[00:04:55] *** cva has joined #postfix [00:06:55] *** jra has quit IRC [00:12:21] *** unsolo_ has joined #postfix [00:13:04] *** Zblakany has quit IRC [00:19:55] *** havvg has quit IRC [00:23:44] *** UQlev has quit IRC [00:27:50] *** unsolo has quit IRC [00:32:04] *** cilly has quit IRC [00:42:57] *** githogori_ has joined #postfix [00:47:13] *** anaX has joined #postfix [00:48:48] *** cpm has quit IRC [00:49:27] <anaX> i need to choose beteween postfix and qmail to build a mail server with 1000 accounts, i think postfix is the best way, am i right? [00:50:34] <cafuego> i think your main choice is bakend - ie pop or imap server and storage type. frontend would be much of a muchness. [00:51:36] <cafuego> that said, postfix is nice so why *not* use it, eh :-) [00:52:11] <anaX> ok, i'm planning to use dovecot and maildir format, the big problem is that i need migrate from mdaemon....... [00:52:37] * cafuego doesn't know what mdeamon is [00:53:05] <anaX> mdaemon is a windows based mail server [00:53:17] <cafuego> Ok. does it support imap? [00:53:32] <anaX> yes [00:53:36] <anaX> imap and pop [00:53:43] <cafuego> then imapsync can migrate your data. [00:54:10] <cafuego> provided you have alist of accounts and passwords, you can script that and let it run for however long it needs. [00:55:29] <anaX> ok, but impasync migrates accounts only? [00:57:27] <cafuego> it migrates email only, you'll need tyo set up accounts before you can migrate data. [01:01:13] *** pirho has joined #postfix [01:01:56] <cafuego> you'll probably havean centralised auth server though, right? ldap or AD? [01:04:55] <anaX> why? [01:06:26] *** sweeed__ has quit IRC [01:07:27] <cafuego> anaX: Because you have 1000 users? You don't have a system somewhere that holds acct info so you need not keep it all in sync on multiple servers? [01:09:58] <anaX> i think they dont have it [01:10:57] <cafuego> eep [01:10:59] <anaX> the server owners call me to migrate that server, and i have seen that AD or LDAP are not implemented [01:11:06] *** UzLinux has quit IRC [01:13:16] *** pitakill has quit IRC [01:13:17] <cafuego> anaX: if you want more work from thm, i think you should perhaps suggest it will make their lives easier in the long run [01:15:55] <anaX> in this moment the migration is critical, and it must ejexecute in the minor time [01:18:23] *** lawnchair has quit IRC [01:18:39] *** ChrisC35 has joined #postfix [01:18:40] <ChrisC35> I have a mailer app that sends out emails, and it cannot send emails to anyone at a domain for a site that is also hosted on the same server. I don't understand why. [01:23:51] *** anaX has quit IRC [01:27:35] *** war9407 has quit IRC [01:30:33] <xentrac> ChrisC35: is it possible that the server is behind a NAT and so cannot connect to its public IP address? [01:31:42] <cafuego> xentrac: If it's configured to handle that domain it shouldn't be connecting out at all. What is the error as listed in `mailq' ? [01:32:34] <xentrac> cafuego: you'll have to ask ChrisC35; it's his problem, not mine :) [01:32:49] <cafuego> Oh, soz :-) [01:32:57] <cafuego> ChrisC35: ^^ [01:33:17] <ChrisC35> em i'll have to try to check [01:34:56] <ChrisC35> mailq didn't list it [01:35:14] <xentrac> the mails just bounce, rather than sitting in the queue for days? [01:36:44] <ChrisC35> i'm not sure, I am sending from my php app.. perhaps i should check the php error log [01:36:56] <cafuego> No, check the mail log [01:37:01] <ChrisC35> it sends all mails , except for any at this domain [01:37:03] <ChrisC35> mail lok ok [01:37:06] <ChrisC35> er log [01:37:07] <cafuego> See if they arrived at all, and if so, what happened to them [01:37:22] <cafuego> If they never even arrived, you check php :-) [01:37:45] <xentrac> i'm no expert with php; do you think it might be doing direct smtp sending instead of using the MTA? [01:38:27] <ChrisC35> i believe they dont get sent out at all [01:39:25] <ChrisC35> the php app writes this to the screen: Mailer Error: Language string failed to load: recipients_failed ... [01:39:36] <ChrisC35> thats just a general error [01:46:33] <ChrisC35> I dont see them in the mail queue [01:46:43] *** linkslice has quit IRC [01:50:53] *** cva has left #postfix [01:59:11] *** Fallenou has quit IRC [02:08:57] *** Knoedel2 has quit IRC [02:22:30] *** Mavvie has joined #postfix [02:23:55] *** pirho has quit IRC [02:29:38] *** LMJ has quit IRC [02:31:01] <ChrisC35> where can I look to see SMTP error log? [02:35:01] <Mathman> yikes. would the following be a valid email address? Kazumi_Yamazaki/HRA/ASC/HONDA%HRDAM at honda dot th.com [02:42:11] *** ming_zym has joined #postfix [02:45:32] <googlah> Hehe, I would not think so. [02:45:45] <googlah> But I can't say for sure.. never seen a /. [02:51:10] *** lunaphyte_ has quit IRC [02:53:19] <Mathman> kinda off topic, but I don't suppose I'd be able to send an image using the mail command? or would there be anything on the command line that I could automate like mail, but to send an image? [02:53:52] <Mathman> I mean, I already tried cat'ing the image to mail, but it turns up as junk on the receiving end [02:57:02] *** hever has quit IRC [03:00:37] *** lawnchair has joined #postfix [03:01:07] <ChrisC35> anyone have any ideas - I have a php app that sends mails (using phpmailer) its givng an error, and does not seem to send at all, any mails to the domain of one site that I am hosting on the same server [03:01:47] <ChrisC35> there is no php error and the mail does not appear in the send queue, and does not appear in the bounces [03:01:56] <Mathman> hmm, nail is what I needed apparently [03:08:40] *** rgl has quit IRC [03:13:29] *** Zelest has quit IRC [03:13:35] *** Zelest has joined #postfix [03:19:57] *** Dieu has joined #postfix [03:20:21] <Dieu> hi, what is the paramether I have to tun to permit postfix to dispach its mail queue more quickly [03:23:01] *** frogduster has joined #postfix [03:25:55] *** jonez has joined #postfix [03:26:00] <frogduster> I am looking to aggregate mail from a few local systems onto one centralized system. I would like to be able to send from those hosts as though each account had a .forward file in its home directory; e.g., on the receiving end, mail would be To:User@sendinghost, but would be delivered to User@receivinghost. [03:26:01] <jonez> greetings [03:26:08] <frogduster> Your help is appreciated. :-) [03:26:32] <jonez> frogduster: I did something like that by hooking pgsql into postfix [03:27:21] *** martianixor has joined #postfix [03:27:25] <jonez> I think you need to set up a "virtual alias map" [03:27:39] <jonez> you can do it with plaintext files or hook it up to a db [03:28:30] <frogduster> virtual alias map? Sounds promising. A virtual alias map would deliver user@host1 to user@host2, retaining the To: field of user@host1? [03:30:18] <frogduster> ooh.. host2 is running a different mail server. [03:30:43] *** Led-Hed has joined #postfix [03:32:31] <jonez> frogduster: virtual_alias_maps let me create a mailbox such as "abuse at example dot com" and forward it to "some.other.place at example dot com" (or, off the domain if I want) [03:32:32] <Led-Hed> When I send mail it takes 5-10 sec for the mail client to connect to postfix, Any ideas [03:32:41] <jonez> Led-Hed: dns troubles? [03:32:56] <jonez> check the load on the client and the server, see if it is "unusually" high. [03:32:58] <Led-Hed> jonez, I dont think so. What might I look for? [03:33:08] <Led-Hed> everything seems to resolve fine [03:33:13] <jonez> try to resolve a hostname to an ip address, see if it takes a while or not [03:33:25] <Led-Hed> jonez, via ping? [03:33:33] <jonez> nah, use 'dig' or 'host' [03:33:38] <Led-Hed> k [03:33:43] <jonez> that might not be it, but it is something to look at [03:34:58] <Led-Hed> seemed quick. Query Time: 45 msec [03:35:17] <Led-Hed> status: NOERROR [03:39:54] <frogduster> Thanks, jonez. [03:40:03] <frogduster> :-) [03:41:20] <Led-Hed> jonez, what kind of DNS issues would cause slow connections? Other than not being able to resolve [03:44:49] <Dieu> any method to dispach in a more quickly the queue? [03:45:08] *** Led-Hed has quit IRC [03:45:38] <donspaulding> how can I find out how many emails are in the queue? [03:46:47] <mwalling> !mailq [03:46:48] <knoba> mwalling: "mailq" : used to display mail currently in the postfix queues. To remove or requeue mail from the queues see the postsuper(1) command. [03:51:40] <ChrisC35> ok i found a better error msg [03:52:18] <ChrisC35> May 8 18:37:42 kermit postfix/smtpd[7878]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 550 5.1.1 <joeblow at somewhere dot com>: Recipient address rejected: User unknown in virtual alias table; f$ [03:52:45] <ChrisC35> the issue: I have a php app that sends mails (using phpmailer) its givng an error, and does not seem to send at all, any mails to the domain of one site that I am hosting on the same server [03:53:32] <donspaulding> mwalling: thanks. [03:54:54] <ChrisC35> why does the email have to be in the virtual alias table? [03:55:07] <ChrisC35> is it because the domain is on the server, so it is expecting that mail is on the server too? [03:58:31] <jonez> you need to configure postfix to handle all domains/mailboxes that would not normally be obvious (like if mail.example.com needs to handle mail for example.com, postfix ships with a "good enough" setup, at least in the distro i use) [03:59:50] <jonez> the fix to your issue is prolly simple-- modify the virtual alias table to have an entry (or a catch-all [04:00:02] <jonez> for the mailbox in question, sig-hup postfix, test again. [04:05:06] <_dida_> hi all [04:05:24] <_dida_> i'm having problem with relaying domains [04:06:28] <ChrisC35> thanks i'll try fixing that [04:06:31] <_dida_> i did input the mynetworks [04:06:36] <_dida_> to my own network [04:06:58] <_dida_> but from the log i can see everyone can send email through my postfix [04:07:04] <_dida_> what should i check? [04:07:50] <ChrisC35> the virtual alias table is /ect/postfix/virtual right? [04:08:05] <RainDoctor> yes [04:09:00] <ChrisC35> jonez what would I map from too? [04:09:36] <jonez> hmm.. lemme see if I can find a readme [04:10:20] <ChrisC35> lets say the domain is wazoo.com and the email in question is bob at wazoo dot com (there are several actually) [04:11:22] <ChrisC35> would I have an entry that was: bob at wazoo dot com bob at wazoo dot com [04:13:28] *** c0m has joined #postfix [04:22:39] *** ma3x has quit IRC [04:22:39] *** ma3x_ has joined #postfix [04:22:53] *** ma3x_ is now known as ma3x [04:23:40] *** Acustic has joined #postfix [04:25:54] <ChrisC35> jonez? [04:28:42] <Dominian> !virtual [04:28:43] <knoba> Dominian: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html [04:29:56] <Acustic> !alias [04:29:57] <knoba> Acustic: Error: "alias" is not a valid command. [04:31:02] *** jalexand has joined #postfix [04:31:23] <jalexand> Is it possible to force Postfix to use a specific interface in a multi interface system [04:33:57] *** c0m- has joined #postfix [04:34:35] <Dominian> yes [04:34:48] <Dominian> inet_interfaces [04:35:14] <jalexand> umm I tried that [04:35:26] <jalexand> that only seems to affect where smtp bind to for inbound connections [04:36:02] <Dominian> how did you specify it? [04:36:03] <Dominian> what was your syntax? [04:37:00] <jalexand> inet_interfaces = 208.84.148.213, localhost [04:37:14] <jalexand> I think what I'm looking for is smtp_bind_address [04:37:17] <rob0> Postfix cannot override the OS routing tables. [04:37:52] <Dominian> er.. [04:37:58] <Dominian> smtp_bind_address is usually used in master.cf... [04:38:09] <Dominian> to bind the smtpd listening socket iirc [04:38:22] <rob0> smtp_ <== no "d" [04:38:35] <rob0> otherwise right [04:38:52] <rob0> typically it might be used for a specific outbound transport [04:39:02] <Dominian> er.. yeah [04:39:03] <Dominian> smtp [04:39:19] <jalexand> yea what I have is a VPS with two interfaces [04:39:39] <jalexand> I want all the mail to exit via the second interface because that the one list as my MX record [04:39:54] <jalexand> because the mail is leaving the first Yahoo is complaining [04:40:15] <rob0> You won't fix your yahoo delays. Those will continue. [04:40:33] <Dominian> yahoo is a bitch taht way [04:40:34] <jalexand> umm [04:40:40] <Dominian> You'll always get delays with them at one point or another. [04:40:52] <Dominian> They will suddenly start deferring all of your email [04:40:57] <Dominian> and then the next minute.. allow it through [04:41:04] <jalexand> well it can't hurt to make my mail look like it's coming from where it should be [04:41:07] <rob0> unless you want to try to get on their whitelist [04:41:13] <jalexand> k [04:49:20] *** Zeit|awy_ has joined #postfix [04:51:31] *** c0m has quit IRC [04:51:57] *** Motoko-chan has joined #postfix [04:52:17] *** Acustic has quit IRC [04:56:49] *** Dieu has quit IRC [04:56:54] *** Zeit|awy has quit IRC [05:00:47] <Darkclaw> is there any way to mimic MS Exchange with Postfix + Dovecot? [05:01:12] <donspaulding> what's the best way to make sure my postfix server is relaying mail? [05:01:24] <donspaulding> (besides sending an email through it) [05:02:21] <donspaulding> Darkclaw: maybe you want Zimbra? [05:02:33] <checkers> Darkclaw: mimic what in particular? [05:02:50] <Darkclaw> having the server storing and performing mail rules [05:03:11] <checkers> then, "yes" [05:03:43] <Darkclaw> how/where? [05:04:47] <checkers> can you be more specific about your needs? [05:05:04] <checkers> you can check most parts of the message at many parts in the processing chain [05:05:13] <Darkclaw> not check [05:05:24] <donspaulding> he means the way Outlook/Exchange store user-created filters on the server [05:05:27] <Darkclaw> store and perform mail rules on the server end [05:05:55] <Motoko-chan> procmail? [05:06:03] <Darkclaw> something that is UI based? [05:06:10] <rob0> No, procmail requires thought [05:06:20] <Motoko-chan> procmail + squirrelmail plugin? [05:06:40] <checkers> I've heard people say sieve is nice [05:06:42] <Motoko-chan> http://www.squirrelmail.org/plugin_view.php?id=210 [05:07:26] <Darkclaw> a way to be able to say if it is from a particular sender, to be placed in a specific folder [05:07:43] <hparker> IMAP and local rules in the MUA [05:08:15] <Darkclaw> MS Outlook Express and Windows Live doesn't allow local rules with IMAP [05:08:34] <rob0> But just hope that in your quest to reinvent MSexChange, that you don't do it as poorly as MS did. [05:08:44] <Motoko-chan> There is always Zimbra. [05:08:59] <rob0> hparker: beer time! [05:09:01] <Motoko-chan> Darkclaw, Outlook Express / WIndows Mail is crap [05:09:08] <Darkclaw> why do you think it is better for the client to do it instead of the server? [05:09:08] * hparker joins rob0 [05:09:33] <checkers> none of the solution mentioned above do it on the client side afaik [05:09:39] * Motoko-chan doesn't drink alcohol, but has a tea instead [05:09:41] <checkers> I've not looked at zimbra though [05:09:41] <hparker> mine did :P [05:09:44] <donspaulding> hparker's does [05:10:24] <Motoko-chan> Zimbra is nice. It uses Postfix, MySQL, SpamAssasin, etc. [05:10:35] <Motoko-chan> With a ton of yummy glue to make it function well. [05:10:37] * hparker doeesn't mind client side filtering and IMAP... Hates web apps [05:12:03] <rob0> Really only the server can do the most effective filtering: block the known-spamming IP addresses. No way that can be done client-side. [05:13:14] *** donspaulding has quit IRC [05:13:15] <checkers> my clients at least can read headers which specify where the mail came from [05:13:33] <Motoko-chan> checkers, that's more than the average [05:13:56] <checkers> clients = programs, I meant [05:14:15] * checkers points at the Recieved header [05:14:48] <Motoko-chan> Ah. [05:14:52] <Motoko-chan> Thought you meant people. [05:14:58] *** Flimzy has quit IRC [05:15:51] *** m0f0x has joined #postfix [05:18:14] <ChrisC35> I'm getting an error in mailog: ...Recipient address rejected: User unknown in virtual alias table; f$ - the issue is I am sending mail from an app, but address to one domain dont get sent, that domain happens to be to a site hosted on the same server [05:18:30] <ChrisC35> what is wrong? [05:22:55] *** elmarian6 has joined #postfix [05:23:02] <elmarian6> hello [05:23:37] <elmarian6> can i prevent a mail for going to deferred queue ? [05:24:04] *** Bogaurd has joined #postfix [05:24:09] <checkers> ChrisC35: exactly what is told in the message [05:24:27] <checkers> elmarian6: ask the recipient server very nicely to not rejectit with a 4xx code [05:25:09] <elmarian6> couse im having problems with yahoo delivery [05:25:53] <elmarian6> im the admin of a university, we send with mailman newsletters and they get deferred due user complaints [05:26:13] <elmarian6> its pretty annoing [05:26:19] <checkers> so why are you asking us? [05:26:54] *** seekwill has joined #postfix [05:26:56] <checkers> if you send large mail volumes through yahoo and many other large services they have magical forms you can fill out so that stops happening (or at least happens less) [05:26:58] <elmarian6> couse the mail is not going to the deferred queue after that. it get bounced to user's mailbox [05:27:09] <elmarian6> yes, i did [05:27:28] <elmarian6> i fill that forms, but it tseems that the problem is back again [05:27:48] <hparker> yahoo is a pita [05:28:11] <seekwill> And you STILL get spam in your yahoo box... Grrrr [05:28:38] <hparker> hehe [05:31:57] <rob0> !unknown_virtual [05:31:57] <knoba> rob0: "unknown_virtual" : \"User unknown in virtual $X table\" means that the recipient domain was found in $virtual_$X_domains but the username@domain was not found in $virtual_$X_maps. ("$X" can be either alias or mailbox .) [05:32:00] *** jalexand has left #postfix [05:32:20] <rob0> elmarian6, yahoo deferrals lie about that [05:32:21] *** smultron has joined #postfix [05:32:51] <smultron> is there a limit to how many users an alias can redirect to? [05:32:51] <rob0> My Mailman with exactly 8 yahoo's on it gets deferred for "complaints". [05:33:18] <elmarian6> rob, but your deferrals goes to deferred queue ? [05:33:35] <rob0> where would you suggest they go? [05:34:23] <hparker> over there --------------> [05:34:24] <elmarian6> couse in this server, i dont get that mails in the deferred queue, so im thinking that the previous admin deactivates the deferred queue for performance reasons [05:34:53] <elmarian6> is it possible to stop messages going to deferred queue ? [05:35:24] <rob0> elmarian6, dig into the source code, have fun. [05:36:10] <checkers> maaybe you can set the queue to /dev/null [05:36:12] *** keff has joined #postfix [05:36:26] <rob0> Oh there's a fine idea. [05:36:38] <rob0> Performance++ [05:36:43] <rob0> Reliability-- [05:37:38] <hparker> whee [05:37:43] * rob0 pours hparker a shot of cheap Russian vodka [05:38:03] * rob0 slips a few drop into Motoko-chan's tea [05:38:04] <hparker> mmmmm... sour tator mash [05:38:36] <rob0> Naah, I wouldn't do that to you [05:39:45] * Motoko-chan is too perceptive for that to work [05:39:57] *** bhagat has joined #postfix [05:40:04] *** kk_CHN has joined #postfix [05:41:09] <rob0> I do have some gourmet teas here, remnants of my last long hotel stay. [05:42:22] *** martianixor has quit IRC [05:42:48] <Motoko-chan> Bags? [05:43:07] *** Bogaurd_ has quit IRC [05:43:49] <rob0> yes, the individual foil packets [05:44:20] <checkers> foil?! [05:44:30] <Motoko-chan> Bags != gourmet [05:44:39] <elmarian6> its strange, couse instead of getting mails in the deferred queue, they came back to user's mailbox [05:44:41] *** seekwill has quit IRC [05:44:46] <checkers> leaves are for hippies [05:44:52] <elmarian6> any clues [05:44:52] <elmarian6> ? [05:45:02] <Motoko-chan> checkers, no, they are for snooty people [05:46:24] <hparker> elmarian6: It'd help if you pastebin the logs for a problem email [05:47:07] <checkers> Motoko-chan: what do you use