qmail Digest 7 Mar 2001 11:00:01 -0000 Issue 1296

Topics (messages 58454 through 58526):

Re: Problem with qmail-inject and .qmail files
        58454 by: Scotte Zinn

Re: Qmail and time zone
        58455 by: Rod... Whitworth
        58467 by: Stefaan A Eeckels

Connection Problem
        58456 by: Ariel Levien
        58462 by: Jankok, Lucio

Re: Quota qmail
        58457 by: Jason Kawaja

forward and groups
        58458 by: richard morris

SMTP OK, but POP isn't!!
        58459 by: Hatem
        58461 by: Jankok, Lucio
        58470 by: Chris Johnson
        58507 by: Sean Coyle

sqlfile problems
        58460 by: Hugo Antunes

Open Relay
        58463 by: Marcilio Jorgensen Cassella

logging problems
        58464 by: Thomas Beer

Re: Getting POP3d to record logging information in places other t han Maillog
        58465 by: Kitabjian, Dave
        58508 by: Sean Coyle

ERROR MSG
        58466 by: qmailu
        58468 by: japc.co.sapo.pt
        58469 by: Jankok, Lucio

Re: reverse DNS?
        58471 by: Charles Cazabon
        58482 by: Bruno Wolff III
        58485 by: David Dyer-Bennet
        58502 by: Russell Nelson
        58505 by: Chin Fang
        58515 by: Lincoln Yeoh
        58517 by: Peter Cavender
        58518 by: Erwin Hoffmann
        58523 by: James R Grinter
        58525 by: Erwin Hoffmann

Re: pop3 acct name
        58472 by: Dean Browett
        58478 by: Chris Johnson
        58480 by: Chris Johnson

user quota
        58473 by: M. Yu
        58474 by: Jason Kawaja
        58475 by: Kurth Bemis
        58476 by: Charles Cazabon

RAV AntiVirus for Qmail
        58477 by: Mihai Serban

MailMan/qmail - missing headers
        58479 by: Graham Guttocks
        58481 by: Jonathan McDowell

Editing .qmail Files Creates qmail-spawn_unable_to_open_message Error.
        58483 by: schoon.amgt.com
        58500 by: Peter Samuel
        58503 by: schoon.amgt.com

letter rip pro and qmail
        58484 by: bmcalpine.macconnect.com
        58486 by: Tim Hunter

Serialmail algorithm? (leftover mails)
        58487 by: Paulo Jan

ETRN / SLOW
        58488 by: richard morris

QMAILQUEUE patch error 4.5.1
        58489 by: Paul Farber
        58490 by: Charles Cazabon
        58491 by: Paul Farber
        58493 by: Charles Cazabon

POP user auth
        58492 by: Chad Cranston
        58495 by: Ken Corey
        58496 by: Charles Cazabon
        58497 by: Henning Brauer

IP_MASQ Error
        58494 by: Bill Andersen

domain rewrites
        58498 by: Benjamin Collar

Re: qmail postfix
        58499 by: Mate Wierdl

POP3 Question
        58501 by: Kirti S. Bajwa

Qmail logs.
        58504 by: Grant

IsoQlog 1.5 released (multilog support has been added )
        58506 by: Ismail YENIGUL

mbox w/o home
        58509 by: Rodolfo Sampaio
        58513 by: Peter Cavender

qmail to set "reply to:" for non local users?
        58510 by: Bevan Broun
        58511 by: Alex Pennace

What are these messages mean?
        58512 by: Chrisanthy Carlane
        58516 by: Ken Jones

perl scripts
        58514 by: Paul Farber

no shell for qmail user (qmails, qmaill,...)
        58519 by: MassimoQuintini
        58520 by: Peter van Dijk
        58521 by: J�rgen Persson
        58522 by: Peter van Dijk
        58524 by: Joel Gautschi

Yet another weird POP3 problem
        58526 by: Bedel, Pierre

Administrivia:

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To bug my human owner, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------


The same problem occurs.  I believe it is finding mail fine because
qmail-inject is reporting the read error.

-- Scotte

> -----Original Message-----
> From: Charles Cazabon [mailto:[EMAIL PROTECTED]]
> Sent: Monday, March 05, 2001 10:10 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Problem with qmail-inject and .qmail files
>
>
> Scotte Zinn <[EMAIL PROTECTED]> wrote:
> > If I have a .qmail-test file in my home directory with the lines
> >
> > |groups >>MYGROUP ; exit 0
> >
> > I can send email to me-test and everything works out fine.
> >
> > However, if .qmail-test contains
> >
> > |groups | mail $SENDER -s "Groups" ; exit 0
> >
> > then I don't get the message back
>
> Try specifying an absolute path to "mail".  Does that help?
>
> Charles
> --





On Tue, 06 Mar 2001 11:40:29 +0100 (MET), Stefaan A Eeckels wrote:

On 04-Mar-2001 Rod... Whitworth wrote:
>  Does this have any bearing on his problem? I don't know as I have not
>  been following it in detail. The -0000 just hit my eye.

The -0000 is in the MTA generated Received: lines. AFAIK, it's
the standard way to indicate "no offset from UTC".


What standard are you quoting?
RFC822 says that UT representation is +0000
RFC1123 point out that 822 gets MIL tz codes bass-ackwards so -0000
should be used as defined in 822 as operational difficulty or invalid
tz code.

This is off the top-of-the-head but if you persist I'll cut and paste
quotes!
~|^
>From a land where we have to watch out for Northern hemisphere biased
ideas about Daylight Saving /Summer Time reversals.

>From the land "down under": Australia.
Do we look <umop apisdn> from up over?










On 06-Mar-2001 Rod... Whitworth wrote:
>  On Tue, 06 Mar 2001 11:40:29 +0100 (MET), Stefaan A Eeckels wrote:
>  
>  On 04-Mar-2001 Rod... Whitworth wrote:
> >  Does this have any bearing on his problem? I don't know as I have not
> >  been following it in detail. The -0000 just hit my eye.
>  
>  The -0000 is in the MTA generated Received: lines. AFAIK, it's
>  the standard way to indicate "no offset from UTC".
>  
>  
>  What standard are you quoting?
>  RFC822 says that UT representation is +0000
>  RFC1123 point out that 822 gets MIL tz codes bass-ackwards so -0000
>  should be used as defined in 822 as operational difficulty or invalid
>  tz code.
 
According to D J Bernstein (from http://cr.yp.to/immhf/date.html#timestamp ):

: The time shown is the creator's local time. The time shown, minus the zone shown, is
: the actual time in UTC. 
:
: Exception: a zone of -0000 indicates that the local time is unavailable or 
:meaningless,
: and that the time shown is the actual time in UTC.
: (In contrast, a zone of +0000 indicates that the times hown is both local time and
: actual time in UTC.) This special meaning of -0000 was not specified in 822, but it 
:is being
: widely used and is mentioned in 822bis. 
:
: Note that, in a few areas of the world, the difference between local time and UTC is
: almost never an exact multiple of 1 minute.
: Implementors can still use -0000 safely in this case. 

Stefaan
-- 
How's it supposed to get the respect of management if you've got just
one guy working on the project?  It's much more impressive to have a
battery of programmers slaving away. -- Jeffrey Hobbs (comp.lang.tcl)




Hi

My qmail server is having a problem sending mail via SMTP to a specific
domain.

When I tried to see what was going on, the logs show 
deferral: Connected_to_xxx.xxx.xx.xx_but_connection_died._

When I telnet to the remote server on port 25, I get the response below:
220 *****************************************************************

Does anyone know if this is a legitimate reply? I have had no other
problems, and I suspect that this is NOT a qmail problem, but rather a
problem with the banner from the remote server. Any thoughts on the subject
would be most welcome.

