Rajesh,
I apologize for the responses that have not been helpful. After looking
at the settings (below) from here
<http://opensource.interazioni.it/qmail/chkuser/documentation/chkuser_settings.html>
and going through the code, I'm convinced that the "NONE" option will
not be helpful or do what you expect or what the documentation even
states (Tonix, please review):
<settings>
CHKUSER_STARTING_VARIABLE 2.0.5 commented "CHKUSER_START"
Sets the variable that must be read, at qmail-smtpd start, in order to
understand how to use chkuser for any domain. The variable must be
filled with the following values:
NONE = chkuser will not work
ALWAYS = chkuser will work always
DOMAIN = chkuser will work depending on single domain settings
Any other value, or a missing value, will disable chkuser.
Incompatible with CHKUSER_ALWAYS_ON since 2.0.9
</settings>
Since you've already defined 'CHKUSER_STARTING_VARIABLE' at compile time
in chkuser_settings.h, I think simply leaving the variable CHKUSER_START
(null) out of both the run file and the tcp.smtp file you will get what
you've been expecting (stop and start qmail of course). The settings
section indicates this as well:
"Any other value, or a missing value, will disable chkuser."
In fact, in my study of the code, I don't think the NONE option does
anything. If Tonix is looking at this thread maybe he could help
*fingers crossed*.
Please let me know how it goes.
Eric
On 9/18/2017 12:33 PM, Eric Broch wrote:
Rajesh,
Can you set this in /var/qmail/supervise/smtp/run
CHKUSER_START="NONE"
export CHKUSER_START
exec
/usr/bin/softlimit....................................................................................
On 9/18/2017 12:10 PM, Eric Broch wrote:
Sorry, my mistake, Rajesh,
#define CHKUSER_STARTING_VARIABLE "CHKUSER_START"
sets CHKUSER_STARTING_VARIABLE to CHKUSER_START
On 9/18/2017 11:53 AM, Eric Broch wrote:
Rajesh,
In the code there is no check for 'CHKUSER_START' but there is for
'CHKUSER_STARTING_VARIABLE'. So, in tcp.smtp use
'CHKUSER_STARTING_VARIABLE' like so:
CHKUSER_STARTING_VARIABLE="NONE"
then stop and start qmail.
Here's the code and the environment variable chkuser checks:
<code>
starting_string = env_get (CHKUSER_STARTING_VARIABLE);
if (starting_string) {
if (strcasecmp(starting_string, "ALWAYS") == 0) {
starting_value = 1;
} else if (strcasecmp(starting_string, "DOMAIN") == 0) {
starting_value = 0;
}
} else {
starting_string = "";
starting_value = -1;
}
</code>
Eric
On 9/18/2017 11:38 AM, Eric Broch wrote:
Sorry to ask this, but did you restart qmail after the change?
On 9/18/2017 8:52 AM, Rajesh M wrote:
hi eric
i wished to disable chkusr mx check, format check etc .. and turn off chkuser using
CHKUSER_START="NONE"
the default installation of qmail always keeps chkuser on with no control
so i rebuild chkuser from source
CHANGES FOR CHK USER
EXTRA SOURCE FROM RPM
rpm -Uvh qmail-1.03-1.qt.src.rpm
nano /root/rpmbuild/SPECS/qmail.spec
put a sleep in this for 120 seconds
open 2nd window of ssh
service qmail stop
in first window run
rpmbuild -bb --define "dist .qt.el6" qmail.spec
the process will now for halt for 180 seconds which gives us time to modify
chkuser_settings.h settings
in second window go to
cd /root/rpmbuild/BUILD/qmail-1.03
nano chkuser_settings.h
UNCOMMENT THIS
#define CHKUSER_STARTING_VARIABLE "CHKUSER_START"
comment out the following
/* #define CHKUSER_RCPT_MX */
/* #define CHKUSER_ENABLE_USERS_EXTENSIONS */
/* #define CHKUSER_USERS_DASH '-' */
now the problem is that even if I set CHKUSER_START="NONE" i get errors
here is my tcp.smtp file for submission port (i use separate tcp.smtp files for
25 and 587)
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_START="NONE"
i still get errors as such
2017-09-18 11:48:08.810159500 CHKUSER rejected rcpt:
from<[email protected]:[email protected]:> remote
<FTLPCS27:unknown:182.73.35.162> rcpt <[email protected]> : max number of
recipients
2017-09-18 11:48:09.894092500 CHKUSER rejected intrusion: from<[email protected]:[email protected]:> remote <FTLPCS27:unknown:182.73.35.162> rcpt <sreecharanbank@domain2> : rcpt ignored, session over intrusion threshold
2017-09-18 11:48:11.226284500 CHKUSER rejected intrusion: from<[email protected]:[email protected]:> remote <FTLPCS27:unknown:182.73.35.162> rcpt <[email protected]> : rcpt ignored, session over intrusion threshold
help required please
rajesh
---------------------------------------------------------------------
To unsubscribe, e-mail:[email protected]
For additional commands, e-mail:[email protected]
--
Eric Broch
White Horse Technical Consulting (WHTC)
--
Eric Broch
White Horse Technical Consulting (WHTC)
--
Eric Broch
White Horse Technical Consulting (WHTC)
--
Eric Broch
White Horse Technical Consulting (WHTC)
--
Eric Broch
White Horse Technical Consulting (WHTC)
