January 13, 2020 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
January 13, 2020 [00:13:33] <imcdona> If I make changes to a regexp table how do I get postfix to see the changes? postmap or is a postfix reload required?[00:47:36] *** Gaaab <Gaaab!~Gaaab@k2.ilion.info> has quit IRC (Remote host closed the connection)[00:49:20] <pj> !tell imcdona database[00:49:20] <knoba> imcdona: http://www.postfix.org/DATABASE_README.html provides an overview of how Postfix lookup tables work, and the various types that are implemented.[00:49:28] <pj> imcdona: the answer is in here ^^^^[00:50:01] <pj> ...specifically: http://www.postfix.org/DATABASE_README.html#detect[01:01:21] *** Gaaab <Gaaab!~Gaaab@k2.ilion.info> has joined #postfix[01:06:19] *** phunyguy <phunyguy!~blaahchm@ubuntu/member/phunyguy> has joined #postfix[01:07:56] *** samy1028b <samy1028b!~samy1028c@mx.10.acs.entrustedmail.net> has quit IRC (Read error: Connection reset by peer)[01:24:59] *** phunyguy <phunyguy!~blaahchm@ubuntu/member/phunyguy> has quit IRC (Quit: Goodbye cruel world!)[01:44:14] *** phunyguy <phunyguy!~blaahchm@ubuntu/member/phunyguy> has joined #postfix[01:52:24] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has quit IRC (Read error: Connection reset by peer)[01:53:35] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has joined #postfix[02:11:39] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has quit IRC (Ping timeout: 240 seconds)[02:26:17] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Ping timeout: 268 seconds)[02:26:54] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has joined #postfix[02:33:06] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has joined #postfix[02:35:07] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[02:35:33] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[03:02:03] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Remote host closed the connection)[03:03:10] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has joined #postfix[03:33:00] *** camelCaser <camelCaser!~camela@213.183.54.167> has quit IRC (Ping timeout: 258 seconds)[03:33:24] *** camelCaser <camelCaser!~camela@82.221.128.157> has joined #postfix[03:33:42] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has quit IRC (Read error: Connection reset by peer)[03:34:47] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has joined #postfix[03:43:59] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Remote host closed the connection)[03:56:16] *** nyov <nyov!~nyov@unaffiliated/nyov> has quit IRC (Killed (weber.freenode.net (Nickname regained by services)))[03:56:23] *** nyov <nyov!~nyov@unaffiliated/nyov> has joined #postfix[04:01:06] *** netz <netz!netz@butt.boutique> has quit IRC (Quit: ZNC - https://znc.in)[04:32:52] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has quit IRC (Quit: Ex-Chat)[04:42:31] *** JPT <JPT!~jpt@classified.name> has quit IRC (Remote host closed the connection)[04:50:22] *** JPT <JPT!~jpt@classified.name> has joined #postfix[05:45:27] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has quit IRC (Quit: led_dark_1)[05:50:51] *** nutron <nutron!~nutron@unaffiliated/nutron> has quit IRC (Ping timeout: 240 seconds)[05:53:32] *** nutron <nutron!~nutron@unaffiliated/nutron> has joined #postfix[06:22:17] *** nutron <nutron!~nutron@unaffiliated/nutron> has quit IRC (Ping timeout: 268 seconds)[06:44:25] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[06:44:44] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[07:21:03] *** sphex <sphex!~nobody@38.133.25.191> has quit IRC (Ping timeout: 268 seconds)[07:22:26] *** sphex <sphex!~nobody@38.133.25.191> has joined #postfix[08:14:49] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[08:21:24] *** nutron <nutron!~nutron@unaffiliated/nutron> has joined #postfix[08:22:14] *** Noti <Noti!~steffan@185.2.243.3> has joined #postfix[08:39:39] *** Noti <Noti!~steffan@185.2.243.3> has quit IRC (Ping timeout: 240 seconds)[08:39:57] *** Noti <Noti!~steffan@194.44.236.118> has joined #postfix[08:54:26] *** SteffanW <SteffanW!~steffan@185.2.243.3> has joined #postfix[08:54:27] *** Noti <Noti!~steffan@194.44.236.118> has quit IRC (Ping timeout: 240 seconds)[09:02:56] *** trident <trident!~trident@paranoia.trisec.se> has joined #postfix[09:04:45] *** internat <internat!