August 2, 2009 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
August 2, 2009 [00:10:10] *** JonnyV has quit IRC[00:13:16] *** jense has quit IRC[00:24:21] *** r3r3 has quit IRC[00:24:44] *** loddafnir has quit IRC[00:24:57] *** r3r3 has joined #postfix[00:47:54] *** AbsoluteBeginner has quit IRC[00:48:00] *** dump_01 has left #postfix[00:57:43] *** githogori has quit IRC[01:16:35] *** _Radiance has joined #postfix[01:25:49] *** Radiance has quit IRC[01:45:38] *** AndrewKT_ has joined #postfix[01:50:51] *** AndrewKT has quit IRC[01:50:58] *** AndrewKT_ is now known as AndrewKT[01:51:42] *** stephan48 has quit IRC[02:08:50] <penrod> ,n[02:23:29] *** Internat has quit IRC[02:34:24] *** Internat has joined #postfix[02:39:09] *** xpeed has joined #postfix[02:45:27] *** LinuxCode has quit IRC[02:47:27] *** penrod has quit IRC[02:50:26] *** xpeed has quit IRC[03:07:14] *** pingouin has quit IRC[03:20:33] *** githogori has joined #postfix[03:33:51] *** ramoni has joined #postfix[03:34:44] <defaultro> good evening folks, can someone please recommend a really good spam protection approach using postfix?[03:48:06] *** githogori has quit IRC[03:51:13] *** seekwill has joined #postfix[03:52:41] *** magyar has joined #postfix[04:03:58] *** master_of_master has quit IRC[04:07:39] *** master_of_master has joined #postfix[04:15:56] *** kfo_ has joined #postfix[04:18:33] <AndrewKT> amavisd-new w/spamassassin[04:18:48] <muh2000> dspam[04:18:49] <AndrewKT> plus a gratuitous amount of RBLs[04:19:03] <defaultro> k[04:19:15] <defaultro> are there any article/howto I can follow?[04:19:30] * AndrewKT points at google[04:33:16] *** kfo has quit IRC[04:47:42] *** nb is now known as zz_nb[04:56:33] *** zz_nb is now known as nb[04:57:16] <rob0> !cheatsheet[04:57:17] <knoba> rob0: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.[05:04:31] <defaultro> i'm back[05:04:37] <defaultro> thanks AndrewKT[05:04:53] <defaultro> thanks knoba[05:05:12] <rob0> !zen[05:05:13] <knoba> rob0: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL[05:05:35] <AndrewKT> defaultro going already? it took me several days to figure out which packages i really wanted to use[05:05:37] <defaultro> so I need to do that as well?[05:05:59] <defaultro> i remember using rbls back in 2003[05:06:08] <defaultro> but it's just now that I went back to postfix[05:06:37] <defaultro> so knoba, the last link that you sent, is it something that I need to install?[05:10:53] *** steinmb has joined #postfix[05:20:09] *** pingouin has joined #postfix[05:20:18] *** steinmb has quit IRC[05:23:34] *** Motoko-chan has joined #postfix[05:39:37] <MehoATX> hi why can i send mail?[05:39:45] <MehoATX> can't*[05:47:57] *** TomHome has joined #postfix[05:54:38] <KB1JWQ> Helo.[05:54:51] *** bluethundr has quit IRC[05:55:25] <rob0> 501 Syntax: HELO hostname[05:58:50] <thumbs> hello![06:00:56] <seekwill> 550 I reject you[06:03:14] *** MehoATX has quit IRC[06:07:27] <rob0> sulkwill[06:08:09] <thumbs> so I got my new bid today.... it's huge[06:08:37] *** Motoko-chan has quit IRC[06:08:38] <seekwill> What did you bid on?[06:09:33] <thumbs> err bed[06:10:05] <seekwill> Will KB1JWQ and I fit better now?[06:10:22] <thumbs> yeah, it's a king size[06:10:33] <seekwill> oh[06:10:47] <seekwill> KB1JWQ is kinda big[06:10:55] <seekwill> And he kicks[06:11:02] <thumbs> it's a king size![06:11:14] <seekwill> Those aren't that big[06:11:47] <seekwill> I sleep on a Texas-King[06:12:17] <thumbs> wait, because everything is ...?[06:12:43] <seekwill> No, because KB1JWQ says so[06:12:49] * KB1JWQ hates seekwill[06:12:52] <seekwill> :([06:12:56] <rob0> Does KB1JWQ kick with his injured foot?[06:13:24] <seekwill> rob0: both feet![06:13:24] <KB1JWQ> I kick with whatever's handy.[06:13:43] <rob0> And you slap with whatever's footy?[06:17:57] <thumbs> rob can be clever at times[06:21:20] <rob0> This just isn't one of those times.