November 6, 2007 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | >
November 6, 2007 [00:00:03] <Trengo> its all too far anyway :)[00:00:09] <zention> it was that wall you see[00:00:11] <sysmonk> you've googlemap'ed it, right? :)))[00:00:16] <rob0> no[00:00:25] <zention> you all got lumped under Russia at that point[00:00:41] <rob0> When I was a kid, they sure were.[00:00:53] <Trengo> 10 years ago even?[00:01:11] <adaptr> Trengo you have no clue[00:01:14] <Trengo> or does it just look like it was 10 years ago? o.O[00:01:17] <rob0> um, wasn't it around mid-80's that they became independent?[00:01:28] <adaptr> proving in one swell foop that you're not even old enough to know[00:01:29] <sysmonk> '91[00:01:29] <Trengo> adaptr yeah i know[00:01:33] <unixcoder> well boring :)[00:01:38] <Trengo> adaptr me?[00:01:59] <sysmonk> rob0: in 90's[00:02:01] <xDie> somebody can helpme "postsuper: warning: bogus file name: incoming"[00:02:15] <xDie> google no match[00:02:20] <zention> you are closish to Ukraine[00:02:27] <adaptr> xDie help you with what ? that sounds like a valid error message to me[00:02:33] <unixcoder> xDie, just delete the id with postsuper -D id :)[00:02:34] <zention> only Belarus in between[00:02:39] <rob0> xDie, guess that means you have a broken upgrade or install.[00:02:53] <sysmonk> zention: anyway, you're just talking away the beer! we want beer! we want beer![00:02:56] <xDie> nop, i dont delete[00:02:58] <zention> which I must admit I have never heard of Belarus[00:03:05] <xDie> i need recover[00:03:10] <sysmonk> zention: never?[00:03:19] <zention> sysmonk: you know they should have set something like that up for the internet[00:03:34] <zention> sysmonk: no never heard of Belarus[00:03:40] <rob0> F/k/a "Byelorussia"[00:03:57] <Trengo> we still call it that[00:04:04] <zention> is that a new country[00:04:14] <rob0> um, no :)[00:04:19] <unixcoder> =))[00:04:22] <xDie> AN uruguay ?[00:04:55] <zention> the only European country I have never heard of Belarus[00:05:08] <zention> was it Belorusso?[00:05:13] <rob0> San Marino?[00:05:33] <xDie> the error is beacuase file null[00:05:36] <xDie> thanks[00:06:17] <rob0> Andorra?[00:06:53] <zention> I suppose I have heard of it[00:07:24] <rob0> Monaco and Vatican City, both very small but well-known :)[00:07:42] <zention> Luxembourg[00:07:58] <rob0> yeah, but that's not as tiny as the others I named[00:08:05] <rob0> Liechtenstein too[00:08:06] <zention> true true[00:08:20] <zention> right now for TLS[00:08:30] *** wdp has quit IRC[00:08:59] <rob0> TLS is not a country in Europe. Are we getting off topic here? ;)[00:09:46] <sysmonk> yes it is[00:10:03] <sysmonk> you never heard of it?[00:10:10] <rob0> haha you bastard[00:10:26] *** pitakill has quit IRC[00:10:30] * sysmonk goes to en.wikipedia.org/wiki/TLS and creates a "country" entrie :P[00:10:45] *** Lunar_Lamp has joined #postfix[00:10:46] <unixcoder> :))[00:11:07] *** pitakill has joined #postfix[00:11:25] <rob0> So did we scare away anyone who wanted Postfixing?[00:12:03] <sysmonk> i have a problem...[00:12:07] <sysmonk> my postfix works ;([00:12:07] <zention> so TLS should protect from sniffers[00:12:26] <rob0> TLS plugs the noses of sniffers.[00:12:49] <zention> I bet most email in the world is insecure[00:12:50] <sysmonk> but doesn't plug the a*shole[00:13:04] <sysmonk> uh, uh, you do?[00:13:35] <sysmonk> don't you guys send your root passwords to your @gmail.com boxes?[00:13:36] <sysmonk> :P[00:13:42] <Trengo> liechtenstein is a country?[00:13:53] <Trengo> and luxembourg?[00:14:11] <sysmonk> Trengo: yes, afaik[00:14:14] <zention> I bet most orgs don't bother to ensure the connection password is on an encrypted line[00:14:49] <Trengo> oh and andorra[00:24:56] *** felix_da_catz has quit IRC[00:27:07] *** pitakill has quit IRC[00:28:54] *** pitakill has joined #postfix[00:30:26] *** pitakill has quit IRC[00:30:43] *** pitakill has joined #postfix[00:31:26] *** brancaleone has quit IRC[00:35:57] *** Zeit|idle has quit IRC[00:36:54] *** unixcoder has quit IRC[00:38:36] *** githogori has quit IRC[00:39:05] *** duki has quit IRC[00:39:23] *** bucketfan99 has joined #postfix[00:39:37] <bucketfan99> hello. does anyone have a second to explain postgrey whitelist to me ?[00:39:46] <bucketfan99> and perhaps why the entries i add _dont_ work[00:45:46] *** theblackbox has quit IRC[00:46:36] *** war has quit IRC[00:46:37] *** Busta-- has joined #postfix[00:47:45] <Busta--> for some reason when sending outgoing mail via SMTP my username and pw is recjected[00:47:58] <Busta--> i can recieve mail fine, but can send outgoing mail[00:48:46] <zention> I am using msmtp to connect via tls do I need to get any cert details over to the client side?[00:49:06] *** pitakill has quit IRC[00:49:21] <zention> I am not using TLS to authorize using SMTP-AUTH CRAMMD5 for that[00:49:40] <zention> oh I shoudl really test it might just work[00:49:57] *** bucketfan99 has quit IRC[00:50:08] *** pitakill has joined #postfix[00:50:24] <Busta--> anyone know how i can auth into SMTP[00:50:30] *** growltiger has quit IRC[00:50:33] <Busta--> i have auth = yes in config[00:51:43] <Busta--> smtpd_sasl_auth_enable = yes[00:52:33] <zention> Busta--: have you tried telneting?[00:53:12] <Busta--> yeah[00:53:13] *** pitakill has quit IRC[00:53:19] <Busta--> i can connect to port 25[00:53:22] <zention> did the auths show?[00:53:37] <zention> do an EHLO your.domain.com[00:54:13] <Busta--> ok[00:54:22] <Busta--> it sends me an output[00:54:40] <Busta--> what should i be looking for in particular[00:54:45] *** meandtheshell has quit IRC[00:55:51] *** veepster has joined #postfix[00:56:16] <Busta--> ?[00:58:10] *** Xen^ has quit IRC[01:01:21] <adaptr> everything ?[01:06:26] <zention> the AUTH section[01:06:36] <zention> I am having problems as well[01:07:10] <zention> well CRAM-MD5 I think needs something a little more than just me specifying iy[01:07:11] <zention> it[01:07:28] <Busta--> i see[01:07:36] <Busta--> i see the auth selection[01:07:44] <Busta--> but dont know what to do with it[01:08:42] <zention> ok what are you using client side?[01:11:07] <zention> is there a secret to getting cram-md5 to work?[01:11:16] <zention> does it not work with pam as the backend?[01:11:21] <shasta> zention, sorry, didn't follow the conversation, but my $0.02: do you know that {CRAM,DIGEST}-MD5 require cleartext password storage on the server?[01:11:44] *** ming_zym has joined #postfix[01:11:53] <zention> shasta: no - I see it doesn't link in with the idea of using the system users[01:12:02] <zention> oh well[01:12:19] <zention> the plain stuff works but only TLS to defend[01:12:32] <zention> better check that really is tls[01:13:05] <shasta> you can't use cram-md5 unless you store your passwords in cleartext[01:13:15] <shasta> which isn't the case for system users and /etc/shadow[01:20:43] <zention> shasta: thanks[01:21:00] <Busta--> zention: i am using outlook clientside[01:21:13] *** pitakill has joined #postfix[01:21:19] <Busta--> i have passwords enabled[01:22:22] <zention> I think outlook is broken[01:22:37] <zention> there is a workaournd you need to do for it[01:24:20] <zention> workaround[01:29:01] *** kreg_lt has quit IRC[01:29:20] *** Lunar_Lamp has quit IRC[01:30:47] *** xDie has quit IRC[01:31:53] *** wdp has joined #postfix[01:32:01] <wdp> re[01:36:31] *** echelog has joined #postfix[01:37:06] <Busta--> it used to work fine on my old server[01:37:07] *** internat2 has joined #postfix[01:39:04] *** roxlu__ has joined #postfix[01:39:11] *** zention_ has joined #postfix[01:39:11] *** flart_ has joined #postfix[01:39:24] *** zention has quit IRC[01:39:26] *** internat85 has quit IRC[01:39:27] *** Sieg has quit IRC[01:39:27] *** Gek_ has quit IRC[01:39:27] *** Filbert has quit IRC[01:39:28] *** aaronc has quit IRC[01:39:28] *** Mazon has quit IRC[01:39:29] *** _gAri- has quit IRC[01:39:29] *** Chattanuga has quit IRC[01:39:29] *** wilymage has quit IRC[01:39:30] *** deemon has quit IRC[01:39:30] *** flart has quit IRC[01:39:30] *** roxlu has quit IRC[01:39:35] *** deemon has joined #postfix[01:39:44] *** Gecko has joined #postfix[01:40:44] *** Gecko has quit IRC[01:40:48] *** __gAri- has joined #postfix[01:40:48] *** aaronc has joined #postfix[01:40:48] *** zention has joined #postfix[01:40:48] *** internat85 has joined #postfix[01:40:48] *** Sieg has joined #postfix[01:40:48] *** Gek_ has joined #postfix[01:40:48] *** Filbert has joined #postfix[01:40:48] *** roxlu has joined #postfix[01:40:48] *** _gAri- has joined #postfix[01:40:48] *** Chattanuga has joined #postfix[01:40:48] *** flart has joined #postfix[01:40:48] *** wilymage has joined #postfix[01:40:49] *** wilymage_ has joined #postfix[01:40:49] *** wilymage has quit IRC[01:40:50] *** Mazon has joined #postfix[01:40:51] *** Gek_ has quit IRC[01:40:54] *** Sieg_ has joined #postfix[01:41:01] *** Gek_ has joined #postfix[01:41:08] *** flart has quit IRC[01:41:12] *** _gAri- has quit IRC[01:41:13] *** roxlu has quit IRC[01:41:21] *** __gAri- is now known as _gAri-[01:41:38] *** zention_ has quit IRC[01:41:47] *** Ryushin has quit IRC[01:53:54] *** zention has quit IRC[01:57:04] *** githogori has joined #postfix[02:04:14] *** weggpod has quit IRC[02:08:26] *** internat85 has quit IRC[02:11:18] *** Sieg has quit IRC[02:19:45] *** veepster has quit IRC[02:25:28] *** pfSense has joined #Postfix[02:25:45] *** djs_2_6 has joined #postfix[02:27:08] *** djs_2_6 has quit IRC[02:28:58] *** pfSense has quit IRC[02:30:52] *** confound has quit IRC[02:31:34] *** pfSense has joined #Postfix[02:33:16] *** felix_da_catz has joined #postfix[02:51:06] <k-man> what is lmtp?[02:51:18] *** jjshoe has left #postfix[03:02:35] *** wdp has quit IRC[03:05:17] *** Tachy_ has joined #postfix[03:06:34] <Busta--> not sure[03:08:48] *** pfSense is now known as imapril[03:10:09] <rob0> http://en.wikipedia.org/wiki/LMTP[03:13:04] *** diabel has quit IRC[03:13:09] *** imapril has left #Postfix[03:13:17] *** diabel has joined #postfix[03:19:33] *** Tachy has quit IRC[03:19:43] *** Busta-- has left #postfix[03:21:55] *** andresmujica has left #postfix[03:27:17] *** diabel- has joined #postfix[03:29:03] *** pirho has quit IRC[03:30:57] <magyar> i keep getting double ups for a email address that is exactly same as 5 other email addresses. In the logs I see one delivery only but in the maildir i get two. I have no hair left on my head[03:31:01] <magyar> HELP!![03:31:34] * magyar reaches for prozak[03:31:56] *** Zeit|awy has joined #postfix[03:32:19] <k-man> so i have set up amavisd and postfix[03:32:33] <k-man> but i haven't yet told postfix to filter all emails[03:32:38] <k-man> i want to do a few test emails first[03:32:59] <k-man> how can i set up a second mailq on a different port that will do the virus checking?[03:33:51] <k-man> oh wait, do i want "filtering email by postfix service" in this document?[03:33:56] <k-man> http://www.ijs.si/software/amavisd/README.postfix.html[03:33:56] <magyar> master.cf[03:34:29] <magyar> k-man: ^[03:34:36] <magyar> ?[03:34:58] <k-man> yes?[03:35:01] <k-man> what about master[03:36:02] <magyar> !master.cf[03:36:03] <knoba> magyar: "master.cf" : the process configuration file. Each logical line describes how a Postfix service will be run. See "man 8 pipe" for more information.[03:36:17] <k-man> ok[03:36:18] <k-man> thanks[03:36:21] <magyar> np[03:37:21] *** stevo_inco has joined #postfix[03:38:54] *** diabel has quit IRC[03:39:49] <k-man> the article suggests i set it up in main.cf[03:40:30] <k-man> oops[03:40:34] <k-man> no it doesn't[03:40:37] <k-man> i misread[03:40:40] *** hparker has quit IRC[03:40:43] <k-man> yeah, master.cf[03:42:51] <stevo_inco> Hi, I'm trying to setup SASL auth on my mail server. I get it setup (following the guide on postfix.org), but when I go to test it, I get this in my logs:[03:43:01] <stevo_inco> warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: Invalid argument[03:43:11] <k-man> 127.0.0.1:10025 means port 10025 on interface 127.0.0.1, how can i configure it for all interfaces? (or the default interface?)[03:43:49] <stevo_inco> Postfix just shoots back "535 5.7.0 Error: authentication failed: authentication failure" to the client.[03:45:24] <stevo_inco> The username and password I'm supplying are definately correct.[03:50:09] <Mavvie> not according to postfix.[03:58:42] <k-man> when talking about spam/virus filtering, what is a pen pals feature?[04:01:27] <k-man> what does amavis/clamav do when it detects a virus?[04:02:16] <Dominian> k-man: Did you by chance RTFM for anything or are you just hoping someone will hold your hand and walk you down the yellow brick road to the emerald castle to see the wizard?[04:02:33] <k-man> yes, i'm reading tfm[04:02:50] <Dominian> Doesn't really look like it is the only reason I asked.[04:04:07] <k-man> but its not clear (to me at least) what amavis and clamav does when it detects a virus[04:04:46] <k-man> afaict, the basic setup just silently discards it[04:05:13] <Dominian> more than likely.. that is what it does[04:05:22] <Dominian> but I believe you can configured amavisd-new to do other actions with it..[04:05:31] <Dominian> what those actions are.. I have no idea[04:05:34] * Dominian runs MailScanner[04:07:07] * magyar having a mail double up. Any takers?[04:10:36] *** Filbert has quit IRC[04:11:48] *** rob0_ is now known as munchkin[04:12:06] *** Filbert has joined #postfix[04:12:10] * munchkin sings, Follow the Yellow Brick Road![04:12:34] *** mwalling has joined #postfix[04:19:32] *** Yourname` has joined #postfix[04:22:52] *** sn00p- has joined #postfix[04:23:23] <sn00p-> Hello, I am having a problem with postfix I was able to send and recieve mail before but when I send mail to my mail server I get state 13 error code anybody know owhat might be wrong?