January 18, 2016 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
January 18, 2016 [00:01:41] *** faheem has quit IRC[00:02:29] *** namyzarc has quit IRC[00:04:14] *** faheem has joined #postfix[00:04:57] *** namyzarc has joined #postfix[00:07:44] *** joules has joined #postfix[00:28:49] *** tonil has quit IRC[00:31:04] *** grossing has joined #postfix[00:38:49] *** [44] has quit IRC[00:40:23] *** JanC has joined #postfix[00:45:35] *** wdp has quit IRC[01:12:07] *** armguy has joined #postfix[01:26:43] *** edux has joined #postfix[02:18:25] *** edux has quit IRC[02:25:43] *** edux has joined #postfix[02:30:40] *** edux has quit IRC[02:31:59] *** anunnaki has quit IRC[02:34:11] *** rhizome has quit IRC[02:35:53] *** rhizome has joined #postfix[02:43:52] *** edux has joined #postfix[02:43:59] <DarwinElf> my server works to send mail to system users (also remotely)... but I'm getting errors trying to send mail remotely as one of those users. Here's my log of one mail: https://dpaste.de/FJ0r , and configuration: https://dpaste.de/FSZS[02:49:05] *** edux has quit IRC[02:53:49] *** edux has joined #postfix[02:58:23] *** edux has quit IRC[03:03:21] *** err-or_ has joined #postfix[03:04:51] *** anunnaki has joined #postfix[03:07:45] *** err-or has quit IRC[03:08:18] <lunaphyte> good job with the pastebin.[03:09:24] <lunaphyte> can you confirm your key and certificate are proper and readable?[03:10:15] <lunaphyte> for the key, openssl rsa -noout -text -in /etc/certs/smtp.key.pem[03:11:10] <lunaphyte> but don't pastebin that. just make sure it runs successfully, doesn't complain, and prints info about the key[03:11:35] <lunaphyte> for the cert, openssl x509 -in /etc/certs/smtp.cert.pem -noout -text[03:11:38] *** edux has joined #postfix[03:13:23] <lunaphyte> by the way, you should not have smtps enabled. that has been deprecated for over 15 years now, and should not be used[03:14:23] *** Tourist has quit IRC[03:15:59] *** edux has quit IRC[03:16:59] <DarwinElf> both commands seemed to work fine[03:17:11] <DarwinElf> maybe it's just my mail client (Thunderbird) setup[03:17:25] <lunaphyte> use s_client to test postfix "manually"[03:18:08] *** michelangelo has joined #postfix[03:18:22] <lunaphyte> you can pastebin the openssl x509 output, if you'd like us to verify the characteristics of your cert are proper. there's no private info in a cert, so that's safe to pastebin[03:18:49] <DarwinElf> ok[03:19:11] <DarwinElf> https://dpaste.de/CNOw[03:19:35] <lunaphyte> that command is incomplete[03:21:04] <DarwinElf> oops[03:22:14] *** donmichelangelo has quit IRC[03:22:15] <DarwinElf> ok, https://dpaste.de/6ekK[03:22:51] <lunaphyte> can you please post the url to the raw pastebin data?[03:23:00] <lunaphyte> e.g. https://dpaste.de/6ekK/raw[03:23:27] <lunaphyte> it's much more readable, and saves those helping from having to click a link for every paste[03:23:57] <DarwinElf> ok[03:24:01] <lunaphyte> the cert looks reasonable[03:24:47] <lunaphyte> so the next test will be how s_client works out. i have to go for now. bbl[03:24:54] <lunaphyte> !tell DarwinElf s_client[03:24:54] <knoba> DarwinElf: "s_client" : see !tlstest[03:24:57] <lunaphyte> meh[03:25:02] <lunaphyte> !tell DarwinElf tls_test[03:25:02] <knoba> lunaphyte: Error: No factoid matches that key.[03:25:06] <lunaphyte> grr[03:25:10] <lunaphyte> !tlstest[03:25:11] <knoba> lunaphyte: "tlstest" : Starting with OpenSSL 0.9.7, you can test the server-side TLS with the following: openssl s_client -starttls smtp -connect <hostname>:587 (or :25, accordingly).[03:25:17] <lunaphyte> that is backwards[03:25:31] <lunaphyte> !forget tlstest[03:25:39] <lunaphyte> !forget s_client[03:25:43] <lunaphyte> !s_client[03:25:43] <knoba> lunaphyte: Error: "s_client" is not a valid command.[03:25:56] <lunaphyte> !learn s_client as Starting with OpenSSL 0.9.7, you can test the server-side TLS with the following: openssl s_client -starttls smtp -connect <hostname>:587 (or :25, accordingly).[03:25:58] <DarwinElf> so I shouldn't do that, or...?[03:26:11] <lunaphyte> !learn tlstest as see !s_client[03:26:16] <lunaphyte> !tlstest[03:26:16] <knoba> lunaphyte: "tlstest" : see !s_client[03:26:23] <lunaphyte> !s_client[03:26:24] <knoba> lunaphyte: "s_client" : Starting with OpenSSL 0.9.7, you can test the server-side TLS with the following: openssl s_client -starttls smtp -connect <hostname>:587 (or :25, accordingly).[03:26:27] <lunaphyte> that's better[03:26:34] <pj> hehehe[03:26:47] <lunaphyte> DarwinElf: no, you should. i was just referring to the naming of the two factoids being backwards[03:26:53] <DarwinElf> I copied that in, replaced hostname, don't really know what to do next[03:27:16] *** grantwu has left #postfix[03:28:07] <pj> DarwinElf: it opens a TLS session to the server, the rest is the same as if you're using telnet, but it will be encrypted. It also spits out a bunch of info about the TLS that is useful for debugging.[03:29:37] <pj> DarwinElf: I suggest you read the sclient man page for more info.[03:29:40] <pj> *s_client[03:29:48] <DarwinElf> I don't understand enough of it to know if it's working or Thunderbird settings are wrong[03:29:52] *** edux has joined #postfix[03:30:34] <DarwinElf> at the end it says 250 SMTPUTF8[03:31:14] * pj sighs[03:31:21] <pj> DarwinElf: pastebin[03:32:24] <DarwinElf> https://dpaste.de/XQ4v/raw[03:34:12] *** edux has quit IRC[03:34:14] <pj> DarwinElf: it is connecting to your server just fine on port 587 and negotiating a TLS 1.2 session.