January 27, 2020 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
January 27, 2020 [00:02:56] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has quit IRC (Quit: Ex-Chat)[00:46:08] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 265 seconds)[00:48:53] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[00:51:23] *** phunyguy <phunyguy!~blaahchm@ubuntu/member/phunyguy> has joined #postfix[00:58:02] *** eelstrebor <eelstrebor!~eelstrebo@216.75.116.100> has joined #postfix[02:15:17] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[02:16:12] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[02:23:21] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[02:25:13] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Ping timeout: 265 seconds)[02:28:28] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Read error: No route to host)[02:28:46] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[02:28:47] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Excess Flood)[02:29:11] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[02:29:12] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Excess Flood)[02:29:36] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[02:29:37] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Excess Flood)[02:30:01] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[02:39:03] *** NonFree_ <NonFree_!NonFree@gateway/vpn/privateinternetaccess/jasjar> has quit IRC (Ping timeout: 260 seconds)[02:46:38] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Ping timeout: 260 seconds)[02:49:35] *** NonFree <NonFree!NonFree@gateway/vpn/privateinternetaccess/jasjar> has joined #postfix[02:50:27] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 240 seconds)[02:51:34] *** tuxick <tuxick!~bluesmurf@pie.xs4all.nl> has quit IRC (Ping timeout: 258 seconds)[03:03:34] *** tuxick <tuxick!~bluesmurf@pie.xs4all.nl> has joined #postfix[03:07:57] *** tds <tds!~tds@lounge.srv.home.timstallard.me.uk> has quit IRC (Ping timeout: 260 seconds)[03:12:11] *** tds <tds!~tds@lounge.srv.home.timstallard.me.uk> has joined #postfix[03:59:09] *** nyov is now known as Guest31834[03:59:10] *** Guest31834 <Guest31834!~nyov@unaffiliated/nyov> has quit IRC (Killed (tolkien.freenode.net (Nickname regained by services)))[03:59:17] *** nyov <nyov!~nyov@unaffiliated/nyov> has joined #postfix[04:17:45] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[04:22:31] *** davispuh <davispuh!~quassel@87.110.32.91> has quit IRC (Quit: http://quassel-irc.org - Chat comfortably. Anywhere.)[04:23:04] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[04:23:06] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Excess Flood)[04:23:31] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[04:23:32] *** TheFatherMind- <TheFatherMind-!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Excess Flood)[04:24:38] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has quit IRC (Ping timeout: 260 seconds)[04:42:32] *** JPT <JPT!~jpt@classified.name> has quit IRC (Remote host closed the connection)[04:50:54] *** JPT <JPT!~jpt@classified.name> has joined #postfix[05:35:50] *** eelstrebor <eelstrebor!~eelstrebo@216.75.116.100> has quit IRC (Quit: Ex-Chat)[05:44:33] *** phoenixz <phoenixz!~quassel@187.211.1.108> has quit IRC (Ping timeout: 265 seconds)[05:48:51] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has quit IRC (Quit: led_dark_1)[06:41:58] *** rsx <rsx!~rsx@ppp-188-174-139-92.dynamic.mnet-online.de> has joined #postfix[07:06:56] *** deksar <deksar!~deksar@unaffiliated/deksar> has joined #postfix[07:12:36] *** nsegkos <nsegkos!