August 24, 2009 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
August 24, 2009 [00:04:30] *** mactimes has quit IRC[00:06:24] *** MasterOne has quit IRC[00:13:31] *** Skaag_ has quit IRC[00:13:35] <hohum> hey[00:13:41] <hohum> I'm having problems with my postfix install[00:13:44] <hohum> can someone help me?[00:14:11] <hohum> Aug 23 07:28:07 apollo postfix/trivial-rewrite[32340]: fatal: ldap:acceptdomains(0,lock|fold_fix): table lookup problem[00:14:16] <hohum> I don't knwo what that means or how to fix it[00:14:25] <hohum> obviously it isn't communicating with my ldap server properly[00:15:04] *** GoGi has joined #postfix[00:21:25] *** z0ran has quit IRC[00:25:31] *** hparker has quit IRC[00:28:26] *** Zblakany has quit IRC[00:29:12] <hohum> :([00:32:47] <vak> adaptr: bad thing[00:33:16] <vak> DynDNS doesn't seem to support TXT record type for DNS.[00:33:35] <vak> one should switch to "CustomDNS"[00:34:22] * hohum sighs and shrugs[00:37:46] <rob0> hohum, it's either a bad query (see LDAP_README) or a problem on the LDAP side (not a #postfix issue.)[00:38:11] <rob0> s/LDAP_README/LDAP_README and ldap_table(5)/[00:38:49] <hohum> well I ran the query filter through ldapsearch and it worked[00:39:01] <hohum> and I'm binding my rootdn at the moment, so it isn't an ldap config issue[00:39:14] <hohum> is there a way to get more specific information out of postfix as to what's going on?[00:39:20] <hohum> that's a very non-specific error message[00:39:34] <hohum> not very helpful at all[00:39:35] <rob0> !postmapq[00:39:35] <knoba> rob0: "postmapq" : You can check your lookups with the postmap command. Example: if you defined "transport_maps = mysql:/etc/postfix/transport.cf" you may check this mapping by running "postmap -q domain.com mysql:/etc/postfix/transport.cf" and see if it works.[00:39:39] <rob0> !verbose[00:39:39] <knoba> rob0: "verbose" : You probably do not need verbose logging, but in rare cases the extra detail can assist in debugging. To set verbose logging add a -v after the command name (such as smtpd) in master.cf, then 'postfix reload' after that.[00:39:59] <hohum> gracias[00:40:10] <rob0> in this case it appears you might want trivial-rewrite to have the -v.[00:41:53] *** Edgan_ is now known as Edgan[00:44:33] *** Code_Bleu_ has joined #postfix[00:45:20] *** rcsu has quit IRC[00:47:13] <Code_Bleu_> my /etc/postfix/access is not REJECTing emails. I have added smtpd_client_restrictions = check_client_access hash:/etc/postfix/access, reject to /etc/main.cf, and I have added 10.0.0 REJECT and 127.0.0.1 REJECT to /etc/postfix/access...did a postmap /etc/postfix/access and service postfix restart[00:47:39] <hohum> the extra logging goes where?[00:47:40] <hohum> syslog?[00:47:46] <hohum> not in /var/log/messages[00:48:15] <hohum> rewrite unix - - n - - trivial-rewrite -v[00:48:33] <hohum> and I did the postfix reload[00:48:52] <Code_Bleu_> why is it not rejecting emails?[00:52:53] <rob0> What mail did you expect it to reject? See /topic, we can't read your mind.[00:53:52] <rob0> hohum, it goes to the same place as the non-verbose logs.[00:54:19] <rob0> Um, /etc/main.cf ... ?[00:54:58] <Code_Bleu_> well if i have 127.0.0.1 set to REJECT and the only other network address it is on 10.0.0 set to REJECT as well, why would it not REJECT EVERYTHING?[00:57:48] *** greenchicken has joined #postfix[00:57:50] <rob0> check_client_access checks the CLIENT IP, not the SERVER's IP.[00:58:53] <Code_Bleu_> ok, and if i have 10.0.0 why would that not include the whole subnet?[00:59:08] <hohum> so[00:59:17] <hohum> that produces no extra logging output :)[00:59:24] <Code_Bleu_> server is 10.0.0.202 workstation 10.0.0.12...so why when i send email from client it doesnt reject it?[01:02:53] <rob0> hohum: did you try postmap -q as I suggested?[01:03:44] <hohum> didn't see that suggestion[01:03:45] <hohum> sorry[01:03:49] * hohum scrolls up[01:05:19] <Code_Bleu_> found my error. It was a typo.. I had smptd_client_restrictions instead of smtpd_client_restrictions[01:07:23] <hohum> interesting[01:07:24] <hohum> # postmap -q corbe.net ldap:acceptdomains[01:07:24] <hohum> postmap: warning: dict_ldap_open: acceptdomains: Fixed query_filter (associatedDomain=*) is probably useless[01:07:27] <hohum> postmap: warning: dict_ldap_lookup: Search error 50: Insufficient access[01:09:03] <hohum> almost like it isn't binding the DN I tell it to bind[01:13:03] *** magyar has quit IRC[01:13:11] *** magyar has joined #postfix[01:25:25] *** pingouin has quit IRC[01:31:19] *** samix has quit IRC[01:31:58] *** samix has joined #postfix[01:32:46] *** andrewfree has joined #postfix[01:34:33] *** seekwill has joined #postfix[01:37:44] *** andrewfree has quit IRC[01:42:55] *** GoGi has quit IRC[01:44:01] *** pingouin has joined #postfix[01:51:30] *** hohum has quit IRC[01:53:42] *** seekwill has quit IRC[01:54:08] *** Fallenou has quit IRC[01:54:16] *** hohum has joined #postfix[01:54:54] *** pingouin has quit IRC[01:59:34] *** hohum has quit IRC[02:03:02] *** jtaji has joined #postfix[02:03:49] *** pingouin has joined #postfix[02:06:59] *** hohum has joined #postfix[02:13:32] *** emcepe has joined #postfix[02:17:36] *** vak has quit IRC[02:20:04] *** bluethundr has quit IRC[02:20:37] *** Zeit|awy has quit IRC[02:20:40] *** Zeit|awy has joined #postfix[02:30:19] *** mcp has quit IRC[02:30:19] *** emcepe is now known as mcp[02:34:07] *** CrazyFoam has quit IRC[02:35:51] *** bluethundr has joined #postfix[02:36:32] *** Zeit|awy has quit IRC[02:38:36] *** _marix has joined #postfix[02:43:47] *** will has joined #postfix[02:53:53] *** amrit|wrk is now known as amrit[03:00:52] *** huey23 has joined #postfix[03:01:19] *** eanxgeek has joined #postfix[03:01:41] <hohum> I'm still having the same issues[03:01:47] <hohum> :([03:05:18] *** wdp has quit IRC[03:06:56] <hohum> why is postfix ignoring the fact that I'm TELLING it to bind a DN?[03:07:38] *** ramoni has quit IRC[03:07:54] *** ramoni has joined #postfix[03:08:34] <greenchicken> hohum: using inet_interfaces ?[03:09:03] <greenchicken> did you restart postfix and not just reload it[03:10:02] <huey23> is this message general or specific to a certain problem?: lost connection with x.x.x.x[x.x.x.x] while receiving the initial server greeting[03:10:29] <hohum> I did restart it[03:10:45] <hohum> # postmap -q corbe.net ldap:acceptdomains[03:10:46] <hohum> postmap: warning: dict_ldap_lookup: Search error 50: Insufficient access[03:10:59] <hohum> yet I'm specifically telling it to bind my root DN[03:11:05] <hohum> I don't get it[03:11:17] <hohum> the query filter works, because I washed it through ldapsearch[03:12:56] * hohum sighs[03:13:10] <hohum> this is frustrating[03:14:32] <greenchicken> i'd guess it not using the authentication to bind to the ldap server for some reason. I haven't done ldap stuff for a while though[03:14:32] <hohum> I'm starting to remember why I was avoiding postfix to begin with[03:15:10] <greenchicken> dispare won't help you solve it. postfix ldap can work[03:15:29] <hohum> "can" isn't helpful. I need to get this running[03:16:20] <greenchicken> increase you logging message[03:16:51] <hohum> did already[03:16:59] <hohum> not helpful[03:17:34] <hohum> Aug 23 15:47:45 apollo postfix/trivial-rewrite[35464]: fatal: ldap:acceptdomains(0,lock|fold_fix): table lookup problem[03:17:47] <hohum> that's with trival-rewrite -v in my master.cf[03:18:36] <greenchicken> does specifing the full path to acceptdomains generate a different error?[03:18:48] <greenchicken> the file permissions on that file is open?[03:18:55] <hohum> not a file[03:19:36] *** ming_zym has joined #postfix[03:19:45] <hohum> http://www.pastebin.ca/1541080[03:20:32] <hohum> "acceptdomains_bind = yes[03:20:35] <hohum> "[03:20:42] <hohum> should force it to bind, no?[03:20:52] <hohum> and if it's binding to the root DN there should be no permissions issues[03:20:59] <hohum> but it's refusing to bind[03:21:13] <hohum> and I'm not going to open my LDAP server up to anonymous requests[03:21:17] <hohum> because that's just stupid[03:21:22] <greenchicken> maybe i'm missing something but I thought the arguement to ldap: was a filename containing the directives[03:21:28] <hohum> I'd rather switch to an MTA that doesn't totally suck[03:21:50] <hohum> maybe[03:21:52] <hohum> uhm[03:21:53] <hohum> hmm[03:22:27] <hohum> so I should what, put all the acceptdomain_* attribs into a file called "acceptdomains"?