[00:03:18] *** brancaleone has quit IRC [00:03:36] *** rakosh76_ has quit IRC [00:05:13] *** fafa_ has joined #postfix [00:05:23] *** fafa_ is now known as fafa__ [00:10:21] *** jonez has joined #postfix [00:17:17] *** hark has quit IRC [00:21:07] *** the-fafa has quit IRC [00:29:20] *** cilly has quit IRC [00:30:54] *** AllenJB has joined #postfix [00:31:30] *** AllenJB_ has quit IRC [00:32:01] *** Sedrik has joined #postfix [00:37:35] <Sedrik> Hi. I'm a Postfix (mail server) n00b looking for some help. I have a multi-server web cluster than needs to send mail. Incoming mail to the domain goes to a completely different host (gmail). MX records are pointing to Gmail. Currently I have Postfix setup on one of the boxes in the web cluster and the other boxes connect to it to send their mail. All mail currently ends up in spam... [00:37:37] <Sedrik> ...folders. I have SPF records created. [00:37:56] <Sedrik> I'm trying to determine what the optimal setup for this kind of environment is [00:38:37] *** Draecos has quit IRC [00:44:14] *** jonez has quit IRC [00:58:59] *** xpoint has quit IRC [01:07:29] *** Juspion has joined #postfix [01:07:31] <Motoko-chan> Do you know the cause of the problem? [01:07:39] <Motoko-chan> Like why it's ending up in there. [01:08:02] <Motoko-chan> Also, disable SPF for now (it's almost worthless anyway) to eliminate it from the situation. [01:14:22] *** Azrael has joined #postfix [01:14:25] <Nodlehs> Any common noob mistake that results in postfix not using virtual_mailbox_domains? It looks at my other virtual settings to validate users, but not domains [01:15:09] <Azrael> does anyone have recommendations of how to block "spear phishing" attacks on our MX's? [01:15:16] <Azrael> we're getting targeted phish [01:17:47] <Sedrik> Motoko-chan: Sorry, was away. No I don't really know the cause of the problem. [01:18:03] <Motoko-chan> What spam folders the items? [01:18:10] <Sedrik> gmail [01:18:12] <Motoko-chan> Specific site, or just in general? [01:18:14] <Motoko-chan> Ah. [01:18:19] <Motoko-chan> Bug Google? [01:18:42] <Motoko-chan> Also, check your outbound IPs for presence on any blocklists. [01:18:45] <Motoko-chan> openrbl.org [01:19:11] <Motoko-chan> Then also make sure the outbound have a proper PTR in DNS that matches an A record for them. [01:21:28] <Sedrik> Ya, I had my ISP set up the PTR record. My hunch is that it's because i have servers 2 thru 6 sending mail thru server 1, and that that's all communicated on a private network. gmail shows that the mail originated from 10.x.x.x. [01:21:47] <Sedrik> but that's more of an observation than anything else. [01:22:01] <Motoko-chan> That shouldn't be an issue. [01:22:12] <Motoko-chan> It's the one that touches the cloud you need to worry about. [01:22:22] <Motoko-chan> Also make sure you only have *one* PTR for the IP. [01:22:33] <Sedrik> Received: from myhost-web4 (unknown [10.248.0.13]) [01:22:37] <Sedrik> is what google shows [01:22:39] <Motoko-chan> Many things don't like multiple PTR records and see issues. [01:22:54] <Motoko-chan> That's actually inserted by the next server up, not Google. [01:23:16] *** gpled has joined #postfix [01:23:30] <Sedrik> ya -- the next server up is my first web server -- the one with postfix on it: by smtp.myhost.com (Postfix) [01:23:47] <Sedrik> 'myhost' is not the real address there [01:24:01] <Motoko-chan> Anyway, check DNS. [01:24:03] <Sedrik> and smtp.myhost.com resolves to the server sending the mail [01:24:10] <Motoko-chan> It's the most common problem. [01:25:13] <Motoko-chan> If your server gives a helo of "smtp.example.com" then the PTR for the IP it sends from should be the same. [01:25:20] <Motoko-chan> If it is different, it can cause problems. [01:25:56] <Sedrik> is there anyway for me to query for the PTR? my ISP assured me they set it up, but they've been wrong before ;) [01:26:34] <jduggan> dig -x [01:26:54] <jduggan> host -t PTR ip (in-addr.arpa format) [01:28:31] <Motoko-chan> dig -x works nicely [01:28:39] <Motoko-chan> And will show if there are multiple records. [01:28:44] <Motoko-chan> nslookup and host don't iirc [01:29:04] <Sedrik> dig -x IP_ADDR or dig -x SMTP_HOST? [01:29:14] <Motoko-chan> dig -x IP [01:29:32] <Sedrik> ah [01:29:34] <Sedrik> yes [01:29:37] <Sedrik> just 1 IP it looks likke [01:29:39] <Sedrik> like [01:29:52] <Motoko-chan> Does it match the HELO of the server? [01:30:37] <Sedrik> yes, it does [01:31:27] <Sedrik> should the HELO respond with the ending period? the PTR record has a period have the '.com' [01:32:47] <Motoko-chan> No, it shouldn't. [01:32:57] <Motoko-chan> That's a DNS system thing. [01:33:00] <Sedrik> ok [01:33:29] <rob0> smtp.myhost.com. ? NXDOMAIN for me. [01:38:39] *** ming_zym1 has quit IRC [01:39:29] *** Azrael has quit IRC [01:42:47] *** Nodlehs has left #postfix [01:45:51] *** roe__ has joined #postfix [01:48:07] *** magyar has joined #postfix [01:51:36] *** diveli has joined #postfix [01:52:46] *** roe__ has quit IRC [01:59:33] *** martiancode has quit IRC [02:02:21] *** cilly has joined #postfix [02:02:38] *** Motoko-chan has quit IRC [02:03:36] <gpled> anyone using postfix from source