RE: [qmailtoaster] Re: Is it possible with Qmail

[Anil Aliyan]

Dear Eric,

Yes these requirements are made by the customer. I know exchange server has
all these features but just wanted to check if other mail servers like Qmail
etc. can provide all these features or not as Exchange Server will be a
costly affair.

Regards,

Anil Aliyan


-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Thursday, February 03, 2011 7:24 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Is it possible with Qmail

On 02/03/2011 06:02 AM, Anil Aliyan wrote:
> Dear All ,
>
> I have a prospect customer who wish to host their mailing server with 
> us and wish to the following capabilities in the provided mailing
solution.
> Can we have all these mentioned below in Qmail or any add-on for qmail.
>
> 1.Every incoming & outgoing messages must have unique number generated 
> at server level.
>
> 2.Every incoming & outgoing message track/ status should be maintained 
> and administrator can monitored the overall log.
>
> 3.Admin can maintain user profile and grouping.
>
> 4.Admin can review overall / user wise activities.
>
> Regards,
>
> Anil Aliyan
>

Were these "requirements" written by you or your prospective customer?

--
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Is it possible with Qmail

[Anil Aliyan]

Dear All ,

 

I have a prospect customer who wish to host their mailing server with us and
wish to the following capabilities in the provided mailing solution. Can we
have all these mentioned below in Qmail or any add-on for qmail.

 

1.   Every incoming & outgoing messages must have unique number
generated at server level.

2.   Every incoming & outgoing message track/ status  should be
maintained and administrator can monitored the overall log.

3.   Admin can maintain user profile and grouping.

4.   Admin can review overall / user wise activities.

 

Regards,

 

Anil Aliyan

 

RE: [qmailtoaster] scanning question

[Anil Aliyan]

HI,

I don't understand on what basis you are saying that its not working? What
is it in the header you have posted that made you believe so?

Regards,

Anil Aliyan

-Original Message-
From: Randy Katz [mailto:rk...@simplicityhosting.com] 
Sent: 06 January 2011 13:17
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] scanning question

Hi,

I have email coming into a user, in the header it looks like this:

Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 -
Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s
  scanners: attach: 1.4.0 clamav: 0.96.5
/m:51/d:9697 spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE
 autolearn=no version=3.2.5

But in /var/qmail/control/simcontrol the entry for the email address is:

k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach
=.mp3:.src:.bat:.pif

So it seems it is not working correctly. How do I get simscan to be
authoritative for spam scanning, overrides and what gets through, and how do
I verify that this is working?

Thank you in advance,
Randy Katz


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Re: Strange Behavior of Domainkey

[Anil Aliyan]

I agree. SPF has nothing to do with signing of the mail by Domainkeys or
DKIM.

If need any help in setting up DKIM please let me know. I have 5 servers and
all are configured with DKIM and working without any issue.


Regards,

Anil Aliyan


-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: 28 December 2010 23:24
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Strange Behavior of Domainkey

The stock qmail-dk is just plain broken. It sometimes works, but it also
fails to sign properly in some (unpredictable AFAICT) circumstances. I
recommmend using DKIM if you really need to sign messages with a key.
--
-Eric 'shubes'

On 12/28/2010 10:34 AM, ya...@ardmail.com wrote:
> SPF is configured and not causing any problem in both cases.
> I was contemplating the possibility that it could be some difference 
> in the config line for localhost vs anything else, but i made them 
> identical as well. and it doesn't help :(
>
>
127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private",R
BLSMTPD="",NOP0FCHECK="1"
>
192.168.1.60:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/pr
ivate",RBLSMTPD="",NOP0FCHECK="1"
>
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
RCPTLIMIT="10",DKSIGN="/var/qmail/control/domainkeys/%/private"
>
>
>
>
>> On 12/28/2010 02:36 AM, Anil Aliyan wrote:
>>> Is your tcp.smtp configuration for localhost or mailserver and you 
>>> client has the same configuration?
>>
>> This is on the right track. The 'stock' configuration for 
>> squirrelmail presently uses an open relay configuration for 
>> localhost, with no authentication (this will hopefully change in v2). 
>> For the sake of consistency (and a little better security), I change 
>> my SM config to submit via port 587 and authenticate, and remove the 
>> 127.: line from tcp.smtp. See 
>> http://wiki.qmailtoaster.com/index.php/Fetchmail for such SM
configuration.
>>
>> I expect that this will not fix your problem, and will cause the 
>> problem to exist with SM as well as Outlook. There's something to be 
>> said for consistency. ;)
>>
>> How have you implemented DK? The 'stock' configuration is a bit flakey.
>> I think that there is a DKIM implementation that works well, although 
>> I haven't used it personally yet. I would look into DKIM (as opposed 
>> to using DK) if you haven't already.
>>
>>> Have you configured SPF records for your clients network in your DNS 
>>> records?
>>
>> Shouldn't need this, as SPF has to do with the server which sends the 
>> message, not client (origin) addresses.
>>
>>> Regards,
>>>
>>> Anil Aliyan
>>
>> Thanks for your input, Anil. I'll let you help Yuri on this further.
>>
>>> -Original Message-
>>> From: ya...@ardmail.com [mailto:ya...@ardmail.com]
>>> Sent: 28 December 2010 14:36
>>> To: qmailtoaster-list@qmailtoaster.com
>>> Subject: [qmailtoaster] Strange Behavior of Domainkey
>>>
>>>
>>> Hello,
>>>
>>> I noticed very strange behavior of domainkey with yahoo :( if i am 
>>> sending the mail from squirrelmail everything works and yahoo 
>>> passing the signature.
>>> if i am sending the same mail from outlook client yahoo says the 
>>> signature is bad.
>>>
>>> is this a problem of my configuration?
>>> Any help will be appreciated.
>>>
>>> Thanks,
>>>
>>> ~yuri
>>>
>>>
>>>
>>> 
>>> 
>>> -
>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>> (www.vickersconsulting.com)
>>>   Vickers Consulting Group offers Qmailtoaster support and 
>>> installations.
>>> If you need professional help with your setup, contact them 
>>> today!
>>> 
>>> 
>>> -
>>>Please visit qmailtoaster.com for the latest news, updates, 
>>> and packages.
>>>
>>> To unsubscribe, e-mail:
>>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>For additional commands, e-mail:
>>> qmailtoaster-list-h...@qmailtoaster.com
>>>
>>>
>>>
>>>
>>> --

RE: [qmailtoaster] Strange Behavior of Domainkey

[Anil Aliyan]

Is your tcp.smtp configuration for localhost or mailserver and you client
has the same configuration?

Have you configured SPF records for your clients network in your DNS
records?

Regards,

Anil Aliyan

-Original Message-
From: ya...@ardmail.com [mailto:ya...@ardmail.com] 
Sent: 28 December 2010 14:36
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Strange Behavior of Domainkey


Hello,

I noticed very strange behavior of domainkey with yahoo :( if i am sending
the mail from squirrelmail everything works and yahoo passing the signature.
if i am sending the same mail from outlook client yahoo says the signature
is bad.

is this a problem of my configuration?
Any help will be appreciated.

Thanks,

~yuri




-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] smtp greeting banner frustration

[Anil Aliyan]

May be you can get some help from the link given below:

 

http://www.gossamer-threads.com/lists/qmail/users/129252

 

 

Regards,

 

Anil Aliyan

 

From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] 
Sent: 28 October 2010 17:14
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] smtp greeting banner frustration

 

Thanks for your reply Anil,

 

I was afraid that you might say that. Doesn't that mean that I need complete
installations of toaster?

I was hoping that someone had patched the daemon L

 

Thanks again,

 

Fin

 

PS: Just in case... any Uber-Geeks out there with alternate suggestions?

 

From: Anil Aliyan [mailto:acali...@gnvfc.net] 
Sent: 28 October 2010 12:34
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] smtp greeting banner frustration

 

This happens because you smtp service is listening on all ip addresses. If
you want to send separate greeting message individual domains you'll have to
configure multiples instances of smtp services for all the domains listening
to the specific ip address bindings on your server. I am not an expert but
this my own understanding, I could be wrong. 

 

Regards,

 

Anil Aliyan

 

 

From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] 
Sent: 28 October 2010 16:02
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] smtp greeting banner frustration

 

Hi Everyone,

 

I was wondering if any list member would be able to help.

I have a number of domains, on separate IP addresses but whenever a server
connects to the server it receives the same SMTP greeting:

 

220 cpa2.localdomain - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP

 

Whereas the hostname should only be the one which reverse resolves in DNS
i.e. mail.domain.com

 

Does anyone know how I would go about enabling this compliance with RFC821
4.3 and RFC2821 4.3.1

 

Any help will be gratefully received,

 

Fin

 

RE: [qmailtoaster] smtp greeting banner frustration

[Anil Aliyan]

This happens because you smtp service is listening on all ip addresses. If
you want to send separate greeting message individual domains you'll have to
configure multiples instances of smtp services for all the domains listening
to the specific ip address bindings on your server. I am not an expert but
this my own understanding, I could be wrong. 

 

Regards,

 

Anil Aliyan

 

 

From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] 
Sent: 28 October 2010 16:02
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] smtp greeting banner frustration

 

Hi Everyone,

 

I was wondering if any list member would be able to help.

I have a number of domains, on separate IP addresses but whenever a server
connects to the server it receives the same SMTP greeting:

 

220 cpa2.localdomain - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP

 

Whereas the hostname should only be the one which reverse resolves in DNS
i.e. mail.domain.com

 

Does anyone know how I would go about enabling this compliance with RFC821
4.3 and RFC2821 4.3.1

 

Any help will be gratefully received,

 

Fin

 

RE: [qmailtoaster] smtp greeting banner frustration

[Anil Aliyan]

This happens because you smtp service is listening on all ip addresses. If
you want to send separate greeting message individual domains you'll have to
configure multiples instances of smtp services for all the domains on your
server. I am not an expert but this my own understanding, I could be wrong. 

 

Regards,

 

Anil Aliyan

 

From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] 
Sent: 28 October 2010 16:02
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] smtp greeting banner frustration

 

Hi Everyone,

 

I was wondering if any list member would be able to help.

I have a number of domains, on separate IP addresses but whenever a server
connects to the server it receives the same SMTP greeting:

 

220 cpa2.localdomain - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP

 

Whereas the hostname should only be the one which reverse resolves in DNS
i.e. mail.domain.com

 

Does anyone know how I would go about enabling this compliance with RFC821
4.3 and RFC2821 4.3.1

 

Any help will be gratefully received,

 

Fin

 

RE: [qmailtoaster] Forwarding outgoing emails to a monitoring email box - Reg.

[Anil Aliyan]

Use taps

 

http://wiki.qmailtoaster.org/index.php/Taps

 

 

From: Atul Paralikar [mailto:a...@etisbew.com] 
Sent: 26 October 2010 16:44
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Forwarding outgoing emails to a monitoring email box
- Reg.

 

Hi All,

 

We have a requirement in our mailing service, where we would like to forward
all the emails sent or written by any or a particular email user our mail
server to be forwarded to a monitoring mail box. How can we achieve this?

 

Thanks and Regards,

Atul Paralikar

 

RE: [qmailtoaster] Addressbook restoration issue

[Anil Aliyan]

HI,

 

Install php-pear on your system.

 

#yum –y install php-pear

 

 

Regards,

 

Anil Aliyan

 

From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] 
Sent: 21 October 2010 16:55
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Addressbook restoration issue

 

Hi list, 

   I have try to restore our address book is squirrelmail. the restoration of 
the database is successfully done the database of squirrelmail together with 
the data.


I only add to the config.php in squirrel is:

$addrbook_dsn = ' mysql://:@localhost/squirrelmail';
$addrbook_table = 'address';

$prefs_dsn = ' mysql://:@localhost/squirrelmail';
$prefs_table = 'userprefs';

  When I try to view the information saved in the addressbook in squirrelmail. 
I got this error

"ERROR:Could not include PEAR database functions required for the database 
backend.
Is PEAR installed, and is the include path set correctly to find DB.php?
Please contact your system administrator and report this error. ."

What does this mean? How can I solve this issue?  I am using latest version of 
CentOS, php version is 5.3, and I also install latest version of qmail-toaster.
 
Respectfully Yours,

Joselito E. Tapangan
Network Administrator
Booom!! Interactive, Inc.
2F Tulips Center Bldg.
A.S. Fortuna St.
Mandaue City, Cebu
Philippines, 6014.

RE: [qmailtoaster] Issue with yahoo differing our email

[Anil Aliyan]

Please check your DNS records for Domainkeys and DKIM on the below mentioned 
links. If possible please do paste your DNS server entries for DKIM  here.  

 

http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 

 

regards

 

Anil Aliyan

 

From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] 
Sent: 20 October 2010 11:39
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issue with yahoo differing our email

 

Hi List,

I forgot to send to you the full header of successful message which yahoo 
didn't differ one of our mail.
__

>From j...@booom.com.ph Wed Oct 20 04:55:45 2010


X-RocketMail: 

0001;R---S---MK--;5104


X-RocketUID: 

00


X-RocketYMUMID: 

AEB5/NgAAWdYTL52VwoRo169a/Q


X-RocketMIF: 

1287550551;3008;


X-RocketSGL: 

type=INBOX_VIEWS_PROTECT;hasTIP=0;


X-Apparently-To: 

jet_zum...@yahoo.com via 216.252.121.64; Tue, 19 Oct 2010 21:55:51 -0700


X-RocketRCL: 

;;;33


Return-Path: 




X-RocketTIP: 

203.177.60.42 ; NO_TIP_HEADER_ALLOWED ; 


X-RocketSRV: 

s_ip=203.177.60.42;d_t=1287550551;Retro=N;SgrnP=N


X-Rocket-Spam: 

203.177.60.42


X-YahooFilteredBulk: 

203.177.60.42


Received-SPF: 

pass ( <http://mta1051.mail.ac4.yahoo.com/> mta1051.mail.ac4.yahoo.com: 
domain of j...@booom.com.ph designates 203.177.60.42 as permitted sender)


X-Rocket-Track: 

cat=SP; 
info=rule:SP;cconsam:UK;dmcu:UK;cip_features:UK;ip:NN;ipsh:UK;cmsgbk:UK;mip:UK;url2db:SP;wlrcpts:UK;abaca=ER<0,jet_zum...@yahoo.com,1,er=-12/14001;
 id=a1u00MCh000-9J2155p; fs=49; gv=50; ip=203.177.60.42; av=12.5931p3; 
db=ver/5309.6049/81aa/svrs/0:32,2:17,3:18,4:19,11:60,12:61,13:62,14:63,21:140,22:141,23:142,24:143/shards/0:0:-o26,1:2,11,12,21,22:0-499,2:2,3,12,13,22,23:2500-2999,3:3,4,13,14,23,24:5000-5499,4:4,14,11,24,21:9000-9998/NbhDLC/0:-1:0/2;
 ,SRV_OR=0,WS_OR=0,OR=0,AB_WS_IP=0>


X-YMailISG: 

44Kw02UcZApNFJDwxlgnBG4nYBXBKngRYOdArZSyLzVqB.Eo 
LfXZS5.fHeg5ItE45YYyyt8c.YCPDEzpmOkPN.MT4svNXLeLY4P7EXd1ZhHM 
AtH4lbDCdF8hVHtjClwr219UoTuEwHkCT7.Vq.wg_GaAtpe70iZiQB6Bua6. 
_eXKdP8LZMRk0UbSOd69RQ18w8HtwBdRL4VrCfJ7zdi.xGHmwtqT0S39e38k 
aCZf3WFIfyQRpq1mvjxdRHmdHPgTrbO2iye8frvCMNS1jikztwO3yKXMl6K. 
k_uYCUSnKvZFry7kjD6z92iNUtDhawkA.4h2QHvEk_yRvhRV.K2W183DDV4p 
jJe2R2s9za_RNb0NEtMd3AZ1J7CMX.41kLyCc0AqHCyPlQThKXBp.iYoNV8T 
2vc2UOmMJmon53_RaE6PU6q3TTQPZwgbbe5z.SPmA7_WH.x5WgDhX2XfU2.R 
Qq6MgJ2JfXbCb.DS8kaRzorp8_RxSweXEXnGy8B9YuiuILhmLyXUcuBySj8v 
jIWGi2s4SMbMZdkMBmuqv7TP_eA11sv9U7ImYCCmg8JNKbQwUjQSikk38pBy 
tlIudKMnKw3N0YGbZ3p06HGkXc9ej9_uRqpqpERPBdVrSJ7WRvKxwXWrdWwF 
Sh7Dtvwm1isDsJhlNincnoLzX4S69w3XIti54.b7eAZCLzbA6RXe5KrPYnMZ 
2oWUsrbWm3NsbZOqKHL64.hNEnovD_XDWOgKTm2UUiEC5.WQZk55OCZqRD.1 
jcLK4hnnbQDIuaqJTYxc4jD_twMRtgFJpZcGwu0_W3HVK18rO5C7AXubK4qI 
JULyY5VbppWK3AfM7shx8kErDzGGbLIoU8TAIUzCt0fz0.1nb9btsFySDKdo 
kK.uNiD8VNqr19h.gi1SZsTZpAHNRSp45xICPUYNPT6PqSGzTOl1Jq3eL.le 
b_c1YMkpSlqW6iY1Qpt1lWtQNBoLKd6VVE8o5Dvi1.MiFcAC25xSyPvYL8Z3 
VQwS2GOiz8plU2xLMd35ipDxtYd7tSEGusDnGJ5PP_UmzZkxkCMykc85bTgb 
BIGQee9wFKKl53F8LaE-


X-RocketHELO: 

 <http://erato.booom.com.ph/> erato.booom.com.ph


X-RocketMAILFROM: 

j...@booom.com.ph


X-RocketRCPTTO: 

0-jet_zum...@yahoo.com


X-RocketMSGID: 

1287550546.333779.53...@mta1051.mail.ac4.yahoo.com#0


X-Originating-IP: 

[203.177.60.42]


Authentication-Results: 

mta1051.mail.ac4.yahoo.com from=booom.com.ph; domainkeys=pass (ok); 
from=erato.booom.com.ph; dkim=permerror (no key)


Received: 

from 127.0.0.1 (EHLO erato.booom.com.ph) (203.177.60.42) by 
mta1051.mail.ac4.yahoo.com with SMTP; Tue, 19 Oct 2010 21:55:51 -0700


DKIM-Signature: 

v=1; a=rsa-sha1; c=simple; d=erato.booom.com.ph; h= 
message-id:date:subject:from:to:mime-version:content-type 
:content-transfer-encoding; s=dkim1; bh=/j9Y8LrOqVpbsy5chnp8gGGh tlg=; 
b=c+a9FrRJywCWxCl/4ovBQGu0v40P1WbmsNEOXoONZG0bZ/ciFI9cgEcG ++dYOp4Y


Received: 

(qmail 20967 invoked by uid 89); 20 Oct 2010 04:55:45 -


Comment: 

DomainKeys? See  <http://antispam.yahoo.com/domainkeys> 
http://antispam.yahoo.com/domainkeys


DomainKey-Signature: 

a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; 
b=sK1Lt9DnCQsA1ewoDbpcCpmlh6MuVU7S0beBm1p/Of8xUo5ArYL7piaMJE+0XeQx;


Received: 

from unknown (HELO  <http://booom.com.ph/> booom.com.ph) (127.0.0.1) by 
erato.booom.com.ph with SMTP; 20 Oct 2010 04:55:45 -


Received: 

from 124.6.155.51 (proxying for 192.168.0.135) (SquirrelMail 
authenticated user july) by booom.com.ph with HTTP; Wed, 20 Oct 2010 12:55:45 
+0800


Message-ID: 




Date: 

Wed, 20 Oct 2010 12:55:45 +0800


Subject: 

  

RE: [qmailtoaster] Issue with yahoo differing our email

[Anil Aliyan]

I am using same keys for Domainkeys and DKIM without any problems and have 
published same key for Domainkeys and DKIM in my DNS. If you are using DKIM 
setup you can configure Domainkeys along with DKIM in the same configuration 
file and need not configure Domainkeys separately.

 

 

 

From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] 
Sent: 20 October 2010 11:39
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issue with yahoo differing our email

 

Hi List,

I forgot to send to you the full header of successful message which yahoo 
didn't differ one of our mail.
__

>From j...@booom.com.ph Wed Oct 20 04:55:45 2010


X-RocketMail: 

0001;R---S---MK--;5104


X-RocketUID: 

00


X-RocketYMUMID: 

AEB5/NgAAWdYTL52VwoRo169a/Q


X-RocketMIF: 

1287550551;3008;


X-RocketSGL: 

type=INBOX_VIEWS_PROTECT;hasTIP=0;


X-Apparently-To: 

jet_zum...@yahoo.com via 216.252.121.64; Tue, 19 Oct 2010 21:55:51 -0700


X-RocketRCL: 

;;;33


Return-Path: 




X-RocketTIP: 

203.177.60.42 ; NO_TIP_HEADER_ALLOWED ; 


X-RocketSRV: 

s_ip=203.177.60.42;d_t=1287550551;Retro=N;SgrnP=N


X-Rocket-Spam: 

203.177.60.42


X-YahooFilteredBulk: 

203.177.60.42


Received-SPF: 

pass (  mta1051.mail.ac4.yahoo.com: 
domain of j...@booom.com.ph designates 203.177.60.42 as permitted sender)


X-Rocket-Track: 

cat=SP; 
info=rule:SP;cconsam:UK;dmcu:UK;cip_features:UK;ip:NN;ipsh:UK;cmsgbk:UK;mip:UK;url2db:SP;wlrcpts:UK;abaca=ER<0,jet_zum...@yahoo.com,1,er=-12/14001;
 id=a1u00MCh000-9J2155p; fs=49; gv=50; ip=203.177.60.42; av=12.5931p3; 
db=ver/5309.6049/81aa/svrs/0:32,2:17,3:18,4:19,11:60,12:61,13:62,14:63,21:140,22:141,23:142,24:143/shards/0:0:-o26,1:2,11,12,21,22:0-499,2:2,3,12,13,22,23:2500-2999,3:3,4,13,14,23,24:5000-5499,4:4,14,11,24,21:9000-9998/NbhDLC/0:-1:0/2;
 ,SRV_OR=0,WS_OR=0,OR=0,AB_WS_IP=0>


X-YMailISG: 

44Kw02UcZApNFJDwxlgnBG4nYBXBKngRYOdArZSyLzVqB.Eo 
LfXZS5.fHeg5ItE45YYyyt8c.YCPDEzpmOkPN.MT4svNXLeLY4P7EXd1ZhHM 
AtH4lbDCdF8hVHtjClwr219UoTuEwHkCT7.Vq.wg_GaAtpe70iZiQB6Bua6. 
_eXKdP8LZMRk0UbSOd69RQ18w8HtwBdRL4VrCfJ7zdi.xGHmwtqT0S39e38k 
aCZf3WFIfyQRpq1mvjxdRHmdHPgTrbO2iye8frvCMNS1jikztwO3yKXMl6K. 
k_uYCUSnKvZFry7kjD6z92iNUtDhawkA.4h2QHvEk_yRvhRV.K2W183DDV4p 
jJe2R2s9za_RNb0NEtMd3AZ1J7CMX.41kLyCc0AqHCyPlQThKXBp.iYoNV8T 
2vc2UOmMJmon53_RaE6PU6q3TTQPZwgbbe5z.SPmA7_WH.x5WgDhX2XfU2.R 
Qq6MgJ2JfXbCb.DS8kaRzorp8_RxSweXEXnGy8B9YuiuILhmLyXUcuBySj8v 
jIWGi2s4SMbMZdkMBmuqv7TP_eA11sv9U7ImYCCmg8JNKbQwUjQSikk38pBy 
tlIudKMnKw3N0YGbZ3p06HGkXc9ej9_uRqpqpERPBdVrSJ7WRvKxwXWrdWwF 
Sh7Dtvwm1isDsJhlNincnoLzX4S69w3XIti54.b7eAZCLzbA6RXe5KrPYnMZ 
2oWUsrbWm3NsbZOqKHL64.hNEnovD_XDWOgKTm2UUiEC5.WQZk55OCZqRD.1 
jcLK4hnnbQDIuaqJTYxc4jD_twMRtgFJpZcGwu0_W3HVK18rO5C7AXubK4qI 
JULyY5VbppWK3AfM7shx8kErDzGGbLIoU8TAIUzCt0fz0.1nb9btsFySDKdo 
kK.uNiD8VNqr19h.gi1SZsTZpAHNRSp45xICPUYNPT6PqSGzTOl1Jq3eL.le 
b_c1YMkpSlqW6iY1Qpt1lWtQNBoLKd6VVE8o5Dvi1.MiFcAC25xSyPvYL8Z3 
VQwS2GOiz8plU2xLMd35ipDxtYd7tSEGusDnGJ5PP_UmzZkxkCMykc85bTgb 
BIGQee9wFKKl53F8LaE-


X-RocketHELO: 

  erato.booom.com.ph


X-RocketMAILFROM: 

j...@booom.com.ph


X-RocketRCPTTO: 

0-jet_zum...@yahoo.com


X-RocketMSGID: 

1287550546.333779.53...@mta1051.mail.ac4.yahoo.com#0


X-Originating-IP: 

[203.177.60.42]


Authentication-Results: 

mta1051.mail.ac4.yahoo.com from=booom.com.ph; domainkeys=pass (ok); 
from=erato.booom.com.ph; dkim=permerror (no key)


Received: 

from 127.0.0.1 (EHLO erato.booom.com.ph) (203.177.60.42) by 
mta1051.mail.ac4.yahoo.com with SMTP; Tue, 19 Oct 2010 21:55:51 -0700


DKIM-Signature: 

v=1; a=rsa-sha1; c=simple; d=erato.booom.com.ph; h= 
message-id:date:subject:from:to:mime-version:content-type 
:content-transfer-encoding; s=dkim1; bh=/j9Y8LrOqVpbsy5chnp8gGGh tlg=; 
b=c+a9FrRJywCWxCl/4ovBQGu0v40P1WbmsNEOXoONZG0bZ/ciFI9cgEcG ++dYOp4Y


Received: 

(qmail 20967 invoked by uid 89); 20 Oct 2010 04:55:45 -


Comment: 

DomainKeys? See   
http://antispam.yahoo.com/domainkeys


DomainKey-Signature: 

a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; 
b=sK1Lt9DnCQsA1ewoDbpcCpmlh6MuVU7S0beBm1p/Of8xUo5ArYL7piaMJE+0XeQx;


Received: 

from unknown (HELO   booom.com.ph) (127.0.0.1) by 
erato.booom.com.ph with SMTP; 20 Oct 2010 04:55:45 -


Received: 

from 124.6.155.51 (proxying for 192.168.0.135) (SquirrelMail 
authenticated user july) by booom.com.ph with HTTP; Wed, 20 Oct 2010 12:55:45 
+0800


Message-ID: 




Date: 

Wed, 20 Oct 2010 12:55:45 +0800


Subject: 

ohh wala na pud kasulod why man jud


From: 

 

RE: [qmailtoaster] Issue with yahoo differing our email

[Anil Aliyan]

Hi,

 

Your DKIM key is not yet published properly in the DNS and yahoo mail server is 
unable to read it from YOUR DNS server. Are you using different keys for both 
Domainkeys and DKIM???

