August 24, 2008 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
August 24, 2008 [00:00:42] <xpoint> hparker, udevinfo -a -p /sys/class/net/eth0 tricker a kernel null pointer here, nice ?[00:01:01] <hparker> Doesn't look like it[00:01:39] <xpoint> test it if you can, i will try find another kernel that does not do it[00:02:55] <hparker> I'm having enough network problems atm :P[00:03:06] <xpoint> same here[00:03:16] <shasta> xpoint, works fine here[00:03:24] <hparker> .26 hates ipw2200 in my laptop, and other things[00:03:33] <xpoint> i just got udev to not rename my ethx devices[00:03:50] * hparker uses udev to name his devices something meaningful[00:03:59] <hparker> lan/wan/wireless/etc[00:04:28] <xpoint> yes thats properly my next step[00:04:55] <xpoint> shasta, kernel version ?, and what ethernet driver ?[00:05:05] <shasta> 2.6.26, sky2[00:05:25] <xpoint> okay will try[00:06:02] <xpoint> 2.6.25-gentoo-r7 is the one with kernel null pointer[00:06:05] <shasta> works fine with 2.6.26.1 and 8139too, forcedeth[00:06:28] <xpoint> what arch ?[00:06:40] <shasta> x86[00:06:58] <xpoint> okay then i belive my problem is smp related[00:07:05] <shasta> also fine with 2.6.16.18 and 3c59x, eepro100[00:07:19] <shasta> all those kernels are SMP, btw[00:07:57] <xpoint> okay, i will still try non smp kernel to see if it makes diff here[00:08:37] *** gonewestcoast has quit IRC[00:10:15] *** gonewestcoast has joined #postfix[00:10:22] <xpoint> hparker, remember my udev problem olso ?, where there seems to be few problem in latest udev[00:10:41] <hparker> kinda[00:10:51] * vice-versa dbl checks the channel[00:11:08] * hparker thinks the channel is vice-versa to what it should be[00:14:41] <xpoint> http://bugs.gentoo.org/show_bug.cgi?id=233790 this was my finding, seems stable, but is still vierd[00:17:06] <hparker> I'm running that version on several systems without problems[00:20:37] *** Guest48215 has joined #postfix[00:27:17] *** gonewestcoast has quit IRC[00:29:06] *** Ericccc has quit IRC[00:31:17] *** Guest48215 has left #postfix[00:31:21] *** Guest48215 has joined #postfix[00:31:22] <Guest48215> re[00:31:35] <Guest48215> so what should i install so postfix can receive emails ?[00:32:23] <xpoint> hparker, okay, maybe no tape drive on them[00:32:40] <shasta> Guest48215, do you think that nickchange is enough to trick us? :>[00:33:45] <Guest48215> i got disconnected[00:33:59] <vice-versa> indeed, enough with the trolling already[00:34:04] <hparker> postfix usually just receives email, no black magic required[00:34:16] <hparker> vice-versa: who was he?[00:34:26] <Guest48215> i got postfix running with postgres, no other softwares, what do you recommend ?[00:34:27] <vice-versa> you missed it[00:34:46] <hparker> Guest48215: that's what i use, receives mail all day long[00:34:47] <Guest48215> i got postfix running, but it reject emails[00:34:47] <vice-versa> hparker: ran it's course just prior to you joining[00:34:55] <hparker> oh[00:35:02] <hparker> Been fighting wifi :P[00:35:14] <vice-versa> you winning?[00:35:16] <hparker> Guest48215: what error?[00:35:21] <Guest48215> nmap doesnt show 21 nor 110 open :([00:35:29] <shasta> sigh[00:35:37] <hparker> vice-versa: I guess I scared it when I turned on all the debugging :-o[00:35:44] <xming> 00:29 -!- Ericccc [n=Eric at AAmiens-551-1-28-100 dot w92-131.abo.wanadoo.fr] has quit [Read error: 110 (Connection timed out)][00:35:47] <xming> 00:31 -!- Guest48215 [n=Eric at AAmiens-551-1-28-100 dot w92-131.abo.wanadoo.fr] has left #postfix [][00:35:49] <Guest48215> Diagnostic-Code: smtp;550 sorry, no mailbox here by that name (#5.1.1)[00:35:50] <hparker> Guest48215: postfix answers neither of those ports[00:35:50] <xming> too obvious[00:36:11] <hparker> What do the LOGS say[00:36:17] <hparker> xming: hehe[00:36:26] <shasta> "sorry, no mailbox here by that name" is qmail error message[00:36:30] <shasta> stop the trolling already[00:36:35] <hparker> lol[00:36:56] <Guest48215> hmm let me find the good log[00:36:57] *** ChanServ sets mode: +o hparker[00:37:02] <xming> tqmail for for q(uick)mail install :)[00:37:18] <Guest48215> but are you sure postfix alone is enough to receive emails from internet ?[00:37:28] * hparker has been stuck working on a few qmail toaster setups... ewwww[00:37:38] <xming> that is the goal of postfix, of course, you need internet too[00:37:40] <hparker> Guest48215: works for all of them I setup[00:37:44] <Guest48215> no smtpd ?[00:37:53] <hparker> that's what postfix is.....[00:38:01] <hparker> And smtp to send to other servers[00:38:04] <Guest48215> hmm[00:38:11] <vice-versa> what is there a fucking echo in here tonight[00:38:13] <Guest48215> but i see no smtpd process running[00:38:16] <xming> they both talk SMTP tho :D[00:38:39] <xming> hparker is wearing a funny hat[00:38:41] <hparker> Guest48215: look for master...[00:38:56] <hparker> Guest48215: lsof -i | grep 25[00:39:02] <hparker> xming: It happens ;)[00:39:22] <xming> hparker: when you are ina good or bad mood? :D[00:39:42] <hparker> In a preparation mood[00:39:56] <xming> lol[00:39:56] * vice-versa taps his foot[00:40:10] <hparker> I hear about trolling and prepare[00:40:56] <xming> does postfix serve secure index.html too? nmap does not list 443 open[00:41:29] * hparker peers over at xming[00:41:38] <vice-versa> what? you mean no all-in-one mail server?[00:41:42] * xming stars back[00:41:57] <hparker> vice-versa: that's citidel[00:41:58] <shasta> nmap does not list 23 open either[00:42:03] <hparker> or somthing like that[00:42:17] <shasta> what a useless crap, this postfix is![00:42:18] <xming> vice-versa: yes, I have this nifty web mail thing in RoR + postgrs, I need to send mails via 443 :D[00:42:31] <hparker> lol[00:43:33] <xming> will this do in master.cf? 443 inet n - n - - smtpd[00:43:47] <vice-versa> well Guest48215 was supposedly gonna write an all-in-one mail server, in a single process nonetheless[00:43:48] <hparker> let the spammers have their way with your server[00:43:58] <hparker> lol[00:44:11] <hparker> not even sendmail is that sick[00:44:16] <xming> vice-versa: it's certainly doable with twisted-matrix :D[00:44:31] <xming> grrr snedmail.cf grrr[00:45:01] <hparker> makes my eyes bleed[00:45:08] <hparker> glad I have none left[00:45:11] <xming> makes my brain bleed[00:45:27] <xming> done several sendmail admin like 10 years ago[00:45:36] <xming> never looked back[00:45:46] <xming> till brightmail crap[00:45:50] <cafuego> in soviet russia, m4 owns you[00:45:58] <hparker> I ran it for years, killed off the last one like a year ago[00:46:10] <vice-versa> propper[00:46:17] <xming> altho I must say exim is nice too[00:46:41] <hparker> I've heard that, know a few people admin'ing exim[00:46:57] <hparker> If postfix wouldn't of fit the bill exim was next[00:46:59] <xming> at my last work with a big ISP, we had qmail+patch, postfx, sendmail and exim running on 30 different boxes[00:47:16] <hparker> yikes![00:47:30] <vice-versa> more like qmail+patch+patch+patch+patch+patch+patch+patch[00:47:34] <hparker> lol[00:47:43] <xming> used exim to handle slow mails, it can handle a queue with 1m+ mails without probles[00:47:50] <xming> vice-versa: :)[00:47:59] <Guest48215> can you repeat me the name of a pop3 server please[00:48:11] <seekwill> dovecot[00:48:11] <xming> one exmin box replace 4 postfix boxes[00:48:18] <xming> dbmail[00:48:21] <hparker> courier[00:48:25] <xming> eek[00:48:38] <hparker> dbmail..... mail doesn't belong in sql! ;)[00:48:38] <vice-versa> telnet[00:48:40] <xming> I am alergix to courier :D[00:48:54] <seekwill> vice-versa: That's a client, not a server![00:48:58] <xming> hparker: personal taste, to me it does[00:49:04] <hparker> I have one and a dovecot... Probably drop courier the next upgrade[00:49:16] <hparker> heh[00:49:35] <xming> I went to dbmail 6 years ago, never go back to courier[00:50:37] <hparker> I'll probably migrate to dovecot, it's come a long way[00:51:16] <xming> dovecot is nice, but once I leart that all my mails are in DB, I won't go back[00:51:36] <hparker> sounds like a lot of overhead[00:53:26] <cafuego> sounds like fast[00:53:35] <cafuego> reading off disk file by file is *SLOW*[00:53:38] <hparker> maildir is fast enough[00:53:46] <cafuego> hparker: Not really, no[00:53:50] <xming> for manupilating mails, it's fast[00:53:59] <hparker> And, I can poke around from cli easily[00:53:59] <cafuego> hparker: As dirs grow, it gets horribly inefficient[00:54:12] <hparker> dovecot has an index[00:54:42] <hparker> And I spank my users if they eat up too much space ;)[00:54:47] <cafuego> heh[00:54:50] <xming> index is good for accessing but not for moving 100k mails from one foler to another[00:55:15] <hparker> i have no need for 100k mails, let alone in one folder[00:55:32] * cafuego has well over 100k mails, but the biggest folder is only 20k or so.[00:55:54] <xming> well moving it for fun will do :)[00:56:14] * cafuego tends to do stuff that size via the filesystem, as it's usually his own stuff.[00:56:19] * hparker would rm -rf his maildir if it had 100k in it[00:56:20] <cafuego> that was it's instantaneous <heh>[00:56:21] *** g0rd0n has joined #postfix[00:56:29] <xming> IMHO maildir will do for pop3 but not for *BIG* imap[00:56:40] <g0rd0n> is there an email address i can send an email to, that will reply telling me if my spf record is set up correctly?[00:56:42] <cafuego> disk space is cheap, why delete anything ever if it's not spam?[00:56:45] <hparker> Most of my users use pop3[00:56:46] <g0rd0n> or some similar method[00:56:52] <xming> my bottleneck for moving mails it thhunderbird[00:57:12] <hparker> cafuego: cuz, google has it somewhere[00:57:18] <cafuego> g0rd0n: You could just query a DNS server and see what it returns.