Thanks

Ari Levien




you must get a greeting from the server.
the 220 response is valid, have you try to 
greet it and continue a smtp session ?

regards,

Lucio Jankok

: -----Original Message-----
: From: Ariel Levien [mailto:[EMAIL PROTECTED]]
: Sent: Tuesday, March 06, 2001 12:56 PM
: To: '[EMAIL PROTECTED]'
: Subject: Connection Problem
: 
: 
: Hi
: 
: My qmail server is having a problem sending mail via SMTP to 
: a specific
: domain.
: 
: When I tried to see what was going on, the logs show 
: deferral: Connected_to_xxx.xxx.xx.xx_but_connection_died._
: 
: When I telnet to the remote server on port 25, I get the 
: response below:
: 220 *****************************************************************
: 
: Does anyone know if this is a legitimate reply? I have had no other
: problems, and I suspect that this is NOT a qmail problem, but rather a
: problem with the banner from the remote server. Any thoughts 
: on the subject
: would be most welcome.
: 
: Thanks
: 
: Ari Levien
: 




In case your intention is to restrict the size of individual messages
handled by smtpd, you would want to set /var/qmail/control/databytes to
a positive non-zero integer...do a `man qmail-smtpd`; let the OS handle
user quotas....

-- 

Regards,
Jason Kawaja, UF-ECE Sys Admin




hi all.

how does one create groups / distribution lists and forward mail to another
local user in qmail?



thanx
richard.





I have no problems sending messages using my qmail server as SMTP and it works fine!
but..
when I try to send an e-mail to any of the address to it (POP3D service) it gives me this error:
This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

       [EMAIL PROTECTED]



Reporting-MTA: dns;mail.hotmail.com
Received-From-MTA: dns;mail.hotmail.com
Arrival-Date: Tue, 6 Mar 2001 04:21:21 -0800

Final-Recipient: rfc822;[EMAIL PROTECTED]
Action: failed
Status: 5.0.0
Diagnostic-Code: smtp;553 To send mail, first check your mail with a valid POP
account; this prevents unauthorized SPAM relaying. (#5.7.1)

I am totally exhausted!! can someone help a bit for the (hopefully) last push!!
thanks.
Hatem




try this
on your pop host;
telnet 0 110
user yourusername
pass yourpassword
list
 
if this doesn't work you might look if you have the relevant
account(s) created. if you have, than you might consider
posting your configuration to the list.
 
regards,
 
Lucio Jankok 
 
 
 -----Original Message-----
From: Hatem [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 06, 2001 1:22 PM
To: [EMAIL PROTECTED]
Subject: SMTP OK, but POP isn't!!

I have no problems sending messages using my qmail server as SMTP and it works fine!
but..
when I try to send an e-mail to any of the address to it (POP3D service) it gives me this error:
This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

       [EMAIL PROTECTED]



Reporting-MTA: dns;mail.hotmail.com
Received-From-MTA: dns;mail.hotmail.com
Arrival-Date: Tue, 6 Mar 2001 04:21:21 -0800

Final-Recipient: rfc822;[EMAIL PROTECTED]
Action: failed
Status: 5.0.0
Diagnostic-Code: smtp;553 To send mail, first check your mail with a valid POP
account; this prevents unauthorized SPAM relaying. (#5.7.1)

I am totally exhausted!! can someone help a bit for the (hopefully) last push!!
thanks.
Hatem




On Tue, Mar 06, 2001 at 04:21:46AM -0800, Hatem wrote:
> I have no problems sending messages using my qmail server as SMTP and it works fine! 
> but..
> when I try to send an e-mail to any of the address to it (POP3D service) it gives me 
>this error:

This really makes no sense at all. Your POP3 service has nothing to do with
delivering mail to anyone's mailbox, so you won't get error messages from an
MTA because of a POP3 problem, whatever it may be.

> This is an automatically generated Delivery Status Notification.
> 
> Delivery to the following recipients failed.
> 
>        [EMAIL PROTECTED]
> 
> 
> 
> 
> Reporting-MTA: dns;mail.hotmail.com
> Received-From-MTA: dns;mail.hotmail.com
> Arrival-Date: Tue, 6 Mar 2001 04:21:21 -0800
> 
> Final-Recipient: rfc822;[EMAIL PROTECTED]
> Action: failed
> Status: 5.0.0
> Diagnostic-Code: smtp;553 To send mail, first check your mail with a valid POP
> account; this prevents unauthorized SPAM relaying. (#5.7.1)

This wasn't produced by qmail.

Chris




Hatem,

I sent a mail message to [EMAIL PROTECTED] and to [EMAIL PROTECTED]
(note the lack of the mail. Prefix).

I got back two different errors:

    Recipient: <[EMAIL PROTECTED]>
    Reason:    To send mail, first check your mail with a valid POP account;
    this prevents unauthorized SPAM relaying. (#5.7.1)

And 

    Recipient: <[EMAIL PROTECTED]>
    Reason:    User unknown

A dig on both mail.hahlabs.com and hahlabs.com revealed very interesting
information, and it comes clear that there may be a DNS issue along with an
account config error.  First, it does not seem like there is a designated MX
host for your mail.hahlabs.com DNS entry, however, there are two CNAME
records and one A record, directing all requests to your online webmail host
@ mail.register-admin.com.criticalpath.net.  And for that same domain, a dig
for MX records shows no relevant output.

; <<>> DiG 8.3 <<>> mail.hahlabs.com
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;;      mail.hahlabs.com, type = A, class = IN

;; ANSWER SECTION:
mail.hahlabs.com.       23h32m53s IN CNAME  webmail.register.com.
webmail.register.com.   1m38s IN CNAME
mail.register-admin.com.criticalpath.net.
mail.register-admin.com.criticalpath.net.  2h32m57s IN A  64.97.37.170

;; AUTHORITY SECTION:
criticalpath.net.       18h16m17s IN NS  NS1.CP.net.
criticalpath.net.       18h16m17s IN NS  NS3.CP.net.

;; ADDITIONAL SECTION:
NS1.CP.net.             13h4m31s IN A   209.228.15.4
NS3.CP.net.             13h4m31s IN A   209.228.14.4

;; Total query time: 18 msec
;; FROM: www.worldvibe.org to SERVER: default -- 64.69.67.228
;; WHEN: Tue Mar  6 15:52:57 2001
;; MSG SIZE  sent: 34  rcvd: 206

A 'dig mx hahlabs.com' shows the mx record of mxmail.registrars.com, and
when I got the mail back from the [EMAIL PROTECTED] address, it says no
error, but User unknown.

Two possible answers:

1 There is a DNS config error somewhere with mail.hahlabs.com and it is
missing an MX record for correct recognition

OR (and most likely)

2 The user account is truly based at @hahlabs.com and not @mail.hahlabs.com.

Mail sent to [EMAIL PROTECTED] was not returned.  Which leads me to
believe, that is where your Qmail installation is expecting to receive mail.
However, mail sent to [EMAIL PROTECTED] was returned.  I would
take it that hahlabs.com is not a virtual host, and if you do a locate for
that username, you should be able to find your issues.

If that user does exist, it might be a good idea to check the permissions on
the user mail accounts directories.  I seem to remember having a problem
with that when I started working with Qmail 'chmod -R 700 ./Maildir' and a
'chown -R user:group ./Maildir' should do the trick.

Some good help would be to post the contents of the
/var/qmail/bin/qmail-showctl output.  Perhaps also take a look at running
qmail-lint as this can diagnose some of the most common but easy to miss
config errors (qmail-lint can be found at :
http://qmail.valueclick.com/qmail/qmail-lint-0.55 )

Let me know if that was at all helpful, or totally off the mark.

