January 26, 2017 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
January 26, 2017 [00:01:30] *** davidw <davidw!~davidw@apache/committer/davidw> has joined #postfix[00:10:09] *** draynium <draynium!U2FsdGVkX1@ma.sdf.org> has quit IRC (Ping timeout: 258 seconds)[00:17:43] *** draynium <draynium!U2FsdGVkX1@ma.sdf.org> has joined #postfix[00:30:04] *** [NoClan]GoAway <[NoClan]GoAway!~NoClan@46.166.170.42> has quit IRC (Read error: Connection reset by peer)[00:34:55] *** geo27 <geo27!~quassel@37.169.162.108> has quit IRC (Remote host closed the connection)[00:40:02] *** Olipro <Olipro!~Olipro@uncyclopedia/pdpc.21for7.olipro> has quit IRC (Ping timeout: 252 seconds)[00:42:14] *** [NoClan]GoAway <[NoClan]GoAway!~NoClan@46.166.170.43> has joined #postfix[00:50:22] *** daynaskully <daynaskully!~digifiv5e@unaffiliated/daynaskully> has quit IRC (Ping timeout: 240 seconds)[00:55:58] *** Olipro <Olipro!~Olipro@uncyclopedia/pdpc.21for7.olipro> has joined #postfix[01:03:57] *** conley <conley!znc@aeneas.marmocet.com> has joined #postfix[01:04:04] <conley> hey guys[01:04:45] <conley> I have a basic LDAP auth setup on my main server for a few of my services, and I wanted to integrate that with postfix, but have everything else be hosted on the mail server. how would I go about doing that?[01:05:02] <conley> I see a ton of ldap-related config files and not really an explanation as to what they are[01:08:08] <lunaphyte> i don't understand "have everything else be hosted on the mail server"[01:08:18] <lunaphyte> what is everything else, and what is not hosted on the mail server?[01:11:23] <conley> lunaphyte: accounts and authentication done via LDAP, the default configuration for everything else[01:11:57] <conley> via the LDAP directory on the main server, i mean[01:14:27] *** aqua^c <aqua^c!~aqua@114.111.60.64> has joined #postfix[01:15:01] <conley> like, i'm still not entirely sure what the files in /etc/postfix/ldap actually do, or rather which ones i should be modifying[01:22:51] <rob0> those files might have been provided by your distributor; we don't know either[01:23:15] <rob0> !ldap[01:23:16] <knoba> rob0: "ldap" : Postfix can use LDAP for various lookups; see http://www.postfix.org/LDAP_README.html and http://www.postfix.org/ldap_table.5.html for details.[01:28:26] *** Darcidride <Darcidride!~Darcidrid@2a01:e35:8b4a:ca10:3da4:31c2:c63:2890> has quit IRC (Ping timeout: 252 seconds)[01:41:46] *** methamp <methamp!mh@haxing.org> has joined #postfix[02:27:27] *** davidw <davidw!~davidw@apache/committer/davidw> has quit IRC (Ping timeout: 256 seconds)[02:30:32] *** daynaskully <daynaskully!~digifiv5e@unaffiliated/daynaskully> has joined #postfix[02:31:37] *** honigkuchen <honigkuchen!~honigkuch@2a02:810a:1340:53b0:4c12:b341:3518:53ad> has joined #postfix[02:31:41] <honigkuchen> hi[02:31:45] <honigkuchen> anyone there?[02:31:50] <honigkuchen> here it is 2:30 am[02:32:37] <catbeard> what's the easiest way to immeditely reject outbound emails to say * at a0l dot com[02:32:47] <catbeard> for all outbound email[02:33:09] <catbeard> or if i had a file with a list of domains in it, would be awesome[02:33:14] <honigkuchen> my postfix doesnt listen on port 25 anymore, but did it long time[02:33:33] <honigkuchen> what happened?[02:35:45] <lunaphyte> catbeard: use check_recipient_access in your submission restrictions[02:36:28] <catbeard> how about transport_maps[02:36:50] <catbeard> using hash:/path/to/bad_domains.list[02:40:16] <catbeard> lunaphyte: smtpd_sender_restrictions ?[02:41:06] <catbeard> and i guess that would be a hash: as well?[02:50:30] *** idmistir <idmistir!~idmistir@unaffiliated/idmistir> has quit IRC (Ping timeout: 248 seconds)[02:51:47] *** idmistir <idmistir!~idmistir@2a01:4f8:161:620b::2> has joined #postfix[02:51:47] *** idmistir <idmistir!~idmistir@2a01:4f8:161:620b::2> has quit IRC (Changing host)[02:51:47] *** idmistir <idmistir!~idmistir@unaffiliated/idmistir> has joined #postfix[02:54:15] <honigkuchen> why would postfix stop from the one day to another to listen on port 25 without that anything is written about that in the logs?[02:58:11] <honigkuchen> nothing in logs about that[02:58:15] <catbeard> lunaphyte: ok i have smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/spam_domains, permit[02:58:18] <catbeard> not working though[02:58:20] <honigkuchen> no error sign when starting the service[02:58:55] <catbeard> says this in the logs: Jan 25 19:57:17 web1 postfix/smtpd[15158]: fatal: parameter "smtpd_recipient_restrictions": specify at least one working instance of: check_relay_domains, reject_unauth_destination, reject, defer or defer_if_permit[03:00:16] <catbeard> do i just need to specify reject_unauth_destination, before check_recipient_access ?[03:22:02] *** aqua^c <aqua^c!~aqua@114.111.60.64> has quit IRC ()[03:34:59] <lunaphyte> you need to have permit_sasl_authenticated[03:36:00] <hl> 1[03:48:34] *** tonhe <tonhe!~tonhe@unaffiliated/tonhe> has joined #postfix[03:49:55] <tonhe> !getting_help[03:49:55] <knoba> tonhe: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[03:50:08] <tonhe> !relevant_logs[03:50:08] <knoba> tonhe: "relevant_logs" : mail.* syslog Postfix log messages (NOT verbose, see !no_verbose) which show ONLY the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log are not adequate. IMAP/POP3 daemons and external delivery agents often log to the same syslog facility (mail); filter such messages out unless asked not to.[03:50:27] <tonhe> !showconfig[03:50:27] <knoba> tonhe: "showconfig" : when asked to provide your config, please provide a SINGLE pastebin with postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[03:56:19] *** gu1lle_ <gu1lle_!