[qmailtoaster] Re: TLS_connect_failed: Plesk mailserver

[PakOgah]

somehow I can sent from yahoo and the recipient replied to me

PakOgah wrote:

My user complain cant sent email to domain pegasusinsurindo.com
when I check on send log this is error
08-28 19:09:05 delivery 243: deferral: 
TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;_connected_to_72.4.126.254./ 



already search on archive and google and only got this similar.
http://www.thegillis.net/2007/04/07/mail-toaster-qmail-and-openssl-098e-workaround-and-fix/ 


but I am not using openssl 0.9.8e

and from http://forum.parallels.com/printthread.php?t=52543
which I quote "Does anybody know of a way to prevent Qmail from 
attempting a STARTTLS when sending to a server advertising STARTTLS 
capability?"


I am using centos 4.6
my toaster package is:
[r...@server2 send]# rpm -qa | grep toaster



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] mailer-daemon based on virtual domain

[mailing]

Hi ,

 

 

 

I have three virtual domains on my server namely example.com , another.com , 
test.com,  for example my u...@another.com send an email and the message 
bounces the message details always came from mailer-dae...@example.com how can 
I configure the server to change it mailer-daemon domain based on my existing 
domains.

 

 

 

Thanks,

 

manny

Re: [qmailtoaster] CBL Listing

[Aleksander Podsiadly]

W dniu 03.09.2009 02:10, Gary Bowling pisze:


Thanks very much for checking it out. I know it's difficult to try to 
answer everyone's questions and I do appreciate it. Also, thanks for 
all the hard work on the toaster, it's a good one!


I'll see if I can track down who is sending out spam emails.

Thanks

Gary


You can install smtp-proxy on NAT machine.
http://smtp-proxy.klolik.org/

--
Pozdrawiam / Regards,
Aleksander Podsiadły
mail: a...@westside.kielce.pl
jid: a...@jabber.westside.kielce.pl
ICQ: 201121279
gg: 9150578


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] root mail and UpdateSaneSecurity

[Kent Busbee]

See response below; Jake Vickers wrote:
> Kent Busbee wrote:
>> My SMTP was timing out for MS Outlook, so I took a look at my queue and
found this (103 of them):
>> 11174869 (20, remote)
>>   Envelope Sender: anonym...@mail.northlakechristian.org
>>   Envelope Recipient: r...@mail.northlakechristian.org (To Be
Delivered)
>> /etc/cron.hourly/UpdateSaneSecurity.sh:
>> LibClamAV Error: Problem parsing database at line 1
>> LibClamAV Error: Can't load /var/tmp/clamdb/phish.ndb: Malformed
database
>> ERROR: Malformed database
>> ClamAV had a problem using /var/tmp/clamdb/phish.ndb! (error:
>> 50)
>> We will not move /var/tmp/clamdb/phish.ndb into the Database
>> directory
>> Renaming /var/tmp/clamdb/phish.ndb to
>> /var/tmp/clamdb/phish.ndb.bad for you to check
>> Restarting clamd
>> /var/qmail/supervise/clamd: up (pid 13974) 2 seconds
>> /var/qmail/supervise/clamd/log: up (pid 13970) 2 seconds
>> [r...@mail ~]#
>> which leads to a couple of questions:
>> 1) This is obviously an error email to root, but that "email user" does
not exist.  Should it?  Should I have some form of forward for this case?
>> Or is that an invitation to spam?
>
> Your "root" emails are defined in /var/qmail/alias/.qmail-root . This
*should* be a valid destination, even if it's a box you do not check. If
this is not something you wish to do, I recommend you lower your
queuelifetime to a low number (4-6 hours) so that those emails will be
removed after that period of time.
>
>

Thanks for the help.  I modified /var/qmail/alias/.qmail-root and changed
it from:
&r...@mail
to:
&kbus...@northlakechristian.org

and I changed /var/qmail/control/queuelifetime from:
86400
to:
6400

(just under 2 hours)
The queue has gone down, but I am still getting emails to the wrong address.
[r...@mail ~]# qmqtool -l
11175216 (22, remote)
  Envelope Sender: anonym...@mail.northlakechristian.org
  Envelope Recipient: r...@mail.northlakechristian.org (To Be Delivered)

I have not received any at kbus...@northlakechristian.org.  Did I miss
something?


>> 2) Why is the UpdateSaneSecurity not working?  Is anyone else getting
this?  Did something change?
>
> It doesn't necessarily mean anything catastrophic. If you tried to
download the virus definition while it was in the middle of propagating on
their servers then this is normal. As a matter of fact, it's normal to get
these errors 2-4 times a day.
> You may also be running an older version of clam (you did not say in the
message) in which case the updated definition will probably always fail.
Still nothing major to worry about. Your clamav just won't use those
definitions.
>

[r...@mail ~]# qtp-ami-up2date
New Qmail-Toaster Packages Available:
 available: simscan-toaster-1.4.0-1.3.8
(installed: simscan-toaster-1.3.1-1.3.6)
[r...@mail ~]#
[r...@mail ~]# clamd -V
ClamAV 0.95.2/9769/Wed Sep  2 19:38:10 2009

This is the latest version of clam.

>
>> 3) What should I do to fix this?  Ignore it?
> Depends on how you answered the above.
> Let us know if you have any more questions.
>

According to:
http://qtp.qmailtoaster.com/trac/browser/doc/release-notes.txt

03/22/09 - Jake 
77   - Removed UpdateSanSecurity.sh cron script and replaced with a
78   - new script that downloads the clamav defs from the proper
79   - rsync locations.
80

SO, I installed the new qtp-extraclam.

My two new questions are:

1) Why is the root email not forwarding correctly?
and
2) Should I rm /etc/cron.hourly/UpdateSaneSecurity.sh?


Kent Busbee
Director of Technology
Northlake Christian School







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Jake Vickers]

Gary Bowling wrote:


Thanks very much for checking it out. I know it's difficult to try to 
answer everyone's questions and I do appreciate it. Also, thanks for 
all the hard work on the toaster, it's a good one!


I'll see if I can track down who is sending out spam emails.



No problem. Let us know if we can answer any more questions for you.


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Joe S.]

I think the issue probably is a compromised windows machine on your network. 
I've had the same issues before until I blocked pretty much all outgoing 
ports on our network except what users need to surf/ftp.


--
From: "Gary Bowling" 
Sent: Thursday, September 03, 2009 8:10 AM
To: 
Subject: Re: [qmailtoaster] CBL Listing



Thanks very much for checking it out. I know it's difficult to try to 
answer everyone's questions and I do appreciate it. Also, thanks for all 
the hard work on the toaster, it's a good one!


I'll see if I can track down who is sending out spam emails.

Thanks

Gary

Jake Vickers wrote:

Gary Bowling wrote:


The list is http://cbl.abuseat.org/ and I'm not listed there currently 
as I just removed it about an hour ago. I've removed the listing about 
every 2 days for the last 10 days or so, trying to stay on top of it 
until I can figure out why I keep getting listed.




Everything looked okay. Your mail server is behind a NAT was the only 
thing I saw, and not really that big of a deal.
I think you'll find that your problem is one of your users. abuseat.org 
normally only lists you if your server sends one of their spamtraps a 
message - since they're spam traps, any messages going to them are almost 
guaranteed to be spam.


-

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
-

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






--

Gary Bowling
GBCO.US
g...@gbco.us



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com





__ Information from ESET NOD32 Antivirus, version of virus 
signature database 4388 (20090902) __


The message was checked by ESET NOD32 Antivirus.

http://www.eset.com





__ Information from ESET NOD32 Antivirus, version of virus signature 
database 4388 (20090902) __

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Gary Bowling]

Thanks very much for checking it out. I know it's difficult to try to 
answer everyone's questions and I do appreciate it. Also, thanks for all 
the hard work on the toaster, it's a good one!


