August 30, 2009 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
August 30, 2009 [00:00:01] <Carnage> and it symlinks /home to it[00:00:06] <Carnage> but cpanel fucked that up[00:00:21] <cite> cd /home; for i in *; do if [ ! -d /usr/home/$i ] && mv $i /usr/home; sed -i "s/:\/home\/$i/\/usr\/home\/$i/g" /etc/passwd; fi; done[00:00:31] <cite> Cut if/fi[00:00:49] <anonymous> FreeBSD orion.simbio.lc 8.0-CURRENT FreeBSD 8.0-CURRENT #2: Thu Apr 9 15:11:05 MSD 2009 root at orion dot simbio.lc:/usr/obj/usr/src/sys/orion i386[00:01:07] <Carnage> think we are on 7[00:01:17] <anonymous> where should i search for the hlinks to /usr/home&[00:01:27] <anonymous> oh don't worry[00:01:33] <anonymous> i'm on seven too[00:01:45] <Carnage> i'm not saying its the only way to set it up[00:02:01] <anonymous> FreeBSD tolbrandir.simbio.lc 7.1-STABLE FreeBSD 7.1-STABLE #0: Sun Feb 22 16:25:27 MSK 2009 root at tolbrandir dot simbio.lc:/usr/obj/usr/src/sys/home20080322 i386[00:02:10] <Carnage> its just the way its setup by default using the isntallation media that i used[00:02:22] <rob0> In my way of thinking, /usr should be read-only, so I don't like the idea of homes under /usr.[00:02:46] <Carnage> you are probably right[00:03:02] <cite> Erm. Pointing out the obvious, but you can always _mount_ /usr/home, rob0 ;-)[00:03:13] <Carnage> i've inherited the mess left behind by cpanel[00:03:20] <anonymous> rob0 yeah it is, and should be[00:03:39] <rob0> Maybe I was unduly influenced by the Linux FHS. Yes I know, but /home is shorter and Just Works Fine.[00:03:41] <cite> Anyways, this sounds like a great idea.[00:03:43] <Carnage> thats the way its set up, /usr/home is a mount point[00:04:05] <Carnage> which is another reason the dirs in /home are a nuicense[00:04:05] <cite> I'm going to leave a few "bind" mounts of /home behind ona friend's server.[00:04:17] <rob0> <== old fuddy-duddy[00:04:33] <anonymous> should i post the df -h from all of my boxes to disagree?[00:04:40] * rob0 imagines cite rushing out to Google fuddy-duddy[00:04:55] <Carnage> rob0: trust me, /home would work for me[00:05:10] <cite> rob0: Erm. How did you know...[00:05:12] <Carnage> but since all the system related home dirs ended up in /usr/home...[00:05:44] <anonymous> Carnage it's all the matter of you[00:05:49] <adaptr> yeah, there's just no excuse for that freebsd stuff[00:06:07] *** war9407 has quit IRC[00:06:07] <Carnage> i'm not really supporitng it; its just the way its setup[00:06:33] <Carnage> in hindsight i'd have rathered a linux distro of some flavour[00:06:39] <Carnage> it would have been a lot less hassle[00:06:48] <cite> Carnage: In the past minutes you could already have written a one-line shell snippet to do the moving. Less talk, more /bin/sh.[00:07:11] *** githogori_ has joined #postfix[00:07:14] <rob0> And definitely lose the cpanel crap![00:07:18] <anonymous> than blame someone else, freebsd (or lin, or win) has nothing to do with it[00:07:21] <Carnage> the cpanel crap is gone :p[00:07:41] <rob0> I think the "c" in "cpanel" does indeed stand for "crap".[00:07:52] <anonymous> 8)[00:08:09] <Carnage> i think it stands for controlseverylittlethingandbreaksatrandomfornoreason[00:08:36] <anonymous> erm what[00:08:43] <Carnage> it didn't like people editing config files manually[00:08:47] <Carnage> at all[00:09:41] <Carnage> i made some changes to php.ini to add some modules and cpanel dumped a 16GB error log into /tmp filling the drive and preventing mysql and one or two other things from functioning[00:11:15] <cite> Who the fsck is that "fakessh" guy on the mailing list? He seems to have some serious mental issues.[00:12:24] <rob0> haha[00:13:19] <shasta> hm[00:13:47] <anonymous> btw, i am quite new to the community[00:14:02] <anonymous> are there any devs on the list in here&[00:14:04] <shasta> i'm writing a policy service that checks for virtual accounts being over quota and rejecting emails to such accounts[00:14:21] <anonymous> & -> ?[00:14:34] <adaptr> anonymous: why ? do you need any ?[00:14:45] <shasta> i'd like this policy service to also "enforce" quotas also for sasl authenticated clients[00:15:19] <cite> shasta: I can't help you with the SASl part, but if you are using Dovecot, I could offer a solution for the rejection at ESMTP time.[00:15:23] <shasta> so I thought I'd place check_policy_service before permit_sasl_authenticated in smtpd_recipient_restrictions[00:15:40] *** wdp has quit IRC[00:16:14] <shasta> (cite, I am, but I don't really want to use sql dict for quotas)[00:16:21] <cite> Bummer :-P[00:16:55] <anonymous> adaptr no, just curious[00:17:05] <anonymous> god bless, no[00:17:05] <shasta> but then, is there any danger putting check_policy_service before reject_unauth_destination (or equivalent)?[00:17:31] <shasta> my policy service never responds with OK, only DUNNOs or 4xx/5xx[00:17:56] <cite> shasta: No, there isn't any real danger.[00:18:37] *** Zerberus has joined #postfix[00:18:50] <shasta> well: "Lines 8, 9: always specify "check_policy_service" AFTER "reject_unauth_destination" or else your system could become an open relay."[00:18:55] <shasta> (from SMTPD_POLICY_README)[00:19:28] <Carnage> :D email works[00:19:40] *** quasar has joined #postfix[00:19:49] <Carnage> i used /usr/home as a path[00:20:03] <cite> shasta: It seems that you have identified the reason for that statement pretty accurate ;-)[00:20:16] <Carnage> then juggled with the mysql query that fetches the data from the db to build the rest of the path[00:20:23] <rob0> The documentation is written to accommodate all means of stupidity.[00:21:28] <rob0> anonymous, TTBOMK, no, no Postfix developers here. If so they remain ... anonymous![00:21:54] <anonymous> fine like that[00:22:05][00:22:19] <Carnage> right... until i need to worry about sending email postfix is sorted... now to wrestle with dovecot[00:22:45] <quasar> hopefully a quick question.. how does postfix know where to look for the mysql.sock file, is that a compile-time option or in one of the .cf files?[00:23:09] <rob0> um, no, probably not quick[00:23:12] <rob0> !mysql[00:23:12] <knoba> rob0: "mysql" : http://www.postfix.org/MYSQL_README.html is helpful in configuring postfix to talk to a mysql server.