[06:29:35] *** githogori has joined #postfix[06:35:56] *** uqlev has joined #postfix[06:42:54] *** seekwill has quit IRC[07:15:50] *** githogori has quit IRC[07:30:35] *** uqlev has quit IRC[08:10:49] *** poli_ has joined #postfix[08:19:10] *** smultron has quit IRC[08:23:11] *** poli has quit IRC[08:25:18] *** emcepe has joined #postfix[08:26:37] *** mcp has quit IRC[08:26:37] *** emcepe is now known as mcp[08:31:14] *** nb is now known as zz_nb[08:50:10] *** loddafnir has joined #postfix[08:50:55] *** scylla has joined #postfix[08:53:05] *** Filbert- has joined #postfix[08:54:33] *** tjikkun has quit IRC[09:00:46] *** sebastien_ has joined #postfix[09:00:59] *** sebastien_ is now known as cichlid[09:12:01] *** tessier has joined #postfix[09:12:06] <tessier> Hello all![09:20:03] <tessier> So...I have a postfix machine set up to receive inbound mail (an mx) and forward it on to the main mail server. I want to do spam filtering on the mx machine. I don't want to do spam filtering on the main mail machine. Normally I use procmail for local delivery and have it pipe the mail through crm114 which is my spam filter. Not sure how to get this done on the mx machine since there is no local delivery. Maybe I could set up a virtual transp[09:20:03] <tessier> ort into the pipe command...[09:24:12] <scylla> tessier, transport would do[09:25:17] <tessier> scylla: But how? Pipe? Then how do I get the result of what comes back out of procmail on to the main mail server?[09:30:01] <scylla> tessier, correct me if i'm not wrong MX -> relay -> procmail -> final delivery ?[09:31:10] <tessier> correct, with final delivery being on another server[09:38:16] *** Manish has joined #postfix[09:42:24] *** Manish has quit IRC[09:43:35] *** clockspider has quit IRC[09:44:08] *** scylla has quit IRC[09:49:28] *** sophokles has joined #postfix[09:52:20] *** dragonheart has joined #postfix[09:53:24] *** war9407 has joined #postfix[09:58:40] *** clockspider has joined #postfix[10:00:55] *** war9407 has quit IRC[10:01:52] *** brownies has joined #postfix[10:03:20] <brownies> i have postfix configured on mysql, but when i add a user to the "users" and "forwards" table simultaneously, it doesn't work even after i "sudo postfix reload"... why would this happen?[10:07:15] *** war9407 has joined #postfix[10:20:10] <dragonheart> brownies: whatever the reason it should appear in the logs[10:20:33] <brownies> fair enough, i'll dig around some more[10:36:31] *** cichlid has quit IRC[10:52:15] *** wdp has joined #postfix[11:04:11] *** rcsu has joined #postfix[11:05:30] *** nomad_fr1 has joined #postfix[11:11:31] *** brownies has quit IRC[11:23:35] *** tjado has left #postfix[11:41:24] *** madrescher has joined #postfix[11:49:26] *** sophokles has quit IRC[11:56:55] *** nomad_fr1 has quit IRC[11:57:40] *** brancal is now known as brancaleone[11:58:13] *** madrescher has quit IRC[12:02:55] *** madrescher has joined #postfix[12:09:21] *** cga has joined #postfix[12:21:53] *** brancal has joined #postfix[12:23:27] *** brancaleone has quit IRC[12:23:42] *** brancal is now known as brancaleone[12:32:18] *** blackflag has joined #postfix[12:32:52] *** z0ran has joined #postfix[12:45:06] *** F6F has joined #postfix[12:54:51] *** stephan48 has joined #postfix[12:59:23] *** digitalmortician has joined #postfix[13:07:26] *** hever has joined #postfix[13:09:21] *** Frold has joined #postfix[13:10:20] <Frold> Im using postfix as a mail server - all my outgoing mails is not sendt out and all are just listed in my mail queue[13:11:44] <Frold> I got error msg in my mail queue like: "Sender address rejected: Greylisted for 2 minutes (17) (in reply to RCPT TO command)" " refused to talk to me: 571 86.58.160.86 does not reverse" ....[13:12:04] <Frold> My server use this senders addresse: www-data at s-studmed01-v dot gyldendal.dk howto change it to something else?[13:15:27] <Zerberus> Frold: if you are legit user of a specific domain, then set your system's hostname properly, maybe modify $myhostname within postfix if necessary and read about address rewriting for mails generated by webserver use[13:17:10] <Frold> Im the owner of studmed.dk so I should be able to change myhostname to that.... the last thing I need to do I dont understand...[13:18:10] <Zerberus> http://www.postfix.org/ADDRESS_REWRITING_README.html[13:18:31] <Zerberus> www-data@ is propably no real address[13:19:11] *** jtrm has joined #postfix[13:19:56] <Frold> nope - I guess its the server standart root or something[13:25:57] <Frold> Zerberus: sry I dont understand much from that link.. :S I just want to change www-data into something usefull...[13:27:03] <Zerberus> well, you will have to understand the documentation[13:27:13] <Zerberus> what specificly is not clear to you?