[00:01:52] *** Spec has joined #postfix
[00:02:01] *** x-spec-t has quit IRC
[00:21:57] <neXyon> OMFG
[00:22:07] <neXyon> that's why SMTP doesn't work
[00:22:14] <neXyon> my ISP blocks port 25
[00:23:25] <neXyon> damn ISP
[00:23:26] <neXyon> I hate it
[00:24:20] <Jos> Many mail servers won't accept your mail anyways
[00:24:37] <neXyon> Jos: I send via gmail as relay...
[00:24:43] <Jos> ahw
[00:25:02] <Jos> failprovider which blocks it two ways
[00:25:16] <neXyon> btw... wouldn't it be better to let the clients send the mail directly through gmail?
[00:25:32] <neXyon> what do you mean Jos?
[00:25:53] <Jos> well A provider can block that port in two tways
[00:26:09] <Jos> e.g connections from theinternet > you could be accepted
[00:26:19] <neXyon> Jos: that's what I tried
[00:26:24] <Jos> and you > the internet denied  so you wouldn't be able to send spam
[00:26:29] <neXyon> I didn't try it other way round, why should I?
[00:26:47] <Jos> I just said that providers could also do it differently without affecting the spamblock
[00:26:52] 
[00:26:59] <growltiger> my isp does this as well, i have to use submission port istead
[00:27:19] <Jos> I'm running my mailserver on a VPS
[00:27:24] <neXyon> for outgoing spam I could use any port, right?
[00:28:02] <rob0> No, all Internet MX is done to smtpd's listening on port 25.
[00:28:53] <neXyon> I have been able to relay mail though, so I guess there is no problem
[00:29:19] <neXyon> however, is there a way to configure postfix to use SSL for SMTP instead of TLS, over the port 465?
[00:29:28] <rob0> !tls
[00:29:29] <knoba> rob0: "tls" : short for "Transport Layer Security" (RFC2246). It adds an additional layer of encryption to protocols like SMTP, POP3 or IMAP to improve security during transmission over the internet. You can find HOWTOs on that topic on http://www.postfix.org/docs.html
[00:29:36] <rob0> !tls_readme
[00:29:37] <knoba> rob0: "tls_readme" : http://www.postfix.org/TLS_README.html : Transport Layer Security (TLS/SSL) features in Postfix
[00:29:39] <rob0> ^^
[00:29:57] <rob0> the answer is, "not directly"
[00:30:21] *** jimpop has joined #postfix
[00:33:37] <xpoint> sahil, you awake ?, i like to make postfwd accept mail to postmaster but not to other email adresses so recipient=!!(postmaster@mydomain) or ?
[00:34:48] <xpoint> or recipient_localpart better to match any domain on postmaster
[00:36:23] <neXyon> wuhahahaha it works!
[00:36:32] *** x-spec-t has joined #postfix
[00:37:19] *** Spec has quit IRC
[00:37:25] *** x-spec-t is now known as Spec
[00:39:00] <neXyon> one thing left xD
[00:42:21] <xpoint> and thats not the beer ?
[00:42:47] <neXyon> unfortunately not
[00:42:54] <neXyon> the last thing is: fetching the mails from my accounts
[00:43:05] *** jacko115 has joined #postfix
[00:45:30] <neXyon> I think I will use getmail and not fetchmail?
[00:46:04] <xpoint> fetchmail is nice to get bounces i have seen on maillists
[00:46:31] <neXyon> so you also recommend getmail xpoint?
[00:46:32] <jacko115> Hello. I was wondering if there is anyway to reject an email if the senders email address is not on a list. I have tried using smtpd_restriction_classes and setting the email addresses as OK, but there is nothing to reject the others. Any ideas?
[00:46:47] <xpoint> neXyon, no
[00:47:04] <xpoint> neXyon, i use squirrelmail
[00:47:05] <neXyon> I thought bounces are bad? xD
[00:47:30] <neXyon> xpoint: only? or do you use other mail clients as well?
[00:47:50] <xpoint> only yes, i do not need more
[00:48:16] <neXyon> xpoint: but squirrelmail is not able to fetch automatically, right?
[00:48:58] <xpoint> no it will not do your homework, you still need to drink the beer self :)
[00:51:24] <neXyon> so I'll use getmail
[00:51:49] <xpoint> resume: squirrelmail can have one folder pr pop3 account, now when one refresh folders squirrelmail will fetchmail from pop3 as you like
[00:52:19] <neXyon> yes, that would be nice if I'd only use squirrelmail
[00:52:23] <neXyon> but I mainly use thunderbird
[00:52:45] <xpoint> neXyon, prepare to die if you do and you reject mails on mta level with it
[00:53:14] <neXyon> xpoint: by rejecting mails on mta level, you mean a spam filtering server?
[00:54:14] <xpoint> fetchmail/getmail need to have a mta that always ACCEPT the spam, it must NOT reject it, else bounces will get done
[00:54:35] <neXyon> I thought getmail is able to fetch directly into a maildir structure?
[00:55:02] <xpoint> if you do so yes
[00:55:09] *** mike1504 has joined #postfix
[00:55:45] <neXyon> so that won't be a problem, right?
[00:56:01] <xpoint> that sayed see mda option in fetchmail
[00:56:22] <neXyon> why, if I use getmail?
[00:56:38] <xpoint> neXyon, squirrelmail is nice and get no problem either
[00:57:14] <neXyon> you won't convert me from thunderbird to squirrelmail xD
[00:57:28] <xpoint> yes i will :)
[00:57:38] <neXyon> no, you won't xD
[00:57:41] <neXyon> not even with beer
[00:58:11] <mike1504> Help I get "Relay Acces Denied" trying to use postfix on my LAN  here is my   mynetworks = 192.168.0.0/24, 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
[00:58:17] <xpoint> with all that pop3 you have ?, no problem to do this nicely in squirrelmail aswell
[00:58:44] <xpoint> !relay_denied
[00:58:44] <knoba> xpoint: "relay_denied" : \"554 5.7.1 <RECIPIENT@RCPT_DOMAIN>: Relay access denied; from=<SENDER_ADDRESS> to=<RECIPIENT@RCPT_DOMAIN> proto=ESMTP helo=<HELO>\": This typically means that CLIENT_IP is not in mynetworks (and did not AUTH), and that RCPT_DOMAIN was not recognized as one of this Postfix's domains (not listed in mydestination, relay_domains or virtual_*_domains).
[01:00:22] <neXyon> xpoint: from 4 of my 6 mail accounts I'll fetch with imap
[01:00:37] <xpoint> neXyon, i consider you have to much mail to have a life with things that are somple
[01:00:52] <neXyon> right
[01:01:12] <xpoint> close ones that get most spam
[01:01:28] <neXyon> oh, I don't get much spam
[01:01:39] <xpoint> and tell friends the mail addy you still have
[01:02:35] <neXyon> :)
[01:02:39] <neXyon> well, thanks for all your help
[01:02:49] <neXyon> I think I'll get the getmail thing running without much more trouble
[01:02:53] <neXyon> but not today...
[01:02:56] <neXyon> good night!
[01:03:14] <xpoint> cant thunderbird do this for you :)
[01:03:37] <neXyon> :p
[01:03:54] <neXyon> I'd have to configure it on every client
[01:04:00] <neXyon> so => no
[01:04:03] <xpoint> well have fun with the warm beer now
[01:04:11] <neXyon> lol
[01:04:15] <neXyon> it's not warm ;)
[01:04:21] <neXyon> but
[01:04:23] <neXyon> bye xD
[01:04:59] *** neXyon has quit IRC
[01:11:21] *** muh2000 has joined #postfix
[01:15:07] *** jimpop has quit IRC
[01:16:48] <jacko115> is there a "permit_sender hash:..." type option in postfix?
[01:18:29] <rob0> postconf.5.html#check_sender_access
[01:25:43] <jacko115> do you know how I would use that to set it up so only email addresses listed can send (ie permit if check_sender_access does not reject, and reject everything else?)
[01:26:27] *** xpeed has joined #postfix
[01:28:27] <rob0> Sure, but that doesn't sound like a very good idea. What problem are you trying to solve?
[01:29:11] <rob0> Did you know that anyone on the Internet can pretend to have any email address?
[01:29:51] <jacko115> ha. yes
[01:31:09] <jacko115> it is a very lazy, but hopefully will get rid of most stuff way of making it so only valid people can send emails to a certain address
[01:31:47] <rob0> Safer, require all users to AUTH and set up authenticated sender maps.
[01:32:09] <rob0> oh just one recipient address?
[01:32:15] <rob0> !restriction_class
[01:32:16] <knoba> rob0: "restriction_class" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html
[01:32:39] <jacko115> I want to make it so only people that have email addresses in say the domain.com domain can send emails to the email address onlyus at domain dot com
[01:34:14] *** xpoint has quit IRC
[01:34:36] <tobias-> !reject_sender_login_mismatch
[01:34:37] <knoba> tobias-: "reject_sender_login_mismatch" : Reject the request when $smtpd_sender_login_maps specifies an owner for the MAIL FROM address, but the client is not (SASL) logged in as that MAIL FROM address owner; or when the client is (SASL) logged in, but the client login name doesn't own the MAIL FROM address according to $smtpd_sender_login_maps.
