Re: sqwebmail and qmail?

2001-07-17 Thread Vincent Schonau

On Mon, Jul 16, 2001 at 05:06:04PM -0700, Bill Parker wrote:
 Hi All,

   I was wondering, is there a way to make a reply to a
 message sent from sqwebmail not show the username@FQDN but
 rather username@domain

This purely an sqwebmail issue, and your should really have asked it on the
sqwebmail mailing list. You can find the answer in the sqwebmail INSTALL
file; look for 'sendit.sh'.

Vince.



autoresponder install....cjk

2001-07-17 Thread Constantine Koulis

Hello.
I download the autoresponder program from untroubled.org of Bruce Guenter
but i dont know how to INSTALL it.
Can somebody help...
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.




Re: [avi@praxell.com: error in mail delivery - after connection e stablished nothing hap pens for 30 sec connection resets]

2001-07-17 Thread Henning Brauer

On Tue, Jul 17, 2001 at 12:04:15PM +0200, Avi Rozner wrote:
 
 
 Well Dear Friends , 
 Thank you very much for laughing at me.

We are laughing about [EMAIL PROTECTED], not you.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)



Re: autoresponder install....cjk

2001-07-17 Thread Adrian Ho

On Tue, Jul 17, 2001 at 11:15:38AM +0300, Constantine Koulis wrote:
 I download the autoresponder program from untroubled.org of Bruce Guenter
 but i dont know how to INSTALL it.

Unpack tarball, make all install.

-- 
Adrian HoTinker, Drifter, Fixer, Bum   [EMAIL PROTECTED]
Archived @:  http://marc.theaimsgroup.com/?l=qmail
Useful URLs: http://cr.yp.to/qmail.html http://www.qmail.org
 http://www.lifewithqmail.org/ http://qmail.faqts.com/



Re: Please help with bounce

2001-07-17 Thread Vincent Schonau

On Tue, Jul 17, 2001 at 02:35:45PM +, Sky wrote:
 Hello all,
 I have a problem with qmail bouncing.
 Here is the problem:
 I have a provider (demos.su also dol.ru) pop3 account elsewhere
 and also I have forwarding email at third location.
 Usually, I send mail using my provider's smtp, in the message I have
 forwarding From: field, and I collect replies from my pop3 account.

[ ... ]

 [EMAIL PROTECTED]:
 194.87.0.16 does not like recipient.
 Remote host said: 571 [EMAIL PROTECTED] we do not
 relay
 Giving up on 194.87.0.16.

[snip]

 Return-Path: [EMAIL PROTECTED]
 Received: (qmail 6574 invoked from network); 17 Jul 2001 13:34:53 -
 Received: from mx.demos.su (HELO demos.su) (194.87.0.32)
   by linux.polisma.net with SMTP; 17 Jul 2001 13:34:53 -
 Received: from [194.87.5.54] (HELO geisteskrank.demos.su)
   by demos.su (CommuniGate Pro SMTP 3.4.8/D)
   with ESMTP id 29014079 for [EMAIL PROTECTED]; Tue, 17 Jul 2001 13:34:32
 +0400
 Received: by geisteskrank.demos.su  with SMTP id f6H9Xuf81758
  from atomik  (IDENT:[EMAIL PROTECTED]
 [194.87.5.54])

As these headers show, it is geisteskrank.demos.su that rewrites your
envelope-from. That's broken behaviour, especially if they do not accept
addresses of that format. Tell demos.su to fix their MTA.

 P.S.
 
 [EMAIL PROTECTED] is my forwarding address - it forwards mail to my pop3
 account.
 
 Please help me with configuring bounce so that it sends bounce to
 From: field, and not to what it sends now.

No; that would be broken behaviour. Bounces should only go to the
envelope-sender. The problem is with your provider.

Vince.



Remote DoS

2001-07-17 Thread davi

Hi Guys,

Anyone aware of a remote DoS against qmail?
We we're attacked this weekend and attackers were able to crash SMTP without 
affecting any others services in the machine.
This was _not_ the multiple RCPT TO: problem.
I run qmail 1.03 + qmailqueue patch + qmailscanner under tcpserver limiting 
memory resources to 7 MB.

[]s
Davi de Castro Reis




Re: Remote DoS

2001-07-17 Thread Dave Sill

[EMAIL PROTECTED] wrote:

We we're attacked this weekend and attackers were able to crash SMTP without 
affecting any others services in the machine.

What does crash SMTP mean?

-Dave



Re: compile error

2001-07-17 Thread Kjetil Ødegaard

* Kenneth [EMAIL PROTECTED]

 I encountered the following error in compiling qmail in my redhat
 7.1 machine. Appreciate any idea to solve this problem.

Did you create the user alias?

-- 
Kjetil



Re: compile error

2001-07-17 Thread Jake Roersma


On 2001.07.17 10:31 Kenneth wrote:
 Hello all,
 
 I encountered the following error in compiling qmail in my redhat
 7.1 machine. Appreciate any idea to solve this problem.
 