I'll see if I can track down who is sending out spam emails.

Thanks

Gary

Jake Vickers wrote:

Gary Bowling wrote:


The list is http://cbl.abuseat.org/ and I'm not listed there 
currently as I just removed it about an hour ago. I've removed the 
listing about every 2 days for the last 10 days or so, trying to stay 
on top of it until I can figure out why I keep getting listed.




Everything looked okay. Your mail server is behind a NAT was the only 
thing I saw, and not really that big of a deal.
I think you'll find that your problem is one of your users. 
abuseat.org normally only lists you if your server sends one of their 
spamtraps a message - since they're spam traps, any messages going to 
them are almost guaranteed to be spam.


- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






--

Gary Bowling
GBCO.US
g...@gbco.us



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Jake Vickers]

Gary Bowling wrote:


The list is http://cbl.abuseat.org/ and I'm not listed there currently 
as I just removed it about an hour ago. I've removed the listing about 
every 2 days for the last 10 days or so, trying to stay on top of it 
until I can figure out why I keep getting listed.




Everything looked okay. Your mail server is behind a NAT was the only 
thing I saw, and not really that big of a deal.
I think you'll find that your problem is one of your users. abuseat.org 
normally only lists you if your server sends one of their spamtraps a 
message - since they're spam traps, any messages going to them are 
almost guaranteed to be spam.


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spamassassin: logs, headers

[Steve Huff]

On Sep 2, 2009, at 5:35 PM, Kent Busbee wrote:


See response below; Toni Cosma wrote:

Hi list,

What is logged to /var/log/qmail/spamd/current ? Only when a  
message is

marked as spam ?
My spam log looks like below:
tail -f /var/log/qmail/spamd/current
  @40004a9ab0dd04178dd4 [2244] info: spamd: server killed by  
SIGTERM,

shutting down
  @40004a9ab14b3391d5ec [2178] error: Can't locate
Mail/DomainKeys/Message.pm in @INC (@INC contains:


I am no expert, but the above two lines do not look right.  Is spamd
running?  Try this:
ps aux | egrep "spamd | spamd"



this log message contains both the problem and its solution.  spamd  
died (so no SpamAssassin processing).  why did it die?  because it  
can't find the Mail::DomainKeys::Message Perl module.


where is this module?  let's ask yum:

[sh...@srdce ~]$ sudo yum -y provides 'perl(Mail::DomainKeys::Message)'
perl-Mail-DomainKeys-1.0-1.el5.rf.noarch : Perl module that implements  
DomainKeys

Matched from:
Other   : perl(Mail::DomainKeys::Message)

at least that's where i get it from (the rpmforge repository).   
install the missing Perl module and restart spamd.


-steve

--
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v

http://five.sentenc.es



PGP.sig
Description: This is a digitally signed message part

Re: [qmailtoaster] spamassassin: logs, headers

[Kent Busbee]

See response below; Toni Cosma wrote:
>  Hi list,
>
>  What is logged to /var/log/qmail/spamd/current ? Only when a message is
> marked as spam ?
>  My spam log looks like below:
>  tail -f /var/log/qmail/spamd/current
>@40004a9ab0dd04178dd4 [2244] info: spamd: server killed by SIGTERM,
> shutting down
>@40004a9ab14b3391d5ec [2178] error: Can't locate
> Mail/DomainKeys/Message.pm in @INC (@INC contains:

I am no expert, but the above two lines do not look right.  Is spamd
running?  Try this:
ps aux | egrep "spamd | spamd"



>   It is true that I have not receive spam but how can I test that
> spamassassin is working?

Send an email that has a known spam phrase in it.  Or create your own rule
and send one with that phrase in it.

Create the following file /etc/mail/spamassassin/test.cf :

bodyMYSATEST   /This is a test for SpamAssassin Phrase/
score   MYSATEST   0.1
describeMYSATEST   My test for SpamAssassin

Then send an email with "This is a test for SpamAssassin Phrase" in it.



Or see http://wiki.apache.org/spamassassin/TestingInstallation


>  Should not have my email headers contain spamassasin and clamav version ?
>  My headers looks like below:[I have send a email from yahoo to my domain]
>

Yes they should and no they don't.

Check your /etc/tcprules.d/tcp.smtp file.  How about cat-ing it for us.

>   Content-Filter: maildrop-toaster
>Return-Path:
>Delivered-To: example.com-off...@example.com
>Received: (qmail 2068 invoked by uid 89); 2 Sep 2009 12:35:45 -
>Received: from unknown (HELO web46006.mail.sp1.yahoo.com)
> (68.180.199.99)
>  by mail.example.com with SMTP; 2 Sep 2009 12:35:45 -
>Received-SPF: none (mail.example.com: domain at yahoo.com does not
> designate permitted sender hosts)
>Received: (qmail 13304 invoked by uid 60001); 2 Sep 2009 12:35:43 -
>DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
> s=s1024; t=1251894943; bh=3rzAkLPvKX2V5qSp3RoZ2+xxLIz1JxX2yhiR2SkW9/c=;
> h=Message-ID:X-YMail-OSG:Received:X-Ma
>iler:Date:From:Subject:To:MIME-Version:Content-Type;
> b=12u0rvqM1EPrSMdD3MQucyY0HnT7Z7MVPlYwtoGAv5HD9N1y5bYTaAeZex6QkfCuqVr50g8eFsosC3YKdHoJBVVz+pfXxE84FnYPWUTfveywWtGU+jjP3wjppN
>H2rYHyGBdf+EvTaRi78CwjGqYcbSSYir+xUuRiSQDP8VZs6Vk=
>DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
>  s=s1024; d=yahoo.com;
>  
> h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
>  
> b=f4O3FqwrPgXxTx1gth0NENFmZ9+1cHJU+wzidWnNT8xnYpq67+QX7+EHwG14Ofed7yiq6qx9pZrVbaEiSHVa8BhDLoyXGJEBvtVTYB6dcwjcwekZWxGiRfJmOKCZiBJmu4LcrTF0a1CLwtkY36ADnb4w4eCJ7R3nO6RDXGIlVOA=;
>Message-ID:
>X-YMail-OSG:
> rYmjyeoVM1nnV1gdkTS7dfKsCxCnASrc.ga6K7f0T9ahmzpVyP_OmtYrJZTc.XSuKJHdYBu2P99b7jRMAE21_OCU1TpLw6Y.IkomD7aJj5bavsKsaB6h1HDLiu_fswQWJ.H02ek3s2E3_3ibZFw9jnPex03Pw5ryumSF
>lN098DO41aOQPdUJYB40dao9mtbuiYNX0HZKF.torKSZY7MoSh1cxw--
>Received: from [82.79.76.6] by web46006.mail.sp1.yahoo.com via HTTP;
> Wed, 02 Sep 2009 05:35:43 PDT
>X-Mailer: YahooMailClassic/6.1.2 YahooMailWebService/0.7.338.2
>Date: Wed, 2 Sep 2009 05:35:43 -0700 (PDT)
>From: Toni Cosma
>Subject: TEST
>To:   off...@example.com
>
>   ;
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="0-11240-1251894943=:12192"
>   
>   
>  &n
> bsp;
>--0-11240-1251894943=:12192
>Content-Type: text/plain; charset=us-ascii
>   
>   
>  &n
> bsp;
>TEST
>
>
>  
> -
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com) Vickers Consulting Group offers
> Qmailtoaster support and installations.   If you need
> professional help with your setup, contact them today!
> -
>  Please visit qmailtoaster.com for the latest news, updates, and
> packages. To unsubscribe, e-mail:
> qmailtoaster-list-unsubscr...@qmailtoaster.com  For additional
> commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


Kent Busbee
Director of Technology
Northlake Christian School


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for t

Re: [qmailtoaster] CBL Listing

[Jake Vickers]

Gary Bowling wrote:


The list is http://cbl.abuseat.org/ and I'm not listed there currently 
as I just removed it about an hour ago. I've removed the listing about 
every 2 days for the last 10 days or so, trying to stay on top of it 
until I can figure out why I keep getting listed.