[00:57:27] <cafuego> hparker: Google doesn't have my mail anywhere.[00:57:37] <hparker> g0rd0n: pobox.co has something iirc[00:57:44] <xming> cafuego: google has my junk mails[00:57:54] <vice-versa> does dbmail have any provisions for duplicate mail storage management?[00:57:57] <seekwill> g0rd0n: esp coalition[00:58:07] <g0rd0n> seekwill: what?[00:58:13] <seekwill> g0rd0n: Google it[00:58:17] <hparker> cafuego: oh, I don't think I've received 100k emails not counting lists in the 10 years i've been on the 'net[00:58:30] <cafuego> heh[00:58:38] <seekwill> g0rd0n: Don't trust their DKIM results though. They implement the old spec (last time I checked)[00:58:47] <cafuego> if i count spam i managed 100 mails in a few months[00:58:52] <hparker> Well, yeah[00:58:57] <g0rd0n> seekwill: ok[00:59:12] <hparker> spamassassin is killing of 3k+ a week just to one of my accounts[00:59:28] <cafuego> yeah, hostmaster@ here gets an *insane* amount.[00:59:31] <xming> I drastically reduced my mails to a few per month, by not replying to them :)[00:59:35] <hparker> alos happens to be the addy I've used for the 10 years ;)[00:59:45] <hparker> I don't get much to role accounts[01:00:04] <xming> vice-versa: ? duplicating?[01:00:09] <hparker> xming: lol... Yeah, told everyone to drop me from their forward-a-joke list[01:00:27] <cafuego> This one does, dunno about the others, IO don't check them, they do directly to sa-learn and do not pass go.[01:00:53] <vice-versa> xming: yeah, you know they same 500k email email to 300 users[01:01:04] <hparker> I get maybe 20-30 a month across all the roles.. Well, that score < 10 where I see them[01:01:34] * hparker doesn't go into his quarantine unless something is missing, which is rarely[01:02:09] <xming> vice-versa: yes the dev (unstable) has one copy for multiple mime attachment, even if the filenames are different[01:02:20] * cafuego nods. mine is pretty good these days, though my wife misses out on stuff from time to time[01:02:53] <hparker> ru roh[01:03:04] <hparker> better fix that before she fixes you :P[01:03:23] <xming> just added some fake MX last night to see if that reduces spam, it seems to[01:04:10] <hparker> just be careful.. Some places (airlines are bad) don't retry[01:04:57] <vice-versa> xming: it's known as nolisting[01:05:55] *** Guest48215 has quit IRC[01:06:02] *** magyar has quit IRC[01:06:08] *** Guest48215 has joined #postfix[01:06:15] *** magyar has joined #postfix[01:06:17] <xming> hparker: I don't care if I miss a mail :) it *the* home server[01:06:19] *** Guest48215 has quit IRC[01:06:20] *** nerbie69 has quit IRC[01:06:25] <hparker> xming: ahh[01:06:38] * vice-versa doesn't care much for solutions that hinder many for the actions of the few[01:06:44] <hparker> I moved all of my personal stuff to the hosting server to lessen admin overhead[01:07:12] <cafuego> hparker: yeah, Qantas are the suck. They're whitelisted.[01:09:29] <xming> just did dkim milter for my home server, we will if that helps too[01:10:41] <hparker> yeah, I need to dig into dkim... yahoo is being a pita lately[01:11:09] <xming> yeap, saw that today, greylisted for a very long time w/o dkim[01:11:48] <hparker> but, need to start over on a new vhost MTA, deleted it and used it's config last weekend when the hardware the MTA was on had a drive crap out[01:12:01] <xming> the mail headers is now 10x the size of my average email payload[01:12:04] <g0rd0n> hm i did a test and my spf record is correct, but if i send a mail to a mailbox on the very same server as mine, spamassassin then reports an SPF softfail... maybe he gets some localhost info instead of the external ones... any ideas how i can fix thits?[01:12:36] <hparker> If it's on the same host, it shouldn't be checking spf imo[01:12:49] <hparker> use submission with relaxed rules[01:12:50] <g0rd0n> yeh... well.. it's spamassasisn :P[01:13:06] <hparker> I don't scan mail that comes in via submission[01:13:10] <g0rd0n> i'm sending through tls on port 465[01:13:15] <hparker> Well, till a virus starts using it[01:13:31] <hparker> Go with releaxed tests on it[01:13:43] <xpoint> perldoc Mail::SpamAssassin::Conf and Mail::SpamAssassin::Plugin::SPF then[01:13:45] <hparker> content_filter = <leave blank>[01:13:55] * xming needs to do spf check and publish record for his domain[01:13:58] <xpoint> hparker, bad[01:14:05] <hparker> in the section of master.cf[01:14:15] <hparker> xpoint: No, lazy ;)[01:14:27] <xpoint> do a mynet policy bank in amavisd instaed[01:14:30] <xming> now we just need the IP :)[01:14:50] <hparker> Had people emailing themselves "Test" with stationary background getting hammered[01:14:58] <hparker> xpoint: For remote users?[01:15:01] <xpoint> hparker, train local mail as ham makes sense to :-)[01:15:15] <hparker> I'm the only one that can train, I don't trust them[01:15:37] <xpoint> mynets is just you most of the time[01:16:06] <hparker> "I don't remember subscribing to this, into Spam it goes"... there goes the Home Depot flyers...[01:16:31] <xpoint> make rules in postfix that use diff policy bank depending on smtp auth[01:16:34] <hparker> I don't even have my block in anything, not even mynetworks[01:16:50] <hparker> Haven't been that ambitious[01:17:16] <xpoint> :-)[01:17:34] <hparker> i'll look into it on the new server[01:17:45] <hparker> it ain't broke, I ain't fixing it[01:18:18] <xpoint> here i maked so my squirrelmail users address book got into whitelist_auth in spamassassin, let spamasassin do the rest :-)[01:18:18] <g0rd0n> btw, i'm getting more spam latelly, despite i got greylsting, spf, spamassassin and clamav... those messages usually contain an address in To:, several in Cc:, and a short text message containing a link. spamassasin score is very low on those. how in hell can i get rid of this kind of spam? it's driving me nuts :([01:18:36] <hparker> Using zen?[01:18:42] <hparker> Training them as spam?[01:19:36] <xpoint> make clamav sigs for spam domains ?[01:19:48] <g0rd0n> hparker: is there a shell command to do that? not all my users have access/knowledge...[01:20:10] <hparker> I have a Spam and a Ham folder that cron runs sa-learn across[01:20:19] <vice-versa> g0rd0n: yeah we're seeing a lot of that coming from Yahoo![01:20:37] <g0rd0n> and what do you mean with zen... was that a joke, or is there something called zen i can use[01:20:43] <hparker> !zen[01:20:44] <knoba> hparker: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL[01:20:46] <g0rd0n> vice-versa: yeh, yahoo mostly, including domainkey signature...[01:20:48] <xpoint> hparker, emerge -s dovecot-antispam with use trainmail[01:21:00] <g0rd0n> oh... i dont like using black lists[01:21:05] <hparker> that system is running courier atm[01:21:12] <hparker> g0rd0n: that one is safe[01:21:15] <g0rd0n> i prefer letting spamassin doing scores with black lists[01:21:22] <hparker> I've never had a FP with it[01:21:23] <g0rd0n> hparker: what do you mean with safe[01:21:45] <hparker> No FPs[01:22:00] <xpoint> it wont drive you nuts g0rd0n[01:22:01] <g0rd0n> false positives, ok[01:22:14] <hparker> i reject 4-6k a day with it, and I'm a small site[01:22:39] <hparker> I don't think there's 100 email accounts[01:22:48] <g0rd0n> ok i will use zen then[01:22:59] <hparker> If it's yahoo, it won't help[01:23:06] <g0rd0n> oh, damn[01:23:09] *** skyweb has quit IRC[01:23:14] <hparker> Does a good job with infected user machines though[01:23:20] <hparker> end user[01:23:28] <vice-versa> g0rd0n: zen is good, but it's not going to help much with your current issue[01:23:39] <hparker> yahoo will be training bayes[01:23:58] <g0rd0n> so i will make a script that looks for specific ham and spam folders in mailboxes and train...[01:24:16] <g0rd0n> have to read docs about sa-learn[01:24:49] <hparker> */15 * * * * root sa-learn --spam /var/spool/mail/virtual/hparker at pcsrvc dot com/.Spam/cur/ 2>&1> /dev/null[01:24:50] <g0rd0n> so are those hijacked yahoo accounts, or do spammers create the accounts and just spam using the yahoo servers?[01:25:02] <hparker> probably a bit of both[01:25:44] * vice-versa likes creating spamtaps from spammer greed and harvesting software bugs[01:26:11] <g0rd0n> hparker: so sa-learn knows automatically that .Spam/cur is part of the hparker... mailbox[01:26:48] <hparker> It'll learn spam from there... s/--spam/--ham and point it at your ham folder to learn the ham[01:27:01] <g0rd0n> so i could do something like sa-learn --spam /home/*/homes/*/Maildir/.train-spam/cur/ 2>&1> /dev/null[01:27:21] <hparker> it'd be a good idea to read up on sa-learn, but that line will help you[01:27:41] <g0rd0n> last question: will the learned stuff be used globally, or per-mailbox[01:27:44] <hparker> sure, if you trust everyone to properly classify the mail[01:27:56] <hparker> Running global or per user bayes?[01:28:03] * hparker runs global[01:28:06] <g0rd0n> good question[01:28:12] *** Entelin has quit IRC[01:28:21] <g0rd0n> i "think" per-mailbox[01:28:22] <hparker> If you're running per user, you need to run sa-learn as the user against their maildir[01:28:46] <hparker> That would be a bit of scripting is all[01:29:03] <g0rd0n> yeah[01:29:05] <g0rd0n> i have per-user[01:29:15] <g0rd0n> dammit :P[01:29:45] <hparker> As I said, I have an account getting 3k+ a week <10, closest user behind me is 3-400 a week... Global works better in my situation[01:29:54] <hparker> s/</>[01:30:14] <g0rd0n> :)[01:31:19] <hparker> Once I get around to setting my spam trap back up i'll just feed it to sa-learn once it's added to my local blacklist.. when I shut it down it was getting >50k spams a day[01:31:47] <g0rd0n> that's bad :P[01:31:58] <hparker> heh[01:32:12] <hparker> i'd just sit and watch the logs scroll ;)[01:32:13] <vice-versa> it's good if it's a spamtrap ;)[01:32:15] <g0rd0n> i guess greylisting, sender address verification and other things already do a good job for me... but i will add zen and start training in a few[01:32:46] * hparker wouldn't advise doing SAV globally[01:32:55] <xpoint> i will look into amavisd to find a way there to have it trainn pyzor with whitelist, train all as spam first, but if its clean whitelist :)[01:33:08] <hparker> Wait till you're hit with a dictionary attack or a joe job[01:33:20] <xming> joe job?