[01:35:05] <tobias-> + auth of course
[01:35:08] <jacko115> yeah, have had a look at that and got it set up so that on the onlyus at domain dot com email address it runs the check_sender_access filter, but that can't reject if the email isn't in the table
[01:35:30] <tobias-> so autenticated users can only send from the autenticated users address.. and after that restrict to whom they can send to
[01:35:55] <jacko115> yeah...
[01:40:03] <jacko115> I was trying to make it so people that don't have an account on the server can send emails to the email address if they know to change their email address to their @domain.com address (which will be forwarded back to them). Don't worry this isn't a important mail server
[01:40:30] <rob0> RESTRICTION_CLASS_README has the answer
[01:45:44] *** diazepam has joined #postfix
[01:49:22] <jacko115> did read that and had set that up, but it wasn't working. Figured out why though, put an @ symbol where I shouldn't of. DUH *THUD*. Cheers for your help guys
[01:49:39] *** Knoedel2 has quit IRC
[01:52:31] *** Knoedel2 has joined #postfix
[02:02:11] *** war9407 has quit IRC
[02:15:37] *** Siegfried has quit IRC
[02:45:50] *** hparker has quit IRC
[02:52:03] *** xdsasd has joined #postfix
[02:52:41] *** xdsasd has left #postfix
[03:04:57] *** growltiger has quit IRC
[03:13:18] *** Knoedel2 has quit IRC
[03:19:34] *** enderst has joined #postfix
[03:29:26] *** bancale has joined #postfix
[03:35:06] *** hparker has joined #postfix
[03:36:21] *** growltiger has joined #postfix
[03:37:32] *** brancal has quit IRC
[03:40:29] <enderst> i have several ip aliases and a few servers refuse connection. the other server is exim and when i manually connect and run helo it reports back one of the alias ips. is this a postfix config issue?
[03:43:03] *** Azrael_-| has quit IRC
[03:45:28] *** Azrael_- has joined #postfix
[03:47:07] *** Zeit|awy has quit IRC
[03:53:47] *** higuita has quit IRC
[03:55:54] *** Zeit|awy has joined #postfix
[03:59:00] *** xpeed has quit IRC
[04:03:34] *** diazepam has quit IRC
[04:05:14] *** growltiger has quit IRC
[04:06:54] *** justdave has joined #postfix
[04:08:58] <justdave> is there a way in postfix to have the RBL checks run against the contents of a Received header instead of the client IP address?
[04:09:31] <justdave> ideally, providing it a list of trusted IPs, and the first IP it finds walking backwards in the Received headers that isn't on that list would get checked in the RBLs
[04:09:37] *** pitakill has joined #postfix
[04:10:06] <justdave> using a secondary MX who isn't able to set up the RBLs we want to use, and not in a good position to take them out of the process yet at the moment
[04:10:39] <justdave> and yeah, I know this is likely to generate postmaster bounces to the secondary MX's postmaster, but that can be their problem for not setting up our RBLs ;)
[04:11:43] <justdave> I suppose that would probably need to be a policyd or a milter or something, but it seems like a common enough idea that someone might have done it before
[04:24:13] *** _mavrick61 has quit IRC
[04:25:20] *** _mavrick61 has joined #postfix
[04:25:35] <rob0> Um, don't be a spammer, just stop using the secondary MX.
[04:25:57] <rob0> It might be a common idea, but it's not a GOOD one.
[04:28:09] *** Azrael_- has quit IRC
[04:28:22] *** Azrael_- has joined #postfix
[04:29:03] <sphex_> justdave: but that's not just likely to generate bounces to the other MX's postmaster, but to the original sender too. that'a not good.
[04:39:00] *** weedar has joined #postfix
[04:44:08] <justdave> yeah, that's my thought, too, but I'm not management unfortunately
[04:45:25] <sahil> rob0: having fun on spam-l today?  it's like retard central everywhere you look today.
[04:46:32] <rob0> I love to dump on Comcast, but unfortunately there's evidence that it wasn't their fault.
[04:47:01] <sahil> be that as it may, the douchebag who got all personal on the list must be clinically, ahem, challenged.
[04:47:16] <rob0> Hey, note that I solved my own undocumented .forward issue in under 7 minutes!
[04:47:20] <sahil> yes!
[04:47:20] *** Motoko-chan has joined #postfix
[04:47:28] <sahil> that was a cute monologue on the list.
[04:47:34] <rob0> Motoko-chan would be proud of me.
[04:47:45] <sahil> bbiab, watching tropic thunder.
[04:48:19] <Motoko-chan> Hm?
[04:48:25] <Motoko-chan> Link
[04:48:26] <Motoko-chan> ?
[04:48:40] <rob0> I solved my own undocumented .forward issue in under 7 minutes! Today on postfix-users.
[04:48:47] <Motoko-chan> Ah.
[04:48:54] * Motoko-chan will need to check archives
[04:50:06] <rob0> you don't HAVE to ;)
[04:50:57] <rob0> actually I used the list post to solve the problem. I activated verbose logging for local(8), then had my answer right away.
[04:51:21] <rob0> I expected .forward+Postfix to work, but it has to be all lowercase.
[04:51:28] *** growltiger has joined #postfix
[04:51:29] <Motoko-chan> Hm
[04:51:37] <Motoko-chan> Why would I be proud?
[04:52:09] <rob0> Um ... self reliance? :)
[04:53:09] <Motoko-chan> Oh, okay.
[04:53:39] <rob0> And you happened to pop in just as sahil and I were talking about it.
[04:53:55] <rob0> I do the same thing to hparker sometimes.
[04:57:12] *** cafuego is now known as iExpense
[04:57:38] <Motoko-chan> Oh.
[04:58:46] * hparker peeks in
[04:59:31] *** iExpense is now known as cafuego
[05:36:34] *** weedar has quit IRC
[05:40:33] *** technoid_ has joined #postfix
[05:43:52] *** sandeen has joined #postfix
[05:44:56] <sandeen> are there any known issues w/ getting an ipod touch / iphone to talk to postfix? I'm having trouble but seems to be on the ipod side... because it sits there doing nothing, based on the postfix logs :)
[05:45:07] <sandeen> ... but thought I'd ask ...
[05:45:52] <sahil> no problem here.
[05:46:19] <sahil> sandeen: i've been relaying through our postfix servers with an iphone since the device was released.
[05:46:25] <sandeen> hrm.
[05:46:53] <sandeen> when I add a new account I see it get connected via imap, no problems, complains that the cert is unknown (unknown authority...)
[05:47:02] <sandeen> but then the ipod just spins
[05:47:17] * Haris_ peeks in
[05:47:18] <sandeen> I turned on client debugging and eventually see that the ipod sends "???" as a command - which comes back as unknown of course ...
[05:48:30] <sandeen> sahil, do you have SASL, smtp auth etc turned on?
[05:48:37] <sahil> sandeen: yes.
[05:48:50] <rob0> !cisco_pix
[05:48:51] <knoba> rob0: "cisco_pix" : The Cisco PIX firewall has a SMTP proxy feature which breaks ESMTP. If your Postfix server is behind such a firewall you should disable the SMTP Fixup feature.
[05:48:52] <sahil> sandeen: you do know that the unknown cert problem with respective to imap has nothing to do with postfix, right?
[05:48:55] <rob0> just a WAG
[05:49:25] <sandeen> sahil, yes
[05:49:30] <sandeen> I just mean that it is talking to my server
[05:49:44] <sandeen> if I'm lucky and I wait eventually I also get an unknown cert for SMTP, which I say ok to... to no avail.
[05:49:46] *** enderst has left #postfix
[05:50:17] <sandeen> rob0, no, no such firewall (well, there is an old cisco DSL modem....)
[05:50:17] *** Azrael_- has quit IRC
[05:50:29] *** Azrael_-| has joined #postfix
[05:51:01] * sandeen maybe needs to do some wireless snooping to see what the heck this thing is trying to ask
[05:51:31] <sahil> don't overkill.  just setup the device to use gmail or something that we all know works.
[05:51:46] <sahil> if that works, then you know it's your server.
[05:51:48] <sandeen> :)  well, I don't use gmail.  And I want to figure out the problem :)
[05:51:52] <sandeen> oh, well, true.
[05:52:03] <sahil> sign up for an account; trivial stuff.
[05:52:06] <sandeen> I see, you mean as debugging.  well, yeah, ok
[05:52:25] <sandeen> oh, huh, it's sending junk, though....
[05:52:44] <sahil> what is "it" that is sending the junk?  your server?
[05:53:57] *** dragonheart has quit IRC
[05:55:28] <sandeen> http://fpaste.org/paste/294/plain
[05:55:41] <sandeen> ipod seems to be sending junk for commands
[05:56:12] * sahil faints from the excess junkification
[05:56:19] <sandeen> or maybe it's sending encrypted stuff before actually starting TLS?
[05:56:21] * sandeen shrugs
[05:56:27] <sandeen> ok, I guess I should try gmail
[05:57:53] <Internat> wait
[05:57:58] <sandeen> although, FWIW, using my corporate SMTP server via VPN worked just fine
[05:58:00] <Internat> why is your iphone sending post/get/connect commands to a smtp server?
[05:58:18] <Internat> thats like its treating the smtp server as a http proxy..
[05:58:50] <sandeen> I'm not sure it is... that debugging output seems to be saying something like "is the command post, get, connect?  nope"
[05:58:51] <sandeen> not sure
[05:59:45] <sandeen> it looks like it sent "???"
[06:00:42] <sandeen> eventually I get "STARTTLS" and the server says "Ready to start TLS" at which point the ipod tells me that it doesn't recognize the certificate ....
