Switch to DuckDuckGo Search
   August 4, 2008  
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >

Toggle Join/Part | bottom
[00:00:24] <Landon> Danskmand1: is this a residential connection?
[00:00:26] <Danskmand1> Is my problem propably on the postfix or on the firewall side ?
[00:00:39] <Landon> oh, its before it hits the internet?
[00:01:46] <Danskmand1> Well, yes, its hooked up to a fritzbos that has a config as a "exposed host"....So its a fixed local IP-address...
[00:07:41] <Danskmand1> Well, the Fritzbox router does the connection to the internet, right behind that is my external firewall, which creates a DMZ and a internal network...In the DMZ I got a mailserver (Lotus Domino), which I want to protect from spam (Domino is not 100% spamproof). So I want to install the postfix on the external firewall which should run as a "relay server"'for the Dominoserver....
[00:08:34] *** Draecos has joined #postfix
[00:08:52] <Danskmand1> Landon: Did you see me pastebin entry ?
[00:09:39] <Landon> yeah, no idea though
[00:09:52] <Danskmand1> ...So it looks ok to you ?
[00:10:06] <Landon> I just have a singke postfix server set up
[00:10:15] <Landon> not sure what they should look like for what you want
[00:10:49] <Danskmand1> Do you know someone that has this config ?
[00:10:57] <Danskmand1> Or that could help me ?
[00:12:03] *** elpolilla has joined #postfix
[00:12:09] <elpolilla> hi
[00:12:19] <Danskmand1> Aloha :-)
[00:14:15] <Danskmand1> Elpolilla: Are you the one with the config ?
[00:14:24] *** rootsvr has quit IRC
[00:15:25] <elpolilla> uhmm
[00:15:27] <elpolilla> yeah, but no
[00:15:35] <elpolilla> i don't think you know about me :)
[00:16:05] <elpolilla> i'm having my mails rejected
[00:16:13] <Danskmand1> Hehe :-) - Got you a little confused ;-)
[00:16:23] <elpolilla> some 451 error, "server configuration problem"
[00:16:39] <elpolilla> do you know more or less where could be the problem?
[00:16:50] <Danskmand1> Do you use your server as a relay ?
[00:17:20] <elpolilla> well, i'm not sure (:
[00:17:36] <elpolilla> this error appears when somebody tries to send a mail to one of my users
[00:17:44] <elpolilla> somebody from a foreign domain
[00:18:06] <elpolilla> what would be a relay? i'm pretty noobish at mail servers :¬\
[00:19:22] <Danskmand1> Well, error 451 means "temporarily deferred" - this will happen when the addrees got "greylisted"...
[00:19:42] <sahil> well, not necessarily.
[00:19:57] <sahil> it's hard to know what is causing the deferral without seeing your maillog and a paste of your postconf -n.
[00:20:22] <Danskmand1> I know...but could be one of the reasons...
[00:20:40] <sahil> exactly, _could_ be a variety of things. but if he wants a definitive answer, he needs to provide more information.
[00:21:31] <Danskmand1> Would it help if I provided some more information too ?
[00:21:34] *** jdrake has joined #postfix
[00:22:13] <sahil> what do you mean? what are you trying to accomplish?
[00:22:51] <sahil> i saw your message a few hours ago about some package that includes a kitchen sink of different applications. making everything work together is not really #postfix related. :) but if you have a specific problem with postfix, then yes please provide enough information so others can help you debug.
[00:25:07] <Danskmand1> Ahaaa ! - that is why noone gave me a real answer !! - So either do I install a pure, clean postfix or I need to go different places for the varying applications !! - Now I got it ....
[00:30:58] <elpolilla> i'm sorry, i've just read
[00:31:09] <elpolilla> i'll paste my config right now
[00:33:34] <elpolilla> http://rafb.net/p/jkpjvY90.html
[00:33:42] <elpolilla> the error is at the bottom
[00:34:48] <jdrake> I have appended home_maildir = mail/ to my main.cf, and restarted it. I sent a test message with the sendmail program, which 'mail' confirmed had arrived. But it is doesn't arrive in ~/mail/. Any ideas?
[00:37:06] <tokam_one> Do you have a nice startup guide
[00:38:12] <tokam_one> i want to install my postfix with sasl authdeamond and mysql support
[00:38:42] <tokam_one> about authdeamond i am not sure, can i save my logins in a sql db with it?
[00:39:03] <tokam_one> i want to manage many mail accounts each should have his mailbox
[00:46:33] <sahil> jdrake: because home_maildir does not mean anything to postfix.
[00:47:20] <jdrake> oops
[00:47:42] <jdrake> I should rephrase, I actually used home_mailbox in my config, I just typed it out wrong here. Sorry :p
[00:49:21] <sahil> jdrake: what do your logs say?
[00:51:22] *** erikh has joined #postfix
[00:51:59] <erikh> hey folks, does anyone know why dict_ldap_connect would be reporting that it can't bind to a ldap server that postmap from the same install can work with fine?
[00:59:20] <jdrake> shasta, Didn't notice anything beyond reloading the configuration
[01:03:25] *** hever has quit IRC
[01:03:31] *** rmayorga has quit IRC
[01:03:55] *** rmayorga has joined #postfix
[01:05:28] *** c00l2sv has quit IRC
[01:07:39] *** hever has joined #postfix
[01:08:47] *** rizi_ has quit IRC
[01:10:50] *** b-04 has joined #postfix
[01:12:10] *** Jarrod has joined #postfix
[01:13:43] <Jarrod> Hi, is there anyone here that could help me troubleshoot my configuration?
[01:23:09] <Jarrod> I'm running squirrelmail on ubuntu 8.04 and, although I have every reason to believe I've configured everything correctly, nothing shows up when I try to either view the webmail service on the local network, and, too, when I try to do it via my domain on the internet. When I visit the server's ip from a machine on the local network, I'm assuming it's apache, but some program displays a message saying "it works!" That's the only
[01:27:22] <erikh> ugh, I am just stumped
[01:27:47] <erikh> wait
[01:28:04] <Jarrod> okay
[01:28:34] <Landon> Jarrod: have you followed the ubuntu guide to set it up?
[01:29:10] <Jarrod> Landon: I am following the guide found here http://flurdy.com/docs/postfix/
[01:30:33] <Jarrod> Should I be following the ubuntu guide? I wasn't aware that there was such a definitive thing. I am new, as I said, and was just looking for a step by step solution.
[01:30:38] <erikh> what the heck would cause the cleanup process to fail a ldap lookup when postmap works fine?
[01:30:52] <Landon> Jarrod: https://help.ubuntu.com/community/Squirrelmail
[01:30:55] <erikh> yeah, i just don't get this.. my production postfix doesn't differ at all ldap-wise
[01:31:05] <Landon> (I just set up squirrelmail yesterday)
[01:31:09] <Landon> its a fairly step by step solution
[01:31:24] <Jarrod> thanks, I'll give it a try
[01:32:21] <erikh> aha
[01:32:42] <erikh> in one install, cleanup is linked against ldap directly
[01:32:45] <erikh> in the other it's not
[01:32:50] <erikh> hmmmmmmmmmmmmm
[01:35:06] *** Juspion has joined #postfix
[01:43:50] *** Danskmand1 has left #postfix
[01:44:43] *** Zblakany has quit IRC
[01:49:38] *** war9407 has quit IRC
[01:52:53] *** Juspion has quit IRC
[01:53:40] *** F6F has quit IRC
[02:11:27] *** elpolilla has quit IRC
[02:12:24] *** c00l2sv has joined #postfix
[02:16:41] *** menace has joined #postfix
[02:16:58] <menace> how do i build a transport map (transports.db in /etc/postfix)?
[02:17:42] <erikh> menace: postmap hash transports.db < transports
[02:17:51] <erikh> it's at the top of the postmap manpage :)
[02:21:20] <menace> hm, strange
[02:21:30] <menace> it seems to be already built
[02:21:35] <menace> and is readable
[02:21:49] <sahil> uh, don't do that.
[02:21:50] <menace> but in the log there's the message that it cannot be read
[02:22:08] <sahil> just type postmap /path/to/your/transport/map/flat/file
[02:22:18] <sahil> if hash is your default, it will just use hash to create the .db file.
[02:22:33] <menace> sahil, i did that
[02:22:44] <menace> and it is there, what i see now
[02:22:47] <menace> apparently
[02:23:04] <menace> but the services say Aug 4 02:05:49 vegas postfix/trivial-rewrite[16338]: fatal: open database /etc/postfix/transport.db: No such file or directory
[02:23:24] *** kinema has joined #postfix
[02:24:33] <sahil> well
[02:24:50] <sahil> what is output of ls -l /etc/postfix/transport.db ?
[02:25:01] *** Jarrod has quit IRC
[02:25:22] *** kinema has left #postfix
[02:26:46] <menace> I'm the typical idiot
[02:26:50] <menace> transports != transport
[02:26:55] <menace> and
[02:27:06] <menace> transports[.db] != transport[.db]
[02:29:52] <sahil> agreed on all coints.
[02:30:01] <sahil> counts*
[02:32:07] <roe_> I don't think the filename matters as long as it matches what is in your main.cf
[02:33:18] <menace> guess, what i wrote in main.cf...
[02:34:41] *** Jarrod has joined #postfix
[02:35:03] *** ming_zym has joined #postfix
[02:41:05] *** Juspion has joined #postfix
[02:44:01] <tokam_one> what does postfix do with the knowlede of my hostname?
[02:44:38] <roe_> tokam_one, depending on your setup, if you telnet to it on port 80 you should see
[02:46:04] <tokam_one> on port 80 i have a http server running?
[02:46:07] <tokam_one> apache
[02:46:44] <tokam_one> isn't it allowed to use the same hostname in my apache than in my postfix?
[02:48:03] *** Draecos has quit IRC
[02:48:30] <tokam_one> roe_, ..
[02:48:42] *** Jarrod_ has joined #postfix
[02:48:46] <roe_> sorry, port 25
[02:49:00] <roe_> my fault, I'm doing like 12 things at once here
[02:49:07] <sahil> you multitasker you.
[02:49:23] * roe_ bows his head in shame
[02:50:25] <tokam_one> roe_ and now? telnet localhost 25
[02:50:25] <tokam_one> Trying 127.0.0.1...
[02:50:25] <tokam_one> Connected to localhost.
[02:50:25] <tokam_one> Escape character is '^]'.
[02:50:38] *** menace has quit IRC
[02:50:41] <sahil> tokam_one: please do NOT paste that shit in here.
[02:50:47] <tokam_one> sry
[02:51:08] <roe_> sounds like postfix, either isn't listening on localhost or it isn't configured properly, try telneting to your other IP (if you have one)
[02:51:28] <sahil> uh, he is connected, so something is listening. clearly.
[02:51:54] <roe_> sahil, right but it should respond with a 220
[02:52:19] <tokam_one> why should it roe_ ?
[02:52:37] <roe_> tokam_one, how do you think smtp works?
[02:53:21] <tokam_one> same responce
[02:53:36] <roe_> ok, then it sounds like postfx isn't properly configured
[02:53:40] <tokam_one> i dont know roe_ :P
[02:53:40] <roe_> !basics
[02:53:41] <knoba> roe_: Error: "basics" is not a valid command.
[02:53:44] <roe_> !basic
[02:53:44] <knoba> roe_: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.
[02:53:51] <tokam_one> :D
[02:54:21] <tokam_one> i do that howto
[02:54:21] <tokam_one> http://www.gentoo.org/doc/en/virt-mail-howto.xml
[02:54:35] <tokam_one> but i am not clear about the right hostname settings
[02:54:57] <tokam_one> i dont know why postfix needs to know my hostnames and domain names and i want to know how real hosters do it?
[02:55:06] <tokam_one> how they realise vhots with postfix
[02:55:52] <roe_> while your enthusiasm is commendable, I suggest crawling before running
[02:56:56] <roe_> tokam_one, start with getting your local users to be able to send and receive mail before you jump into viritual setups, nothing you do will be a waste of time and very little if anything will ahve to be undone
[02:57:25] <tokam_one> ok
[02:57:39] <tokam_one> what to enter as domain name?
[02:57:40] <tokam_one> nothing?
[02:57:52] <tokam_one> or my dyn dns
[02:57:58] <roe_> the fqdn of the server
[02:58:12] <tokam_one> problem is, that i dont understand what it does after reading your comments in the example config
[02:58:31] <roe_> ?
[02:59:53] <tokam_one> localhost in my case?
[02:59:55] <tokam_one> ?
[03:00:16] <roe_> well that is your hostname
[03:00:46] <tokam_one> my dynamic dns i can enter as mydomain?
[03:01:00] <roe_> while that will work, nothing is stopping you from making up a domain, for instance foo.lan
[03:01:12] <tokam_one> http://de.gentoo-wiki.com/FQDN_einstellen
[03:01:21] <tokam_one> i found a tutorial about it
[03:02:09] <sahil> tokam_one: dude, are you running a postfix server on your home unix/linux machine
[03:02:35] <tokam_one> yes
[03:02:40] <sahil> just a dyndns name, point to your ip, and tell postfix that is your fqdn.
[03:03:01] <sahil> but note well that MTAs coming from "residential" networks do not get treated well on the big bad internet.
[03:03:25] <sahil> so if this is for learning/experimentation purposes, have fun; otherwise, do reconsider.
[03:04:33] <tokam_one> i hava a dyndns name
[03:05:09] <tokam_one> yes
[03:05:24] *** Jarrod has quit IRC
[03:05:40] <tokam_one> i read about a trick using the smtp of a popular mail service with my own postfix to manage that problem sahil
[03:05:50] <tokam_one> but my aim now is only to recieve mails
[03:06:04] <tokam_one> i have procmail and postfix
[03:06:22] <tokam_one> i want to be able to login there with javamail over smtp and pop3
[03:10:30] <sahil> you don't 'login' to read email over smtp.
[03:11:01] <sahil> for that you will need a pop3 or imap cient that connects to a pop3 or imap server on the machine which stores your email. that discussion is beyond the scope of #postfix. first get mail delivery working.
[03:11:05] <sahil> !basic
[03:11:06] <knoba> sahil: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.
[03:11:24] <erikh> i can't find anything on google, i've rebuilt the system package with ldap support and checked the linking by hand, can anyone tell me why postmap can read from my ldap maps but the daemons can't?
[03:11:31] <sahil> read the documentation at the URL above to get started and gain some familiarity with how postfix works; once you can prove you've done a little bit of that, it will be easier to get help here.
[03:11:33] <erikh> btw, this is all working in a production environment
[03:11:35] <erikh> both are 2.5.1
[03:11:55] <sahil> erikh: what daemons?
[03:12:02] <erikh> trivial-rewrite, cleanup
[03:12:32] <erikh> sahil: they're having trouble binding
[03:12:36] <erikh> (to ldap)
[03:13:13] <erikh> they say the server isn't there, but i have slapd running in very verbose mode and it's not even showing a connection attempt
[03:13:21] <erikh> i've tried ldapi and ldap over localhost
[03:13:39] <sahil> postconf -n?
[03:15:43] <erikh> http://rafb.net/p/bQhtXj82.html
[03:15:49] <erikh> i'm quite aware there are other issues with this configuration
[03:16:21] <erikh> but this is long before the delivery process
[03:16:58] <sahil> ok can you also post the error excerpt from your log?
[03:17:06] <erikh> yeah, one second
[03:17:10] <erikh> trying to balance postfix and dinner :)
[03:17:15] <sahil> :)
[03:18:39] <erikh> http://rafb.net/p/OPlPOP92.html
[03:20:38] <sahil> and can you also show me contents of one of the ldap cf's?
[03:20:43] <erikh> yeah.
[03:20:54] <sahil> heh, i'm not used to seeing ldap:<something> when <something> isn't full path to the ldap file! :)
[03:20:56] <erikh> they're actually done old-style
[03:21:14] <erikh> ldapalias_result_attribute maildrop f.e.
[03:21:46] *** hever has quit IRC
[03:22:11] <erikh> http://rafb.net/p/nlzszR24.html
[03:22:26] <erikh> lmk if you need the ldapalias map as well
[03:22:38] * erikh chews quickly
[03:27:34] <sahil> hm, i have to run too and don't see anything overtly off. does your working server have the same mailbox_bind_dn parameter?
[03:29:27] <erikh> yessir
[03:29:42] <erikh> and courier is running fine on this new setup, which makes me discount the ldap client libs as the issue
[03:29:46] <erikh> (not to mention postmap)
[03:30:12] <sahil> yeah, the postmap is annoying isn't it? the fact that _it_ works!
[03:30:19] <erikh> heh
[03:30:39] <erikh> yeah, it does frustrate me when half the system works and the other half doesn't
[03:30:48] <erikh> esp. when I can't seem to find the disconnection between the two
[03:31:03] <erikh> the only thing I can think of is the chroot, but that couldn't affect network
[03:31:57] <sahil> um
[03:31:59] <sahil> are you in a chroot?!
[03:32:05] <erikh> postfix is
[03:32:18] <sahil> can you take it out of the chroot and try?
[03:32:22] <erikh> well, postfix manages the chroot in /var/spool/postfix like it normally does
[03:32:46] <erikh> well I can try, i have no idea how to disable it though.
[03:32:52] <sahil> in master.cf
[03:33:10] <erikh> aha
[03:33:36] *** Juspion has quit IRC
[03:34:07] <erikh> well holy mother of shit
[03:34:22] <erikh> sahil: you sir/madam, are awesome
[03:35:02] <erikh> *why* on earth would the chroot affect localhost network communication?
