[00:03:55] *** xpoint has quit IRC [00:05:46] *** shoonya has quit IRC [00:06:41] <x86> e_: *shrugs* [00:06:45] <x86> not my problem ;) [00:06:51] *** danbeck__ has quit IRC [00:06:55] <x86> bbl [00:06:56] *** x86 has left #postfix [00:15:55] *** seekwill has quit IRC [00:17:20] <e_> hm... is there any easy way to share an aliases over all virtual_domains? [00:24:52] *** gcleric has joined #postfix [00:29:26] <e_> sysmonk: what about using the filter action in a table with check_client_access? [00:29:49] <sysmonk> what are we talking about? [00:32:22] <e_> the inbound/outbound content filter thingy [00:33:01] <sysmonk> ah [00:33:10] <sysmonk> yeah, you can use it [00:33:32] <e_> that seems like a smart workaround [00:33:43] <e_> actually, depending on how costy a pcre table is [00:35:07] *** xnixan has joined #postfix [00:35:13] <sysmonk> pcre? client_access? [00:35:20] <sysmonk> o_o [00:35:36] <e_> i'm sorry, i'm refering to this: http://dspam.nuclearelephant.com/dspam-users/1842.html [00:35:38] <sysmonk> what kind of regexps do you want to do in client_access ? [00:35:44] <e_> (by http://dspamwiki.expass.de/Installation/Postfix/NealesSetup) [00:36:27] <sysmonk> that will send all stuff to the filter.. [00:37:30] <sysmonk> i don't see why this won't filter outbound [00:37:30] <e_> if you have permit_sasl_authenticated before the pcre, it won't filter mails from authenticated users [00:37:34] <sysmonk> it will filter both in and out [00:37:45] <sysmonk> oh, so your users use auth ? [00:37:49] <e_> yes [00:38:02] <sysmonk> oh, you haven't mentioned that :) [00:38:08] <e_> heh.. i mean what else [00:38:20] <e_> the other way would be working with permit_mynetwork then [00:38:34] <sysmonk> or pop-before-smtp or anything else [00:38:37] <e_> same thing, if it'd be in front of the pcre thing it won't get filtered [00:38:44] <e_> ouch [00:38:50] <e_> pop-before-smtp is way too nasty ;) [00:38:54] <sysmonk> ye [00:38:57] * sysmonk only uses sasl [00:39:05] <e_> sasl is ftw [00:39:10] <sysmonk> yup [00:39:16] <e_> although i still have this bad file descriptor error about the sasldb2.. [00:42:18] <e_> wow.. putting that into smtpd_recipient_restrictinos *after* the check_policy thing also seems to bypass my greylisting issue.. [00:42:18] <e_> nice [00:42:24] *** Haris1 has quit IRC [00:44:49] * sysmonk looks at the clock. time to go to sleep [00:46:15] *** fx0 has quit IRC [00:46:15] *** DGnome has quit IRC [00:46:15] *** gonewestcoast_ has quit IRC [00:46:15] *** bio____ has quit IRC [00:46:16] *** idle-boy has quit IRC [00:47:16] *** idle-boy has joined #postfix [00:48:47] *** bio___ has joined #postfix [00:52:24] *** jurism has joined #postfix [00:52:35] *** gonewestcoast has joined #postfix [00:54:24] *** Fallenou has joined #postfix [00:54:41] <soren> Works /win 15 [00:54:45] <soren> ferk... [00:57:19] *** DGnome has joined #postfix [00:59:21] <jurism> I am newbie. What should I do to send e-mail with my webserver without problems? I use ubuntu. Settings: mydestination = server1.mydomain.lv, localhost.mydomain.lv, , localhost I have already NS records for google apps (gmail) to work with mydomain.lv domain. What NS records should I add to work mail sending with my postfix server? :) [01:00:57] <xp_prg> hi all, there is a need to setup postfix such that it will send email out on a different ip based on the domain of the sender, is that possible to configure with postfix? [01:02:23] <jurism> Do I have fully functional email server if I have only postfix+procmail. Do i need sendmail or other servers? Sorry for my stupid questions... [01:07:16] *** skyweb has quit IRC [01:11:28] *** archangel7863 has joined #postfix [01:11:57] *** archangel7863 has quit IRC [01:12:21] *** GoGi has joined #postfix [01:12:45] *** archangel7863 has joined #postfix [01:15:45] <roe_> jurism, what is the motivation for the question? [01:16:20] <roe_> for the first question: [01:16:22] <roe_> !basic [01:16:23] <knoba> roe_: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here. [01:16:35] <roe_> xp_prg, yes... I think [01:16:41] <roe_> !address_class [01:16:42] <knoba> roe_: Error: "address_class" is not a valid command. [01:16:45] <xp_prg> can you tell me more about how that works? [01:16:57] <jurism> I want to send e-mail with my webserver to all e-mail service providers (gmail, yahoo etc.). I can send email emssages only to gmail accounts [01:17:02] <roe_> !address_map [01:17:02] <knoba> roe_: Error: "address_map" is not a valid command. [01:17:25] <xp_prg> roe_ ? [01:17:39] <roe_> xp_prg, workin on it one sec, I forget the postfix term [01:20:46] <jurism> And I have dovecot too (I am using Virtualmin). Is it problem iin DNS settings or in mail server configuration? [01:21:30] <roe_> http://www.postfix.org/ADDRESS_CLASS_README.html [01:21:58] <xp_prg> roe_ why would I want to do that with postfix, by the way this deals with dkim [01:22:34] <roe_> xp_prg, maybe I don't understand your question [01:22:38] *** F6F has quit IRC [01:23:00] <xp_prg> why would you want to send an email out on a different ip address? [01:23:04] <xp_prg> then the one you received it on? [01:23:18] <roe_> oh, are you asking why one would want to or how one would do it? [01:23:27] <xp_prg> why [01:23:34] <roe_> not sure [01:23:44] <roe_> I am sure it is helpful in a cluster environment [01:24:05] <xp_prg> ever played with dkim? [01:24:09] <roe_> a little bit [01:24:22] <xp_prg> it has to do with that [01:25:24] <roe_> Actually dkim digitally signs the message, with a key verifying its origination. It will work in either scenario [01:27:11] <roe_> you can, similar to how amavis works, pipe outgoing mail to a dkim proxy on a different port or IP address but that is not necessary, and address_classes have been around long before dkim [01:30:52] * e_ just set up dkim [01:31:20] <e_> and to answer your question, if you have legitimate bulk mailing you might have dedicated machines for that.. [01:32:02] *** adie_ is now known as adie [01:32:07] <roe_> their are some really odd abilities that many people have a hard time fathoming why. Rest assured smarter people than you or I have a good reason [01:32:14] <roe_> crap, did it again [01:32:16] <roe_> s/their/there [01:33:16] <e_> roe: what do you mean? [01:34:11] <roe_> I mean that if there is a feature in postfix that you can't understand why anyone would ever want, there is probably a reason you aren't thinking about [01:34:57] <e_> oh [01:34:58] <e_> right [01:35:17] <e_> still that kind of leaves out that coders think weird from time to time ;) [01:35:59] *** cyr- has quit IRC [01:39:53] *** jurism has quit IRC [01:47:43] *** Led-Hed has joined #postfix [01:47:45] *** GoGi has quit IRC [01:48:44] <Led-Hed> is it possible to have a Virtual Alias call a script. So if mail is sent to the 'SPAM' alias it calls a spam filter? [01:50:17] <e_> exactly ;) [01:55:47] *** gcleric has quit IRC [01:56:38] *** war9407 has quit IRC [01:56:53] *** habnabit_ has joined #postfix [01:57:50] *** car_watt has quit IRC [01:59:27] <habnabit_> I'm trying to set up an alternate smtpd instance in my master.cf file that checks a policy server. -o 'smtpd_recipient_restrictions=reject_unauth_destination,check_policy_service inet:127.0.0.1:10031' seems to be failing, as smtpd thinks the last bit is another argument, not a parameter. How can I do this? [02:00:56] <rob0> , [02:01:01] <rob0> or cleaner: [02:01:11] <rob0> !restriction_classes [02:01:12] <knoba> rob0: Error: "restriction_classes" is not a valid command. [02:01:14] <rob0> !restriction_class [02:01:15] <knoba> rob0: "restriction_class" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html [02:02:06] <habnabit_> By a comma, you mean "-o 'smtpd_recipient_restrictions=reject_unauth_destination,check_policy_service,inet:127.0.0.1:10031'"? [02:02:15] <rob0> yes [02:02:21] <habnabit_> Oh, okay. [02:02:26] <e_> i have an alias in /etc/aliases like this: foo: "|/some/tool -some-option", but mail to it bounces back with user unknown: "|/some/tool -some-option", why is that? [02:02:44] <rob0> but note, that is not going to work as smtpd_recipient_restrictions [02:02:57] <habnabit_> Why's that? [02:03:43] <e_> ehm, a comma between "check_policy_service and the location??" [02:03:45] <rob0> TIAS, it is one of Postfix's best error messages. :) [02:03:46] <e_> err [02:03:50] <e_> "check_policy_service" [02:03:56] *** foxbuntu has joined #postfix [02:04:06] <habnabit_> Ookay. [02:04:07] <e_> i have this: smtpd_recipient_restrictions = check_policy_service inet:127.0.0.1:10031,permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination [02:04:10] <rob0> basically, you would become an open relay [02:04:28] <habnabit_> What order should I put it in? [02:04:31] <foxbuntu> I am having an issue with saslauth on my postfix server, anyone have some advice? http://mythbuntu.pastebin.com/mf3d73a7 [02:04:34] <e_> (with the policyd returning DUNNO if there isn't anything else) [02:04:34] <rob0> e, irrelevant to you [02:04:53] <e_> ? [02:04:58] <habnabit_> rob0: actually, I only want this bound to 127.0.0.1 anyway. [02:05:03] <rob0> 23:59 < habnabit_> I'm trying to set up an alternate smtpd instance in my master.cf ... [02:05:56] <rob0> yeah, but I don't know if the safety code in Postfix takes that into account. [02:06:05] <e_> i don't see a comma in http://www.postfix.org/SMTPD_POLICY_README.html either [02:06:55] <habnabit_> rob0: it started up just fine and I can connect to it. [02:07:10] <roe_> where does postfix look for local users? [02:07:11] *** shoonya has joined #postfix [02:07:17] <roe_> /etc/passwd? [02:07:26] <rob0> !local_recipient_maps [02:07:49] <rob0> know knoba, know stuff [02:07:57] <knoba> rob0: "local_recipient_maps" : a configuration parameter in the main.cf: Lookup tables with all names or addresses of local recipients. A recipient address is local when its domain matches $mydestination, $inet_interfaces or $proxy_interfaces. [02:07:58] <rob0> no knoba, no stuff :( [02:08:19] <rob0> slow knoba, slow stuff :) [02:08:58] <e_> why would postfix interpret a tool:"|/some/tool" in aliases not as delivery to a command but to a user named "|/some/tool" ? [02:09:16] <rob0> inet_interfaces is a global option, not for smtpd(8) [02:09:23] <habnabit_> Ahh. [02:09:27] <habnabit_> So how could I do that? [02:09:37] <rob0> e, where is your log pastebin? [02:09:46] <e_> in master.cf [02:09:50] <e_> rob0: one sec [02:09:57] <roe_> I am looking at a working postfix main.cf and I don't see that parameter anywhere in postconf -n and it has 6 local users [02:09:59] <rob0> hab, "man 5 master" [02:10:26] <rob0> ro, it has a default value of course. [02:10:31] <habnabit_> Aha. [02:10:43] <habnabit_> Awesome, thanks. [02:11:00] <roe_> rob0, ok... how do I find that default value? [02:11:41] <roe_> found it on postfix.org, nm [02:11:50] <rob0> well, "man postconf" is good info, but you might also see LOCAL_RECIPIENT_README [02:11:51] <e_> rob0: http://paste.linuxassist.net/2750 [02:13:30] <rob0> put up "postconf -n" too [02:14:55] <e_> http://paste.linuxassist.net/2751 [02:16:45] <roe_> how can I run "unix:passwd.byname" by hand on the CLI? [02:16:49] *** Fallenou has quit IRC [02:16:58] <e_> roe: getent passwd username [02:17:05] *** Motoko-chan has quit IRC [02:17:55] <rob0> "postconf allow_mail_to_commands" [02:18:03] <e_> ah! [02:18:06] * e_ slaps head [02:18:47] <rob0> this alias is in /etc/aliases, not in your virtual_alias_maps ? [02:18:56] <e_> right [02:19:18] <rob0> what did ^^ that show [02:19:43] <roe_> ok, so getent shows the user that postfix returns "Recipient address rejected: Access denied" [02:19:49] <e_> allow_mail_to_commands = alias, forward [02:19:51] <e_> hmm [02:22:15] *** bimbomio has quit IRC [02:23:34] <rob0> Oh, it's simple. "man 5 aliases". And your command probably won't work. [02:24:28] <e_> ? what is it? [02:24:38] <e_> i've read the aliases page quite a few times today.. heh [02:26:17] <e_> rob? [02:29:52] *** dusty_ has quit IRC [02:30:54] *** dusty_ has joined #postfix [02:33:03] <roe_> http://www.pastebin.ca/1180214 [02:33:06] <roe_> I'm at a loss [02:36:01] <rob0> haha roe, what do you suppose "reject" means in a restriction list? [02:36:28] <rob0> e, read the part about COMMANDS. [02:36:42] <rob0> I don't have it in front of me to paste it at you. [02:36:48] <roe_> but I am connecting from an entry in mynetworks [02:37:11] <rob0> sentinel.digiraticonsulting.com[206.71.169.123] [02:37:15] <rob0> is not there [02:37:27] <roe_> that is itself [02:37:39] <roe_> ah fsk [02:37:44] <rob0> it is not in mynetworks [02:37:46] <roe_> god damn vservers [02:38:38] <rob0> BTW mynetworks should only be IP addresses/netblocks. Name resolution can work, but not if DNS or resolution fails somehow. [02:39:02] <e_> rob0: sorry there is no COMMANDS in my man 5 aliases [02:39:04] <rob0> names in /etc/hosts should be safe enough (I do that) [02:40:04] *** CrazyFoam has quit IRC [02:40:09] <e_> rob: can you please give me a hint? [02:42:21] *** fx0 has joined #postfix [02:44:08] <roe_> shouldn't home_mailbox = maildir/ ensure that postfix uses maildir format? [02:44:12] <roe_> it seems to be using mbox [02:45:15] <rob0> roe_, "man local", you sound like another Debian procmail victim. [02:45:42] <roe_> gosh darn it [02:45:50] <rob0> e, if you don't have the word "command" anywhere in aliases(5) I don't know what to do. [02:47:04] <rob0> Anyway, I have to go cook dinner. [02:47:08] <e_> rob0: i have the stuff under |command, yes, but i don't see anything conflicting with how i set it up.. [02:56:37] *** ming_zym has joined #postfix [02:57:01] *** Led-Hed has left #postfix [03:07:01] *** pirho has quit IRC [03:29:58] <lunaphyte> late dinner? [03:30:37] *** shoonya has quit IRC [03:31:04] *** githogori has quit IRC [03:36:40] *** pickcoder has joined #postfix [03:52:17] <rob0> and it's still not done, sigh [04:00:32] *** echelog has joined #postfix [04:02:10] *** xp_prg has quit IRC [04:02:12] *** Juspion has joined #postfix [04:08:52] *** Motoko-chan has joined #postfix [04:35:30] <pickcoder> new junk in the filter today [04:35:44] *** Motoko-chan has quit IRC [04:35:54] <pickcoder> Georgia.zip[joined.exe] [04:36:18] <pickcoder> Subject: Journalists shot in Georgia [04:38:41] <pickcoder> also some subject about spears being the father of anna nicole's baby [04:39:49] <pickcoder> hrm.. some WD<blah>.exe too [04:40:05] <pickcoder> Fedex Tracking N_ <numbers> [04:42:27] <pickcoder> that's definately a w32 trojan [04:42:43] <pickcoder> clamav didn't catch it [04:43:15] *** slackjr_ has joined #postfix [04:43:59] <pickcoder> ijoined.exe is apparently malware too but clamav didn't catch it [04:44:05] <pickcoder> ~joined.exe [04:47:04] *** slackjr_ has quit IRC [04:54:46] *** gonewestcoast has quit IRC [05:08:22] *** Juspion has quit IRC [05:11:51] *** foxbuntu has quit IRC [05:22:35] *** jpalmer has quit IRC [05:31:39] *** shoonya has joined #postfix [05:35:44] *** higuita has quit IRC [05:38:04] *** ziro has quit IRC [05:43:31] *** goldfisc1li has joined #postfix [05:49:54] *** pa has quit IRC [05:58:37] *** grigora has joined #postfix [05:59:19] <grigora> Hi, I am getting the following error - Name service error for name=localhost type=A: Host not found, any ideas? [06:00:29] *** goldfischli has quit IRC [06:01:55] <pickcoder> grigora: Linux/ [06:02:02] <pickcoder> s/\/?/ [06:02:50] <grigora> pickcoder: yes [06:02:58] <pickcoder> check your /etc/hosts [06:03:02] <pickcoder> for localhost [06:03:14] <grigora> it has an entry for localhost - 127.0.0.1 localhost [06:03:24] <grigora> i even added localhost.localdomain to the list [06:03:29] <grigora> still no go [06:04:10] <pickcoder> check your master.cf for the smtpd line [06:04:14] <pickcoder> look at col 5 [06:04:19] <rob0> No, "name service error" means a DNS lookup was done. [06:04:24] <rob0> !chroot [06:04:24] <knoba> rob0: "chroot" : The fifth column in master.cf, if not n , means that the Postfix process described on that line runs in a chroot, see !debug , !queue_directory and files in the examples/chroot-setup subdirectory of the Postfix source archive which show examples of a Postfix chroot environment on a variety of systems [06:04:36] <pickcoder> pfft [06:04:48] <rob0> sorry :) [06:05:03] <grigora> rob0: the hosts file in the chroot has localhost, too [06:05:27] <rob0> hosts(5) is irrelevant: 04:04 < rob0> No, "name service error" means a DNS lookup was done. [06:05:29] *** saurabhb has joined #postfix [06:05:59] <grigora> rob0: and why did it fail - /etc/hosts has localhost? [06:06:17] <grigora> and I don't think my smtp is running in chroot [06:06:18] <rob0> hosts(5) is irrelevant. *** DNS FAILED *** [06:07:34] <grigora> rob0: so what does that mean? I can ping any host on the net => DNS is working [06:08:03] <Dominian> he's saying that your server is trying to query DNS to resolve localhost [06:08:09] <rob0> Not for Postfix, not for name=localhost type=A [06:08:10] <Dominian> so in that sense.. DNS is failing. [06:08:57] <rob0> Now the better question might be this: why are you doing a DNS lookup of localhost? [06:09:13] <grigora> rob0: I don't know ... [06:09:18] <rob0> me neither [06:09:21] <Dominian> smoking crack during installation are we! [06:09:38] <rob0> I hate it when that happens. [06:09:44] *** kiliko has joined #postfix [06:09:57] <grigora> rob0: what's the setting that controls this? [06:10:16] <pickcoder> grigora: is there a resolv.conf in your chroot? [06:10:17] <grigora> fyi, i also put order host,bind in resolv.conf .. didn't help [06:10:18] <rob0> Lots. See postconf(5). [06:10:35] <rob0> huh? [06:10:52] <rob0> nsswitch.conf maybe? [06:11:09] <pickcoder> possibly [06:11:14] <grigora> hosts: files dns [06:11:14] <rob0> but that would be irrelevant too [06:13:18] <grigora> does myhostname matter? it's set to the same thing that /etc/hostname is set to [06:14:30] <rob0> Postfix is asking the nameservers in [chroot]/etc/resolv.conf for A record for "localhost", and that lookup is failing. [06:14:34] <rob0> !debug [06:14:35] <knoba> rob0: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ . [06:14:55] <pickcoder> bed time [06:15:05] <rob0> myhostname matters a great deal, but is not relevant to this problem. [06:15:15] *** pickcoder has quit IRC [06:16:15] *** higuita has joined #postfix [06:16:32] *** pitakill has joined #postfix [06:17:12] <grigora> rob0: http://pastebin.ca/1180348 [06:20:12] <grigora> rob0: any ideas? [06:24:43] <grigora> so why is the server doing DNS lookups for localhost? [06:28:15] <grigora> does relayhost need to be specifically set to nothing - relayhost =? [06:31:10] *** grigora has left #postfix [06:31:18] <rob0> ah good [06:31:27] <rob0> I was about to say something I might regret [06:38:00] *** _Driver_ has joined #postfix [06:50:48] *** _Driver_ has quit IRC [06:51:09] *** _Driver_ has joined #postfix [06:56:04] *** madrescher has joined #postfix [07:02:09] *** madrescher has quit IRC [07:03:35] *** githogori has joined #postfix [07:20:30] *** shoonya has joined #postfix [07:21:20] *** AleSanchez has joined #postfix [07:24:10] *** _Driver_ has quit IRC [07:28:54] *** Motoko-chan has joined #postfix [07:39:05] *** nfsnobody has quit IRC [07:40:14] *** AleSanchez has left #postfix [07:45:36] *** pitakill has quit IRC [07:47:55] *** nfsnobody has joined #postfix [07:58:48] *** leyoda has joined #postfix [08:07:51] *** Zeit|awy_ has quit IRC [08:16:51] *** bhagat has joined #postfix [08:31:56] *** j_s has joined #postfix [08:33:18] *** sophokles has joined #postfix [08:34:35] *** pa has joined #postfix [08:37:15] *** boink__ has joined #postfix [08:37:31] *** jeffspeff has joined #postfix [08:49:07] *** mark-use has joined #postfix [08:49:23] <shoonya> how to use openldap dynlist with postfix [08:49:33] *** raz has quit IRC [08:49:33] *** boink__ is now known as raz [08:55:51] *** serialthrilla has joined #postfix [08:56:21] <serialthrilla> hey yall, is the only way to make a before-queue filter is via smtpd_proxy_filter ? [08:56:28] *** Motoko-chan has quit IRC [08:56:48] *** leyoda has left #postfix [08:57:49] <sysmonk> serialthrilla: milters are also available [08:57:59] <sysmonk> !milter_readme [08:57:59] <knoba> sysmonk: Error: "milter_readme" is not a valid command. [08:58:03] <sysmonk> !smtpd_milters [08:58:03] <knoba> sysmonk: Error: "smtpd_milters" is not a valid command. [08:58:06] <sysmonk> doh [08:58:43] <sysmonk> !learn smtpd_milters as A list of Milter (mail filter) applications for new mail that arrives via the Postfix smtpd(8) server. See http://www.postfix.org/MILTER_README.html for details. [08:58:47] <sysmonk> !smtpd_milters [08:58:47] <knoba> sysmonk: "smtpd_milters" : A list of Milter (mail filter) applications for new mail that arrives via the Postfix smtpd(8) server. See http://www.postfix.org/MILTER_README.html for details. [08:58:51] <sysmonk> ;P [09:00:46] <serialthrilla> thank you, can the smtpd_proxy_filter only speak smtp? or can it translate to lmtp? [09:01:06] <serialthrilla> pretty sure it's smtp only [09:02:02] <f3ew> Should be able to use LMTP [09:05:16] <shoonya> hi all, i have a dynlist configuration in openldap which expands to mail ids depending on the department. how do i use this from postfix so that when a mail is addressed to the dynlist id it automatically expands to the users belonging to the deparment [09:05:48] <shoonya> currently, the mail is getting delivered to the dynlist id itself [09:10:39] *** fEnIo has quit IRC [09:11:20] <sysmonk> doh [09:11:35] *** rootsvr has joined #postfix [09:11:40] <sysmonk> my neighbour brought me his notebook, he asked me to fix it... [09:11:42] <sysmonk> vista.. [09:11:48] * sysmonk sees vista for the first time [09:12:45] *** internat1 has joined #postfix [09:13:23] *** Internat has quit IRC [09:13:46] *** smz has quit IRC [09:13:49] <robtone_> install XP and some eyecandy [09:14:16] <robtone_> and tell him "this is the classic modus" [09:14:28] <robtone_> "wayyyy better" [09:17:56] <sysmonk> oh nice [09:18:17] <sysmonk> if i boot to safe mode, it doesn't let me to uninstall programs [09:18:23] <sysmonk> and it doesn't boot to the normal mode [09:18:26] <sysmonk> niiiice [09:21:26] *** rootsvr has quit IRC [09:27:32] *** sophokles1 has joined #postfix [09:42:15] *** tshine has joined #postfix [09:43:28] *** sophokles has quit IRC [09:54:08] *** githogori has quit IRC [09:57:14] *** war9407 has joined #postfix [10:07:23] <serialthrilla> postfix/smtpd[26141]: fatal: lmtp:localhost:24: valid hostname or network address required [10:07:26] <serialthrilla> poopie [10:08:49] *** F6F has joined #postfix [10:10:36] *** rootsvr has joined #postfix [10:11:13] *** bimbomio has