January 7, 2020 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
January 7, 2020 [00:09:09] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[00:10:27] *** [NoClan]GoAway <[NoClan]GoAway!~NoClan@195.138.249.5> has quit IRC (Ping timeout: 240 seconds)[00:14:09] *** plantroon <plantroon!~plantroon@91.236.69.232> has quit IRC (Ping timeout: 246 seconds)[00:16:29] *** plantroon <plantroon!~plantroon@91.236.69.232> has joined #postfix[00:33:58] *** [NoClan]GoAway <[NoClan]GoAway!~NoClan@5.79.98.51> has joined #postfix[00:42:29] <pj> blaster: I haven't had issues with Linode, but I can also recommend Vultr, I have heard good things about them.[00:42:30] *** snickers <snickers!~textual@83-145-136-211.tkk.net.pl> has quit IRC (Quit: My MacBook has gone to sleep. ZZZzzz…)[00:43:29] <pj> and yeah, DO is known to be abused by spammers, so you are probably getting blocked more often than you think, just not always with such a blatant message.[00:45:19] <pj> anyways, if you don't want to migrate your entire system you can always just set up a relayhost.[01:01:03] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has joined #postfix[01:13:03] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has quit IRC (Quit: shibboleth)[01:19:45] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[01:20:24] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[01:32:53] *** joules <joules!~lucifurba@pdpc/supporter/active/joulez> has joined #postfix[02:06:04] <blaster> pj, yes that seems to be the route i'm going. thanks![02:10:08] *** echoSMILE <echoSMILE!~censured@unaffiliated/echosmile> has quit IRC (Ping timeout: 268 seconds)[02:16:18] *** Bebef <Bebef!sbreit@phobos.bebef.de> has quit IRC (Write error: Connection reset by peer)[02:17:36] *** Bebef <Bebef!sbreit@phobos.bebef.de> has joined #postfix[02:41:57] *** davispuh <davispuh!~quassel@95.68.75.155> has quit IRC (Ping timeout: 265 seconds)[02:44:09] *** davispuh <davispuh!~quassel@95.68.75.155> has joined #postfix[02:48:27] *** davispuh <davispuh!~quassel@95.68.75.155> has quit IRC (Client Quit)[02:52:44] *** davispuh <davispuh!~quassel@95.68.75.155> has joined #postfix[03:04:52] *** nyov is now known as Guest8963[03:04:52] *** Guest8963 <Guest8963!~nyov@unaffiliated/nyov> has quit IRC (Killed (hitchcock.freenode.net (Nickname regained by services)))[03:05:00] *** nyov <nyov!~nyov@unaffiliated/nyov> has joined #postfix[03:20:52] *** davispuh <davispuh!~quassel@95.68.75.155> has quit IRC (Quit: http://quassel-irc.org - Chat comfortably. Anywhere.)[03:24:30] *** davispuh <davispuh!~quassel@95.68.75.155> has joined #postfix[03:28:26] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 240 seconds)[03:45:15] *** johnny56 <johnny56!johnny56@gateway/vpn/protonvpn/johnny56> has quit IRC (Ping timeout: 240 seconds)[03:46:51] *** echoSMILE <echoSMILE!~censured@unaffiliated/echosmile> has joined #postfix[03:50:59] *** johnny56 <johnny56!johnny56@gateway/vpn/protonvpn/johnny56> has joined #postfix[03:55:48] *** johnny56 <johnny56!johnny56@gateway/vpn/protonvpn/johnny56> has quit IRC (Read error: Connection reset by peer)[04:00:12] *** davispuh <davispuh!~quassel@95.68.75.155> has quit IRC (Quit: http://quassel-irc.org - Chat comfortably. Anywhere.)[04:02:34] *** CarlenWhite <CarlenWhite!~CarlenWhi@76.sub-174-231-139.myvzw.com> has quit IRC (Ping timeout: 258 seconds)[04:02:58] *** johnny56 <johnny56!johnny56@gateway/vpn/protonvpn/johnny56> has joined #postfix[04:07:37] *** CarlenWhite <CarlenWhite!~CarlenWhi@175.sub-174-241-132.myvzw.com> has joined #postfix[04:16:14] *** netz <netz!netz@butt.boutique> has quit IRC (Quit: ZNC - https://znc.in)[04:56:02] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has quit IRC (Quit: Ex-Chat)[04:58:01] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has quit IRC (Quit: Leaving)[05:01:23] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has joined #postfix[05:41:40] <tyzoid> Hey, I'm having some trouble getting postfix to talk to mysql anymore[05:41:55] <tyzoid> SSL/TLS handshake failures when using 127.0.0.1, and it refuses to connect to the socket[05:42:36] <tyzoid> !showconfig[05:42:37] <knoba> tyzoid: when asked to provide your config, please provide a SINGLE pastebin (see !pastebin) with postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[05:43:46] <tyzoid> postconf -nf: https://paste.ubuntu.com/p/VZy7YxtvJr/[05:44:21] <tyzoid> postconf -Mf: https://paste.ubuntu.com/p/knXfqcW6cz/[05:45:00] <tyzoid> Jan 7 04:33:29 mail postfix/trivial-rewrite[21590]: warning: connect to mysql server unix:/var/run/mysqld/mysqld.sock: Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)[05:45:00] <tyzoid> Jan 7 04:33:29 mail postfix/trivial-rewrite[21590]: warning: mysql:/etc/postfix/mysql/transport-map.cf lookup error for "*"[05:45:39] <tyzoid> Not really sure where to look next.. the socket seems like it's working fine, and I can use my mysql client to connect with the user/pass that's in the mysql .cf files[05:46:55] *** Corey <Corey!~Corey@freenode/staff-emeritus/Corey> has joined #postfix[05:46:56] <Corey> Hello.[05:47:06] <Corey> I RETURN![05:49:13] <thumbs> OH NO[05:49:18] <tyzoid> lol[05:49:23] <thumbs> quick, ban Corey.[05:50:04] <thumbs> tyzoid: is this a chroot?[05:50:31] <tyzoid> ubuntu 16.04 within lxc, but the whole ubuntu system is within the container[05:50:47] <thumbs> blargh[05:51:08] <Corey> I saw something in email today that I can't for the life of me figure out, though it's not a Postfix issue by a landslide.[05:51:12] <tyzoid> I should add - it was working back in november, but then I had a drive fail in the zfs root pool, and I only recently brought the server back up[05:51:45] <thumbs> Corey: do I get free AWS credits if I help?[05:51:59] <Corey> You think they let me give those out!?[05:52:12] <thumbs> Corey: yes. I asked around.[05:53:05] <Corey> I sent a newsletter out today. It went to 16,570 recipients. reply-to was set to my email address. For the first time in history I received no autoresponder traffic. Normally I get a couple hundred of those.[05:53:09] <Corey> And it is driving me mad.[05:54:09] <thumbs> everyone is back from vacation?[05:55:11] <lunaphyte> tyzoid: does postmap -q work?[05:55:51] <thumbs> Corey: do you still host your own server?[05:55:59] <tyzoid> lunaphyte: postmap -q requires an argument?[05:56:07] <Corey> thumbs: Yeah, the odds of nobody having gotten fired and firing off a "please email MYOLDBOSS at domain dot com" is... small.[05:56:26] <Corey> A bunch of people replied to me, and that was fine.[05:56:37] <Corey> I'm really at a loss.[05:56:38] <lunaphyte> postmap -q requires reading the documentation and running it as per[05:57:02] <tyzoid> lunaphyte: I'm aware, but I'm not sure what we're trying to do with it[05:57:10] <tyzoid> I've got the manpage open atm[05:57:15] <tyzoid> but not sure what we're doing[05:57:27] <lunaphyte> test your lookup map that is failing[05:57:31] <tyzoid> are we trying to use postmap to simulate a mysql lookup?[05:58:14] <lunaphyte> simulate? no. perform, as postfix would[05:58:39] <thumbs> Corey: FWIW, it's odd. Even when I had a 350 users newsletter, I would see auto-responders.[05:58:50] <Corey> Right?! Every single week.[05:58:55] <Corey> Since I had 500 subscribers.[06:01:15] <thumbs> Corey: poke rob0 about it. With a very sharp stick[06:02:32] <Corey> Okay, this week there was a Precedence: Bulk header that came from somewhere.[06:02:44] <tyzoid> lunaphyte: Seems like it's working to me... https://paste.ubuntu.com/p/m6DkXSnKwd/[06:03:49] <lunaphyte> you're testing virtual-alias-maps.cf, rather than the file the error you shared references? why?[06:04:15] *** jerlique <jerlique!~stavros@staffmail.esc.net.au> has joined #postfix[06:04:37] <tyzoid> I flipped back to 127.0.0.1. I can test again attempting to hit the socket instead, but the error with 127.0.0.1 is on virtual-alias-maps.cf[06:04:37] <tyzoid> Jan 7 04:59:18 mail postfix/trivial-rewrite[729]: warning: virtual_alias_domains: mysql:/etc/postfix/mysql/virtual-alias-maps.cf: table lookup problem[06:05:43] <tyzoid> Full error: https://paste.ubuntu.com/p/kGhpygtC7K/[06:07:52] <Corey> Formatting issue with the map.[06:08:08] <Corey> Either what it's looking for isn't there, or the format of the table is something that broke the parser.[06:09:50] <tyzoid> Corey: Even though it's working with postmap?