[00:01:42] <sysmonk> i'd go with restriction classess [00:01:49] <sysmonk> !restriction_class [00:01:49] <knoba> sysmonk: "restriction_class" : http://www.postfix.org/RESTRICTION_CLASS_README.html [00:06:09] <kjs> nice one thanks [00:06:16] *** Samonoske_ has joined #postfix [00:06:31] <Samonoske_> what are the worst things that can happen if i have port 25 open? [00:07:21] <lunaphyte> in terms of what? [00:07:43] *** havvg has quit IRC [00:08:03] <Samonoske_> in terms of bad [00:08:14] <lunaphyte> you could get syphilis and die. [00:08:22] <soren> I hate that. [00:08:24] <Samonoske_> ... [00:09:26] *** GoGi has quit IRC [00:11:21] *** andreas_ has joined #postfix [00:11:29] <andreas_> Helllo [00:12:34] *** fonzie-- has joined #postfix [00:12:46] <andreas_> I had a postfix server running on Gentoo. Now I switched to Ubuntu and try to rebuild my old configuration. I think I've done it correct. But I get an error sending messages: [00:12:56] <andreas_> May 29 00:05:09 frodo postfix/smtp[20763]: E1A15A420B: to=<andreas.volz at elektrobit dot com>, relay=none, delay=2322, delays=2302/0.03/20/0, dsn=4.4.3, status=deferred (Host or domain name not found. Name service error for name=smtp.1und1.com type=MX: Host not found, try again) [00:13:11] <andreas_> Any ideas where to start searching for the problem? [00:13:16] <mwalling> does dns work? [00:13:44] <mwalling> mwalling@you ~$ host smtp.1und1.com [00:13:46] <mwalling> smtp.1und1.com has address 212.227.15.145 [00:13:46] <mwalling> smtp.1und1.com has address 212.227.15.129 [00:13:53] <andreas_> I could ping smtp.1und1.com [00:14:09] *** fonzie-- has quit IRC [00:14:35] <andreas_> my old config had option "disable_dns_lookups = yes". Should I set this too? [00:14:54] *** genioreal has quit IRC [00:15:11] *** genioreal has joined #postfix [00:19:17] *** finnur has joined #postfix [00:20:06] *** finnur has quit IRC [00:21:25] <andreas_> could someone please look to this log message and help me: http://pastebin.com/m725d470c [00:23:10] <andreas_> I don't understand the problem. [00:24:12] *** genioreal has quit IRC [00:25:40] <andreas_> I need to go off in some minutes. Doen anybody not have any idea? [00:27:04] *** tmjb has quit IRC [00:27:38] <andreas_> I'll come back tomorrow. If you like contact me at linux at brachttal dot net if you looked into the log. I would be very happy. See you... [00:27:52] *** andreas_ has quit IRC [00:33:56] *** genioreal has joined #postfix [00:36:16] *** genioreal has quit IRC [00:39:45] *** stickystyle has joined #postfix [00:41:47] *** tibyke has left #postfix [00:42:32] *** tibyke has joined #postfix [00:56:39] *** dragonheart has quit IRC [01:00:51] *** war9407 has quit IRC [01:04:36] *** tshine has quit IRC [01:14:19] *** |-D-|A|DeLord has quit IRC [01:24:47] *** JoseFR2 has quit IRC [01:28:40] *** wdp has quit IRC [01:40:28] *** pitakill has quit IRC [01:46:32] *** Zblakany has quit IRC [01:52:47] *** tshine has joined #postfix [02:05:42] *** Fallenou has quit IRC [02:08:52] *** pitakill has joined #postfix [02:14:22] *** c00l2sv has quit IRC [02:29:33] *** kithpom has quit IRC [03:03:29] *** ming_zym has joined #postfix [03:10:13] *** Tachy_ has joined #postfix [03:12:07] *** githogori has quit IRC [03:24:51] *** Tachy has quit IRC [03:26:50] *** stickystyle has quit IRC [03:29:53] *** pitakill has quit IRC [03:34:05] *** pirho has quit IRC [03:38:46] *** pirho has joined #postfix [03:43:11] *** pirho has quit IRC [03:48:24] *** pitakill has joined #postfix [03:50:07] *** keffer has joined #postfix [04:42:39] *** Motoko-chan has joined #postfix [04:47:19] *** amrit|wfh is now known as amrit|afk [04:48:54] *** hnsz2002 has quit IRC [04:48:54] *** tuxick has quit IRC [04:48:54] *** Bejgli has quit IRC [04:48:56] *** chrisq has quit IRC [04:48:56] *** F|oFF has quit IRC [04:48:56] *** mXr has quit IRC [04:48:58] *** jelly has quit IRC [04:48:58] *** sysmonk has quit IRC [04:49:00] *** kiliko_ has quit IRC [04:49:00] *** ming_zym has quit IRC [04:49:04] *** Zeit|awy has quit IRC [04:49:04] *** seekwill has quit IRC [04:49:06] *** nfi|ermes has quit IRC [04:49:06] *** mehulved has quit IRC [04:49:09] *** dafrog` has quit IRC [04:49:09] *** FuriousGeorge has quit IRC [04:49:11] *** mutante has quit IRC [04:49:13] *** mathez has quit IRC [04:49:13] *** lysander has quit IRC [04:49:15] *** dhg has quit IRC [04:49:15] *** CpuID has quit IRC [04:49:15] *** _gAri- has quit IRC [04:50:40] *** dafrog` has joined #postfix [04:54:33] *** seekwill has joined #postfix [04:54:33] *** Zeit|awy has joined #postfix [04:57:00] *** Zeit|awy has quit IRC [04:57:02] *** seekwill has quit IRC [04:57:09] *** Zeit|awy_ has joined #postfix [04:57:23] *** will_ has joined #postfix [04:57:34] *** ming_zym has joined #postfix [04:57:34] *** hnsz2002 has joined #postfix [04:57:34] *** Zeit|awy has joined #postfix [04:57:34] *** seekwill has joined #postfix [04:57:34] *** nfi|ermes has joined #postfix [04:57:34] *** mehulved has joined #postfix [04:57:34] *** tuxick has joined #postfix [04:57:34] *** FuriousGeorge has joined #postfix [04:57:34] *** Bejgli