December 29, 2018 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
December 29, 2018 [00:06:54] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[00:08:09] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[00:32:32] *** reiffert <reiffert!~foobar@p4FF69668.dip0.t-ipconnect.de> has quit IRC (Disconnected by services)[00:32:47] *** reiffert <reiffert!~foobar@p4FF6956A.dip0.t-ipconnect.de> has joined #postfix[00:37:43] *** landrykid <landrykid!~landrykid@2600:1011:b108:f58f:a18e:8150:b2ad:c57a> has joined #postfix[00:51:47] *** linex <linex!~quassel@58.26.242.250> has quit IRC (Quit: No Ping reply in 180 seconds.)[00:52:32] <landrykid> !welcome[00:52:32] <knoba> landrykid: "welcome" : Welcome to #postfix! If you're new here, or to IRC, first read the channel topic (/topic). It has important instructions on how to ask good questions. You will get more and better help if you follow those instructions. Good Luck![00:52:54] *** linex <linex!~quassel@58.26.242.250> has joined #postfix[00:53:31] *** landrykid <landrykid!~landrykid@2600:1011:b108:f58f:a18e:8150:b2ad:c57a> has quit IRC (Quit: Leaving)[01:21:07] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 240 seconds)[01:42:46] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has joined #postfix[01:44:52] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has quit IRC (Remote host closed the connection)[02:07:54] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[02:09:12] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[02:30:23] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has quit IRC (Quit: shibboleth)[02:36:48] *** DTZUZO <DTZUZO!~DTZUZO@S0106bcd16584b0aa.vs.shawcable.net> has quit IRC (Ping timeout: 272 seconds)[03:19:46] *** nomeed <nomeed!~nomeed@p5B33B2EC.dip0.t-ipconnect.de> has quit IRC (Ping timeout: 246 seconds)[03:21:03] *** |subz3r0| <|subz3r0|!~|subz3r0|@unaffiliated/subz3r0/x-1361105> has quit IRC (Ping timeout: 246 seconds)[03:22:25] *** spammy <spammy!~shawniver@208-70-47-114.bb.hrtc.net> has quit IRC (Quit: shameful programming actions might mean yodeling)[03:22:45] *** nomeed <nomeed!~nomeed@p54A24377.dip0.t-ipconnect.de> has joined #postfix[03:51:46] *** n_1-c_k <n_1-c_k!~nick@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[03:52:14] *** n_1-c_k <n_1-c_k!~nick@2a02:8010:63a6::70> has joined #postfix[03:54:19] *** spammy <spammy!~shawniver@208-70-47-114.bb.hrtc.net> has joined #postfix[03:54:33] *** |subz3r0| <|subz3r0|!~|subz3r0|@unaffiliated/subz3r0/x-1361105> has joined #postfix[04:11:31] *** tenchi4615 <tenchi4615!~tenchi461@2601:484:c300:a789::1bc> has quit IRC (Remote host closed the connection)[04:27:45] *** andylavarre <andylavarre!~andy@mobile-107-107-60-145.mycingular.net> has quit IRC (Remote host closed the connection)[05:47:51] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.allophone.biz> has quit IRC (Quit: Ex-Chat)[05:48:07] *** ncb^ <ncb^!ncb@ip98-186-247-88.mc.at.cox.net> has quit IRC ()[05:49:42] *** jalalsfs_ is now known as jalalsfs[05:57:36] *** qtch <qtch!~qtch@smtp.tarniny.pl> has quit IRC (Ping timeout: 252 seconds)[06:00:31] *** qtch <qtch!~qtch@smtp.tarniny.pl> has joined #postfix[06:50:17] *** chowbok <chowbok!~chowbok@207.181.255.76> has quit IRC (Read error: Connection reset by peer)[06:51:50] *** nphb^ <nphb^!nphb@ip98-186-247-88.mc.at.cox.net> has joined #postfix[06:51:51] *** chowbok <chowbok!~chowbok@207.181.255.76> has joined #postfix[06:59:12] *** qtch <qtch!~qtch@smtp.tarniny.pl> has quit IRC (Ping timeout: 250 seconds)[07:22:23] *** terp <terp!~terp@77.68.214.134> has quit IRC (Ping timeout: 244 seconds)[07:24:12] *** qtch <qtch!~qtch@smtp.tarniny.pl> has joined #postfix[07:24:28] *** terp <terp!~terp@77.68.214.134> has joined #postfix[07:30:47] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has quit IRC (Remote host closed the connection)[07:30:50] *** qtch <qtch!~qtch@smtp.tarniny.pl> has quit IRC (Ping timeout: 250 seconds)[07:32:17] *** qtch <qtch!~qtch@smtp.tarniny.pl> has joined #postfix[07:39:41] *** ih8wndz <ih8wndz!jwpierce3@001.srv.trnkmstr.com> has quit IRC (Ping timeout: 268 seconds)[07:40:21] *** ih8wndz <ih8wndz!jwpierce3@001.srv.trnkmstr.com> has joined #postfix[07:43:48] *** buddy123 <buddy123!