November 28, 2007 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | >
November 28, 2007 [00:02:05] <ScarEye> k[00:02:32] <ScarEye> adaptr: Where can I look to see why e-mail is taking a log time to get into my inbox ?[00:04:28] <adaptr> which email is taking too long ? where does it come from >? what does postfix do with it ?[00:04:37] <adaptr> all this can be found in your logs[00:05:08] <marl> adaptr: in wat way did u meen mailprefilter?[00:05:20] <ScarEye> so any e-mail that comes through will get logged in mail.log ?[00:05:33] *** slashtom has left #postfix[00:05:59] <adaptr> marl sice that is in YOUR mail logs, I presume you know what it means[00:06:07] <adaptr> ScarEye yes, every. single. one.[00:06:23] <Signum> even those that do not come through :)[00:07:01] <marl> isnt the prefilter command called after the mail is taken from the queue?[00:07:24] <adaptr> yes, it is - and that is where it goes after having been on the queue for an hour, which is a Clue[00:07:43] <adaptr> the simple explanation is that the prefilter was not working so postfix could not deliver to it[00:07:54] <adaptr> but now I'm doing your troubleshooting for you[00:08:07] <adaptr> this is very basic stuff that you need to know, or learn about if you don't[00:08:38] <adaptr> Learn your Logs![00:08:41] <marl> well i always thought that was one of the points of the irc chat system, was so people could ask for pointers to problem they were having[00:08:51] <adaptr> I already gave you three![00:09:09] <adaptr> grumbl some people are never satisfied grumbl[00:09:37] <ScarEye> What is found in the bathroom of the starship enterprise ???????????????[00:09:40] <ScarEye> anyone ?[00:09:46] <marl> did i ask anyone to solve the rpoblem for me?[00:09:52] <marl> nothng because there isnt one![00:09:54] <ScarEye> Captians LOG !!!!![00:09:59] <ScarEye> ROFL[00:10:41] <ScarEye> okay. okay. wuamp wuamp wuuuaaaammpp...[00:19:38] *** madduck has joined #postfix[00:30:27] *** pitakill has quit IRC[00:30:47] *** MystaMax has joined #postfix[00:30:56] *** MystaMax has left #postfix[00:41:50] *** meandtheshell has quit IRC[00:44:52] *** pitakill_ has quit IRC[00:52:04] <rob0> Signum: Thanks ... 21:57 -!- mode/#postfix [+b *!*dwxreaper@*] by Signum[00:56:52] *** marl has left #postfix[01:23:53] *** Mavvie has quit IRC[01:25:23] *** Mavvie has joined #postfix[01:28:22] <tolecnal> ScarEye: captains log, stardate 2007112801?[01:33:53] <ScarEye> lol[01:38:02] *** Gibbonz has quit IRC[01:45:58] *** Zeit|awy has joined #postfix[01:52:19] *** tolecnal_ has joined #postfix[01:56:40] *** kreg_lt has joined #postfix[02:06:54] *** githogori has quit IRC[02:09:43] *** tolecnal has quit IRC[02:09:44] *** tolecnal_ is now known as tolecnal[02:17:43] *** war has quit IRC[02:18:25] *** githogori has joined #postfix[02:20:25] *** ruza has quit IRC[02:20:25] *** hal1on has quit IRC[02:20:25] *** Bejgli has quit IRC[02:21:22] *** ruza has joined #postfix[02:21:22] *** hal1on has joined #postfix[02:21:22] *** Bejgli has joined #postfix[02:23:58] *** pitakill has joined #postfix[02:27:35] *** githogori has quit IRC[02:42:11] *** wulfen has quit IRC[02:49:30] *** Casan has joined #postfix[02:51:55] <Casan> I have a mailserver, where for the webmail, pop3, smtp I like to secure it with ssl encryption, what is the cheapest available certificate that is automatically recognized by the major browsers ? and can I use 1 certificate for several servers, including virtualhost domain? any recommendations ?[02:53:44] *** felix_da_catz has quit IRC[02:54:45] *** ming_zym has joined #postfix[03:04:30] *** wepy has joined #postfix[03:04:32] <wepy> hey[03:04:39] <wepy> i updated my postfix recently[03:04:45] <wepy> and now incoming mail is getting rejected[03:04:50] <wepy> something about not allowing relay[03:04:59] <wepy> did something change in the configuration syntax?[03:07:47] <rob0> Casan, you'd want one cert per IP address, with the commonName being the rDNS hostname.[03:08:47] <rob0> I'd look at Godaddy, usually cheapest, not sure how well accepted. Or, do what I do, roll your own CA.[03:10:24] *** amrit|wrk is now known as amrit|bbl[03:11:12] <Casan> rob0: rolling my own CA would require webmail users to verify the certificate manually correct?[03:12:30] <rob0> Right[03:16:01] <Casan> I found this on http://edin.no-ip.com/html/?q=node&page=12 if I have understood it correct, I can use the same certificate for multiple domains on the same server, but I'm not sure if it means it can use a "trusted issued" certificate, so manual verification by the users will not be necessary. any idea?[03:17:33] *** ming_zym has quit IRC[03:19:00] *** wepy has quit IRC[03:21:53] *** tolecnal_ has joined #postfix[03:21:59] *** ming_zym has joined #postfix[03:38:18] *** tolecnal has quit IRC[03:38:19] *** tolecnal_ is now known as tolecnal[03:45:42] *** pirho has quit IRC[03:48:55] <ScarEye> guys I am using postfix to relay e-mail to my e-mail server. however, it's taking like an hour before I get e-mails any idea's on what could be going on ?[03:49:27] <ScarEye> it's basically setup to check for spam and viruses and then forwards it to the mail server[03:52:03] <rob0> Greylisting could easily take an hour. What are you doing for spam?[03:53:24] <ScarEye> um[03:53:30] <ScarEye> I am using this method[03:53:38] <ScarEye> I am not greylisting[03:53:45] <ScarEye> www.piratefish.org[03:54:09] <ScarEye> I just went in to look at the server and the hard drive light is almost solid. And I just restarted the computer like 1 minute ago[03:55:06] <ScarEye> it's like everyone is just trying to send e-mails to ppl within the companny that don't exist[03:55:15] <ScarEye> they are like trying every common name[03:55:42] <ScarEye> I am looking using mailq[03:56:14] <rob0> Wow, that guy took a bunch of open source things together and made it look opaque. :)[03:56:30] *** Motoko-chan has joined #postfix[03:56:48] <ScarEye> yea[03:57:00] <rob0> !cheatsheet[03:57:00] <knoba> rob0: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.[03:57:05] <rob0> ^^ what I do[03:57:11] <ScarEye> rob0[03:57:18] <ScarEye> I get about[03:57:23] <ScarEye> 30 spams a day[03:57:26] <ScarEye> 30 THOUSAND[03:58:06] <rob0> The vast majority of all SMTP traffic is abuse. You're not unusual.[03:58:53] <ScarEye> rob0: is there a setting in there somwhere. Where I can set the amount of e-mails the machine can proccess at once ?[04:03:23] <rob0> I don't know what to tell you other than the standard LOOK AT LOGS. I've never used (and wouldn't use) mailscanner.[04:03:54] <ScarEye> how come you wouldn't use mailscanner[04:03:59] <ScarEye> is there something better you prefer ?[04:04:52] <rob0> The "approved" method of content filtering is an after-queue filter like amavisd-new. FILTER_README.html[04:05:29] <rob0> Mailscanner directly manipulates the Postfix queue, not supported.[04:05:51] <rob0> (They say it works, Wietse says if so don't count on it.)[04:08:50] <ScarEye> are you currently scanning messages for spam and viruses and then passing it on to your e-mail server ?[04:09:04] <ScarEye> I am just trying to figure out what everyone else is doing[04:10:04] <Mavvie> 30 thousand?[04:10:09] <Mavvie> I block six per second.[04:10:22] <Mavvie> (during office hours)[04:11:24] <Mavvie> ScarEye: whitelisting, RBL blacklisting, sender verification, greylisting. In that order.[04:11:47] <ScarEye> Mavvie: is that what you are doing ? ^^^^^^[04:11:56] <Mavvie> yes.[04:12:15] *** jmazaredo has joined #postfix[04:12:46] <ScarEye> Mavvie: So what packages are you using altogether ?[04:13:08] <Mavvie> ScarEye: a home-written whitelisting daemon and postfix.[04:15:10] <ScarEye> ic[04:15:55] *** bosyak has joined #postfix[04:29:03] *** lysander has quit IRC[04:31:07] *** MysticOne has joined #postfix[04:32:02] <MysticOne> hi all... hopefully a quick question :) I had to reinstall FreeBSD on a box, and while everything seems to be working pretty much as expected ... my SMTP AUTH with postfix isn't working. When I try to login, it seems to attempt to authenticate against my database, but fails ... and I can't figure out where it's dying.[04:33:13] <MysticOne> I'm using the SASL auxprop stuff with PostgreSQL, and I have all the correct info in /usr/local/lib/sasl2/smtpd.conf (at least, what my previous installation required), but when I attempt to login, it kicks it back with "warning: SASL authentication failure: Password verification failed[04:33:18] <MysticOne> "[04:34:41] <MysticOne> any ideas? or places where I could look?[04:37:36] <Motoko-chan> Check logs?[04:38:04] <MysticOne> that's what the logs say about the warning: SASL authentication failure: Password verification failed[04:38:13] *** ming_zym has quit IRC[04:42:36] *** ming_zym has joined #postfix[04:43:00] <MysticOne> there's a log_level line in smtpd.conf, and it's set to 7, but ... I can't recall what manpage or documentation to look at to figure out what to set it to to get more information (if it's even possible)[04:50:28] <Dominian> er..[04:50:30] <Dominian> smtpd.conf?[04:50:43] <MysticOne> yeah, in /usr/local/lib/sasl2[04:50:48] <Dominian> oh[04:50:51] * Dominian doesn't use that[04:51:02] <MysticOne> how are you doing SMTP authentication?[04:51:12] *** djs_2_6 has quit IRC[04:51:28] <jmazaredo> why do i get this courierpop3login: Connection, ip=[::ffff:127.0.1.1][04:51:43] <jmazaredo> it should be 127.0.0.1 right?[04:53:23] <MysticOne> I guess they're showing IPv4 and IPv6 the same way[04:55:39] * MysticOne pokes postfix's SASL stuff[04:55:54] <MysticOne> this is annoying ... I have no idea how to fix it, but I always seem to have some weird SASL issue whenever I have to reinstall[04:56:24] *** jbAU has quit IRC[04:56:36] *** hparker has quit IRC[04:57:42] <MysticOne> oh ...[04:57:55] <MysticOne> I bet I know what the problem is[05:00:21] <MysticOne> yay :D[05:00:22] <MysticOne> fixed![05:00:33] <MysticOne> it helps when you compile SASL with the right drivers[05:04:45] *** PhilKC has quit IRC[05:07:32] *** hparker has joined #postfix[05:11:04] *** MysticOne has quit IRC[05:24:18] *** githogori has joined #postfix[05:32:22] *** f3ew has joined #postfix[05:33:04] *** bosyak has quit IRC[05:42:48] *** bhagat has joined #postfix[05:49:21] <ScarEye> hey guys when I see this hold: header Received:$[05:49:22] <ScarEye> $06.76786.qm at web30209 dot mail.mud.yahoo.com>[05:49:37] <ScarEye> in the mail.log is it holding it because of spam[05:49:40] <ScarEye> or is it processing[05:51:12] *** hparker has quit IRC[05:56:46] <f3ew> ScarEye no clue[05:56:55] <f3ew> you configured Postfix to put that message on hold[05:57:42] <ScarEye> man.. all i did was follow the instructions from piratefish.org[05:57:51] <ScarEye> paid 67 bucks and now I am regreting it[06:01:25] <f3ew> Uh?[06:01:49] <f3ew> Paid?