[00:08:45] *** GoGi has quit IRC [00:15:51] *** arooni-mobile has quit IRC [00:16:11] *** hparker has quit IRC [00:27:34] *** pitakill has joined #postfix [00:30:43] *** Fallenou has joined #postfix [00:32:14] *** havvg has quit IRC [00:40:40] *** carl- has quit IRC [00:56:07] <sahil> DKIM > * [00:58:28] *** hparker has joined #postfix [01:09:36] *** pitakill has quit IRC [01:20:15] *** xpoint has quit IRC [01:21:31] *** Southron has left #Postfix [01:22:14] *** Zblakany has quit IRC [01:25:34] *** andy_ has joined #postfix [01:28:07] *** Jax has joined #postfix [01:43:46] *** Jax has quit IRC [01:52:58] *** tombar_ has quit IRC [01:53:18] *** tombar_ has joined #postfix [02:24:36] *** Fallenou has quit IRC [02:27:55] *** war9407 has quit IRC [02:29:45] *** doctorcock has joined #postfix [02:32:50] *** doctorcock has quit IRC [02:33:14] *** doctorcock has joined #postfix [02:34:10] *** doctorcock is now known as doctor [02:34:29] *** doctor has joined #postfix [02:35:13] *** Motoko-chan has joined #postfix [02:35:19] *** doctor has quit IRC [02:42:21] *** jimpop has joined #postfix [02:56:42] *** pingouin_ has joined #postfix [03:10:02] *** rhalff has quit IRC [03:17:31] *** rcsu_ has joined #postfix [03:25:22] *** rcsu has quit IRC [03:28:44] *** Haris________ has joined #postfix [03:40:50] *** jimpop has quit IRC [03:47:49] *** Haris_ has quit IRC [03:52:45] *** jra has left #postfix [04:01:57] *** hparker has quit IRC [04:20:47] *** wdp has quit IRC [04:22:17] *** mavrick61 has quit IRC [04:23:26] *** mavrick61 has joined #postfix [04:27:37] *** MrParanoia has quit IRC [04:30:32] *** niki has joined #postfix [05:03:17] *** jens_ has joined #postfix [05:10:33] *** Lap_64 has joined #postfix [05:19:13] *** jense has quit IRC [05:31:07] *** pickcoder has joined #postfix [05:45:01] *** Lap_64 has quit IRC [05:45:46] *** Lap_64 has joined #postfix [05:56:56] *** PatrickDK has quit IRC [05:57:18] *** PatrickDK has joined #postfix [05:57:29] *** llo7f has left #postfix [06:08:21] *** Darten has joined #postfix [06:09:05] *** pitakill has joined #postfix [06:17:25] *** tombar__ has joined #postfix [06:19:27] *** pickcoder has quit IRC [06:31:40] *** tombar_ has quit IRC [06:45:32] *** pulsar has joined #postfix [06:55:30] *** shams has joined #postfix [06:58:37] <shams> i want to setup an isp style mail server with domainkeys on my server. i need pop3/imap , smtp , account management tool and etc. please introduce me an article for this issue. [07:00:08] *** shams has left #postfix [07:00:36] <rob0> Must have googled it. [07:00:42] <rob0> or, read /topic [07:02:23] *** Haris________ is now known as Haris_ [07:05:53] *** PRAEDO has quit IRC [07:09:46] *** Zelest has quit IRC [07:25:51] *** Zelest has joined #postfix [08:24:35] *** BuenGenio has joined #postfix [08:47:28] *** Motoko-chan has quit IRC [09:04:43] *** george_ has joined #postfix [09:05:33] *** pitakill has quit IRC [09:13:04] *** Internat has joined #postfix [09:17:44] *** mathez has quit IRC [09:19:03] *** mathez has joined #postfix [09:21:10] *** BuenGenio_ has joined #postfix [09:21:23] *** BuenGenio has quit IRC [09:25:04] *** hyper_ch has joined #postfix [09:39:33] *** BuenGenio_ has quit IRC [09:45:57] *** Zblakany has joined #postfix [09:48:47] *** Darten has left #postfix [09:56:36] *** war9407 has joined #postfix [10:09:31] *** PatrickDK has quit IRC [10:31:26] *** cilly has joined #postfix [10:45:27] *** tombar__ has quit IRC [10:55:35] *** george_ has quit IRC [11:05:19] *** rcsu_ is now known as rcsu [11:15:01] *** Lukemob has quit IRC [11:16:52] *** Lukemob has joined #postfix [11:21:26] *** pulsar has quit IRC [11:25:50] *** Lap_64 has quit IRC [11:33:51] *** cilly has quit IRC [11:37:28] *** GoGi has joined #postfix [11:47:56] *** sophokles has joined #postfix [11:58:55] *** Fallenou has joined #postfix [12:04:27] <Haris_> what mail from syntax will the latest postfix accept? [12:07:12] <Haris_> how exactly do I debug? [12:08:52] <Haris_> Nov 30 12:05:44 mc2 postfix/smtpd[906]: warning: connect to mysql server localhost: Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2) [12:09:04] <Haris_> what the shEEP? [12:10:27] <Haris_> How do I tell postfix, not to use the socket, but use the localhost:3306 to connect to mysql? [12:14:19] *** amrit is now known as amrit|zzz [12:16:32] *** Negel has joined #postfix [12:16:45] <Negel> Hi, can I ask a question about postfix MTA? [12:16:59] <Haris_> Negel: Don't ask to ask, just ask and wait for the answer [12:17:05] <Negel> ok, thanks [12:17:37] <Negel> I'm going to host a mailserver for multiple domains, and I'm succeeding with that using virtual domains. But I would like the mailserver address for the different domains to be mail.domain1.com, mail.domain2.com etc [12:17:58] <Negel> and people that are of domain1 should not be able to login using users from domain2 [12:18:43] <Negel> how could I go about setting it up so that mail.domain1.com points to my mailserver (which is 1 server), but that it won't be able to login using credentials of domain2 [12:19:16] *** wdp has joined #postfix [12:19:47] <Haris_> is this a postfix question? [12:22:56] <Negel> I think it is [12:22:59] <Haris_> Negel: Where and how do you store authentication info? [12:23:03] <Negel> using mysql [12:23:15] <Haris_> is that mysql accessible to both postfix boxes? [12:23:37] <Negel> there is only 1 postfix machine [12:23:47] <Negel> and that machine has access to the database [12:24:00] <Haris_> I got the idea, you were setting up multiple boxes? [12:24:07] <Negel> multiple domains [12:24:14] <Negel> using