Re: [qmailtoaster] Problems with SPAMDYKE

2008-01-14 Thread Dan McAllister

Sam, et. al.

I would say that to get the best results out of SPAMDYKE, you DEFINITELY 
want *IT* to handle the TLS. My reasoning is 2-fold:
1) I have an average of 15% of incoming SPAM that is attaching with TLS 
(I thought this was odd, but apparently not)
2) I require TLS for my outbound mail (from my clients) and THEY 
TOO can be sources of SPAM. I'd like SPAMDYKE to equally fight inbound 
AND outbound SPAM!


Just my thoughts. They were free to you, so take them at their face value.

Daniel McAllister, President
IT4SOHO, LLC

Take my advice... I won't be using it today!


Sam Clippinger wrote:
Actually, enabling TLS in spamdyke is the best solution.  When 
spamdyke handles the TLS, the remote server can't tell the difference 
-- if it was using TLS before, it should continue to do so.  However, 
because spamdyke decrypts the traffic, it can enable all of its 
filters (including graylisting, recipient blacklisting, etc).  If 
spamdyke simply passes TLS traffic through without decrypting it, most 
of its filters cannot operate.


-- Sam Clippinger

Davide Bozzelli wrote:

Sam Clippinger ha scritto:
OK, I should be able to duplicate that setup to see if I can 
reproduce your error.  It may be a little while before I have the 
time, however.


In the meantime, can you try enabling TLS support in spamdyke to see 
if this error persists?  Inside spamdyke, TLS passthrough is handled 
differently than TLS decoding.  If this is a spamdyke bug, you may 
be able to work around it.  Enabling TLS support will also allow all 
of spamdyke's filters to function, including graylisting.


To enable TLS, you'll need to compile spamdyke with TLS support and 
use the tls-certificate-file directive in the configuration file.  
Your TLS certificate is probably located at:

/var/qmail/control/servercert.pem

-- Sam Clippinger
I can confirm this bug, i've have the exact problems with a qmail 
patched with jms combined patch that sends mail to a qmailtoaster 
with spamdyke enabled without tls.
By enabling tls in spamdyke the problem went down, but it's not the 
correct way of work, cause the source mta don't do any tls handshake.


Have fun,
Davide



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Problems with SPAMDYKE

2008-01-14 Thread Sam Clippinger
I agree spamdyke should handle the TLS so all of its filters can be used 
(including graylisting).


However, spamdyke can't filter outbound mail.  Anything that's generated 
on your server (e.g. webmail users) will bypass spamdyke entirely. 
Anything that's sent through your server (e.g. your users' MUAs using 
your server as their SMTP host) will/should be whitelisted or 
authenticated.  Granted, you _can_ setup spamdyke to filter mail 
generated by your users' MUAs but you won't like it -- you'll get a lot 
of angry phone calls.


-- Sam Clippinger

Dan McAllister wrote:

Sam, et. al.

I would say that to get the best results out of SPAMDYKE, you DEFINITELY 
want *IT* to handle the TLS. My reasoning is 2-fold:
1) I have an average of 15% of incoming SPAM that is attaching with TLS 
(I thought this was odd, but apparently not)
2) I require TLS for my outbound mail (from my clients) and THEY TOO 
can be sources of SPAM. I'd like SPAMDYKE to equally fight inbound AND 
outbound SPAM!


Just my thoughts. They were free to you, so take them at their face value.

Daniel McAllister, President
IT4SOHO, LLC

Take my advice... I won't be using it today!


Sam Clippinger wrote:
Actually, enabling TLS in spamdyke is the best solution.  When 
spamdyke handles the TLS, the remote server can't tell the difference 
-- if it was using TLS before, it should continue to do so.  However, 
because spamdyke decrypts the traffic, it can enable all of its 
filters (including graylisting, recipient blacklisting, etc).  If 
spamdyke simply passes TLS traffic through without decrypting it, most 
of its filters cannot operate.