~buddy123@mail.yanay.eu> has joined #postfix[08:16:04] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[08:21:55] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[08:23:11] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[08:29:56] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Read error: Connection reset by peer)[08:30:19] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[08:33:14] *** cemotyz09 <cemotyz09!~cemotyz09@cpe-70-121-128-59.satx.res.rr.com> has quit IRC (Ping timeout: 250 seconds)[08:39:43] *** led_dark_1 <led_dark_1!~Thunderbi@hotspot10.rywasoft.net> has quit IRC (Quit: led_dark_1)[08:42:08] *** led_dark_1 <led_dark_1!~Thunderbi@hotspot10.rywasoft.net> has joined #postfix[09:26:54] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[09:28:08] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[09:37:54] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[09:39:07] *** buddy123 <buddy123!~buddy123@mail.yanay.eu> has quit IRC (Quit: Konversation terminated!)[09:39:10] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[10:00:47] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has joined #postfix[10:07:42] *** ujjain <ujjain!~ujjain@unaffiliated/ujjain> has quit IRC (Ping timeout: 250 seconds)[10:09:48] *** ujjain <ujjain!~ujjain@144.76.19.126> has joined #postfix[10:09:48] *** ujjain <ujjain!~ujjain@144.76.19.126> has quit IRC (Changing host)[10:09:48] *** ujjain <ujjain!~ujjain@unaffiliated/ujjain> has joined #postfix[10:28:14] *** rsx <rsx!~rsx@ppp-46-244-241-186.dynamic.mnet-online.de> has joined #postfix[10:36:38] *** jalalsfs <jalalsfs!~jalalsfs@unaffiliated/jalalsfs> has quit IRC (Remote host closed the connection)[10:37:02] *** jalalsfs <jalalsfs!~jalalsfs@unaffiliated/jalalsfs> has joined #postfix[10:54:55] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[10:56:11] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[11:03:04] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[11:04:22] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[11:07:58] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has joined #postfix[11:08:13] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[11:08:23] *** hgnoel1980 <hgnoel1980!~hgnoel198@host81-143-199-121.in-addr.btopenworld.com> has quit IRC (Ping timeout: 245 seconds)[11:09:28] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[11:32:18] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has quit IRC (Quit: inabit. zz.)[11:34:58] *** Olipro_ <Olipro_!~Olipro@6.123.2.81.in-addr.arpa> has joined #postfix[11:34:59] *** Olipro_ <Olipro_!~Olipro@6.123.2.81.in-addr.arpa> has quit IRC (Changing host)[11:34:59] *** Olipro_ <Olipro_!~Olipro@uncyclopedia/pdpc.21for7.olipro> has joined #postfix[11:35:18] *** Olipro <Olipro!~Olipro@uncyclopedia/pdpc.21for7.olipro> has quit IRC (Ping timeout: 252 seconds)[11:35:36] *** Olipro_ is now known as Olipro[11:38:55] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[11:40:12] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[11:41:18] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Read error: Connection reset by peer)[11:49:54] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[11:51:11] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[12:07:05] *** DTZUZO <DTZUZO!~DTZUZO@S0106bcd16584b0aa.vs.shawcable.net> has joined #postfix[12:50:20] *** dimbulb <dimbulb!~sam@indra.vis.nu> has joined #postfix[13:02:03] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[13:03:21] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[13:24:44] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has joined #postfix[13:30:24] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has quit IRC (Ping timeout: 272 seconds)[13:41:14] *** led_dark_1 <led_dark_1!~Thunderbi@hotspot10.rywasoft.net> has quit IRC (Quit: led_dark_1)[13:59:34] *** andylavarre <andylavarre!~andy@mobile-107-107-60-145.mycingular.net> has joined #postfix[14:13:54] *** rob_ <rob_!