October 30, 2013 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
October 30, 2013 [00:12:41] *** davlefou__ has joined #postfix[00:15:51] *** davlefou_ has quit IRC[00:46:50] *** hallamigo has quit IRC[01:28:16] *** echelog has joined #postfix[01:28:23] *** beez has joined #postfix[01:30:58] *** MaximusColourum has joined #postfix[01:31:31] *** mastr[x]bennett has joined #postfix[01:34:03] *** treaki_ has joined #postfix[01:34:36] <arthurdent> as it is, smtp appears to be filtered externally and available internally, i see i can "forward mail from clients in authorized network blocks to any destination" but it's not clear to me if that means sending mail as another user without authorization[01:35:00] <arthurdent> or authentication*[01:37:57] *** treaki__ has quit IRC[01:41:45] <arthurdent> there is no NAT between this server and the internet by the way[01:43:13] <arthurdent> I have inet_interfaces set to all, so i'm not sure why smtp says it's filtered when I nmap my server externally[01:44:47] <lunaphyte> you do want a relay, yes.[01:44:55] <lunaphyte> but a controlled relay.[01:45:18] <lunaphyte> relaying should only be allowed after authentication has taken place.[01:45:34] <arthurdent> so something like TLS?[01:46:03] <lunaphyte> tls is for encryption, which goes along with authentication, but is different from authentication[01:46:45] <arthurdent> what are the available forms of authentication?[01:46:58] <lunaphyte> !smtp_auth[01:46:58] <knoba> lunaphyte: Error: "smtp_auth" is not a valid command.[01:47:03] <lunaphyte> meh[01:47:06] <lunaphyte> !smtpauth[01:47:07] <knoba> lunaphyte: "smtpauth" : a feature that authenticates trusted users for submitting email to postfix. See !sasl.[01:47:09] <lunaphyte> ah[01:47:28] <lunaphyte> postfix provides the ability to offer smtp auth by way of sasl.[01:47:42] <arthurdent> okay so I need to set up sasl[01:47:58] <arthurdent> this is becoming quite the project :P[01:47:59] <lunaphyte> yes - the first step though is actually to enable and configure a proper submission service[01:48:27] <arthurdent> is sasl the standard for say... gmail, live, yahoo, etc.?[01:48:55] <lunaphyte> clients don't use port 25 to talk to mail servers. port 25 is only for mail servers to talk to other mail servers. clients use port 587 [submission] to talk to mail servers.[01:49:08] <lunaphyte> yes, sasl is the universal standard for smtp/submission[01:56:48] <arthurdent> so this is something dovecot can provide[01:56:58] <lunaphyte> correct[02:02:13] *** beez has quit IRC[02:09:38] *** ncp has left #postfix[02:09:52] <arthurdent> lunaphyte: what does this line from the SASL_README mean? "At this time, the Dovecot SASL implementation does not provide client functionality." is dovecot not going to work for me?[02:11:03] *** MaximusColourum has quit IRC[02:11:45] <arthurdent> oh nevermind, it just means it wont transmit mail to other smtp servers, i guess.[02:12:37] <lunaphyte> right[02:15:26] *** mastr[x]bennett has quit IRC[02:17:21] *** davlefou_ has quit IRC[02:20:01] <pj> client functionality would be if you were using a relayhost or smarthost that required sasl auth, then postfix would have to use sasl to authenticate to that relay as a client.[02:20:20] *** mastr[x]bennett has joined #postfix[02:20:44] <arthurdent> is it normal for files like /var/spool/postfix/private/auth to give a "No such device or address" error when used? I am trying to figure out why postfix and dovecot don't seem to be communicating[02:23:11] <pj> !tell arthurdent getting_help[02:23:11] <knoba> arthurdent: "getting_help" : before asking your question, provide a pastebin which includes relevant log data and your config. see !pastebin, !relevant_logs and !showconfig for instructions on doing this.[02:23:42] <arthurdent> !relevant_logs[02:23:42] <knoba> arthurdent: "relevant_logs" : Relevant logs are mail.* syslog Postfix logs (NOT verbose, see !verbose) which show the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log might not do. IMAP/POP3 daemons and external delivery agents typically log to the same facility (mail); those are usually not relevant here.[02:24:01] <arthurdent> !showconfig[02:24:01] <knoba> arthurdent: "showconfig" : when asked to provide your config, pastebin postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[02:29:07] *** davlefou_ has joined #postfix[02:31:07] *** mastr[x]bennett has quit IRC[02:33:16] <arthurdent> yes! I got it working, now I just need to configure SSL[02:33:40] <lunaphyte> congrats :)[02:33:50] <lunaphyte> not ssl though ;)[02:33:57] <lunaphyte> ssl is deprecated[02:34:03] <arthurdent> well you know... tls[02:34:09] <arthurdent> everyone calls it ssl[02:34:15] <lunaphyte> yes, unfortunately.