October 16, 2013 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
October 16, 2013 [00:03:19] *** davlefou__ has joined #postfix[00:06:31] *** davlefou_ has quit IRC[00:13:01] *** jarif has quit IRC[00:15:14] *** maxter has quit IRC[00:17:53] *** peapodamus has joined #postfix[00:19:01] <peapodamus> Is there any way to make postfix read mailboxes and/or aliases from a redis DB?[00:20:47] <peapodamus> Or do I need to do some code-hacking for that?[00:21:00] *** wdp has quit IRC[00:26:21] <adaptr> postfix does not read mailboxes, ever.[00:26:23] <adaptr> so, no.[00:27:47] *** sputnik has quit IRC[00:30:04] <peapodamus> but it reads aliases, right?[00:30:12] <peapodamus> Sorry, I see the confusion[00:30:22] <peapodamus> I mean alises to external email addresses[00:30:24] <adaptr> use your terms, good sir.[00:30:37] <peapodamus> Forwarders :P[00:31:12] <adaptr> not an SMTP term[00:31:57] *** kli0rf has joined #postfix[00:34:14] <rob0> what are you wanting?[00:34:18] <rob0> !database[00:34:18] <knoba> rob0: "database" : http://www.postfix.org/DATABASE_README.html provides an overview of how Postfix lookup tables work, and the various types that are implemented.[00:34:56] <rob0> I don't know what "redis" is, but there is definitely no "redis" map type in Postfix.[00:35:45] <adaptr> rob0: some form of evil nosql[00:36:15] <rob0> Nose Query Language?[00:36:59] <adaptr> Nosey Querulous Longnoses[00:40:17] <Motoko> Not SQL.[00:42:18] *** zerick has joined #postfix[00:54:01] *** Quadro has quit IRC[00:54:39] *** jad_jay has quit IRC[01:00:04] *** mtu has joined #postfix[01:01:00] <mtu> hiyas. is it possible to specify per-server mechanisms in the SMTP client? i have a sender-dependent relay host setup, and i need to allow LOGIN for just one single server[01:01:22] <mtu> i would not like to globally allow LOGIN, obviously[01:01:31] <adaptr> why is this obvious?[01:02:01] <mtu> scratch that. i have many relay hosts, i want to avoid making a mistake, and so make sure i allow LOGIN just for that one.[01:02:33] <adaptr> make a new transport. allow login. use transport_maps to isolate the one destination[01:03:46] *** davlefou_ has joined #postfix[01:03:47] <mtu> oh my. so far, i have a relayhost map, a password map and a tls policy map. you're saying i need a transport map as well now?[01:04:44] <adaptr> ...postfix is made up of maps. there are about 100 in total[01:05:14] *** gu1lle_ has quit IRC[01:05:20] <adaptr> !smtp_sasl_mechanism_filter[01:05:20] <knoba> adaptr: Error: "smtp_sasl_mechanism_filter" is not a valid command.[01:05:25] <adaptr> jeebus, dumbot[01:06:11] <mtu> yeah, that's the one. if i put "login" there globally, it works for that one server, but i don't want it allowed globally.[01:06:31] <mtu> i was hoping i could cram that into the relayhost map or the tls map ...[01:07:18] <adaptr> what is a "relayhost map" ?[01:07:25] *** davlefou__ has quit IRC[01:07:36] <adaptr> what is a "tls map"[01:07:36] <mtu> it's what i call my sender_dependent_relay_host map[01:07:46] <mtu> it's what i call my tls_policy map[01:07:50] <adaptr> !sender_dependent_relay_host[01:07:50] <knoba> adaptr: Error: "sender_dependent_relay_host" is not a valid command.[01:07:56] <adaptr> !tls_policy_map[01:07:56] <knoba> adaptr: Error: "tls_policy_map" is not a valid command.[01:08:06] <adaptr> you're going to want to correct those[01:08:48] <mtu> correct names are sender_dependent_relayhost_maps and smtp_tls_policy_maps. what i said was from memory. that setup's been working for a while now.[01:09:00] <mtu> until i needed that one server with LOGIN only ...[01:10:02] <adaptr> loginrelay u - - n - - smtp -o smtp_sasl_mechanism_filter=login[01:10:08] *** Bronz_ has joined #postfix[01:10:11] <adaptr> then route to that in transport_maps[01:10:35] <mtu> that line goes in master.cf, correct?[01:10:39] <adaptr> !master[01:10:39] <knoba> adaptr: "master" : postfix master process. the master(8) daemon is the resident process that runs postfix daemons on demand. see man 8 master or http://www.postfix.org/master.8.html for more info. also see !master.cf[01:10:49] <adaptr> !master_5[01:10:49] <knoba> adaptr: Error: "master_5" is not a valid command.[01:10:58] <adaptr> pfft, inconsistency abounds[01:11:03] * adaptr shoots knoba[01:11:10] *** monkwitdafunk has joined #postfix[01:11:58] *** jad_jay has joined #postfix[01:13:55] *** Bronze has quit IRC[01:19:53] <mtu> !sender_dependent_default_transport_maps[01:19:53] <knoba> mtu: "sender_dependent_default_transport_maps" : A sender-dependent override for the global default_transport parameter setting. The tables are searched by the envelope sender address and @domain. A lookup result of DUNNO terminates the search without overriding the global default_transport parameter setting. This information is overruled with the transport(5) table. Available from postfix 2.7[01:20:26] <adaptr> you could use that in combination with the relayhost maps instead of transport_maps[01:20:33] <adaptr> since the source is the same[01:22:20] <adaptr> if sender_dependent_relayhost_maps holds "login.example.com [loginserver.example.net]", sender_dependent_default_transport_maps would hold "login.example.com loginrelay:"[01:22:51] <adaptr> HOWEVER, you could combine both in transport_maps,and ignore it in relayhost_maps[01:23:12] <adaptr> in this case, that would be the preferred solution. transport_maps overrides everything.[01:23:59] <adaptr> the difference being, of course, that in sender-dependent_* maps the key is the sender. in transport_maps, it is the recipient[01:24:18] <adaptr> you can combine everything with everything, if you like.[01:24:46] <adaptr> if postfix were a swiss army knnife, it would have over 9000 attachments[01:24:54] <adaptr> OVER 9000!![01:24:59] <mtu> i have to do it by the sender, because i cannot predict what recipients will be addressed through that relay[01:25:07] <adaptr> okay[01:25:16] <adaptr> then regular transport_maps is out[01:26:04] <mtu> so sender_dependent_default_transport_maps it is. you're saying the format is: "sender at domain dot foo transport:", right?[01:26:24] <adaptr> it is documented. every single postfix parameter is.[01:27:56] <adaptr> note that transport_maps implies the format transport:[nexthop]:port. you may dispense with the relayhost_maps for those routings[01:28:36] <adaptr> sender at out dot example.net loginrelay:[loginserver.example.org][01:29:46] <mtu> sounds nice. i'll try that once the transport itself appears to work.[01:30:27] <adaptr> how will you test it ?[01:30:41] <adaptr> they're equivalent[01:30:56] <mtu> by using my MUA to send an email with that special from: address[01:31:50] <adaptr> requiring you to have the config in place already. just do it.[01:37:08] *** master_o1_master has joined #postfix[01:38:06] *** xtetsuji has joined #postfix[01:39:18] <mtu> hot damn, it works[01:39:19] <mtu> awesome[01:40:43] *** master_of_master has quit IRC[01:43:22] *** mtu has quit IRC[01:44:09] <adaptr> well, you're welcome. or something.[01:44:15] *** loompek has joined #postfix[01:44:22] <loompek> mornin guys, smee again[01:44:59] *** hallamigo has quit IRC[01:46:40] <loompek> so.. postfix's smtp client presents a warning when connecting to another system via TLS and the cert is signed with untrusted CA... "certificate verification failed for ..."[01:47:31] <adaptr> and then sends it anyway[01:47:32] <loompek> and i was just wondering.. is there any way to know when postfix's smtp client connects to another system which uses a trusted TLS cert[01:47:52] <loompek> if the client is using TLS or not?