[03:35:21] <sahil> could be a variety of things that clean or trivial-rewrite need to access that are not found in the chroot.
[03:35:30] <sahil> you should find out... are you familiar with gdb?
[03:35:40] <sahil> s/clean/cleanup/
[03:35:52] <erikh> yes
[03:35:53] <sahil> c
[03:35:57] <erikh> or I could just strace it, no?
[03:35:59] <sahil> woops, sorry about that.
[03:36:19] <sahil> sure, but if you follow the instructions in DEBUG_README to attach gdb to the process causing the error, you might find where it's failing.
[03:36:34] <erikh> ah, I will look
[03:36:36] <sahil> perhaps you could also turn up the loglevel of postfix itself before going the gdb route.
[03:36:48] <erikh> although, now that I know the distributed package isn't the issue, I might go back to that
[03:37:02] <erikh> so it would be good to find out, but I would be stuck in the current situation.
[03:37:33] <erikh> yeah, I will investigate
[03:37:47] <erikh> thank you, *very* much. I'll get back to you if I find anything of note
[03:37:49] <sahil> no if you find out, you can perhaps correct.
[03:38:02] <erikh> eh, the last thing I want to do is track more packages :)
[03:38:09] <sahil> i'm not sure why you'd even run postfix in a chroot. it's quite secure by itself you know. :)
[03:38:14] <sahil> haha, true.
[03:38:16] <sahil> what OS is this?
[03:38:22] <erikh> arch linux
[03:38:32] <erikh> which is treating me great for most things
[03:38:56] <sahil> gotcha, which distro?
[03:39:05] <erikh> the packaging is unbelievably simple, which makes it much easier to manage the system.... this is the first real problem
[03:39:10] <erikh> arch is the distribution
[03:39:13] <erikh> www.archlinux.org
[03:39:16] <sahil> oh *arch*.
[03:39:19] <sahil> got it got it.
[03:42:57] *** pickcoder has joined #postfix
[03:46:10] *** WinsBandit has joined #postfix
[03:46:24] *** WinsBandit has quit IRC
[03:48:02] *** WinsBandit has joined #postfix
[03:58:29] <WinsBandit> Is anyone running postfix/clamav/spamassasin on a server running behind endian firewall, that has clamav and spamassaasin running on it?
[04:01:44] <WinsBandit> Guess not. Bye! :-)
[04:01:48] *** WinsBandit has quit IRC
[04:02:02] <sahil> nice, he waited a total of 3 mins. stud.
[04:02:13] <sahil> and *endian*?! :) pfSense beyotch.
[04:07:40] <tokam_one> does that line in /etc/hosts make sence?
[04:07:44] <tokam_one> to set up my fqdn
[04:07:49] <tokam_one> 62.53.237.6 tokam.marburg.homeftp.org marburg.homeftp.org
[04:07:53] <tokam_one> the ip is my dns
[04:08:03] <tokam_one> marburg.homeftp.org my dnydns
[04:08:06] <tokam_one> tokam my hostname
[04:08:18] <erikh> tokam_one: i'm just gonna be brutally honest
[04:08:19] <Landon> you shouldnt need that in /etc/hosts if you already registered it in dyndns
[04:08:52] <erikh> you need to learn a little more about your unix system before you make your life harder by trying to configure something that requires you to know what you don't
[04:09:03] <sahil> tokam_one: don't take this the wrong way, but you should not be running postfix. first learn your unix basics (as indicated in the topic), and work your way up.
[04:09:25] <erikh> very well put
[04:09:41] <sahil> erikh: not just that, i'm afraid of *our* life becoming harder if a shoddy setup leads to more spam-spewing open relays. :)
[04:09:51] <erikh> heh, yes.
[04:10:00] <erikh> hwoever the core issue is that to teach you postfix, we'd have to teach you unix
[04:10:08] <sahil> *nod*
[04:10:12] <erikh> solve problem b and most people will be happy helping you with problem a
[04:10:19] <roe_> one more open relay is like addng a cup of water to the ocean
[04:10:52] <tokam_one> damn -.-
[04:11:03] <tokam_one> than tell me if that basic line is write or wrong
[04:11:08] <tokam_one> or where to learn the basics
[04:11:22] <tokam_one> i guess i am working on the basics now, not on postfix dont i?
[04:11:42] <sahil> roe_: thanks for the non sequitur.
[04:11:47] *** Samus_Aran has joined #Postfix
[04:11:56] <roe_> sahil, anytime :)
[04:12:09] <Samus_Aran> hello. somehow I have blocked local mail from getting through. when I try to send mail to "user" or "user@localhost", it bounces back
[04:12:11] <sahil> when you have several hundred million "one more" zombies, those cups start looking rather, ahem, voluminous in aggregate.
[04:12:19] <Samus_Aran> can anyone suggest what I need to do to fix that issue ?
[04:12:36] <sahil> Samus_Aran: can you post the excerpt from your log and postconf -n? and can you read the topic?
[04:12:53] <roe_> Samus_Aran, I'm afraid "bouncing back" is not really helpful
[04:13:38] <Samus_Aran> User unknown in virtual alias table
[04:13:51] <sahil> ok, don't listen.
[04:13:58] * sahil wanders off to watch tv.
[04:14:24] <Samus_Aran> sahil: I was answering roe_'s question. I'm doing what you asked at the same time
[04:16:22] <tshine> hmm, one more open relay is like adding a bucket of pee to a swimming pool IMHO
[04:16:40] <roe_> makes it warmer?
[04:16:54] <erikh> makes my disks warmer
[04:16:55] <tshine> roe_: but not cozier :)
[04:17:12] *** m1n3s6 has joined #postfix
[04:17:57] <Samus_Aran> sahil: http://rafb.net/p/KU0jvX12.html << postconf -n output
[04:18:33] <erikh> it's aliiiiive
[04:18:41] <erikh> sahil: thanks again.
[04:18:49] <tokam_one> watch tv.
[04:18:49] <tokam_one> <Samus_Aran> sahil: I was answering roe_'s question. I'm doing what you asked at the same time
[04:18:55] <tokam_one> here i got that damn line
[04:19:03] <tokam_one> upps
[04:19:09] <erikh> i knwo he's watching tv
[04:19:09] <tokam_one> http://de.gentoo-wiki.com/FQDN_einstellen
[04:19:13] <erikh> he can read my thanks later
[04:19:14] <tokam_one> that i wanted t say
[04:19:21] <tokam_one> dont know where i got Watch tv
[04:19:21] <tokam_one> :D
[04:19:25] <erikh> oh, heh
[04:20:36] <Samus_Aran> roe_: do you have any idea how I might get it working again ?
[04:20:53] <tokam_one> http://tokam.marburg.homeftp.org/
[04:20:55] <tokam_one> works now
[04:21:10] *** c00l2sv has quit IRC
[04:21:11] <tokam_one> but every nick,mydomain works
[04:21:29] <tokam_one> please help me how to set up my fqed
[04:21:39] <tokam_one> fqdn
[04:21:40] <tokam_one> http://de.gentoo-wiki.com/FQDN_einstellen
[04:21:52] <tokam_one> that seems to be shit, because they dont use a dyndns
[04:21:53] <Samus_Aran> figured it out. I needed to add $mydomain to the list as mail.domainone.com was the only one listed, not domainone.com by itself.
[04:22:12] <Samus_Aran> thank you.
[04:22:12] *** Samus_Aran has left #Postfix
[04:22:18] <Landon> tokam_one: in my experience with dyndns you wont need to set anything locally
[04:22:28] <Landon> other than saying you'll be accepting mail addressed to that domain
[04:22:29] <tokam_one> ok lol
[04:22:37] <tokam_one> and i made all the stress here haha
[04:22:38] <tokam_one> :D
[04:23:08] <erikh> also note that pretty much any mail sent through a dynamic IP is going to be rejected by a significant number of mailers out there just because of where it's coming from
[04:23:09] <Landon> you might want to remove the line from /etc/hosts as well that you added, it might gum up the works later when you try to figure out why say your remote computer wont send, but your local will
[04:24:27] <tokam_one> ^^ i allready did lol
[04:24:29] <tokam_one> it was bullshit
[04:24:30] <tokam_one> :D
[04:24:53] <tokam_one> erikh, i use a mail proxy
[04:25:00] <tokam_one> erikh, i go throw spamgourmet.com
[04:25:11] <roe_> through?
[04:25:15] <tokam_one> and it will send mail to my dyndns
[04:25:26] <tokam_one> roe_, i use it for antispam
[04:25:48] * roe_ was merely commenting on the fact that I doubt tokam_one throws spamgourmet.com
[04:25:59] <roe_> :P
[04:27:04] <tokam_one> :)
[04:27:43] <tokam_one> how do you mean that?
[04:27:45] <tokam_one> i am a german :D
[04:27:46] <erikh> tokam_one: ah, i just wanted to make sure you were aware before you put so much effort in :)
[04:27:57] <roe_> tokam_one, nm, glad you got it working
[04:28:52] <tokam_one> thx
[04:29:04] <tokam_one> spamgourmet works allready
[04:29:26] <erikh> thanks again, here's hoping I don't have to come back soon :)
[04:29:29] *** erikh has left #postfix
[04:29:35] <tokam_one> i tested it
[04:31:33] <tokam_one> http://xkcd.com/456/
[04:32:46] <tshine> tokam_one: reminds me of an old but good one: http://www.youtube.com/watch?v=BcQ7RkyBoBc
[04:33:33] <tokam_one> if you have nice vidz post them to me in qry we need some for frogged.de
[04:34:42] <tokam_one> lol funny
[04:34:43] <tokam_one> :D
[04:41:28] <tokam_one> lol funny desktop
[04:41:40] <tokam_one> but a fakestorry right?
[04:43:19] *** tombar_ has quit IRC
[04:43:38] <tshine> tokam_one: yea but I've seen similar things in my IT career. I am the CTO for my company and have to go out and deal with people like that. You'd be surprised at some of the stories I could tell
[04:44:10] <tokam_one> and which game do you prefer to play during work
[04:44:10] <tokam_one> :D
[04:44:34] <tshine> tokam_one: the "appease the client and move on" game. After work I prefer games like Myst though :)
[04:45:32] <tshine> tokam_one: I have been to workstations that had like 10 tabs of porn, more than one instance of minesweeper/solitare and anything else that doesn't have to do with their job
[04:45:50] <tokam_one> whats this?
[04:45:51] <tokam_one> mydestination = $myhostname, localhost.$mydomain $mydomain
[04:46:14] <tokam_one> tshine, these bastards have to be fired :D
[04:46:14] <tokam_one> lol
[04:46:15] *** Motoko-chan has joined #postfix
[04:46:16] <sahil> is that youtube url nsfw?
[04:46:32] <tokam_one> what is nsfw?
[04:46:41] <sahil> one of the co-admins here is a big by-the-rules dork.
[04:46:44] <sahil> notsafeforwork
[04:48:44] <tokam_one> what do enter for mydestination?
[04:49:00] <pickcoder> !mydestination
[04:49:01] <knoba> pickcoder: "mydestination" : a configuration parameter in the main.cf: The list of domains that Postfix delivers via the $local_transport mail delivery transport. By default, mail is given to the Postfix local(8) delivery agent that looks up all recipients in /etc/passwd and /etc/aliases, or their equivalents.
[04:49:12] <tokam_one> let it like it is
[04:49:18] <tokam_one> or replace the variables
[04:49:46] <tokam_one> ok
[04:49:46] <tokam_one> thx
[04:49:51] <sahil> hahaha
[04:49:53] <sahil> this is hilarious
[04:50:09] <tokam_one> :D
[04:50:18] <tokam_one> it was from the example cfg
[04:50:36] <tokam_one> i decided to let the variables there
[04:54:05] <tokam_one> Next, edit /etc/mail/aliases to add your local aliases. There should at least be an alias for root like: root: your at email dot address.
[04:54:32] <tokam_one> http://rafb.net/p/Ak1aQO44.html
[04:54:35] <tokam_one> is that a correct file?
[04:55:45] <sahil> omfg
[04:55:48] <sahil> i'm DYING here
[04:55:49] <sahil> hahahahaha
[04:55:50] *** b-04 has quit IRC
[04:55:53] <sahil> this is phenomenal
[04:55:57] <sahil> 'you can't arrange it by penis'
[04:56:03] <Landon> heh
[04:56:09] <tokam_one> :D
[04:56:11] <sahil> theneb: great, great find.
[04:56:11] <Landon> caught that one just last week
[04:56:14] <tokam_one> i stoped the server now
[04:56:15] <Landon> sadly its not too far out of place :(
[04:56:35] <sahil> skype works great it seems.
[04:57:13] <Landon> skype is <3
[04:57:33] <sahil> do you guys use it just to talk to other skypers or is the non-skype functionality decent? there are SO many services like it now though so hard to tell.
[04:57:35] <tshine> sahil: heh, made me d/l skype
[04:57:36] *** plee has joined #postfix
[04:57:40] <tokam_one> was it a securety lag to post that file in here now?
[04:57:43] <sahil> tshine: me too! :)
[04:57:44] <tokam_one> with the unset server?
[04:58:03] <Landon> sahil: skype is pretty much *the* service for computer-> phone from what I've seen
[04:58:11] <Landon> it works great
[04:58:25] <tokam_one> ahh you talking about the video
[04:58:25] <tokam_one> :D
[04:58:33] <tokam_one> Landon, what about my alisases file?
[04:58:34] <Landon> rates for calling international cell phones arent that great though
[04:58:36] <tokam_one> is it correct
[04:58:45] <Landon> tokam_one: huh?
[04:58:49] <tokam_one> :)
[04:59:22] <tshine> tokam_one: yea. I saw the vid and was like "wow, I need to d/l skype and check it out". Would work great with my Mac
[04:59:57] <tokam_one> :)
[05:00:07] <tokam_one> if you want to download the video use jdownloader
[05:00:33] * tshine is a chronic procrastinator
[05:04:02] <Landon> heh @ comments
[05:04:23] <Landon> some armchair jockey says hes using windows server or some heavily customized linux as his operating system
[05:04:31] <Motoko-chan> Wow.
[05:04:36] <Motoko-chan> Because those are hard to tell apart.
[05:04:52] <Landon> no mention of mac at all :P
[05:05:05] <sahil> well, he's using osx on the video.
[05:05:10] <sahil> that has been my desktop machine for years.
[05:05:14] <tshine> sahil: nods
[05:06:01] <tshine> windows server --
[05:06:57] *** harlan has joined #postfix
[05:07:18] <harlan> Is there an easy way to handle more than one recipient_delimiter?
[05:07:38] <Landon> something wrong with commas?
[05:07:53] <harlan> I was not aware that a comma would do it.
[05:08:04] <Landon> as delimiters
[05:08:24] <sahil> harlan: you cannot have more than one. just use '+' or '-' please, thanks.
[05:08:30] <sahil> :P
[05:08:36] <Landon> ah, I fail at guessing
[05:08:47] <harlan> I know I can use one. Sadly, I have a case where I could really use 2.
[05:09:40] <harlan> I will see if I can find a recipient rewrite rule that will translate the "other" delimiter to the primary.
[05:18:08] *** ming_zym has quit IRC
[05:24:38] <harlan> So might I be able to do that regexp rewriting in the virtual table?
[05:30:14] <tokam_one> http://rafb.net/p/JWyq3n74.html
[05:30:35] <tokam_one> did i made many mistakes Landon :D
[05:40:40] <tokam_one> gn8 i have to go now
[05:40:42] <tokam_one> thx for help
[05:42:42] *** tokam_one has quit IRC
[05:43:28] *** magyar has quit IRC
[05:55:38] *** magyar has joined #postfix
[06:00:54] *** maxquerry has joined #postfix
[06:02:14] *** magyar has quit IRC
[06:13:31] *** _Driver_ has joined #postfix
[06:30:36] *** pickcoder has quit IRC
[06:30:48] *** jsoft has joined #postfix
[06:31:02] <jsoft> Can anyone suggest a web front end for a single domain mail server?
[06:31:08] <jsoft> Ideally nice and secure and simple
[06:31:22] <js_> what purpose would it serve?
[06:32:02] <jsoft> To add, modify, and delete users, aliases, and vacation auto replys
[06:32:10] <jsoft> and forwarding and things like that.
[06:32:34] <Landon> does postfixadmin do what you want?
[06:34:30] <jsoft> Yeah it would, I know about it, but it seems to be more focused on multiple domains.