[06:02:29] <f3ew> you could have asked here :)[06:02:39] <ScarEye> I know[06:02:42] <ScarEye> now I know[06:02:57] <ScarEye> I honestly didn't want to ask newbie questions and ppl getting pissed[06:03:06] <f3ew> Anyway, they recommend mailscanner[06:03:19] <ScarEye> yea.. and someone up above said it sucked[06:03:21] <f3ew> I suggest lurking around then, we mostly get newbie questions :|[06:03:26] <f3ew> Well, yes[06:03:41] <ScarEye> f3ew: what would u recommend ?[06:03:48] *** Tinozaure is now known as Tino[06:03:54] *** Tino is now known as Tinozaure[06:03:57] <f3ew> but in your specific case, the hold: is because Postfix is keeping the mail on hold before mailscanner gets to it[06:04:21] <f3ew> your mailscanner install should pull the message out and send it on after scanning[06:04:26] * f3ew is an amavisd-new user[06:04:33] <ScarEye> ohhh[06:04:37] <ScarEye> that's what's happening[06:04:42] <ScarEye> and mailscanner is jammed pack[06:04:47] <ScarEye> my hard drive light is solid[06:04:55] <f3ew> http://workaround.org/moin/Welcome[06:04:58] <ScarEye> 40,000 e-mail today[06:05:08] <f3ew> pretty low :)[06:05:21] <ScarEye> then something is wrong if you think that is low[06:05:22] <ScarEye> cause[06:05:28] <ScarEye> probably[06:05:30] <ScarEye> mailscanner[06:07:47] <f3ew> probably[06:07:52] <ScarEye> f3ew: So basically, mail comes in. Postfix passes it to amavisd ?[06:07:56] <ScarEye> or vise versa ?[06:08:47] <f3ew> Postfix -> amavisd-new -> Postfix[06:09:09] *** hparker has joined #postfix[06:09:15] <ScarEye> and then if I want to pass it to calmav for virus check and then spamassassian ?[06:09:20] <ScarEye> that could be done also right ?[06:12:58] *** hparker has quit IRC[06:14:44] <f3ew> ScarEye amavisd-new will do that for you[06:14:49] <f3ew> amavisd is a wrapper[06:14:56] <ScarEye> hmm..[06:15:39] <Motoko-chan> calmav?[06:15:45] <Motoko-chan> Sounds very laid back.[06:15:55] <ScarEye> this is what I am trying to accomplish. internet-mail---->something to check for spam,virues----->relay to mail server[06:16:07] <Motoko-chan> "Oh yeah, I found a virus."[06:16:23] <Motoko-chan> Anti-spam gateway[06:16:31] <ScarEye> basically[06:16:34] <ScarEye> is what I am trying to do[06:16:43] <ScarEye> motoko[06:16:48] <Motoko-chan> http://flakshack.com/anti-spam/[06:16:51] <Motoko-chan> Good guide.[06:16:55] <ScarEye> omg[06:17:03] <ScarEye> then I paid this 67 bucks for nothing[06:17:08] <Motoko-chan> I use that as the basis for what I do.[06:17:09] <ScarEye> piratefish.org =([06:17:22] <Motoko-chan> Heh[06:17:29] <Motoko-chan> Next time, do more searching.[06:17:33] <f3ew> Sucks :)[06:17:37] <ScarEye> yea I was in a hurry[06:17:39] <f3ew> Google is your friend[06:17:41] <ScarEye> st000pid me[06:17:44] <Motoko-chan> "30 Day Money-Back Guarantee"[06:17:47] <f3ew> happens[06:17:53] <Motoko-chan> If you are in that period, get your money back.[06:18:10] <ScarEye> Yea I got it like 6 months ago.. Only problem is I was knee deep in projects finally I am back to this project[06:18:15] <ScarEye> it's midnight and I am still at the office[06:18:18] <Motoko-chan> f3ew, helps that I knew the site directly.[06:18:19] <ScarEye> trying to figure this crap out[06:18:28] <Motoko-chan> It isn't too hard if you draw it out.[06:18:37] <Motoko-chan> What is the inside server running?[06:18:43] <ScarEye> Motoko-chan: I did google and piratefish is what I found.[06:19:00] <ScarEye> insisde server ? talking to me Motoko-chan ?[06:19:03] <Motoko-chan> Yes.[06:19:12] <Motoko-chan> What is the server with the mailboxes running?[06:19:18] <ScarEye> it's a 3.2Ghz hyperthreading[06:19:19] <ScarEye> Oh[06:19:24] <ScarEye> that is a dual xon[06:19:27] <ScarEye> xeon[06:19:31] <ScarEye> 4gb of ram[06:19:35] <Motoko-chan> Exchange? Exim? Sendmail? Zimbra?[06:19:36] <ScarEye> raid 5[06:19:39] <ScarEye> exchange[06:19:44] <ScarEye> 2003[06:19:45] <Motoko-chan> Ah.[06:19:46] <f3ew> oh ick[06:19:47] <Motoko-chan> Okay.[06:19:49] <ScarEye> Well[06:19:56] <ScarEye> I am finally getting this comopany[06:19:57] <Motoko-chan> You can use LDAP to do user checks.[06:20:02] <ScarEye> to get away from microshaft[06:20:09] <ScarEye> NICE[06:20:19] <Motoko-chan> Anyway, check that guide I linked to[06:20:20] <ScarEye> see that's cool feathure[06:20:25] <f3ew> http://www.google.com/search?q=postfix+antispam+gateway+exchange[06:20:26] <Motoko-chan> Replace with the distro you like.[06:20:36] <Motoko-chan> (I use Slackware)[06:20:40] <ScarEye> I really like CentOS[06:20:41] <f3ew> ScarEye, alternatively, you could just have used google for domains[06:20:45] <ScarEye> or Ubuntu[06:20:58] <Motoko-chan> f3ew, not the same features as Exchange.[06:21:07] <f3ew> http://www.postfix.org/docs.html[06:21:07] <Motoko-chan> And then look up how to use LDAP for user lookup tables with Postfix.[06:21:33] <f3ew> Motoko-chan, the calendar is ical compliant, what else do you need?[06:21:37] <ScarEye> So basically I am getting out of here in the morning =([06:21:48] <Motoko-chan> f3ew, Outlook connector.[06:22:04] <f3ew> ScarEye, probably[06:22:08] <Motoko-chan> Sadly, Outlook + Exchange is a nice solution, if horribly closed and evil.[06:22:19] <Motoko-chan> ScarEye, why can't you do this tomorrow?[06:22:49] <ScarEye> becuase. I setup this thing. And now we are not getting email or they take like 2 hours to get..[06:22:58] <ScarEye> And if I move everthing back to the exachange server[06:23:03] <ScarEye> we will be bombared with spam[06:23:07] <Motoko-chan> If you are familiar, it is a few hour job, if not it might be 5+[06:23:36] <Motoko-chan> Skim the guide I linked, don't worry about AV or stuff like Pyzor, DCC, or Razor2 right now.[06:23:36] <ScarEye> I got 7 hours to get it up and running[06:23:42] <Motoko-chan> Get basic stuff going[06:23:45] <ScarEye> okay[06:23:49] <ScarEye> what do suggest as far as basic[06:23:50] <Motoko-chan> And don't worry about user checks.[06:23:53] <ScarEye> what shoudl I do ?[06:24:12] <Motoko-chan> Check the guide I linked. Use just the Amavisd-new and spamassasion portions.[06:24:34] <Motoko-chan> You can always add later.[06:24:41] <ScarEye> okay once that's up[06:24:43] <ScarEye> add AV[06:24:48] * Motoko-chan nods[06:24:48] <ScarEye> and the ldap[06:24:50] <Motoko-chan> AV is easy.[06:24:53] <Motoko-chan> Yep[06:25:21] <Motoko-chan> Get the basics going first.[06:25:45] <ScarEye> Motoko-chan: Is a P4 3.2Ghz, 1gb ram, good enough?[06:25:56] <ScarEye> for this setup ?[06:26:09] <Motoko-chan> What volume are you talking about?[06:26:35] <ScarEye> as far as ?[06:26:39] <ScarEye> how many users do we have[06:26:41] <ScarEye> for email[06:26:42] <Motoko-chan> Of mail.[06:26:47] <f3ew> how many emails[06:26:49] <ScarEye> or how much junk crap we get[06:26:52] <ScarEye> 100 emails[06:26:55] <Motoko-chan> In total.[06:26:57] <f3ew> 40K is a very small number[06:27:13] <Motoko-chan> Like, 300 a minute? 30000 a minute?[06:27:19] <Motoko-chan> Best guess.[06:27:33] <ScarEye> probably[06:27:37] <ScarEye> 200 a minute[06:27:48] <Motoko-chan> Okay, that box should be good if you tweak it.[06:27:59] <Motoko-chan> Make sure to whielist big senders that are worthwhile.[06:28:03] <f3ew> yup[06:28:05] <ScarEye> yea[06:28:18] <Motoko-chan> I have a list that will shove 1000k in under 5 minutes.[06:28:34] <Motoko-chan> Often within two minutes.[06:28:38] <ScarEye> wow[06:28:49] <Motoko-chan> In addition to normal traffic.[06:28:57] <Motoko-chan> Using a much smaller box.[06:29:00] <f3ew> spammer![06:29:01] <f3ew> :P[06:29:05] <Motoko-chan> Mailing list[06:29:06] <ScarEye> lol[06:29:14] <f3ew> yeah, yeah :P[06:29:17] <Motoko-chan> Sending to my customers.[06:29:22] <Dominian> "Mailing list" thats what spammers refer to it as...[06:29:23] <Dominian> hehe[06:29:28] <ScarEye> lool[06:29:29] <Motoko-chan> It is a real mailing list.[06:29:44] <Motoko-chan> Basically, ezmlm sucks.[06:29:48] <f3ew> I know[06:29:57] * f3ew adds a sense of humour to Motoko-chan[06:29:58] <ScarEye> ezmlm ?[06:30:07] <Dominian> Motoko-chan: use mailman[06:30:07] <Motoko-chan> Mailing list software for qmail only.[06:30:07] <f3ew> the qmail MLM[06:30:12] <Dominian> yeah[06:30:13] <Motoko-chan> Dominian, I'm not runnign the list.[06:30:14] <ScarEye> o[06:30:15] <Dominian> ezmlm blows[06:30:25] <Motoko-chan> It is an outside company.[06:30:50] <ScarEye> Motoko-chan: Under the setup section[06:30:51] <Motoko-chan> No control over it either, my customers subscribe to it because it is for their industry.[06:31:07] <ScarEye> what do i need just.. Postfix and amavisd-new ?[06:31:20] <ScarEye> pearl modules[06:31:30] <Motoko-chan> Postfix, Amavisd-new, and spamassassin[06:31:35] <Motoko-chan> At minimum.[06:31:40] <Dominian> for what?[06:31:52] *** jbAU has joined #postfix[06:31:55] <Motoko-chan> Dominian, promotional products.[06:31:58] <ScarEye> lol[06:32:03] <Motoko-chan> Imprinted stuff.[06:32:06] <Motoko-chan> Pens, etc.[06:32:19] <Dominian> ah[06:32:26] <Motoko-chan> We have over 3000k domains on the website system we run.[06:32:31] <Dominian> ouch[06:32:35] <Motoko-chan> Yeah.[06:32:49] <Motoko-chan> It really hurts the mail gateway when the mailing list is active.[06:33:07] <Motoko-chan> I used to have load over 20.[06:33:10] <Dominian> why not do load balancing?[06:33:14] <Motoko-chan> I now route past amavisd[06:33:21] <Motoko-chan> No money.[06:33:24] <Dominian> ahh[06:33:27] <ScarEye> Motoko-chan: With just Postfix and Amavisd-new I should be able to replay mail to the exachage server for now..[06:33:30] <ScarEye> minimum[06:33:35] <ScarEye> so I can home home and sleep[06:33:36] <Motoko-chan> ScarEye, and spamassassin[06:33:40] <ScarEye> oh[06:33:40] <ScarEye> yea[06:33:42] <ScarEye> doh[06:33:43] <Motoko-chan> You need something to scan for spam[06:33:47] <ScarEye> indeed[06:33:50] <ScarEye> ur right[06:33:53] <Dominian> Well you don't "need" it.. but its recommending[06:33:56] <Dominian> re.. recommended[06:33:57] <ScarEye> yea I do[06:34:02] <Motoko-chan> Dominian, to spam scan[06:34:11] <ScarEye> or to scan spam[06:34:13] <Motoko-chan> Otherwise, it is a straight relay.[06:34:14] <Dominian> Motoko-chan: I wouldn't say its recommended though..[06:34:19] <Dominian> er..[06:34:20] <Dominian> required[06:34:21] <Dominian> damn it[06:34:21] <Motoko-chan> There is dspam...[06:34:22] <Dominian> I'm tired[06:34:33] <Dominian> I've seen people just use postfix as a gateway and relay to exchange..[06:34:33] <Motoko-chan> Pain to set up[06:34:42] <Motoko-chan> Dominian, this is to scan for spam.[06:34:42] <Dominian> and exchange do the spam scanning with 3rd party plugins[06:34:57] <Motoko-chan> Required job from my understanding.[06:34:58] <Dominian> ScarEye: Or you can use a scrubbing service that does that for you[06:35:05] <Dominian> depending on your needs.[06:35:08] <Motoko-chan> http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt <-- Also recommended if you are using SpamAssassin[06:35:11] <Dominian> and I'm too lazy to read up to see the whole situation[06:35:27] <Dominian> Motoko-chan: that's the one for adding sare spam detection to clamav isn't it?[06:35:42] <Motoko-chan> No, for updating SARE via sa-update[06:35:51] <Motoko-chan> As rdj has been down[06:35:52] <Dominian> ah[06:35:57] <Dominian> yeah rdj being down sucks..