[qmailtoaster] spamdyke per user
spamdyke there way to set per user or domain in simcontrol?
Re: [qmailtoaster] DCC
I changed dccproc to vpopmail:vchkpw and got the following... [29201] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -x 0 -a 200.121.186.163 /tmp/.spamassassin292015tGLdCtmp [29322] dbg: util: setuid: ruid=89 euid=89 [29201] dbg: dcc: got response: /var/dcc: Permission denied [29201] dbg: info: leaving helper-app run mode [29201] dbg: dcc: check failed: no X-DCC returned (did you create a map file?): /var/dcc: Permission denied I think dccproc can still be root. I have set dccproc back to root:root and changed the directory /var/dcc to vpopmail:vchkpw. Now I am getting ... [3751] dbg: dcc: dccifd is not available: no r/w dccifd socket found [3751] dbg: dcc: dccproc is available: /usr/local/bin/dccproc [3751] dbg: info: entering helper-app run mode [3751] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -x 0 -a 200.121.186.163 /tmp/.spamassassin3751Xggurrtmp [3807] dbg: util: setuid: ruid=89 euid=89 [3751] dbg: dcc: got response: X-DCC-z.dcc-servers-Metrics: mailsvr.phxinternet.net 1049; Body=1 Fuz1=1 Fuz2=many [3751] dbg: info: leaving helper-app run mode [3751] dbg: dcc: listed: BODY=1/99 FUZ1=1/99 FUZ2=99/99 [3751] dbg: rules: ran eval rule DCC_CHECK == got hit (1) I think I maybe able to change it to root:vchkpw and it work as well since vpopmail is associated with that group. Gilbert - Original Message - From: Eric Shubert e...@shubes.net To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, March 21, 2009 9:18 AM Subject: Re: [qmailtoaster] DCC Looks to me like # chown vpopmail:vchkpw /usr/local/bin/dccproc should do the trick. Gilbert T. Gutierrez, Jr. wrote: I ran it a second time as root, and it worked. Now if I run it as the user that spamassassin uses, it fails as follows... sudo -u vpopmail -H spamassassin -t -D spam-mail.txt [19415] dbg: dcc: dccifd is not available: no r/w dccifd socket found [19415] dbg: dcc: dccproc is available: /usr/local/bin/dccproc [19415] dbg: info: entering helper-app run mode [19415] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -x 0 -a 200.121.186.163 /tmp/.spamassassin19415wiXvqCtmp [19652] dbg: util: setuid: ruid=89 euid=89 [19415] dbg: dcc: got response: /var/dcc: Permission denied [19415] dbg: info: leaving helper-app run mode [19415] dbg: dcc: check failed: no X-DCC returned (did you create a map file?): /var/dcc: Permission denied So it is a permissions issue. I need to change the dcc folder permissions. This always scares me, should I change the user or the group? Gilbert - Original Message - From: Richard Vinke rich...@vogelnestje.nl To: qmailtoaster-list@qmailtoaster.com Sent: Friday, March 20, 2009 1:23 PM Subject: Re: [qmailtoaster] DCC To check DCC, download the test message at http://kb.atmail.com/attach/spam-mail.txt and start it with spamassassin -t -D spam-mail.txt. Gilbert T. Gutierrez, Jr. wrote: Thanks for the responses to the Razor question I asked. I did not need to change anything to get it to work other than ... 1. edit the /etc/mail/spamassassin/.razor/razor-agent.conf and add razorhome = /etc/mail/spamassassin/.razor/ 2. enable the plugin in v310.pre 3. edit the local.cf and add use razor2 and razor_config /etc/mail/spamassassin/.razor/razor-agent.conf sudo -u vpopmail -H spamassassin -D --lint gives no errors and messages are being marked correctly. Now I am trying to enable DCC and am having issues. I maybe doing something wrong. This is what I have done... 1. I configured DCC using ./configure --disable-sys-inst --disable-server --disable-dccm --disable-dccifd 2. edit the local.cf and add use_dcc 1' and dcc_path /usr/local/bin/dccproc 3. enable the plugin in v310.pre sudo -u vpopmail -H spamassassin -D --lint gives no errors. I have not seen any messages with a header marked regarding DCC so I do not think that it is working. The spamd log file is also not showing any thing. What am I doing wrong? Thank you, Gilbert - -- -Eric 'shubes' - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages.
