[qmailtoaster] domainkeys mulitple domain issue

[Rob Wellard]

I have the latest toaster installed, Everything works beautifully. However i
seem to be getting a weird problem with the domainkey. I have several
domains on the one toaster, and i can get the last one working perfectly,
however the rest come back with bad signature. And it's always the latest
one that seems to work. Is there something i am doing wrong.  Please can you
help

 

Re: [qmailtoaster] domainkeys mulitple domain issue

[Amit Dalia]

Hi Everyone,

Even I was going to post this today. I had got around 15 domains on
the same toaster. I had configure DKIM as per Jake's Video on How to
setup DKIM, but it is signing only 1 domain perfectly but other
domains are getting bad signature.

Authentication-Results: mx.google.com; spf=neutral (google.com:
180.92.170.125 is neither permitted nor denied by domain of
i...@sem-pune.in [1]) smtp.mail= [2]i...@sem-pune.in [2]; dkim=neutral
(no key) header...@webapplication.co.in [3]

My server hostname is mail.webapplication.co.in.

How do I replace header.i value for respective domain.

Thanks and regards,

Amit

At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote:

I have the latest toaster installed, Everything works beautifully.
However i seem to be getting a weird problem with the domainkey. I
have several domains on the one toaster, and i can get the last one
working perfectly, however the rest come back with bad signature. And
it’s always the latest one that seems to work. Is there something i
am doing wrong.  Please can you help

 



Links:
--
[1] mailto:a...@vanaz.com
[2] mailto:smtp.mail=a...@vanaz.com
[3] MAILTO:header...@mailserver

[qmailtoaster] spamdyke simcontrol

[Istvan Köpe]

Hello,

I understand that simcontrol and spamdyke have nothing in common.
Is there a way to have a mail tap for a whole domain, which is not 
spam-filtered? The purpose of this would be, to have a mail account 
where absolutely all the mails are accepted.


Istvan


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] help with qtp-back+cron job

[Dave Hallowell]

nishant amin,
I think you probably need to supply the full path to the executable file. The 
first attempt should work if you change it to:
22 00 * * * /usr/sbin/qtp-backup

Dave



On 4/13/2010 3:12 AM, nishant amin wrote:
 hi all

 i am trying to do a cronjob such that qtp-backup command is exectuted
 at specific hour of the day.this has proved fruitless.
 below describes what i have done so far

 1:created a cron tab as follows:
 22 00 * * * qtp-backup


 the above did not work.

 2:i created s acript to run the command and linked it to crontab as follows

 A:content of the script
   cd ~
   qtp-backup
 saved it as backup.sh and made it executable

 B:the crontab entry for the above
   22 00 * * * /scripts/./backup.sh


 the above did not work as well.


 kindly point out my mistakes ...

 regards
 nishant amin

 -
 Qmailtoaster is sponsored by Vickers Consulting Group 
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and packages.
  
   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


   

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: disable mx check in chkuser

[Rajesh M]

hi

yes i had all of these

:allow,CHKUSER_START=ALWAYS,CHKUSER_RCPT_FORMAT=,CHKUSER_RCPT_MX=,CHKUSER_SENDER_FORMAT=,CHKUSER_SENDER_MX=
..

still it did not get enabled ... basically it seems that if your comment
these it gets disabled server wide

CHKUSER_RCPT_FORMAT
CHKUSER_RCPT_MX
CHKUSER_SENDER_FORMAT
CHKUSER_SENDER_MX

in case of CHKUSER_STARTING_VARIABLE which has corresponding CHKUSER_START
which can be allocated values (always/none/domain) in the tcp.smtp file so
that works.


rajesh



 Did you try with CHKUSER_START=ALWAYS in addition to CHKUSER_RCPT_MX=
 ?

 Rajesh M wrote:
 hi

 i tested this out.

 using CHKUSER_RCPT_MX= in the default rule does not enable chkuser MX
 check.

 :allow,BADMIMETYPE=,BADLOADERTYPE=M,CHKUSER_RCPT_MX=,CHKUSER_ALLOW_SENDER_CHAR_3=/,CHKUSER_RCPTLIMIT=50,CHKUSER_WRONGRCPTLIMIT=10,QMAILQUEUE=/var/qmail/bin/simscan,DKSIGN=/var/qmail/control/domainkeys/%/private,NOP0FCHECK=1

 rajesh


 I don't think CHKUSER_START is going to help you.

 Did you try:
 .) disable CHKUSER_RCPT_MX by commenting it out in chkuser.h, and
 rebuild/reinstall qmail-toaster package
 .) use tcp.smtp line like this:
 127.:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/private,RBLSMTPD=,NOP0FCHECK=1
 111.222.333.444:allow,RBLSMTPD=
 :allow,BADMIMETYPE=,BADLOADERTYPE=M,CHKUSER_RCPT_MX=,CHKUSER_ALLOW_SENDER_CHAR_3=/,CHKUSER_RCPTLIMIT=50,CHKUSER_WRONGRCPTLIMIT=10,QMAILQUEUE=/var/qmail/bin/simscan,DKSIGN=/var/qmail/control/domainkeys/%/private,NOP0FCHECK=1

 Note the absence of CHKUSER_RCPT_MX variable leaves it off, while
 adding
 the variable should turn it on.