Cheers,

Sean


Hatem wrote:

> I have no problems sending messages using my qmail server as SMTP and it works
> fine! 
> but..
> when I try to send an e-mail to any of the address to it (POP3D service) it
> gives me this error:
> This is an automatically generated Delivery Status Notification.
> 
> Delivery to the following recipients failed.
> 
>      [EMAIL PROTECTED]
> <http://lw11fd.law11.hotmail.msn.com/cgi-bin/compose?curmbox=F000000001&amp;a=
> ecf79b98111b9ce18f993683524664a1&amp;mailto=1&amp;[EMAIL PROTECTED]&
> amp;msg=MSG983881337.23&amp;start=240640&amp;len=2857&amp;src=&amp;type=x>
> 
> 
> 
> Reporting-MTA: dns;mail.hotmail.com
> Received-From-MTA: dns;mail.hotmail.com
> Arrival-Date: Tue, 6 Mar 2001 04:21:21 -0800
> 
> Final-Recipient: rfc822;[EMAIL PROTECTED]
> <http://lw11fd.law11.hotmail.msn.com/cgi-bin/compose?curmbox=F000000001&amp;a=
> ecf79b98111b9ce18f993683524664a1&amp;mailto=1&amp;[EMAIL PROTECTED]&
> amp;msg=MSG983881337.23&amp;start=240640&amp;len=2857&amp;src=&amp;type=x>
> Action: failed
> Status: 5.0.0
> Diagnostic-Code: smtp;553 To send mail, first check your mail with a valid POP
> account; this prevents unauthorized SPAM relaying. (#5.7.1)
> 
> I am totally exhausted!! can someone help a bit for the (hopefully) last
> push!!thanks.Hatem
> 
> 





hi
i am having a problem qhile conecting to mysql server using de qmail-mysql=
=20
port from freebsd.
my sqlfile is lik ethis:
root@server:/var/qmail/control>more sqlserver
mysql_use yes
server 127.0.0.1
login user
password xxxxxx
db sqlmailauth
table users
check_host yes
quota yes
ignore_validity yes

and it says whem o connect to it:
@400000003aa4ce9128f9dc4c error reading sqlserver file: expected 'server'=20
but got '=C0'
@400000003aa4ce91290adbdc warning: bogus lines in sqlserver file
@400000003aa4ce9a2b4ff97c tcpserver: end 83348 status 256



any help/tips are welcome
thanks
./hantunes





Hello,

        My SMTP server is in mail-abuse.org. Follow the Faq I did:

#cat .qmail-fixup-default
| [ "@$HOST" = "@fixme" ] || ( echo Permission denied; exit 100 )
| qmail-inject -f "$SENDER" -- "$EXT2"


#cat virtualdomains
fixme:fixup

#cat smtp.rules
200.18.178.:allow,RELAYCLIENT="@fixme"

        All E-mail sent with <address@domain@[Meu IP]>, was not recived.
And it is keeping in Mailbox of alias.

        - How do it, to this mail type have relay denied, like sendmail
?


Thanks for all,

Marcilio






Hi,

I'm facing some problems getting qmail up.
And the log files for smtpd-send et. al are empty
(that's correct, because there isn't something to log).
But how can I get logs from the start and stop
error messages written to a file?

Thanks Tom





> Qmail traditionally logs all pop3 transactions in 
> /var/log/maillog using
> syslog or whatever it is.

Really? I didn't think it logged anything. Are you sure you're not using a
patched version?

Dave




Well, I am using qmail-1.03+patches.tar.gz, downloaded from a reliable
source of course.  Qmail-send and qmail-smtp log their information using
multilog, in the correct place of course (/var/log/qmail/(service-name).

What I am trying to do, is just move the log output of qmail-pop3d to the
same path, from maillog.

Currently logging is controlled by supervise (Daemon tools I think), and
uses logger or syslog (I think), to write log file output.  I want to change
that output to be written by multilogger.

Any ideas?

Sean


Kitabjian, Dave wrote:

>> Qmail traditionally logs all pop3 transactions in
>> /var/log/maillog using
>> syslog or whatever it is.
> 
> Really? I didn't think it logged anything. Are you sure you're not using a
> patched version?
> 
> Dave





Hi,
 
I get the an error stating
 
Sorry._Although_I'm_listed_as_a_bestpreference_MX_or_A_for_that_host,/it_isn't_in_my_control/locals
_file,_so_I_don't_treat_it_as_local._(#5.4.6)/
 
while trying to send a mail to a domain hosted in my server.
 
What could be the problem ?
 
Raghu




Read on:

"it_isn't_in_my_control/locals_file"


echo "domain.com" >> /var/qmail/control/locals

.

On Tue, Mar 06, 2001 at 06:55:39PM +0530, qmailu wrote:
> Hi,
> 
> I get the an error stating
> 
> 
>Sorry._Although_I'm_listed_as_a_bestpreference_MX_or_A_for_that_host,/it_isn't_in_my_control/locals
> _file,_so_I_don't_treat_it_as_local._(#5.4.6)/
> 
> while trying to send a mail to a domain hosted in my server.
> 
> What could be the problem ?
> 
> Raghu

-- 
Jose AP Celestino  <[EMAIL PROTECTED]>  || SAPO / PT Multimedia
Administração de Sistemas / Operações || http://www.sapo.pt
--------------------------------------------------------------




ok...
 
try this; grep theparticulardomain /var/qmail/control/locals
 
p.s. you are asking a *very* basic question here, which
is very well treated in qmail's documentation.. hope you
consider that.
 
regards,
 
Lucio Jankok
 
 
-----Original Message-----
From: qmailu [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 06, 2001 2:26 PM
To: [EMAIL PROTECTED]
Subject: ERROR MSG

Hi,
 
I get the an error stating
 
Sorry._Although_I'm_listed_as_a_bestpreference_MX_or_A_for_that_host,/it_isn't_in_my_control/locals
_file,_so_I_don't_treat_it_as_local._(#5.4.6)/
 
while trying to send a mail to a domain hosted in my server.
 
What could be the problem ?
 
Raghu




John Conover <[EMAIL PROTECTED]> wrote:
> As a matter of policy, is it reasonable to reject messages that fail a
> reverse DNS lookup on HELO's FQDN/authentication?

Very political question.  As long as you don't reject envelope senders of
<> and <#@[]>, you won't be violating any RFCs.  However, you could reject
legitimate mail due to temporary problems with connectivity of your machine
or other organizations' DNS servers.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




On Tue, Mar 06, 2001 at 10:07:46AM -0000,
  John Conover <[EMAIL PROTECTED]> wrote:
> As a matter of policy, is it reasonable to reject messages that fail a
> reverse DNS lookup on HELO's FQDN/authentication?

I don't think this buys you much in the way of spam protection and can
block legitimate email. Many dialup and dsl connections will have a reverse
DNS entry in the service providers domain space.

If you want to block dialups, you are probably better off using the DUL
list to do it.




John Conover <[EMAIL PROTECTED]> writes:

> As a matter of policy, is it reasonable to reject messages that fail a
> reverse DNS lookup on HELO's FQDN/authentication?
> 
> Good idea?
> 
> Fascist idea?
> 
> Opinions pls.

Do you relay for users running POP clients who send their outbound
through you via smtp?  Do you control the reverse DNS on the IPs they
come in from?  If "yes" and "no", then it's definitely a bad idea. 

(I'm assuming you're considering requiring only *some* reverse DNS,
not one that matches what they HELO as?)
-- 
David Dyer-Bennet      /      Welcome to the future!      /      [EMAIL PROTECTED]
SF: http://www.dd-b.net/dd-b/          Minicon: http://www.mnstf.org/minicon/
Photos: http://dd-b.lighthunters.net/




John Conover writes:
 > As a matter of policy, is it reasonable to reject messages that fail a
 > reverse DNS lookup on HELO's FQDN/authentication?

No.

Neither is it reasonable to reject messages from a host whose reverse
DNS hostname lacks an MX record.

Neither is it reasonable to reject messages from a host which isn't
running an SMTP server.

Although I've been sorely tempted to implement both of these.