Re: [qmailtoaster] DCC
I don't know what DCC is expecting/trying to do. That being said, root:vchkpw would be worth a shot. What are the existing/default permissions of /usr/local/bin/dccproc? Is the sticky bit set on the owner or group levels? Gilbert T. Gutierrez, Jr. wrote: I changed dccproc to vpopmail:vchkpw and got the following... [29201] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -x 0 -a 200.121.186.163 /tmp/.spamassassin292015tGLdCtmp [29322] dbg: util: setuid: ruid=89 euid=89 [29201] dbg: dcc: got response: /var/dcc: Permission denied [29201] dbg: info: leaving helper-app run mode [29201] dbg: dcc: check failed: no X-DCC returned (did you create a map file?): /var/dcc: Permission denied I think dccproc can still be root. I have set dccproc back to root:root and changed the directory /var/dcc to vpopmail:vchkpw. Now I am getting ... [3751] dbg: dcc: dccifd is not available: no r/w dccifd socket found [3751] dbg: dcc: dccproc is available: /usr/local/bin/dccproc [3751] dbg: info: entering helper-app run mode [3751] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -x 0 -a 200.121.186.163 /tmp/.spamassassin3751Xggurrtmp [3807] dbg: util: setuid: ruid=89 euid=89 [3751] dbg: dcc: got response: X-DCC-z.dcc-servers-Metrics: mailsvr.phxinternet.net 1049; Body=1 Fuz1=1 Fuz2=many [3751] dbg: info: leaving helper-app run mode [3751] dbg: dcc: listed: BODY=1/99 FUZ1=1/99 FUZ2=99/99 [3751] dbg: rules: ran eval rule DCC_CHECK == got hit (1) I think I maybe able to change it to root:vchkpw and it work as well since vpopmail is associated with that group. Gilbert - Original Message - From: Eric Shubert e...@shubes.net To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, March 21, 2009 9:18 AM Subject: Re: [qmailtoaster] DCC Looks to me like # chown vpopmail:vchkpw /usr/local/bin/dccproc should do the trick. Gilbert T. Gutierrez, Jr. wrote: I ran it a second time as root, and it worked. Now if I run it as the user that spamassassin uses, it fails as follows... sudo -u vpopmail -H spamassassin -t -D spam-mail.txt [19415] dbg: dcc: dccifd is not available: no r/w dccifd socket found [19415] dbg: dcc: dccproc is available: /usr/local/bin/dccproc [19415] dbg: info: entering helper-app run mode [19415] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -x 0 -a 200.121.186.163 /tmp/.spamassassin19415wiXvqCtmp [19652] dbg: util: setuid: ruid=89 euid=89 [19415] dbg: dcc: got response: /var/dcc: Permission denied [19415] dbg: info: leaving helper-app run mode [19415] dbg: dcc: check failed: no X-DCC returned (did you create a map file?): /var/dcc: Permission denied So it is a permissions issue. I need to change the dcc folder permissions. This always scares me, should I change the user or the group? Gilbert - Original Message - From: Richard Vinke rich...@vogelnestje.nl To: qmailtoaster-list@qmailtoaster.com Sent: Friday, March 20, 2009 1:23 PM Subject: Re: [qmailtoaster] DCC To check DCC, download the test message at http://kb.atmail.com/attach/spam-mail.txt and start it with spamassassin -t -D spam-mail.txt. Gilbert T. Gutierrez, Jr. wrote: Thanks for the responses to the Razor question I asked. I did not need to change anything to get it to work other than ... 1. edit the /etc/mail/spamassassin/.razor/razor-agent.conf and add razorhome = /etc/mail/spamassassin/.razor/ 2. enable the plugin in v310.pre 3. edit the local.cf and add use razor2 and razor_config /etc/mail/spamassassin/.razor/razor-agent.conf sudo -u vpopmail -H spamassassin -D --lint gives no errors and messages are being marked correctly. Now I am trying to enable DCC and am having issues. I maybe doing something wrong. This is what I have done... 1. I configured DCC using ./configure --disable-sys-inst --disable-server --disable-dccm --disable-dccifd 2. edit the local.cf and add use_dcc 1' and dcc_path /usr/local/bin/dccproc 3. enable the plugin in v310.pre sudo -u vpopmail -H spamassassin -D --lint gives no errors. I have not seen any messages with a header marked regarding DCC so I do not think that it is working. The spamd log file is also not showing any thing. What am I doing wrong? Thank you, Gilbert - -- -Eric 'shubes' -- -Eric 'shubes' - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] spamdyke per user
Ariel wrote: spamdyke there way to set per user or domain in simcontrol? Version 4+ of spamdyke allows per-domain configurations. See the documentation at spamdyke.org. simcontrol and spamdyke have absolutely nothing to do with each other. They're entirely separate. spamdyke happens before a message is received. Simcontrol/simscan happens after it's been transmitted. -- -Eric 'shubes' - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] DCC