on a centos box? [02:04:18] *** Southron has joined #Postfix [02:27:18] *** gpled has left #postfix [02:27:43] *** madrescher has quit IRC [02:33:48] *** SeJo has quit IRC [02:34:35] *** SeJo has joined #postfix [02:35:01] *** Alex00 has joined #postfix [02:38:42] *** xnixan has joined #postfix [02:52:30] *** Dragonu has quit IRC [02:57:24] *** Zblakany has quit IRC [03:09:21] *** ming_zym has joined #postfix [03:16:35] *** Zblakany has joined #postfix [03:38:14] *** adaptr has quit IRC [03:39:24] *** Juspion has quit IRC [03:41:16] *** pirho has quit IRC [03:45:23] *** adaptr has joined #postfix [03:53:16] *** columbin has joined #postfix [03:54:38] *** keffer has quit IRC [04:12:04] *** Southron has quit IRC [04:16:14] *** Zblakany has quit IRC [04:22:45] *** Internat has quit IRC [04:24:45] *** internat85 has joined #postfix [04:47:12] *** Sedrik has quit IRC [04:49:34] *** tombar_ has quit IRC [04:52:27] *** pickcoder has joined #postfix [04:54:17] *** tombar has joined #postfix [04:56:05] *** tombar has left #postfix [05:07:31] *** Zeit|awy_ has joined #postfix [05:10:50] *** cilly has quit IRC [05:13:42] *** Zeit|awy has quit IRC [05:36:35] *** keffer has joined #postfix [05:41:00] *** tombar has joined #postfix [05:47:30] *** tombar_ has joined #postfix [05:55:27] *** AcTiVaTe has joined #postfix [05:55:40] *** saurabhb has joined #postfix [05:58:24] *** Motoko-chan has joined #postfix [06:01:48] *** AcTiVaTe has quit IRC [06:01:59] *** tombar has quit IRC [06:15:20] *** tshine_afk has quit IRC [06:16:12] *** pingouin has quit IRC [06:18:19] *** lawnchair has joined #postfix [06:25:26] *** cafuego has quit IRC [06:30:39] *** Alex00 is now known as idle-boy [06:31:30] *** cafuego has joined #postfix [06:33:40] *** pickcoder has quit IRC [06:37:45] *** saurabhb has quit IRC [07:04:57] *** saurabhb has joined #postfix [07:05:42] *** krawek has quit IRC [07:25:42] <Adam[weg]Weishau> Good Night @ all | gute nacht zusammen [07:29:22] *** amrit|zzz is now known as amrit [07:30:01] *** tombar_ has quit IRC [08:03:00] *** Fallenou has joined #postfix [08:07:30] *** pepe_swash has joined #postfix [08:08:01] <pepe_swash> hello. how do i prevent tls for pop? [08:09:12] <pepe_swash> i read everywhere how to do that for smtp, but i don't use the smtp part of postfix. [08:09:50] <pepe_swash> and i've disables tls for smtp anyway. i still get cert errors when i read account using thiunderbird [08:10:43] <Motoko-chan> Make sure to choose "No" for encryption. [08:10:49] <Motoko-chan> Default is "if available" [08:11:44] <pepe_swash> if i do that i get an error "plaintext auth disallowed on non-secure connections" [08:12:09] <pepe_swash> which is why i thought postfix was the culprit [08:12:17] <pepe_swash> and had encryption enabled [08:12:30] *** phnord has joined #postfix [08:22:11] <rob0> Um, Pepe, there IS no "pop part" of Postfix. That would be some other server. [08:23:16] *** L0rd_Rahl has quit IRC [08:26:05] <pepe_swash> damnit, you're right. And i was wondering why i could not find any info on pop in docs... Shit happens.. thanks... [08:27:18] <rob0> :) [08:27:24] *** columbin has quit IRC [08:28:01] <pepe_swash> have a nice day..thanks again. [08:28:40] *** pepe_swash has left #postfix [08:33:35] *** syneus has joined #postfix [08:39:22] *** Daviey has joined #postfix [08:59:09] *** zeitsofas has joined #postfix [09:00:06] *** Adam[weg]Weishau has quit IRC [09:07:43] *** madrescher has joined #postfix [09:12:24] *** harobed has joined #postfix [09:16:12] *** master_o1_master has joined #postfix [09:22:19] *** maw_ has quit IRC [09:22:24] *** maw_ has joined #postfix [09:26:10] *** Draecos has joined #postfix [09:28:03] *** master_of_master has quit IRC [09:29:13] *** maw__ has joined #postfix [09:30:29] *** maw_ has quit IRC [09:32:58] *** Zblakany has joined #postfix [09:33:27] *** Joe_Wulf has quit IRC [09:33:51] *** JoeWulf has joined #postfix [09:34:49] *** JoeWulf has quit IRC [09:34:50] *** rmayorga has quit IRC [09:35:05] *** JoeWulf has joined #postfix [09:35:40] *** JoeWulf has quit IRC [09:35:53] *** JoeWulf has joined #postfix [09:36:41] *** JoeWulf has quit IRC [09:37:05] *** JoeWulf has joined #postfix [09:43:00] *** havvg has joined #postfix [09:43:33] *** master_o1_master is now known as master_of_master [09:45:57] *** rmayorga has joined #postfix [09:49:20] *** Motoko-chan has quit IRC [09:56:37] *** amrit is now known as amrit|zzz [10:03:20] *** tomocha6 has quit IRC [10:06:59] *** xpoint has joined #postfix [10:11:52] *** sophokles has joined #postfix [10:12:20] *** mark-use has joined #postfix [10:26:04] *** havvg has quit IRC [10:27:22] *** mija has joined #postfix [10:29:41] <mija> hi there [10:29:48] <mija> i have a problem with postfix... [10:29:49] <mija> Jul 13 09:07:09 localhost postfix/smtp[11612]: CBE43135191: to=<lopetz at zoomerboys dot com>, relay=zoomerboys.com[157.161.7.31], delay=1, status=bounced (host zoomerboys.com[157.161.7.31 [10:29:59] <mija> it bounces mails and i don't know why [10:30:06] <mija> how i can solve this issue [10:33:48] <_ruben> you didnt paste the most important part of that line, the part that says why