-- 
-russ nelson <[EMAIL PROTECTED]>  http://russnelson.com
Crynwr sells support for free software  | PGPok | Watch out!  He's got an
521 Pleasant Valley Rd. | +1 315 268 1925 voice | opinion, and he's not
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | afraid to share it!




> John Conover writes:
>  > As a matter of policy, is it reasonable to reject messages that fail a
>  > reverse DNS lookup on HELO's FQDN/authentication?
> 
> No.

Indeed.  Nevertheless, I think some elaboration will make the following
answers easier to understand to less experienced mail managers.

> Neither is it reasonable to reject messages from a host whose reverse
> DNS hostname lacks an MX record.

For instance, if a sending machine is only known to an organization's
internal name servers, but somehow its hostname is used in outgoing
messages, is it reasonable to block it?  I would like to :>, but in
fairness, I can't :(

> 
> Neither is it reasonable to reject messages from a host which isn't
> running an SMTP server.

Some organizations run incoming mail server(s) and outgoing mail server(s).
The later often do not run SMTP.  But they do send out messages.  Can
you block them, no.
> 
> Although I've been sorely tempted to implement both of these.

8-)  Likewise.  I wish I could, it would make spam filtering a much
easier (if less fun :> job to do.

Chin Fang
[EMAIL PROTECTED]

> -- 
> -russ nelson <[EMAIL PROTECTED]>  http://russnelson.com
> Crynwr sells support for free software  | PGPok | Watch out!  He's got an
> 521 Pleasant Valley Rd. | +1 315 268 1925 voice | opinion, and he's not
> Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | afraid to share it!
> 





At 10:07 AM 06-03-2001 -0000, John Conover wrote:
>As a matter of policy, is it reasonable to reject messages that fail a
>reverse DNS lookup on HELO's FQDN/authentication?

Well two of our service providers haven't arranged reverse DNS lookups for
our Internet visible subnets. Our DNS servers are ready, but they either
don't want to do it or don't know how to do it. So you can't look up names
from our IPs. And it's been more than a year already.

So I'm biased and I'd say it's not reasonable ;).

Why would you want to do that anyway?

Cheerio,
Link.






> At 10:07 AM 06-03-2001 -0000, John Conover wrote:
> >As a matter of policy, is it reasonable to reject messages that fail a
> >reverse DNS lookup on HELO's FQDN/authentication?
> 
> Well two of our service providers haven't arranged reverse DNS lookups for
> our Internet visible subnets. Our DNS servers are ready, but they either
> don't want to do it or don't know how to do it. So you can't look up names
> from our IPs. And it's been more than a year already.
> 
> So I'm biased and I'd say it's not reasonable ;).
> 
> Why would you want to do that anyway?

Spam prevention.  Have had the same problem myself.  It is indeed sad that
we have to jump through these hoops because a few folks insisting on
emailing everyone about their inkjet refills or lower mortgage rates
necessitate this.
 
> Cheerio,
> Link.






Hi,

I dont know, whether the HELO/EHLO from the MTA-Client means anything and
whether it can be used for a reverse DNS lookup.

However, it makes sense to do DNS lookup für the MAIL FROM: address. 

This is alrady feasable by some qmail patches, including my SPAMCONTROL.
Have a look at:

http://www.fehcom.de/qmail_en.html

cheers.

eh.


At 01:29 7.3.2001 -0500, Peter Cavender wrote:
>> At 10:07 AM 06-03-2001 -0000, John Conover wrote:
>> >As a matter of policy, is it reasonable to reject messages that fail a
>> >reverse DNS lookup on HELO's FQDN/authentication?
>> 
>> Well two of our service providers haven't arranged reverse DNS lookups for
>> our Internet visible subnets. Our DNS servers are ready, but they either
>> don't want to do it or don't know how to do it. So you can't look up names
>> from our IPs. And it's been more than a year already.
>> 
>> So I'm biased and I'd say it's not reasonable ;).
>> 
>> Why would you want to do that anyway?
>
>Spam prevention.  Have had the same problem myself.  It is indeed sad that
>we have to jump through these hoops because a few folks insisting on
>emailing everyone about their inkjet refills or lower mortgage rates
>necessitate this.
> 
>> Cheerio,
>> Link.
>
>
>
+-----------------------------------------------------------------------+
|  fff        hh         http://www.fehcom.de        Dr. Erwin Hoffmann |
| ff          hh                                                        |
| ff    eee   hhhh      ccc   ooo    mm mm  mm       Wiener Weg 8       |
| fff  ee ee  hh  hh   cc   oo   oo  mmm  mm  mm     50858 Koeln        |
| ff  ee eee  hh  hh  cc   oo     oo mm   mm  mm                        |
| ff  eee     hh  hh   cc   oo   oo  mm   mm  mm     Tel 0221 484 4923  |
| ff   eeee   hh  hh    ccc   ooo    mm   mm  mm     Fax 0221 484 4924  |
+-----------------------------------------------------------------------+




Erwin Hoffmann <[EMAIL PROTECTED]> writes:
> However, it makes sense to do DNS lookup f=FCr the MAIL FROM: address.=20

If you have reliable DNS services - I've been on the other end of
that, a site permanently rejecting each mail (a 5xx code) because they
were having problems resolving the sending domain. Delegation and the
nameservers were fine, as it was the second address I tried (which
also failed with a 5xx code)

Very messy, and not very good for their customers.

James.




Hi,

At 09:49 7.3.2001 +0000, James R Grinter wrote:
>Erwin Hoffmann <[EMAIL PROTECTED]> writes:
>> However, it makes sense to do DNS lookup f=FCr the MAIL FROM: address.=20
>
>If you have reliable DNS services - I've been on the other end of
>that, a site permanently rejecting each mail (a 5xx code) because they
>were having problems resolving the sending domain. Delegation and the
>nameservers were fine, as it was the second address I tried (which
>also failed with a 5xx code)
>
>Very messy, and not very good for their customers.
>
>James.

In particular to cope with this, my implementation lets you define for
which Domains you dont want DNS Reverse Lookup: /var/qmail/control/nodnscheck.
SPAMCONTROL does a logging on that, thus you easily can figure out, which
Domains cause the problem.


cheers.
eh.

+-----------------------------------------------------------------------+
|  fff        hh         http://www.fehcom.de        Dr. Erwin Hoffmann |
| ff          hh                                                        |
| ff    eee   hhhh      ccc   ooo    mm mm  mm       Wiener Weg 8       |
| fff  ee ee  hh  hh   cc   oo   oo  mmm  mm  mm     50858 Koeln        |
| ff  ee eee  hh  hh  cc   oo     oo mm   mm  mm                        |
| ff  eee     hh  hh   cc   oo   oo  mm   mm  mm     Tel 0221 484 4923  |
| ff   eeee   hh  hh    ccc   ooo    mm   mm  mm     Fax 0221 484 4924  |
+-----------------------------------------------------------------------+




Hi,

How do you explain these then ?

@400000003aa4f3a023278cc4 starting delivery 2957873: msg 591883 to local
[EMAIL PROTECTED]
@400000003aa4f3a02327ea84 status: local 1/10 remote 20/20
@400000003aa4f3a02b24c2fc delivery 2957873: failure:
Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/

@400000003aa4f1d501d5a09c starting delivery 2957568: msg 591787 to local
[EMAIL PROTECTED]
@400000003aa4f1d501d5e304 status: local 1/10 remote 20/20
@400000003aa4f1d502ad99ac delivery 2957568: failure:
Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/

@400000003aa4f4453b062544 starting delivery 2958022: msg 590552 to local
[EMAIL PROTECTED]
@400000003aa4f4453b0667ac status: local 1/10 remote 20/20
@400000003aa4f4460024f6e4 delivery 2958022: failure:
Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/

And one that works

@400000003aa4f56a03191164 starting delivery 2958356: msg 591637 to local
[EMAIL PROTECTED]
@400000003aa4f56a0319636c status: local 1/10 remote 20/20
@400000003aa4f56a0d4d4fc4 delivery 2958356: success: did_1+0+0/

The home directories of the above accounts have been setup in the same
manner as all other email accounts on the box.