[02:34:32] <lunaphyte> ultimately, "encryption" would be the operative word[02:34:52] <arthurdent> yeah but that's pretty ambiguous[02:35:07] <lunaphyte> the word is, sure. it's the context that matters[02:35:12] <arthurdent> some students in my class thought they were using encryption when they base64'd the data[02:35:13] <lunaphyte> we're here talking about postfix.[02:35:18] <lunaphyte> yikes.[02:35:39] <arthurdent> luckily they weren't writing any software that was going to be used in production anywhere[02:35:43] <lunaphyte> that does get into a grey area though.[02:35:56] *** zerick has quit IRC[02:36:03] <arthurdent> I dunno, I think one of the requisites for encryption is that the key is separate from the algorithm[02:36:12] <lunaphyte> right[02:36:44] <lunaphyte> yet generally speaking, rot13 is regarded as technically being "encryption"[02:37:16] <arthurdent> rot26 for lyfe[02:37:22] <arthurdent> must be twice as secure as rot13[02:38:10] <pj> I use rot52, so I must be four times as secure![02:38:42] <arthurdent> you must have bought a lot of ovaltine[02:51:01] <arthurdent> if I don't enable tls will the password be sent in the clear?[02:53:11] <lunaphyte> you can use sasl mechs which don't send clear text, but there's not much reason for that.[02:53:25] <lunaphyte> even if you use a shared secret sasl mech, you should still use tls.[02:57:12] *** tmberg has quit IRC[02:57:40] *** nutron has quit IRC[03:01:52] <arthurdent> hmm well i thought i had sasl working :/ but suddenly it doesn't like my password[03:06:37] *** MaximusColourum has joined #postfix[03:07:18] *** Motoko has joined #postfix[03:09:17] *** Motoko has quit IRC[03:11:40] *** Motoko has joined #postfix[03:14:51] *** davlefou__ has joined #postfix[03:16:09] *** Motoko has quit IRC[03:17:06] *** davlefou_ has quit IRC[03:17:46] *** Motoko has joined #postfix[03:18:20] *** Motoko has joined #postfix[03:19:29] *** Motoko has joined #postfix[04:03:18] *** nutron has joined #postfix[04:17:30] *** davlefou__ has quit IRC[04:30:25] *** nutron has quit IRC[04:31:31] *** davlefou__ has joined #postfix[04:36:37] *** MaximusColourum has quit IRC[04:45:48] *** Motoko has quit IRC[04:54:16] *** nutron has joined #postfix[05:04:36] *** err-or has joined #postfix[05:04:49] *** err-or_ has quit IRC[05:18:12] *** davlefou__ has quit IRC[05:21:01] *** jekle has joined #postfix[05:26:59] <twb> What variable governs which domains pass through /etc/aliases? mydestination?[05:30:31] <rob0> right[05:31:53] *** davlefou__ has joined #postfix[05:43:43] *** joules has quit IRC[05:46:10] <pj> yes, provided that /etc/aliases is in alias_maps[05:46:32] <pj> (which it is by default, but can never take these things for granted)[05:47:28] *** nutron has quit IRC[05:49:37] <twb> Nod.[05:50:16] <twb> I have a satellite host and I want to apply /etc/aliases to outgoing mail but not deliver it locally[05:50:42] <twb> I'm a little bit too asleep to work out the Right Thing[05:51:33] <twb> http://paste.debian.net/62880/[05:52:19] <twb> The pi.planetinnovation.com.au vs. planetinnovation.com.au thing is probably the problem, and I should probably just hard-code mydestinations instead of letting it auto-set from dns domain[05:58:16] *** dchan has quit IRC[06:00:03] *** dchan has joined #postfix[06:00:08] *** donmichelangelo has quit IRC[06:00:42] *** donmichelangelo has joined #postfix[06:02:45] *** danblack has joined #postfix[06:15:39] *** davlefou_ has joined #postfix[06:19:11] *** davlefou__ has quit IRC[06:23:31] *** arthurdent has left #postfix[06:38:06] *** joules has joined #postfix[06:38:57] *** chrisp15 has joined #postfix[07:08:33] *** joules has quit IRC[07:16:17] *** davlefou__ has joined #postfix[07:19:56] *** davlefou_ has quit IRC[07:26:29] *** tjames has joined #postfix[07:29:15] *** tjames37 has joined #postfix[07:32:13] *** tjames37 has quit IRC[08:15:25] *** danblack has quit IRC[08:16:37] *** davlefou_ has joined #postfix[08:18:13] *** eusto_ has quit IRC[08:18:57] *** eusto_ has joined #postfix[08:19:52] *** eusto_ has quit IRC[08:20:01] *** davlefou__ has quit IRC[08:29:26] *** quadro_ has quit IRC[08:34:10] *** [diablo] has joined #postfix[08:37:19] *** SvenOostenbrink has quit IRC[08:37:41] *** Blubberbop has quit IRC[08:41:37] *** wdp has joined #postfix[08:47:37] *** quadro_ has joined #postfix[08:52:48] *** milligan_ has left #postfix[09:17:09] *** davlefou__ has joined #postfix[09:20:26] *** davlefou_ has quit IRC[09:27:30] *** ffiore has joined #postfix[09:42:19] *** sharky_ has quit IRC[09:54:38] *** sharky_ has joined #postfix[10:04:27] *** irctc695 has joined #postfix[10:13:41] *** twb has quit IRC[10:17:46] *** davlefou_ has joined #postfix[10:20:25] *** davlefou__ has quit IRC[10:34:22] <adaptr> "to outgoing mail" is meaningless. mail comes in, mail goes out.