has joined #postfix [04:57:34] *** mutante has joined #postfix [04:57:34] *** kiliko_ has joined #postfix [04:57:34] *** CpuID has joined #postfix [04:57:34] *** mathez has joined #postfix [04:57:34] *** _gAri- has joined #postfix [04:57:34] *** lysander has joined #postfix [04:57:34] *** dhg has joined #postfix [04:57:36] *** jelly has joined #postfix [04:57:36] *** sysmonk has joined #postfix [04:57:43] *** F|oFF has joined #postfix [04:57:43] *** chrisq has joined #postfix [04:57:43] *** mXr has joined #postfix [04:58:04] *** Zeit|awy has quit IRC [05:02:52] *** yajith has joined #postfix [05:03:05] *** seekwill has quit IRC [05:09:13] *** yajith has left #postfix [05:11:35] *** bhagat has joined #postfix [05:11:43] *** kk_CHN has joined #postfix [05:21:16] *** csm-laptop has quit IRC [05:22:06] *** csm-laptop has joined #postfix [05:23:46] *** pitakill has quit IRC [05:25:16] *** saurabhb has joined #postfix [05:32:45] *** pitakill has joined #postfix [05:38:25] *** jeffspeff has joined #postfix [05:59:16] *** tshine has quit IRC [06:03:03] *** drake2 has joined #postfix [06:03:36] <drake2> postfix, lots of fun [06:05:49] *** m0f0x has quit IRC [06:08:27] <rob0> /j #postfun [06:12:18] <drake2> postfix is all good, Outlook 2003 not so good [06:14:50] <drake2> the problem with postfix is it works so good, you forget how to configure it [06:25:10] *** keffer has quit IRC [06:33:11] *** hparker has quit IRC [06:33:24] *** csm-laptop has quit IRC [06:51:17] *** ircmojo has joined #postfix [06:54:18] *** Zblakany has joined #postfix [06:58:12] <f3ew> drake2 which is why you hang out here and help other people [06:58:50] <thumbs> fun fun fun fun fun [06:59:32] <rob0> thumbs up [06:59:52] <thumbs> robbie ra... never mind [07:02:28] <drake2> had to figure out why outlook was messing up attachments sent to 2 accounts on the same server at the same time [07:02:44] <drake2> 1 was good, the 2nd not [07:03:14] <drake2> found out Outlook has independent settings per email address in the cache/address book for the sending format [07:03:52] <drake2> and the one was set to rich text instead of letting outlook decide [07:04:09] <drake2> stupid, makes it look like the server had a problem [07:15:03] *** saurabhb has quit IRC [07:16:01] *** saurabhb has joined #postfix [07:19:14] *** will_ has quit IRC [07:28:35] *** muecke77 has joined #postfix [07:32:36] *** muecke77 has quit IRC [07:58:10] *** githogori has joined #postfix [08:07:02] *** CrazyFoam has joined #postfix [08:10:16] *** phnord has joined #postfix [08:18:42] *** c00l2sv has joined #postfix [08:21:10] *** SniZ has quit IRC [08:29:55] *** sbathe_ has joined #postfix [08:31:43] *** madrescher has joined #postfix [08:32:11] *** stony__ has joined #postfix [08:40:39] *** syneus has joined #postfix [08:44:13] *** stony_ has quit IRC [08:45:00] *** amrit|afk is now known as amrit|zzz [08:45:05] *** saurabhb has quit IRC [08:49:19] *** sbathe_ has quit IRC [08:51:02] *** Motoko-chan has quit IRC [08:52:33] *** saurabhb has joined #postfix [09:01:15] *** c00l2sv has quit IRC [09:16:29] *** Tex-Twil has joined #postfix [09:22:30] *** Fallenou has joined #postfix [09:27:03] *** Fallen[oqp] has joined #postfix [09:27:20] *** Fallenou has quit IRC [09:33:01] *** AcTiVaTe has joined #postfix [09:49:54] *** hnsz2002 has quit IRC [09:51:48] *** Sypher has joined #postfix [09:52:43] <Sypher> hello! one question ... i have a postfix server which i have to take off the net and use a zimbra based suite ... my question is, is there a way to handle the mail that will come until the dns propagation is finished ? like forwarding it to the zimbra server using his ip ? [09:54:32] *** Tex-Twil has quit IRC [09:54:56] *** swarog has left #postfix [09:55:28] *** [diablo] has joined #postfix [09:58:07] *** war9407 has joined #postfix [10:01:00] *** harobed has joined #postfix [10:01:26] *** Tex-Twil has joined #postfix [10:06:36] <soren> Sypher: It's called iptables. [10:07:04] <Sypher> soren, so i should just forward the port like that? [10:07:19] <Sypher> dont know, sounded like it was a bad way. :D [10:07:24] <lennard> heh, suppose that'd work [10:07:35] <lennard> I'd probably go for proxy_pass myself [10:07:35] <soren> That's what I do every time I relocate servers. [10:10:40] <Sypher> soren, can you give me an example of the actual iptables line ? [10:11:02] <Sypher> or well, let me understand better. you take everything you get on 25 and forward it to another host ? [10:11:48] <soren> Something like that, yes. [10:12:02] *** suuuper has joined #postfix [10:13:11] <soren> The downside to this approach is that, until dns propagation is finished, all connections will appear to come from the old address. [10:16:52] *** dragonheart has joined #postfix [10:18:09] <Sypher> and that the old address gotta stay up for the process and act as a bridge :o [10:20:27] <soren> Yeah. [10:24:16] *** madrescher has quit IRC [10:27:26] *** wlx has quit IRC [10:28:35] *** visf has joined #postfix [10:39:56] *** alex__ has joined #postfix [10:41:29] *** af_ has joined #postfix [10:49:14] *** Zblakany