~Thunderbi@190.18.0.84> has joined #postfix[04:01:48] <tonhe> good evening -- having some issues getting TLS and SASL setup for user SMTP auth - http://pastebin.com/qAX3K5bv -- much ablidged to anyone willing to take a look[04:03:01] <tonhe> If someone can point at the pertenant logs to look into that would be great -- Ubuntu 16.04.1 LTS[04:03:05] <lunaphyte> i'd encourage you to use dovecot for sasl, rather than cyrus. there's a good chance it will be easier to configure[04:03:20] <tonhe> I wont be running IMAP or POP on this server though[04:03:25] <lunaphyte> that's fine[04:03:37] <lunaphyte> just don't install those bits[04:05:55] <lunaphyte> also, very important, you need to enable submission[04:05:57] <tonhe> is cyrus really that bad to get setup ? I feel like it's 99% of the way there. I have successful tests using testsaslauthd[04:06:06] <lunaphyte> !tell tonhe submission[04:06:06] <knoba> tonhe: "submission" : Port 587 is submission, for user submission of mail, NOT suitable for mail exchange. See the commented example in master.cf. also see !msa, and rfc 6409. Also read http://www.maawg.org/sites/maawg/files/news/MAAWG_Port25rec0511.pdf[04:06:18] <lunaphyte> tonhe: most folks seem to find that it is, yes.[04:08:42] <lunaphyte> you can't find logs?[04:09:01] *** honigkuchen <honigkuchen!~honigkuch@2a02:810a:1340:53b0:4c12:b341:3518:53ad> has quit IRC (Quit: Leaving)[04:09:08] <tonhe> nothing that seems relevant[04:09:30] <tonhe> looking for auth logs, but don't see crap anywhere[04:09:45] <lunaphyte> oh, no, that's not what relevant means.[04:10:03] <lunaphyte> don't try to "pick things out". just show the logs[04:10:07] <lunaphyte> just like the factoid says[04:10:22] *** LoRez <LoRez!~LoRez@freenode/staff-emeritus/lorez> has quit IRC (Ping timeout: 240 seconds)[04:11:37] <tonhe> lunaphyte: what submission options should I enable? my first guess didn't seem to get me 250 - AUTH[04:12:13] <lunaphyte> start with the existing ones, and then from there you can update your pastebin[04:12:44] <rob0> Actually I don't know how easy it is to not install all of Dovecot, but it *is* easy to have a SASL-only dovecot.conf[04:12:58] <lunaphyte> pretty darn easy[04:13:38] <tonhe> ok, with only uncommenting the single line for submission I seem to get better errors[04:14:54] <lunaphyte> investment bias can be a debilitating affliction :)[04:15:33] <rob0> the submission "single line" has several continued lines; those are necessary.[04:19:23] <rob0> Why did you enable broken_sasl_auth_clients?[04:20:12] <rob0> also, why LOGIN mechanism?[04:20:21] <tonhe> rob0: trying to make it work.. was planning to kill it[04:20:31] <pj> he wants to support outlook express from 1995?[04:20:35] <tonhe> LOGIN was just what I kept finding, I'm not a TLS expert[04:21:09] <tonhe> network engineer trying to play server guy[04:21:10] <rob0> SASL != TLS, LOGIN is a non-standard SASL mechanism[04:21:58] <rob0> Outlook Express from win9x needed broken_sasl_auth_clients[04:22:18] <rob0> and LOGIN[04:22:45] *** chachasmooth <chachasmooth!~chachasmo@unaffiliated/chachasmooth> has quit IRC (Ping timeout: 258 seconds)[04:23:02] <pj> and I think it was one of the only clients to not support STARTTLS?[04:23:02] <rob0> now just go for PLAIN, and change your line 68 to yes[04:23:19] <rob0> oh, true, it requiured smtps[04:23:44] <tonhe> new paste, I'll make those changes now though -- http://pastebin.com/SJDrB0CN[04:23:55] *** chachasmooth <chachasmooth!~chachasmo@unaffiliated/chachasmooth> has joined #postfix[04:24:55] <tonhe> I see a decent error in there now that we're using submission[04:25:14] <tonhe> looks like the saslauthd connection isn't happy[04:25:25] <lunaphyte> you'll also want to disable all of the submission stuff that you've currently got in your global config[04:25:52] <lunaphyte> e.g. smtpd_sasl_auth_enable = yes, and its friends[04:26:13] <tonhe> anything that mentions smtpd and sasl?[04:26:37] <lunaphyte> not everything necessarily[04:27:10] <lunaphyte> permit_sasl_authenticated doesn't belong in the global config. only in the submission service config[04:27:28] <lunaphyte> permit_mynetworks doesn't belong anywhere, period[04:27:45] <lunaphyte> smtpd_use_tls is deprecated[04:28:09] <tonhe> so smtpd_relay_restrictions = defer_unauth_destination and smtpd_recipient_restrictions = reject_unauth_destination ?[04:28:51] <pj> I will generalyl set smtpd_relay_restrictions=permit[04:29:16] <rob0> does that work?[04:29:31] <rob0> or just unset it?[04:29:33] <pj> rob0: yes[04:29:44] <pj> well it's the same as explicitly setting it to nothing[04:30:13] <pj> I usually tell people permit because it's easier than trying to explain to them to set it to nothing.[04:30:31] <rob0> Anyway re: the pastebin I can't tell if the PLAIN problem is a matter of faulty testing. Did you try with a MUA that can do TLS and AUTH?[04:31:06] <rob0> but indeed, the saslauthd socket isn't found, so it won't work unless you fix that[04:31:38] <pj> connect with s_client and see what the EHLO response is[04:31:42] <tonhe> where does postfix get that info from ?[04:33:07] <rob0> what info?[04:33:14] <tonhe> the socket[04:34:02] <rob0> oh, I don't really know, no one here uses Cyrus. I do know that Debian's Cyrus is non-standard, plus:[04:34:06] <rob0> !chroot[04:34:06] <knoba> rob0: "chroot" : The fifth column in master.cf determines if the Postfix process described on that line runs in a chroot. The default is 'y' for postfix versions prior to 3.0 and 'n' for newer. See !debug, !queue_directory and files in the examples/chroot-setup subdirectory of the Postfix source archive which show examples of a Postfix chroot environment on a variety of systems.[04:35:41] <tonhe> new EHLO http://pastebin.com/KJ0TJdn3 after some changes[04:36:14] <tonhe> should I not be running this chroot?[04:37:27] *** Dominian <Dominian!