Regards


 Dean Browett



----- Original Message -----
From: "Chris Johnson" <[EMAIL PROTECTED]>
To: "Dean Browett" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, February 28, 2001 9:15 PM
Subject: Re: pop3 acct name







On Tue, Mar 06, 2001 at 02:35:03PM -0000, Dean Browett wrote:
> How do you explain these then ?
> 
> @400000003aa4f3a023278cc4 starting delivery 2957873: msg 591883 to local
> [EMAIL PROTECTED]
> @400000003aa4f3a02327ea84 status: local 1/10 remote 20/20
> @400000003aa4f3a02b24c2fc delivery 2957873: failure:
> Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/

Perhaps your OS has a limit on the length of account names. This has nothing to
do with any limits in qmail on the length of an address, and even less to do
with limits on the length of POP user names. At the time this message was
produced, qmail-pop3d has never entered the picture.

Chris

PGP signature





On Tue, Mar 06, 2001 at 02:35:03PM -0000, Dean Browett wrote:
> How do you explain these then ?
> 
> @400000003aa4f3a023278cc4 starting delivery 2957873: msg 591883 to local
> [EMAIL PROTECTED]
> @400000003aa4f3a02327ea84 status: local 1/10 remote 20/20
> @400000003aa4f3a02b24c2fc delivery 2957873: failure:
> Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/

I've been a little thrown off by your posing this question as a problem with
POP3. That's a red herring; it has nothing to do with POP3.

This is from the qmail-getpw man page:

       qmail-getpw considers an account in /etc/passwd  to  be  a
       user  if  (1)  the  account  has  a  nonzero  uid, (2) the
       account's home directory exists (and is visible to  qmail-
       getpw),  and  (3)  the  account  owns  its home directory.
       qmail-getpw ignores  account  names  containing  uppercase
       letters.   qmail-getpw also assumes that all account names
       are shorter than 32 characters.

qmail-getpw assumes that the account name is shorter than 32 characters. This
doesn't impose a limit on the local part of an address, though. You can use
either the dot-qmail or mail-users mechanism to have addresses of unlimited
length, and deliver mail to accounts with names shorter than 32 characters.

Chris

PGP signature





I've been thinking about this for quite a while now.  I still can't come up
with a solution so maybe someone here can help.

Short version: we're looking for a way to make several e-mail addresses
share the same mailbox.

Long version: some of our clients want to have additional e-mail addresses
(we give 1 client 1 e-mail address with a 4MB mailbox; some want as many as
10 addresses).  We want to be able to give out more addresses (they don't
cost us anything anyway) but want to limit the mailbox size to 4MB, no
matter which e-mail address consumes more of the mailbox.

This is basically a quota problem.  Can anyone suggest a solution?
 
M. Yu
 
 





Perhaps I am missing something here....

You could create the first mail account (mailbox) giving ownership to
username "joebob", each additional mailbox is given ownership to
"joebob" ...set a quota for "joebob"....all files/directories
(mailboxes, whatever) owned by "joebob" are enforced to the quota set
for the user "joebob"...this is how quotas on Solaris work...I am
assuming a standard here, but I think its ok....

-- 

Regards,
Jason Kawaja, UF-ECE Sys Admin




At 10:11 AM 3/6/2001, M. Yu wrote:

try using group quotas.  put all the people that you want to limit in one 
group and then set that groups quota to 4 megs or so...

~kurth

>I've been thinking about this for quite a while now.  I still can't come up
>with a solution so maybe someone here can help.
>
>Short version: we're looking for a way to make several e-mail addresses
>share the same mailbox.
>
>Long version: some of our clients want to have additional e-mail addresses
>(we give 1 client 1 e-mail address with a 4MB mailbox; some want as many as
>10 addresses).  We want to be able to give out more addresses (they don't
>cost us anything anyway) but want to limit the mailbox size to 4MB, no
>matter which e-mail address consumes more of the mailbox.
>
>This is basically a quota problem.  Can anyone suggest a solution?
>
>M. Yu
>
>





M. Yu <[EMAIL PROTECTED]> wrote:
> 
> Short version: we're looking for a way to make several e-mail addresses
> share the same mailbox.

`man qmail-users` and friends, plus Dan's FAQ.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




Dear Linux users,

We are happy to announce that we have just issued a RAV AntiVirus
version for Qmail. This beta version is now available on
our site http://www.ravantivirus.com  - free download, and we would
really appreciate your feedback if you would take a time to install and
run it!

Thank you and enjoy it!

Mihai Serban
Software Developer - GeCAD The Software Company
Tel./Fax: +40-1-321.78.03; Hotline: +40-1-321.78.59;
Please visit http://www.gecadsoftware.com; http://www.ravantivirus.com
Please visit us in Halle 2, c03, CeBIT - Hanovra 22-28 March 2001






Greetings,

I've just installed the MailMan MLM on my qmail server with
fastforward support for /etc/aliases.  Everything seems to work fine
except that the messages that MailMan sends out are missing some
headers such as "Date:" and "Message-ID:".  The result is that the
destination MTA has to fill them in.

Even if MailMan doesn't provide these headers, shouldn't qmail add
them in?  Has anyone else had this problem with MailMan?

Regards,
Graham

_____________________________________________________________________________
http://store.yahoo.com.au - Yahoo! Store
- The fastest, easiest way to open an online store.




On Wed, Mar 07, 2001 at 05:11:52AM +1300, Graham Guttocks wrote:
> I've just installed the MailMan MLM on my qmail server with
> fastforward support for /etc/aliases.  Everything seems to work fine
> except that the messages that MailMan sends out are missing some
> headers such as "Date:" and "Message-ID:".  The result is that the
> destination MTA has to fill them in.
> 
> Even if MailMan doesn't provide these headers, shouldn't qmail add
> them in?  Has anyone else had this problem with MailMan?

qmail doesn't touch them as Mailman sends the messages via SMTP to
localhost rather than using qmail-inject. I've seen this problem myself
and at some point intend to hack Mailman to use qmail-inject rather than
SMTP; only my lack of any knowledge of Python has stopped me so far.

J.

-- 
           Make friends.            |       Black Cat Networks Ltd
                                    | http://www.blackcatnetworks.co.uk/
                                    |  UK Web, domain and email hosting




What I want to do is add the X-Envelope-To: to every email sent to my
virtual domain. Then I can have pullmail just look at the X-Envelope-To:
field and fix receiving mail sent to
mailing lists.

This is what I've done to my .qmail files:

In .qmail-default

|(echo "X-Envelope-To: $DEFAULT@$HOST"; cat) | qmail-inject -f "$SENDER"
-- user-finaldelivery

(Above is all on one line)

In .qmail-finaldelivery:

./Maildir/

When all this is done, I get the following error message:

delivery 48: deferral: qmail-spawn_unable_to_open_message._(#4.3.0)/

I've also tried the following variations:

Put everything in .qmail-default and leave off the --
user-defaultdelivery. That fails with
same error message.

Use Apparently-To: in place of X-Envelope-To: but that caused some nasty
loops to happen!! One message got sent over 1000 times before I could
clear the queue.

        Can someone point out the error of my ways??

Thanks!

