[xmail] SMTP Authentication for SMTP Relay in mailproc.tab

2007-10-03 Thread John Kielkopf
Any way to get Xmail to use authentication when relaying mail with 
smtprelay in mailproc.tab?

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Default mailer threads

2007-05-24 Thread John Kielkopf
What's the default number of mailer threads in Xmail 1.22 and 1.24?  
Didn't see that in the documentation.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: 1.25-pre06 ...

2007-04-18 Thread John Kielkopf

  so it is easier 
 that temporary network problems end up being hidden by its caching.



 - Davide

   
But why should a temporary network problem cause any issue in the first 
place, unless that problem is a bad DNS entry? Network connectivity 
issues during a DNS query should at most cause a delay in sending the 
mail, but the mail should eventually get through without user intervention.

I'm still concerned that your fall back to A after MX timeout could 
cause a permanent delivery failure (trying to send to the host pointed 
to by the A record, potentially hitting an SMTP server that would 
refuse the delivery) when the failure should only be temporary (can't 
get any results from the domain's DNS servers due to a network failure 
somewhere while trying to lookup the MX record).  Admittedly, this would 
be a _very_ small window of opportunity, but still possible if Xmail 
handles this as you suggest.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: 1.25-pre06 ...

2007-04-17 Thread John Kielkopf
Davide Libenzi wrote:
 On Tue, 17 Apr 2007, John Kielkopf wrote:

   
 I'm probably missing something here, but falling back to the A record 
 after timeouts would seem to be the wrong course of action.  Couldn't a 
 temporary connectivity issue caused Xmail to incorrectly fall-back to an 
 A record for a domain, and worse yet, cache that A record for later use?
 

 XMail does not cache A record attempts. Next one would still try to 
 re-fetch MX records.

   
Still, you would think a timeout on a MX record lookup (from every 
domain DNS server) should also result in a time-out when looking up an A 
record.  If you can get an A record without a timeout, then you should 
be able to at least get a nodata response on MX lookup.  Good that Xmail 
does not cache the A record, but falling back to an A record after 
timeout on MX lookup still seems like a bad idea.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: 1.25-pre06 ...

2007-04-17 Thread John Kielkopf
Davide Libenzi wrote:
 On Tue, 17 Apr 2007, CLEMENT Francis wrote:

   
 Possible it's a dns server problem
 Who does xmail response on a timeout after dns query ? Who many retries =
 ?
 And final decision on dns timeout ? A record tries ?
 I ask this because, I noticed that dns timeouts are frequent with some
 french isp especially on udp (qos ? prioritization ?), and an immediate
 retry generally get the response.
 

 A timeout (inside the DNS retry policy rule) from every domain DNS server 
 is treated as failure to get the MX, hence the A record is tried.


 - Davide

   
I'm probably missing something here, but falling back to the A record 
after timeouts would seem to be the wrong course of action.  Couldn't a 
temporary connectivity issue caused Xmail to incorrectly fall-back to an 
A record for a domain, and worse yet, cache that A record for later use?

- John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Receiving Mail multiple times

2007-03-22 Thread John Kielkopf
=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;

b=d3jPSXkuW9YAhv9rvIAaebbbYM1lfxkhpr1FAOtQ2peHwo7f6BSCcC2TtOaSeSQ0/amAxKrGY5Hmjs/vKdUbVzQcxAJE3OSuDPHTA1c18Jii3GUcvapKDItuOQH6Vlrv8p3qFAIGzALEwYzbjLh8H28re1unpYrleARYNJbaBy0=
Received: by 10.67.99.1 with SMTP id b1mr3700633ugm.1174512266962;
Wed, 21 Mar 2007 14:24:26 -0700 (PDT)
Received: by 10.66.217.7 with HTTP; Wed, 21 Mar 2007 14:24:26 -0700 (PDT)
Message-ID: [EMAIL PROTECTED]
Date: Wed, 21 Mar 2007 15:24:26 -0600
From: Aaron Fransen [EMAIL PROTECTED]
To: xmail@xmailserver.org
Subject: [xmail] Re: Receiving Mail multiple times
In-Reply-To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
References: [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
X-ecartis-version: Ecartis v1.0.0
Sender: [EMAIL PROTECTED]
Errors-to: [EMAIL PROTECTED]
X-original-sender: [EMAIL PROTECTED]
Precedence: bulk
Reply-to: xmail@xmailserver.org
X-list: xmail



Ivo Smits wrote:
 Maybe it has something to do with *some* specific sender/receiver client 
 software?
 I have received all your e-mails only once!
 Maybe your mail client adds some strange header that confuses the mail 
 client of your mailserver-users and John Kielkopf?
 I'm using Microsoft Outlook Express 6.

 I recommend to:
 1. Find out when it happens (does it depend on the receiver/sender 
 address/software/IP/...)
 2. Use a packet monitor (for example Ethereal, which is now called 
 WireShark)
 3. Try to send a message that will arrive twice (using what you found in 
 step 1)

 Ivo

 - Original Message - 
 From: Aaron Fransen [EMAIL PROTECTED]
 To: xmail@xmailserver.org
 Sent: Thursday, March 22, 2007 1:42 PM
 Subject: [xmail] Re: Receiving Mail multiple times


   
 I sure didn't mean to send it 4 times, but it seems like the exact
 problem I'm talking about!

 I can see where the quit/delete sequence might be causing a problem so
 I'm going to rejigger the client app to see if that fixes the problem.

 The server is running on Windows 2003 (ugh) and there really isn't
 much else running to interfere with it (MySQL, Apache are the only
 other apps).

 Francis: You had mentioned you thought it might be connectivity,
 however the web client app and the XMail server are running on the
 same box...

 On 3/21/07, John Kielkopf john@webifi.com wrote:
 
 Davide can correct me if I'm wrong, but the POP3 server shouldn't delete
 the messages until after the QUIT command is sent.  Deleting the
 message after each retrieval only queues the message for deletion at 
 QUIT.
 If you're receiving the duplicates in the same POP3 session, then it
 rules out an early session termination as the cause.  Are you positive
 this is the case?  If so, how one single email message in a user's Xmail
 maildir can turn into duplicate messages in the same POP3 session is
 beyond me.

 What OS is your Xmail server running on? What other services are running
 on the server?  Have you tried an older Xmail version?

 Also, you sent this message the list 4 times.  Did you intend this?


 Aaron Fransen wrote:
   
 I've had the issue both with local clients and remote clients running
 over a very expensive MPLS network, and in all the scanning I've done
 I can't see any issues with connectivity.

 File locking? Hm, it's possible, however there's no AV software
 running on the server (not live, just batched once in a while and not
 when these problems are happening).

 In terms of the sequence of events, the mail client I wrote (I can't
 speak to how Outlook is having the same problem, but with my program I
 can!) it fetches each email individually then sends the command to the
 server to delete it, then processes the next message. Maybe I should
 do it the other way? Process them all THEN go back and delete them?

 The duplicates happen right away too, not during the next POP3
 session; that is, as soon as the user clicks Check Mail he/she'll
 get duplicates (or triplicates) of the incoming mail immediately
 without waiting for the next check.

 On 3/21/07, John Kielkopf john@webifi.com wrote:

 
 Things to check:
 1) Thoroughly check network connectivity to the mail server from the
 problem clients.

 2) Any possible file locking conflicts?  Is there anything running on
 the server, possibly antivirus software, that might be locking the 
 email
 in the server's mail directory?
 Thought of what could be happening here:
 a) Client retrieves all mail via pop3, marking them for deletion.
 b) Something on the mail server is still holding the files open 
 for
 read (on demand AV scanner maybe?)
 c) Client quits the pop3 session, and the messages marked for
 deletion are now supposed to be deleted
 d) Because one of the email messages is locked for read (see: b,
 above), Xmail

[xmail] Re: Receiving Mail multiple times

2007-03-21 Thread John Kielkopf
Things to check:
1) Thoroughly check network connectivity to the mail server from the 
problem clients.

2) Any possible file locking conflicts?  Is there anything running on 
the server, possibly antivirus software, that might be locking the email 
in the server's mail directory?
Thought of what could be happening here:
a) Client retrieves all mail via pop3, marking them for deletion.
b) Something on the mail server is still holding the files open for 
read (on demand AV scanner maybe?)
c) Client quits the pop3 session, and the messages marked for 
deletion are now supposed to be deleted
d) Because one of the email messages is locked for read (see: b, 
above), Xmail is unable to delete files, and gives up.
e) Mail has not been deleted, and will be re-downloaded on next pop3 
session.


Davide would be able to comment on the possibility of 2d happening on 
Xmail.  I have no idea if it could even happen, so I may be way off base 
here -- but short of a  network connectivity issue, I can think of 
nothing else at the moment.


Aaron Fransen wrote:
 For some folks they receive emails twice, for some it's three times,
 but not (that I've heard anyways) more than that.

 An example: Joe Smith comes back from holidays, and has 50 emails
 sitting there for him. He receives each and every one three times
 exactly, ending up with 150 new emails in his inbox.

 Jane Doe checks her email every morning, and most mornings ends up
 receiving two of every email.

 Note that it's not selective: If a user is going to have this happen,
 it's going to every single email they happen to be retrieving at the
 time. If it's not going to happen, it's not going to happen on ANY of
 the emails they are retrieving.

 Aaron


 On 3/21/07, Hal Dell [EMAIL PROTECTED] wrote:
   
 I've tracked this as much as I can and this is what I've found: At no time
   
 do the messages
 
 exist on the server twice...they are *only* received twice by the client.

 It does seem to happen to some people more than others, which leads me to
   
 believe
 
 it's a double-click the Send/Receive button issue, but when I test it
   
 the second request
 
 is rejected since the POP server only allows a single connection per
   
 individual.

 Are you sure they are *only* received the eMails twice? NOT more then that?

 Since, I'm coming into the middle of this eMail exchange in the -- I don't
 have
 all of the facts of your situation

 I had a problem like yours and was caused by the long time standing issues
 with
 mail clients on Windows due to the POP3 Tail issue - the symptoms that you
 state
 are nearly identical. David created a filter to not allow these messages in
 the queue.
 If you don't already have the filter installed I would highly recommend
 installing it.
 (Someone on this list may be able to tell the location to download the
 filter -- I
 don't see it listed on xmailserver.org -- it was mailed around at the time).

 POP3 Tail issue is caused by spam and other hacker attempts at DOS targeted
 at the eMail clients by  intentionally corrupting the normal double CR LF at
 the
 bottom of the eMail message byte stream.

 An eMail that is corrupted in this way causes the email client to never
 complete
 downloading the eMailbox the mailbox is never cleared and then you get
 your Emails over and over again. This is a safety mechanism in the client
 to prevent accidental erasure of eMail messages in the case of a dropped
 IP connection.

 I'm not sure this will help you... Let us know...


 Thanks,
 Hal Dell
 Managing Partner
 ePodWorks.net, Inc.
 PO Box 22
 Willow Grove, PA 19090
 +1-215-830-0662 (phone)
 +1-866-549-4652 (fax)
 Need Support send eMail to [EMAIL PROTECTED] !


 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]


 
 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]


   



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Receiving Mail multiple times

2007-03-21 Thread John Kielkopf
Strange - I received four copies from Davide's server, all delivered 
about 5 minutes apart, though the headers show that Davide's list server 
received all four from Arron's gmail account at exactly the same time, 
Wed, 21 Mar 2007 17:30:50 -0400.  Interesting.  Oh well, unrelated to 
Arron's issue anyway.

Ivo Smits wrote:
 - Original Message - 
 From: John Kielkopf john@webifi.com
 To: xmail@xmailserver.org
 Sent: Wednesday, March 21, 2007 11:41 PM
 Subject: [xmail] Re: Receiving Mail multiple times
   
 Also, you sent this message the list 4 times.  Did you intend this?
 

 I have received this message (I've had the issue both with local 
 clients...) only once.

 Ivo

   
 Aaron Fransen wrote:
 
 I've had the issue both with local clients and remote clients running
 over a very expensive MPLS network, and in all the scanning I've done
 I can't see any issues with connectivity.

 File locking? Hm, it's possible, however there's no AV software
 running on the server (not live, just batched once in a while and not
 when these problems are happening).

 In terms of the sequence of events, the mail client I wrote (I can't
 speak to how Outlook is having the same problem, but with my program I
 can!) it fetches each email individually then sends the command to the
 server to delete it, then processes the next message. Maybe I should
 do it the other way? Process them all THEN go back and delete them?

 The duplicates happen right away too, not during the next POP3
 session; that is, as soon as the user clicks Check Mail he/she'll
 get duplicates (or triplicates) of the incoming mail immediately
 without waiting for the next check.

 On 3/21/07, John Kielkopf john@webifi.com wrote:

   
 Things to check:
 1) Thoroughly check network connectivity to the mail server from the
 problem clients.

 2) Any possible file locking conflicts?  Is there anything running on
 the server, possibly antivirus software, that might be locking the email
 in the server's mail directory?
 Thought of what could be happening here:
 a) Client retrieves all mail via pop3, marking them for deletion.
 b) Something on the mail server is still holding the files open for
 read (on demand AV scanner maybe?)
 c) Client quits the pop3 session, and the messages marked for
 deletion are now supposed to be deleted
 d) Because one of the email messages is locked for read (see: b,
 above), Xmail is unable to delete files, and gives up.
 e) Mail has not been deleted, and will be re-downloaded on next pop3
 session.


 Davide would be able to comment on the possibility of 2d happening on
 Xmail.  I have no idea if it could even happen, so I may be way off base
 here -- but short of a  network connectivity issue, I can think of
 nothing else at the moment.


 Aaron Fransen wrote:

 
 For some folks they receive emails twice, for some it's three times,
 but not (that I've heard anyways) more than that.

 An example: Joe Smith comes back from holidays, and has 50 emails
 sitting there for him. He receives each and every one three times
 exactly, ending up with 150 new emails in his inbox.

 Jane Doe checks her email every morning, and most mornings ends up
 receiving two of every email.

 Note that it's not selective: If a user is going to have this happen,
 it's going to every single email they happen to be retrieving at the
 time. If it's not going to happen, it's not going to happen on ANY of
 the emails they are retrieving.

 Aaron


 On 3/21/07, Hal Dell [EMAIL PROTECTED] wrote:


   
 I've tracked this as much as I can and this is what I've found: At no 
 time


   
 do the messages


 
 exist on the server twice...they are *only* received twice by the 
 client.

 It does seem to happen to some people more than others, which leads 
 me to


   
 believe


 
 it's a double-click the Send/Receive button issue, but when I test 
 it


   
 the second request


 
 is rejected since the POP server only allows a single connection per


   
 individual.

 Are you sure they are *only* received the eMails twice? NOT more then 
 that?

 Since, I'm coming into the middle of this eMail exchange in the -- I 
 don't
 have
 all of the facts of your situation

 I had a problem like yours and was caused by the long time standing 
 issues
 with
 mail clients on Windows due to the POP3 Tail issue - the symptoms that 
 you
 state
 are nearly identical. David created a filter to not allow these 
 messages in
 the queue.
 If you don't already have the filter installed I would highly 
 recommend
 installing it.
 (Someone on this list may be able to tell the location to download the
 filter -- I
 don't see it listed on xmailserver.org -- it was mailed around at the 
 time).