 

If yes then then check you signing key file and the public key you have 
published in your DNS. If you are not sure then regenerate the keys and 
republish it in the DNS.

 

Regards,

 

Anil Aliyan

 

From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] 
Sent: 20 October 2010 11:39
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issue with yahoo differing our email

 

Hi List,

I forgot to send to you the full header of successful message which yahoo 
didn't differ one of our mail.
__

>From j...@booom.com.ph Wed Oct 20 04:55:45 2010


X-RocketMail: 

0001;R---S---MK--;5104


X-RocketUID: 

00


X-RocketYMUMID: 

AEB5/NgAAWdYTL52VwoRo169a/Q


X-RocketMIF: 

1287550551;3008;


X-RocketSGL: 

type=INBOX_VIEWS_PROTECT;hasTIP=0;


X-Apparently-To: 

jet_zum...@yahoo.com via 216.252.121.64; Tue, 19 Oct 2010 21:55:51 -0700


X-RocketRCL: 

;;;33


Return-Path: 




X-RocketTIP: 

203.177.60.42 ; NO_TIP_HEADER_ALLOWED ; 


X-RocketSRV: 

s_ip=203.177.60.42;d_t=1287550551;Retro=N;SgrnP=N


X-Rocket-Spam: 

203.177.60.42


X-YahooFilteredBulk: 

203.177.60.42


Received-SPF: 

pass ( <http://mta1051.mail.ac4.yahoo.com/> mta1051.mail.ac4.yahoo.com: 
domain of j...@booom.com.ph designates 203.177.60.42 as permitted sender)


X-Rocket-Track: 

cat=SP; 
info=rule:SP;cconsam:UK;dmcu:UK;cip_features:UK;ip:NN;ipsh:UK;cmsgbk:UK;mip:UK;url2db:SP;wlrcpts:UK;abaca=ER<0,jet_zum...@yahoo.com,1,er=-12/14001;
 id=a1u00MCh000-9J2155p; fs=49; gv=50; ip=203.177.60.42; av=12.5931p3; 
db=ver/5309.6049/81aa/svrs/0:32,2:17,3:18,4:19,11:60,12:61,13:62,14:63,21:140,22:141,23:142,24:143/shards/0:0:-o26,1:2,11,12,21,22:0-499,2:2,3,12,13,22,23:2500-2999,3:3,4,13,14,23,24:5000-5499,4:4,14,11,24,21:9000-9998/NbhDLC/0:-1:0/2;
 ,SRV_OR=0,WS_OR=0,OR=0,AB_WS_IP=0>


X-YMailISG: 

44Kw02UcZApNFJDwxlgnBG4nYBXBKngRYOdArZSyLzVqB.Eo 
LfXZS5.fHeg5ItE45YYyyt8c.YCPDEzpmOkPN.MT4svNXLeLY4P7EXd1ZhHM 
AtH4lbDCdF8hVHtjClwr219UoTuEwHkCT7.Vq.wg_GaAtpe70iZiQB6Bua6. 
_eXKdP8LZMRk0UbSOd69RQ18w8HtwBdRL4VrCfJ7zdi.xGHmwtqT0S39e38k 
aCZf3WFIfyQRpq1mvjxdRHmdHPgTrbO2iye8frvCMNS1jikztwO3yKXMl6K. 
k_uYCUSnKvZFry7kjD6z92iNUtDhawkA.4h2QHvEk_yRvhRV.K2W183DDV4p 
jJe2R2s9za_RNb0NEtMd3AZ1J7CMX.41kLyCc0AqHCyPlQThKXBp.iYoNV8T 
2vc2UOmMJmon53_RaE6PU6q3TTQPZwgbbe5z.SPmA7_WH.x5WgDhX2XfU2.R 
Qq6MgJ2JfXbCb.DS8kaRzorp8_RxSweXEXnGy8B9YuiuILhmLyXUcuBySj8v 
jIWGi2s4SMbMZdkMBmuqv7TP_eA11sv9U7ImYCCmg8JNKbQwUjQSikk38pBy 
tlIudKMnKw3N0YGbZ3p06HGkXc9ej9_uRqpqpERPBdVrSJ7WRvKxwXWrdWwF 
Sh7Dtvwm1isDsJhlNincnoLzX4S69w3XIti54.b7eAZCLzbA6RXe5KrPYnMZ 
2oWUsrbWm3NsbZOqKHL64.hNEnovD_XDWOgKTm2UUiEC5.WQZk55OCZqRD.1 
jcLK4hnnbQDIuaqJTYxc4jD_twMRtgFJpZcGwu0_W3HVK18rO5C7AXubK4qI 
JULyY5VbppWK3AfM7shx8kErDzGGbLIoU8TAIUzCt0fz0.1nb9btsFySDKdo 
kK.uNiD8VNqr19h.gi1SZsTZpAHNRSp45xICPUYNPT6PqSGzTOl1Jq3eL.le 
b_c1YMkpSlqW6iY1Qpt1lWtQNBoLKd6VVE8o5Dvi1.MiFcAC25xSyPvYL8Z3 
VQwS2GOiz8plU2xLMd35ipDxtYd7tSEGusDnGJ5PP_UmzZkxkCMykc85bTgb 
BIGQee9wFKKl53F8LaE-


X-RocketHELO: 

 <http://erato.booom.com.ph/> erato.booom.com.ph


X-RocketMAILFROM: 

j...@booom.com.ph


X-RocketRCPTTO: 

0-jet_zum...@yahoo.com


X-RocketMSGID: 

1287550546.333779.53...@mta1051.mail.ac4.yahoo.com#0


X-Originating-IP: 

[203.177.60.42]


Authentication-Results: 

mta1051.mail.ac4.yahoo.com from=booom.com.ph; domainkeys=pass (ok); 
from=erato.booom.com.ph; dkim=permerror (no key)


Received: 

from 127.0.0.1 (EHLO erato.booom.com.ph) (203.177.60.42) by 
mta1051.mail.ac4.yahoo.com with SMTP; Tue, 19 Oct 2010 21:55:51 -0700


DKIM-Signature: 

v=1; a=rsa-sha1; c=simple; d=erato.booom.com.ph; h= 
message-id:date:subject:from:to:mime-version:content-type 
:content-transfer-encoding; s=dkim1; bh=/j9Y8LrOqVpbsy5chnp8gGGh tlg=; 
b=c+a9FrRJywCWxCl/4ovBQGu0v40P1WbmsNEOXoONZG0bZ/ciFI9cgEcG ++dYOp4Y


Received: 

(qmail 20967 invoked by uid 89); 20 Oct 2010 04:55:45 -


Comment: 

DomainKeys? See  <http://antispam.yahoo.com/domainkeys> 
http://antispam.yahoo.com/domainkeys


DomainKey-Signature: 

a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; 
b=sK1Lt9DnCQsA1ewoDbpcCpmlh6MuVU7S0beBm1p/Of8xUo5ArYL7piaMJE+0XeQx;


Received: 

from unknown (HELO  <http://booom.com.ph/> booom.com.ph) (127.0.0.1) by 
erato.booom.com.ph with SMTP; 20 Oct 2010 04:55:45 -


Received: 

from 124.6.155.51 (proxying for 192.168.0.135) (SquirrelMail 
authenticated user july) by booom.com.ph with HTTP; Wed, 20 Oct 2010 12:55:45 
+0800


Message-ID: 




Dat

RE: [qmailtoaster] Issue with yahoo differing our email

[Anil Aliyan]

Can you send a test message on a valid yahoo email address instead of 
t...@yahoo.com and then check it. Send a test message on my email address 
anil.ali...@yahoo.co.in




-Original Message-
From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com] 
Sent: 16 October 2010 18:12
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issue with yahoo differing our email

Hi Anil,

Domain keys and dkim

$ORIGIN mydomain.com.
_domainkey  TXT "t=y\; o=-\; r=t...@booom.com.ph"

$ORIGIN _domainkey.mydomain.com.
dkim1   TXT "k=rsa\; p=My Key"
private TXT "k=rsa\; p=My Key"

That is the entry for DNS its a slave DNS in this case 

The suggested procedure worked. Thank you

This is the new header:

Hi. This is the qmail-send program at erato.booom.com.ph.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

:
User and password not set, continuing without authentication.
 66.94.236.34 failed after I sent the message.
Remote host said: 554 Message not allowed - [PH01] Email not accepted for 
policy reasons.  Please visit 
http://postmaster.yahoo.com/errors/postmaster-27.html
[120]

--- Below this line is a copy of the message.

Return-Path: 
Received: (qmail 7558 invoked by uid 89); 16 Oct 2010 12:35:39 -
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=private; d=booom.com.ph;
  b=WjTuJw1zMG5xMPNvZ2u1G/TeGp4eqFjBhOW162fBjqAWMUk+FOq1oyb6wU6yw2Ea;
Received: from unknown (HELO booom.com.ph) (127.0.0.1)
  by erato.booom.com.ph with SMTP; 16 Oct 2010 12:35:39 -
Received: from 124.6.155.51 (proxying for 192.168.0.5)
(SquirrelMail authenticated user sctene...@booom.com.ph)
by booom.com.ph with HTTP;
Sat, 16 Oct 2010 20:35:39 +0800
Message-ID: <93a971cd7d3814d8dff19d55d42bfed5.squir...@booom.com.ph>
Date: Sat, 16 Oct 2010 20:35:39 +0800
Subject: test
From: sctene...@booom.com.ph
To: t...@yahoo.com
User-Agent: SquirrelMail/1.4.20-1.3.17
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

Any idea from the group?


Thanks





- Original Message 
From: Anil Aliyan 
To: qmailtoaster-list@qmailtoaster.com
Sent: Saturday, October 16, 2010 7:52:57 PM
Subject: RE: [qmailtoaster] Issue with yahoo differing our email

http://perl-xml.sourceforge.net/faq/#parserdetails.ini


3.18. "could not find ParserDetails.ini" 
A number of people have reported encountering the error "could not find 
ParserDetails.ini in ..." when installing or attempting to use XML::SAX. 
ParserDetails.ini is used by XML::SAX::ParserFactory to determine which SAX 
parser modules are installed. It should be created by the XML::SAX installation 
script and should be updated automatically by the install script for each SAX 
parser module.

If you are installing XML::SAX manually you must run Makefile.PL. Unpacking the 
tarball and copying the files into your Perl lib directory will not work.

During the initial installation, if you are asked whether ParserDetails.ini 
should be updated, always say yes. If you say no, the file will not be created.

If you are using ActivePerl, the following command should resolve the problem: 

ppm install http://theoryx5.uwinnipeg.ca/ppms/XML-SAX.ppd
  
Once you have successfully installed XML::SAX, you should consider installing a 
module such as XML::SAX::Expat or XML::LibXML to replace the slower pure-Perl 
parser bundled with SAX.

If you are packaging XML::SAX in an alternative distribution format (such as 
RPM), your post-install script should check if ParserDetails.ini exists and if 
it doesn't, run this command:

perl -MXML::SAX -e "XML::SAX->add_parser(q(XML::SAX::PurePerl))->save_parsers()"
  
Don't unconditionally run this command, or users who re-install XML::SAX may 
find that any fast SAX parser they have installed will be replaced as the 
default by the pure-Perl parser.

I hope this will help many of us who are facing this problem.

Regards,

Anil Aliyan

-Original Message-
From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com]
Sent: 16 October 2010 16:48
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issue with yahoo differing our email

Hi,

Update from yahoo differed full headers.


Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't 
able to deliver your message to the following addresses. This is a permanent 
error; I've given up. Sorry it didn't work out.  : ould not 
find ParserDetails.ini in /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX rUser and 
password not set, continuing without authentication.  
74.6.136.65 failed after I sent the message. Remote host said: 554 Message not 
allowed

RE: [qmailtoaster] Issue with yahoo differing our email

[Anil Aliyan]

http://perl-xml.sourceforge.net/faq/#parserdetails.ini


3.18. "could not find ParserDetails.ini" 
 A number of people have reported encountering the error "could not find 
ParserDetails.ini in ..." when installing or attempting to use XML::SAX. 
ParserDetails.ini is used by XML::SAX::ParserFactory to determine which SAX 
parser modules are installed. It should be created by the XML::SAX installation 
script and should be updated automatically by the install script for each SAX 
parser module.

If you are installing XML::SAX manually you must run Makefile.PL. Unpacking the 
tarball and copying the files into your Perl lib directory will not work.

During the initial installation, if you are asked whether ParserDetails.ini 
should be updated, always say yes. If you say no, the file will not be created.

If you are using ActivePerl, the following command should resolve the problem: 

ppm install http://theoryx5.uwinnipeg.ca/ppms/XML-SAX.ppd
  
Once you have successfully installed XML::SAX, you should consider installing a 
module such as XML::SAX::Expat or XML::LibXML to replace the slower pure-Perl 
parser bundled with SAX.

If you are packaging XML::SAX in an alternative distribution format (such as 
RPM), your post-install script should check if ParserDetails.ini exists and if 
it doesn't, run this command:

perl -MXML::SAX -e "XML::SAX->add_parser(q(XML::SAX::PurePerl))->save_parsers()"
  
Don't unconditionally run this command, or users who re-install XML::SAX may 
find that any fast SAX parser they have installed will be replaced as the 
default by the pure-Perl parser.

I hope this will help many of us who are facing this problem.

Regards,

Anil Aliyan

-Original Message-
From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com] 
Sent: 16 October 2010 16:48
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issue with yahoo differing our email

Hi,

Update from yahoo differed full headers.


Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't 
able to deliver your message to the following addresses. This is a permanent 
error; I've given up. Sorry it didn't work out.  : ould not 
find ParserDetails.ini in /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX rUser and 
password not set, continuing without authentication.  
74.6.136.65 failed after I sent the message. Remote host said: 554 Message not 
allowed - [PH01] Email not accepted for policy reasons.  Please visit 
http://postmaster.yahoo.com/errors/postmaster-27.html [120]  --- Below this 
line is a copy of the message.  Return-Path:  Received: 
(qmail 11368 invoked by uid 89); 16 Oct 2010 11:13:06 - Comment: 
DomainKeys? 
See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; 
q=dns; 
c=nofws;   s=private; d=booom.com.ph;   
b=rutsd3WrxguNgCgfu7JnbQdZL0Rpv3Xm7IqLzOr+5AaKB8/Fppr8zoEm+VKh0Cys; Received: 
from unknown (HELO booom.com.ph) (127.0.0.1)   by erato.booom.com.ph with SMTP; 
16 Oct 2010 11:13:06 - Received: from 124.6.155.51 (proxying for 
192.168.0.5) (SquirrelMail authenticated user sctene...@booom.com.ph)   
  
by booom.com.ph with HTTP; Sat, 16 Oct 2010 19:13:06 +0800 Message-ID: 
 Date: Sat, 16 Oct 2010
19:13:06 +0800 Subject: test From: sctene...@booom.com.ph To: t...@yahoo.com
User-Agent: SquirrelMail/1.4.20-1.3.17 MIME-Version: 1.0 Content-Type: 
text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3
(Normal) Importance: Normal
I also tried to add dkim but with no avail. its now DKIM + domain keys. If this 
is no good please let me know which is the standard and how to remove 1.

Please advice.

Thank you,
Sandeil



- Original Message 
From: Sandeil Tenebro 
To: qmailtoaster mailing list 
Sent: Saturday, October 16, 2010 6:46:09 PM
Subject: [qmailtoaster] Issue with yahoo differing our email

Hi List,

Just migrated to a new server. We can properly send emails to other public 
domains but we have an issue with yahoo. The are differing our email. 



Domain key is configured but with no avail.

Full message from yahoo:

Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't 
able to deliver your message to the following addresses. This is a permanent 
error; I've given up. Sorry it didn't work out.  : User and 
password not set, continuing without authentication.  
98.139.54.60 failed after I sent the message. Remote host said: 554 Message not 
allowed - [PH01] Email not accepted for policy reasons.  Please visit 
http://postmaster.yahoo.com/errors/postmaster-27.html [120]  --- Below this 
line 

is a copy of the message.  Return-Path:  Received: 
(qmail 9522 invoked by uid 89); 16 Oct 2010 10:42:31 - Comment: DomainKeys? 
See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; 
q=dns; 

c=nofws;   s=private; d=booom.com.ph;  
b=TE7CUoKQUNn55fHcF7j9Oup+PXV3dF8YJBHkEgXD

RE: [qmailtoaster] Issue with yahoo differing our email

[Anil Aliyan]

Can you tell us when you updated your DNS records for Domain Keys???




-Original Message-
From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com] 
Sent: 16 October 2010 16:48
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issue with yahoo differing our email

Hi,

Update from yahoo differed full headers.


Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't 
able to deliver your message to the following addresses. This is a permanent 
error; I've given up. Sorry it didn't work out.  : ould not 
find ParserDetails.ini in /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX rUser and 
password not set, continuing without authentication.  
74.6.136.65 failed after I sent the message. Remote host said: 554 Message not 
allowed - [PH01] Email not accepted for policy reasons.  Please visit 
http://postmaster.yahoo.com/errors/postmaster-27.html [120]  --- Below this 
line is a copy of the message.  Return-Path:  Received: 
(qmail 11368 invoked by uid 89); 16 Oct 2010 11:13:06 - Comment: 
DomainKeys? 
See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; 
q=dns; 
c=nofws;   s=private; d=booom.com.ph;   
b=rutsd3WrxguNgCgfu7JnbQdZL0Rpv3Xm7IqLzOr+5AaKB8/Fppr8zoEm+VKh0Cys; Received: 
from unknown (HELO booom.com.ph) (127.0.0.1)   by erato.booom.com.ph with SMTP; 
16 Oct 2010 11:13:06 - Received: from 124.6.155.51 (proxying for 
192.168.0.5) (SquirrelMail authenticated user sctene...@booom.com.ph)   
  
by booom.com.ph with HTTP; Sat, 16 Oct 2010 19:13:06 +0800 Message-ID: 
 Date: Sat, 16 Oct 2010
19:13:06 +0800 Subject: test From: sctene...@booom.com.ph To: t...@yahoo.com
User-Agent: SquirrelMail/1.4.20-1.3.17 MIME-Version: 1.0 Content-Type: 
text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3
(Normal) Importance: Normal
I also tried to add dkim but with no avail. its now DKIM + domain keys. If this 
is no good please let me know which is the standard and how to remove 1.

Please advice.

Thank you,
Sandeil



- Original Message 
From: Sandeil Tenebro 
To: qmailtoaster mailing list 
Sent: Saturday, October 16, 2010 6:46:09 PM
Subject: [qmailtoaster] Issue with yahoo differing our email

Hi List,

Just migrated to a new server. We can properly send emails to other public 
domains but we have an issue with yahoo. The are differing our email. 



Domain key is configured but with no avail.

Full message from yahoo:

Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't 
able to deliver your message to the following addresses. This is a permanent 
error; I've given up. Sorry it didn't work out.  : User and 
password not set, continuing without authentication.  
98.139.54.60 failed after I sent the message. Remote host said: 554 Message not 
allowed - [PH01] Email not accepted for policy reasons.  Please visit 
http://postmaster.yahoo.com/errors/postmaster-27.html [120]  --- Below this 
line 

is a copy of the message.  Return-Path:  Received: 
(qmail 9522 invoked by uid 89); 16 Oct 2010 10:42:31 - Comment: DomainKeys? 
See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; 
q=dns; 

c=nofws;   s=private; d=booom.com.ph;  
b=TE7CUoKQUNn55fHcF7j9Oup+PXV3dF8YJBHkEgXD5bYc5SK8FMFOWHJW9/LP9zpS; Received: 
from unknown (HELO booom.com.ph) (127.0.0.1)   by erato.booom.com.ph with SMTP; 
16 Oct 2010 10:42:31 - Received: from 124.6.155.51 (proxying for 
192.168.0.5) (SquirrelMail authenticated user sctene...@booom.com.ph)   
 


by booom.com.ph with HTTP; Sat, 16 Oct 2010 18:42:31 +0800 Message-ID: 
 Date: Sat, 16 Oct 2010 
18:42:31 +0800 Subject: test From: sctene...@booom.com.ph To: t...@yahoo.com 
User-Agent: SquirrelMail/1.4.20-1.3.17 MIME-Version: 1.0 Content-Type: 
text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 
(Normal) Importance: Normal
Full header from google:

Delivered-To: t...@gmail.com Received: by 10.216.52.66 with SMTP id 
d44cs397493wec; Sat, 16 Oct 2010 03:23:25 -0700 (PDT) Received: by 
10.142.211.20 with SMTP id j20mr1526362wfg.408.1287224601655; Sat, 16 
Oct 2010 03:23:21 -0700 (PDT) Return-Path:  Received: 
from erato.booom.com.ph (ns2.booom.com.ph [203.177.60.42]) by 
mx.google.com with ESMTP id l40si30124712wfa.106.2010.10.16.03.23.19;
Sat, 16 Oct 2010 03:23:20 -0700 (PDT) Received-SPF: pass (google.com: domain of 
sctene...@booom.com.ph designates 203.177.60.42 as permitted sender) 
client-ip=203.177.60.42; DomainKey-Status: good Authentication-Results: 
mx.google.com; spf=pass (google.com: domain of sctene...@booom.com.ph 
designates 

203.177.60.42 as permitted sender) smtp.mail=sctene...@booom.com.ph; 
domainkeys=pass header.from=sctene...@booom.com.ph Received: (qmail 8545 
invoked 

by uid 89); 16 Oct 2010 10:23:18 - Comment: DomainKeys? See 
http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; 
c=nofws;   s=private; d=booom.c

RE: [qmailtoaster] Block Mail

[Anil Aliyan]

As rightly mentioned below

 

Add the domain in badmailfrom file locate in /var/qmail/control/

 

Secondly , I am sorry but I really hate customers who instead of taking action 
at their end and push other parties to get things done for them. As an service 
provider you should block their mail server and force them to take necessary 
action on their exchange mail server.

 

 

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: 21 September 2010 12:36
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Block Mail

 

Thanks Dhaval,

Actually my server is QMT box is used as a filtering and relaying server for my 
client exchange server. Now problem is their exchange server is compromised and 
its relaying 1000s of spam mails to my QMT server. I don't have access to 
exchange server but client wants my QMT server to block all incoming as well as 
outgoing spam mails.Right now I have 5000 spam mails in my queue because of 
which delivery to genuine mail is getting delayed. How can I prevent and 
optimize my server.
All from address is someting like mentioned below:

asd...@*.hinet.net

where * is any subdomain name.

So how do I restrict *.hinet.net to enter my server.

Regards,

Amit

At Tuesday, 21-09-2010 on 11:39 dhaval thakar wrote:



 

On Tue, Sep 21, 2010 at 10:37 AM, Amit Dalia  wrote:

Hi,

Is there any way to reject the mail if anywhere in the headers there is a 
specific domain. I want to reject the mail for incoming as well as for outgoing 
to that domain. I don't care if the mail is coming from authenticated user 
account.

Amit



for incoming you can try 
qmail/control/badmailfrom 
-- 
Regards
Dhaval Thakar
http://www.linuxreaders.com/
http://www.ipguide.info/

RE: [qmailtoaster] Attack?

[Anil Aliyan]

This could happen if the client machine of a valid user is infected with
some virus or Trojan which send mail using outlook settings.

 

 

 

From: senthil vel [mailto:senthilv...@gmail.com] 
Sent: 22 June 2010 17:07
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Attack?

 

Seems some one is spamming. Any one of your mail account might be
compromised. The server is using port 587 to accept mails from local users?
. /var/log/qmail/submission or /var/log/qmail/smtp will tell the truth. 

say for example, search for "qeezajtze...@stargate5.com" in above mentioned
logs. So that we can get the origination of this mail. If it is using a
local mail id for authentication, reset the password of the mail. Also
remove the mails in queue using qmail-remove. 

--Senthilvel.

On Tue, Jun 22, 2010 at 4:29 PM, Rafael Andrade 
wrote:

Hello list,

I have a production server with qmailtoaster on centos running 2 years
perfectly, recently the server stuck, with many messages in queue, i need to
stop qmail, clean the queue and running qmail again, but i need a solution
to fix this problem, any knows or can help?

Thanks so much

Examples in queue:

Client = Hide Client Domain

[r...@net ~]# qmailctl queue | head
messages in queue: 14691
messages in queue but not yet preprocessed: 2
21 Jun 2010 22:45:02 GMT  #3087267  1435  
  remote  prittyg...@yahoo.com.br
21 Jun 2010 22:34:44 GMT  #3069258  1430  
  remote  prisci...@terra.com.br
21 Jun 2010 22:44:39 GMT  #3079585  1439  
  remote  priscillame...@yahoo.com.br
22 Jun 2010 00:02:57 GMT  #2443198  1438  
  remote  qeezajtze...@stargate5.com

Thanks so much




-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!

-
   Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



 

RE: [qmailtoaster] dovecot install error

[Anil Aliyan]

Try inside the dir /usr/src/redhat/SPECS

rpmbuild --bb --target=i686 dovecot.spec

or

rpmbuild --bb dovecot.spec


Regards,

Anil Aliyan


-Original Message-
From: Rajesh M [mailto:24x7ser...@24x7server.net] 
Sent: 12 June 2010 08:11
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] dovecot install error

>> hi
>>
>>
>> i followed the instructions as posted by mr amit
>>
http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg25551.html
>>
>> i downloaded the rpm from
>>
>> http://dl.atrpms.net/all/dovecot-1.2.11-3_108.src.rpm
>>
>> and put it in /usr/src/qtms-install
>>
>>
>> rpm -i dovecot*.src.rpm
>>
>> it gave a warning
>>
>> warning: dovecot-1.2.11-3_108.src.rpm Header V4 DSA signature: NOKEY,
>> key
>> ID 6534c2b
>>
>> when i did
>>
>> rpmbuild -ba --target=i686 dovecot.spec
>>
>> i got error
>>
>> rpmbuild failed to stat /usr/src/qtms-install/-ba
>>
>> no such file or directory  i am stuck here.
>>
>> help required please
>>
>> if any body has implemented this i would like the exact steps please
>>
>> thanks very much
>
>
> What system are you building on?
> I'd venture to guess that you're in the wrong directory. If you're running
> CentOS, you want to be in /usr/src/redhat/SPECS to run the command you
> were running.
>
>
>
>

-
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and
> installations.
>   If you need professional help with your setup, contact them today!
>

-
>  Please visit qmailtoaster.com for the latest news, updates, and
> packages.
>
>   To unsubscribe, e-mail:
> qmailtoaster-list-unsubscr...@qmailtoaster.com
>  For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
>
>
>


hi

i tried that also, it now gives error

failed to stat /usr/src/redhat/SPECS/-ba

no such file or directory

i think this is some other issue --- why is it considering the option
"-ba" as a directory

rajesh









-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Re: Receiving two copies of every mail.