.mark

"Windows 95/98 /n./ 32 bit extensions and a graphical shell for a 16 bit
patch to an 8 bit operating system originally coded for a 4 bit
microprocessor, written by a 2 bit company that can't stand 1 bit of
competition."

use Disclaimer;
my $opinion_only;





On Tue, 6 Mar 2001 [EMAIL PROTECTED] wrote:

> What I want to do is add the X-Envelope-To: to every email sent to my
> virtual domain. Then I can have pullmail just look at the X-Envelope-To:
> field and fix receiving mail sent to
> mailing lists.
> 
> This is what I've done to my .qmail files:
> 
> In .qmail-default
> 
> |(echo "X-Envelope-To: $DEFAULT@$HOST"; cat) | qmail-inject -f "$SENDER"
> -- user-finaldelivery

What's wrong with

    | echo "X-Envelope-To: $DEFAULT@$HOST"; cat) | forward user-finaldelivery

-- 
Regards
Peter
----------
Peter Samuel                            [EMAIL PROTECTED]
http://www.e-smith.org (development)    http://www.e-smith.com (corporate)
Phone: +1 613 368 4398                  Fax: +1 613 564 7739
e-smith, inc. 1500-150 Metcalfe St, Ottawa, ON K2P 1P1 Canada

"If you kill all your unhappy customers, you'll only have happy ones left"





Peter,

        Ok I think I got it!! The sticky point was realizing that when messages
are forwarded via user-finaldelivery, that it needed to be treated as a
local user. In my control/locals file, all I had was localhost, but once
I added the server.domain.com, it start inserting and forwarding email!
Thanks again for all the help! This is the number one reason why I
picked qmail over Exim/sendmail - the user community!

.mark

>----------
>From:  Peter Samuel[SMTP:[EMAIL PROTECTED]]
>Sent:  Tuesday, March 06, 2001 2:33 PM
>To:    Mark Schoonover
>Cc:    [EMAIL PROTECTED]
>Subject:       Re: Editing .qmail Files Creates
>qmail-spawn_unable_to_open_messageError.
>
>On Tue, 6 Mar 2001 [EMAIL PROTECTED] wrote:
>
>> What I want to do is add the X-Envelope-To: to every email sent to my
>> virtual domain. Then I can have pullmail just look at the X-Envelope-To:
>> field and fix receiving mail sent to
>> mailing lists.
>> 
>> This is what I've done to my .qmail files:
>> 
>> In .qmail-default
>> 
>> |(echo "X-Envelope-To: $DEFAULT@$HOST"; cat) | qmail-inject -f "$SENDER"
>> -- user-finaldelivery
>
>What's wrong with
>
>    | echo "X-Envelope-To: $DEFAULT@$HOST"; cat) | forward user-finaldelivery
>
>-- 
>Regards
>Peter
>----------
>Peter Samuel                            [EMAIL PROTECTED]
>http://www.e-smith.org (development)    http://www.e-smith.com (corporate)
>Phone: +1 613 368 4398                  Fax: +1 613 564 7739
>e-smith, inc. 1500-150 Metcalfe St, Ottawa, ON K2P 1P1 Canada
>
>"If you kill all your unhappy customers, you'll only have happy ones left"
>
>
>





Has anyone on the list had any problems getting qmail to accept mail
deliveries from someone using letter rip pro?  I have a user who is using
letter rip, but his session is "unexpectedly closed" every time when trying
to send mail to my server.  The domain he is trying to send to is hosted on
my mail machine, and has no problems receiving mail from any other source.
Any ideas?

Brendan





Not familer with the software but it sounds like it might be the bare line
feeds issue.
There is info in the archives and I think on qmail.org on how to work around
this without fixing the software.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, March 06, 2001 12:53 PM
To: [EMAIL PROTECTED]
Subject: letter rip pro and qmail


Has anyone on the list had any problems getting qmail to accept mail
deliveries from someone using letter rip pro?  I have a user who is using
letter rip, but his session is "unexpectedly closed" every time when trying
to send mail to my server.  The domain he is trying to send to is hosted on
my mail machine, and has no problems receiving mail from any other source.
Any ideas?

Brendan






Hi all:

        I have a customer with a Linux server that connects to us through a
dialup account, and sends us their queued mail using serialmail. The
problem they are having is that, from time to time, they have some
leftover mails that don't get sent, even if I kill all the running
instances of serialmail and start it up by hand. The situation goes more
or less like:

        1) serialmail is started by a cron job, creates a lock on the outgoing
mail directory using seriallock and starts sending the messages in the
queue.
        2) Before it has finished (the queue has several megabytes of
messages), the cron job gets called again, but since the lockfile is...
erm, locked, it doesn't do anything (or at least that's how I think it
works...).
        3) After several hours like this, you can see in the outgoing queue
several old messages that, according to their timestamp, should have
been sent by the first serialmail invocation, but haven't. You kill all
the running instances of serialmail, start it by hand and... it starts
sending mail NOT from the very beginning of the queue (i.e. those
leftover messages), but from somewhere in the middle.

        My question is: what's going on? Or, to be more precise:

        -Does serialmail create a lock in the messages in the outgoing queue
too, instead of just in the lock file? Does that (hypothetical) lock
remain if I kill serialmail by hand?
        -Is my assumption in 2) correct? (That is, that the second invocation
of serialmail doesn't do anything). The line I use in my crontab file
is:

        /usr/local/bin/setlock -nx ~alias/outmail/seriallock
/usr/local/bin/maildirsmtp ~alias/outmail alias-outmail- [IP of the
upstream mail server] `hostname`

        Where ~alias/outmail is the Maildir where the outgoing messages get
sent.

        -How does serialmail "choose" which mails in the Maildir to sent first?
By filename? By timestamp? How?


        In case you are wondering, yes, the leftover mails do have envelope
senders in the right format, that is, "Delivered-To:
alias-outmail-user@domain".
        Anyone can help?



                                                Paulo Jan.
                                                DDnet.





howzit.

is anyone familiar with the use of the ETRN command? if i telnet into the
isp mail server on port 25 and issue EHLO mailserver.co.za it replies with:-

250-xxxx.xxxx.xx.xx Hello xxxx.xxxxxxx.xx.xx [xxx.x.xx.x6]
250-SIZE 15728640
250-ETRN
250-PIPELINING
250 HELP

is the size the size of queued mail waiting to come down? When the server is
receiving mailo from the ISP is it normal for it to become extremely slow to
the point where client cannot connect - it has plenty of hair under the
bonnet?


Thanks,
Richard.





hello all, 

trying to implement the the qmail-qfilter patch and the only thing I've
been able to do is cause 4.5.1's all day (unable to exec qq).

What's the trick?

Searched the archives and nothing came close... ANY ideas???

Paul Farber
Farber Technology
[EMAIL PROTECTED]
Ph  570-628-5303
Fax 570-628-5545





Paul Farber <[EMAIL PROTECTED]> wrote:
> 
> trying to implement the the qmail-qfilter patch and the only thing I've
> been able to do is cause 4.5.1's all day (unable to exec qq).
> 
> What's the trick?
> 
> Searched the archives and nothing came close... ANY ideas???

There were several people running into this within the last few weeks; the
trick there turned out to be raising the memory limits on qmail-smtpd
IIRC -- Perl wouldn't fit into the current limits.  See your smtpd
start script/run script.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




I have softlimit -m 4000000 at the start of the qmail-smtpd script

Paul Farber
Farber Technology
[EMAIL PROTECTED]
Ph  570-628-5303
Fax 570-628-5545

On Tue, 6 Mar 2001, Charles Cazabon wrote:

> Paul Farber <[EMAIL PROTECTED]> wrote:
> > 
> > trying to implement the the qmail-qfilter patch and the only thing I've
> > been able to do is cause 4.5.1's all day (unable to exec qq).
> > 
> > What's the trick?
> > 
> > Searched the archives and nothing came close... ANY ideas???
> 
> There were several people running into this within the last few weeks; the
> trick there turned out to be raising the memory limits on qmail-smtpd
> IIRC -- Perl wouldn't fit into the current limits.  See your smtpd
> start script/run script.
> 
> Charles
> -- 
> -----------------------------------------------------------------------
> Charles Cazabon                            <[EMAIL PROTECTED]>
> GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
> Any opinions expressed are just that -- my opinions.
> -----------------------------------------------------------------------
> 





Paul Farber <[EMAIL PROTECTED]> wrote:
> I have softlimit -m 4000000 at the start of the qmail-smtpd script

I seem to recall the others had to raise it to at least 6MB to get it to work.
This should be in the archives in the last month; I believe the subject had
something to do with Amavis, although probably with different case.