~Thunderbi@lfbn-ann-1-113-54.w86-220.abo.wanadoo.fr> has joined #postfix[07:13:01] *** gu1lle_ <gu1lle_!~Thunderbi@190.191.219.70> has joined #postfix[07:19:34] *** nsegkos <nsegkos!~Thunderbi@lfbn-ann-1-113-54.w86-220.abo.wanadoo.fr> has quit IRC (Ping timeout: 265 seconds)[07:46:57] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[08:07:11] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 268 seconds)[08:12:26] *** Noti <Noti!~steffan@185.2.243.3> has joined #postfix[08:22:23] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has quit IRC (Quit: Leaving)[08:24:50] *** SteffanW <SteffanW!~steffan@194.44.236.118> has joined #postfix[08:25:41] *** Noti <Noti!~steffan@185.2.243.3> has quit IRC (Ping timeout: 268 seconds)[08:26:17] *** FH_thecat <FH_thecat!~FH_thecat@75.11.25.212.ftth.as8758.net> has joined #postfix[08:31:32] *** deksar <deksar!~deksar@unaffiliated/deksar> has quit IRC (Remote host closed the connection)[08:40:03] *** Koopz <Koopz!~Koopz@koopz.rocks> has left #postfix ("The Lounge - https://thelounge.chat")[08:41:43] *** supayoshi <supayoshi!~supayoshi@ip4da5d319.direct-adsl.nl> has quit IRC (Ping timeout: 268 seconds)[08:48:40] *** supayoshi <supayoshi!~supayoshi@213.10.140.13> has joined #postfix[08:51:32] *** kakv <kakv!uid415068@gateway/web/irccloud.com/x-mwjqwkzwjwwmgdlj> has quit IRC (Quit: Connection closed for inactivity)[08:54:11] *** TheFatherMind <TheFatherMind!~TheFather@cpe-172-117-218-16.socal.res.rr.com> has joined #postfix[08:56:57] *** xasegade <xasegade!~user@MINE.THE.GAP.MEDOLINA.INFO> has quit IRC (Ping timeout: 272 seconds)[08:59:17] *** Noti <Noti!~steffan@185.2.243.3> has joined #postfix[08:59:47] *** SteffanW <SteffanW!~steffan@194.44.236.118> has quit IRC (Ping timeout: 268 seconds)[09:05:58] *** supayoshi <supayoshi!~supayoshi@213.10.140.13> has quit IRC (Read error: Connection reset by peer)[09:10:39] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[09:23:57] *** pppingme <pppingme!~pppingme@unaffiliated/pppingme> has quit IRC (*.net *.split)[09:23:57] *** yoavz <yoavz!~yoavz@82.166.176.37> has quit IRC (*.net *.split)[09:36:16] *** pppingme <pppingme!~pppingme@unaffiliated/pppingme> has joined #postfix[09:36:16] *** yoavz <yoavz!~yoavz@82.166.176.37> has joined #postfix[09:40:26] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[09:41:23] *** c0san0stra <c0san0stra!~nunyuh@unaffiliated/c0san0stra> has quit IRC (Ping timeout: 260 seconds)[09:45:31] *** c0san0stra <c0san0stra!~nunyuh@unaffiliated/c0san0stra> has joined #postfix[10:01:49] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[10:02:30] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 268 seconds)[10:02:30] *** ]SiB[1 is now known as ]SiB[[10:30:23] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Ping timeout: 260 seconds)[10:30:24] *** Human_G33k <Human_G33k!~HumanG33k@62.147.242.8> has quit IRC (Ping timeout: 260 seconds)[10:32:30] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[10:33:23] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[10:39:04] *** Human_G33k <Human_G33k!~HumanG33k@62.147.242.8> has joined #postfix[11:05:43] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[11:10:27] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Ping timeout: 240 seconds)[11:20:15] *** Human_G33k <Human_G33k!~HumanG33k@62.147.242.8> has quit IRC (Remote host closed the connection)[11:20:50] *** Human_G33k <Human_G33k!~HumanG33k@62.147.242.8> has joined #postfix[11:25:01] *** Ner0Zer0 <Ner0Zer0!