[00:23:27] <Carnage> quasar: all the tutorials etc that ive read suggested using 127.0.0.1 as the mysql host in the cf files[00:23:46] <shasta> quasar, libmysqlclient tells it (if you specify hosts=localhost for local unix socket access, of course)[00:23:56] <rob0> !chroot[00:23:56] <knoba> rob0: "chroot" : The fifth column in master.cf, if not n , means that the Postfix process described on that line runs in a chroot, see !debug , !queue_directory and files in the examples/chroot-setup subdirectory of the Postfix source archive which show examples of a Postfix chroot environment on a variety of systems[00:24:02] <shasta> and libmysqlclient knows it from my.cf[00:24:05] <Carnage> as the mysql sock may not be avaliable in a chrooted enviroment[00:24:09] <rob0> ^^ common problem for people using a socket[00:24:24] <quasar> shasta: if thst's the case, why is it looking for mysql.sock in /var/run/mysql/ when the socket is in /tmp ?[00:24:34] <Carnage> hence why you use 127.0.0.2[00:24:36] <Carnage> *1[00:24:37] <shasta> my.cnf i meant[00:25:16] <rob0> Probably because something you did told it to look in /var/run/mysql/ ... but that's just a guess![00:25:33] <anonymous> my humble advice is to use IP for all the comms[00:25:51] <anonymous> keeps much of the pain away[00:25:55] <Carnage> mine too (and i've spent the entire day setting up postfix to work with mysql)[00:26:01] <rob0> Thank you, anonymous. You're humble and lovable.[00:26:19] <anonymous> i am not[00:26:36] <rob0> Oh sorry, I thought you were Shoe-shine Boy.[00:26:41] <anonymous> just stepped into the socket shit many times[00:26:44] <anonymous> to avoid it[00:27:02] <anonymous> mostly, with chrooted stuff[00:27:09] *** pl has joined #postfix[00:27:26] <cite> That's why we love proxymap(8) so much.[00:28:29] *** uqlev has joined #postfix[00:28:49] <pl> I have a question that is not strictly postfix-related, but I think you are the right persons to ask. Should a non-mail server, or a desktop system, run a smtp daemon listening on localhost:25?[00:29:33] *** CMA_ has joined #postfix[00:29:45] <anonymous> if it's not about 127.0.0.1, no[00:29:53] <pl> is this a good habit? I'd say yes, because so system mail can be delivered, but it's not a so good idea for performance, security, etc etc...[00:30:05] <pl> anonymous, just for 127.0.0.1[00:30:13] <rob0> um ... IMO, no, it depends what you're wanting to accomplish[00:30:19] <rob0> !nullclient[00:30:20] <knoba> rob0: "nullclient" : a null client is a computer that can only send mail. it receives no mail from the network, and it does not deliver any mail locally. while postfix can be configured to fill this role, it is often unnecessary overkill, and a much simpler software package is more appropriate. see !nullclient_software for more details.[00:30:56] <pl> !nullclient_software[00:30:56] <knoba> pl: "nullclient_software" : a program that serves as a drop in replacement for /usr/sbin/sendmail and provides a simple means to submit messages to an existing msa without the need to install and maintain a full-blown mta/msa. examples include esmtp, ssmtp and nullmailer. also see !msa[00:31:37] <pl> !msa[00:31:37] <knoba> pl: "msa" : Message Submission Agent : a process which accepts message submissions from MUAs on port 587 known as 'message submission service' using the 'message submission protocol' defined by rfc4409. To enable message submission service in postfix uncomment the relevant lines in master.cf. also see !submission.[00:32:03] <pl> (thank you)[00:32:52] *** wdp has joined #postfix[00:35:24] <anonymous> btw, rob0, i apologize[00:35:38] <anonymous> i underestimated the submission protocol[00:36:02] <rob0> I'll never forgive you. NEVER!![00:36:19] <rob0> um ... wait ... what was I upset about?[00:36:37] <pl> !submission[00:36:38] <knoba> pl: "submission" : Port 587 is submission, for user submission of mail, NOT suitable for mail exchange. See the commented example in master.cf. also see !msa, and rfc 2476 and 4409. Also read http://www.maawg.org/port25[00:37:01] <anonymous> ah, there was a quarrel about port 25 blocking and all[00:38:17] <anonymous> in qmail, the issue was never raised[00:38:37] <anonymous> cause there was patches and patches and patches[00:38:46] <quasar> ok, so I'll be more specific since I'm not running chroot and the host is specified as 'localhost' which resolves to 127.0.0.1 ...[00:38:56] <quasar> why does trivial-rewrite look for a socket file?[00:38:59] <shasta> read mysql documentation[00:39:03] <anonymous> and none of them was taking submission into life[00:39:09] <shasta> "localhost" has a special meaning for mysql connect()[00:39:17] <shasta> it means "use local unix socket"[00:39:40] <shasta> if you want to use tcp/ip socket on 127.0.0.1, explicitly say that with hosts=127.0.0.1[00:45:22] <rob0> bbl[00:48:04] *** CMA has quit IRC[00:48:04] *** CMA_ is now known as CMA[00:48:20] *** uqlev has quit IRC[00:54:29] <anonymous> almost 3 AM at the place[00:54:42] <anonymous> probably, should have some rest[00:56:03] *** TomHome has joined #postfix[00:56:22] <pl> !lda[00:56:22] <knoba> pl: Error: "lda" is not a valid command.[00:57:36] <pl> I took a look to esmtp, ssmtp and nullmailer, but their main funcion seems to be to send mail to a mail hub to be delivered. What if I want to deliver mail to local users only?[00:58:55] <pl> I could install postfix and then disable the 'smtp' daemon that listens on port 25...[01:01:50] *** danigm has joined #postfix[01:02:45] *** Carnage has quit IRC[01:04:44] *** quasar has left #postfix[01:06:53] <danigm> hi all, I have postfix running in my server and today it increase load average to 40, I think that someone is trying to spam from my server.[01:07:11] *** plugwash has joined #postfix[01:07:21] <adaptr> that's very inconclusive[01:07:30] <adaptr> what do the logs say ?[01:07:39] <danigm> Aug 30 01:04:26 r19386 postfix/smtp[32511]: 21F86260E49: to=<922.sunbird2 at jseng dot com>, relay=mail.jseng.com[221.163.10.13]:25, delay=13223, delays=13221/1.8/0.74/0, dsn=4.4.2, status=deferred (lost connection with mail.jseng.com[221.163.10.13] while receiving the initial server greeting)[01:07:45] <danigm> lines like that[01:07:50] <adaptr> run something like pflogsumm to get accurate statistics[01:08:03] <adaptr> that just says mail was delayed for hours[01:08:06] <adaptr> so what ?