it bounces your message [10:34:17] *** denis_ has joined #postfix [10:35:27] <mija> ok moment pls [10:36:23] *** [diablo] has joined #postfix [10:36:27] <mija> said: 550 5.7.1 local domain specified from non-local IP (in reply to end of DATA command)) [10:36:34] <mija> ;( [10:37:08] <xpoint> and post postconf -n [10:37:25] <xpoint> as stated in /topic [10:37:44] <mija> alias_database = hash:/etc/aliases [10:37:44] <mija> alias_maps = hash:/etc/aliases [10:37:44] <mija> append_dot_mydomain = no [10:37:44] <mija> biff = no [10:37:44] <mija> bounce_queue_lifetime = 6h [10:37:56] <mija> config_directory = /etc/postfix [10:37:56] <mija> inet_interfaces = loopback-only [10:37:56] <mija> mailbox_command = procmail -a "$EXTENSION" [10:37:56] <mija> mailbox_size_limit = 0 [10:37:56] <mija> maximal_queue_lifetime = 6h [10:38:08] <internat85> !pastebin [10:38:08] <mija> mydestination = localhost.localdomain, localhost.localdomain, localhost [10:38:08] <mija> myhostname = www1.freeflux.net [10:38:08] <mija> mynetworks = 127.0.0.0/8 [10:38:08] <mija> myorigin = /etc/mailname [10:38:08] <xpoint> ... not here [10:38:08] <knoba> internat85: "pastebin" : a way to paste larger amounts of text so that other people can read it. Try http://www.rafb.net/paste/ or http://paste.debian.net/ - Do not forget to tell us the URL where you pasted it. [10:38:24] *** jelly has joined #postfix [10:39:11] <mija> http://rafb.net/p/oTE7YR47.html [10:39:33] *** Draecos has quit IRC [10:41:31] <mija> can any one help me to solve my bounce problem [10:41:33] <mija> ;( [10:47:20] <xpoint> if you posted on !pastebin i could have say with lines to change [10:48:24] <xpoint> mija, remove line 4 14 [10:48:47] <xpoint> mija, and 17 [10:49:34] <mija> ok just moment pls [10:50:19] <xpoint> it should work as a sending only mta ? [10:51:01] <xpoint> damm debian default main.cf :( [10:51:29] <mija> yes [10:51:32] <mija> only sending mta [10:52:40] <xpoint> ok then, then line 14 was not wroung, but it okay as default olso, when line 8 is there [10:53:30] <xpoint> stop postfix now, and start it [10:53:41] <xpoint> sendmail -bv root [10:53:46] <xpoint> see logs [10:54:22] <mija> i hope this will help ;( [10:54:44] *** lunaphyte_ has quit IRC [10:54:50] <xpoint> it will help more to not use debian :-) [10:54:57] <mija> ;=) [10:55:09] *** idle-boy has quit IRC [10:55:11] *** idle-boy has joined #postfix [10:55:25] <mija> you prefered to use bsd? [10:55:28] <mija> ;=) [10:55:52] <xpoint> picobsd is better if one like to run on floppys [10:56:05] <mija> ;=) [10:57:50] <mija> is it possible to resend all the bounced e-mails? [10:59:07] <xpoint> postsuper -d ALL [10:59:16] <xpoint> delete [10:59:19] <xpoint> :) [11:00:10] <mija> xpoint thanks for your help.... [11:01:38] <xpoint> try the sendmail line, this should not spot any errors in logs [11:01:57] <xpoint> sendmail -bv root [11:06:07] *** cilly has joined #postfix [11:06:21] <xpoint> mija, please test [11:07:27] <mija> how i can test it [11:07:32] <xpoint> sendmail -bv root [11:07:33] <mija> the error was not every time [11:07:55] <xpoint> show me logs from the sendmail line [11:08:15] <mija> freeflux:/var/log# sendmail -bv root [11:08:15] <mija> Mail Delivery Status Report will be mailed to <root>. [11:08:15] <mija> freeflux:/var/log# mail [11:08:15] <mija> No mail for root [11:08:18] <mija> this i have done [11:08:24] <xpoint> if that does not work we still have problems [11:08:42] <xpoint> damm [11:08:58] *** adamt has left #postfix [11:08:59] <xpoint> still fails since ROOT newer reads mails [11:09:42] <xpoint> mija, see content of /etc/aliases [11:10:27] <xpoint> mija, root: foo at domain dot tld [11:10:58] <mija> http://rafb.net/p/W6rTpV68.html [11:11:09] <mija> this is my aliases [11:12:40] <xpoint> seems ok, but "No mail for root" seems still damm wroung to me [11:13:34] <mija> ;...( [11:14:10] <xpoint> wake up xpoint :), its not mal for root, but bitflux, su bitflux, mail [11:15:34] <mija> there are only 2 mails [11:15:38] <mija> 1 from chrony [11:15:44] <mija> and one warning from mysql [11:15:58] <xpoint> then it still brokken [11:16:35] *** AcTiVaTe has joined #postfix [11:16:36] <xpoint> give me the postconf -d | grep alias [11:16:43] <mija> freeflux:/var/log# mailq [11:16:43] <mija> Mail queue is empty [11:17:00] <xpoint> mailq is not mailbox [11:17:30] <mija> http://rafb.net/p/jyUfbj43.html [11:17:54] <mija> i know that mailq is not the mailbox [11:18:08] <mija> but how would postfix send a rapport if the queue is empty [11:20:43] <xpoint> add: postconf -e 'proxy_interfaces=<wan-ip>' change <wan-ip> to your static wan ip [11:22:31] <xpoint> mija, you ask me what is in your logs, funny :-) [11:23:10] <mija> freeflux:/etc/network# postconf -e 'proxy_interfaces=194.50.176.167' [11:23:10] <mija> freeflux:/etc/network# [11:23:13] <mija> well done [11:23:26] <mija> must i restart postfix again? [11:24:24] <xpoint> reload is enough when its main.cf changes [11:24:45] <xpoint> if it was master.cf you need to stop and start postfix [11:24:56] <mija> freeflux:/etc/init.d# ./postfix reload [11:24:56] <mija> Reloading Postfix