June 11, 2013 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | >
June 11, 2013 [00:00:19] *** rmayorga has joined #postfix[00:00:19] *** rmayorga has joined #postfix[00:19:24] *** ccxCZ has quit IRC[00:22:26] *** gu1lle_ has quit IRC[00:23:04] *** kerneld has joined #postfix[00:26:59] *** mechanicalduck_ has quit IRC[00:27:59] *** d3c has joined #postfix[00:28:43] *** ccxCZ has joined #postfix[00:31:19] *** glphvgacs has joined #postfix[00:32:50] <glphvgacs> sender_dependent_relay_host_maps to sender_relay and there i have:[00:33:02] <glphvgacs> username at gmail dot com [smtp.gmail.com]:587[00:33:09] *** Toerkeium has quit IRC[00:33:15] <glphvgacs> i also have:[00:33:40] <glphvgacs> username2 at universitry dot edu [mail.university.edu]:587[00:34:56] <glphvgacs> but i get:[00:35:22] <glphvgacs> postfix/smtp: from=<username at gmail dot com> relay=none ...[00:36:41] <glphvgacs> postfix/smtp: from=<username2 at university dot edu> relay=mail.university.edu[ip.resolution.ip.ip]587 ...[00:36:50] <glphvgacs> that's odd![00:37:24] <glphvgacs> i can't find any typo, which seems to be the case here, any other idea?[00:38:31] *** mechanicalduck has joined #postfix[00:41:50] <glphvgacs> tls not implemented?[00:42:32] *** robinho86 has quit IRC[00:43:12] <glphvgacs> commented smtp_use_tls = yes[00:44:17] <glphvgacs> now [smtp.gmail.com] gets resolved to it's ip in the logs but i get 'Must use STARTTLS command first' msg[00:47:24] *** wald00_ has quit IRC[00:50:38] *** wdp has quit IRC[00:53:01] *** mechanicalduck has quit IRC[00:55:19] *** danblack has joined #postfix[01:00:49] *** Whoop has joined #postfix[01:11:55] *** shinao1 has joined #postfix[01:19:22] *** wald00_ has joined #postfix[01:28:05] *** bundy has quit IRC[01:43:24] *** wald00_ has quit IRC[01:43:36] *** wald00_ has joined #postfix[01:43:54] *** sep has quit IRC[01:45:38] *** gu1lle_ has joined #postfix[01:48:51] *** Nothing4You has quit IRC[01:52:52] *** koobs has quit IRC[01:55:02] *** sep has joined #postfix[01:58:34] *** koobs has joined #postfix[01:59:47] *** Nothing4You has joined #postfix[02:03:34] *** glphvgacs has quit IRC[02:04:19] *** hays has joined #postfix[02:06:23] <hays> I am running Debian 7 and am looking to configure postfix to send mail on multiple domains and receive mail on one domain. I am basically a n00b on how email works. Is there a howto or something that will get me started[02:08:25] *** wald00_ has quit IRC[02:10:11] *** grknight has joined #postfix[02:23:57] *** danblack has quit IRC[02:24:52] *** sep has quit IRC[02:25:02] *** danblack has joined #postfix[02:25:19] *** d3c has quit IRC[02:35:12] *** Colt has joined #postfix[02:38:49] *** tmberg has quit IRC[02:45:40] *** Colt has quit IRC[02:49:33] *** danblack has quit IRC[02:53:56] *** danblack has joined #postfix[02:58:36] *** shinao1 has quit IRC[03:07:56] *** damyan^ has quit IRC[03:08:53] *** jarif has quit IRC[03:09:17] *** jarif has joined #postfix[03:20:48] *** krisfremen has joined #postfix[03:20:48] *** krisfremen has joined #postfix[03:33:35] *** SelfishMan_ has quit IRC[03:35:28] *** kerneld has quit IRC[03:37:03] *** danblack has quit IRC[03:38:04] *** damyan^ has joined #postfix[03:42:23] *** krisfremen has quit IRC[03:59:51] *** danblack has joined #postfix[04:03:44] *** laner has quit IRC[04:07:09] *** krisfremen has joined #postfix[04:13:35] *** lunaphyte_ has quit IRC[04:14:40] *** Borg has quit IRC[04:16:15] <jimpop> !tell hays basic[04:16:15] <knoba> hays: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[04:17:37] *** Borg has joined #postfix[04:24:59] *** Borg has quit IRC[04:29:38] *** Borg has joined #postfix[04:39:22] *** err-or_ has joined #postfix[04:41:00] *** glphvgacs has joined #postfix[04:41:01] *** lunaphyte_ has joined #postfix[04:42:49] *** err-or has quit IRC[04:57:27] <glphvgacs> i'm getting this error:[04:58:22] <glphvgacs> postfix/smtp[27786]: 289BA8951D: to=<user at gmail dot com>, relay=none, delay=3103, delays=3103/0.03/0.17/0, dsn=4.4.3, status=deferred (Name service error for name=smtp.gmail.com type=A: Malformed or unexpected name server reply)[04:58:53] <Dominian> what does: host smtp.gmail.com return for you?[04:59:01] *** kiri has quit IRC[04:59:04] <glphvgacs> Dominian: i can ping it[04:59:21] <glphvgacs> Dominian: but i don't have host/nslookup here to dig further[04:59:46] <Dominian> You can ping it by name?[04:59:49] <glphvgacs> i have other relay servers, and their names resolve just fine ![04:59:55] *** kiri has joined #postfix[04:59:55] <glphvgacs> yes[04:59:59] <glphvgacs> it resolves it to ip[05:00:05] <Dominian> can you post the full log and postconf -n[05:00:09] <Dominian> to a pastebin[05:00:26] <glphvgacs> Dominian: just a sec[05:07:05] <glphvgacs> http://bpaste.net/show/106078/[05:07:10] <glphvgacs> Dominian: ^[05:07:33] <glphvgacs> Dominian: i don't know where postfix logs it's logs, i got that from systemd[05:07:39] <glphvgacs> Dominian: btw, libc is uclibc[05:08:38] <glphvgacs> Dominian: but i have _res struct and dns functions ns_*,dns_*,res_* enabled[05:09:17] <Dominian> systemd.. probably in /var/log[05:09:19] <Dominian> but:[05:09:20] <Dominian> !logs[05:09:20] <knoba> Dominian: "logs" : postfix logs to the mail facility of syslog. You can usually find them with ls /var/log/mail* otherwise something like grep -i `postconf -h syslog_facility` /path/to/syslog_config_file should tell you where logs are going. also see !no_logs and !have2mung[05:09:48] <Dominian> glphvgacs: umm you're sending from cs.mcgill.ca[05:09:54] <glphvgacs> Dominian: no[05:10:10] <Dominian> the logs say otherwise[05:10:12] <glphvgacs> Dominian: not even on their network (vpn or otherwise)[05:10:21] <Dominian> from=<bar at cs dot mcgill.ca>[05:10:48] <Dominian> status=deferred (SASL authentication failed; server mail.cs.mcgill.ca[132.206.51.234][05:11:12] <Dominian> Looks like you're trying to do some sort of hand off to a relay[05:11:14] <Dominian> and it's failing[05:11:41] <glphvgacs> smtp_sender_dependent_authentication[05:11:46] <glphvgacs> is set to yes[05:11:50] <Dominian> and it's failing[05:11:55] <glphvgacs> yes[05:12:05] <Dominian> Probably try to fix that and the rest of the issues will clear themselves up[05:12:15] <Dominian> I'm still looking at the paste.. haven't made it to the postconf -n yet[05:12:33] <glphvgacs> but that's internal to postfix[05:12:45] <glphvgacs> exact same configuration used to work[05:13:08] <glphvgacs> (up until 2 weeks ago), when i decided to do a clean install[05:13:19] <glphvgacs> something along the way must have changed[05:13:33] <Dominian> what version of postfix were you on and what are yo on now?