August 15, 2009 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
August 15, 2009 [00:00:06] *** Pinchiukas has left #postfix[00:01:13] <tjado> pickcoder: i would try the clustering with nfs[00:01:27] <rob0> NFS! On the MOON![00:01:44] <rob0> wow ... I feel so light ...[00:02:11] <rob0> I think I can see standon down there scowling at me![00:02:30] <pickcoder> tjado: and when three instances of Postfix try to write to the same file?[00:02:44] <pickcoder> that's a real FIFO setup there....[00:03:14] <rob0> why would we all be writing to one file?[00:03:31] <pickcoder> they're all updating the same queue info?[00:03:37] <rob0> Each instance should have its own, non-NFS, queue_directory.[00:03:49] <pickcoder> so what's the point of the NFS then[00:04:00] <pickcoder> meh.. I gotta get ready to go home[00:04:08] <pickcoder> 4-hour drive tonight[00:04:09] <rob0> user maildirs maybe? I dunno? I just walked in on this.[00:04:17] <rob0> where going?[00:04:30] <pickcoder> taking a shuttle to the moon[00:04:31] <pickcoder> :)[00:04:42] <rob0> only 4 hours?!?[00:05:08] <rob0> damn, it would take me longer than that to get to Cape Canaveral.[00:05:14] <pickcoder> goin to visit family for another B-day party for the girls[00:05:43] <rob0> And you know how it is, they NEVER have that damn shuttle ready to go when you get there. Hurry up and wait![00:05:44] <pickcoder> I drive fast...[00:07:14] <pickcoder> I'm out.[00:07:19] *** pickcoder has quit IRC[00:07:33] *** AbsoluteBeginner has quit IRC[00:23:49] *** cilly has joined #postfix[00:24:26] *** brancaleone has joined #postfix[00:29:45] *** plundra has quit IRC[00:30:16] *** plundra has joined #postfix[00:38:46] *** cilly has quit IRC[00:40:37] *** seekwill has quit IRC[01:01:52] *** ITSME3 has joined #postfix[01:02:23] <ITSME3> hi all, can anyone tell me how i set mynetworks to all/any ip?[01:02:43] <ITSME3> i tried some obvious stuff and can't seem to find in the manual[01:06:33] *** Zblakany has quit IRC[01:06:50] <rob0> omg, that is just so insanely wrong, no, I will not help you do that at all.[01:08:59] <ITSME3> meh, well i just tried setting it back to how i had it with a whole bunch of subnets (which i need to add more of, hence the question), but now the server is rejecting any emails being sent :s[01:10:05] <goldie> hi[01:10:17] <ITSME3> hello[01:10:33] *** ctineo has quit IRC[01:10:37] <goldie> I'd like to execute a script whenever an email is bounced or sent successfully by smtp[01:10:54] <goldie> Is there a way for doing this other than monitoring the logs?[01:13:16] <rob0> bounced OR sent successfully ... yikes, that could be a lot[01:13:22] <goldie> I want to feed this script with email queue id and a status message (e.g. "Host not found", "Server said: No such user")[01:13:41] <rob0> No, I don't know of any kind of internal hook to do that.[01:13:52] <goldie> rob0: but by smtp only, not local delivery[01:15:10] <goldie> rob0: so I'd have to replace/wrap smtp service somehow?[01:15:11] *** pingouin has quit IRC[01:15:17] <rob0> yeah, well, MAYBE you could make a wrapper around smtp ... or some kind of pipe(8) transport that ends up calling smtp(8)[01:18:14] <goldie> but how exactly interaction with smtp(8) looks like? is there any documentation on the subject?[01:22:11] <rob0> No, it's deliberately not documented. You'd have to dig in the code.[01:22:38] <rob0> another thought which might actually help ...[01:23:02] <rob0> ... multiple instances?[01:27:51] <goldie> hm[01:28:20] <goldie> my imagination isn't working good enough that late[01:28:23] <goldie> how?[01:30:14] *** war9407 has quit IRC[01:38:53] *** webtango has quit IRC[01:41:52] *** medic33 has joined #postfix[01:44:35] <rob0> sorry, got sidetracked with issues here[01:44:38] <rob0> bbiab[01:51:33] *** kim0 has quit IRC[01:53:52] *** Muhis has quit IRC[02:02:56] *** pingouin has joined #postfix[02:10:17] *** micols has joined #postfix[02:18:10] *** higuita has quit IRC[02:27:22] *** higuita has joined #postfix[02:34:19] *** higuita has quit IRC[02:34:47] *** higuita has joined #postfix[02:47:23] *** hever has quit IRC[03:01:29] *** pickcoder has joined #postfix[03:02:41] *** pickcoder has quit IRC[03:03:29] *** pickcoder has joined #postfix[03:06:27] <pickcoder> This web app is tough to use with an iPhone[03:07:35] <lunaphyte> i use a lite-brite[03:08:29] <pickcoder> Heh[03:11:15] <Dominian> I use an etch-a-sketch[03:11:35] <pickcoder> We're still on the road and figured I test the webchat[03:11:59] <lunaphyte> road to where?[03:12:12] <Dominian> hell if he doesn't change his ways[03:12:28] <lunaphyte> i thought maybe nowhere, ozzy style.[03:12:35] <pickcoder> The road to freedom?[03:14:21] <pickcoder> bbiab[03:17:00] *** thunderballs has joined #postfix[03:17:22] *** pickcoder has quit IRC[03:17:37] <thunderballs> hmm, an official irc webchat. this must be relatively new.[03:17:53] <thunderballs> err, official freenode.