August 19, 2009 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
August 19, 2009 [00:01:00] <KB1JWQ> rob0: To los angeles?[00:01:48] *** Xzisted has joined #postfix[00:03:18] <rob0> yikes, I dread the thought, but maybe ...[00:03:26] *** Xzisted has quit IRC[00:03:28] *** LaLeche has left #postfix[00:03:39] *** Xzisted has joined #postfix[00:05:59] *** s0ber has quit IRC[00:08:17] *** tibyke has quit IRC[00:08:21] *** tibyke has joined #postfix[00:10:41] *** war9407 has quit IRC[00:15:16] *** bturnbull has quit IRC[00:16:01] *** paulez has quit IRC[00:17:11] *** Zordrak_ has quit IRC[00:17:36] *** paulez has joined #postfix[00:18:14] *** webchaos has quit IRC[00:18:30] *** ramontayag has quit IRC[00:22:14] *** TeraHertz has quit IRC[00:25:14] *** uqlev has quit IRC[00:26:34] *** hever has quit IRC[00:28:23] *** xenoterracide has joined #postfix[00:28:51] <xenoterracide> mail seems to be leaving my postfix server but not getting to it's destination. it was earlier[00:28:56] *** hever has joined #postfix[00:29:02] <seekwill> Blame the destination![00:29:16] <xenoterracide> probably[00:29:31] <cite> .o0(git push destination mail)[00:30:05] <xenoterracide> trying to see if I can figure out how to test what's going wrong[00:33:23] <seekwill> Is it just to one destination server or all?[00:38:56] *** linuxpoet has joined #postfix[00:39:11] <linuxpoet> what is the smrsh equiv for postfix?[00:43:22] <cite> I think there is no such thing. Architectures are too different, as far as I can see, Postfix doesn't even include functionality which would make a tool like smrsh necessary.[00:45:48] <KB1JWQ> What does smrsh do?[00:46:12] *** cwright has quit IRC[00:46:49] <cite> I'm not 100% sure about that. Obviously, you can define some kind of "shell" to run commands from within sendmail, and smrsh is intended to replace /bin/sh in that context.[00:47:31] <cite> KB1JWQ: Everything I know about that one is from http://www.faqs.org/docs/securing/chap22sec182.html ;-)[00:49:41] <linuxpoet> KB1JWQ: it is secure execution of external programs[00:49:51] <rob0> Wasn't smrsh the bad guys in "The Man from U*N*C*L*E"?[00:49:53] <linuxpoet> for example if you want to pipe an email via an alias through a program[00:50:30] *** sako has quit IRC[00:51:29] <cite> linuxpoet: I see. allow_mail_to_commands is what you are looking for.[00:52:10] <linuxpoet> thanks[00:52:56] <cite> Yeah, well, perhaps it isn't.[00:53:22] <cite> See for yourself, man 8 local | less +/^EXTERNAL[00:55:59] *** jense has quit IRC[00:58:09] *** pickcoder has quit IRC[01:02:51] *** Sputnikk23 has quit IRC[01:09:27] *** Zordrak_ has joined #postfix[01:11:38] *** Zblakany has quit IRC[01:12:46] *** cilly has joined #postfix[01:14:29] *** cilly has quit IRC[01:16:39] *** seekwill has left #postfix[01:19:16] *** aindilis2 has joined #postfix[01:22:25] *** mactimes has joined #postfix[01:24:56] *** Zordrak has quit IRC[01:25:33] *** s0ber has joined #postfix[01:29:26] *** Kreg-Work has quit IRC[01:29:26] *** ming_zym has joined #postfix[01:32:46] *** hever has quit IRC[01:34:57] *** foxkid has joined #postfix[01:38:25] <foxkid> What is the best way to cut off the attachament of messages in postfix? I am asking about messages that already exists in the postfix server and not new incoming messages. Any program for do it?[01:47:09] <rob0> "Exists in the postfix server", you mean in the queue? No, but postcat(1) can display messages in the queue.[01:47:49] <rob0> If you mean messages which were delivered already, Postfix is finished with them after delivery, so you're asking in the wrong place.[01:49:16] <foxkid> ty rob =)[01:49:24] <foxkid> I can use regex[01:49:27] <foxkid> for block[01:49:37] <foxkid> some extensions[01:49:49] <foxkid> in real time delivery[01:50:22] *** foxkid has quit IRC[01:50:32] *** foxkid has joined #postfix[01:51:17] <foxkid> ooops[01:52:09] *** cloxie has joined #postfix[01:52:23] *** sadf has quit IRC[01:53:07] *** ming_zym has quit IRC[02:02:47] *** LinuxCode has joined #postfix[02:11:45] *** kfo_ has joined #postfix[02:22:16] *** kfo has quit IRC[02:22:16] *** kfo_ is now known as kfo[02:24:18] *** ramoni has joined #postfix[02:25:33] *** Kreg-Work has joined #postfix[02:29:05] *** foxkid has quit IRC[02:31:37] *** Zeit|awy has joined #postfix[02:40:37] *** aindilis2 has quit IRC[02:44:29] *** Vince42 has quit IRC[02:50:12] *** antii has joined #postfix[02:50:24] <antii> how do I set correct rights on /etc/mailname?[02:51:56] *** pingouin has quit IRC[03:02:41] <rob0> !debian[03:02:42] <knoba> rob0: "debian" : Please see /usr/share/doc/postfix/README.Debian for Debian-specific information. This probably applies to Ubuntu and most other Debian-derivative distributions as well.[03:08:26] *** eyecue has joined #postfix[03:12:11] *** Zeit|awy has quit IRC[03:12:28] *** ming_zym has joined #postfix[03:25:10] *** snadge has joined #postfix[03:25:41] *** psteyn has joined #postfix[03:25:42] <snadge> how do i delete all messages in the queue from or to the address www-data at inspiration dot ebiz4u.net.au ?[03:27:05] <lunaphyte> by using a shell script that calls postsuper.[03:27:20] <snadge> im just reading that in the man page.. is that command for real?[03:27:57] <lunaphyte> as apposed to fake?[03:28:02] <lunaphyte> *opposed[03:28:16] <psteyn> Hi guys, I accidentally sent a whole lot of messages through my old sendmail server which outgoing smtp is blocked. So now I have a huge queue there, how can I forward that queue to my Postfix server and have postfix process it?[03:28:22] <snadge> hmm thats a yes[03:28:32] <lunaphyte> psteyn: no magic. just do it.[03:29:05] <psteyn> lunaphyte: how? should I change my config to make the postfix server a relay and then rerun the queue?[03:29:23] <psteyn> mails are now queued on the sendmail server but they will never go out coz port is blocked[03:30:06] <lunaphyte> so if the port is blocked... then what would make sense to do?[03:30:21] <snadge> the command fails saying it cant open the file +2[03:30:27] *** pingouin has joined #postfix[03:31:43] <psteyn> lunaphyte: port is blocked to the outside, but my other postfix server is on the inside..should I do the relay thing? or is there a way to scp the queued mails to the postfix server and restart postfix?[03:32:08] <lunaphyte> no, you cannot do that. they must communicate via smtp (or lmtp, or...)[03:33:37] <psteyn> thanks, so ill do the relay then[03:34:49] <lunaphyte> mail storage mechanisms and protocols are not standardized concepts. they are internal functions of independent products written by whoever wrote them in the way that made sense to them in the context of that product and the way it works, internally.[03:34:55] <lunaphyte> you're welcome, np.[03:35:15] <lunaphyte> err, that should say queue storage, not mail storage.[03:35:25] *** Vince42 has joined #postfix[03:36:25] *** webchaos has joined #postfix[03:37:54] *** jimmygoon has joined #postfix[03:37:59] <rob0> After adding the relayhost, see -r in "man postsuper".