[00:00:08] *** xpeed has quit IRC
[00:00:59] *** deadpigeon has quit IRC
[00:02:23] *** [Jasper] has joined #postfix
[00:02:24] *** gutocarvalho has quit IRC
[00:02:24] *** Jasper has quit IRC
[00:03:07] *** eanxgeek_ has quit IRC
[00:04:15] *** [Jasper] has quit IRC
[00:05:36] *** dustybin has left #postfix
[00:05:40] *** non-sequitir has joined #postfix
[00:06:25] *** keffer has joined #postfix
[00:10:25] *** psypointerV6 has quit IRC
[00:16:34] <SkyLeach> hey guys, I thought I had this working only to explode it the next time I added a virtual user.
[00:17:17] <SkyLeach> I have vuser at vhost dot com listed in my 'users' table (mysql) and imap/smtp authentication work fine.
[00:17:35] <SkyLeach> same configuration, I have me at vhos dot net
[00:18:02] <SkyLeach> should be practically identical
[00:18:10] <SkyLeach> yet one works and one doesnt.
[00:18:29] <SkyLeach> the only difference I can see is that me at vhost dot net is the physical domain of the server.
[00:18:49] <SkyLeach> the virtual domains are all in dns correctly, but the machine itself is on vhost.net
[00:19:12] <SkyLeach> I'm getting bounces (User unknown in virtual alias table).
[00:19:16] *** mattx86 has quit IRC
[00:19:29] <lunaphyte> this is just sad. http://www.katu.com/news/34292654.html
[00:21:33] *** ricardoha has quit IRC
[00:22:40] <lunaphyte> somehow though, i appreciate the irony of the story.
[00:23:33] <SkyLeach> lunaphyte, what is sad is that US banks are still allowing transfers from US accounts to foreign accounts with no accountability for fraud.
[00:23:41] <SkyLeach> like nigeria, uganda, etheopia, etc..
[00:23:59] <SkyLeach> all in the interest of the WTO
[00:24:05] <SkyLeach> and global "community"
[00:28:12] <hparker> lunaphyte: heh... My ex and kids live in that town... But that ain't her
[00:28:40] <lunaphyte> SkyLeach: i'm no fan of the wto, but i fundamentally disagree with you.
[00:29:07] <SkyLeach> lunaphyte, ok... why?
[00:29:15] *** _mavrick61 has quit IRC
[00:29:17] <SkyLeach> lunaphyte, not looking to argue, just currious
[00:29:48] *** _mavrick61 has joined #postfix
[00:33:01] <lunaphyte> creating requirements that banks/financial institutions/etc. employ mechanisms for such scenarios add operating cost to the businesses which are then passed onto the consumer/customer in some form (e.g. me).  i'm not interested in paying more for my services because some other customer is greedy/stupid/etc.
[00:35:54] <lunaphyte> in other words, i can say with confidence that if i'm transferring a sum of money that carries a significant value to me, i'll be the one making sure things are legit and so on.  if others would rather not, it's unfortunate, but their misfortune/whatever shouldn't become my problem.
[00:37:20] <lunaphyte> hparker: rest easy knowing she's not blowing your child support (at least not on nigerian scammers) ;) .
[00:37:46] <hparker> heh... If it was her, and she'd blown a half mill, I'd be asking wtf
[00:37:57] *** suprsonic has quit IRC
[00:38:45] <cafuego> SkyLeach: It's the US that's been forcing other countries to adopt their practices (mainly regarding IP, but still) on punishment of trade sanctions, actually.
[00:40:06] <SkyLeach> cafuego, the us hardly encourages companies to allow open transfer of funds without fraud prevention?
[00:40:13] <cafuego> Mind you, if my bank interfered with me moving money to my overseas account, I would switch banks.
[00:40:36] <SkyLeach> What if the bank simply told you "if we allowed it then anyone could take all your money."
[00:41:04] <cafuego> SkyLeach: A bank allowed an overseas person to move money out of an account that wasn't theirs?
[00:41:36] *** havvg has quit IRC
[00:43:27] <SkyLeach> cafuego, nah... didn't bother reading the article.  misleading headline.  :-O
[00:43:33] *** seekwill has quit IRC
[00:43:35] * SkyLeach goes back to fixing his email
[00:43:38] <cafuego> heh
[00:45:07] <SkyLeach> ok, someone please tell me how postfix determins valid virtual domains?  I followed (get ready) "a _guide_" to postfix+imap+sasl+mysql...
[00:45:17] <SkyLeach> mostly because I could understand most of what the guide was suggesting
[00:45:32] <SkyLeach> but the guide has nothing about how to define virtual domains in mysql for postfix.
[00:45:58] <SkyLeach> if I define them in the "virtual" table as an alias minus the destination portion mail gets rejected
[00:46:06] <SkyLeach> if I hand-define them in the main.cf it works
[00:46:42] <SkyLeach> I kindof just want it to get them from the "transport" table where destination=virtual:
[00:46:46] <SkyLeach> but that's not working
[00:48:54] <SkyLeach> oh wait, fixed it
[00:49:11] * SkyLeach goes out to chainsmoke
[00:49:26] *** Tykling has joined #postfix
[00:49:29] *** telpochyaotl has quit IRC
[00:50:39] *** Deddi has quit IRC
[00:51:41] *** McJerry has joined #postfix
[00:52:15] *** xnixan has joined #postfix
[00:52:47] <SkyLeach> great... all working... now for spam filtering
[00:52:56] *** eanxgeek_ has joined #postfix
[00:53:20] * SkyLeach had known switching from qmail was this much fun he would have invited friends over
[00:55:13] *** Johnessy has joined #postfix
[00:55:18] <Johnessy> hello everyone
[00:55:33] <growltiger> hi!
[00:55:34] <growltiger> wb
[00:55:34] <Johnessy> i'm having some serious problems sending my mails from a mail client
[00:56:03] <Johnessy> i can send emails allright from squirrelmail
[00:56:19] <Johnessy> and i don't have any problems at all sending emails to other users
[00:56:43] <Johnessy> but if i want to send an email to an external site..i can't
[00:58:12] <Johnessy> i get this error:
[00:58:16] <Johnessy> Nov 14 01:57:26 Cristina postfix/smtpd[6384]: connect from www.alkon.com.ar[200.49.147.26]
[00:58:16] <Johnessy> Nov 14 01:57:26 Cristina postfix/smtpd[6384]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
[00:58:23] <Johnessy> Nov 14 01:57:26 Cristina postfix/smtpd[6384]: warning: www.alkon.com.ar[200.49.147.26]: SASL LOGIN authentication failed: authentication failure
[00:58:23] <Johnessy> Nov 14 01:57:26 Cristina postfix/smtpd[6384]: lost connection after AUTH from www.alkon.com.ar[200.49.147.26]
[00:58:48] <Johnessy> the user is ok, and the password is ok..
[00:58:48] *** gutocarvalho has joined #postfix
[00:58:50] <Johnessy> so it has to be something else
[00:59:39] <growltiger> !mynetworks
[00:59:40] <knoba> growltiger: "mynetworks" : a configuration parameter in the main.cf: The list of "trusted" SMTP clients that can relay email.
[00:59:53] <Johnessy> and by the way, that file /etc/sasldb2 exists
[01:00:03] <Johnessy> by "clients" you mean users?
[01:01:03] *** war9407 has quit IRC
[01:01:14] <Johnessy> nevermind
[01:01:21] <Johnessy> you mean clients..literally.
[01:04:13] <Johnessy> uhm
[01:04:25] <Johnessy> is there a way to specify more than one network?
[01:04:49] *** madrescher has quit IRC
[01:05:22] <Johnessy> for instance..something like 200.49.147.0/255, 127.0.0.0/8, 190.0.0.0/190.255.255.255
[01:05:28] <Johnessy> i got a "fatal" error.
[01:05:59] <xpoint>  /255
[01:06:15] <xpoint>  /190
[01:06:44] <Johnessy> eh?
[01:06:45] <xpoint>  / max 32
[01:11:13] *** tris has quit IRC
[01:11:52] *** tris has joined #postfix
[01:13:52] *** hparker has quit IRC
[01:26:00] *** eanxgeek_ has quit IRC
[01:26:00] *** Southron has left #Postfix
[01:26:45] *** s0what has quit IRC
[01:30:20] *** InvaderZim has quit IRC
[01:30:24] *** adaptr has quit IRC
[01:30:34] *** adaptr has joined #postfix
[01:31:08] *** adaptr has quit IRC
[01:34:35] *** Motoko-chan has quit IRC
[01:35:35] *** adaptr has joined #postfix
[01:36:40] *** Tykling has left #postfix
[01:42:27] *** adaptr has quit IRC
[01:42:39] *** adaptr has joined #postfix
[01:43:18] *** adaptr has quit IRC
[01:46:58] *** hparker has joined #postfix
[01:47:41] *** adaptr has joined #postfix
[01:47:52] *** ming_zym has joined #postfix
[01:50:04] *** shinao1 has quit IRC
[02:09:58] *** Juspion has joined #postfix
[02:09:58] *** ming_zym has quit IRC
[02:13:14] *** ming_zym has joined #postfix
[02:14:18] *** Southron has joined #Postfix
[02:18:05] *** pirho has quit IRC
[02:22:23] *** adaptr has quit IRC
[02:22:34] *** adaptr has joined #postfix
[02:36:38] *** wei has joined #postfix
[02:39:09] *** plee_ has quit IRC
[02:39:52] *** plee_ has joined #postfix
[02:46:30] *** Southron has quit IRC
[03:01:34] *** ming_zym has quit IRC
[03:31:48] *** Juspion has quit IRC
[03:31:56] *** ikaro has quit IRC
[03:31:56] *** ikaro^ has joined #postfix
[03:32:13] *** ikaro^ is now known as ikaro
[03:32:40] *** vms has joined #postfix
[03:34:12] *** memetic has quit IRC
[03:40:58] *** pulsar has quit IRC
[03:45:47] <Johnessy> hey people..
[03:46:11] <Johnessy> is there a way to allow any ip from any network to be able to send emails?
[03:47:35] <growltiger> !open_relay
[03:47:36] <knoba> growltiger: Error: "open_relay" is not a valid command.
[03:47:40] <growltiger> !openrelay
[03:47:41] <knoba> growltiger: "openrelay" : An open relay is a mail server that is set up incorrectly and accepts and forwards mails for strangers. This server will quickly be abused by spammers and blacklisted. Also ask me about smtpd_access
[03:47:49] *** hackeron has joined #postfix
[03:48:14] <Johnessy> problem is that this server has to be used with a lot of devices
[03:48:26] <Johnessy> from computers, to other servers and even iphones and blackberries
[03:48:34] <Johnessy> all of which, have very different ips
[03:48:37] <growltiger> !smtp_auth
[03:48:38] <knoba> growltiger: Error: "smtp_auth" is not a valid command.
[03:48:42] <growltiger> !smtpauth
[03:48:42] <knoba> growltiger: "smtpauth" : a feature that allows road-warriors (trusted users which are outside your network) to send mail via your mail server. The user needs to send a username and password which allows him/her to relay email. See: http://www.postfix.org/SASL_README.html
[03:49:12] <hackeron> hey, I've set up a postfix server with a self signed certificate and sasl authentication, and I'm now using a postfix client on the internet set to use my postfix server as a relay host -- but I'm getting "status=deferred (Server certificate not trusted)" on the client side -- how do I make my server certificate trusted?
[03:49:40] <hackeron> trusted by that specific client that is (without buying a certificate)
[03:49:53] <growltiger> get one from cacert.org
[03:50:27] <hackeron> growltiger: I don't really need it to be trusted by anyone else, I just want to configure that single postfix client to trust the certificate
[03:55:17] *** wladek has joined #postfix
[03:55:34] <growltiger> !smtp_tls_cert_file
[03:55:35] <knoba> growltiger: Error: "smtp_tls_cert_file" is not a valid command.
[03:57:20] <hackeron> growltiger: I tried to add the certificate from the server to the end of the smtp_tls_cert_file -- no change, still Server certificate not trusted
[03:58:20] <hackeron> oh, hold on, it says certificate has expired, wtf - I just created it
[04:00:18] <hackeron> I used -days 36500 -- is that over the limit?