[05:13:41] <glphvgacs> exact same[05:13:52] <Dominian> !smtp_sender_dependent_authentication[05:13:52] <knoba> Dominian: "smtp_sender_dependent_authentication" : enable sender-dependent authentication in the postfix smtp client; this is available only with sasl authentication, and disables smtp connection caching to ensure that mail from different senders will use the appropriate credentials. this feature is available in postfix 2.3 and later.[05:13:52] <glphvgacs> 2.10.0[05:14:04] <Dominian> glphvgacs: that was for me.. didn'twant to have to google it[05:14:14] <glphvgacs> Dominian: sure[05:14:19] <glphvgacs> Dominian: it's in SOHO[05:14:25] <Dominian> you confirmed your hash map is good?[05:14:32] <glphvgacs> Dominian: many times :)[05:14:41] <Dominian> hrm.. did you by chance postmap /etc/postfix/sender_relay ...?[05:14:57] <glphvgacs> yes, i did[05:15:22] <Dominian> hmmmm[05:15:23] <glphvgacs> scripted in fact for each restat of postfix (for debug purposes)[05:15:38] <Dominian> does it work sending to other servers by chance?[05:15:45] <Dominian> or does it fail the same way on all of them?[05:15:52] <glphvgacs> oddly enough it resolves cs.mcgill.ca but not gmail.com[05:16:15] <Dominian> hmmm[05:16:24] <glphvgacs> i even changed my resolver to google's (8.8.8.8)[05:16:26] <Dominian> where are you getting your DNS from?[05:16:44] <Dominian> did you stop postfix then start it back up after changing resolvers?[05:16:46] <glphvgacs> that and 8.8.4.4[05:16:51] *** Guest02377-50092 has joined #postfix[05:16:58] <glphvgacs> probably not, let me do that[05:17:21] *** internat has quit IRC[05:17:40] <Dominian> it's possible postfix is caching som eof the dns queries.. in fact with 2.10 it's most certain it is[05:17:44] <glphvgacs> no luck[05:17:48] <Dominian> strange.[05:18:17] <glphvgacs> where does it keep that cache[05:18:20] <Dominian> I'm probably thinking about this too much... it's probably something simple...[05:19:21] <glphvgacs> can permission come to this?[05:19:25] <Dominian> dnsblog there's a dnsblog service that it launches[05:19:30] <Dominian> umm good question[05:19:46] <Dominian> try postfix set-permissions[05:19:54] *** internat has joined #postfix[05:20:07] <glphvgacs> on gentoo (gentoo on this machine), couple of files are missing like /etc/LICIENCE and so one[05:20:19] *** Colt has joined #postfix[05:20:31] <glphvgacs> and set-permission seems to stop if any of the files are missing[05:20:33] <glphvgacs> i say that because[05:20:37] *** stljim has quit IRC[05:20:41] <Dominian> /etc/LICENSE?[05:21:12] <glphvgacs> i touch'ed /etc/LICENSE and then i was complaining about TLS_LICENSE, then about alias and on and on[05:21:19] <Dominian> ummm[05:21:20] <glphvgacs> s/i/it/[05:21:24] <Dominian> did you build this from source?[05:21:27] <glphvgacs> yes[05:21:30] <Dominian> heh[05:21:44] <Dominian> those should be in /etc/postfix[05:21:47] <Dominian> not /etc[05:21:53] <glphvgacs> my bad[05:22:05] <Dominian> do they show in /etc/postfix?[05:22:09] <glphvgacs> yes they all reside under /etc/postfix[05:22:20] *** Guest02377-50092 has quit IRC[05:22:22] <Dominian> yeah so something with your build is off[05:22:35] <glphvgacs> i don't have those but config file for postfix are under /etc/postfix[05:23:25] <Dominian> this is my line I use to build postfix from source: make makefiles CCARGS="-DHAS_MYSQL -DUSE_TLS -DUSE_SASL_AUTH -I/usr/include/mysql" AUXLIBS="-lssl -lcrypto -lmysqlclient -lz -lm" && time make[05:23:44] <Dominian> then if I'm doing an upgrade I just do: make upgrade[05:24:14] <Dominian> it's definitely possible it's the permissions though[05:24:14] <glphvgacs> i didn't build by hand, gentoo is source based[05:24:37] *** grknight has quit IRC[05:24:48] <glphvgacs> any work around for those missing files that set-permission complains about?[05:25:02] <glphvgacs> like a 'kee-going' flag or something[05:25:50] <Dominian> That, I'm not sure[05:26:53] <glphvgacs> i'm creating all the files set-permission complains about, lets see where it's headed[05:27:01] <Dominian> heh[05:27:06] <Dominian> Ther'es probably a work around that I'm missing[05:28:00] <glphvgacs> it's complaining about man page for mailq missing ![05:28:11] <Dominian> yeah sounds like the gentoo build is... fooked[05:28:13] <Dominian> :)[05:28:32] <Dominian> I know very little about gentoo[05:31:05] <glphvgacs> man pages are compressed to bz2[05:31:22] <glphvgacs> and set-permission is missing them[05:31:28] <Dominian> ahhhh[05:35:33] <glphvgacs> done[05:37:13] <glphvgacs> Dominian: so it doesn't seem to be the permission[05:37:23] <glphvgacs> set-permission finished it's job[05:37:28] <glphvgacs> restarted postfix[05:37:32] <glphvgacs> still the same[05:37:50] <Dominian> I dunno man.. wish I could be of more help[05:37:58] <Dominian> the guys that could help don't appaear to be active right now[05:38:42] <glphvgacs> i'll ping them later, thanks for your help[05:39:12] <Dominian> not a problem.[05:39:20] <glphvgacs> at least we know it's not the permission[05:40:16] <Dominian> yeah[05:40:49] *** kiri has quit IRC[05:43:22] <Dominian> so you can resolve everything but gmail.com ?[05:44:38] <glphvgacs> in postfix, yes[05:44:49] <glphvgacs> well, not everyting[05:45:02] <glphvgacs> we know that i can resolve cs.mcgill.ca[05:45:14] <glphvgacs> again in postfix[05:45:16] <Dominian> glphvgacs: can you try sending an email to dominian at slackadelic dot com[05:45:26] <Dominian> see if that fails as well[05:45:32] <Dominian> that's hosted on google apps[05:45:34] <Dominian> I'm just curious[05:48:03] <glphvgacs> malformed there too[05:48:11] <glphvgacs> i can try sending to mcgill from gmail[05:48:26] <Dominian> hmmm[05:49:20] <glphvgacs> what am i saying, it can't even reach it's relay[05:49:26] <glphvgacs> smtp.gmail.com[05:49:46] <glphvgacs> doesn't matter what the to=<> is[05:50:07] <Dominian> So, your server hands off to a relay host, but the relay host can't reach smtp.gmail.com?[05:50:18] <Dominian> so are the logs you showed coming from the relay host?[05:50:37] <glphvgacs> no, no[05:50:50] <glphvgacs> this machine _is_ the *server* if you like[05:50:56] <Dominian> ah ok[05:52:38] *** Colt has quit IRC[05:55:06] <Dominian> glphvgacs: i'm searching google[05:56:32] <Dominian> so it's saying the malformed reply is the A record for smtp.gmail.com[05:56:44] <Dominian> so, you don't have a way to run nslookup, host, or dig from the server throwing the error?[05:57:20] <glphvgacs> bind fails to build, i might be able to fix it[05:57:28] <Dominian> let me know[05:57:44] <glphvgacs> but it has to be tomorrow (8-10 hours from now)[05:58:07] <glphvgacs> i'm going to get some sleep, but i leave this on[05:58:10] <glphvgacs> will do[05:58:29] <Dominian> have a good night[06:11:21] *** mechanicalduck has joined #postfix[06:17:04] *** gaumire has joined #postfix[06:18:22] *** trusktr has joined #postfix[06:20:12] *** Borg has quit IRC[06:31:20] *** wald00_ has joined #postfix[06:32:53] *** Bronze has quit IRC[06:42:02] *** kieppie has joined #postfix[06:42:28] <kieppie> hi guys. a buddy has asked me to spin him up a AWS/EC2 mail instance.