[06:36:01] <Motoko-chan> DDoS I believe.[06:36:08] <Dominian> Motoko-chan: dude.. that was MONTHS ago[06:36:10] <Motoko-chan> Nice service, the sa-update channel[06:36:11] <Dominian> almost a YEAR ago[06:36:20] <Motoko-chan> It is still down last I checked.[06:36:23] <Dominian> I think they just decided to stop doing it[06:36:30] <Motoko-chan> Besides, the sa-update channel is good.[06:36:35] <Dominian> if I had the money/resources I'd tell them to put it on my server[06:36:40] <ScarEye> Motoko-chan: what is the for ?? http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt (please exuse my ignorance)[06:36:41] <Dominian> Motoko-chan: yeah.. but rdj was so much easier imho[06:37:03] <Motoko-chan> ScarEye, additional rules to check spam.[06:37:13] <Motoko-chan> I highly recommend it.[06:37:22] <ScarEye> so after I get it setup.. follow those instructions ?[06:37:28] <Motoko-chan> Yep.[06:37:31] <ScarEye> 10-4[06:37:39] <Motoko-chan> Get the basics working at least.[06:37:43] <ScarEye> yea[06:37:44] <Motoko-chan> You can always add next day[06:37:49] <ScarEye> yep[06:38:42] <ScarEye> Motoko-chan: I need the Peral Modules right now ? Or can that wait ?[06:38:49] <ScarEye> oh avaimed needs it right ?[06:38:52] <Motoko-chan> Need them[06:38:56] <ScarEye> yea[06:38:57] <Motoko-chan> Use cpan to install[06:39:13] <ScarEye> Both amavisd-new and SpamAssassin are written in perl[06:39:18] <ScarEye> cpan[06:39:19] <Motoko-chan> Yep.[06:39:20] <Dominian> ahh yes.. I use that sare sa update already[06:39:22] <Dominian> I just don't cron it[06:39:31] <ScarEye> what is cpan[06:39:34] <Motoko-chan> perl -MCPAN -e shell[06:39:43] <Motoko-chan> It is a special tool to install perl modules.[06:39:51] <ScarEye> Motoko-chan: is that with any distro ?[06:40:02] <Motoko-chan> Yes[06:40:09] <Motoko-chan> It is part of Perl anywhere really[06:40:27] <Dominian> cpan = life saver ;)[06:40:44] <ScarEye> first I would heave to install pereal. yum install pearl[06:40:47] <ScarEye> then do the moudles ?[06:40:58] <Motoko-chan> yes[06:40:59] <ScarEye> CentOS = yum[06:41:20] <Motoko-chan> Not every module is packaged that way[06:41:35] <Motoko-chan> You should have Perl anyway, many system utilities use it.[06:41:42] <ScarEye> k[06:42:24] *** kreg_lt has quit IRC[06:48:51] *** rati has joined #postfix[06:58:42] *** jmazaredo has quit IRC[07:04:52] *** christopher_s has quit IRC[07:09:24] *** ming_zym has quit IRC[07:10:32] *** jbAU has quit IRC[07:13:31] *** ming_zym has joined #postfix[07:13:52] *** Filbert- has quit IRC[07:15:09] *** nixternal has joined #postfix[07:15:12] *** nixternal has left #postfix[07:17:58] *** pickcoder has joined #postfix[07:32:09] *** harpal has joined #postfix[07:33:25] <ScarEye> Motoko-chan: You there bro ?[07:33:47] <Motoko-chan> Yes[07:33:54] <ScarEye> I have a question for you not postfix related[07:34:04] <ScarEye> I have a machine with 4 network cards. I assign one of them a static IP address (eth0) how can I tell which network card in the back of the machine is eth0 ?[07:34:25] * f3ew suggests pulling cables out[07:34:27] <Motoko-chan> Check via MAC[07:34:41] <ScarEye> f3ew only have 1 cable[07:34:42] <Motoko-chan> Usually eth0 is the one with the lowest PCI ID.[07:34:51] <Motoko-chan> Although kernel 2.6 changes that.[07:35:45] <ScarEye> via MAC you mean open up the machine[07:35:56] <ScarEye> and look at the mac address written on it ?[07:36:03] <Motoko-chan> Yes.[07:36:13] <ScarEye> okay.. i thought there might have been a eaiser way[07:36:13] <Motoko-chan> Or as was said, play with the cable.[07:36:30] <Motoko-chan> Use ethtool to determine which one has signal up[07:36:35] <ScarEye> yea i know.. I can play with the cable.. thought there was an "eaiser" way.[07:36:40] <ScarEye> thx 4 ur helps guys[07:36:48] * ScarEye running back to server room[07:44:39] *** diveli has quit IRC[07:47:36] *** babu98488 has joined #postfix[07:48:02] <babu98488> hi[07:48:18] <babu98488> I have a small doubt on postfix can any body help me[07:51:53] <babu98488> how to redirect email bounce messages[07:54:05] <Werdna> did you check the manual?[07:55:04] <Motoko-chan> !basic[07:55:05] <knoba> Motoko-chan: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[07:59:46] <ScarEye> Motoko-chan: I don't know if you can do this with other distro's. But with CentOS ethtool -p eth0 <---- send power to ethernet interface and you see blinking lights.[07:59:57] <ScarEye> so cool[08:01:13] <babu98488> Knoba, Thanks for u r reply, I studied and give bounce_message_recipient = postmaster[08:01:31] <babu98488> and given notify_classes=bounce,[08:01:35] *** pickcoder has quit IRC[08:02:22] *** wolfe has joined #postfix[08:02:38] <babu98488> I want body of message should also be delivered to postmaster[08:02:51] <babu98488> how should i follow[08:02:54] <wolfe> I've been searching the manpages for a while now, I'm not sure what keyword I'm looking for. How can I make postfix send mail from a specific IP address?[08:03:25] <growltiger> !inet_interface[08:03:26] <knoba> growltiger: Error: "inet_interface" is not a valid command.[08:03:27] <growltiger> !inet_interfaces[08:03:28] <knoba> growltiger: "inet_interfaces" : a configuration parameter in the main.cf: The network interface addresses that this mail system receives mail on. By default, the software claims all active interfaces on the machine. The parameter also controls delivery of mail to user at [ip dot address]. If your server does not react to connection attempts on a certain interface you should check this setting.[08:04:12] <wolfe> growltiger: perhaps it is me, what if I set 127.0.0.1 in the list?[08:04:47] <wolfe> perhaps the mail is going out through the 127.0.0.1 port 25..[08:05:43] <babu98488> knob, 2bounce_notice_recipient=myemail at yahoo dot com will redirects bounce message with body of email ?[08:08:06] <wolfe> oop, that was it :)[08:08:58] <babu98488> I am new to postfix[08:09:01] <babu98488> 2bounce_notice_recipient=myemail at yahoo dot com will redirects bounce message with body of email ?[08:10:09] <f3ew> \no[08:10:20] <babu98488> what shall I do[08:11:05] <wolfe> that was a nice pebkac generatd problem of mine :)[08:11:18] <wolfe> growltiger: thanks anyway ;)[08:14:39] *** PhilKC has joined #Postfix[08:21:06] *** amrit|bbl is now known as amrit[08:21:45] <babu98488> f3ew: pls let me know[08:21:57] <babu98488> how shall I[08:22:26] <f3ew> babu98488, I am not sure if Postfix does that[08:23:14] <babu98488> f3ew : please let me know how shall i redirect bounce messages with body of letter[08:27:59] <babu98488> f3ew pls guide regarding that[08:31:39] *** aozturk has quit IRC[08:44:46] *** milligan has joined #postfix[08:44:59] <milligan> Is there any limit to the amount of subfolders one can have on an IMAP server?[08:45:16] <sep> milligan, read the docs or ask the forums of your imap server[08:45:53] <babu98488> milligan: how shall i redirect bounce messages with body of letter[08:47:03] <milligan> babu98488, good question.[08:47:48] <babu98488> Pls let me know Mr. Milligan[08:48:46] <babu98488> I studied http://www.postfix.org/BASIC_CONFIGURATION_README.html but not getting to do so[08:48:51] <milligan> babu98488, What's your exact problem? You want to redirect emails with a spesific body to a given email ?[08:49:52] <babu98488> mr. Milliga, mails which are sent from our server to customer if customer is not existed that will bounce to server, I want to redirect those messages to 1 at yahoo dot com with body of email[08:51:36] <babu98488> I am given bounce_notice_recipient=postmaster in main.cf and give alias for postmaster in /etc/aliases like: postmaster: 1 at yahoo dot com. I am getting only header and subject. I want to get also body of bounced message[08:52:16] <milligan> That's the way I was going to suggest you do it :-\[08:52:39] <babu98488> Thanks , I am getting only header & subject but not getting body of email[08:53:04] <babu98488> How should I configure postfix, so that it should send body of email[08:56:06] *** amrit is now known as amrit|zzz[09:03:21] <babu98488> any body know how to redirect bounce messages with body of letter[09:04:39] <babu98488> Mr. Milliga, pls tell me, shall we stop those bounce messages to not deliver to root user[09:10:46] *** Lap_64 has joined #postfix[09:12:05] *** Motoko-chan has quit IRC[09:12:27] <Signum> rob0: Let's just say I didn't like his sound. :)[09:13:28] *** Filbert has joined #postfix[09:14:42] <babu98488> sigunm[09:14:52] <babu98488> how to redirect bounce messages with body of letter[09:17:23] *** harobed has joined #postfix[09:21:40] *** ming_zym has quit IRC[09:24:13] *** cutmasta has joined #postfix[09:24:33] <babu98488> hi cutmasta[09:25:24] <babu98488> how to redirect bounce messages with body of letter[09:25:30] *** ming_zym has joined #postfix[09:36:04] *** Filbert has quit IRC[09:36:39] *** growltiger_ has joined #postfix[09:37:06] <babu98488> grwoltiger: how to redirect bounce messages with body of letter[09:39:10] *** ming_zym has quit IRC[09:39:10] *** cutmasta has quit IRC[09:39:11] *** rati has quit IRC[09:39:12] *** tolecnal has quit IRC[09:39:12] *** Casan has quit IRC[09:39:13] *** Mavvie has quit IRC[09:39:13] *** w0rd54 has quit IRC[09:39:13] *** lunaphyte_ has quit IRC[09:39:14] *** netcrash has quit IRC[09:39:14] *** whatever_ has quit IRC[09:39:14] *** hooch has quit IRC[09:39:14] *** Internat has quit IRC[09:39:14] *** lawnchair has quit IRC[09:39:17] *** confound has quit IRC[09:39:19] *** lunaphyte has quit IRC[09:39:20] *** tibyke has quit IRC[09:39:20] *** faitZ has quit IRC[09:39:21] *** ek has quit IRC[09:39:21] *** slimjimflim has quit IRC[09:39:22] *** megaTherion has quit IRC[09:39:22] *** eikke has quit IRC[09:39:22] *** em0ry has quit IRC[09:39:23] *** rob0 has quit IRC[09:39:23] *** _gAri- has quit IRC[09:39:23] *** SeJo has quit IRC[09:39:23] *** Radiance has quit IRC[09:39:23] *** karsten has quit IRC[09:39:23] *** dec has quit IRC[09:39:24] *** sb_ has quit IRC[09:39:24] *** Dominian has quit IRC[09:39:24] *** k31th has quit IRC[09:39:25] *** Tinozaure has quit IRC[09:40:56] <Signum> babu98488: are you applying for the PITA award? :)[09:41:15] <Signum> babu98488: are you getting backscatter or what's the problem?[09:41:26] <babu98488> Thank u signum[09:41:36] *** growltiger has quit IRC[09:41:50] *** _nalle has quit IRC[09:41:51] <babu98488> I want to redirect email bounce messages to 1 at yahoo dot com[09:41:58] *** _nalle has joined #postfix[09:42:03] <babu98488> with body of email[09:42:38] <Signum> why shouldn't the actual sender get the bounce? it's them who send the email that is undeliverable. you aren't spamming, are you?