-- Sam Clippinger

Davide Bozzelli wrote:

Sam Clippinger ha scritto:
OK, I should be able to duplicate that setup to see if I can 
reproduce your error.  It may be a little while before I have the 
time, however.


In the meantime, can you try enabling TLS support in spamdyke to see 
if this error persists?  Inside spamdyke, TLS passthrough is handled 
differently than TLS decoding.  If this is a spamdyke bug, you may 
be able to work around it.  Enabling TLS support will also allow all 
of spamdyke's filters to function, including graylisting.


To enable TLS, you'll need to compile spamdyke with TLS support and 
use the tls-certificate-file directive in the configuration file.  
Your TLS certificate is probably located at:

/var/qmail/control/servercert.pem

-- Sam Clippinger
I can confirm this bug, i've have the exact problems with a qmail 
patched with jms combined patch that sends mail to a qmailtoaster 
with spamdyke enabled without tls.
By enabling tls in spamdyke the problem went down, but it's not the 
correct way of work, cause the source mta don't do any tls handshake.


Have fun,
Davide



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Can't get clamav-toaster to install

2008-01-14 Thread Cameron

CentOS5, ASUS P5GC-MX/1333 MB, 1 Gig RAM, Pentium Core2 Duo 6550. Running
the instal script I just get to the end where it says:

Preparing...
[100%]
1:clamav-toaster
[100%]


The it hangs. If I rebuild it manually and try to run it with rpm -i, I
don't get the above, I just get the hang as soon as I hit enter. If I hit
ctrl-c I get:

error: %post(clamav-toaster-0.92-1.3.16.i386) scriptlet failed, exit status
1

If I then try to verify the package I get:

S.5...GT c /etc/freshclam.conf

The system seems to think it is installed, but if reboot, the boot process 
hangs when trying to start freshclam. If I disable freshclam at startup and 
then manually start it after logging in, it seems to work fine.


Oh and also, I can't seem to get to the qmailadmin webpage. It seems it 
installed under /usr/share/qmailadmin/ instead of my var/www/cgi-bin/ 
directory. How can I fix this?


Cameron
- Original Message - 
From: Eric Shubes [EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, January 11, 2008 4:13 PM
Subject: Re: [qmailtoaster] Can't get clamav-toaster to install



Cameron wrote:

I just went' through the CentOS installation guide and when it tried to
install the clamav-toaster, it hung. I hit ctrl-c to get out and
continued withthe installation. Once the installation was complete I
tired to re-install clamav-toaster with no luck. I've tried uninstalling
it, and I searched this list and found a similar problem last month. I
tried the suggestions in that post, but again, the install of
clamav-toaster hangs my machine. Does anyone know what is causing this
and how I can fix it? I;ve tired bothe the .92-3.16 and .90.1-3.13
versionsboth have the same results.


Unless someone has a pretty good crystal ball than mine, I'm guessing 
we'll

need to know a few more details in order to be of any help.

Which version of CentOS?
What's your hardware?
What were the last couple messages you see on the console before it hangs?
When it hangs, can you open another console to check things out? 
(ctl-alt-f2)


That should get things started.

--
-Eric 'shubes'

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.516 / Virus Database: 269.19.0/1216 - Release Date: 1/9/2008 
10:16 AM






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Problems with SPAMDYKE

2008-01-14 Thread Phil Leinhauser
Dan,

Did you get your backup server problem worked out?  If so, what did you find?

Phil


-Original message-
From: Dan McAllister [EMAIL PROTECTED]
Date: Mon, 14 Jan 2008 14:11:03 -0500
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Problems with SPAMDYKE

 Sam, et. al.
 
 I would say that to get the best results out of SPAMDYKE, you DEFINITELY 
 want *IT* to handle the TLS. My reasoning is 2-fold:
  1) I have an average of 15% of incoming SPAM that is attaching with TLS 
 (I thought this was odd, but apparently not)
  2) I require TLS for my outbound mail (from my clients) and THEY 
 TOO can be sources of SPAM. I'd like SPAMDYKE to equally fight inbound 
 AND outbound SPAM!
 