 POP3 Tail issue is caused by spam and other hacker attempts at DOS 
 targeted
 at the eMail clients by  intentionally corrupting the normal double CR

[xmail] Re: Makes a snowball and tosses it at Davide

2007-01-16 Thread John Kielkopf

It's 2F (-17C) now and it'll get down below -5F (-21C) tonight but 
that's warm for this time of year, in central Minnesota.

Norbert Doeberlein wrote:
 Okay, define cold. ;-)

 -12C (11F) is f'ing cold according to my friend in northern Germany.  I
 still wear short sleeves and a spring jacket with that or a sweatshirt
 and shorts when shoveling snow, but I also do eat like a polar bear. ;-)

 In Wisconsin, we consider cold just starting at about -5F to +5F.
 Football is best played below 20F, except it didn't help us this year.
 However, most of the games were played in weather above 40F.

 Everyone have fun!

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 On Behalf Of Mike Harrington
 Sent: Tuesday, January 16, 2007 12:54
 To: xmail@xmailserver.org
 Subject: [xmail] Makes a snowball and tosses it at Davide


 Stay warm!
 -
 To unsubscribe from this list: send the line unsubscribe xmail in the
 body of a message to [EMAIL PROTECTED] For general help: send the
 line help in the body of a message to [EMAIL PROTECTED]

 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]


   

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Poll ...

2006-10-30 Thread John Kielkopf

I would.

Davide Libenzi wrote:
 How many would appreciate per-RCPT SMTP filter capabilities?



 - Davide


 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]


   

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: XMail Broken Mailer Filter ...

2006-07-12 Thread John Kielkopf

I thought it was mainly the transparent proxies in AV software that 
choked on null bytes.

The funny thing is, since moving off the windows version of Xmail to 
linux, I can't say I've seen this problem come up.


Harald Schneider wrote:
 There are some spam mails flying around, which have nullbytes or missing 
 linefeeds in their message tails. This causes Outlook and many other 
 clients to hang.

 --Harald


 Don Drake wrote:
   
 Sorry for the delay in this email, just catching up on my email.  

 What exactly is this resolving?  Why is this a must have filter?

 Thanks.

 -Don

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
 Behalf Of Harald Schneider
 Sent: Saturday, July 01, 2006 12:31 AM
 To: xmail@xmailserver.org
 Subject: [xmail] Re: XMail Broken Mailer Filter ...


 Thanks a lot!

 Would be nice if this would go into XMail's source. I know, you don't 
 like filter functionality packed into the sourcecode, but wihtout this 
 it is vulnerable for this kind of DOS attack. It's a must have for every 
 user, so why not deliver it with all batteries included ?

 --Harald


 Davide Libenzi wrote:
 
 On Fri, 30 Jun 2006, Davide Libenzi wrote:

   
 This is a smallsimple post-data filter to fix the Zero byte inside the 
 message and the No newline at the end of message problems. Even though
 
 messages that comes into post-data filters, always have the ending
 
 newline 
 
 (unless previous filters screw up, of course). Here is the C source code,
 
 and 
 
 the Win32 pre-built EXE:

 http://www.xmailserver.org/xbmf.c
 http://www.xmailserver.org/xbmf.exe
 
 Sorry, forgot the usage :)

 PATH_TO/xbmf  @@FILE



 - Davide


   
   

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: filters

2006-06-28 Thread John Kielkopf

Helio Cavichiolo Jr wrote:
 Sorry to repost, but how nobody answered, I supposed my explanation or my 
 English wasn't that clear.

 I'm using xmail with courier-imap and this is working fine.
 I also included spamassassin to filter spams, and this is also working fine.
 Now, I would like messages marked as spam to be delivered to a specific 
 folder 
 inside user homedir (/var/MailRoot/domains/the_domain/the_user/Maildir). Is 
 it possible?

   
While I have yet to do it, I was thinking about accomplishing this by 
copying the message (@@FILE), with Xmail's MAIL-DATA and 
everything before it stripped, to the appropriate folder (after first 
checking that the folder exists), and then returning an error code 4 
(reject without notification).

Let me know if it works.

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Listen on specific IP addresses?

2006-06-26 Thread John Kielkopf

Use the -SI command line option.

From: http://www.xmailserver.org/Readme.html#command_line

-SI ip[:port]
Bind server to the specified ip address and (optional) port (can be 
multiple).


--John


Kay Seljeseth wrote:
 We have been running XP and Xmail Server without any problems for a long
 time, but would now also like to run a spam filter (SpamFighter) on the same
 machine. Hence, we would like to use two IP addresses where the SpamFighter
 gets incoming mail first on one public SMTP IP address, checking the email
 and then forwarding it to the Xmail Server IP address, acting as a SMTP
 tunnel/Proxy.

  

 Does anyone know how we may configure XMail server to listen on a single
 specific IP address? We cannot use another port number as some domains
 should bypass the Spam filter.

  

 Thanks!

  

 Kay



 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]


   

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Listen on specific IP addresses?

2006-06-26 Thread John Kielkopf

Yes, the sending IP address is the server's primary address... but that 
shouldn't matter in his case.

--John


Rob Arends wrote:
 I seem to remember that the -SI option was for incoming, but the sending
 from xmail was still on the Servers primary Address - Please check the List
 Archive for verification, in case I'm wrong.


 Rob :-)
  
 _
 Note To Self: Remember to put something witty here later...
  

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
 Behalf Of John Kielkopf
 Sent: Tuesday, 27 June 2006 12:25 AM
 To: xmail@xmailserver.org
 Subject: [xmail] Re: Listen on specific IP addresses?


 Use the -SI command line option.

 From: http://www.xmailserver.org/Readme.html#command_line

 -SI ip[:port]
 Bind server to the specified ip address and (optional) port (can be
 multiple).


 --John


 Kay Seljeseth wrote:
   
 We have been running XP and Xmail Server without any problems for a long
 time, but would now also like to run a spam filter (SpamFighter) on the
 
 same
   
 machine. Hence, we would like to use two IP addresses where the
 
 SpamFighter
   
 gets incoming mail first on one public SMTP IP address, checking the email
 and then forwarding it to the Xmail Server IP address, acting as a SMTP
 tunnel/Proxy.

  

 Does anyone know how we may configure XMail server to listen on a single
 specific IP address? We cannot use another port number as some domains
 should bypass the Spam filter.

  

 Thanks!

  

 Kay



 

   

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: External POP3 on SSL

2006-06-15 Thread John Kielkopf

While I've never used Stunnel for a SSL POP3 client, a quick search 
brings these instructions:


For [*nix] e-mail clients which don't support SSL:

   1. install stunnel on the client machine;

   2. if you want to check the server certificate (optional, but 
recommended), copy the server CA certificate in 
/usr/local/ssl/certs/CAcert.pem and:

  cd /usr/local/ssl/certs/
  ln -s CAcert.pem `/usr/local/ssl/bin/openssl x509 \
   -noout -hash  CAcert.pem`.0

   3. run stunnel using the command (tipically during the startup):

  stunnel -c -v 2 -d 143 -r imap_server:993
  stunnel -c -v 2 -d 110 -r pop3_server:995

  where the option -v 2 has to be specified only if you executed the 
previous point.

   4. Configure the e-mail client so that it accesses the imap (or pop3) 
port of localhost.


For [Windows] e-mail clients which don't support SSL:

   1. install stunnel on the client machine;

 1. download winstun.zip
 2. extract ssleay32.dll, libeay32.dll and stunnel.exe in the 
same directory (if you prefer, the dlls can be moved in \windows\system).

   2. run stunnel using the command:

 stunnel -c -d 143 -r imap_server:993
 stunnel -c -d 110 -r pop3_server:995

   3. Configure the e-mail client so that it accesses the imap (or pop3) 
port of localhost.


It appears that Stunnel is indeed the solution.

--John


Tracy wrote:
 Paul,

 Short answer - *As far as I know* Xmail's pop3 retrieval does *not* 
 natively support SSL. This means you'd have to use an external SSL 
 provider (such as stunnel).

 A more detailed answer is somewhat beyond my capabilities, as I use 
 stunnel for inbound (server-type) connections, not for outbound. But I 
 do know stunnel can support outbound (client-type) connections - and I 
 *think* there was an example on their site on how to set it up (but it's 
 been over a year since I was there, so)

 Tracy

 Paul Allen wrote:
   
 Ok, dude, that was less than helpful, so perhaps you didn't understand the
 question or the situation.  Let me try to clear it up for you...

 Short version:
 Gmail is the HOST, xmail is the CLIENT.


 Long version:
 Gmail requires an SSL connection for POP3 access.  Any other mail clients
 I've used require some special options for connecting to the POP3 server
 over SSL.  Now, I'm not a network engineer or even have any more than a
 slight idea of how this works, but this tells me that it may be an entirely
 different communication protocol than just open up a port and start sending
 commands.

 Since Xmail is acting in the place of any other mail client (Outlook,
 Eudora, etc.), I would assume the same options for SSL would apply.  Is this
 true?  If this is not the case, do I just specify port 995 as part of the
 POP3 host address and all is good?  Are there any special instructions that
 I overlooked during setup to retrieve mail from a POP3 host that requires an
 SSL connection?

 I don't want to use SSL for what xmail is serving, I need to use SSL to
 retrieve my external POP3 mail as the host requires it.  From the
 information I got from their website (http://www.stunnel.org), it would
 appear that I would use stunnel to encrypt the connection between my xmail
 server and it's clients, not the other way around where xmail is the client
 and the POP3 host is already encrypted.  If this is an incorrect assumption,
 perhaps someone can trow me a bone and give up a little more information on
 how to accomplish what I'm trying to do.

 Thanks,

 {PA}



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of XTechie
 Sent: Thursday, June 15, 2006 12:49 AM
 To: xmail@xmailserver.org
 Subject: [xmail] Re: External POP3 on SSL



 Duhh...


 stunnel...?

 Paul Allen wrote:
 
 I've done it!  I have Xmail installed and running wonderfully.  I'd like
   
 to
 
 set my family up on Gmail accounts, so we don't have to worry about
 modifying the pop3 links in the event that we change ISPs.  The one
   
 problem
 
 that I have is I can't find any documentation regarding external POP3 over
 SSL.  Is this possible?  If so, can someone guide me to where to find it
   
 in
 
 the manual or even create a short HOWTO:?

 Thanks

 {PA}


 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]



   
 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]


 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 the body of a message to [EMAIL PROTECTED]
 For general help: send the line help in the body of a message to
 [EMAIL PROTECTED]


 

 -
 To unsubscribe from this list: send the line unsubscribe xmail in
 

[xmail] Re: restart server via email

2006-04-01 Thread John Kielkopf

Your last two emails, and your test came through here fine.

I'm not sure what you're asking exactly, but if it's for an opinion; I 
don't think restarting via email is a great plan.  Surely, if you have 
the need to reboot your server like this, there are other issues with 
the server that need resolution?

--John


Mr Sexy wrote:

Ok I know this is probably not a good idea but lets entertain the
thought and possibilities.

This is xmail 1.20 on win32 system and what I want to do is be able to
email to the server and have a code in the body of the email and when
it reaches xmail, xmail will look at it and check to see who the email
is from and if its a valid user it will look for the code in the email
to proceed to a batch file that reboots the machine. If the code is
incorrect, it just discards it.

Im not the best at batchfiles but I get by :)

So far I came up with this but I need help.

The server name is server1
This file will be named email-reboot.cmd and placed in D:\Xmail\xmail_filters
Not sure if the REM statement is needed or not.

@Echo off
set xmailfile=%~1
REM if %xmailfile:~0,4%==\\?\ set xmailfile=%xmailfile:~4%
if not%~2==[EMAIL PROTECTED] exit 0
copy %xmailfile% D:\Xmail\xmail_filters\tmp
D:
cd \
cd Xmail\xmail_filters\tmp

(need something here to look for code)



del *.server1 /Q
endlocal
exit 4



Ideas?
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: restart server via email

2006-04-01 Thread John Kielkopf

Grab something like grep for windows:
http://www.interlog.com/~tcharron/grep.html

and use something like:
@echo off
if %~1== exit 0
if not exist %~1 exit 0
set /a maxfileSize=2048
if /i %~z1 GTR %maxfileSize% exit 0
grep your-sec-code %~1
if not %ERRORLEVEL%==0 exit 0
echo your reboot code here.
exit 0


waauu  wrote:

No issues and no problems but I want to be able to do it if I want to.

I just need help with the script if you saw it in the previous email.

I need a way to look in the body of an email for a code and if it sees that
code proceed with the script.

Its not really a bad idea or security problem. You can use filters and
filters.in.tab to make it only work if it gets the email by what ever email
you tell it.

Sometimes us admins are on the road and driving and get a call and lets say
all that needs to be done is a server reboot and the server is behind a
locked door at the office that only you and the ceo have a key too and both
of you are not in office.
Well I could pull over and breakout the lappy , connect to the internet  and
remote  in OR I could hang up with the person that called you and you
can send an email via phone to the server and it would reboot.

It would be even better if you could specify the machine to be rebooted by
computer name in the body of email.


FILTERS IN.tab
[EMAIL PROTECTED][EMAIL PROTECTED]0.0.0.0/00.0.0.0/0reboot.tab

/Filters
reboot.tab
cmd.exe /c D:\Xmail\xmail_filters\email-reboot.cmd@@FILE@@RCPT


On 4/1/06, John Kielkopf john@webifi.com wrote:
  

Your last two emails, and your test came through here fine.

I'm not sure what you're asking exactly, but if it's for an opinion; I
don't think restarting via email is a great plan.  Surely, if you have
the need to reboot your server like this, there are other issues with
the server that need resolution?

--John


Mr Sexy wrote:



Ok I know this is probably not a good idea but lets entertain the
thought and possibilities.

This is xmail 1.20 on win32 system and what I want to do is be able to
email to the server and have a code in the body of the email and when
it reaches xmail, xmail will look at it and check to see who the email
is from and if its a valid user it will look for the code in the email
to proceed to a batch file that reboots the machine. If the code is
incorrect, it just discards it.

Im not the best at batchfiles but I get by :)

So far I came up with this but I need help.

The server name is server1
This file will be named email-reboot.cmd and placed in
  

D:\Xmail\xmail_filters


Not sure if the REM statement is needed or not.

@Echo off
set xmailfile=%~1
REM if %xmailfile:~0,4%==\\?\ set xmailfile=%xmailfile:~4%
if not%~2==[EMAIL PROTECTED] exit 0
copy %xmailfile% D:\Xmail\xmail_filters\tmp
D:
cd \
cd Xmail\xmail_filters\tmp

(need something here to look for code)



del *.server1 /Q
endlocal
exit 4



Ideas?
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]




  

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]





-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: RCPT TO smtp filter.

2006-03-07 Thread John Kielkopf

Yes, they are currently triggered once for all, hence my request ;)

I was trying to figure out of there's any way to handle it with external 
auth, but couldn't come up with anything.