[06:00:45] <rob0> right, those 3 are the smtpd(8) server's naughty list
[06:00:50] <rob0> it's built-in
[06:01:06] <sandeen> ah ok
[06:01:38] <rob0> It's not on the nice list, not on the naughty list, just a big "huh?"
[06:01:41] <sandeen> ... I tell it continue (on the ipod) and then "lost connection after STARTTLS "
[06:01:58] <sandeen> if this is OT, btw, let me know ;)
[06:02:01] <sandeen> maybe I need #ipod :(
[06:02:40] <sandeen> "235 2.0.0 Authentication successful"
[06:02:41] <sandeen> hmm
[06:02:46] <sandeen> maybe it finally worked.
[06:04:27] <sandeen> heh, it did.   I just needed to bother you all :(  (I swear I dug into this for hours ... keeping the ipod awake for about 5 minutes while it kept retyring seemed to eventually get things going)
[06:11:41] *** bacaci__2 has joined #postfix
[06:12:32] *** bacaci__ has quit IRC
[06:18:20] <sandeen> sahil, just out of curiosity, is your certificate signed by a known authority in your setup?
[06:30:49] <sahil> sandeen: yes.  but that is not necessary.
[06:31:12] <sahil> sandeen: but it does prevent the stupid error the mail program spits out at the initial setup of the account.
[06:38:06] <sahil> sandeen: and if you're looking for a reference, i quite like RapidSSL.com for certs.
[06:45:23] <muh2000> how can i switch that off: "mail for bla at sub dot domain.tld loops back to myself" ?
[06:58:39] *** Azrael_- has joined #postfix
[07:01:37] *** justdave has quit IRC
[07:08:20] *** Azrael_-| has quit IRC
[07:36:15] *** Azrael_- has quit IRC
[07:36:27] *** Azrael_-| has joined #postfix
[08:13:52] *** Azrael_- has joined #postfix
[08:23:54] <sahil> muh2000: stop the loop.
[08:24:17] *** Azrael_-| has quit IRC
[08:28:06] *** root has joined #postfix
[08:28:13] *** root is now known as ashwiN
[08:28:53] <ashwiN> receveing an error " warning: regexp map /etc/postfix/header_checks, line 411: ignoring unrecognized request" can anybody suggest
[08:30:02] <sahil> ashwiN: paste your header_checks on pastie.org.
[08:31:16] <sahil> and might as help pop the postconf -n output there as well.
[08:33:30] <ashwiN> sahil: done that
[08:35:00] <ashwiN> sahil: http://pastie.org/347323
[08:42:09] *** DarklyCute has joined #postfix
[08:46:20] <ashwiN> receveing an error " warning: regexp map /etc/postfix/header_checks, line 411: ignoring unrecognized request" can anybody suggest
[08:50:42] *** Motoko-chan has quit IRC
[08:52:29] *** Macjust has joined #postfix
[08:59:13] *** Haris________ has joined #postfix
[09:09:39] *** weedar has joined #postfix
[09:15:09] *** pitakill has quit IRC
[09:18:12] *** Haris_ has quit IRC
[09:22:17] <ashwiN> receveing an error " warning: regexp map /etc/postfix/header_checks, line 411: ignoring unrecognized request" can anybody suggest
[09:24:20] *** UQlev has joined #postfix
[09:27:14] *** ashwiN has quit IRC
[09:28:42] *** root has joined #postfix
[09:29:13] *** root is now known as Guest36702
[09:29:25] *** Guest36702 is now known as ashwiN
[09:31:45] *** Azrael_- has quit IRC
[09:31:53] *** Azrael_-| has joined #postfix
[09:37:11] *** UQlev has quit IRC
[09:38:34] <ashwiN> receveing an error " warning: regexp map /etc/postfix/header_checks, line 411: ignoring unrecognized request" can anybody suggest
[09:47:16] *** jacksafro has joined #postfix
[09:49:48] <jacksafro> hello all, i am having trouble with postfix/ldap, the qmail schema, and maildrop.  when i send a message to an alias of a user, postfix always passes the alias address to maildrop even though i specify either result_attribute or terminal_result_attribute as the ldap attrib that is the real mail address
[09:51:10] <jacksafro> my user in ldap has an attrib named 'mail' that is what maildrop needs to look up the user.  my user in ldap also has an attribute named 'mailAlternateAddress' that lists all of the aliases for that account
[09:51:33] <jacksafro> my query_filter looks like:  (&(accountStatus=active)(|(mailAlternateAddress=%s)(mail=%s)))
[09:51:35] <harlan> ashwiN: Look at line 411 of your /etc/postfix/header_checks and find the error?
[09:52:56] <jacksafro> which works, but it seems that result_attribute=mail or terminal_result_attribute=mail don't do anything, since the original TO: address gets passed to maildrop instead of the value in result_attribute
[09:57:28] *** UQlev has joined #postfix
[09:59:42] *** war9407 has joined #postfix
[10:10:48] *** Azrael_- has joined #postfix
[10:11:28] *** Azrael_-| has quit IRC
[10:21:35] *** jacksafro has quit IRC
[10:24:25] *** growltiger_ has joined #postfix
[10:24:49] *** growltiger has quit IRC
[10:29:08] *** xpoint has joined #postfix
[10:38:13] *** DarklyCute has quit IRC
[10:53:40] *** ashwiN has quit IRC
[10:58:42] *** growltiger_ has quit IRC
[10:58:46] *** growltiger_ has joined #postfix
[11:02:59] *** jeev has quit IRC
[11:06:24] *** Izlots has quit IRC
[11:21:22] *** jacko115 has quit IRC
[11:32:44] *** wdp has joined #postfix
[11:39:07] *** sophokles has joined #postfix
[11:45:00] *** pirho has joined #postfix
[11:48:19] *** rehpmag has quit IRC
[12:05:24] *** wdp_ has joined #postfix
[12:11:09] *** bancale is now known as brancaleone
[12:13:08] *** wdp has quit IRC
[12:43:27] *** netcrash has joined #postfix
[12:47:55] *** mandragor has joined #postfix
[13:02:04] *** weedar has quit IRC
[13:02:37] *** UQlev has quit IRC
[13:05:55] *** Azrael_- has quit IRC
[13:06:08] *** Azrael_- has joined #postfix
[13:10:20] *** hparker has quit IRC
[13:12:07] *** mandragor is now known as weedar
[13:12:15] *** Azrael_- has quit IRC
[13:12:28] *** Azrael_- has joined #postfix
[13:22:47] *** sagattarii has joined #postfix
[13:24:11] <sagattarii> Hi, i am using postfix 2.3.8, can someone of you check my restrictions for sending and receiving?
[13:24:23] <sagattarii> http://rafb.net/p/l7OuJs40.html
[13:24:43] <sagattarii> i found lot of different howtos with google
[13:25:21] <sagattarii> but i am not sure which settings are needed and which are bad
[13:27:25] *** growltiger has joined #postfix
[13:27:27] *** growltiger_ has quit IRC
[13:29:43] *** empiric has joined #postfix
[13:30:59] <empiric> hi guys i want setup postfix on redhat
[13:31:49] *** duktek has joined #postfix
[13:31:54] <empiric> Dec 27 11:47:28 test postfix/master[32305]: daemon started -- version 2.2.10, configuration /etc/postfix
[13:31:54] <empiric> Dec 27 11:47:28 test postfix/pickup[32309]: fatal: open database /etc/postfix/aliases.db: No such file or directory
[13:31:54] <empiric> Dec 27 11:47:28 test postfix/qmgr[32310]: fatal: open database /etc/postfix/aliases.db: No such file or directory
[13:31:54] <empiric> Dec 27 11:47:29 test postfix/master[32305]: warning: process /usr/libexec/postfix/pickup pid 32309 exit status 1
[13:31:56] <empiric> Dec 27 11:47:29 test postfix/master[32305]: warning: /usr/libexec/postfix/pickup: bad command startup -- throttling
[13:31:59] <empiric> Dec 27 11:47:29 test postfix/master[32305]: warning: process /usr/libexec/postfix/qmgr pid 32310 exit status 1
[13:32:02] <empiric> Dec 27 11:47:29 test postfix/master[32305]: warning: /usr/libexec/postfix/qmgr: bad command startup -- throttling
[13:32:05] <empiric> waht this mean
[13:32:08] <xpoint> sagattarii, seams safe
[13:32:27] <xpoint> empiric, see topic
[13:32:45] <empiric> wht topic?
[13:32:53] <xpoint> /topic
[13:35:12] <xpoint> empiric, but for a start, empty your main.cf
[13:36:02] <empiric> see it says no aliases.db file
[13:36:13] <empiric> infact i did issue newaliases command
[13:41:47] *** weedar has quit IRC
[13:43:07] <empiric> xpoint
[13:43:18] <empiric> where i store my mailboxes
[13:43:19] <empiric> ?
[13:43:29] <duktek> check /etc/postfix/aliases.db ? is there aliases.db ?
