August 20, 2008  
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31

[00:03:40] <adaptr> rebooting sexchange...
[00:09:42] <pickcoder> n8rrv: that's not really a good solution for a gateway
[00:10:03] <pickcoder> it should only accept mail for users @ your domain
[00:10:35] <pickcoder> NIS and LDAP are options
[00:10:43] <rob0> !verify
[00:10:43] <knoba> rob0: "verify" : Sender or recipient address verification features: http://www.postfix.org/ADDRESS_VERIFICATION_README.html
[00:10:47] <adaptr> n8rrv: set it up so it pulls addresses from AD
[00:11:03] <adaptr> AD will then pull the addresses out of its huge ass
[00:11:12] <adaptr> erm,. LDAP database, thingy, like
[00:11:30] <rob0> AD-aptr
[00:11:37] <pickcoder> heh
[00:12:05] <adaptr> damn youse!
[00:17:46] *** Zblakany has quit IRC
[00:32:31] <n8rrv> Tnx for the help
[00:34:20] *** diqpib has quit IRC
[00:39:35] <lambda> hi, regarding /etc/aliases file with typic assignment user:adress'
[00:40:26] <lambda> a certain class of user have an adress delegated to a stubborn MX who doesn't support the ***SPAM*** rewrited headers
[00:41:13] <lambda> it causes me to get blacklisted every time i relay a mail tagged with these classic header (xspam score > 4.3)
[00:41:51] <adaptr> blacklisted by whom ?
[00:42:33] <lambda> by the MX the mail are forwarded to
[00:42:46] <adaptr> yes.. WHO
[00:42:49] <adaptr> and WHY
[00:43:05] <rob0> WHAT WHERE and HOW
[00:43:26] <lambda> status=deferred (host mx2.free.fr[212.27.42.56] refused to talk to me: 500 Too many spams from your IP (195.202.0.166), please visit http://postmaster.free.fr/)
[00:44:01] <adaptr> free.fr eh ? utter useless fuckfrogs
[00:44:11] <rob0> 500 is not a valid banner
[00:44:20] <lambda> oh!
[00:44:29] <lambda> nothing to deal with the header ?
[00:44:58] <rob0> But, if they're blocking you, you can either find and fix the problem or just not send mail to them.
[00:45:56] <lambda> second issue can't be planned
[00:46:25] <lambda> all the admins are hebergated by this non-cooperative MailExchanger
[00:46:43] <lambda> at least on the host i am in charge
[00:47:19] <adaptr> 303 parse error on line 1: hebergated
[00:47:51] <lambda> sorry (non native speaker XD)
[00:47:52] <Trengo> pay someone to let you relay through
[00:48:14] <lambda> i use the classic postconf -d banner variable
[00:48:15] <lambda> smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
[00:48:16] <Trengo> isp/hosting
[00:50:37] <lambda> what's wrong with my banner ?
[00:51:31] <lambda> I don't embrace the fact of paying somebody else for this issue
[00:51:57] <n8rrv> Ok, next question... I don't know how my system is running...  Imcoming mail goes thru postfix to spamassassin, then spamassassin sends (via sendmail) to my Exchange server?  Or is it the other way, spamassassin gets the mail, sends to postfix, and postfix sends to mailserver?
[00:52:10] <n8rrv> I suspect postfix is sending it to spamassassin?
[00:52:36] <n8rrv> Then again, I could be really in the dark here (most likely scenario)
[00:52:56] <rob0> Is n8rrv asking us to guess? If so, why?
[00:53:05] <n8rrv> I'm asking what is typical?
[00:54:13] <n8rrv> (Yes, I'm googling my keister off)
[00:54:14] <pickcoder> spamassassin is not an MTA
[00:54:19] <rob0> amavisd-new as a content_filter is a common and good choice for content filtering.
[00:54:19] <pickcoder> postfix is
[00:54:22] <rob0> !google
[00:54:23] <knoba> rob0: "google" : Those who use Google before reading the Postfix documentation, if fortunate, end up at http://www.postfix.org/ . If not, they end up in a jumble of bad questions, misleading or wrong answers, and outdated information.
[00:54:33] <n8rrv> Mass transit Authority :)
[00:54:50] *** githogori has quit IRC
[00:54:54] <pickcoder> sendmail is a compatibility script
[00:55:08] <pickcoder> and it also a totally different MTA
[00:55:15] <pickcoder> ~also is
[00:55:33] <pickcoder> home time
[00:55:36] *** pickcoder has quit IRC
[01:00:25] *** roe_ is now known as roe-
[01:01:15] <lambda> [00:45]<rob0> But, if they're blocking you, you can either find  and fix the problem
[01:02:02] <lambda> i set a @spam_tag2_level_maps  rule for all the users hosted by free.fr and who match the value of sa_kill_level_deflt
[01:02:46] <lambda> but its dirty
[01:04:21] <lambda> ...
[01:05:21] <lambda> how acting at smtp level (when the RCPT TO is rewrited to the  utter useless fuckfrogs MX   ?
[01:05:41] <adaptr> who does the rewriting ?
[01:05:54] <lambda> the trivial-rewrite daemon
[01:06:18] <adaptr> then it has nothing to do with smtp
[01:06:31] <adaptr> which is by definition the last thing postfix does with you rmessage
[01:06:46] *** pingouin_ has joined #postfix
[01:07:29] <lambda> no i am wrong | it occured at smtp level because log tell me:
[01:07:54] <adaptr> address rewriting does NOT occur anywhere near smtp
[01:08:03] <adaptr> only one thing occurs in smtp
[01:08:10] <adaptr> surprisingly, it's SMTP
[01:09:40] <lambda> ok
[01:10:04] <lambda> and working at content-filter side as i pretend to do
[01:10:09] <lambda> is it useless
[01:10:59] <lambda> the problem come from a mysql database which can be dynamically updated by new subscriber who have choosen the evil MX
[01:11:22] <lambda> and targeted them could be a bane
[01:11:27] <adaptr> so toss them out of the database
[01:11:33] <lambda> looooooooool
[01:11:42] <adaptr> I would
[01:11:52] <adaptr> abusers are abusers, clients or not
[01:12:56] <lambda> i can't get rid of users pretending their host does'nt match my 'phylosophy'
[01:16:14] *** n8rrv has quit IRC
[01:19:35] *** jakehilton has quit IRC
[01:20:38] <lambda> in fact noone of them can assume to be client or abuser since this MX is involved in nothing professionnal but the widespreading GNU/linux communities
[01:21:07] <lambda> and choosing free.fr when you are a linux hobbyist is quite common :)
[01:21:21] <lambda> at least in france
[01:22:06] *** roe- is now known as roe_
[01:22:26] <lambda> so how getting started for fixing this please
[01:22:32] <adaptr> yes, I suspect that tha is exactly the problem
[01:22:40] <adaptr> they're hobbyists
[01:22:47] <lambda> and i am one too
[01:23:21] <adaptr> the point being, public MTAs should not be run by hobbyists
[01:24:48] <lambda> it belongs to a very restricted elite class ...
[01:25:07] <lambda> who pretends ruling the international network ?
[01:25:22] *** pingouin has quit IRC
[01:25:42] <adaptr> what is "it" in this context ?
[01:25:55] <adaptr> "the international networks" also baffles me
[01:28:27] <lambda> hey guys my IP is not blacklisted anymore on http://postmaster.free.fr
[01:28:29] <lambda> \o/
[01:28:31] <rob0> Email is an awful mess. It has 2 main enemies: 1. Spammers; 2. People who want to get rid of spam but don't understand much about it.
[01:28:40] *** bimbomio has quit IRC
[01:28:57] <lambda> some kind of white magic has been cast
[01:29:17] <lambda> since i was speaking the curse vanish
[01:29:45] *** skyweb has quit IRC
[01:29:58] <adaptr> if you're back to relaying to free.fr, I'd say it was black magic
[01:30:25] <lambda> maybe so
[01:30:36] *** tkooda has joined #postfix
[01:32:49] *** tkooda_ has quit IRC
[01:33:31] <lambda> can i request your knowledge for "rating" smtpd-restrictions ?
[01:33:43] <lambda> some guys tell me it is too agressive
[01:34:34] <adaptr> why would they tell you this ?
[01:35:37] <lambda> because i set smtpd_client_restrictions
[01:35:49] <lambda> and smtpd_sender_restrictions
[01:35:51] <adaptr> to what ?
[01:36:10] <lambda> some people doesn't fill these settings
[01:36:11] *** cyr- has joined #postfix
[01:36:14] <lambda> http://rafb.net/p/2mPk1r54.html
[01:38:25] <lambda> should i comment out: reject_rbl_client zen.spamhaus.org,
[01:39:17] <adaptr> why not, it only stops about 90% of your spam
[01:39:35] * adaptr whispers to rob0 can you believe this guy ?
[01:39:48] <adaptr> was that too loud ?
[01:39:57] <adaptr> is my face red ?
[01:42:31] *** car_watt has quit IRC
[01:42:54] *** tkooda has quit IRC
[01:43:26] *** Tykling has left #postfix
[01:44:31] *** tkooda has joined #postfix
[01:48:18] *** archangel7863 has quit IRC
[01:57:45] <rob0> Without Zen you'll be inundated.
[01:59:20] <lambda> a guy on #amavis tell me rbl black lists suck in depth
[01:59:41] <lambda> so i am reticent
[02:02:02] <rob0> Yes, there is a lot of ignorant FUD.
[02:02:43] <magyar> i am runing postfix in chroot, was wondering if anyone is using sasl with courier-authdaemond and how were they able to make the socket in chroot
[02:03:31] <rob0> Put everything in the chroot that Postfix will need. Symlinks outside the chroot don't work.
[02:04:04] * shasta instead of rejecting clients found in RBLs, greylists them
[02:04:25] <magyar> k, but what about courier-imap it needs the socket in the regular place
[02:04:45] <shasta> magyar, bind mounts are your friend
[02:04:55] <rob0> An alternative, if you can't figure out how to chroot, take it out of the chroot.
[02:05:09] <shasta> magyar, man mount, see --bind
[02:06:30] <magyar> shasta: true that, thanks amigo
[02:12:08] *** pitakill has joined #postfix
[02:15:08] *** tkooda has quit IRC
[02:15:45] *** i10neorg has joined #postfix
[02:19:23] *** bizhat has quit IRC
[02:22:33] *** mark-use_ has joined #postfix
[02:34:07] *** ming_zym has joined #postfix
[02:39:56] *** CrazyFoam has joined #postfix
[02:39:59] *** mark-use has quit IRC
[02:50:44] *** pirho has quit IRC
[02:51:33] <snadge> is spamhaus working at the moment?
[02:51:52] *** gonewestcoast has joined #postfix
[02:57:48] <vice-versa> snadge: kind of vague
[02:58:44] <vice-versa> zen.spamhaus.org is responding to rbl queries here if that's what you're asking
[03:09:57] <snadge> i asked in here the other day about some messages i was getting in my mail log
[03:10:11] <snadge> wasn't sure if thats a normal spamhaus message or whether it wasnt working
[03:11:46] *** okibisan has joined #postfix
[03:11:50] <okibisan> hello
[03:11:56] <okibisan> i have a problem with imap
[03:12:07] <okibisan> it hangs at "Receiving Folders"
[03:13:06] <Dominian> Well, that's not postfix...
[03:13:11] <okibisan> i know
[03:13:18] <okibisan> but i can't seem where to ask for uwimapd
[03:13:24] <Dominian> heh
[03:13:33] <Dominian> I'd use dovecot personally
[03:13:41] <okibisan> i used to use courier
[03:13:57] <snadge> so did everyone until courier changed the config format
[03:14:04] <okibisan> they did?
[03:14:04] <snadge> and most people bailed to dovecot :p
[03:14:34] <snadge> yeah i used to use courier.. then i received an updated version.. from 3 to 4 or something like that
[03:14:34] <okibisan> i didn't know that
[03:14:41] <okibisan> wow
[03:14:47] <snadge> and it just totally broke everything
[03:14:51] <Dominian> dovecot is very very easy
[03:14:56] <Dominian> VERY easy
[03:15:03] <snadge> and i couldn't find documentation on how to convert my old config to the new config
[03:15:06] *** pitakill has quit IRC
[03:15:23] <okibisan> is it an imapd?