[01:47:54] <adaptr> nope. it doesn't care.[01:48:02] <loompek> okay[01:48:11] <adaptr> it doesn't do server verification, just encryption[01:48:53] <adaptr> there's a long thread on the ML a few months back if you want details[01:50:23] <loompek> adaptr do you happen to know the subject?[01:50:58] <adaptr> I will take a look in my archives[01:53:16] <loompek> How best to eliminate "domain mismatch" warning in mail clients when TLS is used[01:53:20] <loompek> maybe this one?[01:53:25] <adaptr> Another "certificate verification failed ... untrusted issuer" question[01:53:38] <adaptr> victor answers; he should know, he wrote the damn code.[01:53:53] <adaptr> his answer is: email doesn't really care, ignore.[01:54:18] <adaptr> but the thread also shows he added extra logging in 2.9 or 2.10[01:54:24] <adaptr> you could check that out[01:54:35] <loompek> awsome[01:55:06] <loompek> old posts... january 2k11[01:55:49] <adaptr> you could trawl through victor's posts on TLS for weeks. he implemented it.[01:55:58] *** twb has joined #postfix[01:56:19] *** twb has joined #postfix[01:57:44] <loompek> ya..[01:57:48] <loompek> thanks for the info[01:59:33] *** monkwitdafunk has quit IRC[02:00:08] *** rob0__ has quit IRC[02:04:28] *** davlefou__ has joined #postfix[02:07:18] *** davlefou_ has quit IRC[02:09:21] *** higuita has quit IRC[02:11:45] *** freezey has quit IRC[02:31:19] *** Motoko has quit IRC[02:38:38] *** higuita has joined #postfix[02:50:21] *** Quadro has joined #postfix[02:50:31] *** Neozonz|Discx2 has quit IRC[02:53:46] *** lunaphyte_ has joined #postfix[02:54:23] *** Soran has quit IRC[03:04:42] *** davlefou_ has joined #postfix[03:08:10] *** davlefou__ has quit IRC[03:13:34] *** Bronz_ is now known as Bronze[03:31:17] *** Motoko has joined #postfix[03:45:39] *** zerick has quit IRC[04:06:01] *** monkwitdafunk has joined #postfix[04:06:31] *** monkwitdafunk has joined #postfix[04:07:45] *** davlefou_ has quit IRC[04:19:35] *** joules has joined #postfix[04:21:05] <joules> hi, email hosting? currently we host our mail server in house, works great. What are things I need to consider when choosing a hosting provider for an email server?[04:21:44] *** davlefou_ has joined #postfix[04:22:59] <twb> Do you trust them[04:23:30] *** joules is now known as fatass[04:23:45] <Motoko> fatass, it depends on your needs.[04:24:28] <Motoko> Do you have privacy concerns or work with any industry where you need to follow certain privacy restrictions (HIPPA, etc)?[04:24:35] *** fatass is now known as joules[04:24:37] <joules> sorry[04:24:39] <joules> how rude.[04:24:42] <Motoko> What platform do you want to use?[04:25:16] <Motoko> Are you going to go fully hosted, or more like VPS/dedicated and you run your own?[04:25:18] <joules> an email server is a long term commitment (as you know).[04:25:45] <Motoko> Do you need to worry about US law/jurisdiction?[04:26:53] <Motoko> Can you answer those?[04:28:58] <joules> It would probably be a dedicated solution (not VDS).[04:29:37] <Motoko> So, not a hosted solution.[04:29:59] <Motoko> You'd be running the server directly.[04:31:53] <joules> Motoko: before VPS, VDS well just still called them hosting providers.[04:32:01] <joules> hmm[04:33:03] *** kli0rf has quit IRC[04:34:51] <joules> expensive too.[04:35:01] <Motoko> Huh?[04:38:29] <joules> which companies host their own email server?[04:39:03] <Motoko> A lot do, but they won't expicitly advertise it.[04:39:09] <Motoko> No reason to.[04:39:33] <joules> ok.[04:39:49] <joules> subway use mailcontrol.com.[04:39:54] <Motoko> You're more likely to find names of ones using outside services.[04:39:56] <joules> someone smaller.[04:40:03] <joules> yeh[04:40:29] <Motoko> Keep in mind some of the MX records are for outsourced anti-spam filtering services.[04:40:32] <Motoko> Which make some sense.[04:41:02] <Motoko> mailcontrol.com = Websense.[04:41:12] <Motoko> Likely an anti-spam/anti-virus gateway.[04:41:29] <twb> That's why spammers try MXs out of order to bypass them[04:42:14] <Motoko> I might be biased, but Rackspace works really well for hosting.[04:42:25] <Motoko> (The company where I work is a RS Pro Services partner.)[04:42:36] <Motoko> Not the cheapest, but they are very reliable.[04:42:48] <Motoko> Both dedicated and VPS (CloudServer).[04:42:55] <twb> I mostly just host crap on the end of $customer's dinky ADSL connection[04:43:10] <twb> And if they don't like it they buy gmail for businesses I think[04:43:42] <joules> twb: yep.[04:44:13] <Motoko> A small CloudServer is only about $50/mo.[04:44:22] <Motoko> With guaranteed uptime, etc.[04:44:35] <joules> I don't think their is a grey area for email hosting, either host locally over whatever you've been provided with, or go large and dedicated and provide services to multiple clients.[04:44:41] <twb> Didn't say I was doing it the best way[04:44:42] <Motoko> I mean, if you want fully managed, it's more.[04:44:56] <Motoko> joules, depends on the client.[04:45:13] <Motoko> Ones that need to comply with privacy restrictions often have to have their own closed solution.[04:45:29] <joules> Motoko: VPS for email hosting? what about IP rep?[04:45:42] <twb> joules: buy a static iP[04:46:06] <Motoko> joules, depends on the provider.[04:46:08] <joules> Its not a matter of just not liking them 12months later and going somewhere else and taking your domain name elsewhere, you'll get a new IP.[04:46:37] <twb> Ideally do it in 1990 when you can get a class B for the cost of getting someone drunk[04:46:54] <Motoko> If you need assigned portable IPs, then you're looking at a lot more expense since the provider would need to set up routing and BGP entries and maintain all that.[04:47:28] <joules> that IP is a long term commitment.[04:47:32] <twb> agree apart from "maintaining" a BGP for a portable IP is not that hard[04:48:00] <Motoko> twb, still a pain for providers and they will make sure to charge you for it.[04:49:11] <joules> wow, almost everyone has a third party mx entry.[04:49:25] <twb> I do but only teergrube[04:49:26] <Motoko> A lot of them would be av gateways.[04:49:45] <joules> in and out?[04:49:45] *** err-or_ has joined #postfix[04:49:57] <joules> I could just do that, and pay for their rep.[04:50:32] <twb> I think you're overly fixating on "IP reputation"[04:50:44] <Motoko> Inbound usually.[04:50:48] <joules> yeh?[04:50:56] <Motoko> IP reputation can be cleaned up.[04:51:06] <joules> hmm[04:51:14] <Motoko> Also, it's not a huge commitment to change it.[04:53:21] <joules> I asked on webhostingtalk.com and realised I was on *web*hostingtalk and wasting my time.[04:53:29] *** err-or has quit IRC[04:53:57] <twb> Meh; web fora are populated by people too stupid to configure a newsreader.[04:55:05] <joules> I guess a hosting provider that has experience with customers hosting email servers.[04:55:32] <Motoko> Rackspace.[04:55:40] <Motoko> Like I said, expensive but awesome.[04:55:51] <Motoko> Not too bad if you go unmanaged.[04:56:05] <Motoko> If you want unmanaged, there is also Linode.[04:56:13] <Motoko> But I'd still pick RS.[04:56:58] <Motoko> I once had them helping manage a really patched together qmail system.[04:57:08] <Motoko> (qMail + vpopmail + Squirrelmail)[04:57:39] <Motoko> (Plus tons of patches to make qMail sane. And a Postfix av gateway in front with AMaViSd-new.)[04:58:14] <joules> thinking of using cyrus (currently using dbmail...its choking).