 --
 -Eric 'shubes'

 Rajesh M wrote:
 hi

 i went thru the docs of chkuser

 unfortunately there seems to be no way to declare an environment
 variable
 like CHKUSER_START=ALWAYS (or NONE or DOMAIN)

 for the MX and Format check

 this was possible only for CHKUSER_START

 MX and Format check could only be either enabled or disable server
 wide
 and not based on IP ADDRESS basis selectively

 you can view the same here
 http://www.interazioni.it/opensource/chkuser/documentation/chkuser_settings.html#MX_format_checking

 so for my server ip address i disabled the chkuser checks using
 CHKUSER_START=NONE

 The best solution would have been to remove mx checks and format
 checks
 only
 so if there is a solution (OR i am missing something) pl do let me
 know

 here is a copy of the tcp.smtp file

 
 127.:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/private,RBLSMTPD=,NOP0FCHECK=1
 111.222.333.444:allow,RBLSMTPD=,CHKUSER_START=NONE
 :allow,BADMIMETYPE=,BADLOADERTYPE=M,CHKUSER_ALLOW_SENDER_CHAR_3=/,CHKUSER_START=ALWAYS,CHKUSER_RCPTLIMIT=50,CHKUSER_WRONGRCPTLIMIT=10,QMAILQUEUE=/var/qmail/bin/simscan,DKSIGN=/var/qmail/control/domainkeys/%/private,NOP0FCHECK=1

 


 thanks

 rajesh


 Rajesh M wrote:
 hello allo

 thanks to all for your help

 recompiling qmail-toaster*.src.rpm for making changes in chkuser

 my requirement was as such

 when my clients use webmail and send emails to say around 50 or 100
 users
 and even if one of the recepients had a bad email id like a spelling
 mistake in their domain name or email formatting, then the entire
 email
 used to fail

 this was pretty annoying because the error message simply used to
 say
 :
 no
 valid mx or invalid format, without mentioning exactly which email
 id
 is
 at fault

 i would have preferred to remove mx checks and format checks on
 webmail
 ie
 disable only for those emails that originate from my server, but
 this
 is
 NOT POSSIBLE, i could only disable mx check / format checks for the
 entire
 server which is not what i wanted

 so the only solution i found was to enable
 #define CHKUSER_STARTING_VARIABLE CHKUSER_START

 and then recompile qmail toaster as per instructions given here

 http://wiki.qmailtoaster.org/index.php/Chkuser

 during the process is highly recommended that you keep the sleep
 time
 to
 around 10 or 15 mins ie 600 or 900 seconds so that you can relax and
 do
 what you need to do.

 important points
 when you do recompilation all folders under /var/qmail including the
 queue
 seems to have been modified.

 ensure that after you recompile, be sure to modify the tcp.smtp file
 and
 recompile the cdb as per new chkuser settings

 once again thanks to everybody

 rajesh


 That's interesting, Rajesh.
 I'm not real clear though how this solved your problem. Can you post
 your tcp.smtp file for reference?

 I would have though you could have turned of MX checks globally, then
 turned them on selectively in your tcp.smtp file. Perhaps that's what
 yo
 did. I don't see how the CHKUSER_START variable helped your
 situation.

 --
 -Eric 'shubes'


 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and
 installations.
   If you need 

Re: [qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[Jake Vickers]

On 04/12/2010 01:27 PM, Eric Shubert wrote:
I get the same with qtp-ami-up2date. 
http://www.qmailtoaster.com/info/current.txt hasn't been updated to 
reflect the new versions.


Jake, when do you plan on updating the current.txt file?



I had announced that I would remove the old packages on Monday, which I 
did. I build the new current.txt when I move the old files into archive.

Thanks.

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: spamdyke simcontrol

[Eric Shubert]

Istvan Köpe wrote:

Hello,

I understand that simcontrol and spamdyke have nothing in common.
Is there a way to have a mail tap for a whole domain, which is not 
spam-filtered? The purpose of this would be, to have a mail account 
where absolutely all the mails are accepted.


Istvan


- 


Short answer: no.

Spamdyke rejects messages before they're received. In order to do this, 
spamdyke would need to have a taps capability of sorts. You can suggest 
this as an enhancement on the spamdyke list after checking the todo file 
for scheduled enhancements to be sure it's not there already. I wouldn't 
hold my breath on this one. ;)


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[Eric Shubert]

Jake Vickers wrote:

On 04/12/2010 01:27 PM, Eric Shubert wrote:
I get the same with qtp-ami-up2date. 
http://www.qmailtoaster.com/info/current.txt hasn't been updated to 
reflect the new versions.


Jake, when do you plan on updating the current.txt file?



I had announced that I would remove the old packages on Monday, which I 
did. I build the new current.txt when I move the old files into archive.

Thanks.



Thanks for clearing that up, Jake. I missed that detail somehow. I like 
that there's some overlap there.


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: disable mx check in chkuser

[Eric Shubert]

Like you said though, it's an all or nothing.

This is not my understanding from the documentation. Having the variable 
defined should activate them.


Would you care to contact Antonio Nati (chkuser author, 
mailto:to...@interazioni.it) and confirm whether this is a bug or not?


Thanks.
--
-Eric 'shubes'


Rajesh M wrote:

hi

yes i had all of these

:allow,CHKUSER_START=ALWAYS,CHKUSER_RCPT_FORMAT=,CHKUSER_RCPT_MX=,CHKUSER_SENDER_FORMAT=,CHKUSER_SENDER_MX=
..

still it did not get enabled ... basically it seems that if your comment
these it gets disabled server wide

CHKUSER_RCPT_FORMAT
CHKUSER_RCPT_MX
CHKUSER_SENDER_FORMAT
CHKUSER_SENDER_MX

in case of CHKUSER_STARTING_VARIABLE which has corresponding CHKUSER_START
which can be allocated values (always/none/domain) in the tcp.smtp file so
that works.


rajesh




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Thank you

[Sven Geschke]

I've just finished a pretty painless qmailtoaster installation on CentOS
5.4 and wanted to thank all the people who maintain, support and
contribute to this great set of programs and especially the qmailtoaster
website and -wiki.

I switched over from qmailrocks (this is, I completely deleted my
qmr-installation and started over from scratch), because on one hand qmr
seems to be a bit outdated, but on the other hand I'm not enough of a
C-programmer to implement all of the necessary patches and do a source
installation.

So at this point I just wanted to tell you, how much I appreciate all of
your work and effort.

--
Rgds
Sven


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: Thank you

[Eric Shubert]

Sven Geschke wrote:

I've just finished a pretty painless qmailtoaster installation on CentOS
5.4 and wanted to thank all the people who maintain, support and
contribute to this great set of programs and especially the qmailtoaster
website and -wiki.