~Ner0Zer0@87.253.63.54> has joined #postfix[11:30:25] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has quit IRC (Ping timeout: 265 seconds)[11:32:07] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has joined #postfix[11:39:44] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[11:43:12] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 268 seconds)[11:43:39] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[11:44:26] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 268 seconds)[11:58:00] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has quit IRC (Ping timeout: 268 seconds)[11:59:16] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has joined #postfix[12:17:31] *** gormenghast <gormenghast!~samuel@2a01:e0a:1fb:3af0:445:800a:3a65:20a9> has joined #postfix[12:38:33] *** section1 <section1!~section1@178.33.109.106> has joined #postfix[12:53:50] *** stenrose <stenrose!~martin@martin.ilait.se> has quit IRC (Remote host closed the connection)[12:58:54] *** stenrose <stenrose!~martin@martin.ilait.se> has joined #postfix[12:59:46] *** deksar <deksar!~deksar@unaffiliated/deksar> has joined #postfix[12:59:47] *** deksar <deksar!~deksar@unaffiliated/deksar> has quit IRC (Client Quit)[13:00:03] *** deksar <deksar!~deksar@unaffiliated/deksar> has joined #postfix[13:03:49] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[13:24:14] *** knoba <knoba!~limnoria@yoda.workaround.org> has quit IRC (Remote host closed the connection)[13:24:30] *** robinho86 <robinho86!~robsonjf@191.36.239.241> has joined #postfix[13:25:29] *** knoba <knoba!~limnoria@yoda.workaround.org> has joined #postfix[13:25:59] *** jwhitmore <jwhitmore!~jwhitmore@109.77.243.95> has joined #postfix[13:46:16] <mitrax> when running postmap on postfix/transport i'm getting a 'postmap: fatal: unsupported map type for this operation: hash', that occurs even when the file is empty, what does usually cause that error?[13:47:18] *** nsegkos <nsegkos!~Thunderbi@lfbn-ann-1-113-54.w86-220.abo.wanadoo.fr> has joined #postfix[13:51:39] *** nsegkos <nsegkos!~Thunderbi@lfbn-ann-1-113-54.w86-220.abo.wanadoo.fr> has quit IRC (Ping timeout: 240 seconds)[13:54:57] <mitrax> uh oh my mistake i accidentally compiled with -DNO_DB i guess that's it[13:57:35] <mitrax> i use mysql / dovecot-sasl so i figured i could use -DNO_DB, but for custom transport lookup i guess i need basic db support?[14:00:21] <mitrax> hmm guess i could use the mysql backend for transports as well[14:01:19] *** exs <exs!~rs@77-64-176-138.dynamic.primacom.net> has joined #postfix[14:01:25] <exs> hi[14:01:27] <exs> a question[14:01:32] <exs> I see that in my logs[14:01:36] <exs> disconnect from eabo.abobeats.de[45.146.16.231] ehlo=1 mail=0/1 rcpt=0/1 data=0/1 rset=0/1 quit=1 commands=2/6[14:02:00] <exs> that is a legit sender but he does not leave a message[14:02:05] <exs> do someone understand why?[14:11:40] <exs> found the reason[14:11:52] <exs> does anyone know how to seperate mutiple values in the conf file?[14:11:57] <exs> with a comma?[14:21:10] <petn-randall> exs: What was the reason then?[14:24:50] <lunaphyte> mitrax: you don't need the hash format[14:24:55] <lunaphyte> mitrax: see database_readme[14:29:21] <mitrax> lunaphyte: yeah i realized i could just use text_hash[14:29:29] <mitrax> err texthash[14:29:34] <lunaphyte> good deal[14:30:23] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[14:32:10] *** jwhitmore <jwhitmore!~jwhitmore@109.77.243.95> has quit IRC (Ping timeout: 268 seconds)[14:32:12] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 260 seconds)[14:32:12] *** ]SiB[1 is now known as ]SiB[[14:33:13] <lunaphyte> exs: the syntax for both configurations files is described in the documentation, master(5) and postconf(5)[14:34:57] *** KaiForce <KaiForce!