chattr -i tcp.smtp (you probably set it a while ago but forgot..you can set it after you are done by doing a chattr +i tcp.smtp but then you might forget again ;) ).
Paul On Tue, 2009-02-17 at 21:23 -0600, Kent Busbee wrote: > Holy cow, I think you maybe right! > > [r...@mail tcprules.d]# lsattr tcp.smtp > ----i-------- tcp.smtp > [r...@mail tcprules.d]# > > How do I correct this? Should it be? > > > See response above; Paul Zimdars wrote: > > If you do an lsattr on the file does it have a +i? Is the immunity bit > > set? (only thing I can think of). > > > > Paul > > On Tue, 2009-02-17 at 20:02 -0600, Kent Busbee wrote: > >> good question: > >> > >> [r...@mail tcprules.d]# id > >> uid=0(root) gid=0(root) > >> groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) > >> [r...@mail tcprules.d]# lsof | grep tcp.smtp > >> [r...@mail tcprules.d]# > >> > >> unfortunate answer... > >> > >> I'm probably going to have to go into single user mode and see if I can > >> edit it from there, but I am working from home tonight. > >> > >> Thanks for all the tips, any other thoughts?? > >> > >> > >> See response below; Eric Shubert wrote: > >> > # id > >> > # lsof | grep tcp.smtp > >> > ? > >> > > >> > Kent Busbee wrote: > >> >> They seem to be fine: > >> >> [r...@mail /]# ls -ld etc > >> >> drwxr-xr-x 84 root root 12288 Feb 17 15:42 etc > >> >> [r...@mail /]# ls -ld etc/tcprules.d/ > >> >> drwxr-xr-x 2 root root 4096 Feb 17 17:14 etc/tcprules.d/ > >> >> [r...@mail /]# > >> >> [r...@mail /]# cd /etc/tcprules.d/ > >> >> [r...@mail tcprules.d]# > >> >> [r...@mail tcprules.d]# ls -inlq > >> >> total 32 > >> >> 18122463 -rw-r--r-- 1 0 0 479 Oct 16 2007 tcp.smtp > >> >> 18122880 -rw-r--r-- 2 0 0 479 Oct 5 2007 tcp.smtp.backup > >> >> 18122925 -rw-r--r-- 2 0 0 460 Oct 2 2007 tcp.smtp.bk2 > >> >> 18122501 -rw-r--r-- 1 0 0 2560 Oct 17 13:47 tcp.smtp.cdb > >> >> 18123670 -rw-r--r-- 1 0 0 418 Feb 17 12:47 tcp.smtp.dksignonly > >> 18122533 -rw-r--r-- 1 0 0 479 Feb 17 12:34 tcp.smtp.domainkeys > >> 18122949 -rw-r--r-- 2 0 0 293 Oct 16 2007 tcp.smtp.org > >> >> 18122882 -rw-r--r-- 2 0 0 354 Mar 26 2007 tcp.smtp.sav > >> >> also, ownership and groups look right, and the inodes seem correct. > >> This > >> >> is bugging me now.... > >> >> See response above; Eric Shubert wrote: > >> >>> What are the permissions on /etc ? > >> >>> Kent Busbee wrote: > >> >>>> Too bad! It seems to have been working for the last two years. > >> Anyhow, > >> >>>> I > >> >>>> edited the file /etc/tcp.smtp and it would not let me save. I am > >> logged > >> >>>> in as root.... am I missing something? > >> >>>> [r...@mail tcprules.d]# whoami > >> >>>> root > >> >>>> [r...@mail tcprules.d]# ls -l > >> >>>> total 40 > >> >>>> -rw-r--r-- 1 root root 479 Oct 16 2007 tcp.smtp > >> >>>> -rw-r--r-- 1 root root 479 Feb 17 12:36 tcp.smtp~ > >> >>>> -rw-r--r-- 2 root root 479 Oct 5 2007 tcp.smtp.backup > >> >>>> -rw-r--r-- 2 root root 460 Oct 2 2007 tcp.smtp.bk2 > >> >>>> -rw-r--r-- 1 root root 2560 Oct 17 13:47 tcp.smtp.cdb > >> >>>> -rw-r--r-- 1 root root 418 Feb 17 12:47 tcp.smtp.dksignonly > >> -rw-r--r-- 1 root root 479 Feb 17 12:34 tcp.smtp.domainkeys > >> -rw-r--r-- 2 root root 293 Oct 16 2007 tcp.smtp.org > >> >>>> -rw-r--r-- 2 root root 354 Mar 26 2007 tcp.smtp.sav > >> >>>> -rw-r--r-- 1 root root 479 Feb 17 14:32 tcp.smtz~ > >> >>>> [r...@mail tcprules.d]# cp tcp.smtp.dksignonly tcp.smtp > >> >>>> cp: overwrite `tcp.smtp', overriding mode 0644? y > >> >>>> cp: cannot create regular file `tcp.smtp': Permission denied > >> >>>> [r...@mail tcprules.d]# touch tcp.smtp > >> >>>> touch: cannot touch `tcp.smtp': Permission denied > >> >>>> [r...