~dominian@opensuse/member/dominian> has quit IRC (Quit: reboot)[04:38:13] <tonhe> I see this in the chroot path for saslauthd (per where it's configured to be in /etc/defaults/saslauthd and /etc/saslauthd - http://pastebin.com/R0Bmav10[04:41:25] <tonhe> looking over the logs again, it was only failing to connect to the saslauthd socket for LOGIN, not for PLAIN[04:41:58] <tonhe> wait, not that's wrong[04:42:00] <tonhe> hmm[04:42:10] <tonhe> it was failing on PLAIN before, but now I"m not getting that error[04:42:35] <tonhe> I'm just seeing -- Jan 26 03:42:19 jarvis postfix/submission/smtpd[11951]: warning: SASL authentication failure: Can only find author/en (no password)[04:42:38] <tonhe> Jan 26 03:42:19 jarvis postfix/submission/smtpd[11951]: warning: localhost[127.0.0.1]: SASL PLAIN authentication failed: bad protocol / cancel[04:43:53] <tonhe> I'm using echo -ne '\000username\000password' | openssl base64 -- to encode my password, does that seem legit?[04:45:46] <rob0> 1-2 ways to make an AUTH PLAIN string are documented in[04:45:49] <rob0> !sasl[04:45:49] <knoba> rob0: "sasl" : SASL is 'Simple Authentication and Security Layer', necessary for SMTP AUTH, and provided to Postfix by addin software. Cyrus SASL and/or Dovecot IMAP/POP3 can provide SASL. See http://www.postfix.org/SASL_README.html for details.[04:46:30] <pj> !sasl_test[04:46:30] <knoba> pj: "sasl_test" : http://www.postfix.org/SASL_README.html#server_test[04:47:55] *** Dominian <Dominian!~dominian@opensuse/member/dominian> has joined #postfix[04:48:01] <pj> whether the echo version works or not depends on your shell, the printf version is more portable.[04:48:13] <tonhe> holy shit - it works[04:48:21] <tonhe> You guys are fantastic[04:48:39] <tonhe> used the perl version and it works great[04:49:15] <pj> I like this version: % printf '\0%s\0%s' 'username' 'password' | openssl base64[04:49:19] *** gu1lle_1 <gu1lle_1!~Thunderbi@190.18.0.84> has joined #postfix[04:49:40] *** gu1lle_ <gu1lle_!~Thunderbi@190.18.0.84> has quit IRC (Ping timeout: 240 seconds)[04:49:41] *** gu1lle_1 is now known as gu1lle_[04:49:48] <tonhe> Seriously, Thank you gusy so much. If you ever have networking problems, come see me in #cisco or #packetpushers[04:50:59] *** tonhe <tonhe!~tonhe@unaffiliated/tonhe> has left #postfix ("% Network not in table")[05:36:10] *** Diemuzi <Diemuzi!~IceChat9@unaffiliated/diemuzi> has quit IRC (Quit: See you on the flip side)[05:53:58] *** ruel <ruel!~ruel@unaffiliated/lvlinux> has quit IRC (Ping timeout: 248 seconds)[06:03:25] *** samy1028a <samy1028a!~samy1028c@63.251.72.10> has joined #postfix[06:06:46] *** samy1028 <samy1028!~samy1028c@63.251.72.10> has quit IRC (Ping timeout: 248 seconds)[06:07:20] *** LoRez <LoRez!~LoRez@freenode/staff-emeritus/lorez> has joined #postfix[06:11:02] *** lvlinux <lvlinux!~ruel@unaffiliated/lvlinux> has joined #postfix[06:14:10] *** johnny56_ <johnny56_!~johnny56@unaffiliated/johnny56> has quit IRC (Ping timeout: 264 seconds)[06:21:22] *** johnny56_ <johnny56_!~johnny56@unaffiliated/johnny56> has joined #postfix[07:05:57] *** Voovode <Voovode!~Alex@owbqbf.static.otenet.gr> has joined #postfix[07:27:02] *** muh2000_ <muh2000_!~quassel@prx2.ernw.net> has quit IRC (Ping timeout: 252 seconds)[07:57:04] *** Voovode <Voovode!~Alex@owbqbf.static.otenet.gr> has quit IRC (Read error: Connection reset by peer)[08:12:05] *** muh2000_ <muh2000_!~quassel@prx1.ernw.net> has joined #postfix[08:20:05] *** aindilis2 <aindilis2!~aindilis@173-165-36-107-Illinois.hfc.comcastbusiness.net> has quit IRC (Ping timeout: 240 seconds)[08:20:42] <survietamine> yes, never use echo with some parameter[08:21:46] *** johnny56 <johnny56!~johnny56@unaffiliated/johnny56> has joined #postfix[08:23:10] *** johnny56_ <johnny56_!~johnny56@unaffiliated/johnny56> has quit IRC (Ping timeout: 264 seconds)[08:30:40] *** n-st <n-st!~n-st@unaffiliated/n-st> has joined #postfix[08:34:04] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has quit IRC (Read error: Connection reset by peer)[09:01:47] *** johnny56_ <johnny56_!~johnny56@unaffiliated/johnny56> has joined #postfix[09:02:10] *** johnny56 <johnny56!~johnny56@unaffiliated/johnny56> has quit IRC (Ping timeout: 264 seconds)[09:14:11] *** _0x5eb_ <_0x5eb_!~seb@seb-hpws2.elen.ucl.ac.be> has quit IRC (Quit: Goodbye!)[09:15:39] *** howitdo <howitdo!~howitdo@unaffiliated/howitdo> has quit IRC (Read error: Connection reset by peer)[09:19:52] *** _0x5eb_ <_0x5eb_!~seb@seb-hpws2.elen.ucl.ac.be> has joined #postfix[09:29:25] *** olegfusion <olegfusion!~olegfusio@mail.mobileforsale.ru> has joined #postfix[09:34:17] *** infides <infides!~infides@p5B167D21.dip0.t-ipconnect.de> has joined #postfix[09:41:56] *** infides <infides!~infides@p5B167D21.dip0.t-ipconnect.de> has quit IRC (Ping timeout: 255 seconds)[09:46:43] *** markus_e92 <markus_e92!~markus_e9@62-46-101-129.adsl.highway.telekom.at> has quit IRC (Ping timeout: 255 seconds)[09:48:18] *** markus_e92 <markus_e92!~markus_e9@62-46-31-3.adsl.highway.telekom.at> has joined #postfix[09:52:26] *** g_zen <g_zen!~g_zen@195.24.90.254> has joined #postfix[10:05:37] *** peb` <peb`!~Coin@unaffiliated/peb/x-8260976> has joined #postfix[10:11:27] *** ugjka <ugjka!~ugjka@ugjka.net> has quit IRC (Quit: ByE ByE)[10:19:13] <acosonic> https://www.linkedin.com/pulse/preventing-mail-server-brute-force-attacks-from-ukrainian-pavic?trk=prof-post[10:24:40] *** J0hnSteel <J0hnSteel!~J0hnSteel@92.55.117.100> has quit IRC (Ping timeout: 240 seconds)[10:49:33] *** Pinchiukas <Pinchiukas!~keps@unaffiliated/pinchiukas> has joined #postfix[10:50:14] <Pinchiukas> I just noticed that I'm using bad envelope addresses. Can I somehow make Postfix use the header address as the envelope? I don't want to hardcode any domains in my configs.[10:57:33] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has joined #postfix[10:57:45] *** markus_e92 <markus_e92!~markus_e9@62-46-31-3.adsl.highway.telekom.at> has quit IRC (Ping timeout: 245 seconds)[10:59:54] *** markus_e92 <markus_e92!