August 23, 2009 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
August 23, 2009 [00:01:13] *** Guest38468 has joined #postfix[00:01:32] *** Guest38468 is now known as deface[00:04:45] <dragonbyte> adaptr: i know. I need to know how to tell it WHERE to relay those domains[00:06:28] *** rcsu has quit IRC[00:07:39] <dragonbyte> relay_transport doesnt seem to be working :([00:08:04] <dragonbyte> oh wait[00:10:02] <dragonbyte> typo :)[00:11:11] <adaptr> well, here's your not-listening award for the day[00:12:39] <rob0> Where's my not-listening award for the day?[00:12:51] <adaptr> when were you not listening ?[00:12:56] *** sadf has joined #postfix[00:13:09] <rob0> I never listen. Just ask /dev/wife![00:13:32] <adaptr> that's just the standard husband model[00:13:39] <adaptr> I'm not overly impressed[00:18:17] *** cloxie has quit IRC[00:26:40] *** dragonbyte has quit IRC[00:31:48] *** AndrewKT has quit IRC[00:38:52] *** stephan48 has quit IRC[00:44:02] *** bturnbull has joined #postfix[00:49:12] *** plotr has joined #postfix[00:50:07] *** MaximeAD3 has joined #postfix[00:51:07] <plotr> hello guys[00:51:35] <plotr> could you enlighten me a bit on weird mail configuration I'm working on right now[00:51:53] <adaptr> if it's weird, we probably can help you make it weirder[00:52:12] <pingouin> ah ah[00:52:24] <plotr> I have to make sure that user1@domain1 will send mail from ip1, user2@domain will send mail from ip2[00:52:37] <adaptr> on the same postfix instance ?[00:52:43] <plotr> that's of course with postfix running on server with ip1 & ip2[00:52:50] <adaptr> not gonna happen[00:53:08] <adaptr> nor is it even slightly useful[00:53:18] <plotr> that's the question: as far as I understood I could run several instances but it looks like too much overhead for such a task[00:53:30] <rob0> BTW weird is almost always wrong. :)[00:53:53] <plotr> well unfortunately I'm unable to drop this requirement :)[00:53:53] <rob0> !restriction_classes[00:53:54] <knoba> rob0: "restriction_classes" : see !restriction_class[00:53:57] <rob0> !restriction_class[00:53:57] <knoba> rob0: "restriction_class" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html[00:54:40] <rob0> A requirement dictated by a clueless boss who doesn't understand how email works?[00:54:53] <plotr> something like that :)[00:54:56] <adaptr> rob0: restriction classes allow you to decide which sending IP to use ?[00:55:02] <adaptr> that's new to me[00:55:13] <plotr> is there some kind of mapping or something to instruct postfix to do just that?[00:55:18] <rob0> Sure, a combination of check_sender_access and check_client_access.[00:55:19] <adaptr> oh, wait - you can use those in a transport option, of course[00:55:25] <rob0> nono not a transport[00:55:36] <adaptr> rob0: that's only half the picture - you still have to set up completely different transports[00:55:49] <adaptr> an smtp line in master, being a transport[00:55:59] <rob0> ohhhhh is he talking about outbound from IP addresses?[00:56:06] <adaptr> yes, of course he is :)[00:56:07] <plotr> yepp[00:56:16] <rob0> Damn, no, that's really stupid.[00:56:17] <adaptr> and it's an old old non-issue[00:56:28] <adaptr> the short and medium answer are "don't do that"[00:56:45] <adaptr> the long answer is "run different instances"[00:56:55] <adaptr> the correct answer is "don't do that"[00:56:56] <rob0> Idiot bosses ... well, you might have to listen to this one, but remember: WE don't. :)[00:57:04] <plotr> just to clarify: postfix binds to many ips and I have to choose particular ip for outgoing mail (sent by postfix) depending on user's domain[00:57:22] <adaptr> plotr: we know what hte issue is, and it's a non-issue to an MTA[00:57:45] <plotr> I'm not trying to bug-report :-)[00:57:52] <adaptr> if this is "required" because of sender domains, remember that ANY MTA may be the authorized sender for ANY domain[00:57:54] <rob0> This is what happens when unqualified people dictate policy.