 # make setup check
 ( ./auto-uid auto_uida `head -1 conf-users` \
 ./auto-uid auto_uidd `head -2 conf-users | tail -1` \
 ./auto-uid auto_uidl `head -3 conf-users | tail -1` \
 ./auto-uid auto_uido `head -4 conf-users | tail -1` \
 ./auto-uid auto_uidp `head -5 conf-users | tail -1` \
 ./auto-uid auto_uidq `head -6 conf-users | tail -1` \
 ./auto-uid auto_uidr `head -7 conf-users | tail -1` \
 ./auto-uid auto_uids `head -8 conf-users | tail -1` \
 ./auto-gid auto_gidq `head -1 conf-groups` \
 ./auto-gid auto_gidn `head -2 conf-groups | tail -1` \
 )  auto_uids.c.tmp  mv auto_uids.c.tmp auto_uids.c
 fatal: unable to find user alias
 make: *** [auto_uids.c] Error 111
 
 Thanks in advance.
 
 -- 
 Best regards,
  Kenneth  mailto:[EMAIL PROTECTED]
 
 
 
Seems you forgot to add the user alias.. Check /etc/passwd to make sure the
user exsists.. If not you may want to use useradd qmaild -g nofiles -d
/var/qmail -s /nonexistent.. I'm assuming you have added all other
necessary groups and users.. If not check the 'Life with Qmail'
documentaiton (http://www.lifewithqmail.org/lwq.html).

-- 
Jake Roersma
Network Engineer
Triton Technologies Inc.
(800)-837-4253/364-8761




Re: qmail flaws?

2001-07-17 Thread Joachim Bauernberger

On Tuesday 17 July 2001 06:28, you wrote:
 On Mon, Jul 16, 2001 at 04:48:37PM -0700, Hank Wethington wrote:
 [ran tests on qmail, wants insight into the results]

  1)The remote STMP server seems to allow remote users to
  send mail anonymously by providing a too long argument
  to the HELO command (more than 1024 chars).
 
  This problem may allow bad guys to send hate
  mail, or threatening mail using your server
  and keep their anonymity.

 Presumably the vulnerability scanner considers this a problem because
 some MTA has a fixed space buffer for the Received: header, and if the
 HELO argument is too long it leaves insufficient room in the buffer
 for the sender IP and timestamp, which come after the HELO argument.
 Note that this problem has little to do with buffer overflows; even
 if proper bounds checking is done it still leaves insufficient space
 for the additional information.

 qmail has no such problems. For qmail-smtpd, commands.c is the first
 stop for input from HELO. commands() in commands.c  saves the HELO
 argument into a dynamically allocated string using stralloc, calling
 die_nomem() if it runs out of memory. In other words, if qmail-smtpd
 doesn't abort for lack of memory, the argument is stored in its
 entirety.

 The next stop for the HELO argument is smtp_helo() in
 qmail-smtpd.c. It sends a 250 response to the client.

 Then the argument is passed to dohelo() in qmail-smtpd.c. It is copied
 into an stralloc string, again calling die_nomem() if stralloc
 fails.

 When it comes time to generate the Received: line, qmail-smtpd has
 spawned qmail-queue, which should be ready to pass the message through
 to a queue file. received() in received.c passes each part of the
 Received: line to a buffer layer, effectively causing the HELO
 argument to go straight through qmail-queue into the queue file.

 qmail-smtpd will reliably handle any length HELO argument up to the
 limits of memory, and if it runs out of memory it aborts the
 transaction entirely.

  2)The remote SMTP server is vulnerable to a redirection
  attack. That is, if a mail is sent to :
 
  user@hostname1@victim
 
  Then the remote SMTP server (victim) will happily send the
  mail to :
  user@hostname1
 
  Using this flaw, an attacker may route a message
  through your firewall, in order to exploit other
  SMTP servers that can not be reached from the
  outside.

 This is covered in the archives.

 What vulnerability scanner are you using?
nessus points this out as a security hole.

-- 
You can get my public pgp key here:
http://foobar.gmxhome.de/joachim.txt




fixcrio question

2001-07-17 Thread Perry Macdonald


I have been fighting a problem with SMTP delivery that appears to be a
CR-LF issue.  I am able to have qmail accept mail from many Dell
desktop/workstations running w2k/Outlook2k, but on two Dell laptops, I
cannot. I can send email using Netscape if I hit cancel while wainting
for the SMTP transaction to complete.

I have tried fixcrio and have had no change in the recordio output.  Can
someone tell me why?


Here is my /service/smtpd/run script  ...

#!/bin/sh
. /usr/share/qmail/run-functions

# If rblsmtpd is installed, process rbltimeout rbldomains, and
antirbldomains
if [ -x /usr/bin/rblsmtpd ]; then
 readdefault domains antirbldomains 
 for domain in $domains; do
  rblopts=$rblopts -a $domain
 done
 readdefault domains rbldomains 
 for domain in $domains; do
  rblopts=$rblopts -r $domain
 done
 readdefault timeout rbltimeout 60
 if [ -n $rblopts ]; then
  rbl=/usr/bin/rblsmtpd -t $timeout $rblopts
 fi
fi

# Start daemons.
readdefault concurrency concurrencysmtpd 80

MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
do_ulimits

exec envuidgid qmaild \
tcpserver -DHRUvX -c $MAXSMTPD -l `head -1 /var/qmail/control/me` \
 -x /etc/tcpcontrol/smtp.cdb 0 smtp \
 /usr/bin/fixcrio recordio qmail-smtpd

produces  this for a simple test message containing the text 123 with
no CR after 3

Jul 17 07:28:20 fs1 smtpd: 995380100.277389 tcpserver: status: 6/100
Jul 17 07:28:20 fs1 smtpd: 995380100.278395 tcpserver: pid 14409 from
192.168.1.67
Jul 17 07:28:20 fs1 smtpd: 995380100.278555 tcpserver: ok 14409
fs1.cam.lucix.com:192.168.1.2:25 :192.168.1.67::1161
Jul 17 07:28:20 fs1 smtpd: 995380100.282055 14409  220
fs1.cam.lucix.com ESMTP?
Jul 17 07:28:20 fs1 smtpd: 995380100.282812 14409  HELO macdonaldpacam?