~nf@38.47.220.203.static.comindico.com.au> has quit IRC (Read error: Connection reset by peer)[09:07:39] *** internat <internat!~nf@38.47.220.203.static.comindico.com.au> has joined #postfix[09:08:03] *** Hoffe <Hoffe!~Hoffe@81.7.169.243> has quit IRC (Ping timeout: 240 seconds)[09:08:13] *** internat <internat!~nf@38.47.220.203.static.comindico.com.au> has quit IRC (Read error: Connection reset by peer)[09:09:04] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has quit IRC (Quit: No Ping reply in 180 seconds.)[09:09:10] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has joined #postfix[09:09:37] *** internat <internat!~nf@38.47.220.203.static.comindico.com.au> has joined #postfix[09:09:40] *** rob0 <rob0!~rob0@pdpc/valentine/postfixninja/rob0> has quit IRC (Ping timeout: 248 seconds)[09:09:57] *** rob0 <rob0!~rob0@Shibboleet.slackbuilds.org> has joined #postfix[09:16:40] *** wowas <wowas!~wowas@projekte.imos.net> has joined #postfix[09:16:42] <wowas> Hello![09:18:42] <wowas> i am running a smtp relay host for some customers. Sometimes they send mails to mailboxes that do not exist. Therefore a non-delivery notification gets created with a from=<>. This bounce mail then puts me on http://www.backscatterer.org[09:18:51] <wowas> where and how to i avoid that best?[09:19:02] <petn-randall> !mantras[09:19:02] <knoba> petn-randall: (#1) Do not accept mail that you do not intend (or are unable) to deliver., or (#2) Do not drop mail., or (#3) Do not use wildcards or catchalls., or (#4) Do not forward mail to third party systems.[09:19:24] <petn-randall> wowas: mantra #1 ^^^[09:19:58] <wowas> petn-randall, so i need to do some sort of call-head?[09:20:17] <wowas> or just make sure that my customer makes sure he uses valid mail addresses?[09:20:28] <wowas> (wich is almost impossible :-P[09:28:51] *** Noti <Noti!~steffan@194.44.236.118> has joined #postfix[09:29:08] *** SteffanW <SteffanW!~steffan@185.2.243.3> has quit IRC (Ping timeout: 258 seconds)[09:30:06] <survietamine> hmm, there some restrictions about that[09:30:18] <survietamine> !reject_unknown_recipient_domain[09:30:19] <knoba> survietamine: Reject the request when Postfix is not final destination for the recipient domain, and the RCPT TO domain has 1) no DNS MX and no DNS A record or 2) a malformed MX record such as a record with a zero-length MX hostname.[09:30:48] <survietamine> maybe, i'm not expert[09:31:48] <petn-randall> wowas: What is a "call-head"?[09:36:54] *** netz <netz!netz@butt.boutique> has joined #postfix[09:37:15] *** netz <netz!netz@butt.boutique> has quit IRC (Remote host closed the connection)[09:40:46] *** netz <netz!netz@butt.boutique> has joined #postfix[09:41:59] <wowas> petn-randall, i meant milter-ahead[09:46:59] <pj> wowas: your users should be authenticated and using the submission port, it is ok to generate a bounce message to an authenticated user.[09:48:54] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[09:50:12] <pj> you can also use reject_sender_login_mismatch and smtpd_sender_login_maps to force your users to use their assigned email addresses.[09:58:15] *** Noti <Noti!~steffan@194.44.236.118> has quit IRC (Ping timeout: 258 seconds)[09:58:19] *** SteffanW <SteffanW!~steffan@185.2.243.3> has joined #postfix[10:00:17] <wowas> pj, well, the problem are not the actual senders but the created bounce mails i guess[10:00:58] <pj> wowas: if the envelope sender is legitimate then it's not a problem to send them bounce messages.[10:01:32] <petn-randall> wowas: Wait, you are creating bounce messages on ingress mails, right?[10:01:59] <pj> the backscatter issue happens when you receive spam with a spoofed sender and send the bounce message to that sender. If the sender is authenticated then by rights it's not a spammer with a spoofed envelope sender.[10:03:14] <petn-randall> AFAIU the issue is backscatter spam, not mails from authenticated users.[10:05:05] <pj> petn-randall: he said it's a relay host, so everything should be authenticated.[10:05:17] <pj> it was the first thing he said...[10:05:35] <pj> [2020-01-13 21:18:42] <wowas> i am running a smtp relay host for some customers.[10:05:35] <wowas> petn-randall, i can show you a log example. Is there a "anonymize" my logs? :)[10:05:59] <wowas> i dont auth by smtp, i auth by ip-address[10:06:10] <wowas> well, you know what i mean :)[10:06:18] <petn-randall> wowas: search and replace anything you don't want to show, but don't go crazy on it. We still need to understand them.