[03:20:24] <thunderballs> this channel sucks. no one is talking.[03:20:36] *** thunderballs has quit IRC[03:29:43] *** pickcoder has joined #postfix[03:29:48] *** clockspider has joined #postfix[03:32:55] *** ramoni has joined #postfix[03:33:50] <pickcoder> so is fuzzy OCR worth implementing?[03:35:23] <Skaag> yes[03:36:36] *** pickcoder has quit IRC[03:38:13] *** pickcoder has joined #postfix[03:38:14] <lunaphyte> from my perspective, no.[03:38:38] <lunaphyte> from my perspective, no.[03:39:17] <pickcoder> Oops. I keep hitting the back button on safari.[03:39:20] <lunaphyte> i spent a bit of time mucking around with it, and with so much stuff that had to be installed along with it, it just didn't seems worth it to me.[03:40:28] <lunaphyte> that being said, i did file it in the back of my head as something to check back in on down the road a bit.[03:40:45] <pickcoder> Well most of the spam that makes it through is image spam[03:42:25] <lunaphyte> i did notice that lately there's been somewhat of a rise in that, yeah, but my amavis/sa setup right now is pushing 99.9% accuracy, so i didn't feel like the investment was just yet worth it, for me anyway.[03:42:40] <pickcoder> If it doesn't do a bad job at picking out the obvious stuff then I may play around with it.[03:43:16] <lunaphyte> every setup and mail stream is different, so you might find a better fit for it, yeah.[03:47:07] <pickcoder> The biggest source has been directbuy related and the sender and host are rarely the same[03:48:19] *** beawesomeinstead has quit IRC[03:48:58] *** beawesomeinstead has joined #postfix[03:50:14] *** GoGi has quit IRC[04:10:08] *** master_of_master has quit IRC[04:12:03] <pickcoder> bbl[04:12:25] *** pickcoder has left #postfix[04:13:11] *** master_of_master has joined #postfix[04:16:54] *** _infidel has quit IRC[04:16:54] *** Sieg_ has quit IRC[04:17:30] *** _infidel has joined #postfix[04:17:50] *** Sieg has joined #postfix[04:20:24] <eyecue> moin[04:20:48] *** pingouin has quit IRC[04:33:16] *** Vince42 has quit IRC[04:33:47] *** Vince42 has joined #postfix[04:39:42] *** plndra has joined #postfix[04:50:00] *** plundra has quit IRC[04:56:24] *** gebi_ has joined #postfix[05:00:53] *** pickcoder has joined #postfix[05:06:52] *** ramoni_ has joined #postfix[05:06:53] *** ramoni has quit IRC[05:06:56] *** pingouin has joined #postfix[05:09:23] *** gebi has quit IRC[05:10:44] *** p3rror has quit IRC[05:14:49] *** pickcoder has quit IRC[05:17:03] *** ramoni_ has quit IRC[05:17:17] *** ramoni has joined #postfix[05:28:22] *** digitalmortician has quit IRC[05:30:45] *** Vince42 has quit IRC[05:31:10] *** Vince42 has joined #postfix[05:34:32] *** eyecue has quit IRC[05:36:51] *** eyecue has joined #postfix[05:47:02] *** _xous has quit IRC[06:03:49] *** githogori_ has joined #postfix[06:06:14] *** clockspider_ has joined #postfix[06:13:00] *** clockspider has quit IRC[06:22:28] *** medic33 has quit IRC[06:27:54] *** magyar has quit IRC[06:30:38] *** xous has joined #postfix[06:31:06] *** magyar has joined #postfix[06:47:04] *** eyecue has quit IRC[06:47:32] *** p3rror has joined #postfix[07:09:05] *** Motoko-chan has joined #postfix[07:11:15] *** mezgani has joined #postfix[07:11:18] *** p3rror has quit IRC[07:25:45] *** loddafnir has joined #postfix[07:26:43] *** digitalmortician has joined #postfix[07:52:43] *** koobs has joined #postfix[08:24:39] *** Internat-afk has quit IRC[08:30:28] *** internat has joined #postfix[08:36:58] *** tibyke has joined #postfix[08:40:40] *** _xous has joined #postfix[08:48:58] *** Zblakany has joined #postfix[08:51:11] *** xous has quit IRC[08:52:43] *** _xous has quit IRC[08:58:16] *** alys has joined #postfix[09:00:38] *** xous has joined #postfix[09:03:01] *** alys has quit IRC[09:16:18] *** denis has joined #postfix[09:46:45] *** burnersk has joined #postfix[09:47:23] *** madrescher has joined #postfix[09:58:13] *** war9407 has joined #postfix[10:01:16] *** gebi_ is now known as gebi[10:18:34] *** mezgani has quit IRC[10:24:35] *** Motoko-chan has quit IRC[10:27:22] *** rcsu has joined #postfix[10:35:31] *** burnersk has quit IRC[10:44:59] *** hever has joined #postfix[10:45:00] *** sypher has joined #postfix[10:45:04] <sypher> hello[10:45:27] <sypher> i'd like to clean my deferred queue. How to do it? Can i just stop postfix, delete all files in the defer folder, and restart it ?[10:47:16] <koobs> sypher; man postsuper[10:47:23] <koobs> http://www.postfix.org/postsuper.1.html[10:47:23] <sypher> koobs, solved thanks[10:47:33] <koobs> welcome[10:47:36] <sypher> at the same moment that you told me that :P[10:47:42] <koobs> :][10:47:43] <sypher> postsuper -d ALL deferred[10:47:45] <sypher> :P[10:48:02] *** jtrm has joined #postfix[11:09:05] <koobs> win![11:10:07] <tjado> koobs: hi :D[11:10:20] <koobs> oh, my, god.