Jul 17 07:28:20 fs1 smtpd: 995380100.282879 14409  250
fs1.cam.lucix.com?
Jul 17 07:28:20 fs1 smtpd: 995380100.290626 14409  MAIL FROM:
[EMAIL PROTECTED]?
Jul 17 07:28:20 fs1 smtpd: 995380100.290685 14409  250 ok?
Jul 17 07:28:20 fs1 smtpd: 995380100.291244 14409  RCPT TO:
[EMAIL PROTECTED]?
Jul 17 07:28:20 fs1 smtpd: 995380100.291301 14409  250 ok?
Jul 17 07:28:20 fs1 smtpd: 995380100.291748 14409  DATA?
Jul 17 07:28:20 fs1 smtpd: 995380100.293227 14409  354 go ahead?
Jul 17 07:28:20 fs1 smtpd: 995380100.336658 14409  From: Perry
Macdonald [EMAIL PROTECTED]?
Jul 17 07:28:20 fs1 smtpd: 995380100.450084 14409  To:
[EMAIL PROTECTED]?
Jul 17 07:28:20 fs1 smtpd: 995380100.533753 14409  Subject: Test?
Jul 17 07:28:20 fs1 smtpd: 995380100.569682 14409  Date: Tue, 17 Jul
2001 07:28:19 -0700?
Jul 17 07:28:20 fs1 smtpd: 995380100.605494 14409  Message-ID:
[EMAIL PROTECTED]?
Jul 17 07:28:20 fs1 smtpd: 995380100.649039 14409  MIME-Version: 1.0?
Jul 17 07:28:20 fs1 smtpd: 995380100.683426 14409  Content-Type:
text/plain;?
Jul 17 07:28:20 fs1 smtpd: 995380100.718507 14409 
?charset=iso-8859-1?
Jul 17 07:28:20 fs1 smtpd: 995380100.754382 14409  Cont+
Jul 17 07:28:20 fs1 smtpd: 995380100.790261 14409 
ent-Transfer-Encoding: 7bit?
Jul 17 07:28:20 fs1 smtpd: 995380100.826140 14409  X-Priority: 3
(Normal)?
Jul 17 07:28:20 fs1 smtpd: 995380100.862016 14409  X-MSMail-Priority:
Normal?
Jul 17 07:28:20 fs1 smtpd: 995380100.897895 14409  X-Mailer: Microsoft
Outlook IMO, Build 9.0.2416 (9.0.2911.0)?
Jul 17 07:28:20 fs1 smtpd: 995380100.933772 14409  Importance: Normal?
Jul 17 07:28:20 fs1 smtpd: 995380100.969653 14409  X-MimeOLE: Produced
By Microsoft MimeOLE V5.50.4133.2400?
Jul 17 07:28:21 fs1 smtpd: 995380101.005531 14409  ?
Jul 17 07:28:21 fs1 smtpd: 995380101.041405 14409  123+


I removing the fixcrio by changing /svc/smtp/run to


#!/bin/sh
. /usr/share/qmail/run-functions

# If rblsmtpd is installed, process rbltimeout rbldomains, and
antirbldomains
if [ -x /usr/bin/rblsmtpd ]; then
 readdefault domains antirbldomains 
 for domain in $domains; do
  rblopts=$rblopts -a $domain
 done
 readdefault domains rbldomains 
 for domain in $domains; do
  rblopts=$rblopts -r $domain
 done
 readdefault timeout rbltimeout 60
 if [ -n $rblopts ]; then
  rbl=/usr/bin/rblsmtpd -t $timeout $rblopts
 fi
fi

# Start daemons.
readdefault concurrency concurrencysmtpd 80

MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
do_ulimits

exec envuidgid qmaild \
tcpserver -DHRUvX -c $MAXSMTPD -l `head -1 /var/qmail/control/me` \
 -x /etc/tcpcontrol/smtp.cdb 0 smtp \
 recordio qmail-smtpd

and an then issue 

/svc -d  /service/smptd/
/svc -u  /service/smptd/

Then I get the identical response (note the 123+ at the end) ...


Jul 17 07:32:07 fs1 smtpd: 995380327.180846 tcpserver: status: 1/100
Jul 17 07:32:07 fs1 smtpd: 995380327.181987 tcpserver: pid 14465 from
192.168.1.67
Jul 17 07:32:07 fs1 smtpd: 995380327.182147 tcpserver: ok 14465
fs1.cam.lucix.com:192.168.1.2:25 :192.168.1.67::1163
Jul 17 07:32:07 fs1 smtpd: 995380327.184464 14465  220
fs1.cam.lucix.com ESMTP?
Jul 17 07:32:07 fs1 smtpd: 995380327.185177 14465  HELO macdonaldpacam?