[04:25:27] <Yourname`> Man, am I glad to be in a channel related to postfix! I installed webmin/virtualmin (A control panel), which automatically installed Postfix. Everything apparently is automatically taken care of by Webmin to handle virtual domain emails, etc. So, I added a domain.. and the admin of the domain has php scripts that send out activation emails and such. However, issue #1: The email address shows up as apache at my dot domain.com, whereas he would l[04:25:28] <Yourname`> ivation at hisvirtualdomain dot com. Issue #2: When I use virtualmin's web interface and send emails, it usually delivers to gmail/custom domain emails handled by GoDaddy.. but not to my @hotmail, or @msn.com emails. (It got sent a couple times properly, but not after that) .. how can I solve these issues? (forum URL: http://tinyurl.com/3xrugt )[04:25:41] <Yourname`> Whoa, extremely sorry for such a long post.[04:26:45] <Yourname`> Here's a pastebin of that long question: http://pastebin.ca/763072[04:27:42] <Dominian> Yourname`: more than likely it's going to be something on the host provider.. and/or with the webmin/virtualmin sestup.. not postfix.[04:28:20] <Yourname`> Dominian: What do you mean by host provider? I think I am the provider, it's my server.[04:29:45] <Dominian> Well, then[04:29:50] <Dominian> its more than likely webmin/virtualmin[04:30:00] <Dominian> I get the same thing with web forms actually irritates the crap out of me[04:30:05] <Dominian> just not enough for me to track down the culprit and fix it[04:30:43] <mwalling> Yourname`: um... are you on a residental internet conneection, and hosting the mail box from your house?[04:32:32] <Yourname`> mwalling: No. At a dc.[04:32:43] <mwalling> oh[04:32:45] <mwalling> well still[04:32:51] <mwalling> is your ip on spamhaus?[04:34:15] <Dominian> er..[04:34:19] <Dominian> the maillogs would reflect that[04:34:23] <Dominian> or postqueue -p might show something[04:35:30] *** amrit|wrk is now known as amrit|afk[04:36:46] <Yourname`> Dominian: I don't see what could be wrong. I honestly think it would be the configuration..[04:36:55] <Yourname`> mwalling: Nope. Checked that too.[04:37:12] <Dominian> Yourname`: without seeing it.. hard to say[04:37:53] <Yourname`> Dominian: I just looked at that queue command, and all I saw was the email I tried to send to my yahoo.co.uk.. it says mail temporarily defered. I wish it gave me such error messages for other emails.[04:37:58] <Yourname`> Dominian: What would you like to see?[04:38:28] <Dominian> hmm[04:38:34] <Dominian> it should say why it was deferred[04:38:44] <Dominian> If you can figure that out.. then you'll have your answer[04:38:49] <Dominian> so I would go through /var/log/maillog[04:38:55] <Dominian> or wherever the logs are[04:39:30] *** higuita has quit IRC[04:39:49] <Yourname`> Dominian: It gave me a 421 message.. gave me a URL to check out: http://help.yahoo.com/help/us/mail/defer/defer-06.html[04:40:19] <Yourname`> I keep hoping it's blocked somewhere or something, but I know it isn't.. as I used DNSStuff's bulk blockchecker..[04:40:41] <Dominian> Yourname`: bah.. don't trust that ool[04:40:42] <Dominian> tool[04:41:04] <Yourname`> Dominian: Well, before I went to that tool, I looked on spamcop and spamhaus.. and it wasn't there.[04:41:28] <Dominian> those aren't the only ones out there[04:41:37] <Dominian> however.. if it is a 421 more than likely its soemthing on yahoo stopping you for some reason[04:41:51] <Dominian> usually RBL hits will give a 5xx perm failure.. not a temp one[04:41:52] <Yourname`> Spamhaus didn't have it listed in SBL/PBL/XBL.[04:41:57] <Yourname`> ah[04:42:17] <Dominian> So I would read that URl fully[04:42:26] <Dominian> I for one have never had issue sending to any host.[04:42:50] <Yourname`> Lucky you. :([04:43:01] <Yourname`> Meanwhile, what could be the problem for issue #2?[04:43:26] <Dominian> Yourname`: do me a favor and send an email to dominian at slackadelic dot com[04:43:30] <Dominian> and we'll see what I see[04:43:46] <Dominian> and let me know when you send it[04:44:19] <Yourname`> Where do I send it from? From the domain of the user, or just the box?[04:44:32] <Dominian> wherever you were sending your test emails from[04:44:56] <Yourname`> Ok, I'm going to use Webmin's web mail interface to send it from both places.[04:45:12] <Dominian> k[04:45:41] <Yourname`> Sent[04:46:01] <Dominian> er hmm[04:46:04] <Dominian> what's the IP of your server?[04:46:10] <rob0> Whoa look how high it bounced![04:46:25] <Dominian> rob0: haha[04:46:36] <Dominian> man my buddy better fix his dyndns account stuff[04:46:39] <Yourname`> Hey! I did the postqueue, and it's still there.. your server gave me this: refused to talk to me: 554 5.7.1 Client host rejected: cannot find your hostname[04:46:41] <Dominian> or he's going to lose about 300 messages[04:46:48] <Dominian> Yourname`: bing[04:46:55] <Dominian> Yourname`: You do not have a reverse DNS for that IP[04:47:39] <Dominian> most servers.. if configured correctly will reject an IP that doesn' thave an rDNS.. considering mail servers should have a rDNS[04:47:52] <Yourname`> Dominian: Ok, since I anticipate a few domains to be hosted on this box, what do I set as rdns? The box's hostname?[04:48:10] <Dominian> that would be a start[04:48:23] <rob0> $myhostname should resolve to your IP address, and the IP address should resolve to that name.[04:48:36] * Dominian nods.. what rob0 said[04:48:50] * Dominian has a pretty good setup..[04:48:53] <Dominian> thanks to rob0 hehe[04:49:10] <Yourname`> I was thinking of doing the rDNS eventually, just didn't think it would hamper my initial testing so badly.[04:49:14] * rob0 blushes[04:50:01] <Yourname`> lol[04:50:08] <Yourname`> Working on the rDNS right now.[04:50:20] <Dominian> yeah rDNS is a big deal[04:50:28] <Dominian> especially with email servesr[04:50:44] <Dominian> pretty much everyone I know that runs an email server will not accept email if you don't have rdns[04:51:04] <Yourname`> One question though, how long do these "error messages" remain in the postqueue for?[04:51:10] * Dominian shrugs[04:51:16] <Dominian> once you know its fixed..[04:51:19] <Dominian> you can do: postqueue -f[04:51:22] <Dominian> or postsuper -r ALL[04:51:26] <Dominian> I would try the -f first[04:51:45] <Yourname`> Ok. I ask because I don't see any of those errors for all the previous emails that didn't get sent..[04:56:17] *** loa_dude has joined #postfix[04:57:32] <Yourname`> Ok, cname is done..[04:57:41] <Yourname`> Waiting on rDNS to be done, and then to propagate.[05:00:06] *** Filbert has quit IRC[05:03:14] <Yourname`> Dominian: You were going to help me with issue #2 once you get those emails or something?[05:03:56] <Dominian> no.. more than likely issue #2 is something I myself need to fix on my server[05:04:07] *** tshine has quit IRC[05:05:02] <Dominian> anyone who has a form be it in a virtual domain or not.. it always comes from www at slackadelic dot com[05:05:05] <mwalling> Dominian: ShitNet[05:05:05] <Dominian> why.. I have no idea[05:05:08] <Dominian> mwalling: ?[05:05:13] <mwalling> rdns[05:05:17] <Dominian> haha[05:07:47] *** internat85 has joined #postfix[05:10:23] <Yourname`> Dominian: haha, the funny thing is it works from the virtual domain when I send it using the webmin webmail interface.. just when he uses his scripts, it comes from apache at my dot domain.com[05:10:42] *** Motoko-chan has joined #postfix[05:10:47] *** deemon has quit IRC[05:10:47] *** flart_ has quit IRC[05:10:47] *** roxlu__ has quit IRC[05:10:47] *** internat2 has quit IRC[05:10:48] *** sh0wt1me has quit IRC[05:10:49] *** rmayorga has quit IRC[05:10:49] *** kgoetz has quit IRC[05:10:50] *** roxlu_ has quit IRC[05:10:51] *** Schmidt has quit IRC[05:10:51] *** mjoseph has quit IRC[05:10:51] *** idioterna has quit IRC[05:10:51] *** Radiance has quit IRC[05:11:21] *** idioterna has joined #postfix[05:11:27] <Yourname`> So, guys, how long does stuff remain in postqueue for?[05:12:15] *** kgoetz has joined #postfix[05:13:45] *** Schmidt has joined #postfix[05:14:43] *** rmayorga has joined #postfix[05:14:47] *** roxlu has joined #postfix[05:15:16] *** mjoseph has joined #postfix[05:15:27] *** flart has joined #postfix[05:15:27] *** deemon has joined #postfix[05:15:27] *** Filbert has joined #postfix[05:15:27] *** internat2 has joined #postfix[05:15:27] *** sh0wt1me has joined #postfix[05:15:27] *** Radiance has joined #postfix[05:15:29] *** Radiance has quit IRC[05:15:38] *** Radiance has joined #postfix[05:21:51] *** sh0wt1me has quit IRC[05:21:51] *** internat2 has quit IRC[05:21:52] *** Filbert has quit IRC[05:21:52] *** deemon has quit IRC[05:21:52] *** flart has quit IRC[05:24:08] *** kk_CHN has joined #postfix[05:26:43] *** flart has joined #postfix[05:27:44] *** Filbert has joined #postfix[05:27:44] *** internat2 has joined #postfix[05:27:44] *** sh0wt1me has joined #postfix[05:28:07] *** internat2 has quit IRC[05:28:52] *** roxlu_ has joined #postfix[05:30:03] *** pitakill has quit IRC[05:33:47] *** echelog has joined #postfix[05:35:48] *** pitakill has joined #postfix[05:36:20] *** FWP^^^ has joined #Postfix[05:37:40] *** mikefoo has quit IRC[05:37:41] *** cafuego has quit IRC[05:37:42] *** _pixmap has quit IRC[05:37:42] *** adaptr has quit IRC[05:37:42] *** thumbs has quit IRC[05:37:42] *** aba- has quit IRC[05:37:43] *** tibyke has quit IRC[05:37:44] *** hacim has quit IRC[05:37:45] *** e_ has quit IRC[05:37:45] *** mofino has quit IRC[05:37:45] *** faitZ has quit IRC[05:37:45] *** madduck has quit IRC[05:37:45] *** fwp has quit IRC[05:37:45] *** nitbix has quit IRC[05:37:46] *** barnie has quit IRC[05:37:47] *** barnie has joined #postfix[05:37:57] *** mofino has joined #postfix[05:39:02] *** madduck has joined #postfix[05:39:08] *** _pixmap has joined #postfix[05:40:04] *** aba- has joined #postfix[05:40:22] *** hacim has joined #postfix[05:40:23] *** hacim has quit IRC[05:40:24] *** mikefoo has joined #postfix[05:40:24] *** cafuego has joined #postfix[05:40:24] *** adaptr has joined #postfix[05:40:24] *** thumbs has joined #postfix[05:40:24] *** tibyke has joined #postfix[05:40:24] *** e_ has joined #postfix[05:40:24] *** faitZ has joined #postfix[05:40:24] *** hacim has joined #postfix[05:40:24] *** nitbix has joined #postfix[05:40:24] *** fwp has joined #postfix[05:40:25] *** hacim has quit IRC[05:40:31] *** hacim has joined #postfix[05:40:55] *** mikefoo has quit IRC[05:40:57] *** tibyke has quit IRC[05:41:00] *** fwp has quit IRC[05:41:13] *** hacim has quit IRC[05:41:59] *** solar_ant has joined #postfix[05:42:14] *** tibyke has joined #postfix[05:42:38] *** thumbs_ has joined #postfix[05:43:42] *** munchkin is now known as rob0_[05:45:31] *** hacim has joined #postfix[05:47:35] *** thumbs has quit IRC[05:48:01] *** thumbs_ is now known as thumbs[05:48:50] <k-man> so should I just get amavis/spamassassin to discard anything it thinks is spam?[05:48:59] <k-man> isn't that gangerous in the case of false positives?[05:49:39] *** adaptr has quit IRC[05:51:11] *** adaptr has joined #postfix[05:51:40] *** deemon has quit IRC[05:51:41] *** roxlu_ has quit IRC[05:51:41] *** sh0wt1me has quit IRC[05:51:42] *** Filbert has quit IRC[05:55:46] *** showtime has joined #postfix[05:55:46] *** deemon has joined #postfix[05:55:46] *** roxlu_ has joined #postfix[05:55:46] *** Filbert has joined #postfix[05:55:48] *** roxlu_ has quit IRC[05:55:48] *** roxlu has quit IRC[05:55:48] *** roxlu has joined #postfix[05:55:52] *** roxlu_ has joined #postfix[05:56:03] *** deemon has quit IRC[06:00:34] *** deemon has joined #postfix[06:02:53] *** Tinozaure is now known as _Tino[06:03:01] *** _Tino is now known as Tinozaure[06:04:33] <Yourname`> Dominian: Got rDNS! so, you ready to rumble?[06:05:11] <Dominian> postfix -f[06:06:16] <Dominian> er[06:06:17] <Dominian> postqueue -f[06:06:18] <Dominian> sorry[06:07:53] <Yourname`> don[06:08:12] <Dominian> I see it[06:08:17] <Dominian> got greylisted.. but give it 5 mins[06:08:22] <Yourname`> k[06:10:25] <Yourname`> Still didn't rcv it in my yahoo emails.. :)[06:10:37] <Dominian> postqueue -p show empty?[06:10:53] <Yourname`> Nope..[06:11:04] <Yourname`> Still got all the 4 emails in there. 2 to my yahoo, and 2 to you..[06:11:21] <Dominian> yeah the two from me should be 4xx errors[06:11:39] <Dominian> and the yahoo ones may be caching on yahoo's DNS side which will clear in time[06:11:48] <Yourname`> Same with the yahoo ones.. 4xx[06:11:51] <Yourname`> Shall I resend to yahoo?[06:12:06] <Dominian> postqueue -f requed and resent the messages so I'd give it time[06:12:25] <Yourname`> ok[06:16:15] <Yourname`> How long would it take, you know?[06:17:47] *** kreg_lt has joined #postfix[06:17:50] <Yourname`> I just sent my hotmail a couple emails .. lets hope they come through.[06:18:29] <kreg_lt> any web-cyradm / xerxes users?[06:18:30] <Yourname`> sigh, those got "queued for delivery" too now, according to /var/log/maillog[06:18:48] <Dominian> Yourname`: postqueue -p[06:18:53] <Dominian> see if they are still in queue[06:19:02] <Yourname`> xerxes? isn't that the dude from 300 movie?[06:19:09] <Yourname`> Dominian: Yeah :([06:19:10] <kreg_lt> heh heh could be[06:19:26] <kreg_lt> if you've heard of web-cyradm, it's a cousin.[06:19:58] <kreg_lt> it's an actually supported and maintained project comparied to web-cyradm. i've been testing it. i like it so far.[06:20:39] <Yourname`> Dominian: Any command that will forcibly retry all in queue?[06:21:35] <Dominian> postqueue -f will or postsuper -r ALL[06:21:58] <Yourname`> Dominian: lol, that requeued them[06:23:47] <Dominian> I got those two emails[06:24:04] <Yourname`> You did? How come it's still in postqueue -p then?[06:24:13] <Yourname`> Oh shit great![06:24:17] <Yourname`> Right now it's down to 3..