To make it somewhat compatible with current SMTP filters, it could just 
keep appending the new address to the message file.  Your script would 
just need to know the last address is the new one, although adding a 
mail from and rcpt to macro might be just as easy, and less overhead for 
the filter to deal with.  A helpful additional macro in either case 
would be an error count, to track the number of bad addresses the MTA 
has tried so far.

I don't know if you could do it in a post data filter, since there's 
no option but to send a single rejection at that point. But after each 
RCPT TO, you could opt. to accept or reject that address for any given 
reason, where Xmail currently only does so based on mailbox size, or if 
the mailbox exists, etc.


CLEMENT Francis wrote:

I think smtp filters are currently triggered once for all rcpt, not for each
rcpt ! 
If actual smtp filters are triggering per rcpt, it could be a great option
here too to have per 'allrcpt'

It should be a option on per filter (like !eax in smtp pre-data) to have
more granularity

So it could be a good think to add options like 'allrcpt' or 'perrcpt' at
any filters level in xmail (smtp pre, post, in, ou, ...) with default value
depending of current xmail defaults (to be compatible with previous filters)

Francis


  

-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] la part de John Kielkopf
Envoyé : lundi 6 mars 2006 18:25
À : xmail@xmailserver.org
Objet : [xmail] RCPT TO smtp filter.




Davide,

How difficult would it be to add filters that are triggered for each 
RCPT TO, similar to smtp pre-data filters?  Does functionality 
like this 
already exist in Xmail?

It would be helpful in the case of  greylist and blacklist filters to 
add more granularity than all or nothing when filtering mail with 
multiple rcpts.

It would also be useful for custom relay domains, where the 
mailbox list 
resides outside of Xmail.





  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: RCPT TO smtp filter.

2006-03-07 Thread John Kielkopf

Davide Libenzi wrote:

Just don't ask me to call out filter for every input 
char next time! :)

  

Damn,  and I was just going to ask for that! ;)

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] RCPT TO smtp filter.

2006-03-06 Thread John Kielkopf


Davide,

How difficult would it be to add filters that are triggered for each 
RCPT TO, similar to smtp pre-data filters?  Does functionality like this 
already exist in Xmail?

It would be helpful in the case of  greylist and blacklist filters to 
add more granularity than all or nothing when filtering mail with 
multiple rcpts.

It would also be useful for custom relay domains, where the mailbox list 
resides outside of Xmail.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: XMail + Imap II

2006-02-24 Thread John Kielkopf

Lars wrote:

Hi,

i'm using now dovecot as an imap-server.

it works good, but there is a behaviour which went me crazy.

if i made a new folder an move some mails there, the pop3-account 
collects this (old) mails as new mails and i get the mails twice.

is there a better way?

  

Use dovecote for POP3 as well.

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: XMail + Imap II

2006-02-24 Thread John Kielkopf

Lars wrote:

John Kielkopf schrieb:
  

Lars wrote:




Hi,

i'm using now dovecot as an imap-server.

it works good, but there is a behaviour which went me crazy.

if i made a new folder an move some mails there, the pop3-account 
collects this (old) mails as new mails and i get the mails twice.

is there a better way?



  

Use dovecote for POP3 as well.

--John



thx john,

but ... did or did not dovecot is able to provide smtp as well?

what have i to do to get a smtp-service, too?

  

Dovecot doesn't have SMTP.

Use xmail for SMTP, but tell it to use an obscure port for POP3, and 
then block that port with iptables, or whatever you use for a firewall. 
(If you can actually disable POP3 on xmail, someone please correct me)

Then use dovecot for imap and pop3.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Spammers - How to block them.

2006-02-13 Thread John Kielkopf

Doesn't SMTP-MaxErrors in server.tab help with this?


Henri van Riel wrote:

Hi all,

I've got a peculiar problem. My domain (a sub-domain of my ISP)
receives a lot of (spam) email. I'm talking more than 15,000 emails
per day (about 10mb/hour). All these emails are for recipients *not*
defined on my domain. Someone has simply generated thousands of fake
email addresses and put them on a cd and sells that (probably).

I've set up XMail so that it only accepts mail for known users, so I
don't really receive these emails. The problem is that my smtp threads
are always *busy*. When I try to send email from outside my LAN
through my mailserver at home I always get the message `server too
busy, retry later...` because all my SMTP threads are handling
mail from these spammers...

What I would like is that XMail *immediately* drops the connection
with the spammer's mailserver but it doesn't seem to do that.
Connections stay open for a while because this server has dozens of
emails to deliver to my server (all for users that don't exist!).

Is there a way to immediately drop the connection with the server that
tries to deliver mail to an unknown user and also ban this particular
mail server for at least a day? That would decrease the number of
random emails significantly and save me a lot on bandwidth.

Any help would be appreciated.

Thanks.

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: No CustMapsList for specified domains

2006-02-08 Thread John Kielkopf

I'll try to find time this weekend to isolate and post it then  Don 
t be afraid to pester me if I let slip my mind.

--John


Rob Arends wrote:

Please do, if you wouldn't mind.


Filip Supera wrote:

  

Hello,

John Kielkopf a écrit :
 



I wrote my own pre-data list filter to solve this, and stopped using 
xmail's CustMapsList.
   

  

Does your filter query Maps lists ? And if yes would you mind sharing 
an example ?

 



My current filter is in PHP, and as such isn't exactly the fastest filter on
the planet, but yes, it does query Maps lists.  Also it will not work under
Windows, just in case that's what you're using.

It's also a combined script that does other things (greylisting,
whitelisting, etc.), so I'd have to isolate it.  Not a problem for me to do,
as long as you're okay with PHP and don't have Xmail running on windows.

--John

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: No CustMapsList for specified domains

2006-02-07 Thread John Kielkopf

I wrote my own pre-data list filter to solve this, and stopped using 
xmail's CustMapsList.

I have my doubts that Xmail's CustMapsList granularity comfortably fits 
most of us with more than one domain.

--John


CLEMENT Francis wrote:

You have the option to install another instance of xmail on the same server
(different ip) just for these customers domains and clear CustMapList on it
:-)

Francis


  

-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] la part de Filip Supera
Envoyé : lundi 6 février 2006 20:35
À : xmail@xmailserver.org
Objet : [xmail] Re: No CustMapsList for specified domains



Davide Libenzi a écrit :



Authentication can override CustMapsList is you set the flag 
  

'0' and the 


user authenticate.
  

What if a user wants to receive all messages sent to him even though 
sender is blacklisted by one of CustMapsList entries ? I have several 
domain names and only 2 of them should not be protected by 
CustMapsList.
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: No CustMapsList for specified domains

2006-02-07 Thread John Kielkopf

Filip Supera wrote:

Hello,

John Kielkopf a écrit :
  

I wrote my own pre-data list filter to solve this, and stopped using 
xmail's CustMapsList.



Does your filter query Maps lists ? And if yes would you mind sharing an 
example ?

  

My current filter is in PHP, and as such isn't exactly the fastest 
filter on the planet, but yes, it does query Maps lists.  Also it will 
not work under Windows, just in case that's what you're using.

It's also a combined script that does other things (greylisting, 
whitelisting, etc.), so I'd have to isolate it.  Not a problem for me to 
do, as long as you're okay with PHP and don't have Xmail running on windows.

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: imap

2006-01-24 Thread John Kielkopf

You can, however, use another Imap/pop3 server, like Dovecot, and then 
just use Xmail for smtp.

This isn't too tough to do under Linux, but on Windows it may be a bit 
more involved.


Mike Harrington wrote:

XMail doesn't support IMAP.

- Original Message - 
From: Erwin Meulensteen [EMAIL PROTECTED]
To: xmail@xmailserver.org
Sent: Monday, January 23, 2006 11:12 AM
Subject: [xmail] imap


  

Hello,
can anyone tell me how to setup imap on a windows server using xmail ?
Any help would be appreciated.
All the best,
Erwin
-



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: imap

2006-01-24 Thread John Kielkopf

I use Dovecot for Imap and POP3, but on Linux.  If you can get Dovecot 
running under cygwin on Windows, you probably have a chance of getting a 
similar set-up working.


Erwin Meulensteen wrote:

Is there a way with the help of other software to manage since xmail is
using a folder structure for storing e-mail so it should be possible ?

- Original Message - 
From: Dale Qualls [EMAIL PROTECTED]
To: xmail@xmailserver.org
Sent: Tuesday, January 24, 2006 2:37 PM
Subject: [xmail] Re: imap


  

Yet.

:)

Monday, January 23, 2006, 9:45:32 PM, you wrote:




XMail doesn't support IMAP.
  

- Original Message - 
From: Erwin Meulensteen [EMAIL PROTECTED]
To: xmail@xmailserver.org
Sent: Monday, January 23, 2006 11:12 AM
Subject: [xmail] imap
  



Hello,
can anyone tell me how to setup imap on a windows server using xmail ?
Any help would be appreciated.
All the best,
Erwin
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]





-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Misdirected Bounces

2005-12-30 Thread John Kielkopf

Shiloh Jennings wrote:

SpamCop is blocking servers based on misdirected bounces.  SpamCop wants
all legit email servers to suppress bounce messages.  Is there any way to
prevent XMail from sending nondelivery messages?  I realize this violates an
RFC, but SpamCop is blocking servers based on this issue and that means
legit email is getting blocked as a result.

http://www.spamcop.net/fom-serve/cache/329.html#bounces

  

Do you have any custom domains set up to relay mail?  Do you have any 
anti virus filters that send bounce messages?

I'm trying to understand why you'd be sending so many misdirected bounces?

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Misdirected Bounces

2005-12-30 Thread John Kielkopf

Bill Healy wrote:

If so then maybe you should look into a filter that can validate
delivery addresses before accepting a message.


  

I would think that just doing virus scanning in a post-data filter on 
the secondary MX should be enough to limit a good majority of 
misdirected bounces that would actually hit a live mailbox.  Perhaps SPF 
would catch much of the remainder?

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Misdirected Bounces

2005-12-30 Thread John Kielkopf

I agree, it is best to have the secondary/scanning server know what 
accounts are real or not, but this isn't always practical to enforce.

Still, in the case that the secondary does attempt delivery to a 
non-existent account, as long as it's already decided that it's not a 
virus, the mailbox that it'll be sending the bounce message to is much 
less likely to be a forged, and valid, address... and this is what 
Spamcop is really trying to stop:  Bounce backs, predominately from 
virus' that forge the sender using a randomly chosen, but real, 
address.  Eliminate the virus, and you eliminate the majority of the 
problem.


Bill Healy wrote:

But if there is a secondary or virus scanning only server that is a
relay for another server it has no way of knowing which accounts are
valid and it will accept all mail for handled domains. Then when the
secondary MX or virus scanner tries to deliver the message to the
primary mail server it will at that point find out if the mail is to a
valid account. If it's not valid then the server trying to make the
delivery will generate a bounce message back to the sender, that's the
problem spamcop is trying to stop. 

The load on my spam and virus scanning servers that front end for other
mail servers has significantly decrease now that I verify who the mail
is going to before any spam or virus scanning. I'm not using xmail as my
front end server for scanning, I'm using a dedicated server with
MailScanner http://www.mailscanner.info/ to scan for virus, spam,
phishing, banned attachments, among other things before being passed on
to the Exchange and xMail servers. 

Bill

  

Bill Healy wrote:



If so then maybe you should look into a filter that can validate
delivery addresses before accepting a message.


 

  

I would think that just doing virus scanning in a post-data filter on 
the secondary MX should be enough to limit a good majority of 
misdirected bounces that would actually hit a live mailbox.  Perhaps SPF 
would catch much of the remainder?



  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Misdirected Bounces

2005-12-30 Thread John Kielkopf

Bill Healy wrote:

The majority of the messages my servers turn away are pure spam and most
are addressed to accounts that have never existed, so it's not like the
addresses have been harvested from someone's infected computer. It's
become common now to just try long lists of common names @domain.com to
try and get spam through.

Here's a log extract from one of my scanning servers from today, none of
the unknown accounts ever existed, but they did manage to guess one
correct address and the message was queued, but later deleted when it
was scanned and found to be spam.

Dec 30 14:10:17 gateway sendmail[25325]: jBUMAAkD025325:
[EMAIL PROTECTED]... User unknown
Dec 30 14:10:17 gateway sendmail[25325]: jBUMAAkD025325:
[EMAIL PROTECTED]... User unknown

Yes, and checking that the rcpt. is valid definitely relieves a good 
deal of load from your antivirus/spam filters... but, unless the sender 
of these attempted spams is a valid -- but forged -- address,  a bounce 
back message likely wouldn't hit spamcops trap and trigger a listing.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: CLAMAV is the culprit... WAS Sending to multiple recipients

2005-12-14 Thread John Kielkopf

Hey Dale,

One problem with filtering in filters.in.tab, is that you'll end up 
scanning the message once for every recipient on the list... so you 
could end up scanning the same message a number of times over.  I prefer 
to do it in a post-data filter, allowing the message to be scanned once, 
and allowing a rejection message to be issued to the MTA via a 5xx 
error, without the worry of sending spam to a forged address.

One question:  Were you using clamscan or clamdscan?

--John


Dale Qualls wrote:

Hiya!

Thanks, I'll give it a shot.

I too used it for a very long time without issues, then this just
sprung up, I blame it on the AV, not the filter.

Have a great holiday!

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: CLAMAV is the culprit... WAS Sending to multiple recipients

2005-12-14 Thread John Kielkopf

They should be near the same, however, I don't know if the spool files 
accessible via normal mail filters (filters.in.tab/filters.out.tab) have 
the {ra=real-address} info on the RCPT TO: line like you get with smtp 
message filters.  They may, but I honestly haven't used them much since 
Davide implemented smtp filters.

The few things you need to keep in mind; exit codes that your filter 
will return will be different from message filters to smtp message 
filters, and many of the macros available in message filters aren't in 
smtp message filters.  It's also important to note that smtp filters are 
running real time.. that is, during the smtp communication with MTAs, so 
they need to be quick.  In short: No, most standard filters won't work 
well as an smtp filter without modification.

Now, about clamscan.  Unfortunately, clamscan is _much_ slower than 
clamdscan.  Because of this, I wonder if, when receiving a shed load of 
messages to filter all at once when you have a large cc list, the filter 
would time out, somehow leaving things in a state that let Xmail decide 
to dump or not deliver the message.

So, my first suggestion would be to get clamd and clamdscan up and running.

--John

Dale Qualls wrote:

Hiya!

clamscan

I've never used post-data filters, does a standard filter work in the
filters.postdata.tab??  It looks like the files have the same
structure from what I see in the docs.

Pardon my ignorance here, guess I should have paid attention to all of
those post/pre data filter threads :)

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: CLAMAV is the culprit... WAS Sending to multiple recipients

2005-12-13 Thread John Kielkopf

I've been using clamav for some time now and haven't had a problem with 
it that I know of.

