code in any rcpt to: <mail at dom dot com> ? [14:35:37] <f3ew> I shall have to file a bug [14:35:43] <many> oh no! [14:35:46] <many> file a bug? [14:35:49] <many> nooo [14:35:50] <many> :) [14:35:55] <f3ew> Regexp::Assemble optimised quite a few patterns out of existence [14:36:02] <many> heh [14:36:08] <many> /./? [14:36:11] <f3ew> no [14:36:14] <f3ew> valid ones too [14:36:41] <many> anyone else spotting massive SMTP connects from 64.192.205./24? [14:37:54] <jduggan_> many: not i.. we're in UK [14:40:21] <many> i guess its time to block mxs?mple.info, including that range. senseless connects w/ following disconnect, obvious spammer activity which pretends to be a newsletter and the pages their apache is delivering is very suspicious too [14:40:42] *** frennkie has quit IRC [14:42:53] <vice-versa> many: I just greped the logs on 14 mail servers, nothing here [14:42:54] <Juai0> it is possible to return ah 250 return code in any rcpt to: <mail at dom dot com> ? any idea please?? :( [14:43:24] <many> Juai0: what'yer trying to do? [14:43:31] <many> vice-versa: lucky one :-/ [14:43:50] <many> # grep 64.192.205. /var/log/mail.log | wc -l 601 [14:43:58] <many> oops. 601 is the result [14:44:12] <Juai0> many: avoid smtp bruteforce [14:44:21] <vice-versa> many: well I'm not in Germany or even Europe for that matter, so may just be out of their target scope, for now ;) [14:44:23] <Juai0> basend on error code 250 to list my valid users! [14:44:41] <many> Juai0: uh. [14:45:03] <many> thats not very smart. it can be done, but its not smart at all. [14:45:06] <Juai0> many: it is possible? [14:45:16] <Juai0> :( ? [14:46:01] <many> it'd result in too many trouble [14:47:05] <Juai0> many: can you tell me how to do it? :) [14:47:44] *** stellina has quit IRC [14:50:49] <james_> how can i debug postfix mysql queries please ? i can't figure out [14:52:53] <f3ew> postmap -q [14:54:36] <james_> interresting, thanks [15:00:39] <Juai0> unknown_local_recipient_reject_code = 250 [15:00:47] <Juai0> with other number works [15:01:08] <Juai0> but if I use 250, then I get a strange 450 error :( 'service not avaiable', any idea? [15:02:47] *** frennkie has joined #postfix [15:13:23] <Bejgli> you cant answer OK for an error [15:13:28] <Bejgli> that's just stupid [15:13:46] <Bejgli> you can't say HTTP 200 to a browser if it'd be a 404 [15:13:51] <Bejgli> it's the same [15:14:02] <Bejgli> you should read SMTP RFC [15:15:33] *** Roobarb-Work has quit IRC [15:17:52] <GutterPunk> Small question. Some scripts send mail out from the server to a bunch of adresses. Instead of changing these addresses I would just like to rewrite the recipient for all these addresses before sending out the mail. How should I do this? [15:19:32] *** Roobarb-Work has joined #postfix [15:21:29] <james_> hello everybody, why would : [postfix/postmap] fatal: open database mysql-virtual-maps.cf.db: No such file or directory; this file isn't specified in any config file [15:21:42] *** felipe_ has joined #postfix [15:22:09] <Dominian> james_: where in main.cf do you define mysql-virtual-maps.cf ? [15:22:13] [15:22:34] <james_> Dominian: virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-maps.cf [15:24:47] <Dominian> restart postfix and see if the error persists [15:27:02] <james_> Dominian: it doesn't, thanks. [15:27:02] *** csm-laptop has joined #postfix [15:27:02] *** Mazon is now known as mazon [15:28:04] <james_> i don't understand how to debug the users map ... [15:29:59] <james_> i keep getting SASL LOGIN authentication failed: authentication failure, i have read plenty of mans and guides on internet [15:31:56] <james_> pam authentification works but not virtual users [15:32:33] *** Juai0_ has joined #postfix [15:36:35] *** UQlev has joined #postfix [15:37:31] <Dominian> james_: if its asking for mysql-virtual-maps.cf.db.. [15:38:03] <Dominian> james_: did you do postmap mysql-virtual-maps.cf for some reason? [15:38:11] <james_> Dominian: it's not anymore, it seems like it's relying on sasl which doesn't seem to query the database [15:38:24] <Dominian> ah [15:38:25] <Dominian> od [15:38:26] <Dominian> d [15:38:29] <james_> yes i am trying to debug the query [15:42:54] *** RA3OR[psy] has joined #postfix [15:43:26] *** possie has quit IRC [15:43:47] <RA3OR[psy]> hi, one of my postfix accounts sends incomplete emails (the email body seems to be chunked or chopped) [15:44:41] <james_> Dominian: i got it to work, i think that there is an outdate on http://www.gentoo.org/doc/en/virt-mail-howto.xml about sasl configuration, relying on authlib works great [15:44:59] <Dominian> aah [15:46:50] <james_> now i need to understand why : May 31 23:50:20 [postfix/smtpd] > home.jamespic.net[82.240.220.118]: 250-STARTTLS; May 31 23:50:20 [postfix/smtpd] < home.jamespic.net[82.240.220.118]: STARTTLS; May 31 23:50:20 [postfix/smtpd] > home.jamespic.net[82.240.220.118]: 454 4.3.0 TLS not available due to local problem [15:48:47] <james_> oh i have certificates problems, my bad [15:50:18] *** Juai0 has quit IRC [15:52:11] *** higuita has joined #postfix [15:54:20] *** af_ has joined #postfix [16:01:29] *** af_ has quit IRC [16:01:56] *** cpm has joined #postfix [16:07:32] *** [miles] has quit IRC [16:09:03] *** possie has joined #postfix [16:10:41] *** jbt1 has quit IRC [16:12:17] <possie> is there away to route outgoing mail traffic, because i have a maildomain, where MX records are pointing to an public internet ip adres, however, from this relayhost point of view, this system is directly next to him on the lan, so i would rather let him directly send it to this server, instead of routing it to the internet first [16:13:03] <rob0> ask cpm :) [16:13:48] <rob0> Um, IIUC what you're saying, I'd use split views in DNS for that. [16:23:57] *** smARMie has joined #postfix [16:25:42] *** etaylor has joined #postfix [16:26:46] * cpm forwards all asks to rob0 [16:27:41] * rob0 asks cpm to go forward [16:27:50] * cpm bows to rob0 [16:28:52] <ph1zzle> morning guys [16:29:03] * rob0 pushes cpm off the starboard bow! [16:29:18] <cpm> aiiieeee! [16:29:21] <rob0> oh wait! We shoulda keel-hauled 'im! [16:29:25] <cpm> come on in, water's fine! [16:29:27] <ph1zzle> I know this is a unrelated to this room but I have to ask... you know what? I think I will google my Thunderbird question [16:29:37] <rob0> Arrrrrrrrr [16:29:53] <rob0> ph1zzle: :) [16:30:27] <ph1zzle> lol [16:31:38] <ph1zzle> I basically just wanted to know if it was possible to hide local folders in thunderbird and right away they said sure, if you wanna edit a .js file and even if you get it right it could still fuckup thunderbird... so I think I will pass on that one [16:32:24] *** Lap_64 has joined #postfix [16:39:02] <kciR> is possible to specify a transport in virtual_alias_maps ? Like foo at bar dot org transport: [16:39:24] <kciR> actually, foo at bar dot org foo at bar dot org, transport: [16:43:06] <rob0> kciR: No, virtual(5) mapping only works to an email address. But you can use per-address transport_maps entries, see transport(5). [16:43:47] <kciR> i know, but I need to have it go to a transport *and* be processed by virtual_alias_maps [16:43:54] <felipe_> thanks frennkie for the answer :) [16:44:09] <frennkie> felipe_: np [16:46:00] *** dakoo has joined #postfix [16:46:05] *** frennkie has quit IRC [16:46:23] *** rmayorga has joined #postfix [16:48:20] <rob0> Think it through, kciR, I gave you a strong hint how you might do that. [16:49:34] <kciR> i know. the way I have it know, is to have an alias foo at bar dot org to foo at bar dot org, foo at bar dot org@autoreply.mydomain.tld and autoreply.mydomain.tld is in transport_maps to the autoreply: transport [16:49:59] <kciR> but this changes my Delivered-To to foo at bar dot org@autoreply.mydomain.tld and I need it ot be foo at bar dot org [16:50:16] *** David-B has quit IRC [16:53:07] *** pmjdebruijn has quit IRC [16:54:01] *** mofino has quit IRC [16:56:58] *** [miles] has joined #postfix [16:57:16] *** war has quit IRC [16:59:21] <qiyong> cyrus lacks docs [17:00:18] *** MicW has quit IRC [17:00:47] <rob0> Cyrus lacks docs and does eat oats and little lambs eat ivy ... [17:01:30] *** felipe_ has quit IRC [17:02:22] *** cpm has quit IRC [17:05:31] *** smARMie has quit IRC [17:05:45] *** cpm has joined #postfix [17:08:21] *** Juai0_ has quit IRC [17:10:05] *** qiyong has quit IRC [17:15:21] *** possie has quit IRC [17:16:03] *** [miles] has quit IRC [17:17:38] *** feross has joined #postfix [17:25:24] *** rata has joined #postfix [17:25:25] <rata> hi [17:28:13] *** thojo has left #postfix [17:29:40] <rata> i want mail to root go to an account and any other mail goes to an other account. I am triying with regexp virtual_alias_maps so i have in the file "/root/ addr1" and in the line below "/@/ addr2". But its not working all mail goes to addr2, but when i do: postmap -q "@" regexp:<file> and "root" i see the correct address and i run the postmap -u regexp:<file>. Any idea what i am doing wrong ? [17:32:52] <rob0> rata: pastebin your "postconf -n" [17:34:21] *** bogomips_ has quit IRC [17:34:34] <rata> rob0, http://pastebin.lugmen.org.ar/305 [17:37:08] <rob0> Hmmm, what's in transport_maps? Are you sure you need it? Anyway, you