[10:35:17] *** olegfusion has joined #postfix[10:43:34] *** kiri has quit IRC[10:51:11] *** jelly has quit IRC[10:51:42] *** jelly has joined #postfix[10:59:49] *** p3rror has joined #postfix[11:12:12] <pj> why would "outgoing mail" be delivered locally anyways?[11:12:24] <pj> that doesn't make any sense.[11:18:12] *** davlefou__ has joined #postfix[11:21:55] *** davlefou_ has quit IRC[11:46:58] <nfi|ermes> I wanna use reject_authenticated_sender_login_mismatch with file sender_access[11:47:48] <nfi|ermes> to send from @domain.com i wanna the user authenticated as user1 or user2[11:47:57] <nfi|ermes> is that possible ?[11:48:28] <nfi|ermes> should i use this form in the sender_access: @domain.com user1 user2[12:09:47] <pj> !smtpd_sender_login_maps[12:09:47] <knoba> pj: "smtpd_sender_login_maps" : a configuration parameter in the main.cf: Optional lookup table with the SASL login names that own sender (MAIL FROM) addresses.[12:09:57] <pj> nfi|ermes: ^^^^^[12:11:12] *** donmichelangelo has quit IRC[12:12:14] *** donmichelangelo has joined #postfix[12:21:24] *** davlefou__ has quit IRC[12:33:36] *** kiri has joined #postfix[12:34:46] *** davlefou__ has joined #postfix[12:50:29] *** irctc695 has quit IRC[13:00:28] *** Section1 has joined #postfix[13:07:46] *** mattcen has quit IRC[13:10:38] *** freezey has joined #postfix[13:11:13] *** robinho86 has joined #postfix[13:11:50] *** mattcen has joined #postfix[13:14:09] *** UQlev has joined #postfix[13:17:02] *** _val__ is now known as _val_[13:17:14] *** _val_ has joined #postfix[13:22:06] *** davlefou__ has quit IRC[13:23:49] *** Bry8Star has quit IRC[13:30:03] *** intense has joined #postfix[13:31:39] *** intense has quit IRC[13:32:26] *** Bry8Star has joined #postfix[13:33:16] *** freezey has quit IRC[13:33:49] *** freezey has joined #postfix[13:35:54] *** davlefou__ has joined #postfix[13:38:03] *** freezey has quit IRC[13:55:24] *** clountex has joined #postfix[13:58:55] *** BooeyOH has joined #postfix[14:07:51] *** clountex has left #postfix[14:09:16] <BooeyOH> I am getting a "local domain specified from non-local IP" error (line 9 in pastepin), but I am not sure I understand why it is happening. sender at customer dot com is sending an email to: person at company dot com, employee at customer dot com and the part that is coming to company.com (our mail server/domain) comes in fine, but there is an error generated for the send email in the to list. Can someone take a look at my pastebin and explain to me what is happening? http:/[14:09:16] <BooeyOH> /pastebin.com/Z46tk2pc Thanks![14:09:20] <BooeyOH> http://pastebin.com/Z46tk2pc[14:11:58] <Zerberus> BooeyOH: check the log and status of host.customer.com[14:12:50] <BooeyOH> I will check with the customer on that. How does it work when someone sends an email to postfix to someone at your domain and then someone else, does it use your host as the relay for the second email?[14:13:02] <rob0> "host host.customer.com[XXX.XXX.XXX.XXX] said: 550 5.7.1 ..." <-- only they know why they rejected you[14:13:51] <BooeyOH> rob0: that makes sense. And makes me feel better :)[14:15:13] <BooeyOH> Thank you gentlement[14:15:16] <BooeyOH> minus the t[14:17:01] *** hikenboot has joined #postfix[14:17:55] <hikenboot> well, it has never before taken me a week and a half to figure out a problem...that was a first. Now I that I have gotten the basic autoconfig to work. I would like to get autodiscovery with outlook clients and a postfix server working...anyone know where I can go to find a good sample config to get these two to work together?[14:18:37] <lunaphyte_> i guess aks the authors of outlook how that software performs autodiscovery.[14:18:42] <lunaphyte_> postfix certainly isn't involved[14:18:47] <lunaphyte_> *ask[14:19:32] *** davlefou_ has joined #postfix[14:19:49] <hikenboot> seems like all the samples i find from MS involve exchange and outlook autodiscovery...noone mentions the dovecot or sendmail[14:19:56] <rob0> axe[14:20:25] <hikenboot> oops or postfix[14:20:51] <lunaphyte_> it wouldn't mention postfix, because that's immaterial.[14:21:28] <rob0> Maybe read up on how Thunderbird does it. They'll tell you how it's really done, without the Microsoft voodoo.[14:21:59] <hikenboot> thunderbird uses autoconfig not autodiscover xml files...totally different[14:22:01] <rob0> It's taking you so long because apparently you are looking in the wrong places.