[13:43:51] <duktek> empiric:depend on you, if its maildir or mbox
[13:44:11] <empiric> wht is postfix default
[13:44:26] <empiric> Dec 27 11:57:42 test postfix/master[32468]: daemon started -- version 2.2.10, configuration /etc/postfix
[13:44:27] <empiric> Dec 27 11:57:42 test postfix/pickup[32472]: fatal: match_list_parse: read file /var/spool/postfix: Is a directory
[13:44:27] <empiric> Dec 27 11:57:42 test postfix/qmgr[32473]: fatal: match_list_parse: read file /var/spool/postfix: Is a directory
[13:44:27] <empiric> Dec 27 11:57:43 test postfix/master[32468]: warning: process /usr/libexec/postfix/pickup pid 32472 exit status 1
[13:44:28] <empiric> Dec 27 11:57:43 test postfix/master[32468]: warning: /usr/libexec/postfix/pickup: bad command startup -- throttling
[13:44:30] <xpoint> duktek, no dont do this !
[13:44:31] <empiric> Dec 27 11:57:43 test postfix/master[32468]: warning: process /usr/libexec/postfix/qmgr pid 32473 exit status 1
[13:44:34] <empiric> Dec 27 11:57:43 test postfix/master[32468]: warning: /usr/libexec/postfix/qmgr: bad command startup -- throttling
[13:44:37] <empiric> what this mean>
[13:44:39] <empiric> ?
[13:44:41] <xpoint> empiric, stop !
[13:44:44] <empiric> ok
[13:44:45] <empiric> sorry
[13:44:51] <empiric> not done next time
[13:44:52] <duktek> xpoint:do what?
[13:44:57] <sagattarii> use nopaste
[13:44:59] <xpoint> read and understand topic
[13:45:10] <duktek> xpoint:sorry bro
[13:45:24] *** chopp has joined #postfix
[13:45:30] <duktek> xpoint:i'm new here:D
[13:45:48] <xpoint> empiric, postconf -d | grep alias_maps edit that file
[13:46:12] <empiric> why
[13:46:37] <xpoint> your main.cf use non existsing files
[13:47:10] <xpoint> and i advised you to empty your  main.cf as a start
[13:47:23] *** r3r3 has joined #postfix
[13:47:52] <empiric> hmmm
[13:47:55] <empiric> ok
[13:48:51] <chopp> anyone give me a clue as to why my "myorigin = $mydomain" isn't working
[13:49:17] <empiric> ok i did
[13:49:35] <empiric> now i want to have a mail server that send n recieve emails
[13:49:37] <empiric> what to do
[13:50:42] *** Knoedel2 has joined #postfix
[13:53:24] <duktek> empiric:telnet?
[13:53:39] <empiric> its done
[13:53:46] <empiric> working on 25 not on 110
[13:55:09] <duktek> empiric#mail root (or user in user system)
[14:05:43] *** r33 has quit IRC
[14:08:11] <war9407> Anyone here reject on '-' spf records? I have found some medical sites are misconfigured, they put - (which tells the openspf perl script) to reject but they don't allow from where they send from.
[14:08:21] <war9407> I am thinking, move to greylisting may be a bit safer
[14:11:18] *** Haris________ has quit IRC
[14:14:20] *** weedar has joined #postfix
[14:29:17] *** growltiger_ has joined #postfix
[14:29:33] *** growltiger has quit IRC
[14:30:34] <xpoint> empiric, postconf -n
[14:30:52] <xpoint> empiric, more clean then ever now i hope
[14:31:19] <xpoint> empiric, the sending part should work fine now
[14:32:26] <empiric> wait
[14:32:41] <xpoint> empiric, but for the recieve part you need to do more, how is up to how much change you like to do when it works, will it just be one domain will it just be one mailbox and so on
[14:33:46] *** Severed_Head_Of_ has joined #postfix
[14:34:11] <empiric> yes cleared
[14:34:16] *** growltiger_ has quit IRC
[14:34:17] <empiric> but how i send emails
[14:34:24] <wdp_> with a mailclient
[14:35:25] <empiric> ok i did email from root to localuser
[14:35:31] <empiric> where mail will be stored
[14:35:31] <empiric> ?
[14:36:22] <empiric> Dec 27 12:36:16 test postfix/smtp[32670]: DA245A2643: to=<noman at loalhost dot compnay                                             .com>, orig_to=<noman@loalhost>, relay=none, delay=31, status=deferred (Host or                                              domain name not found. Name service error for name=loalhost.compnay.com type=MX:                                              Host not found, try again)
[14:36:28] <empiric> mail delivered where?
[14:37:22] <empiric> oh ist not delivered act
[14:37:32] <empiric> did u see erroe xpont
[14:39:53] *** growltiger has joined #postfix
[14:40:19] *** Severed_Head_Of_ has quit IRC
[14:45:52] <xpoint> empiric, domain missing
[14:46:09] <empiric> ya
[14:46:15] <xpoint> empiric, postfix says it clearly
[14:46:15] <empiric> ok wait ill add my doain
[14:46:22] <empiric> where it will deliver emails
[14:47:13] <xpoint> !basic
[14:47:14] <knoba> xpoint: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.
[14:48:09] <xpoint> localhost.compnay.com in mydestination ?
[14:48:27] <xpoint> but host is not found on dns
[14:48:58] *** growltiger has quit IRC
[14:49:05] *** growltiger has joined #postfix
[14:51:53] <empiric> i dun have dns
[14:51:57] *** Xjs is now known as Xjs|foo
[14:52:01] <empiric> do i need a dns server
[14:54:46] *** weedar has quit IRC
[15:00:36] <empiric> xpoint
[15:00:47] <empiric> do i need a dns essentially for local mails
[15:00:51] <empiric> too?
[15:01:14] <xpoint> default you have localhost domain working :)
[15:01:26] <xpoint> dig localhost A
[15:01:51] 
[15:01:55] <xpoint> so
[15:02:31] <xpoint> if that is sufficient you dont need another domain
[15:03:06] <xpoint> but no one can send you emails to localhost from outside
[15:03:49] <empiric>  dig localhost A
[15:03:50] <empiric> ; <<>> DiG 9.2.4 <<>> localhost A
[15:03:50] <empiric> ;; global options:  printcmd
[15:03:50] <empiric> ;; Got answer:
[15:03:50] <empiric> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45681
[15:03:50] <empiric> ;; flags: qr rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
[15:03:52] <empiric> ;; QUESTION SECTION:
[15:03:54] <empiric> ;localhost.                     IN      A
[15:03:56] <empiric> ;; ANSWER SECTION:
[15:03:58] <empiric> localhost.              10000   IN      A       127.0.0.1
[15:04:45] <xpoint> empiric, question is ?
[15:05:48] *** weedar has joined #postfix
[15:05:54] <empiric> its ok
[15:05:58] <empiric> mails are delivered
[15:06:21] <empiric> hey listen i am sending mail from root@localhost to xyz@localhost
[15:06:43] <xpoint> and ?
[15:06:44] <empiric> waorking if i say from xyz at company dot com to abc at company dot com
[15:06:51] <empiric> then wht i have to do?
[15:07:21] <xpoint> empiric, postconf -d | grep alias_maps edit that file
[15:08:00] <xpoint> root: xyz at company dot com
[15:08:31] <xpoint> or as you want:
[15:08:38] <xpoint> root: abc at company dot com
[15:09:24] <xpoint> after you have changed it, newaliases, postfix reload
[15:09:37] <xpoint> now:
[15:09:43] <xpoint> sendmail -bv root
[15:09:51] <xpoint> see logs from there and the email
[15:10:18] <empiric> wherei alias_maps file?
[15:10:24] <empiric> whereis that file
[15:10:32] <xpoint> damm see the grep
[15:11:17] <xpoint> its OS dependig so i cant tell
[15:11:23] <empiric> yes it says /etc/aliases
[15:11:35] <empiric> alias_maps = hash:/etc/aliases, nis:mail.aliases
[15:11:35] <empiric> local_recipient_maps = proxy:unix:passwd.byname $alias_maps
[15:11:42] <empiric> it means its in /etc/aliases
[15:11:44] <empiric> right
[15:11:44] <xpoint> yep postconf -d use it
[15:12:14] *** UQlev has joined #postfix
[15:12:19] <xpoint> turn of NIS:
[15:13:03] <xpoint> alias_maps = hash:/etc/aliases, nis:mail.aliases change to alias_maps = hash:/etc/aliases in main.cf
[15:13:50] <empiric> its done
[15:14:15] <empiric> hey wait if i have 3 users then wht i do
[15:14:19] <empiric> in aliases
[15:14:35] <empiric> abc at company dot com xyz and asd
[15:14:43] <empiric> still i use aliases
[15:14:44] <xpoint> you add users the unix way not in the aliases file
[15:14:52] <empiric> ok
[15:15:48] <xpoint> alias file is just a redirect from users that newer ever can read mail on your box, but you tell postfix who can do this for them
[15:16:01] <empiric> yes i did
[15:16:05] <empiric> that
[15:16:17] <empiric> see i am sending emails at localhost
[15:16:44] <xpoint> super you learn fast :)
[15:18:42] <empiric> thanks
[15:18:47] <empiric> hey one more thing
[15:23:24] *** Jos has left #postfix
[15:29:01] *** pirho has quit IRC
[15:31:04] *** pirho has joined #postfix
[15:42:00] *** empiric has quit IRC
[15:52:17] *** McJerry has quit IRC
[15:52:54] *** McJerry has joined #postfix
[15:58:09] <muh2000> <sahil> muh2000: stop the loop.          <--- yeah i am trying to tell postfix that the loop is ok.   at the same email address sending stuff isnt a problem ...