 Just my thoughts. They were free to you, so take them at their face value.
 
 Daniel McAllister, President
 IT4SOHO, LLC
 
 Take my advice... I won't be using it today!
 
 
 Sam Clippinger wrote:
  Actually, enabling TLS in spamdyke is the best solution.  When 
  spamdyke handles the TLS, the remote server can't tell the difference 
  -- if it was using TLS before, it should continue to do so.  However, 
  because spamdyke decrypts the traffic, it can enable all of its 
  filters (including graylisting, recipient blacklisting, etc).  If 
  spamdyke simply passes TLS traffic through without decrypting it, most 
  of its filters cannot operate.
 
  -- Sam Clippinger
 
  Davide Bozzelli wrote:
  Sam Clippinger ha scritto:
  OK, I should be able to duplicate that setup to see if I can 
  reproduce your error.  It may be a little while before I have the 
  time, however.
 
  In the meantime, can you try enabling TLS support in spamdyke to see 
  if this error persists?  Inside spamdyke, TLS passthrough is handled 
  differently than TLS decoding.  If this is a spamdyke bug, you may 
  be able to work around it.  Enabling TLS support will also allow all 
  of spamdyke's filters to function, including graylisting.
 
  To enable TLS, you'll need to compile spamdyke with TLS support and 
  use the tls-certificate-file directive in the configuration file.  
  Your TLS certificate is probably located at:
  /var/qmail/control/servercert.pem
 
  -- Sam Clippinger
  I can confirm this bug, i've have the exact problems with a qmail 
  patched with jms combined patch that sends mail to a qmailtoaster 
  with spamdyke enabled without tls.
  By enabling tls in spamdyke the problem went down, but it's not the 
  correct way of work, cause the source mta don't do any tls handshake.
 
  Have fun,
  Davide
 
 
 
  -
  QmailToaster hosted by: VR Hosted http://www.vr.org
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 
  -
  QmailToaster hosted by: VR Hosted http://www.vr.org
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server temporarily rejected message (#4.3.0)) solution?

2008-01-14 Thread dnk
I have not yet restarted the machine. I can do so... report in a minute.

On Jan 14, 2008 1:15 PM, Phil Leinhauser [EMAIL PROTECTED] wrote:
 Does clamd still spike near 100% for the first few minutes after a restart of 
 the server?



 -Original message-
 From: dnk [EMAIL PROTECTED]
 Date: Mon, 14 Jan 2008 17:04:51 -0500
 To: qmailtoaster-list@qmailtoaster.com
 Subject: Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server 
 temporarily rejected message (#4.3.0)) solution?

  So I have been watching my machine since installing the later Clamd,
  and it appears to have solved the 100% CPU clamd instance.
 
  I am still going to watch if for another week to see if it pops
  anything else up, then add it to my other toasters.
 
  DNK
 
  On Jan 11, 2008 8:29 AM, dnk [EMAIL PROTECTED] wrote:
   Ok, you sparked my interest, and went and installed it. I will monitor
   it a few times on the hourly run to see what the CPU ends up
   doing.
  
  
   dnk
  
  
   On Jan 11, 2008 8:14 AM, dnk [EMAIL PROTECTED] wrote:
I have not had a moment to attempt this as of yet (Client Audits - fun
times). It is on my list for next week.
   
Regards,
   
Dnk
   
   
   
   
On Jan 11, 2008 8:11 AM, Jake Vickers [EMAIL PROTECTED] wrote:

  PakOgah wrote:

  I was looking through the archives at the thread called qmail-smtpd:
 qq soft reject (mail server temporarily rejected message (#4.3.0))
 and in that thread it was determined that this error was popping up
 when clamd was doing it's hourly thing and hogging all of the CPU. I
 have run into this exact symptom. With the thread it said the machine
 may simply be underpowered. I was curious if there was something
 further that could be done...

  perhaps you can try to upgrade clamav to lastest version on devel 
 site.