[10:06:32] <pj> auth by ip address is not a good idea, but even then they users are still authenticated.[10:06:46] <pj> !tell wowas munge[10:06:46] <knoba> wowas: There is no E in it, see !mung[10:06:50] <pj> !tell wowas mung[10:06:50] <knoba> wowas: Mash Until No Good : the art of obfuscating data which ultimately results in unintentional consequences such as making diagnostics impossible. If you think you must hide details, see !have2mung[10:07:12] <petn-randall> !have2mung[10:07:12] <knoba> petn-randall: if you absolutely have to mung details, such as anonymizing domains, email and IP addresses etc., try to do so in a minimal, consistent and meaningful way. Keep in mind that this is our first look at your particular configuration and or log details and we do not have the benefit you posses about your existing configuration.[10:07:15] *** eramirez <eramirez!~eramirez@104.129.194.49> has joined #postfix[10:07:31] <pj> also...[10:07:40] <pj> !tell wowas getting_help[10:07:40] <knoba> wowas: before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[10:08:50] <wowas> well, do you share logs with problems with real ips and mail adresses?[10:10:08] <pj> wowas: at the end of the day if your users are authenticated in any way (including by IP address) then they should not be using a spoofed envelope sender. You end up on backscatterer.org when you send a bounce to an address that did not originate the message to begin with, usually a honey trap.[10:10:32] <pj> if your users are sending you mail with an envelop sender that contains honey trap addresses then you have other problems.[10:12:00] <pj> wowas: well, since backscatter has everything to do with the email addresses how would you expect us to troubleshoot the problem without seeing them in the logs?[10:12:21] <wowas> here is the log how the problem gets created: https://paste.centos.org/view/936f297b[10:14:09] <pj> wowas: is the from= address on line three your client's actual email address?[10:14:57] <pj> and did you mung that address at all?[10:15:43] <pj> I can tell you what I think is happening but I just want to verify those two things first.[10:17:06] <pj> ok, here's what's happening...[10:17:28] <wowas> pj, i guess its fake or from a virus? But i dunno. I did not mung it.[10:18:08] <pj> the client is sending mail from a server that is not able to receive mail, and they are not setting the envelope sender to a valid email domain so it is just picking up the hostname of the server for the email domain...[10:18:45] <pj> because the server is not an email server postfix cannot connect to it on port 25 to deliver the bounce message (because there is nothing listening on port 25 of that server)[10:18:51] <pj> hang on, let me check that real quick...[10:19:23] <pj> ok, right, indeed that is true, postfix cannot connect to port 25 on the server.[10:19:38] <pj> so what happens is that postfix is deferring the message and just keeps trying again.[10:19:49] <pj> this will not cause you to get listed on backscattere.org.[10:20:01] <pj> if you are listed on backscatterer.org it is not from this.[10:20:13] <pj> anyways, bbiab[10:20:38] <wowas> but i do use from=<> which is valid, right?[10:31:59] *** badpixel <badpixel!~badpixel@unaffiliated/badpixel> has quit IRC (Quit: better bad than dead)[10:34:20] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Read error: Connection reset by peer)[10:34:30] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[10:35:08] *** Dessa <Dessa!Dessa@pku74f0o.dip0.t-iqconnect.de> has quit IRC (Remote host closed the connection)[10:35:11] *** chachasmooth <chachasmooth!~chachasmo@unaffiliated/chachasmooth> has quit IRC (Quit: Quit)[10:35:23] *** Dessa <Dessa!Dessa@pku74f0o.dip0.t-iqconnect.de> has joined #postfix[10:35:28] *** Signum <Signum!~quassel@debian/developer/pdpc.active.haas> has quit IRC (Quit: No Ping reply in 180 seconds.)[10:35:31] *** chachasmooth <chachasmooth!~chachasmo@unaffiliated/chachasmooth> has joined #postfix[10:36:42] *** chaas <chaas!~quassel@moss.workaround.org> has joined #postfix[10:38:31] *** badpixel <badpixel!