[04:58:15] <Motoko> Given, that was on their managed dedicated side, but they actually helped a bit when there were issues.[04:58:48] <twb> dovecot beats cyrus[04:58:50] <Motoko> Just provide instructions on what stuff to try in the case of an alert and they'll give it a shot.[04:58:57] <Motoko> Seconded on Dovecot.[04:59:30] <joules> my cat is named cyrus.[04:59:53] <twb> don't choke your cat[05:00:11] <joules> He ran away for 12 months..nother story.[05:01:18] <joules> I'm in .au so I suppose the closet DC would be Tokyo (linode).[05:02:08] <Motoko> Probably.[05:02:15] <Motoko> http://www.rackspace.com/cloud/[05:02:58] <Motoko> They have a DC in Sydney.[05:03:17] <joules> way better![05:03:44] <Motoko> $43.80 per month for 1GB memory.[05:04:11] <Motoko> You can test speed and connectivity at http://www.rackspace.com/information/aboutus/datacenters/. See bottom of page.[05:04:13] <twb> Depends if you want to reach au or reach the real world[05:04:30] <Motoko> I'm in California and get 20mbit.[05:04:52] <twb> Motoko: to au?[05:05:01] <Motoko> To their SYD DC.[05:05:20] <twb> huh.[05:05:22] <joules> twb: give GPS of real world...[05:05:34] * peapodamus likes http://digitalocean.com better than rackspace[05:05:50] *** davlefou__ has joined #postfix[05:05:52] <joules> peapodamus: thanks![05:06:23] <peapodamus> joules: Np :) I've used them for about a year now and never had a problem[05:06:38] <peapodamus> their support ticket response time is like 2 minutes :P[05:07:06] <peapodamus> and they have an irc channel lol[05:07:07] *** whoami has quit IRC[05:07:14] <peapodamus> what's not to love?[05:07:16] <joules> email host?[05:07:33] <joules> what are you running there.[05:07:37] *** whoami has joined #postfix[05:07:43] <Motoko> Interesting routing for me.[05:08:30] <peapodamus> joules: I ran an email server there for awhile, just got a droplet, SSHed into it and ran "apt-get update && apt-get upgrade && tasksel"[05:08:34] <peapodamus> and selected "Mail Server"[05:08:37] <peapodamus> and it installed it :)[05:09:00] *** davlefou_ has quit IRC[05:09:09] <Motoko> Verizon GNI -> AlterNET -> TATA -> TPG -> Pipe Networks -> RS[05:10:04] <joules> peapodamus: all .us besides Amsterdam[05:10:38] <peapodamus> joules: Oh, I missed that you needed a non-us one[05:10:38] <Motoko> Oh, seems TPG owns PIPE.[05:10:41] <peapodamus> My bad![05:10:59] <joules> us is the world :)[05:11:21] <joules> "All your internets belong to U.S." heh[05:14:22] <joules> hehe[05:14:31] * joules is in live chat with rs[05:15:39] <Motoko> You're welcome to mention our company name if you think it'll help. I think only the US teams have heard about us currently, though.[05:16:14] <joules> oh sure about that? (locality?)..I give them a quiz.[05:16:17] <joules> him/her[05:16:23] <Motoko> Huh?[05:16:50] <joules> [Visitor] WHO WON THE GRANDFINAL YOU HAVE 5secs[05:16:58] <Motoko> ...[05:17:00] <joules> me and live chat == bad[05:17:26] <joules> Motoko: checking the locality of this agent.[05:17:38] <joules> he/she failed.[05:17:39] <Motoko> It might be a US agent.[05:17:54] <Motoko> Most of their CloudServer sales people are out of Dalas, Texas.[05:18:09] <Motoko> You can always ask if they have anyone in Sydney you can talk to.[05:19:06] <joules> Hong Kong support.[05:19:23] <Motoko> Ah. That works too.[05:25:23] <Motoko> I'm interested in how the chat works out.[05:29:47] <joules> Motoko: what distro are you running? I run debian unstable at home and wheezy in parts - don't think I could handle a whole "freeze" lenny->wheezy crap again.[05:29:59] <Motoko> Fedora 19 right now.[05:32:00] *** jarif has joined #postfix[05:32:03] <joules> All ask about the "Australian Grand Final happy day sale!"[05:35:44] <joules> would you go VDS and virtualise a host for email services or just seperate VPS for email?[05:37:58] <Motoko> Depends on your needs.[05:38:23] <jimpop> DO doesn't have ipv6 (it's 2013!!)[05:38:48] <thumbs> jimpop: no one needs IPv6![05:38:57] <waldi> everyone needs it[05:39:11] <joules> no its "when" everyone needs it.[05:39:18] <waldi> now[05:39:30] <joules> thats what she said.[05:39:34] <thumbs> waldi: I was being sarcastic.[05:39:41] <Motoko> For APNIC, I believe all IPv4 blocks are assigned.[05:39:52] <Motoko> Nothing free, it's down to whatever the provider was able to get.[05:40:12] <jimpop> and RS is overpriced, way overpriced (IBM level prices!). A solid VPS in an awesome dc with class A network should cost no more than $20/month[05:40:56] <jimpop> look into Host Virtual, NetOrigin, SG Host[05:41:23] <joules> crucial?[05:42:01] <jimpop> Crucial is OK... over priced tho. NetOrigin has the same at less, and has offices in both Sydney and Perth[05:42:43] <jimpop> if you want AU cheap (but still quality) go with RansomIT[05:43:24] <joules> but are they stupid?[05:43:42] <jimpop> no, and all those have native IPv6[05:43:55] <jimpop> and are run by networking gear heads[05:44:12] <joules> jimpop: who are you with?[05:44:18] <jimpop> myself[05:44:26] <joules> hmm[05:44:59] <jimpop> but i've spent the past year leasing and evaluating VPSes (for fun! and experience)[05:45:18] <jimpop> and OMG! the things I've run into ... but I digress[05:46:24] <joules> quite frankly I'll host a web page on any old hosting provider...[05:46:38] <joules> cheaper the better too.[05:46:43] <jimpop> but what if you have a worldwide audience ?[05:47:07] <jimpop> da.da.daaah![05:47:22] <joules> the moon[05:47:28] <joules> that orbits the earth.[05:48:05] <jimpop> i use to think that a single host in NYC was good enough.. then I started playing around with APDEX scores and Pingdom RUM[05:48:59] <jimpop> it took 6 months, and (at one time 13 VPSes) now 8 VPSes to cover the world and achieve an .98 APDEX score.[05:49:16] <joules> cool[05:49:20] <joules> however![05:49:23] <twb> ping times to luna are sucky[05:49:44] <joules> in .au what provider would you recommend for hosting an email service?[05:50:03] <jimpop> tbh, i like RansomIT[05:50:22] <joules> rs says 18.98USD + (0.20c * GB)[05:50:39] <jimpop> how many emails?[05:50:50] <joules> 50[05:51:45] <jimpop> you can get a .5GB SSD w/6GB disk for $14/mo (with ipv6!) from RansomIT[05:52:01] <jimpop> possibly even 1GB mem[05:52:18] <jimpop> non-SSD around $14/quarter[05:54:36] <joules> adelaide vps right?[05:54:41] <jimpop> yep[05:55:44] <jimpop> of all the vps providers i've delt with, my vps in Adelaide has been the most stable[05:56:16] <twb> probably because it's hanging off internode who aren't clueless assholes[05:56:23] <joules> are yo affilicated with them?[05:56:29] <jimpop> nope[05:56:33] <jimpop> just a happy customer[05:56:33] <joules> internode.[05:56:35] <joules> hmmm[05:57:36] <Motoko> For my personal stuff, I'm using a small provider where I know the owner.[05:57:46] <Motoko> It's a dedicated and is about $80/mo.[05:58:09] <Motoko> Quad-core i3 @ 2.7gHz with 4G memory.[05:58:49] <twb> I'm internode's customer[05:58:56] <joules> same[05:59:08] <twb> They, and Hackett in particular, have a track record of being clueful[05:59:20] <twb> Of course, now iinet merged with internode, it's going downhill[06:00:11] <joules> well, they are just a telstra reseller for me..so heh.[06:00:11] *** donmichelangelo has quit IRC[06:00:25] <jimpop> joules: go on www.lowendbox.com and www.lowendtalk.com and check out reviews[06:00:28] *** donmichelangelo has joined #postfix[06:00:36] <joules> had naked once, it was awesome, neighbour was a bitch, so i moved out :([06:00:51] <jimpop> lol[06:02:58] <joules> rs does have openstack.[06:03:03] <joules> but who cares.