  Did this solve your issue?

   
  
 

  -
   QmailToaster hosted by: VR Hosted http://www.vr.org
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 

 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server temporarily rejected message (#4.3.0)) solution?

2008-01-14 Thread dnk
So I have been watching my machine since installing the later Clamd,
and it appears to have solved the 100% CPU clamd instance.

I am still going to watch if for another week to see if it pops
anything else up, then add it to my other toasters.

DNK

On Jan 11, 2008 8:29 AM, dnk [EMAIL PROTECTED] wrote:
 Ok, you sparked my interest, and went and installed it. I will monitor
 it a few times on the hourly run to see what the CPU ends up
 doing.


 dnk


 On Jan 11, 2008 8:14 AM, dnk [EMAIL PROTECTED] wrote:
  I have not had a moment to attempt this as of yet (Client Audits - fun
  times). It is on my list for next week.
 
  Regards,
 
  Dnk
 
 
 
 
  On Jan 11, 2008 8:11 AM, Jake Vickers [EMAIL PROTECTED] wrote:
  
PakOgah wrote:
  
I was looking through the archives at the thread called qmail-smtpd:
   qq soft reject (mail server temporarily rejected message (#4.3.0))
   and in that thread it was determined that this error was popping up
   when clamd was doing it's hourly thing and hogging all of the CPU. I
   have run into this exact symptom. With the thread it said the machine
   may simply be underpowered. I was curious if there was something
   further that could be done...
  
perhaps you can try to upgrade clamav to lastest version on devel site.
  
  
  
  
  
Did this solve your issue?
  
 


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server temporarily rejected message (#4.3.0)) solution?

2008-01-14 Thread Phil Leinhauser
Does clamd still spike near 100% for the first few minutes after a restart of 
the server?


-Original message-
From: dnk [EMAIL PROTECTED]
Date: Mon, 14 Jan 2008 17:04:51 -0500
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server 
temporarily rejected message (#4.3.0)) solution?

 So I have been watching my machine since installing the later Clamd,
 and it appears to have solved the 100% CPU clamd instance.
 
 I am still going to watch if for another week to see if it pops
 anything else up, then add it to my other toasters.
 
 DNK
 
 On Jan 11, 2008 8:29 AM, dnk [EMAIL PROTECTED] wrote:
  Ok, you sparked my interest, and went and installed it. I will monitor
  it a few times on the hourly run to see what the CPU ends up
  doing.
 
 
  dnk
 
 
  On Jan 11, 2008 8:14 AM, dnk [EMAIL PROTECTED] wrote:
   I have not had a moment to attempt this as of yet (Client Audits - fun
   times). It is on my list for next week.
  
   Regards,
  
   Dnk
  
  
  
  
   On Jan 11, 2008 8:11 AM, Jake Vickers [EMAIL PROTECTED] wrote:
   
 PakOgah wrote:
   
 I was looking through the archives at the thread called qmail-smtpd:
qq soft reject (mail server temporarily rejected message (#4.3.0))
and in that thread it was determined that this error was popping up
when clamd was doing it's hourly thing and hogging all of the CPU. I
have run into this exact symptom. With the thread it said the machine
may simply be underpowered. I was curious if there was something
further that could be done...
   
 perhaps you can try to upgrade clamav to lastest version on devel site.
   
   
   
   
   
 Did this solve your issue?
   
  
 
 
 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] 550 5.7.1 Command rejected

2008-01-14 Thread Andreas Galatis
Hi list,

I have a customer trying to send a message to one server that replies always 
with 550 5.7.1 Command rejected
I tested the server via telnet and got the same result when entering the 
from-adddress withaout   surrounding the address.