~badpixel@unaffiliated/badpixel> has joined #postfix[10:38:38] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[10:38:38] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Excess Flood)[10:38:56] <pj> wowas: <> is the null sender, it is the legitimate sender to use for bounce messages which is why postfix uses it when it generates a bounce.[10:39:03] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[10:39:08] <pj> !null_sender[10:39:08] <knoba> pj: Error: "null_sender" is not a valid command.[10:39:11] <pj> meh[10:39:14] <pj> !<>[10:39:14] <knoba> pj: Error: "<>" is not a valid command.[10:39:19] <pj> oh well[10:40:31] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Ping timeout: 265 seconds)[10:41:21] <wowas> how and why do i get on http://www.backscatterer.org then?[10:43:14] <pj> not from that message.[10:43:24] <pj> !tell wowas showconfig[10:43:24] <knoba> wowas: when asked to provide your config, please provide a SINGLE pastebin (see !pastebin) with postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[10:43:30] <pj> wowas: show your config ^^^^^^[10:43:43] <wowas> ok[10:44:21] <pj> also what is your server's IP address?[10:51:32] <wowas> pj, https://paste.centos.org/view/2662a18d[10:52:17] <pj> so the IP is 212.87.130.78?[10:52:51] <pj> that insane mynetworks line is how you authenticate????[10:52:51] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[10:53:55] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[10:54:34] <wowas> oh yes[10:55:15] <pj> and this server is *just* a relayhost, right?[10:55:20] <pj> it's not an MX?[10:56:01] <wowas> correct[10:56:21] <pj> then why are you accepting mail on port 25?[10:56:54] *** ehrenreich <ehrenreich!~ehrenreic@85.191.216.141> has quit IRC (Ping timeout: 252 seconds)[10:57:24] <wowas> hm.[10:57:56] <pj> port 25 is for MX connections, not for submission. Relayhosts accept mail on the submission or submissions ports, not port 25.[10:58:01] <pj> !tell wowas submission[10:58:01] <knoba> wowas: Port 587 is submission, for user submission of mail, NOT suitable for mail exchange. See the commented example in master.cf. also see !msa, and rfc 6409. Also read http://www.maawg.org/sites/maawg/files/news/MAAWG_Port25rec0511.pdf[10:58:03] <pj> !tell wowas submissions[10:58:03] <knoba> wowas: RFC 8314 renames the old smtps port, 465/tcp, to submissions, for user submission of mail, NOT suitable for mail exchange, with implicit TLS rather than explicit STARTTLS via a plaintext TCP connection. Postfix can implement submissions with a separate smtpd(8) listener with -o smtpd_tls_wrappermode=yes . See the commented example for smtps in master.cf.[10:58:42] <pj> also there is a lot of restrictions that you don't need because you are only accepting mail from authenticated users.[10:59:12] <pj> and also get rid of the whole mynetworks crap and put your IPs in a CIDR file instead, then use check_client_access against the CIDR file.[10:59:48] <wowas> pj, "then why are you accepting mail on port 25?" => i only accept mails on port 25 from the mynetworks ips by iptables.[11:00:02] <pj> wowas: see what I said above about port 25.[11:00:09] <wowas> just reading[11:00:30] <pj> that said, you already have a number of clients who are using port 25 to submit mail to you, so you can't exactly stop accepting it on port 25 now.[11:01:03] <pj> but you should open up submission and submissions, and treat port 25 exactly the same as submission, but deprecate the usage of port 25 with your clients.[11:01:05] <wowas> that would be possible though[11:02:23] *** ehrenreich <ehrenreich!~ehrenreic@85.191.216.141> has joined #postfix[11:02:37] <pj> anyways, a lot of your restrictions are overkill because your clients can't be expected to follow all the same rules as a random MX server on the internet, which they shouldn't have to because they are authenticated.[11:04:26] <pj> so you likely want these restrictions: smtpd_client_restrictions=check_client_access cidr:/path/to/cidr/file, reject[11:05:52] <pj> actually make that smtpd_recipient_restrictions instead of smtpd_client_restrictions[11:05:57] <pj> then set all the rest of them to permit.[11:06:27] <pj> and you can set mynetworks to blank: mynetworks=[11:06:44] <pj> that's for starters[11:07:23] <pj> then I would sort out a way to limit the envelope sender that specific IPs are allowed to use.[11:07:38] <pj> that would be more tricky, but it can be done.[11:08:54] <pj> and likely a bunch of other stuff too.