then? [05:47:30] <Motoko-chan> I'm a snob. That means whole leave. [05:47:31] <Motoko-chan> leaf [05:48:17] * hparker prefers his leaves rolled [05:50:16] *** seekwill has joined #postfix [05:51:07] <rob0> with papers? :) [05:51:42] *** keffer has quit IRC [05:53:02] *** keff has quit IRC [05:53:09] *** keffer has joined #postfix [05:53:57] <hparker> ;) [05:54:30] <Motoko-chan> I've not had Earl Grey though. [05:54:39] <checkers> hippy [05:54:42] <Motoko-chan> I have moved on to Sencha and other tastes. [05:54:47] <checkers> err, really? it's a pretty common tea >_> [05:55:00] <Motoko-chan> Well, lately. [05:55:11] <Motoko-chan> I'm into greens lately. [05:55:25] <Motoko-chan> Moved from dragonwell to sencha. [05:55:53] <Motoko-chan> Although the Spring 2008 Darjeelings look nice... I might buy them for some black tea. [06:00:36] * checkers just has teabags like a sensible person [06:02:27] <Motoko-chan> Bags are evil. [06:02:37] <Motoko-chan> Try whole leaf and you probably couldn't go back. [06:02:50] <checkers> I have many times [06:03:01] *** FallOnMe has joined #postfix [06:04:13] *** jelly has quit IRC [06:05:15] * Motoko-chan shrugs [06:05:58] <checkers> generally only green tea though [06:14:38] <frogduster> g'nite. [06:14:41] *** frogduster has quit IRC [06:23:46] <xentrac> okay [06:23:47] <xentrac> so [06:23:54] <xentrac> i have our milter working [06:24:15] <xentrac> the current code is http://pobox.com/~kragen/tmp/minimilter.py.html [06:24:44] <xentrac> it's a tenth the size of libmilter, in terms of lines of code to worry about [06:25:19] <xentrac> also something like a quarter of the functionality [06:27:48] *** saurabhb has joined #postfix [06:30:45] *** _dida_ has quit IRC [06:31:39] *** googlah has quit IRC [06:37:49] <ChrisC35> checkers you still here? [06:38:17] <checkers> maybe [06:42:26] <ChrisC35> ok in responce to your responce to my questions.. [06:42:45] <ChrisC35> <ChrisC35> I'm getting an error in mailog: ...Recipient address rejected: User unknown in virtual alias table; f$ - the issue is I am sending mail from an app, but address to one domain dont get sent, that domain happens to be to a site hosted on the same server [06:42:45] <ChrisC35> <ChrisC35> what is wrong? [06:42:53] <ChrisC35> <checkers> ChrisC35: exactly what is told in the message [06:44:20] <ChrisC35> May 8 18:37:42 kermit postfix/smtpd[7878]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 550 5.1.1 <name at url dot com>: Recipient address rejected: User unknown in virtual alias table; f$ [06:46:41] *** amrit|wrk is now known as amrit [06:53:23] *** smultron has quit IRC [07:00:59] *** yajith has joined #postfix [07:06:04] <elmarian6> guys, the problem was that maximal_queue_lifetime was set to 0 [07:06:09] <elmarian6> thanks! [07:15:20] *** m0f0x has quit IRC [07:27:42] *** donspaulding has joined #postfix [07:29:12] <donspaulding> hello all, my MTAs are acting flaky. I'm getting a connection timed out while trying to telnet into them, although everything on the server looks peachy from the console. Any ideas on troubleshooting connection timeouts? [07:46:20] *** hparker has quit IRC [07:51:03] *** Zelest has quit IRC [07:51:13] *** Zelest has joined #postfix [07:59:54] *** mikong has joined #postfix [08:07:54] *** xpoint has quit IRC [08:08:01] <checkers> ChrisC35: name at url dot com doesn't exist in the virtual alias table [08:11:54] *** descala has joined #postfix [08:16:31] *** descala has quit IRC [08:18:07] *** shinao1 has joined #postfix [08:20:05] <ChrisC35> checkers - why should it? [08:20:17] <ChrisC35> why does it have to? [08:21:19] <cafuego> ChrisC35: the system thinks it's handling mail for 'url'.com' and thus tries local delivery. [08:21:42] <cafuego> ChrisC35: However, it can't find a mailbox for `name' and so fails. [08:25:42] *** stony_ has joined #postfix [08:27:20] *** phnord has joined #postfix [08:27:40] *** stefan-f has joined #postfix [08:28:00] *** elmarian6 has quit IRC [08:32:52] *** kk_CHN has quit IRC [08:33:20] *** bhagat has quit IRC [08:38:07] <ChrisC35> checkers i setup the site with virtualmin, and it sets up an admin email by defautl. I guess it assumes you will have mail for that domain on the server. What does it setup then that I need to change? there is no mail for this domain on this server at all. I need to send mails frmo the server, but their mail is handled by another server altogether [08:42:36] *** stony has quit IRC [08:43:48] <ChrisC35> cool i disabled mail for the domian in vmin, and it didnt give the error anymore on send [08:44:55] *** Motoko-chan has quit IRC [08:47:15] *** syneus has joined #postfix [08:53:18] *** syneus has quit IRC [08:54:50] *** bhagat has joined #postfix [08:55:08] *** kk_CHN has joined #postfix [08:56:53] *** syneus has joined #postfix [08:57:45] *** syneus has quit IRC [08:58:08] *** syneus has joined #postfix [09:02:45] *** madrescher has joined #postfix [09:03:34] *** rgl has joined #postfix [09:11:09] *** descala has joined #postfix [09:12:43] *** linkslice has joined #postfix [09:13:50] *** CrazyFoam has joined #postfix [09:15:52] *** dida has joined #postfix [09:17:07] *** ChrisC35 has quit IRC [09:21:07] *** madrescher has quit IRC [09:21:08] *** Tex-Twil has joined #postfix [09:22:16] *** shinao1 has quit IRC [09:31:15] *** loddafnir has joined #postfix [09:34:50] *** Zelest has quit IRC [09:35:03] *** Zelest has joined #postfix [09:46:16] *** jacek has joined #postfix [09:46:57] *** anebi has joined #postfix [09:47:04] <anebi> hi all [09:47:40] <dragonheart> hi on behalf of all [09:48:19] <anebi> i need little bit help and info for a problem, i get in the mail logs records like Protocol violation and too many smtp connections when our user send messages to web.de account. how can i solve these things? [09:48:24] <jacek> is it possible to use postfix to send one message per recipients [09:48:37] <anebi> i tried some things, but these doesn't help [09:50:24] <dragonheart> its a concurent connection thing? [09:50:40] *** magyar has quit IRC [09:51:14] *** havvg has joined #postfix [09:51:31] <anebi> i have set this in main.cf like this: borked_destination_concurrency_limit = 1 and borked_destination_recipient_limit = 5 [09:51:56] *** Zelest has quit IRC [09:52:41] <anebi> where borked is in transport file like this: web.de borked:web.de [09:55:06] *** harobed has joined #postfix [09:57:38] *** shinao1 has joined #postfix [09:58:13] *** war9407 has joined #postfix [10:01:42] *** felix_da_catz has joined #postfix [10:15:49] *** kk_CHN has quit IRC [10:16:27] *** bhagat has quit IRC [10:22:13] *** ma3x has quit IRC [10:22:17] *** ma3x_ has joined #postfix [10:22:47] *** pvh_sa|wrk has quit IRC [10:22:50] *** ma3x_ is now known as ma3x [10:26:40] *** linkslice has quit IRC [10:27:01] *** rootsvr has joined #postfix [10:30:09] *** Pazzo has joined #postfix [10:34:14] *** shinao1 has quit IRC [10:35:02] *** Zelest has joined #postfix [10:35:44] *** felix_da_catz has quit IRC [10:40:54] *** rgl has quit IRC [10:52:38] *** amrit is now known as amrit|zzz [10:53:24] *** kk_CHN has joined #postfix [11:01:15] *** suuuper has joined #postfix [11:10:17] *** nfi|ermes has joined #postfix [11:12:55] *** rgl has joined #postfix [11:15:19] *** jeffspeff has quit IRC [11:15:33] *** jeffspeff2 has joined #postfix [11:15:48] *** oxtail has joined #postfix [11:20:05] *** YOMMCC has joined #postfix [11:20:36] <YOMMCC> You do not believe that is not afraid, afraid you can not see . http://freedom.ws/yomgdi [11:22:14] *** kloeri has joined #postfix [11:23:22] *** YOMMCC has left #postfix [11:23:49] *** stefan-f has quit IRC [11:36:28] *** pa has joined #postfix [11:42:17] *** Tjikkun_work has joined #postfix [11:45:03] *** piquadrat has joined #postfix [11:46:57] *** phnord has quit IRC [11:47:59] *** FallOnMe is now known as jelly [11:51:59] <piquadrat> Hi! I followed a HOWTO (https://help.ubuntu.com/community/PostfixCompleteVirtualMailSystemHowto) for setting up postfix with mysql. But when I try to connect via telnet to the server, the server dies. Here's the log: http://pastebin.com/d20fde9ff. My main.cf: http://pastebin.com/m3341547b and master.cf: http://pastebin.com/d68780e88 [11:52:47] <jacek> May 9 11:48:59 littleds postfix/smtpd[7022]: fatal: need service transport:endpoint instead of "inet" [11:52:50] *** wdp has joined #postfix [11:54:26] *** Tex-Twil has quit IRC [11:54:42] <piquadrat> jacek: oh, thanks, should have posted the actual error message myself. Google finds nothing relevant when searching for that message [11:56:09] *** pkhamre has joined #postfix [11:57:52] *** rootsvr has quit IRC [11:58:40] *** hever has joined #postfix [12:04:26] *** cilly has joined #postfix [12:04:35] *** hever has quit IRC [12:05:44] *** Tex-Twil has joined #postfix [12:06:33] *** donspaulding has quit IRC [12:06:50] *** sv-- has quit IRC [12:08:14] *** sv-- has joined #postfix [12:08:17] *** mikong has quit IRC [12:10:42] *** pirho has joined #postfix [12:14:00] <piquadrat> no ideas? [12:21:16] *** kloeri has left #postfix [12:22:34] *** donspaulding has joined #postfix [12:24:33] <donspaulding> I need help. My MTAs are hanging on 'telnet localhost 25' DNS is fine, shouldn't be a firewall, lookups run fine with postmap. Anyone got any ideas? [12:30:25] *** alex12 has quit IRC [12:31:14] <war9407> donspaulding: did it work before when did it stop working [12:31:19] <war9407> donspaulding: did you try restarting postfix [12:31:23] <war9407> donspaulding: mailq shows how many messages in the queue [12:31:37] *** anebi has quit IRC [12:31:37] *** alex12 has joined #postfix [12:32:10] <donspaulding> war9407: I'm running ubuntu server 8.04, which was recently upgraded from ubuntu 7.04. The old version worked, the new one doesn't [12:32:37] <war9407> so before upgrade -> work [12:32:41] <war9407> after upgrade -> does not work [12:32:44] <donspaulding> right [12:32:48] <war9407> donspaulding: what does tail -n 500 /var/log/mail.log say? [12:33:17] *** rootsvr has joined #postfix [12:33:55] <donspaulding> a lot of activity, I think it's actually getting mail through, but telnet and netcat both timeout waiting for the connection [12:34:09] <war9407> what does mailq say? [12:34:13] <war9407> how many are queued? [12:34:16] <war9407> df -h [12:34:17] <war9407> df -i [12:34:20] <war9407> ytop [12:34:21] <war9407> top [12:34:24] <donspaulding> (I run several of the daemons with -v, so there's a lot of output in mail.log) [12:34:27] <war9407> what is running highest cpu% etc [12:34:45] <donspaulding> 581 Kbytes in 112 Requests. [12:35:00] <donspaulding> the mailq looks normal, most of those are backscatters [12:35:15] <donspaulding> These boxes are extremely busy normally [12:35:27] <donspaulding> 26000 messages each/day [12:36:11] <donspaulding> cpu sitting mostly idle [12:36:28] <donspaulding> df's look normal, about 40% disk usage [12:38:02] *** jel has joined #postfix [12:38:55] <donspaulding> war9407: any other ideas? [12:39:15] <war9407> hm [12:39:18] <jel> hi all :) I'm getting 'timed out while waiting for initial server greeting' errors (or words to that effect). Connecting over telnet, I get no greeting, and connection closed by foreign host after pressing return a few times, or doing a HELO or EHLO. Any ideas? [12:39:32] <war9407> jel: they are spammers, use fail2ban to kill them/drop them [12:39:40] <war9407> donspaulding: didnt you read the changelog before updating? [12:39:43] <war9407> donspaulding: show your main.cf [12:39:46] <war9407> dogmeat: and log entries [12:39:51] <war9407> for messages/syslog/mail.log [12:39:54] <war9407> otherwise we just guessing [12:40:37] <jel> war9407: huh? This is my server sending outgoing mail, and the remote machine failing to respond. They say that no one else is having this problem with their server (although previously they said at least one other person did). [12:41:23] *** alex12 has quit IRC [12:41:36] <war9407> jel: you can set the timeout [12:41:39] <war9407> jel: higher if you want [12:41:53] <war9407> smtp_helo_timeout = 300s [12:41:53] <checkers> jel: is smtpd running? [12:42:00] <donspaulding> war9407: main.cf -> http://dpaste.com/49013/ [12:42:05] <checkers> reload postfix and see if it is crashing on first connection [12:42:11] <jel> war9407: I'm not seeing any response at all from the server if I wait on telnet [12:42:36] <jel> checkers: yep, about ten instances. It's a busy mailserver, that delivers to other hosts just fine. [12:42:43] <war9407> donspaulding: lookin' [12:43:16] <checkers> turn on debug peer for 127.0.0.1, reload, and telnet in to see if you get any activity that way [12:43:25] * checkers dissappears [12:43:34] <war9407> donspaulding: btw what is the IP so I can test [12:43:36] <donspaulding> checkers: me or jel? [12:43:43] <war9407> donspaulding: or is it send out only [12:43:55] <donspaulding> no, you can hit it, it's in the paste [12:44:04] <donspaulding> mta2.mirusresearch.com [12:44:05] <war9407> the mta2.mir. ? [12:44:11] <war9407> k$ telnet mta2.mirusresearch.com 25 [12:44:11] <war9407> Trying 208.42.236.25... [12:44:11] <war9407> [12:44:20] <war9407> firewalled? [12:44:30] <war9407> wait [12:44:33] <war9407> it responded [12:44:35] <war9407> but very slow [12:44:42] <war9407> hmm [12:44:59] <war9407> .553 ms [12:44:59] <war9407> 13 rtr-dc-dist-b.v14.colo.data393.net (208.42.224.35) 44.296 ms 44.023 ms 43.955 ms [12:44:59] <war9407> 14 208-42-236-25.static.data393.net (208.42.236.25) 43.787 ms 43.697 ms 43.959 ms [12:45:00] <donspaulding> right, that's why I think it's processing mail for other mta's, but it *always* times out for me [12:45:01] <war9407> no problems there [12:45:14] <war9407> hrmm very intriuging problem here [12:45:45] <war9407> what do your logs show? [12:45:50] <war9407> do you run a cacheing dns server? [12:46:10] <donspaulding> don't know, those are my colo's servers [12:46:15] <donspaulding> data393 [12:46:30] <donspaulding> I could always set it to some known non-caching one though [12:47:03] <piquadrat> noone got an idea what ' fatal: need service transport:endpoint instead of "inet"' means and how I can fix it? [12:47:18] <war9407> 220 mta2.mirusresearch.com ESMTP Postfix (Ubuntu) [12:47:19] <war9407> it came up [12:47:24] <war9407> like 10 years later [12:47:28] <war9407> piquadrat: es [12:47:35] <jel> does anyone know the connection handling model for servers like exchange? Can they open a listening connection, but be too overloaded to actually send a greeting? [12:47:38] <war9407> piquadrat: grep inet /etc/postfix/main.cf [12:47:44] <war9407> piquadrat: put into pastebin [12:47:46] <donspaulding> I just set the dns server somewhere else [12:47:56] *** ming_zym has quit IRC [12:48:00] <war9407> donspaulding: doesnt help [12:48:06] <donspaulding> yeah, I see that [12:48:10] <war9407> donspaulding: iptables -nv -L [12:48:15] <war9407> donspaulding: nay weird firewall rules? [12:48:19] <war9407> donspaulding: turn off firewall temporarily? [12:48:45] <piquadrat> war9407: here's my complete main.cf: http://pastebin.com/m3341547b [12:49:39] <donspaulding> war9407: http://dpaste.com/49016/ [12:49:49] <donspaulding> no firewall on [12:50:06] *** rootsvr_ has joined #postfix [12:51:11] <war9407> piquadrat: your error is on line 25 [12:51:16] <war9407> piquadrat: smtpd_recipient_restrictions = reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_recipient, reject_unauth_destination, check_policy_service inet [12:51:25] <war9407> piquadrat: check_policy_service inet [12:51:31] <war9407> remove that [12:51:34] <war9407> and restart postfix [12:51:35] <war9407> donspaulding: sec [12:51:51] <war9407> donspaulding: ok, nothing strange there [12:51:52] <war9407> donspaulding: my guess is [12:52:01] <war9407> donspaulding: something is wrong with your LDAPconfig etc [12:52:05] <war9407> donspaulding: I rcommend do this [12:52:09] <war9407> donspaulding: enable soft bounce [12:52:16] <piquadrat> war9407: thanks! So much for blindly following a howto :) [12:52:17] <war9407> soft_bounce = yes [12:52:21] <war9407> np. [12:52:26] <war9407> donspaulding: /etc/init.d/postfix restart [12:52:29] <war9407> donspaulding: and then [12:52:36] <war9407> donspaulding: remove everything concerning ldap [12:52:41] <war9407> donspaulding: and virtual adddresses [12:52:42] <donspaulding> not using ldap [12:52:45] <war9407> sec [12:52:51] <donspaulding> ah, you mean the pgsql [12:53:01] <war9407> virtual_alias_maps = proxy:pgsql:/etc/postfix/pgsql-alias-maps.cf [12:53:01] <war9407> virtual_alias_domains = proxy:pgsql:/etc/postfix/pgsql-domains.cf [12:53:04] <war9407> and virtual aliases, etc, etc [12:53:04] <war9407> yes [12:53:09] <war9407> just make a regular mta that accepts mail for that host [12:53:12] <war9407> and put soft bounce on [12:53:17] <war9407> so the mail wont be lost during the test [12:53:20] <war9407> and then [12:53:23] <war9407> do a telnet to the IP port 25 [12:53:26] <war9407> and see if it goes righgt away [12:53:56] <donspaulding> soft_bounce will keep all the mail that is currently destined for the virtual_alias_maps right? [12:54:10] <war9407> soft bounce will return 4xx error codes to all email [12:54:17] <war9407> that would otherwise fail [12:54:21] <war9407> 4xx same as greylisting [12:54:27] <war9407> (aka tempfail) [12:54:39] <war9407> hold a sec, brb [12:54:44] <donspaulding> hrm, I'd rather silently queue it [12:54:45] <donspaulding> ok [13:07:03] *** [diablo] has joined #postfix [13:07:25] <war9407> back [13:07:30] *** rootsvr has quit IRC [13:07:45] *** pirho has quit IRC [13:07:52] <donspaulding> well, the soft_bounce gave me a 451 4.3.0 Error: queue file write error, but at least it was something [13:08:06] <donspaulding> it connected immediately [13:08:33] <donspaulding> I've since switched it back, and it was working fine until I gave it RCPT TO [13:08:41] <donspaulding> and then it froze for a good 2 minutes [13:09:28] <donspaulding> it let me continue with DATA, but when I gave it the single dot, it still said 451 4.3.0 Error: queue file write error [13:09:44] *** Tex-Twil has quit IRC [13:09:51] <war9407> queue file write error [13:09:56] <war9407> donspaulding: dmesg | tail -n 20 [13:09:59] <war9407> donspaulding: what it show? [13:10:06] <war9407> donspaulding: also df -h pls [13:10:07] <war9407> donspaulding: also df -i [13:10:42] <war9407> put all that into pastebin pls? [13:11:18] <donspaulding> sure, one sec [13:14:38] *** jel has left #postfix [13:16:44] <donspaulding> http://dpaste.com/49020/ [13:17:09] <war9407> k [13:17:37] <donspaulding> since it connects fine after a restart, then get's slow after being up, I'm thinking connection starvation [13:18:23] *** jacek has quit IRC [13:18:35] <war9407> donspaulding: sounds like it [13:18:36] <war9407> donspaulding: http://article.gmane.org/gmane.mail.postfix.user/5001/match=error+queue+file+write+error+postfix [13:20:40] <donspaulding> hmm [13:21:12] <donspaulding> master.cf: smtp inet n - - - 300 smtpd -v [13:21:22] <donspaulding> 300 max_proc [13:21:46] <donspaulding> should I drop that back down to the default of 100? [13:21:50] <war9407> try it [13:21:54] <war9407> and I will check delay [13:22:04] <war9407> last attempt failed btw [13:22:05] <war9407> ~$ telnet mta2.mirusresearch.com 25 [13:22:06] <war9407> Trying 208.42.236.25... [13:22:06] <war9407> telnet: connect to address 208.42.236.25: Connection timed out [13:22:51] <war9407> donspaulding: what about on localhost [13:22:55] <donspaulding> yeah, welcome to my last 16 hours [13:22:56] <donspaulding> :-D [13:22:58] <war9407> donspaulding: when you telnet localhost 25 it take along time too? [13:23:03] <donspaulding> yup [13:23:05] <war9407> donspaulding: also what does netstat -natlp show [13:23:13] <war9407> pastebin pls [13:23:18] <donspaulding> a ton of connections ... ok [13:23:52] <war9407> http://flakshack.com/anti-spam/wiki/index.php?page=Queue+File+Write+Errors [13:23:54] <war9407> do you use amavis? [13:24:04] <war9407> donspaulding: yes a 'ton of connections' - but