[06:10:27] <tyzoid> The logs are showing that it's a ssl/tls issue connecting to localhost for mysql[06:10:31] <tyzoid> mysql logs show handshake failures[06:11:24] <tyzoid> You hopped in after I had pasted my logs, but here's the logs again postconf -nf: https://paste.ubuntu.com/p/VZy7YxtvJr/ //// postconf -Mf: https://paste.ubuntu.com/p/knXfqcW6cz/[06:15:16] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has quit IRC (Quit: led_dark_1)[06:20:18] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[06:48:59] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has quit IRC (Quit: Leaving)[06:51:37] <tyzoid> thumbs: I think I misunderstood what you were originally asking - all the services in master.cf are set to chroot, yes[06:59:42] *** Ner0Zer0 <Ner0Zer0!~Ner0Zer0@87.253.63.54> has joined #postfix[07:06:08] *** ghoti <ghoti!~paul@dhcp-108-168-13-54.cable.user.start.ca> has quit IRC (Ping timeout: 265 seconds)[07:07:33] <tyzoid> but I don't think it explains why it's trying to connect to mysql with tls[07:10:41] *** DocMAX <DocMAX!~DocMAX@x4d08f33d.dyn.telefonica.de> has quit IRC (Ping timeout: 265 seconds)[07:11:11] *** DocMAX <DocMAX!~DocMAX@x4d01f9c3.dyn.telefonica.de> has joined #postfix[07:11:28] *** ghoti <ghoti!~paul@dhcp-108-168-13-54.cable.user.start.ca> has joined #postfix[07:22:13] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Ping timeout: 260 seconds)[07:30:59] *** ghoti <ghoti!~paul@dhcp-108-168-13-54.cable.user.start.ca> has quit IRC (Ping timeout: 265 seconds)[07:37:34] <tyzoid> Finally got it delivering by force disabling ssl in mysql[07:37:37] <tyzoid> really weird though[08:02:54] *** samy1028a <samy1028a!~samy1028c@mx.10.acs.entrustedmail.net> has joined #postfix[08:04:23] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has quit IRC (Ping timeout: 240 seconds)[08:05:30] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has joined #postfix[08:06:23] *** samy1028 <samy1028!~samy1028c@mx.10.acs.entrustedmail.net> has quit IRC (Ping timeout: 268 seconds)[08:07:32] *** lilmike <lilmike!~server@mtserver.mwtd.net> has quit IRC (Quit: ZNC 1.7.5 - https://znc.in)[08:08:02] *** lilmike <lilmike!~server@mtserver.mwtd.net> has joined #postfix[08:16:21] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-vxpubizgfvaclowm> has quit IRC (Read error: Connection reset by peer)[08:17:06] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-spdloedvposkmrmy> has joined #postfix[08:19:33] *** Noti <Noti!~steffan@185.2.243.3> has joined #postfix[08:27:29] *** ghoti <ghoti!~paul@dhcp-108-168-13-54.cable.user.start.ca> has joined #postfix[08:37:25] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[08:43:37] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Ping timeout: 260 seconds)[08:46:23] *** samy1028b <samy1028b!~samy1028c@mx.10.acs.entrustedmail.net> has joined #postfix[08:48:56] *** echoSMILE <echoSMILE!~censured@unaffiliated/echosmile> has quit IRC (Ping timeout: 268 seconds)[08:49:41] *** samy1028a <samy1028a!~samy1028c@mx.10.acs.entrustedmail.net> has quit IRC (Ping timeout: 258 seconds)[09:11:25] *** uebera|| <uebera||!ueberall_l@unaffiliated/ueberall> has quit IRC (Read error: Connection reset by peer)[09:12:25] *** uebera|| <uebera||!ueberall_l@unaffiliated/ueberall> has joined #postfix[09:39:03] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[09:39:35] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[09:44:47] *** Ner0Zer0 <Ner0Zer0!~Ner0Zer0@87.253.63.54> has quit IRC (Quit: Leaving)[09:46:12] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[09:51:41] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Quit: ]SiB[)[09:52:14] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[09:53:07] *** tridde <tridde!~trident@paranoia.trisec.se> has quit IRC (Ping timeout: 250 seconds)[09:55:13] *** trident <trident!~trident@paranoia.trisec.se> has joined #postfix[10:06:21] *** netz <netz!netz@butt.boutique> has joined #postfix[10:12:55] *** stenrose <stenrose!~martin@martin.ilait.se> has joined #postfix[10:16:08] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-spdloedvposkmrmy> has quit IRC (Read error: Connection reset by peer)[10:21:18] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-xmwmrgbetyezyjla> has joined #postfix[10:22:35] *** stenrose <stenrose!~martin@martin.ilait.se> has quit IRC (Quit: Konversation terminated!)[10:23:01] *** stenrose <stenrose!