[11:12:43] *** Noti <Noti!~steffan@194.44.236.118> has joined #postfix[11:13:23] *** SteffanW <SteffanW!~steffan@185.2.243.3> has quit IRC (Ping timeout: 265 seconds)[11:20:09] *** Blubberbop <Blubberbop!~quassel@187.211.27.65> has joined #postfix[11:20:29] *** Blubberbop <Blubberbop!~quassel@187.211.27.65> has quit IRC (Remote host closed the connection)[11:27:26] *** mrnewbie72 <mrnewbie72!~mrnewbie7@2.51.48.201> has joined #postfix[11:47:26] *** Hoffe <Hoffe!~Hoffe@87-59-100-113-cable.dk.customer.tdc.net> has joined #postfix[11:54:23] *** Hoffe <Hoffe!~Hoffe@87-59-100-113-cable.dk.customer.tdc.net> has quit IRC (Ping timeout: 260 seconds)[11:54:42] *** Hoffe <Hoffe!~Hoffe@81.7.169.243> has joined #postfix[12:16:02] *** Ner0Zer0 <Ner0Zer0!~Ner0Zer0@87.253.63.54> has joined #postfix[12:17:47] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has quit IRC (Quit: Leaving)[12:21:36] <wowas> pj, any idea why i am poor here? https://talosintelligence.com/reputation_center/lookup?search=212.87.130.78[12:21:52] <wowas> just due to the email volume maybe?[12:21:57] *** section1 <section1!~section1@178.33.109.106> has joined #postfix[12:24:14] *** SteffanW <SteffanW!~steffan@185.2.243.3> has joined #postfix[12:25:04] *** Noti <Noti!~steffan@194.44.236.118> has quit IRC (Ping timeout: 268 seconds)[12:36:11] *** eramirez_ <eramirez_!~eramirez@104.129.194.64> has joined #postfix[12:39:39] *** eramirez <eramirez!~eramirez@104.129.194.49> has quit IRC (Ping timeout: 240 seconds)[12:39:39] *** eramirez_ is now known as eramirez[12:41:39] *** hipodilski <hipodilski!~hipo@pc-freak.net> has joined #postfix[12:47:32] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has joined #postfix[12:48:38] *** random_yanek <random_yanek!~random_ya@host-89-230-173-82.dynamic.mm.pl> has quit IRC (Ping timeout: 260 seconds)[12:55:27] *** random_yanek <random_yanek!~random_ya@host-89-230-174-65.dynamic.mm.pl> has joined #postfix[13:01:59] *** robinho86 <robinho86!~robsonjf@191.36.239.241> has joined #postfix[13:20:03] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has quit IRC (Ping timeout: 240 seconds)[13:22:47] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has joined #postfix[13:37:18] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has joined #postfix[13:48:31] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Read error: Connection timed out)[13:48:56] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has joined #postfix[13:51:49] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Client Quit)[14:00:51] *** Hoffe <Hoffe!~Hoffe@81.7.169.243> has quit IRC (Ping timeout: 240 seconds)[14:25:33] *** eramirez <eramirez!~eramirez@104.129.194.64> has quit IRC (Quit: eramirez)[14:31:14] *** eramirez <eramirez!~eramirez@104.129.194.66> has joined #postfix[14:34:47] *** patdk-lap <patdk-lap!~patrickdk@208.95.164.6> has quit IRC (Remote host closed the connection)[14:35:23] *** patdk-lap <patdk-lap!~patrickdk@208.95.164.6> has joined #postfix[14:42:23] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has joined #postfix[14:45:04] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Remote host closed the connection)[14:45:28] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has joined #postfix[14:51:07] *** Human_G33k <Human_G33k!~HumanG33k@62.147.242.8> has joined #postfix[14:54:57] *** HumanG33k <HumanG33k!~HumanG33k@62.147.242.8> has quit IRC (Ping timeout: 258 seconds)[15:12:44] *** axisys <axisys!~axisys@unaffiliated/axisys> has joined #postfix[15:21:19] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has joined #postfix[15:34:36] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has quit IRC (Read error: Connection reset by peer)[15:35:59] *** aniketh <aniketh!uid171160@gateway/web/irccloud.com/x-upnxeoczjrkmbsmm> has joined #postfix[15:38:03] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has quit IRC (Ping timeout: 240 seconds)[15:38:18] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has joined #postfix[15:50:57] *** pj <pj!~pj@centos/ops/pj> has quit IRC (Ping timeout: 260 seconds)[15:52:42] *** Kronuz <Kronuz!~Kronuz@unaffiliated/kronuz> has quit IRC (Ping timeout: 268 seconds)[15:53:19] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has joined #postfix[15:55:02] *** FinboySlick <FinboySlick!~shark@74.117.40.10> has joined #postfix[15:59:38] *** Kronuz <Kronuz!