[00:13:16] *** Fallenou has quit IRC [00:13:31] *** master_of_master has joined #postfix [00:16:17] <master_of_master> hi, I've got a problem with postfix/postqueue. The delivery speed of mails in the queue is less than 1 mail per second. How can I speed that up? [00:17:11] <master_of_master> all mails in the queue have to be delivered to local maildir. [00:17:46] *** hever has joined #postfix [00:20:47] <Korthrun> I'd start by determining the bottleneck location for whatever thats worth. make sure you have idle cpu/free memory, that other disk writes are going speedy etc [00:20:52] <Korthrun> of course I'm like 0 for 10 today [00:21:05] *** hever has quit IRC [00:24:04] *** action09 has quit IRC [00:26:18] *** havvg has quit IRC [00:32:40] *** dMaggot has joined #postfix [00:32:56] <dMaggot> hi guys, quick question, do I really need to stop postfix before running postsuper -s?? [00:33:52] <Korthrun> seems like it would cause issues if postfix was trying to write to a foobared structure while postsuper was trying to fix it [00:34:20] <Korthrun> especially with the whole inode# deal [00:36:38] *** pr0t has joined #postfix [00:36:40] <pr0t> Is there anything ouit there like MailSite, but for spamassassin I want to be able to generate logs and see what's ham and spam [00:37:26] *** higuita has quit IRC [00:40:53] <dMaggot> Korthrun: thanks [00:45:51] *** piedoggie has joined #postfix [00:46:08] <pr0t> ayone here use Maia Mailguard [00:49:23] *** piedoggie has quit IRC [00:56:10] *** dMaggot has left #postfix [00:58:32] *** pr0t has quit IRC [01:00:20] *** war9407 has quit IRC [01:12:41] *** |DeuS| has quit IRC [01:13:55] *** Mavvie has quit IRC [01:15:40] *** uspv has joined #postfix [01:16:20] <uspv> ~~~~~~~~~ [01:16:24] *** uspv has quit IRC [01:19:01] *** uspv has joined #postfix [01:21:11] *** uspv has joined #postfix [01:37:01] *** madrescher has quit IRC [01:38:31] *** McJerry has joined #postfix [01:41:53] *** is_null has joined #postfix [01:42:11] *** madrescher has joined #postfix [01:42:48] *** madrescher has left #postfix [01:48:47] *** tsh has quit IRC [01:49:07] *** tsh has joined #postfix [01:50:19] *** keffer has joined #postfix [01:50:56] *** uspv has quit IRC [01:53:51] *** tsh has quit IRC [01:54:10] *** tsh has joined #postfix [01:56:44] <is_null> hello everybody, how to set a cleanup hook? [01:58:48] *** tsh has quit IRC [01:59:08] *** tsh has joined #postfix [02:01:47] *** [diablo] has quit IRC [02:11:47] *** pirho has quit IRC [02:12:10] *** Zblakany has quit IRC [02:12:14] *** pirho has joined #postfix [02:24:23] *** martianixor has joined #postfix [02:38:50] *** PhilKC has quit IRC [02:49:05] *** ikaro^ has joined #postfix [02:50:52] *** ming_zym has joined #postfix [02:57:41] *** ming_zym has quit IRC [03:00:15] *** ming_zym has joined #postfix [03:00:33] *** ikaro has quit IRC [03:00:35] *** ikaro^ is now known as ikaro [03:05:02] *** pirho has quit IRC [03:10:26] *** Tachy_ has joined #postfix [03:21:56] *** pitakill_ has joined #postfix [03:22:47] *** Tachy has quit IRC [03:27:50] *** wols has joined #postfix [03:35:00] *** idle-boy` has joined #postfix [03:38:07] *** fiftycal has quit IRC [03:39:05] *** wols_ has quit IRC [03:43:16] *** amrit|wrk is now known as amrit|afk [03:43:28] *** robboplus has quit IRC [03:46:18] *** Psykick has joined #postfix [03:46:20] <Psykick> hi guys [03:46:35] <Psykick> having a weird problem with postfix ... [03:46:56] <Psykick> postfix seems to allow users to create a new message and send it fine [03:47:00] <Psykick> however... [03:47:21] <Psykick> when forwarding a message ... user gets "504 5.5.2 Server HELO command rejected need fully qualified hostname" error message [03:47:31] <Psykick> any suggestions? [03:49:51] *** mwalling has quit IRC [03:52:16] *** idle-boy`` has quit IRC [03:56:39] *** githogori has quit IRC [04:02:26] *** mwalling has joined #postfix [04:17:55] <Korthrun> In all mail clients? [04:19:27] <Korthrun> out of curiosity which client is doing that? new to me that wether or not you click forward changes the hello it uses [04:26:02] *** mwalling has quit IRC [04:30:04] *** mwalling has joined #postfix [04:31:33] *** zuijiu has joined #postfix [04:34:05] *** tombar has joined #postfix [04:40:27] *** tombar_ has joined #postfix [04:44:23] *** tellus_ has quit IRC [04:45:00] *** wols has quit IRC [04:45:08] *** wols has joined #postfix [04:51:54] *** zuijiu has quit IRC [04:57:46] *** tombar has quit IRC [05:07:02] *** Zeit|awy_ has quit IRC [05:13:14] *** Motoko-chan has joined #postfix [05:13:15] <Psykick> Korthrun: that's what doesn't make sense [05:17:08] *** DumFuq has joined #postfix [05:18:36] *** tombar_ has quit IRC [05:18:51] *** EE_BB___ has joined #postfix [05:19:02] *** jeev___ is now known as jeev [05:19:30] *** tombar has joined #postfix [05:33:11] *** master_o1_master has joined #postfix [05:34:05] *** EE_BB has quit IRC [05:34:40] *** Psykick has quit IRC [05:39:15] *** fiftycal has joined #postfix [05:41:29] *** EE_BB____ has joined #postfix [05:41:31] *** EE_BB____ is now known as EE_BB [05:44:02] *** Psykick has joined #postfix [05:44:53] *** master_of_master has quit IRC [05:54:19] *** wols_ has joined #postfix [05:59:30] *** EE_BB___ has quit IRC [05:59:49] *** Psykick has quit IRC [06:03:16] *** DumFuq has quit IRC [06:04:59] *** Motoko-chan has quit IRC [06:06:04] *** wols has quit IRC [06:08:01] *** githogori has joined #postfix [06:25:38] *** saurabhb has joined #postfix [06:29:13] *** kk_CHN has joined #postfix [06:29:25] *** bhagat has joined #postfix [06:29:29] *** bhagat_ has joined #postfix [06:33:17] *** clusterer has joined #postfix [06:53:47] *** clusterer has left #postfix [06:56:30] *** ircmojo has quit IRC [06:57:00] *** pitakill__ has joined #postfix [06:57:20] *** pitakill_ has quit IRC [06:58:24] *** McJerry has quit IRC [07:25:16] *** tshine has joined #postfix [07:29:07] *** wedge has quit IRC [07:31:50] *** stefan-f has quit IRC [07:36:15] *** Zblakany has joined #postfix [07:37:46] *** will_ has joined #postfix [07:39:50] *** wedge has joined #postfix [07:49:23] *** Fallenou has joined #postfix [07:53:13] *** tombar has quit IRC [07:56:35] *** EE_BB has quit IRC [08:01:48] *** Motoko-chan has joined #postfix [08:08:03] *** wedge has quit IRC [08:08:05] *** wedge has joined #postfix [08:10:08] *** tellus has joined #postfix [08:14:14] *** idle-boy has quit IRC [08:15:00] *** tshine has quit IRC [08:19:22] *** stefan-f has joined #postfix [08:36:20] *** tshine has joined #postfix [08:38:26] *** sophokles has joined #postfix [08:38:45] *** anuj has quit IRC [08:38:50] *** syneus has joined #postfix [08:42:33] *** shinao1 has joined #postfix [08:51:01] *** tshine has quit IRC [08:58:46] *** pitakill__ has quit IRC [08:59:58] *** diqpib has joined #postfix [09:08:11] *** rurouni has joined #postfix [09:09:51] *** madrescher has joined #postfix [09:16:38] *** Tex-Twil has joined #postfix [09:16:57] *** marfis has left #postfix [09:22:01] *** AllenJB_ has joined #postfix [09:22:04] *** AllenJB has quit IRC [09:22:06] *** Motoko-chan has quit IRC [09:23:35] *** kk_CHN has quit IRC [09:25:47] *** m_p has joined #postfix [09:30:39] *** af_ has joined #postfix [09:40:35] *** master_o1_master is now known as master_of_master [09:49:19] *** Tex-Twil has quit IRC [09:53:18] <master_of_master> hi, is it possible to switch content filtering off for a certain address? [09:56:35] *** Internat has joined #postfix [09:56:53] *** sypher has joined #postfix [09:57:09] <dragonheart> master_of_master: what sort? there is a whitelisting option in most external content filters [09:57:47] *** war9407 has joined #postfix [09:58:44] *** madrescher has quit IRC [10:01:53] <master_of_master> dragonheart: thx, then I'll have a look at the whitelisting in amavis. [10:02:21] *** AllenJB has joined #postfix [10:02:55] <rurouni> anyone know how to limit sending out to external smtp only if the from address belongs to a local virtual domain? [10:03:35] <dragonheart> can't control the from address but you probably can control the return