[06:03:25] <jimpop> joules: http://lowendbox.com/blog/ransomit-21quarter-1gb-ssd-kvm-in-adelaide-australia/[06:03:37] <jimpop> $21/quarter for 1GB SSD[06:05:04] <joules> only paypal?[06:05:58] <jimpop> yep, most vps providers are paypal, 2co, or such. Too much risk with direct cards[06:06:08] *** davlefou_ has joined #postfix[06:06:42] <Motoko> I'm a Verizon FiOS customer for my home net.[06:06:51] <jimpop> if you process cards these days the requirements are strict and outrageous, and then the cc companies still gouge the small merchants[06:06:53] *** davlefou__ has quit IRC[06:07:42] <joules> I'm sure paypal are more than our eftpos/cc surcharges.[06:08:17] <Motoko> Depends. PayPal can take a good chunk depending.[06:08:27] <jimpop> but still less than the PoS requirements/auditing/etc[06:13:05] <joules> oh my rs livechat!![06:13:32] *** UQlev has joined #postfix[06:15:13] <Motoko> ?[06:18:13] <joules> KVM 512 MB 10 GB HDD or 5 GB SSD 1 100 GB $9 p/month (paid quarterly) - thats pretty good.[06:18:41] <jimpop> and you can always change it[06:20:25] <joules> rs for the above config is $17/mo[06:23:22] *** rob0__ has joined #postfix[06:23:22] *** rob0__ has joined #postfix[06:24:22] *** jarif has quit IRC[06:27:04] <joules> jimpop: Don't think I could go with ransomIT to host a mail server...[06:27:50] <jimpop> i'm curious why?[06:29:02] <jimpop> 17/mo for RS is not bad.[06:29:10] <joules> no SLA[06:29:26] <joules> thats why that are cheap.[06:29:43] <joules> imap is storing "other peoples stuff".[06:30:00] <jimpop> most vps providers just do a "free month" sort of sla[06:30:21] <jimpop> but yeah, you have to go with big outfit to get something in writing[06:30:26] <joules> yes but ransomIT have NO SLA![06:30:27] <joules> hehe[06:30:43] <joules> an "oops sorry! hahaha" would suffice.[06:30:54] <jimpop> well, i've never seen a need for one there ;-)[06:30:59] <joules> ..from their perspective.[06:31:36] <jimpop> AU is the only part of the world where i have 1 A/AAAA record coverage. never a blip[06:31:44] <twb> in au there are fitness-for-purpose requirements[06:32:07] <twb> Like if you buy a sheepdog and it turns out to be a rock, you're allowed to take it back and say "does not bark"[06:32:13] <joules> twb: good luck with that...[06:32:23] <twb> Dunno if that translates into an implied SLA for services[06:32:38] <joules> and end up whinging on whirlpool ;)[06:32:44] <jimpop> lol[06:32:53] <joules> "not fit fur purpus!"[06:33:10] <jimpop> joules: if you can get RS + SLA for 17/mo, that's a pretty good deal[06:33:29] <joules> yeh.[06:33:37] <twb> My nihilist attitude is that there will be outages and even if there's a warranty or loophole, they'll wiggle out of it. So don't bother even trying, just implement all the reliability assurance yourself (like, buy three units so you have two spares)[06:33:48] <twb> *warranty or SLA[06:34:56] <twb> Although in practice lately I've just been handballing it to a junior and they can sit on hold and talk to idiot first-level IBM/HP/Dell/whatever tech support for five hours[06:35:11] <joules> you don't see it on whirlpool? "arrghh..umm DDoS cancel heem!" "Wasn't a ddos" "ahh..yes it was! your service has been cancelled" "Wahhh"[06:36:26] <Motoko> SLAs get expensive.[06:36:39] <Motoko> All the cheap providers will usually be "best effort".[06:36:53] <twb> Motoko: well the internet is best effort :P[06:36:57] <twb> THat's what packet switching is[06:37:05] <twb> <pedantic>[06:38:00] <Motoko> ...[06:38:49] <twb> never mind[06:46:40] <joules> this live chat is sucking.[06:47:05] <joules> I mention email and she cutsnpastes their email hosted exchange services.[06:47:17] <jimpop> :-)[06:47:32] <joules> $10 per mailbox per month :)[06:47:36] <jimpop> they are big in hosted Exchange[06:48:27] <Motoko> They also have normal hosted mail.[06:48:40] <Motoko> And yes, if you mention mail services, they'll direct you to their hosted offerings.[06:48:53] <Motoko> (Which are nice, but if you want to host yourself)[06:50:33] *** shal3r has joined #postfix[06:50:50] <joules> Well the issue is I have to pipe certain emails to our local application.[06:51:19] <joules> ![06:51:26] <joules> [Brooke] However, ee dont usually recommend hosting email on our cloud servers, as there is the possibility that the IP of your server may be blacklisted, if a large number of email are sent from that IP, it may appear as spam[06:52:06] <joules> is she providing advice or saying im going to become a spammer?[06:52:15] <joules> how did she know?[06:52:19] <joules> :)[06:52:29] <jimpop> she's saying that if you are a spammer she can easily switch IPs for you[06:52:37] <joules> awesome![06:52:43] <jimpop> :P[06:53:41] <joules> no one runs their own stuff anymore :([06:54:02] <Motoko> She's just saying that IPs are reused, so you might get an IP that was previously blacklisted.[06:54:14] <joules> just put googles mail servers in your dns and forget it.[06:54:37] <Motoko> As long as you keep the server up, it'll maintain that IP and you can always manage your own blacklisting cleanup.[06:55:05] <joules> well I've come full circle.[06:55:09] <Motoko> I've run outgoing mail relays on CloudServer machines without issues.[06:55:52] <joules> the prevalent protocol that runs on the cloud is HTTP and everything else is WTF.[06:56:13] <Motoko> Well, they won't guarantee clean IP space. Not on that segment.[06:56:21] <Motoko> Not normally a problem.[06:56:23] <jimpop> joules: more like VPN[06:56:42] <joules> well public facing stuff.[06:58:42] *** nesthib has quit IRC[06:59:21] *** Guest931 has joined #postfix[06:59:54] <jimpop> joules: probably game servers then[06:59:55] <joules> Motoko: no she was referring to me...[07:00:03] <joules> [Brooke] We will not allocate blacklisted IPs[07:00:16] <jimpop> that's pretty cool of them[07:00:18] <joules> [Brooke] We check them before they are distributed[07:09:27] *** davlefou_ has quit IRC[07:11:22] <joules> Motoko: now talking about *Dos[07:11:48] <joules> breaking them in ( got transfered to the .au support desk).[07:11:50] <joules> :)[07:13:09] <twb> Kinda depends what RBL you're talking about, surely?[07:14:06] <joules> jimpop: reading some posts on whirlpool about ventraip cancelling services for alot of game services (looks like DDoS!).[07:14:11] <joules> they seem like idiots.[07:15:00] <jimpop> joules: it pays to read the reviews ;-)[07:15:01] <Motoko> Much of it is the front-line support people. They won't do the major heavy work.[07:15:29] <Motoko> They'll do a ticket and the backend engineers handle it.[07:23:01] *** davlefou_ has joined #postfix[07:33:50] *** UQlev has quit IRC[07:47:54] *** Motoko has quit IRC[08:07:27] *** davlefou__ has joined #postfix[08:10:27] *** davlefou_ has quit IRC[08:15:25] *** twb has quit IRC[08:50:27] *** nbg has quit IRC[09:00:40] *** maxter has joined #postfix[09:04:24] *** Elisha has joined #postfix[09:07:45] *** davlefou_ has joined #postfix[09:10:28] *** davlefou__ has quit IRC[09:13:52] *** smue has quit IRC[09:15:55] <joules> never used dovecot.[09:16:17] <joules> only cyrus and dbmail.