[06:35:08] <Landon> better than looking for a multiple domain frontend and finding a single domain one
[06:35:09] <Landon> :)
[06:35:50] <jsoft> :p
[06:35:56] <jsoft> it might have to do
[06:37:51] <Landon> I think I might set it up myselfnow
[06:56:19] *** Jarrod_ has quit IRC
[07:00:50] *** Jarrod has joined #postfix
[07:01:32] *** ming_zym has joined #postfix
[07:23:46] *** dinar has left #postfix
[07:28:49] *** hever has joined #postfix
[07:37:16] *** saurabhb has joined #postfix
[07:47:13] *** Codemaster has joined #postfix
[07:54:33] *** CodemasterMM has quit IRC
[07:56:42] *** Zeit|awy_ has joined #postfix
[08:02:45] *** Zeit|awy has quit IRC
[08:06:00] *** phnord has joined #postfix
[08:07:09] *** rizi has joined #postfix
[08:13:06] *** Jarrod has quit IRC
[08:14:58] *** pulsar has joined #postfix
[08:17:06] *** dotplus has quit IRC
[08:31:13] *** sophokles has joined #postfix
[08:35:06] *** bhagat has joined #postfix
[08:38:56] *** maxquerry is now known as margs
[08:45:47] *** [pyro] has joined #postfix
[08:55:38] *** F|oFF has quit IRC
[08:56:38] *** rizi_ has joined #postfix
[08:56:55] *** F|oFF has joined #postfix
[08:56:56] *** [pyro] has left #postfix
[08:58:16] *** rizi has quit IRC
[09:03:13] *** j_s has joined #postfix
[09:03:58] *** kRocKodile has joined #postfix
[09:07:13] *** saurabhb has quit IRC
[09:11:30] *** jsoft_ has joined #postfix
[09:19:46] *** ming_zym has quit IRC
[09:22:23] *** Motoko-chan has quit IRC
[09:22:53] *** ming_zym has joined #postfix
[09:24:25] *** jsoft has quit IRC
[09:24:55] *** saurabhb has joined #postfix
[09:36:12] *** alienbrain has joined #postfix
[09:39:52] *** bhagat has quit IRC
[09:45:36] *** sophokles has quit IRC
[09:47:41] *** hever has quit IRC
[09:48:24] *** sophokles has joined #postfix
[09:51:06] *** F6F has joined #postfix
[09:56:20] *** bhagat has joined #postfix
[09:58:42] *** tore_ has quit IRC
[09:58:46] *** tore has joined #postfix
[09:59:20] *** war9407 has joined #postfix
[10:07:02] *** senzou has quit IRC
[10:08:56] *** syneus has joined #postfix
[10:09:44] *** rootsvr has joined #postfix
[10:11:17] *** Jense_ has joined #postfix
[10:11:34] *** Jense_ is now known as Jense__
[10:12:39] *** Jense has quit IRC
[10:16:30] *** groove has joined #postfix
[10:16:51] <groove> hi, can anybody tell me why the master process will spawn off showq periodically?
[10:17:05] <groove> i have it running on a heavily loaded server and it is just causing problems
[10:20:40] *** groove has left #postfix
[10:22:20] *** Zblakany has joined #postfix
[10:24:23] *** Nathariel has joined #postfix
[10:33:14] *** Draecos has joined #postfix
[10:43:34] *** amrit is now known as amrit|zzz
[10:51:41] *** Jense__ is now known as Jense
[10:53:06] *** Muisje has joined #postfix
[10:57:27] *** mark-use has joined #postfix
[10:59:16] *** Draecos has quit IRC
[10:59:33] *** jdrake has quit IRC
[10:59:35] *** Draecos has joined #postfix
[11:02:31] *** kRocKodile has quit IRC
[11:17:04] *** rootsvr has quit IRC
[11:21:50] *** _Driver_ has quit IRC
[11:24:28] *** vicente has joined #postfix
[11:24:32] <vicente> Hi
[11:26:19] <vicente> I'm newbie. A friend is trying to setup a postfix server. It's working almost fully. The only issue is that the webmaster account can not receive emails. The user account exist. It is this behaviour correct?
[11:27:55] <vicente> And the other accounts work fine, the problem is just with webmaster account.
[11:28:00] <sysmonk> vicente: define 'can not receive emails'
[11:28:10] <sysmonk> what error do you get, what's in the logs
[11:28:27] <vicente> give me a second. Go to ask him
[11:30:07] *** mark-use has quit IRC
[11:33:16] <vicente> While he searchs for the log... I can tell you that the email is bounced to the sender with a response like this one: Diagnostic-Code: smtp; 550 That e-mail address does not exist (#5.7.1)
[11:34:13] <sysmonk> not really a postfix error
[11:34:23] <sysmonk> give me the REAL error, not what your exchange server says
[11:34:41] <vicente> ok, just a sec
[11:34:59] *** mark-use has joined #postfix
[11:35:48] *** mark-use has quit IRC
[11:42:39] <vicente> It's solved...i guess he didn't apply changes correctly. Thanks anyway
[11:42:46] <vicente> See you
[11:43:17] *** vicente has quit IRC
[12:01:36] *** jsoft_ has quit IRC
[12:14:41] *** cedric3 has quit IRC
[12:17:47] *** Pazzo has joined #postfix
[12:21:55] *** Muisje has quit IRC
[12:22:21] *** Draecos_ has joined #postfix
[12:22:49] *** saurabhb has quit IRC
[12:27:59] *** AcTiVaTe has joined #postfix
[12:32:45] *** Draecos has quit IRC
[12:35:25] *** mark-use has joined #postfix
[12:41:47] *** Muisje has joined #postfix
[12:44:17] *** rootsvr has joined #postfix
[12:45:17] *** Zblakany has quit IRC
[12:48:31] *** cpm has joined #postfix
[12:50:31] *** alienbrain_ has joined #postfix
[12:55:49] *** alienbrain has quit IRC
[12:57:47] *** ThEcHaCaL has quit IRC
[13:00:01] *** margs has quit IRC
[13:02:51] *** m1n3s6 has quit IRC
[13:05:56] *** is_null has left #postfix
[13:15:59] *** mark-use_ has joined #postfix
[13:24:06] *** internat1 has joined #postfix
[13:24:17] *** Internat has quit IRC
[13:24:49] *** Jarrod has joined #postfix
[13:25:11] *** mark-use has quit IRC
[13:25:22] *** Jarrod has quit IRC
[13:31:18] *** dotplus has joined #postfix
[13:33:25] *** alienbrain__ has joined #postfix
[13:36:09] *** alienbrain_ has quit IRC
[13:43:23] *** mark-use_ is now known as mark-use
[13:44:14] *** ranzes has joined #postfix
[13:50:51] *** ming_zym has quit IRC
[13:57:27] *** quickdev has joined #postfix
[13:57:28] <quickdev> Hello
[13:58:59] <quickdev> I installed sasauthd with pam's mysql authentication and it works, but I've got one problem. Postfix sends the part before the @, for example only "info" instead of "info at domain dot com". How do I force the latter one?
[14:00:01] *** toytoy has quit IRC
[14:01:36] <sysmonk> quickdev: man saslauthd
[14:02:02] <quickdev> sysmonk, saslauthd issue or postfix issue? ;)
[14:02:23] <f3ew> quickdev saslauths
[14:02:29] <f3ew> saslauthd -r
[14:02:34] <sysmonk> quickdev: saslauthd
[14:02:37] <sysmonk> f3ew: ;/
[14:03:03] <sysmonk> f3ew: i wanted him to read it himself
[14:04:23] <quickdev> sysmonk, I just read it. Thanks to both :) It's working.
[14:12:18] *** kenny33 has joined #postfix
[14:12:47] *** stegbth has joined #postfix
[14:12:56] <stegbth> hello everybody
[14:13:40] <stegbth> i want to reject all email-adresses from a top-level domain?
[14:14:06] <stegbth> smtpd_sender_restrictions =
[14:14:06] <stegbth> check_sender_access hash:/etc/postfix/reject-sender
[14:17:06] <f3ew> stegbth should work
[14:18:18] <stegbth> in reject-sender i have : .tld REJECT
[14:19:16] <stegbth> but if the sender is from .tld it arrives the mailbox also
[14:19:35] <f3ew> Hmmmm
[14:19:52] * f3ew would add the restriction to smtpd_recipient_restrictions
[14:19:55] *** quickdev has left #postfix
[14:21:58] <kenny33> hello, i've moved a postfix server from a server to another with virtual mail, so i've configured my new server, i've copied the /home/vmail folder (where all my domains are in subfolder with users in subs etc) all the mails in inbox are ok, but no way to read in subfolders of the mailbox "does not exist.." i don't find where subdirectories structure is the only thing i found is the list of subscribed ones in /domain/user/courierimapsubsc
[14:21:58] <kenny33> ribed ...
[14:22:17] <kenny33> mmm sorry for the long explanation :s
[14:22:21] *** madrescher has joined #postfix
[14:24:08] <f3ew> kenny33, folders in courier are just maildirs
[14:25:41] *** bhagat has quit IRC
[14:25:53] *** cilly has joined #postfix
[14:28:00] <kenny33> f3ew hum i think i don't understand :s : where the subdirs of the mailbox are written ?
[14:28:52] <f3ew> same place as the maildir
[14:29:02] <f3ew> as a dot-directory
[14:29:10] <f3ew> so foo is a maildir
[14:29:17] <f3ew> .foo.folder is foo/folder
[14:31:20] <kenny33> so if I copy all the files in the vmail folder I must retrive all subfolders of the mailbox no ?
[14:34:29] <kenny33> mmm ok i'm stupid :s
[14:34:51] <kenny33> i've synced via lftp but with the . the files are hidden
[14:35:05] <kenny33> thank you very much f3ew
[14:38:01] <f3ew> kenny33 rsync is your frine
[14:38:06] <f3ew> friend
[14:38:23] <kenny33> yes thank you ;)
[14:47:18] *** lunaphyte_ has quit IRC
[14:49:30] *** madrescher has quit IRC
[14:50:12] *** madrescher has joined #postfix
[14:51:51] *** war9407 has quit IRC
[14:52:19] *** war9407 has joined #postfix
[14:53:39] *** lunaphyte_ has joined #postfix
[14:53:41] *** war9407 has quit IRC
[14:53:58] *** war9407 has joined #postfix
[14:55:48] *** rnix has joined #postfix
[14:56:48] <rnix> hi. is it possible to chain virtual and local transport for the same domain in postfix? e.g. postfix first looks up the virtual mailbox table, if no mailbos found there, use the aliases file?
[14:57:17] <rnix> finally reject if both failed
[15:00:53] *** milligan has joined #postfix
[15:01:45] <milligan> An SPF record defines what machines are allowed to send email in the domains name, right? So if I define a TXT record, and say "v=spf1 A 192.168.0.1" then 192.168.0.1 is allowed to send email from domain.tld?
[15:02:26] <Dominian> technically, yes..
[15:02:30] <Dominian> but that would be a bad idea
[15:02:45] <Dominian> Think about how many people there are in the world.
[15:03:17] <milligan> What do you mean?
[15:06:03] <f3ew> rnix no
[15:07:39] <rnix> f3ew: already found something here -> http://www.irbs.net/internet/postfix/0411/1251.html -> seem to be possible.
[15:09:43] *** Muisje has quit IRC
[15:12:39] <Dominian> milligan: How many people in the world have the 192.168.0.x subnet?
[15:13:15] <milligan> Dominian, yes.. the address was an example.
[15:13:16] <milligan> :)
[15:13:51] <cpm> Dominian, about 1 out of 3 it seems
[15:13:52] <cpm> :)
[15:14:08] <Dominian> cpm: hehe
[15:14:15] <Dominian> milligan: ok.. then yes that's how it would work ;)
[15:16:20] *** Tinozaure has quit IRC
[15:16:41] *** Tinozaure has joined #postfix
[15:17:17] *** TTilus has quit IRC
[15:17:24] *** TTilus has joined #postfix
[15:27:46] *** master_of_master has quit IRC
[15:29:07] *** syneus has quit IRC
[15:30:40] *** vice-versa has joined #postfix
[15:39:32] *** jeeter522 has joined #postfix
[15:39:37] *** milligan has quit IRC
[15:39:39] *** jellis-real has joined #postfix
[15:39:47] *** syneus has joined #postfix
[15:40:31] <jeeter522> if i have postfix setup to forward all mail to another server - how do i also tell it to deliver local as well as forward?
[15:41:33] *** madrescher has quit IRC
[15:42:01] *** milligan has joined #postfix
[15:42:09] *** madrescher has joined #postfix
[15:44:12] *** jeeter522 has quit IRC
[15:47:02] <roe_> !mydomain
[15:47:03] <knoba> roe_: "mydomain" : a configuration parameter in the main.cf: The internet domain name of this mail system. The default is to use $myhostname minus the first component. $mydomain is used as a default value for many other configuration parameters.
[15:47:24] <roe_> mydestination!
[15:47:28] <roe_> doh
[15:47:32] <roe_> !mydestination
[15:47:33] <knoba> roe_: "mydestination" : a configuration parameter in the main.cf: The list of domains that Postfix delivers via the $local_transport mail delivery transport. By default, mail is given to the Postfix local(8) delivery agent that looks up all recipients in /etc/passwd and /etc/aliases, or their equivalents.
[15:48:19] *** diabollo is now known as diabollo_
[15:50:57] *** cilly has quit IRC
[15:53:47] *** cilly has joined #postfix
[16:01:35] *** JoaoCarneiro has joined #postfix
[16:22:52] *** JoaoCarneiro has quit IRC
[16:24:16] *** madrescher has quit IRC
[16:24:27] *** Nathariel has quit IRC
[16:31:30] *** Tykling has joined #postfix
[16:38:56] *** ming_zym has joined #postfix
[16:40:43] *** Haris1 has joined #postfix
[16:40:46] <Haris1> Hello people
[16:41:03] <Haris1> I underestimate the problem :|
[16:41:03] <Haris1> Aug 4 16:01:49 mc postfix/qmgr[8920]: 9D4971E18C5F: to=<jdayner at juno dot com>, relay=none, delay=400221, delays=400204/17/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
[16:46:51] <Dominian> !transport
[16:46:52] <knoba> Dominian: "transport" : transport(5) The optional transport(5) table specifies a mapping from email addresses to message delivery transports and next- hop destinations. Look at: http://www.postfix.org/transport.5.html
[16:47:54] <Haris1> Ths is for remote domains
[16:48:03] <Haris1> I have a table transport containing locally hosted domains
[16:48:16] <Haris1> relaying is the issue
[16:48:54] <Haris1> if relay_domains = nothing as in http://www.postfix.org/STANDARD_CONFIGURATION_README.html#stand_alone
[16:49:00] <Haris1> would postfix relay?
[16:49:27] *** pickcoder has joined #postfix
[16:50:19] <Haris1> !relay_recipient_maps
[16:50:20] <knoba> Haris1: "relay_recipient_maps" : a configuration parameter in the main.cf: Optional lookup tables with all valid addresses in the domains that match $relay_domains. Specify @domain as a wild-card for domains that do not have a valid recipient list.
[16:51:48] <Haris1> I don't have the luxury of SMTP Auth on this box
[16:52:00] <Haris1> all locally hosted email accounts need to be allowed to send mail through it
[16:52:22] <Haris1> all email accounts, domains are in mysql db
[16:52:34] <Haris1> What do I need to configure to ensure relaying?
[16:52:41] <f3ew> Haris1, you relay either for a fixed ip (network), or for authenticated accounts.
[16:53:00] <f3ew> you relay _TO_ domains hosted locally (or relay to relay_domains)
[16:53:35] <Haris1> Is there any other criteria I can I use besides smtp auth for validating mail that is to be relayed
[16:54:50] *** rootsvr has quit IRC
[16:55:08] <Haris1> I have clamav/amavis set as content_filter
[16:55:15] <Haris1> I'm confident spam won't be relayed out
[16:55:25] <f3ew> no
[16:57:29] <Haris1> what can one do for clients who are not used to authenticated relay
[16:58:04] <cpm> get them used to it.
[16:58:30] <cpm> 'To better serve and protect you, , , blah blah blah'
[16:59:28] <Dominian> authentication for SMTP is common.. and if they users don't like it.. well.. you have to inform them its for their safety and security as much as it is for your own.
[17:05:52] *** madrescher has joined #postfix
[17:07:58] *** tshine has quit IRC
[17:10:14] <Haris1> passwords that are in database, in shape of password+salt, can those be used for smtp auth?
[17:10:45] <f3ew> yes
[17:11:04] <Haris1> Ok, I have approval to activate smtp auth. Still, I need to find a way without it. It was working before. There must be some way to get the same result via improvisation
[17:13:09] *** Draecos_ has quit IRC
[17:14:39] <Haris1> isn't relaying, just a matter of setting 1) myorigin, 2) mynetworks_style 3) mynetworks 4) mydestination 5) relay_domains ?
[17:15:54] <f3ew> yes
[17:17:01] <Haris1> damn, relayhost was not set
[17:17:01] *** madrescher has quit IRC
[17:17:06] <Haris1> I have set relayhost =
[17:17:16] <Haris1> I wonder if that'll enable relaying
[17:17:19] <Haris1> direct relaying, that is
[17:17:32] <Haris1> postfix is taking alot of time to restart
[17:18:22] <Haris1> at a load factor of 4 on a PIII, I shouldn't complain :p
[17:19:15] *** Pazzo has quit IRC
[17:19:35] <Haris1> Aug 4 16:40:49 mc postfix/smtp[13166]: D1AE51E3806C: to=<bunch at rushmore dot com>, relay=mx1.rushmore.com[69.73.24.50]:25, delay=391366, delays=391300/54/1/12, dsn=2.0.0, status=sent (250 ok 1217863164 qp 10789)
[17:19:38] <Haris1> aha!