[11:10:23] <koobs> :][11:10:38] <tjado> koobs: bah i have some troubles with my fucking postfix[11:11:52] <koobs> now now, watch your langauge :)[11:12:14] <tjado> i bet 10$ you cant help me ;)[11:12:20] <koobs> ill bet you youre right[11:12:24] <tjado> :([11:12:29] <koobs> wont stop me from trying, whats the problem[11:13:18] <tjado> Aug 15 11:08:34 klio postfix/pipe[96636]: fatal: get_service_attr: unknown group: vmail[11:13:20] <sypher> is there a way to tell postfix which ip to use in sending email ?[11:13:50] <tjado> koobs: dont come with the lazy thing to add the group... the group exist[11:13:54] <tjado> :)[11:14:08] <koobs> is potfix a member of the group ?[11:14:12] <tjado> koobs: yep[11:14:36] <koobs> pw user show postfix[11:14:54] <tjado> postfix:*:125:125::0:0:Postfix Mail System:/var/spool/postfix:/usr/sbin/nologin[11:15:01] <koobs> pw group show vmail[11:15:24] <tjado> vmail:*:150:vmail,postfix[11:15:34] <koobs> recent freebsd upgrade?[11:15:46] <tjado> 7.2 with postfix-current[11:15:50] <tjado> upgraded few mins ago[11:15:54] <koobs> did you recently upgrade freebsd ?[11:15:56] <tjado> but o had the problem with the old postfix too[11:16:00] <koobs> or recently upgrade postfix, or both ?[11:16:02] <tjado> no[11:16:06] <tjado> i upgraded because of that problem[11:16:12] <tjado> no bsd update[11:16:19] <koobs> cool[11:17:26] <koobs> http://www.nabble.com/Postfix-get_service_attr,-dovecot,-mysql,-OS-X-td23207372.html[11:17:27] <koobs> seen that ?[11:18:12] <tjado> yep[11:18:39] <tjado> how i could check the access to pw db?[11:19:29] <koobs> i think that mean passwd[11:19:37] <koobs> pw usershow vamil ?[11:19:45] <koobs> vmail[11:20:15] <koobs> add postfix to dovecot's group, see if it makes any difference[11:20:21] <koobs> whos doing the auth ?[11:21:57] <koobs> paste your dovecot config from master.cf[11:22:50] <tjado> koobs: http://pastebin.com/d2c4c7557 http://pastebin.com/d41cff6f2[11:23:03] <ITSME3> can someone help me figure out why postfix is rejecting all emails i'm trying to send please?[11:23:44] <koobs> tjado; tried making postfix a member of dovecots group ?[11:23:53] <koobs> whats the permissions of the dovecot socket file ?[11:23:58] <tjado> i already did[11:24:30] <tjado> koobs: which one?[11:24:46] <koobs> brb[11:24:50] <tjado> srw------- 1 vmail 6 0 Aug 15 10:58 /var/run/dovecot/auth-master[11:26:02] <koobs> dovecot config ?[11:27:29] <tjado> koobs: http://pastebin.com/d5f0b5bf1[11:27:49] <koobs> ./mail/logs?[11:27:50] <koobs> heh[11:28:02] <koobs> fur die mailboxen![11:28:21] <koobs> hmm socket listen group for auth_master[11:28:24] <koobs> sure thats correct ?[11:28:51] <koobs> http://wiki.dovecot.org/LDA[11:29:11] <koobs> group for each of those sockets might want to be postfix.[11:29:35] <koobs> brb[11:29:42] <Zerberus> !tell sypher smtp_bind_address[11:30:24] <sypher> Zerberus, wont that destroy incoming mail if its set to another ip ?[11:30:44] <sypher> Zerberus, got a box with 2 ips, both should be able to receive but outgoing should be only from the one i decide.[11:30:44] <tjado> koobs: doenst helped, the its correct[11:30:47] <Zerberus> sypher: smtp != smtpd[11:33:09] <sypher> Zerberus, uh. that highlight made my mac crash. finder aint workin anymore. >_> brb.[11:33:18] <tjado> koobs: i tried it also with the mail group[11:33:24] <koobs> :|[11:34:12] <tjado> koobs: i have the same config on an other server only other path[11:34:16] <tjado> i will copy now the config[11:34:23] <tjado> and use the "normal" paths[11:34:39] *** brancaleone has quit IRC[11:35:03] *** brancaleone has joined #postfix[11:37:45] *** sypher has quit IRC[11:50:59] *** githogori_ has quit IRC[11:52:24] *** kale has left #postfix[11:52:58] *** stephan48 has joined #postfix[11:53:12] *** sypher has joined #postfix[11:53:40] *** Gerdesas has quit IRC[11:53:44] *** Gerdesas___ has joined #postfix[11:54:29] *** Gerdesas___ is now known as Gerdesas[11:54:37] *** denis has quit IRC[11:57:25] *** GoGi has joined #postfix[12:02:17] *** Hyperi has quit IRC[12:02:52] *** plee_ has joined #postfix[12:03:06] *** Hyperi has joined #postfix[12:08:27] *** alys has joined #postfix[12:15:04] *** kukac has joined #postfix[12:16:12] *** alys has quit IRC[12:19:59] *** plee has quit IRC[12:23:24] *** TeraHertz has joined #postfix[12:23:29] *** J13R has joined #postfix[12:24:13] *** Zathras has joined #postfix[12:24:18] <J13R> Hello mail server admins. You can help me by reading http://marc.info/?l=postfix-users&m=125033153014044&w=2[12:25:50] <kukac> hi, I read the documentation, but found nothing about this issue: I would like to check senders to allow only local senders to send messages outside. I would like to feed getmail fetched messages to postfix the way i does not send back the neswgroup, maillist messages to outside. Could someone help me?[12:26:22] <kukac> s/i does/it does[12:27:18] *** jtrm has quit IRC[12:28:04] *** Muhis has joined #Postfix[12:33:55] <Zerberus> kukac: why should a getmail received mail go back to a mailinglist?