[03:34:28] <DarwinElf> awesome[03:34:52] <pj> the only issue is that it is a self-signed certificate, but that's not really an issue for you.[03:38:04] <pj> DarwinElf: you can try issuing an EHLO command after that 250 prompt if you want: EHLO example.com[03:38:17] <pj> then the server should spit out its capabilities.[03:39:04] <DarwinElf> ok, I recall that. So it was the wrong port number in Thunderbird; I hadn't used the ports for more secure services anywhere I set up a mail account that hadn't been configured automatically. I just sent myself a mail from Thunderbird[03:39:22] <thumbs> what port were you using?[03:39:28] <DarwinElf> 465[03:39:32] <thumbs> there's the problem.[03:39:33] <pj> !smtps[03:39:33] <knoba> pj: "smtps" : Port 465 is smtps, SMTP over SSL, a deprecated means of submission. This means that smtps should *not* be used, and that this factoid exists for historical purposes only and should not be implemented. See !submission for smtps' successor. That being said, Postfix can implement smtps with a separate smtpd(8) listener with \"-o smtpd_tls_wrappermode=yes\". See the commented example in master.cf.[03:39:50] *** spq has joined #postfix[03:39:55] <DarwinElf> that's just 'default' in Thunderbird so I changed it to 587[03:40:09] <thumbs> no, it isn't.[03:40:55] <DarwinElf> YES, IT IS![03:41:05] <pj> DarwinElf: no, it isn't...[03:41:22] <thumbs> DarwinElf: you're mistaken. It isn't.[03:41:22] <pj> DarwinElf: Thunderbird selects the appropriate port by default depending on the type of encryption you choose[03:41:32] <rob0> I recall Tbird defaulting to 587?[03:41:39] <rob0> oh[03:41:42] <pj> if you select SSL then it will pick 465...[03:41:43] <thumbs> if you pick STARTTLS, it'll pick 587[03:41:44] <spq> hi, i would like to accept incoming mail for <a specific user>@<whatever domain> and redirect the mail to a mail address, i need to accept mails for subdomains normally not used for mail because the ssl provider wants to verify each subdomain[03:41:48] <rob0> yes[03:41:49] <pj> if you select STARTTLS it will pick 587[03:41:53] <thumbs> pj: indeed.[03:42:45] <pj> !tell spq virtual_alias_maps[03:42:45] <knoba> spq: "virtual_alias_maps" : A configuration parameter in the main.cf: Optional lookup tables that alias specific mail addresses or domains to other local or remote addresses. The table format and lookups are documented in virtual(5).[03:43:11] <rob0> and !virtual_alias_domains[03:43:30] <rob0> otherwise it won't be accepted[03:43:34] <pj> yes[03:43:42] <spq> hmm thanks, will look into it![03:44:13] <thumbs> picking SSL was the mistake for DarwinElf[03:44:20] <pj> thumbs: quite[03:47:30] *** edux has joined #postfix[03:50:39] <spq> can i have a negative list for virtual_alias_domains ? (just exclude those the main postfix server previously relayed mails for)[03:52:06] *** edux has quit IRC[03:53:37] <rob0> relayed mails for ... ?[03:54:25] <spq> the postfix server does not deliver mails locally, just transport them to the relevant backend mail servers depending on the domain[03:54:47] <pj> spq: is this a public MX?[03:55:01] <spq> what do you mean with public?[03:55:15] <rob0> Obviously (?) you would only list in virtual_alias_domains the specific domains you need to list there.[03:56:08] <pj> well, you're wanting to set up a mail server that will accept mail to any email address with any domain and relay it on to your backend servers. Sounds like a disaster to me.[03:56:11] <spq> i would like to accept any, (ok, any ending with some domains but having subdomains in front)[03:56:39] <spq> pj: no, i would want to rewrite them also only accepting for admin@*[03:57:10] <spq> what i want is make postfix "redirect" all mail for admin@* to <fixed email address>[03:57:41] <spq> even a bit smaller set: admin at * dot domain.tld[03:57:56] <pj> even so, you hsould have a list fo valid domains and email addresses. Accepting mail for invalid subdomains is going to be abused.[03:58:02] <spq> target should be admin at domain dot tld[03:58:43] <spq> i could describe the subdomains with a regex[03:58:51] <pj> then you can use a pcre table[03:59:04] <spq> yep, just figured that out on my own :)[03:59:07] <spq> thank you[03:59:18] <pj> yw[03:59:34] <spq> ^[a-z]+[.]<domain>[.]<tld>$[03:59:51] <spq> ah plus the perl slashes[03:59:57] <pj> that still is pretty much any domain, though[04:00:03] <pj> errr any subdomain[04:00:06] <spq> yep[04:00:20] <pj> in fact the only other char valid for subdomains is a dash (-)[04:00:30] <pj> oh and digits[04:01:37] <spq> do virtual_alias_maps need to contain locally deliverable addresses or can i put admin at <domain> dot <tld> which will be forwarded to the backend mailserver?[04:02:16] *** chachasmooth has quit IRC[04:02:38] <pj> you can put any address there, local or remote.[04:02:59] <pj> I would just caution you against forwarding to servers that you don't control.[04:03:26] <rob0> someone mentioned putting that in !mantras[04:03:42] <pj> !mantras[04:03:42] <knoba> pj: "mantras" : 1. do not accept mail that you do not intend to deliver. 2. do not drop mail. 3. do not use wildcards or catchalls.[04:04:05] <pj> 1 and 2 are really the same thing there, imo.[04:04:33] <spq> pj: i control both servers but would like to add this feature on the postfix one, the backend is exim and i hate exim :>[04:04:48] <pj> spq: yes, it's fine if you control the target server.