Re: Possible sendmail misconfiguration to deliver to cyrus

2006-12-04 Thread Dave McCracken
On Monday 04 December 2006 10:31 am, Todd Lyons wrote:
 As I see it, a more sendmailish solution would be to use a little
 sendmail-fu and make it so that sendmail checks for local user at smtp
 time, but delivers to cyrus at deliver time.  I don't have such fu, but
 I see now as a good enough time to start studying up on it as well as
 exploring the above option.

I also had that problem since most of the spam I was getting to my domain was 
to nonexistent users.  I discovered sendmail has a local mailer flag that 
indicates whether sendmail should check the recipient against local users at 
smtp time.  The flag is 'w'.  My sendmail.mc has the following line:

define(`CYRUSV2_MAILER_FLAGS', `A@/:|mw')dnl

where cyrusv2.m4 has the line:

_DEFIFNOT(`CYRUSV2_MAILER_FLAGS', `A@/:|m')

This solved my problem but it requires that I have a local machine account for 
each cyrus user.  As a small domain that's not a problem for me, but others 
might find it too restrictive.

Dave McCracken

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: 5.1.1 User unknown bounces

2006-09-09 Thread Dave McCracken
On Saturday 09 September 2006 9:19 am, Kjetil Torgrim Homme wrote:
 On Fri, 2006-09-08 at 10:45 -0700, Andrew Morgan wrote:
  Otherwise, just let Sendmail queue the message and attempt to deliver the
  message to Cyrus.  If the user does not exist, Cyrus will let Sendmail
  know during the LMTP handshake.

 DO NOT DO THIS!  if your Sendmail accepts _all_ possible local parts
 during the SMTP transaction, you will be sending out lots of bogus
 bounces to addresses abused (joe-jobbed) as senders of spam.

I second this emphatically.  I discovered I was sending out thousands of 
bounce messages per day with this setup.

My solution was to go into my sendmail.mc and define CYRUSV2_MAILER_FLAGS  
to be A@/:|mw.  The default does not have the w flag.  This flag tells 
sendmail to validate the user id on the local machine when it queues the mail 
for this mailer.  Since I have a small set of valid users it was easy for me 
to define them all in /etc/passwd.  I'd guess a larger site would want to set 
up something more complex.

The key point is that sendmail still has the connection to the sender open 
when it selects the mailer.  If it detects an error there it responds with an 
error status to the sending mailer.  If no error is detected, sendmail will 
close the connection before actually invoking the mailer.  At this point its 
only recourse is to send bounce mail.

Dave McCracken

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: sieveshell

2005-03-15 Thread Dave McCracken
--On Tuesday, March 15, 2005 17:48:32 -0700 Craig White 
[EMAIL PROTECTED] wrote:

I want to insert sieve scripts for users via sieveshell but I can't seem
to get that done...
sieveshell -u Alec localhost
will try to authenticate as root, not as Alec and I can't su to Alec
since he doesn't have a usable shell. Is there any other way?
Use -a unstead of -u.  The correct syntax would be:
sieveshell -a Alex localhost
Dave McCracken
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: [STATUS] NNTP support (10/17/02)

2002-10-18 Thread Dave McCracken

--On Friday, October 18, 2002 10:05:10 -0400 Ken Murchison [EMAIL PROTECTED]
wrote:

 Right now, I'm using 'ipurge', but I have an 'expirenews' tool to purge
 entries from netnews.db which I plan on adding the article delete code
 to.

Have you gotten ipurge to be reliable?  I gave up on it because it kept
deleting mail that didn't match its criteria, ie I specified greater than
14 days and it often deleted mail that was less than a day old.

And yes, I did report this behavior on the list a couple of times, but no
one ever responded.

Dave McCracken

==
Dave McCracken  IBM Linux Base Kernel Team  1-512-838-3059
[EMAIL PROTECTED]T/L   678-3059




Re: [STATUS] NNTP support (10/17/02)

2002-10-18 Thread Dave McCracken

--On Friday, October 18, 2002 12:58:41 -0400 Ken Murchison [EMAIL PROTECTED]
wrote:

 Do you remember which version of Cyrus?  I fixed a signed/unsigned
 problem with ipurge back in 2.1.6 which was causing behavior similar to
 what you describe.

I saw it on 2.0.16.  I'll try it again when I upgrade.

Dave McCracken

==
Dave McCracken  IBM Linux Base Kernel Team  1-512-838-3059
[EMAIL PROTECTED]T/L   678-3059




Re: RECENT/SEEN flags

2002-02-27 Thread Dave McCracken


--On Wednesday, February 27, 2002 11:14:36 -0500 Cyrus Daboo
[EMAIL PROTECTED] wrote:

 Yes, one connection is used to do periodic STATUS polls of all mailboxes
 you have marked for new mail checking. Then a new connection is used when
 you actually open a mailbox. When a mailbox is open, the checking is done
 via that connection using NOOPs. Based on the brief description that Larry
 had provided I'm guessing the caching happens on for the connection where
 the mailbox is SELECT'ed - i.e. the one where the mailbox is opened by the
 user - and not the STATUS connection. The code is the definitive source
 for this...

I get the same behavior.  It's not just on the last folder I opened.  I
will typically go through half a dozen folders that have unread mail, and
all of them will then have their unseen counts reappear after they're
closed.  Opening each of them a second time will clear it.

Dave McCracken

==
Dave McCracken  IBM Linux Base Kernel Team  1-512-838-3059
[EMAIL PROTECTED]T/L   678-3059




RE: RFC: Sieving mail delivered directly to shared/public folders

2001-11-09 Thread Dave McCracken


--On Friday, November 09, 2001 08:10:35 + Ian Castle
[EMAIL PROTECTED] wrote:

 So rather than thinking that this script applies to this user I am
 suggesting that we think this script applies to this folder. Obviously,
 if the folder is user.fred then the statements are synonymous. However,
 we can use the second way to, obviously, refer to more than just folders
 of the category user.something.

I think this is a great idea.

I have a question, though.  If a sieve script does a 'fileinto' to redirect
mail to another folder, does the sieve script for that folder get run?
Intuitively I think it should, but what are the implications?

Dave McCracken

==
Dave McCracken  IBM Linux Base Kernel Team  1-512-838-3059
[EMAIL PROTECTED]T/L   678-3059




Problem with ipurge

2001-10-28 Thread Dave McCracken


In my mail setup I re-route my high volume mailing lists to separate
folders, then rely on ipurge to prune them.  I upgraded to Cyrus imap
2.0.16 awhile back, and over time noticed that some mail appears to be
getting deleted before the 2 week expiration I specified.  In fact, I've
seen a folder with over 100 unread messages that arrived overnight get
reduced to 50 unread messages.

I'm guessing this means something in ipurge or the server is getting the
timestamp wrong for the messages.  Has anyone else seen this?

I'm running Debian unstable with kernel 2.4.9, in case this matters.

Dave McCracken

==
Dave McCracken  IBM Linux Base Kernel Team  1-512-838-3059
[EMAIL PROTECTED]T/L   678-3059