[06:24:20] <Yourname`> err, 2.[06:24:23] <Yourname`> Both to yahoo.[06:24:32] <Yourname`> Let[06:24:41] <Yourname`> Let's see if it sent out my hotmails.[06:24:44] <Yourname`> Nope.[06:26:17] <Yourname`> sigh, still didn't get email to my hotmail.[06:27:57] <Yourname`> So, wait.. till postqueue is empty.. no new email gets sent or something?[06:29:06] <Dominian> no they will send[06:29:13] <Dominian> but those other ones could be a cachine issue.. hard to say[06:29:48] <Yourname`> Hmm, mail queue still has the emails to the yahoo.[06:29:58] <Yourname`> And I just composed to my hotmail.[06:30:21] <Yourname`> So it means the ones to the hotmail have been sent.. just don't see them in my inbox. :([06:30:47] <Yourname`> Actually, I'm just going to delete the yahoo emails in the queue.[06:36:55] <Dominian> ok back later.. bed time[06:37:02] <Yourname`> hey, thanks Dominian :)[06:41:13] *** growltiger has joined #postfix[07:07:43] *** VITIHO_ has joined #postfix[07:08:13] <VITIHO_> Hi, is there a way to disable connect messages in postfix log for specific host?[07:08:49] <VITIHO_> for example if I have a nagios check which is flooding my logs...[07:14:50] <kreg_lt> having trouble understanding difference between "smtpd_recipient_restrictions" and "smtpd_client_restrictions"[07:17:52] <rob0> kreg_lt: In practice, very little, except smtpd_recipient_restrictions is mandatory (to control relaying), and smtpd_client_restrictions is optional.[07:18:03] <rob0> !smtpd_delay_reject[07:18:03] <knoba> rob0: "smtpd_delay_reject" : a configuration parameter in the main.cf: Wait until the RCPT TO command before evaluating $smtpd_client_restrictions, $smtpd_helo_restrictions and $smtpd_sender_restrictions.[07:18:37] <kreg_lt> ok, that helps some. probablly can practice what i'm doing without it for now.[07:19:11] <rob0> ^^ if that's set to "no" there becomes a difference: smtpd_client_restrictions happens at connect time, smtpd_helo_restrictions at HELO/EHLO time, smtpd_sender_restrictions at MAIL FROM time.[07:19:16] <Yourname`> rob0: I finally got rDNS setup, and I'm slowly starting to get email into my yahoo.. going to spam folder though. However, my virtual domain user's public_html script is sending email.. and the from email is apache at myhostname dot com, instead of something like script at hisdomain dot com .. what shall I do?[07:19:46] <rob0> Yes, for ease of management it's a good idea to keep all your restrictions in smtpd_recipient_restrictions.[07:21:03] <VITIHO_> i guess there is no way to tell postfix not to log specific hosts?[07:21:14] <rob0> The risk of all in smtpd_recipient_restrictions is that you must be careful with "OK"/"permit" lookup results.[07:21:45] <kreg_lt> thanks rob0[07:23:31] <rob0> Yourname`: Typically you should fix the broken script to add a proper sender address. But there's also ...[07:23:36] <rob0> !myorigin[07:23:36] <knoba> rob0: "myorigin" : a configuration parameter in the main.cf: The default domain name that locally-posted mail appears to come from, and that locally posted mail is delivered to. The default $myhostname, which is fine for small sites. If you run a domain with multiple machines, you should (1) change this to $mydomain and (2) set up a domain-wide alias database that aliases each user to user at that dot users.mailhost.[07:25:36] <Yourname`> rob0: I have two things, once is myhostname, which I put in during installation of CentOS as web1.myserver.com, and then added his domain, which is domain1.com. So the emails go out like this:[07:25:51] <Yourname`> 1) When sent from the webmin interface, through the root account, it shows up as root at myserver dot com[07:26:07] <rob0> Don't use root for sending/reading mail.[07:26:46] <Yourname`> Sorry, correction to that.. it shows up as root at web1 dot myserver.com[07:27:00] <Yourname`> 2) When sent from the command ssh, through the root account, it shows up as root at myserver dot com[07:27:38] <Yourname`> 3) When sent from my user's domain account via webmin, it comes up as hisusername at hisdomain dot com (or according to example, hisusername at domain1 dot com)[07:28:01] *** Motoko-chan has quit IRC[07:28:05] <Yourname`> 4) When sent from my user friend's public_html php directory, it comes as apache at myserver dot com[07:28:10] <Yourname`> There we go.[07:29:58] <Yourname`> Also, his script has $from_email = "verify at hisdomain dot com";[07:30:14] <Yourname`> And for some reason postfix is not taking that variable into consideration.[07:31:01] <Yourname`> Wait, is it supposed to be mail ($to_email, $from_email, $subject, $content, $headers) ?[07:33:45] <Yourname`> I'm now officially positive it's his script, or his command is messed up.[07:34:53] *** loa_dude has left #postfix[07:39:49] *** pitakill has quit IRC[07:44:02] *** fluffles has left #postfix[07:50:32] *** bronb has quit IRC[07:54:18] *** bronb has joined #postfix[08:07:18] *** felix_da_catz has quit IRC[08:10:35] *** Zeit|awy has quit IRC[08:13:58] *** VITIHO_ has quit IRC[08:21:48] *** aozturk has joined #postfix[08:23:24] <Yourname`> Script has been fixed![08:23:31] <Yourname`> Email has worked into a yahoo.ca account.[08:23:40] <Yourname`> Now, it doesn't appear in my @msn.com account[08:24:36] *** bronb has quit IRC[08:26:57] *** rmayorga has quit IRC[08:27:59] *** Lap_64 has joined #postfix[08:28:04] *** rmayorga has joined #postfix[08:29:39] *** die_z has joined #postfix[08:30:24] *** adaptr has quit IRC[08:30:27] *** adaptr has joined #postfix[08:40:48] <kreg_lt> can't seem to get past this[08:40:51] <kreg_lt> sql_select option missing[08:41:12] <kreg_lt> i'm trying to do smtp auth with the sasl auxprop[08:42:51] <kreg_lt> maybe it's because i really don't konw where the heck to put smtpd.conf[08:45:29] *** cutmasta has joined #postfix[08:47:59] *** prebur69 has quit IRC[08:48:23] *** Filbert has quit IRC[08:49:32] *** Filbert has joined #postfix[08:55:40] <sn00p-> Hello, I am having a problem with postfix I was able to send and recieve mail before but when I send mail to my mail server I get state 13 error code anybody know owhat might be wrong?[09:06:57] *** amrit|afk is now known as amrit|zzz[09:10:57] *** harobed has joined #postfix[09:11:16] *** die_z|away has joined #postfix[09:13:12] *** prebur has joined #postfix[09:13:26] *** die_z has quit IRC[09:14:56] *** prebur has quit IRC[09:16:01] *** die_z|away is now known as die_z[09:16:19] *** mwalling1 has joined #postfix[09:19:44] *** tmjb has quit IRC[09:22:40] <showtime> i have a failback relay where mail which doesnt get through the first time goes to that box, which retries later, this is fine for most domains. However some of the emails are going to my pop server which is hosted internationally, so the first time it tries it might not succeed therefore going to the failback[09:22:42] *** Jax has joined #postfix[09:22:45] <Jax> hi[09:23:02] <showtime> is there a way for emails going to my pop server to not go to the failback but carry on retrying?[09:23:35] <showtime> 90% of my mail delivers locally[09:23:55] <showtime> so this 10% is causing mail delays[09:31:56] *** mwalling has quit IRC[09:32:06] *** prebur has joined #postfix[09:33:31] <sn00p-> My mail server works one time[09:37:09] <sn00p-> Why is my mail rejecting?[09:37:32] *** duki has joined #postfix[09:37:42] <sn00p-> when I send to server?[09:42:21] <Jax> sn00p- check logs and report what the message is[09:46:43] <sn00p-> I fixed it anyways[09:52:05] *** brancaleone has joined #postfix[10:00:23] *** githogori has quit IRC[10:00:25] *** war has joined #postfix[10:00:30] *** vr has quit IRC[10:00:45] *** Tinozaure is now known as _Tino[10:01:27] *** vr has joined #postfix[10:03:18] *** Schmidt_ has joined #postfix[10:04:31] *** Lap_64 has quit IRC[10:05:43] *** Thurisaz has joined #postfix[10:05:52] <Thurisaz> Hi all[10:06:57] <Thurisaz> I'm looking for web based change password script for Postfix+Dovecot+MySQL virtual users[10:07:55] <Thurisaz> I'm using PostfixAdmin to create mailboxes, but I want to allow users to change their passwords[10:08:29] *** ^Willie^Laptop has joined #postfix[10:08:30] <Thurisaz> could someone recommends me a script for that[10:08:43] <Thurisaz> ?[10:09:30] <sn00p-> dont use mysql[10:09:34] <sn00p-> its shitty[10:09:37] <sn00p-> and tough to setup[10:10:47] <Thurisaz> what do you recommend me to use?[10:11:25] <sn00p-> I dont know[10:11:28] *** charlie has joined #postfix[10:11:33] <sn00p-> pam[10:11:49] <charlie> !cheatsheet[10:11:49] <knoba> charlie: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.[10:12:04] *** charlie is now known as lanc[10:12:10] *** vr has quit IRC[10:12:26] <Thurisaz> actually I don't have problems with MySQl[10:12:42] *** vr has joined #postfix[10:13:15] *** unixcoder has joined #postfix[10:16:07] *** Schmidt has quit IRC[10:17:19] *** f3ew has quit IRC[10:18:03] *** f3ew has joined #postfix[10:18:13] <^Willie^Laptop> join #nagios[10:18:14] <^Willie^Laptop> :S[10:22:16] *** aozturk has quit IRC[10:23:23] *** thojo has joined #postfix[10:39:12] <Jax> Thurisaz maybe 'expect'[10:39:43] <Thurisaz> what?[10:40:16] <Thurisaz> Jax[10:41:52] *** Devyll has joined #postfix[10:42:41] <Devyll> hello all. I have a problem with sendmail. I try to send emails to a certain email server (let's call it email server #2) and it gives me "stat=User Unkown" . If i'm using gmail or yahoo , email server #2 works and get's the emails. If I try to send email at gmail or yahoo from email server #1 it works just fine . Can anybody tell me what am I dealing with here please ? . I tried asking others but no answear for 2 days .[10:42:54] <keanne> Thurisaz, if the password is stored in mysql, it's pretty trivial to write a simple php/mysql for that.[10:43:35] <keanne> Thurisaz, or postfixadmin(?) i heard about it but never used it myself.[10:43:50] <Thurisaz> I use Postfix Admin[10:43:58] <Thurisaz> I like it[10:44:31] <Thurisaz> but its only panel for Post Admin user[10:45:52] <Thurisaz> there is no way to be used by mailbox users to change their passwords[10:47:31] *** bosyak has joined #postfix[10:47:39] *** bosyak has quit IRC[10:48:37] <Thurisaz> but it's not very simple to create php script which can changes passwords, because it must create md5 crypt passwords[10:48:52] <Thurisaz> and must be secure[10:50:01] <Thurisaz> and I'm not php developer[10:50:15] <sysmonk> uh ;)[10:50:30] <sysmonk> like ... $password = md5($_POST['password'])[10:50:52] <sysmonk> and like mysql_query("update users set password=...") ? :)[10:51:04] <sysmonk> yeah, those are few veeeeery hard lines of code ;/[10:51:36] *** ming_zym has quit IRC[10:56:17] <Devyll> anyone ? please ?[10:58:46] <f3ew> Devyll show logs[10:59:31] *** havvg has joined #postfix[11:00:56] <Devyll> http://pastebin.com/m73adf872[11:01:02] <Devyll> f3ew, thanks[11:02:36] *** Zeit|idle has joined #postfix[11:04:01] <f3ew> you are using Allman Sendmail. not Postfix[11:04:53] <Devyll> but I've been trying to talk to somebody from #sendmail but from 2 days nobody helped me[11:05:11] <Devyll> I thought anyone from here can help me..[11:05:56] <sysmonk> Devyll: didn't try asking on #microsoft-exchange ? they may be helpfull too![11:05:57] <f3ew> Oh dear[11:05:58] * sysmonk hides[11:05:58] <roxlu_> when I've got a ID of a mail (from the maillog), how can I see the contents?[11:06:06] <f3ew> roxlu postcat[11:06:11] <sysmonk> roxlu_: if it's still in the queue - then postcat[11:06:14] <sysmonk> if it's out of there - you can't[11:06:31] <sysmonk> unless you have specified to save all queue[11:06:38] <f3ew> Hmmmm, I really have no idea of what could cause that problem[11:06:43] <sysmonk> but normaly you wouldn't do that[11:07:16] *** Edward123 has joined #postfix[11:07:31] <roxlu_> okay, but how can I use postcat from the queue when I don't know the mail-id ?(I'm mean I need to look in the maillog to get the ID)[11:08:06] <Devyll> sysmonk, I didn't realize anyone from Earth can be so funny[11:08:37] <unixcoder> Devyll, is the server2 server microsoft exchage?[11:09:53] <Devyll> unixcoder, it's not microsoft exchange. the server is on linux and I can't know exactly what email server is[11:11:07] <Devyll> Trying 64.13.206.126...[11:11:07] <Devyll> Connected to extendstudio.com.[11:11:07] <Devyll> Escape character is '^]'.[11:11:07] <Devyll> 220 cl34.gs01.gridserver.com ESMTP Exim 4.63 Tue, 06 Nov 2007 01:34:25 -0800[11:11:13] <Devyll> that means it's exim[11:11:20] <Devyll> esmtp[11:11:21] <sysmonk> Devyll: i'd be glad to help, but imho it's MTA misconfiguration[11:11:41] *** solar_ant has quit IRC[11:12:05] <Devyll> server #1 misconfiguration or server #2 misconfiguration ?[11:12:12] <Devyll> can you tell that[11:12:13] <Devyll> ?[11:14:54] <Devyll> guess not :([11:20:52] <whatever__> hi, can I limit the delivery per hour per domain on postfix?[11:28:16] <f3ew> whatever__ use a policy daemon?[11:33:57] *** Devyll has quit IRC[11:34:09] *** Devyll has joined #postfix[11:36:39] <whatever__> f3ew, very helpful indeed. Thank you[11:39:29] *** Edward321 has joined #postfix[11:42:37] <Edward321> hey, i'm running a HA setup with failover (master/slave) for mail, but something i may have overlooked would be PTR - the PTR record the failover IP points to our server8.netring.co.uk, but when the slave, server9.netring.co.uk takes over due to a failure, presumably a lot of outgoing mail is going to get blocked due to our reverse DNS appearing to be wrong?[11:43:18] <f3ew> Edward123, so have it take over the IP as well[11:43:22] *** mitziyahu has joined #postfix[11:43:38] <mitziyahu> whouls sfkdl ads da[11:43:41] <Edward321> f3ew: it does take over the IP... sorry, not sure i follow?