[03:15:29] <snadge> and basically everything on the net said "f#@! courier.. use dovecot" so i did.. and like Dominian said.. its easy
[03:15:29] <okibisan> never used dovecot, sorry
[03:15:39] <snadge> its imap, and pop
[03:15:42] <Dominian> aye
[03:15:52] <okibisan> oh, both
[03:15:53] <okibisan> cool
[03:16:08] <snadge> and it will do the encryptiony stuff too
[03:16:14] <Dominian> yep
[03:16:17] <Dominian> along with cram-md5 etc
[03:16:24] <Dominian> although i have yet to figure out cram-md5
[03:16:26] <Dominian> heh
[03:16:32] <snadge> without having to have a phd in ssl certificates
[03:16:40] <okibisan> i don't need ssl
[03:16:54] <Dominian> okibisan: using imap just for webmail?
[03:17:00] <snadge> i use it at work... because we dont use gpg
[03:17:13] <okibisan> no, my smartphone
[03:17:14] <okibisan> lol
[03:17:14] <snadge> and i use imap remotely, so yeah.. ssh is kind of important :P
[03:17:26] <snadge> ssl even
[03:17:37] <okibisan> i want to sync my phone with my email, which pop can't do
[03:17:45] <snadge> anyway i went to check my mail logs for the weird spamhaus messages that we've been getting for weeks.. and they've stopped :P
[03:18:08] <thumbs> seekwill must have deleted them
[03:18:35] <snadge> warning: 4.17.38.79.sbl.spamhaus.org: RBL lookup error: Host or domain name not found. Name service error for name=4.17.38.79.sbl.spamhaus.org type=A: Host not found, try again
[03:18:48] *** pitakill has joined #postfix
[03:19:07] <snadge> basically im trying to figure out if that means that spamhaus isnt working.. or that host isnt a spam host according to spamhaus, because its not in their dns
[03:20:07] <snadge> i just see "warning" and "error" and assume something is wrong .. but having a very vague idea of how it works suggests that may be its way of saying that everything is working fine :P
[03:22:35] <vice-versa> snadge: what was in your logs?
[03:22:45] <okibisan> that was easy
[03:22:45] <okibisan> thanks for the heads up!
[03:23:07] <thumbs> okibisan: you're done already?
[03:23:12] <thumbs> wow.
[03:23:55] <Dominian> snadge: Ummm.. you'll usually see that if you're quering spamhaus directly far too often
[03:24:01] <Dominian> how many emails a day does your server handle?
[03:24:06] <vice-versa> snadge: they have been known to block specific hosts from querying their dnsbls if they feel they are abusing their usage policies
[03:24:20] <Dominian> yep
[03:24:41] <Dominian> and a "work-a-round" for that is to put a caching name server ON the postfix server
[03:28:27] <snadge> i told the boss we should run dnsmasq .. and hes like nah
[03:28:33] <snadge> but what would i know hey ;)
[03:29:18] <snadge> caching dns will only help if we repeatedly get spam from the same ips though?
[03:29:41] <snadge> we're really not that high volume
[03:30:53] <Dominian> possibly
[03:31:09] <Dominian> but I've noticed an increase when querying spamhaus.. increase in speed that is
[03:31:49] <vice-versa> even at that, running a default resolver config on any mta isn't a good idea
[03:33:08] <snadge> well it points to a local primary and secondary obviously
[03:34:05] <vice-versa> yeah, not very optimal to say the least
[03:36:44] <vice-versa> at the very least you should be using something like, options rotate timeout:1 attempts:3 with 3 nameservers preferably on different networks in resolv.conf
[03:38:00] <Dominian> eh it works for me
[03:38:22] <Dominian> and the only thing that is allowed to "resolve" to dnsmasq is localhost... it doesn't serve any DNS information to anyone else
[03:43:53] *** amrit|wrk is now known as amrit|bbl
[03:49:00] <snadge> cool.. i'll install dnsmasq
[03:50:22] *** felix-da-catz_zz has quit IRC
[03:57:48] *** mavrick61 has quit IRC
[03:58:07] *** i10neorg has left #postfix
[03:58:37] *** boink__ has joined #postfix
[03:58:55] *** mavrick61 has joined #postfix
[04:03:26] *** mikeb99 has joined #postfix
[04:10:56] *** raz has quit IRC
[04:10:56] *** boink__ is now known as raz
[04:31:46] <okibisan> oh hey
[04:31:58] <okibisan> my local box can connect to the imap, but my phone can't
[04:32:07] <okibisan> same issue as with uwimapd
[04:33:45] *** m0f0x has joined #postfix
[04:34:16] *** lambda has quit IRC
[04:37:42] <snadge> dumb question.. whats the simplest way to configure dnsmasq?
[04:38:01] <snadge> by default it gets its name servers from /etc/resolv.conf .. except i want to set my /etc/resolv.conf to localhost
[04:38:21] <snadge> and then configure the dns directly into dnsmasq
[04:38:54] <snadge> since the whole point isnt to cache dns for others, but itself
[04:39:28] <xpoint> very pratical :-)
[04:42:06] <snadge> some dude on the net had the same idea i had.. use /etc/resolv.dnsmasq instead
[04:42:20] <snadge> point the dnsmasq config to that.. and put nameserver 127.0.0.1 in resolv.conf
[04:43:16] *** m1n3s6 has joined #postfix
[04:47:30] <snadge> caching dns installed ;)
[04:49:54] *** Motoko-chan has joined #postfix
[04:54:40] *** mikeb99 has quit IRC
[05:00:46] *** Haris1 has quit IRC
[05:00:56] *** okibisan has left #postfix
[05:31:37] *** m0f0x has quit IRC
[05:41:22] *** Tanguy has quit IRC
[05:41:22] *** master_o1_master has quit IRC
[05:41:22] *** _bt has quit IRC
[05:41:23] *** jelly has quit IRC
[05:41:23] *** xnixan has quit IRC
[05:41:23] *** VaNNi has quit IRC
[05:41:23] *** Lukemob has quit IRC
[05:41:23] *** chrisq has quit IRC
[05:41:24] *** glitch- has quit IRC
[05:41:24] *** AllenJB has quit IRC
[05:41:24] *** dragonheart has quit IRC
[05:41:24] *** tomocha6 has quit IRC
[05:41:24] *** spy6 has quit IRC
[05:41:24] *** higuita has quit IRC
[05:41:25] *** mavrick61 has quit IRC
[05:41:25] *** Internat has quit IRC
[05:41:25] *** cilly has quit IRC
[05:41:25] *** philip_ has quit IRC
[05:41:26] *** Shamgar_ has quit IRC
[05:41:26] *** Filbert has quit IRC
[05:41:26] *** rob0 has quit IRC
[05:41:26] *** snadge has quit IRC
[05:41:26] *** Captain has quit IRC
[05:41:26] *** mXr has quit IRC
[05:41:27] *** amrit|bbl has quit IRC
[05:41:27] *** jwit has quit IRC
[05:41:27] *** sysmonk has quit IRC
[05:41:27] *** gonewestcoast has quit IRC
[05:41:27] *** Zeit|awy has quit IRC
[05:41:28] *** riz_ has quit IRC
[05:41:28] *** linkslice has quit IRC
[05:41:28] *** dhg has quit IRC
[05:41:28] *** memic has quit IRC
[05:41:28] *** pulsar has quit IRC
[05:41:29] *** _nalle has quit IRC
[05:41:29] *** jduggan_ has quit IRC
[05:41:29] *** Zerberus has quit IRC
[05:41:29] *** mathez has quit IRC
[05:41:29] *** rmayorga has quit IRC
[05:41:29] *** lysander has quit IRC
[05:41:29] *** Bejgli has quit IRC
[05:41:30] *** Zborg has quit IRC
[05:41:30] *** biz has quit IRC
[05:41:30] *** sv-- has quit IRC
[05:41:30] *** soren has quit IRC
[05:41:30] *** hal1on has quit IRC
[05:41:35] *** mavrick61 has joined #postfix
[05:41:35] *** Internat has joined #postfix
[05:41:35] *** cilly has joined #postfix
[05:41:35] *** tomocha6 has joined #postfix
[05:41:35] *** philip_ has joined #postfix
[05:41:35] *** snadge has joined #postfix
[05:41:35] *** amrit|bbl has joined #postfix
[05:41:35] *** mXr has joined #postfix
[05:41:35] *** Captain has joined #postfix
[05:41:35] *** rob0 has joined #postfix
[05:41:35] *** Filbert has joined #postfix
[05:41:35] *** higuita has joined #postfix
[05:41:35] *** Shamgar_ has joined #postfix
[05:41:35] *** spy6 has joined #postfix
[05:42:10] *** pulsars has joined #postfix
[05:42:13] *** sysmonk has joined #postfix
[05:42:13] *** jwit has joined #postfix
[05:42:13] *** gonewestcoast has joined #postfix
[05:42:13] *** Tanguy has joined #postfix
[05:42:13] *** master_o1_master has joined #postfix
[05:42:13] *** _bt has joined #postfix
[05:42:13] *** Zeit|awy has joined #postfix
[05:42:13] *** riz_ has joined #postfix
[05:42:13] *** linkslice has joined #postfix
[05:42:13] *** jelly has joined #postfix
[05:42:13] *** xnixan has joined #postfix
[05:42:13] *** VaNNi has joined #postfix
[05:42:13] *** dhg has joined #postfix
[05:42:13] *** memic has joined #postfix
[05:42:13] *** chrisq has joined #postfix
[05:42:13] *** glitch- has joined #postfix
[05:42:13] *** AllenJB has joined #postfix
[05:42:13] *** Lukemob has joined #postfix
[05:42:13] *** dragonheart has joined #postfix
[05:42:13] *** pulsar has joined #postfix
[05:42:13] *** _nalle has joined #postfix
[05:42:13] *** jduggan_ has joined #postfix
[05:42:13] *** Zerberus has joined #postfix
[05:42:13] *** mathez has joined #postfix
[05:42:13] *** rmayorga has joined #postfix
[05:42:13] *** lysander has joined #postfix
[05:42:13] *** hal1on has joined #postfix
[05:42:13] *** soren has joined #postfix
[05:42:13] *** Bejgli has joined #postfix
[05:42:13] *** biz has joined #postfix
[05:42:13] *** Zborg has joined #postfix
[05:42:13] *** sv-- has joined #postfix
[05:42:17] *** pulsar has quit IRC
[05:49:28] *** goldfischli has joined #postfix
[06:02:52] *** goldfisc1li has quit IRC
[06:04:07] *** pulsars is now known as pulsar
[06:36:44] *** gonewestcoast has quit IRC
[06:36:54] *** gonewestcoast has joined #postfix
[06:37:39] *** chesty has joined #postfix
[06:47:24] *** chesty has quit IRC
[06:48:48] *** chesty has joined #postfix
[06:50:28] *** Kako has joined #postfix
[06:59:43] *** gonewestcoast has quit IRC
[07:10:46] *** Meliorator has quit IRC
[07:13:48] *** Shamgar_ is now known as Shamgar
[07:31:34] *** UQlev has joined #postfix
[07:39:21] *** gonewestcoast has joined #postfix
[07:45:12] *** saurabhb has joined #postfix
[07:53:53] *** UQlev has quit IRC
[07:54:29] *** bhagat has joined #postfix
[07:56:10] *** noneo has quit IRC
[08:00:12] *** Zeit|awy_ has joined #postfix
[08:06:12] *** Zeit|awy has quit IRC
[08:21:10] *** pitakill has quit IRC
[08:31:33] *** j_s has joined #postfix
[09:12:17] *** bimbomio has joined #postfix
[09:16:18] *** shoonya has joined #postfix
[09:16:42] *** gonewestcoast has quit IRC
[09:17:15] <shoonya> is it possible to control who can send mail to a local user/mail id ?
[09:20:17] *** alienbrain has joined #postfix
[09:26:41] *** mark-use_ has quit IRC
[09:30:40] *** gonewestcoast has joined #postfix
[09:30:49] <f3ew> shoonya see smtpd_restriction_classes
[09:31:56] *** madrescher has quit IRC
[09:32:34] *** sophokles has joined #postfix
[09:32:40] *** gonewestcoast has quit IRC
[09:32:41] <shoonya> f3ew: i will check that and get back
[09:36:27] *** brancaleone has joined #postfix
[09:51:08] *** madrescher has joined #postfix
[09:58:25] *** war9407 has joined #postfix
[10:03:01] *** Motoko-chan has quit IRC
[10:03:55] *** CyberCr33p has joined #postfix
[10:08:14] <CyberCr33p> A server has more than one IP. If I want to use all of them to send e-mails do I have to run multiple postfix instances or there is another way?