[04:01:27] <growltiger> probably
[04:01:42] <growltiger> a hundred years is a little much
[04:02:36] *** porjo has joined #postfix
[04:02:46] *** Ryushin has joined #postfix
[04:02:55] <hackeron> growltiger: well, I don't want it to expire in 10 years time, lol
[04:04:06] *** tty2 has joined #postfix
[04:04:27] <growltiger> get one from cacert.org
[04:04:48] <tty2> how do i make it so anyone with a mail account (user account) on the system to be able to relay mail to the rest of the internet without simply making it an openrelay?
[04:05:03] <growltiger> !smtpauth
[04:05:04] <knoba> growltiger: "smtpauth" : a feature that allows road-warriors (trusted users which are outside your network) to send mail via your mail server. The user needs to send a username and password which allows him/her to relay email. See: http://www.postfix.org/SASL_README.html
[04:05:23] <tty2> growltiger: well your on the ball today!
[04:05:58] <hackeron> growltiger: ok, I guess it will always come in handy :) -- thanks.
[04:06:02] <porjo> I have Postfix setup as a simple mail relay for my network. The Linux host that it runs on uses LDAP to lookup system accounts (for SSH logins etc)
[04:06:38] <growltiger> !dovecot
[04:06:39] <knoba> growltiger: "dovecot" : http://www.dovecot.org/ : IMAP/POP3 server software with emphasis on security; recent versions can also provide SASL AUTH for Postfix 2.3+.
[04:06:46] <porjo> I'm seeing lots of lookups for user 'postfix' coming through to the LDAP server...even though user 'postfix' is configured on the localhost - not in LDAP
[04:06:53] <porjo> anyone know why that would be happening?
[04:07:52] <growltiger> postfix is doing the lookups?
[04:08:14] <porjo> growltiger: postfix itself is not configured to use LDAP
[04:10:45] <hackeron> growltiger: erm? -- I have a cacert account, how do I generate some .key, .crt and .pem files?
[04:11:59] <wladek> good evening.  is it possible to have a virtual mailbox user using the same 'mydestination' host as my local destination for my actual unix user mail accounts?
[04:13:47] <growltiger> openssl req -nodes -new -keyout private.key -out server.csr
[04:14:35] *** chadmaynard_ has joined #postfix
[04:15:22] <cite> Good morning.
[04:15:28] <growltiger> hi!
[04:15:29] <growltiger> wb
[04:15:59] <cite> wladek: Your question doesn't make that much sense.
[04:18:27] *** echelog` has joined #postfix
[04:18:39] <wladek> no.  i have system user's receiving mail with their emails [user]@mydestination
[04:18:59] *** echelog` is now known as echelog
[04:19:03] <wladek> but i want to create a virtual mailbox so i can send mail to [virtual-user]@mydestination
[04:19:09] <wladek> without having to create them a system account
[04:19:40] <cite> As I said, create virtual.example.com, rewrite incoming mail for virtual-user at example dot com to virtual-user at virtual dot example.com
[04:19:55] <wladek> oh.. hmm
[04:20:02] <cite> The user / other mailservers won't ever notice that.
[04:20:14] <wladek> ok
[04:20:17] <wladek> cheers
[04:21:45] *** porjo has left #postfix
[04:22:34] *** _mavrick61 has quit IRC
[04:23:42] *** _mavrick61 has joined #postfix
[04:26:51] <hackeron> growltiger: ok, I generated a certificate, but it doesn't give me the RSA PRIVATE KEY - so how am I supposed to use it with postfix?
[04:26:54] *** razym has quit IRC
[04:27:21] <growltiger> its whatever you named it
[04:27:35] *** Ryushin has quit IRC
[04:27:43] <growltiger> private.key if you did what i pasted
[04:28:06] <growltiger> the server.csr is what you submit inorder to get the .crt
[04:29:38] <hackeron> growltiger: ah, ok, let me try
[04:30:14] <hackeron> growltiger: I did openssl req -new -nodes -keyout myserver.key -out server.csr
[04:30:22] *** chadmaynard_ has quit IRC
[04:30:33] <hackeron> growltiger: so I put myserver.key for smtpd_tls_key_file
[04:30:44] <growltiger> sure
[04:30:48] <hackeron> and the crt they gave me for smtpd_tls_cert_file?
[04:30:56] <growltiger> you betcha
[04:32:18] <hackeron> growltiger: untrusted issuer /O=Root CA/OU=http://www.cacert.org/CN=CA Cert Signing Authority/emailAddress=support at cacert dot org
[04:32:25] <hackeron> heh :)
[04:32:56] *** wei has left #postfix
[04:34:02] <hackeron> how do I make the cacert.org a trusted issuer?
[04:34:26] <growltiger> !smtpd_tls_CAfile
[04:34:27] <knoba> growltiger: Error: "smtpd_tls_CAfile" is not a valid command.
[04:34:30] <growltiger> blah
[04:34:37] <growltiger> get the cacert.crt
[04:34:48] <hackeron> where from?
[04:35:02] <Johnessy> thanks for the help :) bye
[04:35:03] *** Johnessy has quit IRC
[04:35:06] <growltiger> cacert.org
[04:35:15] *** josinalvo__ has joined #postfix
[04:35:38] <hackeron> growltiger: where abouts on the site?
[04:36:26] *** wei has joined #postfix
[04:37:54] <hackeron> ah, http://www.cacert.org/certs/class3.crt
[04:40:02] *** Southron has joined #Postfix
[04:40:44] <tty2> can someone tell me why postfix produces the following error (looks like a valid mask to me): Nov 13 23:30:52 [postfix/trivial-rewrite] fatal: unknown mynetworks mask style value "10.0.0.0/24" in "10.0.0.0/24, 127.0.0.0/8, 66.166.153.192/29, 67.103.106.168/29"
[04:43:14] <roe_> remove that entry and see if it complains about the next one as well
[04:43:26] <tty2> kk
[04:44:20] <tty2> roe_: sure did
[04:44:26] <tty2> any idea why its complaining?
[04:45:09] <growltiger> you need a 8
[04:45:22] <growltiger> 10.1.1.0/24 is ok
[04:45:25] <tty2> an 8? where?
[04:45:32] <hackeron> growltiger: hmm, I added smtp_tls_CAfile = /etc/postfix/class3.crt and it still doesn't trust the issuer
[04:45:32] <growltiger> as is 10.1.0.0/16
[04:45:47] <tty2> growltiger: not following ya
[04:46:01] <growltiger> you have your smtp and smtpds mixed up
[04:46:03] <roe_> remove the quotes
[04:46:22] <tty2> roe_: there are no quotes in the conf.
[04:46:24] <growltiger> 10.0.0.0 is a /8 network
[04:46:52] <tty2> growltiger: how do you figure.. im talking about 10.0.0.1 - 10.0.0.254 thats a /24 network
[04:46:57] <hackeron> growltiger: server side seems fine, no errors, now I'm trying to get client to trust the issuer - what am I doing wrong?
[04:47:26] <tty2> this is what my line looks like int he conf: mynetworks_style = 10.0.0.0/24, 127.0.0.0/8, 66.166.153.192/29, 67.103.106.168/29
[04:47:38] <tty2> DOH!
[04:47:41] <tty2> i foudn the problem
[04:47:45] <tty2> it should be mynetworks
[04:47:46] <tty2> lol
[04:47:50] <tty2> not mynetworks_style
[04:47:51] <tty2> duh
[04:48:11] <tty2> there we go working now
[04:48:15] <tty2> thanks for your help tty2
[04:48:17] <growltiger> there is smtpd_tls_key_file and smtp_tls_key_file
[04:48:17] <tty2> your welcome!
[04:48:18] <tty2> lol
[04:48:29] <growltiger> there is smtpd_tls_cert_file and smtp_tls_cert_file
[04:48:34] <growltiger> and so on
[04:48:41] <tty2> its working now, but thanks anyway guys
[04:48:53] <hackeron> growltiger: well, I don't want to put my key file or any of that on client - or do I have to?
[04:49:06] <hackeron> growltiger: on client I have everything self signed
[04:50:02] <hackeron> growltiger: I just want it to use my server as the relay host with auth and can't get it to trust the certificate issuer
[04:52:19] <hackeron> growltiger: basically there is no relay host provided by ISP and I've created my own which works with normal desktop software, but the postfix as a client doesn't trust the certificate issuer
[04:54:25] <growltiger> doesnt trust who?
[04:56:02] <hackeron> basically it's like this, server is now working with cacert.org certificate, no problem there
[04:56:09] <hackeron> now I'm setting up a client postfix and it's giving me:
[04:56:14] <hackeron> Nov 14 03:57:15 MillerDVR postfix/smtp[12201]: certificate verification failed for hackeron.dyndns.org[82.5.84.54]:587: untrusted issuer /O=Root CA/OU=http://www.cacert.org/CN=CA Cert Signing Authority/emailAddress=support at cacert dot org
[04:57:02] <hackeron> as I understand all I need to do is add their class3.crt to my cacert.pem file? -- I tried that, but it made no difference :(
[04:57:16] *** adaptr_ has joined #postfix
[04:58:29] <hackeron> what am I missing?
[05:00:54] <growltiger> you nee dto have the cacert root cert in your cafile
[05:01:18] <growltiger> your cacert.crt should have all the trusted certs that you want to trust
[05:01:47] <growltiger> i dont think the class3.crt is the right file
[05:02:17] <hackeron> well, I did cat class3.crt >> cacert.pem -- and I have smtp_tls_CAfile = /etc/postfix/cacert.pem smtpd_tls_CAfile = /etc/postfix/cacert.pem in my main.cf
[05:02:44] <hackeron> hmmm, it isn't? - it's the only one I can find so far
[05:02:56] <hackeron> I'm following this: http://wiki.cacert.org/wiki/PostfixConfiguration
[05:03:01] *** adaptr has quit IRC
[05:03:28] <tty2> postfix wont work and i cant even figure out why :(
[05:03:56] <growltiger> try this one: http://www.cacert.org/certs/root.txt
[05:05:18] <hackeron> hmm, something new
[05:05:19] <hackeron> Nov 14 04:06:15 MillerDVR postfix/smtp[13892]: Trusted TLS connection established to hackeron.dyndns.org[82.5.84.54]:587: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
[05:05:21] <hackeron> Nov 14 04:06:15 MillerDVR postfix/smtp[13892]: D6ACE208794: to=<hackeron at gmail dot com>, relay=hackeron.dyndns.org[82.5.84.54]:587, delay=6060, delays=6059/0.1/0.61/0, dsn=4.7.5, status=deferred (Server certificate not verified)
[05:07:30] *** wladek_ has joined #postfix
[05:07:35] <hackeron> growltiger: any ideas?
[05:08:05] <growltiger> you are probably missing something in your main.cf
[05:08:14] *** Motoko-chan has joined #postfix
[05:08:44] <hackeron> growltiger: any ideas what?
[05:08:59] <growltiger> make sure these things are chmod 600
[05:09:54] <hackeron> growltiger: oh wait, I just removed smtp_enforce_tls yes but still have smtp_use_tls = yes and it sent
[05:10:52] <growltiger> there you go then
[05:11:23] <growltiger> although you should use your own self signed cert for the smtp part
[05:11:33] <growltiger> the cacert.org cert is for the smtpd part
[05:11:57] <growltiger> or maybe i have that backwards
[05:12:36] <growltiger> you can use your cert from them for both i think
[05:12:36] <hackeron> growltiger: that's what I'm currently doing, cacert.org on the server for smtpd and self signed on client with smtp
[05:13:09] <hackeron> growltiger: I'd rather not even have the key file on the client as it's not 100% trusted
[05:13:35] <growltiger> you generated it
[05:13:41] <growltiger> why do you not trust it?
[05:14:22] *** wladek has quit IRC
[05:14:33] <hackeron> client is a PC in chicago, Server is a PC in London -- I don't know who has access to the client, it's just nice to have a relay_host for logcheck
[05:22:27] <hackeron> growltiger: anyway, it is working oh so beautifully now, thank you! :)
[05:36:12] *** goldfischli has joined #postfix
[05:37:14] *** goldfisc1li has quit IRC
[05:37:53] *** pitakill has joined #postfix
[05:44:48] <skullone> hi postfix
[05:45:11] *** adaptr_ has quit IRC
[05:45:22] *** adaptr has joined #postfix
[05:51:35] *** adaptr has quit IRC
[05:51:46] *** adaptr has joined #postfix
[05:59:01] *** Lap_64 has joined #postfix
[06:01:23] *** saurabhb has joined #postfix
[06:03:07] *** root has joined #postfix
[06:03:14] *** root is now known as Ashwin
[06:03:59] <Ashwin> can postfix sleep for 10 sec after a particular connection is completed
[06:04:11] <growltiger> sure
[06:04:49] *** githogori has quit IRC
[06:04:49] <Ashwin> how
[06:05:00] <growltiger> dont know
[06:07:53] <growltiger> !opts_trigger_timeout
[06:07:54] <knoba> growltiger: Error: "opts_trigger_timeout" is not a valid command.
