qmail Digest 7 Jun 1999 10:00:01 -0000 Issue 664

Topics (messages 26366 through 26384):

rblsmtp with many RBLs
        26366 by: Lars Marowsky-Bree <[EMAIL PROTECTED]>
        26368 by: [EMAIL PROTECTED]
        26372 by: [EMAIL PROTECTED] (John R. Levine)

Messages reinjected to this mailing list
        26367 by: Harald Hanche-Olsen <[EMAIL PROTECTED]>

LOTS of Orbs hits
        26369 by: Paul Schinder <[EMAIL PROTECTED]>
        26383 by: "Petr Novotny" <[EMAIL PROTECTED]>

ETRN in qmail
        26370 by: Ranjan Koirala <[EMAIL PROTECTED]>

RRSS, was LOTS of Orbs hits
        26371 by: [EMAIL PROTECTED] (John R. Levine)
        26374 by: Paul Schinder <[EMAIL PROTECTED]>
        26375 by: John R Levine <[EMAIL PROTECTED]>

qmail newbie question
        26373 by: Gerald Willmann <[EMAIL PROTECTED]>
        26376 by: Faried Nawaz <[EMAIL PROTECTED]>
        26378 by: Gerald Willmann <[EMAIL PROTECTED]>
        26384 by: Faried Nawaz <[EMAIL PROTECTED]>

Getting Maildir + IMAP working
        26377 by: "Jan Stanik" <[EMAIL PROTECTED]>
        26380 by: Dave Teske <[EMAIL PROTECTED]>

rcpthosts info
        26379 by: Wilson Fletcher <[EMAIL PROTECTED]>

pop server crashing nightly
        26381 by: "Peter Samuel" <[EMAIL PROTECTED]>

Password Authentication
        26382 by: Manohar Pradhan <[EMAIL PROTECTED]>

Administrivia:

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To bug my human owner, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------


Okay, somehow I had missed rblsmtp, thanks for pointing it out.

I am since then using it with 

MAPS="rbl.maps.vix.com mr-out.imrss.org relay.orbs.org relays.radparker.com"

for MAP in $MAPS ; do
    RBLSMTPD="$RBLSMTPD /usr/local/bin/rblsmtpd -R -b -r $MAP "
done

I hope I did not forget any RBL I could have used ;-)

Now, this implies I am running through all of them in sequence. 4 DNS lookups.
And maybe there will be more RBLs in the future... Is anyone working on 
making rblsmtp parallelize the DNS lookups ?

Sincerely,
    Lars Marowsky-Br�e
        
--
Lars Marowsky-Br�e
Network Management

teuto.net Netzdienste GmbH - DPN Verbund-Partner





there are as many RBL's as there are acronyms,
theres dul.maps.vix.com for dialup-ip's
and dssl.imrss.org for the same purpose (i belive.)


end
+-------------------------
|Greg Albrecht  &&  KF4MKT  
|Safari Internet  &&  Fort Lauderdale, FL  
|www.safari.net  &&  (954)537-9550
+--
|"You can mount our Windows shares?!"
|-Sean @ AI                          
+--
|Are you on the FUUX list? 
|[EMAIL PROTECTED]
+----------------------------

On Sun, 6 Jun 1999, Lars Marowsky-Bree wrote:

>Okay, somehow I had missed rblsmtp, thanks for pointing it out.
>
>I am since then using it with 
>
>MAPS="rbl.maps.vix.com mr-out.imrss.org relay.orbs.org relays.radparker.com"
>
>for MAP in $MAPS ; do
>    RBLSMTPD="$RBLSMTPD /usr/local/bin/rblsmtpd -R -b -r $MAP "
>done
>
>I hope I did not forget any RBL I could have used ;-)
>
>Now, this implies I am running through all of them in sequence. 4 DNS lookups.
>And maybe there will be more RBLs in the future... Is anyone working on 
>making rblsmtp parallelize the DNS lookups ?
>
>Sincerely,
>    Lars Marowsky-Br�e
>       
>--
>Lars Marowsky-Br�e
>Network Management
>
>teuto.net Netzdienste GmbH - DPN Verbund-Partner
>





>MAPS="rbl.maps.vix.com mr-out.imrss.org relay.orbs.org relays.radparker.com"
>I hope I did not forget any RBL I could have used ;-)

You should use dul.maps.vix.com which lists dialup ports that
shouldn't be sending direct mail.  Imrss has problems similar to ORBS,
bad attitude on the part of the guy who runs it.

