[email protected] wrote:
Thanks Eric,
the internal servers are running netqmail-1.06. So what you are saying
is to make sure the qmail daemons are not running by stopping them and
moving the run scripts out of /service directory.
Right. Or you can stop them by adding a file named 'down' to the directory:
# touch /service/smtp/down
Then install postfix
via yum and configure it per your instructions in the quickie guide to
configuring postfix to relay securely to a toaster.
Right.
Does that sound about right? Then if postfix works, I can go about
finding and removing qmail if I wish.
Right again. s/if/when/ ;)
Just don't remove /usr/sbin/sendmail (or anything belonging to postfix).
Thanks,
Dave
Eric Shubert wrote:
[email protected] wrote:
Hello list,
I have been using eMPF for about one year now and it does a great job
limiting email accounts and/or who they can send or receive emails
from. Thanks for including it in the distribution.
I have noticed that eMPF requires that the user sending the email
authenticates (otherwise how would it know if the user was allowed to
send or not). I run several applications (nagios, timetrex, etc) on
servers I have on my LAN. These internal servers occasionally send
automated emails. I have qmail (from source boo!) installed on the
internal servers, but not qmailtoaster. I have the internal servers
relay mail to my qmailtoaster server. I entered the ip address of the
qmailtoaster server into /var/qmail/control/smtproutes control file
of my internal servers.
If the application I am running (see above) has a config section where I
can enter a smtp server, a valid [email protected] and a valid
password, then my qmailtoaster will accept the email and relay
successfully. However, if application does not have a config section
for the smtp server, username, and password or the application uses a
phpmailer (which many do) the relayed email fails. In the smtp log file
on the qmailtoaster spamdyke reports "DENIED OTHER" which means "The
text returned by qmail (or the downstream filter that generated the
rejection).". Here is a section of the smtp logfile on the qmailtoaster
server when the email fails:
11-10 11:55:20 policy_check: local [email protected] -> local
[email protected] (UNAUTHENTICATED SENDER)
11-10 11:55:20 spamdyke[21618]: DENIED_OTHER from: [email protected] to:
[email protected] origin_ip: 192.168.105.110 origin_rdns:
(unknown) auth: (unknown)
If I empty my /var/qmail/control/policy file (empf config file)
basically turning eMPF off, and send the same message, it is
successful. Here is a section of the smtp logfile on the qmail toaster
after turning off eMPF
11-10 13:26:25 policy_check: local [email protected] -> local
[email protected] (UNAUTHENTICATED SENDER)
11-10 13:26:25 spamdyke[24110]: ALLOWED from: [email protected] to:
[email protected] origin_ip: 192.168.105.110 origin_rdns:
(unknown) auth: (unknown)
Does anyone know a way around this?
Turning off eMPF is not an option since my client insists on limiting
email accounts. I read a post by Eric dated 10/29/2009 regarding "a
quickie guide to configuring postfix to relay securely to a toaster".
This seems simple enough. I suppose I would need to remove qmail first
and seeing how it was installed from source, it may be a little more
complicated than "rpm -e".
Any suggestions, comments, etc. would be greatly appreciated.
Thanks,
Dave
Sounds to me like getting your other servers to authenticate is your
best solution.
Which mailer/MTA is running on those hosts? If it's qmail and not an
rpm, you should simply make sure the daemons are not running. Other
than that, the critial piece is the sendmail program itself. Be sure
that, after postfix is installed, that all $PATH settings are picking
up the correct program (usually /usr/sbin/sendmail).
HTH.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