what state are they in? [13:24:11] <war9407> donspaulding: also ps auxwww what does it show [13:24:30] <donspaulding> syn_rcv [13:24:37] <donspaulding> war9407: http://dpaste.com/49023/ [13:26:06] <war9407> looking [13:26:13] <donspaulding> war9407: http://dpaste.com/49024/ [13:26:59] <war9407> is any 1 particular process using a lot of CPU? [13:27:02] <war9407> show master.cf as well btw [13:27:06] <war9407> and do you run any filtering for anti-spam? [13:27:48] <donspaulding> nope [13:27:58] <donspaulding> to the cpu usage that is [13:28:04] <donspaulding> no filtering whatsoever [13:28:09] <donspaulding> this is a simple relay box [13:28:59] <donspaulding> http://dpaste.com/49025/ [13:30:02] *** akke has joined #postfix [13:30:49] <akke> We are having way to much spam and are looking for a good solutions for that. Can anyone recommend us any software (server based!) that's good? (I don' mind if it's not open source, it just has to be good) [13:31:20] <war9407> donspaulding: looking [13:31:31] <war9407> akke: you use postfix? read jim seymours anti-uce faq [13:31:35] <war9407> akke: that should get you started [13:32:10] <akke> war9407: i'm using postfix right now, yes. But are will to switch to something else if there's better spam filter available for it [13:32:15] <akke> war9407: any link by chance? [13:32:17] *** kk_CHN has quit IRC [13:32:21] <war9407> donspaulding: is there anyway you can test the postgres stuff to see if the DB is ok? [13:32:27] <war9407> akke: nohting better than postfix imo [13:32:32] <war9407> akke: google it [13:32:36] <akke> ok [13:32:37] <war9407> akke: should be first result [13:32:40] <war9407> jim seymour anti-uce [13:32:52] <war9407> I get 0 to 1 spams per day now. [13:32:54] <war9407> very rare ;) [13:33:01] <war9407> w/no filtering, 500-1000 [13:33:08] <donspaulding> war9407: postmap -q my at goodaddress dot com proxy:pgsql:/etc/postfix/pgsql-alias-maps.cf works fine [13:33:23] <war9407> donspaulding: I meant the health of the DB [13:33:37] <war9407> did you read the changelog [13:33:42] <war9407> for the DB/postfix upgrades [13:33:45] <donspaulding> no [13:33:46] <war9407> to see what changes if any you may need to make? [13:33:49] <donspaulding> :-( [13:34:24] <donspaulding> postmap should be doing exactly what trivial-rewrite should do, right? [13:34:34] <war9407> I believe so yes [13:34:38] <war9407> can you put soft_bounce = yes [13:34:41] <war9407> and remove the sql stuff [13:34:46] <war9407> and restart postfix [13:34:48] <war9407> let me know [13:34:48] <donspaulding> sure, hold on [13:34:51] <war9407> and I want to telnet to it [13:34:53] <war9407> and see if it lets me right in [13:35:45] <war9407> INSTANT [13:35:45] <donspaulding> now [13:35:51] <war9407> $ telnet mta2.mirusresearch.com 25 [13:35:52] <war9407> Trying 208.42.236.25... [13:35:52] <war9407> Connected to mta2.mirusresearch.com. [13:35:52] <war9407> Escape character is '^]'. [13:35:52] <war9407> 220 mta2.mirusresearch.com ESMTP Postfix (Ubuntu) [13:35:55] <war9407> no dleay at all [13:35:59] <war9407> < 500ms [13:36:04] <donspaulding> yeah, I know [13:36:05] <war9407> so [13:36:06] <war9407> the problem is [13:36:14] <war9407> psseql/some issue there [13:36:23] <war9407> master.cf [13:36:28] <war9407> or something with the DB [13:36:31] <donspaulding> but pf shouldn't be hitting the db at all at that point [13:36:40] <war9407> I don't use a DB w/my mail server so its difficult for me to assist [13:36:44] <war9407> true [13:36:56] *** Fallenou has joined #postfix [13:36:59] <donspaulding> sure, I understand, I do appreciate the assistance so far :-) [13:37:26] *** jmazaredo has joined #postfix [13:37:36] <war9407> donspaulding: can you track down the unbuntu release_notes [13:37:40] <war9407> donspaulding: OR [13:37:41] *** lunaphyte_ has joined #postfix [13:37:42] <war9407> donspaulding: cd /usr/share/doc/ [13:37:46] <war9407> donspaulding: for postfix, and the db [13:37:48] *** jmazaredo has left #postfix [13:38:00] <war9407> donspaulding: look in the changes/or/Readme.ubuntu if there is one [13:38:04] <war9407> very strange problem you have there [13:38:06] <war9407> its almost like [13:38:10] <war9407> when it receives the connection [13:38:15] <war9407> it pauses to check something [13:38:18] <war9407> for a very long time [13:38:19] <war9407> hmm [13:39:45] <donspaulding> does pf do any DNS resolution before displaying the banner? [13:40:16] <war9407> yes [13:40:21] <war9407> I believe so [13:40:37] <war9407> check mail.warn log [13:40:43] <donspaulding> even so, it should fly for localhost [13:41:03] <war9407> correct [13:41:08] <war9407> unless its getting stuck trying to authetnicate [13:41:13] <war9407> or check something w/the DB configuration [13:42:00] <donspaulding> yeah. [13:42:31] <donspaulding> the upgrade did change the db minor version, but it supposedly leaves both versions installed in parallel [13:42:36] <donspaulding> and the old version still works [13:42:56] <war9407> ah [13:43:02] <war9407> did postfix's main.cf change? [13:43:04] <war9407> err [13:43:06] <war9407> master.cf? [13:43:26] *** nilesh123 has joined #postfix [13:43:56] <donspaulding> nope, I had made changes, so I didn't update the cf files [13:44:11] <war9407> so it all points to one thing then, the DB? [13:44:16] <war9407> can you use the old instantiaton of it? [13:44:36] <donspaulding> the old one is the only one running [13:44:43] <war9407> what the hell then ;) [13:44:48] <war9407> donspaulding: have you tried rebooting the box [13:45:03] <war9407> donspaulding: incase some service didnt come up or start right when upgrading? [13:45:03] <donspaulding> not recently :-) [13:45:10] <war9407> something to try? [13:45:24] <donspaulding> oh, yeah, it rebooted after the upgrade, but let's give it another go [13:46:49] <war9407> ah [13:49:28] *** ming_zym has joined #postfix [13:49:28] *** nilesh123 has quit IRC [13:49:37] *** oxtail has quit IRC [13:49:57] <war9407> donspaulding: also: http://www.amitshah.net/2007/01/postfix-send-error-queue-file-write.html [13:50:35] *** descala has quit IRC [13:50:41] *** akke has quit IRC [13:53:30] *** empiric has joined #postfix [13:53:39] <empiric> Requested action not taken: mailbox unavailable [13:53:40] <empiric> Server replied: 550 <everyone at domain dot com>: Recipient address rejected: User unknown in local recipient table [13:53:42] <empiric> what this mea [13:54:05] <empiric> any idea? [13:54:12] <empiric> its a mailman list [13:56:18] <empiric> helo [13:59:21] <saurabhb> empiric, are the aliases for the list setup in /etc/aliases? [14:03:08] *** alex12 has joined #postfix [14:16:35] *** DaSilva_ has joined #postfix [14:18:13] *** empiric has quit IRC [14:19:10] *** capt_rogers has joined #postfix [14:21:36] <DaSilva_> Hi all, got a problem here with my postfix installation. Everything worked fine till yesterday. No emails are send anymore via smtp out. All mails are placed in the queue by qmgr ..but smtp doesnt seem to pick them up and send them out. When im sending an email from outside to the system everthing works fine. [14:21:54] <DaSilva_> only Emails generated on the system are not send out [14:22:25] *** ramoni has joined #postfix [14:23:00] <DaSilva_> in mail.log and mail.err i cant find any error message [14:23:38] <Trengo> DaSilva_ nice nick, you're portuguese in germany? [14:24:08] <DaSilva_> no im german ... just my best friend is portuguese ;) [14:24:28] <Trengo> it shows :) [14:24:33] <DaSilva_> ;) [14:25:26] <DaSilva_> so i suppose you didnt have any idea about my problem described above ? [14:25:53] <Trengo> im not very familiar with postfix, im afraid [14:26:01] <Trengo> i suppose you already restarted the service? [14:26:10] <Trengo> checked dmesg and messages? [14:26:13] <Trengo> free space? [14:26:22] <Trengo> netstat -nltp? [14:26:38] <DaSilva_> jep i did ...im working on that problem for about 4 hours now .... [14:26:58] <DaSilva_> what i wonder about is ..that postque -p shows messages likes this : [14:27:12] <DaSilva_> 1212580163F9* 2830 Fri May 9 11:52:08 [14:27:27] <DaSilva_> but as i understand it ...the * at the end of the messageid shows that it is active [14:27:53] <DaSilva_> but well .. all messages in queue are never send out ...there is no connect to the outer world even [14:28:03] <Trengo> means its locked [14:28:07] *** lunaphyte__ has joined #postfix [14:28:22] <Trengo> do you have DNS? [14:28:23] <DaSilva_> ahh ok ..not active ...so the first misunderstanding is gone :) [14:28:30] <DaSilva_> jep dns is working properly .. [14:28:59] <Trengo> port 25 outside available? [14:29:00] *** lunaphyte_ has quit IRC [14:29:24] <DaSilva_> yes .. i also tried it with an telnet session to send in an email via port 25 from a different machine [14:29:27] <DaSilva_> that works perfect [14:30:17] <DaSilva_> the only little thing i found in mail.err ever was : May 9 09:20:13 mail postfix/qmgr[7835]: fatal: timeout connecting to transport: smtp [14:30:32] <DaSilva_> but that message is only showing up once ..at that time ...never bevore and never after [14:30:48] <Trengo> can you telnet 25 locally? [14:30:53] <DaSilva_> yes i can [14:30:54] <Trengo> both on 127.0.0.1 and your IP? [14:31:54] <DaSilva_> hmm ok ..not via localhost ..