[03:22:50] <greenchicken> yes and remove the acceptdomain_ prefix[03:22:54] <greenchicken> in the file[03:24:04] <greenchicken> and you don't need to open ldap up to anonymous queries. it does work with binds (that was how I last did it)[03:24:12] <hohum> okay[03:24:13] <hohum> well[03:24:18] <hohum> postmap still fails[03:24:29] <hohum> maybe trivial-rewrite won't[03:25:06] <hohum> nope[03:25:08] <hohum> same thing[03:25:09] <hohum> same error[03:25:35] <greenchicken> put the full path of accepteddomains would be my first guess[03:26:14] <greenchicken> so the accepteddomains file just contains bind= host= etc...[03:26:16] <greenchicken> ?[03:31:20] <greenchicken> dynamicmaps.cf contains ldap?[03:39:46] *** eanxgeek has quit IRC[03:40:58] *** Vince42 has quit IRC[03:41:18] *** Vince42 has joined #postfix[03:43:15] <hohum> fuck it, qmail it is[03:46:13] *** Vince42 has quit IRC[03:47:00] *** will has quit IRC[03:47:19] <rob0> Bye.[03:49:05] *** Vince42 has joined #postfix[03:51:51] *** Vince42 has quit IRC[03:55:17] *** samix has quit IRC[03:59:53] *** Vince42 has joined #postfix[04:01:13] *** Vince42 has quit IRC[04:01:30] *** Vince42 has joined #postfix[04:10:36] *** master_of_master has quit IRC[04:13:11] *** master_of_master has joined #postfix[04:17:39] <hohum> woot[04:17:41] <hohum> I fixed it[04:26:11] <greenchicken> postfix or qmail?[04:26:56] <greenchicken> hohum: which part of your config did you change?[04:36:04] <hohum> I found something interesting burried deep in the man pages[04:36:13] <hohum> the fact that LDAP version defaults to 2 in postfix[04:36:31] <hohum> just had to set *_version=3 in my ldap config bits[04:36:42] <hohum> the bind issue went away[04:36:44] <hohum> as did other issues[04:37:02] <hohum> and I'm trying to avoid having to maintain another qmail installation[04:40:09] <hohum> can someone point me in the right direction? How should the maildir layout look like?[04:40:54] *** andrewfree has joined #postfix[04:42:01] <greenchicken> hohum: as long as the directory exists the delivery of an email will create the right subdirectories[04:43:24] <hohum> coolio[04:43:39] *** bturnbull has quit IRC[04:43:44] <greenchicken> once a deliver occurs it shoud contain cur/new/tmp directories with subfolder (if any) under .foldername (depending on delivery tool i think)[04:47:52] *** huey23 has quit IRC[04:50:02] <hohum> so if I have mailMessageStore: corbe.net/dcorbe/[04:50:08] <hohum> do I need the trailing /?[04:51:42] <thumbs> !mysql[04:51:43] <knoba> thumbs: "mysql" : http://www.postfix.org/MYSQL_README.html is helpful in configuring postfix to talk to a mysql server.[04:55:27] <hohum> sweet[04:55:30] <hohum> it works like a charm[04:55:31] <hohum> <3[04:58:17] *** TheColonial has joined #postfix[04:58:56] <TheColonial> hi guys, i'm having trouble with my new postfix installation. after setting itup, i try and "telnet localhost 25" and do the usual basic testing of stuff. i can connect, but i get no response codes at all from postfix.[04:59:03] <TheColonial> can someone please help me figure out what the go is here?[04:59:09] <TheColonial> i've disabled tls in the main.cf file[05:00:18] <Dominian> !logs[05:00:19] <knoba> Dominian: "logs" : postfix logs to the mail facility of syslog. Something like grep -i `postconf -h syslog_facility` /etc/syslog.conf or grep -rl `postconf -h syslog_name` /var/log/* should tell you where logs are going. also see !have2mung[05:01:25] *** sadf has quit IRC[05:01:39] <rob0> !welcome[05:01:39] <knoba> rob0: "welcome" : welcome to #postfix! if you're joining for the first time, or are new to irc, the first thing you'll want to do is read the channel topic (/topic). it includes crucial instructions on how to effectively ask for help here, and what data you should include with your questions. the degree of success you'll have is directly related to how effectively you're able to follow those guidelines.[05:02:03] <Dominian> bah.. always with the "welcome"[05:02:43] *** cloxie has joined #postfix[05:03:11] <rob0> :)[05:03:54] <thumbs> !rob0[05:03:54] <knoba> thumbs: "rob0" : a pathetic bot that reacts to newly joined users with reciting the !basic factoid :)[05:04:10] <rob0> s/basic/welcome/[05:06:24] *** LinuxCode has joined #postfix[05:11:53] <thumbs> man it feels like 25 degrees in my appartment[05:15:59] <rob0> nearest wx reporting station to me was reporting 17 deg @ :53.[05:16:28] <rob0> but here in the house it's well over 20, maybe 22[05:19:32] <thumbs> ooo, this VPS has 5 IP aliases :)[05:23:05] *** TheColonial has left #postfix[05:37:37] *** jens_ has joined #postfix[05:37:52] *** jense has quit IRC[05:42:43] *** Vince42 has quit IRC[05:43:01] *** Code_Bleu_ has quit IRC[05:44:34] *** Vince42 has joined #postfix[05:52:31] *** webchaos has quit IRC[05:54:38] *** webchaos has joined #postfix[05:54:40] *** bluethundr has quit IRC[05:55:53] *** bhagat has joined #postfix[06:00:48] *** timotiCK has joined #POSTFIX[06:08:19] *** saurabhb has joined #postfix[06:20:02] *** webtango has joined #postfix[06:26:31] *** ramoni has quit IRC[06:30:11] *** webchaos has quit IRC[06:35:19] *** LinuxCode has quit IRC[06:45:09] <thumbs> !dovecot[06:45:09] <knoba> thumbs: "dovecot" : http://www.dovecot.org/ : IMAP/POP3 server software with emphasis on security; recent versions can also provide SASL AUTH for Postfix 2.3+.[06:48:52] <lkthomas> guys[06:49:21] <lkthomas> is there have any smtp proxy which could help to log the commands which user sent out ?[06:53:47] <anonymous> any command from any user every moment of time?[06:54:02] <anonymous> if not, tcpdump will do[06:55:00] <lkthomas> hmm[06:55:15] <lkthomas> tcpdump seems complex[06:55:26] <lkthomas> we need to write massive script to do log filtering[06:57:57] <anonymous> then no[06:58:48] <anonymous> i don't know any smtp proxies that could give you such atomic logging[07:00:49] <greenchicken> lkthomas: in postfix debug_peer_list = {userip} and debug_peer_level = 2/3[07:00:54] <greenchicken> 2 or 3[07:20:06] *** shinao1 has joined #postfix[07:21:01] *** digitalmortician has joined #postfix[07:36:51] *** amrit is now known as amrit|zzz[07:45:11] *** iresh123 has joined #postfix[07:46:06] <iresh123> hi i am new to postfix[07:46:24] <greenchicken> postfix welcomes you :-)[07:46:49] <iresh123> can anyone say how to add relay_recipient_maps to search in ldap server and get the results[08:05:46] <greenchicken> iresh123: have you read http://www.postfix.org/LDAP_README.html[08:06:56] <greenchicken> another person got stuck with ldap because it defaults to version 2. if using version 3 set the version explictly[08:10:55] *** xabbuh has joined #postfix[08:13:03] <iresh123> greenchicken : i am using openldap-2.3.40[08:13:44] <greenchicken> the version 2/3 is the ldap protocol version rather than the openldap version.[08:13:47] *** shinao1 has quit IRC[08:18:51] <iresh123> greenchicken: ok soo i can i find the version then. and also i have to configure the relay_recipient_maps to look up frm a ldap server can you send me the easiest way to do that?>[08:20:14] <greenchicken> ok so you'll have a ldap:/etc/postfix/recipient_relay.cf in relay_recipient_maps[08:20:46] <greenchicken> /etc/postfix/recipient_relay.cf will contain the ldap config options to bind and search for there recipient user[08:21:09] <greenchicken> i'm assuming you've set relay_domains to what domain you're relaying[08:21:39] <greenchicken> use postmap -q recipeient at domain dot com ldap:/etc/postfix/recipient_relay.cf to check your ldap directives are right[08:24:08] *** sadf has joined #postfix[08:25:38] <iresh123> greenchicken: can you give me a sample recipient_relay.cf?[08:26:20] *** Alagar has joined #postfix[08:26:44] <greenchicken> http://www.pastebin.ca/1541280[08:27:06] <greenchicken> it more aimed at returning domain names but the same principles apply[08:27:37] *** freijie has joined #postfix[08:29:50] *** cloxie has quit IRC[08:34:25] *** kmq has joined #postfix[08:40:29] *** kmq_ has joined #postfix[08:40:50] *** kmq has quit IRC[08:40:54] *** kmq_ is now known as kmq[08:42:31] <iresh123> greenchicken: ok[08:42:37] <iresh123> greenchicken: ill check that[08:47:23] *** doomas_work has joined #postfix[09:08:28] *** brancaleone has joined #postfix[09:08:40] *** MasterOne has joined #postfix[09:10:21] *** SpiceMan has joined #postfix[09:10:52] <SpiceMan> what should I read to know how to configure mailboxes without needing a user in the *nix box?[09:13:32] *** masterhumper is now known as sejo[09:18:42] <kmq> !tell SpiceMan virtual[09:19:23] <kmq> knoba sick?[09:19:34] <kmq> SpiceMan: you want virtual delivery[09:19:45] <kmq> www.postfix.org/VIRTUAL_README.html[09:24:06] *** miconof has joined #postfix[09:26:55] <SpiceMan> thanks[09:27:57] *** polaru has joined #postfix[09:28:05] <SpiceMan> another question. I have demo at domain dot com demo at domain dot com,demo@register.domain.com[09:28:12] <SpiceMan> and catch register with a different transport[09:28:44] <SpiceMan> if I were to make a virtual mailbox, I would have to change that?