seem to be using local(8), so your answer is to edit /etc/aliases and run "newaliases". [17:37:16] *** _matt has joined #postfix [17:38:15] <rob0> When using local(8) delivery you should list all domains you want to accept in $mydestination . I don't think you have done that. [17:40:21] *** JoKoT3 has quit IRC [17:41:21] *** macsim has quit IRC [17:41:22] <rata> rob0, its not listed in $mudestination because its in the transport. I dont want this machine to have those mails [17:42:11] <rob0> Okay, then you made a configuration mistake. You should list your domains in relay_domains and users in relay_recipient_maps. [17:43:02] <rob0> Um ... I guess, if you're the MX for those domains? [17:43:15] *** JoKoT3 has joined #postfix [17:43:23] <rata> rob0, but how can i make /etc/aliases to do that ? (mails to root send them to addr1, from f_addr send it really and the rest to an account) [17:43:27] <rob0> If not, what exactly is the function of this server supposed to be? [17:43:41] <rob0> Yes, see "man 5 aliases". [17:43:55] <rob0> oh not a wildcard [17:44:06] <rob0> wildcards are evil anyway ... don't do it [17:44:33] *** _matt has quit IRC [17:45:43] <rata> rob0, its an internal server, and we need to test things that send mails to customers, but do not want to send them in the test. But i want to continue reading in other account mails to root, and there is the an application there that we want to send mails so mails from <f_addr> we want to be sent [17:47:51] <rob0> Perhaps rather than transport_maps you only need relayhost set. Then do your dirty work on the relayhost. [17:48:22] <rata> rob0, hmm, no. The relay host is a windows2000 i dont want to touch things there :-) [17:54:16] *** chrisc}{i has joined #postfix [17:55:46] *** rootsvr has joined #postfix [17:55:58] *** hparker has joined #postfix [18:00:05] *** bostik has quit IRC [18:01:20] *** JoKoT3 has quit IRC [18:01:26] <Roobarb-Work> has anyone come across a Cisco firewall munging a "220 <hostname> ESMTP" response into "220 *********" ? [18:06:54] *** atali has joined #postfix [18:07:02] <atali> hi [18:07:28] *** Cardo has joined #postfix [18:07:33] <dakoo> windows does email servers now also? [18:07:46] <Cardo> hi there [18:07:46] <dakoo> what's their server called? [18:07:52] <atali> :( [18:07:54] *** atali has left #postfix [18:08:07] <Cardo> I have a dilemma [18:08:17] *** doomas_ has joined #postfix [18:08:32] <Cardo> just updated my mail server and have been setting up all the spamblock stuff [18:09:10] *** rata has quit IRC [18:09:10] <Cardo> what rdb's do you guys use? [18:09:32] *** taec has left #postfix [18:09:36] *** mh_le has quit IRC [18:09:37] <Cardo> I'm using spamcop and spamhaus [18:09:49] <Cardo> but can't decide which flavour of spamhaus to use [18:10:53] * rob0 recommends Zen (and *not* spamcop, too many FP's) [18:11:16] <hparker> zen is enough for the servers I admin [18:11:18] <Cardo> spamcop gives many FPs? Hmm, I'd read it was pretty good these days [18:11:30] *** mazon is now known as Mazon [18:11:32] <Cardo> thing with zen is it blocks all servers run on dynamic IPs [18:11:50] <Cardo> I for one used to run a mail server on a technically dynamic IP (although it never changed) [18:11:57] <Cardo> so with zen, that would be blocked [18:13:51] <eltech> zen is nearly the defacto that other rbls are using [18:14:16] <eltech> spamcop does have many FPs, but with zen if its valid you can be removed from their list as I did this morning [18:14:32] <Cardo> so most mail servers these days will block dynamic IPs? [18:14:41] <eltech> just got a new biz account and its ddns with a never changing "dynamic" ip.. had to get it unblocked and all is well now [18:14:47] <eltech> yep [18:15:12] <Cardo> I saw spamhaus lets you get dynamic IPs unblocked, does that work ok? [18:15:18] *** mastachand has quit IRC [18:16:00] <eltech> yea, i had to do it this morning [18:16:05] <Cardo> cool [18:16:08] <Cardo> in that case, zen it is [18:16:13] <Cardo> and I'll get rid of spamcop [18:16:14] <eltech> and now im removed from nearly 2 other lists as a result [18:16:32] <eltech> spamcop is ok, but i was once missing mail from a client and couldnt figure it out.. [18:16:35] * rob0 has lost sympathy for home users trying to run SMTP ... too damn many zombies out there [18:16:44] <eltech> he was running his exchange on a dynamic ip [18:16:45] * hparker blocks dynamic IPs with header checks long before getting to zen [18:16:48] <Cardo> zen together with spamassassin should get 'em all [18:17:06] <eltech> Cardo yes it should.. [18:17:09] <Cardo> hparker, for some enthusiasts, that's