I switched over from qmailrocks (this is, I completely deleted my
qmr-installation and started over from scratch), because on one hand qmr
seems to be a bit outdated, but on the other hand I'm not enough of a
C-programmer to implement all of the necessary patches and do a source
installation.

So at this point I just wanted to tell you, how much I appreciate all of
your work and effort.

--
Rgds
Sven



You're welcome, Sven.
Would you care to update the wiki yourself at 
http://wiki.qmailtoaster.com/index.php/Main_Page#Affirmations with your 
story?

Thanks!

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] help with qtp-back+cron job

[nishant amin]

thanks dave
i will try it .

On 4/13/10, Dave Hallowell d...@acbsco.com wrote:
 nishant amin,
 I think you probably need to supply the full path to the executable file.
 The first attempt should work if you change it to:
 22 00 * * * /usr/sbin/qtp-backup

 Dave



 On 4/13/2010 3:12 AM, nishant amin wrote:
 hi all

 i am trying to do a cronjob such that qtp-backup command is exectuted
 at specific hour of the day.this has proved fruitless.
 below describes what i have done so far

 1:created a cron tab as follows:
 22 00 * * * qtp-backup


 the above did not work.

 2:i created s acript to run the command and linked it to crontab as
 follows

 A:content of the script
   cd ~
   qtp-backup
 saved it as backup.sh and made it executable

 B:the crontab entry for the above
   22 00 * * * /scripts/./backup.sh


 the above did not work as well.


 kindly point out my mistakes ...

 regards
 nishant amin

 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and
 installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com




 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Thank you

[Sven Geschke]

Ilove to, but it seems it won't let me.
I get this error message when i try to save my changes:

Warning: preg_match() [function.preg-match]: Compilation failed: range
out of order in character class at offset 740
in 
/webpages/wiki.qmailtoaster.com/extensions/SpamBlacklist/SpamBlacklist_body.php 
on line 210

--
SMG
On Tue, 2010-04-13 at 09:58 -0700, Eric Shubert wrote:
 Sven Geschke wrote:
  I've just finished a pretty painless qmailtoaster installation on CentOS
  5.4 and wanted to thank all the people who maintain, support and
  contribute to this great set of programs and especially the qmailtoaster
  website and -wiki.
  
  I switched over from qmailrocks (this is, I completely deleted my
  qmr-installation and started over from scratch), because on one hand qmr
  seems to be a bit outdated, but on the other hand I'm not enough of a
  C-programmer to implement all of the necessary patches and do a source
  installation.
  
  So at this point I just wanted to tell you, how much I appreciate all of
  your work and effort.
  
  --
  Rgds
  Sven
  
 
 You're welcome, Sven.
 Would you care to update the wiki yourself at 
 http://wiki.qmailtoaster.com/index.php/Main_Page#Affirmations with your 
 story?
 Thanks!
 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: Thank you

[Eric Shubert]

Did you do the little math problem at the top of the save page?
That's a measure to keep bots from updating the wiki.

Sven Geschke wrote:

Ilove to, but it seems it won't let me.
I get this error message when i try to save my changes:

Warning: preg_match() [function.preg-match]: Compilation failed: range
out of order in character class at offset 740
in 
/webpages/wiki.qmailtoaster.com/extensions/SpamBlacklist/SpamBlacklist_body.php 
on line 210

--
SMG
On Tue, 2010-04-13 at 09:58 -0700, Eric Shubert wrote:

Sven Geschke wrote:

I've just finished a pretty painless qmailtoaster installation on CentOS
5.4 and wanted to thank all the people who maintain, support and
contribute to this great set of programs and especially the qmailtoaster
website and -wiki.

I switched over from qmailrocks (this is, I completely deleted my
qmr-installation and started over from scratch), because on one hand qmr
seems to be a bit outdated, but on the other hand I'm not enough of a
C-programmer to implement all of the necessary patches and do a source
installation.

So at this point I just wanted to tell you, how much I appreciate all of
your work and effort.

--
Rgds
Sven


You're welcome, Sven.
Would you care to update the wiki yourself at 
http://wiki.qmailtoaster.com/index.php/Main_Page#Affirmations with your 
story?

Thanks!




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!



--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[nrivera]

I download the new squirrelmail and clamd packages and the script say
installation without problems, but I have problems when I want to send
messages the outlook give me this error.

Task 'u...@borderless.com.mx - Sending' reported error (0x800CCC6A) :
'Your outgoing (SMTP) e-mail server has reported an internal error. If you
continue to receive this message, contact your server administrator or
Internet service provider (ISP).  The server responded: 451 mail server
temporarily rejected message (#4.3.0)'

I check the logs and the clamd log give this error.

@40004bc4ce2513e0d43c LibClamAV Error: cli_loadinfo: Digital signature
not found
@40004bc4ce2513e1a72c LibClamAV Error: Can't load main.info: Malformed
database
@40004bc4ce2513e21874 LibClamAV Error: cli_tgzload: Can't load main.info
@40004bc4ce2513e2c454 LibClamAV Error: Can't load
/usr/share/clamav/main.cld: Malformed database
@40004bc4ce2513e41c14 ERROR: Malformed database
@40004bc4ce2513e4e734 Closing the main socket.



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[NOEL RIVERA]

I download the new squirrelmail and clamd packages and the script say
installation without problems, but I have problems when I want to send
messages the outlook give me this error.

Task 'u...@borderless.com.mx - Sending' reported error (0x800CCC6A) :
'Your outgoing (SMTP) e-mail server has reported an internal error. If you
continue to receive this message, contact your server administrator or
Internet service provider (ISP).  The server responded: 451 mail server
temporarily rejected message (#4.3.0)'

I check the logs and the clamd log give this error.

@40004bc4ce2513e0d43c LibClamAV Error: cli_loadinfo: Digital signature
not found
@40004bc4ce2513e1a72c LibClamAV Error: Can't load main.info: Malformed
database
@40004bc4ce2513e21874 LibClamAV Error: cli_tgzload: Can't load main.info
@40004bc4ce2513e2c454 LibClamAV Error: Can't load
/usr/share/clamav/main.cld: Malformed database
@40004bc4ce2513e41c14 ERROR: Malformed database
@40004bc4ce2513e4e734 Closing the main socket.