[09:29:16] <SpiceMan> or is "NEVER list a virtual MAILBOX domain name as a virtual ALIAS domain!" not talking about this[09:29:33] <SpiceMan> (that was in the /etc/postfix/virtual file)[09:44:30] *** Zeit|awy has joined #postfix[09:45:11] *** higuita has joined #postfix[09:48:34] <kmq> I am not sure I understand you correctly. You would like @example.com to be virtual, and register.example.com to go out via some other transport ?[09:49:27] *** Robbie_ has joined #postfix[09:51:19] *** harobed has joined #postfix[09:52:40] <lkthomas> we are getting headache as we want to log everything from client to generate a per user based report[09:54:52] *** wdp has joined #postfix[09:55:11] *** higuita has quit IRC[09:57:02] *** war9407 has joined #postfix[09:59:25] *** higuita has joined #postfix[10:01:39] *** ekkis has joined #postfix[10:01:46] * ekkis issues greetings[10:02:16] <ekkis> does anyone here know how to customize the error message sent out when an e-mail received exceeds the allowed limit?[10:04:27] <wdp> i remember there was a way[10:04:33] <wdp> to make templates for this stuff[10:04:38] <wdp> but i dont remember how[10:04:39] <wdp> :>[10:04:58] <ekkis> it's hard to google for that kind of stuff[10:05:17] <ekkis> I want to customise the message to let the user know that they can use a dropbox[10:05:58] <SpiceMan> kmq: yes[10:06:42] *** denis has joined #postfix[10:06:53] <SpiceMan> kmq: what I'm doing now is if that a mail comes to foo at bar dot com, aliases it to foo at register dot bar.com[10:07:20] <SpiceMan> made a transport for register.bar.com (a registration script when receiving empty mails)[10:07:51] <SpiceMan> s/is if that a/is that if a /[10:08:08] *** Pazzo has joined #postfix[10:10:03] <kmq> and now you want foo at bar dot com not go to foo at register dot bar.com anymore ?[10:10:04] *** andrewfree has quit IRC[10:10:07] <hohum> hey[10:10:20] <hohum> does the postfix sendmail(1) replacement need to be run setuid?[10:10:38] <SpiceMan> I want it to still doing so[10:10:51] <SpiceMan> after I change bar.com to a virtual mailbox[10:11:00] <SpiceMan> *do so[10:11:01] <wdp> ekkis, i'll search later, if youre still here and didnt found it i tell u[10:11:30] <SpiceMan> since the docs say "NEVER list a virtual MAILBOX domain name as a virtual ALIAS domain!"[10:11:39] <ekkis> wdp: thx mate. if you want to drop me an offline: e at arix dot com[10:11:51] <SpiceMan> I'm wondering if that means I cant do it[10:11:58] <lkthomas> actually[10:12:16] <lkthomas> when a user said they received an email, but didn't show up on inbox, how do you prove it ?[10:13:29] <wdp> ekkis, you understand german, no or?[10:13:33] <kmq> SpiceMan: you want _all_ mail that goes to @example.com also go to @register.example.com _and_ also to a virtual mailbox ?[10:13:49] <ekkis> not particularly well[10:13:54] <lkthomas> anyone hosting a heavy traffic email server now ?[10:14:17] <ekkis> why do you ask?[10:14:48] <wdp> http://www.postfix.org/bounce.5.html @ ekkis youre searching for this one?[10:14:51] <lkthomas> please check my previous question[10:15:21] * ekkis peeks[10:15:24] <hohum> does the postfix sendmail(1) replacement need to be run setuid?[10:15:50] <kmq> you should not put it in MAILBOX and ALIAS, because MAILBOX s a final destination, and ALIAS will still forward the mail, so putting it in both creates ambiguity[10:15:58] <SpiceMan> kmq: I want all mail from example.com to go to /var/mail/vhosts/example.com/whatever AND whenever something comes to userA at example dot com to also send register.example.com(domain that doesnt exists) to a different transport[10:16:14] <wdp> kmq, working without trouble here.[10:16:27] <SpiceMan> all mail TO example.com[10:16:43] <ekkis> wdp: ha! exactly it. thx a bunch.[10:16:59] <kmq> wdp: interesting, I was under the impression it wouldn't[10:17:03] <wdp> kmq, i'm using VIRTUAL delivery using a mysql database. mail's are going to a virtual mailbox (someuser at example dot com) and i can add an alias right after that (going to somethingelse at anotherexample dot com)[10:17:13] <wdp> thats what you guys are talking about, right?[10:17:21] <ekkis> wdp: or should I say: vielen dank! :)[10:17:33] <wdp> ekkis, you're welcome :) bitteschön :)[10:17:45] <kmq> wdp: no, mailbox_domains and alias_domains[10:17:53] <kmq> not individual aliases[10:17:53] <wdp> ah. no i'm not mixing that.[10:17:58] <SpiceMan> hmm[10:17:58] <wdp> sorry then :)[10:18:08] <kmq> your solutions seems the correct one for SpiceMan though[10:18:48] <wdp> my mysql setup is this way: 1 table stores the mailboxes. 1 table stores the aliases. in the aliases you always need one entry pointing to the mailbox.[10:18:54] <wdp> (if the user got a mailbox)[10:18:59] <SpiceMan> it all comes doen to: does a line that says "user at domain dot com user at domain dot com,user@register.domain.com" in /etc/postfix/virtual make a virtual alias domain or not?[10:19:04] <wdp> that way my setup is working.[10:19:07] <SpiceMan> *down[10:20:50] <SpiceMan> /etc/postfix/virtual is virtual_alias_maps = hash:/etc/postfix/virtual[10:20:53] <wdp> SpiceMan, i'm not exactly sure what u want/searching for[10:21:06] *** cilly has joined #postfix[10:28:53] <ekkis> wdp: it doesn't appear that the bounce notice for rejections (as in the case of exceeding messages size) is specific enough... I know the server sends out a specific message about message size but it doesn't appear I can customise it with this file[10:29:41] <wdp> ekkis, i don't know. but search for similar things in the docs. Another thing you might be interested at could be writing services for the postfix daemon.[10:29:54] <ekkis> yeah, I've been googling[10:30:16] <wdp> ekkis, the stuff you add in master.cf like greylisting. i'm not sure but i think you can do some sort of "postprocessing" and thus you could send a specific message on specific events[10:30:21] <wdp> (maybe)[10:30:30] <wdp> never done that :)[10:30:32] <ekkis> oh[10:30:57] <ekkis> I think I'll ask on the mailing list... there are ppl there that know a lot about this server[10:31:13] <wdp> here usually too. maybe wait for rob0[10:31:23] <wdp> he got the postfix docs in his brain[10:31:26] <wdp> :p[10:32:34] <SpiceMan> wdp: on one side, mails for @domain.com have a user in the unix box. I want to change that[10:33:14] <SpiceMan> on the other. I have a couple alias for usera and userb at domain dot com that sends usera/userb at register dot domain.com to a different transport[10:33:25] <SpiceMan> and I don't want to lose that[10:33:59] <SpiceMan> (register.domain.com doesnt even exists, I made that only handle it with a perl script)[10:34:12] <SpiceMan> *only to[10:34:39] <SpiceMan> so the mail a) actually reachs usera at domain dot com and b) does some automated stuff with perl[10:35:25] <SpiceMan> reading about virtual mailboxes, it says that you should NEVER list a virtual mailbox as virtual alias domain[10:36:01] <SpiceMan> since I don't know if the transport thing is using virtual alias domain or not because I don't know what a virtual alias domain is[10:37:09] <SpiceMan> so virtual_alias_maps = hash:/etc/postfix/virtual sets a virtual alias domain or virtual alias map is something different altogether?[10:40:53] <SpiceMan> s/since/but/[10:43:21] <iresh123> Did anyone connect the Zimbra LDAP server as the relay_recipient_maps lookup LDAP server?[10:44:42] *** sepski has quit IRC[10:48:44] *** thumbs has quit IRC[10:52:11] *** brainsoft has joined #postfix[10:52:17] <brainsoft> trivial-rewrite overloads my server[10:52:19] <brainsoft> whys that?[10:58:29] *** sophokles has joined #postfix[11:00:40] *** AMI_POSTFIX has joined #POSTFIX[11:01:22] <AMI_POSTFIX> hi all[11:02:20] <AMI_POSTFIX> hai any one know how to configure CyrusIMAP with Postfix[11:11:09] *** h has joined #postfix[11:11:20] *** h is now known as Guest68781[11:11:24] *** F6F has joined #postfix[11:12:22] *** Guest68781 is now known as zbun[11:14:28] *** zbun has quit IRC[11:16:24] <Zerberus> AMI_POSTFIX: yes[11:17:03] <AMI_POSTFIX> hai u know how to configure cyrusimap and postfix on centos 5[11:17:47] <Zerberus> sure[11:18:04] *** TomHome has joined #postfix[11:18:18] <AMI_POSTFIX> please tell me how to do it.....[11:19:39] <Zerberus> AMI_POSTFIX: setup postfix as you like, setup cyrus-imap as you like, then 'postconf -e mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp' to let postfix deliver to cyrus-imapd by LMTP[11:21:18] <AMI_POSTFIX> no any configure in cyrusimap?