all they can have [18:17:15] <rob0> If you've paid for business-class Internet service, demand it from the ISP. [18:17:19] <eltech> hparker i'd like to do that .. save some processing.. [18:17:21] <hparker> Cardo: Smarthost via your ISP [18:17:34] <eltech> rob0 not always possible.. [18:17:35] <hparker> Cardo: VPS are now as low as $10 a month [18:17:38] *** cpm has quit IRC [18:17:44] <rob0> Usually possible to get another ISP. [18:17:45] <eltech> i have business, they plan on rolling static this coming month [18:17:45] <Cardo> hparker, that's what I have now, a VPS [18:17:50] <Cardo> with reverse DNS, woooo [18:17:53] <eltech> but the ips do not change eitherway [18:18:01] <hparker> Then it shouldn't be dynamic looking [18:18:19] <Cardo> my new server isn't. It was when I used to run it on my cable at home [18:18:33] <rob0> Or if not ... (I live in such a place, only one real ISP choice, and they suck) ... use a VPS. :) [18:18:58] <eltech> i hope when they do role out static they will allow the rev dns.. [18:19:17] <hparker> eltech: Poke around http://www.gabacho-net.jp/en/anti-spam/ [18:19:21] <Cardo> reverse dns is sweet [18:19:48] <rob0> (Actually I live in two such places, and both ISP's -- Comcast and SBC/AT&T -- suck seriously in terms of not understanding business server needs.) [18:20:10] <hparker> eltech: I use some of the rules, others caused too much admin with whitelisting.. Then I have some custom rules for rr, comcast, etc [18:20:34] <eltech> gotcha [18:21:36] <hparker> eltech: And Ralph's site has info on greylisting just dynamic looking IPs [18:21:57] <rob0> s/ph/f/ :) [18:22:03] *** Lap_64 has quit IRC [18:22:20] <hparker> rob0: 'tis ok, wasn't even gonna try his last name ;) [18:22:27] *** doomas has quit IRC [18:22:46] <rob0> Google "ralf postfix" should find him easily. [18:22:59] <Cardo> zen won't block a server with a dynamic IP relaying through a server with a static IP, will it? [18:23:00] <hparker> ;) [18:23:18] *** _cableroy has joined #postfix [18:23:19] <eltech> it doesnt know that much [18:23:27] <Cardo> I didn't expect it to [18:23:28] <eltech> its diff smtp session [18:23:29] <rob0> Cardo: an RBL is designed to lookup the IP address of the client which connects. However ... [18:23:38] *** FlashNet has joined #postfix [18:23:51] <hparker> spamassassin might catch the IP listed and add a couple of points [18:24:00] <Cardo> hparker, yeah, that's what I figured [18:24:01] <rob0> ... there are some perversions of the RBL concept, such as implemented in SpamAssassin, which might read headers (a bad idea.) [18:24:28] <Cardo> though I noticed spamassassin, though it finds the IPs and makes a note of them, doesn't add points for it [18:24:36] <FlashNet> so i need some help with postfix configuration, i bought a custom dns domain from dyndns.org, and i want to set it up, what is my mail exchanger? [18:24:40] <rob0> Okay, that's good. [18:24:48] <hparker> It's never caused me any problems and I have about everything enabled in spamassassin along with a pile of SARE rules [18:25:17] <Cardo> standard spamassassin rules don't add points for finding IPs in the header that are listed in RBLs [18:25:38] <hparker> Cardo: Depends on where it's listed... A spmcop, sbl, or xbl listing will add a point or two... Other lists not so much.. [18:25:49] <Cardo> ahh [18:25:56] * Cardo checks emails he's received [18:26:03] <hparker> But, bayes brings it down ;) [18:26:18] <hparker> As long as it's under 5, I don't care what it hit [18:26:23] <eltech> http://www.arschkrebs.de/postfix/scripts/ [18:26:51] <Cardo> must say, I do like the way spamassassin works. Very tidy [18:26:57] <hparker> FlashNet: The IP of your mail server [18:27:19] <Cardo> though, to be honest, with zen, hardly anything is getting through [18:27:44] <hparker> Between that and greylisting I have to work to keep bayes trained [18:27:52] <rob0> Cardo: my experience as well, Zen is good. [18:28:08] <eltech> i cant handle the delay in email using postgrey [18:28:12] <FlashNet> hparker, ok I have a dynamic ip, but im paying for a custom dns service thqat will route my domain name fatpug.net to my ip address of my router [18:28:22] <eltech> sometimes it takes a few hours before retry [18:28:35] <hparker> FlashNet: Then the name of your MX, like mail.example.com [18:28:40] <eltech> hparker i dont see any info on the header checks stuff [18:28:41] <rob0> hparker: to be pedantic: the value of MX would be the priority and hostname, not the IP, of the server. [18:28:46] <FlashNet> hparker: do i need to setup port forwarding if so which port? [18:29:02] <hparker> eltech: Not too much delay for me, I only greylist for 30 seconds ;) [18:29:15] <hparker> eltech: One of the first couple of links [18:29:21] <rob0> FlashNet, you need to know some basics about TCP/IP for this. [18:29:40] <FlashNet> hthats my question what is the name of my MX?, my box is called linuxbox so would it be linuxbox.fatpug.net? [18:29:51] <hparker> rob0: Yeah, I corrected myself.. Working on first cup here.. And had a customer wake me up.. Starting off good today :P [18:30:07] <rob0> yeah I typed that before I saw your correction :) [18:30:17] <hparker> FlashNet: Whatever you name it :P If that's what you want, fine ;) [18:30:38] *** darkphader has joined #postfix [18:30:52] <FlashNet> thanks for your help [18:31:19] <FlashNet> so the name needs to correspond with the name of my box im running it on is this correct? [18:31:37] <FlashNet> im new at hosting my own mail server, so im sorry to bother you [18:32:17] <hparker> eltech: Read the first link, it's scattered through it [18:32:32] <eltech> this one? [18:32:33] <eltech> policyd-weight.org by Robert Felber [18:32:43] <hparker> FlashNet: Correct, as long as dyndns knows that name [18:32:44] <rob0> Ideally you would have the Postfix $myhostname be the name that your IP resolves to, and that name must also resolve to your IP. If you're running behind NAT it's more complex. [18:32:48] <eltech> how would you implement a *.pl script to be run on mail in postfix? [18:32:55] *** trafa has joined #postfix [18:32:57] <hparker> eltech: http://www.gabacho-net.jp/en/anti-spam/anti-spam-system.html [18:33:04] <FlashNet> Thank you [18:33:18] <FlashNet> hparker, thanks im very new at this [18:33:48] <trafa> hi all [18:33:52] <trafa> i have a doubt [18:34:01] <trafa> when creating a user [18:34:29] <trafa> I do cm user.johndoe [18:34:49] <trafa> but imagine that i wanto to do: cm user.john.doe [18:34:55] <trafa> Hw can i do it? [18:35:21] <trafa> so it will be like this: john.doe at myserver dot com [18:35:29] <hparker> What's a cm? [18:35:37] <FlashNet> hparker: ok i just tried to change my dyndns mx record to LinuxBox.fatpug.net , and this is what is said (linuxbox.chinesepig.net) Mail eXchanger (MX) records must point to hostnames that exist, and are host (A or AAAA) records, not aliases (CNAME). [18:35:44] <rob0> trafa: depends on your type of delivery (is it local or virtual?) and perhaps your OS. [18:36:08] <rob0> FlashNet: follow those instructions. [18:36:14] <trafa> cm = create mailbox [18:36:21] <rob0> hparker: centimeter [18:36:22] <trafa> local [18:36:30] <hparker> FlashNet: Then you need an A record... Pretty sure dyndns has docs on how to fix it (I haven't used dyndns in 10 years or more) [18:37:04] <hparker> trafa: Probably have to play with quoting it.. But, never heard of or used cm so not real sure [18:37:13] <trafa> ok [18:37:33] <trafa> ok thxs anyway [18:37:40] <rob0> trafa, it looks like a question for your OS. [18:38:14] <hparker> What OS is it? [18:40:22] <FlashNet> hparker: which port should i forward to my mail server? [18:40:32] <hparker> 25 [18:42:40] *** conico has quit IRC [18:44:17] <FlashNet> hparker: i fixed it [18:44:24] <hparker> ;) [18:44:42] <FlashNet> now another question , how do i tes t to see if i setup postfix correctly? [18:45:01] <hparker> Send email? [18:45:43] <FlashNet> i feel like a total idiot, how do isend an email with postfix? [18:46:37] <hparker> With your mail client ;) [18:46:48] <hparker> thunderbird or whatever [18:46:49] <rob0> !basic [18:46:50] <knoba> rob0: 'basic' : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here. [18:47:33] <FlashNet> ok so if im running GNOME, are the users i have setup for gnome are they going to have mail account? [18:48:04] <rob0> You're running GNOME on a mail server? [18:48:10] <hparker> If it's the same system, yes [18:49:32] *** nictuku has joined #postfix [18:50:58] <nictuku> hi all [18:53:46] *** devdas has joined #postfix [18:53:53] <nictuku> hi devdas [18:54:10] <devdas> hi nictuku [18:54:11] <devdas> LTNS [18:54:35] <nictuku> how's everything? [18:55:15] <devdas> good [18:55:16] <devdas> you? [18:55:25] <nictuku> very good =] [18:55:37] <hparker> lo devdas [18:55:42] <nictuku> peaceful new job etc [19:05:46] *** rmayorga has quit IRC [19:06:19] <aozturk> I'm using fc7 how can I switch to postfix from sendmail. packages are installed [19:06:48] <rob0> !basic [19:06:49] <knoba> rob0: 'basic' : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here. [19:07:20] *** smARMie has joined #postfix [19:11:36] *** trafa has left #postfix [19:12:10] *** Mrdini has joined #postfix [19:12:53] *** Mrdini