[06:43:25] <kieppie> Anyone know of quick & easy/dirty system I could spin up; maybe something with a web gui, so that he can admin it himself?[06:46:34] *** UQlev has joined #postfix[06:46:45] *** Borg has joined #postfix[06:57:17] *** wald00_ has quit IRC[06:57:31] *** wald00_ has joined #postfix[07:17:29] *** biggi_mat has joined #postfix[07:20:02] *** qdrrmt has joined #postfix[07:22:28] *** kiri has joined #postfix[07:26:17] *** trusktr has quit IRC[07:30:46] *** trusktr has joined #postfix[07:36:34] *** kiri has quit IRC[07:39:41] *** kiri has joined #postfix[07:41:16] <pj> kieppie: nope[07:41:21] <pj> !tell kieppie why[07:41:21] <knoba> kieppie: "why" : are you sure that installing, configuring and maintaining a mailserver is really what you want to do here? it's not something that's for the faint of heart, and definitely not something for folks that are still just learning the basics of linux or unix. also see !nullclient[07:45:29] *** UQlev has quit IRC[07:45:42] <kieppie> yes[07:46:44] <kieppie> I'd like to avoid the schlep of going through a full setup - I'd rather spend my time & effort tweaking it[07:55:26] *** qdrrmt has quit IRC[08:01:03] *** jekle has joined #postfix[08:01:26] *** wald00_ has quit IRC[08:03:15] *** qdrrmt has joined #postfix[08:14:18] *** UQlev has joined #postfix[08:16:33] *** tuxick has left #postfix[08:17:34] *** wald00_ has joined #postfix[08:21:25] *** qdrrmt has quit IRC[08:22:39] *** toothe has joined #postfix[08:22:56] *** damyan^ has quit IRC[08:25:31] <toothe> If my postfix server is on one machine, can I have the email actually stored on another?[08:37:47] *** micw_ has joined #postfix[08:40:58] *** micw has quit IRC[08:47:42] *** a_west has left #postfix[08:48:30] *** Spixx has joined #postfix[08:50:47] *** maxmahem has quit IRC[08:50:52] *** micw_ has left #postfix[08:51:11] *** micw has joined #postfix[08:51:16] <micw> hi[08:51:35] <micw> is it possible to set smtpd_client_restrictions on a per-target-domain basis?[08:53:45] <Spixx> "The following restrictions are specific to client hostname or client network address information. "[08:54:22] <micw> means "no"?[08:54:47] <Spixx> I think so. Im no expert but that part matches on IPs[08:55:09] <micw> (i ask because the message is rejected at "data" command - so the destination address is known when it is rejected[08:57:09] <Spixx> Okay, as far as I know no you cannot use that restriction in that way, since that limits when the ehlo/helo has been performed? (maybe someone with further knowledge can jump in and correct me though).[08:57:46] <Spixx> but you want to have a check that confirms you come from 1.2.3.4 and then you are allowed to do the rcpt to: command?[08:57:55] <Spixx> or did I missunderstand?[09:01:22] *** wald00_ has quit IRC[09:01:37] *** wald00_ has joined #postfix[09:02:11] <micw> it's just on our testserver where i want to allow to sewnd from certain hosts to certain domains[09:02:25] <Zerberus> micw: see restriction classes[09:02:46] <micw> but when i think a bit more about it, is does not make sense (source host/target domain restrictions)[09:03:51] *** wald00_ has quit IRC[09:04:09] *** wald00_ has joined #postfix[09:13:20] *** maxmahem has joined #postfix[09:15:42] *** ffiore has joined #postfix[09:18:50] *** biggimat has joined #postfix[09:21:56] *** biggi_mat has quit IRC[09:28:41] *** rotbeard has joined #postfix[09:34:28] <sysmonk> !restriction_classes[09:34:28] <knoba> sysmonk: "restriction_classes" : see !restriction_class[09:34:29] <sysmonk> !restriction_classe[09:34:29] <knoba> sysmonk: Error: "restriction_classe" is not a valid command.[09:34:33] <sysmonk> !restriction_class[09:34:33] <knoba> sysmonk: "restriction_class" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html[09:34:36] <sysmonk> micw: ^^[09:39:53] *** wdp has joined #postfix[09:39:53] *** wdp has joined #postfix[09:41:27] *** lunaphyte_ has quit IRC[09:41:42] *** lunaphyte_ has joined #postfix[09:48:09] *** trusktr has quit IRC[09:54:09] *** aindilis2 has quit IRC[09:58:12] *** glphvgacs has quit IRC[10:03:35] *** UQlev has quit IRC[10:04:05] *** danblack has quit IRC[10:07:24] *** glphvgacs has joined #postfix[10:07:24] *** glphvgacs has joined #postfix[10:07:44] *** wald00_ has quit IRC[10:21:59] *** koobs has quit IRC[10:22:00] *** koobs has joined #postfix[10:27:15] *** gaumire has quit IRC[10:30:58] *** gu1lle_ has quit IRC[10:32:57] *** diabel has quit IRC[10:33:12] *** diabel has joined #postfix[10:39:56] *** zhb has joined #postfix[10:50:50] *** maxmahem has quit IRC[10:52:27] *** maxmahem has joined #postfix[10:58:28] *** qdrrmt has joined #postfix[11:05:56] *** gaumire has joined #postfix[11:06:41] *** [TheFlash] has joined #postfix[11:06:47] <[TheFlash]> hi[11:06:54] <[TheFlash]> i have a question about postfix[11:07:10] <[TheFlash]> does the "Local Only" configuration option allow sending to other servers?[11:07:29] <[TheFlash]> i mean, sending outside the local network[11:07:52] <wdp> [TheFlash], local only configuration option?[11:08:24] <[TheFlash]> wdp: well... it might be debian specific, but when installing i got a configuration menu[11:08:42] *** tuxick has joined #postfix[11:08:43] <wdp> :-)[11:08:50] <[TheFlash]> wdp: basically it tells postfix to use the loopback interface[11:09:00] <[TheFlash]> wdp: though this shouldn't have anything to do with sending....[11:09:21] <wdp> you could try using telnet.[11:09:30] <wdp> if you can send to external addresses.[11:09:53] <[TheFlash]> wdp: i realize however that a mail client can always connect to an external SMTP server[11:10:16] <[TheFlash]> wdp: so i meant only through postfix[11:10:19] <tuxick> ran into problems with mailman getting rejected because of too many errors, but don't see how to be less strict for localhost[11:10:31] <tuxick> i'd rather not simply up smtpd_hard_error_limit[11:10:34] *** shinao1 has joined #postfix[11:14:00] <[TheFlash]> how do i send mail to an IP address instead of a domain?[11:15:01] <tuxick> why on earth would you?[11:15:17] <[TheFlash]> tuxick: trying to test if postfix can send to external servers[11:15:28] <[TheFlash]> tuxick: by sending a mail to myself[11:15:35] <[TheFlash]> tuxick: but a different computer[11:16:04] <[TheFlash]> tuxick: (on which postfix is also running)[11:16:29] <[TheFlash]> wait no, i can't because it only listens on localhost[11:16:30] <tuxick> it'd be a horrible hassle or even impossible to convince postfix to do this[11:16:30] <[TheFlash]> nevermind[11:16:57] <tuxick> not worth the effort anyway :)[11:17:12] *** stljim has joined #postfix[11:17:31] <[TheFlash]> tuxick: if i set postfix to use only the loopback interface, does it still send to external servers?