May 18, 2011 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
May 18, 2011 [00:07:54] *** Timzzzz is now known as Timmooo[00:09:08] *** milligan has quit IRC[00:13:38] *** l1nuxman has quit IRC[00:16:11] *** basho__ has quit IRC[00:16:59] *** milligan has joined #postfix[00:20:12] *** abyss has quit IRC[00:21:42] *** jacobfogg has joined #postfix[00:22:14] *** biggimat has joined #postfix[00:25:05] <jacobfogg> So I am new to postfix and am trying to update the users that are copied on what I consider "groups". I did some digging and it looks like our current definitions reside in our virtual file. I carefully edited this file and ran a "postfix reload" but it didn't seem to get the job done... so I tried a "postfix stop" followed by a "postfix start" but it still does not seem to be working... what am I missing here???[00:25:11] *** Matic`Makovec has quit IRC[00:25:25] <seekwill> Config[00:25:46] <seekwill> Probably need to update your hash[00:25:59] <Aprogas> seekwill the fishgiver[00:26:09] <seekwill> :)[00:26:23] <seekwill> I can't answer very many Postfix questions. So I try when I can[00:26:50] <Aprogas> jacobfogg: You should really make an effort to truely understand your Postfix setup, rather than it being some great unknown that works as it should most of the time and you just pray for the best.[00:27:14] <jacobfogg> I agree... That is why I am here[00:27:42] <jacobfogg> I am reading through page after page of my google search "postfix update hash" and am finding nothing useful...[00:27:49] <seekwill> config...[00:27:56] <jacobfogg> getting that now =)[00:28:01] <seekwill> CONFIG!!!![00:28:58] <Aprogas> !basic[00:28:58] <knoba> Aprogas: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[00:29:33] *** iAmerikan has joined #postfix[00:29:41] *** iAmerikan is now known as Kingrat[00:30:34] <jacobfogg> reading this now[00:31:09] <seekwill> Who need config files anyways[00:32:29] <roe> I've converted my config files to a hash[00:32:39] *** biggimat has quit IRC[00:33:34] <jacobfogg> http://pastebin.com/CrBx3asa[00:33:35] *** mambaw has quit IRC[00:34:01] <jacobfogg> the virtual aliases are currently stored in /etc/postfix/virtual[00:34:11] <jacobfogg> this is where I made the changes[00:34:21] <seekwill> http://www.postfix.org/DATABASE_README.html[00:34:40] <seekwill> HERES A FISHING POLE[00:35:01] <seekwill> Aprogas: r u happy now?[00:35:14] <roe> I would have preferred you give him a spear[00:35:21] <Aprogas> seekwill: Somewhat.[00:35:45] <seekwill> Aprogas: well u suck thumbs[00:36:26] *** jacobfogg has left #postfix[00:36:37] <Aprogas> I'm waiting for lunaphyte to comment on your usage of "r" and "u"[00:36:59] <seekwill> I thought thumbs did[00:38:08] *** jacobfogg has joined #postfix[00:46:44] *** yashy has joined #postfix[00:47:52] <yashy> I'm trying to get TLS working with postfix, I'm getting an error with no results on Google:[00:47:54] <yashy> warning: TLS library problem: 18045:error:140760FC:SSL routines:578[00:49:09] <Aprogas> Make a pastebin showing that error in its context, also include your configs.[00:50:28] *** loddafnir has quit IRC[00:54:04] *** sphenxes has quit IRC[00:55:07] <adaptr> !tell yashy tls[00:55:07] <knoba> yashy: "tls" : Transport Layer Security (RFC2246). Previously known as SSL, TLS adds a layer of encryption to protocols such as SMTP, submission, IMAP or POP3 to improve security during transmission over the Internet. TLS is implemented using the STARTTLS method, while the non-standard wrapper style of implementation is deprecated at this point. See http://www.postfix.org/TLS_README.html for more info.[00:55:11] *** e-anima has quit IRC[00:55:21] <adaptr> yashy: read that document. ALL of it.[00:55:36] <Aprogas> adaptr: is this about gnutls?[00:55:59] <adaptr> how should I know ?[00:56:08] *** bubu has joined #postfix[00:56:20] <Aprogas> Maybe you had a guess.[00:56:40] <adaptr> that was my guess.[00:56:46] <Aprogas> It was my guess because I vaguely remember something about gnutls being in the TLS readme.[00:56:48] <adaptr> go to sleep![00:56:52] <Aprogas> Indeed.[00:56:54] <Aprogas> !sleep[00:56:54] <knoba> Aprogas: Error: "sleep" is not a valid command.[00:57:00] <adaptr> !bed[00:57:00] <knoba> adaptr: Error: "bed" is not a valid command.[00:57:03] <adaptr> sucky bot[00:58:06] <jacobfogg> ok, so I read through the entire http://www.postfix.org/LDAP_README.html file. There is some good stuff there, but it still is not cluing me in on how to get postfix to register the changes to the virtual file...[00:58:28] <Aprogas> jacobfogg: seekwill linked you to the databases readme, not the ldap readme.[00:58:36] <Aprogas> jacobfogg: You are using a hash-table, not an ldap-table.[00:58:54] *** dall has quit IRC[00:58:58] <seekwill> heh[00:59:02] <jacobfogg> sorry, copied and pasted the wrong link...[00:59:15] <jacobfogg> I had also read up on the ldap...[00:59:28] <Aprogas> !tell jacobfogg postmap[00:59:29] <knoba> jacobfogg: "postmap" : a command to 'compile' text files to hash databases. Example: a file transport will be converted to transport.db by running 'postmap transport'. Your main.cf will contain something like transport_maps = hash:/etc/postfix/transport (without the '.db')[00:59:46] <roe> Aprogas, what happened to fishing?[00:59:57] <Aprogas> I'm going to bed anyway.[01:00:05] <adaptr> fishing and wagging don't mix[01:01:56] <Aprogas> Give a man some sleep and he is rested for a day, put a man to sleep and he is rested for the rest of his life.[01:02:19] <jacobfogg> Thanks Aprogas, so I need to reload postfix as well?[01:02:32] <Aprogas> jacobfogg: No, and you already did that.[01:02:41] <jacobfogg> excellent, testing...[01:03:01] <Aprogas> jacobfogg: Perhaps scroll up and re-read what seekwill said as one of his first replies.[01:03:16] <seekwill> Never believe a talking fish[01:03:35] <jacobfogg> That did it... thanks[01:03:45] <Aprogas> seekwill: What about Enki? The Sumerian God that gave fire and writing to mankind?[01:03:53] <seekwill> Sushi[01:04:00] <adaptr> Snuki[01:04:29] <adaptr> The Joy-see-shoy goddess who takes fire and spurns writing[01:04:51] <adaptr> bcuz, you know, writing is for loosers[01:11:40] *** jacobfogg has left #postfix[01:16:26] *** brancaleone has quit IRC[01:25:28] *** dragonheart has joined #postfix[01:33:37] *** Timmooo is now known as Timzzzz[01:34:20] <rob0> seekwill: here's one. It's not the first ESP pregreeter I've seen. This particular one had no DNSBL hits.[01:34:29] <rob0> http://pastebin.slackadelic.com/p/rE9IDF61.html[01:37:11] <seekwill> Hmm.. never heard of them[01:37:49] <Adita_Virgen> SOY BLANQUITA MI CAM ESTA LISTA[01:38:15] <thumbs> Adita_Virgen: no.[01:39:28] *** Adita_Virgen has quit IRC[01:41:11] <seekwill> rob0: I'd pick an ESP off the MAAWG sponsor list ( http://www.maawg.org/about/roster ) or publish reputable articles about deliverability ( deliverability.com )[01:41:45] <standon> jimpop: based on my code review, it is not poorly designed; would love to hear your thoughts on an actual code review. i know mark from amavisd uses it as well, for what (little) that may be worth to you.[01:43:21] <seekwill> standon: ?[01:47:03] *** kuhkatz has quit IRC[01:47:34] <jimpop> exactly. ??[01:48:23] <jimpop> standon: gonna need more data[01:48:31] <jimpop> !tell standon basic[01:48:31] <knoba> standon: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[01:48:40] <jimpop> !tell standon logs[01:48:40] <knoba> standon: "logs" : postfix logs to the mail facility of syslog. Something like grep -i `postconf -h syslog_facility` /etc/syslog.conf should tell you where logs are going. also see !no_logs and !have2mung[01:48:42] <rob0> !beer[01:48:42] <knoba> rob0: Error: "beer" is not a valid command.[01:48:57] <adaptr> !milk_and_cookies[01:48:57] <knoba> adaptr: Error: "milk_and_cookies" is not a valid command.[01:54:48] <standon> seekwill: i'm responding to jimpop's criticism of unbound. see your backlog for context.[01:55:08] <jimpop> oh[01:55:14] <jimpop> that[01:55:17] <standon> yes, that.[01:56:13] <jimpop> well, i still feel the same. If I found out today that wietse designed postfix from a java prototype, i would be back to using sendmail tomorrow.[01:56:16] <seekwill> standon: It's not in my backlog anymore :([01:56:52] <standon> seekwill: it's not such a big deal; turn that smile upside down.[01:58:16] <seekwill> I can't for very long or I pass out[01:59:35] <adaptr> +1[02:00:23] <standon> perhaps some rest is in order, anyway.[02:00:36] *** p3rror has quit IRC[02:01:24] <adaptr> REST ?[02:01:49] <standon> RST, too.[02:03:37] *** seekwill has quit IRC[02:07:43] *** wdp_ has joined #postfix[02:08:04] *** gebi_ has joined #postfix[02:09:59] *** gebi has quit IRC[02:17:18] *** lusted_gay has quit IRC[02:17:33] <jimpop> standon: my first impression is not backed up by my second impression[02:17:48] <jimpop> as a good rule of thumb, java coders never comment[02:18:04] <jimpop> so far i have seen few if any code comments in unbound[02:18:27] <thumbs> jimpop: the code is self-descriptive![02:18:36] <jimpop> there are a lot of defs like *ON_WINDOWS tho that worry me[02:18:39] *** _ruben has quit IRC[02:18:53] * standon is not a java coder, so can't comment without hearsay on their inclinations.[02:19:02] <jimpop> thumbs: exactly, that is their mentality[02:19:34] <standon> in any case, i'm smitten with unbound. YMMV.[02:19:40] <jimpop> i haven't yet looked at the postfix source... but i am going to now. $100 says it's well commented[02:20:59] *** _ruben has joined #postfix[02:22:33] <standon> jimpop: us C coders tend to comment heavily; take a look at it; lots to be gleaned from reading Postfix source.[02:26:42] <jimpop> standon: that's my whole point. C coders (i am one) comment because they are more disciplined. I try and only use code that is developed by disciplined folks.[02:28:56] <standon> jimpop: i empathize with your tendency to write off what you consider to be 'insufficiently commented' code.[02:29:35] <jimpop> don't forget the "based on a java prototype" part. ;-)[02:30:56] <standon> i haven't forgotten it; just don't find it terribly relevant. :)[02:31:18] <jimpop> as you said earlier, ymmv. ;-)[02:33:05] <standon> yes.