[15:59:10] *** AshTray- has joined #postfix
[16:00:09] <AshTray-> Need a little help please. Mail server it's not working anymore. http://pastebin.ath.cx/m6021d3d4 but it's not working... http://blt.ath.cx/squirrelmail/src/login.php
[16:17:19] *** jra has joined #postfix
[16:17:51] *** jra is now known as Guest3002
[16:19:02] *** Guest3002 has quit IRC
[16:20:20] *** jra[25C3] has joined #postfix
[16:21:45] *** empiric has joined #postfix
[16:22:19] *** xpeed has joined #postfix
[16:24:06] *** AshTray- has quit IRC
[16:25:26] *** hark has joined #postfix
[16:26:10] *** AshTray- has joined #postfix
[16:26:11] <chopp> anyone give me a clue as to why my "myorigin = $mydomain" isn't working
[16:27:03] <xpeed> ?
[16:28:09] *** madrescher1 has joined #postfix
[16:28:40] <xpeed> do somebody who have a Postfix mail system over a Linux Box knows if the all mail Loging activities can be save to a different (or external) file that not be /var/log/messages ?
[16:28:54] <war9407> xpeed: yeah
[16:29:01] <war9407> xpeed: /etc/syslog.conf
[16:29:11] <war9407> xpeed: mail.*        /var/log/all_mail.log
[16:29:17] <war9407> example
[16:29:29] <xpeed> oks i'll test it out
[16:29:34] <xpeed> thank you war9407
[16:29:40] *** madrescher has quit IRC
[16:29:44] <war9407> np.
[16:30:13] *** SARGuy has quit IRC
[16:45:21] *** empiric has quit IRC
[16:45:27] *** empiric has joined #postfix
[16:53:21] *** sophokles has quit IRC
[16:53:45] *** sophokles has joined #postfix
[16:54:58] *** St0rmMolest has joined #postfix
[16:56:27] <St0rmMolest> I want postfix to connect to a relayhost as a client and do SMTP AUTH as one user stored in sasl_passwd. It still tries to auth as the user sending the mail.
[16:57:08] *** UQlev has quit IRC
[17:01:23] *** sophokles has quit IRC
[17:01:46] *** sophokles has joined #postfix
[17:03:42] *** neXyon has joined #postfix
[17:03:48] <neXyon> greetings
[17:05:50] <neXyon> xpoint: you there? xD
[17:08:33] <St0rmMolest> i am getting 550 when i try to auth to the relayhost it says login for root@myhost failed but i want it to login with smtp_sasl_password_maps
[17:14:33] <neXyon> St0rmMolest: have you created the needed map file?
[17:14:50] <St0rmMolest> yes
[17:15:01] <St0rmMolest> with postmap
[17:15:15] <sahil> St0rmMolest: show postconf -n and the contents of your passwd map file (with password obfusticated).
[17:15:34] <sahil> neXyon: xpoint is not here.
[17:15:45] <neXyon> sahil: how do you know?
[17:19:14] <sahil> neXyon: do you have a postfix problem?  if so, ask your question.  don't worry about whether xpoint is here or not.
[17:19:32] <neXyon> sahil: no, I don't have a problem
[17:19:35] <neXyon> not anymorexD
[17:19:40] <neXyon> I just wanted to talk him
[17:19:45] <sahil> aw, that's *precious*.
[17:26:32] *** St0rmMolest has quit IRC
[17:29:31] <xpoint> sahil, thanks for your kindnees :)
[17:30:27] *** mat_- has joined #postfix
[17:30:40] <mat_-> anyone help me please
[17:30:50] <xpoint> neXyon, but yes dont worry if sahil is here or not ask your questions :)
[17:31:04] <neXyon> lol xpoint
[17:31:21] <mat_-> i got this error from my logwatch
[17:31:40] <mat_-> pam_unix(smtp:auth): check pass; user unknown
[17:31:40] <mat_->  pam_unix(smtp:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
[17:31:40] <mat_->  pam_succeed_if(smtp:auth): error retrieving information about user inna
[17:31:47] <sahil> mat_-: stop pasting that shit in here.
[17:31:51] <xpoint> mat read TOPIC :)
[17:32:03] <mat_-> sorry
[17:32:09] <sahil> xpoint: np, it appears neXyon has a man-crush on you.
[17:32:52] <neXyon> sure...
[17:32:57] <xpoint> sahil, yes he belives i am only one that can help him, but i am not
[17:33:13] <mat_-> anyone here can help me regarding issue that i paste ?
[17:33:19] <neXyon> no I don't believe that
[17:34:35] <xpoint> mat_-, i just see password failure ?, what is the real problem ?
[17:35:21] <xpoint> mat_-, and its more then 60% OT here on #postfix
[17:35:22] <mat_-> xpoint: almost evry day i got that report from logwatch. i'm using postfix as MTA
[17:35:27] *** madrescher1 has quit IRC
[17:35:36] <neXyon> grml
[17:35:43] <neXyon> damn squirrelmail xD
[17:36:37] <xpeed> horde-webmail ftw
[17:36:41] <xpoint> mat_-, specifik more is it logwatch that fails or is it postfix dont work with pam ?
[17:37:11] <neXyon> shhh xpeed, xpoint doesn't like other webmail apps
[17:37:14] *** madrescher has joined #postfix
[17:37:19] <xpoint> xpeed, i love it that one was simple to setup indeed
[17:37:21] *** muh2000 has quit IRC
[17:37:38] <neXyon> oO
[17:38:04] <neXyon> well, I recall that
[17:38:16] <neXyon> what do you think about roundcube?
[17:38:18] <xpeed> squirrel is very functional and very fast simple and secure, bur its interface does not help it xD
[17:38:23] <mat_-> xpoint: i'm not sure. the reality happened here is i'm using dovecot + pam +sasl for oulook and postfix for usermin
[17:38:28] <xpeed> and for end users horde-webmail may be the opt (?)
[17:38:37] <mat_-> looks like it come from pam service
[17:39:23] <mat_-> problems here is why user inna. i check in /etc/passwd. No such user inna
[17:39:25] <mat_-> ?
[17:40:06] <mat_-> is there probality my mailserver has been hacked?
[17:40:07] <xpeed> what adventages brings local transport vs virtual one?
[17:40:23] <xpoint> yes a remote user try to gain access to inna pam user that dont exists
[17:40:24] <xpeed> :s
[17:40:37] <xpoint> 42
[17:41:05] <mat_-> xpoint: is that trial succeed ?
[17:41:15] *** mXr has quit IRC
[17:41:39] <xpeed> do somebody use JFS as main FS for a Server?
[17:41:39] <xpoint> mat_-, remove pam auth from dovecot and try again
[17:41:45] <xpeed> or desktop/laptop?
[17:42:54] <neXyon> hmm, I've downloaded and installed my locale for squirrelmail, but it doesn't work :(
[17:43:46] <xpoint> neXyon, glibc need to know that locale
[17:43:57] <neXyon> ah, okay
[17:44:04] <neXyon> then I don't wonder xD
[17:44:26] <xpeed> do somebody have set his own DNS server for a domain name ?
[17:45:16] <xpoint> all do this somewhare else it does not work, just like horde-webmail one need to set it up
[17:47:54] *** sophokles has quit IRC
[17:47:56] <neXyon> xpoint: I've uncommented the locale in /etc/locale.gen and run locale-gen, but it still doesn't work?! :/
[17:48:25] <sahil> xpeed: that is not a postfix question.
[17:48:41] <xpeed> i know
[17:48:51] <sahil> xpeed: oh, super!  well, this is #postfix.
[17:49:03] <neXyon> no you don't have to
[17:49:06] <neXyon> :p sahil
[17:49:44] <xpeed> haha if you don't care what i have to say, just /ignore xpeed*!*@*  =)
[17:50:57] <empiric> hey xpoint u there
[17:51:03] <xpeed> DNS are very important req at mail System (postfix) behavior
[17:51:17] <neXyon> maybe
[17:52:20] <neXyon> empiric: no, xpoint sleeps, didn't you know it's already very late in denmark? xD
[17:52:42] <empiric> i am on windows and configure my mozila client i got error occuredwhile sending email relay access denied
[17:52:58] <neXyon> !relay_denied
[17:53:00] <knoba> neXyon: "relay_denied" : \"554 5.7.1 <RECIPIENT@RCPT_DOMAIN>: Relay access denied; from=<SENDER_ADDRESS> to=<RECIPIENT@RCPT_DOMAIN> proto=ESMTP helo=<HELO>\": This typically means that CLIENT_IP is not in mynetworks (and did not AUTH), and that RCPT_DOMAIN was not recognized as one of this Postfix's domains (not listed in mydestination, relay_domains or virtual_*_domains).
[17:53:34] <neXyon> I hope that helps empiric... it's all I got when I asked the same xD
[17:53:58] <xpeed> haha
[17:54:09] <empiric> i add 192.168.1.0/24 in mynetworks
[17:54:10] <xpeed> knoba is the Yoda Master (?)
[17:55:09] <empiric> in main.cf already
[17:55:31] <empiric> nexyon any idea?
[17:56:42] <empiric> see mynetworks = 192.168.1.0/24, 127.0.0.0/8 i already have in main.cf
[17:57:47] <neXyon> and you permit_mynetworks ?
[17:58:19] <xpeed> smtpd_recipient_restrictions
[17:58:22] <xpeed> !