(127.0.0.1) ..cause i set up : inet_interfaces = xx.xxx.53.150 in my postfix configuration [14:31:59] <DaSilva_> should i set that to all ? [14:32:31] <Trengo> well im not sure what it is [14:32:31] <DaSilva_> but the ip set up in the postfix config is working with telnet [14:32:43] <DaSilva_> hmm i will try all ..give me a second [14:35:57] *** jellis-real has joined #postfix [14:36:10] <DaSilva_> well that was not the problem ...the mail.log says simply : [14:36:18] <DaSilva_> May 9 14:33:56 mail postfix/cleanup[16811]: 337EE8016403: message-id=<20080509123356.337EE8016403 at mail dot xxx.com> [14:36:19] <DaSilva_> May 9 14:33:56 mail postfix/qmgr[16794]: 337EE8016403: from=<root at xxx dot com>, size=337, nrcpt=1 (queue active) [14:36:30] *** [diablo] has quit IRC [14:36:49] <DaSilva_> i send directly from that machine via mailx ....and always the log goes that far ....queue active and well ..this is where all mails are ending [14:38:29] <Trengo> but do they sit in the queue? or are returned? [14:38:40] <Trengo> are they sent back to root? [14:38:49] <DaSilva_> they sit in the queue [14:38:57] *** phnord has joined #postfix [14:39:22] <DaSilva_> A19688016404* 337 Fri May 9 14:35:52 root at xxx dot com this is the one i generated latley .. [14:40:24] *** oxtail has joined #postfix [14:43:48] <DaSilva_> and well there they will sit forever as it seems [14:46:03] <Trengo> postqueue -vvv -f ? [14:46:23] *** lunaphyte__ is now known as lunaphyte_ [14:49:23] <DaSilva_> looks alright ...or anything special you want to know about it ? ( the output is very long) [14:58:48] *** majikman has quit IRC [15:00:47] *** DaSilva_ has quit IRC [15:07:07] *** [1]felix_da_catz has joined #postfix [15:11:28] *** majikman has joined #postfix [15:12:35] *** Tachy has joined #postfix [15:25:33] *** Knoedel2 has joined #postfix [15:28:30] *** rootsvr has joined #postfix [15:35:02] *** loddafnir has quit IRC [15:36:05] *** stormzen has quit IRC [15:39:17] *** sergevn has left #postfix [15:40:42] *** yajith has left #postfix [15:42:42] *** PhilKC has quit IRC [15:42:46] *** PhilKC has joined #Postfix [15:44:33] *** dmnd has joined #postfix [15:44:34] <dmnd> hi [15:45:19] <dmnd> when i configure a backup mx system, can i avoid the use of relay_domains? i want mail to be accepted when the hostname of the mailserver is in the MX records of a domain i want to be a backup for. [15:47:11] *** rootsvr_ has quit IRC [15:49:12] *** seekwill has quit IRC [15:52:38] *** shinao1 has joined #postfix [15:56:26] *** jeffspeff has joined #postfix [15:56:36] <rob0> So, if I set my MX to your hostname, your host would accept mail for my domain? [15:57:05] *** jeffspeff2 has quit IRC [15:58:36] <Dominian> er.. [15:58:45] <Dominian> I don't think you understand what backup mx'ing is... [15:59:46] <rob0> I think that's the case for most people who think they need a backup MX. [16:00:23] <rob0> "spam magnet" [16:00:36] *** descala has joined #postfix [16:00:49] *** seekwill has joined #postfix [16:02:59] *** hever has joined #postfix [16:03:09] <Dominian> rob0: unless of course you do proper recipient verification [16:10:57] <rob0> AND roughly equal spam control, too. [16:15:58] <Dominian> aye [16:16:13] <mwalling> and run sendmail [16:16:14] <Dominian> I backup mx for a few domains.. but I do greylisting + recipient verification. [16:17:02] *** capt_rogers has quit IRC [16:18:36] <dmnd> yes rob0 [16:19:08] <dmnd> something like that is available right? [16:19:33] <shasta> oh my [16:19:45] <dmnd> i want to use it in combination with my_backup_networks [16:19:49] <rob0> sheesh [16:19:50] <dmnd> no worries :P [16:19:59] <rob0> 13:56 < rob0> So, if I set my MX to your hostname, your host would accept mail for my domain? [16:20:22] <rob0> And you fail to see the lunacy therein? [16:20:23] <lennard> now wouldnt that be convenient [16:21:00] <shasta> permit_mx_backup_networks, you mean [16:21:04] <dmnd> yes shasta [16:21:26] <shasta> which is still stupid [16:21:34] <dmnd> not in my environment [16:21:54] <dmnd> are there any other ways i can do this perhaps? [16:22:05] <shasta> because I can set my domain.name first MX to any IP address I want [16:22:34] *** j_s has joined #postfix [16:23:48] *** Tex-Twil has joined #postfix [16:24:02] *** Tex-Twil has quit IRC [16:24:30] *** lunaphyte__ has joined #postfix [16:25:37] *** lunaphyte_ has quit IRC [16:26:57] <dmnd> shasta: yes, and if that one is not in permit_mx_backup_networks it's not working for you [16:27:29] <dmnd> i've found the info already, thanks anyway [16:28:14] *** jeffspeff has quit IRC [16:29:06] *** Tex-Twil has joined #postfix [16:31:35] *** lunaphyte_ has joined #postfix [16:32:23] *** lunaphyte__ has quit IRC [16:36:10] *** davidj has joined #postfix [16:39:26] *** ma3x has quit IRC [16:39:43] *** ma3x has joined #postfix [16:41:31] <davidj> Comments in main.cf mention that I will need to modify local_recipient_maps if I define domain recipients in $virtual_mailbox_maps files. [16:42:13] <davidj> Does this mean that I must modify local_recipient_maps if I use $virtual_mailbox_maps, or only if I use $virtual_mailbox_maps to define somebody@$mydomain ? [16:48:44] *** donspaulding has quit IRC [16:54:39] *** loddafnir has joined #postfix [17:02:32] *** Pazzo has quit IRC [17:02:50] *** karrotx has joined #postfix [17:03:10] <karrotx> does postfix support TO/CC/BCC limits per user per amount of time? [17:03:26] <karrotx> i want to limit the amount of addresses a user can send to in an hour period, and a day period [17:09:29] *** UQlev has joined #postfix [17:13:50] *** Tex-Twil has quit IRC [17:23:15] *** donspaulding has joined #postfix [17:25:13] *** ikaro^ has joined #postfix [17:27:19] *** wdp has quit IRC [17:30:33] *** Tjikkun_work has quit IRC [17:30:48] *** harobed has quit IRC [17:31:47] *** shinao1 has quit IRC [17:31:49] *** havvg has quit IRC [17:33:03] <donspaulding> I want to log certain message parts to a postgres db, is there a way I could have postfix send one copy of the mail to the queue, and another to a program that does my logging? [17:33:23] *** nilesh123 has joined #postfix [17:33:29] <donspaulding> preferably without either one blocking the other from occurring, so not a traditional filter per se [17:33:38] <nilesh123> [root@localhost init.d]# cyradm --user cyrus --auth login localhost [17:33:38] <nilesh123> IMAP Password: [17:33:38] <nilesh123> Login failed: authentication failure at /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi/Cyrus/IMAP/Admin.pm line 118 [17:33:53] <nilesh123> can any one tel me how can i reset this IMAP password? [17:36:22] *** ikaro has quit IRC [17:36:25] *** ikaro^ is now known as ikaro [17:40:38] <rob0> davidj must have misunderstood the comments, or that wasn't the official sample main.cf file. Local domain class is completely independent from virtual mailbox domain class. [17:40:45] <rob0> !address_classes [17:40:45] <knoba> rob0: "address_classes" : http://www.postfix.org/ADDRESS_CLASS_README.html describes how Postfix deals with different classes of addresses: local, relay, virtual alias, virtual mailbox, and Internet. [17:42:19] <rob0> karrotx, depends how your users are sending, maybe you want something like the throttling feature of policyd. [17:42:24] <rob0> !policyd [17:42:25] <knoba> rob0: "policyd" : http://www.policyd.org/ : an anti-spam Postfix policy daemon [17:42:44] <karrotx> rob0: i'm currently looking at that [17:42:53] <karrotx> can you whitelist certain users? [17:42:54] <rob0> Don, recipient_bcc_maps [17:43:05] <donspaulding> sweet [17:43:20] <rob0> what is a "user"? How do you identify a user? [17:44:03] <rob0> karrotx needs to understand a bit more about SMTP, it sounds like. [17:44:20] <karrotx> rob0: well i have no idea what policyd does [17:44:33] <karrotx> that's why i asked the question [17:45:22] <rob0> I don't have the time to try to bring you up to speed on everything you need to know. IRC is a lousy place for that anyway. [17:46:41] <karrotx> hah [17:47:05] <karrotx> yes, because i'm so far behind [17:47:40] *** phnord has quit IRC [17:53:59] *** linkslice has joined #postfix [18:04:52] *** karrotx has quit IRC [18:07:14] *** Led-Hed has joined #postfix [18:09:13] <Led-Hed> When connecting (Thunderbird, Telnet, Etc...) It takes about 8 sec to establish the connection to my SMTP server on port 25, but if I connect to the same server on port 587 its nearly instantaneous. what might cause connections on port 25 to be slow? [18:09:27] <Dominian> Led-Hed: greet pause? [18:10:01] <Led-Hed> I dont think so. from telnet it connects, but then takes 8 sec to see the ESMTP prompt [18:12:02] *** piquadrat has quit IRC [18:12:24] <Dominian> does it have the same delay when connecting to port 25 from localhost? [18:12:27] <seekwill> What about telneting to 587 from your clients? [18:12:53] <Dominian> My guess is if you have no delay when connecting from localhost to port 25.. its a DNS resolution issue. [18:12:54] *** ming_zym has quit IRC [18:13:04] <Led-Hed> Dominian, no [18:13:15] <Dominian> no what? [18:13:41] <Led-Hed> sorry, no it doesnt have the delay when connecting from local [18:13:47] <Dominian> I'd say its DNS then [18:13:48] *** susinths has quit IRC [18:13:54] <seekwill> It's always DNS [18:13:59] <Dominian> What's the IP of the mail server? [18:14:08] * Dominian will hit it from his box and see if the delay exists there [18:14:09] <Led-Hed> 209.209.124.227 [18:14:12] <Dominian> as.. my box has a rDNS entry [18:14:26] <Dominian> connected instantly for me [18:14:32] <Led-Hed> humm [18:14:55] <Led-Hed> on port 25 or port 587? [18:16:04] *** ming_zym has joined #postfix [18:16:58] *** ma3x has quit IRC [18:18:35] *** oxtail has quit IRC [18:19:12] <Dominian> Led-Hed: 25 [18:19:50] <Led-Hed> Dominian, humm. ok. I was seeing the delay on 25, but not on 587 [18:20:05] <Dominian> interesting [18:20:11] <Led-Hed> which would indicate that its not DNS correct [18:20:13] <Dominian> well on 25 it connect instantly for me [18:20:28] <Dominian> That's a good guess [18:20:32] <Led-Hed> ya [18:20:44] <Led-Hed> I will have to find another remote site to test from. Thanks [18:20:58] <Led-Hed> maybe its just the 2 sites I've tested from [18:23:14] <Dominian> hehe I have multiple sites [18:23:17] <Dominian> let me try from canada [18:23:26] <Led-Hed> K, thanks [18:23:37] <Dominian> connected instantly from my box in canada [18:23:48] <Dominian> connected instatly from work [18:24:00] <Led-Hed> ok, well thats good. Must be localized at the 2 sites I'm testing from [18:24:05] * Dominian nods [18:24:10] *** ma3x has joined #postfix [18:24:12] *** rootsvr has quit IRC [18:24:34] <Led-Hed> any ideas why it would connect fast on port 587 and slow on port 