configuration...done. [11:24:56] <mija> freeflux:/etc/init.d# [11:24:57] <mija> done [11:29:15] <mija> xpoint: http://rafb.net/p/FTsZ2697.html [11:32:05] <xpoint> see logs where root mail goes [11:33:02] <mija> just moment [11:34:52] <mija> here is the log: http://rafb.net/p/oseDIL93.html [11:37:27] <xpoint> line 22 23 24 show me it works [11:38:42] <xpoint> but you want local delivery ? [11:41:16] <mija> hmmm [11:41:23] <mija> its a very old system [11:41:34] <xpoint> bad excuses :) [11:41:39] <mija> ;=) [11:42:03] <mija> just a moment pls i will try something [11:42:26] <xpoint> mija, understanding postfix might olso helps [11:42:38] <mark-use> what's wrong here?? Jul 16 09:47:59 natrium imapd-ssl: couriertls: accept: error:140D9115:SSL routines:SSL_GET_PREV_SESSION:session id context uninitialized [11:43:23] <xpoint> unsure [11:44:51] <mija> xpoint it realy seems to be good [11:44:57] <mija> will try more tests [11:54:17] *** zamba has joined #postfix [11:54:28] <zamba> any way i can get the client versions when they connect to my postfix? [11:55:03] <f3ew> no [11:57:04] *** UQlev has joined #postfix [12:03:23] *** f3ew has quit IRC [12:03:50] *** f3ew_ has joined #postfix [12:07:48] <xpoint> p0f ? [12:27:16] *** ams has joined #postfix [12:29:03] <ams> anyone got tips on backing up huge mailspools (maildir)? [12:30:02] <lysander> filesystem snapshots ? [12:30:17] * lysander has his maildirs on zfs, but something similar would also be fine [12:30:39] <Trengo> yeah snapshots i guess [12:30:48] <Trengo> how huge? [12:31:12] <ams> about 100GiB [12:31:50] <ams> the bottleneck is the amount of files [12:32:42] <ams> and i doubt i could be able to switch to zfs... production machine, blech and double blech [12:32:47] <ams> just looking for idea [12:32:48] <ams> s [12:32:59] <Trengo> 100GB isnt that much [12:33:07] <Trengo> mine's 1TB and its not a lot [12:33:45] <ams> how many files though? [12:33:52] <shasta> ams, files in maildir are named with a unix timestamp, you can split maildirs "by date" [12:33:57] <ams> or maybe zfs is nicer than ext3 on lots of files [12:34:15] <ams> shasta: uhm,no i cannot [12:34:23] <ams> that would screw up whatever silly rules a user has [12:34:36] <shasta> well, just for backups, that is [12:34:54] <ams> and how on earth would that be useful? [12:35:07] <ams> i still would have to traverse 100k files per user, which is the bottleneck [12:35:18] <Trengo> do a FS snapshot [12:35:46] <ams> does ext3 support them? [12:35:49] <shasta> no [12:35:55] <shasta> LVM does, tho [12:36:52] <ams> mm... [12:36:57] * ams rtfms a bit more [12:37:28] <Trengo> yeah and wouldn't disrupt service or setup much [12:37:47] <shasta> (man lvcreate, see -s) [12:37:56] <ams> can one dump snapshots to some offsite box and restore? [12:38:21] *** cpm has joined #postfix [12:40:21] <shasta> well, lvm snapshot is a "frozen image" of the snapshotted volume [12:40:43] <jelly> ams: our mailbox folders are split on multiple filesystems, each around 100GB size [12:40:48] <shasta> you can backup it just like an actual filesystem with whatever tools you ues [12:40:55] <shasta> s/ues/use/ [12:44:45] <f3ew_> ams, get a netapp? [12:47:12] <ams> i think ih ave a plan now, thanks guys [12:50:33] *** _zsh has joined #postfix [12:51:17] * jelly backs up 8 * 70GB of maildirs in ~5 hours, using a normal filesystem backup [12:53:11] *** ming_zym has quit IRC [12:54:14] *** UQlev has quit IRC [12:54:33] *** rgoldber has joined #postfix [12:55:15] *** tomocha6 has joined #postfix [12:55:28] *** zeroC has joined #postfix [12:55:31] <zeroC> hi there... [12:55:35] <rgoldber> hi all - I just warpped up a 5 hour emergency migration of 9000 accts, 400 domains from qmail + ldap + custom userprefs app -> postfix + mysql [12:55:53] <rgoldber> it sucked, I'm not an email admin, I'm more of a net admin. it sucked. [12:56:11] <zeroC> anyone german here? [12:57:30] <rgoldber> anyway, one quick question. passwords are in plaintext in the db - I need smtp auth to work - with the passwd in plaintext, am I going to be able to enable md5 or cram in a straightforward manner? [12:58:19] <shasta> rgoldber, cram-md5 and digest-md5 can work *only* if you have plaintext password at the server end [12:58:26] <shasta> (well, to be precise, at both ends :>) [12:59:49] <rgoldber> ah ha. well goody. [13:00:26] <rgoldber> lemme poke around for a moment then [13:00:57] * cpm uses plain auth, encrypted passwords in the database, and forces tls to avoid passing in the clear. done. [13:01:39] <rgoldber> I have to accomodate the setting on hundreds of computers.. [13:02:12] <rgoldber> none of this was by choice, btw - I've been up since 1am. it's 6am here now [13:04:23] <f3ew_> rgoldber, ouch [13:04:38] <f3ew_> 1 am is too early to be asleep [13:04:58] <zeroC> i will try... ;) i've uploaded my postconf -n on http://pastebin.com/f6183076a [13:05:19] <rgoldber> gracias zeroC [13:05:38] *** denis_ has quit IRC [13:05:46] <zeroC> ups, please not in spanish... ;) [13:05:53] <zeroC> english is hard enough [13:06:07] <zeroC> so but, i cannot send any mail out... i've deleted my mail.log... [13:06:15] <zeroC> still wait, i will add a new one [13:06:16] <zeroC> :) [13:06:32] <zeroC> but the problem is, no mail comes out [13:08:01] <zeroC> does anyone now, what i can do, to get a new mail.log? [13:08:14] [13:08:17] <zeroC> its archlinux [13:09:38] <mwalling> syslogd should create a new file when it is restarted [13:10:29] <zeroC> i've restart it, but nothing happened [13:11:07] <zeroC> mwalling: sry [13:11:10] <zeroC> it works [13:11:10] <zeroC> :D [13:12:21] <zeroC> mail.log http://pastebin.com/f37b2837 [13:16:18] <zeroC> mwalling: with it works i meant the mail.log was created [13:16:18] <zeroC> :) [13:18:45] *** lunaphyte_ has joined #postfix [13:20:04] *** Broken|work_ has quit IRC [13:30:56] <zeroC> http://pastebin.com/m4d1b16ed [13:31:01] <zeroC> hab mal versucht noch ne mail zu versenden [13:33:08] <zeroC> ups, i've send another mail [13:33:09] <zeroC> :) [13:33:09] <zeroC> sry [13:46:02] <rgoldber> ok - so, postfix - sasl - pam - mysql, they're talking to eachother and I can use use PLAIN and LOGIN. I can add DIGEST-MD5 and CRAM-MD5 to my mech_list, and the the smtpd claims to support it, but of course authentication doesn't work. I feel I'm missing jut one key thing here. Any takers? [13:49:16] <mwalling> !sasl [13:49:16] <knoba> mwalling: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details. [13:49:49] <zeroC> mwalling: do you have an idea for my problem too? [13:49:55] <mwalling> also, you said you werent a mail admin, but i'm sure you learned something in the past 6 hours, but you should still read [13:49:59] <mwalling> !basic [13:50:00] <knoba> mwalling: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here. [13:50:03] <mwalling> and [13:50:06] <mwalling> !standard [13:50:06] <knoba> mwalling: "standard" : Your question is probably answered in http://www.postfix.org/STANDARD_CONFIGURATION_README.html [13:50:17] <_apk> hi! :) [13:50:39] <zeroC> hi _apk [13:50:41] <mwalling> and /topic [13:50:42] <mwalling> er [13:50:59] <rgoldber> I'll keep it up, just getting sleepy/stupid [13:51:23] <rgoldber> (but yeah, I've read that) [13:51:29] <mwalling> and [13:51:31] <mwalling> !virtual [13:51:31] <knoba> mwalling: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html [13:54:13] <shasta> rgoldber, what do you mean by "smtpd claims to support it"? [13:54:53] <rgoldber> I mean if I add trhose to mech_list and do an ehlo, it responds with them in the list [13:55:12] <rgoldber> but, if I try and auth with either of them, it does not work. [13:55:29] <rgoldber> (but PLAIN and LOGIN do) [13:58:21] <rgoldber> so, postfix is talking to sasl is talking to pam is talking to mysql [14:08:07] <rgoldber> got packt capture, transaction looks ok, but of course I get 535 auth failed back [14:08:15] *** internat85 has quit IRC [14:08:31] <rgoldber> I'll see if I can't crank up the logging somewhere in the region of pam+sasl [14:08:35] *** internat85 has joined #postfix [14:09:00] *** jelly has quit IRC [14:14:10] *** jelly has joined #postfix [14:15:02] <rgoldber> erm maybe I'm barking up the worng tree: http://osdir.com/ml/security.cyrus.sasl/2003-11/msg00001.html I give up for now, need sleep, let them live with LOGIN and PLANI [14:18:30] *** UQlev has joined #postfix [14:20:27] *** lysander has quit IRC [14:20:47] *** saurabhb has quit IRC [14:32:49] *** lysander has joined #postfix [14:49:38] *** rizi_ has joined #postfix [14:51:01] *** rizi has quit IRC [14:55:00] *** JoKoT3 has joined #postfix [14:56:39] *** contraventor has quit IRC [15:10:02] *** nikebsd1 has joined #postfix [15:12:50] *** jellis-real has joined #postfix [15:13:38] *** n215 has quit IRC [15:20:45] *** shinao1 has joined #postfix [15:21:39] *** jonez has joined #postfix [15:27:51] *** _zsh has quit IRC [15:38:49] *** JoKoT3 has quit IRC [15:39:54] *** denis_ has joined #postfix [15:41:59] *** JoKoT3 has joined #postfix [15:44:15] *** _zsh has joined #postfix [15:45:12] *** F6F has joined #postfix [15:51:13] *** Nockian has quit IRC [15:59:29] *** F6F has quit IRC [15:59:29] *** mark-use has quit IRC [15:59:32] *** sypher has joined #postfix [15:59:33] *** cssbkgn has joined #postfix [15:59:33] *** crdlctelcj has joined #postfix [15:59:36] *** viimrles has joined #postfix [16:02:02] *** UQlev has quit IRC [16:06:32] *** F6F has joined #postfix [16:08:18] *** Nockian has joined #postfix [16:08:53] *** mark-use has joined #postfix [16:31:09] *** capt_rogers has quit IRC [16:36:02] <ams> who knows there filesystems? [16:37:35] *** internat85 has quit IRC [16:37:45] *** internat85 has joined #postfix [16:39:59] <seekwill> I know mine [16:41:01] <ams> know a good one for a bazillion small files.. :-) [16:41:21] *** UQlev has joined #postfix [16:41:21] <ams> (mail/news spool) [16:41:27] <seekwill> We use ext2 [16:42:18] <ams> interesting [16:42:23] <f3ew_> ReiserFS, but it's unreliable under load [16:42:27] <ams> not xfs or some such beast? [16:43:03] <seekwill> Is it cliche to make jokes about ReiserFS? [16:43:13] <f3ew_> yes [16:43:23] <f3ew_> xfs, not for mail spools [16:43:31] <f3ew_> ufs2 is good [16:43:35] <f3ew_> as is ZFS [16:43:37] <seekwill> ams: ext2 comes with RHEL... so just "easier" [16:43:45] <ams> i don't use rhel... [16:43:46] <f3ew_> ext2 