[13:37:28] *** Frold has quit IRC[13:58:21] *** r3r3 has quit IRC[13:58:45] *** r3r3 has joined #postfix[13:59:33] *** AbsoluteBeginner has joined #postfix[14:02:31] <dragonheart> Zerberus: the error wasn't to do with address rewriting. it was a basic greylisting or an address verification error depending on the owner of the IP address[14:03:31] <Zerberus> dragonheart: yes, that is pretty clear, thus my advise to use a domain he controls to avoid rejects - greylisting he can't avoid[14:03:53] <Zerberus> dragonheart: the hint to use a proper sender address by rewriting www-data@ was a different topic[14:04:07] <dragonheart> ah k[14:04:15] <Zerberus> he has just too many errors in his setup[14:04:50] <dragonheart> setting up is to complicated so you can just skip that step right? :-)[14:05:16] *** Zblakany has joined #postfix[14:08:08] *** dragonheart has quit IRC[14:13:05] *** r3r3 has quit IRC[14:13:42] *** r3r3 has joined #postfix[14:21:27] *** madrescher has quit IRC[14:26:45] *** jtrm has quit IRC[14:28:21] *** madrescher has joined #postfix[14:33:57] *** F6F has quit IRC[14:42:56] *** r3r3 has quit IRC[14:53:39] *** TomHome has quit IRC[15:05:37] *** nomad_fr1 has joined #postfix[15:14:02] *** the has quit IRC[15:15:14] *** the has joined #postfix[15:22:33] *** denis_ has joined #postfix[15:36:58] *** muh2000 has quit IRC[15:40:30] *** harryman100 has joined #postfix[15:41:42] <harryman100> I've been trying to test my ldap lookup for aliases using postmap, and noticed that postfix seems to ignore the ldap configuration I give it[15:41:48] <harryman100> anyone know why that might be?[15:42:39] <harryman100> if I deliberately break the configuration by specifying an invalid filename, the result is exactly the same[15:45:48] *** z0ran has quit IRC[15:46:44] <tuxick> harryman100: did you check man ldap_alias ?[15:48:33] *** mcarter has quit IRC[15:49:31] *** mcarter has joined #postfix[15:49:45] <harryman100> tuxick: do you mean ldap_table?[15:51:39] <tuxick> yes, sorry[15:53:26] <harryman100> tuxick: yeah, that's the info I've been working from[15:54:11] <harryman100> I get 'postmap: cfg_get_str: aliases.cf: search_base = ' (i.e. blank) but there is definitely a search_base defined in aliases.cf[15:54:23] *** diqpib has joined #postfix[15:57:03] *** r3r3 has joined #postfix[15:58:26] <tuxick> postmap -q foo ldap:/etc/postfix/someldap.cfg ?[15:58:29] <tuxick> or what was the syntax[15:59:08] <tuxick> ldap:// even[16:19:21] <harryman100> tuxick: think I found it, it appears to have been an invalid config option in my main.cf which was killing it[16:20:42] <tuxick> ye, seemed logical[16:21:18] *** cga has quit IRC[16:21:26] *** madrescher1 has joined #postfix[16:24:29] *** digitalmortician has quit IRC[16:24:31] *** AbsoluteBeginner has quit IRC[16:25:48] *** shinao1 has joined #postfix[16:31:38] *** Filbert- has quit IRC[16:32:00] *** madrescher has quit IRC[16:33:30] *** Filbert- has joined #postfix[16:36:11] *** MartinCo has quit IRC[16:36:44] *** digitalmortician has joined #postfix[16:39:08] *** digitalmortician has quit IRC[16:39:15] *** digitalmortician has joined #postfix[16:42:47] *** madrescher1 has quit IRC[16:44:48] *** madrescher has joined #postfix[16:55:37] *** diqpib has quit IRC[16:56:04] *** digitalmortician has quit IRC[17:00:49] *** Fallenou has joined #postfix[17:07:33] *** digitalmortician has joined #postfix[17:07:48] *** digitalmortician has quit IRC[17:07:51] *** digitalmortician has joined #postfix[17:09:44] *** hever has quit IRC[17:10:13] *** hever has joined #postfix[17:10:16] <tuxick> getting "milter-reject: END-OF-MESSAGE" since an upgrade[17:10:27] <tuxick> no idea what that's about?[17:20:48] *** madrescher has quit IRC[17:24:27] <tuxick> ah, clamav-milter is broken again[17:27:40] *** digitalmortician has quit IRC[17:27:45] *** digitalmortician has joined #postfix[17:41:29] *** madrescher has joined #postfix[17:42:51] *** JonnyV has joined #postfix[17:52:56] *** digitalmortician has quit IRC[18:13:24] *** z0ran has joined #postfix[18:27:06] *** muh2000 has joined #postfix[18:27:50] *** steinmb has joined #postfix[18:45:08] *** steinmb has left #postfix[18:53:40] *** hever has quit IRC[18:53:44] *** BlackNet has quit IRC[18:53:51] *** hever has joined #postfix[18:59:20] *** Fallenou has quit IRC[19:00:57] *** seekwill has joined #postfix[19:03:18] *** BlackNet has joined #postfix[19:15:17] *** Schmidt has joined #postfix[19:22:20] *** scylla has joined #postfix[19:32:00] *** scylla has quit IRC[19:37:29] *** shinao1 has quit IRC[19:37:55] *** bronb has joined #postfix[19:38:36] *** hparker has joined #postfix[19:39:24] *** digitalmortician has joined #postfix[19:53:03] <madduck> given host -t mx debconf.org output, why would postfix talk to smithers.dc.o and not try once to talk to mail.dc.o?