[12:34:57] <kukac> zerberus: it seems i was not clear: I would like to prohibite them to go back with error messages "unkown recipient"[12:35:17] <Zerberus> kukac: then configure getmail properly[12:35:36] <Zerberus> kukac: I know fetchmail can be configured that way[12:36:12] <kukac> zerberus: thanks, I will try[12:38:37] *** kukac has quit IRC[12:43:31] *** denis_ has joined #postfix[12:58:51] *** aglet has joined #postfix[12:58:51] *** SkyLeach has joined #postfix[12:59:16] *** madrescher has quit IRC[12:59:22] *** burnersk has joined #postfix[13:00:14] *** iasmina has joined #postfix[13:01:20] *** spectre has quit IRC[13:15:08] *** nuonguy has quit IRC[13:56:12] *** Skaag_ has joined #postfix[13:59:31] *** al_ has joined #postfix[14:00:40] *** jwit_ has joined #postfix[14:01:06] *** blake__ has joined #postfix[14:01:42] *** Vog has quit IRC[14:01:42] *** Guest10327 has quit IRC[14:01:42] *** jwit has quit IRC[14:01:43] *** Zygo has quit IRC[14:01:43] *** amrit|wfh has quit IRC[14:01:43] *** lkthomas has quit IRC[14:01:43] *** poli_ has quit IRC[14:01:43] *** Radiance has quit IRC[14:01:43] *** blake has quit IRC[14:01:43] *** hark has quit IRC[14:01:43] *** chesty has quit IRC[14:01:43] *** Kreg-Work has quit IRC[14:01:43] *** al has quit IRC[14:01:43] *** anders_l has quit IRC[14:01:43] *** lkthomas has joined #postfix[14:01:48] *** Radiance has joined #postfix[14:02:49] *** amrit has joined #postfix[14:02:55] *** hark has joined #postfix[14:03:04] *** poli has joined #postfix[14:03:20] *** anders_l has joined #postfix[14:04:51] *** Skaag_ has joined #postfix[14:05:59] *** Zygo has joined #postfix[14:06:42] *** Vog has joined #postfix[14:07:05] *** chesty has joined #postfix[14:10:49] <Zathras> hi. I have SASL/PostFix/Cyrus issues. For instance I can not succesfully telnet port 25. Postfix does not reply as it should. In logs I see: fatal: SASL per-process initialization failed[14:11:19] <Zathras> and it seems PostFix respawns on a regular basis. How can I debug this please?[14:11:48] <Zathras> warning: /usr/lib/postfix/smtpd: bad command startup[14:12:26] <Zathras> I am on Debian Lenny[14:13:30] *** Skaag_ has joined #postfix[14:13:47] <Zathras> postfix check does not give any errors[14:13:48] *** brancaleone has quit IRC[14:14:24] *** Guest10327 has joined #postfix[14:14:56] *** Kreg-Work has joined #postfix[14:16:56] *** tjikkun has quit IRC[14:18:20] *** Skaag has quit IRC[14:21:00] *** GoGi has quit IRC[14:22:10] *** Skaag has joined #postfix[14:24:09] *** GoGi has joined #postfix[14:30:49] *** Skaag has joined #postfix[14:32:18] *** jense has joined #postfix[14:32:58] *** cilly has joined #postfix[14:36:54] *** J13R has quit IRC[14:37:02] *** spectre has joined #postfix[14:37:14] *** al_ is now known as al[14:39:27] *** Skaag has joined #postfix[14:54:27] *** Zblakany has quit IRC[14:55:01] *** F6F has joined #postfix[14:55:14] *** sfergut has joined #postfix[14:56:31] <sfergut> if i set mynetworks to be the server internet ip .. am i open relay ?[14:56:52] *** Skaag has joined #postfix[14:57:37] <sfergut> usually it is 127.0.0.1/32 .. but if i set 127.0.0.1/32, serverip/32 is ok ?[15:03:09] <rob0> !basic[15:03:10] <knoba> rob0: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[15:03:14] <rob0> !mynetworks[15:03:15] <knoba> rob0: "mynetworks" : a configuration parameter in the main.cf: The list of "trusted" SMTP clients that can relay email.[15:05:17] <sfergut> knoba, i read it but still i cant understand "he default is to authorize all clients in the IP subnetworks that the local machine is attached to. "[15:05:27] <sfergut> i want to know if is ok to put that or not[15:05:46] <sfergut> i want only mailman and authentication clients to use the mail server[15:06:17] <sfergut> for relay[15:06:24] <rob0> Then set mynetworks to what you need.[15:06:45] *** Skaag has joined #postfix[15:10:39] <sfergut> rob0, so i wont be open relay if i set to all the ip`s i got on eth0 ? .. there is only one interface and is connected to the internet directly[15:13:11] *** F6F has quit IRC[15:15:24] *** Skaag has joined #postfix[15:24:03] *** Skaag has joined #postfix[15:32:50] *** eye69_ has joined #postfix[15:32:51] *** Skaag has joined #postfix[15:35:00] *** eye69 has quit IRC[15:42:44] *** Skaag has joined #postfix[15:43:13] *** digitalmortician has quit IRC[15:43:41] *** digitalmortician has joined #postfix[15:46:52] *** cilly has quit IRC[15:51:23] *** Skaag has joined #postfix[15:51:35] *** beawesomeinstead has quit IRC[16:00:02] *** Skaag has joined #postfix[16:04:02] *** LinuxCode has joined #postfix[16:18:19] *** digitalmortician has quit IRC[16:20:43] *** digitalmortician has joined #postfix[16:23:26] *** beawesomeinstead has joined #postfix[16:41:01] *** digitalmortician has quit IRC[16:41:22] *** digitalmortician has joined #postfix[16:41:38] *** sfergut has left #postfix[16:43:22] *** p3rror has joined #postfix[16:44:25] *** usman has joined #postfix[16:44:32] <usman> hi everyone[16:45:19] <usman> how can i make a blacklist of users which mails explicit contents[16:46:02] <lunaphyte> which mails explicit contents? i don't get that part.