@mail tcprules.d]# > >> >>>> See response above; Eric Shubert wrote: > >> >>>>> Domainkeys on the toaster is known to be broken. Signing of > >> outgoing > >> emails appears to work reliably, but checking of incoming emails is > >> intermittently errant. > >> >>>>> You can do one of 2 things to work around the problem. > >> >>>>> If you want to disable only incoming checking and continue to sign > >> outgoing messages, you can remove all DKxxx definitions in > >> >>>>> /etc/tcprules.d/tcp.smtp EXCEPT DKSIGN. (don't forget to rebuild > >> the > >> cdb) > >> >>>>> If you want to disable DomainKeys entirely, the best way is > >> >>>>> documented > >> >>>>> here: http://wiki.qmailtoaster.com/index.php/Disabling_Domain_Keys > >> HTH > >> >>>>> Kent Busbee wrote: > >> >>>>>> Every since there seems to have been some sort of merge/joint > >> project > >> >>>>>> with > >> >>>>>> bellsouth and yahoo, I have had problems receiving bellsouth > >> emails. > >> >>>>>> Thier domainkeys seem to be messed up. I keep getting things > >> like > >> this: > >> >>>>>> 02-17 11:16:52 tcpserver: pid 581 from 67.195.8.69 > >> >>>>>> 02-17 11:16:52 tcpserver: ok 581 > >> >>>>>> mail.northlakechristian.org:192.168.1.8:25 :67. > >> >>>>>> 195.8.69::47684 > >> >>>>>> 02-17 11:16:58 CHKUSER accepted rcpt: from > >> >>>>>> <[email protected]::> > >> >>>>>> remote <we > >> >>>>>> b180005.mail.gq1.yahoo.com:unknown:67.195.8.69> rcpt > >> >>>>>> <gnob...@northlakechristian > >> >>>>>> .org> : found existing recipient > >> >>>>>> 02-17 11:16:58 spamdyke[581]: ALLOWED from: > >> [email protected] to: > >> >>>>>> gnob...@n > >> >>>>>> orthlakechristian.org origin_ip: 67.195.8.69 origin_rdns: > >> >>>>>> web180005.mail.gq1.yah > >> >>>>>> oo.com auth: (unknown) > >> >>>>>> 02-17 11:17:02 simscan:[584]:CLEAN > >> >>>>>> (-0.10/7.00):4.2746s::67.195.8.69:vikif...@be > >> >>>>>> llsouth.net:[email protected]: > >> >>>>>> 02-17 11:17:02 qmail-smtpd: qq hard reject (DomainKeys verify > >> status: > >> >>>>>> no > >> >>>>>> key > >> >>>>>> (#5.3.0)): MAILFROM:<[email protected]> > >> >>>>>> RCPTTO:gnob...@northlakechristia > >> >>>>>> n.org > >> >>>>>> 02-17 11:17:03 tcpserver: end 581 status 0 > >> >>>>>> 02-17 11:17:03 tcpserver: status: 6/100 > >> >>>>>> 02-17 11:17:17 tcpserver: status: 7/100 > >> >>>>>> Is anyone else having such problems? I have never had problems > >> with > >> >>>>>> domainkeys in the past. > >> >>>>>> Kent Busbee > >> >>>>>> Director of Technology > >> >>>>>> Northlake Christian School > >> >>>>> -- > >> >>>>> -Eric 'shubes' > >> >>>>> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: > >> >>>>> [email protected] > >> >>>>> For additional commands, e-mail: > >> >>>>> [email protected] > >> >>>> Kent Busbee > >> >>>> Director of Technology > >> >>>> Northlake Christian School > >> >>> -- > >> >>> -Eric 'shubes' > >> >>> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: [email protected] > >> For additional commands, e-mail: > >> >>> [email protected] > >> >> Kent Busbee > >> >> Director of Technology > >> >> Northlake Christian School > >> > > >> > > >> > -- > >> > -Eric 'shubes' > >> > > >> > > >> > --------------------------------------------------------------------- > >> To > >> unsubscribe, e-mail: [email protected] For > >> additional commands, e-mail: [email protected] > >> > > >> > > >> > >> > >> Kent Busbee > >> Director of Technology > >> Northlake Christian School > >> > >> > >> > >> > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: [email protected] > >> For additional commands, e-mail: [email protected] > >> > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > > > Kent Busbee > Director of Technology > Northlake Christian School > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