Thanks, Gary



Okay. Send me a message off-list and I will look at the headers later 
tonight to see if anything is amiss.



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Gary Bowling]

The list is http://cbl.abuseat.org/ and I'm not listed there currently 
as I just removed it about an hour ago. I've removed the listing about 
every 2 days for the last 10 days or so, trying to stay on top of it 
until I can figure out why I keep getting listed.


Thanks, Gary

Jake Vickers wrote:

Gary Bowling wrote:


I keep getting listed on the CBL list. I have been through all the 
recommendations for checking my server, but can't seem to find 
anything wrong. I'm sure it's something simple I'm overlooking. This 
all started when I upgraded to the qmailtoaster, I previously ran 
Bill Shupp's toaster and have never had this problem before.




Irrelevant. They're both Qmail.


I have checked the smtpgreeting with telnet and it indeed responds 
correctly (at least as far as I can tell). The response 
(mail.gbco.us) also corresponds to the rDNS for the ip address which 
is also matched with the mx record.


So, I'm at a loss as to why I keep getting blacklisted by CBL, which 
says it only checks for headers. Anyone have any other suggestions 
for what I've missed?


Thanks, Gary


What lists? I ran a quick check on your domain and do not see you 
listed on any BLs that I check (about 55 or so). If we know what list 
and what their criteria are then we can maybe help more.




- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






--

Gary Bowling
GBCO.US
g...@gbco.us



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Gary Bowling]

I have tested for open relay and the test comes back negative, my
understanding is that the toaster is not an open relay by default and
unless I've done something whacky I've not done anything to change that.

As for a spammer, well that's always a possibility. I have gone through
isoqlog stats and queried all the top senders. None of them are sending
abnormally large numbers of messages. There are a few users that send
250 or so once per week, but these are "auto dealerships" and they send
service reminders to their customers, which are "opt in" emails and
should not be triggering anything. 

I am having my desktop tech go out and run virus/spyware checkers on a
few others just to make sure. 

Oddly, it seems to happen for a week or so after adding a new domain.
Could just be coincidence, not sure. When I first switched over to the
toaster, I fought this for several weeks. Then it settled down with no
listings for about 3 weeks. Then I added a domain and have now been
listed twice since the add. Again, all speculation as to whether that
has anything to do with it, just trying to give out as much info as
possible in case someone has seen this. 

Gary

Maxwell Smart wrote:

  CBL usually means you have a spammer in your midst, have been hacked or
victim of malware, or are an open relay.

Gary Bowling wrote:
  
  
I keep getting listed on the CBL list. I have been through all the
recommendations for checking my server, but can't seem to find
anything wrong. I'm sure it's something simple I'm overlooking. This
all started when I upgraded to the qmailtoaster, I previously ran Bill
Shupp's toaster and have never had this problem before.

I have checked the smtpgreeting with telnet and it indeed responds
correctly (at least as far as I can tell). The response (mail.gbco.us)
also corresponds to the rDNS for the ip address which is also matched
with the mx record.

So, I'm at a loss as to why I keep getting blacklisted by CBL, which
says it only checks for headers. Anyone have any other suggestions for
what I've missed?

Thanks, Gary

-

Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and
installations.
 If you need professional help with your setup, contact them today!
-

Please visit qmailtoaster.com for the latest news, updates, and
packages.
 To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  
  
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



  


-- 

Gary Bowling
GBCO.US
g...@gbco.us




-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Jake Vickers]

Gary Bowling wrote:


I keep getting listed on the CBL list. I have been through all the 
recommendations for checking my server, but can't seem to find 
anything wrong. I'm sure it's something simple I'm overlooking. This 
all started when I upgraded to the qmailtoaster, I previously ran Bill 
Shupp's toaster and have never had this problem before.




Irrelevant. They're both Qmail.


I have checked the smtpgreeting with telnet and it indeed responds 
correctly (at least as far as I can tell). The response (mail.gbco.us) 
also corresponds to the rDNS for the ip address which is also matched 
with the mx record.


So, I'm at a loss as to why I keep getting blacklisted by CBL, which 
says it only checks for headers. Anyone have any other suggestions for 
what I've missed?


Thanks, Gary


What lists? I ran a quick check on your domain and do not see you listed 
on any BLs that I check (about 55 or so). If we know what list and what 
their criteria are then we can maybe help more.




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CBL Listing

[Maxwell Smart]

CBL usually means you have a spammer in your midst, have been hacked or
victim of malware, or are an open relay.

Gary Bowling wrote:
>
> I keep getting listed on the CBL list. I have been through all the
> recommendations for checking my server, but can't seem to find
> anything wrong. I'm sure it's something simple I'm overlooking. This
> all started when I upgraded to the qmailtoaster, I previously ran Bill
> Shupp's toaster and have never had this problem before.
>
> I have checked the smtpgreeting with telnet and it indeed responds
> correctly (at least as far as I can tell). The response (mail.gbco.us)
> also corresponds to the rDNS for the ip address which is also matched
> with the mx record.
>
> So, I'm at a loss as to why I keep getting blacklisted by CBL, which
> says it only checks for headers. Anyone have any other suggestions for
> what I've missed?
>
> Thanks, Gary
>
> -
>
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and
> installations.
>  If you need professional help with your setup, contact them today!
> -
>
> Please visit qmailtoaster.com for the latest news, updates, and
> packages.
>  To unsubscribe, e-mail:
> qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
>
>

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] CBL Listing

[Gary Bowling]

I keep getting listed on the CBL list. I have been through all the 
recommendations for checking my server, but can't seem to find anything 
wrong. I'm sure it's something simple I'm overlooking. This all started 
when I upgraded to the qmailtoaster, I previously ran Bill Shupp's 
toaster and have never had this problem before.


I have checked the smtpgreeting with telnet and it indeed responds 
correctly (at least as far as I can tell). The response (mail.gbco.us) 
also corresponds to the rDNS for the ip address which is also matched 
with the mx record.


So, I'm at a loss as to why I keep getting blacklisted by CBL, which 
says it only checks for headers. Anyone have any other suggestions for 
what I've missed?


Thanks, Gary

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Is it getting Blocked?

[Eric Shubert]

Jim Shupert wrote:

I take that as good advice - i appreciate it.

I reckon  i could do that.

from your earlier wisdom

might i be correct in think that i need to customize
# echo "{submission.server.com}:587 {user:passwd}" \
to something like
# echo "{smtp.fuse.net}:587 {myFuseUser:myFuseUserPasswd}" \


Yes, but without the brackets (curly braces).


and

relayhost = {submission.server.com}:587 
to

relayhost = {smtp.fuse.net}:587


Yes, but without the brackets (curly braces).



where smtp.fuse.net = the (dsl) isp mailServer - Not my local machine 
taster.local

and
myFuseUser:myFuseUserPasswd = a valid user /psswd on that server


Instead of using smtp.fuse.net, you might be able to send it straight to 
your server by substituting your mail server's url/user/password, 
providing that fuse.net doesn't block port 587.



Thanks!

jims


Eric Shubert wrote:
Postfix lets you easily control this on the sender's end. See the 
myorigin parameter. That's where the proper fix is.


FWIW, sendmail is terribly antiquated. Reminds me of assembler macros.
If you would have implemented postfix (days ago), you'd be done with 
this by now.