 Any help?
_
Enciende tu hotness con Hotmail
www.hotmailhotness.com.mx

Re: [qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[Catalin Leanca]

It looks like the virus database is corrupted.
Try restarting freshclam daemon:
#service freshclam restart

On 4/13/10 11:14 PM, NOEL RIVERA wrote:

I download the new squirrelmail and clamd packages and the script say
installation without problems, but I have problems when I want to send
messages the outlook give me this error.

Task 'u...@borderless.com.mx  
http://webmail.borderless.com.mx/src/compose.php?send_to=user%40borderless.com.mx
  - Sending' reported error (0x800CCC6A) :
'Your outgoing (SMTP) e-mail server has reported an internal error. If you
continue to receive this message, contact your server administrator or
Internet service provider (ISP).  The server responded: 451 mail server
temporarily rejected message (#4.3.0)'

I check the logs and the clamd log give this error.

@40004bc4ce2513e0d43c LibClamAV Error: cli_loadinfo: Digital signature
not found
@40004bc4ce2513e1a72c LibClamAV Error: Can't load main.info: Malformed
database
@40004bc4ce2513e21874 LibClamAV Error: cli_tgzload: Can't load main.info
@40004bc4ce2513e2c454 LibClamAV Error: Can't load
/usr/share/clamav/main.cld: Malformed database
@40004bc4ce2513e41c14 ERROR: Malformed database
@40004bc4ce2513e4e734 Closing the main socket.

   
  
Any help?
  



¿Perdido entre tantos correos? Enciende tu hotness con Hotmail 
www.hotmailhotness.com.mx

RE: [qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[Noel Rivera (Border Less)]

Hello list, when I delete the files main.cld and main.cdv from
/usr/share/clamav the program works Ok, thanks for your help

 

Saludos.

 

borderless_small

Borderless Consulting Group SA de CV.

Noel Alban Rivera Rivera

Jefe de Redes y Telecomunicaciones

Tel. (915) 633-61-04

Nextel 62*142650*2

P Por favor considera el medio ambiente antes de imprimir este e-mail.

 



--

 

CONFIDENTIALITY NOTICE: This e-mail message including attachments, if any,
is intended only for the person or entity to which it is addressed and may
contain confidential and /or privileged material. Any review, use,
disclosure or distribution of such confidential information without the
written authorization of Borderless Consulting Group is prohibited. If you
are not the intended recipient, please contact the sender by reply e-mail
and destroy all copies of the original message. By receiving this e-mail you
acknowledge that any breach by you and/or your representatives of the above
provisions may entitle Borderless Consulting Group to seek for damages.

 

AVISO DE CONFIDENCIALIDAD: Este correo electrónico, incluyendo en su caso,
los archivos adjuntos al mismo, pueden contener información de carácter
confidencial y/o privilegiada, y se envían a la atención única y
exclusivamente de la persona y/o entidad a quien va dirigido. La copia,
revisión, uso, revelación y/o distribución de dicha información confidencial
sin la autorización por escrito de Borderless Consulting Group está
prohibida. Si usted no es el destinatario a quien se dirige el presente
correo, favor de contactar al remitente respondiendo al presente correo y
eliminar el correo original incluyendo sus archivos, así como cualesquiera
copia del mismo. Mediante la recepción del presente correo usted reconoce y
acepta que en caso de incumplimiento de su parte y/o de sus representantes a
los términos antes mencionados, Borderless Consulting Group tendrá derecho a
los daños y perjuicios que esto le cause.

 

From: NOEL RIVERA [mailto:marvin_n...@hotmail.com] 
Sent: Tuesday, April 13, 2010 2:15 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

 

I download the new squirrelmail and clamd packages and the script say
installation without problems, but I have problems when I want to send
messages the outlook give me this error.
 
Task 'u...@borderless.com.mx
http://webmail.borderless.com.mx/src/compose.php?send_to=user%40borderless.
com.mx  - Sending' reported error (0x800CCC6A) :
'Your outgoing (SMTP) e-mail server has reported an internal error. If you
continue to receive this message, contact your server administrator or
Internet service provider (ISP).  The server responded: 451 mail server
temporarily rejected message (#4.3.0)'
 
I check the logs and the clamd log give this error.
 
@40004bc4ce2513e0d43c LibClamAV Error: cli_loadinfo: Digital signature
not found
@40004bc4ce2513e1a72c LibClamAV Error: Can't load main.info: Malformed
database
@40004bc4ce2513e21874 LibClamAV Error: cli_tgzload: Can't load main.info
@40004bc4ce2513e2c454 LibClamAV Error: Can't load
/usr/share/clamav/main.cld: Malformed database
@40004bc4ce2513e41c14 ERROR: Malformed database
@40004bc4ce2513e4e734 Closing the main socket.
 
 
Any help?
 

 

  _  

¿Perdido entre tantos correos? Enciende tu hotness con Hotmail

image001.jpg

[qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[Eric Shubert]

Jake Vickers wrote:

On 04/12/2010 01:27 PM, Eric Shubert wrote:
I get the same with qtp-ami-up2date. 
http://www.qmailtoaster.com/info/current.txt hasn't been updated to 
reflect the new versions.


Jake, when do you plan on updating the current.txt file?



I had announced that I would remove the old packages on Monday, which I 
did. I build the new current.txt when I move the old files into archive.

Thanks.



Was there a problem building current.txt file? It has:
squirrelmail-toaster-1.4.19-1.3.15.src.rpm
clamav-toaster-0.95.3-1.3.31.src.rpm

The web site shows:
squirrelmail-toaster-1.4.20-1.3.17
clamav-toaster-0.96.0-1.3.35

Why the discrepancy?