[01:33:36] <xpoint> or john doe[01:33:50] <hparker> xming: spam run with your email addy in the From:[01:34:12] <xpoint> does not make sense, its the envelope that do[01:34:17] <g0rd0n> hparker: what is SAV[01:34:18] <hparker> Still tons of servers that accept then bounce[01:34:31] <xpoint> Sender Address Verify[01:34:32] <xming> ah bounce spam[01:34:33] <hparker> g0rd0n: sender address verification :P[01:34:37] <g0rd0n> oh[01:34:47] <g0rd0n> no, i use a list of commonly forged domains[01:34:50] <g0rd0n> and check against those[01:34:55] <g0rd0n> i read a howto somewhere :P[01:35:10] <xming> SAV is evil[01:35:15] <xpoint> g0rd0n, readlogs is better[01:35:24] <g0rd0n> oh god[01:35:27] <g0rd0n> what is readlogs[01:35:31] <hparker> when you have 100+ smtpd processes getting hammered SAV will a) just slow things down b) possibly get you listed on servers[01:35:37] <xming> SAV will hamper you server to its knees[01:35:51] <xpoint> hparker, what ?[01:35:55] <hparker> tacos![01:35:59] * hparker eats[01:36:03] <xpoint> blacklisted for doin VRFY ?[01:36:10] <xming> is that even edible?[01:36:32] <xming> xpoint: lot's of server do that, connection trottle[01:37:34] <xpoint> stupid admins disable VRFY and postfix then send probe mails to endusers whit see this as spam from the remote postfix, if VRFY was NOT disabled we live in harmony[01:38:00] <hparker> SAV doesn't use VRFY[01:38:03] * rob0 wants a taco[01:38:13] <hparker> xming: very edible, especially when homemade[01:38:18] * hparker dccs rob0 a taco[01:38:22] <xpoint> hparker, so what does SAV ?[01:38:27] <rob0> mmmmm[01:38:46] <xming> hparker: ok, I have said nothing[01:38:54] <xming> hmm hungry[01:38:58] *** Mattis has joined #postfix[01:39:01] * xming grabs some lays[01:39:02] <hparker> xpoint: A normal smtp type connection, then drops it[01:39:19] <hparker> SAV vs greylisting is funny though[01:39:22] *** Mattis has left #postfix[01:39:26] <xpoint> hparker, with means remote user see the probe mails[01:39:35] <xming> no mails[01:39:40] <xpoint> if that users exists[01:39:44] <hparker> !sav[01:39:44] <knoba> hparker: Error: "sav" is not a valid command.[01:39:47] <hparker> ...[01:39:47] <xming> just helo/mail from/rcpt[01:39:48] <vice-versa> yum, donair[01:40:16] <xming> then quit[01:40:19] <xpoint> hparker, sendmail -bv root[01:40:31] *** Mattis has joined #postfix[01:40:42] <xpoint> i got no mail :)[01:41:39] <hparker> Pretty sure the postfix docs describe what SAV does[01:41:48] <g0rd0n> :)[01:41:50] <hparker> damnit, taco juice on the keyboard[01:41:58] <vice-versa> http://www.postfix.org/ADDRESS_VERIFICATION_README.html[01:42:02] <xming> lick your kb[01:42:04] * hparker hopes his laptop is hungry[01:42:10] <xpoint> hparker, sendmail -bv me at junc dot org[01:42:19] <xpoint> i like to see it :)[01:42:29] <xming> jis laptop?[01:42:33] <hparker> SAV doesn't use VRFY[01:42:42] <xpoint> show me just then[01:42:43] <hparker> xming: nasty![01:43:24] *** Mattis has quit IRC[01:43:29] <g0rd0n> hmmm i guess it's good to put reject_rbl_client zend.spamhaus.org, right before the spf and greylisting calls, right?[01:43:43] <xming> hparker: oh forgot that you had a funny hat :D[01:43:43] <hparker> I put it very last[01:43:54] <g0rd0n> even after greylisting?[01:43:55] *** hparker sets mode: -o hparker[01:44:15] <hparker> jup, i try to take it easy on a service I'm using for free[01:44:22] <g0rd0n> good point[01:45:17] <vice-versa> plus dns queries = time[01:46:08] <g0rd0n> right[01:46:24] <xpoint> hparker, you got no queue return[01:46:51] <hparker> i got a handful of taco[01:47:32] <xpoint> g0rd0n, zen not zend[01:48:38] <g0rd0n> xpoint: lol my bad[01:50:10] <hparker> xpoint: <me at junc dot org>: delivery via mx.junc.org[80.166.75.17]:25: 250 2.1.5 Ok[01:50:58] <xpoint> hparker, thanks, i just belived reject_unverifyed_recipient did same as sendmail -bv root[01:51:46] <xpoint> hparker, if remote mta have vrfy enabled there would not be send a rcpt probe mail[01:52:00] <xpoint> hparker, postfix is not that bad[01:52:41] *** dragonbyte has joined #postfix[01:54:22] <g0rd0n> damn[01:54:28] <g0rd0n> i can't run sa-learn as the mailbox user[01:55:01] <xpoint> g0rd0n, using procmail or amavisd ?[01:55:13] <g0rd0n> xpoint: procmail[01:55:41] <xpoint> then it should use unix user as sa-learn[01:56:00] <xpoint> but it can be set specifik in user_prefs[01:56:40] <xpoint> just remember users can steal each others bayes that way[01:57:01] <xpoint> if its in mysql[01:58:57] <g0rd0n> hm i dont think it's using mysql[01:59:17] <g0rd0n> i've got .spamassassin/bayes files in each mailbox[01:59:32] <hparker> who owns them?[01:59:39] <g0rd0n> the mailbox username[01:59:44] <g0rd0n> each mailbox has its own user[01:59:54] <g0rd0n> and the group which is the domain group[01:59:56] <hparker> then running sa-learn as the user should work[02:00:50] <g0rd0n> i tried su domain_mailbox but it says Cannot execute /dev/null: Permission denied[02:02:26] <vice-versa> sounds like that's what their shell is set to[02:03:14] <g0rd0n> yeah[02:03:37] *** war9407 has quit IRC[02:03:58] <hparker> :-o[02:04:28] <hparker> guess they won't run sa-learn then[02:10:04] <Lethargik> hey guys, anyone know how to configure postfix 2.3.8 to use Maildir delivery scheme instead of /var/mail/user?[02:10:41] <hparker> !maildir[02:10:44] <knoba> hparker: "maildir" : a mailbox format introduced by qmail where emails are saved as individual files in a directory structure rather than into a single flat text file. Postfix settings like !home_mailbox and !virtual_mailbox_maps will allow delivery to maildir if the path value returned ends in /[02:10:51] <Lethargik> Thank you! :o)[02:11:12] *** pirho has quit IRC[02:12:22] <Lethargik> so where would i find these settings at? master.cf?[02:12:33] <vice-versa> g0rd0n: you can override their default shell with su -s /bin/bash username[02:14:41] <g0rd0n> i wonder what command usermin executes... cause usermin is able to run sa-update to train the mailbox i just found out[02:15:50] <vice-versa> !home_mailbox[02:15:52] <knoba> vice-versa: "home_mailbox" : a configuration parameter in the main.cf: Optional pathname of a mailbox file relative to a local(8) user's home directory.[02:44:42] *** xp_prg has quit IRC[03:13:38] *** dragonbyte has quit IRC[03:34:57] *** F6F has quit IRC[03:35:17] *** F6F has joined #postfix[03:57:07] *** mavrick61 has quit IRC[03:57:44] *** nerbie69 has joined #postfix[03:58:13] *** mavrick61 has joined #postfix[04:11:14] *** Tykling has left #postfix[04:13:21] *** snadge has joined #postfix[04:13:31] <snadge> should i reject non fqdn hostnames?[04:13:52] <snadge> obviously thats not the default[04:14:23] <snadge> spamassassin is doing great.. but one slipped through with a 4.9 (5.0 required) .. and it only scores no rdns as 0.1[04:14:23] <hparker> run with warn_if for awhile, I had to remove it[04:14:55] <snadge> so i could increase the score for no rdns in spamassassin.. or just tell postfix to reject it at the connection stage[04:15:24] <snadge> eg.. if it were 0.2 instead of 0.1 .. it would've just made it[04:16:01] <snadge> hparker: so i take it you were rejecting legit mail when you did that?[04:16:08] <hparker> yup[04:16:27] <snadge> i dunno, im almost of the opinion if they dont have an rdns.. i dont want their email ;)[04:16:33] <snadge> spam or not hehe[04:17:07] <hparker> i got tired of playing whack-a-mole... .edus, banks... couldn't just reject them, customers would bitch[04:17:18] <rob0> Um, the non_fqdn thing is for HELO, not for rDNS.[04:17:27] <snadge> im also presuming that you were stopping tonnes of spam by doing that[04:17:33] <rob0> and yes, it's a real good and safe check.[04:17:44] <snadge> ahh![04:18:14] * hparker cleans his glasses[04:18:19] <snadge> well really that should be default[04:18:37] <rob0> Like hparker, I'm still hesitant to reject on missing rDNS.[04:18:47] <rob0> (missing or bad)[04:19:00] <rob0> but perhaps scoring it is a good idea[04:19:02] <snadge> missing is cool i think.. bad is a problem.. heres my reasoning[04:19:31] <snadge> often times the mailserver name doesnt match the rdns.. because its a hosting provider, multiple domains.. blah blah blah.. but for it to be completely missing, is kind of wrong[04:19:40] <snadge> and to me that indicates dynamic pools, and spammy ranges[04:20:03] <hparker> Coz business class around here doens't allow you to handle rDNS, I can't punish the business because coz screwed up[04:20:05] <rob0> or incompetent DNS managers[04:20:17] <hparker> s/Coz/Cox[04:20:37] <snadge> ok well i will reject the non fqdn helo[04:22:53] <snadge> the other admin at work must be a nazi.. check out what he puts in to the config at work..[04:23:56] <snadge> rej unauth dest, inv hostname, non fqdn hostnam/sender/recipient, unknown recipient/sender domain, unverified recipient[04:24:15] <hparker> !cheatsheet[04:24:16] <knoba> hparker: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.