[Anil Aliyan]

Hii,

I wasn't expecting such a long discussion on this matter. It got resolved on
its one this afternoon and I am not receiving any them twice anyone. I
rarely touch my server and there is no possibility that things get changed
on their own in the server. Anyways its solved for me on its own as it
started on its own.


Regards,

Anil Aliyan


-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: 09 June 2010 00:08
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Receiving two copies of every mail.

That's ok. Sometimes one thing leads to another. (Who did that song?) ;)
Thanks.
-- 
-Eric 'shubes'


Patrick Ring wrote:
> OK.  I didn't mean to hijack the original thread.
> I'll see what I can come up with on what I brought up. 
> 
> Patrick M. Ring
> P. Ring Technologies
> Louisiana Web Host, LLC.
> 985-868-4200
> 
> -Original Message-
> From: Eric Shubert [mailto:e...@shubes.net] 
> Sent: Tuesday, June 08, 2010 12:46 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: [qmailtoaster] Re: Receiving two copies of every mail.
> 
> Interesting. I wonder if it's somehow related to either:
> .) the spambox feature (which I believe modifies this file) or perhaps
> .) some side effect of a user changing their preferences.
> 
> Might want to test these to see if you can recreate the result. I think
> the former is more likely.
> 
> In any case, this seems to point to a problem with the maildrop-toaster
> package. Please start a new thread for further discussion about this.
> 
> --
> -Eric 'shubes'
> 
> Patrick Ring wrote:
>> Thank you.  I've been trying to figure it out for 4 years now.
>>
>> Some process seems to add the second entry to the .qmail file along 
>> the way.  I'm not sure if it is when the account is modified by one of
> 
>> the web interfaces or by some other process.
>>  
>> Here is an example of a .qmail file from an account that was receiving
> 
>> double emails:
>> 
>> | /var/qmail/bin/preline /usr/bin/maildrop -A
>> 'Content-Filter:maildrop-toaster' /etc/mail/mailfilter 
>> #/home/vpopmail/domains/somedomain.com/mary/Maildir/
>> 
>>
>> Notice I remarked the second line.
>> After that, the account has been fine ever since.
>>
>> Every now and again, I get one that somehow reverts back.
>>
>> Whenever it comes up, I'll look for answers for a day or two, then get
> 
>> busy and forget about it
>>
>> Last time it happened was when I was still using the older Qmail 
>> Toaster Admin (http://mail.domain.xyz/admin-toaster/)
>> I have been using the qcontrol (thank you Jake) for a while now, and 
>> I'm not sure I've seen the occurrence since I started using it.
>>
>> Patrick M. Ring
>> P. Ring Technologies
>> Louisiana Web Host, LLC.
>> 985-868-4200
>>
>> -Original Message-
>> From: Eric Shubert [mailto:e...@shubes.net]
>> Sent: Tuesday, June 08, 2010 11:28 AM
>> To: qmailtoaster-list@qmailtoaster.com
>> Subject: [qmailtoaster] Re: Receiving two copies of every mail.
>>
>> Nice catch, Patrick.
>>
>> Any idea how these entries may have gotten in the .qmail file(s)?
>> Just curious.
>>
>> --
>> -Eric 'shubes'
>>
>> Patrick Ring wrote:
>>> Sometimes it's also helpful to check your .qmail file in the accounts
> 
>>> where this happens.  It might be pushing the mail through the 
>>> spamfilter twice.  Remark or delete the second entry in the 
>>> /home/vpopmail/domains/yourdomain.com/youruser/.qmail file if this 
>>> happens. (at least this has worked for me)
>>>
>>> Patrick M. Ring
>>> P. Ring Technologies
>>> Louisiana Web Host, LLC.
>>> 985-868-4200
>>>
>>> -Original Message-
>>> From: Eric Shubert [mailto:e...@shubes.net]
>>> Sent: Tuesday, June 08, 2010 10:36 AM
>>> To: qmailtoaster-list@qmailtoaster.com
>>> Subject: [qmailtoaster] Re: Receiving two copies of every mail.
>>>
>>> Anil Aliyan wrote:
>>>> Hi All,
>>>>
>>>> I am receiving two copies of every mail from 
>>>> qmailtoaster-list@qmailtoaster.com
>>>> <mailto:qmailtoaster-list@qmailtoaster.com> since last couple of 
>>>> weeks, but I realised this yesterday only. This is not the case when
> 
>>>> I receive mails from any other mail domain or email address which 
>>>> makes
>>>> me believe that there is nothing wrong

[qmailtoaster] Receiving two copies of every mail.

[Anil Aliyan]

Hi All,

 

I am receiving two copies of every mail from
qmailtoaster-list@qmailtoaster.com since last couple of weeks, but I
realised this yesterday only. This is not the case when I receive mails from
any other mail domain or email address which makes me believe that there is
nothing wrong my side. 

 

Is anybody else facing this problem??? 

 

Regards,

 

Anil Aliyan

RE: [qmailtoaster] Horde Webmail Configuration (Important Note)

[Anil Aliyan]

Hi,

Yes you are right but I wanted to keep it simple .

But once the ip address is stored in the database it will not let you login
from any other ip address. You verify is by keeping the setting to true and
then login with same username from different machine or ip addresses.

Regards,

Anil Aliyan

-Original Message-
From: Maxwell Smart [mailto:c...@yother.com] 
Sent: Wednesday, June 02, 2010 7:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Horde Webmail Configuration (Important Note)

According to the text on the config page, that's not exactly what it
does.  It's per session.  I have it checked and have logged in from two
machines with different IP's with no problems.

Administration > Setup > Authentication > $conf[auth][checkip]  "Should
we always store and validate the IP address of the client (as seen by
the web server) in the session? Doing so will help increase security by
making it harder for an attacker from another host to hijack the session."

On 06/01/2010 11:19 PM, Anil Aliyan wrote:
> Hi ALL,
>
> Please don't forget to make an important change in horde config file. 
>
> In /var/www/html/horde/config/conf.php   file 
>
> Look for the 
> $conf['auth']['checkip'] = True;
>
> And change it to False.
>
> $conf['auth']['checkip'] = False;
>
> If you don't then once a user login into the webmail from a client
computer
> will not be able to login from other client computer with a different IP
> Address. 
>
> Keeping this setting to True means that the user will be using same ip
> address everytime to access his/her webmail account and will not be
allowed
> to login into the webmail from any other IP address.
>
> Disabling it will enable users to login into the webmail from any ip
> address.
>
>
> Regards,
>
> Anil Aliyan 
>
>
>

-
> Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and
installations.
>   If you need professional help with your setup, contact them today!
>

-
>  Please visit qmailtoaster.com for the latest news, updates, and
packages.
>  
>   To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
>  For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com
>
>
>   

-- 
Cecil Yother, Jr. "cj"
cj's
2318 Clement Ave
Alameda, CA  94501

tel 510.865.2787
http://yother.com



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Re: Horde Webmail

[Anil Aliyan]

Hi Eric,

I would love to help in building a horde package for toaster but I am not a
developer but I would like to team with someone who is developer and can
write codes.

Regards,

Anil Aliyan

-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, June 01, 2010 9:39 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Horde Webmail

Would (some of) you Horde users care to form a team to work on coming up 
with a horde-toaster package? I'd like to see a small group (2+) of 
horde users work on this. Any takers?

Anil Aliyan wrote:
> Hi All,
> 
>  
> 
> I am using Horde as webmail since last 5-6 yrs on my 5 mail servers 
> without any issue. Its very simple and easy to install/configure. I`ll 
> post a small installation guide soon.
> 
>  
> 
> Regards,
> 
>  
> 
> Anil Aliyan
> 
>  
> 
> *From:* Scott Hughes [mailto:sonicscott9...@gmail.com]
> *Sent:* Tuesday, June 01, 2010 4:00 AM
> *To:* qmailtoaster-list@qmailtoaster.com
> *Subject:* [qmailtoaster] Horde Webmail
> 
>  
> 
> I'm just curious if anyone is using Horde webmail on their QMT system?  
> If so, how difficult and involved was the install process.  Horde has a 
> lot of good features that I believe my users would benefit from, but it 
> also looks like a bear of an install and upkeep.
> 
> Thanks,
> Scott
> 


-- 
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Horde Webmail Configuration (Important Note)

[Anil Aliyan]

Hi ALL,

Please don't forget to make an important change in horde config file. 

In /var/www/html/horde/config/conf.php   file 

Look for the 
$conf['auth']['checkip'] = True;

And change it to False.

$conf['auth']['checkip'] = False;

If you don't then once a user login into the webmail from a client computer
will not be able to login from other client computer with a different IP
Address. 

Keeping this setting to True means that the user will be using same ip
address everytime to access his/her webmail account and will not be allowed
to login into the webmail from any other IP address.

Disabling it will enable users to login into the webmail from any ip
address.


Regards,

Anil Aliyan 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Horde Webmail Configuration Guide

[Anil Aliyan]

Hii,


You can set an administrator account in the
/var/www/html/horde/config/conf.php file. So whenever you login with the
assigned account it will show you the horde administration panel inside that
particular webmail account.

$conf['auth']['admins'] = array('Administrator'); <-- replace
Administrator with the email address
you want to be the horde administrator.

In that very file you can also specify that problem reporting email address
and disable or enable problem reporting feature. Look for the following
setting in the same conf.php file mentioned above.

$conf['problems']['email'] = 'webmas...@example.com';
$conf['problems']['maildomain'] = 'example.com';
$conf['problems']['tickets'] = false;
$conf['problems']['attachments'] = true;
$conf['menu']['apps'] = array();
$conf['menu']['always'] = false;
$conf['menu']['links']['help'] = 'all';
$conf['menu']['links']['options'] = 'authenticated';
$conf['menu']['links']['problem'] = 'all';
$conf['menu']['links']['login'] = 'all';
$conf['menu']['links']['logout'] = 'authenticated';



Regards,

Anil Aliyan



-Original Message-
From: Maxwell Smart [mailto:c...@yother.com] 
Sent: Tuesday, June 01, 2010 11:14 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Horde Webmail Configuration Guide

OK, cool.  That's what I thought.  Now just to find where you set the  
e mail address associated with it.

Quoting Scott Hughes :

> Looking it up on Google seems to indicate that it is an internal  
> reporting system. It states that you should be able to control where  
> the problem reports go to.
>
> Scott
>
>
>
>
> On Jun 1, 2010, at 1:04 PM, Maxwell Smart  wrote:
>
>> Anil,
>>
>> What is the Problem button for, internal or Horde notification?
>>
>> CJ
>>
>> Quoting Anil Aliyan :
>>
>>> Horde Configuration Guide:
>>>
>>> (Assuming  you are  using Centos 5 or RHEL 5 distro but horde
installation
>>> steps will remain same in all linux distros)
>>>
>>> Step 1:
>>>
>>> Download horde tar file into any downloads folder
>>>
>>> wget ftp://ftp.horde.org/pub/horde-webmail/horde-webmail-latest.tar.gz
>>>
>>> go to the www root folder.
>>>
>>> # cd /var/www/html
>>>
>>> # tar -zxvf /path to you horde download
folder/horde-webmail-latest.tar.gz
>>>
>>> # mv  horde-webmail-1.2.6  horde
>>>
>>> # cd  horde
>>>
>>> Install Required PHP modules:
>>>
>>> # yum -y install GeoIP geoip-devel gd ImageMagick ImageMagick-devel
>>> ImageMagick-perl
>>>
>>> # yum -y install php-mbstring php-gettext php-gd php-xml php-mcrypt
>>> php-pecl-Fileinfo
>>>
>>> # pecl install Imagic json LZF geoip
>>>
>>> edit   /etc/httpd/conf/httpd.conf  and add the following:
>>>
>>>
>>>
>>> 
>>> Options  Includes SymLinksIfOwnerMatch
>>> AllowOverride All
>>> Order allow,deny
>>> Allow from all
>>> AcceptPathInfo On
>>> php_flag track_vars On
>>> #php_admin_value memory_limit 384M
>>> php_admin_value post_max_size 20M
>>> 
>>>
>>>
>>>
>>> # service httpd restart
>>>
>>> http://your-server-ip/horde/test.php
>>>
>>> check if all required php modules are installed Step 2.
>>>
>>>
>>>
>>> Step 2:
>>>
>>> Now Configure Horde:
>>>
>>> # cd /var/www/html/horde
>>>
>>> Before executing the setup.php script we need to change the  
>>> default password
>>> for user horde in the sql script for horde database creation. If you
don't
>>> want to change the default password skip this step and directly to  
>>> Step3 and
>>> run the setup script:
>>>
>>> # vi scripts/sql/create.mysql.sql
>>>
>>> USE mysql;
>>>
>>> REPLACE INTO user (host, user, password)
>>>
>>>   VALUES (
>>>
>>>   'localhost',
>>>
>>>   'horde',
>>>
>>> -- IMPORTANT: Change this password.
>>>
>>>   PASSWORD('horde') <---(Change you
>>> p

[qmailtoaster] Horde Webmail Configuration Guide

[Anil Aliyan]

database requires a network connection. [y]

(y) Yes

(n) No

 

Type your choice: n

Done creating database.

 

 

Horde Groupware Webmail Edition Configuration Menu

(0) Exit

(1) Configure database settings

(2) Create database or tables

(3) Configure administrator settings

(4) Update PEAR for a new or changed location

(5) Update from an older Horde Groupware Webmail Edition version

 

Type your choice: 0

Thank you for using Horde Groupware Webmail Edition!

[r...@mail-srv horde]#

 

Your all done now with the basic installation of Horde. Go to the URL
http://your-server-ip/horde or https://yourmaildomain/horde   and login with
your email username and password.

 

To coustomise the webmail options/features/prefs you need to edit
imp/config/prefs.php file.

If need any help please write me an email.

Enjoy

 

 

Regards,

 

Anil Aliyan

 

 

From: Scott Hughes [mailto:sonicscott9...@gmail.com] 
Sent: Tuesday, June 01, 2010 4:00 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Horde Webmail

 

I'm just curious if anyone is using Horde webmail on their QMT system?  If
so, how difficult and involved was the install process.  Horde has a lot of
good features that I believe my users would benefit from, but it also looks
like a bear of an install and upkeep.

Thanks,
Scott

RE: [qmailtoaster] Horde Webmail

[Anil Aliyan]

Hi All,

 

I am using Horde as webmail since last 5-6 yrs on my 5 mail servers without
any issue. Its very simple and easy to install/configure. I`ll post a small
installation guide soon.

 

Regards,

 

Anil Aliyan

 

From: Scott Hughes [mailto:sonicscott9...@gmail.com] 
Sent: Tuesday, June 01, 2010 4:00 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Horde Webmail

 

I'm just curious if anyone is using Horde webmail on their QMT system?  If
so, how difficult and involved was the install process.  Horde has a lot of
good features that I believe my users would benefit from, but it also looks
like a bear of an install and upkeep.

Thanks,
Scott

RE: [qmailtoaster] Smart Host not working

[Anil Aliyan]

Hi,

 

Why SMART HOST would be asking for authentication

 

Authentication must be checked on the mailserver itself and not on the 
SMARTHOST, isn’t it so???

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, May 10, 2010 5:18 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Smart Host not working

 

Hi Jake,

Password is correct and same details work perfectly on another QMT Server. 
Please let me know what details you required?

Regards,

Amit

At Monday, 10-05-2010 on 17:09 Jake Vickers wrote:



On 05/08/2010 04:59 PM, Amit Dalia wrote: 

Hi Everyone,

On one of my server I'm using Smart Host to relay mail, but is not working and 
giving below error in send log:

2010-05-09 01:37:36.089135500 delivery 1: deferral: 
Connected_to_203.199.162.243_but_authentication_was_rejected_(password)./Remote_host_said:_503_Authentication_failed/

But same smart host is working on another QMT server.

Any help what can be issue?

Regards,

Amit


The entry you gave us would indicate a bad password, but we do not have any 
config files or logs to correlate this against.

RE: [qmailtoaster] Re: Error in Sending Mail -- ParserDetails ini not found error

[Anil Aliyan]

http://perl-xml.sourceforge.net/faq/#parserdetails.ini

 

 

3.18. "could not find ParserDetails.ini" 

 A number of people have reported encountering the error "could not find
ParserDetails.ini in ..." when installing or attempting to use XML::SAX.
ParserDetails.ini is used by XML::SAX::ParserFactory to determine which SAX
parser modules are installed. It should be created by the XML::SAX
installation script and should be updated automatically by the install
script for each SAX parser module.

 

If you are installing XML::SAX manually you must run Makefile.PL. Unpacking
the tarball and copying the files into your Perl lib directory will not
work.

 

During the initial installation, if you are asked whether ParserDetails.ini
should be updated, always say yes. If you say no, the file will not be
created.

 

If you are using ActivePerl, the following command should resolve the
problem: 

 

ppm install http://theoryx5.uwinnipeg.ca/ppms/XML-SAX.ppd

  

Once you have successfully installed XML::SAX, you should consider
installing a module such as XML::SAX::Expat or XML::LibXML to replace the
slower pure-Perl parser bundled with SAX.

 

If you are packaging XML::SAX in an alternative distribution format (such as
RPM), your post-install script should check if ParserDetails.ini exists and
if it doesn't, run this command:

 

perl -MXML::SAX -e
"XML::SAX->add_parser(q(XML::SAX::PurePerl))->save_parsers()"

  

Don't unconditionally run this command, or users who re-install XML::SAX may
find that any fast SAX parser they have installed will be replaced as the
default by the pure-Perl parser.

 

I hope this will help many of us who are facing this problem.

 

Regards,

 

Anil Aliyan

 

 

 

-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Wednesday, April 28, 2010 10:03 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Error in Sending Mail

 

Hey Amit,

 

I'm particularly interested in the --lint output which lists diag:, so I 

guess you could do:

# sudo -u vpopmail -H spamassassin -D --lint 2>&1 | grep "diag:"

That will show if modules that are used, and if any are missing.

 From what Steve said though, I'm not sure it will show what all is 

missing with XML/SAX.

 

The stock QMT does not use LDAP of any kind (that I'm aware of, and I'm 

pretty sure about that). FWIW, I hope to introduce an LDAP option (in 

place of MySQL) once vpopmail 5.5 is fully available. I don't know of an 

estimated target date for that, but I expect it will be at least several 

months from now. I'll be happy if we see it by the end of this year.

 

-- 

-Eric 'shubes'

 

Amit Dalia wrote:

> Dear Eric/Steve,

> 

> Sorry I agree I should google first.

> 

> Eric: Please find output of command "sudo -u vpopmail -H spamassassin -D 

> --lint" below:

> 

> [14326] dbg: rules: compiled meta tests

> [14326] dbg: check: running tests for priority: 1000

> [14326] dbg: rules: running head tests; score so far=4.205

> [14326] dbg: rules: compiled head tests

> [14326] dbg: rules: running body tests; score so far=4.205

> [14326] dbg: rules: compiled body tests

> [14326] dbg: rules: running uri tests; score so far=4.205

> [14326] dbg: rules: compiled uri tests

> [14326] dbg: rules: running rawbody tests; score so far=4.205

> [14326] dbg: rules: compiled rawbody tests

> [14326] dbg: rules: running full tests; score so far=4.205

> [14326] dbg: rules: compiled full tests

> [14326] dbg: rules: running meta tests; score so far=4.205

> [14326] dbg: rules: compiled meta tests

> [14326] dbg: check: is spam? score=4.205 required=5

> [14326] dbg: check: 

> tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS

> [14326] dbg: check: 

>
subtests=__HAS_MSGID,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_
MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY
,__UNUSABLE_MSGID

> 

> There was lot more but I thought to post last few line, if require will 

> post complete output.

> 

> Also I found that perl-LDAP module depands on perl-XML-SAX. Does QMT 

> perl-LDAP module(I don't think so)?

> 

> Regards,

> 

> Amit

> 

> At Wednesday, 28-04-2010 on 0:21 Eric Shubert wrote:

> 

> Steve Huff wrote:

>  > On Apr 27, 2010, at 2:18 PM, Eric Shubert wrote:

>  >

>  >> Perhaps there's another XML parser that is used if XML::SAX

> doesn't exist? I can only speculate. I expect that there are others

> on the list that know better than I do about this.

>  >

>  >

>  > it's the other way around; that error message indicates that

> XML::SAX is falling back to its built-in pure-P

RE: [qmailtoaster] Re: Error in Sending Mail

[Anil Aliyan]

Hi Amit/Eric

This is true that the spamassassin uses perl but why It needs ParserDetails.ini 
is not known, may just to make sure that all XML Parser modules are install and 
upto-date. When we do rpm install of XML-SAX this ParserDetails.ini file 
doesn’t gets created as it requires manual compilation and installation of the 
SAX and XML Parser modules, that’s what I have read few days back when I was 
updating my server and I faced the similar problem with qmail send. So I simply 
downloaded an ParserDetails.ini and placed in the perl SAX folder and every 
thing works fine now. Please find the ParserDetails.ini file attached with this 
mail.

Place it in the /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX
And everything should work now.


Regards,

Anil Aliyan



-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Wednesday, April 28, 2010 10:03 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Error in Sending Mail

Hey Amit,

I'm particularly interested in the --lint output which lists diag:, so I 
guess you could do:
# sudo -u vpopmail -H spamassassin -D --lint 2>&1 | grep "diag:"
That will show if modules that are used, and if any are missing.
 From what Steve said though, I'm not sure it will show what all is 
missing with XML/SAX.

The stock QMT does not use LDAP of any kind (that I'm aware of, and I'm 
pretty sure about that). FWIW, I hope to introduce an LDAP option (in 
place of MySQL) once vpopmail 5.5 is fully available. I don't know of an 
estimated target date for that, but I expect it will be at least several 
months from now. I'll be happy if we see it by the end of this year.

-- 
-Eric 'shubes'

Amit Dalia wrote:
> Dear Eric/Steve,
> 
> Sorry I agree I should google first.
> 
> Eric: Please find output of command "sudo -u vpopmail -H spamassassin -D 
> --lint" below:
> 
> [14326] dbg: rules: compiled meta tests
> [14326] dbg: check: running tests for priority: 1000
> [14326] dbg: rules: running head tests; score so far=4.205
> [14326] dbg: rules: compiled head tests
> [14326] dbg: rules: running body tests; score so far=4.205
> [14326] dbg: rules: compiled body tests
> [14326] dbg: rules: running uri tests; score so far=4.205
> [14326] dbg: rules: compiled uri tests
> [14326] dbg: rules: running rawbody tests; score so far=4.205
> [14326] dbg: rules: compiled rawbody tests
> [14326] dbg: rules: running full tests; score so far=4.205
> [14326] dbg: rules: compiled full tests
> [14326] dbg: rules: running meta tests; score so far=4.205
> [14326] dbg: rules: compiled meta tests
> [14326] dbg: check: is spam? score=4.205 required=5
> [14326] dbg: check: 
> tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS
> [14326] dbg: check: 
> subtests=__HAS_MSGID,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY,__UNUSABLE_MSGID
> 
> There was lot more but I thought to post last few line, if require will 
> post complete output.
> 
> Also I found that perl-LDAP module depands on perl-XML-SAX. Does QMT 
> perl-LDAP module(I don't think so)?
> 
> Regards,
> 
> Amit
> 
> At Wednesday, 28-04-2010 on 0:21 Eric Shubert wrote:
> 
> Steve Huff wrote:
>  > On Apr 27, 2010, at 2:18 PM, Eric Shubert wrote:
>  >
>  >> Perhaps there's another XML parser that is used if XML::SAX
> doesn't exist? I can only speculate. I expect that there are others
> on the list that know better than I do about this.
>  >
>  >
>  > it's the other way around; that error message indicates that
> XML::SAX is falling back to its built-in pure-Perl parser, and the
> fix is to install a better one (or to take action that indicates to
> XML::SAX that yes, you really do want it to use the pure-Perl
> parser). it's all in the FAQ.
>  >
>  > -shuff
>  >
>  > --
> 
> Ah, I see. That makes sense. I read the FAQ but that wasn't clear to me.
> 
> I still wonder though which package Amit could be missing.
> Amit, can you post the result of:
> # sudo -u vpopmail -H spamassassin -D --lint
> 
> -- 
> -Eric 'shubes'
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> 
> -
> Please visi

RE: [qmailtoaster] domainkeys mulitple domain issue

[Anil Aliyan]

Hi Amit,

 

Please create two new files 

/var/qmail/control/domain1   ß Enter  sem-pune.in  in the file and save

 

/var/qmail/control/domain2   ß Enter  sem-pune.co.in  in the file and save

 

Then edit you signconf.xml as below:

 



  

  



  

 

  < sem-pune.in  domain="/var/qmail/control/domain1" selector="dkim1">





  

 

  < sem-pune.co.in  domain="/var/qmail/control/domain2" selector="dkim1">





  

 



 

Regards,

 

Anil Aliyan

 

 

RE: [qmailtoaster] domainkeys mulitple domain issue

[Anil Aliyan]

Please read my previous mail and edit your signconfig.xml file accordingly

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Wednesday, April 14, 2010 5:53 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

Dear Anil,

I tried what you had told but seems like its not working. Its just picking 
domain from file "/var/qmail/control/me".

Any help?

Regards,

Amit

At Wednesday, 14-04-2010 on 16:46 Anil Aliyan wrote:



Hi Rob,

 

My answer are regarding DKIM which signs mails for both DKIM and Domainkeys.

 

Regards,

 

Anil Aliyan

 

From: Rob Wellard [mailto:r...@brainiacmedia.net] 
Sent: Wednesday, April 14, 2010 4:25 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

Hi Anil 

 

Thanks a million for answering my question, i really appreciate it. 

 

Quick question. Are you referring to domainkeys here or dkim? I am having a 
problem with domainkeys and have not setup dkim, thats my next step. 

 

Thanks

 

Rob

 

 

From: Anil Aliyan [mailto:acali...@gnvfc.net] 
Sent: 14 April 2010 11:15
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

Hi All,

 

First of all mail server must be configured properly to work everything 
smoothly, such as hostname and other virtual domains etc must exists in the 
/etc/hosts file.

 

Most Importantly RDNS must exist for all the domains.

 

If all the domain share single ip address then all domain must be entered in 
the /etc/hosts file against that ip address.