[09:42:54] *** Filbert has joined #postfix[09:44:05] *** ming_zym has joined #postfix[09:44:05] *** cutmasta has joined #postfix[09:44:05] *** rati has joined #postfix[09:44:05] *** tolecnal has joined #postfix[09:44:05] *** Casan has joined #postfix[09:44:05] *** Mavvie has joined #postfix[09:44:06] *** w0rd54 has joined #postfix[09:44:06] *** lunaphyte_ has joined #postfix[09:44:06] *** netcrash has joined #postfix[09:44:06] *** whatever_ has joined #postfix[09:44:06] *** hooch has joined #postfix[09:44:06] *** Internat has joined #postfix[09:44:06] *** lawnchair has joined #postfix[09:44:06] *** sb_ has joined #postfix[09:44:06] *** megaTherion has joined #postfix[09:44:06] *** ek has joined #postfix[09:44:06] *** rob0 has joined #postfix[09:44:06] *** dec has joined #postfix[09:44:06] *** slimjimflim has joined #postfix[09:44:06] *** Dominian has joined #postfix[09:44:06] *** eikke has joined #postfix[09:44:06] *** Tinozaure has joined #postfix[09:44:06] *** confound has joined #postfix[09:44:06] *** k31th has joined #postfix[09:44:06] *** faitZ has joined #postfix[09:44:07] *** lunaphyte has joined #postfix[09:44:07] *** Radiance has joined #postfix[09:44:07] *** karsten has joined #postfix[09:44:07] *** _gAri- has joined #postfix[09:44:07] *** SeJo has joined #postfix[09:44:07] *** tibyke has joined #postfix[09:44:07] *** em0ry has joined #postfix[09:44:13] <babu98488> I am redirected them to postmaster alias by giving bounce_notice_recipient=postmaster and notify_classes=bounce. I am getting only header and subject but not getting body of email.[09:44:48] <babu98488> I am new for postfix (working on mail server), I tried to find out in postfix.org but sol not found there.[09:45:07] *** needhelp has joined #postfix[09:45:32] <needhelp> Hi! I need your help. Iam collecting points in page listed below. If you be so kind, please click url below.(sorry for the spam, thank you) http://www.3dwhite.lt/?click=56a3cdcf22ccc7ab5f0a7f4d2bc900ff[09:45:33] <babu98488> I am not spamming[09:45:34] *** needhelp has left #postfix[09:47:10] <f3ew> babu98488, ask on the mailing list?[09:48:30] <babu98488> pls see the link I asked before 2 weaks ( http://groups.google.com/group/list.postfix.users/browse_thread/thread/33fdacad5b22644e/2f122e3dae231e8f)[09:48:46] *** Flawless_ has joined #postfix[09:51:30] *** PhilKC_ has joined #Postfix[09:52:43] <babu98488> Ans pls[09:54:02] <f3ew> and did someone answer you?[09:54:13] *** Predominant has joined #postfix[09:55:05] *** PhilKC has quit IRC[09:55:35] *** harpal_ has joined #postfix[09:55:44] *** PhilKC_ is now known as PhilKC[09:56:08] *** harpal has quit IRC[09:56:22] *** harpal_ is now known as harpal[09:56:56] *** hparker has joined #postfix[10:00:29] *** Flawless has quit IRC[10:01:23] *** war has joined #postfix[10:01:28] *** Filbert has quit IRC[10:05:23] <babu98488> f3ew no one answered me[10:06:03] <babu98488> I only found solution and posted there. But I am getting only header & subject but not body of mail[10:06:45] *** lysander has joined #postfix[10:09:09] *** bliss_ has joined #postfix[10:11:23] *** Predom[Work] has quit IRC[10:12:41] <Internat> is there a module or some mechanisim for postfix, that can make it authenticacate smtp against courier authdaemon[10:13:31] <f3ew> Internat cyrus-sasl[10:16:03] <bliss_> hi what does this mean smtpd_tls_auth_only = yes can clients still connect on port 25?[10:17:37] <bon> hi ;) i have inet_protocols=ipv4 set in main.cf, but still see postfix trying to connect to gmail for instance via ipv6 (which i don't have). any clue?[10:18:37] *** bliss_ has quit IRC[10:19:14] *** babu98488 has quit IRC[10:19:19] *** bliss_ has joined #postfix[10:20:14] *** Filbert has joined #postfix[10:22:08] <bliss_> ok i know if i set this in main.cf smtpd_tls_auth_only = yes that clients with tls connections can coonect on port 25, does this sound correct?[10:24:55] *** tarik has joined #postfix[10:25:18] *** hparker has quit IRC[10:30:44] <Roobarb-Work> http://www.postfix.org/postconf.5.html#smtpd_tls_auth_only[10:32:39] *** UQlev has joined #postfix[10:33:29] <bliss_> Roobart-Work; it says for default "no" do not announce or accept SASL authentication over unencrypted connections.[10:34:17] <bliss_> i thought that would have been an aswer yes? am i missing something[10:36:12] <Roobarb-Work> clients can connect on port 25 regardless of that setting[10:36:27] <Roobarb-Work> setting it to "yes" means you have to initialte TLS _before_ you can authenticate[10:38:12] <bliss_> Roobart-Work:so if i have tls certs installed in postfix all my clients use tls then yes is the best potion[10:38:24] <bliss_> option[10:39:35] <Roobarb-Work> correct[10:40:27] *** Filbert has quit IRC[10:42:14] *** Jax has joined #postfix[10:44:09] <bliss_> Roobarb-Work; thanks just one more point please smtpd_sasl_security_options = noanonymous what if this was set as "anonymouse"[10:46:45] <context> what if[10:46:52] <context> just correct it and reload postfix[10:47:19] <bliss_> context: i just wondering what the diffrence is?[10:47:37] <context> anonymouse != anonymous[10:47:45] <context> thats the difference[10:48:00] <context> noanonymouse postfix will probably ignore[10:48:04] <context> and take no effect[10:48:17] <context> though i thought postfix died when you did crap like that[10:48:20] <context> maybe i was wrong :x[10:49:48] <bliss_> i know what the word means, but just wonding how postfix uses the meaning[10:51:02] <context> you mean "anonymous"[10:51:07] <context> there is no anonymous setting[10:51:13] <context> http://www.postfix.org/postconf.5.html[10:51:30] <context> every possible setting is explained there. really a nice page to keep bookmarked[10:53:43] <bliss_> context: thanks[10:54:31] <bliss_> Robard-Work: thanks\[10:54:36] *** bliss_ has quit IRC[11:06:13] *** thermoman has joined #postfix[11:06:57] <thermoman> hi. i have many emails queued. which value do i have to raise so postfix tries to send out more emails quicker?[11:09:22] <f3ew> thermoman, why are they deferred?[11:09:23] <UQlev> thermoman: rise up your RA (Reading Activity)[11:12:29] <UQlev> thermoman: wiki: backscatter[11:13:40] *** PhilKC has quit IRC[11:15:48] *** Twinkletoes has quit IRC[11:15:56] *** jmazaredo has joined #postfix[11:16:23] <jmazaredo> should the smtpd.key be in postfix/sasl directory with smtpd.conf?[11:18:21] <thermoman> f3ew, uqlev: i don't know exactly why they are deferred, but i can see in mailq e.g.:[11:18:52] <thermoman> 56AAB178E30* 1627 Mon Nov 26 12:45:26 my at email dot tld recipient at domain dot tld[11:19:03] <thermoman> (in 2 lines)[11:19:22] <thermoman> so this email hasn't been tried to send to the recipient nor was there a problem[11:19:35] <thermoman> but it ins the queue for 2 days now[11:21:23] *** karsten_ has joined #postfix[11:21:24] *** karsten has quit IRC[11:21:33] *** cilly has joined #postfix[11:22:40] *** Internat has quit IRC[11:23:52] *** tolecnal_ has joined #postfix[11:24:23] <thermoman> f3ew: they are actually not deferred but in /var/spool/postfix/active[11:25:14] *** tolecnal_ has quit IRC[11:25:19] *** tolecnal_ has joined #postfix[11:29:36] *** tolecnal_ has quit IRC[11:29:43] *** tolecnal_ has joined #postfix[11:30:57] <thermoman> f3ew, uqlev: mailq|wc -l dropped from 13000 to 3000 some seconds ago[11:31:14] <thermoman> i don't know what caused this magnitude of active emails[11:31:27] <thermoman> now there is no one in active anymore[11:36:01] *** Internat has joined #postfix[11:38:47] <UQlev> thermoman: read log, investigate several in details[11:40:40] <UQlev> thermoman: no'one else can do it for you[11:40:43] *** tolecnal has quit IRC[11:40:52] *** tolecnal has joined #postfix[11:45:45] <thermoman> uqlev: logfile indicates it was deferred email caused by remote server not reachable. seems at the moment i checked and saw the hughe amount in active postfix tried another attempt.[11:46:03] <thermoman> at least from logfile it seems postfix tried each 2h or so to deliver[11:49:19] *** tolecnal_ has quit IRC[11:55:07] *** ming_zym has quit IRC[11:58:00] <UQlev> thermoman: did you read about backscatter?[12:00:12] *** dbaio has quit IRC[12:03:32] <UQlev> thermoman:Ruckstreuung[12:06:37] *** pitakill has quit IRC[12:06:53] *** meandtheshell has joined #postfix[12:09:48] *** evadave_ has joined #postfix[12:09:49] *** evadave has quit IRC[12:11:58] <jmazaredo> how can i get access on my mail server outside the lan using mail clients[12:12:18] <jmazaredo> i get a failed to connect error[12:12:48] <Signum> jmazaredo: ask your network administrator[12:12:57] *** phnord has joined #postfix[12:14:19] <jmazaredo> i mean i created 1, i can send receive mail from the server but out side of the lan (internet) cant[12:14:39] <jmazaredo> i have no firewall of any sort[12:14:55] <Signum> Is your server reachable from the internet? Is postfix listening on the correct interface?[12:15:07] <jmazaredo> ya services are up[12:15:49] <Signum> That isn't exactly answering it.[12:16:06] <jmazaredo> smtp pop3 and imap are all up[12:16:19] <jmazaredo> i got public ip also[12:16:32] <milligan> jmazaredo, if you're thinking about reading email and such using i.e outlook or thunderbird, you're going to need to support pop or imap. To support that, you need a thirdparty daemon.. i.e qourier, dovecot, etc etc.[12:17:07] <jmazaredo> i have those installed[12:17:08] *** wolfe has left #postfix[12:17:42] <jmazaredo> all i want is it to be accessible in other computer outside the local area network[12:18:27] <Signum> jmazaredo: Are the services listening on the right interfaces? Are the ports accessible from the internet (try with TELNET).[12:18:27] <e_> qourier?[12:18:54] <jmazaredo> i can telnet them in this machine but outside cant[12:19:03] <jmazaredo> i have no firewall of any sort[12:19:10] <Signum> jmazaredo: Are the services listening on the right interfaces?[12:19:35] <jmazaredo> u mean eth cards?[12:19:37] <UQlev> jmazaredo: send "netstat -an" output to pastebin.ca[12:19:40] <Signum> jmazaredo: Yup.[12:20:25] <Signum> jmazaredo: perhaps you access the server through another interface from the internet than from internal[12:22:11] <jmazaredo> http://pastebin.com/f5b67b355[12:22:37] <jmazaredo> my pc->router->internet[12:23:20] <jmazaredo> my router port forward port 110 143 and 25 to my pc[12:23:23] <UQlev> jmazaredo: it is missing top part[12:24:03] <jmazaredo> it overlaps X_X[12:24:39] <jmazaredo> cant scroll more at top[12:25:26] <jmazaredo> but i can receive/send mail on the outside world[12:26:48] <jmazaredo> is this wrong? mynetworks = 127.0.0.0/8[12:27:10] <UQlev> jmazaredo: who has entitled you be a sysadmin for postfix having no knowledge how to get full output?[12:27:48] * Signum smells smoke in this channel...[12:29:29] *** brancaleone has joined #postfix[12:31:07] *** ploploop has joined #postfix[12:31:30] *** flami has joined #postfix[12:45:25] *** manasu has joined #postfix[12:46:27] <manasu> how to configure postfix, so that root alias should not email bounce messages[12:47:01] *** flami has quit IRC[12:47:47] *** brancaleone has quit IRC[12:48:17] <manasu> how make postfix, so that root alias should not get email bounce messages[12:58:50] <Signum> do you have packet loss in your IRC client?