virtual domains [12:24:17] <Haris_> In postfix+mysql, it is easy [12:24:24] <Haris_> since your storing it in one DB [12:24:35] <Haris_> and its accessible via one user, its just a sql query? [12:24:40] <Haris_> afaics [12:25:05] <tobias-> Haris_: Do you mean you want the usernames to be like haris at domain1 dot tld ? [12:25:21] <Negel> I think that question is for me? [12:25:29] <Negel> the usernames will be like user at domain1 dot tld [12:25:34] <Negel> and user at domain2 dot tld [12:25:45] <Haris_> in virtual email accounts, they usually are user at domain dot tld [12:25:50] <Negel> but when a user from domain 2 sets up an smtp connection to domain2.tld [12:25:57] <Negel> he shouldn't be able to login using credentials from domain1 [12:26:14] <Haris_> I'm confused [12:26:14] <Negel> but because both domains use the same mailserver [12:26:32] <Negel> how would the mailserver be able to distinguish between the two [12:28:57] <tobias-> I don't think it can [12:29:17] <tobias-> One solution is to setup another postfix instance on another IP, if you have a secondary IP on this machine [12:29:48] <Haris_> Negel: I don't understand your question. How can one user from domain1 access mail for domain2 when they don't know and don't have the login credentials? [12:29:52] <Haris_> for domain2 [12:30:21] <Negel> well it's a security issue [12:30:29] <Negel> maybe it is a bit stupid I don't know [12:30:32] <tobias-> Haris_: He mean that negel at domain1 dot tld with password 'god' is working when having mail.domain2.tld as incoming in your mail client [12:30:37] <Haris_> that's like saying, user1 at yahoo dot com will access my at yahoo dot com email account because its hosted on the same box [12:30:45] <Negel> no [12:30:48] <Negel> that's not what I mean [12:30:53] <tobias-> it isn't? [12:31:20] <Negel> if user1 from domain1.tld sets up a connection to domain2.tld he will be able to login using user1 and his own password [12:31:31] <tobias-> yeah and that's what i said [12:31:40] <Negel> yes I mean what you said [12:31:43] <Negel> not what haris sayd [12:31:43] <Negel> :p [12:31:45] <Negel> said* [12:31:52] <tobias-> ;) [12:31:58] <Negel> I'm a newbie when it comes to mailservers [12:32:03] <Negel> so please, bare with me :P [12:32:14] <Haris_> why would user1@domain1 be able to access any-user@domain2? [12:32:30] <Negel> user1@domain1 would be able to access his own account when he connects to domain2 [12:32:31] <tobias-> if you want to seperate the two I would suggest having two postfix instances binding on different IPs [12:32:34] <Negel> because it is in effect the same mailserver [12:32:37] <plee> because it's the same host [12:32:49] <tobias-> with seperate mysql-databases [12:33:08] <Haris_> Negel: Have you badly configured your mailbox folder paths in mysql? [12:33:11] *** jens_ has quit IRC [12:33:27] <Negel> no [12:33:46] <Haris_> for each user, you specify a different mailbox path on the hard drive [12:33:49] <Negel> simply put: mail.domain1.tld and mail.domain2.tld are the same mailservers [12:34:02] <Haris_> it is stored in mysql and queried for in mysql whenever mail comes in [12:34:11] <tobias-> Negel: If you setup two postfix instances you will also be handling to FROM machine it sends mails from, it could say that it is domain1 when sending for domain1 and domain2 when sending from domain2 and not the machines hostname [12:34:38] <Haris_> I'll stop, since I can't understand the discussion at hand. [12:35:02] <Negel> well, I think I'll just leave it like it is [12:35:04] <tobias-> Haris_: smtp.domain1.tld and smtp.domain2.tld is the same mail server [12:35:10] <Negel> I don't think it is a great problem [12:35:27] <tobias-> Haris_: so it doesn't matter which one you pick if you have an account on that same mail server [12:35:33] <Negel> exactly [12:35:42] <Negel> thank you tobias [12:35:45] <Negel> thank you haris [12:35:52] <Negel> and thank you plee [12:35:58] <Haris_> Negel: smpt1 - smtp100000.anydomain.tld can be the same mali server [12:36:01] <Haris_> why does it matter? [12:36:06] <tobias-> Negel: fiddle with multiple instances of postfix, it's fun ;) [12:36:16] <Negel> heheh, yeah it's fun when not on a deadline [12:36:17] <Negel> :P [12:36:24] <plee> Negel, yeah, I have the same thing on my server :) [12:37:02] <Haris_> I can host 1000 domains on the same box, with each user configuring their MTA with a different name in DNS and the users will still only be able to access their own mail from that box [12:37:20] <Negel> yes Haris, I understand [12:37:25] <Haris_> unless configured otherwise [12:37:37] <tobias-> Haris_: yes but the users can use the different name in DNS, it doesn't matter what they use they can still login because it's the same mailserver [12:38:21] <Negel> if mail.something.com and mail.business.com point to the same mailserver, and ceo at something dot com wants to login, he can connect to mail.business.com and login with ceo at something dot com to see his mail [12:38:25] <Negel> :) [12:39:01] <Haris_> he's still accessing his own mailbox, if I configure postfix+mysql right [12:39:13] <Haris_> and those are dns names, they don't have anything to do with mailboxes [12:39:17] <tobias-> Haris_: Yes but that's beside the point [12:39:41] <Haris_> so your worried about dns names rather than something else? [12:39:43] <tobias-> Haris_: The thing is that he shouldn't bea able to login to his own inbox if he doesn't use the correct incoming address [12:40:01] <Haris_> ah, the dns name should be his own? [12:40:05] <tobias-> Haris_: yes [12:40:06] <Haris_> for