[01:08:21] <rob0> That's OUTBOUND, not inbound. You'd have to see how/where 21F86260E49 (queue ID) came IN.[01:08:23] <shasta> locate the source of elevated loadavg[01:08:30] <rob0> anyway, I gtg[01:09:39] <cite> Good night, rob0.[01:10:02] <danigm> how can I check postfix queue?[01:10:03] <adaptr> quitter![01:10:07] <shasta> mailq[01:10:11] <adaptr> with...mailq ?[01:12:09] <danigm> mailq shows a lot of queues with a lot of mails[01:12:10] <danigm> 2543A2619EE 7418 Sat Aug 29 20:13:33 bud.sosa_wb at gmx dot de[01:12:10] <danigm> (connect to antispam2.mainstayca.com[67.91.214.99]:25: Connection timed out)[01:12:10] <danigm> cole at laborconnection dot com[01:12:10] <danigm> coleman at laborconnection dot com[01:12:13] <danigm> ...[01:12:15] <danigm> like that[01:12:29] <shasta> grep for 2543A2619EE in your logs, see how it came in[01:13:26] <shasta> but the recipient list looks like a typical spam pattern, $alphabeticalaccounts@somedomain[01:13:32] <danigm> yes[01:13:34] <cite> danigm: You might want to try out the excellent "qshape" tool: http://www.postfix.org/QSHAPE_README.html[01:14:41] <danigm>[01:14:55] <adaptr> ![01:14:57] <danigm> T 5 10 20 40 80 160 320 640 1280 1280+[01:14:57] <danigm> TOTAL 1506 0 1 3 2 3 13 1484 0 0 0[01:15:00] <danigm> ...[01:15:02] <danigm> together.net 162 0 0 0 0 0 0 162 0 0 0[01:15:06] <danigm> skynet.be 144 0 0 0 0 0 0 144 0 0 0[01:15:08] <danigm> and more[01:15:10] <adaptr> danigm: fuck off with that shit[01:15:14] <adaptr> use a pastebin[01:16:18] <danigm> http://pastebin.com/d3e5dfbe0[01:17:15] <danigm> the question is, it's from my server?[01:17:55] <shasta> the question is: why you're running a mail server if you can't analyze its logs?[01:18:20] <danigm> shasta: I'm doing it now :P[01:18:43] <shasta> you should've done it before asking questions like "is it from my server?"[01:18:50] <shasta> (really)[01:19:05] <danigm> shasta: ok, I'm learning[01:19:36] <shasta> [01:13:11] < shasta> grep for 2543A2619EE in your logs, see how it came in[01:22:50] <danigm> ok, pastebin tell me that: * Sorry, your post tripped our spam filter - let us know if you think this could be improved[01:23:04] <danigm> I will try with another service[01:23:11] <shasta> even pastebin thinks you're a spammer ;-P[01:24:50] <danigm> http://jottit.com/7xpmv/[01:25:10] <shasta> client=localhost.localdomain[127.0.0.1][01:25:17] <shasta> there's something nasty on your server :)[01:26:24] <adaptr> Windows ?[01:26:28] <danigm> no[01:27:04] <danigm> debian lenny[01:28:11] <shasta> postfix on windows? resolving to localhost.localdomain? ;)[01:28:39] <shasta> s/ to/ 127.0.0.1 to/[01:29:10] <adaptr> no, something nasty[01:30:23] <shasta> oh, that's more likely ;)[01:31:05] <shasta> danigm, if it's happening now, try doing: iptables -I INPUT -p tcp --dport 25 --syn -j LOG --log-uid[01:31:14] *** AndrewKT has joined #postfix[01:31:28] <shasta> (if you can't trace what's connecting to your smtpd otherwise)[01:31:43] <adaptr> I suggest he disconnect his server from the internet[01:31:51] <adaptr> make a disk clone[01:31:54] <adaptr> and do forensics[01:32:13] <anonymous> [and never connects back][01:32:29] * anonymous falls asleep[01:33:58] <danigm> shasta: iptables doesn't show nothing[01:34:19] <shasta> (hm, isn't log-uid valid only in output chain? :>)[01:35:32] *** topic has quit IRC[01:37:22] *** adaptr has quit IRC[01:38:34] *** adaptr has joined #postfix[01:40:45] *** stephan48 has quit IRC[01:57:05] *** fabounio has quit IRC[02:16:47] *** timotiCK has left #POSTFIX[02:22:09] *** Southron has left #Postfix[02:42:06] *** pingouin has quit IRC[02:44:18] *** CMA_ has joined #postfix[02:44:19] *** CMA has quit IRC[02:44:40] *** CMA_ is now known as CMA[02:50:19] *** bluethundr_ has quit IRC[02:58:10] *** pl has quit IRC[03:05:43] *** pingouin has joined #postfix[03:06:30] *** Motoko-chan has quit IRC[03:18:15] *** user_ has joined #postfix[03:44:08] *** bluethundr has joined #postfix[03:52:19] *** AndrewKT has quit IRC[03:53:08] *** CMA has quit IRC[03:54:26] *** CMA has joined #postfix[03:54:54] *** plugwash has quit IRC[03:56:47] <danigm> thanks to all, I got to go. Bye[03:56:49] *** danigm has quit IRC[04:03:26] *** rcsu has quit IRC[04:07:32] *** wdp has quit IRC[04:10:18] *** master_of_master has quit IRC[04:13:39] *** farchanjo has quit IRC[04:14:15] *** master_of_master has joined #postfix[04:22:23] *** andrewfree has joined #postfix[04:23:25] *** p3rror has quit IRC[04:41:49] *** pickcoder has joined #postfix[04:43:35] *** rcsu has joined #postfix[04:50:20] *** pickcoder has quit IRC[04:57:50] *** pingouin has quit IRC[05:12:51] *** hing has joined #postfix[05:14:07] *** higuita has quit IRC[05:29:23] *** jens_ has joined #postfix[05:32:33] *** pingouin has joined #postfix[05:45:52] *** jense has quit IRC[06:01:00] *** andrewfree has quit IRC[06:51:48] *** growltiger has joined #postfix[06:57:07] *** scylla has joined #postfix[07:05:50] *** andrewfree has joined #postfix[07:19:04] *** tjikkun has joined #postfix[07:31:40] *** growltiger has quit IRC[07:35:34] *** growltiger has joined #postfix[07:42:39] *** scylla is now known as Jack_sparrow[07:43:07] *** Jack_sparrow is now known as scylla[08:01:05] *** timotiCK has joined #POSTFIX[08:01:18] *** timotiCK has left #POSTFIX[08:12:15] *** beawesomeinstead has quit IRC[08:14:28] *** brsoft has joined #postfix[08:14:30] <brsoft> hello I really need help. Ive been using mail function with POSTFIX stopped and after a week I started it. Now it is sending all mails php couldnt send when it was down. How can I tell postfix to 'forget' those mails and dont send them?[08:14:51] <KB1JWQ> brsoft: postsuper can do it.[08:18:44] <standon> brsoft: postsuper -d; it is powerful, use with care.[08:20:01] <KB1JWQ> srsly[08:20:05] <KB1JWQ> man postsuper is your friend FIRST.