[00:39] Hey guys, after following this guide " http://www.krizna.com/ubuntu/setup-mail-server-ubuntu-14-04/ " my server can't send emails externaly (for example Outlook.com, Gmail , etc...) The odd thing is that if i send from the external server to my own and reply to that email, the server does send it successfully. [00:40] and the logs are where? [00:40] i tail -f syslog [00:40] that is nice [00:40] but I can't tail it [00:41] so if you want people here to help you :) [00:41] oh you mean to paste the logs. w8. [00:43] That's when i send from my server to external (and i never recieve it) [00:43] http://pastebin.com/wcJ9c0YW [00:44] heh? [00:44] there are lines missing [00:45] And that's when i reply and i recieve it. [00:45] did you get that from /var/log/mail.log ? [00:45] http://pastebin.com/ZTnppVwc [00:45] no i got them from syslog [00:45] to=, relay=mx4.hotmail.com[65.54.188.72]:25, delay=2.4, delays=0.29/0.02/1.4/0.76, dsn=2.0.0, status=sent (250 <54F3B259.6030208@buzztera.gr> Queued mail for delivery) [00:46] the email was delievered to hotmail [00:46] using that live.com account [00:46] is that intended? [00:46] Yes but the inbox of the live.com account never recieves it. [00:46] its not on spam etc [00:46] not your problem [00:46] you can see it says [00:46] status=sent [00:47] the hotmail.com server ACCEPTED the email [00:47] what hotmail does to it after that, you will have to ask them [00:47] Then why i recieve the reply and not the send ? [00:47] likely, you just followed that howto guide, and your mailserver isn't setup correctly, dns entries setup ptr, ... [00:48] Same thing on gmail etc. [00:48] are you claiming that hotmail treats all email the same? [00:48] surely not [00:48] they do use spam filters [00:48] I don't think hotmail, tempemails, gmail, yahoo treat their emails all the same way [00:48] the reply email LOOKS completely different [00:48] and i can't send to nobody [00:48] it has a valid hotmail id that references a hotmail email [00:49] what is your servers ip? [00:49] It's a digital ocean server , 178.62.222.144 that's the ip. [00:50] why does it not have a ptr entry? [00:50] mailservers are required to have a ptr [00:50] its a temporary server. Does it need the ptr entry ? [00:50] I thought it can work without it. [00:50] you want to send mail? [00:50] you need a working server [00:50] no ptr == not a working server, for email [00:51] hopefully, you also set a proper helo name, and that works in dns, and matchs your non-existing ptr entry [00:51] and you setup spf and dkim and dmarc entries [00:51] and you do dkim sign every email [00:52] no one has to accept your email [00:52] it's about trust [00:52] hotmail and gmail clearly are seeing all this stuff done wrong, and doesn't trust you [00:52] I was going to do these stuff on the actuall server. Meh i guess i need to set them up again. [00:52] but they are making an exception for replies, cause then the hotmail/gmail user initiated that email [00:52] not you [00:53] Ok i will setup everything then === Lcawte is now known as Lcawte|Away === zz_DenBeiren is now known as DenBeiren === micahg_ is now known as micahg === markthomas|away is now known as markthomas === markthomas is now known as markthomas|away [06:24] Good morning, === kickinz1|afk is now known as kickinz1 === kickinz1 is now known as kickinz1|afk === kickinz1|afk is now known as kickinz1 === Lcawte|Away is now known as Lcawte === Lcawte is now known as Lcawte|Away === Lcawte|Away is now known as Lcawte === Lcawte is now known as Lcawte|Away === deegee is now known as drussell [11:07] Is anyone aware of a working fix for the isc-dhcp-server bug/issue with the permissions of the lease files? [11:07] https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/1186662 === Lcawte|Away is now known as Lcawte === kickinz1 is now known as kickinz1|afk === Lcawte is now known as Lcawte|Away === Lcawte|Away is now known as Lcawte === Lcawte is now known as Lcawte|Away === mlocher is now known as Guest93449 [13:47] Hello! [13:47] Someone knows dovecot on Ubuntu well? I want to use both system accounts and virtual mail box on my mail server