 Example:

 

1.2.3.1   mail.vanaz.com mail.bbc.com 
mail.cnn.com 

 

Secondly, the key that all the domain get signed by the DKIM for all the domain 
is the singconf.xml file. Example given below:

 

The default signconf.xml file contains the first section in brown color below 
with a domain=”/var/qmail/control/me” in it. Remove this line and add 
query="dns". Coz of this the dkim looks for the hostname or domains in the 
“/var/qmail/control/me” file to sign the mails for.  Add your domains 
individually as shown in the example below. 

 



  

  



  

 

After modification your signconf.xml file should look like as in example given 
below, and if everything is set accordingly then everything should work:

 



  

  





  

 

  





  

 

  





  

 

  





  

 

   

 

Regards,

 

Anil Aliyan   

 

From: Rob Wellard [mailto:r...@brainiacmedia.net] 
Sent: Wednesday, April 14, 2010 12:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

I Guess nobody knows the answer, if i work it out, ill let you know. 

 

Rob

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: 14 April 2010 05:40
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] domainkeys mulitple domain issue

 

Hi Everyone,

Any help on how to setup DKIM for multiple domains on the same QMT server? I'm 
getting below error.

Regards,

Amit

At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote:

Hi Everyone,

Even I was going to post this today. I had got around 15 domains on the same 
toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it 
is signing only 1 domain perfectly but other domains are getting bad signature.

Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 
is neither permitted nor denied by domain of i...@sem-pune.in 
<mailto:a...@vanaz.com> ) smtp.mail= <mailto:smtp.mail=a...@vanaz.com> 
i...@sem-pune.in <mailto:a...@vanaz.com> ; dkim=neutral (no key)  
<mailto:header...@mailserver> header...@webapplication.co.in

My server hostname is mail.webapplication.co.in.

How do I replace header.i value for respective domain.

Thanks and regards,

Amit


At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote:

I have the latest toaster installed, Everything works beautifully. However i 
seem to be getting a weird problem with the domainkey. I have several domains 
on the one toaster, and i can get the last one working perfectly, however the 
rest come back with bad signature. And it’s always the latest one that seems to 
work. Is there something i am doing wrong.  Please can you help

 

RE: [qmailtoaster] domainkeys mulitple domain issue

[Anil Aliyan]

Hi Rob,

 

My answer are regarding DKIM which signs mails for both DKIM and Domainkeys.

 

Regards,

 

Anil Aliyan

 

From: Rob Wellard [mailto:r...@brainiacmedia.net] 
Sent: Wednesday, April 14, 2010 4:25 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

Hi Anil 

 

Thanks a million for answering my question, i really appreciate it. 

 

Quick question. Are you referring to domainkeys here or dkim? I am having a 
problem with domainkeys and have not setup dkim, thats my next step. 

 

Thanks

 

Rob

 

 

From: Anil Aliyan [mailto:acali...@gnvfc.net] 
Sent: 14 April 2010 11:15
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

Hi All,

 

First of all mail server must be configured properly to work everything 
smoothly, such as hostname and other virtual domains etc must exists in the 
/etc/hosts file.

 

Most Importantly RDNS must exist for all the domains.

 

If all the domain share single ip address then all domain must be entered in 
the /etc/hosts file against that ip address.

 Example:

 

1.2.3.1   mail.vanaz.com mail.bbc.com 
mail.cnn.com 

 

Secondly, the key that all the domain get signed by the DKIM for all the domain 
is the singconf.xml file. Example given below:

 

The default signconf.xml file contains the first section in brown color below 
with a domain=”/var/qmail/control/me” in it. Remove this line and add 
query="dns". Coz of this the dkim looks for the hostname or domains in the 
“/var/qmail/control/me” file to sign the mails for.  Add your domains 
individually as shown in the example below. 

 



  

  



  

 

After modification your signconf.xml file should look like as in example given 
below, and if everything is set accordingly then everything should work:

 



  

  





  

 

  





  

 

  





  

 

  





  

 

   

 

Regards,

 

Anil Aliyan   

 

From: Rob Wellard [mailto:r...@brainiacmedia.net] 
Sent: Wednesday, April 14, 2010 12:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

I Guess nobody knows the answer, if i work it out, ill let you know. 

 

Rob

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: 14 April 2010 05:40
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] domainkeys mulitple domain issue

 

Hi Everyone,

Any help on how to setup DKIM for multiple domains on the same QMT server? I'm 
getting below error.

Regards,

Amit

At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote:

Hi Everyone,

Even I was going to post this today. I had got around 15 domains on the same 
toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it 
is signing only 1 domain perfectly but other domains are getting bad signature.

Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 
is neither permitted nor denied by domain of i...@sem-pune.in 
<mailto:a...@vanaz.com> ) smtp.mail= <mailto:smtp.mail=a...@vanaz.com> 
i...@sem-pune.in <mailto:a...@vanaz.com> ; dkim=neutral (no key)  
<mailto:header...@mailserver> header...@webapplication.co.in

My server hostname is mail.webapplication.co.in.

How do I replace header.i value for respective domain.

Thanks and regards,

Amit


At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote:

I have the latest toaster installed, Everything works beautifully. However i 
seem to be getting a weird problem with the domainkey. I have several domains 
on the one toaster, and i can get the last one working perfectly, however the 
rest come back with bad signature. And it’s always the latest one that seems to 
work. Is there something i am doing wrong.  Please can you help

 

RE: [qmailtoaster] domainkeys mulitple domain issue

[Anil Aliyan]

Hi All,

 

First of all mail server must be configured properly to work everything 
smoothly, such as hostname and other virtual domains etc must exists in the 
/etc/hosts file.

 

Most Importantly RDNS must exist for all the domains.

 

If all the domain share single ip address then all domain must be entered in 
the /etc/hosts file against that ip address.

 Example:

 

1.2.3.1   mail.vanaz.com mail.bbc.com 
mail.cnn.com 

 

Secondly, the key that all the domain get signed by the DKIM for all the domain 
is the singconf.xml file. Example given below:

 

The default signconf.xml file contains the first section in brown color below 
with a domain=”/var/qmail/control/me” in it. Remove this line and add 
query="dns". Coz of this the dkim looks for the hostname or domains in the 
“/var/qmail/control/me” file to sign the mails for.  Add your domains 
individually as shown in the example below. 

 



  

  



  

 

After modification your signconf.xml file should look like as in example given 
below, and if everything is set accordingly then everything should work:

 



  

  





  

 

  





  

 

  





  

 

  





  

 

   

 

Regards,

 

Anil Aliyan   

 

From: Rob Wellard [mailto:r...@brainiacmedia.net] 
Sent: Wednesday, April 14, 2010 12:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

I Guess nobody knows the answer, if i work it out, ill let you know. 

 

Rob

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: 14 April 2010 05:40
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] domainkeys mulitple domain issue

 

Hi Everyone,

Any help on how to setup DKIM for multiple domains on the same QMT server? I'm 
getting below error.

Regards,

Amit

At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote:

Hi Everyone,

Even I was going to post this today. I had got around 15 domains on the same 
toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it 
is signing only 1 domain perfectly but other domains are getting bad signature.

Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 
is neither permitted nor denied by domain of i...@sem-pune.in 
<mailto:a...@vanaz.com> ) smtp.mail= <mailto:smtp.mail=a...@vanaz.com> 
i...@sem-pune.in <mailto:a...@vanaz.com> ; dkim=neutral (no key)  
<mailto:header...@mailserver> header...@webapplication.co.in

My server hostname is mail.webapplication.co.in.

How do I replace header.i value for respective domain.

Thanks and regards,

Amit


At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote:

I have the latest toaster installed, Everything works beautifully. However i 
seem to be getting a weird problem with the domainkey. I have several domains 
on the one toaster, and i can get the last one working perfectly, however the 
rest come back with bad signature. And it’s always the latest one that seems to 
work. Is there something i am doing wrong.  Please can you help

 

RE: [qmailtoaster] domainkeys mulitple domain issue

[Anil Aliyan]

Dear Amit,

 

Have u published the dkim public in the DNS records of all these domains If 
you are using single key for all the domain then all the domain should have 
same key in the dns records.

 

Regards,

 

Anil Aliyan

 

From: Rob Wellard [mailto:r...@brainiacmedia.net] 
Sent: Wednesday, April 14, 2010 12:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] domainkeys mulitple domain issue

 

I Guess nobody knows the answer, if i work it out, ill let you know. 

 

Rob

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: 14 April 2010 05:40
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] domainkeys mulitple domain issue

 

Hi Everyone,

Any help on how to setup DKIM for multiple domains on the same QMT server? I'm 
getting below error.

Regards,

Amit

At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote:

Hi Everyone,

Even I was going to post this today. I had got around 15 domains on the same 
toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it 
is signing only 1 domain perfectly but other domains are getting bad signature.

Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 
is neither permitted nor denied by domain of i...@sem-pune.in 
<mailto:a...@vanaz.com> ) smtp.mail= <mailto:smtp.mail=a...@vanaz.com> 
i...@sem-pune.in <mailto:a...@vanaz.com> ; dkim=neutral (no key)  
<mailto:header...@mailserver> header...@webapplication.co.in

My server hostname is mail.webapplication.co.in.

How do I replace header.i value for respective domain.

Thanks and regards,

Amit


At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote:

I have the latest toaster installed, Everything works beautifully. However i 
seem to be getting a weird problem with the domainkey. I have several domains 
on the one toaster, and i can get the last one working perfectly, however the 
rest come back with bad signature. And it’s always the latest one that seems to 
work. Is there something i am doing wrong.  Please can you help

 

RE: [qmailtoaster] disable mx check in chkuser

[Anil Aliyan]

By commenting #define CHKUSER_SENDER_MX the desired purpose can be achieved.
Suppose you send mail to 10 recipients and out of those 2 are not valid or
are wrong email addresses, then mail to the rest 8 recipients will be
delivered and for rest 2 email addresses you will receive message something
like example given below:

Your message did not reach some or all of the intended recipients.

  Subject:  Report
  Sent: 4/6/2010 2:00 PM

The following recipient(s) cannot be reached:

  'acal...@gnvfc.net' on 4/6/2010 2:00 PM
511 sorry, no mailbox here by that name (#5.1.1 - chkuser)


Regards,

Anil Aliyan 


-Original Message-
From: Lucian Cristian [mailto:l...@createc.ro] 
Sent: Tuesday, April 06, 2010 1:43 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] disable mx check in chkuser

You will have to modify the CHKUSER_SENDER_FORMAT too
like this
//#define CHKUSER_RCPT_FORMAT
and for outgoing
//#define CHKUSER_SENDER_MX
//#define CHKUSER_SENDER_FORMAT

Regards
Lucian

Rajesh M wrote:
> hi
>
> sorry but your reply does not solve my problem.
>
> people add email addresses to their address book and some times there are
> errors which are bound to come up.
>
> let us say my customer is sending to around 100 users and one of the id's
> are incorrect -- the way i need to handle is either point out where the
> error ie which email id is wrong, or alternatively let all the emails go
> and the bad one to bounce. i don't want the customer to go thru every
> single email id and try to figure out which one is wrong.
>
> chkuser can definitely be disabled if required -- but what i need to do is
> disable only mx check and that too only for a specific ip address those
> emails that originate from within my server
>
> thanks
> rajesh
>
>
>
>   
>> Rajesh,
>>
>> Maybe your customers should be more careful entering the address they
>> are sending to?  You can't make everything stupid proof.
>>
>> I don't think you can disable CHKUSER nor do I think you'd want to.
>> This occurs not only in Squirrelmail, but in Thunderbird and other e
>> mail clients when the recipient is addressed incorrectly.
>>
>> CJ
>>
>> On 04/05/2010 07:35 PM, Rajesh M wrote:
>> 
>>> hi
>>>
>>> i use squirrelmail
>>>
>>> when customers send emails to a number of people from webmail then if
>>> there is one address that is wrong the message that is shown is
>>>
>>> #5.1.1 chkuser - can't find valid MX for rcpt domain
>>>
>>> however the exact domain name where the problem exists is not shown
>>>
>>> here i see two ways out
>>>
>>> a) either i get the exact email id which has the problem, but i am not
>>> sure whether squirrelmail needs to be modified or chkuser --- this would
>>> be ideal.
>>>
>>> b) the easy way -- disable chkuser MX checks for webmail users so that
>>> the
>>> bad email id bounces back after some time. could you please guide me on
>>> how to do this ?
>>>
>>> thanks
>>> rajesh
>>>
>>>
>>>
>>>
>>>
>>>
>>>

-
>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>> (www.vickersconsulting.com)
>>> Vickers Consulting Group offers Qmailtoaster support and
>>> installations.
>>>   If you need professional help with your setup, contact them today!
>>>

-
>>>  Please visit qmailtoaster.com for the latest news, updates, and
>>> packages.
>>>
>>>   To unsubscribe, e-mail:
>>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>  For additional commands, e-mail:
>>> qmailtoaster-list-h...@qmailtoaster.com
>>>
>>>
>>>
>>>   
>> --
>> Cecil Yother, Jr. "cj"
>> cj's
>> 2318 Clement Ave
>> Alameda, CA  94501
>>
>> tel 510.865.2787 | fax 510.864.7300
>> http://yother.com
>>
>>
>>

-
>> Qmailtoaster is sponsored by Vickers Consulting Group
>> (www.vickersconsulting.com)
>> Vickers Consulting Group offers Qmailtoaster support and
>> installations.
>>   If you need professional help with your setup, contact them today!
>>

-

[qmailtoaster] disable mx check in chkuser

[Anil Aliyan]

Dear Rajesh,

Please refer to the url mentioned below to solve your problem:

http://wiki.qmailtoaster.org/index.php/Chkuser

Chkuser

>From QMail-Toaster

chkuser configuration is not configurable on the fly. Configuration settings
currently in use are documented at /var/qmail/doc/chkuser_settings.h. 

To tailor your chkuser settings, use the following procedure (provided by
Nick): 

 # rpm -Uvh qmail-toaster*.src.rpm

 # cd /usr/src/redhat/SPECS (assuming you are using CentOS 4)

edit qmail-toaster.spec. find 'sleep 5' (should be line 606). change 5 to
300 (5 seconds to 300 seconds). save. 

 # rpmbuild -bb --with cnt40 qmail-toaster.spec

(use the appropriate --with value for your distro) 

When the build process pauses, open another terminal and edit
/usr/src/redhat/BUILD/qmail-1.03/chkuser_settings.h to your liking. You have
5 minutes (or whatever you changed the sleep parameter to). Save your
changes and wait for the 300 seconds to expire and watch it build. 

Search for 

#define CHKUSER_RCPT_MX(4th statement from below in the
chkuser_settings.h file)

Modify the line to comment it.

Before change : 

#define CHKUSER_RCPT_MX

After Change :

/* #define CHKUSER_RCPT_MX */

 

Then save the file and let the rpm rebuild

 

 # cd ../RPMS/i386/

 # qmailctl stop

 # rpm -Uvh --replacefiles --replacepkgs qmail-*.rpm

 # qmailctl start

That's the procedure for now. 

 

Regards,

 

Anil Aliyan

 

 




hi

 

i use squirrelmail

 

when customers send emails to a number of people from webmail then if there
is one address that is wrong the message that is shown is

 

#5.1.1 chkuser - can't find valid MX for rcpt domain

 

however the exact domain name where the problem exists is not shown

 

here i see two ways out

 

a) either i get the exact email id which has the problem, but i am not sure
whether squirrelmail needs to be modified or chkuser --- this would be
ideal.

 

b) the easy way -- disable chkuser MX checks for webmail users so that the
bad email id bounces back after some time. could you please guide me on how
to do this ?

 

thanks

rajesh

 

 

 

 

 

 


-

Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)

Vickers Consulting Group offers Qmailtoaster support and installations.

  If you need professional help with your setup, contact them today!


-

 Please visit qmailtoaster.com for the latest news, updates, and
packages.

 

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Now send a test mail to me and yourself and check the headers if you see 
signatures for both DKIM and Domainkey.

 

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 6:30 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Yes, dkim1._domainkey.vanaz.com is the same key which I generate for DKIM.
Second, right now DKSIGN="/var/qmail/control/%/private". So do I modify it to 
DKSIGN="".

Regards,

Amit

At Monday, 05-04-2010 on 18:23 Anil Aliyan wrote:



Dear Amit,


1) do I need to remove delete domainkey folder from control? 

 

Simply rename the domainkey folder to domain-key or something else , that’s 
upto you.


2) do I need to modify DKSIGN="" in tcp.smtp?   

 

You don’t have to make any changes in your tcp.smtp, just keep them as it is. 


3) do I need to modify my DNS server entries and if yes then what the new entry 
I should made?

 

If the DNS entry for dkim1._domainkey.vanza.com is the same key you have 
generated for DKIM then you need not do anything else. Just keep the same key 
and same key will be used for verification of botk DKIM and Domainkey.

 

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 6:13 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Ok. After modifying this, I have queries:
1) do I need to remove delete domainkey folder from control? 
2) do I need to modify DKSIGN="" in tcp.smtp?
3) do I need to modify my DNS server entries and if yes then what the new entry 
I should made?

Thanks and regards,

Amit

At Monday, 05-04-2010 on 18:05 Anil Aliyan wrote:

By default singconf.xml file contains on first line as below and only signs for 
DKIM:

 



  

  



  

 



 

But if you want to sign mails for Domainkeys as well then you will have to add 
one more line just below   and above  in the above 
example:

 



 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:52 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

I have not looked into possibility of having Domainkey and DKIM signed by DKIM 
as
I installed qmailtoaster with Domainkey first and then added DKIM functionality 
and for this
reason I'd keep them separate.

Regards
Alex


On 05/04/2010 13:15, Anil Aliyan wrote: 

Dear Alex,

 

I do agree with you and we can use two different keys but them you will have to 
use both DKIM and Domainkeys separately and need to configure them separately. 
But when DKIM alone can handle both DKIM and Domainkeys with single key its not 
required to configure serparately.

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:41 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is no reason why different keys cannot be used for Domainkey and DKIM.
I am using different keys and have had no problems so far.



Regards
Alex 


On 05/04/2010 13:01, Anil Aliyan wrote: 

I have checked both the entries exists but not updated globally yet. BUT BOTH 
KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys

 

 

If you run dig command from your server you can see these records:

 

dig txt _domainkey.vanza.com(Answers as Below)

 

[r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt dkim1._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27481

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;dkim1._domainkey.vanaz.com.IN  TXT

 

;; ANSWER SECTION:

dkim1._domainkey.vanaz.com. 3600 IN TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB"

 

;; AUTHORITY SECTION:

vanaz.com.  172368  IN  NS  ns2.iknowledgefactory.com.

vanaz.com.  172368  IN  NS  ns.iknowledgefactory.com.

 

[r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt private._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54065

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

 

;; QUESTION SECTION:

;private._domainkey.vanaz.com.  IN  TXT

 

;; ANSWER SECTION:

private._domainkey.vanaz.com. 2753 IN   TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB"

 

Regards,

 

Anil Aliyan

 

From: Pos

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

That’s nice. If you would have simply renamed the domainkey folder would have 
served the purpose. Coz if the domainkey folder doesn’t exist that line in the 
tcp.smtp will not have any effect.

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 6:30 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Yes, dkim1._domainkey.vanaz.com is the same key which I generate for DKIM.
Second, right now DKSIGN="/var/qmail/control/%/private". So do I modify it to 
DKSIGN="".

Regards,

Amit

At Monday, 05-04-2010 on 18:23 Anil Aliyan wrote:



Dear Amit,


1) do I need to remove delete domainkey folder from control? 

 

Simply rename the domainkey folder to domain-key or something else , that’s 
upto you.


2) do I need to modify DKSIGN="" in tcp.smtp?   

 

You don’t have to make any changes in your tcp.smtp, just keep them as it is. 


3) do I need to modify my DNS server entries and if yes then what the new entry 
I should made?

 

If the DNS entry for dkim1._domainkey.vanza.com is the same key you have 
generated for DKIM then you need not do anything else. Just keep the same key 
and same key will be used for verification of botk DKIM and Domainkey.

 

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 6:13 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Ok. After modifying this, I have queries:
1) do I need to remove delete domainkey folder from control? 
2) do I need to modify DKSIGN="" in tcp.smtp?
3) do I need to modify my DNS server entries and if yes then what the new entry 
I should made?

Thanks and regards,

Amit

At Monday, 05-04-2010 on 18:05 Anil Aliyan wrote:

By default singconf.xml file contains on first line as below and only signs for 
DKIM:

 



  

  



  

 



 

But if you want to sign mails for Domainkeys as well then you will have to add 
one more line just below   and above  in the above 
example:

 



 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:52 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

I have not looked into possibility of having Domainkey and DKIM signed by DKIM 
as
I installed qmailtoaster with Domainkey first and then added DKIM functionality 
and for this
reason I'd keep them separate.

Regards
Alex


On 05/04/2010 13:15, Anil Aliyan wrote: 

Dear Alex,

 

I do agree with you and we can use two different keys but them you will have to 
use both DKIM and Domainkeys separately and need to configure them separately. 
But when DKIM alone can handle both DKIM and Domainkeys with single key its not 
required to configure serparately.

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:41 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is no reason why different keys cannot be used for Domainkey and DKIM.
I am using different keys and have had no problems so far.



Regards
Alex 


On 05/04/2010 13:01, Anil Aliyan wrote: 

I have checked both the entries exists but not updated globally yet. BUT BOTH 
KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys

 

 

If you run dig command from your server you can see these records:

 

dig txt _domainkey.vanza.com(Answers as Below)

 

[r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt dkim1._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27481

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;dkim1._domainkey.vanaz.com.IN  TXT

 

;; ANSWER SECTION:

dkim1._domainkey.vanaz.com. 3600 IN TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB"

 

;; AUTHORITY SECTION:

vanaz.com.  172368  IN  NS  ns2.iknowledgefactory.com.

vanaz.com.  172368  IN  NS  ns.iknowledgefactory.com.

 

[r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt private._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54065

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

 

;; QUESTION SECTION:

;private._domainkey.vanaz.com.  IN  TXT

 

;; ANSWER SECTION:

private._domainkey.vanaz.com. 2753 IN   TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Dear Amit,


1) do I need to remove delete domainkey folder from control? 

 

Simply rename the domainkey folder to domain-key or something else , that’s 
upto you.


2) do I need to modify DKSIGN="" in tcp.smtp?   

 

You don’t have to make any changes in your tcp.smtp, just keep them as it is. 


3) do I need to modify my DNS server entries and if yes then what the new entry 
I should made?

 

If the DNS entry for dkim1._domainkey.vanza.com is the same key you have 
generated for DKIM then you need not do anything else. Just keep the same key 
and same key will be used for verification of botk DKIM and Domainkey.

 

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 6:13 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Ok. After modifying this, I have queries:
1) do I need to remove delete domainkey folder from control? 
2) do I need to modify DKSIGN="" in tcp.smtp?
3) do I need to modify my DNS server entries and if yes then what the new entry 
I should made?

Thanks and regards,

Amit

At Monday, 05-04-2010 on 18:05 Anil Aliyan wrote:



By default singconf.xml file contains on first line as below and only signs for 
DKIM:

 



  

  



  

 



 

But if you want to sign mails for Domainkeys as well then you will have to add 
one more line just below   and above  in the above 
example:

 



 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:52 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

I have not looked into possibility of having Domainkey and DKIM signed by DKIM 
as
I installed qmailtoaster with Domainkey first and then added DKIM functionality 
and for this
reason I'd keep them separate.

Regards
Alex


On 05/04/2010 13:15, Anil Aliyan wrote: 

Dear Alex,

 

I do agree with you and we can use two different keys but them you will have to 
use both DKIM and Domainkeys separately and need to configure them separately. 
But when DKIM alone can handle both DKIM and Domainkeys with single key its not 
required to configure serparately.

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:41 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is no reason why different keys cannot be used for Domainkey and DKIM.
I am using different keys and have had no problems so far.



Regards
Alex 


On 05/04/2010 13:01, Anil Aliyan wrote: 

I have checked both the entries exists but not updated globally yet. BUT BOTH 
KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys

 

 

If you run dig command from your server you can see these records:

 

dig txt _domainkey.vanza.com(Answers as Below)

 

[r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt dkim1._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27481

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;dkim1._domainkey.vanaz.com.IN  TXT

 

;; ANSWER SECTION:

dkim1._domainkey.vanaz.com. 3600 IN TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB"

 

;; AUTHORITY SECTION:

vanaz.com.  172368  IN  NS  ns2.iknowledgefactory.com.

vanaz.com.  172368  IN  NS  ns.iknowledgefactory.com.

 

[r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt private._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54065

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

 

;; QUESTION SECTION:

;private._domainkey.vanaz.com.  IN  TXT

 

;; ANSWER SECTION:

private._domainkey.vanaz.com. 2753 IN   TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB"

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is another problem.

You should have two entries for Domainkeys and one entry for DKIM:

Domainkey:
- _domainkey.vanaz.com
- private._domainkey.vanaz.com

Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys

DKIM:
- dkim1._domainkey.vanaz.com

Please refer to video.qmailtoaster.com

One of your TXT records is for vanaz.com rather than _domainkey.va

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Make you signconf.xml look like this :

 



  

  



  

 

  





  

 



 

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 6:09 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Please find my signconf.xml file contains is below:


  
  

  



But your file doesn't contain this. So do I modify my file as per you mentioned.

Regards,

Amit

At Monday, 05-04-2010 on 17:39 Anil Aliyan wrote:



Dear Amit,

 

Please ignore my last mail about smarthost. Your mail signed by you main mail 
server should work actually.

 

I have checked your test message and it is signed by DKIM but doesn’t singed 
for Domainkeys. You need to entry for both in your signconf.xml file:  Your 
file should look like below mentioned example:

 



  

  



  

 

  





  

 



 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 5:30 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Please check I had send test mail on your email id.

Regards,

Amit

At Monday, 05-04-2010 on 17:26 Postmaster wrote:

It may take a while for the DNS entries to propagate.
Send an e-mail with test in the subject line to sa-t...@sendmail.net

and you should have a reply with output like this shortly:



sendmail.net Sender Authentication Auto-Responder $Revision: 1.19 $











This service runs at  <mailto:sa-t...@sendmail.net>  and 
allows remote users





to perform a simple, automated test to see if different Sender





Authentication schemes are working.  Mail sent to this service





is checked by our Sender Authentication filters for any valid





credentials or signatures.  A script receives the message, checks





for a special header with the results of the tests, and composes





this response message based on what it finds.  This response is also





signed with DomainKeys and DomainKeys Identified Mail (DKIM).











Please note that the DKIM filter signing this reply message conforms





to the latest IETF draft version, and thus may not be successfully





verified by older implementations.  If you are using dkim-filter from





Sendmail, Inc., upgrade to at least version 1.0.0 to be compatible





with the most recent version of DKIM.











We hope this service has been helpful to you.