[04:05:25] <pj> what happens sometimes is someone decides they want to forward all their domains mail to a gmail account, including the SPAM, then they wonder why their server gets blacklisted by google.[04:05:45] *** edux has joined #postfix[04:11:00] *** edux has quit IRC[04:14:08] <spq> it works, thank you[04:14:16] <pj> spq: yw[04:16:32] *** chachasmooth has joined #postfix[04:23:54] *** edux has joined #postfix[04:28:35] *** edux has quit IRC[04:33:27] *** edux has joined #postfix[04:37:01] *** tonythomas has joined #postfix[04:39:17] *** edux has quit IRC[04:42:41] *** ananayarora has joined #postfix[04:50:30] <rob0> pj, no, mantra #1 refers to having properly-populated address maps for wach address class.[04:51:28] *** edux has joined #postfix[04:56:29] *** edux has quit IRC[04:58:01] <pj> rob0: well I would say that #2 is a subset of #1, since dropping mail pretty much means that you had to accept it in the first place and you're not delivering it.[05:00:08] <rob0> maybe #1 should say "don't accept mail you're going to bounce"[05:00:36] *** edux has joined #postfix[05:01:38] <pj> ahhh, yep, that would be better.[05:05:27] *** edux has quit IRC[05:09:46] *** edux has joined #postfix[05:10:26] *** d0nn1e has quit IRC[05:12:57] *** d0nn1e has joined #postfix[05:13:17] *** ananayarora has quit IRC[05:14:55] *** edux has quit IRC[05:18:53] *** edux has joined #postfix[05:23:45] *** edux has quit IRC[05:28:10] *** edux has joined #postfix[05:32:50] *** edux has quit IRC[05:46:17] *** edux has joined #postfix[05:50:15] *** edux has quit IRC[06:04:29] *** edux has joined #postfix[06:08:54] *** edux has quit IRC[06:12:12] *** ananayarora has joined #postfix[06:12:47] <lunaphyte> #2 was meant to sort of underscore #1, and illustrate the worst possible manifestation of #1[06:13:57] <lunaphyte> and i really, really hate those stupid, misleading, terms in thunderbird[06:14:18] <lunaphyte> really in pretty much all mail clients, for that matter, sadly[06:16:03] <lunaphyte> and yet i'm chastised by the "you know what i mean" crowd, in all places, in ##security when i call people out for being lazy and imprecise and calling things ssl that aren't[06:16:48] <thumbs> lunaphyte: some folks dislike being called on their vagueness[06:16:56] <lunaphyte> they sure do[06:17:32] <lunaphyte> typical fragile egos, as usual. it's sad how prevelant it is[06:18:48] <lunaphyte> *prevalent[06:20:50] <lunaphyte> time to go cry myself to sleep over it :)[06:22:34] <jrj> hello. what way recommended for mail setup with 2 internet connections?[06:22:38] *** edux has joined #postfix[06:23:00] <jrj> connections - from different providers[06:23:33] <jrj> 1. one main server with one backup mx[06:23:44] <lunaphyte> set up two mail servers. one for each connection. then configure them to both relay to the same mda[06:24:02] <lunaphyte> no. no "backup" mx. just two mx, both the same, both active[06:24:06] <jrj> 2. two mail gateways with one working smtp+imap inside lan?[06:25:26] <jrj> lunaphyte, do i need dns configuration for LAN? my lan is private[06:25:49] <jrj> mail server behind NAT[06:26:06] <jrj> i mean dns for MUA wrking[06:26:28] <lunaphyte> a dns configuration for any network is generaly recommended, reagardless of any particular considerations for email[06:26:31] <lunaphyte> *generally[06:26:44] <jrj> now i have mail server (on windows) where smtp and imap. clients connection to one point[06:27:11] *** edux has quit IRC[06:30:15] <jrj> if i got your point - i can make 2 postfix server. one imap (without postfix). MUA connect to smtp.mydomain.local. Local DNS has two A records for "smtp.domain.local" name, or two mx records for local domain with same priority. same DNS config for public networks (on ISP and site hosting - i have not own dns on internet)[06:30:42] <jrj> and postfix can deliver mail do imap over LAN[06:30:56] <jrj> * mail TO imap *[06:36:07] <jrj> or i need another smtp service on imap server?[06:36:10] *** TyrfingMjolnir has quit IRC[06:44:20] <pj> lunaphyte: it gets worse becuase different email clients can't agree on what to call the different security settings.[06:45:51] *** roentgen has joined #postfix[06:49:20] *** edux has joined #postfix[06:54:10] *** edux has quit IRC[06:54:41] *** leprechau has quit IRC[06:56:26] *** leprechau has joined #postfix[07:01:41] *** leprechau has quit IRC[07:05:18] *** leprechau has joined #postfix[07:07:35] *** edux has joined #postfix[07:12:17] *** edux has quit IRC[07:17:02] *** edux has joined #postfix[07:20:35] *** ananayarora has quit IRC[07:22:05] *** edux has quit IRC[07:22:51] *** ananayarora has joined #postfix[07:34:24] *** chachasmooth has quit IRC[07:35:27] *** chachasmooth has joined #postfix[07:36:53] *** echan has joined #postfix[07:48:45] *** ananayarora has quit IRC[07:50:27] *** ananayarora has joined #postfix[08:01:01] *** damyan^ has quit IRC[08:03:28] *** ananayarora has quit IRC[08:03:51] *** ananayarora has joined #postfix[08:04:26] *** on1ald has quit IRC[08:08:24] *** Tourist has joined #postfix[08:08:25] *** Tourist has joined #postfix[08:10:00] *** troulouliou_div2 has joined #postfix[08:12:03] *** skylite has joined #postfix[08:12:34] *** damyan^ has joined #postfix[08:15:37] *** ananayarora has quit IRC[08:15:55] *** ananayarora has joined #postfix[08:16:12] *** carl- has joined #postfix[08:17:44] *** on1ald has joined #postfix[08:18:00] *** Motoko has joined #postfix[08:20:13] *** edux has joined #postfix[08:23:45] *** Motoko has quit IRC[08:25:11] *** edux has quit IRC[08:26:04] *** ananayarora has quit IRC[08:29:56] *** ananayarora has joined #postfix[08:37:35] *** ananayarora has quit IRC[08:37:52] *** ananayarora has joined #postfix[08:38:04] *** ananayarora has quit IRC[08:38:37] *** edux has joined #postfix[08:39:02] *** chachasmooth has quit IRC[08:43:51] *** edux has quit IRC[08:48:20] *** zorg1 has joined #postfix[08:51:47] *** Haudegen has quit IRC[08:54:25] *** internat has quit IRC[08:56:39] *** edux has joined #postfix[08:58:25] *** internat has joined #postfix[08:59:19] <jrj> lunaphyte, i tried to search about recommended scheme. you mean deliver mail from MX to Dovecot over LMTP?