[10:09:20] <_ruben> i use nat rules to send from multiple ips
[10:10:03] <_ruben> which, to my surprise, was a tip given by microsoft to improve delivery of larger ammounts of mail to hotmail serviecs
[10:11:11] *** aron is now known as Aron
[10:13:55] *** bimbomio has quit IRC
[10:14:57] *** bimbomio has joined #postfix
[10:16:27] <CyberCr33p> Postfix already binds to all IPs. If I use for SMTP the 2nd IP from which IP the e-maill will be sent?
[10:16:39] *** F6F has joined #postfix
[10:20:59] <Roobarb> CyberCr33p: connections will originate from the interface that is connected to the closest matching network.
[10:21:40] <CyberCr33p> So I need to run more than 1 postfix instances
[10:21:55] <Roobarb> to achieve what end?
[10:22:30] <CyberCr33p> to send e-mails from different IPs
[10:22:46] <philip_> use transport_maps for that
[10:23:26] <CyberCr33p> ok let me google it
[10:23:50] <war9407> CyberCr33p: that is correct
[10:24:26] <shoonya> f3ew: can i have something like "all at my dot domain   user@mydomain,permit_mynetworks,reject"
[10:24:34] *** noneo has joined #postfix
[10:24:38] <shoonya> in access file
[10:25:02] *** noneo has quit IRC
[10:25:09] *** noneo has joined #postfix
[10:28:03] <f3ew> try it and see?
[10:29:40] <harlan> is there an easy way to do a regexp rewrite of (incoming) recipients?
[10:32:12] *** amrit|bbl is now known as amrit|zzz
[10:34:55] <shoonya> f3ew: i am getting Recipient address rejected: Access denied
[10:37:58] <f3ew> harlan virtaul_alias_maps
[10:39:16] <harlan> f3ew: those work even for sites that do not otherwise use virtual hosting things?
[10:39:47] <harlan> I guess I could just try it out and see... thanks!
[10:40:04] <harlan> (OK, I can try it after I get some sleep)
[10:45:06] *** Jax has joined #postfix
[10:46:42] *** saurabhb has quit IRC
[10:48:54] *** JoeWulf has quit IRC
[10:49:15] *** JoeWulf has joined #postfix
[10:51:03] *** saurabhb has joined #postfix
[10:52:50] *** Jax has quit IRC
[11:05:21] *** juro has joined #postfix
[11:06:23] <juro> hi, I have a problem with a small postfix installation (on Ubuntu Dapper). as of yesterday (apt-get upgrade), my emails are in the hold queue and are not being delivered to the mailboxes ...
[11:09:30] *** poison3r_ has left #postfix
[11:12:07] *** Pazzo has joined #postfix
[11:14:54] <f3ew> !debug
[11:14:56] <knoba> f3ew: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ .
[11:15:19] <Pazzo> Hi @ll! Is anyone here aware of problems regarding SAPO.pt's reverse delegation / reverse lookups?
[11:16:29] *** Wilco has joined #postfix
[11:16:37] <Wilco> hi guys
[11:16:45] <Wilco> anyone free to help ?
[11:20:00] <Pazzo> Wilco: just ask your question - if someone free to help will know the answer it could happen that you'll get a response ;-)
[11:20:18] *** kazer_ has quit IRC
[11:20:27] <Wilco> ok i think its somethign trivial but i cant get it
[11:21:01] <Wilco> i have setup postfix in a machine in my local lan. it sends mail to the internet. it has full FQDN in DNS with SPF and MX records and public IP address with PTR
[11:21:06] <Wilco> it works
[11:21:18] <Wilco> if i look in the headers of mails i get from this machine
[11:21:41] <Wilco> i see Received from <FQDN of the mail server> ([10.10.10.1])
[11:21:51] <Wilco> why does it say 10.10.10.1
[11:21:58] <Wilco> why not the public ip of the FQDN name
[11:22:02] <Wilco> nslookup works
[11:22:03] <Wilco> dns works
[11:22:05] <Wilco> i dont get it.
[11:22:54] <Wilco> 10.10.10.1 is the default GW of my network (i.e the firewall)
[11:23:36] <Pazzo> Is there a transparent SMTP-Proxy on your firewall?
[11:23:41] <Wilco> nope
[11:23:53] <Wilco> i do nat
[11:23:56] <Wilco> ahhh
[11:23:57] <Wilco> wait
[11:24:00] <Wilco> i do outgoing nat
[11:24:11] <Wilco> does it take the source IP of the firewall?
[11:25:05] *** pulsar has quit IRC
[11:25:38] <juro> hmm, after some more debugging I found out that MailScanner keeps on restarting ....
[11:26:08] *** mark-use has joined #postfix
[11:26:30] *** pulsar has joined #postfix
[11:31:54] *** Kako has quit IRC
[11:40:24] *** Lap_64 has joined #postfix
[11:45:00] *** juro has left #postfix
[11:47:53] *** Vivek has joined #postfix
[12:05:22] *** Haris1 has joined #postfix
[12:12:44] *** sophokles1 has joined #postfix
[12:13:00] *** sophokles has quit IRC
[12:21:26] *** CrazyFoam has quit IRC
[12:23:36] *** cpm has joined #postfix
[12:23:51] *** CrazyFoam has joined #postfix
[12:32:19] *** kombi has joined #postfix
[12:34:28] *** lambda__ has joined #postfix
[12:35:09] <kombi> I must set up a secondary mx.While receiving is handled by DNS, how does one switch pop and smtp when the primary server goes down?
[12:37:39] *** snadge has left #postfix
[12:38:28] <dragonheart> kombi: smtp is easy - just a secondary MX. pop/imap need either pop/imap proxies or IP based load balancers. The alternerate is a 5 min TTL on a server that auto updates when the other host is dead. of course you need distributed filesystems and it all gets complicated quickly so just make sure of the requirments
[12:42:32] <kombi> dragonheart: So smtp with sasl also relies on dns? Good news! Maybe I should set the secondary mta up as relay so only pop users have to wait until the primary one is back. Would that make sense?
[12:44:07] *** Internat has quit IRC
[12:44:09] *** internat1 has joined #postfix
[12:44:10] <sysmonk> if you have sasl database replicated to the slave - yes
[12:44:28] <dragonheart> "So smtp with sasl also relies on dns?" - usually unless you have IP addresses in email clients (yuk). i'd do it the way you suggested however what makes sense is requirement driven
[12:44:30] <sysmonk> but believe me, users will be angry :)
[12:45:18] <dragonheart> maybe i just don't care about my users enough :-)
[12:45:34] <cpm> maybe one should just keep their mail server up and running.
[12:45:42] <kombi> dragonheart: point taken..
[12:45:49] <kombi> cpm: good one..;)
[12:46:38] <kombi> sysmonk: indeed.. I just try to get them slightly less angry:=)
[12:47:41] <dragonheart> kombi: there was a question on the dovecot list about making a null - no messages backup so user's don't notice the lack of connectivity
[12:48:13] <sysmonk> dragonheart: 'making a null' ?
[12:48:15] <dragonheart> dodgy but if reducing questions for user's who may not notice is imporant...
[12:48:36] <sysmonk> from my _personal_ practice, i can say that even TTL of 60 won't help
[12:48:46] <sysmonk> because shit like outlook are caching the ip's
[12:49:09] <sysmonk> i.e. last time i changed ttl to 60, waited a day so all dns servers would know the new ttl, changed the ip
[12:49:11] <dragonheart> null - should of said a pop server that accepts all passwords/users that and delivers no mail
[12:49:31] <sysmonk> and, even 4 hours later usrs were angry cause their outlook couldn't connect to pop3/imap
[12:50:23] <dragonheart> wow. i'm hoping smtp implementations aren't that chaching agressively
[12:50:32] <kombi> sysmonk: tough s.., does it cache smtp IPs too?
[12:50:45] <kombi> dragonheart: like you said..
[12:50:56] <sysmonk> kombi: dunno
[12:51:04] <f3ew> sysmonk reboot
[12:51:12] <sysmonk> f3ew: yeah, that was my answer to them
[12:51:29] <kombi> or better yet, re-install..;)
[12:51:37] <sysmonk> kombi: won't help :)
[12:51:51] <kombi> I meant something else then windows..
[12:52:06] <sysmonk> kombi: installing thunderbird would be enough imho
[12:52:13] <sysmonk> but i'm just guessing
[12:53:07] <kombi> I guess I'll consider a secondary relay then keeping sasl consistent over rsync
[12:53:55] *** m1n3s6 has quit IRC
[12:55:44] *** Zblakany has joined #postfix
[13:10:23] *** chesty has left #postfix
[13:18:45] *** kombi has quit IRC
[13:34:06] *** ming_zym has quit IRC
[13:37:07] * cpm reboots sysmonk
[13:56:23] *** Lap_64 has quit IRC
[13:58:49] <Wilco> guys - i see in yahoo SMTP guideliness that they cap amount of connections to their SMTP servers - "Yahoo! Mail accepts a maximum of 5 messages per SMTP connection. We encourage you to cap the number of messages you send to Yahoo! Mail to fall within this per-connection limit."
[13:58:59] <Wilco> which setting in postfix is relevant for this
[14:06:11] <jelly> Wilco: the quote doesn't mention the number of connections at all?
[14:06:29] <Wilco> jelly - Maximum of 5 messages per SMTP connection
[14:06:47] <Wilco> how can i control this from postfix
[14:07:37] <Wilco> if i send 50 mails to yahoo.com smtp servers how many will postfix will try to deliver per an smtp connection
[14:07:43] <Wilco> and if this can be changed ;-)
[14:07:51] <Wilco> we dont wanna get blocked by da Yahooers ;-)
[14:10:24] <cpm> 50? that's not much of a spam run.
[14:10:26] *** gcleric has joined #postfix
[14:10:47] *** ElDios has joined #postfix
[14:11:01] *** gcleric has left #postfix
[14:11:06] <Wilco> we just wanna be good with yahoo
[14:11:25] <Wilco> i just wonder which setting i need to change in postfix that i will not try and dump 50 mails in one smtp link ;-)
[14:11:33] <ElDios> EHLO.. is it possible to specify the "smtpd_client_restrictions = reject_rbl_client" parameter  in master.cf?
[14:12:48] <jelly> Wilco: oh, so you're asking about the number mails sent in each connection.  Not the number of (concurrent) connections.
[14:13:49] <Wilco> somethine like this
[14:13:55] <Wilco> exactly as yahoo wants
[14:14:02] <Wilco> maximum of 5 mails per connection
[14:31:00] *** Fallenou has joined #postfix
[14:31:24] *** saurabhb has quit IRC
[14:32:13] <f3ew> ElDios yes
[14:32:39] <f3ew> Wilco, create a clone of the smtp transport and change parameters?
[14:32:53] <Wilco> i dont know
[14:34:19] <ElDios> f3ew how? it seems there's a syntax problem
[14:34:23] <ElDios> I dunno how to declare it
[14:34:28] <ElDios> if I say
[14:34:43] <ElDios> smtpd_client_restrictions = reject_rbl_client zen.spamhaus.org
[14:35:03] <rob0> First, why do you want this in master.cf?
[14:35:25] <ElDios> different postfix behaviour on different IPs
[14:35:45] <rob0> Second, it MIGHT work if you used commas, "-o smtpd_client_restrictions=reject_rbl_client,zen.spamhaus.org"
[14:36:08] <f3ew> it will
[14:36:10] *** milligan_ has quit IRC
[14:36:14] <rob0> Third, it WILL work if you define and use a restriction class.
[14:36:47] <Wilco> guys
[14:36:58] <Wilco> maybe this is my answer. from postfix docs:
[14:36:59] <Wilco>     *
[14:36:59] <Wilco>       The initial_destination_concurrency parameter (default: 5) controls how many messages are initially sent to the same destination before adapting delivery concurrency. Of course, this setting is effective only as long as it does not exceed the process limit and the destination concurrency limit for the specific mail transport channel.
[14:36:59] <Wilco>     *
[14:36:59] <Wilco>       The default_destination_concurrency_limit parameter (default: 20) controls how many messages may be sent to the same destination simultaneously. You can override this setting for specific message delivery transports by taking the name of the master.cf entry and appending "_destination_concurrency_limit".
[14:37:14] <Wilco> the 2nd one is better?