[11:21:52] <Zerberus> AMI_POSTFIX: as I said, you have to configure cyrus-imapd to your needs[11:22:44] <Zerberus> AMI_POSTFIX: if you do it the first time you will have to read some documentation, it is a beast[11:22:51] <Zerberus> AMI_POSTFIX: and please don't irc as root user[11:23:04] <AMI_POSTFIX> ok.. thankz[11:24:29] <AMI_POSTFIX> do you know any cyradm web interface tool[11:25:35] <Zerberus> AMI_POSTFIX: there is web-cyradm, but can't say anything about it, never had use for such a tool, cyradm on command line just works and is sufficient[11:26:19] <AMI_POSTFIX> ok..ok. thanks[11:27:37] *** klem has joined #postfix[11:30:19] *** ekkis has quit IRC[11:30:54] *** sep has joined #postfix[11:31:00] *** sep has quit IRC[11:33:23] *** beawesomeinstead has joined #postfix[11:33:27] *** Fallenou has joined #postfix[11:44:11] *** pinoyskull has joined #postfix[11:48:08] *** beawesomeinstead has quit IRC[11:48:56] *** sophokles has quit IRC[11:55:42] *** mosez has joined #postfix[11:56:04] <mosez> knows somebody a howto for multiple ssl certificates under postfix?[11:59:09] *** anujsingh has joined #postfix[11:59:15] <anujsingh> hi all[12:00:13] <greenchicken> mosez: its probably not possible.[12:00:59] <anujsingh> i have a server from which the mails are not reaching to few domains like AOL[12:01:18] <anujsingh> not even in spam folder[12:01:32] <anujsingh> same mail i can see on my gmail account[12:02:03] <anujsingh> i made few spf changes in the DNS records[12:02:10] <greenchicken> AOL is being really fussy - they should have a doco on what to fix. make sure you've got reverse dns for a start[12:03:34] *** sep has joined #postfix[12:04:08] <greenchicken> mosez: what kind of ssl are you taking about - inbound/outbound/submission services/client validation?[12:04:21] <anujsingh> greenchicken: server relays mail from an ironport server[12:04:40] <anujsingh> if i do telnet to aol mail server then i am able to send an email.[12:04:49] <anujsingh> i don't get any error with telnet[12:05:06] <greenchicken> same elho value?[12:05:07] <anujsingh> on the gmail i found some headers as follows[12:05:38] <mosez> greenchicken: of course it is possible. but i need one smtp instance for each cert with an own ip[12:06:24] <mosez> i think http://www.irbs.net/internet/postfix/0305/1265.html could work[12:07:09] <greenchicken> looks good[12:08:53] <anujsingh> spf=softfail (google.com: domain of transitioning apache at mg dot com does not designate 205.43.68.19 as permitted sender) smtp.mail=apache at mg dot com[12:08:53] <anujsingh> Received: from atlapache-dpv401.mg.com[12:09:24] <anujsingh> with AOL i don't get any such mail, anywhere[12:09:57] <anujsingh> i guess this spf softfail is causing AOL dropping all the mails sent by php code[12:10:10] <greenchicken> you can fix the spf record i guess[12:10:25] *** sep has quit IRC[12:10:34] *** GoGi has joined #postfix[12:10:46] <anujsingh> yes greenchicken, i gave whole public ip range in my spf records[12:10:49] <anujsingh> on DNS[12:10:50] *** gerhard7 has joined #postfix[12:11:17] <anujsingh> www.fueledbyramen.com[12:11:21] <anujsingh> is the site[12:12:13] <anujsingh> if i send mail directly from one of the ironport mail server, then i get my mail under spam of AOL.[12:12:24] <anujsingh> but mails from php code are not reaching.[12:13:39] <greenchicken> you spf record corresponds to the return path?[12:14:12] <anujsingh> apology return path in the sense?[12:15:28] <greenchicken> of the email - the envelope sender (shows up as return path in the email headers)[12:15:58] *** Pazzo has quit IRC[12:16:07] <anujsingh> Return Path: shows up as apache at mg dot com[12:16:23] <anujsingh> Return-Path: <apache at wmg dot com>[12:17:47] *** Pazzo has joined #postfix[12:18:17] *** beawesomeinstead has joined #postfix[12:18:44] <greenchicken> so you need to add 205.43.68.19 to the SPF record?[12:24:44] *** webtango has quit IRC[12:25:59] *** sep has joined #postfix[12:26:20] *** cilly has quit IRC[12:32:27] *** kenyon has quit IRC[12:33:45] *** kenyon has joined #postfix[12:39:23] *** cpm has joined #postfix[12:41:02] *** sbathe_ has joined #postfix[12:52:30] *** hever has joined #postfix[12:53:12] *** kenyon has quit IRC[12:53:34] *** webchaos has joined #postfix[12:54:05] *** sep has quit IRC[12:54:17] *** cilly has joined #postfix[12:54:49] *** sbathe_ has quit IRC[12:55:19] *** sbathe_ has joined #postfix[13:00:39] <cite> rob0: If only smptd_proxy_filter supported the same kind of routing that content_filter does.[13:00:55] *** xabbu has joined #postfix[13:07:34] *** hever has quit IRC[13:07:48] *** saurabhb has quit IRC[13:08:50] *** WorkRaoul has quit IRC[13:10:35] *** AMI_POSTFIX has quit IRC[13:10:46] *** iresh123 has quit IRC[13:11:09] *** sbathe_ is now known as saurabhb[13:11:39] *** iresh123 has joined #postfix[13:11:40] *** jtaji has quit IRC[13:12:29] *** AMI_POSTFIX has joined #POSTFIX[13:17:35] *** kenyon has joined #postfix[13:17:45] <iresh123> Do i have to postmap the LDAP server conf postmap /etc/postfix/ldap.cf[13:18:12] <adaptr> is it a hashable map ?[13:18:54] *** gerhard7 has quit IRC[13:22:59] <greenchicken> iresh123: its not - you don't need to postmap it like a hash: map[13:23:04] <sysmonk> ofcourse, ldap stores everythin in bdb (most used backend) so it's a hashable map! :)[13:23:09] <sysmonk> damn :([13:23:23] <iresh123> greenchicken: soo how to enable that only a postfix restart[13:23:25] <iresh123> ?[13:23:33] <adaptr> sysmonk: it's hashable but postfix has no access to it[13:23:39] <greenchicken> or reload[13:23:41] <adaptr> sigh why am I even responding to you ?[13:23:50] <sysmonk> adaptr: oh, but you can chmod it and give postfix access to it! :)[13:23:53] <sysmonk> adaptr: :P[13:23:58] <adaptr> sysmonk: not if it runs chrooted[13:24:03] <adaptr> SOMEBODY STOP ME[13:24:11] <sysmonk> adaptr: you can make a hardlink![13:24:34] <iresh123> greenchicken: ok but its giving a error in the maillog[13:24:51] <greenchicken> is it blue?[13:27:08] <adaptr> do you have a problem with blue, you green outcast ?[13:27:20] <adaptr> do we need to bring out the LARTICATOR ?[13:29:34] <iresh123> greenchicken: is it blue? what is the meaning[13:29:48] *** cilly has quit IRC[13:30:06] <greenchicken> sort of meaning that I can't help without knowing the error message.[13:30:35] * adaptr looks around for the big blue stick-thing[13:32:49] *** digitalmortician has quit IRC[13:33:16] <iresh123> greenchicken : ok[13:33:36] <iresh123> greenchicken : seems to be the error in the ldap.cf file ?[13:33:42] <iresh123> in the filter[13:33:45] <adaptr> iresh123: HOW DO WE KNOW[13:33:58] <adaptr> you're not showing anything useful[13:38:53] <iresh123> adaptr: the error is NOQUEUE: reject: RCPT from unknown[192.168.1.55]: 550 5.1.1 <suresh at mail dot fmart.net>: Recipient address rejected: User unknown in relay recipient table; from=<amila at mail dot fmart.net> to=<suresh at mail dot fmart.net> proto=ESMTP helo=<[192.168.1.55]>[13:41:58] *** Section1 has joined #postfix[13:43:05] <adaptr> and your question is ?[13:44:15] *** stephan48 has joined #postfix[13:44:43] <cite> !user_unknown[13:44:44] <knoba> cite: Error: "user_unknown" is not a valid command.[13:44:52] <cite> I hate knoba.[13:47:29] *** ming_zym has quit IRC[13:47:33] *** anujsingh has quit IRC[13:50:33] *** thumbs has joined #postfix[13:50:36] *** mosez has left #postfix[13:51:47] *** eanxgeek has joined #postfix[13:56:24] *** farchanjo has joined #postfix[13:56:35] *** gerhard7 has joined #postfix[14:04:57] *** TomHome has quit IRC[14:05:15] *** gerhard7 has quit IRC[14:16:32] <greenchicken> iresh123: you can test your ldap file with 'postmap -q suresh at mail dot fmart.net ldap:/etc/postfix/ldap.cf'[14:18:06] *** Pazzo has quit IRC[14:21:05] *** snooky has joined #postfix[14:21:06] <snooky> hi all[14:21:09] <snooky> german or english?[14:21:24] <thumbs> English[14:21:35] <snooky> i dont really good speak english[14:21:51] *** AMI_POSTFIX has left #POSTFIX[14:21:51] <snooky> i have a problem with my postfix[14:22:11] <snooky> i have a static ip adress and have my server @ home[14:22:51] <snooky> but when i will send a mail to gmx or web , the mail came back[14:23:30] <snooky> i want now send mails over my provider unitymedia. what i do?[14:23:45] <snooky> i paste my postfix main.cf[14:23:49] *** Soyo has joined #postfix[14:24:07] *** hever has joined #postfix[14:24:16] <adaptr> !relayhost[14:24:17] <knoba> adaptr: "relayhost" : a configuration parameter in the main.cf: The default host to send non-local mail to when no entry is matched in the optional transport(5) table. When no relayhost is given, mail is routed directly to the destination. If your relay host requires authentication see the !saslclient channel factoid.