[09:00:49] <jrj> i plan to use Dovecot as IMAP server[09:01:50] *** edux has quit IRC[09:02:29] <pj> jrj: yeah, that's pretty much what lunaphyte meant. dovecot lmtp can listen on an inet socket so any external mail server can connect to it remotely just as easily as if it were on the same server.[09:02:57] <pj> !dovecot_lmtp[09:02:58] <knoba> pj: "dovecot_lmtp" : A Message Delivery Agent (MDA) included with Dovecot 2.0 and higher that uses the !lmtp transport. See http://wiki2.dovecot.org/HowTo/PostfixDovecotLMTP.[09:04:39] <jrj> ok. thank you lunaphyte and knoba[09:07:32] *** SCHAAP137 has joined #postfix[09:08:48] <jrj> oh. sorry pj. just realized. thank you too =)[09:09:02] <pj> ;-)[09:14:46] *** Haudegen has joined #postfix[09:14:53] *** edux has joined #postfix[09:15:49] *** jwing has quit IRC[09:19:34] *** edux has quit IRC[09:21:09] *** altin has quit IRC[09:21:30] *** altin has joined #postfix[09:24:12] *** edux has joined #postfix[09:27:30] *** altin has quit IRC[09:29:35] *** edux has quit IRC[09:30:37] *** altin has joined #postfix[09:33:20] *** edux has joined #postfix[09:37:56] *** edux has quit IRC[09:40:10] *** chachasmooth has joined #postfix[09:41:15] *** tonil has joined #postfix[09:41:15] *** tonil has joined #postfix[09:42:33] *** edux has joined #postfix[09:45:44] *** chachasmooth has quit IRC[09:47:10] *** edux has quit IRC[09:47:55] *** TyrfingMjolnir has joined #postfix[09:51:31] *** edux has joined #postfix[09:55:46] *** edux has quit IRC[09:58:21] *** Mizar has joined #postfix[09:59:54] *** ntnlzr has joined #postfix[10:00:36] *** edux has joined #postfix[10:04:55] *** edux has quit IRC[10:09:37] <ntnlzr> i need an help but it's a little bit ot here[10:09:41] *** edux has joined #postfix[10:09:49] <ntnlzr> i've a problem with spamassassin[10:10:17] <ntnlzr> i don't understand why on 1 server not add some rules[10:10:31] <ntnlzr> can i ask here for help ? On spamassassin nobody answer :([10:10:56] <ntnlzr> what i've missed in this http://pastebin.com/cT4VqA7x instead of http://pastebin.com/CTPpTWT7[10:11:12] <ntnlzr> i don't understand i've barracuda rules in 72_active of spamassassin :([10:13:03] <pj> ntnlzr: nope, you need to ask in a place appropriate to spamassassin.[10:13:42] <pj> you can wait for an answer or see if they have a mailing list or forum, etc.[10:13:55] <ntnlzr> ok sry about it[10:14:05] *** edux has quit IRC[10:18:42] *** edux has joined #postfix[10:19:46] *** DarwinElf has left #postfix[10:22:21] <tuxick> #spamassassin is far from dead[10:23:32] *** edux has quit IRC[10:26:41] <ntnlzr> i'm on it but nobody talk :([10:27:51] *** edux has joined #postfix[10:29:37] <pj> ntnlzr: people aren't going to respond right away, they have lives, and do keep in mind that it's the middle of the night in many places in the world.[10:32:14] *** edux has quit IRC[10:32:57] <ntnlzr> i know it[10:33:23] <ntnlzr> pj, i don't want nothing but when i see an help request and i know the answer i'm glad to help other[10:33:43] <ntnlzr> but this is my point of view :([10:34:50] <pj> ntnlzr: yes, and so am I, the point is, that people won't see your question right away, they are busy doing other things ... like sleeping.[10:35:51] <survietamine> I see your question, it's daytime here, but I don't know the answer :/[10:35:51] <ntnlzr> eheh[10:36:09] <survietamine> I need antispam too[10:36:45] <ntnlzr> speak in #spamassassin ![10:36:52] *** edux has joined #postfix[10:37:11] <survietamine> no, I didn't set anything (amavisd-new, spamassassin...)[10:37:39] <survietamine> and I know I should read manuals before asking[10:41:24] *** edux has quit IRC[10:41:36] *** infides has joined #postfix[10:41:49] *** err-or_ has quit IRC[10:42:47] *** err-or has joined #postfix[10:47:39] *** infides has quit IRC[10:47:53] *** fxhp has quit IRC[10:54:06] *** guza has joined #postfix[10:54:35] <guza> hi, i have problem with policyd-weight , he mark all incoming mail as spam on all pbl lists[10:54:43] <guza> what it can be problem ?[10:54:45] *** edux has joined #postfix[10:59:32] *** edux has quit IRC[11:02:03] <tuxick> huh? what policyd is that?[11:02:41] <tuxick> ah i see, never heard of that one before :)[11:02:53] *** rhizome has quit IRC[11:02:56] <guza> i never have problem like that[11:03:24] <guza> all pbl server for all mail says that are spams[11:03:26] <guza> :S[11:03:48] <pj> guza: this channel is for postfix issues. policyd-weight is not postfix.