[11:43:46] <f3ew> oops, yes[11:43:49] <mitziyahu> would a sender relay wait for the queue/[11:43:51] <Edward321> the ISP have to change the PTR[11:44:04] <Edward321> so it's a bit of a conundrum[11:44:10] <f3ew> What you need is probably a generic "mail.example.com" A and PTR pair for that IP[11:44:21] <f3ew> and the servers can helo as their canonical hostname[11:44:28] <f3ew> which needs to resolve[11:44:41] <Edward321> oh you can have two host names for 1 PTR?[11:44:42] <f3ew> The HELO and A/PTR need not match[11:44:53] <f3ew> just one[11:44:54] <sn00p-> Does anybody have a dovecot.conf example I can use that has passwd allowed as user scheme?[11:45:17] <Edward321> hrm sorry i don't follow - how do you mean PTR 'pair'?[11:45:32] <f3ew> A && PTR[11:46:00] <Edward321> ah right[11:46:13] <Edward321> hrm[11:48:51] <Edward321> so as long as the HELO is valid the A/PTR shouldn't matter then?[11:50:26] *** tmjb has joined #postfix[11:54:40] *** Edward123 has quit IRC[11:55:38] *** meandtheshell has joined #postfix[11:55:57] <f3ew> yes[11:56:09] <f3ew> A and PTR need to match, and HELO needs to resolve[11:57:26] *** stevo_inco has quit IRC[12:00:10] <Edward321> hrm but you're saying keep one name/host spare and use that just for outgoing?[12:00:41] <Edward321> is that right?[12:05:03] *** |DeuS| has joined #postfix[12:07:12] <mitziyahu> how can i check what email an alias uses in postfix?[12:09:51] *** Filbert has quit IRC[12:10:40] *** jMCg has joined #Postfix[12:12:29] <Devyll> I've just installed postfix and I have the same problem, just diffrent error logs ... can you guys tell me what I'm dealing with ? the problem I mentioned earlyer is : hello all. I have a problem with sendmail. I try to send emails to a certain email server (let's call it email server #2) and it gives me "stat=User Unkown" . If i'm using gmail or yahoo , email server #2 works and get's the emails. If I try to send email at gmail or yahoo from email server[12:12:29] <Devyll> #1 it works just fine . Can anybody tell me what am I dealing with here please ? . I tried asking others but no answear for 2 days .[12:12:45] <Devyll> the new logs are at : http://pastebin.com/m6bda2e68[12:20:12] <Devyll> any ideeas ?[12:22:46] *** leonmortiba has joined #postfix[12:23:28] *** Edward321 has quit IRC[12:29:01] <Devyll> anybody ?[12:29:44] *** Edward123 has joined #postfix[12:30:31] *** Filbert has joined #postfix[12:32:13] *** UQlev has joined #postfix[12:32:57] <f3ew> Devyll ask postmaster@ server2?[12:33:28] <Devyll> you mean that the problem is not on my emailserver ?[12:33:35] <Devyll> it's on server #2 email server ?[12:34:46] <Edward123> i asked postmaster@ remote server a while ago[12:34:49] <Edward123> and didn't get a reply, heh[12:34:54] <Edward123> that was GM too[12:35:01] <Edward123> you'd think a big company like that would do things properly[12:35:08] <f3ew> you wish[12:35:32] <Edward123> i do[12:35:33] <unixcoder> Devyll, is this your ip?[12:35:36] <unixcoder> 86.35.132.126[12:36:00] <unixcoder> silly me it is..[12:36:43] <unixcoder> turn smtp auth because the 86.35.132.0/23 it blocked in pbl[12:36:47] <unixcoder> see your logs[12:38:47] <Devyll> so from postfix config I should turn on smtp auth and it'll work ?[12:38:50] *** FWP^^^ is now known as fwp[12:40:28] <unixcoder> smtp auth on your client[12:42:54] <Devyll> well .. I'm using a php script[12:43:05] <Devyll> actually wait[12:44:12] <Devyll> so yes. .. I'm using a php script[12:44:30] <Devyll> and that script sends one mail to emailserver2 and gmail[12:44:32] <Devyll> it reaches gmail[12:44:39] <Devyll> but emailserver 2 it doesn't[12:44:42] <Devyll> you saw the logs I guess[12:47:44] <unixcoder> if server2 has the reject_rbl_client in his smtpd_recipient_restrictions it reject mail coming from 86.35.132.0/23[12:47:45] <jMCg> !cheatsheet[12:47:46] <knoba> jMCg: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.[12:47:53] <jMCg> [I really, really, really should bookmark this thing.][12:51:13] *** cpm has joined #postfix[12:51:52] <Devyll> unixcoder, so what's my sollution ?[12:52:19] *** kk_CHN has quit IRC[12:52:41] <unixcoder> just read http://www.spamhaus.org/pbl/query/PBL119081[12:52:53] *** sn00p- has quit IRC[12:56:20] <Devyll> ok thanks[13:00:30] <jMCg> smtp_sasl_security_options defaults to noplaintext, noanonymous -- but when I enable plain in dovecot's auth [which I'm using for ah...[13:03:50] *** ikaro has joined #postfix[13:08:45] <Devyll> unixcoder, hope what solved the problem. I have to wait about 30 minutes.. talk to you then . :)[13:08:46] <Devyll> thanks a lot[13:10:14] *** Filbert has quit IRC[13:11:24] *** duki has quit IRC[13:17:21] *** UQlev has quit IRC[13:17:33] *** FreeSoul has joined #postfix[13:18:33] <FreeSoul> hi guys :) i've a doubt: since postfix is using procmail as mailbox_command, who is to fisically put mails in respective mailboxes? I think it's procmail, am i right? (i'm trying to draw a diagram, if anyone has a diagram with postfix + clamsmtp + clamav + procmail + spamassassin please let me know)[13:21:15] <f3ew> procmail[13:21:31] <FreeSoul> great![13:21:41] <cpm> FreeSoul, have no doubt.[13:21:42] <^Willie^Laptop> is it posible to define an smtpd proxy filter and an normal filter on one postfix instance[13:21:54] <FreeSoul> cpm: what do you mean?[13:24:56] <Edward123> hrm, f3ew, will postfix send it's own machine name as HELO when it communicates with other SMTP servers (e.g. ehlo server8.netring.co.uk) or the EHLO the user submitted when they connected e.g. EHLO eddpod.office?[13:25:52] <f3ew> t's own hostname][13:25:59] <Edward123> right, okay[13:26:27] *** Devyll has quit IRC[13:26:34] <Edward123> hrm sorry if i'm being dumb but i don't yet see how your advice helps the problem of having a PTR pointing to the wrong place when a failover occurs?[13:26:56] <f3ew> You have an A record, and a matching PTR[13:27:00] <f3ew> which is needed[13:27:01] <Edward123> are you suggesting changing the default EHLO to something else?[13:27:05] <Edward123> on the master, yes[13:27:10] <f3ew> you need a HELO name which resolves[13:27:14] <Edward123> right[13:27:22] <f3ew> The HELO need not be the same as the A/PTR[13:27:35] *** leonmortiba has left #postfix[13:28:12] <Edward123> so change the HELO to some completly seperate host like mailserver.netring.co.uk and use that as the HELO resolving, perhaps, to a completly different IP which has a valid PTR?[13:28:19] <Edward123> for mailserver.netring.co.uk?[13:28:54] <f3ew> But why do you want to change the HELO?[13:29:06] <f3ew> the HELO needs an A record[13:29:31] <f3ew> but nothing says that it needs to be the same as the A/PTR of the outbound MTA[13:29:43] <Edward123> actually you know, i think it might work with the default settings anyway[13:30:36] <FreeSoul> bye bye :)[13:30:39] <FreeSoul> thanks everybody[13:30:41] *** FreeSoul has left #postfix[13:30:59] <Edward123> both master and slave are set to use the machine's main eth0 IP address for outgoing mail, which will always point back to their name (e.g. server8 or server9 respectively). if server8 fails and server9 takes over, server9 will still be sending out through it's default host/ip, with a valid PTR, only the incoming connections will be from the same IP address[13:31:10] <robtone_> Edward123, in other words, the RFC explicitly allow you to set "smtp.microsoft.com" as HELO[13:31:19] <Edward123> yes i think i see[13:31:30] <robtone_> Edward123, they do even allow you to use "MAIL FROM: sales at microsoft dot com"[13:31:31] <Edward123> and i think it should work by default on failover anyway[13:31:34] <Edward123> job's a good'un[13:31:42] *** Filbert has joined #postfix[13:31:51] <Edward123> (providing my understanding is correct heh)[13:32:54] <robtone_> Edward123, however, some take all arguments which you provide in the SMTP dialog and try to calculate a possibility of forgery. Which means, it is good to set a HELO which resolves correctly. There is no need to push it to be inconsistent[13:33:33] <Edward123> of course[13:33:54] <Edward123> well the HELO will resolve back to the machine that really sent the e-mail[13:34:30] <Edward123> and although they might be connecting on a false IP address (i.e. one that has an invalid PTR) when postfix connects to the rcpt smtp server that becomes unrelevant[13:34:46] <Edward123> linux-ha has gone swimmingly so far[13:43:08] *** prebur has quit IRC[13:45:18] <cpm> how do you mean 'false IP' address?[13:46:45] <cpm> how do you mean invalid PTR ?[13:47:25] <Edward123> cpm, i mean a PTR pointing to the wrong location[13:47:32] <cpm> No. Bad, spank![13:47:36] <Edward123> we have two servers for the failover, server8.netring.co.uk and server9.netring.co.uk[13:47:38] <cpm> PTRs need to be correct[13:47:41] <cpm> okay[13:47:57] <Edward123> let's say server8.netring.co.uk is master at present - you know linux-ha heartbeat at all?[13:48:02] *** moldy has joined #postfix[13:48:03] <cpm> yes[13:48:04] <moldy> hi[13:48:29] <Edward123> okay great - well the service IP moves from server8.netring.co.uk to server9.netring.co.uk in the event of a failover, but the PTR will point to the wrong place[13:48:39] <cpm> why?[13:48:50] <Edward123> because the ISP change the PTR[13:48:51] <moldy> i cannot start postfix because it thinks it is already running, but according to ps, it is not -- what does it check for? some socket or lockfile that i need to move out of the way?[13:49:00] <Edward123> and currently it points to server8.netring.co.uk[13:49:12] <cpm> a PTR record is tied to an IP address.[13:49:25] <cpm> there is only 1 PTR per IP.[13:49:32] <Edward123> yeah[13:49:37] <Edward123> but our failover method is IP takeover[13:49:42] <moldy> ah, the "master" process was it...[13:49:52] <cpm> okay, but the PTR wouldn't change.[13:49:56] <Edward123> no[13:50:15] <Edward123> which is what i mean by 'invalid' - the PTR will still be pointing to server8.netring.co.uk even though the IP will really be going to server9.netring.co.uk[13:51:32] <Edward123> but i think this should not be relevant as server9.netring.co.uk will not be sending out via the service IP it will be sending out via the system IP, the main IP address for eth0[13:52:27] *** gb__ has joined #postfix[13:53:34] *** gb__ has joined #postfix[13:53:39] <gb__> hello[13:53:48] <gb__> anyone used postfix with gmail?[13:53:50] <cpm> the PTR record will not be invalid.[13:55:51] <cpm> right now, server8 and server9 are apparently separate machines, with separate IP address and henceforth separate PTR records. So, you are saying with HA, that you will fail server8 to server9,[13:56:09] <cpm> and bring server9 up on server8s network, yes?[13:57:08] *** x-ip has joined #postfix[13:59:02] *** wdp has joined #postfix[13:59:04] <Edward123> that's right, cpm[13:59:25] <Edward123> as an aside i also need to find out whether heartbeat automatically handles APR requests[13:59:32] <cpm> No worries. Nothing invalid, nothing false, all good.[13:59:42] <Edward123> everything should be gravy by my estimations[13:59:49] <Edward123> HA has been suprisingly easy heh[13:59:59] <cpm> Edward123, it does, but it takes a bit of time, you'll see arp request timeouts until the arp cache expires[14:00:33] <cpm> Personally, I think it would be good to down, and up the interface at the switch as part of the failover operation[14:00:59] <cpm> what kind of switch gear are you using[14:01:25] <cpm> There is a wierder way, , , wait, I've never proven this works, ignore me.[14:01:41] <jduggan> depending on howyou're achieving the HA, you could share a mac addr between both machines[14:01:41] *** mwalling has joined #postfix[14:01:53] *** moldy has left #postfix[14:01:54] <jduggan> thus not have to worry about arp cache timeouts[14:02:19] <cpm> jduggan, you could, but that's mean[14:02:22] <cpm> spirited[14:02:53] <cpm> :)[14:02:58] <jduggan> in what sense? :)[14:03:32] <cpm> I'm too old. I still buy into MAC/CAM addressing being hard-tied to the hardware[14:03:48] <jduggan> yea[14:03:59] <jduggan> but it's restrictive[14:04:05] <jduggan> sometimes you dont have control over upstream hardware[14:04:17] <cpm> true.[14:05:55] <jduggan> default arp timeouts on alot of kit is quite high[14:06:14] <jduggan> like most cisco shit is 4hrs[14:06:23] *** lunaphyte_ has quit IRC[14:06:26] <jduggan> (default)[14:09:13] <^Willie^Laptop> is it posible to define an smtpd proxy filter and an normal filter on one postfix instance ?[14:10:32] *** Devyll has joined #postfix[14:11:32] *** baggles has joined #postfix[14:13:23] *** andrius has joined #postfix[14:14:17] *** gb__ has quit IRC[14:14:26] <Roobarb-Work> Edward123: heartbeat (as in linux-ha) does arp-storming when it takes control of an IP.[14:14:29] <cpm> jduggan, yeah, why i mentioned resetting the switch port[14:14:36] <baggles> hi. what option sets my SMTP relay up so that only users that use a username/password can use it as their SMTP server? or is that the default. i'm getting relay access denied.[14:15:21] <Bejgli> baggles: permit_sasl_authenticated[14:15:27] *** hark has joined #postfix[14:16:30] <baggles> but i don't have any secure certificates set up or anything.[14:16:37] *** ^Willie^Laptop has left #postfix[14:16:56] <Bejgli> baggles: you dont need certificates for sasl authentication, you need cyrus-sasl for example...[14:16:57] *** mwalling1 has quit IRC[14:16:59] <Bejgli> !sasl[14:16:59] <knoba> Bejgli: "sasl" : short for "Simple Authentication and Security Layer". It is provided by the cyrus mail server to enable the "SMTP AUTH" feature. Learn more at: http://asg.web.cmu.edu/sasl/[14:17:11] <jMCg> Bejgli: why is smtpd_recipient_restrictions set to permit_mynetworks, reject_unauth_destination -- when smtpd_sasl_auth_enable = no ?[14:17:16] <baggles> ok. i'm looking at this through webmin.