[03:40:07] *** eyecue has quit IRC[03:45:59] *** webchaos has quit IRC[03:47:01] <snadge> wow my mailserver really sucks :p[03:53:18] *** LinuxCode has quit IRC[03:54:24] *** master_of_master has quit IRC[03:54:49] <snadge> 4-6 seconds to process an email on average, using amavisd-new and spamassassin[03:56:02] <snadge> oh well, at least im not paying money for it :P[03:57:23] <psteyn> \q[03:57:23] <psteyn> quit[03:57:23] *** psteyn has quit IRC[03:57:55] *** master_of_master has joined #postfix[04:00:09] *** clockspider has joined #postfix[04:27:31] *** scylla has joined #postfix[04:28:16] *** jimmygoon has quit IRC[04:56:48] *** eyecue has joined #postfix[04:57:20] *** eyecue has left #postfix[04:57:24] *** eyecue has joined #postfix[04:57:46] <eyecue> Hi, im having some issues sending mail from an iPhone through our postfix server, the log of the attempt is at http://pastebin.ca/1534619[04:58:15] <eyecue> I've checked smtp restrictions, and theres o nly entries for my_networks and a pop-before-smtp hash map (and the IP is being added in there)[04:58:51] <eyecue> smtpd_client_restrictions = permit_mynetworks, hash:/usr/local/etc/postfix/pop-before-smtp[04:58:56] *** pinoyskull has joined #postfix[05:00:21] <eyecue> Any hints on where I shoul dbe looking ?[05:00:57] <kerneld> snadge: Did you do a sa-compile?[05:01:02] <kerneld> Helks some[05:01:08] *** eCLesiAst has joined #postfix[05:01:15] <kerneld> Helps rather[05:01:47] *** eCLesiAst has left #postfix[05:04:02] <rob0> IQ, something's happening on the client side or in the networking, being cut off after EHLO.[05:12:49] *** githogori_ has joined #postfix[05:14:06] <anonymous> morning[05:17:04] *** pickcoder has joined #postfix[05:26:55] *** Vince42 has quit IRC[05:31:52] *** Vince42 has joined #postfix[05:37:57] *** jtaji has joined #postfix[05:46:25] *** ramoni has quit IRC[05:48:23] *** scylla has quit IRC[05:49:50] <eyecue> rob0; no firewalls between the iphone and the mail server[05:49:58] <eyecue> rob0; interesting though, i s that warning indicative of any problem ?[05:50:07] <eyecue> such as a resitriction in place ?[05:51:33] <rob0> Nothing you can do on the Postfix side will magically prevent a client from disconnecting.[05:52:25] *** linuxpoet has left #postfix[05:52:33] <rob0> Something is happening on the client side (check the client!) or at the IP level (check the networking.)[05:53:33] <rob0> No firewalls between you and 110.20.212.44 ?[05:53:44] <rob0> no routers?[05:54:00] <lunaphyte> i've seen a few cases where after a client connects and says helo, it parses the size string, decides it's unhappy (presumably because the message is larger than will be accepted), and then disconnects, and does a poor job of informing the end user. i'm not quite sure how the iphone would fit into that scenario though.[05:54:53] <rob0> If one of your restrictions was being invoked, that fact would be logged.[05:55:33] <lunaphyte> you're using apple's mail client on the iphone?[06:01:42] <pickcoder> hmm I've never tried using my iphone to connect directly[06:02:04] * pickcoder could test[06:05:12] *** amrit|wrk is now known as amrit[06:08:54] *** magyar has quit IRC[06:09:44] *** magyar has joined #postfix[06:09:52] <pickcoder> works fine for me[06:09:55] <pickcoder> noSSL[06:12:21] <lunaphyte> i have an ipod touch and haven't ever had trouble. it uses tls/sasl, on 587[06:12:50] <eyecue> rob; unfortunately the iphone isnt very verbose :)[06:13:10] <eyecue> lunaphyte; confirming its a standard plaintext email, no attachments > 10mb, which is our size limit[06:13:17] *** magyar has quit IRC[06:13:26] <eyecue> rob; ahh thats good to about logging restrictions[06:13:33] <lunaphyte> i figured, sure. just a thought.[06:13:51] <eyecue> lunaphyte; yah, we've confirmed the iphone can infact connect over port 25 to another isp mta[06:14:07] <eyecue> and we've tried on submission and port 25 25 as well for completeness[06:14:11] <eyecue> im a little spun out.[06:14:31] <eyecue> the only thing i could think of is the pop-before-smtp thing[06:14:47] <eyecue> but ive confirmed the ip is added via the logs and the hash.db timestamp[06:15:56] <lunaphyte> i think the hypothesis of something between the iphone and server still has merit.[06:15:58] <eyecue> could it possibly be a helo_restriction, or would that failure be logged also[06:16:09] <eyecue> lunaphyte; im trying to think of ways to isolate the issue[06:16:14] <lunaphyte> yes, that would be logged.[06:16:29] <eyecue> lunaphyte; the iphone isnt connecting via wireless, its over its gprs 3g connection[06:16:29] <lunaphyte> put the iphone logically closer to the server.[06:16:34] <eyecue> hmm.[06:17:11] <eyecue> will try over wifi[06:17:19] <lunaphyte> put it on wireless, if it's not now, for the sake of comparison.[06:17:22] <eyecue> thats the closest im going to get to a US mta :][06:17:34] <lunaphyte> why?[06:17:39] <eyecue> <-- AU[06:17:54] <eyecue> so our office has no issues with all its clients to the same mta[06:18:02] <eyecue> perhaps its my_networks based[06:18:12] <eyecue> wifi will go out the same gateway as the lan clients[06:18:28] <lunaphyte> doubt it, but easy enough to test if you feel like being anal.[06:18:39] <eyecue> by same gateway, i mean our border[06:18:57] <lunaphyte> the phone is in au, and the mta is in the us?[06:19:01] <eyecue> yup[06:19:11] <eyecue> lunaphyte; thats the way i inherited it.[06:19:13] <eyecue> before you ask :][06:19:25] <lunaphyte> oh, no difference to me :)[06:19:39] <eyecue> so iphone -> office -> interwebs -> mta (us)[06:19:40] <lunaphyte> phones move around, i figured whatever.[06:19:43] <eyecue> yah[06:20:13] <eyecue> Aug 19 12:44:44 markup postfix/smtpd[54781]: warning: 110.20.212.44: hostname 110.20.212.44.optusnet.com.au verification failed: hostname nor servname provided, or not known[06:20:18] <eyecue> is that complaining about the helo ?[06:20:29] <lunaphyte> no. dns.[06:20:46] <eyecue> ah right[06:20:55] <eyecue> postfix does a ptr lookup by default ?[06:21:50] <lunaphyte> if a restriction calls for it. not sure otherwise off the top of my head.[06:22:08] <lunaphyte> but that message is a red herring.[06:22:12] <eyecue> roger[06:23:36] <lunaphyte> i guess i'd see what wireless ethernet revealed, if anything, and then maybe some tcpdumping.[06:23:51] <lunaphyte> there's always hacking the thing too, to get a shell.[06:24:11] <eyecue> on th eiphone?[06:24:12] <eyecue> heh :][06:24:21] <eyecue> fun.[06:24:21] <lunaphyte> at leas then you could telnet and see if it's the connection or the program.[06:24:26] <lunaphyte> *least[06:24:40] <eyecue> tell me its easy to get a shell[06:24:41] <eyecue> :d[06:24:59] <lunaphyte> that's subjective i guess, but i thought it was pretty easy.[06:25:46] <eyecue> would a telnet app be of any help ?[06:25:51] <eyecue> or does it abstract away from stuff[06:26:45] <lunaphyte> couldn't hurt.[06:28:01] <eyecue> http://discussions.apple.com/thread.jspa?messageID=9774476[06:28:02] <eyecue> lame.[06:28:46] <lunaphyte> people who act authoritative about things they don't know about is hugely frustrating.[06:29:08] <eyecue> indeed[06:29:09] <eyecue> :][06:29:45] <eyecue> hmm, perhaps postfix didnt advertise something the iphone wanted[06:29:47] <eyecue> *ponders*[06:30:00] <rob0> requiring TLS?[06:30:17] <rob0> Try first without TLS.