[02:34:59] <tharkun> jimpop: C coders have to comment because you need soo many lines to achieve something that it is far easier to forget the full context of those lines of codes[02:36:39] <standon> tharkun: ha, that's why i'm typically writing Perl these days.[02:39:43] <tharkun> I've managed to make myself a workflow for importan apps. I do all the prototyping on the highest level programming language. And according to needs i begin to do the proper lower level rutines to achieve the best performance for that specific function[02:40:29] *** _ruben has quit IRC[02:40:33] <tharkun> It has worked for me. Problem now is people want to have access from their smarphones when they are on the beach. And they expect everything to be in 2 weeks time[02:40:55] *** _ruben has joined #postfix[02:41:40] <tharkun> </rant><sleep>[02:43:49] <jimpop> lol[02:49:53] *** jeev has quit IRC[03:05:26] *** pj has joined #postfix[03:07:42] *** master_of_master has quit IRC[03:09:51] *** master_of_master has joined #postfix[03:25:38] *** Cain` has joined #postfix[03:27:07] *** Cain has quit IRC[03:28:48] *** Cain` is now known as Cain[03:36:23] *** nor42 has quit IRC[03:40:52] *** xpeed has joined #postfix[03:44:05] *** Belial__ has quit IRC[04:09:30] *** bubu has quit IRC[04:10:21] *** wdp_ has quit IRC[04:11:41] *** wdp has quit IRC[04:34:15] *** hparker has quit IRC[04:43:09] *** sfire||mouse has joined #postfix[04:45:03] <sfire||mouse> Anyone familiar with amavis and policyd ( doing rate limiting ). We have an outbound postfix server with those, but now we are trying to add support for it to accept mail, but it complains that the mail loops back to itself after it passes the amavis check. I think its because amavis re-injects the email, but I wanted to confirm here if possible[04:46:12] <lunaphyte> !tell sfire||mouse welcome[04:46:12] <knoba> sfire||mouse: "welcome" : welcome to #postfix! if you're joining for the first time, or are new to irc, the first thing you'll want to do is read the channel topic (/topic). it includes crucial instructions on how to effectively ask for help here, and what data you should include with your questions. the degree of success you'll have is directly related to how effectively you're able to follow those guidelines.[04:47:28] <sfire||mouse> I read the chanserv, but not the topic, thanks[04:52:44] <sfire||mouse> I'll do some more searching before pestering in here more[05:00:23] *** Timzzzz is now known as Timmooo[05:02:26] *** Motoko has joined #postfix[05:05:13] *** portalgod has joined #postfix[05:05:23] <portalgod> ? header_checks[05:06:28] <portalgod> does it matter where in main.cf I list the line header_checks = XXX[05:06:34] <standon> no.[05:06:41] <portalgod> i didn't think so .. hmm[05:07:00] <portalgod> i'm tryin to use header checks to detect common non-ascii non-english charsets[05:07:14] <portalgod> i think i've got it, but trying to figure out how to test it :)[05:09:59] <portalgod> ahh postmap -q will do it[05:19:42] *** portalgod has left #postfix[05:24:09] *** xpeed has quit IRC[05:33:04] *** ScorpiusLetalis has quit IRC[05:34:01] *** ScorpiusLetalis has joined #postfix[05:42:40] *** beginer has joined #postfix[05:46:33] *** shoonya has quit IRC[05:46:49] *** krzie has joined #postfix[05:47:43] *** xeodox has quit IRC[05:49:26] *** Kingrat has quit IRC[05:55:11] *** Kingrat has joined #postfix[05:55:44] *** war9407 has quit IRC[05:56:06] *** MAAAAD has joined #postfix[05:56:25] *** war9407 has joined #postfix[05:58:21] *** MAAAAAD has quit IRC[06:07:34] *** MAAAAD has quit IRC[06:07:34] *** plee has quit IRC[06:07:35] *** youknowh1 has quit IRC[06:07:35] *** chrisq has quit IRC[06:07:35] *** ccxCZ has quit IRC[06:07:35] *** runev has quit IRC[06:07:35] *** viddy has quit IRC[06:07:35] *** vho has quit IRC[06:08:17] *** MAAAAD has joined #postfix[06:10:26] *** plee has joined #postfix[06:10:26] *** youknowh1 has joined #postfix[06:10:26] *** chrisq has joined #postfix[06:10:26] *** ccxCZ has joined #postfix[06:10:26] *** runev has joined #postfix[06:10:26] *** viddy has joined #postfix[06:10:26] *** vho has joined #postfix[06:27:48] <sfire||mouse> was able to troubleshoot the issue[06:27:51] *** sfire||mouse has left #postfix[06:37:12] *** hever has joined #postfix[06:56:09] *** cytrinox_ has joined #postfix[06:58:57] *** cytrinox has quit IRC[06:58:57] *** cytrinox_ is now known as cytrinox[07:13:14] *** loddafnir1 has joined #postfix[07:30:08] *** gebi_ is now known as gebi[07:43:03] *** lusted_gay has joined #postfix[07:44:15] *** jfried has joined #postfix[07:45:50] *** roentgen has joined #postfix[07:51:56] *** pj has quit IRC[08:00:51] *** e-jones has joined #postfix[08:06:12] *** Kartagis has joined #postfix[08:06:17] <Kartagis> hello[08:06:47] <Kartagis> what are my options in order not to have deferred e-mails?[08:10:57] *** e-jones has quit IRC[08:12:37] *** Zeit|awy has joined #postfix[08:12:59] *** fahadsadah has quit IRC[08:15:59] *** fahadsadah has joined #postfix[08:25:33] <sep> define "not to have deferred e-mails"[08:27:42] <Kartagis> sep: I have too many deferred e-mails on pflogsumm report. what can I do to prevent them?[08:28:18] <Kartagis> 905 deferred (15242 deferrals)[08:30:06] <sep> you can only look at mails that eventually get rejected ? each mail usualy logs's a reason. deal with each reason as you find them, other then that't most deferrals could be greylisting. so the mail will succeed on the next attempt[08:30:51] <Tabmow> This may be of help, http://www.postfix.org/QSHAPE_README.html[08:30:53] <sep> if that's a problem for you you'r only option is to talk to the recipient mailserver admins and ask to be whitelisted.[08:32:16] <sep> Kartagis, I allways assumed you was a legit sender without any spam or other external couses that obviously needs fixing.[08:35:59] <Kartagis> sep: I am a legit sender, but apparently one website I host is under attack[08:36:07] *** Timmooo is now known as Timzzzz[08:40:07] <sep> then asking how to reduce the numbers of deferred is not sane. fix / block the attach '[08:40:41] <sep> once you have stopped the inflood of mail's you can delete mail stuck in queue with some grep magix + postsuper[08:41:12] *** Lujeni has joined #postfix[08:47:11] *** basho__ has joined #postfix[08:52:28] <beginer> Please help, How can i use mail or mailx command to read mails from Maildir??[08:55:02] <sep> i dont know if mail have maildir support. have you read thru man mail (or at the very least searched for maildir in it )[08:56:09] <beginer> ok i mean mailx[08:56:21] <beginer> how to do it using : mailx?[09:00:04] *** jujugre has joined #postfix[09:02:46] *** breaker313 has joined #postfix[09:04:07] <sep> my answer works the same for mailx and mail; also this is offtopic on #postfix; and you can also read http://ubuntuforums.org/archive/index.php/t-528433.html[09:05:41] <beginer> ok si[09:05:43] <beginer> r[09:08:07] *** dragonheart has quit IRC[09:11:44] *** Kingrat has quit IRC[09:12:35] *** weedar has joined #postfix[09:13:31] *** Motoko has quit IRC[09:17:31] *** gerhard7 has joined #postfix[09:21:00] *** krzie has quit IRC[09:21:33] *** e-anima has joined #postfix[09:26:25] *** sphenxes has joined #postfix[09:26:50] *** sphenxes has quit IRC[09:27:24] *** sphenxes has joined #postfix[09:31:07] *** dall has joined #postfix[09:32:52] *** BuenGenio has joined #postfix[09:44:53] *** krion has joined #postfix[09:45:14] *** shoonya has joined #postfix[09:48:00] <BuenGenio> hello everyone[09:48:07] <BuenGenio> a bit lost here[09:48:30] <BuenGenio> every now and then I'll start getting lots of error messages in my postmaster box that look like this[09:49:00] <BuenGenio> Subject: Postfix SMTP server: errors from unknown[203.167.113.10][09:49:13] <BuenGenio> followed by the transcript of the handshake[09:49:43] <BuenGenio> with a recurrent "Out: 451 4.3.0 <email at domain dot com>: Temporary lookup failure[09:49:43] <BuenGenio> "[09:50:24] <krion> 203.167.113.10 is your server ?[09:50:37] <BuenGenio> no, client[09:50:40] <BuenGenio> no, client connecting[09:50:51] <krion> either you have a dns trouble resolve issue from the server or the domain doesn't exist[09:52:40] *** shoonya has quit IRC[09:53:13] <BuenGenio> and then I will also get this one:[09:53:13] <BuenGenio> Out: 451 4.3.0 Error: queue file write error[09:53:38] <BuenGenio> I searched around on Google, but didn't find anything recent or consistent[09:54:17] <BuenGenio> apparently it may be due to the message size being too big, but that's not how Postfix usually handles oversize messages[10:00:41] *** davlefou has joined #postfix[10:01:21] <Aprogas> BuenGenio: Can you pastebin the full transcript?[10:01:36] <BuenGenio> yeah, hold on[10:01:37] <Aprogas> Also include in that pastebin relevant sections of logs, output of postconf -n[10:01:43] <BuenGenio> yep[10:04:42] *** davlefou has quit IRC[10:05:09] *** davlefou has joined #postfix[10:05:31] *** cilly has joined #postfix[10:09:53] *** TomHome has joined #postfix[10:10:24] <BuenGenio> 2 min[10:13:01] <BuenGenio> http://pastebin.com/ShLhm5td[10:13:04] <BuenGenio> thanks[10:16:11] *** Internat has quit IRC[10:19:41] <Aprogas> Your logs complain about configuration error. Fix those. Also run "postfix check" to verify file ownership and permissions.[10:20:07] *** Internat has joined #postfix[10:20:15] <BuenGenio> well, it works for the other 20,000 emails that go through us every day...[10:20:28] <BuenGenio> as I say this will happen randomly and then apparently resolve itself[10:20:52] <Aprogas> You have configuration errors. No other argument is valid to not fix that.[10:20:59] <BuenGenio> ok, found 2[10:21:00] <Aprogas> Even if just to prove me wrong.[10:21:15] <Aprogas> Debugging issues becomes harder if unrelated errors or warnings get in the way.[10:21:35] <BuenGenio> postfix/postfix-script: warning: /var/spool/postfix/etc/resolv.conf and /etc/resolv.conf differ[10:21:42] <Aprogas> !chroot[10:21:42] <knoba> Aprogas: "chroot" : The fifth column in master.cf, if not n , means that the Postfix process described on that line runs in a chroot, see !debug , !queue_directory and files in the examples/chroot-setup subdirectory of the Postfix source archive which show examples of a Postfix chroot environment on a variety of systems[10:21:57] <BuenGenio> do I just copy /etc/resolv.conf to the chroot or simply restart Potfix?