[00:01:01] *** weedar has quit IRC [00:05:56] *** jarrodsl9 has joined #Postfix [00:18:41] <jarrodsl9> Hey, I posted here earlier and thought my problem was fixed, but it turns out that only part of it was . . . My verbose /var/log/maillog entries are located here: http://pastebin.ca/1288032, and my non verbose ones are here http://pastebin.ca/1288059. Basically, every time I try to authenticate I get :SASL authentication failure: size read failed, followed by "password authentication failed" and finally, "SASL PLAIN authentication failed: generic fai [00:25:41] *** Knoedel2 has quit IRC [00:32:39] *** bluethundr_ has quit IRC [00:54:42] *** Fallenou has quit IRC [00:55:50] *** war9407 has quit IRC [00:59:54] *** jimpop has joined #postfix [01:11:26] *** csy has joined #postfix [01:22:43] *** Motoko-chan has quit IRC [01:25:53] *** jtaji has quit IRC [01:34:05] *** jarrodsl9 has quit IRC [01:48:19] *** jimpop has quit IRC [01:48:48] *** Comet has joined #postfix [01:48:57] *** nat2610 has quit IRC [01:49:46] <Comet> hey guys, i'm using Ubuntu 8.04 server and i'm trying to add-in support for postfix-postgresql.. i installed the package for it via apt-get, but when I do a postconf -m |grep pgsql i get nothing.. is there anything i need to add to my conf to accept this new addition? [01:57:33] <lunaphyte> Comet: does /usr/lib/postfix/dict_pgsql.so exist? [01:58:39] <Comet> ahh yes indeed it does [01:59:05] <lunaphyte> and what does postconf -m say? [01:59:38] <Comet> its just empty haha [02:00:14] <rob0> huh? [02:00:26] <Comet> nevermind i just had to restart postfix.. LOL! [02:00:36] <Comet> thar she be [02:01:10] *** Ryushin has quit IRC [02:01:26] <Comet> sorry dudes, noob city over here. [02:01:45] <Comet> plus its been a long day :\ [02:02:17] * rob0 again wonders why every noob needs SQL ... [02:03:01] <Comet> virtual userdb's for dovecot :~( [02:03:23] <rob0> I'm still wondering :) [02:03:42] *** jarrodsl9 has joined #Postfix [02:03:50] <Comet> because we try to cram 50+ domains on one server for httpd and email hosting [02:04:15] <rob0> Wow, big job to hand off to a noob. [02:04:28] *** quieteyes has left #postfix [02:04:29] <Comet> yea man totally sucks. [02:08:17] * thumbs wonders why noobs are system administrators [02:08:43] *** jarrodsl9 has quit IRC [02:09:32] <lunaphyte> i've been contemplating on how i can filter mail.log on a server that runs amavis to generate more meaningful output with pflogsumm. [02:10:13] <rob0> lunaphyte: I have your answer. [02:10:40] <rob0> make a symlink to smtpd called "reinject" [02:10:51] <rob0> use that as your service name for the reinjection port [02:11:07] <rob0> it will be logged as such [02:11:28] <lunaphyte> that is clever. [02:11:52] <rob0> I actually did it with a hard link, but a symlink make more sense, doesn't break when you upgrade. [02:12:27] <rob0> might need to patch pflogsumm.pl [02:12:42] <rob0> (so it knows how to trace a message through the filter) [02:14:57] *** jarrodsl9 has joined #Postfix [02:15:53] *** jtaji has joined #postfix [02:16:12] <lunaphyte> the author seems to have little faith. http://www.security-express.com/archives/postfix/2002-02/2098.html [02:18:57] <lunaphyte> of course, that's quite old, and there seem to be a few preprocessors floating around out there now. [02:19:00] *** Aya18111 has joined #postfix [02:19:12] *** F6F has quit IRC [02:25:13] *** deadpigeon has quit IRC [02:28:00] *** CrazyFoam has quit IRC [02:29:07] *** felipe_ has quit IRC [02:29:26] *** Aya18111 has quit IRC [02:30:05] *** bluethundr has joined #postfix [02:30:45] *** bluethundr has quit IRC [02:30:50] *** bluethundr has joined #postfix [02:34:26] *** brancal has joined #postfix [02:35:31] *** jarrodsl9 has quit IRC [02:36:12] *** brancaleone has quit IRC [02:40:56] *** bluethundr_ has joined #postfix [02:41:28] *** bluethundr has quit IRC [02:44:26] *** CrazyFoam has joined #postfix [03:03:29] *** jarrodsl9 has joined #Postfix [03:20:49] *** growltiger has joined #postfix [03:27:52] *** lunaphyte has quit IRC [03:43:05] <sahil> screw pflogsumm; postfix-logwatch ftw! [03:47:30] *** jarrodsl9 has quit IRC [03:53:07] *** Zeit|awy_ has joined #postfix [03:59:09] *** Zeit|awy has quit IRC [04:01:16] *** jarrodsl9 has joined #Postfix [04:06:59] *** pitakill has joined #postfix [04:07:46] *** yajith has joined #postfix [04:16:27] *** lunaphyte has joined #postfix [04:24:06] *** mavrick61 has quit IRC [04:25:13] *** mavrick61 has joined #postfix [04:30:08] *** githogori has quit IRC [04:31:16] *** r3r3 has joined #postfix [04:34:27] *** davidj has quit IRC [04:48:07] *** saurabhb has joined #postfix [04:48:39] *** r33 has quit IRC [04:57:14] *** pickcoder has joined #postfix [05:00:29] <jarrodsl9> can someone please help me figure out what "warning: SASL authentication failure: size read failed" means, and how I can fix it [05:01:03] <sahil> jarrodsl9: what errors surround that one? [05:01:20] <sahil> jarrodsl9: you best paste that information along with the output of 'postconf -n' at pastie.org. [05:02:09] <jarrodsl9> okay [05:11:05] <jarrodsl9> http://pastie.org/342052 [05:11:11] <jarrodsl9> thanks in advance for the help [05:22:11] *** jens_ has quit IRC [05:22:31] *** jens_ has joined #postfix [05:22:48] *** jtaji has left #postfix [05:23:20] *** jtaji has joined #postfix [05:26:22] *** aya18119 has quit IRC [05:28:39] <jarrodsl9> sahil: I can provide the non-verbose output too, if that would be easier [05:29:20] <pickcoder> does postconf -a list cyrus? [05:29:24] *** xpoint has quit IRC [05:29:47] <jarrodsl9> yes [05:30:00] <pickcoder> what client is connecting? [05:30:32] <jarrodsl9> I'm connecting via the in the log localhost, but have tried externally too on mac mail and thunderbird [05:31:02] <jarrodsl9> it says the same thing, "size read failed" no matter where I try to connect from [05:31:24] <jarrodsl9> when I do testsaslauthd -u username -p password, it's always successful, so I don't think it's a cyrus error [05:31:56] * pickcoder shrugs [05:32:06] <pickcoder> the only way I've implemented SASL is via dovecot auth [05:32:19] * sahil too; dovecot always seemed to be cleaner. :) [05:33:15] <jarrodsl9> I used cyrus once before and everything worked out fine... this is a second machine and as far as I know I've done everything exactly the same. [05:33:56] <pickcoder> selinux? [05:34:07] <jarrodsl9> freebsd [05:34:29] <sahil> freebsd, well at least you're on the right track. :-) [05:34:29] <pickcoder> is selinux enabled? [05:34:40] <jarrodsl9> oh, no [05:34:41] <sahil> pickcoder: good god no, not on freebsd! [05:35:11] <sahil> jarrodsl9: can you increase verbosity on sasl? [05:35:12] *** Motoko-chan has joined #postfix [05:35:37] <sahil> jarrodsl9: when you do that, your log should output something like SASL authentication debug: foo bar [05:36:18] <jarrodsl9> okay [05:36:36] <sahil> along with trace, et cetera. it might help troubleshoot. [05:37:09] <sahil> but, again, i hope someone who has experience with postfix+cyrus comes along to help. i've only used dovecot. [05:37:39] <jarrodsl9> if I were to just pkg_delete cyrus and use dovecot would that create more problems than it would solve with broken dependencies, etc? [05:37:54] <growltiger> dovecot rules [05:38:02] <sahil> heh, i just realized that goebel jacked textmate color schemes. :) [05:38:37] <sahil> jarrodsl9: not really; but of course you'd have to make sure postfix were compiled w/ dovecot support and configure dovecot to work