[16:47:41] <usman> i mean e.g. i have three users in office user1 , user2 , user3 (all @office.net) and i want to block these users[16:48:08] <lunaphyte> !sasl[16:48:09] <knoba> lunaphyte: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.[16:50:16] <usman> hmm any idea[16:51:02] <lunaphyte> yup, that'd be what you probably want.[16:52:04] <usman> you mean sasl[16:52:17] <lunaphyte> right[16:53:22] <usman> ok[16:53:27] <usman> ; )[16:53:43] <Zathras> I have some issues with sasl, even when not chrooted. Also issues with telnet 25 as postfix seems to respawn. Also: /usr/lib/postfix/smtpd: bad command startup. Any thought on this please?[16:54:00] <lunaphyte> !tell Zathras welcome[16:54:29] <rob0> !debug[16:54:30] <knoba> rob0: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ .[16:54:32] <usman> does postfix support some kind of blaclist file[16:54:39] <usman> *blacklist[16:54:51] <rob0> There's a warning or fatal before that "bad command startup".[16:55:00] <rob0> !access[16:55:01] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server.[16:55:19] <rob0> !restriction_class[16:55:19] <knoba> rob0: "restriction_class" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html[16:55:36] <Zathras> true: fatal: SASL per-process initialization failed[16:56:47] <rob0> Zathras, I don't know, that's probably a Cyrus SASL misconfig. See Patrick Ben Koetter's pages for help.[16:57:01] <rob0> afk[16:57:40] <Zathras> I think so too. I have spend days on this but I fail to see what the issue is. I followed a howto which worked fine on Debian Etch but not on Debian Lenny[16:58:59] <Zathras> I used http://linuxsilo.net/articles/postfix-mysql.html which is an improved version of http://openmailadmin.ossdl.de/wiki/howto/Postfix-SASL-Cyrus-MySQL-Amavis-Postgrey-SpamAssassin-ClamAV-Squirrelmail-Mailman-Mailgraph-OMA[16:59:17] <Zathras> the later being in English[17:02:07] <Zathras> but, regardless of cyrus SASL, postfix respawning is not a good thing. Telneting to port 25 hangs the telnet session for probably that reason[17:02:12] <lunaphyte> !tell Zathras error report[17:03:44] *** p3rror has quit IRC[17:03:44] <Zathras> http://pastebin.ca/1530551[17:04:21] <Zathras> nothing to exotic I presume. Postfix does not complain about config errors[17:05:13] *** p3rror has joined #postfix[17:06:23] *** plee_ is now known as plee[17:07:54] <Zathras> the relevant log part I provided earlier[17:09:31] <lunaphyte> provide a larger snippit, showing some context.[17:09:41] <lunaphyte> as well:[17:09:51] <lunaphyte> !tell Zathras dovecot[17:11:34] <Zathras> lunaphyte, what part do you want: output was from postconf -n[17:11:52] <lunaphyte> i meant a larger log snippit[17:12:02] <Zathras> oki[17:14:35] *** gerhard7 has joined #postfix[17:16:18] <Zathras> http://pastebin.ca/1530557[17:16:28] <Zathras> see bottom of it please[17:17:34] <Zathras> does dovecot gather for vritual domains?[17:17:39] *** cloxie has joined #postfix[17:20:16] <Zathras> I see it seems to do so[17:21:27] <standon> Zathras: define 'gather' in the context you're using it.[17:22:37] <cloxie> in this header, Received: from example.net (mail.example.net [x.x.x.x]) does every thing look "correct" or should the first example.net be prefixed by mail. also[17:23:50] <cloxie> any best guesses welcome[17:24:10] <cloxie> i am getting emails rejected from yahoo for no reason that i can see and wondering if this is why[17:24:11] <standon> cloxie: the first 'example.net' is what the sending machine ussed in EHLO.[17:24:23] <standon> s/ussed/used/[17:24:26] <lunaphyte> Zathras: if you're not using cyrus for imap, i'd strongly encourage you to check out dovecot for sasl.[17:24:59] <standon> cloxie: it's generally good practice to EHLO/HELO with the same hostname as your client machine, but that's not mandated by any RFCs.[17:26:46] <cloxie> standon and to confirm, if both of those did match, at another point MAIL FROM:<bob at unrelatedomain dot net> is valid?[17:28:21] <Zathras> lunaphyte, I plan to use cyrus for imap. I need a mailserver @home to be a sync-able backup mailserver for various externely hosted domains. So I need to be able to handle localmail/localdomain as well as handle remote mail as well as having live backups of external imap servers. Using OpenMailAdmin on top of SASL/MySQL/PostFix/Cyrus and syncing through "imapsync" served me well in the past[17:29:15] <Zathras> but I do not mind switching to something else if the learning curve is not to steep and it will serve my needs[17:30:21] <Zathras> it dovecot is easily managed and does what I need I do not mind switching[17:30:59] <standon> cloxie: i don't even understand your question.[17:31:23] <standon> cloxie: the HELO and hostname of the smtp client have nothing to do with the MAIL FROM:<foo at bar dot org>.