- Original Message - From: Eric Shubert e...@shubes.net To: qmailtoaster-list@qmailtoaster.com Sent: Monday, March 23, 2009 9:34 AM Subject: Re: [qmailtoaster] DCC What are the existing/default permissions of /usr/local/bin/dccproc? Is the sticky bit set on the owner or group levels? -r-xr-xr-x 1 root root 488241 Mar 20 09:56 dccproc Gilbert - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] DCC
Gilbert T. Gutierrez, Jr. wrote: - Original Message - From: Eric Shubert e...@shubes.net To: qmailtoaster-list@qmailtoaster.com Sent: Monday, March 23, 2009 9:34 AM Subject: Re: [qmailtoaster] DCC What are the existing/default permissions of /usr/local/bin/dccproc? Is the sticky bit set on the owner or group levels? -r-xr-xr-x 1 root root 488241 Mar 20 09:56 dccproc Gilbert I know nothing about DCC. That being said, does it have some sort of run-as-user option in its config? Perhaps we're attacking the problem from the wrong end. ;) -- -Eric 'shubes' - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
[qmailtoaster] Backup and Restore Scripts
Hello All, I am running on an somewhat old version of qmailtoaster on CentOS 4.3 and want to move it to CentOS 5.2 running on VMWare. However I can not seem to find the lastest Backup and Restore Scripts. Can anyone tell me where I am able to download them? Thanks. - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] Backup and Restore Scripts
Ron Horist wrote: Hello All, I am running on an somewhat old version of qmailtoaster on CentOS 4.3 and want to move it to CentOS 5.2 running on VMWare. However I can not seem to find the lastest Backup and Restore Scripts. Can anyone tell me where I am able to download them? They're in the Qmailtoaster-Plus package now (qtp.qmailtoaster.com). It was a hassle for me to update the things everywhere they were posted, so they're maintained in the QTP package to make my job easier now. - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
[qmailtoaster] process spamdyke
Hello friend, to using qmailtoaster with spamdyke, I was looking to have a process that would be strange what is wrong??? cat /var/qmail/supervise/smtp/run #!/bin/sh QMAILDUID=`id -u vpopmail` NOFILESGID=`id -g vpopmail` MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` SMTPD=/var/qmail/bin/qmail-smtpd QMAILQUEUE=/var/qmail/bin/simscan NOP0CHECK=1 export QMAILQUEUE NOP0CHECK TCP_CDB=/etc/tcprules.d/tcp.smtp.cdb HOSTNAME=`hostname` VCHKPW=/home/vpopmail/bin/vchkpw REQUIRE_AUTH=0 exec /usr/bin/softlimit -m 9000 \ /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c $MAXSMTPD \ -u $QMAILDUID -g $NOFILESGID 0 smtp /var/qmail/bin/spamdyke -f /var/qmail/control/spamdyke.conf \ $SMTPD $VCHKPW /bin/true 21 - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] simscan problem
On Mar 23, 2009, at 1:28 PM, Dan Page wrote: My toaster was working fine but as of lately it seems simscan is not running clamav or spamassassin on incoming mail. running /var/qmail/bin/simscanmk -g produces: LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/ main.cvd LibClamAV Error: cl_cvdhead: Can't open file /usr/share/clamav/ daily.cvd simscan versions cdb file built. /var/qmail/control/simversions.cdb this sounds a lot like the problem i saw a while back around the release of clamav-toaster-0.93. are you running freshclam to get clamav database updates? if so, you may need a patched version of simscan that knows how to read the updates in the new format. i have packaged such a patch here: http://www.vecna.org/software/simscan-toaster/ please make sure that you have handy an already-built version of the stock simscan-toaster *before* you install a patched RPM, so that you can easily roll back if something goes wrong. -steve p.s. i have already submitted this update to Jake; no doubt it'll make its way into the distribution at some point, one way or another, and then i'll be able to take down this page. for the time being, have at it. :) -- If this were played upon a stage now, I could condemn it as an improbable fiction. - Fabian, Twelfth Night, III,v smime.p7s Description: S/MIME cryptographic signature
[qmailtoaster] Install on a barebones server
Hello all I am installing qmail, in fact anything at all, after a period of three-four years. My server is a centos 5 image that i will be running virtualized. So it does not have gcc or make tools. Can anyone point me towards an install description which is a step by step guide to creating qmailtoaster binary rpms to be installed directly and configuration thereafter. Also, any pointers to a similar install guide for tinyDNS with axfrDNS? I am so rusty tat I am afraid I will make mistakes that a kid won't make, even in his sleep. Thanks in advance. With best regards. Sanjay. - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] Install on a barebones server