25? [18:24:50] <Dominian> no clue man. [18:24:58] <rob0> 16:09 < Dominian> Led-Hed: greet pause? [18:25:16] <Dominian> heh [18:25:23] * Led-Hed will look into greet pause. [18:25:41] <rob0> it wouldn't have a greet pause unless you ALREADY SET IT UP [18:26:05] * Dominian nods [18:26:33] <Led-Hed> I dont remember setting one up. [18:26:45] <rob0> but yeah, from here there's not much delay on the banner [18:27:01] <rob0> from comcast there is [18:27:48] <Led-Hed> is this the setting? smtpd_delay_reject [18:28:35] <Dominian> no [18:28:58] * Led-Hed is having a hard time finding it. [18:29:05] *** wdp has joined #postfix [18:29:56] <Led-Hed> no 'delay' in my main.cf [18:32:19] *** hever has quit IRC [18:34:59] <Led-Hed> postconf |grep delay returned some delays though. [18:35:20] <Dominian> the greet pause is usually done using 'sleep' [18:35:26] <Dominian> so like sleep 10 or whatever [18:35:28] *** githogori_ has quit IRC [18:35:33] * Dominian used to use a greet pause, but haven't in forever [18:35:44] <Dominian> and the fact I can hit port 25 from multiple locations with no delay. .I doubt its a greet pause [18:35:56] <Led-Hed> smtpd_error_sleep_time 1s [18:36:12] <Led-Hed> Dominian, agreed [18:37:12] <rob0> "smtpd_delay_reject = yes" is part of a greet pause [18:37:52] <rob0> the other part is "smtpd_client_restrictions" containing a "sleep" [18:38:18] <Led-Hed> rob0, no sleep. [18:39:37] <Led-Hed> It must be something other than my mail server. [18:39:43] <rob0> when I tried again from Comcast just now, no delay. Sounds like rDNS delays. [18:40:28] <Led-Hed> rob0, but rDNS would effect port 25 and 587 the same. [18:40:42] <rob0> no, I tried 25 before 587 [18:40:51] <f3ew> chroot on 25 and not on 587? [18:41:03] <f3ew> a firewall? [18:41:17] <f3ew> Too many connections on port 25? [18:41:20] <Led-Hed> no chroot [18:41:47] <Led-Hed> f3ew, low traffic server. I doubt its a too many connections. [18:41:52] <Led-Hed> I'll check [18:42:33] <rob0> I hit 587 from AT&T DSL, about a 2-second delay (typical for rDNS) [18:42:45] <rob0> (can't test 25, it's blocked) [18:43:15] <Led-Hed> rob0, thanks [18:43:25] *** saurabhb has quit IRC [18:44:47] <Led-Hed> Well it seems to be fine outside of my 3 LAN's, so maybe its specific to my sites. Thanks Dominian, rob0, and f3ew [18:47:42] *** richie_ has joined #postfix [18:52:21] *** RainDoctor has quit IRC [18:59:39] *** danbeck has joined #postfix [19:02:48] *** hparker has joined #postfix [19:04:14] *** nilesh123 has quit IRC [19:08:07] *** suuuper has quit IRC [19:09:03] *** hemry has joined #postfix [19:11:52] *** pa has quit IRC [19:13:47] *** shinao1 has joined #postfix [19:17:52] *** smultron has joined #postfix [19:18:18] <smultron> is there a limit to how many users can be associated with an alias? [19:21:31] *** syneus has quit IRC [19:25:05] *** pirho has joined #postfix [19:29:02] <hparker> smultron: I think there is a line length limit in aliases, though I forget how long... My advice, if it's that many, use mailman or some other list manager [19:29:55] <smultron> ah, ok. i'll try mailman. thanks hparker [19:30:23] <hparker> aliases are a bitch in regards to spam [19:30:47] <smultron> because if they get a hold of one alias, it goes to many people? [19:31:41] <hparker> yeah.. your alias ends up in a spam list, it gets busy.. Using mailman you can set it so the only people that can post are those subscribed [19:32:08] <smultron> that sounds more of what i need [19:32:33] *** blackflag has joined #postfix [19:33:21] <hparker> an alias is treated as a plain email address, any(one|thing) can send email to it [19:38:11] *** descala has quit IRC [19:44:04] <richie_> How can I fix this error? postfix/smtpd[25863]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory [19:44:20] <richie_> Is it serious/showstopping? [19:45:46] <rob0> If it was serious it would be an error, not a warning. [19:49:05] *** CrazyFoam has quit IRC [19:50:21] *** CrazyFoam has joined #postfix [19:57:29] *** pirho has quit IRC [19:58:49] *** pirho has joined #postfix [20:02:10] *** rgl has quit IRC [20:03:25] *** rokra has joined #postfix [20:08:24] *** madrescher has joined #postfix [20:14:59] *** Led-Hed has quit IRC [20:25:25] *** shinao1 has quit IRC [20:31:45] *** tkrin has joined #postfix [20:32:40] *** ming_zym has quit IRC [20:33:23] *** hparker has quit IRC [20:48:13] *** xentrac is now known as KragenSitaker [20:50:49] *** amrit|zzz is now known as amrit|wrk [20:51:29] <davidj> rob0: Thanks for the help. I'm still not clear what I need to do. I have "virtual_mailbox_maps = hash:/etc/postfix/virtual-users", with a list of names and Maildir directories in virtual-users. $virtual_mailbox_domains contains a list of virtual domains. I'd like to reject mail sent to non-existent addresses. How do I accomplish that? [20:55:06] <KragenSitaker> smultron: i wrote this yesterday to SMTP-reject mail from random addresses to certain local recipients: http://pobox.com/~kragen/tmp/minimilter.py.html [20:55:37] <smultron> KragenSitaker: cool. i'll check it out. thanks :) [20:56:19] <KragenSitaker> i have things like kragen-discuss at lists dot canonical.org, which i want to be open to posting only by subscribers to other lists [20:56:30] <rob0> davidj: Sounds right to me; show evidence that this is not the case. [20:56:59] <KragenSitaker> and kragen-tol at lists dot canonical.org, which i don't want to be open to posting via SMTP at all, since I always inject my mail locally anyway [20:57:16] <davidj> rob0: May 6 21:59:40 johnston postfix/virtual[5961]: B70DC1C70F86: to=<davidnn at johnstons dot net>, relay=virtual, delay=2.3, delays=2.3/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to maildir) [20:57:27] <davidj> There is no davidnn. [20:57:47] <rob0> !postmapq [20:57:48] <knoba> rob0: "postmapq" : You can check your lookups with the postmap command. Example: if you defined "transport_maps = mysql:/etc/postfix/transport.cf" you may check this mapping by running "postmap -q domain.com mysql:/etc/postfix/transport.cf" and see if it works. [20:58:15] <rob0> postmap -q davidnn at johnstons dot net hash:/etc/postfix/virtual-users [20:58:44] *** rokra has quit IRC [20:59:06] <davidj> Interesting. When does postfix re-hash hashes, at startup? [20:59:22] <davidj> "postmap: warning: database .... older" [20:59:25] <rob0> "man postmap", YOU do it. [20:59:31] <davidj> doh. [21:01:21] <davidj> `postmap -q davidnn at johnstons dot net hash:/etc/postfix/virtual-users` returns 1 [21:02:01] <davidj> rob0: Thanks for mentioning postmap -q, I think I've found my problem. [21:02:14] * davidj slinks off [21:02:45] <davidj> !topics [21:02:45] <knoba> davidj: Error: "topics" is not a valid command. [21:03:02] <KragenSitaker> yay competent help [21:03:10] <KragenSitaker> boo making the newbies self-conscious [21:03:20] <davidj> ;-) [21:03:22] <rob0> Hey, at least you made it easy to find by not obfuscating essential details. [21:04:29] <davidj> Everyone's a newbie at something. [21:04:42] <davidj> thanks again for the help. [21:05:14] <rob0> Re: self-conscious newbies, if said newbie needs to be told how/when to read logs, that person isn't ready to be a postmaster. [21:05:25] <richie_> How do I debug authentication failures?.. I got this error: postfix/smtpd[31238]: warning: caront54321.plus.com[212.159.113.88]: SASL LOGIN authentication failed: authentication failure [21:05:47] <KragenSitaker> rob0: how do you suggest they learn how to read mail logs without being a postmaster first? [21:05:51] <richie_> I use [21:05:52] <richie_> pam [21:05:56] <rob0> richie_, depends on the SASL backend. [21:06:36] <richie_> saslauthd ? [21:06:43] <rob0> Very simple, I suggest that any would-be postmaster learn his/her OS first. [21:07:39] <rob0> !sasl [21:07:39] <knoba> rob0: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details. [21:07:56] *** Welshdragon has joined #postfix [21:10:22] <richie_> I think I need cyrus sasl logs, I am using syslog for info right now. [21:13:11] <donspaulding> shoot, I didn't even realize I had to be _ready_ to be a postmaster [21:13:24] *** UQlev has quit IRC [21:13:52] <donspaulding> "Our own council will we keep on who is ready to take the trials" [21:14:05] <rob0> You can do what you please, as can I. [21:16:24] <donspaulding> just trying to join in on the fun. [21:16:30] *** tkrin has quit IRC [21:21:47] <donspaulding> rob0: earlier you mentioned bcc'ing emails when I want them to go two places independently of one another, is there something that does that in-process? i.e. without using SMTP to transfer the mail? [21:22:02] <donspaulding> essentially what I'm after amounts to a "read-only" filter [21:23:06] <rob0> sounds like a case for virtual_alias_maps [21:23:21] <rob0> um ... [21:23:43] <rob0> "without using SMTP"? [21:23:46] <donspaulding> hmm, not sure how that applies, I'm using virtual_alias_maps to relay the mail to its final destination [21:24:47] <donspaulding> rob0: right, I want to write a program/filter/scanner/whatever that doesn't have to be an SMTP daemon listening on 25, I just want it to have a chance to scan the email as it comes by. [21:26:06] <rob0> something like a content_filter ? [21:26:10] <rob0> !filter [21:26:11] <knoba> rob0: Error: "filter" is not a valid command. [21:26:15] <rob0> !filter_readme [21:26:16] <knoba> rob0: "filter_readme" : http://www.postfix.org/FILTER_README.html :: After-queue content filtering [21:26:56] <donspaulding> yeah, I essentially want that, without the dependency on my app to inject the message back into the queue. [21:27:21] <donspaulding> I'm getting the feeling I'm asking for something way outside the scope of PF, nevermind. [21:28:17] <rob0> a content_filter has to reinject somehow, yes [21:35:29] *** lunaphyte_ is now known as plumbers_crack [21:36:07] * plumbers_crack is sweaty. [21:36:18] *** plumbers_crack is now known as wood [21:36:24] * wood is board. [21:39:42] <davidj> someone whack wood. [21:39:53] <wood> shoot [21:40:18] *** wood