October 15, 2013 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
October 15, 2013 [00:06:53] *** davlefou__ has joined #postfix[00:17:01] *** smue has joined #postfix[00:21:25] <rob0> Hmmm, trurl, hostmaster and postmaster are my two most spammed addresses. I sure wouldn't want to do that.[00:22:51] <trurl> rob0: i'll keep an eye on it, if it gets to noisy i can always restrict them more[00:24:33] <trurl> but since no one began to scream i figure there are no totally dumb mistakes in my restrictions? i'll give them a try.[00:24:49] <trurl> my server is small, about 100 mails/day, 50% get rejected[00:28:29] *** robinho86 has quit IRC[00:32:10] *** steven4455 has quit IRC[00:33:45] <rob0> why aren't you using Zen?[00:33:52] <rob0> are you using postscreen?[00:34:34] <rob0> BTW policyd-weight is no longer maintained, and while it had some good ideas, those were wrong.[00:37:23] <rob0> uh, s/good/interesting/ -- such as the idea that HELO and PTR and sender domain should all agree[00:41:30] * honestly narrows eyes[00:46:06] <trurl> rob0: okay, i meant postscreen. not yet. i plan to, but as long i feel not confident in configuring it i'll stick with the simple solution and improve it step by step[00:52:39] *** davlefou_ has joined #postfix[00:55:29] *** twb has joined #postfix[00:55:49] *** davlefou__ has quit IRC[00:56:06] *** freezey has quit IRC[00:56:27] *** hallamigo has quit IRC[00:57:07] *** Abrar|gone is now known as AbrarSyed[01:05:05] *** stljim has quit IRC[01:11:08] *** lunaphyte_ has joined #postfix[01:13:46] *** AbrarSyed is now known as Abrar|gone[01:27:25] *** Abrar|gone is now known as AbrarSyed[01:36:53] *** master_of_master has joined #postfix[01:40:15] *** master_o1_master has quit IRC[01:51:20] *** Kunda has quit IRC[01:52:41] *** davlefou__ has joined #postfix[01:55:59] *** davlefou_ has quit IRC[02:05:46] <DrFoo> If I send outgoing mail through postfix, does it send a copy to the MDA "sent" folder?[02:06:29] *** mtu has joined #postfix[02:07:03] <pj> DrFoo: no[02:07:16] <DrFoo> any way to get this functionality?[02:07:33] <pj> That's generally done by your MUA[02:07:56] *** tm has quit IRC[02:08:03] <DrFoo> So there's an MDA, MTA, and and MUA?[02:08:11] <pj> !mua[02:08:12] <knoba> pj: "mua" : Mail User Agent: software used for mail message retrieval, commonly known as an email client, such as mutt, Evolution and Thunderbird[02:08:27] <mtu> hiyas. concerning this problem: https://groups.google.com/forum/#!topic/mailing.postfix.users/75pH1hGb1P8 about TLSv1 vs. TLSv1_1 - i'm wondering when the change to implement TLSv1_1 and TLSv1_2 happened. i tried 2.10.0, but it didn't seem to be there.[02:08:36] <rob0> You could implement it, but you'd have to know a lot. And to ensure that it works, you'd have to limit what MUAs you'll allow.[02:08:42] <mtu> if i decide to roll my own to defeat this problem, what version do i need?[02:08:43] <rob0> DrFoo, ^^[02:09:43] <pj> mtu: if you want to do it yourself then use dovecot for your MDA with seive and implement a seive rule to put a copy in the Sent folder.[02:10:03] <DrFoo> I'm thinking of running postfix / sogo, but depending on whether I send via phone, webmail, or client I'll have different sent folders... and I use it quite often...[02:10:08] <pj> I'm sure you can also do something similar with procmail[02:10:16] <mtu> pj: think you mean rob0, not me[02:10:43] <pj> mtu: sorry, I meant DrFoo[02:11:27] <adaptr> mtu: the changelog or readme would seem like a good start[02:11:54] <pj> mtu: TLS is implemented through openssl, whatever versions of TLS are supported by your copy of openssl will be what is supported by postfix.