~chatzilla@99.133.184.129> has joined #postfix[14:37:38] <mitrax> lunaphyte: to define a transport specific parameter isn't the syntax transportname_parameter_name= ... ?[14:40:06] *** jwhitmore <jwhitmore!~jwhitmore@109.77.243.95> has joined #postfix[14:42:01] <mitrax> e. i have 'somedomain.com mytransport:' in transport and transport_maps = texthash:/etc/postfix/transport in main.cf (as well as the transport added to master.cf) mytransport_smtp_bind_address = <ip_address> yields 'unused parameter: mytransport_smtp_bind_address' when i reload[14:42:02] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[14:42:08] <mitrax> oh[14:42:13] <mitrax> should be mytransport_bind_address i guess[14:42:34] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[14:44:56] <mitrax> mmh nope[14:46:06] <mitrax> oh seems it can only be defined in master.cf alright[14:52:13] <lunaphyte> mitrax: there are ways in which some parameters like that can be placed in main.cf, but imo, i tend to find it not really worth it, and more logical to manage by keeping them in master.cf[14:52:21] <mitrax> yeah[14:52:44] <mitrax> i'd rather have them in master.cf, easier to keep track of[14:52:45] <mitrax> thanks[14:52:55] <lunaphyte> np[14:54:05] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has joined #postfix[14:54:42] <lunaphyte> i'm sure there can be special cases where it might genuinely solve an actual problem to keep them in main.cf [programmatic automation is one such example that comes to mind - although that's less the case now with newer capabilities of postconf], but outside of that, to me it mostly felt like a solution in search of a problem[14:58:32] <mitrax> lunaphyte: yeah, by the way is it possible to force smtp vs esmtp for a specific domain?[14:59:16] <lunaphyte> i'm not sure what you mean[14:59:23] <lunaphyte> "force" it?[14:59:44] <lunaphyte> emstp cannot be used if the server does not advertise it[15:00:39] <mitrax> yeah but there's an MX that gives me a Cannot start TLS: handshake failure error on the first try, the email stays in the queue, when debugging with openssl s_client -starttls smtp ... it seems the SSL handshake is ok but no certificate CA name is sent[15:00:54] <mitrax> on the second try it works, i assume postfix fallbacks to regular smtp or something[15:01:34] <mitrax> that introduces a 5min delay or so for delivering to that domain[15:01:58] <lunaphyte> i'm not following the logic[15:02:06] <lunaphyte> first, the assumption isn't logical[15:02:28] <mitrax> i might well be wrong on what occurs exactly[15:02:58] <mitrax> but i send an email to e.g foo.com, if i do a mailq i see that email in the queue with (Cannot start TLS: handshake failure)[15:03:07] <mitrax> five minutes later, it's gone from the queue and sent[15:03:19] <lunaphyte> you'd need to show logs of both delivery attempts[15:03:49] <mitrax> or maybe it's the remote host doing grey listing[15:03:50] <mitrax> hold on[15:04:33] <mitrax> ah, warning: TLS library problem: error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol:../ssl/statem/statem_lib.c:1929[15:04:53] *** eelstrebor <eelstrebor!~eelstrebo@216-75-116-100.scb.ne.static.allophone.net> has joined #postfix[15:06:20] <mitrax> yeah that's what's occuring, on the first try i get that warning, and the delivery is deferred, on the second try the warning is still there but the email gets delivered[15:07:43] <mitrax> seems it's a openssl 1.1.1 problem[15:08:01] <mitrax> the minimum TLS version is 1.2 instead of 1.0[15:08:19] <mitrax> it's a system wide settings not related to postfix[15:10:56] <lunaphyte> hmm, i'd be interested to hear about it[15:11:12] <lunaphyte> and why it behaves differently the second time[15:11:44] <mitrax> it's in /etc/ssl/openssl.cnf [system_default_sect] MinProtocol = TLSv1.2[15:11:52] <lunaphyte> deprecating old protocols and ciphers is a good idea, abstractly, but unfortunately, it's often done myopically[15:12:34] <lunaphyte> too often, people seem to think that the www is the same thing as the internet, and that there is no world where encryption is optional, which is not the case[15:15:00] <mitrax> yeah[15:17:47] *** anyk_ <anyk_!