[11:03:50] <guza> how can i run policyd in debug mod[11:04:17] <guza> i know, but policyd channel is empty[11:04:26] <pj> still not a postfix issue[11:04:28] <guza> mybe someone of you have that problem[11:05:06] <arcanine> I have a problem with postfix and sending email, I have opened a stackoverflow thread for it: http://serverfault.com/questions/749452/how-do-i-send-an-email-from-my-own-domain[11:07:02] <pj> arcanine: from your logs: Jan 15 17:36:46 www postfix/local[1467]: 975606627: to=<Test at www dot example.co.uk>, orig_to=<Test>, relay=local, delay=0.04, delays=0.01/0.02/0/0.01, dsn=5.1.1, status=bounced (unknown user: "test")[11:07:15] <pj> postfix is saying it can't deliver the message becuase there is no "test" user on your system.[11:08:09] <arcanine> should I create one? I don't remember try to send an email to test at www dot example.co.uk I've been trying to send it to a gmail address[11:09:16] <pj> arcanine: well you have several mails in that log, how about you just show the log entries for one message your'e having problems with.[11:09:27] <pj> otherwise I could spend all night trying to diagnose the wrong message.[11:09:42] <pj> !tell arcanine relevant_logs[11:09:42] <knoba> arcanine: "relevant_logs" : Relevant logs are mail.* syslog Postfix logs (NOT verbose, see !verbose) which show the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log might not do. IMAP/POP3 daemons and external delivery agents typically log to the same facility (mail); those are usually not relevant here.[11:09:47] <arcanine> sorry I didn't realise there were other entries[11:10:28] <pj> arcanine: one easy way to get just the log entries for one message is to tail the log while you attempt to send a message.[11:10:42] <pj> that generally works unless you have a large volume of messages.[11:10:42] <arcanine> ok, tail mail.log?[11:10:49] <pj> tail -f[11:10:56] <pj> you need to know your unix basics.[11:11:13] <arcanine> I understand tail I'm confirming that mail.log is what you're after[11:11:24] <pj> oh, right, on debian, yes[11:11:30] <pj> !tell arcanine debian_logs[11:11:30] <knoba> arcanine: "debian_logs" : Just to confuse you debian has taken the mail logs and given you the full log (mail.log) as well as splitting them into multiple other logs (mail.info, mail.err). Just look at mail.log and ignore the others.[11:12:23] <arcanine> I get: connect to gmail-smtp-in.l.google.com[2a00:1450:400c:c09::1b]:25: Network is unreachable[11:12:37] <pj> show the full logs for the one message, please.[11:12:44] <arcanine> ok one sec[11:12:52] *** Mizar has left #postfix[11:13:00] <pj> and also, can you show the output of "ip a" in a pastebin?[11:13:17] *** edux has joined #postfix[11:14:14] <tuxick> or just disable ipv6 until you have it set up[11:14:35] <pj> tuxick: I was getting to that, meh[11:14:48] <arcanine> http://pastebin.com/AYB2cSdc here's the entry from mail.log and I'll get that ip a output now[11:14:51] <pj> I have a WAG, but I want to see some supporting evidence.[11:15:25] <arcanine> http://pastebin.com/uWBZScAg[11:15:34] <tuxick> :)[11:15:54] <pj> yeah, trying to connect via IPv6 and you only have a link-local IPv6 connection[11:16:08] <pj> !tell arcanine inet_protocols[11:16:08] <knoba> arcanine: "inet_protocols" : The Internet protocols Postfix will attempt to use when making or accepting connections. Specify one or more of ipv4 or ipv6 , separated by whitespace or commas. The form all is equivalent to ipv4, ipv6 or ipv4 , depending on whether the operating system implements IPv6.[11:16:21] <pj> arcanine: set this to "ipv4" in main.cf[11:17:17] <arcanine> okay done and I've restarted postfix shall I retry a new outbound email?[11:17:29] <pj> arcanine: yes[11:18:02] *** edux has quit IRC[11:18:21] *** chachasmooth has joined #postfix[11:20:21] <arcanine> no Network is unreachable message this time, I guess it's a waiting game now? I haven't set up anything like spf/dkim/reverse dns etc but should I still expect a message in spam?[11:20:27] *** tmberg has joined #postfix[11:20:38] <pj> arcanine: show new logs in pastebin[11:21:31] <arcanine> http://pastebin.com/CKAuvDRK[11:22:23] *** edux has joined #postfix[11:22:49] <pj> arcanine: google accepted the message, what it does with it from there is out of the control of postfix.[11:22:53] <pj> Jan 18 11:18:45 www postfix/smtp[9414]: 9A7B26652: to=<mypersonalemail at gmail dot com>, relay=gmail-smtp-in.l.google.com[64.233.166.27]:25, delay=0.25, delays=0.01/0/0.07/0.18, dsn=2.0.0, status=sent (250 2.0.0 OK 1453112325 g67si24407608wmc.46 - gsmtp)[11:23:02] <pj> do check your Spam box.[11:23:15] <pj> and yes, you do need to set up spf, dkim and cfrdns[11:23:18] <pj> *fcrdns[11:23:39] <pj> well, dkim is harder, save that for last.[11:24:53] <pj> !fcrdns[11:24:53] <knoba> pj: "fcrdns" : http://en.wikipedia.org/wiki/Forward_Confirmed_reverse_DNS : your IP address should resolve to $myhostname, which in turn should resolve back to your IP. This is very important if you want big sites to accept your mail. If you can't have it from your ISP, see !relayhost[11:24:55] <pj> !spf[11:24:55] <knoba> pj: "spf" : sender policy framework - an extension to SMTP that allows to identify and reject emails from spoofed/forged email senders. SPF is just a TXT or SPF record in your DNS zone in a special format. See: http://www.openspf.net/[11:24:57] <pj> !dkim[11:24:58] <knoba> pj: "dkim" : DomainKeys Identified Mail (DKIM) is a method for email authentication that allows an organization to take responsibility for a message in a way that can be validated by a recipient. this is typically implemented in postfix by means of a milter such as !opendkim. alternatively, existing content filters (e.g. !amavisd-new) may also have their own implementation mechanism.