~martin@martin.ilait.se> has joined #postfix[10:23:50] *** stenrose <stenrose!~martin@martin.ilait.se> has quit IRC (Remote host closed the connection)[10:25:12] *** stenrose <stenrose!~martin@martin.ilait.se> has joined #postfix[11:00:26] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[11:08:47] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Read error: Connection reset by peer)[11:09:04] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[11:27:49] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Ping timeout: 265 seconds)[11:30:50] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has joined #postfix[11:40:00] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has joined #postfix[11:44:23] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-xmwmrgbetyezyjla> has quit IRC (Read error: Connection reset by peer)[11:44:52] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-amsbkrthahcesekl> has joined #postfix[11:53:29] *** kurkale6ka <kurkale6ka!~kurkale6k@62.232.85.2> has joined #postfix[12:01:19] <f3ew> Corey: do you have access to the mailserver logs?[12:01:32] *** amospalla <amospalla!~amospalla@unaffiliated/amospalla> has joined #postfix[12:14:02] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has quit IRC (Quit: neo4)[12:28:27] *** section1 <section1!~section1@178.33.109.106> has joined #postfix[12:44:11] *** kurkale6ka <kurkale6ka!~kurkale6k@62.232.85.2> has quit IRC (Ping timeout: 265 seconds)[12:56:33] *** Gaaab <Gaaab!~Gaaab@94.239.113.89> has joined #postfix[13:15:55] *** robinho86 <robinho86!~robson@191.35.224.149> has joined #postfix[13:16:01] *** robinho86 <robinho86!~robson@191.35.224.149> has quit IRC (Max SendQ exceeded)[13:16:54] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[13:21:26] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Client Quit)[13:21:52] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[13:22:38] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Client Quit)[13:25:42] *** robinho86 <robinho86!~robson@191.35.224.149> has joined #postfix[13:25:57] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has joined #postfix[13:48:26] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[13:48:46] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[13:50:43] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[13:57:37] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Quit: WeeChat 2.6)[14:28:34] *** phenom <phenom!~primus@unaffiliated/phenom> has quit IRC (Excess Flood)[14:29:27] *** Gaaab <Gaaab!~Gaaab@94.239.113.89> has quit IRC (Remote host closed the connection)[14:30:01] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[14:30:46] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Client Quit)[14:30:57] *** phenom <phenom!~primus@unaffiliated/phenom> has joined #postfix[14:33:01] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[14:34:29] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Client Quit)[14:34:51] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[14:52:24] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has quit IRC (Quit: neo4)[14:55:22] <jerlique> does virtual_transport negate the need for mailbox_command ?[14:58:19] <rob0> That question makes no sense, and the reason why not is explained in:[14:58:22] <lunaphyte> no[14:58:25] <rob0> !address_classes[14:58:25] <knoba> rob0: http://www.postfix.org/ADDRESS_CLASS_README.html describes how Postfix deals with different classes of addresses: local, relay, virtual alias, virtual mailbox, and Internet.[14:58:40] <lunaphyte> they are for two different address classes[14:59:28] <lunaphyte> further, each of those two address classes have their own transport setting: virtual_transport and local_transport[15:00:02] <lunaphyte> i'd suggest just asking whatever the actual question is. e.g. why is it that you're asking this?[15:11:58] *** patdk-lap <patdk-lap!~patrickdk@208.95.164.6> has quit IRC (Remote host closed the connection)[15:12:40] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has joined #postfix[15:16:46] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has joined #postfix[15:16:55] *** patdk-lap <patdk-lap!~patrickdk@208.95.164.6> has joined #postfix[15:19:15] *** eelstrebor <eelstrebor!~eelstrebo@216.75.116.100> has joined #postfix[15:20:32] *** eelstrebor <eelstrebor!