[11:17:59] *** danblack has joined #postfix[11:18:05] <[TheFlash]> inet_interfaces = loopback-only[11:18:11] *** Trolololol has left #postfix[11:22:05] *** stljim has quit IRC[11:25:23] *** x3cion has left #postfix[11:37:33] *** [TheFlash] has left #postfix[11:48:25] *** UQlev has joined #postfix[11:59:28] *** qdrrmt has quit IRC[12:02:56] *** shinao1 has quit IRC[12:09:30] *** [diablo] has joined #postfix[12:09:30] *** [diablo] has joined #postfix[12:23:45] *** err-or_ is now known as err-or[12:34:00] *** _bt has quit IRC[12:34:00] *** _bt has joined #postfix[12:36:12] <nfi|ermes> ldd give me strange output[12:36:19] <nfi|ermes> http://pastebin.com/1JvRq2E3[12:36:45] <nfi|ermes> is this normal ? /usr/lib/n4xZz//jynx2.so (0xb7771000)[12:37:23] <adaptr> nfi|ermes: what on earth are you doing ?[12:37:36] <nfi|ermes> ?[12:38:20] <adaptr> !tell nfi|ermes welcome[12:38:20] <knoba> nfi|ermes: "welcome" : welcome to #postfix! if you're joining for the first time, or are new to irc, the first thing you'll want to do is read the channel topic (/topic). it includes crucial instructions on how to effectively ask for help here, and what data you should include with your questions. the degree of success you'll have is directly related to how effectively you're able to follow those guidelines.[12:38:30] *** shal3r has joined #postfix[12:38:58] *** UQlev has quit IRC[12:40:38] <nfi|ermes> do you want postconf output ?[12:40:47] <nfi|ermes> or see logs ?[12:41:11] <adaptr> we could start with : do you have a postfix-related issue ?[12:43:19] <nfi|ermes> warning: private/proxymap socket: service dict_proxy_open: Connection reset by peer[12:43:30] <nfi|ermes> proxymap stream disconnect[12:44:40] <adaptr> yes. please provide a pastebin of unadulterated and unabridged !relevant_logs[12:44:57] <adaptr> not verbose, not interpreted. just what's actually in the log file. thanks.[12:48:28] *** gaumire has quit IRC[12:50:10] <nfi|ermes> http://pastebin.com/ix7wVU50[12:52:56] <nfi|ermes> not verbose: http://pastebin.com/GmE7Ax0A[12:55:20] <adaptr> what made you think it was a good idea to ignore what I said anyway ?[12:56:56] *** zorg1 has quit IRC[13:00:56] <nfi|ermes> i had verbose active[13:01:01] <nfi|ermes> not i disabled[13:01:07] <nfi|ermes> now i disabled[13:02:54] *** fireglow has quit IRC[13:03:42] *** fireglow has joined #postfix[13:08:34] *** tMH has left #postfix[13:08:59] <adaptr> where did you get the postfix binaries ? what distro is this ?[13:09:40] *** rotbeard has quit IRC[13:13:47] *** laner has joined #postfix[13:35:16] *** UQlev has joined #postfix[13:35:38] *** shinao1 has joined #postfix[13:40:02] *** kieppie has quit IRC[13:41:39] *** Dessa_ has quit IRC[13:41:39] *** Dessa_ has joined #postfix[13:42:04] *** Dessa_ is now known as Dessa[13:43:41] *** err-or has quit IRC[13:43:46] *** Jarris has joined #postfix[13:44:07] *** err-or has joined #postfix[13:49:05] *** zhb has quit IRC[13:58:12] *** Bronze has joined #postfix[14:02:02] *** rotbeard has joined #postfix[14:04:57] *** qdrrmt has joined #postfix[14:06:44] *** MattJ has joined #postfix[14:07:29] <MattJ> Can anyone suggest why some of my mails might not have a 'Received' header?[14:07:38] <lunaphyte_> pastebin proof[14:08:08] *** Section1 has joined #postfix[14:09:24] *** fireglow has quit IRC[14:09:24] <MattJ> http://q.zash.se/07424b9c.txt is a spam mail I received today for example[14:09:58] <lunaphyte_> where did you copy that message source from?[14:10:06] *** diabel has quit IRC[14:10:28] <MattJ> From my maildir (I use vmail + dovecot)[14:10:50] *** diabel has joined #postfix[14:11:17] *** fireglow has joined #postfix[14:12:49] <MattJ> I don't know why I wrote vmail, but for clarify I meant virtual domains[14:13:01] <adaptr> grep the mail log for the message-id, perhaps it was a local submission[14:13:49] <lunaphyte_> your paste came literally from the filesystem - not from a message retrieved by your mua via imap?[14:14:41] <MattJ> lunaphyte, correct (though actually it has been moved into another folder via my mua... maybe I'll log out and catch one before that happens)[14:16:38] <MattJ> adaptr, thanks for the suggestion... found it in the log and it wasn't local[14:16:59] <lunaphyte_> well, that would be a good confirmation step, but it's probably a reasonable demonstration at this point.[14:17:10] <lunaphyte_> show the log entries for all processing of the message[14:17:46] <lunaphyte_> also show postconf -nf; postconf -Mf[14:18:18] *** Eagleman has joined #postfix[14:18:31] *** danblack has quit IRC[14:20:05] <MattJ> Log: http://q.zash.se/1ee3d84c.txt[14:20:30] <MattJ> (I don't think those RBLs were working, I removed them from my config this morning)[14:21:23] <adaptr> you should be using postscreen, anyway[14:21:37] <adaptr> well, cleanup(8) should have added a Received: header[14:22:28] <adaptr> it may be worth trying to cpature such a message on the wire. see what the original says.[14:22:39] <adaptr> also, what version is this ? postconf mail_version[14:22:42] <MattJ> Configs: http://q.zash.se/a4e207fb.txt[14:23:02] <MattJ> mail_version = 2.9.6[14:23:17] <adaptr> has it happened before ?[14:24:27] <adaptr> lunaphyte_: crazy idea: if header_checks could work on only one smtpd(8), reject everythign that does not already have at least one Received: header.[14:24:42] <MattJ> I don't know, but it seems I have a number of mails now without any 'received' (however some *do* have it)[14:25:12] <MattJ> I only noticed when I started looking into why various spam messages are getting through[14:26:14] <jelly> someone in this channel used to make debian packages for development or rc versions of postfix and I can't remember who/where those were[14:26:49] *** grknight has joined #postfix[14:28:49] <adaptr> I know of an Ubuntu PPA for recent packages,. but not debian[14:29:52] *** Uranio has quit IRC[14:30:48] <jelly> I could use deb-src for ubuntu... if they're too broken I have access to an employee of canonical to poke[14:31:08] <adaptr> MattJ: run grep -rlv '^Received:' * in your top-level maildir[14:31:33] <adaptr> mine show zero mail files without that header[14:31:45] <adaptr> which dovecot version are you using ?[14:32:19] <MattJ> Loads of matches[14:32:27] *** diabel has quit IRC[14:32:30] <MattJ> Probably most of my mail (!)