If the address does not come from the address-book (where it is mostly written 
in the required format), nobody writes it that way.
How can I enforce qmail to write the   signs around an email-address 
whenever that is missing?

Any help is appreciated.

Andreas


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] 550 5.7.1 Command rejected

2008-01-14 Thread Phil Leinhauser
It's not normal for the post office to reject mail like that.  You should be 
able to telnet into the SMTP port and simply send a message like this:

 Telnet servername 25
Server responds with 220 message

 helo
Server says hello

 mail from: [EMAIL PROTECTED]
Server says sender OK

rcpt to: [EMAIL PROTECTED]
Server says recipient OK start data end with . on line alone

Hi Jim
.
Server will forward


NOTE, no  on address
Did you change anything in the settings for Qmail?  

Phil


-Original message-
From: Andreas Galatis [EMAIL PROTECTED]
Date: Mon, 14 Jan 2008 17:35:08 -0500
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] 550 5.7.1 Command rejected

 Hi list,
 
 I have a customer trying to send a message to one server that replies always 
 with 550 5.7.1 Command rejected
 I tested the server via telnet and got the same result when entering the 
 from-adddress withaout   surrounding the address.
 
 If the address does not come from the address-book (where it is mostly 
 written 
 in the required format), nobody writes it that way.
 How can I enforce qmail to write the   signs around an email-address 
 whenever that is missing?
 
 Any help is appreciated.
 
 Andreas
 
 
 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server temporarily rejected message (#4.3.0)) solution?

2008-01-14 Thread dnk
I rebooted twice. My clam did not hit the CPU at all. My load was high
(1.01) for that machine for about 2-3 minutes while courier did a few
things, but flattened right out after that time period.

One thing though, I had never watched it at boot before adding the new
clam version, so i can not confirm I even had that symptom prior

dnk



On Jan 14, 2008 1:15 PM, dnk [EMAIL PROTECTED] wrote:
 I have not yet restarted the machine. I can do so... report in a minute.


 On Jan 14, 2008 1:15 PM, Phil Leinhauser [EMAIL PROTECTED] wrote:
  Does clamd still spike near 100% for the first few minutes after a restart 
  of the server?
 
 
 
  -Original message-
  From: dnk [EMAIL PROTECTED]
  Date: Mon, 14 Jan 2008 17:04:51 -0500
  To: qmailtoaster-list@qmailtoaster.com
  Subject: Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server 
  temporarily rejected message (#4.3.0)) solution?
 
   So I have been watching my machine since installing the later Clamd,
   and it appears to have solved the 100% CPU clamd instance.
  
   I am still going to watch if for another week to see if it pops
   anything else up, then add it to my other toasters.
  
   DNK
  
   On Jan 11, 2008 8:29 AM, dnk [EMAIL PROTECTED] wrote:
Ok, you sparked my interest, and went and installed it. I will monitor
it a few times on the hourly run to see what the CPU ends up
doing.
   
   
dnk
   
   
On Jan 11, 2008 8:14 AM, dnk [EMAIL PROTECTED] wrote:
 I have not had a moment to attempt this as of yet (Client Audits - fun
 times). It is on my list for next week.

 Regards,

 Dnk




 On Jan 11, 2008 8:11 AM, Jake Vickers [EMAIL PROTECTED] wrote:
 
   PakOgah wrote:
 
   I was looking through the archives at the thread called 
  qmail-smtpd:
  qq soft reject (mail server temporarily rejected message (#4.3.0))
  and in that thread it was determined that this error was popping up
  when clamd was doing it's hourly thing and hogging all of the CPU. I
  have run into this exact symptom. With the thread it said the 
  machine
  may simply be underpowered. I was curious if there was something
  further that could be done...
 
   perhaps you can try to upgrade clamav to lastest version on devel 
  site.
 
 
 
 
 
   Did this solve your issue?
 

