On Mar 24, 2007, at 4:36 AM, Peter Normann wrote:
Quey wrote:
I've read that use of SQL for vpopmail is really only advantageous
when you get many domains.
Not exactly. SQL is advantageous if you somewhere down the road
want to
implement a web based management system for administering
You might want to make sure that MySQL is started before authdaemond.
Edit /usr/local/etc/rc.d/courier-authdaemond.sh and add this line:
REQUIRE: LOGIN mysql-server
To understand REQUIRE a little better, cd /usr/local/etc/rc.d and
grep for REQUIRE in the startup files. It's purpose should
SOLVED!
Read on
On May 25, 2005, at 1:37 PM, Tom Collins wrote:
On May 24, 2005, at 7:25 PM, Matt Simerson wrote:
So, I turned to vmysql.c and noticed a timeout setting there that
affects the mysql connection timeout. I bumped it up from 2 to 5, and
it has reduced the failure frequency
Problem: vpopmail authentications failing randomly
grep vchkpw /var/log/maillog | grep -v success | grep dlb
May 24 11:45:03 mail01 vpopmail[40833]: vchkpw-pop3: vpopmail user
not found [EMAIL PROTECTED]:67.92.111.22
May 24 11:50:03 mail01 vpopmail[41401]: vchkpw-pop3: vpopmail user
not found
++ 866.528.3530 ++ 815.776.9465
int'l
kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
GnuPG Key ID: 481BF7E2 ++ jabber:[EMAIL PROTECTED]
``
Matt Simersonhttp://matt.simerson.net
SMTP AUTH and should be directed to use that instead.
Matt
``
Matt Simersonhttp://matt.simerson.net
The Network People Inc. http://www.tnpi.biz
The chief danger in life is that you may take too many
My first guess is that you need to figure out why SQL queries to your
server fail and you'll have the answer to your problem.
Write a script that asks your server lots and lots of queries just like
a busy mail server would. Check and verify the results and I'm sure
you'll find some clues as
On Thursday, March 27, 2003, at 06:28 PM, Raboo wrote:
lol ya all :-)
btw matt simerson, if you code hacks to make your smtpd do more loging
like
you said before that you have made it do logging of what kinds of
blocks it
does, please feel free to publish them if you like, if not allready
I'm not exactly sure when it quit but I've noticed that authentications
via vchkpw are no longer logged. Vpopmail is configured as follows and
my pop3 daemon is qmail, run as shown below. I've also attempted
logging via syslog (rather than multilog) and I still get no
authentication logging.
Apparently a server named ns1.inter7.com is doing the delivery for
the vchkpw mailing list. This wouldn't be a problem except that it
doesn't have reverse DNS.
I started blocking connections to my mail server from servers who don't
have DNS and my vpopmail and qmailadmin list traffic stopped.
On Thursday, March 27, 2003, at 10:35 AM, Ron Guerin wrote:
On Thu, 2003-03-27 at 10:21, Matt Simerson wrote:
Apparently a server named ns1.inter7.com is doing the delivery for
the vchkpw mailing list. This wouldn't be a problem except that it
doesn't have reverse DNS.
I started blocking
Oh my, Nick top-posted. Quickly, someone call out the firing squad.
Where you choose to reply to in a message body is a matter of personal
preference. It is NOT a breach of email etiquette to prefer a way other
than your personal preference. In a list thread, many tend to prefer a
top-post
On Tuesday, March 25, 2003, at 04:25 PM, Robin Bowes wrote:
I'm about to release a new 5.3.20 devel version.
Does anyone have any patches they would like to submit?
No, but would it be difficult to move mysql options from vmysql.h to
configure options, e.g.
./configure \
On Thursday, March 27, 2003, at 01:18 PM, Rick Updegrove wrote:
- Original Message -
From: Matt Simerson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 7:21 AM
Subject: [vchkpw] Inter7 mail server doesn't have reverse DNS!