[11:25:01] <pj> !gmail[11:25:01] <knoba> pj: "gmail" : Google Mail issues?: http://mail.google.com/support/bin/answer.py?hl=en&answer=81126[11:25:11] <pj> arcanine: some helpful resources ^^^^^^[11:25:35] <arcanine> thank you[11:25:39] <pj> yw[11:27:11] *** edux has quit IRC[11:30:24] *** Quadro has joined #postfix[11:31:27] *** edux has joined #postfix[11:33:11] *** chachasmooth has quit IRC[11:35:19] *** chachasmooth has joined #postfix[11:36:25] *** edux has quit IRC[11:40:32] *** edux has joined #postfix[11:45:14] *** edux has quit IRC[11:49:34] *** edux has joined #postfix[11:54:26] *** edux has quit IRC[11:54:47] *** tonil1 has joined #postfix[11:55:27] *** tonil1 has joined #postfix[11:56:06] *** on1ald has quit IRC[11:57:49] *** tonil has quit IRC[11:58:44] *** edux has joined #postfix[12:02:14] *** lucascastro has joined #postfix[12:03:06] *** edux has quit IRC[12:07:58] *** edux has joined #postfix[12:09:03] *** on1ald has joined #postfix[12:11:07] *** tonil1 has quit IRC[12:11:27] *** tonil has joined #postfix[12:11:28] *** tonil has joined #postfix[12:12:38] *** edux has quit IRC[12:23:16] *** Section1 has joined #postfix[12:23:28] *** spq has left #postfix[12:26:08] *** edux has joined #postfix[12:26:14] *** edux has quit IRC[12:29:15] *** quenode has quit IRC[12:30:48] *** quenode has joined #postfix[12:36:08] *** edux has joined #postfix[12:54:34] *** Haudegen has quit IRC[13:04:49] *** lucascastro has quit IRC[13:10:00] *** muh2000 has quit IRC[13:18:24] *** muh2000 has joined #postfix[13:19:34] *** Haudegen has joined #postfix[13:29:16] *** lucascastro has joined #postfix[13:57:36] *** echan has quit IRC[14:02:06] *** err-or has quit IRC[14:02:08] *** err-or_ has joined #postfix[14:03:28] *** guza has quit IRC[14:22:26] *** iGeni has quit IRC[14:54:48] *** sphenxes01 has joined #postfix[14:58:35] *** sphenxes has quit IRC[14:58:35] *** sphenxes02 has quit IRC[14:58:43] *** sphenxes has joined #postfix[15:02:21] *** v1c3 has joined #postfix[15:10:49] *** FinboySlick has joined #postfix[15:13:57] *** rosco has quit IRC[15:28:55] *** MxyzptlkFishStix has quit IRC[15:48:01] *** infides has joined #postfix[15:52:12] *** Kellin has quit IRC[15:56:27] *** troulouliou_div2 has quit IRC[15:57:34] *** v1c3_ has joined #postfix[16:01:00] *** v1c3 has quit IRC[16:11:39] *** troulouliou_div2 has joined #postfix[16:15:01] *** Section1 has quit IRC[16:18:46] *** joules has quit IRC[16:23:55] *** carl- has quit IRC[16:26:17] *** Section1 has joined #postfix[16:30:19] <lunaphyte> jrj also should not be using .local[16:36:12] *** camroncade has joined #postfix[16:40:04] <patdk-wk> but all the cool kids do (ms ad admins)[16:41:07] <tuxick> that's just ignorance[16:41:13] <tuxick> not coolness[16:41:40] *** pti-jean_ has joined #postfix[16:43:55] <lunaphyte> ironically, ms has finally stopped encouraging that awful practice, and actively discourages it[16:44:20] <patdk-wk> yes, that took a long time[16:44:33] <patdk-wk> and the process to attempt renames, is basically impossible[16:44:48] <tuxick> yup[16:44:58] <lunaphyte> of course, they make no references to their years of awful advice[16:51:16] *** ananayarora has joined #postfix[17:14:03] *** ananayarora has quit IRC[17:17:14] <KellerFuchs> lunaphyte: Why would they? That would be akin to implying they have responsibility in the whole mess[17:17:27] <lunaphyte> yup[17:19:27] <KellerFuchs> Meh, still have a mail looop, and no time to fix the whole mess[17:19:46] * KellerFuchs is happy the users of that domain don't expect mail to work (yet)[17:19:55] *** iGeni has joined #postfix[17:23:56] <tmberg> !dmarc[17:23:56] <knoba> tmberg: Error: "dmarc" is not a valid command.[17:24:07] <tmberg> Heh.[17:24:28] *** user____ has joined #postfix[17:26:20] *** robinho86 has joined #postfix[17:35:07] *** SCHAAP137 has quit IRC[17:36:25] *** ananayarora has joined #postfix[17:46:53] *** ananayarora has quit IRC[17:47:12] *** ananayarora has joined #postfix[17:55:23] *** user____ has quit IRC[17:55:43] *** TyrfingM1olnir has joined #postfix[17:56:38] *** TyrfingM1olnir has quit IRC[17:58:33] *** TyrfingM1olnir has joined #postfix[17:58:53] *** TyrfingMjolnir has quit IRC[17:58:56] *** TyrfingM1olnir has quit IRC[17:59:04] *** TyrfingMjolnir has joined #postfix[17:59:22] *** TyrfingMjolnir_ has joined #postfix[18:00:14] *** TyrfingMjolnir has quit IRC[18:00:14] *** TyrfingMjolnir_ is now known as TyrfingMjolnir[18:00:39] *** TyrfingM1olnir has joined #postfix[18:22:47] *** Motoko has joined #postfix[18:28:49] *** Columbo0815 has joined #postfix[18:31:32] *** gu1lle_ has joined #postfix[18:36:26] *** chachasmooth has quit IRC[18:40:25] *** chachasmooth has joined #postfix[18:45:13] *** olegfusion has quit IRC[18:49:10] *** t00m has joined #postfix[18:49:36] *** t00m has left #postfix[18:51:49] *** TyrfingMjolnir has quit IRC[18:54:43] *** olegfusion has joined #postfix[18:55:24] *** olegfusion has joined #postfix[18:58:35] *** infides has quit IRC[19:19:56] *** snow_bckspc has quit IRC[19:20:50] *** snow_bckspc has joined #postfix[19:21:17] *** TyrfingM1olnir has quit IRC[19:21:24] *** TyrfingMjolnir has joined #postfix[19:28:31] *** edux has quit IRC[19:34:30] *** TyrfingMjolnir has quit IRC[19:34:58] *** TyrfingMjolnir has joined #postfix[19:38:41] *** Section1 