[14:17:21] <Bejgli> baggles: http://www.postfix.org/SASL_README.html[14:17:35] *** andrius is now known as _FBI_[14:17:51] *** _FBI_ is now known as FBI_[14:18:04] <baggles> thanks[14:18:26] <Bejgli> jMCg: because if you dont explicitly deny unuath destinations , an explicit permit at the end (e.g in the data restrictions) can make your mail server open relay[14:19:07] <jMCg> Okay... how would I have that order, if I do not have authentication?[14:19:21] <Bejgli> !cheatsheet[14:19:22] <knoba> Bejgli: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.[14:19:27] <Bejgli> jMCg: have a look at that guide ^^^^^^[14:20:47] <Bejgli> jMCg: you can omit permit_sasl_authenticated if you dont have authentication at all... then its safe to use permit_mynetworks, reject_unauth_destination ...[14:21:59] <jMCg> Bejgli: my problem is, that I don't know how to use reject_unknown_sender_domain/reject_unknown_recipient_domain, because the DNS where my Postfix is located is.. fucked up [managed by the Windows team...][14:22:32] *** thojo has quit IRC[14:23:11] <Bejgli> jMCg: ask them to fix, or use some other dns server.. afaik dyndns.org has a free open dns service[14:24:47] <jMCg> Bejgli: is there somethign that says permit_known_sender/recipient_domains? --I Have those whithelisted anyways.. but I am still an open relay.[14:25:57] <Bejgli> jMCg: read the http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt guide , it helps you stop being an open relay... or if you need an easier documentation first, try this: http://www.postfix.org/SMTPD_ACCESS_README.html[14:26:31] <FBI_> If I have Postfix+courier+SSL+TLS, I need cyrus-sasl for AUTH SMTP?[14:26:54] <FBI_> If I have Postfix+courier+SSL+TLS, I need cyrus-sasl for AUTH SMTP?[14:27:13] <jMCg> Bejgli: I based my configration on the former and then gradually had to reduce it to crap because our developers don't speak tls/ssl, don't know how to base64 an login and our win sys engs don't know how to manage DNS...[14:27:25] <Bejgli> FBI_: yes, you can do smtp auth with that[14:27:56] <FBI_> And without that?[14:28:10] <Bejgli> jMCg: you don't have to copy+paste every line from that guide.. read about the open relay controls, how to prevent it[14:28:46] <Bejgli> FBI_: i'm not sure but maybe dovecot can do the smtp auth as well, but i think cyrus-sasl will be a good choice with courier[14:29:34] <FBI_> Bejgli: I use Debian and in the debian mirror i did`t find cyrus-sasl?[14:29:53] <Bejgli> FBI_: apt-cache search sasl[14:34:32] <FBI_> cyrus-sasl2-dbg - Debugging symbols for Cyrus SASL[14:34:33] <FBI_> cyrus-sasl2-doc - Documentation for Cyrus SASL library and utilities[14:35:03] <FBI_> nothing more about cyrus + sasl :([14:36:07] <Bejgli> FBI_: try libsasl-modules-*, maybe libsasl-modules-plain[14:37:39] <FBI_> Bejgli:this have I already installed[14:39:54] <Bejgli> FBI_: http://postfix.wiki.xs4all.nl/index.php?title=Main_Page , check for the SASL section on that main page, there's a couple of links there pointing to howtos[14:40:31] <FBI_> ok thank you Bejgli[14:40:42] <jMCg> Fuck me harder ><[14:42:24] *** Jax has quit IRC[14:44:12] *** aozturk has joined #postfix[14:46:17] *** jelly-home has joined #postfix[14:50:29] <jelly-home> Hi, is localuser+foo@myhostname supposed not to work by default? my postconf -n: http://paste.debian.net/41619[14:51:59] <jelly-home> results in delivery via local: unknown user: "jelly+plustest"[14:52:11] <Mavvie> jelly: smtpd_authorized_verp_clients = $mynetworks[14:52:18] <Mavvie> maybe.[14:52:19] <jMCg> Okay... how can I reject all mails that are not for me? [mydestination, virtual_mailbox_domains and relay_domains]?[14:52:28] <Mavvie> could be wrong.[14:52:47] <Mavvie> "postconf | grep verp" is a good first step.[14:52:50] <jelly-home> Mavvie: thanks, I'll rftm for *verp* now that you've given me a clue.[14:58:28] *** Devyll has quit IRC[15:00:03] <jelly-home> Mavvie: fwiw, it was recipient_delimiter = + (defaults to none)[15:00:30] <Mavvie> aha[15:01:17] <Mavvie> strange that the string "verp" wasn't in it.[15:01:26] <Mavvie> anyway, back to bed.[15:02:31] <Edward123> cpm, Roobarb-Work, thanks for the tips guys[15:02:40] *** magyar has quit IRC[15:02:47] <Edward123> cpm, i'm not sure what kind of switch/router gear we have, these machines are all hosted at a datacentre, not internally[15:03:08] <cpm> ah[15:03:44] <cpm> so, it's just like jduggan implied.[15:04:39] <Edward123> ah[15:04:42] <Edward123> 4 hours is a long time[15:05:16] <Edward123> what are the consequences of arp data being wrong?[15:05:37] *** felix_da_catz has joined #postfix[15:07:30] <Roobarb-Work> Edward123: stuff stops working, normally[15:07:58] <Edward123> hrm[15:08:09] <Edward123> i might query my datacentre then[15:10:02] <Edward123> and if they do have big cache i might need to look at mac address sharing then by the sounds of it[15:10:43] <Roobarb-Work> /usr/lib/heartbeat/send_arp is what heartbeat uses to force a MAC update, I believe[15:16:38] *** hark has quit IRC[15:19:10] *** ramoni has joined #postfix[15:26:34] *** die_z has quit IRC[15:26:59] *** die_z has joined #postfix[15:28:32] <cpm> http://www.uinc.ru/articles/21/send_arp.c[15:28:54] <cpm> ooops, sorry[15:28:57] <cpm> http://linux.die.net/man/8/send_arp[15:32:21] *** solar_ant has joined #postfix[15:32:29] <jelly-home> I usually solve it by phoning the network guys and making them flush arp cache on relevant piece of equipment[15:33:35] <jelly-home> cpm: does that mean a switch would happily accept and cache an uncalled-for arp is-at response?[15:34:21] <Edward123> heh jelly-home that's not practical in a ip-failover situation[15:34:40] <jelly-home> ack[15:35:01] <Edward123> if not i'll potentially have to look into this mac address sharing stuff[15:35:04] <Edward123> sounds somewhat intimidating[15:40:14] *** xDie has joined #postfix[15:40:17] <xDie> hi all[15:40:22] <xDie> :)[15:42:59] <xDie> i have problem mails queues[15:43:17] <xDie> i have 2000- 5000 mails queues[15:43:34] <xDie> the general error is timed out[15:43:42] <xDie> whats wrong?[15:44:00] <xDie> my internet conexion is 512[15:44:57] <Edward123> perhaps a connection/firewall problem? can you telnet to port 110/143 of your mail server?[15:46:03] <xDie> yes[15:46:21] <xDie> works[15:46:26] *** zention has joined #postfix[15:46:38] <xDie> but have 2000- 5000 mails queues[15:46:41] <Edward123> can you authenticate etc?[15:46:45] <Edward123> do you host the mailserver yourself?[15:46:53] <xDie> yes it works[15:46:58] <xDie> mailserver[15:47:03] <xDie> yes[15:47:26] <xDie> is for 100 users[15:47:52] <xDie> mailserver works, but is slow for mail queues[15:48:05] <cpm> Edward123, mac-address 'sharing' = kludge.[15:48:11] <zention> I want to get the MDA of postfix to deliver to maildir style boxes but not in the user home directory is this achievable[15:48:21] <wdp> my mailserver is blocken 1 million mails per day[15:48:26] <cpm> might work though, probably will work.[15:48:28] <wdp> status=sent are only ~2000[15:48:36] <wdp> thats...[15:48:39] <wdp> curious[15:48:47] <f3ew> wdp sounds good[15:48:48] <zention> and is procmail a better solutions than the inbuilt mda of postfix?[15:48:51] <wdp> s/blocken/blocking[15:48:52] <xDie> wdp whats??[15:48:56] <xDie> only 2000?[15:49:02] <wdp> xDie, correct.[15:49:31] <xDie> :S[15:49:33] <wdp> xDie, only 'real' mail comes trough. it's an anti spam gateway.[15:50:06] *** cilly has joined #postfix[15:50:10] <xDie> 0_0[15:50:51] <wdp> thats how i looked when i saw the statistic ;)[15:50:57] <xDie> whats internet conexion have?[15:51:10] <wdp> 1 gbit/s[15:51:15] <xDie> 0_0[15:51:17] *** meandtheshell has quit IRC[15:51:40] <xDie> wait only 2000 mails delivered[15:51:43] <xDie> ?[15:52:08] <wdp> correct. 2000 mails delivered, from about 1 million 'incoming' per day.[15:52:34] <jelly-home> sounds about right, unfortunately[15:52:35] <xDie> i cant understand[15:53:11] <xDie> i have 2000 maisl queue per day, "conecction timed out"[15:53:17] <wdp> xDie, that means simply: Mailservers becoming very much spam these days. And only 2000 mails aren't spam.[15:53:20] <xDie> have 512kb[15:53:20] <cpm> yeah, I probably deliver around 5% of received email[15:53:32] <Edward123> hrm zention, i'm not too sure myself as i don't use procmail, but postfix appears to be fine for delivering mail into maildir boxes for users all inside a specified path (e.g. /var/mail/vhosts/)[15:53:33] <wdp> in my case.[15:53:38] <cpm> or rather delivery attempts, as most are rejected right off[15:53:57] *** mitziyahu has quit IRC[15:54:14] <jelly-home> if one didn't cut by RBL even before getting to DATA, one might get 99.8% spam[15:54:15] <xDie> wdp, but my mail queue is 50% spam[15:54:57] <zention> my word, when one delves into email it never ends[15:56:27] <wdp> xDie, so you need restrictions, or filter, to filter that before it goes into the queue.[15:56:50] <xDie> how?[15:57:04] <xDie> i have amavis, dspam, spamassassin, clam[15:57:14] <xDie> is my only filter[15:57:36] <wdp> xDie, look at postfix.org there are some anti uce howtos in the howtos section.[15:57:44] <wdp> xDie, also look for "restrictions"[15:58:04] <xDie> ok tnx!![15:58:07] <xDie> i will try[15:59:32] <wdp> jelly-home, 39,3% restrictions, 38,7% blacklists (dnsbl, rbl) and 22,0% blocked by greylisting[16:00:47] <jelly-home> wdp: so you block 100% of your mail? :-)[16:01:01] <wdp> jelly-home, thats a statistic how our spam is build.[16:01:28] *** GutterPunk has quit IRC[16:01:56] <jMCg> Would someone care to review the order of restrictions here, and if they make sense: http://dpaste.com/24356/ ?[16:01:57] <wdp> +compositioned?[16:02:07] <wdp> or mixed?[16:02:17] <zention> is smtpd_client_restrictions = reject_unknown_client refering to mail being received or mail to be sent from?[16:04:57] *** lunaphyte_ has joined #postfix[16:06:59] *** af_ has joined #postfix[16:07:11] <Edward123> zention, that is truely the case, it's a russian doll[16:10:03] *** diesel_ has joined #postfix[16:12:22] <wdp> jMCg, looks okay to me[16:12:36] <wdp> jMCg, i would add some other things near reject_invalid_hostname.[16:12:50] <jMCg> wdp: such as?[16:13:04] <wdp> reject_non_fqdn_sender,[16:13:04] <wdp> reject_non_fqdn_recipient,[16:13:39] <jMCg> wdp: if someone knew what fqdn was, I would do that, really.[16:13:50] <zention> Edward123: everytime I go to do something I start backpeddaling to other stuff[16:13:53] <Roobarb-Work> http://dpaste.com/24357/[16:13:56] <Roobarb-Work> jMCg: thats what we use[16:14:19] <zention> what woudl be nice is a good diagram that one could click on to get all the relevant stuff at each stage of the 'email process' in postfix[16:14:39] *** hark has joined #postfix[16:15:50] <zention> smtpd_recipient I think means the person sending the email thru postfix to another location[16:15:51] <wdp> Roobarb-Work, isn't reject_non_fqdn_hostname that causing problems with real hosts?[16:16:18] <Roobarb-Work> wdp: not that I've noticed in a year of use[16:16:24] <zention> if that is the case then smtpd_client is the message trying to delivered[16:16:51] <wdp> Roobarb-Work, i saw many hosts having a wrong hostname. so i thought rejecting invalid hostname would be enough. thats why i ask[16:17:21] <Roobarb-Work> wdp: ah, these are inbound-only relays[16:17:33] <zention> but I am not 100% sure so I am going to sort out the webserver and come back to this mystery :)[16:17:36] <Roobarb-Work> wdp: my internal clients talk to a different server for outbound mail[16:17:48] <wdp> Roobarb-Work, ah, ic. then it's okay.[16:20:45] *** diesel_ has quit IRC[16:21:23] *** diesel has quit IRC[16:22:58] *** meandtheshell has joined #postfix[16:24:03] *** Loady has joined #postfix[16:24:43] <Loady> hi. how can i customize the postfix smtp error messages? like 552 for instanc[16:24:46] <Loady> e[16:27:52] *** af_ has quit IRC[16:28:31] *** solar345 has joined #postfix[16:33:23] *** etank has joined #postfix[16:35:54] *** klauwhamer has quit IRC[16:36:08] *** klauwhamer has joined #postfix[16:38:28] *** Yourname` has quit IRC[16:41:55] *** UQlev has joined #postfix[16:43:15] *** pitakill has joined #postfix[16:44:51] *** solar_ant has quit IRC[16:52:04] *** j_s has joined #postfix[16:57:38] *** cutmasta has quit IRC[16:57:47] <jMCg> Roobarb-Work: my problem is, I "just" to reject everything that's none of my concern....[16:58:04] <Roobarb-Work> ?[16:58:38] <jMCg> Roobarb-Work: I don't want to be an open relay anymore ;)[16:58:56] <jMCg> [While disablign Authentication.....][16:58:59] <Roobarb-Work> reject_unauth_destination will do that[16:59:42] *** showtime has quit IRC[17:00:55] <jMCg> Hm. Indeed.[17:01:12] <rob0> It's not easy to become an open relay. How did you do it?[17:02:24] *** duki has joined #postfix[17:03:19] <jMCg> rob0: I'm not really an open relay... due to firewall restrictions... -- anyways.. I disabled one check after the other, because people weren't dealing with it....[17:03:26] *** duki has quit IRC[17:03:29] <jMCg> http://dpaste.com/24360/ <<< Does this look better now?[17:03:44] *** showtime has joined #postfix[17:04:08] *** kreg_lt has quit IRC[17:04:57] *** cilly has quit IRC[17:06:31] <jMCg> bah... that's bullshit... I cannot put a reject in the end.... that's insane.[17:09:20] *** Thurisaz has quit IRC[17:12:13] <jMCg> I'm gonna need some more tea.[17:13:48] *** showtime has quit IRC[17:15:43] *** showtime has joined #postfix[17:16:17] *** x-ip has quit IRC[17:16:31] <felix_da_catz> So how do people view the practice of greylisting in general? Does it work? Is it accepted as a legitimate way to prevent spam?