as expected with postfix. [05:39:14] <sahil> jarrodsl9: it's probably worth your while to exhaust all troubleshooting options with cyrus first. if for nothing else, just the satisfaction of solving a problem. [05:43:25] *** bhagat has joined #postfix [05:43:52] <pickcoder> software replacement is always a viable troubleshooting solution [05:43:55] <pickcoder> heh [05:46:51] <jarrodsl9> in /usr/local/lib/sasl2/smtpd.conf I added "debug_peer_level: 2" but I'm guessing these parameters are incorrect since nothing changed in the log . . . would you guys by chance happen to know the correct parameters? I'm going to consult the man pages, but that might be more convenient. [05:49:10] <jarrodsl9> nevermind, i put -d in rc.conf [05:55:16] *** jarrodsl9_ has joined #Postfix [05:57:38] *** jarrodsl9_ has quit IRC [05:58:30] *** squisher has joined #postfix [05:58:41] *** jarrodsl9_ has joined #Postfix [05:59:00] <sahil> jarrodsl9: having some connectivity issues? [05:59:05] <squisher> can anyone help me to get to the root of "warning: process /usr/lib64/postfix/local pid xxx exit status 1" ? [05:59:23] <squisher> I have like no clue how to proceed, I don't see any other useful log messages [05:59:38] <sahil> squisher: not without the help of a crystal ball, or maybe some more useful information as requested rather _clearly_ in the /topic. [05:59:42] *** jarrodsl9 has quit IRC [05:59:52] <sahil> :) [06:00:26] <squisher> sahil, hehe, ok, let me work on that [06:00:48] <jarrodsl9_> yeah . . . Mac mail was in the background incessantly imapping my server, and now I'm locked out . . . trying to get back in with some nice 2g internet capabilities thanks to my wonderful small town and its nearly non-existant cell towers [06:00:49] * squisher is a bit worried about his server... [06:01:28] *** pitakill has quit IRC [06:02:39] <squisher> http://pastebin.com/d26428faf [06:02:44] <squisher> sahil: ^^ is that better? [06:03:56] <sahil> better for whom? [06:04:15] * sahil senses some sarcasm and exercises the ignore [06:04:25] <squisher> haha [06:04:54] <sahil> wtf are you typing to start postfix? [06:05:28] <squisher> the usual /etc/init.d/postfix start ? [06:11:09] *** pickcoder has quit IRC [06:12:51] *** jarrodsl9 has joined #Postfix [06:13:04] *** jarrodsl9_ has quit IRC [06:13:45] *** jarrodsl9 has quit IRC [06:13:49] *** jarrodsl9 has joined #Postfix [06:26:29] *** jarrodsl9 has left #Postfix [06:37:58] *** hparker has quit IRC [06:38:15] *** _nalle has quit IRC [06:38:19] *** _nalle has joined #postfix [06:41:04] *** hparker has joined #postfix [06:41:16] *** thetimoo has quit IRC [06:45:08] <squisher> I get absolutely nothing in the logs... only that postfix smtpd exited with status 1 [06:45:30] <squisher> even when I set debug_peer_level up to 3 [06:45:38] *** samix has joined #postfix [06:47:43] <f3ew> squisher, are you logging mail.* to a single file? [06:47:54] <squisher> no, I have .err, .warn and .info [06:49:15] <f3ew> Then your messages are going to different files :) [06:50:30] <squisher> f3ew, really? :-) I actually checked all of them, then make a connection with telnet, and I only get two lines of output in mail.warn [06:50:50] <squisher> postfix/master[29049]: warning: process /usr/lib64/postfix/smtpd pid 29219 exit status 1 [06:50:56] <squisher> postfix/master[29049]: warning: /usr/lib64/postfix/smtpd: bad command startup -- throttling [06:51:00] *** weedar has joined #postfix [06:51:11] <squisher> that's it, nothing else. [06:51:33] <squisher> I do have a setup with amavis / clamav, which could be the culprit, but their messages get logged to the same files and I see nothing :-\ [06:53:09] <squisher> anything on google just tells me to check for other log messages, but I see none [06:55:40] *** higuita has quit IRC [06:56:24] *** Haris_ has joined #postfix [06:56:24] *** Haris has quit IRC [06:58:16] <squisher> and I get the same error with local... [07:09:16] <f3ew> !debug [07:09:17] <knoba> f3ew: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ . [07:10:50] <squisher> thanks f3ew, I'll go over that list [07:19:24] <squisher> hmm, using local -v or smtpd -v doesn't give me any useful info either: http://pastebin.ca/1288386 [07:30:40] *** weedar has quit IRC [07:30:47] <squisher> great, the strace debugger in the DEBUG_README doesn't work for me either [07:31:46] <squisher> I see the "running: " entry, but no output at all [07:31:52] <f3ew> Uh? [07:32:11] <f3ew> you need to run strace with -o /tmp/log or something [07:32:16] <squisher> Dec 17 23:31:49 tau postfix/smtpd[30274]: running: PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin (strace -p 30274 2>&1 | logger -p mail.info) & sleep 5 [07:32:24] <f3ew> K [07:32:25] <squisher> that's as suggested in the docs [07:32:31] <squisher> but - no output in mail.info [07:32:38] <f3ew> See what it's doing with ps [07:32:48] <squisher> how can I, the process quits really fast [07:33:23] <f3ew> strace -ff -o /tmp/log -p <PID OF THE MASTER PROCESS> [07:34:04] <squisher> ok, not sure what I can take away from that output though [07:36:35] <squisher> ah, I see what you mean, let me check the logs [07:36:47] <squisher> much easier than the debugging command btw :-) [07:39:36] <squisher> f3ew, man, you rock :-) [07:39:44] <squisher> and postfix sucks, but anyways :-P [07:41:43] <squisher> this is seriously retarded - why the heck couldn't it log somewhere that it couldn't open the aliasdb? [07:42:17] <roe_> mine does, mine even logs when it tells me I need to run newaliases because it is out of date [07:46:09] <squisher> sigh, here nada - I think I just wasted ~2h on that [07:46:25] <f3ew> Mine does [07:46:39] <squisher> I do think I've seen the message before as well [07:46:53] <squisher> but here I had to look at the strace to find out about it [07:47:07] <f3ew> What changed? [07:47:07] <squisher> anyways, thanks for the help f3ew [07:47:12] <f3ew> yw [07:47:20] <squisher> new system, that's all [07:47:24] <f3ew> Knowing how to use debugging tools helps [07:47:41] *** weedar has joined #postfix [07:47:49] <squisher> hehe, right, I didn't think about using the -ff to follow to the child processes [07:48:03] <squisher> seriously, they should add that to the DEBUG_README [07:48:51] <f3ew> that really depends on what you are trying to do [07:49:09] <f3ew> On a busy server, trying to trace all children of master is horrible [07:49:13] <squisher> haha [07:49:22] <squisher> true enough [07:49:38] <f3ew> As I said, know your tools [07:49:49] <squisher> well, but for some reason that debugging_command didn't work for me - which is strange in its own right [07:50:01] <squisher> Right, it probably doesn't help that it's pretty late... [07:51:21] *** weedar has quit IRC [07:57:20] *** squisher has quit IRC [08:07:16] *** phnord has joined #postfix [08:09:07] *** |_Knoedel_| has joined #postfix [08:10:46] *** sophokles has joined #postfix [08:12:41] *** BuenGenio has joined #postfix [08:17:41] *** BuenGenio has quit IRC [08:18:08] *** BuenGenio has joined #postfix [08:22:51] *** weedar has joined #postfix [08:23:03] *** BuenGenio has quit IRC [08:23:48] *** BuenGenio has joined #postfix [08:28:19] *** raya_ has joined #postfix [08:33:39] *** zuran_ has joined #postfix [08:33:48] *** BuenGenio has quit IRC [08:34:18] *** BuenGenio has joined #postfix [08:35:59] *** Filbert has quit IRC [08:36:15] *** Motoko-chan has quit IRC [08:39:41] <zuran_> I have a slight problem/feature :) When sending an email to Person X, and