Jul 17 07:32:07 fs1 smtpd: 995380327.185244 14465  250
fs1.cam.lucix.com?
Jul 17 07:32:07 fs1 smtpd: 

log format

2001-07-17 Thread GARGIULO Eduardo INGDESI

Hi all.

I'm using qmail-1.03, and it's working ok.
Yesterday, I change the way to start qmail from tarball/INSTALL docs
to LWQ. The problem is that the logs don't says (in human readable
format), the date and time of each event. Instead of that, I see
lines like 

@40003b535a1736077d54 tcpserver: ok 7541 0:10.1.1.1:25 :10.1.1.194::2525

How can I configure qmail startup process to log the events date and
time like syslog? (Jul 17 12:03:00 host process: blah, blah, blah...)

thanks

--ejg




Re[2]: compile error

2001-07-17 Thread Kenneth

Hello all,

Tuesday, July 17, 2001, 10:39:11 PM, you wrote:

KØ * Kenneth [EMAIL PROTECTED]

 I encountered the following error in compiling qmail in my redhat
 7.1 machine. Appreciate any idea to solve this problem.

KØ Did you create the user alias?


Problem solved. Thank you for all help.

-- 
Best regards,
 Kennethmailto:[EMAIL PROTECTED]





R: log format

2001-07-17 Thread Andrea Cerrito

About date, to view, pipe it to tai64nlocal.

[root@homer-a main]# tail current
@40003b54533929f756ec delivery 880: success: did_0+0+1/
@40003b54533929f78d9c status: local 0/60 remote 0/60
@40003b54533929f7a50c end msg 275504
@40003b545339309cfc04 new msg 275507
@40003b545339309d1b44 info msg 275507: bytes 10277 from sender qp 2219
uid 502
@40003b54533a07bdcdcc starting delivery 881: msg 275507 to local mailbox
@40003b54533a07bdfcac status: local 1/60 remote 0/60
@40003b54533a0b7ec984 delivery 881: success: did_0+0+1/
@40003b54533a0b7f041c status: local 0/60 remote 0/60
@40003b54533a0b7f17a4 end msg 275507

[root@homer-a main]# tail current | tai64nlocal
2001-07-17 17:01:03.704075500 delivery 880: success: did_0+0+1/
2001-07-17 17:01:03.704089500 status: local 0/60 remote 0/60
2001-07-17 17:01:03.704095500 end msg 275504
2001-07-17 17:01:03.815594500 new msg 275507
2001-07-17 17:01:03.815602500 info msg 275507: bytes 10277 from sender qp
2219 uid 502
2001-07-17 17:01:04.129879500 starting delivery 881: msg 275507 to local
mailbox
2001-07-17 17:01:04.129891500 status: local 1/60 remote 0/60
2001-07-17 17:01:04.192858500 delivery 881: success: did_0+0+1/
2001-07-17 17:01:04.192873500 status: local 0/60 remote 0/60
2001-07-17 17:01:04.192878500 end msg 275507
[root@homer-a main]#

Hope it helps.
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

 -Messaggio originale-
 Da: GARGIULO Eduardo INGDESI [mailto:[EMAIL PROTECTED]]
 Inviato: martedì 17 luglio 2001 17.11
 A: qmail list
 Oggetto: log format


 Hi all.

 I'm using qmail-1.03, and it's working ok.
 Yesterday, I change the way to start qmail from tarball/INSTALL docs
 to LWQ. The problem is that the logs don't says (in human readable
 format), the date and time of each event. Instead of that, I see
 lines like

 @40003b535a1736077d54 tcpserver: ok 7541 0:10.1.1.1:25
 :10.1.1.194::2525

 How can I configure qmail startup process to log the events date and
 time like syslog? (Jul 17 12:03:00 host process: blah, blah, blah...)

 thanks

 --ejg






repetitive receipt of email

2001-07-17 Thread Jakub Holcman

Hi,
  I have strange problem with my qmail server.

  In couple of cases in last couple weeks I've got
  repetitive receipt of one email.
  Somebody sent to any user on our server the email,
  and this email wasn't delivered once - but the email
  was started delivered multiplay in various
  period (from minutes to couple of hours). And it last couple of days.
  It means, for example 30 receipts of the one email in 3 days.
  This multiplay emails are the same emails (the same
  message-ID, the same dates/times of delivering, ...) and
  it's not some spam - it is normal email. The other communication
  with the peer is normal (other email from the same person to the
  same person is normal).

  I have no ideas where could be the problem. I realized that this
  multiplay email are quite big (100kB and more). Further I realized
  that on our server are sometimes longlasting connections (tens of minutes)
  from smtp server from which that emails came from.

  Do have anybody any idea, where is the problem?

Thanks.

..
Jakub Holcman, beeInside s.r.o.
Stepanska 13, 120 00 Praha 2
Czech Republic

E-mail [EMAIL PROTECTED]
Phone  +420 2 96 21 25 25
Fax+420 2 96 21 35 35
Mobile +420 603 325 989
ICQ 21135746

http://www.beeinside.com
..




Re: log format

2001-07-17 Thread Kjetil Ødegaard

* GARGIULO Eduardo INGDESI [EMAIL PROTECTED]

 Hi all.
 