joined #postfix [10:12:23] *** Zeit|awy has joined #postfix [10:12:43] <sysmonk> in what configuratoin? [10:13:57] *** Hohi has joined #postfix [10:20:32] *** rootsvr has quit IRC [10:21:17] *** brancaleone has joined #postfix [10:33:12] *** ziro has joined #postfix [10:33:42] *** ziro has quit IRC [10:39:41] *** aron is now known as Aron [10:50:55] *** gonewestcoast has joined #postfix [11:09:01] *** Haris__ has joined #postfix [11:12:46] *** bimbomio has quit IRC [11:17:24] *** bimbomio has joined #postfix [11:23:10] *** alienbrain has joined #postfix [11:28:17] *** Haris has quit IRC [11:28:43] *** serialthrilla has quit IRC [11:31:34] *** internat1 is now known as Internat [11:33:44] *** gonewestcoast has quit IRC [11:38:51] *** loompek has joined #postfix [11:38:53] <loompek> morning [11:39:15] <loompek> i've got a simple question... a question that requires a simple hint... or a solution [11:39:46] <loompek> could i limit per-client senders... [11:40:01] <f3ew> !policyd [11:40:01] <knoba> f3ew: "policyd" : http://www.policyd.org/ : an anti-spam Postfix policy daemon [11:40:09] <f3ew> !policy_readme [11:40:09] <knoba> f3ew: Error: "policy_readme" is not a valid command. [11:40:41] <f3ew> See http://www.postfix.org/SMTPD_POLICY_README.html [11:43:13] <loompek> i'll check it out [11:43:16] <loompek> the thing is... [11:44:30] <loompek> i'd need to limit client a to use sender in the form of \+123[0-9]^8\TYPE=PLM at domain-a dot com. [11:44:43] <loompek> etc... [11:44:53] <loompek> so that means... [11:45:14] <loompek> +12345678901/TYPE=PLM at mms dot aaa.bbb.com [11:51:10] <f3ew> check_sender_access with a regexp? [11:51:15] *** milligan_ has joined #postfix [11:51:20] <milligan_> Problem: http://xna.multigan.com/pastebin/?page=view&id=1219311144 [11:53:19] *** kk_CHN has joined #postfix [11:54:33] <rikkyc> A while ago I was getting DNS problems with Postfix, thought I solved it but it's still there "Name service error for name=hotmail.com type=A: Host found but no data record of requested type" Any (more) pointers would be appreciated! [11:58:50] <f3ew> rikkyc test with host/dig, and then check if you are running chrooted? [12:01:10] <rikkyc> f3ew: all seems to checkout okay :( [12:02:19] <rikkyc> f3ew: not running chrooted anymore [12:03:12] <f3ew> postfix flush [12:05:55] <rikkyc> The other problem is, this seems to be intermittent. [12:07:32] *** UQlev has joined #postfix [12:09:22] *** kk_CHN has quit IRC [12:13:02] *** Fallenou has joined #postfix [12:15:27] *** xpoint has joined #postfix [12:32:10] *** jpalmer has joined #postfix [12:33:44] *** Trengo has quit IRC [12:39:55] *** cpm has joined #postfix [12:54:33] *** ming_zym has quit IRC [13:02:52] *** hwdyki has joined #postfix [13:03:00] <hwdyki> what's the diff between relayhost and relaydomains? [13:03:36] <Roobarb> !relayhost [13:03:36] <knoba> Roobarb: "relayhost" : a configuration parameter in the main.cf: The default host to send non-local mail to when no entry is matched in the optional transport(5) table. When no relayhost is given, mail is routed directly to the destination. [13:03:45] <Roobarb> !relaydomains [13:03:46] <knoba> Roobarb: Error: "relaydomains" is not a valid command. [13:03:51] <Roobarb> !relay_domains [13:03:51] <knoba> Roobarb: "relay_domains" : a configuration parameter in the main.cf: What destination domains (and subdomains thereof) this system will relay mail to. Subdomain matching is controlled with the parent_domain_matches_subdomains parameter. [13:05:54] <hwdyki> so relay_domains is a kind of access control. [13:11:05] <milligan_> Problem: http://xna.multigan.com/pastebin/?page=view&id=1219311144 [13:15:18] <dragonheart> milligan_: also problem #dovecot != # postfix [13:16:56] <milligan_> dragonheart, just trying my luck to see if I can catch a wiz that might have some experience with both. [13:18:01] <dragonheart> you only need a dovecot expert [13:18:14] <milligan_> Guess so :) [13:23:37] *** hwdyki has left #postfix [13:27:26] *** Radiance has joined #postfix [13:29:15] *** Aron is now known as aron [13:32:23] *** aron is now known as Aron [13:34:09] *** mefiXe has joined #postfix [13:34:29] <mefiXe> how can i prevent postfix from sending delivery-failure messages? [13:34:49] *** rmull has joined #postfix [13:35:00] <shasta> why does it send it in the first place? [13:35:19] <mefiXe> thats a pretty good question [13:35:27] <mefiXe> honestly i dont know [13:35:49] <mefiXe> its an amavis/spamassassin spamfilter [13:37:25] <mefiXe> and i think it sends those delivery failures if a mail was rejected [13:38:12] *** Haris1 has joined #postfix [13:38:14] <Haris1> Hello people [13:38:16] <Haris1> !smtpd_recipient_restrictions [13:38:17] <knoba> Haris1: "smtpd_recipient_restrictions" : A configuration parameter in the main.cf: The access restrictions that the Postfix smtpd(8) applies in the context of the SMTP RCPT TO command. See access(5) for an overview of access restriction features. These restrictions control relaying to external domains. Default is to relay only for client IP addresses in $mynetworks; see also !sasl if SMTP AUTH is needed. [13:38:46] *** UQlev has quit IRC [13:39:02] <Haris1> hmm [13:39:08] <dragonheart> you just wanted to talk to the bots. not need to be polite to us people "-p [13:39:12] <shasta> mefiXe, pastebin such a notification [13:40:17] <mefiXe> furthermore i have several "MAILER-DAEMON" entries in my mailq [13:40:45] *** saurabhb has quit IRC [13:40:50] <mefiXe> that failed to connect, because my firewall blocks outgoing tcp/25 [13:47:45] *** GNU\colossus has joined #postfix [13:47:58] <GNU\colossus> hi all [13:48:57] <Haris1> !check_sender_access [13:48:57] <knoba> Haris1: "check_sender_access" : Search the specified access(5) database for the MAIL FROM address, domain, parent domains, or localpart@, and execute the corresponding action. [13:49:28] <Haris1> are there any examples of check_sender_access ? [13:49:57] *** GNU\colossus has left #postfix [13:53:51] <mefiXe> shasta: it says http://phpfi.com/345880 [14:03:01] <mefiXe> how can i prevent the spamfilter from sending DSNs? [14:03:29] *** shinao1 has joined #postfix [14:03:33] *** shoonya has quit IRC [14:05:30] *** leyoda has joined #postfix [14:07:52] *** sophokles1 has quit IRC [14:11:26] *** \3TATUK has joined #postfix [14:11:51] *** sophokles has joined #postfix [14:11:55] *** \3TATUK has left #postfix [14:19:19] *** saurabhb has joined #postfix [14:19:20] <Hohi> hye, how to I get der Fingerprints of a _remote_ system to make smtp_tls_policy_maps happy? [14:19:42] <Hohi> ... and how comes that there is a smtp_tls_policy_maps but now smtpd_tls_policy_maps? [14:19:49] *** leyoda has left #postfix [14:19:55] <Hohi> I seem to use the wrong search keywords [14:20:50] <dragonheart> i'd enable tls debugging that might display the finger print you need [14:21:21] <Hohi> no, it doesnt ... with level 3 I get a hexdump of the certificate ... but no fingerprint [14:21:55] <Hohi> (or is that the session id for the cache database) [14:22:26] <Hohi> I am using postfix 2.3.8 btw. [14:24:56] <dragonheart> do you have access to the remove server? [14:25:10] *** Nockian has quit IRC [14:25:13] <mefiXe> how can i flush the postfix mailq? [14:25:23] <dragonheart> postqueue -f [14:25:33] *** pitakill has joined #postfix [14:27:59] *** darkphader has joined #postfix [14:28:31] <rmull> Is there a caveat to pipe(8) that i'm not aware of? If I pipe to "tee /tmp/out", the mail appears in /tmp/out as it should. If I cat /tmp/out | myscript, myscript works fine. However, if I pipe directly to myscript, maillog shows the message getting piped, but myscript doesn't show that it ever received the message. [14:28:35] <mefiXe> my problem is that postfix tries to deliver mails (DSNs) to mailservers that obviously don't exist, and those mails stay in the mailq, does anyone know how to delete them? [14:28:36] *** snadge has joined #postfix [14:28:49] <snadge> fatal: fifo_listen: remove public/pickup: Permission denied [14:29:16] <snadge> when trying to start postfix on a debian system thats just been transplanted .. basically im looking for a way to figure out what this actually mean ;) [14:30:37] <snadge> unsurprisingly postfix set-permissions fixed the problem [14:31:00] <snadge> how beautifully self explanatory.. <3 postfix [14:33:57] *** saurabhb has quit IRC [14:35:09] *** Trengo has joined #postfix [14:40:55] <Hohi> dragonheart: I have a remote server I have access to ... but that specific server is at a customers location and It will take some time till I dig out the mail administrator [14:41:05] *** McJerry has joined #postfix [14:41:37] <Hohi> so I would prefer fetching the certificate/fingerprint somehow and only verify wether the FP is indeed correct [14:42:39] <Hohi> I also want to abort the session if they try to send mails without STARTTLS ... I missed _that_ knob somehow. [14:43:05] <dragonheart> Hohi: try some openssl magic - like s_client -connect mailserver...:25 -starttls smtp | openssl x509 -fingerprint [14:43:12] <mefiXe> can i delete deferred messages from the mailq after a certain timeout? [14:43:58] *** akke has joined #postfix [14:44:35] <akke> I'm having trouble sending email to a specific domain. My mailq is full of errors like this "#4.4.5 Too many connections from your host." [14:44:51] <dragonheart> Hohi: smtp_tls_security_level = require (or something) [14:44:58] <dragonheart> Hohi: smtpd_tls_security_level = require (or something) [14:45:03] <dragonheart> second one [14:45:41] <akke> i did configure that specific domain to use 'limitedsmtp' transport instead the default 'smtp' and configured limitedsmtp_destination_concurrency_limit=1 in main.cf ... But still that host is saying "too many connections from your host" [14:45:48] <Hohi> thats global ... I _do_ run an internet mail server ... I have it on "= may" and only want to force it for that one specific customer [14:45:49] <akke> any advise? [14:46:53] <dragonheart> Hohi: so add it as a -o option to smtpd in master.cf and force the customer there on a different port. [14:47:06] *** hparker has joined #postfix [14:47:29] <Hohi> dragonheart: your openssl magic is beautiful ... works like a charm ... put it in some HOWTO so google can find it :-) [14:48:37] <Hohi> pfff .... a special port just for one customer .... I sense a feature deficiency here .... [14:49:01] <Hohi> I hope we don't get more of these agreements .... that solution doesn't scale [14:49:23] *** mark-use has quit IRC [14:53:49] *** shufla has joined #postfix [14:55:56] <akke> I have configured postfix to send email to specifice domain using a non-default transport. But how can I check if postfix is using the right transport? IS there a way to tell? [14:56:34] <shufla> hello. I'm playing with postfix and ldap. I do not want to have any local users on my system, by nss, everything shall be fetched from ldap. so I need my all local users to be virtual users (AFAIK). [14:57:00] <shufla> so I have local_recipient_maps = ldap:/etc/postfix/ldap-users.cf, my postmap -q shufla ldap:/etc/postfix/ldap-users.cf returns shufla (I think correct...) [14:57:04] <dragonheart> Hohi: i'm sure there is a better way but i've got other stuff to think about. [14:57:14] <Hohi> kk [14:57:36] <dragonheart> back to job hunting [14:57:50] <Hohi> o dear [14:57:55] <shufla> my