has quit IRC [10:57:26] *** Tex-Twil_ has joined #postfix [10:59:27] *** xpoint has joined #postfix [11:02:00] *** SniZ has joined #postfix [11:04:46] *** denis has joined #postfix [11:05:09] *** AcTiVaTe has quit IRC [11:07:27] *** Tjikkun has quit IRC [11:14:25] *** Tex-Twil has quit IRC [11:15:56] *** hever has joined #postfix [11:22:49] *** SniZ has quit IRC [11:25:25] *** Tjikkun has joined #postfix [11:44:18] *** Tex-Twil_ is now known as Tex-Twil [11:56:07] *** magyar has quit IRC [11:56:15] *** magyar has joined #postfix [12:01:33] *** bhagat has quit IRC [12:11:21] *** kkk has joined #postfix [12:12:48] *** bhagat has joined #postfix [12:26:06] *** hark has quit IRC [12:26:06] *** mwalling has quit IRC [12:26:06] *** hing has quit IRC [12:26:08] *** saurabhb has quit IRC [12:26:11] *** bpgoldsb has quit IRC [12:26:11] *** will has quit IRC [12:26:13] *** padde has quit IRC [12:26:13] *** amrit|zzz has quit IRC [12:26:13] *** anuron_ has quit IRC [12:26:15] *** blackflag has quit IRC [12:26:15] *** Tabmow has quit IRC [12:26:15] *** Trengo has quit IRC [12:26:15] *** Zerberus has quit IRC [12:26:17] *** tm-30740-exa has quit IRC [12:26:19] *** Knoedel2 has quit IRC [12:27:11] *** saurabhb has joined #postfix [12:27:11] *** bpgoldsb has joined #postfix [12:27:11] *** will has joined #postfix [12:27:13] *** hark has joined #postfix [12:27:13] *** padde has joined #postfix [12:27:13] *** amrit|zzz has joined #postfix [12:27:13] *** anuron_ has joined #postfix [12:27:13] *** mwalling has joined #postfix [12:27:13] *** blackflag has joined #postfix [12:27:13] *** Tabmow has joined #postfix [12:27:13] *** Trengo has joined #postfix [12:27:14] *** Zerberus has joined #postfix [12:27:14] *** tm-30740-exa has joined #postfix [12:27:14] *** hing has joined #postfix [12:27:14] *** Knoedel2 has joined #postfix [12:27:18] *** blackflag has quit IRC [12:27:33] *** blackflag has joined #postfix [12:28:50] *** Zerberus has quit IRC [12:29:07] *** Zerberus has joined #postfix [12:29:26] *** hever has quit IRC [12:33:27] *** hever has joined #postfix [12:34:18] *** jelly has quit IRC [12:36:21] *** Tex-Twil has quit IRC [12:43:12] *** madrescher has joined #postfix [12:48:54] *** hever has quit IRC [12:50:27] *** bhagat has quit IRC [12:50:59] *** suuuper has quit IRC [12:52:10] *** keffer has joined #postfix [12:57:05] *** stickystyle has joined #postfix [12:57:24] *** bhagat has joined #postfix [12:58:56] *** JoseFR has joined #postfix [13:18:10] *** Tex-Twil has joined #postfix [13:19:48] *** stickystyle has quit IRC [13:25:34] *** CrazyFoam has quit IRC [13:28:19] *** bhagat has quit IRC [13:28:59] *** robboplus has quit IRC [13:34:25] *** kkk has quit IRC [13:34:27] *** jelly has joined #postfix [13:34:29] *** kk_CHN has quit IRC [13:36:04] *** stickystyle has joined #postfix [13:36:41] *** stickystyl has joined #postfix [13:37:57] *** jelly has quit IRC [13:39:16] *** Knoedel_ has joined #postfix [13:42:30] *** jelly has joined #postfix [14:10:55] *** ming_zym has quit IRC [14:16:09] *** Zeit|awy_ has quit IRC [14:23:13] <jduggan> hey guys [14:24:21] <jduggan> untill now i've been using check_client_access cidr:/mycidr ranges to allow some hosts to miss some restrictions... it works great but now i need to tie it into a web portal i need to make it more scalable.. so mysql is the route i need [14:24:26] <jduggan> question is [14:24:31] <jduggan> how would i do cidr ranges in a mysql map? [14:24:44] <jduggan> or am i literally going to have to insert each IP? [14:25:34] *** EasilyOdd has joined #postfix [14:28:02] <lunaphyte_> what's preventing you from simply storing the same values you're using in the flat file in sql? [14:37:24] *** ramoni has joined #postfix [14:41:27] <xpoint> any one help me here http://www.rfc-ignorant.org/tools/detail.php?domain=computersalg.dk&submitted=1212064737&table=postmaster am i stupid ? :=) [14:42:33] *** kiliko_ has quit IRC [14:42:47] *** kiliko has joined #postfix [14:46:09] *** alex__ is now known as alex12 [14:46:18] <soren> xpoint: Flow Control? [14:46:23] <soren> Some type of greylisting, perhaps? [14:46:37] <xpoint> dont know really [14:47:22] <xpoint> maybe thay running with VRFY disabled ? [14:48:43] <xpoint> else i see anyway the undeliverable should really be deliverable [14:49:04] <xpoint> weather or not it tempfails [14:49:17] <soren> All references to that error message I can find on Google are either Danish or Swedish. I'd say there's a good chance, it's something comendo.dk (whoever they are) made up. [14:49:28] <soren> It's probably code for "we suck". [14:49:41] <xpoint> yep [14:49:48] <xous> Have you been sending them a lot of emails [14:49:56] <xous> sounds like rate-limiting to me. [14:50:14] <xpoint> but undeliverable :/ [14:50:52] *** JoseFR2 has joined #postfix [14:51:09] <xous> have you tried contacting the admin via a different domain? [14:51:30] <xpoint> nope, i can still call them if i need help [14:51:42] <xpoint> but first evidences :-) [14:56:25] *** saurabhb has quit IRC [14:57:33] *** saurabhb has joined #postfix [14:59:04] *** JoseFR3 