[17:19:38] *** Pazzo has joined #postfix
[17:19:40] <Haris1> mail is going out
[17:19:41] <Haris1> hmm
[17:19:56] *** Pazzo has quit IRC
[17:20:17] *** Pazzo has joined #postfix
[17:20:44] *** phnord has quit IRC
[17:21:02] *** Pazzo has quit IRC
[17:21:15] *** Pazzo has joined #postfix
[17:23:51] <Haris1> I don't see much outgoing traffic
[17:26:01] <Haris1> the content_filter seems to be taking alot of time
[17:26:32] *** rootsvr has joined #postfix
[17:29:13] <Haris1> hmm
[17:29:17] <Haris1> the mail went to content_filter
[17:29:24] <Haris1> then didn't return back to this box
[17:29:25] <Haris1> :|
[17:29:31] <Haris1> outgoing mail that is
[17:30:20] <Haris1> Aug 4 18:06:25 msc3 amavis[4370]: (04370-10-6) Passed CLEAN, [xxx.xxx.xxx.x] [xxx.xxx.xxx.x] <emailID at domain dot com.mk> -> <hariskhan at gmail dot com>, Message-ID: <48971874.5020704 at domain dot com.mk>, mail_id: 65r4UQSfJw14, Hits: -1.399, size: 5062, queued_as: B312A1E08449, 2995 ms
[17:30:20] *** Draecos has joined #postfix
[17:30:55] *** rcsu has joined #postfix
[17:31:15] *** slackjr_ has joined #postfix
[17:35:40] *** PcPixel has joined #postfix
[17:36:13] *** Pazzo has quit IRC
[17:36:16] <PcPixel> I can't get a verified senders db file populated at all. I've checked file permissions, I've checked my configuration, and i even touched the file to make it pop into existance but its still zero bytes. can someone help?
[17:36:26] *** madrescher has joined #postfix
[17:38:19] <Haris1> has anyone had this problem?
[17:38:29] <Haris1> mail goes to amavis/clamav box but doesn't return to be sent out?
[17:38:59] <Haris1> Aug 4 16:43:05 mc postfix/lmtp[14120]: 8A2D51E0845D: to=<hariskhan at gmail dot com>, relay=xx.xxx.xx.xx[xx.xxx.xx.xx]:10024, conn_use=6, delay=1424, delays=1388/34/0/3, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B312A1E08449)
[17:39:04] <Haris1> after this, I see nothing
[17:39:18] <PcPixel> whats the other box say
[17:41:11] *** Draecos_ has joined #postfix
[17:41:12] <sysmonk> what's wrong with that? nothing!
[17:41:13] <Haris1> Aug 4 18:06:25 msc3 amavis[4370]: (04370-10-6) Passed CLEAN, [xxx.xxx.xxx.x] [xxx.xxx.xxx.x] <emailID at domain dot com.mk> -> <hariskhan at gmail dot com>, Message-ID: <48971874.5020704 at domain dot com.mk>, mail_id: 65r4UQSfJw14, Hits: -1.399, size: 5062, queued_as: B312A1E08449, 2995 ms
[17:41:13] <sysmonk> ;)
[17:41:18] <sysmonk> Haris1: box sent the mail to amavisd
[17:41:25] <sysmonk> amavisd accepted it and did something with it
[17:41:35] <sysmonk> then it sent it BACK to your box ( or other box )
[17:41:49] <sysmonk> and THAT OTHER box accepted it with ID B312A...
[17:41:59] <sysmonk> so, now, search B312A1... in your maillog
[17:42:46] <PcPixel> monk :)
[17:42:48] <Haris1> this is the latest -> Aug 4 16:59:59 mc postfix/qmgr[14341]: B312A1E08449: from=<emailid at domain dot com.mk>, size=5519, nrcpt=1 (queue active)
[17:44:52] <Haris1> hmm
[17:45:01] <Haris1> qmgr processID has changed, but still no send out
[17:45:14] <sysmonk> Haris1: don dong, mailq | grep B312
[17:45:22] <sysmonk> dong* :)
[17:45:33] <Haris1> no output
[17:45:41] <sysmonk> then re-grep your logs
[17:45:46] <Haris1> I did
[17:45:49] <sysmonk> grep B312A1E08449 /var/log/maillog
[17:45:52] <sysmonk> i don't believe you :)
[17:45:57] <PcPixel> monk: any thoughts as to why my verified senders db wont show up?
[17:46:12] <sysmonk> PcPixel: /me didn't read anything UPPPPP there
[17:46:25] <sysmonk> too much stuff to read, so i just start reading from the time i show up here :)
[17:46:35] <PcPixel> sysmonk ah :)
[17:46:37] <Haris1> http://pastebin.ca/1092594
[17:47:07] <PcPixel> sysmonk: i cant get a verified senders db created at all. permisions are correct, but the file never appears
[17:47:15] <PcPixel> i tried doing a "touch" to create the file
[17:47:18] <PcPixel> set its permissions right
[17:47:22] <PcPixel> and now it sits there at 0 bytes
[17:47:54] <PcPixel> even if i left the map pointing to the original lkocation it wont com eback
[17:48:49] <sysmonk> PcPixel: postconf -n
[17:48:54] <sysmonk> Haris1: something is wrong in your pastebin
[17:49:38] *** rootsvr has quit IRC
[17:49:58] <sysmonk> Haris1: your lmtp is after cleanup and before qmgr
[17:50:05] <sysmonk> and ... at all. lmtp?!
[17:50:13] <sysmonk> are you delivering to amavisd via lmtp?
[17:50:27] <PcPixel> heres mine: http://pastebin.com/d5433fc66
[17:51:00] <sysmonk> PcPixel: gosh, i hate your config
[17:51:09] <Haris1> ok, finally!
[17:51:14] <Haris1> Aug 4 17:08:39 mc postfix/qmgr[15946]: B312A1E08449: to=<hariskhan at gmail dot com>, relay=none, delay=1535, delays=1327/209/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
[17:51:19] <Haris1> mail transport unavailable
[17:51:27] <Haris1> that means, there's no transport set for remote domains
[17:51:49] <Haris1> relay_domains=$mydestination, which is default
[17:51:54] <Haris1> relayhost= is set
[17:52:07] <Haris1> smtpd_recipient_restrictions = permit_mynetworks, check_recipient_access mysql:/etc/postfix/mysql_check_sender_access.cf, check_sender_acce
[17:52:07] <Haris1> ss mysql:/etc/postfix/mysql_check_sender_access.cf, reject_unknown_sender_domain, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_invalid_hostname, reject
[17:52:09] <Haris1> is set
[17:52:36] <sysmonk> Haris1: how much time are you f*cking with this configuration? :)
[17:52:41] <sysmonk> few months? :)
[17:53:09] <Haris1> well
[17:53:17] <Haris1> a few times,
[17:53:47] <Haris1> should mynetworks be set to 127.0.0.0/8 or 127.0.0.1/8 ?
[17:54:08] <Haris1> both should work
[17:54:09] <Haris1> :|
[17:54:53] <sysmonk> PcPixel: my guess would be that you're not getting to reject_unverified_sender
[17:55:05] <sysmonk> and get an OK before you get to it
[17:55:14] <sysmonk> that way no sender verification is made at all
[17:55:19] <sysmonk> so, no database is created
[17:55:29] <PcPixel> very odd
[17:55:36] <PcPixel> well wait
[17:55:50] <PcPixel> so wait, if an OK comes back from any of the checks in the list
[17:55:56] <PcPixel> all subsequent checks are dropped
[17:56:01] *** Draecos has quit IRC
[17:56:03] <sysmonk> ye
[17:56:10] <PcPixel> ok i think i know what might have shorted it out then
[17:56:28] <PcPixel> if i need to do a test where the pattern match is ok, but i want everything else to happen
[17:56:31] <PcPixel> i use DUNNO
[17:56:34] <PcPixel> right?
[17:56:38] <sysmonk> yes
[17:56:40] <PcPixel> ok
[17:56:42] <PcPixel> there is my mistake
[17:56:46] <PcPixel> ill bet thats whats happening
[17:56:53] <Haris1> ok
[17:56:57] <Haris1> so what's wrong with the transport
[17:57:03] <Haris1> I haven't set one :p
[17:57:07] <Haris1> other than this
[17:57:08] <Haris1> ofcourse
[17:57:09] <PcPixel> ill go try modifying some things and see if i can get that working
[17:57:13] <PcPixel> thanks monk!
[17:57:19] <sysmonk> 100$
[17:57:19] <sysmonk> ;)
[17:57:32] <sysmonk> Haris1: i'd recheck the full config from begining till the end
[17:58:02] <Haris1> well, incomming is ok
[17:59:03] <PcPixel> hehe
[17:59:04] <PcPixel> aha
[17:59:06] <PcPixel> i think thats why
[17:59:14] <PcPixel> i have a whitelist of addresses
[17:59:26] <PcPixel> of who the recipients are
[17:59:36] <PcPixel> each address has an OK after it
[17:59:49] <sysmonk> hey, spammers, did ya hear that?
[17:59:49] <sysmonk> ;))
[17:59:52] * sysmonk spams PcPixel
[18:00:07] <PcPixel> only the emails we actually have
[18:00:34] <sysmonk> even better!
[18:00:44] <sysmonk> a 100% hit ;P
[18:01:07] <PcPixel> again
[18:01:10] <PcPixel> only the ones we have
[18:01:15] <PcPixel> im filtering a TON
[18:01:25] <PcPixel> some guy has been permuting one email address w invalid ones
[18:01:36] <PcPixel> so the address was like abc at mycompany dot com
[18:01:48] <PcPixel> this guy has been doing abc[a-z]*
[18:02:03] <PcPixel> ill brb. other service call
[18:03:57] *** loompek has joined #postfix
[18:03:59] <loompek> morning
[18:04:04] <loompek> one little ol' question...
[18:04:25] <loompek> i keep getting 'relay access denied...' on my postfix
[18:04:34] <Haris1> what will happen if I put domain=* transport=relay in my transport table
[18:04:37] <loompek> the whole subnet should be in mynetworks
[18:04:39] <Landon> well, what are you trying to do, loompek ?
[18:04:44] <Haris1> and put it as value to relay_domains ?
[18:04:48] <Landon> what's your mynetworks line
[18:04:55] <loompek> Landon i'm just configuring mms mta
[18:05:48] <loompek> mynetworks = 127.0.0.0/8, 1.2.3.0/24, 172.19.1.0/24
[18:06:04] <loompek> and the client that's connecting to the server is 172.19.1.5
[18:06:28] <loompek> but it's true that the mail from and to adresses are a bit strange
[18:06:51] <loompek> <+123456789/TYPE=PLMN at mms dot mnc123.mcc234.gprs>
[18:07:20] <PcPixel> ok final retqard question. of something isnt in a list that uses DUNNO, then its rejected right
[18:07:34] <Landon> hm, I need to get to work now, but your mynetworks line looks fine
[18:07:47] *** alienbrain__ has quit IRC
[18:07:56] <PcPixel> wait
[18:07:57] <PcPixel> nevermind
[18:08:03] <sysmonk> wrong
[18:08:08] <sysmonk> it gets a dunno
[18:08:09] <PcPixel> right you are
[18:08:25] <Haris1> !transports
[18:08:26] <knoba> Haris1: Error: "transports" is not a valid command.
[18:08:27] <Haris1> !transport
[18:08:28] <knoba> Haris1: "transport" : transport(5) The optional transport(5) table specifies a mapping from email addresses to message delivery transports and next- hop destinations. Look at: http://www.postfix.org/transport.5.html
[18:08:39] <PcPixel> so basically no matter how many checks you have
[18:08:45] <PcPixel> the moment anything in there gets an OK
[18:08:48] <PcPixel> all other tests stop
[18:08:59] <sysmonk> almost :)
[18:09:04] <sysmonk> except it doesn't have to be OK
[18:09:08] <sysmonk> it also can be REJECT
[18:09:18] <sysmonk> and any other acction (as in access(5))
[18:09:19] <Haris1> relay_transport !!
[18:09:31] <PcPixel> right
[18:09:36] <PcPixel> what i think is happening
[18:09:41] <PcPixel> is once it hits a valid sender address
[18:09:44] <PcPixel> i return an OK
[18:09:53] <PcPixel> wheni think i should be returning a DUNNO
[18:09:57] <Haris1> is relay_transport ancient history?
[18:10:02] <PcPixel> and thats whats shorting out the rest of the tests
[18:10:08] <sysmonk> yup
[18:10:12] <PcPixel> yay!
[18:10:18] * PcPixel does Reatrd Clap(tm)
[18:10:45] <sysmonk> Haris1: no, relay_transport is up to date
[18:10:52] <loompek> status=bounced (Host or domain name not found. Name service error for name=mms.mnc123.mcc234.gprs type=A: Host not found)
[18:10:53] <loompek> great
[18:11:10] <loompek> now i have to change the dns servers...
[18:11:11] <sysmonk> loompek: i don't remember a GPRS TLD...
[18:11:26] <loompek> sysmonk it's used for GRX
[18:11:31] <loompek> gprs routing exchange...
[18:11:39] <Haris1> do I need to set relay_transport?
[18:11:58] <loompek> Haris1 i tkink i'll have to configure that one :D
[18:12:01] <sysmonk> loompek: oh, but not on the wide internet :)
[18:12:12] <sysmonk> Haris1: it's set by default to 'relay'
[18:12:19] <Haris1> yes, I read that
[18:12:23] <Haris1> but its not relaying, lol
[18:12:49] <loompek> sysmonk is there any postfix config file i can write what hosts to forward a mail to.. in case of a domain
[18:12:51] <loompek> let's say...
[18:13:08] <sysmonk> Haris1: i'd make sure that 'relay' is the fault, cause i don't think it is...
[18:13:11] <loompek> mmc.mnc123.mcc234.gprs should be sent to 1.2.3.4
[18:13:20] <sysmonk> loompek: ye
[18:13:21] <sysmonk> !transport
[18:13:21] <knoba> sysmonk: "transport" : transport(5) The optional transport(5) table specifies a mapping from email addresses to message delivery transports and next- hop destinations. Look at: http://www.postfix.org/transport.5.html
[18:13:22] <loompek> mmc.mnc001.mcc112.gprs should be sent to 2.2.2.5
[18:13:23] <sysmonk> loompek: ^^
[18:13:38] <loompek> i was always afraid of that one :D
[18:13:43] <sysmonk> that would look like mmc.mnc123.mcc234.gprs smtp:someip
[18:13:53] <loompek> yeah.. but what file
[18:14:02] <loompek> this transport tables seems quite a few
[18:14:05] <loompek> one is local
[18:14:07] <loompek> one is relay...
[18:14:11] <sysmonk> loompek: whatever you like, must specify it in transport_maps
[18:14:15] <sysmonk> !transport_maps
[18:14:16] <knoba> sysmonk: "transport_maps" : a configuration parameter in the main.cf: Optional lookup tables with mappings from recipient address to (message delivery transport, next-hop destination). See transport(5) for details.
[18:14:35] <sysmonk> i.e. you can make it /etc/I_AM_A_LOOSER
[18:14:39] <sysmonk> write there your 'transports'
[18:14:39] <Haris1> I have transport_maps set for virtual domains
[18:14:48] <sysmonk> and set transport_maps in main.cf to hash:/etc/I_AM_A_LOOSER
[18:14:50] <Haris1> but not for remote domains
[18:14:52] <sysmonk> then postmap the file
[18:14:54] <sysmonk> and restart postfix
[18:14:55] <sysmonk> vuala
[18:15:17] <sysmonk> loompek: oh, by the way, don't think that i'm calling you a looser
[18:15:23] <sysmonk> it's just my way of talking ;)
[18:15:43] * sysmonk uses /etc/DICKHEAD and etc for examples
[18:15:56] <loompek> :D
[18:16:02] <sysmonk> that way you can see that the filename doesn't matter
[18:16:05] <loompek> sysmonk great.. it's just...
[18:16:26] <loompek> i didn't quite get the transport maps a couple of years ago i was trying to configure it...
[18:16:39] <loompek> and i was afraid of it since then..
[18:16:53] <loompek> i usually got most of my knowledge from examples..
[18:17:07] <sysmonk> oooh, loompek, did you know that there's such a thing like virtualization
[18:17:12] <sysmonk> like xen, vmware, and other stuff
[18:17:20] <sysmonk> or simply freebsd jails or solaris zones or whatever
[18:17:31] <sysmonk> you can even _TEST_ stuff before you do that in production
[18:17:31] <loompek> yeah
[18:17:37] <loompek> using xen
[18:17:49] <loompek> well anyhow... wish me luck :D
[18:18:05] <sysmonk> *silence* :)
[18:20:34] <PcPixel> isnt it grand
[18:20:35] <PcPixel> lol
[18:20:53] <PcPixel> hmm still no DB yet
[18:21:18] <PcPixel> but im thinking something else could be shorting it out
[18:24:20] <sysmonk> stop thinking, start working
[18:25:04] <loompek> great... transport seems it should be working...
[18:26:29] <PcPixel> sysmonk: i am. stop sounding like my mom
[18:26:30] <PcPixel> :P
[18:26:58] <sysmonk> ok
[18:27:06] * sysmonk turns to PcPixel's dad mode
[18:27:46] <PcPixel> but im notin bed and the lights arent out yet
[18:28:06] * sysmonk searches for the kick button
[18:28:20] *** _Driver_ has joined #postfix
[18:28:23] <PcPixel> lmao
[18:28:28] <PcPixel> ok truce :)
[18:29:34] <PcPixel> dang it, still no databse
[18:30:03] *** githogori has quit IRC
[18:30:27] <sysmonk> still no job, still no $ :)
[18:31:02] <PcPixel> hey i offered to send you $$
[18:31:03] <PcPixel> lol
[18:31:15] <sysmonk> PcPixel: you do understand that sender verification is kinda bad?