[10:22:19] <Aprogas> I think normally the startup script of your OS/distro handles cloning the chroot environment. Personally I just run without chroot.[10:22:47] <BuenGenio> postfix check[10:22:50] <BuenGenio> #[10:23:23] <BuenGenio> fixed[10:27:33] *** krzie has joined #postfix[10:34:57] *** cilly has quit IRC[10:36:23] *** david_ has joined #postfix[10:38:17] *** spiekey has joined #postfix[10:38:20] <spiekey> Hello![10:38:50] <BuenGenio> Aprogas, so anything Re: queue file write error?[10:39:20] <Aprogas> BuenGenio: You said "fixed" so I thought the issue was resolved.[10:39:34] <BuenGenio> fixed the postfix check issues[10:39:45] <BuenGenio> but I don't know if the other errors will come back[10:40:00] <BuenGenio> it happens on average once or twice every two weeks[10:40:02] <Aprogas> Send a new mail, and pastebin the new transcript, and the section of logs representing that transcript.[10:40:05] <spiekey> lunaphyte_, are you there? :)[10:40:42] <BuenGenio> Aprogas, so, every day the system handles approx. 20,000 emails, and no errrors[10:40:47] *** davlefou has quit IRC[10:40:55] <Aprogas> Your current pastebin shows a section of logs unrelated to the transcript.[10:42:31] <Aprogas> It's hard to match which log sections belongs to which if you mung the domains and addresses. If you have2mung, at least do it consistently.[10:44:20] <Aprogas> I'd like to see the section of logs that actually has the queue file write error.[10:49:02] <spiekey> i was here yesterday regarding my double line breaks...if i install sendmail (apt-get install sendmail) it works. No double line breaks.[10:49:10] <spiekey> if i install postfix it doesnt...[10:49:32] <Aprogas> Don't mix legacy sendmail with postfix.[10:49:52] <Aprogas> Just update your PHP-script to use the line-breaks that postfix-sendmail expects.[10:50:58] <spiekey> this is the php script, but i dunno whats wrong with it: http://pastebin.com/QxFRb1S8[10:51:35] <spiekey> ( oh, i am actually using $crlf = "\n"; )[10:53:15] <spiekey> Aprogas, or is this a php.ini setting?[10:53:52] *** cilly has joined #postfix[10:54:50] <Aprogas> I don't have enough information to go on.[10:55:23] *** jujugre has quit IRC[10:58:24] *** jujugre has joined #postfix[10:59:29] *** jujugre1 has joined #postfix[11:01:49] *** dh has quit IRC[11:01:59] *** dh has joined #postfix[11:02:35] *** jujugre has quit IRC[11:04:39] *** ChameleonSys has quit IRC[11:05:19] *** ChameleonSys has joined #postfix[11:06:00] <spiekey> Aprogas, what else do you need?[11:09:29] <Aprogas> Pastebin of how a mail arrives now, and how you want it to arrive, and possibly PHP-code too.[11:10:03] <Aprogas> Mails with full headers too.[11:10:20] <spiekey> well, the php code is above :) I will collect the rest now..[11:10:42] <Aprogas> That pastebin gives unknown paste id error.[11:12:35] *** david__ has joined #postfix[11:16:22] *** david_ has quit IRC[11:20:59] *** nor42 has joined #postfix[11:25:46] *** david__ has quit IRC[11:27:34] <spiekey> Aprogas, here is the mail with the header: http://pastebin.com/X3bq2ybd[11:28:07] <spiekey> i dont know where Line 32, 34, 36, 38 is coming from[11:28:47] <Aprogas> Probably \r\n in your PHP-code or something like that. Or perhaps php mail() is doing re-encoding where it shouldn't.[11:29:03] <Aprogas> I think postfix-sendmail just sends mails as you present them.[11:29:48] <spiekey> here is the php code: http://pastebin.com/RBWZk57n[11:30:43] <Aprogas> I'm not that familiar with PHP. How is the output from that code getting to sendmail?[11:32:47] <Aprogas> Also this is hardly a Postfix question, but probably more a PHP question.[11:33:15] <Aprogas> The PHP-software that I use doesn't make those double-lines and it does use postfix-sendmail.[11:33:55] *** jfried has quit IRC[11:34:00] <spiekey> thats my big problem, i dont know where the source of the problem is... :)[11:34:37] <Aprogas> http://www.php.net/manual/en/function.mail.php I only have some experience with that function.[11:35:25] <Aprogas> Write a simple PHP-script that just mails the contents of a <textarea> form field, and see how that behaves.[11:35:37] <Aprogas> Or even just a hardcoded set of lines.[11:38:01] *** n0sq has quit IRC[11:38:25] *** e-jones has joined #postfix[11:43:38] <spiekey> Aprogas, ha! :D I just printed the mail body variable in hex to see whats in it...[11:44:01] <spiekey> the lines end with 0D 0A[11:44:30] *** cilly has quit IRC[11:46:12] *** wdp has joined #postfix[11:46:12] *** wdp has joined #postfix[11:47:43] <Aprogas> Yes, that's \r\n[11:47:55] <spiekey> is this bad or good how it should be?[11:48:01] <Aprogas> I don't know.[11:48:04] <spiekey> hehe[11:48:19] <spiekey> oh dear..[11:49:42] *** beginer has quit IRC[11:49:51] <spiekey> ok, then i am back to sendmail...[11:50:04] <Aprogas> That doesn't make sense.[11:50:17] <Aprogas> How about you just read up on how things work and then do it correctly?[11:50:50] <Aprogas> The PHP-code you pasted uses some includes and unknown mail whatever.[11:50:55] <Aprogas> Who knows what that mail whatever does?[11:51:01] <Aprogas> Does it even use the PHP mail() function?[11:51:03] *** n0sq has joined #postfix[11:51:15] <Aprogas> Find out how your code works. Postfix-sendmail just sends what you feed it.[12:06:33] *** beginer has joined #postfix[12:22:48] *** Gatto has joined #postfix[12:25:34] *** fOrsberg is now known as forsberg[12:38:27] *** kuhkatz has joined #postfix[12:38:27] *** kuhkatz has joined #postfix[12:46:16] *** cpm has joined #postfix[12:51:57] *** dall has quit IRC[12:55:06] *** wdp_ has joined #postfix[12:57:27] <danlii> Is there some way to make Postfix give an error 450 instead of 530 when it has an internal error, preventing mail from being delivered? I don't want to bounce mails permanently, I want the sender to keep trying.[12:58:28] *** wdp has quit IRC[12:59:12] <sep> danlii, soft_bounce http://www.postfix.org/postconf.5.html#soft_bounce[12:59:29] <sep> it's nice to use when you have issues, and are troubleshooting.[13:00:08] <sep> i don't recomend using it for very long period of time (weeks) since it dos couse a lot of mail to be queued up at other servers.[13:00:30] <danlii> sep: Great, thanks! I lost a great deal of emails last night when I had nfs problems and user's procmail configurations couldn't be read.[13:01:01] <sep> and that can couse a lot of retries on things that wont work anyway. (using up your bandwith/connections) and other server owners can get annoyed you use a lot of their queue space and can possibly filter you harder[13:01:48] <danlii> Aww. :([13:02:31] <sep> but it's the first thing i set when i have issues.[13:03:02] <danlii> Apparently, sendmail had some way of dealing with situations like mine, by queueing up mail that couldn't be processed by procmail locally instead of bouncing it, then you of course had to manually extract the emails from that queue, but they were at least there.[13:07:13] <cpm> maybe it's because I have amavis in a content filter, but I do have maildirs that occasionally 'go away' due to some issue or another. In those cases mail lands in the deferred queue, where it will stay until either the path issue is resolved, or the queue times out (5 days) and it is returned (bounced).[13:07:43] <sep> accepting mail's into the queue that you dont know if you can deliver or not, is a recipe for backscattering. and will get you blacklisted fairly quickly[13:08:07] <Aprogas> You can override most/all Postfix reject_codes but I don't see why you ever would, except soft_bounce during testing.[13:08:30] <sep> my server as well queues up mail that it can not deliver (right now) as long as the user database is answering so it knows it's a deliverable[13:10:05] <danlii> sep: Then my problem is that I want to change reject code for a particular type of problem. In this case, the NFS server with the users' home directories had hung, so reading their .procmailrc timed out. When I restarted the NFS service everything worked again, but 5 hours worth of mail was permanently rejected.[13:11:57] *** cilly has joined #postfix[13:25:34] *** e-jones has quit IRC[13:30:08] *** e-jones has joined #postfix[13:30:55] *** brancaleone has joined #postfix[13:43:48] *** cilly has quit IRC[13:54:49] *** ChameleonSys has quit IRC[13:57:45] *** Cain` has joined #postfix[13:58:19] *** shoonya has joined #postfix[13:59:34] *** Cain has quit IRC[13:59:38] *** Cain` is now known as Cain[14:06:40] *** ChameleonSys has joined #postfix[14:09:08] <asmogator> hi i try to setup that mail relay, but now in logs i see: status=deferred (delivery temporarily suspended: SASL authentication failed; cannot authenticate to server x.x.x.x [x.x.x.x]: no mechanism available)[14:09:12] <asmogator> what might be problem ?[14:09:55] <Aprogas> Postfix cannot authenticate to server x.x.x.x, there is no mechanism available.[14:10:18] <Aprogas> Check topic for instruction on what information we need.[14:14:39] *** cilly has joined #postfix[14:16:33] *** cytrinox has quit IRC[14:17:59] *** cytrinox has joined #postfix[14:18:55] *** Belial_ has joined #postfix[14:26:16] *** beginer has quit IRC[14:30:25] *** e-jones has quit IRC[14:37:00] *** empity has joined #postfix[14:43:11] *** gerhard7 has quit IRC[14:53:34] *** djook has joined #postfix[14:53:37] <djook> hye people[14:55:42] <djook> I have a machine that sends email through a relayhost for the usual mails but does not use the relay when mails are tagged with specfic header[14:56:06] <djook> and it wotks good via headercheck[14:56:18] <djook> now I am using dkimproxu from outgoing signatures[14:56:40] <djook> and I wonder if there is a way to not the sign the mail routed through relayhost[14:56:56] <djook> but only those sent directly to the mxs via smtp: transport[14:57:05] <patdk-wk> sure, don't send those through dkimproxu[14:57:06] <djook> I dont know if I am making myself clear[14:57:31] <djook> I am struggleing with the parameters and I am almost drowned[14:58:06] <djook> cause now, everything is signed and signed again in the relayhost machine[14:58:18] <djook> It does not cause me trouble but when under heavy load[14:58:30] <djook> the signature is a burden I would like to get rid of[14:58:46] <djook> at least for the relayed mails[14:59:30] <lunaphyte_> the only impression i'm getting is that this is just unnecessarily convoluted in the first place, and *that* is what should be fixed.