systemname is vm7.local, and this is in mydestination. but when I'm invoking echo test | mail shufla it queries for shufla at vm7 dot local, so cannot find this local-virtual-user... [14:59:08] <dragonheart> Hohi: honestly helping people on irc is good but you generally can't invoice them :-) [15:00:21] <Hohi> no problem [15:00:37] *** McJerry has quit IRC [15:00:41] <Hohi> I am very happy about the s_client trick ... [15:00:48] <Hohi> so I can't complain [15:00:54] *** m0f0x has joined #postfix [15:01:05] <dragonheart> good :-) [15:02:13] *** pitakill has quit IRC [15:02:15] <dragonheart> (about your happyness more that you not complaining) ;_) [15:04:04] <Hohi> :-) [15:07:00] *** shufla has quit IRC [15:07:54] *** m_p has joined #postfix [15:18:18] *** bimbomio has quit IRC [15:21:29] *** bhagat has quit IRC [15:21:40] *** m_p has quit IRC [15:22:36] *** mark-use has joined #postfix [15:24:32] *** m_p has joined #postfix [15:25:51] *** m_p has quit IRC [15:29:10] *** m_p has joined #postfix [15:29:28] *** m_p has quit IRC [15:31:22] *** m_p has joined #postfix [15:33:44] *** m_p has quit IRC [15:38:00] *** netcrash has joined #postfix [15:46:52] *** akke has quit IRC [15:47:44] *** mark-use has quit IRC [16:14:56] <e_> hm.. for an smtpd that's only to serve authenticated users as a relay it should be okay to require tls, no? [16:15:10] *** jelly has quit IRC [16:16:11] <f3ew> yes [16:18:10] <e_> nice [16:18:26] <e_> jesus, i never had so much stuff in my master.cf... ever! [16:19:44] *** jelly has joined #postfix [16:28:24] *** Zelest has quit IRC [16:34:10] *** bizhat has joined #postfix [16:51:02] *** mynyml has joined #postfix [16:54:34] *** parchnewbie has joined #postfix [17:03:38] *** AllenJB has quit IRC [17:04:19] *** AllenJB has joined #postfix [17:06:19] *** pitakill has joined #postfix [17:07:59] <mynyml> i'm looking for a mail server service that i can pull emails from. something raw. all my google searches return mostly regular html webmail or mail server software. I'm probably missing the right keywords, any suggestions? [17:08:25] <f3ew> mynyml gmail? [17:08:34] <f3ew> gmail offers pop3 and imap [17:08:47] <mynyml> f3ew: i need catchall, gmail doesnt allow that [17:08:59] <mynyml> they redirect all catchall email to a single email [17:09:05] <f3ew> oops [17:10:34] <mynyml> is there anything more raw out there? [17:11:06] <f3ew> run your own? [17:11:16] <mynyml> basically i need a plain email server - i could even ssh into it to fetch mail manually. i would just prefer using a third party instead of maintaining my own mail server [17:11:54] <jeev> lol [17:11:56] <mynyml> the least production infrastructure the better, so if there's an alternative it'd be greate [17:12:03] <jeev> he wants to get emails [17:12:04] <jeev> to spam [17:12:28] <mynyml> jeev: wow thats a huge prejudice right there my friend [17:12:38] <jeev> lol [17:12:48] <jeev> raw.? [17:12:58] <jeev> goin to office, brb [17:13:00] <f3ew> Not a service I know off the top of my head [17:13:00] *** snadge has left #postfix [17:13:14] <mynyml> i want to generate return addresses and add an id in there, so i can avoid people needing to log in to our system [17:14:33] *** Niemi has joined #postfix [17:15:02] <mynyml> i admit i know very little about email systems, but i dont see how this would allow someone to spam anyway; anyone could just trace the ip back to the provider [17:15:14] <mynyml> ... i guess [17:15:27] <mynyml> oh well i'll keep looking. thanks f3ew [17:19:21] <shasta> mynyml, disregard jeev, known troll [17:20:51] *** pitakill has quit IRC [17:20:58] <roe_> umm, I might be dense this morning but I have no idea what mynyml is trying to do [17:21:04] <mynyml> shasta: i was actually starting to wonder if what i'm trying to do has spam implications and thats why i can't find anything.. [17:21:54] *** uid00 has joined #postfix [17:21:59] <uid00> hey guys [17:22:04] <uid00> question about migrations [17:22:13] <uid00> i have old server --> new server [17:22:26] <uid00> old server has web, ftp and mail. new just has ftp, mail [17:22:45] <uid00> i want to migrate the mail --> newserver, but we don't use an mx [17:23:04] <uid00> i if i just change ip of mail.domain.com on old server to ip of new server...will that be sufficient? [17:23:45] <Dominian> that's called an MX record righ tthere if I ever saw one. [17:24:01] * roe_ agrees with Dominian [17:24:06] <uid00> yeah, but it's not specifically called one in the zone [17:24:18] <roe_> how do other servers know how to get mail to you? [17:24:28] <mynyml> roe_: send out email with id-123 at example dot com, so that when someone replies i know what the email relates to. for that i need a catchall on * at example dot com without loosing the To: info [17:24:37] <uid00> that's what i want to know :) [17:25:01] <roe_> mynyml, ah, so you want to embed some sort of context into the reply-to address [17:25:12] <mynyml> roe_: right [17:25:23] <Dominian> uid00: what's the domain? [17:25:32] <uid00> eh, no :) [17:25:33] <mynyml> roe_: i want to avoid adding something to the subject if possible [17:25:36] <uid00> i confirmed, sorry for n00bin' [17:26:13] <Dominian> eh [17:26:14] <roe_> mynyml, when someone responds to myinternetisbroken at example dot com where do you want it to go? [17:26:30] <Dominian> Why is it that you people are so anal about giving out the domain you need help with? [17:26:53] <roe_> you might h4x0r us [17:27:24] <roe_> obscurity is the best security ;) [17:27:26] <mynyml> roe_: some temporary storage (dont really care how its organized) that i can retrieve the mail from with pop3 or imap or ssh or scp, anything [17:27:31] <uid00> sure is roe_ [17:27:41] <uid00> anyhow, yes, mx record thing [17:27:56] <uid00> i have mail.domain.com (old) --> mail.domain2.com [17:28:19] <uid00> i just want to confirm that if i just change the IP of the mail.domain.com to the ip of my new mail server, it's all gravy [17:28:23] <jeev> shasta, that was mean [17:28:25] <roe_> mynyml, do you want them to all go to the same folder different folders, will something like procmail/maildrop be helpful in automatically sorting into different folders? [17:28:33] <uid00> assuming the mail serv on new system is :) [17:29:15] <Dominian> roe_: I agree, but that makes no sense when you admin a public email server which sends/receives email for a public domain... [17:29:35] <roe_> if you make mail.domain.com point to the new server mail will start getting sent there, depending on your dns settings it could take anywhere from 1hr to 1week to finish the transition [17:29:39] <mynyml> roe_: i'm gonna handle the to: info in my app, so it doesnt really matter to me. as long as they dont overwite each other of course so i guess i need some directories in there [17:30:01] <uid00> so... [17:30:11] <uid00> any takers :) [17:30:15] <mynyml> roe_: i'm gonna look up procmail/maildrop though in case i end up needing to build my own mail server. thanks for the tips ;) [17:30:57] <roe_> mynyml, so you want one imap user with multiple folders that is configured as a catchall, as well as you want to use procmail or maildrop as the LDA to allow for automatic sorting into sub folders [17:31:02] <roe_> sounds pretty straight forward to me [17:31:05] *** OneFix_Work has joined #postfix [17:31:27] <OneFix_Work> I know I'm doing something wrong [17:31:48] <OneFix_Work> I'm trying to tie postfix into LDAP and I'm getting an error when I try to send to a user [17:31:49] <roe_> uid00, if you make mail.domain.com point to the new server mail will start getting sent there, depending on your dns settings it could take anywhere from 1hr to 1week to finish the transition [17:32:04] <uid00> nah, it would take a weekend, i'm sure [17:32:09] <uid00> but yeah, that's what I figured :) [17:32:24] *** seekwill has joined #postfix [17:32:25] <shasta> jeev, but true [17:32:29] <roe_> and you were sure you ddn't have an mx record ;) [17:32:50] <roe_> good luck and god speed [17:33:39] <mynyml> roe_: not that straight forward to me, which is why my original question was about whether there were any 3rd party services that provided this functionality. I really appreaciate you letting me know how to go about doing it on my own though, since it looks i might need it [17:34:14] <roe_> I am sure their are hosted email solutions that allow you to configure a catchall and mail filters [17:34:48] <roe_> which is really all you are asking for [17:34:52] <cpm> !catchall [17:34:53] <knoba> cpm: "catchall" : Sending all emails for non-existing users in domain to a special account. See man 5 virtual for the @domain syntax, which applies in virtual_*_maps and relay_recipient_maps. For local(8) delivery, unset local_recipient_maps and see luser_relay. WARNING: catchalls are rarely a good idea. Spammers will abuse them. [17:35:05] <rob0> !google_apps [17:35:06] <knoba> rob0: Error: "google_apps" is not a valid command. [17:35:10] <rob0> !google_app [17:35:10] <knoba> rob0: Error: "google_app" is not a valid command. [17:35:14] <cpm> you mean google-oops? [17:35:20] <rob0> !googleapps [17:35:20] <knoba> rob0: "googleapps" : Google Apps - http://www.google.com/a/ - A free service provided by Google to have your email and other services hosted by them [17:35:41] <mynyml> rob0: google apps doesnt work. catchall redirects everything to a single mailbox [17:36:04] <roe_> mynyml, why is that a problem? [17:36:18] <mynyml> roe_: cause then i loose the info i need [17:36:22] <rob0> oh, you want catchall doing what? Backscatter? Any free service that does that would be a blacklisted one. [17:36:25] <roe_> no you don't [17:36:32] *** cilly has quit IRC [17:36:51] <roe_> the delivery location of mail does not change the email itself [17:36:55] <mynyml> roe_: i dont? when i fetch it the to: is set to that one mailbox address it redirected to [17:37:10] <roe_> define "fetch it" [17:37:10] <rob0> huh? [17:37:16] <mynyml> roe_: pop3 [17:37:45] *** Hohi has quit IRC [17:37:59] <mynyml> the to: field is set to inbox at example dot com [17:38:23] <mynyml> so id-123 at example dot com -> inbox at example dot com, and the last one is all i get from pop3 [17:38:23] <roe_> I have an email addres lets say email at domain dot com, I also have an alias to that email address lets call it alias at domain dot com, when people send an email to alias at domain dot com email at domain dot com's mailbox gets the message, but I see that it was sent to alias at domain dot com [17:39:02] <mynyml> roe_: you cant configure catchall as aliases though [17:39:07] <rob0> I subscribe to a mailing list called postfix-users at postfix dot org . Mail arrives from the listserv showing that in the "To:" header. Yet it comes to my address? How do you suppose that could be? [17:39:25] <mynyml> roe_: they're catchall option is pretty simple, yes or no, and if yes what user/mailbox do we redirect it to [17:39:28] <roe_> a catchall is basically one big alias [17:39:38] <rob0> Why doesn't my mail server rewrite that header to my address? [17:40:31] *** cilly has joined #postfix [17:40:34] <mynyml> rob0: i'm talking about incoming mail, not outgoing. i can get the email to appear as id-123 at example dot com when i send it. my problem is when the user replies [17:41:20] <rob0> I'm talking about incoming mail, not outgoing. [17:41:28] <mynyml> they