has left #postfix [19:15:56] *** cpm has joined #postfix [19:16:46] <james_> hello everybody, where to set up alias virtual adress please ? [19:17:23] <devdas> !virtual_alias_maps [19:17:24] <knoba> devdas: 'virtual_alias_maps' : a configuration parameter in the main.cf: Optional lookup tables that alias specific mail addresses or domains to other local or remote address. The table format and lookups are documented in virtual(5). [19:17:33] <james_> thanks devdas [19:19:47] *** Cardo has left #postfix [19:21:34] <smARMie> hello. i asked this on the mailing list but got no useful answer: i have virtual domains with mysql. can i make an alias lala@domain1 to point to an sql query? (such as all@domain1 is select username from mailbox where domain=domain1) [19:26:31] <rob0> No useful answer on postfix-users usually means there *is* no useful answer. :) Anyway, no, not that I know of, but you might use a virtual alias to a local account and run a command there. [19:27:21] <smARMie> hmmmm. interesting idea. thanks, i'll give it a try [19:30:31] *** smesjz has joined #postfix [19:32:24] <devdas> smARMie: you could use a stored proc for that [19:32:46] <smesjz> lo f3ew [19:34:01] *** Darknighter has joined #postfix [19:34:18] <smARMie> devdas, you mean a stored procedure in mysql? [19:34:54] <smARMie> unfortunately i don't know much about mysql. i'll utfg, but it'll take a while [19:35:23] *** birmaan has joined #postfix [19:36:49] <devdas> smARMie: I have no clue about MySQL either [19:36:52] * devdas is a Pg user [19:36:58] <smARMie> :)) [19:42:26] <Darknighter> how to uninstall postfix? with command : make clean ? [19:44:01] <rob0> How did Darknighter install Postfix in the first place? [19:45:41] <Darknighter> yes, but error, SASL not support in compiled [19:45:43] <james_> hello everybody, is it possible to use a wildcard in virtual emails please ? [19:46:01] <Darknighter> i need reinstall with support SASL [19:46:19] <smesjz> james_: yes it is. You create a catch-all that way [19:46:47] <james_> smesjz: . like in regexp ? can i use a regexp ? which kind ? [19:46:52] <hparker> Darknighter: Then reinstall, no need to uninstall [19:47:20] <smesjz> james_: you can use a regex too. Using the regex table [19:47:44] <Darknighter> but old version postfix 2.3.2 and now postfix is 2.4 [19:47:47] <devdas> man regexp_table [19:47:56] <devdas> Darknighter: make upgrade [19:48:00] <james_> i am in, thanks [19:48:01] * cpm uninstalls hparker and installs smesjz [19:48:02] <smesjz> pcre is possible too I think [19:48:09] <rob0> Some distributions have multiple Postfix packages with varied linked libraries. [19:48:26] <smesjz> yea, hparker is grumpy & old. I am young and fresh, web 2.0 compliant ;) [19:48:35] <cpm> cool! [19:48:36] <hparker> lol [19:48:45] <rob0> smesjz is hparker 2.0! [19:48:45] <Darknighter> only download postfix 2.4 and make upgrade? [19:49:01] <smesjz> and available in two colours [19:49:07] <rob0> Darknighter: see INSTALL_README.html [19:49:29] <Darknighter> ok, thanks rob0 [19:50:23] <cpm> # patch /usr/local/src/rob0 /usr/local/src/smesjz [19:51:24] <james_> to make a catchall alias : . at foo dot com ? as far as i understood [19:51:57] <devdas> @example.com luser at example dot com [19:52:07] * rob0 recommends against catchalls :) [19:52:18] <hparker> s/luser/spam-lover [19:52:31] <james_> oh ok thanks [19:52:54] <rob0> they sound like fun until a spammer hits your domain with a dictionary attack. That WILL happen eventually. [19:53:05] <Darknighter> rob0: and uninstall and install but ports, work normaly? [19:54:02] <rob0> Darknighter, no comprende. [19:54:21] <Darknighter> :( [19:54:33] <rob0> If it's an OS question, ask it in a forum for your OS. [20:02:14] <james_> what involves migrating the courier+postfix mail system from a /home/user/.maildir scheme to a /var/mail/user@domain scheme please ? complex ? [20:02:21] *** Darknighter has quit IRC [20:03:50] <devdas> comment out home_mailbox, set mail_spool_directory = /var/mail/ [20:04:05] <devdas> or if you want the domani part, you need virtual_mailbox_maps [20:05:49] <james_> ok thank you [20:06:59] *** ph1zzle is now known as jtole [20:16:51] *** naro has joined #postfix [20:19:13] *** UQlev has quit IRC [20:21:34] <naro> It is possible to configure domain alias, please? I have configured postfix with virtual users for domain1.tld and I want to receive emails for domain2.tld (for example domain.com and domain.org) without specifying all acounts again. All emails for domain1.tld should be accepted for domain2.tld too. No exceptions. [20:22:12] <devdas> script the aliasing [20:23:41] <naro> ok, thank you. I was not sure if there is configuration option or not. [20:34:47] *** sepski has joined #postfix [20:41:02] *** devdas has left #postfix [20:42:25] *** frennkie has joined #postfix [20:46:16] *** higuita has quit IRC [20:54:16] *** gAri- has quit IRC [20:56:07] *** _yam has joined #postfix [20:57:13] <Signum> Oh, they caught Robert Soloway? Barbecue him! [20:57:21] *** amrit|zzz is now known as amrit|wrk [20:57:50] <hparker> But, the goats wouldn't even eat that [21:00:34] <smesjz> hi Chris [21:00:56] <Signum> smesjz: eveling... err... evening [21:02:33] * Signum is unenthuastic about continuing the tutorial... :( [21:02:55] * cpm whips Signum "Get to work! Write Write!" [21:04:38] <Signum> Man... [21:08:45] *** yam has quit IRC [21:08:53] *** _yam is now known as yam [21:15:20] *** IR6052 has joined #postfix [21:16:20] <IR6052> [rob0] : hola, pude reinstalar postfix con soporte para sasl pero ahora no reconoce los password, ese problema era del parche del cyrus creo? [21:17:02] * hparker rubs eyes... Nope. still can't read it [21:18:38] *** _yam has joined #postfix [21:19:14] <Signum> IR6052: your universal translator seems to have run out of batteries [21:20:08] <cpm> I think he reinstalled postfix to get sasl, and did some cyrus patch, and now has no joy [21:21:44] <IR6052> reinstalled postfix with support sasl but not recognized password, problem patch cyrus-sasl2 ? [21:25:35] *** killown has joined #postfix [21:26:06] *** gAri- has joined #postfix [21:27:53] *** syzygyBSD has joined #postfix [21:29:33] <syzygyBSD> so, the last month or so has spam droped off significantly or is there something wrong with my mail server? [21:30:59] *** frennkie has quit IRC [21:31:00] *** yam has quit IRC [21:31:01] <Signum> I'm getting a lot of spam still. Hardly any drop here. Although the recent Robert Soloway thingy was supposed to bring rates down. [21:31:02] *** _yam is now known as yam [21:32:10] <syzygyBSD> I have gotten 2 in the last week, down from about 10 a day [21:32:35] <syzygyBSD> no spam filter other than greylisting [21:32:45] *** higuita has joined #postfix [21:32:55] <syzygyBSD> well, and valid sender type checks [21:33:33] *** csm-laptop has quit IRC [21:36:01] <syzygyBSD> sure enough, volume of attempted spam to me has decreased from 40K a day to 6K [21:36:02] <Signum> I'm not sure 10 versus 2 a day is enough for a measure. I get 100-200 per day. :( [21:36:27] <syzygyBSD> oh, I have huge volumes being attempted to me, none make it through greylisting though [21:36:30] <syzygyBSD> funny that [21:37:07] *** frennkie has joined #postfix [21:37:43] * Signum wonders why everybody is so happy with greylisting when it hardly helped him cut down spam [21:38:01] <many> wrong interval. [21:38:10] <many> but saying greylisting makes me happy would be a lie, too. [21:38:13] *** IR6052 has quit IRC [21:38:20] <syzygyBSD> it makes me happy [21:38:26] *** james_ has quit IRC [21:39:30] * hparker uses 30 seconds and it knocks down quite a bit from watching the logs.. Need to figure out an analysis tool for it though [21:39:58] <syzygyBSD> grep [21:40:03] <many> lastly, i rely on my own scripts to kick spammers out [21:40:45] <hparker> syzygyBSD: I can grep for those that retry, not sure how to check for those that don't [21:40:46] <syzygyBSD> I thought I was doing well, out of 100K a day I used to be getting, now they only attempt 6K [21:41:22] <syzygyBSD> hparker: the ones that retry are successful, count total - successful [21:41:51] <hparker> I'm also interested in how many don't retry [21:42:10] <syzygyBSD> for me that is easy.. all of them [21:42:19] <hparker> Hrrmm [21:42:20] <syzygyBSD> except 2 in the last week [21:42:31] <hparker> Let me look at something [21:42:45] *** nictuku has quit IRC [21:43:48] <syzygyBSD> Signum: maybe you are just getting more legitimate spam than I am? [21:45:38] *** rcsu has quit IRC [21:46:27] <^majik^> question: I followed this article http://www.freesoftwaremagazine.com/articles/focus_spam_postfix/ and I can still identify myself in the HELO string as google.com or the postfix box's hostname and still have the message get delivered. What am I doing wrong? [21:46:43] <Signum> syzygyBSD: "legitimate spam". is that something like "nuclear peace" or "virgin pregnancy"? [21:47:18] <syzygyBSD> Signum: nuclear war would be very peaceful [21:47:44] <syzygyBSD> I just mean they are real protocol following mail servers, instead of compromised bot networks [21:48:42] *** naro has quit IRC [21:50:30] *** Tachy has joined #postfix [21:50:33] *** Tachy has quit IRC [21:51:23] *** rmayorga has joined #postfix [21:53:22] *** cpm has quit IRC [21:55:07] *** blueyed has quit IRC [21:55:18] *** james_ has joined #postfix [21:59:24] *** ek has quit IRC [21:59:50] <eltech> hparker thanks for the info earlier.. I'll have to try it out.. would be nice to look at headers before wasting time and BW on rbl .. eventhough they are not working hard with the little traffic i get [22:00:32] <hparker> Yeah... And dropping like res.rr.com and other obvious ones helps as well [22:12:53] *** megaTherion has quit IRC [22:14:23] *** rootsvr has quit IRC [22:15:18] *** sep__ has joined #postfix [22:15:45] *** sep__ has quit IRC [22:19:49] *** caravena has joined #postfix [22:20:08] <^majik^> ah, I see what I did wrong. ;) I didn't reject my mail server's IP and hostname in helo_access [22:22:11] *** chrisc}{i has quit IRC [22:23:35] *** megaTherion has joined #postfix [22:23:38] <rob0> ^majik^: There are a lot of "localhost" HELOs too. [22:24:06] <many> "friend" [22:24:09] <many> "bigdeal.com" [22:25:16] *** KhensU has quit IRC [22:25:22] <many> ah, no "mail.bigdeal.com" "localhost.localdomain", "myfirstmail.com", and i also forbid "juno.com" and "*.pldt.net" [22:27:09] *** frennkie has quit IRC [22:27:19] *** smARMie has quit IRC [22:28:22] <rob0> reject_non_fqdn_helo_hostname is safe and very helpful. [22:31:42] <hparker> Except the damn exchange admins that have localhost [22:32:04] <rob0> they'll have trouble getting mail out anywhere :) [22:32:35] <many> rob0: the script does it, it may break w/ ipv6 too [22:39:00] *** war has joined #postfix [22:39:43] <syzygyBSD> hparker: if someone else doesn't know how to address mail it isn't my job to configur their server [22:40:32] <hparker> syzygyBSD: But unfortunately I admin a gov't server, while most of their contacts run exchange... [22:41:08] *** birmaan has quit IRC [22:41:15] <syzygyBSD> meh, they will get the bounce message. Make sure you are very explicit about how incompetent their tech is in your error message [22:41:28] <hparker> hehe [22:42:03] <hparker> It's bad enough Cox leaves generic rDNS on their "business" class connections causing me to back off on my regexps [22:42:30] <syzygyBSD> funny I have never had to add ANY of those checks [22:43:12] <syzygyBSD> just make sure it comes from a FQDN and the MAIL FROM address can also recieve a reply (domain exists) [22:43:19] <syzygyBSD> catches tons of my spam [22:43:34] <hparker> I admin that one, and one for an ISP, that are both a bit underpowered now [22:44:42] *** raqamy has quit IRC [22:46:25] *** nictuku has joined #postfix [22:46:47] <many> my pvt mail server *rejects* a total of 4400 mails while accepting 630 mails [22:47:09] *** nictuku has quit IRC [22:47:20] <many> so i guess it gets rid of alot of spam :) [22:48:27] <syzygyBSD> :) [22:48:53] <syzygyBSD> mine is about 6600 to 10 accepted for my domain/accounts on my server [22:49:25] *** KhensU has joined #postfix [22:49:41] <many> wow ;) [22:51:11] <hparker> Overworked server http://mail.odsgc.net/cgi-bin/mailgraph.cgi [22:51:54] *** killown has quit IRC [22:51:58] <syzygyBSD> bah, only 50K a day? not bad at all [22:52:21] <syzygyBSD> hell, I had 1 email account that was getting 100k -200k a day [22:52:43] <syzygyBSD> at the time it was the catch all for a domain with no spam filtering... [22:52:54] <hparker> But it's squeezed into and amd 1ghz with 786mb of ram [22:52:59] <Signum> syzygyBSD: impressive. I'm using my current email address publicly and (with RBLs in place) just get 100-200 through. how did you manage that? [22:53:10] <Signum> syzygyBSD: ah, no filtering at all. [22:53:22] <hparker> smtp w/amavisd-new/sa/clamav, pop, webmail [22:53:42] <syzygyBSD> ya, I rebuilt the server from scratch and got it down to < 200 within a week [22:53:43] *** FlashNet has quit IRC [22:54:58] <Signum> Interesting though that spammers must assume we are still thinking that their emails are honest and genuine if we get sold 50 wrist watches per day and ought to buy stock options like hell. [22:57:03] *** chrisc}{i has joined #postfix [23:00:56] *** smesjz has quit IRC [23:03:14] *** fietronic has quit IRC [23:05:01] *** pirho has joined #postfix [23:10:20] <syzygyBSD> not all of us, but enough to make it profitable to them [23:11:23] *** raqamy has joined #postfix [23:14:16] *** chrisc}{i has quit IRC [23:31:23] *** hparker has quit IRC [23:35:43] *** syzygyBSD has left #postfix [23:40:17] *** sepski has quit IRC [23:43:05] *** hparker has joined #postfix [23:46:36] *** conico has joined #postfix [23:49:52] *** etaylor has quit IRC [23:58:34] *** higuita has quit IRC