[00:58:19] <plotr> sometimes it's easier to rewrite MTA than policy :-)[00:58:20] <adaptr> so create an MAT-only domain, and put your mail systems in there, then make them the MX for any and all domains you have[00:59:17] <plotr> I was just thinking that it might be easier way to workaround this non-issue but I guess I have to stick to instances[00:59:24] <plotr> thanks anyway guys :)[01:07:45] *** war9407 has quit IRC[01:09:04] *** Skaag has quit IRC[01:09:05] <cbsd> Aug 22 15:07:32 server postfix/smtpd[21738]: connect from unknown[192.168.1.2][01:09:05] <cbsd> Aug 22 15:07:32 server postfix/smtpd[21738]: warning: unknown smtpd restriction: "reject_unkown_helo_hostname"[01:09:05] <cbsd> Aug 22 15:07:32 server postfix/smtpd[21738]: NOQUEUE: reject: RCPT from unknown[192.168.1.2]: 451 4.3.5 Server configuration error; from=<cbsd at server dot mine.yes> to=<account at server dot mine.yes> proto=ESMTP helo=<shadowlitesp3>[01:09:13] <cbsd> i keep on getting the mail bounce[01:09:23] *** Skaag has joined #postfix[01:09:49] <cbsd> that's my log... it says unkown_helo_hostname but i added shadowlitesp3 to my helo_access[01:09:57] <cbsd> any idea[01:10:12] <adaptr> UNKOWN ?[01:10:34] <adaptr> you forgot to load mod_speling[01:10:47] <cbsd> fuck[01:10:51] <cbsd> unknown[01:11:03] <cbsd> he he he im not english xD[01:11:57] <cbsd> adaptr but to my helo_access i have to add the shadowlitesp3 ? could i just add the ip 192.168.1.2?[01:13:32] *** muh2000 has joined #postfix[01:13:49] <adaptr> I have no idea what you think the problem is[01:13:52] <adaptr> but it isn't[01:14:04] <adaptr> [2009-08-23 01:09] <cbsd> Aug 22 15:07:32 server postfix/smtpd[21738]: warning: unknown smtpd restriction: "reject_unkown_helo_hostname"[01:14:08] <adaptr> that is the problem[01:14:10] <adaptr> fix it[01:14:17] <rob0> You know what *I* think the problem is, I'm sure. :)[01:14:25] <adaptr> it's me again, isn't it ?[01:14:27] <cbsd> Aug 22 15:14:11 armada postfix/smtpd[1070]: NOQUEUE: reject: RCPT from unknown[192.168.1.2]: 450 4.7.1 <shadowlitesp3>: Helo command rejected: Ho[01:14:31] <cbsd> i fix that allready[01:14:47] <adaptr> and it did not occur to you that that might be useful to mention ?[01:15:13] <cbsd> hehehe :)[01:15:21] <adaptr> I don't see anything funny[01:15:38] * adaptr jealously guards his pony[01:15:44] <adaptr> you can't have him! he's mine![01:15:44] *** Zerberus has quit IRC[01:16:10] <rob0> !pony[01:16:10] <knoba> rob0: "pony" : http://www.brainfuel.tv/wp-content/uploads/2006/03/nopony.jpg[01:20:10] <cbsd> i would like for example reject: RCPT from unknown[192.168.1.2]: 450 4.7.1 <shadowlitesp3>: Helo command rejected: Host not found ... so is saying shadowlitesp3 is not found but to do the same but checking from : user at my dot domain.yes to: otheruser at my dot domain.yes is from is not from @my.domain.yes and the mail is not to * at my dot domain.yes it will reject it[01:20:16] <cbsd> is that possible?[01:20:50] <adaptr> user@whatever is not a hostname[01:20:57] <adaptr> you're not making a lot of sense[01:21:22] <cbsd> is only local use[01:21:32] <cbsd> @local.domain[01:21:53] *** webchaos has quit IRC[01:21:53] <adaptr> postfix will do strict checking on the existence of the hostname used in the client's HELO command IFF reject_unknown_helo_hostname is present in any restriction[01:22:03] <adaptr> if that's not what you want, then remove it[01:22:39] <adaptr> the RFC requires it, but many clients don't honour it, so you can disable it if you need to[01:23:22] <plotr> guys, some additional hints about what should I do after "postmulti -e init"?[01:23:32] <adaptr> send mail ?[01:24:19] <plotr> just change bind* options and remove "authorized_submit_users" and "master_service_disable" for each instance?[01:24:40] <plotr> adaptr: postfix manual disagree :)[01:24:55] <adaptr> it always does[01:25:28] <cbsd> adaptr: but how can i restrict or forbid to send outgoing mail to any other domain, only accepte incoming and outgoing mail from localdomain[01:26:23] <adaptr> !basic[01:26:24] <knoba> adaptr: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[01:26:47] <rob0> It occurs to me that cbsd might not be an idiot, but rather, lacking in ability to read English. If that's so, I would recommend something like this: http://www.google.com/search?hl=es&as_q=postfix+documentation&lr=lang_es[01:27:11] *** pingouin has quit IRC[01:27:16] *** hooch has quit IRC[01:27:34] <rob0> plotr, I haven't played with postmulti yet.[01:27:49] <plotr> anyone who did?