~eelstrebo@216.75.116.100> has quit IRC (Remote host closed the connection)[15:36:41] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-amsbkrthahcesekl> has quit IRC (Read error: Connection reset by peer)[15:36:57] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-zksttwstlfxostvc> has joined #postfix[15:56:56] *** joules <joules!~lucifurba@pdpc/supporter/active/joulez> has quit IRC (Read error: Connection reset by peer)[16:08:36] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has quit IRC (Quit: neo4)[16:10:25] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-zksttwstlfxostvc> has quit IRC (Read error: Connection reset by peer)[16:15:39] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-sqstseonmyhupldk> has joined #postfix[16:36:05] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[16:41:48] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Remote host closed the connection)[16:44:17] *** netz <netz!netz@butt.boutique> has quit IRC (Ping timeout: 260 seconds)[16:45:24] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Ping timeout: 258 seconds)[16:48:21] *** netz <netz!netz@butt.boutique> has joined #postfix[16:53:04] <jerlique> smtpd_relay_restrictions = ${{$compatibility_level} < {1} ? {} : {permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination}}[16:53:04] <jerlique> is my undetrsading right. if compat leve = 2 smtpd_relay_restrictions = , but its its compat_level ia <1 , smtpd_relay_restrictions= permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination[16:53:04] <jerlique> is this right?[16:53:37] *** tds <tds!~tds@lounge.srv.home.timstallard.me.uk> has quit IRC (Quit: Ping timeout (120 seconds))[16:53:50] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has quit IRC (Quit: shibboleth)[16:54:11] *** tds <tds!~tds@lounge.srv.home.timstallard.me.uk> has joined #postfix[16:58:54] <lunaphyte> what the heck?[17:00:39] <lunaphyte> jerlique: i'm not sure what you're asking. leave compatibility_level set to its default, and set your various parameters as appropriate[17:01:09] <jerlique> I am leaving it to default[17:01:44] <jerlique> Im just trying to understand the value of smtpd_relay_restriction as per my question[17:02:02] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has joined #postfix[17:02:48] <jerlique> this is the default value via postconf "smtpd_relay_restrictions = ${{$compatibility_level} < {1} ? {} : {permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination}}"[17:04:16] <lunaphyte> i see[17:04:41] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has joined #postfix[17:05:07] <lunaphyte> see man 5 postconf for documentation on how that works[17:05:20] <lunaphyte> "A parameter value may refer to other parameters"[17:05:20] *** Noti <Noti!~steffan@185.2.243.3> has quit IRC (Quit: Konversation terminated!)[17:05:42] *** gu1lle_ <gu1lle_!~Thunderbi@201.216.253.75> has joined #postfix[17:07:34] <jerlique> is the {} the true or false result?[17:09:16] <lunaphyte> what does the documentation say?[17:10:06] <jerlique> i dont see the explanation in postconf[17:10:24] <lunaphyte> [11.05.19] lunaphyte: "A parameter value may refer to other parameters"[17:10:29] <lunaphyte> is the section describing this[17:15:15] <jerlique> this part? The expression "${name?{value1}:{value2}}" is replaced with "value1" when "$name" is non-empty,[17:15:15] <jerlique> does this mean non-empty == true[17:15:38] <lunaphyte> i'm not sure what you mean by "true"[17:17:12] <jerlique> true as in when ($compatibility_level =2 ) so $compatibility_level > 1 === true[17:23:31] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has joined #postfix[17:37:28] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has joined #postfix[17:37:44] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[17:39:05] <lunaphyte> that's a good question. the documentation for ${name?{value1}:{value2}} references "empty" and "non-empty". it doesn't seem to discuss what potential outcomes of the following relational expression documentation correlate to empty or non empty[17:39:17] <lunaphyte> at least not to my perception[17:41:59] <lunaphyte> obviously one can extrapolate the behavior with some testing, but if the documentation could be clearer, there might be some interest in that[17:42:24] *** kurkale61 <kurkale61!