[06:07:57] <growltiger> blah
[06:11:21] <tty2> can someone help. Im trying to follow http://www.gentoo.org/doc/en/virt-mail-howto.xml to setup postfix but on step 6 when i verify with telnet im not getting the STARTTLS response fromt he server
[06:14:18] <growltiger> !smtpd_use_tls
[06:14:19] <knoba> growltiger: Error: "smtpd_use_tls" is not a valid command.
[06:14:59] <tty2> :(
[06:15:56] <tty2> !smtp_use_tls
[06:15:57] <knoba> tty2: Error: "smtp_use_tls" is not a valid command.
[06:16:12] <tty2> growltiger: any idea the proper "command" ?
[06:16:37] <growltiger> it's a valid command, dont listen to him
[06:16:51] <tty2> growltiger: where does it go mail.cnf?
[06:17:07] <growltiger> !tls
[06:17:08] <knoba> growltiger: "tls" : short for "Transport Layer Security" (RFC2246). It adds an additional layer of encryption to protocols like SMTP, POP3 or IMAP to improve security during transmission over the internet. You can find HOWTOs on that topic on http://www.postfix.org/docs.html
[06:17:13] *** arthabaska has left #postfix
[06:17:51] <tty2> growltiger: not a particularly specific link, lol
[06:18:01] <growltiger> you must hve missed something
[06:18:08] <growltiger> that one you posted looks right
[06:18:21] <growltiger> never heard of mail.cnf though
[06:18:27] <tty2> growltiger: i must have, yes, but no idea what
[06:18:49] <tty2> am i thinking of main.cnf or something, the primary postfix configuration file
[06:19:01] *** adaptr has quit IRC
[06:19:12] *** adaptr has joined #postfix
[06:19:20] <tty2> main.cf
[06:19:43] <tty2> growltiger: would posting youmy main.cf help?
[06:19:52] <growltiger> maybe
[06:20:37] <tty2> growltiger: http://rafb.net/p/mvGFjc68.html
[06:21:19] <growltiger> that looks fine
[06:21:59] <tty2> growltiger: any idea where else to look?
[06:22:48] <growltiger> maybe restart postfix
[06:22:58] <tty2> kk
[06:23:05] <growltiger> stop and start
[06:23:47] <tty2> growltiger: no change :(
[06:24:00] <tty2> i an show you the telnet output if youd like
[06:24:38] <tty2> growltiger: telnet output: http://rafb.net/p/u7aNEH14.html
[06:25:55] <tty2> growltiger: stumped?
[06:26:15] *** Lap_64 has quit IRC
[06:26:20] <growltiger> maybe remove the notetls thing in there
[06:26:59] <tty2> ::looks::
[06:27:41] <tty2> growltiger: i dont see a notetls
[06:28:17] <growltiger> whatever this is about: smtp_tls_note_starttls_offer = yes
[06:28:24] <tty2> ahh
[06:28:35] <growltiger> !smtp_tls_note_starttls_offer
[06:28:36] <knoba> growltiger: Error: "smtp_tls_note_starttls_offer" is not a valid command.
[06:29:01] <growltiger> your mail log should have more info as well
[06:29:04] <tty2> growltiger: no help there
[06:29:14] <tty2> growltiger: i commented that line out with no effect
[06:29:57] <tty2> let me check...
[06:30:44] <tty2> growltiger: nothing in the log sticks out
[06:31:57] *** Lap_64 has joined #postfix
[06:34:04] <tty2> growltiger: stumped i take it?
[06:34:11] <justdave> is there any way to block any incoming mail for a given domain unless it originates at a specific IP address?
[06:34:13] <growltiger> no
[06:34:25] <tty2> growltiger: lol well in that case lay it on me :)
[06:34:45] *** meghanand has joined #postfix
[06:35:08] <f3ew> yes
[06:35:17] <f3ew> restriction_classes, or a policy daemon
[06:35:35] <justdave> use case: have a mail server which serves mail for a lot of domains.  One domain has started using a third party spam filter as a primary MX, which then relays to us. Since the outside world no longer has us as the MX for that domain, we want to refuse mail for it unless it goes through the scanning service
[06:35:41] <tty2> i call shinanigans on postfix
[06:35:51] <justdave> but obviously don't want to block mail for any of the other domains :)
[06:36:14] *** niki has quit IRC
[06:38:37] <f3ew> !debug
[06:38:38] <knoba> f3ew: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ .
[06:38:51] <f3ew> justdave see restriction_classes
[06:38:56] <f3ew> !restriction_classes
[06:38:57] <knoba> f3ew: Error: "restriction_classes" is not a valid command.
[06:39:00] <f3ew> !restriction_class_readme
[06:39:01] <knoba> f3ew: "restriction_class_readme" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html
[06:39:09] <justdave> f3ew: reading that now, thanks
[06:39:09] <tty2> f3ew: ive been "debuging" if that was directed at me.. just cant figure out why its happening
[06:40:38] <tty2> would i get more help if i cry like a baby? hehe
[06:40:56] <deface> tty2: whats your issue
[06:40:59] <deface> too lazy to read up
[06:41:06] <tty2> deface: ive been reading up
[06:41:12] <tty2> deface: without much luck on a solution
[06:41:15] <deface> no tls in gentoo ?
[06:41:23] <f3ew> tty2 did you paste postconf -n somewhere?
[06:41:29] <f3ew> and logs?
[06:41:50] <tty2> f3ew: i posted my main.cf but im happy to post logs as well (not that they seem very useful) one moment
[06:42:07] <deface> tty2: eix postfix | grep ssl
[06:42:09] <f3ew> tty2, postconf -n is what Postfix actually sees
[06:42:28] <tty2> here is my postconf -n: http://rafb.net/p/iu9pi113.html
[06:43:14] <tty2> this is the /var/log/mail/current: http://rafb.net/p/7zrs5j54.html
[06:43:22] <justdave> hmm, okay, looks like I could use the "prevent specific users from sending mail to the internet" example from there and just run it in reverse
[06:43:33] <deface> tty2: warning: TLS has been selected, but TLS support is not compiled in
[06:43:39] <deface> you dont have SSL use flag enabled
[06:43:39] <justdave> check on client instead of sender
[06:43:40] <deface> tty2: eix postfix | grep ssl
[06:43:53] <deface> emerge eix
[06:43:54] <tty2> deface: yes its there
[06:43:58] <tty2> ssl use varible was set
[06:44:11] <f3ew> Hmmm, master.cf ?
[06:44:24] <deface> tty2: dont think so
[06:44:29] <f3ew> also, urn off verbose mode
[06:44:36] <f3ew> It makes life difficult for us
[06:44:38] <tty2> deface: i can show you the eix output if youd like
[06:44:44] <deface> please
[06:44:53] <deface> eix postfix | wgetpaste
[06:45:20] <tty2> deface: http://rafb.net/p/FufOL591.html
[06:45:55] <tty2> and im not sure how to turn off verbose mode
[06:46:21] <f3ew> you have an extra -v in master.cf
[06:46:23] <f3ew> or to
[06:46:26] <f3ew> two*
[06:46:28] <deface> mysap & postgres ?
[06:46:30] <deface> mysql*
[06:46:31] <tty2> kk
[06:47:01] <f3ew> Nov 14 01:24:22 [postfix/smtp] warning: TLS has been selected, but TLS support is not compiled in
[06:47:01] <f3ew> Nov 14 01:24:22 [postfix/qmgr] 2644D4A6C: from=<>, size=15280, nrcpt=1 (queue active)
[06:47:01] <f3ew> Nov 14 01:24:22 [postfix/smtp] warning: TLS has been selected, but TLS support is not compiled in
[06:47:05] <f3ew> From the logs
[06:47:08] * f3ew points
[06:47:15] <tty2> ok i took out the extra -v i added earlier
[06:47:19] <deface> tty2: what does emerge -pvDNu postfix | wgetpaste  .. look like
[06:47:20] <f3ew> Lines 30 and 32
[06:47:30] <f3ew> deface, don't need it
[06:47:30] <tty2> f3ew: hmm wonder why it isnt compiled in?
[06:47:45] <tty2> deface: one sec ill check for ya
[06:47:48] <f3ew> The relevant lines were obscured by the verbosity
[06:47:49] <Ashwin> wanna set up dovecot proxy any how good howto? how
[06:47:56] <f3ew> Ashwin #dovecot
[06:48:00] <Ashwin> can postfix sleep for 10 sec after a particular connection is completed? how
[06:48:15] <deface> why would it sleep
[06:48:23] <f3ew> http://www.postfix.org/postconf.5.html#sleep
[06:48:31] <tty2> f3ew: the questin is how to compile in tls i suppose must be missing a use case
[06:48:37] <f3ew> also, what about persistent connections
[06:48:45] <deface> latta dee, tty2
[06:48:55] <f3ew> tty2, a USE flag, yes
[06:48:59] <tty2> deface: http://rafb.net/p/EvrR8F36.html
[06:49:04] <f3ew> USE=tls IIRC
[06:49:10] <deface> hmm
[06:49:39] <tty2> f3ew: postfix doesnt have a tls use varible that i see
[06:49:49] <deface> its ssl, not tls
[06:50:04] <skullone> hey all, im an exim person myself, but im undertaking a project to build a pretty big pair of e-mail app/relay servers to handle about 50,000 user's
[06:50:09] <tty2> ssl is compiled in as you can tell from what i pasted though
[06:50:26] <deface> tty2: is ssl in make.conf or packages.use ?
[06:50:39] <tty2> deface: make.conf
[06:50:51] <Ashwin> i have multiple postfix from which 1 is only to relay to yahoo.com domain i want it to send only 2 mails and then sleep for 10-15 secs
[06:50:58] <skullone> we have about a dozen windows mail servers, all funneling mail through some internal relay/spam-virus filters to then go outside to the world and do some smart routing
[06:51:06] <deface> ive got 8 gentoo postfix servers in production .. no problem w/ tls
[06:51:26] <skullone> im finding Exim to perform poorly when message queues get very large (10,000+ messages)
[06:51:31] <tty2> deface: i dont doubt that i did somethign wrong at some stage.. the question where and how to fix it :)
[06:51:39] <deface> yup
[06:51:50] <skullone> does Postfix handle large queus very well?
[06:51:56] *** Ashwin is now known as Assshwin
[06:52:02] <deface> skullone: what are the server specs ? and why are there 10k messages in queue
[06:52:06] <deface> learn how to control spam my friend
[06:52:38] <skullone> its internal mail, going out to the internet
[06:52:44] <skullone> its not an inbound filter  =/
[06:52:57] <skullone> this is all outbound user mail, and its 99.9% not spam
[06:52:57] <deface> tell your users to pick up a phone .. :)
[06:53:07] *** Fr0zen_ has quit IRC
[06:53:08] <skullone> id like to  :)
[06:53:20] <deface> its really based on server specs, as far as load handling
[06:53:48] <skullone> i have 2x dell 2950's.. freebsd 6.2, exim 4.4x if i recall, 4GB ram each, 15k SAS disks, quad core xeons
[06:54:24] <skullone> exim is known not to handle large queues well, and i can make exim use a fallback server which can handle retries more elegantly
[06:54:47] <skullone> was wondering if postfix would work well as the retry delivery server
[06:54:53] <deface> i've never had 10k messages in queue, but i go through 300k messages a day on 3 of my servers
[06:55:50] <deface> those 3 are quadcore xeons, w/ 12gb ram .. poweredge 2900s
[06:55:52] *** wei has left #postfix
[06:57:18] <tty2> so have i exhausted everyones suggestions?
[06:57:28] <deface> never
[06:57:34] <tty2> lol
[06:57:48] <tty2> Im all ears if you have any other suggestions
[06:57:51] <deface> postconf -n output ?
[06:57:57] <tty2> i suppose it could always be a postfix bug
[06:58:06] <tty2> deface: i posted it earlier but ill repost one sec
[06:58:45] <skullone> deface: id love to have a smaller queue, but now that many mail servers greylist, or behave poorly, and the amount of outbound mail we do, its hard to avoid
[06:59:10] <deface> thats true
[06:59:11] <tty2> deface: http://rafb.net/p/pfeUf340.html
[07:00:12] <skullone> i suppose i could run another relay box or two... seperate the queus more
[07:00:20] <skullone> exim otherwise does a great job
[07:00:29] <deface> command_ config_ daemon_ data_ arent needed
[07:00:41] <deface> inet_interfaces = all is redundant .. it listens on all by default
[07:00:51] <deface> sample_dir = not needed
[07:02:18] <tty2> should i remove them? or is it irrelevant?