[12:59:13] <Signum> how do you mean? root sends out an email but is not supposed to receive bounces?[13:01:45] *** Filbert has joined #postfix[13:02:48] <f3ew> setup an alias for root[13:03:26] *** UQlev has quit IRC[13:03:32] * Signum seems to have trouble deciphering questions today[13:06:45] *** ming_zym has joined #postfix[13:13:55] <manasu> I am so sorry, signum f3ew[13:14:40] <manasu> Signum: how do you mean? root sends out an email but is not supposed to receive bounces? yes[13:14:43] *** brancaleone has joined #postfix[13:15:42] <manasu> root sends out an email but is not supposed to receive bounces[13:18:52] <manasu> in /etc/aliases root is aliased to some at some dot com. Now, some at some dot com should not get bounce messages[13:20:04] *** slimjimflim has quit IRC[13:23:41] <Signum> manasu: Uhm... why not? Don't you want to notice if mails don't reach their intended recipients?[13:24:40] <manasu> I am already configured /etc/alias like following:[13:25:31] <manasu> double_bounce_sender=postmaster[13:25:31] <manasu> bounce_notice_recipient=postmaster[13:25:31] <manasu> delay_notice_recipient,=postmaster[13:25:31] <manasu> double_bounce_sender=postmaster[13:25:31] <manasu> error_notice_recipient=postmaster[13:25:31] <manasu> notify_classes = bounce, delay, policy, protocol, resource, software[13:25:50] <manasu> and aliased postmaster: oneperson at sify dot com[13:26:12] <manasu> oneperson at sify dot com will take care of bounce messages[13:26:13] *** cpm has joined #postfix[13:26:36] <e_> jesus[13:26:41][13:28:17] *** tolecnal_ has joined #postfix[13:30:13] *** ploploop has quit IRC[13:31:53] <Signum> manasu: you have put those settings into /etc/alias?[13:32:03] *** Twinkletoes has joined #postfix[13:32:17] <manasu> in /etc/postfix/main.cf[13:32:33] <Signum> manasu: better. but why don't you just forward root to oneperson at sify dot com?[13:33:28] <manasu> I am given[13:33:29] <manasu> vi /etc/postfix/main.cf[13:33:29] <manasu> double_bounce_sender=postmaster[13:33:29] <manasu> bounce_notice_recipient=postmaster[13:33:29] <manasu> delay_notice_recipient,=postmaster[13:33:29] <manasu> double_bounce_sender=postmaster[13:33:31] <manasu> error_notice_recipient=postmaster[13:33:33] <manasu> notify_classes = bounce, delay, policy, protocol, resource, software[13:33:35] <manasu> :wq[13:33:37] <manasu> vi /etc/aliases[13:33:39] <manasu> postmaster: oneperson at sify dot com[13:33:40] <e_> dude[13:33:41] <manasu> :wq[13:33:42] <e_> seriously[13:33:43] <e_> pastebin?[13:34:55] <manasu> bcoz, root will get some important information, where root is used by main admin, and postmaster alias is user by trainee[13:35:40] <manasu> oneperson at sify dot com is trainee, root is main admin.[13:35:45] <f3ew> ewwwwwwwwwww[13:37:00] <Dominian> that's.. nasty[13:38:06] *** tolecnal_ has quit IRC[13:38:28] *** tolecnal_ has joined #postfix[13:41:54] *** Bronsky has quit IRC[13:42:26] *** Bronsky has joined #postfix[13:42:41] <manasu> how shall i procedue[13:44:56] *** tolecnal has quit IRC[13:44:57] *** tolecnal_ is now known as tolecnal[13:46:13] <manasu> root should not get bounce message how to configure postfix?[13:46:22] <Signum> manasu: is the trainee in charge of postmaster mails? or don't you have a proper user account for him/her?[13:46:39] <Signum> manasu: root *should* get bounces for mails that root sent. sounds rather insane to bend that rule.[13:47:49] *** Bronsky has quit IRC[13:48:15] <manasu> yes one person look after bounce messages[13:48:46] <Dominian> er.. why? It almost sounds like you are over complicating things...[13:49:06] <manasu> how should I follow[13:50:13] <Signum> Just forward the "root" mail to both of you.[13:50:48] <manasu> root is sending mails. But root should not get bounce messages.[13:50:56] *** Bronsky has joined #postfix[13:51:08] <Signum> (sigh)[13:51:51] <manasu> Signum: u mean trainee at sify dot com & main_admin at somesite dot com ?[13:52:51] <Signum> I mean an alias "root: trainee at sify dot com, main_admin at somesite dot com"[13:53:04] <Dominian> root SHOULD get bounce messages for anything sent AS root[13:54:33] <manasu> Signum: if we give like that main_admin will get bounce messages,[13:55:05] <Signum> manasu: of course he will[13:55:08] <Dominian> no matter swhat you do.. root will get bounce messages for anything sent as root[13:55:32] <manasu> if we remove in /etc/aliases postfix: root # here if we remove root[13:55:50] *** bon has quit IRC[13:55:53] <Dominian> Yeah... you do that.[13:56:01] <Dominian> and your mailserver will be broken[13:56:03] <Dominian> :)[13:56:15] <Signum> wtf is "postfix" for a user account?[13:56:27] <Signum> It shouldn't get any mail anyway.[13:56:29] <manasu> oh, actually I am very new to mail server[13:56:29] <e_> 6[13:56:55] <Dominian> Signum: postfix: root is in the default /etc/postfix/aliases file that comes in the install[13:57:11] * Dominian has the same thing, but nothing goes to it.[13:57:13] * Dominian shrugs[13:57:22] <Dominian> Signum: its just the user that the 'postfix' install runs as[13:57:38] <Signum> Dominian: okay, seems not to be there in debian. just wondering what it would be good for. nobody would send to the user who "owns" the postfix processes.[13:57:46] <Signum> s/nobody/I/[13:58:11] <Dominian> I think its more of a "just in case" alias[13:59:14] <manasu> if there is not way to redirect bounce messages, the owner(main_admin ) will get all bounce messages which will be around hundreds per day.[14:00:09] <manasu> some times bounce messages will be thousands per day which have to be look after by main_admin.[14:00:39] <Signum> manasu: the "owner"? the sender of the email gets the bounces. or do you send mails as root? and why are there so many bounces?[14:01:26] <manasu> So one another issue, the messages which are been sent to trainee at sify dot com is having only headers & subject, how shall we configure postfix so that it also send body of email[14:02:28] <Signum> Why does this smell like we had this question today already from a babu98488...[14:02:47] <Signum> ...where f3ew told the very user to consult the mailing list...[14:03:14] <manasu> suppose one customer is registered with our server, after some time his email may not work. at that time , the mail which is sent by root will bounce[14:03:45] <Signum> A thousand customers lose their emails account every day? Wow. Do you work at Hotmail?[14:04:18] <tolecnal> aragh! don't mention the word 'Hotmail', I nearly chocked on my tea now... *sigh*[14:04:21] <manasu> I am not working at hotmail, Signum[14:05:00] *** baggles has joined #postfix[14:05:19] <Dominian> manasu: I'm not sure where you got your information.. but unless you are sending a thousand emails as root.. then you won't see bounce messages to root[14:05:28] <tolecnal> <- is not happy with Hotmail at all these days, seeing as they refuse to accept mail from one of my newly set up servers[14:05:29] <Dominian> manasu: The person sending the mail gets the boucne.[14:05:37] <baggles> using virtual mail boxes, ubuntu, what's the best way to automatically move X-Spam-Flag mail to a user's Junk folder system-wide automatically?[14:05:59] <Dominian> baggles: good question[14:06:28] <baggles> i've seen a few methods online. procmail per-user, and maildrop with something else[14:06:46] <Dominian> ah[14:06:51] * Dominian just lets the user do the filtering[14:07:11] <Dominian> doing per-user spam folders and you have thousands of email accounts... gets to be taxing/time consuming for the server ;)[14:07:22] <tolecnal> Dominian: the users has to do a bit of work themselves, aye?[14:07:35] <Dominian> That's right.[14:07:41] <Dominian> I do spam filtering..[14:07:44] <baggles> well, we have a catch-all box which collects inordinate amounts of spam[14:07:47] <Signum> baggles: procmail doesn't work for virtual users. use a virtual delivery agent like maildrop. dovecot and cyrus have their own VDAs, too[14:07:50] <manasu> Dominian : let us suppose root sent 50 mails per day if 20 mails bounced that will come to root alias, i made those mails should be send to trainee at sify dot com. And those bounce mails also going to root alias. what should i do to stop bounce for root[14:07:59] <Dominian> but automatically "store" and then drop the message if it is spam.. users have the ability of logging into a web interface to release falsely marked spam.[14:08:12] <Dominian> manasu: you can't[14:08:20] <Dominian> manasu: other than DON'T send emails as root[14:08:23] * Dominian shrugs[14:08:24] <baggles> yeah, i want to move it for fear of false-positives[14:08:27] <Dominian> that's your only other recourse.[14:08:53] <baggles> ok i'll have a look into maildrop i guess. i'm using courier-imap if that means anything, aswell.[14:08:56] <Dominian> baggles: well.. I'll probably get put on a hangman's noose for this, but I use Mailscanner coupled with spamassassin/mailwatch to do that for me[14:09:15] <Dominian> baggles: you can look into using something liek amavisd-new and mail zu[14:09:17] <tolecnal> my users love the new spam buttons I've set up in Squirrelmail.. at the press of a button, the spam mails that gets through gets sent to sa-learn for examination and over time reduces the spam even more. :)[14:09:23] <baggles> yeah, i have just configured spamassassin and it's got the headers nicely now. i have a big pile of training data for it :)[14:09:32] <manasu> Okay, Thank you Dominian[14:09:34] <Dominian> tolecnal: use bayes too if you don't already[14:09:41] <tolecnal> Dominian: of course[14:09:46] * Dominian nods[14:09:48] <baggles> i put my sa-learn spam/ham on the read mail messages of junk/inbox for everyone.[14:09:51] <Dominian> it makes a world of difference[14:10:05] <Dominian> shit.. gotta roll cigs then get to work..[14:10:07] <Dominian> back later[14:10:46] <jmazaredo> signum u there[14:13:06] <baggles> hum. i'm a bit worried about maildrop[14:13:33] *** andi__ has joined #postfix[14:16:53] <Signum> jmazaredo: sir, yes, sir[14:17:06] <Signum> baggles: I hate maildrop and it hates me. :) Dovecot handles that nicer. :)[14:17:21] * cpm asks maildrop if it hates Signum[14:18:16] *** maildrop has joined #postfix[14:18:20] *** maildrop has quit IRC[14:18:28] <Signum> mailrop: coward![14:20:22] *** phnord has quit IRC[14:20:53] <baggles> well, i'm just worried about destroying my virtual mail boxes[14:21:27] *** cpm is now known as maildrop[14:21:37] <baggles> i'm just a bit ... like... i dunno... why can't postfix do this itself? it seems like a fairly simple thing... i now have emails with a header, if it matches, but it in the .Junk instead of the inbox[14:21:40] <maildrop> have at you Signum![14:21:50] <maildrop> defend yourself![14:21:55] <Signum> baggles: why? maildrop handles the maildir format gracefully[14:21:56] <Signum> maildrop: eeeeeeeeeeek[14:22:07] *** maildrop is now known as cpm[14:22:16] <baggles> i have the difficult bit done. i have a bunch of stuff from postgres[14:22:20] <Signum> baggles: the "virtual" delivery agent built into postfix is too dumb for that.