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has joined #postfix[14:15:44] *** Dessa <Dessa!Dessa@pku74f0o.dip0.t-iqconnect.de> has quit IRC (Changing host)[14:15:44] *** Dessa <Dessa!Dessa@kvirc/staff/Dessa> has joined #postfix[14:25:06] *** rob_ <rob_!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has quit IRC (Ping timeout: 250 seconds)[14:27:09] *** rob_ <rob_!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has joined #postfix[14:42:47] *** rob_ <rob_!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has quit IRC (Ping timeout: 240 seconds)[14:43:45] *** alexandre9099 <alexandre9099!~alexandre@unaffiliated/alexandre9099> has quit IRC (Quit: ZNC 1.7.1 - https://znc.in)[14:55:17] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has quit IRC (Ping timeout: 256 seconds)[15:11:16] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has joined #postfix[15:25:49] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has joined #postfix[15:30:26] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has quit IRC (Ping timeout: 246 seconds)[15:42:29] *** rob_ <rob_!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has joined #postfix[16:14:49] *** hgnoel1980 <hgnoel1980!~hgnoel198@host81-143-199-121.in-addr.btopenworld.com> has joined #postfix[16:18:24] *** n_1-c_k <n_1-c_k!~nick@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[16:18:55] *** n_1-c_k <n_1-c_k!~nick@2a02:8010:63a6::70> has joined #postfix[16:26:13] <Naglfar> hi[16:26:45] <Naglfar> I'm trying to setting up relayhost, using this: https://www.smtp2go.com/setupguide/postfix/[16:27:26] <Naglfar> but this error happend: 550 relay access denied - please authenticate (in reply to RCPT TO command))[16:51:41] *** rob_ <rob_!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has quit IRC (Ping timeout: 268 seconds)[17:08:03] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[17:36:14] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.allophone.biz> has joined #postfix[17:40:06] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 250 seconds)[17:41:00] *** cemotyz09 <cemotyz09!~cemotyz09@cpe-70-121-128-59.satx.res.rr.com> has joined #postfix[17:48:00] <lunaphyte> Naglfar: you'll need to configure authentication then, as the message says[17:48:08] <lunaphyte> read sasl_readme[17:52:54] <Naglfar> I have used this:[17:52:57] <Naglfar> relayhost = [mail.smtp2go.com]:2525[17:53:14] <rob0> !saslclient[17:53:14] <knoba> rob0: "saslclient" : See http://www.postfix.org/SASL_README.html#client_sasl when you need client-side SASL authentication to deliver mail to another server[17:53:16] <Naglfar> smtp_sasl_password_maps = static:username:password[17:53:49] <rob0> hmm, 2525, why not 587 like any other provider?[17:53:52] <lunaphyte> port 2525? yikes, why?[17:54:03] <lunaphyte> that's a bad sign :([17:54:11] <rob0> indeed[17:54:45] <Naglfar> server specified 2525, but 587 fails too[17:55:00] <lunaphyte> i'm not sure what you mean "server specified 2525"[17:55:21] <rob0> !showconfig[17:55:21] <knoba> rob0: "showconfig" : when asked to provide your config, please provide a SINGLE pastebin (see !pastebin) with postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[17:55:59] <rob0> there are NUMEROUS other settings which might prevent your client AUTH from taking place, not merely smtp_sasl_password_maps[17:56:05] <blackflow> apparently "smtp2go" service listens at port 2525[17:56:29] <rob0> if you want help with this, you should have a pastebin as per /topic[18:00:23] <Naglfar> http://paste.opensuse.org/view/raw/0aef2aa0[18:00:56] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has joined #postfix[18:01:03] <lunaphyte> sigh. not following instructions :( also not a good sign[18:02:42] <rob0> !smtp_tls_loglevel[18:02:42] <knoba> rob0: "smtp_tls_loglevel" : Enable additional Postfix smtp(8) client logging of TLS activity, default 0, 1 is a good operational setting. Each logging level also includes the information that is logged at all lower logging levels.