[15:00:03] <djook> unnecessarily convoluted .....[15:00:10] <djook> translating ...[15:00:44] <djook> entortillé, ouais ca le fait[15:00:46] <djook> ok[15:00:49] <djook> I agree[15:01:18] <djook> In fact, mails are relayed from 15 machines to a relayhost for usual mails[15:01:46] <djook> but from time to time, we make mass mailing and are quickly blacklisted from hotmail for example[15:02:14] <djook> so we send thoses mass mailing from the 15 machines directly to benefit from the public addresses and not being blacklisted too early[15:02:27] <djook> less convoluted ?[15:03:00] <djook> reminds me of the word volute[15:03:06] <lunaphyte_> who runs this relayhost? you?[15:03:18] <djook> yes[15:03:56] <lunaphyte_> and why does it get blacklisted, yet the 15 machines do not - when sending mass mailing?[15:04:07] *** BuenGenio has quit IRC[15:05:19] <djook> oh they are getting blaclisted too, but in a longer period of time[15:05:36] <lunaphyte_> really, you need to fix that problem.[15:06:12] <djook> anybody else ?[15:06:57] <asmogator> !debug[15:06:57] <knoba> asmogator: "debug" : http://www.postfix.org/DEBUG_README.html : a good starting point for how to deal with problems and to report information to those who might help. Post your information in a pastebin such as http://pastebin.ca/ or http://dpaste.com/[15:07:12] <djook> lunaphyte, if I had to do this trick, just dont ask me if I didnt try to not get blacklisted[15:07:30] <djook> of course I made everything I can to not to get blacklisted[15:07:44] <djook> delivery rates, content of the mails, etc etc[15:08:05] <lunaphyte_> who is blacklisting you?[15:08:12] <djook> only way to send mass mailing to hotmail is to pay for the sending program scoring bla[15:08:14] <lunaphyte_> are you sending spam?[15:08:22] <patdk-wk> !senderid[15:08:22] <knoba> patdk-wk: "senderid" : Having hotmail delivery issues? - Consider having your server added to the Microsoft Sender ID program. Get your house in order first! Add a reverse dns ptr record for the ip of the server, forward should match reverse and helo. Create a valid spf record for the domain(s) then wander on over to https://support.msn.com/eform.aspx?productKey=senderid&ct=eformts and submit your request to be added[15:08:31] <patdk-wk> I always thought hotmail was pretty simple[15:08:36] <patdk-wk> about as easy as aol[15:08:41] *** forsberg is now known as fOrsberg[15:08:48] <djook> not spam at all, we double checked this[15:08:53] <patdk-wk> both much easier than yahoo[15:09:19] <djook> we have reverse dns, we have spf and dkim too[15:09:35] <patdk-wk> but do you have senderid?[15:09:45] <patdk-wk> senderid !=spf/dkim[15:10:03] <patdk-wk> senderid is much much more annoying[15:10:22] <djook> no senderid I think[15:10:31] <djook> We looked this way but didn enter the room[15:11:17] <djook> anyway that is not the question I asked[15:11:29] <djook> and if there is no answer to this question, no problem[15:11:46] <djook> is ti possible to avoid the signature of a mail fro a specific transport ?[15:11:53] <djook> it for[15:12:02] <djook> while using dkimproxy[15:12:35] <djook> I wont use sendmail or exim or anything else and I wont change dkimproxy[15:12:41] <djook> so ...[15:12:58] *** e-jones has joined #postfix[15:16:02] <djook> I wonder if there is a way to not the sign the mail routed through relayhost[15:16:09] <djook> that was my question at first[15:16:36] <djook> way to not sign the mail routed through relayhost[15:18:32] *** hparker has joined #postfix[15:18:33] *** hparker has joined #postfix[15:18:43] *** geek_cl has joined #postfix[15:20:52] <lunaphyte_> yes, i'm sure you can. i'd have to look through the documentation though to give you specifics, and i don't have time to do that at the moment.[15:24:07] *** hever has quit IRC[15:31:30] <djook> thx anyway, I ll read more docs and be back if I dont succeed this way[15:37:04] *** Section1 has joined #postfix[15:39:01] *** gerhard7 has joined #postfix[15:48:35] *** yeled has quit IRC[15:49:07] *** weedar has quit IRC[15:51:56] *** djook has quit IRC[15:55:45] *** DarkKnightCZ has joined #postfix[15:55:51] *** salil has joined #postfix[15:55:59] *** MrRagga has joined #postfix[15:56:00] *** salil has left #postfix[15:59:50] *** hever has joined #postfix[16:16:56] *** yeled has joined #postfix[16:16:59] *** todd_dsm has joined #postfix[16:20:46] *** shal3r has quit IRC[16:21:59] *** Lenhix has joined #postfix[16:22:39] *** pj has joined #postfix[16:30:07] *** TomHome has quit IRC[16:36:17] *** shal3r has joined #postfix[16:40:43] *** zorg1 has quit IRC[16:55:26] *** BuenGenio has joined #postfix[17:00:34] *** breaker313 has quit IRC[17:02:07] *** sbeam has joined #postfix[17:05:16] *** cilly has quit IRC[17:05:55] *** roentgen has quit IRC[17:13:36] *** jeev has joined #postfix[17:24:42] *** functor has joined #postfix[17:25:13] <functor> It seems my postfix cant find smtpd.conf, I literally put it everywhere but its still trying to use /etc/sasldb2 instead of saslauthd[17:25:27] *** DarkKnightCZ has left #postfix[17:25:30] *** todd_dsm has quit IRC[17:25:46] <functor> I am worried I might have set some conf somewhere forcing it to do only sasldb, where should I start?[17:26:10] <lunaphyte_> is there a specific reason you're using the cyrus software for sasl?[17:26:28] *** sbeam has quit IRC[17:31:29] *** todd_dsm has joined #postfix[17:34:33] <functor> lunaphyte_: it seems like what everyone is using for debian[17:34:48] <lunaphyte_> why does it seem like that?[17:34:57] <functor> google, irc, isps[17:35:32] <lunaphyte_> dunno what to tell you, your sources are not trustworthy. their data is erroneous.[17:35:36] <jumperboy> functor: do you have a /etc/postfix/makedefs.out?[17:36:09] <lunaphyte_> !tell functor dovecot[17:36:09] <knoba> functor: "dovecot" : http://www.dovecot.org/ : IMAP/POP3 server software with emphasis on security; recent versions can also provide SASL AUTH for Postfix 2.3+.[17:36:29] <Aprogas> jumperboy: If I guess where you are going with that, postconf -a and postconf -A may be more useful.[17:36:34] <functor> lunaphyte_: yes, however I am using Courier[17:36:59] <functor> so Dovecot is an IMAP server that also does auth?[17:37:19] <lunaphyte_> unless you have some specific need that requires you use cyrus for sasl, rather than dovecot [e.g. the cyrus software provides something that dovecot does not], the postfix community suggests you use dovecot[17:37:23] <rob0> Well then you simply have to read the Debian Cyrus SASL packaging documentation.[17:37:33] <jumperboy> Aprogas: no, i was going to suggest he check SYSLIBS in makedefs.out to get an idea of where smtpd.conf would be[17:37:43] <Aprogas> jumperboy: Ah, ok.[17:37:45] <functor> rob0: I already have done that[17:37:56] <lunaphyte_> what you use for your mail retrieval software has little to do with with you use for your sasl libraries.[17:38:06] <rob0> And where does it tell you to put smtpd.conf?[17:38:06] <lunaphyte_> [in other words[17:38:08] <lunaphyte_> bah[17:38:12] <functor> lunaphyte_: which would also mean I need to replace courier, since it would be reduntant, right?[17:38:26] <functor> rob0: Where I am putting it[17:38:27] <lunaphyte_> [in other words, "however I am using Courier" is irrelevant}[17:38:41] <lunaphyte_> functor: courier does not provide sasl software. what would be redundant?[17:38:49] <rob0> Then perhaps you have a Debian/Cyrus SASL bug?[17:38:59] <functor> Dovecot does what Courier does (its an IMAP server), right?[17:39:05] <lunaphyte_> on a side note, you really ought to replace courier with dovecot too.[17:39:10] <Aprogas> functor: Correct.[17:39:11] <functor> Thats what I meant[17:39:23] <rob0> Dovecot replaces both Courier IMAP and Cyrus SASL.[17:39:31] <functor> It would be reduntant to have both courier and dovecot running if I went down that route[17:39:39] <functor> Right[17:39:41] <lunaphyte_> s/and/and\/or/[17:39:51] <lunaphyte_> no, it would not. where are you coming up with this?[17:39:58] <functor> Nevermind[17:40:09] <lunaphyte_> are we talking about imap, or are we talking about sasl?[17:40:27] <functor> Is dovecot a single daemon that does both, or is it two daemons?[17:40:45] <rob0> it's a modular thing like Postfix[17:40:51] <lunaphyte_> they are two completely different components.[17:40:52] <functor> Ah[17:41:11] <lunaphyte_> [just like courier, as it happens...][17:41:18] <rob0> but also like Postfix, your interaction with it is like a single daemon[17:41:29] <jumperboy> isn't courier an smtp server?[17:41:36] <rob0> !courier[17:41:36] <knoba> rob0: "courier" : an alternative MTA to Postfix. Parts of it (maildrop, IMAP server and POP3 server) are often used by Postfix users as well. See: www.courier-mta.org or #courier[17:41:41] <jumperboy> what's the emoticon for evil smile?[17:41:53] <rob0> heh[17:42:06] <lunaphyte_> interaction with courier is like a single daemon? how is that?[17:42:09] <functor> Anyway, fine I'll go with Dovecot for both IMAP and SASL (for ease)[17:42:17] <lunaphyte_> err, i mean interaction with dovecot[17:42:26] <jumperboy> functor: sorry, can't help you, i use cyrus sasl[17:42:28] <jumperboy> :)[17:42:39] <functor> The problem with Cyrus is specifically, Postfix doesnt read the smtpd.conf from any location its suppose to, for whatever reason (maybe a conf issue)[17:42:49] <rob0> lunaphyte_: a single start/stop commaand, et c.[17:43:13] <jumperboy> functor: do you have a /etc/postfix/makedefs.out? (is there an echo in here?)[17:43:13] <functor> It shouldnt look for sasldb2 if I tell it to do saslauthd right?[17:43:19] <functor> sec[17:43:21] <rob0> functor, right, either a conf issue or a bug.[17:43:47] <lunaphyte_> wtf does makedefs.out have to do with either postfix or cyrus?[17:44:24] <functor> Dont have that, cant fin what its used for either[17:44:28] <functor> find*[17:44:36] <lunaphyte_> because it's got nothing to do with anything.[17:44:39] <jumperboy> it's the only way i can think of at the moment that will indicate where postfix looks for smtpd.conf[17:44:47] <lunaphyte_> wrong[17:45:12] <jumperboy> i'm not saying there isn't another way, just that i can't think of one atm :)[17:45:20] <functor> confs I fiddled with are main.cf, master.cf, smtpd.conf, pam.d/smtp, pam_pgsql etc[17:45:26] <lunaphyte_> that's not a way, period.