Re: SSL again with tls.patch

2001-08-01 Thread Franz Sirl

At 12:01 01.08.2001, Per-fredrik Pollnow (EPK) wrote:
>Hi,
>
>I think I'm getting on you nerves in this mailing list with my SSL crap, 
>but I need to get it to work.
>
>OK, This is what I have done: I have remake qmail-1.03 with tls.patch, and 
>I replaced the qmail-smtpd and qmail-remote binary. I have done a 
>/var/qmail/control/servercert.pem (and I have openssl installed (default 
>in the O/S [OpenBSD2.9] hmm else I couldn't install the cert.)).
>
>That's it, But I get this error messages in my client:
>
>Unable to establish a SSL connection with the server. Account: 
>'136.225.42.56', Server: '136.225.42.56', Protocol: SMTP, Server Response: 
>'454 TLS not available: missing RSA private key (#4.3.0)', Port: 25, 
>Secure(SSL): Yes, Server Error: 454, Error Number: 0x800CCC7F
>
>If someone knows what the problem is, please mail me and the mailing list 
>a E-mail :=).

Incidentally I just got this to work yesterday on a server of mine. I had 
initial problems too, but I got rid of them with the following steps:

- on "make cert" in the patched qmail-1.03 dir, entered the machines 
hostname for "Common name (...)"
- removed "fixcrio" from the qmail-smtpd invocation line (hmm, try removing 
rblsmtpd too if you use it?)
- created /var/qmail/control/tlsserverciphers with "DEFAULT" as the only 
content

I dunno which of the above steps are really necessary, but it works here 
now with Eudora-5.1 as the client. Now I have to find out how to teach 
qmail-pop3 TLS...

Franz.




Re: Pass on tcpserver environment variables to qmail-queue, possible?

1999-03-01 Thread Franz Sirl

At 17:00 01.03.99 , Russell Nelson wrote:
>Franz Sirl writes:
> > I _want_ to receive the mail for the users here and _additionally_
> > autoreply to them via standard .qmail-* handling. Unfortunately the
> > environment variables are not passed on to qmail-queue so I can't check 
> for
> > them in .qmail-* (unless I did something wrong here?).
>
>qmail-queue *does* get the environment variables, but it does not
>store them as such.  If you want to get the IP address to do the ORBS
>lookup, you should parse the Received: line.

Yes, that's it. As Petr Novotny and Russell Nelson told me the delivery via 
.qmail is done by qmail-local (it seems I'm still thinking to complicated 
for qmail :-) ), and qmail-local doesn't see tcpserver's environment variables.

So my options are:
- parse the Received: header (anyone has a working regexp for that?) for 
the IP address and do rblsmtpd again
- patch qmail-smtpd to conditionally add a message header if a certain 
environment variable is set
- ??

Franz.



Re: Pass on tcpserver environment variables to qmail-queue, possible?

1999-03-01 Thread Franz Sirl

At 17:11 01.03.99 , Mate Wierdl wrote:
>If you know the IP numbers, you can set RBLSMTPD to "", and then mail
>is not blocked.  (I wonder how antirbl could be used for similar
>purpose; am I supposed to run antirbl for each not-to-be-blocked domain?).

I'm setting RBLSMTPD to "" and the whole rest of setup works as expected. 
My problem is that I cannot check for RBLSMTPD or any other environment 
variable set by tcpserver in a .qmail file.

Franz.



Re: Pass on tcpserver environment variables to qmail-queue, possible?

1999-03-01 Thread Franz Sirl

At 16:48 01.03.99 , Russell Nelson wrote:
>Franz Sirl writes:
> > is it somehow possible to pass on the environment variables set by
> > tcpserver to qmail-queue?
>
>In theory that's already happening.

Hmm, but not here. I tried to use the following line in .qmail:

|condredirect [EMAIL PROTECTED] test -n "$UNBLOCKED"

This works if I call qmail-queue manually, but not if it is called via 
qmail-smtpd (which gets $UNBLOCKED, I verified that).

Maybe I'm doing something wrong here, but I don't see it (being wrong was 
my 1st thought, cause usually everything is so easy with qmail).

Franz.



Re: Pass on tcpserver environment variables to qmail-queue, possible?

1999-03-01 Thread Franz Sirl

At 16:54 01.03.99 , Mate Wierdl wrote:
   Hi,
   
   is it somehow possible to pass on the environment variables
set by 
   tcpserver to qmail-queue? I would like to autoreply (via
bouncesaying or 
   vacation) to users sending via servers listed in ORBS. Some
of them I have 
   to unblock cause they are customers of my company, but I
would like to 
   annoy them, so they keep kicking their provider.
   
   Thanks,
   Franz.
   

I wonder what the RBLSMTPD env var is for.
I _want_ to receive the mail for the users here and _additionally_
autoreply to them via standard .qmail-* handling. Unfortunately the
environment variables are not passed on to qmail-queue so I can't check
for them in .qmail-* (unless I did something wrong here?).

Franz.



Pass on tcpserver environment variables to qmail-queue, possible?

1999-03-01 Thread Franz Sirl

Hi,

is it somehow possible to pass on the environment variables set by 
tcpserver to qmail-queue? I would like to autoreply (via bouncesaying or 
vacation) to users sending via servers listed in ORBS. Some of them I have 
to unblock cause they are customers of my company, but I would like to 
annoy them, so they keep kicking their provider.

Thanks,
Franz.



Re: qmail on seperate server

1998-12-22 Thread Franz Sirl

At 12:44 22.12.98 , Kevin Waterson wrote:
>
>
>I have two servers (both RH 5.2)
>ns0.oceania.net 203.41.132.66
>ns1.oceania.net 203.41.132.65
>
>On ns0 I have httpd ftp DNS..yadda yadda
>on ns1 I have qmail and DNS
>
>I am unable to get qmail to send or recieve while it is on ns1
>I have been able to run it on ns0 but I must have some thing amiss
>in there some where. When I try to send mail I get n error saying
>not in rcpthosts. What I have in control/rcpt is 
>localhost
>ns1.oceania.net
>am I missing something here?
>
>In my /var/named/ns1.oceania.net.hosts
>
>; Mandatory minimum for a working domain
>;
>@   IN  SOA ns1.oceania.net. mail.oceania.net. (
>199511301   ; serial, todays date + todays
>serial #
>28800   ; refresh, seconds
>7200; retry, seconds
>360 ; expire, seconds
>96400 ) ; minimum, seconds
>NS  ns1.oceania.net.
>NS  ns0.oceania.net.
>MX  10 mail.oceania.net.  ; Primary Mail Exchanger
^^
>mailCNAME   ns1
 ^

dunno if this is related to your problem, but this setup is invalid. A MX
is not allowed to point to a CNAME (simple rule: only a CNAME can point to
a another CNAME).

Franz.