Authentication System:   DomainKeys Identified Mail





   Result:   DKIM signature confirmed GOOD





   Description:  Signature verified, message arrived intact





   Reporting host:   sendmail.net





   More information: http://mipassoc.org/dkim/





   Sendmail milter:  https://sourceforge.net/projects/dkim-milter/











Authentication System:   Domain Keys 





   Result:   DK signature confirmed GOOD





   Description:  Signature verified, message arrived intact





   Reporting host:   sendmail.net





   More information: http://antispam.yahoo.com/domainkeys





   Sendmail milter:  https://sourceforge.net/projects/domainkeys-milter/











Authentication System:   Sender ID   





   Result:   SID data confirmed GOOD





   Description:  Sending host is authorized for sending domain





   Reporting host:   sendmail.net





   More information: http://www.microsoft.com/senderid





   Sendmail milter:  https://sourceforge.net/projects/sid-milter/











Authentication System:   Sender Permitted From (SPF)





   Result:   SPF data confirmed GOOD





   Description:  Sending host is authorized for sending domain





   Reporting host:   sendmail.net





   More information: http://spf.pobox.com/

Regards
Alex


On 05/04/2010 12:46, Amit Dalia wrote: 

Dear Anil,

Yes I saw that and modified it on my DNS server. Also I had setup DKIM for my 
server as per Jake Video on settuping up DKIM.

I think, I have to check it know whether its working or not, so how can I check 
it?

Regards,

Amit

At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote:

Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails ge

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

By default singconf.xml file contains on first line as below and only signs for 
DKIM:

 



  

  



  

 



 

But if you want to sign mails for Domainkeys as well then you will have to add 
one more line just below   and above  in the above 
example:

 



 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:52 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

I have not looked into possibility of having Domainkey and DKIM signed by DKIM 
as
I installed qmailtoaster with Domainkey first and then added DKIM functionality 
and for this
reason I'd keep them separate.

Regards
Alex


On 05/04/2010 13:15, Anil Aliyan wrote: 

Dear Alex,

 

I do agree with you and we can use two different keys but them you will have to 
use both DKIM and Domainkeys separately and need to configure them separately. 
But when DKIM alone can handle both DKIM and Domainkeys with single key its not 
required to configure serparately.

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:41 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is no reason why different keys cannot be used for Domainkey and DKIM.
I am using different keys and have had no problems so far.



Regards
Alex 


On 05/04/2010 13:01, Anil Aliyan wrote: 

I have checked both the entries exists but not updated globally yet. BUT BOTH 
KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys

 

 

If you run dig command from your server you can see these records:

 

dig txt _domainkey.vanza.com(Answers as Below)

 

[r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt dkim1._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27481

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;dkim1._domainkey.vanaz.com.IN  TXT

 

;; ANSWER SECTION:

dkim1._domainkey.vanaz.com. 3600 IN TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB"

 

;; AUTHORITY SECTION:

vanaz.com.  172368  IN  NS  ns2.iknowledgefactory.com.

vanaz.com.  172368  IN  NS  ns.iknowledgefactory.com.

 

[r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt private._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54065

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

 

;; QUESTION SECTION:

;private._domainkey.vanaz.com.  IN  TXT

 

;; ANSWER SECTION:

private._domainkey.vanaz.com. 2753 IN   TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB"

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is another problem.

You should have two entries for Domainkeys and one entry for DKIM:

Domainkey:
- _domainkey.vanaz.com
- private._domainkey.vanaz.com

Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys

DKIM:
- dkim1._domainkey.vanaz.com

Please refer to video.qmailtoaster.com

One of your TXT records is for vanaz.com rather than _domainkey.vanaz.com - 
please correct it.
Once again see the above link about Domiankeys on how to setup your DNS.


Regards
Alex





On 05/04/2010 12:34, Anil Aliyan wrote: 

Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com 
<http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit>
 &Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com
 
<htt

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Dear Alex,

 

That’s what I am saying that with DKIM you can sign your mail for both DKIM as 
well as for DomainKeys.

 

I am using dkim and I don’t have any folder like  /var/qmail/control/domainkey  
instead I have /var/qmail/control/dkim

 

Please look at the last section of the qmail-remote file which replaced by the 
DKIM installation. It also signs mails for Domainkeys as well:

 

  # generate signatures

  my $sigdone = 0;

  foreach my $type (keys(%{$conf->{'types'}}))

  {

my $sigconf = $conf->{'types'}->{$type};

 

if ($type eq 'dkim')

{

  $signer->add_signature(

new Mail::DKIM::Signature(

  Algorithm  => $sigconf->{'algorithm'}  || $conf->{'algorithm'} || 
$signer->algorithm,

  Method => $sigconf->{'method'} || $conf->{'method'}|| 
$signer->method,

  Headers=> $sigconf->{'headers'}|| $conf->{'headers'}   || 
$signer->headers,

  Domain => $sigconf->{'domain'} || $conf->{'domain'}|| 
$signer->domain,

  Selector   => $sigconf->{'selector'}   || $conf->{'selector'}  || 
$signer->selector,

  Query  => $sigconf->{'query'}  || $conf->{'query'},

  Identity   => $sigconf->{'identity'}   || $conf->{'identity'},

  Expiration => $sigconf->{'expiration'} || $conf->{'expiration'}

)

  );

  $sigdone = 1;

}

elsif ($type eq 'domainkey')

{

  $signer->add_signature(

new Mail::DKIM::DkSignature(

  Algorithm  => 'rsa-sha1', # only rsa-sha1 supported

  Method => $sigconf->{'method'}   || $conf->{'method'}   || 
$signer->method,

  Headers=> $sigconf->{'selector'} || $conf->{'headers'}  || 
$signer->headers,

  Domain => $sigconf->{'domain'}   || $conf->{'domain'}   || 
$signer->domain,

  Selector   => $sigconf->{'selector'} || $conf->{'selector'} || 
$signer->selector,

  Query  => $sigconf->{'query'}|| $conf->{'query'}

)

  );

  $sigdone = 1;

}

  }

 

  return $sigdone;

} 

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:48 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Anil

The file below you are referring is for DKIM and not for Domainkey.

For Domainkey tcp.smtp  should have the following in order for the outgoing 
email to be signed:

 DKSIGN="/var/qmail/control/domainkeys/%/private"


and 

DKVERIFY=""
 

if you have to accept incoming e-mail failing Domainkey


Regards
Alex


On 05/04/2010 13:09, Anil Aliyan wrote: 

Dear Amit,

 

Please ignore my last mail about smarthost. Your mail signed by you main mail 
server should work actually.

 

I have checked your test message and it is signed by DKIM but doesn’t singed 
for Domainkeys. You need to entry for both in your signconf.xml file:  Your 
file should look like below mentioned example:

 



  

  



  

 

  





  

 



 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 5:30 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Please check I had send test mail on your email id.

Regards,

Amit

At Monday, 05-04-2010 on 17:26 Postmaster wrote:




It may take a while for the DNS entries to propagate.
Send an e-mail with test in the subject line to sa-t...@sendmail.net

and you should have a reply with output like this shortly:





sendmail.net Sender Authentication Auto-Responder $Revision: 1.19 $
 
 
 
This service runs at  <mailto:sa-t...@sendmail.net>  and 
allows remote users
 
to perform a simple, automated test to see if different Sender
 
Authentication schemes are working.  Mail sent to this service
 
is checked by our Sender Authentication filters for any valid
 
credentials or signatures.  A script receives the message, checks
 
for a special header with the results of the tests, and composes
 
this response message based on what it finds.  This response is also
 
signed with DomainKeys and DomainKeys Identified Mail (DKIM).
 
 
 
Please note that the DKIM filter signing this reply message conforms
 
to the latest IETF draft version, and thus may not be successfully
 
verified by older implementations.  If you are using dkim-filter from
 
Sendmail, Inc., upgrade to at least version 1.0.0 to be compatible
 
with the most recent 

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Dear Alex,

 

I do agree with you and we can use two different keys but them you will have to 
use both DKIM and Domainkeys separately and need to configure them separately. 
But when DKIM alone can handle both DKIM and Domainkeys with single key its not 
required to configure serparately.

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:41 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is no reason why different keys cannot be used for Domainkey and DKIM.
I am using different keys and have had no problems so far.



Regards
Alex 


On 05/04/2010 13:01, Anil Aliyan wrote: 

I have checked both the entries exists but not updated globally yet. BUT BOTH 
KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys

 

 

If you run dig command from your server you can see these records:

 

dig txt _domainkey.vanza.com(Answers as Below)

 

[r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt dkim1._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27481

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;dkim1._domainkey.vanaz.com.IN  TXT

 

;; ANSWER SECTION:

dkim1._domainkey.vanaz.com. 3600 IN TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB"

 

;; AUTHORITY SECTION:

vanaz.com.  172368  IN  NS  ns2.iknowledgefactory.com.

vanaz.com.  172368  IN  NS  ns.iknowledgefactory.com.

 

[r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt private._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54065

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

 

;; QUESTION SECTION:

;private._domainkey.vanaz.com.  IN  TXT

 

;; ANSWER SECTION:

private._domainkey.vanaz.com. 2753 IN   TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB"

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is another problem.

You should have two entries for Domainkeys and one entry for DKIM:

Domainkey:
- _domainkey.vanaz.com
- private._domainkey.vanaz.com

Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys

DKIM:
- dkim1._domainkey.vanaz.com

Please refer to video.qmailtoaster.com

One of your TXT records is for vanaz.com rather than _domainkey.vanaz.com - 
please correct it.
Once again see the above link about Domiankeys on how to setup your DNS.


Regards
Alex





On 05/04/2010 12:34, Anil Aliyan wrote: 

Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com 
<http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit>
 &Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com
 
<http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit>
 &Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:





Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server usin

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

If you are using DKIM then you don’t require a separate domainkey signature 
file, same DKIM signature file is used for both. Moreover you don’t even 
require domainkeys folder in your /var/qmai/control  directory.

 

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 5:39 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Alex,

I had done this for SPF part.

Regards,

Amit

At Monday, 05-04-2010 on 17:37 Postmaster wrote:



No, you should not have any problems with Domainkey/DKIM using a smart host. 
However, you need to redefine your SPF in your DNS to allow relay from the 
smart host.

Regards
Alex


On 05/04/2010 12:52, Amit Dalia wrote: 

Sorry but 1 important thing which I forgot to mention is I'm using Smarthost on 
server for sending emails. Can this be the reason for fail of Domain Key and 
DKIM?

Regards,

Amit

At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote:



Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com 
<http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit>
 &Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com
 
<http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit>
 &Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:

Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:

This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries 
unless you have serious problems (qmail-dk is completely broken). 

Personally, I have not had any issues with Domainkey.

Regards
Alex



On 05/04/2010 10:21, Amit Dalia wrote: 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Amit

At Monday, 05-04-2010 on 14:48 Postmaster wrote:

Is it your server rejecting mail or is it your domain got rejected?
Let's check - http://domainkeys.sourceforge.net/policycheck.html



Testing private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for private._domainkey.vanaz.com


and 



Testing _domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for _domainkey.vanaz.com


So there is no policy for vanaz.com, hence this domain would fail domainkey 
policy on other servers.
You need to insert 2 TXT records in vanaz.com DNS.


Regards
Alex





On 05/04/2010 07:21, Amit Dalia wrote: 

Hi Eric/Jake,

I had removed Domain Key from my server but I'm still getting below error:

:
202.46.201.27 failed after I sent the message.
Remote host said: 550 Message does not pass DomainKeys requirements for domain 
vanaz.com <http://vanaz.com/> 

Any help since this is creating problem to me know.

Regards,

Amit


At Monday, 29-03-2010 on 21:53 Eric Shubert wrote:

Not at all.

Amit Dalia wrote:
> Eric/Jake,
> 
> Will re-installing qmail toaster package can solve the problem?
> 
> Amit
> 
> At Monday, 29-03-2010 on 21:18 Eric Shubert wrote:
> 
> Amit,
> 
> No way to repair qmail-dk, until someone steps up and fixes the code.
> 
> Check out Jake's videos for a way to use DKIM.
> 
> In order to d

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Key generated by DKIM is used for both by default.

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 5:38 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

So which key should I use? Key generated by DKIM or key generated by Domain Key.

Regards,

Amit

At Monday, 05-04-2010 on 17:31 Anil Aliyan wrote:



I have checked both the entries exists but not updated globally yet. BUT BOTH 
KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys

 

 

If you run dig command from your server you can see these records:

 

dig txt _domainkey.vanza.com(Answers as Below)

 

[r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt dkim1._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27481

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;dkim1._domainkey.vanaz.com.IN  TXT

 

;; ANSWER SECTION:

dkim1._domainkey.vanaz.com. 3600 IN TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB"

 

;; AUTHORITY SECTION:

vanaz.com.  172368  IN  NS  ns2.iknowledgefactory.com.

vanaz.com.  172368  IN  NS  ns.iknowledgefactory.com.

 

[r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt private._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54065

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

 

;; QUESTION SECTION:

;private._domainkey.vanaz.com.  IN  TXT

 

;; ANSWER SECTION:

private._domainkey.vanaz.com. 2753 IN   TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB"

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is another problem.

You should have two entries for Domainkeys and one entry for DKIM:

Domainkey:
- _domainkey.vanaz.com
- private._domainkey.vanaz.com

Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys

DKIM:
- dkim1._domainkey.vanaz.com

Please refer to video.qmailtoaster.com

One of your TXT records is for vanaz.com rather than _domainkey.vanaz.com - 
please correct it.
Once again see the above link about Domiankeys on how to setup your DNS.


Regards
Alex





On 05/04/2010 12:34, Anil Aliyan wrote: 

Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com 
<http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit>
 &Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com
 
<http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit>
 &Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:



Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:



This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmai

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Dear Amit,

 

Please ignore my last mail about smarthost. Your mail signed by you main mail 
server should work actually.

 

I have checked your test message and it is signed by DKIM but doesn’t singed 
for Domainkeys. You need to entry for both in your signconf.xml file:  Your 
file should look like below mentioned example:

 



  

  



  

 

  





  

 



 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 5:30 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Please check I had send test mail on your email id.

Regards,

Amit

At Monday, 05-04-2010 on 17:26 Postmaster wrote:



It may take a while for the DNS entries to propagate.
Send an e-mail with test in the subject line to sa-t...@sendmail.net

and you should have a reply with output like this shortly:




sendmail.net Sender Authentication Auto-Responder $Revision: 1.19 $





This service runs at  <mailto:sa-t...@sendmail.net>  and 
allows remote users


to perform a simple, automated test to see if different Sender


Authentication schemes are working.  Mail sent to this service


is checked by our Sender Authentication filters for any valid


credentials or signatures.  A script receives the message, checks


for a special header with the results of the tests, and composes


this response message based on what it finds.  This response is also


signed with DomainKeys and DomainKeys Identified Mail (DKIM).





Please note that the DKIM filter signing this reply message conforms


to the latest IETF draft version, and thus may not be successfully


verified by older implementations.  If you are using dkim-filter from


Sendmail, Inc., upgrade to at least version 1.0.0 to be compatible


with the most recent version of DKIM.





We hope this service has been helpful to you.





Authentication System:   DomainKeys Identified Mail


   Result:   DKIM signature confirmed GOOD


   Description:  Signature verified, message arrived intact


   Reporting host:   sendmail.net


   More information: http://mipassoc.org/dkim/


   Sendmail milter:  https://sourceforge.net/projects/dkim-milter/





Authentication System:   Domain Keys 


   Result:   DK signature confirmed GOOD


   Description:  Signature verified, message arrived intact


   Reporting host:   sendmail.net


   More information: http://antispam.yahoo.com/domainkeys


   Sendmail milter:  https://sourceforge.net/projects/domainkeys-milter/





Authentication System:   Sender ID   


   Result:   SID data confirmed GOOD


   Description:  Sending host is authorized for sending domain


   Reporting host:   sendmail.net


   More information: http://www.microsoft.com/senderid


   Sendmail milter:  https://sourceforge.net/projects/sid-milter/





Authentication System:   Sender Permitted From (SPF)


   Result:   SPF data confirmed GOOD


   Description:  Sending host is authorized for sending domain


   Reporting host:   sendmail.net


   More information: http://spf.pobox.com/

Regards
Alex


On 05/04/2010 12:46, Amit Dalia wrote: 

Dear Anil,

Yes I saw that and modified it on my DNS server. Also I had setup DKIM for my 
server as per Jake Video on settuping up DKIM.

I think, I have to check it know whether its working or not, so how can I check 
it?

Regards,

Amit

At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote:



Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com 
<http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit>
 &Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com
 
<http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit>
 &Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:

Issue the follow

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Yes, if you are using a smarhost then all outgoing mails will be signed by your 
smarthost server and you’ll have to configure these keys on that server.

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 5:22 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Sorry but 1 important thing which I forgot to mention is I'm using Smarthost on 
server for sending emails. Can this be the reason for fail of Domain Key and 
DKIM?

Regards,

Amit

At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote:



Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:

Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:

This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries 
unless you have serious problems (qmail-dk is completely broken). 

Personally, I have not had any issues with Domainkey.

Regards
Alex



On 05/04/2010 10:21, Amit Dalia wrote: 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Amit

At Monday, 05-04-2010 on 14:48 Postmaster wrote:

Is it your server rejecting mail or is it your domain got rejected?
Let's check - http://domainkeys.sourceforge.net/policycheck.html



Testing private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for private._domainkey.vanaz.com


and 



Testing _domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for _domainkey.vanaz.com


So there is no policy for vanaz.com, hence this domain would fail domainkey 
policy on other servers.
You need to insert 2 TXT records in vanaz.com DNS.


Regards
Alex





On 05/04/2010 07:21, Amit Dalia wrote: 

Hi Eric/Jake,

I had removed Domain Key from my server but I'm still getting below error:

:
202.46.201.27 failed after I sent the message.
Remote host said: 550 Message does not pass DomainKeys requirements for domain 
vanaz.com <http://vanaz.com/> 

Any help since this is creating problem to me know.

Regards,

Amit


At Monday, 29-03-2010 on 21:53 Eric Shubert wrote:

Not at all.

Amit Dalia wrote:
> Eric/Jake,
> 
> Will re-installing qmail toaster package can solve the problem?
> 
> Amit
> 
> At Monday, 29-03-2010 on 21:18 Eric Shubert wrote:
> 
> Amit,
> 
> No way to repair qmail-dk, until someone steps up and fixes the code.
> 
> Check out Jake's videos for a way to use DKIM.
> 
> In order to disable DK entirely, do:
> # cd /var/qmail/bin
> # ln -sf qmail-queue.orig qmail-queue
> 
> -- 
> -Eric 'shubes'
> 
> Amit Dalia wrote:
> >
> > Dear Eric,
> >
> > This was outgoing mail from server and occurred first time only. If
> > qmail-dk is broken then is there any way to repair this? Is there
> any
> > other way to use Domain Key or DKIM with my server? Else how to
> remove
> > Domain Key from my server.
> >
> > Thanks and regards,
> >
> > Amit
> >
> > At Monday, 29-03-2010 o

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

I have checked both the entries exists but not updated globally yet. BUT BOTH 
KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys

 

 

If you run dig command from your server you can see these records:

 

dig txt _domainkey.vanza.com(Answers as Below)

 

[r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt dkim1._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27481

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

 

;; QUESTION SECTION:

;dkim1._domainkey.vanaz.com.IN  TXT

 

;; ANSWER SECTION:

dkim1._domainkey.vanaz.com. 3600 IN TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB"

 

;; AUTHORITY SECTION:

vanaz.com.  172368  IN  NS  ns2.iknowledgefactory.com.

vanaz.com.  172368  IN  NS  ns.iknowledgefactory.com.

 

[r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com

 

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> txt private._domainkey.vanaz.com

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54065

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

 

;; QUESTION SECTION:

;private._domainkey.vanaz.com.  IN  TXT

 

;; ANSWER SECTION:

private._domainkey.vanaz.com. 2753 IN   TXT "k=rsa\; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB"

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 5:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

There is another problem.

You should have two entries for Domainkeys and one entry for DKIM:

Domainkey:
- _domainkey.vanaz.com
- private._domainkey.vanaz.com

Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys

DKIM:
- dkim1._domainkey.vanaz.com

Please refer to video.qmailtoaster.com

One of your TXT records is for vanaz.com rather than _domainkey.vanaz.com - 
please correct it.
Once again see the above link about Domiankeys on how to setup your DNS.


Regards
Alex





On 05/04/2010 12:34, Anil Aliyan wrote: 

Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com 
<http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit>
 &Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com
 
<http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit>
 &Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:




Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:




This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries 
unless you have serious problems (qmail-dk is completely broken). 

Personally, I have not had any issues with Domainkey.

Regards
Alex



On 05/04/2010 10:21, Amit Dalia wrote: 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Ami

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

I have checked you DNS and its perfect now. But your new key is not populated 
on the external DNS server worldwide yet so you will have to wait untill rest 
of the server start reading your new public key.

 

Can you send me a test message from your mailserver to my email address 
acali...@gnvfc.net ???

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 5:16 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil,

Yes I saw that and modified it on my DNS server. Also I had setup DKIM for my 
server as per Jake Video on settuping up DKIM.

I think, I have to check it know whether its working or not, so how can I check 
it?

Regards,

Amit

At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote:



Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:

Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:

This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries 
unless you have serious problems (qmail-dk is completely broken). 

Personally, I have not had any issues with Domainkey.

Regards
Alex



On 05/04/2010 10:21, Amit Dalia wrote: 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Amit

At Monday, 05-04-2010 on 14:48 Postmaster wrote:

Is it your server rejecting mail or is it your domain got rejected?
Let's check - http://domainkeys.sourceforge.net/policycheck.html



Testing private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for private._domainkey.vanaz.com


and 



Testing _domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for _domainkey.vanaz.com


So there is no policy for vanaz.com, hence this domain would fail domainkey 
policy on other servers.
You need to insert 2 TXT records in vanaz.com DNS.


Regards
Alex





On 05/04/2010 07:21, Amit Dalia wrote: 

Hi Eric/Jake,

I had removed Domain Key from my server but I'm still getting below error:

:
202.46.201.27 failed after I sent the message.
Remote host said: 550 Message does not pass DomainKeys requirements for domain 
vanaz.com <http://vanaz.com/> 

Any help since this is creating problem to me know.

Regards,

Amit


At Monday, 29-03-2010 on 21:53 Eric Shubert wrote:

Not at all.

Amit Dalia wrote:
> Eric/Jake,
> 
> Will re-installing qmail toaster package can solve the problem?
> 
> Amit
> 
> At Monday, 29-03-2010 on 21:18 Eric Shubert wrote:
> 
> Amit,
> 
> No way to repair qmail-dk, until someone steps up and fixes the code.
> 
> Check out Jake's videos for a way to use DKIM.
> 
> In order to disable DK entirely, do:
> # cd /var/qmail/bin
> # ln -sf qmail-queue.orig qmail-queue
> 
> -- 
> -Eric 'shubes'
> 
> Amit Dalia wrote:
> >
> > Dear Eric,
> >
> > This was outgoing mail from server and occurred first time only. If
> > qmail-dk is broken then is there any way to repair this? Is there
> any
> > other way to use D

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Dear Amit,

 

Your DNS entry has one problem. You have k=rsa;   twice in you DNS entry please 
remove one k=rsa; from the DNS entry.

 



private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/selectorcheck.html> 

TXT Record length = 120 

k=rsa; k=rsa; 
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB 

...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB 

This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 4:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Dear Anil/Alex,

Please check the link below:
http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com&Submit=Submit
http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com&Submit=Submit

Anyway I will proceed for DKIM installation now.

Thanks and regards,

Amit

At Monday, 05-04-2010 on 15:34 Postmaster wrote:



Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:



This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries 
unless you have serious problems (qmail-dk is completely broken). 

Personally, I have not had any issues with Domainkey.

Regards
Alex



On 05/04/2010 10:21, Amit Dalia wrote: 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Amit

At Monday, 05-04-2010 on 14:48 Postmaster wrote:



Is it your server rejecting mail or is it your domain got rejected?
Let's check - http://domainkeys.sourceforge.net/policycheck.html



Testing private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for private._domainkey.vanaz.com


and 





Testing _domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for _domainkey.vanaz.com


So there is no policy for vanaz.com, hence this domain would fail domainkey 
policy on other servers.
You need to insert 2 TXT records in vanaz.com DNS.


Regards
Alex





On 05/04/2010 07:21, Amit Dalia wrote: 

Hi Eric/Jake,

I had removed Domain Key from my server but I'm still getting below error:

:
202.46.201.27 failed after I sent the message.
Remote host said: 550 Message does not pass DomainKeys requirements for domain 
vanaz.com <http://vanaz.com/> 

Any help since this is creating problem to me know.

Regards,

Amit


At Monday, 29-03-2010 on 21:53 Eric Shubert wrote:



Not at all.

Amit Dalia wrote:
> Eric/Jake,
> 
> Will re-installing qmail toaster package can solve the problem?
> 
> Amit
> 
> At Monday, 29-03-2010 on 21:18 Eric Shubert wrote:
> 
> Amit,
> 
> No way to repair qmail-dk, until someone steps up and fixes the code.
> 
> Check out Jake's videos for a way to use DKIM.
> 
> In order to disable DK entirely, do:
> # cd /var/qmail/bin
> # ln -sf qmail-queue.orig qmail-queue
> 
> -- 
> -Eric 'shubes'
> 
> Amit Dalia wrote:
> >
> > Dear Eric,
> >
> > This was outgoing mail from server and occurred first time only. If
> > qmail-dk is broken then is there any way to repair this? Is there
> any
> > other way to use Domain Key or DKIM with my server? Else how to
> remove
> > Domain Key from my server.
> >
> > Thanks and regards,
> >
> > Amit
> >
> > At Monday, 29-03-2010 on 20:50 Eric Shubert wrote:
> >
> > Amit Dalia wrote:
> > > Dear Team,
> > >
> > > I have been using Domain Key for one of my domain without any
> > problem
> > > from long time. But today 1 server bounced it back mentioning the
> > below
> > > error:
> > >
> > > [<02>] The reason of the delivery failure was:
> > > >
> > > > 550 Message does not pass DomainKeys requirements for domain
> > vanaz.com
> > >
> > > Is my domain key break?
>

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

I am sorry I mean to say once you are done with as Alex said then let me know 
and  I’ll tell you how to configure the DKIM and Domainkeys for ur domains. I 
have learnt all this from the qmailtoaster videos made by Jake.

 

Regards,

 

Anil Aliyan

 

From: Anil Aliyan [mailto:acali...@gnvfc.net] 
Sent: Monday, April 05, 2010 3:43 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Mails getting bounced

 

Once you are done as Alex said below. Install the dkim package attached with 
this mail and then let me know how to configure DKIM and Domainkeys all 
together.

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 3:34 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:

This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries 
unless you have serious problems (qmail-dk is completely broken). 

Personally, I have not had any issues with Domainkey.