[07:03:08] <deface> # for now
[07:03:27] <deface> 64bit ?
[07:03:31] <tty2> i cant find a command_config_* in main.cf is that somewhere else?
[07:03:34] <tty2> yes its a 64bit box
[07:03:43] <deface> command_path
[07:04:17] <deface> those are only necessary if the paths are not default
[07:04:39] <tty2> deface: i dont see a command_path* in main.cf either
[07:04:59] <deface> command_directory = /usr/sbin
[07:05:00] <deface> sorry ..
[07:05:29] <tty2> deface: ok i commented those out
[07:05:41] <deface> reload
[07:05:58] <tty2> deface: i did, didnt fix the problem though
[07:06:10] <deface> didnt say it would
[07:06:40] <tty2> i know
[07:06:42] <tty2> just saying :)
[07:09:46] * tty2 is starting to see a postfix bug report in his future
[07:09:57] *** josinalvo__ has quit IRC
[07:13:43] <deface> nah
[07:14:04] <tty2> deface: not sure if this is relevant but this is all i could find on google: http://osdir.com/ml/linux.distributions.lunar.general/2005-12/msg00018.html
[07:14:41] <deface> 2 Dec 2005 00:18
[07:14:46] <deface> 12*
[07:15:24] <tty2> oh
[07:15:27] <tty2> didnt see the date
[07:15:29] <tty2> :)
[07:15:47] <deface> thereis smtp_use_tls, and smtpd_use_tls
[07:15:48] <tty2> deface: i recompiled postfix just for good measure without any positive effect
[07:15:50] <deface> your using smtp_
[07:15:53] <deface> not smtpd
[07:16:00] <tty2> should i use smtpd_?
[07:16:04] <deface> yup
[07:16:28] <tty2> deface: their both there
[07:16:34] <tty2> atleast in main.cf
[07:16:38] <tty2> they were both there already
[07:16:45] <deface> ahh .. i see it @ bottom now
[07:16:59] <tty2> deface: keep in mind the log seems to be complaining tht TLS is specificed int he config but not compiled it
[07:17:02] <tty2> *in
[07:17:15] <deface> Nov 14 01:26:57 [authdaemond] failed to connect to mysql server (server=mysql.example.com, userid=admin): Unknown MySQL server host 'mysql.example.com' (1)
[07:17:24] <deface> lol
[07:18:04] <deface> anything on emerge -avDNu world ?
[07:18:17] <deface> assuming ssl is in make.conf .. and not package.use
[07:18:28] <tty2> deface: where was that logfile error. true i didnt setup mysql yet but according to the instructions i didnt have to to test for tls presence
[07:18:44] <deface> http://rafb.net/p/7zrs5j54.html
[07:18:45] <tty2> it is in make.conf .. checking now on the emerge command...
[07:18:53] <deface> line 57
[07:19:19] *** Haris1 has quit IRC
[07:19:23] <deface> saslauthd might not be correct
[07:19:58] <tty2> nothing came up with the emerge command
[07:20:01] <tty2> everything is up to date
[07:22:56] *** Fallenou has joined #postfix
[07:22:58] <deface> hmms
[07:23:26] <tty2> its driving me bonkers :)
[07:23:37] <deface> emerge --info && cat /etc/portage/package.use | wgetpaste
[07:25:01] <tty2> http://rafb.net/p/5F4nal38.html & http://rafb.net/p/eG60mW50.html
[07:25:07] <deface> pidgin?
[07:25:13] <Assshwin> how can i inject a mail via maildrop to the queue
[07:25:30] <tty2> deface: yes, im not ont he box with postfix right now obviously
[07:25:56] *** Fallenou has quit IRC
[07:26:07] <deface> tru
[07:27:45] <deface> im wondering if its cause you chose both post & my sqls ..
[07:27:46] <deface> mail-mta/postfix                mysql sasl ssl vda
[07:27:49] <deface> my use flags for postfix
[07:28:24] <deface>  Installed versions:  2.5.5(14:06:17 10/17/08)(ldap mysql pam sasl ssl vda -cdb -dovecot-sasl -hardened -ipv6 -mailwrapper -mbox -nis -postgres -selinux)
[07:28:41] <tty2> not sure why that would be a problem.. but i can change it to just mysql if need be
[07:31:18] <tty2> deface: maybe the vda flag is important?
[07:31:22] <tty2> no idea what it is
[07:31:28] <deface> virtual delivery agent
[07:31:36] <tty2> deface: anything to do with TLS?
[07:31:43] <deface> Adds support for virtual delivery agent quota enforcing
[07:31:46] <deface> nope
[07:32:03] <tty2> hmm well let me try taking out postgresql and see if it helps.. doubt it though
[07:32:16] <deface> yeah, definately odd
[07:32:51] <tty2> its looking more and more like a bug to me
[07:33:01] <deface> grep tlsmgr /etc/postfix/master.cf
[07:34:34] <tty2> deface: that returned: "tlsmgr    unix  -       -       n       1000?   1       tlsmgr"
[07:34:47] <f3ew> tlsmgr is always present in master.cf
[07:34:52] <deface> yah
[07:34:54] <f3ew> It just doesn't get invoked without ssl
[07:35:00] *** antdedyet has quit IRC
[07:35:57] <tty2> think this is a bug that needs submitting?
[07:36:02] <deface> nope
[07:36:11] <deface> its isolated to your box
[07:36:13] <deface> hence my 8
[07:36:13] <tty2> lol your a persistant bugger huh :)
[07:36:18] <deface> yup
[07:36:41] <tty2> well im not going anywhere.. well see if postgres being removed helps in a few.. lol.. but it seems were running low on ideas :)
[07:36:52] <deface> never
[07:38:43] <tty2> deface: lol seems you were right
[07:38:50] <deface> and you have done a 'reload' ?
[07:38:53] <deface> ahh
[07:38:55] <tty2> deface: removing the postgresql use keyword odly enough fixed it
[07:38:58] <deface> nice
[07:39:03] <deface> now i'd file a bug against that
[07:39:13] <tty2> deface: yup thats a gentoo sided bug though
[07:39:15] <deface> but i dont know anyone whose used both
[07:39:27] <deface> usually  1 or the other
[07:39:50] <tty2> deface: i prefer postgresql but because not everything supports it i have both use varibles active
[07:40:16] <deface> i prefer my, cause everything does support it :)
[07:40:29] <tty2> deface: thats certainly one reason to go with it :)
[07:40:49] <deface> http://svn.fluxlabs.net/postfix/trunk/
[07:40:51] <deface> im headed to bed
[07:40:55] <deface> but thats my svn repo for my postfix configs
[07:41:24] <deface> i'd remove the hold headers, unless you setup mailscanner
[07:41:27] <tty2> deface: thanks a lot for all your help
[07:41:33] <deface> np
[07:41:38] <deface> ttyl tty2
[07:41:39] <deface> ha
[07:41:41] <tty2> see ya
[07:41:44] <tty2> lol
[07:44:44] *** amrit|wrk is now known as amrit
[07:47:22] *** loddafni1 has joined #postfix
[07:58:52] *** deface has quit IRC
[07:59:40] *** Haris1 has joined #postfix
[08:00:00] *** deface has joined #postfix
[08:00:17] *** deface is now known as Guest24095
[08:00:48] *** Southron has quit IRC
[08:01:12] *** hparker has quit IRC
[08:05:55] *** |_Knoedel_| has joined #postfix
[08:06:47] *** Guest24095 is now known as deface
[08:10:11] *** deface is now known as deface2
[08:11:46] *** deface2 is now known as deface
[08:12:00] *** sophokles has joined #postfix
[08:27:50] *** tty2 has quit IRC
[08:28:07] *** mdvz0r is now known as MDVz0r
[08:28:40] <MDVz0r> does someone know if it is possible to store incoming mails as usual and relay these mails to an other server at the same time?
[08:29:50] <growltiger> sure
[08:33:12] <MDVz0r> growltiger: i've been searching for a solution, but was unable to find one so far
[08:33:32] <MDVz0r> could you explain or tel me where to look?
[08:33:45] <growltiger> i didnt say i knew how
[08:33:51] <growltiger> i just know you can
[08:33:53] <MDVz0r> right
[08:34:01] <growltiger> maybe use aliases
[08:34:25] <growltiger> blah: blah at blah dot com blah at otherblah dot com
[08:34:27] <MDVz0r> well, that would be a lot of work with 500 addresses
[08:37:58] *** Motoko-chan has quit IRC
[08:39:54] *** wei has joined #postfix
[08:40:58] <sysmonk> !always_bcc MDVz0r
[08:40:59] <knoba> sysmonk: Error: "always_bcc" is not a valid command.
[08:41:02] <sysmonk> damn
[08:41:04] <sysmonk> !always_bcc
[08:41:05] <knoba> sysmonk: "always_bcc" : a configuration parameter in the main.cf: Optional address that receives a "blind carbon copy" of each message that is received by the Postfix mail system.
[08:41:06] <sysmonk> MDVz0r: ^^
[08:41:34] *** rmayorga has quit IRC
[08:41:43] <MDVz0r> sysmonk: thanks, i'll take a look at it
[08:42:00] *** antdedyet has joined #postfix
[08:57:08] *** wei has quit IRC
[08:58:57] *** MDVz0r is now known as mdvz0r
[09:02:05] *** githogori has joined #postfix
[09:03:23] *** phnord has joined #postfix
[09:04:17] *** Spec has quit IRC
[09:06:32] *** Spec has joined #Postfix
[09:08:07] *** pitakill has quit IRC
[09:13:21] *** Verilium has quit IRC
[09:13:29] *** mdvz0r is now known as MDVz0r
[09:16:39] *** Verilium has joined #postfix
[09:41:02] *** madrescher has joined #postfix
[09:41:11] *** brancaleone has joined #postfix
[09:44:21] *** weedar has joined #postfix
[09:48:30] *** brancaleone has quit IRC
[09:57:29] *** war9407 has joined #postfix
[09:57:42] *** amrit is now known as amrit|zzz
[10:01:24] *** rmayorga has joined #postfix
[10:04:30] *** Assshwin has quit IRC
[10:08:12] *** tty2 has joined #postfix
[10:09:21] *** usm88 has joined #postfix
[10:10:14] *** usm88 has quit IRC
[10:16:22] *** denis_ has joined #postfix
[10:20:07] *** sypher has joined #postfix
[10:21:03] *** Tapout has joined #postfix
[10:21:29] <Tapout> Anyone recall the method to 'test' or verify that mysql-* files in /etc/postfix are working correctly?  I forget, but i know it exists
[10:21:41] <jduggan> postmap -q
[10:22:00] <jduggan> !postmapq
[10:22:02] <knoba> jduggan: "postmapq" : You can check your lookups with the postmap command. Example: if you defined "transport_maps = mysql:/etc/postfix/transport.cf" you may check this mapping by running "postmap -q domain.com mysql:/etc/postfix/transport.cf" and see if it works.
[10:22:32] <Tapout> thank you
[10:28:18] *** arj has joined #postfix
[10:29:13] <arj> hi
[10:29:13] <arj> i tried to use courier-authdaemon with postfix, however, it does not work properly
[10:29:17] <arj> does not work means:
[10:30:48] <arj> that when i connect smtpd for sending an email the following error message occurs in mail.log
[10:30:49] <arj>  warning: SASL authentication failure: cannot connect to Courier authdaemond: Too many levels of symbolic links
[10:31:04] <arj> thus, I checked my symbolic link structure for chroot-env
[10:31:52] <arj> which in fact is:
[10:31:52] <arj> # ls -l /var/spool/postfix/var/run/courier/
[10:31:52] <arj> lrwxrwxrwx 1 root root 28 2008-11-01 13:30 authdaemon -> /var/run/courier/authdaemon
[10:32:27] <arj> and
[10:32:27] <arj> # ls -l /var/run/courier/authdaemon/
[10:32:27] <arj> srwxrwxrwx 1 root root 0 2008-11-12 17:15 socket
[10:32:36] <arj> has anyone any idea what goes wrong?