[01:28:08] <plotr> I just want to be sure that multiple instances will not conflict[01:28:38] <plotr> to do so I have to set all the bind_something options correctly[01:29:11] <plotr> where can I find list of options which instruct some postfix process to bind to some ip?[01:29:51] <adaptr> !master[01:29:51] <knoba> adaptr: "master" : http://www.postfix.org/master.5.html[01:29:57] <adaptr> that's where, basically[01:30:19] <plotr> 10x![01:30:23] *** webchaos has joined #postfix[01:31:13] <plotr> hmm... what about smtp_bind_address in main.cf? looks like I have to track it too?[01:32:39] <thumbs> 10 times what?[01:33:07] <plotr> am I understood right that I have to set "inet_interfaces" to different ip for different instances to avoid conflicts between them?[01:33:27] <plotr> thumbs: ignore it - just a kind of slang :)[01:40:12] *** nuonguy has quit IRC[01:41:47] *** pingouin has joined #postfix[01:44:55] <plotr> am I right that "smtp_bind_address" and "inet_interfaces" are the only two options which tells postfix which ip address amongst all available to bind onto?[01:45:07] <plotr> or there is some other options I'm missing?[01:46:35] *** loddafnir has quit IRC[01:58:05] *** cps0 has joined #postfix[01:58:36] <rob0> smtp_bind_address is outgoing-only[01:58:49] <rob0> !inet_interfaces[01:58:49] <knoba> rob0: "inet_interfaces" : a configuration parameter in the main.cf: The network interface addresses that this mail system receives mail on. By default, the software claims all active interfaces on the machine. The parameter also controls delivery of mail to user at [ip dot address]. If your server does not react to connection attempts on a certain interface you should check this setting.[02:02:31] *** Zerberus has joined #postfix[02:04:59] *** AndrewKT has joined #postfix[02:05:52] *** andrewfree has joined #postfix[02:07:58] <plotr> rob0: yeah, 1 in & 1 out... is that all or the are other possible source for conflicts between different postfix instances runnig on the same host?[02:21:35] *** wdp has quit IRC[02:24:45] *** Southron has left #Postfix[02:35:17] *** hever has quit IRC[02:36:49] *** GoGi has quit IRC[02:45:36] *** higuita has quit IRC[02:49:56] *** nuonguy has joined #postfix[02:55:46] *** plotr has left #postfix[02:57:19] *** dragonheart has joined #postfix[02:58:09] *** timotiCK has joined #POSTFIX[03:04:52] *** Zerberus has quit IRC[03:07:09] *** cbsd has quit IRC[03:16:52] *** hooch has joined #postfix[03:18:49] *** bturnbull has quit IRC[03:19:15] *** Zerberus has joined #postfix[03:27:31] *** AndrewKT has quit IRC[03:52:34] *** Zeit|awy has quit IRC[03:52:38] *** Zeit|awy has joined #postfix[03:54:41] *** Zerberus has quit IRC[03:57:46] *** Zerberus has joined #postfix[03:59:43] *** Skaag has quit IRC[03:59:59] *** Skaag has joined #postfix[04:10:15] *** Zeit|awy has quit IRC[04:16:07] *** master_of_master has quit IRC[04:18:47] *** master_of_master has joined #postfix[04:24:32] *** nuonguy has quit IRC[05:00:42] *** shunt has quit IRC[05:02:25] *** timotiCK has left #POSTFIX[05:07:52] *** andrewfree has quit IRC[05:12:48] *** AndrewKT has joined #postfix[05:28:52] *** cps0 has quit IRC[05:30:31] *** pinoyskull has joined #postfix[05:39:36] *** jense has joined #postfix[05:55:36] *** jens_ has quit IRC[06:00:11] *** Edgan has quit IRC[06:14:30] *** Edgan has joined #postfix[06:18:15] *** Edgan has quit IRC[06:18:37] *** Edgan_ has joined #postfix[06:33:34] *** madrescher has quit IRC[06:38:10] *** nuonguy has joined #postfix[06:56:08] *** rabelais has quit IRC[07:27:25] *** dan__t has quit IRC[07:43:11] *** gerhard7 has joined #postfix[07:51:38] *** mactimes has joined #postfix[08:24:35] *** cloxie has joined #postfix[08:30:00] *** sadf has quit IRC[08:32:09] *** pinoyskull has quit IRC[08:35:12] *** dan__t has joined #postfix[08:36:44] *** gamla_kossan has joined #postfix[08:36:58] <gamla_kossan> morning ladies & gents & smizmars[08:39:16] *** kmq has joined #postfix[08:40:27] <gamla_kossan> couldn't I set mynetworks to 0.0.0.0 if I simply have set smtp to require authentication?[08:40:32] <gamla_kossan> or is this a bad idea?[08:41:27] *** Skaag has quit IRC[08:43:21] *** _bugz_ has quit IRC[08:43:36] <rob0> Sounds pretty bad to me, well, if you do the wrong correctly ... what is the real problem?[08:45:26] <gamla_kossan> well, say I have some users that want to use the smtp from home instead of just in the office - wouldn't the current mynetworks setting (being set to the office lan) stop them from doing that?