[17:19:20] <Dominian> yes[17:19:22] <Dominian> and yes[17:19:24] <Dominian> ;)[17:19:25] <ramoni> felix_da_catz: I think not. Most spammers deal with temp fails[17:19:33] <Dominian> ramoni: wrong[17:19:45] <Dominian> Greylisting cut the spam coming into my box by 60%[17:19:54] <Dominian> most spam emails come from hijacked botnets and they don't usually retry[17:19:58] <Roobarb-Work> Greylisting is a tool, not a soultion[17:20:03] <Dominian> Roobarb-Work: exactly[17:20:06] <ramoni> Dominian: I see most spammers here are even trying the others MX when a temp fail[17:20:11] <Dominian> it is a way to help drop the amount of spam.. not remove it entriely[17:20:17] <Dominian> ramoni: I have one MX[17:20:28] <Dominian> ramoni: and even if I had multiple.. it would still do greylisting[17:20:40] * Roobarb-Work doesn't so greylisting,[17:20:42] <Roobarb-Work> *do[17:21:28] <ramoni> Dominian: well, that's what I feel here. most of them try again.[17:22:30] <Dominian> its quite effective for what it was meant to do.[17:22:51] <Dominian> I grey list.. if they get passed that then they hit the RBL checks.. if they get passed that.. then they beterr be able to get passed spamassassin[17:23:32] *** ftp3 has joined #postfix[17:23:55] <ftp3> hi.. when i go to check my email, it says the certificate is expired.. where do I find the certificate file?[17:24:26] <ramoni> Dominian: I was using rbls before the greylisting here. In fact, greylisting was after all mta checks here, spf, dnsbls etc[17:24:35] * Dominian nods[17:24:41] <Dominian> we all have our own methods that work for us :)[17:24:50] <Dominian> whichis why we use postfix.. because we have lots of options[17:24:57] *** sh0wt1me has joined #postfix[17:25:01] <ramoni> Dominian: :)[17:25:15] *** lunaphyte_ has quit IRC[17:25:54] *** ftp3 has left #postfix[17:26:01] *** sh0wt1me has quit IRC[17:26:02] <Edward123> and your secret postfix schema, Dominian, heh[17:26:52] <ramoni> Dominian: do you use reject_unknown_helo_hostname ?[17:27:49] *** VITIHO_ has joined #postfix[17:28:24] <rob0> I wouldn't consider that safe. But reject_non_fqdn_helo_hostname and reject_invalid_helo_hostname are good, and safe.[17:29:15] <ramoni> rob0: yes... I can't use reject_unknown_helo_hostname here... great part of email server on the Internet don't know RFCs...[17:29:24] <ramoni> but it should be safe to use.[17:30:41] <Dominian> ramoni: yes[17:30:48] <Dominian> er..[17:30:50] <Dominian> what rob0 said[17:32:10] <ramoni> the client host should identify himself with a valid (and resolvable) hostname, if not, with his [IP]. So, we all should use reject_unknown_helo_hostname enforcing rfc compliance[17:32:16] *** baggles has left #postfix[17:32:19] *** sepski has joined #postfix[17:33:58] *** prebur has joined #postfix[17:36:00] <rob0> I actually don't use the reject_*_helo_hostname features; I encompass them all into a check_helo_access pcre: lookup. "!/[[alpha]]/ Reject [message]"[17:36:15] * cpm never rejects rob0[17:36:39] <rob0> That also gets HELO [ip.add.re.ss], which is valid, but really only for a MUA.[17:36:40] * mwalling neither[17:36:42] <felix_da_catz> Thanks guys. I appreciate the feedback,[17:37:10] <felix_da_catz> I know that some methods of spam prevention are sometimes considered spam themselves. So I just dont' want to do anything that is going to make the problem worse.[17:37:17] <rob0> I find that a lot of zombies use HELO [ip.add.re.ss].[17:37:43] <mofino> ZOMBIES!!![17:38:33] <felix_da_catz> The mafias that control those bot nets sometimes have shifts between ownership on a daily basis. You would think that a few companies that are severely affected by the spam could hire a couple of guys to track down the bot nets and take them over themselves.[17:38:51] *** showtime has quit IRC[17:39:31] <felix_da_catz> Or you would think that the ISP's would be able to tell people that their machines are infected. Something atleast.[17:39:32] *** cxk12 has joined #postfix[17:39:40] *** cappiz has joined #postfix[17:39:53] <mofino> not the ISP's responsibility[17:40:09] <mofino> it might be in their interest if they are a spam emitter[17:40:19] <mofino> but they can simply apply outbound port 25 filters[17:40:36] <cappiz> i try to send mail to a person and i get a message back from postmaster@relay, is it a problem at my server or the person im trying to sent to?[17:40:46] <wdp> Note 1: this feature is enabled by default. If disabled, users will not be able to send mail to "user@partialdomainname" but will have to specify full domain names instead.[17:40:48] <mofino> cappiz, read the message[17:40:49] <cappiz> it works to send mail to other ppl.[17:40:52] <wdp> isn't that a good thing?[17:40:57] *** cxk12 has quit IRC[17:40:58] <wdp> i mean to disable that?[17:41:09] <mofino> wdp, yes, can be[17:41:24] *** FBI_ has quit IRC[17:41:25] <mofino> if you don't require that configuration, it's safe to disable[17:41:29] <cappiz> mofino, Delivery Status Notification (Failure) -> This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. <address>[17:41:39] <mofino> cappiz, i don't care[17:41:50] <cappiz> it says i got it from his server[17:41:54] <mofino> cappiz, i know what DSNs are[17:42:00] <wdp> mofino, well.. what means "if you don't require" are there ppl arround the world sending mails without .tld?[17:42:04] *** _FBI has joined #postfix[17:42:07] <mofino> cappiz, so why are you bothering us?[17:42:16] <mofino> wdp, they don't[17:42:17] <rob0> felix_da_catz: Try explaining email and botnets to a suit. It can't be done. Also, there would be potential criminal liability for trying to take over a botnet.[17:42:22] <cappiz> cause i lik to make ppl angry for no reason, like you[17:42:30] <mofino> cappiz, who said i was angry?[17:42:33] <wdp> mofino, so normally, it's safe to disable, except you're playing arround in intranet?[17:42:39] <cappiz> you said it.[17:42:42] <mofino> wdp, pretty much[17:42:47] <wdp> ty.[17:42:50] <mofino> cappiz, please stop being retarded, thanks.[17:43:01] <cappiz> looks like i cant do that[17:43:02] <_FBI> Bejgli: a u live?[17:44:07] *** sepski has quit IRC[17:46:33] <_FBI> could somebody help with some error:?[17:46:36] <_FBI> warning: SASL authentication failure: no secret in database[17:46:43] *** Schmidt_ is now known as Schmidt[17:47:15] *** lunaphyte_ has joined #postfix[17:50:19] *** _FBI has quit IRC[17:52:06] *** w0rd54 has quit IRC[17:53:48] *** _FBI has joined #postfix[17:56:37] *** solar345 has quit IRC[17:56:39] *** Busta-1 has joined #postfix[17:57:59] *** tmjb has quit IRC[17:58:38] <Busta-1> hello, for some reason my SMTP server will not accept my username and pw[17:58:57] <Busta-1> anyone have trouble authenticating?[17:59:35] *** lunaphyte_ has quit IRC[17:59:42] <_FBI> I have[18:00:58] *** rcsu has joined #postfix[18:02:39] *** w0rd54 has joined #postfix[18:03:57] *** shinao1 has joined #postfix[18:05:31] <Busta-1> _FBI: what did you to solve the issue?[18:05:51] *** aozturk has quit IRC[18:06:29] *** lunaphyte_ has joined #postfix[18:06:44] *** cappiz has quit IRC[18:07:26] <_FBI> Busta-1: issue can be not one[18:07:43] *** JeanLuc_ has joined #postfix[18:09:08] <Busta-1> _FBI: did you follow any trouble shooting tutorial?[18:09:18] <JeanLuc_> hi. I've a small problem. I've changed the hostname of my server, but the postfix MAILER-DAEMON sends the mails with the old hostname, MAILER-DAEMON at blackjackundnutten dot info. Where can I change this value?[18:10:08] *** jeward_ has joined #postfix[18:10:25] <rob0> JeanLuc_: Maybe those bounces were generated before the change. Why so many bounces? *That* is the problem you should address.[18:10:35] <jeward_> Hi, I'm getting a log message I don't understand: Nov 6 06:26:05 j5 postfix/smtpd[32105]: fatal: non-null host address bits in "8[18:10:35] <jeward_> .6.4.0/16", perhaps you should use "8.6.0.0/16" instead[18:10:40] *** aozturk has joined #postfix[18:10:41] <_FBI> Busta-1: no, first look in the log files[18:11:12] <rob0> jeward_: What is not clear about that error?[18:11:15] <JeanLuc_> no the bounce was after the change. and it was only onebounce because i mistyped the adress ;)[18:11:15] <Busta-1> yeah[18:11:34] <rob0> JeanLuc_: Probably myorigin[18:11:46] <rob0> !tell JeanLuc_ myorigin[18:11:49] <jeward_> rob0: I don't understand how to limit the incoming SMTP connections other than the way I did it.[18:12:04] <jeward_> rob0: Admittedly, I'm a newb.[18:12:09] *** die_z has quit IRC[18:12:12] *** shinao1 has quit IRC[18:12:18] *** kombi has joined #postfix[18:12:51] <JeanLuc_> ok, thanks rob0, I'll try this[18:12:57] <jeward_> rob0: If I want to limit incoming addresses to 4 servers on that subnet, how do I do it with .0.0?[18:13:08] <rob0> 8.6.4.0/16 is not a valid CIDR netblock. 8.6.0.0/16 would contain 8.6.4.0 .[18:13:44] <rob0> jeward_: wikipedia and Google can explain CIDR addressing to you.[18:13:45] *** hooch has quit IRC[18:13:50] *** khris has quit IRC[18:13:51] *** hooch has joined #postfix[18:14:16] <jeward_> Okay, I thought I understood it. Thanks![18:14:28] <kombi> when qshape incoming active deferred gives me some 1500, are those messages sent or received by me?[18:14:29] *** cilly has joined #postfix[18:15:50] <kombi> or in other words, when doing postsuper -d ALL deferred, what exactly will I get rid off?[18:19:21] *** jeward_ has quit IRC[18:22:23] <Busta-1> _FBI: i see my problem[18:23:01] *** githogori has joined #postfix[18:23:21] *** Schmidt_ has joined #postfix[18:27:54] <Busta-1> Nov 6 17:05:24 gogreensolar postfix/smtpd[15505]: connect from 24-205-168-7.dhcp.wsco.ca.charter.com[24.205.168.7][18:27:54] <Busta-1> Nov 6 17:05:24 gogreensolar postfix/smtpd[15505]: warning: SASL authentication failure: cannot connect to saslauthd server: No such file or directory[18:27:54] <Busta-1> Nov 6 17:05:24 gogreensolar postfix/smtpd[15505]: warning: 24-205-168-7.dhcp.wsco.ca.charter.com[24.205.168.7]: SASL LOGIN authentication failed: generic f$[18:27:54] <Busta-1> Nov 6 17:05:24 gogreensolar postfix/smtpd[15505]: disconnect from 24-205-168-7.dhcp.wsco.ca.charter.com[24.205.168.7][18:28:06] <Busta-1> hrm[18:28:24] *** Schmidt__ has joined #postfix[18:29:50] *** harobed has quit IRC[18:33:25] <felix_da_catz> So anyone else in here run RHEL 5?[18:33:25] *** Schmidt_1 has joined #postfix[18:34:53] *** Schmidt has quit IRC[18:35:24] <_FBI> Busta-1: is the saslauthd running?[18:36:59] <Busta-1> _FBI: when i do ps axu, i dont see it running in the list[18:37:42] <Busta-1> _FBI: i dont see a PID for it[18:38:38] <_FBI> Busta-1: ps aux|grep auxprop_plugin: sasldb[18:38:39] <_FBI> saslauthd_path: /var/spool/postfix/var/run/saslauthd/mux[18:38:39] <_FBI> mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5[18:38:58] <_FBI> Busta-1: sorry[18:39:02] *** Busta-1 has left #postfix[18:39:25] *** stony has joined #postfix[18:39:26] *** _FBI has quit IRC[18:39:31] *** Schmidt_1 is now known as Schmidt[18:39:55] <stony> hi[18:40:24] *** Busta-1 has joined #postfix[18:40:27] <Busta-1> err[18:40:35] <Busta-1> damn router[18:40:40] *** unixipher_ has joined #postfix[18:40:57] <Busta-1> root@gogreensolar:~# /etc/init.d/saslauthd restart[18:40:57] <Busta-1> * Restarting SASL Authentication Daemon saslauthd [ OK ][18:41:03] <Busta-1> so its installed for sure[18:41:16] *** Schmidt_ has quit IRC[18:43:39] *** unixipher_ has quit IRC[18:44:02] *** x-ip has joined #postfix[18:46:53] *** Schmidt__ has quit IRC[18:49:32] *** vr has quit IRC[18:49:32] *** hal1on has quit IRC[18:49:32] *** Kamping_Kaiser has quit IRC[18:49:33] *** kimmey2k3 has quit IRC[18:49:33] *** dmnd has quit IRC[18:49:34] *** Bejgli has quit IRC[18:49:34] *** memic has quit IRC[18:49:34] *** sysmonk has quit IRC[18:49:35] *** hark has quit IRC[18:49:36] *** PierreTramo has quit IRC[18:49:36] *** Zerberus has quit IRC[18:49:37] *** bisoc has quit IRC[18:49:37] *** twuHB has quit IRC[18:49:38] *** mXr has quit IRC[18:49:39] *** steevel_ has quit IRC[18:49:39] *** poptix has quit IRC[18:49:39] *** xored has quit IRC[18:49:41] *** rcsu has quit IRC[18:49:41] *** meandtheshell has quit IRC[18:49:41] *** wdp has quit IRC[18:49:42] *** Edward123 has quit IRC[18:49:42] *** Zeit|idle has quit IRC[18:49:42] *** rmayorga has quit IRC[18:49:43] *** Gek_ has quit IRC[18:49:44] *** keanne has quit IRC[18:49:45] *** jelly has quit IRC[18:49:45] *** emo_ninja has quit IRC[18:49:45] *** jpalmer has quit IRC[18:49:45] *** sep has quit IRC[18:49:46] *** Stijn has quit IRC[18:49:47] *** dec has quit IRC[18:49:47] *** mathez has quit IRC[18:49:48] *** AllenJB has quit IRC[18:49:48] *** k31th has quit IRC[18:50:18] *** hark has joined #postfix[18:50:18] *** Zerberus has joined #postfix[18:50:18] *** PierreTramo has joined #postfix[18:50:18] *** xored has joined #postfix[18:50:18] *** twuHB has joined #postfix[18:50:18] *** mXr has joined #postfix[18:50:18] *** steevel_ has joined #postfix[18:50:18] *** bisoc has joined #postfix[18:50:18] *** poptix has joined #postfix[18:50:20] *** k31th has joined #postfix[18:50:20] *** AllenJB has joined #postfix[18:50:21] *** mathez has joined #postfix[18:50:21] *** dec has joined #postfix[18:50:21] *** sep has joined #postfix[18:50:21] *** jpalmer has joined #postfix[18:50:21] *** jelly has joined #postfix[18:50:21] *** emo_ninja has joined #postfix[18:50:21] *** Stijn has joined #postfix[18:50:21] *** keanne has joined #postfix[18:50:21] *** Gek_ has joined #postfix[18:50:21] *** rmayorga has joined #postfix[18:50:21] *** Zeit|idle has joined #postfix[18:50:21] *** Edward123 has joined #postfix[18:50:21] *** wdp has joined #postfix[18:50:21] *** meandtheshell has joined #postfix[18:50:21] *** rcsu has joined #postfix[18:50:21] *** vr has joined #postfix[18:50:21] *** sysmonk has joined #postfix[18:50:21] *** memic has joined #postfix[18:50:21] *** Bejgli has joined #postfix[18:50:22] *** dmnd has joined #postfix[18:50:22] *** kimmey2k3 has joined #postfix[18:50:22] *** hal1on has joined #postfix[18:50:22] *** Kamping_Kaiser has joined #postfix[18:50:22] *** havvg has quit IRC[18:50:33] *** brancaleone has quit IRC[18:53:16] *** unixcoder has quit IRC[18:53:17] *** githogori has quit IRC[18:53:18] *** githogori has joined #postfix[18:53:29] *** hacim has quit IRC[18:53:32] *** hacim has joined #postfix[18:53:48] *** githogori has quit IRC[18:54:01] *** githogori has joined #postfix[18:55:11] *** cilly has quit IRC[18:57:03] <roe_> is there documentation on caching verify?