[10:32:45] <arj> smtpd IS chrooted
[10:32:54] <arj> i can pastebin my master/main if needed
[10:33:20] <arj> would you otherwise recommend using cyrus? *g*
[10:36:31] <Tapout> what is the parameter to bind postfix to a certain ip?
[10:36:35] <Tapout> it's 0.0.0.0:25 right now
[10:37:45] <vice-versa> inet_interfaces
[10:43:10] <arj> did I ask something wrong?
[10:43:24] <arj> or is there no one to be able to help me?
[10:43:32] <arj> do i ask to much sh*** ?
[10:43:41] <arj> (this is meant for real...)
[10:46:34] *** wei has joined #postfix
[10:46:51] *** gukk_devel has quit IRC
[10:47:07] *** gukk_devel has joined #postfix
[10:52:10] <MDVz0r> does anyone know how i can rewrite "email.domain.tld at virtualdomain dot tld" to "email at domain dot tld" ?
[10:54:08] *** CrazyFoam has quit IRC
[10:54:08] *** goldfischli has quit IRC
[10:54:08] *** _mavrick61 has quit IRC
[10:54:08] *** javamonger has quit IRC
[10:54:08] *** lunaphyte_ has quit IRC
[10:54:08] *** hackeron has quit IRC
[10:54:08] *** Rockj has quit IRC
[10:54:08] *** Slashman has quit IRC
[10:54:08] *** Signum has quit IRC
[10:54:08] *** bda has quit IRC
[10:54:08] *** Nockian has quit IRC
[10:54:08] *** Roobarb has quit IRC
[10:54:08] *** Tabmow has quit IRC
[10:54:08] *** sona has quit IRC
[10:54:08] *** cafuego has quit IRC
[10:54:08] *** stockholm has quit IRC
[10:54:09] *** sirio has quit IRC
[10:54:09] *** Zerberus has quit IRC
[10:54:09] *** Izlots has quit IRC
[10:54:09] *** zamba has quit IRC
[10:54:28] *** goldfischli has joined #postfix
[10:54:28] *** _mavrick61 has joined #postfix
[10:54:28] *** hackeron has joined #postfix
[10:54:28] *** javamonger has joined #postfix
[10:54:28] *** lunaphyte_ has joined #postfix
[10:54:28] *** Rockj has joined #postfix
[10:54:28] *** CrazyFoam has joined #postfix
[10:54:28] *** Slashman has joined #postfix
[10:54:28] *** Nockian has joined #postfix
[10:54:28] *** Izlots has joined #postfix
[10:54:28] *** Signum has joined #postfix
[10:54:28] *** sona has joined #postfix
[10:54:28] *** zamba has joined #postfix
[10:54:28] *** stockholm has joined #postfix
[10:54:28] *** Zerberus has joined #postfix
[10:54:28] *** Tabmow has joined #postfix
[10:54:28] *** cafuego has joined #postfix
[10:54:28] *** Roobarb has joined #postfix
[10:54:28] *** sirio has joined #postfix
[10:54:28] *** bda has joined #postfix
[10:58:23] <Tapout> How should we handle : mail_extra_groups  ?  I noticed that by default in debian, it's set to ;   mail_extra_groups=mail
[11:00:00] *** Verilium has quit IRC
[11:00:51] *** arj has left #postfix
[11:01:24] <Tapout> hrmm, I set  ...   listen = 216.32.68.3    <-- in dovecot, restarted.. yet it still listens on   0.0.0.0:113
[11:06:39] <Tapout> hah
[11:06:42] <Tapout> 113 = inetd
[11:06:44] <Tapout> ident
[11:06:47] <Tapout> dummy
[11:10:31] <xpoint> dovecot -n
[11:16:30] <Tapout> Thanks xpoint, damn I had it working.. I just was checking :113  :)
[11:16:36] *** wei has left #postfix
[11:18:01] *** wei has joined #postfix
[11:20:06] *** mark-use has joined #postfix
[11:20:26] <AllenJB> !mpflogsumm
[11:20:26] <knoba> AllenJB: "mpflogsumm" : a pflogsumm metalog howto, See: http://linuxnet.ca/postfix/pflogsumm_metalog.html
[11:24:44] <_bt> hi postfix people
[11:24:47] <_bt> i have a slight problem
[11:24:53] <_bt> i have 28 messages sitting in my mailq
[11:24:56] <_bt> i had a DNS error
[11:25:02] <_bt> and the messages show
[11:25:05] *** madrescher has quit IRC
[11:25:06] *** javamonger has quit IRC
[11:25:23] <_bt> status=deferred (delivery temporarily suspended: Host or domain name not found. Name service error for name=xxx.xxx type=MX: Host not found, try again)
[11:25:32] <_bt> i have fixed the DNS problem now
[11:25:37] <_bt> and i can resolve the MX for the domain
[11:25:41] <_bt> i have restarted postfix
[11:25:44] <_bt> and done mailq -q
[11:25:53] <_bt> however, the same deffered messages show
[11:25:57] <_bt> and that the MX can not be found
[11:26:03] <_bt> does anyone have any suggestions?
[11:30:20] <_bt> fixed it by restarting networking.
[11:34:27] *** adam has joined #postfix
[11:34:57] *** adam is now known as Guest88565
[11:42:27] *** UltraCool has joined #postfix
[11:55:15] *** pirho has joined #postfix
[12:01:30] *** cpm has joined #postfix
[12:04:45] *** keffer has quit IRC
[12:04:47] *** keffff has joined #postfix
[12:05:30] *** gridl0ck has joined #postfix
[12:10:14] *** Tykling has joined #postfix
[12:10:21] *** denis_ has quit IRC
[12:13:04] *** BuenGenio has joined #postfix
[12:16:17] *** spitfirekdv has joined #postfix
[12:20:20] <spitfirekdv> Hi all! I have a problem with relay_recipients
[12:20:25] <spitfirekdv> http://pastebin.com/m505b4a4f
[12:23:20] *** s0what has joined #postfix
[12:23:23] *** Kako has joined #postfix
[12:23:33] *** radius has quit IRC
[12:24:55] *** Guest88565 has quit IRC
[12:32:47] <spitfirekdv> why relay_recipients.cf.db doesn't change after postmap?
[12:37:49] *** non-sequitir has quit IRC
[12:37:51] *** denis_ has joined #postfix
[12:43:16] *** gcleric has joined #postfix
[12:45:02] *** Juspion has joined #postfix
[12:45:35] *** gcleric has quit IRC
[12:48:31] *** Lap_64 has quit IRC
[12:50:59] *** gcleric has joined #postfix
[12:56:52] *** Juspion has quit IRC
[12:57:32] *** wei has left #postfix
[13:01:59] *** ming_zym has joined #postfix
[13:04:32] *** cpm has quit IRC
[13:04:58] *** non-sequitir has joined #postfix
[13:05:47] *** |_Knoedel_| has quit IRC
[13:06:44] *** cpm has joined #postfix
[13:08:41] *** madrescher has joined #postfix
[13:13:46] *** Orchun has joined #postfix
[13:17:11] *** gutocarvalho has quit IRC
[13:22:25] *** pirho has quit IRC
[13:23:51] *** jens_ has joined #postfix
[13:24:02] *** pirho has joined #postfix
[13:39:38] *** jense has quit IRC
[13:56:56] *** madrescher has quit IRC
[13:57:37] *** madrescher has joined #postfix
[13:58:36] *** madrescher has quit IRC
[14:01:46] *** Orchun has quit IRC
[14:06:37] *** gutocarvalho has joined #postfix
[14:07:28] *** rsdvd has joined #postfix
[14:09:14] <rsdvd> HI All....can anyone tell me if it is possible to re-process a users mailbox?  I have some users who have their mail re-directed to a differnet server using Transport maps......but due a an error the mail was delivered to a local mailbox instead of the transport SMTP.
[14:09:14] *** ming_zym has quit IRC
[14:11:51] <lunaphyte_> if the mail has been delivered, then postfix is done.
[14:12:34] *** ming_zym has joined #postfix
[14:13:42] <rsdvd> lunaphyte_ : thanks!  can you think of any easy way for me to 're-send' them from the mailbox so they get re-procesed by the virt-users table and transport map?
[14:15:00] *** Verilium has joined #postfix
[14:16:09] <f3ew> mutt
[14:20:14] <rsdvd> never used mutt - I guess I have some more reading to do!  thanks!
[14:23:20] *** aronofsky has joined #postfix
[14:24:19] <aronofsky> hi, I got a problem, i need, for a given mail adress, th authorize mail from certain domain et to send an auto reply for other domains telling to write to an alternative adress ... is there any wayto do that ?
[14:24:27] *** eanxgeek has quit IRC
[14:24:41] *** eanxgeek has joined #postfix
[14:29:18] <aronofsky> dont know if im clear here ...
[14:29:30] <f3ew> !relocated
[14:29:31] <knoba> f3ew: Error: "relocated" is not a valid command.
[14:29:35] <f3ew> !relocated_maps
[14:29:36] <knoba> f3ew: "relocated_maps" : a configuration parameter in the main.cf: Optional lookup tables with new contact information for users or domains that no longer exist. The table format and lookups are documented in relocated(5).
[14:29:47] <f3ew> See thast
[14:31:27] *** sona has quit IRC
[14:31:29] * cpm can't see f3ew
[14:31:38] * f3ew is invisible
[14:32:02] *** Bero has joined #postfix
[14:32:22] *** Bero is now known as Berobero
[14:32:41] <Berobero> need little help on content filtering
[14:32:49] <Berobero> header_checks
[14:33:01] <Berobero> could not find answer on linux portals
[14:38:46] <Berobero> can we use header_checks_size_limit ?
[14:39:00] <f3ew> no
[14:39:25] <Berobero> I would like to limit the To: field recipients by 5 only
[14:39:29] <Berobero> any way to do it?
[14:40:17] <f3ew> Uh?
[14:40:23] <Berobero> this is to avoid mistakenly inserting all recipients to TO: field instead of BCC:
[14:40:34] *** gcleric has quit IRC
[14:41:25] <f3ew> Use a regexp
[14:41:34] *** sona has joined #postfix
[14:41:43] <aronofsky> anyone about the problem i submit, i search the postfix doc but didn't find anything that could answer that specific problematic ?
[14:43:04] <f3ew> !relocated_maps
[14:43:05] <knoba> f3ew: "relocated_maps" : a configuration parameter in the main.cf: Optional lookup tables with new contact information for users or domains that no longer exist. The table format and lookups are documented in relocated(5).
[14:43:09] <f3ew> aronofsky I told you
[14:44:42] <aronofsky> f3ew: relocated maps ,
[14:44:44] <aronofsky> ?
[14:44:53] <Berobero> f3ew: thanks vm. I am now reading extra docs re regexp however do not have a clue how to build if-then for "if recipients in TO: field > 5".. could you pls guide me on that..
[14:45:43] <Berobero> I gotta find the variable for "# of recipients" so I could do the rest
[14:46:25] <aronofsky> f3ew: i just take a look, that could be ok, but you cant activate the bounce/message on for certain FROM domain ?
[14:46:38] <aronofsky> f3ew: of more precisly disable it for a specific domain ?
[14:49:34] <aronofsky> f3ew: because what i want to do is enable mail delivery to that box for my company domain dans enable the bounce/message function for all others domains ,
[14:50:14] *** Trengo has joined #postfix
[14:51:33] <Berobero> can I use such syntax ?
[14:51:39] <Berobero> .. /^To: >5 REJECT too many recipients
[14:52:48] <xpoint> header test is pr recipient
[14:53:21] <xpoint> To: is in body not in header
[14:53:58] <Berobero> but I can REJECT or REDIRECT just the same way. Now only to replace the test as "if recipients more than 5"
[14:54:31] <xpoint> it needs a policyd server
[14:54:32] <Berobero> ../^To:xx at yy dot org REDIRECT aaa at bb dot com
[14:54:38] <Berobero> this wworks fine
[14:55:00] <Berobero> if only had header_checks_size_limit or similar stuff :)
[14:55:24] <xpoint> 42
[14:55:55] *** s0what has quit IRC
[14:56:05] *** deadpigeon has joined #postfix
[14:56:09] <xpoint> it cant be done in policyd server anyway, since policy is pr recipient
[14:56:31] <xpoint> there is always just one
[14:57:48] <xpoint> so if a sender sens to 1000000 users on the same host, policy will be called 1000000 for just this one email :)
[14:58:00] *** brancaleone has joined #postfix
[15:00:17] *** agentbleubleu has joined #postfix
[15:00:47] <aronofsky> f3ew: am i right, im reading the doc but it seems you cant do such specifications N?