[08:20:19] *** _Brun0_ has joined #postfix[08:20:27] *** _Brun0_ has left #postfix[08:23:16] *** scylla has quit IRC[08:35:22] <jetole> hey guys, does anyone know a way I can find a list of all bounced and expired messages from the syslog || mail.log files?[08:37:04] <standon> jetole: grep(1)[08:38:00] <jetole> standon: I was looking for something along the lines of a log parser, right off the bat expired doesn't show "to" on the "status=expired" lines[08:38:30] *** andrewfree has quit IRC[08:40:04] <standon> then use perl! it's lovely for these things.[08:40:05] <jetole> actually, bounced messages seem pretty easy => zgrep status=bounced /var/log/mail.log* | cut -d ' ' -f7 | sed -e 's/to=<\([^>]*\).*/\1/' | tr '[:upper:]' '[:lower:]' | sort -u[08:40:15] <standon> *yawns*[08:40:37] * standon uses postfix-logwatch[08:40:47] <standon> it gives me a lot of stats in a nice summary report every morning.[08:41:17] * jetole looks into it[08:41:48] *** beawesomeinstead has joined #postfix[08:47:59] *** andrewfree has joined #postfix[09:00:58] *** beawesomeinstead has quit IRC[09:24:15] *** fabounio has joined #postfix[09:28:36] *** bluethundr has quit IRC[09:41:51] *** mechdave has joined #postfix[09:42:04] *** mechdave has left #postfix[09:56:41] *** war9407 has joined #postfix[09:59:24] *** AbsoluteBeginner has joined #postfix[10:02:36] *** stephan48 has joined #postfix[10:28:33] *** gnot has joined #postfix[10:49:55] *** mactimes has joined #postfix[11:00:05] *** denis has joined #postfix[11:08:23] <KB1JWQ> pflogsumm is great. :-)[11:20:50] *** mactimes has quit IRC[11:22:27] *** wdp has joined #postfix[11:52:25] *** scylla has joined #postfix[11:57:41] *** growltiger has quit IRC[11:58:23] *** growltiger has joined #postfix[12:17:14] *** arnee has joined #postfix[12:19:58] *** sophokles has joined #postfix[12:25:09] *** githogori_ has quit IRC[12:39:29] *** stephan48 has quit IRC[12:40:09] *** stephan48 has joined #postfix[12:42:09] *** arne has joined #postfix[12:42:40] *** Zblakany has joined #postfix[12:48:23] *** mactimes has joined #postfix[12:49:36] *** arnee has quit IRC[12:49:37] *** arne is now known as arnee[12:52:03] *** F6F has joined #postfix[12:58:52] *** arne has joined #postfix[13:05:59] *** Guest39788 has quit IRC[13:06:38] *** Guest39788 has joined #postfix[13:09:23] *** lysander has quit IRC[13:09:32] <andrewfree> brb[13:09:56] <andrewfree> brb[13:11:40] *** Skaag has joined #postfix[13:12:50] *** kfo_ has joined #postfix[13:15:54] *** arnee has quit IRC[13:15:54] *** arne is now known as arnee[13:18:10] *** MatBoy has quit IRC[13:19:25] *** pl has joined #postfix[13:21:32] *** kfo has quit IRC[13:21:32] *** kfo_ is now known as kfo[13:23:28] <andrewfree> brb[13:32:32] *** sophokles has quit IRC[13:41:47] *** pl has quit IRC[13:44:24] *** arnee has quit IRC[13:44:40] *** lysander has joined #postfix[13:47:09] *** muh2000 has joined #postfix[13:48:13] *** vivek has joined #postfix[13:49:17] *** pingouin has quit IRC[13:54:11] *** plugwash has joined #postfix[13:55:22] *** rom1v has joined #postfix[13:55:23] <rom1v> hi[13:55:35] <rom1v> is it "safe" to have a smtp server which does not support authentication[13:55:47] <rom1v> (I installed postfix and it doesn't support authentication by default)[13:57:57] <plugwash> as long as it's set up sensibly yes[13:59:09] <plugwash> what you don't want to do is create an open relay[14:00:39] <rom1v> I want to be able to use my smtp from anywhere[14:00:44] <rom1v> (even remotely)[14:01:03] <rom1v> how to enable "plaintext" (understand plain in tls) authentication?[14:01:27] <rom1v> I added smtp_sals_security_options = noanonymous, it doesn't change anything, I can still connect without auth[14:04:13] <cite> rom1v: It's "smtpd", not smtp. And "sasl", not "sals".[14:04:14] <cite> !sasl[14:04:14] <knoba> cite: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.[14:05:04] <rom1v> it doesn't change anything :([14:05:17] * anonymous suddenly feels injured[14:05:24] <anonymous> hehe[14:05:37] <anonymous> good day, sirs[14:05:43] <rom1v> what I want to do: forbid anonymous connections[14:05:51] *** muh2000_ has joined #postfix[14:05:51] <rom1v> I just want to connect with my login/pass[14:05:57] <rom1v> (like for imap)[14:06:06] <rom1v> what should I do?[14:06:20] <cite> rom1v: There is a SASL readme. You will need to configure additional software for this to work, as well as changing your smtpd_*_restrictions.[14:06:36] <rom1v> additional software?[14:06:42] <cite> rom1v: I linked that file to you. But in case you missed it: http://www.postfix.org/SASL_README.html[14:07:08] <rom1v> ok thanks[14:08:38] <rom1v> I read it, I added :[14:08:39] <rom1v> smtpd_sasl_auth_enable = yes[14:08:40] <rom1v> smtpd_recipient_restrictions = permit_sasl_authenticated reject_unauth_destination[14:08:49] <rom1v> but I can still connect without authentication[14:09:03] <cite> You can always connect without authentication.[14:09:18] <rom1v> I am able to send a mail without authentication[14:09:28] <cite> SASL just allows you to use the flag "permit_sasl_authenticated" in smtpd's restrictions to accept an incoming request.[14:09:49] *** muh2000_ has quit IRC[14:10:06] <rom1v> what should I add in main.cf to forbid unauthenticated users?[14:10:06] <cite> You are probably sending mail from "localhost". Relay control in Postfix is done throught smtpd_*_restrictions.[14:10:10] <cite> !basic[14:10:10] <knoba> cite: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[14:10:20] <cite> rom1v: http://www.postfix.org/BASIC_CONFIGURATION_README.html[14:10:20] <rom1v> I send a mail from another host[14:10:44] <cite> Postfix documentation is amongst the finest found in any OSS project. Use it.[14:10:57] *** muh2000_ has joined #postfix[14:11:56] <rom1v> I found how to filter for a specific network…[14:12:42] <rom1v> … but no how to forbid unauthenticate users[14:14:46] <cite> That's because by default, nobody can relay a mail to a _foreign_ destination with Postfix.[14:15:04] <cite> It accepts mail originating from $mynetworks and mail for which it is the final destination. All other requests are rejected.