[14:22:26] <hikenboot> ok well thanks for the help anyways I will keep looking[14:22:35] <hikenboot> maybe #linuxhelp[14:23:03] *** davlefou__ has quit IRC[14:24:39] *** ben_ has joined #postfix[14:24:56] *** neotheo has quit IRC[14:25:25] *** UQlev has quit IRC[14:26:53] *** Fluke has left #postfix[14:46:06] *** Kunda has joined #postfix[14:46:09] *** Kunda has left #postfix[15:09:31] *** freezey has joined #postfix[15:20:25] *** davlefou__ has joined #postfix[15:23:00] *** davlefou_ has quit IRC[15:35:27] *** chrisp15 has quit IRC[15:38:00] *** CedricD_ has joined #postfix[15:41:40] *** pfilipp has joined #postfix[15:46:05] *** CedricD_ has quit IRC[15:47:46] *** darklajid has left #postfix[15:48:35] *** pfilipp has quit IRC[16:00:06] *** donmichelangelo has quit IRC[16:00:27] *** donmichelangelo has joined #postfix[16:05:13] *** [diablo] has quit IRC[16:10:48] *** Kako has joined #postfix[16:11:16] *** Cerber has left #postfix[16:11:20] *** Pies has joined #postfix[16:18:44] *** manova has joined #postfix[16:19:56] *** BooeyOH has quit IRC[16:20:05] *** zerick has joined #postfix[16:20:35] *** davlefou_ has joined #postfix[16:23:33] *** davlefou__ has quit IRC[16:23:46] *** MaximusColourum has joined #postfix[16:24:32] *** manova has quit IRC[16:26:07] *** dddtest_bd5ae has joined #postfix[16:28:21] *** chris|| has quit IRC[16:30:01] *** chris| has joined #postfix[16:30:19] *** Runkle has joined #postfix[16:30:46] <jelly> can I tell qshape to aggregate by whole email address and not domain?[16:30:55] <Runkle> hi. when i run postqueue -p to list the dates of all items in the deferred queue. is that date the _first time_ an email got into that cueue. of if a delivery attempt is made and failed does that date get updated?[16:31:45] *** billyw has joined #postfix[16:31:58] *** 1JTAA6DSO has joined #postfix[16:32:09] *** 1JTAA6DSO has quit IRC[16:41:15] *** hallamigo has joined #postfix[16:48:19] *** billyw has left #postfix[16:51:10] *** sandvige has joined #postfix[16:52:49] *** hikenboot has quit IRC[17:01:51] *** BooeyOH has joined #postfix[17:02:24] <BooeyOH> What are the implications of changing the hostname of my mailserver?[17:02:46] *** gayphotos has joined #postfix[17:03:01] <lunaphyte_> things might break[17:03:50] <BooeyOH> lunaphyte_: any list of best practice to keep things from breaking and/or how can I tell what things might break?[17:04:05] <lunaphyte_> sure. share actual information[17:04:38] <BooeyOH> what information would behelpful[17:04:46] <rob0> If you're talking about $myhostname, look at all the default settings which refer to it.[17:05:00] <rob0> Note also:[17:05:03] <rob0> !fcrdns[17:05:03] <knoba> rob0: "fcrdns" : http://en.wikipedia.org/wiki/Forward_Confirmed_reverse_DNS : your IP address should resolve to $myhostname, which in turn should resolve back to your IP. This is very important if you want big sites to accept your mail. If you can't have it from your ISP, see !relayhost[17:05:04] <lunaphyte_> the actual hostname[17:05:37] <rob0> It might also be useful to discuss why you are changing the hostname.[17:06:38] <BooeyOH> ok, will provide details shortly[17:17:09] *** eagles0513875 has quit IRC[17:17:09] *** eagles0513875 has joined #postfix[17:17:10] *** eagles0513875 has quit IRC[17:17:10] *** eagles0513875 has joined #postfix[17:22:46] *** davlefou__ has joined #postfix[17:23:53] *** lunaphyte_ has quit IRC[17:24:28] *** davlefou_ has quit IRC[17:24:57] *** lunaphyte_ has joined #postfix[17:27:13] *** moparisthebest_ has quit IRC[17:27:24] <BooeyOH> rob0: basically, the issue I am having is that I had mail.company.com with IP address *.*.*.22 and I set up new mail server mail.companymail.com with IP address *.*.*.19. I took down mail.company.com after the new server was up and running and pointed the *.*.*.22 to the mail.companymail.com. Our client was allowing relaying from *.*.*.22 for us to send out emails as them, but now it comes from *.*.*.19, so they are rejecting them[17:27:24] <BooeyOH> . Asking them to allow from *.*.*.19 is not an option at this point so I am trying to find the quickest solution to having mail sent out from *.*.*.22 instead of *.*.*.19[17:28:36] *** moparisthebest has joined #postfix[17:29:51] <BooeyOH> since both mail.company.com and mail.companymail.com point to the same physical server, and both IPs are routed there, should I jsut be able to change the "myhostname" in main.cf from mail.companymail.com (.19) to mail.company.com (.22) ?[17:31:39] *** moparisthebest has quit IRC[17:31:43] <rob0> It seems as if you have confused myhostname with mynetworks.[17:31:46] <rob0> !basic[17:31:46] <knoba> rob0: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[17:31:59] *** moparisthebest has joined #postfix[17:32:13] <BooeyOH> ok, going there[17:32:18] *** gayphotos has quit IRC[17:35:11] *** mocx has joined #postfix[17:35:16] <mocx> !virtual_maps[17:35:17] <knoba> mocx: "virtual_maps" : The virtual_maps postconf(5) parameter has been deprecated since Postfix 2.0. If you're using virtual_maps, you're probably following old, outdated information. See !virtual_alias_maps and !virtual_alias_domains for the replacements. See also !google.