[18:31:18] <sysmonk> not everybody likes it
[18:31:26] <sysmonk> so you'll get false-positives/false-negatives
[18:31:48] <PcPixel> sysmonk: no i know
[18:31:52] <PcPixel> i ran into that with some people
[18:31:58] <PcPixel> like UPS and Chase Bank
[18:32:03] <PcPixel> i have an exception before them
[18:32:08] <PcPixel> so if i know of someone who i cant verify
[18:32:10] <PcPixel> i put it in there
[18:32:13] *** mark-use has left #postfix
[18:32:14] *** stickystyle has joined #postfix
[18:32:24] <PcPixel> yes, i do know im taking a chance w sender verification
[18:32:46] <jellis-real> what soft of volume do you process and still use sender verification on?
[18:32:51] <PcPixel> im also taking a chance with reject_unknown_helo_hostname
[18:32:59] <sysmonk> you do know i'm searching for a job and you could have been already smoking some cigs on the beach and not sitting behind this screen ? :P
[18:33:56] <PcPixel> lkol
[18:34:11] <sysmonk> jellis-real: ye, my recipient verification database is kinda big enough, and it'd be nice to see the sender verification database on my amounts :)
[18:35:31] <sysmonk> PcPixel: what amount of mails do you take care of?
[18:35:34] <PcPixel> we do a decent amount of mail
[18:35:36] *** sophokles has quit IRC
[18:35:44] <jellis-real> define decent. :P
[18:35:46] <PcPixel> one sec, ill give you an idea
[18:35:50] <PcPixel> ill stat an old log
[18:37:45] <PcPixel> ok
[18:37:48] <PcPixel> if i added the numbers right
[18:37:53] <PcPixel> about 55449/day
[18:37:59] <jellis-real> sysmonk: all i've read shows that sender verification should be used in very low level sites
[18:38:10] <PcPixel> i received: 6727
[18:38:15] <PcPixel> rejected: 48722
[18:38:48] <jellis-real> not terrible then
[18:39:11] <PcPixel> no
[18:39:20] <jellis-real> sysmonk: previous statement reads funny; i meant to put a that in there somewhere. all *that* i've
[18:39:24] <PcPixel> ive managed to maintain ~10-15% ham, 90-85% spam
[18:39:25] <sysmonk> not 'decent' ;)
[18:39:58] <PcPixel> im puny is what youre saying
[18:39:59] <PcPixel> lol
[18:40:01] <jellis-real> we reject on average around 1 million/day. :-\
[18:40:22] <sysmonk> jellis-real: same here
[18:40:26] <sysmonk> maybe a bit more
[18:40:28] <PcPixel> damn
[18:40:31] <PcPixel> what industry?
[18:40:32] <PcPixel> ISP?
[18:40:53] <jellis-real> it fluctuates, i like the days that are under 1! :P
[18:40:59] <sysmonk> nah, email server for my mom and brother
[18:41:02] <sysmonk> and sometimes me
[18:41:08] <PcPixel> and you process a million messages?!
[18:41:14] *** ming_zym has quit IRC
[18:41:14] <sysmonk> ;P
[18:41:29] <jellis-real> PcPixel: more or less, yes.
[18:41:38] <PcPixel> ona personal email server?
[18:41:40] <PcPixel> thats mind boggling
[18:41:46] <sysmonk> PcPixel: that was a joke about it being personal
[18:41:54] <sysmonk> ofcourse it's not
[18:41:58] <PcPixel> oh
[18:41:59] <PcPixel> lol
[18:42:01] <PcPixel> cause i was like
[18:42:03] <PcPixel> um.....
[18:42:41] <sysmonk> it's semi personal! :)
[18:42:46] <PcPixel> nice
[18:43:02] <sysmonk> that's only incoming
[18:43:05] <PcPixel> compares to what we had before
[18:43:09] <sysmonk> and via one server
[18:43:16] <sysmonk> that is, one frontend
[18:43:47] <jellis-real> sysmonk: same; we're practically twins.
[18:44:03] <sysmonk> jellis-real: ah, SISTER! where have you been ?! :)
[18:45:56] *** rmayorga has quit IRC
[18:46:41] <jellis-real> :O
[18:47:50] <PcPixel> grrr
[18:48:41] <PcPixel> is there any way i can tell how far down the list its getting
[18:49:59] *** slackjr_ has quit IRC
[18:51:30] <sysmonk> sure you can
[18:51:32] <sysmonk> !debug
[18:51:34] <knoba> sysmonk: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ .
[18:51:34] <sysmonk> ;)
[18:52:23] *** jdrake has joined #postfix
[18:52:44] <jellis-real> a list on restrictions i'm guessing?
[18:53:20] <PcPixel> yes
[18:53:23] <PcPixel> only think i can think of
[18:53:30] <PcPixel> its its something before my spam section
[18:53:35] <jellis-real> nothing is in your maillog?
[18:53:36] <PcPixel> cause im not logging anything from spamhaus anymore
[18:54:33] <PcPixel> not really
[18:54:40] <PcPixel> im trying to figure out which of my lines is shorting out the rest
[18:55:00] <PcPixel> yeah im not getting anything from dsn.rfc-ignorant.org or zen.spamhaus.org anymore
[18:56:27] <PcPixel> ive gotta have a rogue OK in there somewhere
[18:56:43] *** D3b|4n has quit IRC
[18:57:46] <sysmonk> PcPixel: as i said, !DEBUG
[18:58:12] <sysmonk> it will show how your mail gets through all restrictions
[18:58:16] <sysmonk> and where it gets an OK
[18:58:29] <PcPixel> ok let me see how to turn it on
[18:58:50] <sysmonk> oh my, i gave you a link almost 10 minutes ago!
[18:59:10] <theneb> Hi all, Mail from my postfix server is being rejected by others due to it's spf record. These are for virtual domains.
[18:59:10] <PcPixel> ive walked away a few times
[18:59:16] <PcPixel> lemme ee if its in the history
[18:59:31] <jdrake> I have postfix setup to use dovecot sasl, and everything works when I use the imap server, but as soon as I try sending mail I get sasl authentication errors. The log can be seen here: http://rafb.net/p/yRABeD42.html My configuration is here: http://rafb.net/p/VYsRb599.html Most of the configuration for sasl comes from dovecot's examples. The username that has been send is either 'jeffd' or 'jeffd at techsociety dot ca
[18:59:31] <jdrake> ' and both result in the same errors.
[18:59:45] <sysmonk> theneb: postfix doesn't generate spf records, so 1. fix your 3rd party plugin or 2. remove spf records from dns zone
[19:00:06] <PcPixel> no i cqnt find it
[19:00:08] <PcPixel> what was it agian
[19:00:13] <sysmonk> o_o
[19:00:17] <sysmonk> !debug
[19:00:17] <theneb> sysmonk: it's more so that other servers are rejecting mine
[19:00:17] <knoba> sysmonk: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ .
[19:00:22] <PcPixel> got it
[19:00:24] <sysmonk> PcPixel: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[19:00:25] <PcPixel> master.cf add -D
[19:00:34] <sysmonk> ... no, master.cf add a -v
[19:00:38] <sysmonk> or debug_peer_list
[19:00:46] <sysmonk> or READ the readme :)
[19:01:15] <sysmonk> theneb: and? my answer was just about that, not the other way around
[19:01:26] *** martiancode has joined #postfix
[19:01:38] <theneb> ok, cheers
[19:01:52] <PcPixel> ok reloaded. giving it a sec
[19:02:12] <sysmonk> PcPixel: it'll be a big big big logfile :P
[19:02:25] <sysmonk> ah, depending on how much debuging you gave it :P but still it'll be big :P
[19:02:40] <PcPixel> i only want enough that i can follow
[19:02:44] <PcPixel> im gonna turn it off shortly
[19:02:53] <PcPixel> then ill copy the log out
[19:02:57] <PcPixel> turn -v off
[19:02:59] <PcPixel> and restart
[19:04:46] <PcPixel> whoa
[19:04:46] <PcPixel> um yeah
[19:04:48] <PcPixel> that got big
[19:04:58] <sysmonk> ;)
[19:08:02] <PcPixel> wow. my head hurts
[19:08:02] <PcPixel> lol
[19:10:46] *** cilly has quit IRC
[19:11:43] <PcPixel> argh
[19:12:37] *** rmayorga has joined #postfix
[19:14:04] <PcPixel> wtf
[19:14:18] <sysmonk> ftw!
[19:14:19] <sysmonk> :)
[19:14:24] <PcPixel> now all mail is rejected
[19:14:29] <sysmonk> KEWL
[19:14:30] <sysmonk> ;)))
[19:14:38] <sysmonk> you DO have backups?
[19:14:58] <PcPixel> yeah
[19:15:11] <sysmonk> ah, bad ;(
[19:15:19] <sysmonk> and i was already almost happy
[19:15:33] *** Toerkeium has joined #postfix
[19:15:44] <Toerkeium> Hello everyone
[19:15:47] <PcPixel> now it wont start
[19:15:55] <sysmonk> even more keeewl :)
[19:16:04] <sysmonk> let's brake something more
[19:16:17] <Toerkeium> does anyone know what's the parameter to set up the incoming and outoing smtp concurrent connection?
[19:16:18] <PcPixel> yeahwe;ll
[19:16:44] <PcPixel> ill try a reboot
[19:16:57] <PcPixel> all idid was add the -v
[19:17:21] <sysmonk> Toerkeium: incoming - read about amavis, outgoig - read about smtp_destination_concurrency_limit and things like that
[19:17:27] <sysmonk> PcPixel: reboot?!
[19:17:30] <sysmonk> PcPixel: don't be stupid
[19:17:37] <sysmonk> reboot is not the answer in unix-like
[19:17:47] <Toerkeium> thanks sysmonk
[19:17:55] <PcPixel> iu think i twouldnt start because it was started
[19:18:09] <PcPixel> ok its up
[19:18:32] <PcPixel> nope
[19:18:35] <PcPixel> all inbound are rejected now
[19:19:32] <Toerkeium> sysmonk: What I want to accomplish is that users can send from their clients any amount of messages they want, but then the server deliver this messages on a concurrency limit specified. Do you understand what I mean?
[19:20:09] <sysmonk> Toerkeium: yes, i do. but then no incoming concurrency is needed
[19:20:23] <PcPixel> now mail is vaoprized
[19:20:25] <PcPixel> wtf
[19:20:32] <Toerkeium> sysmonk: true!
[19:20:39] <Toerkeium> sysmonk: just outgoing
[19:21:17] <sysmonk> PcPixel: really, we can't know, you're just crying that your car doesn't start but don't say anything bout it
[19:22:18] <PcPixel> im being ywlled at r4uight now
[19:22:40] * Toerkeium notes postfix docs are grown from a couple of years ago, yay!
[19:22:48] <sysmonk> what?
[19:22:54] * sysmonk can't read PcPixel's words
[19:25:21] <PcPixel> i
[19:25:21] <PcPixel> am
[19:25:22] <PcPixel> being
[19:25:23] <PcPixel> yelled
[19:25:23] <PcPixel> at
[19:25:42] <sysmonk> oh
[19:26:09] <sysmonk> didn't you say you had backups ?
[19:26:16] <sysmonk> can't you just restore the old config?
[19:26:22] <PcPixel> im workign on it
[19:26:39] <sysmonk> or be fast and try to fix it on your own
[19:27:01] <PcPixel> i dont get it
[19:27:03] <jellis-real> have you been making changes to the restrictions without restarting postfix?
[19:27:39] <PcPixel> alli did was add -v
[19:27:42] <PcPixel> to master.cf
[19:27:44] <PcPixel> and now its melted down
[19:27:49] <sysmonk> yeah, right
[19:27:56] * sysmonk doesn't believe
[19:27:57] *** Tykling has left #postfix
[19:28:06] <plee> PcPixel, maybe at the wrong place?
[19:28:06] <PcPixel> i dont either
[19:28:14] <PcPixel> im grabbing the last back up of the system
[19:28:36] <PcPixel> right now its almost like all email became case sensiste
[19:28:39] <PcPixel> sensitve
[19:28:45] <sysmonk> o_o
[19:28:47] <PcPixel> sjc@mycompany <> SJC@mycompany
[19:28:53] <PcPixel> its just rejecting everything
[19:29:00] *** Tykling has joined #postfix
[19:29:21] <sysmonk> are you using sql ?
[19:29:32] <tuxick> using caps is bad habit anyway
[19:29:45] <sysmonk> tuxick: right
[19:31:35] <PcPixel> no
[19:31:54] <PcPixel> ugh
[19:32:02] <PcPixel> its NOT helping me my boss is "helping" me at the same time
[19:32:19] <tuxick> lucky you
[19:32:36] <sysmonk> fire your boss
[19:32:44] <tuxick> if a manager comes up starting with "i've don some thinking", RUN AWAY
[19:32:47] <sysmonk> while he didn't fire you...
[19:33:36] <PcPixel> ugh
[19:33:42] *** SnakeO2 has joined #postfix
[19:33:45] <PcPixel> i cant restore my backup cause he is afraid the qeues willg et tashed
[19:34:07] <sysmonk> just fuckin restore postfix configs, no need for restoring queues
[19:34:16] <SnakeO2> ok so if i send a mass newsletter via SMTP postfix server... how do I check if email has bounce back and from which addresses
[19:34:20] <sysmonk> s/fuckin/ :)
[19:34:24] <PcPixel> i dont have them
[19:34:32] <SnakeO2> I would assume it woudl be to check in the 'postfix' users mail.. is this correct?
[19:34:34] <sysmonk> PcPixel: ?
[19:34:38] <PcPixel> wait
[19:34:39] <PcPixel> thjere i
[19:34:40] <PcPixel> i do
[19:34:54] *** syneus has quit IRC
[19:34:55] <PcPixel> i didnt make backup copies
[19:34:59] <PcPixel> i have them in a backup of the syste
[19:35:29] <sysmonk> SnakeO2: learn about DSN
[19:35:49] <PcPixel> i am restoring it
[19:35:52] <PcPixel> then i have to boot in to likuix
[19:35:53] <PcPixel> grab the files
[19:35:55] <PcPixel> and restore em
[19:36:02] <sysmonk> PcPixel: but you did make the backup of _current_ files, did ya? :)
[19:36:16] <sysmonk> PcPixel: you have them on tapes or what?
[19:36:24] <PcPixel> hard drive
[19:36:25] <PcPixel> no
[19:36:28] <PcPixel> ugh
[19:36:28] <PcPixel> i ahve to go
[19:36:31] *** PcPixel has quit IRC
[19:36:45] <SnakeO2> sysmonk: thanks. what does DSN stand for?
[19:36:57] <sysmonk> o_o
[19:37:00] <sysmonk> !dsn
[19:37:01] <knoba> sysmonk: "dsn" : Delivery Status Notifications - See: http://linuxnet.ca/postfix/docs/DSN_README.html
[19:37:09] <SnakeO2> sweeeet
[19:39:37] <sysmonk> poor pcpixel
[19:39:47] <sysmonk> but i don't believe that something went wrong because of -v
[19:46:05] *** dusty has quit IRC
[19:54:25] *** rmayorga has quit IRC
[19:55:59] *** deflax has joined #postfix
[19:56:52] *** deflax has left #postfix
[19:57:12] *** rmayorga has joined #postfix
[20:00:02] <jeev> hey guys, ijust noticed my friends email is being bounced because his quota is full, i dont recall setting up quota!2 how can i disable it
[20:00:55] <jdrake> How might one ensure that postfix is using dovecot instead of cyrus for sasl?
[20:01:08] <Haris> !transport_maps
[20:01:09] <knoba> Haris: "transport_maps" : a configuration parameter in the main.cf: Optional lookup tables with mappings from recipient address to (message delivery transport, next-hop destination). See transport(5) for details.
[20:03:34] *** hesco has joined #postfix
[20:04:27] <sysmonk> jdrake: *_sasl_type
[20:05:05] <jdrake> sysmonk, are you referring to smtpd_sasl_auth_type?
[20:05:25] <sysmonk> jdrake: yes
[20:05:34] <sysmonk> ah, no
[20:05:37] <sysmonk> smtpd_sasl_type
[20:05:56] <jdrake> Everything I have read says smtpd_sasl_auth_type
[20:06:04] <sysmonk> jdrake: point me to it
[20:06:13] <hesco> I'm having a devil of a time getting a postfix transport on a private server to work with my publicly connected mail server. I created a user on both boxes to handle the hand-off through a no-password, public key enabled ssh connection to the sendmail binary on the remote, public machine. But I'm getting permission errors when postfix runs this script. Can anyone please advise me on this?
[20:07:22] <sysmonk> hesco: o_o what the hell are you trying to do with a ssh transport
[20:07:29] <sysmonk> tls isn't enough for ya?
[20:08:15] <hesco> That would involve getting root admin on the public mail server to configure tls.
[20:08:36] <hesco> He was willing to create a user for this server's transport, though.
[20:08:53] <sysmonk> and you need it to go over tls ?
[20:09:10] <hesco> I don't really know about tls.
[20:09:19] <sysmonk> um, s/tls/encrypted channel/
[20:09:36] <sysmonk> i just want to understand why you want to do what you do
[20:09:43] <sysmonk> maybe there's a better solution for that
[20:10:31] <jdrake> It appears that I am wrong. Must have been a mistake I carried through all of this.