I use my own filter for it.  If you want to give it a shot, see:
http://www.webifi.com/xmail/xmclam.tar.gz

--John

Dale Qualls wrote:

Thanks Davide and Don for the help.  I had previously remmed out the
lines in filters.in.tab but it didn't help solve the problem.

Removing the filters.in.tab completely (emptying it) allowed it
to function properly.  #'ing the lines out didn't work.

I took out each of my filters 1 at a time and it apparently was the
av-filter.tab hosing us.

This is the filter written by Pete Lindemann and it's using CLAMAV.

I've taken the same filter (a while back) and modified it to use
different strings so it could co-exist and I use it as f-prot.tab.
This gives us 2 different scanners.

So, apparently clamav is to blame.  We running the latest version of
clamav and it's fully up to date.

Anyone else seeing any clamav issues???

  

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: SMTP-Relaying only from Authorized Destinations?

2005-12-06 Thread John Kielkopf

The mail-auth setting in server.tab may be what you're after, but I 
don't know if it overrides smtprelay.tab or not.

-John

Achim Schmidt wrote:

Hello List,

because of the amount of Virus-Emails we are facing a major problem now.
First let me explain our current MX-Constellation:

- Mail for exmaple.com has MX-Entries to mx.waaf.net
- mx.waaf.net are several machines running postfix/virusscanner
- if the email passes all tests it is delivered to the final destination
machine running xmail
- [EMAIL PROTECTED] also sent email through this xmail-box.

Now there are more and more viruses that don't care about MX-Records and
drectly try to deliver mail for [EMAIL PROTECTED] to mail.exmaple.com.
Mail.example.com resolves to the xmail-box.


My solution to get rid of this non-filtered Virus-Emails is to only
allow SMTP-connections to the xmail-box from our subnets, where the
mx.waaf.net machines are located _AND_ from authorized IP-adresses
(SMTP-AUTH, POP-before-SMTP).

I just tried to use smtp.ipmap.tab - but with the result that only the
mentioned subnets where allowed to relay and authoriezed IP-adresses
where denied.

Does anybody have a hint?


Thanks a lot,

Achim

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Add/Delete/Change password for users

2005-11-11 Thread John Kielkopf

Chris L. Franklin wrote:

Pooling for changes that might or might not have been made to the 
mailusers.tab is just a plain waste. When in the end you could just push the 
changes.

  


Polling for changes to mailusers.tab takes relatively no resources, and 
can be done in very few lines of code:

#!/bin/sh
#
XMAIL_USERFILE=/var/MailRoot/mailusers.tab
TMP_FILE=/tmp/tmp_mailusers.tab
while true
do
if [ $XMAIL_USERFILE -nt $TMP_FILE ]
 then
   # file has been updated
   sleep 1
   # run my sync script here
   /myscriptspath/myupdtatescript
   touch -r $XMAIL_USERFILE $TMP_FILE
fi
sleep 2

It's difficult for me to ask Davide to implement a feature like CTRL 
filters for something I can solve otherwise so easily.

If Davide was to add CTRL filters, I rather see it hit the filter for 
every CTRL command, allowing one to implement just about anything -- 
including CTRL access restrictions based on the CTRL user.  However, 
native IMAP support is still much higher on my list of wants.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Add/Delete/Change password for users

2005-11-11 Thread John Kielkopf

Does this still work if you want to keep xmail using it's mailusers.tab 
for pop/smtp authentication?

Mike Harrington wrote:

It's already available (although a bit limited).  Look in the documentation 
under External Authentication and look closely at the useradd, useredit, 
userdel, and domaindrop arguments :)

-Mike


  

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Add/Delete/Change password for users

2005-11-11 Thread John Kielkopf

Chris L. Franklin wrote:


 And people gave me the 3rd degree about
my idea.
  

I'm sorry if you took my response as the 3rd degree, but I simply 
stated a reasonable workaround that gets the same job done for me in a 
relatively simple way, that kept me from asking Davide for the same 
thing.  I meant no hostility towards you or your idea, nor did I ever 
say I was against XMail changes like this.

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Add/Delete/Change password for users

2005-11-10 Thread John Kielkopf

To sync Xmail users with dovecot (for imap), we simply have a script 
that sits in a loop waiting for mailusers.tab to change.  When it sees 
a change, it fires off a another script that syncs the changes.

-John

Adrian Hicks wrote:

As far as syncing goes we're using LDAP here.  It's now authenticating for 
Samba, our Intranet, and ssh logins to the file server.  For password 
changes we utilise a PHP page that changes the LDAP and XMail passwords at 
the same time to keep everything in sync.

Not sure about Webmin and others but I assume ftp (at least on GNU/Linux) 
can authenticate from LDAP.

You could probably use Active Directory if you're on a Win. network.


Adrian Hicks


On 11 November 2005 10:51, Chris L. Franklin wrote:
  

I think it would be nice if, It where possible to have Filters for
when a admin added/delete/ ..etc a users. These filters could do all
kinds of things like sync a users xmail password with other out side
programs. OR Check if the password is complex/long enough.

Really the goal (in my mind) would be to make it easier to sync xmail
passwords with out side programs (like ftp,webmin,etc). But there could
other uses for them too.


-- Chris L. Franklin --



This email was scanned by the server at NomadCF.com, And has been deemed
clean of invaild and or dangerous email attachment type and virus'.

Although this is by no means a guarantee.



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]

---
[This E-mail was scanned for viruses.]


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: still on clamav and xmail...

2005-10-21 Thread John Kielkopf

I'm not sure if this is what he's refering to, but most (all?) of the 
ClamAV filters I've seen posted for Xmail will not catch all test virus 
samples from places like http://www.webmail.us/testvirus

In order to catch all of them, the filters need to strip Xmail's special 
header information (strip everything up to and including MAIL-DATA), 
and add a Return-Path header to the top before scanning.


Chris L. Franklin wrote:

Jeffrey Laramie wrote:

  

On Friday 21 October 2005 06:01, jonn ah wrote:
 



hi all,

Can anybody tell me which av filters (clamav) works on
xmail?  I followed chris franklin's  directions on his
av filter with xmail but it doesnt detect eicar's test
virus when i send it thru xmail...
   

  

This page has a list of XMail filters at the bottom. Check out the links to 
see which AV programs they support:

http://www.ubaight.com/xmail/index.html

If you're using Lindeman's Antivirus Filter there are instructions for Linux 
here:

http://www.ubaight.com/xmail/xmailhandbook.html#Lindeman

Jeff
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]

 




I don't mean to be rude or anything. But if the script isn't catching 
virus' right then you probably don't have have

A) ClamD running and configured right
B) You don't have the script installed right

Heres the log from the test virus' I just sent

Fri Oct 21 08:50:21 2005 - /tmp/msrva5bfdbb0.16f90.tmp: 
Eicar-Test-Signature FOUND
Fri Oct 21 08:51:05 2005 - /tmp/msrva5bfdbb0.1701d.tmp: 
Eicar-Test-Signature FOUND
Fri Oct 21 08:51:25 2005 - /tmp/msrva5bfdbb0.1705b.tmp: 
Eicar-Test-Signature FOUND
Fri Oct 21 08:52:25 2005 - /tmp/msrva5bfdbb0.17111.tmp: 
Eicar-Test-Signature FOUND
Fri Oct 21 08:56:11 2005 - /tmp/msrva5bfdbb0.173bb.tmp: 
Eicar-Test-Signature FOUND

The Script is to simple to really cuase any problem

[Code]
#!/bin/bash
### Config
File=$1
RejFile=$File.rej
RemoteAddress=$2
Authuser=$3
timestamp=`date +%s`
date=`date +%Y%m%d000`
nowtime=`date +%r`

### Doing Stuff
ClamAV='clamdscan --no-summary --stdout '
run=`$ClamAV $File`
Found=`echo $run | awk '{print $3}'`
Virus=`echo $run | awk '{print $2}'`

### Log
echo $nowtime  $RemoteAddress  $Authuser   $Virus  
/var/MailRoot/logs/anti-virus-$date

### Exiting
if [ $Found ]; then
 echo 550 Virus : $Virus Found in Email  $RejFile
 exit 3
fi
[/Code]

And the Filter code is just as easy.

/var/MailRoot/filters.post-data.tab

[Code]
/var/MailRoot/filters/anti-virus.sh   @@FILE@@REMOTEADDR  
@@USERAUTH
[/Code]



  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: still on clamav and xmail...

2005-10-21 Thread John Kielkopf

Sorry, forgot to add: you also need to detect and repair a bad End Of 
Header (ie: no double crlf between the start of the body, and end of 
the headers).

John Kielkopf wrote:

I'm not sure if this is what he's refering to, but most (all?) of the 
ClamAV filters I've seen posted for Xmail will not catch all test virus 
samples from places like http://www.webmail.us/testvirus

In order to catch all of them, the filters need to strip Xmail's special 
header information (strip everything up to and including MAIL-DATA), 
and add a Return-Path header to the top before scanning.

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: messages to yahoo and or hotmail does not get delivered

2005-09-01 Thread John Kielkopf

I think most web browsers will cycle through A records until it finds 
one that works.  I see no reason why an MTA shouldn't.

RFC 2821 Section 5 says:
When the lookup succeeds, the mapping can result in a list of 
alternative delivery addresses rather than a single address, because of 
multiple MX records, multihoming, or both.  To provide reliable mail 
transmission, the SMTP client *MUST* be able to try (and retry) each of 
the relevant addresses in this list in order, until a delivery attempt 
succeeds.

To me, this implies that Xmail should be trying the alternate A records.

I do know that if any MX records exist for a domain, you should never 
fall back to the A record for that domain -- even if you're unable to 
connect to them.  Does Xmail obey this?


Leonardo Fogel wrote:

Although yahoo.com has 4 mx records and each mx record
has 4 A records:

   yahoo.com.   ... MX   1 mx1.mail.yahoo.com.
   yahoo.com.   ... MX   5 mx4.mail.yahoo.com.
   ...
   mx1.mail.yahoo.com.   ... A   67.28.113.10
   mx1.mail.yahoo.com.   ... A   67.28.113.11
   ...
   mx4.mail.yahoo.com.   ... A   66.218.86.156

xmail tries only one A record for each mx record, in
case of successive failures. This is by design.

Please, is it an RFC recommendation? I understand the
multiple A records are intended to provide load
balance, but what is an mta supposed to do in case of
failure? Shouldn't it try all A records till success?

Many thanks.

__
Converse com seus amigos em tempo real com o Yahoo! Messenger 
http://br.download.yahoo.com/messenger/ 
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: messages to yahoo and or hotmail does not get delivered

2005-09-01 Thread John Kielkopf

Ok, it looks like we may be having this problem as well.

Running 1.21 on linux.

We're having trouble sending mail to greenbaycc.org

greenbaycc.org has an MX record of mail.greenbaycc.org, that points 
to an A record of 67.39.138.28.

There is no A record for greenbaycc.org, however Xmail reports this:

[PeekTime] 1125623599 : Thu, 1 Sep 2005 20:13:19 -0500

ErrCode   = -40
ErrString = Invalid server address
ErrInfo   = greenbaycc.org
SMAIL SMTP-Send FF = greenbaycc.org SMTP = smtp5.mnwebhost.net From 
= [EMAIL PROTECTED] To = [EMAIL PROTECTED] Failed !
SMTP-Error = 417 Temporary delivery error
SMTP-Server = greenbaycc.org

I verified that I could resolve and connect to port 25 on 
mail.greenbaycc.org from our mail server immediately after receiving 
this message, so I doubt Xmail should have had trouble connecting less 
than one minute earlier (and all the other times it tried), had it been 
able to resolve to mail.greenbaycc.org correctly.

dnsreport also has no trouble:
http://www.dnsreport.com/tools/mail.ch?domain=greenbaycc.org

XMail doesn't seem to have a valid reason for using greenbaycc.org, so 
why is it?!

Normally I write these 417 errors off as the receiving server being down 
or a typo on the domain name, but now I'm not so sure they all fall into 
this category.

Davide, could you please double check this?

Thanks,

--John


Rob Arends wrote:

Francis, this also true for me:

  

Yes
The problem is EXACTLY 'XMAIL comes back to the A record for obscure 
reasons (internal or due to bad dns responses ?) even if MX records 
exists for the target domains'.



I'm glad there *is* someone with the *same* problem as me.

It means the problem is reproducible - always good when you need to track
down a weird problem. 

Rob: -)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of CLEMENT Francis
Sent: Thursday, September 01, 2005 5:34 PM
To: 'xmail@xmailserver.org'
Subject: [xmail] Re: messages to yahoo and or hotmail does not get delivered




  

-Message d'origine-
De : Rob Arends [mailto:[EMAIL PROTECTED]
Envoyé : jeudi 1 septembre 2005 01:53
À : xmail@xmailserver.org
Objet : [xmail] Re: messages to yahoo and or hotmail does not get 
delivered



Francis,=20

This is the exact error I have had before.  I have the same setup - 
your
*whole* description below is *exactly* what I have.  I have had this = 
problem while on 1.15  1.17 also.  However at the time though, I did 
not know = why my emails were failing.



I don't remember exactly if we encourated the problem with 1.17 (seams not
in my mind) (but can be explained because we didn't had many traffic
directed to hotmail at 1.17 time)


  

The only difference is that I have not had an issue with hotmail, = 
usually it is with some other domains.  Perhaps my users don't send to 
hotmail as = much.
I have not had the time to debug it to an absolute end and offer 
proof, = and so the previous thread died.

I have tracked it down to the fact that every domain that I have had 
problems with has had an A record for the domain  that A record = 
resolves to a different IP than that of the MX record.  This in itself 
is



True

  

not a DNS
problem (normal dns operation).  But I have found that clearing 
xmail's = dns cache  restarting xmail resolves the problem for a 
while.  IIRC just restarting xmail might be enough.



Yes
The problem is EXACTLY 'XMAIL comes back to the A record for obscur reasons
(internal or due to bad dns responses ?) even if MX records exists for the
target domains'.

  

I actually used the SmartDNSHost only *after* I have troubles with MX 
 = A records, but while the problem *seems* to have reduced, it has 
not gone.



  

It does seem to be a logic issue in xmail's mx resolving code, but I = 
have no proof.



In my current configuration, xmail 1.21 forwarding ALL traffic to a Symantec
SMTP AV Gateway USING the SAME Microsoft DNS SERVERS, then ALL TRAFFIC IS OK
(except usual errors, timeouts, ...) In another 'old' configuration, we used
a Microsoft (yes!) Iis SMTP server using the same dns sservers and all was
ok too !!


  

I expect that an Ethereal trace before and after is the only thing 
that = can be done to prove it.




I have to get time to get them ...

  

Hopefully this info will help someone that has the time  the symptoms 
= to get to the bottom of it.