[14:24:19] <Soyo> Does postfix have am error log and if so where?[14:24:27] <adaptr> postfix logs to syslog[14:24:41] <Soyo> oh[14:25:12] <snooky> http://nopaste.com/p/aRyhdkROd[14:25:16] <snooky> thats my main.cf[14:25:47] *** iresh123 has left #postfix[14:25:49] <adaptr> snooky: I already provided an answer[14:26:49] <snooky> i dont understand it[14:27:06] <adaptr> then say so[14:27:15] <adaptr> [2009-08-24 14:23] <snooky> i want now send mails over my provider unitymedia. what i do?[14:27:21] <adaptr> the answer is: relayhost[14:28:55] <snooky> Aug 24 14:26:52 Area51 postfix/smtp[5418]: DCE18277ED: to=<bla at web dot de>, relay=mail.unitybox.de[80.69.98.111]:25, delay=3.6, delays=0.24/0.12/3.2/0.06, dsn=2.0.0, status=sent[14:29:03] <adaptr> yes[14:29:13] <snooky> status=sent <<--[14:29:16] <snooky> its right?[14:29:18] <adaptr> yes ?[14:29:24] <adaptr> what is the question ?[14:29:56] <snooky> when i send a mail over my mail server, this route it over my provider, right?[14:30:06] <adaptr> yes[14:30:18] <adaptr> also, if you have misconfigured it, anybody can send mail through you rprovider[14:30:30] <adaptr> but postfix is sanely configured by default[14:30:33] <snooky> what is the sender mail? my server mail or the mail from my provider?[14:30:44] <adaptr> !basic[14:30:44] <knoba> adaptr: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[14:32:31] <snooky> i have postfix with mysql[14:33:05] <adaptr> fantastic![14:34:18] <snooky> If I have two domains, or 3 then go about my provider?[14:35:12] <adaptr> what ?[14:35:21] *** gerhard7 has joined #postfix[14:35:44] <snooky> in my mysql i have a table with domains[14:35:59] <snooky> used postfix for all domains this relay?[14:36:56] <adaptr> I suggest you take a look at the manual for relayhost[14:37:19] <snooky> ok[14:38:17] *** bhagat has quit IRC[14:38:19] <Soyo> So if my syslog says postfix blah blah status=sent but I did not actually get anything at that address then what?[14:38:48] <adaptr> then it was waylaid somewhere after postfix sent it[14:38:58] <lunaphyte> then ask the admin of the server that's taken ownership of the message.[14:39:22] <Soyo> what does waylaid mean? some other server denied it[14:39:39] <lunaphyte> ask your local dictionary.[14:39:42] *** hugo has joined #postfix[14:39:51] <Soyo> !waylaid[14:39:52] <knoba> Soyo: Error: "waylaid" is not a valid command.[14:40:57] *** cilly has joined #postfix[14:41:33] <Soyo> waylay :to lie in wait for or attack from ambush - so I guess I was close[14:41:40] <lunaphyte> nope.[14:41:41] *** hparker has joined #postfix[14:42:39] <lunaphyte> in this context, it just means interrupted or postponed.[14:43:03] <lunaphyte> but regardless, to "fix" it, you must communicate with the other admin.[14:43:41] <Soyo> Or open port 25 in the other router that I forgot about hehe[14:44:21] <adaptr> no, postfix would not tell you it was sent if it was not[14:44:38] <adaptr> so it was delivered to another mail server[14:46:15] <Soyo> Oh, well so is there anyway to get that error message[14:46:44] <adaptr> what error message ?[14:46:45] <lunaphyte> "that error message"? what does that mean?[14:47:42] <Soyo> I guess what I mean is if the other mail server denied delivery it would tell me somehow?[14:48:03] <lunaphyte> of course.[14:48:53] <Soyo> Is that in a different log file?[14:49:07] <lunaphyte> !tell Soyo logs[14:49:25] <adaptr> Soyo: if the other mail server denied delivery, it should have bounced the message back to you[14:51:14] <Soyo> in syslog or somewhere else?[14:51:43] *** greenchicken has quit IRC[14:51:46] <lunaphyte> i just told you[14:52:10] *** pinoyskull has quit IRC[14:52:21] *** saurabhb has quit IRC[14:53:02] <Soyo> What did you just tell I'm sorry if I didn't get it[14:53:07] <lunaphyte> !tell Soyo logs[14:53:18] <Soyo> !tell Soyo logs[14:53:38] <Soyo> oh thats in another window ok sorry[14:54:05] <Soyo> I'm using irssi so I needed to alt-3 to see it[14:54:34] *** dotplus has left #postfix[14:54:35] <adaptr> well we're all very sorry[14:56:13] *** Pazzo has joined #postfix[14:57:03] *** Zeit|awy has quit IRC[14:58:42] <Soyo> It says delivered to mailbox in mail.log[14:59:12] *** snooky has quit IRC[15:00:44] <adaptr> score 1 for postfix[15:02:37] *** kmq has quit IRC[15:08:34] <Soyo> Your right it was not postfix, another address was no problem.[15:09:00] <adaptr> ehm.. we know ?[15:09:01] *** zbun has joined #postfix[15:10:08] *** zbun has quit IRC[15:13:19] *** thumbs has quit IRC[15:13:40] *** timotiCK has left #POSTFIX[15:20:22] *** Zeit|awy has joined #postfix[15:30:12] *** robtone__ has joined #postfix[15:39:02] *** UQlev has joined #postfix[15:39:05] *** gerhard7 has quit IRC[15:39:14] *** thumbs has joined #postfix[15:41:15] *** robtone_ has quit IRC[15:42:23] *** teddymills has joined #postfix[15:44:13] *** Zeit|awy has quit IRC[15:44:16] *** Zeit|awy has joined #postfix[15:44:28] *** webchaos has quit IRC[15:52:33] *** kisisten has joined #postfix[15:53:04] *** kisisten has quit IRC[15:53:35] *** magyar has quit IRC[15:58:14] *** farchanjo has quit IRC[16:00:59] *** Zeit|awy has quit IRC[16:02:37] *** polaru has quit IRC[16:02:57] *** polaru has joined #postfix[16:04:43] *** orioni has joined #postfix[16:05:47] <orioni> hi to all , is there a document/url where i can get some info on cluster/distributed postfix`s services ?[16:05:59] *** diqpib has joined #postfix[16:06:18] <adaptr> clustered how ?[16:07:56] <lunaphyte> !postfix[16:07:57] <knoba> lunaphyte: "postfix" : The Postfix MTA from http://www.postfix.org/. If you have no idea what Postfix is then you have probably chosen the wrong channel. :)[16:08:53] <lunaphyte> how's that for a document/url?[16:09:46] * adaptr recoils in awe[16:09:55] <lunaphyte> haha[16:10:11] <lunaphyte> wtf have you been, btw?[16:10:21] <adaptr> holidays[16:10:27] <adaptr> mexican pigs now[16:10:29] <lunaphyte> nice.[16:11:11] <rob0> The funny thing is that "how to cluster Postfix" is a FAQ, and it seems that the askers of that Q have little if any idea where to start.[16:11:24] * cpm knows how to cluster something, but not postfix[16:12:01] * adaptr knows how to clusterfuck[16:12:28] <orioni> holidays[16:12:31] <orioni> :)[16:13:08] <orioni> s.th like , 2 servers , 2 mx records , 1 mysql cluster on a network storage[16:13:27] <orioni> mysql with an master-master replication[16:13:43] <orioni> maybe 2 other servers for content filtering[16:13:59] <orioni> do u get the idea ?[16:14:21] <adaptr> if you have 2 MX records then you are using the native built-in redundancy of the global mail system[16:14:27] <adaptr> there's nothing clustery about it[16:14:32] * cpm gets it, just doesn't care.[16:14:34] <rob0> So, perhaps you're ahead of most people asking this. Did you google the mailing list?[16:14:50] * cpm redirects rob0[16:15:10] * rob0 is now over ..................................... here[16:15:34] <cpm> orioni, do you have a specific question?[16:15:55] <rob0> "I am looking for a HOWTO ..."[16:15:56] *** hever has quit IRC[16:16:10] <rob0> iiuc[16:16:26] <adaptr> I think we need an even more basic document type[16:16:41] <cpm> a google howto maybe[16:16:50] <adaptr> a "follow-this-if-a-howto-is-too-complicated" document[16:17:01] <orioni> nope . just some ideas[16:17:18] <adaptr> orioni: come back if you have a purpose...mr. Anderson[16:17:18] * doomas_work has a question[16:17:32] *** felix_da_catz has quit IRC[16:17:34] <rob0> Q: How many mosquitoes does it take to screw in a lightbulb?[16:17:42] <orioni> some working definitions[16:17:54] <doomas_work> is it possible to filter mails by sender address? i what to have a mailaddress where only a few people are allowed to write mails to[16:17:54] <orioni> implemeted examples[16:17:55] *** felix_da_catz has joined #postfix[16:18:22] <adaptr> doomas_work: "filter" or ALLOW[16:18:24] <rob0> A: 2, of course, but I have no idea how they got in there.[16:18:32] <cpm> I suffer from that strange phenomena wherein I presume that folks who want to do clustering already understand the concept, therefore, , , ,[16:18:37] <rob0> !restriction_classes[16:18:38] <knoba> rob0: "restriction_classes" : see !restriction_class[16:18:40] <doomas_work> adaptr: allow[16:18:43] <rob0> !restriction_class[16:18:43] <knoba> rob0: "restriction_class" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html[16:19:11] <adaptr> rob0: last time I chewcked, that STILL doesn't allow you to specify tuples - hence the continued existence of postfwd[16:19:29] * cpm forces adaptr into his tuples[16:19:30] <rob0> Another approach, often better, is to use a MLM like Mailman.