I started blocking connections to my mail
On Thursday, March 27, 2003, at 01:35 PM, Tom Collins wrote:
On Thursday, March 27, 2003, at 10:22 AM, Paul Theodoropoulos wrote:
rather than trumping up your argument with etiquette fascism, how
about pointing out a relevant RFC that backs up your [baseless]
opinion that a mailserver must
Sharing the tcp.smtp.cdb file over TCP is not a good idea. Once your
traffic starts picking up, you'll have all sorts of problems with that.
Check out the writeup I have on exactly this scenario:
http://matt.simerson.net/computing/mail/qmail/qmail.toaster.open-
smtp_writeup.txt. There
I now do this with my mail toaster setup
(http://matt.simerson.net/computing/mail/toaster/).
When you run the perl script (toaster_setup.pl -s vpopmail) it asks you
a bunch of questions and then rewrites vmysql.h with your answers
instead of the default values. Then it runs ./configure with
I'm sure I'm about to display my ignorance of C but:
Is there a way to override the values find in a .h file from the
command line? Specifically, I want to pass along a couple defines to
set the MYSQL_MASTER_PASSWD and related fields from vmysql.h without
having to edit the vmysql.h file
OK, I attempted to pass them via make:
make -DMYSQL_UPDATE_SERVER=\db.simerson.net\
-DMYSQL_UPDATE_USER=\vpopmail\ -DMYSQL_UPDATE_PASSWD=\secret\
-DMYSQL_READ_SERVER=\localhost\ -DMYSQL_READ_USER=\vpopmail\
-DMYSQL_READ_PASSWD=\secret\
but that didn't work. So, I set the CFLAGS environment
Kit, you're reinventing the wheel!
Yes, there are significant problems with simply merging together a
bunch of the qmail patches. It took me quite some time to get all the
patches I wanted to play nicely together. Now that it's done, feel
free to use it:
I've been working on integrating SpamAssassin into my FreeBSD mail
toaster setup (and it'll work similarly with Bill's or any other
vpopmail setup).
One of the biggest problems I've found is the lack of good vpopmail
support in SpamAssassin. I've hacked it up and added some of my own
code to
On Wednesday, October 9, 2002, at 08:43 PM, Justin R. Miller wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Said Matt Simerson on Wed, Oct 09, 2002 at 03:30:55PM -0400:
Otherwise, Doug's heading down the right path. Write yourself a script
that loops for each domain, and then each
, 2002, at 04:03 PM, Matt Simerson wrote:
I'm rebuilding a dinosaur mail server that I built a couple years ago.
It's running vpopmail 4.9.10 using cdb authentication. I'm upgrading
to 5.3.8 with MySQL authentication.
I've build out the new 5.3.8 system and cluster of machines. It's all
up
This is a valid argument for having each domain created/owned by an
unprivileged system user. When you do that, you have handy tools like
repquota to help you manage your disk space usage. When used in
conjunction with a perl script, I can format and report the disk space
for 10,000 domains
. D. Lee wrote:
Hi Matt,
On 2002.09.24_16:03:52_+, Matt Simerson wrote:
Everything on the new system works just fine except the vconvert
function. Can anyone verify that vconvert actually does work?
Yes, it actually works. Below are the steps I have taken to come up
I'm rebuilding a dinosaur mail server that I built a couple years ago.
It's running vpopmail 4.9.10 using cdb authentication. I'm upgrading to
5.3.8 with MySQL authentication.
I've build out the new 5.3.8 system and cluster of machines. It's all
up, running and happy. I've NFS mounted all the
On Friday, September 6, 2002, at 07:10 AM, David Phillips wrote:
Paul Fries writes:
Yeah I have been really pulling my hair out over that one. =) With as
many Pop-3 connections/sec that our servers handle I thought that I
would make things a little smoother if Vpopmail didn't write the
Paul,
You are exactly correct. Even when using my patch, vpopmail continues
to update the tcp.smtp.cdb file. There's one reason for that. The first
is that my suggestion for adding a --dont-update-tcprulesfile=true was
never implemented. Granted, it would only benefit a few users (really
Title: Message
Gee, I
think so. One of my mail systems has 6,000 domains and way more users than
that.
shameless plug Someone even went through the bother of
documenting how to do it at http://matt.simerson.net/computing/qmail/qmail.toaster.shtml
/plug
Matt
PS:
Version 2.0 of the
Just wondering really quickly, what types of encryption does vpopmail use?