[17:35:21] <BooeyOH> in my main.cf, I have myhostname = mail.companymail.com, myorigin = /etc/hostname (which is mail.companymail.com). If I want the "new" host to be mail.company.com, which would then by default send out of (.22) (because it goes through NAT on firewall) would that work?[17:35:32] <BooeyOH> I am sorry if I missing something here, but I think I do mean myhostname not mynetworks[17:38:59] <BooeyOH> so any hints on best practices for changing hostname of mail server?[17:40:39] *** mocx has quit IRC[17:41:50] <rob0> !fcrdns[17:41:50] <knoba> rob0: "fcrdns" : http://en.wikipedia.org/wiki/Forward_Confirmed_reverse_DNS : your IP address should resolve to $myhostname, which in turn should resolve back to your IP. This is very important if you want big sites to accept your mail. If you can't have it from your ISP, see !relayhost[17:43:01] <rob0> You'd want .22 to resolve to the new name, of course. Also, bah, you do NOT own company.com nor companymail.com:[17:43:03] <rob0> !example[17:43:03] <knoba> rob0: "example" : Example.TLD has been reserved for examples in generic top-level domains (com,net,org) and many other TLDs. Please do not use real Internet names as examples.[17:48:38] *** freezey has quit IRC[17:52:17] *** rotbeard has joined #postfix[17:55:05] *** RedFyre has quit IRC[17:55:16] *** Motoko has joined #postfix[17:57:29] *** micols has quit IRC[18:08:28] *** freezey has joined #postfix[18:14:42] *** Kunda has joined #postfix[18:21:30] *** sharky has joined #postfix[18:21:30] *** davlefou_ has joined #postfix[18:24:48] *** sharky_ has quit IRC[18:25:04] *** davlefou__ has quit IRC[18:30:09] *** donmichelangelo has quit IRC[18:30:18] *** nutron has joined #postfix[18:30:31] *** donmichelangelo has joined #postfix[18:35:37] *** jarif has quit IRC[18:37:59] *** thumbs has quit IRC[18:38:10] *** nutron has quit IRC[18:38:20] *** nutron|w has joined #postfix[18:38:41] *** nutron|w has quit IRC[18:40:29] *** thumbs has joined #postfix[18:43:25] *** Guest76588 has quit IRC[19:03:32] *** MacWinner has joined #postfix[19:15:03] *** Runkle has left #postfix[19:17:57] *** sandvige has quit IRC[19:18:20] *** thumbs has quit IRC[19:19:57] *** thumbs has joined #postfix[19:22:00] *** davlefou__ has joined #postfix[19:22:39] *** nutron has joined #postfix[19:22:45] *** nutron has quit IRC[19:22:45] *** nutron has joined #postfix[19:23:45] *** TRUNASUCI has joined #postfix[19:24:26] *** watermark has joined #postfix[19:25:36] *** Patrickdk has quit IRC[19:25:40] *** davlefou_ has quit IRC[19:27:16] *** patdk-wk has quit IRC[19:30:28] *** watermark has left #postfix[19:40:05] *** Phoenixz has joined #postfix[19:41:27] *** hparker has quit IRC[19:41:56] *** Blubberbop has joined #postfix[19:46:28] *** zerick has quit IRC[19:56:55] *** ffiore has quit IRC[19:58:00] *** thumbs has quit IRC[19:58:58] *** watermark has joined #postfix[19:59:51] *** patdk-wk has joined #postfix[20:01:58] *** thumbs has joined #postfix[20:02:24] <watermark> Hello. I have postfix setup as a relay, so 100% going through this install is destined outside the building. Are there any rate limiting settings that affect how quickly postfix can accept this mail for relay? Or does it just accept as fast as it can?[20:03:02] <lunaphyte> postfix has lots of moving parts. why do you ask?[20:04:16] <watermark> My web server relays through this postfix install and it timed out while trying to send a lot of emails. I'm trying to figure out my bottleneck.[20:04:29] <lunaphyte> !tell watermark welcome[20:04:29] <knoba> watermark: "welcome" : Welcome to #postfix! If you're new here, or to IRC, first read the channel topic (/topic). It has important instructions on how to ask good questions. You will get more and better help if you follow those instructions. Good Luck![20:05:39] *** BooeyOH has left #postfix[20:07:39] *** Jabberwock has joined #postfix[20:07:40] <watermark> I don't understand knoba, are you suggesting I post logs and configs? The original question was "Are there any rate limiting settings that affect how quickly postfix can accept this mail for relay? Or does it just accept as fast as it can?", which I didn't think would depend on those?[20:07:59] <Jabberwock> Hi all. What is the new way to create blacklists since check_sender_access seems to no longer be valid?[20:08:29] <lunaphyte> "I'm trying to figure out my bottleneck." is the actual question. for help with that, follow the instructions in the factoid shared with you.[20:08:31] <lunaphyte> also, knoba is a bot...