[16:19:37] * cpm hugs mailman[16:19:43] <adaptr> not the tuples! nooooes[16:20:03] <cpm> mailing list managers are very hard to beat for this type of work.[16:20:05] * rob0 needs a Tupelo trip soon[16:20:30] <adaptr> cpm: truely ? I find the overhead of maintaining one to be.. well, less than trivial, say[16:20:36] <rob0> I am going to Tupelo to buy three pillows.[16:20:52] <adaptr> you should renick to onepelo[16:21:18] <rob0> :)[16:21:22] <cpm> adaptr, it's the right way to handle these things, esp the bounce processing aspects that folks with their silly rule sets always universally overlook/set aside[16:21:44] <adaptr> that's true.. mm perhaps I do need to invest some time in mailman[16:21:51] * cpm wonders if he can be more reduntent[16:22:04] <cpm> redundant even[16:22:34] <adaptr> can you BE any more redundant ?[16:22:41] <cpm> adaptr, you are correct, it seems like a heavy weight answer to what at-first-blush appears to be a lightweight challenge.[16:22:44] * adaptr stops channeling Chandler, as it's scary[16:22:59] <adaptr> chandlering ?[16:23:02] <cpm> yeah, don't do that. It freaks me out.[16:23:08] <adaptr> I KNOW![16:23:26] <adaptr> hereby completing the marriage[16:23:37] * cpm throws rice[16:23:53] <rob0> Change the channel's Chandler challenge, children.[16:24:17] <adaptr> I'm not gay[16:24:33] * rob0 always crize at weddings![16:24:57] * cpm too[16:25:05] <rob0> (from getting rice in the ize)[16:26:39] * cpm is just tearfully grateful for all the free foodz![16:27:29] <rob0> mmmm, cake![16:30:21] *** digitalmortician has joined #postfix[16:33:25] *** Zeit|awy has joined #postfix[16:37:16] *** cilly has quit IRC[16:41:19] *** brancaleone has quit IRC[16:41:37] *** orioni has quit IRC[16:42:37] *** hever has joined #postfix[16:43:09] *** UQlev has quit IRC[16:44:16] <adaptr> no pony though[16:44:28] <thumbs> pony cake?[16:44:35] <adaptr> ewww[16:44:53] * rob0 always cries at not getting a pony :([16:44:59] <cpm> !pony[16:44:59] <knoba> cpm: "pony" : http://www.brainfuel.tv/wp-content/uploads/2006/03/nopony.jpg[16:45:00] <adaptr> instantly reminds me of the british tard who exhibits sliced up cattle as art[16:45:23] <adaptr> if indeed he is british.. it felt british[16:45:24] <rob0> Culinary art?[16:46:17] <cpm> fellow I know used to make sculptures out of those doggy chew toys that are made out of dried critter parts. He called it 'Part Art'.[16:48:33] <jduggan> brit and tard arent allowed in the same sentence[16:48:36] <jduggan> ;P[16:52:57] <rob0> Bretard?[16:54:03] <thumbs> silly rob zero[16:54:34] *** maloi has joined #postfix[16:56:13] *** miconof has quit IRC[16:59:07] <maloi> hello, i build mailinglists with virtual_alias_maps = hash:/etc/postfix/mailinglists with entries like "all user1,user2,user3". This works so far. Now i want only members of the list to be able to send to this list for example only user1,user2,user3 can send mails to all at example dot com. What's the best way to do it?[16:59:33] *** xabbuh has quit IRC[17:02:36] *** doomas_work has quit IRC[17:02:55] *** cilly has joined #postfix[17:04:18] *** Robbie_ has quit IRC[17:04:43] <cpm> use a real mailing list manager would be the correct way.[17:05:24] *** Zblakany has joined #postfix[17:10:16] <maloi> cpm: ok i'll take a look at mailman[17:11:12] *** Muhis has joined #Postfix[17:16:30] *** huey23 has joined #postfix[17:17:18] <huey23> I have about 250 messages building up in the queue, all the messages have this message in the log: lost connection with xx.xx.xx.xx[xx.xx.xx.xx] while receiving the initial server greeting[17:17:26] *** gerhard7 has joined #postfix[17:17:40] <huey23> has anyone seen this before, if so, how do i remedy it?[17:18:18] *** Venker has joined #postfix[17:18:24] <Venker> hi there[17:18:31] <huey23> what is odd is that messages still seem to go through[17:18:49] *** cbsd has joined #postfix[17:20:05] <adaptr> huey23: it's an independable and/or flapping mail server that postfix is unable to connect to successfully[17:20:09] <cbsd> Hi, one question if i want to use Postfix with TLS and i got a CA do i have to create the request on the postfix server and then go and sign it with the CA on another machine, or i just can create the request on the CA machine and sign it and the copy to the postfix server?[17:20:48] <rob0> Huey, appears to be a layer 2-3 networking connection problem, could be intermittent. Can't tell you any more than that.[17:21:28] <huey23> that is what i was guessing, i just needed reassurance[17:22:04] <huey23> can you try to telnet 69.54.95.36 and ping?[17:22:18] <adaptr> cbsd: either is fine, it's just a certificate[17:22:30] <huey23> i am getting weird results...i just wanted to make sure[17:22:33] <adaptr> huey23: no, that could be anybody - even the NSA[17:22:33] <rob0> Connection closed by foreign host.[17:22:47] <huey23> that's what i thought[17:22:53] *** hackeron has joined #postfix[17:22:55] <huey23> it's not the NSA[17:23:04] <huey23> might be the FBI, but not NSA :P[17:23:11] <huey23> thanks guys[17:23:21] <hackeron> hey, question - my log file is full of: Aug 24 08:02:07 FuseStore postfix/smtpd[18435]: lost connection after RSET from unknown[::1] -- any ideas what could be causing this?[17:24:15] <rob0> hackeron is running a process on the same machine that he's not aware of.[17:25:19] <rob0> That process is using ipv6 to connect to localhost, and apparently speaks a broken SMTP, RSET without QUIT.[17:26:14] <hackeron> rob0: ok, hopefully this will stop it :) < ifconfig lo inet6 del ::1/128[17:27:18] *** DelphiWorld has joined #PostFix[17:27:23] <DelphiWorld> hi all[17:27:39] <DelphiWorld> please, is it pocible to restrict access to postfix just for a range of address?[17:27:51] <Dominian> !mynetworks[17:27:51] <knoba> Dominian: "mynetworks" : a configuration parameter in the main.cf: The list of "trusted" SMTP clients that can relay email.[17:28:11] <rob0> !check_client_access[17:28:11] <knoba> rob0: "check_client_access" : Search the named access database for the client name, parent domains, client address, or networks obtained by stripping least significant octets. Reject if the result is REJECT or [45]XX text . Permit otherwise[17:28:20] <rob0> !access[17:28:20] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server.[17:30:01] *** plugwash has joined #postfix[17:30:39] <plugwash> what is the easiest way to make postfix pretend a user doesn't exist?[17:30:53] *** DelphiWorld has left #PostFix[17:38:26] <adaptr> userdel "username"[17:40:01] <plugwash> the user in question is a system user so i'd really rather not delete it[17:40:49] <plugwash> I've tried aliasing it to a nonexistent user but that results in a bounce rather than rejection :([17:42:15] *** cilly has quit IRC[17:46:04] <rob0> !check_recipient_access[17:46:04] <knoba> rob0: "check_recipient_access" : Search the specified access(5) database for the resolved RCPT TO address, domain, parent domains, or localpart@, and execute the corresponding action.[17:46:13] <rob0> !access[17:46:13] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server.[17:49:12] *** cilly has joined #postfix[17:59:56] *** paulez has quit IRC[18:06:09] *** cilly has quit IRC[18:07:46] *** harobed has quit IRC[18:09:38] *** seekwill has joined #postfix[18:11:08] *** Pazzo has quit IRC[18:13:26] *** karrotx has quit IRC[18:14:50] *** neoark has joined #postfix[18:15:38] *** gerhard7 has quit IRC[18:19:43] *** SARGuy has joined #postfix[18:20:14] *** deadpigeon has quit IRC[18:23:26] *** Severed_Head_of_ has quit IRC[18:24:33] *** imachine has joined #postfix[18:25:31] <imachine> eh[18:26:02] <seekwill> heh[18:26:53] <imachine> soz, wrong channel with the 'eh' ;)[18:27:04] <seekwill> eh[18:27:04] <imachine> was wondering about bumping 2.5 to 2.6[18:27:11] <seekwill> I'm still on 2.2[18:27:25] <imachine> but I reckon I'll just wait for debian to hiccup first :)[18:28:11] <seekwill> You'll be too old to care by then[18:28:43] <cpm> hopefully.[18:29:13] * cpm was figuring he'd never move off of 2.3, because there would be no way he'd still be fidding with email by the time 2.3 was ancient. hah[18:32:36] <imachine> seekwill, well they're on their way releasing squeeze[18:32:51] <imachine> so it's a month or so, my users can live without new applications I reckon :S[18:32:56] <imachine> (in this case, without mail filters)[18:35:13] *** pickcoder has joined #postfix[18:39:22] <imachine> it should only be untill spring, or so the schedule says :)[18:41:31] *** SARGuy has left #postfix[18:43:58] *** F6F has quit IRC[18:44:41] *** hever has quit IRC[18:45:24] *** gerhard7 has joined #postfix[18:54:18] *** Fallenou has quit IRC[18:55:37] *** githogori_ has quit IRC[18:56:54] <thumbs> rob0: ping?