is now known as flashlight [21:40:27] <flashlight> someone turn on the flashlight. [21:40:42] <rob0> damn, he's harder to nail down now. [21:43:39] *** flashlight is now known as skates [21:43:54] * skates is on thin ice. [21:46:12] <davidj> I'm seeing mail where From: and To: are the same, with some random text inserted (eg, From: Viagra sales <name at foo dot com>, To: Name <name at foo dot com>. Is there a filter already out there to block this mess? [21:47:21] <rob0> Are you using zen? Also, reject_invalid_helo_hostname and reject_non_fqdn_helo_hostname are very safe and effective. [21:48:31] <skates> are you talking about the envelope, or headers? [21:49:55] *** supa_user has joined #postfix [21:50:19] <supa_user> can anyone tell me how to separate forwarded mail (/etc/aliases or .forward) so that it flows out a different IP address? [21:50:50] *** ma3x has quit IRC [21:51:00] *** ma3x has joined #postfix [21:55:16] <growltiger_> !transport_maps [21:55:17] <knoba> growltiger_: "transport_maps" : a configuration parameter in the main.cf: Optional lookup tables with mappings from recipient address to (message delivery transport, next-hop destination). See transport(5) for details. [21:57:15] *** [1]felix_da_catz has quit IRC [21:58:01] *** jellis-real has quit IRC [21:59:34] *** havvg has joined #postfix [22:02:47] <davidj> skates: Headers. [22:02:59] <davidj> !reject_invalid_helo_hostname [22:03:00] <knoba> davidj: Error: "reject_invalid_helo_hostname" is not a valid command. [22:03:08] <davidj> !reject_non_fqdn_helo_hostname [22:03:09] <knoba> davidj: Error: "reject_non_fqdn_helo_hostname" is not a valid command. [22:04:07] *** githogori__ has joined #postfix [22:04:22] *** githogori__ has quit IRC [22:04:25] <rob0> You can find both of those near postconf.5.html#reject_invalid_helo_hostname [22:04:30] *** githogori has joined #postfix [22:04:43] <davidj> rob0: Thank you. [22:07:59] <rob0> here's another good one: [22:08:03] <rob0> !cheatsheet [22:08:03] <knoba> rob0: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control. [22:08:06] <rob0> !zen [22:08:07] <knoba> rob0: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL [22:09:12] *** ma3x has quit IRC [22:11:22] *** Siegfried has quit IRC [22:12:38] *** skates is now known as lunaphyte_ [22:23:06] <kreg> i am getting spam sent to me by a particular server not in any black list. [22:23:15] <kreg> i could just add it to iptables, and block it [22:23:29] <kreg> but is there an postfix level to do it in instead? [22:23:38] <kreg> so they would get a bounce back email [22:23:49] <kreg> i don't get "only" spam from them [22:23:57] *** ramoni has quit IRC [22:23:59] <kreg> it's a neighboring isp [22:28:06] <seekwill> How about calling them? [22:28:15] <seekwill> Email postmaster@? [22:28:42] *** hemry has quit IRC [22:28:47] <kreg> my goal is to learn how to do it manually [22:29:09] <kreg> i want any mail from their ip's to get a bounce from my mta saying the similar messages [22:29:21] <kreg> i've tried continously to get a hold of them [22:29:27] <kreg> no responses [22:30:01] <seekwill> What if it wasn't spam? [22:30:23] <seekwill> Do you want those to bounce? [22:30:39] <kreg> sorry i should restate my quetsion. i want to know how to do something. not the what is "should" do. [22:30:43] <kreg> i'm trying to learn how [22:31:39] <seekwill> Not sure exactly what you are trying to do though. [22:31:47] <seekwill> Maybe it's just me. [22:31:55] <kreg> i have the IP's of the other ISP's mail servers [22:32:09] <kreg> when they send mail, i want to send a bounch back. just like when we get blocked by isp's like comcast [22:32:13] <kreg> "blocked for abuse..." [22:32:27] <seekwill> For all messages, even legit ones? [22:32:30] <kreg> dude [22:32:35] <kreg> this is not an real situation [22:32:37] <kreg> it's fake [22:32:39] <kreg> i'm trying ot learn how [22:33:29] <kreg> yes, even good mail [22:33:38] <seekwill> What's the point of learning a "fake" situation if it's not applicable? Regardless of a fake or real situation, I'm just tyring to figure out the scope of your question [22:34:07] <rob0> check_client_access, see access.5.html [22:34:22] <kreg> it's the same as learning how to do this. iptables -P INPUT DROP, iptables -P FORWARD DROP, iptables -P OUTPUT DROP [22:34:31] <kreg> useless in "real" situations [22:34:39] <kreg> but criticle to learning how thigns work [22:34:44] <kreg> i'm trying to learn "how" [22:34:47] <kreg> not do real world mail [22:35:05] <kreg> everytime i ask these quetsions, i get countered with "but why would you do that" [22:35:13] <seekwill> Maybe that's why I never liked school. Too much theory. [22:35:42] <seekwill> Well, features are built into the software are designed to do "real life" things. There wouldn't be a function to do fake stuff. [22:35:51] <kreg> bye [22:35:56] <seekwill> Where are you going? [22:36:06] <kreg> back to google [22:36:16] <seekwill> You got your answer here though [22:36:53] <seekwill> <rob0> check_client_access, see access.5.html [22:38:33] <seekwill> Man, and I never said it was a bad idea to do in the first place... [22:38:46] <rob0> !google [22:38:47] <knoba> rob0: Error: "google" is not a valid command. [22:39:26] <seekwill> Though for something like that, I would rather block at the firewall level, keep them out of the MTA... [22:39:28] <kreg> seekwill i see. my bad. sorry [22:39:56] <kreg> ya i can block at fw too. but the remote mta won't process any messages of why. just hang on connection attempts [22:40:19] <rob0> In drastic cases of abuse, fw blocking is probably best. [22:40:21] <seekwill> Sure, that's a legit claim [22:40:27] <kreg> ya [22:41:23] <seekwill> But if they weren't getting the message when your spam filter was rejecting them, not sure if failing all other messages would do any good. [22:42:44] <kreg> i think what happens is their customers start to complain to thier isp. then the isp sees the reject messages [22:42:49] <kreg> that's what has happened to us [22:43:00] <seekwill> oh [22:43:05] <rob0> !learn google as Those who use Google before reading the Postfix documentation, if fortunate, end up at http://www.postfix.org/ . If not, they end up in a jumble of bad questions, misleading or wrong answers, and outdated information. [22:43:32] <seekwill> heh [22:43:37] *** nazagorifau has joined #postfix [22:44:40] *** muecke77 has joined #Postfix [22:47:50] *** felix_da_catz has joined #postfix [22:57:49] *** descala has joined #postfix [22:59:20] *** muecke77 has left #Postfix [23:01:20] *** Radiance has quit IRC [23:05:47] *** descala has quit IRC [23:08:39] *** hacim has joined #postfix [23:09:03] <hacim> i'm trying to relay my mail to my main MX, for some reason when it tries to connect it gets a timeout [23:09:11] <hacim> but I can telnet there fine from that machine [23:10:27] <jonez> do you telnet to port 25? [23:10:32] <hacim> yes [23:10:58] <Trengo> do you get a 220 back? [23:11:21] <hacim> when I telnet I get what I expect, the postfix banner and I can walk the protocol [23:11:56] *** pitakill has joined #postfix [23:11:57] <Trengo> try sending an email by telnet? [23:12:00] <shasta> some fancy firewall maybe? [23:12:12] <hacim> Trengo: yeah i sent an email via telnet, and it was fine [23:12:17] <shasta> allowing connections made from uid=0, but not from uid=$(id -u postfix)? [23:12:18] <hacim> shasta: no firewall configured yet [23:12:50] <shasta> run tcpdump to find out what happens on the network where postfix tries to send the mail [23:13:10] <Trengo> hacim when you run the queue, try inspecting netstat -ant [23:14:35] <hacim> ah, i have postfix bound to the private IP, so maybe its not able to communiate to the public [23:15:55] <KragenSitaker> hacim: oh, so maybe the sender-SMTP is trying to connect to a different IP? [23:16:15] <Trengo> it wont be able to talk to the public IP [23:16:21] <Trengo> is that? [23:17:01] <hacim> i'm not sure, i just have my inet_interfaces config in postfix set to 10.0.0.53, but the relay host is on the public net [23:17:08] <hacim> and i guess the routing is confused? [23:17:35] <KragenSitaker> so you're telnetting to 10.0.0.53, and it works? [23:17:45] <KragenSitaker> what does the MX point to? [23:17:59] <hacim> no, i'm telnetting to the public IP that mx1 is on [23:18:04] <hacim> which is a public IP [23:18:29] <hacim> the host I am telnetting from has postfix bound on 10.0.0.53 and has two interfaces, one with 10.0.0.53 and one with its own public IP configured [23:19:44] <KragenSitaker> oh, so you're thinking that maybe postfix is binding the outgoing socket to 10.0.0.53 before calling connect? you ought to be able to run netstat -n while it's timing out and see the outgoing connection then [23:20:05] <hacim> yeah, thats my theory [23:20:17] <hacim> because if I change where postfix is bound to the public IP, it sends mail fine [23:21:21] *** RT^ has left #postfix [23:21:25] <KragenSitaker> heh, that sounds like a more direct way to test that hypothesis [23:27:58] <hacim> yeah, tahts what is happening [23:28:18] *** j_s has quit IRC [23:31:36] *** unbkbl has joined #postfix [23:32:14] <unbkbl> hello some could tellme in wich directory are located the logs of postfix? [23:32:46] <mwalling> !logs [23:32:47] <knoba> mwalling: "logs" : by default, postfix logs to the mail facility of syslog. Something like grep -i `postconf -h syslog_facility` /etc/syslog.conf or grep -rl `postconf -h syslog_name` /var/log/* should tell you where logs are going. [23:32:48] <wdp> unbkbl, /var/log or /var/log/mail [23:33:00] <wdp> normally.. [23:33:12] <unbkbl> thx so much wdp [23:33:35] <wdp> unbkbl, look at the grep command, displayed above my line.. [23:34:18] <unbkbl> ok :O) [23:38:11] *** unbkbl has quit IRC [23:45:37] *** pirho has quit IRC [23:46:11] *** nazagorifau has quit IRC [23:51:39] *** donspaulding has quit IRC [23:52:02] *** donspaulding has joined #postfix [23:54:21] *** madrescher has quit IRC [23:59:38] *** seekwill has quit IRC