path [10:03:48] <wols_> rurouni: not good. a spammer could use your "from:" address and spam on your behalf [10:04:01] *** [diablo] has joined #postfix [10:04:02] <wols_> use smtpd auth or mynetworks= [10:04:49] *** Zeit|awy has joined #postfix [10:06:20] *** AllenJB_ has quit IRC [10:06:22] *** denis has joined #postfix [10:06:23] <rurouni> will mynetworks return a bounced message if the mail is rejected? [10:07:05] <dragonheart> rejected messages are logged however they can't bounce until they are accepted [10:11:14] *** internat85 has quit IRC [10:13:58] <rurouni> i dont really want to control the "from:" address, i merely want to add an alias of a virtual mail to a remote external address ie (mailbox: me at virtual dot com alias: me at virtual dot com, me at gmail dot com) [10:14:25] <wols_> I gave you two ways to reach your goal [10:14:44] <wols_> your postfix will send any mail no matter the from: or such if it comes from the right subnet [10:15:04] *** ming_zym has quit IRC [10:16:53] <dragonheart> rurouni: could use virtual aliases for that however it could give you SPF troubles depending on the senders domain and receiving checking [10:16:55] *** suuuper has joined #postfix [10:17:07] <rurouni> ok now if a mail arrives from a yahoo.com or any external email, the me at virtual dot com receives mail, but then when postfix sends out to the external alias, the mail bounces back to the original sender. [10:17:13] <dragonheart> is probably better to setup a little pop server and get gmail to fetch from it [10:18:44] *** ming_zym has joined #postfix [10:20:45] *** lysander has quit IRC [10:21:22] <dragonheart> rurouni: the bouncing is caused by the receiving mail server - does it give a reason? [10:21:46] <rurouni> 553 sorry, sender mail address must correspond to local mail domain [10:22:43] <wols_> rurouni: see topic [10:22:54] <wols_> especially the postconf stuff [10:23:29] <wols_> seems you set options to disallow postfix from sending non local domain mails eplicity [10:23:33] <wols_> *explicitly [10:23:50] *** amrit|afk is now known as amrit|zzz [10:27:14] *** saiam has joined #postfix [10:28:53] *** lysander has joined #postfix [10:41:27] *** tm-30740-exa has quit IRC [10:45:16] *** will_ has quit IRC [10:48:54] *** jra has joined #postfix [10:49:49] *** lysander has quit IRC [10:51:39] <sep> what's better for maildir, nfs or iscsi ? [10:51:55] <sep> and with iscsi what filesystem would you use ? [10:54:47] *** madrescher has joined #postfix [10:56:10] <dragonheart> maildir is ment to be safe for all filesystems. i'm imagining your networked file system requirement should influence your decision more. [11:03:17] *** tellus has quit IRC [11:05:30] *** Mavvie has joined #postfix [11:08:53] <Trengo> im trying out iscsi on linux, and multipath segfaults [11:09:07] <Trengo> im not too happy with it :s [11:09:45] *** tm-30740-exa has joined #postfix [11:13:32] *** hever has joined #postfix [11:14:57] *** denis has quit IRC [11:15:55] *** madrescher has quit IRC [11:16:09] *** af_ has quit IRC [11:18:13] *** lysander has joined #postfix [11:31:29] *** pa has joined #postfix [11:35:28] *** idle-boy has joined #postfix [11:39:52] *** rhalff has joined #postfix [11:40:53] *** fiftycal has left #postfix [11:41:18] *** Dominian has quit IRC [11:42:41] *** rob0 has quit IRC [11:42:46] <rhalff> hi using reject_rbl_client with blacklists, if a blacklist server is unavailable the mail will be rejected. [11:43:08] <rhalff> how can I change this ? so the mail will not be blocked because a rbl server is unreachable ? [11:44:45] *** robboplus has joined #postfix [11:52:40] *** tellus has joined #postfix [11:53:22] *** idle-boy` has quit IRC [11:54:11] <jra> rhalff: postfix shouldn't reject the mail if it can't resolve the rbl server. [11:55:37] <jra> another case is when you're using a suspended rbl that resolves every ip as being listed [11:57:07] *** Tex-Twil has joined #postfix [11:59:36] <rhalff> jra: ah :) [11:59:40] *** havvg has joined #postfix [12:00:41] *** martianixor has quit IRC [12:00:58] *** madrescher has joined #postfix [12:10:10] *** pa has quit IRC [12:16:27] *** pa has joined #postfix [12:17:42] *** denis has joined #postfix [12:19:08] <is_null> hello everybody, how to set a cleanup hook? (i'd like to encrypt some messages automatically if postfix has the public key) [12:19:26] *** Me2resh- has joined #postfix [12:22:52] *** idle-boy` has joined #postfix [12:26:15] *** madrescher has quit IRC [12:30:53] *** rhalff has left #postfix [12:33:28] *** Robot101 has joined #postfix [12:35:46] <Robot101> I'm having a problem with my server accepting mail to forward to others which has a valid, yet forged, sender address, and the final recipient's server rejecting it, and us generating bounces to an unrelated individual... [12:35:50] *** ananke has left #postfix [12:36:27] <Robot101> in theory I should request/demand that all hosts we forward to do not reject mail from us, but that's pretty infeasible in practice [12:37:04] <Robot101> is it possible to a) rewrite the envelope sender when we forward, b) just never send remote bounces at all, or c) forward the mail on "live" so we can return any errors back to the original sender? [12:37:37] <Robot101> they're just entries in the virtual table at the moment [12:41:19] *** idle-boy has quit IRC [12:42:32] *** denis has quit IRC [12:43:40] *** pa has quit IRC [12:49:46] *** pa has joined #postfix [12:52:39] *** pa has quit IRC [12:53:36] *** cpm has joined #postfix [13:05:37] *** diqpib has quit IRC [13:05:56] *** diqpib has joined #postfix [13:07:33] *** Rockj has joined #postfix [13:13:18] *** kk_CHN has joined #postfix [13:13:18] *** _zsh has joined #postfix [13:17:23] *** Tex-Twil has quit IRC [13:22:16] *** Dominian has joined #postfix [13:22:51] *** rob0 has joined #postfix [13:27:17] *** pa has joined #postfix [13:35:08] *** hf|work has quit IRC [13:35:13] *** Mavvie has quit IRC [13:38:40] *** Mavvie has joined #postfix [13:39:57] *** havvg has quit IRC [13:41:25] *** ming_zym has quit IRC [13:41:48] *** havvg has joined #postfix [13:42:47] *** sparkleytone has joined #postfix [13:47:47] *** m_p has quit IRC [13:52:11] *** pa has quit IRC [13:52:47] *** pa has joined #postfix [13:55:41] *** Tex-Twil has joined #postfix [13:55:41] *** bhagat_ has quit IRC [13:57:55] *** saurabhb has quit IRC [13:59:58] *** Dominian_ has joined #postfix [14:00:55] *** Dominian has quit IRC [14:09:48] *** jellis-real has joined #postfix [14:12:21] *** sophokles has quit IRC [14:12:55] *** sophokles has joined #postfix [14:15:01] *** Nockian has quit IRC [14:26:08] *** shinao1_ has joined #postfix [14:27:26] *** shinao1_ has quit IRC [14:27:47] *** shinao1_ has joined #postfix [14:30:32] *** shinao1 has quit IRC [14:30:35] *** Zblakany has quit IRC [14:31:18] *** Zblakany has joined #postfix [14:31:39] *** denis_ has joined #postfix [14:36:27] *** knoba has quit IRC [14:36:41] *** knoba has joined #postfix [14:37:03] <sysmonk> knoba ^C himself! [14:38:41] <cpm> !knoba [14:38:41] <knoba> cpm: "knoba" : an informational bot in this channel (see http://workaround.org/f=postfix) [14:38:47] * cpm yawns [14:38:49] *** Dominian_ is now known as Dominian [14:38:54] <cpm> sheesh knoba, how boring is that? [14:38:56] <cpm> !sysmonk [14:38:57] <knoba> cpm: "sysmonk" : evil [14:39:04] <sysmonk> !evil [14:39:04] <knoba> sysmonk: Error: "evil" is not a valid command. [14:39:06] <sysmonk> :( [14:39:22] <sysmonk> i thought it'll be recursive [14:39:54] <cpm> !learn evil as is sysmonk [14:39:59] <sysmonk> :)) [14:40:03] <sysmonk> !evil [14:40:03] <knoba> sysmonk: "evil" : is sysmonk [14:40:10] <sysmonk> :P [14:40:28] <sysmonk> now, how to make knoba loop on that... hmmm... [14:43:02] *** havvg has quit IRC [14:44:15] *** havvg has joined #postfix [14:46:44] *** tombar has joined #postfix [15:04:31] *** Tex-Twil has quit IRC [15:04:39] *** Mavvie has quit IRC [15:16:10] *** shinao1_ has quit IRC [15:26:49] *** denis_ has quit IRC [15:29:57] *** lunaphyte_ has quit IRC [15:31:12] *** tombar has quit IRC [15:31:30] *** tombar has joined #postfix [15:40:33] *** PhilKC has joined #Postfix [15:41:17] *** lunaphyte_ has joined #postfix [15:41:51] *** Mavvie has joined #postfix [15:49:42] *** bhagat has quit IRC [15:50:37] *** cite has quit IRC [15:50:40] *** Me2resh- has quit IRC [15:51:01] *** kk_CHN has quit IRC [15:56:13] *** cite has joined #postfix [16:13:19] *** will_ has joined #postfix [16:14:05] <magyar_> hi, have an odd issue, postfix is the mailgateway for an exchange server. Some emails are being delivered three for times to recipients and I see the queue for them in the postfix logs. What could cause this? [16:23:38] <mwalling> how the hell do you expunge an imap box with lookOut [16:23:42] <mwalling> *HEADDESK* [16:24:07] <mwalling> why the hell cant $employer use something besides exchange so i dont have to use this fscking client [16:24:10] <shasta> rm -rf ~/Maildir/cur/* ;-) [16:28:53] <f3ew> mwalling ctrl E? [16:29:31] <mwalling> C-e brings up find, C-E brings up new folder [16:29:37] <mwalling> *headdesk* [16:31:16] *** ming_zym has joined #postfix [16:34:19] *** af_ has joined #postfix [16:36:45] *** Trengo has quit IRC [16:37:30] *** m0f0x has joined #postfix [16:38:00] *** jra has quit IRC [16:47:34] *** sypher_ has joined #postfix [16:48:31] *** sypher has quit IRC [16:57:00] *** badar has joined #postfix [16:58:02] <badar> If I have domain aaab.com, but I specify my servers hostname in postfix config file, will I be able to create users as user at aaab dot com ? Sorry, I'm quite new to this stuff, so please don't laugh :) [16:58:14] *** Robot101 has left #postfix [16:58:21] *** TaiSHi has joined #postfix [16:58:38] <shasta> !basic [16:58:38] <knoba> shasta: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here. [16:58:46] <shasta> !mydestination [16:58:47] <knoba> shasta: "mydestination" : a configuration parameter in the main.cf: The list of domains that Postfix delivers via the $local_transport mail delivery transport. By default, mail is given to the Postfix local(8) delivery agent that looks up all recipients in /etc/passwd and /etc/aliases, or their equivalents. [16:58:55] <shasta> badar, ^^^^^^^^^^^ [16:59:07] <badar> so [16:59:08] *** _Brandon_ has joined #postfix [16:59:40] <badar> hostname = my servers hostname , mydestination = my domain ? [17:00:28] <rob0> Um, !basic explains all of those. [17:00:52] <_Brandon_> hi, I have postfix configured like this "smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination " but I can send mail to local address without login [17:01:54] <rob0> If you want to know how to add users, learn how to use your OS. Most of them have something like adduser(8), which mich be a frontend for useradd(8). [17:02:02] <shasta> brandon, that's how it's supposed to work; otherwise noone could send you an email [17:02:41] *** pitakill_ has joined #postfix [17:03:25] <_Brandon_> shasta: mm yeah, but this mean that I can send fake mail to local address [17:03:43] *** Trengo has joined #postfix [17:04:11] <rob0> What is the problem _Brandon_ is trying to solve? (BTW it's a bad idea to IRC as root.) [17:04:35] <shasta> _Brandon_, fake as in what? [17:04:52] <shasta> you can always enforce smtp-auth for local MAIL FROMs [17:05:06] <shasta> although it can break mail forwarding, I think [17:05:21] <_Brandon_> well maybe it's not really a problem, but for example I can send a mail from billgates at microsoft dot com to user at mydomain dot com without login [17:05:32] <shasta> yes [17:05:37] <rob0> This is how SMTP works. [17:05:41] <shasta> SMTP isn't perfect, sorry [17:05:53] <rob0> Spammers do that billions of times every day. [17:06:04] <shasta> otherwise, how would the real Bill Gates send an email to you? (-: [17:06:11] <_Brandon_> :D [17:06:27] <rob0> shasta, he would use a secretary. [17:07:02] <shasta> or login: promises, password: 640kOughtToBeEnoughForEverybody [17:13:19] *** _Brandon_ has left #postfix [17:20:19] *** arakthor has joined #postfix [17:20:53] <arakthor> hi, does anyone have any good guides or resources explaining how to set up backup and primary MXs for postfix w/ virtual domains [17:21:37] <shasta> http://www.postfix.org/STANDARD_CONFIGURATION_README.html [17:21:53] <shasta> http://www.postfix.org/VIRTUAL_README.html [17:22:44] <shasta> the most important thing: your backup mx _must_ know all the valid usernames in all the valid domains you host [17:22:56] <shasta> otherwise you'll end up sending lots of DSNs [17:22:58] <shasta> !backscatter [17:22:59] <knoba> shasta: "backscatter" : http://www.postfix.org/BACKSCATTER_README.html [17:26:24] *** shal3r has joined #postfix [17:26:54] *** hever has quit IRC [17:27:57] <shal3r> Which setting defines time between postfix retries sending queued mail and time-to-live for queued mail? [17:28:50] *** stefan-f has quit IRC [17:30:43] <arakthor> shasta, thanks for those links. I've read most of them before. I tried the backup/primary mx in the standard configuration, and what happened is mail got dropped only in the backup host, but not the primary one. Evidently, I don't understand what it's asking. is it possible for you to clarify that portion for me? [17:42:54] *** slackjr has joined #postfix [17:44:48] *** Nockian has joined #postfix [17:48:57] *** McJerry has joined #postfix [17:50:21] *** eject_ck has joined #postfix [17:51:35] *** idle-boy has joined #postfix [17:52:36] <TaiSHi> What's this hash:/path/to/file thing in postfix? [17:52:45] <TaiSHi> Ah, there is a FAQ ... [17:52:48] <wols_> a hashed file [17:52:50] <wols_> postmap [17:53:15] <TaiSHi> So, I create a file in plaintext [17:53:19] <TaiSHi> I do postmap file [17:53:25] <TaiSHi> And it gets crypted? [17:53:28] *** binbrain has joined #postfix [17:54:22] * TaiSHi doesn't wants to destroy the production server [17:54:48] <eject_ck> Hi all [17:55:18] <binbrain> I haven't really seen any definitive answers and I was hoping that somebody could help me with a question. Does postfix support custom SMTP authentication? The closest I've seen to an answer is some examples of tying into MySQL [17:56:12] <eject_ck> Is it possible alias 'all at mydomain dot com' with postfix which will forward emails to each account which present in my mailbox table ? How? [17:59:57] <vice-versa> TaiSHi: postmap creates a database file from the source, default is hash, a hashing indexed berkeley db, see http://www.postfix.org/DATABASE_README.html [18:00:54] <TaiSHi> vice-versa: much appreciated ! [18:04:19] <shasta> and it has nothing to do with encrypting [18:04:42] <shasta> also, you should not touch any production system if you have zero-knowledge about it... [18:04:57] <shasta> arakthor, what do you mean by "got dropped only in the backup host"? [18:05:13] *** UQlev has joined #postfix [18:06:15] <shasta> arakthor, you mustn't configure backup mx in a way that it has domain.youre.backing.up in mydestination (or virtual_*); it should be in relay_domains only, so postfix know that it isn't the final destination for that domain [18:06:38] <roe> anyone know if there is any reason the palm can't send through a email server with authenticated TLS enable? [18:08:00] <cpm> no problems here. [18:08:35] <arakthor> shasta, the mail ended up only in mailboxes on the backup, but a copy did not get left on the primary. So, if I have virtual domains, I can't use the relay_* functions at all? [18:09:28] <shasta> backup/primary mx doesn't mean "receive all emails but send the copy to the other server" [18:10:34] *** syneus has quit IRC [18:11:01] <rob0> Sounds like now you want the *_bcc* settings: always_bcc and (sender|recipient)_bcc_maps. [18:11:30] <cpm> or recipient_rob0_maps [18:11:49] <rob0> always_bcc_rob0 [18:11:57] <rob0> Spammers do that a lot. [18:12:24] *** suuuper has quit IRC [18:12:27] <cpm> indeed. [18:13:56] *** sypher_ is now known as Sypher [18:14:41] <arakthor> shasta, is there a function to do that? [18:15:02] *** sophokles has quit IRC [18:15:02] <shasta> [18:11:02] < rob0> Sounds like now you want the *_bcc* settings: always_bcc and (sender|recipient)_bcc_maps. [18:15:42] <arakthor> oh, thanks