Regards
Alex



On 05/04/2010 10:21, Amit Dalia wrote: 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Amit

At Monday, 05-04-2010 on 14:48 Postmaster wrote:

Is it your server rejecting mail or is it your domain got rejected?
Let's check - http://domainkeys.sourceforge.net/policycheck.html



Testing private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for private._domainkey.vanaz.com


and 



Testing _domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for _domainkey.vanaz.com


So there is no policy for vanaz.com, hence this domain would fail domainkey 
policy on other servers.
You need to insert 2 TXT records in vanaz.com DNS.


Regards
Alex





On 05/04/2010 07:21, Amit Dalia wrote: 

Hi Eric/Jake,

I had removed Domain Key from my server but I'm still getting below error:

:
202.46.201.27 failed after I sent the message.
Remote host said: 550 Message does not pass DomainKeys requirements for domain 
vanaz.com <http://vanaz.com/> 

Any help since this is creating problem to me know.

Regards,

Amit


At Monday, 29-03-2010 on 21:53 Eric Shubert wrote:

Not at all.

Amit Dalia wrote:
> Eric/Jake,
> 
> Will re-installing qmail toaster package can solve the problem?
> 
> Amit
> 
> At Monday, 29-03-2010 on 21:18 Eric Shubert wrote:
> 
> Amit,
> 
> No way to repair qmail-dk, until someone steps up and fixes the code.
> 
> Check out Jake's videos for a way to use DKIM.
> 
> In order to disable DK entirely, do:
> # cd /var/qmail/bin
> # ln -sf qmail-queue.orig qmail-queue
> 
> -- 
> -Eric 'shubes'
> 
> Amit Dalia wrote:
> >
> > Dear Eric,
> >
> > This was outgoing mail from server and occurred first time only. If
> > qmail-dk is broken then is there any way to repair this? Is there
> any
> > other way to use Domain Key or DKIM with my server? Else how to
> remove
> > Domain Key from my server.
> >
> > Thanks and regards,
> >
> > Amit
> >
> > At Monday, 29-03-2010 on 20:50 Eric Shubert wrote:
> >
> > Amit Dalia wrote:
> > > Dear Team,
> > >
> > > I have been using Domain Key for one of my domain without any
> > problem
> > > from long time. But today 1 server bounced it back mentioning the
> > below
> > > error:
> > >
> > > [<02>] The reason of the delivery failure was:
> > > >
> > > > 550 Message does not pass DomainKeys requirements for domain
> > vanaz.com
> > >
> > > Is my domain key break?
> > >
> > > Thanks and regards,
> > >
> > > Amit
> >
> > Perhaps. The qmail-dk program included with QMT is broken in some
> > areas,
> > particularly inbound. While we've been under the impression that

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Once you are done as Alex said below. Install the dkim package attached with 
this mail and then let me know how to configure DKIM and Domainkeys all 
together.

 

Regards,

 

Anil Aliyan

 

From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] 
Sent: Monday, April 05, 2010 3:34 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

Issue the following command:

ln -sf qmail-dk qmail-queue

Restart qmail 

and do not forget to insert two TXT records into your DNS and make sure you 
have done it in a right way.
This would help you to test it:


http://domainkeys.sourceforge.net/policycheck.html
http://domainkeys.sourceforge.net 
<http://domainkeys.sourceforge.net/policycheck.html> 
  

Also refer to qmailtoaster wiki.

Regards
Alex




On 05/04/2010 10:57, Amit Dalia wrote: 

I had removed qmail-dk from my server using
ln -sf qmail-queue.orig qmail-queue

Now how do re-enable qmail-dk for my server.

Regards,

Amit

At Monday, 05-04-2010 on 15:08 Postmaster wrote:



This may not help. You do not have control over the other server and your 
domain may be rejected if the other server has
a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries 
unless you have serious problems (qmail-dk is completely broken). 

Personally, I have not had any issues with Domainkey.

Regards
Alex



On 05/04/2010 10:21, Amit Dalia wrote: 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Amit

At Monday, 05-04-2010 on 14:48 Postmaster wrote:



Is it your server rejecting mail or is it your domain got rejected?
Let's check - http://domainkeys.sourceforge.net/policycheck.html



Testing private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for private._domainkey.vanaz.com


and 





Testing _domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for _domainkey.vanaz.com


So there is no policy for vanaz.com, hence this domain would fail domainkey 
policy on other servers.
You need to insert 2 TXT records in vanaz.com DNS.


Regards
Alex





On 05/04/2010 07:21, Amit Dalia wrote: 

Hi Eric/Jake,

I had removed Domain Key from my server but I'm still getting below error:

:
202.46.201.27 failed after I sent the message.
Remote host said: 550 Message does not pass DomainKeys requirements for domain 
vanaz.com <http://vanaz.com/> 

Any help since this is creating problem to me know.

Regards,

Amit


At Monday, 29-03-2010 on 21:53 Eric Shubert wrote:



Not at all.

Amit Dalia wrote:
> Eric/Jake,
> 
> Will re-installing qmail toaster package can solve the problem?
> 
> Amit
> 
> At Monday, 29-03-2010 on 21:18 Eric Shubert wrote:
> 
> Amit,
> 
> No way to repair qmail-dk, until someone steps up and fixes the code.
> 
> Check out Jake's videos for a way to use DKIM.
> 
> In order to disable DK entirely, do:
> # cd /var/qmail/bin
> # ln -sf qmail-queue.orig qmail-queue
> 
> -- 
> -Eric 'shubes'
> 
> Amit Dalia wrote:
> >
> > Dear Eric,
> >
> > This was outgoing mail from server and occurred first time only. If
> > qmail-dk is broken then is there any way to repair this? Is there
> any
> > other way to use Domain Key or DKIM with my server? Else how to
> remove
> > Domain Key from my server.
> >
> > Thanks and regards,
> >
> > Amit
> >
> > At Monday, 29-03-2010 on 20:50 Eric Shubert wrote:
> >
> > Amit Dalia wrote:
> > > Dear Team,
> > >
> > > I have been using Domain Key for one of my domain without any
> > problem
> > > from long time. But today 1 server bounced it back mentioning the
> > below
> > > error:
> > >
> > > [<02>] The reason of the delivery failure was:
> > > >
> > > > 550 Message does not pass DomainKeys requirements for domain
> > vanaz.com
> > >
> > > Is my domain key break?
> > >
> > > Thanks and regards,
> > >
> > > Amit
> >
> > Perhaps. The qmail-dk program included with QMT is broken in some
> > areas,
> > particularly inbound. While we've been under the impression that
> > signing
> > was working ok, it's entirely possible that there's a bug in
> there. The
> > safest bet is to simply not use it at all.
> >
> > --
> > -Eric 'shubes'
> >
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsultin

RE: [qmailtoaster] Re: Mails getting bounced

[Anil Aliyan]

Dear Amit,

 

I think your DNS wasn’t configured properly for DKIM/DomainKeys that’s why you 
faced this problem. I am using both DKIM and DomainKeys my server and both are 
working perfectly. You can verify this by looking at the headers of this very 
mail. 

 

Public key text published in the DNS recods takes some time to update and 
reflect on the global dns servers and one should wait for atleast 3 days for 
them reflect all around the world. Servers like yahoo etc takes sometime to 
update their caching dns server and you have to patient till they start reading 
your public key from the dns records verify signature in the mails.

 

You have not mentioned this in your mail that how long back you published your 
public in the dns before you checked for domainkey test.

 

If you need any assistance please feel free to contact me on this mailing list. 
I  would love to help.

 

Regards,

 

Anil Aliyan

 

From: Amit Dalia [mailto:a...@ikf.co.in] 
Sent: Monday, April 05, 2010 2:52 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced

 

It is my domain which got rejected. And I had now removed domain key for 
signing my out going emails. Also I had deleted domain key entries from my DNS 
Server.

Amit

At Monday, 05-04-2010 on 14:48 Postmaster wrote:



Is it your server rejecting mail or is it your domain got rejected?
Let's check - http://domainkeys.sourceforge.net/policycheck.html



Testing private._domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for private._domainkey.vanaz.com


and 





Testing _domainkey.vanaz.com

New test <http://domainkeys.sourceforge.net/policycheck.html> 

No _domainkey TXT record found for _domainkey.vanaz.com


So there is no policy for vanaz.com, hence this domain would fail domainkey 
policy on other servers.
You need to insert 2 TXT records in vanaz.com DNS.


Regards
Alex





On 05/04/2010 07:21, Amit Dalia wrote: 

Hi Eric/Jake,

I had removed Domain Key from my server but I'm still getting below error:

:
202.46.201.27 failed after I sent the message.
Remote host said: 550 Message does not pass DomainKeys requirements for domain 
vanaz.com <http://vanaz.com/> 

Any help since this is creating problem to me know.

Regards,

Amit


At Monday, 29-03-2010 on 21:53 Eric Shubert wrote:



Not at all.

Amit Dalia wrote:
> Eric/Jake,
> 
> Will re-installing qmail toaster package can solve the problem?
> 
> Amit
> 
> At Monday, 29-03-2010 on 21:18 Eric Shubert wrote:
> 
> Amit,
> 
> No way to repair qmail-dk, until someone steps up and fixes the code.
> 
> Check out Jake's videos for a way to use DKIM.
> 
> In order to disable DK entirely, do:
> # cd /var/qmail/bin
> # ln -sf qmail-queue.orig qmail-queue
> 
> -- 
> -Eric 'shubes'
> 
> Amit Dalia wrote:
> >
> > Dear Eric,
> >
> > This was outgoing mail from server and occurred first time only. If
> > qmail-dk is broken then is there any way to repair this? Is there
> any
> > other way to use Domain Key or DKIM with my server? Else how to
> remove
> > Domain Key from my server.
> >
> > Thanks and regards,
> >
> > Amit
> >
> > At Monday, 29-03-2010 on 20:50 Eric Shubert wrote:
> >
> > Amit Dalia wrote:
> > > Dear Team,
> > >
> > > I have been using Domain Key for one of my domain without any
> > problem
> > > from long time. But today 1 server bounced it back mentioning the
> > below
> > > error:
> > >
> > > [<02>] The reason of the delivery failure was:
> > > >
> > > > 550 Message does not pass DomainKeys requirements for domain
> > vanaz.com
> > >
> > > Is my domain key break?
> > >
> > > Thanks and regards,
> > >
> > > Amit
> >
> > Perhaps. The qmail-dk program included with QMT is broken in some
> > areas,
> > particularly inbound. While we've been under the impression that
> > signing
> > was working ok, it's entirely possible that there's a bug in
> there. The
> > safest bet is to simply not use it at all.
> >
> > --
> > -Eric 'shubes'
> >
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and

[qmailtoaster] RPM Build for Second Instance of Qmail

[Anil Aliyan]

Dear Jake,

I need to install Trend Micro IMSS for qmail at our company HO and for the
at we need to install two instances of qmail on the same server (called
Sandwich Mode installation). I have installed first instance of qmailtoaster
and tried to rebuild srpm for the second instance by modifying the spec
file. I made the following changes in the ##RPM## section of the spec file:

%define qdir /var/qmail  --> %define qdir /var/qmail2
Name:   %{name}-toaster  --> Name:   %{name}-toaster2 

RPM gets build without any errors but when I install the same it says
/usr/sbin/sendmail already exists and fails to install.

One more thing is haunting me is the startup scripts of second instance in
the /etc/rc.* directory and /var/log/qmail logs. Is it going to overwrite
the startup scripts and log files of the first instance?? As I am unable to
find where to make changes in spec file for these two paths or if I can
rename the startup scripts and log files for the second instance so that
they do not conflict with the first instance. 

Though I am still trying to find out the reason and ways to resolve the same
but meanwhile if an expert like you can help me out and guide me it can be
achieved in less time. 

Thanks & Regards,

Anil Aliyan


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] LDAP

[Anil Aliyan]

Dear Madmac,

If you haven't selected the ldapserver during os installation its not there
but you can install later on also.

yum -y install openldap-server

this command will install openldap-server and other necessary packages for
you. Internet connectivity is a must if you are installing using yum or else
u can install openldap-server rpm from the dvd/cd of your distro also.

Regards,

Anil Aliyan

-Original Message-
From: sysadmin [mailto:sysad...@tricubemedia.com] 
Sent: Thursday, February 04, 2010 12:09 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] LDAP

Can anyone tell me if LDAP is installed by default using the ISO 
installer ( Centos 5.x)
If so , can you give me a quick how to. Or link to the hown to

Thanks

madmac



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] OT: VMWare question

[Anil Aliyan]

Dear Michael,

You can copy your vm image on to some other desktop or server using vmware
converter and once your server ready with vmware you can move same image
back to the server using vmware converter. If you need any help further
please feel free to write to me.

Regards,

Anil Aliyan 

-Original Message-
From: Michael Handiboe [mailto:mich...@horizonbroadband.net] 
Sent: Wednesday, February 03, 2010 10:43 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] OT: VMWare question

sorry guys, I'll keep this short...

I know that many of you are experienced with VMWare.
I want to get involved, but I want to keep my present hard drive image 
-- I like it the way it is.

I'd be happy to make a backup (or drive image) and wipe my drives and 
install VMWare and then 'restore' my existing image on top of VMWare, 
but I don't know if I can do that.

Is this do-able?
Thanks,





-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Domainkeys Problems

[Anil Aliyan]

Hi All,

Same thing happened with me when I setup domainkeys and dkim for my
mailserver and published my public key in the DNS. Some of the public
mailserver like gmail start reading the dns entry after few hours but some
other mailserver like yahoo takes time to update their dns server/dns
caching servers. So one should wait for atleast 3-4 days from the day you
publish your public key in the DNS to be reflected globally.

Regards,

Anil Aliyan

-Original Message-
From: Martin Waschbuesch [mailto:mar...@waschbuesch.de] 
Sent: Wednesday, February 03, 2010 2:23 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Domainkeys Problems


> Actually gmail says it passes Domainkeys check. This is the header for an
> email I just sent my gmail account:
> 


Odd. In that case, what services did you test with that did not work? And
when did you enable Domainkeys? Is it possible that your updated DNS
information had not yet spread and that those services were using cached
(and therefor wrong) DNS information. E.g. they might not have been able to
see the selector or policy record... 

--
"Corporation. An ingenious device for obtaining individual profit without
individual responsibility."

Bierce, Ambrose



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Email testing service

[Anil Aliyan]

Dear Jake,

 

I tested the new script by send a test mail at email-t...@qmailtoaster.com
but I got a negative response

 

SPF Record: PASS 

Sent from a valid domain: PASS 

DomainKey:  FAIL

 

On the other hand when I send any mail to yahoo or gmail who checks for SPF,
DomainKeys and DKIM all tests are passed by test messages.

 

Received: from gnvfc.net (mail.gnvfc.net [203.77.193.20])

by mx.google.com with ESMTP id
27si13138810pzk.30.2010.01.31.20.42.06;

Sun, 31 Jan 2010 20:42:07 -0800 (PST)

Received-SPF: pass (google.com: domain of acali...@gnvfc.net designates
203.77.193.20 as permitted sender) client-ip=203.77.193.20;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of
acali...@gnvfc.net designates 203.77.193.20 as permitted sender)
smtp.mail=acali...@gnvfc.net; dkim=pass header...@gnvfc.net

DomainKey-Signature: a=rsa-sha1; c=nofws; d=gnvfc.net; h=reply-to:from

  :to:subject:date:message-id:mime-version:content-type; q=dns; s=

  dkim1; b=B5UQuHbRhRTQeP9QYP7Ug/8fG5dHP2WVGUje8ezNPQmJt8rhBcRF7/D

  qoSafZTHqq6t6v7bpyhqxIfhDGAKuhHT4vdbUPFcCT2VTEMVHBqYjjwNcy3X0Og5

  SFcuHIqXbQ5Y4dR8WqAdHhnt5YWtkie2nXyZBE4LECEhA2Rr6590=

DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=gnvfc.net; h=reply-to:from

  :to:subject:date:message-id:mime-version:content-type; q=dns; s=

  dkim1; bh=fp2rT3SJ3BhIIB9+RfNnTLM2Jf0=; b=sqffRXUdCw4AXAxYWFodV5

  Ppshawwplo3jG1DFd3nyvFhzQbuCK1Q4tKz6WCEQ1rq5iqH/MT4GhC4TXzNgNOeL

  dqVGrqzWGjduEjrTzJQepxy1eweiX0sJhowk9FB7X8GdQYR0H9quQ3aBl87UPqy1

  hrK4iMGEHJrMt+Orpw8qk=

 

 

This is just for your information and to help in building your script more
efficient and accurate.

 

Regards,

 

Anil Aliyan

 

 

 

-Original Message-
From: Jake Vickers [mailto:j...@qmailtoaster.com] 
Sent: Monday, February 01, 2010 9:02 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Email testing service

 

Just realized that I had not posted this on the users mailing list -

I wrote a quick email-test script that you can send emails to and get a 

quick report back on some of your "email health". This is the first 

draft of the script and more checks/features will be added in the 

future. Here is an example output:

 

Qmailtoaster.com Email Message Report

-

 

This message is from the qmailtoaster.com email test service

(email-t...@qmailtoaster.com).

This service is used to give users an automated response to perform simple

checks on their email and DNS configurations. The emails sent to this

service's address are processed by a script that checks email headers and

other email related information and returns a response email report to the 

original sender. These tests should not be considered authorative, and

results may be returned from cached DNS information.

 

-

 

Message was not considered spam.

(Note: This will vary from server to server, and from message to message!)

Here are the spamassassin headers from this server:

No, score=2.7 required=5.0 tests=AWL,DK_SIGNED,DK_VERIFIED,
RDNS_NONE,TVD_SPACE_RATIO autolearn=no version=3.2.5

 

Return path was: Jake Vickers 

Original test request was sent using: Thunderbird 2.0.0.23 (X11/20090817)

 

 

SPF Record: PASS

Sent from a valid domain: PASS

DomainKey:  PASS

 

 

 

 

You can use this service by sending an email to 

email-t...@qmailtoaster.com and within a few seconds a reply will be sent.

Enjoy!

 


-

Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)

Vickers Consulting Group offers Qmailtoaster support and installations.

  If you need professional help with your setup, contact them today!


-

 Please visit qmailtoaster.com for the latest news, updates, and
packages.

 

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] DKIM Error (Please ignore last mail)

[Anil Aliyan]

Dear Jake,

I have changed my config file qmail-remote as follows:

































But I have another issue now. Before install dkim i was already using 
DomainKeys and have a folder for domain in keys in my control dir and it was 
working fine till the day I installed DKIM. now my mails are getting singed 
twice for domainkeys after putting new qmail-remote file. 

Authentication-Results: mx.google.com; spf=pass (google.com: domain of 
acali...@gnvfc.net designates 203.77.193.20 as permitted sender) 
smtp.mail=acali...@gnvfc.net; dkim=neutral (no key) header...@gnvfc.net
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gnvfc.net; h=message-id
 :reply-to:from:to:cc:subject:date:mime-version:content-type; q=
 dns; s=dkim1; b=oPBhLaC3ThBMUn8wFl4ZFpJYlqdXplzczaVB1iESxqGLGIUR
 vkmItNyTFpuMtFtMrzfFQ4oqNEXMZ96dIfKbCPCQYdpvA7BgkqhZvzTOkYoZIPcT
 oWPvmfhjT3T4n+aLwThDBn/QLNWbRccoObaYFBqEJwWeY5fxPbo0peZbY70=
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=gnvfc.net; h=message-id
 :reply-to:from:to:cc:subject:date:mime-version:content-type; s=
 dkim1; bh=iHUq0zWCNvVWpMdk41w7F+GJs8A=; b=lNVvKsVPYpDjDvGO5M3ib7
 +ITzHwjluyLcDzy0DLiNvv3mmYuqSUJB72keCx5W5TJaKPJRtAkDSSxKP7vTyUB6
 9/Xx2sQilYSGFXuhmWt2gGDBSyDd9g3ftSF2HlYEFr3CA48cr/wgLk60NsDQHB0x
 iQDnbl7kfjVGoFo4R64Pc=
Received: (qmail 11637 invoked by uid 89); 3 Nov 2009 07:58:09 -
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=private; d=gnvfc.net;
  
b=2gAcG+kbzh8Etw72xpd/pQzg1uMKJ0ucro5sqtM3TSdK4eIM45uBC9/K3OlPthBbbhFzIDdxRnWIinELV6SHxx6UuYpd9fkwAoyvGkI/WbRSu0hJGCrYDAJjTFqm0gxShkolKzL4rJv9qRS4k2HzQAZGNtspZ5SJqyiumIyVFoE=;
Received: by simscan 1.4.0 ppid: 11631, pid: 11633, t: 0.0337s
 scanners: attach: 1.4.0 clamav: 0.95.2/m:51/d:9979
Received: from unknown (HELO ANIL) (acali...@gnvfc.net@203.77.193.110)

How can discard old domainkeys not to sign mails instead use DIKM+Domainkeys 
config.  As I have used types  in the above 
config that means same keys will be used for DomainKeys as well, if i am wrong 
and old domainkeys will not be used in this case. 

To achieve the same i removed below mentioned line from tcp.smtp
DKSIGN="/var/qmail/control/domainkeys/%/private"   

But after removing this line from tcp.smtp my clients are unable to deliver 
mails with an server side error saying that it cannot read the key file to sign 
the mail.

Regards,

Anil Aliyan



- Original Message ----- 
From: Anil Aliyan 
To: qmailtoaster-list@qmailtoaster.com 
Sent: Tuesday, November 03, 2009 1:01 PM
Subject: Re: [qmailtoaster] DKIM Error


Dear Jake,

I am ready to provide all the details, please let me know what information or 
config file you want to provide to you. 

use strict;

use warnings;

our $VERSION = '0.2';

use Mail::DKIM 0.29;

use Mail::DKIM::Signer;

# enable support for "pretty" signatures, if available

eval 'require Mail::DKIM::TextWrap';

=head

config file structure

- missing settings will be merged from the global-node

- domain-entry will also match its subdomains

- create empty domain-node to omit signing (or specify "none" as id)



























=cut

my $configfile = undef;

$configfile = '/var/qmail/control/dkim/signconf.xml';

my $debugfile = undef;

#$debugfile = '/tmp/dkim.debug';

my $qremote = '/var/qmail/bin/qmail-remote.orig';

my $binary = 0;

our $config;

$config->{'global'} = {

types => { dkim => {} },

keyfile => '/var/qmail/control/dkim/global.key',

algorithm => 'rsa-sha256',

method => 'simple',

selector => 'beta',

# either string or file (first line of file will be used)

domain => '/var/qmail/control/me'

};

#---

# read config file. safely

if (defined($configfile) && -r $configfile)

{

eval 'use XML::Simple';

if (!$@)

{

my $xmlconf;

eval { $xmlconf = XMLin($configfile, ForceArray => ['types'], KeyAttr => 
['id']); };

qexit_deferral('Unable to read config file: ', $@)

if ($@);

ConfigMerge::merge($config, $xmlconf);

}

}

# open debug file

my $debugfh = undef;

if (defined($debugfile))

{

open($debugfh, '>', $debugfile)

or qexit_deferral('Unable to open ', $debugfile, ' to writing: ', $!);

}

# generate signatures

my $dkim;

my $mailbuf = '';

eval

{

my $conf = $config->{'global'};

$dkim = Mail::DKIM::Signer->new(

Policy => 'MySignerPolicy',

Debug_Canonicalization => $debugfh

);

if ($binary)

{

binmode STDIN;

}

while ()

{

$mailbuf .= $_;

unless ($binary)

{

chomp $_;

s/\015?$/\015\012/s;

}

$dkim->PRINT($_);

}

$dkim->CLOSE();

};

qexit_deferral('Error while signing: ', $@)

if ($@);

# close debug file

close($debugfh)

if (defined($debugfh));

# execute qmail-r

Re: [qmailtoaster] DKIM Error

[Anil Aliyan]

Dear Jake,

I have changed my config file qmail-remote as follows:

































But I have another issue now. Before install dkim i was already using 
DomainKeys and have a folder for domain in keys in my control dir and it was 
working fine till the day I installed DKIM. now my mails are getting singed 
twice for domainkeys after putting new qmail-remote file. 

Received-SPF: pass (google.com: domain of acali...@gnvfc.net designates 
203.77.193.20 as permitted sender) client-ip=203.77.193.20;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of 
acali...@gnvfc.net designates 203.77.193.20 as permitted sender) 
smtp.mail=acali...@gnvfc.net; dkim=neutral (no key) header...@gnvfc.net
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gnvfc.net; h=message-id
 :reply-to:from:to:cc:subject:date:mime-version:content-type; q=
 dns; s=dkim1; b=oPBhLaC3ThBMUn8wFl4ZFpJYlqdXplzczaVB1iESxqGLGIUR
 vkmItNyTFpuMtFtMrzfFQ4oqNEXMZ96dIfKbCPCQYdpvA7BgkqhZvzTOkYoZIPcT
 oWPvmfhjT3T4n+aLwThDBn/QLNWbRccoObaYFBqEJwWeY5fxPbo0peZbY70=
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=gnvfc.net; h=message-id
 :reply-to:from:to:cc:subject:date:mime-version:content-type; s=
 dkim1; bh=iHUq0zWCNvVWpMdk41w7F+GJs8A=; b=lNVvKsVPYpDjDvGO5M3ib7
 +ITzHwjluyLcDzy0DLiNvv3mmYuqSUJB72keCx5W5TJaKPJRtAkDSSxKP7vTyUB6
 9/Xx2sQilYSGFXuhmWt2gGDBSyDd9g3ftSF2HlYEFr3CA48cr/wgLk60NsDQHB0x
 iQDnbl7kfjVGoFo4R64Pc=
Received: (qmail 11637 invoked by uid 89); 3 Nov 2009 07:58:09 -
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=private; d=gnvfc.net;
  
b=2gAcG+kbzh8Etw72xpd/pQzg1uMKJ0ucro5sqtM3TSdK4eIM45uBC9/K3OlPthBbbhFzIDdxRnWIinELV6SHxx6UuYpd9fkwAoyvGkI/WbRSu0hJGCrYDAJjTFqm0gxShkolKzL4rJv9qRS4k2HzQAZGNtspZ5SJqyiumIyVFoE=;
Received: by simscan 1.4.0 ppid: 11631, pid: 11633, t: 0.0337s
 scanners: attach: 1.4.0 clamav: 0.95.2/m:51/d:9979
Received: from unknown (HELO ANIL) (acali...@gnvfc.net@203.77.193.110)

How can discard old domainkeys not to sign mails instead use DIKM+Domainkeys 
config.  As I have used types  in the above 
config that means same keys will be used for DomainKeys as well, if i am wrong 
and old domainkeys will not be used in this case. 