[20:08:41] <lunaphyte> Jabberwock: create blacklists for what?[20:09:18] <Jabberwock> icpbounce.com specifically.[20:09:38] <lunaphyte> why? what problem are you trying to solve?[20:10:01] <Jabberwock> Constant mail log consumption.[20:10:26] *** whoami has quit IRC[20:10:28] <watermark> thanks anyway[20:10:31] *** watermark has left #postfix[20:10:43] <lunaphyte> please be specific[20:10:54] <Jabberwock> I'm using greylisting so their emails never come all the way through but the attempts put too much junk in my logs.[20:11:18] *** hparker has joined #postfix[20:11:26] <Jabberwock> So - blacklisting. It's been around for as long as I've been setting up mail servers. Postfix used to have check_sender_access. Now it doesn't.[20:11:30] <lunaphyte> are you using postscreen?[20:11:51] <lunaphyte> who told you postfix doesn't have check_sender_access?[20:11:51] <Jabberwock> No. This is the first time I've seen that term.[20:12:03] <lunaphyte> configure and start using postscreen[20:12:04] <Jabberwock> postfix says that it is unused[20:12:40] <lunaphyte> it's unlikely you'll need greylisting once postscreen is properly configured[20:13:04] <lunaphyte> unused means unused. unused does not mean not valid.[20:13:16] <Jabberwock> Not sure why it is unused then.[20:13:31] <Jabberwock> It has been several years since I set up a mail server. Forgot a lot of the details.[20:13:41] <Jabberwock> Everything else is working fine.[20:13:43] <lunaphyte> blacklists aren't practical for fighting spam anyway.[20:13:44] *** jarif has joined #postfix[20:13:51] *** Kako has quit IRC[20:14:49] <Jabberwock> This is a simple personal email server set up on a laptop. It doesn't get a ton of traffic[20:14:57] <lunaphyte> that's not relevant.[20:14:58] <Jabberwock> Though most of the spam is coming from icpbounce.com[20:15:16] <Jabberwock> I've had a rough day and forgive me for saying that you seem like a robot.[20:15:20] <Jabberwock> Just needed to get that out :P[20:15:48] *** master_o1_master has joined #postfix[20:15:48] <Jabberwock> And I appreciate your help.[20:17:23] <lunaphyte> well, i'm not sure what that little outburst was about, but if you want help, pastebin your config as per the getting_help factoid.[20:17:42] <Jabberwock> For what it's worth every human robot I know has a BASc.[20:18:36] <lunaphyte> i don't know what that means[20:18:48] *** master_of_master has quit IRC[20:19:02] <Jabberwock> Bachelor's of Applied Science[20:19:07] <lunaphyte> oh[20:19:11] <Jabberwock> I was calling you smart :P[20:19:18] <Jabberwock> after poking fun. sorry.[20:20:22] *** whoami has joined #postfix[20:21:44] <Jabberwock> And thank you for the postscreen reference.[20:21:48] <Jabberwock> take care.[20:21:49] *** Jabberwock has quit IRC[20:25:37] *** davlefou__ has quit IRC[20:28:09] *** chatran has joined #postfix[20:28:12] <chatran> hello all[20:28:59] <chatran> someone know any politic to postfix only accept e-mails from who reply my server?[20:28:59] <thumbs> !mstmp[20:29:00] <knoba> thumbs: Error: "mstmp" is not a valid command.[20:29:04] <thumbs> !nullclient[20:29:04] <knoba> thumbs: "nullclient" : a null client is a computer that can only send mail. it receives no mail from the network, and it does not deliver any mail locally. while postfix can be configured to fill this role, it is often unnecessary overkill, and a much simpler software package is more appropriate. see !nullclient_software for more details.[20:29:08] <chatran> !mstmp[20:29:08] <knoba> chatran: Error: "mstmp" is not a valid command.[20:29:12] <thumbs> !nullclient_software[20:29:13] <knoba> thumbs: "nullclient_software" : a program that serves as a drop in replacement for /usr/sbin/sendmail and provides a simple means to submit messages to an existing msa without the need to install and maintain a full-blown mta/msa. examples include msmtp, esmtp, ssmtp and nullmailer. also see !msa[20:29:25] <thumbs> !msmtp[20:29:25] <knoba> thumbs: "msmtp" : a nullclient program which provides a means for a computer to submit mail to an existing msa. see http://msmtp.sourceforge.net/ for more info. also see !nullclient_software, !nullclient and !msa[20:29:28] <chatran> ?[20:29:31] <thumbs> it's for me.[20:31:07] <chatran> thumbs do you know what is the name that politic to accep e-mails from "know" users ?[20:31:18] <lunaphyte> i don't understand[20:31:19] <chatran> my server record who reply[20:31:35] <lunaphyte> what is politic?[20:31:43] <thumbs> policy, perhaps?[20:31:45] <chatran> i dont know,[20:31:53] <chatran> yeh sry im from brasil[20:31:58] <chatran> bad english[20:32:16] <chatran> my server only accept e-mails from who reply a message[20:32:21] *** UQlev has joined #postfix[20:32:31] <lunaphyte> i can't understand that[20:32:39] <chatran> hum... let me try again[20:32:54] <chatran> i dont want accept messages from anyone[20:33:17] <chatran> i only want accept from who reply a automatic message from my server[20:33:26] <chatran> lunaphyte better ?