[19:57:59] <seekwill> If it can't connect to mail.debconf.org[19:58:44] *** digitalmortician has quit IRC[20:04:01] *** bronb_ has joined #postfix[20:04:34] *** digitalmortician has joined #postfix[20:05:32] *** bronb has quit IRC[20:08:11] *** kurt_ has joined #postfix[20:09:36] *** dinmoer has joined #postfix[20:11:04] *** madrescher has quit IRC[20:13:05] *** madrescher has joined #postfix[20:24:52] *** plee has quit IRC[20:27:14] *** beawesomeinstead has quit IRC[20:27:55] *** beawesomeinstead has joined #postfix[20:37:51] *** zz_nb is now known as nb[20:40:01] <rob0> Or transport_maps, or maybe even virtual_alias_maps, or a few other possibilities. Why would madduck be asking for wild guesses? :)[20:41:08] <madduck> seekwill: it never tried to connect to mail.debconf.org[20:41:18] <madduck> rob0: because I am a bit at a loss. ;)[20:41:35] <seekwill> madduck: Maybe it couldn't? i.e., network?[20:41:50] <seekwill> Without knowing any detail, we are just guessing[20:42:10] *** mcarter has quit IRC[20:43:47] *** mcarter has joined #postfix[20:44:05] <madduck> seekwill: postfix would log that, no?[20:45:25] <madduck> seekwill: http://slexy.org/view/s21BU7otmG is all the /debconf\.org/ matching output in the logs regarding this transaction[20:46:08] *** kurt_ is now known as plee[20:49:08] <rob0> lists.debconf.org. 86400 IN MX 10 smithers.debconf.org.[20:49:31] *** kenyon has quit IRC[20:49:34] <seekwill> heh[20:49:57] <rob0> Looks like my second guess was probably right.[20:50:05] <rob0> virtual_alias_maps[20:53:06] <rob0> Postfix is only a hobby for me. My main interests are to turn water into wine, and to heal the incurably ill.[20:53:17] <plee> hehe[20:53:40] <plee> rob0, that one I actually can believe :)[20:54:43] *** harryman100 has left #postfix[20:55:13] <rob0> Then you, too, shall be healed![20:55:24] <rob0> Have some wine.[20:55:30] <tuxick> rob0: there's good money in that[20:55:56] <plee> :)[20:56:06] <rob0> You'd think. But I never see any of it.[20:58:27] <tuxick> then you don't do it right[20:59:09] <seekwill> Or need a better marketing department[20:59:23] *** nb has quit IRC[20:59:54] *** kenyon has joined #postfix[21:05:07] *** nuonguy has quit IRC[21:06:00] *** muh2000 has quit IRC[21:08:19] *** nb has joined #postfix[21:12:33] *** nb is now known as zz_nb[21:14:01] *** githogori has joined #postfix[21:28:08] <rob0> mta221.mail.mud.yahoo.com damned backscattering idiots ... into the blocklist they go.[21:28:26] <rob0> And they tell me they've had complaints about me![21:29:58] *** anv_ has joined #postfix[21:34:41] *** wdp has quit IRC[21:34:48] *** dorferiferon has quit IRC[21:35:12] *** jzaboo has joined #postfix[21:35:24] *** madrescher has quit IRC[21:36:32] *** madrescher has joined #postfix[21:36:54] <jzaboo> Hi, just set up my postfix / courier server using this tutorial (https://help.ubuntu.com/community/PostfixCompleteVirtualMailSystemHowto) and everthing works exept one thing: sending email from my clients using smtp-auth. Syslog says: warning: SASL authentication failure: no secret in database[21:36:55] <jzaboo> Aug 2 21:38:14 fresh-gaming postfix/smtpd[16220]: warning: p5B2A4E90.dip.t-dialin.net[91.42.78.144]: SASL NTLM authentication failed: authentication failure[21:36:55] <jzaboo> Aug 2 21:38:14 fresh-gaming postfix/smtpd[16220]: warning: SASL authentication failure: realm changed: authentication aborted[21:36:55] <jzaboo> Aug 2 21:38:14 fresh-gaming postfix/smtpd[16220]: warning: p5B2A4E90.dip.t-dialin.net[91.42.78.144]: SASL DIGEST-MD5 authentication failed: authentication failure[21:36:57] <jzaboo> Aug 2 21:38:14 fresh-gaming postfix/smtpd[16220]: warning: p5B2A4E90.dip.t-dialin.net[91.42.78.144]: SASL LOGIN authentication failed: authentication failure[21:39:11] *** seekwill has quit IRC[21:39:20] *** seekwill has joined #postfix[21:39:49] *** dinmoer has quit IRC[21:41:44] <jzaboo> I simply dunno whats wrong and syslog doesn't show my anything for further research[21:43:05] <plee> it has shown plenty :)[21:43:20] <plee> sasl authentication failure[21:44:19] <jzaboo> plee: yes but I followed all the instructions step by step[21:44:43] <jzaboo> plee: so how should I know what to do now? google offers so many stuff i've already tried.[21:47:06] <rob0> NTLM ... DIGEST-MD5 ... LOGIN mechanisms?