[17:58:24] <xpeed> xD
[17:58:31] <empiric> wait let me check
[17:58:35] <empiric> i hink i forgo
[17:58:38] <empiric> forgot
[18:00:14] <xpoint> sahil, you here ? :)), i have a question on postfwd again, wonder if there is a irc channel for this ?, basicly i like to accept abuse postmaster from clients that are blacklisted in rbl so i make id=postmaster; recipient_localpart==postmaster; action=donno; before rules that do rbl testen in postfwd.cf
[18:00:44] <empiric> i add smtpd_client_restrictions =
[18:00:45] <empiric>     					 permit_mynetworks,
[18:00:45] <empiric> 					 check_client_access hash:/etc/postfix/access, 					 reject_unknown_hostname
[18:00:47] <empiric> is that ok
[18:01:26] <xpoint> empiric, maybe
[18:01:38] <empiric> what u think
[18:01:51] <empiric> is that ok to use access file
[18:01:54] <xpoint> newer use OK in a access table
[18:02:24] <empiric> then
[18:02:59] <xpoint> empiric, if your postfix runs on NAT and your client olso is in NAT ip then postfix will relay on that NAT network
[18:03:28] <empiric> no its on same network
[18:03:50] <xpoint> empiric, show me postconf -n
[18:03:57] <xpoint> and logs
[18:03:57] <empiric> its again saying DNS error
[18:04:04] <empiric> its y windoes client
[18:04:25] *** growltiger_ has joined #postfix
[18:04:39] <sahil> xpoint: that should work re: postfwd, as long as the DUNNO action/rule precedes your other RBL checks.
[18:04:42] <xpoint> you need to have a domain with have DNS okay in the world before one can use it
[18:05:04] <empiric> http://pastebin.com/m49650264
[18:05:05] <xpoint> sahil, super
[18:05:33] *** growltiger has quit IRC
[18:05:59] *** jra[25C3] has quit IRC
[18:05:59] <empiric> so i put my dns 1
[18:06:28] *** St0rmMolest has joined #postfix
[18:07:03] <empiric> what u say?
[18:07:09] <sahil> xpoint: but the way i integrate postfwd, a check_recipient_access map lets mail to postmaster through before postfwd is even called by postfix.
[18:08:30] <St0rmMolest> My configuration sends MAIL FROM: user@localhost to the relayhost, should it be doing that if i had configured password_maps correctly
[18:09:07] <St0rmMolest> i mean is there some other map i need too
[18:09:24] <xpoint> sahil, yes but i like a policy server do be clever :)
[18:10:05] <xpoint> empiric, remove company.com in main.cf or pay for it
[18:10:06] <empiric> xpoint
[18:10:16] *** Lukemob has quit IRC
[18:10:25] <empiric> hey i am not on network its my internel
[18:10:28] <empiric> thing
[18:10:38] <empiric> i am not on internet
[18:10:40] <xpoint> use internal dns names then
[18:10:55] <empiric> ill definatly pay for it if i move on internet
[18:11:05] <xpoint> localhost.localdomain is for you then
[18:11:09] *** netcrash has quit IRC
[18:12:06] <empiric> i dun have DNS
[18:12:10] <empiric> right now
[18:12:19] <empiric> do i install it
[18:12:22] <xpoint> google dnsmasq then
[18:13:00] <xpoint> you wont get mail to work without a working dns
[18:13:04] *** mat_- has quit IRC
[18:13:40] <empiric> ok ok
[18:13:45] *** growltiger has joined #postfix
[18:13:46] <empiric> wait ill up my own
[18:13:57] *** growltiger_ has quit IRC
[18:16:16] <xpoint> sahil, i try to move as much as possible from postfix main.cf to postfwd where it make sense to do so, the power from postfwd is that its one rule order not just like what postfix does with random order depending on how it works in postfix, i know both is top down order on rules but postfix is a bit diff there then postfwd
[18:21:28] *** Macjust has quit IRC
[18:21:30] *** Macjust has joined #postfix
[18:21:59] *** jra[25C3] has joined #postfix
[18:22:43] *** neXyon2 has joined #postfix
[18:22:51] *** neXyon has quit IRC
[18:22:55] *** neXyon2 is now known as neXyon
[18:23:01] <neXyon> re
[18:23:03] *** growltiger_ has joined #postfix
[18:23:07] *** growltiger has quit IRC
[18:31:14] *** Lukemob has joined #postfix
[18:36:25] *** St0rmMolest has quit IRC
[18:41:46] <sandeen> sahil, I know it's not necessary (the known cert auth) but I wonder if it confuses the ipod, thanks
[18:44:42] *** mike1504 has quit IRC
[18:45:17] *** jeev has joined #postfix
[18:48:04] *** growltiger has joined #postfix
[18:48:07] *** growltiger_ has quit IRC
[18:55:00] *** growltiger_ has joined #postfix
[18:55:13] *** growltiger has quit IRC
[18:56:49] *** Severed_Head_Of_ has joined #postfix
[18:57:11] *** growltiger_ has quit IRC
[19:00:45] *** sphex_ has quit IRC
[19:01:01] *** growltiger_ has joined #postfix
[19:01:23] *** Severed_Head_Of_ has quit IRC
[19:01:49] <empiric> xpoint
[19:01:51] <empiric> u there
[19:06:55] *** growltiger has joined #postfix
[19:07:06] *** growltiger_ has quit IRC
[19:07:11] <empiric> elo
[19:14:35] *** hparker has joined #postfix
[19:17:25] <empiric> hey
[19:17:33] <empiric> listen xpoin
[19:20:40] *** mXr has joined #postfix
[19:25:37] *** sumfvm has joined #postfix
[19:30:13] *** pulsar has joined #postfix
[19:34:06] *** pulsar has quit IRC
[19:35:26] *** pitakill has joined #postfix
[19:38:34] *** pulsar has joined #postfix
[19:38:43] *** pulsar has quit IRC
[19:39:16] *** pulsar has joined #postfix
[19:40:20] *** empiric has quit IRC
[19:42:15] *** sphex has joined #postfix
[19:42:29] *** neXyon has quit IRC
[19:44:01] *** UQlev has joined #postfix
[19:54:08] <sphex> hey. SMTP question: do I have to do anything special to get the Original-Recipient field in bounces? is ORCPT used automatically whenever a server changes the envelope recipient?
[20:23:45] *** empiric has joined #postfix
[20:25:34] <empiric> xpoint u there
[20:27:48] *** Wanderer has joined #postfix
[20:28:33] <Wanderer> can someone help with figuring out why postfix+sasl2 isn't working?
[20:29:09] *** sumfvm has quit IRC
[20:30:02] <empiric> xhelo xpoint
[20:31:36] <UQlev> Wanderer: what is not working? authentication?
[20:31:56] <Wanderer> yes,  please excuse lack of knowledge,  I inherited a very old system we're trying to replace witha new one
[20:32:13] <Wanderer> it's going from a very old debian to a new ubuntu
[20:32:52] *** amrit|zzz is now known as amrit
[20:33:21] <UQlev> Wanderer: I guess principle is the same for old Debian ;)
[20:34:00] <Wanderer> I've check perms, etc but it still says the user isn't in the db
[20:34:04] *** Southron has joined #Postfix
[20:34:11] <Wanderer> I duplicated the sasldb2 from the old system to the new
[20:35:40] <UQlev> Wanderer: I tried only: postfix-sasl2-courier-imap-mysql
[20:35:53] <jra[25C3]> I think BerkelyDB is rather picky with databases from different major versions
[20:36:01] <UQlev> whander: what is your method?
[20:36:07] <Wanderer> berkelydb
[20:37:56] <Wanderer> ok, if I'm trying to change the password for a user at a domain, do I do "saslpasswd2 <username>@domaiin" ?
[20:39:20] <UQlev> Wanderer: there is client for saslauthd, you can check how it work with your DB
[20:40:07] *** tombar has joined #postfix
[20:41:45] *** sagattarii has quit IRC
[20:42:27] <Wanderer> sec, upgrading packages to current and rebooting
[20:43:21] <empiric> hey
[20:43:21] <empiric> postfix/qmgr[908]: 92E0EA2659: from=<>, size=2163, nrcpt=1 (queue active)
[20:43:22] <empiric> Dec 27 17:21:09 test postfix/qmgr[908]: 68A5CA2657: removed
[20:43:22] <empiric> Dec 27 17:21:09 test postfix/smtp[917]: 92E0EA2659: to=<noman at company dot com>, relay=none, delay=0, status=bounced (mail for company.com loops back to myself)
[20:43:22] <empiric> Dec 27 17:21:09 test postfix/qmgr[908]: 92E0EA2659: removed
[20:43:27] <empiric> why its loop back
[20:43:33] <empiric> i have set my dns as
[20:44:50] <empiric> my internal dns is http://pastebin.com/d1c82d962
[20:50:34] *** jense has joined #postfix
[20:52:22] <sphex> empiric: looks like it tried to send it via SMTP. maybe it's not configured with company.com as a local domain?
[20:52:35] <empiric> wait
[20:53:01] <Wanderer> ugh, have to reconvert the whole freaking sasldb2
[20:56:32] <empiric> here s my main.cf http://pastebin.com/m1335055a
[20:56:40] <empiric> sphex plz look
[20:57:45] <sphex> empiric: you need $mydomain in mydestination
[20:57:47] *** growltiger_ has joined #postfix
[20:58:12] *** growltiger has quit IRC
[20:58:19] *** war9407 has quit IRC
[20:58:51] <empiric> why u mean
[20:59:33] <empiric> ok
[20:59:37] <empiric> wait
[21:02:14] <empiric> ok done thanks
[21:02:23] <empiric> hey i want to do pop as well
[21:02:38] <empiric> how to do
[21:02:42] <empiric> smtp is ok
[21:03:10] <xpoint> empiric, http://wiki.kaspersandberg.com/doku.php?id=indexes:configs see bind dns split view, if you really now have that domain
[21:03:45] <xpoint> warn: dont add domains to postfix you dont have !