Jim Shupert wrote:

Friends,

here is the result of a qmlog smtp -t 100  ( i sifted through that 
for a reference to the 'other' machine )


09-02 12:35:46 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain
 
09-02 12:35:58 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain


so my Q might be ::: can I make CHKUSER allow the sender of   
r...@taster.local.
maybe if I recompile CHKUSER  ( i am thinking much like I recompiled 
it to allow blackberriness (\) )


might that work? -- do you think?  and what would i 'say' when i 
recompile chckuser?


what i am doing :  I have a simple machine on a DSL ( fuse is ma bell 
here ) on that machine I am croning a perl that monitors several 
websites ( from *outside* my 2-T1 connections )  and that machine 
(taster) is running sendMail that sends -- upon alarm an email to the 
fuse mail server
and of course.  My QMT  does the chckuser and sees a conflict between 
o...@taster.local   from mail-out2.fuse.net ... or that is what i 
*think is happening.   note changing my domain (hosts file) on taster 
to taster.fuse.net didn't work.


thanks

Eric Shubert wrote:
In a typical configuration, it would be hitting your smtp server 
port 25, which you would see in your smtp log:

# qmlog -lc fuse\.net

Jim Shupert wrote:

Friends,  :: an update ::

I have retained the postfix how to in case i need it
I got my thing working via sendmail ( 'cause i was close )  and 
using the providers mailserver.( smtp.fuse.net )


basically i am able to monitor our servers ( like I am outside the 
network )  via this dsl

and I can send an email that I can get on my mobile device

so i can get to my fuse account ( the dsl Ma Bell folks here in 
cincy )
and I have THAT account set to forward mail to my pps account ( 
that uses a qmail toaster mail server )


I reckon -- qmail sees that as , well ... i do not know -- but it 
never gets to my inside
( but , i am basically happy - cause I can have my desk clinet also 
looking at my fuse and --it also rings in my pocketso..it is 
workable )


I was wondering what logs I might look at to see if this 'fuse 
relay ' is hitting my qmail toaster server?


I reckon I will never get the messages to - just come through.

Thanks

Eric Shubert wrote:

Hey Jim,

I just happened to be doing this today, so here are my notes on 
how to set up postfix to send mail out from a generic server, like 
for logwatch output and such (that would otherwise go to 
r...@localhost).


{replace what's in braces, and remove braces}

# yum install postfix
# yum remove sendmail

# cd /etc/pki/tls/certs
# make postcert.pem

# echo "{submission.server.com}:587 {user:passwd}" \
> /etc/postfix/sasl_passwd
# chmod 600 /etc/postfix/sasl_passwd
# chown root:root /etc/postfix/sasl_passwd
# postmap /etc/postfix/sasl_passwd

Edit /etc/aliases if desired, then do newaliases command:
root:sysadmin
# newaliases

Edit /etc/postfix/main.cf, changing these from the default values 
(this was CentOS5.3):

myorigin = $mydomain
#mydestination =
mynetworks_style = host
relayhost = {submission.server.com}:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtp_use_tls = yes
smtp_tls_CAfile = /etc/pki/tls/certs/postcert.pem
smtp_tls_session_cache_database = 
btree:/var/run/smtp_tls_session/cache


# service postfix start
# chkconfig postfix on

That should do it.
Note, this configuration relies on hostname being set correctly 
for your domain. If it's not, you'll need to change the myorigin 
variable appropriately.


Please let us know whether or not this works for you.

Eric Shubert wrote:
That's not telling us much. I sure don't know, and don't care to 
know sendmail. If you'd try using postfix again we might be of 
more

Re: [qmailtoaster] Is it getting Blocked?

[Jim Shupert]

I take that as good advice - i appreciate it.

I reckon  i could do that.

from your earlier wisdom

might i be correct in think that i need to customize
# echo "{submission.server.com}:587 {user:passwd}" \
to something like
# echo "{smtp.fuse.net}:587 {myFuseUser:myFuseUserPasswd}" \

and

relayhost = {submission.server.com}:587 
to

relayhost = {smtp.fuse.net}:587


where smtp.fuse.net = the (dsl) isp mailServer - Not my local machine 
taster.local

and
myFuseUser:myFuseUserPasswd = a valid user /psswd on that server

Thanks!

jims


Eric Shubert wrote:
Postfix lets you easily control this on the sender's end. See the 
myorigin parameter. That's where the proper fix is.


FWIW, sendmail is terribly antiquated. Reminds me of assembler macros.
If you would have implemented postfix (days ago), you'd be done with 
this by now.


Jim Shupert wrote:

Friends,

here is the result of a qmlog smtp -t 100  ( i sifted through that 
for a reference to the 'other' machine )


09-02 12:35:46 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain
 
09-02 12:35:58 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain


so my Q might be ::: can I make CHKUSER allow the sender of   
r...@taster.local.
maybe if I recompile CHKUSER  ( i am thinking much like I recompiled 
it to allow blackberriness (\) )


might that work? -- do you think?  and what would i 'say' when i 
recompile chckuser?


what i am doing :  I have a simple machine on a DSL ( fuse is ma bell 
here ) on that machine I am croning a perl that monitors several 
websites ( from *outside* my 2-T1 connections )  and that machine 
(taster) is running sendMail that sends -- upon alarm an email to the 
fuse mail server
and of course.  My QMT  does the chckuser and sees a conflict between 
o...@taster.local   from mail-out2.fuse.net ... or that is what i 
*think is happening.   note changing my domain (hosts file) on taster 
to taster.fuse.net didn't work.


thanks

Eric Shubert wrote:
In a typical configuration, it would be hitting your smtp server 
port 25, which you would see in your smtp log:

# qmlog -lc fuse\.net

Jim Shupert wrote:

Friends,  :: an update ::

I have retained the postfix how to in case i need it
I got my thing working via sendmail ( 'cause i was close )  and 
using the providers mailserver.( smtp.fuse.net )


basically i am able to monitor our servers ( like I am outside the 
network )  via this dsl

and I can send an email that I can get on my mobile device

so i can get to my fuse account ( the dsl Ma Bell folks here in 
cincy )
and I have THAT account set to forward mail to my pps account ( 
that uses a qmail toaster mail server )


I reckon -- qmail sees that as , well ... i do not know -- but it 
never gets to my inside
( but , i am basically happy - cause I can have my desk clinet also 
looking at my fuse and --it also rings in my pocketso..it is 
workable )


I was wondering what logs I might look at to see if this 'fuse 
relay ' is hitting my qmail toaster server?


I reckon I will never get the messages to - just come through.

Thanks

Eric Shubert wrote:

Hey Jim,

I just happened to be doing this today, so here are my notes on 
how to set up postfix to send mail out from a generic server, like 
for logwatch output and such (that would otherwise go to 
r...@localhost).


{replace what's in braces, and remove braces}

# yum install postfix
# yum remove sendmail

# cd /etc/pki/tls/certs
# make postcert.pem

# echo "{submission.server.com}:587 {user:passwd}" \
> /etc/postfix/sasl_passwd
# chmod 600 /etc/postfix/sasl_passwd
# chown root:root /etc/postfix/sasl_passwd
# postmap /etc/postfix/sasl_passwd

Edit /etc/aliases if desired, then do newaliases command:
root:sysadmin
# newaliases

Edit /etc/postfix/main.cf, changing these from the default values 
(this was CentOS5.3):

myorigin = $mydomain
#mydestination =
mynetworks_style = host
relayhost = {submission.server.com}:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtp_use_tls = yes
smtp_tls_CAfile = /etc/pki/tls/certs/postcert.pem
smtp_tls_session_cache_database = 
btree:/var/run/smtp_tls_session/cache


# service postfix start
# chkconfig postfix on

That should do it.
Note, this configuration relies on hostname being set correctly 
for your domain. If it's not, you'll need to change the myorigin 
variable appropriately.