his own domain [12:40:11] <tobias-> exactly [12:40:28] <Haris_> when people login to their mail, they'r either using pop3 or imap [12:40:31] <Haris_> they'r not using smtp [12:40:38] <Negel> ok, then for sending mail [12:40:45] <Negel> using authenticated smtp [12:40:47] <Negel> that's what I meant [12:40:47] <Haris_> now it makes sense [12:40:48] <Negel> sorry [12:40:59] <Negel> :) [12:41:39] <Haris_> how can running multiple instances of postfix solve this? [12:41:56] <Haris_> unless each is on their seperate IP [12:41:57] <tobias-> Haris_: for sending, it can [12:42:05] <tobias-> Haris_: On separate IP yes [12:42:14] <Haris_> which will mean, for 1000 domains, there will be 1000 IPs configured on this box [12:42:21] <tobias-> yep [12:42:23] <Haris_> and for 1 million domains, 1 million IPs will be configured [12:42:30] <Haris_> seems rather ludicrous :P [12:42:33] <Haris_> wastage of IPs [12:42:34] <Haris_> lol [12:42:47] <tobias-> Haris_: Yeah and virtual machines on the same machine seems altso rather ludicrous [12:42:58] <tobias-> it's the same principal [12:43:07] <Negel> so I guess what you're saying [12:43:10] <tobias-> say you have two clients you want to seperate [12:43:14] <Negel> is that when a hostingcompany [12:43:18] <Negel> has 1 mailserver [12:43:20] <Negel> for all those domains [12:43:33] <Negel> they just point all the mail.domains.tld to that mailserver [12:43:41] <Haris_> dns and postfix are two seperate things [12:43:45] <Haris_> yep [12:43:55] <Haris_> I can have a trillion domains pointing to the same box [12:44:06] <Negel> and this is no security issue? [12:44:07] <Haris_> with different names configured for mail server in dns for each domain [12:44:09] <Haris_> nope [12:44:11] <Haris_> lol [12:44:15] <Haris_> it isn't [12:44:47] <Haris_> I'd ask, how is it a security risk? [12:44:53] <tobias-> But haris, it could be somewhat of a security easy if you have two clients not to be connected to each other ;) [12:45:05] <tobias-> s/easy/issue/ [12:45:28] <Haris_> Na.. two clients will never be, unless you'v badly configured your postfix box [12:45:30] <Negel> you can always distinguish vim users from other users [12:45:40] <Negel> well ok [12:45:41] <Haris_> or badly mapped email accounts to mailbox folders in mysql [12:45:45] <Negel> thanks, i'll tell my boss [12:45:47] <tobias-> Haris_: You don't know what you are talking about :) [12:46:03] <Haris_> tobias-: I see [12:46:05] <tobias-> Haris_: If two clients uses the same smtpd for sending then they will be connected together to the same box [12:46:21] <Haris_> tobias-: yes, they are [12:46:38] <Haris_> most mail serves on internet work like this [12:46:56] <tobias-> Haris_: Yes they do but for certain reasons you want to seperate customers [12:47:28] <Haris_> that's possible. I just don't understand those reasons =) [12:47:38] <tobias-> and using same box you could use multiple instances of postfix to seperate them two. Why use the same box? Well, to get the hardware useful for more stuff :) [12:48:24] <Negel> ok tobias and haris, thanks a lot [12:48:30] <Haris_> millions of customers of yahoo and domains they host are housed via the 25 mailservers they'v configured in dns for their service [12:48:32] <Negel> i'm off to work on it [12:48:42] <Negel> see you [12:48:43] <Negel> thanks again [12:49:05] *** Negel has quit IRC [12:49:17] <Haris_> tobias-: I'm afraid, I still don't understand those 'reasons'. The implementation is fine. It can be done [12:53:00] <tobias-> Haris_: I know it can be done, I've done it on several boxes. I have my reasons, call it a company secret :) [12:53:37] <Haris_> ah, communication issues [12:53:56] <tobias-> rather integrity [12:54:44] <tobias-> I don't think that client1's competitor doesn't want to share the same smtp as client2 [12:59:10] *** Jax has joined #postfix [13:00:04] *** pirho has joined #postfix [13:04:52] *** Zblakany has quit IRC [13:08:32] <Haris_> ah, that was again from a tutorial :| [13:10:03] <sysmonk> Haris_: a really critical problem again? [13:10:03] <sysmonk> ;) [13:10:26] <Haris_> No, something I missed [13:10:31] <Haris_> or didn't expect out of the box [13:10:43] <Haris_> and I was short on knowledge at some level [13:14:17] <Haris_> What is range of values for debug_peer_level? [13:20:04] *** pirho has quit IRC [13:21:49] <adaptr> "on some level" ? [13:22:16] <Haris_> about chroot being in master.cf [13:22:23] <Haris_> I had no idea it was an option [13:24:14] <adaptr> that's a prety major level [13:25:06] <Haris_> yep [13:25:19] <Haris_> I concede that [13:25:33] * Haris_ wonders if concede is the right word there [13:25:43] <Haris_> yep it is [13:26:03] *** makerc has joined #postfix [13:26:21] <adaptr> good monologue ? [13:27:24] <Haris_> I'm not that good/fast with english [13:28:08] <Haris_> eh, I'm not here for entertainment or drama, lol [13:29:17] *** zloss has quit IRC [13:48:43] *** denis has joined #postfix [13:52:20] *** Jax has quit IRC [14:01:23] *** memetic has quit IRC [14:12:18] *** pirho has joined #postfix [14:13:32] *** Fallenou has quit IRC [14:21:48] *** Zeit|awy_ has quit IRC [14:27:05] *** aphexer has quit IRC [14:32:52] *** aphexer has joined #postfix [14:44:14] *** non-sequitir has joined #postfix [14:46:11] *** non-sequitir has quit IRC [14:47:11] *** nonsequitir has joined #postfix [14:52:31] *** makerc has quit IRC [15:01:10] *** tombar has joined #postfix [15:02:34] *** tombar has quit IRC [15:03:53] *** Jax has joined #postfix [15:23:15] *** Fallenou has joined #postfix [15:36:19] *** devdas has joined #postfix [15:42:33] *** pulsar