[14:32:40] *** diabel has joined #postfix[14:32:49] <MattJ> dovecot 1:2.0.19-0ubuntu2[14:33:22] <adaptr> excellent! now you know it's an endemic problem[14:34:01] <adaptr> you do understand the dovecot index files will be listed, yes[14:34:04] <MattJ> I built this setup from scratch a few months ago, but it looks like mail I received long ago is also lacking the header[14:34:20] <MattJ> Yes, it's matching actual mail files[14:34:50] <MattJ> Ah, some of those might be local, let me keep digging[14:35:18] <adaptr> see what the average age is of those, or rather, how many are recent[14:35:58] <adaptr> find . -mtime +30 for everything older than a month[14:37:16] <jelly> took me 17 years to notice find . -mtime +7 finds dir.entries older than _eight* days[14:37:41] <MattJ> Bizarre, the grep doesn't seem to be working[14:37:50] <adaptr> what grep[14:38:14] <MattJ> grep -rlv '^Received:' # is listing files that with Received headers[14:38:33] <adaptr> it should do anything, since you omitted any input[14:38:37] <adaptr> *sshouldn't[14:39:20] <MattJ> No, I passed '.' :)[14:39:31] <adaptr> . != *[14:39:50] <MattJ> Right, but * doesn't match .*[14:40:00] <adaptr> you said it showed lots of files earlier[14:40:46] <MattJ> It does, but * only matches cur, basically... not any of my folders (my inbox only has about 30 messages, all recent)[14:41:40] <adaptr> ah, my bad.[14:42:01] <adaptr> grep -lv foo means "show all files that have at least one line not containing foo"[14:42:04] <MattJ> Right[14:42:04] <adaptr> not what I wanted :([14:42:10] <MattJ> I just realised that too[14:42:16] <adaptr> damn regexes[14:42:19] <MattJ> :)[14:42:38] *** krislappy has joined #postfix[14:42:38] *** krislappy has joined #postfix[14:42:50] *** krisfremen has quit IRC[14:42:52] * jelly gathers adaptr does not sport a http://store-xkcd-com.myshopify.com/products/i-know-regular-expressions tee[14:43:01] <lunaphyte_> !regex[14:43:01] <knoba> lunaphyte_: "regex" : some people, when confronted with a problem, think i know, i'll use regular expressions. now they have two problems. (jamie zawinski)[14:43:11] *** LaBliMo has quit IRC[14:43:27] <adaptr> grep -rLv '^Received:' . |grep -v maildirfolder[14:43:40] <adaptr> that returns only one dovecot file[14:44:08] <MattJ> Ok, that's better at least, it looks like only mail received since I set up the new server is lacking the header[14:44:19] <adaptr> how did you set it up ?[14:45:06] *** laner has quit IRC[14:45:36] <MattJ> I primarily followed this: http://www.exratione.com/2012/05/a-mailserver-on-ubuntu-1204-postfix-dovecot-mysql/ - but without any of the filtering services[14:45:44] <adaptr> urgh, yes[14:45:46] <adaptr> !tutorial[14:45:46] <knoba> adaptr: "tutorial" : A very common problem is that some people prefer to follow a step-by-step tutorial that shows them how to setup their server w/out reading the documentation or understanding what they are doing. If something goes wrong, they have no clue whatsoever about where to find hints, and they sometimes decide to start from scratch using a different tutorial. This is not The Proper Way.[14:46:04] <MattJ> Yep :)[14:47:03] <MattJ> But you have to admit, with a billion other things to do, spending a day reading postfix docs for a task I perform about once every 5 years isn't the most useful thing to do[14:47:23] <Dominian> MattJ: true, but the next time you do it, you'll know what to do properly.[14:47:38] <MattJ> Well it's the second time, and I don't generally blindly copy stuff I don't understand[14:47:45] <lunaphyte_> heh. i'd say what you're going through now is a better example of something that isn't the most useful thing to do...[14:48:27] <MattJ> Ok, I might go and hide in a corner[14:48:33] *** jww has joined #postfix[14:48:44] <MattJ> "Now create the file /etc/postfix/header_checks, which will contain some directives to remove certain headers when relaying mail. "[14:48:50] <jww> Hello.[14:48:55] <lunaphyte_> haha[14:48:56] <MattJ> The darkest corner I can find[14:49:07] <adaptr> postfixadmin. nuff said.[14:49:12] <Dominian> hehe[14:49:20] <Dominian> postfixadmin isn't bad[14:49:31] <adaptr> MattJ: you have no clue how postfixadmin upfucks your server. nobody does. we don't support it.[14:49:53] <MattJ> adaptr, I'm all ears, but yes... I cringed as I set it up[14:49:57] <adaptr> Dominian: it's dumb. it offers zero customization options for people who DO know what postfix should be doing[14:50:09] <lunaphyte_> postfixadmin isn't bad, but what funny is how misleading the name is, since it's effectively got *zero* to actually do with postfix[14:50:11] <lunaphyte_> *what's[14:50:17] <Dominian> yep[14:50:26] <Dominian> adaptr: I use it just as an interface to manage virtual domains.[14:50:34] <adaptr> it won't work unless you set up postfix exactly the way they want you to[14:50:37] <MattJ> But on my previous server I was manually hashing passwords and running INSERT queries via the MySQL command line[14:50:38] <adaptr> and I don't want to[14:50:41] <Dominian> I don't want to have to add an email address everytime someone I host needs an email addres.s. postfixadmin lets them do it on their own.[14:50:48] <Dominian> adaptr: eh? since when?[14:50:50] <lunaphyte_> postfixadmin should actually be named "maildbadmin"[14:50:56] <jww> I changed my postfix configuration, and now I get some problem.when I try to send an email from the shell it works ok. but when it's send via apache I have an error : <somemailaddress at somehost dot com?> : bad address syntax . does this '?' is supposed to be here ?[14:50:56] <Dominian> I integrated postfixadmin into an existing installation without issue.[14:50:57] <adaptr> mailbadmin[14:51:12] <Dominian> and not customizing the setup of postfix to accomodate postfixadmin[14:51:23] <adaptr> Dominian: come work for me[14:51:33] <Dominian> adaptr: eh?[14:51:46] <adaptr> never mind, I have no money[14:51:59] <lunaphyte_> s/money/mommy/[14:52:01] <Dominian> lol[14:52:06] <adaptr> or that[14:52:22] <Dominian> adaptr: previously, when I was using MailScanner (I know I know) I had used mailwatch coupled with postfixadmin..[14:52:52] <Dominian> I actually changed the postfixadmin code and the mailwatch code to cross auth with each other.. so that the logins would sync from postfixadmin to mailwatch so the same user account could auth eithe rplace[14:53:05] <Dominian> but that was.. a pita[14:53:21] <micw> is there a way to intercept postfix's smtp dialog on a per recipient domain base? e.g. run a milter only for a certain recipient domain?[14:55:29] <MattJ> Is there a better way to achieve what that guide is trying to do with header_checks? i.e. remove 'Received' from authed client connections, but keep it for other received mail[14:55:52] <lunaphyte_> yeah. leave the silly headers alone.[14:56:05] <MattJ> But my IP address![14:57:23] <Dominian> There's no reason to remove headers[14:57:23] <Dominian> ever[14:57:35] <Dominian> Headers are great tools for tracking problems with mail routing[14:57:48] <lunaphyte_> iirc, you'd need a separate cleanup(8) for submission, which you could then use a separate header_checks setting for.