[08:46:17] <rob0> !sasl[08:46:17] <knoba> rob0: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.[08:47:12] <rob0> you will be found and exploited as an open relay, if as above, you do the wrong thing correctly.[08:48:21] <gamla_kossan> but won't setting smtp to require auth protect me from being exploited?[08:49:42] <rob0> right[08:50:13] <rob0> just leave mynetworks alone (what it should be) and follow the SASL_README instructions[08:50:29] <gamla_kossan> =)[08:50:35] <rob0> or, are you planning to require AUTH from all?[08:50:42] <gamla_kossan> yeah, exactly[08:50:45] <rob0> "mynetworks ="[08:51:07] <rob0> that's how you unset things[08:51:12] <gamla_kossan> ah[08:51:30] <rob0> gtg, late here, good night.[08:51:40] <gamla_kossan> =) good night, thanks for helping[08:51:53] <rob0> (I thought you wanted mynetworks open to then world!)[08:52:03] <rob0> *the world[08:52:11] <gamla_kossan> oh but I do[08:52:28] <gamla_kossan> but I still want everyone using my mailserver to require auth[08:52:36] <rob0> no you don't, you want NO mynetworks and require AUTH :)[08:52:46] <gamla_kossan> ah ok =)[08:52:51] <rob0> bye[08:52:54] <gamla_kossan> bye![09:00:47] *** _bugz_ has joined #postfix[09:03:30] *** timotiCK1 has joined #POSTFIX[09:04:16] *** Skaag has joined #postfix[09:05:06] *** timotiCK1 has left #POSTFIX[09:06:42] *** timotiCK has joined #POSTFIX[09:12:00] *** loddafnir has joined #postfix[09:16:32] *** hanibana has joined #postfix[09:16:40] <hanibana> hi all[09:16:53] <hanibana> does anyone know about an SMTP Proxy for Linux to balance load between several back-end MTA's?[09:16:58] <hanibana> proxsmtp does not do this....[09:18:06] <hanibana> for example forward requests to MTA's based on recipient user.[09:30:33] *** ramoni has joined #postfix[09:32:16] *** glamm has quit IRC[09:39:19] *** AndrewKT is now known as AndrewKT_away[09:42:10] *** hever has joined #postfix[09:57:18] *** war9407 has joined #postfix[10:02:00] *** knoba has quit IRC[10:02:09] *** knoba has joined #postfix[10:29:38] *** denis_ has joined #postfix[10:45:42] *** timotiCK has left #POSTFIX[10:52:30] *** rcsu has joined #postfix[11:12:19] *** stephan48 has joined #postfix[11:17:02] *** rcsu has quit IRC[11:27:50] *** nomad_fr has joined #postfix[11:28:15] *** nomad_fr has quit IRC[11:32:12] *** hohum has joined #postfix[11:33:07] *** MasterOne has joined #postfix[11:33:43] *** mactimes has quit IRC[11:45:06] <Skaag> I need help setting up dkfilter... i've installed it, and I've configured master.cf as per the instructions, but outgoing mail is not being signed[11:48:24] *** Severed_Head_of_ has joined #postfix[11:55:40] *** Skaag has quit IRC[11:55:53] *** Skaag has joined #postfix[11:58:16] *** kefz---- has joined #postfix[12:00:08] *** clockspider_ has quit IRC[12:01:04] *** kefz---- is now known as hugomartin[12:02:09] <cite> rob0: I had to flame you a little on postfix-users. Nothing personal, though.[12:07:16] *** hanibana has left #postfix[12:12:10] *** AcTiVaTe has quit IRC[12:15:00] *** hugomartin has left #postfix[12:17:32] <thumbs> cite: flamer![12:20:41] <cite> thumbs: WTS fire resistant underwear![12:20:58] <MasterOne> My mailserver is on the LAN and gets NATed by the firewall-gateway-machine. The reverse DNS entry for the used IP matches the A record and FQDN of the firewall-gateway-machine. On the mailserver I have myhostname = mx.domain.tld, smtp_helo_name = gateway.domain.tld, myorigin = gateway.domain.tld. Is this the correct setup, or is myhostname used anywhere else in a critical place, that could cause problems? For the reverse lookup[12:20:58] <MasterOne> by the remote mailserver it's all about the smtp_helo_name, right?[12:22:04] *** GoGi has joined #postfix[12:23:06] *** AcTiVaTe has joined #postfix[12:30:19] *** stephan481 has joined #postfix[12:30:26] *** stephan48 has quit IRC[12:30:57] <cite> MasterOne: You need to specify the external IP address on proxy_interfaces, too.[12:31:18] <cite> MasterOne: i.e. the one that your firewall-gateway machine presents to the outside.