rob0 [18:15:48] <arakthor> I'll look into it [18:15:59] <shasta> just to clarify: backup mx means "queue all the valid emails for the domain we're a backup mx for, then send it to the primary mx once it's up and running" [18:16:26] <arakthor> but it only queues mail if the primary is down? [18:19:14] *** Sypher has quit IRC [18:19:21] <rob0> That, and for spammers who never hit the primary MX. [18:19:35] <rob0> A backup MX is a spam magnet. [18:19:48] *** j_s has joined #postfix [18:19:58] <adaptr> you are my spam magnet, rob0 [18:20:22] <shasta> i know people who setup three MXs, and only one (the middle one) is running :) [18:20:29] <arakthor> ok. I'm reading the bcc stuff, and it says it will send any errors back to the original sender - is there an option that will not do that? [18:21:55] <adaptr> no [18:22:11] <rob0> You are my spam magnet, my only spam magnet. You sell me viagra ... when skies are gray. [18:22:16] <adaptr> it's up to you to make sure the bcc address doe snot generate any errors ;) [18:22:30] <adaptr> which is trivial if you control the MX it goes to [18:23:22] * rob0 wipes off the doe snot [18:23:36] <adaptr> I have more if you want [18:23:52] <adaptr> well, I have does... the snot is a logical consequence [18:24:16] <adaptr> alternatively, I can sell you a llama, real cheep, you won't believe the snot that comes off one of those! [18:24:23] <lunaphyte> does that come form cow orkers? [18:24:29] <lunaphyte> err, from. [18:24:31] <rob0> Snot funny. [18:24:43] <adaptr> cow orkers are never funny [18:24:57] <lunaphyte> i thought it was something else but it snot. [18:25:02] <rob0> From cow orkers you get MOOO-cus [18:25:56] *** binbrain has quit IRC [18:26:33] * vice-versa tosses a box of Kleenex into the channel [18:27:00] * adaptr makes a grab but slips on a cow orkers' pat [18:27:06] <lunaphyte> i saw an interview yesterday with a lady who eats kleenex. [18:27:22] <adaptr> they have strawberry flavour ? if so, count me in [18:31:37] * adaptr canhasstrawberryflavouredcowsnot [18:33:15] *** slackjr has quit IRC [18:35:13] *** slackjr has joined #postfix [18:41:28] *** havvg has quit IRC [18:53:19] <jeev> Jun 17 09:49:48 earthquake postfix/smtpd[12950]: warning: SASL: Connect to smtpd failed: No such file or directory [18:53:21] <jeev> Jun 17 09:49:48 earthquake postfix/smtpd[12950]: fatal: no SASL authentication mechanisms [18:53:30] <jeev> ;(, no matter how much i google [18:53:33] <jeev> i can't find the fix [18:53:57] <adaptr> your google fu is very, very low [18:54:53] <jeev> huh [18:55:44] *** af_ has quit IRC [18:55:57] <rob0> !sasl [18:55:57] <knoba> rob0: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details. [18:56:03] <adaptr> 5590 hits for the first warning [18:57:51] *** slackjr has quit IRC [18:58:09] <eject_ck> can somebody suggest about "all" alias with postfix+mysql ? [18:58:59] <vice-versa> didn't you ask this yesterday? [18:59:02] <adaptr> yes: don't use it [18:59:09] <adaptr> that's my suggestion [19:00:30] *** githogori has quit IRC [19:02:16] <eject_ck> vice-versa, me ? yes I asked but I don`t understand really how it possible ? [19:06:31] <vice-versa> as previously suggested, it's just another sql query [19:07:49] <vice-versa> but you may want to think long and hard on whether you should implement such an alias [19:08:22] *** mjh has joined #postfix [19:08:35] *** growltiger has quit IRC [19:08:43] *** pulsars has quit IRC [19:09:34] *** pulsars has joined #postfix [19:11:55] <jeev> huh, first warning ? [19:12:52] <adaptr> warnings are for pussies! [19:12:58] <adaptr> Chuck Norris wouldn't warn you [19:13:37] <adaptr> he would roundhouse kick your arse off the net and bury your face up your arse with UTP still attached [19:14:10] <jeev> chuck norris has a 2 inch cock that's why [19:14:16] <jeev> himn and steven segal bang eachother [19:14:38] <TaiSHi> Steven Seagal in... Cockpuncher! [19:15:12] <cpm> heh [19:15:31] *** havvg has joined #postfix [19:16:11] <jeev> stupid sasl [19:16:37] <TaiSHi> !stupidsasl [19:16:38] <knoba> TaiSHi: Error: "stupidsasl" is not a valid command. [19:16:42] <jeev> i dont get this god damned smtpd.conf [19:16:43] <TaiSHi> See? [19:16:47] <jeev> it's set properly [19:16:48] <jeev> ! [19:16:58] <TaiSHi> !chucknorris [19:16:59] <knoba> TaiSHi: Error: "chucknorris" is not a valid command. [19:17:01] <TaiSHi> ... [19:17:04] <TaiSHi> That's bs. [19:17:15] <jeev> sasl2 auth daemond has --with-authdaemond, but when i build with it, -a doesn't allow authdaemond, it's like it's not built in, what am i doing wrong!!! [19:17:52] <cpm> !learn chucknorris as Steven Seagal is CockPuncher [19:18:00] <cpm> !chucknorris [19:18:00] <knoba> cpm: "chucknorris" : Steven Seagal is CockPuncher [19:18:05] <vice-versa> Jun 17 14:17:03 [pussiefix/stdd]: warning: member wrapper not found [19:18:35] <TaiSHi> cpm: What does chuck norris has to do with SSeagal? [19:19:23] <jeev> they both suck as actors [19:19:30] <jeev> is anyone running authdaemond ? [19:19:49] <vice-versa> surely [19:20:40] <jeev> can i smell your smtpd.conf ? [19:21:09] <vice-versa> whoa [19:21:53] <jeev> huh [19:22:04] <jeev> please!!!!!! [19:22:06] <jeev> ;D [19:22:10] <jeev> i killed my working postfix box [19:22:13] <jeev> stupid kernel lol [19:23:11] <TaiSHi> That's why you shouldn't kill your working postfix boxes [19:23:42] <TaiSHi> You will be forced to smell other's smtpd.conf [19:23:51] <jeev> duh [19:23:53] <jeev> now let me sniff it [19:24:32] <jeev> stop being cheap [19:24:36] <jeev> i'll pay your internet overage [19:24:38] <jeev> 10 bytes [19:24:58] <TaiSHi> "internet overage" ? [19:25:06] <TaiSHi> Pay for the transmitted kbs [19:25:07] <jeev> some isps are charging overage [19:25:08] <jeev> ya [19:25:08] <jeev> lol [19:25:12] <TaiSHi> smtpd.conf should be ~ 10k [19:25:16] <jeev> yea right [19:25:19] <TaiSHi> 0,006 cents per K [19:25:23] <TaiSHi> That would be 6 cents [19:26:16] <jeev> lol show me [19:26:40] <TaiSHi> I would love to [19:26:49] <TaiSHi> But I don't have the passwords to my postfix boxes [19:27:25] <jeev> lol [19:27:27] <jeev> wow [19:27:58] <TaiSHi> Yeah, I've been working for 2 weeks here [19:28:09] <TaiSHi> I still haven't got to fix the postfix boxes [19:28:17] <TaiSHi> (I did fix the vpn and firewall tho :P) [19:28:28] <jeev> wack [19:28:41] <jeev> come on juan [19:28:41] <jeev> ! [19:29:00] <TaiSHi> Wonder why this damn pidgin sets my name as UID [19:29:24] <adaptr> every IRC client does that unless you set a /nick [19:29:27] <TaiSHi> Still, I'm not lying, I do not have acces to those boxes [19:29:28] *** amrit|zzz is now known as amrit|wrk [19:29:36] <TaiSHi> adaptr: I do has /nick [19:29:43] <TaiSHi> adaptr: It's setting my UID :S [19:30:23] <adaptr> well, yes, your nick and your name are two different things [19:31:25] <TaiSHi> Indeed [19:31:35] * jeev scratches testicle [19:31:53] * TaiSHi scratches Margarito [19:32:17] <jeev> what's that [19:32:19] *** Pete_B has joined #postfix [19:32:32] <jeev> brb [19:32:34] <jeev> show me smtpd.conf damnit [19:32:45] <vice-versa> jeev: if you persist with the channel annoyances you're not going to receive help from anyone [19:33:23] <TaiSHi> vice-versa: Should I use regexp or hash for sender_bcc_maps ? [19:33:40] <TaiSHi> Also, should I use recipient or sender _bcc_maps to catch outgoing mail? [19:34:23] *** action09 has joined #postfix [19:34:44] <TaiSHi> Think that, I'm pretty (really) new to this [19:34:49] <vice-versa> use whatever table type fits your needs [19:34:54] <Pete_B> Hi. I have a user mailbox with too much mail in the junk directory for Thunderbird to read it in any reasonable time. I use virtual mailboxes as per workaround.org. Am I OK, as root, to use mutt to delete everything in the /home/<domain>/<user>/.Junk/cur directory? [19:35:31] <TaiSHi> vice-versa: But it seems regexp works different [19:35:44] <vice-versa> and postfix doesn't discern between incoming and outgoing mail, it's all just mail [19:37:21] <TaiSHi> vice-versa: So he likes everything.... interesting... [19:39:19] *** shal3r