also to an alias where X is included, X will recieve the email twice... This is all very logical! But my question is if there's a way to add an inch of intelligence in Postfix to make these double deliveries into a single delivery? I'm using maildrop to deliver the emails to the users maildirs [08:40:00] *** Filbert has joined #postfix [08:44:41] <sysmonk> zuran_: show us a delivery log for that kind of email [08:45:11] <sysmonk> er, just pastbein it, don't paste to the channel :) [08:45:33] <sep> zuran_, acording to the FAQ you can not do that [08:49:25] <sysmonk> stuff like cyrus can 'fix' that though [08:49:37] <sysmonk> it has an option called dublicate suppresion [08:54:16] *** BuenGenio has quit IRC [08:54:20] <zuran_> okay, anyways, here is an example output... most is spamd... http://pastebin.ca/1288421 [08:54:34] *** BuenGenio has joined #postfix [08:57:26] *** brancal has quit IRC [08:58:06] *** raya_ has quit IRC [08:58:13] <sysmonk> i don't see any dublicate deliveries there [08:59:34] *** BuenGenio has quit IRC [09:00:25] *** BuenGenio has joined #postfix [09:01:04] <shasta> 'dublicate'? ;) [09:04:13] *** BuenGenio has quit IRC [09:04:49] <sysmonk> duPlicate [09:04:53] <sysmonk> :P [09:04:57] <zuran_> sysmonk, it's because i'm stupid, i showed the wrong log... here's the real log.. user "emil" gets the email twice: http://pastebin.ca/1288430 [09:06:25] <zuran_> since he's adressed both by email address and in the alias "kaffe" [09:10:52] *** madrescher has joined #postfix [09:20:37] *** denis has joined #postfix [09:21:55] *** F6F has joined #postfix [09:22:06] *** marl has joined #postfix [09:25:17] *** bhagat has quit IRC [09:26:09] *** bhagat has joined #postfix [09:33:15] *** bhagat has quit IRC [09:39:15] *** madrescher has quit IRC [09:39:50] *** marl_scot has quit IRC [09:45:30] *** toxygen has quit IRC [09:48:58] *** bhagat has joined #postfix [09:51:49] *** bhagat has quit IRC [09:52:23] *** bhagat has joined #postfix [09:57:17] *** war9407 has joined #postfix [09:58:09] *** hever has joined #postfix [10:01:47] *** nfsnobody has joined #postfix [10:05:19] *** ikaro has quit IRC [10:05:21] *** ikaro has joined #postfix [10:08:41] *** amrit|wfh is now known as amrit|zzz [10:13:16] *** chrissy has joined #postfix [10:16:06] *** nfsnobody has quit IRC [10:19:29] *** csy has quit IRC [10:19:37] *** toxygen has joined #postfix [10:24:26] *** brancaleone has joined #postfix [10:29:51] *** nfsnobody has joined #postfix [10:32:02] *** zuran_ has left #postfix [10:33:40] *** F6F has quit IRC [10:34:28] *** wdp has joined #postfix [10:35:47] *** hever has quit IRC [10:41:21] *** jeev_ has joined #postfix [10:42:39] *** bhagat has quit IRC [10:47:17] *** bhagat has joined #postfix [10:47:55] *** Odd_Bloke has quit IRC [10:50:38] *** felipe_ has joined #postfix [10:53:16] *** Juspion has joined #postfix [10:55:07] *** jeev has quit IRC [10:59:58] *** Odd_Bloke has joined #postfix [11:11:03] *** samix has quit IRC [11:16:55] *** jens_ is now known as Jense [11:23:23] *** Juspion has quit IRC [11:24:38] *** denis_ has joined #postfix [11:25:16] *** madrescher has joined #postfix [11:28:02] *** denis has quit IRC [11:35:56] *** _bugz_ has quit IRC [11:36:30] *** _bugz_ has joined #postfix [11:43:11] *** xpoint has joined #postfix [11:53:18] *** Steve[cug] has quit IRC [11:54:39] *** Steve[cug] has joined #postfix [12:00:09] *** redduck666 has joined #postfix [12:02:04] *** Slashman has joined #postfix [12:02:06] <redduck666> i'd like to configure my mail server so that it would allow mails only to certain addresses to be sent, ie, to mail at my_domain dot com and me at gmail dot com and nothing else. what setting should i be looking at? smtpd_recipient_restrictions ddoesn't seem to be what i am looking for [12:04:25] *** wdp_ has joined #postfix [12:05:37] <sep> redduck666, perhaps something like smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/recipient_access, reject [12:07:00] *** cpm has joined #postfix [12:10:06] <redduck666> sep: that is excatly what i had so far, it doesn't seem to affect stuff sent with mail(1) from localhost [12:11:19] <sep> becouse there is no rcpt to there [12:12:08] <redduck666> :-( [12:12:15] <redduck666> how can i block those to? [12:19:29] *** saurabhb has quit IRC [12:23:04] *** wdp has quit IRC [12:23:38] *** _bugz_ has quit IRC [12:25:12] *** pirho has joined #postfix [12:26:05] *** weedar has quit IRC [12:28:26] *** Slashman has quit IRC [12:37:31] *** higuita has joined #postfix [12:39:10] *** Slashman has joined #postfix [12:44:26] *** yajith has left #postfix [12:53:20] *** madrescher has quit IRC [12:53:26] *** naoshige has left #postfix [12:55:12] *** hever has joined #postfix [13:05:11] *** denis_ has quit IRC [13:10:08] *** growltiger_ has joined #postfix [13:18:52] *** madrescher has joined #postfix [13:20:47] *** csy has joined #postfix [13:20:47] *** chrissy has quit IRC [13:21:19] *** _bugz_ has joined #postfix [13:23:53] *** growltiger has quit IRC [13:30:18] *** Jense has quit IRC [13:37:58] *** bluethundr_ has quit IRC [13:50:39] *** hark has joined #postfix [13:53:40] *** _Driver_ has joined #postfix [13:59:05] *** growltiger has joined #postfix [14:11:53] *** growltiger_ has quit IRC [14:21:36] *** gutocarvalho has joined #postfix [14:27:15] *** growltiger has quit IRC [14:28:37] *** growltiger has joined #postfix [14:34:54] *** bhagat has quit IRC [14:36:24] *** x_dimitri has joined #postfix [14:38:51] <x_dimitri> I keep getting the following error : "(connect to localhost[127.0.0.1]: Connection refused)." Postfix is configured to use amavis for scanning. I understand (from speaking to someone) that this error is amavis-related. Does anyone know how to fix this? [14:40:28] <x_dimitri> alternatively, how do I disable amavis so that postfix doesn't use it for scanning/ [14:42:01] *** Fallenou has joined #postfix [14:42:48] <R1ck> x_dimitri: amavis is probably either in content_filter in main.cf or in transport_maps [14:43:07] <Dominian> content_filter more than likely [14:43:15] <R1ck> x_dimitri: perhaps you are missing a line in master.cf for the re-entry point from amavis [14:43:15] <Dominian> does it do it on everything? [14:43:42] <x_dimitri> Dominian: yes [14:44:42] <Dominian> if it does it on everything.. I'd do as R1ck suggested and check content_filter settings [14:45:16] <x_dimitri> ok [14:45:42] <x_dimitri> here's what I have for my content_filter setting: "content_filter = smtp:[localhost]:10025" [14:45:54] <x_dimitri> however, there's nothing running on port 10025 [14:46:15] <x_dimitri> I suppose that's where amavis listens on? [14:48:46] *** xpoint has quit IRC [14:49:45] <Dominian> supposed to listen on [14:49:59] <x_dimitri> how do i go about disabling it? [14:50:08] <Dominian> comment it out.. safe the config file and restart postfix [14:50:16] <x_dimitri> I did, [14:50:23] <x_dimitri> I'm still getting the same error [14:50:42] <Dominian> so instead of content_filter = blah blah [14:50:51] <Dominian> you have: #content_filter = blah blah [14:51:07] *** denis has joined #postfix [14:51:40] <x_dimitri> yes, that's what I did [14:52:27] <Dominian> and then: postfix reload [14:52:34] <x_dimitri> yes, that too [14:52:37] <Dominian> actually you may have to do postfix restart [14:52:47] <Dominian> or restart it however your distro does [14:52:55] <x_dimitri> i stopped it and started it again [14:53:03] <Dominian> oh wait [14:53:06] <Dominian> do you have emaisl int he