has joined #postfix [14:59:45] *** saurabhb has quit IRC [15:01:52] *** bicchi has joined #postfix [15:03:36] <bicchi> I am trying to set the maximum message size allowed to 20 MB. I have set message_size_limit = 20971520 and I am unable to send a 17 MB attachment. [15:03:56] <bicchi> I also have mailbox_size_limit = 0 [15:07:45] <jduggan> lunaphyte_: because cidr map reads cidr address ranges, mysql map understands a cidr range?? [15:08:53] <xpoint> jduggan, no, but if one make a magic select it does [15:15:40] *** saurabhb has joined #postfix [15:18:08] <stickystyl> bicchi: is that attachment 17MB binary (size on your computer), or 17MB after it has been base64 encoded to send over email? [15:18:14] *** JoseFR has quit IRC [15:20:07] *** warn1 has joined #postfix [15:20:17] *** suuuper has joined #postfix [15:20:46] <bicchi> stickystyl: not sure. I just created a 17MB file using "cat /dev/urandom > test" and tried sending that. [15:21:28] <stickystyl> because 17MB (assuming 30% overhead) is about 22MB when converted. [15:21:39] <bicchi> overhead? [15:22:07] <stickystyl> extra bytes used for conversion to base64. [15:23:06] <bicchi> why would it convert it to base64 [15:24:56] <stickystyl> because you have to send ASCII data over email, you can't send straight binary. [15:25:25] <bicchi> ah i see [15:25:27] <stickystyl> base64 converts binary into ASCII [15:25:40] <stickystyl> look at the raw source of an email that has an attachment. [15:26:01] <xpoint> ralf rejectede it, so i conclude its when VRFY is disabled, well i learnt something new todayt :) [15:26:38] <bicchi> stickystyl: so i should add an additional 30% to my message_size_limit [15:28:04] *** JoseFR2 has quit IRC [15:28:16] <stickystyl> bicchi: the overhead varies. 30% isn't a hard rule for conversion, it could be anywhere from say 25% - 40%. But 30% is a good rule of thumb i use. [15:28:18] <bicchi> it is difficult to know if the attachment would be in text or in binary and set it then [15:29:19] <bicchi> because if i make it too big and the email is a text document then the messages would go through. [15:29:49] *** af_ has quit IRC [15:29:51] <stickystyl> That is true. [15:30:39] <bicchi> is there a command in linux that would convert a binary file to text and give me its size as a text message [15:32:03] <bicchi> i think i found it: "base64 test > test2" [15:32:08] *** c00l2sv has joined #postfix [15:33:10] <stickystyl> that sounds like one, I don't know though as I have never needed to convert at the command line - only when I have been programing. [15:35:04] <bicchi> ah ok. well thanks for your help. [15:35:17] <stickystyl> No problem. [15:45:42] *** Samonoske_ has quit IRC [15:50:45] *** bicchi has left #postfix [16:00:13] *** felix_da_catz has joined #postfix [16:03:34] *** stickystyl has quit IRC [16:03:34] *** stickystyle has quit IRC [16:10:45] *** Tex-Twil has quit IRC [16:13:03] *** ming_zym has joined #postfix [16:13:38] *** [diablo] has quit IRC [16:17:41] *** saurabhb has quit IRC [16:18:14] *** Spec has quit IRC [16:18:27] *** ORION has joined #postfix [16:18:54] <ORION> Anybody can help me with this error? postfix/postfix-script: warning: /var/spool/postfix/etc/resolv.conf and /etc/resolv.conf differ [16:18:56] *** Dantix has joined #postfix [16:19:42] <shasta> which word you don't understand? ;) [16:20:00] *** ORION has quit IRC [16:21:44] <Dominian> hah [16:21:54] <Dominian> cp /etc/resolv.conf /var/spool/postfix/etc/resolv.conf [16:22:00] <Dominian> that's the growing pains of chrooting postfix ;) [16:22:02] <Dantix> hi all, I'm having problems after installed postprox to filter messages by size with a script of mine, several NDR with "queue file error". I've increase the verbosity of postfix logging, but now I can't follow a mail thread within too many information. Please advice me of a good log analyzer.. thanks in advance [16:25:02] *** Spec has joined #postfix [16:32:21] *** spybsd has joined #postfix [16:33:57] <spybsd> Hi there [16:34:24] <spybsd> got a weird issue on an OpenBSD box running Postfix/Amavisd-new/Postgrey [16:34:38] <spybsd> Greylisting and postifx seems to be working well according to my test [16:34:50] <spybsd> but i can't connect to the amavis proxy [16:35:01] <spybsd> still get this error in my maillog [16:35:34] <spybsd> postfix/smtpd[26402]: warning: connect to proxy service 127.0.0.1:10024: Connection refused [16:36:09] *** ORION has joined #postfix [16:36:19] <ORION> sorry I disconnected [16:36:24] <ORION> dont know what to do [16:36:56] <spybsd> :s [16:37:16] <ORION> Anybody can help me with this error? postfix/postfix-script: warning: /var/spool/postfix/etc/resolv.conf and /etc/resolv.conf differ [16:37:24] *** Tex-Twil has joined #postfix [16:37:26] <spybsd> pretty easy [16:37:28] <Dominian> spybsd: is amavisd started? [16:37:30] *** tshine has joined #postfix [16:37:44] <spybsd> you just need to copy /etc/resolv.conf to your chroot dir [16:37:55] <Dominian> cp /etc/resolv.conf /var/spool/postfix/etc/resolv.conf [16:37:59] <Dominian> that's the growing pains of chrooting postfix ;) [16:38:14] <ORION> aha I see I'll give it a try [16:38:39] * cpm has chrooting pains, thinks he needs to see the doctor [16:38:42] <spybsd> <Dominian> don't see the amavisd running when running ps [16:38:53] <spybsd> i use this to start it within my rc.local [16:39:11] <spybsd> # Start amavisd spam filter [16:39:13] <spybsd> echo -n ' amavisd'; /usr/local/sbin/amavisd [16:39:15] <Dominian> spybsd: Well if you don't see it running.. there's your problem [16:39:54] <spybsd> yeah, i'm pretty sure of that, but it should be started on boot using the rc.local file i show you, no? [16:40:17] *** Zeit|awy has joined #postfix [16:41:00] *** Fallen[oqp] has quit IRC [16:41:20] * spybsd should not have chroot his amavid conf [16:41:51] <spybsd> <Dominian> using debug mode it seems that it's permission issue to access perl modules [16:42:33] <Dominian> then I'd say you have your answer. [16:43:53] <spybsd> yes thanks :) [16:46:39] *** Haris_ has joined #postfix [16:47:03] *** knoxyy has joined #postfix [16:48:51] <will> is anyone here familiar with the propagate_unmatched_extensions parameter in postfix? [16:52:42] *** muecke77 has joined #postfix [16:56:51] *** hever has joined #postfix [16:57:38] <knoxyy> how can I do to clear the queue of postfix? [16:57:51] <ORION> anyone know here a good tutorial for dovecot postfix mysql installation? [16:58:06] *** Haris1 has quit IRC [16:58:09] <shasta> knoxyy, man postsuper [16:58:11] *** Haris_ is now known as Haris1 [16:59:33] *** denis has quit IRC [17:00:26] *** j_s has joined #postfix [17:01:35] *** SniZ has joined #postfix [17:02:49] *** muecke77 has quit IRC [17:04:25] *** f3ew has quit IRC [17:05:16] *** Knoedel_ has quit IRC [17:06:09] *** hever has quit IRC [17:07:26] <will> are there some postfix configuration options that can not be passed to smtpd via the command line as -o paramater=value ? [17:07:33] <will> or should all work [17:09:18] *** ORION has quit IRC [17:10:12] <Dantix> hi all, I'm having problems after installed postprox to filter messages by size with a script of mine, several NDR with "queue file error". I've increased the verbosity of postfix logging, but now I can't follow a mail thread within too many information. Please advice me of a good log analyzer.. thanks in advance [17:16:40] *** madrescher1 has joined #postfix [17:21:51] *** Trengo has quit IRC [17:22:36] *** f3ew has joined #postfix [17:28:53] *** madrescher has quit IRC [17:32:48] *** Dantix has left #postfix [17:40:44] *** stickystyle has joined #postfix [17:41:10] *** UQlev has joined #postfix [17:43:06] *** muecke77 has joined #postfix [17:46:10] *** f3ew has quit IRC [17:47:10] *** f3ew has joined #postfix [17:54:06] *** githogori has quit IRC [17:55:01] *** Tex-Twil has quit IRC [18:00:19] *** Sypher has quit IRC [18:00:34] *** stickystyle has quit IRC [18:03:25] *** JoseFR has joined #postfix [18:04:22] *** JoseFR2 has joined #postfix [18:07:24] *** UQlev has quit IRC [18:12:13] *** muecke77 has quit IRC [18:15:59] *** alys has joined #postfix [18:16:19] *** alys has quit IRC [18:25:35] *** JoseFR has quit IRC [18:26:55] *** JoseFR3 has quit IRC [18:34:27] *** syneus has quit IRC [18:35:26] *** JoseFR has joined #postfix [18:37:15] *** muecke77 has joined #postfix [18:37:31] <habnabit_> If I set virtual_alias_domains to the same hash as virtual_mailbox_domains, mail gets bounced if the user is not in the virtual alias table. Does virtual_alias_domains designate domains for which *only* aliases should be looked at? [18:37:35] *** amrit|zzz is now known as amrit|wfh [18:37:40] *** phnord has quit IRC [18:38:43] *** madrescher has joined #postfix [18:39:00] <rob0> why would you do that? [18:39:15] <rob0> !address_classes [18:39:17] <knoba> rob0: "address_classes" : http://www.postfix.org/ADDRESS_CLASS_README.html describes how Postfix deals with different classes of addresses: local, relay, virtual alias, virtual mailbox, and Internet. [18:39:19] *** muecke77 has quit IRC [18:39:46] <JoseFR> im still trying to find the best way to run my script that checks to see if keywords are included and other checks, its a .sh and i want to run it either before or after spamassassin runs [18:40:07] <JoseFR> im using -o content_filter=spamassassin atm [18:40:13] <JoseFR> struggling to find any howto's online for how to do it [18:40:19] <JoseFR> anyone any suggestions? [18:40:39] <habnabit_> rob0: so that an alias in my virtual_alias_maps table wouldn't take effect if the domain of the map wasn't in the domains hash. [18:42:30] <warn1> JoseFR: you could make a wrapper script to call both [18:45:10] <JoseFR> that sounds swell [18:45:32] <JoseFR> how would I go about doing that? :/ i tried to modify my script, i will pastebin what i did [18:47:12] <JoseFR> http://www.pastebin.ca/1033231 <-- then i pointed the disclaimer script to send the mail to sendmail [18:47:20] <JoseFR> would that work? [18:48:19] <warn1> does you script pipe back to sendmail? [18:48:29] <JoseFR> yes like this... [18:48:39] <JoseFR> $SENDMAIL "$@" <in.$$ [18:48:48] <JoseFR> $sendmail = SENDMAIL=/usr/sbin/sendmail [18:50:00] *** stickystyle has joined #postfix [18:50:05] <JoseFR> my in.