[18:59:26] <kombi> can't get amavis to log... what owner / file permissions does you guys /var/log/amavis.log have?[19:00:18] *** hooch has quit IRC[19:01:10] *** hooch has joined #postfix[19:03:38] <rob0> roe_, maybe verify.8.html ("man verify") and/or ADDRESS_VERIFICATION_README.html[19:04:05] *** |DeuS| has quit IRC[19:05:15] <cpm> pretty quiet today there rob0[19:05:20] <rob0> kombi: You need to understand basic Unix, how permissions/ownership works. Your amavis user won't have write privileges in /var/log. Put your log somewhere that the amavis user can write (and symlink into /var/log if desired.)[19:05:46] <kombi> thanks rob[19:06:16] *** madclicker has joined #postfix[19:07:12] <kombi> rob: would you also know how to decrease postfix' verbosity in syslog? no -v in master.cf, still a thousand lines per second..[19:10:15] *** prebur has quit IRC[19:12:26] <kombi> rob: besides, user amavis can access /var/log/amavisd.log just fine.. still no output in there[19:14:11] <Busta-1> errr[19:14:28] <Busta-1> auth is running, although the log keeps saying cannot find auth[19:14:33] <Busta-1> anyone know why[19:15:43] *** benp- is now known as bdp[19:15:49] *** bdp is now known as benp-[19:15:53] <Busta-1> Nov 6 17:57:50 gogreensolar postfix/smtpd[18244]: warning: SASL authentication failure: cannot connect to saslauthd server: No such file or directory[19:16:08] <Busta-1> why does it say that, even when the server is running[19:16:48] <Busta-1> when i telnet localhost 25[19:17:01] <Busta-1> and do an EHLO i see:[19:17:03] <Busta-1> 250-AUTH LOGIN PLAIN[19:17:03] <Busta-1> 250-AUTH=LOGIN PLAIN[19:18:02] <sysmonk> Busta-1: it can't find saslauthd socket?[19:18:30] <sysmonk> you do specify which mechanisms are available in smtpd.conf, so it doesn't depend on if saslauthd is runing or not, or am i wrong?[19:19:23] *** kombi has quit IRC[19:19:40] *** prebur has joined #postfix[19:21:10] <Busta-1> i looked in there[19:21:14] <Busta-1> there is only one line[19:21:43] <sysmonk> pwcheck_method: saslauthd ? :)[19:21:54] <Busta-1> yep[19:21:59] <Busta-1> is that right?[19:22:14] <sysmonk> anyway, try testsaslauthd or something like that[19:22:27] <sysmonk> and look for problems[19:22:35] <sysmonk> maybe saslauthd is runing, but the socket is gone[19:22:45] <sysmonk> or maybe postfix is chrooted, and it can't access the socket[19:24:36] <Busta-1> 0: OK "Success." << when i did testsaslauthd -user -pass[19:24:43] <Busta-1> interesting[19:26:35] <Busta-1> arrrg[19:26:41] <Busta-1> this is annoying[19:26:53] <sysmonk> 10$ and we'll fix it! :P[19:27:01] <Busta-1> i just want to send a damn email[19:27:05] <Dominian> 10?[19:27:06] <Dominian> pfft[19:27:11] <Dominian> I charge 100 bucks an hour ;P[19:27:15] <Dominian> 30mins min.[19:27:19] <sysmonk> Dominian: ;P[19:27:21] <Busta-1> wow[19:27:30] <sysmonk> Dominian: i think this work is less than 5 minutes :))[19:27:37] <sysmonk> Dominian: and my charging depends on who i work with[19:27:56] <sysmonk> i can't charge the same from people from usa, as i charge from people in my country[19:27:59] <sysmonk> err, the other way around[19:28:01] *** cilly has joined #postfix[19:28:02] <Busta-1> im a nice guy[19:28:11] <sysmonk> Busta-1: we're nice too! :)[19:28:15] <Busta-1> lol[19:28:45] <Dominian> :)[19:29:06] <Dominian> with the price of the dollar going down... I guess I"m charing 150 an hour[19:29:09] <Dominian> eh.. oh well[19:29:20] <Busta-1> Task 'mail.gogreensolar.com - Sending' reported error (0x800CCC92) : 'Your e-mail server rejected your login. Verify your user name and password in your account properties. Under Tools, click E-mail accounts.'[19:29:33] <Busta-1> Yeah dollar is going down the tubes =([19:29:42] <Dominian> Busta-1: give it time[19:29:45] <Busta-1> outsourcing becomming more expesive =(([19:29:45] <Dominian> It will rise again[19:29:57] <jelly-home> optimist.[19:30:02] <Busta-1> As long as the Feds dont have their heads shoved up their asses[19:30:17] <Busta-1> and we get out of this war[19:30:42] <Busta-1> we are printing money like its play money because of this war[19:30:52] <Dominian> yeah[19:31:06] <Dominian> What I don't get.. is that they have enough support to impeach the president.. but they won't[19:31:07] <x-ip> why if i have at smtpd_client_restrictions check_sender_access and check_sender_access has domain.tld FILTER smtp:other.host.tld:otherport i keep getting emails to domain.tld in the queue ? it has to be a special port because port 25 from other.host.tld its closed.[19:31:10] <Dominian> figures[19:31:28] *** brandon__ has joined #postfix[19:31:35] <Dominian> x-ip: are they stuck in the queue?[19:31:44] <x-ip> ou, and the messages stay in queue for a connection time out (they try to go to 25 port instead the special port)[19:32:15] <x-ip> Dominian, i dont know what means stuck ... let me use google translator[19:32:28] <Busta-1> Dominain: yeah they have enough support, although people in congress are scared that if impeachment gets closer, the president will attack the country again, using a terrorist attack and call martial law on the country[19:32:47] <Busta-1> and cancel the 08 elections[19:32:54] <Dominian> hah[19:32:58] <Dominian> Busta-1: I doubt that would happen[19:33:12] <x-ip> Dominian, yes, they are 'stuck' at the queue[19:33:47] <Busta-1> Dominian: well that is the reason why he hasnt been impeached yet, because of that fear, for some reason congress has that fear[19:34:07] <Busta-1> Dominain: congress memebers have openly talked about that[19:34:40] <x-ip> an ex from mailq: delivery temporarily suspended: connect to other.host.tld[10.20.30.50]: Connection timed out)[19:34:47] <Busta-1> anyways, enough rating, brb[19:41:57] *** wdp has quit IRC[19:43:34] *** hparker has joined #postfix[19:46:23] * jMCg fixed up his postfix... 'twas a network related error ......[19:47:15] *** havvg has joined #postfix[19:49:11] *** x-spec-t has quit IRC[19:49:35] *** dembug is now known as Azio[19:49:40] *** Azio is now known as dembug[19:50:39] *** pitakill_ has joined #postfix[19:54:20] *** Spec has joined #postfix[19:56:19] *** khris has joined #postfix[19:57:15] <zention> is the inbuilt postfix mda very flexible?[19:57:26] <zention> is it documented?[19:59:05] <zention> should I really be looking at procmail integration?[19:59:22] <rob0> Which mda? And yes, local.8.html or virtual.8.html[19:59:56] <zention> thanks[20:00:59] <rob0> One feature which dramatically improves the flexibility and power of local(8):[20:01:07] <rob0> !recipient_delimiter[20:01:07] <knoba> rob0: "recipient_delimiter" : a configuration parameter in the main.cf: The separator between user names and address extensions (user+foo). See canonical(5), local(8), relocated(5) and virtual(5) for the effects this has on aliases, canonical, virtual, relocated and on .forward file lookups. Basically, the software tries user+foo and .forward+foo before trying user and .forward.[20:01:44] <rob0> good bot[20:02:23] *** prebur has quit IRC[20:04:03] *** x-ip has quit IRC[20:04:56] *** fernando has joined #postfix[20:05:00] <zention> ok well what I want to do is deliver mail to a separate partition in the maildir format[20:05:37] <zention> as soon as I switch on maildir it delivers to the user's home directory[20:05:50] *** prebur has joined #postfix[20:05:52] *** aozturk has quit IRC[20:05:59] <fernando> hi all. Can I use lookup table for all main.cf parameters?[20:06:54] *** Lunar_Lamp has joined #postfix[20:07:41] *** pitakill_ has quit IRC[20:08:25] <rob0> !mail_spool_directory[20:08:26] <knoba> rob0: "mail_spool_directory" : a configuration parameter in the main.cf: The directory where local(8) UNIX-style mailboxes are kept. The default setting depends on the system type. Specify a name ending in / for maildir-style delivery.[20:08:32] <rob0> zention: ^^[20:09:09] <rob0> if you're not keeping maildirs under $HOME, you have to have a world-writeable (mode 1777) mail_spool_directory[20:09:39] <rob0> or maybe try group permissions[20:09:56] <rob0> I prefer home_mailbox for maildir.[20:15:39] <roe_> can postfix relay using authenticated smtp?[20:15:52] <roe_> TLS and whatnot[20:16:51] *** Luxor2 has joined #postfix[20:19:23] <zention> rob0: thanks I have just sort of worked it out[20:19:43] <zention> the user creates the maildir not postfix[20:19:50] *** Ryushin has joined #postfix[20:20:36] <zention> I am using msmtp on a local machine behind a nat when mail bounces from the remote server where does it go?[20:21:17] *** unixcoder has joined #postfix[20:21:59] <havvg> i set up postfix with this tutorial: http://workaround.org/articles/ispmail-sarge/index.shtml.en#authsmtp[20:22:09] <havvg> so far i got a problem with this smtp auth using mysql[20:22:54] <havvg> the error log tells me "Nov 6 20:14:07 v29340 postfix/smtpd[32733]: warning: connect to mysql server 127.0.0.1: Access denied for user 'UNKNOWN_USER'@'localhost' (using password: YES)" but the user, set in the /etc/postfix/sasl/smtpd.conf is "postfix"[20:23:04] <havvg> anyone can help?[20:24:18] <havvg> http://nopaste.megacomplex.de/index.php?id=7cfb728433[20:24:19] <unixcoder> did u GRANT priv for the user you use?[20:24:25] <havvg> yes[20:24:36] <havvg> postfix itself is using the database correctly[20:25:07] <havvg> imap is working (with courier) using the same database user and database[20:26:02] <unixcoder> and the cf for mysql it's setup correct?[20:26:22] <zention> hmm now I have added the user to the mail group but it still complains it cannot make the directory[20:26:32] <havvg> think so, the entire database is working except this smtp auth[20:26:36] <zention> does maildir have to be setup beforehand[20:27:01] <havvg> (and all other databases on the mysql server)[20:27:02] <zention> ie do I have to make all the directories if I wish to use maildir[20:27:55] <unixcoder> zention, postfix automatically create the maildir ..[20:28:14] <unixcoder> just send a mail to that user .. if u have the corect perm it will create it.[20:28:23] <zention> unixcoder: yeah it looks like it is trying but the uid has now got perms to do this[20:29:07] *** amrit|zzz is now known as amrit|wrk[20:29:08] <zention> unixcoder: but it does mention the GID as well which is the users gid but...[20:29:16] *** havvg has quit IRC[20:29:41] <zention> unixcoder: I am not doing this in the users directory I am doing it in another location[20:30:11] <unixcoder> try with postfix:postfix depending on your main.cf[20:30:12] <zention> unixcoder: I will give it a hand and make the top level directory and assign the user ownership and rwx[20:30:44] *** x-ip has joined #postfix[20:31:29] <zention> yeah it needed a hand[20:32:07] <unixcoder> no hands needed just figure out what is wrong and corect it :P[20:32:18] <zention> it cannot make the top level directory[20:32:30] <zention> it does the rest but needs intervention at that point[20:33:00] <unixcoder> top level like ex: /home/%u ?[20:33:08] <zention> no I am not in /home[20:33:15] <zention> I have a mail partition[20:33:16] <unixcoder> it's just a example[20:33:18] <unixcoder> :)[20:33:30] <zention> but yes sort of the samething really[20:33:43] <unixcoder> well yes that it won't do :)[20:33:56] *** JeanLuc_ has quit IRC[20:34:12] <zention> it does it for mbox though[20:34:48] *** havvg has joined #postfix[20:35:09] <zention> but I suppose that is just a file[20:35:22] <zention> maybe it uses a higher priv for it[20:41:38] *** cilly has quit IRC[20:41:44] <zention> oh no there is a dovecot lda as well[20:42:53] *** cilly has joined #postfix[20:43:17] <zention> I will just ignore that[20:43:42] *** higuita has joined #postfix[20:50:33] <Lunar_Lamp> I'm getting 554 errors on my mail server with "Relay access denied (in reply to RCPT TO command)". What information do I need to diagnose this? My fqdn and rdns match correctly, which were my first instincts. I'm not the person who set up this mail server, and am not too experienced with them, so am unsure how to check for what is the problem (I can telnet into localhost and send mail on the server fine)[20:51:04] *** duki has joined #postfix[20:51:49] <Lunar_Lamp> My postconf -n is http://pastebin.ca/763827[20:52:59] <unixcoder> whereis mynetworks ?[20:53:12] *** brandon__ has quit IRC[20:53:13] <Lunar_Lamp> unixcoder, was that directed to me?[20:53:14] *** vice-versa has joined #postfix[20:53:18] <unixcoder> yes[20:53:24] <sysmonk> unixcoder: if it's not in postconf -n - then it's the default one[20:53:33] <Lunar_Lamp> You're saying I'm missing a "mynetworks" directive?[20:53:48] <sysmonk> Lunar_Lamp: are you emailing via this server? or to this server?[20:53:54] <unixcoder> sysmonk, the default it's just 127.*[20:54:07] <unixcoder> if i recall[20:54:10] <sysmonk> unixcoder: sure, but he has permit_sasl_authenticated, so the default may be allright[20:54:17] <Lunar_Lamp> sysmonk, this is the mail server itself, i.e. where mails are sent to. When I try to send mails to it they get bounced due to 554 relay error.[20:54:25] <shasta> Lunar_Lamp, smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination; that means: unless client connection comes from $mynetworks, or he authenticated via sasl, reject any mails that we're not relaying to[20:54:59] <xDie> hey[20:55:04] <Lunar_Lamp> shasta, ah, ok, so if I remove the "reject_unauth_destination" it should work? And if that works, I can work out how to make it more secure?