queue? [14:53:11] <x_dimitri> yes [14:53:16] <Dominian> postsuper -r ALL [14:53:16] <x_dimitri> mailq lists emails [14:53:24] <x_dimitri> and requeued them using "po.. [14:53:29] <Dominian> have to requeue the messages to give them new "routing" information. [14:53:31] <x_dimitri> ok, yeah, same command [14:53:36] <x_dimitri> ok, I'll do it again [14:54:21] <x_dimitri> ok, looks like they're going through [14:54:25] <x_dimitri> thanks a lot [14:54:32] <Dominian> no problem [14:54:38] <x_dimitri> i still see some messages from "mailq" [14:54:44] <x_dimitri> that retain the initial error [14:54:48] <Dominian> give themt ime [14:54:52] <x_dimitri> ok [14:54:57] <Dominian> Did you remove amavis or something? [14:55:18] <x_dimitri> nope... [14:55:25] <x_dimitri> and talking about that... [14:55:40] <x_dimitri> in master.cf.. I notive a reference to /usr/sbin/amavis [14:55:46] <x_dimitri> but no such file exists [14:55:57] <Dominian> Is this debian? [14:55:58] <x_dimitri> however, the same config works just fine on another server [14:56:04] <x_dimitri> ubuntu [14:56:07] <x_dimitri> which is based on debian [14:56:10] <Dominian> argh [14:56:14] <Dominian> argh argh [14:56:20] <Dominian> ubuntu does some stupid shit with their installa [14:56:23] <jelly> heheh, chroot ftw! [14:56:26] <Dominian> I manage an ubuntu email server.. [14:56:32] <jelly> or ftl, as the case may be [14:56:34] <Dominian> I ripped all their crap out and installed everything via source [14:57:15] <jelly> no need to rip everything out from Debian; can't vouch for Ubuntu though [14:57:41] <x_dimitri> hm... [14:57:51] <x_dimitri> um.. actually.. [14:57:56] <x_dimitri> my apologies... [14:58:02] <x_dimitri> this is actually a suse 9 box [14:58:19] <x_dimitri> I work with ubuntu most of the time so I just spit that out thoughtlessly [14:58:25] <x_dimitri> it's suse 9 not ubuntu [14:58:58] <stockholm> is suse 9 based on debian too? :-) [14:59:10] <stockholm> suse9 is rather old, isnt it? [14:59:40] <Dominian> suse 9 is definitely old [14:59:48] <Dominian> 10.2 support was dropped a week ago if that tells you how old 9 is [15:01:09] <x_dimitri> stockholm: it is... [15:01:33] <x_dimitri> I couldn't even find ISOs on the net the other day when I needed to install mysql [15:02:04] <x_dimitri> I had to "hack" it. I copied all relevant files (well, those I deemed relevant) from an identical server and crossed my fingers... [15:02:20] <x_dimitri> ...and it worked. but of course that's no way to manage a server [15:08:57] * x_dimitri thanks everyone sincerely for their help. [15:09:03] *** x_dimitri has left #postfix [15:09:19] <Dominian> then pay us! :P [15:09:24] *** growltiger_ has joined #postfix [15:09:58] * cpm pays Dominian with a sharp rap on the knuckles with a wooden ruler [15:11:04] <Dominian> ow [15:13:03] <cpm> behave [15:13:28] <Dominian> NO SOUP FOR YOU! [15:13:42] *** brancal has joined #postfix [15:17:40] * stas http://www.youtube.com/watch?v=dhXBBvPhGDQ&feature=related [15:20:21] <stockholm> lol [15:20:46] <stockholm> stas: what is that about? [15:23:56] <stas> stockholm: sorry, i thought i did a /me :) [15:24:00] <stas> it's about [15:24:20] *** growltiger has quit IRC [15:24:26] <stas> a reporter asks the question, what with you're washing your hair [15:24:45] *** brancaleone has quit IRC [15:24:55] <stas> and the old woman says with vinegar [15:25:08] <stockholm> oh. shrudder [15:25:27] <stockholm> does that clean well? [15:25:29] <stas> then she's been asked WHY? and the old women says... kinda: WHY NOT?! :D [15:25:35] <stockholm> lol [15:25:40] <stas> I know :D [15:28:32] *** memetic has quit IRC [15:28:37] *** memetic has joined #postfix [15:31:22] *** Fallenou has quit IRC [15:33:01] *** brancal has quit IRC [15:33:15] *** growltiger has joined #postfix [15:47:30] *** growltiger_ has quit IRC [15:50:30] *** Lap_64 has joined #postfix [15:56:30] *** dft has joined #postfix [16:07:19] *** thetimoo has joined #postfix [16:16:06] *** madrescher has quit IRC [16:22:54] *** Haris1 has joined #postfix [16:34:10] *** mcp has quit IRC [16:34:12] *** emcepe has joined #postfix [16:34:54] *** emcepe is now known as mcp [16:38:11] *** pingouin has joined #postfix [16:46:49] <Steve[cug]> ld [16:46:54] <Steve[cug]> heys guys [16:47:20] <Steve[cug]> anyone happen to know an easy way to push a mailspool through procmail? [16:47:47] *** MaximB has joined #postfix [16:48:50] <hparker> bulldozer? [16:48:59] <Steve[cug]> ?? [16:49:39] *** karrotx has joined #postfix [16:50:02] <MaximB> does "postfix -f" deletes my queue or releases them by sending them ? [16:51:37] <Dominian> it flushes the queue [16:51:55] <Dominian> meaning it attempts immediate delivery.. if it can be delivered.. it will remove it from the queue [16:52:53] *** makerc has joined #postfix [16:53:15] <MaximB> cool, I cannot receive some emails from some people , how do I make sure they will always be delivered instead of queued ? [16:53:23] *** _nalle has quit IRC [16:53:35] <Dominian> are they being rejected? [16:54:57] <MaximB> they are being queued for some reason [16:55:53] *** deadpigeon has joined #postfix [16:56:07] <Dominian> uhhh [16:56:14] <Dominian> all messages get queued then delivered... [16:56:20] <Dominian> how long are the delays? [16:56:21] *** makerc has quit IRC [16:56:55] <MaximB> no delays, they just being queued forever from some addresses [16:57:05] <Dominian> What are the error messages? [16:57:08] <Dominian> there has to be a reason [16:59:48] *** jeflui has joined #postfix [17:10:03] <MaximB> mmm... I'll check that later, she is gone now and it says it has been delivered.. be back when I'll find out more about that issue , thanks. [17:10:06] *** MaximB has left #postfix [17:11:53] *** Lap_64 has quit IRC [17:15:03] *** hever has quit IRC [17:18:36] *** brancaleone has joined #postfix [17:28:00] *** jeflui has left #postfix [17:28:47] *** sophokles has quit IRC [17:33:37] *** amrit|zzz is now known as amrit [17:34:53] *** amrit is now known as amrit|wfh [17:35:16] *** Dominian has quit IRC [17:36:12] *** rob0 has quit IRC [17:49:11] *** phnord has quit IRC [17:50:53] *** Dominian has joined #postfix [17:54:19] *** rrva has joined #postfix [17:54:49] <rrva> How can I make postfix cache undeliverable recipients for a long time without using recipient verification through probing? [17:55:09] *** mattx86 has joined #postfix [17:58:37] *** rob0 has joined #postfix [17:59:52] <cpm> what? [18:08:33] *** rrva has quit IRC [18:09:26] <adaptr> the shock was too great [18:10:18] *** dft has quit IRC [18:18:07] *** phazzi has joined #postfix [18:18:41] <phazzi> any1 have a good maillog parse? [18:19:02] <f3ew> !pflogsumm [18:19:02] <knoba> f3ew: "pflogsumm" : a perl script to analyse your mail log file and generate nice reports. See: http://jimsun.linxnet.com/postfix_contrib.html (metalog users see the !mpflogsumm factoid) [18:21:00] *** mattx86 has quit IRC [18:21:34] *** hever has joined #postfix [18:22:06] <phazzi> i know this but not too much useable to me, i need one to make reports by rcpt/sender [18:22:20] <phazzi> iam looking for a php free source code, then i can change it [18:22:34] *** zox has quit IRC [18:22:48] <adaptr> wow [18:22:57] <adaptr> that's an amazing display of cluelessness [18:23:31] <adaptr> did you actually TRY pflogsumm ? [18:26:05] <phazzi> long time ago, and not good for me, but i will give it a new try :) [18:26:09] * cpm tries adaptr [18:26:09] <phazzi> :D [18:26:12] *** denis has quit