[14:15:25] <cite> rom1v: http://www.postfix.org/SMTPD_ACCESS_README.html[14:16:47] *** pingouin has joined #postfix[14:19:00] *** muh2000 has quit IRC[14:27:02] *** muh2000__ has joined #postfix[14:28:04] *** muh2000_ has quit IRC[14:28:09] *** AbsoluteBeginner has quit IRC[14:30:43] *** muh2000__ has quit IRC[14:31:47] *** muh2000__ has joined #postfix[14:35:18] *** muh2000__ has quit IRC[14:36:13] *** muh2000__ has joined #postfix[14:40:39] *** stephan481 has joined #postfix[14:44:21] *** muh2000__ has quit IRC[14:44:39] *** muh2000__ has joined #postfix[14:45:30] *** timotiCK1 has joined #POSTFIX[14:45:40] *** timotiCK1 has left #POSTFIX[14:51:05] *** CMA_ has joined #postfix[14:54:50] *** stephan48 has quit IRC[14:55:22] *** F6F has quit IRC[14:56:17] *** pinoyskull has joined #postfix[15:01:35] *** hever has joined #postfix[15:02:34] *** CMA has quit IRC[15:02:34] *** CMA_ is now known as CMA[15:07:24] *** TomHome has quit IRC[15:07:34] *** vivek has quit IRC[15:07:59] <rom1v> ok thank you cite[15:08:48] <rom1v> do you have a configuration where : - no authentication for mynetworks, - authentication needed (linux login/pass) when network is not in mynetworks?[15:14:05] <cite> rom1v: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject - though this is not a suitable setup if you intend to _recieive_ mails.[15:15:27] <rom1v> why that? (I want to receive mails)[15:15:58] <cite> Because usually, you don't need authentication to deliver a mail to a mailserver when that mailserver is the final destination.[15:16:21] <anonymous> divide the flows, use submission[15:16:28] <cite> A less aggressive setup would be smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination[15:16:48] <cite> But that's all bad style, usually, submitting new mail should be done differently from receiving mail.[15:17:05] <cite> I.e. you should separate the MX functionality from the message submission part..[15:17:06] <rom1v> ok, and this options are sufficient to do what I want ? (especially the login/pass is the system account)[15:17:31] <cite> If you've setup the proper SASL backends and configured their use within postfix, yes, that's sufficient.[15:31:40] *** timotiCK has joined #POSTFIX[15:31:49] *** timotiCK has left #POSTFIX[15:33:09] *** muh2000__ has quit IRC[15:34:31] *** muh2000__ has joined #postfix[15:41:11] *** mactimes has quit IRC[15:50:11] *** nihilstar has joined #postfix[15:51:36] *** hever has quit IRC[15:58:01] *** hever has joined #postfix[16:03:40] *** Bushmills has joined #postfix[16:05:24] <Bushmills> in a postfix configuration with virtual recipients, as long as a recipient isn't listed in virtual, postfix refuses incoming mail to that name because of it not being listed. As soon there is an entry, even to a non-existing local user, mail is accepted. Can that be changed, so that users l[16:05:57] <Bushmills> listed in virtual still cause mail not to be accepted if the user doesn't exist?[16:08:48] <Bushmills> i understand that that would be difficult with mail which gets forwarded to another smtp server. but in case of trying to deliver to a (non-existing) local user, it is the same postfix, after all, so it potentially could know.[16:09:54] <anonymous> khm[16:10:05] <anonymous> if an user is in virtual mailbox map[16:10:11] <anonymous> it exists[16:10:49] <anonymous> or am i missing something in principles?[16:11:33] *** fabounio has quit IRC[16:13:02] <Bushmills> suppose a virtual entry: user@domain nonexistinguser@localhost , in which case user has an entry in virtualhost but does not factually exist.[16:13:52] <Bushmills> in this constellation, i'd like postfix to reject incoming mail to user@domain, because of non-existing user, even though it has an entry in virtual[16:16:04] <anonymous> such setup looks like a really messed up pile of things[16:16:39] <Bushmills> in fact it is meant to unmess things. i am trying to clean up somebody's wildcard recipient[16:17:33] <Bushmills> so for a limited period, say, several month, I'd like mail to *.domain still be accepted, while rejecting the common spam recipients.[16:18:21] <Bushmills> after some time, any wildcard recipient which hasn't received mail, will be considered dead anyway.[16:18:39] *** stephan48 has joined #postfix[16:20:25] *** timotiCK1 has joined #POSTFIX[16:20:35] *** timotiCK1 has left #POSTFIX[16:21:05] *** stephan481 has quit IRC[16:21:45] <Bushmills> (that's when the wildcard recipient, along with any added user@domain, which forwards to nonexistinguser, can be all dropped.[16:21:47] <Bushmills> )[16:22:12] <anonymous> sorry, i can't get what your point is[16:22:35] <Bushmills> you mean, why I am asking that, or what I am asking?[16:23:46] <anonymous> what for do you struggle[16:24:03] <Bushmills> to help somebody eliminating wildcard recipients[16:24:06] <anonymous> if you want to eliminate the catch-alls - eliminate them[16:24:23] <Bushmills> that would also bounce mail which is desired.[16:24:33] <anonymous> why[16:24:52] <anonymous> if it is pointed to some unexistent recipients?[16:24:56] <Bushmills> because that person had the habit of inventing recipient names on the fly[16:25:05] *** AbsoluteBeginner has joined #postfix[16:25:15] <Bushmills> while not tracking which recipient names were used for what purpose[16:27:11] <Bushmills> intention now is: phase 1: reject mail to recipients which a clearly spam targets. add virtual users of those recipient names which receive valuable mail.[16:27:43] <Bushmills> phase 2: after some time of harvesting the valuable recipient names, drop the catch all recipient, and the spam recipients[16:28:10] *** hacim has left #postfix[16:30:36] *** fabounio has joined #postfix[16:31:58] *** AbsoluteBeginner has quit IRC[16:42:44] *** fabounio has quit IRC[16:49:52] *** beawesomeinstead has joined #postfix[16:50:39] *** popeye has joined #postfix[17:00:08] *** Skaag has quit IRC[17:09:18] *** pingouin has quit IRC[17:15:44] *** Fallenou has joined #postfix[17:16:49] *** tibal has joined #postfix[17:20:31] *** bluethundr has joined #postfix[17:31:46] *** gerhard7 has joined #postfix[17:53:22] *** popeye has quit IRC[17:59:01] <tibal> hello[18:01:25] <standon> tibal: greetings.