~markus_e9@91-115-154-38.adsl.highway.telekom.at> has joined #postfix[11:05:58] <pj> Pinchiukas: the correct way to fix that is at the MUA level. Postfix does not have a setting to copy the From: header to the envelope sender and it is very much incorrect to do so. There are legitimate reasons to have a different envelope sender than the From: header.[11:06:42] <Pinchiukas> pj: MUA as in the sender MUA?[11:06:46] <pj> !mua[11:06:47] <knoba> pj: "mua" : Mail User Agent: software used for mail message retrieval, commonly known as an email client, such as mutt, Evolution and Thunderbird[11:07:12] <Pinchiukas> Well the problem is that the email doesn't even get to a MUA. That's why I'm trying to fix this.[11:07:36] <pj> Pinchiukas: the MUA in this case is the client that submits the message to postfix.[11:07:44] <Pinchiukas> A website is sending an email with the header containing the correct From address but the envelope gets set to apache at whatever dot internal.[11:07:53] <pj> or the software where the message is created in the first place.[11:08:03] <Pinchiukas> How do you suggest I fix that?[11:08:10] <survietamine> so, fix your website :p[11:08:18] <Pinchiukas> It's working fine.[11:08:21] <pj> yep, you have to fix the website software.[11:08:27] <pj> Pinchiukas: obviously it is not.[11:08:28] <Pinchiukas> How would I do that?[11:08:30] <survietamine> non, you said it's sending broken mails[11:08:47] <pj> Pinchiukas: how are we supposed to know? we're not experts in your website.[11:09:04] <pj> I suggest you ask the people who are experts in your website.[11:09:37] <Pinchiukas> The website doesn't set the envelope address.[11:09:54] <pj> how does the website submit the message?[11:09:56] <survietamine> the problem with web development experts is that they are not often mail expert, and they send mails the bad way[11:10:45] <survietamine> are you receiving mails from the web server or from some mail server?[11:11:33] <pj> !tell Pinchiukas relevant_logs[11:11:33] <knoba> Pinchiukas: "relevant_logs" : mail.* syslog Postfix log messages (NOT verbose, see !no_verbose) which show ONLY the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log are not adequate. IMAP/POP3 daemons and external delivery agents often log to the same syslog facility (mail); filter such messages out unless asked not to.[11:11:44] <pj> Pinchiukas: can you show us this in a pastebin, please ^^^^^[11:13:22] <Pinchiukas> I'm looking for that piece of code now. I think it's calling the sendmail binary.[11:15:19] <survietamine> maybe some PHP code using mail() function[11:15:35] <pj> Pinchiukas: yes, your code needs to pass the -f switch to sendmail along with the correct envelope sender. See the sendmail(1) man page for details.[11:16:30] *** howitdo <howitdo!~howitdo@cpe-172-73-18-120.carolina.res.rr.com> has joined #postfix[11:16:30] *** howitdo <howitdo!~howitdo@cpe-172-73-18-120.carolina.res.rr.com> has quit IRC (Changing host)[11:16:30] *** howitdo <howitdo!~howitdo@unaffiliated/howitdo> has joined #postfix[11:21:36] *** gu1lle_ <gu1lle_!~Thunderbi@190.18.0.84> has quit IRC (Remote host closed the connection)[11:21:50] *** gu1lle_ <gu1lle_!~Thunderbi@190.18.0.84> has joined #postfix[11:26:59] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has quit IRC (Remote host closed the connection)[11:29:38] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has joined #postfix[11:32:07] *** WakiMiko <WakiMiko!~WakiMiko@unaffiliated/wakimiko> has quit IRC (Max SendQ exceeded)[11:32:38] *** WakiMiko <WakiMiko!~WakiMiko@unaffiliated/wakimiko> has joined #postfix[11:52:45] *** froz-gab <froz-gab!~froz-gab@host55-138-dynamic.52-79-r.retail.telecomitalia.it> has joined #postfix[12:30:13] *** robinho86 <robinho86!~robsonjf@201.22.86.124.static.gvt.net.br> has joined #postfix[12:34:37] *** pti-jean_ <pti-jean_!~quassel@118.22.124.78.rev.sfr.net> has joined #postfix[12:34:52] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has quit IRC (Quit: inabit. zz.)[12:35:20] *** ugjka <ugjka!~ugjka@ugjka.net> has joined #postfix[12:36:15] *** Section1 <Section1!~section1@190.195.71.40> has joined #postfix[12:48:41] *** MACscr <MACscr!~MACscr@c-73-9-230-5.hsd1.il.comcast.net> has quit IRC (Ping timeout: 255 seconds)[13:30:13] *** nohitall <nohitall!~nohitall@unaffiliated/nohitall> has joined #postfix[13:30:57] <nohitall> Hi, I am using debian 8 and I am having trouble with postfix-ldap, I installed it but postfix still complains about "unsupported dict type: ldap". Anybody got a hint how to debug this?[13:32:16] <nohitall> postconf -m shows ldap though[13:38:20] <pj> nohitall: what is the output of: postconf -d mail_version[13:38:35] *** sarri <sarri!~sari@unaffiliated/sarri> has quit IRC (Read error: Connection reset by peer)[13:42:28] <nohitall> pj: 2.11.3[13:44:19] <pj> nohitall: postfix did not add dynamic map support until 3.0. Before that it was a debian-specific modification. There maybe a debian user who can help you here but barring that you should ask for help in #debian.[13:45:13] <Zerberus> I have a debian jessie here with postfix-ldap and no such issue[13:45:27] <Zerberus> nohitall: make sure the package is properly installed[13:46:13] <Zerberus> and make sure you have not hidden character in the map type naming[13:46:16] <nohitall> yea just fixed it[13:46:26] <nohitall> was missing dynamicmaps.cf in second postfix instance directory[13:46:29] * nohitall facepalms[13:47:02] <pj> I find it strange that postconf -m showed ldap support in that case.[13:47:05] <pj> but oh well.[13:47:11] *** sarri <sarri!~sari@p50995cae.dip0.t-ipconnect.de> has joined #postfix[13:47:11] *** sarri <sarri!~sari@p50995cae.dip0.t-ipconnect.de> has quit IRC (Changing host)[13:47:11] *** sarri <sarri!~sari@unaffiliated/sarri> has joined #postfix[13:49:15] <nohitall> thanks anyway, learned something[13:49:37] <nohitall> have a nice day everybody[13:49:39] *** nohitall <nohitall!