[12:32:14] <MasterOne> cite, I already have read up on proxy_interfaces, and even asked here in this channel about it some days ago, but I still do not understand, what postfix needs to know the external IP for[12:33:32] <_ruben> to detect loops[12:34:16] <cite> MasterOne: Probably, your MX records point to the IP address of that NAT gateway, right?[12:35:45] <MasterOne> I mean, what does the external IP tell postfix concerning loop detection, if I have the FQDN of the nat machine, as well as the fqdn of the mx record (= fqdn of the mailserver) in mydestination[12:36:44] <MasterOne> cite: yes, the mx record points to the IP of the nat machine[12:37:40] <cite> MasterOne: In a scenario where Postfix is either a backup MX or has (wrong) transport maps entries, it could try to route the mail to that IP. YOu'd have a loop.[12:38:51] <cite> MasterOne: Setting proxy_interfaces doesn't hurt, and Postfix will also know how to receive mail for addresses which read like "localpart at [ip dot addre.ss.literal][12:39:00] <MasterOne> Well, I guess it does not hurt anyway to just set proxy_interfaces accordingly. It can only contain an IP address, but no FQDN, right?[12:40:56] <cite> A list of IP addresses, yes.[12:42:12] *** sophokles has joined #postfix[12:45:13] *** lysander has quit IRC[12:45:42] *** lysander has joined #postfix[12:46:20] *** Zeit|awy has joined #postfix[12:47:44] *** sophokles has quit IRC[12:57:27] *** ramoni has quit IRC[13:15:18] *** __bt has joined #postfix[13:15:38] *** poofo has joined #postfix[13:16:06] *** MasterOne has quit IRC[13:16:06] *** jense has quit IRC[13:16:06] *** Nockian has quit IRC[13:16:06] *** nb_ has quit IRC[13:16:07] *** vho has quit IRC[13:16:07] *** shasta has quit IRC[13:16:07] *** sysmonk has quit IRC[13:16:07] *** poofo_ has quit IRC[13:16:07] *** lkthomas has quit IRC[13:16:07] *** _bt has quit IRC[13:16:07] *** ikk has quit IRC[13:16:07] *** famicom` has quit IRC[13:16:07] *** Kreg-Work has quit IRC[13:16:39] *** MasterOne has joined #postfix[13:16:39] *** jense has joined #postfix[13:16:39] *** Nockian has joined #postfix[13:16:39] *** famicom` has joined #postfix[13:16:39] *** vho has joined #postfix[13:16:39] *** Kreg-Work has joined #postfix[13:16:39] *** shasta has joined #postfix[13:16:39] *** sysmonk has joined #postfix[13:16:39] *** ikk has joined #postfix[13:16:44] *** lkthomas has joined #postfix[13:17:28] *** ikk has quit IRC[13:17:47] *** ikk has joined #postfix[13:18:24] *** gerhard7 has quit IRC[13:20:16] *** Fallenou has joined #postfix[13:20:42] *** nb_ has joined #postfix[13:27:05] *** nuonguy has quit IRC[13:28:10] *** ikk has quit IRC[13:28:35] *** ikk has joined #postfix[13:57:34] *** fabounio has joined #postfix[13:58:29] *** fabounio has quit IRC[14:00:39] *** z0ran has joined #postfix[14:03:53] *** gerhard7 has joined #postfix[14:13:24] *** GoGi has quit IRC[14:14:42] *** paulez has joined #postfix[14:32:31] *** gerhard7 has quit IRC[14:46:36] *** gerhard7 has joined #postfix[15:04:39] *** dragonheart has quit IRC[15:12:15] *** bturnbull has joined #postfix[15:14:59] *** rcsu has joined #postfix[15:19:52] *** Fallenou has quit IRC[15:22:52] *** masterhumper has joined #postfix[15:22:54] *** sejo has quit IRC[15:30:54] *** timotiCK1 has joined #POSTFIX[15:43:48] *** ramoni has joined #postfix[15:44:28] *** MaximeAD3 has quit IRC[15:44:37] *** MaximeAD has joined #postfix[15:48:05] *** Faithful has quit IRC[15:54:25] *** gerhard7 has quit IRC[15:59:57] *** Muhis has joined #Postfix[16:00:46] *** MaximeAD has quit IRC[16:03:55] *** AndrewKT_away is now known as AndrewKT[16:15:50] *** Skaag has quit IRC[16:16:21] *** Skaag_ has joined #postfix[16:21:08] *** timotiCK has joined #POSTFIX[16:23:42] *** DrPepper has joined #postfix[16:27:35] *** timotiCK1 has quit IRC[16:29:34] *** gerhard7 has joined #postfix[16:31:55] <DrPepper> I know this chan is for postfix, but i wonder if anybody has had a problem with quotas in dovecot?[16:35:47] *** dalurka has joined #postfix[16:38:25] *** Fallenou has joined #postfix[16:41:44] *** AcTiVaTe has quit IRC[16:49:41] *** Twinkletoes has joined #postfix[16:51:02] <Twinkletoes> Without setting up SMTP AUTH which parameter do I need to look at to only receive messages from 1 other server?[16:52:12] <Twinkletoes> From what I can understand so far, smtpd_recipient_restrictions will allow $mynetworks and anything destined for my domain name, but I only wasnt to accept mail from oy other server[16:54:29] <DrPepper> can't you specify the serves ip under mynetworks?