[02:12:17] <adaptr> and building against the wrong openssl headers is FUN[02:12:26] <pj> hehehe[02:13:17] <mtu> pj: in this case, that's not quite the case. i have a server that works only with TLSv1, not TLSv1_1 or TLSv1_2. however, my postfix (2.9.6) doesn't know about TLSv1_1 and _2, so it does not exclude then[02:13:24] <mtu> which means they are used, causing the connection to fail[02:13:46] <mtu> i can retrace this problem by choosing -tls1 or -tls1_1 with openssl on the command line[02:14:10] <adaptr> sounds as if yuo are confused. openssl - and hence the versions postfix supports - are not part of postfix.[02:14:20] <twb> That doesn't match my understanding of how negotiation works[02:14:34] <adaptr> also, yes, negotiation is downwards-failsafe[02:14:51] <mtu> one of your colleagues named victor confirmed this problem on this thread: https://groups.google.com/forum/#!topic/mailing.postfix.users/75pH1hGb1P8[02:14:53] <adaptr> although I remember there may be differences between clients and servers in how downgrading is handled[02:15:02] <rob0> I'd suggest that mtu post to the mailing list. Viktor will reply.[02:15:21] <adaptr> mtu: yes. the problem would be that you are trying to run postfix version X against an openssl version that does not support what version X supports.[02:15:31] <adaptr> which is the opposite of what you stated initially[02:16:31] <mtu> adaptr: no. my postfix doesn't know about tls1_1 and _2, but openssl does. and sadly, it's not just me, but the entire ubuntu 12.04 LTS[02:16:46] <mtu> rob0: thanks, i'll do that[02:17:03] <pj> !tell mtu smtpd_tls_protocols[02:17:03] <knoba> mtu: "smtpd_tls_protocols" : list of tls protocols that the postfix smtp server will exclude or include with opportunistic tls encryption. this parameter SHOULD be left at its default empty value, allowing all protocols to be used with opportunistic tls. this feature is available in Postfix 2.6 and later[02:17:34] <mtu> knoba: the problem concerns smtp_tls, not smtpd_tls[02:17:53] <mtu> err, pj: the problem concerns smtp_tls, not smtpd_tls[02:18:15] <adaptr> !smtp_tls_protocols[02:18:15] <knoba> adaptr: Error: "smtp_tls_protocols" is not a valid command.[02:18:15] <pj> mtu: there's an smtp version of that setting as well[02:18:30] <pj> there is, just that knoba doesn't know about it[02:18:38] <pj> !tell mtu postconf_5[02:18:38] <knoba> mtu: "postconf_5" : For documentation on all main.cf settings see the postconf(5) man page either type `man 5 postconf' into your shell or browse to http://www.postfix.org/postconf.5.html.[02:18:53] <adaptr> or just run postconf |grep proto[02:19:17] <mtu> i know about that setting. i used a tls_map file to tweak ot for the server causing the problem[02:19:48] <mtu> but if i set the protocol to TLSv1, that doesn't prevent the call to openssl from trying to use tls1_2 and failing[02:20:28] <mtu> it's probably just a freaky server, but the fact of the matter is that openssl works with tls1 and _not_ tls1_1 - but i have no way of telling postfix to exclude tls1_1[02:20:57] <mtu> in other words, my postfix version doesn't recognize !TLSv1_1. now, i thought Viktor had added that in 2.10.0, but it appears i was mistaken.[02:21:29] <pj> mtu: well you can specify the ciphers to exclude with smtp_tls_exclude_ciphers[02:22:09] <mtu> i cannot exclude a cipher that postfix doesn't know, which is the case here for TLSv1_1[02:22:53] <pj> well, you need to talk to victor, I guess, go to the ml for support.[02:26:02] <DrFoo> So if I understand this correctly, both postfix and dovecot have IMAP servers. If I instead use Dovecot for IMAP and use postfix for SMTP.. would this sync sent folders? I just read something where most clients copy the message to the sent folder of the IMAP server via APPEND...[02:26:22] <rob0> !imap[02:26:23] <knoba> rob0: "imap" : IMAP is an application layer Internet protocol that allows a client (MUA) to access mailboxes on a remote server (see: http://en.wikipedia.org/wiki/IMAP). Postfix does not provide IMAP (or POP3) service; see !courier or !dovecot for common IMAP/POP3 choices.[02:27:43] <DrFoo> ah... looks like I'll be doing that..