[04:24:25] <hparker> snadge: Take a read of that ^^[04:27:01] <rob0> Also, if you're confused, warn_if_reject is your friend. Try restrictions with that, see how they would have done.[04:28:28] <snadge> nice :)[04:28:44] <snadge> well at work we mostly run support emails for our production sites[04:28:56] <snadge> so im presuming we dont mind if legit mail gets deleted.. thats less work for us ;)[04:29:15] <hparker> :P[04:29:23] <snadge> and we can just use some random excuse like their email server isnt configured properly.. because we receive other peoples emails fine[04:31:15] *** jeffspeff has joined #postfix[04:33:15] *** lambda has quit IRC[04:34:33] *** AcTiVaTe has quit IRC[04:35:05] <snadge> i know, some of you dont have the luxury of doing that.. im sorry :P[04:36:33] <snadge> who hasnt used that excuse before though.. seriously ;)[04:40:16] <Lethargik> I am using postfix 2.3.8, I have specified in the main.cf that it should use the Maildir/ delivery scheme. However, all messages are still being delivered in the var/mail/user style. any idea here?[04:43:41] <rob0> Lethargik is using Debian or a derivative and failed to consult the distributor's documentation for their non-standard Postfix settings.[04:46:04] <thumbs> debian--[04:46:35] *** nerbie69 has quit IRC[04:51:19] *** gonewestcoast has joined #postfix[05:08:11] <seekwill> debian--[05:09:51] *** danbeck has joined #postfix[05:10:42] <thumbs> I like seekwill[05:33:04] *** g0rd0n_ has joined #postfix[05:44:07] *** goldfischli has joined #postfix[05:50:07] *** g0rd0n has quit IRC[06:01:05] *** goldfisc1li has quit IRC[06:07:15] *** Motoko-chan has joined #postfix[06:21:18] *** danbeck has quit IRC[06:21:52] *** hparker has quit IRC[07:25:17] <seekwill> thumbs: Game[07:45:08] *** Lethargik has left #postfix[08:14:02] *** dragonheart has quit IRC[08:17:38] *** logione has joined #postfix[08:19:33] *** f3ew has quit IRC[08:20:23] *** f3ew has joined #postfix[08:20:27] *** EasilyOdd has joined #postfix[08:23:58] <snadge> just because a distribution packages something doesnt mean you shouldn't have to consult the documentation.. my debian postfix installation works admirably :P[08:30:26] *** xp_prg has joined #postfix[08:55:38] *** f3ew has quit IRC[08:56:22] *** f3ew has joined #postfix[09:04:23] <thumbs> seekwill: you finished it?[09:04:38] <thumbs> I'm going to bed anyway[09:37:02] *** madrescher has joined #postfix[09:43:18] *** j_s has joined #postfix[09:45:18] *** dragonheart has joined #postfix[09:58:39] *** war9407 has joined #postfix[10:01:48] *** Zblakany has joined #postfix[10:37:32] <soren> rob0: What's non-standard about Postfix in Debian? I've never used postfix on anything but Debian and Ubuntu.[10:39:29] *** Motoko-chan has quit IRC[10:46:36] *** sophokles has joined #postfix[11:12:51] *** xp_prg has quit IRC[11:18:58] *** keffer has quit IRC[11:21:36] *** Lap_64 has joined #postfix[11:24:05] *** pirho has joined #postfix[11:36:01] *** Tykling has joined #postfix[11:54:18] *** noneo has quit IRC[11:58:09] *** Virus_FFF has joined #postfix[12:30:40] *** Internat has quit IRC[12:38:13] *** ploploop is now known as brancaleone[12:38:29] *** Internat has joined #postfix[12:39:19] *** Elvanor has joined #postfix[12:39:44] <Elvanor> What is the syntax for redirecting a mail adress to *several* mail adresses?[12:39:56] <Elvanor> I have it already working for forwarding to a single mail address[12:40:09] <Elvanor> Should I comma separate the destination adresses?[12:49:39] *** sgisgi has joined #postfix[12:59:06] *** keffer has joined #postfix[13:00:15] *** mefiXe has quit IRC[13:13:41] <logione> Elvanor in /etc/postfix/aliases ?[13:13:54] <Elvanor> logione: no, in /etc/postifix/virtual[13:13:59] <logione> ah[13:14:04] <Elvanor> but that's ok, it seems comma separating works :)[13:14:04] <Elvanor> thx[13:14:11] <logione> dunno i'd say with comma separating[13:14:17] <logione> :)[13:53:06] <sgisgi> sup guys, I need to host multiple domains, using actual unix accounts, where joe at example1 dot com is independent from joe at example2 dot com[13:53:24] <rob0> !virtual[13:53:25] <knoba> rob0: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html[13:53:33] <rob0> sg, virtual alias domains[13:54:07] <sgisgi> virtual_alias_domains = example1.com, example2.com and virtual_alias_maps = hash:/etc/postfix/vmaps.txt was added[13:54:12] <rob0> soren: check your main.cf after a fresh install which includes procmail(1)[13:54:21] <sgisgi> created the vmaps.txt file, its hashed[13:54:32] <sgisgi> yet nothings working, am I missing something?[13:55:17] *** Filbert has quit IRC[13:55:25] <rob0> sg also needs an appropriate value for mydestination, use "unixuser at mydestination dot domain" as virtual_alias_maps target.[13:56:20] <sgisgi> user1 at example1 dot co.za user1[13:56:30] <sgisgi> is the format im using in vmaps.txt, is that okay?[13:57:29] *** Elvanor has left #postfix[14:01:21] *** gonewestcoast has quit IRC[14:04:09] *** Filbert has joined #postfix[14:18:50] <sgisgi> http://rafb.net/p/a1zKpB41.html[14:18:54] <sgisgi> theres my conf[14:19:12] <sgisgi> I'd really appreciate it if anyone could help[14:19:32] <sgisgi> im sure I need to add example1.com to other vars in main.cf, just not sure where[14:22:50] <sysmonk> sgisgi: don't pastebin main.cf, pastebin postconf -n[14:23:13] *** Zeit|awy_ has joined #postfix[14:25:55] <sgisgi> sysmonk, k, http://rafb.net/p/xhUlQq53.html there it is[14:30:34] *** Zeit|awy has quit IRC[14:37:30] *** zfzuk has joined #postfix[14:38:20] <zfzuk> Hi, been Googling the webs for a solution but coming up short. Anyone have documentation on migrating /etc/shadow entries to a postfix-mysql setup retaining the crypted passwds? :)[14:39:19] <sgisgi> zfzuk, I dont suppose you know something about virtual aliases?[14:40:03] <zfzuk> sgisgi, aye well I'm using a virtual alias map currently mapping to the local user accounts, so e.g. user at host dot com user1@localhost[14:40:46] <sysmonk> sgisgi: sorry i haven't time to even read your problem description[14:41:00] <sysmonk> sgisgi: i will have some time after half an hour or so, if you're interested[14:41:19] <sgisgi> sysmonk, sure, until then ill try play around and see what I can do[14:41:47] <sgisgi> zfzuk, http://rafb.net/p/a1zKpB41.html is my conf http://rafb.net/p/xhUlQq53.html is a postconf -n[14:41:53] <sgisgi> im trying to host two domains[14:41:57] <sgisgi> not working though[14:42:41] <zfzuk> sgisgi, I'm not a postfix-pro but I'll have a cig and read through it[14:44:21] <sgisgi> zfzuk, thanks I'd appreciate it, im sure its some really obvious mistake[14:44:52] *** Lap_64 has quit IRC[14:58:08] <rob0> sgisgi, I already answered you with detail.[14:58:47] <rob0> over an hour ago[14:59:19] <zfzuk> rob0, any idea about moving /etc/shadow crypt passwords to a mysql accounting setup?[14:59:21] <rob0> zf, AFAIK there is no way to do that[14:59:46] <rob0> What's wrong with the virtual alias approach?[15:00:20] <rob0> 11:56 < sgisgi> is the format im using in vmaps.txt, is that okay?[15:00:30] <rob0> No, do it the way I told you to.[15:01:25] <rob0> The key there is "append_at_mydomain = yes" (which you should NOT change.)[15:01:29] <rob0> !append_at_mydomain[15:01:30] <knoba> rob0: Error: "append_at_mydomain" is not a valid command.[15:01:57] *** riz_ has quit IRC[15:02:27] <rob0> Your value for mydomain is probably not in mydestination, thus not local(8) delivery.[15:02:43] <sgisgi> rob0, its okay I got it working now[15:03:08] *** scatterp- has joined #postfix[15:03:11] *** scatterp- has left #postfix[15:05:16] *** Juspion has joined #postfix[15:05:54] *** Lap_64 has joined #postfix[15:16:25] *** Drezard has joined #postfix[15:16:27] <Drezard> hello?[15:16:29] <Drezard> anyone here?[15:25:13] *** lambda has joined #postfix[15:27:21] <sysmonk> nobody[15:28:43] *** zfzuk has quit IRC[15:30:26] *** hparker has joined #postfix[15:32:39] *** sophokles has quit IRC[15:37:25] <googlah> j[15:37:26] <googlah> ak[15:38:13] *** hark has joined #postfix[15:40:53] *** rootsvr has joined #postfix[15:54:20] *** Juspion has quit IRC[15:57:00] *** dusty_ has quit IRC[16:01:10] *** blackflag has quit IRC[16:06:40] *** blackflag has joined #postfix[16:08:14] *** adaptr_ is now known as adaptr[16:13:57] <jduggan_> hmm guys[16:14:08] <jduggan_> if i have a transport map for a domain[16:14:21] <jduggan_> and my mail is in the deferred queue[16:14:26] <jduggan_> if i change that transport map[16:14:27] <adaptr> nope[16:14:29] <adaptr> nope[16:14:31] <jduggan_> will it re-read next time?[16:14:33] <adaptr> nope[16:14:34] <jduggan_> damnit[16:14:36] <jduggan_> nothing i can do?[16:14:44] <jduggan_> re-queue?[16:14:44] <jduggan_> :|[16:14:48] <adaptr> queued mail already includes its destination[16:15:01] <adaptr> you would have to fake the original transport to re-inject the mail[16:15:18] <rob0> man postsuper[16:15:25] <adaptr> sssh![16:15:29] <rob0> oops[16:15:54] <adaptr> jduggan_: rob0 usually knows what he's talking about[16:17:59] <sysmonk> usually ... :)[16:19:21] <rob0> um, once I thought I was wrong about something, but as it turned, I was mistaken.[16:19:37] *** ming_zym has joined #postfix[16:19:52] <adaptr> yeah, we're still remembering that fateful occasion with horrified glee[16:20:52] <jduggan_> oh another thing, parent_domain_matches_subdomains = includes relay_domains, yet my transport map is not working for a subdomain of a parent domain that matches in relay_domains, its going to primary MX - anything obvious i should look at ?[16:22:52] <rob0> if you ask me, I say unset parent_domain_matches_subdomains and ALWAYS use explicit subdomain matching.