[00:01] anyone here familiar with postfix? === stiv2k_ is now known as stiv2k === Lcawte is now known as Lcawte|Away [00:21] acmehandel: yep [00:23] dork_ well on one of my servers I am not getting an 'cannog assign requests address' from alt.gmail-smtp.l.google.com [00:23] I was having a problem earlier today where this server in question started sending out many many many messages to my email account. [00:24] I have this sinking feeling that google has blocked this servers IP address now. [00:24] before I was able to figure out how to fix this. [00:24] what do you mean you get that from alt.gmail-smtp.l.google.com [00:24] when I tail -100f /var/log/mail.lgo [00:24] when I tail -100f /var/log/mail.log [00:24] that is the message I get. [00:25] can you pastebin all the relevant lines of the specific message [00:25] or [00:25] you can check your ip's reputation on mxtoolbox [00:25] is that a .com? [00:25] sounds like someone used you as a reloy or something? [00:25] s/reloy/relay [00:25] http://mxtoolbox.com/ [00:25] its more likely that I was careless in using postfix. [00:26] as I mentioned earlier. The server started sending out many many many messages for nearly an hour before I noticed it arriving in my spam box [00:26] which is was not. [00:27] yeah but where did the messages come from [00:27] you're saying it looped the same legit piece of mail [00:27] ? [00:27] no. not the same legit. But new ones. They were fail2ban, psad and logwatch messages [00:27] ohhhh [00:27] which unforunately I had set up incorrectly [00:27] how many were in the queue [00:27] ..apparently [00:27] thousands [00:28] there's a specific limit especially for free gmail accounts [00:28] just checked mxtoolbox says no ptr records exist [00:28] so if you fixed a problem and then bounced postfix while the queue was full then chances are yeah you could be rate limited [00:28] so I guess I'm clear for now. [00:28] is this just a mta that accepts mail to localhost only? [00:28] rate limited does not scare me...at least I dont think it should. right? I just dont want to be black flagged [00:29] or banned or whatever [00:29] no ptr means you have no reverse dns, but the reputation part you have to click the drop down menu at mxtoolbox [00:29] yeah it just means you won't be able to send to them for a little bit [00:30] I'm actually on two black lists now. SORBS DUHL and Spamhuas Zen [00:30] wait no sorry....something doesnt seem right [00:30] what kind of postfix config is it [00:31] local only? is it an open relay? [00:31] satellite/relay? [00:31] er.....um....dunno [00:31] how can I check [00:31] one installled automatically with psad [00:31] but not this server [00:32] if it's self inflicted it should be fine, but you should make sure it isn't a misconfigured server that is being abused and getting you blacklisted [00:32] if you want you can message me the IP and i'll check === Joel_ is now known as Guest24021 [01:39] what is the smartest way to disable a service and prevent it from restarting automatically? i'm going through a variety of google searches and they dont seem to have any specific answer [01:43] acmehandel: it depends on the init system [01:44] its 14.04 I check services using service --status-all if that helps [01:45] systemctl disable ; echo manual >> /etc/init/.overrride; update-rc.d disable [01:45] that's Systemd, Upstart, and SysV-init respectively [01:46] the echo manual >> override one doesnt work. I just tried it. rebooted and the service came back [01:46] update-rc.d throws a 'api not stable and may change error' which is not very reassuring [01:47] acmehandel: it depends on which init system script the service uses [01:47] rm the service file always works :) [01:47] what if I just change the permissions to 000 on the service file? [01:48] likely wont matter [01:48] as it is normally run as root [01:48] wont matter in what sense? [01:48] that it wont have any affect? [01:48] yep [01:48] it would for sysv though [01:49] due to lack of execut [01:49] but not systemd or upstart [01:49] just tried the update-rc.d disable method and that did the trick. but still not feeling assured that it wont cause a problem later....whenever that later may be [04:14] I have two nics on conection to atnt_t1 line second to local wireless uplink