[16:56:57] *** Zeit|awy has quit IRC[16:57:00] *** Zeit|awy has joined #postfix[17:10:16] *** Skaag_ has quit IRC[17:13:07] *** Zeit|awy has quit IRC[17:15:32] *** lysander_ has joined #postfix[17:20:25] *** lysander has quit IRC[17:29:01] *** jtaji has joined #postfix[17:32:25] <rob0> That's the default smtpd_recipient_restrictions. If you need it to be different, change it. "smtpd_recipient_restrictions = permit_mynetworks, reject"? This is suitable for a MSA, but obviously won't work as a MX.[17:33:04] <rob0> cite, good post, a whole lot better than the fool who posted upthread.[17:38:03] <Twinkletoes> DrPepper: sorry I've only just seen your reply - thanks for that... after a bit more searching around that's exactly what I did ;)[17:41:35] *** Twinkletoes has quit IRC[17:48:33] *** lysander_ has quit IRC[17:48:48] *** GoGi has joined #postfix[17:48:58] *** lysander has joined #postfix[18:14:46] *** hparker has joined #postfix[18:15:15] *** nuonguy has joined #postfix[18:15:46] *** pingouin has quit IRC[18:18:35] *** Keizer has quit IRC[18:19:38] *** Keizer has joined #postfix[18:33:18] *** scan_ has joined #postfix[18:35:22] <scan_> hello[18:36:38] *** uqlev has joined #postfix[18:49:07] *** pingouin has joined #postfix[18:52:34] *** knoba has quit IRC[18:52:43] *** knoba has joined #postfix[18:57:10] *** GoGi has quit IRC[18:58:56] *** tylerdu has joined #postfix[19:03:27] *** knoba has quit IRC[19:03:59] *** knoba has joined #postfix[19:05:58] *** nuonguy has quit IRC[19:06:22] *** Zeit|awy has joined #postfix[19:13:00] *** tylerdu has left #postfix[19:18:57] *** Pazzo has joined #postfix[19:19:48] *** Pazzo has quit IRC[19:29:10] *** paulez has quit IRC[19:35:04] *** idle-boy has quit IRC[19:35:18] *** idle-boy has joined #postfix[19:52:09] *** karika200 has joined #postfix[19:52:37] <karika200> hi[19:53:25] <karika200> I told to my postfix, to not deliver e-mails for several recipients... I used the smtpd_recipient_restrict option[19:53:29] *** bluethundr has joined #postfix[19:53:37] <karika200> In tha database i write the lines in the next format[19:53:42] <karika200> user at server dot com REJECT[19:53:53] <karika200> and now it tells me: postmap: fatal: open database /etc/postfix/recipients.db: Invalid argument[19:54:00] <karika200> what is wrong?[20:01:05] <rob0> Failure to provide enough information to answer you. See /topic ...[20:01:08] <rob0> !welcome[20:01:08] <knoba> rob0: "welcome" : welcome to #postfix! if you're joining for the first time, or are new to irc, the first thing you'll want to do is read the channel topic (/topic). it includes crucial instructions on how to effectively ask for help here, and what data you should include with your questions. the degree of success you'll have is directly related to how effectively you're able to follow those guidelines.[20:01:51] <rob0> In this case, "postconf smtpd_recipient_restrictions" might suffice.[20:02:43] <karika200> in my main.cf I have this line:[20:02:44] <karika200> smtpd_recipient_restrictions = permit_mynetworks,[20:02:44] <karika200> check_recipient_access hash:/etc/postfix/recipients[20:03:10] <karika200> and the db looks liek this: user at example dot hu REJECT[20:03:41] <rob0> looks about right to me.[20:03:59] <karika200> yes.. me too..:\[20:04:15] <karika200> but it says invalid argument...[20:04:21] <rob0> And you got that error when you did "postmap /etc/postfix/recipients"?[20:04:45] <rob0> !db[20:04:45] <knoba> rob0: Error: "db" is not a valid command.[20:04:58] <rob0> !db_readme[20:04:58] <knoba> rob0: Error: "db_readme" is not a valid command.[20:05:11] <karika200> hmm[20:05:11] <karika200> sinuslink:/etc/postfix# postmap /etc/postfix/recipients[20:05:12] <karika200> postmap: warning: /etc/postfix/recipients, line 0: expected format: key whitespace value[20:05:52] <rob0> !learn db as Berkeley DB support in Postfix, required for hash: maps, see http://www.postfix.org/DB_README.html[20:07:12] <rob0> I thought you said "user at server dot com REJECT" lines are in /etc/postfix/recipients ??[20:07:23] <karika200> yes[20:08:03] <rob0> "key whitespace value", "user at server dot com" is key, " " is whitespace, "REJECT" is value.