[02:29:06] <lunaphyte_> i wonder where you'd get the impression postfix is an imap server[02:32:33] <mtu> meh, okay. i was wrong about the syntax, it's not !TLSv1_1 but !TLSv1.1. doesn't help with my problem though, so i guess openssl is at fault.[02:32:46] <DrFoo> I think the terms are used so heavily in the context of postfix that I may have came to the wrong conclusion.[02:32:57] <DrFoo> I'm not a mail expert by any means...[02:33:06] <DrFoo> Any word on Cyrus vs Dovecot?[02:33:12] <mtu> and for the record, that TLSv1.1 support was introduced in 2.9.2[02:34:54] <twb> IMO use dovecot not cyrus, end of story[02:35:26] <lunaphyte_> DrFoo: dovecot[02:36:24] <mtu> i've never set up cyrus, but dovecot is easy and performs well on several tens of thousands of mails for me[02:37:18] <lunaphyte_> i've used cyrus, i've used courier, i've used imapd, i've used dovecot. i prefer dovecot[02:37:40] <DrFoo> I was just curious because everyone I've chatted with pretty much mentions Dovecot, but I downloaded the sogo test VM image and it uses Cyrus... wasn't sure if this was better or if it's a Coke / Pepsi thing[02:38:54] <lunaphyte_> for clueful people it is a personal preference, yes.[02:39:09] <twb> IME only old people like cyrus[02:39:16] <twb> because they learned it when it was the least bad choice[02:39:30] <lunaphyte_> rest assured that the vast majority of people readily espousing their opinions are not clueful.[02:39:31] <mtu> cyrus has been around longer, so some people stick to it[02:39:43] <mtu> like with fetchmail and getmail, the younger one is much better[02:44:07] *** mtu_ has joined #postfix[02:47:27] *** mtu has quit IRC[02:48:29] <lunaphyte_> or like with sendmail and postfix ;)[02:49:55] *** zerick has quit IRC[02:53:06] *** davlefou_ has joined #postfix[02:56:14] *** davlefou__ has quit IRC[03:01:24] <Patrickdk> or like the 48year old stripper vs the 20year old college bimbo[03:02:59] *** gu1lle_ has joined #postfix[03:04:46] <twb> WWI vs. WWII[03:06:48] <DrFoo> is SMTP used between MTAs? Or is that just for MUA outgoing to MTA?[03:08:04] <Patrickdk> heh? smtp is for mta to mta[03:08:11] <Patrickdk> smtp can be, but isn't only use for mua -> mta[03:16:23] *** UQlev has joined #postfix[03:24:14] *** AbrarSyed is now known as Abrar|gone[03:53:43] *** davlefou__ has joined #postfix[03:57:06] *** davlefou_ has quit IRC[03:57:40] *** Abrar|gone is now known as AbrarSyed[04:01:02] *** Bronze has quit IRC[04:14:56] <lunaphyte_> muas don't talk to mtas. muas talk to msas.[04:15:24] <lunaphyte_> and they use submission to do this - not smtp[04:16:05] <lunaphyte_> [although as of today, submission is the same as smtp, just using a different port][04:32:16] *** UQlev has quit IRC[04:32:28] *** MaximusColourum has joined #postfix[04:37:40] *** MaximusColourum has quit IRC[04:43:09] *** gu1lle_ has quit IRC[04:56:58] *** davlefou__ has quit IRC[04:59:26] *** cybrNaut has quit IRC[05:01:48] *** cybrNaut has joined #postfix[05:10:52] *** davlefou__ has joined #postfix[05:15:39] *** jarif has joined #postfix[05:25:34] *** jimpop has quit IRC[05:32:44] *** gu1lle_ has joined #postfix[05:37:20] *** jimpop has joined #postfix[05:38:27] *** gu1lle_ has quit IRC[05:54:49] *** davlefou_ has joined #postfix[05:58:07] *** davlefou__ has quit IRC[06:00:10] *** donmichelangelo has quit IRC[06:00:39] *** donmichelangelo has joined #postfix[06:18:01] *** lunaphyte_ has quit IRC[06:22:55] *** jarif has quit IRC[06:24:47] *** zerick has joined #postfix[06:34:17] <AbrarSyed> Hi guys[06:34:48] <AbrarSyed> So this time im trying with a fresh install of postfix. I purged and removed it, and then re-installed it[06:35:18] <AbrarSyed> I can send mail to gmail and stuff if I locally use "telnet localhost 25"[06:35:29] *** zerick has quit IRC[06:35:43] <AbrarSyed> however... on the same machine, if I use the externl host name "telnet mail.forgeessentials.com 25"[06:35:50] <AbrarSyed> suddenly it gives me this error[06:36:03] <AbrarSyed> 554 5.7.1 <sacabrarsyed at gmail dot com>: Relay access denied[06:36:58] *** zerick has joined #postfix[06:37:26] <AbrarSyed> http://paste2.org/ZIy9dfa9 << main.cf config file[06:37:51] <AbrarSyed> there is no log file... /var/log/mail.log doesnt exist[06:38:07] <AbrarSyed> nor does anything that starts with 'mail' exist in that directory[06:39:51] <waldi> then check your syslog config[06:45:51] <AbrarSyed> where is that?