Rob :)





Francis
-
To unsubscribe from this list: send the line unsubscribe xmail in the body
of a message to [EMAIL PROTECTED] For general help: send the line
help in the body of a message to [EMAIL PROTECTED]

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a 

[xmail] Re: messages to yahoo and or hotmail does not get delivered

2005-09-01 Thread John Kielkopf

And just for the record:

[PeekTime] 1125619099 : Thu, 1 Sep 2005 18:58:19 -0500

ErrCode   = -5
ErrString = Timeout error
SMAIL SMTP-Send FF = intergraonline.com SMTP = smtp5.mnwebhost.net From = 
[EMAIL PROTECTED] To = [EMAIL PROTECTED] Failed !
SMTP-Error = 417 Temporary delivery error
SMTP-Server = intergraonline.com

Again, intergraonline.com has an MX record: ix2-mail-gw.new.net

So why is XMail trying intergraonline.com??

--John

John Kielkopf wrote:

Ok, it looks like we may be having this problem as well.

Running 1.21 on linux.

We're having trouble sending mail to greenbaycc.org

greenbaycc.org has an MX record of mail.greenbaycc.org, that points 
to an A record of 67.39.138.28.

There is no A record for greenbaycc.org, however Xmail reports this:

[PeekTime] 1125623599 : Thu, 1 Sep 2005 20:13:19 -0500

ErrCode   = -40
ErrString = Invalid server address
ErrInfo   = greenbaycc.org
SMAIL SMTP-Send FF = greenbaycc.org SMTP = smtp5.mnwebhost.net From 
= [EMAIL PROTECTED] To = [EMAIL PROTECTED] Failed !
SMTP-Error = 417 Temporary delivery error
SMTP-Server = greenbaycc.org

I verified that I could resolve and connect to port 25 on 
mail.greenbaycc.org from our mail server immediately after receiving 
this message, so I doubt Xmail should have had trouble connecting less 
than one minute earlier (and all the other times it tried), had it been 
able to resolve to mail.greenbaycc.org correctly.

dnsreport also has no trouble:
http://www.dnsreport.com/tools/mail.ch?domain=greenbaycc.org

XMail doesn't seem to have a valid reason for using greenbaycc.org, so 
why is it?!

Normally I write these 417 errors off as the receiving server being down 
or a typo on the domain name, but now I'm not so sure they all fall into 
this category.

Davide, could you please double check this?

Thanks,

--John


Rob Arends wrote:

  

Francis, this also true for me:

 



Yes
The problem is EXACTLY 'XMAIL comes back to the A record for obscure 
reasons (internal or due to bad dns responses ?) even if MX records 
exists for the target domains'.
   

  

I'm glad there *is* someone with the *same* problem as me.

It means the problem is reproducible - always good when you need to track
down a weird problem. 

Rob: -)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of CLEMENT Francis
Sent: Thursday, September 01, 2005 5:34 PM
To: 'xmail@xmailserver.org'
Subject: [xmail] Re: messages to yahoo and or hotmail does not get delivered




 



-Message d'origine-
De : Rob Arends [mailto:[EMAIL PROTECTED]
Envoyé : jeudi 1 septembre 2005 01:53
À : xmail@xmailserver.org
Objet : [xmail] Re: messages to yahoo and or hotmail does not get 
delivered



Francis,=20

This is the exact error I have had before.  I have the same setup - 
your
*whole* description below is *exactly* what I have.  I have had this = 
problem while on 1.15  1.17 also.  However at the time though, I did 
not know = why my emails were failing.
   

  

I don't remember exactly if we encourated the problem with 1.17 (seams not
in my mind) (but can be explained because we didn't had many traffic
directed to hotmail at 1.17 time)


 



The only difference is that I have not had an issue with hotmail, = 
usually it is with some other domains.  Perhaps my users don't send to 
hotmail as = much.
I have not had the time to debug it to an absolute end and offer 
proof, = and so the previous thread died.

I have tracked it down to the fact that every domain that I have had 
problems with has had an A record for the domain  that A record = 
resolves to a different IP than that of the MX record.  This in itself 
is
   

  

True

 



not a DNS
problem (normal dns operation).  But I have found that clearing 
xmail's = dns cache  restarting xmail resolves the problem for a 
while.  IIRC just restarting xmail might be enough.
   

  

Yes
The problem is EXACTLY 'XMAIL comes back to the A record for obscur reasons
(internal or due to bad dns responses ?) even if MX records exists for the
target domains'.

 



I actually used the SmartDNSHost only *after* I have troubles with MX 
 = A records, but while the problem *seems* to have reduced, it has 
not gone.
   

  

 



It does seem to be a logic issue in xmail's mx resolving code, but I = 
have no proof.
   

  

In my current configuration, xmail 1.21 forwarding ALL traffic to a Symantec
SMTP AV Gateway USING the SAME Microsoft DNS SERVERS, then ALL TRAFFIC IS OK
(except usual errors, timeouts, ...) In another 'old' configuration, we used
a Microsoft (yes!) Iis SMTP server using the same dns sservers and all was
ok too !!


 



I expect that an Ethereal trace before and after is the only thing 
that = can be done to prove it.

   

  

I have to get time to get them ...

 



Hopefully this info will help someone that has the time  the symptoms 
= to get to the bottom of it.

Rob :)

   

  

Francis

[xmail] Re: messages to yahoo and or hotmail does not get delivered

2005-09-01 Thread John Kielkopf

Davide Libenzi wrote:

greenbaycc.org. 86400   IN  NS  taadns02.taiasp.net.
greenbaycc.org. 86400   IN  NS  taadns01.taiasp.net.
;; Received 88 bytes from 204.74.112.1#53(TLD1.ULTRADNS.NET) in 58 ms

greenbaycc.org. 3600IN  NS  taadns01.
;; Received 54 bytes from 67.39.138.9#53(taadns02.taiasp.net) in 66 ms


What's taadns01. ??
  


However, it doesn't seem to stop nslookup or other tools from retrieving 
the MX record.  How does XMail differ?

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Post data filter

2005-08-30 Thread John Kielkopf

I had some trouble scanning larger messages with filters.post-data, so I 
opted to scan anything = 1MB with post-data and anything  1MB with 
filters.in.

--John


Rob Arends wrote:

IIRC pre/post-data filters only work on incoming smtp  (someone correct me
if wrong)

So it is a perfect place to AV your mail once.

Rob :-) 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Matic
Sent: Tuesday, August 30, 2005 9:55 PM
To: xmail@xmailserver.org
Subject: [xmail] Post data filter

Is the filters.post-data.tab the right place to put in a virus scanner?
This way all mail (incoming to local accounts and outgoing from my
users) will be scaned and only once if the mail is sent to local list or
many recipients. Am I correct? Any reason why it shouldn't be put in
filters.post-data.tab?

Matic


  

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: messages to yahoo and or hotmail does not get delivered

2005-08-30 Thread John Kielkopf

We used to run Xmail on windows with MS DNS for some time.  I don't 
recall ever having this problem.


Shiloh Jennings wrote:

We run XMail on Windows, but we use Bind on Windows instead of Microsoft
DNS.  I do not think we have had any problems with yahoo and hotmail.  Were
the people seeing this problem using Microsoft DNS or BIND?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Jeff Buehler
Sent: Tuesday, August 30, 2005 10:05 AM
To: xmail@xmailserver.org
Subject: [xmail] Re: messages to yahoo and or hotmail does not get delivered


I remember this topic too.  The only thing I thought strange at the 
time, and still do, is that many users of 1.21 are not affected by this 
problem at all (myself being an example), and so there must be something 
related in the systems of those who do have the problem.  I am not 
saying any of these things are the cause (I have no idea) but I remember 
thinking that many (all?) were running Windows Systems and that many 
were coming from outside the U.S..  Perhaps the problem is with the 
Windows binary, or the way it interacts with Microsoft DNS?  Maybe there 
is something else related?  It seems to me it might be helpful if people 
with this problem published relevant system data so that we can see what 
the commonalities are to isolate the problem... just a thought.

Jeff

Edinilson J. Santos wrote:

  

I'm using the same solution that Francis described without problems.

Try to search in the list about this topic. I'm the first that related it 
few months ago.

Edinilson
-
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


- Original Message - 
From: CLEMENT Francis [EMAIL PROTECTED]
To: xmail@xmailserver.org
Sent: Tuesday, August 30, 2005 9:22 AM
Subject: [xmail] Re: messages to yahoo and or hotmail does not get


delivered
  



This problem was previously reported on this mailing list.
Seems (but not completly clarified/debugged at this time) 'xmail 1.21' have
some problems with some 'domains' zones setup (hotmail and yahoo in most
cases).
Seems xmail or dns server or tcp stack ? finaly choose the domain A record
and not the MX record for the domain in some cases ! even if a nslookup or
dig get the correct response ...

I had the same problem, and configured xmail to allways use a smtp gateway
(a iis smtp server on another computer using the same dns server for final
delivery !!) to temporary resolve sending to these domains (especialy
hotmail ...)

So, if you isp provide you a smtp gateway, tell xmail to deliver to it and
let the isp smtp server do the job.
Put this line in smtpfwd.tab (replace a.b.c.d with you isp smtp server) :

* a.b.c.d:25

As I said previously I have to get some tcp dumps to help understand the
problem when xmail resolves by itself on these domains but my xmail server
is in 'production' (for customers) and i can't test with it for this
delivery problem so I need to find time to run another server on another
'dummy' domain ...

Francis


 



-Message d'origine-
De : David Lord [mailto:[EMAIL PROTECTED]
Envoyé : mardi 30 août 2005 12:33
À : xmail@xmailserver.org
Objet : [xmail] Re: messages to yahoo and or hotmail does not get
delivered


On 29 Aug 2005, at 3:33, jonn ah wrote:

   

  

Hi all,

we're using xmail's pop3 and smtp service but when we try to send
messages to either yahoo or hotmail, the messages does not
 



seem to get
   

  

delivered...Is there a default blacklist list that xmail
 



automatically
   

  

throws out messages to yahoo or hotmail to /dev/null? using tail -f
/var/log/messages gives me nothing...I can however, send to other
domains without any problems...

any ideas?


thanks!
 



Possibly they both have tighter requirements on sender
authentication, RDNS, SPF etc.

David

-
  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Post data filter

2005-08-30 Thread John Kielkopf

Leonardo,

Sorry to go off topic here, but have you tried the tests at:
http://www.webmail.us/testvirus

Using clamdscan in post-data, what tests to you fail on, if any?


Leonardo Fogel wrote:

The smtp session will be longer. So, maybe you will
need to raise the max number of smtp threads.
I use clamd (ClamAV) and clamdscan. It is fast enough.

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Bad end of header.

2005-08-30 Thread John Kielkopf

Davide,

When mail is sent with a bad EOH, (no double CRLF separating the header 
from the message body), it appears that the message file available to a 
post-data filter doesn't have this corrected.  When the message ends up 
in the maildir, Xmail seems to have corrected the problem.

It it possible to have Xmail correction available to post-data filters?

Clam AV will miss on some files that have a bad EOH.  When I scan with a 
post-data filter, I need to correct this so Clam AV will work in these 
cases.  Since it looks like you're correcting it anyway, is it 
reasonable to do it earlier to avoid the overhead of doing it twice?

John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Post data filter

2005-08-30 Thread John Kielkopf

Leonardo Fogel wrote:

--- John Kielkopf wrote:

  

Sorry to go off topic here, but have you tried the
tests at:
http://www.webmail.us/testvirus

Using clamdscan in post-data, what tests to you fail
on, if any?



Oops. I forgot to mention that in my previous mail. It
fails tests #5, 12, 16 and 24. Thankfully, the
antivirus in the workstation (NOD32) detects them all.

  


Darn. I was hoping you found a more elegant solution to those.

Currently, I get around #5, 12  16 by building a new tmp file, 
including only what follows MAIL-DATA, adding a Return Path:  
header to the top, and correcting any bad EOH (no separation between 
the message body and header) I find.  Unfortunately, this takes longer 
than the virus scan itself, if the message is large.

23  24 doesn't contain an actual virus, so I can't expect ClamAV to 
catch them.

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Official 'Powered by XMail Banner' ...

2005-08-26 Thread John Kielkopf

Sönke Ruempler wrote:

Please note: This is no logo contest! 

_PLEASE_ let the logo as it is: http://www.xmailserver.org/logoxmail.gif

We don't want to invent a new logo, do we? And no 3D-tele-tubbie effects on
the logo pls :)

  

The fact remains that at smaller sizes, the existing Xmail logo doesn't 
work very well. 

Keeping the orange/black X should be enough to create continuity between 
the two.

I think these buttons are on the right track:
http://www.encenia.com/fodder/xmartwork/buttons1.asp

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Multi line SMTP error response.

2005-08-25 Thread John Kielkopf

Any way to sense if an ehlo was used and return a multi line error 
response in smtp message filters using @@FILE.rej?

Something like:
550-Line1
550-Line2
550 Last line

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Official 'Powered by XMail Banner' ...

2005-08-25 Thread John Kielkopf

Try lightly applying a sharpen filter.

Sönke Ruempler wrote:

Nope - because it's a logo and we don't want to change it in any way
except resizing :)

Maybe you prefer the updated one:

http://regelt.com/powered_by_xmail.png

(light grey bgcolor and diagonal 'powered by'
-

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Macros in SmtpMsgIPBan

2005-08-10 Thread John Kielkopf

Any way to have macros like @@REMOTEADDR in the SmtpMsgIPBan messages?

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Malformed message can cause POP3 timeout

2005-08-09 Thread John Kielkopf

Michal Altair Valasek wrote:

I think that it may be some bug in Xmail - message is accepted as valid at
input, but is not valid at output. I am not C programmer, so I cannot
investigate the source. I would try to collect offending messages and find
exact cause. Some messages have text, which does not end with CRLF, and such
messages always fail. 
  

Are you certain that there is no POP3 proxy in the way, such as Norton’s 
antispam?

Both Symantec and MacAfee antispam products will cause the same behavior 
you describe. Emails with a null byte (00h) in the body cause this 
problem. Filtering email with null bytes solves this problem for me, but 
this can be a great amount of overhead and something I think xmail 
should handle on its own.

Most other mail servers will reject email with null bytes, even though 
null bytes in the body are technically compliant.

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Xmail filter with ClamAV

2005-08-04 Thread John Kielkopf

Anyone else scanning mail with ClamAV?

With just telling ClamAV to scan the message file supplied by Xmail, 
It'll miss a number of the test from http://www.webmail.us/testvirus

If I build a new temp file to scan doing the following:
 - Strip MAIL-DATA and everything before
 - Add a Return-Path: xxx header to the top.
 - Detect and fix a bad EOH (no double CRLF before the start of the 
message body)

I can then get ClamAV to pass all of the tests that contain a virus. 
(#24 and #24 get past, but they contain no virus).

Is it possible to get ClamAV to hit the target without all of this?  I'd 
like to avoid the overhead of building a new file every time I want to 
scan it.

Thanks,
--John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Xmail filter with ClamAV

2005-08-04 Thread John Kielkopf

I'm using my own script, currently running from  filters.post-data.tab 
(this may change).

It'll catch many attachments without the changes to the message, just 
not all of them.

--John


Kevin Williams wrote:

Are you using my Python filter or writing your own? I tested with file 
attachments, and it caught them quite well, but that was all I had to 
test with. Improvements are welcome.

John Kielkopf wrote:
  

Anyone else scanning mail with ClamAV?