[09:17:19] *** smue has joined #postfix[09:21:09] *** maxter has quit IRC[09:22:30] *** afuentes has joined #postfix[09:23:40] *** olegfusion has joined #postfix[09:28:57] *** jarif has joined #postfix[09:32:25] *** kli0rf has joined #postfix[09:32:50] *** kli0rf is now known as sputnik[09:39:12] *** lunaphyte_ has quit IRC[09:39:39] *** jad_jay has quit IRC[09:42:51] *** Bronze has quit IRC[09:47:02] *** davlefou_ has quit IRC[09:47:20] *** davlefou has joined #postfix[09:57:55] *** thelamest has quit IRC[10:08:19] *** davlefou_ has joined #postfix[10:09:03] *** wdp has joined #postfix[10:09:03] *** wdp has joined #postfix[10:11:07] *** davlefou has quit IRC[10:11:52] *** davlefou_ has quit IRC[10:12:12] *** davlefou has joined #postfix[10:13:03] *** Tabmow has quit IRC[10:16:51] *** dvee has joined #postfix[10:25:38] *** Tabmow has joined #postfix[10:29:01] *** [diablo] has joined #postfix[10:30:49] *** Bry8Star has quit IRC[10:39:06] *** Bry8Star has joined #postfix[11:07:51] *** wdp has quit IRC[11:08:20] *** wdp has joined #postfix[11:08:34] *** davlefou_ has joined #postfix[11:11:28] *** davlefou has quit IRC[11:25:17] *** shal3r has quit IRC[11:31:52] *** shal3r has joined #postfix[11:44:19] *** loompek has quit IRC[11:44:37] *** loompek has joined #postfix[11:51:11] *** loompek has quit IRC[12:07:05] *** dvl has left #postfix[12:09:04] *** davlefou__ has joined #postfix[12:12:30] *** davlefou_ has quit IRC[12:42:45] *** joules has quit IRC[12:51:53] *** Ashva has joined #postfix[12:53:42] *** ludv has joined #postfix[12:55:56] <ludv> Hi, I have a weird thing going on. Unsolicited e-mails are getting somehow mangled up with other solicited e-mails. The headers of an UCE has been attached to the body of an authentic e-mail. I'm not sure what this is about and why it's happening, but it seems like a malfunctioning of either Postfix or Dovecot. I can post my configuration, but is this a common problem?[12:56:45] *** Ashva has quit IRC[12:57:12] <ludv> In fact other e-mails are getting broken up into nonsensical parts, like half of one message's body is attached to the headers of another.[12:57:17] <ludv> (Could it be my mail client?)[12:57:38] <ludv> Never mind, seems like an issue with the mail client. :S[12:57:43] <ludv> Very very odd. Restarting it worked.[12:58:16] <ludv> Very concerning if not anything else.[13:02:49] *** davlefou__ has quit IRC[13:03:10] *** davlefou has joined #postfix[13:03:31] *** donmichelangelo has quit IRC[13:03:55] *** donmichelangelo has joined #postfix[13:09:36] *** davlefou_ has joined #postfix[13:12:45] *** davlefou has quit IRC[13:14:24] *** tjikkun_work has quit IRC[13:37:31] *** tjikkun_work has joined #postfix[13:56:32] *** Guest931 has quit IRC[13:56:32] *** Guest931 has joined #postfix[13:56:40] *** Guest931 is now known as nesthib[14:11:22] *** Section1 has joined #postfix[14:12:21] *** davlefou_ has quit IRC[14:27:04] *** davlefou_ has joined #postfix[14:31:47] *** dvee has quit IRC[14:37:45] *** MaximusColourum has joined #postfix[14:38:09] *** ahref has joined #postfix[14:45:11] *** diabel has quit IRC[14:45:42] *** dvee has joined #postfix[14:46:07] *** diabel has joined #postfix[15:10:30] *** davlefou__ has joined #postfix[15:12:27] *** Quadro has quit IRC[15:13:31] *** davlefou_ has quit IRC[15:18:51] *** ahref has quit IRC[15:19:57] *** muh2000 has quit IRC[15:26:17] *** asyd has joined #postfix[15:30:29] *** muh2000 has joined #postfix[15:42:04] *** freezey has joined #postfix[15:44:22] *** sniffells has joined #postfix[15:46:19] *** kiri has joined #postfix[15:56:27] *** freezey has quit IRC[15:59:06] *** freezey_ has joined #postfix[16:00:06] *** donmichelangelo has quit IRC[16:00:47] *** donmichelangelo has joined #postfix[16:01:51] *** freezey_ has quit IRC[16:02:07] *** freezey has joined #postfix[16:02:15] *** lunaphyte_ has joined #postfix[16:04:21] *** freezey has quit IRC[16:04:43] *** freezey has joined #postfix[16:08:14] *** robinho86 has quit IRC[16:11:09] *** davlefou_ has joined #postfix[16:14:15] *** davlefou__ has quit IRC[16:19:31] *** jaybe has quit IRC[16:23:19] *** jaybe has joined #postfix[16:32:04] *** jleclanche has joined #postfix[16:33:48] *** bungalo has joined #postfix[16:35:34] <jleclanche> i receive email on jleclanche at example dot com. i have dns set up so example.com has an mx record to mail.example.com. and the latter has an A to my server's ip. in postfix/main.cf, should myhostname be example.com or mail.example.com?[16:38:02] <lunaphyte_> it should be whatever the hostname of the server is[16:39:07] <jleclanche> lunaphyte_: that makes it example.com, same as mydomain, is that normal?[16:39:45] <lunaphyte_> your server's hostname is your domain name? that is not wise.[16:39:51] <lunaphyte_> give your server an actual hostname.[16:40:24] <jleclanche> you mean the machine's hostname? right, no its not example.com[16:42:03] <lunaphyte_> the server.[16:42:05] <lunaphyte_> the computer.[16:42:07] <lunaphyte_> e.g.[16:42:27] <lunaphyte_> "[10:38am] lunaphyte_: it should be whatever the hostname of the server is"[16:59:29] *** jax has joined #postfix[16:59:31] <jax> hello[16:59:52] <jax> is it normal that a postqueue -f with 300 requests in it takes like 10 seconds to process 8?[17:00:38] <Dominian> depends on why they were in the queue in the first place[17:00:52] <jax> amavisd died[17:01:02] <jax> temporarily suspended - cannot connect to 127.0.0.1:20041[17:01:12] <Dominian> you've confirmed amavisd is back up?[17:01:19] <jax> yes, just restarted it[17:01:26] <jax> and see how it is delivering now[17:01:30] <jax> just seems slow though[17:01:33] <Dominian> I've not had an issue with it before.. sometimes it takes a few minutes for it to catch up[17:02:12] *** dvee has quit IRC[17:02:53] <jax> processes 2 in 10 seconds...[17:04:50] *** peapodamus has left #postfix[17:06:09] *** Ashva has joined #postfix[17:06:29] <jax> must be the whole amavis/clam/spamassissin stuff they are all going through[17:08:06] <Dominian> possibly[17:08:23] <Dominian> how many amavis children do you spawn?[17:08:48] <Dominian> $max_servers[17:09:49] *** Cromulent has joined #postfix[17:12:18] *** davlefou__ has joined #postfix[17:14:35] *** davlefou_ has quit IRC[17:17:34] *** Cromulent has quit IRC[17:21:02] *** [diablo] has quit IRC[17:21:22] *** hallamigo has joined #postfix[17:27:56] <patdk-wk> I spawn 45[17:31:20] *** zerick has joined #postfix[17:32:09] <tuxick> for just spamassassassassin and clamav you could use milters[17:32:22] <tuxick> SA is ram resource hungry anyway[17:36:15] <jax> checking[17:36:54] <jax> max_servers = 2[17:36:57] <jax> max_requests = 20[17:37:00] <jax> might be the problem… ;)[17:37:12] <tuxick> there's spamass-milter and clamav-milter anyway[17:37:14] <tuxick> heh[17:37:50] <jelly> wasn't at least one, or maybe both of those, deprecated years ago[17:37:56] <tuxick> but uhm, postqueue because of amavis? you filter outgoing?[17:38:07] <tuxick> jelly: i used both until recently[17:38:15] <tuxick> now switched to assp[17:38:24] <jax> the mail in postqueue was incoming[17:38:25] *** igalic has joined #postfix[17:38:31] <igalic> Hello happy people o/~[17:39:06] <asyd> just curious, it is possible to disable bounce in postfix?[17:40:20] <tuxick> huh?[17:40:40] <jax> increased it to 10 now, and also in master.cf for the amavis-smtp[17:41:04] <jax> thanks![17:41:06] <igalic> I'm trying to configure my remote servers' postfix instances to use my mailserver (also postfix) as relayhost. I've set: relayhost = [mail.brainsware.org]:submission (because I'd like this encrypted), but now I'm getting: dsn=5.7.1, status=bounced (host mail.brainsware.org[176.9.94.134] said: 554 5.7.1 <panic.esotericsystems.at[176.9.94.133]>: Client host rejected: Access denied (in reply to RCPT TO command))[17:42:10] <waldi> check the log. this is most likley a check_client_access in smtpd_*_restrictions[17:42:26] <waldi> asyd: no. fix the real problem[17:42:44] <asyd> waldi: ok thanks[17:42:49] <igalic> This is the main mail server's config: http://sprunge.us/ahZK --[17:43:02] *** jax has quit IRC[17:44:04] *** kiri has quit IRC[17:44:14] *** ffiore has joined #postfix[17:44:34] <igalic> waldi: to my uneducated eye this /should/ work.