[21:47:16] <rob0> !chroot[21:47:17] <knoba> rob0: "chroot" : The fifth column in master.cf, if not n , means that the Postfix process described on that line runs in a chroot, see !debug , !queue_directory and files in the examples/chroot-setup subdirectory of the Postfix source archive which show examples of a Postfix chroot environment on a variety of systems[21:47:45] <rob0> See /topic, "when asking ..."[21:48:28] <rob0> I've never seen that "realm changed" error. Maybe you have a broken tutorial, or maybe you missed a step?[21:49:45] <jzaboo> rob0: Well... i dunno whether the tutorial is wrong or not. I'm not THAT familliar with postfix hence I read it.[21:52:33] <jzaboo> rob0: I can't just start from scratch again due to lack of time. It's just a small thing I guess... would be nice if anyone here knows what to do or can even guess some solutions[21:53:09] *** masterhumper has joined #postfix[21:53:34] *** zz_nb is now known as nb[21:53:36] *** sejo has quit IRC[21:53:43] *** dorferiferon has joined #postfix[21:54:27] *** makerc has joined #postfix[21:55:49] *** dinmoer has joined #postfix[21:57:22] *** arnee has joined #postfix[21:57:50] *** arnee has quit IRC[22:02:49] <jzaboo> anything?[22:02:54] <seekwill> nothing[22:03:20] <jzaboo> yeah that's what I guess[22:03:42] <seekwill> Use a better distro and tutorial :)[22:03:45] <seekwill> Or just outsource it[22:04:13] <jzaboo> how should I know which one is good and which is not before?[22:04:18] <rob0> 19:51 < rob0> See /topic, "when asking ..."[22:04:19] <jzaboo> :-/[22:04:31] <seekwill> heh[22:05:12] <jzaboo> ill add some nopaste links with my config files...[22:07:20] <rob0> also, Cyrus SASL has its own debugging tools, like testsaslauth[22:08:11] *** Jax0r has joined #postfix[22:08:28] <jzaboo> rob0: http://nopaste.info/9a8304fa40.html[22:09:11] <jzaboo> rob: testsaslauth isn#t installed since the tutorial didn#t told me to install the sasl2-bin package.[22:09:24] <seekwill> lol[22:09:27] <rob0> haha[22:09:33] <seekwill> He's honest[22:10:05] <thumbs> jzaboo: don't follow tutorials[22:10:22] *** tjikkun has joined #postfix[22:10:23] <jzaboo> thumbs: And do it how?[22:10:32] <seekwill> Trial and error[22:10:51] <thumbs> jzaboo: read the postfix documentation[22:11:41] <jzaboo> thumbs: I don#t have time to do that.[22:11:53] <thumbs> oh, one of those[22:12:07] <seekwill> We need a list of Postfix consultants :)[22:12:21] <thumbs> jzaboo: good luck[22:12:25] <jzaboo> thumbs: not on of those. I read many stuff just to understand and to solve it. but now i'm kinda in a dead end.[22:12:51] <jzaboo> thumbs: I'm working at that postfix stuff since last monday[22:14:16] <jzaboo> thumbs: And googled hundres of webpages for solutions when something went wrong. For now everything is running but this auth stuff. Just giving me some advice and/or looking into the configuration files I've provided now would be much more helpful than saying: read all that stuff again. If this would have helped be I wouldn#t be here.[22:14:56] *** s0ber_ has joined #postfix[22:15:09] <seekwill> hehe[22:15:27] <rob0> !google[22:15:28] <knoba> rob0: "google" : Those who use Google before reading the Postfix documentation, if fortunate, end up at http://www.postfix.org/ . If not, they end up in a jumble of bad questions, misleading or wrong answers, and outdated information.[22:15:47] <jzaboo> rob0: Guess what I did all those days?[22:16:12] <Zelest> wrote a page full of bad answers for others with strange questions? :D[22:16:20] <rob0> I can guess this! You ended up in a jumble of bad questions, misleading or wrong answers, and outdated information.[22:17:00] <jzaboo> rob0: No I've read much stuff on the postfix page also but didn't find anything that would help me out.[22:18:51] <jzaboo> rob0: I tried my best to find the answer but after reading hours for hours this drives you nuts...[22:19:26] <jzaboo> rob0: So what about my config files? Anything in there which might be a point to say: try looking at this again...[22:20:07] <gebi> jzaboo: i had some similar problem in the past, sasl didn't worked and no real error message, apt-get install libsasl2-modules[22:20:25] *** Jax0r is now known as Jax[22:20:32] <gebi> because libsasl2-2 only had a recommends on sasl modules, no depends[22:22:01] <jzaboo> gebi: This package is installed[22:22:16] <jzaboo> gebi: This one, the libs and the mysql package[22:22:24] <gebi> though i've scrapped sasl long ago, i usualy use dovecot auth directly[22:22:49] *** memiux has joined #postfix[22:23:33] <jzaboo> gebi: Yeah there are many ways to do this but since I've managed to make postfix work 98% right resetting everything is insane...