[14:39:07] <rob0> I just let the Yahoo mail be rejected, eventually the rest of it gets delivered.
[14:39:10] * cpm defines rob0
[14:39:18] <rob0> !rob0
[14:39:18] <knoba> rob0: "rob0" : a pathetic bot that reacts to newly joined users with reciting the !basic factoid :)
[14:40:01] <cpm> folks who use yahoo email, do so by choice. I'm unaware of anyone being tortured into it against their will.
[14:40:30] <Wilco> i just dont wanna get blocked by yahoo if we send mail to our clients that use that service
[14:40:45] <Wilco> any of you use domainkeys?
[14:40:50] <Wilco> yahoo wants that crap too ;-)
[14:41:07] * rob0 wants a pony
[14:41:19] * Wilco wants a 3G Iphone (that works)
[14:41:30] <Wilco> i cant belive they still did not hack that 3G baseband
[14:41:36] <ElDios> Wilco concurency is all about sending in the very same moment
[14:41:44] <ElDios> not about the whole session
[14:41:48] <Wilco> hmm
[14:41:52] <ElDios> probably is not what you're lookin for
[14:41:58] <Wilco> hmmm.
[14:42:00] <Wilco> so how can we solve it?
[14:42:11] <ElDios> that's a good question
[14:42:30] <rob0> A few minutes spent in "man smtp" might help.
[14:42:52] <cpm> No, you can't have a pony!
[14:43:14] * rob0 sobs loudly and uncontrollably
[14:43:29] <Wilco> maybe im suppose to look it from the application point of view? i.e our app will not attempt to send that many emails to yahoo,com? thus limiting to blocks of 5 emails at a time
[14:43:31] * cpm points rob0 at http://sc.tri-bit.com/images/2/23/pony.jpg
[14:44:30] *** Tex-Twil has joined #postfix
[14:44:41] <Tex-Twil> good afternoon
[14:45:34] <Tex-Twil> I have a question about smtp-source command line tool. Is it possible to specify multiple recipients for one email ?
[14:46:49] <ElDios> rob0 cpbills XD
[14:46:52] <ElDios> uops
[14:46:56] <ElDios> rob0 cpm XD
[14:49:13] *** Tex-Twil has quit IRC
[14:50:17] *** CyberCr33p has quit IRC
[14:53:05] *** juro has joined #postfix
[14:54:20] <juro> hi, I have some problem in my Postfix/MailScanner/SpamAssassin setup after doing an "apt-get upgrade" yesterday and now MailScanner keeps restarting and I have emails in the hold. For the time being I want postfix to deliver those emails anyway - is there any way of achieving this?
[14:56:35] *** alienbrain has quit IRC
[14:58:17] <vice-versa> juro: comment out the failing content filter from your postfix config, restart postfix and requeue the mail with postsuper -r ALL
[15:00:12] *** PcPixel has joined #postfix
[15:00:25] <shoonya> i am trying to configure smtpd_restriction_classes with ldap and i want to restrict only one user "user1 at mydomain dot com" to be able to send mail to the allowed id
[15:00:31] <shoonya> my ldap configuration for this is
[15:00:35] <shoonya> server_host = ldap://localhost/
[15:00:35] <shoonya> server_port = 389
[15:00:35] <shoonya> bind_dn = uid=ldapadmin,ou=admins,dc=mydomain,dc=com
[15:00:35] <shoonya> bind_pw = xxxxxxx
[15:00:35] <shoonya> search_base = o=mydomain,dc=com
[15:00:36] <shoonya> query_filter = (&(objectClass=inetOrgPerson)(mail="user1 at mydomain dot com"))
[15:00:38] <shoonya> result_attribute = mail
[15:01:00] <vice-versa> !pastebin
[15:01:00] <knoba> vice-versa: "pastebin" : a way to paste larger amounts of text so that other people can read it. Try http://www.rafb.net/paste/ or http://paste.debian.net/ - Do not forget to tell us the URL where you pasted it.
[15:01:13] <shoonya> sorry for that
[15:01:17] <rob0> "smtpd_restriction_classes with ldap" lost me. How is that connected?
[15:01:51] <shoonya> check_sender_access ldap:/etc/postfix/ldap-accept_user.cf
[15:01:58] <shoonya> can i use this
[15:02:26] <PcPixel> morning vice
[15:02:34] <vice-versa> morning
[15:02:41] <shoonya> ldap-accept_user.cf configuration is what i have given below
[15:02:43] <rob0> Sure.
[15:02:45] <shoonya> above
[15:02:47] <rob0> !postmapq
[15:02:48] <knoba> rob0: "postmapq" : You can check your lookups with the postmap command. Example: if you defined "transport_maps = mysql:/etc/postfix/transport.cf" you may check this mapping by running "postmap -q domain.com mysql:/etc/postfix/transport.cf" and see if it works.
[15:02:48] <juro> vice-versa: how do I know what the failing filter is ...
[15:03:16] <PcPixel> is there a wildcard/catch call that you can use in a hash db for email addresses?
[15:04:11] <PcPixel> also, im sparatically seeing this at night: http://pastebin.com/d61a7fca8 . But I can't find much information. Google says its just a generic error Postfix throws if too much goes wrong.
[15:04:20] <vice-versa> juro: really?, you seriously don't know how the content filtering is configured on your mta?
[15:05:40] <juro> vice-versa: I set this thing up about 3-4 years ago and have moved on from that part of admin about the same time ago
[15:06:49] <juro> vice-versa: also, I do have a fair idea how the content filter works but I do not see anything indicating a failing filter - MailScanner just keeps on restarting
[15:08:10] *** dusty_ has joined #postfix
[15:10:18] *** bhagat has quit IRC
[15:12:05] <vice-versa> juro: right, the 'content filter' I'm refering to here is any third-party packages used in conjunction with postfix to filter your mail, if MailScanner is continually restarting and is a part of your 'content filtering', then your 'content filtering' is failing
[15:12:30] *** dusty_ is now known as dusty--
[15:12:35] *** dusty-- is now known as dusty---
[15:13:23] <juro> vice-versa: yes, which I have no clue why it is.
[15:13:43] <juro> so you are suggestion to scrap MailScanner out for the time being
[15:14:27] <Dominian> juro: I bet you upgraded or someone upgraded perl lately didn't they?
[15:14:50] <juro> Dominian, apt-get upgrade probably did
[15:15:09] <Dominian> than that's your problem
[15:15:13] <Dominian> You need to reinstall MailScanner
[15:15:21] <Dominian> So it will rebuild the perl modules
[15:15:28] <juro> Dominian: I did that, but it still happens ...
[15:15:45] <juro> probably need a purge then
[15:16:09] <Dominian> possibly.. what version of MailScanner?
[15:16:13] <PcPixel> any idea why this could be happening? http://pastebin.com/d61a7fca8
[15:16:38] <juro> 4.46.2
[15:16:44] <juro> standard Ubuntu Dapper
[15:16:51] <Dominian> holy crap that's old
[15:17:10] <Dominian> juro: that version of MailScanner is... WAY behind.
[15:17:17] <Dominian> latest stable is 4.70.7
[15:17:24] <Dominian> So that's definitely gotta be part of it
[15:17:32] <juro> Dominian: as is the server install - installing a newer version doesn't work because of failed dependencies (version problems)
[15:18:05] <PcPixel> then maybe copy out the config files & rebuild the server?
[15:18:21] <PcPixel> move to 8.04LTS and copy in the config files
[15:18:32] <PcPixel> suggestion, not a dig
[15:18:50] <juro> PcPixel: I won't be able to do that so quickly as this is a production server that is serving a small business
[15:19:05] <juro> PcPixel: open to suggestions ...
[15:19:13] <PcPixel> juro: cant grab a small pc to use?
[15:19:30] <rob0> Next time don't "apt-get upgrade" a "production server".
[15:19:37] * PcPixel agrees w rob0
[15:19:59] <juro> hmm, this is installed in a VMWare, so that wouldn't be the problem. The problem is the fact that I am sitting about 10000km away ;)
[15:20:09] * juro agrees with rob0
[15:20:14] <PcPixel> your mail server is virtual?
[15:20:24] <Dominian> nothing wrong with that
[15:20:25] <juro> no
[15:20:41] <vice-versa> PcPixel: looks to me like mail2.hydroone.com is generating 'too many errors' in the smtp conversation triggering one of the smtpd_*_error_limit restrictions
[15:21:06] <juro> busy working on a quote to update to 8.04 (but that doesn't help for the immediate problem)
[15:21:22] <PcPixel> vice: ok, the only reason i bring it up is I have other clients doing that as well, but I don't get a mail message from postfix for each one
[15:21:33] <juro> Dominian: I tried to upgrade MailScanner but I couldn't get it to work
[15:22:15] *** pickcoder has joined #postfix
[15:22:26] *** ElDios has left #postfix
[15:22:30] <rob0> 12:58 < vice-versa> juro: comment out the failing content filter from your postfix config, restart postfix and requeue the mail with postsuper -r ALL
[15:22:44] <Dominian> rob0: its even easier than that
[15:22:56] <Dominian> juro: just remove mailscanner from header_checks.. done
[15:23:18] <juro> Dominian: yup that is the plan
[15:23:31] *** CrazyFoam has quit IRC
[15:24:16] *** Zikey has joined #postfix
[15:25:45] <juro> Dominian: (n00b here, sorry), so taking out this line "/^Received:/ HOLD" will stop MailScanner from checking, right?
[15:25:54] <Zikey> Hi, when I receive a mail from the outside with a To: "Someone", without any domain, postfix adds my domain in the To field: To: "Someone" at domain dot com, do you know how to disable this ?
[15:26:34] <PcPixel> zikey: why are you accepting mail without a domain attached to it anyways?
[15:26:40] <PcPixel> or is that what you wish to stop?
[15:26:40] <Zikey> I dont
[15:27:09] <PcPixel> but you said postfix is appending your domain to ir
[15:27:10] <PcPixel> it
[15:27:34] <Dominian> juro: It would stop postfix from sticking tghe emails in the hold queue... yes
[15:27:35] <Zikey> in fact i simplified it
[15:27:42] <Dominian> and it would allow postfix to just process the email and deliver it..
[15:27:48] <Dominian> you could just comment it out.. then: postfix reload
[15:27:50] <Dominian> and be done
[15:28:01] <juro> Dominian: thank you.
[15:28:03] <Dominian> but that means no virus/spam checking
[15:28:09] <Zikey> I get this as To field, To: "someone", "someoneelse" <user@domain>
[15:28:35] <Zikey> and when postfix deliver it, it becomes, To: "someone"@domain, "someoneelse" <user@domain>
[15:29:01] <Zikey> (user@domain is valid that's why it is delivered)
[15:29:26] <PcPixel> zikey: but it shouldnt even be processed because it never had a <domain> attached to it
[15:29:37] <PcPixel> are you sure they arent spamming you with your own domain?
[15:30:43] <rob0> Headers != envelope
[15:31:09] <pickcoder> RCPT TO:
[15:31:13] <pickcoder> versus To:
[15:31:16] <Zikey> yup
[15:31:24] <Zikey> i'm talking about To:
[15:31:31] <rob0> I've seen that answered on the mailing list.
[15:31:43] <PcPixel> Zikey: if its just in the header and not the RCPT TO then you have a different problem.
[15:31:51] <Zikey> basically postfix modifies the enveloppe to add local domain
[15:32:19] <PcPixel> Zikey: If its doing that, then you have a problem with your config because its ACCEPTING mail that DOESNT have a domain attached to it
[15:32:35] <rob0> no and no
[15:32:35] <PcPixel> Youre saying its accepting: User and turnging it into: user@domain
[15:32:53] <Zikey> rob0 knows what i'm talking about :)
[15:33:02] <Zikey> the RCPT TO is valid
[15:33:22] <rob0> Not modifying the envelope, not a bare rcpt address.
[15:33:27] <Zikey> but the To: field is not and modified somehow
[15:33:41] <rob0> 13:31 < rob0> I've seen that answered on the mailing list.
[15:34:23] <PcPixel> if I use just @ in a hash db for email addresses, what would that match?
[15:34:53] <rob0> um, don't think so
[15:35:12] <PcPixel> rob0: not allowed?
[15:35:41] * rob0 will allow it
[15:35:46] <rob0> cpm won't
[15:35:49] <PcPixel> lol
[15:35:49] <juro> thank you, everyone - mails were delivered.