has quit IRC[19:44:39] *** troulouliou_div2 has quit IRC[19:46:03] *** chachasmooth has quit IRC[19:47:31] *** tonythomas has quit IRC[19:48:33] *** TyrfingMjolnir has quit IRC[19:49:46] *** TyrfingMjolnir has joined #postfix[19:52:14] *** chachasmooth has joined #postfix[19:52:50] *** TyrfingMjolnir has quit IRC[19:53:10] *** TyrfingMjolnir has joined #postfix[19:56:51] *** lucascastro has quit IRC[19:57:37] *** v1c3 has joined #postfix[19:58:06] *** d0nn1e has quit IRC[19:59:27] *** d0nn1e has joined #postfix[20:00:54] *** lucascastro has joined #postfix[20:01:21] *** v1c3_ has quit IRC[20:03:06] *** dimitry7 has joined #postfix[20:04:27] <dimitry7> Hi guys, I need to deliver email to google servers (this email are notifications from Linux servers to my corporate accounts in Google Apps)[20:05:35] <dimitry7> everything seems OK. Except that I am experiencing some delays. The email path is this: Debian server (exim) -> Debian server (postfix) -> Google Apps (I have configured here the incoming email from my IP)[20:05:50] *** lucascastro has quit IRC[20:06:13] <dimitry7> Every email gets delivered, exept that it can happen 4 minutes or more.[20:06:30] <dimitry7> What can I check from my configuration? because all I see is fine :S.[20:07:12] <dimitry7> this is the error: Jan 18 12:23:44 localhost postfix/smtp[27990]: connect to alt2.aspmx.l.google.com[74.125.24.27]:25: Connection timed out[20:07:19] <Zerberus> Postfix logs at which point delays occur[20:07:31] *** Haudegen has quit IRC[20:07:41] <dimitry7> Zerberus, it happens at the time of connecting to port 25[20:08:37] <rob0> postfix_add_strange_delays=false[20:09:01] *** Columbo0815 has quit IRC[20:16:31] *** rsx has joined #postfix[20:16:49] <dimitry7> rob0, okay let me add it[20:16:50] <dimitry7> :)[20:16:54] <dimitry7> rob0, I see this:[20:17:18] <dimitry7> rob0, http://paste.debian.net/366504/[20:17:45] <dimitry7> what's that? to me it seems like it's trying to tunnel IPv4 over IPv6[20:20:57] <dimitry7> postfix_add_strange_delays is not in the docs[20:21:01] <rob0> 220 mx.google.com ESMTP i11si27242511wmf.7 - gsmtp[20:21:34] <rob0> Oh, I thought it was obviously a joke, because Postfix wouldn't add delays for no reason.[20:21:46] <dimitry7> yeah, I get connection the first two or three tries. But at the 4th or 5th one I get the connection error[20:22:00] <dimitry7> rob0, hahaha[20:22:10] <dimitry7> ok[20:22:17] <dimitry7> well... it's not about postfix[20:22:24] <dimitry7> what's happening? This is weird[20:22:33] <rob0> so you're blocked sometimes, but not always?[20:22:38] <dimitry7> rob0, yeaaah![20:22:45] <rob0> and you don't have working ipv6[20:23:02] <dimitry7> and In my google apps configuraion I have my IP in the whitelist and inbound gateway. I also contacted support and they agree on this[20:23:15] <dimitry7> rob0, I don't know, how can I check it?[20:24:09] *** Motoko has quit IRC[20:24:54] *** Motoko has joined #postfix[20:27:22] <dimitry7> rob0, ip -6 neigh show (returns no output)[20:33:28] *** Haudegen has joined #postfix[20:36:34] *** ananayarora has quit IRC[20:42:26] *** ananayarora has joined #postfix[20:42:44] *** ananayarora has quit IRC[20:43:21] *** rsx has quit IRC[20:45:46] *** ananayarora has joined #postfix[20:45:47] *** showaz has joined #postfix[20:46:35] *** ananayarora has quit IRC[20:48:14] *** ananayarora has joined #postfix[21:00:09] *** ananayar_ has joined #postfix[21:02:26] *** ananayarora has quit IRC[21:44:38] *** Haudegen has quit IRC[21:45:24] *** DefunctProcess has joined #postfix[21:47:16] <DefunctProcess> ayy bros forgive me for being new to this, say i wanted to test sending to external domains before i changed my FQDN MX records... would that pose a problem?[21:48:23] <lunaphyte> seems fine[21:48:48] <DefunctProcess> so to clarify, (i think) i set everything up: postfix, dovecot, squirrelmail in order to operate my personal internet mail server, but i just havent changed the mx record to point to the server[21:49:01] <DefunctProcess> i should be able to send mails to outside domains correct?[21:49:24] <lunaphyte> did you deliberately pick squirrelmail over something more modern, like roundcube?[21:49:33] <lunaphyte> anyway, yes, probably[21:50:12] <DefunctProcess> i picked squirrelmail cuz im a noob[21:50:22] <DefunctProcess> but im guessing its not particularly important and i can switch later[21:50:27] <lunaphyte> yup[21:50:37] <DefunctProcess> im trying to figure out if ive configure postifx/dovecot to send externally in the proper way[21:50:51] <DefunctProcess> ok so i messed something up cuz its not working then[21:51:31] <DefunctProcess> can you point me to where i look if say, i sent a mail to outside and nothing arrived and no errors while sending?[21:51:35] <lunaphyte> !tell DefunctProcess getting_help[21:51:35] <knoba> DefunctProcess: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[21:51:40] <DefunctProcess> or would it be lost somewhere[21:51:44] <lunaphyte> work your way through those factoids[21:52:11] <DefunctProcess> ill pm the bot, thanks[21:53:08] <DefunctProcess> erm, bot is saying showconfig is not valid command lel[21:53:44] <DefunctProcess> im probably retarded[21:54:05] <DefunctProcess> !relevant_logs[21:54:06] <knoba> DefunctProcess: "relevant_logs" : Relevant logs are mail.* syslog Postfix logs (NOT verbose, see !verbose) which show the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log might not do. IMAP/POP3 daemons and external delivery agents typically log to the same facility (mail); those are usually not relevant here.[21:54:12] <DefunctProcess> i guess it only works in chat[21:54:14] <lunaphyte> /msg knoba !whatis #postfix showconfig[21:54:19] <lunaphyte> the syntax differs[21:54:22] <DefunctProcess> ah[21:54:28] <DefunctProcess> so i am retarded, thanks[21:54:28] <lunaphyte> you're welcome to talk to the bot here too. either is fine[22:02:17] <DefunctProcess> ok well it seems that connection to external smtp servers are timing out hang on ill post the relevant error[22:02:37] <DefunctProcess> postfix/smtp[12220]: connect to mx4.hotmail.com[65.55.33.135]:25: Connection timed out[22:02:48] <DefunctProcess> you need my postfix and dovecot configs correct?[22:05:49] <DefunctProcess> http://paste.debian.net/366535/ this is postconf -nf[22:06:11] <lunaphyte> did you previously have a mail server running on this computer?[22:06:30] <DefunctProcess> not that im aware of[22:06:35] <DefunctProcess> http://paste.debian.net/366536/ this is Mf[22:06:50] <lunaphyte> is this computer connected to the internet via a residential isp?[22:07:07] <DefunctProcess> correct, but port 25 SHOULD be open[22:07:18] <DefunctProcess> i have the package that de-filters 25 and 80[22:07:18] <lunaphyte> doesn't appear so[22:07:28] <DefunctProcess> mkay perhaps ill check with the isp, be back shortly[22:07:36] <DefunctProcess> you're saying that the confs seem to be in order[22:07:47] <lunaphyte> look up some mx records for command domains, and see if you can telnet to their mail servers on port 25[22:07:59] <lunaphyte> *common domains[22:08:13] <lunaphyte> not sure why my fingers typed that[22:08:24] <DefunctProcess> freudian slip[22:08:27] <DefunctProcess> ( ͡° ͜ʖ ͡°)[22:08:47] <lunaphyte> pastebin iptables -vnL --lin[22:11:16] <DefunctProcess> ttp://paste.debian.net/366537/ there you are amigo[22:11:24] <DefunctProcess> sorry th h got cutoff[22:12:15] <lunaphyte> that sems fine, so it's not likely to be the local firewall[22:12:47] <lunaphyte> unless you have something peculiar going on with one of the other tables[22:13:18] <lunaphyte> although virbr0 indicates some sort of virtualization, so perhaps you have networking issues in general[22:13:33] <lunaphyte> or, perhaps port 25 is in fact blocked, even though it allegedly is not ;)[22:14:29] <DefunctProcess> sir[22:14:33] *** Haudegen has joined #postfix[22:14:41] <DefunctProcess> i believe you have diagnosed my condition[22:14:46] <DefunctProcess> i am in fact[22:14:49] <DefunctProcess> mentally challenged[22:15:15] <DefunctProcess> i had port 25 disabled on my webhosting[22:15:46] <DefunctProcess> thank you for your patience[22:17:02] <DefunctProcess> ok well it wants to reboot my modem for the changes to take effect so hopefully i wont be back, see ya?[22:17:52] <DefunctProcess> huh, it didnt reboot[22:25:44] <DefunctProcess> lunaphyte: it worked, you're a genius, but gmail spam filter caught it, do you have any tips on how to prevent that from happening?[22:41:27] *** tonil has quit IRC[22:42:11] *** infides has joined #postfix[22:45:21] *** ananayarora has joined #postfix[22:47:52] *** ananayar_ has quit IRC[22:52:49] *** edux has joined #postfix[22:57:34] *** robinho86 has quit IRC[23:00:49] *** edux has quit IRC[23:05:06] *** Quadro has quit IRC[23:10:47] *** FinboySlick has quit IRC[23:12:01] <lunaphyte> you have a long road ahead of you[23:12:09] <lunaphyte> welcome to the world of deliverability[23:12:18] <lunaphyte> !fcrdns[23:12:18] <knoba> lunaphyte: "fcrdns" : http://en.wikipedia.org/wiki/Forward_Confirmed_reverse_DNS : your IP address should resolve to $myhostname, which in turn should resolve back to your IP. This is very important if you want big sites to accept your mail. If you can't have it from your ISP, see !relayhost[23:12:29] <lunaphyte> !dnsbl[23:12:29] <knoba> lunaphyte: "dnsbl" : DNS zones that can help your mail server to determine if an IP address is trusted. It's a great way to fight spam. See http://www.spamhaus.org/ZEN/ http://www.au.sorbs.net/ http://www.dnsrbl.net/ http://www.spamcop.net/ http://www.mail-abuse.org/ http://www.rfc-ignorant.org/[23:13:00] <lunaphyte> make sure your dns is all in agreement, and your helo as well, and then ensure you are not listed in any dnsbls[23:13:12] <lunaphyte> then, publish spf, and sign your mail with dkim[23:13:28] <lunaphyte> following that, publish dmarc and adsp data[23:17:16] *** dstarh has joined #postfix[23:20:30] *** chachasmooth has quit IRC[23:20:53] *** chachasmooth has joined #postfix[23:24:00] *** D-Boy has quit IRC[23:26:55] <DefunctProcess> holy shit thats a lotta stuff to do[23:27:14] <DefunctProcess> im trying now to figure out how to setup sasl so i can mail from external clients[23:27:22] <DefunctProcess> then ill tackle the spam filters[23:28:46] <tmberg> lunaphyte: Uhm. adsp is kinda dead.[23:37:00] *** D-Boy has joined #postfix[23:37:51] *** pti-jean_ has quit IRC[23:39:51] *** dstarh has quit IRC[23:39:55] <DefunctProcess> ok sasl werks :)[23:50:26] <DefunctProcess> hrm it seems im gonna bounce off most smtp servers because my ip address is considered dynamic[23:51:52] <DefunctProcess> well it was an entertaining experiment, perhaps i need to convince my isp to allocate me a static IP as part of my package[23:52:48] *** lucascastro has joined #postfix[23:57:13] *** DefunctProcess has quit IRC