To achieve the same i removed below mentioned line from tcp.smtp
DKSIGN="/var/qmail/control/domainkeys/%/private"   

But after removinTimes New Romang this line fTimes New Romanrom Times New 
Romantcp.smtp my clients unable to deliver mails with an error saying that it 
cannot read the key file to sign the mail.



  - Original Message - 
  From: Anil Aliyan 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Tuesday, November 03, 2009 1:01 PM
  Subject: Re: [qmailtoaster] DKIM Error


  Dear Jake,

  I am ready to provide all the details, please let me know what information or 
config file you want to provide to you. 

  use strict;

  use warnings;

  our $VERSION = '0.2';

  use Mail::DKIM 0.29;

  use Mail::DKIM::Signer;

  # enable support for "pretty" signatures, if available

  eval 'require Mail::DKIM::TextWrap';

  =head

  config file structure

  - missing settings will be merged from the global-node

  - domain-entry will also match its subdomains

  - create empty domain-node to omit signing (or specify "none" as id)

  

  

  

  

  

  

  

  

  

  

  

  

  

  =cut

  my $configfile = undef;

  $configfile = '/var/qmail/control/dkim/signconf.xml';

  my $debugfile = undef;

  #$debugfile = '/tmp/dkim.debug';

  my $qremote = '/var/qmail/bin/qmail-remote.orig';

  my $binary = 0;

  our $config;

  $config->{'global'} = {

  types => { dkim => {} },

  keyfile => '/var/qmail/control/dkim/global.key',

  algorithm => 'rsa-sha256',

  method => 'simple',

  selector => 'beta',

  # either string or file (first line of file will be used)

  domain => '/var/qmail/control/me'

  };

  
#---

  # read config file. safely

  if (defined($configfile) && -r $configfile)

  {

  eval 'use XML::Simple';

  if (!$@)

  {

  my $xmlconf;

  eval { $xmlconf = XMLin($configfile, ForceArray => ['types'], KeyAttr => 
['id']); };

  qexit_deferral('Unable to read config file: ', $@)

  if ($@);

  ConfigMerge::merge($config, $xmlconf);

  }

  }

  # open debug file

  my $debugfh = undef;

  if (defined($debugfile))

  {

  open($debugfh, '>', $debugfile)

  or qexit_deferral('Unable to open ', $debugfile, ' to writing: ', $!);

  }

  # generate signatures

  my $dkim;

  my $mailbuf = '';

  eval

  {

  my $conf = $config->{'global'};

  $dkim = Mail::DKIM::Signer->new(

  Policy => 'MySignerPolicy',

  Debug_Canonicaliza

Re: [qmailtoaster] DKIM Error

[Anil Aliyan]

open(FH, '<', $conf->{'domain'})

or croak('Unable to open domain-file: '.$!);

my $newdom = (split(/ /, ))[0];

close(FH);

croak("Unable to read domain-file. Maybe empty file.")

if (!$newdom);

chomp($newdom);

$conf->{'domain'} = $newdom;

}

# generate signatures

my $sigdone = 0;

foreach my $type (keys(%{$conf->{'types'}}))

{

my $sigconf = $conf->{'types'}->{$type};

if ($type eq 'dkim')

{

$signer->add_signature(

new Mail::DKIM::Signature(

Algorithm => $sigconf->{'algorithm'} || $conf->{'algorithm'} || 
$signer->algorithm,

Method => $sigconf->{'method'} || $conf->{'method'} || $signer->method,

Headers => $sigconf->{'headers'} || $conf->{'headers'} || $signer->headers,

Domain => $sigconf->{'domain'} || $conf->{'domain'} || $signer->domain,

Selector => $sigconf->{'selector'} || $conf->{'selector'} || $signer->selector,

Query => $sigconf->{'query'} || $conf->{'query'},

Identity => $sigconf->{'identity'} || $conf->{'identity'},

Expiration => $sigconf->{'expiration'} || $conf->{'expiration'}

)

);

$sigdone = 1;

}

elsif ($type eq 'domainkey')

{

$signer->add_signature(

new Mail::DKIM::DkSignature(

Algorithm => 'rsa-sha1', # only rsa-sha1 supported

Method => $sigconf->{'method'} || $conf->{'method'} || $signer->method,

Headers => $sigconf->{'selector'} || $conf->{'headers'} || $signer->headers,

Domain => $sigconf->{'domain'} || $conf->{'domain'} || $signer->domain,

Selector => $sigconf->{'selector'} || $conf->{'selector'} || $signer->selector,

Query => $sigconf->{'query'} || $conf->{'query'}

)

);

$sigdone = 1;

}

}

return $sigdone;

}





Regards,

Anil Aliyan

  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Monday, November 02, 2009 11:42 PM
  Subject: Re: [qmailtoaster] DKIM Error


  Anil Aliyan wrote: 
Dear Jakes,

Please find some time to help resolve my problem also, will very greatful 
to you.

Thanks & Regards,

Anil Aliyan


- Original Message - 
From: Anil Aliyan 
To: qmailtoaster-list@qmailtoaster.com 
Sent: Saturday, October 31, 2009 2:28 AM
Subject: [qmailtoaster] DKIM Error


Jakes,

Please find the config file attached with this mail.


  Pasting the config file into the email is easier for us to help you.
  It looks like your config file may be wrong, depending on how you configured 
your system.
  Right now, your system is going to sign every domain sending email as the 
domain listed in your /var/qmail/control/me file since you only defined a 
global rule. This is fine if the me file only contain your domain name 
(gnvfc.com) but you probably have your hostname in the me file as well 
(mail.gnvfc.com) so it's signing using that domain.
  You can define individual domains to sign for in this format:

  


  


  


  
  
  This will inherit any declarations from the  tags that you do not 
override (so it will inherit the algorithm="rsa-sha1", keyfile, method).
  But without seeing how you configured other things it's hard to guess.

[qmailtoaster] DKIM Error

[Anil Aliyan]

Dear Jakes,

Please find some time to help resolve my problem also, will very greatful to 
you.

Thanks & Regards,

Anil Aliyan


- Original Message - 
From: Anil Aliyan 
To: qmailtoaster-list@qmailtoaster.com 
Sent: Saturday, October 31, 2009 2:28 AM
Subject: [qmailtoaster] DKIM Error


Jakes,

Please find the config file attached with this mail.

I have not changed anything in the conf file and i copied it as it is in the 
/var/qmail/control/dkim folder persmission are:

-rw-r--r-- 1 qmailr qmail  891 Oct 29 17:06 global.key
-rw-r--r-- 1 qmailr qmail  241 Oct 29 17:07 public.txt
-rw-r--r-- 1 qmailr qmail  250 Oct 29 17:10 signconf.xml

I performed following steps to install the DKIM:

install required perl packages

perl-XML-Simple perl-Mail-DKIM perl-XML-Parser

---

mkdir /var/qmail/control/dkim

dknewkey /var/qmail/control/dkim/global.key > /var/qmail/control/dkim/public.txt

perl -pi -e 's/global.key._domainkey/dkim1/' /var/qmail/control/dkim/public.txt

---Download DKIM Package ---

wget http://qmailtoaster.org/dkim.tgz

tar zxvf dkim.tgz

cd dkim

qmailctl stop

mv signconf.xml /var/qmail/control/dkim/

chown -R qmailr:qmail /var/qmail/control/dkim

mv /var/qmail/bin/qmail-remote /var/qmail/bin/qmail-remote.orig

mv qmail-remote /var/qmail/bin/

chmod 777 /var/qmail/bin/qmail-remote

chown root:qmail /var/qmail/bin/qmail-remote

qmailctl start

Copy Contents of public.key and paste into dns zone as it is without any 
modifications.

-
  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Friday, October 30, 2009 10:16 PM
  Subject: Re: [qmailtoaster] DKIM Error


  Anil Aliyan wrote: 
  
Dear All,

I have setup DKIM as per instution in the DKIM video. Everything is setup 
correctly but still when i see mail hearders on yahoo or gmail i see

Authentication-Results:   mta164.mail.in.yahoo.com from=gnvfc.net; 
domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) 

Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok);
and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key)

why is says from=? different in both the cases in domainkeys its gnvfc.net 
and in DKIM its mail.gnvfc.net.

When recipient mail server verifies the key it might be looking for the 
domain name instead of hostname+domain name.

DKIM reads the domain name from the me file in control dir, if i am not 
wrong.
while Domain keys only selects the actual domain name from the email 
address or sending mailserver.

  DKIM-Signature:  
 v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= 
message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; 

  DomainKey-Signature:  
 a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; 

I have 5 virtual domains and if i use globalkey for the severs all 
maildomains will have samekey and every mail deliverd on yahoo will look for 
d=gnvfc.net for public key.

How can i setup dkim for individual domain. and how can i get d=gnvfc.net 
as shown in  RED above in both Signature headers.

And is my DKIM entry in DNS is in the format given below, is it correct. I 
have simply copied it from the public.txt file and pasted into my dns, you can 
check the same from  http://domainkeys.sourceforge.net/selectorcheck.html with 
dkim.gnvfc.net:

dkim1   IN  TXT "k=rsa; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB"


    Regards,

Anil Aliyan

  Show us your DKIM config file. I suspect you have something configured 
incorrectly there.
  The DKIM patch for Qmail will allow you to sign multiple domains individually 
(when configured correctly, Yahoo will look at each domain for the DKIM key). 
The patch will force you to use ONE key to sign the domains however. So you use 
the same hash to sign, but each domain will get a DNS entry and each domain 
will sign for itself by configuring the DKIM config file correctly.







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster

[qmailtoaster] DKIM Error

[Anil Aliyan]

Jakes,

Please find the config file attached with this mail.

I have not changed anything in the conf file and i copied it as it is in the 
/var/qmail/control/dkim folder persmission are:

-rw-r--r-- 1 qmailr qmail  891 Oct 29 17:06 global.key
-rw-r--r-- 1 qmailr qmail  241 Oct 29 17:07 public.txt
-rw-r--r-- 1 qmailr qmail  250 Oct 29 17:10 signconf.xml

I performed following steps to install the DKIM:

install required perl packages

perl-XML-Simple perl-Mail-DKIM perl-XML-Parser

---

mkdir /var/qmail/control/dkim

dknewkey /var/qmail/control/dkim/global.key > /var/qmail/control/dkim/public.txt

perl -pi -e 's/global.key._domainkey/dkim1/' /var/qmail/control/dkim/public.txt

---Download DKIM Package ---

wget http://qmailtoaster.org/dkim.tgz

tar zxvf dkim.tgz

cd dkim

qmailctl stop

mv signconf.xml /var/qmail/control/dkim/

chown -R qmailr:qmail /var/qmail/control/dkim

mv /var/qmail/bin/qmail-remote /var/qmail/bin/qmail-remote.orig

mv qmail-remote /var/qmail/bin/

chmod 777 /var/qmail/bin/qmail-remote

chown root:qmail /var/qmail/bin/qmail-remote

qmailctl start

Copy Contents of public.key and paste into dns zone as it is without any 
modifications.

-
  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Friday, October 30, 2009 10:16 PM
  Subject: Re: [qmailtoaster] DKIM Error


  Anil Aliyan wrote: 
  
Dear All,

I have setup DKIM as per instution in the DKIM video. Everything is setup 
correctly but still when i see mail hearders on yahoo or gmail i see

Authentication-Results:   mta164.mail.in.yahoo.com from=gnvfc.net; 
domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) 

Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok);
and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key)

why is says from=? different in both the cases in domainkeys its gnvfc.net 
and in DKIM its mail.gnvfc.net.

When recipient mail server verifies the key it might be looking for the 
domain name instead of hostname+domain name.

DKIM reads the domain name from the me file in control dir, if i am not 
wrong.
while Domain keys only selects the actual domain name from the email 
address or sending mailserver.

  DKIM-Signature:  
 v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= 
message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; 

  DomainKey-Signature:  
 a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; 

I have 5 virtual domains and if i use globalkey for the severs all 
maildomains will have samekey and every mail deliverd on yahoo will look for 
d=gnvfc.net for public key.

How can i setup dkim for individual domain. and how can i get d=gnvfc.net 
as shown in  RED above in both Signature headers.

And is my DKIM entry in DNS is in the format given below, is it correct. I 
have simply copied it from the public.txt file and pasted into my dns, you can 
check the same from  http://domainkeys.sourceforge.net/selectorcheck.html with 
dkim.gnvfc.net:

dkim1   IN  TXT "k=rsa; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB"


Regards,

Anil Aliyan

  Show us your DKIM config file. I suspect you have something configured 
incorrectly there.
  The DKIM patch for Qmail will allow you to sign multiple domains individually 
(when configured correctly, Yahoo will look at each domain for the DKIM key). 
The patch will force you to use ONE key to sign the domains however. So you use 
the same hash to sign, but each domain will get a DNS entry and each domain 
will sign for itself by configuring the DKIM config file correctly.


  
  

  



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] DKIM Error

[Anil Aliyan]

Jakes,

Please find the config file attached with this mail.

I have not changed anything in the conf file and i copied it as it is in the 
/var/qmail/control/dkim folder persmission are:

-rw-r--r-- 1 qmailr qmail  891 Oct 29 17:06 global.key
-rw-r--r-- 1 qmailr qmail  241 Oct 29 17:07 public.txt
-rw-r--r-- 1 qmailr qmail  250 Oct 29 17:10 signconf.xml

I performed following steps to install the DKIM:

install required perl packages

perl-XML-Simple perl-Mail-DKIM perl-XML-Parser

---

mkdir /var/qmail/control/dkim

dknewkey /var/qmail/control/dkim/global.key > /var/qmail/control/dkim/public.txt

perl -pi -e 's/global.key._domainkey/dkim1/' /var/qmail/control/dkim/public.txt

---Download DKIM Package ---

wget http://qmailtoaster.org/dkim.tgz

tar zxvf dkim.tgz

cd dkim

qmailctl stop

mv signconf.xml /var/qmail/control/dkim/

chown -R qmailr:qmail /var/qmail/control/dkim

mv /var/qmail/bin/qmail-remote /var/qmail/bin/qmail-remote.orig

mv qmail-remote /var/qmail/bin/

chmod 777 /var/qmail/bin/qmail-remote

chown root:qmail /var/qmail/bin/qmail-remote

qmailctl start

Copy Contents of public.key and paste into dns zone as it is without any 
modifications.

-
  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Friday, October 30, 2009 10:16 PM
  Subject: Re: [qmailtoaster] DKIM Error


  Anil Aliyan wrote: 
  
Dear All,

I have setup DKIM as per instution in the DKIM video. Everything is setup 
correctly but still when i see mail hearders on yahoo or gmail i see

Authentication-Results:   mta164.mail.in.yahoo.com from=gnvfc.net; 
domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) 

Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok);
and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key)

why is says from=? different in both the cases in domainkeys its gnvfc.net 
and in DKIM its mail.gnvfc.net.

When recipient mail server verifies the key it might be looking for the 
domain name instead of hostname+domain name.

DKIM reads the domain name from the me file in control dir, if i am not 
wrong.
while Domain keys only selects the actual domain name from the email 
address or sending mailserver.

  DKIM-Signature:  
 v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= 
message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; 

  DomainKey-Signature:  
 a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; 

I have 5 virtual domains and if i use globalkey for the severs all 
maildomains will have samekey and every mail deliverd on yahoo will look for 
d=gnvfc.net for public key.

How can i setup dkim for individual domain. and how can i get d=gnvfc.net 
as shown in  RED above in both Signature headers.

And is my DKIM entry in DNS is in the format given below, is it correct. I 
have simply copied it from the public.txt file and pasted into my dns, you can 
check the same from  http://domainkeys.sourceforge.net/selectorcheck.html with 
dkim.gnvfc.net:

dkim1   IN  TXT "k=rsa; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB"


Regards,

Anil Aliyan

  Show us your DKIM config file. I suspect you have something configured 
incorrectly there.
  The DKIM patch for Qmail will allow you to sign multiple domains individually 
(when configured correctly, Yahoo will look at each domain for the DKIM key). 
The patch will force you to use ONE key to sign the domains however. So you use 
the same hash to sign, but each domain will get a DNS entry and each domain 
will sign for itself by configuring the DKIM config file correctly.


  
  

  



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] DKIM Error

[Anil Aliyan]

 
Dear All,

I have setup DKIM as per instution in the DKIM video. Everything is setup 
correctly but still when i see mail hearders on yahoo or gmail i see

Authentication-Results:   mta164.mail.in.yahoo.com from=gnvfc.net; 
domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) 

Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok);
and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key)

why is says from=? different in both the cases in domainkeys its gnvfc.net and 
in DKIM its mail.gnvfc.net.

When recipient mail server verifies the key it might be looking for the domain 
name instead of hostname+domain name.

DKIM reads the domain name from the me file in control dir, if i am not wrong.
while Domain keys only selects the actual domain name from the email address or 
sending mailserver.

  DKIM-Signature:  
 v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= 
message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; 

  DomainKey-Signature:  
 a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; 

I have 5 virtual domains and if i use globalkey for the severs all maildomains 
will have samekey and every mail deliverd on yahoo will look for d=gnvfc.net 
for public key.

How can i setup dkim for individual domain. and how can i get d=gnvfc.net as 
shown in  RED above in both Signature headers.

And is my DKIM entry in DNS is in the format given below, is it correct. I have 
simply copied it from the public.txt file and pasted into my dns, you can check 
the same from  http://domainkeys.sourceforge.net/selectorcheck.html with 
dkim.gnvfc.net:

dkim1   IN  TXT "k=rsa; 
p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB"


Regards,

Anil Aliyan

Re: [qmailtoaster] problem

[Anil Aliyan]

The owner of the domain or mail server for which rdns fails need to ask his 
internet service provider to create a RDNS entry for the said domain in hos DNS 
server. The IP should resolve back to a domain name.

Regards,

Anil Aliyan
  - Original Message - 
  From: Noel Rivera (Border Less) 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Friday, October 16, 2009 4:12 AM
  Subject: RE: [qmailtoaster] problem


  How to do that? The reverse dns in my server 

   

  Saludos.

   



  Borderless Consulting Group SA de CV.

  Noel Alban Rivera Rivera

  Jefe de Redes y Telecomunicaciones

  Tel. (915) 633-31-04

  Nextel 62*142650*2

  P Por favor considera el medio ambiente antes de imprimir este e-mail.

   

  
--

   

  CONFIDENTIALITY NOTICE: This e-mail message including attachments, if any, is 
intended only for the person or entity to which it is addressed and may contain 
confidential and /or privileged material. Any review, use, disclosure or 
distribution of such confidential information without the written authorization 
of Borderless Consulting Group is prohibited. If you are not the intended 
recipient, please contact the sender by reply e-mail and destroy all copies of 
the original message. By receiving this e-mail you acknowledge that any breach 
by you and/or your representatives of the above provisions may entitle 
Borderless Consulting Group to seek for damages.

   

  AVISO DE CONFIDENCIALIDAD: Este correo electrónico, incluyendo en su caso, 
los archivos adjuntos al mismo, pueden contener información de carácter 
confidencial y/o privilegiada, y se envían a la atención única y exclusivamente 
de la persona y/o entidad a quien va dirigido. La copia, revisión, uso, 
revelación y/o distribución de dicha información confidencial sin la 
autorización por escrito de Borderless Consulting Group está prohibida. Si 
usted no es el destinatario a quien se dirige el presente correo, favor de 
contactar al remitente respondiendo al presente correo y eliminar el correo 
original incluyendo sus archivos, así como cualesquiera copia del mismo. 
Mediante la recepción del presente correo usted reconoce y acepta que en caso 
de incumplimiento de su parte y/o de sus representantes a los términos antes 
mencionados, Borderless Consulting Group tendrá derecho a los daños y 
perjuicios que esto le cause.

   

  From: Craig McLaughlin [mailto:craig.p.mclaugh...@gmail.com] 
  Sent: Thursday, October 15, 2009 4:33 PM
  To: qmailtoaster-list@qmailtoaster.com
  Subject: Re: [qmailtoaster] problem

   

  The remote host (the mx server for algebasa.com) is trying to check the 
reverse DNS of the sending machine - presumably to make sure that the sending 
domain matches.

  Maxwell is correct, you need to set your reverse DNS.




  On Thu, Oct 15, 2009 at 1:43 PM, Maxwell Smart  wrote:

  What I'm trying to say is that your DNS server is not resolving your
  rDNS.   It's coming up as a SERVFAIL.   I am no expert, but I think this
  is where your problem lies.


  Noel Rivera (Border Less) wrote:
  > Its ping timeout because I have firewall in the mailserver My address
  > @borderless.com.mx is in the 12.23.82.41 IP.
  >
  >
  > -Original Message-
  > From: Maxwell Smart [mailto:c...@yother.com]
  > Sent: Thursday, October 15, 2009 2:15 PM
  > To: qmailtoaster-list@qmailtoaster.com
  > Subject: Re: [qmailtoaster] problem
  >
  > OK, but when I try to resolve the address 12.23.82.41 it's not
  > resolving.  algebasa.com is 69.90.30.253 and resolves.
  >
  > Noel Rivera (Border Less) wrote:
  >
  >> I have only the problem with this domains, the all others domains can
  >> resolve without problems
  >>
  >>
  >> -Original Message-
  >> From: Maxwell Smart [mailto:c...@yother.com]
  >> Sent: Thursday, October 15, 2009 1:59 PM
  >> To: qmailtoaster-list@qmailtoaster.com
  >> Subject: Re: [qmailtoaster] problem
  >>
  >> It appears that you have a DNS server failure, the IP address
  >> 12.23.82.41 cannot be resolved.
  >>
  >> Noel Rivera (Border Less) wrote:
  >>
  >>
  >>> Hello List I have a problem with sending mail to domain @algebasa.com
  >>>
  >>>
  >>>
  >>> Remote host said: 450 4.7.1 >> <mailto:oscar.amezqu...@algebasa.com>>... Access temporarily denied.
  >>> Cannot resolve PTR record for 12.23.82.41 Giving up on 76.74.255.168.
  >>>
  >>>
  >>>
  >>> How can I solve this problem?
  >>>
  >>>
  >>>
  >>
  >>
  >
  >

  --
  Cecil Yother, Jr. "cj"

  cj's
  2318 Clement 

Re: [qmailtoaster] Why does username require domain name?

[Anil Aliyan]

I still dont understand whats wrong here??? if u get @137.52.23.46 in the 
headers of the mail
 
Received: from unknown (HELO ?137.52.23.46?) (adamt...@awabllc.com@137.52.23.46)

Please try to understand the meaning of this header line above .

To the mailserver this client i.e., 137.52.23.46 is an unknown client because 
this clinet doesnt have any RDNS defined for it and cannot be resolved, hence 
its unknown. Secondly, adamt...@awabllc.com is the authenticated user who is 
sending mail from the client 137.52.23.46

Thats what this line stands for in the hearder of you mail.

I dont understand whats wrong with that???


Regards,

Anil Aliyan

  - Original Message - 
  From: Adam Glass 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Saturday, October 10, 2009 1:10 AM
  Subject: Re: [qmailtoaster] Why does username require domain name?


  CJ,

  It is probably not the e-mail client.  The problem was discovered by someone 
using Mulberry (which I think is a variant of Eudora) and I reproduced it with 
Thunderbird/Linux and on Thunderbird/Macintosh.

  Thanks,
  Adam



  On Fri, Oct 9, 2009 at 3:15 PM, Maxwell Smart  wrote:

Adam,

Yes for (incoming and outgoing)authentication you must put in the entire
address otherwise the mail server doesn't know who you are.

Something else is wrong with your setup that is adding that
@137.52.23.46  Is there a possibility that it's the e mail client?

CJ


Adam Glass wrote:
> CJ,
>
> Unfortunately we are seeing different.  The user was created just as
> adamtest, without the @ or the domain name.  But if I put the username
> adamtest in for SMTP authentication (using Thunderbird), it does not
> work.  I must type the full address.  Then another @ is added, so it
> looks like this...
> Received: from unknown (HELO ?137.52.23.46?) 
(adamt...@awabllc.com@137.52.23.46)
> In the example above, that is the IP of my local PC, not the mail server.
>
> Hopefully I haven't stumped the panel  :-)
> --Adam
>
>
> On Fri, Oct 9, 2009 at 2:39 PM, Maxwell Smart  <mailto:c...@yother.com>> wrote:
>
> Adam,
>
> No, the user will only have one @ sign since when you create the
> account
> you only put in adamtest since you are logged into the domain you are
> creating a user for.  Qmailadmin adds the @example.com

> <http://example.com> portion of the

> address.  You do not create a user adamt...@example.com

> <mailto:adamt...@example.com> in the

> Qmailadmin as it will do exactly what you describe.
>
> CJ
>
> Adam Glass wrote:
> > Okay, that's understandable.  But it also means the SMTP
> username must
> > be adamt...@awabllc.com <mailto:adamt...@awabllc.com>

> <mailto:adamt...@awabllc.com <mailto:adamt...@awabllc.com>> and so

> the HELO
> > message has two @ signs.
> >
> > Unfortunately this has now gotten us put on a CBL so I'm under more
> > pressure to figure this out.
> >
> >
> > Thanks again,
> > --Adam
> >
> >
> > On Fri, Oct 9, 2009 at 1:37 PM, Jake Vickers
> mailto:j...@qmailtoaster.com>

> > <mailto:j...@qmailtoaster.com <mailto:j...@qmailtoaster.com>>>

> wrote:
> >
> > Adam Glass wrote:
> >> Hi all,
> >>
> >> I am still trying to solve a QMT problem and have reduced it to
> >> the simplest case:  I created an account on domain
> awabllc.com <http://awabllc.com>
> >> <http://awabllc.com> with the username adamtest (using
> qmailadmin
> >> web interface).  Then I tried to log in via Squirrelmail.
>  If the
> >> username is adamtest it says ERROR: Unknown user or password
> >> incorrect.  If the username is adamt...@awabllc.com
> <mailto:adamt...@awabllc.com>

> >> <mailto:adamt...@awabllc.com <mailto:adamt...@awabllc.com>>

> it logs in successfully.
> >>
> >> Does anyone know why this happens?
> >
> > Because this is a virtual domain setup, and is designed to host
> > hundreds (thousands even) of different domains. Two users on
> > different domains with the same name would invariably happen, so
> > the system requires the full ema

Re: [qmailtoaster] Webmin Install

[Anil Aliyan]

Gentleman please allow port 1 in iptables firewall if its enabled on ur 
system. U can disable the firewall and then check it from other system if 
its working on not.



- Original Message - 
From: "Scott Collingwood" 

To: 
Sent: Friday, October 09, 2009 1:04 AM
Subject: RE: [qmailtoaster] Webmin Install



Thanks for you reply

SELinux is disabled

Scott

-Original Message-
From: David Milholen [mailto:dmilho...@wletc.com]
Sent: October-08-09 1:25 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Webmin Install

sound like a SElinux issue.
If this is turned on it may not like port 1
just for temp turn off the firewall and then check also disable SElinux
then re enable one at a time to see which is causing issue.