[06:45:56] <AbrarSyed> oh.. that[06:48:04] <AbrarSyed> syslog config http://paste2.org/yfhOW1h5[06:49:15] <waldi> no. you need to read it and show where the postfix logging is going to[06:49:56] <waldi> sorry, paste2org is in the past. i can only reach ipv6 destinations right now[06:50:16] <AbrarSyed> the config defines /var/log/mail.log[06:53:24] <AbrarSyed> and aboutpaste2, I like it cuz of the UI.. pastebin is ugly.[06:56:28] *** davlefou_ has quit IRC[07:11:46] *** davlefou_ has joined #postfix[07:26:38] *** eagles0513875_ has joined #postfix[07:27:18] *** AbrarSyed has left #postfix[07:41:42] *** err-or has quit IRC[07:47:23] *** err-or has joined #postfix[07:48:41] *** trusktr has joined #postfix[07:55:40] *** davlefou__ has joined #postfix[07:58:38] *** davlefou_ has quit IRC[07:58:53] *** zerick has quit IRC[08:00:29] *** steven4455 has joined #postfix[08:00:41] *** zerick has joined #postfix[08:10:16] *** mage__ has joined #postfix[08:11:46] *** steven4455 has quit IRC[08:12:06] *** mage_ has quit IRC[08:14:49] *** maxter has joined #postfix[08:22:19] *** gu1lle_ has joined #postfix[08:32:05] *** twb has quit IRC[08:38:51] *** trusktr has quit IRC[08:41:28] *** UQlev has joined #postfix[08:54:46] *** wdp has joined #postfix[08:54:46] *** wdp has joined #postfix[08:55:58] *** davlefou_ has joined #postfix[08:57:04] *** jarif has joined #postfix[08:59:02] *** davlefou__ has quit IRC[09:10:04] *** jra has joined #postfix[09:11:49] *** monkwitdafunk has quit IRC[09:20:34] *** zorg1 has joined #postfix[09:22:58] *** ffiore has joined #postfix[09:28:32] *** Yulth has quit IRC[09:39:54] *** adaptr has quit IRC[09:43:50] *** adaptr has joined #postfix[09:45:09] *** jra has quit IRC[09:49:25] *** dvl has quit IRC[09:49:43] *** dvl has joined #postfix[09:57:08] *** davlefou__ has joined #postfix[09:59:35] *** eagles0513875_ has quit IRC[10:00:03] *** davlefou_ has quit IRC[10:02:50] *** Quadro has joined #postfix[10:06:15] *** olegfusion has joined #postfix[10:24:21] *** dvee has joined #postfix[10:28:46] *** olegfusion has quit IRC[10:30:43] *** zorg1 has quit IRC[10:32:32] *** zorg1 has joined #postfix[10:32:43] *** cyrilz_ has joined #postfix[10:37:26] *** cillybabe has joined #postfix[10:39:12] *** cillybabe has left #postfix[10:40:37] *** ffiore has quit IRC[10:40:47] *** ffiore has joined #postfix[10:42:31] *** UQlev has quit IRC[10:47:27] *** ffiore has quit IRC[10:57:01] *** davlefou_ has joined #postfix[10:58:32] *** AbrarSyed has joined #postfix[11:00:00] *** davlefou__ has quit IRC[11:00:49] *** wizbit has quit IRC[11:11:07] *** xmj has joined #postfix[11:11:24] <xmj> Hi, is such a line permissible in master.cf? -o smtpd_sender_login_maps=proxy:pgsql:$config_directory/pgsql.cf[11:11:54] <xmj> (assuming i have pgsql.cf to fetch virtual mailboxes from a postgres db)[11:12:07] *** AbrarSyed has quit IRC[11:13:20] *** Anomie_work has left #postfix[11:14:14] *** Abrar|gone has joined #postfix[11:18:44] *** Abrar|gone has left #postfix[11:24:44] *** denis has joined #postfix[11:34:03] *** morse has joined #postfix[11:38:36] *** adaptr has quit IRC[11:38:37] *** morse_ has quit IRC[11:38:38] *** mattcen has quit IRC[11:39:11] *** mattcen has joined #postfix[11:40:09] *** adaptr has joined #postfix[11:49:53] *** cardilack_ has quit IRC[11:54:02] *** alexbst_ has left #postfix[11:57:25] *** davlefou__ has joined #postfix[12:00:43] *** davlefou_ has quit IRC[12:04:21] *** denis has quit IRC[12:19:09] *** denis has joined #postfix[12:25:55] *** ffiore has joined #postfix[12:34:52] *** afuentes has joined #postfix[12:37:00] <pj> !tell xmj welcome[12:37:00] <knoba> xmj: "welcome" : Welcome to #postfix! If you're new here, or to IRC, first read the channel topic (/topic). It has important instructions on how to ask good questions. You will get more and better help if you follow those instructions. Good Luck![12:40:56] *** mage__ has left #postfix[12:44:48] <xmj> pj: thanks for the warm welcome, i always read the topics on join ...