[22:24:08] <rob0> Well, see, you can post your Postfix config, but in this case it really looks like a Cyrus SASL problem. You need testsaslauth.[22:24:18] *** pingouin has quit IRC[22:24:32] *** memiux has quit IRC[22:24:39] <rob0> If you fix your Cyrus SASL, your AUTH might work.[22:24:46] <gebi> jzaboo: right[22:25:08] *** memiux has joined #postfix[22:25:10] <rob0> And like gebi and many others, I gave up on Cyrus SASL, I use Dovecot SASL too.[22:25:19] *** denis_ has quit IRC[22:25:41] <jzaboo> rob0: right, I'm currently reading that cyrus sasl stuff on the postfix page again just to make sure everything is like it should be.[22:26:54] *** s0ber has quit IRC[22:27:07] <rob0> Get this done in the right order. 1. Fix Cyrus SASL; 2. See about making it work with Postfix. You're stuck on step 1.[22:28:38] <jzaboo> rob0: How should I fix it without making it work with postfix? I just can access the sasl-auth stuff using postfix.[22:28:56] <jzaboo> rob0: I need to do those two steps at one i guess.[22:29:55] *** nuonguy has joined #postfix[22:31:53] <jzaboo> rob0: What i'm just curious about is: my passwords are stored in a mysql database. so auth against the sasl daemon isn't the right solution is it?[22:34:33] *** Ober has joined #postfix[22:35:01] <plee> it is[22:37:41] <jzaboo> plee: so sasl is kind of a "plug-in" to give postfix the ability to do smtp auths against a sql database...[22:38:07] <plee> that's why it's called sasl-auth[22:38:43] <plee> you use sasl, to get the passwords from the mysql database[22:40:14] <plee> for what it's worth.. I recommend you use dovecot sasl instead of cyrus-sasl[22:40:58] <jzaboo> so that means uninstalling courier and all cyrus sasl stuff and use dovecot instead?[22:41:17] *** nomad_fr1 has quit IRC[22:41:50] <plee> yeah[22:42:07] <jzaboo> plee: OMG this will take me another week... :-/[22:42:12] <plee> hehe[22:42:47] <thumbs> perhaps a day or two if you've used dovecot before.[22:43:21] <plee> I set up dovecot in two days, and at that point I had never used dovecot before..[22:43:26] *** memiux has quit IRC[22:43:35] <thumbs> but in jzaboo's case....[22:44:05] <plee> hehe[22:44:17] *** memiux has joined #postfix[22:44:48] <jzaboo> is there a way just to test whether sasl can conect to my database?[22:44:54] <jzaboo> without using postfix?[22:45:44] <rob0> 19:51 < rob0> !chroot[22:45:58] <rob0> that was almost an hour ago[22:46:16] <rob0> I just looked at the master.cf, sure enough, it's chrooted[22:46:32] <seekwill> heh[22:47:07] <jzaboo> so that#s probably the point it doesn#t work?[22:47:23] <jzaboo> because postfix just can't access andything sasl provides?[22:47:37] <seekwill> I think it#s funny that you use # instead of #[22:48:02] <rob0> That's probably just some character set thing[22:48:03] <jzaboo> that's because my german keyboard has ' and # on the same key[22:48:07] <rob0> ah[22:48:09] <seekwill> ah[22:48:12] <jzaboo> ^^[22:48:24] <rob0> anyway, don't use a chroot if you don't know how to maintain it[22:48:45] <seekwill> I was thinking it was a translation thing, but your English is great :)[22:48:58] <jzaboo> rob0: Well... some guys in #ubuntu told me to live with my distros settings and changing something I just dunno much about is BAD[22:49:24] <jzaboo> seewill: thx, I'm an IT-Engineer (25yo) so I get used to it ^^[22:49:32] <seekwill> :)[22:49:38] <jzaboo> seewill: aside of that I love the language :-)[22:49:40] <rob0> then let them help you, I'm not interested in explaining how to do a chroot[22:50:12] <jzaboo> rob0: And what about by just removing it?[22:50:20] <jzaboo> rob0: Insane security risk?[22:51:02] <seekwill> I never use chroot, and have only been compromised only once last week[22:51:22] <jzaboo> seekwill: also had some issues with chrooted suphp stuff[22:51:31] <seekwill> suphp sounds very scary[22:51:58] <jzaboo> seekwill: suphp is php script executed with the owners rights of a script.[22:52:20] <rob0> Non-chrooted is the default as distributed by Wietse. You tell *HIM* it's an insane risk. Have fun.[22:52:44] *** BlackNet has quit IRC[22:54:10] <jzaboo> So you say I chrooted somethign (mb due to the bad tutorial) which isn't enabled by default. where is the line in master.cf I have to change?