[16:26:14] *** f3ew has quit IRC[16:39:12] *** goldfisc1li has joined #postfix[16:43:40] *** Drezard has quit IRC[16:45:14] *** Lap_64 has quit IRC[16:46:35] <jduggan_> agreed[16:56:50] *** goldfischli has quit IRC[16:58:35] *** madrescher has quit IRC[17:15:01] *** Lap_64 has joined #postfix[17:27:24] *** Paige has joined #postfix[17:28:55] <Paige> does anyone have a good freebsd tutorial for postfix with mysql?[17:29:09] <Paige> i have looked everywhere and they are all outdated[17:29:14] *** sgisgi has left #postfix[17:29:35] <rob0> ek wrote one, I think[17:29:39] *** rootsvr has quit IRC[17:29:59] <rob0> but that might be an outdated one you found.[17:30:00] <Paige> idle 40 hours plus[17:30:26] <Paige> my biggest problem is that all the tutorials use postfixadmin[17:30:51] <Paige> and DATABASE_SETUP.TXT is missing[17:32:24] *** gonewestcoast has joined #postfix[17:32:40] <rob0> Postfix is well-documented. Wietse himself is a fbsd user, so if you know your mysql, it should be straightforward to do with Postfix.[17:33:15] <Paige> it doesnt help me that the schema is missing[17:33:41] <rob0> sounds like maybe you need mysql help[17:33:57] <Paige> no_maam, i do not[17:34:06] <Paige> damn autocomplete[17:34:14] <rob0> haha[17:34:21] <rob0> that's pretty funny[17:34:51] <Paige> i have been up 24 hours now, i am not easily amused at this point :([17:35:52] <hparker> :P[17:36:01] <hparker> 24 isn't a normal day?[17:36:33] <Paige> hello homer[17:36:50] <Paige> kristin from gentoo-amd64[17:38:25] <sysmonk> hparker: the usual day has 36 hours[17:38:30] <Paige> i will wait for f3ew to show up, he always helps me[17:39:02] <hparker> Just looked, I don't have DATABASE_SETUP.TXT laying around :([17:39:19] <sysmonk> rob0: i've heard that Wietse is a freebsd user, but never saw any referrence[17:39:37] *** logione has quit IRC[17:39:41] <sysmonk> Paige: you want to use postfixadmin?[17:39:44] <sysmonk> or what?[17:39:52] <Paige> not particually[17:40:14] <Paige> i just need a setup for one domain[17:40:17] *** g0rd0n has joined #postfix[17:40:35] <sysmonk> Paige: that doesn't matter, postfixadmin can be used in that case too[17:40:36] <Paige> virtual domain support is overkill[17:40:40] <sysmonk> it's not[17:40:48] <Paige> for me it is[17:41:06] <sysmonk> that's really a different problem :P[17:41:25] <Paige> hparker how have you been[17:41:30] <hparker> virtual's advantage is no system accounts[17:41:55] <hparker> Paige: Asides from back problems and a kid that keeps ending up in the hospital, not bad... You?[17:42:13] <Paige> i have two email accounts that need to created. one for me and the other for my partner[17:42:23] <sysmonk> that's all you need?![17:42:33] <hparker> then I'd just use system accounts and forget about it[17:42:34] <sysmonk> and... why do you need virtual for that?[17:42:38] <Paige> hparker, not bad... aside from postfix issues, i got married a few weeks ago[17:42:40] <sysmonk> yeah[17:42:46] <sysmonk> weee, RIP Paige[17:42:47] <sysmonk> ;P[17:42:55] <hparker> another sucker^W^WCongratz![17:43:07] <Paige> RIP? i think not, I have a wonderful wife[17:43:17] <sysmonk> they all are... at the begining :P[17:43:23] <hparker> Boy has a shirt with a bride and groom on it... Across them in red is "Game over" ;)[17:43:33] <Paige> this is a same-sex marriage[17:43:36] <sysmonk> hparker: it's a popular wedding t-shirt out here[17:43:39] <Paige> they are different[17:43:45] *** Lap_64 has quit IRC[17:43:45] <hparker> sysmonk: he's 16 :P[17:44:06] <sysmonk> Paige: oh, can't comment on those then[17:44:22] <Paige> we are both very happy[17:44:26] <Paige> anyways[17:44:29] <sysmonk> good then[17:44:36] <sysmonk> that's all that matters imho[17:44:38] <Paige> i really want to get this working[17:44:51] <sysmonk> Paige: so you really need only 2 accounts? why use virtual in that case?[17:45:01] <Paige> exactly my point[17:45:02] <sysmonk> do you plan on scaling in the future?[17:45:05] <Paige> no[17:45:12] <sysmonk> then use local[17:45:28] <Paige> hard to find tutorials on that[17:45:28] <sysmonk> i don't see anything why you should use virtual users in this case[17:45:33] <sysmonk> on local users?[17:45:42] <Paige> correct[17:45:45] <sysmonk> Paige: do you have any imap/pop3 daemon on your mind already?[17:45:54] <Paige> dovecot[17:46:12] <sysmonk> argh, sorry no help with dovecot from me[17:46:22] <Paige> i am open though[17:46:31] <sysmonk> it's really just about configuring imap/pop3 server in this case, cause postfix is defaultly configured for local[17:46:38] <sysmonk> you just ... add an accout![17:46:48] <Paige> so tbh, the imap client is not important to me[17:47:09] <Paige> too bad the iphone can only do one account :p[17:47:30] <sysmonk> Paige: postfix is defaultly configured to accept mails to $mydestination which is your servers hostname[17:47:50] <sysmonk> shit, $myhostname :)[17:48:38] <sysmonk> it will accept the mails to system users ( as in /etc/passwd ) and deliver the mails to mail_spool_directory ( i.e. /var/mail/$user )[17:48:43] <Paige> is ok, i found that already[17:49:00] <Paige> but... thinking about it....[17:49:02] <sysmonk> now you just need to configure your pop3/imap server to handle /var/mail/$user[17:49:10] <Paige> i would like the idea of virtual users[17:49:26] <sysmonk> ok, then imho postfixadmin will do just fine for you[17:49:27] <Paige> i do have a few domains and may as well add them to the mail server[17:49:43] <Paige> it needs the schema to work though[17:49:49] <Paige> that is my original problem[17:49:56] *** AcTiVaTe has joined #postfix[17:50:06] * sysmonk downloads postfixadmin to look at the 'missing schema'[17:50:23] <Paige> i have even pulled the svn[17:50:38] <sysmonk> don't have svn so i'm downloading 2.2.1.1[17:50:52] * sysmonk afk for a bit to make some food[17:51:25] *** g0rd0n_ has quit IRC[17:52:02] <rob0> If only one domain, why virtual?[17:52:25] <rob0> oh because "you like the idea" :)[17:52:26] <Paige> i have a few domains[17:52:44] <Paige> i may as well use onely one mail server for all of them[17:52:53] <rob0> !virtual[17:52:54] <knoba> rob0: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html[17:53:03] *** Internat has quit IRC[17:53:06] *** internat1 has joined #postfix[17:53:18] <rob0> I use virtual_alias_domains with local(8) delivery.[17:53:32] <rob0> But I'm not cool.[17:55:03] <sysmonk> Paige: looking at the postfixadmin, it should create the tables itself[17:55:10] *** pitakill has joined #postfix[17:56:32] <sysmonk> Paige: you just need to add a mysql user, create the database, and give postfixadmin the details, setup.php should create all the required stuff (tables)[17:57:04] <sysmonk> rob0: yeah, you're not cool![17:57:06] <Paige> umm k, i will try again[17:57:52] <rob0> as Signum likes to point out, I suck. :)[17:58:07] <sysmonk> he must be talking from his experience :P[18:00:44] *** dusty_ has joined #postfix[18:01:08] <Paige> nope, it doesnt create the tables[18:01:29] <sysmonk> Paige: what's the link to postfixadmin on your server?[18:01:57] <Paige> AddType application/x-httpd-php .php[18:01:58] <Paige> AddType application/x-httpd-php-source .phps[18:01:58] <Paige> it's not accessible from outside the local lan[18:02:06] <Paige> damn cut/paste[18:02:17] <sysmonk> Paige: did you run setup.php?[18:07:12] <Paige> ok, it is setup now[18:07:17] <Paige> and tables are created[18:07:33] <Paige> now time to work on configuring postfix to use them[18:07:35] <sysmonk> i understand that as 'no, i didnt run setup.php' :)[18:08:59] *** Broken|work_ has quit IRC[18:09:20] *** Broken|work_ has joined #postfix[18:14:04] <Paige> correct i did not[18:17:33] *** nfsnobody has joined #postfix[18:23:49] *** manofwar has joined #postfix[18:25:06] <manofwar> Can anyone recommend a good "exchange replacement" that allows importing from exchange?[18:25:49] <manofwar> I've heard of Scalix & Zimbra. Would like to hear of anyone's experiences with either/both and which they prefer.[18:26:56] *** loompek has joined #postfix[18:34:26] *** Tykling has left #postfix[18:44:23] *** lumpek has quit IRC[18:44:33] *** lumpek has joined #postfix[18:45:54] *** loompek has quit IRC[18:48:33] *** Internat has joined #postfix[18:48:55] *** internat1 has quit IRC[18:51:55] *** madrescher has joined #postfix[18:52:08] *** Lap_64 has joined #postfix[18:59:21] *** chef_southpark has joined #postfix[19:03:15] <dusty_> Hey guys, I have just set up my new mailserver (Postfix/dovecot/amavis/mysql) - wanted to test it, so I telnetted to 25 and sent a test email, then I tried to read it using mutt and got the following error: http://rafb.net/p/9sO4V112.html anyone know why that doesn't work ?[19:04:54] <sysmonk> dusty_: it's a Maildir, not mailbox[19:05:14] <dusty_> yah sorry[19:05:23] <dusty_> I cd'd to Maildir and then ran it worked fine.[19:08:13] <rob0> If you want to use mutt, you'd be better off with local(8) delivery. I still don't understand why everybody thinks virtual(8) is so great. Sure, it has its purpose, but it lacks features and power for shell users.[19:09:41] <sysmonk> rob0: unless used via imap[19:09:47] <sysmonk> (about mutt and virtual)[19:11:05] *** gcleric has joined #postfix[19:11:23] *** manofwar has quit IRC[19:11:24] <rob0> still, there are a LOT of features of local delivery that shell users would appreciate.[19:11:40] *** gcleric has left #postfix[19:15:06] *** madrescher has quit IRC[19:16:11] <sysmonk> rob0: yup[19:17:34] *** bene901_ has joined #postfix[19:17:39] <bene901_> http://www.pennergame.de/change_please/1511647/[19:17:40] *** ziro has joined #postfix[19:18:07] <rob0> Ben, if we were to look at that, what would we see?