[18:03:05] <tibal> :)[18:04:22] *** jacobat_ is now known as jacobat[18:05:32] <tibal> I'm trying to understand if it's better to put dspam as a before-queue or after-queue content filter[18:05:54] <jluedke> depends on volume[18:06:00] <jluedke> in general after[18:06:07] <jluedke> dont want to tie up smtpd[18:06:26] <tibal> Ideally i'd like to bounce spam but I don't see that option in dspam preferences[18:06:53] <tibal> oh, volume is low[18:07:29] <jluedke> also if you bounce mail based on dspam, it can make it difficult to correct errors[18:09:36] <tibal> that's true, but filling the quarantine with 99% rated spams is hopeless[18:10:21] <jluedke> it's more the 1/n legit msg that you should be worried about[18:10:51] <jluedke> in general people get pissed when you bounce legit mail based on spam score.[18:11:53] <tibal> you're right, I'll stick with after-queue[18:11:55] <tibal> thanks[18:11:57] <jluedke> though i see the appeal of filter before queue.[18:27:12] *** AndrewKT has joined #postfix[18:39:41] *** bluethundr has quit IRC[18:49:23] *** denis has quit IRC[18:53:30] <Bushmills> tibal: bounce spam where to?[18:55:45] <tibal> Bushmills: I mean reject the mail right after the client sent it's body, during the connection[18:55:57] *** jtaji has joined #postfix[18:56:00] <tibal> but that may be impossible to do[18:56:04] <Bushmills> ah, ok.[18:58:01] <Bushmills> a lot of spam you can take out by smtp_*_restrictions[18:58:39] <Bushmills> also by greylisting, if your users can accept some delay with mail from unknown sending smtp servers[18:59:25] *** davidisk1 is now known as davidisko[19:00:22] <tibal> no we don't like greylisting :)[19:00:23] <Bushmills> what remains is often, depending on exposure and restrictions, af a quantity which is ok to handle.[19:00:49] <anonymous> greylisting is pure evil[19:00:58] <Bushmills> so is spam[19:01:15] <Bushmills> probably a matter of asking what the lesser evil is[19:02:56] <anonymous> when a cure is worse than the disease, i definitely chose the less[19:04:35] <tibal> (viagra is the cure of course)[19:05:34] <anonymous> first of all, goes enlargement[19:05:36] <anonymous> hehehe[19:05:52] <Bushmills> some people have more differentiated opinions about the pros and contras of one possible approach[19:07:38] <thumbs> don't greylist.[19:09:07] *** jtaji has quit IRC[19:14:25] <KB1JWQ> Does greylisting even work anymore?[19:14:41] <KB1JWQ> I see a bunch of ratware learned to queue-- so the ONLY thing you're doing is giving the bots time to hit blacklists.[19:15:03] <KB1JWQ> Slim chance in most cases, and for THAT you degrade email across the organization? Thanks, I'll pass. :-)[19:15:25] <thumbs> yes, it's one of the downsides.[19:15:38] <anonymous> +++[19:29:06] *** bluethundr_ has joined #postfix[19:29:16] <anonymous> now, time for the evening pipe and beer[19:31:22] <rob0> You smoke beer?[19:31:47] <anonymous> and, there was an 'and'[19:31:47] <thumbs> neat[19:32:33] <rob0> Well look, we were all impressed with you, and there you go AND blow it.[19:33:03] <thumbs> it takes a lot to impress rob zero too.[19:35:16] <anonymous> 8)))[19:37:03] *** deadpigeon has joined #postfix[19:47:27] *** scylla has quit IRC[19:50:24] *** pingouin has joined #postfix[19:57:02] *** aantix has joined #postfix[19:59:48] *** hparker has joined #postfix[20:09:11] *** aantix has quit IRC[20:20:40] *** pinoyskull has quit IRC[20:23:24] *** Skaag has joined #postfix[20:24:27] *** Blackshark has joined #postfix[20:39:53] *** Motoko-chan has joined #postfix[20:45:19] *** Skaag has quit IRC[20:48:29] *** hever has quit IRC[20:49:16] *** hever has joined #postfix[20:54:27] *** smesjz has joined #postfix[20:57:13] *** vivek has joined #postfix[21:00:53] *** RedShift has joined #postfix[21:04:14] *** MatBoy has joined #postfix[21:12:42] *** Bushmills has left #postfix[21:16:47] *** Fallenou has quit IRC[21:17:15] *** Fallenou has joined #postfix[21:19:35] *** Skaag_ has joined #postfix[21:33:04] *** vivek has quit IRC[21:33:24] *** Vivek has joined #postfix[21:39:13] *** githogori_ has joined #postfix[21:42:10] <RedShift> hi all[21:42:12] *** gerhard7 has quit IRC[21:42:21] <standon> greetings RedShift[21:42:28] <RedShift> I have two postfix instances running, one for outbound mail bound to 127.0.0.1 and one for incoming e-mail bound to a public IP address[21:42:43] <standon> marvelous.[21:42:53] <adaptr> I am speechless[21:43:11] <RedShift> however, when sending outbound mail to a domain that's being received on the same server, postfix stops with mail for my_fqdn_hostname loops back to myself[21:43:20] <adaptr> !loopback[21:43:20] <rob0> !loopback[21:43:20] <knoba> adaptr: "loopback" : 'Mail loops back to myself' means that your Postfix wanted to send out the mail to the internet but then discovered that the DNS says your mail server should be responsible. Most likely you forgot to list your domain in mydestination or virtual_(alias|mailbox)_domains[21:43:21] <knoba> rob0: "loopback" : 'Mail loops back to myself' means that your Postfix wanted to send out the mail to the internet but then discovered that the DNS says your mail server should be responsible. Most likely you forgot to list your domain in mydestination or virtual_(alias|mailbox)_domains[21:43:27] <rob0> I win[21:43:32] <adaptr> no you don't![21:43:41] * adaptr dons gloves[21:43:49] <RedShift> euh yes, but it is supposed to go via the other postfix instance[21:43:56] *** denis has joined #postfix[21:43:57] <adaptr> "supposed to" ?[21:44:12] <adaptr> postfix doesn't know it's an instance, it looks at DNS and IPs[21:44:22] <rob0> It means that your domain class definition[s] is[are] not what you think.[21:44:51] <RedShift> meh I really don't like this setup but I don't see an alternative way[21:45:15] <RedShift> I'll explain, I have two e-mail servers which receive e-mail for the same domain[21:45:37] <RedShift> some mailboxes should be on server1, the others on server2[21:45:48] <rob0> Your explanation isn't likely to change the answer.