although I won't use any on the global net. [13:54] dovecot dies when I uncommented #!include auth-sql.conf.ext ... [14:15] My (IPv6) config file @ /etc/sysctl.d/ won't persist after reboot. The config works on a running system with "sysctl --system" though. Is there some kind of race condition that overwrites /etc/sysctl.d network setting while booting? [14:15] correction: the file persists, but not the settings [14:17] Madkiss, around? wanted to checkin with you re pacemaker corosync stack for vivid (and Debian?) [14:17] germanstudent: Pastebin your sysctl file. [14:20] jpds, http://pastebin.com/fUbkuw70 <- saved as 60-ipv6-disable.conf in /etc/sysctl.d [14:21] germanstudent: It's 2015, why are you disabling IPv6? [14:24] jpds, because openvpn will only route my IPv4 address and my IPv6 is still public. I can't find a workaround without disabling IPv6 altogether [14:25] germanstudent: 'is still public?' [14:25] germanstudent: Can't you just use ip6tables to block off the ports? [14:28] jpds, still public means some services (like netflix e.g.) will see my provider assigned IPv6 and geo locate to Germany, though I'm connected through an US OpenVPN server. [14:29] jpds, this is all so complicated. :/ Why doesn't openvpn route all traffic through the desired server by default *sigh* But I might have to visit another channel for this :) [14:29] if your vpn service doesn't offer ipv6, that is fail [14:30] openvpn routes whatever you configure it to route [14:30] oviously since your vpn provider doesn't support ipv6, they don't *request* ipv6 is routed over it [14:31] it would be the same doing anything else, like ipsec, anyconnect, ... [14:31] germanstudent: is this an old version of openvpn? I beleive I've seen openvpn work well with 14.04 [14:33] patdk-wk, it is a rented VPN with IPv6 support (with root access). But why isn't it a default behaviour to hide local IPv6 address to the public, even if you specify an IPv4 to connect to? [14:33] RoyK it's the current one I guess 2.3.2 [14:33] germanstudent, heh? openvpn isn't suppose to default that [14:33] germanstudent: which ubuntu version? [14:34] that is a misconfigure of your vpn service [14:34] 14.04 [14:34] or if your side openvpn config [14:35] patdk-wk, a VPN service I use has the same misconfiguration them Maybe my dual stack internet access is a factor in this too [14:35] I have been using openvpn with ipv4 and ipv6 over an ipv4 ip for the last 5 years without any problems [14:35] germanstudent: is this native IPv6? [14:35] but openvpn was not made to *hide my ip* [14:36] RoyK, yes. But carrier grade NAT for IPv4 [14:36] it was made to do a vpn, so attempting to hide your ip, is out of scope, and needs additional work, exepcially when you have several ip's [14:36] if this vpn service supports ipv6, I would wonder why your not using it [14:37] patdk-wk, well, but it was made to connect to a network and communicate to that network solely, right? :/ [14:37] no [14:37] it was made to protect data from point A to B [14:37] communicate solely or not, is optional [14:38] normally defined as, split horizon [14:38] patdk-wk, hm. thanks for your help. I guess I have to write a forum post or something. No IPv6 setting I tried seem to work [14:38] What's weird is that this doesn't happen with Mac or Windows. [14:41] germanstudent: that's strange indeed [14:41] is it a dns issue? [14:42] maybe the dns server over the vpn doesn't do ipv6? possible maybe [14:42] and ubuntu keeps falling back to the local dns [14:42] patdk-wk, I have to do some more tests, before I can say more. But I entered googles dns in the openvpn config [14:42] germanstudent: do you have ipv6 dns servers in resolv.conf? [14:43] RoyK, no, IPv4 [14:43] germanstudent: add v6 servers, then [14:43] Okay, thank you [14:44] 2001:4860:4860::8888 and 2001:4860:4860::8844 if you're using the standard google dns servers [14:44] Will try === Lcawte|Away is now known as Lcawte === kickinz1|afk is now known as kickinz1 === zz_DenBeiren is now known as DenBeiren === mlocher_ is now known as mlocher [16:55] Hi, I have problem of language right to left, here is link which show some