[19:18:57] *** bene901_ has quit IRC[19:22:36] <vice-versa> goatse?[19:23:23] <hparker> something in a language I don't understand... But not postfix related[19:23:35] *** ChanServ sets mode: +o hparker[19:24:03] * vice-versa guesses German[19:24:11] <hparker> ban !*!Pennerga at d90-136-145-92 dot cust.tele2.de[19:24:18] <hparker> ugh[19:24:26] *** ming_zym has quit IRC[19:24:29] *** hparker sets mode: +b *!*Pennerga@d90-136-145-92.cust.tele2.de[19:24:44] <thumbs> hparker: what was his nickname?[19:24:59] *** hparker sets mode: +b *!*bene901_@*[19:25:02] *** hparker sets mode: +b *!*bene901@*[19:25:28] * hparker sucks at banning from the prompt, always uses point-n-click in xchate[19:26:04] <rob0> I didn't even open it.[19:26:26] <rob0> Don't want to enhance these idiots' hit counts.[19:27:43] <hparker> he's being handled on a more global level ;)[19:29:32] *** Fallenou has joined #postfix[19:32:01] <vice-versa> banned by the Spam Brigade[19:32:46] <vice-versa> hmm, I kinda like that saying :)[19:33:08] <hparker> There's also a #pennergame I reported him to for spamming[19:33:12] <xming> I never use virtual[19:33:13] <dusty_> hrm,[19:33:19] <sysmonk> i saw him a few days ago somewhere[19:33:22] <sysmonk> don't remember the chan though[19:33:31] <xming> #spammers?[19:33:41] * hparker has no tolerance for any kind of spamming[19:33:47] *** hparker sets mode: -o hparker[19:33:59] <xming> yeah, I hate tinned meat too[19:34:00] <vice-versa> three cheers for hparker![19:34:11] <dusty_> Hey guys, I am following this tutorial: http://workaround.org/articles/ispmail-etch/#step-10-amavis-filtering-spam-and-viruses I am trying to do the Authenticated SMTPD part, and when I reload the postfix config, telnet localhost smtpd it doesn't give me a banner or anything, in the logs it shows this : http://rafb.net/p/n2Eerp71.html what have I missed ?[19:34:20] * vice-versa is such a suck up[19:34:40] <hparker> xming: Now, now.. Fried SPAM is tasty as long as it's not more than once a year ;)[19:35:37] <vice-versa> hehe, I had fried SPAM and eggs a few weeks back for breakfast[19:35:54] <xming> 34 received[19:36:04] <xming> 578 rejected (94%)[19:36:09] <xming> too much spam[19:36:26] <vice-versa> seen it in the supermarket and couldn't resist picking some up[19:37:24] <vice-versa> xming: looks like pflogsumm output[19:37:46] <xming> it seems that zen blocks +90% the spam[19:37:55] <dusty_> fixed it wrong setting in dovecot.conf[19:38:01] <xming> vice-versa: you hacked my mail server?[19:38:12] <sysmonk> o_o[19:38:12] <xming> vice-versa: :) idd[19:40:23] <xming> damn it, drupal's captcha is not working as it should be, still getting spam on my drupal web site[19:42:11] *** madrescher has joined #postfix[19:42:23] <vice-versa> pfft, captcha[19:43:55] *** gonewestcoast has quit IRC[19:44:36] <xming> I suppose I can do pilicy server per domain by using access classe, but there is no way to do miterl per domain?[19:44:43] <xming> s/pilicy/policy[19:45:35] <vice-versa> s/miterl/milter/[19:45:41] <xming> ty[19:45:51] <vice-versa> now that's a lazy finger typo[19:46:16] <xming> I make more typo than the whole freenode's users combined[19:46:26] <xming> and I can't spell[19:46:40] <sysmonk> xming: try installing a spellchecker :P[19:46:55] <xming> so by making typos I sometimes mistakenly type the words corect[19:47:29] <xming> I need a speel checker that can understand which language I am typing[19:56:50] * hparker sends xming an error correcting modem[19:57:22] *** madrescher has quit IRC[20:07:22] <dusty_> Hey guys I am trying to get authenticated SMTP working with no joy, http://rafb.net/p/mxYqFc26.html can anyone shed any light ?[20:08:36] <sysmonk> wee, stoned hackers again[20:18:57] * hparker hides rob0's crack pipe[20:20:35] *** McJerry has quit IRC[20:21:56] <dusty_> sysmonk, any ideas with tht ?[20:22:44] <sysmonk> dusty_: 1. afaik you are using dovecot, i'm not familiar with it at all 2. almost no information supplied[20:23:12] <sysmonk> there's no sasl connectivity errors in your pastebin, so imho you should look at dovecot sasl logs[20:23:33] <dusty_> Ok, i will start there thank you.[20:24:46] *** logione has joined #postfix[20:27:41] *** Lap_64 has quit IRC[20:28:01] *** Lap_64 has joined #postfix[20:28:09] <vice-versa> dusty_: decode your auth string to make sure it's what it's supposed to be[20:28:56] <magyar> hi, I am getting messages from doublebounce on the backup mx : http://pastebin.ca/1183594[20:29:13] <magyar> the user exists on the main MX[20:29:29] <magyar> and the domain in in "relay_domains" setting[20:29:42] <dusty_> vice-versa, it is, i scrambled it before I pasted it.[20:30:13] <dusty_> alls I done is: http://workaround.org/articles/ispmail-etch/#step-9-authenticated-smtp[20:30:18] <vice-versa> dusty_: is the username the full email address?[20:30:21] <dusty_> and then followed the example and it didn't work[20:30:22] <dusty_> yes[20:30:26] <dusty_> dusty at linuxgeek dot org.uk[20:30:32] <vice-versa> did you escape the @[20:30:35] <rob0> Scrambled eggs, yum. Huevos chorizos![20:31:58] *** chef_southpar1 has joined #postfix[20:32:21] <vice-versa> dusty_: like this, '\0username\ at example dot com\0password'[20:33:15] *** chef_southpark has quit IRC[20:35:04] <vice-versa> dusty_: if you didn't escape the @ and you did indeed decoded your auth string it should have been obvious something was amiss ;)[20:37:10] <dusty_> vice-versa, i just base-64 encoded my password[20:37:14] <dusty_> whats the string i have to send ?[20:37:15] *** Lap_64 has quit IRC[20:38:12] *** Lap_64 has joined #postfix[20:38:53] <vice-versa> dusty_: '\0dusty\ at linuxgeek dot org.uk\0yourpassword' <- that base64 encoded[20:41:20] * vice-versa wonders how much frothing at the mouth Wietse would do if I made a mailing list suggestion of adding a note to the sasl readme about escaping the @ in the user name[20:42:40] <sysmonk> vice-versa: um, you don't have to escape it, or am i wrong?[20:42:53] <hparker> quote the email addy?[20:43:05] <rob0> vice-versa, I think it's in there, isn't it?[20:43:33] <rob0> The escape is only needed when using perl (and when using usernames which contain @)[20:43:51] <sysmonk> yeah, perl @ is for arrays, that's why you need to escape it[20:44:03] <sysmonk> but not in the string itself[20:45:23] *** Lap_64 has quit IRC[20:49:48] <vice-versa> yes, for the Perl base64 encoding example, and I don't think the escaping is mentioned, at least not since the last time I read it, which admittedly has been awhile[20:54:16] *** Draecos has joined #postfix[20:56:59] *** chef_southpar1 has left #postfix[21:04:12] *** m1n3s6 has joined #postfix[21:06:48] <dusty_> vice-versa, 535 5.7.0 Error: authentication failed:[21:07:12] <dusty_> \0dusty\ at linuxgeek dot org.uk\0yourpassword <-- i put that into an online decoder and did auth login output of decoder.[21:07:17] <dusty_> i changed the password[21:11:30] <sysmonk> dusty_: try without escaped @[21:11:35] *** Paige has left #postfix[21:11:37] <sysmonk> that is, dusty at linuxgeek dot org.uk[21:11:42] <sysmonk> not dusty\ at linuxgeek dot ..[21:11:49] <vice-versa> try it without escaping the @ if not using Perl[21:12:18] <dusty_> so "dusty at linuxgeek dot org.uk password" - as I tried that too.[21:12:23] <dusty_> im not using perl[21:12:35] <dusty_> http://makcoder.sourceforge.net/demo/base64.php[21:12:38] <dusty_> is what im using[21:13:46] <vice-versa> dunno never used it myself, and don't think I would for obvious reasons[21:14:20] <vice-versa> it's easy enough to do with Perl, perl -MMIME::Base64 -e 'print encode_base64("\0dusty\ at linuxgeek dot org.uk\0yourpassword");'[21:15:35] <sysmonk> dusty_: that web encoder/decoder can't be used to encode this as you need to pass him \0 which it understands directly as two chars - \ and 0[21:18:01] <dusty_> vice-versa, dusty@mail:~$ perl -MMIME::Base64 -e 'print encode_base64("\0dusty\ at linuxgeek dot org.uk\0blah");[21:18:01] <dusty_> >[21:18:05] <dusty_> it don't work[21:18:09] *** madrescher has joined #postfix[21:18:42] <vice-versa> you're missing the terminating single quote[21:19:11] <vice-versa> and fwiw, you can double check it before using it with something like, echo 'AGR1c3R5QGxpbnV4Z2Vlay5vcmcudWsAeW91cnBhc3N3b3Jk' | base64 -d[21:19:26] <dusty_> sweet thanks[21:24:41] <dusty_> god damnit[21:24:42] <dusty_> 535 5.7.0 Error: authentication failed:[21:24:46] <dusty_> it still won't let me in[21:25:28] <dusty_> mail:~# perl -MMIME::Base64 -e 'print encode_base64("\0dusty\ at linuxgeek dot org.uk\0blah123");'[21:25:28] <dusty_> AGR1c3R5QGxpbnV4Z2Vlay5vcmcudWsAYmxhaDEyMw==[21:25:28] <dusty_> mail:~#[21:25:34] <dusty_> Obviously i changed the password there[21:25:58] <dusty_> Aug 24 20:24:41 mail postfix/smtpd[21543]: warning: mail.stoned-hacker.co.uk[38.106.105.139]: SASL login authentication failed:[21:26:22] <dusty_> this is my postfix config: http://rafb.net/p/9qEUOG77.html[21:26:26] <dusty_> what am i missing ?[21:26:34] <vice-versa> are your passwords in a db?[21:27:04] <dusty_> no in sql[21:27:06] <dusty_> i use dovecot[21:27:09] <dusty_> sorry yes[21:27:20] <dusty_> they are in a sql database, and the sql works, i've tried it manually.[21:27:27] <dusty_> vice-versa, im following the workaround.org tutorial[21:27:32] <vice-versa> ok, are they encrypted by any chance?[21:28:01] <dusty_> yes[21:28:03] <dusty_> MD5'd[21:29:11] <vice-versa> that may be your problem then, not all mechs work with encrypted passwords[21:29:56] <dusty_> what should i do then ?[21:30:00] <dusty_> this setup has worked before[21:30:06] <dusty_> i just reinstalled and started again.