Charles

> > Paul Farber <[EMAIL PROTECTED]> wrote:
> > > 
> > > trying to implement the the qmail-qfilter patch and the only thing I've
> > > been able to do is cause 4.5.1's all day (unable to exec qq).
> > > 
> > > What's the trick?
> > > 
> > > Searched the archives and nothing came close... ANY ideas???
> > 
> > There were several people running into this within the last few weeks; the
> > trick there turned out to be raising the memory limits on qmail-smtpd
> > IIRC -- Perl wouldn't fit into the current limits.  See your smtpd
> > start script/run script.

-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




Forgive me for being a beginner ..
 
I installed qmail about 2 months ago to use as an SMTP server for home ...and have tried to get pop working on it ..
 
I am using Maildir ... i origionally installed qmail using mailbox ... and switched to maildir following lifewithqmail.org's instructions ...
 
Everything seems to be working right up until it auth's the user ... for some reason it won't auth .. i have created several test users ..and the same failure resuts from all of them ....i get the error
"Your password was rejected " .... on all accounts ...
 
Can anyone help  ?
Chad Cransotn




On Tuesday 06 March 2001  8:54 am, Chad Cranston wrote:
> Forgive me for being a beginner ..

Never!  I was *born* knowing 'vi', shouldn't everyone?  *smile*

> I installed qmail about 2 months ago to use as an SMTP server for home
> ....and have tried to get pop working on it ..
>
> I am using Maildir ... i origionally installed qmail using mailbox ... and
> switched to maildir following lifewithqmail.org's instructions ...
>
> Everything seems to be working right up until it auth's the user ... for
> some reason it won't auth .. i have created several test users ..and the
> same failure resuts from all of them ....i get the error "Your password was
> rejected " .... on all accounts ...

I installed the pop that comes with qmail, and found two things:

1) the authdaemond.plain wasn't running, or 
2) the authdaemond.ldap was running, but I had no ldap daemon.

In either case, I editted the  /usr/local/libexec/authlib/authdaemond script 
so that it didn't try to run the ldap version, and my problems went away.

-- 
Ken Corey, CTO    Atomic Interactive, Ltd.   [EMAIL PROTECTED]




Ken Corey <[EMAIL PROTECTED]> wrote:
> 
> I installed the pop that comes with qmail, and found two things:
> 
> 1) the authdaemond.plain wasn't running, or 
> 2) the authdaemond.ldap was running, but I had no ldap daemon.

Neither of those files has anything to do with a stock qmail.  In particular,
stock qmail doesn't know LDAP from its elbows.  The default authorization
method for qmail-pop3d is checkpassword, shipped separately.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




On Tue, Mar 06, 2001 at 09:43:47PM +0000, Ken Corey wrote:
> I installed the pop that comes with qmail, and found two things:

you didn't. authdaemond is part of courier imap and you surely have
installed the pop3 daemon coming with courier imap.

> 1) the authdaemond.plain wasn't running, or 
> 2) the authdaemond.ldap was running, but I had no ldap daemon.
> 
> In either case, I editted the  /usr/local/libexec/authlib/authdaemond script 
> so that it didn't try to run the ldap version, and my problems went away.
> 
> -- 
> Ken Corey, CTO    Atomic Interactive, Ltd.   [EMAIL PROTECTED]
> 

-- 
Henning Brauer     | BS Web Services
Hostmaster BSWS    | Roedingsmarkt 14
[EMAIL PROTECTED] | 20459 Hamburg
http://www.bsws.de | Germany




I have installed Qmail on a Linux box at may home.
I have DSL and a 4 port router using NAT to direct
all SMTP and POP3 traffic to the Linux box.

I set up qmail and pop3 without any problem (or at
least is all seems to work), but I keep getting the
following error on the console...

IP_MASQ: reverse ICMP: failed checksum from 4.0.84.250

Am I loosing (bouncing) mail when this happens?

Any ideas on how to fix it?

TIA

Bill





Greetings

I have checked through lwq and qmail-howto and tried to search the
archives for the answer to this question. Searching the archives didn't
work for me because of a blasted firewall...so, my apologies if this has
been asked a billion times before:

How do I rewrite a domain name on some incoming mail before passing it on?

For instance, the company I'm working for used to receive its mail at
mail.aaa.com. Now it only wants aaa.com. This is not a virtual
domain. Currently, they use a special sendmail rule to rewrite
mail.aaa.com to aaa.com before forwarding the mail to the exchange
server. How would I accomplish this with qmail?

Thank you
Ben





Thx for the info.  What I was curious about was also how  qmail
scales.  For example, it requires patches sometimes.  Apparently with
large mailinglists the bigtodo patch is needed.  Or it apparently
needs the dns patch.

In other words, qmail does not seem be uptodate as new requirements
come up.  I have a nagging feeling that Dan will not deal with qmail
anymore, and perhaps he will concentrate on im2000 instead---or leaves
email alone.

It seems that as far as sysadm books are concerned, qmail is already
buried.  For example, the new edition of the Nemeth et all book barely
mentions qmail, and discusses only postfix configuration.  The same
with the newest ( I forgot the author; endorsed by Raymond) Linux
security book.

Mate







My question is too fundamental for all you qmail experts, but please reply
anyway. I am a newbie. I installed qmail on a RH 6.2 LINUX system by
following step-by-step guidelines of QMAIL-HOWTO ( I have also consulted
Life with Qmail). 

Two questions:

1) Where do I install qmail-pop3 script (the one which runs under
"tcpserver"). In Life With Qmail (page 39) it indicates to add the script
"to your qmail startup script"!! Well it is good for all of you but I have
not been able to figure out where to add it!!

2) When I try to setup Outlook to connect and receive email, I get an error
message saying that the User Name/Password is invalid! Do you think the
problem may be carried over from item# 1.

I may have a problem explaining. Please let me know if I can further clarify
(English is my third language).



Kirti 




I changed directory to /var/log/qmail and noticed it has only kept logs
since the 2nd of March. Is it possible to rotate the logs monthly and stop
qmail from creating new log files twice per day?

Thankyou.







hi
i released isoqlog version 1.5

what is isoqlog :


Isoqlog is an qmail log analysis program written in perl .
it designed to scan qmail logfile and produce usage statistics in HTML
format. for viewing through a browser. It produces Top domains
output according to Incoming , Outgoing , total mails and bytes, it keeps
your main domain mail statistics for per day and per month .


what is new :


-All codes are rewritten , now isoqlog is more functional
-multilog support has been given
-User based incoming mail  top scores has been added for every your domain
that  you define
-User based outgoing mail  top scores has been added for every your domain
that  you define
-User based total mail  top scores has been added for every your domain
that  you define
-User based  byte  top scores has been added for every your domain that
you define
-Domain based  byte  top scores has been added
- minus(-) mail values at top scores part is corrected

i strongly recommend redownload if you are using older versions of isoqlog

sample output

for sample output visit
http://www.enderunix.org/isoqlog/maillog15



For more information

http://www.enderunix.org/isoqlog


byee
Ismail YENIGUL

http://www.enderunix.org






        
        Hi!

        Im migrating from sendmail to qmail 1.03+fastfoward using mbox format
/var/spool/mail. The problem is that almost all of my users uses /tmp as
home and /dev/null as a fake shell and qmail is refusing to distribute
these mails... it wont give an error... it justs drop the mail. There is a
way that i can make qmail distribute these emails? 

        []'s

        Rodolfo Sampaio






Hi-

qmail needs a non-world-writable location to place a user's email.  If all
your users have /tmp as home, who owns /tmp/mbox???