[17:46:41] <functor> I guess Dovecot is easier to setup than this?[17:46:47] <functor> does it do pgsql / shadow etc?[17:47:23] <lunaphyte_> anyway, the larger point here is that if you're just embarking upon the journey, you'd be wise to use dovecot rather than courier, and even wiser to use dovecot rather than cyrus.[17:47:49] <jumperboy> well, fwiw, mine is in /usr/lib/sasl2/, don't know about debian[17:47:55] <Aprogas> http://wiki2.dovecot.org/PasswordDatabase[17:48:14] <rob0> Cyrus SASL is what looks for smtpd.conf, not anything in Postfix.[17:48:17] <functor> jumperboy: I not only put it in /usr/lib/sasl2 but /var/spool/postfix/usr/lib/sasl2 and /etc/postfix/sasl/[17:48:22] <functor> and a few other places[17:48:43] <jumperboy> functor: but you're just guessing. need to find out where system expects it to be[17:48:45] <functor> so it wont be a chroot issue[17:48:58] <functor> jumperboy: no, it actually does look there[17:49:06] <rob0> Postfix talks to the Cyrus libs, and that's what looks for the config file.[17:49:09] <functor> btw smtpd looks not Cyris, rob0?[17:49:15] <functor> its in strings -a[17:49:24] <functor> well supposedly[17:49:30] <jumperboy> < functor> It seems my postfix cant find smtpd.conf,...[17:49:42] <functor> yes, its suppose to be in there, thats what the documentation says[17:49:52] <functor> it says it looks there by default even if you dont do anything![17:50:07] <functor> in fact, I am not sure how to tell it to look anywhere else[17:50:25] <functor> the order is /usr/lib/sasl(2) /etc/postfix/sasl[17:50:44] <lunaphyte_> this sort of undulation is a large part of the problem with cyrus.[17:50:52] <functor> agreed[17:50:55] *** ced117 has joined #postfix[17:50:55] *** ced117 has joined #postfix[17:50:58] <functor> you should be able to specify this in the conf[17:51:10] <lunaphyte_> submit a patch.[17:51:11] <functor> and also, it lacks debug logs[17:51:20] <rob0> I think the path is a compile-time option.[17:51:25] <functor> I would rather switch to dovecot and forget about it[17:51:26] <functor> :P[17:51:32] <lunaphyte_> so then proceed.[17:51:49] <rob0> And Debian for some reason used nonstandard paths.[17:51:53] <functor> right... let me just backup maildir in case I break something when removing courir[17:51:59] <jumperboy> i certainly would have if dovecot hadn't been alpha at the time[17:52:38] *** l1nuxman has joined #postfix[17:52:48] <rob0> The Cyrus SASL source default path is /usr/local/lib/sasl2, and other distributors use /usr/lib/sasl2[17:53:56] *** bezourox is now known as Guip`aw[17:54:44] <functor> rob0: yes, debian always omits the local[17:55:49] <functor> strings -a /usr/lib/postfix/smtpd | grep sasl2 -> sasl:/usr/lib/sasl2[17:55:57] <functor> so it "is" postfix that looks for it?[17:56:54] <rob0> No distributor puts packages in /usr/local. FreeBSD ports do, but then that is locally compiled, so arguably there's nothing wrong with that.[17:57:38] *** spiekey has quit IRC[17:57:44] *** digitolx has joined #postfix[17:58:43] <jumperboy> it's not unusual to see /usr/lib/sasl2 symlinked to /usr/local/lib/sasl2[18:01:18] *** ssureshot has quit IRC[18:01:55] *** famicom has quit IRC[18:02:29] *** jujugre1 has left #postfix[18:03:34] *** famicom has joined #postfix[18:04:17] *** evilghost has joined #postfix[18:06:21] <evilghost> Hello, I may have a somewhat unique situation regarding an IPv4 relayhost on an IPv4+IPv6 enabled Postfix MTA; it seems that even for an IPv6 capable recipient MTA the IPv4 relayhost is used. Is there a way to bind/enforce the relayhost to be IPv4 only, as in, if the recipient MX does not publish quad-A then use the IPv4 relayhost? Recipients publishing quad-A's for their MX currently are using the IPv4 relayhost as defined in the Postfix[18:07:15] <evilghost> Ideally I would like native IPv6->IPv6 delivery if possible, ignoring the IPv4 defined relayhost as it only pertains to an IPv4 network.[18:08:23] <functor> lunaphyte_: would the auth be included in dovecot-common / dovecot-imapd?[18:08:46] *** yosafbridge has quit IRC[18:08:57] *** yosafbridge has joined #postfix[18:09:04] <functor> "If you have trouble with authentication failures,[18:09:06] <lunaphyte_> if all you want is sasl components, all you need is dovecot-common[18:09:09] <functor> enable auth_debug setting"[18:09:11] <functor> nice[18:09:19] *** sphenxes01 has joined #postfix[18:09:42] *** sphenxes has quit IRC[18:13:58] *** Prae has joined #postfix[18:14:13] <Prae> Hello,[18:16:00] <evilghost> hi[18:16:30] *** JoKoT3 has quit IRC[18:20:41] *** ScorpiusLetalis has quit IRC[18:21:39] *** ScorpiusLetalis has joined #postfix[18:22:07] *** e\ectro_ has joined #postfix[18:23:36] <e\ectro_> is there anyway I can manipulate from sender address using sender_canonical where I can rewrite the sender? I can do it if email is sent directly to the postfix server, but not if its relayed from an internal smarthost[18:25:05] *** evilghost has quit IRC[18:25:13] *** ketema has joined #postfix[18:26:08] *** seekwill has joined #postfix[18:26:15] <Prae> anyone ever use zen.spamhaus.org with dig or host?[18:26:38] <seekwill> Why would you do that?!?!/[18:26:53] *** dentifrice has joined #postfix[18:26:55] <Prae> Me?[18:27:10] <seekwill> Yes![18:28:00] <rob0> dig 2.0.0.127.zen.spamhaus.org. any[18:28:18] <Prae> Because it's not working 'manualy' http://www.spamhaus.org/query/bl?ip=122.57.129.221 give me something but when I use dig 221.129.57.122.zen.spamhaus.org it gives nothing[18:28:21] <Prae> I'm wondering why[18:28:43] <Dominian> I get returns on it when I dig that 221.129.57.122.zen.spamhaus.org[18:28:49] <Dominian> sounds like dns caching issue possibly?[18:29:01] <Dominian> 127.0.0.4 and 127.0.0.10 is what I get[18:29:10] <seekwill> willmbp:~ will$ dig +short 221.129.57.122.zen.spamhaus.org[18:29:10] <seekwill> 127.0.0.10[18:29:10] <seekwill> 127.0.0.4[18:29:10] <seekwill> willmbp:~ will$[18:29:26] <dentifrice> hey there, I just added a "transport_maps" line to my /etc/postfix/main.cf containing address at domain dot tld smtp:a.local.ip.number and it gets ignored, the address is tested against the local virtual alias map instead - shouldn't transport have precedence?[18:29:33] <Prae> That's weird, I tried google, verizon, open dns ect ...[18:29:51] <Prae> Are you using your own DNS server?[18:29:57] <seekwill> Maybe you should![18:30:09] <Dominian> dentifrice: Did you postmap transport and reload postfix after you added the transport_map to main.cf?[18:30:16] <dentifrice> Dominian: I did[18:30:42] <Dominian> dentifrice: easiest thing: pastebin postconf -n[18:30:51] <Dominian> best place to start[18:31:02] <Dominian> will let us see what you have configured[18:33:27] <Prae> Well thanks, i'm gonna use +trace ;) never tough about caching issue weird![18:34:04] *** krion has quit IRC[18:34:14] <Dominian> :)[18:34:25] <Dominian> my mail servers all use caching dns servers[18:34:36] <seekwill> DNS is a lot about caching...[18:34:38] <Dominian> mainly for the RBL lookups[18:34:42] <functor> so lunaphyte_, how do you tell Postfix to target Dovecot...[18:34:53] <lunaphyte_> !tell functor smtpauth[18:34:54] <knoba> functor: "smtpauth" : a feature that authenticates trusted users for submitting email to postfix. See !sasl.[18:35:22] <functor> !sasl[18:35:22] <knoba> functor: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.[18:36:45] <Prae> The odd thing is I get a status: NXDOMAIN using google DNS[18:37:10] <Prae> I though resolver would query to make sure that it's really a NXDOMAIN instead of NXDOMAIN from the cache[18:37:23] <rob0> Right. Not odd at all. See the Spamhaus FAQ.[18:38:22] <rob0> http://www.spamhaus.org/faq/answers.lasso?section=DNSBL%20Usage#261[18:40:32] <Prae> Yes I saw it, means Google doesn't want to query spamhaus probably for performances[18:40:34] *** hever has quit IRC[18:40:51] <rob0> Google is *blocked* by spamhaus.[18:41:10] <Prae> Is it written is the FAQ?[18:41:28] <lunaphyte_> aha. yet another fool using google's nameservers?[18:41:40] <Prae> google DNS servers are good[18:41:40] * lunaphyte_ gets out the shears.[18:41:45] <lunaphyte_> yeah, clearly.[18:41:56] <Prae> well better than OpenDNS[18:42:05] <lunaphyte_> who told you google dns servers are good?[18:42:06] <rob0> Google DNS is not usable for Spamhaus queries as per the FAQ link given.[18:42:35] <Prae> myself after a lof of testing, first time i'm seeing a real problem with them[18:42:35] <lunaphyte_> why is there a need to make any comparison between google's dns severs and opendns[18:42:37] <robtone> why on earth using a public dns service?[18:42:52] <lunaphyte_> why is there a need to make any comparison between google's dns severs and opendns' dns servers?[18:42:55] <Prae> bc i don't want to run a dns server on my laptop[18:43:02] <lunaphyte_> why would you need to?[18:43:11] <robtone> Prae, you are query RBLs with your laptop?[18:43:16] <Prae> Yes[18:43:25] <robtone> you have smtp on your laptop?[18:43:39] <robtone> I mean, a MX[18:44:00] <lunaphyte_> why would any of this require running a nameserver on a laptop?[18:44:02] <rob0> a laptop is your MX?[18:44:03] <dentifrice> Dominian: https://pastee.org/nd3j8[18:44:26] <Prae> Folks, I didn't know that Google DNS was not working with Spamhaus that's why![18:44:28] <rob0> So run dig on the MX. And do NOT use Google DNS from there.[18:44:41] <seekwill> hehe[18:44:57] <robtone> well, I have a laptop like MSI thingy with an atom as MX, but this also runs a bind9[18:44:58] <seekwill> Prae: Your ISP doesn't give you DNS services?[18:45:21] <Prae> My ISP sucks, same caching issue[18:45:32] <Prae> That's why I tried Google, and level3[18:45:35] <rob0> ISP resolvers are sometimes also blocked by Spamhaus.[18:45:38] <lunaphyte_> level3?[18:45:45] <rob0> 4.2.2.x[18:45:46] <Prae> unfortunatly i didn't know at the time that those specific DNS were 'clocked'[18:45:49] <Prae> 'blocked'*[18:45:51] <Prae> Yes[18:45:53] <seekwill> You need level 4![18:45:57] <lunaphyte_> those are not public nameservers.