has joined #postfix [15:46:29] *** andy_ has quit IRC [15:47:49] *** nonsequitir has quit IRC [15:58:14] *** Jax has quit IRC [16:03:43] *** LordDicranius has joined #postfix [16:08:53] *** LordDicranius has quit IRC [16:15:46] *** PatrickDK has joined #postfix [16:30:04] *** mjh has joined #postfix [16:40:03] *** growltiger_ has joined #postfix [16:42:57] *** sophokles has quit IRC [16:42:58] *** growltiger has quit IRC [16:42:58] *** googlah_ has quit IRC [16:42:58] *** _bugz_ has quit IRC [16:42:58] *** jonez has quit IRC [16:42:58] *** f3ew_ has quit IRC [16:42:58] *** amrit|zzz has quit IRC [16:42:58] *** sahil has quit IRC [16:43:13] *** andy_ has joined #postfix [16:43:43] *** sahil has joined #postfix [16:44:08] *** googlah has joined #postfix [16:44:28] *** amrit|zzz has joined #postfix [16:45:54] *** andy_ has quit IRC [16:45:55] *** irc___ has quit IRC [16:45:55] *** Markus23_ has joined #postfix [16:46:08] *** andy__ has joined #postfix [16:48:14] *** F6F has joined #postfix [16:49:17] *** patdk has joined #postfix [16:49:19] *** PatrickDK has quit IRC [16:49:23] *** patdk is now known as PatrickDK [16:49:28] *** mXr has joined #postfix [16:49:34] <Markus23_> I get some mails over and over again from my mailserver [16:49:51] <wdp> thats normally what a mailserver should do [16:49:56] <Markus23_> I am using 2.3.8-2+etch1 and imap-courier [16:50:01] <wdp> i mean i would wonder if i won't get mails over and over again from my mailserver [16:50:07] <Markus23_> the same ones ;) [16:50:16] <Markus23_> and they are not resent [16:50:23] <wdp> :p [16:50:54] <wdp> Markus23_, probably you've forgotten "remove messages from server on recieve" or something like that in your local mailclient [16:51:17] <Markus23_> I tried reinstalling several times, used another mailclient, maildrop, removed my filters... [16:51:39] <Markus23_> I can see that the mails are there on the mail server (before I fetch them) [16:52:11] <Markus23_> my main suspect was maildrop, but I completely purged it and configured it from scratch [16:52:13] <Markus23_> did not help [16:52:37] <Markus23_> mail.err says only couriertcpd: /etc/courier/shared/index: No such file or directory [16:52:50] <Markus23_> I think this has nothing to do with it, or? [16:53:29] <Markus23_> mail.log only reports success: status=sent (delivered to command: /usr/bin/maildrop -d ${USER}) [16:57:39] *** sophokles has joined #postfix [16:58:15] *** UQlev has joined #postfix [16:58:56] *** _bugz_ has joined #postfix [17:00:29] <Markus23_> Does someone know where mails are cached when they cant be delieverd for some reason? [17:00:53] *** f3ew_ has joined #postfix [17:01:44] *** devdas has quit IRC [17:05:36] *** bluethundr_ has joined #postfix [17:07:03] <bluethundr_> I think I need a little help with my main.cf file [17:07:19] <bluethundr_> I'm getting bounces when sending to my mail account I just setup [17:07:31] <bluethundr_> yet, I am able to mail FROM that account to anywhere in the world [17:08:20] <bluethundr_> I edited my mynetworks to include my external ip from my ISP (not my internal natted one) and I no longer seem to get bounces [17:08:28] *** randra has joined #postfix [17:08:30] <bluethundr_> but yet the mail never arrives in my in box [17:08:55] <bluethundr_> I am running gui-less, so if anyone would like to see my logs I would probably have to email them to you [17:13:57] *** randra has quit IRC [17:16:21] *** riz_ has joined #postfix [17:18:43] <riz_> Hi. I would like to block some spam e-mail from china. Is there an chinese rbl to add to smtpd_client_restrictions rule? [17:20:44] * UQlev never knew that spam mostly comes from China [17:22:59] <UQlev> riz_: haven't you noticed that spam from Chinf comes in Spanish? [17:23:07] *** sophokles has quit IRC [17:24:16] *** Markus23_ has quit IRC [17:25:01] <riz_> UQlev no. It's an email in english text sent from china ip (in my case 218.19.133.85) [17:25:50] <riz_> UQlev I've a lot of rbl, I've reported to spamcop each mail, but unfortunately I can't stop them. [17:28:42] <UQlev> very often spammers use banch of infcted computers only for single delivery and then they deploy new ones [17:29:24] <UQlev> so all lists detects it as spam when it was already received by your server [17:29:56] <sahil> riz_: there are a few RBLs that purport to list all IPs in a given country's netblock. they are probably not exhaustive and you run the risk of false positives, but try a few google searches. you can start here: http://www.okean.com/thegoods.html [17:31:14] <riz_> sahil thanks, but the page doesn't work :) [17:31:59] <riz_> UQlev at the moment, I'm writing a spamassassin rules for trying to block them. [17:32:14] <sahil> riz_: works here; so check your internet connection. [17:32:29] <UQlev> riz_: how many mail-accounts do you handle? [17:32:45] <UQlev> sahil: doesn't work for me either [17:32:53] <bluethundr_> I seem to be missing my /etc/aliases.db and I don't know how to create it. I'm running Debian. [17:33:09] <riz_> UQlev about 100.. [17:33:12] <sahil> hm, sucks for you guys. :) [17:33:46] <UQlev> riz_: is it corporate server for a company? [17:34:15] <sahil> riz_: as a matter of practice, you should at least use zen.spamhaus.org to block at SMTP time. the offending IP (218.19.133.85) is listed there and would never had made it past most MTAs. [17:34:53] <riz_> UQlev it's mine:) I manage the e-mail of my family, girlfriend, friend, etc. etc. [17:35:27] <riz_> sahil mm intresting. [17:36:17] <riz_> sahil I've checked now, there is in my main.cf [17:36:43] <sahil> there is