[17:31:51] <standon> Zathras: to learn whether dovecot is 'easy' for you and meets your needs, go to the dovecot web site and ask for help in the #dovecot channel.[17:33:42] <cloxie> standon that pretty much answers my cryptic question thanks[17:33:54] *** usman has quit IRC[17:36:48] <Zathras> euhm. Dovecot does not seem to have a GUI. Not much advantage in moving away from cyrus then as I am not on a production system so the claimed security advantage is not an issue[17:37:11] <standon> cloxie: erhm.. ok.[17:37:34] <standon> Zathras: gui?![17:37:37] <Zathras> lunaphyte, found anything in my logs?[17:37:46] <standon> Zathras: you don't administer your boxes using the command line?[17:38:16] <Zathras> normally I do, but not in complex situations please. That's why I like OMA[17:38:46] <Zathras> also, that way others can admin mailboxes too without braking too much[17:39:06] <Zathras> *breaking[17:40:18] <standon> um, whatever.[17:40:19] * standon -> afk[17:45:31] <lunaphyte> i'd recommend dovecot for imap as well then.[17:46:00] *** usman has joined #postfix[17:46:07] <lunaphyte> my guess is that you'll find the learning curve for cyrus steeper than for dovecot.[17:46:26] <Zathras> except that I am familiar with cyrus ;-)[17:46:41] <Zathras> but I can give it a try[17:47:23] <Zathras> but will that not only solve (if it does) part of the puzzle. I still have a fubar postfix install[17:47:37] <lunaphyte> well, if you're tripping over sasl, i can't imagine you're that familiar.[17:47:51] <lunaphyte> that's what i'm referring to dovecot sasl[17:47:58] <lunaphyte> oops, missed a comma.[17:48:23] <Zathras> one can run cyrus fine without sasl[18:02:30] <Zerberus> Zathras: not really[18:08:01] <Zathras> funny, been doing so for over 10 years[18:08:32] <Zerberus> Zathras: and how do users auth for pop3/imap access to their mailboxes?[18:09:52] <Zathras> they are system users, saslauthd is installed on Debian is turned off by default[18:09:59] <Zathras> *if[18:10:12] <lunaphyte> sasl != saslauthd[18:10:47] <Zathras> you create users in cyradm by hand[18:11:05] <Zathras> it has it's own user db[18:11:19] <Zathras> but you can of course use other backends if you want[18:11:22] <lunaphyte> sasl is used to consult that db.[18:11:49] <Zathras> can be, but you do not have to add users to the sasldb by hand for instance[18:12:20] <lunaphyte> not can be - *is*.[18:12:28] <Zerberus> Zathras: you don't understand that cyrus-imapd uses cyrus-sasl, anyway how you set up your user backend[18:12:37] <lunaphyte> but anyway, this is all missing my original point to begin with.[18:13:40] <Zathras> lunaphyte, is there anything abnormal in my logs please?[18:14:00] <lunaphyte> i've given the best help i can give. it's not about your logs.[18:17:59] *** muh2000 has quit IRC[18:18:26] <Zathras> hmm. I see a suggestion in changing imap server, and from someone else to check a website by an author oon a book on postfix/sasl. And a discussion on me not understanding all kinds of stuff. But I fail to see on how I can commence on my current setup which is used by more people than just me. If Cyrus was that bad and caused all kinds of trouble it would not been a live project I guess. Am I missing something please?[18:18:28] *** beawesomeinstead has quit IRC[18:18:41] *** muh2000 has joined #postfix[18:18:46] <lunaphyte> i'll try to clarify.[18:18:58] <Zathras> sasl is hard to debug as also claimed by that author also because of limied tools[18:20:04] <lunaphyte> i suggest you switch from cyrus sasl to dovecot sasl. it's likely that it will greatly reduce the struggle you're having. additionally, if you switch to dovecot sasl, also switching to dovecot imap will probably bring additional relief.[18:20:14] <lunaphyte> i don't think i can make it any clearer than that.[18:20:16] <Zerberus> Zathras: did you use saslfinger by Patrick?[18:20:20] <Zathras> yes[18:20:34] <Zerberus> and?[18:20:42] <Zathras> one mo. Will paste[18:25:23] <Zathras> lunaphyte, I think I have 2 problems here.: 1. sasl-auth 2. postfix which respawns and gives that smtpd error[18:26:07] <Zathras> if I switch to dovecot I think I will still have those postfix issues as that probably results from erroneous config files of postfix[18:26:27] <Zathras> Zerberus, http://pastebin.ca/1530607[18:26:46] <Zathras> on the subject of saslfinger -c : TLS is not enabled yet. That's true[18:26:53] <Zathras> but that is not a must is it?