~quassel@2a01:4f9:2a:1b96:2::2> has quit IRC (Read error: Connection reset by peer)[15:20:48] *** anyk <anyk!~quassel@2a01:4f9:2a:1b96:2::2> has joined #postfix[15:21:26] *** epony <epony!~epony@unaffiliated/epony> has joined #postfix[15:21:35] *** gu1lle_ <gu1lle_!~Thunderbi@190.191.219.70> has quit IRC (Remote host closed the connection)[15:23:13] <mitrax> aaah it works now[15:27:23] <mitrax> as to why it works on the second try, i assume it's an implicit policy in postfix to fallback to non encrypted when TLS negociation fails, it's just a guess though[15:28:40] *** epony <epony!~epony@unaffiliated/epony> has quit IRC (Remote host closed the connection)[15:31:40] <lunaphyte> not that i know of, but no need to guess. the logs will say[15:33:07] *** nsegkos <nsegkos!~Thunderbi@lfbn-ann-1-113-54.w86-220.abo.wanadoo.fr> has joined #postfix[15:34:01] <mitrax> oh well as i said i have exactly the same entries in the log, except the first time it's deferred and second time delivered, hold on let me put the actual lines on pastebin[15:36:43] <mitrax> lunaphyte: https://pastebin.com/UzAPD8de[15:38:09] *** nsegkos <nsegkos!~Thunderbi@lfbn-ann-1-113-54.w86-220.abo.wanadoo.fr> has quit IRC (Ping timeout: 268 seconds)[15:47:04] <lunaphyte> mitrax: pastebin grep -iF 'CD46F120EF8' /path/to/maillog[15:47:16] *** gormenghast <gormenghast!~samuel@2a01:e0a:1fb:3af0:445:800a:3a65:20a9> has quit IRC (Remote host closed the connection)[15:47:44] <lunaphyte> ah, yes, there is, i forgot[15:47:52] <lunaphyte> smtp_tls_security_level: may[15:48:01] <lunaphyte> "When TLS handshakes fail, the connection is retried with TLS disabled"[15:48:11] <mitrax> oh doh, yeah i set it to true, forgot about that[15:48:30] <lunaphyte> true? that's not a valid value[15:48:35] <mitrax> err may i mean :)[15:48:38] <lunaphyte> oh[15:48:47] <lunaphyte> yeah, that makes sense then[15:49:02] <lunaphyte> to your point, i do wonder about the 2 separate attempts[15:49:19] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[15:49:53] <mitrax> 5 minutes apart yeah, i would think it would send immediately without TLS[15:50:14] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Read error: Connection reset by peer)[15:51:49] *** wonderworld <wonderworld!~wonderwor@ip-84-119-185-50.unity-media.net> has joined #postfix[15:52:08] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has joined #postfix[15:52:15] *** jwhitmore <jwhitmore!~jwhitmore@109.77.243.95> has quit IRC (Ping timeout: 246 seconds)[15:53:29] <wonderworld> are there disadvantages in using the Spamhaus ZEN service? i am trying it out and it blocks quiet a lot of spam before postfix accepts it, which is a good thing. but i am also afraid that it might do the same for good message. any experiences? tnx.[15:53:39] *** ]SiB[1 <]SiB[1!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Ping timeout: 240 seconds)[15:57:50] <tuxick> use it for scoring only[16:04:57] <wonderworld> tuxick: like using it in spamassassin instead of using it directly in postfix?[16:08:53] <tuxick> yes[16:09:45] <tuxick> or postscreen, i guess. never used that myself though[16:14:51] <lunaphyte> there are always potential disadvantages to everything[16:15:09] <lunaphyte> dnsbls are no exception, and zen is no exception to dnsbls[16:15:27] <lunaphyte> one disadvantage is the possibility of false positives or false negatives.