[22:54:25] <seekwill> What does Wietse know about security anyways???[22:54:37] <rob0> !tell jzaboo chroot[22:55:03] <plee> jzaboo, ubuntu sets the chroot flag as default[22:55:05] *** Filbert- has quit IRC[22:55:23] <jzaboo> yes fith column but which line? the first one with smtpd?[22:55:40] <jzaboo> just don#t wanna make it more bad than it already is[22:55:50] <jzaboo> here is goes again (#) :-)[22:55:52] <rob0> Does DEBUG_README tell you?[22:56:15] *** F6F has joined #postfix[22:56:46] <plee> jzaboo, If you read the master.cf file, you actually see it :)[22:57:15] *** z0ran has quit IRC[22:58:16] <jzaboo> hold on a sec.... I read something that at the second column where the smtp section is the inet type is something which causes trouble...[22:58:51] <jzaboo> instead it should be smtp unix - - - - and so on[22:59:29] *** BlackNet has joined #postfix[22:59:36] <jzaboo> eh nor[22:59:40] <jzaboo> was wrong[22:59:56] <jzaboo> it was about smtpd_recipient_restrictions[22:59:58] <jzaboo> :-)[23:00:49] *** s0ber_ has quit IRC[23:01:16] <cite> smtp inet n - - - - smtpd[23:01:16] <cite> smtp unix - - - - - smtp[23:01:38] <cite> And that's _with_ chroot.[23:01:57] <cite> 5th column, 12t line, change to "n"[23:02:03] <cite> 1st line[23:02:07] <jzaboo> cite: yeah i changed the 5th column both to n and restarted the postfix daemonm. still the same error[23:02:18] *** pingouin has joined #postfix[23:02:22] <jzaboo> SASL LOGIN authentication failed: authentication failure[23:03:03] <jzaboo> would be nice to know WHAT actually makes the auth process fail. postfix -> sasl or sasl->mysql.[23:03:19] <jzaboo> anything better for debugging?[23:03:52] <jzaboo> rob0: you mentined something before[23:04:23] <cite> Log queries in mysql, aptitude install sasl2-bin to get testsaslauth[23:04:24] <jzaboo> wait i will try testsaslauth[23:04:29] <jzaboo> :-)[23:04:46] *** Jax has quit IRC[23:05:57] *** dinmoer has left #postfix[23:07:08] <cite> rob0: I did maintain some backports of Postfix for older Debian versions. I will begin that again, and I promise I will disable chroot.[23:07:45] <plee> heh[23:08:16] <jzaboo> so testsaslauthd -u <email> and -p <password> should return a positiv result?[23:08:37] <cite> I think it#s almost every day someone here has SASL trouble because LaMont Jones sticks to chrooting smtpd by default.[23:08:47] <jzaboo> ah ok[23:09:05] *** nb is now known as zz_nb[23:09:08] <jzaboo> so am I right by using that test-tool like I said?[23:09:28] <thumbs> cite: you're an actual debian maintainer?[23:09:44] <thumbs> cite: tell me you were never in charge of httpd.[23:09:51] <cite> thumbs: No. I can just call dch -b -v 2.6.2~rc1~cite1 && dpkg-buildpackage -rfakeroot :-P[23:10:27] <gebi> cite: so why is chroot a problem? works without problems with dovecot[23:11:22] <cite> gebi: It isn't a real problem. But almost everyone whoe want's to either use (a) a MySQL map or (b) saslauthd in Debian/Ubuntu doesn't read the file /usr/share/doc/postfix/README.Debian[23:11:51] <cite> gebi: And then they show up in this lovely channel and we have to explain the same fscking single problem over and over again.[23:11:55] <seekwill> No one ever reads[23:12:19] <thumbs> cite: sounds like what I have to do with the debian and ubuntu httpd users.[23:12:26] *** masterhumper has quit IRC[23:12:28] <thumbs> cite: I'm sick of those new clueless users.[23:12:45] <jzaboo> like me ^^^[23:12:45] <cite> thumbs: In a /query - I'm interested in hearing what you think is wrong with Debians apache2 packages[23:13:32] <cite> jzaboo: BTW, you are doing it wrong. It's spelled "IMAP", but it's pronounced "dovecot".[23:13:35] <gebi> cite: ah you mean, just use dovecot sasl and it works?[23:13:36] <rob0> cite++ :)[23:15:15] *** rcsu has quit IRC[23:15:19] <jzaboo> so am I right with the way I think testsaslauthd works?[23:15:35] <jzaboo> Would like to see whether sasl works or not[23:15:42] <jzaboo> first step like rob0 said[23:16:22] <rob0> !debian[23:16:23] <knoba> rob0: Error: "debian" is not a valid command.[23:16:40] <jzaboo> ./usr/sbin/testsaslauthd -u jzaboo at fresh-gaming dot de -p ******[23:16:46] <jzaboo> thats what i tried[23:17:07] <jzaboo> result 0: NO "authentication failed"[23:17:21] <cite> jzaboo: Well, time to vi /etc/mysql/my.cnf and add query logging.