Please let us know whether or not this works for you.

Eric Shubert wrote:
That's not telling us much. I sure don't know, and don't care to 
know sendmail. If you'd try using postfix again we might be of 
more help. For  what you need, postfix isn't a bad choice. 
Certainly better than sendmail.


Jim Shupert wrote:
it is centos 4.7  running sendmail ( what came with it )  I 
started to install postfix because I am a bit more farmilur with 
that than send mail.
Postfix was what i was using before i found -- the bes

Re: [qmailtoaster] Is it getting Blocked?

[Jake Vickers]

Jim Shupert wrote:

Friends,

here is the result of a qmlog smtp -t 100  ( i sifted through that for 
a reference to the 'other' machine )


09-02 12:35:46 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain
 
09-02 12:35:58 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain


so my Q might be ::: can I make CHKUSER allow the sender of   
r...@taster.local.
maybe if I recompile CHKUSER  ( i am thinking much like I recompiled 
it to allow blackberriness (\) )


might that work? -- do you think?  and what would i 'say' when i 
recompile chckuser?




You are correct there. chkuser has an option to check for the sending 
domain's MX record and deny if the sending domain does not have an MX 
record. Seems logical since if there is an error you need somewhere to 
send that error message to and if there is no MX record there is nowhere 
to send it (also acts as a spam check).
You can go in and recompile chkuser to turn this option off 
(*CHKUSER_RCPT_MX*) by undefining it. It is undefined in later versions 
of chkuser but I plan to leave it on when I update chkuser - it makes 
more sense to keep it because of what it does rather than remove it and 
force 98% of our users to then turn it back on.
You may also be able to turn it off in your tcp.smtp file for specific 
IP addresses, much like SENDER_NOCHECK, but I have not tried this and no 
one else has posted back as to the validity of this.

You can also add that domain to your DNS so it does have a valid MX record.

Hope that helps some.

Re: [qmailtoaster] Is it getting Blocked?

[Eric Shubert]

Postfix lets you easily control this on the sender's end. See the 
myorigin parameter. That's where the proper fix is.


FWIW, sendmail is terribly antiquated. Reminds me of assembler macros.
If you would have implemented postfix (days ago), you'd be done with 
this by now.


Jim Shupert wrote:

Friends,

here is the result of a qmlog smtp -t 100  ( i sifted through that for a 
reference to the 'other' machine )


09-02 12:35:46 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain
 
09-02 12:35:58 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain


so my Q might be ::: can I make CHKUSER allow the sender of   
r...@taster.local.
maybe if I recompile CHKUSER  ( i am thinking much like I recompiled it 
to allow blackberriness (\) )


might that work? -- do you think?  and what would i 'say' when i 
recompile chckuser?


what i am doing :  I have a simple machine on a DSL ( fuse is ma bell 
here ) on that machine I am croning a perl that monitors several 
websites ( from *outside* my 2-T1 connections )  and that machine 
(taster) is running sendMail that sends -- upon alarm an email to the 
fuse mail server
and of course.  My QMT  does the chckuser and sees a conflict between 
o...@taster.local   from mail-out2.fuse.net ... or that is what i *think 
is happening.   note changing my domain (hosts file) on taster to 
taster.fuse.net didn't work.


thanks

Eric Shubert wrote:
In a typical configuration, it would be hitting your smtp server port 
25, which you would see in your smtp log:

# qmlog -lc fuse\.net

Jim Shupert wrote:

Friends,  :: an update ::

I have retained the postfix how to in case i need it
I got my thing working via sendmail ( 'cause i was close )  and using 
the providers mailserver.( smtp.fuse.net )


basically i am able to monitor our servers ( like I am outside the 
network )  via this dsl

and I can send an email that I can get on my mobile device

so i can get to my fuse account ( the dsl Ma Bell folks here in cincy )
and I have THAT account set to forward mail to my pps account ( that 
uses a qmail toaster mail server )


I reckon -- qmail sees that as , well ... i do not know -- but it 
never gets to my inside
( but , i am basically happy - cause I can have my desk clinet also 
looking at my fuse and --it also rings in my pocketso..it is 
workable )


I was wondering what logs I might look at to see if this 'fuse relay 
' is hitting my qmail toaster server?


I reckon I will never get the messages to - just come through.

Thanks

Eric Shubert wrote:

Hey Jim,

I just happened to be doing this today, so here are my notes on how 
to set up postfix to send mail out from a generic server, like for 
logwatch output and such (that would otherwise go to r...@localhost).


{replace what's in braces, and remove braces}

# yum install postfix
# yum remove sendmail

# cd /etc/pki/tls/certs
# make postcert.pem

# echo "{submission.server.com}:587 {user:passwd}" \
> /etc/postfix/sasl_passwd
# chmod 600 /etc/postfix/sasl_passwd
# chown root:root /etc/postfix/sasl_passwd
# postmap /etc/postfix/sasl_passwd

Edit /etc/aliases if desired, then do newaliases command:
root:sysadmin
# newaliases

Edit /etc/postfix/main.cf, changing these from the default values 
(this was CentOS5.3):

myorigin = $mydomain
#mydestination =
mynetworks_style = host
relayhost = {submission.server.com}:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtp_use_tls = yes
smtp_tls_CAfile = /etc/pki/tls/certs/postcert.pem
smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session/cache

# service postfix start
# chkconfig postfix on

That should do it.
Note, this configuration relies on hostname being set correctly for 
your domain. If it's not, you'll need to change the myorigin 
variable appropriately.


Please let us know whether or not this works for you.

Eric Shubert wrote:
That's not telling us much. I sure don't know, and don't care to 
know sendmail. If you'd try using postfix again we might be of more 
help. For  what you need, postfix isn't a bad choice. Certainly 
better than sendmail.


Jim Shupert wrote:
it is centos 4.7  running sendmail ( what came with it )  I 
started to install postfix because I am a bit more farmilur with 
that than send mail.
Postfix was what i was using before i found -- the best mailserver 
solution of qmailtoaster...


anyways

I can email with a client ( evolution )  and that does come through

even though I am using sendmail. the smtp server is one from the 
isp - a dsl modem etc.


I can command line send mail ( sendmail )  to a gmail account  - 
but not mu internal domain


I was wondering about MX  or Reverse DNS -
here is the full header of the client ( evolution ) email that 
does come through


X-Account-Key: account2
X-UIDL: 1251407849.13380.sifter.pps-inc.com,S=1797
X-Mozilla-Status: 0001
X-Mozilla-Status2: 
X-Mozi

Re: [qmailtoaster] Is it getting Blocked?