 I'm using qmail-1.03, and it's working ok.
 Yesterday, I change the way to start qmail from tarball/INSTALL docs
 to LWQ. The problem is that the logs don't says (in human readable
 format), the date and time of each event. Instead of that, I see
 lines like 
 
 @40003b535a1736077d54 tcpserver: ok 7541 0:10.1.1.1:25 :10.1.1.194::2525
 
 How can I configure qmail startup process to log the events date and
 time like syslog? (Jul 17 12:03:00 host process: blah, blah, blah...)

As others have pointed out, you should use tai64nlocal from the
daemontools package to convert these timestamps.

If you use GNU less for viewing logs, see

  http://www.orakel.ntnu.no/~kjetilod/tips/

for instructions on how to do this conversion automatically.

-- 
Kjetil



sendmail delivery deferral

2001-07-17 Thread Drew Raines


Curious.. does sendmail have a sticky-bit-deferral mechanism like qmail, or
is that another one of djb's sage ideas?

I've been trying to organize some mail today on a box that still uses
sendmail, serving to remind me how much I appreciate qmail.

-- 
Drew



Col Wilson is pretty lame

2001-07-17 Thread MarkD

If nothing else, Mr Wilson will be associated with some interesting
search engine results.


Regards.

- Forwarded message from [EMAIL PROTECTED] -

Received: from unknown (HELO dn1.dns4com.net) (216.74.113.140)
  by arquette.bushwire.net with SMTP; 17 Jul 2001 07:05:06 -
Received: from b3390.pppool.de ([213.7.51.144] helo=antrim)
by dn1.dns4com.net with asmtp (Exim 3.20 #1)
id 15MMoh-0007xg-00
for [EMAIL PROTECTED]; Tue, 17 Jul 2001 00:50:39 -0400
Message-ID: 00c201c10e7c$5aa52330$0201a8c0@antrim
From: [EMAIL PROTECTED]
To: MarkD [EMAIL PROTECTED]
Subject: Re: mail policy
Date: Tue, 17 Jul 2001 06:51:32 +0200
MIME-Version: 1.0
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse 
report
X-AntiAbuse: Primary Hostname - dn1.dns4com.net
X-AntiAbuse: Original Domain - bushwire.net
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [0 0]
X-AntiAbuse: Sender Address Domain - colwilson.com

From: Col Wilson [EMAIL PROTECTED]
Subject: 
Date: Sun, 15 Jul 2001 09:41:14 +0200

I have repeatedly tried to unsubscribe from this list and now all I can do
is bounce messages until I am removerd, SORRY.


- End forwarded message -



Large queue and iowait

2001-07-17 Thread Mark Douglas
Title: Large queue and iowait





I'm having some problems with my qmail server. It seems to be taking an abnormally large amount of time to do queue processing. A recent mailing list send of 250k e-mail's to the server had it stuck in queue processing with iowait at 80-100% the entire time, for over 36 hours. I assume this is not a normal timeframe for processing that amount of e-mail.

The setup is as follows:


Sun Netra t1 - 450mhz ultrasparcII processor
1024MB of memory, 1.5GB of swap
18GB SCSI disk.
Solaris 8
qmail 1.03 with DNS and big-concurrency patch


If any other information is pertinent, please let me know and I'll provide it. Any insight into what the problem could be would be greatly appreciated.

Thanks,


Mark
--
s/root/Mark





gnu-pop3d[7685]: Incoming connection opened

2001-07-17 Thread David J Jackson

Is this incomming mail from qmail list:

David Jackson

nslookup:

Name:msfe10.onebox.com
Address:  64.68.76.141
Aliases:  141.76.68.64.in-addr.arpa

/var/adm/messages:

Jul 17 11:12:46 mail gnu-pop3d[7685]: connect from 64.68.76.141
Jul 17 11:12:46 mail gnu-pop3d[7685]: Incoming connection opened
Jul 17 11:12:48 mail gnu-pop3d[7685]: Session ended for no user



Re: Large queue and iowait

2001-07-17 Thread Jake Roersma

On 2001.07.17 12:47 Mark Douglas wrote:
 I'm having some problems with my qmail server. It seems to be taking an
 abnormally large amount of time to do queue processing. A recent mailing
 list send of 250k e-mail's to the server had it stuck in queue processing
 with iowait at 80-100% the entire time, for over 36 hours. I assume this
 is
 not a normal timeframe for processing that amount of e-mail.
 
 The setup is as follows:
 
 Sun Netra t1 - 450mhz ultrasparcII processor
 1024MB of memory, 1.5GB of swap
 18GB SCSI disk.
 Solaris 8
 qmail 1.03 with DNS and big-concurrency patch
 
 If any other information is pertinent, please let me know and I'll
 provide
 it. Any insight into what the problem could be would be greatly
 appreciated.
 