[20:08:23] <karika200> yes[20:08:36] <rob0> Then off to the DB_README with you.[20:09:10] <rob0> um ... one last WAG ... did you use a Unix editor on this file?[20:09:12] <Zerberus> important to edit/store the file with/as UNIX format, not Windows[20:09:21] <rob0> gmta! :)[20:09:41] <karika200> yes, I edited it with mcedit[20:09:44] <karika200> but wait..[20:09:53] <anonymous> evening sirs[20:09:53] <karika200> I deleted the db and I created it again...[20:09:56] <karika200> and now..[20:10:17] <rob0> mcedit is what I use on maps.[20:10:19] <karika200> sinuslink:/etc/postfix# postmap /etc/postfix/recipients.db[20:10:20] <karika200> sinuslink:/etc/postfix#[20:10:33] <rob0> uh ... /etc/postfix/recipients.db is NOT what I told you[20:11:06] <anonymous> *.db is the output[20:11:20] <karika200> ahh[20:11:22] <karika200> sry;][20:12:30] <karika200> hmm[20:12:45] <karika200> now, the postmap gives me no error, but the postfix won't reply :\[20:13:14] <rob0> I hate it when that happens.[20:13:53] <karika200> I too... but what is the reason?:\[20:14:34] <karika200> Aug 23 20:13:41 sinuslink postfix/smtpd[20122]: fatal: parameter "smtpd_recipient_restrictions": specify at least one working instance of: check_relay_domains, reject_unauth_destination, reject, defer or defer_if_permit[20:14:35] <karika200> ahh[20:15:08] <rob0> What was the original problem and goal here, in plain terms?[20:16:24] <karika200> The problem is a little cpmlicated.. :)[20:16:41] <karika200> I want to restrict to my users to send a mail to a specific address[20:18:06] <rob0> Why do so many people come in here with such bizarre ideas about email? :)[20:18:22] <karika200> ;][20:18:30] <karika200> because this is the support channel?:P[20:19:09] <rob0> Probably because of wacky ideas from bosses who don't understand how email should (and does) work.[20:19:49] <rob0> And I don't feel any obligation to provide that support. (Guess how much I get paid to answer questions here?)[20:20:22] <rob0> anyway, it's lunch time, bbl[20:20:50] <karika200> You get nothing for this.. I know.. but u can tell anytime that, you are fed up, and u quit..:)[20:21:02] <karika200> lunch.. I'm after dinner^^[20:21:14] <anonymous> and i'm next to bed[20:23:20] * anonymous just wonders what that address would be, to restrict _sending_ at it[20:26:59] <karika200> hmm. now the serevr is working, but my rejection is ignored... It sends the mail to the address :|[20:28:16] <anonymous> ...which only confirms that your server is doing it right[20:28:17] <anonymous> hehehe[20:29:06] <karika200> :)[20:30:32] <karika200> ahh[20:30:36] <karika200> it works! ^^[20:30:43] <karika200> thanks for the help ;][20:32:33] *** Fallenou has quit IRC[20:34:49] *** Fallenou has joined #postfix[20:35:16] *** mactimes has joined #postfix[20:37:42] *** Skaag has joined #postfix[20:41:24] *** paulez has joined #postfix[20:58:41] <karika200> byez[20:58:46] *** karika200 has quit IRC[21:09:12] *** gerhard7 has quit IRC[21:12:06] *** Filbert- has quit IRC[21:27:51] *** samix has joined #postfix[21:29:35] <samix> hey[21:30:05] <samix> i have a queueid .. how do i not view the mail with the queue id[21:30:12] <samix> postcat -v queueid ?[21:30:32] <samix> this dosent seem to be showing me what i want[21:32:37] *** Filbert- has joined #postfix[21:38:56] *** vivek has joined #postfix[21:41:00] <samix> postcat -q is the answer[21:42:06] <_ruben> "how do i not view" .. then what *do* you want to view?[21:47:01] <adaptr> Glod only knobas[21:48:02] <scan_> is there a way to generate a new main.cf configuration file?[21:48:40] <_ruben> just use your favorite editor[21:49:03] <scan_> but i dont have the configurarion file anymroe[21:49:33] <adaptr> so "generate" in this case means.. what ?[21:49:45] <_ruben> starting from scratch isnt such a hard thing to do[21:49:50] <scan_> get the default file[21:49:58] <adaptr> if he has no main.cf, starting from scratch is the only option[21:50:03] <adaptr> scan_: there is none[21:50:07] <_ruben> use your favorite package manager to reinstall postfix[21:50:08] <adaptr> all options have defaults[21:53:46] *** plotr has joined #postfix[21:57:48] *** Muhis has quit IRC[21:58:48] <plotr> hello guys... I need some help to resolve conflicts with multi-instance configuration: I set "smtp_bind_address=my.ip.addr" in /etc/postfix-inst2/main.cf but I still got "postfix-inst2/master[11597]: fatal: bind 0.0.0.0 port 25: Address already in use"[21:59:01] <plotr> any clues why option is ignored?