[14:23:19] <baggles> http://pastebin.com/m437e662b this is what i have now[14:24:28] <baggles> http://www.postfix.org/MAILDROP_README.html implies i should add virtual_transport = maildrop[14:24:36] <baggles> now that just sounds like it's going to break things[14:24:47] *** Bejgli has quit IRC[14:24:47] *** ruza has quit IRC[14:24:47] *** hal1on has quit IRC[14:25:53] *** ruza has joined #postfix[14:25:53] *** hal1on has joined #postfix[14:25:53] *** Bejgli has joined #postfix[14:27:04] *** rootsvr has joined #postfix[14:29:33] <baggles> oh wait. maybe courier-maildrop might be the answer....?[14:31:20] <f3ew> yes[14:37:10] *** rootsvr has quit IRC[14:43:07] *** wulfen has joined #postfix[14:50:28] *** sander_23 has joined #postfix[14:52:05] *** bengoa has joined #postfix[14:52:32] <sander_23> hello , how can i setup postfix to allow mail from a specific smtp server to a specific mail adres, so that no other smpt servers can send mail to that specific mail adres[14:53:33] *** pitakill has joined #postfix[14:55:48] *** rmayorga has quit IRC[14:55:58] *** UQlev has joined #postfix[14:58:27] *** bhagat has quit IRC[14:59:23] <bengoa> hi guys. anybody known if the transport_maps can be overrided with -o transport_maps on master.cf for other instances of smtpd?[15:05:14] <manasu> so, friends there is no any option for, postfix should not send bounces to root[15:05:59] *** Schmidt has quit IRC[15:06:04] <manasu> my boss told me that it will possible , I tried very very much. then I am taken that question here[15:06:52] <Signum> bengoa: yes, it can[15:09:57] <bengoa> Signum: tk you :)[15:10:21] <Dominian> manasu: Don't use root.[15:10:26] <Dominian> that's the only way bounces will not go to root[15:10:38] <Dominian> and bounces to root should only go back to root if root sent the message[15:12:35] <manasu> so there is no any chance or possiblities for root not to receive bounce if root send mails?[15:13:19] <Dominian> nope[15:13:33] <Dominian> what you want to happen is impossible unless you get rid of root all together[15:15:11] *** pitakill has quit IRC[15:15:14] *** Zborg has joined #postfix[15:16:52] *** Lap_64 has quit IRC[15:19:25] <Zborg> hellohi[15:19:26] <Zborg> hi[15:19:48] <Zborg> I have a problem with my configuration[15:20:26] <Zborg> I used to have another soft on my smtp relay, which postfix relayed the mail to for scanning[15:20:37] <Zborg> and I need to get this external soft out of the loop very fast[15:21:02] <Zborg> I removed the content_filter line but it doesn't seem to work :/[15:22:29] *** UQlev has quit IRC[15:23:58] <Zborg> should I comment another line than that ?[15:25:10] <Signum> Zborg: you better tell us what "doesn't seem to work" means[15:25:23] <Zborg> ah, sorry[15:25:45] <Zborg> I have all mail in queue with "can't connect to localhost" thing[15:26:08] <Zborg> (because I stopped the soft it used to relay to)[15:26:36] <Zborg> (connexion refused actually)[15:27:15] *** milligan has quit IRC[15:27:59] *** sander_23 has quit IRC[15:28:25] <Signum> Zborg: run "postsuper -r ALL"[15:29:14] <Signum> Zborg: The mails still in the queue have a memory of the content filter they were supposed to be sent to. With -r (requeue) you should get all mails (re)delivered with the new content_filter (=none) settings.[15:29:47] <Zborg> ok[15:30:00] *** rmayorga has joined #postfix[15:30:15] <Zborg> Signum: it worked[15:30:20] <Zborg> Signum: thanks a lot :)))[15:30:20] <Signum> Zborg: of course. :)[15:30:25] *** manasu0 has joined #postfix[15:30:30] <Zborg> I didn't know about the memory[15:30:40] * Zborg writes it down somewhere[15:30:41] <Signum> Zborg: I'm pretty sure it's undocumented magic.[15:30:51] <Zborg> ok[15:31:12] <Zborg> I was lucky you were looking at the channel then[15:31:15] <Zborg> thanks again :)[15:35:43] *** UQlev has joined #postfix[15:36:06] * cpm undocuments Signum[15:36:36] <f3ew> Signum, it's documented somewhere[15:36:52] <f3ew> the next hop is put in the queue file[15:38:11] <Signum> f3ew: Alright, alright... then it's at least unintuitive. :)[15:38:47] *** CyberScript32 has joined #postfix[15:38:57] <CyberScript32> oi[15:39:03] *** manasu0 has quit IRC[15:39:08] *** CyberScript32 is now known as hatoon[15:39:28][15:41:29] *** andi__ has quit IRC[15:41:32] *** hatoon has left #postfix[15:43:25] *** felix_da_catz has joined #postfix[15:50:38] *** duki has joined #postfix[16:03:04] *** manasu has left #postfix[16:03:28] *** _gAri- has quit IRC[16:06:20] *** rati has quit IRC[16:17:40] *** havvg has joined #postfix[16:33:00] *** dogwater has joined #postfix[16:33:02] <dogwater> Howdy sirs[16:33:08] <lucas2> does anybody know a way to make lucas at domain dot com go intro a virtual mailbox, but the catchall of domain.com be resent to a gmail address? I can't find a way to do this with virtual_alias_maps and virtual_mailbox_maps[16:34:31] <dogwater> I have a pretty well serious issue that I just recently started encountering where people are signing up for email accounts and then using them to deliver 250,000 spams in the span of about 2 hours[16:35:00] <dogwater> anyone know of a way to throttle how much mail folks can deliver per 24hours in postfix?[16:35:05] *** csm-laptop has joined #postfix[16:35:17] <cpm> dogwater, no worries, soon you will be blacklisted, and no longer a threat to us.[16:35:22] *** csm-laptop has quit IRC[16:35:42] <cpm> if you aren't already[16:35:53] <cpm> what kind of service do you run that is so spam friendly?[16:35:57] <dogwater> good thing i have over 256,000 public IP addresses...[16:36:03] <dogwater> but i'm trying to fix the problem[16:36:54] <dogwater> oh yeah, we're so spam friendly that we cancel over 3 million in revenue a year due to complaints our abuse department gets[16:37:10] <dogwater> actually thats probably tripled by now[16:38:00] <jduggan> dogwater: policyd.sourceforge.net[16:38:08] <jduggan> dogwater: are they sasl authed?[16:38:09] <rob0> That kind of revenue, and you're in IRC asking clueless questions?[16:38:10] <jduggan> or in mynetworks[16:38:19] <dogwater> jduggan: yeah its sasl[16:38:30] <jduggan> dogwater: throttle by sasl in policyd is what you want[16:38:39] <jduggan> you can throttle bandwidth and emails per time period[16:38:53] <jduggan> and/or[16:38:59] <dogwater> rob0: sorry I dont usually deal with our legacy dial-up network e-mail servers all that often[16:39:06] <cpm> rob0, did you expect anything else?[16:39:24] <cpm> policyd is a good place to start[16:39:30] <cpm> as a band-aide,[16:39:36] <cpm> but sounds like deep issues[16:42:35] <dogwater> jduggan: its kind of odd but in 13 years this is the first time someone has done this...[16:44:14] <cpm> dogwater, aren't you using postini?[16:44:36] <dogwater> cpm: sure, but postini does nothing for outgoing mail unless you're an enterprise[16:44:54] <cpm> you are controlling all that space, and you're not enterprise class?[16:45:01] <dogwater> we're an xSP[16:45:05] <cpm> hrmm, too bad. Was hoping they'd fix it for you[16:45:30] <dogwater> I can fix it, it just hadn't been on the map until recently, i've had other issues.[16:47:38] <baggles> hum.[16:47:45] *** duki has quit IRC[16:47:58] <baggles> procmail doesn't work with virtual boxes?[16:51:37] *** arsirc has joined #postfix[16:52:27] <cpm> baggles, nope.[16:52:51] *** arsirc has left #postfix[16:53:45] <Twinkletoes> Which value do I need to change to prevent mail bound for local domains from being routed to a 'relayhost'?[16:57:45] <jduggan> dogwater: we're a small ISP and we see it every day :P[16:58:48] *** [1]felix_da_catz has joined #postfix[16:59:03] <dogwater> jduggan: Ah, we were an ISP but we got pretty much destroyed out of that market by cable/dsl/wireless and jumped into hosting but we retain a rather well.. legacy i should say ISP style network[16:59:55] <dogwater> jduggan: and we generally dont much have to deal with the day to day ISP problems all that often these days as much anymore.[17:00:06] <dogwater> jduggan: we have all new problems[17:01:00] *** ming_zym has quit IRC[17:02:24] <jduggan> spam is an old problem[17:02:25] <jduggan> :)[17:03:51] <Twinkletoes> Found my answer... 'mydestination' ;)[17:04:28] *** lambda has joined #postfix[17:04:37] <dogwater> jduggan: true enough... and we have to worry about that alot but usually not so much on servers that we our selves administrate, most times someone else is responsible for the spam we just host the bos ;-)[17:04:56] <dogwater> err box and we just pull the plug and have to deal with the person shouting at us[17:05:03] <dogwater> over the phone[17:05:16] <dogwater> (on thanksgiving)[17:05:20] *** tolecnal_ has joined #postfix[17:06:03] *** Mr_Alex has joined #postfix[17:06:12] <jduggan> ouch?[17:06:13] <jduggan> :)[17:06:15] <dogwater> lol[17:06:24] *** ploploop has joined #postfix[17:06:31] <dogwater> and if its not the customer, its people from fiveten-sg, and spamhaus, so we get it from both ends[17:12:06] *** harpal has quit IRC[17:13:00] *** felix_da_catz has quit IRC[17:16:37] *** wulf1 has joined #postfix[17:18:01] *** Remowylliams has joined #postfix[17:18:30] <Remowylliams> Hello everyone. How do I force qmgr to try to send deferred mails?[17:18:50] *** Babydock has joined #postfix[17:19:53] *** tolecnal has quit IRC[17:19:54] *** tolecnal_ is now known as tolecnal[17:19:55] *** wulfen has quit IRC[17:21:13] *** rawb has joined #postfix[17:22:58] *** brancaleone has quit IRC[17:23:04] *** Babydock has left #postfix[17:23:05] *** evadave_ is now known as evadave[17:24:38] <UQlev> Remowylliams: make sure that those deffered are deliverable[17:27:27] <Remowylliams> UQlev: The situation is the server was using a milter when these messages were trying to go through. I since have removed the milter and new messages are going through but these are not. They are suspended pending delivery to 127.0.0.1[17:28:16] *** cutmasta has quit IRC[17:28:59] *** Internat has quit IRC[17:29:06] *** Internat has joined #postfix[17:29:50] *** [1]felix_da_catz has quit IRC[17:29:59] *** j_s has joined #postfix[17:31:23] *** rmayorga has quit IRC[17:32:33] *** jmazaredo_ has joined #postfix[17:33:03] *** rmayorga has joined #postfix[17:33:14] *** Flawless_ has quit IRC[17:34:33] *** jmazaredo has quit IRC[17:36:19] *** prebur has quit IRC[17:38:11] <rawb> I tried putting "root: myemail at domain dot com" in /etc/aliases thinking any mail for root would go to my real email account insead of the local box, but it doesn't appear to work - it still goes to the local mbox on the system. do I have to do anything special to make it work?[17:38:28] <the1d> newalises[17:38:48] <the1d> run that command in order to update the binary alias-file[17:39:04] <the1d> then reload postfix, so it sees the updated binary alias-file[17:39:23] <the1d> then it should work (it does so for me and the ~30 odd machines I'm admin'ing)[17:39:57] *** Mr_Alex has quit IRC[17:40:08] <the1d> also read the top 6-7 lines of /etc/aliases - the directions I've just told you SHOULD be there too..