IRC [18:26:51] <phazzi> other thing [18:27:12] <phazzi> my users have getting problems when configuring google to fetch mail from my pop3/imap server [18:27:29] <phazzi> it say s(connection reseted by peer, remote server closed the connection) [18:27:33] * cpm falls over [18:27:50] <phazzi> anyone have any idea? already check everyting, cant find what is it [18:28:01] <cpm> postfix isn't an imap/pop server [18:28:09] <phazzi> :( when running on linux server was no problem, migrated to freebsd and start giving it [18:28:25] <phazzi> pop3/imap is courrier... [18:28:33] <phazzi> ooh this is postfix only channel eheh sorry [18:28:41] <phazzi> then i have one to postfix [18:28:52] <phazzi> listen this [18:28:52] <phazzi> eheh [18:29:33] <phazzi> the spammers are sending from: myemail at mydomain dot com after 'data' command, then it appear like i have sent the mail [18:30:03] <phazzi> and at the mail from: parameter they are putting other email, so SPF dont block it [18:30:18] <phazzi> any know how to block FROM: after data command ? [18:31:35] *** |_Knoedel_| has quit IRC [18:32:47] *** hparker has quit IRC [18:35:35] *** hparker has joined #postfix [18:41:09] *** _nalle has joined #postfix [18:41:25] <Haris_> Is it possible to deliver spam mail to users's Trash folder? [18:43:06] *** sidh has quit IRC [18:44:33] *** hever has quit IRC [18:45:30] <phazzi> Haris_, with maildroprc its easy, are you using maildrop? [18:49:32] *** Mark_knopfler has joined #postfix [18:49:34] <adaptr> phazzi: since you obviously only allow mail from mynetworks or sasl-authenticated users, this is not a concern, as you will never deliver this spam to anyone [18:49:44] <Mark_knopfler> parameter mail_owner: unknown user name value: postfix [18:49:50] <Mark_knopfler> what does means ? [18:49:53] <adaptr> of course, if you have managed to fuck up postfix's most basic protection mechanisms [18:50:00] <Mark_knopfler> I have a user called postfix !!! [18:50:14] <adaptr> inside your chrooted passwd ? [18:50:18] <adaptr> I am doubting that [18:51:57] <adaptr> play something for me [18:51:57] *** growltiger_ has joined #postfix [18:55:01] *** Fallenou has joined #postfix [18:55:26] *** jtaji has quit IRC [18:56:38] *** F6F has joined #postfix [18:57:48] *** csy has quit IRC [18:59:02] <phazzi> adaptr: but it happens on my MX server, user dont need to authenticate to send mail to a domain that i host, but spammers sending mail useing this technique, so email reached the user mailbox and on fucking outlook it appear from: <myuser at email dot com> [18:59:38] *** csy has joined #postfix [18:59:38] <phazzi> i need something to block from: parameter after data command [18:59:55] <adaptr> phazzi: they don't need to authenticate when ? [19:00:00] <adaptr> what kind of users ? [19:00:54] <phazzi> users or other smtp servers dont need to auth when sending mail to domains that i host [19:01:14] <phazzi> mail reaching on my MX server dont need to authenticate if destination domain is hosted here [19:01:35] *** Severed_Head_Of_ has joined #postfix [19:01:39] *** growltiger_ has quit IRC [19:01:52] <phazzi> so, the spammers connect to my MX and do: [19:01:57] <phazzi> helo spammer.com [19:02:03] <phazzi> mail from: asdnfu at yahoo dot com [19:02:10] <phazzi> rcpt to: phazzi at domain dot com [19:02:11] <phazzi> data [19:02:19] <phazzi> subject: buy v1agr4 [19:02:24] <phazzi> from: phazzi at domain dot com [19:02:28] <phazzi> <mail content> [19:02:29] <phazzi> . [19:02:30] <phazzi> quit [19:02:55] <phazzi> then the email reach my mailbox and on the outlook appear the FROM field like i have sent the email... [19:03:20] <phazzi> got it ? [19:04:08] <phazzi> its limited to just send to my email, he cant send to others address by cause a bad impression :( [19:06:20] *** madrescher has joined #postfix [19:06:21] *** growltiger has quit IRC [19:07:08] <adaptr> phazzi: welcome to the wonderful world of electronic mail [19:08:07] <adaptr> if it really bothers you, use sender verification, that will at least verify that the sender address is a real one [19:08:19] <adaptr> use a proper RBL [19:08:42] <adaptr> these two measures will cut down on spam by over 90% [19:08:47] <adaptr> nothing else will [19:09:40] <phazzi> i already use those measures [19:10:10] *** growltiger has joined #postfix [19:10:41] <phazzi> i work with postfix for years, always looking how to tune it to the best eheheh any addons are welcome :D thanks [19:11:49] <adaptr> you "work with postfix for years" ? [19:11:51] <adaptr> really ? [19:12:05] <adaptr> and it has JUST NOW occured to you that header from addresses can be forged ? [19:12:17] <adaptr> go jerk someone else's chain, okay ? [19:13:30] <cpm> adaptr, yea, this is that funny bit where outlook respects From: in the body, not header. Outlook fail again [19:13:49] <cpm> body regex [19:14:22] *** Spec has quit IRC [19:14:42] *** Spec has joined #postfix [19:14:48] <adaptr> cpm: who's talking about "body" From addresses ? I can assure you there is no such thing [19:15:35] <cpm> body? don't need no stinking body [19:15:53] <cpm> content [19:16:19] * cpm rests assured [19:17:55] <Haris_> that raises a question [19:18:46] <Haris_> when scanning for spam, number the best parts of an email in ascending order that one can scan to identify spam? [19:19:11] <adaptr> no [19:19:19] <cpm> if from: = *Haris_* reject [19:19:32] <adaptr> you're buying a service from them; that service has been interrupted [19:19:36] <adaptr> oh damn [19:19:43] <adaptr> never mind, echan [19:19:44] <Haris_> ? [19:20:57] <Haris_> Is headers, body, the best option? Are they the only things one can scan for to identify spam? [19:21:09] *** growltiger has quit IRC [19:21:18] *** growltiger has joined #postfix [19:21:45] <adaptr> Haris_: which parts of electronic mail can you show me, then ? [19:21:52] <adaptr> other than headers and body [19:21:55] <Haris_> ok, there's nothing else :P [19:22:00] <Haris_> lol [19:22:52] * Haris_ goes back to dinner [19:24:25] *** Severed_Head_Of_ has quit IRC [19:24:52] <phazzi> really, work more than 5 years, just now got this issue. lol dont blame me [19:24:59] *** zox has joined #postfix [19:25:21] <phazzi> i know about it can be forged but fucking outlook just need to change [19:25:40] <adaptr> phazzi: I do blame you [19:25:43] <phazzi> this is a SPF bypass [19:25:47] <adaptr> who else would you blame ? [19:25:48] <phazzi> SPF sucks [19:25:56] <phazzi> lol [19:27:26] <phazzi> i will set up a bot to you blame ok [19:28:09] <adaptr> it's like this: these are known issues, there's not a lot you or anybody else can do about them, so either you find away around or you live with it. [19:28:18] <adaptr> what you DON'T do is bitch about it where I can hear you [19:28:55] <phazzi> well i just asked it. lol [19:29:04] <adaptr> no, you didn't [19:29:16] <Haris_> nice [19:29:21] <Haris_> that's what I tell everyone [19:29:27] <phazzi> why did u dont make a pipe to compare "mail from:' and "from:" after data [19:29:29] <Haris_> except the 'bitch'ing part [19:30:16] <phazzi> but i prefer stay here blameing others lol, badboy [19:30:17] <adaptr> phazzi: they're incomparable [19:30:40] <adaptr> one is an envelope, which outlook will never see [19:30:52] <adaptr> the other is a header, which hopefully outlook will see [19:30:53] <phazzi> yeah, i know lets send mail asking microsoft to make a patch removing the return-to option [19:31:06] <phazzi> after data command inst more a header [19:31:16] <adaptr> what ? [19:31:19] <phazzi> did u dont know about postfix? OMG [19:31:19] <phazzi> lol [19:31:21] <phazzi> kidding [19:31:33] <phazzi> but after data command, inst header anymore [19:31:50] *** Knoedel2 has joined #postfix [19:31:50] <adaptr> I'm starting to get seriously bored with your "outings" [19:32:14] <adaptr> and you really, really need to get a clue somewhere [19:32:38] <phazzi> relax dude, we are just exchangin ideas [19:33:29] <adaptr> no, we're not [19:33:37] <adaptr> you're spouting nonsense and being insufferable [19:33:50] <adaptr> and I am through trying to get this across [19:34:18] <cpm> yer losing it man [19:34:32] <phazzi> nonsense? i just expose one problem that i need to resolve, if you are too much expert to just answer "there is no patch to this", then dont answer nothing [19:34:56] * Haris_ eats more popcorn [19:34:58] <phazzi> you are too much stressed [19:35:00] <Haris_> :D [19:35:04] <phazzi> lol [19:35:26] <adaptr> cpm: what am I losing that wasn't already gone ? [19:35:40] <cpm> adaptr, good point. Noted [19:35:58] <roe_> this is becoming a popular topic in here. People not knowing the difference between envelope addresses and header addresses. And why it is good they are separate. [19:36:16] *** growltiger_ has joined #postfix [19:36:18] <roe_> phazzi has to be the 3 person in the last week wanting to "fix" it [19:36:21] * adaptr stuffs cpm in his own Santa Stocking while screaming "put THAT after DATA, you fuck!" [19:36:43] <Haris_> damn [19:36:52] <Haris_> you fuck with the same sex too? [19:36:54] <adaptr> heh... the look on my face when I get up with saw and hammer in hand.. priceless [19:36:55] <Haris_> eww! [19:37:10] * cpm chuckles [19:37:13] <Haris_> eww = s|ck [19:37:17] <adaptr> it's a cross between Jim Carrey and Nicholson [19:37:31] <Haris_> oh, ok [19:37:33] <adaptr> Haris_: stop whining you christmas fairy [19:37:49] <phazzi> lol [19:38:12] <phazzi> roe_ good to know that . iam not alone lol [19:38:24] <Haris_> lol [19:39:16] <roe_> if that is in fact your question, the answer is very simple... [19:39:23] <roe_> stop thinking about it and move on [19:39:31] *** timotiCK has joined #POSTFIX [19:39:33] <phazzi> i will get they ppl togheter and go to #c ask someone to code a patch lol, just kddin, don blame me saying "have no patch' please [19:39:37] <adaptr> I told him that repeatedly,he's clueless [19:39:53] <phazzi> roe_, yes i did it, really nothing to do about it :( [19:40:18] <Haris_> that's like saying, stop thinking about a girl that ditched you and move on [19:40:30] <Haris_> hehe [19:40:36] <Haris_> lol [19:40:40] <roe_> hire a prostitute? [19:40:42] * Haris_ goes back to CS with a laugh [19:41:23] <phazzi> lolll [19:41:33] <phazzi> haris_ really something like this lol [19:42:06] <Haris_> I wish I gave all those girls a chance to ditch me [19:42:08] <Haris_> lol [19:42:40] <phazzi> all day i have a fucking client calling here saying "someone is using my mail" so i have to explain the attendant to explain the client lol [19:42:48] <phazzi> impossible dont remimder it [19:42:57] *** jtaji has joined #postfix [19:42:59] <roe_> compare it to real mail [19:43:14] <roe_> I can sign whose ever name I want, even on the envelope [19:43:31] <roe_> at least with email you have some accounting for where the mail came from if you dig deep enough [19:44:51] <phazzi> i will make something to just change the 'from: <mail>' after data command to the address entered at initialy 'mail from' [19:45:10] <phazzi> sed -i will be my friend lol [19:45:41] <phazzi> it will have any negative impact? [19:45:47] <roe_> yes [19:46:11] <adaptr> it will make you look like a dork [19:46:37] <phazzi> adaptr, sed -i was just a joke [19:46:55] <adaptr> phazzi: altering the ENVELOPE address is stupid and DOES NOT AFFECT CLIENTS [19:47:02] * roe_ goes to lunch, and hopes we are on a new topic by then [19:47:04] <adaptr> mail clients don't KNOW the envelope [19:47:31] <adaptr> go off somewhere and read RFC 2821 and 2822 [19:47:32] <phazzi> adaptr, sorry but i think you dont understood what i said. [19:47:43] <adaptr> I understood perfectly [19:47:48] <adaptr> even though it made zero sense [19:47:50] <phazzi> mail clients get just the FROM AFTER DATA COMAND [19:48:08] <adaptr> what normal people call the "Header", yes [19:48:10] <adaptr> and ? [19:48:48] <phazzi> before it reaches the mailbox i will change it with the entered initialy 'MAIL FROM:' command [19:49:08] <adaptr> you can't [19:49:19] <adaptr> and you shouldn't even if you could [19:49:28] <adaptr> you'll break the RFCs [19:49:49] <phazzi> after mail enter on my MX server i take care of RFC [19:49:51] <adaptr> stop thinking you're oh so smarter than the people who invented this stuff [19:49:59] <seekwill> lol [19:50:00] <adaptr> you're really, really not [19:50:02] <phazzi> but ok, will not bother you anymore [19:50:06] <adaptr> thank you! [19:50:24] <seekwill> phazzi: Yeah, you really shouldn't do that. [19:50:39] <phazzi> ok.. ok [19:50:43] *** growltiger has quit IRC [19:50:43] <phazzi> :D [19:51:23] <seekwill> I don't believe you [19:51:32] <phazzi> why [19:51:33] <seekwill> Hand over your root password so we can make sure you don't [19:51:46] <seekwill> Because you didn't ask what you'd break [19:52:05] <phazzi> if i ask adaptr will just kill me [19:52:09] <phazzi> lol [19:52:12] <seekwill> He would not [19:52:24] <seekwill> He would beat you CLOSE to death... but not kill [19:52:50] <adaptr> I'd hand him over to thumbs just on the point of death [19:52:51] <phazzi> in my head i convinced that i can do it, i will have to try it [19:53:18] <phazzi> will fuck the postfix source to try it lol [19:54:03] <roe_> you think you got a chastising for asking about it. Just wait until you come back needing help troubleshooting it [19:54:05] <phazzi> will force it to print the primary 'mail from' parameter after DATA command, maybe can work eheh [19:54:10] <seekwill> You can probably do it. [19:54:23] <seekwill> But you don't want to do it, since you're going to break things you didn't know about [19:54:34] <seekwill> You're not solving the problem correctly [19:55:04] <seekwill> It's not a matter of a feature missing from postfix. It's about how emails work [19:55:14] * seekwill hungry [19:55:32] *** Knoedel2 has quit IRC [19:55:33] <rob0> what did I miss? [19:56:11] <phazzi> well, ok. i will try something like this so i tell the mad result lol... [19:56:25] <phazzi> i have to quit, be back tommorow [19:56:44] <phazzi> adaptr, loveyou, relax baby [19:56:48] *** carl- has joined #postfix [19:56:55] <phazzi> seekwill, thanks by attention and patience :D [19:57:01] <phazzi> roe, bye thank u too [19:57:11] <phazzi> first time here, i liked :D [19:57:19] <adaptr> rob0: you just caught him as he was leaving [19:57:33] <rob0> yeah I gathered that ... was it fun? [19:57:44] <phazzi> lol [19:57:44] <rob0> 18:49 < adaptr> stop thinking you're oh so smarter than the people who invented this stuff [19:57:53] <adaptr> another genius who wants to force his sender headers equal to his enevelope senders [19:57:58] <rob0> haha [19:58:11] <rob0> and y'all failed to talk him out of it? [19:58:15] <adaptr> because of all teh nasty spam and such [19:58:20] <adaptr> no, he was rather adamant [19:58:22] <roe_> I'd like to meet the people who worked on both the original SMTP standard as well as the most recent release of it [19:58:25] <adaptr> he's going to hack teh source [19:58:45] <adaptr> roe_: to