   
  
 
   -
QmailToaster hosted by: VR Hosted http://www.vr.org
   -
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 
  -
   QmailToaster hosted by: VR Hosted http://www.vr.org
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server temporarily rejected message (#4.3.0)) solution?

2008-01-14 Thread Phil Leinhauser
My clam hit the CPU pretty hard just after a restart for about 5 minutes.  I 
think I recall someone saying it was because it had to load all of the 
definitions into memory.  I guess I'll have to run mine through the newmodel 
tonight.

Thanks,
Phil


-Original message-
From: dnk [EMAIL PROTECTED]
Date: Mon, 14 Jan 2008 17:28:42 -0500
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server 
temporarily rejected message (#4.3.0)) solution?

 I rebooted twice. My clam did not hit the CPU at all. My load was high
 (1.01) for that machine for about 2-3 minutes while courier did a few
 things, but flattened right out after that time period.
 
 One thing though, I had never watched it at boot before adding the new
 clam version, so i can not confirm I even had that symptom prior
 
 dnk
 
 
 
 On Jan 14, 2008 1:15 PM, dnk [EMAIL PROTECTED] wrote:
  I have not yet restarted the machine. I can do so... report in a minute.
 
 
  On Jan 14, 2008 1:15 PM, Phil Leinhauser [EMAIL PROTECTED] wrote:
   Does clamd still spike near 100% for the first few minutes after a 
   restart of the server?
  
  
  
   -Original message-
   From: dnk [EMAIL PROTECTED]
   Date: Mon, 14 Jan 2008 17:04:51 -0500
   To: qmailtoaster-list@qmailtoaster.com
   Subject: Re: [qmailtoaster] qmail-smtpd: qq soft reject (mail server 
   temporarily rejected message (#4.3.0)) solution?
  
So I have been watching my machine since installing the later Clamd,
and it appears to have solved the 100% CPU clamd instance.
   
I am still going to watch if for another week to see if it pops
anything else up, then add it to my other toasters.
   
DNK
   
On Jan 11, 2008 8:29 AM, dnk [EMAIL PROTECTED] wrote:
 Ok, you sparked my interest, and went and installed it. I will monitor
 it a few times on the hourly run to see what the CPU ends up
 doing.


 dnk


 On Jan 11, 2008 8:14 AM, dnk [EMAIL PROTECTED] wrote:
  I have not had a moment to attempt this as of yet (Client Audits - 
  fun
  times). It is on my list for next week.
 
  Regards,
 
  Dnk
 
 
 
 
  On Jan 11, 2008 8:11 AM, Jake Vickers [EMAIL PROTECTED] wrote:
  
PakOgah wrote:
  
I was looking through the archives at the thread called 
   qmail-smtpd:
   qq soft reject (mail server temporarily rejected message 
   (#4.3.0))
   and in that thread it was determined that this error was popping 
   up
   when clamd was doing it's hourly thing and hogging all of the 
   CPU. I
   have run into this exact symptom. With the thread it said the 
   machine
   may simply be underpowered. I was curious if there was something
   further that could be done...
  
perhaps you can try to upgrade clamav to lastest version on 
   devel site.
  
  
  
  
  
Did this solve your issue?
  
 

   
  
-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   
   
  
   -
QmailToaster hosted by: VR Hosted http://www.vr.org
   -
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 
 
 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] Problem with backup Toaster

2008-01-14 Thread Dan McAllister
Thanks to those who responded -- both in the list, and directly.

As it turns out, the entire issue was the preceding DOT in the smtproutes
file. Leave off the dots, and the error messages quit!

Thanks again...

Dan


-- 

Dan McAllister, President
IT4SOHO, LLC





-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] Problem with backup Toaster

2008-01-14 Thread Phil Leinhauser
Cool!

I figured it would end up something simple like that.

-Original Message-
From: Dan McAllister [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 14, 2008 7:04 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Problem with backup Toaster

Thanks to those who responded -- both in the list, and directly.

As it turns out, the entire issue was the preceding DOT in the smtproutes
file. Leave off the dots, and the error messages quit!