what? [17:36:54] <UQlev> riz_: for a small server like mine and yours you can try what I did with spamd (part of PF of FreeBSD or OpenBSD). I have blacklisted 0.0.0.0/0 ;) [17:37:30] <riz_> sahil http://pastebin.com/m4aac8c3f -> this is my # [17:37:34] <riz_> smtpd_client_restrictions = [17:37:43] <UQlev> riz_: only white-listed are going directly to smtp server [17:37:54] *** quellhorst has joined #postfix [17:37:58] *** quellhorst has left #postfix [17:38:00] <sahil> riz_: then something is faulty; the IP you listed above is *definitely* listed on zen. [17:38:10] *** Defiler has joined #postfix [17:38:31] <UQlev> sahil: those IPs are listed after your server got a spam [17:38:40] <sahil> UQlev: my server did not get spam. [17:38:44] <sahil> from said IP. [17:38:52] <UQlev> sahil: congratulations [17:38:52] <Defiler> I want to set it up so that I get a copy of every outgoing message for testing purposes, but the mail never goes anywhere, and just gets deleted. I've played with wacky choices like having a bogus relay address and then rewriting the bcc lines to use a different transport.. [17:39:05] <Defiler> ..but that doesn't seem to work. Anyone have any advice? [17:39:20] <sahil> UQlev: yeah ok, personal mail server guy. [17:40:41] <riz_> sahil I try to move zen.spamhaus.org at the first position, before all other rbl. [17:41:11] *** jonez has joined #postfix [17:41:39] <sahil> riz_: that's not useful in this particular circumstance. also, do you in some other restrictions specify reject_unauth_destination at any point? you should paste your postconf -n output instead of snippets of main.cf. [17:41:51] <bluethundr_> it seems that my /etc/aliases.db is missing [17:42:31] <sahil> bluethundr_: so build it. [17:43:19] <bluethundr_> I seem to be missing the mkaliases command. I have tried installing it via aptitude but my repos seem to not be finding it [17:43:30] <sahil> newaliases [17:43:34] <riz_> sahil for sure. You can see it at http://pastebin.com/m2beba583 [17:43:35] <bluethundr_> ah [17:43:42] <bluethundr_> let me give that a worl [17:43:50] <UQlev> riz_: spammers are getting thousands of newly infected computers dayly. And they using part of it for single spam-relay and then for other purpose [17:43:57] <roe_> !newaliases [17:43:58] <knoba> roe_: "newaliases" : the command you need to run when you edited your /etc/aliases (it will usually create an aliases.db from it) [17:44:25] <sahil> *yawn* redundant! [17:44:29] <bluethundr_> nice! That was it many thanks! [17:44:51] <UQlev> riz_: when your server is checking sbl or similar black list they are not there yet [17:45:22] <UQlev> riz_: next day spammers change spam-relays [17:45:35] <Defiler> OK, that worked.. was missing a 'postmap' run haha [17:45:48] <sahil> riz_: why do you have the same restrctions in smtpd_client_ and smtpd_recipient? [17:46:21] <UQlev> nowadays spam distribution is not like before when heap of crazy zombies spreading all over randomly [17:46:29] <riz_> sahil this is not right? [17:47:58] <UQlev> spammers are getting lists of active mail-accounts from internet providers and target them [17:48:35] <sahil> riz_: completely unnecessary, as is the 'permit' at tail end of your restrictions; that is implicit, so you needn't re-type it each time. [17:49:32] <riz_> sahil so I can remove smtpd_client_restrictions and permit section? [17:49:53] <sahil> riz_: no, just read the postfix standard config docs to get a better understanding of what those restrictions really are. [17:50:03] <sahil> also, when did you get the spam from the 218.19.132. netblock? [17:50:35] <sahil> UQlev: interesting theory, but the IP from which he most recently received that spam has been listed in a variety of DNSBLs since August of this year. [17:51:45] *** jonez has quit IRC [17:52:10] <UQlev> sahil: It was detected at 2008-11-25 [17:52:11] <sahil> scrub. [17:52:28] <riz_> sahil lately, the last month [17:52:36] <sahil> UQlev: on sorbs, for example, Sun Aug 5 04:42:09 2007 GMT is when the record was created. [17:52:49] <sahil> so we're talking august of LAST year. [17:53:41] <sahil> *yawn* [17:53:43] <sahil> pwned. [17:53:53] * sahil -> lunch [17:54:05] <sahil> good luck riz_; don't believe everything you read in here. check the docs and search for yourself. [17:55:51] <sahil> riz_: one last thing, you can also look into http://www.blackholes.us/ and reject based on their listing of chinese netblocks. [17:55:58] <sahil> not recommended, but if it suits you. [17:56:47] *** jonez has joined #postfix [17:57:00] *** jonez has quit IRC [17:57:25] *** weedar has joined #postfix [17:58:20] <riz_> sahil thanks [17:58:27] <UQlev> riz_: don't forget to block also US, AR, BR, IN, ES, IT, RU.. etc ;) [17:58:46] <riz_> UQlev IT it's mine :) [18:00:48] <sahil> riz_: so much spam comes from your friends at telecomitalia.it; absolutely dispicable! [18:01:25] <riz_> sahil yes, you are right. But they aren't my friend! [18:03:51] <UQlev> the most spams come from countries where broad band in common use [18:04:19] <riz_> like Italy [18:04:34] <UQlev> because windows is OS for dial-up only [18:04:47] <adaptr> yeah, right [18:06:33] <UQlev> it was a big mistake to allow use windows permanently connected to internet, like tractors should not go on a high-way [18:07:23] <riz_> UQlev yes that's true [18:07:38] *** jonez has joined #postfix [18:16:05] *** growltiger has joined #postfix [18:16:27] *** growltiger_ has quit IRC [18:33:00] *** Defiler has left #postfix [18:33:46] *** dvl has joined #postfix [18:33:59] <dvl> This messages seems self-contradictory: postfix/smtpd[66346]: warning: valid_hostname: empty hostname [18:34:17] *** growltiger_ has joined #postfix [18:38:25] *** amrit|zzz is now known as amrit [18:39:14] *** Severed_Head_Of_ has joined #postfix [18:47:52] <sahil> UQlev: you're just full of theories aren't you? [18:48:20] *** growltiger has quit IRC [18:48:27] <UQlev> sahil: yes, I am [18:48:36] *** growltiger has joined #postfix [18:48:59] *** Severed_Head_Of_ has quit IRC [18:49:13] <sahil> *plonk* [18:50:59] *** carl- has joined #postfix [18:51:36] *** sona has quit IRC [18:52:51] <sahil> dvl: the routine/utility that screens for bad hostnames just happens to be called valid_hostname. :) its first check just happens to be for an empty hostname. [18:53:58] *** growltiger_ has quit IRC [18:56:22] <dvl> sahil: oh hi ya... just trying out that header_checks solution now... Got header_checks updated, now trying to find out to make the db... memories.... [18:56:57] <sahil> dvl: heh :) [18:58:24] *** carl__ has joined #postfix [18:58:56] *** carl- has quit IRC [18:59:15] <sahil> dvl: are you seeing that empty hostname warning when postfix tries to send email to someone at example dot org where example.org's DNS has no MX entry? [18:59:58] <dvl> sahil: not sure, have not looked it up. [19:06:23] <dvl> OK, I give up... I have a file containing lines such as this: [19:06:33] <dvl> /^from:.*@.*\.emailfactory\.com/ reject you send spam SPAM.10 [19:06:49] <dvl> to create the .db file, shoud I use postmap? [19:06:56] <dvl> Perhaps this is an old format [19:07:14] <tobias-> dvl: header_checks = regexp:/etc/postfix/yourfile [19:07:18] <tobias-> in main.cf [19:07:32] *** growltiger has quit IRC [19:07:38] <tobias-> !header_checks [19:07:39] <knoba> tobias-: "header_checks" : a configuration parameter in the main.cf: Optional lookup tables for content inspection of primary non-MIME message headers, as specified in the header_checks(5) manual page. [19:07:51] *** growltiger has joined #postfix [19:09:02] <dvl> Thanks. I've been reading http://www.postfix.org/header_checks.5.html [19:09:19] <dvl> tobias-: so this is just a plain text file? I don't convert it to .db... [19:10:58] <tobias-> dvl: you are using regexp so you should use regexp:<pathtofile> [19:11:53] <tobias-> you do not need to convert it [19:25:15] <roe_> do regexp and pcre feils update without restarting postfix? [19:25:28] <roe_> *files [19:30:48] <sahil> roe_: yes. [19:32:30] <dvl> Do you know of an easy way to test the regex? [19:33:21] *** Fallenou has quit IRC [19:34:02] <sahil> postmap -q [19:37:43] *** devdas has joined #postfix [19:40:52] *** m0f0x has quit IRC [19:46:47] <dvl> $ cat msg | postmap -q - regexp:./regex [19:47:40] <dvl> $ echo $? [19:47:40] <dvl> 1 [19:47:47] <higuita> echo "bla blaa bllaa" | postmap -q - pcre:/etc/postfix/file.pcre [19:48:18] <dvl> that's basically what I'm doing. So my regex is wrong. [19:49:31] *** growltiger has quit IRC [19:49:51] <rob0> 18:08 < dvl> /^from:.*@.*\.emailfactory\.com/ reject you send spam SPAM.10 [19:50:14] <rob0> you're thinking you can block spam in a meaningful way using header_checks ? [19:50:28] <devdas> rob0: you can block _some_) [19:51:16] <jeev> shit [19:51:20] <jeev> isn't there a way to just do @ [19:51:22] <rob0> If you think a particular sender address is always spam, why not use check_sender_access in smtpd_x_restrictions? [19:51:48] <dvl> rob0: that file is no longer is use. [19:52:22] <jeev> so what's the best way to stop just a single domain? [19:52:41] <jeev> access file ? [19:53:12] *** growltiger has joined #postfix [19:53:20] <rob0> define "domain" [19:53:33] <jeev> some fag at da-haps.com keeps sending my friend a newsletter [19:53:39] <jeev> i dont care for that domain and he doesn't eitehr [19:53:42] <jeev> i wanna just reject it [19:53:55] <dvl> jeev: you can tell his sexual orientation based on that? wow! [19:54:15] <roe_> isn't that in the rfc? [19:54:19] <rob0> look at the client IP and check_client_access to reject it [19:54:20] <jeev> :) [19:54:45] <jeev> rob0, there isn't a way to just block the domain instead of having to deal with the ip changing ? [19:54:58] <devdas> check_sender_access [19:55:27] <jeev> that needs to be postmapped, right [19:55:35] <rob0> "18:53 < rob0> If you think a particular sender address is always spam, why not use check_sender_access in smtpd_x_restrictions?" [19:55:39] <jeev> !check_sender_access [19:55:40] <knoba> jeev: "check_sender_access" : Search the specified access(5) database for the MAIL FROM address, domain, parent domains, or localpart@, and execute the corresponding action. [19:55:57] <rob0> !access [19:55:58] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server. [19:57:59] <jeev> http://www.howtoforge.com/postfix_backup_mx [19:58:04] <jeev> so that, as a primary/secondary [19:58:16] <jeev> it really tries sending the email to the primary serveR? [20:04:16] <dvl> It seems my pcre is having trouble with newlines. [20:05:00] <rob0> header_checks only works on a single (logical) header at a time. [20:05:16] <devdas> \r\n [20:05:46] <dvl> devdas: good suggestion. [20:05:50] <rob0> make your multi-line logical header a single line for testing, Postfix will do that too. [20:06:07] *** memetic has joined #postfix [20:07:47] <dvl> rob0: I have a single line... I'm just having trouble making it match the multi line header in the msg. [20:08:59] *** carl__ has quit IRC [20:09:52] <devdas> dvl: ignore the \r\n in the middle of the line [20:09:57] <devdas> Postfix removes those [20:10:03] <devdas> \s+ [20:11:56] <dvl> devdas: well, this is what I'm testing with and I'm not sure why I do not get a match: http://pastebin.ca/1271280 [20:16:51] *** bluethundr_ has quit IRC [20:17:13] <rob0> I believe we already answered that. [20:18:17] <devdas> Try fixing the .