[Jim Shupert]

Friends,

here is the result of a qmlog smtp -t 100  ( i sifted through that for a 
reference to the 'other' machine )


09-02 12:35:46 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain

09-02 12:35:58 CHKUSER rejected sender: from  
remote 
216.68.8.171> rcpt <> : invalid sender MX domain


so my Q might be ::: can I make CHKUSER allow the sender of   
r...@taster.local.
maybe if I recompile CHKUSER  ( i am thinking much like I recompiled it 
to allow blackberriness (\) )


might that work? -- do you think?  and what would i 'say' when i 
recompile chckuser?


what i am doing :  I have a simple machine on a DSL ( fuse is ma bell 
here ) on that machine I am croning a perl that monitors several 
websites ( from *outside* my 2-T1 connections )  and that machine 
(taster) is running sendMail that sends -- upon alarm an email to the 
fuse mail server
and of course.  My QMT  does the chckuser and sees a conflict between 
o...@taster.local   from mail-out2.fuse.net ... or that is what i *think 
is happening.   note changing my domain (hosts file) on taster to 
taster.fuse.net didn't work.


thanks

Eric Shubert wrote:
In a typical configuration, it would be hitting your smtp server port 
25, which you would see in your smtp log:

# qmlog -lc fuse\.net

Jim Shupert wrote:

Friends,  :: an update ::

I have retained the postfix how to in case i need it
I got my thing working via sendmail ( 'cause i was close )  and using 
the providers mailserver.( smtp.fuse.net )


basically i am able to monitor our servers ( like I am outside the 
network )  via this dsl

and I can send an email that I can get on my mobile device

so i can get to my fuse account ( the dsl Ma Bell folks here in cincy )
and I have THAT account set to forward mail to my pps account ( that 
uses a qmail toaster mail server )


I reckon -- qmail sees that as , well ... i do not know -- but it 
never gets to my inside
( but , i am basically happy - cause I can have my desk clinet also 
looking at my fuse and --it also rings in my pocketso..it is 
workable )


I was wondering what logs I might look at to see if this 'fuse relay 
' is hitting my qmail toaster server?


I reckon I will never get the messages to - just come through.

Thanks

Eric Shubert wrote:

Hey Jim,

I just happened to be doing this today, so here are my notes on how 
to set up postfix to send mail out from a generic server, like for 
logwatch output and such (that would otherwise go to r...@localhost).


{replace what's in braces, and remove braces}

# yum install postfix
# yum remove sendmail

# cd /etc/pki/tls/certs
# make postcert.pem

# echo "{submission.server.com}:587 {user:passwd}" \
> /etc/postfix/sasl_passwd
# chmod 600 /etc/postfix/sasl_passwd
# chown root:root /etc/postfix/sasl_passwd
# postmap /etc/postfix/sasl_passwd

Edit /etc/aliases if desired, then do newaliases command:
root:sysadmin
# newaliases

Edit /etc/postfix/main.cf, changing these from the default values 
(this was CentOS5.3):

myorigin = $mydomain
#mydestination =
mynetworks_style = host
relayhost = {submission.server.com}:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtp_use_tls = yes
smtp_tls_CAfile = /etc/pki/tls/certs/postcert.pem
smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session/cache

# service postfix start
# chkconfig postfix on

That should do it.
Note, this configuration relies on hostname being set correctly for 
your domain. If it's not, you'll need to change the myorigin 
variable appropriately.


Please let us know whether or not this works for you.

Eric Shubert wrote:
That's not telling us much. I sure don't know, and don't care to 
know sendmail. If you'd try using postfix again we might be of more 
help. For  what you need, postfix isn't a bad choice. Certainly 
better than sendmail.


Jim Shupert wrote:
it is centos 4.7  running sendmail ( what came with it )  I 
started to install postfix because I am a bit more farmilur with 
that than send mail.
Postfix was what i was using before i found -- the best mailserver 
solution of qmailtoaster...


anyways

I can email with a client ( evolution )  and that does come through

even though I am using sendmail. the smtp server is one from the 
isp - a dsl modem etc.


I can command line send mail ( sendmail )  to a gmail account  - 
but not mu internal domain


I was wondering about MX  or Reverse DNS -
here is the full header of the client ( evolution ) email that 
does come through


X-Account-Key: account2
X-UIDL: 1251407849.13380.sifter.pps-inc.com,S=1797
X-Mozilla-Status: 0001
X-Mozilla-Status2: 
X-Mozilla-Keys: 


Return-Path: 
Delivered-To: jshup...@theppsgroup.com
Received: (qmail 13378 invoked by uid 89); 27 Aug 2009 21:17:29 -
Received: by simscan 1.3.1 ppid: 13371, pid: 13373, t: 0.1506s
 scanners:

Re: [qmailtoaster] pop3 slow

[Eric Shubert]

Adding more nameservers will not help performance (unless the first two 
are down of course).


This 'feels' like a network issue to me. I've seen this sort of problem 
caused by errant routing table entries. If there's an entry which points 
to a bogus interface, that can cause delays. Check your routing table 
('route' command), and you might want to do a few traceroutes 
('traceroute' command) to see if you can pinpoint where the delay is 
occurring.


Peter Tan wrote:
Thanks Jake, I'll check with the server co-location provider. Google and 
Yahoo have servers here in Malaysia, it shouldn't be that slow.


I'm also going to add more NS to the domain. Do you think it will help? 
Currently, there's only 2  NS.



On Wed, Sep 2, 2009 at 8:51 PM, Jake Vickers > wrote:


Peter Tan wrote:

I'm using djbdns.

2 lines in resolv.conf:

search myservername.com 
nameserver 127.0.0.1

 dig qmailtoaster.com 

; <<>> DiG 9.3.4-P1 <<>> qmailtoaster.com 
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47062
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;qmailtoaster.com .  IN  A

;; ANSWER SECTION:
qmailtoaster.com .   86400   IN
 A   216.81.238.95


;; Query time: 1301 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:50:32 2009
;; MSG SIZE  rcvd: 50


dig google.com 
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18032
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com .IN  A

;; ANSWER SECTION:
google.com . 300 IN  A
  74.125.67.100
google.com . 300 IN  A
  74.125.45.100
google.com . 300 IN  A
  74.125.127.100


;; Query time: 261 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:52:01 2009
;; MSG SIZE  rcvd: 76

 dig yahoo.com 

; <<>> DiG 9.3.4-P1 <<>> yahoo.com 
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2661
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;yahoo.com . IN  A

;; ANSWER SECTION:
yahoo.com .  21600   IN  A  
209.131.36.159
yahoo.com .  21600   IN  A  
209.191.93.53
yahoo.com .  21600   IN  A  
69.147.114.224


;; Query time: 130 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:53:38 2009
;; MSG SIZE  rcvd: 75

Pop3 and SMTP slow during session/transfer, especially with
attachments.


Either you have a real slow Internet connection, or something is
going on with your DNS.
The item to note is the "Query time". For qmailtoaster.com
 I get 20ms. For google.com
 I get 15ms. For yahoo.com  I
get 5ms. I tried from 3 other servers as well (spread across the
United States, on both coasts) and the highest result I had was 70ms.
Your best one was 130ms, and Yahoo runs a *fast* DNS network.

Try doing a file transfer on that machine as well - if everything is
slow then you may have a network issue or some other underlying issue.





--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] pop3 slow

[Peter Tan]

Thanks Jake, I'll check with the server co-location provider. Google and
Yahoo have servers here in Malaysia, it shouldn't be that slow.
I'm also going to add more NS to the domain. Do you think it will help?
Currently, there's only 2  NS.