~kurkale6k@62.232.85.2> has joined #postfix[17:44:37] *** ttpearso <ttpearso!~ttpearso@ns1.webmodule.org> has quit IRC (Read error: Connection reset by peer)[17:45:12] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Ping timeout: 258 seconds)[17:46:10] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[17:48:43] *** kurkale61 <kurkale61!~kurkale6k@62.232.85.2> has quit IRC (Ping timeout: 260 seconds)[17:51:05] <jerlique> I have tested and can confirm if the expression is true the 2nd value (permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination}) is seleted, if its false the null {} is selected[17:52:55] *** kurkale61 <kurkale61!~kurkale6k@62.232.85.2> has joined #postfix[17:55:27] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Ping timeout: 260 seconds)[17:56:57] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[17:56:57] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[17:57:57] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[17:59:19] *** kurkale61 <kurkale61!~kurkale6k@62.232.85.2> has quit IRC (Ping timeout: 265 seconds)[18:02:10] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has quit IRC (Quit: Leaving)[18:02:21] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[18:05:39] <rob0> smtpd_relay_restrictions was introduced with Postfix 2.10. Prior to that the function of controlling relay was done in smtpd_recipient_restrictions.[18:11:01] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[18:14:31] *** netz <netz!netz@butt.boutique> has quit IRC (Read error: Connection reset by peer)[18:14:44] *** netz <netz!netz@butt.boutique> has joined #postfix[18:15:48] <jerlique> rob0: yes, and im using it "smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination", but I keep getting relay denied, even though i am using auth to send the email[18:18:40] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has quit IRC (Remote host closed the connection)[18:19:03] <rob0> I use "smtpd_relay_restrictions = reject_unauth_destination" on port 25, no AUTH is offered nor accepted.[18:19:56] <rob0> For submission/submissions I use " -o smtpd_relay_restrictions=permit_sasl_authenticated,reject_unauth_destination".[18:22:34] <immae> rob0: is it usual to need a reject_unauth_destination for submission? I have a reject there[18:23:13] <immae> (I don’t expect anyone not logged via sasl to push anything to a submission port)[18:23:46] <jerlique> rob0: so how do you relay?[18:24:05] <rob0> oh, sorry, you're right, I was being lazy and copy/pasted reject_unauth_destination :)[18:24:53] <immae> ok :)[18:26:03] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has quit IRC (Ping timeout: 260 seconds)[18:26:24] <rob0> jerlique, can you ask a more specific question? For submission/submissions I have permit_sasl_authenticated. That's how I relay.[18:27:21] <jerlique> My problem is I cannot relay. Im not using submission, but standard 25 with starttls[18:27:32] <rob0> bad idea[18:28:05] <rob0> but sure, if you do a bad idea "right", it will work[18:28:31] <immae> jerlique: normally the idea is to have 25 for "external host to give you your e-mails", and 587 (submission) for "user to submit e-mails they want to send"[18:28:43] <immae> merging both is tricky and may lead to unexpected holes[18:29:49] <lunaphyte> yeah, just don't do it[18:29:52] <lunaphyte> there's no reason to[18:30:11] <rob0> BTW "standard 25" is for mail exchange and NOT for submission. This is new, like about 20 years old.[18:30:15] <jerlique> this is not a possible option.[18:30:46] <jerlique> we have too many users using port 25 with startls[18:31:03] <immae> If you really want to do that, you should check that: the client that you use is actually using port 25, and that you have something like `permit_sasl_authenticated,defer_unauth_destination` in smtpd_relay_restrictions, and that you have no further smtpd_foo_restrictions that will make the e-mail rejected[18:31:46] <rob0> in that case I'd move mail exchange to another IP address.[18:32:02] <rob0> immae++[18:32:06] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Quit: WeeChat 2.6)[18:32:57] <lunaphyte> not sure what you mean not possible[18:33:07] <lunaphyte> it's definitely possible. it's done all the time[18:33:24] <lunaphyte> what it might not be is easy, which of course i'm sure we can all appreciate.