 Thanks,
 
 Mark
 --
 s/root/Mark
 
 !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 3.2//EN
 HTML
 HEAD
 META HTTP-EQUIV=Content-Type CONTENT=text/html; charset=iso-8859-1
 META NAME=Generator CONTENT=MS Exchange Server version 5.5.2652.35
 TITLELarge queue and iowait/TITLE
 /HEAD
 BODY
 
 PFONT SIZE=2I'm having some problems with my qmail server. It seems
 to be taking an abnormally large amount of time to do queue processing. A
 recent mailing list send of 250k e-mail's to the server had it stuck in
 queue processing with iowait at 80-100% the entire time, for over 36
 hours. I assume this is not a quot;normalquot; timeframe for processing
 that amount of e-mail./FONT/P
 
 PFONT SIZE=2The setup is as follows:/FONT
 /P
 
 PFONT SIZE=2Sun Netra t1 - 450mhz ultrasparcII processor/FONT
 BRFONT SIZE=21024MB of memory, 1.5GB of swap/FONT
 BRFONT SIZE=218GB SCSI disk./FONT
 BRFONT SIZE=2Solaris 8/FONT
 BRFONT SIZE=2qmail 1.03 with DNS and big-concurrency patch/FONT
 /P
 
 PFONT SIZE=2If any other information is pertinent, please let me know
 and I'll provide it. Any insight into what the problem could be would be
 greatly appreciated./FONT/P
 
 PFONT SIZE=2Thanks,/FONT
 /P
 
 PFONT SIZE=2Mark/FONT
 BRFONT SIZE=2--/FONT
 BRFONT SIZE=2s/root/Mark/FONT
 /P
 
 /BODY
 /HTML
 
I would check to see if qmail-send has a defunct process.. You will need to
restart it or restart qmail altogether and make sure there are no stray
proceses that may interfere. I've had multiple instances where the queue
becomes abnormally large because qmail-send is defunct.. It should reload
and you will see preprocessed mails grow until it spits everything out.

-- 
Jake Roersma
Network Engineer
Triton Technologies Inc.
(800)-837-4253/364-8761




Re: Large queue and iowait

2001-07-17 Thread Henning Brauer

On Tue, Jul 17, 2001 at 12:47:16PM -0400, Mark Douglas wrote:
 Solaris 8
 ^^^
This is your problem.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)



Re: gnu-pop3d[7685]: Incoming connection opened

2001-07-17 Thread Lukas Beeler

At 11:16 17.07.2001 -0600, David J Jackson wrote:
Is this incomming mail from qmail list:

David Jackson

nslookup:

Name:msfe10.onebox.com
Address:  64.68.76.141
Aliases:  141.76.68.64.in-addr.arpa

djb mailing lists are @lists.cr.yp.to

/var/adm/messages:

Jul 17 11:12:46 mail gnu-pop3d[7685]: connect from 64.68.76.141
Jul 17 11:12:46 mail gnu-pop3d[7685]: Incoming connection opened
Jul 17 11:12:48 mail gnu-pop3d[7685]: Session ended for no user
ever seen an smtp client connecting to a pop3 server ?
this is something other, probably a connect() portscan or something like this..
but definitivly nothing related to qmail
-- 
Lukas Maverick Beeler / Telematiker
Project: D.R.E.A.M / every.de - Your Community
Web: http://www.projectdream.org
Mail: [EMAIL PROTECTED]




Re: log format

2001-07-17 Thread Kjetil Ødegaard

* pop corn [EMAIL PROTECTED]

http://www.orakel.ntnu.no/~kjetilod/tips/
 
 Terrific tip! this is how I got it to work on Redhat 7.0:
 
 # pwd
 /usr/bin
 # diff lesspipe.sh lesspipe.sh.orig
  \@*.s) tai64nlocal  $1 ;;
  # http://www.orakel.ntnu.no/~kjetilod/tips/
 # export LESSOPEN=|/usr/bin/lesspipe.sh %s

You should probably save your modified lesspipe.sh in ~/bin; otherwise
it might be lost in an upgrade.

I have added a paragraph for Red Hat users.  If anyone has information
about lesspipe on other platforms, email me and I'll add them.

-- 
Kjetil



Re: log format

2001-07-17 Thread Gary MacKay

I've tried this several different times on my RH machine but it never
worked. Checked paths, perms, etc. No luck. Well, I just got it
working!! I had to remove the \@ from the \@*.s line and it works like a
charm. I'm guessing it's a shell thing?

- Gary


Kjetil Ødegaard wrote:
 
 * pop corn [EMAIL PROTECTED]
 
 http://www.orakel.ntnu.no/~kjetilod/tips/
 
  Terrific tip! this is how I got it to work on Redhat 7.0:
 
  # pwd
  /usr/bin
  # diff lesspipe.sh lesspipe.sh.orig
   \@*.s) tai64nlocal  $1 ;;
   # http://www.orakel.ntnu.no/~kjetilod/tips/
  # export LESSOPEN=|/usr/bin/lesspipe.sh %s
 
 You should probably save your modified lesspipe.sh in ~/bin; otherwise
 it might be lost in an upgrade.
 
 I have added a paragraph for Red Hat users.  If anyone has information
 about lesspipe on other platforms, email me and I'll add them.
 
 --
 Kjetil



RE: Large queue and iowait

2001-07-17 Thread Mark Douglas
Title: RE: Large queue and iowait







 -Original Message-
 From: Dave Sill [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 17, 2001 13:32
 To: [EMAIL PROTECTED]
 Subject: Re: Large queue and iowait
 
 
 Jake Roersma [EMAIL PROTECTED] wrote:
 
 I would check to see if qmail-send has a defunct process.. 
 You will need to
 restart it or restart qmail altogether and make sure there 
 are no stray
 proceses that may interfere. I've had multiple instances 
 where the queue
 becomes abnormally large because qmail-send is defunct..
 
 That ain't right. qmail-send doesn't doesn't just go defunct. I'd
 suspect a kernel bug. What OS are you using?
 
 -Dave
 


See my original e-mail for this info. (Quick answer: Solaris 8).