[21:04:31] <sphex> empiric: well, install a POP3 server
[21:04:50] <empiric> its ok i install dns
[21:04:56] <empiric> as wel xpoint its working
[21:05:01] <empiric> which pop3
[21:05:02] <empiric> ?
[21:05:07] <empiric> dovecot?
[21:05:10] <sphex> why not
[21:05:19] <xpoint> for unix accounts mail is fine
[21:07:18] <empiric> mail?
[21:07:25] <empiric> oh u mean
[21:07:27] <empiric> mail command
[21:07:59] <empiric> wht abt if i want 110 on windows client
[21:08:00] <empiric> ?
[21:09:08] <empiric> xpoint plz explain how i use mai?
[21:09:11] <empiric> mail
[21:09:29] <empiric> for reading emails i also cat /var/spool/mail/user
[21:09:58] <memic> dovecot
[21:10:20] *** chupacabra has joined #postfix
[21:15:30] <chupacabra> my server is sending mail to places like info at pedity dot com , info at veriexperex dot com and some others.  the websites seem like a bogus front for spammers.  What is this and how can I counter it?
[21:16:20] <xpoint> get clamav with sanesecureity sigs and scan
[21:16:50] <xpoint> next, make sure no dir is world writeble
[21:17:09] <chupacabra> I'm building a new server at the moment.
[21:17:19] <xpoint> next, make sure apache cant write anything out side of temp dir
[21:17:42] <chupacabra> so this is nothing really new?  not really very much traffic but it is going out which worries me.
[21:18:05] <xpoint> stop postfix
[21:18:14] <xpoint> postcat the queue files
[21:18:32] <xpoint> mailq list them
[21:24:09] <chupacabra> I'll have to wait till after hours to stop it.
[21:24:57] <chupacabra> what after listing them?  blacklist or something?
[21:28:47] <empiric> xpoint what  u mean
[21:29:34] <chupacabra> emperic: you have the same issue?
[21:30:29] <rob0> No, empiric has the issue of not knowing the first thing about mail and how it works.
[21:30:38] <chupacabra> oic
[21:31:00] <chupacabra> I'm not an expert for sure
[21:31:01] <empiric> no no
[21:31:06] <rob0> If you are spewing spam STOP IT NOW, before you get blacklisted.
[21:31:48] <rob0> If you wait until after hours, you are more likely to be listed, and then the problem is much harder to fix.
[21:31:50] <chupacabra> it is sending it to the spammers, not to the world.  that is what made me curious.
[21:32:09] <rob0> Still, stop.
[21:32:28] <rob0> Find out where those messages originated. Fix that problem.
[21:33:00] <chupacabra> that is what I was guessing.  some rogue windows box on the network.
[21:35:22] <sphex> hey. I was wondering.. aren't success dsn a potential source of backscatter?
[21:35:33] <Wanderer> ok, guess I need to go do #cyrus for a bit, back in min
[21:35:59] *** [sr] has joined #postfix
[21:37:47] <[sr]> hi
[21:37:53] <[sr]> when sending emails in BCC
[21:38:04] <[sr]> on the destination the email client show's:
[21:38:19] <[sr]> undisclosed-receipients:;my.domain.com
[21:38:27] <[sr]> how can i tune this?
[21:38:36] <sahil> sandeen: it does not confuse the ipod; i've used ipod and iphone to connect and read mail from imap servers that have self-signed certs.
[21:39:20] *** wdp_ is now known as wdp
[21:39:21] <sahil> [sr]: the *receiving* server has to the tune this.
[21:40:13] <sahil> [sr]: if you control the receiving server, and it is a postfix server, then this is handled by postfix's cleanup service, and explained here: http://www.postfix.org/postconf.5.html#undisclosed_recipients_header
[21:40:16] <[sr]> hum, but how do i tune this? i usualy send on BCC to emails on my postfix server
[21:40:32] <[sr]> hum, goind to check :)
[21:40:46] <sahil> [sr]: like i just said, if you are *sending* email that contains no To: or Cc:, then the *receiving* server controls what to do -- you do NOT.
[21:41:04] <sahil> it is up to the receiving server to handle email with no To: and Cc: message header.
[21:41:25] <Wanderer> ok, no-one awake there
[21:41:28] <[sr]> correct, so this is called "cleanup service" correct?
[21:41:29] <sahil> the question is why you are trying to change the default behavior?  the mail was sent to undisclosed recipients.  what is the problem?
[21:41:46] <rob0> postconf undisclosed_recipients_header
[21:41:48] <Wanderer> anyone good with libsasl?  testsaslauthd is failing now it seems
[21:41:57] <[sr]> sahil no problem, undisclosed info is OK, i just don't want to have the domain name in the end of it
[21:42:03] <sahil> yes, what rob0 said or just go the URL i pasted for you which is the same damn thing.
[21:42:25] <rob0> Why do you want to change that, though?
[21:42:27] <sahil> lol
[21:42:33] <sahil> rob0: futile discussion; i just asked the very same question.
[21:42:38] <rob0> oh you did
[21:42:49] <[sr]> why should i have it? :P
[21:42:56] * sahil hands rob0 a cold lager.  we're going to need it.
[21:43:03] <[sr]> get my point
[21:43:08] * rob0 drinks up
[21:43:11] <[sr]> you host domaina, and domainb
[21:43:12] <sahil> chug chug chug!
[21:43:27] <[sr]> and the main server is named "server.domain.com"
[21:43:54] <[sr]> you send in BCC to domainB, and you get undisclosed-receipients:;server.domain.com
[21:43:59] <[sr]> it get a bit ugly
[21:44:03] <[sr]> get's
[21:44:07] <[sr]> my opinion just
[21:44:35] <rob0> A BCC goes to an email address, not a hostname.
[21:44:38] <sahil> it's as if you're not reading or comprehending what's being written in this here channel.
[21:44:51] <rob0> burp
[21:45:21] <sahil> [sr]: let's do this in baby steps. first question, do you control the server which is receiving the email and from which (presumably with IMAP) the email is being read?
[21:45:21] <[sr]> rob0, correct, that's why i don't postfix to add the hostname
[21:45:56] <[sr]> yes!
[21:46:06] <rob0> how about you pastebin some full headers and correlated logs
[21:46:11] <sahil> bingo!
[21:46:14] <[sr]> it's emails sent by my server, to account that are on my same server
[21:46:25] <rob0> "by my server"
[21:46:43] <sahil> i just sent email to myself, bcc, and the header is To: undisclosed-recipients: ;
[21:47:14] <sahil> this is default behavior; so you or a moronic package maintainer changed something, and/or you're not explaining the problem clearly.  pastebin your configuration, logs, and full headers of the example email.
[21:48:08] <[sr]> sahil if i do that test, i have my own email addr in To: field, doen by postfix
[21:48:33] <sahil> i cannot understand you; please direct your questions at rob0.
[21:48:48] <[sr]> lol wait
[21:48:51] <[sr]> don't get mad :P
[21:49:07] <sahil> i'm not mad, i just do not have the comprehension skills required to understand you.  i am sorry.
[21:49:24] <[sr]> strange, with msoutlook 2007 is has this behavior, but i have one person that send's in bcc to me and happens that, he it a OE user
[21:49:53] <[sr]> ok guys, going to try to see what OE does
[21:50:05] <[sr]> undisclosed_recipients_header = "", that's how it is configured
[21:50:19] *** nphase has joined #postfix
[21:51:12] *** war9407 has joined #postfix
[21:51:28] <sphex> hey is there any way to have postfix not send DSN success notifications but still support the other DSN stuff like ORCPT?
[21:51:29] *** jra[25C3] has left #postfix
[21:53:21] <[sr]> ya tested and yes, BCC on OE is the one that generates this
[21:53:47] <[sr]> on the MSOutlook famally works OK
[21:54:59] <sahil> sphex: whatever is supported is outlined here: http://www.postfix.org/DSN_README.html
[21:55:43] *** nphase has quit IRC
[21:55:57] <rob0> OE?
[21:56:23] <rob0> !outlook
[21:56:24] <knoba> rob0: "outlook" : MS Outlook has numerous problems with TLS and AUTH support. Try using a better client to troubleshoot your Postfix server's AUTH features; then once you know it works, you can go back and break it such that Outlook will work. See the following MS KB article to enable transport logging in Outlook that may be of some help in troubleshooting, http://support.microsoft.com/kb/300479/en-us
[21:56:28] <sphex> lemme see
[21:56:43] <[sr]> rob0, outlook express
[21:56:52] <rob0> Yes, it's garbage.
[21:56:55] <[sr]> or windows mail in vista >= windows
[21:57:00] <sahil> haha
[21:57:04] <[sr]> ya i know that but, i don't use it
[21:57:05] <[sr]>  :P
[21:57:14] <rob0> I don't support it.