With just telling ClamAV to scan the message file supplied by Xmail, 
It'll miss a number of the test from http://www.webmail.us/testvirus

If I build a new temp file to scan doing the following:
 - Strip MAIL-DATA


X-ClamAV-Scan: clean
  

X-ClamAV-Scan: clean
Received-SPF: unknown  ([69.30.125.51]: domain of [EMAIL PROTECTED] uses 
unknown mechanism: no SPF record) and everything before
 - Add a Return-Path: xxx header to the top.
 - Detect and fix a bad EOH (no double CRLF before the start of the 
message body)

I can then get ClamAV to pass all of the tests that contain a virus. 
(#24 and #24 get past, but they contain no virus).

Is it possible to get ClamAV to hit the target without all of this?  I'd 
like to avoid the overhead of building a new file every time I want to 
scan it.

Thanks,
--John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Xmail filter with ClamAV

2005-08-04 Thread John Kielkopf

Jeff Buehler wrote:

  Hi John -

I use clamSMTP - it is c based proxy that is very lightweight and easy 
to use.  I also use ASSP in front of this for anti-spam (so sender - 
ASSP - clamSMTP - XMail - sendee).  As it turns out, after testing, 
the emails didn't even reach my anti-virus because ASSP blocked all of 
the attachments, but I am reasonably certain that it would have caught 
all of them regardless - I have had great success with clamSMTP.

Jeff

Are you stripping all attachments with ASSP?  If not, how does clamSMTP 
react to large (5MB) attachments?  Does it just not scan them, or does 
it risk a time-out?

I currently use a combination of blacklisting and greylisting (and of 
course some white listing) in a pre-data filter, so actually very few 
viruses do make it to the scanner.  Though some aggressive viruses have 
managed to pound their way through the greylist before they end up on a 
blacklist.

clamSMTP would require me to do all my antispam with something like 
ASSP, as you've suggested, and possibly complicate things like shutting 
off antispam and/or antivirus at a per user level (something we do quite 
often) - but it is something to think about.

Still, the perfectionist in me still wants to get my script working well 
(and fast - many of our users tend to send large attachments via email). 
  Moving AV back to a mailproc.tab filter and scanning off-line may be 
what I have to do.

--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Xmail filter with ClamAV

2005-08-04 Thread John Kielkopf

Jeff Buehler wrote:

I simply disallow email of greater than 5 mb (that was my cutoff 
exactly!) - email is not ideal for large file transfers for a number of 
reasons, so I discourage it.
  

I agree, however some of my users may say otherwise ;) 

I was thinking about scanning all messages 2MB durring the SMTP 
session, and then scanning the few larger ones off-line at low 
priority.  Currently I just don't scan anything  5MB.

The accuracy I 
have had once properly configured is exceptional (98-99%) - in ASSP 
whitelisting is very important and automated which helps a lot.  I 
prefer it over Spam Assassin myself.
  

Do you get many complaints about false positives?  Roughly how many 
users do you have?

I prefer to do most of my antispam in the SMTP envelope, before the DATA 
phase.  It's just a waste of bandwidth otherwise.  Do you know if 
greylisting in ASSP does this?

Thanks,
--John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Stange mail clogging up POP.

2005-05-31 Thread John Kielkopf
Sönke Ruempler wrote:

[EMAIL PROTECTED]  wrote on Friday, May 27, 2005 2:58 AM:

  

On Thu, 26 May 2005, John Kielkopf wrote:
=20


Have a strange problem here.
=20
Users that have Norton Internet Security or Mcafee Spam Killer
active have trouble with mail clogging up their systems from time to
time. Disabling the products lets them receive the mail.
=20
Although these users complain that they never had these problems with
any other mail server, this doesn't seem to be an Xmail server
 problem. However, I'm wondering if any of you have come up with a
good solution, other than telling the users to disable these
products, of filtering mail that's causing these problems, and/or
what exactly it is about these messages that creates this problem.
=20
Here is an example of one of the messages, pulled directly from the
mailbox and zipped: http://207.67.28.206/bademail.zip
  

=20
It's a badly formatted MIME message (there's a '\0' towards
the end of the
message). Probably this confuses the heck out of the two junk
software you mentioned.
=20
/me hides from MFE revenge



Yes, Norton AntiSpam (Symantec crap ;) ) has this null-byte problem but
they don't seem to care about it. Maybe other MTAs do filter nullbytes?

  

However, from RFC 821:

 The mail data may contain any of the 128 ASCII characters.  All
 characters are to be delivered to the recipient's mailbox
 including format effectors and other control characters.

To me, this sounds like a null byte would fall in the any of the 128 
ASCII characters range.

That said, I've sent sample messages and a description of the trouble to 
Symantec and Mcafee long ago, and apparently there's still no fix -- so 
I guess I'll need to come up with some sort of workaround.   Does anyone 
see any problems with filtering it?


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Stange mail clogging up POP.

2005-05-27 Thread John Kielkopf
Sönke Ruempler wrote:

[EMAIL PROTECTED]  wrote on Friday, May 27, 2005 2:58 AM:

  

On Thu, 26 May 2005, John Kielkopf wrote:
=20


Have a strange problem here.
=20
Users that have Norton Internet Security or Mcafee Spam Killer
active have trouble with mail clogging up their systems from time to
time. Disabling the products lets them receive the mail.
=20
Although these users complain that they never had these problems with
any other mail server, this doesn't seem to be an Xmail server
 problem. However, I'm wondering if any of you have come up with a
good solution, other than telling the users to disable these
products, of filtering mail that's causing these problems, and/or
what exactly it is about these messages that creates this problem.
=20
Here is an example of one of the messages, pulled directly from the
mailbox and zipped: http://207.67.28.206/bademail.zip
  

=20
It's a badly formatted MIME message (there's a '\0' towards
the end of the
message). Probably this confuses the heck out of the two junk
software you mentioned.
=20
/me hides from MFE revenge



Yes, Norton AntiSpam (Symantec crap ;) ) has this null-byte problem but
they don't seem to care about it. Maybe other MTAs do filter nullbytes?

  

However, from RFC 821:

 The mail data may contain any of the 128 ASCII characters.  All
 characters are to be delivered to the recipient's mailbox
 including format effectors and other control characters.

To me, this sounds like a null byte would fall in the any of the 128 
ASCII characters range.

That said, I've sent sample messages and a description of the trouble to 
Symantec and Mcafee long ago, and apparently there's still no fix -- so 
I guess I'll need to come up with some sort of workaround.   Does anyone 
see any problems with filtering it?


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Stange mail clogging up POP.

2005-05-27 Thread John Kielkopf
John Kielkopf wrote:

Sönke Ruempler wrote:

  

[EMAIL PROTECTED]  wrote on Friday, May 27, 2005 2:58 AM:

 



On Thu, 26 May 2005, John Kielkopf wrote:
=20
   

  

Have a strange problem here.
=20
Users that have Norton Internet Security or Mcafee Spam Killer
active have trouble with mail clogging up their systems from time to
time. Disabling the products lets them receive the mail.
=20
Although these users complain that they never had these problems with
any other mail server, this doesn't seem to be an Xmail server
problem. However, I'm wondering if any of you have come up with a
good solution, other than telling the users to disable these
products, of filtering mail that's causing these problems, and/or
what exactly it is about these messages that creates this problem.
=20
Here is an example of one of the messages, pulled directly from the
mailbox and zipped: http://207.67.28.206/bademail.zip
 



=20
It's a badly formatted MIME message (there's a '\0' towards
the end of the
message). Probably this confuses the heck out of the two junk
software you mentioned.
=20
/me hides from MFE revenge
   

  

Yes, Norton AntiSpam (Symantec crap ;) ) has this null-byte problem but
they don't seem to care about it. Maybe other MTAs do filter nullbytes?

 



However, from RFC 821:

 The mail data may contain any of the 128 ASCII characters.  All
 characters are to be delivered to the recipient's mailbox
 including format effectors and other control characters.

To me, this sounds like a null byte would fall in the any of the 128 
ASCII characters range.

That said, I've sent sample messages and a description of the trouble to 
Symantec and Mcafee long ago, and apparently there's still no fix -- so 
I guess I'll need to come up with some sort of workaround.   Does anyone 
see any problems with filtering it?


  


Just a quick follow-up:

It appears some major ISPs are checking for null bytes.  See this 
response from a comcast server:

SMTP module(domain comcast.net) reports:
 message text rejected by gateway-r.comcast.net:
 556 null byte in data



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Stange mail clogging up POP.

2005-05-27 Thread John Kielkopf
CLEMENT Francis wrote:

I had the same problem when using symantec av smtp gateway and some =
clients
too with some avs ...

First, note that a pure mta have nothing to do with the message itself
(expect to add its own Received from, etc, in the header part) and have =
not
to control it. The pure mta actes on tcp/ip smtp session data only (and =
have
to control it with rfc rules).

AV gateways are like xmail + filters, a mta and content filters.

So now, at filter stage :
The headers part of the message can't contain a null, as any line in =
the
headers part have very strict writing rules in the rfc's : only subset =
of
printable chars from 32-127 and cr/lf.

Then after the empty line, begins the message body.
The problem is how filters programmers read the rfc and how they class =
a
null char :

The mail data may contain any of the 128 ASCII characters.  All =
characters
are to be delivered to the recipient's mailbox including format =
effectors
and other control characters.

128 ASCII characters : strictly reading is it 'From 0 to 127', so a =
null
byte in the mail is ok.

Some don't classify the 'null byte' in the 'characters class' nor the
'control characters class' : then null byte is not ok.

And another point to verify in rfcs, assuming 'a null byte' is a ASCII =
char
(yes it is ...):
Don't know exactly if MIME RFC's says anything about null and others =
control
caracters, but 'in mind' in a MIME formatted message, any 'special'
character (not in range 32-126) need to be encoded, so a null byte have =
to
be encoded, then finaly a MIME formatted message can't contain a 'pure' =
null
byte in the data ...
If you don't create a MIME message (only plain text from 0-127 char =
set, no
mime headers, no possibility for attachements and multiple formats in =
same
mail, ...), you can have 'pure' null bytes in the data,=20
but if creating a MIME message you can't.
The AV problem can then simply be a bug if the mail in not a mime =
message
 but the filter don't check and allways assume a Mime message.

Francis
  

Even if you classify a null byte as not ok, only a lobotomy should 
excuse someone from just letting an AV scanner, spam filter, what have 
you, hang when encountering one.  I can't for the life of me figure out 
why Mcafee or Symantec (and others?) won't address this issue.

--John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Stange mail clogging up POP.

2005-05-26 Thread John Kielkopf
Have a strange problem here.

Users that have Norton Internet Security or Mcafee Spam Killer active 
have trouble with mail clogging up their systems from time to time.  
Disabling the products lets them receive the mail.

Although these users complain that they never had these problems with 
any other mail server, this doesn't seem to be an Xmail server problem. 
  However, I'm wondering if any of you have come up with a good 
solution, other than telling the users to disable these products, of 
filtering mail that's causing these problems, and/or what exactly it is 
about these messages that creates this problem.

Here is an example of one of the messages, pulled directly from the 
mailbox and zipped:
http://207.67.28.206/bademail.zip

Thanks,
--John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Problems with hotmail.com

2005-03-12 Thread John Kielkopf
I usually use the spam database lookup  on http://dnsstuff.com/.  It 
seems a little more thorough than ordb.org.

Edinilson's subnet appears to be listed on JAMMDNSBL... though I doubt 
hotmail uses that list.

--John


null wrote:

Greetings all,
 I couldn't agree with you more on ALL counts. I hate to sound like
a me too. But I/ we host a few black lists (RBL's). So I thought
that it seemed the most likely resolution would be to check with
the problem domains (hotmail, earthlink) and see who they are using
as an RBL. Themselves, or one of the well known ones:
http://ordb.org/submit/ is a great way to check if your listed most
anywhere, and hence, blocked.

--Chris

P.S. *BSD truly *is* the best choice. ;)


  

Perhaps the problem is that you are running Windows servers rather than
Linux, or even better, *BSD?
Or perhaps I shouldn't take advantage of this mail list to express
personal preferences?
No need to reply to that ... I'm just kidding. :)

However, and this probably doesn't help, I haven't had any of the
problems you are describing.  It almost sounds like it might be a
geographical location issue (?).  I have users sending to Hotmail
regularly, as well as Earthlink accounts, and there haven't been any
problems - I may have a lower volume than you do, though.

The only thing I can think of that seems to be a significant general
change is SPF - is it possible that this is related to that?  Also, have
you verified that your IP isn't on any blacklists?  Both Earthlink and
Hotmail have upped their anti-spam campaign pretty heavily.

Thats all I can think of!

Jeff

Tom Banting wrote:



I have seen this too.  Earthlink says:
[00] XMail bounce:
[EMAIL PROTECTED];Error=[550-EarthLink
does not recognize your computer (209.121.70.9) as connecting from an
EarthLink connection.  If this is in error, please contact technical
support.
550 relaying to [EMAIL PROTECTED] prohibited by administrator]



At 04:39 PM 11/03/2005, you wrote:
We have started to get these same errors - for the last 2-3 months.
Never
any before then.  It has happened sending to earthlink, hotmail, and some
others.  Its does not allways seem to happen.  Often, if the user resends
the message - it goes through just fine.
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]




  

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]





-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Graylisting ...

2004-12-18 Thread John Kielkopf
I agree.  This would be nice to have as part of xmail, and not force its 
implementation in a filter.  I'm honestly surprised we're the only two 
on the list that has run into the need for it.

That said, we all know Davide has a full plate at the moment, so using a 
filter as an interim solution is a good option.

-John


Shiloh Jennings wrote:

The reason for needing SMTP SASL support is because some customers =
outside
of our class C will need to use our SMTP server when sending since our =
SMTP
will be listed as their authorized sending SMTP server within their SPF
data.  However, their local ISPs ban outbound port 25.  These customers =
of
ours will need a port other than 25 to connect to us on.  Port 587 is
recommended.  However, if I open 587 without requiring SMTP AUTH on that
port, then we will still be vulnerable to dictionary attacks on that =
port.

We need scalability as well.  If we write a separate filter for each =
thing
we need done, then the performance will get crushed.  SMTP SASL support =
is
something that could best be done within XMail instead of needing to =
call a
separate filter.  IF XMail supported in process filters (through DLL =
files),
then I would simply write in process filters and be done.  However, =
spawning
separate processes for each incoming email is something that quickly =
kills
the ability to scale.  For small operations, spawning processes is fine, =
but
not for big operations.


--

  

If I'm not mistaken, a patch for this could be created using SMTP=20


filters, if only there was a way to retrieve the port used to connect as =

well as the @@USERAUTH.
  

Though, of course, true SASL support is better, for obvious reasons.

Hmm... In fact, what's wrong with adding a @@USREAUTH check to your SPF =



filter? If the user is authenticated, skip the test.



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Graylisting ...

2004-12-17 Thread John Kielkopf
Actually,  double taping won't work unless they add a substantial 
delay in sending the next mail. Any server that tries again too soon is 
badly configured, or a spammer.  It then gives you times to let that 
spammers IP get propagated on some of the black lists.