[18:57:03] <thumbs> seekwill: ping?[18:57:41] <adaptr> ping: EHLO ?[18:57:43] <rob0> ding[18:58:01] <rob0> Who's ping? Some Chinese guy?[18:58:08] <pickcoder> 451: go away[18:58:17] <adaptr> it's an ancient word meaning "watermeadow"[18:58:21] <thumbs> rob0: do you use mysql as a backend? If so, does the alias need to be different from the email requested?[18:59:07] <seekwill> hmm?[18:59:23] <rob0> Actually I don't use mysql. But Postfix requirements are independent of the backend.[18:59:29] <thumbs> see, I defined my custom tables for this new postfix server[18:59:36] <pickcoder> uh oh[19:00:04] <thumbs> from http://www.postfix.org/MYSQL_README.html, the query looks like it's looking for a forward address.[19:00:10] <rob0> Aliases can easily be done in virtual_mailbox_maps ... simply have that address return the right mailbox path.[19:00:28] <thumbs> fair enough.[19:00:38] <thumbs> !virtual_mailbox_maps[19:00:39] <knoba> thumbs: "virtual_mailbox_maps" : a configuration parameter in the main.cf: Optional lookup tables with all valid addresses in the domains that match $virtual_mailbox_domains.[19:00:59] <pickcoder> so why have virtual aliases then[19:01:27] *** ppman has joined #postfix[19:01:51] <adaptr> that factoid is incomplete[19:02:12] <adaptr> "with mappings of all valid addresses to mailboxes[19:02:29] <ppman> how do I migrate all teh existing postfix data in ldap to something else, like mysql?[19:02:35] <adaptr> and not "all", even[19:02:39] <rob0> Indeed, many sites probably do not need virtual aliases.[19:03:05] <pickcoder> ppman: the data outside of postfix is not managed by postfix[19:03:13] <pickcoder> ask #lldap? or something similar[19:03:29] <ppman> pickcoder: I thought maybe the data would be of a specific typoe for postfix[19:03:34] <rob0> ppman, that is a #ldap (how to dump) and #mysql (how to import) question.[19:03:50] <ppman> kay[19:03:51] <pickcoder> not really.. you determine how the orgs are laid out and then tell postfix what to look at[19:03:59] <rob0> Then ...[19:04:01] <rob0> !mysql[19:04:02] <knoba> rob0: "mysql" : http://www.postfix.org/MYSQL_README.html is helpful in configuring postfix to talk to a mysql server.[19:06:06] <pickcoder> wonder if you could map MySQL through LDAP[19:07:02] <rob0> ha, sounds like masochist's delight![19:15:31] <Venker> did someone used postfixadmin?[19:15:47] <Venker> it does not create maildirs[19:17:34] <Venker> and when I add a new mailbox, the web interface hangs[19:20:28] *** polaru has quit IRC[19:21:58] *** Alagar has quit IRC[19:23:00] <cpm> !postfixadmin[19:23:01] <knoba> cpm: "postfixadmin" : used for managing email accounts through a web interface (http://high5.net/postfixadmin/)[19:27:34] <Venker> sorry, bad window[19:28:42] <dan__t> I can't say why, but it seems wrong to have smtpd_client_restrictions in both master.cf and main.cf? I've not seen that before.[19:29:56] <rob0> The -o settings in master.cf override options in main.cf.[19:30:07] <dan__t> Figured as much, yes.[19:30:19] <rob0> Sometimes it's necessary, sometimes it's overused.[19:30:37] <dan__t> I think this is a case where its overused.[19:31:08] <dan__t> I need to drop a check_sender_access in there, but it looks like my space is causing problems.[19:31:43] <dan__t> So I figure I'm doing it wrong somewhere, which is what led me to take a closer look at this.[19:32:21] <dan__t> I'm sorry - I have smtpd_recipient_restrictions in main.cf, smtpd_client_restrictions in master.cf - they're different entities.[19:34:55] *** GoGi has quit IRC[19:35:21] <rob0> Slightly different. The main difference is that smtpd_recipient_restrictions controls relaying.[19:35:36] <dan__t> hmmmm..[19:36:13] <dan__t> Ok, I get it now.[19:36:36] <dan__t> How do I deal with a space in the case of implementing check_sender_access with an argument of a hash table?[19:37:36] <adaptr> there are no spaces in email addresses[19:38:27] <dan__t> Sorry, per an -o argument in master.cf - looks like it turned out to just escape the space anyway.[19:39:11] *** seekwill has left #postfix[19:40:24] <rob0> Use commas in master.cf -o arguments[19:41:18] <rob0> I *think* that might be documented in master(5)[19:41:54] <rob0> there are numerous other workarounds ... like use a name from main.cf[19:42:29] <rob0> my_client_restrictions = check_sender_access hash:/your/table[19:43:57] <dan__t> Ah hah, so multiple -o arguments for smtpd_client_restrictions are appended?[19:44:21] *** PcPixel has joined #postfix[19:45:09] <PcPixel> I have an email attempted to be sent to a nonexistent domain. id like to remove itr from the queues so it stops trying. however, when I use postqueue I can't find the email. the email keeps showing up in the log. what can i do?[19:47:14] *** seekwill has joined #postfix[19:47:18] *** andrewfree has joined #postfix[19:47:20] <dan__t> Hm, doesn't seem to take effect any way I spin it.[19:47:22] *** aantix has joined #postfix[19:48:26] <rob0> each -o is only ONE postconf(5) setting[19:48:27] <cpm> PcPixel, email to a nonexistent domain should have been rejected right off.[19:49:44] <PcPixel> cpm: it keeps showing up in the queue[19:49:50] <PcPixel> almost like clockwork[19:50:02] <PcPixel> would that mean something further upstream could be trying it[19:50:08] <PcPixel> ie: my Exchange server[19:50:16] <PcPixel> my boss seems to think its my potfix server. so i started there.[19:51:23] *** amrit|zzz is now known as amrit|wrk[19:52:42] <cpm> what makes you think it's a nonexistent domain?[19:52:51] <PcPixel> she sent it to yahoo.com.sq[19:52:52] <cpm> what's the domain?[19:53:18] <PcPixel> the woman figured "well .sg didnt work and i got a bounce that said the account doesnt exist. so maybe it should be sq instead"[19:53:19] <cpm> ummm, yeah, that's pretty nonexistent[19:53:56] <cpm> it'll expire from the queue after a while.[19:54:10] <PcPixel> this i know[19:54:16] <PcPixel> but my boss would like to know how to find it and kill it[19:54:34] <cpm> why?[19:54:49] <thumbs> !courier[19:54:49] <knoba> thumbs: "courier" : an alternative MTA to Postfix. Parts of it (maildrop, IMAP server and POP3 server) are often used by Postfix users as well. See: www.courier-mta.org or #courier[19:55:08] <PcPixel> cpm: it slike asking why the sky is blue.[19:55:15] <cpm> find another boss.[19:55:16] <cpm> :)[19:55:32] <PcPixel> cpm: oh sweet buttery jesus you have NO idea[19:55:37] <aantix> Is it possible to setup postfix to only receive email from certain domains? There's a specific email account on my system that I only want to receive email from yahoo.com and hotmail.com users.[19:55:49] * cpm really wants to have all such bosses be orphans lost ina lonely planet of no sysadmins[19:56:15] *** tjikkun has joined #postfix[19:58:16] <cpm> anyway, find the ESMTP id and then grep through /path/to/spool/postfix for it.[19:58:27] <cpm> does qshape deferred show it?[19:58:28] <PcPixel> how do i find that[19:58:55] <PcPixel> qshape has 1's in column T and 5[19:59:15] <cpm> and do you see that domain show up in qshape deferred?[19:59:32] <PcPixel> no[19:59:36] *** diqpi1 has joined #postfix[20:00:05] <cbsd> one question: http://pastebin.com/d73d4ab6b[20:00:08] <cpm> okay, anyway, find the esmtp id, will be a unique strings looks like DA0CD11AE63N[20:00:20] <PcPixel> yeah ive been looking[20:00:22] <PcPixel> but i cant find the thing[20:00:28] <PcPixel> i found legal deffered oes[20:00:30] <PcPixel> but not this one[20:01:36] *** Venker has left #postfix[20:02:13] <cpm> grep -r yahoo.com.sq /path/to/spool/postfix/[20:02:27] <cpm> (whereever you keep your postfix spool directory)[20:02:41] *** cloxie has joined #postfix[20:02:47] <PcPixel> grep'in[20:05:01] <PcPixel> looks like its frozen[20:05:05] <PcPixel> but nothing there[20:05:30] <cpm> then it'[20:05:33] <cpm> s not there.[20:06:02] <PcPixel> last attempt to send was 14:05[20:06:23] <PcPixel> its like i cant find precisely where the mail is hiding[20:06:28] <cpm> if you don't have an email id, and nothing in the spool, there is no mail. Period.[20:06:34] <cbsd> im doing some certs for TLS on postfix i got a mta.machine with OpenBSD and i got a PKI on another machine i needed a pop3d.pem cert so on the PKI machine with openssl i did: #openssl genrsa -aes256 -out mail.key 4096 && chmod 600 mail.key && #openss req -new -key mail.key -out pop3d.csr ... the pop3d.csr i sign it with the PKI machine so i got a pop3d.pem sign by my PKI, im guessing the process i did was succesfull right? now if i copy the pop3[20:06:36] *** diqpib has quit IRC[20:06:40] <PcPixel> ok[20:06:47] <PcPixel> ill just let it go then and it will fix itself[20:07:01] <cpm> there isn't anything to fix.