reply to id-123 at example dot com, gmail's catchall forwards it to inbox at example dot com, and when i fetch it i get To: inbox at example dot com [17:41:53] <roe_> if that is true, gmail is defective [17:41:54] <mynyml> rob0: incoming for you, the user, is outgoing for my app [17:42:08] <roe_> with a capital if [17:43:28] <mynyml> roe_: i'd like you to be right so i dont have to find something else or set up my own mail server. I guess i can keep playing with the settings for a bit. or even email support [17:43:34] <cpm> gmail defective? Perish the thought! Heretic! All hail Google, We do no evil, Burn him! Burn him! [17:43:59] * roe_ runs and hides [17:45:20] <rob0> He was being ironic. Of course Google mail sucks. [17:45:27] <mynyml> roe_: gmail also doesnt allow outgoing mail with anything in the From: field - they rewrite it to the user's address. so the incoming mail catchall issue could have something to do with security as well i imagine? although i can't think what it could be [17:45:38] * cpm irons rob0 [17:45:53] * rob0 is flat [17:46:25] <roe_> I have very little knowledge of gmail for business as it might not be apparent, but I have my own mailserver, I forget what mta I use though [17:48:59] <mynyml> roe_: if i do end up setting up my own mailserver as well, what software would you recommend i use? i have very little knowledge of the issue and only need something basic. you mentioned an MDA to sort incoming mail - what would you suggest to reveive the mail? [17:49:16] <mynyml> *receive [17:49:59] *** Aron is now known as aron [17:50:17] *** bimbomio has joined #postfix [17:50:17] <roe_> postfix ->maildrop ->dovecot is my humble opinion [17:50:30] <mynyml> roe_: i'll start reading then [17:50:39] <mynyml> roe_: thanks a lot for the help. greatly appreciated [17:50:45] <roe_> although, I've been interested in looing at seive instead of maildrop [17:51:31] *** alienbrain has quit IRC [17:51:35] <mynyml> i'll take a look at it to then. I'll probably just choose the simplest one.. [18:03:01] *** cilly has quit IRC [18:09:31] *** parchnewbie has quit IRC [18:11:56] *** cilly has joined #postfix [18:15:43] *** pUmkInhEd has joined #postfix [18:15:51] <pUmkInhEd> hello #postfix, this is probably a stupid question [18:15:58] <sysmonk> yes it is [18:15:59] <sysmonk> ;) [18:16:15] *** gonewestcoast has joined #postfix [18:16:22] *** cilly has quit IRC [18:17:01] <pUmkInhEd> but i am gonna fire it off anyway, smtp uses plaintext to send email from my server to someone elses server, but the SMTP protocol allows the use of encryption via STARTTLS, is there a way for postfix to attempt encrypted transmission but if it fails then fallback to plaintext? [18:17:30] <sysmonk> yes [18:17:33] <sysmonk> !tls_readme [18:17:33] <knoba> sysmonk: "tls_readme" : http://www.postfix.org/TLS_README.html : Transport Layer Security (TLS/SSL) features in Postfix [18:17:37] <sysmonk> pUmkInhEd: ^^ [18:17:43] <pUmkInhEd> ty sysmonk i will read that :) [18:17:44] *** gonewestcoast has quit IRC [18:21:00] <pUmkInhEd> my postfix server also does https, could i just re-use that cert? [18:21:11] <sysmonk> o_o [18:21:18] <pUmkInhEd> its already in pem format [18:21:25] <sysmonk> postfix is smtp, it can't talk https [18:21:34] <pUmkInhEd> lol, i didnt ask the question right [18:21:36] <cpm> yeah, but a pem is a pem [18:21:40] <sysmonk> and, if you're talking about the cert and not about the protocol - yes, you can 'reuse' as much as you want [18:21:41] <cpm> hostname the same? [18:21:46] <pUmkInhEd> yes same hostname [18:21:50] <sysmonk> then sure [18:21:53] <cpm> then yup. [18:22:25] <pUmkInhEd> thanks very much, i am gonna give it a try [18:25:03] *** rmull has left #postfix [18:26:21] *** Sieg has joined #postfix [18:28:04] *** rootsvr has joined #postfix [18:28:14] *** Sieg has quit IRC [18:28:27] *** Sieg has joined #postfix [18:28:45] *** cssbkgn has joined #postfix [18:29:04] <vice-versa> anyone here using postgrey? looking for some feedback [18:30:14] *** cilly has joined #postfix [18:31:56] <vice-versa> not on geylisting itself, I don't particularly care for it, but unfortunately I've been vetoed on implementing it for a client [18:32:13] <pUmkInhEd> vice-versa: i used it for a time... [18:32:35] <vice-versa> how did you find it? [18:32:45] <pUmkInhEd> vice-versa: and i stopped using it because some mailservers dont resend the mail quick enough [18:32:56] <pUmkInhEd> so a 15 minute delay (whatever the default is) can turn into days [18:33:18] *** shinao1 has quit IRC [18:33:19] <pUmkInhEd> but it worked great when other mail servers behaved [18:33:31] <vice-versa> yeah, I know all the caveats of greylisting [18:33:34] <pUmkInhEd> by far the best thing i did was turn on dns blacklisting [18:34:09] <vice-versa> yup, we use that extensively [18:34:30] <vice-versa> so back to the postgrey, how did you measure it's effectiveness? [18:35:14] <pUmkInhEd> i measured its effectiveness using mailgraph, we already had an existing spamassassin setup so we compared numbers of spam caught by sa before and after implementing postgrey [18:37:02] <pUmkInhEd> basically, after testing it i'd determined that if we continued to use postgrey we would have a negative experience, delayed emails are like `overnight` packages that take 5 days to arrive..... [18:37:18] *** diqpib has joined #postfix [18:37:26] <pUmkInhEd> and that you only have one chance to accept it and get it right, that is the first time [18:38:15] <vice-versa> yeah no doubt, I voiced my concerns and in doing so I've managed to get them to agree to running it for 60 days in learning mode, then review its effectiveness and look for issues [18:38:23] <pUmkInhEd> but obviously you don't want my opinion [18:38:34] <pUmkInhEd> yup, gl vice-versa [18:40:12] <vice-versa> no your opinion and experience is welcome, issues like you mentioned won't be felt while in learning mode [18:45:14] *** mynyml has quit IRC [18:46:11] *** akke has joined #postfix [18:46:22] <vice-versa> was hoping there were some tools available to help analyse the postgrey results, but there doesn't seem to be anything [18:47:02] <akke> How can I force postfix to not send more than 1 message per connection? ... We are having trouble with a specific domain and the admin there told us they don't allow more than 5 messages per connection [18:47:37] <vice-versa> !dedicated_transport [18:47:37] <knoba> vice-versa: "dedicated_transport" : dedicated transports are used to control delivery behaviour for a specific domain or a user@domain pattern based on transport_maps. For an example see: http://linuxnet.ca/postfix/dedicated_transport.html [18:47:46] *** pingouin_ has quit IRC [18:47:58] <vice-versa> akke: ^^^ [18:48:49] <akke> vice-versa: that's what I have already, and set these transport options in main.cf : blah_destination_concurrency_limit=1,blah_destination_recipient_limit=100,blah_connection_cache_on_demand=no [18:48:59] <akke> but still, postfix is sending more than 1 message per connection [18:50:41] <vice-versa> are you sure your transport is being used? [18:51:27] <akke> yes .. tested it by modifying the transport in master.cf to an autoresponder, to make sure it's using the right transport and it's correct [18:53:30] <vice-versa> akke: have you tried setting the per-transport limit parameters your mentioned to 1? [18:53:49] <vice-versa> as in both of them [18:54:38] <akke> vice-versa: the manual states that if I set the __destination_recipient_limit = 1 it's changing the behaviour of destination_concurrency_limit from 'per domain' to 'per recipient' [18:55:08] <akke> and it's "per domain" we need as that mailserver only allows 1 TCP connection at a time [18:55:23] <akke> if i telnet to it once, it's okay. when I telnet again it's closing immediately [18:58:14] <vice-versa> so this means you haven't tried it? ;) [18:58:43] <akke> no, i didn't. But what's the point in trying if it will break the concurrency limit? ... Or am I missing something here? [19:02:41] <akke> setting it to 1 doesn't do any good... Just tried.. [19:02:53] <akke> I realy need to make sure postfix is not sending more than 10 messages in 1 SMTP connection [19:02:58] <akke> but it seems postfix cannot do this? [19:04:43] <vice-versa> is your maxproc for the transport set to 1? [19:04:48] <akke> yes [19:06:25] <vice-versa> dunno, I know this works as I use it and we had someone else in here a day or so ago with the same issue and they followed that howto and it resolved their delivery woes [19:07:00] <akke> yes, but it does not configure the amount of messages in 1 connection it's allowed to send [19:07:09] <akke> it only configures the concurrency, which is not the problem :) [19:08:30] <vice-versa> only suggestion I have is to pastebin your relevant settings and perhaps someone can spot something you're not seeing [19:11:00] <sysmonk> *cough* don't forget the payment *cough* [19:11:00] <sysmonk> ;) [19:11:16] <akke> :) [19:11:51] <akke> but can anyone just tell me which setting in postfix is for telling it not to send more than 1 message on a single connection? .. As I don't see it in the manual [19:12:09] *** bimbomio has quit IRC [19:12:33] <sysmonk> akke: _recipient_limit [19:12:35] <rob0> Which manual? smtp(8) ? [19:12:48] <rob0> It helps if you look in the right one. [19:12:49] *** pingouin has joined #postfix [19:15:53] * cpm looks in the right rob0 [19:16:23] <vice-versa> rob(0) [19:16:35] <Dominian> !rob0 [19:16:35] <knoba> Dominian: "rob0" : a pathetic bot that reacts to newly joined users with reciting the !basic factoid :) [19:17:25] <rob0> NO NO! Look in the *LEFT* rob0 !! [19:18:29] <cpm> whew, thanks. [19:18:33] <cpm> you saved me again. [19:19:03] <rob0> That's what I'm here for. All in a dazework. [19:20:38] <vice-versa> bah, looks like I'm gonna have to hack something together in Perl to analyse the effects of postgrey :( [19:21:50] <akke> sysmonk: but that doesn't seem to fix the problem :) .. it's on =1 now and still getting errors from the remote [19:21:57] *** bimbomio has joined #postfix [19:22:18] *** aron is now known as Aron [19:22:26] <vice-versa> akke: show us something of substance [19:23:50] <akke> well, i have a transport called slowstmp with maxproc set to 1 and all other things identical to the default "smtp" transport. Mail for skynet.be is set to transport slowsmtp: [19:23:54] <akke> and in main.cf i have slowsmtp_destination_concurrency_limit=1 [19:23:55] <akke> slowsmtp_destination_recipient_limit=10 [19:23:55] <akke> slowsmtp_connection_cache_on_demand=no [19:24:12] <sysmonk> akke: err [19:24:13] <akke> that recipient_limit=10 is for now.. i tried with =1 too [19:24:19] <sysmonk> akke: slowsmtp_destination_recipient_limit = 10 ?! [19:24:23] <sysmonk> yeah, it should be 1 [19:24:48] <akke> it's 1 now.. and I'll restart postfix completely now, just to make sure [19:25:06] <sysmonk> yeah, and pastebin the logs with errors [19:25:21] <vice-versa> and the transport line from master.cf [19:25:26] <akke> relay=in.mx.skynet.be[195.238.5.129]:25, delay=6138, delays=6125/13/0.01/0, dsn=4.0.0, status=deferred (host in.mx.skynet.be[195.238.5.129] refused to talk to me: 421 #4.4.5 Too many connections from your host.) [19:25:30] <sysmonk> akke: PASTEBIN [19:25:34] <akke> oops [19:25:36] <vice-versa> !pastebin [19:25:37] <knoba> vice-versa: "pastebin" : a way to paste larger amounts of text so that other people can read it. Try http://www.rafb.net/paste/ or http://paste.debian.net/ - Do not forget to tell us the URL where you pasted it. [19:25:41] <sysmonk> akke: maybe the host cached that [19:25:50] <sysmonk> maybe you need to wait till they unban you [19:26:28] <akke> but some messages get trought, others don't.. most don't : but get trough later when it retries... [19:26:31] <sysmonk> akke: when pastebining, pastebin the full log line, not from 'relay' [19:27:01] <akke> log : http://paste.debian.net/15304/ [19:27:42] <akke> master.cf entry http://paste.debian.net/15305/ [19:28:02] *** xp_prg has joined #postfix [19:28:14] <sysmonk> akke: man postconf -n [19:28:18] <sysmonk> and damn it [19:28:22] <sysmonk> pastebin the WHOLE stuff [19:28:25] <sysmonk> not only one line [19:29:18] <akke> ok [19:29:21] <akke> postconf -n @ http://paste.debian.net/15306/ [19:29:59] <vice-versa> akke: what's the chances your defered queue has a a bunch of mail for that domain trying to use the default transport? [19:30:26] <vice-versa> mailq [19:31:34] <akke> vice-versa: no idea... I have been adding these 'per domain' configuration because of the problem, and there is a large mail queue for that domain [19:32:43] <vice-versa> ah ha, wonder if you should maybe requeued [19:33:51] <akke> is there a command to requeue them all or should I invent some ugly large commandline for that? ;) [19:33:54] <vice-versa> hmm, better clarify that -d, requeue not requeued ;) [19:34:16] <vice-versa> postsuper -r ALL [19:35:50] <akke> now my mail.log is being flood with message deliveries... I was unaware that the current queue was using the old transport :S [19:36:03] <vice-versa> and after that, as sysmonk mentioned, give the remote host a chance to clear it's throat [19:36:12] <vice-versa> there ya go ;) [19:36:42] <akke> hmmm; I'm starting to see those Too many connections from your host here and there in between the message deliveries.. Normal? [19:38:28] <vice-versa> could be because you're peppering the host with a backlog of mail [19:40:10] <kreg_work> how do you tell postfix only allow sasl_authenticated as long is it was done via ssl / tls [19:40:12] <akke> now my mailq is a lot smaller but the mail.log is not showing message deliveries, only those errors again... maybe it's actually a remote's problem :S [19:41:15] <vice-versa> yeah, who knows what their mta does to determine the connection count [19:41:37] <vice-versa> could be a cache timing issue like sysmonk said [19:41:47] <akke> okay [19:42:08] <vice-versa> once this shit load is over you should be fine [19:43:27] <vice-versa> at least you're using the right transport now ;) [19:43:39] <akke> we'll wait.. If it's not fixed I will call the remote's admin and ask him what exactly his limits are [19:45:58] *** gonewestcoast has joined #postfix [19:51:20] *** akke has quit IRC [19:51:33] *** skyweb has joined #postfix [19:53:12] <vice-versa> kreg_work: smtpd_tls_auth_only [19:54:09] *** rootsvr has quit IRC [20:04:57] *** hwdyki has joined #postfix [20:05:10] <hwdyki> does maildir have to be in user's homedir? [20:06:57] *** mynyml has joined #postfix [20:07:03] *** arctic_import has joined #postfix [20:07:20] *** pingouin has quit IRC [20:08:32] <arctic_import> I need to relay a few mail users e-mail to a different server. So for example bob at example dot com and mary at example dot com don't get delivered locally they get sent to a different mail server. Could someone point me to an example config or howto. [20:12:08] *** lambda has joined #postfix [20:13:09] *** kiliko has quit IRC [20:14:44] <cpm> man transport [20:16:01] <vice-versa> car? [20:16:08] *** brancaleone has quit IRC [20:19:48] *** master_o1_master has joined #postfix [20:27:48] <vice-versa> hwdyki: no [20:27:48] *** carl- has joined #postfix [20:28:41] *** serialthrilla has joined #postfix [20:29:13] <serialthrilla> hey yall, i pretty much have to use some sort of smtp wrapper for dspam if i want to use it in a before-queue filter setup right? [20:30:13] <serialthrilla> the only two methods i know of are the smtpd proxy (smtp only) and the smtp milters... the only lmtp way is with a virtual_transport but that's after-queue [20:30:18] <arctic_import> cpm: I thought the transport map only related to domains. I need to have 2 users mail sent to a different mail server with the same domain name. Just deliver it via smtp to another mail server instead of locally. Is that done in the transport map? [20:31:17] *** master_of_master has quit IRC [20:31:38] *** mynyml has quit IRC [20:34:27] <vice-versa> !transport [20:34:27] <knoba> vice-versa: "transport" : transport(5) The optional transport(5) table specifies a mapping from email addresses to message delivery transports and next- hop destinations. Look at: http://www.postfix.org/transport.5.html [20:34:45] <arctic_import> knoba: thanks [20:34:56] <vice-versa> !knoba [20:34:56] <knoba> vice-versa: "knoba" : an informational bot in this channel (see http://workaround.org/f=postfix) [20:37:12] *** Nockian has joined #postfix [20:39:26] *** jlund has joined #postfix [20:41:25] *** Odd_Bloke has quit IRC [20:42:30] <jlund> I'm using Postfix 2.2.10 and I'm trying to figure out how to reject messages where the destination user doesn't exist or where the helo name is invalid before hitting the RBLs that I have configured. It seems redundant to query Spamhaus multiple times for a message that I can reject without doing a DNS query. Here are the relevant lines from my main.cf: http://pastie.org/257443 [20:48:13] <vice-versa> !tell jlund cheatsheet [20:48:55] <vice-versa> see 'Understanding The Order In Which UCE Checks Are Applied' [20:49:34] <vice-versa> s/USE/SMTPD/ [20:49:57] *** Odd_Bloke has joined #postfix [20:50:09] <vice-versa> s/USE/UCE/ :) [20:51:41] <jlund> Thanks, I will take a look [20:53:39] *** boink__ has joined #postfix [20:53:45] <vice-versa> jlund: fwiw, it's actually a good practice to just put all your restrictions smtpd_recipient_restrictions with the exception a few that only have meaning within smtpd_data_restrictions [20:54:18] <vice-versa> s/restrictions/restrictions in/ [20:54:38] *** m0f0x_ has joined #postfix [20:56:51] *** skyweb has quit IRC [20:57:09] *** lambda has quit IRC [20:58:48] *** pingouin has joined #postfix [21:01:15] *** m0f0x__ has joined #postfix [21:04:00] *** skyweb has joined #postfix [21:05:11] *** raz has quit IRC [21:05:12] *** boink__ is now known as raz [21:05:12] *** scena has joined #postfix [21:05:44] <scena> has anyone seen these errors before? http://pastebin.com/d26972322 [21:06:03] *** uid00 has quit IRC [21:06:16] *** m0f0x has quit IRC [21:06:17] <scena> ive never seen a /var/spool/pmta folder [21:06:24] *** scena is now known as PcPixel [21:08:00] *** Fallenou has quit IRC [21:10:09] *** Fallenou has joined #postfix [21:10:56] <PcPixel> did something bad happen to my server? [21:11:24] *** gonewestcoast has quit IRC [21:11:52] <vice-versa> PcPixel: ENOSPC = No Space left on device [21:12:00] *** gonewestcoast has joined #postfix [21:12:31] <PcPixel> vice: the disk is barely 1% used. plus i done have a /var/spool/pmta folder [21:12:54] *** m0f0x_ has quit IRC [21:14:07] <vice-versa> PcPixel: is mx.thewondercompany.com sothing you have defined in a transport map? [21:14:27] <vice-versa> s/sothing/something/ [21:14:32] <PcPixel> vice-versa: no. its not defined anywhere on my system. i've never even seen it before. [21:14:34] *** gonewestcoast_ has joined #postfix [21:15:12] *** lambda has joined #postfix [21:15:14] <PcPixel> vice: it looks like they are an outside "company" [21:15:20] <PcPixel> they ahve an MX record [21:15:22] <vice-versa> so mx.thewondercompany.com has nothing to do with you then? [21:15:28] <PcPixel> vice: correct. [21:15:46] <PcPixel> vice: whats freaking me out is the fact it wants /var/spool/pmta [21:16:00] <vice-versa> then it's not your problem [21:16:04] *** pitakill has joined #postfix [21:16:19] <PcPixel> vice: an email server can request something for a folder on a HD? [21:16:35] <vice-versa> mx.thewondercompany.com[208.53.10.2] *said* <-- [21:16:51] *** rabbit7 has joined #postfix [21:16:55] <vice-versa> they ENOSPC is on their mta [21:17:09] <PcPixel> so somethinfg from our side is trying to send something to them [21:17:13] <PcPixel> and thats what they responded with [21:17:16] <rabbit7> hey there.. how can i stop my postfix from sending out mails ? one of my client just got hacked and is sending spam out [21:17:19] <vice-versa> fuck!, I can't type for shit today [21:17:32] <PcPixel> vice: it sok. you arent the only one. my brain is cooked after 5 fires. [21:17:46] <sysmonk> brainz? [21:17:54] <vice-versa> PcPixel: yeah that's how I'm interpreting it [21:18:05] <PcPixel> vice: ok. i wont panic then. :) [21:18:08] <sysmonk> got brainz for sale? [21:18:54] <PcPixel> you wouldnt want mine right now [21:19:02] <PcPixel> ive gicen up caffine & had a horrifix day [21:19:20] <rabbit7> anyone ? [21:19:24] <sysmonk> i haven't had caffeine for ... [21:19:26] * sysmonk counts [21:19:33] <vice-versa> PcPixel: you should check the deferred queue and maybe notify the sender about the delivery issue if it might be something important [21:19:36] <sysmonk> 6 days! [21:19:50] <PcPixel> vice-versa: i didnt see it in the queue [21:20:10] <PcPixel> brb. [21:20:35] <vice-versa> maybe they resolved the issue and it's been sent then [21:20:43] <sysmonk> no brainz in ze queue [21:20:58] <sysmonk> rabbit7: stop postfix? [21:21:48] <rabbit7> no i need the queue if i stop postfix the mail will be sent to another one of the mailserver [21:22:01] <rabbit7> i just want them to land in the queue and let me sort out the things [21:22:05] <sysmonk> how do you receive the mails? [21:22:10] *** war9407 has quit IRC [21:22:15] <sysmonk> via injection? via smtp? [21:22:23] <sysmonk> injection - 'sendmail' [21:22:48] <rabbit7> through smtp [21:23:06] <sysmonk> rabbit7: you can use defer_transport [21:23:09] <sysmonk> !defer_transport [21:23:09] <knoba> sysmonk: Error: "defer_transport" is not a valid command. [21:23:12] <sysmonk> doh [21:23:17] <vice-versa> hehe [21:23:20] <sysmonk> !defer_transports [21:23:20] <knoba> sysmonk: "defer_transports" : a configuration parameter in the main.cf: The names of message delivery transports that should not be delivered to unless someone issues "sendmail -q" or equivalent. Specify zero or more names of mail delivery transports names that appear in the first field of master.cf). [21:24:04] <vice-versa> defer_transports = smtp [21:24:16] *** lambda has quit IRC [21:24:30] <sysmonk> vice-versa: got braizn fixxxed ? [21:24:31] *** RobertLaptop has joined #postfix [21:24:38] *** war9407 has joined #postfix [21:26:01] *** cssbkgn has quit IRC [21:26:09] *** gonewestcoast_ has quit IRC [21:26:29] <rabbit7> thanks a lot you guys this has been very helpfull [21:26:56] *** Snares has joined #postfix [21:27:03] <vice-versa> we know, but you're welcome nonetheless ;) [21:27:19] <Snares> hi, could someone explain to me quickly how to set up a working email address in postfix? [21:27:27] <sysmonk> !basic [21:27:27] <knoba> sysmonk: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here. [21:27:29] <sysmonk> Snares: ^^ [21:27:39] <Snares> I need it to send