-- 
John R. Levine, IECC, POB 727, Trumansburg NY 14886 +1 607 387 6869
[EMAIL PROTECTED], Village Trustee and Sewer Commissioner, http://iecc.com/johnl, 
Member, Provisional board, Coalition Against Unsolicited Commercial E-mail




+ "D. J. Bernstein" <[EMAIL PROTECTED]>:

| Last night, [EMAIL PROTECTED] reinjected thirty old messages
| from various authors to [EMAIL PROTECTED]

In case anyone, like me, would like to purge their own archives of
this list of the reinjected messages, they appear to be the messages
numbered 31855-31884 inclusive, as numbered in envelope sender
addresses.  These were all injected into the queue by uid 0 on
mail.ordertek.com in the 66 second time period from 4 Jun 1999
22:40:33 -0000 to 4 Jun 1999 22:41:39 -0000.

- Harald




On 05 Jun 1999 21:49:04 -0700, Russ Allbery wrote:
>
>As a side note, I'd strongly recommend dumping ORBS in favor of a more
>ethical blackhole list.  The maintainer of ORBS has gone on public record
>as blocking hosts because he "doesn't like their attitude," even if spam
>has never gone anywhere near them.
>
>I've heard good things about RRSS (<URL:http://relays.radparker.com/>) and
>the person running it certainly seems to be much calmer and more
>professional about it.

I saw this site mentioned on the Tidbits Talk list about a week ago. I
took a look, and I didn't see anything very useful. It looked to me like a
Vixie RBL clone, only listing sites that had already spammed. I rarely get
RBL hits, and would guess that RRSS hits would be equally as rare.

The usefulness of ORBS to me has always been that they do list sites that
have never spammed but are open to abuse. From what you say above, it
looks like its finally time to dump ORBS. It's always been an
administrative headache, since so many sites that send us legitimate mail,
including Goddard's own main mail servers, are in ORBS. But I will miss
the before-the-fact prevention.

>
>-- 
>Russ Allbery ([EMAIL PROTECTED])         <URL:http://www.eyrie.org/~eagle/>
>

--------
Paul J. Schinder
NASA Goddard Space Flight Center
Code 693
Greenbelt, MD 20770
[EMAIL PROTECTED]





-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> What I want, of course, is the IP address the
> connect was from.  Has anybody patched rblsmtpd to log that >already?

This is what I did:
- ------- cut here -------
+++ rblsmtpd-0.70/rblsmtpd.c    Mon May 10 21:19:25 1999
@@ -75,6 +75,9 @@
        break;
       default:
         if (!stralloc_copys(&message,flagbounce ? "553 " : "451 ")) die_sys();
+       if (!stralloc_cats(&message,"(Remote IP: ")) die_sys();
+       if (!stralloc_cats(&message,x)) die_sys();
+       if (!stralloc_cats(&message,") ")) die_sys();
         if (!stralloc_cat(&message,&rbltext)) die_sys();
     }
   }
- ---- cut here ---
It works and I didn't see any leaks - after all, rblsmtpd exits frequently
anyway.

Comments anyone?

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2 -- QDPGP 2.60 
Comment: http://community.wow.net/grt/qdpgp.html

iQA/AwUBN1uGWlMwP8g7qbw/EQKd/wCdG30BZum9Ejmai7fBuNd/xCDx4WgAnjY8
Zylw0Hq5XfKcB5nSp5sjxniD
=yUPk
-----END PGP SIGNATURE-----
--
Petr Novotny, ANTEK CS
[EMAIL PROTECTED]
http://www.antek.cz
PGP key ID: 0x3BA9BC3F
-- Don't you know there ain't no devil there's just God when he's drunk.
                                                             [Tom Waits]




Hi,
Sorry for the double posting.
Whats this ETRN stands for and does qmail supports this. Is there any
sites, reference where I can look at. I am not on the list, pls send
personally.


Thanx

ran




>>I've heard good things about RRSS (<URL:http://relays.radparker.com/>) and
>>the person running it certainly seems to be much calmer and more
>>professional about it.
>
>I saw this site mentioned on the Tidbits Talk list about a week ago. I
>took a look, and I didn't see anything very useful. It looked to me like a
>Vixie RBL clone, only listing sites that had already spammed. I rarely get
>RBL hits, and would guess that RRSS hits would be equally as rare.

On the contrary, I get scads of delivery attempts from hosts in RRSS.