Shiloh Jennings wrote:

If this became widespread, then a lot of ISPs would need to set their =
SMTP
servers to retry a lot more often.  Otherwise, customers would complain
about the email delays.  Also, if it were widespread, spammers would =
simply
double tap each email.  Sending the exact same email twice instead of =
once
would get the spam through the Greylist filter.  And by requiring such, =
we
would only be encouraging more bandwidth wasting.  Greylisting is, at =
best,
only a very short term solution.  As soon as it became popular, it would =
no
longer be useful.

What I would like to have more than anything right now is SMTP-SASL, so =
I
could fully implement SPF.  Right now, I have no way of opening another =
SMTP
port for only SMTP AUTH connections.  I want to open 587 for SMTP but =
only
SMTP AUTH.  That would do me world more good than Greylisting.
  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Outlook error 0x800CCC0F

2004-12-16 Thread John Kielkopf
Is the other smtp server in a different location than the xmail 
server? Is it possible the other smtp server in the first scenario is 
just delivering the message to the client faster?

Could be something as simple as the difference in available bandwidth.

--John


Jason J. Ellingson wrote:

NOD32 will POP3 scan for Outlook.  It does not POP3 scan for other email
applications.  That would answer the reason the second scenario is that way.

As for the first scenario... I don't have an idea off hand.

Jason J Ellingson
Technical Consultant

615.301.1682 : nashville
612.605.1132 : minneapolis

www.ellingson.com
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Javier Navarro
Sent: Thursday, December 16, 2004 10:15 AM
To: [EMAIL PROTECTED]
Subject: [xmail] Outlook error 0x800CCC0F


  Hello

  First of all, thanks for the answers but I think it's a little more=
 complicated than it seems.

  About antivirus filter in server, I know it doesn't affect POP sessions.=
 I told that I use it just to give a complete description of my system.

  In my tests, I used Outlook and Calypso with Nod32 active. Outlook failed=
 while Calypso downloaded the e-mail. But I suppose Nod32 is better=
 integrated with Outlook than Calypso (that is an old e-mail client).

  My client uses McAfee ASAP but he hasn't problems if the same e-mail is=
 downloaded from other server. In fact, he had to tell the sender to send=
 the e-mail to other acount in other server to be able to download it.

  So the problem is very strange:

  1.- Outlook + McAfee ASAP can't download an e-mail from XMail but it can=
 from other server.
  2.- Outlook + Nod32 can't download the e-mail from XMail but Calypso +=
 Nod32 can.

  (1) Is very dificult to explain as an Outlook + Antivirus problem . And I=
 think I can't tell my client to use other e-mail software because he will=
 tell me he hasn't this problems with other servers :-(

  Any suggestions?

  Thanks all :-)

  Javier

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


[xmail] Re: Forced SMTP auth per port

2004-09-13 Thread John Kielkopf
Davide Libenzi wrote:



A pre-data filter can work just fine here.

  


Yes, but being able to set something like mail-auth   0.0.0.0:587,... 
in server.tab would be better ;)

-John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Forced SMTP auth per port

2004-09-10 Thread John Kielkopf
Exactly what I'm trying to do.  Useful for clients that use the ever 
growing list of ISPs that block port 25.

Tracy wrote:

More like, he's trying to set up a MSA port (RFC 2476) for user submission 
of email independent of location.

MSA (port 587) - direct-to-MX client submissions, requires authentication. 
MTA-to-MTA submissions not allowed here.

SMTP (port 25) - MTA-to-MTA submissions, doesn't require authentication 
(authentication can be used to identify clients submitting direct-to-MX, if 
desired).

At 08:55 9/10/2004, Chris L. Franklin wrote:
  

Problably whats to have a port like 26 that seen only from the lan and
does require auth smtp. But still have port 25 visable from the wan/lan
and have it still require Auth-smtp.

-- Chris L. Franklin --

Veeresh Khanorkar wrote:



John Kielkopf wrote:



  

Is it possible on Xmail to force SMTP auth based on the port the
connection was established on?

Currently, I accept connections on port 25 (SMTP) and port 587 (MSA).  I
want port 25 to accept mail for local accounts without auth as normal,
but I want to require auth on port 587...  The more I think about it, I






U ,  I wonder what you are trying to do out here?

-VK

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]




  

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: OT: Spam SPF

2004-09-09 Thread John Kielkopf
I think this: http://spf.pobox.com/faq.html#churn  explains it well.

It certainly complicates spamming... and that can't be a bad thing.

-John

Michael Luke wrote:

Mike Harrington wrote:
  

Hey guys, just read these articles about spammers using SPF.  Thought
you might find them interesting as well:
=20



http://news.com.com/Study%3A+Spammers+use+e-mail+ID+to+gain+legitimacy/2
100-1029_3-5357269.html?tag=3Dnefd.top
  

=20
and
=20
http://www.mxlogic.com/news_events/09_08_04.html
=20
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]
=20
=20
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.756 / Virus Database: 506 - Release Date: 08/09/2004



It's hardly fair to criticise SPF for failing to do something it was
never designed to do.  SPF is designed to prevent phishing and spoofing
and it seems to do a good job of that.=20

Besides, if spammers are openly advertising which domain they are
sending from, it should be much easier to blacklist them or prosecute if
they're breaking laws (yeah I know that's wishful thinking but you never
know).

Give it a chance.

--=20
Michael Luke

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Forced SMTP auth per port

2004-09-09 Thread John Kielkopf
Is it possible on Xmail to force SMTP auth based on the port the 
connection was established on?

Currently, I accept connections on port 25 (SMTP) and port 587 (MSA).  I 
want port 25 to accept mail for local accounts without auth as normal, 
but I want to require auth on port 587...  The more I think about it, I 
guess I could just make a PRE-DATA filter that checks the port in 
@LOCALADDR and @USERAUTH... But I'd still like to know if xmail is 
capable of it without the filter.

Thanks,
John
**
**
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: DNS Issue

2004-07-27 Thread John Kielkopf
http://www.dnsstuff.com/tools/ptr.ch?ip=209.12.136.106

Yeah, looks like you have no PTR record visible.  Your bandwidth 
provider should be able to create it for you, or delegate a reverse 
lookup zone to you.

-John


Jeffrey Laramie wrote:

Hey Folks,

I just had an email bounced back saying my mail server doesn't have a reverse 
DNS entry:

  

[00] XMail bounce: [EMAIL PROTECTED];Error=[554 5.7.1 The
server sending your mail [209.12.136.106] does not have a reverse DNS
entry. Connection Rejected. Please contact your Dial-Up/DSL/Network ISP
Provider. Default Reject!]



I've had my mail server configured this way for years and never had a problem 
before. I just re-checked it and I don't see anything wrong. Could someone 
else take a look at my DNS configuration and help me figure out why it 
doesn't work now?

Jeff

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Problems with POP3

2004-07-20 Thread John Kielkopf
Noor Dawod wrote:

Hello,

I run XMAIL 1.20 which I installed few days ago. We have few POP
accounts for the company, and the domain's MX records of course point to
this XMAIL box. We all use Microsoft Outlook 2000 or XP to fetch from
the POP3 server.

I have a weird case that I'm seeing for few users here. If they have an
E-mail message that exceeds few MB's, say 3MB's, Outlook continuously
downloads it and never deletes it from the server. In other cases,
Outlook reports that the connection to server has been cut and it
couldn't download all messages.

Now I know for a fact that the network is OK and disconnections are not
likely. Outlook never deletes those large messages, and worse than that,
it keeps downloading it from the POP3 server over and over again. When I
get into the mailbox using WAI's Web interface and delete those large
messages, then Outlook works correctly and doesn't get stuck with
subsequent messages.

Any idea how to even debug this problem?

/Noor

  


A couple of our clients had a similar problem.  It turned out that it 
was a Symantec/Norton security product that was choking on some spam.  
After the client disabled it, they we're able to receive mail from our 
POP3 servers just fine.

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Spammers / viruses bypassing MX records?

2004-07-14 Thread John Kielkopf
Kirk Friggstad wrote:

Hey all:

We've recently installed a Barracuda (rack-mount spam firewall based on
Spam Assassin, also does virus scanning) on our network in front of our
XMail system, and pointed our MX records to deliver mail to the Barracuda
instead of directly to our server. This change was made over a month ago,
but we still find some spammers and viruses (especially W32/Zafi.B) are
delivering directly to our XMail server instead of following the MX records
to the Barracuda. The mail server is not at the same IP address as our
default @ record for the domain, but it does have A records for mail and
smtp.

First question: has anyone seen behavior like this before (bypassing MX
records)?

Second question: is there any way to configure XMail to block any
unauthenticated request from untrusted IP addresses (not in SMTPRELAY.TAB),
but still allow mail from the Barracuda to come in (obviously the Barracuda
is in SMTPRELAY.TAB) and allow our users to relay with authentication?

Thanks in advance for any advice and/or insights!

Kirk


  

You could probably make a simple pre-data smtp message filter that just 
rejects the message if the user is not authenticated.

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: get a handle on Sober.H spam ?

2004-06-16 Thread John Kielkopf
lac wrote:

--- Tracy [EMAIL PROTECTED] wrote:
  

I can't speak for anyone else, but I've found that denying service to 
dynamic addresses (based on RDNS patterns) to be a very effective tool 
for reducing both spam and virus traffic. Since most (not all, as has been 
pointed out here in the past) dynamic addressed machines are covered by 
terms of service or acceptable use policies that prohibit the running of 
servers, a case can be made that these machines should not be sending mail 
directly to mail servers (other than the ISP responsible for their 
connectivity).

And, of course, if there are specific machines that are running mail 
servers, they can avoid such a block in two ways:

1) Getting a static IP address from their provider so that you can 
whitelist the address
2) Getting non-generic RDNS assigned by their provider


[...]

Of course 1. and 2. are not feasible for about 99% of broadband users who
want to run a legitimate mail server.  Static address and RDNS is out of the
question (an ISP usually charges a busisness rate for this)

-Lac
  


I've been grey listing suspect servers, returning a 4xx error in a 
pre-data filter on the first try, then letting it through on the next, 
assuming enough time has passed.  This does complicate things, as you'll 
need to track the senders email address and IP address, and the rcpt(s) 
address in a database -- but it seems to be working well with few false 
positives.  It can potentially delay a good amount of mail however, 
depending on how you decide what's suspect or not - and gets even more 
complicated if you have any backup SMTP servers.


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Error message since updating to 1.20

2004-06-15 Thread John Kielkopf
Davide Libenzi wrote:

On Tue, 15 Jun 2004 [EMAIL PROTECTED] wrote:

  

We have ALWAYS had to make those DIR manaually.  Xmail has never made them
for us.  Only the numbered ones does it make.



Yes, the numberred ones. Tell me again why would you remove directories 
from the XMail structure? They *are* in the supplied MailRoot and they are 
documented to be required.


  

A little off topic, but somewhat related (directories, and Xmail's 
behavior if they're missing). 

For us that have been using Xmail for a lng time, the directory for 
each domain under *cmdaliases* doesn't always exists, since they weren't 
created by older versions of xmail... This only causes problems when 
removing domains (or at least I think that's the only problem).  Not a 
big deal, but it did throw me for a bit.  The change log when upgrading 
to 1.2 did say you needed to make the cmdaliases directory, but I don't 
recall it saying making a directory for each existing domain under it 
was required... If it's not required no error should happen on removal 
of a domain that's missing it.


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Error message since updating to 1.20

2004-06-15 Thread John Kielkopf
Davide Libenzi wrote:

On Tue, 15 Jun 2004, John Kielkopf wrote:

  

For us that have been using Xmail for a lng time, the directory for 
each domain under *cmdaliases* doesn't always exists, since they weren't 
created by older versions of xmail... This only causes problems when 
removing domains (or at least I think that's the only problem).  Not a 
big deal, but it did throw me for a bit.  The change log when upgrading 
to 1.2 did say you needed to make the cmdaliases directory, but I don't 
recall it saying making a directory for each existing domain under it 
was required... If it's not required no error should happen on removal 
of a domain that's missing it.



You are not required to create domain directories inside cmdaliases. XMail 
simply checks for the existance of files, and if it doesn't find them, it 
proceeds with local lookup (mailusers.tab).
  

But, if you delete a domain that is missing that directory, you get an 
error.


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Error message since updating to 1.20

2004-06-15 Thread John Kielkopf
Davide Libenzi wrote:

On Tue, 15 Jun 2004, John Kielkopf wrote:

  

Davide Libenzi wrote:



On Tue, 15 Jun 2004, John Kielkopf wrote:

 

  

For us that have been using Xmail for a lng time, the directory for 
each domain under *cmdaliases* doesn't always exists, since they weren't 
created by older versions of xmail... This only causes problems when 
removing domains (or at least I think that's the only problem).  Not a 
big deal, but it did throw me for a bit.  The change log when upgrading 
to 1.2 did say you needed to make the cmdaliases directory, but I don't 
recall it saying making a directory for each existing domain under it 
was required... If it's not required no error should happen on removal 
of a domain that's missing it.
   



You are not required to create domain directories inside cmdaliases. XMail 
simply checks for the existance of files, and if it doesn't find them, it 
proceeds with local lookup (mailusers.tab).
 

  

But, if you delete a domain that is missing that directory, you get an 
error.



No wait. XMail does create domain directories inside cmdaliases when you 
create a domain with the CTRL interface.

  

Yes, but older versions of Xmail (  1.2 ) didn't, so many of my older 
domains don't have these directories.


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Error message since updating to 1.20

2004-06-15 Thread John Kielkopf


Yes, but older versions of Xmail (  1.2 ) didn't, so many of my older 
domains don't have these directories.



Ok, I'll put a check in 1.21 ...
  


Thanks!


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Unable to create/remove directory

2004-06-02 Thread John Kielkopf
On one of my Xmail servers (win32 1.18) with ~50 domains, when adding or 
removing a domain I always seem to get an error.  When adding (using 
ctrl)  I get -00017 Unable to create directory, when deleting, I get 
-00018 Unable to remove directory.

However, in both cases, the directory _is_ actually created/deleted.

Also, on my other Xmail Win 32 servers (1.17/1.18/1.20), it seems that 
when deleting a domain with a large number of users, with a large number 
of messages still in their mail boxes, I will also get Unable to remove 
directory... but again, the directory is removed.  Also, I'm fairly 
certain there is no activity on the domain(s) being removed at that time.

Haven't noticed it on the linux servers yet, but they get less use.

 -John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Unable to create/remove directory

2004-06-02 Thread John Kielkopf
Davide Libenzi wrote:

On Wed, 2 Jun 2004, John Kielkopf wrote:

  

On one of my Xmail servers (win32 1.18) with ~50 domains, when adding or 
removing a domain I always seem to get an error.  When adding (using 
ctrl)  I get -00017 Unable to create directory, when deleting, I get 
-00018 Unable to remove directory.

However, in both cases, the directory _is_ actually created/deleted.