[17:44:37] *** mibofra has quit IRC[17:44:45] *** kiri has joined #postfix[17:44:48] *** mibofra has joined #postfix[17:44:56] <waldi> igalic: please show logging from thie system[17:45:14] *** mibofra has joined #postfix[17:45:21] *** mibofra has quit IRC[17:45:22] *** mibofra has joined #postfix[17:45:36] <waldi> zimbra and many timeout overrides. really?[17:47:52] <igalic> Yes, yes. Really.[17:53:26] <waldi> which postfix version is this?[17:59:24] <igalic> waldi: 2.10.0..[18:04:11] *** Eagleman has quit IRC[18:05:11] *** cyrilz_ has quit IRC[18:10:18] *** Eagleman has joined #postfix[18:10:40] *** Eagleman has quit IRC[18:11:05] *** freezey has quit IRC[18:11:48] *** Eagleman has joined #postfix[18:11:55] *** davlefou_ has joined #postfix[18:15:57] *** davlefou__ has quit IRC[18:30:07] *** donmichelangelo has quit IRC[18:30:26] *** donmichelangelo has joined #postfix[18:40:01] *** ffiore has quit IRC[18:42:11] *** freezey has joined #postfix[18:43:33] *** Pegasus_RPG has joined #postfix[18:50:47] *** freezey has quit IRC[18:52:02] *** freezey has joined #postfix[18:57:55] *** failure_ has quit IRC[18:59:15] *** cali has quit IRC[18:59:32] *** maxter has joined #postfix[18:59:33] *** Ashva has left #postfix[19:00:22] *** cali has joined #postfix[19:03:42] *** Ashva has joined #postfix[19:05:19] <Ashva> Hi, I want to setup a mail server for a large number of users. I want to know that is it possible to save attachments in hbase instead of mysql?[19:05:39] <Ashva> Can some one help me on this?[19:06:37] <Ashva> or give me any clue about how to save large amount of emails for about 10000 users[19:06:39] <Ashva> ?[19:06:52] *** Ashva has left #postfix[19:08:07] *** Ashva has joined #postfix[19:08:13] <Ashva> ?[19:09:33] <rob0> "instead of mysql"? How were you thinking you would do that?[19:09:38] <Zerberus> attachments as blobs in a database? that's insane[19:10:00] *** rotbeard has joined #postfix[19:10:04] <Ashva> rob0: tanks for reply[19:10:11] <Ashva> Zerberus: tanks for reply[19:10:40] <Ashva> wll the problem is this email server is going to server to about 10000 users[19:10:51] <rob0> Did you know that a file attachment is actually uuencoded 7-bit text, all part of the message body?[19:10:55] <Ashva> with at least 100MB quata for each[19:11:10] *** rotbeard has quit IRC[19:11:12] <Ashva> rob0: yes I do[19:11:26] <Ashva> the big challenge here is[19:11:35] <rob0> Dovecot mdbox might be worth considering, http://wiki2.dovecot.org/MailboxFormat/dbox[19:11:39] <Ashva> how to store this amout of files[19:11:56] <patdk-wk> rob0, people still use uuencode?[19:12:02] <Ashva> I need about many TB storage based on mysql[19:12:04] <patdk-wk> thesedays it's mime, 6bit :)[19:12:26] <rob0> oh, 6-bit, maybe so[19:12:39] *** davlefou__ has joined #postfix[19:12:41] <Ashva> I dont know can mysql handle this amout of data or not[19:12:57] <rob0> anyway, the point was, you have to read it and decode it before it becomes a separate file[19:13:00] <Ashva> patdk-wk: thank's for your notice[19:13:01] <patdk-wk> it can, but storing files inside a database is bad[19:13:19] <Zerberus> Ashva: why do you think mysql or any other database has anything to do with mail messages and attachment storage?[19:13:21] <rob0> And again, how were you thinking you would do that?[19:13:56] <patdk-wk> you never store files in a database, ever[19:14:17] <Ashva> well as much as I know emails and its attachment are stored on database, isn't it?[19:14:20] <rob0> It sounds like you're assuming that Postfix will deliver to a mysql mailstore, and no, that is not possible with native Postfix tools.[19:14:25] <rob0> huh?[19:14:43] <patdk-wk> ashva as much as you don't know databases or email[19:14:58] <patdk-wk> the only time emails ever touch a database, is if you use microsoft exchange, or dbmail[19:15:07] <Ashva> patdk-wk: so how does attachments are stored?[19:15:13] <patdk-wk> otherwise, I don't know any email that touchs datbases and email[19:15:25] <patdk-wk> ashva, first, what is an attachment?[19:15:31] <patdk-wk> there are only emails[19:15:50] <Ashva> patdk-wk: ahan[19:15:53] <Ashva> ok[19:15:58] <rob0> Attachments are part of the email.[19:15:58] *** davlefou_ has quit IRC[19:16:07] <Ashva> rob0: I know that[19:16:32] <Ashva> my problem is if I want to setup a email service to this amount of users[19:16:50] <Dominian> Have you ever done email before?[19:16:57] <Dominian> Do you know anything about email/dns/networking?[19:17:03] <Ashva> I must have a database with about many TB size[19:17:03] <Zerberus> Ashva: then you should consult a company which is expert in doing so[19:17:19] <Ashva> Dominian: thanks for reply[19:17:19] <patdk-wk> you assume these *attachments* will always be 100% identical, if you expect any space savings[19:17:22] <Zerberus> Ashva: no, you must not have a large database[19:17:22] <Ashva> Yes I did[19:17:55] <Ashva> Zerberus: why?[19:18:15] <rob0> And again, how were you thinking you would store mail in mysql?[19:18:23] <Zerberus> Ashva: because it is not necessary at all[19:18:30] <rob0> (Third time that was asked, BTW.)[19:19:22] <Ashva> rob0: I palned to setup a mail service usgin postfix,mysql,devcot,and round cube[19:19:44] <Ashva> and as I knew emails are store in database instead of files or directory[19:20:12] <Zerberus> your knowledge is wrong[19:20:21] <Ashva> Zerberus: ahan[19:20:30] <Ashva> Zerberus: can you guide me?[19:21:03] <Zerberus> Ashva: have you already studied the Postfix documentation?[19:21:36] <Ashva> Zerberus: well it seems what I knew was completely wrong[19:22:02] <Ashva> Zerberus: I will do that ASAP[19:22:19] <Ashva> but before that how does emails stores on server?[19:22:43] <rob0> Postfix will deliver to mbox or maildir.[19:22:46] <Zerberus> Ashva: it could make sense to use an SQL database for managing domain and user information to which Postfix and dovecot have access, but that's all with a database[19:23:03] <rob0> Dovecot LDA or LMTP can do mdbox, as I suggested you consider.[19:23:06] <Ashva> Zerberus: ahan[19:23:08] <waldi> Zerberus: with his knowledge?[19:23:11] <rob0> !mbox[19:23:11] <knoba> rob0: "mbox" : mbox is a format for storing emails where all emails are stored in a single flat text file. See http://en.wikipedia.org/wiki/Mbox for more information. Also see !maildir for an alternative.[19:23:17] <rob0> !maildir[19:23:18] <knoba> rob0: "maildir" : A mailbox format introduced by qmail where emails are saved as individual files in a directory structure rather than into a single flat text file. Postfix settings like !home_mailbox and !virtual_mailbox_maps will allow delivery to maildir if the path value returned ends in /. See http://cr.yp.to/proto/maildir.html if you want to know the details of how a maildir is constructed and used.[19:23:37] <rob0> And indeed, you are NOT ready to handle mail for 10K users.[19:24:42] <Ashva> Zerberus: ahan[19:25:06] <Ashva> rob0: may be you're right but I just can do my best[19:27:24] <Ashva> well thank you all for your opinions and guides[19:27:51] <Ashva> but do you have any idea about what is the best way to handle this amount of users?[19:28:29] <Zerberus> Ashva: an LDAP backend is a standard in big enterprises[19:29:36] <Ashva> Zerberus: and how about storage solutions?