RRSS is like ORBS in that when an IP is nominated, it sends a relay
test and adds the host immediately if the relay test succeeds.  This
can take as little as a minute or two.  Many sites, including mine,
have spam trap addresses set up to automatically send nominations to
RRSS whenever spam arrives from an unknown address, meaning that a new
relay is typically listed within a few minutes of starting a spam run.

>The usefulness of ORBS to me has always been that they do list sites that
>have never spammed but are open to abuse.

That's part of the problem -- the vast majority of hosts in ORBS have
never relayed any spam and never will, and I hope we agree that the
goal is not to block legitimate non-spam mail.  RRSS lists actual open
spam relays, and gets them in promptly.





-- 
John R. Levine, IECC, POB 727, Trumansburg NY 14886 +1 607 387 6869
[EMAIL PROTECTED], Village Trustee and Sewer Commissioner, http://iecc.com/johnl, 
Member, Provisional board, Coalition Against Unsolicited Commercial E-mail




On 6 Jun 1999 13:23:01 -0400, John R. Levine wrote:
>
>>>I've heard good things about RRSS (<URL:http://relays.radparker.com/>)
and
>>>the person running it certainly seems to be much calmer and more
>>>professional about it.
>>
>>I saw this site mentioned on the Tidbits Talk list about a week ago. I
>>took a look, and I didn't see anything very useful. It looked to me like
a
>>Vixie RBL clone, only listing sites that had already spammed. I rarely
get
>>RBL hits, and would guess that RRSS hits would be equally as rare.
>
>On the contrary, I get scads of delivery attempts from hosts in RRSS.
>
>RRSS is like ORBS in that when an IP is nominated, it sends a relay
>test and adds the host immediately if the relay test succeeds.  This
>can take as little as a minute or two.  Many sites, including mine,
>have spam trap addresses set up to automatically send nominations to
>RRSS whenever spam arrives from an unknown address, meaning that a new
>relay is typically listed within a few minutes of starting a spam run.

But how is this different from Vixie RBL, except for the openness check?
Or are you saying that if a site does spam but turns out not to be open it
doesn't get listed?

>
>>The usefulness of ORBS to me has always been that they do list sites that
>>have never spammed but are open to abuse.
>
>That's part of the problem -- the vast majority of hosts in ORBS have
>never relayed any spam and never will, and I hope we agree that the
>goal is not to block legitimate non-spam mail.  RRSS lists actual open
>spam relays, and gets them in promptly.

Yes, that is the problem with ORBS. So many of the sites that we get
legitimate mail from, including universities, other NASA sites, and ISP's
both national and regional, are in the ORBS that I have a large list of
sites permitted to tunnel through, and I have to keep a close eye on my
logs. Maybe I will dump ORBS and give RRSS a try.

>
>
>
>
>-- 
>John R. Levine, IECC, POB 727, Trumansburg NY 14886 +1 607 387 6869
>[EMAIL PROTECTED], Village Trustee and Sewer Commissioner,
http://iecc.com/johnl,
>Member, Provisional board, Coalition Against Unsolicited Commercial E-mail
>

--------
Paul J. Schinder
NASA Goddard Space Flight Center
Code 693
Greenbelt, MD 20770
[EMAIL PROTECTED]





> But how is this different from Vixie RBL, except for the openness check?

RBL listings are entered manually, after live people review them, which takes
a long time.  RRSS runs automatically so listings are entered in real time. 

> Or are you saying that if a site does spam but turns out not to be open it
> doesn't get listed?

RRSS is a list of spam relays.  It doesn't try to be a list of spammers.  If
spam comes from a system that's not a relay, it might be an evil spam
factory, or it might be a legitimate ISP who happens to have a hit-and-run
spammer.  No automated system can distinguish those. 

Regards,
John Levine, [EMAIL PROTECTED], Primary Perpetrator of "The Internet for Dummies",
Information Superhighwayman wanna-be, http://iecc.com/johnl, Sewer Commissioner
Finger for PGP key, f'print = 3A 5B D0 3F D9 A0 6A A4  2D AC 1E 9E A6 36 A3 47 






Hi there, just finished installing qmail and it seems to work fine. Only
have the following questions:

BINMAIL.remove told me to remove /bin/mail but link it to some other
mailer, eg mailx. Since I don't have mailx, what are other options? Can
I somehow use qmail-inject? 

Under sendmail I could mail people at other stanford hosts by simply using
someone@hostname as the address, without .stanford.edu. How can I achieve
the same with qmail?  

