Re: [qmailtoaster] migration to qmailtoaster 64bit version

2014-10-30 Thread ChandranManikandan
Hi Rajesh,
Most probably this issue raised from Dovecot authentication problem. Please
check dovecot config in SSL line and password authentication line.

On Thu, Oct 30, 2014 at 1:54 PM, Sebastian Grewe sebast...@grewe.ca wrote:

 Hey Rajesh,

 I really can only help on one: 1) Port 110 is disabled by default since
 anyone in between could read the password. I recommend not to enable it -
 though with the SSLv3 issues now it may not even matter ;-)

 As for Webmail I am using Roundcube (sleeker design and specifically only
 a web mailer). It had a plugin to change the password but I'd be lying if I
 knew it still worked after a lot of updates I did.

 Cheers,
 - Sebastian

 Sent from my iPhone

  On 29 Oct 2014, at 19:29, Rajesh M. 24x7ser...@24x7server.net wrote:
 
  hi Eric S
 
  we have started using the 64 bit qt packages on centos 6.5 64 bit in
 full production mode and it is working well.
 
  i am facing the following issues
 
  1) dovecot is giving problems for mac / ipad machines. pop3 with 110
 does not work and keeps throwing errors. i have to enable ssl and use port
 995 and then pop works
  is there any solution for the same ie use 110 port ?
 
  2) while using squirrel mail if login fails instead of saying invalid
 userid or password i get an error
  ERROR: Connection dropped by IMAP server.
  Query: LOGOUT
 
  the same squirrelmail package displays correct message on my centos 5
 server
 
  how to change this message to invalid userid or password
 
  i tried to login to dovecot using command line (with correct email id
 and wrong password ) and got message : authentication failed.
 
  3) i still could no get how to change password from the squirrelmail
 interface.
  i tried to use change sql password plugin
  http://squirrelmail.org/plugin_view.php?id=25
  but still could not get it working
  if anybody is already using this please guide me
  (i do not wish to use qmailadmin within squirrelmail)
 
  thanks very much
 
  rajesh
 
 
 
 
  -
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-- 


*Thanks  Best Regards,Manikandan.C*


[qmailtoaster] QMT6 BlackBerry

2014-10-30 Thread Nikolay Mitev
Hi Team,

New platform QMT6 maintained blackberry without compiling additional.

Best regards,
Nikolay


[qmailtoaster] shellshock and qmail

2014-10-30 Thread Quinn Comendant
It hasn't been mentioned on this list yet so I thought I would bring it up: 
qmail exposes environment variables in a way that a vulnerable bash is 
susceptible to CVE-2014-6271  (aka shellshock).

If you have a patched bash, don't worry. If you haven't patched for this, do. 
This post includes a full explanation plus proof of exploit:

http://www.gossamer-threads.com/lists/qmail/users/138578

Quinn

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



[qmailtoaster] qmailadmin/password complexity for QMT6

2014-10-30 Thread Nikolay Mitev
Hello People,

Someone compiled qmailadmin-1.2.16-0.el6.x86_64
for QMT6 to check passwords.
I employed the following this howto (
https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg35569.html)
but after compilation would not result :(
I need to check passwords entered in qmailadmin for QMT6/CentOS65_x86_64.

Best regards,
Nikolay


[qmailtoaster] Re: question concerning chkuser

2014-10-30 Thread Eric Shubert
I concur with the 3rd option. That is probably how the next qmail 
release will do things, with an entirely separate configuration for 
submission.


I'd like to make submissions use a separate queue as well, but that's 
not likely to happen.


--
-Eric 'shubes'


On 10/29/2014 01:33 PM, Tonix - Antonio Nati wrote:

It is a known bug (or feature? :-) ).
Counters are not reset during same session. Probably all messages are
sent in same session, that's to say client open 200 smtp session within
same connection.

3 solutions:

  * raise the limit
  * tell the customer to force single message sessions
  * if the user is authenticated, disable chkuser for authenticated
users (I stronly suggest this option).

Regards,

Tonino


Il 29/10/2014 21:14, Cecil Yother ha scritto:

Have you tried increaaing the limit to 200?

Rajesh M. wrote:

hi

i have a problem with one of my clients

the client composes multiple emails ie over 200 separate emails in his outbox 
and then sends them together.
each mail is addressed to one single recepient email id only.

in chkuser i had set the limit to : CHKUSER_RCPTLIMIT to 50
which i assumed that one single email may have upto 50 recepients

however while sending these 200 emails together my client gets chkuser error 
that :

The following recipient(s) cannot be reached:
'a...@b.com' on 14/10/2014 2:46 AM
550 5.7.1 sorry, you are violating our security policies (chkuser)

i wanted to know why this error comes since each email contains one single 
recepient only

rajesh




-
To unsubscribe, e-mail:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:qmailtoaster-list-h...@qmailtoaster.com


--



--

 Inter@zioniInterazioni di Antonio Nati
http://www.interazioni.it   to...@interazioni.it







-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



[qmailtoaster] Re: shellshock and qmail

2014-10-30 Thread Eric Shubert

On 10/30/2014 08:35 AM, Quinn Comendant wrote:

It hasn't been mentioned on this list yet so I thought I would bring it up: qmail exposes 
environment variables in a way that a vulnerable bash is susceptible to CVE-2014-6271  
(aka shellshock).

If you have a patched bash, don't worry. If you haven't patched for this, do. 
This post includes a full explanation plus proof of exploit:

http://www.gossamer-threads.com/lists/qmail/users/138578

Quinn

-


Not surprised that you missed it Quinn, but there was a post here on 
9/25 about it. ;) Pretty serious vulnerability, but easily remedied.


--
-Eric 'shubes'


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



[qmailtoaster] Re: qmailadmin/password complexity for QMT6

2014-10-30 Thread Eric Shubert

On 10/30/2014 02:08 PM, Nikolay Mitev wrote:

Hello People,

Someone compiled qmailadmin-1.2.16-0.el6.x86_64
for QMT6 to check passwords.
I employed the following this howto
(https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg35569.html)
but after compilation would not result :(
I need to check passwords entered in qmailadmin for QMT6/CentOS65_x86_64.

Best regards,
Nikolay




I haven't tried to get it working. I like the idea though and would 
consider including it in the stock QMT. It would need to be in the form 
of a patch though that could easily be omitted in case someone needed to 
build without it. Anyone care to create a patch file for this?


What's not working with it? Perhaps I can see what's wrong if I know the 
symptoms.


--
-Eric 'shubes'


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com