Thanks again...

Dan


-- 

Dan McAllister, President
IT4SOHO, LLC





-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] Problems with SPAMDYKE

2008-01-14 Thread Ronnie Tartar
My two favorite words now are:

DENIED_RDNS_MISSING
DENIED_OTHER

That is what my logs have as 95% plus of the emails coming in.  I'm just
wondering when they will realize that it isn't making it in.  It's starting
to slow down a bit.




-Original Message-
From: Sam Clippinger [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 14, 2008 3:03 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Problems with SPAMDYKE

I agree spamdyke should handle the TLS so all of its filters can be used 
(including graylisting).

However, spamdyke can't filter outbound mail.  Anything that's generated 
on your server (e.g. webmail users) will bypass spamdyke entirely. 
Anything that's sent through your server (e.g. your users' MUAs using 
your server as their SMTP host) will/should be whitelisted or 
authenticated.  Granted, you _can_ setup spamdyke to filter mail 
generated by your users' MUAs but you won't like it -- you'll get a lot 
of angry phone calls.

-- Sam Clippinger

Dan McAllister wrote:
 Sam, et. al.
 
 I would say that to get the best results out of SPAMDYKE, you DEFINITELY 
 want *IT* to handle the TLS. My reasoning is 2-fold:
 1) I have an average of 15% of incoming SPAM that is attaching with TLS 
 (I thought this was odd, but apparently not)
 2) I require TLS for my outbound mail (from my clients) and THEY TOO 
 can be sources of SPAM. I'd like SPAMDYKE to equally fight inbound AND 
 outbound SPAM!
 
 Just my thoughts. They were free to you, so take them at their face value.
 
 Daniel McAllister, President
 IT4SOHO, LLC
 
 Take my advice... I won't be using it today!
 
 
 Sam Clippinger wrote:
 Actually, enabling TLS in spamdyke is the best solution.  When 
 spamdyke handles the TLS, the remote server can't tell the difference 
 -- if it was using TLS before, it should continue to do so.  However, 
 because spamdyke decrypts the traffic, it can enable all of its 
 filters (including graylisting, recipient blacklisting, etc).  If 
 spamdyke simply passes TLS traffic through without decrypting it, most 
 of its filters cannot operate.

 -- Sam Clippinger

 Davide Bozzelli wrote:
 Sam Clippinger ha scritto:
 OK, I should be able to duplicate that setup to see if I can 
 reproduce your error.  It may be a little while before I have the 
 time, however.

 In the meantime, can you try enabling TLS support in spamdyke to see 
 if this error persists?  Inside spamdyke, TLS passthrough is handled 
 differently than TLS decoding.  If this is a spamdyke bug, you may 
 be able to work around it.  Enabling TLS support will also allow all 
 of spamdyke's filters to function, including graylisting.

 To enable TLS, you'll need to compile spamdyke with TLS support and 
 use the tls-certificate-file directive in the configuration file.  
 Your TLS certificate is probably located at:
 /var/qmail/control/servercert.pem

 -- Sam Clippinger
 I can confirm this bug, i've have the exact problems with a qmail 
 patched with jms combined patch that sends mail to a qmailtoaster 
 with spamdyke enabled without tls.
 By enabling tls in spamdyke the problem went down, but it's not the 
 correct way of work, cause the source mta don't do any tls handshake.

 Have fun,
 Davide



 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

 
 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] can't send test message to myself

2008-01-14 Thread Cameron
I just set up qmail-toaster on CentOS5, Core2 duo, 1 Gig ram machine with a 
clean install. Everything looks fine now, but when I try to send a test 
message to myself using the Squirrelmail interface, I get a 511 sorry, 
can't find a valid MX for sender domain error. I'm using a domain I own 
that doesn't currently have a mail server set up. The domain is 
bstastjohns.com and I have mail.bstastjohns.com A and MX records pointed to 
a temproary public IP at 71.86.114.51. I can't send in messages form outside 
either. I'm pretty new to Linux and really new to qmail so please be gentle. 
When I ping mail.bstastjohns.com it resolves to the correct IP. Any clues?