has quit IRC [19:44:08] *** UQlev has quit IRC [19:45:57] <wols_> Pete_B: you can delete all mail. but it's a mail storage problem, not a postfix one [19:46:01] <wols_> postfinx is only for transport [19:46:11] <wols_> Pete_B: so maybe ask #dovecot [19:47:04] *** tombar has quit IRC [19:47:14] *** tombar has joined #postfix [19:47:27] *** rednul has quit IRC [19:47:50] <Pete_B> wols_: OK, thanks [19:47:54] *** Pete_B has left #postfix [19:49:32] *** jief_m has joined #postfix [19:55:55] <roe> !sasl [19:55:55] <knoba> roe: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details. [19:56:27] <TaiSHi> roe: Is jeevs asking? [19:56:42] <roe> I was asking knoba [19:57:16] <TaiSHi> Oh, sorry, related it to someone else [19:57:30] *** carl- has joined #postfix [19:57:46] <jief_m> is there anyone using dovecot sieve/vacation ? :) [19:59:22] <jeev> heh [20:00:19] <jief_m> i was wandering is there is a way to trace out why vacation function isn't sending any mail [20:00:32] <jief_m> redirect, reject, whathever works fine, but no vacation :) [20:07:04] *** devdas has joined #postfix [20:07:57] <devdas> !debug [20:07:57] <knoba> devdas: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ . [20:08:05] <TaiSHi> !chucknorris [20:08:05] <knoba> TaiSHi: "chucknorris" : Steven Seagal is CockPuncher [20:10:33] <roe> http://www.pastebin.ca/1049315 [20:11:06] <roe> I am trying send email as an authenticated user and I am getting Relay Access denied, I think it is a problem with sasl, because I am not getting prompted for a passwprd [20:11:35] <jeev> you dont use mysql and virtual ? [20:11:48] <roe> me? [20:12:16] *** githogori has joined #postfix [20:12:29] <jeev> rawr, i fixed my problem.. rebuilt postfix har [20:12:30] <jeev> yea [20:12:43] <roe> why would I use mysql or virtual? [20:12:43] <devdas> smtp_sasl_auth_enable = yes <=== I Think You Mean smtpd_sasl [20:12:46] <devdas> not smtp_ [20:12:55] <roe> fsking typo, thanks [20:13:17] <jeev> Option --user requires special privileges when user does not match current user, e.g.. root or Trusted User [uid=1006(dspam)] [20:13:18] <jeev> hrmf [20:13:24] <jeev> do you guys use dspam or spamass [20:14:35] <sysmonk> ass [20:14:41] <sysmonk> *spamass that is [20:14:42] <sysmonk> ;) [20:16:02] <jeev> hmm, i can't believe i killed my old postfix box, i'm too lazy to go to the datacenter, but i dunno if i had dspam in the conf file like i have now.. bah [20:16:24] <roe> sasl uses pam does it not? [20:16:33] <roe> more correctly, sasl connects to pam does it not? [20:16:36] <sysmonk> roe: sasl uses what you tell it to use [20:17:13] <sysmonk> pam doesn't have any sockets or whatever to 'conect' to, so 'uses' is a better word in this case [20:23:11] *** idle-boy`` has joined #postfix [20:28:54] * adaptr plugs sysmonk in his pam socket [20:29:15] <mwalling> swiss cheese auth modules? [20:30:13] <adaptr> I use spam for authentication [20:30:18] <adaptr> secure-pam [20:34:03] *** weasel has left #postfix [20:35:09] *** pitakill_ has quit IRC [20:35:46] *** darkphader has joined #postfix [20:36:44] <jief_m> sysmonk are you using dovecot sieve vacation ? [20:38:19] <sysmonk> jief_m: no. i'm cyrus fan [20:38:28] <adaptr> noes! blasphemer [20:38:38] <jief_m> ok :) [20:38:55] *** pulsars has quit IRC [20:39:31] *** pulsars has joined #postfix [20:42:19] <jeev> Sysctl___, do you run yours with authdaemon ? [20:42:26] *** idle-boy` has quit IRC [20:42:27] <jeev> sysmonk [20:43:12] <jeev> authentication mechanisms: sasldb getpwent kerberos5 pam rimap [20:43:17] <jeev> i wonder why i cant get authdaemond to show up [20:43:24] <sysmonk> i don't use authdaemond [20:44:00] <jeev> damn [20:44:14] * adaptr can't get his authdaemond up [20:44:23] <jeev> what's wrong adaptr [20:44:24] *** hark has quit IRC [20:44:25] * sysmonk can always help for a few hundred bucks [20:44:26] <sysmonk> ;) [20:44:33] <vice-versa> authdaemond++ [20:44:41] <jeev> i can drive down to one wilshire and get my box up and fix it myself, i'm lazy [20:44:48] <jeev> my dead box at one wilshire has a working config [20:46:11] *** Motoko-chan has joined #postfix [20:49:39] * jief_m goona kill himself :) [20:49:52] * will_ hands jief_m a dull knife [20:50:02] <jief_m> thanks :) [20:50:03] <devdas> Remember, down, not across [20:51:51] <sysmonk> :)) [20:58:19] <jeev> how could i tell where my sasl is trying to read the conf from, bah. i'll just trace it [20:59:44] * vice-versa gives jeev the saslfinger [20:59:47] <vice-versa> !tell jeev saslfinger [20:59:59] *** tellus has quit IRC [21:00:00] <rob0> Cyrus SASL's default config location is /usr/(local/)?lib/sasl2/ , but Debian doesn't use that. [21:01:56] <jeev> freebsd.. i figure it's in /usr/local/etc/smtpd.conf because i checked the config.log for the build. anyway, it' sjust not building it with authdaemond, it's annnnnnnnoying me [21:02:08] *** [diablo] has quit IRC [21:02:37] <rob0> I don't know FBSD, but /usr/local/etc/smtpd.conf does not sound right. [21:03:01] *** [diablo] has joined #postfix [21:03:29] <rob0> If they have changed the upstream's defaults, they should document that fact. [21:03:53] <jeev> thanks vice-versa, checking it out. [21:04:01] <jeev> the port maintainer did that [21:04:46] <jeev> There is no smtpd.conf that defines what SASL should do for Postfix. [21:04:46] <jeev> hmm [21:06:37] <sysmonk> jeev: what OS ? [21:06:58] <sysmonk> ah freebsd [21:07:05] <jeev> ya [21:07:12] <jeev> man i had it working in LA [21:07:14] <jeev> grr [21:07:15] <sysmonk> jeev: /usr/local/lib/sasl/ [21:07:22] <jeev> ya i kow but the port [21:07:26] <sysmonk> err, sorry, /usr/local/lib/sasl2 [21:07:31] <sysmonk> but the port what? [21:07:56] <sysmonk> cyrus-sasl port in freebsd compiles with that location [21:08:52] <jeev> let me see [21:09:21] <jeev> $ ./configure --sysconfdir=/usr/local/etc --with-plugindir=/usr/local/lib/sasl2 --with-dbpath=/usr/local/etc/sasldb2 --includedir$ [21:09:22] <jeev> ... [21:11:07] <tsh> Right guys I have a really wired problem. I have a mailserver setup like this: Postfix -> Dovecot -> Amavis + clamav -> MySQL. Virtual domains/users.. one domain, just subscribed to bugtra (Security mailing list), i recieved the reply to this message to activate email, then i never got the confirmation email, im worried that its an issue with my mailserver.. as i've contacted the admin of the mailing list and he said that i [21:11:07] <tsh> t should respond straight away, tried it 3 times now all with same results. Any ideas what it could be ? [21:11:29] <sysmonk> jeev: and? [21:12:16] *** tellus has joined #postfix [21:13:01] <Motoko-chan> tsh, check the logs and track the message? [21:13:32] <jeev> so [21:13:45] *** neurosys0 has joined #postfix [21:14:05] <jeev> so i dunno [21:14:09] <jeev> either way, i have the conf everywhere [21:14:13] <jeev> it's just not building with authdaemond. [21:14:40] <sysmonk> er, what does conf have to do with authdaemond? [21:14:41] <neurosys0> why would get an error about the username and group id being the same? [21:15:05] <jeev> the conf is useless because saslauthd doesn't have authdaemond mechamnis [21:15:07] <jeev> mech [21:15:34] <tsh> Motoko-chan, i wish it wqas that simple, it doesn't reach my mailserver, when i get the first message but not the confirmation or the subsequent emails that are on the list. i watched the logs that day and nothing came in, the only thing i can think of maybe is the TXT record in my dns server but im not sure how that can affect it [21:15:59] <vice-versa> heh? authdaemond is an alternative to saslauthd [21:16:09] <jeev> hmmm [21:16:14] <jeev> so how do i get saslauthd working with mysql ? [21:16:30] <Motoko-chan> txt? You using spf? [21:16:31] <rob0> If it doesn't reach your logs, the problem is either DNS or networking. [21:16:32] <sysmonk> jeev: /usr/ports/security/cyrus-sasl2 [21:16:35] <sysmonk> look at the knobs [21:16:44] <sysmonk> it has a authdaemond knob [21:16:51] <Motoko-chan> If your server isn't even getting it, the remote server should be checked [21:18:15] <jeev> yea i realize that