is good too [16:43:51] <f3ew_> What do you use? [16:43:55] <ams> debian [16:44:02] <seekwill> We've had issues with zfs. ufs seemed better, but I forgot the options. [16:44:05] <ams> in either case, not relevant... [16:44:10] <jelly> seekwill: rhel doesn't really support a whole bunch of filesystems... you have ext3 or ext2. [16:44:22] <seekwill> jelly: That's the point [16:44:43] *** deemon is now known as dh [16:44:48] <ams> so nobody uses a journal fs for spools? [16:45:03] * jelly uses ext3 by default [16:45:12] <f3ew_> jelly, also XFS [16:45:20] <jelly> f3ew_: since when? [16:45:26] <f3ew_> Ancient times [16:45:40] *** dh is now known as deemon [16:45:42] <f3ew_> you just have to load the module at boot if you want the rootfs to be on xfs [16:46:06] <ams> so do you pass any funny switches to the kernel for ext2/3? [16:46:08] <jelly> f3ew_: my rhel4 kernel doesn't even have an xfs module [16:46:12] <ams> say, noatime and such. [16:46:22] <seekwill> ams: noatime is good [16:46:45] <jelly> f3ew_: a rhel5 machine neither [16:47:19] <ams> well then, i'll go with ext3 as I did before... [16:47:29] <f3ew_> hmmmm [16:47:37] <jelly> f3ew_: mmm, scrap that last one, I forgot I reinstalled the '5 machine back to rhel4 [16:49:43] <jelly> seekwill: noatime messes up etrn, afair? [16:50:10] <f3ew_> yes [16:50:24] <f3ew_> but this is spool, not queue [16:50:40] *** rgoldber has quit IRC [16:51:43] <jelly> oh, right [16:51:54] * jelly doesn't read O:-) [16:52:53] <ams> any other useful switches for a mailspool? [16:53:37] <jelly> ext3 with hashed directory entries (-O dir_index; might or might not be the default for your mke2fs, depending on version and config) is a-ok [16:54:22] <ams> interesting [16:55:00] <ams> anything else fun? :) [16:55:51] <jelly> this was one of two killer features reiserfs v3 had, compared to ext2 at that time. The other one was tail packing [16:56:51] <jelly> however, after waiting for one reiserfsck run to finish under 72 hours, we somehow decided against using reiserfs ever again [16:58:51] <jelly> ams: not related to mail spool usage; but if you have dynamically expandable block devices (lvm or LUNs exported from a SAN device), using -O resize_inode will make your ext3 resizable online (no need to umount) [16:59:25] <ams> ah, lovley [17:01:19] <jelly> so basically mke2fs -j -O dir_index,sparse_super,resize_inode /dev/wherever; add labels and other options to taste [17:11:17] <ams> and now for a stupid question... [17:12:00] <ams> what are the silly options to setup so that mail is dumped to /com/mail/USER, /com/mail/USER being the root directory (i.e. /home/USER/Maildir)? [17:18:47] *** e_ has joined #postfix [17:18:50] <e_> hey guys [17:19:12] <e_> what would be the smartest way to relay specific local users to a different smtp host? [17:19:16] <e_> not all, only a few [17:20:25] *** Roobarb has quit IRC [17:20:57] *** hparker has joined #postfix [17:22:19] *** Roobarb has joined #postfix [17:22:32] <xpoint> hi hparker welcome back [17:22:40] <hparker> ty [17:23:47] *** Roobarb has quit IRC [17:25:10] *** Fallenou has quit IRC [17:25:27] *** Fallenou has joined #postfix [17:26:17] *** Roobarb has joined #postfix [17:27:36] * cpm hides [17:30:33] <ams> seems everyone did =) [17:31:44] <shasta> e_, man 5 transport [17:31:53] *** suuuper has joined #postfix [17:33:47] <e_> ah nice, when i glanced over it i understood it for whole domains [17:33:48] <e_> thx [17:35:01] *** cilly has quit IRC [17:36:47] *** havvg has joined #postfix [17:37:19] *** havvg has quit IRC [17:42:00] *** echelog has joined #postfix [17:47:00] *** mija has quit IRC [17:47:41] <e_> nah, goes to maildir [17:47:54] <zeitsofas> http://www.bamstevinho.de/ !!hilfe zur selbsthilfe!! [17:48:07] <e_> shasta: does this maybe affect nonlocal addresses? [17:49:33] <zeitsofas> i'm sorry i forgot amsg did post on all connectet servers :( [17:49:53] *** Flobbie has joined #postfix [17:50:54] *** Azrael has joined #postfix [17:52:54] *** internat85 has quit IRC [17:53:06] *** internat85 has joined #postfix [17:55:02] <e_> zeitsofas: wether you spam here or somewhere else doesn't make your spam less spam [17:55:25] <zeitsofas> e_: im so sorry :( [17:57:30] *** sypher has quit IRC [18:00:28] *** harobed has quit IRC [18:03:57] *** j_s has joined #postfix [18:04:02] *** syneus has quit IRC [18:08:13] *** EasilyOdd has joined #postfix [18:15:47] *** mark-use has quit IRC [18:34:37] *** zeroC has quit IRC [18:36:36] *** phnord has quit IRC [18:41:29] *** quieteyes has joined #postfix [18:42:06] *** EasilyOdd has quit IRC [18:47:40] *** denis_ has quit IRC [18:52:24] *** markl__ has joined #postfix [18:53:07] <markl__> i am trying to run postfix as a catch all test smtp server - i want it to send all mail to all addresses to a single maildir - what is the easiest way to configure this? [18:53:36] *** idle-boy has quit IRC [18:53:40] *** idle-boy has joined #postfix [18:55:56] <cpm> aliases [18:56:03] <cpm> @domain.com userid [18:56:05] <cpm> done [19:01:02] *** FuriousGeorge has joined #postfix [19:01:08] <FuriousGeorge> hey all [19:01:23] <FuriousGeorge> i think i got someone