Finally I saw in the FAQ how to configure pine to use qmail-inject instead
of SMTP - what are the pros and cons?

thanks in advance,  Gerald





[EMAIL PROTECTED] (Gerald Willmann) writes:

  BINMAIL.remove told me to remove /bin/mail but link it to some other
  mailer, eg mailx. Since I don't have mailx, what are other options? Can
  I somehow use qmail-inject? 

What is your operating system?

  
  Under sendmail I could mail people at other stanford hosts by simply using
  someone@hostname as the address, without .stanford.edu. How can I achieve
  the same with qmail?  

See the man page for qmail-inject and read up on defaulthost and
defaultdomain. 


faried.
-- 
[an error occurred while processing this directive]




On 6 Jun 1999, Faried Nawaz wrote:

>   BINMAIL.remove told me to remove /bin/mail but link it to some other
>   mailer, eg mailx. Since I don't have mailx, what are other options? Can
>   I somehow use qmail-inject? 
> 
> What is your operating system?

linux 2.0.32, libc5, RH4.0 
  
>   Under sendmail I could mail people at other stanford hosts by simply using
>   someone@hostname as the address, without .stanford.edu. How can I achieve
>   the same with qmail?  
> 
> See the man page for qmail-inject and read up on defaulthost and
> defaultdomain. 

well, I had/have stanford.edu in defaultdomain but it does not work. 
[gerald@willmann control]$ ls
defaultdomain  locals         me             plusdomain     rcpthosts
[gerald@willmann control]$ cat defaultdomain
stanford.edu
Just tried to send an email to geraldw@leland and get mailer-domain
complaining that: Sorry, I couldn't find any host named leland. (#5.1.2)  

thanks,  Gerald 







[EMAIL PROTECTED] (Gerald Willmann) writes:

  linux 2.0.32, libc5, RH4.0 

Do you have /usr/bin/Mail, or perhaps is mailx part of some package on your 
CD?  /usr/bin/Mail should work in place of mailx.


  well, I had/have stanford.edu in defaultdomain but it does not work. 

I'm not certain about this, but what's in your /etc/resolv.conf?

I have 

search mydomain.com.
nameserver ...
nameserver ...

and I sent mail to [EMAIL PROTECTED] from baz.mydomain.com by simply
typing "mail fn@foobar".
  
  
faried.
-- 
[an error occurred while processing this directive]




Hi,

        I read this thread, and still don't see, whether is possible to give imap 
server 
(uw or cyrus) with qmail's maildirs the same functionality like with mailboxes. I 
would like to use imap+qmail+maildirs for our customers, but don't want to run 
into the problems. Does anyone really use imap and maildirs, or is better to 
use mailboxes for this time?
        
                                            
                                                                                       
                                         Jano
                                                                                       
                           [EMAIL PROTECTED]
                                                                                       
                                                                         
        
 




Jan,

There is a problem with the UW IMAP server that prevents it from 
transferring between different types of mailboxes, so it's not really fully 
functional when used with Maildirs. You can read the mail in the Inbox but 
you can't move that mail to a sub folder. Cyrus uses a similar design to 
Maildirs (ie each message is a separate file) and handles sub folders with 
no problems. I've just switched to Cyrus and am happy with it thus far.

Hope this helps
--Dave

At 05:41 PM 6/6/99 , Jan Stanik wrote:
>Hi,
>
>         I read this thread, and still don't see, whether is possible to 
> give imap server
>(uw or cyrus) with qmail's maildirs the same functionality like with 
>mailboxes. I
>would like to use imap+qmail+maildirs for our customers, but don't want to 
>run
>into the problems. Does anyone really use imap and maildirs, or is better to
>use mailboxes for this time?
>
>
> 
 >                                                      Jano
                                                                             
                                        [EMAIL PROTECTED]
                                                                             
                                                                             


>





Read FAQ #5.4.

You have two choice inetd or tcpserver. A lot of people recommend tcpserver 
available from www.qmail.org. I use inetd without any problems (yet) 
though.