[21:57:19] <sahil> LOL
[21:57:24] * sahil spits out some of his bluemoon
[21:57:29] <[sr]> heeh
[21:57:30] *** nphase has joined #postfix
[21:57:37] <sahil> [sr]: try #outlook or #ms or #microsoft
[21:57:43] <[sr]> believe me, there's ALOT of people using windows mail in vista :p
[21:57:48] <rob0> Or call MS support.
[21:57:54] <sahil> [sr]: we believe you, but that is irrelevant.
[21:58:59] <sahil> so we just started backing up all mail; so tempted to login to the backup account and read some incriminating email
[21:59:06] <sahil> muahahaha
[21:59:23] <[sr]> since it's a OE problem, better
[21:59:25] <sahil> bcc_maps ftw!
[22:00:11] <[sr]> ftw = ?
[22:00:39] <sphex> for teh win!!!11!11111
[22:00:52] <[sr]> ah
[22:00:55] <[sr]> didn't knew :P
[22:01:06] <sphex> dammit. so I can only disable all the DSN stuff, not just success notifications. :/ would you people recommend to disable it? is success backscatter a problem in practice?
[22:01:47] *** nphase has quit IRC
[22:04:15] <rob0> sphex, in practice, not that I have noticed.
[22:04:43] <rob0> But I don't like sending DSNs either.
[22:06:27] <sahil> sphex: FWIW, I silent-discard DSN everywhere I can.
[22:07:23] <sphex> ok
[22:08:09] *** jra[25C3] has joined #postfix
[22:09:05] <sphex> hrm.. prolly not too hard to hack smtpd to ignore notify=success. whoever uses that is prolly expecting it not to work half of the time anyway.
[22:11:06] <chupacabra> ok.  quick and dirty till 18:00  How can i block outgoing mail to info@* ?
[22:11:37] <chupacabra> only about 1 an hour ATM.
[22:12:49] <chupacabra> does anybody really send mail to info?  I never have.
[22:13:17] *** tombar_ has joined #postfix
[22:13:39] <rob0> Lacking a problem description, Q&D answers are not possible. And you actually can only block mail coming in, not going out. So, block it coming in.
[22:14:12] <chupacabra> dern.  that is what i am seeing on the google.
[22:14:38] <jense> chupacabra, you could do that with a policy daemon like postfwd for example
[22:15:15] <chupacabra> Here is my problem:  my server is sending mail to places like info at pedity dot com , info at veriexperex dot com and some others.  the websites seem like a bogus front for spammers.  What is this and how can I counter it?
[22:15:57] <chupacabra> i google the domain names and get chinese.
[22:16:05] <chupacabra> or something
[22:19:21] <chupacabra> dern that is add on software.  Im replacing the server this weekend just dont want to start the new one up with this issue.
[22:19:27] *** Juspion has joined #postfix
[22:20:02] <chupacabra> im gonna do what xpoint told me but not till after 1800
[22:20:03] *** growltiger has joined #postfix
[22:20:23] *** growltiger_ has quit IRC
[22:22:16] <xpoint> chupacabra, you can temporary make use of always_bcc=root
[22:22:49] <chupacabra> ahh to look at the full headers?
[22:22:59] <xpoint> full spam even
[22:23:01] *** [sr] has quit IRC
[22:23:07] <chupacabra> ya. thanks.
[22:24:41] <xpoint> chupacabra, remember its your IP that eventuly get blacklisted, not your custommers ip
[22:25:04] <chupacabra> hey I already had em all going to backup.  just outgoing doesn't show that happening in the logs.  (I hope).
[22:25:22] <sahil> chupacabra: *why* is your server sending those emails?  solve the problem, not the symptom.  in the meantime just create a check_recipient_access map that DISCARDs all email to info@ if that is what you want to do as a temporary measure.
[22:25:58] <chupacabra> oiknow.  It happend to me 5 years or so ago.  a zombie winbox.  I was really a rookie then.
[22:26:31] <xpoint> clamav sigs can be done very fast if it is
[22:27:05] <chupacabra> sahil:  yes that is what i was wanting to do but nothing ever said it worked for outgoing.
[22:27:28] *** tombar has quit IRC
[22:28:32] <xpoint> one could olso make all mails into the HOLD queue
[22:28:55] <rob0> It does NOT work outgoing, like I said, it works COMING IN. The problem is WHERE ARE THESE COMING FROM? You have not answered that. Why? What are you doing?
[22:29:03] <xpoint> chupacabra, you have av and spam test on that box ?
[22:29:36] <rob0> check_recipient_access won't work if it's sendmail(1) submission.
[22:29:44] <chupacabra> xpoint: no.  I inherited the box and it is old and funky.
[22:29:53] <sahil> ah, do we know it's sendmail(1) submission definitively?
[22:30:05] *** empiric has quit IRC
[22:30:05] <rob0> And if it's a pwn3d PHP/Webserver, it could be sendmail.
[22:30:07] <chupacabra> how do i tell?
[22:30:16] <rob0> Sheesh.
[22:30:20] <sahil> seems like it's a pwn3d admin.
[22:30:22] <xpoint> logs
[22:30:30] <chupacabra> lol
[22:30:43] <sahil> chupacabra: are you a paid postmaster?
[22:30:47] *** sv-- has quit IRC
[22:30:48] <sahil> just curious.
[22:30:55] <rob0> Overpaid, if so.
[22:30:56] <chupacabra> lightly paid.
[22:31:07] <sahil> because i wants to get my consult on.  so you should hire me.
[22:31:16] * xpoint thinks chupacabra is a hacker that miss the root password :)
[22:31:37] <chupacabra> only 20 people mailing.
[22:32:20] <chupacabra> Got called in for the webserver then noticed mail was too old to update even.
[22:33:48] *** UQlev has quit IRC
[22:34:38] <sahil> chupacabra: if you want help solving this problem, show some logs.
[22:35:10] <chupacabra> To me they are not even spams if they are going to these bogus sites.  I consider spams to be something going to the public.
[22:35:28] <chupacabra> where is your pastbin?
[22:35:45] <xpoint> /topic
[22:36:12] <sahil> chupacabra: your system is sending messages without authorization; that is bad enough; whether or not you think this is categorized is a semantic discussion.  it could very well turn into spam if it isn't already.  point is: you need to get a freaking handle on your server.
[22:36:21] <sahil> pastebin or pastie.org (my preference).
[22:36:57] <chupacabra> im trying.  just dont need the dissin, thanks.
[22:38:42] <chupacabra> http://pastie.org/347555  this paste contains one of the bogus recipients.
[22:39:33] <rob0> opm.blitzed.org ... dead for a year or more?
[22:39:56] <rob0> Looks like bounces, backscatter.
[22:40:04] <chupacabra> why I am building a new server.  too much wrong to fix.
[22:40:24] <chupacabra> I was thinking it was backscatter too.
[22:41:13] <chupacabra> to=<info at siantsva dot com>  see this portion.
[22:41:34] <rob0> You didn't show any coming in.
[22:41:48] <chupacabra> there are none that I see.
[22:42:21] <chupacabra> so nothing to backscatter.
[22:42:26] <rob0> What's this procmail doing? Maybe you have a compromised user account.
[22:42:35] <chupacabra> as I was thinking.
[22:42:38] <rob0> afk, power outage, storm front
[22:42:54] <sahil> lol
[22:42:57] <chupacabra> procmail just drops mail in the mail dirs
[22:51:45] *** blackflag has joined #postfix
[22:53:17] <sahil> well, good luck to you.
[22:53:52] <chupacabra>     here is a mail header  from the interesting mail:  http://pastie.org/347563  the domain name does not go to a wine merchant though.
[22:54:45] <sahil> chupacabra: your system has been compromised and is being used to send unsolicited email; simple as that.  find the source and squash it.
[22:55:09] <chupacabra> and that one is coming in.
[22:55:28] <sahil> chupacabra: your system is receiving spam; find the source and REJECT it.
[22:55:41] <sahil> this isn't #spam!
[22:55:52] <chupacabra> ok, thanks
[22:57:37] *** nphase has joined #postfix
[23:00:06] *** growltiger has quit IRC
[23:00:16] *** growltiger has joined #postfix
[23:03:29] *** wdp has quit IRC
[23:04:50] *** Macjust has quit IRC
[23:08:18] *** nphase has quit IRC
[23:12:15] *** jra[25C3] has left #postfix
[23:12:38] *** nphase has joined #postfix
[23:13:33] *** jra[25C3] has joined #postfix
[23:15:02] *** tombar_ has quit IRC
[23:15:30] *** mib_fhx67t has joined #postfix
[23:19:01] *** nphase has quit IRC
[23:20:10] *** amrit is now known as amrit|bbl
[23:21:38] *** sv-- has joined #postfix
[23:24:18] *** pulsar has quit IRC
[23:28:24] *** growltiger_ has joined #postfix
[23:28:27] *** growltiger has quit IRC
[23:33:17] <mib_fhx67t> Hello guys...quick question...I am using postfix  for mail but when I type mail it says no mail, but imap and everything else works...is it that since there is no mbox formatted mail..."mail" can't read in the Maildir or do I just can "mail" and symlink it to alpine or something
[23:36:21] *** wdp has joined #postfix
[23:37:44] *** nphase has joined #postfix
[23:38:04] *** growltiger_ has quit IRC
[23:38:10] *** growltiger has joined #postfix
[23:39:15] *** Juspion has quit IRC
[23:47:40] *** mib_fhx67t has quit IRC
[23:47:41] 
[23:59:46] *** seekwill has quit IRC





top