[15:35:57] <rob0> he won't let me have a pony :(
[15:36:04] <PcPixel> rob0: im looking for a way to do a "catch all" in a hash mapo
[15:36:05] <PcPixel> map
[15:36:13] <rob0> catchalls suck.
[15:36:27] <PcPixel> rob0: i know they do normally, but they way i want to use it i think is ok
[15:36:36] <PcPixel> rob0: im using one now with a CIDR map
[15:36:47] *** Vivek has quit IRC
[15:37:47] *** juro has left #postfix
[15:39:22] <PcPixel> rob0: here's the example of how im using it now]
[15:39:50] <PcPixel> http://pastebin.com/d3d4cdc73
[15:41:56] <Zikey> are you aware of any postfix option that is related to rewriting e-mail addresses in To: fields ?
[15:41:56] <cpm> yeah yeah, all catch-all junkie crackheads say that.
[15:42:11] <PcPixel> cpm: ?
[15:42:30] <cpm> <PcPixel> rob0: i know they do normally, but they way i want to use it i think is ok
[15:42:47] <cpm> Oh, I can shoot heroin, but it doesn't affect me.
[15:42:56] <PcPixel> cpm: did you see the example i used it in?
[15:43:04] <PcPixel> cpm: i agree. i dont like using them all the time either.
[15:43:30] <PcPixel> cpm: but the way i have it set up, i get exactly what i need.
[15:43:56] <cpm> yeah, and rob0 needs a pony.
[15:44:13] <PcPixel> cpm: i fpostfix wasnt "first match wins" i wouldnt have this problem
[15:44:42] <lunaphyte_> a pony like this? http://k53.pbase.com/u44/paddchas/large/28663110.Scan10142.jpg
[15:44:44] *** CrazyFoam has joined #postfix
[15:45:26] <Zikey> found it :) local_header_rewrite_clients
[15:45:28] <cpm> lunaphyte_, nope. Like this
[15:45:30] <cpm> http://i-want-a-pony.com/IWantAPony.jpg
[15:46:07] *** Zikey has left #postfix
[15:46:37] <PcPixel> cpm: so since you dislike them so much, what would putting a @ in a hash map for email addresses (user at domain dot com) catch?
[15:46:41] <PcPixel> :)
[15:46:47] <lunaphyte_> oh, THAT pony!
[15:46:58] * rob0 sobs
[15:47:04] <rob0> sob0
[15:47:34] <cpm> PcPixel, define the conditions with some precision, rather than using wildcards.
[15:47:48] <PcPixel> cpm: i cant.
[15:47:52] <PcPixel> postfix doesnt work that way.
[15:47:56] <cpm> defeatist!
[15:48:00] *** Broken|work has joined #postfix
[15:48:03] <cpm> works that way for me.
[15:48:08] <PcPixel> cpm: im not a defeatist. postfix doesnt work that way
[15:48:08] <Broken|work> hi every one
[15:48:19] <PcPixel> cpm: the first OK it hits, causes mail to be accepted. that isn't what I want.
[15:48:38] <cpm> want want want, what's it like to want?
[15:48:48] <PcPixel> cpm: that isnt what i need.
[15:48:55] <rob0> I don't think hash maps support wildcards, except per domain/subdomain matching.
[15:48:57] <cpm> rob0 wants a pony, and look what it did for him? Ended in tears, is what.
[15:49:12] * rob0 whimpers
[15:49:34] <PcPixel> what i need is for postfix to evaluate checks, and if it encounters one i need it to bypass for a given situation, i want all subsequent checks to be executed
[15:49:40] <PcPixel> not stop cold & either accept/reject
[15:49:48] <rob0> pony@rob0   ACCEPT
[15:50:09] <PcPixel> and i did it with my example: http://pastebin.com/d3d4cdc73
[15:50:19] <PcPixel> and in my opinion, thats an acceptable use of a catch all.
[15:50:31] <lunaphyte_> rob0: error: message size exceeds limit.
[15:50:45] <Broken|work> guys, I am trying to use policyd whitelist feature AND an RBL blacklist, I would like the to check policyd first, and if the sender is white listed , the RBL check is bypassed
[15:50:51] <Broken|work> is that possible ?
[15:50:52] <rob0> put your exceptions in a hash: map and follow that with a static: map
[15:51:14] <PcPixel> rob0: was that for me or Broken
[15:51:31] <rob0> You think it over and let me know.
[15:51:55] <PcPixel> ive never heard of the static: option before
[15:52:25] <rob0> Bro, what is the real life problem you want to solve here?
[15:53:03] <f3ew> PcPixel, write a policy daemon?
[15:53:18] <PcPixel> f3ew: huh?
[15:53:28] * cpm keeps thinking policy
[15:53:46] <cpm> but I'm more focused on keeping rob0 away from ponies
[15:54:10] <rob0> check_pony_access rob0:accept
[15:54:16] <PcPixel> what does static: do?
[15:54:36] <rob0> It can fry electronic parts if you're not careful.
[15:54:43] <lunaphyte_> you have access to the same docs we do.
[15:54:44] <PcPixel> ba dum tish.
[15:55:00] <PcPixel> yeah and im googleing for it, and im finding exmaples but nto explanations
[15:55:01] <rob0> DB_README
[15:55:04] <PcPixel> static:all means beans to me
[15:55:05] <rob0> !google
[15:55:05] <knoba> rob0: "google" : Those who use Google before reading the Postfix documentation, if fortunate, end up at http://www.postfix.org/ . If not, they end up in a jumble of bad questions, misleading or wrong answers, and outdated information.
[15:55:15] <cpm> !beans
[15:55:15] <knoba> cpm: Error: "beans" is not a valid command.
[15:55:24] <cpm> feh
[15:55:31] <rob0> static:shock
[15:55:44] *** phnord has joined #postfix
[15:55:57] <lunaphyte_> !beans
[15:55:58] <knoba> lunaphyte_: "beans" : is a valid command
[15:56:05] <lunaphyte_> weird, works for me.
[15:56:44] <Broken|work> rob0: I am trying to configure a mail relay that will use RBL as one of the techniques to stop spam, the problem is that sometimes legitimate senders like yahoo or hotmail get listed , I want to use the dns whitelist in policyd to white list them before they go through the RBL
[15:56:46] <PcPixel> i dont see how static would help me in this case
[15:56:49] <PcPixel> i just found it
[15:57:53] <Broken|work> any idea how that can be done ?
[15:58:04] <Broken|work> or if it's even possible ?
[15:58:07] *** car_watt has joined #postfix
[15:58:23] <PcPixel> broken: check_sender_access hash:/valid_Recipients and white list them there
[15:58:32] <cpm> chmod 400 legacy_tables
[15:58:34] <cpm> there, fixed.
[15:58:53] <PcPixel> but his is another example of what im talking about
[15:59:06] <PcPixel> just because the fail an RBL test doesnt mean i dont want the rest of my checks run
[15:59:26] <lunaphyte_> then do the other checks first.
[15:59:28] <PcPixel> if i ok them before an RBL, i want all the tests AFTER th RBL's to execute
[15:59:50] <PcPixel> luna: there is always something you cant move like that
[16:00:08] <lunaphyte_> fail is fail.  don't fail unless you mean it.
[16:00:19] <PcPixel> luna: an dok is ok. you want it you get it
[16:01:01] <PcPixel> and DUNNO doesnt work
[16:01:20] <PcPixel> the solution i came up with w the CIDR map i though works nicely
[16:01:29] <Broken|work> PcPixel: I don't think that would work , dns whitelisting is based on actual dns lookup to the sender ip , while check_sender_access (I think) checks for the envelope sender domain , right ?
[16:01:49] <rob0> Bro, what RBL do you use which is listing yahoo and hotmail?
[16:01:57] <rob0> !zen
[16:01:57] <knoba> rob0: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL
[16:01:58] <PcPixel> rob0: excellent question
[16:02:35] <Broken|work> rob0: I know I will get flamed for this :P, sorbs
[16:02:40] * Broken|work hides
[16:03:05] <PcPixel> broken: im using sorbs and i dont have that problem
[16:03:05] <rob0> No, but I will say, I don't recommend SORBS for general use.
[16:03:48] <rob0> How much (spam I mean) is SORBS blocking that zen doesn't?
[16:04:12] *** gcleric has joined #postfix
[16:04:19] <Broken|work> PcPixel: I work for a free mailbox provider, sorbs sometimes has false positives
[16:04:57] <Broken|work> rob0: I agree, but it's a management decision :/
[16:05:11] <Dominian> safe.dnsbl.sorbs.net isn't bad
[16:05:54] <lunaphyte_> get new management.
[16:06:12] <PcPixel> here are some numbers from my server today: spamcop - 26, dnsbl-1 - 176 (pulled), sorbs - 76, rfc-ignorant - 13, surriel - 157, zen - 13308
[16:06:30] <Broken|work> lunaphyte_: I wish !
[16:06:50] <rob0> Of course raw numbers mean nothing, because they don't show the order of checks.
[16:06:55] *** internat1 has quit IRC
[16:07:07] <rob0> But still, I think Zen would be best, even if the last one called.
[16:07:18] *** Internat has joined #postfix
[16:07:29] <PcPixel> rob0: its the first one, but just how pflogsumm reported the order
[16:07:46] <PcPixel> dsnrbl-1 had a false poz so i yanked it
[16:07:54] <PcPixel> i was evaluating it anyways
[16:08:50] *** alienbrain has joined #postfix
[16:09:17] <lunaphyte_> i'm gonna evaluate this banana.
[16:09:36] <rob0> and then throw the peel on the sidewalk!!
[16:09:43] <lunaphyte_> hork!
[16:10:41] <lunaphyte_> that belongs on an episode of mythbusters, i think.
[16:11:59] <PcPixel> lol
[16:16:39] *** shoonya has quit IRC
[16:17:21] <rob0> I'm writing a song about a banana peel. But I'm having trouble.
[16:17:39] <rob0> Should it be in the key of C sharp, or B flat?
[16:18:01] <lennard> D curved
[16:18:03] <f3ew> B flat
[16:18:23] <f3ew> Broken|work which provider?
[16:24:16] <e_> hm.. if i want to use multiple content filters, should i just chain them? (postfix->filter1->filter2->postfix) or "double sandwich" them? (postfix->filter1->postfix->filter2) ?
[16:24:28] <f3ew> chain
[16:24:38] <e_> thx
[16:25:27] <e_> hm, will aliases be expanded befor mail hits the content filter?
[16:26:52] <f3ew> nope
[16:29:45] *** Fallenou has quit IRC
[16:29:56] <PcPixel> http://pastebin.com/d3d4cdc73:)
[16:31:22] <PcPixel> whoops
[16:31:24] <PcPixel> jus tmeant :)
[16:31:27] <CosMiC_Touch>  anyone here who would be so kind helping me setup majordomo ?, i have compiled majordomo and endited the postfix main.cf with aliasses path and virtual aliases path but it doesnt work
[16:34:07] <f3ew> CosMiC_Touch logs?
[16:34:21] <CosMiC_Touch> from postfix ?
[16:35:36] <f3ew> yes
[16:35:42] <f3ew> where things don't "work"?
[16:39:44] <magyar_> hi, why would amavis not set a score on emails i just get "Hits: -"
[16:44:30] *** mofino has joined #postfix
[16:44:42] <mofino> What''s the best way to search for a message in the logs?  By queue id?
[16:48:36] *** sunru has joined #postfix
[16:50:11] <sunru> Hello, can someone point me in the right direction to set up spam filtering/managment via, I'm looking to combine RBL and spamassassin, am I on the right track?
[16:51:34] <mofino> sunru, SA has RBL fixtures in it
[16:51:47] <sunru> ah ic
[16:52:02] <sunru> could I leave out SA altogether??
[16:52:16] <rob0> !cheatsheet
[16:52:16] <knoba> rob0: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.
[16:53:12] <sunru> rob0: wow thanks.
[16:53:35] *** GoGi has joined #postfix
[16:54:55] <rob0> I get by without content filtering. Some other addresses in my domain are getting spammed pretty bad, though, so when I get around to it I will set up amavisd-new.
[16:55:19] <sunru> amavisd?
[16:55:25] <rob0> (with SA and URIBL checks of course)
[16:57:14] <e_> hm, amavisd is so... perl
[16:57:24] <sunru> ahh I see.
[16:57:33] <e_> there are other ways..