[06:30:25] <eyecue> i have,m it defaults to checking with ssl[06:30:30] <eyecue> ive disabled that in the smtp settings[06:30:40] <eyecue> i wonder if apple have disabled non tls/ssl smtp[06:30:43] <pickcoder> it first checks to see if TLS is available[06:30:44] <eyecue> i cant imagine they would though[06:30:52] <eyecue> pickcoder; and tls is not avail on this server[06:30:53] <pickcoder> and then complains an asks if you want to connect without "SSL"[06:30:58] <eyecue> yup[06:31:04] <pickcoder> you say "yes" and it works[06:31:06] <eyecue> and we've disabled ssl in the advanced settings[06:31:08] <pickcoder> at least from my box[06:35:37] *** saurabhb has joined #postfix[06:36:28] <eyecue> is there a command i can run to see build time options for postfix ? (specifically whether it was build with tls/ssl support)[06:36:45] *** iresh123 has joined #postfix[06:37:14] <pickcoder> postconf -a[06:37:18] <pickcoder> r[06:37:19] <pickcoder> er[06:37:28] <pickcoder> that's SASL[06:40:06] <rob0> /etc/postfix/makedefs.out[06:40:06] <pickcoder> what distro?[06:40:11] <eyecue> freebsd[06:40:24] <eyecue> i thought perhaps theres was something postfix specifc that new about how it was built[06:40:40] <rob0> There is.[06:40:42] <eyecue> make config is no longer rlevant since it was build a while ago[06:40:46] <lunaphyte> ldd smtpd | egrep -i '(tls|ssl)'[06:40:52] <eyecue> thats what i was thinking[06:40:54] <eyecue> i wanted to be sure[06:41:02] <pickcoder> bed time[06:41:04] *** pickcoder has quit IRC[06:43:47] *** mactimes has quit IRC[06:59:05] <kerneld> Anyone done remote site clustering with their mailbox server on the cheap?[07:00:02] <kerneld> linux HA with a witness and no shared layer2 or storage[07:09:17] <iresh123> Can any one say how to put relayrecipients in postfix?[07:10:07] <rob0> !relay_recipient_maps[07:10:08] <knoba> rob0: "relay_recipient_maps" : a configuration parameter in the main.cf: Optional lookup tables with all valid addresses in the domains that match $relay_domains. Specify @domain as a wild-card for domains that do not have a valid recipient list.[07:10:42] <rob0> Format is "user@domain anything" (the lookup result is ignored)[07:12:02] <iresh123> rob0: so how to put that configuration ?[07:12:31] <rob0> Using IRC as root is a very bad idea.[07:13:31] <iresh123> rob0[07:13:36] <iresh123> i know that[07:17:40] <rob0> Also a bad idea to ask questions which indicate you have not even begun to look for documentation. There is abundant, complete documentation. I'm not going to take my time to try to explain everything to you. Good luck.[07:17:46] * rob0 afk, bedtime[07:17:52] <Motoko-chan> rob0, you so mean![07:18:02] <rob0> :)[07:23:22] <iresh123> rob0: thanks[07:28:22] <eyecue> hmm just tested the iphone against my personal qmail (cough) mta running smtp-auth on standard ports[07:28:24] <eyecue> works.[07:28:26] <eyecue> *ponders*[07:28:34] <eyecue> so that isolates optus blocking ports[07:28:52] <eyecue> also not using tls on that server[07:30:47] <eyecue> hmm, wtf.[07:31:16] <eyecue> forgive what me a silly question, but im just having a brain fart. at what point does an mta display its capabilities ?[07:33:22] <kerneld> eyecue: after EHLO[07:33:58] <eyecue> thought so[07:34:23] <eyecue> hmm[07:34:25] <kerneld> EG: STARTTLS,AUTH, Encoding ...[07:34:33] <eyecue> i wonder if the iphone is shitting itself because its not seeing AUTH in the caps[07:35:07] <kerneld> do you have AUTH requiring secure layer?[07:35:15] <eyecue> other than SIZE, the only difference between my qmail mta and this postfix one is mine shows AUTH caps, and the postfix box doesnt, even though it accepts them[07:35:17] <Motoko-chan> It could just be because it's an iPhone.[07:35:18] <eyecue> i do not[07:35:45] <eyecue> Motoko-chan; been there, it MAY be that the iphone doesnt try auth unless AUTH is there in caps[07:35:50] <eyecue> capabilities that is[07:35:58] <Motoko-chan> That's awfully strange.[07:36:03] <eyecue> i wonder *gets rid of user/pass in iphone settings*[07:36:04] <kerneld> smtpd_tls_auth_only[07:36:08] <kerneld> !smtpd_tls_auth_only[07:36:09] <knoba> kerneld: "smtpd_tls_auth_only" : When TLS encryption is optional in the Postfix SMTP server, do not announce or accept SASL authentication over unencrypted connections.[07:36:10] <eyecue> kerneld; ya i know[07:36:18] <eyecue> tls is not enabled[07:36:47] <kerneld> whats your default?[07:36:51] <eyecue> Motoko-chan; heres a question, how can i tell postfix to advertise it supports auth ?[07:37:03] <Motoko-chan> I don't know offhand[07:37:10] <kerneld> When I was testing auth, I had that turned off, and AUTH was presented.[07:37:31] <kerneld> also: broken_sasl_auth_clients[07:38:21] <kerneld> eyecue: I I turn smtpd_tls_auth_only off, I see AUTH presented[07:39:31] <eyecue> kerneld; but i dont have tls enabled[07:40:31] <kerneld> I know[07:40:37] <kerneld> smtpd_tls_auth_only=off[07:40:43] <kerneld> try it[07:43:28] <kerneld> =no rather[07:45:22] *** eyecue has quit IRC[07:46:10] *** magyar has joined #postfix[07:51:13] *** eyecue has joined #postfix[07:51:19] <eyecue> hmm, where did i disappear to.[07:56:15] *** jtaji has quit IRC[08:01:16] *** burnersk has joined #postfix[08:03:05] *** burnersk has quit IRC[08:03:26] <kerneld> /dev/null[08:03:51] <kerneld> echo goodnight > /etc/motd[08:03:52] *** Niemi has joined #postfix[08:05:03] <kerneld> eyecue: Did that work?[08:05:18] <eyecue> kerneld; setting the iphone not to use u/p worked[08:05:18] <eyecue> :|[08:05:33] <eyecue> i was use to using smtp-auth.[08:05:43] <iresh123> Cant we get the Remote LDAP server users in to the relay-recipients file?[08:06:07] <kerneld> iresh123: Prob with an ldap: list[08:06:45] <iresh123> kerneld: yep i want to add LDAP users into that[08:07:43] <kerneld> well, instead of, or aswel as hash:relay-recipients have an ldap: entry[08:10:08] <iresh123> kerneld: yes we can give only one LDAP server i wanted to add more than one LDAP server[08:14:15] *** nb_ has joined #postfix[08:21:09] *** jeev has quit IRC[08:28:16] *** sophokles has joined #postfix[08:29:48] *** jeev has joined #postfix[08:30:25] *** jeev has quit IRC[08:30:47] *** jeev has joined #postfix[08:36:39] <iresh123> Can we assign more than one LDAP servers to the relay-recipients_maps?[08:40:29] *** eyecue has quit IRC[08:40:53] *** rcsu has joined #postfix[08:41:11] *** cilly has joined #postfix[08:42:12] *** MasterOne has joined #postfix[08:48:23] *** Motoko-chan has quit IRC[08:53:33] *** Zblakany has joined #postfix[08:58:51] *** polaru has joined #postfix[09:06:29] <arossouw> is there a way to block a email, without the email being queued?[09:06:56] <_ruben> yes .. using rbl's is one way[09:07:22] <arossouw> i have problem with spammers sending malware from e-cards at hallmark dot com , invitations at hi5 dot com[09:08:31] <dalurka> Is there a way to forward mail to domains not in my transports list to one adress?[09:10:27] <dalurka> was thinking of always_bcc but then it would get all mail wouldn't it?[09:11:20] <sysmonk> you want to forward, or send a copy ?[09:11:51] <dalurka> copy would be best[09:11:58] <dalurka> but does not really matter[09:13:04] <iresh123> Can we assign more than one LDAP servers to the relay-recipients_maps?[09:15:01] <f3ew> iresh123 yes[09:15:15] <f3ew> arossouw check_sender_access[09:15:40] <iresh123> f3ew: how[09:15:42] <iresh123> ?[09:16:32] <f3ew> See ldap_table(5)[09:17:08] <MasterOne> this may not directly fit in with the topic of this channel, but maybe someone knows: http://wiki.apache.org/spamassassin/OtherTricks -> "So I set my highest MX record to point to an IP address that always returns a temporary "Come Back Later" error." -> Any idea, what is mean with a "temporary "Come Back Later" error.", and how this is done?[09:17:35] <iresh123> f3ew:Any URL related to that ?