~nohitall@unaffiliated/nohitall> has left #postfix ("WeeChat 1.0.1")[13:59:12] *** Section1 <Section1!~section1@190.195.71.40> has quit IRC (Quit: Leaving)[13:59:42] *** systeem <systeem!~systeem@2001:bc8:24e8:800:a:27ba:0:c9f1> has quit IRC (Ping timeout: 240 seconds)[14:02:17] *** systeem <systeem!~systeem@2001:bc8:24e8:800:a:27ba:0:c9f1> has joined #postfix[14:13:15] *** synthroid <synthroid!~synthroid@108.61.68.140> has joined #postfix[14:39:27] *** ryan8403 <ryan8403!~ryan8403@230.50.196.104.bc.googleusercontent.com> has joined #postfix[14:42:32] *** Section1 <Section1!~section1@190.195.71.40> has joined #postfix[14:43:43] *** methamp <methamp!mh@haxing.org> has quit IRC (Read error: Connection reset by peer)[14:43:49] *** methamp <methamp!mh@haxing.org> has joined #postfix[14:45:52] *** methamp <methamp!mh@haxing.org> has quit IRC (Read error: Connection reset by peer)[14:45:59] *** methamp <methamp!mh@haxing.org> has joined #postfix[14:52:08] *** JanC <JanC!~janc@lugwv/member/JanC> has quit IRC (Read error: Connection reset by peer)[14:54:02] *** JanC <JanC!~janc@lugwv/member/JanC> has joined #postfix[14:54:39] *** methamp <methamp!mh@haxing.org> has quit IRC (Read error: Connection reset by peer)[14:54:46] *** methamp <methamp!mh@haxing.org> has joined #postfix[15:06:55] *** traptrip <traptrip!~traptrip@brigaid.xs4all.nl> has quit IRC (Ping timeout: 245 seconds)[15:12:55] *** methamp <methamp!mh@haxing.org> has left #postfix ("Textual IRC Client: www.textualapp.com")[15:21:08] *** roentgen <roentgen!~roentgen@unaffiliated/roentgen> has quit IRC (Ping timeout: 252 seconds)[15:23:04] *** hipodilski <hipodilski!~hipo@pc-freak.net> has joined #postfix[15:25:52] *** FinboySlick <FinboySlick!~shark@74.117.40.10> has joined #postfix[15:32:46] *** sarri <sarri!~sari@unaffiliated/sarri> has quit IRC (Ping timeout: 264 seconds)[15:39:03] *** sarri <sarri!~sari@p50995cae.dip0.t-ipconnect.de> has joined #postfix[15:39:03] *** sarri <sarri!~sari@p50995cae.dip0.t-ipconnect.de> has quit IRC (Changing host)[15:39:03] *** sarri <sarri!~sari@unaffiliated/sarri> has joined #postfix[15:41:40] *** dka <dka!~dka@1.52.58.230> has joined #postfix[15:49:05] *** roentgen <roentgen!~roentgen@unaffiliated/roentgen> has joined #postfix[15:58:00] *** Diemuzi <Diemuzi!~IceChat9@unaffiliated/diemuzi> has joined #postfix[16:02:04] *** infides <infides!~infides@p5B167D21.dip0.t-ipconnect.de> has joined #postfix[16:10:50] *** muh2000__ <muh2000__!~quassel@prx1.ernw.net> has joined #postfix[16:12:57] *** muh2000__ <muh2000__!~quassel@prx1.ernw.net> has quit IRC (Remote host closed the connection)[16:12:58] *** muh2000_ <muh2000_!~quassel@prx1.ernw.net> has quit IRC (Remote host closed the connection)[16:15:17] *** andi- <andi-!~andi-@unaffiliated/andi-> has quit IRC (Remote host closed the connection)[16:17:19] *** andi- <andi-!~andi-@unaffiliated/andi-> has joined #postfix[16:25:43] *** nesthib <nesthib!~nesthib@unaffiliated/nesthib> has quit IRC (Ping timeout: 256 seconds)[16:33:39] *** nesthib <nesthib!~nesthib@unaffiliated/nesthib> has joined #postfix[16:38:58] *** Oclairi <Oclairi!~Oclair@178-191-55-173.adsl.highway.telekom.at> has joined #postfix[16:40:15] *** Oclair <Oclair!~Oclair@178-191-50-99.adsl.highway.telekom.at> has quit IRC (Ping timeout: 258 seconds)[16:41:01] *** markus_e92 <markus_e92!~markus_e9@91-115-154-38.adsl.highway.telekom.at> has quit IRC (Ping timeout: 258 seconds)[16:42:26] *** markus_e92 <markus_e92!~markus_e9@62-46-97-53.adsl.highway.telekom.at> has joined #postfix[16:45:50] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has joined #postfix[16:45:55] *** bauruine <bauruine!~bauruine@2a01:4f8:130:8285:fefe::36> has quit IRC (Quit: ZNC - http://znc.in)[16:49:09] *** Psi-Jack <Psi-Jack!~psi-jack@unaffiliated/psi-jack> has quit IRC (Ping timeout: 240 seconds)[16:49:18] *** Psi-Jack_ <Psi-Jack_!~psi-jack@unaffiliated/psi-jack> has joined #postfix[16:49:42] *** bauruine <bauruine!~bauruine@2a01:4f8:130:8285:fefe::36> has joined #postfix[16:50:36] *** gu1lle_ <gu1lle_!~Thunderbi@190.18.0.84> has quit IRC (Remote host closed the connection)[16:56:53] *** buki <buki!~buki@dev.null.cz> has quit IRC (Ping timeout: 256 seconds)[16:57:00] *** buki <buki!~buki@dev.null.cz> has joined #postfix[17:01:57] *** muh2000_ <muh2000_!~quassel@prx2.ernw.net> has joined #postfix[17:02:42] *** muh2000__ <muh2000__!~quassel@prx2.ernw.net> has joined #postfix[17:14:11] *** Qommand0r <Qommand0r!~HENKiE@unaffiliated/schaap137> has quit IRC (Quit: WeeChat 1.6)[17:14:15] *** Xentil <Xentil!~quassel@ip-46-21-210-22.nette.pl> has joined #postfix[17:17:12] *** SCHAAP137 <SCHAAP137!~schapie@unaffiliated/schaap137> has quit IRC (Read error: Connection reset by peer)[17:25:52] *** muh2000_ <muh2000_!~quassel@prx2.ernw.net> has quit IRC (Remote host closed the connection)[17:25:54] *** muh2000__ <muh2000__!~quassel@prx2.ernw.net> has quit IRC (Remote host closed the connection)[17:26:03] *** SCHAAP137 <SCHAAP137!~schapie@unaffiliated/schaap137> has joined #postfix[17:35:38] *** muh2000_ <muh2000_!~quassel@prx2.ernw.net> has joined #postfix[17:35:57] *** synthroid <synthroid!~synthroid@108.61.68.140> has quit IRC (Remote host closed the connection)[17:46:04] *** honigkuchen <honigkuchen!~honigkuch@2a02:810a:1340:53b0:f069:152b:d43e:4308> has joined #postfix[17:46:05] <honigkuchen> hi[17:46:17] <honigkuchen> what to do against botnet attacks?[17:46:41] <honigkuchen> maybe I should just rtfm but how to allow login to postfix from only one IP ?[17:47:39] *** synthroid <synthroid!~synthroid@gateway/vpn/privateinternetaccess/synthroid> has joined #postfix[17:47:59] *** traptrip <traptrip!