[14:57:49] <MattJ> Right, but routing from my client to my server is rarely an issue :)[14:57:57] <Dominian> and if you don't want your IP to be seen, don't use that server as an smtp server[14:58:02] <MattJ> and when it is, I know about it before the mail reaches postfix[14:58:21] <Dominian> Then again, I don't get why people want to strip headers[14:58:23] * Dominian shrugs[14:58:25] <lunaphyte_> caveat emptor, of course, as that's simply off of the top of my head[14:59:27] <MattJ> Dominian, I'm honestly not that concerned about it, but I don't see why people I send mail to really need to know my IP address either (it practically reveals my location at the time of sending, which I might consider private)[14:59:28] <lunaphyte_> oh, maybe smtp_header_checks[15:00:18] <lunaphyte_> eh, that would be kind of kludgy[15:05:38] *** amboss has quit IRC[15:07:48] *** chrisq_ has left #postfix[15:08:48] <Dominian> MattJ: Oh i understand why you're doing it[15:12:58] *** amboss has joined #postfix[15:16:43] *** bkfitz has joined #postfix[15:17:41] *** UQlev has quit IRC[15:24:42] *** stljim has joined #postfix[15:28:34] *** robinho86 has joined #postfix[15:29:32] *** [diablo] has quit IRC[15:41:51] *** mibofra has joined #postfix[15:41:51] *** mibofra has joined #postfix[15:48:24] *** mechanicalduck has quit IRC[15:52:33] *** nfi|ermes has quit IRC[16:00:05] *** qdrrmt has quit IRC[16:01:58] *** Spixx has quit IRC[16:07:09] *** MattJ100 has joined #postfix[16:10:04] *** MattJ has quit IRC[16:15:37] *** SuperNull has quit IRC[16:19:18] *** jarif has quit IRC[16:22:08] *** err-or has quit IRC[16:22:41] *** err-or has joined #postfix[16:29:06] *** [diablo] has joined #postfix[16:32:53] <Dominian> glphvgacs: You got it fixed!?[16:32:58] <Dominian> glphvgacs: I just received your test email :)[16:34:19] *** mechanicalduck has joined #postfix[16:35:40] <glphvgacs> !tell Dominian disable_dns_lookups[16:35:41] <knoba> Dominian: "disable_dns_lookups" : Disables DNS lookups by the Postfix smtp(8) client. When disabled, disable_dns_lookups=yes, postfix uses the the gethostbyname() system library call which uses nsswitch mechanisms to look up host address information. DO NOT USE THIS on a server that needs mail routing ability.[16:36:10] <glphvgacs> Dominian: good morning btw :)[16:41:35] <Dominian> haha[16:41:41] <Dominian> I knew it was something simple[16:46:55] <glphvgacs> !disable_dns_lookups[16:46:55] <knoba> glphvgacs: "disable_dns_lookups" : Disables DNS lookups by the Postfix smtp(8) client. When disabled, disable_dns_lookups=yes, postfix uses the the gethostbyname() system library call which uses nsswitch mechanisms to look up host address information. DO NOT USE THIS on a server that needs mail routing ability.[16:47:34] <glphvgacs> !smtp_dns_support_level[16:47:34] <knoba> glphvgacs: Error: "smtp_dns_support_level" is not a valid command.[16:48:44] *** mmcgrath_ has joined #postfix[16:49:10] *** shinao1 has quit IRC[16:49:34] *** mmcgrath_ has left #postfix[16:49:43] *** mmcgrath has joined #postfix[16:49:46] <mmcgrath> If I had a multi-user system and wanted to rate limit users to say, just a few emails per day, is there a way to do that?[16:54:10] <Dominian> glphvgacs: oh my god... I know what the issue was[16:54:13] <Dominian> glphvgacs: and I didn't even THINK[16:54:28] <tuxick> back to an old problem: someone trying to send mail to a recipient on server that uses greylisting[16:54:28] <Dominian> glphvgacs: you could've enclosed your relay host in [ ] to stop postfix from doing a DNS lookup[16:54:39] <tuxick> postfix instantly gives up[16:55:26] <tuxick> 450 4.2.0 <someuser at somedomain dot com>: Recipient address rejected: Greylisted,.. etc[16:55:40] <Dominian> well, 4xx is a temp fail[16:55:42] <Dominian> check your mailq[16:55:55] <tuxick> i did, of course[16:56:00] <tuxick> it's not there[16:56:08] <Dominian> So, it temp fails as it should, but postfix gets rid of it?[16:56:15] <tuxick> in fact it's a webmail user who instantly got rejection message[16:56:21] <Dominian> interesting[16:56:36] <Dominian> and it's the remote server greylisting I'm assuming?[16:56:50] <tuxick> well, in fact there's assp in the chain, which listens on :25 and passes it on to postfix[16:57:07] <tuxick> but postfix log shows it only tries to deliver once, and gives up[16:57:55] <tuxick> so maybe in some way i don't understand that's where things don't work as expected[16:57:59] <tuxick> 125 inet n - - - - smtpd[16:58:12] <Dominian> is it getting lost in assp some how?[16:58:15] <Dominian> I've never used assp myself[16:58:28] <tuxick> no, assp passes it to postfix smtpd on port 125[16:58:32] <Dominian> ahh ok[16:58:40] <tuxick> log agrees on that[16:58:46] *** kieppie has joined #postfix[16:59:03] <tuxick> i just don't understand why postfix would not retry[16:59:47] <tuxick> mailq shows mails for adresses on servers that timed out or refused connection etc[16:59:56] <tuxick> just no tempfails :)[17:00:12] <glphvgacs> Dominian: i think it was enclosed before[17:00:33] <glphvgacs> Dominian: in any case i just tried with enclosed again and it's a no-go[17:01:42] *** bkfitz has quit IRC[17:03:20] <tuxick> also extremely hard to find clues about this, because usually it'd be assp or postfix doing the greylisting :)[17:03:34] *** geek_cl_ has joined #postfix[17:03:53] <glphvgacs> Dominian: brb[17:03:55] *** glphvgacs has quit IRC[17:03:56] *** kiri has quit IRC[17:04:18] *** kiri has joined #postfix[17:05:02] *** shinao1 has joined #postfix[17:14:33] *** wdp has quit IRC[17:14:39] *** bkfitz has joined #postfix[17:18:17] *** [diablo] has quit IRC[17:23:37] *** gpkfr has joined #postfix[17:28:42] *** gpkfr has quit IRC[17:32:57] *** jarif has joined #postfix[17:34:19] *** MattJ100 is now known as MattJ[17:35:27] *** Jarris has quit IRC[17:36:27] *** bkfitz has quit IRC[17:41:17] *** geek_cl_ has quit IRC[17:42:35] *** wald00_ has joined #postfix[17:47:21] *** robinho86 has quit IRC[17:49:06] *** bkfitz has joined #postfix[17:49:53] *** war4head has quit IRC[17:49:56] *** warhead has joined #postfix[17:52:24] <twobithacker> Is it safe to have the mail spool mounted with noatime? I can't remember if Postfix relies on atime at all.[17:55:04] <Dominian> not sure[17:55:08] <Dominian> adaptr: ping ^^^^[17:55:22] <Dominian> he might know or lunaphyte_ or possibly rob0 if he wakes up[17:55:48] <sysmonk> well[17:55:51] <sysmonk> it will work with noatime[17:55:54] <sysmonk> but brakes some behaiviour[17:56:10] <twobithacker> looks like fast-flush is affected, but that's not an issue for my installation[17:56:20] <sysmonk> if you don't have a lot of mails flowing through your postfix, then it doesn't matter to you[17:56:41] <Dominian> so busier mail servers would definitely need noatime?