[09:17:45] <f3ew> !ldap[09:17:46] <knoba> f3ew: "ldap" : a lookup method that can be used by Postfix. An introduction can be found in the LDAP_README also found at http://www.postfix.org/LDAP_README.html. A worthy project dealing with LDAP and Postfix can be found at: http://jamm.sourceforge.net/howto/html/[09:18:05] <f3ew> MasterOne return a 450 error always[09:18:12] <f3ew> !ldap_table[09:18:13] <knoba> f3ew: Error: "ldap_table" is not a valid command.[09:18:25] <f3ew> http://www.postfix.org/ldap_table.5.html[09:18:27] <MasterOne> f3ew: is this done by a postfix instance, or an iptables rule?[09:18:43] <f3ew> MasterOne typically a process listening on port 25[09:19:01] <MasterOne> f3ew: you mean a postfix process?[09:19:10] <iresh123> f3ew: thanks dude[09:20:12] <MasterOne> f3ew: what else could be used to always return such an error? I was playing around with iptables -j REJECT --reject-with ... but that's not it[09:24:35] *** xabbuh has joined #postfix[09:25:05] *** impi_ has joined #postfix[09:25:10] <impi_> morning guys and girls,[09:26:30] <impi_> i would like to know: i am helping a friend with his email marketing business - he's doing well, and sending cool mails but he's spam is getting the guy down, so we looked at solutions from smtp.com and habeas, but are their any guidelines to achieve the best results without having to spend loads of $ - i allready use valid and working SPF records and sign all email with dkim-filter[09:27:08] <f3ew> impi_, send mail only to people who want that mail?[09:27:36] <MasterOne> f3ew: looks like has to be a postfix process, since later on that page it reads "... do not close the connection with the QUIT command after receiving a 4xx error"[09:28:06] <impi_> f3ew, we already make use of double opt in, and all this, but yahoo seems to be putting mail in spam folder and deferring a lot of mail, big problem,[09:30:22] <f3ew> impi_ so ask Yahoo!?[09:30:32] <f3ew> They do that if their users mark it as spam[09:30:42] <f3ew> You can get a feedback loop from them[09:31:36] <impi_> f3ew, cool, i will do that myself, my friend said he allready did ask them and got some reply but i dont think it helped him, so i haven't asked yahoo myself, done it before with msn...and will try this with yahoo, cool thanks for the feedback and ideas[09:31:54] <impi_> have a great day guys and i hope you will be happy postmasters![09:31:58] *** impi_ has left #postfix[09:34:12] <arossouw> f3ew: the malware sends from the LAN i have tried check_sender_access but it only stops email from the internet[09:34:42] <f3ew> arossouw, block port 25 to the world[09:35:02] <f3ew> put the check sender access before permit_mynetworks[09:39:47] <MasterOne> f3ew: do you think it makes a difference, if an error 450, 451 or 452 is given? Any clue, on how to make a postfix process to just always give such a 4xx error, as suggested on that OtherTricks-page?[09:41:12] *** Tykling has left #postfix[09:43:37] *** Robbie has joined #postfix[09:45:43] <arossouw> f3ew: if i put check sender access before permit_mynetworks would i still receive email from other mta's?[09:47:07] <arossouw> i have a list of lan ips that infected with this malware it has its own smtp engine that sends mass email, is there a way i can block smtp from specific ip's ?[09:48:59] <f3ew> yes[09:49:05] <f3ew> arossouw, block port 25 to the world <====[09:49:28] <f3ew> MasterOne check_client_access cidr:/etc/postfix/cidr[09:49:43] <f3ew> cidr has 0.0.0.0/1 450[09:49:53] <f3ew> cidr has 128.0.0.0/1 450[09:49:56] <arossouw> the content filtering , does quarantine the messages, if i block 25 to the world, business wont happen[09:50:03] *** Zeit|awy has joined #postfix[09:51:16] <f3ew> Uh? You allow the mail server to send, no other hosts[09:51:19] <f3ew> !port25[09:51:20] <knoba> f3ew: Error: "port25" is not a valid command.[09:51:31] *** brancaleone has joined #postfix[09:51:51] <arossouw> k[09:52:08] <f3ew> !learn port25 as The MAAWG recommendations on managing port 25/tcp traffic: http://www.maawg.org/port25/MAAWG_Port25rec0511.pdf[09:52:10] <f3ew> !port25[09:52:11] <knoba> f3ew: "port25" : The MAAWG recommendations on managing port 25/tcp traffic: http://www.maawg.org/port25/MAAWG_Port25rec0511.pdf[09:53:01] *** srdan_ has joined #postfix[09:54:03] <srdan_> anyone know what the best way to inject a large amount of generated email like billing statements into the postfix outgoing queue is? currently using the sendmail command and it is really slow.[09:54:58] <f3ew> SMTP[09:56:50] *** war9407 has joined #postfix[09:57:27] <srdan_> any other more _direct_ way than smtp? what about just pasting a file into the outgoing queue and having the program pick it up automatically?[09:58:07] <f3ew> nope[09:58:19] <f3ew> SMTP is the fastest[09:58:39] *** iresh123 has quit IRC[09:59:23] *** the|Navigator has joined #postfix[10:00:29] <srdan_> hmm.... seems cound of counter-intuitive to have to implement the whole SMTP protocol. Also, I don't know how I'm going to implement that, seeing as the messages are generated on the same box as the mail server.[10:01:13] <srdan_> Could you somehow use LMTP to send mail?[10:03:51] *** iresh123 has joined #postfix[10:08:05] <f3ew> no[10:08:13] *** jense has joined #postfix[10:11:51] *** ming_zym has quit IRC[10:13:25] *** Zeit|awy has quit IRC[10:17:37] *** gerhard7 has joined #postfix[10:18:13] *** iresh123 has left #postfix[10:18:54] *** samix has joined #postfix[10:22:10] *** the|Navigator has quit IRC[10:24:03] *** Tykling has joined #postfix[10:26:39] *** ming_zym has joined #postfix[10:31:58] <arossouw> smtpd_sender_restrictions = permit_mynetworks,[10:31:58] <arossouw> check_sender_access hash:/etc/postfix/sender_access,[10:32:01] <arossouw> check_client_access hash:/etc/postfix/client_access,[10:32:04] <arossouw> i tried that[10:32:14] <arossouw> adding the lan ips in client_access with REJECT, but doesn't work[10:32:32] *** Zordrak_ is now known as Zordrak[10:35:30] *** sako has joined #postfix[10:40:44] *** MasterOne has quit IRC[10:41:30] *** MasterOne has joined #postfix[10:42:07] <f3ew> move permit_mynetworks down[10:47:13] *** ming_zym has quit IRC[10:49:36] *** ming_zym has joined #postfix[10:54:56] *** gerhard7 has quit IRC[10:55:25] *** vys has joined #postfix[10:55:46] *** Skaag has quit IRC[11:00:52] <arossouw> thx, that works[11:01:49] *** antii has left #postfix[11:15:19] *** Skaag has joined #postfix[11:27:54] *** ming_zym has quit IRC[11:30:10] *** timotiCK has joined #POSTFIX[11:34:59] *** sako has quit IRC[11:42:26] *** ming_zym has joined #postfix[11:44:07] *** Lovzan has joined #postfix[11:47:33] <Lovzan> i have a problem with sending emails, from local to external mail (IMAP)[11:49:07] *** srdan__ has joined #postfix[11:49:17] *** gerhard7 has joined #postfix[11:49:30] *** srdan_ has quit IRC[11:58:39] *** dungbx has joined #postfix[11:58:56] <dungbx> I want to hold in queue for x second before send. How?[12:00:39] <_ruben> Lovzan: postfix doesnt do imap[12:03:07] <f3ew> dungbx, why?[12:03:22] <f3ew> You can play tricks with HOLD and postsuper -H[12:04:27] <dungbx> but it doesnt release automatically?[12:06:09] <dungbx> Actually I want to slow down every incoming email for 5 minutes[12:06:19] <dungbx> before sending[12:07:28] <Lovzan> how to configure main.cf, to send mail from local adresse (user at mail dot xx.local) to an external one, like contact at yahoo dot com[12:07:51] <dungbx> Lovzan: use transport[12:08:26] <Lovzan> how ? plz[12:10:00] *** sophokles has quit IRC[12:10:55] <f3ew> dungbx why?