who blacklisted me due to greylisting [19:02:44] <FuriousGeorge> what's that system called where an MTA sends a verification message which must be verified via response before it will send mail to the destination mailbox? [19:02:53] *** suuuper has quit IRC [19:03:43] <UQlev> FuriousGeorge: challenge-response [19:04:11] <FuriousGeorge> anyway, i have a 3rd party using that system. I don't believe it resends the challenge-response (thanks UQlev) to my greylisting domains [19:04:28] <FuriousGeorge> good theory? [19:04:41] <FuriousGeorge> im gonna call my user and ask if she got one [19:05:05] <UQlev> if it is normal mail-server challenge message is sent same as regular mails within several days [19:05:48] <UQlev> greylisting usually counts several attempts [19:08:50] *** neoeinstein has joined #postfix [19:09:12] <FuriousGeorge> hmm, maybe postgrey on my side is doing it [19:11:11] *** JoKoT3 has quit IRC [19:15:24] *** cilly has joined #postfix [19:19:07] *** havvg has joined #postfix [19:19:22] <FuriousGeorge> UQlev: ok, so maybe my theory wasnt that great [19:21:15] <FuriousGeorge> still think shes blacklisted us... ive been blacklisted for improper rDNS when it was fine [19:21:21] <FuriousGeorge> by a guy with no rDNS on his mail server [19:21:34] <FuriousGeorge> a "web developer" no less [19:22:10] <FuriousGeorge> also, it says: [19:22:10] <FuriousGeorge> This message was created automatically by mail delivery software. [19:23:16] <FuriousGeorge> Mailer-Daemon at host2 dot shovi.com [19:42:36] *** amrit|zzz is now known as amrit|wrk [19:48:40] *** UQlev has quit IRC [19:59:26] *** devdas has joined #postfix [20:02:03] *** xdie has joined #postfix [20:21:33] *** kjkoster5489 has joined #postfix [20:34:42] *** hparker has quit IRC [20:38:21] *** lunaphyte_ is now known as barfey [20:38:40] *** fafa__ has quit IRC [20:39:57] *** barfey is now known as lunaphte_ [20:40:10] *** lunaphte_ is now known as lunaphyte_ [20:40:32] *** fafa__ has joined #postfix [20:43:00] *** LordDicranius has joined #postfix [20:45:23] *** F6F has quit IRC [20:46:07] *** F6F has joined #postfix [20:46:52] <LordDicranius> I'm looking through /home/user/Maildir/cur and I'm seeing filenames that look like this: msg.EvAr:2,FRS. I notice most of the emails end with AR:2,* with * being a combination of "F" "R" and "S". do the names follow a specific naming convention/syntax? If so, what do the AR:2 and "F/R/S" mean? [20:47:40] *** denis__ has joined #postfix [20:53:04] *** idle-boy has quit IRC [20:53:15] *** idle-boy has joined #postfix [20:54:36] *** Motoko-chan has joined #postfix [20:57:30] *** FuriousGeorge has quit IRC [20:58:34] *** hparker has joined #postfix [21:01:30] *** gpled has joined #postfix [21:04:03] *** LordDicranius has quit IRC [21:04:07] *** LordDicranius has joined #postfix [21:09:03] *** shinao1 has quit IRC [21:14:41] <higuita> LordDicranius: http://cr.yp.to/proto/maildir.html [21:16:11] <LordDicranius> higuita: perfect! thank you :-) [21:17:24] *** kjkoster5489 has quit IRC [21:18:29] *** tombar has joined #postfix [21:18:36] *** F6F has quit IRC [21:26:45] *** UQlev has joined #postfix [21:29:00] *** F6F has joined #postfix [21:31:30] <gpled> doing my first postfix from source install. seems to be going well. i was wondering, when a new patch comes out, how do i apply it? [21:33:27] <devdas> rebuild Postfix [21:33:55] * devdas tends to update once in a blue moon, so I just download the entire tarball, build with the same opetion and make upgrade [21:37:07] <cpm> yup. [21:43:24] *** cpm has quit IRC [21:47:48] *** denis__ has quit IRC [21:48:27] *** c0m has quit IRC [21:53:52] *** Juspion has joined #postfix [21:59:09] *** devdas has left #postfix [22:03:56] <gpled> thanks for the tips [22:03:58] *** gpled has left #postfix [22:06:01] *** pirho has joined #postfix [22:27:20] *** tombar_ has joined #postfix [22:28:35] *** jellis-real has quit IRC [22:31:00] *** aappee has joined #postfix [22:39:58] *** UQlev has quit IRC [22:40:03] *** deemon is now known as dh [22:40:14] *** aappee is now known as a1a [22:41:36] *** F6F has quit IRC [22:41:37] *** madrescher has quit IRC [22:42:19] *** madrescher has joined #postfix [22:44:22] *** tombar has quit IRC [22:47:17] *** F6F has joined #postfix [22:49:40] *** F6F has quit IRC [22:50:27] *** a1a has joined #postfix [22:50:32] *** Juspion has quit IRC [22:54:07] *** xdie has quit IRC [22:54:33] *** LordDicranius has quit IRC [22:57:50] *** dennda has joined #postfix [22:58:23] <dennda> Hi. In virtual_domains, can I create an alias that fetches all mail being sent to it and forwards them to another email adress on a completely different server? [22:59:38] *** Bertl has left #postfix [22:59:40] *** madrescher has quit IRC [23:00:15] *** madrescher has joined #postfix [23:02:33] <dennda> Ah very well. It works by just putting the email adress behind the alias :) [23:10:28] *** cruxeternus has joined #postfix [23:13:55] *** pitakill has joined #postfix [23:14:26] *** Draecos has joined #postfix [23:17:17] *** UberDuper has joined #postfix [23:18:16] <UberDuper> So I have an interesting mail setup and I'm trying to figure a