[21:46:09] <RedShift> so what I did was, the e-mail that is supposed to go to server2, I aliased them on server1, for example server2 at example dot com -> server2 at server2 dot example.com[21:46:25] <RedShift> on server2 I do the opposite, server2 at server2 dot example.com -> server2 at example dot com[21:46:43] <RedShift> this is fine for sending e-mail, but the users on server2 that want to send e-mail to mailboxes on server1 can't[21:48:10] <RedShift> I know it's a messy setup but that's the way it is :([21:48:25] <RedShift> the problem is server1 is a "normal" e-mail server while the other is a groupware server[21:48:33] <rob0> As /topic suggests, you can prepare a pastebin with all relevant information: postconf -n, logs of this happening, relevant map entries.[21:48:38] <RedShift> since for the groupware machine we need licenses per user...[21:48:42] <rob0> !mung[21:48:43] <knoba> rob0: "mung" : Mash Until No Good : the art of obfuscating data which ultimately results in unintentional consequences such as making diagnostics impossible.[21:48:48] <adaptr> rob0: I'm not sure you're being heard[21:49:02] <adaptr> typical instance of talking but not listening[21:49:16] <adaptr> heaps of data but no actual information[21:49:20] <rob0> Obfuscated domain names will make diagnostics difficult to impossible.[21:49:26] <adaptr> a very low Shannon coefficient[21:49:32] <standon> lol[21:49:38] <standon> this is ridiculous.[21:49:43] <rob0> I think I might be in a lot of /ignore lists.[21:49:50] <standon> it's as if RedShift is not even listening to rob0.[21:49:56] <rob0> which doesn't bother me actually.[21:50:02] *** growltiger has quit IRC[21:50:03] <standon> it bothers _me_[21:50:08] <RedShift> ofcourse I'm listening to rob0, I would react the exact same way as he did[21:50:17] <standon> oh![21:50:21] * standon applauds, slow-clap style.[21:50:28] <RedShift> I'd be the first to complain not enough data[21:50:40] *** growltiger has joined #postfix[21:50:40] <rob0> okay, you know what to do, I'll bbiaf and see your pastebin.[21:50:41] <adaptr> he never said that, I did[21:50:47] <standon> and yet, you are guilty of being the person you'd be first to complain about? the irony, it's so... rich.[21:50:48] <RedShift> but since I'm doing this for another company, they might not like having their configs shared with someone else[21:50:58] <rob0> ah[21:50:58] <adaptr> and the problem is not not enough data, the problem is too much data, but blabber, not relevance[21:51:20] <anonymous> [23:51] <adaptr> and the problem is not not enough data, the problem is too much data, but blabber, not relevance[21:51:22] <standon> RedShift: paypal me $250 and i'll fix your problem in about 10 minutes.[21:51:29] <rob0> well, then your choice is only to reread the information provided and try to understand why it is so.[21:51:39] <rob0> Your answer is in there.[21:51:40] <thumbs> RedShift: so they are likely to get upset if they find out you can't solve the problem on your own?[21:51:44] <rob0> afk[21:52:00] <standon> thumbs: lest he expose his postfix newbieness![21:52:05] <thumbs> heh[21:52:16] <adaptr> his *paid* newbieness, mind you[21:52:22] <standon> adaptr: touche, touche indeed.[21:52:29] <adaptr> it would be the last time I paid him, if he was[21:52:51] * standon is consistently frustrated by paid 'professionals' asking for help with basics in here. makes me feel like the dumb one.[21:52:53] <RedShift> thumbs: no, but I wouldn't have this problem in the first place if they weren't so stupid to split up the e-mail domain like they did now[21:53:07] <adaptr> so crrect it[21:53:18] <standon> RedShift: splitting large sets of users across several different servers is quite standard practice, actually.[21:53:30] <RedShift> standon: yes, but not the way it's arranged right now[21:53:49] <standon> RedShift: $transport_maps are your bestest of friends.[21:54:04] <RedShift> OFCOURSE[21:54:07] <RedShift> transports maps[21:54:13] <adaptr> standon: splitting large numbers of *mail stores* across servers is standard practice; also dividing user authentication and handling is not[21:54:13] <RedShift> how could I have been so stupid[21:54:26] <RedShift> FFS[21:54:38] * RedShift curses[21:55:15] <thumbs> adaptr: I agree with your last point[21:55:28] <thumbs> adaptr: for once[21:55:36] <adaptr> wait, let me write that down[21:55:49] *** SomeoneE1se has joined #postfix[21:56:36] <adaptr> "ar-ro-gant thumb-fucker agreed with me today; I am god, life is good - yay! moar cookies"[21:56:48] *** denis__ has joined #postfix[21:57:10] <thumbs> speaking of arrogance...[21:57:39] <adaptr> ...yes ?[21:57:41] *** denis__ has quit IRC[21:57:41] <anonymous> that was cruel[21:57:50] <adaptr> how so ?[21:57:58] <thumbs> adaptr: your display in #mysql was quite obvious[21:58:05] <SomeoneE1se> Hello, I'm trying to forward all mail from an address to a script (php) that will do something based on the contents. It was suggested I use maildrop to forward it to the script but I'm unable to get it to foward to maildrop... suggestions?[21:58:33] *** MatBoy has quit IRC[21:58:42] <adaptr> thumbs: aww why were you looking, then ?[21:58:58] *** githogori_ has quit IRC[21:58:58] *** Fallenou has quit IRC[21:58:58] *** smesjz has quit IRC[21:58:58] *** stephan48 has quit IRC[21:58:58] *** plugwash has quit IRC[21:58:58] *** ek has quit IRC[21:58:58] *** k1ckn1ck has quit IRC[21:58:58] *** shasta has quit IRC[21:58:58] *** sysmonk has quit IRC[21:58:58] *** Nockian has quit IRC[21:58:58] *** Kreg-Work has quit IRC[21:58:59] *** ek_ has joined #Postfix[21:59:01] *** shasta has joined #postfix[21:59:05] <adaptr> SomeoneE1se: use procmail ? use a custom transport ?[21:59:06] *** smesjz has joined #postfix[21:59:10] *** Kreg-Work has joined #postfix[21:59:13] *** stephan48 has joined #postfix[21:59:16] *** plugwash has joined #postfix[21:59:19] *** githogori_ has joined #postfix[21:59:19] *** Nockian has joined #postfix[21:59:25] <adaptr> I feel all schizophrenic[21:59:27] <standon> adaptr: did i say anything about authentication?[21:59:32] <SomeoneE1se> I was trying to use a custom transport[21:59:34] <thumbs> adaptr: I am merely pointing out that it was too ahrsh[21:59:36] * standon checks the logs, makes sure other people are still putting words in hsi mouth...