[18:33:32] <jerlique> thats right[18:33:34] <immae> (and if I may convince you jerlique: I made the switch recently too on my domains which initially had submission on 25 - due to misunderstanding of my young self. it was not that hard to migrate my users)[18:34:24] <jerlique> whats the problem?[18:34:34] <lunaphyte> set up proper submission, and begin using it. migrate users to it, perhaps over time. it may take some time, but that's ok[18:35:16] <lunaphyte> anyway, in the mean time, yes, just have proper settings for smtp_relay_restrictions and smtp_recipient_restrictions[18:35:53] * rob0 pops lunaphyte upside the head with a d[18:36:29] <lunaphyte> oopsies![18:36:44] <lunaphyte> smtpd_relay_restrictions and smtpd_recipient_restrictions[18:37:03] <immae> jerlique: the problem with mixing smtp and submission is possible unseen holes. I gave two hints as to what you should look at if you want ot merge them anyway: smtpd_relay_restrictions=permit_sasl_authenticated,defer_unauth_destination and other restrictions may apply that you have to fix (grep for "restrictions" in postconf)[18:37:46] <jerlique> I think my settings a "propper", postfix doesnt ;)[18:45:59] <jerlique> smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination[18:45:59] <jerlique> smtpd_recipient_restrictions = reject_unauth_destination check_policy_service unix:private/quota-status[18:45:59] <jerlique> taken from https://workaround.org/ispmail/buster/quotas/[18:48:15] <rob0> and it sounds like you might have gotten an error, but we didn't see what it was[18:49:11] <rob0> syntax looks okay to me, unless of course it was not![18:51:48] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has joined #postfix[18:52:05] <jerlique> https://pastebin.com/xWJLUHLV[18:53:17] <rob0> you don't need verbose logs[18:54:21] <rob0> !relay_denied[18:54:21] <knoba> rob0: NOQUEUE: reject: RCPT from CLIENT_HOST[CLIENT_IP]: 554 5.7.1 <RECIPIENT@RCPT_DOMAIN>: Relay access denied; from=<SENDER@SENDER_DOMAIN> to=<RECIPIENT@RCPT_DOMAIN> proto=ESMTP helo=<HELO>: This typically means that CLIENT_IP is not in mynetworks (and did not AUTH), and that RCPT_DOMAIN was not recognized as one of this Postfix's domains (not listed in mydestination, relay_domains or virtual_*_domains).[18:54:41] <jerlique> client ip shouldnt need to me in mynetworks[18:54:41] <immae> jerlique: `smtpd_recipient_restrictions = reject_unauth_destination (...)` -> you’re saying "any unknown destination (gmail is unknown to you) is refused"[18:54:57] <jerlique> mmm gotya[18:55:04] <rob0> ticket.esc.net.au[210.8.168.2] is not in mynetworks and did not AUTH[18:55:43] <rob0> gmail.com is not one of your domains (good!)[18:55:58] <rob0> 17:54 < jerlique> client ip shouldnt need to me in mynetworks[18:56:11] <rob0> how do you figure this?[18:56:47] <rob0> If you are not in mynetworks and do not AUTH, you should not ever be allowed to relay.[18:58:01] <immae> (Hmm I assumed the log started after authentication since it was in initial claims that he was authenticated, but yes that could be a thing too)[18:58:31] <rob0> another reason why NON-verbose logs are a good idea[19:00:54] <jerlique> rob0: client ip should be any ip address as permit_sasl_authenticated takes care of it[19:02:03] <immae> jerlique: there you’ll touch the issue with merging 25 and 587. What you say is not true if somone from outside wants to send you an e-mail[19:02:17] <rob0> yes, if you AUTH ... you did not show that AUTH occurred[19:02:37] <rob0> try again without verbose logging[19:03:19] <anexit> Howdy I would like to setup a milter using postfix and would like to send trialed email to Office365. Can someone point me into the right direction so I can make this happen? In theory I would like to have the email hit our mitler and then postfix would ship that email off to office 365[19:03:21] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has quit IRC (Remote host closed the connection)[19:03:24] <rob0> also, a full showconfig won't hurt,[19:03:29] <rob0> !showconfig[19:03:29] <knoba> rob0: when asked to provide your config, please provide a SINGLE pastebin (see !pastebin) with postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[19:09:32] <anexit> perhaps I'm looking for a smarthost?