help, but as a newbie I am not able to understand, If someone can help where to write that coding which link shows. here is link http://mpcabd.igeex.biz/python-arabic-text-reshaper/ === markthomas|away is now known as markthomas === adam_g_out is now known as adam_g [17:38] Hi, I have problem of language right to left on ubtuntu-server , here is link which show some help, but as a newbie I am not able to understand, If someone can help where to write that code or how to follow, the link shows. link http://mpcabd.igeex.biz/python-arabic-text-reshaper/ [17:38] Someone can help me? I tried to install a mail server based on this page: https://www.exratione.com/2012/05/a-mailserver-on-ubuntu-1204-postfix-dovecot-mysql/ I want to use both my system account, different from that. And I got this result: http://pastebin.ca/2947074 [17:39] What can I do for solving it? [17:53] Emmanuel_Chanel: check demsg for more segvs; you may have bad memory [18:32] Emmanuel_Chanel: So you are using 12.04? [18:36] No... 14.04 now... [18:36] But not understanding the mail server well, I feel that tutorial very good when I installed it on Ubuntu 12.04. [18:39] Emmanuel_Chanel: Which doesnt mean it works on 14.04. [18:40] Right... [18:41] Emmanuel_Chanel: Try this one first: https://www.exratione.com/2014/05/a-mailserver-on-ubuntu-1404-postfix-dovecot-mysql/ [18:43] Oh, nice! I didn't know that. I try. [18:46] Thank you very much authough I haven't got a result yet. [19:16] hallyn_: ping [19:20] Hey folks, I'm seeing this in my `dmesg` `[233478.288816] TCP: TCP: Possible SYN flooding on port 8080. Dropping request. Check SNMP counters.`; Can I disable the check for SYN Flooding on port 8080? [19:21] hmm i dont see syn_flood in my iptables --list [19:21] why would there be? [19:22] i thought iptables would be handling the above message regarding syn flooding [19:22] why? [19:22] don't see anything in that message that talks about iptables [19:22] ok it's a kernel option then? [19:22] the question is, why do you ahve a synflood? [19:23] are you getting dos? [19:23] no [19:23] do you just have a crapload of ligit traffic [19:23] or is your application gone completely nuts [19:23] it's just a bad client side app i need to get fixed, but i need to disable that synflooding check for the time being [19:23] ^^ complete nuts [19:23] a javascript websocket client connecting to the websocket server [19:23] use sysctl and disable it though [19:23] but that is likely to have all kinds of fun issues [19:23] do youknow which options? i just did syctl-a |grep syn to gleam the list [19:23] oh i know, it's temporary [19:24] net.ipv4.tcp_syncookies likely is what you want [19:24] but this doesn't *fix* anything [19:24] 10-4 [19:24] it just means the kernel won't start attempting to figure out ligit from non-ligit requests [19:25] the problem is, your app isn't accepting connections fast enough [19:25] overflowing the syn_backlog [19:25] right, we're trying to diagnose that now :) [19:25] yeah, all my received queues in netstat are 503 too [19:25] therefor making the kernel not know what to do, except drop connections [19:25] w/120+ connections from 1 client for a websocket javascript client [19:25] so we know it's borked [19:25] increasing your backlog would help, kindof :) [19:25] i dont think it's being hit yet, it's 512 [19:26] netstat -an |grep -iest |wc -l , is less than 200 [19:26] well, the kernel settings ONLY set the max [19:26] the application sets what it wants [19:26] ah [19:26] normally they are around like 10/50/80/... [19:26] not normally very large unless you override [19:26] let me see., this is a puma app [19:29] mgagne: hi [19:29] hallyn_: hi [19:29] hallyn_: I got the patches, can you guide me into proposing them? [19:29] hallyn_: https://gist.github.com/mgagne/95046681c59e4e20989c [19:32] mgagne: now this is for in cloud archive right? [19:32] mgagne: download the source code for the package, patch the code, build it and reinstall the package from the one you built. it's not really as straight forward as downloading a patched windows driver :P [19:32] hello jamespage [19:32] hallyn_: UCA is sub-product of