On Wed, Sep 2, 2009 at 8:51 PM, Jake Vickers  wrote:

>  Peter Tan wrote:
>
> I'm using djbdns.
>
>  2 lines in resolv.conf:
>
>  search myservername.com
> nameserver 127.0.0.1
>
>   dig qmailtoaster.com
>
>  ; <<>> DiG 9.3.4-P1 <<>> qmailtoaster.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47062
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
>
>  ;; QUESTION SECTION:
> ;qmailtoaster.com.  IN  A
>
>  ;; ANSWER SECTION:
> qmailtoaster.com.   86400   IN  A   216.81.238.95
>
>  ;; Query time: 1301 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Wed Sep  2 19:50:32 2009
> ;; MSG SIZE  rcvd: 50
>
>
>  dig google.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18032
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
>
>  ;; QUESTION SECTION:
> ;google.com.IN  A
>
>  ;; ANSWER SECTION:
> google.com. 300 IN  A   74.125.67.100
> google.com. 300 IN  A   74.125.45.100
> google.com. 300 IN  A   74.125.127.100
>
>  ;; Query time: 261 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Wed Sep  2 19:52:01 2009
> ;; MSG SIZE  rcvd: 76
>
>   dig yahoo.com
>
>  ; <<>> DiG 9.3.4-P1 <<>> yahoo.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2661
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
>
>  ;; QUESTION SECTION:
> ;yahoo.com. IN  A
>
>  ;; ANSWER SECTION:
> yahoo.com.  21600   IN  A   209.131.36.159
> yahoo.com.  21600   IN  A   209.191.93.53
> yahoo.com.  21600   IN  A   69.147.114.224
>
>  ;; Query time: 130 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Wed Sep  2 19:53:38 2009
> ;; MSG SIZE  rcvd: 75
>
>  Pop3 and SMTP slow during session/transfer, especially with attachments.
>
>
> Either you have a real slow Internet connection, or something is going on
> with your DNS.
> The item to note is the "Query time". For qmailtoaster.com I get 20ms. For
> google.com I get 15ms. For yahoo.com I get 5ms. I tried from 3 other
> servers as well (spread across the United States, on both coasts) and the
> highest result I had was 70ms.
> Your best one was 130ms, and Yahoo runs a *fast* DNS network.
>
> Try doing a file transfer on that machine as well - if everything is slow
> then you may have a network issue or some other underlying issue.
>
>

Re: [qmailtoaster] pop3 slow

[Jake Vickers]

Peter Tan wrote:

I'm using djbdns.

2 lines in resolv.conf:

search myservername.com 
nameserver 127.0.0.1

 dig qmailtoaster.com 

; <<>> DiG 9.3.4-P1 <<>> qmailtoaster.com 
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47062
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;qmailtoaster.com .  IN  A

;; ANSWER SECTION:
qmailtoaster.com .   86400   IN  A   
216.81.238.95


;; Query time: 1301 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:50:32 2009
;; MSG SIZE  rcvd: 50


dig google.com 
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18032
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com .IN  A

;; ANSWER SECTION:
google.com . 300 IN  A   
74.125.67.100
google.com . 300 IN  A   
74.125.45.100
google.com . 300 IN  A   
74.125.127.100


;; Query time: 261 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:52:01 2009
;; MSG SIZE  rcvd: 76

 dig yahoo.com 

; <<>> DiG 9.3.4-P1 <<>> yahoo.com 
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2661
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;yahoo.com . IN  A

;; ANSWER SECTION:
yahoo.com .  21600   IN  A   
209.131.36.159
yahoo.com .  21600   IN  A   
209.191.93.53
yahoo.com .  21600   IN  A   
69.147.114.224


;; Query time: 130 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:53:38 2009
;; MSG SIZE  rcvd: 75

Pop3 and SMTP slow during session/transfer, especially with attachments.


Either you have a real slow Internet connection, or something is going 
on with your DNS.
The item to note is the "Query time". For qmailtoaster.com I get 20ms. 
For google.com I get 15ms. For yahoo.com I get 5ms. I tried from 3 other 
servers as well (spread across the United States, on both coasts) and 
the highest result I had was 70ms.

Your best one was 130ms, and Yahoo runs a *fast* DNS network.

Try doing a file transfer on that machine as well - if everything is 
slow then you may have a network issue or some other underlying issue.

[qmailtoaster] spamassassin: logs, headers

[Toni Cosma]

Hi list,

What is logged to /var/log/qmail/spamd/current ? Only when a message is
marked as spam ?
My
spam log looks like below:
tail
-f
/var/log/qmail/spamd/current 
  @40004a9ab0dd04178dd4
[2244] info: spamd: server killed by SIGTERM,
shutting down
  @40004a9ab14b3391d5ec
[2178] error: Can't locate
Mail/DomainKeys/Message.pm in @INC (@INC contains:
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.8
/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7
/usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5
/usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6
/usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl
/usr/lib/perl5/5.8.8/i386-linux-thread-multi /usr/lib/perl5/5.8.8) at
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Plugin/DomainKeys.pm
line 83.
  @40004a9ab14b3824e2fc
[2178] warn: plugin: failed to parse plugin
(from @INC): Can't locate Mail/DomainKeys/Message.pm in @INC (@INC
contains: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.8
/usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.7/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.6/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi
/usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7
/usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5
/usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.8.7/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.6/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi
/usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6
/usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl
/usr/lib/perl5/5.8.8/i386-linux-thread-multi /usr/lib/perl5/5.8.8) at
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Plugin/DomainKeys.pm
line 83.
  @40004a9ab14b38263ea4
[2178] warn: BEGIN failed--compilation
aborted at
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/Plugin/DomainKeys.pm
line 83.
  @40004a9ab14b382684f4
[2178] warn: Compilation failed in require at
(eval 31) line 1.
  @40004a9ab14d1f476c64
[2178] info: spamd: server started on port
783/tcp (running version 3.2.5)
  @40004a9ab14d1f477434
[2178] info: spamd: server pid: 2178
  @40004a9ab14d23eb4254
[2178] info: spamd: server successfully
spawned child process, pid 2586
  @40004a9ab14d23eb4e0c
[2178] info: spamd: server successfully
spawned child process, pid 2587
  @40004a9ab14d23eb55dc
[2178] info: prefork: child states: II

It is true that I have not receive
spam but how can I test that spamassassin is working?
Should not have my email headers contain spamassasin and clamav version
?
My headers looks like below:[I have send a email from yahoo to my
domain]


Content-Filter:
maildrop-toaster   
 
  Return-Path:
   
 
  Delivered-To: example.com-off...@example.com
 
  
  Received: (qmail 2068 invoked by
uid 89); 2 Sep 2009 12:35:45
-
 
  Received: from unknown (HELO
web46006.mail.sp1.yahoo.com)
(68.180.199.99)  
 
    by mail.example.com with SMTP;
2 Sep 2009 12:35:45
-  
 
  Received-SPF: none
(mail.example.com: domain at yahoo.com does not
designate permitted sender
hosts)
 
  Received: (qmail 13304 invoked
by uid 60001); 2 Sep 2009 12:35:43
-
 
  DKIM-Signature: v=1;
a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
s=s1024; t=1251894943; bh=3rzAkLPvKX2V5qSp3RoZ2+xxLIz1JxX2yhiR2SkW9/c=;
h=Message-ID:X-YMail-OSG:Received:X-Ma
  iler:Date:From:Subject:To:MIME-Version:Content-Type;
b=12u0rvqM1EPrSMdD3MQucyY0HnT7Z7MVPlYwtoGAv5HD9N1y5bYTaAeZex6QkfCuqVr50g8eFsosC3YKdHoJBVVz+pfXxE84FnY

Re: [qmailtoaster] pop3 slow

[Peter Tan]

I'm using djbdns.

2 lines in resolv.conf:

search myservername.com
nameserver 127.0.0.1

 dig qmailtoaster.com

; <<>> DiG 9.3.4-P1 <<>> qmailtoaster.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47062
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;qmailtoaster.com.  IN  A

;; ANSWER SECTION:
qmailtoaster.com.   86400   IN  A   216.81.238.95

;; Query time: 1301 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:50:32 2009
;; MSG SIZE  rcvd: 50


dig google.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18032
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com.IN  A

;; ANSWER SECTION:
google.com. 300 IN  A   74.125.67.100
google.com. 300 IN  A   74.125.45.100
google.com. 300 IN  A   74.125.127.100

;; Query time: 261 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:52:01 2009
;; MSG SIZE  rcvd: 76

 dig yahoo.com

; <<>> DiG 9.3.4-P1 <<>> yahoo.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2661
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;yahoo.com. IN  A

;; ANSWER SECTION:
yahoo.com.  21600   IN  A   209.131.36.159
yahoo.com.  21600   IN  A   209.191.93.53
yahoo.com.  21600   IN  A   69.147.114.224

;; Query time: 130 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Sep  2 19:53:38 2009
;; MSG SIZE  rcvd: 75

Pop3 and SMTP slow during session/transfer, especially with attachments.