Mark





Fw: Col Wilson is pretty lame

2001-07-17 Thread Bob Ross

I just forward his bounces to his bigfoot.com account. With the address to
un-subscribe in a little note.

They haven't bounced from there yet. Maybe he'll figure it out.

- Original Message -
From: Henning Brauer [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: Bruno Wolff III [EMAIL PROTECTED]
Sent: Tuesday, July 17, 2001 12:16 PM
Subject: Re: Col Wilson is pretty lame


 On Tue, Jul 17, 2001 at 01:45:20PM -0500, Bruno Wolff III wrote:
  On Tue, Jul 17, 2001 at 04:19:58PM +,
MarkD [EMAIL PROTECTED] wrote:
   If nothing else, Mr Wilson will be associated with some interesting
   search engine results.
 
  As long as the software he is using returns the bounces to the envelope
  sender address, his method of unsubscribing will work without any
  manual intervention on the part of the list owner.

 It returns to the address in the From: header field, not the envelope
 sender. Not only that he's surprisingly stupid, his autoresponder/bouncer
is
 brain stupid, too.
 His queue will fill up, though, as I suspect I'm not the only one blocking
his
 server's IP.

 --
 * Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
 * Roedingsmarkt 14, 20459 Hamburg, Germany   *
 Unix is very simple, but it takes a genius to understand the simplicity.
 (Dennis Ritchie)





Fw: Col Wilson is pretty lame

2001-07-17 Thread Bob Ross

Almost forgot. His bigfoot address is [EMAIL PROTECTED]

That's the address that shows on the whois lookup.


- Original Message -
From: Henning Brauer [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: Bruno Wolff III [EMAIL PROTECTED]
Sent: Tuesday, July 17, 2001 12:16 PM
Subject: Re: Col Wilson is pretty lame


 On Tue, Jul 17, 2001 at 01:45:20PM -0500, Bruno Wolff III wrote:
  On Tue, Jul 17, 2001 at 04:19:58PM +,
MarkD [EMAIL PROTECTED] wrote:
   If nothing else, Mr Wilson will be associated with some interesting
   search engine results.
 
  As long as the software he is using returns the bounces to the envelope
  sender address, his method of unsubscribing will work without any
  manual intervention on the part of the list owner.

 It returns to the address in the From: header field, not the envelope
 sender. Not only that he's surprisingly stupid, his autoresponder/bouncer
is
 brain stupid, too.
 His queue will fill up, though, as I suspect I'm not the only one blocking
his
 server's IP.

 --
 * Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
 * Roedingsmarkt 14, 20459 Hamburg, Germany   *
 Unix is very simple, but it takes a genius to understand the simplicity.
 (Dennis Ritchie)





Re: Col Wilson is pretty lame

2001-07-17 Thread SgtChains

MarkD wrote:
 
 If nothing else, Mr Wilson will be associated with some interesting
 search engine results.
 

You mean like: http://Col.Wilson.isgay.com



Re: mailbombed

2001-07-17 Thread pop corn

Add the domain to virtualdomains, like so:

domain.com:alias-domain

then create ~alias/.qmail-domain-default with a single hash (#) mark in 
it.

then add a smtproute to localhost for the domain and restart qmail-send.  
The
only problem with this is that all messages for that domain will be 
deleted,
not just the person who got mailbombed.


What would the solution be if he was running qmail/ldap/courier-imap?
_
Get your FREE download of MSN Explorer at http://explorer.msn.com




Fw: mailbombed

2001-07-17 Thread Bob Ross

In the user directory open up .qmail put the following string 2 lines, I use
Maildir here, yes that's a dot in front of /Maildir and a broken pipe in
front of if

|if test -n `fgrep -x $SENDER badmailfrom`; then echo Go Away; exit 99;
else e; fi
./Maildir/

Then put the senders email address in the badmailfrom file in the user
directory, and it will delete every one of them.

There is another, but I will have to dig it up to only accept email from
certain senders. We use that for our kids. They only receive email from
those that we approve.



- Original Message -
From: Adam McKenna [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, July 17, 2001 3:51 PM
Subject: Re: mailbombed


 On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote:
  A user on a mailserver that we secondary for (don't get me started) has
  been mailbombed. Currently there are literally 10's of thousands of
  messages in my queue trying to deliver to him. My mail server's running
  at a oad of 8 right now. How can I clear out all these messages easily?
  They are all the same size, so I could use find to look through mess for
  the file names, then remove them from mess, info and remote. Does that
  work? Should I stop qmail-send before doing this?

 Add the domain to virtualdomains, like so:

 domain.com:alias-domain

 then create ~alias/.qmail-domain-default with a single hash (#) mark in
it.

 then add a smtproute to localhost for the domain and restart qmail-send.
The
 only problem with this is that all messages for that domain will be
deleted,
 not just the person who got mailbombed.

 --Adam

 --
 Adam McKenna [EMAIL PROTECTED] | Sign the Fernando Petition!
 http://flounder.net/publickey.html   | http://www.mickaboofriends.org
 GPG: 17A4 11F7 5E7E C2E7 08AA|
  38B0 05D0 8BF7 2C6D 110A|





Moving queue directory

2001-07-17 Thread Mark Douglas
Title: Moving queue directory





I would like to move my queue directory to another location. Is there a feasible way to do this while qmail is running, or should I shut it down and move the directory, and then bring qmail back up?