[18:46:09] <robtone> Prae, you want a local dns recursor[18:46:35] <seekwill> I've been able to use 4.2.2.x from many different places. They seem public[18:46:48] <lunaphyte_> they're not.[18:46:52] <robtone> Prae, it is faster and more reliable[18:46:57] <lunaphyte_> been able to use has nothing to do with it.[18:47:30] <Prae> I know rob, I know well DNS stuff I just didn't read spamhaus FAQ sometimes you're just lazy lol...[18:47:40] <rob0> http://www.tummy.com/Community/Articles/famous-dns-server/[18:48:04] <dentifrice> ah[18:48:06] <dentifrice> The [] form is required when you specify an IP address instead of a hostname.[18:48:07] <Prae> as rob0 level3 DNS are well known[18:48:17] <seekwill> lunaphyte_: What does it have to do with then?[18:48:33] <lunaphyte_> an unlocked door is not an invitation for entrance.[18:48:50] <seekwill> What door?[18:48:53] <Prae> level3 dns[18:49:09] <Prae> He's saying that 4.2.2.1 is not public 'officialy'[18:49:17] <Prae> In fact it is[18:49:25] <lunaphyte_> no, it is not.[18:49:39] <dentifrice> hmm[18:50:02] <dentifrice> why would postfix ignore a transport map?[18:50:26] <Dominian> dentifrice: looking[18:50:34] <dentifrice> Dominian: thanks[18:50:38] <Dominian> if you can get rob0 or lunaphyte_ to look at the pastebin would probably help too.[18:50:44] <dentifrice> Dominian: I tried putting the ip in [] but it doesn't work either[18:50:46] <Dominian> I'm at work so I'm 'delayed' in response right now[18:50:52] *** mroe has joined #postfix[18:50:52] *** mroe has joined #postfix[18:50:58] <dentifrice> Dominian: np[18:51:06] <rob0> that has no logs[18:51:15] <e\ectro_> any ideas on my issue?[18:51:25] <rob0> pastebin without logs == generally useless[18:51:37] <Dominian> rob0: transport map failure apparently I didn't ask for logs.. that was my fault.[18:51:55] <Dominian> dentifrice: without the logs, the config DOES look good... unless the postmap didn't take properly for /etc/postfix/transport[18:52:00] *** Subzeronoh has quit IRC[18:52:01] <Dominian> You do have a transport.db file right?[18:52:05] <Dominian> from the postmap?[18:52:07] <dentifrice> Dominian: sure[18:52:22] <dentifrice> # file transport.db[18:52:22] <dentifrice> transport.db: Berkeley DB (Hash, version 9, native byte-order)[18:52:42] <Dominian> word[18:52:53] <dentifrice> the only thing I have in the logs is this:[18:52:54] <dentifrice> # grep transport /var/log/mail.log[18:52:54] <dentifrice> May 18 18:50:52 otter postfix/trivial-rewrite[27652]: table hash:/etc/postfix/transport(0,lock|no_regsub|fold_fix) has changed -- restarting[18:53:24] <Dominian> WEll, it detects the transport changes[18:53:32] <Dominian> Can you show us the transpost file itself?[18:53:47] <dentifrice> # cat transport[18:53:47] <dentifrice> schlist at ecobytes dot net smtp:[10.36.38.3][18:54:13] *** SubZero_ has joined #postfix[18:54:18] <Dominian> hrm.. wonder if changing smtp: to relay: would make a difference...[18:54:27] <dentifrice> ah, trying that[18:54:28] <Dominian> doubt it.. just a thought[18:54:37] <rob0> so, show us the LOGS of the mail coming to schlist@ecobytes.[18:54:59] <robtone> sure that schlist at ecobytes dot net is the lookup-key?[18:55:40] <dentifrice> robtone: do you mean it has to be an existing mailbox or something?[18:56:00] <rob0> Hint: if the mail was *not* to schlist at ecobytes dot net, then the transport_maps line is not used.[18:56:08] <robtone> I mean, does postfix use "schlist at ecobytes dot net" when it walks the transport[18:56:15] <dentifrice> yes[18:56:40] *** cytrinox_ has joined #postfix[18:56:50] <dentifrice> ah[18:56:52] <dentifrice> no[18:57:00] <dentifrice> it may be @mail.domain.tld[18:57:04] <dentifrice> thanks for pointing that out[18:59:05] <Prae> Which local resolver do you use? I don't want to use Bind, is there any fast and light resolver?[18:59:12] <robtone> pdns[18:59:13] <dentifrice> doesn't work either[18:59:24] <Dominian> I use dnsmasq[18:59:31] <robtone> dentifrice, as rob0 said, log for a delivery case[18:59:49] <Prae> Ok, let's check those 2 :)[18:59:50] *** cytrinox has quit IRC[18:59:50] *** cytrinox_ is now known as cytrinox[19:00:09] <robtone> pdns-recursor, that is[19:01:36] <Prae> yeah I found it, i'll see if it looks like to be the 'nginx type' resolver ^^[19:04:34] <Prae> Thank you guys, nice to speak with helpful people, have a good day![19:05:44] *** Prae has quit IRC[19:05:50] <rob0> I like BIND.[19:06:42] *** BuenGenio has quit IRC[19:08:10] * robtone too[19:09:33] <dentifrice> postfix/smtpd answers NOQUEUE: reject [...] 550 5.1.1 <schlist at ecobytes dot net>: Recipient address rejected: User unknown in virtual alias table;[19:09:43] <Dominian> bingo[19:10:18] *** yeled has left #postfix[19:11:11] <robtone> ouch[19:11:21] <rob0> !unknown_virtual[19:11:21] <knoba> rob0: "unknown_virtual" : \"User unknown in virtual $X table\" means that the recipient domain was found in $virtual_$X_domains but the username@domain was not found in $virtual_$X_maps. ("$X" can be either alias or mailbox .)[19:12:17] <robtone> it wouldn't be good to implement a catchall and redirect evrything to 10.36...[19:12:26] <robtone> instead get the users from 10.36...[19:12:37] <dentifrice> I just want one email address to go there[19:13:06] <dentifrice> what I don't understand is why the transport map is bypassed[19:13:31] <robtone> because it has nothing to transport[19:13:33] <dentifrice> isn't postfix supposed to just send mail to that address to the [ip.number] and not even look in the virtual map?[19:13:34] <rob0> ecobytes.net was found in $virtual_alias_domains but schlist at ecobytes dot net was not found in $virtual_alias_maps.[19:14:23] <rob0> (to restate what the factoid already said)[19:14:38] <robtone> dentifrice, no.[19:16:51] <rob0> The transport map is not bypassed. It didn't get as far as to where it would be consulted.[19:17:11] <dentifrice> ok, I got my facts wrong then[19:17:19] <dentifrice> virtual_alias_maps have precedence over transport?[19:17:35] <dentifrice> then each address described in transport must be a valid address (or alias) deliverable locally,[19:17:52] <dentifrice> prior to being transported somewhere else?[19:18:53] <robtone> s/locally//[19:19:34] <robtone> the destination must be known to postfix[19:20:12] *** knapper_tech has joined #postfix[19:20:45] <rob0> It's not a matter of precedence. It is a matter of apples/oranges. Transports are for mail going out. Before it goes out it must first come in.[19:21:13] <rob0> You have no reason to let it in.[19:21:19] <dentifrice> ok, that makes sense[19:21:25] <knapper_tech> fatal: open database /etc/postfix/virtual.db: No such file or directory :-([19:21:28] * cpm has no reason to let rob0 in[19:21:43] <dentifrice> but I don't want mail to be stored in a local folder, I want it to be sent over to the host specified in [ip.number][19:21:51] * rob0 sulks and walks away from cpm's door[19:22:03] <dentifrice> so what should I put in front of the address in /etc/postfix/virtual? address at domain dot tld dummy ?[19:22:15] <rob0> if you accept the mail, your transport map will handle it[19:22:32] <robtone> knapper, postmap /etc/postfix/virtual[19:24:26] <robtone> dentifrice, you could do it easy and create schlist at ecobytes dot net schlist at 10 dot 36....[19:24:44] <robtone> this way you wouldnt have to hassle with transport maps[19:24:56] <dentifrice> no, I need to hasle with transport maps :)[19:25:06] <dentifrice> to migrate mailboxes one at a time[19:25:10] <dentifrice> from a VPS to another[19:25:19] <knapper_tech> I want to create a user for django to be able to use my smtp. been looking for the most simple, secure solution[19:25:35] <knapper_tech> I just need django to be able to connect to the smtp[19:25:56] <dentifrice> robtone: when I accept the mail, it gets delivered locally, it doesn't go through transport[19:25:57] <knapper_tech> not looking to accept reply email. as few new security concerns as possible.[19:26:19] <dentifrice> robtone: when I put a non-existing mailbox as destination, I get an unknown user[19:27:47] <knapper_tech> is there a cheap way i can make an alias or some kind of dummy account for sending mail out?[19:29:31] *** Lujeni has quit IRC[19:33:59] *** cytrinox_ has joined #postfix[19:35:16] <tharkun> seekwill:irc from bb through ssh not that painfull :)[19:35:21] *** sphenxes02 has joined #postfix[19:35:36] <seekwill> haha[19:35:51] <jimpop> tharkun: idndedd /[19:35:59] <jimpop> duh@[19:36:09] <jimpop> doh ![19:36:12] <dentifrice> robtone: aliasing in virtual as you suggested doesn't work either, I get : postfix/error[1731]: 7CA071A80571: to=<schlist at 10 dot 36.38.3>, relay=none, delay=0.29, delays=0.19/0/0/0.1, dsn=5.1.3, status=bounced (bad address syntax)[19:36:42] * jimpop cusrses his m0bile keybard[19:37:06] *** cytrinox has quit IRC[19:37:07] *** cytrinox_ is now known as cytrinox[19:38:37] <robtone> dentifrice, obviously schlist at [10 dot 36.38.3][19:38:55] *** sphenxes01 has quit IRC[19:39:31] <dentifrice> robtone: right.[19:39:43] <dentifrice> robtone: but I still don't get when the transport map is gonna play[19:39:56] * robtone tries to figure that out, too[19:40:32] <dentifrice> I mean, obviously I'm missing the big picture,[19:40:52] <dentifrice> but I figured transport maps would allow me to avoid messing with virtual aliases[19:40:58] <dentifrice> that turns out to be false[19:43:23] <robtone> "The table (transport, remark by me) is searched by the trivial-rewrite(8) daemon."[19:49:17] <adaptr> all routing decisions are made by the qmgr(8) ; table lookups are deferred to the trivial-rewrite(8) daemon.[19:49:31] <adaptr> I'm sure that is documented somewhere[19:49:55] *** p3rror has joined #postfix[19:51:26] *** Kingrat has joined #postfix[19:58:10] *** wdp has joined #postfix[19:58:13] *** wdp has quit IRC[19:58:13] *** wdp has joined #postfix[19:58:20] <knapper_tech> i want to set up a secure user account or some secure alias for use with django outgoing mail[19:58:46] <knapper_tech> should i go with a virtual mailbox owner setup?[20:00:45] <seekwill> What are you trying to accomplish?