[20:10:34] <hesco> my local server hosts a few services for a group I work with, but is hosted on a smappy comcast connection that no one will take email from. I need a way of routing my email so it gets out to the world.
[20:10:47] *** _Driver_ has quit IRC
[20:10:57] *** stegbth has quit IRC
[20:11:19] <jdrake> That appears to have been my WHOLE problem.
[20:11:27] <jdrake> sysmonk, bless you sir!
[20:13:44] *** SnakeO2 has quit IRC
[20:14:47] *** githogori has joined #postfix
[20:17:59] <hesco> so what do you think, sysmonk? Is a transport the way to go here?
[20:17:59] <sysmonk> hesco: um, does the relay use postfix?
[20:18:11] <sysmonk> if yes, then it's just a matter of changing one line
[20:18:12] <hesco> yes, postfix on both machines.
[20:18:17] <sysmonk> and one line on your side
[20:18:31] <sysmonk> he would need to add your ip to the mynetworks
[20:18:36] <hesco> ok, how, then. Pray, do tell.
[20:18:38] <sysmonk> you would need to put his IP in relayhost
[20:18:51] <sysmonk> !mynetworks
[20:18:51] <knoba> sysmonk: "mynetworks" : a configuration parameter in the main.cf: The list of "trusted" SMTP clients that can relay email.
[20:18:58] <sysmonk> and
[20:18:59] <sysmonk> !relayhost
[20:19:00] <knoba> sysmonk: "relayhost" : a configuration parameter in the main.cf: The default host to send non-local mail to when no entry is matched in the optional transport(5) table. When no relayhost is given, mail is routed directly to the destination.
[20:19:15] <sysmonk> mynetworks on his side, relayhost on your side, that's all
[20:19:42] <hesco> I had tried seting that to his domain name as in relayhost=[mail.remotehost.org]
[20:19:53] <hesco> I'll try it again with the IP now
[20:20:08] <sysmonk> hesco: does he have your ip in his mynetworks?
[20:20:12] <sysmonk> if not, then it won't work
[20:22:21] *** gonewestcoast has joined #postfix
[20:22:28] <hesco> I doubt it, but I can give him a call.
[20:22:50] <hesco> My test yielded this in the logs: 'No route to host', although ping immediately found his server
[20:24:33] <hesco> no, I'm not listed in his mynetworks. Does that have to be an IP? I'm using dyndns.org to map an IP to this host, plus cnames in DNS on the appropriate domains so my users can find it.
[20:24:53] <hesco> Will mynetworks accomodate a domainname as well?
[20:26:29] <sysmonk> no
[20:26:38] *** cilly has joined #postfix
[20:26:42] <sysmonk> it will resolve it on start up and use that ip
[20:26:52] <sysmonk> so if your ip is dynamic then that's not the way
[20:27:06] <sysmonk> if you'r ip is dynamic then "the right way" would be sasl
[20:27:06] <sysmonk> !sasl
[20:27:07] <knoba> sysmonk: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.
[20:27:21] <sysmonk> but sasl is a PITA to setup for most people somehow
[20:27:31] <sysmonk> so if your friend doesn't have it set up i don't think he will want to :)
[20:29:05] *** PcPixel has joined #postfix
[20:29:11] <PcPixel> ok; THAT was officially not fun.
[20:30:10] <hesco> yes, he's struggled with that sasl thing before and had only intermittent success.
[20:30:27] <hesco> I think that is why he suggested I use a transport on my local box instead.
[20:30:31] <PcPixel> i ahve no idea what setting i messed up, but wow did i do it.
[20:30:47] <PcPixel> even putting the original files back didnt fix it. i had to do a full restore
[20:31:03] <hesco> PCPixel: can you restore your old working config from svn?
[20:31:16] <hesco> reading the diff there might be of help.
[20:31:24] <PcPixel> hesco: you are assuming we are running an intelligent operation.
[20:31:38] <hesco> not like I do myself, of course
[20:32:13] <PcPixel> i had to restore the system from a backup
[20:32:20] <hesco> sysmonk: the local transport with shared ssh keys made sense when it was my personal box and my personal email.
[20:32:32] <PcPixel> sysmonk: it was mega-suckage.
[20:32:45] <hesco> But now I'm configuring a server which will be used by folks other than me,
[20:33:06] <hesco> and on which I would prefer not to leave my own private key laying around for the next root admin to find.
[20:33:36] <hesco> so I created an application specific user on both boxes, and created shared keys for them.
[20:34:10] <hesco> But when postfix tries to run the script which relies on these keys I keep getting a permissions error
[20:35:50] <hesco> I've tried for help on both #bash and #openssh and someone suggested I try here as well.
[20:36:22] <hesco> I sent my friend a request for a mynetworks entry. I'll give him a call.
[20:36:25] <hesco> .
[20:39:05] <sysmonk> PcPixel: ye? what was it ?
[20:39:37] <sysmonk> or you don't know yet?
[20:39:43] <PcPixel> sysmonk
[20:39:46] <PcPixel> sysmonk: yes
[20:39:52] <PcPixel> i figured it out after restoring the system
[20:39:58] <hesco> ok, he asked that I call him back in 15 minutes on that mynetworks request
[20:40:18] <PcPixel> i have a junk mail filter i wrote. a sender_access file
[20:40:23] <PcPixel> one of the regular expressions in it is wrong
[20:40:27] <PcPixel> and thats whats eating the email
[20:40:39] <sysmonk> hesco: if your ip is dynamic then mynetworks is not teh way
[20:40:52] <PcPixel> when you have your boss breathing down you rneck, it was just easier to say screw it. go to last known good
[20:40:57] <PcPixel> since my queues are on their own drive
[20:41:02] <PcPixel> mount point, sorry
[20:41:06] <PcPixel> i just restored everything but
[20:41:07] <PcPixel> and boom
[20:41:11] <PcPixel> sprang right back to life
[20:41:21] <sysmonk> PcPixel: poor guy
[20:41:39] <sysmonk> PcPixel: i hate when boss is breathing down your neck
[20:41:49] <sysmonk> my boss isn't breathing down my neck, i don't let him to
[20:42:11] <sysmonk> i don't wash myself for a week, so he can't stend my smell
[20:42:17] <sysmonk> so he's not walking around me
[20:43:11] <sysmonk> PcPixel: always make backups if you're changing a production machine
[20:43:13] <sysmonk> it's simple
[20:43:24] <sysmonk> cp main.cf main.cf.bak-20080804
[20:43:31] <sysmonk> hooray, we've got a backup
[20:43:36] <sysmonk> or even better - cvs!
[20:44:36] <Landon> or vim even :)
[20:44:53] <sysmonk> nah, vim on servers - rarely
[20:44:54] <PcPixel> yeah
[20:44:57] <PcPixel> thats what maded it tough
[20:45:04] <PcPixel> though my other issue
[20:45:11] <PcPixel> is why on gods green earth do we not have at LEAST two mail servers
[20:45:14] <sysmonk> unless it's a devel box where i do some coding
[20:45:35] <sysmonk> PcPixel: WHAT? 2 servers?! ?!?!!??! WHERE WILL WE GET SO MUCH MONEY
[20:45:35] <sysmonk> ;))
[20:45:50] <Landon> vim is my conf/scripting editor
[20:46:01] <Landon> I havent really set it up for anything more than that yet
[20:46:02] <sysmonk> Landon: vim for coding, vi for editing
[20:46:31] <Landon> vi is just a symlink to vim on here
[20:47:13] <Landon> (albeit a dumbed down version of vim :) )
[20:48:31] <hesco> yes, but these comcast dynamic IP's have proven to be quite stable, actually. Perhaps I could get away with it. The one we're using here remained unchanged for six months until they disconnected us because a neighbor did not pay their bill. Took us nearly a week to get back online.
[20:49:30] <sysmonk> Landon: /me uses freebsd. in freebsd vi comes as a default editor, and vim is available in ports with all the bells and wistles
[20:49:53] * Landon uses ubuntu
[20:50:18] <sysmonk> oh sure, that scary thing
[20:50:22] <Landon> heh
[20:50:58] <Landon> nice to be able to get up and go
[20:51:09] <Landon> only problem I've had so far is with available software versions
[20:51:26] <Landon> I need dovecot 1.1 because of lack of foresight when planning my maildir layout
[20:51:56] <sysmonk> dovecot 1.1.1 available in ports here
[20:52:21] *** xpoint has joined #postfix
[20:52:35] <Landon> yeah, itll be in intrepid here, but someone just put in a request for it to be backported to hardy
[20:52:48] <Landon> so at the most I have 2 months of wait
[20:52:58] <sysmonk> or just compile it yourself
[20:53:01] <sysmonk> and make package
[20:53:14] <PcPixel> ok this is bizzare
[20:53:19] <Landon> it's not worht it to me
[20:53:30] <Landon> I'm the only one that the feature would be useful for
[20:53:33] *** stickystyle has left #postfix
[20:53:35] <Landon> and I can just use mutt
[20:53:59] <PcPixel> sysmonk: if i make a recipient DUNNO
[20:54:01] <PcPixel> it fails
[20:54:40] <sysmonk> ?
[20:55:22] <PcPixel> one sec. trying again
[21:02:11] <PcPixel> yeah
[21:02:12] <PcPixel> it fails
[21:02:20] <PcPixel> if i change the recipient addresses to DUNNO instead of OK
[21:02:26] <PcPixel> i get access denid. recipient doesnt exist
[21:03:37] <sysmonk> something blocks in further
[21:04:24] <PcPixel> the only time i get recippient address denied is if it cant find the address
[21:04:41] <PcPixel> unless i wrote those entire classes wrong
[21:04:59] <sysmonk> Landon: btw, it's not dovecot 1.1.1 here but 1.1.2, sorry
[21:05:25] <PcPixel> valid_viewmm_recipient =
[21:05:25] <PcPixel> check_recipient_access hash:/etc/postfix/recipients/valid/viewmm
[21:05:25] <PcPixel> reject
[21:05:32] <PcPixel> those are what my checks look like
[21:05:57] *** madrescher has quit IRC
[21:06:26] <sysmonk> so, if recipient is not in that map it gets rejected
[21:06:31] <sysmonk> and what's in that map? a DUNNO?
[21:07:03] *** madrescher has joined #postfix
[21:07:10] <PcPixel> each map is a list of all permitted addresses. originally, OKs. switched to DUNNO
[21:07:13] <PcPixel> DUNNO caused problems
[21:07:51] <xpoint> or better imho use permit_auth_destination
[21:08:11] <sysmonk> xpoint: he's got a crazy config
[21:08:36] <xpoint> start with a empty main.cf then
[21:08:39] <PcPixel> the system is a mail relay.
[21:08:40] <sysmonk> PcPixel: so, it does what you asked - it doesn't find any OK in the map and goes to the next restriction, which is 'reject'
[21:08:56] <PcPixel> but you said if it hits an OK that the other checks short out
[21:09:19] <sysmonk> PcPixel: yes. if it hits OK it stops the checks and accepts the mail
[21:09:35] <PcPixel> then im overlooking something else
[21:09:45] <sysmonk> you had OK originally
[21:09:48] <sysmonk> which accepted the mail
[21:09:52] <PcPixel> jsut because it hits a valid recipient doesnt mean i want it to stop the rest of my checks in smtpd_recipient_restrictions
[21:10:01] <sysmonk> now you have a DUNNO, and next restriction is 'reject'
[21:10:08] <PcPixel> just omit the reject?
[21:10:11] <sysmonk> so, your mail hits a DUNNO and goes to the other restriction
[21:10:22] <sysmonk> PcPixel: i don't know the whole situation, really
[21:10:36] <PcPixel> the problem was, we were getting hit by dictionary spammers
[21:10:42] <xpoint> PcPixel, first hit wins
[21:10:48] <sysmonk> PcPixel: and?
[21:10:48] <PcPixel> so we were getting a lot of email for addresses that wouldnt exist
[21:10:58] <PcPixel> the mail server passed it up to the exchange server
[21:11:05] <PcPixel> the exchange server rejected it & went back out my server
[21:11:11] <PcPixel> so we decided we should push the check down a level
[21:11:19] <sysmonk> PcPixel: that's what reject_unknown_sender_domain is for
[21:11:21] <PcPixel> so we uploaded all valid mail addresses into the mail server
[21:11:23] <PcPixel> no
[21:11:24] <PcPixel> not domain
[21:11:25] <xpoint> PcPixel, if first hit is DUNNO then the next check is done
[21:11:25] <sysmonk> and other sender restrictions
[21:11:53] <PcPixel> they were doing a at company dot com - z at company dot com
[21:11:55] <PcPixel> then adding a char
[21:11:59] <PcPixel> so on and so on
[21:11:59] <sysmonk> ah
[21:12:10] <PcPixel> my mail server said "oh, its company.com. i relay for them. here you are exchange"
[21:12:12] <xpoint> PcPixel, have you shown postconf -n ?
[21:12:31] <PcPixel> so what we did was upload the valid recipients for all companies into the postfix server
[21:12:40] <PcPixel> so we know specifically what addresses we do get mail for
[21:12:51] <PcPixel> xpoint: i can, i havent yet
[21:13:02] <xpoint> PcPixel, you should
[21:13:42] *** FluxboXtremist has quit IRC
[21:13:42] <PcPixel> :)
[21:13:43] <sysmonk> PcPixel: reject_unlisted_sender is what you want
[21:13:52] <PcPixel> recipient you mean?
[21:13:57] <sysmonk> no, sender
[21:14:00] <xpoint> beter yet if that is not helpfull we have postfinger the config you have, google postfinger if not found on your distro
[21:14:01] <sysmonk> cause they're faking the sender, right?
[21:14:25] <PcPixel> im talking about outside
[21:14:29] <sysmonk> xpoint: you haven't seen the whole problem :)
[21:14:29] <PcPixel> outside people are faking
[21:14:36] <sysmonk> PcPixel: yes
[21:14:41] *** Internat has joined #postfix
[21:14:45] <xpoint> sysmonk, that implies that postfix have a recipient list somewhere
[21:14:52] <sysmonk> PcPixel: they connect and say i want to send from a at company dot com
[21:15:00] <sysmonk> PcPixel: and you have a reject_unlisted_sender
[21:15:05] *** internat1 has quit IRC
[21:15:07] *** master_of_master has joined #postfix
[21:15:17] <sysmonk> which checks if you've got that mail in your relay maps / virtual maps and etc
[21:15:19] <xpoint> sysmonk, he i have alot of problems so i know how to handle most of them
[21:15:29] <sysmonk> xpoint: oh sure, and i don't, ye?
[21:15:30] <sysmonk> ;)
[21:15:38] <PcPixel> sysmonk: its not the problem from the inside
[21:15:45] <xpoint> sysmonk, maybe
[21:15:46] <sysmonk> xpoint: and he just said that he uploaded the recipient list for all the domains to the sender
[21:15:49] *** jdrake has quit IRC
[21:15:53] <sysmonk> PcPixel: who's talking about inside?!
[21:16:06] <PcPixel> reject_unlisted_sender
[21:16:14] <sysmonk> PcPixel: have you read what it does?
[21:16:32] <sysmonk> if a spammer sends a mail to YOUR server with YOUR domain - it checks if the recipient exists
[21:16:33] <xpoint> PcPixel, that still implies that postfix know recipient
[21:16:47] <sysmonk> that's like reject_unverified_sender but you have the maps on your server
[21:16:51] <sysmonk> the ones you said you've uploaded
[21:16:57] <sysmonk> the valid emails of your domains
[21:17:06] <sysmonk> xpoint: he SAID that he uploaded the recipients
[21:17:12] <sysmonk> 08-04 22:11:25 < PcPixel> so we uploaded all valid mail addresses into the mail server
[21:17:37] <xpoint> sysmonk, he olso say he could upload the postconf -n :)
[21:17:44] <PcPixel> sysmonk: just read it
[21:17:45] <sysmonk> xpoint: he did before
[21:17:58] <PcPixel> i dont wait it in MAIL FROM. I want it for RCPT TO.
[21:17:58] <sysmonk> PcPixel: yes?
[21:18:08] <sysmonk> PcPixel: doh
[21:18:10] <xpoint> sysmonk, before i came
[21:18:55] <xpoint> PcPixel, enough fuss show me the source
[21:19:08] <PcPixel> for which part :) i can show you whatever you like :)
[21:19:11] <sysmonk> PcPixel: relay_recipients_maps
[21:19:22] <xpoint> postconf -n
[21:19:31] <sysmonk> recipient_ that is
[21:19:41] <sysmonk> 08-04 18:50:30 < PcPixel> heres mine: http://pastebin.com/d5433fc66
[21:19:58] <sysmonk> woops, it expired already
[21:20:05] <PcPixel> you got it
[21:20:06] <PcPixel> one sec
[21:20:14] <xpoint> Unknown post id, it may have expired or been deleted
[21:20:24] <sysmonk> xpoint: i just said it expired..
[21:21:02] <xpoint> peeple that runs smtpd servers should have there own webserver olso
[21:21:02] <PcPixel> http://pastebin.com/d750004e6
[21:21:51] <sysmonk> PcPixel: have you took a look at relay_recipient_maps ?
[21:21:52] *** madrescher has quit IRC
[21:22:07] <xpoint> PcPixel, why line 11 ?