[18:02:50] <rob0> set smtp_tls_loglevel=1[18:03:06] <rob0> !tlstest[18:03:06] <knoba> rob0: "tlstest" : see !s_client[18:03:17] <blackflow> lunaphyte: as if not reading suggested meta-documentation shares the cause with not reading proper documentation and having a problem due to that :)[18:03:18] <rob0> !s_client[18:03:18] <knoba> rob0: "s_client" : Starting with OpenSSL 0.9.7, you can test the server-side TLS with the following: openssl s_client -starttls smtp -connect <hostname>:587 (or :25, accordingly).[18:05:55] <rob0> of course lacking LOGS, this is all guessing[18:09:52] <Naglfar> postfix/smtp[1745]: Untrusted TLS connection established to mail.smtp2go.com[45.79.71.155]:587: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)[18:10:47] *** cpm <cpm!~cpm@pdpc/supporter/active/cpm> has joined #postfix[18:11:38] <cpm> hey rob0 you awake[18:11:40] <cpm> ?[18:12:21] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has quit IRC (Ping timeout: 244 seconds)[18:12:44] <cpm> sheesh, , slackers[18:12:50] *** rob <rob!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has joined #postfix[18:13:14] *** rob is now known as Guest42893[18:14:11] <rob0> asleep[18:16:01] <rob0> Naglfar, oh, hah, missing the obvious,[18:16:11] <rob0> !smtp_sasl_auth_enable[18:16:11] <knoba> rob0: "smtp_sasl_auth_enable" : a configuration parameter in the main.cf: Enable SASL authentication in the Postfix SMTP client. By default, the Postfix SMTP client uses no authentication.[18:16:35] <rob0> this is covered in the readme to which I sent you[18:19:27] <cpm> hehehe[18:19:33] <cpm> slugabed[18:19:52] <cpm> hey, I'm drawing an utter blank here. This is because I am senile.[18:20:01] <rob0> ________[18:20:14] <cpm> I need an access map that REJECT's from mydomain.tld at theirdomain dot tld[18:20:57] <cpm> getting a lotta spam that is some-bs-clickbait-mydomain.tld at theirspammydomain dot tld[18:21:23] <rob0> so you want a pcre[18:21:54] <Naglfar> status=sent[18:22:03] <Naglfar> thank you for help[18:22:15] <rob0> /mydomain\.tld\ at theirspammydomain\ dot tld$/ reject you spammy thing[18:22:22] <rob0> yw[18:23:08] <rob0> cpm, note lack of anchor on the beginning of the expression[18:23:09] * cpm bows[18:23:18] *** fatdragon <fatdragon!~fatdragon@cpe-107-184-107-243.socal.res.rr.com> has joined #postfix[18:23:20] <rob0> spammy, sorry to reject you[18:23:25] <cpm> this earns U a cuppacoffee,[18:23:34] <rob0> \o/[18:24:09] <cpm> got yer 'gimme a coffee' account set up yet?[18:25:25] <rob0> someday I'll pass through your area, buy it then[18:28:47] <cpm> k[18:29:58] <spammy> rob0: np lol[18:33:01] *** colinjmatt <colinjmatt!~colinjmat@matthews-co.uk> has quit IRC (Ping timeout: 250 seconds)[18:34:10] *** colinjmatt <colinjmatt!~colinjmat@matthews-co.uk> has joined #postfix[18:35:37] *** nphb^ <nphb^!nphb@ip98-186-247-88.mc.at.cox.net> has quit IRC ()[18:38:07] *** MACscr <MACscr!~MACscr@c-98-215-100-46.hsd1.il.comcast.net> has quit IRC (Ping timeout: 240 seconds)[18:42:10] *** MACscr <MACscr!~MACscr@c-98-215-100-46.hsd1.il.comcast.net> has joined #postfix[18:48:07] *** colinjmatt <colinjmatt!~colinjmat@matthews-co.uk> has quit IRC (Ping timeout: 240 seconds)[18:49:41] *** colinjmatt <colinjmatt!~colinjmat@matthews-co.uk> has joined #postfix[19:05:00] *** match_it <match_it!~giovanni@dynamic-adsl-78-14-154-185.clienti.tiscali.it> has joined #postfix[19:05:29] <match_it> hi all[19:06:58] <match_it> question: I have a server with https with properly installed SSL certs (crt/key etc..) received for free from www.sslforfree.com[19:07:57] <match_it> question is , can I use the same certs for EMAIL server or have I to submit new files for SMTP ?[19:08:28] <lunaphyte> can you? sure. should you? probably not.[19:08:48] <lunaphyte> you rarely need commercial certificates for email[19:09:15] <lunaphyte> only very large providers, without captive audiences, need commercial certficiates[19:09:26] <rob0> TLS certs are not really used in email, except perhaps for MUAs at submission[19:10:00] <lunaphyte> and yes, calling them "ssl certs" is very bad grammar[19:10:05] <match_it> and so do you suggest for selfmade certs or nothing at all ?[19:10:28] <lunaphyte> i suggest private certificates, yes[19:10:33] <rob0> Problem is, a lot of the HTTPS people are expressing their opinions as to how it "should" be in email, but they're usually wrong.