[16:15:38] <mitrax> lunaphyte: DKIM requires a 3hd party program like opendkim right? there's nothing built in postfix?[16:15:39] <lunaphyte> that's why, as tuxick says, scoring is the sane approach[16:15:50] <lunaphyte> mitrax: that's correct[16:16:37] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has quit IRC (Quit: shibboleth)[16:18:01] *** deksar <deksar!~deksar@unaffiliated/deksar> has quit IRC (Quit: Going offline, see ya! (www.adiirc.com))[16:24:09] *** sk_tandt <sk_tandt!~sk_tandt@net-5-88-141-17.cust.vodafonedsl.it> has joined #postfix[16:24:33] *** sk_tandt <sk_tandt!~sk_tandt@net-5-88-141-17.cust.vodafonedsl.it> has quit IRC (Remote host closed the connection)[16:24:50] *** sk_tandt <sk_tandt!~sk_tandt@net-5-88-141-17.cust.vodafonedsl.it> has joined #postfix[16:36:18] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Quit: Goodbye!)[16:36:53] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[16:39:12] *** gu1lle_ <gu1lle_!~Thunderbi@201.216.253.75> has joined #postfix[16:41:53] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Ping timeout: 265 seconds)[16:46:48] <mitrax> lunaphyte: great... changing MinProtocol back to TLSv1.0 breaks dovecot's IMAP SSL login[17:02:20] *** nsegkos <nsegkos!~Thunderbi@lfbn-ann-1-113-54.w86-220.abo.wanadoo.fr> has joined #postfix[17:05:17] *** Noti <Noti!~steffan@185.2.243.3> has quit IRC (Quit: Konversation terminated!)[17:19:06] *** wonderworld <wonderworld!~wonderwor@unaffiliated/wonderworld> has quit IRC (Remote host closed the connection)[17:28:37] *** led_dark_1 <led_dark_1!~Thunderbi@217.66.160.14> has joined #postfix[17:29:41] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has joined #postfix[17:41:30] <mitrax> lunaphyte: doh my mistake... the proper value is TLSv1 not TLSv1.0 :)[17:42:18] *** epony <epony!epony@unaffiliated/epony> has joined #postfix[17:43:41] <rob0> tuxick, I have used Zen for many years, and it's the only DNSBL which I'll directly block on.[17:45:04] <rob0> complaints are rare, and typically cases of legitimate servers being listed because they had a user compromised.[17:53:13] <tuxick> can't say i saw many false positive[17:55:55] *** epony <epony!epony@unaffiliated/epony> has quit IRC (Quit: reconf)[18:03:26] *** epony <epony!epony@unaffiliated/epony> has joined #postfix[18:04:45] <exs> petn-randall: smtpd_tls_security_level was at encrypt[18:04:47] <exs> instead may[18:05:00] <exs> i have smtp_tls_security_level with encrypt[18:17:44] *** epony <epony!epony@unaffiliated/epony> has quit IRC (Quit: reconf again)[18:18:46] *** epony <epony!epony@unaffiliated/epony> has joined #postfix[18:21:10] *** Bahhumbug <Bahhumbug!jrd@psychotic/admin/jrd> has quit IRC (Quit: leaving)[18:21:33] *** Bahhumbug <Bahhumbug!jrd@psychotic/admin/jrd> has joined #postfix[18:45:38] <lembron> uhm, can i toss opendkim q´s in here? - specifically "KeyTable"... https://wiki.archlinux.org/index.php/OpenDKIM#Multiple_domains examples multiple domains with multiple keys -- i want "multiple domains with the same keys" - how do i picture that cleanly in there? - or is that not even possible/not recommended or such?[18:48:43] <lembron> and, if i then have "mysharedselector onedomain.com:myselector:/etc/opendkim/myselector.private" instead of "myselector._domainkey.example1.com example1.com:myselector:/etc/opendkim/myselector.private" --- and end up with a SigningTable alla "* at onedomain dot com mysharedselector \n * at seconddomain dot net mysharedselector " what i guess if fine, but also ugly? :P[18:49:29] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has quit IRC (Ping timeout: 265 seconds)[18:50:53] *** sk_tandt <sk_tandt!