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: clamav-toaster and squirrelmail-toaster updated

[Eric Shubert]

Eric Shubert wrote:

Jake Vickers wrote:

On 04/12/2010 01:27 PM, Eric Shubert wrote:
I get the same with qtp-ami-up2date. 
http://www.qmailtoaster.com/info/current.txt hasn't been updated to 
reflect the new versions.


Jake, when do you plan on updating the current.txt file?



I had announced that I would remove the old packages on Monday, which 
I did. I build the new current.txt when I move the old files into 
archive.

Thanks.



Was there a problem building current.txt file? It has:
squirrelmail-toaster-1.4.19-1.3.15.src.rpm
clamav-toaster-0.95.3-1.3.31.src.rpm

The web site shows:
squirrelmail-toaster-1.4.20-1.3.17
clamav-toaster-0.96.0-1.3.35

Why the discrepancy?


Please disregard. My web proxy cache bit me in the butt again. :(

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: spam

[madmac]

Ok Guys n Gals

I  have rebuilt a new toaster on VM, from scratch. Using the 
CentQMT5-1.2.0.iso
I am going to make this a ssl only, secure qmail server, if it kills me. As 
my current server is comprimised as previously posted.


Tried maNy sites to get a  self signed  ssl cert installed for testing.
even here on the wiki: 
http://wiki.qmailtoaster.com/index.php?title=Certificateprintable=yes

In there is a line that says you can self sign,
 a.. NOTE - For reference, here is the command to sign the request for a 
self signed certificate:
 1.. openssl x509 -req -days 365 -in servercert.csr -signkey 
servercert.key -out servercert.crt
Can the poster or anyone else confirm that they have managed to get it to 
work ,


Or can anyone else help me get this installation secured.
I have added all the usual , clamav, spamassasin and spamdyke, also have a 
huge blacklist of IP`s and Spammers ( from another source )
I have disabled root to ssh, and changed the ssh port also, modified the 
firewall to suite.


When all this is done I will also add fail2ban, as sugested by Jake, and 
any hints on installing and configuring that would also be helpfull.


Notes
Previously tried but failed to get https://ipaddress/webmail to work.
even added what was sugested:

add these lines to your /etc/http/squirrelmail.conf file:

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

restarted apache also.

When I have done all the testing to confirm security, I will make it ( The 
VM ) avaliable.


Thanks all:
madmac


- Original Message - 
From: madmac sysad...@tricubemedia.com

To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, April 09, 2010 2:28 PM
Subject: Re: [qmailtoaster] Re: spam



Thanks Eric and Jake,

Will test fail2ban also on a VM


- Original Message - 
From: Eric Shubert e...@shubes.net

To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, April 09, 2010 10:09 AM
Subject: [qmailtoaster] Re: spam


You should secure squirrelmail so that it only runs with https, so that 
passwords are not sent in the clear. To do so, configure apache with a 
valid cert (see http://wiki.qmailtoaster.com/index.php/Certificate), then 
add these lines to your /etc/http/squirrelmail.conf file:

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

Then
# service httpd restart

madmac wrote:

Is there then a way to secure squirrelmail, or any other webmail prog.
This is a default install of qmail with the  ISO.
Not having it is not an option, as most of the clients can only use 
webmail as they are on the road daily.

 Thanks
 - Original Message -
*From:* Jake Vickers mailto:j...@qmailtoaster.com
*To:* qmailtoaster-list@qmailtoaster.com
mailto:qmailtoaster-list@qmailtoaster.com
*Sent:* Thursday, April 08, 2010 5:53 PM
*Subject:* Re: [qmailtoaster] spam

On 04/08/2010 04:21 PM, madmac wrote:

Well anyone that can guess my passwords must be amazing.
Let alone get through the elaborate firewall system.
ssh port is  non standard 
 But I agree, this box is compromised  some how 
 File count now at 9580 and counting




Are all of the files that are infected from mailboxes?
It does sound like your machine has been compromised. If you leave
Squirrelmail open (ie: no protection against password attacks) or
have other webapps running then this is the most likely place for
them to get in. Once they have an account's login credentials, they
can upload things to themselves and run them (don't ask me how - I
never looked at how they did it - I just fixed it) and then brute
force passwords from the local machine to obtain other access or
whatever they are looking to do.
I had one a year or so back where a guy installed phpbb - when he
came in the next day someone had emailed him his root password. He
reinstalled and put phpbb back on and had his machine compromised in
about 2 hours after that.



--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.
To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with 

RE: [qmailtoaster] Re: spam

[Todd Beckstead]

I struggled with getting the info in the wiki to work for me too. Here's
a link to something that finally worked for me on my CentOS 5.4. I used
the info in Section 2.

http://wiki.centos.org/HowTos/Https

Good luck!
Todd

-Original Message-
From: madmac [mailto:sysad...@tricubemedia.com] 
Sent: Tuesday, April 13, 2010 4:01 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: spam

Ok Guys n Gals

I  have rebuilt a new toaster on VM, from scratch. Using the 
CentQMT5-1.2.0.iso
I am going to make this a ssl only, secure qmail server, if it kills me.
As 
my current server is comprimised as previously posted.

Tried maNy sites to get a  self signed  ssl cert installed for
testing.
even here on the wiki: 
http://wiki.qmailtoaster.com/index.php?title=Certificateprintable=yes
In there is a line that says you can self sign,
  a.. NOTE - For reference, here is the command to sign the request for
a 
self signed certificate:
  1.. openssl x509 -req -days 365 -in servercert.csr -signkey 
servercert.key -out servercert.crt
Can the poster or anyone else confirm that they have managed to get it
to 
work ,

Or can anyone else help me get this installation secured.
I have added all the usual , clamav, spamassasin and spamdyke, also have
a 
huge blacklist of IP`s and Spammers ( from another source )
I have disabled root to ssh, and changed the ssh port also, modified the

firewall to suite.

When all this is done I will also add fail2ban, as sugested by Jake,
and 
any hints on installing and configuring that would also be helpfull.

Notes
Previously tried but failed to get https://ipaddress/webmail to work.
even added what was sugested:
 add these lines to your /etc/http/squirrelmail.conf file:
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
 RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

restarted apache also.