[15:01:45] <agentbleubleu> HI, need to setup ssl on email. I have the Virtual host on the server secure with ssl from godaddy, but now I need to set up ssl on email login for that same VH, can someone point me in the direction of a good how to?
[15:03:40] <f3ew> aronofsky, you could do stuff via check_recipient_access and restriction_classes
[15:04:10] <f3ew> xpoint he wants to avoid having > 5 addresses in the To header
[15:04:14] <f3ew> not in the envelope
[15:05:18] *** Kako has quit IRC
[15:05:56] *** k4z has joined #postfix
[15:10:01] *** telpochyaotl has joined #postfix
[15:11:41] *** meghanand has left #postfix
[15:18:28] *** james12 has joined #postfix
[15:18:29] <james12> hello
[15:18:56] <james12> how can I determine from the content-type if the mail has got attachments or not ? Is it enough to check the content-type for "multipart/mixed" ?
[15:19:05] <Berobero> f3ew: yes exactly..
[15:19:11] *** james12 has quit IRC
[15:19:28] *** solairion has joined #postfix
[15:19:45] *** james12 has joined #postfix
[15:19:46] <james12> ups
[15:20:05] <james12> has someone answered my questions ? Ive closed my client :)
[15:20:24] <agentbleubleu> money offered for help with ssl on mail...
[15:20:57] *** rsdvd has left #postfix
[15:21:50] <solairion> Hello have you a good tutoriel to install postfix with mysql ? i have tried 5 install the server is always die
[15:21:55] *** saurabhb has quit IRC
[15:26:19] <solairion> If i kneel , you help me ?
[15:26:37] <Berobero> any suggestions? how to reject messages with recipients exceeding 5 by header_checks_?
[15:27:03] *** Mr_Freeze has joined #postfix
[15:27:31] <agentbleubleu> Berobero: spamassain
[15:27:33] <agentbleubleu> ?
[15:27:37] <xpoint> solairion, no one need to be helpfull in here, we all ignore /topic anyway :)
[15:28:13] <xpoint> spamassassin cant reject
[15:28:23] <Berobero> yeah, I fear..
[15:28:26] <agentbleubleu> anyone answer a few basic questions about TLS (SSL) on postfix? HOW Too?
[15:28:46] *** non-sequitir has quit IRC
[15:28:47] <xpoint> agentbleubleu, : see
[15:28:50] <xpoint> !sasl
[15:28:51] <knoba> xpoint: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.
[15:29:27] <agentbleubleu> thanks
[15:30:34] <Berobero> at least can someone tell me the variable for "# of recipients" in header_checks regexp
[15:32:52] <xpoint>  /^\@.*$[5]/ reject more then 5 recipient
[15:33:02] <Berobero> woww..
[15:33:04] <Berobero> tnks vm
[15:33:39] <xpoint> learn regexp :)
[15:33:56] <Berobero> I will. trying to find a handsome documentation on that
[15:33:59] <Berobero> cheers
[15:34:07] *** james12 has quit IRC
[15:34:45] <xpoint> Results for regexp: 1. Regular expression - Wikipedia, the free encyclopedia: http://en.wikipedia.org/wiki/Regular_expression | 2. Regular-Expressions.info - Regex Tutorial, Examples and Reference ...: http://www.regular-expressions.info/ | 3. Jakarta Regexp - Jakarta Regexp: http://jakarta.apache.org/regexp/
[15:36:32] <Berobero> appreciated!
[15:37:50] *** UltraCool has quit IRC
[15:38:48] *** shinao1 has joined #postfix
[15:39:28] *** shinao1 has quit IRC
[15:42:52] <Berobero> xpoint: seems not working. is it especially for TO: field ?
[15:43:19] *** suprsonic has joined #postfix
[15:44:04] *** EoN has quit IRC
[15:49:51] <solairion> i pay 10 euro to an install of postfix mysql
[15:51:05] <xpoint> one time fee ? :)
[15:51:23] <Berobero> weekly payments I reckon
[15:52:06] <solairion> Ten euro
[15:52:12] <solairion> i pay
[15:52:22] <solairion> no more
[15:52:51] <shasta> 10 euro for apt-get install postfix mysql? ;-)
[15:52:56] <shasta> generous! :>
[15:52:58] <solairion> no
[15:52:59] * jelly starts at 35EUR/hr, two hours minimum
[15:53:05] <solairion> to config
[15:53:39] <xpoint> shasta, dpkg --configure -a :)
[15:53:40] <Berobero> xpoint: it does not work, I put 6 recipients in TO: field and all delivered
[15:53:48] *** m0f0x has joined #postfix
[15:55:17] <solairion> no interest ?
[15:55:20] <xpoint> shasta, apt-get remove postfix mysql --purge
[15:55:34] <xpoint> if he did not pay :=)
[15:55:46] <Berobero> :):) lol..
[15:55:58] <Berobero> a pretty secure deal
[15:56:11] <xpoint> solairion, want to be rooted ?
[15:57:54] *** donald has joined #postfix
[15:58:18] <Berobero> xpoint: /^\@.*$[5]/  not working.
[15:58:28] <Mr_Freeze> Hi, i got postfix running under Fedora Core 9 and when i do a testcommand i get this respond:
[15:58:29] <Mr_Freeze> testcommand: echo bla | mail -s test your at email dot com but i got this respond: postdrop: warning: unable to look up public/pickup: nu such file or directory. what is it trying to tell me?
[15:58:36] <Mr_Freeze> anyone here that can help me out?
[15:59:01] <Berobero> main.cf has "header_checks = regexp:/etc/postfix/header_checks
[15:59:08] <Berobero> reloaded postfix
[15:59:27] <Berobero> maybe /^To:\@.*$[5]/
[15:59:28] <Berobero> ???
[16:01:34] *** Southron has joined #Postfix
[16:01:51] <xpoint>  ^maillist[0-9]{2}\.dandomain\.dk$ a working example
[16:02:38] <Berobero> xpoint: it has to be specific for TO: field. so should I make it /^To:\@.*$[5]/
[16:02:39] <Berobero> ?
[16:03:05] *** sona has quit IRC
[16:03:09] <xpoint> dont know, i newer read docs :)
[16:03:17] <Berobero> smart!
[16:03:22] <shasta> not at all
[16:04:58] *** solairion has quit IRC
[16:05:13] *** uniwiz has joined #postfix
[16:05:42] <uniwiz> Hello, has anyone seen this type of an "error" in their log files
[16:05:43] <uniwiz> timed out while sending MAIL FROM
[16:06:18] <uniwiz> I got whole bunch of mail sitting in a queue with the above message, and after running postqueue -f, mail sets to be delivered and then jumps right back to the above message
[16:06:59] <Berobero> xpoint: what is this line for? what is the purpose ? ^maillist[0-9]{2}\.dandomain\.dk$
[16:07:51] <xpoint> the syntax can be used for your problem olso
[16:08:44] <shasta> oh my
[16:08:56] <shasta> you both need to read about regexps ;)
[16:10:15] *** rmayorga has quit IRC
[16:10:31] <xpoint> shasta, yes it does not hurt to learn more :)
[16:10:50] *** k4z has left #postfix
[16:12:53] <xpoint>  /^To:\ [\.*\ at \ dot *]{5}$/
[16:13:01] <shasta> still wrong :)
[16:13:22] <xpoint> its a try
[16:14:50] <Mr_Freeze> Question, if you change something in the main.cf file, do you need to restart/reload the postfix service to activate it?
[16:15:03] <suprsonic> reload
[16:15:18] <Mr_Freeze> aha okay, /etc/rc.d/init.d/postfix reload ??
[16:15:32] <suprsonic> postfix reload
[16:15:45] <Mr_Freeze> lol ok, lot easier :D thanks suprsonic
[16:15:54] <suprsonic> no worries
[16:16:20] *** MDVz0r is now known as mdvz0r
[16:18:25] *** sona has joined #postfix
[16:19:17] *** solairion has joined #postfix
[16:21:05] *** Mr_Freeze has quit IRC
[16:26:33] <xpoint> shasta, works without /  ?
[16:29:12] <xpoint> Berobero, tested as i writed it now ?
[16:33:07] <shasta> xpoint, that's not the point
[16:33:23] <shasta> you don't seem to distinguish between [] and ()
[16:34:50] <xpoint>  /^To:\ [\.*\ at \ dot *]{5}$/  < what needs to be changed here ?
[16:35:48] *** mdvz0r is now known as MDVz0r
[16:36:35] *** denis_ has quit IRC
[16:39:24] *** brancaleone has quit IRC
[16:45:15] *** Mrm-rf has joined #postfix
[16:51:20] *** MDVz0r is now known as mdvz0r
[16:51:33] <Berobero> xpoint: testing now
[16:51:43] *** rmayorga has joined #postfix
[16:53:16] *** F6F has joined #postfix
[16:53:41] *** littleboy has joined #postfix
[16:54:05] *** Tykling has left #postfix
[16:54:25] <littleboy> hey ppl ! l;) question. i have postfix/sql configuration ... aliases are stored in sql, and im using postfixadmin for domain/user administration
[16:54:50] <littleboy> is there a way, to have pop3 (standard mailbox... added via postfixadmin or direct through sql), and forward at the same time ?
[17:05:49] <Berobero> xpoint: still not working.. cant understand what wrong
[17:05:58] <Berobero> also restarted postfix
[17:06:47] <Berobero> shasta: what should be the correct syntax ? still not works
[17:07:23] <Berobero> not works >   /^To:\ [\.*\ at \ dot *]{5}$/
[17:07:48] *** UQlev has joined #postfix
[17:08:32] *** mdvz0r is now known as MDVz0r
[17:08:46] <xpoint> http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt here is some example on regexp olso, maybe just use as pcre to this one, i dont know diffrent on it
[17:13:06] *** ming_zym has quit IRC
[17:15:32] <sysmonk> f3ew: does your devdas nick have something to do with the 'devdas' movie?
[17:15:38] *** pitakill has joined #postfix
[17:15:55] *** verywiseman has quit IRC
[17:16:06] <sysmonk> littleboy: use an alias of user at domain dot com: user at domain dot com, forward at domain dot com
[17:17:13] <littleboy> sypher, /etc/aliases ?
[17:17:26] <littleboy> ops .. sorry.
[17:17:31] <littleboy> sysmonk, /etc/aliases ?
[17:17:32] <sypher> ah!
[17:17:35] <sypher> woke me up! :o
[17:17:36] <sypher> :(
[17:17:37] <littleboy> l;)
[17:18:12] <littleboy> sysmonk, i thought of that... but i don't know will it play nicely with my virtual_alias_maps config already working
[17:18:23] <littleboy> i cant afford to break something down.
[17:18:23] <uniwiz> littleboy, elitesecurity?
[17:18:36] <littleboy> elitesecurity ?
[17:18:42] <uniwiz> elitesecurity.org
[17:18:44] *** mark-use_ has joined #postfix
[17:18:48] <uniwiz> are you an user there?
[17:19:01] <littleboy> uniwiz, # ~ 200
[17:19:07] <littleboy> but don't go there anymore.
[17:19:13] <sysmonk> littleboy: if you're not using virtual domains, then /etc/aliases
[17:19:22] <sysmonk> if you're using virtual domains - then virtual_alias_maps
[17:19:26] <uniwiz> haha ma secam se da sam te video na ES kanalu jednom :-P
[17:19:39] <sysmonk> uniwiz: english
[17:19:51] <littleboy> sysmonk, im using virtual domains. everything is virtualized... and my aliases are basicly working ... but i need standard mailbox+alias ... so i keep a copy on mail server.
[17:20:03] *** John_Clay has joined #postfix
[17:20:19] <littleboy> uniwiz, l;) predpostavljo sam da si ... odavde negdje - sorry. will continue on english l;)
[17:20:23] <sysmonk> littleboy: you can always add an _additional_ alias map to virtual_alias_maps
[17:20:28] <xpoint> !always_bcc
[17:20:29] <knoba> xpoint: "always_bcc" : a configuration parameter in the main.cf: Optional address that receives a "blind carbon copy" of each message that is received by the Postfix mail system.
[17:20:29] *** spitfirekdv has quit IRC
[17:20:43] <sysmonk> i.e. virtual_alias_maps = hash:/etc/postfix/new_map, mysql:/etc/postfix/mysql_alias_maps.cf
[17:21:13] <John_Clay> I've got a quick question regarding virtual domains on mailman 2.15. I'm trying to alter the web address that appears at the bottom of all sent emails... and not having any luck.