privider. On rare ocations the wireless provider will go down (usually for an hour) but we need the t1 to act as a backup internet connection. what is the best way to do this . I have an ubuntu 14.04 doing all the routing. [04:15] ive looked at iproute2 but i dont see a fall_back connection config for that..only a secondary gateway . [04:53] i think i found something to work it out === DonRichie2 is now known as DonRichie === jgrimm is now known as jgrimm-away === cpaelzer_ is now known as cpaelzer === InfoTest1 is now known as InfoTest === Lcawte|Away is now known as Lcawte [10:27] bug 1512908 [10:27] bug 1512908 in nova-compute (Juju Charms Collection) "Inability to add nova-compute host to os-aggregate" [High,New] https://launchpad.net/bugs/1512908 === pdostal_ is now known as pdostal === InfoTest1 is now known as InfoTest [12:32] morning [13:40] im getting "unable to resolve host" whenever i use SUDO [14:04] im getting "unable to resolve host" whenever i use SUDO [14:31] Darkyyy: edit /etc/hosts and make sure your hostname is defined somewhere in there, assigned an IP in the localhost range (127.0.0.1-127.0.3.255 preferably being one of the IPs you use) [14:31] Darkyyy: assuming the 'unable to resolve host' hostname referenced is the local box's hostname [14:35] teward:thanks === csdc is now known as adv_ === wvvrw is now known as adv_ === Lcawte is now known as Lcawte|Away === dork_ is now known as dork === Lcawte|Away is now known as Lcawte [19:14] I'm getting a relay access denied message from postfix. I'm new to postfix. What's the deal? I can send internally, but as soon as I try to hit gmail I get rejected. Can somebody tell me how to change my main.cf to allow me hit gmail? [19:16] impermanence: do you mean to send to GMail addresses from your postfix (i.e. your server sends a mail message to GMail) [19:17] @teward yep. [19:17] Anonymous relay is disabled by default, because otherwise it would enable a bunch of spam by default [19:18] You need to configure who is allowed to relay, either by using g user authentication or configuring allowed relay networks [19:18] @qman_ are you speaking to me? [19:19] That said, your messages will still be rejected by gmail unless you have SPF at a minimum [19:19] impermanence: yes [19:19] @qman_ when I run the same config on a box not in the cloud they reach domains more weird than gmail. [19:20] @qman_ I'm pretty sure it has something to do with poor configs in my main.cf [19:21] impermanence: are you the guy that was here yesterday [19:21] impermanence: as I said, you either need user authentication, or to configure allowed relay networks, and gmail's anti-spam will block you unless you take considerable steps to legitimize your mail [19:21] @dork unfortunately. [19:21] hehe [19:22] you're still not able to send to google servers? [19:22] @dork not from my cloud box. But my local box that works and the cloud box both point to the same mail server. [19:23] @dork and locally I can send to gmail, whatever, just fine. [19:23] @dork it isn't a firewall thing. [19:23] qman__: since you know more about this, I have multiple domains that relay through a postfix system, set up to take mail for something@tld1, something@tld2, somethingelse@tld3, ... and send to my Google Apps email address. All those forwards there get put into Spam by default, any way to make Google recognize it as 'legitimate'? [19:24] impermanence: if you're using a hosted server, your host may not allow you to send mail directly; go daddy is set up like this and you must use their mail relay [19:24] impermanence: can you pastebin the relay errors being generated in /var/log/mail.log [19:24] yeah he's on some off-name vps provider [19:25] @qman_ aws... [19:25] teward: need to make sure you're not on any RBLs, set up SPF, and I recommend setting up DKIM [19:25] he had a built up queue from psad/fail2ban/etc that probably all got flushed out but he also has a bad reputation on the known DNSBLs and also has no uniform forward and PTR records [19:25] teward: you also need valid PTR records [19:26] and he also didn't give me the ip to check to see if ufw was set up properly, because his main.cf was set to listen on all interfaces [19:26] so there's also that [19:26] Ah [19:26] qman__: got a guide for setting