[17:56:44] <twobithacker> The one I'm looking at now has a lot of mail and is disk i/o bound[17:56:55] <sysmonk> Dominian: depends :)[17:56:59] <Dominian> ok[17:57:31] <sysmonk> Dominian: it brakes fast flush, which might queue up large amount of mails on busier servers if used with noatime[17:57:57] <Dominian> ok[17:58:06] <Dominian> Good info.[17:59:05] <thumbs> brakes?[18:01:21] *** UQlev has joined #postfix[18:01:40] <Dominian> hehe[18:01:43] <Dominian> I didn't even notice[18:02:36] * thumbs brakes harder[18:03:13] <jelly> breaks thumbs?[18:04:09] <jelly> on the other hand, fast flush is not used by default at all[18:04:37] *** Praise- has joined #postfix[18:04:54] *** famicom` has joined #postfix[18:05:53] *** kieppie1 has joined #postfix[18:06:18] *** khem__ has joined #postfix[18:06:25] *** robinho86 has joined #postfix[18:06:30] *** master_o1_master has joined #postfix[18:06:44] *** diabel- has joined #postfix[18:11:18] *** famicom has quit IRC[18:11:19] *** ffiore has quit IRC[18:11:23] *** khem_ has quit IRC[18:11:23] *** master_of_master has quit IRC[18:11:25] *** shinao1 has quit IRC[18:11:26] *** diabel has quit IRC[18:11:27] *** Praise has quit IRC[18:11:27] *** kieppie has quit IRC[18:12:04] *** mactimes_ is now known as mactimes[18:18:17] *** shinao1 has joined #postfix[18:23:27] *** [diablo] has joined #postfix[18:23:27] *** [diablo] has joined #postfix[18:30:32] *** rotbeard has quit IRC[18:31:02] *** RayS has joined #postfix[18:36:48] *** kirin` has quit IRC[18:37:29] *** kirin` has joined #postfix[18:42:16] *** Bronze has left #postfix[18:48:09] *** damyan has joined #postfix[18:48:15] *** damyan is now known as Guest26085[19:02:44] *** gu1lle_ has joined #postfix[19:04:25] *** UQlev has quit IRC[19:08:27] *** trusktr has joined #postfix[19:22:17] *** shinao1 has quit IRC[19:22:48] *** shinao1 has joined #postfix[19:46:09] *** Guest26085 is now known as damyan[19:46:28] *** damyan is now known as damyan^[19:48:24] *** toothe has quit IRC[19:52:30] *** plugwash has joined #postfix[19:52:50] <plugwash> can anyone provide hints on debugging why delivery to a program sometimes fails[19:54:08] *** laner has joined #postfix[19:57:20] <rob0> Sure. Read your logs. If Postfix logs show that the delivery took place, then any problems of unexpected behavior are problems with your program/script. Add debugging code to your script.[19:58:52] <plugwash> the problem i've got is that most of the time the delivery is succeeding but occasionally it's failing and neither the bounce message or the log are being very helpful[19:59:06] <plugwash> I wonder if I have a permissions problem, does postfix always do delivery to scripts as the same user?[20:01:16] *** bkfitz has quit IRC[20:02:33] *** wdp has joined #postfix[20:02:34] *** wdp has joined #postfix[20:12:33] *** mactimes is now known as mactimes_[20:12:53] *** kirin` has quit IRC[20:13:46] *** kirin` has joined #postfix[20:16:19] *** leprechau has quit IRC[20:23:05] <plugwash> another thought, will postfix try and deliver to multiple instances of the same command at the same time?[20:24:22] *** wald00_ has quit IRC[20:29:48] <rob0> Postfix is going to be consistent in how it chooses which user executes a command. If you want help with this, pastebin as per /topic, including NON-verbose logs of a successful delivery and a problem one.[20:29:53] *** wald00_ has joined #postfix[20:35:09] <plugwash> http://paste.debian.net/9733/ are the entries from mail.log, not visible in the paste but noticable is that the failures come in blocks which makes me suspect that postfix may be trying to deliver to more than one instance of the command at the same time and that is breaking something[20:39:47] *** plugwash has left #postfix[20:43:24] *** mechanicalduck_ has joined #postfix[20:45:24] *** mechanicalduck has quit IRC[21:01:36] *** m1nish has joined #postfix[21:20:52] *** wald00_ has quit IRC[21:30:40] *** mechanicalduck_ has quit IRC[21:31:24] *** mechanicalduck has joined #postfix[21:40:56] *** kirin` has quit IRC[21:41:08] *** trusktr has quit IRC[21:42:02] *** kirin` has joined #postfix[21:49:49] *** err-or has quit IRC[21:54:37] *** err-or has joined #postfix[21:55:05] *** err-or has quit IRC[21:56:22] *** err-or has joined #postfix[21:59:01] *** mungusta1 has quit IRC[22:03:10] <adaptr> twobithacker: postfix couldn't care less. it just affects performance[22:05:09] *** Section1 has quit IRC[22:05:59] *** mungustas has joined #postfix[22:14:09] *** tmberg has joined #postfix[22:17:15] *** pppingme has quit IRC[22:20:33] *** shinao1 has quit IRC[22:21:13] *** master_of_master has joined #postfix[22:23:30] *** pppingme has joined #postfix[22:24:20] *** RayS has quit IRC[22:24:38] *** master_o1_master has quit IRC[22:26:01] *** Praise- is now known as Praise[22:31:15] *** kieppie1 has left #postfix[22:32:41] *** shinao1 has joined #postfix[22:34:17] *** shinao1 has quit IRC[22:34:19] *** biggimat has quit IRC[22:35:14] *** shinao1 has joined #postfix[22:35:53] <stljim> What would be the best way in postfix to limit email recipients? I'm using a transport_map file but is that the preferred way?[22:36:39] <adaptr> transport_maps has nothing to do with limiting or specifying recipients. it's notorious for not being involved in that in any way whatsoever.[22:36:43] *** shinao1 has quit IRC[22:37:03] <adaptr> if you use local users, local_recipient_maps specifies valid recipients.[22:37:09] <rob0> "limit email recipients" is too inspecific to answer.[22:37:16] <rob0> Limit how?[22:37:31] *** shinao1 has joined #postfix[22:37:34] <adaptr> I would totally reject you[22:37:54] * rob0 is learning to deal with rejection[22:38:19] <adaptr> no, not you personally! just...you know, your email.[22:38:32] <adaptr> damn, so sensitive these neckbeards[22:39:01] *** shinao1 has quit IRC[22:39:22] *** wald00_ has joined #postfix[22:40:22] *** shinao1 has joined #postfix[22:41:05] *** yosafbridge has quit IRC[22:42:03] *** shinao1 has quit IRC[22:42:50] *** shinao1 has joined #postfix[22:43:52] *** yosafbridge has joined #postfix[22:45:37] *** shinao1 has quit IRC[22:47:55] *** shinao1 has joined #postfix[22:48:49] *** bkfitz has joined #postfix[22:52:32] *** shinao1 has quit IRC[22:56:37] *** krislappy is now known as krisfremen[22:59:05] *** grknight has quit IRC[22:59:50] *** UQlev has joined #postfix[23:00:37] <stljim> adaptr Ssrry for the lag. We ahve a number of development web server and the developers don't want 'spuious' emails potentially going out. So I want the server to only relay emails if they match a hash-map (to myself, or another group). So I have a list in transport_maps = hash:/etc/postfix/maps/transport and created a hash[23:01:05] <stljim> oh good lord I need to proof what I type before I hit enter..