[12:45:35] <xmj> the question in this case is whether or not smtpd_sender_login_maps is allowed to have proxies, and if so, if postgres would work.[12:57:53] *** davlefou_ has joined #postfix[13:01:43] *** davlefou__ has quit IRC[13:03:14] *** donmichelangelo has quit IRC[13:04:11] *** donmichelangelo has joined #postfix[13:04:51] *** ffiore has quit IRC[13:05:06] *** ffiore has joined #postfix[13:17:53] *** mysteronyx has joined #postfix[13:18:05] *** mysteronyx has left #postfix[13:21:35] *** Ashva has joined #postfix[13:25:12] *** dvee has quit IRC[13:35:50] *** dvee has joined #postfix[13:39:58] <pj> xmj: no, your question was if a particular line was valid for master.cf. The answer is it looks syntactically valid to me. What I think likely is happening is that something is not working right on your postfix setup and you seem to want to troubleshoot it by guessing at config lines in various files and asking questions about individual lines completely out of any context that could lend any support to being able to give a valid[13:39:59] <pj> answer to the question.[13:40:36] <pj> What you really need to do is tell us what the real problem is and follow the instructions in /topic so we can help you find and fix it properly.[13:40:46] <pj> !tell xmj getting_help[13:40:46] <knoba> xmj: "getting_help" : before asking your question, provide a pastebin which includes relevant log data and your config. see !pastebin, !relevant_logs and !showconfig for instructions on doing this.[13:42:27] <xmj> jee[13:42:34] <xmj> must be hard answering direct questions[13:42:57] <xmj> i have no problem, i wish to enquire about a specific configuration flag's permissible set of values.[13:43:31] *** kiri has quit IRC[13:44:24] <pj> as I said, the syntax looks valid to me. That does not mean it will do whatever it is you expect it to do in your postfix setup.[13:46:07] <xmj> thanks :-)[13:49:28] *** H3bus has joined #postfix[13:49:39] *** H3bus has left #postfix[13:58:29] *** davlefou__ has joined #postfix[14:01:26] *** davlefou_ has quit IRC[14:04:53] *** Section1 has joined #postfix[14:13:48] *** galex-713 has quit IRC[14:18:59] *** ffiore has quit IRC[14:34:54] *** Bronze has joined #postfix[14:41:09] *** denis has quit IRC[14:52:32] *** shal3r has quit IRC[15:00:26] *** davlefou_ has joined #postfix[15:01:10] *** lunaphyte_ has joined #postfix[15:02:35] *** davlefou__ has quit IRC[15:15:57] *** bungalo has joined #postfix[15:28:25] *** lunaphyte_ has quit IRC[15:32:26] *** Kako has quit IRC[15:43:22] *** Lars_G has joined #postfix[15:44:08] <Lars_G> I'm wanting to finally setup my ldap based server (administered via fusiondirectory for ease) and I'm wondering, what are the ups and downs, or basic differences between the virtual delivery and the alias (local) delivery methods?[15:59:39] *** davlefou__ has joined #postfix[15:59:59] *** MaximusColourum has joined #postfix[16:00:22] *** donmichelangelo has quit IRC[16:00:52] *** donmichelangelo has joined #postfix[16:02:39] *** davlefou_ has quit IRC[16:08:31] *** robinho86 has joined #postfix[16:15:56] *** bodom has joined #postfix[16:20:13] *** dvee has quit IRC[16:23:20] *** Ashva has left #postfix[16:25:51] *** olegfusion has joined #postfix[16:30:32] *** dvee has joined #postfix[16:49:56] *** maxter has quit IRC[16:58:35] *** cybrNaut has quit IRC[16:58:35] *** cybrNaut has joined #postfix[17:02:18] *** davlefou_ has joined #postfix[17:02:48] *** davlefou__ has quit IRC[17:09:33] *** galex-713 