[17:21:13] <littleboy> sysmonk, didn't know thats possible. and it will read hash map, then when it finishes, will read mysql maps ?
[17:21:13] <uniwiz> yeah :-)
[17:21:15] <xpoint> or better recipient_bcc_maps
[17:21:40] <sysmonk> littleboy: no. if it will find a needed match in the first map it will stop there
[17:21:45] <sysmonk> if it won't - it will go to the next one
[17:22:03] <littleboy> sysmonk, ok... thats cool. i think that will do the trick then.
[17:22:47] <littleboy> uniwiz, and ... who are you ? you had some other nick before ? although univiz sounds familiar too.
[17:23:05] <littleboy> sysmonk, thanks.
[17:24:35] <Berobero> xpoint: my concern is as advised, not to allow users to send messages with all recipients inserted to TO: field mistakenly. They should be inserted to BCC: field otherwise all recipients may see another
[17:26:00] <xpoint> make a header_check that remove any To: header (first step)
[17:26:16] <xpoint> and another with prepend a fake
[17:27:13] <Berobero> but need to allow sending individual messages. i.e. < 5 recipients
[17:27:17] *** mark-use__ has joined #postfix
[17:27:20] <Berobero> what a problem!!
[17:28:13] <Berobero> seems I'll have to spend the whole evening reading and learning that regexp thing :)
[17:28:29] *** tombar has joined #postfix
[17:34:23] *** niki has joined #postfix
[17:36:38] *** mark-use has quit IRC
[17:38:01] *** MDVz0r is now known as mdvz0r
[17:38:09] <Berobero> can anyone please check and verify this syntax  /^To:\ [\.*\ at \ dot *]{5}/
[17:41:27] *** mark-use_ has quit IRC
[17:47:51] *** Slashman has quit IRC
[17:48:26] *** mark-use_ has joined #postfix
[17:53:09] *** Slashman has joined #postfix
[17:55:56] *** Tykling has joined #postfix
[17:56:04] <Berobero> xpoint: /^To:\ [\.*\bero\.*] {2}$/ REJECT refused!
[17:56:09] <Berobero> anything wrong here?
[17:56:15] *** sypher has quit IRC
[17:57:34] <xpoint> space olso need to be excaped
[17:58:54] *** YedekNick962 has joined #postfix
[18:01:39] *** solairion has quit IRC
[18:03:39] *** mark-use has joined #postfix
[18:03:53] *** FrozenIRSSI has joined #postfix
[18:04:59] *** UQlev has quit IRC
[18:05:14] *** agentbleubleu has quit IRC
[18:07:00] <FrozenIRSSI> We're looking to do an e-mail newsletter with a ~2MB attachment to ~1000 recipients. Currently, when we attempted to send out this using postfix, it maxed out our pipe and made incoming connections from our customers fail and our website takes a serious performance hit.  Is there a way within postfix to protect against this? We already have max deliveries to one destination set to 1, but that doesn't keep our queue from being huge and
[18:07:17] *** BuenGenio has quit IRC
[18:07:26] *** mark-use__ has quit IRC
[18:08:44] <brd> FrozenIRSSI: limit the number of smtpd
[18:09:58] <FrozenIRSSI> where would i find what the current (or default) limit for that would be? We're using webmin to admin the postfix server and i'm still learning my way around it
[18:10:21] <brd> dunno, I recommend not using things like webmin
[18:10:32] <FrozenIRSSI> fair enough.
[18:11:19] <FrozenIRSSI> where would i check that in the config files then?
[18:12:33] *** tombar_ has joined #postfix
[18:13:33] <brd> master.cf
[18:14:09] *** tombar has quit IRC
[18:14:11] *** hparker has joined #postfix
[18:14:21] <brd> FrozenIRSSI: http://www.postfix.org/rate.html
[18:16:37] <FrozenIRSSI> oh. smtpd would be for incoming though, right? this server isn't dealing with incoming mail... just used to send mail via our website
[18:16:48] *** tombar__ has joined #postfix
[18:17:41] *** John_Clay has left #postfix
[18:18:26] *** phnord has quit IRC
[18:18:33] *** gk has quit IRC
[18:18:36] <brd> FrozenIRSSI: read the link for more info
[18:18:36] *** mark-use_ has quit IRC
[18:18:43] <FrozenIRSSI> alright i'm working on it
[18:18:54] <YedekNick962> !regexp
[18:18:55] <knoba> YedekNick962: Error: "regexp" is not a valid command.
[18:19:17] *** YedekNick962 has quit IRC
[18:19:37] *** githogori has quit IRC
[18:19:46] *** sophokles has quit IRC
[18:20:21] *** Tykling has left #postfix
[18:22:09] *** tombar_ has quit IRC
[18:22:30] *** FrozenIRSSI has left #postfix
[18:26:05] *** madrescher has joined #postfix
[18:28:49] *** Berobero has quit IRC
[18:29:27] *** mark-use has quit IRC
[18:39:16] *** havvg has joined #postfix
[18:45:06] *** _fury has joined #postfix
[18:45:20] <_fury> (possibly) silly question, can the command line 'sendmail' from postfix be used to send an attachment?
[18:50:21] <sekhmet> _fury: You'd have to do the attachment encoding yourself, and the requisite multipart headers, etc
[18:50:39] <_fury> yeah figured, I'll just use python for it, thanks :)
[18:54:47] <sysmonk> or use cat file | uuencode file | mail ...
[18:54:47] <sysmonk> ;)
[18:58:57] *** sidh has joined #postfix
[18:59:04] <sidh> hello everybody
[18:59:12] <growltiger> hi!
[18:59:13] <growltiger> wb
[18:59:48] *** xpoint has quit IRC
[18:59:53] <sidh> i would like to know where in the postfix web site i can fin the different value for
[19:00:06] <sidh> accounts_result_attribute
[19:00:37] <sidh> the postfix search engine does't giva any answer
[19:02:33] *** weedar has quit IRC
[19:03:02] <sidh> i see it can take the Mailbox value but i would rather maildir  but it doesn't seem to recognize maildir value
[19:04:13] <suprsonic> what does it mean when an email is signed?
[19:04:14] *** weedar has joined #postfix
[19:04:18] *** muecke77 has joined #postfix
[19:10:13] <sidh> suprsonic: it is encrypted (or not) with a gpg key
[19:10:33] <sidh> or it contains a gpg fingerprint
[19:10:40] <suprsonic> thanks
[19:11:14] *** muecke77 has quit IRC
[19:12:13] <suprsonic> sidh, I have altermime appending a disclaimer to every outbound email.
[19:12:37] *** TGM has joined #postfix
[19:13:04] <suprsonic> a client with a barracuda spam filter rejects my messages that are replied messages that already have an appended disclaimer appended to them.
[19:13:45] <suprsonic> so if I create a message and send it, appends disclaimer, client recieves it... replies and I reply to that reply.
[19:13:53] <suprsonic> boom barracuda blocks it
[19:14:29] <sidh> i never had that problem , sorry for not helping you
[19:14:49] <suprsonic> do you use altermime?
[19:15:07] <TGM> can anybody help me with a spf setup?
[19:16:17] <hyper_ch> TGM: http://www.howtoforge.com/postfix_spf
[19:18:17] *** mofino has quit IRC
[19:18:37] *** muecke77 has joined #postfix
[19:19:08] *** devdas has joined #postfix
[19:19:29] *** Zeit|awy_ has quit IRC
[19:20:31] *** muecke77 has left #postfix
[19:20:34] *** Zeit|awy has joined #postfix
[19:24:31] <TGM> ty: hyper_ch
[19:24:52] <hyper_ch> TGM: :)
[19:24:55] *** xnixan_ has joined #postfix
[19:24:55] <hyper_ch> TGM: thank Falko :)
[19:25:16] <sidh> smtpd_sasl_path where to find a description of this variable
[19:26:19] <hyper_ch> sidh: hmmm.... postfix online manual?
[19:26:53] *** Southron has quit IRC
[19:28:03] <sidh> thanks
[19:40:31] *** devdas has quit IRC
[19:41:42] *** devdas has joined #postfix
[19:42:33] *** xnixan has quit IRC
[19:42:41] *** _Captain is now known as Captain
[19:43:02] *** T_G_M has joined #postfix
[19:51:48] *** donald has quit IRC
[19:55:05] *** TGM has quit IRC
[20:01:11] *** muecke77 has joined #postfix
[20:06:23] *** jens_ has quit IRC
[20:07:49] *** denis_ has joined #postfix
[20:10:22] <T_G_M> My SPF looks like this "v=spf1 a mx ptr -all" is this the right approach?
[20:13:33] <growltiger> sure
[20:14:28] <T_G_M> ty
[20:21:46] *** Mrm-rf has quit IRC
[20:21:56] *** xnixan_ has quit IRC
[20:24:08] *** rhalff has joined #postfix
[20:24:27] *** telpochyaotl has quit IRC
[20:25:43] *** githogori has joined #postfix
[20:26:23] *** xnixan_ has joined #postfix
[20:27:19] *** deface has quit IRC
[20:30:01] <skullone> hello postfix
[20:31:23] <devdas> lo
[20:32:11] *** edman007 has joined #postfix
[20:32:18] *** muecke77 has quit IRC
[20:32:28] <edman007> where do i get qshape? i have postfix installed bu no qshape...
[20:35:08] <devdas> Google
[20:35:16] <tty2> is there some sort of a website or other means tht lets me test to make sure my email server is not an openrelay?
[20:35:30] *** rouri has joined #postfix
[20:36:58] <brd> yes
[20:37:06] <brd> Google ;)
[20:37:28] <edman007> ahh...alright..found it
[20:38:37] <edman007> how aboue this, postfix seems to have some hard rate limit of 3 emails a second inbound, and i can't get my applications to go over that, i have changed the smtpd rate limit to zero (which should be no delay) and its still slow like that
[20:38:44] <edman007> s/aboue/about/
[20:40:55] <edman007> and qshape seems to be showing that my inbound queues are increasing slightly but it does not look like really a huge amount and it does go right down (i'm testing with local addresses)
[20:42:41] <edman007> i want to allow smtp to just fill up the queue and let postfix manage sending out the large volumes, and i know i can send faster then 3 per second
[20:43:44] <devdas> edman007: how many smtpd processes are you running?
[20:47:11] <edman007> devdas, ps only shows one...but my master.cf shows "smtp      inet  n       -       y       -       -       smtpd" which should make it 100
[20:47:48] <devdas> edman007: open more connections to Postfix then
[20:47:50] *** muecke77 has joined #postfix
[20:48:02] <devdas> you have one process injecting mail
[20:49:27] *** pa has quit IRC
[20:51:44] <edman007> devdas, yea, we have one process that we need to run fast, it opens up one connection and sends a lot of email, that has been benched against against a fake mailserver and it can send thousands of emails a second over one connection, but for some reason when it connects to our postfix server postfix decides that 3 per second is good, and that breaks everything for what we need
[20:53:12] *** loddafni1 has quit IRC
[20:53:34] <edman007> right now i'm benching by just calling sendmail in a look, and it shows the same problem (both on the local email server and when run on a server thats configured to send to the postfix server in question)
[20:55:33] *** rouri has quit IRC
[20:55:37] *** rouri has joined #postfix
[20:57:00] *** deface has joined #postfix
[20:57:22] *** deface is now known as Guest4457
[20:57:57] <brd> edman007: http://www.postfix.org/rate.html
[20:58:53] *** Guest4457 is now known as deface
[20:59:05] <edman007> brd, thanks
[20:59:26] *** deface is now known as Guest86773
[21:02:18] <devdas> edman007: does your fake server actually write to disk, and does it use one process per connection
[21:02:26] <devdas> Or is it multi-threaded/async?
[21:02:42] * devdas notes that behavious changes
[21:02:45] <devdas> behaviour
[21:03:41] <edman007> devdas, the fake server is just one process and just reads/writes to the network and gives the client all the right smtp codes and discards the emails (so it really just benches the client connecting to it)
[21:03:53] *** Guest86773 is now known as deface
[21:04:10] <edman007> what i want it postfix to accept something much larger then 3 emails per second, that is just slow
[21:04:25] <devdas> edman007: make multiple connections
[21:04:27] *** deface is now known as Guest54129
[21:04:33] <devdas> Seriously
[21:04:46] <edman007> why can't it be done with one connection?