$$ is.. cat >in.$$ --- afaik.. [18:51:42] <JoseFR> http://www.pastebin.ca/1033233 [18:51:46] <JoseFR> is the code im using [18:51:54] *** madrescher has quit IRC [18:54:53] *** madrescher1 has quit IRC [18:55:19] *** JoseFR2 has quit IRC [18:57:03] <warn1> JoseFR: master.cf part looks about right, what does log say? [18:57:32] <warn1> should be able to trace msg -> spamc -> script -> sendmail -> queue [18:57:37] <rob0> hn, the one and only documented way for a virtual_alias_maps listing to NOT take effect is for that listing to not exist. [18:59:23] <JoseFR> May 29 17:58:17 ds3788 spamc[29921]: exec failed: Permission denied [18:59:32] <JoseFR> dunno if thats the error ;/ [18:59:56] <JoseFR> yeah looks like it [19:00:10] <JoseFR> do i need to chown disclaimer to postfix? [19:00:50] *** githogori has joined #postfix [19:01:36] <JoseFR> May 29 18:00:44 ds3788 spamc[30059]: exec failed: Permission denied [19:01:39] *** ming_zym has quit IRC [19:01:41] <JoseFR> still perm denied ;/ [19:01:53] <JoseFR> i did chmod 777 on file and chown postfix on file [19:01:59] <rob0> Why would you have spamc running as postfix? [19:02:39] <JoseFR> spamc is getting the email after postfix from the script pupilcheck [19:02:39] <warn1> JoseFR: change owner of script - maybe i am think sendmail though [19:03:04] <JoseFR> i guess im piping the email through to spamc wrong after the script [19:03:45] <warn1> you are piping the spamc from postfix, and then to the script from spamc [19:03:59] <warn1> not the other way around. [19:04:05] <JoseFR> im piping to the script from postfix [19:04:10] <JoseFR> then spamc from the script [19:04:15] <JoseFR> postfix --> script --> spamc [19:04:29] <warn1> nope. [19:04:37] <JoseFR> wait no im not [19:04:42] <JoseFR> im doing postfix --> spamc --> script [19:04:47] <JoseFR> sorry... [19:04:49] <warn1> you are running spamc from postfix master.cf. then spamc exec script after scan [19:05:05] *** sparkleytone has joined #postfix [19:06:37] *** ming_zym has joined #postfix [19:07:41] <warn1> and yeah, head up my ass .. you need user= in master.cf definition [19:07:47] <JoseFR> okay i did chown spamfilter pupilcheck (pupilcheck is now the executable of my script) [19:08:06] <JoseFR> permission problem seems to be fixed [19:08:23] <JoseFR> status=sent (delivered via spamassassin service) [19:08:34] <JoseFR> so now its getting through spamc to the script but not getting through the script.. [19:08:58] <kjs> If i want to setup Postfix as a sort of "mail proxy" that does all my spam filtering then sends the mail on to the other mail servers... What is the best way to go about doing this? [19:09:41] <warn1> JoseFR: is it dying with error? [19:10:02] <JoseFR> i dont see any errors [19:10:21] <JoseFR> according to spamc its being delivered to the script successfully [19:10:29] <warn1> do you see sendmail reinjecting? [19:11:31] <JoseFR> i dont see any sendmail logs, sec. [19:12:33] <JoseFR> nop, i dont have any records from sendmail available to me, is there a way to turn on sendmail logging or should it log to /var/log/mail? [19:12:38] <rob0> "exec failed: Permission denied" is in many cases an AppArmor/SELinux thing. [19:16:31] <JoseFR> warn1: how can I test that script? [19:16:36] <JoseFR> please :) [19:18:38] <rob0> !standard [19:18:40] *** Siegfried has joined #postfix [19:18:40] <knoba> rob0: "standard" : Your question is probably answered in http://www.postfix.org/STANDARD_CONFIGURATION_README.html [19:18:44] <rob0> kjs: ^^ [19:18:57] *** AcTiVaTe has joined #postfix [19:21:12] <SniZ> ?????? ????? ?? ????? ???? ????_??? at emo dot by? [19:21:33] <SniZ> you wanna email like your_name at emo dot by? [19:23:00] <warn1> JoseFR: yes, sendmail *should* log to maillog [19:23:43] <warn1> JoseFR: have you tried manually running script, passing it what spamc would pass in as args? [19:27:20] <JoseFR> i dunno how to replicate what spamc would pass it ;/ [19:27:25] *** havvg has joined #postfix [19:27:35] <JoseFR> if i knew that I would be awfully happy [19:31:52] *** netcrash has quit IRC [19:34:52] *** muecke77 has joined #postfix [19:38:19] *** majikman has quit IRC [19:42:29] <warn1> JoseFR: spamc runs with the command specified in master.cf - with vars replaced of course. [19:42:40] <warn1> entire message is piped through stdin [19:42:55] <JoseFR> well in master.cf i have specified.. [19:43:14] <JoseFR> -oi -f ${sender} ${recipient} [19:43:16] <JoseFR> in my script i do.. [19:43:25] <JoseFR> SENDMAIL "$@" <in.