[18:27:14] <Zathras> the smtp-auth part is what makes me wonder if the config is wrong at that point[18:27:53] <Zerberus> Zathras: kick "auxprop_plugin:" out of your smtpd.conf[18:29:47] <Zathras> does not help. :-([18:31:03] <Zerberus> Zathras: look at lines 125 and 166 at pastebin[18:31:57] <Zathras> ahhh[18:32:18] <Zerberus> Zathras: running postfix chrooted means you have to care for proper chroot setup of sasl[18:34:10] <Zathras> yes, that's why I started with debuging to take it out of chroot env[18:34:24] <Zathras> I overlooked however the double definition[18:35:37] <Zathras> it seems that resolved the smtpd error[18:35:44] <Zathras> remains the SASL stuff[18:36:33] *** beawesomeinstead has joined #postfix[18:37:20] <Zathras> running a test auth on cyradm result now in much smaller log files: http://pastebin.ca/1530621[18:37:27] <Zathras> mail and auth log files are those[18:37:38] <Zathras> thanks for spotting that one Zerberus[18:38:35] <Zerberus> Zathras: your saslauthd is configured for the postfix chroot[18:39:24] <Zathras> yes, changed it back. Same errors though[18:39:47] <Zathras> smtpd now runs in chroot again[18:40:02] <Zerberus> does testsaslauthd work ok?[18:41:54] <Zathras> what should I try there for params please? testsaslauthd -s imap -u cyrus -p does not work[18:42:28] *** hever has quit IRC[18:42:28] <Zerberus> Zathras: you have to use parameter -f as well[18:43:28] <Zathras> should that be /var/spool/postfix/var/run/saslauthd ?[18:43:39] <lunaphyte> what os are you using?[18:43:44] <Zathras> Debian Lenny[18:43:46] *** spectre has quit IRC[18:44:21] <Zathras> latest stable Debianb release 2.6.26 kernel postfix 2.5.5[18:44:29] <lunaphyte> what's in /etc/defaults/sasl...[18:45:01] *** usman has quit IRC[18:45:59] <Zathras> MECH_OPTIONS="", THREADS=5 , MECHANISMS="pam" OPTIONS="-c -r -m /var/spool/postfix/var/run/saslauthd"[18:46:38] <lunaphyte> does the socket get created? does testsaslauthd work?[18:46:51] <lunaphyte> is that where users should be found? pam?[18:47:00] <Zathras> pam --> mysql[18:47:19] <lunaphyte> any particular reason you're funneling access to mysql through pam?[18:47:45] <Zerberus> Zathras: but your pastebin shows you are trying to auth without a realm[18:48:52] <Zathras> users should be in a db called postfix. Currently there are no users. Just the mysqluser "postfix" with full rights on db postfix. In PAM there is a mapping for connecting with that user. The user can access the DB so I have checked manually[18:49:13] <lunaphyte> but that's not an answer to my question.[18:49:35] <Zathras> true. Was still typing when you asked ;-)[18:49:46] <Zathras> I followed this howto: http://linuxsilo.net/articles/postfix-mysql.html[18:50:04] <Zathras> done that several times but always on older Debian systems[18:50:13] <Zathras> it was written for Etch and works on Etch[18:50:28] <Zathras> no idea why I run into trouble on Lenny[18:50:51] <Zathras> to answer your question: I followed the howto and the howto suggested this config[18:50:54] <Zerberus> Zathras: as you configured to use LOGIN and PLAIN you can omit pam_mysql and use sasl's auxprop with plugin sql[18:52:02] <Zerberus> Zathras: anyway, that setup saslauthd -> pam -> pam_mysql -> mysql works in general, given all parameters are setup properly[18:52:34] <Zathras> yes, I configed it on several older Debians that way.[18:53:14] <Zerberus> you first have to get saslauthd working leaving postfix and cyrus-sasl out of the way[18:53:42] <Zathras> only issue is one has to manually compile pam_mysql due to a limitation in the bin package. I have done so[18:54:04] <Zathras> ok. But how should I tackle that please? What should the -f value be?[18:54:13] <Zathras> for the testsasl command[18:54:47] <Zerberus> running saslauthd not from init script but undetached from terminal in debug mode makes it easier to see misconfiguration[18:55:20] <Zathras> done so before, but it did not give any extra info compared to the mail and aith logs[18:55:22] <Zathras> *auth[18:55:54] <Zathras> I will try tomorrow as I have to run for an appointment[18:55:57] <Zerberus> saslauthd -d -a pam -r -m /var/spool/postfix/var/run/saslauthd[18:56:00] <Zathras> thank you both for the help![18:56:31] *** cpm has joined #postfix[18:57:13] <Zathras> Zerberus, but the testsaslauthd -f ?[18:57:19] <Zathras> same path?[18:58:46] <Zerberus> Zathras: yes[18:59:07] <Zerberus> that is because saslauthd is compiled with a different mux path[19:01:38] <Zathras> I tried as services: postfix, smtp, imap, cyrus and they gave "auth failed". When using mysql as a service I got a connect() : Connection refused[19:02:24] <Zerberus> Zathras: is the socket created? does the permissions match?