I'm guessing that on FreeBSD, if I have the default set to MD5, then
vpopmail will only be able to verify MD5 passwords. Is that correct?
If so, how do I extend it to support DES as well (like FreeBSD's crypt
routines)?
Hardcore unix veterans don't use PINE. :-P
Hardcore folks won't use anything that doesn't use vi as it's editor. I'm
not hardcore, I've only been using unix for 12 years so I use pine because
gack a) I've already hacked it to support Maildir b) It supports
POP/IMAP accessing my other
Title: OT: Hardware platform
It all
depends on a lot of factors, most important ones being the speed of your
disk(s), the drive layout, drive optimizations, MTA performance optimizations,
activity of users, and a whole bunch more factors. I wouldn't put many more than
10,000 on any one
Oh, _that's_ what you did.
Yes, you were correct. You should probably refer to the version of my
toaster recipe when you specify what you did. Then I can figure it out
better. I have systems that use each type of recipe (full mysql relay only
mysql) and once the replication is all sorted out
-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 05, 2001 3:01 AM
To: Gabriel Ambuehl
Cc: [EMAIL PROTECTED]
Subject: Re: Error trying to compile + new mysql replication release
I guess we could do that. It would be easier to impliment a
list of
Make sure the clocks are syncronized on all the POP servers. Having
incorrect or out of sync dates will cause such fun stuff.
Matt
-Original Message-
From: David Gartner [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 30, 2001 10:28 AM
To: [EMAIL PROTECTED]
Subject: Vpopmail+Qmail
I've been down this road and that's a terrible way to do it. Why? Because
for every SMTP connection you have to initiate a connection to the database.
That's expensive. What you really want to do is have the tcpserver program
make a persistent connection to the database and query it for every
.
Matt
-Original Message-
From: Sean C Truman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 30, 2001 12:52 PM
To: Matt Simerson; Ken Jones; Dave 'Duke of URL' Weiner
Cc: [EMAIL PROTECTED]
Subject: Re: mysql high availability
Matt,
I can provide you with load specifications
Hi Ken (et al),
I've found another place where the multiple UID/GID feature isn't quite
completely implemented. I've built another mail toaster with
qmail/vpopmail/qmailadmin and each domain is a unique UID/GID. The main
difference is that I am using MySQL authentication on this one. I've got
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 26, 2001 1:53 PM
To: [EMAIL PROTECTED]
Subject: Couple of problems..
Well, this definitely didn't go over as smoothly as I had hoped..and of
course,
no one called to let me know that
Hi all,
RFC 2821 and 2822 are official now:
ftp://ftp.isi.edu/in-notes/rfc2821.txt
ftp://ftp.isi.edu/in-notes/rfc2822.txt
They replace the 821 and 822 RFC's for SMTP mail servers and services and
message formatting and make for some very interesting and insightful bedtime
reading.
The
Ken (et al),
I have a couple modifications I'd like to see in vpopmail-4.9.11. I haven't
seen any of this in the changelogs yet...
First: Bug fix.
Fix the vdelivermail crashing problem I described a while back:
postmaster set's user account bob as default delivery.
user
I've written a perl script that goes through and counts every individual
user in every vpassword file on the system (to see how many users exist). It
would be pretty easy to parse through all the vpassword files and dump the
contents into a MySQL table.
I've been tempted to do this but myself
Go to google, type in "qmail anti-spam" and hit enter.