emails to people who register on a... [21:27:41] <Snares> ok thanks :D [21:28:02] <PcPixel> ok back [21:28:07] <PcPixel> diet mtdew [21:28:14] <vice-versa> yuck [21:28:20] <sysmonk> what's that? [21:28:37] <PcPixel> vice: yes, i know. [21:28:42] <vice-versa> same as water filtered through gravel [21:28:48] <PcPixel> vice: it gives me the oddest buzz. [21:28:58] <PcPixel> vice: but helps me move away from being a fatty-fat-fat [21:29:26] <vice-versa> exercise can help with that too [21:29:32] <sysmonk> heeeey, what you've got against me?! [21:30:11] *** gonewestcoast has quit IRC [21:30:14] <PcPixel> vice: lets not be too radical here. [21:30:15] * vice-versa is one to talk though [21:31:24] <PcPixel> its weird.. today someone has been hellbent on trying to get mail from our domain in from the outside. [21:31:56] <vice-versa> Thursday [21:32:05] <PcPixel> I never could get the hang of Thursdays. [21:32:58] <cpm> indeed [21:33:30] <PcPixel> slightly off topic question.. if i own domain.com does that mean i could have addresses like @software.domain.com? [21:33:39] <sysmonk> PcPixel: sure, why not? [21:33:41] *** OneFix_Work has quit IRC [21:33:43] <Snares> ok, this looks a little too complicated for what I need...is there some package I can install that will just set up a simple SMTP email? [21:33:56] <PcPixel> snares: what paltform [21:34:00] <cpm> PcPixel, thursdays, ++ [21:34:01] <Snares> Ubuntu [21:34:02] <sysmonk> Snares: it's set up by default... afaik [21:34:03] <cpm> nice. [21:34:04] *** pitakill has quit IRC [21:34:10] <sysmonk> oh, bubuntu [21:34:15] <PcPixel> snares: postfix is your best bet [21:34:19] *** Haris__ is now known as Haris [21:34:26] * sysmonk hides from bubuntus [21:34:27] <PcPixel> sysmonk: i wasnt sure if i had to register software.domain.com [21:34:36] <Snares> all I need it to do is email a registration code to a person who makes a registration for a mumble server I have [21:34:46] <sysmonk> PcPixel: no, if you own domain.com and you control domain.com dns servers - you can do whatever you want [21:34:50] <kreg_work> vice-versa: would it make sense to try an support smtpd_tls_auth_only to specific users? we have some printers that will use smtp auth, but can't do the tls/ssl part. [21:34:52] <Snares> it looks very complicated to use postfix :( [21:35:00] <sysmonk> that is, whatever subdomains you want :) [21:35:10] <PcPixel> snares: i had an email server up in under a day [21:35:18] <sysmonk> kreg_work: can you configure them to use other port? [21:35:21] <PcPixel> sysmonk: its for future planning, but was just wondering. [21:35:41] <kreg_work> sysmonk: ya [21:35:51] <sysmonk> kreg_work: then just open up another port and make them use it [21:35:58] <Snares> I need admin@myip to send emails when my localwebserver calls for them [21:36:13] <kreg_work> systemonk based on firewall or at the postfix level? [21:36:29] <sysmonk> kreg_work: postfix level [21:36:50] <sysmonk> kreg_work: look at master.cf, choose a port you want and make postfix listen on it with your supplied configuration [21:36:59] <kreg_work> ahh i undesrtand. ok [21:37:16] *** cpm has quit IRC [21:37:43] <vice-versa> Snares: you just need to get mail off a web server to a mail hub? [21:39:34] <Snares> vice-versa: heres how it is, I have a cgi script that makes a registration for a person who wants to register on my mumble server. In it the person puts a username, password, and email. When they register a confirmation code has to be sent to their email address. What I need is a local SMTP server to actually send out the mail when the cgi script orders the daemon to send it [21:39:57] <Snares> in the configuration script you can set the email to what the local SMTP server's email is [21:40:27] *** frato has quit IRC [21:40:52] <vice-versa> so it doesn't have to receive, just send out correct? [21:41:33] <Snares> yes [21:41:35] <Snares> that's it [21:41:37] <vice-versa> sounds like ssmtp would be what you want then [21:41:41] <Snares> ok [21:42:12] <vice-versa> that's what we use on web servers we admin [21:42:35] <Snares> vice-versa: could you quickly explain how to set up an email address for ssmtp? [21:44:00] <Snares> or how to use it [21:44:04] <vice-versa> hmm, maybe I'm not parsing your requirements properly [21:44:23] <vice-versa> well it's dead simple, hence it's name [21:44:52] <Snares> ok, so I install ssmtp [21:44:57] *** j_s has quit IRC [21:45:05] <Snares> what would I put as the email address in the ini file [21:45:09] <Snares> admin@ssmtp [21:45:10] <Snares> ? [21:46:28] <vice-versa> ini file? [21:46:49] <vice-versa> sounds kinda Windowish [21:47:07] <Snares> I have a text file where you put the email of the local smtp server that will send out the mail [21:47:22] *** j_s has joined #postfix [21:47:49] *** olgagirl has joined #postfix [21:48:21] *** pickcoder has joined #postfix [21:48:38] <vice-versa> Snares: dunno, doesn't make sense to me [21:48:50] <Snares> the cgi script seems to work, as it says it has sent the email [21:48:53] <Snares> except it hasn't [21:49:28] <Snares> # To enable username registration through [21:49:28] <Snares> # http://webserver/cgi-bin/mumble-server/register.cgi [21:49:28] <Snares> # then this value must be set to a valid email [21:49:29] <Snares> # and you must be running a SMTP server on this [21:49:29] <Snares> # machine. [21:49:29] <Snares> emailfrom = admin at something dot something [21:49:34] <jelly> Snares: "email of the local smtp server"? Probably more like a hostname or ip address. [21:49:49] *** olgagirl has quit IRC [21:50:03] *** diqpib has quit IRC [21:50:20] *** Haris1 has quit IRC [21:50:26] <rabbit7> one more question can i display a certain mail by its ID through mailq or a simular program ? [21:50:30] <jelly> Snares: emailfrom is just a cosmetic setting, it has to put _something_ into From and envelope-from [21:50:41] <vice-versa> rabbit7: man postcat [21:51:30] <Snares> ok [21:51:36] *** Azoff has joined #postfix [21:51:38] <Azoff> hello [21:51:41] <rabbit7> thanks once again :) [21:51:58] <Snares> I'm pretty sure all I have to do is set up an email address with postfix, then use that email address in the configuration file [21:52:23] <jelly> Snares: this doesn't look like a ssmtp.conf file [21:52:28] <Snares> it isn't [21:52:33] <Snares> it's the mumble configuration file [21:52:34] <jelly> oh [21:52:40] <Azoff> I have been runting postfix + saslauthd for a long time on Debian, but now when I setup pretty much the same config on a gentoo host, it dosn't work [21:52:53] <Azoff> the logs tells me this: Aug 21 20:56:29 frog postfix/smtpd[1282]: warning: SASL authentication failure: no secret in databas [21:52:59] <jelly> Snares: then disregard anything I said, no idea aobut mumble [21:53:09] <Azoff> however, saslauthd is configured to use shadow as authsource [21:53:11] *** m0f0x__ has quit IRC [21:53:39] *** lambda has joined #postfix [21:53:52] <Azoff> this is my /etc/postfix/smtpd.conf: [21:53:57] <Azoff> pwcheck_method: saslauthd [21:53:57] <Azoff> mech_list: plain [21:54:10] <Azoff> any ideas where I can start looking? [21:54:11] <Snares> jelly: what it is is a cgi script that is run by a web server, all it does is call for the local smtp server to send an email [21:54:16] <Snares> sigh [21:54:35] <jelly> Snares: so, give it your smarthost? [21:54:41] <Azoff> by the way, saslauthd is running with: /usr/sbin/saslauthd -a shadow -n 5 -m /var/spool/postfix/var/run/saslauthd [21:54:47] *** hwdyki has left #postfix [21:54:50] <Snares> er [21:54:51] <Snares> ok [21:54:54] <vice-versa> Azoff: did you copy the postfix configs from the debian box? [21:54:55] *** githogori has joined #postfix [21:55:12] * vice-versa smells chroot stuff [21:55:13] *** skyweb has quit IRC [21:55:23] <Azoff> vice-versa: more or less, I reconfigured the gentoo confs with the debian values [21:55:42] <Azoff> vice-versa: the debian box has a chroot, but the gentoo box doesn't (yet) [21:56:05] *** unixcoder has joined #postfix [21:56:21] <vice-versa> check your master.cf to see if anything is configured to use chroot [21:57:09] <Azoff> there is a 'n' on all lines in the chroot col. [21:57:54] <vice-versa> proper ;) [21:58:43] <Azoff> any more ideas? :) [21:59:51] *** Snares has left #postfix [22:00:06] <Azoff> I have two choices actually, I'm using doevcot as imapd and could use it to auth against, however, I didn't manage to get that working either :-/ [22:01:02] <Azoff> if I try using 'dovecot' as smtpd_sasl_type I instead get this in my logs: [22:01:13] <Azoff> Aug 21 21:05:45 frog postfix/smtpd[1518]: fatal: no SASL authentication mechanisms [22:01:16] <Azoff> Aug 21 21:05:46 frog postfix/master[1507]: warning: process /usr/lib64/postfix/smtpd pid 1518 exit status 1 [22:01:19] <Azoff> Aug 21 21:05:46 frog postfix/master[1507]: warning: /usr/lib64/postfix/smtpd: bad command startup -- throttling [22:03:25] <Azoff> vice-versa: did you die on me? ;) [22:04:09] *** arctic_import has quit IRC [22:04:37] <vice-versa> nope, someone has stopped by to visit with me that's more important to me then you are, nothing personal though ;) [22:06:54] <Azoff> vice-versa: ah, I see. Have a nice time :-) [22:07:58] *** JoeWulf has joined #postfix [22:10:53] *** danbeck has joined #postfix [22:12:13] *** Blue_Mousey has joined #postfix [22:12:32] *** archangel7863 has joined #postfix [22:13:37] <Blue_Mousey> Hello, when i receive mail that is referred to an unexistant user with a catch-all enabled in the same FQDN as the server, the catch-all of the same FQDN receives the mail instead of the catchall of the FQDN it is actually sent to... where does it go wrong? [22:14:09] <sysmonk> it goes wrong somewhere after you said 'Hello' [22:14:14] <sysmonk> pastebin the logs [22:15:41] *** bimbomio has quit IRC [22:17:19] *** Joe_Wulf has quit IRC [22:18:46] *** hwdyki has joined #postfix [22:19:22] *** Niemi has quit IRC [22:19:52] <Blue_Mousey> Pastebin log: http://rafb.net/p/FUPIxj20.html [22:20:53] <hwdyki> is myorigin the variable that determines what domain postfix uses in the HELO message? [22:23:16] *** cmatheson has joined #postfix [22:23:38] <vice-versa> hwdyki: no [22:23:40] <sysmonk> hwdyki: no [22:23:44] <sysmonk> vice-versa: ;) [22:23:47] <vice-versa> :) [22:23:55] <Blue_Mousey> myhostname is hwdyki [22:24:20] <Blue_Mousey> That is send at HELO if i'm correct [22:24:32] <sysmonk> Blue_Mousey: no [22:24:47] <sysmonk> that is, yes, but no :) [22:24:58] <sysmonk> hwdyki: the variable which is responsible for HELO is smtp_helo_name [22:25:05] <sysmonk> WHICH defaults to $myhostname [22:25:21] <sysmonk> so that's a no and yes to Blue_Mousey :P [22:25:36] <hwdyki> then what exactly does myorigin do? [22:26:08] <Blue_Mousey> ok [22:26:11] <cmatheson> is it possible that after a relayhost timeouts for a while, that postfix gives up on it and stops checking if the relayhost is back (even upon issuing postqueue -f?) [22:26:18] <Blue_Mousey> smtp_helo_name takes precedence over it [22:26:22] <Blue_Mousey> so i was 50% correct :> [22:26:25] <vice-versa> !myorigin [22:26:25] <knoba> vice-versa: "myorigin" : a configuration parameter in the main.cf: The default domain name that locally-posted mail appears to come from, and that locally posted mail is delivered to. The default $myhostname, which is fine for small sites. If you run a domain