~traptrip@brigaid.xs4all.nl> has joined #postfix[17:49:41] <rob0> is it a static IP? If so, simple,[17:49:48] <rob0> !check_client_access[17:49:48] <knoba> rob0: "check_client_access" : Search the named access database for the client name, parent domains, client address, or networks obtained by stripping least significant octets. Reject if the result is REJECT or [45]XX text . Permit otherwise[17:50:48] <rob0> If you plan to allow submission from your phone or other dynamic IP, it won't be so easy.[17:59:37] *** MACscr <MACscr!~MACscr@c-73-9-230-5.hsd1.il.comcast.net> has joined #postfix[18:07:24] <honigkuchen> In smtpd_recipient_restrictions I think first what to allow then what to check and then what to reject?[18:07:56] <honigkuchen> a link or google search word for that should be enough[18:09:27] *** MACscr <MACscr!~MACscr@c-73-9-230-5.hsd1.il.comcast.net> has quit IRC (Read error: No route to host)[18:09:35] *** MACscr_ <MACscr_!~MACscr@c-73-9-230-5.hsd1.il.comcast.net> has joined #postfix[18:09:46] <rob0> !access[18:09:46] <knoba> rob0: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server.[18:11:14] <rob0> note that you ONLY want to apply such a restriction to submission[18:13:53] *** Darcidride <Darcidride!~Darcidrid@2a01:e35:8b4a:ca10:e93c:2291:a74b:8f74> has joined #postfix[18:14:02] *** MACscr_ <MACscr_!~MACscr@c-73-9-230-5.hsd1.il.comcast.net> has quit IRC (Ping timeout: 240 seconds)[18:14:10] *** infides <infides!~infides@p5B167D21.dip0.t-ipconnect.de> has quit IRC (Ping timeout: 240 seconds)[18:16:10] *** davidw <davidw!~davidw@apache/committer/davidw> has joined #postfix[18:19:19] *** g_zen <g_zen!~g_zen@195.24.90.254> has quit IRC (Read error: Connection reset by peer)[18:21:29] *** troulouliou_div2 <troulouliou_div2!~troulouli@unaffiliated/troulouliou-div2/x-0271439> has quit IRC (Remote host closed the connection)[18:25:16] *** area51testsite <area51testsite!~tpanarch1@unaffiliated/tpanarch1st> has quit IRC (Ping timeout: 240 seconds)[18:40:26] *** dka <dka!~dka@1.52.58.230> has quit IRC (Read error: Connection timed out)[18:45:01] *** MACscr <MACscr!~MACscr@c-73-9-230-5.hsd1.il.comcast.net> has joined #postfix[19:12:19] *** LeoTh3o <LeoTh3o!~LeoTh3o@phoxden.xyz> has quit IRC (Ping timeout: 260 seconds)[19:14:56] *** graps <graps!~grapster@grapster.us> has joined #postfix[19:14:58] <graps> Hi all[19:16:14] <graps> How can I verify that postfix is sending a message to a server using a mailer like alpine ?[19:16:43] <graps> !welcome[19:16:43] <knoba> graps: "welcome" : Welcome to #postfix! If you're new here, or to IRC, first read the channel topic (/topic). It has important instructions on how to ask good questions. You will get more and better help if you follow those instructions. Good Luck![19:17:40] <graps> !getting_help[19:17:41] <knoba> graps: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[19:18:03] <graps> !relevant_logs[19:18:03] <knoba> graps: "relevant_logs" : mail.* syslog Postfix log messages (NOT verbose, see !no_verbose) which show ONLY the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log are not adequate. IMAP/POP3 daemons and external delivery agents often log to the same syslog facility (mail); filter such messages out unless asked not to.[19:18:54] <graps> !showconfig[19:18:54] <knoba> graps: "showconfig" : when asked to provide your config, please provide a SINGLE pastebin with postconf -nf and postconf -Mf. if your version is too old for those commands to work (< 2.9), you should upgrade, but see !showconfig_old[19:19:32] <rob0> I'm not sure what in specific you are asking.[19:32:26] *** gu1lle_ <gu1lle_!~Thunderbi@181.167.195.114> has joined #postfix[19:33:51] *** Takumo <Takumo!~Takumo@unaffiliated/takumokatekari> has quit IRC (Remote host closed the connection)[19:34:04] <graps> !relevant_logs[19:34:04] <knoba> graps: "relevant_logs" : mail.* syslog Postfix log messages (NOT verbose, see !no_verbose) which show ONLY the entire handling of a single mail which illustrates the issue with which you want help. Random selections from your mail log are not adequate. IMAP/POP3 daemons and external delivery agents often log to the same syslog facility (mail); filter such messages out unless asked not to.[19:36:02] <graps> I have set inet_interfaces to all, and tried sending a message from my server to another server. Which log file do I check to see if the e-mail message was successfully sent ?[19:40:36] <graps> !welcome[19:40:36] <knoba> graps: "welcome" : Welcome to #postfix! If you're new here, or to IRC, first read the channel topic (/topic). It has important instructions on how to ask good questions. You will get more and better help if you follow those instructions. Good Luck![19:41:11] *** graps <graps!~grapster@grapster.us> has left #postfix[19:45:49] *** gu1lle_ <gu1lle_!~Thunderbi@181.167.195.114> has quit IRC (Ping timeout: 255 seconds)[19:57:02] *** gu1lle_ <gu1lle_!~Thunderbi@181.167.195.114> has joined #postfix[20:06:52] *** Tourist <Tourist!~Tourist@unaffiliated/tourist> has quit IRC (Remote host closed the connection)[20:07:27] *** Tourist <Tourist!~Tourist@ip97.ip-51-254-159.eu> has joined #postfix[20:07:31] *** Tourist <Tourist!~Tourist@ip97.ip-51-254-159.eu> has quit IRC (Changing host)[20:07:31] *** Tourist <Tourist!~Tourist@unaffiliated/tourist> has joined #postfix[20:09:40] *** Section1 <Section1!~section1@190.195.71.40> has quit IRC (Quit: Leaving)[20:35:00] *** LeoTh3o <LeoTh3o!~LeoTh3o@phoxden.xyz> has joined #postfix[20:48:23] *** honigkuchen <honigkuchen!~honigkuch@2a02:810a:1340:53b0:f069:152b:d43e:4308> has quit IRC (Quit: Leaving)[21:13:11] *** sphenxes01 <sphenxes01!~sphenxes@213-147-185-189.hdsl.highway.telekom.at> has joined #postfix[21:17:09] *** sphenxes <sphenxes!~sphenxes@80-89-105-212.hdsl.highway.telekom.at> has quit IRC (Ping timeout: 260 seconds)[21:19:08] *** robinho86 <robinho86!~robsonjf@201.22.86.124.static.gvt.net.br> has quit IRC (Quit: Leaving.)[21:21:33] *** MacWinner <MacWinner!