[12:11:13] <f3ew> !alias_maps[12:11:14] <knoba> f3ew: "alias_maps" : a configuration parameter in the main.cf: The alias databases that are used for local(8) delivery. See aliases(5) for syntax details.[12:11:19] <f3ew> !transport_maps[12:11:19] <knoba> f3ew: "transport_maps" : a configuration parameter in the main.cf: Optional lookup tables with mappings from recipient address to (message delivery transport, next-hop destination). See transport(5) for details.[12:12:19] <dungbx> f3ew: it just 1 of policy for the server boss gave me[12:13:29] <Lovzan> if local to local no problem,[12:13:55] <Lovzan> if local to external , using transport ? how[12:14:27] <Lovzan> is it possible to use wildcard for all mail domain ?[12:14:55] <f3ew> no[12:21:24] *** dungbx has quit IRC[12:23:19] <Lovzan> so how to redirect[12:24:05] *** vho has quit IRC[12:24:28] *** vho has joined #postfix[12:24:37] <f3ew> Lovzan I showed you what to read[12:27:39] *** hever has joined #postfix[12:27:58] <Lovzan> thx[12:31:15] *** dungbx has joined #postfix[12:31:53] <dungbx> How can I hold mail for specific time before sending, example 5mins[12:32:21] <cite> You can't - without using the HOLD queue and releasing them via script.[12:33:33] <cite> You can tell the smtp delivery agent to always wait 5 minutes beofre connecting to a destination, but that's not the same.[12:35:01] <dungbx> cite: How about that, the 2nd one?[12:35:47] <cite> dungbx: Read man 5 access, define a HOLD action. See the manpage for "postsuper" on how to remove them from HOLD queue.[12:37:08] *** cpm has joined #postfix[12:42:23] *** gerhard7 has quit IRC[12:46:44] <dungbx> What is the best way to run 1 script whenever got 1 incoming email and send it only when the script is finished?[12:47:14] <dungbx> except content filter[12:49:13] *** bturnbull has joined #postfix[12:57:26] *** webchaos has joined #postfix[13:18:00] *** ming_zym has quit IRC[13:19:55] *** loddafnir1 has quit IRC[13:33:58] *** Giel has joined #postfix[13:34:11] <Giel> hi all[13:35:53] <Giel> I'm looking for a way to configure postfix in such a way that it will deliver all outgoing mail to the server specified by its MX record if it has an IPv6 address associated, otherwise I want it to fall back to using a specific relay server[13:36:06] <Giel> i.e. IPv4 outgoing port 25 is blocked in our network[13:36:47] <sysmonk> Giel: how about setting inet_protocols = ipv6 ?[13:38:49] <Giel> IPv4 incoming still works and I would want that to stay working[13:39:08] *** stephan48 has joined #postfix[13:41:33] *** Lovzan has left #postfix[13:45:29] *** normes has quit IRC[13:49:29] <sysmonk> Giel: you can set that only for smtp daemon (client)[13:49:40] <sysmonk> then smtpd will still use ipv4, and smtp will use ipv6[13:50:28] <f3ew> Postfix will try both v4 and v6[13:50:43] <f3ew> if you support both IPv4 and IPv6 in inet_protocols[13:50:59] <f3ew> This was asked this month or last month on postfix-users, IIRC[13:51:11] <Giel> IPv4 outgoing traffic over port 25 is simply dropped[13:51:33] <Giel> so I can only deliver traffic when the target server has IPv6[13:52:13] <sysmonk> f3ew: he needs smtp client to only work with ipv6 as his ipv4 port 25 is blocked, so setting inet_protocols = ipv6 for smtp might work[13:52:14] *** polaru has quit IRC[13:52:20] <Giel> thus we've got an external relay_host (which currently relays *all* mail traffic) which has both working IPv6 and IPv4 (incoming & outgoing)[13:52:27] <f3ew> sysmonk but he also need a fallback relay[13:52:36] <sysmonk> f3ew: which will be his ipv6 relayhost[13:52:45] <f3ew> ah[13:54:52] *** burnersk has joined #postfix[13:55:55] *** polaru has joined #postfix[14:00:25] <Giel> hmm, great..., I think someone else did something nasty to our mail server; it's completely unreachable[14:00:38] <Giel> even the serial console is dead, guess it hangs...[14:01:26] <Giel> and the secondaries are outside of our network (thus don't have this problem, thus I can't test sysmonk's suggested solution ATM)[14:01:32] *** eanxgeek has joined #postfix[14:01:37] *** Ryushin has joined #postfix[14:02:33] <Giel> plus obviously we don't have physical access to the machines for this whole week...[14:02:41] <Giel> I'll try again monday...[14:02:44] *** DarkFoxDK has joined #postfix[14:03:30] *** Section1 has joined #postfix[14:04:10] <DarkFoxDK> Hi, anyone here know what this means? "Helo command rejected: Rejected due to CSIS RID: c31dd1ccb3bcc76c9e8ddf0c6f5ce8f4"[14:05:21] <Giel> f3ew: I think you mean this thread http://archives.neohapsis.com/archives/postfix/2009-07/0834.html ?[14:05:33] <cpm> never seen that one before.[14:07:19] <DarkFoxDK> We get it when trying to send mails to a customer who uses spamwall... Google doesn't seem to be of any help..[14:09:16] <Zerberus> DarkFoxDK: use the postmaster address and just ask the customer's mail admin[14:10:01] <DarkFoxDK> True... I guess... I'm guessing it's just spamwall's cryptic way of telling you that "we thing your mail is spam"...[14:10:13] <DarkFoxDK> s/thing/think/[14:12:35] <f3ew> Giel yes[14:12:58] *** vys has quit IRC[14:15:20] <Giel> this thread seems to contain a possible solution: http://thread.gmane.org/gmane.mail.postfix.user/200552/focus=200554[14:15:34] *** digitalmortician has quit IRC[14:15:46] <Giel> I'll give that a try on our procmail box[14:22:24] *** loddafnir has joined #postfix[14:25:30] *** robtone__ has quit IRC[14:28:38] *** digitalmortician has joined #postfix[14:31:50] *** timotiCK has left #POSTFIX[14:32:59] *** KB1JWQ_ has joined #postfix[14:33:07] *** goldie has quit IRC[14:34:01] *** Flomar has joined #postfix[14:34:15] *** KB1JWQ has quit IRC[14:35:17] *** srdan__ has quit IRC[14:37:49] *** loux has joined #postfix[14:37:53] <loux> hi[14:38:23] <loux> i have in main.cf : smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination[14:38:34] <loux> but mynetworks client can not send mail[14:38:58] <loux> Relay access denied; from=...[14:40:23] *** dungbx has quit IRC[14:41:24] *** F6F has joined #postfix[14:42:28] <Section1> loux, from topic: post postconf -n and relevant logs to a pastebin when asking questions[14:42:48] <loux> ok, i have post to early, making some test, sorry[14:46:01] <loux> to be sure : permit_mynetworks overwrite reject_unauth_destination ?[14:46:19] <loux> if client is inside my network no verification is done ?[14:51:26] *** DarkFoxDK has left #postfix[14:53:58] <loux> Section1 : # Whitelisting: local clients may specify any destination domain.[14:54:07] <loux> so i have put : smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination[14:54:24] <loux> but local client can not send mail, hand on i'm pasting my conf[14:56:13] <loux> Section1 : found :) /28 instead of /24 in my network :( i'll hit my head on a wall[14:56:50] <loux> see you, thanks for the help[14:56:53] *** loux has left #postfix[14:57:09] *** muh2000 has quit IRC[15:00:25] *** p3rror has joined #postfix[15:11:39] *** saurabhb has quit IRC[15:18:24] *** Guest54681 has left #postfix[15:26:17] *** MasterOne has quit IRC[15:27:32] *** teddymills has joined #postfix[15:31:13] *** pinoyskull has quit IRC[15:32:28] *** gerhard7 has joined #postfix[15:32:46] *** burnersk has quit IRC[15:33:50] *** KB1JWQ_ is now known as KB1JWQ[15:43:06] *** GoGi has joined #postfix[15:44:47] *** iasmina has quit IRC[15:45:18] *** iasmina has joined #postfix[15:48:02] *** mactimes has joined #postfix[15:50:43] *** arossouw has left #postfix[15:51:25] *** Muhis has joined #Postfix[16:03:07] *** s0ber has quit IRC[16:09:59] *** gerhard7 has quit IRC[16:11:13] *** Flomar has quit IRC[16:14:32] *** eanxgeek has quit IRC[16:16:52] *** eanxgeek has joined #postfix[16:18:27] *** F6F has quit IRC[16:18:39] <dalurka> How would I restrict mail from going out to only predefined domains and the rest BCCd to some adress?