up RBLs, SPF, DKIM, and valid PTR records given that the mail server's domain is mail.someotherdomain.xyz and all MX records point to that for my domains/ [19:26] give me a sec to pastebin my main.cf I just need to obfuscate company stuff [19:26] not RBLs [19:27] qman__: the server's not on any RBLs, that's the first one i checked [19:27] good [19:27] i'm guessing his domain doesn't have proper SPF records either [19:27] SPF is set up on your domain's DNS server, PTR is set up on your ISP's DNS server [19:27] DKIM is a bit more complex [19:27] and not strictly required, but helpful [19:27] it all adds up [19:27] basically [19:28] but basically all the dinosaur RFCs need to be observed first [19:28] https://en.wikipedia.org/wiki/Sender_Policy_Framework https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail [19:29] @dork relay error on pastebin: pastebin.com/zaiyks63 [19:29] @dork main.cf coming up (it's probably horrible forewarning) [19:29] did you change it since yesterday [19:30] lol [19:30] i'm not debugging your python hello world [19:30] your code is not forging the required data for the parcel [19:30] insanity [19:30] * dork walks away [19:30] qman__: that doesn't answer my question with regards to the domains being served - does the PTR have to point to *each* domain's mail.domain.tld, or if the MX record for my domain is mail.somethingelse.xyz, do I just need to make sure the PTR is mail.somethingelse.xyz ? [19:31] qman__: a guide for setting up SPF in this case would be nice, though [19:31] teward: there is a galaxy of examples of spf records and what they do [19:31] teward: you should read the RFCs [19:32] dork: none that I've gotten to work - the pointbeing the mail server has a different domain, and I'm not sure how to add/include that data in the SPF in a way it works/operates correctly [19:32] teward: the PTR has to resolve to what your mail sever tells people it is, when they connect [19:32] not required for every domain it hosts [19:32] ok [19:32] and that has to be a valid, real domain [19:32] right [19:32] all it does it uses a dns record to identify what servers are qualified to send legitimate e-mail on behalf of a domain [19:32] qman__: that applies to both the v4 and v6? [19:32] yes [19:32] OK [19:33] i'll take those steps. any way to verify I set up SPF right though, easily? (It helps I control the DNS servers for my sites, instantupdates for the win) [19:33] @dork the py code is fine. works beautifully with internal addresses. I wouldn't do you like that pal! [19:33] teward: use dig in a terminal and look at various examples by querying domains [19:33] like dig txt yahoo.com [19:33] @dork anyway forget that. look at my main.cf which I'm sure is terrible. [19:34] impermanence: the parcel you're creating isn't respecting RFC standards [19:34] @dork pastebin.com/8m9zhKdN [19:34] and partly because your main.cf isn't configured properly [19:34] @dork I'm sure not. [19:34] but if your script were creating a MIME compliant parcel it wouldn't even matter [19:35] and if your postfix config were properly configured it would be rewriting the headers properly [19:36] unfortunately i need to leave to go back to work [19:36] @dork np, pal. I'll work it out. I always do. Just wanted to consult the experts first. have a goodin' [20:35] hello [20:35] how i edit my hostname [20:37] !hostname [20:37] Use hostname to set the hostname, or to do it permanently: edit /etc/hosts to include BOTH the old and new hostname and then change /etc/hostname to the new one. WARNING! Make sure that your current hostname and /etc/hosts match, otherwise sudo may not work properly. [20:38] yeah i got that part [20:38] what do i exactly fill in [20:40] i can see my local ip and some temporary hostname my hoster put in [20:42] Darkyyy: copy that line, but replace the temp name with your new hostname [20:42] which is ? [20:42] external ip maybe ? [20:42] Darkyyy: I don't know, what do you want your new hostname to me? [20:42] er, be? [20:42] pici [20:42] ;) [20:43] it can be your fqdn if you want., so for example my /etc/hosts has: 66.228.45.177 nullcortex.com nullcortex and /etc/hostname has just nullcortex.com [22:56] What RBLs would one recommend for email spam blocking currently? Right now I'm just using zen.spamhaus.org