[23:01:20] *** postfixhelp has joined #postfix[23:02:23] <adaptr> I have no idea what that meant[23:02:39] <adaptr> has rob0 's question been answered yet, by something that is less than 3 lines long ?[23:02:53] <stljim> seriously? Sorry[23:03:18] <rob0> I think it means "nothing goes out unless to a limited list of recipients".[23:03:20] <adaptr> 22:37:15 rob0 . Limit how?[23:03:27] *** postfixhelp has left #postfix[23:03:46] <stljim> Correct[23:03:59] <adaptr> stljim: don't make people guess. stipulate. be exact.[23:04:01] <rob0> !default_transport[23:04:02] <knoba> rob0: "default_transport" : a configuration parameter in the main.cf: The default mail delivery transport for domains that do not match $mydestination, $inet_interfaces, $proxy_interfaces, $virtual_alias_domains, $virtual_mailbox_domains, or $relay_domains. This information can be overruled with the transport(5) table.[23:04:10] <adaptr> WHAT does "limit recipients" MEAN[23:04:26] *** shinao1 has joined #postfix[23:04:28] <rob0> See also error(8) and discard(8) manuals.[23:04:29] *** riceandbeans has joined #postfix[23:04:33] <riceandbeans> does anyone know how to tell postfix to reject relay of an email based on a from header?[23:04:38] <riceandbeans> like if someone sends to my server and says 'from me at gmail dot com' instead of me at mycompany dot com' the email is rejected[23:05:02] <rob0> Mail is generally not routed based on headers.[23:05:05] *** bkfitz has quit IRC[23:05:20] <stljim> Tring to figure how to say theis \[23:05:34] <riceandbeans> rob0: I just want to deny relay for mail that isn't really from my domain[23:05:42] <riceandbeans> in case someone's client is messed up[23:05:47] *** gu1lle_ has quit IRC[23:05:52] <riceandbeans> only allow relay from my domain[23:06:08] <riceandbeans> I tested with swaks and I can mail out to gmail saying I'm me at superman dot com[23:06:12] <riceandbeans> I don't want that to happen[23:06:28] <rob0> reject_unknown_sender on your submission port, maybe also:[23:06:30] <adaptr> riceandbeans: the way you ensure that is tyo enforce authenticated submission.[23:06:35] <rob0> !smtpd_sender_login_maps[23:06:35] <knoba> rob0: "smtpd_sender_login_maps" : a configuration parameter in the main.cf: Optional lookup table with the SASL login names that own sender (MAIL FROM) addresses.[23:06:36] <adaptr> tehre is NO OTHER WAY[23:06:54] <riceandbeans> rob0: I have that, but that ONLY checks if it's a valid DNS entry[23:07:02] <adaptr> ...wut[23:07:13] <riceandbeans> adaptr: I'm not requiring authentication because there are daemons mailing through it[23:07:18] <rob0> err, I mean reject_unlisted_sender[23:07:23] <adaptr> what does that have to do with anything[23:07:42] <riceandbeans> adaptr: I ONLY want to allow *@$mydomain[23:07:52] <adaptr> where ? what ? when ?[23:07:56] <rob0> Also, smtpd(8) restrictions won't affect sendmail(1) submission.[23:08:11] <riceandbeans> I just don't get how to do it and I've read all the docs[23:08:31] <rob0> wow! I haven't gotten that far yet. Congrats![23:08:36] <riceandbeans> rob0: can listed sender be *@$mydomain[23:08:38] *** wald00_ has quit IRC[23:09:24] <rob0> postconf.5.html#reject_unlisted_sender[23:11:37] *** wald00_ has joined #postfix[23:12:14] <riceandbeans> http://serverfault.com/questions/353885/rejecting-unlisted-senders-in-postfix[23:12:38] <adaptr> no, don't point to random bad tutorials. just use the documentation[23:12:54] <riceandbeans> the documentation is very poorly written and missing a lot of data[23:13:14] <thumbs> is it?[23:13:15] <riceandbeans> sorry, but of all the major MTAs, postfix has the worst docs[23:13:24] <rob0> heh[23:13:24] * thumbs chuckles[23:13:32] <adaptr> riceandbeans: well, good luck with that, then.[23:13:47] <riceandbeans> that's why it's so difficult to find answers[23:14:17] <rob0> hmm, I believe I told you some answers.[23:14:18] <adaptr> no, the reason it's apparently "so difficult" is because you don't understand the answers.[23:14:26] <rob0> yes[23:14:54] <rob0> See, you started out with an invalid assumption, that mail routing used message headers.[23:15:26] <rob0> Right from the beginning that indicates that you're weak on prerequisites. I tried to help you with that.[23:21:50] *** aindilis2 has joined #postfix[23:23:04] *** UQlev has quit IRC[23:27:40] <riceandbeans> rob0: sendmail and exim can reject based on who a client asserts it's from very easily so I don't see what I'm missing there[23:29:37] <adaptr> riceandbeans: no they can't.[23:31:17] *** Toerkeium has joined #postfix[23:32:22] * thumbs smiles[23:32:34] <riceandbeans> adaptr: yes they can, I've done it with both[23:32:49] <riceandbeans> in the past week even[23:32:53] <adaptr> and do you have the first glimmering of HOW they achieve that ?[23:33:04] <adaptr> i.e., can you provide technical details to reproduce ?[23:33:11] <riceandbeans> technical no[23:33:19] <thumbs> then you're mistaken.[23:33:25] <adaptr> so.. you couldn't set it up[23:33:35] <riceandbeans> but they're complete products compared to postfix[23:33:45] <adaptr> hahaha. stupid troll is stupid.[23:33:56] <riceandbeans> postfix is several pieces that you have to hook in the right part to[23:34:36] <adaptr> yes, deflect, by all means don't prove the claim you just made.[23:34:56] <adaptr> I think it's very hard to think of any email product that's less "complete" than sendmail.[23:39:23] <riceandbeans> it's more of a one stop shop than postfix[23:39:36] <riceandbeans> postfix was designed as a bunch of moving parts[23:39:44] <riceandbeans> sendmail and exim are one stop shops[23:40:07] <riceandbeans> figuring out which moving piece you need to hit with postfix is half the battle for me[23:40:26] <riceandbeans> the other half is incomplete and poor documentation[23:40:53] <jimpop> wat?[23:41:01] <riceandbeans> I really need to stop picking software based on logos[23:41:01] <adaptr> it's time to put your whoring dollars where your mouth is, riceandbeans[23:41:09] <adaptr> give one instance of poor documentation.[23:41:52] <jimpop> IRC GOLD -> 21:41 < riceandbeans> I really need to stop picking software based on logos[23:42:12] <riceandbeans> http://www.postfix.org/postconf.5.html#smtpd_sender_restrictions[23:43:50] <rob0> !overview[23:43:50] <knoba> rob0: "overview" : Postfix Architecture Overview : http://www.postfix.org/OVERVIEW.html[23:44:43] <adaptr> rob0: yeah, that's darn poor documentation, right there![23:44:50] <adaptr> ...wait, you probably didn't mean tht[23:45:39] <rob0> That was supposed to answer "figuring out which moving piece you need to hit with postfix"[23:58:13] <jimpop> i see the problem. #smtpd_sender_restrictions doesn't have pictures[23:58:35] <adaptr> jimpop++[23:58:48] <jimpop> riceandbeans: there are diagrams on !overview however[23:59:04] <adaptr> where did the old 2.3-era images go ?