with multiple machines, you should (1) change this to $mydomain and (2) set up a domain-wide alias database that aliases each user to user at that dot users.mailhost. [22:27:01] <Blue_Mousey> sysmonk you had the chance to take a look at the log yet? [22:27:55] <sysmonk> yeah but with all the mangling i don't understand the problem [22:28:37] *** brancaleone has joined #postfix [22:29:05] *** nixbox has joined #postfix [22:29:08] <nixbox> hi all [22:29:17] <nixbox> i have installed and configured postfix [22:29:34] <nixbox> i can send email but cannot recv it in my inbox [22:29:58] <nixbox> i have checked the logs, i do have a connection from other mail server from which i send the email [22:30:07] <nixbox> but it is not appearing in my inbox [22:30:13] <nixbox> what could be wrong? [22:30:26] <hwdyki> "The default domain name that locally-posted mail appears to come from". what's that mean? if i use an mua which invokes 'sendmail' to send an email to an external addr, is that 'locally-posted' mail? [22:31:08] <sysmonk> hwdyki: kinda yes [22:31:24] <sysmonk> hwdyki: if you'll be mailing from 'hwdyki' it will rewrite it to 'hwdyki@$myorigin' [22:31:43] <vice-versa> nixbox: does the log show it was accepted and delivered? [22:32:22] <vice-versa> !obvious [22:32:23] <knoba> vice-versa: "obvious" : look for obvious signs of trouble, egrep '(warning|error|fatal|panic):' /some/log/file See: !logs factoid if you're unsure of where your mail logs are located [22:33:45] <Blue_Mousey> sysmonk the problem is i send a mail from: my.name at serverFQDN dot com and rcpt to: nonexistant at anotherdomain dot com and instead of anotherdomain.com's catchall it is being received by the catch-all of serverFQDN.com [22:33:54] *** PcPixel has quit IRC [22:34:49] <Blue_Mousey> the origin's FQDN is the same FQDN as the server (myhostname is: cartman.serverFQDN.com) [22:35:02] <hwdyki> sysmonk: rewrite which exact header field? [22:35:41] *** boink__ has joined #postfix [22:35:46] *** j_s has quit IRC [22:37:00] <sysmonk> hwdyki: from [22:37:04] <Blue_Mousey> The configuration: http://rafb.net/p/DEU0yR74.html [22:37:24] <sysmonk> hwdyki: read the cleanup man page for details [22:37:44] <sysmonk> Blue_Mousey: which postfix version are you runing? [22:37:48] <Blue_Mousey> both cartman.serverFQDN.com aswell as serverFQDN.com are in local-host-names aswell as anotherdomain.com [22:38:23] <hwdyki> sysmonk: my from: is set in my mua. does it ignore it if the field is already set? [22:38:36] <sysmonk> hwdyki: just read the man page [22:38:46] <Blue_Mousey> This might be a stupid question, but how do i determine postfix's version? [22:38:59] <sysmonk> Blue_Mousey: postconf mail_version [22:39:14] <Blue_Mousey> mail_version = 2.3.8 [22:39:46] <sysmonk> virtual_maps is obsolete [22:39:58] <Blue_Mousey> Aw [22:40:02] <Blue_Mousey> meaning? [22:41:19] <Blue_Mousey> i have to replace virtual_maps with virtual_alias_maps? [22:41:24] <sysmonk> it's not used anymore, althought backward compatibility is there [22:41:44] <sysmonk> yeah, that would be better [22:41:59] <sysmonk> + your logs you gave... they're kinda weird [22:42:00] <Blue_Mousey> but would that really fix my problem [22:42:07] <sysmonk> cut-out of cotext [22:42:09] <sysmonk> context* [22:42:17] <sysmonk> Blue_Mousey: npoe [22:42:19] <sysmonk> nope* [22:42:45] <Blue_Mousey> what is weird about my logs? [22:43:04] <Blue_Mousey> Are they misbehaving? Do i need to discipline them again? [22:43:33] <sysmonk> although no, delivery took 8 seconds ( that's much ) [22:43:33] *** danbeck has quit IRC [22:43:36] *** pirho has joined #postfix [22:43:45] <sysmonk> and the log starts from 22:16:15 [22:43:53] <sysmonk> so it just doesn't have the earlier entries [22:44:20] <nixbox> vice-versa, no there is no explicit message in the log saying it was accepted [22:44:40] <sysmonk> Blue_Mousey: where does * at anotherdomain dot com catch-all point to ? [22:45:05] <sysmonk> Blue_Mousey: postmap -q @anotherdomain.com hash:/etc/postfix/virtusertable [22:45:38] <Blue_Mousey> the correct catch-all username for that domain [22:45:49] *** gonewestcoast has joined #postfix [22:45:51] <vice-versa> nixbox: pastebin the relevant excerpts from your logs [22:45:59] <sysmonk> Blue_Mousey: use exact names, please [22:46:10] <Blue_Mousey> idfinfo [22:46:32] <sysmonk> Blue_Mousey: can you pastebin the command and output? [22:47:03] <Blue_Mousey> cartman:~# postmap -q @anotherdomain.com hash:/etc/postfix/virtusertable [22:47:03] <Blue_Mousey> idfinfo [22:47:22] <sysmonk> Blue_Mousey: does idfinfo at serverFQDN dot com exist? [22:47:33] *** raz has quit IRC [22:47:34] *** boink__ is now known as raz [22:48:00] <nixbox> vice-versa, http://pastebin.com/mc6133a1 [22:48:18] <Blue_Mousey> sysmonk no but i would like to know how i can check that? [22:48:30] <Blue_Mousey> idfinfo only is applied to @anotherdomain.com to my knowledge [22:48:34] <sysmonk> Blue_Mousey: does a system user called 'idfinfo' exist ? [22:48:43] <sysmonk> Blue_Mousey: yes, but you're sending it to 'idfinfo' [22:48:50] *** Broken|work has quit IRC [22:48:51] <sysmonk> which is rewritten to idfinfo@myhostname [22:49:00] <sysmonk> which is idfinfo at serverFQDN dot com [22:49:08] <Blue_Mousey> That does not exist no [22:49:13] <sysmonk> so, if idfinfo at serverFQDN dot com doesn't exist, it uses a catch-all of @serverFQDN.com [22:49:26] *** Broken|work has joined #postfix [22:49:28] <Blue_Mousey> and my.name catch-all of serverFQDN.com [22:49:31] <vice-versa> nixbox: you need to run newaliases to address this in your logs, warning: database /etc/aliases.db is older than source file /etc/aliases [22:49:46] <sysmonk> Blue_Mousey: do you understand what happens? [22:49:50] <Blue_Mousey> Yeah, this is the problem it should not been rewritten to @myhostname [22:50:03] <Blue_Mousey> instead it should be send to @anotherdomain.com [22:50:06] <nixbox> vice-versa, ok, i will do that, thanks, what about the recv, it seems that the mail is being delivered, isn't it? [22:50:12] <sysmonk> Blue_Mousey: it will be. it has to be rewritten to a full email addie [22:50:21] <Blue_Mousey> So, what can i do? [22:50:23] <sysmonk> Blue_Mousey: then please use a full email addie in your catch-all [22:50:42] <Blue_Mousey> full email addie? [22:50:43] <vice-versa> nixbox: it's being handed over to procmail for delivery, so you'll have to look into it from there [22:50:46] <sysmonk> Blue_Mousey: yes [22:50:55] <sysmonk> Blue_Mousey: @anotherdomain.com idfinfo at another dot domain.com [22:51:04] <sysmonk> err, without the dot [22:51:14] <Blue_Mousey> ahhh [22:51:40] <Blue_Mousey> in virtual-user-table right? [22:51:49] <sysmonk> yes [22:51:52] <sysmonk> don't forget to postmap it [22:52:05] <nixbox> vice-versa, can i avoid using procmail, and have it delivered directly? [22:52:33] <Blue_Mousey> postmap? Sorry but i use ISPConfig as a control panel, i normally let that configure the server rather than modifying things myself [22:53:26] <vice-versa> nixbox: if you're asking that I take it you have no idea why you're using it in the first place then? [22:53:34] * vice-versa smells a tutorial [22:53:40] <sysmonk> Blue_Mousey: then i can't help in this place, do as you know :) [22:53:40] <vice-versa> !tutorial [22:53:41] <knoba> vice-versa: "tutorial" : A very common problem is that some people prefer to follow a step-by-step tutorial that shows them how to setup their mail server without reading the documentation or understanding what they are doing. If something goes wrong, they have no clue whatsoever about where to look for hints, and they sometimes decide to start from scratch using a different tutorial. This is not The Proper Way. [22:54:04] <Blue_Mousey> sysmonk, i'm just saying i don't know why i would need to postmap it [22:54:09] <hwdyki> what header do most mtas check to implement forward confirmed dns checking? [22:54:15] <Blue_Mousey> hell, i have no idea what you mean with postmap it... could you explain? [22:55:16] *** Ryushin has joined #postfix [22:55:20] <sysmonk> Blue_Mousey: 'compile' a text file to a binary file for better performance [22:55:43] <sysmonk> unless you tell postfix to read it as a plain flie, not as a binary file, you'd have to 'compile' the file each time you change it [22:55:59] *** vali has joined #postfix [22:56:02] <Blue_Mousey> ah ok [22:56:05] *** unixcoder has quit IRC [22:57:38] *** vali has quit IRC [23:04:55] *** uid00 has joined #postfix [23:04:57] <uid00> ello again [23:05:16] <uid00> so i'm migrating a postfix server, about to move user dirs [23:05:21] <uid00> not using virtual users [23:05:29] <uid00> I know that user dirs are in ~/Maildir [23:05:49] <uid00> but is in /var/spool/mail/user --> is that the mail right before the MUA picks it up? [23:06:01] <uid00> furthermore, it looks like that's where shared folders are stored [23:06:04] <uid00> i don't get that [23:07:02] <uid00> eh [23:08:02] *** uid00 has quit IRC [23:09:36] *** carl- has quit IRC [23:12:56] *** Haris has quit IRC [23:19:47] <Azoff> vice-versa: I got it working now! [23:20:05] <Azoff> vice-versa: I were poking around in the wrong smtpd.conf file, that were all ;) [23:22:56] *** _matt has joined #postfix [23:23:15] *** _matt is now known as matt_ [23:23:29] <vice-versa> Azoff: that would do it [23:23:52] <jlund> Can someone look this over? I am replacing this -- http://pastie.org/257443 -- with this -- http://pastie.org/257579 -- anything that I am missing, or does this look OK? [23:24:11] *** Alumin has joined #postfix [23:24:15] *** hwdyki has quit IRC [23:24:20] <Azoff> thanks again for your help :) [23:24:23] <Azoff> good night [23:24:57] <vice-versa> np, gnight [23:25:10] <Alumin> is it possible to force an outgoing domain name on all relayed mail? ie, whenever someone sends a mail through, the "From:" header gets changed from user at whatever dot com to user at forced-domain dot com [23:25:49] <Alumin> I added "masquerade_domains", but that just strips subdomains...I think this person might want a full-blown override [23:26:02] *** Azoff has left #postfix [23:26:10] *** jeffspeff2 has joined #postfix [23:28:32] <vice-versa> Alumin: setting the From: header is typically performed by the mua [23:33:00] <Blue_Mousey> you think or you know? [23:35:21] <jlund> Can someone look this over? I am replacing this -- http://pastie.org/257443 -- with this -- http://pastie.org/257579 -- anything that I am missing, or does this look OK? [23:36:55] *** darkphader has quit IRC [23:40:29] *** gonewestcoast has quit IRC [23:40:37] *** jeffspeff has quit IRC [23:40:43] *** gonewestcoast has joined #postfix [23:43:02] *** xous has quit IRC [23:43:03] <Alumin> vice-versa: I know, I was just wondering if it could be overwritten [23:43:28] *** gonewestcoast has quit IRC [23:43:43] <Alumin> it's not really the MTA's job [23:43:50] *** gonewestcoast has joined #postfix [23:46:59] *** serialthrilla has quit IRC [23:48:07] *** Aron is now known as aron [23:50:34] *** igorw has quit IRC [23:53:56] <Blue_Mousey> It's funny, all in IT everyone points to someone else [23:54:08] <Blue_Mousey> That's not my job, you need to call this idiot for that [23:58:35] <e_> Alumin: http://www.postfix.org/generic.5.html [23:58:59] *** PhilKC has joined #Postfix [23:59:53] <Blue_Mousey> Night all [23:59:56] *** Blue_Mousey has quit IRC