Thanks,


Mark





Re: mailbombed

2001-07-17 Thread John Gonzalez/netMDC admin

Jon, we recently had a similar problem (but not exactly) and ran into a
cool python util we found on the qmail homepage:

It goes through the queue and moves the files into a filter dir, and you
can do what you want with them from there..

http://www.redwoodsoft.com/~dru/programs/mailRemove.py

You can specify a string and it will move those mails with that string.

On Tue, 17 Jul 2001, Jon Rust wrote:

 A user on a mailserver that we secondary for (don't get me started) has
 been mailbombed. Currently there are literally 10's of thousands of
 messages in my queue trying to deliver to him. My mail server's running
 at a oad of 8 right now. How can I clear out all these messages easily?
 They are all the same size, so I could use find to look through mess for
 the file names, then remove them from mess, info and remote. Does that
 work? Should I stop qmail-send before doing this?
 
 THanks,
 jon
 

-- 
John Gonzalez / [EMAIL PROTECTED] / [EMAIL PROTECTED]
Tularosa Communications, Inc. (505) 439-0200 voice / (505) 443-1228 fax
http://www.tularosa.net / ASN 11711 / JG6416
[--[ sys info ]---]
  5:10pm  up 313 days, 22:39,  4 users,  load average: 0.24, 0.37, 0.28




Re: Moving queue directory

2001-07-17 Thread Greg White

On Tue, Jul 17, 2001 at 06:55:51PM -0400, Mark Douglas wrote:
 I would like to move my queue directory to another location. Is there a
 feasible way to do this while qmail is running, 

No.


 or should I shut it down and
 move the directory, and then bring qmail back up?

Yes.
 
 Thanks,

You're welcome.
 
 Mark
 

I presume that you're moving mount points around, right? Done it, no
problem. Just mount /var/qmail/queue (or /var/qmail, or whatever you're
doing), 'make setup check' in the source, and away you go (after
clearing and deleting the existing queue, of course).


-- 
Greg White



Re: Fw: mailbombed

2001-07-17 Thread Pat Collins

I like that idea, please post.

Pat 

On Tue, 17 Jul 2001 16:04:56 -0700, Bob Ross [EMAIL PROTECTED] wrote :

 
 There is another, but I will have to dig it up to only accept email from
 certain senders. We use that for our kids. They only receive email from
 those that we approve.




Re: Fw: mailbombed

2001-07-17 Thread Bob Ross

Just a little re-work of the other one.

One deny if they are listed. This allow only if they are listed.

|if test -n `fgrep -x $SENDER allowfrom`; then echo Allowed; exit 0; else
exit 99; fi
./Maildir/

As with anything. No warranty.


- Original Message -
From: Pat Collins [EMAIL PROTECTED]
To: Bob Ross [EMAIL PROTECTED]; Qmail-List [EMAIL PROTECTED]
Sent: Tuesday, July 17, 2001 6:53 PM
Subject: Re: Fw: mailbombed


 I like that idea, please post.

 Pat

 On Tue, 17 Jul 2001 16:04:56 -0700, Bob Ross [EMAIL PROTECTED] wrote
:

 
  There is another, but I will have to dig it up to only accept email from
  certain senders. We use that for our kids. They only receive email from
  those that we approve.






Why

2001-07-17 Thread michel

Hi,I install qmail-1.03 in RedHat 7.1,
and i start qmail such as '/var/qmail/bin/qmail-start ./Maildir splogger qmail
then i test qmail:echo to: test | /var/qmail/bin/qmail-inject
i found the follow test in the /var/log/maillog
##
Jul 18 10:17:31 lyh qmail: 995422651.126926 new msg 65010
Jul 18 10:17:31 lyh qmail: 995422651.127123 info msg 65010: bytes 226 from 
[EMAIL PROTECTED] qp 1282 uid 0
Jul 18 10:17:31 lyh qmail: 995422651.131116 starting delivery 1: msg 65010 to local 
[EMAIL PROTECTED]
Jul 18 10:17:31 lyh qmail: 995422651.131304 status: local 1/10 remote 0/20
Jul 18 10:17:31 lyh qmail: 995422651.183996 delivery 1: deferral: 
Unable_to_open_./Maildir:_is_a_directory._(#4.2.1)/
Jul 18 10:17:31 lyh qmail: 995422651.184169 status: local 0/10 remote 0/20
###
In the /home/test directory ,there is a Maildir directory made by 
/var/qmail/maildirmake,
and i have use chmod -R 777 /home/test/Maildir to modify the mode fo Maildir and its 
subdirectoy?
who can tell me How to correct it?
thanks in advance



Re: Why

2001-07-17 Thread Greg White

On Tue, Jul 17, 2001 at 08:53:25PM -0600, Chris Bolt wrote:
  Hi,I install qmail-1.03 in RedHat 7.1,
  and i start qmail such as '/var/qmail/bin/qmail-start ./Maildir 
  splogger qmail
 
 Add a trailing slash to Maildir
 
 /var/qmail/bin/qmail-start ./Maildir/ splogger qmail
 
 Without the trailing slash, qmail thinks it's a Mailbox, not a Maildir.
 

The OP will now find that local deliveries will fail with Uh-oh: home
directory is writable. if he posted correct information in his first
post. A quick google search finds the solution to both these problems.
(just cut'n'paste the exact qmail error into google's search).

HTH,

-- 
Greg White