[20:01:47] <knapper_tech> django can connect to an smtp server[20:01:52] <knapper_tech> in order to send email[20:02:04] <knapper_tech> the settings file accepts port, user, password[20:02:07] <dentifrice> adaptr: I'm still trying to figure out where[20:03:09] <knapper_tech> i think it's setup for connecting to a remote smtp server... well, it is because that's how i use it for development[20:03:11] *** MrRagga has quit IRC[20:05:39] <lunaphyte_> use the existing msa on your network.[20:06:33] <knapper_tech> i'm on a vps[20:06:47] <dentifrice> ok, so for me the question is: is there a way to allow a virtual domain to have one or more recipients delivered to another host through a transport map?[20:07:04] <dentifrice> (while the vast majority of virtual mailboxes/aliases are delivered locally)[20:07:12] *** shoonya has quit IRC[20:07:23] <lunaphyte_> i don't understand what a vps has to do with it?[20:07:48] * cpm vps's adaptr[20:08:13] <jimpop> very potent sender?[20:08:19] <knapper_tech> virtual private server[20:08:31] <jimpop> haha[20:08:42] <knapper_tech> so, django is running locally[20:08:45] * jimpop thinks the mood is lost[20:08:46] <lunaphyte_> yes, everyone here knows what a vps is.[20:08:47] <knapper_tech> smtp is running locally[20:09:02] <lunaphyte_> smtp is a protocol. it doesn't "run".[20:09:11] <knapper_tech> postfix is running locally[20:10:34] <knapper_tech> maybe i don't need a user...[20:10:40] <knapper_tech> http://docs.djangoproject.com/en/dev/topics/email/?from=olddocs#topic-email-smtp-backend[20:10:48] *** e-jones has quit IRC[20:11:03] <knapper_tech> here's the docs, i'm just feeling awkward and bashful =D[20:11:04] *** p3rror has quit IRC[20:15:10] <knapper_tech> okay, got it working. no user was needed[20:15:57] *** MrRagga has joined #postfix[20:21:29] <cpm> okay, send lots of email to rob0, just to be sure.[20:23:46] <adaptr> mark it DJANGOSPAM JUST TESTING GUYS HUR HUR GUYS ? GUYS ?[20:23:59] <cpm> :)[20:25:01] *** cilly has joined #postfix[20:31:15] <dentifrice> looks like there's no way to have a virtual_alias_domain use transport_maps ...[20:31:30] *** hever has joined #postfix[20:31:50] <dentifrice> according to _that_ answer at least: http://readlist.com/lists/postfix.org/postfix-users/15/75008.html[20:32:53] <adaptr> !tell dentifrice goal[20:32:53] <knoba> dentifrice: "goal" : describe your goal, not what you think the solution is[20:34:06] <rob0> why didn't "add@ress foo at [10 dot x.x.x]" in virtual_alias_maps work?[20:34:10] <dentifrice> adaptr: I stated it earlier: I have a virtual_alias_domain, and I want _one_ address from this very domain to be relayed to another host, so I turned to transport_maps, and it didn't work[20:34:30] <adaptr> prove it[20:34:57] <dentifrice> rob0: it does, somehow[20:34:59] <seekwill> I don't have to prove crap to you![20:35:18] <adaptr> also consider that EVERY SINGLE ADDRESS in a virtual_alias_domain MUS be present in virtual_alias_maps. if it's not there, it doesn't exist and doesn't get accepted[20:35:31] <dentifrice> rob0: but then 10.x.x.x gets foo at 10 dot x.x.x as an enveloppe, not the virtual_alias_domain[20:35:48] <rob0> See, virtual_alias_domains do not have a transport. The addresses in virtual_alias_domains are supposed to be rewritten to real addresses. So transport the real address, if you think you need transport_maps.[20:35:50] <adaptr> dentifrice: again, all addresses MUST BE ALIASED[20:35:53] *** torvald_ has quit IRC[20:36:25] <dentifrice> what does "transport the real address" mean?[20:36:43] <adaptr> dentifrice: add@ress add=ress at fake dot relay.domain && relay_domains = fake.relay.domain && smtp_generic_maps foo[20:36:45] <rob0> !virtual[20:36:45] <knoba> rob0: "virtual" : a way to configure additional domains and user accounts (that do not need to exist in your /etc/passwd). See: http://www.postfix.org/VIRTUAL_README.html[20:37:01] <adaptr> although that, too, is the long way 'round the bend[20:37:38] <dentifrice> adaptr: ah, thanks for the fake relay domain tip[20:37:47] <adaptr> again, I don't recommend it.[20:38:11] <adaptr> sine the original recipient is in virtual_alias_domains, this IS NOT A REAL ADDRESS.[20:38:22] <dentifrice> yeah, I'm working with what I have, a server I haven't setup myself[20:38:23] <adaptr> what did you want to do with this recipient ?[20:38:32] <adaptr> where should it ultimately be delivered[20:38:49] <dentifrice> ok, the postfix instance i'm working on is in a VPS with an outdated mail design[20:38:56] <adaptr> not interested[20:39:21] <dentifrice> what I'm saying is I need a way to send mail from this VPS to another VPS sitting next to it[20:39:23] <adaptr> you have an address oin virtual_alias_maps whose domain part is in virtual_alias_domains. this is ALMOST NEVER what people really want.[20:39:23] <seekwill> What's an "outdated mail design"?[20:39:32] <thumbs> will's design.[20:39:34] <adaptr> unless you're seekwill[20:39:35] <seekwill> ooh[20:40:01] <dentifrice> outdated mail design means it's wrong, means the domain is in virtual_alias_domains which causes this very headache[20:40:01] <rob0> And the other VPS also thinks it should be MX for the same virtual_alias_domains[20:40:13] <seekwill> oh[20:40:23] <dentifrice> rob0: yes.[20:40:28] *** Zborg has quit IRC[20:40:56] *** amir has quit IRC[20:41:46] <dentifrice> only the other VPS does not consider the virtual_alias_domain to be a virtual_alias_domain, but a virtual_mailbox_domain[20:42:52] *** ScorpiusLetalis has quit IRC[20:43:16] <seekwill> You can't just refer it to the host or server?[20:43:32] *** Gatto has quit IRC[20:43:51] *** ScorpiusLetalis has joined #postfix[20:43:59] *** torvald_ has joined #postfix[20:44:17] <dentifrice> seekwill: what for?[20:45:08] <seekwill> Because I'm the controlling type[20:48:24] *** cilly has quit IRC[20:48:44] *** hever has quit IRC[20:49:00] *** cilly has joined #postfix[20:49:06] *** cilly has quit IRC[20:49:08] *** seekwill has quit IRC[20:50:25] *** Matic`Makovec has joined #postfix[20:50:57] *** knapper_tech has quit IRC[20:53:00] *** Motoko has joined #postfix[20:53:46] *** amir has joined #postfix[20:56:28] *** DarkKnightCZ has joined #postfix[20:57:08] <DarkKnightCZ> hi, how to configure postfix to not refuse smtp via port 25? i have debian + this in mater.cf[20:57:09] <DarkKnightCZ> smtp inet n - - - - smtpd[20:59:32] <Aprogas> Prove that Postfix refuses on port 25.[21:00:31] <DarkKnightCZ> no rules in iptables, i can telnet it from localhost[21:00:43] <adaptr> ...[21:00:50] <thumbs> wow[21:00:51] <DarkKnightCZ> refusing from other ip[21:01:04] <thumbs> fix your firewall / network[21:01:09] <adaptr> DarkKnightCZ: when other people speak, to you, what happens in you rbrain ?[21:01:35] *** jhoc has joined #postfix[21:01:36] <DarkKnightCZ> adaptr: is this rule enough? :) (ACCEPT tcp -- anywhere anywhere multiport dports www,https,smtp,ssmtp,pop3,pop3s,imap2,imaps,subssion,ssmtp,ssh)[21:01:56] <DarkKnightCZ> http, https, pop3, pop3s, ssmpt, imap, ssh, everything work[21:02:02] <DarkKnightCZ> only smtp not[21:02:25] <DarkKnightCZ> if i shut down postfix and change for example ssh to port 25, it works perfectly[21:02:32] <DarkKnightCZ> whats that youre brains is saying?[21:02:49] * jimpop grabs another cup of coffee and sits back to watch the entertainment[21:03:51] *** jhoc has quit IRC[21:04:44] *** lusted_gay has quit IRC[21:05:03] <Aprogas> DarkKnightCZ: Why do you think Postfix is refusing on port 2%?[21:05:28] <rob0> Flawed methodology, I bet.[21:06:01] <DarkKnightCZ> Aprogas: because if other app/script binds on that port, connections are ok (in,out)[21:06:19] <DarkKnightCZ> when postfix binds there, port 25 is refusing (from localhost its ok)[21:06:48] *** jhoc has joined #postfix[21:06:51] * jimpop wonders how you bind two apps to the same port....[21:06:59] <Aprogas> Make a pastebin showing what you did to connect to the other app/script and what error you get when connecting to postfix.[21:07:02] <thumbs> jimpop: magic, obviously.[21:07:19] <DarkKnightCZ> jimpop: (21:03:47) DarkKnightCZ: if i shut down postfix and change for example ssh to port 25, it works perfectly[21:07:41] <jimpop> have you tried it without shutting down postfix?[21:07:43] <Aprogas> DarkKnightCZ: We don't want you to tell us, we want you to show us.[21:08:02] <DarkKnightCZ> jimpop: address is already bind? thank you, i didnt know that[21:08:19] <jimpop> DarkKnightCZ: you are welcome. O.o[21:09:13] <DarkKnightCZ> well, i guess i was wrong, nowadays, irc is almost like 4chan...[21:09:14] <DarkKnightCZ> bye[21:09:18] *** DarkKnightCZ has left #postfix[21:09:23] <jimpop> ha![21:09:39] <lunaphyte_> feh. good riddance.[21:09:57] <jimpop> 4chan ref is priceless in setting context of writer[21:10:54] <adaptr> fucking moron. wanna bet he failed at reading logs ?[21:11:00] <jhoc> anyone else experiencing issues with sorbs DUHL being especially inaccurate lately?[21:11:02] <thumbs> quited in #httpd now[21:11:06] <thumbs> quieted too.[21:11:25] <Aprogas> jhoc: SORBS has had plenty inaccurate lists for a long time now.[21:11:33] <Aprogas> !zen[21:11:34] <knoba> Aprogas: "zen" : http://www.spamhaus.org/zen/ : A composite of all Spamhaus DNSBLs: SBL, XBL and PBL. Testing your DNSBL lookup can be done here: http://www.crynwr.com/spam/[21:12:23] <jhoc> yeah we are not using sorbs ourselves but have been stuck in a false DUHL block with no real recourse for removal as sorbs page has been up and down and delisting fails[21:14:23] *** Habbie has quit IRC[21:16:44] *** e-jones has joined #postfix[21:25:13] *** mroe has quit IRC[21:25:16] *** cpm has quit IRC[21:26:44] *** Timzzzz is now known as Timmooo[21:31:00] *** knapper_tech has joined #postfix[21:31:37] <knapper_tech> i want to clean out the "recieved" headers from my localhost[21:31:58] <knapper_tech> i put a header_check fil in my main.cf[21:35:11] <knapper_tech> and that file includes a line for ^/hostname/ IGNORE where hostname is what's showing up in the outbound headers[21:36:27] <knapper_tech> http://blog.stardothosting.com/2010/07/08/remove-mail-headers-in-postfix-outgoing-mail/[21:36:37] <knapper_tech> using this, but the offending headers are still present[21:36:42] <jimpop> !tell knapper_tech smtp_header_checks[21:36:42] <knoba> jimpop: Error: No factoid matches that key.