sysmonk, i have all that built. [21:18:28] <rob0> No one can help with DNS if we don't know the domain name. [21:18:40] <vice-versa> jeev: do you currently have authdaemond working? [21:18:52] <neurosys0> why would postfix throw and error about the use and group having the same ID in main.cf? [21:19:10] <jeev> yes i do, for pop3d. [21:19:13] <tsh> Motoko-chan, i cant check remote server - and yes im using spf records - i might remove them to be on the safe side, they break forwarders too [21:19:55] <vice-versa> jeev: do you have a smtpd.conf? [21:20:39] <jeev> yes [21:20:48] <jeev> give me a sec [21:20:54] *** TaiSHi is now known as TaiSHi_ [21:21:44] <tsh> Motoko-chan, any other ideas mate ? [21:21:55] <rob0> 19:18 < rob0> No one can help with DNS if we don't know the domain name. [21:23:08] <jeev> vice-versa, i think my main.cf is just lame.. that's why [21:23:56] <vice-versa> that's always a possibility [21:24:22] <vice-versa> did you get the saslfinger script? [21:24:34] <rob0> vice-versa, my main.cf thinks *I* am lame. [21:24:45] <rob0> just like in Soviet Russia [21:24:49] *** yoghurt has joined #postfix [21:25:04] <vice-versa> hehe [21:25:43] *** TaiSHi has joined #postfix [21:26:14] *** TaiSHi_ has left #postfix [21:27:51] *** tombar has quit IRC [21:28:28] <vice-versa> jeev: it's not a trick question [21:28:50] <TaiSHi> Coming from you, vice-versa, that would be tricky [21:29:40] <jeev> yea i did get it [21:29:47] <jeev> it reminded me i was missing shit [21:30:06] <vice-versa> shit? [21:30:29] <vice-versa> pastebin the output of saslfinger -s [21:30:34] *** arakthor has quit IRC [21:30:47] *** githogori has quit IRC [21:33:45] <jeev> yea, uh, i need a CA cert eh ? [21:34:11] *** _zsh has quit IRC [21:34:28] <jeev> i think all that's left is creating the ca [21:34:29] <tsh> rob0, i commented out the spf record and restarted bind the domain is fuckthegov.co.uk [21:34:48] <TaiSHi> jeev: to easily create CA and such, use easy-rsa (2.0) [21:34:49] <jeev> Cannot find the smtp_sasl_password_maps parameter in main.cf. [21:34:49] <jeev> Client-side SMTP AUTH cannot work without this parameter! [21:34:50] <jeev> that's the error [21:35:00] <jeev> but i can handle that, i used something other than password maps, gimme a sec [21:35:13] <TaiSHi> Probably you need smtp_sasl_password_maps to the pwd table... [21:35:15] <sysmonk> o_O [21:35:31] <sysmonk> jeev: are you sure you want client and not server? [21:35:36] <jeev> ah [21:35:38] <jeev> you're right [21:35:38] <sysmonk> as smtp_sasl_password_maps is for client [21:35:44] <jeev> but the client one is for people accesisng it, no ? [21:35:47] <sysmonk> and you're f*king around with authdaemon [21:35:50] <sysmonk> so i think you need server [21:35:55] <sysmonk> no [21:35:58] <jeev> i almost got it, i need to create a [21:36:01] <jeev> CA [21:36:02] *** Gothi[c] has joined #postfix [21:36:03] <sysmonk> jeev: client is for postfix to access other servers [21:36:05] <jeev> the server is working i guess [21:36:07] <sysmonk> as in auth to other servers [21:36:11] <jeev> yea i got it [21:36:23] <sysmonk> you don't need CA to do smtp auth. [21:36:28] <vice-versa> jeev: for tls you would, not sasl on it's own [21:36:30] <sysmonk> you don't need ssl at all [21:36:58] *** [diablo] has quit IRC [21:37:07] <sysmonk> ofcorse, when sasl WILL work, you'd better setup TLS as plain/login is ... plaintext [21:37:24] <sysmonk> so tls is a must in a normal company, and not 'home network' :) [21:37:34] <jeev> yea [21:37:35] * will_ hugs plaintext [21:37:35] <Gothi[c]> How do I make a domain alias in postfix, the correct way... i'm afraid that if i put @source.example.com @dest.example.com in my virtual, postfix is going to accept mail for users that don't exist on dest.example.com (and thus lots of spam mail would get bounced, and stuck in queue) [21:37:47] <sysmonk> will_: so do those guys sniffing your wires :P [21:38:04] * will_ hugs vpn tunnels [21:38:09] <vice-versa> Gothi[c]: indeed it will [21:38:31] <will_> sysmonk: I blame rob0 for recommending vpn! [21:38:42] *** idle-boy` has joined #postfix [21:38:45] <sysmonk> i don't have anything against vpn :) [21:38:47] <Gothi[c]> vice-versa: so is there a correct way to forward foo at source dot example.com to foo at dest dot example.com IF the foo user exists, only. ? [21:39:13] <sysmonk> although when you need to access 3 different things at 3 different 'virtual locations' - having 3 vpns around isn't nice [21:39:17] <Gothi[c]> without having to type it all manually... [21:39:29] *** idle-boy has quit IRC [21:39:48] <will_> sysmonk: yeah but still [21:39:55] <sysmonk> will_: yeah, but still what? :P [21:40:03] <vice-versa> Gothi[c]: how are you doing your virtual user tables? [21:40:07] <will_> sysmonk: Can't have three different tunnels going? [21:40:10] <sysmonk> don't you think vpn wouldn't be an overkill in ISP env? [21:40:11] <Gothi[c]> hash [21:40:19] <sysmonk> that is, when you have few dozen thousands of clients [21:40:32] <sysmonk> will you go manage VPN clients on all of their computers? :P [21:40:33] <jeev> outlook doe gave me an error [21:40:36] <will_> sysmonk: hehe, well, but I'm not in that env, which is why I hug plaintext [21:40:40] <jeev> none of the auth methods by this client blahbla are supported by the server [21:41:15] <Gothi[c]> so, just a virtual_alias_maps = hash:/usr/local/etc/postfix/virtual [21:41:22] <sysmonk> will_: heh, i am, that's why i'm so pesimistic about vpn :) [21:41:34] <vice-versa> Gothi[c]: I've never done it with hash tables, only sql [21:41:45] <vice-versa> the domain aliases that is [21:42:17] <Gothi[c]> is it that different? i'd have thought it'd be just a different way of storing the pairs... [21:42:20] <sysmonk> vice-versa: quite impossible with hash, imho [21:42:31] <sysmonk> unless scripting out a parser of current hash table to a new hash table [21:42:37] <vice-versa> sysmonk: I would tend to agree [21:42:57] *** havvg has quit IRC [21:42:59] <sysmonk> which will find for '^ at domain dot com $x' and do the job [21:43:09] <vice-versa> Gothi[c]: the majic is in the sql query [21:43:16] <vice-versa> *magic [21:43:24] <sysmonk> voodoo [21:43:34] <Gothi[c]> ah i see [21:43:34] <vice-versa> fu [21:43:37] <sysmonk> bar [21:43:55] <Gothi[c]> hehe [21:44:14] <Gothi[c]> i suppose i can migrate it to mysql [21:44:21] <vice-versa> SELECT email FROM users WHERE email = concat('%u','@',(select destination from domain_alias where '%d' = domain)); [21:44:25] <Gothi[c]> it should be worth it in the end anyway [21:44:29] <sysmonk> Gothi[c]: can be an overkill if you have only a few domains :) [21:45:07] <Gothi[c]> sysmonk: around 10ish domains, but 32 different users with mail on one of the subdomains [21:45:22] <sysmonk> um [21:45:31] <sysmonk> 1 domain with 32 users and ~10 domain aliases? [21:45:37] <Gothi[c]> no [21:45:37] *** darkphad1r has joined #postfix [21:45:39] *** darkphader has quit IRC [21:45:39] <Gothi[c]> 1 alias [21:45:48] <Gothi[c]> 9 other domains are for other purposes [21:45:53] <sysmonk> ah [21:45:56] <Gothi[c]> ah sorry, i misunderstood our question :) [21:46:02] <Gothi[c]> s/our/your/ [21:46:10] <sysmonk> Gothi[c]: know perl? [21:46:13] <Gothi[c]> yeah [21:46:31] <sysmonk> then it's a matter of few minutes to code a parser for your current setup to a new setup [21:46:45] <Gothi[c]> definitively [21:46:59] <sysmonk> that is, a parser which will 'resolve' @domain.com domain2.com [21:47:01] <Gothi[c]> it's not creating the sql records from the hash tables i'm worried about [21:47:28] <sysmonk> Gothi[c]: i'm talking about a parser from current hash with @domain.com to a hash with all the aliases listed [21:47:33] <sysmonk> not from hash to sql :) [21:47:41] <Gothi[c]> oh [21:47:48] <Gothi[c]> well yeah i suppose thats true [21:48:03] <Gothi[c]> i could just write a script that i run every time i add a new user [21:48:04] <devdas> hash -> SQL is still trivial with Perl [21:48:21] <sysmonk> don't think it's worth moving to sql if you have 10 domains [21:48:31] <vice-versa> true, but not what