~Blah@192.77.239.202> has quit IRC (Quit: Textual IRC Client: www.textualapp.com)[21:22:35] *** ek <ek!ek@freebsd/contributor/ek> has quit IRC (Ping timeout: 276 seconds)[21:23:32] *** r1ppa <r1ppa!~Rippa@64.26.133.67> has joined #postfix[21:24:47] <r1ppa> postfix working with mailscanner, trying to release spam, getting "Helo command rejected: need fully-qualified hostname", I want to try and create a helo_client_restrictions file how do I go about it? create file with IP then postmap it?[21:25:52] *** MacWinner <MacWinner!~Blah@192.77.239.202> has joined #postfix[21:37:38] <r1ppa> cannot find anything on helo_client_restrictions, am I mistyping it or is it deprecated?[21:39:30] <lunaphyte> !mailscanner[21:39:30] <knoba> lunaphyte: "mailscanner" : don't you dare! mailscanner uses direct manipulation of postfix queues, employing undocumented methods, which may potentially change without warning at any point. there are much better ways for this sort of thing. consider amavisd-new instead.[21:39:51] *** ek <ek!ek@freebsd/contributor/ek> has joined #postfix[21:42:34] *** cferry <cferry!~cferry@162.243.13.235> has joined #postfix[21:44:45] *** yourname_ <yourname_!~yourname@12.68.173.51> has quit IRC (Quit: Lost terminal)[21:59:22] *** UncleKiwi <UncleKiwi!~UncleKiwi@unaffiliated/unclekiwi> has joined #postfix[22:00:22] *** draynium <draynium!U2FsdGVkX1@ma.sdf.org> has quit IRC (Ping timeout: 264 seconds)[22:02:51] <UncleKiwi> hi when a message comes in to postfix destined for a local domain eg user at example dot com how do i control what mailbox postfix puts that message into ?[22:03:04] <rob0> !tell r1ppa access[22:03:04] <knoba> r1ppa: "access" : http://www.postfix.org/SMTPD_ACCESS_README.html : An overview of access(5) controls in the Postfix smtpd(8) SMTP server.[22:03:10] <UncleKiwi> is that with /etc/aliases[22:03:18] <jaybe> !basic[22:03:18] <knoba> jaybe: "basic" : http://www.postfix.org/BASIC_CONFIGURATION_README.html : a good starting place for Postfix beginners, many common questions are answered here.[22:05:34] <r1ppa> eeek so no love for mailscanner eh? hehehe[22:05:40] <r1ppa> rob0, thanks, will check it out[22:05:41] <lunaphyte> UncleKiwi: define "mailbox"[22:06:14] <lunaphyte> r1ppa: fortunately, there's better software anyway[22:07:11] <UncleKiwi> <lunaphyte> the folder on the dovecot server MailDir /home/user/Maildir[22:07:24] <lunaphyte> UncleKiwi: you do that with dovecot sieve[22:07:27] <lunaphyte> not with postfix[22:07:57] <r1ppa> lunaphyte, we were using amavis-new, but really liked the flexibility of mailscanner[22:08:23] <lunaphyte> i consider amavisd-new to be infinitely more flexible than mailscanner[22:08:57] <r1ppa> lunaphyte, well not to me, we could not blacklist, there were several things we tried to accomplish and got nowhere[22:09:39] <lunaphyte> for something like blacklisting, it's better to do it with postfix anyway[22:09:58] <lunaphyte> unless you meant something else by blacklist[22:10:16] <r1ppa> stop that[22:10:18] <UncleKiwi> <lunaphyte> the alias_maps seems to have alot to do with it and virtual_alias_maps right ? can you tell me how that fits in[22:10:18] <r1ppa> you[22:10:45] <lunaphyte> UncleKiwi: with dovecot, neither[22:10:53] <rob0> !tell UncleKiwi address_classes[22:10:53] <knoba> UncleKiwi: "address_classes" : http://www.postfix.org/ADDRESS_CLASS_README.html describes how Postfix deals with different classes of addresses: local, relay, virtual alias, virtual mailbox, and Internet.[22:11:17] <lunaphyte> with dovecot, imo, you ought to be using the relay address class[22:13:10] <rob0> I would suggest at this point, with questions such as these, UncleKiwi should start with !basic and perhaps let it go at that.[22:14:05] <UncleKiwi> configuring this system is a real test of iq[22:14:07] <UncleKiwi> ahaha[22:16:27] <rob0> The answers to your questions are in !address_classes, but you don't need to understand that to start out.[22:17:46] <UncleKiwi> rob0:I have a working system doing almost all i need it to be able to to[22:18:13] <rob0> good[22:19:27] <UncleKiwi> rob0: can postfix with with no alias_maps and only virtual_alias_maps ?[22:20:02] <UncleKiwi> rob0: if i remove it i think it adds it back in[22:20:30] <rob0> well the functionality of those do overlap. And indeed alias_maps has a default setting, so if you remove it you get that.[22:21:55] <rob0> alias_maps is very useful in some cases, such as Mailman or similar software that runs a script on every received mail. That's not possible in virtual_alias_maps.[22:22:09] *** gongoputch <gongoputch!~kseel@freebsd/op/gongoputch> has quit IRC (Ping timeout: 240 seconds)[22:22:46] <UncleKiwi> the problem - user at example dot com and user at example dot org one of these may have a username user and the other i might have to make one called user1. Im trying to deal with this in the most simple way[22:23:04] <UncleKiwi> and its doing my head in[22:23:26] *** gongoputch <gongoputch!~kseel@freebsd/op/gongoputch> has joined #postfix[22:23:31] <rob0> see the virtual ALIAS example in:[22:23:32] *** gongoputch <gongoputch!~kseel@freebsd/op/gongoputch> has quit IRC (Remote host closed the connection)[22:23:35] <rob0> !virtual[22:23:35] <knoba> rob0: "virtual" : a way to configure additional domains and mailboxes that do not require individual system accounts. See: http://www.postfix.org/VIRTUAL_README.html[22:24:31] <rob0> and there, you can have a separate namespace for different domains, whereas with local(8) and mydestination, the namespace is the same.[22:27:10] *** area51testsite <area51testsite!~tpanarch1@unaffiliated/tpanarch1st> has joined #postfix[22:27:47] <UncleKiwi> i think my issue of understanding is the 'systems accounts bit' because i need a system account in order to have a UID and GID created . eg if i create a user that is not a system user in my /etc/dovecot/passwd file 'only' then try to chmod and chown that home directory with that user the system will not know what to do[22:28:18] <UncleKiwi> currently i am creating in both places[22:30:22] *** muh2000_ <muh2000_!