~Kronuz@unaffiliated/kronuz> has joined #postfix[16:04:37] *** pj <pj!~pj@centos/ops/pj> has joined #postfix[16:06:29] <petn-randall> wowas: Where does it say that you're poor?[16:17:44] *** pinPoint <pinPoint!~pinPoint@about/windows/regular/pinpoint> has quit IRC (Ping timeout: 252 seconds)[16:26:55] *** samy1028 <samy1028!~samy1028c@mx.10.acs.entrustedmail.net> has joined #postfix[16:32:38] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 260 seconds)[16:34:20] *** Kelsar <Kelsar!~quassel@unaffiliated/kelsar> has quit IRC (Quit: http://quassel-irc.org - Chat comfortably. Anywhere.)[16:35:09] *** Kelsar <Kelsar!~quassel@unaffiliated/kelsar> has joined #postfix[16:37:01] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[16:39:31] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Remote host closed the connection)[16:39:49] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[16:43:18] <wowas> petn-randall, we got removed 1h ago. no idea why[16:46:58] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Remote host closed the connection)[16:47:17] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[16:52:26] <lunaphyte> wowas: that ip address has been emitting email for 6 days. it's going to take more time than that to develop a reputation[16:53:09] <wowas> well, its a shiny new postfix box :o)[16:54:27] <tharkun> IIRC There are blacklists that will list recent domains and ip for 45 days before letting them through.[16:54:44] * tharkun tips hat on lunaphyte's general direction[17:01:25] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Remote host closed the connection)[17:01:47] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[17:01:49] <wowas> lunaphyte, petn-randall: well, i deliver about 20k Mails per day. Maybe this is too much for a new ip/host?[17:01:51] *** SteffanW <SteffanW!~steffan@185.2.243.3> has quit IRC (Quit: Konversation terminated!)[17:02:02] <lunaphyte> huh?[17:02:23] <lunaphyte> wowas: it's going to take more time than that to develop a reputation[17:03:25] <rob0> 20K isn't much really, but yes, you need time and a clean list[17:09:34] <jeev> robert0[17:09:51] <jeev> i tried sophos before postfix. what a stupid idea if they expect admins to set something up and literally have no logging[17:11:21] <rob0> you could plug it into amavisd-new, and amavisd would log[17:12:03] <jeev> yea i know. i already do[17:12:52] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has quit IRC (Ping timeout: 268 seconds)[17:13:37] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has joined #postfix[17:17:47] <jimpop> roberto0[17:21:33] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[17:21:55] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[17:24:09] *** internat <internat!~nf@38.47.220.203.static.comindico.com.au> has quit IRC (Read error: Connection reset by peer)[17:24:09] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Read error: Connection reset by peer)[17:24:54] *** internat <internat!~nf@38.47.220.203.static.comindico.com.au> has joined #postfix[17:25:15] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 240 seconds)[17:26:06] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[17:32:23] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has quit IRC (Ping timeout: 240 seconds)[17:33:13] *** vetru <vetru!~vetru@gateway/tor-sasl/vetr> has joined #postfix[17:36:27] <rob0> roberteau[17:39:15] *** badpixel <badpixel!~badpixel@unaffiliated/badpixel> has quit IRC (Quit: better bad than dead)[17:42:06] *** badpixel <badpixel!~badpixel@unaffiliated/badpixel> has joined #postfix[17:42:25] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Read error: Connection reset by peer)[17:42:31] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[17:44:52] *** ]SiB[1 is now known as ]SiB[[17:45:26] *** honigkuchen <honigkuchen!~honigkuch@ip5f5b4d31.dynamic.kabel-deutschland.de> has joined #postfix[17:46:05] <honigkuchen> my domain supports spf but when sending it seems spf seems not to be inside mail[17:46:16] <honigkuchen> it already worked for years[17:46:27] <honigkuchen> but then I had a connection problem[17:46:32] <honigkuchen> and maybe I changed something[17:46:48] <honigkuchen> it must be something in my main.cf[17:46:57] <honigkuchen> because this file was changed during time[17:48:38] <lunaphyte> what does "it seems spf seems not to be inside mail" actually mean?