[21:22:32] *** madrescher has joined #postfix
[21:22:40] <sysmonk> why not ?
[21:22:45] *** SnakeO2 has joined #postfix
[21:22:46] <PcPixel> xpoint: i forget, there was a reason
[21:22:54] <sysmonk> why should i accept vrfy from all over the world?
[21:23:02] <sysmonk> why should i give out my precious information
[21:23:07] <PcPixel> yes
[21:23:08] <PcPixel> that 2was it
[21:23:09] <PcPixel> lol
[21:23:21] <SnakeO2> is there a way to track bounced emails other than DSN? I've heard DSN is unreliable on all servers
[21:23:23] <sysmonk> why should i give spammers an easy way to gather my users database
[21:23:25] <PcPixel> i think the reason i split it apart
[21:23:37] <PcPixel> was to keep the addresses seperate
[21:23:49] <PcPixel> cause we have a lot
[21:23:50] *** madrescher has left #postfix
[21:24:25] *** madrescher has joined #postfix
[21:24:26] <sysmonk> SnakeO2: you send a dsn from your server about the delivery, so unless your server is unreliable ...
[21:25:33] <sysmonk> PcPixel: keep the addresses seperate? what do you mean?
[21:25:39] <PcPixel> we relay for like 7 companies
[21:25:45] <sysmonk> PcPixel: so?
[21:25:46] <PcPixel> just to keep the text files seperate for each one
[21:25:51] <sysmonk> we relay for thousands of em :)
[21:25:56] <sysmonk> PcPixel: that's not a problem
[21:25:57] <xpoint> sysmonk, why would anyone send a probe to existing mailbox ?
[21:25:59] <sysmonk> you can have lots of maps
[21:26:05] <PcPixel> i mean it'd be easy to lump them all together back int o a single file
[21:26:08] <sysmonk> xpoint: to know if it exists!
[21:26:24] <xpoint> sysmonk, sure ?
[21:26:37] <sysmonk> PcPixel: you can have relay_recipient_maps = hash:/company1, hash:/company2, hash:/company3
[21:26:46] <PcPixel> oh wow really?
[21:26:50] <sysmonk> yes...
[21:26:55] <PcPixel> i thought that was a one paramtere map
[21:26:57] <xpoint> why not disable *_verify_* then ?
[21:27:33] <PcPixel> yeah that might be an easier check
[21:27:36] *** madrescher has quit IRC
[21:27:37] <PcPixel> cascade the recipient maps
[21:27:41] <PcPixel> its the same file
[21:27:47] <PcPixel> just a differen parameter
[21:27:54] <xpoint> PcPixel, why all that check_recipient tests ?
[21:27:59] *** madrescher has joined #postfix
[21:28:08] <sysmonk> PcPixel: anyway, if you wanted to check the recipient you could have enabled the reject_unverified_recipient
[21:28:11] <PcPixel> xpoint: to thwart the dictionary attack
[21:28:19] <sysmonk> UNLESS that server is also used for outgoing mail
[21:28:26] <xpoint> PcPixel, whant it complitcated add more test just for fun ?
[21:28:27] <PcPixel> sysmonk: yes. uits bidirectional
[21:28:33] <sysmonk> then it sucks a bit
[21:28:44] <PcPixel> xpoint: no. its because im rejecting illegal addresses now
[21:29:03] * sysmonk leaves you to xpoint
[21:29:07] <sysmonk> nobody listens to me :P
[21:29:14] <xpoint> PcPixel, that is better handlede with postfix internal restrickions
[21:29:16] * sysmonk goes to make some tea
[21:29:23] <PcPixel> internal?
[21:29:31] <sysmonk> PcPixel: teh ones i was talking about
[21:29:35] <sysmonk> but you're not listening
[21:29:53] <SnakeO2> sysmonk: sorry, what i mean is I'm sending out a newsletter to a large amount of users. I want to track bouncebacks and failures
[21:29:54] <sysmonk> oh anyway, teatime
[21:30:08] <xpoint> illegal address is not accepted in postfix, if configured correct
[21:30:39] <sysmonk> SnakeO2: stuff like mailing list software supports tracking those down
[21:31:11] <sysmonk> SnakeO2: i don't have anything to do with 'spamming' so can't consult much on that
[21:31:13] <SnakeO2> sysmonk: yes I am using swiftmailer library to send out the mail. It is running through sendmail to send the messages.
[21:31:24] <xpoint> my suggestions is remove check_recipient* and add more test from internal restrictions
[21:31:32] <sysmonk> SnakeO2: no, i'm talking about stuff like majordomo and friends
[21:31:47] <sysmonk> SnakeO2: they est the reply-to or whatever headers to a uniq bounce addie and gather bounces
[21:31:54] <sysmonk> and take out people out of mailing list if needed
[21:32:03] <xpoint> PcPixel, dont make your config one big mess, when you dont know problems it creates
[21:32:25] *** Filbert has quit IRC
[21:32:41] <SnakeO2> sysmonk: ah, that's clever. So they're creating a unique reply-to header for each email sent then checking those accounts periodically to see a bounceback?
[21:33:24] <sysmonk> SnakeO2: no need for seperate accounts
[21:33:25] <xpoint> PcPixel, the local_* is okay, but where is all local created mails gone from eg root ?
[21:33:27] <SnakeO2> sysmonk: would it be possible to just reply-to a single email account, then parse each message for the user's email address,
[21:33:50] <sysmonk> SnakeO2: yeah, i think so, but better consult the way how those softwares work
[21:33:59] <xpoint> PcPixel, test like this should work "sendmail -bv root"
[21:34:00] <sysmonk> i don't know them well, sorry
[21:34:09] <xpoint> PcPixel, did this one fail ?
[21:34:11] *** hparker has joined #postfix
[21:34:43] <xpoint> hparker, hi i got my gentoo desktop back
[21:35:03] <hparker> ;)
[21:35:08] <SnakeO2> sysmonk: thanks
[21:35:12] <SnakeO2> sysmonk: big hep
[21:35:14] <SnakeO2> help*
[21:35:55] *** pirho has joined #postfix
[21:38:23] <PcPixel> 1 sec
[21:40:10] *** meshugga has quit IRC
[21:43:36] <PcPixel> ok back
[21:43:50] <PcPixel> its forwareded in an alias
[21:46:09] <PcPixel> oh nice. ill port the relay maps over
[21:47:38] <xpoint> PcPixel, move reject_unauth_pipelining to line 37 on the paste config
[21:48:07] <PcPixel> ? how can i move it in a postconf
[21:48:37] <xpoint> should we start talk about editors now ? :-)
[21:49:08] <PcPixel> ...
[21:49:13] <PcPixel> postconf -n
[21:49:17] <PcPixel> dumps the parameters out
[21:49:23] <PcPixel> how do i move a parameter from a dump
[21:49:30] <xpoint> man vim
[21:49:38] <PcPixel> i can move it in my main.cf
[21:49:53] <xpoint> yes ist not binnaries
[21:50:05] <PcPixel> i know that
[21:50:12] <PcPixel> i cant move the line a program dumps out for me
[21:50:17] <PcPixel> i can move a line in a file i have control over.
[21:50:44] <xpoint> i cant help you learn how to use a editor
[21:50:48] <sysmonk> :)))
[21:50:50] <sysmonk> buahaha
[21:50:54] <PcPixel> im using an editor right now
[21:50:58] <PcPixel> sysmonk: are you following this?
[21:51:15] <sysmonk> PcPixel: i'll be silent, you chose him not me :)
[21:51:20] <sysmonk> i'll just laugh around :)
[21:51:22] <xpoint> PcPixel, he say he gone make tea, to me aswell :)
[21:51:25] <PcPixel> sysmonk: ok good. cause im laughing
[21:51:26] <sysmonk> and do my own business ;)
[21:52:04] <xpoint> PcPixel, remember one that laught last make be the best
[21:52:20] <PcPixel> and right now i have almost a 90% spam rejection rate
[21:52:25] <sysmonk> my laughter won't stop, so there's no such thing as 'last' ;)
[21:52:26] <PcPixel> with what i have for a postfix config
[21:52:55] <xpoint> PcPixel, that is simple with at empty main.cf
[21:52:57] <sysmonk> PcPixel: go rewrite postconf and make it show what xpoint wants on line 37, always
[21:53:06] <sysmonk> no matter the alphabetical order of the params
[21:53:10] <sysmonk> just make it show on line 37
[21:53:14] <PcPixel> ;)
[21:53:34] <sysmonk> PcPixel: or edit the pastebin and put that thing on line 37
[21:53:43] <PcPixel> lmao. now thats funny
[21:54:10] *** madrescher has quit IRC
[21:54:23] * xpoint just say add more to main.cf to show one know how good one is at configure steps
[21:54:32] *** madrescher has joined #postfix
[21:54:42] * sysmonk has to re-learn english to understand xpoint well
[21:55:24] <sysmonk> PcPixel: i don't get why your posts expire that fast
[21:55:30] *** meshugga has joined #postfix
[21:55:54] <sysmonk> isn't "a day" a minimum TTL for the pastebins on that site?
[21:55:59] *** cpm has quit IRC
[21:56:33] <PcPixel> sysmonkm: i delete them
[21:56:40] <PcPixel> i dont want to leave info lying around
[21:56:53] *** madrescher has quit IRC
[21:57:00] <PcPixel> i just tried the relay map option
[21:57:11] <PcPixel> didnt work
[21:57:16] *** madrescher has joined #postfix
[21:57:22] <PcPixel> i can do them on new lines right? or coma separated
[21:58:30] *** Nathariel has joined #postfix
[21:58:57] <sysmonk> PcPixel: the usual way, comma, space, new liens ( with space first)
[21:59:03] <PcPixel> sysm,onk: wow, check this
[21:59:10] <PcPixel> someone complained about my "spam filtering"
[21:59:14] <PcPixel> so my boss wanted to run a test
[21:59:17] <sysmonk> btw i didn't know you can delete them
[21:59:26] <PcPixel> he had me do: warm_if_reject
[21:59:43] <sysmonk> warn, not warm :P
[21:59:45] <PcPixel> on the reject_unknown_helo_hostname
[21:59:48] <PcPixel> right
[21:59:52] <PcPixel> but guess what
[21:59:54] <PcPixel> one i did that
[21:59:55] <sysmonk> ye?
[21:59:59] <PcPixel> now im seeing spamhaus blocks
[22:00:13] <PcPixel> spamhaus junkmail is coming back in
[22:00:28] <sysmonk> cause it was rejected on reject_unknown_helo_hostname before
[22:00:43] <sysmonk> btw, your boss knows postfix?!
[22:00:43] <sysmonk> ;)))
[22:00:52] *** kenny33 has quit IRC
[22:02:51] <PcPixel> sysmonk: he does now
[22:02:59] <PcPixel> once he saw how rapidly i could cope woith problems
[22:03:04] <PcPixel> and how much crap i could filter with it
[22:03:08] <PcPixel> he got on board FAST
[22:03:28] <sysmonk> ;))
[22:03:36] <PcPixel> aside from a major fubar like today
[22:03:40] <sysmonk> what does your company do?
[22:03:47] <PcPixel> average email correctiontime once we know what the problem actually is
[22:03:50] <PcPixel> has been like 5 minutes tops
[22:03:55] <PcPixel> we're an optics comapny
[22:03:58] <PcPixel> we make precision scanners
[22:03:59] <sysmonk> and how is it called ( if not secret, send me a pm)
[22:04:09] <PcPixel> how is what called
[22:04:14] <sysmonk> company
[22:04:34] <sysmonk> and um, if you're making precision scanners, why do you 'sell' antispam / filtering/ whatever
[22:04:57] <PcPixel> sell?
[22:05:04] * PcPixel looks puzzled
[22:05:44] <sysmonk> dunno, maybe not sell
[22:05:45] <sysmonk> but offer
[22:05:55] <sysmonk> didn't you say you're filtering mail for 7 companies?
[22:05:57] <PcPixel> its the corporate mail server
[22:05:58] <PcPixel> yes
[22:06:02] <PcPixel> my company is the parent company
[22:06:14] <PcPixel> all the mail for every company we own comes through a single mail server
[22:06:20] <sysmonk> ahhh
[22:06:22] <sysmonk> i get it now
[22:06:31] <PcPixel> so we inhgerently have a single point of failure
[22:06:42] <sysmonk> ye, bad bad PcPixel :)
[22:07:31] * sysmonk went to the 'careers' page
[22:08:27] <sysmonk> doh, no sysadmin positions :(
[22:10:10] <PcPixel> trust me
[22:10:13] <sysmonk> PcPixel: doesn't your company search for any it-staff ?:P
[22:13:54] <hesco> sysmonk: OK, I spoke with my admin on the remote machine and he's very reluctant to open up his mynetworks setting to a dynamic IP on a spammy cable network for a server which he does not administer. He pointed me back to the transport strategy. Which leaves me back to sorting out this shared keys permission issue again.
[22:14:49] <sysmonk> oh suuuuure, giving out access to a server he doesn't administer is smarter :P
[22:15:10] <sysmonk> and the probability that a guy who'll get your ip in 3 months will try to spam via HIS server is SOO BIG ;)
[22:15:24] <sysmonk> anyway, you haven't showed your script and errors
[22:15:29] <sysmonk> so pastebin those
[22:15:30] <PcPixel> sysmonk: oh go dno
[22:15:47] <hesco> coming your way in a moment
[22:15:53] <hesco> !paste
[22:15:54] <knoba> hesco: "paste" : a way to paste larger amounts of text so that other people can read it. Try http://www.rafb.net/paste/ or http://paste.debian.net/ - Do not forget to tell us the URL where you pasted it.
[22:16:22] <sysmonk> PcPixel: woot?
[22:17:53] <xpoint> postfix must not have mynetworks in main.cf when runnied on dynamic ip
[22:18:57] * sysmonk thinks about ignoring xpoint some day
[22:19:10] <xpoint> sysmonk, he
[22:19:48] *** Ryushin has joined #postfix
[22:20:18] <xpoint> sysmonk, its not clever to have 123.123.123.123 when ip changes
[22:21:05] *** Nathariel has quit IRC
[22:21:55] <PcPixel> im back
[22:22:13] <PcPixel> my company doesnt search out for talent. that would be counter productive
[22:22:57] <sysmonk> hah ;)
[22:23:13] <sysmonk> i can try to look dumb :P
[22:24:01] <PcPixel> even then
[22:24:02] <PcPixel> lol
[22:24:12] <PcPixel> i added the relay_recipient_maps using the file si had
[22:24:14] <PcPixel> files i
[22:24:16] <sysmonk> believe me, i can look reeeaaaallly dumb
[22:24:17] <PcPixel> and it rejected email
[22:24:38] <sysmonk> PcPixel: cause you have lots of unneeded stuff in your restrictions
[22:24:46] *** robtone_ has quit IRC
[22:24:58] <PcPixel> like?
[22:25:04] <PcPixel> im open for criticism
[22:25:11] <sysmonk> i'd offer you to start up vmware or whatever
[22:25:16] <sysmonk> and try to reconfig postfix
[22:25:21] <sysmonk> so you won't loose any mails
[22:25:25] <PcPixel> ah ok
[22:25:26] *** robtone_ has joined #postfix
[22:25:28] <PcPixel> yeah i can do that tomorrow
[22:25:31] <sysmonk> PcPixel: i'd start from _very_ begining :)
[22:25:34] <PcPixel> its too late in the day
[22:25:41] <hesco> sysmonk: try this: http://rafb.net/p/sKLOqG30.html
[22:25:41] <sysmonk> 11:25 pm here
[22:25:48] <PcPixel> its almost 5
[22:25:52] <PcPixel> im burnt out form my weekend
[22:25:55] <PcPixel> and this happening
[22:25:58] <PcPixel> im just exhausted
[22:26:26] <PcPixel> and yes, i totally agree my server can be turned better. no argument at all
[22:26:31] <PcPixel> but compared to what we were doing before
[22:26:35] <PcPixel> we're in a MUCH better place
[22:27:03] <PcPixel> oh and to answer an earlier question sysmonk
[22:27:08] <PcPixel> once you do a post to pastebin
[22:27:17] <PcPixel> the resulting page, if you tell it to remember you, has a link for "delete me"
[22:27:35] <PcPixel> so if you set the time out to a day, and want it gone sooner you can delete it
[22:28:12] <PcPixel> sysmonk: would you say restore this machine into a VM or just start w an empty postfix system
[22:28:14] <sysmonk> PcPixel: ah, i never used the remember me, maybe that's why :P
[22:29:30] <PcPixel> could be :)
[22:30:09] *** amrit|zzz is now known as amrit|wrk
[22:30:52] <PcPixel> yeah something in that bad_senders file i created is an issue...
[22:31:01] <PcPixel> but i agree
[22:31:07] <PcPixel> def could stand to go through again and tighten it up
[22:32:11] <PcPixel> i def want to get the relay_Recipient_map working
[22:34:09] *** jellis-real has quit IRC
[22:36:09] <SnakeO2> what is the difference between return-path and reply-to headers?
[22:36:42] *** KaV has joined #Postfix
[22:36:56] <KaV> hello i have a very basic question
[22:37:13] <Trengo> if im seeing it right, reply-to are meant for MUA, when the user hits the "reply" button
[22:37:20] <KaV> my isp is not giving me static address
[22:37:28] <Trengo> return-path is for the server, when it cant deliver to recipient
[22:37:30] <KaV> and i configured dyndns for my computer
[22:37:37] <Trengo> so it knows who to return it to
[22:37:46] <KaV> can i install the postfix so
[22:37:56] <xpoint> KaV, yes
[22:38:06] <KaV> i recieve mails to my computer without using any other server ?