[21:36:45] <jimpop> doh[21:36:55] <jimpop> knapper_tech: read up on smtp_header_checks[21:36:58] <knapper_tech> kk[21:39:50] *** jhoc has quit IRC[21:43:34] <jimpop> interesting: http://postmaster-blog.aol.com/2011/05/18/aol-is-in-reputation-red-and-yellow-modes/[21:47:14] *** Timmooo is now known as Timzzzz[21:48:00] *** ced117 has quit IRC[21:48:39] *** krzie has quit IRC[21:49:26] *** krzie has joined #postfix[21:53:35] <knapper_tech> smtp_header_checks is killing the mail entirely[21:53:48] <knapper_tech> i just want to clean out the offending header[21:54:08] <knapper_tech> so i don't have a bunch of localhost recieved headers in my outbound mail[21:55:23] <jimpop> knapper_tech: i use this line in /etc/postfix/smtp_header_checks.pcre:[21:55:50] <jimpop> /^Received: from (localhost|mail1.domain.tld) \(localhost.localdomain \[127.0.0.1\]\)/ IGNORE[21:56:35] *** matadore has joined #postfix[21:57:37] <jimpop> and of course in main.cf: smtp_header_checks = pcre:/etc/postfix/smtp_header_checks.pcre[22:00:49] *** Gatto has joined #postfix[22:00:55] <matadore> hello folks[22:02:07] <matadore> I got a fallback server that accepts connections from different relay ... I used sender_canonical_maps but this only changes the return-path .... I need to change the "From:" lines to be static and match the server @domain[22:02:22] <matadore> i did some research and header_checks can rewrite the headers but i dont know regex well enough to do it..[22:02:39] <knapper_tech> got it working[22:02:40] <matadore> /From:.* <.* at ( dot *)\.domain.local>/ REPLACE From: $1 <unix at maildomain dot com>[22:02:59] <Aprogas> !sender_canonical_classes[22:02:59] <knoba> Aprogas: Error: "sender_canonical_classes" is not a valid command.[22:03:23] <jimpop> knapper_tech: glad to hear[22:03:29] <Aprogas> http://www.postfix.org/postconf.5.html#sender_canonical_classes[22:03:42] <matadore> how can i make it /from : *.<@>/ replace from: $1 <@server>[22:03:59] <matadore> to replace the from .. strip the domain and replace it with the real server domain[22:04:46] <matadore> sender_canonical_classes (default: envelope_sender, header_sender)[22:04:56] <matadore> so make it sender_canonical_class = header_sender ?[22:04:58] *** lusted_gay has joined #postfix[22:05:11] <Aprogas> No.[22:05:29] <Aprogas> I'm not sure which rfc822-headers canonical affects. I thought From was included as well.[22:06:32] <matadore> aprogas : so far its only changing the return-path .. i need it to change the entire From : domain... keeping the name/username .. so it can match dkim[22:07:06] <Aprogas> Is it feasible to just set correct addresses in the MUA? That's the first place to change those things.[22:07:12] <matadore> http://www.unix.com/unix-advanced-expert-users/118692-postfix-sender-address-rewriting.html ... the guy there has it working with /From:.* <.* at ( dot *)\.domain.local>/ REPLACE From: $1 <unix at maildomain dot com>[22:07:38] <pj> I think that dkim can be set to ignore certain headers[22:07:41] <matadore> i just dont know how to rewrite it to match /from: *<*@*> / replace from $1 <* at domain dot com>[22:07:45] <pj> that would probably be a better way to go[22:10:02] <pj> ^From: (.+)@ REPLACE From: $1 at foo dot com>[22:10:11] <pj> ...I think[22:10:40] <matadore> https://forums.aws.amazon.com/thread.jspa?threadID=66252 says to add OmitHeaders "." and SignHeaders "." .. to opendkim.conf which will ignore everything and make it sign only the "from" but again .. the from isnt getting rewriting only the return-path[22:10:46] *** brancaleone has quit IRC[22:10:47] <pj> actually[22:11:06] <pj> /^From: (.+)@/i REPLACE From: $1 at foo dot com>[22:11:34] <matadore> I want to keep the relayed name and user@ ... just copy everything and change to @foo.com so dkim can sign[22:12:12] <pj> matadore: ^^^^^^^^^^[22:12:39] <matadore> ill try that[22:12:51] <matadore> this is regex correct?[22:12:57] <pj> that is assuming that the From: is properly formatted to begin with[22:13:01] <pj> it's pcre\[22:13:42] <pj> you may even want to do this to be safe ...[22:15:59] <pj> /^from:\s+(.+)@.+?(>?)\s*$/i REPLACE From: $1 at foo dot com$2[22:16:08] <pj> that would probably be a bit more flexible[22:16:25] <matadore> postmap it also right?[22:16:40] <pj> and of course it's all off the top of my head, so no guarantees that it will work, heh[22:16:44] <Aprogas> Isn't this sort of thing handled by generic?[22:17:15] <pj> matadore: yeah, check it with postmap[22:17:37] <pj> Aprogas: I have no idea[22:19:36] *** knapper_tech has quit IRC[22:22:32] *** Zborg has joined #postfix[22:22:32] *** Zborg has joined #postfix[22:25:15] *** brancaleone has joined #postfix[22:27:39] *** cytrinox_ has joined #postfix[22:30:38] *** cytrinox has quit IRC[22:30:38] *** cytrinox_ is now known as cytrinox[22:33:18] <Section1> anybody knows what happend with zen.spamhaus.org ?[22:33:33] <Section1> i cant resolve that hostname[22:35:05] <geek_cl> Section1: http://fpaste.org/7wOO/[22:35:08] *** uqlev has joined #postfix[22:35:42] *** empity has quit IRC[22:35:45] <pj> Section1: it won't resolve[22:36:06] <Aprogas> Try 2.0.0.127.zen.spamhaus.org[22:36:30] <Aprogas> Also Zen is not free of use for everyone. Their service might be shut down for you.[22:38:13] <jumperboy> Section1: if a lot of lookups get aggregated through one nameserver, it can get blacklisted[22:38:36] <Aprogas> 8.8.8.8 :)[22:41:01] *** marchelly has joined #postfix[22:41:29] <marchelly> hi, how could I temporary tell postfix not to send email[22:41:50] <rob0> Section1: http://www.spamhaus.org/faq/answers.lasso?section=DNSBL%20Usage#122[22:41:53] <marchelly> just leave it in queue, recieve from clients and leave it in queue[22:41:59] *** ScorpiusLetalis has quit IRC[22:42:03] <rob0> !defer_transports[22:42:04] <knoba> rob0: "defer_transports" : a configuration parameter in the main.cf: The names of message delivery transports that should not be delivered to unless someone issues "sendmail -q" or equivalent. Specify zero or more names of mail delivery transports names that appear in the first field of master.cf).[22:42:05] <thumbs> marchelly: you mean not relay any more.[22:42:39] <rob0> or, some kind of access(5) lookup with a "HOLD" action[22:42:59] *** ScorpiusLetalis has joined #postfix[22:43:36] <marchelly> thumbs, looks like yes, I want it to accept all smtp sessions to it, get email from mail clients, others, but do not forward it to recipient side[22:44:24] <thumbs> marchelly: you must understand the difference between relaying and delivering. 'forwarding' is irrelevant here.[22:44:59] * Aprogas relies on relentless relaying by Postfix[22:46:10] <Section1> looks like a dns issue http://pastebin.ca/2063900[22:46:11] <marchelly> forwarding I mean: smtp client >>> postfix server >> recipient server so I want to accepl all email but do not send it to recipient. something like put all incouming mail on hold..[22:47:11] *** matadore has quit IRC[22:47:21] <thumbs> marchelly: that's not forwarding, no.[22:47:49] <marchelly> so this is delivering[22:47:56] <Section1> rob0, thanks for the link[22:48:13] <thumbs> marchelly: it's deferred delivery, if you want to call it that.[22:48:34] <pj> Section1: dig 2.0.0.127.zen.spamhaus.org TXT[22:48:52] <rob0> Section1: read the rest of that FAQ link. #122 and #261 are applicable. Also, don't use nslookup, it's broken.[22:48:54] <marchelly> so I want to leave relaying and stop delivering, oh, yes, it's deferred delivery, I want to make it deferr for 2 days.[22:49:35] <rob0> marchelly: I gave you two answers, and yet you are still asking?[22:49:50] <thumbs> rob0: I just had to correct his improper terms[22:50:47] *** gerhard7 has quit IRC[22:51:39] *** jimi_ has joined #postfix[22:51:39] <Section1> pj, :) now i get[22:51:45] <jimi_> What is the EOF character for smtp?[22:52:09] <marchelly> thumbs, sorry, got it, thanks![22:52:50] *** ScorpiusLetalis has quit IRC[22:53:55] *** ScorpiusLetalis has joined #postfix[22:55:02] *** Matic`Makovec has quit IRC[22:56:54] <adaptr> jimi_: if you mean end-of-DATA, it's CRLF.CRLF[22:57:02] <adaptr> jimi_: as per RFC 5321[23:02:35] *** e-anima has quit IRC[23:08:08] *** ScorpiusLetalis has quit IRC[23:09:06] *** ScorpiusLetalis has joined #postfix[23:09:23] *** Zblakany has joined #postfix[23:09:58] *** s0ber_ has joined #postfix[23:12:00] *** s0ber has quit IRC[23:12:10] *** s0ber_ is now known as s0ber[23:13:17] <dan__t> Hrm.[23:13:22] <dan__t> I want to store mail logs in hadoop.[23:13:32] <adaptr> !logging[23:13:32] <knoba> adaptr: Error: "logging" is not a valid command.[23:13:35] <adaptr> pft[23:13:38] <adaptr> !logs[23:13:38] <knoba> adaptr: "logs" : postfix logs to the mail facility of syslog. Something like grep -i `postconf -h syslog_facility` /etc/syslog.conf should tell you where logs are going. also see !no_logs and !have2mung[23:14:02] <dan__t> I'm quite familiar. I promise.[23:14:41] <adaptr> then you know that that is not a postfix matter[23:15:04] <rob0> Okay, but Postfix won't do that natively. You want a syslogd with hadoop backend, or do something else to load the logs from files.[23:15:06] <dan__t> Get this: I do.[23:15:11] <dan__t> Again, I promise.[23:15:13] <dan__t> Just talking aloud.[23:15:26] *** e-jones has quit IRC[23:15:55] <rob0> Okay, but don't be so loud! adaptr has a hangover.[23:16:20] <adaptr> not anymore I don't[23:16:29] <dan__t> haha[23:16:38] <adaptr> not even when I woke up, in fact. Havana Club is the good stuff[23:17:39] <dan__t> Naked Juice. Green Machine.[23:19:44] <jimi_> adaptr, what happens if you send CRLF.CRLF as the email address in a message?[23:20:34] <adaptr> that is obviously not a valid address[23:20:46] <adaptr> in the body you mean ?[23:20:52] <adaptr> the dot is doubled.[23:20:56] <adaptr> RFC 5321. go.[23:21:44] <jimi_> i was trying to pull a pranki some how, where when it hits the from line, it quits[23:21:56] <Aprogas> adaptr, but what if I want to put a double-dot on an otherwise empty line?![23:22:18] <adaptr> doubled again[23:22:39] <adaptr> decoding transmitted SMTP removes one dot for every two dots on otherwise empty lines.[23:22:46] <adaptr> RFC 5321. really.[23:33:31] *** uqlev has quit IRC[23:40:01] *** geek_cl has quit IRC[23:49:12] *** Zeit|awy has quit IRC[23:49:19] *** Zeit|awy has joined #postfix[23:51:26] *** mu574n9 has joined #postfix[23:51:42] *** jimi_ has quit IRC[23:52:56] *** nor42 has left #postfix[23:54:02] *** Zeit|awy has quit IRC