When I have done all the testing to confirm security, I will make it (
The 
VM ) avaliable.

Thanks all:
madmac


- Original Message - 
From: madmac sysad...@tricubemedia.com
To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, April 09, 2010 2:28 PM
Subject: Re: [qmailtoaster] Re: spam


 Thanks Eric and Jake,

 Will test fail2ban also on a VM


 - Original Message - 
 From: Eric Shubert e...@shubes.net
 To: qmailtoaster-list@qmailtoaster.com
 Sent: Friday, April 09, 2010 10:09 AM
 Subject: [qmailtoaster] Re: spam


 You should secure squirrelmail so that it only runs with https, so
that 
 passwords are not sent in the clear. To do so, configure apache with
a 
 valid cert (see http://wiki.qmailtoaster.com/index.php/Certificate),
then 
 add these lines to your /etc/http/squirrelmail.conf file:
 RewriteEngine on
 RewriteCond %{SERVER_PORT} !^443$
 RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

 Then
 # service httpd restart

 madmac wrote:
 Is there then a way to secure squirrelmail, or any other webmail
prog.
 This is a default install of qmail with the  ISO.
 Not having it is not an option, as most of the clients can only use 
 webmail as they are on the road daily.
  Thanks
  - Original Message -
 *From:* Jake Vickers mailto:j...@qmailtoaster.com
 *To:* qmailtoaster-list@qmailtoaster.com
 mailto:qmailtoaster-list@qmailtoaster.com
 *Sent:* Thursday, April 08, 2010 5:53 PM
 *Subject:* Re: [qmailtoaster] spam

 On 04/08/2010 04:21 PM, madmac wrote:
 Well anyone that can guess my passwords must be amazing.
 Let alone get through the elaborate firewall system.
 ssh port is  non standard 
  But I agree, this box is compromised  some how 
  File count now at 9580 and counting



 Are all of the files that are infected from mailboxes?
 It does sound like your machine has been compromised. If you
leave
 Squirrelmail open (ie: no protection against password attacks)
or
 have other webapps running then this is the most likely place
for
 them to get in. Once they have an account's login credentials,
they
 can upload things to themselves and run them (don't ask me how -
I
 never looked at how they did it - I just fixed it) and then
brute
 force passwords from the local machine to obtain other access or
 whatever they are looking to do.
 I had one a year or so back where a guy installed phpbb - when
he
 came in the next day someone had emailed him his root password.
He
 reinstalled and put phpbb back on and had his machine
compromised in
 about 2 hours after that.


 -- 
 -Eric 'shubes'




-
 Qmailtoaster is sponsored by Vickers Consulting Group 
 (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and 
 installations.
  If you need professional help with your setup, contact them
today!


-
 Please visit qmailtoaster.com for the latest news, updates, 

RE: [qmailtoaster] Re: spam

[Todd Beckstead]

One other tip. My ISO install had openssl installed, but not mod_ssl. I had
to add that. See Step 1.
Todd

-Original Message-
From: Todd Beckstead [mailto:to...@csdcpa.com] 
Sent: Tuesday, April 13, 2010 4:32 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: spam

I struggled with getting the info in the wiki to work for me too. Here's
a link to something that finally worked for me on my CentOS 5.4. I used
the info in Section 2.

http://wiki.centos.org/HowTos/Https

Good luck!
Todd

-Original Message-
From: madmac [mailto:sysad...@tricubemedia.com] 
Sent: Tuesday, April 13, 2010 4:01 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: spam

Ok Guys n Gals

I  have rebuilt a new toaster on VM, from scratch. Using the 
CentQMT5-1.2.0.iso
I am going to make this a ssl only, secure qmail server, if it kills me.
As 
my current server is comprimised as previously posted.

Tried maNy sites to get a  self signed  ssl cert installed for
testing.
even here on the wiki: 
http://wiki.qmailtoaster.com/index.php?title=Certificateprintable=yes
In there is a line that says you can self sign,
  a.. NOTE - For reference, here is the command to sign the request for
a 
self signed certificate:
  1.. openssl x509 -req -days 365 -in servercert.csr -signkey 
servercert.key -out servercert.crt
Can the poster or anyone else confirm that they have managed to get it
to 
work ,

Or can anyone else help me get this installation secured.
I have added all the usual , clamav, spamassasin and spamdyke, also have
a 
huge blacklist of IP`s and Spammers ( from another source )
I have disabled root to ssh, and changed the ssh port also, modified the

firewall to suite.

When all this is done I will also add fail2ban, as sugested by Jake,
and 
any hints on installing and configuring that would also be helpfull.

Notes
Previously tried but failed to get https://ipaddress/webmail to work.
even added what was sugested:
 add these lines to your /etc/http/squirrelmail.conf file:
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
 RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

restarted apache also.

When I have done all the testing to confirm security, I will make it (
The 
VM ) avaliable.

Thanks all:
madmac


- Original Message - 
From: madmac sysad...@tricubemedia.com
To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, April 09, 2010 2:28 PM
Subject: Re: [qmailtoaster] Re: spam


 Thanks Eric and Jake,

 Will test fail2ban also on a VM


 - Original Message - 
 From: Eric Shubert e...@shubes.net
 To: qmailtoaster-list@qmailtoaster.com
 Sent: Friday, April 09, 2010 10:09 AM
 Subject: [qmailtoaster] Re: spam


 You should secure squirrelmail so that it only runs with https, so
that 
 passwords are not sent in the clear. To do so, configure apache with
a 
 valid cert (see http://wiki.qmailtoaster.com/index.php/Certificate),
then 
 add these lines to your /etc/http/squirrelmail.conf file:
 RewriteEngine on
 RewriteCond %{SERVER_PORT} !^443$
 RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

 Then
 # service httpd restart

 madmac wrote:
 Is there then a way to secure squirrelmail, or any other webmail
prog.
 This is a default install of qmail with the  ISO.
 Not having it is not an option, as most of the clients can only use 
 webmail as they are on the road daily.
  Thanks
  - Original Message -
 *From:* Jake Vickers mailto:j...@qmailtoaster.com
 *To:* qmailtoaster-list@qmailtoaster.com
 mailto:qmailtoaster-list@qmailtoaster.com
 *Sent:* Thursday, April 08, 2010 5:53 PM
 *Subject:* Re: [qmailtoaster] spam

 On 04/08/2010 04:21 PM, madmac wrote:
 Well anyone that can guess my passwords must be amazing.
 Let alone get through the elaborate firewall system.
 ssh port is  non standard 
  But I agree, this box is compromised  some how 
  File count now at 9580 and counting



 Are all of the files that are infected from mailboxes?
 It does sound like your machine has been compromised. If you
leave
 Squirrelmail open (ie: no protection against password attacks)
or
 have other webapps running then this is the most likely place
for
 them to get in. Once they have an account's login credentials,
they
 can upload things to themselves and run them (don't ask me how -
I
 never looked at how they did it - I just fixed it) and then
brute
 force passwords from the local machine to obtain other access or
 whatever they are looking to do.
 I had one a year or so back where a guy installed phpbb - when
he
 came in the next day someone had emailed him his root password.
He
 reinstalled and put phpbb back on and had his machine
compromised in
 about 2 hours after that.


 -- 
 -Eric 'shubes'




-
 Qmailtoaster is sponsored by Vickers Consulting Group 
 (www.vickersconsulting.com)

[qmailtoaster] Re: spam

[Eric Shubert]

If the info in the wiki isn't clear or doesn't work, how about we do 
something to fix it up? Which page? What's unclear or doesn't work?


Feel free to jump right in and edit it. It only gets better if/when we 
take the time to fix it.


Todd Beckstead wrote:

I struggled with getting the info in the wiki to work for me too. Here's
a link to something that finally worked for me on my CentOS 5.4. I used
the info in Section 2.

http://wiki.centos.org/HowTos/Https

Good luck!
Todd

-Original Message-
From: madmac [mailto:sysad...@tricubemedia.com] 
Sent: Tuesday, April 13, 2010 4:01 PM

To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: spam

Ok Guys n Gals

I  have rebuilt a new toaster on VM, from scratch. Using the 
CentQMT5-1.2.0.iso

I am going to make this a ssl only, secure qmail server, if it kills me.
As 
my current server is comprimised as previously posted.


Tried maNy sites to get a  self signed  ssl cert installed for
testing.
even here on the wiki: 
http://wiki.qmailtoaster.com/index.php?title=Certificateprintable=yes

In there is a line that says you can self sign,
  a.. NOTE - For reference, here is the command to sign the request for
a 
self signed certificate:
  1.. openssl x509 -req -days 365 -in servercert.csr -signkey 
servercert.key -out servercert.crt

Can the poster or anyone else confirm that they have managed to get it
to 
work ,


Or can anyone else help me get this installation secured.
I have added all the usual , clamav, spamassasin and spamdyke, also have
a 
huge blacklist of IP`s and Spammers ( from another source )

I have disabled root to ssh, and changed the ssh port also, modified the

firewall to suite.

When all this is done I will also add fail2ban, as sugested by Jake,
and 
any hints on installing and configuring that would also be helpfull.


Notes
Previously tried but failed to get https://ipaddress/webmail to work.
even added what was sugested:

add these lines to your /etc/http/squirrelmail.conf file:

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
 RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

restarted apache also.

When I have done all the testing to confirm security, I will make it (
The 
VM ) avaliable.


Thanks all:
madmac


- Original Message - 
From: madmac sysad...@tricubemedia.com

To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, April 09, 2010 2:28 PM
Subject: Re: [qmailtoaster] Re: spam



Thanks Eric and Jake,

Will test fail2ban also on a VM


- Original Message - 
From: Eric Shubert e...@shubes.net

To: qmailtoaster-list@qmailtoaster.com
Sent: Friday, April 09, 2010 10:09 AM
Subject: [qmailtoaster] Re: spam



You should secure squirrelmail so that it only runs with https, so
that 

passwords are not sent in the clear. To do so, configure apache with
a 

valid cert (see http://wiki.qmailtoaster.com/index.php/Certificate),
then 

add these lines to your /etc/http/squirrelmail.conf file:
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R]

Then
# service httpd restart

madmac wrote:

Is there then a way to secure squirrelmail, or any other webmail

prog.

This is a default install of qmail with the  ISO.
Not having it is not an option, as most of the clients can only use 
webmail as they are on the road daily.

 Thanks
 - Original Message -
*From:* Jake Vickers mailto:j...@qmailtoaster.com
*To:* qmailtoaster-list@qmailtoaster.com
mailto:qmailtoaster-list@qmailtoaster.com
*Sent:* Thursday, April 08, 2010 5:53 PM
*Subject:* Re: [qmailtoaster] spam

On 04/08/2010 04:21 PM, madmac wrote:

Well anyone that can guess my passwords must be amazing.
Let alone get through the elaborate firewall system.
ssh port is  non standard 
 But I agree, this box is compromised  some how 
 File count now at 9580 and counting



Are all of the files that are infected from mailboxes?
It does sound like your machine has been compromised. If you

leave

Squirrelmail open (ie: no protection against password attacks)

or

have other webapps running then this is the most likely place

for

them to get in. Once they have an account's login credentials,

they

can upload things to themselves and run them (don't ask me how -

I

never looked at how they did it - I just fixed it) and then

brute

force passwords from the local machine to obtain other access or
whatever they are looking to do.
I had one a year or so back where a guy installed phpbb - when

he

came in the next day someone had emailed him his root password.

He

reinstalled and put phpbb back on and had his machine

compromised in

about 2 hours after that.


--
-Eric 'shubes'





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster 

[qmailtoaster] clamav-toaster-0.96.0-1.3.35 error

[Eric Shubert]

I'm guessing that nobody has seen this error yet:
display
Building clamav-toaster-0.96.0-1.3.35 ...
qtp-build-rpms - rpmbuild failed for clamav-toaster-0.96.0-1.3.35
qtp-build-rpms - here are the last 10 messages from the log:
+ '[' 0 -ne 0 ']'
+ cd clamav-0.96.0
++ /usr/bin/id -u
+ '[' 0 = 0 ']'
+ /bin/chown -Rhf root .
error: Bad exit status from /var/tmp/rpm-tmp.29349 (%prep)


RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.29349 (%prep)
end of log messages

qtp-build-rpms - see 
/mnt/qtp-sandbox/usr/src/qtp-upgrade/log/build-recent.log for more details


Build failed, Exiting.
/display

When I try to recreate the error manually, it works fine, with 0 exit 
status from the chown command. Quite perplexing.


This is on a VMware guest.

Has anyone used qtp-newmodel successfully with this clamav package yet?
Just trying to narrow things down.

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: clamav-toaster-0.96.0-1.3.35 error

[Eric Shubert]

Eric Shubert wrote:

I'm guessing that nobody has seen this error yet:
display
Building clamav-toaster-0.96.0-1.3.35 ...
qtp-build-rpms - rpmbuild failed for clamav-toaster-0.96.0-1.3.35
qtp-build-rpms - here are the last 10 messages from the log:
+ '[' 0 -ne 0 ']'
+ cd clamav-0.96.0
++ /usr/bin/id -u
+ '[' 0 = 0 ']'
+ /bin/chown -Rhf root .
error: Bad exit status from /var/tmp/rpm-tmp.29349 (%prep)


RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.29349 (%prep)
end of log messages

qtp-build-rpms - see 
/mnt/qtp-sandbox/usr/src/qtp-upgrade/log/build-recent.log for more details


Build failed, Exiting.
/display

When I try to recreate the error manually, it works fine, with 0 exit 
status from the chown command. Quite perplexing.


This is on a VMware guest.

Has anyone used qtp-newmodel successfully with this clamav package yet?
Just trying to narrow things down.



Hmmm. That test VM must be hosed up somehow. It has gotten past that 
point on a live QMT that's very similar.


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: clamav-toaster-0.96.0-1.3.35 error

[Eric Shubert]

Eric Shubert wrote:

Eric Shubert wrote:

I'm guessing that nobody has seen this error yet:
display
Building clamav-toaster-0.96.0-1.3.35 ...
qtp-build-rpms - rpmbuild failed for clamav-toaster-0.96.0-1.3.35
qtp-build-rpms - here are the last 10 messages from the log:
+ '[' 0 -ne 0 ']'
+ cd clamav-0.96.0
++ /usr/bin/id -u
+ '[' 0 = 0 ']'
+ /bin/chown -Rhf root .
error: Bad exit status from /var/tmp/rpm-tmp.29349 (%prep)


RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.29349 (%prep)
end of log messages

qtp-build-rpms - see 
/mnt/qtp-sandbox/usr/src/qtp-upgrade/log/build-recent.log for more 
details


Build failed, Exiting.
/display

When I try to recreate the error manually, it works fine, with 0 exit 
status from the chown command. Quite perplexing.


This is on a VMware guest.

Has anyone used qtp-newmodel successfully with this clamav package yet?
Just trying to narrow things down.



Hmmm. That test VM must be hosed up somehow. It has gotten past that 
point on a live QMT that's very similar.




For posterity, I'll sadly say that it ran out of disk space. :(
It was a test machine, and there were loads of backups on it from 
running qtp-newmodel repeatedly. Doh!


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] domainkeys mulitple domain issue

[Amit Dalia]

Hi Everyone,

Any help on how to setup DKIM for multiple domains on the same QMT
server? I'm getting below error.

Regards,

Amit

At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote:

Hi Everyone,

Even I was going to post this today. I had got around 15 domains on
the same toaster. I had configure DKIM as per Jake's Video on How to
setup DKIM, but it is signing only 1 domain perfectly but other
domains are getting bad signature.

Authentication-Results: mx.google.com; spf=neutral (google.com:
180.92.170.125 is neither permitted nor denied by domain of
i...@sem-pune.in [1]) smtp.mail= [2] [2]i...@sem-pune.in [1];
dkim=neutral (no key) header...@webapplication.co.in [3]

My server hostname is mail.webapplication.co.in.

How do I replace header.i value for respective domain.

Thanks and regards,

Amit

At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote:

I have the latest toaster installed, Everything works beautifully.
However i seem to be getting a weird problem with the domainkey. I
have several domains on the one toaster, and i can get the last one
working perfectly, however the rest come back with bad signature. And
it’s always the latest one that seems to work. Is there something i
am doing wrong.  Please can you help

 



Links:
--
[1] mailto:a...@vanaz.com
[2] mailto:smtp.mail=a...@vanaz.com
[3] MAILTO:header...@mailserver

[qmailtoaster] Message getting bounce from my server

[Amit Dalia]

Hi Everyone,

My all mails are getting bounced giving the following error message:

Hi. This is the qmail-send program at vanaz.com.
I'm afraid I wasn't able to deliver your message to the following
addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

:
Could not find ParserDetails.ini in
/usr/lib/perl5/vendor_perl/5.8.8/XML/SAX
ZSorry, I wasn't able to establish an SMTP connection. (#4.4.1)

I had just run qtp-newmodel in morning and nothing new is done on
server.

Regards,

Amit

Re: [qmailtoaster] Message getting bounce from my server

[Amit Dalia]

Re-installing perl-XML-SAX solved the problem.

Thanks,

Amit

At Wednesday, 14-04-2010 on 10:57 Amit Dalia wrote:

Hi Everyone,

My all mails are getting bounced giving the following error message:

Hi. This is the qmail-send program at vanaz.com.
I'm afraid I wasn't able to deliver your message to the following
addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

:
Could not find ParserDetails.ini in
/usr/lib/perl5/vendor_perl/5.8.8/XML/SAX
ZSorry, I wasn't able to establish an SMTP connection. (#4.4.1)

I had just run qtp-newmodel in morning and nothing new is done on
server.

Regards,

Amit