[21:59:45] <adaptr> thumbs: I understand that, and you're probably right[21:59:47] <SomeoneE1se> but the mail keeps bouncing back when I try to[21:59:59] *** Fallenou has joined #postfix[22:00:16] <standon> yep, never said it. i'm _not_ crazy! wee![22:00:16] <thumbs> adaptr: it happens a bit too often lately.[22:00:35] * standon encourages comprehension of context.[22:01:04] <adaptr> standon: YOU did not, no - but it is a common theme. mail storage is trivial and even advisable to split up amongst storage boxes, however, any tasks that require a central information store can be redundant but are harder to manage when actually split in multiple parts[22:01:21] <standon> *yawn*, preaching to the converted, sir.[22:01:36] <adaptr> just explicating what I meant[22:01:44] * standon nods[22:02:06] <standon> seriously, RedShift, for $250 i can make you appear worth whatever salary you're getting for this 'job' of yours.[22:02:15] <adaptr> $100[22:02:19] <adaptr> heheh[22:02:22] <standon> under-cutter!![22:02:27] <standon> it's a price war, biatches![22:02:30] <adaptr> no, I mean that might be his salary[22:02:34] <standon> LOL[22:02:36] <adaptr> meaning he pays you 150 for the lesson[22:02:42] <adaptr> win-win[22:02:47] <standon> hey, that might still be worth it![22:03:13] <anonymous> that IS cruel[22:03:15] <RedShift> standon: I can't charge this on the company I'm doing this for, so I'd have to pay that out of my pocket[22:03:20] <RedShift> not intending on doing that[22:03:20] <anonymous> but probably just[22:03:32] <adaptr> anonymous: offering to do paid work is cruel ?[22:03:38] <standon> RedShift: what company is this?[22:03:56] <RedShift> some small computer firm in my local area[22:03:59] *** sysmonk has joined #postfix[22:04:03] <adaptr> anonymous: or are you simply challenging anything you don't understand[22:04:16] * standon wanders off, good luck RedShift.[22:04:21] <anonymous> no. i'm just kidding[22:04:46] *** rcsu has quit IRC[22:04:53] <anonymous> btw, a little offtop, if there a channel around less general than #mysql, dedicatetd to percona/google/xtradb things?[22:05:31] *** s0ber has quit IRC[22:05:59] *** s0ber has joined #postfix[22:06:53] *** war9407 has quit IRC[22:08:22] <anonymous> guess no[22:08:44] <adaptr> why don't you ask there ? I'm sure your chances are better[22:10:53] <anonymous> there - where? on #mysql? indeed i will[22:11:20] <anonymous> just saw a mention of it in here[22:12:38] *** Fallenou has quit IRC[22:13:15] *** tjikkun has quit IRC[22:13:29] *** tjikkun_ has joined #postfix[22:18:48] *** Guest39788 has quit IRC[22:19:58] <SomeoneE1se> ok I need to receve mail on one address and forward it to a script.. any suggestions on how to go about this one?[22:21:47] <adaptr> several, depending on what you use now[22:21:55] <RedShift> screw it[22:22:02] <RedShift> I'm calling them tomorrow saying it isn't possible[22:22:05] <RedShift> they'll have to live with it[22:22:17] <adaptr> I myself would probably devise a transport map fed from a virtual alias[22:22:23] <SomeoneE1se> postfix + mysql + virtual domains[22:22:41] <adaptr> ...and virtual aliases, presumably[22:22:51] <SomeoneE1se> yes[22:22:51] <RedShift> adaptr: the problem is that the domain is both virtual and relay destination[22:22:55] <RedShift> it's either one of the two[22:23:04] <adaptr> RedShift: I wasn't talking to you[22:23:11] <RedShift> ok[22:23:42] <adaptr> and as the log tells you, don't put a domain in more than one address class[22:24:01] <adaptr> whatever you have now is not the right solution[22:24:42] *** MatBoy has joined #postfix[22:25:46] <RedShift> not gonna look for it anymore, always promised myself I wouldn't get myself into such dire configurations[22:26:09] <adaptr> a wise decision[22:28:10] *** Fallenou has joined #postfix[22:29:19] <SomeoneE1se> so how do I forward mail for a virtual user to a script?[22:30:25] <adaptr> one fairly standard solution is to first alias it to a dummy internal recipient, then pick that up with a transport map[22:31:18] <adaptr> if you don't alias it, it may not necessarily be picked up by the transport map - say, if it should be delivered locally[22:31:40] <SomeoneE1se> I didn't know you could alias virtual users[22:31:55] <adaptr> !virtual[22:31:55] <knoba> adaptr: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html[22:32:00] *** smesjz has quit IRC[22:32:20] *** stephan48 has quit IRC[22:33:11] *** pingouin has quit IRC[22:33:13] * SomeoneE1se reads thanks adaptr[22:37:33] *** user_ has quit IRC[22:42:51] <SomeoneE1se> adaptr works as I wanted it to[22:42:55] <SomeoneE1se> thank you so much[22:44:26] <adaptr> yw[22:52:19] *** Skaag_ has quit IRC[22:57:03] *** MatBoy has quit IRC[22:57:14] *** MatBoy has joined #postfix[23:02:51] *** SomeoneE1se has left #postfix[23:09:57] *** denis has quit IRC[23:10:04] *** uqlev has joined #postfix[23:10:20] <tibal> In most howtos, people use some hack to bypass a content filter when mails are sent by authenticated users or local networks[23:10:37] <tibal> They use a pcre table to "jump" to another transport[23:10:48] <tibal> Is there an other way to do this ?[23:12:56] *** Vivek has quit IRC[23:16:12] *** Skaag has joined #postfix[23:17:28] *** rom1v has quit IRC[23:18:15] *** pingouin has joined #postfix[23:18:33] *** xercist has quit IRC[23:19:12] *** growltiger_ has joined #postfix[23:22:24] <adaptr> don't use a global content filter[23:22:55] *** growltiger has quit IRC[23:24:13] *** githogori_ has quit IRC[23:25:38] *** percious has joined #postfix[23:33:07] <percious> hey guys, im trying to get smtp_auth working on my server, so that any of the users of my server can relay mail through our server[23:34:22] <adaptr> !submission[23:34:22] <knoba> adaptr: "submission" : Port 587 is submission, for user submission of mail, NOT suitable for mail exchange. See the commented example in master.cf. also see !msa, and rfc 2476 and 4409. Also read http://www.maawg.org/port25[23:34:52] <percious> here is what my config looks like: http://pastebin.com/d65d27344[23:34:57] <percious> (an excerpt)[23:35:00] <percious> am I missing something?[23:38:22] *** growltiger_ has quit IRC[23:39:02] *** growltiger has joined #postfix[23:43:23] *** hparker has quit IRC[23:55:35] *** Skaag has quit IRC