[21:30:11] <dusty_> first time round it worked without fail[21:30:24] <dusty_> also the tutorial on workaround.org is famous and thourougly tested[21:30:38] <vice-versa> then you're missing something[21:30:57] <dusty_> exactly but I can't see what[21:32:52] <vice-versa> well I don't use dovecot and I don't have time to read the tutorial and check your work against it[21:33:08] <vice-versa> but stick around someone might be able to assist you[21:33:50] <dusty_> thankyou for the help so far[21:33:54] <vice-versa> np[21:34:02] <rob0> Um, I don't think that is the right string to encode.[21:34:07] <rob0> !sasl[21:34:07] <knoba> rob0: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.[21:34:58] <rob0> oh hmmm, maybe it is[21:35:54] <rob0> http://wiki.dovecot.org/Debugging/Authentication[21:36:04] <rob0> printf 'username\0username\0password' | mmencode[21:36:50] <rob0> perl -MMIME::Base64 -e 'print encode_base64("myusername\ at domain dot tld\0myusername\@domain.tld\0mypassword");'[21:37:14] <rob0> so there you go vice-versa, the SASL_README is wrong![21:37:42] <dusty_> i done it[21:38:02] <dusty_> its really wierd look at this[21:39:27] <dusty_> http://rafb.net/p/3Kl6P830.html[21:39:30] <dusty_> check that out[21:39:38] <dusty_> I have to send this:[21:39:52] <dusty_> perl -MMIME::Base64 -e \[21:39:53] <dusty_> 'print encode_base64("john\ at example dot com\0john\@example.com\0password")';[21:39:54] *** logione has left #postfix[21:40:03] <dusty_> so the output of that, auth login output[21:40:07] <vice-versa> umm, try auth plain[21:40:08] <dusty_> then the encoded password by itself[21:40:27] <dusty_> auth plain works like this: auth plain dusty at linuxgeek dot org.uk password[21:40:46] <dusty_> im trying to get authenticated smtp working, which it is, but thats not usually how I auth via smtp auth[21:40:58] <vice-versa> no it doesn't[21:41:04] <vice-versa> auth plain ZHVzdHlAbGludXhnZWVrLm9yZy51awBkdXN0eUBsaW51eGdlZWsvgfhgff6uub3JnLnVrACF89778789hMmUwbjIy[21:43:26] *** AcTiVaTe has quit IRC[21:43:55] *** hark has quit IRC[21:44:00] *** hark has joined #postfix[21:45:23] *** g0rd0n has quit IRC[21:46:43] *** sdasdaseer has joined #postfix[21:48:41] *** hark has quit IRC[21:48:59] <vice-versa> dusty_: seems you've become overly confident since your fist attempt and are now making assumptions and or just plain making shit up, which never has positive results ;)[21:49:18] <dusty_> damn[21:49:27] <dusty_> im not sure what im doing wrong[21:49:30] <dusty_> auth plain doesn't work[21:49:32] <dusty_> auth login does[21:50:29] <sysmonk> dusty_: maybe you have some 'special chars' in your password that aren't encoded weel because you're not escaping them[21:50:40] <dusty_> ![21:50:44] <sysmonk> try setting it to something simple[21:50:45] <dusty_> is the only special char in the password[21:50:48] <dusty_> ok[21:51:00] <sysmonk> like 'abc' :)[21:51:50] <hparker> user:test password:password :P[21:52:06] <hparker> !vice-versa[21:52:06] <knoba> hparker: "vice-versa" : adv : with the order reversed; on the contrary; on opposite sides. eg: 'rob0 loathes cpm and vice-versa'[21:52:21] <vice-versa> !hparker[21:52:22] <knoba> vice-versa: "hparker" : is a shining example of chivalry and champaign (but still b0rk3n)[21:54:51] <dusty_> ok i've addeda new user with test as password[21:56:59] <dusty_> http://rafb.net/p/8HZ8mG82.html[21:57:01] <dusty_> :-][21:57:34] <sysmonk> congrats :)[21:58:02] <dusty_> You were right, i'm obviously not escaping ![21:58:05] <dusty_> in the password.[21:58:08] <sysmonk> haha[21:58:11] <dusty_> thank you for your patience guys ;)[21:58:12] <sysmonk> 08-24 22:57:43 < c3p01121> sysmonk: In that case, you are right and I was mistaken. I'm sorry for my misinterpretation[21:58:14] <vice-versa> and dude, you gotta stop smoking that shit[21:58:16] <sysmonk> 08-24 22:58:10 < dusty_> You were right, i'm obviously not escaping ![21:58:16] <sysmonk> :)))[21:58:33] <sysmonk> (dusty_ was talking to me too)[21:58:38] <dusty_> what can I say, your Mr Rright :p[21:58:46] <dusty_> thanks a lot guys.[21:58:48] <sysmonk> nope[21:58:50] <sysmonk> i'm evil[21:58:52] <sysmonk> !evil[21:58:53] <dusty_> heh[21:58:53] <sysmonk> !sysmonk[21:58:55] <knoba> sysmonk: "evil" : is sysmonk[21:58:58] <knoba> sysmonk: "sysmonk" : evil[21:59:11] <dusty_> right time for a beer i think.[21:59:31] <vice-versa> !rootbeer[21:59:32] <sysmonk> oh, nice, thanks for reminding me that i still *should* have a beer left[21:59:35] <knoba> vice-versa: "rootbeer" : any popular domestic ale or lager consumed while logged into the super user account[21:59:39] *** dhg has quit IRC[22:00:18] <vice-versa> that's it, get inebriated before moving onto the next phase[22:01:10] <hparker> it makes more sense that way[22:01:42] <vice-versa> !basuc[22:01:43] <knoba> vice-versa: "basuc" : !basic, plus a bit of alcohol[22:02:10] <hparker> hehe[22:02:17] <sysmonk> i like the hari-krishna one[22:02:20] <sysmonk> !hare_krishna[22:02:20] <knoba> sysmonk: "hare_krishna" : Rumor has it that Hare Krishna means hire a consultant in Hindi.[22:03:04] <vice-versa> hehe, !submission is my favourite[22:03:11] <sysmonk> !submission[22:03:12] <knoba> sysmonk: "submission" : I am knoba! Yield to my power and authority mortal[22:03:36] * sysmonk still likes hare_krishna more :P[22:03:58] *** lumpek has quit IRC[22:04:07] *** loompek has joined #postfix[22:06:06] <vice-versa> !pop[22:06:06] <knoba> vice-versa: "pop" : postfix is not an imap or pop server[22:06:24] <sysmonk> s/or// :)[22:06:28] <sysmonk> fuck[22:06:30] <sysmonk> s/not//[22:06:51] *** Motoko-chan has joined #postfix[22:07:19] <vice-versa> !poop[22:07:20] <knoba> vice-versa: "poop" : See: !pop[22:07:28] <sysmonk> haha[22:08:36] *** Joe_Wulf has joined #postfix[22:09:35] <xming> we need the bot counting eveything someone ask about not able to read mails with postfix and compile a list of the most ask dumb quetions[22:11:32] *** AcTiVaTe has joined #postfix[22:12:46] *** no_maam has quit IRC[22:13:11] *** no_maam has joined #postfix[22:16:01] <loompek> are there any good postfix performance comparison pages? i was wondering.. would postfix be an good mta for an isp?[22:16:11] <loompek> s/a/an/[22:16:30] *** githogori has joined #postfix[22:17:02] <sysmonk> loompek: not that i know of, but lots of isp's use postfix[22:17:13] <sysmonk> mostly the overhead is not on postfix side, but on antispam side[22:17:19] <sysmonk> s/overhead/bottleneck/[22:17:32] <sysmonk> never had a postfix bottleneck afair[22:17:41] *** JoeWulf has quit IRC[22:19:40] <loompek> yeah...[22:19:57] <loompek> i was thinking of some solutions for that...[22:20:16] <loompek> if i'd had multiple antispam/antivirus servers[22:20:33] <loompek> and postfix would forward mail to them round-robin[22:20:40] <sysmonk> i use a custom policy server which load-balances all the stuff + failovers[22:20:58] <sysmonk> all the stuff = antispam :)[22:21:13] <loompek> and the antispam/virus servers would forward the mail to the message store server[22:21:54] <sysmonk> um, in my situation it gives them back to postfix and postfix delivers where it has to ( multiple locations )[22:23:30] <loompek> okay...[22:23:59] <loompek> what kind of servers and how many should i use if i'd have 100k users[22:24:26] <sysmonk> loompek: hard to tell because it all depends on your solution + how much mails / s you have[22:24:33] <sysmonk> + how do you store them[22:24:54] <sysmonk> do you already have any current solution with 100k users? or are you just planing on it?[22:25:26] <loompek> i'm just planning[22:25:46] <sysmonk> loompek: commercial use?[22:25:49] <loompek> yes[22:29:39] <sysmonk> then imho you'd need some expert/consultant, or be quite experienced yourself[22:29:54] <xming> loompek: at my last work (big ISP) we used postfix, snedmail, qmail and exim[22:30:28] * sysmonk uses postfix[22:30:36] <sysmonk> but there are few servers with qmail, but i don't admin them[22:30:43] <sysmonk> and the admins are always swearing at it :P[22:31:09] <xming> qmail+patches for pop mbx, sendmail + milter for AS/AV, postfix for boarder and exim for slow mail[22:31:21] <Trengo> im very happy with my current setup, sendmail on the outside, postfix+dovecot at the hub, shared storage[22:31:44] <Trengo> redundant everything[22:31:52] <xming> now IMHO postfix coculd take over the job of qmail and sendmail but not exim, so I would say postfix + eim[22:32:12] *** dhg has joined #postfix[22:32:26] <sysmonk> xming: what's about exim?[22:32:50] <xming> sysmonk: postfix doesn't hadles large queues very well[22:32:57] <sysmonk> xming: hm[22:33:00] <sysmonk> xming: large as in ... ?[22:33:07] <xming> 150K[22:33:20] <Motoko-chan> exim handles large queues very poorly.[22:33:27] <xming> starting from 30~50K in the incoming queue postfix would start to choke[22:33:36] <Trengo> no complaints here[22:33:37] <sysmonk> my queues were max at ~50-80k[22:33:40] <xming> exim handled 400K queue[22:33:41] <Motoko-chan> xming, sounds like some tweaking should be done[22:33:51] <sysmonk> (not because of postfix)[22:33:52] <loompek> currently we use mirapoint solution...[22:33:56] <sysmonk> yeah[22:33:57] * Motoko-chan swears at qmail too[22:34:01] <Trengo> mirapoint sucks :s[22:34:02] <loompek> and imho... it sucks[22:34:04] <loompek> :)[22:34:05] <sysmonk> i hadn't problems with ~50-80k queues[22:34:22] <Trengo> i wrote webservices to handle mirapoint provisioning[22:34:23] <loompek> Trengo exactly :)[22:34:27] <Motoko-chan> I've had huge queues before.[22:34:39] <Motoko-chan> Try having a few thousand marketing profesionals on your system[22:34:41] <xming> sysmonk: in your incoming and active and still get like 1000+ mails/ sec?