* [20:18:46] *** xpoint has joined #postfix [20:19:01] <rob0> The newline and leading whitespace is probably seen as a single space by header_checks. [20:19:02] <dvl> rob0: You did? I think you mean this: make your multi-line logical header a single line for testing, Postfix will do that too. [20:19:23] <dvl> rob0: and now I think I know what you mean. [20:21:39] *** carl__ has joined #postfix [20:22:00] <dvl> rob0: by putting the mult-line headers in my test example into one line, I can see that the regex matches. Now i just have to find out why Postfix doesn't do the REPLACE. [20:22:15] *** carl__ has quit IRC [20:27:01] <devdas> /^Received: from ([\w\.]+ \([\w\.]+ \[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\]\s+\(Authenticated sender: ([^)]+)\)\s+by (nyi\.example\.org) \(([^)]+)\) with (E?SMTPS?A?) id (\w+).*/ [20:27:06] <devdas> Might work better? [20:27:34] <dvl> devdas: I can try it... but so far, it looks like Postfix just doesn't do it. [20:30:19] *** dan__t has quit IRC [20:31:15] <dvl> missing a ) there somewhere [20:32:15] <dvl> but, regardless, it seems like Postfix is ignoring the directive: [20:36:09] <dvl> This is what I have in master.cf : -o header_checks=pcre:/usr/local/etc/postfix-config/main/obscure_smtp_auth [20:36:19] <dvl> Which seems OK, but has no effect. [20:40:32] <rob0> That's a -o to which daemon? [20:41:43] <rob0> I'm not sure how to have multiple distinct header_checks, but the question comes up on the list sometimes. [20:43:05] <rob0> One way it can be done is with a separate Postfix instance. [20:47:27] *** rouri has joined #postfix [20:48:18] *** ArdRigh has joined #Postfix [20:48:22] <dvl> rob0: that is a -o to smtps (But not sure if that's what you're asking). [20:49:02] <dvl> I'd prefer to avoid multiple instances. This is the only header_check in place. [20:49:33] <rob0> so then put it in main.cf and take out of master.cf [20:49:58] <dvl> Tried that originally, failed. But will try again. [20:50:21] <rob0> failed before you had the regexp worked out ... of course [20:51:45] <dvl> No, I think I had the regex correct. The testing problem was not having the single-line header input. [20:53:08] *** pulsar has quit IRC [20:55:13] *** Knoedel2 has joined #postfix [20:59:13] *** devdas has quit IRC [20:59:31] <dvl> rob0: thanks. Putting header_checks into main.cf gets it working. Now to fine tune it. [21:01:22] <rob0> See, header_checks is used by more than one daemon, so setting it as -o for one won't do it. I think maybe you can have a separate trivial-rewrite(8) process, maybe. [21:02:34] <tobias-> rob0: I think header_checks can onluy be used in main.cf [21:10:27] *** hparker has joined #postfix [21:10:56] <dvl> I think I have heard that before... [21:12:38] <ek> Out of curiosity, does anyone here happen to know why Microsoft Outlook refuses to send the required authentication to send e-mail? [21:12:56] <PatrickDK> you didn't tell outlook to auth on smtp :) [21:13:06] <ek> The same settings on Thunderbird work fine on the same machine, Outlook just seems to attempt to send any of the auth details. [21:13:14] <ek> PatrickDK: I certainly did. [21:13:22] <ek> I've gone over the settings dozens of times. [21:13:33] <PatrickDK> dunno, I have no issues with outlook xp/2002/2003/2007 [21:13:44] <ek> Using ports 25 and 465 which are both working perfectly using Thunderbird and GMail. [21:13:54] <ek> Very strange... [21:14:30] <PatrickDK> what auth methods do you allow? [21:14:38] *** rouri has quit IRC [21:14:41] <PatrickDK> I know outlook uses ntlm and login [21:14:47] <PatrickDK> forget if it will do plain or not [21:14:48] <ek> PatrickDK: If I add a test account to this server, could you possibly use the credentials to help me test it real quick? [21:14:56] <PatrickDK> sure [21:15:02] <ek> PatrickDK: I use PLAIN and LOGIN. [21:15:09] <ek> No NTLM or DIGEST... [21:15:17] <ek> Okay. Lemme set something up real quick. [21:18:28] <ek> PatrickDK: PM? [21:18:30] <rob0> !outlook [21:18:30] <knoba> rob0: "outlook" : MS Outlook has numerous problems with TLS and AUTH support. Try using a better client to troubleshoot your Postfix server's AUTH features; then once you know it works, you can go back and break it such that Outlook will work. See the following MS KB article to enable transport logging in Outlook that may be of some help in troubleshooting, http://support.microsoft.com/kb/300479/en-us [21:18:41] <PatrickDK> sure [21:19:09] <ek> rob0: Thanks. [21:19:10] <rob0> ek, what Outlook does, if there's no supported mechanism available, is silently fail. [21:19:30] <ek> rob0: Ah. Okay. So, it just won't send any auth information at all...? [21:20:03] <rob0> And it only supports a small number of mechanisms ... login is one. Right, no mech, no auth, no message to the user. [21:20:39] <ek> Hrm... [21:20:41] <PatrickDK> you didn't use SPA in outlook did ya? [21:20:45] <rob0> this is probably right: 20:16 < PatrickDK> I know outlook uses ntlm and login [21:20:47] <ek> PatrickDK: Nope. [21:21:13] <ek> Yeah. I remember having to disable NTLM using SASL years ago due to some issue with Outlook trying that only. [21:21:33] *** solexious has quit IRC [21:21:34] <ek> So, how would I tell Outlook to use LOGIN as opposed then? (If that's even what's happening) [21:21:48] <PatrickDK> outlook will ALWAYS try ntlm first [21:21:55] <PatrickDK> once that fails it will try