You need to setup your user accounts properly with individual,
non-world-writabele home directories, or
use some other tool to locally deliver the mail.

--Pete

On Tue, 6 Mar 2001, Rodolfo Sampaio wrote:

>       
>       Hi!
> 
>       Im migrating from sendmail to qmail 1.03+fastfoward using mbox format
> /var/spool/mail. The problem is that almost all of my users uses /tmp as
> home and /dev/null as a fake shell and qmail is refusing to distribute
> these mails... it wont give an error... it justs drop the mail. There is a
> way that i can make qmail distribute these emails? 
> 
>       []'s
> 
>       Rodolfo Sampaio
> 
> 






Our qmail server receives all it's mail from a relay that does virus
scanning
etc. It then sends mail out to to various hosts. No MUA will speak directly
to
qmail.

We want qmail to rewrite the "reply to:" field for our users - from
[EMAIL PROTECTED] to [EMAIL PROTECTED] Mail list archives suggest
enviroment variables to qmail-inject but this would appear to work only for
local users.

Can this be done?  Ideas?

TIA

Bevan Broun
----------------------------------------------------------------------------
----------------------------------------------------------------------------
This Email may contain confidential and/or privileged information and is
intended solely for the addressee(s) named. If you have received this
information in error, or are advised that you have been posted this Email by
accident, please notify the sender by return Email, do not redistribute it,
delete the Email and keep no copies.




On Wed, Mar 07, 2001 at 12:25:06PM +1100, Bevan Broun wrote:
> 
> Our qmail server receives all it's mail from a relay that does virus
> scanning
> etc. It then sends mail out to to various hosts. No MUA will speak directly
> to
> qmail.
> 
> We want qmail to rewrite the "reply to:" field for our users - from
> [EMAIL PROTECTED] to [EMAIL PROTECTED] Mail list archives suggest
> enviroment variables to qmail-inject but this would appear to work only for
> local users.
> 
> Can this be done?  Ideas?

Use ofmipd in mess822. http://cr.yp.to/mess822.html

> This Email may contain confidential and/or privileged information and is
> intended solely for the addressee(s) named. If you have received this
> information in error, or are advised that you have been posted this Email by
> accident, please notify the sender by return Email, do not redistribute it,
> delete the Email and keep no copies.

Where the hell do you get off telling people how to manage their email?




Greetings everybody!

I received a bounce message like this, there are some things that I don't
understand, can anyone help me?

> I tried to deliver a bounce message to this address, but the bounce
bounced!
>
> <[EMAIL PROTECTED]=20>:
> Sorry, I couldn't find any host named yahoogroups.com=20. (#5.1.2)
>
> --- Below this line is the original bounce.
>
> Return-Path: <>
#How come there is no return path?

> Received: (qmail 25396 invoked from network); 7 Mar 2001 02:18:21 -0000
> Received: from unknown (HELO sales) (10.10.10.127)
#I think the HELO should be the name of the mail server?






Chrisanthy Carlane wrote:
> 
> Greetings everybody!
> 
> I received a bounce message like this, there are some things that I don't
> understand, can anyone help me?
> 
> > I tried to deliver a bounce message to this address, but the bounce
> bounced!
> >
> > <[EMAIL PROTECTED]=20>:

The line above shows you the email address it was trying to deliver to.
You'll notice that it is not a valid email address because the
domain name is not valid. 

yahoogroups.com=20 is not a valid domain.

Ken Jones

> > Sorry, I couldn't find any host named yahoogroups.com=20. (#5.1.2)
> >
> > --- Below this line is the original bounce.
> >
> > Return-Path: <>
> #How come there is no return path?
> 
> > Received: (qmail 25396 invoked from network); 7 Mar 2001 02:18:21 -0000
> > Received: from unknown (HELO sales) (10.10.10.127)
> #I think the HELO should be the name of the mail server?




anyone have any short perl scripts they youwlid liek to forward to show
interaction with qmail envirmonment variable, logging to a file etc....

Everything works file (scripts) when echo-ing a string to the script...
but when trying to get them 'inline' for qmail to use... I get nothing.

Especially intereseted in qmail-qfilter scripts.

thanks

Paul Farber
Farber Technology
[EMAIL PROTECTED]
Ph  570-628-5303
Fax 570-628-5545





For security reason, can I disable shell in /etc/passwd for qmail users (qmails, 
qmaill, ...ect,) setting the shell to /bin/false  ?


Thanks

Massimo Quintini
Astronomical Observatory Collurania Teramo (Italy)





On Wed, Mar 07, 2001 at 09:41:29AM -0200, MassimoQuintini wrote:
> For security reason, can I disable shell in /etc/passwd for qmail users (qmails, 
>qmaill, ...ect,) setting the shell to /bin/false  ?

/bin/false is a very silly idea. /nonexistent is much better.

Greetz, Peter.




On Wed, Mar 07, 2001 at 09:47:14AM +0100, Peter van Dijk wrote:
> On Wed, Mar 07, 2001 at 09:41:29AM -0200, MassimoQuintini wrote:
> > For security reason, can I disable shell in /etc/passwd for qmail
> > users (qmails, qmaill, ...ect,) setting the shell to /bin/false  ?

yes

> 
> /bin/false is a very silly idea. /nonexistent is much better.

interesting -- why??

Jörgen




On Wed, Mar 07, 2001 at 10:05:25AM +0100, Jörgen Persson wrote:
[snip]
> > /bin/false is a very silly idea. /nonexistent is much better.
> 
> interesting -- why??

Because depending on your /bin/false and /bin/sh implementation, it's
behaviour can be modified by toying with environment variables such as
ENV.

Remote exploits for accounts with /bin/false as shell have been seen
on bugtraq.

For the qmail accounts the risk should be small (they have * instead
of a crypted password) but do *you* trust all different programs doing
authentication on your system (ssh, telnet, rsh, whatever you use?)

Greetz, Peter.




if you are looking for a solution with only one entry in /etc/passwd you can
use vpopmail (http://www.vpopmail.cx)
-> 1 entry in /etc/passwd - everything runs under a single UID/GID
-> Support for Oracle, Sybase, Mysql, LDAP, /etc/passwd, /etc/shadow and
default cdb authentication storage
etc.
for more features, have a look at their page.

cya
Joel





Hi,

I got qmail to work (thanks Peter) and installed qmail-pop3d with a single
UID according to Paul Gregg's instructions. However I must have made a dumb
mistake along the way (probably in inetd.conf) :

when trying to retrieve mail I get a
-ERR this user has no $HOME/Maildir

On the local machine :
telnet 192.168.1.1 110
<...>
-ERR this user has no $HOME/Maildir

telnet 127.0.0.1 110
<...>
-ERR this user has no $HOME/Maildir

HOWEVER if I run :
/var/qmail/bin/qmail-popup host.domain /bin/checkpoppasswd
/var/qmail/bin/qmail-pop3d Maildir
and then
telnet 192.168.1.1 110
the user is authorized and everything works fine !!!

Here is my inetd.conf line :
pop3 stream tcp nowait root /var/qmail/bin/qmail-popup host.domain
/bin/checkpoppasswd /var/qmail/bin/qmail-pop3d Maildir

The user does have a Maildir :
users/assign:
=domain-user:popuser:511:511:/var/qmail/pop/popboxes/domain/user/:::
.

There is a .qmail file and a Maildir directory both owned by the single UID
popuser

Thanks for your help



**********************************************************************
In KPMG's opinion, non-encrypted communication via the Internet is not to be 
considered secure.
For that reason, it is KPMG's policy that uninvited use of the Internet concerning 
exchange of confidential information with our clients must not take place.  When 
exchanging information, the client is held liable.

This e-mail may contain confidential information and is intended solely for the 
addressee, and any disclosure of this information is strictly prohibited and may be 
unlawful.  If you have received this e-mail by mistake, please notify us immediately 
and delete this mail.

**********************************************************************


Reply via email to