way to tackle backscatter and queuing of NDRs that'll never go anywhere anyhow. [23:18:43] *** _zsh has quit IRC [23:18:44] *** madrescher has quit IRC [23:18:47] <UberDuper> I've got a postfix/mailscanner smtp gateway that relays to a postfix/cyrus mailhost. [23:19:59] <UberDuper> On the mailhost we use a virtusertable as an alias file. In many cases we have an entry @domain.tld user at domain dot tld [23:20:07] <UberDuper> As a catch all for the domain. [23:20:41] <UberDuper> And we have entries for commonlyspammed at domain dot tld nosuchaddress [23:20:53] *** keffer has quit IRC [23:20:56] <UberDuper> nosuchaddress is defined in the aliases db to deliver to /dev/null [23:21:53] <UberDuper> Domains configured in this manner aren't a problem since all addresses at those domains are valid and get delivered. [23:22:13] <UberDuper> It's the domains that don't use the @domain.tld user at domain dot tld virtusertable entry. [23:22:45] <UberDuper> We're generating and attempting to deliver tons of NDRs. [23:28:20] *** madduck has joined #postfix [23:28:28] <madduck> okay, this is freaking me out a bit: [23:28:28] <madduck> Jul 16 23:28:14 seamus postfix/pipe[20927]: 3537E401C23: to=<testlist at lists dot madduck.net>, relay=mailman, delay=1.5, delays=0.8/0.01/0/0.65, dsn=2.0.0, status=sent (delivered via mailman service) [23:28:40] <madduck> but /etc/mailman/postfix-to-mailman.py isn't accessed [23:28:52] <madduck> /dev/sda5 on / type xfs (rw,noatime) [23:29:01] <madduck> aha, that explains this part [23:29:08] <madduck> still,mailman doesn't get the message. [23:29:17] *** pickcoder has joined #postfix [23:29:19] <madduck> *nothing* in its logs [23:30:25] <xpoint> madduck, what version of mailman ? [23:30:46] <madduck> 2.1.11 [23:31:08] *** c0m has joined #postfix [23:31:33] <xpoint> try reconfigure without postfix-to-mailman.py and use the old style with alias pipes [23:31:51] <madduck> is it a known bug? [23:32:07] <xpoint> could be i run 2.1.9 here [23:32:07] <madduck> i'd really rather not go via alias pipes... we have >1000 lists [23:32:35] <xpoint> ups [23:33:11] <xpoint> it can be postfix that miss transport_maps to mailman: [23:33:37] <xpoint> but the logs above show this works [23:34:03] <xpoint> reley=mailman, so the mails is lost in the py code [23:34:34] <madduck> ./conf/mailman_lists.hash:testlist at lists dot madduck.net mailman: [23:34:37] <madduck> and so on... [23:34:47] <madduck> yeah, looks like it. [23:35:01] <madduck> ./main.cf:#mailman_destination_recipient_limit = 1 [23:35:03] <madduck> hm... [23:35:06] <madduck> wtf? [23:35:26] <madduck> someone has been playing around [23:35:34] *** Joe_Wulf has joined #postfix [23:35:40] <xpoint> ./main.cf:#mailman_destination_recipient_limit = 1 vs ./main.cf:mailman_destination_recipient_limit = 1 [23:35:52] <madduck> yeah [23:36:14] <xpoint> # remove if its commented [23:36:55] <markl__> is it possible for my test null mail server to accept mail for all domains [23:37:02] <markl__> e.g. mydestination * [23:37:41] <xpoint> sendmail -bv <> [23:37:57] *** havvg has quit IRC [23:38:00] <xpoint> not tested here ) [23:38:04] <madduck> if only i knew where the python script's stderr went to [23:38:35] <xpoint> madduck, yes, make a good bug report on it [23:39:33] <madduck> once i have more info [23:39:56] <madduck> sys.exit(EX_SOFTWARE) [23:39:57] <xpoint> madduck, it took me very long time to make mailman work here a lack of docs and wroung info makes it hard to do right [23:40:10] <madduck> in the .py file still causes the mail to be accepted [23:40:54] <madduck> oh lol, don't use sudoedit :) [23:41:03] <madduck> Jul 16 23:40:59 seamus postfix/pipe[25453]: E5B38401C1C: to=<testlist at lists dot madduck.net>, relay=mailman, delay=0.37, delays=0.27/0.01/0/0.09, dsn=5.3.0, status=bounced (internal software error. Command output: FOOBAR) [23:41:07] <madduck> :) [23:41:27] <xpoint> fixed ? [23:41:28] *** Azrael has quit IRC [23:42:12] <madduck> not yet [23:42:55] *** madrescher has joined #postfix [23:44:46] *** bpgoldsb has quit IRC [23:44:59] <madduck> it gets delivered to /var/lib/mailman/mail/mailman and then gets lost [23:44:59] <madduck> it gets delivered to /var/lib/mailman/mail/mailman and then gets lostuh oh. [23:45:01] *** JoeWulf has quit IRC [23:48:55] <xpoint> hmm [23:49:42] <xpoint> args to mailman is maybe wroing from the master.cf pipe [23:50:01] <madduck> nope [23:50:03] <xpoint> hmm hmm [23:50:05] <madduck> (and it used to work) [23:50:30] <madduck> i have to poke more in the mailman inards [23:50:43] <xpoint> yes [23:52:12] *** j_s has quit IRC [23:52:16] <madduck> Group mismatch error. Mailman expected the mail [23:52:16] <madduck> wrapper script to be executed as group "daemon", but [23:52:16] <madduck> the system's mail server executed the mail script as [23:52:16] <madduck> group "madduck". Try tweaking the mail server to run the [23:52:28] <madduck> so in this case, it's being executed as group daemon [23:52:31] <madduck> uh, list [23:53:04] * madduck tries user=list:daemon instead of user=list [23:53:13] <madduck> no luck [23:57:40] *** Draecos has quit IRC [23:58:36] *** a1a has quit IRC