[17:50:46] <honigkuchen> in gmail a recieved mail is not "signed"[17:51:07] <honigkuchen> yahoo does not recieve my mail[17:51:12] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[17:52:14] *** samy1028 <samy1028!~samy1028c@mx.10.acs.entrustedmail.net> has quit IRC (Read error: Connection reset by peer)[17:54:18] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 260 seconds)[17:54:19] *** ]SiB[1 is now known as ]SiB[[17:56:25] <lunaphyte> honigkuchen: you want ##email - not #postfix[17:57:06] <honigkuchen> why[17:57:31] <honigkuchen> I changed something in postfix maybe[17:57:43] <honigkuchen> and my domain is said to be able to do spf[17:57:55] <honigkuchen> and it already worked for losts of years[17:58:39] *** wowas <wowas!~wowas@projekte.imos.net> has quit IRC (Quit: Leaving)[18:07:23] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 258 seconds)[18:08:40] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has quit IRC (Read error: Connection reset by peer)[18:17:49] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has quit IRC (Quit: Leaving)[18:19:54] <honigkuchen> it seems so, that I can only not recieve those mails from my email server and thats it[18:20:05] <honigkuchen> I have 2 postfix server, one is the relay[18:23:09] *** gu1lle_ <gu1lle_!~Thunderbi@190.191.219.70> has joined #postfix[18:31:05] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has quit IRC (Quit: led_dark_1)[18:48:43] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has joined #postfix[18:58:04] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has joined #postfix[19:01:00] *** samy1028 <samy1028!~samy1028c@mx.10.acs.entrustedmail.net> has joined #postfix[19:11:23] *** slave_blocker <slave_blocker!~slave_blo@x4e37ae51.dyn.telefonica.de> has joined #postfix[19:12:05] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[19:13:06] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[19:14:00] <Matt> honigkuchen: sending mailserver doesn't have anything to do with SPF - it's all done at the receiving end checking against the DNS record[19:14:17] <honigkuchen> yes[19:14:25] <honigkuchen> I was wrong about that it is spf[19:14:49] <honigkuchen> 2 things were hints it may be spf, but it wasnt[19:21:51] <Matt> if you do "Show Original" on a message in gmail, it'll show you SPF, DKIM, and DMARC check status[19:24:41] <honigkuchen> it is not a spf problem[19:27:28] <Matt> well if the mail logs show it leaving your server, it's probably not a postfix problem either[19:28:03] *** kingkong <kingkong!antalya@shellium/member/kingkong> has quit IRC (Quit: www.ChatQ.Net New Style Chat Site)[19:31:41] <Matt> might be worth checking your DKIM/DMARC setup if you have one, especially if you use both and your DMARC record lists the policy as something other than none[19:34:10] *** samy1028 <samy1028!~samy1028c@mx.10.acs.entrustedmail.net> has quit IRC (Quit: Leaving)[19:34:40] *** samy1028 <samy1028!~samy1028c@mx.10.acs.entrustedmail.net> has joined #postfix[19:43:31] <lunaphyte> Matt: this is being discussed in ##email, where the topic is more appropriate. you're welcome to join there if you're interesting in continuing the discussion[19:43:41] *** Hoffe <Hoffe!~Hoffe@2-108-189-125-cable.dk.customer.tdc.net> has joined #postfix[19:46:14] *** kingkong <kingkong!antalya@chatq.net> has joined #postfix[19:48:12] *** Hoffe <Hoffe!~Hoffe@2-108-189-125-cable.dk.customer.tdc.net> has quit IRC (Ping timeout: 258 seconds)[19:48:26] *** Hoffe <Hoffe!~Hoffe@81.7.169.243> has joined #postfix[19:49:56] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[19:52:05] *** kingkong <kingkong!antalya@shellium/member/kingkong> has quit IRC (Quit: www.ChatQ.Net New Style Chat Site)[19:58:07] *** kingkong <kingkong!antalya@chatq.net> has joined #postfix[19:58:09] *** echoSMIL1 <echoSMIL1!~censured@unaffiliated/echosmile> has joined #postfix[19:59:08] *** echoSMILE <echoSMILE!~censured@unaffiliated/echosmile> has quit IRC (Ping timeout: 260 seconds)[20:02:16] *** section1 <section1!~section1@178.33.109.106> has quit IRC (Quit: Leaving)[20:03:04] *** yoink <yoink!~yoink@unaffiliated/yoink> has quit IRC (Ping timeout: 268 seconds)[20:11:53] *** znull <znull!~z@01.zero1.ro> has quit IRC (Ping timeout: 268 seconds)[20:15:51] *** yoink <yoink!