[16:18:48] <dalurka> I have still not managed to get this working[16:19:36] <dalurka> any hint would be appreciated[16:19:37] <lunaphyte> off the top of my head, some combination of check_recipient_access and transport_maps comes to mind.[16:19:54] <rob0> That brings up a large "huh" here.[16:20:05] <lunaphyte> fer shure.[16:20:28] <dalurka> howcome?[16:20:40] <lunaphyte> it's just the way life is.[16:20:47] <rob0> Because the problem and goal are not clear![16:21:17] <dalurka> I want to be able to send mail anywhere but only mail to certain domains will get delivered[16:21:31] <lunaphyte> yes, but *why*?[16:21:34] <dalurka> the rest will get delivered or BCCd to one adress[16:21:53] <dalurka> because it is our developement system and I want to use real adresses[16:22:18] <lunaphyte> save yourself the trouble and just use addresses to which delivery is acceptable.[16:22:35] <lunaphyte> (for your development/testing process)[16:23:00] <dalurka> now that was not my goal was it[16:23:03] <dalurka> ?[16:23:06] <dalurka> :)[16:23:22] <lunaphyte> indeed. your goal is to develop some software, as it seems.[16:23:33] <lunaphyte> (a wild guess)[16:23:37] <dalurka> no to test some software being developed[16:23:50] <rob0> A virtual_alias_maps lookup with the permitted addresses, followed by static:BCC@address[16:24:13] <rob0> Now, run and get me more coffee.[16:25:10] <dalurka> the problem is that I can't know for sure which adresses are going to send mail beforehand[16:25:26] <lunaphyte> here's the short of what i'll offer. postfix can certainly do this (as i initially offered up, as well as rob0's suggestion). however. the more valuable insight i'll offer is that i'd bet strongly that you're over-engineering this exercise.[16:25:36] <dalurka> or I meant where mail is going to be sent[16:25:53] * cpm overengineers lunaphyte[16:26:02] * lunaphyte could use some atm.[16:26:41] *** seekwill has joined #postfix[16:26:43] <dalurka> lunaphyte: pff no way :)[16:28:26] <lunaphyte> the lady doth protest too much, methinks...[16:31:46] <cpm> yeah, you say that NOW[16:32:33] *** jmedina has joined #postfix[16:35:56] *** iasmina has quit IRC[16:35:59] *** hparker has joined #postfix[16:36:06] *** iasmina has joined #postfix[16:42:38] <Giel> smtp_bind_address = localhost & smtp_fallback_relay = ipv6-relay seem to do the trick...[16:55:08] *** polaru has quit IRC[16:55:28] *** polaru has joined #postfix[16:56:31] *** xabbuh has quit IRC[17:25:54] *** cilly has quit IRC[17:28:20] *** cilly has joined #postfix[17:31:07] *** polaru has quit IRC[17:34:21] *** Skaag has quit IRC[17:34:58] *** f3ew has quit IRC[17:34:58] *** samix has quit IRC[17:36:08] *** samix has joined #postfix[17:42:55] *** cilly has quit IRC[17:46:21] *** cilly has joined #postfix[17:51:07] *** smesjz has joined #postfix[17:54:04] *** cilly has quit IRC[17:54:58] *** cilly has joined #postfix[17:58:26] *** cilly has quit IRC[17:58:40] *** cilly has joined #postfix[18:01:39] *** cilly has quit IRC[18:02:07] *** cilly has joined #postfix[18:02:28] *** SkyLeach has quit IRC[18:05:57] *** brancaleone has quit IRC[18:05:58] *** Vog has quit IRC[18:13:42] *** muh2000 has joined #postfix[18:15:32] *** cilly has quit IRC[18:15:49] *** cilly has joined #postfix[18:15:55] *** samix has quit IRC[18:16:15] *** samix_ has joined #postfix[18:16:48] *** Fallenou has joined #postfix[18:18:29] *** githogori_ has quit IRC[18:18:57] *** samix_ has quit IRC[18:19:06] *** samix has joined #postfix[18:20:20] *** Robbie has quit IRC[18:21:23] *** samix has quit IRC[18:21:24] *** js_ has quit IRC[18:42:16] *** clockspider has quit IRC[18:52:17] *** eanxgeek has quit IRC[18:52:42] *** eanxgeek has joined #postfix[18:55:10] *** incredible has joined #postfix[18:59:03] *** gerhard7 has joined #postfix[19:03:49] *** sako has joined #postfix[19:06:59] *** Skaag has joined #postfix[19:11:42] <sako> hey all, i am trying to setup postfix+dovecot+postgresql im following this tutorial:[19:11:45] <sako> http://wiki.dovecot.org/HowTo/DovecotPostgresql[19:12:08] *** Vog has joined #postfix[19:12:33] <sako> so.. the problem is the part that i am supposed to add the virtual users and domains to my server.. it says uid and gid are not required to be in /etc/passwd /etc/groups how else would i create user/groups?[19:15:35] <jluedke_> does smtpd_end_of_data_restrictions get called by smtpd after message has been written to incomming queue by cleanup?[19:15:35] *** jluedke_ is now known as jluedke[19:15:40] <rob0> !virtual[19:15:40] <knoba> rob0: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html[19:16:11] <jeev> heh, thought he was saying the 'virtual' or something user didn't need a uid/gid[19:16:29] <rob0> I have no idea what he is saying, actually ...[19:16:43] <rob0> ... but, I figure a README link never hurts.[19:16:47] <jeev> i think he wants to add virtual users like rob at seabass dot com in /etc/passwd[19:16:47] <jeev> ;D[19:18:28] *** s0ber has joined #postfix[19:19:36] <sako> http://wiki.dovecot.org/HowTo/DovecotPostgresql[19:19:56] <sako> im looking at that wiki entry.. you see where its inserting the virtual users[19:19:56] <rob0> jluedke, I would think that at end-of-DATA, the message is on disk, but smtpd still retains the right to reject. I don't know how the interaction with cleanup(8) and qmgr(8) proceeds. It might be in !overview, or it might be undocumented (see the source.)[19:20:08] <incredible> i m trying to setup postfix+mailman[19:20:13] <incredible> having problem with it[19:20:15] <incredible> can someone help[19:21:04] <rob0> What's incredible to me is that so many people ask questions like that! Read the /topic !![19:21:30] <sako> insert into transport (domain, transport) values ('domain.org', 'virtual:');[19:21:43] *** tjikkun has quit IRC[19:21:45] <jeev> sako, you need to make a virtual user, ie: i use virtual/virtual[19:21:47] <sako> so would i need to add any uid/gid on the actual system?[19:21:56] <sako> oh ok[19:21:58] <jeev> i'd create a user called virtual[19:22:02] <sako> i created vmail user/gid[19:22:05] *** Fallenou has quit IRC[19:22:07] <jeev> yea, sure i guess[19:23:08] <sako> hmm[19:23:21] <incredible> @jeev can you help me?[19:23:22] <smesjz> sako: I have seen better tutorials and you shouldn't bother imho to use different uid/gids per domain as recommended. Static gid/uid will do just fine...[19:23:45] <sako> smesjz: im having trouble finding postfix+postgresql[19:23:50] <sako> tutorials..[19:24:00] <jeev> incredible, i dunno what mailman is[19:24:02] <sako> i find 100000 mysql+postfix lol[19:24:09] <jluedke> rob0: thanks ill check the source[19:24:13] <sako> like 1 postgresql+postfix[19:24:14] <jeev> yea, one of my servers has static too[19:24:18] <smesjz> hmm, you can easily adapt a mysql tutorial to postgresql...just change the sql statements a bit[19:24:19] <jeev> what OS/distro sako ?