beat them with blunt objects ? [19:58:57] <roe_> just to see, if in fact they are smarter than me [19:59:11] <adaptr> well, I suspect Allman may be [19:59:26] <adaptr> although the 70s and80s were innocent times [19:59:33] <roe_> SMTP suffers from the same problems as IPv4 [19:59:45] <adaptr> what, not enough addresses ? :D [19:59:47] <phazzi> cya guys [19:59:49] *** phazzi has quit IRC [19:59:53] <rob0> Smarter, maybe not, but I doubt any of us would have done better than they did. [19:59:59] <roe_> improper foresight [20:00:05] <rob0> Whew, he even IRC's as root! [20:00:12] <rob0> What a smart guy. [20:00:21] *** sol has joined #postfix [20:00:22] <sol> hello [20:00:25] <adaptr> roe_: I accuse you of improper foresight with the candlestick in the rectum! errr.. I'm sure I meant refectory [20:00:29] <sol> im having some difficulty wrapping my head around something [20:00:39] <rob0> oh this sounds like fun too [20:00:45] <adaptr> sol: we'll stretch it for you [20:00:50] <rob0> let's help wrap a head around things [20:00:50] <sol> wonderful, thank you :D [20:01:55] <adaptr> it's not living if it doesn't hurt! [20:02:13] <sol> i want to block certain subnets from sending mail to me - a blacklist of sorts. i want postfix to do it rather than the firewall since i want them to receive a proper reply "blocked because you send spam" or what not. do i use smtpd_client_restrictions with check_client_access cidr:... ? [20:02:28] <sol> or does that only stop people from using the smtp server to send out? [20:02:29] <rob0> that's one way, yess [20:02:43] <sol> so mail to me will still be blocked? [20:02:51] <sol> i wasnt sure if it was only for outgoing [20:02:52] <rob0> you can put check_client_access in ANY smtpd_*_restrictions [20:03:20] <rob0> smtpd ... the server, listening on port 25 [20:03:31] <adaptr> or not [20:03:39] <sol> so smtpd_sender_restrictions would be smarter? [20:03:57] * adaptr goes to change his smtpd port to 26, to stop all the spam [20:04:06] <rob0> no, generally I would recommend using smtpd_recipient_restrictions for everything [20:04:06] <sol> haha [20:04:08] <adaptr> sol: it depends on what you want to do [20:04:28] <sol> adaptr; I want to block other peoples servers (1.1.1.1/24 for example) from sending to mail at mydomain dot com [20:04:36] <sol> a blacklist [20:04:38] <adaptr> blocking on sender* does not log all info; we like logs [20:05:01] <sol> i have a separate app creating the blacklist, which will do logging [20:05:19] <sol> i just dont know what "sender" means; whether it means people on my network as the "sender" or people outside [20:05:39] <sol> the manual just says "MAIL FROM" [20:05:40] <adaptr> it means the restrictions are checked at the point the MAIL FROM command is received [20:05:40] <rob0> Functionally all smtpd_X_restrictions X={client,helo,sender,recipient} are the same, except that smtpd_recipient_restrictions is mandatory and controls who can relay. [20:05:52] <rob0> !access [20:05:53] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server. [20:06:00] <sol> alright, that makes sense [20:06:07] <rob0> !smtpd_delay_reject [20:06:09] <knoba> rob0: "smtpd_delay_reject" : a configuration parameter in the main.cf: Wait until the RCPT TO command before evaluating $smtpd_client_restrictions, $smtpd_helo_restrictions and $smtpd_sender_restrictions. [20:06:18] <sol> ill use client [20:06:21] <sol> thanks [20:06:30] <rob0> you didn't understand anything I said [20:06:38] <sol> i think i did [20:06:39] <adaptr> or me [20:06:53] <sol> why does it matter at what stage [20:07:22] <rob0> Doesn't. It's just easier to manage ONE stage rather than 2, 3 or more. [20:07:23] <sol> <rob0> Functionally all smtpd_X_restrictions X={client,helo,sender,recipient} are the same, except that smtpd_recipient_restrictions is mandatory and controls who can relay. --- that seemed pretty straightfoward [20:07:26] *** Fallenou has quit IRC [20:07:42] <sol> well, ive got pop-before-smtp already using client [20:07:54] <adaptr> ouch [20:07:55] <rob0> no, that's wrong [20:08:08] <sol> what? [20:08:15] <rob0> I mean even other than the ugly kluginess of pop-before-smtp [20:08:23] <sol> yea it is kudgly [20:08:30] <adaptr> rob0: there are legitimae reasons to use two stages - when you want to apply the same restriction multiple times in a different way [20:08:34] <sol> but try getting 50 users to set up auth'd smtp [20:08:41] <rob0> smtpd_recipient_restrictions controls who can relay, and ONLY that stage. [20:08:49] <sol> oh [20:09:33] <sol> er kludgy* how did I write kudgly lol [20:10:12] <adaptr> sol: setting up smtp auth on thunderbird takes about one minute [20:10:34] <sol> adaptr; it takes less than a minute. [20:10:39] <sol> if you're not one of my users. [20:10:41] <seekwill> But it's one minute that I don't have! [20:10:50] <seekwill> sol: I am one of your users [20:11:05] *** Mark_knopfler has quit IRC [20:11:15] <sol> seekwill; well, then you're not the guy that decided to clean some corrosion from an electrical cord while the other side was plugged in...with a metal kife. [20:11:17] <sol> knife* [20:11:37] <seekwill> Oh [20:11:40] <seekwill> Yeah, that wasn't me [20:11:44] <seekwill> I thought that was you! [20:12:15] <sol> no but i wish i was that dumb, so i didnt realize how dumb that was. [20:12:19] *** denis has joined #postfix [20:25:04] *** githogori has joined #postfix [20:29:25] *** pitakill has joined #postfix [20:33:43] *** brancaleone has quit IRC [20:33:48] *** pitakill has quit IRC [20:34:17] *** Haris1 has quit IRC [20:35:27] *** pitakill has joined #postfix [20:37:03] *** thetimoo has left #postfix [20:42:36] *** pitakill has quit IRC [20:43:37] *** darkphader has joined #postfix [20:46:28] *** w1ll has joined #postfix [20:47:17] *** dft has joined #postfix [20:47:20] <dft> ehlo [20:47:26] <dft> quick hint needed [20:47:50] <adaptr> it's "don't do it" [20:48:15] <w1ll> I have several different domains that need to be able to act as email servers. Each domain has it's own ip and reverse dns, but postfix will only send out of the default ip. Is there a way to change this? [20:48:57] <dft> we have incoming spam msgs with MAIL From and MAIL To set to the same valid email address which is then flooding the inbox with NDR's, what's a quick fix [20:49:10] <dft> other than changing the amavisd drop score [20:49:37] <adaptr> w1ll: several points of confusion here [20:49:43] <dft> ie: dsn cutoff level [20:50:04] *** growltiger_ has quit IRC [20:50:57] <dft> we have incoming spam msgs with MAIL From and MAIL To set to the same valid email address which is then flooding the inbox with NDR's, what's a quick fix [20:51:16] <dft> other than changing dsn_cutoff_level [20:51:36] <w1ll> adaptr, I have 3 clients. Each wants to run a mail server. I have postfix bound to each of the clients ips and in master.cf I set the hostname via -o myhostname=clients.domain. However, when they go send email it's always going out the IP address bound to eth0 instead their ip. [20:51:45] <dft> sry for the repeat, wasn't IDENTIFIED with nickserv earlier [20:52:06] *** havvg has joined #postfix [20:52:07] <adaptr> w1ll: yep. [20:53:01] <adaptr> w1ll: consider setting up three virtual boxes [20:53:45] <w1ll> ah ok [20:53:52] <w1ll> I was wondering if that was the route I'd need to take [20:54:05] <w1ll> thank you [20:55:41] *** mcp has quit IRC [20:56:31] *** mcp has joined #postfix [20:56:41] *** Zumu has quit IRC [20:56:41] *** bacaci__ has quit IRC [20:56:41] *** cite has quit IRC [20:56:41] *** _ruben has quit IRC [20:56:41] *** xorl has quit IRC [20:56:41] *** e_ has quit IRC [20:58:02] * cpm virtualizes adaptr [20:58:27] <adaptr> too late, I've been fully virtualized since 2001 [20:58:48] <dft> so does anyone have any hints for my issue? [20:59:17] <cpm> your issue, , , , Of DEATH? [20:59:29] <dft> wow, funny guy [20:59:41] <dft> in all seriousness though [21:00:00] <dft> we have incoming spam msgs with MAIL From and MAIL To set to the same valid email address which is then flooding the inbox with NDR's, what's a quick fix without changing amavisd's dsn_cutoff level [21:00:12] *** Zumu has joined #postfix [21:00:12] *** bacaci__ has joined #postfix [21:00:12] *** _ruben has joined #postfix [21:00:12] *** cite has joined #postfix [21:00:12] *** xorl has joined #postfix [21:00:12] *** e_ has joined #postfix [21:02:01] <dft> since conditional header checks is off the table, hopefully someone here in their infinite l33t postfix knowledge may be able to point in the right direction for alleviating this problem [21:03:30] *** pitakill has joined #postfix [21:05:59] <seekwill> I don't really understand the problem [21:06:09] <seekwill> Spam messages are coming in with the same headers. [21:06:15] <seekwill> How does that generate ndrs? [21:07:15] <seekwill> Maybe you can write a patch for postfix to change the from header to match the mail from envelope sender? [21:08:40] <dft> here's the deal... [21:08:56] <seekwill> No deal [21:09:00] <dft> damn [21:09:05] <dft> 1 $ [21:09:09] <dft> almost free [21:09:10] <seekwill> woohoo! [21:10:16] <dft> Mail To/From are the same (spoofed from address) message is scored as spam by postfix/amavisd and the user is receiving the NDR [21:10:35] <dft> the NDR being, "you sent spam blah blah blah" [21:10:44] <seekwill> Is that your config? [21:10:56] <seekwill> I mean [21:11:04] <seekwill> Is your server the one sending the naughty NDR? [21:11:18] <dft> good question [21:11:20] <dft> standby [21:11:31] <seekwill> You don't know? [21:11:43] <seekwill> You should not be sending NDRs for spam [21:12:02] <dft> unfortunately the powers that be, have requested it be done this way [21:12:21] <seekwill> The powers at be do not know good practices. That's why they hired you :) [21:12:28] <adaptr> they may be powers, but they have zero clue [21:12:34] <adaptr> educate them [21:12:36] <dft> adaptr ty [21:12:41] <adaptr> apply cluebat whenever necessary [21:13:08] <dft> enough chitchat, any other options [21:13:31] <seekwill> Well, if you stopped the bad practices... [21:13:54] <dft> seekwill otherwise you're saying you don't know [21:13:56] <dft> ty [21:14:33] <seekwill> Not really, but if you want to assume that, ok :) [21:14:56] <dft> growup [21:14:59] *** dft has left #postfix [21:16:05] <adaptr> funny [21:16:27] <seekwill> I think you should have told him to write a patch to rewrite the header from so it wouldn't happen [21:16:35] <adaptr> it's amazing, really - the sheer amount of people who expect us to deliver "solutions" to non-problems they are forced to comply with by others [21:16:45] <seekwill> :) [21:16:49] <adaptr> lillylivers! [21:16:54] <adaptr> they should just say NO [21:17:21] <adaptr> "I'll pay you a million a year to manage my network - if you completely ignore the RFCs" [21:17:29] *** Knoedel2 has joined #postfix [21:17:38] <adaptr> NO Bill Gates, screw you and you runholy causes! I WILL NOT - wait, did you say A MILLION ? [21:18:02] <seekwill> lol [21:18:07] <seekwill> Why did you have to bring Billy into this? [21:20:55] <adaptr> because it's fun to smack him one [21:21:01] *** nonsequitir has joined #postfix [21:24:06] *** growltiger has joined #postfix [21:25:52] *** hever has joined #postfix [21:30:27] *** _nalle has quit IRC [21:30:32] *** _nalle has joined #postfix [21:30:53] *** weedar has joined #postfix [21:31:34] *** nonsequitir has quit IRC [21:37:52] *** hever has quit IRC [21:38:52] * cpm isn't seeing any legit ndr/dsn's from this, just regular ole spam, handled just like regular ole spam. [21:42:22] <rob0> A complete problem description accompanied by LOGS showing it? [21:42:33] <rob0> oops he's gone [21:44:50] *** brancaleone has joined #postfix [21:45:11] <cpm> you mean, the logs Of DEATH? [21:45:39] *** growltiger has quit IRC [21:45:40] *** cpm has quit IRC [21:57:27] <seekwill> haha [21:57:53] *** pitakill_ has joined #postfix [22:01:01] *** Fallenou has joined #postfix [22:06:56] *** pitakill has quit IRC [22:07:20] *** internat1 has quit IRC [22:13:22] *** growltiger has joined #postfix [22:17:05] *** pitakill_ has quit IRC [22:19:01] *** gutocarvalho has quit IRC [22:24:39] *** jangell has joined #postfix [22:25:21] <jangell> I have: virtual_alias_maps = ldap:forward, ldap:aliases, ldap:accountsmap ... This works well...incoming mail will hit the forward and go elsewhere if need be..The problem is--how do I get a message to get forwarded off-site *AND* delivered locally? [22:26:32] *** phazzi has joined #postfix [22:28:23] *** growltiger has quit IRC [22:34:42] *** growltiger has joined #postfix [22:38:01] *** Internat has joined #postfix [22:45:49] <lunaphyte_> jangell: return two addresses when queried. [23:00:16] *** Haris________ has joined #postfix [23:02:25] *** gansbrest has joined #postfix [23:02:57] <gansbrest> hi guys - I've installed postfix and tryint to test smtp [23:03:21] <gansbrest> I've test IMAP already and it works just fine [23:03:37] <gansbrest> I was using telnet to connect to may mail host [23:03:52] <gansbrest> but it gives me Relay access denied [23:04:02] <gansbrest> after rcpt to: [23:06:00] <rob0> !relay_denied [23:06:01] <knoba> rob0: "relay_denied" : \"554 5.7.1 <RECIPIENT@RCPT_DOMAIN>: Relay access denied; from=<SENDER_ADDRESS> to=<RECIPIENT@RCPT_DOMAIN> proto=ESMTP helo=<HELO>\": This typically means that CLIENT_IP is not in mynetworks (and did not AUTH), and that RCPT_DOMAIN was not recognized as one of this Postfix's domains (not listed in mydestination, relay_domains or virtual_*_domains). [23:09:09] <gansbrest> I'm trying to install roundcube as web interface for my mail server [23:09:30] <gansbrest> and I cannot make smtp part work [23:10:21] <gansbrest> After I typing my mail server and username and passeword it says - NOT OK (Invalid sender or recipient ) [23:10:40] <gansbrest> but I don't even noticed any activity in mail log [23:13:29] <rob0> !no_logs [23:13:30] <knoba> rob0: "no_logs" : Nothing in your Postfix logs commonly means one of two things: either your syslogd is broken (try restarting it), or the connections are not coming to your server. Check your firewall/networking and the DNS for the domain in question. [23:16:43] *** hparker has quit IRC [23:16:45] *** githogori has quit IRC [23:17:00] <gansbrest> yes - I was thinking about firewall [23:17:20] <gansbrest> but why I cannot connect through telnet? [23:17:25] <gansbrest> oh [23:17:29] <gansbrest> I mean can [23:19:21] *** Haris_ has quit IRC [23:20:45] <gansbrest> But my mail function works just fine on the server [23:21:01] *** denis has quit IRC [23:23:12] <timotiCK> what is the sh command for getting the value of virtual_alias_domains or any other postfix parameters?? [23:23:59] <rob0> postconf <parameter>, see man postconf [23:24:48] <timotiCK> rob0: thanks [23:33:20] *** darkphader has quit IRC [23:33:47] *** wdp_ has quit IRC [23:43:21] *** carl- has quit IRC [23:57:53] *** F6F has quit IRC [23:59:16] *** Knoedel2 has quit IRC