[19:30:13] <Dominian> rob0: I've never done email configuration or administration and I have no knowledge of DNS or networking, I'm setting up a server for thousands of users for email. Can you help?[19:30:44] <Zerberus> Ashva: depends on the volume of mail storage, how it shall be accessed, number of concurrent users ...[19:32:18] *** gu1lle_ has joined #postfix[19:32:22] <rob0> Dominian, I sure can. I can get you set up for US$6000 plus whatever hardware I tell you to buy. I can handle management for maybe US$100/month.[19:32:34] <Dominian> lol[19:33:03] <rob0> err sorry, missed a zero[19:33:12] <rob0> management for maybe US$1000/month.[19:33:40] <tuxick> :)[19:33:44] <rob0> as soon as you pay me I will buy a better keyboard! One without all the typos![19:33:47] <Zerberus> and we all know, you then outsource this project to Ashva[19:34:22] <tuxick> with 10k users you can expect at least one 'hacked' account per week[19:34:45] <tuxick> sending out spam like crazy[19:35:21] <Ashva> tuxick: thanks for your notice[19:36:01] *** failure has joined #postfix[19:37:16] *** cali has quit IRC[19:38:02] *** cali has joined #postfix[19:40:37] <tuxick> that made me go for policyd :)[19:41:19] <patdk-wk> made me go for a shotgun[19:44:21] *** failure has quit IRC[19:45:17] <rob0> Shotgun doesn't work very well. You shoot one clueless user, there are plenty more to take his place.[19:45:21] *** failure has joined #postfix[19:49:02] *** dvl has joined #postfix[19:55:01] <tuxick> there's millions of them[19:55:08] <tuxick> go for the spam criminals instead[19:55:18] <tuxick> means getting a visum for russia though[19:55:27] *** Abrar|gone is now known as AbrarSyed[19:55:41] <tuxick> i'm usually not really in a rush to restore accounts for these lusers though[19:56:27] <patdk-wk> russia? you mean brazil?[19:56:52] *** freezey has quit IRC[19:59:52] *** freezey_ has joined #postfix[20:01:30] <tuxick> uhm, i don't mean the country with most drones :)[20:02:18] <tuxick> and it seems that botnets and russia are kinda related[20:06:15] *** sniffells has quit IRC[20:07:13] *** Kunda has joined #postfix[20:07:15] *** Kunda has left #postfix[20:07:20] <tuxick> according to rokso getting paid by americans :)[20:11:14] *** wdp has quit IRC[20:11:36] *** wdp has joined #postfix[20:13:07] *** davlefou_ has joined #postfix[20:16:14] *** davlefou__ has quit IRC[20:20:27] <AbrarSyed> hmmm[20:23:23] <AbrarSyed> I have a postfix server running with mail.forgeessentials.com as its domain[20:23:37] <AbrarSyed> n the same server runs a COnluence instance with domain docs.forgeessentials.com[20:24:02] <AbrarSyed> I want confluence to use postfix to send notification emails.. but when I try to send am email from confluence[20:24:24] <AbrarSyed> I get a 554 RelayAccessDenied[20:24:40] <AbrarSyed> this is my main.cf: http://pastebin.com/6vw7j0G2[20:24:50] <AbrarSyed> any ideas of what I can do to fix it?[20:28:00] <AbrarSyed> When I try to use confluence to send an email to an @forgeessentials.com email, it works fine[20:28:06] <AbrarSyed> but any external domain fails[20:33:58] <dvl> I'm getting confused. I'd like to list a set of hosts (or rather addresses: foo at bar dot example.org) for which Postfix should attempt delivery. Those are hosts here in my basement. For everything else, it should relay on to my mail server in the data center. I'm am using relayhost= right now, but I'm not sure how to override that for 'local hosts'. Am I doing this wrong/[20:37:41] <dvl> I think a walk might clear my head...[20:38:19] <adaptr> !tell dvl transport_maps[20:38:19] <knoba> dvl: "transport_maps" : a configuration parameter in the main.cf: Optional lookup tables with mappings from recipient address to (message delivery transport, next-hop destination). See transport(5) for details.[20:42:24] *** AbrarSyed is now known as Abrar|gone[20:43:03] *** s0ber has quit IRC[20:43:24] *** s0ber has joined #postfix[20:58:19] *** freezey_ has quit IRC[21:03:18] *** kirin` has quit IRC[21:03:41] *** freezey has joined #postfix[21:13:35] *** davlefou__ has joined #postfix[21:16:04] *** kirin` has joined #postfix[21:16:26] *** davlefou_ has quit IRC[21:17:43] *** afuentes has quit IRC[21:21:38] <dvl> getting it now...[21:21:51] *** d3c has joined #postfix[21:24:57] *** Kunda has joined #postfix[21:25:50] *** Kunda has left #postfix[21:29:51] *** UQlev has joined #postfix[21:40:13] <dvl> adaptr: For a host here in the basement, I'm using this entry in a transport_map:[21:40:13] <dvl> jester.example.org :jester.example.org[21:40:17] <dvl> Seems to do the right thing.[21:40:36] <adaptr> learn to use [][21:40:51] <adaptr> also, why is that mail ending up at your mail server[21:40:58] <adaptr> it's obviously destined for elsewhere[21:42:43] <dvl> It's coming in from the outside and being delivered to my mail server. It's from a mailing list. And my mail server is redirecting it to the right host. e.g. the actual address was foo at example dot org and I'm trying to redirect it to the right internal host.[21:43:28] <dvl> by [ ] you mean: jester.example.org :[jester.example.org] ?[21:44:09] <dvl> I seem to recall that [ ] means it goes to the host instead of doing an MX lookup.[21:44:13] <adaptr> then you should relay it. don't fuck about with transport_maps if there is no reason[21:44:31] <adaptr> !tell dvl address_classes[21:44:31] <knoba> dvl: "address_classes" : http://www.postfix.org/ADDRESS_CLASS_README.html describes how Postfix deals with different classes of addresses: local, relay, virtual alias, virtual mailbox, and Internet.[21:45:30] <dvl> I was reading up on address_classes earlier. I'll hit it again. Have to head out now. I'll tackle this later. Thank you.[21:46:14] <dvl> I was seeing relay_domains as well...[21:47:22] <adaptr> if you go that route, you need to duplicate the valid recipients on the MX host[21:47:38] <adaptr> which you need to do anyway, but it is cleaner and clearer in relay_recipient_maps[21:48:02] <adaptr> since you can simply use the exact map that the destination host uses. rsync it over every day or something[21:48:59] *** jelly has quit IRC[21:49:09] <dvl> There are only a few addresses which need to be sent to that host. It's my development server for http://freshports.org which takes in the mailing list feeds from various svn commits.[21:49:29] <adaptr> there you are, then[21:49:35] *** jelly has joined #postfix[21:50:27] *** freezey has quit IRC[21:53:32] *** Ashva has left #postfix[21:55:19] *** Abrar|gone is now known as AbrarSyed[21:57:09] *** davlefou__ has quit IRC[21:57:28] *** davlefou has joined #postfix[21:57:38] *** freezey has joined #postfix[22:00:42] *** olegfusion has quit IRC[22:08:07] *** Section1 has quit IRC[22:11:16] *** abetusk_w has joined #postfix[22:13:18] <abetusk_w> I'm trying to rewrite the 'from' user address in postfix. I have set up regexp sender canonical file that rewrites everything (/^.*$/ myuser at mydomain dot com) but it misses the user that it gets sent from the local system, in this case 'root'. How can I change the 'root' user? Should I be using the canonical instead of the sender_canonical? What should I be looking for as a regex if that's the proper way to do it?[22:13:43] <adaptr> the from address where?[22:13:47] <adaptr> which one ?[22:13:49] <adaptr> why ?[22:13:59] <rob0> cool PTR btw :)[22:14:01] *** davlefou_ has joined #postfix[22:14:12] <adaptr> oh you ISC fanboi[22:15:11] <rob0> abetusk_w, who/what is sending this mail? Why not set the sender there?