[19:24:26] <sako> archlinux[19:24:34] <incredible> hmm... anyone who can help me setting up... mailman (mailing list)[19:24:40] <jluedke> i noticed that in the policy delegation that it sends a queueid[19:24:54] <jluedke> which makes me think it's been queued[19:24:55] *** Muhis has quit IRC[19:25:08] <smesjz> if you know Postgresql, then you should be able to work around any differences in setting up Postgresql and not mysql :)[19:26:53] *** cilly has quit IRC[19:27:03] <lunaphyte> or use mypostgresql, that way either method will work.[19:27:32] <jluedke> !overview[19:27:32] <knoba> jluedke: "overview" : Postfix Architecture Overview : http://www.postfix.org/OVERVIEW.html[19:30:18] *** hever has quit IRC[19:31:06] *** hever has joined #postfix[19:36:28] *** gerhard7 has quit IRC[19:43:36] *** digitalmortician has quit IRC[19:44:52] *** denis_ has quit IRC[19:45:00] *** denis_ has joined #postfix[19:45:45] *** denis_ has quit IRC[19:45:49] *** denis_ has joined #postfix[19:46:37] *** incredible has left #postfix[19:46:43] *** denis_ has quit IRC[19:46:49] *** denis_ has joined #postfix[19:49:35] *** digitalmortician has joined #postfix[19:55:55] *** webchaos has quit IRC[19:56:08] *** webchaos has joined #postfix[19:57:13] <jluedke> humm, looks like it happens after cleanup.[19:57:25] <jluedke> wonder what happnes if you reject the msg.[19:58:54] <jluedke> aka, how does the message get removed from queue.[20:02:18] *** hever has quit IRC[20:05:16] <lunaphyte> what indicates to you it happens after cleanup and not before?[20:06:47] <jluedke> if (state->err == CLEANUP_STAT_OK[20:06:47] <jluedke> && SMTPD_STAND_ALONE(state) == 0[20:06:47] <jluedke> && (err = smtpd_check_eod(state)) != 0) {[20:07:04] *** hever has joined #postfix[20:07:07] <jluedke> in smtpd.c[20:07:32] <jluedke> I remember looking at how cleanup creates queue files a while back[20:07:43] <jluedke> and I notice that the policy del. has a queue_id[20:08:03] <jluedke> I tested it, and sure enough there was a queue ie[20:08:06] <jluedke> err id[20:08:13] *** Skaag has quit IRC[20:08:20] <jluedke> which you would only get if cleanup created a queue file[20:11:10] <jluedke> I just dont get what happens to the incomming queue file if you reject based on that check[20:12:07] <lunaphyte> why do you care?[20:12:22] <jluedke> writing custom software.[20:12:40] <lunaphyte> that does what?[20:12:53] <jluedke> was thinking I would try reading queue file out of incomming via policy del.[20:13:01] <lunaphyte> why?[20:13:27] <jluedke> posibility of filtering there[20:13:34] <rob0> Why not just deliver to your software via local(8) or a transport(5)?[20:13:55] <rob0> or even as a content_filter ?[20:14:30] <lunaphyte> yes, if you want the contents of the message, policyd is the wrong tree to be barking up.[20:14:35] <rob0> The queue file format is not formally documented. Likewise, you'll have to go to the source.[20:15:21] <rob0> It sure does sound like some reinvention of wheels.[20:15:57] <jluedke> i do not disagree.[20:16:41] <lunaphyte> i've got a non-circular wheel i've been working on, but it requires a different style of road.[20:17:05] <rob0> Smart thing IMO is to interact with Postfix in supported ways. Wietse smiles beneficently at amavisd-new, and growls contemptuously at Mailscanner.[20:17:09] <jluedke> kinda investigating all posibilities[20:17:59] <lunaphyte> perhaps if you divulged more about the why, you might find more valuable insight here.[20:18:31] <sako> hey guys would you recommend postfixadmin/[20:18:38] <jluedke> well, we are a very high volume site and traditional methods fall over[20:18:53] *** robtone_ has joined #postfix[20:19:09] <lunaphyte> sako: empirically? no, of course not.[20:19:36] <jluedke> have a lot of business logic that needs to happen.[20:20:20] <lunaphyte> ick. that term gives me the shivers.[20:20:30] * jluedke feels dirty[20:20:58] <sako> ok so no postfix admin[20:21:10] <lunaphyte> sako: why not?[20:21:48] <jluedke> besides, how is it a bad thing to know exactly how pf does builtin content inspection? :)[20:22:12] <sako> < lunaphyte> sako: empirically? no, of course not.[20:22:42] <sako> lunaphyte: reason i asked is i am always weary to use things like phpmyadmin anyway so wanted to get some advice[20:23:02] <lunaphyte> i suppose that was less than helpful. don't use postfix admin if you think it's a front-end to postfix.[20:23:59] <sako> yea i know its not its just a way to manage the virtual domains and users no?[20:24:35] <sako> ive been trying to setup postgresql+dovecot+postfix.. im not getting anywhere with the tutorials and wikis out there..[20:24:53] *** Markus has joined #postfix[20:24:54] <lunaphyte> postfix doesn't have a front end, or a web interface, or anything else like that. however, there are of course plenty of other completely separate products that do whatever it is they do, and happen to use postfix behind the scenes as part of their process.[20:24:54] <sako> i found a good tutorial but it uses postfixadmin[20:26:00] <sako> i kinda like doing things myself but my limited experience with postfix has me sidelined[20:26:01] <lunaphyte> don't set up postfix and think that you can slap postfixadmin on top of it.[20:26:59] <lunaphyte> two roads diverged in a yellow wood...[20:27:18] <lunaphyte> !tutorial[20:27:18] <knoba> lunaphyte: "tutorial" : A very common problem is that some people prefer to follow a step-by-step tutorial that shows them how to setup their mail server without reading the documentation or understanding what they are doing. If something goes wrong, they have no clue whatsoever about where to look for hints, and they sometimes decide to start from scratch using a different tutorial. This is not The Proper Way.[20:28:39] <sako> thanks[20:29:25] <lunaphyte> you're welcome. see !basic and !examples for a good place to start.[20:32:03] <lunaphyte> i'd be remiss to not say, after all that, that i don't have any problems at all with postfixadmin. i think it's pretty cool. it's just that people seem to naturally approach the concept from not such a great perspective, at which point thy often end up here, trying to then use postfix and postfix admin independently of each other, yet still together at the same time. you can't have your cake and eat it too.[20:32:33] <sako> yea[20:33:07] <sako> lunaphyte: another thing i was thinking if i install postfixadmin, i could see how the db is set up like the tables and what not[20:33:20] <rob0> IIRC there's something wrong in postfixadmin documentation. I think it advises you to use the mail_user for virtual_uid_maps.[20:34:13] <sako> i know my way around mysql and postgresql, i am just stuck on how to set up the tables for postfix[20:34:18] *** iasmina has quit IRC[20:34:30] *** iasmina has joined #postfix[20:35:24] <lunaphyte> postfix includes a plethora of documentation on using sql lookup maps.[20:38:46] <sako> lunaphyte: would the tables for mysql and postgres need to be the same do you know?[20:38:56] <sako> i mean the naming of the tables and entries[20:39:01] *** Motoko-chan has joined #postfix[20:39:07] <lunaphyte> i think you're getting hung up on that concept.[20:39:12] <lunaphyte> !mysql[20:39:12] <knoba> lunaphyte: "mysql" : http://www.postfix.org/MYSQL_README.html is helpful in configuring postfix to talk to a mysql server.[20:39:18] <rob0> Pgsql has different data types.