On 23-Mar-09, at 11:57 AM, Sanjay Arora sanjay.k.ar...@gmail.com wrote: Hello all I am installing qmail, in fact anything at all, after a period of three-four years. My server is a centos 5 image that i will be running virtualized. So it does not have gcc or make tools. Can anyone point me towards an install description which is a step by step guide to creating qmailtoaster binary rpms to be installed directly and configuration thereafter. Also, any pointers to a similar install guide for tinyDNS with axfrDNS? I am so rusty tat I am afraid I will make mistakes that a kid won't make, even in his sleep. Thanks in advance. With best regards. Sanjay. To be honest, I don't think such a guide exists that is particular to the toaster as the install instructions all point to the install script. You will probably have to learn from the usual rpm resources. If you are tight or time, why not just make a duplicate VM, install gcc, etc cimpile the rpm's there and transfer them over (as the environment is identical). Then you also have a test bed for updates, etc. D - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
[qmailtoaster] Qmailtoaster-Plus 0.3.1-1.4.8 released
I have put Qmailtoaster-Plus 0.3.1-1.4.8 into the repository. You may upgrade to the latest version (if you have the qmailtoaster-plus repo installed) simply by yum upgrade qmailtoaster-plus. I will add the new version to the qtp.qmailtoaster.com website later tonight or tomorrow. Here is the release notes since the last version: 03/22/09 - Jake j...@qmailtoaster.com - Removed UpdateSanSecurity.sh cron script and replaced with a - new script that downloads the clamav defs from the proper - rsync locations. 03/16/09 - Eric e...@shubes.net - Added perl-HTTP-Date, perl-LWP-UserAgent dependencies - Added all other spamassassin perl module dependencies 03/14/09 - Eric e...@shubes.net - Added qtp-mailman-forwards script for creating mailman forwards 03/03/09 - Eric e...@shubes.net - Fixed qtp-clean-spam for large numbers of emails 02/19/09 - Jake j...@qmailtoaster.com - Removed Roundcube from package due to security issues with - Roundcube that allowed a remote hacker to obtain logins on - the system. 12/11/08 - Jake j...@v2gnu.com - Changed the Roundcube installation script around to only change the - data we needed to in main.inc.php for compatability and reworded install text 10/27/08 - Jake j...@v2gnu.com - Added qtp-install-qcontrolpe to the menu to install the QControlPE package 10/07/08 - Eric e...@shubes.net - qtp-mount-sandbox - added mkdir for /sys to eliminate error message from rpm in sandbox 10/03/08 - Eric e...@shubes.net - qtp-newmodel - added perl-LWP-UserAgent for arch x86_64 10/03/08 - Eric e...@shubes.net - qtp-build-unionfs - eliminated duplicate message 10/03/08 - Eric e...@shubes.net - qtp-mount-sandbox - removed proc,sys directories Enjoy! - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] process spamdyke
emili...@zoioroxo.com.br wrote: Hello friend, to using qmailtoaster with spamdyke, I was looking to have a process that would be strange what is wrong??? cat /var/qmail/supervise/smtp/run #!/bin/sh QMAILDUID=`id -u vpopmail` NOFILESGID=`id -g vpopmail` MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` SMTPD=/var/qmail/bin/qmail-smtpd QMAILQUEUE=/var/qmail/bin/simscan NOP0CHECK=1 export QMAILQUEUE NOP0CHECK TCP_CDB=/etc/tcprules.d/tcp.smtp.cdb HOSTNAME=`hostname` VCHKPW=/home/vpopmail/bin/vchkpw REQUIRE_AUTH=0 exec /usr/bin/softlimit -m 9000 \ /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c $MAXSMTPD \ -u $QMAILDUID -g $NOFILESGID 0 smtp /var/qmail/bin/spamdyke -f /var/qmail/control/spamdyke.conf \ $SMTPD $VCHKPW /bin/true 21 It's hard to say what could be wrong with that. I don't see anything glaring. What sort of error do you see in the smtp log file? Does it run at all? Does it simply not invoke spamdyke? Here's the run file that qtp-install-spamdyke produces (for your reference): #!/bin/sh QMAILDUID=`id -u vpopmail` NOFILESGID=`id -g vpopmail` MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` SPAMDYKE=/usr/local/bin/spamdyke SPAMDYKE_CONF=/etc/spamdyke/spamdyke.conf SMTPD=/var/qmail/bin/qmail-smtpd TCP_CDB=/etc/tcprules.d/tcp.smtp.cdb HOSTNAME=`hostname` VCHKPW=/home/vpopmail/bin/vchkpw REQUIRE_AUTH=0 exec /usr/bin/softlimit -m 2000 \ /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c $MAXSMTPD \ -u $QMAILDUID -g $NOFILESGID 0 smtp \ $SPAMDYKE --config-file $SPAMDYKE_CONF \ $SMTPD $VCHKPW /bin/true 21 -- -Eric 'shubes' - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