[16:57:40] <e_> like using smart policies
[16:57:53] <e_> or even use a faster tool like clapf or dspam
[16:59:20] *** Aron is now known as aron
[16:59:37] <CosMiC_Touch> f3ew:    ::   http://de.pastebin.ca/1179695
[16:59:39] <sunru> If only I could clone myself.
[16:59:46] *** Fallenou has joined #postfix
[17:00:32] <sunru> e_: so what anti-spam setup do you have now?
[17:00:44] *** ElDios has joined #postfix
[17:01:00] <ElDios> hi again.. have a relay access denied problem which I cannot understand
[17:01:03] *** shoonya has joined #postfix
[17:01:14] <rob0> !relay_denied
[17:01:15] <knoba> rob0: "relay_denied" : \"554 5.7.1 <RECIPIENT@RCPT_DOMAIN>: Relay access denied; from=<SENDER_ADDRESS> to=<RECIPIENT@RCPT_DOMAIN> proto=ESMTP helo=<HELO>\": This typically means that CLIENT_IP is not in mynetworks (and did not AUTH), and that RCPT_DOMAIN was not recognized as one of this Postfix's domains (not listed in mydestination, relay_domains or virtual_*_domains).
[17:01:31] <ElDios> I have a -o relay_domains=foo.bar,bar.foo,ecc.ecc directive in my master.cf
[17:01:40] <rob0> !relay_domains
[17:01:40] <knoba> rob0: "relay_domains" : a configuration parameter in the main.cf: What destination domains (and subdomains thereof) this system will relay mail to. Subdomain matching is controlled with the parent_domain_matches_subdomains parameter.
[17:01:49] <ElDios> comma separated
[17:02:06] <ElDios> and it seems it can't read the domains in that directive
[17:02:14] <sunru> clapf looks pretty good.
[17:02:31] <ElDios> cause if the ip that try to send the e-mail is in the mynetworks, everything is just fine
[17:02:42] <ElDios> otherwise 554 relay denied
[17:02:45] <ElDios> any idea?
[17:03:05] * f3ew wonders if someone could help CosMiC_Touch
[17:03:10] * f3ew is going home
[17:03:12] <ElDios> relay_domain can reside in the master.cf AFAIK
[17:03:22] <rob0> I don't hink it can, no.
[17:03:25] <rob0> think
[17:03:40] <ElDios> mm lemme see where I read it
[17:04:10] <CosMiC_Touch> Never mind f3ew, maybe you find time tomorrow ?
[17:04:16] <sunru> f3ew: hulp !
[17:04:22] <sunru> =]
[17:04:34] <f3ew> LO
[17:04:50] <f3ew> mofino, the queueid
[17:05:02] <e_> sunru: well.. yeah, that :)
[17:05:03] <rob0> !unknown_virtual
[17:05:03] <knoba> rob0: "unknown_virtual" : \"User unknown in virtual $X table\" means that the recipient domain was found in $virtual_$X_domains but the username@domain was not found in $virtual_$X_maps. ("$X" can be either alias or mailbox .)
[17:05:17] <f3ew> CosMiC_Touch, rob0 or cpm should be able to help, if not sysmonk
[17:05:25] * rob0 already did
[17:05:37] <sunru> e_: what clapf?
[17:05:51] <sunru> i might do nothing for a week.
[17:05:55] <sunru> =]
[17:05:59] *** tm-30740-exa has joined #postfix
[17:06:19] <f3ew> CosMiC_Touch virtual(8) does not deliver to pipes
[17:06:27] <f3ew> Google for the Mailman FAQ
[17:06:36] <f3ew> the same solution applies to majordomo
[17:06:58] <f3ew> http://www.google.com/search?q=Mailman+Postfix+virtual
[17:07:10] <sunru> thanks for the help!
[17:07:17] *** alienbrain has quit IRC
[17:07:29] <sunru> .oO(.oO(zzzz))
[17:07:48] *** ming_zym has joined #postfix
[17:08:25] <CosMiC_Touch> thx f3ew
[17:17:26] <e_> sunru: well.. to be honest i've ever used clapf only for antivirus, but it's antispam approach looks promising. dspam is known to be very accurate, and i'm actually setting it up right now
[17:17:48] *** mofino has left #postfix
[17:28:02] <ElDios> rob0 it could be used in master.cf
[17:28:28] <ElDios> but you've to create a custom version of rewrite and qmgr to make it works in the right way
[17:28:33] <ElDios> (just tried) ;)
[17:29:47] *** shinao1 has joined #postfix
[17:32:35] *** Tykling has joined #postfix
[17:42:09] *** mark-use has quit IRC
[17:58:52] *** danbeck_ has joined #postfix
[18:08:19] *** Tykling has left #postfix
[18:11:07] *** ElDios has quit IRC
[18:12:53] *** ming_zym has quit IRC
[18:18:07] *** ming_zym has joined #postfix
[18:25:26] *** sophokles1 has quit IRC
[18:26:31] *** Spec has quit IRC
[18:33:02] *** Wilco has quit IRC
[18:36:22] *** Spec has joined #postfix
[18:36:34] *** morpheus08 has joined #postfix
[18:41:33] <morpheus08> hi
[18:42:29] <morpheus08> is there someoen who can help me kindly with postfix? i have some issues while sendi mail to accounts
[18:43:17] <pickcoder> no one can help unless you ask a question other than "can someone help"
[18:43:22] *** m0f0x has joined #postfix
[18:43:57] <morpheus08> ok directly
[18:46:30] <morpheus08> i have a postfix serbvver with mysql database, when i crate an account on this server, the system send the mail message, but when i check the logs i see the is a string that say "unknown user" and on server disk is not created neither the domain  folder and the account folder? why this happen?
[18:48:24] *** Fallenou has quit IRC
[18:48:35] <PcPixel> meow :)
[18:48:37] <pickcoder> did you read the virtual readme?
[18:49:16] *** uid00 has joined #postfix
[18:49:19] <uid00> ello guys
[18:49:20] <pickcoder> as well as the MySQL
[18:49:27] <uid00> quick question regarding migration
[18:49:39] <uid00> server is already set up, using user accounts (non virtual)
[18:49:48] <uid00> ~/Maildir, e.g
[18:49:56] *** brancaleone has quit IRC
[18:49:58] <uid00> gonna be migrating users boxes first
[18:50:05] <uid00> or just, rather, a test
[18:50:34] <uid00> what's the best way to do this ->  Should I just stop the mail server on the old machine and move the boxes over when it's time, or migrate the DNS first?
[18:50:43] <shoonya> has anyone used ldap dynlist configuration with postfix ?
[18:52:01] *** syllogism has joined #postfix
[18:56:07] *** havvg has joined #postfix
[18:57:25] <uid00> jeebus folks
[18:57:29] <uid00> dont all help at once :)
[18:57:38] *** uid00 has quit IRC
[18:58:03] *** Pazzo has quit IRC
[19:01:32] <cpm> you'll want the new box all ready to go before you switch over dns. What you can do in the mean time, is drop the ttl on your dns for the zone that contains the mx record info. so that when you do make the switch, folks will pick up on it quickly.
[19:01:43] <rob0> 16:57 -!- uid00 [n=chatzill at static-71-240-123-98 dot pitt.east.verizon.net] has quit ["ChatZilla 0.9.83
[19:02:07] <rob0> This is one of those !sweet folks.
[19:04:52] <morpheus08> pickcoder: where is this virtual readme? or you mean the helpguide?
[19:05:40] *** PhilKC has quit IRC
[19:06:09] <morpheus08> regarding my problem, this issues happens due a misconfiguration or a problem on sql database?
[19:06:26] <rob0> Your copy of Postfix should have come with all the documentation. But there's also:
[19:06:29] <rob0> !virtual
[19:06:30] <knoba> rob0: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html
[19:06:55] <pickcoder> !mysql
[19:06:56] <knoba> pickcoder: "mysql" : http://www.postfix.org/MYSQL_README.html is helpful in configuring postfix to talk to a mysql server.
[19:07:17] *** Vivek has joined #postfix
[19:07:19] <morpheus08> so i must digit !virtual?
[19:07:26] <morpheus08> so i must digit !virtual
[19:07:34] <pickcoder> the links are there
[19:07:41] <rob0> huh?
[19:07:43] <sysmonk> where?
[19:08:05] <shoonya> has anyone used ldap dynlist configuration with postfix ?
[19:08:11] <cpm> can haz !virtual?
[19:09:24] <pickcoder> I dunno
[19:09:31] <Dominian> !virtual
[19:09:31] <knoba> Dominian: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html
[19:09:56] * pickcoder has <60mins
[19:10:05] <rob0> to live?
[19:10:11] <pickcoder> work time
[19:10:12] <cpm> oh noes!
[19:10:16] <morpheus08> but you think my problems depends of this virtual? i read it but not explain anything about my problem
[19:10:24] <pickcoder> then I will be attacked by a gang of toddlers at home
[19:10:42] * rob0 starts sharpening another toddler
[19:10:49] <sysmonk> is there any postfix channel for italians?
[19:10:56] <sysmonk> we could forward all *.it to that chan ;/
[19:11:06] <pickcoder> one wanting to constantly walk and another wanting to walk too without using her legs
[19:11:23] <rob0> /j #post-it
[19:11:35] <pickcoder> postfixit
[19:11:46] <pickcoder> postbrokeit is the evil twin
[19:12:05] <morpheus08> lol very funny guys
[19:12:29] <morpheus08> even if there were an italian channel i dont think they could help
[19:12:33] * pickcoder would bow but he may not be able to stand back up
[19:13:11] <magyar_> hi, why would some emails not get a score when using amavis?
[19:13:26] <sysmonk> magyar_: that's amavis problem
[19:13:36] <morpheus08> so seems no one can give a suggestion for my issue?
[19:13:39] <pickcoder> magyar_: they weren't passed to the content_filter?
[19:13:48] <pickcoder> are there any headers for amavis?
[19:13:56] <rob0> Good help on IRC requires a good problem description, see /topic.
[19:14:01] <sysmonk> pickcoder: they didn't get score at which mails start having spam-score headers ? :)
[19:14:28] <morpheus08> rob0: you mean me?
[19:15:37] * cpm helps rob0
[19:16:31] <magyar_> pickcoder, the email is coming from a backup MX. Do you know a way to scan backup MX email for score?
[19:16:36] <magyar_> fudge
[19:17:13] <cpm> magyar_, you don't.
[19:17:43] <cpm> mail that is coming from the backup is assumed to be good. yet still another reason why backup mxes are a REALLY bad idea, unless you know exactly what you are doing.
[19:18:12] <cpm> also why quality spammers always target the backup mx first.
[19:18:40] <pickcoder> hrm
[19:18:42] * pickcoder makes a note
[19:18:46] <pickcoder> :)
[19:21:32] <magyar_> cpm, quality regular servers also send mail during a backup MX
[19:22:02] <magyar_> also there are tons of quality email servers that don't bother checking MX records when they send emails
[19:22:11] *** GoGi has quit IRC
[19:22:21] <magyar_> and the list goes on and on
[19:22:39] <magyar_> s/during/using
[19:23:01] *** alienbrain has joined #postfix
[19:24:40] <sysmonk> magyar_: that's why you should scan mail at backup mx too
[19:24:57] <magyar_> sysmonk, i sure do that
[19:25:08] <sysmonk> then why there is spam coming from backup mx ? :)
[19:25:16] * cpm gets some popcorn
[19:25:21] <magyar_> but, the user has it's own .spamassassin file
[19:25:43] <sysmonk> magyar_: isn't that your configuration problem ?: )
[19:25:47] <sysmonk> and not the users problem
[19:25:57] * rob0 wants a PONY !!!!!
[19:26:13] <sysmonk> also, if you already have the hardware for a backup mx, why not make it a second mail server with one backend
[19:26:43] * sysmonk gives cpm a pony and rob0 some popcorn
[19:26:58] <magyar_> sysmonk, didn't get the last part "one backend"
[19:26:59] <PcPixel> ponycorn?
[19:27:23] <sysmonk> magyar_: 2 servers with one storage backend
[19:27:41] <sysmonk> or shared storage (i.e. drbd or whatever it is called )
[19:28:00] * magyar_ feels like in the starting role for a crappy Hollywood flick
[19:28:10] <sysmonk> magyar_: www.drbd.org ?
[19:28:13] <magyar_> mysql?