[20:40:42] <sako> !psql[20:40:43] <knoba> sako: Error: "psql" is not a valid command.[20:40:47] <sako> !postgresql[20:40:48] <knoba> sako: Error: "postgresql" is not a valid command.[20:41:00] <sako> !postgres[20:41:01] <knoba> sako: Error: "postgres" is not a valid command.[20:41:02] <lunaphyte> !pgsql[20:41:03] <knoba> lunaphyte: "pgsql" : http://www.postfix.org/PGSQL_README.html : PostgreSQL support in Postfix[20:41:12] <sako> thanks[20:41:14] *** digitalmortician has quit IRC[20:44:28] *** Ryushin has quit IRC[20:45:03] *** loddafnir has quit IRC[20:45:53] *** nezZario has joined #postfix[20:49:31] *** Skaag has joined #postfix[20:49:54] <nezZario> how can i stop spamassassin from scanning outbound mail? using a simple postfix+spamasassin spamd/spamc setup[20:50:02] <nezZario> mail is getting sent with spamassassin headers[20:51:11] *** jp- has quit IRC[20:51:18] <lunaphyte> does it really make a difference?[20:51:20] *** amrit is now known as amrit|wrk[20:51:59] *** ivanoats has joined #postfix[20:53:13] <ivanoats> hi folks - i have been searching the docs and google but I have this newb question - how do I find a message by message ID?[20:53:41] <lunaphyte> find where?[20:54:01] <ivanoats> in the logs?[20:54:17] <ivanoats> i want to make sure it was sent and look at the content of the message[20:54:25] <lunaphyte> grep would probably make sense, i'd imagine.[20:54:47] <lunaphyte> how would you look at the content of the message if it was sent?[20:55:08] <ivanoats> i don't know - maybe that's not possible?[20:55:15] <lunaphyte> nope.[20:55:26] *** plundra has quit IRC[20:55:37] <ivanoats> so I can only tell if it was sent, ok[20:56:12] <ivanoats> alright, thanks[20:56:23] <lunaphyte> if it's deferred or delayed you can see the content.[20:58:38] <Rockj> Q: Which configureparameter do I have to look into to disable local unix users as valid usernames to receive email? enough to set local_recipient_maps = $alias_maps so only those in my alias_maps is valid recipients? :)[20:58:54] <lunaphyte> !tias[20:58:54] <knoba> lunaphyte: "tias" : Try It And See[20:59:50] <Rockj> Sounds im on the correct track, I just found it in the docs right before I was going to ask. *trying*[21:01:19] *** digitalmortician has joined #postfix[21:01:35] <Rockj> Mhm. :-)[21:09:06] * rob0 prepares to be humiliated by Wietse[21:10:41] <lunaphyte> darn, i just unsubscribed from the list.[21:12:14] <rob0> It's okay, it would spoil your image of me.[21:12:24] *** AdamDV has joined #postfix[21:12:33] <AdamDV> Anyone active?[21:13:57] <AdamDV> I am wondering how to backup user mail using maildirs with postfix and dovecot?[21:14:54] <beawesomeinstead> sorry for offtopic, but does anyone know how to make amavisd listen an external IP instead of 127.0.0.1?[21:17:04] *** ivanoats has left #postfix[21:18:24] <lunaphyte> rob0: you were exceedingly courteous and debonair?[21:18:59] *** muh2000 has quit IRC[21:21:00] <lunaphyte> AdamDV: wondering what?[21:21:11] <AdamDV> (03:14:14 PM) AdamDV: I am wondering how to backup user mail using maildirs with postfix and dovecot?[21:21:12] <rob0> be, simply change the listening IP from 127.0.0.1 to the external one?[21:21:34] <rob0> Adam, cp(1) rsync(1) tar(1) or other tool of choice[21:21:45] <lunaphyte> beawesomeinstead: that's honestly pretty basic. where else have you looked for that answer before asking here?[21:22:30] <rob0> lunaphyte, well, not so much that, but we're going to find out how stupid I am.[21:22:59] <lunaphyte> haha. man, now i'm truly intrigued![21:23:15] <lunaphyte> i guess i'll have to wait for it to appear in google groups.[21:23:46] *** AdamDV has left #postfix[21:25:45] <rob0> I guess Adam didn't like my suggestion.[21:26:00] *** beawesomeinstead has quit IRC[21:26:07] <rob0> That's okay, I didn't like his off-topic question.[21:26:17] <nezZario> yeah it does make a difference[21:26:22] <nezZario> sometimes my e-mail looks like spam[21:26:34] <lunaphyte> to who? why?[21:26:40] <nezZario> i don't know and don't care[21:26:47] <lunaphyte> certainly not because of the existence of an SA header.[21:27:06] <nezZario> the root issue is why is it there[21:27:10] <nezZario> i know i'm not going to send spam[21:27:22] <lunaphyte> you are conflicted. you want to solve a problem, yet don't care what it's happening?[21:27:31] <lunaphyte> *why[21:28:03] <nezZario> what's happening is spamassassin is eating my CPU/memory unncessarily on outbound messages[21:28:05] *** smesjz has quit IRC[21:28:31] <rob0> naz, do you have any Windows users? Are you so confident that they won't send spam?[21:29:51] <nezZario> because i have like 6 users and know them all face to face..[21:30:27] <rob0> This is a FAQ, and in most cases it's not a real problem. How much mail can 6 non-spammers generate? What kind of machine can't handle that load?[21:30:30] <lunaphyte> your 6 users are exhausting the server's resources?[21:30:53] <nezZario> yeah, it's on a VPS and currently SA daemons eat about 15% of my memory[21:31:17] <rob0> Anyway, you can use access(5) lookups with FILTER result.[21:31:50] <rob0> Perhaps you need to find other ways to lessen the load.[21:31:55] <rob0> !cheatsheet[21:31:55] <knoba> rob0: "cheatsheet" : http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control.[21:31:58] <rob0> !zen[21:31:59] <knoba> rob0: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL[21:32:34] <lunaphyte> i'd like to know how that number (15 %) was determined.[21:33:01] <rob0> SA daemons? I'd recommend amavisd-new (but only after vigorous pre-DATA checks.)[21:33:19] <nezZario> um, top ? ps ?[21:34:03] <lunaphyte> yeah, like robot said, better to use amavis and let it call SA (and others) when necessary.[21:34:11] *** bluethundr has joined #postfix[21:34:36] <rob0> oh NOOO[21:34:45] <rob0> lunaphyte, my list post was rejected!![21:34:56] <lunaphyte> but WHY?![21:35:55] <rob0> BOUNCE postfix-users at postfix dot org: Admin request of type /^\s*passwd\b/i at line 8[21:36:15] <rob0> haha[21:36:39] <lunaphyte> :O[21:37:01] <rob0> I wondered where the heck it had gone, Noel posted to the same thread at the same time.[21:37:50] <rob0> line 8: "passwd(5)-formatted files directly would be useful. I have this at a"[21:43:53] *** jimmygoon has joined #postfix[21:46:10] <rob0> s/passwd(5)/password(**)/ with a footnote "(**)"[21:46:23] *** Markus has quit IRC[21:48:43] <rob0> nope, apparently not[21:50:07] <rob0> ah, here it is[21:51:03] *** webchaos has quit IRC[21:53:15] *** beawesomeinstead has joined #postfix[21:53:54] *** cpm has quit IRC[22:11:41] *** stephan48 has quit IRC[22:12:26] *** beawesomeinstead has quit IRC[22:12:59] *** beawesomeinstead has joined #postfix[22:14:17] *** webchaos has joined #postfix[22:15:45] *** loddafnir has joined #postfix[22:20:24] *** jimmygoon has quit IRC[22:43:40] *** muh2000 has joined #postfix[22:59:53] *** cilly has joined #postfix[23:02:24] *** jmedina has quit IRC[23:03:41] *** beawesomeinstead has quit IRC[23:05:01] *** mactimes has quit IRC[23:19:40] *** kewo has quit IRC[23:22:53] *** sako has quit IRC[23:27:52] *** kewo has joined #postfix[23:30:44] *** githogori_ has joined #postfix[23:33:20] *** Section1 has quit IRC[23:39:06] *** war9407 has quit IRC[23:39:58] *** cilly has quit IRC[23:45:32] *** hever has quit IRC[23:47:50] *** Vince42 has quit IRC[23:50:04] *** Vince42 has joined #postfix[23:52:43] *** nezZario has quit IRC[23:58:02] *** bluethundr___ has joined #postfix