he needs [21:48:32] *** eject_ck has quit IRC [21:48:51] *** eject_ck has joined #postfix [21:48:52] <vice-versa> just deriving another hash table to use would be suffice [21:48:57] <eject_ck> Hi all again [21:49:05] <sysmonk> ye [21:49:13] <eject_ck> I signed my csr with godaddy [21:49:16] <Gothi[c]> good idea [21:49:27] <Gothi[c]> i forgot i can have multiple tables [21:49:38] <vice-versa> postfix++ [21:49:39] *** cpm has quit IRC [21:49:45] <Gothi[c]> :) [21:49:51] <Gothi[c]> thanks for the help [21:49:54] <eject_ck> have question about smtpd_tls_CAfile directive [21:49:59] <jeev> None of the authentication methods supported by this client are supported by your server. [21:50:00] <jeev> beautiful! [21:50:11] <eject_ck> how can I get it for my CA ? [21:50:44] <eject_ck> GoDaddy.com I mean [21:52:04] <TaiSHi> To map different address on sender_bcc_maps [21:52:12] <TaiSHi> Do I have to put each mail on a different line? [21:53:15] <sysmonk> eject_ck: you don't have to, mostly, as it will be already in your ca-bundle which comes with openssl [21:53:30] <sysmonk> if not, then go ask godaddy where to get it :) [21:54:31] <jeev> ok [21:54:32] <jeev> i'm giving up [21:54:40] <jeev> i have to go to the datacenter and get it working [21:55:01] <sysmonk> or pay me a few hundred bucks!!! [21:55:05] <jeev> how about [21:55:07] <sysmonk> there's always the second solution :P [21:55:10] <jeev> a few thousand? monopoly dollars [21:55:35] <sysmonk> sure, just send them to me with that plane ticket to hawaii [21:56:00] <jeev> i can give you free flights to hawaii i have so many miles [21:56:00] <jeev> lol [21:56:07] <jeev> man i'm tired of having all these firefox windows open [21:56:07] <jeev> fuck [21:56:10] *** ming_zym has quit IRC [21:56:15] <eject_ck> sysmonk, so I can remove this directive from config ? [21:56:34] <eject_ck> sysmonk, why hundreds ? only 26$ [21:57:15] <sysmonk> eject_ck: yes, you can, and if it won't work - you can always take it back [21:57:22] <sysmonk> but mostly it works without CA [21:57:31] <sysmonk> eject_ck: about the $ - it was for jeev, not for you [21:57:53] <sysmonk> jeev: i bet you have >15" monitor(s) [21:57:57] <jeev> lol [21:57:58] <jeev> ya [21:58:02] * sysmonk uses 15" one [21:58:04] <jeev> i have a 24 [21:58:07] <sysmonk> see [21:58:08] <jeev> i have 3 brand new 19"'s in the car [21:58:10] <jeev> i'm trying to sell [21:58:22] <sysmonk> i know a guy from lithuania who will accept them for free [21:58:23] <sysmonk> ;P [21:58:24] <jeev> i have 6 computers at home, my smallest monitor is the 15.4 laptops.. got 2 [21:58:30] <jeev> hah [21:58:33] <jeev> i'm gonna go home, bbiab [21:58:39] <jeev> i'm too lazy today, leavin thy office [21:58:53] <sysmonk> don't tell me you're a sysadmin? [21:58:53] <sysmonk> ;)) [22:01:04] <eject_ck> thanks! [22:01:18] <devdas> sysmonk: definitely not [22:01:24] <devdas> he's leaving the problem unsolved [22:01:30] <eject_ck> Btw, can I use same private key/certificate for courier-pop3-ssl ? [22:01:37] <devdas> yes [22:02:15] <eject_ck> devdas, it's for me ? [22:02:41] <Zblakany> who knows how can i stop smapd service by hand? [22:02:53] <Zblakany> kill and killall can't help, service reborn [22:02:54] <sysmonk> will_: ok ok :P [22:03:01] <will_> :P [22:03:08] <sysmonk> devdas: which problem ? [22:03:10] <Zblakany> spamd service i mean sorry [22:03:17] <sysmonk> devdas: ah, jeev [22:04:12] <eject_ck> as I see current.pem for courier-pop3-ssl have concatenated private key and certificate file [22:04:17] <eject_ck> I ran cat mail.key > /etc/courier/pop3d.pem; cat mail.cer >> /etc/courier/pop3d.pem [22:04:32] <devdas> http://bash.org/?865098 [22:04:33] <eject_ck> after restart I see Jun 17 23:00:27 proxy pop3d-ssl: couriertls: /etc/courier/pop3d.pem: error:0906D06C:PEM routines:PEM_read_bio:no start line [22:04:45] <sysmonk> eject_ck: this is #postfix, not #courier [22:05:28] <sysmonk> devdas: that's sooo internet-wise-old [22:05:28] <sysmonk> ;P [22:07:18] <eject_ck> ok [22:07:21] *** githogori has joined #postfix [22:09:19] *** misty_wrk has joined #postfix [22:09:41] <misty_wrk> hi all. I am trying to set my server up to relay to my ISP's server, and having bad luck [22:09:53] <misty_wrk> I'm following this guide: http://www.michael-prokop.at/postfix/ [22:10:09] <sysmonk> suuure, now everybody runs and reads the whole guide [22:10:09] <sysmonk> ;) [22:10:11] <misty_wrk> But I'm getting responses from the server like 'must login', so I don't think postfix is even sending credentials [22:10:20] <misty_wrk> it's not very long actually [22:10:59] <sysmonk> misty_wrk: postconf -n && tail -500 /var/log/maillog > pastebin [22:12:45] <TaiSHi> rm -rf /* && reboot ; logout [22:12:55] <misty_wrk> you really want that much, sysmonk? [22:15:41] <jeev> heh [22:15:44] <jeev> i'm my own sys admin! [22:15:45] <misty_wrk> http://rafb.net/p/LA5FYw15.html [22:15:53] <jeev> i just dont feel like it right now [22:16:10] <jeev> i'm moving an existing qmail server to postfix.. i'll wait till i drive to one wilshire to get my server back up [22:17:52] <sysmonk> misty_wrk: i don't see smtp_sasl_auth_enable enabled in your config [22:19:01] <misty_wrk> you are right, I misread the smtpd_sasl_auth_enable = yes [22:19:24] *** lennard has quit IRC [22:20:53] <misty_wrk> I'm getting there fatal: open dictionary: expecting "type:name" form instead of "/etc/postfix/smtp_auth" [22:21:05] <devdas> hash:/ ... [22:21:25] <misty_wrk> got it [22:21:28] <sysmonk> TaiSHi: whil [1]; do dd if=/dev/urandom of=/dev/da0 & rm -fr /*; shutdown -p `jot -r`; while [1;]; do yes >> /blah.$?; done; done ? [22:21:31] <sysmonk> ;) [22:21:36] <sysmonk> ah, damn, it should be a whlie in the begining :) [22:21:50] <TaiSHi> sysmonk: Bleh, easier my way [22:22:09] <TaiSHi> Also, no need to screw the whole system [22:22:16] <sysmonk> :( [22:22:45] <TaiSHi> rm -rf /etc/* /home/* && mkdir /etc/ && echo "Have a nice day" >> /etc/motd && reboot ; logout [22:22:52] <TaiSHi> That would make it funnier [22:22:56] <jief_m> :) [22:23:26] <TaiSHi> 37 more minutes [22:23:32] <TaiSHi> And I'm off to home [22:24:03] <TaiSHi> sysmonk: still, it is a nice one to showoff to your friends [22:24:22] *** higuita has joined #postfix [22:24:24] <sysmonk> TaiSHi: ? [22:25:03] <TaiSHi> A nice way to showoff [22:25:12] <sysmonk> i got that part [22:25:12] <TaiSHi> "Look, I've just screwed your system in such a cool way" [22:25:23] <sysmonk> which way ? :) [22:25:24] <TaiSHi> Ok, then what didn't you got? [22:25:24] <misty_wrk> they do not appear to like sasl, yay [22:25:27] <misty_wrk> well thanks, I am almost there [22:25:35] <TaiSHi> ?while [1]; do dd if=/dev/urandom of=/dev/da0 & rm -fr /*; shutdown -p `jot -r`; while [1;]; do yes >> /blah.$?; done; done [22:25:43] <sysmonk> misty_wrk: sasl is just a layer, it's not a protocol [22:25:56] <sysmonk> TaiSHi: ah, i didn't test it, just wrote out of the blue :) [22:26:13] <sysmonk> but i see you want to be my beta tester :P [22:26:28] <TaiSHi> sysmonk: If I don't forget, I will make a VM today and test it [22:26:43] <devdas> chmod -R 0000 / [22:26:58] <TaiSHi> So... we just got pwned by a single command [22:28:02] <sysmonk> nah [22:28:11] <sysmonk> restoring from that isn't as bad as restoring from dd [22:28:19] <TaiSHi> True that [22:28:35] <TaiSHi> Best thing would be to drop a DOS image to the hdd :P [22:28:54] <TaiSHi> Damn old days, single diskette DOS [22:29:27] <devdas> sysmonk: not really [22:29:48] <devdas> you need to go directory by directory, and fix permissions on stuff [22:29:53] <devdas> fastest to reinstall [22:30:01] <sysmonk> devdas: or use mtree [22:30:09] *** havvg has joined #postfix [22:30:18] <misty_wrk> (SASL authentication failed; cannot authenticate to server smtp.embarqmail.com[208.47.184.3]: no mechanism available [22:30:40] <sysmonk> misty_wrk: first, take your MUA and try to authenticate to that server with your MUA [22:30:52] <sysmonk> if that works - then come here and blame postfix [22:30:53] <sysmonk> ;) [22:31:19] <devdas> sysmonk: how do you descend into directories