$$ [19:43:42] <warn1> so: cat /tmp/some_message | spamc -e /usr/bin/your_script ... etc [19:43:55] <JoseFR> oki great [19:44:07] *** ming_zym has quit IRC [19:44:12] <JoseFR> i will google for an example message format [19:44:17] <JoseFR> is there any specific format im after? [19:46:03] *** muecke77 has quit IRC [19:47:22] *** Haris__ has joined #postfix [19:47:30] *** Haris__ is now known as Haris [19:51:00] <warn1> standard email format: http://pastebin.com/d6b8eb355 [19:51:22] <warn1> or pipe a message from your queue [19:55:08] *** majikman has joined #postfix [19:56:50] *** c00l2sv has quit IRC [19:59:10] *** robboplus has joined #postfix [19:59:33] *** muecke77 has joined #postfix [19:59:52] *** harobed has quit IRC [20:00:18] <JoseFR> May 29 18:59:25 ds3788 spamc[31535]: exec failed: Exec format error [20:06:48] <warn1> JoseFR: your -e arg is malformed. make sure to escape any special chars [20:10:41] *** denis has joined #postfix [20:12:42] <rob0> What OS is it? [20:13:49] *** anuron_ has quit IRC [20:13:51] *** anuron has joined #postfix [20:16:39] *** hbueno has joined #postfix [20:18:54] *** hbueno has quit IRC [20:19:43] *** xpoint has quit IRC [20:21:43] *** hbueno has joined #postfix [20:23:06] *** xpoint has joined #postfix [20:26:50] <JoseFR> warn1: would that be in the script that it is malforing the arguement? [20:29:29] <warn1> nope, doesn't sound like it. spamc is throwing the error [20:29:55] <rob0> cpm: Spork? [20:31:01] <cpm> rob0, spork! [20:31:19] <rob0> whew, that's good news. [20:32:27] * rob0 throws a spork at SELinux [20:32:32] *** tuxick has left #postfix [20:33:42] <JoseFR> hrum [20:34:43] *** stas_ has joined #postfix [20:34:45] *** stas__ has joined #postfix [20:34:49] *** stas_ has quit IRC [20:34:52] <JoseFR> any idea how to sort that? I'm stumped [20:35:00] *** c00l2sv has joined #postfix [20:35:29] <warn1> wild guess.. are the @ in your addresses escaped or quoted? spamc -e /usr/bin/whatever "someone at somewhere dot com" "me at mine dot com" [20:36:05] <warn1> i don't even know if it would matter. [20:36:09] <JoseFR> i just did.. [20:36:22] <JoseFR> cat /tmp/email.txt | spamc -e /etc/postfix/pupilcheck [20:36:38] <JoseFR> the error is prior to the script being executed or not? [20:36:53] <JoseFR> oh, sec. [20:40:13] *** f3ew has quit IRC [20:41:18] *** f3ew has joined #postfix [20:41:34] <JoseFR> oki now i get.. cat /tmp/email.txt | spamc -e /etc/postfix/pupilcheck [20:41:41] <JoseFR> /etc/postfix/pupilcheck: line 36: in.32221: No such file or directory [20:42:09] <warn1> JoseFR: okay, *now* it's a problem with your script. [20:42:22] <JoseFR> line 36 = $SENDMAIL "$@" <in.$$ [20:42:33] <JoseFR> huraa, im glad we got to blaming me :) [20:43:21] *** hbueno has quit IRC [20:43:26] <warn1> i'd hardcode the directory path on that line and any others dealing with that in.$$ file [20:44:30] <JoseFR> oki [20:46:12] <JoseFR> ds3788:/etc/postfix # cat /tmp/email.txt | spamc -e /etc/postfix/pupilcheck [20:46:12] <JoseFR> sendmail: fatal: Recipient addresses must be specified on the command line or via the -t option [20:46:57] <JoseFR> so i tried [20:46:57] <JoseFR> ds3788:/etc/postfix # cat /tmp/email.txt | spamc -e /etc/postfix/pupilcheck john at primaryt dot co.uk [20:46:57] <JoseFR> ds3788:/etc/postfix # [20:48:01] <JoseFR> heh [20:48:08] <JoseFR> status=bounced (Spam is bad.) [20:50:00] <JoseFR> k added root to whitelist to test [20:51:39] <JoseFR> still no luck, feh [20:59:12] *** muecke77 has left #postfix [21:01:16] *** alex12 has quit IRC [21:04:23] *** pitakill has quit IRC [21:04:31] *** Haris_ has joined #postfix [21:07:05] *** action09 has joined #postfix [21:15:45] *** Haris1 has quit IRC [21:18:33] *** denis has quit IRC [21:19:44] *** muecke77 has joined #postfix [21:22:31] *** will has quit IRC [21:37:10] *** muecke77 has left #postfix [21:38:04] *** dni has joined #postfix [21:38:52] <dni> hello room,.. can anyone tell me if i can setup virtual domains with postfix so there doesnt have to be any local users on the box,... sorta how vpopmail/qmail does ? [21:39:32] *** arreyder is now known as arrey|der [21:40:39] *** pa has quit IRC [21:41:12] <warn1> you mean so usernames are someasshole at somedomain dot com? or so local delivery is completely disabled? [21:42:21] *** arrey|der is now known as arreyder [21:43:54] *** jeffspeff has quit IRC [21:46:40] <dni> yea its difficult to explain,. but yea i still want it to do local delivery but instead of looking for Maildir,. for it to be several virtual users per each virtual domain [21:52:38] *** arreyder is now known as arrey|der [21:53:48] *** tshine has quit IRC [21:53:50] *** arrey|der is now known as arreyder [21:53:52] <warn1> dni: yes, postfix will handle that fine. you can specify maildir paths in mailbox lookup table to be whatever you want. [21:56:09] *** m_p2 has joined #postfix [21:58:14] *** cpm has quit IRC [21:58:56] *** action09 has quit IRC [22:06:24] <dni> warn1 : cool,. thanks ill do some research and see if i cna find some docs [22:07:04] *** [diablo] has joined #postfix [22:09:19] *** hemry has joined #postfix [22:14:13] *** m_p has quit IRC [22:14:45] *** arreyder is now known as arrey|der [22:15:11] *** arrey|der is now known as arreyder [22:15:47] *** Mathman has joined #postfix [22:20:02] <Mathman> So...that cheatsheet thing is pretty handy, thanks to whoever made it. one problem though. outlook is a piece of junk apparently. perhaps there should be some notes on there about what to do to get things working with outlook? [22:20:28] <Dominian> Getting what working with Outlook ? [22:22:20] <rob0> Google has plenty of such