[20:07:27] <cpm> if there was something queued, then there would be something you could do.[20:07:37] *** sadf has quit IRC[20:07:39] <PcPixel> right[20:07:42] <PcPixel> that i understand[20:07:46] <PcPixel> but if its not queued anywhere[20:07:52] <PcPixel> why is it trying to keep sending it[20:08:02] <cpm> you aren't trying to send anything.[20:08:05] <cpm> what makes you think you are?[20:08:17] *** sadf has joined #postfix[20:08:27] <PcPixel> the fact that: Aug 24 14:05:27 hermes1 postfix/smtpd[5058]: NOQUEUE: reject: RCPT from valkyrie1.ogpnet.com[64.128.118.78]: 450 4.1.2 <aedron_mtg at yahoo dot com.sq>: Recipient address rejected: Domain not found; from=<eml at qvii dot com> to=<aedron_mtg at yahoo dot com.sq> proto=ESMTP helo=<valkyrie1.ogpnet.com>[20:08:33] <PcPixel> keeps appearing in my log[20:08:44] <PcPixel> if im not sending anything then why does it keep showing up[20:08:55] <cpm> NOQUEUE[20:09:04] <PcPixel> so that means its further upstream rthen[20:09:27] <PcPixel> something further up is trying it & my postix server is telling "no, cause there aint no dmoain"[20:09:36] <cpm> the sender keeps trying, because you are issuing a 450, which essentially means "all circuits busy, please try again" The sender will try to send until it too gives up.[20:09:58] <cpm> No, it's saying domain not found.[20:10:02] <cpm> not domain doesn't exist.[20:10:07] <cpm> BIG difference.[20:10:14] <cpm> the former could be a dns lookup issue.[20:10:19] <PcPixel> yes true[20:11:02] <cpm> anyway, leave it be, it'll go away. Or tell calkyrie1 to quit calling you, or you will start crying.[20:11:09] <PcPixel> got it[20:11:17] <PcPixel> i figured as much, but i have to jump when im told to[20:11:24] <PcPixel> even if its to an improper conclusion[20:11:35] *** cloxie has quit IRC[20:14:42] *** diqpi1 has quit IRC[20:14:43] *** PcPixel has quit IRC[20:15:40] *** Alagar has joined #postfix[20:17:59] <cbsd> i keep on getting on the logs pop3d-ssl: exec: No such file or directory[20:18:00] <cbsd> # pwd & ls |grep pop3d-ssl[20:18:00] <cbsd> [2] 28445[20:18:00] <cbsd> pop3d-ssl[20:18:00] <cbsd> [2] + Done[20:18:13] *** Alagar has quit IRC[20:18:26] <cbsd> but the file exist on /etc/courier/[20:19:53] <cbsd> any idea?[20:21:53] *** Southron has joined #Postfix[20:23:56] <cpm> what does pop3d have to do with postfix?[20:24:28] *** tore has left #postfix[20:24:28] <cbsd> im just using it with postfix[20:25:11] <cpm> unlikely. pop3d is a pop server, postfix is an mta. Only related in the distance sense that folks use these things for email.[20:25:13] <cpm> !pop[20:25:13] <knoba> cpm: "pop" : postfix is not a pop or imap server[20:25:42] <cpm> I guess you are using the pop3d server that is bundled with courier-imap ?[20:25:46] <cpm> if so, try #courier[20:27:17] *** cilly has joined #postfix[20:29:01] <cbsd> sure im using courier-pop3 only[20:29:05] <cbsd> no courier-imap[20:29:11] *** jelly has quit IRC[20:30:25] <Soyo> Netsplit uh oh[20:30:57] *** denis has quit IRC[20:34:00] <dan__t> Thanks for your help, rob0.[20:34:37] <cbsd> bundle?[20:37:11] <cbsd> cpm still there?[20:39:45] *** xabbu has quit IRC[20:40:13] *** cloxie has joined #postfix[20:40:20] *** ppman has quit IRC[20:42:27] *** jelly has joined #postfix[20:46:29] *** sadf has quit IRC[20:53:33] *** hugo has quit IRC[21:00:03] *** paddy_dev has joined #postfix[21:10:22] *** denis has joined #postfix[21:10:36] *** cilly has quit IRC[21:12:14] *** cilly has joined #postfix[21:12:37] *** hever has joined #postfix[21:13:07] *** hugo_disc has joined #postfix[21:13:54] <hugo_disc> hello i would like to know how can i ban a server to connect to my postfix server ?[21:15:18] <paddy_dev> I am a bit at a loss about the 'myhostname' parameter. If I use $mydomain as its value will postfix use the machine's hostname to append to the value of 'mydomain'?[21:15:50] <paddy_dev> eg hostname.$mydomain[21:17:11] <thumbs> bleh. Courier is a PITA.[21:20:01] <rob0> !basic[21:20:01] <knoba> rob0: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[21:20:08] <rob0> paddy_dev: ^^[21:22:21] <paddy_dev> rob0: it is the document I am reading atm[21:22:28] <paddy_dev> just wanted to be sure[21:24:09] *** timotiCK has joined #POSTFIX[21:25:06] *** timotiCK has left #POSTFIX[21:29:26] <rob0> Most sites need to explicitly set myhostname, and many will need to set mydomain too. Never hurts to set them, that way there are no surprises.[21:30:23] <rob0> !check_client_access[21:30:23] <knoba> rob0: "check_client_access" : Search the named access database for the client name, parent domains, client address, or networks obtained by stripping least significant octets. Reject if the result is REJECT or [45]XX text . Permit otherwise[21:30:29] <rob0> !access[21:30:29] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server.[21:30:40] <rob0> hugo, those two ^^[21:31:14] <paddy_dev> nice aliases :)[21:32:02] *** denis has quit IRC[21:33:54] <paddy_dev> rob0: My situation is that I do not have a hosting service with my isp, only an assigned static IP and the ability to host my own mailserver. I am a bit confused about the domain and hostname parts, so I will give a call to my ISP tommorow[21:38:11] *** hugo_disc has quit IRC[21:43:20] *** diqpib has joined #postfix[21:51:37] *** cpm has quit IRC[21:52:28] *** freijie has quit IRC[21:52:32] *** Soyo_ has joined #postfix[21:53:08] *** Soyo_ has left #postfix[22:00:37] *** AndrewKT_ has joined #postfix[22:01:11] *** kewo has quit IRC[22:01:41] *** emcepe has joined #postfix[22:02:03] *** brainsoft has quit IRC[22:02:03] *** mcp has quit IRC[22:02:03] *** AndrewKT has quit IRC[22:02:03] *** Slashman has quit IRC[22:02:04] *** wereHamster has quit IRC[22:02:04] *** swarog has quit IRC[22:02:04] *** rmayorga has quit IRC[22:02:04] *** amrit|wrk has quit IRC[22:02:13] *** AndrewKT_ is now known as AndrewKT[22:02:13] *** emcepe is now known as mcp[22:02:54] *** rmayorga has joined #postfix[22:02:56] *** kewo has joined #postfix[22:03:12] *** Muhis has quit IRC[22:03:18] *** wereHamster has joined #postfix[22:03:29] *** amrit has joined #postfix[22:03:30] *** swarog has joined #postfix[22:04:07] *** Slashman has joined #postfix[22:04:11] *** brainsoft has joined #postfix[22:04:42] *** paddy_dev has quit IRC[22:07:18] *** QKqBAUcBx has joined #postfix[22:08:36] *** cipherz has quit IRC[22:14:24] *** stephan48 has quit IRC[22:15:23] *** timotiCK1 has joined #POSTFIX[22:23:51] *** s0ber has joined #postfix[22:27:47] *** timotiCK1 has left #POSTFIX[22:31:26] *** samix has joined #postfix[22:31:33] *** Soyo has quit IRC[22:35:21] *** s0ber_ has quit IRC[22:40:27] *** cloxie has quit IRC[22:50:26] *** gerhard7 has quit IRC[22:54:13] *** ghoti has joined #postfix[23:15:09] *** huey23 has quit IRC[23:20:31] *** Southron has quit IRC[23:21:09] *** blake__ is now known as blake[23:29:10] *** githogori has joined #postfix[23:29:17] *** cloxie has joined #postfix[23:29:46] *** andrewfree has quit IRC[23:30:48] *** Section1 has quit IRC[23:31:06] *** jens_ has quit IRC[23:33:14] <cbsd> anyone up?[23:35:05] * adaptr looks down[23:35:09] <adaptr> nope[23:36:25] <cbsd> adaptr im enabling TLS support to postfix now, i got a external CA but ill do the cert request from the mta.machine : openssl req -days 3650 -nodes -new -keyout /etc/postfix/ssl/private/server.key -out /etc/postfix/ssl/private/server.csr[23:36:33] <cbsd> then sign the server.csr from my external CA[23:36:52] <adaptr> ...okay[23:37:02] <adaptr> do you need my permission?[23:37:16] <cbsd> but i got one question if im sign it the server.csr from a external CA from where should i take the ca.crt[23:37:27] <cbsd> from the external CA o i have to make it on the mta.machine?[23:37:40] <cbsd> for the smtpd_tls_CAfile =[23:37:41] <adaptr> !tls[23:37:42] <knoba> adaptr: "tls" : Short for Transport Layer Security (RFC2246). It adds an additional layer of encryption to protocols such as SMTP, POP3 or IMAP to improve security during transmission over the Internet. TLS features in Postfix are documented here: http://www.postfix.org/TLS_README.html[23:40:22] <cbsd> mmmm[23:40:35] <cbsd> that should be the public cert from my CA then[23:41:36] <adaptr> you're not going to get any other cert from them, so yes[23:42:57] <cbsd> thanks very kind[23:42:58] <cbsd> :)[23:45:10] *** Fallenou has joined #postfix[23:45:59] *** cpbills_ has joined #postfix[23:46:14] *** cpbills has quit IRC[23:49:11] *** seekwill has quit IRC[23:56:39] *** eanxgeek has quit IRC