[19:11:08] <lunaphyte> in fact, one should never be using commercial certificates unless they absolutely have to - for everything, not just email[19:11:25] <lunaphyte> commercial certificates are much less secure than private certificates[19:12:07] <match_it> rob0, what you suggest then ?[19:13:18] <blackflow> true but they're also more secure than no certificates. and (some? most?) MUAs will check names on submission and/or imap[19:13:40] <lunaphyte> i'm quite certain we're not talking about no certificates...[19:13:59] <lunaphyte> and i'm not sure what problem you think checking names introduces[19:14:06] <rob0> Depends how much you control your users, really, captive audiences as lunaphyte said.[19:14:56] <blackflow> well thing is, self signed certs are in no way more secure unless on the MUA client side you remove all CAs except your own.... which rarely anyone does :)[19:15:07] <lunaphyte> self signed certs?[19:15:13] <rob0> If you have a large and diverse userbase entirely beyond your control, like an ISP or university, you want certs that will verify for their MUA, on yor submission[s] port.[19:15:18] <lunaphyte> no one suggested using self signed certs[19:15:24] * cpm uses certbot[19:15:32] <blackflow> then I misunderstood your "private certificates"?[19:15:40] <lunaphyte> certbot is an abomination :([19:15:52] <cpm> it is, but so is everything else[19:16:03] *** led_dark_1 <led_dark_1!~Thunderbi@46.173.197.56> has joined #postfix[19:16:04] <rob0> cpm is an abomination[19:16:38] <blackflow> I use dehydrated. small, simple and powerful enough for full automation of anything.[19:16:47] <cpm> he is, but so is everyone else[19:16:50] <lunaphyte> dehydrated is better, but still yucky[19:17:08] <lunaphyte> too much overengineering with all of that stuff, unfortunately :([19:17:08] <blackflow> what would you suggest for an ACME client then?[19:17:24] <lunaphyte> eh, not on topic here[19:18:52] *** Inray <Inray!~inray@2a02:587:1817:4100:79f6:7770:e471:61fa> has joined #postfix[19:18:59] *** Inray <Inray!~inray@2a02:587:1817:4100:79f6:7770:e471:61fa> has quit IRC (Client Quit)[19:19:26] <blackflow> match_it: technically you can use exactly the same certificate and key files, if the names they include are the same for your submission connections (as others have said, outside of submission there's little use for them with smtp)[19:19:59] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.allophone.biz> has quit IRC (Remote host closed the connection)[19:20:05] <lunaphyte> yes, that's a recipe for regret[19:20:23] <cpm> it's all big stack of regrets, embrace them![19:20:51] <blackflow> by "that" you mean using same (host)names?[19:20:57] <lunaphyte> yes[19:21:02] <blackflow> no argument there. been bitten by it.[19:21:23] <lunaphyte> and using the same certificate, even with distinct hostnames. also a recipe for regret[19:21:38] <blackflow> how so?[19:22:31] <lunaphyte> attaching multiple disparate hostnames to a single certificate is bad for all of the same reasons as attaching multiple disparate services to a single hostname[19:24:35] *** random_yanek <random_yanek!~random_ya@host-89-230-171-47.dynamic.mm.pl> has quit IRC (Ping timeout: 250 seconds)[19:24:51] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has joined #postfix[19:26:44] *** mikecmpb_ <mikecmpb_!~mikecmpbl@ruby/staff/mikecmpbll> has joined #postfix[19:27:05] * cpm attaches disparate rob0s[19:27:17] <rob0> oh NO[19:27:55] * rob0 struggles to get out of the briefcases[19:28:20] <lunaphyte> oohh, no. BAD joke![19:28:51] <cpm> yes yes! it's working perfectly![19:29:50] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has quit IRC (Ping timeout: 246 seconds)[19:36:46] *** random_yanek <random_yanek!~random_ya@87.116.231.63> has joined #postfix[19:38:51] *** rsx <rsx!~rsx@ppp-46-244-241-186.dynamic.mnet-online.de> has quit IRC (Quit: rsx)[19:50:15] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.allophone.biz> has joined #postfix[19:54:08] *** mikecmpb_ <mikecmpb_!~mikecmpbl@ruby/staff/mikecmpbll> has quit IRC (Quit: inabit. zz.)