others, (normally) [21:22:29] <ek> Hrm. [21:22:29] <rob0> I would have no idea on how to configure Outhouse. :) [21:22:34] <ek> Likewise... [21:22:49] <ek> Driving me nuts because this is a client's machine and they won't use anything other than Outlook. [21:23:04] <PatrickDK> looks like my outlook 2003 logged in fine [21:23:06] <rob0> Best practice, if you have to support Windows clients, is to insist on proper MUAs. [21:23:08] <ek> Right now I have to add their IP to mynetworks which is quite bothersome. [21:23:21] <ek> PatrickDK: Only for outgoing is it failing. POP/IMAP works fine. [21:23:23] *** Zblakany has joined #postfix [21:23:31] <PatrickDK> pop3 failed for me [21:23:34] <PatrickDK> but smtp logged in [21:24:12] <rob0> ek, be sure to bill for all this time spent. :) [21:24:19] <ek> PatrickDK: Not patrickdk@, just patrick@. [21:24:34] <ek> PatrickDK: And no. SMTP didn't go through. Failed in the logs with no auth attempt at all. [21:24:36] <PatrickDK> opp [21:24:41] <ek> rob0: Absolutely. [21:25:01] <PatrickDK> verify email address field, hmm [21:25:08] <PatrickDK> have to do a tcpdump on this [21:27:40] <ek> Yeah. Kinda strange. I see them coming in and failing... [21:27:58] <PatrickDK> strange I keep failing pop3 [21:28:52] <ek> POP3 looks okay. [21:28:56] <ek> I don't see errors. [21:29:42] *** dvl has left #postfix [21:29:46] *** dvl has joined #postfix [21:29:49] <dvl> oops. [21:30:42] <dvl> with pcre substitution variables, such as $4, how I can do text$4text? If this was /bin/sh, I'd do text${4}text for example. [21:30:43] <PatrickDK> heh, that is the issue :) [21:30:51] <PatrickDK> your not advertizing that you accept login, only plain [21:31:04] <PatrickDK> so outlook doesn't attempt to auth [21:31:13] <dvl> At present, I'm getting non-numeric replacement index "4text" [21:36:02] <ek> rob0, PatrickDK: Nevermind. I figured it out... I'm a frickin' idiot. [21:36:10] <ek> I had taken LOGIN out of my auth config... [21:36:17] <ek> So, all is good now. [21:36:28] <ek> rob0, PatrickDK: Thanks for the help! [21:36:44] <PatrickDK> hehe [21:37:20] *** Fallenou has joined #postfix [21:37:23] *** nictuku has joined #postfix [21:45:32] *** denis has quit IRC [21:45:48] *** Zeit|awy has joined #postfix [21:52:09] *** m0f0x has joined #postfix [21:59:15] *** bluethundr has joined #postfix [22:10:25] *** BuenGenio has joined #postfix [22:15:12] *** nictuku has quit IRC [22:15:35] *** tp76 has joined #postfix [22:20:28] <tp76> Hi. I'm trying to get header_checks remove the Received: line from internal (RFC 1918) hosts when sending mail to the outside, but keep it when sending to hosts in my domain. I've got something like `if ! /^To:.* at example dot com/ \n /^Received:.*\.example.\com/ IGNORE \n endif' but I'm a bit unsure whether this should work or not (it's not, currently ;-)). Clues? [22:22:30] <tp76> ("not working" as in removing Received regardless of where the mail is going) [22:25:19] *** BuenGenio has quit IRC [22:25:52] *** BuenGenio has joined #postfix [22:26:20] *** Roman123 has joined #postfix [22:28:02] *** Juspion has joined #postfix [22:33:01] *** pirho has quit IRC [22:34:51] *** non-sequitir has joined #postfix [22:35:53] *** BuenGenio has quit IRC [22:36:23] *** BuenGenio has joined #postfix [22:42:50] *** _DeepBlue has joined #postfix [22:44:06] *** Roman123 has quit IRC [22:45:11] <_DeepBlue> Is there a GUI tool (like Webmin) useful to manage postfix instances ? [22:54:18] *** Zblakany has quit IRC [22:55:29] <UQlev> _DeepBlue: have you seen postfixadmin? [23:00:25] *** jimpop has joined #postfix [23:01:22] *** BuenGenio has quit IRC [23:01:43] *** BuenGenio has joined #postfix [23:02:07] *** tp76 has quit IRC [23:02:41] *** hever has joined #postfix [23:06:40] *** BuenGenio has quit IRC [23:07:11] *** BuenGenio has joined #postfix [23:10:24] *** loddafni1 has joined #postfix [23:14:34] *** F6F has quit IRC [23:16:05] *** pitakill has joined #postfix [23:19:12] *** non-sequitir has quit IRC [23:20:29] *** UQlev has quit IRC [23:21:26] *** BuenGenio has quit IRC [23:21:32] *** niki has quit IRC [23:26:19] *** non-sequitir has joined #postfix [23:28:22] *** BuenGenio has joined #postfix [23:30:00] *** PatrickDK has quit IRC [23:37:28] <adaptr> postfixadmin does not manage postfix [23:37:55] *** niki has joined #postfix [23:38:23] *** BuenGenio has quit IRC [23:38:42] *** GoGi has quit IRC [23:38:50] *** BuenGenio has joined #postfix [23:39:02] *** pitakill has quit IRC [23:39:10] *** PatrickDK has joined #postfix [23:39:31] <_DeepBlue> postfixadmin is Nothing GUI tools isn't it ? [23:39:57] *** jimpop has quit IRC [23:40:17] *** jimpop has joined #postfix [23:40:50] *** BuenGenio has quit IRC [23:49:43] <sahil> screw postfixadmin. cli. [23:49:45] <sahil> FTW [23:51:33] <Dominian> postfixadmin works fine [23:51:38] <Dominian> for manging virtual domains [23:53:03] <adaptr> it does not manage *postfix* [23:53:20] <adaptr> and you left out an L [23:54:43] <rob0> mangling? [23:55:17] <Dominian> adaptr: funny.. I use postfixadmin.. works fine.. I never said it managed postfix. [23:56:02] <adaptr> no, but _DeepBlue asked for one, and uqlev responded with postfixadmin [23:56:08] <adaptr> I responded to him, not to you [23:56:30] <Dominian> ah [23:56:31] <Dominian> my bad [23:57:11] <rob0> don't apologize ... FIGHT! [23:57:26] <adaptr> no way, I'm tired and I need to go to bed [23:57:30] <adaptr> he wins [23:57:44] <rob0> Perfect, I was rooting for Dominian anyway. [23:58:17] * rob0 holds Dominian's hand up and declares a winner [23:59:23] <Dominian> hehe [23:59:48] <adaptr> made you feel good