[20:55:11] <shasta> DON'T[20:55:16] <Lunar_Lamp> lol, ok[20:55:22] <sysmonk> :P[20:55:27] <shasta> because you'll make yourself an open relay[20:55:29] <sysmonk> DO IT DO IT!!! and tell us your ip :PPPP[20:55:41] <unixcoder> it will be open relay : lots of spam :))[20:55:42] <sysmonk> ah, damn, why did you tell him :([20:55:45] <Lunar_Lamp> Ahem, yes, I hadn't thought of that :-([20:55:48] * cpm needs lots of open relays[20:56:08] * cpm sends all his spam to sysmonk via open relays[20:56:15] *** pitakill has quit IRC[20:56:17] <shasta> cpm, 10.0.0.0/8 is full of open relays[20:56:21] *** kombi has joined #postfix[20:56:22] <cpm> gee, thanks![20:56:40] <sysmonk> cpm: nice try[20:57:01] <shasta> Lunar_Lamp, the proper answer: authenticate via SASL to send emails[20:57:05] * sysmonk sets up cpm's sieve/forwarding/whatever to send all mails marked as spam to | lpr[20:57:28] * cpm adds link from /dev/lpr to /dev/rob0[20:57:39] <rob0> hey[20:57:50] <unixcoder> :))[20:57:58] * cpm hides down in /proc[20:58:06] <Lunar_Lamp> shasta, erm, I want anyone to be able to send me mails to the addresses that the server has...[20:58:08] <shasta> /dev/lp0, you meant (-:[20:58:10] * sysmonk unmount's procfs[20:58:17] <sysmonk> R.I.P cpm ... :([20:58:20] <rob0> Actually if you remove reject_unauth_destination from smtpd_recipient_restrictions, Postfix will refuse all mail.[20:58:30] <kombi> can't get amavis to write to log, tried everything in the .conf, what might I be missing?[20:58:44] <sysmonk> kombi: maybe an syslog entry ? :)[20:58:56] <roe_> I have mailserver A on a dynamic block that needs to forward all mail to mailserver B, without just adding mailserver A's subnet to "mynetworks" any thoughts on how to achieve said setup?[20:59:02] <kombi> sysmonk: good point, but that's in there..[20:59:34] <sysmonk> kombi: what's in there?[21:00:11] <sysmonk> roe_: sasl ?[21:01:06] <kombi> sysmonk: http://pastebin.se/48949[21:01:34] <roe_> sysmonk, ok, I have no idea how to implement sasl in such a way.[21:01:55] <sysmonk> kombi: uh, and is /var/log/ writable by amavisd user ?[21:02:06] <roe_> and what auth mechanism would I use? isn't sasl just a secure transport method?[21:02:09] <Lunar_Lamp> <shasta> Lunar_Lamp, the proper answer: authenticate via SASL to send emails <== I am not sure if I explained myself properly. Apologies. The postfix is set up to provide mail for the domain it is on, that is, when I try to email user at mydomain dot com I get 554 errors. I want normal users to be able to email user at domain dot com without getting 554 errors[21:02:19] <sysmonk> roe_:[21:02:20] <sysmonk> !sasl[21:02:20] <knoba> sysmonk: "sasl" : short for "Simple Authentication and Security Layer". It is provided by the cyrus mail server to enable the "SMTP AUTH" feature. Learn more at: http://asg.web.cmu.edu/sasl/[21:02:41] <kombi> sysmonk: absolutely! su'ed to amavis and wrote stuff in it..[21:03:33] <rob0> Lunar_Lamp: "Relay access denied" means that the client is not allowed to relay (AUTH or in $mynetworks), and the destination domain IS NOT RECOGNIZED as one of yours.[21:03:56] *** ramoni has quit IRC[21:04:13] <Lunar_Lamp> rob0, ok, so how would I fix that? I'm sorry for being somewhat needy here - I'm not very familiar with mail servers.[21:04:42] <shasta> Connected to mail.planetarion.com.[21:04:47] <shasta> [...][21:04:50] <shasta> MAIL FROM:<shasta+irc at toxcorp dot com>[21:04:51] <shasta> 250 Ok[21:04:51] <shasta> RCPT TO:<root at planetarion dot com>[21:04:51] <shasta> 250 Ok[21:04:52] <sysmonk> kombi: want to try to use the default $log_templ ?[21:05:51] *** VITIHO_ has quit IRC[21:06:27] <kombi> sysmonk: that determines the strings, no?[21:06:59] <unixcoder> Lunar_Lamp, just put then to auth to send mail.. or if it's inside u'r LAN just add the class to mynetworks..[21:07:02] <roe_> I have read about sasl and am using sasl with TLS for per user auth to pam which links to ldap, blah blah blah, but nowhere that I can find is there a method or variable to set (in main.cf) to tell relayhost to use sasl[21:07:31] <sysmonk> kombi: yes, just to be sure, try to comment it out and use the default[21:07:46] *** ffed has joined #postfix[21:07:47] <kombi> I'll try[21:08:17] <sysmonk> !google[21:08:18] <knoba> sysmonk: Error: "google" is not a valid command.[21:08:19] <rob0> Lunar_Lamp needs to tell what the problem is without munging. As shasta just showed, his server seems to accept @planetarion.com mail ($mydestination).[21:08:20] <sysmonk> damn[21:08:46] <Lunar_Lamp> unixcoder, I am trying to configure receiving mail on the server. When I try to send it from a variety of sources it gets a 554 error message back.[21:09:06] <Lunar_Lamp> Spam seems to get through just fine, but ham (i.e. legitimate mail servers) doesn't.[21:09:24] <unixcoder> rob0 http://blog.taragana.com/index.php/archive/how-to-setup-postfix-to-relay-outbound-mail-using-sasl/[21:10:13] <shasta> Lunar_Lamp, what's your email address on that server then?[21:10:18] <rob0> IIUC the problem is incoming mail, *probably* to virtual_mailbox_domains, but that's just a guess.[21:10:21] <sysmonk> roe_: smtp_sasl_password_maps[21:10:41] <sysmonk> and don't forget to enable smtp_sasl_auth_enable[21:11:07] <sysmonk> !smtp_sasl_password_maps[21:11:08] <knoba> sysmonk: "smtp_sasl_password_maps" : a configuration parameter in the main.cf: Optional SMTP client lookup tables with one username:password entry per remote hostname or domain. If a remote host or domain has no username:password entry, then the Postfix SMTP client will not attempt to authenticate to the remote host.[21:11:30] *** geek_cl has joined #postfix[21:11:37] <Lunar_Lamp> shasta, ah, I've just realised that part of the problem appears to be DNS related[21:11:40] <Lunar_Lamp> iagnostic-Code: X-Postfix; host planetarion.com[195.149.21.29] said: 554 5.7.1[21:11:41] <Lunar_Lamp> <lunarlamp at planetarion dot com>: Relay access denied (in reply to RCPT TO[21:11:41] <Lunar_Lamp> command)[21:11:53] <rob0> roe_: See !sasl_readme, the client_auth anchor I think.[21:12:11] <Lunar_Lamp> 195.149.21.29 is the DNS server for the domain, and the mail server is on 195.149.21.26[21:12:50] <rob0> You should set an MX record.[21:13:02] <shasta> $ host -t mx planetarion.com[21:13:03] <shasta> planetarion.com has no MX record[21:13:06] <shasta> $ host -t a planetarion.com[21:13:06] <shasta> planetarion.com has address 195.149.21.29[21:13:09] <shasta> $ host -t a mail.planetarion.com[21:13:09] <shasta> mail.planetarion.com has address 195.149.21.26[21:13:28] *** unixipher has joined #postfix[21:13:35] <roe_> rob0, where is said sasl_readme?[21:13:37] <shasta> you need something like this: planetarion.com IN MX 10 mail.planetarion.com.[21:13:52] <Lunar_Lamp> planetarion.com IN MX 10 mail.planetarion.com. <== something like that?[21:13:58] <Lunar_Lamp> That's what is in my config atm :-/[21:15:01] <sysmonk> roe_: !sasl_readme[21:15:17] *** unixipher has quit IRC[21:15:20] <rob0> Cleverly hidden at www.postfix.org[21:15:25] <sysmonk> roe_: just type that in da channel :)[21:15:36] <roe_> knoba doesn't know what it is...[21:15:40] <roe_> !sasl_readme[21:15:40] <knoba> roe_: "sasl_readme" : www.postfix.org/SASL_README.html[21:15:50] <sysmonk> roe_: doesn't it?[21:15:51] <roe_> crap, I msg'ed him and he didn't know[21:15:51] <sysmonk> :)[21:15:52] <rob0> Cleverly hidden also in your own documentation.[21:15:57] <shasta> Lunar_Lamp, dns1.planetarion.com and dns-3.planetarion.com don't know MX for planetarion.com; slave.planetarion.com doesn't respond at all.[21:16:11] *** unixipher has joined #postfix[21:16:12] <roe_> proof: <knoba> Error: "sasl_readme" is not a valid command.[21:16:18] <Lunar_Lamp> shasta, that is the problem then?[21:16:30] <rob0> MX for planetarion.com. came up empty here too.[21:16:40] <sysmonk> roe_: knoba is a bot, and it has different commands for different channels[21:16:51] <sysmonk> so when you pm it, it doesn't know :)[21:17:17] <roe_> well, I didn't want to bother the channel with knoba spam, so I tried to talk to him quietly, lot of good that did[21:17:24] *** unixipher has quit IRC[21:17:32] <rob0> !help[21:17:33] <knoba> rob0: (help [<plugin>] [<command>]) -- This command gives a useful description of what <command> does. <plugin> is only necessary if the command is in more than one plugin.[21:17:36] <sysmonk> roe_: knoba doesn't like sexual harastment![21:17:51] <shasta> Lunar_Lamp, very likely. mail.planetarion.com accepts mail for lunarlamp at planetarion dot com (check your mailbox ;)[21:18:05] <rob0> I think you can specify the channel name in a /msg to knoba.[21:18:13] <rob0> but I don't remember the syntax[21:18:14] *** unixipher has joined #postfix[21:18:19] <Lunar_Lamp> shasta, it does accept spam - but I've tried sending mail and it just gives me 554 all the time![21:18:28] <shasta> sigh[21:18:36] <rob0> !tell roe_ sasl_readme[21:18:43] <rob0> ^^ that works[21:18:55] <sysmonk> !tell sysmonk looser :P[21:18:55] <knoba> sysmonk: Error: No factoid matches that key.[21:18:59] <roe_> so it does[21:19:00] <shasta> because spammers don't respect RFC, they often just search for MTAs on port 25[21:19:07] <roe_> !tell roe_ he is awesome[21:19:07] <knoba> roe_: Error: No factoid matches that key.[21:19:08] <Lunar_Lamp> shasta, ofc, :-)[21:19:09] *** unixipher has quit IRC[21:19:54] *** unixipher has joined #postfix[21:20:18] <roe_> that is a beautiful readme, thank you[21:20:20] <shasta> fix your dns, see if it helps. if not, come ask further (this time perhaps postfix-related? ;>) questions[21:20:46] *** githogori has quit IRC[21:20:51] *** unixipher has quit IRC[21:21:50] *** unixipher has joined #postfix[21:21:51] <Lunar_Lamp> shasta, lol, sorry, when I came in here I genuinely thought it was a postfix issue :-([21:22:44] *** unixipher has quit IRC[21:23:34] *** unixipher has joined #postfix[21:23:38] *** githogori has joined #postfix[21:24:30] *** unixipher has quit IRC[21:25:47] *** unixipher has joined #postfix[21:26:52] *** unixipher has quit IRC[21:27:27] *** duki is now known as help[21:27:47] *** unixipher has joined #postfix[21:28:51] *** unixipher has quit IRC[21:29:00] *** help has quit IRC[21:29:01] *** prebur has quit IRC[21:29:04] *** help_ has joined #postfix[21:29:21] <sysmonk> sure, Lunar_Lamp, postfix is also responsible for the the WWII![21:29:24] <sysmonk> :P[21:29:35] <sysmonk> ah, sorry, it was cpm, not postfix[21:29:43] * Lunar_Lamp shakes his fix at postfix[21:29:50] <Lunar_Lamp> It's got a lot to answer for then.[21:29:51] <Lunar_Lamp> ;-)[21:29:52] *** unixipher has joined #postfix[21:30:08] <sysmonk> unixipher: got problems?[21:30:34] * cpm is quite sure, that when all the facts are in, that rob0 will have a lot to answer for.[21:30:38] *** unixipher has quit IRC[21:31:24] *** unixipher has joined #postfix[21:32:42] <rob0> Ha. Never!![21:33:19] <rob0> Copper, you'll never take me alive![21:37:09] *** UQlev has quit IRC[21:50:19] *** pitakill has joined #postfix[21:50:34] *** growltiger has quit IRC[21:51:22] *** stony has quit IRC[22:05:09] *** cpm has quit IRC[22:07:07] *** brancaleone has joined #postfix[22:09:10] *** havvg has quit IRC[22:10:50] *** Luxor2 has quit IRC[22:12:57] <kombi> finally got amavis to give some output, it stops at every "CALLING SA check" <- does that indicate spamassassin is the bottleneck?[22:14:18] *** sweed has joined #postfix[22:16:13] <adaptr> it would seem so, yes[22:16:38] <adaptr> amavis, by the way, can do wonderfully verbose logging, so I have some problems with that statement from the beginning[22:16:47] *** ploploop has joined #postfix[22:17:12] <adaptr> you are not running spamd, trust me - it has to call SA and start perl and all that shite each and every time, hella-expensive[22:17:22] <adaptr> that's why you use spamc/spamd[22:29:03] *** x-ip has quit IRC[22:29:34] *** pirho has joined #postfix[22:32:47] *** brancaleone has quit IRC[22:37:12] *** pitakill has quit IRC[22:38:33] *** pickcoder has joined #postfix[22:39:50] *** pitakill has joined #postfix[22:42:46] <roe_> adaptr, while I agree with you, do you know a functional reason for this? I find that it shouldn't be too difficult to have amavis pass messages to spamd[22:42:50] *** growltiger has joined #postfix[22:43:02] <roe_> and the gains are significant[22:43:47] *** cilly has quit IRC[22:44:19] *** cilly has joined #postfix[22:46:04] <kombi> i see some 1500 messages from my own domain with qshape active incoming deferred[22:46:26] *** ploploop is now known as brancaleone[22:46:30] <kombi> where do I see what those are..?[22:51:21] <rob0> Amavisd-new is a running perl daemon, and it invokes SA as perl modules, so to me that sounds better than running two perl daemons. But don't pay attention to me, I don't run amavisd ATM.[22:51:24] *** geek_cl has quit IRC[22:52:03] <rob0> kombi: man postcat (you generally would pipe postcat to a pager like less(1))[22:52:19] *** rcsu has quit IRC[23:03:03] *** githogori has quit IRC[23:06:32] *** ffed_ has joined #postfix[23:06:32] *** ffed has quit IRC[23:07:17] <kombi> good one rob.. only where are those queue files postcat can read? not in var/spool/postfix it seems..[23:09:15] <rob0> See -q[23:11:33] *** ffed has joined #postfix[23:11:34] *** ffed_ has quit IRC[23:20:36] *** unixcoder has quit IRC[23:21:38] *** Gek_ has quit IRC[23:30:53] *** pitakill has quit IRC[23:31:29] *** pitakill has joined #postfix[23:33:00] *** wdp has joined #postfix[23:35:57] *** theblackbox has joined #postfix[23:39:12] *** vr has quit IRC[23:43:08] *** vr has joined #postfix[23:43:30] *** Spec is now known as x-spec-t[23:43:47] <robtone_> planetarion still exists?[23:45:09] *** j_s has quit IRC[23:46:43] *** sweed has quit IRC[23:47:17] *** prebur has joined #postfix[23:47:34] *** etank has left #postfix[23:51:36] *** diveli_ has joined #postfix[23:59:36] *** pickcoder has quit IRC