Learn the tools you use, it'll keep surprises from biting thee squarely in
the
Matt
-Original Message-
From: Calvin Crutcfield [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 10, 2001 12:30 AM
To: vchkpwd
Subject: HELP, I'm
Ken,
Did you install an intelligence filter. ;-)
My messages get right through.
Matt
-Original Message-
From: Daniel Hardaker [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 02, 2001 4:31 PM
To: [EMAIL PROTECTED]
Subject: Whats going on?
Just wondered whats going on with
More importantly is the contents of your tcp.smtp file. If you've got a
0.0.0.0 in there, or just a default :RELAYCLIENT line, then you are allowing
everyone to relay. I've got a hacked version of tcpserver that will check
the SQL table directly for each SMTP session to determine if that IP is
How
many processes can your machine handle? How fast is your IDE drive, how
much other crap are you running on the server. There is no single answer to your
question other than "it depends" and it depends on a lot of stuff. With only 500
domains, your concurrent settings are probably just
Hi vpopmailers,
I've updated my mail toaster recipe at
http://matt.simerson.net/computing/qmail.toaster.shtml.
The primary differences are:
1) includes code modifications to vpopmail to use MySQL for ONLY the
open-smtp relay feature.
2) includes code modifications to tcpserver to query a
Currently qmailadmin will allow a user to specify a default (catch all)
account and then delete that default mailbox. This of cource causes
vdelivermail to crash when attempting to deliver messages.
This could be fixed in one of two ways.
a) don't allow a default account to be deleted
b)
Pine works just fine as POP3 or IMAP client so have your users configure
PINE on the shell server to access their email via POP or IMAP. How much
easier can it be?
Matt
-Original Message-
From: Tim Hunter [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 12, 2001 11:06 AM
To: [EMAIL
I have two issues: The first is a feature request for the vmoduser program.
It appears that at present there is no way to disable qmailadmin. This would
be a most welcome addition to the vmoduser program and hopefully more people
than I would find it useful to be able to easily disable a domains
Hi List,
I have an interesting little story that all of you might find quite
interesting. It has a happy ending but I'd also like a little feedback from
the rest of you on other possible solutions to this.
Six months ago I built, and pushed into production a mail server, running on
5 FreeBSD
, 2001 3:05 PM
To: Dan Phoenix
Cc: Matt Simerson; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'
Subject: Re: vpopmail and sqwebmail running as root
Dan Phoenix wrote:
Complete bullshit pardon the termsplease provide docs on not
running as root. I think this should have been done
[mailto:[EMAIL PROTECTED]]
Sent: Friday, February 23, 2001 4:16 PM
To: Matt Simerson; '[EMAIL PROTECTED]'
Subject: RE: Virtual User, symlink, Mutt...
At 1:40 PM -0700 2/23/01, Matt Simerson wrote:
Does it have to be Mutt or can he use Pine?
I'm not sure. Pine was pulled from the OpenBSD
While this isn't the "nicest" method of getting a server hammered, you can
forge a bunch of emails with from and reply-to addresses of
"[EMAIL PROTECTED]" and then use some spamming software to mail out a
few hundred thousand messages. Within minutes you'll get 10's or hundreds of
mail servers
Well, I found the breaking point of vpopmail's open-smtp feature to be about
1500 domains (in an NFS environment). The actual breaking point isn't really
related to the amount of domains/users but rather how many and how freqently
your clients open POP/IMAP sessions. I was forced to move away
it's pretty easy for me to hack together tweaks that I
need to make all the parts of my mail server play nicely together.
Matt
-Original Message-
From: Chris Shenton [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 22, 2001 12:22 PM
To: Matt Simerson
Cc: '[EMAIL PROTECTED]'
Subject
I for one really like that feature. All the accounts on my system are based
upon a system UID/GID. Within that users home dir is the domains dir which
has a list of all their domains. Since all their domains are symlinked
there, it's a handy dir to glob for that info.