[21:59:36] <samix> plotr: inet_interfaces[21:59:49] *** uqlev has quit IRC[22:02:13] <plotr> samix: holy fucken crap... second admin![22:02:20] <plotr> I'll execute him[22:02:27] <plotr> sorry for idiotic question[22:04:30] <rob0> Forgiven, if you post video of the execution.[22:04:40] <adaptr> and make it a funny one[22:04:47] <adaptr> youtube jades us all[22:05:18] <samix> i am guilty of asking one just before plotr, but answering him is my repentence[22:06:07] <samix> _ruben: that was a typo s/not/now[22:06:48] <plotr> :)[22:07:19] *** plotr has left #postfix[22:07:47] *** hever has quit IRC[22:10:07] *** vak has joined #postfix[22:10:23] <vak> hey[22:11:03] <vak> I've just registered my home ubuntu server via DynDNS[22:11:18] * anonymous gasps[22:11:25] <vak> I've tried to send a mail to my gmail account and... failed :)[22:11:45] <adaptr> yes[22:11:57] <vak> gmail doesn't seem to like the IP I've got from my ISP :-/[22:12:13] <adaptr> gmail doesn't like any residential IPs[22:12:16] <vak> what are the RightWay to fix the situation?[22:12:32] <vak> "gmail is evil"[22:12:32] <_ruben> use your isp's mail relay[22:12:35] <adaptr> register with them, setup SPF and/or DKIM etc[22:12:43] <adaptr> or, use your ISPs relay[22:12:52] <anonymous> use some existing relay[22:12:54] <adaptr> I prefer not too though[22:13:50] <vak> hm, I've got perhaps SMTP from my provider, but hardly SPF / DKIM[22:14:52] <adaptr> you don';t actually know what those are, do you ?[22:14:59] <vak> yep :)[22:15:36] <vak> I dont wanna waste your time and go read about it![22:16:00] <samix> SPF: Spammer protective facade[22:16:01] <anonymous> afair, that very gmail provides smtp w/auth[22:16:59] <adaptr> it's one of the few that do, yes - but you still have to register[22:17:18] <adaptr> yoohhoo/snotmail etc don't offer such niceties, and you're reduced to DKIM and/or relaying[22:17:22] *** jtaji has quit IRC[22:18:26] <vak> adaptr: I understand more now, but still ...a little :)[22:19:16] <vak> adaptr: do you mean, gmail could let me use SPF / DKIM to authorize me (or my server)?[22:20:01] <adaptr> both SPF and DKIM are mechanisms to validate to other MTAs that your machine is, in fact, authorised to send mail for your domain[22:20:17] <adaptr> SPF is IP-based, DKIM is signed AFAIK[22:20:18] *** Skaag has quit IRC[22:20:37] <rob0> !fcrdns[22:20:37] <knoba> rob0: "fcrdns" : http://en.wikipedia.org/wiki/Forward_Confirmed_reverse_DNS : $myhostname should resolve to your IP address, which in turn should resolve to $myhostname. This is very important if you want big sites to accept your mail. If you can't have it from your ISP, see !relayhost .[22:21:09] <vak> adaptr: aha... it means that SPF will hardly work out for me. My ISP gives me regularly a new IP[22:21:42] <adaptr> true[22:21:45] *** plotr has joined #postfix[22:22:05] *** plotr has left #postfix[22:22:16] *** scan_ has quit IRC[22:22:16] <vak> adaptr: and would you mean that DKIM would be a way to go with google?[22:22:51] <adaptr> that's what people do, from what I've seen here[22:22:59] <vak> BTW, if it helps, I need to exchange emails only to me and another gmail accounts[22:23:26] <vak> adaptr: many thanks for the hint!![22:23:48] <vak> anonymous: thanks you too![22:23:55] *** scan_ has joined #postfix[22:26:21] *** loddafnir has quit IRC[22:30:34] *** scan_ has quit IRC[22:39:10] *** sadf has joined #postfix[22:42:11] *** denis_ has quit IRC[22:43:03] *** war9407 has quit IRC[22:44:20] *** timotiCK has quit IRC[22:44:57] *** cloxie has quit IRC[22:50:38] *** Roconda_ is now known as Roconda[23:02:44] *** stephan481 has quit IRC[23:03:49] *** magyar has joined #postfix[23:04:31] *** vivek has quit IRC[23:06:54] *** Ugly_Duck has joined #postfix[23:08:02] *** pingouin has quit IRC[23:22:57] *** wdp has joined #postfix[23:30:28] *** pingouin has joined #postfix[23:32:17] *** Skaag has joined #postfix[23:37:56] *** Skaag_ has joined #postfix[23:39:50] *** kmq_ has joined #postfix[23:43:53] *** Skaag has quit IRC[23:46:39] *** kmq has quit IRC[23:46:45] *** kmq_ is now known as kmq[23:59:01] *** kmq has quit IRC