~quassel@prx2.ernw.net> has quit IRC (Ping timeout: 255 seconds)[22:32:32] <UncleKiwi> rob0: and yes that is currently how im getting the job done using virtual_alias_maps[22:33:26] *** Darcidride <Darcidride!~Darcidrid@2a01:e35:8b4a:ca10:e93c:2291:a74b:8f74> has quit IRC (Ping timeout: 252 seconds)[22:34:21] <lunaphyte> that strikes me as convoluted and unnecessary, tbh[22:34:26] <r1ppa> rob0, does "/etc/postfix/helo_client_exceptions" exist, I cannot find any info on it at all, was it replaced with check_helo_access or is this something completely different?[22:35:28] <lunaphyte> r1ppa: postfix does not hard code filenames such as those.[22:35:33] <lunaphyte> that would be rather crazy[22:35:40] <rob0> there never was a setting "helo_client_exceptions", but you can name a file whatever makes sense to you[22:36:05] <r1ppa> rob0, maybe thats why, I didnt know these hash files can be named anything?[22:36:44] <lunaphyte> it pays to read the documentation :)[22:36:55] <rob0> the first part of the postconf(5) manual goes over things like that[22:37:17] <r1ppa> reading up online on my error with mailscanner, could I not resolve my "Helo command rejected: need fully-qualified hostname" issue by alowing 127.0.0.1 to bypass helo checks?[22:37:28] <r1ppa> lunaphyte, I am reading![22:37:38] <lunaphyte> yay![22:37:55] *** draynium <draynium!U2FsdGVkX1@ma.sdf.org> has joined #postfix[22:38:01] <rob0> could be[22:38:55] <rob0> Why are you applying a helo restriction to 127.0.0.1?[22:39:52] <r1ppa> we use mailscanner, when I tried to release a quarantined email it failed, it is failing because "Helo command rejected: need fully-qualified hostname", I am digging for the solution now[22:42:12] <rob0> looks like reject_non_fqdn_helo_hostname, but it's odd that your software isn't using a FQDN for HELO[22:42:29] *** draynium <draynium!U2FsdGVkX1@ma.sdf.org> has quit IRC (Ping timeout: 248 seconds)[22:45:42] <r1ppa> indeed[22:47:10] <r1ppa> rob0, we dont have anything for myhostname mydomain, just left commented out[22:47:26] <UncleKiwi> to=<user1 at mail dot mydomain.co.nz>, orig_to=<user at example dot com>, relay=local, delay=0.02, delays=0.01/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir)[22:47:55] <UncleKiwi> is that normal for when doing what im trying to do[22:48:30] <rob0> maybe ... did it accomplish what you wanted?[22:48:34] <UncleKiwi> yes[22:48:53] <rob0> then rejoice![22:48:57] <rob0> !rejoice[22:48:57] <knoba> rob0: Error: "rejoice" is not a valid command.[22:49:01] <rob0> is should be[22:49:04] <r1ppa> oh noes![22:49:11] <r1ppa> !fail[22:49:11] <knoba> r1ppa: Error: "fail" is not a valid command.[22:49:23] <UncleKiwi> rob0: i dont want it to be mickey mouse[22:49:27] <UncleKiwi> hehe[22:49:35] *** johnny56_ <johnny56_!~johnny56@unaffiliated/johnny56> has quit IRC (Quit: WeeChat 1.4-dev)[22:50:00] <UncleKiwi> poor micky mouse[22:51:10] *** synthroid <synthroid!~synthroid@gateway/vpn/privateinternetaccess/synthroid> has quit IRC ()[22:51:31] <r1ppa> rob0, I will continue to get familiar here, but I have seen several articles stating that removing reject_non_fqdn_helo_hostname completely is not a bad idea, what do you think?[22:54:17] <r1ppa> !getting_help[22:54:17] <knoba> r1ppa: "getting_help" : before asking your question, read the !relevant_logs and !showconfig factoids, and prepare a single pastebin containing all of that data. if you don't understand what this means, or if you need help doing this, please let us know. also see !pastebin[22:54:27] <r1ppa> !pastebin[22:54:27] <knoba> r1ppa: "pastebin" : a pastebin site lets you easily share logs and configuration. Examples are dpaste.org, fpaste.org, or pastebin.ca. Please avoid ad-supported sites such as pastebin.com if possible.[22:54:36] <UncleKiwi> i saw an ip connect to my submission port 106 times in 60 seconds... what would be the use of that ?[22:54:58] *** LeoTh3o <LeoTh3o!~LeoTh3o@phoxden.xyz> has quit IRC (Ping timeout: 264 seconds)[22:55:21] <rob0> it is a very safe and effective means of blocking spam, but indeed, you do not apply that sort of anti-spam restriction to submission clients.[22:55:49] *** ryan8403 <ryan8403!~ryan8403@230.50.196.104.bc.googleusercontent.com> has quit IRC (Ping timeout: 248 seconds)[22:55:50] <rob0> UncleKiwi, maybe an attack bot.[22:56:19] <UncleKiwi> rob0: but 106 times ? i dont think it even tried to auth[22:57:00] <UncleKiwi> rob0: my guess its that it wanted to relay[22:57:01] <rob0> bots are often not very effective[22:57:26] <UncleKiwi> rob0: low iq bots[22:58:07] <r1ppa> rob0, my main.cf if you want to take a look http://pastebin.ca/3760681[23:02:26] *** LeoTh3o <LeoTh3o!~LeoTh3o@phoxden.xyz> has joined #postfix[23:06:51] *** FinboySlick <FinboySlick!~shark@74.117.40.10> has quit IRC (Remote host closed the connection)[23:11:53] <lunaphyte> rob0 may be an attack bot[23:23:58] *** pti-jean_ <pti-jean_!~quassel@118.22.124.78.rev.sfr.net> has quit IRC (Remote host closed the connection)[23:25:29] *** chachasmooth <chachasmooth!~chachasmo@unaffiliated/chachasmooth> has quit IRC (Ping timeout: 256 seconds)[23:26:59] *** chachasmooth <chachasmooth!~chachasmo@unaffiliated/chachasmooth> has joined #postfix[23:28:46] *** area51testsite <area51testsite!~tpanarch1@unaffiliated/tpanarch1st> has quit IRC (Ping timeout: 240 seconds)[23:33:18] *** Xentil <Xentil!~quassel@ip-46-21-210-22.nette.pl> has quit IRC (Quit: http://quassel-irc.org - Chat comfortably. Anywhere.)[23:44:26] *** mikecmpbll <mikecmpbll!~mikecmpbl@ruby/staff/mikecmpbll> has joined #postfix[23:47:00] *** draynium <draynium!U2FsdGVkX1@ma.sdf.org> has joined #postfix[23:52:07] *** Psi-Jack_ is now known as Psi-Jack