I for one prefer it that
This is cool, and stunnel does work quite well (I use it elsewhere) but it's
much easier to just install Courier IMAP which includes a qmail (Maildir)
happy version of a POP3, POP3-SSL, IMAP, and IMAP-SSL server. What advantage
is there to using qmail's POP3 daemon with stunnel over Courier
, not only are you rude
and inconsiderate, but now I know that you're a liar too.
I later posted to the list about the fact that vpopmail only uses DES.
Matt
Simerson said "it is silly to say that DES is insecure" and I disagreed.
He
then sent me a hashed password string betting m
One of the coolest things FreeBSD has done is include a little intelligence
in their DES crypt libraries. When checking a password (against the system
password files or MySQL) the DES libraries determine whether they're
checking a MD5 or DES password.
Unfortanately, the reverse is not true. The
I can't see how that could possibly be construed as a security drawback. POP
is inherently insecure in the first place (sending clear text passwords
across the net) and password sniffing is much more of a problem (and the
easiest way to collect passwords) than people cracking passwords.
So,
That program is named "stunnel". :-)
Matt
-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 09, 2001 7:44 AM
To: Artem Koutchine
Cc: [EMAIL PROTECTED]
Subject: Re: Secure SMTP/POP3
Artem Koutchine wrote:
Hi!
I'd like to know how to setup some
Ken (et al),
First, and foremost, why do you care what the script kiddies on #openbsd say
about your code? Seriously. Most of the people that loiter around on irc
channels are either extremely competent people who have gravy jobs and can
sit around and talk about all the cool stuff they've done.
-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 05, 2000 9:06 AM
To: Matt Simerson
Cc: 'Brumm Dominik'; '[EMAIL PROTECTED]'
Subject: Re: Bug in qmailadmin 0.39
Matt Simerson wrote:
Well, it's remotely possible that the problem
The other option here is to use the pop3s (and pop3) server that ships with
Courier IMAP which authenticates using the vchkpw method and handles all
that fun stuff for you.
Matt
-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 05, 2000 12:34 PM
Using vpopmail 4.9.6, qmailadmin 0.39, sqwebmail 1.0.3, and courier-imap
1.2.2.
Sqwebmail and Courier-IMAP are both compiled using the new preauthvchkpw.c
file.
I'm using vpopmail's feature so that each domain is created under a unique
system user name. So, domain.com is owned by sytem user
There's a couple ways to do this and I opted for the easy way, I set up a
user mapping in /home and wrote a quick perl script to create my a/aa/,
a/ab/ tree structure. Then I use FreeBSD's pw utility to create the user and
hand it my custom path name.
Matt
-Original Message-
From:
I would like to see a new option available to the vdelivermail program.
Currently it can be given a parameter such as "bounce-no-mailbox" or a
directory to deliver messages to. I'd like to be able to deliver messages
that have no match in the vpasswd file to a filename (/dev/null in
particular).
I've installed the new vpopmail 4.9.5 and created a couple users under
system users other than vpopmail and they work just fine for mail delivery
and pop but neither sqwebmail nor courier-imap will authenticate users whose
UID/GID is not vpopmail/vchkpw.
Courier-imap has it's own authentication
up scripts that feed the log files
through the processors and graph how many messages the servers are handling,
cpu load, and network activity in something pretty like MRTG.
Matt
-Original Message-
From: Matt Simerson [mailto:[EMAIL PROTECTED]]
Sent: Sunday, October 15, 2000 5:44 PM
Change
the invocation of your SMTP server from "-x /home/vpopmail/etc/tcp.smtp.cdb"
back to the default "-x /etc/tcp.smtp.cdb" and that should do it for you. This
assumes that you did NOT override the default /etc/tcp.smtp database when you
invoked "configure" while compiling vpopmail.
Well, you know...
If you're using daemontools, it's pretty easy to have it trigger a script
every time your log file reaches a predefined limit. This script can process
the logs (using qmail's optional tools) and you could easily feed that
output through whichever of the z* tools that spits out
72 matches
Mail list logo