[19:28:31] <magyar_> sysmonk, they are in two different locations
[19:28:52] <sysmonk> magyar_: what does mysql do here? :P
[19:28:57] *** n8rrv has joined #PostFix
[19:29:11] <sysmonk> magyar_: two different locations are fun too ;P
[19:29:14] <magyar_> sysmonk, I was thinking "backend"
[19:29:31] <sysmonk> morpheus08: i DON'T speak italian so you can stop pm'ing me
[19:29:43] <magyar_> ehehe
[19:29:45] <sysmonk> magyar_: 'backend' as in where emails are stored
[19:29:51] <sysmonk> postfix can't store in mysql directly
[19:29:53] <magyar_> no dame queata merda
[19:30:00] <morpheus08> ops scusmi
[19:30:09] <sysmonk> BUT you can achieve that with stuff like dbmail
[19:30:25] <n8rrv> I have a bunch of email in my mailq, is there someway I can manipulate that queue? ie, there's emails to user at anothercompany dot com, and I want to remove every one of them (I've already made changes to main.cf so that no more are put in the queue but are rejected)
[19:30:43] <magyar_> sysmonk, thanks for the info
[19:30:46] <n8rrv> actually to EveryUser at anothercompany dot com
[19:30:49] <sysmonk> n8rrv: as i can understand, you want to remove them
[19:30:53] <n8rrv> Yup
[19:30:56] <rob0> pretty pony
[19:30:58] * magyar_ hopes the flick was fun
[19:30:58] <sysmonk> n8rrv: you can remove emails from the queue with postsuper -d QUEUEID
[19:31:05] <sysmonk> mailq prints the queue id and more info
[19:31:07] <n8rrv> Tnx.
[19:31:15] <sysmonk> so some basic parsing and you're done
[19:31:17] <n8rrv> I can grep mailq to find the queueid, appreciate the help.
[19:31:22] <sysmonk> n8rrv: yup
[19:31:29] <sysmonk> rob0: popcorn, not pony!
[19:32:08] * rob0 used the popcorn to attract the pony away from cpm
[19:32:15] <sysmonk> rob0: oh, that's smart
[19:32:16] <cpm> No pony!
[19:32:20] <cpm> http://i-want-a-pony.com/IWantAPony.jpg
[19:32:24] <rob0> pretty pony
[19:32:27] <n8rrv> Ok, odd thing, when I type just 'postsuper' I'm getting a warning that a file name doesn't exist. What file is postsuper looking at so I can remove that line?
[19:32:43] <sysmonk> n8rrv: postsuper -d ...
[19:33:09] <sysmonk> n8rrv: maybe, while you were lagging around typing the command, mail already went out of the queue ?
[19:33:10] <n8rrv> Yea, I'm about to do that, but I also get the same error when I reload postfix
[19:33:30] <n8rrv> Is completely unrelated to the help you've given me.
[19:33:57] <sysmonk> and we didn't see the whole error and the situation in which it is printed
[19:34:15] <sysmonk> so, please, use a pastebin to paste the errors and log files, and then ask :)
[19:34:24] <PcPixel> did you try updatedb then locate postsuper?
[19:34:51] <n8rrv> Oh, I'm sorry
[19:34:52] <sysmonk> PcPixel: as far as i understood, it's the postsuper who can't find some file, not the shell
[19:34:57] <n8rrv> I wasn't very clear....
[19:35:11] <PcPixel> sysmonk: i though postsuper wa the command it oculdnt find. i could be totally wrong
[19:35:19] <PcPixel> damn fast typing
[19:35:29] <sysmonk> :))
[19:35:33] <n8rrv> postsuper is fine, but I think it's trying to read a configuration file, and a file in that configuration file no longer exists
[19:35:51] <sysmonk> don't think, pastebin.
[19:36:01] <n8rrv> Hehehe, ok, tnx.
[19:36:26] *** phnord has quit IRC
[19:36:37] * cpm agrees not to think
[19:36:46] <rob0> nice pony
[19:37:15] <n8rrv> I have to paste here, it's only 1 line... (The error is on my unix box I'm ssh'd into...)
[19:37:39] <n8rrv> postsuper: warning: bogus file name: active/testing.qshape.txt
[19:38:04] <sysmonk> n8rrv: ergh, did you create a test.qshape.txt file in postfix's active dir ?
[19:38:10] <n8rrv> So my thinking was that testing.qshape.txt doesn't exist in the active queue
[19:38:12] <sysmonk> i.e. /var/spool/postfix/active/testing.qshape.txt
[19:38:26] <n8rrv> I didn't, nope. Maybe a previous admin?
[19:38:39] <sysmonk> wait, i'll try to call hinm
[19:38:39] <rob0> !!
[19:38:40] <knoba> rob0: Error: "!" is not a valid command.
[19:38:40] <sysmonk> him*
[19:38:41] <sysmonk> ...
[19:39:06] <n8rrv> Ahh, ok. Found the problem, again, appreciate all the great help!
[19:39:17] <sysmonk> n8rrv: nah, i called the admin, he said he didn't create it, he says it was you!
[19:39:41] <n8rrv> My name isn't craig :) Two admins before me was.
[19:39:56] <sysmonk> oh, how much admins your company had...
[19:40:06] <n8rrv> In the past year?
[19:40:11] <sysmonk> ouch
[19:40:14] <n8rrv> 1
[19:40:17] <rob0> Just so the next guy isn't here complaining about you, don't go mucking about in the Postfix queue_directory.
[19:40:23] <n8rrv> Before that, probably 10 in 3 yrs.
[19:40:40] <sysmonk> n8rrv: what's the problems with all the admins?
[19:40:45] <sysmonk> low sallary? or stupid people?
[19:40:46] <sysmonk> ;)
[19:40:53] <n8rrv> One guy lasted an hour, couldn't deal w/ the stress I guess.
[19:41:02] <sysmonk> o_o
[19:41:13] <sysmonk> what stresses you?
[19:41:26] <n8rrv> I told them they could talk to me about stress after being chased for 36 hours by a russian sub while working navigation.
[19:41:50] * sysmonk plays the russian
[19:41:52] * sysmonk chases n8rrv
[19:41:58] <n8rrv> Hell, this is my dream job, I don't know what their problems were. Probably didn't like working in San Fran.
[19:42:22] <sysmonk> n8rrv: maybe they have a position for a remote part-time admin? :P
[19:43:25] <n8rrv> Nope
[19:43:33] <n8rrv> You gunnin' for my job :)
[19:44:03] <sysmonk> n8rrv: not for your job, for a additional position
[19:44:05] <n8rrv> The admin part is very small, I do a lot of kernel development.
[19:44:21] <sysmonk> a remote part-time won't replace a local full-time
[19:44:27] <sysmonk> oh
[19:44:43] <sysmonk> which kernel?
[19:45:09] <n8rrv> Um, is that a trick question? Linux
[19:45:25] <n8rrv> Right now 2.6.18
[19:45:33] <n8rrv> Mods not really development
[19:45:34] <sysmonk> n8rrv: linux is not the only thing in the world which has a kernel
[19:45:40] <sysmonk> and i personally don't use linux
[19:45:43] <n8rrv> Ahhh
[19:45:54] <PcPixel> sysmonk: you dont?!?! I TRUSTED YOU!!!!
[19:45:57] <PcPixel> :P
[19:46:02] <sysmonk> PcPixel: :)
[19:49:35] <rob0> Why would you think "which kernel?" to be a trick question?
[19:49:52] <n8rrv> Being a smartass, my sincerest apologies.
[19:50:08] <n8rrv> I didn't know that postfix ran on other OS's
[19:51:11] *** ming_zym has quit IRC
[19:51:54] <rob0> Wietse is on FreeBSD, I believe. I know he's not a Linux fan.
[19:54:59] <sysmonk> hm, atleast he is not the maintainer of postfix port on FreeBSD
[19:57:30] *** pitakill has joined #postfix
[20:01:24] *** pickcoder has quit IRC
[20:13:05] *** havvg has quit IRC
[20:14:44] *** gonewestcoast has joined #postfix
[20:17:42] *** alienbrain has quit IRC
[20:17:43] *** DGnome has quit IRC
[20:17:43] *** fx0 has quit IRC
[20:17:43] *** bio____ has quit IRC
[20:17:43] *** idle-boy has quit IRC
[20:17:56] *** alienbrain has joined #postfix
[20:17:56] *** DGnome has joined #postfix
[20:17:56] *** fx0 has joined #postfix
[20:17:56] *** bio____ has joined #postfix
[20:17:56] *** idle-boy has joined #postfix
[20:19:34] *** master_of_master has joined #postfix
[20:20:21] *** githogori has joined #postfix
[20:21:35] *** xp_prg has joined #postfix
[20:22:13] <xp_prg> hi all, there is a need to setup postfix such that it will send email out on a different ip based on the domain of the sender, is that possible to configure with postfix?
[20:24:23] *** gonewestcoast_ has joined #postfix
[20:30:09] *** master_o1_master has quit IRC
[20:33:57] <lambda__> !basic
[20:33:58] <knoba> lambda__: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.
[20:35:08] <n8rrv> sysmonk, I owe you a beer.
[20:36:02] <sysmonk> doh, only one ?!
[20:37:14] *** gonewestcoast_ has quit IRC
[20:37:14] *** fx0 has quit IRC
[20:37:14] *** DGnome has quit IRC
[20:37:15] *** bio____ has quit IRC
[20:37:15] *** alienbrain has quit IRC
[20:37:15] *** idle-boy has quit IRC
[20:37:48] *** morpheus08 has left #postfix
[20:38:25] <n8rrv> Ok, maybe a few pints. So, next time you're in San Fran, give me a ring.
[20:39:02] <sysmonk> let me see my calendar
[20:39:02] *** gonewestcoast_ has joined #postfix
[20:39:02] *** alienbrain has joined #postfix
[20:39:02] *** DGnome has joined #postfix
[20:39:02] *** fx0 has joined #postfix
[20:39:02] *** bio____ has joined #postfix
[20:39:02] *** idle-boy has joined #postfix
[20:39:03] <n8rrv> I wrote a ruby script that parsed mailq and did the remove, and worked a charm. Just got a call from the owners son, he's pleased.
[20:39:05] <sysmonk> i think it'll be somewhere in my next life
[20:39:05] <sysmonk> ;)
[20:39:28] <n8rrv> Ok, next time you're in the US?
[20:39:38] <sysmonk> n8rrv: i just do one-liners in that case
[20:39:41] *** gonewestcoast has quit IRC
[20:39:56] <sysmonk> or, i think, there are some 'already made' perl scripts for that stuff
[20:40:03] <sysmonk> or even shell scripts, dunno, don't use em
[20:40:15] <sysmonk> n8rrv: that's somewhere near the 'next life' timeframe ;)
[20:40:24] <n8rrv> Gave me an excuse to script instead of asm/C
[20:42:24] *** gcleric has quit IRC
[20:45:42] *** Motoko-chan has joined #postfix
[20:48:46] *** skyweb has joined #postfix
[20:52:27] <magyar_> !local_transport
[20:52:28] <knoba> magyar_: "local_transport" : a configuration parameter in the main.cf: The default mail delivery transport for local destinations. A recipient address is local when its domain matches $mydestination, $inet_interfaces or $proxy_interfaces. This information can be overruled with the transport(5) table.
[21:23:04] <xp_prg> so nobody knows the answer to my question?
[21:26:50] *** Haris has joined #postfix
[21:27:37] *** xnixan has quit IRC
[21:29:20] *** dogmeat has quit IRC
[21:31:22] *** ikaro^ has joined #postfix
[21:36:53] <magyar_> !smtpd_hard_error_limit
[21:36:54] <knoba> magyar_: "smtpd_hard_error_limit" : a configuration parameter in the main.cf: The maximal number of errors a remote SMTP client is allowed to make without delivering mail. The Postfix SMTP server disconnects when the limit is exceeded.
[21:37:01] *** ikaro^_ has joined #postfix
[21:37:51] *** alienbrain has quit IRC
[21:40:56] *** dogmeat has joined #postfix
[21:43:42] *** ikaro has quit IRC
[21:43:47] *** ikaro^_ is now known as ikaro
[21:45:26] *** danbeck__ has joined #postfix
[21:48:29] *** ikaro^ has quit IRC
[21:48:44] *** lambda__ has quit IRC
[21:52:57] *** ziro has joined #postfix
[21:53:02] *** danbeck_ has quit IRC
[21:53:03] *** cpm has quit IRC
[21:55:25] *** Haris1 has quit IRC
[21:56:41] *** lrp has joined #postfix
[21:57:35] <lrp> hello i ave the followin trouble , i was using mailscanner and now i am using amavis-new , but i have 2000 messages in /var/spool/postfix/hold now how can i mode all that mail to the queue ?