[20:33:36] <lunaphyte> what automatic message?[20:34:09] <chatran> my automatic message will say: to send message to this user you need to reply this message[20:34:31] <lunaphyte> oh. no, don't do that.[20:34:36] <lunaphyte> what is the actual problem?[20:34:37] <chatran> than my server recognize if its a human[20:34:42] <chatran> spam is a problem[20:34:54] <lunaphyte> there are better ways of dealing with spam[20:35:08] <lunaphyte> proper restrictions in your config, and postscreen[20:35:11] <chatran> im already read about this policy... i know its not a good idea[20:35:22] <lunaphyte> yes, a bad idea.[20:35:23] <chatran> but i need show to my boss AGAIN[20:35:32] <chatran> what is the name of that ?[20:35:36] <chatran> i will read again[20:35:58] <lunaphyte> challenge-response spam filtering[20:36:08] <chatran> yehhhhhh that is !! thank you[20:36:16] <lunaphyte> it's not only unwise, it's simply impractical[20:36:18] <chatran> i have here a lot spam protections[20:36:36] <chatran> but here .. have especialized companys to make spam[20:36:42] <chatran> we need accept spams here[20:36:53] <chatran> ... need accept but we dont want[20:37:02] <chatran> totally controverse[20:37:30] <lunaphyte> spam is a problem for everyone.[20:37:39] *** davlefou__ has joined #postfix[20:37:40] <lunaphyte> you company is not special[20:38:29] <chatran> i have here a lot spam blocks[20:38:29] <lunaphyte> organizations much much larger than yours deal with spam reasonably effectively, without doing silly annoying things like crsf[20:38:46] <lunaphyte> i don't know what "i have here a lot spam blocks" means.[20:38:47] *** UQlev has quit IRC[20:39:24] <rob0> seems like I saw something which does a challenge in-band, but I can't remember where[20:39:32] <chatran> mailscanner, spamassassin rfcs on postfix... and like 20 rbls[20:39:40] <lunaphyte> oh, i see.[20:39:42] <rob0> C/R wouldn't be so evil if it happened in-band.[20:40:08] <chatran> rob0 ?[20:40:19] * wdp remembers that there has been some php page which did exactly that. you've send a mail and got an automatic answer mail which asked you to visit a special page and enter some code. otherwise your mail wouldn't get through.[20:40:50] <wdp> years ago when that thing was new (yeah.. probably lots of years) i liked that idea.[20:41:19] *** patdk-wk_ has joined #postfix[20:41:51] *** patdk-wk has quit IRC[20:48:45] *** nutron has quit IRC[20:48:56] <jelly-home> a challenge response system, is a technical approach to fighting spam. Here's why it won't work: [insert form here][20:51:29] <rob0> The simple answer is: C/R makes you a spammer, and this channel refuses to support spammers.[20:53:01] <rob0> but yeah, if the challenge was given via a SMTP rejection, and the response was in the envelope (RCPT), it would be okay.[20:54:04] <jelly-home> C/R makes you a spammer, backscatter makes you a spammer, autoreplies announcing the gravitational pull of rob0's old lady makes you a spammer, where does it all end[20:55:10] <twobithacker> all email is spam, just use Facebook messages[20:58:06] *** kocheshkov has joined #postfix[20:58:46] <jelly-home> Internet Mail 2000 ftw[21:00:07] <chatran> :([21:00:23] <chatran> what more i can implement here ?[21:00:31] <chatran> jelly-home ?[21:00:50] *** Section1 has quit IRC[21:01:25] <chatran> i have postfix + rbl + mailscanner + spamasssassin + this :[21:01:26] <chatran> permit_sasl_authenticated,[21:01:27] <chatran> reject_unknown_client,[21:01:27] <chatran> reject_unknown_sender_domain,[21:01:27] <chatran> reject_unknown_recipient_domain,[21:01:27] <chatran> reject_invalid_hostname,[21:01:27] <chatran> reject_non_fqdn_hostname,[21:01:27] <chatran> reject_unknown_hostname[21:01:34] <chatran> is a lot thing[21:01:58] <chatran> and i receive and accept like 2000 e-mails daily[21:02:06] <chatran> 2000 spams[21:07:35] <rob0> !cheatsheet[21:07:36] <knoba> rob0: "cheatsheet" : (#1) http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt : A HOWTO for pre-DATA spam control., or (#2) A postscreen cheatsheet can be seen at http://rob0.nodns4.us/postscreen.html[21:08:17] <rob0> "rbl" is a meaningless (and proprietary!) term[21:08:24] <rob0> !paste[21:08:24] <knoba> rob0: "paste" : do not paste more than 2 lines in the channel. A pastebin is a way to share larger amounts of data with others, without flooding the channel with garbage. try http://pastebin.com or http://paste.debian.net (or use google and find your own). don't forget to tell us the url where you pasted the text[21:09:59] *** MaximusColourum has quit IRC[21:10:50] <patdk-wk_> is a lot thing?