Regards,

Cameron 



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] 550 5.7.1 Command rejected

2008-01-14 Thread Andreas Galatis
Hi Phil,
I did not change anything in qmail, it is a standard qmail-toaster running 
like it is since several years.

I tested the other server as you can see here:
telnet smtp.kiv.de 25
Trying 195.226.81.250...
Connected to smtp.kiv.de.
Escape character is '^]'.
220 smtp.kiv.de ESMTP EKOM21
helo atlas
250 smtp.kiv.de talking to X ([XX.XXX.XX.XXX])
mail from: [EMAIL PROTECTED]
553 5.5.2 Bad command format

If I set the mail-address in  it goes through graylisting.
telnet smtp.kiv.de 25
Trying 195.226.81.250...
Connected to smtp.kiv.de.
Escape character is '^]'.
220 smtp.kiv.de ESMTP EKOM21
helo atlas
250 smtp.kiv.de talking to X ([XX.XXX.XX.XXX])
mail from: [EMAIL PROTECTED]
250 2.1.0 Ok
rcpt to: [EMAIL PROTECTED]
451 4.7.1 Greylisting in progress, please come back later

I searched google for the error and found the  where required, some 
mail-servers would insist on them while most servers where tolerant about 
this fault.


Andreas


Am Montag, 14. Januar 2008 22:51 schrieb Phil Leinhauser:
 It's not normal for the post office to reject mail like that.  You should be 
able to telnet into the SMTP port and simply send a message like this:
  Telnet servername 25

 Server responds with 220 message

  helo

 Server says hello

  mail from: [EMAIL PROTECTED]

 Server says sender OK

 rcpt to: [EMAIL PROTECTED]
 Server says recipient OK start data end with . on line alone

 Hi Jim
 .
 Server will forward


 NOTE, no  on address
 Did you change anything in the settings for Qmail?

 Phil


 -Original message-
 From: Andreas Galatis [EMAIL PROTECTED]
 Date: Mon, 14 Jan 2008 17:35:08 -0500
 To: qmailtoaster-list@qmailtoaster.com
 Subject: [qmailtoaster] 550 5.7.1 Command rejected

  Hi list,
 
  I have a customer trying to send a message to one server that replies
  always with 550 5.7.1 Command rejected
  I tested the server via telnet and got the same result when entering the
  from-adddress withaout   surrounding the address.
 
  If the address does not come from the address-book (where it is mostly
  written in the required format), nobody writes it that way.
  How can I enforce qmail to write the   signs around an email-address
  whenever that is missing?
 
  Any help is appreciated.
 
  Andreas
 
 
  -
   QmailToaster hosted by: VR Hosted http://www.vr.org
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]

 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] can't send test message to myself

2008-01-14 Thread Andreas Galatis
Hi Cameron,

me too, I cannot find an MX for bstastjohns.com
Maybe you missed s.th. when setting up the MX?

bye
Andreas
Am Dienstag, 15. Januar 2008 07:57 schrieb Cameron:
 I just set up qmail-toaster on CentOS5, Core2 duo, 1 Gig ram machine with a
 clean install. Everything looks fine now, but when I try to send a test
 message to myself using the Squirrelmail interface, I get a 511 sorry,
 can't find a valid MX for sender domain error. I'm using a domain I own
 that doesn't currently have a mail server set up. The domain is
 bstastjohns.com and I have mail.bstastjohns.com A and MX records pointed to
 a temproary public IP at 71.86.114.51. I can't send in messages form
 outside either. I'm pretty new to Linux and really new to qmail so please
 be gentle. When I ping mail.bstastjohns.com it resolves to the correct IP.
 Any clues?

 Regards,

 Cameron


 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]