[20:27:04] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has joined #postfix[20:33:04] *** infernix <infernix!nix@unaffiliated/infernix> has quit IRC (Ping timeout: 264 seconds)[20:45:08] *** led_dark_1 <led_dark_1!~Thunderbi@46.173.197.56> has quit IRC (Quit: led_dark_1)[20:47:55] *** cpm <cpm!~cpm@pdpc/supporter/active/cpm> has quit IRC (Quit: Leaving)[20:50:03] *** Guest42893 <Guest42893!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has quit IRC (Ping timeout: 245 seconds)[20:51:35] *** infernix <infernix!nix@unaffiliated/infernix> has joined #postfix[21:00:35] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has quit IRC (Remote host closed the connection)[21:00:59] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has joined #postfix[21:02:17] *** Reinhilde <Reinhilde!ellenor@unaffiliated/ellenor> has left #postfix ("vote for irc.umbrellix.net, +6697, #lounge - be part of the comeback!")[21:10:51] *** match_it <match_it!~giovanni@dynamic-adsl-78-14-154-185.clienti.tiscali.it> has quit IRC (Quit: Leaving)[21:20:13] *** MACscr <MACscr!~MACscr@c-98-215-100-46.hsd1.il.comcast.net> has quit IRC (Ping timeout: 246 seconds)[21:48:08] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has quit IRC (Remote host closed the connection)[21:48:27] *** Intelo <Intelo!~Intelo@gateway/tor-sasl/intelo> has joined #postfix[22:22:43] *** Dat <Dat!dat@unaffiliated/dat> has joined #postfix[22:22:53] <Dat> is it wise to do inbound dmarc?[22:31:56] *** n_1-c_k <n_1-c_k!~nick@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[22:32:27] *** n_1-c_k <n_1-c_k!~nick@2a02:8010:63a6::70> has joined #postfix[22:32:51] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has joined #postfix[22:33:15] <rob0> I guess by that you mean to enforce sender domains' published DMARC policies, and I would hesitate with that. So much ignorance abounds, so many "p=reject" are published, you might not like what you get.[22:41:16] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[22:42:36] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[22:49:16] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has quit IRC (Quit: inabit. zz.)[22:59:54] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[23:01:09] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[23:09:17] <Dat> rob0: hrmm[23:10:24] <Dat> rob0: so I guess its not a common practice to do dmarc for inbound email[23:10:28] *** hipodilski <hipodilski!~hipo@pc-freak.net> has quit IRC (Ping timeout: 244 seconds)[23:14:47] <spammy> Dat: stupid ppl doing p=reject and not having spf/dkim configured properly I'm guessing, which would effectively tell you to reject their email...[23:16:02] *** rob <rob!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has joined #postfix[23:16:06] <Dat> i already use spf / dkim but was reading up on dmarc seems like a good idea for outbound email but inbound im a little iffy on that[23:16:23] <spammy> I would be as well[23:16:25] *** rob is now known as Guest67453[23:21:19] *** Guest67453 <Guest67453!~rob@5ED0E3DB.cm-7-1d.dynamic.ziggo.nl> has quit IRC (Ping timeout: 244 seconds)[23:24:12] <lunaphyte> it's no different than spf, dkim, etc. checking any of that stuff can be of value, but should only be used as part of a larger scoring system [e.g. a content filter], not unilaterally to reject mail[23:29:00] <spammy> yeah my SA assigns scores these items :)[23:29:22] <spammy> *to these items[23:32:54] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has quit IRC (Remote host closed the connection)[23:34:08] *** Wioxjk <Wioxjk!~poppels@81-235-33-215-no286.tbcn.telia.com> has quit IRC (Ping timeout: 246 seconds)[23:34:10] *** i1nfusion <i1nfusion!~i1nfusion@46.101.134.251> has joined #postfix[23:36:52] *** Diemuzi <Diemuzi!~IceChat9@unaffiliated/diemuzi> has joined #postfix[23:46:40] <Dat> hrmm[23:47:34] *** Wioxjk <Wioxjk!~poppels@81-235-33-215-no286.tbcn.telia.com> has joined #postfix[23:50:12] *** zapata <zapata!~zapata@2a02:b18:581:10:e59f:6909:732a:a88f> has joined #postfix[23:52:07] *** alexandre9099 <alexandre9099!~alexandre@unaffiliated/alexandre9099> has joined #postfix[23:53:02] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.allophone.biz> has quit IRC (Quit: Ex-Chat)