[21:59:27] *** Haris1 has joined #postfix
[21:59:46] *** ziro has quit IRC
[22:00:05] <Dominian> man postqueue  and man postsuper possibly could help you
[22:00:15] *** ziro has joined #postfix
[22:00:23] *** ziro has quit IRC
[22:00:36] *** ziro has joined #postfix
[22:02:15] *** n8rrv has quit IRC
[22:02:54] *** alienbrain has joined #postfix
[22:04:45] *** dusty--- has quit IRC
[22:06:03] *** Haris1 has quit IRC
[22:06:03] *** fx0 has quit IRC
[22:06:03] *** DGnome has quit IRC
[22:06:03] *** gonewestcoast_ has quit IRC
[22:06:03] *** bio____ has quit IRC
[22:06:04] *** idle-boy has quit IRC
[22:06:35] *** Haris1 has joined #postfix
[22:06:35] *** gonewestcoast_ has joined #postfix
[22:06:35] *** DGnome has joined #postfix
[22:06:35] *** fx0 has joined #postfix
[22:06:35] *** bio____ has joined #postfix
[22:06:35] *** idle-boy has joined #postfix
[22:06:36] *** magyar_ has quit IRC
[22:06:58] *** magyar_ has joined #postfix
[22:07:41] *** Joe_Wulf has joined #postfix
[22:10:13] *** n8rrv has joined #PostFix
[22:11:26] *** pitakill has quit IRC
[22:13:20] *** shinao1 has quit IRC
[22:13:44] *** pirho has joined #postfix
[22:16:54] *** JoeWulf has quit IRC
[22:24:32] *** lrp has quit IRC
[22:24:54] *** magyar_ has quit IRC
[22:25:27] *** magyar_ has joined #postfix
[22:31:38] *** PcPixel has quit IRC
[22:32:54] *** madrescher has quit IRC
[22:35:55] *** Vivek has quit IRC
[22:37:15] *** rootsvr has joined #postfix
[22:41:42] *** j_s has quit IRC
[22:42:14] *** m0f0x has quit IRC
[22:44:29] *** F6F has quit IRC
[22:44:36] *** _Tino is now known as Tinozaure
[22:44:51] *** F6F has joined #postfix
[22:55:46] <e_> hmm.. is there any way to have postfix use different content filters depending on wether the mail is inbound or outbound?
[22:56:32] <sysmonk> have seperate inbound and outbound smtp servers
[22:56:59] <e_> hmm :/
[22:57:09] <sysmonk> or, if your users send mail using 465/587 you could use a different content-filter on those ports
[22:57:23] <sysmonk> if they submit the mail via port 25 - then no
[22:57:42] <e_> okay
[22:57:45] <e_> too bad
[22:57:51] <sysmonk> although, you could write a custom policy daemon which would analyze the info and use a FORWARD action
[22:58:05] <e_> or FILTER action, actually
[22:58:17] <sysmonk> err, sorry, that should have been FILTER, not FORWARD
[22:58:29] <e_> :)
[22:58:38] <e_> yeah that's the way i have it now..
[22:58:50] <e_> but now the FILTER action precedends greylisting/spf..
[22:59:02] <e_> so greylisting/spf never does anything :(
[22:59:07] <sysmonk> really, the _best_ way is to have inbound and outbound seperated
[22:59:24] <e_> yes, i agree
[22:59:44] <e_> i was just hoping i could do it without using two different ips, but you're right, i should do it that way
[23:00:34] *** felix-da-catz has joined #postfix
[23:04:37] *** alienbrain has quit IRC
[23:04:43] <magyar_> hi, I have greylisting installed on my debian box, I also set "check_policy_service inet:127.0.0.1:60000" added as per documentation, but no greylisting occures
[23:07:59] *** x86 has joined #postfix
[23:08:27] <x86> I'm using postfix+clam+sa, how do I block a specific email address from sending email to anyone on my server?
[23:09:28] <Mazon> add user at domain dot tld REJECT to access list
[23:09:40] <x86> access list is located where?
[23:09:50] <Mazon> specified by check_sender_access
[23:10:09] <Mazon> for instance: smtpd_sender_restrictions	= check_sender_access hash:/opt/local/etc/postfix/access,
[23:10:24] <Mazon> where access is a text file that has been postmap'ed
[23:10:29] <sysmonk> Mazon: wee, /opt/ ! :) solaris?
[23:10:31] <x86>  /etc/postfix # grep -ri 'check_sender_access' *
[23:10:36] <Mazon> no - mac mini
[23:10:37] <x86>  /etc/postfix #
[23:10:42] <sysmonk> oh
[23:10:51] <sysmonk> !basic
[23:10:51] <Mazon> for a day or two more
[23:10:51] <knoba> sysmonk: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.
[23:10:52] <sysmonk> x86: ^^
[23:10:57] *** rootsvr has quit IRC
[23:11:01] <Mazon> replacing the mac with a new ubuntu setup
[23:11:51] <x86> Mazon: I only see a mention of that in main.cf.default, and an empty assignment in master.cf
[23:12:01] <x86> Mazon: where should I assign it?
[23:12:19] <Mazon> assign it to /etc/postfix/access
[23:12:30] <x86> right, but in master or main?
[23:12:35] <Mazon> main
[23:12:57] <x86> cool, thanks
[23:13:17] <Mazon> then add the reject line to the access file and postmap it and postfix reload
[23:14:01] *** hooch has quit IRC
[23:14:07] *** hooch has joined #postfix
[23:14:25] <x86> right
[23:14:28] <x86> cool
[23:14:35] <x86> so can i use wildcards?
[23:14:44] <x86> user@*, for example?
[23:14:56] <x86> "user@* REJECT"
[23:15:00] <Mazon> not sure actually
[23:15:04] <x86> ah ok
[23:15:05] *** dusty_ has joined #postfix
[23:15:06] <Mazon> rtfm ;)
[23:15:15] <x86> url? :)
[23:15:42] <Mazon> http://www.postfix.org/SMTPD_POLICY_README.html
[23:15:43] <rob0> http://localhost/
[23:15:56] <Mazon> sorry - http://www.postfix.org/postconf.5.html#check_sender_access
[23:16:16] <Mazon> which yields: http://www.postfix.org/access.5.html
[23:16:28] <Mazon>        user@  Matches all mail addresses with the specified  user
[23:16:28] <Mazon>               part.
[23:16:55] <n8rrv> Ok sysmonk, where can we meet for that beer? Scotland maybe?
[23:17:38] <x86> Mazon: rock on... thanks so much :)
[23:17:44] <n8rrv> Or I'll be in Brisbane in a couple months.
[23:18:12] <sysmonk> n8rrv: heh
[23:18:19] <sysmonk> n8rrv: i'm from europe
[23:18:25] <sysmonk> n8rrv: lithuania, even :)
[23:18:49] <sysmonk> our sallaries are quite small so i'm not able to travel abroad for a beer
[23:18:56] <sysmonk> or even for a conference ;/
[23:19:59] <sysmonk> so, that's quite impossible. unles 1. you come to lithuania 2. you buy me a two way ticket to <somewhere> where we can meet :P
[23:21:01] *** rootsvr has joined #postfix
[23:24:59] *** syllogism has quit IRC
[23:25:05] *** Draecos has left #postfix
[23:26:52] <Haris> damn, I should start thinking what my words mean before I speak. shEEP!
[23:27:07] <sysmonk> heh
[23:27:23] <x86> hmm
[23:28:09] <x86> grepping /var/log/maillog for reject messages, parsing out the rejected IP, and writing a script to drop all traffic to/from that IP via iptables
[23:28:19] <Haris> sysmonk: Tell caelian, I did not intend to insult anyone. My words put the wrong meaning
[23:28:21] <x86> makes me wonder how many rules one can put in iptables before it dies
[23:28:31] <x86> I'm loading about 40,000 in right now
[23:28:41] *** rootsvr has quit IRC
[23:28:44] <sysmonk> x86: try looking at fail2ban, if you're up to that already
[23:29:07] <Haris> sysmonk: It'll take me alot of time to learn rsync and I was working on tar. I did not insult him for telling me about tar
[23:30:37] <n8rrv> Hmmm, I could dcc you my recipe for a nice Amber Ale :)
[23:31:08] <n8rrv> Are you allowed to make beer in Lithuania?
[23:31:16] <sysmonk> Haris: i don't want to be a delivery boy, if you want to tell him - change your nickname
[23:31:34] <sysmonk> n8rrv: afaik - yes, but in limited capacity
[23:31:46] <Haris> hmm
[23:31:56] <n8rrv> Why would it take time to learn rsync.
[23:32:02] <Haris> well, ban evasion is hardly a nice way to talk to someone. He'll again take it the wrong way
[23:32:17] <Haris> I suppose, maybe he wouldn't mind a pm
[23:32:19] <sysmonk> n8rrv: we're discussing something what was discussed on some other channel
[23:32:38] <n8rrv> <lurk>
[23:32:40] <sysmonk> Haris: it's up to you
[23:32:56] <sysmonk> i don't know how to act in that way, i don't get banned
[23:33:21] <Haris> if I'm on his ignore, I don't think I'll succeed
[23:33:24] <Haris> though
[23:33:42] <sysmonk> Haris: uh, changing the nick is so hard theese days
[23:33:56] <sysmonk> anyway, let's end this conversation
[23:34:13] <sysmonk> and let's put all the effort on n8rrv beer stuff :)
[23:35:30] <Haris> ah well
[23:35:40] *** Haris is now known as Ok-this-is-Haris
[23:35:46] <sysmonk> hah
[23:36:45] *** Ok-this-is-Haris is now known as Haris
[23:37:03] <Haris> ok, this time, I think he may have received my pm
[23:37:05] <x86> sysmonk: yeah I don't think I'd trust that
[23:38:09] <sysmonk> x86: trust what?
[23:38:15] <x86> sysmonk: I'm going to write a script to cat|grep|cut|cut > newfile, the diff newfile and oldfile to create a "patch" script for iptables
[23:38:33] <sysmonk> uhm
[23:38:36] <x86> because i know exactly what I'm looking for
[23:38:41] <sysmonk> depends on how you'd want it to be done
[23:38:51] <n8rrv> Why not just wget sinokorean and run it on cron?
[23:38:57] <x86> doesn't have to be real-time by any means
[23:38:58] <sysmonk> you could 1. tail the file, grep the rejects 2. check if the reject is in teh bad table already 3. if not - add it
[23:39:00] *** danbeck__ has quit IRC
[23:39:07] <sysmonk> that's for real-time, ofcourse
[23:39:23] <sysmonk> almost real-time :)
[23:39:23] *** danbeck__ has joined #postfix
[23:41:35] <x86> heh it's still working on setting up those 40,000 rules
[23:41:37] <x86> this is fun
[23:42:24] <x86> wow surprisingly, it's only got about 19,000 in already
[23:42:33] *** Zblakany has quit IRC
[23:42:50] <sysmonk> x86: why not use postfix's access tables?
[23:42:57] <sysmonk> or set up a local rbl ?
[23:43:32] <e_> x86: with that many rules in one CHAIN you're terribly slowing down iptables
[23:45:10] <sysmonk> mhm
[23:45:50] <e_> x86: at least put it in an SMTP chain and use state NEW as a match
[23:45:57] <e_> hm
[23:46:00] <x86> e_: I really don't care....
[23:46:11] <x86> e_: that'll actually slow it down more if you're matching state also
[23:46:21] * e_ was just thinking that
[23:46:39] <x86> sysmonk: I want to take load off of postfix is the key here
[23:47:16] <x86> sysmonk: every time one of these comes in, postfix generates a RBL check, so it's going to reduce internet traffic also
[23:48:17] <sysmonk> x86: note the word LOCAL in my rbl sentence
[23:48:54] <x86> sysmonk: that's just more work, and still does not take burden off of postfix
[23:49:16] <x86> ~16,000 to go
[23:51:16] <e_> and how do you maintain those ips?
[23:51:23] <e_> some open relays are getting fixed..
[23:53:32] *** felix-da-catz is now known as felix-da-catz_zz
[23:57:25] *** n8rrv has left #PostFix

top