[22:15:31] <abetusk_w> adaptr, I want to rewrite all from addresses, so just a blanket replace.[22:15:44] *** UQlev has quit IRC[22:15:47] <adaptr> !canonical_maps[22:15:48] <knoba> adaptr: "canonical_maps" : a configuration parameter in the main.cf: Optional address mapping lookup tables for message headers and envelopes. The mapping is applied to both sender and recipient addresses, in both envelopes and in headers. This is typically used to clean up dirty addresses from legacy mail systems, or to replace login names by Firstname.Lastname. The table format and lookups are documented in canonical(5).[22:16:13] <adaptr> NOTE that this is applied when mail ENTERS postfix[22:16:31] <adaptr> there is a complementary option for mail leaving postfix[22:16:48] *** abetusk_w_ has joined #postfix[22:17:02] *** davlefou has quit IRC[22:17:18] *** abetusk_w has quit IRC[22:17:18] *** abetusk_w_ is now known as abetusk_w[22:17:58] <abetusk_w> adaptr, what pattern should I be looking for to replace the user in the from header?[22:18:13] <rob0> !rewrite[22:18:13] <knoba> rob0: "rewrite" : Postfix Address Rewriting features, see http://www.postfix.org/ADDRESS_REWRITING_README.html[22:19:25] *** LoRez has quit IRC[22:20:09] *** robinho86 has joined #postfix[22:22:18] <abetusk_w> " from=root, size=70, class=0,"... even though some from address eventually maps to 'myuser at mydomain dot com'...there is also a 'ctladdr=root' in the log file. I'm sorry, I don't know the terminology...[22:23:29] <rob0> um, that looks like sm-mta[22:23:44] *** aindilis2 has joined #postfix[22:24:45] <abetusk_w> hmm, sendmail is not running and is turned off in chkconfig. Is it invoked by something?[22:25:11] <abetusk_w> but in the logs it does say sendmail...[22:28:31] <adaptr> get rid of smegmail. fast.[22:28:32] <rob0> Sendmail does not have to be running as a daemon; it can still be invoked by a user.[22:28:39] <adaptr> rob0: sm-mta does[22:29:03] <rob0> Either remove Sendmail or disable it using your OS-provided tools.[22:29:09] <abetusk_w> I see a sendmail_path = /usr/sbin/sendmail.postfix in the main.cf[22:29:40] <rob0> sounds redhatish, look at "alternatives"[22:29:57] <abetusk_w> alternatives to red hat or altertives to sendmail.postfix?[22:30:13] <adaptr> adulternatives[22:30:22] <rob0> See your distro documentation about "alternatives"[22:30:40] <adaptr> that's more of a debianism[22:30:46] <abetusk_w> alternatives to what?[22:31:05] <adaptr> uninstall sendmail, mmkay ?[22:31:11] <rob0> "man alternatives" might help you get started[22:31:17] <adaptr> things go wonky with more than one MTA installed[22:31:19] <rob0> or uninstall sendmail[22:31:33] <rob0> things go wonky with more than one MTA installed, as you are seeing.[22:31:50] <adaptr> how much caffeine have you had, rob0 ?[22:32:06] <rob0> relatively little, actually[22:32:42] <rob0> morning cup prior to 08:00, that was it, 8.5 hours ago[22:34:46] <abetusk_w> ok, sendmail has been removed. In the test message that I've sent, the display name is still 'root' whereas the email address is correct ('myuser at mydomain dot com')[22:35:10] <rob0> 7.5, almost 7.6, now. Glasses are playing tricks on me![22:35:26] * rob0 blames adaptr[22:35:51] <abetusk_w> the only instance I see of 'root' in the log file is this: "... postfix/pickup[20985]: 3F6A83C0035: uid=0 from=<root> '[22:36:32] *** danfromuk has joined #postfix[22:36:44] *** AbrarSyed is now known as Abrar|gone[22:38:06] <adaptr> correct[22:38:51] <abetusk_w> a call to chfn to change the full name of root changes the name in the received mail[22:39:32] <abetusk_w> so I guess it's figuring out how to replace the users full name as it appears in the header or email? How would I go about replacing that?[22:39:39] <rob0> !mail[22:39:39] <knoba> rob0: "mail" : mail(1) (also known as mailx(1) or bsd-mailx) is not a Postfix-provided command. For help with it, see its man page. More powerful, commonly available console- and CLI-based MUAs include mutt, alpine and heirloom mailx (likewise, not supported here.)[22:39:47] <adaptr> none of this is related to postfix. if the user sending a mail does not set a proper sender address, no proper sender address will be set.[22:40:16] <rob0> This is why I asked, above, 20:15 < rob0> abetusk_w, who/what is sending this mail? Why not set the sender there?[22:40:38] <abetusk_w> so postfix has no ability to rewrite this field?[22:40:44] <rob0> Perhaps you'd be better off with a nullclient to handle stuff like cron mail?[22:41:17] <rob0> sure it does, you were pointed to canonical(5) and the ADDRESS_REWRITING_README alerady.[22:44:33] *** UQlev has joined #postfix[22:45:09] <danfromuk> Hi. How simple is it to set up a mail server, which receives mail for specific domains, scans the emails for viruses, and then forwards the clean ones to specified MX servers?[22:45:28] <danfromuk> Are there any guides available online?[22:46:36] <adaptr> there are plenty of guide, none of which I would recommend. administering a mail system is not a trivial undertaking[22:46:46] <abetusk_w> The documentation isn't very good, I was asking for a little guidance besides just blanketely pointing me to the documentation.[22:47:58] <danfromuk> adaptr: I run my own mail servers. Just never needed to add AV to it.[22:52:09] <adaptr> abetusk_w: postfix documentation ranks among the best for any opensource project[22:57:38] *** d3c has quit IRC[23:01:04] <Patrickdk> sounds like you want an ironport, or barrecuda, or .... :)[23:01:37] <Patrickdk> adaptr, postfix docs only rank for email services, not spam, virus, ...[23:01:57] *** s0ber_ has joined #postfix[23:02:01] <Patrickdk> but it gets him 70% what he wanted, but should only be like 30% of the work he has to do[23:02:19] <adaptr> Patrickdk: I disagree[23:03:11] <Patrickdk> not even respectfully, what has this channel come to! :)[23:03:25] <jeev> what crackhead uses mxlogic[23:03:56] *** s0ber has quit IRC[23:03:56] <Patrickdk> heh?[23:04:12] *** s0ber_ is now known as s0ber[23:04:14] <Patrickdk> I use mx entries to determin what context_filter my postfix servers use[23:14:30] *** davlefou__ has joined #postfix[23:17:19] *** freezey has quit IRC[23:17:26] *** davlefou_ has quit IRC[23:20:00] <jeev> any mxlogic users?[23:20:40] <Patrickdk> but this is postfix :)[23:21:12] <jeev> mxlogic is mcafee crappy service[23:21:20] <jeev> it's routing emails to my client's crappy exchange[23:22:28] *** danfromuk has quit IRC[23:22:41] *** kirin` has quit IRC[23:22:57] *** davlefou__ has quit IRC[23:23:20] *** davlefou has joined #postfix[23:23:31] *** kirin` has joined #postfix[23:28:45] *** UQlev has quit IRC[23:30:13] *** Pegasus_RPG has left #postfix[23:30:13] *** donmichelangelo has quit IRC[23:30:32] *** donmichelangelo has joined #postfix[23:31:15] <rob0> jeev, you didn't manage to mention what the problem is.[23:32:05] *** abetusk_w has quit IRC[23:33:40] <jeev> 554 denied[23:33:51] <jeev> i and others are getting denied when mentioning bad things about mcafee[23:34:06] <jeev> but weird thing is i'm being denied to one person but not the other, same domain. i have the login credentials.[23:34:14] <rob0> huh[23:34:15] <jeev> i can't wait to put my postfix machine out in front as the MX record for their domains[23:34:42] <jeev> rob0, i dont know man, they suck. im tired.[23:36:26] *** ffiore has joined #postfix[23:42:12] *** Abrar|gone is now known as AbrarSyed[23:44:36] *** AbrarSyed is now known as Abrar|gone[23:51:37] *** ffiore has quit IRC