On Wed, Sep 2, 2009 at 7:02 AM, Eric Shubert  wrote:

> Just 'dig' a few known domains and see what response times look like.
>
> # dig qmailtoaster.com
> # dig google.com
> # dig yahoo.com
>
> Do you have a caching nameserver installed on your toaster? That might
> help.
> # yum install caching-nameserver bind-chroot
>
> What's in your /etc/resolv.conf file?
> (this shows the nameservers for resolving DNS)
>
> Is your pop3 download and SMTP upload slowness continual during the
> session/transfer, or is is just slow getting started?
>
> Peter Tan wrote:
>
>> Thanks. I'm not very sure, but it used to work. I don't have many users on
>> the servers, the problem may have been there from beginning. Any examples of
>> a proper DNS config?
>>
>> Peter
>>
>> On Wed, Sep 2, 2009 at 1:55 AM, Janno Sannik > ja...@foor.ee>> wrote:
>>
>>On 1.09.2009 13:51, Jake Vickers wrote:
>>
>>Peter Tan wrote:
>>
>>I'm experiencing slow and broken pop3 download and SMTP
>>upload. I've increased the timeout in Outlook, the problem
>>persist. I tried downloading large attachments using
>>Squirrelmail, most of the time the download stops. Any way
>>to fix this problem? Same attachments sent to gmail and
>>downloaded without any issue. Thanks.
>>
>>Peter
>>
>>
>>If you have a large message stuck in the wuee then you may need
>>to go in and delete the message.
>>Also check your DNS resolution. Slow SMTP and POP3 are usually
>>caused by a broken DNS resolver somewhere.
>>
>>
>>Probably the case. Just telnet to pop3 port and see if welcome
>>message appears in few seconds or it takes upto few minutes. If it
>>appears in few minutes, then you most probably have DNS resolving
>>issues on your qmail box. One simple thing is that ISP's DNS is
>>down/broken and is not directly related to your box. Try changing
>>DNS servers to see if it helps.
>>
>>
>
> --
> -Eric 'shubes'
>
>
>
> -
>
> Qmailtoaster is sponsored by Vickers Consulting Group (
> www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
>
> -
>Please visit qmailtoaster.com for the latest news, updates, and
> packages.
> To unsubscribe, e-mail:
> qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
>
>
>

Re: [qmailtoaster] Is it getting Blocked?

[Jim Shupert]

thanks!  -- i cannot wait to see!

Eric Shubert wrote:
In a typical configuration, it would be hitting your smtp server port 
25, which you would see in your smtp log:

# qmlog -lc fuse\.net

Jim Shupert wrote:

Friends,  :: an update ::

I have retained the postfix how to in case i need it
I got my thing working via sendmail ( 'cause i was close )  and using 
the providers mailserver.( smtp.fuse.net )


basically i am able to monitor our servers ( like I am outside the 
network )  via this dsl

and I can send an email that I can get on my mobile device

so i can get to my fuse account ( the dsl Ma Bell folks here in cincy )
and I have THAT account set to forward mail to my pps account ( that 
uses a qmail toaster mail server )


I reckon -- qmail sees that as , well ... i do not know -- but it 
never gets to my inside
( but , i am basically happy - cause I can have my desk clinet also 
looking at my fuse and --it also rings in my pocketso..it is 
workable )


I was wondering what logs I might look at to see if this 'fuse relay 
' is hitting my qmail toaster server?


I reckon I will never get the messages to - just come through.

Thanks

Eric Shubert wrote:

Hey Jim,

I just happened to be doing this today, so here are my notes on how 
to set up postfix to send mail out from a generic server, like for 
logwatch output and such (that would otherwise go to r...@localhost).


{replace what's in braces, and remove braces}

# yum install postfix
# yum remove sendmail

# cd /etc/pki/tls/certs
# make postcert.pem

# echo "{submission.server.com}:587 {user:passwd}" \
> /etc/postfix/sasl_passwd
# chmod 600 /etc/postfix/sasl_passwd
# chown root:root /etc/postfix/sasl_passwd
# postmap /etc/postfix/sasl_passwd

Edit /etc/aliases if desired, then do newaliases command:
root:sysadmin
# newaliases

Edit /etc/postfix/main.cf, changing these from the default values 
(this was CentOS5.3):

myorigin = $mydomain
#mydestination =
mynetworks_style = host
relayhost = {submission.server.com}:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtp_use_tls = yes
smtp_tls_CAfile = /etc/pki/tls/certs/postcert.pem
smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session/cache

# service postfix start
# chkconfig postfix on

That should do it.
Note, this configuration relies on hostname being set correctly for 
your domain. If it's not, you'll need to change the myorigin 
variable appropriately.


Please let us know whether or not this works for you.

Eric Shubert wrote:
That's not telling us much. I sure don't know, and don't care to 
know sendmail. If you'd try using postfix again we might be of more 
help. For  what you need, postfix isn't a bad choice. Certainly 
better than sendmail.


Jim Shupert wrote:
it is centos 4.7  running sendmail ( what came with it )  I 
started to install postfix because I am a bit more farmilur with 
that than send mail.
Postfix was what i was using before i found -- the best mailserver 
solution of qmailtoaster...


anyways

I can email with a client ( evolution )  and that does come through

even though I am using sendmail. the smtp server is one from the 
isp - a dsl modem etc.


I can command line send mail ( sendmail )  to a gmail account  - 
but not mu internal domain


I was wondering about MX  or Reverse DNS -
here is the full header of the client ( evolution ) email that 
does come through


X-Account-Key: account2
X-UIDL: 1251407849.13380.sifter.pps-inc.com,S=1797
X-Mozilla-Status: 0001
X-Mozilla-Status2: 
X-Mozilla-Keys: 


Return-Path: 
Delivered-To: jshup...@theppsgroup.com
Received: (qmail 13378 invoked by uid 89); 27 Aug 2009 21:17:29 -
Received: by simscan 1.3.1 ppid: 13371, pid: 13373, t: 0.1506s
 scanners: attach: 1.3.1 clamav: 0.95.2
/m:51/d:9450 spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on 
sifter.pps-inc.com

X-Spam-Level:
X-Spam-Status: No, score=0.1 required=4.0 tests=BAYES_50,RDNS_NONE
autolearn=no version=3.2.5
Received: from unknown (HELO mail-out1.fuse.net) (216.68.8.175)
  by sifter.pps-inc.com with SMTP; 27 Aug 2009 21:17:29 -
Received-SPF: pass (sifter.pps-inc.com: SPF record at zoomtown.com 
designates 216.68.8.175 as permitted sender)

Return-Path: 
X-CNFS-Analysis: v=1.0 c=1 a=_0eaEcvx3pEA:10 
a=Qu4MKinT0AcdTVkTjP4A:9 a=Er_04BcmBtQYP8STtf3EGQ6vdGwA:4

X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: ecout1 smtp.mail=ppsgr...@zoomtown.com; 
spf=unknown
Authentication-Results:  ecout1 smtp.user=ppsgr...@zoomtown.com; 
auth=pass (LOGIN)
Received-SPF: error (ecout1: 208.102.118.162 is neither permitted 
nor denied by domain of zoomtown.com
Received: from [208.102.118.162] ([208.102.118.162:50880] 
helo=[172.17.0.10])

by ecout1 (envelope-from )
(ecelerity 2.2.2.43 r()) with ESMTPA
id C1/DC-11180-8E7F69A4; Thu, 27