[22:34:48] <Motoko-chan> All subscribed to the same 30 newsletters.[22:34:59] <Motoko-chan> That publish on the same day.[22:35:07] <loompek> Trengo i really hate the fact it has a poor web interface and almost crappy cli[22:35:15] <Trengo> loompek very crappy[22:35:15] <Motoko-chan> AMaViSd-new was the biggest bottleneck in that case.[22:35:18] <sysmonk> xming: not 1k+ mails / sec, i don't get that much, but the usual load - yes[22:35:39] <Trengo> loompek and friggin expensive for what it does[22:35:47] <xming> the problem is for outgoing, whne remote server are damn slow you can't do anything tweaking, your queue just grows and so do your load avg[22:35:52] <loompek> in case there are 1k+ mails in the queue... the web interface (sorting by ip) just freezes[22:35:58] *** hacim has joined #postfix[22:36:08] <sysmonk> xming: oh yes you can[22:36:11] <Motoko-chan> xming, I've had exim crash hard on 200k outgoing mails.[22:36:15] <Motoko-chan> Load over 100[22:36:28] <hacim> I've got a root alias that is going to the wrong place, I changed the file that is listed in main.cf as the aliases file, I ran postalias on it to rebuild it, I restarted postfix, but its still going to the wrong place[22:36:29] <xming> sysmonk: if you don't get 1000+/sec how do you get queues of 30~50K mails?[22:36:35] <hacim> how can I figure out where it is going?[22:36:51] <Motoko-chan> hacim, check aliases[22:37:02] <sysmonk> xming: that jus happens :P[22:37:13] <xming> Motoko-chan: I had exim handling 400K+ slow mails with load avg below 2[22:37:20] <hacim> Motoko-chan: I did....[22:37:22] <Motoko-chan> xming, lucky you.[22:37:23] <sysmonk> xming: i.e. last time it was java exception floods from our customer servers[22:37:27] <xming> sysmonk: mail loop :D[22:37:28] <hacim> Motoko-chan: 'postalias -q root aliases' doesn't tell me anything[22:37:36] <sysmonk> xming: nope, monitoring in that case[22:37:43] <Motoko-chan> hacim, edit /etc/aliases or /etc/postfix/aliases[22:38:02] <hacim> Motoko-chan: see above, I did that[22:38:13] <hacim> Motoko-chan: I changed the root alias, but it doesn't reflect my change[22:38:14] <hparker> hacim: Using virtual or local?[22:38:16] <xming> so that exmin took over the slow mail devilery job of 6 postfix server :D[22:38:25] <xming> postfix is great handling fast mails[22:38:32] <xming> nothing beats postfix at that[22:38:47] <sysmonk> imho it's lack of tuning[22:38:54] <Trengo> i've only had queues of up to 20k emails[22:38:56] <sysmonk> but it's too late to discuss that in your case[22:39:03] <Trengo> but postfix managed them *very* quickly[22:39:08] <xming> trust me, nothing to tune any more on those boxes[22:39:16] <Trengo> much quicker than sendmail on a sparc[22:39:28] <xming> sysmonk: yeap, left that shit job[22:39:33] <sysmonk> xming: hehe[22:39:40] * sysmonk looks around for a new job too[22:39:59] <hacim> hparker: using alias_maps = hash:/etc/postfix/aliases,hash:/var/mailman/data/aliases[22:40:37] <hparker> hacim: So your users are either in /etc/passwd or using pam auth? Or are they in sql, ldap, etc?[22:40:51] <hacim> hparker: yeah, in /etc/passwd[22:40:56] <xming> sysmonk: before I was there solving/tuning the slow mail problem, they were just tossing thos 100K mails from one server to an other, trying to solve the problem (by giving at leas one server some air) they would overwork for 5~6 hours just doing mail tossing[22:41:17] <hacim> hparker: local_recipient_maps = proxy:unix:passwd.byname $alias_maps[22:41:22] <Motoko-chan> xming, that is bad right there[22:41:25] <hparker> hacim: odd... You sent a fresh email after fixing aliases and restarting postfix?[22:41:35] <Motoko-chan> That would certainly drive load up.[22:41:37] <xming> Motoko-chan: that was funny[22:42:49] <xming> Motoko-chan: there was a very good mail admin there, but he didn't realy was interested to solve this problem so he taught his colleagues to do "mail tossing" that's about 6x100K mails toosing from here to there[22:43:11] <hacim> hparker: yes[22:43:17] <Motoko-chan> That'd so kill the servers...[22:43:20] <Trengo> what kind of a good admin doesnt care about solving problems?[22:43:26] <hacim> hparker: whats also odd is postalias -q root aliases doesn't show anything[22:43:32] <hparker> hacim: strange.. Any errors in th email log when you restart postfix?[22:43:37] <xming> that's generating even more load on all servers[22:44:01] <xming> so with a mail food, it would take +/- 5,6 hours to get back to normal[22:44:28] <xming> ans management won't agree for more servers (we already had 30 of them)[22:44:45] <Motoko-chan> 30 and they got that backed up?[22:44:48] <Trengo> what i did was stopping sendmail, moving the large queues somewhere else and processing them later, at night[22:44:51] <Motoko-chan> Bad bad configuration.[22:45:09] <hacim> hparker: no, but it seems to start right back up[22:45:11] <Trengo> 30 servers??[22:45:14] <hacim> which is somewhat odd[22:45:19] <hparker> hacim: no clue then, sorry[22:46:57] <xming> yes 30 mail servers[22:47:07] <xming> with 2 IBM shark SANs[22:47:20] <Trengo> how many users?[22:47:28] <Trengo> accounts[22:47:31] <Trengo> whatever :)[22:47:46] <xming> users 600K, account x5[22:47:56] <Trengo> blimey[22:47:59] <xming> alias x15[22:48:09] <Trengo> thats aliases?[22:48:10] <Motoko-chan> I wonder how many users I have...[22:48:18] <Trengo> i have around 45k tops[22:48:36] * Motoko-chan has qmail on the internal server. It is fairly annoying[22:48:36] <xming> Trengo: mail aliases[22:48:52] <xming> qmail is the pain, sendmail is the horror[22:49:00] <Trengo> sendmail is fine[22:49:06] <Trengo> once you get familiar with it[22:49:07] <xming> exchange is the evil[22:49:20] <Motoko-chan> Exchange is broken evil.[22:49:28] <Motoko-chan> It should never touch the cloud.[22:49:32] <Motoko-chan> Not directly.[22:49:33] <hparker> sendmail.cf makes my eyes bleed[22:49:37] <Trengo> exchange is like a paranoid family member[22:49:38] <xming> Trengo: sendmail is never fine :D[22:49:46] <Trengo> you never have to touch sendmail.cf[22:49:49] <Trengo> hardly ever[22:50:06] <Trengo> xming sure it is, like everything else, just read the docs[22:50:07] <xming> exchange is more like chizophrenic (spell?) family memeber[22:50:12] <Trengo> very[22:50:14] <Trengo> bipolar[22:50:27] <Trengo> you never know what shit is it up to this time[22:50:29] <Motoko-chan> Schizophrenic[22:50:39] <Trengo> or when it sulks and stops working[22:50:41] <hparker> mine was migrated from like 8.8 through 8.12 or so, lost m4 control somewhere along the way[22:50:44] <xming> m4 for sendmail is horrible enough, touched sendmail for years[22:51:02] <xming> Motoko-chan: ty[22:51:08] <Trengo> hparker yeah, happened to me too, so i had to be rational and write an mc from scratch[22:51:16] <hparker> :P[22:51:29] <xming> postfix is a mail server for mortals[22:51:36] <xming> what a relief[22:51:44] <xming> less stress[22:51:57] <hparker> postfix conf files actually make sense[22:52:02] <Motoko-chan> http://video.google.com/videoplay?docid=-3128107537487124333 <-- Video of a man with schizophrenia[23:04:45] *** hacim has left #postfix[23:06:05] *** will_ has joined #postfix[23:08:04] *** sypher has joined #postfix[23:10:45] *** logione has joined #postfix[23:11:07] <will_> hellllllo![23:12:10] * sysmonk sees drunk people[23:12:37] *** j_s has quit IRC[23:13:27] <will_> Drunk? On a Sunday?[23:13:44] <sysmonk> who cares if it's sunday:P[23:15:45] <hparker> Stock up on sat, makes it easy[23:16:08] <sysmonk> uh[23:16:18] <hparker> blue laws suck :P[23:16:30] <sysmonk> we don't have that problem here[23:16:35] <sysmonk> alcohol is sold 24x7 :)[23:16:41] <will_> :([23:16:48] <sysmonk> except 1 day - sept. 1[23:16:57] *** seekwill has quit IRC[23:17:00] <hparker> nice[23:17:02] *** will_ is now known as seekwill[23:17:22] <seekwill> What's on Sept1st?[23:17:28] <sysmonk> but hey, we stock up on aug 31 ;P[23:17:40] <sysmonk> seekwill: the first day of school starts on sept 1st[23:17:45] <seekwill> heh[23:17:47] <sysmonk> and kids get drunk :)[23:17:52] <seekwill> That's when you need it the most![23:18:00] <sysmonk> heh, yeah[23:18:17] <sysmonk> we stocked up last year, but ... eventually we drunk everything[23:18:32] <hparker> larger stock needed[23:18:38] <sysmonk> yup[23:18:42] <sysmonk> will do that this year ;P[23:19:01] <sysmonk> i always have some stock, but eeek, that time there wasn't anything i'm drinking[23:19:10] <sysmonk> i had only whiskey and i don't drink it[23:19:21] * sysmonk only drinks beer && vodka[23:19:29] <sysmonk> and sometimes, but rarely, vine[23:20:49] *** war9407 has quit IRC[23:24:12] <seekwill> So... umm.. Does anyone have a quick guide on installing Postfix + SA + ClamAV on CentOS?[23:25:03] <hparker> Last centos I did I ended up compiling most everything from source :P[23:25:46] <seekwill> heh[23:26:09] <seekwill> I'm trying to do it all the packagement way[23:26:11] <xming> hparker: that's the way to go[23:26:30] <hparker> seekwill: I usually try to, but... It wasn't working :P[23:26:49] <hparker> Maybe I'm too far from the RH way of doing things these days[23:31:58] <loompek> seekwill i think i installed with from rpmforge[23:34:15] <seekwill> ah[23:34:24] * hparker would use Simon Mudd's postfix rpms[23:35:14] <rob0> WWHD?[23:35:48] * hparker takes the crack pipe from rob0[23:36:12] <rob0> WWR0D?[23:36:23] <hparker> Apparently not soon enough[23:37:19] <seekwill> WWHD?[23:37:57] <sysmonk> hparker: heeeeeey, pass it on![23:38:06] * hparker shares[23:38:35] <rob0> WWHpD? HpWSTCP.[23:39:46] * sysmonk notes rob0 passwords[23:43:02] *** aron is now known as Aron