[17:41:30] *** pitakill has joined #postfix[17:43:44] <baggles> i don't understand how something so simple can get so complicated.[17:44:14] *** rob0 has quit IRC[17:44:59] *** orzel has joined #postfix[17:45:34] <orzel> hello. i have those messages : Nov 28 17:42:30 verdi postfix/smtpd[8435]: warning: 88.246.198.13: hostname dsl88-246-50701.ttnet.net.tr verification failed: Name or service not known[17:45:43] <orzel> i guess (hope) there's a rule to refuse this kind of mail.[17:45:58] <orzel> but i'm a little confused with smtpd_recipient_restrictions options[17:46:06] *** pitakill_ has joined #postfix[17:46:45] <orzel> i alrady have this : http://freehackers.pastebin.com/m45314faf[17:47:01] <orzel> do you know which rule i could add to refuse such obvious spam ?[17:47:20] <orzel> (or btw, if you have any comments on my smtpd_recipient_restrictions, i'll be happy to hear those)[17:47:24] *** Chris-NB has joined #postfix[17:55:26] *** harobed has quit IRC[17:55:43] <rob0_> baggles, you chose virtual mailboxes. Why do you think that should be simple?[17:56:42] *** darkphader has joined #postfix[17:58:25] <rob0_> orzel, you followed an outdated HOWTO and did so without researching the lists. Some are dead, some are not safe for typical use.[17:58:48] <orzel> i guess the information i used was up to date[17:58:51] *** rmayorga has quit IRC[17:58:54] <orzel> but i didn't check recently[17:59:11] *** prebur has joined #postfix[17:59:15] *** rmayorga has joined #postfix[17:59:20] *** ploploop is now known as brancaleone[17:59:27] <rob0_> !zen[17:59:27] <knoba> rob0_: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL[17:59:45] <rob0_> ^^ there's your best bet, and you're only using sbl-xbl.[18:00:17] <orzel> ok.[18:00:28] <rob0_> Line 13 should reject the warning you pasted.[18:00:37] <orzel> only the rbl/rhsbl seem bogus to you ?[18:01:19] <orzel> rob0_: i kind of thought it should. I did "postfix reload" after adding it, but maybe it wasn't enough and I should restart postfix ?[18:01:20] <rob0_> Nothing that I see structurally wrong, just that you're trusting some unsafe lists.[18:01:30] *** pitakill has quit IRC[18:03:18] <rob0_> You have a log of mail being queued from an unknown client hostname like 88.246.198.13?[18:04:32] <rob0_> You are doing a check_client_access lookup, poorly named "access.sender"[18:04:47] <orzel> i can change the name :)[18:05:22] <orzel> yes the mail from unknown client hostname was queued. (and identified as strong spam)[18:06:39] *** felix_da_catz has joined #postfix[18:07:23] <orzel> i'm trying to understand the difference from reject_rbl_client and reject_rhsbl_client from http://www.postfix.org/uce.html[18:07:44] <orzel> one deals with the network and one with the host ?[18:08:00] <rob0_> and that's outdated too[18:08:03] <rob0_> !access[18:08:03] <knoba> rob0_: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server.[18:08:24] <orzel> i had done a search on postfix main page ..[18:09:01] <rob0_> those are the old docs, left up for reasons as noted on each old page.[18:10:01] <rob0_> To understand RBL vs. RHSBL, you need to know what each does. RBL lists IP addresses, RHSBL lists domain names.[18:10:10] <orzel> those rules dont appear on your page.[18:10:55] <rob0_> Follow the links into postconf.5.html, and you'll find them all listed.[18:11:02] *** baggles has quit IRC[18:11:05] <rob0_> (the new names and old names)[18:11:34] <felix_da_catz> What ramnifications are there for setting reject_unknown_helo_hostname? Is it common for people to not have their hostnames set?[18:11:53] <rob0_> felix, fairly common, unfortunately.[18:12:20] *** Remowylliams has left #postfix[18:12:25] <rob0_> A lot of small business sites are likely to fall in that category.[18:12:43] <rob0_> A lot of MSexChange sites, regardless of size, too.[18:12:44] <felix_da_catz> humm. That sucks. Because we deal quite a bit with small companies.[18:13:31] <felix_da_catz> Wow, what a surprise. Small things like that can make a big difference.[18:13:34] <dogwater> rob0_: in the case of Exchange usually the ehlo is their internal hostname like ex07.ad.forest9.denver.us.ops77.etc.etc.etc.[18:13:35] <rob0_> But reject_non_fqdn_helo_hostname is pretty safe.[18:13:51] <felix_da_catz> ok cool. Fair enough.[18:14:07] *** hemry has joined #postfix[18:14:08] <rob0_> Right, they tend to keep those things behind firewalls.[18:14:11] <orzel> rob0_: it says more or less the same as on the first page. with sbl-xbl.spamhaus.org i should use which one then ??[18:14:33] <felix_da_catz> Safer than reject_unknown_help_hostname?[18:14:40] <rob0_> Zen made a huge difference for me, but it's up to you. :)[18:14:47] <felix_da_catz> s/help/helo[18:14:54] <rob0_> felix, yes[18:15:08] <felix_da_catz> Zen, is that a suggested configuration for postfix?[18:15:58] <felix_da_catz> or that is a rbl server prefix.[18:17:08] <rob0_> !zen[18:17:08] <knoba> rob0_: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL[18:17:26] <rob0_> It's also a religion and way of life. ;)[18:19:44] *** prebur has quit IRC[18:19:59] <orzel> rob0_: i've added reject_rbl_client zen.spamhaus.org, and reject_rhsbl_client zen.spamhaus.org,[18:20:01] <dogwater> Anyone here been running policyd for any amount of time have a sec to answer a real brief query?[18:21:31] <dogwater> I guess i'm trying to figure out the optimal time to insert it into my smtpd_recipient_restrictions i notice where i have it now it isn't checking mail my own users are sending out which is easily explained...[18:22:03] <dogwater> i suppose I should do that before I allow sasl and mynetworks?[18:30:01] *** Chris-NB has quit IRC[18:31:24] *** hparker has joined #postfix[18:33:57] <dogwater> ah I think i got it[18:35:40] <rob0_> orzel, Zen is NOT a RHSBL[18:36:48] *** rootsvr has joined #postfix[18:37:39] *** rob0_ is now known as rob0[18:40:39] <dogwater> Now to do that on a production mail server.. (yikes)[18:43:22] <orzel> rob0: ok, i remove it.[18:43:27] <orzel> (thanks!)[18:44:05] <dogwater> hrm someone just asked me to change the version of gcc on a box for them because they didnt like that version[18:44:26] <dogwater> preventing millions of spam vs 'i dont like that version of gcc...'[18:46:58] *** pitakill_ has quit IRC[18:48:17] *** rob0_ has joined #postfix[18:49:06] *** sepski has joined #postfix[18:50:39] *** pitakill_ has joined #postfix[18:57:10] <orzel> Nov 28 18:50:49 verdi postfix/smtpd[26820]: 0A0603A11D: client=unknown[189.13.128.233] <-- is it possible to reject those mails ? is it safe ?[18:57:17] <orzel> i expected "reject_non_fqdn_hostname" to do the trick[18:58:38] <orzel> (as a side effect of reading the doc, i change it to reject_non_fqdn_helo_hostname, but still, the old keyword should be recognised)[18:58:53] <rob0> reject_non_fqdn_hostname is a DEPRECATED restriction which refers to the helo.[18:59:55] <rob0> reject_unknown_client_hostname ... use _client_ restrictions to apply to client names.[19:01:07] <orzel> i have reject_unknown_client_hostname, but in smtpd_recipient_restrictions. i wonder why.[19:01:22] <rob0> wonder why what[19:01:57] <orzel> why it's in smtpd_recipient_restrictions. and not smtpd_client_restrictions[19:02:18] <rob0> easier?[19:02:31] <orzel> it should still work ?[19:02:36] <rob0> I did not tell you to use smtpd_client_restrictions[19:03:16] <rob0> I told you that *_helo_* restrictions do not apply to client names.[19:03:25] <orzel> mmh. ah. ok. So why do I still have postfix not reject "client=unknown" messages ?[19:03:39] <orzel> (rob0: i got the point with helo)[19:04:20] <rob0> Well, back to whenever ago, I pointed out you had a check_client_access lookup. What does it do?[19:05:15] <orzel> it's a whitelist of some IP from which i always accept mails from.[19:05:34] <orzel> (few ones that aren't on my local network)[19:05:39] *** jra has joined #postfix[19:05:52] <rob0> pastebin your "postconf -n"[19:06:08] <orzel> ok[19:07:30] *** rob0 is now known as rob0__[19:07:45] *** rob0_ is now known as rob0[19:08:06] <orzel> reject_unknown_client_hostname is listed in smtpd_client_restrictions (default: empty) on http://www.postfix.org/postconf.5.html#smtpd_client_restrictions. Does it mean i NEED to use it in smtpd_client_* ? CAN I use it within smtpd_recipient_restrictions ?[19:08:12] <orzel> rob0 : postconf : http://freehackers.pastebin.com/m1c794fe0[19:18:18] <dogwater> rob0: Hm. do you think from a policy stand point its better to say 1000/24hr or like 50/hr for max number of messages sent per day?[19:18:23] <rob0> 189.13.128.233 is not in access.sender ? Then I don't know. Maybe time for verbose logging. :([19:19:35] <orzel> nono, of course not[19:19:51] <orzel> i know the ip in this files[19:19:56] <orzel> the IPs[19:19:59] <rob0> dog, I guess I would look at legitimate use patterns. You can always tell your policyd to tempfail anything suspicious.[19:20:53] <dogwater> rob0: bunch of residential dial-up folks shouldn't be sending out over 1000/day i'm just trying to prevent any sort of payloading thats why i thought maybe 50/hr would be better[19:24:49] <cpm> I like the 50/hr[19:24:54] *** Jax has quit IRC[19:25:01] <orzel> rob0 : i've moved the "reject_unknown_client_hostname" to "smtpd_client_restrictions" as the documentation seems to suggest (even though not really clear neither)[19:25:25] *** zamolxes has joined #postfix[19:26:50] <zamolxes> hello. I made a stupid mistake, I (temporarely) commented out an antivirus in amavis' conf and I just noticed the mailq contains a shitload of "Error in processing, id=09997-04, virus_scan FAILED: virus_scan: ALL VIRUS SCANNERS FAILED: " errors. I fixed the conf and restarted postfix, can I do something about the mails in the queue? thanks[19:26:54] *** oates has joined #postfix[19:27:46] <zamolxes> postfix was in this state for 2-3 hours now..[19:28:05] <orzel> no, it doesn't work neither :( : "Nov 28 19:26:59 verdi postfix/smtpd[28194]: connect from unknown[203.82.23.48]"[19:30:35] *** shinao1 has joined #postfix[19:32:05] <orzel> Nov 28 19:31:24 verdi postfix/smtpd[29015]: NOQUEUE: reject: RCPT from unknown[89.128.189.150]: 450 4.7.1 Client host rejected: cannot find your hostname, [89.128.189.150]; from=<atulxiaogang1 at faxsav dot com> to=<XXXXX> proto=ESMTP helo=<89.128.189.150>[19:32:35] <orzel> aha! i put the option in both, and restarted postfix.[19:32:46] <orzel> and now it works[19:33:15] *** shinao1 has quit IRC[19:36:36] *** amrit|zzz is now known as amrit|wrk[19:39:25] *** shinao1 has joined #postfix[19:40:14] *** x-spec-t has quit IRC[19:40:17] *** Lucky7 has joined #postfix[19:40:20] <Lucky7> Hey everyone[19:40:36] <Lucky7> I'm trying to do some research into what to install for a scanner program on my postfix relay machine[19:40:47] <Lucky7> I'm pretty much down to Amavisd-New, and MailScanner[19:43:30] *** lambda has quit IRC[19:44:29] *** lambda has joined #postfix[19:47:38] * hparker would recommend going with amavisd-new[19:50:53] *** shinao1 has quit IRC[19:52:35] <tolecnal> amavisd-new is good, by all means... but it would be so much better if I found out what's causing these RBL plugins to time out on DNS requests[19:52:38] <tolecnal> *sighs*[19:52:50] <tolecnal> sorry, just had to vent of some frustration there[19:53:40] *** baggles has joined #postfix[19:54:28] <hparker> tolecnal: Is the DNS server in your LAN? Is it under other loads?