[23:17:31] <rob0> !learn debian as Please see /usr/share/doc/postfix/README.Debian for Debian-specific information. This probably applies to Ubuntu and most other Debian-derivative distributions as well.[23:17:43] <gebi> cite: isn't it possible to use proxymap (which isn't chrooted per default) in debian?[23:18:23] <jzaboo> rob0: hehe the opposite ot what they told me at #ubuntu. They said use the tutorials from your distro.[23:18:25] <cite> gebi: Of course it is possible. That's not the problem.[23:18:30] *** uqlev has joined #postfix[23:19:14] <gebi> it would be really helpfull for the !debian thing to mention http://workaround.org/ispmail/lenny/[23:19:32] <rob0> why?[23:19:36] <cite> why?[23:19:47] <seekwill> why?[23:20:41] <rob0> I definitely do not think every beginner should be using virtual mailboxes. Overkill and overcomplex (and actually underpowered, for shell users.)[23:21:16] <rob0> Besides, not all Debian users are Lenny users.[23:21:22] <cite> Wooho. My dovecot-1.2 backport is up and I got quota and sieve fixed![23:21:33] *** Muhis has quit IRC[23:22:41] *** memiux has quit IRC[23:23:26] *** uqlev has quit IRC[23:23:39] <gebi> because it's a nice howto which explains everything from simple virtual mailboxes to spam/virus handling[23:24:12] <gebi> what might be nice are some notes to just add use plain files instead of mysql tables[23:24:53] *** Guest7972 has joined #postfix[23:26:04] *** Takayama- has joined #postfix[23:26:08] <cite> So, if I wanted domain/recipient maps in PostgreSQL, with a custom Rails interface, uw-imapd and clamav-milter...?[23:26:26] <seekwill> Switch to RHEL[23:26:35] <cite> Don't use tutorials. Use documentation and rely on your brain.[23:26:47] <seekwill> If you want it "your way" --^[23:27:05] <thumbs> cite: I hope those comments will land somewhere, this time.[23:27:09] <gebi> tutorials are a real timesafer for the start[23:27:26] <gebi> sad is that some users think they only need tutorials[23:27:28] <jzaboo> gebi: hehehe[23:27:39] <jzaboo> for the start yes... not for the end[23:28:04] <seekwill> People use "the start" for production systems :([23:28:08] <cite> It's perfectly ok to use a tutorial like "HOWTO: for loops in bash" - because that's a very limited, not very complex topic.[23:28:13] <cite> Everything else is snakeoil.[23:28:26] *** F6F has quit IRC[23:28:55] <gebi> howtos/tutorials often give a way better overview for complex problems than any detailed doku[23:28:59] <gebi> because thats what they are for[23:29:30] <cite> I can give you an overview of how things work together without showing a single line of code or a single line in a config file.[23:29:50] <cite> Most tutorials don't do that. They point out which files to edit and which values to write in them.[23:31:13] <cite> When I began blogging three years ago, I was really tempted to blog some "tutorials", taking my configurations (at that point in time) as a basis.[23:31:14] <jzaboo> lol: Cyrus SASL searches for the configuration file in /usr/local/lib/sasl/ (Cyrus SASL version 1.5.5) or /usr/local/lib/sasl2/ (Cyrus SASL version 2.1.x).[23:31:14] <jzaboo> Note: some Postfix distributions are modified and look for the smtpd.conf file in /etc/postfix/sasl.[23:31:14] <jzaboo> Note: some Cyrus SASL distributions look for the smtpd.conf file in /etc/sasl2.[23:31:23] <cite> Nowadays I'm glad I didn't do that.[23:31:36] <jzaboo> some here some there... now where the hell has this file to be?[23:32:03] <jzaboo> mb that's why it doesn't work[23:32:35] <jzaboo> I don't wanna flood my system with symlinks[23:32:40] <cite> jzaboo: You are using saslauthd, right?[23:33:04] <jzaboo> yes[23:33:25] <jzaboo> wait ill post my smtpd.conf[23:33:26] <cite> So, why don't you try to get it working with a PAM backend, i.e. authenticate against system users, for a start?[23:34:01] <cite> Ahm whatever. Good night, everyone.[23:34:07] <gebi> n8[23:34:10] <jzaboo> gn8[23:34:55] <rob0> cite, friends don't let friends use uw-imapd :)[23:35:45] *** makerc has quit IRC[23:39:50] *** s0ber has joined #postfix[23:41:00] *** war9407 has quit IRC[23:41:57] *** arnee has joined #postfix[23:42:02] *** hark has quit IRC[23:43:08] *** hark has joined #postfix[23:44:11] *** arnee has quit IRC[23:46:32] *** hever has quit IRC[23:46:57] <gebi> rob0: remote management features included *g*[23:48:04] *** anv_ has quit IRC[23:52:13] *** bronb has joined #postfix[23:55:34] *** bronb_ has quit IRC[23:57:34] *** technoid_ has joined #postfix[23:58:43] *** jzaboo has quit IRC