[21:04:57] *** [reed] has quit IRC
[21:05:55] <devdas> Because one connection corresponds to one process
[21:06:12] <devdas> Postfix isn't multiplexing a single socket
[21:06:50] <devdas> you open one connection, Postfix fires up one smtpd child, and then you feed one message into it at a time (possibly with lots of recipients)
[21:08:05] <edman007> smtpd does not just put it in the queue and go to the next message?
[21:08:14] <devdas> It does
[21:08:26] <devdas> but smtpd will wait until the message is queued
[21:08:39] <edman007> ohh, and thats slow huh?
[21:08:53] *** Guest54129 is now known as deface
[21:08:57] <devdas> there is a disk write between . and the 250 OK
[21:09:01] <devdas> (Or was that 220)
[21:09:03] *** rhalff has quit IRC
[21:09:05] <devdas> no, 250
[21:09:20] <devdas> fork() is your friend
[21:09:26] *** deface is now known as Guest93136
[21:10:35] <edman007> alright, i'll look into that
[21:13:54] *** Guest93136 is now known as deface
[21:14:14] *** lunaphyte_ has quit IRC
[21:14:26] *** deface is now known as Guest74399
[21:14:50] *** miso has joined #postfix
[21:16:15] *** dp has joined #postfix
[21:16:20] *** rour has joined #postfix
[21:16:33] <dp> 451 4.3.5 Server configuration problem; -- how can I find out which configuration is the problem?
[21:17:17] <brd>  logs
[21:17:41] <dp> that came from the logs
[21:17:56] <dp> there's nothing in mail.err
[21:17:57] <devdas> See a warning: like
[21:18:00] <devdas> line*
[21:18:07] <devdas> Log mail.* to a single place
[21:18:54] *** Guest74399 is now known as deface
[21:19:25] *** deface is now known as Guest13190
[21:19:58] <dp> hrm.  seems that it can't talk to policyd. strange
[21:21:19] <dp> thanks!
[21:21:20] *** dp has left #postfix
[21:21:31] *** Guest13190 is now known as _deface
[21:22:10] *** berobero has joined #postfix
[21:22:24] *** littleboy has quit IRC
[21:22:27] <berobero> hello
[21:22:29] *** lunaphyte_ has joined #postfix
[21:22:44] *** _deface has left #postfix
[21:23:42] <berobero> can someone please correct : /^to:\ [\.*\ at \ dot *]{5}$ REJECT too many recipients
[21:23:49] <berobero> seems not working
[21:23:59] *** rouri has quit IRC
[21:28:05] <qbwdp> hello
[21:29:11] *** karrotx has joined #postfix
[21:29:25] <karrotx> in the whitelist file can i put 1.1.1.0/24 OK?
[21:29:38] *** amrit|zzz is now known as amrit|wrk
[21:30:10] <devdas> if you use cidr
[21:30:30] *** littleboy has joined #postfix
[21:31:22] <karrotx> ?
[21:31:36] <karrotx> i thought that was cidr
[21:32:23] <devdas> you can, if your map is cidr:/path/to/whitelist
[21:33:57] *** rour has quit IRC
[21:34:13] *** uniwiz has quit IRC
[21:34:20] *** muecke77 has quit IRC
[21:34:41] *** muecke77 has joined #postfix
[21:35:07] *** cpm has quit IRC
[21:35:07] *** confound_ has joined #postfix
[21:35:08] *** weedar has quit IRC
[21:35:19] <karrotx> and if i use hash:?
[21:37:38] <karrotx> also do i have to reload every time i make a change to the file and run postmap?
[21:37:51] *** T_G_M has quit IRC
[21:38:54] <devdas> if you use a hash, 1.1.1 is enough
[21:38:56] <devdas> no
[21:44:36] *** mitcheloc_laptop has joined #postfix
[21:45:14] *** pickcoder has joined #postfix
[21:45:54] *** confound has quit IRC
[21:49:21] *** tombar__ has quit IRC
[21:50:57] *** deftunix has joined #postfix
[21:52:29] <deftunix> hi all, who can i configure postfix to delivery mail throught remote mda and mta to relay mail to this mta?
[21:53:20] <pickcoder> deftunix: relayhosts
[21:53:25] *** eanxgeek has quit IRC
[21:53:33] <deftunix> and for MDA?
[21:53:34] <pickcoder> unless I don't understand your question
[21:53:38] *** muecke77 has quit IRC
[21:53:56] <pickcoder> mailbox_command
[21:54:12] <pickcoder> you can make it "remote" I'm sure
[21:55:59] <deftunix> have you got some example about it?
[21:58:05] *** shinao1 has joined #postfix
[21:58:10] <pickcoder> not really I'm not entirely sure what you want to do
[21:59:00] *** tty21 has joined #postfix
[21:59:09] <_fury> is it possible, while I have virtual domains and mailboxes and stuff, to set postfix to have a valid ssl cert for more than one domain name? ie I have mail.domain1.com, and mail.domain2.com, and users have email addresses like user at domain1 dot com and user at domain2 dot com, and they all connect via ssl to download their mail at mail.domain1.com and mail.domain2.com, but it's the same postfix server
[21:59:12] <_fury> I hope that made sense
[22:00:24] *** Knoedel2 has joined #postfix
[22:00:41] <mitcheloc_laptop> _fury: i dunno if postfix supports it, but i think at a minimum you have to have a seperate ip address for each ssl cert
[22:00:56] <_fury> yeah that is fine
[22:00:59] <_fury> I can do that
[22:01:19] *** dmoldovan has joined #postfix
[22:03:58] *** F6F has quit IRC
[22:04:07] <deftunix> _fury: you can use
[22:04:07] <dmoldovan> hello everybody
[22:04:11] <devdas> then yes
[22:04:15] <deftunix> ssl v3
[22:04:20] <dmoldovan> i've got a question, i wander if anyone could help
[22:04:23] *** xnixan_ has quit IRC
[22:04:27] <deftunix> with extension for multi domain ssl cert
[22:05:56] <_fury> deftunix: I don't think my ssl provider (my noc) supports that, no way to do it otherwise?
[22:05:59] <dmoldovan> basically we have a system that uses postfix to receive some files and writes them to the disk, then a script needs to read those files
[22:06:12] *** mitcheloc_lapto1 has joined #postfix
[22:07:25] <deftunix> _fury: with subjectalternative name
[22:09:30] <dmoldovan> basically those file have permissions set (r+w for the owner)
[22:09:32] <_fury> I'm talking about doing this without sslv3 at all, I just want to buy separate certs, is that possible? I'm not clear on whether your answer is yes or no?
[22:09:47] <dmoldovan> the script that polls them runs under apache
[22:09:58] <dmoldovan> and obviously the read returns nothing
[22:10:14] <dmoldovan> what would be the best policy to set permissions for apache to reach the files?
[22:10:23] <devdas> _fury: you can do it by specifying multiple smtpd instances in master.cf
[22:10:49] <devdas> dmoldovan: have your script log into IMAP and access the messages that way?
[22:11:43] <_fury> devdas: hmm. knowing that a) I don't really know too much about this :) and b) I followed this whole huge long guide to use mysql, virtual domains, mailboxes, postfixadmin, a whole bunch of other stuff and c) I'm using this to run multiple virtual domains
[22:11:48] <_fury> does that make sense in doing that?
[22:12:09] *** xnixan_ has joined #postfix
[22:14:19] <berobero> can someone test this regexp : ^.*[\.*\ at \ dot *\*]$
[22:14:25] <berobero> it is to find emails but failing
[22:15:34] <mitcheloc_lapto1> devdas: i'm working with dmoldovan on this, IMAP isn't a good solution, is there too much of a security risk to figure out a way to share files between the two? i'm sure this is regularly done by many webmail apps?
[22:15:36] <berobero> trying to use it in header_checks like /^To:\ [\.*\ at \ dot *\*]$
[22:15:57] <berobero> have been reading some documents but...
[22:16:09] <devdas> mitcheloc_lapto, run a script to grant additional permissions
[22:16:41] *** tty2 has quit IRC
[22:16:57] <devdas> Hmmm, /^To: .(+@.+){5}/ ?
[22:17:09] <mitcheloc_lapto1> devdas: does the postfix user run the script? that means it needs some sort of grant permission? could this be a security risk?
[22:17:28] <devdas> mitcheloc_lapto1, the default permissions are safe
[22:17:39] <devdas> what exactly are you trying to do?
[22:17:46] <devdas> what does the webmail thing do?
[22:17:48] <mitcheloc_lapto1> need to give the apache user access rights
[22:17:56] <berobero> devdas: I am trying to avoid more than 5 recipients in To: field
[22:18:04] <devdas> Can you deliver via  a custom script which does some heavy processing?
[22:18:17] <devdas>  /^To: .(+@.+){0,5}/ ?
[22:18:23] *** littleboy has quit IRC
[22:18:25] <devdas> mitcheloc_lapto1: step back
[22:18:27] <devdas> Why?
[22:18:39] <mitcheloc_lapto1> devdas: yeah, currently postfix pipes the mail to a script which stores it
[22:18:43] <mitcheloc_lapto1> the mail has logs attached to it
[22:18:52] <mitcheloc_lapto1> and the web piece is so we can read those files from a dashboard
[22:19:00] <berobero> devdas: why {0,5} but not {5} only?
[22:19:14] <devdas> 0 to 5 vs exact 5
[22:19:22] <devdas> hmmmm
[22:19:26] <berobero> oops. thanks vm
[22:19:41] <devdas> Can you log to syslog instead?
[22:19:44] <berobero> just started reading today but about to make it
[22:19:46] <deftunix> i need of architecture like: 2 mta + 2 mda + 2 content filter. Some one have council for me?
[22:20:00] <devdas> deftunix: why 2 mda?
[22:20:10] <deftunix> devdas: for HA
[22:20:24] <mitcheloc_lapto1> devdas, no i can't, i really need to access the files that the script parses out
[22:20:32] <deftunix> devdas: and load spread
[22:20:37] <berobero> devdas: can I use {2,5} also, just to let sending to 1 or 2 recipients at once
[22:20:48] <devdas> try it and see?
[22:20:54] <berobero> roger
[22:21:23] <devdas> deftunix: then you need two systems running a shared user backed, delvering to a common mail spool
[22:21:33] <devdas> I recommend NFS, or Cyrus IMAP
[22:21:45] <devdas> NFS w/ Maildir and Courier (or Dovecot)
[22:21:58] <devdas> Identical systems
[22:22:02] <deftunix> devdas: yes... NFS for maildirs and maildrop for delivery agent
[22:23:27] *** mitcheloc_laptop has quit IRC
[22:24:46] *** mitcheloc_lapto1 is now known as mitcheloc_laptop
[22:25:50] *** madrescher has quit IRC
[22:31:23] *** pitakill has quit IRC
[22:34:29] *** mrhavi has joined #postfix
[22:35:22] *** devdas has left #postfix
[22:37:42] <berobero> devdas: regret it fails
[22:38:12] <mrhavi> whats the best book on debian commands?
[22:38:17] <berobero> .. /^To:.(+@.+){0,5}/
[22:39:19] *** denis_ has quit IRC
[22:39:57] <pickcoder> mrhavi: eh?
[22:40:08] <berobero> ok now working. tnks
[22:42:21] *** Deddi has joined #postfix
[22:45:28] *** BuenGenio_ has joined #postfix
[22:52:57] *** McJerry has quit IRC
[22:53:30] *** gutocarvalho has quit IRC
[23:06:52] <berobero> devdas: this works fine :  /^To:.[+@.+]{0,5}/ REJECT too many recipients
[23:07:01] <berobero> but {2,5} fails
[23:07:22] <berobero> I am trying to allow up to 2 recipients in To: field
[23:07:31] *** suprsonic has left #postfix
[23:08:39] *** dmoldovan has left #postfix
[23:12:24] *** hyper_ch has quit IRC
[23:18:35] *** berobero has quit IRC
[23:20:16] *** mdvz0r is now known as MDVz0r
[23:21:34] *** _ruben has quit IRC
[23:21:55] *** mitcheloc_laptop has quit IRC
[23:27:18] *** hyper_ch has joined #postfix
[23:33:15] <jduggan> whats wrong with default_destination_recipient_limit ?
[23:41:39] *** UQlev has joined #postfix
[23:43:37] *** gukk_devel has quit IRC
[23:43:46] *** gukk_devel has joined #postfix
[23:53:19] *** pickcoder has quit IRC
[23:55:19] *** deftunix has quit IRC
[23:59:54] *** UQlev has quit IRC





top