~sk_tandt@net-5-88-141-17.cust.vodafonedsl.it> has quit IRC (Ping timeout: 260 seconds)[18:50:53] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[18:51:45] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[18:52:28] <tuxick> uhm[18:52:56] <tuxick> you'd end up with 1 entry in keytable[18:53:12] <tuxick> and indeed with signingtable as you describe[18:53:49] <tuxick> so i suppose the answer is yes :)[18:55:06] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has joined #postfix[19:05:09] <lembron> tuxick so, Q then kinda becomes what i want to pick as "-d" in the genkey - but it doesnt actually matter for anything?[19:06:11] <lembron> or well, i see it used in the dns-helper file it generates, and later inside the mails header itself too...[19:06:27] <lembron> so, i guess i take the mothership-domain or so? ;D[19:07:26] <lunaphyte> lembron: questions for opendkim would be appropriate for #opendkim[19:07:28] <tuxick> lembron: manpage is quite clear about that, -d is only used for the comment in txt record[19:07:36] <lunaphyte> those here interested in discussion that topic will also be there[19:07:45] *** immae <immae!~immae@immae.eu> has quit IRC (Quit: WeeChat 2.4)[19:07:45] <lunaphyte> you could also ask in ##email too, if you wanted[19:08:15] <lembron> nonexistent channel ;-) -- and there is quite a good chance of overlap in here id fgure[19:08:40] <lembron> ##email i didnt saw, i tried joining #email whats ded too, and not redirected :/[19:09:01] <lunaphyte> huh?[19:09:07] <lunaphyte> not sure what you're talking about[19:09:44] <lunaphyte> i don't know what "whats ded too, and not redirected" means[19:10:08] <lembron> ? /join #email -> 1 user, me - /j #opendkim -> 1 user, me again[19:10:20] <lunaphyte> what's #email?[19:10:27] <lembron> redirect as in, /join #php -> you land in ##php automagically[19:10:42] <lunaphyte> the channel is ##email[19:12:40] <thumbs> lembron: some channels have that redirect set. Not all.[19:15:11] *** Elisha <Elisha!~elisha@93-103-57-197.dynamic.t-2.net> has joined #postfix[19:16:53] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[19:29:51] <lembron> oh... i think im putting 2&2 together now...[19:31:26] <lembron> inside a mail, the signature has domain&selector again -- and those will be used to fetch the key from?[19:31:36] *** ]SiB[ <]SiB[!~Thunderbi@unaffiliated/sib/x-9459575> has quit IRC (Quit: ]SiB[)[19:32:08] <thumbs> lembron: better question for ##email[19:35:36] *** shibboleth <shibboleth!~shibbolet@gateway/tor-sasl/shibboleth> has quit IRC (Quit: shibboleth)[19:37:31] <rob0> #opendkim might not have anybody these days (I know it used to), but ##email works, if anybody there can answer (I can't.)[19:38:04] <rob0> but opendkim documentation should be good[19:39:03] *** fiddlerwoaroof_ <fiddlerwoaroof_!~fiddlerwo@unaffiliated/fiddlerwoaroof> has quit IRC (Remote host closed the connection)[19:44:53] <lembron> well, i think so far i struggle on even the bare "what" it does... cause soemhow that whole "fetched from d=" and "mailjet asks one to put there keys on your own domain" doesnt line up in my brain now ;D[20:00:06] *** section1 <section1!~section1@178.33.109.106> has quit IRC (Remote host closed the connection)[20:06:13] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Ping timeout: 268 seconds)[20:18:44] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[20:25:31] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Ping timeout: 268 seconds)[20:25:57] *** Ner0Zer0 <Ner0Zer0!~Ner0Zer0@87.253.63.54> has quit IRC (Ping timeout: 268 seconds)[20:45:12] *** lembron <lembron!~admin@unaffiliated/lembron> has quit IRC (Ping timeout: 258 seconds)[20:46:00] *** lembron <lembron!~admin@unaffiliated/lembron> has joined #postfix[20:47:03] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[20:50:17] *** audiodef_ <audiodef_!~serverdef@static.207.9.4.46.clients.your-server.de> has joined #postfix[20:50:25] *** audiodef <audiodef!~serverdef@static.207.9.4.46.clients.your-server.de> has quit IRC (Read error: Connection reset by peer)[20:54:33] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Ping timeout: 260 seconds)[20:56:47] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[21:01:21] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Read error: No route to host)[21:04:22] *** gu1lle_ <gu1lle_!~Thunderbi@201.216.253.75> has quit IRC (Ping timeout: 268 seconds)[21:08:17] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[21:18:33] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has quit IRC (Ping timeout: 268 seconds)[21:27:12] *** shal3r <shal3r!~shal3r@80.232.250.159> has quit IRC (Ping timeout: 268 seconds)[21:27:29] *** shal3r <shal3r!~shal3r@80.232.250.159> has joined #postfix[21:28:42] *** rsx <rsx!~rsx@ppp-188-174-139-92.dynamic.mnet-online.de> has quit IRC (Quit: rsx)[21:41:57] *** gu1lle_ <gu1lle_!~Thunderbi@201.216.253.75> has joined #postfix[21:51:02] *** deksar <deksar!~deksar@unaffiliated/deksar> has joined #postfix[21:57:45] *** jwhitmore <jwhitmore!~jwhitmore@109.76.145.168> has joined #postfix[21:58:01] *** supayoshi <supayoshi!~supayoshi@ipd50a8c0d.speed.planet.nl> has joined #postfix[22:10:00] *** immae <immae!~immae@2a01:4f8:141:53e7::> has joined #postfix[22:10:07] *** immae <immae!~immae@2a01:4f8:141:53e7::> has quit IRC (Client Quit)[22:10:47] *** immae <immae!~immae@immae.eu> has joined #postfix[22:13:35] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has quit IRC (Quit: ZNC 1.7.5 - https://znc.in)[22:16:21] *** CarlenWhite <CarlenWhite!~CarlenWhi@15.sub-174-231-128.myvzw.com> has quit IRC (Ping timeout: 265 seconds)[22:25:51] *** oculuxe <oculuxe!~oculux@128.127.105.184> has joined #postfix[22:27:37] *** oculux <oculux!~oculux@79.142.76.244> has quit IRC (Ping timeout: 272 seconds)[22:30:51] *** jwhitmore <jwhitmore!~jwhitmore@109.76.145.168> has quit IRC (Ping timeout: 265 seconds)[22:33:54] *** petermolnar <petermolnar!~mail@alia.petermolnar.eu> has joined #postfix[22:37:22] *** exs <exs!~rs@77-64-176-138.dynamic.primacom.net> has quit IRC (Quit: leaving)[22:58:28] *** Elisha <Elisha!~elisha@93-103-57-197.dynamic.t-2.net> has quit IRC (Quit: My MacBook Pro has gone to sleep. ZZZzzz…)[23:00:18] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has quit IRC (Read error: Connection reset by peer)[23:00:56] *** n_1-c_k <n_1-c_k!~n_1-c_k@2a02:8010:63a6::70> has joined #postfix[23:17:58] *** wonderworld <wonderworld!~wonderwor@ip-84-119-185-50.unity-media.net> has joined #postfix[23:22:52] *** robinho86 <robinho86!~robsonjf@191.36.239.241> has quit IRC (Quit: Leaving.)[23:32:25] *** immae <immae!~immae@immae.eu> has quit IRC (Quit: WeeChat 2.4)[23:39:21] *** gu1lle_ <gu1lle_!~Thunderbi@201.216.253.75> has quit IRC (Quit: gu1lle_)[23:42:19] *** immae <immae!~immae@2a01:4f8:141:53e7::> has joined #postfix[23:48:45] *** sk_tandt <sk_tandt!~sk_tandt@net-5-88-141-17.cust.vodafonedsl.it> has joined #postfix[23:52:32] *** deksar <deksar!~deksar@unaffiliated/deksar> has quit IRC (Quit: Leaving)[23:53:20] *** sk_tandt <sk_tandt!~sk_tandt@net-5-88-141-17.cust.vodafonedsl.it> has quit IRC (Ping timeout: 268 seconds)