[19:10:26] <rob0> but I'm out of time for now, bbl[19:24:56] *** davispuh <davispuh!~quassel@95.68.75.155> has joined #postfix[19:26:35] *** rsx <rsx!~rsx@ppp-188-174-129-230.dynamic.mnet-online.de> has joined #postfix[19:30:42] *** echoSMILE <echoSMILE!~censured@unaffiliated/echosmile> has joined #postfix[19:48:18] *** trident <trident!~trident@paranoia.trisec.se> has quit IRC (Ping timeout: 260 seconds)[19:49:44] *** trident <trident!~trident@paranoia.trisec.se> has joined #postfix[19:54:49] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-sqstseonmyhupldk> has quit IRC (Read error: Connection reset by peer)[19:54:58] *** section1 <section1!~section1@178.33.109.106> has quit IRC (Quit: Leaving)[19:58:45] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-viuhehflevtgbkag> has joined #postfix[20:24:43] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-viuhehflevtgbkag> has quit IRC (Ping timeout: 268 seconds)[20:29:57] *** rsx <rsx!~rsx@ppp-188-174-129-230.dynamic.mnet-online.de> has quit IRC (Remote host closed the connection)[20:31:21] *** heroux <heroux!sandroco@gateway/shell/insomnia247/x-ftfgcrjvsnsmhtcz> has joined #postfix[21:15:35] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[21:29:05] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has joined #postfix[21:30:03] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has quit IRC (Ping timeout: 240 seconds)[21:31:24] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has joined #postfix[21:37:55] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has joined #postfix[21:41:07] *** scurfee <scurfee!~scurfee@178.209.110.110> has joined #postfix[21:41:25] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has quit IRC (Read error: Connection reset by peer)[21:42:26] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has joined #postfix[21:44:53] *** davispuh <davispuh!~quassel@95.68.75.155> has quit IRC (Ping timeout: 268 seconds)[21:45:15] *** scurfee <scurfee!~scurfee@178.209.110.110> has quit IRC (Ping timeout: 240 seconds)[21:58:04] *** davispuh <davispuh!~quassel@95.68.80.195> has joined #postfix[22:10:47] *** davispuh <davispuh!~quassel@95.68.80.195> has quit IRC (Ping timeout: 268 seconds)[22:14:51] *** davispuh <davispuh!~quassel@87.110.32.91> has joined #postfix[22:14:55] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Ping timeout: 268 seconds)[22:26:08] *** davispuh <davispuh!~quassel@87.110.32.91> has quit IRC (Quit: http://quassel-irc.org - Chat comfortably. Anywhere.)[22:29:13] *** davispuh <davispuh!~quassel@95.68.80.195> has joined #postfix[22:42:03] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has joined #postfix[22:43:42] *** kurkale6ka <kurkale6ka!~kurkale6k@62.216.239.140> has quit IRC (Client Quit)[22:47:41] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has quit IRC ()[22:49:13] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has joined #postfix[22:55:03] *** yosafbridge <yosafbridge!~yosafbrid@static.38.6.217.95.clients.your-server.de> has quit IRC (Quit: Leaving)[23:06:28] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has quit IRC ()[23:08:52] *** yosafbridge <yosafbridge!~yosafbrid@static.38.6.217.95.clients.your-server.de> has joined #postfix[23:10:20] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has joined #postfix[23:24:52] *** robinho86 <robinho86!~robson@191.35.224.149> has quit IRC (Quit: Leaving.)[23:29:28] <f3ew> anexit: how do you identify trialed email?[23:32:53] *** mikami <mikami!~scurfee@broadband-77-37-146-212.ip.moscow.rt.ru> has quit IRC ()[23:33:39] *** echoSMILE <echoSMILE!~censured@unaffiliated/echosmile> has quit IRC (Ping timeout: 258 seconds)[23:34:03] *** Serus <Serus!~Serus@unaffiliated/serus> has quit IRC (Ping timeout: 260 seconds)[23:47:10] *** Serus <Serus!~Serus@unaffiliated/serus> has joined #postfix[23:52:49] *** DoDu2 <DoDu2!~DoDu@static.248.79.243.136.clients.your-server.de> has quit IRC (Remote host closed the connection)[23:53:11] *** DoDu2 <DoDu2!~DoDu@static.248.79.243.136.clients.your-server.de> has joined #postfix[23:57:45] *** neo4 <neo4!~Thunderbi@212-247-92-178.pool.ukrtel.net> has quit IRC (Quit: neo4)