[22:38:24] <Trengo> receive yes, you may have problems sending
[22:38:38] <KaV> so when someone sends an email to admin at kav dot dyndns.org ill get it
[22:38:53] <KaV> but if i send the address that sent the mail will be the same ?
[22:38:55] <xpoint> KaV, no, you need to use dyndns for this
[22:39:04] <hesco> KaV: if the mx records are set to route mail your way
[22:39:19] <hesco> This is a DNS issue.
[22:39:25] *** dogmeat has joined #postfix
[22:39:28] <KaV> ok
[22:39:34] <KaV> i tried to follow this guide
[22:39:34] <KaV> http://gentoo-wiki.com/HOWTO_Email_System_for_the_Home_Network
[22:39:37] <xpoint> hesco, no wroung, do not put mx to point to a dyn ip
[22:39:39] <hesco> What happens with the mail once its routed to your local box is a postfix issue
[22:40:04] <KaV> but i cant configure the domain name
[22:40:14] <SnakeO2> Trengo: thanks!
[22:40:53] <xpoint> KaV, show postconf -n, i know gentoo, so if you follow that guide it should work
[22:41:23] <KaV> my most important issue
[22:41:41] <KaV> is that i never used domain name before
[22:41:46] <Trengo> SnakeO2 chers
[22:41:54] <KaV> i dont even know how it works..
[22:42:05] <KaV> but i guess that it have to be used now
[22:42:43] <xpoint> remember to update "postconf -e 'proxy_interfaces=<wan-ip'" in the dyndns update script, this is the most important to remember
[22:43:32] <KaV> xpoint: im in a basic stage of installing
[22:43:43] <KaV> so for now i save what you told me to remember
[22:43:47] <KaV> but i need to know
[22:43:53] <KaV> how to handle the domain name
[22:43:55] <hesco> xpoint: I usually use dyndns to access the home server and to update DNS as needed. Then I create cname pointers to the dyndns names. What is the issue with pointing an mx at a properly updated dyndns IP?
[22:43:56] <KaV> on the guides
[22:47:10] <xpoint> KaV, the guide miss the proxy_interfaces step
[22:47:31] *** adaptr has quit IRC
[22:47:39] <KaV> can you give me an other guide
[22:47:42] *** adaptr has joined #postfix
[22:47:46] <KaV> that should work on gentoo ?
[22:48:03] <xpoint> KaV, no this guide is the only good one to follow
[22:48:19] <KaV> so can you please let me know how to handle the domain name ?
[22:48:38] <KaV> i dont have on my computer a domain name
[22:48:50] <xpoint> just make sure proxy interfaces always have the current wan ip
[22:49:40] <KaV> yes but on the guide keeps configuring the domain name... is domain name = kav.dyndns.org ?
[22:49:45] <hesco> KaV: what does cat /etc/hostname say?
[22:49:47] <xpoint> and this ip must not be in mynetworks in main.cf, mynetworks should not even be defined when running on dynamic ip
[22:50:21] <hesco> KaV: what does `cat /etc/hostname` say?
[22:50:32] <KaV> hesco: on gentoo is /etc/hosts
[22:50:37] <KaV> my hostname is gentoobox
[22:50:48] <xpoint> KaV, domain name is the domain name where you want bounces sent to
[22:50:51] <PcPixel> ok time to head home
[22:51:01] <hesco> that is your host, now do you own a domain?
[22:51:02] <PcPixel> sysmonk: thanks for the help there :)
[22:51:04] *** PcPixel has quit IRC
[22:51:26] <KaV> no i dont is small network
[22:51:29] <KaV> 2 computers and a router
[22:51:42] <xpoint> gentoobox.localhost.localdomain
[22:51:45] <KaV> my dns/gateway is 192.168.1.254
[22:51:56] <KaV> gentoobox.unknown.domain
[22:52:10] <xpoint> add it to /etc/hosts
[22:52:23] <KaV> Gentoobox ~ # domainname
[22:52:25] <KaV> (none)
[22:52:47] <KaV> # IPv4 and IPv6 localhost aliases
[22:52:49] <KaV> 127.0.0.1 localhost Gentoobox
[22:52:51] <KaV>
[22:53:03] <xpoint> confure gentoo to have gentoobox.localhost.localdomain
[22:53:21] <hesco> an example of a domain name is: dyndns.org.
[22:53:37] <hesco> In a domain you can have multiple 'hosts'.
[22:53:49] <KaV> aright but when i configure to set a domain name
[22:53:50] <xpoint> hesco, yes , but he does not have to have it in the box
[22:54:06] <KaV> to set the domain name i must add to the net.lo script
[22:54:26] <KaV> when i set this
[22:54:33] <KaV> #dns_domain_lo="kav.homelinux.org"
[22:54:49] <hesco> sysmonk: try this: http://rafb.net/p/sKLOqG30.html, any feedback on that, please? What is this permissions issue about?
[22:55:01] <KaV> the script writed on /etc/resolv.conf domain kav.homelinux.org
[22:55:18] <KaV> and deletes the nameserver 192.168.1.254
[22:55:37] <KaV> so i dont get a resorv
[22:56:05] <xpoint> KaV, you use dhcp from your isp ?
[22:56:13] <KaV> no
[22:56:18] <KaV> ohh isp ?
[22:56:23] <KaV> or the router ?
[22:56:34] <KaV> my isp i think is dhcp
[22:56:35] <xpoint> yes one of them
[22:56:42] <KaV> so i always get random wan ip
[22:56:50] <KaV> but on my local network
[22:56:54] <KaV> i get static
[22:57:00] <KaV> 192.168.1.1
[22:57:01] <xpoint> yes random since you do not have static ip
[22:57:06] <KaV> yeap
[22:57:21] <sysmonk> sorry i completely forgot about you hesco
[22:57:25] *** ranzes has quit IRC
[22:57:56] *** rootsvr has joined #postfix
[22:58:19] <KaV> so whenever i try to setup the domain name to be something on /etc/conf.d/net
[22:58:31] *** rootsvr has quit IRC
[22:58:44] <KaV> this script deletes on the file /etc/resolv.conf the nameserver
[22:58:58] <KaV> and adds domain "whaever"
[22:58:58] <sysmonk> hesco: don't see what permissions are you talking about
[22:59:12] <sysmonk> hesco: where did you see permissions problem in that pastebin?
[22:59:13] *** rootsvr has joined #postfix
[23:02:05] <xpoint> KaV, /etc/conf.d/domainname have as content ?
[23:02:25] <KaV> no
[23:02:35] <xpoint> KaV, no what ?
[23:02:41] <KaV> dont have the file
[23:03:13] <KaV> i have never configured a domain name
[23:04:19] <xpoint> KaV, emerge -av net-tools
[23:04:50] <hesco> sysmonk: So reading through that paste again, what exactly does this mean? Miscellaneous failure No credentials cache found.
[23:05:07] <hesco> Is that to say that it is not finding the .ssh/authorizedkeys2 on the remote machine?
[23:05:14] <KaV> xpoint: i already got it installed
[23:05:20] <KaV> have u got gentoo as well ?
[23:05:22] <hesco> because that file is there, perms: 644, owned by the user designated in the ssh command.
[23:05:30] <KaV> want me to paste you the net.eth1 ?
[23:05:32] <xpoint> KaV, have you 1.60 ?
[23:05:38] <KaV> yes
[23:05:47] <xpoint> remerge it
[23:05:51] <KaV> ok
[23:06:06] <KaV> on the way... compiling now
[23:06:17] <KaV> do u need the net.eth0
[23:06:20] <KaV> and net.lo ?
[23:06:23] <KaV> compile done
[23:06:28] <xpoint> that file is part of net-tools
[23:07:01] <KaV> no is not giving me this file
[23:07:06] <xpoint> yes bot is needed to be run
[23:07:16] <KaV> Gentoobox conf.d # cat /etc/conf.d/domainname
[23:07:18] <KaV> cat: /etc/conf.d/domainname: No such file or directory
[23:07:19] <xpoint> else no network works
[23:07:20] <KaV>
[23:07:49] <xpoint> wierd
[23:07:57] <KaV> xpoint: i think
[23:07:59] <sysmonk> hesco: that looks like gssapi stuf
[23:08:03] <KaV> this file is prodused
[23:08:12] <KaV> when you configure a domain name
[23:08:21] <KaV> for me to configure the domain name
[23:08:25] <KaV> i need to add it
[23:08:31] <KaV> to /etc/conf.d/net
[23:08:45] <xpoint> KaV, ask in a gentoo irc channel about why this is missing
[23:08:53] <KaV> config_eth0=("192.168.1.1 netmask 255.255.255.0 brd 192.168.1.255")
[23:08:55] <KaV> routes_eth0=("default via 192.168.1.254")
[23:08:57] <KaV> #dns_domain_lo="kav.homelinux.org"
[23:08:59] <KaV>
[23:09:00] *** tshine has joined #postfix
[23:09:13] <sysmonk> hesco: also, try using -T -o GSSAPIAuthentication=no
[23:09:32] <xpoint> KaV, but this is not needed behind a router with that in net file
[23:09:49] <hesco> what is gssapi?
[23:09:57] <xpoint> config_eth0=("dhcp")
[23:10:06] <xpoint> should to
[23:10:09] <sysmonk> hesco: kerberos
[23:10:10] <xpoint> do
[23:10:12] <KaV> no i need static on my lan
[23:10:15] <KaV> but ill test
[23:10:21] <KaV> it to check if ill get the file
[23:10:27] <hesco> where would I put that? main.cf?
[23:10:36] <sysmonk> hesco: in your ssh command ;)
[23:10:38] <xpoint> KaV, this should be configured to static in you router :)
[23:10:49] <hesco> ok, trying that now
[23:11:33] <KaV> so you think is better to set dhcp on my gentoo configuration but set on my router to set me always on a static 192.168.1.1 address ?
[23:11:52] <xpoint> KaV, dhcp is your friend on lan
[23:12:22] <KaV> ill also need to install dhcp
[23:12:27] <KaV> emerge it
[23:12:31] <KaV> give me a sec
[23:12:32] <xpoint> yep
[23:12:52] <xpoint> just dont start a dhcp server :)
[23:13:05] <xpoint> you only need the client
[23:13:13] <KaV> yes emergeing it now
[23:13:44] <KaV> by the way my router is very stupid BT if you know...
[23:13:59] <KaV> and i hate it acts really bad on dhcp
[23:14:09] <xpoint> KaV, nope i do not know stupid routers
[23:14:39] <xpoint> KaV, why not make a better router with gentoo ?
[23:14:55] <KaV> xpoint: im not that advanced user
[23:15:14] <xpoint> KaV, its not avanced to make one
[23:15:17] *** Landon_ has joined #postfix
[23:15:34] <xpoint> 2 nics, 2 network, simple
[23:15:55] <hesco> sysmonk: ok, take a look at this, then: http://rafb.net/p/QNRfM141.html.
[23:16:17] *** tshine has quit IRC
[23:16:18] *** cilly has quit IRC
[23:16:18] *** pulsar has quit IRC
[23:16:18] *** Nockian has quit IRC
[23:16:18] *** Radiance has quit IRC
[23:16:18] *** dragonheart has quit IRC
[23:16:18] *** VaNNi has quit IRC
[23:16:18] *** Landon has quit IRC
[23:16:18] *** AllenJB has quit IRC
[23:16:18] *** Silowyi has quit IRC
[23:16:18] *** mXr has quit IRC
[23:16:18] *** chrisq has quit IRC
[23:16:18] *** _bt has quit IRC
[23:16:18] *** echinos has quit IRC
[23:16:19] *** Flobbie has quit IRC
[23:16:22] *** Landon_ is now known as Landon
[23:16:32] *** Aurica has joined #postfix
[23:16:32] *** tshine has joined #postfix
[23:16:32] *** cilly has joined #postfix
[23:16:32] *** pulsar has joined #postfix
[23:16:32] *** Nockian has joined #postfix
[23:16:32] *** Radiance has joined #postfix
[23:16:32] *** dragonheart has joined #postfix
[23:16:32] *** AllenJB has joined #postfix
[23:16:32] *** Silowyi has joined #postfix
[23:16:32] *** mXr has joined #postfix
[23:16:32] *** echinos has joined #postfix
[23:16:32] *** Flobbie has joined #postfix
[23:16:32] *** _bt has joined #postfix
[23:16:32] *** chrisq has joined #postfix
[23:16:34] *** |KaV| has joined #postfix
[23:16:37] *** VaNNi has joined #postfix
[23:16:37] <sysmonk> keffer: try removing those -vvv
[23:16:37] <sysmonk> their a bit too much :)
[23:16:44] *** Flobbie has quit IRC
[23:16:48] <|KaV|> ok soz i had to restart the net so i get the dhcp running
[23:17:05] *** Flobbie has joined #postfix
[23:18:05] *** AllenJB has quit IRC
[23:18:08] *** AllenJB has joined #postfix
[23:18:40] <|KaV|> so now is running on dhcp
[23:20:32] <hesco> sysmonk: I removed verbosity switches from ssh command and now can see the error reading: Permission denied (publickey,keyboard-interactive)., details at: http://rafb.net/p/pJJbHq11.html.
[23:20:43] <sysmonk> hesco: add one -v
[23:20:49] <hesco> coming at you
[23:20:50] *** tshine_ has joined #postfix
[23:21:23] *** tshine has quit IRC
[23:21:27] *** tshine_ is now known as tshine
[23:22:12] *** pulsar has quit IRC
[23:22:16] *** pulsar has joined #postfix
[23:22:44] <hesco> ok, here you are: http://rafb.net/p/C5vEZy32.html
[23:23:54] *** goldfischli has joined #postfix
[23:23:55] *** EasilyOdd has joined #postfix
[23:24:05] <goldfischli> nice eveneing everybody
[23:24:42] *** adie_ has joined #postfix
[23:24:47] <goldfischli> does transport_maps effects on local_recipient_maps?
[23:25:36] <goldfischli> tried local_recipient_maps at home.. works... at works it doesn't works (can send emails to whatthehell at foobar dot com)
[23:26:30] *** Silowyi has quit IRC
[23:26:30] *** Aurica has quit IRC
[23:26:30] *** chrisq has quit IRC
[23:26:30] *** Nockian has quit IRC
[23:26:30] *** _bt has quit IRC
[23:26:30] *** echinos has quit IRC
[23:26:30] *** mXr has quit IRC
[23:26:31] *** Radiance has quit IRC
[23:26:31] *** dragonheart has quit IRC
[23:26:31] *** cilly has quit IRC
[23:26:31] *** VaNNi has quit IRC
[23:28:36] *** Radiance has joined #postfix
[23:29:30] *** adie has quit IRC
[23:29:37] *** adie_ is now known as adie
[23:31:46] <hesco> yowsa, sysmonk: you still out there? I know you mentioned it was late where you are at.
[23:33:31] *** cilly has joined #postfix
[23:33:42] *** KaV has quit IRC
[23:34:55] *** Draecos_ has quit IRC
[23:37:27] *** gonewestcoast_ has joined #postfix
[23:39:48] *** Odd_Bloke has quit IRC
[23:39:56] <SnakeO2> I'm a bit confused. I hear about sendmail vs postfix... and that postfix is easier to configure. But I thought postfix and sendmail are the same thing? ie postfix uses a 'sendmail' command
[23:40:01] <SnakeO2> can someone clear this up for me please?
[23:40:12] <pickcoder> "sendmail" here is an aliasing script
[23:40:21] <pickcoder> sendmail is also an MTA that's not Postfix
[23:40:47] <pickcoder> man sendmail
[23:41:09] <xpoint> SnakeO2, we all need sendmail no matter what mta we install
[23:42:24] *** Nockian has joined #postfix
[23:42:24] *** dragonheart has joined #postfix
[23:42:24] *** mXr has joined #postfix
[23:42:24] *** chrisq has joined #postfix
[23:42:48] *** GoGi has joined #postfix
[23:43:27] <pickcoder> ~sendmail command line tool
[23:45:01] *** Odd_Bloke has joined #postfix
[23:45:02] *** echinos has joined #postfix
[23:47:22] *** gcleric has joined #postfix
[23:47:34] *** rootsvr has quit IRC
[23:53:52] *** _bt has joined #postfix
[23:54:52] *** VaNNi has joined #postfix
[23:55:23] *** gonewestcoast has quit IRC
[23:55:40] *** Silowyi has joined #postfix
[23:55:52] *** McJerry has joined #postfix
[23:57:23] <sysmonk> hesco: still here but going to sleep already
[23:57:36] *** javagamer has quit IRC
[23:57:56] <sysmonk> hesco: next time mention my nick at the begining while saying something, that way i'll see a notice that somebody talks to me :)
[23:58:16] *** j_s has quit IRC
[23:58:59] <sysmonk> hesco: i can't see the full log in your output
[23:59:10] <sysmonk> hesco: i'd redirect the output to the file
[23:59:14] <sysmonk> that is, the ssh output
[23:59:27] <sysmonk> ( both STDERR and STDOUT )
[23:59:49] <sysmonk> anyway, i'm going to sleep, so sorry can't help right now
top

   August 4, 2008  
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >