January 22, 2016 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
January 22, 2016 [00:05:05] *** infides has quit IRC[00:18:15] *** echan has joined #postfix[00:25:13] *** tonil has quit IRC[00:25:20] *** DefunctProcess is now known as DefunctProcessZZ[00:26:23] *** d0nn1e_ has quit IRC[00:27:19] *** edux has joined #postfix[00:32:25] *** edux has quit IRC[00:43:16] *** ananayarora has joined #postfix[00:45:08] *** TheFatherMind has quit IRC[00:47:26] *** ananayarora has quit IRC[00:53:37] *** jonah has joined #postfix[00:55:21] <jonah> Hi I hope someone can please help. My postfix doesn't seem to stay loaded. I can start it and it says OK but then it quits itself. Can anyone help. I also get this error in the syslog: arning: /usr/lib/postfix/smtpd: bad command startup[00:57:57] *** Kellin has joined #postfix[01:05:16] *** Stealth has quit IRC[01:05:49] *** Stealth has joined #postfix[01:07:02] <lunaphyte> !tell jonah getting_help[01:07:03] <knoba> jonah: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[01:07:16] <lunaphyte> jonah: follow those instructions, then we can help[01:14:27] *** Guest46761 has joined #postfix[01:15:12] *** Guest46761 has quit IRC[01:15:12] *** Guest46761 has joined #postfix[01:15:50] *** Guest46761 is now known as nathanhi[01:21:14] *** nathanhi has quit IRC[01:22:36] *** edux has joined #postfix[01:25:05] *** d0nn1e has joined #postfix[01:27:17] *** edux has quit IRC[01:33:22] *** Guest8021 has joined #postfix[01:37:34] *** Guest8021 has quit IRC[01:49:55] *** ekem has quit IRC[01:53:36] *** ekem has joined #postfix[01:55:48] *** jeev has quit IRC[01:59:57] *** dimitry7 has quit IRC[02:02:08] *** jeev has joined #postfix[02:23:52] *** jonah has quit IRC[02:31:22] *** Guest59634 has joined #postfix[02:51:59] *** d0nn1e has quit IRC[03:00:18] *** TheFatherMind has joined #postfix[03:00:31] *** TheFatherMind- has joined #postfix[03:06:52] *** jwing has joined #postfix[03:06:52] *** jwing has joined #postfix[03:08:11] *** snadge has joined #postfix[03:08:31] <snadge> i know this is not postfix related.. but i made a bit of a booboo, and hoping someone email knowledgeable can help me[03:08:46] <snadge> $email_header .= "Content-Type: multipart/mixed; boundary = $boundary1\r\n\r\n";[03:08:46] <snadge> $email_header .= "Content-Type: multipart/mixed; boundary=".$boundary1."\r\n\r\n";[03:09:10] <snadge> so i changed the first line to the second line.. and that appears to have broken the mime encoding in this email[03:09:33] <snadge> is there supposed to be a space before and after the equals sign in the boundry ?[03:09:42] <snadge> maybe i should be looking at an rfc instead of bugging you guys about it :/[03:14:09] *** michelangelo has joined #postfix[03:17:32] *** donmichelangelo has quit IRC[03:20:28] *** edux has joined #postfix[03:24:41] *** edux has quit IRC[03:25:34] *** skyroveRR has joined #postfix[03:27:43] *** err-or has joined #postfix[03:28:24] <skyroveRR> Hello all, I'm attempting to cross compile postfix to my ARM device. My host machine runs a linux kernel version 3.10.17 and I've got kernel headers for it, but my ARM device to which I'm cross compiling doesn't have those kernel headers. I'm attempting to statically link postfix also. Is it ok if I statically link and compile using different kernel headers?[03:29:18] <skyroveRR> Also, my ARM device runs kernel version 3.18.10, for which I don't have the kernel headers at present.[03:29:31] *** edux has joined #postfix[03:31:30] *** err-or_ has quit IRC[03:35:22] *** edux has quit IRC[03:39:13] <tharkun> skyroveRR: some compiling gurus live in Europe do the TZ calculations and post accordingly.[03:39:32] <skyroveRR> Ok :)[03:42:18] *** echan has quit IRC[03:43:16] *** ananayarora has joined #postfix[03:47:37] *** edux has joined #postfix[03:48:25] *** ananayarora has quit IRC[03:49:09] *** lucas_ has joined #postfix[03:50:10] *** lucascastro has quit IRC[03:52:12] *** edux has quit IRC[03:54:04] *** akkad has quit IRC[03:56:51] *** edux has joined #postfix[04:01:06] *** edux has quit IRC[04:02:37] *** akkad has joined #postfix[04:03:08] *** tharkun is now known as pinky_finger[04:04:15] *** pinky_finger is now known as tharkun[04:05:57] *** edux has joined #postfix[04:07:22] *** tuxick has quit IRC[04:10:39] *** edux has quit IRC[04:12:37] *** tuxick has joined #postfix[04:19:00] *** nhooyr has quit IRC[04:19:14] *** nhooyr has joined #postfix[04:24:06] *** edux has joined #postfix[04:25:13] *** nhooyr has quit IRC[04:25:25] *** nhooyr has joined #postfix[04:28:40] *** edux has quit IRC[04:30:44] *** tuxick has quit IRC[04:33:14] *** edux has joined #postfix[04:34:44] *** echan has joined #postfix[04:38:12] *** edux has quit IRC[04:38:27] *** tuxick has joined #postfix[04:40:48] *** echan has quit IRC[04:49:52] *** echan has joined #postfix[04:51:26] *** edux has joined #postfix[04:52:52] *** tuxick has quit IRC[04:53:46] *** tuxick has joined #postfix[04:54:47] *** chachasmooth has quit IRC[04:55:58] *** edux has quit IRC[04:57:33] *** chachasmooth has joined #postfix[05:00:39] *** edux has joined #postfix[05:03:16] *** tuxick has quit IRC[05:04:40] *** edux has quit IRC[05:06:30] *** tuxick has joined #postfix[05:18:50] *** edux has joined #postfix[05:23:00] *** JanC has quit IRC[05:23:12] *** edux has quit IRC[05:27:47] *** edux has joined #postfix[05:31:55] *** edux has quit IRC[05:34:26] *** echan has quit IRC[05:37:08] *** JanC has joined #postfix[06:10:38] *** namyzarc has quit IRC[06:16:33] *** setProfile has joined #postfix[06:20:05] *** setProfile has quit IRC[06:20:25] *** setProfile has joined #postfix[06:21:23] *** setProfile has quit IRC[06:21:40] *** setProfile has joined #postfix[06:22:57] *** setProfile has quit IRC[06:23:13] *** setProfile has joined #postfix[06:24:23] *** setProfile has quit IRC[06:24:39] *** setProfile has joined #postfix[06:27:38] *** edux has joined #postfix[06:33:10] *** edux has quit IRC[06:34:08] *** echan has joined #postfix[06:45:50] *** edux has joined #postfix[06:46:55] *** RadoQ has quit IRC[06:51:00] *** edux has quit IRC[06:55:14] *** edux has joined #postfix[07:00:00] *** edux has quit IRC[07:13:24] *** edux has joined #postfix[07:17:46] *** edux has quit IRC[07:21:08] *** setProfile has quit IRC[07:21:24] *** setProfile has joined #postfix[07:22:30] *** edux has joined #postfix[07:27:12] *** edux has quit IRC[07:31:15] *** ananayarora has joined #postfix[08:12:15] *** ananayarora has quit IRC[08:12:53] *** ananayarora has joined #postfix[08:17:38] *** ananayarora has quit IRC[08:18:17] *** ananayarora has joined #postfix[08:18:55] *** echan has quit IRC[08:25:42] *** edux has joined #postfix[08:30:40] *** edux has quit IRC[08:39:32] *** zorg1 has joined #postfix[08:44:11] *** edux has joined #postfix[08:47:27] *** SCHAAP137 has joined #postfix[08:48:29] *** lrea has joined #postfix[08:48:48] *** edux has quit IRC[08:48:50] *** ananayarora has quit IRC[09:07:21] *** echan has joined #postfix[09:07:57] *** skylite has joined #postfix[09:12:49] *** ricefield has quit IRC[09:14:24] *** PHPanos has joined #postfix[09:16:25] *** carl- has joined #postfix[09:27:47] *** sphenxes has quit IRC[09:28:48] *** infides has joined #postfix[09:30:34] *** sphenxes has joined #postfix[09:45:57] *** ThomasKeller has joined #postfix[09:47:30] *** edux has joined #postfix[09:48:52] *** Haudegen has quit IRC[09:52:07] *** aarya has joined #postfix[09:53:10] *** edux has quit IRC[09:56:51] *** edux has joined #postfix[09:59:29] *** altin has joined #postfix[10:01:20] *** edux has quit IRC[10:02:42] *** infides has quit IRC[10:04:09] *** ananayarora has joined #postfix[10:06:35] *** aarya has quit IRC[10:07:33] *** aarya has joined #postfix[10:12:40] *** aarya has quit IRC[10:14:46] *** Haudegen has joined #postfix[10:19:14] *** TheFatherMind- has joined #postfix[10:21:20] *** osten_ is now known as osten[10:21:24] <osten> !mta[10:21:24] <knoba> osten: "mta" : Mail Transfer Agent: software that facilitates the transfer of mail messages between hosts[10:22:26] *** TheFatherMind has quit IRC[10:27:12] *** skyroveRR has quit IRC[10:36:40] *** setProfile has quit IRC[11:02:42] *** echan has quit IRC[11:08:23] *** infides has joined #postfix[11:12:47] *** troulouliou_div2 has joined #postfix[11:12:50] *** tonil has joined #postfix[11:12:50] *** tonil has joined #postfix[11:13:53] *** Yatekii_ has left #postfix[11:14:27] *** Yatekii has joined #postfix[11:15:31] *** ananayarora has quit IRC[11:18:12] *** ananayarora has joined #postfix[11:19:11] *** troulouliou_div2 has quit IRC[11:27:29] *** xorredd has joined #postfix[11:27:48] *** xorred has joined #postfix[11:28:23] *** grossing has quit IRC[11:28:26] <xorred> my vps has postfix and it sends mail for all domains (from my php) but my own. It apparently tries to deliver locally instead of forwarding to my external mail service[11:28:38] <xorred> how do I configure it so it would not try to deliver locally?[11:28:50] <xorred> all mails for all domains arrive but my own, say, domain.com[11:29:00] <xorred> so domain.com mail is hosted on google apps[11:29:14] <xorred> how do I make it so it sends the mail for domain.com to google apps instead of locally?[11:30:08] *** ananayarora has quit IRC[11:30:26] <pj> !mydestination[11:30:27] <knoba> pj: "mydestination" : a configuration parameter in the main.cf: The list of domains that Postfix delivers via the $local_transport mail delivery transport. By default, mail is given to the Postfix local(8) delivery agent that looks up all recipients in /etc/passwd and /etc/aliases, or their equivalents. See http://www.postfix.org/postconf.5.html#mydestination for more information.[11:30:41] <pj> xorred: don't include the domain in mydestination.[11:31:53] <xorred> this is my line:[11:31:54] <xorred> mydestination = localhost, WP-NewBase-052814, localhost.localdomain, localhost[11:31:59] <xorred> no domain...[11:32:13] <pj> !tell xorred gettig_help[11:32:13] <knoba> pj: Error: No factoid matches that key.[11:32:16] <pj> !tell xorred getting_help[11:32:16] <knoba> xorred: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[11:32:21] <pj> xorred: then do this ^^^^^[11:33:37] <pj> I have to go, I'll check back later.[11:38:12] *** grossing has joined #postfix[11:41:34] <xorred> lol. I was looking at another server. the right line was in the right server, removed it[11:41:36] <xorred> thanks pj[11:50:00] *** grossing has quit IRC[11:51:42] *** xorred has quit IRC[11:55:18] *** de-vri-es_ is now known as de-vri-es[11:56:15] *** ananayarora has joined #postfix[11:58:05] *** ananayarora has quit IRC[11:58:41] *** ananayarora has joined #postfix[12:03:11] *** ananayarora has quit IRC[12:03:40] *** grossing has joined #postfix[12:03:45] *** edux has joined #postfix[12:08:50] *** edux has quit IRC[12:12:07] *** lucas_ has quit IRC[12:18:25] *** ananayarora has joined #postfix[12:22:00] *** edux has joined #postfix[12:27:00] *** edux has quit IRC[12:29:57] *** Section1 has joined #postfix[12:31:24] *** edux has joined #postfix[12:33:11] *** ananayarora has quit IRC[12:33:41] *** ananayarora has joined #postfix[12:33:49] *** ananayarora has quit IRC[12:35:11] *** edux has quit IRC[12:35:28] *** edux has joined #postfix[12:39:13] <Bish> is there some way to have multiple incoming server for a single host?[12:40:03] <pj> Bish: you mean load-balancing? sure.[12:40:09] <Bish> i mean outgoing mails from mail1.example.com and mail2.example.com are no problem, bc spf dkim and shit, but how would you actually do multiple mx[12:40:12] *** ananayarora has joined #postfix[12:40:32] <Bish> pj: would you be so kind and tell me how, just general info not detailed[12:40:38] <Bish> i will workout the rest by myself[12:40:57] <pj> Bish: you can just have multiple MX records for the domain, or multiple A (or AAAA) records for the host that the MX record points to.[12:41:14] <pj> if you do multiple MX records you should make sure they all have the same priority.[12:41:25] <Bish> but i read that is only fallback support[12:41:35] <Bish> so the first will get all request until it dies :D[12:41:43] <pj> no, as long as they have the same priority it will work round-robin style.[12:42:04] <pj> if they have different priorities the one with the higher number becomes a backup MX.[12:42:27] <pj> just give them all the same priority and it will work fine.[12:42:39] <Bish> so something like a complete decentral mailing system would be possible? ( ofc that result in emails not being readable from server x, when sent to y )[12:42:51] *** skyroveRR has joined #postfix[12:43:21] <pj> Bish: yes, and yes it's up to you what gets done with the messages once a particular server receives them. Presumably you'd store them in a common central mailstore.[12:43:39] <Bish> and is it possible to loadbalance incoming mails to several relayhosts and throttle them?[12:43:55] <pj> to several MXes, you mean?[12:43:58] <Bish> and the ultimate implication: so everything mailchimp and all these companies do is proper postfix configuration?[12:44:03] <Bish> :D[12:44:29] <Bish> pj: no in this case i meant.. outgoing mails[12:45:24] <Bish> sorry i wrote incoming, but i meant outgoing[12:45:34] <pj> oh, well you can load-balance outbound by, for example, using multiple A records for the same hostname, so a given client would pick one of the hosts in a random (round-robin) style and submit messages to that.[12:46:36] <pj> then of course you just include all the submission servers in your SPF record and allow them to all sign with the same DKIM keys, etc. Then they can all push out to the internet.[12:47:11] <Bish> wow.. i always hated postfix, but after a while working with it, its a beautfiul piece of software[12:47:21] <pj> Bish: this is generally used for extremely large mail systems, we're talking at least tens of thousands of users probably more.[12:47:36] *** wincyj_ has quit IRC[12:47:42] <Bish> yeah im just curious, i will never create a network like that, just need to understand[12:47:44] <pj> and the admin of such a system is generally expected to know about how DNS round robin works as well as load-balancing.[12:47:48] <pj> oh, ok[12:47:54] <pj> then I'm happy to fill you in a bit.[12:48:13] *** wincyj has joined #postfix[12:48:14] <Bish> :) yeah and i am happy you're doing that![12:48:22] <pj> postfix is just one pice of a much larger puzzle when properly implementing a good mail system.[12:49:17] <pj> but yeah, this is just general load-balancing stuff. There are other ways of doing load-balancing as well, for example you do it via routing or clustering instead of using DNS.[12:50:10] <pj> companies such as google that have literally billions of users will use a combination of different technologies for their load-balancing.[12:50:19] <Bish> and how modular is the routing in postfix? im guessing there are no limits, or will i ever have to touch code[12:50:37] <Bish> for example, i want a user X only allow to use mail1. mail2. mail.3 example.com[12:50:47] <Bish> would i be able to configure that without touching code? only configuration?[12:50:57] <pj> postfix is very flexible, and yes you can do that in postfix.[12:51:12] <pj> there are settings specifically for that.[12:51:23] <Bish> yeah i like this pipe architecture, but it really really really confused me at first[12:51:35] <Bish> its so different from anything else[12:51:55] <pj> !smtpd_sender_login_maps[12:51:56] <knoba> pj: "smtpd_sender_login_maps" : a configuration parameter in the main.cf: Optional lookup table with the SASL login names that own sender (MAIL FROM) addresses.[12:52:46] <pj> !reject_sender_login_mismatch[12:52:47] <knoba> pj: "reject_sender_login_mismatch" : Reject the request when $smtpd_sender_login_maps specifies an owner for the MAIL FROM address, but the client is not (SASL) logged in as that MAIL FROM address owner; or when the client is (SASL) logged in, but the client login name doesn't own the MAIL FROM address according to $smtpd_sender_login_maps.[12:53:09] <pj> Bish: you would use those settings, to do what you just asked, for example ^^^^^^[12:53:22] <Bish> yeah i understand, great.[12:54:11] <Bish> last curiosity induced question: is postfix flexible enough to configure new processes and plug them in between?[12:54:27] <pj> I'm not sure I follow you.[12:54:32] <Bish> i mean sure, i used "milter" for dkim and i know about spamassasin, but is the main pipeline changeable[12:54:41] <pj> oh, sure.[12:54:58] <pj> to an extent, anyways[12:54:58] <Bish> i mean this... can i put something between pickup and cleanup for example[12:55:36] <Bish> or qmgr and smtp, strip something off the email or whatever[12:56:06] <pj> well, I'm not sure, I would have to check the docs to see if something can be used between pickup and cleanup. But if you had an idea of what you were trying to accomplish with that then we could almost certainly find a way to accomplish it.[12:59:14] <pj> I think that non_smtpd_milters would be about as close as you could get to putting something between pickup and cleanup[12:59:22] <Bish> well, as i said, only curious, im trying to understand the advantages of this pipeline system?[12:59:28] <Bish> is pipelinesystem if the correct term?[13:00:35] *** phunyguy has quit IRC[13:00:42] <pj> not really. Postfix is certainly a modular system.[13:01:17] <pj> but some of the connections between modules use undocumented protocols that are subject to change from one version to another.[13:01:27] <pj> so you're generally best not to try to directly hijack it.[13:01:53] *** phunyguy has joined #postfix[13:02:18] <Bish> :D[13:02:25] <pj> but postfix has a lot of hooks, such as milters, policy daemons, etc and ways of transporting mail in lots of different ways.[13:04:14] <pj> so, for example, non_smtpd_milters is actually called from cleanup, so it wouldn't actually work as a filter between pickup and cleanup, but it would likely be close enough for whatever you want to do with it.[13:15:13] *** jwing has quit IRC[13:19:25] *** lucascastro has joined #postfix[13:20:02] *** rsx has joined #postfix[13:20:03] *** ananayarora has quit IRC[13:22:27] *** ananayarora has joined #postfix[13:22:32] *** pti-jean_ has joined #postfix[13:27:56] *** ananayar_ has joined #postfix[13:27:57] *** ananayarora has quit IRC[13:30:40] *** ananayar_ has quit IRC[13:34:23] *** ananayarora has joined #postfix[13:36:05] *** emiliano_ has joined #postfix[13:36:08] *** emiliano_ has quit IRC[13:53:55] *** Haudegen has quit IRC[14:03:38] *** ugjka has joined #postfix[14:09:28] *** edux has quit IRC[14:14:13] *** synthroid has joined #postfix[14:18:49] *** Haudegen has joined #postfix[14:20:56] *** rsx has quit IRC[14:27:18] <Bish> pj: thank you alot![14:28:33] <thumbs> poor alot[14:40:56] *** tonythomas has joined #postfix[14:55:23] *** sphenxes01 has joined #postfix[14:58:50] *** sphenxes has quit IRC[14:59:12] *** sphenxes02 has quit IRC[14:59:36] *** sphenxes has joined #postfix[15:01:05] *** jwr__ has quit IRC[15:01:25] <skyroveRR> I'm running a statically linked version of postfix 2.10.9 on my raspberry pi, an ARM device. After correcting several permission errors, I'm facing a rather strange error "smtp: Unrecognized service" http://pktsurf.in/files/postfix.error.txt .. can anyone suggest a way to fix this error? That error was taken from syslog, btw.[15:03:09] <lunaphyte> !tell skyroveRR getting_Help[15:03:09] <knoba> skyroveRR: "getting_Help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[15:03:35] <skyroveRR> Ok.[15:04:55] *** tonil1 has joined #postfix[15:05:12] <rob0> "Unrecognized service" means that services(5) name resolution is broken.[15:05:53] <skyroveRR> Oh, so you mean the hostname has to match the configuration files?[15:06:00] <rob0> Either put in a proper /etc/services or change service names to numbers.[15:06:19] <rob0> "smtp: Unrecognized service"[15:06:21] <patdk-wk> no he doesn't[15:06:36] <skyroveRR> Hmm.. I don't have /etc/services file in the first place.[15:06:44] <patdk-wk> yes, that is a big issue![15:06:46] <rob0> "smtp" is a port name[15:06:49] <patdk-wk> why don't you?[15:06:54] <rob0> also,[15:06:57] <lunaphyte> oh, yikes, no /etc/services?[15:06:57] <rob0> !debian[15:06:58] <knoba> rob0: "debian" : (#1) Please see /usr/share/doc/postfix/README.Debian for Debian-specific information. This probably applies to Ubuntu and most other Debian-derivative distributions as well., or (#2) Debian splits the syslog mail facility into several files; the one most likely to be of interest is mail.log , which contains all mail.* priority levels.[15:07:00] <lunaphyte> that's not good[15:07:04] <skyroveRR> lunaphyte: yeah, no services.[15:07:09] <lunaphyte> what have you done to your system?[15:07:25] <patdk-wk> it used too much diskspace :)[15:07:29] <skyroveRR> lunaphyte: it's a custom built system... if only you could tell me the package that provides it? :)[15:07:41] <lunaphyte> erm[15:07:55] *** tonil has quit IRC[15:08:05] <lunaphyte> "custom built system" and "the package that provides it" are rather juxtaposed...[15:08:05] <patdk-wk> if your using packages, it's not custom built[15:08:28] <rob0> $ grep etc/services /var/log/packages/*[15:08:29] <rob0> /var/log/packages/etc-14.1-x86_64-2:etc/services.new[15:08:41] <rob0> (That's Slackware 14.1 obviously.)[15:08:56] <skyroveRR> Hmm the etc package.[15:09:06] <patdk-wk> if your running slackware[15:09:13] <rob0> which might be something different in Debian[15:09:41] <skyroveRR> \o/[15:09:50] <skyroveRR> Just copied /etc/services to my custom distro..[15:09:58] <skyroveRR> And postfix started![15:09:59] <skyroveRR> :D[15:10:21] <skyroveRR> # /etc/rc.d/rc.postfix status[15:10:23] <skyroveRR> postfix/postfix-script: the Postfix mail system is running: PID: 256[15:11:47] <patdk-wk> debian: netbase: /etc/services[15:13:38] *** rsx has joined #postfix[15:13:51] *** Haudegen has quit IRC[15:19:51] <tuxick> blacklisted domain 'domaintestdomain.net'[15:19:57] <tuxick> amazing what people get away with[15:20:28] *** Haudegen has joined #postfix[15:21:12] *** Haudegen has quit IRC[15:21:42] *** joules has quit IRC[15:24:37] *** Jonukas has joined #postfix[15:33:39] *** Haudegen has joined #postfix[15:37:56] *** Haudegen has quit IRC[15:41:01] <Nit_> skyroveRR: netbase[15:41:35] <Nit_> on debian systems[15:42:09] <Nit_> oh Oo, I came up a little late…[15:42:56] <Nit_> skyroveRR: on debian based systems, I find apt-file very handy to track which file belong to which package[15:43:35] <tuxick> when not yet installed[15:43:46] <tuxick> otherwise dpkg -S is there[15:45:29] *** FinboySlick has joined #postfix[15:50:58] *** jad_jay has joined #postfix[15:53:14] *** tonil1 has quit IRC[15:53:38] *** tonil has joined #postfix[15:53:38] *** tonil has joined #postfix[15:57:24] <skyroveRR> Nit_: I'm using a slackware based distro which I packaged together on my own.[15:58:37] <rob0> oh, I thought you said this started as raspbian?[16:02:46] <skyroveRR> rob0: I just downloaded the tool chain, figured out the necessary utilities that would be required for base (there aren't much), and cross compiled. Took a few months for things to work out, and at this point, it's sufficiently useful for day-to-day work.[16:03:15] *** trepatudo has quit IRC[16:03:26] *** trepatudo has joined #postfix[16:03:49] *** Kellin has quit IRC[16:04:33] <rob0> So you slackrificed your raspbian?[16:04:45] <skyroveRR> It really isn't "raspbian"..[16:04:59] <skyroveRR> You can say I forked it a bit from slackware.[16:05:17] <skyroveRR> But I didn't take a single idea from those dudes.[16:06:40] *** Haudegen has joined #postfix[16:07:36] *** rsx has quit IRC[16:11:02] <skyroveRR> rob0: btw, I forgot, you told me once that there's a better way to AUTH to smtp than cyrus sasl, a much simpler way... what was that?[16:11:56] <rob0> Dovecot SASL[16:12:19] <skyroveRR> Aha![16:12:38] <skyroveRR> It'll be good to try that one on this clean install :)[16:19:07] *** skylite has quit IRC[16:19:23] *** skylite has joined #postfix[16:21:36] *** ananayarora has quit IRC[16:23:01] *** DefunctProcessZZ is now known as DefunctProcess[16:23:35] *** edux has joined #postfix[16:23:48] *** tuxick has quit IRC[16:33:10] *** ananayarora has joined #postfix[16:39:21] *** carl- has quit IRC[16:49:10] *** Columbo0815 has joined #postfix[16:53:10] <KellerFuchs> I have a problem with a Postfix setup that does recipient rewriting[16:53:42] <KellerFuchs> I have a MX (config at https://github.com/hashbang/docker-postfix/blob/master/run.sh), named mail.hashbang.sh, which receives mail for the hashbang.sh domain[16:53:50] *** Columbo0815 has quit IRC[16:54:15] <KellerFuchs> and must dispatch it to the shell server that the recipient uses (attribute host in LDAP)[16:54:37] <KellerFuchs> The shell servers' Postfix configuration is in https://github.com/hashbang/shell-etc/blob/master/postfix/main.cf[16:55:33] <KellerFuchs> And, well, it seems the recipient is correctly rewritten (I see to=<user at server dot hashbang.sh> orig_to=<user at hashbang dot sh> in the MX's logs)[16:55:49] <lunaphyte> mail.hashbang.sh receives mail as the mx for an address and then relays it to another server?[16:55:58] <KellerFuchs> but the shell server sends it back to mail.#![16:56:03] <KellerFuchs> lunaphyte: Yes[16:56:20] <lunaphyte> !tell KellerFuchs getting_help[16:56:20] <knoba> KellerFuchs: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[16:56:35] <lunaphyte> start with collecting those details from mail.hashbang.sh[16:56:40] <KellerFuchs> lunaphyte: Ok, grabbing the logs now[16:56:50] <KellerFuchs> lunaphyte: Well, I already linked you the config[16:57:28] <lunaphyte> details need to be provided as instructed in the factoid[16:57:48] <KellerFuchs> !relevant_logs[16:57:49] <knoba> KellerFuchs: "relevant_logs" : Relevant logs are mail.* syslog Postfix logs (NOT verbose, see !verbose) which show the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log might not do. IMAP/POP3 daemons and external delivery agents typically log to the same facility (mail); those are usually not relevant here.[16:57:57] <KellerFuchs> !showconfig[16:57:57] <knoba> KellerFuchs: "showconfig" : when asked to provide your config, pastebin postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[17:04:37] *** SCHAAP137 has quit IRC[17:04:41] *** phreebird has joined #postfix[17:09:21] <KellerFuchs> knoba: Sorry, my laptop crashed while I was getting the logs, had to power-cycle it[17:09:53] <rob0> And <server>.hashbang.sh is being properly router to each server?[17:10:06] <rob0> !tell KellerFuchs knoba[17:10:07] <knoba> KellerFuchs: "knoba" : an informational bot in this channel (see http://workaround.org/f=postfix)[17:10:19] <rob0> s/router/routed/[17:10:31] <KellerFuchs> Oops, tes, meant to hilight lunaphyte[17:11:43] <rob0> sounds like the shell servers need basic configuration,[17:11:45] <rob0> !basic[17:11:46] <knoba> rob0: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[17:12:02] <rob0> but my question wasn't answered[17:12:53] <rob0> ah, you're getting the logs now[17:13:36] <rob0> What would be ideal is to see logs from MX and the final destination for one sample mail.[17:13:56] <KellerFuchs> https://0bin.net/paste/iiN4R3a1tZBLWTm6#vYRKIIG+qgCXJv-LcPNhR0CYyJPoSrEBzwLiXmYN65E[17:13:57] <rob0> (trace the same email through both servers)[17:14:00] *** Haudegen has quit IRC[17:15:10] <lunaphyte> why is that log so long?[17:15:21] <lunaphyte> " a single mail which illustrates the issue"[17:15:40] *** ananayarora has quit IRC[17:15:44] <lunaphyte> and i hate pastebins which don't offer a plaintext url[17:16:12] <KellerFuchs> lunaphyte: It's a single mail being stuck in a loop between two servers[17:16:51] <rob0> 16:11 < rob0> sounds like the shell servers need basic configuration,[17:17:08] <lunaphyte> so the message is relayed to n.n.35.111, and then n.n..35.111 returns it?[17:17:16] <lunaphyte> if so, then yes, what rob0 says[17:17:18] <rob0> also, do away with permit_mynetworks[17:17:38] <lunaphyte> configure the shell servers to not relay the messages they receive, and instead deliver them[17:17:44] <KellerFuchs> https://0bin.net/paste/Fc5vhFWGC9rDjLF1#6Y70VuaJe28agBZ6dKVaYhEpbLkbXNdWijXelZ1+4P+ for ny1's side[17:17:52] <rob0> Each one is accepting it for relay[17:18:05] <KellerFuchs> rob0: On which side, you mean?[17:18:10] <rob0> Each one is accepting it for relay[17:18:31] <rob0> mail routes it to ny1, ny1 routes it to mail[17:18:32] <KellerFuchs> No, doing away with wich permit_mynetworks ?[17:18:42] <rob0> ALL[17:19:01] <rob0> require AUTH if you're going to relay[17:19:06] <rob0> !submission[17:19:06] <knoba> rob0: "submission" : Port 587 is submission, for user submission of mail, NOT suitable for mail exchange. See the commented example in master.cf. also see !msa, and rfc 6409. Also read http://www.maawg.org/sites/maawg/files/news/MAAWG_Port25rec0511.pdf[17:19:15] <KellerFuchs> Eh? I need permit_mynetworks for the shell servers to be able to send mail through mail.#![17:19:31] <rob0> ugly.[17:19:53] <lunaphyte> awful[17:20:03] <KellerFuchs> Well, how would you send mail with @hashbang.sh origins and not get flagged as SPAM?[17:20:13] <rob0> huh?[17:20:25] <rob0> Don't confuse the issue.[17:20:59] <rob0> Take this one step at a time. First step, as given, was !basic, so these shell servers know what mail to accept.[17:21:07] <KellerFuchs> The users on the shell servers need to receive and send mail with @hashbang.sh addresses. I was merely saying why the MX has a permit_mynetworks[17:21:10] <KellerFuchs> Ok[17:21:30] <rob0> I'm not even going to try to answer the "flagged as spam" confusion until the loop is fixed.[17:24:15] <KellerFuchs> Ok, I removed mynetworks = 127.0.0.0/8 [::1]/128 mail.$mydomain and smtpd_client_restrictions = permit_mynetworks reject from the shell server's config[17:24:30] <KellerFuchs> (Waiting for the deployment script to finish running)[17:25:11] <KellerFuchs> And sending a new mail[17:27:19] *** ananayarora has joined #postfix[17:28:38] <KellerFuchs> https://0bin.net/paste/G7vQvK2EB+cybaxw#ZPxJg3ykLghB+CBRitSfVV50ETtInWbaNvhGb4GveMv[17:30:04] *** ananayar_ has joined #postfix[17:30:41] *** ananayarora has quit IRC[17:30:58] *** Haudegen has joined #postfix[17:31:00] *** ananayar_ has quit IRC[17:31:02] <lunaphyte> that looks like a log from mail.hashbang.sh, but it appears to be titled "ny1.hashbang.sh"[17:31:24] <KellerFuchs> lunaphyte: I put both in the paste. See line 6[17:31:38] <KellerFuchs> Ok, for some reason ny1 has $myhostname = localhost.hashbang.sh[17:31:40] <lunaphyte> ah, my mistake[17:32:16] *** troulouliou_div2 has joined #postfix[17:32:22] <KellerFuchs> How does Postfix pickup the hostname? O_o[17:32:44] <lunaphyte> so, a step in the right direction, at least. the shell server is now no longer trying to return the message[17:33:08] *** ananayarora has joined #postfix[17:33:14] <lunaphyte> my advice would be to set $mydomain, and set $myhostname to foo.${mydomain}[17:33:29] <lunaphyte> i would not leave those details up to the os' mechanisms[17:34:18] <KellerFuchs> That's difficult in my case, because all the server pull their config from a centralised configuration repository[17:34:53] <lunaphyte> surely the mechanism[s] used for this can make such accomodations[17:35:04] <lunaphyte> if not, you have selected the wrong software for such a task ;)[17:35:36] <KellerFuchs> I can add templating, it is merely annoying[17:35:47] <KellerFuchs> Anyway, thanks a lot for the help[17:36:34] <lunaphyte> well, regardless, my further advice would be to not try to figure out your postfix recipe at the same time you are figuring out your configuration management elements.[17:36:54] <lunaphyte> get postfix working the way it needs to. see where you end up, then automate things as desired/possible[17:37:10] *** ananayarora has quit IRC[17:37:30] <KellerFuchs> That's exactly what I'm doing[17:38:14] <lunaphyte> ah, good[17:38:15] *** ananayarora has joined #postfix[17:40:00] <KellerFuchs> Ok, seems the hostname screwup was in one of the parts I didn't automate yet (postfix seems to pickup the hostname from /etc/hosts directly, and it had a slight error)[17:41:31] <KellerFuchs> Ok, undid the config changes, restarted postfix, and it seems to work[17:41:49] <KellerFuchs> lunaphyte, rob0 : Thanks a ton[17:42:06] <lunaphyte> sure thing[17:42:06] <KellerFuchs> (If you happen to go to FOSDEM and I do too, I will buy you beer)[17:42:13] <KellerFuchs> (Or whichever beverage)[17:48:44] *** lrea has left #postfix[17:58:34] *** zorg1 has quit IRC[18:00:04] <KellerFuchs> lunaphyte, rob0 : So, what was the ugly & awful part about using mail.#! as the mail relay for all the shell servers?[18:00:51] <lunaphyte> it sort of depends on why there are all of these separate "shell" servers[18:00:58] <lunaphyte> what is this all actually for?[18:05:22] <rob0> oh, I suppose it can be okay, but it's always ideal to force users to authenticate[18:05:31] *** camroncade has joined #postfix[18:05:49] <rob0> you definitely do NOT want mail to be in mynetworks for/on the shell servers[18:06:07] <rob0> that's why you had a loop[18:07:08] <rob0> We advocate for doing things the right way, and authentication is right; mynetworks is lazy and (as you see) prone to error.[18:14:00] *** art22art has joined #postfix[18:18:21] *** art22art has quit IRC[18:20:19] <skyroveRR> rob0: I tried compiling dovecot about 8 times, and each time, it needs one program header or the other... is there a saner alternative to this? Just need to auth the SMTP server..[18:20:57] <lunaphyte> you'll have to either compile dovecot, or compile cyrus[18:21:06] <rob0> have you tried to compile Cyrus SASL yet? Do you expect it to be any easier? :)[18:21:18] <skyroveRR> rob0: probably..[18:21:24] <rob0> I don't.[18:21:30] <skyroveRR> :([18:21:36] <lunaphyte> also note that wrt dovecot, you don't need any of the retrieval/delivery bits[18:22:01] <lunaphyte> so when you're building it, ensure you have disabled all of the unnecessary stuff, and perhaps the dependencies will be less daunting[18:22:39] <skyroveRR> lunaphyte: it gets stuck looking for rpc/rpc.h..[18:22:55] <skyroveRR> Which is.. a "libevent" dependency? HUH?[18:23:04] <lunaphyte> well, this is what you asked for, no? ;)[18:23:04] *** tuxick has joined #postfix[18:23:33] <lunaphyte> in any case, those would be questions for #dovecot, #cyrus, etc[18:25:17] *** gu1lle_ has joined #postfix[18:26:22] *** camroncade has quit IRC[18:28:07] *** ntnlzr is now known as ntnlzr|out[18:29:53] *** lvlinux is now known as ruel[18:32:44] *** lucascastro has quit IRC[18:37:37] *** camroncade has joined #postfix[18:50:48] *** troulouliou_div2 has quit IRC[18:53:50] *** PHPanos has quit IRC[18:55:37] *** stuNNed has joined #postfix[18:56:59] <stuNNed> postfix is trying to spawn too many processes and i can't figure out why[18:58:40] <lunaphyte> the logs contain that information[19:02:29] <KellerFuchs> rob0: The loop was actually because of mydestination being $myhostname, which was wrongly set[19:02:56] *** skyroveRR has quit IRC[19:03:07] <KellerFuchs> Regarding mail being in mynetworks, this is because I wanted to restrict sending mail to the shell servers to mail.#![19:04:00] <lunaphyte> yes, that's the wrong way to do that[19:04:40] <lunaphyte> largely unrelated to email, authorization should never be done based on source ip address. that is not responsible sysadmin practice[19:04:55] <KellerFuchs> lunaphyte: Well, there are only so many options for smtpd_client_restrictions[19:05:12] <lunaphyte> smtpd_client_restrictions should be empty[19:05:28] <lunaphyte> restrictions belong in smtpd_recipient_restrictions[19:05:49] <lunaphyte> regardless, the bigger picture is what i asked ealier[19:06:03] <KellerFuchs> lunaphyte: What is the right way to only allow mail.#! to send mail to the servers, rather than any random server on the Internet[19:06:10] <lunaphyte> [12.00.58] lunaphyte: what is this all actually for?[19:06:34] <lunaphyte> why are all of these individual "shell" servers?[19:06:40] <KellerFuchs> lunaphyte: This is a shell service, with users actually logged in on the servers[19:06:42] <lunaphyte> *why are there all[19:07:21] <lunaphyte> why multiple? why do you need to provide email for them?[19:07:38] <KellerFuchs> and there are multiple such servers (because several hundred users on a single server is not fun), with a given user's host being stored in the LDAP database[19:08:00] <stuNNed> ok to post logs?[19:08:09] <lunaphyte> several hundred users on a server is fairly modest[19:08:13] <KellerFuchs> stuNNed: Please use a pastebin[19:08:20] <lunaphyte> !tell stuNNed getting_help[19:08:21] <knoba> stuNNed: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[19:08:42] <stuNNed> ah sorry[19:08:56] <lunaphyte> !topic[19:08:57] <knoba> lunaphyte: Error: "topic" is not a valid command.[19:08:57] <KellerFuchs> lunaphyte: Not when they run persistent services from it.[19:09:51] <lunaphyte> that wouldn't matter, given proper scale, but it's beside the point here[19:09:57] <lunaphyte> why mail for them?[19:10:15] <lunaphyte> don't they have any number of email addresses already form elsewhere?[19:10:19] <KellerFuchs> Are you seriously asking me why I want to provide mail to my users?[19:10:24] * KellerFuchs facepalms[19:10:29] <KellerFuchs> lunaphyte: Not all of them do[19:10:30] <lunaphyte> *from[19:10:42] <lunaphyte> surely you can imagine that's surprising to hear ;)[19:11:02] <KellerFuchs> And when they do, it's usually from Google, and we try to encourage people to not give all their data to Google/Amazon/...[19:12:00] <lunaphyte> you'll have to accept, at some point, that responsible participation in the global email ecosystem means being honest with yourself about whether or not adding yet another email server to the pot is the right/best thing. i certainly hope you can appreicate that sentiment being echoed here, even if the answer is "yes, it is the right thing to do" :)[19:12:28] <KellerFuchs> Sure[19:12:39] <lunaphyte> in other words, i wouldn't waste the emotion of getting offended if you're asked "are you sure" ;)[19:12:53] <lunaphyte> anyway, that being said, how will they read/send email?[19:13:19] <KellerFuchs> From their shell account, using whichever mail client they prefer[19:13:28] <lunaphyte> will you provide imap?[19:13:38] <lunaphyte> will you provide submission?[19:13:53] <KellerFuchs> Probably not, given that I have other fires to put out[19:14:01] <KellerFuchs> Or at least, not in the near future[19:14:03] <lunaphyte> ok[19:14:56] <lunaphyte> well, tbh, it may be counter to what you want to hear, but i would not run mail servers on the shell servers, at all[19:15:39] <lunaphyte> if you want to provide mail services for your users, i would run a separate, isolated, mail server, and set up imap and submission[19:20:30] <KellerFuchs> Yes, and how would I authenticate the users?[19:20:50] <lunaphyte> i think you said earlier ldap was involved?[19:20:53] <KellerFuchs> Currently, our authentication base is only SSH pubkeys stored in LDAP[19:21:01] <lunaphyte> no passwords?[19:21:25] <KellerFuchs> sure, I can ask all users to define strong passwords, and use that, and have them type the passwords in everytime they start their mail client[19:21:39] <KellerFuchs> but that wasn't a solution I was too happy with[19:21:46] <KellerFuchs> lunaphyte: Nope, no passwords[19:22:14] <lunaphyte> well, the client can optionally remember passwords[19:22:43] <lunaphyte> but if you prefer no passwords, philosophically, then yes, that presents challenges in other areas[19:23:31] *** tomocha__ has quit IRC[19:24:02] <rob0> Both alpine and mutt can do both IMAP and SMTP, and I bet a global /etc/muttrc could make it work out of the box, with IMAP and SMTP+AUTH.[19:24:14] *** rsx has joined #postfix[19:24:51] <rob0> Also, you could optionally make the mail server open to users' other MUAs at home.[19:25:11] <rob0> (which might be contrary to what you're trying to do, by providing shells)[19:28:55] *** tomocha__ has joined #postfix[19:31:46] *** jad_jay has quit IRC[19:35:38] *** tomocha__ has quit IRC[19:38:24] <stuNNed> http://pastebin.com/5zkWVd4q[19:44:44] <tharkun> Does any one know how does gandi.net take spam from one of their registrars?[19:46:28] <tharkun> KellerFuchs: Have you heard about keyrings?[19:46:36] *** tomocha__ has joined #postfix[19:47:01] <tharkun> Usually the keyring is opened by the users own login password so emailing becomes transparent to the user starting a session.[19:47:06] <stuNNed> KellerFuchs: sorry took so long[19:49:31] <KellerFuchs> rob0: No, having the mail open to user's at-home MUAs would be a plus, I'm just trying to figure out a way to do so without requiring them to set a password if they do everything from the shell box[19:50:17] <KellerFuchs> tharkun: Yes, but users authenticate using a SSH key here, not sure if keyrings would still work[19:54:11] *** tomocha__ has quit IRC[19:54:26] *** Haudegen has quit IRC[19:59:03] *** Section1 has quit IRC[20:03:34] *** tomocha__ has joined #postfix[20:06:36] *** lucascastro has joined #postfix[20:30:45] *** Haudegen has joined #postfix[20:33:15] *** heroux has quit IRC[20:39:46] *** Motoko has joined #postfix[20:41:37] *** edux has quit IRC[21:05:01] <lunaphyte> it comes down to things outside of the scope of mail, really. if you plan on offering services to people beyond shell access, then implementing authentication methods which apply only to shell access don't really make sense[21:20:28] *** Guest59634 has quit IRC[21:20:28] *** Guest59634 has joined #postfix[21:20:32] *** Guest59634 is now known as nathanhi[21:33:55] *** synthroid has quit IRC[21:44:10] *** rsx has quit IRC[22:02:50] *** jad_jay_ has joined #postfix[22:21:24] *** stuNNed has quit IRC[22:37:32] *** tonythomas has quit IRC[22:43:28] *** heroux has joined #postfix[23:05:49] *** heroux has quit IRC[23:14:50] *** heroux has joined #postfix[23:21:50] *** FinboySlick has quit IRC[23:24:57] *** Jonukas has quit IRC[23:26:04] <KellerFuchs> lunaphyte: Well, originally we only had shell access[23:26:16] <KellerFuchs> but yes, I agree the question is broader than mail[23:26:35] *** D-Boy has quit IRC[23:28:00] *** todd_dsm has quit IRC[23:28:16] *** D-Boy has joined #postfix[23:28:23] *** todd_dsm has joined #postfix[23:28:25] *** equilibriumuk has quit IRC[23:30:39] *** equilibriumuk has joined #postfix[23:37:27] *** camroncade has quit IRC[23:40:25] *** gu1lle_ has quit IRC[23:43:20] *** ananayarora has quit IRC[23:46:11] *** tonil has quit IRC[23:54:23] *** Batch has joined #postfix[23:58:26] *** altin has quit IRC[23:58:35] *** altinu has joined #postfix