Also read : The newbie's guide to relaying by Chris Johnson : 
http://www.palomine.net/qmail/relaying.html and life with qmail by David 
Sill : http://web.infoave.net/~dsill/lwq.html

You should definitely browse through http://www.qmail.org

regards,

Wilson

On Friday, June 04, 1999 9:07 PM, Robert Schader 
[SMTP:[EMAIL PROTECTED]] wrote:
> Hello all,
> I am new to qmail and am working on migrating to it from a system
> called Post.Office from www.software.com. I have had a little experience
> with sendmail, but not much. Anyway, I have looked at the FAQ and tried
> searching the mailing list and have not found an answer to my question.
> Here it is:
>
> It seems to me that the rcpthosts functionality is reversed from what it
> should be. I thought that maybe the functionality I wanted was to be 
found
> in the locals file, but that seems to control what machines qmail will
> accept mail for and hold locally. Following what appears to be the noted
> practice of duplicating this in the rcpthosts file, I assumed this would
> allow any of the machines in rcpthosts to relay through qmail anywhere 
they
> wanted. But it seems the behavior of this file is to only allow me to
> send mail to ONLY the hosts in rcpthosts, so I am stuck in my own little
> domain.
>
> You would think that the rcpthosts file could serve a better purpose by
> allowing the machines listed in it to send anywhere, instead of any 
machine
> out on the internet to only send files to the machines in rcpthosts, 
which
> in the case of the same information being in locals, serves no purpose
> that I can see.
>
> I do have the info from the FAQ on selectively allowing certain hosts
> to set RELAYHOST and am going to try implementing that, otherwise I am
> going to add the user/password auth patch for qmail-smtpd from nimh.org
> since I ultimately need that for offsite POP access.
>
> Any thoughts or recommendations welcome,
>
> **********************************************__
> Bob Schader                               _.-{__}-._
> CAD Systems Administrator               .:-'`____`'-:.
> Product Design International, Inc.     /_.-"`_  _`"-._\
> 4880 36th St. S.E., Suite 100         /`   / .\/. \   `\
> Grand Rapids, MI 49512                |    \__/\__/    |
> Phone: 616-667-2600                 .-\                /-.
> Fax: 616-667-2692                  /   '._-.__--__.-_.'   \
> Email: [EMAIL PROTECTED]    \'.    `""""""""`'`   __\
> **********************************(__)|        '        \___)
>                                      `_________'________ \
>                                     `--------------------`




On Fri, 4 Jun 1999,  wrote:

> 
> Hello,
> 
> Ever night since I sent up my qmail pop server it has crashed sometime
> during the night.  There is no/very little traffic on the machine and
> the machine did not reboot during the nights. The startup scripts in
> rc work fine. I'm running linux redhat 5.2. Has anyone experienced
> anything like this? 
> 
> Because I cannot get logging working with pop, I have no information 
> from the server itself. BTW, if tcpserver/qmail can log to syslog, 
> why can't tcpserver/pop3d?  Because of the lack of logging and its
> instability on my machine I'm thinking of using qpopper instead. Is
> qpopper a good alternative?

You can also run tcpserver under supervise from Dan's daemontools
package:

    supervise -r /var/qmail/etc/run/pop3d                               \
        tcpserver -u 0 -g 0 -c 40 -v -R                                 \
        -x /var/qmail/etc/run/pop3d/rules.cdb 0 pop3                    \
        /var/qmail/bin/qmail-popup quasar.cdn.telstra.com.au            \
        /pkgs/bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 2>&1 \
        | splogger pop3

Then, if tcpserver does die during the night, it will be automatically
restarted by supervise.

tcpserver output is verbose and is logged to syslogd, all messages will
be tagged with the string pop3.

If you don't want to log to syslog, use accustamp and cyclog from the
daemontool's package.

    supervise -r /var/qmail/etc/run/pop3d                               \
        tcpserver -u 0 -g 0 -c 40 -v -R                                 \
        -x /var/qmail/etc/run/pop3d/rules.cdb 0 pop3                    \
        /var/qmail/bin/qmail-popup quasar.cdn.telstra.com.au            \
        /pkgs/bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 2>&1 \
        | accustamp | cyclog /var/log/pop3

Regards
Peter
----------
Peter Samuel                                [EMAIL PROTECTED]
Technical Consultant                        or at present:
eServ. Pty Ltd                              [EMAIL PROTECTED]
Phone: +61 2 9206 3410                      Fax: +61 2 9281 1301

"If you kill all your unhappy customers, you'll only have happy ones left"





Hello,

I am using Qmail 1.03 with checkpassword as the password
authentication component for access to the POP mailbox. Now, the
password to access the system as well as to access POP mailbox are
same. Is there any methods so that users can have different password
for their login and mail-retrieving. Besides, is there any CGI script
so that users can change their POP password from a Web page.

Any help is appreciated.

TIA,
Manohar




Reply via email to