Also, on my other Xmail Win 32 servers (1.17/1.18/1.20), it seems that 
when deleting a domain with a large number of users, with a large number 
of messages still in their mail boxes, I will also get Unable to remove 
directory... but again, the directory is removed.  Also, I'm fairly 
certain there is no activity on the domain(s) being removed at that time.

Haven't noticed it on the linux servers yet, but they get less use.



Never heard about it.

  


Well, now you have.  Any ideas?

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Unable to create/remove directory

2004-06-02 Thread John Kielkopf
AVG was installed, but not set to run in any on-access way (was used 
for scanning mail, until we switched to McAfee command line scanner).  I 
uninstalled AVG and re-started the machine, but no change.

This happens when creating domains as well, not just removing them.  No 
other application seems to act in this way (throw errors on file 
operations, but complete the operation) on this box... yet.

The other Xmail servers on win32 are not under as much load as this one, 
and the only way I can repeat the error on these other machines (no AV 
installed on them) is to remove a domain that has a good amount of files 
still in its directory.  Only creating/removing domains seem to cause 
the problem.  Individual users appear to remove and add without trouble. 

Note that, other than the error, the domains are removed and created 
successfully.

-John


Davide Libenzi wrote:

On Wed, 2 Jun 2004, John Kielkopf wrote:

  

Well, now you have.  Any ideas?



Well, the fine OS returns error on RemoveDirectory(), but then deletes the 
directory. Isn't it sweet? Many OSs implement the delayed removal feature, 
but returning error and deleting the directory after that sounds screwy to 
me. XMail implements directory removal in a bottom-up fashion, so it 
actually issues a RemoveDirectory() only when the directory is empty. And 
this is proven by the fact that you're the only one seeing this, so far. 
Is there any other app that goes and crowl the XMail tree? Any on-access 
AV scanner enabled?

  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Unable to create/remove directory

2004-06-02 Thread John Kielkopf
Davide Libenzi wrote:

On Wed, 2 Jun 2004, John Kielkopf wrote:

  

AVG was installed, but not set to run in any on-access way (was used 
for scanning mail, until we switched to McAfee command line scanner).  I 
uninstalled AVG and re-started the machine, but no change.

This happens when creating domains as well, not just removing them.  No 
other application seems to act in this way (throw errors on file 
operations, but complete the operation) on this box... yet.

The other Xmail servers on win32 are not under as much load as this one, 
and the only way I can repeat the error on these other machines (no AV 
installed on them) is to remove a domain that has a good amount of files 
still in its directory.  Only creating/removing domains seem to cause 
the problem.  Individual users appear to remove and add without trouble. 

Note that, other than the error, the domains are removed and created 
successfully.



Ok, deletion can in theory happen to succeed even if the error is 
triggered, but creation definitely not. And this since another bunch of 
ops will follow the creation of the directory (and XMail bounces out on 
error). So, are you sure your CTRL client does not issue the command 
twice?


  

I'm positive that domainadd is not issued twice.  I even tried it 
manually in a telnet session to verify it, and the error is reported 
there after a single domainadd, after first making sure the domain does 
not already exist.  After domainadd,  -00017 Unable to create 
directory is reported, a directory with that domains name now exists, 
and the domain has an entry in domains.tab.

Is it possible that Xmail is running into an error further down the 
road, but reporting it as Unable to create directory?

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Unable to create/remove directory DOH!

2004-06-02 Thread John Kielkopf
John Kielkopf wrote:

Davide Libenzi wrote:

  

On Wed, 2 Jun 2004, John Kielkopf wrote:

 



AVG was installed, but not set to run in any on-access way (was used 
for scanning mail, until we switched to McAfee command line scanner).  I 
uninstalled AVG and re-started the machine, but no change.

This happens when creating domains as well, not just removing them.  No 
other application seems to act in this way (throw errors on file 
operations, but complete the operation) on this box... yet.

The other Xmail servers on win32 are not under as much load as this one, 
and the only way I can repeat the error on these other machines (no AV 
installed on them) is to remove a domain that has a good amount of files 
still in its directory.  Only creating/removing domains seem to cause 
the problem.  Individual users appear to remove and add without trouble. 

Note that, other than the error, the domains are removed and created 
successfully.
   

  

Ok, deletion can in theory happen to succeed even if the error is 
triggered, but creation definitely not. And this since another bunch of 
ops will follow the creation of the directory (and XMail bounces out on 
error). So, are you sure your CTRL client does not issue the command 
twice?


 



I'm positive that domainadd is not issued twice.  I even tried it 
manually in a telnet session to verify it, and the error is reported 
there after a single domainadd, after first making sure the domain does 
not already exist.  After domainadd,  -00017 Unable to create 
directory is reported, a directory with that domains name now exists, 
and the domain has an entry in domains.tab.

Is it possible that Xmail is running into an error further down the 
road, but reporting it as Unable to create directory?

-John
  

DOH!

Found the domainadd problem the cmdaliases directory was missing on 
that server for some reason.

Also looks like the domaindel problem on the other severs may have been 
related to the domains being removed not having their own directory 
under the cmdaliases directory, since they were probably added long 
before xmail used cmdaliases... So I wrongly related this to there being 
allot of mail left over (there was)... It was just that the domains were 
that old.

Chalk another one up for user error.

Sorry to waste your time Davide, but it did help me track down the prob.

Thanks,
-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Xmail Administrator 0.26

2004-06-01 Thread John Kielkopf
Xmail Administrator 0.26 is out and adds support for Xmail 1.19/1.20

http://www.webifi.com/xmail

Sorry I didn't get this out earlier.

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: XmailAdmin for Windows

2004-06-01 Thread John Kielkopf
Sorry,

It's fixed now.

http://www.webifi.com/xmail

-John


Shiloh Jennings wrote:

The XmailAdmin tool from http://www.webifi.com/xmail/ worked great with
XMail 1.17, but crashes with XMail 1.20.  When I click on the server =
name to
bring up a list of domains, it says Run-time error '5': Invalid =
procedure
call or argument.  Any idea what changed in XMail that causes XMailAdmin =
to
fail?


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]


  


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: XmailAdmin for Windows

2004-06-01 Thread John Kielkopf
Sorry,

It's fixed now.

http://www.webifi.com/xmail

-John


Peter Lindeman wrote:

Davide Libenzi wrote:

  

I think in 1.18 the format of a CTRL command changed. Let me see ... yes, 
aliasdomainlist. Maybe this screw up the tool. Pls contact the author.



1.18 still worked with the tool. It stopped from 1.20 (or maybe 1.19 but 
I never had 1.19)

  



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Xmail Administrator 0.26

2004-06-01 Thread John Kielkopf
In a perfect world, I shouldn't have needed to make a new version, but I 
was (and still am) doing brain-dead parsing.

Is there any real need to know the server type?

-John

Tracy wrote:

Because the banner no longer identifies the server type that XMail is=20
running on

+0 [EMAIL PROTECTED] XMail 1.20 CTRL Server; Tue, 1 Jun=20
2004 20:22:34 -0400

That's kind of the whole point of why a new version was necessary...:)

At 20:11 6/1/2004, you wrote:

  

Hi,
Just installed it, but now the statusbar shows:
Xmail 1,20 (Unknown) !
Why the unknown?!
There used to be: Win32/Ix86
This is concerning our admin people ;-)
Kind regards,
Fr=E9d=E9ric


- Original Message -
From: John Kielkopf
To: [EMAIL PROTECTED]
Sent: Tuesday, June 01, 2004 4:55 PM
Subject: [xmail] Xmail Administrator 0.26


Xmail Administrator 0.26 is out and adds support for Xmail 1.19/1.20

http://www.webifi.com/xmail

Sorry I didn't get this out earlier.

-John





-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Xmail Administrator 0.26

2004-06-01 Thread John Kielkopf
Davide would need to add some sort of version/info command, since Xmail 
1.19 and 1.20 no longer report the platform in the banner.

Is there any real need for it?


Orion Productions wrote:

And why can't that be identified if I may ask? :-)

- Original Message - 
From: Tracy 
To: [EMAIL PROTECTED] 
Sent: Wednesday, June 02, 2004 2:23 AM
Subject: [xmail] Re: Xmail Administrator 0.26


Because the banner no longer identifies the server type that XMail is=20
running on

+0 [EMAIL PROTECTED] XMail 1.20 CTRL Server; Tue, 1 Jun=20
2004 20:22:34 -0400

That's kind of the whole point of why a new version was necessary...:)

At 20:11 6/1/2004, you wrote:

  

Hi,
Just installed it, but now the statusbar shows:
Xmail 1,20 (Unknown) !
Why the unknown?!
There used to be: Win32/Ix86
This is concerning our admin people ;-)
Kind regards,
Fr=E9d=E9ric


- Original Message -
From: John Kielkopf
To: [EMAIL PROTECTED]
Sent: Tuesday, June 01, 2004 4:55 PM
Subject: [xmail] Xmail Administrator 0.26


Xmail Administrator 0.26 is out and adds support for Xmail 1.19/1.20

http://www.webifi.com/xmail

Sorry I didn't get this out earlier.

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



  




-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Xmail Administrator 0.26

2004-06-01 Thread John Kielkopf
Alright... I'll fix the 1.2 problem in the next version.  The , is 
something else I need to take care of, and directly related to the 
aforementioned (and tied to your regional settings in windows).

As for Unknown, does it really look that bad? ;)

-John



Orion Productions wrote:

No, (for me at least) there isn't...
But I suggest that you just omit the (Unknown) then if the server type can't be 
determined.  Also displaying 1.20 instead of 1,20 would look cleaner.  The same goes 
for the XMail Server frame at the right (when a server node is selected in the tree), 
which displays Version: 1,2 now!!  (version 1.2 dates from November 12, 2001 and is 
a whole lot different from 1.20!)
I know these issues are not critical, but such things are nevertheless important for 
the overall image of your application. :)
Kind regards,
Frederic

- Original Message - 
From: John Kielkopf 
To: [EMAIL PROTECTED] 
Sent: Wednesday, June 02, 2004 2:35 AM
Subject: [xmail] Re: Xmail Administrator 0.26


In a perfect world, I shouldn't have needed to make a new version, but I 
was (and still am) doing brain-dead parsing.

Is there any real need to know the server type?

-John

Tracy wrote:

  

Because the banner no longer identifies the server type that XMail is=20
running on

+0 [EMAIL PROTECTED] XMail 1.20 CTRL Server; Tue, 1 Jun=20
2004 20:22:34 -0400

That's kind of the whole point of why a new version was necessary...:)

At 20:11 6/1/2004, you wrote:

 



Hi,
Just installed it, but now the statusbar shows:
Xmail 1,20 (Unknown) !
Why the unknown?!
There used to be: Win32/Ix86
This is concerning our admin people ;-)
Kind regards,
Fr=E9d=E9ric


- Original Message -
From: John Kielkopf
To: [EMAIL PROTECTED]
Sent: Tuesday, June 01, 2004 4:55 PM
Subject: [xmail] Xmail Administrator 0.26


Xmail Administrator 0.26 is out and adds support for Xmail 1.19/1.20

http://www.webifi.com/xmail

Sorry I didn't get this out earlier.

-John

   

  


  



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: 1.19-pre06 ...

2004-05-27 Thread John Kielkopf
Davide Libenzi wrote:

On Thu, 27 May 2004, Rob Arends wrote:

  

Davide, 

1.19 pre06 running ok on W2k sp4.
Low volume, with filters that were running on 1.17, Avfilter, XAV, and
another that I wrote myself.
Also checked POP3link, in/out bound smtp and pop3, all ok for 20 minutes
now.

No plans to test new smtp filers yet, maybe later.



Aby reports on testing the new filter command?


  

I'm having trouble understanding the difference between EXTERNAL and 
FILTER, other than the obvious difference in word.

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] CustMapsList question

2004-05-22 Thread John Kielkopf
Are the DNS queries by xmail for CustMapsList performed in parallel?


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: CustMapsList question

2004-05-22 Thread John Kielkopf
Davide Libenzi wrote:

On Sat, 22 May 2004, John Kielkopf wrote:

  

Are the DNS queries by xmail for CustMapsList performed in parallel?



Multiple threads can issue parallel request, but a single SMTP connection 
(thread) does it in a serial way.

  


Thanks for the quick answer.

Anyone know of any cross-platform (*nix/windows) tools for doing 
parallel RBL requests?  The RBLClient.pm perl module is out of the 
question because it spikes the CPU it's running on to 100% while wafting 
for response or time-out.

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Mail loop detected - Can't seem to find the problem.

2004-05-13 Thread John Kielkopf
Francesco Vertova wrote:

At 12.11 12/05/04 -0500, you wrote:

  

Why Xmail decided to use the A record from the next DNS it was
able to talk with is beyond me.



My dns reports MX information for bioenergy.com as Non-authoritative. It 
seems - I've seen this other times - that in such a case the XMail internal 
resolver fails, so it falls back on A.

Ciao, Francesco

  

Hmmm... Interesting.


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Mail loop detected - Can't seem to find the problem.

2004-05-12 Thread John Kielkopf
Davide Libenzi wrote:

On Wed, 12 May 2004, Bill Healy wrote:

  

You have an A record that points back to yourself
bioenergy.com.  3580IN  A   207.67.28.220

Don't know why xmail is giving preference to the A record when an MX
record exists. Interesting
bioenergy.com.  3529IN  MX  10 64.122.83.163.



The A record lookup is the backup solution if the MX cannot be found.



- Davide

  


Turns out one of the DNS server that mail server uses wasn't responding 
at all.  Why Xmail decided to use the A record from the next DNS it was 
able to talk with is beyond me.

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: 1.19

2004-05-05 Thread John Kielkopf

Inside @@FILE,  is RCPT TO:... resolved to the real address (if
applicable)?  If not, is there an easy way to do this without having
my filter use the admin protocol?



ATM it's not resolved, but I asked Davide, too. And the admin protocol is to
slow for the filter at SMTP DATA stage and causes to much load.
  

Yeah, I assumed it wasn't resolved.  And yes, the admin protocol is too slow for 
this...  I was hoping I could use SMTP filters to DNSBL on a per domain/per user basis 
- without having to receive the entire message first - but without knowing the 
resolved user/domain, things get too messy.

I looked through the list, but couldn't find your exchange with Davide on this.  Was 
he planing on adding it?

Surely Xmail has already resolved the recipients internally at this point?  If so, it 
would be nice to have access to those resolved addresses, even if just a delimited 
list contained in a macro. 


-John



-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: 1.19

2004-05-04 Thread John Kielkopf
Davide Libenzi wrote:

Ok, I added @@USERAUTH, @@REMOTEADDR and @@LOCALADDR


  

Inside @@FILE,  is RCPT TO:... resolved to the real address (if 
applicable)?  If not, is there an easy way to do this without having my 
filter use the admin protocol?

-John


-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



[xmail] CustMapsList / Allow mail

2004-02-03 Thread John Kielkopf
Any easy way to get Xmail to not refuse mail from servers listed in a black list on a 
per domain or per user basis, without putting those domains on a different server, and 
without using a filter that has to wait for the entire email to be received before 
refusing it?
Thanks,
-John

-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]



  1   2   >