[21:12:57] *** kocheshkov has quit IRC[21:15:09] <adaptr> fancy you not understanding that[21:15:14] <adaptr> it's so obvious[21:15:17] *** zulcc|afk is now known as zulcc[21:15:53] <patdk-wk_> somehow I think 2000 emails daily is not much[21:16:20] <adaptr> a minute would be different[21:23:17] <rob0> 2000 spams daily getting through on one address/account would indicate inadequate spam control restrictions.[21:23:44] <adaptr> incontinence[21:23:52] <adaptr> incontentinence[21:24:24] <rob0> Intercontinental ballistic missile[21:25:37] <trurl> good evening. i'm using relay_transport=lmtp:[...]dovecot-lmtp to relay mails to a bunch of domains to dovecot an the same host. i'm also using an opendkim [non-]smtpd-milter. everything works fine, except when [...][21:25:49] *** davlefou__ has quit IRC[21:27:04] <trurl> i send a mail from domain a to domain b, which are both designated to this host. the mail gets signed but never verified. is there a way to also verify those mails?[21:29:01] *** mentik has joined #postfix[21:34:35] *** zerick has joined #postfix[21:35:15] *** chatran__ has joined #postfix[21:35:59] *** nutron has joined #postfix[21:37:50] *** chatran has quit IRC[21:39:05] *** davlefou__ has joined #postfix[21:42:19] *** wdp has quit IRC[21:44:39] *** Guest02377-50092 has joined #postfix[21:47:39] *** internat has quit IRC[21:49:11] *** zok has quit IRC[21:58:09] *** TRUNASUCI has quit IRC[21:59:55] *** olegfusion has quit IRC[22:11:26] *** dddtest_bd5ae has quit IRC[22:13:54] <adaptr> how are you sending the mail ?[22:15:32] *** robinho86 has quit IRC[22:18:02] *** mentik has quit IRC[22:20:55] *** gongoputch has quit IRC[22:20:56] *** freezey has quit IRC[22:21:15] *** freezey has joined #postfix[22:23:36] *** davlefou_ has joined #postfix[22:26:28] *** davlefou__ has quit IRC[22:28:31] <trurl> adaptr: i'm delivering it to smtpd from the outside[22:34:18] <trurl> adaptr: example: http://nopaste.me/paste/84692104552717b3d9ad1f[22:44:13] <adaptr> and you expect a non-smtpd milter to do...what ?[22:47:36] <trurl> i'm not expecting anything, i just wonder if there's a way to also verify these mails. like every other mail (except those originating at this host)[22:50:38] *** danfromuk has joined #postfix[22:51:00] <danfromuk> Hi. Whats the best free antivirus for postfix?[22:51:24] <lunaphyte> clamav[22:54:10] <danfromuk> thanks[22:59:36] <danfromuk> Do i need to install mailscanner to get clamav to filter emails? or can i do without it?[22:59:44] <lunaphyte> !mailscanner[22:59:44] <knoba> lunaphyte: "mailscanner" : don't you dare! mailscanner uses direct manipulation of postfix queues, employing undocumented methods, which may potentially change without warning at any point. there are much better ways for this sort of thing. consider amavisd-new instead.[22:59:57] <lunaphyte> did someone tell you that you needed mailscanner?[23:00:25] <danfromuk> Just googling for a guide to postfix with clamav and got this[23:00:26] <danfromuk> http://zee.linxsol.com/system-administration/centos-62-installing-postfix-clam-anti-virus-and-mailscanner.html[23:00:48] <lunaphyte> i don't know who that is. are they the authors of clamav?[23:01:05] <danfromuk> i doubt it[23:01:11] <lunaphyte> me too[23:01:24] <lunaphyte> not sure why you'd be going to them for advice on using the software. do you know them?[23:01:54] <danfromuk> i just did a google. not taken any advice yet[23:02:05] <lunaphyte> !google[23:02:05] <knoba> lunaphyte: "google" : Those who use Google before reading the Postfix documentation, if fortunate, end up at http://www.postfix.org/ . If not, they end up in a jumble of bad questions, misleading or wrong answers, and outdated information.[23:03:07] <lunaphyte> same goes for all software[23:03:18] <danfromuk> postfix.org doesnt seem to give any details on how to use clamav[23:03:29] <lunaphyte> indeed.[23:03:52] <lunaphyte> as with virtually all software, clamav comes with instructions on using it.[23:15:42] *** lunaphyte has quit IRC[23:16:11] *** lunaphyte has joined #postfix[23:17:52] *** zulcc has quit IRC[23:18:51] *** lunaphyte has joined #postfix[23:19:15] *** lunaphyte has quit IRC[23:23:31] *** danfromuk has quit IRC[23:24:12] *** danfromuk has joined #postfix[23:24:13] *** danfromuk has joined #postfix[23:24:16] *** davlefou__ has joined #postfix[23:27:17] *** davlefou_ has quit IRC[23:30:13] *** donmichelangelo has quit IRC[23:30:46] *** donmichelangelo has joined #postfix[23:36:10] *** lunaphyte has joined #postfix[23:36:25] *** lunaphyte has quit IRC[23:38:34] *** bungalo has joined #postfix[23:38:56] *** lunaphyte has joined #postfix[23:52:04] *** dead_inside has joined #postfix