[19:02:52] <Zerberus> Zathras: service is imap or smtp[19:03:14] <Zathras> got mux, mux.accept, saslauthd.pid.lock[19:03:23] <Zathras> srwxrwxrwx 1 root root 0 2009-08-15 18:56 mux[19:03:31] <Zerberus> Zathras: you better start reading the documentation for cyrus-sasl shipping with your debian, somewhere under /usr/share/docs[19:03:36] <Zathras> 0 -rw------- 1 root root 0 2009-08-15 18:56 mux.accept[19:03:43] <Zathras> same for the saslauthd[19:04:06] <Zathras> ok. -4 mins I had to be on the other side of town. Thanks![19:04:24] *** Zathras has quit IRC[19:05:32] <Zerberus> it is not mux.accept counting, mux is the socket and the path permissions must match[19:07:16] *** cpm has quit IRC[19:10:49] *** burnersk has quit IRC[19:20:38] *** nuonguy has joined #postfix[19:24:29] *** Skaag has quit IRC[19:31:06] *** jwit_ is now known as jwit[19:37:24] *** paulez has joined #postfix[19:58:23] *** GoGi has quit IRC[20:18:32] *** githogori_ has joined #postfix[20:34:37] *** p3rror has quit IRC[20:37:34] *** denis_ has quit IRC[20:42:04] *** rcsu has quit IRC[20:50:31] *** pickcoder has joined #postfix[20:55:13] *** pickcoder has quit IRC[20:55:29] *** pickcoder has joined #postfix[20:56:01] *** pickcoder has quit IRC[20:56:16] *** pickcoder has joined #postfix[20:56:42] *** denis_ has joined #postfix[20:58:17] *** pickcoder has quit IRC[20:58:29] *** pickcoder has joined #postfix[21:05:32] *** lunaphyte has quit IRC[21:10:00] *** pickcoder has quit IRC[21:11:23] *** githogori_ has quit IRC[21:20:46] *** lunaphyte has joined #postfix[21:24:19] *** denis__ has joined #postfix[21:33:43] *** devdas has joined #postfix[21:36:58] *** artur has joined #postfix[21:37:00] <artur> Hi[21:37:23] <lunaphyte> hello[21:37:43] <artur> How to send mail 'direct' to queue? I want apply it to my app and i need the fastest way to send mails via postfix.[21:38:41] <lunaphyte> fastest is smtp.[21:39:10] <artur> simple connect app with smtp?[21:39:19] <lunaphyte> yes[21:39:39] <artur> unix socket or creating files in queue by hand are'nt faster?[21:39:51] <lunaphyte> it doesn't work that way.[21:40:14] <artur> mhm, thanks for answer ;-)[21:53:49] *** p3rror has joined #postfix[21:55:06] *** beawesomeinstead has quit IRC[21:57:32] *** beawesomeinstead has joined #postfix[22:01:07] *** nuonguy has quit IRC[22:01:42] <tjado> how i can debug the pipe daemon? i cant trace it or something because it will be executed immediate[22:04:48] <tjado> under which user pipe will be executed?[22:08:08] <tjado> root?[22:08:10] <tjado> postfix?[22:08:47] *** jra has joined #postfix[22:13:24] <devdas> The user you specify via user=[22:13:27] <devdas> See man 8 pipe[22:13:59] <tjado> devdas: no, i want to know under which user pipe wil be executet not the programm that is specific in pipe parameter[22:14:39] <tjado> so e.g. not deliver from dovecot, that is clear that is executed by user= parameter[22:14:51] <tjado> but the pipe executable itself[22:14:53] <tjado> ?[22:15:30] <devdas> It's invoked as master, then drop privileges and exec[22:16:40] *** artur has left #postfix[22:17:01] <tjado> okay thanks[22:17:20] <tjado> even i dont understand why postfix has problems with getgrnam[22:17:31] <tjado> in function get_service_attr[22:17:46] <tjado> if i write it myself as a c programm it works[22:18:21] <tjado> but postfix dont recognize the group that i specify over user=user:group[22:18:30] <tjado> postfix 2.7...[22:18:41] <tjado> and 2.6[22:22:09] <devdas> chroot issues?[22:22:18] <tjado> no chroot[22:22:38] <tjado> the same config works on a other machine[22:30:56] *** hap has left #postfix[22:31:28] <devdas> strace?[22:31:31] <devdas> !debug[22:31:32] <knoba> devdas: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://rafb.net/paste/ .[22:31:46] <tjado> devdas: how? :/[22:32:04] <tjado> devdas: i must strace the process pipe, but it will be executed in seconds[22:32:06] <devdas> See the link :)[22:32:16] <tjado> kk :O[22:32:19] <tjado> :P[22:32:22] <devdas> strace -ff master works too :P[22:32:51] <tjado> i wanted to build my own pipe but i will try it first with your strace ;)[22:34:09] <cloxie> do any of the linux distros come with "truss"?[22:34:21] <tjado> i use freebsd[22:34:32] <tjado> and cant install strace because i have no i386 arch[22:34:32] <cloxie> well freebsd has truss (i use it)[22:34:38] <tjado> cloxie: ye[22:34:45] <cloxie> check out truss -fe /path/app[22:34:50] <cloxie> or there is a attach to pid arg also[22:34:56] <devdas> cloxie: Linux has strace/ltrace instead[22:35:14] <devdas> tjado: truss for you then[22:35:44] <tjado> ye i know thanks :)[22:39:21] <tjado> nothing with pipe there[22:41:19] *** neuro_damage has quit IRC[22:41:34] <tjado> do you want to thee the trace?[22:42:38] *** gerhard7 has quit IRC[22:51:16] *** lunaphyte_ has joined #postfix[22:57:17] *** lunaphyte has quit IRC[22:57:26] *** lunaphyte_ is now known as lunaphyte[23:08:10] *** nuonguy has joined #postfix[23:12:20] *** pingouin has quit IRC[23:13:45] <tjado> devdas: haha i patched it away but now i get[23:13:48] *** clockspider_ has quit IRC[23:13:50] <tjado> Fatal: setgid(6) failed with euid=150(vmail), gid=1818321775, egid=1818321775: Operation not permitted[23:14:53] <devdas> that looks bag[23:14:54] <devdas> bad[23:15:20] *** clockspider_ has joined #postfix[23:15:22] <tjado> my little c programm get the gid etc[23:15:34] <tjado> but why postfix cant do it?[23:19:38] <tjado> maybe i should write into a ML?[23:21:47] *** uqlev has joined #postfix[23:23:22] *** madrescher has joined #postfix[23:30:03] *** pingouin has joined #postfix[23:51:36] *** devdas has quit IRC