Ubuntu itself, the packages themselves come from Ubuntu release like 13.10, 14.04, etc. [19:33] jamespage: how can I help? [19:33] hallyn_: they might have UCA specific fixes but IMO, this one isn't specific to UCA [19:33] mgagne: right, but we are being very strict about what upgrades we support (bc otherwise it becomes crazy-fragile), so i'm wondering whether this change should be specific to cloud archive [19:33] zul: jamespage: ^ around? [19:33] mgagne: th equestion is do we support upgrading from UCA to standard ubuntu archive of newer release [19:33] hallyn_: yeah [19:33] hallyn_: right, I don't know the specific of the policies [19:34] mgagne: anyway, thank you for the patch; we definately will fix it somehow that fixes it for UCA, [19:34] i'm only trying to find the right place [19:34] mgagne: there's a bug# for this right? [19:34] hallyn_: 1425619 [19:34] hallyn_: AFAIK, there is no UCA for juno/icehouse [19:35] hallyn_: because trusty ships with icehouse already [19:37] mgagne: so what are you trying to upgrade from/to? (release+archive) [19:37] this is all greek to me so getting my bearings and hoping zul is watching [19:38] mgagne: https://wiki.ubuntu.com/ServerTeam/CloudArchive [19:38] hallyn_: I'm running uca/precise/icehouse. We have nodes running QEMU 1.5 from uca/precise/havana (for various reasons). [19:39] sand you're upgrading between those two? [19:39] hallyn_: UCA is just a backport of packages from a Ubuntu release supporting a specific OpenStack version. [19:39] hallyn_: so for Havava, packages were backported from 13.10 to 12.04 into UCA [19:41] right, 13.10 is no longer supported ,and migration in archive was only ever supported from p->q, q->r, r->s, not from p->s [19:41] hallyn_: to make the migration work, the patch needs to go in QEMU 2.0 (destination), you don't need to patch the source of the migration [19:41] so i think we want the fix straight into the uca [19:42] right, but it's hard to SRU something for something that is not supported in archive, given the strict SRU restrictions. [19:42] i'll talk to jamespage when he's around, and handle it somehow [19:42] QEMU 2.0 is part of 14.04. someone running saucy cannot upgrade to trusty unless trusty is patched [19:42] (notes taken) [19:42] hallyn_, mgagne is correct - for icehouse everything is just in trusty [19:43] jamespage: yeah but you can add a delta [19:43] hallyn_, where? [19:43] in icehouse [19:43] but that's just 14.04 [19:43] no where else to make a delta [19:43] jamespage: ok, do you mind filling in SRU justfication for bug 1425619 ? [19:44] jamespage: thing is when we discussed the p->t migration (with infinity and others) it was almost decided it shoudn't be supported at all; it was then decided we would do very lmited support [19:44] but really the patch looks good, [19:44] hallyn_, well officially we support precise+icehouse cloud archive to trusty migration [19:45] hallyn_: p->t support was already added with a very similar patch [19:45] hallyn_: see related bug https://bugs.launchpad.net/bugs/1291321 [19:45] no wait, [19:45] I'll be around in about 1.5 hrs [19:45] i'm aware, i pulled that patch :) [19:46] hallyn_: thanks for that work bth =) [19:46] btw* [19:47] oh i didn't do the patch myself :) ok, i think your patch looks good; i'll try to sru it [19:47] thanks mgagne [19:47] thanks! [19:47] I guess I don't need to mention that I tested it and it works =) [19:48] :) but i'm glad you did [19:48] * hallyn_ out a bit, biab [19:52] bekks: Same error occurred again... [19:53] Emmanuel_Chanel: So take a look at the dovecot logs and config, for investigating its crashes. === bilde2910|away is now known as bilde2910 === bilde2910 is now known as bilde2910|away [20:58] Madkiss, hey - thanks for the pointer to your HA ppa - most useful [20:59] it would have been nice to grab those from debian too :) [21:02] jamespage: yw [21:03] Madkiss, are you still maintaining corosync/pacemaker in Debian? === zz_DenBeiren is now known as DenBeiren [21:07] jamespage: well. sort of. [21:28] zul, are you still ontop of that eventlet version bump? [21:28] yeah im on it === Lcawte is now known as Lcawte|Away