~yoink@unaffiliated/yoink> has joined #postfix[20:16:46] *** znull <znull!~z@01.zero1.ro> has joined #postfix[20:24:43] *** eramirez <eramirez!~eramirez@104.129.194.66> has quit IRC (Remote host closed the connection)[20:32:27] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has quit IRC (Ping timeout: 240 seconds)[20:32:59] *** _cr_ <_cr_!~quassel@srv.ncxs.de> has joined #postfix[20:49:30] *** DTZUZO_ <DTZUZO_!~DTZUZO@205.ip-149-56-132.net> has joined #postfix[21:09:20] *** aniketh <aniketh!uid171160@gateway/web/irccloud.com/x-upnxeoczjrkmbsmm> has quit IRC (Quit: Connection closed for inactivity)[21:14:17] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has quit IRC (Quit: Leaving)[21:18:18] *** eramirez <eramirez!~eramirez@104.129.194.49> has joined #postfix[21:26:44] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Ping timeout: 265 seconds)[21:27:39] *** johnny56 <johnny56!johnny56@gateway/vpn/protonvpn/johnny56> has quit IRC (Ping timeout: 240 seconds)[21:32:11] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[21:32:24] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has quit IRC (Remote host closed the connection)[21:32:30] *** honigkuchen <honigkuchen!~honigkuch@ip5f5b4d31.dynamic.kabel-deutschland.de> has quit IRC (Remote host closed the connection)[21:34:18] *** gu1lle_ <gu1lle_!~Thunderbi@190.191.219.70> has quit IRC (Read error: Connection reset by peer)[21:34:29] *** gu1lle_ <gu1lle_!~Thunderbi@190.191.219.70> has joined #postfix[21:34:33] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[21:46:40] *** Ner0Zer0 <Ner0Zer0!~Ner0Zer0@87.253.63.54> has quit IRC (Remote host closed the connection)[21:47:04] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has quit IRC (Quit: Leaving)[21:51:54] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[21:54:16] *** johnny56 <johnny56!johnny56@gateway/vpn/protonvpn/johnny56> has joined #postfix[22:00:07] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[22:03:23] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 260 seconds)[22:03:24] *** ]SiB[1 is now known as ]SiB[[22:04:37] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Read error: Connection reset by peer)[22:06:06] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[22:13:02] *** breitenj <breitenj!~breitenj@bnc.plusnull.net> has quit IRC (Ping timeout: 260 seconds)[22:15:00] *** breitenj <breitenj!~breitenj@bnc.plusnull.net> has joined #postfix[22:29:04] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has quit IRC (Remote host closed the connection)[22:29:29] *** eramirez <eramirez!~eramirez@104.129.194.49> has quit IRC (Quit: eramirez)[22:36:11] *** eramirez <eramirez!~eramirez@104.129.194.61> has joined #postfix[22:39:24] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has joined #postfix[23:03:52] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Remote host closed the connection)[23:04:12] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[23:08:50] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[23:09:54] *** gams <gams!~user@cm245-139.liwest.at> has quit IRC (Remote host closed the connection)[23:12:18] *** gams <gams!~user@cm245-139.liwest.at> has joined #postfix[23:12:31] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 258 seconds)[23:12:31] *** ]SiB[1 is now known as ]SiB[[23:20:34] *** robinho86 <robinho86!~robsonjf@191.36.239.241> has quit IRC (Quit: Leaving.)[23:21:41] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[23:22:17] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[23:23:51] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[23:24:00] *** camelCaser <camelCaser!~camela@82.221.128.157> has quit IRC (Read error: Connection reset by peer)[23:27:00] *** camelCaser <camelCaser!~camela@82.221.128.157> has joined #postfix[23:27:34] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 265 seconds)[23:28:54] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[23:30:57] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 265 seconds)[23:56:07] *** slave_blocker <slave_blocker!~slave_blo@x4e37ae51.dyn.telefonica.de> has quit IRC (Quit: Leaving)[23:57:33] *** imcdonald_ <imcdonald_!~imcdonald@65-100-46-165.dia.static.qwest.net> has joined #postfix[23:57:34] *** imcdona <imcdona!~imcdonald@2602:41:642e:a601:9d01:6045:e9cf:c4d8> has quit IRC (Read error: Connection reset by peer)