[vchkpw] smtp auth

2005-01-28 Thread Dave Goodrich
Good morning,
I find mysqlf in need of smtp auth for my users. I've looked at several 
bits online about it and I have a few questions for the list.

qmail-1.03 as per qmail Handbook
qmail-maildir++.patch
qmail-0.0.0.0.patch
vpopmail-5.4.8 (MySQL auth)
FreeBSD 5.2.1
cat /service/qmail-smtpd/run
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`head -1 /var/qmail/control/concurrencyincoming`
if [ -z $QMAILDUID -o -z $NOFILESGID -o -z $MAXSMTPD ]; then
echo QMAILDUID, NOFILESGID, or MAXSMTPD is unset in
echo $0
exit 1
fi
exec /usr/local/bin/softlimit -m 200 \
/usr/local/bin/tcpserver -v -P -R -h -l 0 -x 
/var/qmail/control/tcp.smtp.cdb -c $MAXSMTPD \
-u $QMAILDUID -g $NOFILESGID 10.0.241.136 25 rblsmtpd \
-r bl.spamcop.net \
-r relays.ordb.org \
-t 20 \
/usr/local/bin/fixcrio /var/qmail/bin/qmail-smtpd 21


1) What is everyone else using?
2) Some examples/patches show that a hostname is required in the run 
file for auth http://www.enderunix.org/documents/eng/smtp-auth/; and 
some do not http://www.fehcom.de/qmail/smtpauth.html#IMPLEMENTATION;. I 
would think this is not possible using vpopmail, as a hardcoded host 
would cause vchkpw to fail the lookup. Correct?

3) How does this effect users who do not supply auth info? Does 
qmail-smtpd fall back to using the RELAYCLIENT value from tcp.smtp.cdb?

It seems easy enough to implement, too easy, scares me I am missing 
something.

Thanks,
DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!



[vchkpw] My excuses -- Multiple bounces for the same message

2005-01-28 Thread X-Istence
Hello,
This weekend i have been having an issue with one of the MTA's that is 
a backup MX for my domain, it seems to have bounced every message 
addressed to me, more than once. I would like to apologize for the 
bounces you may have gotten to message you have posted to this list.

J-W Regeer.

smime.p7s
Description: S/MIME cryptographic signature


Re: [vchkpw] smtp auth

2005-01-28 Thread Tom Collins
On Jan 28, 2005, at 9:00 AM, Dave Goodrich wrote:
1) What is everyone else using?
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
DENYMAIL=DNSCHECK
export DENYMAIL
LOCAL=`/usr/bin/head -1 /var/qmail/control/me`
/usr/bin/spamd -a -c -d -F0 -u qmailq
exec /usr/local/bin/softlimit -m 600 \
/usr/local/bin/tcpserver -H -R -l $LOCAL \
-x /home/vpopmail/etc/tcp.smtp.cdb -c $MAXSMTPD \
-u $QMAILDUID -g $NOFILESGID 0 smtp \
/var/qmail/bin/qmail-smtpd \
/home/vpopmail/bin/vchkpw /bin/true 21
2) Some examples/patches show that a hostname is required in the run 
file for auth http://www.enderunix.org/documents/eng/smtp-auth/; and 
some do not http://www.fehcom.de/qmail/smtpauth.html#IMPLEMENTATION;. 
I would think this is not possible using vpopmail, as a hardcoded host 
would cause vchkpw to fail the lookup. Correct?
An older patch required it, but the current patch does not.  The 
hardcoded host name was only used in generating the MD5 challenge, and 
could be any string of text.  If you're using the patch from vpopmail's 
contrib directory, then you shouldn't have the hostname.

3) How does this effect users who do not supply auth info? Does 
qmail-smtpd fall back to using the RELAYCLIENT value from 
tcp.smtp.cdb?
Yes.
--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/