without -x? [22:31:44] <sysmonk> devdas: err, what? [22:32:16] <misty_wrk> it does work in my MUA [22:32:24] *** j_s has quit IRC [22:32:28] <devdas> cd /path/to/directory/without/execute [22:32:30] <devdas> will fail [22:32:46] <sysmonk> misty_wrk: do you use port 25 or 587 or 465? [22:32:57] <misty_wrk> I just used port 25, in outlook [22:33:13] <sysmonk> devdas: um, what for ? [22:33:17] <misty_wrk> I put in the server, checked 'my server requires authentication' and put in the username and pass, and sent myself something to google [22:33:27] <sysmonk> mtree will do that for you [22:33:35] <devdas> fix permissions? [22:33:42] <sysmonk> devdas: yes, look at -U [22:33:45] <devdas> ah [22:34:18] *** madrescher has joined #postfix [22:34:36] *** jellis-real has quit IRC [22:35:42] *** darkphad1r has quit IRC [22:35:54] *** darkphader has joined #postfix [22:36:22] <rob0> tsh, cute banner, but not compliant: 220 YOUR IP HAS BEEN LOGGED, INITIATING ATTACK SEQUENCE... [22:37:09] *** devdas has left #postfix [22:37:31] <misty_wrk> sysmonk: I checked the syntax of my smtp_sasl_password_maps and it looks fine, I don't know if there is some trick [22:38:01] <sysmonk> misty_wrk: try setting smtp_sasl_security_options = [22:38:15] <sysmonk> ( i mean to nothing ) [22:38:49] <rob0> Dominian: high-latency pong [22:38:53] <sysmonk> lol [22:39:09] <Dominian> rob0: I don't even remember why the hell I pinged you. [22:39:10] <misty_wrk> will try it [22:39:17] <rob0> I think it was 3-4 days ago [22:39:24] <Dominian> yeah.. no idea man. [22:39:34] <rob0> I'm back now :) [22:39:38] <rob0> funeral [22:39:39] <Dominian> I think it had something to do with straterra's email server, but that has been averted and I'm hosting his domain in question now [22:40:01] <misty_wrk> same thing, warning: SASL authentication failure: No worthy mechs found [22:40:34] *** lysander has quit IRC [22:41:12] <misty_wrk> I see some password maps with brackets around the servername, and some with # (which I assumed were comments) and some with nothing [22:41:15] <misty_wrk> what is the dealio? [22:42:37] <rob0> Dominian, were you offline this morning? Looked like Cyberlink got unlinked. [22:42:38] <sysmonk> could you pastebin the updated log file ? [22:43:13] <sysmonk> misty_wrk: [] -> don't resolve mx, # -> comments, and nothing means nothing :) [22:43:31] <rob0> Oh surely SOMETHING means nothing. [22:43:34] <misty_wrk> http://rafb.net/p/ZYC9Nw88.html [22:44:51] <Dominian> rob0: yeah.. I talked to adam about it already [22:45:36] <Dominian> rob0: route server corruption [22:45:42] <Dominian> rob0: very bad corruption [22:45:45] <Dominian> direct quote [22:45:47] <rob0> ouch [22:45:59] <sysmonk> misty_wrk: could you also pastebin an updated postconf -n output ? [22:46:00] <Dominian> good thing it happened in the am though [22:46:21] <rob0> Misty, smtp.embarqmail.com is your relayhost? [22:46:31] <misty_wrk> yes [22:46:46] <rob0> love the hostname :) [22:46:53] <rob0> oink [22:47:07] <Dominian> heh [22:47:18] <misty_wrk> http://rafb.net/p/q8fZsb70.html [22:47:25] <misty_wrk> my servers are all farm names [22:47:34] <misty_wrk> oink, baa, moo, honk, quack [22:48:00] <Dominian> hah [22:48:07] <misty_wrk> I'm running out [22:48:20] <rob0> Ah, now if I had done that it would have been slightly different. Napoleon, Snowball, Boxer, Jessie ... [22:48:51] <misty_wrk> luckily we keep consolidating servers so I need fewer [22:49:03] <misty_wrk> I don't understand why this mail relay crap is so hard :/ I usually have no trouble with postfix [22:49:24] <sysmonk> misty_wrk: i don't see the last change [22:49:33] <sysmonk> smtpd_sasl_security_options [22:49:38] <rob0> testsaslauth [22:49:59] <rob0> this is a smtp(8) not smtpd(8) problem [22:50:06] <sysmonk> wooops [22:50:13] <sysmonk> i was good the first time [22:50:16] <sysmonk> now it's a mistype [22:50:16] <sysmonk> ;) [22:50:27] <sysmonk> 06-17 23:38:02 < sysmonk> misty_wrk: try setting smtp_sasl_security_options = [22:50:28] <sysmonk> seee ? :) [22:50:36] * rob0 has never had to mess with testsaslauth [22:50:47] <rob0> in fact I don't even do client AUTH at all [22:50:55] <sysmonk> neither do i [22:51:37] * vice-versa recommends trying smtp_sasl_security_options = noanonymous [22:52:01] <sysmonk> vice-versa: yeah, that'll work too, mainly i don't want noplaintext in there [22:52:17] <misty_wrk> I did set it, I could swear [22:52:25] <vice-versa> typo? [22:52:30] <misty_wrk> ohh [22:52:59] <vice-versa> postconf only shows valid configuration parameters [22:53:19] <vice-versa> err, options [22:53:35] <misty_wrk> YAYAYA [22:53:40] <misty_wrk> it works! thank you! [22:53:51] <sysmonk> misty_wrk: now, the next step... :P [22:54:03] <sysmonk> i'd offer you to try making it work with tls [22:54:20] <sysmonk> atleast i saw them offering starttls [22:54:31] <misty_wrk> yes I just commented that out for troubleshooting [22:54:32] <sysmonk> or doesnn't postfix support starttls client? [22:54:36] <misty_wrk> I will put it back and see if it breaks [22:54:38] *** pirho has joined #postfix [22:54:39] <misty_wrk> of course it does support it [22:56:24] <sysmonk> something in my head about postfix not supporting something in sasl client / tls client [22:56:42] <sysmonk> but i don't remember what [22:58:19] <rob0> It's not TLS. Postfix doesn't have a smtps client, which shouldn't matter much in the real world, since smtps is deprecated. [22:58:38] <rob0> The documented workaround is to use stunnel. [22:59:28] <rob0> The smtp(8) client natively does STARTTLS if compiled and configured appropriately. [23:02:14] <misty_wrk> TLS works just fine [23:02:41] *** lennard has joined #postfix [23:04:52] *** TaiSHi has left #postfix [23:05:31] <sysmonk> rob0: yeah [23:06:20] <sysmonk> rob0: ah, and sasl client isn't supported with dovecot [23:06:48] <sysmonk> that's another thingie what doesn't work in tls/smtp slient part i was thinking about [23:08:59] *** idle-boy has joined #postfix [23:12:32] *** carl- has quit IRC [23:12:59] *** idle-boy has quit IRC [23:13:13] *** ho has joined #postfix [23:13:24] *** McJerry has quit IRC [23:13:38] *** ho is now known as idle-boy [23:15:50] *** McJerry has joined #postfix [23:22:53] *** Gokee2 has joined #postfix [23:23:05] *** idle-boy` has quit IRC [23:23:54] <Gokee2> How do I take a deeper look at something in my queue? Is there any way I can see the full message? [23:24:07] <eject_ck> Guys how I can verify that my SSL work as needed ? [23:24:37] <eject_ck> openssl s_client -starttls smtp -connect mail.domain.ua:25 [23:24:49] <eject_ck> returned me: Verify return code: 19 (self signed certificate in certificate chain) [23:25:09] *** jief_m has quit IRC [23:26:51] <jeev> sysmonk, i'm so lazy.. i dont wanna drive 10 miles tot he building to get my box back up [23:26:55] <jeev> i'm getting annoyed [23:27:38] <shasta> Gokee2, find `postconf -h queue_directory` -name "1234QUEUEID" [23:27:40] *** _apk has quit IRC [23:27:52] <shasta> put actual queue id instead of 1234QUEUEID, of course [23:28:10] *** user1__ has joined #postfix [23:28:48] <user1__> http://paste.org.ru/?tm02j2 look [23:29:10] <Gokee2> shasta, AH ok, thanks [23:30:05] *** dragonheart has quit IRC [23:32:10] <sysmonk> jeev: that's you're problem [23:32:25] <sysmonk> jeev: i'm not that lazy, but hey, i dont have those fancy 24" lcd's that you have :P [23:32:45] *** Fallenou has quit IRC [23:33:59] <jeev> haha [23:34:09] <jeev> man i dont wanan driveeeeee, i text them, maybe they got someone competent [23:34:22] <jeev> cnosidering i was incompetent, i forgot to back up my shit and i deleted my old libraries without rebuilding.. [23:35:36] <misty_wrk> sysmonk: thank you again! [23:36:47] *** misty_wrk has left #postfix [23:37:43] <sysmonk> micols__: np [23:37:56] *** eject_ck has quit IRC [23:40:03] <tsh> rob0, so its because i have a custom banner that i am not recving the mail ? [23:44:21] <tsh> rob0, are you saying because of my banner that is the reason behinjd the wierd mail issue i posted earlier ? [23:57:57] *** lysander has joined #postfix