[19:55:02] *** shinao1 has joined #postfix[19:55:27] <tolecnal> hparker: the DNS server is local, and not by any means under heavy load. it resolves two to four addresses, and then just times out on the rest.[19:55:48] <tolecnal> hparker: did some digging around, and found a bug report -> http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5589[19:56:07] <tolecnal> hparker: applied the patch without errors, and that just changed the error messages :P[19:56:16] <tolecnal> hparker: still the same issue[19:56:41] <hparker> tolecnal: When SA is timing out do lookups still work for other apps fine?[19:57:05] <tolecnal> yeah, lookups for every other application on the box works fine[19:57:22] <tolecnal> which is what is so strange[19:57:44] <hparker> Is the system under a load? swapping?[19:58:02] *** bengoa has left #postfix[19:58:20] * hparker remembers that discussion in the sa-users list... Never ran into it though[19:58:23] <tolecnal> no swappig taking place, loads < 0.15 at all times[19:58:44] <tolecnal> errr, s/swappig/swapping/[19:59:35] *** shinao1 has quit IRC[19:59:45] <hparker> No clue, might ask on the sa-users list[20:00:03] *** ejovrh has quit IRC[20:00:43] <tolecnal> yeah, I will if my requests over at #sa doesn't yield any results[20:01:03] *** ejovrh has joined #postfix[20:05:19] <tolecnal> anyway, thanks for your interest on the matter :)[20:05:49] *** rafailowski has joined #postfix[20:11:44] <hparker> np.. I know how irritating it is when it's some off the wall problem like that[20:18:51] <tolecnal> I was so happy when I found that patch and it applied nicely, but even more dissapointed when it didn't really change anything. Apart from a rewrite of the error messages :/[20:19:56] *** jra has left #postfix[20:21:47] <dogwater> bah, this user has 19gb of mail on this system and he's never logged in with pop/imap with dovecot[20:22:01] <dogwater> @domain.com user[20:22:08] <dogwater> i'm changing all of the passwords[20:23:17] <tolecnal> 19gb? either his/her friends are keen on sending large attachments, or he/she is subscribed to a _lot_ of mailing lists[20:23:27] <dogwater> Oh no... it accepts * at domain dot com[20:23:45] <dogwater> sigh[20:23:46] <tolecnal> ah, a catch all :P[20:24:32] <dogwater> jeez[20:25:31] <dogwater> im pretty sure dovecot would do something bad if he pop'd into this box[20:36:35] *** UQlev has quit IRC[20:45:59] *** orzel has quit IRC[20:46:09] *** cilly has quit IRC[20:50:15] *** rawb has left #postfix[20:54:42] *** cilly has joined #postfix[20:58:07] *** Spec has joined #postfix[20:59:03] *** duki has joined #postfix[21:00:29] *** rootsvr has quit IRC[21:13:22] *** traxx has quit IRC[21:13:31] *** traxx has joined #postfix[21:18:59] <dogwater> neato, having to login to this box made me notice one of the drives in my mirror has failed and the 3ware never emailed me...[21:19:04] <dogwater> classic 3ware :D[21:20:13] <sepski> dogwater, blame the admin. works for me :P[21:22:43] *** orzel has joined #postfix[21:22:58] <orzel> is it difficult/dangerous to upgrade from postfix-2.4.5 to 2.3.6 ?[21:23:06] <orzel> mm, the other way around :)[21:23:12] <orzel> 2.3.6 to 2.4.5[21:54:57] *** lambda has quit IRC[21:55:36] *** cpm has quit IRC[21:55:38] *** lambda has joined #postfix[21:56:21] *** WindBack has joined #postfix[21:56:32] *** tolecnal_ has joined #postfix[21:57:02] *** havvg has quit IRC[21:57:55] <WindBack> If I put in my bind @ IN TXT "v=spf1 mx ~all" is correct ??[21:59:10] <WindBack> considering that the mail server of my domain (the charged in my MX register) is the server who sends the mail ??[21:59:11] <Signum> Should be okay. Although I'm not a fan of ~all but always use -all[21:59:56] <WindBack> Signum, what is the diference ??[22:00:34] <Signum> ~all doesn't mean much except a "soft-fail". the destination mail server can decide what to do. usually it's used for spam scoring.[22:01:00] <Signum> All mails from your addresses but not your MX server would have to be rejected.[22:01:52] <WindBack> Signum, ok thank[22:02:35] <WindBack> Signum, Does the MX register have to be first in the zone files of my bind, or is the same ??[22:03:30] <Signum> Hmm? If you use "v=spf1 mx -all" then emails send from your domain are only valid if they are sent from any of the servers listed as MX servers for your zone.[22:03:39] <Signum> Or what do you mean by "first"?[22:06:23] <WindBack> Signum, ok, perfect, now I understand[22:09:12] *** orzel has quit IRC[22:14:38] *** oates is now known as oates|zzzZ[22:15:37] *** tolecnal has quit IRC[22:15:37] *** tolecnal_ is now known as tolecnal[22:20:36] *** duki has quit IRC[22:20:47] *** duki has joined #postfix[22:23:54] *** WindBack has quit IRC[22:27:08] *** pitakill has joined #postfix[22:31:41] *** UQlev has joined #postfix[22:33:20] *** karsten_ is now known as karsten[22:34:26] *** diveli has joined #postfix[22:38:13] *** meandtheshell has quit IRC[22:38:20] *** Tonnerre has joined #postfix[22:44:31] *** Zeit|awy_ has joined #postfix[22:48:42] *** UQlev has quit IRC[22:50:07] *** githogori has quit IRC[22:50:58] <Tonnerre> How would I go upon if I want to forward all mails to a certain domain to a different host, which is _not_ the primary MX of the domain?[22:51:34] <Tonnerre> The problem is: I am moving all domains to a new MX but one of the domains cannot be modified yet because the registrar is stupid[22:51:45] *** Zeit|awy has quit IRC[22:52:01] <Tonnerre> And I want Postfix on the old server to simply redirect all the mails to the other host. Kindof like a mail proxy.[22:52:09] <Signum> !transport_maps[22:52:10] <knoba> Signum: "transport_maps" : a configuration parameter in the main.cf: Optional lookup tables with mappings from recipient address to (message delivery transport, next-hop destination). See transport(5) for details.[22:52:13] <Tonnerre> I'm not quite sure what to look for there though[22:52:14] <Tonnerre> Ah, thanks[22:52:36] *** tris has quit IRC[22:52:40] *** Spec is now known as x-spec-t[22:53:24] *** duki has quit IRC[22:59:12] *** Lucky7 has quit IRC[23:06:11] *** sepski has quit IRC[23:12:03] *** kreg_lt has joined #postfix[23:14:00] <felix_da_catz> I am trying to get TLS setup and I am getting an error that Postfix cannot access the private key file. I am not sure if I encrypted it or not. How can I check?[23:14:53] <felix_da_catz> I guess the fact that it has Proc-Type: 4,ENCRYPTED at the top tells me what I need to know.[23:15:15] <Signum> felix_da_catz: Yup. Save it non-encrypted and off you go. :)[23:15:48] <felix_da_catz> Cool. thanks. I just found out how to decrypt it. :-)[23:20:29] <felix_da_catz> crap. so like a moron I forgot the darn password. This is for one I purchased as well. Oh well.[23:21:15] <Signum> Brute force... :)[23:26:07] <felix_da_catz> :-) Humm. Sounds like fun.[23:27:29] <felix_da_catz> Got a script for that? :-)[23:28:07] <Signum> Any script I could think of would probably not get the passphrase before the certificate is expired...[23:28:34] <felix_da_catz> Well, the password is not that long really. At most it would be around 15 characters.[23:29:19] <felix_da_catz> If I could just figure out to pass the password to the openssl program, then it should be pretty easy to try and brute force it. :-)[23:30:38] <Signum> felix_da_catz: If your passphrase is 15 chars lang and consists of digits or letters then you had to run 2*10^23 attempts. Is that what you mean by "pretty easy"?[23:33:47] <felix_da_catz> exactly. :-)[23:33:50] *** tarik has quit IRC[23:33:58] <felix_da_catz> It is a pretty fast machine.[23:34:11] <sysmonk> ummm[23:34:17] <felix_da_catz> Dual dual core 3.8's in there with 4 gigs of memory.[23:34:23] <felix_da_catz> :-)[23:34:26] <sysmonk> Signum: why's that 2*10^23 ?[23:34:39] <felix_da_catz> NOw if I could just thread the script.[23:35:34] <sysmonk> 10 digits + 26 letters and +26 if case sensitive[23:35:50] <sysmonk> so 36^15 or 56^15[23:35:57] *** j_s has quit IRC[23:36:44] <sysmonk> felix_da_catz: it would only take few dosen years, don't worry :)[23:36:51] *** blackwire83 has joined #postfix[23:37:33] <felix_da_catz> Nah. I have done it before. Not a SSL cert, but still. Depends on how fast the machine is really. The largest I have cracked was 12 chars though, not upper and lower. :-)[23:37:37] *** Tonnerre has left #postfix[23:37:56] <blackwire83> Hi there. I wonder how to forward mail to an address to i.e. my gmail account. All I find in google is relay stuff. And virtusertable second column mail addy does not work[23:37:57] <sysmonk> that's if not counting special chars ;)[23:37:59] <felix_da_catz> Oh well, the 20 bucks for a new cert from Godaddy is probably easier.[23:38:42] <sysmonk> felix_da_catz: sure, i can give you my encrypted root password and not change it for a year :P[23:39:10] <felix_da_catz> Might be easier to run a dictionary attack on there I guess.[23:39:24] <sysmonk> not really :)[23:39:33] <felix_da_catz> :-)[23:39:40] <felix_da_catz> Well, on my password atleast.[23:40:38] <felix_da_catz> Considering I used upper/lower digits and special chars most likely. Fairly easy to guess with my normal scheme.[23:42:32] *** prebur has joined #postfix[23:42:41] <sysmonk> yeah, that like ... atleast 86^15 o_O :)[23:47:29] <blackwire83> who in here forwards his mail using postfix?[23:48:18] <sysmonk> blackwire83: virtusertable should work[23:48:27] <sysmonk> works for everyone else, atleast :)[23:48:55] <blackwire83> like localuser my at gmail dot com ?[23:49:29] <sysmonk> no[23:50:04] <blackwire83> how?[23:50:13] <blackwire83> can you give me a sample line?[23:51:08] <sysmonk> depends if you're using it in virtual or local setup[23:51:21] <blackwire83> virtual[23:51:31] *** snearch has joined #postfix[23:51:32] <sysmonk> if you're using local then localuser my at gmail dot com should work, if defined in ALIAS file[23:51:42] <sysmonk> if virtual - then localuser at domain dot com my at gmail dot com[23:51:49] <blackwire83> ah ok[23:51:57] <blackwire83> why might this line not work?[23:51:59] <sysmonk> and don't forget to postmap the file[23:52:18] <sysmonk> or postalias, if you're using local and defining it in aliases file[23:53:15] <blackwire83> how do I figure which setup local or virtual i use?[23:53:31] <sysmonk> ask your sysadmin :)[23:54:22] <blackwire83> ;-)[23:55:47] <magyar> hi, i am looking into setting up a global contact ldap server, what solutions are the most common?[23:56:33] <blackwire83> cool it works[23:56:36] <blackwire83> thanks sysmonk[23:57:19] *** blackwire83 has left #postfix