notes. [22:22:22] <Mathman> well, sending mail in particular. with some of that cheatsheet stuff in, I'll get errors about outlook not doing fully qualified hostnames [22:22:30] *** Siegfried has quit IRC [22:23:11] <rob0> No, you just put the permit_* restrictions before the reject_* ones, pretty simple! [22:26:03] *** pirho has joined #postfix [22:26:55] <Mathman> !cheatsheet [22:26:55] <knoba> Mathman: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control. [22:29:35] <Mathman> hmm, seems like there was a word of caution against doing just that, but now I can't seem to find it [22:30:15] <rob0> it's in this: [22:30:17] <rob0> !access [22:30:17] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server. [22:32:00] <rob0> what I do: use "permit_auth_destination" rather than "OK" or "permit" as lookup result, unless the lookup is specifically intending to allow relaying. [22:33:39] <rob0> That tip came from the late Tonni Earnshaw, who was a postmaster for a school in the Netherlands. Passed away 2008/04/29. [22:34:02] *** havvg has quit IRC [22:35:11] <Dominian> hmm [22:35:18] <Dominian> rob0: you do something like that for submission as well/ [22:36:37] <Mathman> rob0: thanks [22:36:41] <rob0> No, I keep submission simple: -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject [22:37:22] <rob0> maybe a permit_mynetworks too [22:38:17] <rob0> Anyway this all brings up the very good Best Practice point: force your users to use submission, discourage the use of 25 for that. [22:42:19] *** dragonheart has quit IRC [22:42:33] <Mathman> I was going to go with the smtps port as far as forcing users to use something goes. [22:43:27] <Mathman> man, the guy before me was nuts at any rate. pop3 and imap were open to the internet. And all these people have started to complain ever since I closed those off. [22:45:14] *** unclecameron has joined #postfix [22:45:27] *** knoxyy has quit IRC [22:52:52] *** moonlit has joined #postfix [22:53:00] *** moonlit has left #postfix [22:53:10] <Mathman> so I'm confused perhaps. If I put permit_mynetworks before reject_unauth_destination, then anyone spoofing one of machines on my network should be able to use my server as a relay, no? But if I do it vice versa, then people on my network would only be able to send to local recipients. Or am I completely wrong here? [22:54:02] *** stickystyle has quit IRC [22:54:09] *** arreyder is now known as AmR|EiSa [22:54:14] *** Mathman has quit IRC [22:54:22] *** AmR|EiSa is now known as arreyder [22:54:36] <rob0> confused indeed [22:55:13] *** arreyder is now known as AmR|EiSa [22:55:44] *** wdp has joined #postfix [22:59:45] *** AmR|EiSa is now known as arreyder [23:01:14] *** arreyder is now known as arrey|der [23:01:33] *** arrey|der is now known as AmR|EiSa [23:01:47] *** AmR|EiSa is now known as arreyder [23:02:01] *** pirho has quit IRC [23:02:57] *** arreyder is now known as AmR| [23:04:20] *** AmR| is now known as AmR|E [23:04:29] *** AmR|E is now known as AmR|Ei [23:05:08] *** pirho has joined #postfix [23:05:16] *** AmR|Ei is now known as arreyder [23:05:24] *** arreyder is now known as AmR|EiS [23:05:41] *** Mathman has joined #postfix [23:05:48] *** AmR|EiS is now known as arreyder [23:06:14] <Mathman> hmm, did anyone comment (or even see I guess I could ask) on my previous post? [23:06:24] *** arreyder is now known as AmR|EiSa [23:06:39] *** AmR|EiSa is now known as arreyder [23:07:20] *** arreyder is now known as aaa|aaa [23:07:34] *** aaa|aaa is now known as AmR|EiSa [23:08:02] <rob0> "Spoofing one of machines on my network"? [23:08:05] *** AmR|EiSa is now known as arreyder [23:08:21] <shasta> arreyder, stop that [23:08:40] *** arreyder is now known as aaa|aaaa [23:08:57] *** aaa|aaaa is now known as arreyder [23:09:12] <mwalling> shasta: /ignore #postfix NICKS :) [23:09:29] <arreyder> sorry [23:09:39] <arreyder> testing a buggy bot in apache [23:09:50] <mwalling> dont do it here? [23:09:52] <arreyder> some combination of | is killing out infor bot [23:10:03] <arreyder> yeah, didnt mean to, forgot I was in here [23:10:05] *** j_s has quit IRC [23:10:05] <arreyder> my apologies [23:10:07] <Mathman> rob0: well yeah. sending an email that appears to be coming from one of the ip addresses on my network [23:10:27] <Mathman> even though it's coming from somewheres external [23:10:29] *** arreyder has left #postfix [23:11:08] <rob0> Does Mathman understand that SMTP is interactive? "Spoofing" isn't enough, they also have to be able to receive and reply to the responses. [23:11:52] <Mathman> ha, ok, you got me. I'm an idiot [23:12:17] <rob0> Obviously, keep mynetworks restricted to those where you can reach out and strangle perpetrators. [23:14:59] <shasta> mwalling, I want to know when rob0 changes nick to ilovedebian [23:15:08] <mwalling> haha [23:19:17] <rob0> Hmmm, I should be aware of that too. Someone wake me up if it happens! [23:20:31] *** EasilyOdd has quit IRC [23:41:53] *** c00l2sv has quit IRC [23:45:12] *** dni has quit IRC [23:50:10] *** Haris__ has joined #postfix [23:59:58] *** hparker has joined #postfix