has joined #postfix[17:15:41] *** hallamigo has joined #postfix[17:16:21] *** gu1lle_ has quit IRC[17:28:56] *** jad_jay has joined #postfix[17:34:48] *** olegfusion has quit IRC[17:36:52] *** Pegasus_RPG has joined #postfix[18:00:23] *** davlefou__ has joined #postfix[18:00:50] *** steven4455 has joined #postfix[18:00:57] *** dimitry7 has joined #postfix[18:03:56] *** davlefou_ has quit IRC[18:06:49] *** stljim has joined #postfix[18:10:42] *** maxter has joined #postfix[18:11:45] *** freezey has joined #postfix[18:12:33] *** jad_jay has quit IRC[18:13:16] <stljim> Hello postifx gurus, I have a postfix server relaying mail. How would I, using the result of 'client=onehost.domain.com' forward/relay all mail from onehost.domain.com to a specific email address? Kinda of a catch-all for that one host?[18:13:42] <stljim> would that be done wihth virtual_alias_domains?[18:15:17] *** jad_jay has joined #postfix[18:15:29] *** afuentes has quit IRC[18:15:51] <xmj> the catchall thing works for me with virtual_mailbox_domains and virtual_mailbox_map being a postgres query over a users table (a at b dot com) and aliases (a@, @b.com, c at b dot com -> a at b dot com)[18:21:02] *** afuentes has joined #postfix[18:22:23] <stljim> xmj: I'm hoping to keep this simple.. (and I'm a mysql not a postfix guy =) .. But I guess I'm wondering if a virtual_alias_domain can be the fqdn of a host and if so, Can (how) would forward all mail from the virtual_alias_domain to a specif email address. Using virtaul_alias_maps work by recipient not source (from what I can tell)[18:23:15] <trurl> what is a decent upper limit for the size of mails? i don't care about the overall mailbox size, "we" are 7 users, there's enough disc space...[18:23:21] <stljim> With source being the client=somehost.domain.com[18:23:34] <xmj> stljim: doesn't have to be. trying out postfix in a VM, with the "real" MX for the addresses i'm trying out far far away[18:24:20] <stljim> trurl: mail should not be used as a file distribuiton method.. LOL.. we've set a limit of 20M.. but that's just us.[18:24:23] <xmj> stljim: no idea, m'bad[18:25:26] <tuxick> krw[18:26:03] <trurl> stljim: 20M is _way_ too small looking at some real life examples...[18:26:03] *** bungalo has quit IRC[18:26:33] <trurl> there are single jpegs that size ;)[18:26:34] <stljim> :xmj Not sure I know the _real_ diff between virtual_alias_domains and virtual_mailbox_domains[18:28:53] <stljim> trurl: IF you're using any mail AV or filtering.. seeing if those have a max size limit might be a good start, beyond that, ask yourself at what point, in terms of file size, should another way be used to distribute a file? 20M, 100M, 500M?[18:30:07] *** donmichelangelo has quit IRC[18:30:25] *** donmichelangelo has joined #postfix[18:31:05] <rob0> stljim, as I said (or perhaps, SHOULD have said) yesterday: no, it is not simple.[18:31:30] <trurl> stljim: i thought there's maybe something like a common value used by most large mx's[18:31:32] <stljim> rob0: Hey there.. yea I'm really wresting with this one[18:32:23] <rob0> I agree with the 20M size. Postfix default is 10 million bytes, but I think you'll see large providers accepting up to 20MB.[18:32:24] <stljim> trurl: we have ~2K users.. and keep our limit low.. that's why god created NTFS/NFS shares[18:33:38] *** dvee has quit IRC[18:33:46] <rob0> trurl, just telnet to various port 25 and look at your EHLO responses.[18:37:09] *** freezey has quit IRC[18:37:34] <jelly> I tell users we accept up to 13MB attachments[18:38:09] <jelly> gross vs. net bytes just makes them more confused[18:38:15] <rob0> It's impossible to be exact about that, yes.[18:38:41] <trurl> gmail: 35M[18:38:50] <trurl> rob0: yeah, good idea[18:39:10] <rob0> You do understand about MIME encoding, right?[18:44:12] <trurl> who?[18:47:17] <trurl> web.de: 70M. mh.[18:49:06] <jelly> how did they come up with exactly SIZE 35882577[18:49:23] <tuxick> made it up[18:50:22] <jelly> it vaguely looks like a calculatory word[18:50:42] <rob0> Not relevant, but related: do you know why good recipes for Irish stew call for exactly 239 beans?[18:50:52] *** err-or has quit IRC[18:51:06] <rob0> Because another bean would make it too farty!</brogue>[18:53:38] *** err-or has joined #postfix[18:56:02] *** freezey has joined #postfix[18:56:14] *** Pegasus_RPG has left #postfix[18:58:50] *** gu1lle_ has joined #postfix[19:00:53] *** davlefou_ has joined #postfix[19:04:22] *** davlefou__ has quit IRC[19:04:33] <stljim> Crap, so virtual_alias_domains = xio99prdora01.blah.com in main.cf and @xio99prdora01.blah.com me at blah dot com in virtual doesn't work![19:05:55] <rob0> well no, I told you yesterday what to try: restriction class and REDIRECT or FILTER action[19:06:01] *** wdp has quit IRC[19:08:46] <stljim> rob0: grumble..[19:10:06] <rob0> sure, you can set a virtual_alias_domains and use a wildcard, but that's global, it won't distinguish by origin client. You need check_client_access for that.[19:10:16] <rob0> !restriction_classes[19:10:16] <knoba> rob0: "restriction_classes" : see !restriction_class[19:10:18] <rob0> !restriction_class[19:10:18] <knoba> rob0: "restriction_class" : postfix per-client/user/etc. access control http://www.postfix.org/RESTRICTION_CLASS_README.html[19:19:09] <stljim> rob0: What about a PCRE header check? I'm still reading access(5).. so I'm not giving up on that either..[19:22:37] *** KNERD has joined #postfix[19:27:43] <stljim> rob0: so I can combine access(5) with header_checks(5) with either regex (wonder if out-of-the-box RHEL6.4 postfix supports pcre or only regex)[19:28:42] *** Cromulent has joined #postfix[19:30:08] *** jarif has quit IRC[19:31:43] <rob0> header_checks offers a subset of access targets. Also note that you cannot check a header which has not yet been added. header_checks are rarely the right answer.[19:31:56] <rob0> (It might work, though)[19:34:00] <rob0> fire call, afk[19:35:54] *** xmj has left #postfix[19:37:12] *** jarif has joined #postfix[19:40:29] *** Cromulent has quit IRC[19:56:32] *** wdp has joined #postfix[19:58:55] *** RalfJ has joined #postfix[20:04:27] *** davlefou_ has quit IRC[20:07:11] *** RalfJ has quit IRC[20:07:30] *** RalfJ has joined #postfix[20:07:56] <RalfJ> Hi everyone - is it possible to configure postfix such that it compares the reolsved HELO hostname with the IP the SMTP connection comes from, and rejects in case of mismatch?[20:13:24] *** dimitry7 has quit IRC[20:14:30] <twobithacker> I don't think so, and you'd probably drop a lot of mail if you did it[20:15:27] <RalfJ> well, I'd like ti find out if I would[20:15:41] <RalfJ> my university's mail server does this, and I kind of like it[20:17:35] <RalfJ> I don't like looking at the rDNS as that would punish people who try to run a mailserver at home and have a crappy ISP - but even in such a situation you could set up a proper dyndns and use that for your HELO name[20:18:05] *** davlefou_ has joined #postfix[20:22:23] <jelly-home> not sure anyone sane runs a mail server at home when a VPS with proper rDNS is 2€ a month[20:24:57] *** olegfusion has joined #postfix[20:36:56] *** rotbeard has joined #postfix[20:39:07] *** Motoko has joined #postfix[20:40:33] *** gencha has quit IRC[20:42:09] *** gencha has joined #postfix[20:43:53] <stljim> will parent_domain_matches_subdomains match a FQDN host.domain.com?[21:02:08] *** davlefou__ has joined #postfix[21:05:13] *** davlefou_ has quit IRC[21:05:57] <RalfJ> is there anything specific I need to set to tell postfix (when operating as client) to present a certificate to the server (client-side SSL authentication)? I set smtp_tls_{cert,key}_file but I am under the impression it doesnt actually use the certificate (theres nothing mentioned in the log, at tls_log_level 2)[21:06:14] *** Toerkeium has joined #postfix[21:25:23] *** Toerkeium has quit IRC[21:25:57] <adaptr> does the server offer TLS?[21:29:41] <RalfJ> adaptr: yes it does, but I just figured out I forgot to set smtpd_tls_ask_ccert=yes[21:30:15] <RalfJ> now I hope this doesnt interfere with regular servers connecting to that port (its not used by clients, so there it doesnt matter)[21:30:22] <RalfJ> but at least authentication works now :D[21:42:30] *** jarif has quit IRC[21:43:37] *** MaximusColourum has quit IRC[21:48:33] *** Toerkeium has joined #postfix[21:48:47] *** jelly has quit IRC[21:49:24] *** jelly has joined #postfix[21:59:21] *** xtetsuji has quit IRC[21:59:53] *** davlefou__ has quit IRC[22:00:15] *** davlefou has joined #postfix[22:05:16] *** davlefou has quit IRC[22:06:33] *** Section1 has quit IRC[22:13:43] *** AbrarSyed has joined #postfix[22:13:46] <AbrarSyed> hi guys[22:13:56] *** stljim has quit IRC[22:14:57] <AbrarSyed> I have postfix running on my debian server... as mail.forgeessentials.com[22:15:14] <AbrarSyed> on the same server, I have an edition of confluence running, under docs.forgeessentials.com[22:15:50] <AbrarSyed> I want to setup Confluence to use postfix as its SMPT server, so confluence can send out email notifcations[22:16:11] <AbrarSyed> but when I have it test the emailing, Postfix says that "relay access denied"[22:16:14] *** olegfusion has quit IRC[22:16:18] <AbrarSyed> http://paste2.org/sHFsaPUk << main.cf[22:16:24] *** Toerkeium has quit IRC[22:18:02] <AbrarSyed> the exact error is this: com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1 <sacabrarsyed at gmail dot com>: Relay access denied[22:18:24] <AbrarSyed> when confluence test-sends an email to sacabrarsyed at gmail dot com[22:18:39] *** davlefou has joined #postfix[22:20:18] <AbrarSyed> and this is from the postfix log[22:20:19] <AbrarSyed> NOQUEUE: reject: RCPT from forgeessentials.com[172.245.18.239]: 554 5.7.1 <sacabrarsyed at gmail dot com>: Relay access denied; from=<confluence at forgeessentials dot com> to=<sacabrarsyed at gmail dot com> proto=ESMTP helo=<forgeessentials.com>[22:21:38] *** Neozonz|Discx2 has joined #postfix[22:21:55] <Neozonz|Discx2> can someone help me with adding a ptr record? (reverse dns)[22:22:55] *** afuentes has quit IRC[22:27:01] *** Toerkeium has joined #postfix[22:29:00] *** Toerkeium has quit IRC[22:45:19] *** RalfJ has quit IRC[22:48:09] *** Lars_G has quit IRC[22:55:16] *** Soran has joined #postfix[22:56:10] <Soran> I have a post fix server set up I have been working almost 24 hours on setting up. I am having an issue I need a little help with, its related with implimenting roundcube[22:56:28] <Soran> I am using saslauth and sql databases for the accounts[22:58:47] <Soran> As soon as I log in to the inbox I get "Server Error: STATUS: STATUS failed" which is reflected in messages as follows....[22:59:42] <Soran> Oct 15 20:59:04 emerald syslog: [3201] C: A0002 STATUS INBOX (MESSAGES UNSEEN) Oct 15 20:59:04 emerald syslog: [3201] S: A0002 NO [ALERT] STATUS failed Oct 15 20:59:04 emerald syslog: [3201] C: A0003 STATUS INBOX (MESSAGES UNSEEN) Oct 15 20:59:04 emerald syslog: [3201] S: A0003 NO [ALERT] STATUS failed Oct 15 20:59:04 emerald syslog: [3201] C: A0004 LOGOUT[23:00:13] <twobithacker> That's nothing Postfix would do.[23:00:17] <twobithacker> That's your IMAP server.[23:00:37] <Soran> Ah... its courier-imap-ssl[23:01:02] <twobithacker> yeah, might want to go ask the courier folks for help :)[23:01:08] <Soran> Will do thanks :)[23:03:25] *** davlefou_ has joined #postfix[23:05:50] *** davlefou has quit IRC[23:06:55] *** jarif has joined #postfix[23:25:41] *** zerick has quit IRC[23:27:12] *** zerick has joined #postfix[23:30:19] *** donmichelangelo has quit IRC[23:30:20] *** AbrarSyed is now known as Abrar|gone[23:30:40] *** donmichelangelo has joined #postfix[23:44:38] *** Patrickdk has quit IRC[23:53:03] *** zerick has quit IRC[23:57:14] *** Patrickdk has joined #postfix[23:58:10] *** bodom has quit IRC