Scott Collingwood wrote:


No errors other the page not found from the workstation.



Regards

Scott



*From:* Vidyadhar [mailto:vidyadha...@gmail.com]
*Sent:* October-08-09 12:13 PM
*To:* qmailtoaster-list@qmailtoaster.com
*Subject:* Re: [qmailtoaster] Webmin Install



Any error are you getting while accessing http://myserver:1 ?

Regards,
Vidyadhar



*From: *"Scott Collingwood" 

*Date: *Thu, 8 Oct 2009 11:39:54 -0600

*To: *

*Subject: *[qmailtoaster] Webmin Install



I am new to the qmail toaster. have installed centos 5.0  x64 from the
iso.The mail server is running great . I ran the webmin install from
the command line instructions and it installed without error. However
I am not able to access the https://myserver:1 link



Scott Collingwood



__ Information from ESET NOD32 Antivirus, version of virus
signature database 4491 (20091008)__

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com


__ Information from ESET NOD32 Antivirus, version of virus
signature database 4491 (20091008) __

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



__ Information from ESET NOD32 Antivirus, version of virus
signature database 4491 (20091008) __

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com




-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!

-
Please visit qmailtoaster.com for the latest news, updates, and
packages.

 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




__ Information from ESET NOD32 Antivirus, version of virus 
signature

database 4491 (20091008) __

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



__ Information from ESET NOD32 Antivirus, version of virus 
signature

database 4491 (20091008) __

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Problem Updating qmail-toaster (version: 1.03-1.3.20)

[Anil Aliyan]

Your RPM database is probably stuck. This can occur if force killed rpm was 
with a force kill (kill -9 / skill -9 / killall -9) and the lock stat 
information was left behind. This lock information will limit what further 
processes can do to the rpm databases and needs to be cleared out by hand.


The files that hold lock stat information are stored in /var/lib/rpm/ as 
__db.*. It is generally considered relatively safe to clear by just removing 
them (rm -f) as they are automatically re-created. Clear them and run your 
rpm command again.


Keep in mind if this has been a situation on your box, any daily update 
routine you may have that uses RPM was likely not functioning as intended as 
a result of this and you should run an update on your machine to ensure you 
packages are current. On CentOS and Fedora machines this can be done with 
the command yum upgrade (yum -y upgrade to automate the process), and on 
RedHat ES machine you can use up2date upgrade.





- Original Message - 
From: "Alberto Guzzetti" 

To: 
Sent: Thursday, October 08, 2009 12:40 PM
Subject: [qmailtoaster] Problem Updating qmail-toaster (version: 
1.03-1.3.20)




Hi List,

I have some problem installing the latest qmail-toaster pack
(1.03.-1.3.20) below the problem, apart from the warning that aren't
such a problem.


Installing qmail-toaster-1.03-1.3.20.src.rpm
warning: user shubes does not exist - using root
warning: group shubes does not exist - using root
rpmdb: Lock table is out of available locker entries
rpmdb: Unknown locker ID: cbb
error: db4 error(22) from dbenv->close: Invalid argument
error: cannot open Packages index using db3 - Cannot allocate memory (12)
error: cannot open Packages database in /var/lib/rpm
  1:qmail-toaster  warning: user shubes does not exist - using
root%)
warning: group shubes does not exist - using root
### [100%]
error: File not found by glob: 
/usr/src/redhat/RPMS/x86_64/qmail-pop3d*.rpm



any help?



--
Cordialmente,
---
Alberto Guzzetti - R&D
Network Administrator
alberto.guzze...@digital-instruments.it

Digital Instruments S.r.l.
Via Parco degli Scout, 13 - 20091 Bresso (MI)
Tel: +39 02 66506250
Fax: +39 02 66506103
www.digital-instruments.it
---

Le informazioni, i dati ed il contenuto della comunicazione che precede,
nonch i suoi eventuali allegati, hanno carattere strettamente
confidenziale o comunque non accessibile al pubblico, e sono destinati
esclusivamente al destinatario. La loro diffusione, divulgazione,
copiatura o utilizzo da parte di soggetti diversi da quest'ultimo
proibita ai sensi del D. Lgs. 196/2003 ("Testo Unico Privacy"). Il
contenuto della comunicazione che precede, nonch i suoi eventuali
allegati, possono inoltre essere tutelati dal segreto professionale, dal
diritto d'autore, da brevetto, da marchio registrato o da altro diritto
di privativa. La loro diffusione, divulgazione, copiatura o utilizzo da
parte di soggetti diversi dal titolare del diritto quindi proibita anche
ai sensi della normativa di legge in materia, nonch perseguibile
legalmente. Qualora la comunicazione che precede sia stata da Voi
ricevuta per errore, del quale ci scusiamo, Vi preghiamo di
comunicarcelo immediatamente e di cancellarla senza diffonderla,
riprodurla o utilizzarla in alcun modo. Grazie per la collaborazione.

This e-mail may contain confidential and/or privileged information. If
you are not the intended recipient (or have received this e-mail in
error) please notify the sender immediately and delete this e-mail. Any
unauthorized copying, disclosure or distribution of the material in this
e-mail is strictly forbidden.

Diese E-Mail enthält vertrauliche und/ oder rechtlich geschützte
Informationen. Wenn Sie nicht der richtige Adressat sind oder diese
E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den
Absender und vernichten Sie diese E-Mail. Das unerlaubte Kopieren sowie
die unbefugte Weitergabe dieser E-Mail ist nicht gestattet.







Nessun virus nel messaggio in uscita.
Controllato da AVG - www.avg.com
Versione: 8.5.421 / Database dei virus: 270.14.7/2421 -  Data di rilascio: 
10/07/09 20:49:00








-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...

Re: [qmailtoaster] QMT on VMWare ESXi

[Anil Aliyan]

Make sure kenel-hearders rpm is installed before you install vmware-tools.


- Original Message - 
From: "Michael Colvin" 

To: 
Sent: Wednesday, October 07, 2009 10:08 PM
Subject: [qmailtoaster] QMT on VMWare ESXi


Is anyone running the QMT iso on a VMWare VM?  I had one set up just to play
with, but noticed the clock keeps horrible time.  I was able to adjust the
"ticks" to keep it more accurate, along with an hourly sync, but this seems
ridiculous.  From what I've found, it's an issue with CentOS in a VM, but
I've got CentOS running in a VM for a PBX, and it seems fine.

This is the only time I've ever had an issue with the system/hardware clock
drifting dramatically in a VM.  There are also other VM's on this physical
server that keep sync fine...


Michael J. Colvin
NorCal Internet Services
www.norcalisp.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] QMT on VMWare ESXi

[Anil Aliyan]

Dear Michael,

Have u install vmware-tools in the centos qmt guest ??? And in ur ESXi 
server have u setup ntp server??? if both are set then ur maching should 
sync time with ur ESXi host time. I am using more than 10 ESX and ESXi 
server in my environment with amost every OS guest machines and all are 
having correct time. Most importantly ur ESX host must have a working NTP 
server configured to keep host and guest to correct time.


If u can check and tell more bout ur ESX and guest configs will help in 
sorting out the problem. Sometimes ISO images are configured with some 
scripts which are croned and run regularly to set time automatically. please 
check if ur guest has any such script installed. Secondly make sure that you 
have rights to change settings on ur guest os.


try # ln -sf /usr/share/zoneinfo/urzone(e.g. US)/Cental  /etc/localtime

Regards,

Anil Aliyan

- Original Message - 
From: "Michael Colvin" 

To: 
Sent: Wednesday, October 07, 2009 10:08 PM
Subject: [qmailtoaster] QMT on VMWare ESXi


Is anyone running the QMT iso on a VMWare VM?  I had one set up just to play
with, but noticed the clock keeps horrible time.  I was able to adjust the
"ticks" to keep it more accurate, along with an hourly sync, but this seems
ridiculous.  From what I've found, it's an issue with CentOS in a VM, but
I've got CentOS running in a VM for a PBX, and it seems fine.

This is the only time I've ever had an issue with the system/hardware clock
drifting dramatically in a VM.  There are also other VM's on this physical
server that keep sync fine...


Michael J. Colvin
NorCal Internet Services
www.norcalisp.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Error while sending mail from outlook

[Anil Aliyan]

Dear Amit,

U can ask ur remote clients to use submission port 587 instead of smtp port 25

This way you`ll not have to change anything on server side.


Regards,

Anil Aliyan
  - Original Message - 
  From: a...@ikf.co.in 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Saturday, October 03, 2009 5:02 PM
  Subject: [qmailtoaster] Error while sending mail from outlook


  Hi Everyone,

  From today onwards I started getting error in outlook while sending mail from 
one of my remote location office..Error image is attached with the mail..I had 
white listed the static ip of remote location in spamdyke..Also I had make and 
entry for particular static ip in tcp.smtp file to skip the RBL check..But 
still I'm getting same error.

  Regards,

  Amit 


--


  
-
  Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
  
-
   Please visit qmailtoaster.com for the latest news, updates, and packages.
   
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] No mails in Bcc should be delivered

[Anil Aliyan]

Hi Amit/Eric

Read this. May be u can find a solution this way.

http://www.nabble.com/how-to-block-BCC-recipients-or-BCC-mails-using-qmail-td14040662.html

Regards,

Anil Aliyan
  - Original Message - 
  From: amit IKF 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Friday, September 18, 2009 10:52 PM
  Subject: Re: [qmailtoaster] No mails in Bcc should be delivered


  Hi Anil,

  Eric is correct, qmail-inject wont work in my case. Basically I want to track 
Bcc email id on the server or do not deliver Bcc emails at all.
  Is there any way from the log file of SMTP from where we can find out the Bcc 
mails delivery?

  Regards,

  Amit



  On Fri, Sep 18, 2009 at 7:39 PM, Eric Shubert  wrote:

Anil Aliyan wrote:

  Hi Amit,
   I am not sure but after reading your posts i was looking for some 
solution for the problem u are facing. I dont know much but i have found a url 
about qmail-inject. It says about some arguments to be passed to qmail-inject 
to send the mails. with these arguments u can force ur qmail server to send 
mails the way u want. I am just assuming that it may help you, so just read the 
url given below for those options. If i`ll find anything else more specific 
i`ll let u know.
   And may be Eric can explain in more detail about those options.
   http://www.qmail.org/qmail-manual-html/man8/qmail-inject.html
   qmail-inject(8)  Maintenance Procedures   qmail-inject(8)



  *i*Delete any incoming  *Message-ID*  field.   Normally,  if
   *Message-ID*   is   supplied,   it  overrides  the  usual
   *Message-ID* field created by *qmail-inject*.

  *r*Use a per-recipient  VERP.   *qmail-inject*  will  append
   each  recipient  address  to the envelope sender of the
   copy going to that recipient.

  *m*Use a per-message VERP.  *qmail-inject* will  append  the
   current date and process ID to the envelope sender.

  *OPTIONS*

  *-a*Send the message to all addresses 
<http://www.qmail.org/qmail-manual-html/man5/addresses.html> given as /recip/ 
argu-

   ments; do not use header recipient addresses.

  *-h*Send the message to all  header  recipient  addresses.
   For  non-forwarded  messages,  this means the addresses
   listed under *To*, *Cc*, *Bcc*, *Apparently-To*.  For forwarded
   messages,   this   means  the  addresses  listed  under
   *Resent-To*, *Resent-Cc*, *Resent-Bcc*.  Do not use any /recip/
   arguments.

  *-A*(Default.)  Send the message to all addresses given as
   /recip/  arguments.   If no /recip/ arguments are supplied,
   send the message to all header recipient addresses.

  *-H*Send the message to all  header  recipient  addresses,
   and to all addresses given as /recip/ arguments.


  *-f*/sender/

   Pass /sender/  to  *qmail-queue*  as  the  envelope  sender
   address.   This  overrides *Return-Path* and all environ-
   ment variables.

  *-N*(Default.)  Feed the resulting message to *qmail-queue*.

  *-n*Print the message rather than  feeding  it  to  *qmail-*
   *queue*.
   Regards,
   Anil Aliyan

 - Original Message -

 *From:* amit IKF <mailto:a...@ikf.co.in>
 *To:* qmailtoaster-list@qmailtoaster.com
 <mailto:qmailtoaster-list@qmailtoaster.com>
 *Sent:* Friday, September 18, 2009 10:27 AM
 *Subject:* Re: [qmailtoaster] No mails in Bcc should be delivered

 Hi Eric,


 If Bcc is there then I should be able to track to whose id the mail
 was sent,so I can provide the log to the sir.

 Regards,

 Amit

 On Fri, Sep 18, 2009 at 2:35 AM, Eric Shubert mailto:e...@shubes.net>> wrote:

 I think you would need to do some custom coding to accomplish
 this. Of course, it would only apply to submissions. After an
 email is submitted there is no bcc to speak of any more.

 What would you want to have happen if someone were to use bcc?

 amit IKF wrote:

 Hi Eric,

 Actually problem is that my sir wants to tap all the
 incoming and outgoing mails from that server. For this I had
 modified tap file. But problem is I'm unable to tap Bcc mail.
 Actually the more problem is I'm able to get mail on email
 id where I had moved a copy of both incoming and outgoing
 emails, but i'm unable to get detail to which id the mail
 sent. So my sir asked me to completely stop Bcc mail
 transaction from the server.

 Any

Re: [qmailtoaster] No mails in Bcc should be delivered

[Anil Aliyan]

Hi Amit,

I am not sure but after reading your posts i was looking for some solution for 
the problem u are facing. I dont know much but i have found a url about 
qmail-inject. It says about some arguments to be passed to qmail-inject to send 
the mails. with these arguments u can force ur qmail server to send mails the 
way u want. I am just assuming that it may help you, so just read the url given 
below for those options. If i`ll find anything else more specific i`ll let u 
know.

And may be Eric can explain in more detail about those options.

http://www.qmail.org/qmail-manual-html/man8/qmail-inject.html

qmail-inject(8)  Maintenance Procedures   qmail-inject(8)



 iDelete any incoming  Message-ID  field.   Normally,  if
  Message-ID   is   supplied,   it  overrides  the  usual
  Message-ID field created by qmail-inject.

 rUse a per-recipient  VERP.   qmail-inject  will  append
  each  recipient  address  to the envelope sender of the
  copy going to that recipient.

 mUse a per-message VERP.  qmail-inject will  append  the
  current date and process ID to the envelope sender.

OPTIONS
 -aSend the message to all addresses given as recip argu-
  ments; do not use header recipient addresses.

 -hSend the message to all  header  recipient  addresses.
  For  non-forwarded  messages,  this means the addresses
  listed under To, Cc, Bcc, Apparently-To.  For forwarded
  messages,   this   means  the  addresses  listed  under
  Resent-To, Resent-Cc, Resent-Bcc.  Do not use any recip
  arguments.

 -A(Default.)  Send the message to all addresses given as
  recip  arguments.   If no recip arguments are supplied,
  send the message to all header recipient addresses.

 -HSend the message to all  header  recipient  addresses,
  and to all addresses given as recip arguments.

 -fsender
  Pass sender  to  qmail-queue  as  the  envelope  sender
  address.   This  overrides Return-Path and all environ-
  ment variables.

 -N(Default.)  Feed the resulting message to qmail-queue.

 -nPrint the message rather than  feeding  it  to  qmail-
  queue.


Regards,

Anil Aliyan


  - Original Message - 
  From: amit IKF 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Friday, September 18, 2009 10:27 AM
  Subject: Re: [qmailtoaster] No mails in Bcc should be delivered


  Hi Eric,


  If Bcc is there then I should be able to track to whose id the mail was 
sent,so I can provide the log to the sir.

  Regards,

  Amit


  On Fri, Sep 18, 2009 at 2:35 AM, Eric Shubert  wrote:

I think you would need to do some custom coding to accomplish this. Of 
course, it would only apply to submissions. After an email is submitted there 
is no bcc to speak of any more.

What would you want to have happen if someone were to use bcc?

amit IKF wrote:

  Hi Eric,

  Actually problem is that my sir wants to tap all the incoming and 
outgoing mails from that server. For this I had modified tap file. But problem 
is I'm unable to tap Bcc mail.
  Actually the more problem is I'm able to get mail on email id where I had 
moved a copy of both incoming and outgoing emails, but i'm unable to get detail 
to which id the mail sent. So my sir asked me to completely stop Bcc mail 
transaction from the server.

  Any help would be appreciated for the same.

  Regards,

  Amit


  On Thu, Sep 17, 2009 at 8:13 PM, Eric Shubert mailto:e...@shubes.net>> wrote:

 I believe that would require some custom coding.

 What is the problem you're trying to solve? Perhaps there is a
 better solution.

 amit IKF wrote:

 Hi Andreas,
 Thats ok for me. Actually its for my another server and I don't
 my any users on that server to send or recieve the Bcc mails.

 Regards,

 Amit

 On Thu, Sep 17, 2009 at 1:21 PM, Andreas Galatis mailto:a...@unet.de> <mailto:a...@unet.de <mailto:a...@unet.de>>> 
wrote:

Hi Amit,

Do you really want that? You would not be able to receive
 mails from any
mailinglist.
Andreas
Am Thursday 17 September 2009 09:14:56 schrieb amit IKF:
 > Hi Everyone,
 >
 > Is there any way that non of the Bcc mails get delivered to
anyone from my
 > server? This should be apply for both incoming and
 outgoing Bcc
mails.
 >
 > Thanks and regards,
 >
 > Amit



 ---Eric 'shubes'




-- 
-Eric 'shubes'

[qmailtoaster] Qmail-toaster rebuild with chkuser (Resolved)

[Anil Aliyan]

Sorry for inconvenience... i made a mistake in editing the 
checkuser_settings.h file which casued the problem. Same has been resloved 
now.


Regards,

Anil Aliyan

- Original Message - 
From: "Anil Aliyan" 

To: 
Sent: Monday, May 18, 2009 8:05 PM
Subject: [qmailtoaster] Qmail-toaster rebuild with chkuser



Dear Jakes,

I followed the instructions given on the 
http://wiki.qmailtoaster.org/index.php/Chkuser page and did a rebuild of 
qmail-toaster and installed it. Rebuild and Installation process went 
smooth but after installation when i did qmailctl start it showed an error 
as given below. I tried second time to start the server and this time it 
started but still unable to send or recieve mails. What went wrong?


Restarting qmail:
* Stopping qmail-smtpd.
svc: warning: unable to control /var/qmail/supervise/smtp: supervise not 
running

* Sending qmail-send SIGTERM and restarting.
svc: warning: unable to control /var/qmail/supervise/send: supervise not 
running

* Restarting qmail-smtpd.
svc: warning: unable to control /var/qmail/supervise/smtp: supervise not 
running

[r...@mail service]#

Regards,

Anil Aliyan



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Qmail-toaster rebuild with chkuser

[Anil Aliyan]

Dear Jakes,

I followed the instructions given on the 
http://wiki.qmailtoaster.org/index.php/Chkuser page and did a rebuild of 
qmail-toaster and installed it. Rebuild and Installation process went smooth 
but after installation when i did qmailctl start it showed an error as given 
below. I tried second time to start the server and this time it started but 
still unable to send or recieve mails. What went wrong?


Restarting qmail:
* Stopping qmail-smtpd.
svc: warning: unable to control /var/qmail/supervise/smtp: supervise not 
running

* Sending qmail-send SIGTERM and restarting.
svc: warning: unable to control /var/qmail/supervise/send: supervise not 
running

* Restarting qmail-smtpd.
svc: warning: unable to control /var/qmail/supervise/smtp: supervise not 
running

[r...@mail service]#

Regards,

Anil Aliyan



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Qmail Queue Problem after Restore from Backup

[Anil Aliyan]

Dear Jakes,

I have installed latest Qmailtoaster on Centos 5.3 and restored backup from my 
previous mail server which was running on Fedora 5. But there are a few problem 
after i restored from the backup.

1. I am getting errors in the /var/log/qmail/send/current

2009-05-17 07:45:08.019361500 warning: unable to open todo/9540194 
2009-05-17 07:45:08.020361500 warning: unable to open todo/522
2009-05-17 07:45:08.020361500 warning: unable to open todo/5244495
2009-05-17 07:45:08.020361500 warning: unable to open todo/5244489 
2009-05-17 07:45:08.021360500 warning: unable to open todo/9540192
2009-05-17 07:45:08.021360500 warning: unable to open todo/5243547
2009-05-17 07:45:08.021360500 warning: unable to open todo/5243666
2009-05-17 07:45:08.022360500 warning: unable to open todo/5244451

I tried repairing the queue using qmqtool and queue_repair.py  but problem 
remains the same.


2. I cannot modify user details in vqadmin and qmailadmin, such as password and 
quota.

How can resolve these issues.  Please help this my production server.

Regards,

Anil Aliyan

[qmailtoaster] I HATE READ RECIEPTS ------ Re: [qmailtoaster] Deleted email accounts.

[Anil Aliyan]

- Original Message - 
From: "Ernie Regaspi" 

To: 
Sent: Friday, May 15, 2009 2:03 AM
Subject: [qmailtoaster] Deleted email accounts.



Hi,

Is there a logs in qmail where I can trace deleted email accounts?

Thanks

--
Ernie P. Regaspi
System Engineer
Technical Support Center
MICROGENESIS BUSINESS SYSTEMS
2nd Floor Alegria Bldg., Annex
2229 Chino Roces Ave., Makati City
Tel. : +632.8930584 Ext. 204
Fax : +632.892.6710
Cel : +632.9228572181
Email : erega...@mgenesis.com
URL : www.mgenesis.com
This communication is intended solely for the individual to whom it is 
addressed. If you are not the intended recipient of this communication, 
you may not disseminate, distribute, copy or otherwise disclose or use the 
contents of this communication without the written authority of 
Microgenesis Business Systems. If you have received this communication in 
error, please delete and destroy all copies and kindly notify the sender 
by return email or telephone immediately. Thank you



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

We can send mails to that server they cannot send us


@40004a00fe3f1c9694a4 CHKUSER accepted rcpt: from  
remote  rcpt  : 
found existing recipient
@40004a00fe3f1c975024 ALLOWED from: skkham...@gnfc.in to: 
rajivs...@gnvfc.net origin_ip: 210.212.133.110 origin_rdns: (unknown) auth: 
(unknown)
@40004a00fe3f1c99115c CHKUSER accepted rcpt: from  
remote  rcpt  : 
found existing recipient
@40004a00fe3f1ca4dce4 ALLOWED from: skkham...@gnfc.in to: 
rgseque...@gnvfc.net origin_ip: 210.212.133.110 origin_rdns: (unknown) auth: 
(unknown)


- Original Message - 
From: "Jake Vickers" 

To: 
Sent: Thursday, May 07, 2009 1:08 AM
Subject: Re: [qmailtoaster] SpamDyke Issue



Anil Aliyan wrote:

i'll arrange for sending logs to you jakes.


You can just post the rejection parts. And post them to the list. I'm 
leaving for the day, so I may or may not be back on list this evening.
Plus on the list you will get others looking at things that I may 
overlook.



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

Hi Jakes

Here u can see in the extracts of the log that its denying the origin ip 
address not the mail server ip address 210.212.133.110



@40004a00cf3b25b4b3cc DENIED_RDNS_MISSING from: size=5810 to: 
pmbh...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: 
(unknown)

@40004a00cf3c01b5763c tcpserver: end 7014 status 0
@40004a00cf3c01b585dc tcpserver: status: 21/30
@40004a00cf3c09ec61e4 tcpserver: status: 22/30
@40004a00cf3c09eebf5c tcpserver: pid 7017 from 220.225.151.180
@40004a00cf3c09efc8fc tcpserver: ok 7017 mail.gnvfc.net:203.77.193.20:25 
:220.225.151.180::42866
@40004a00cf3d13d37e2c DENIED_RDNS_MISSING from: a...@gnfc.in to: 
gsar...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: 
(unknown)

@40004a00cf3d2b522814 tcpserver: end 7017 status 0
@40004a00cf3d2b523b9c tcpserver: status: 21/30
@40004a00cf3d330bd154 tcpserver: status: 22/30
@40004a00cf3d330e3e6c tcpserver: pid 7019 from 220.225.151.180
@40004a00cf3d330f4bf4 tcpserver: ok 7019 mail.gnvfc.net:203.77.193.20:25 
:220.225.151.180::42867
@40004a00cf3f03bc2b4c DENIED_RDNS_MISSING from: a...@gnfc.in to: 
sase...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: 
(unknown)

@40004a00cf3f1c2c844c tcpserver: end 7019 status 0
@40004a00cf3f1c2c93ec tcpserver: status: 21/30
@40004a00cf3f23aa97a4 tcpserver: status: 22/30
@40004a00cf3f23ad00d4 tcpserver: pid 7021 from 220.225.151.180
@40004a00cf3f23ae3184 tcpserver: ok 7021 mail.gnvfc.net:203.77.193.20:25 
:220.225.151.180::42868
@40004a00cf402daff21c DENIED_RDNS_MISSING from: a...@gnfc.in to: 
sase...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: 
(unknown)

@40004a00cf41099646ec tcpserver: end 7021 status 0
@40004a00cf4109969124 tcpserver: status: 21/30
@40004a00cf41112eb45c tcpserver: status: 22/30
@40004a00cf411131255c tcpserver: pid 7023 from 220.225.151.180
@40004a00cf4111322b14 tcpserver: ok 7023 mail.gnvfc.net:203.77.193.20:25 
:220.225.151.180::42869

@40004a00cf411df1f26c tcpserver: status: 23/30
@40004a00cf411df46b3c tcpserver: pid 7025 from 88.243.103.52
@40004a00cf411df549e4 tcpserver: ok 7025 mail.gnvfc.net:203.77.193.20:25 
:88.243.103.52::2507
@40004a00cf421afca73c DENIED_RDNS_MISSING from: a...@gnfc.in to: 
aktotl...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: 
(unknown)
@40004a00cf421afdd404 DENIED_RDNS_MISSING from: a...@gnfc.in to: 
sase...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: 
(unknown)

@40004a00cf423277fd94 tcpserver: end 7023 status 0
@40004a00cf423278111c tcpserver: status: 22/30

- Original Message - 
From: "Jake Vickers" 

To: 
Sent: Thursday, May 07, 2009 1:08 AM
Subject: Re: [qmailtoaster] SpamDyke Issue



Anil Aliyan wrote:

i'll arrange for sending logs to you jakes.


You can just post the rejection parts. And post them to the list. I'm 
leaving for the day, so I may or may not be back on list this evening.
Plus on the list you will get others looking at things that I may 
overlook.



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

i'll arrange for sending logs to you jakes.



- Original Message - 
From: "Jake Vickers" 

To: 
Sent: Wednesday, May 06, 2009 11:33 PM
Subject: Re: [qmailtoaster] SpamDyke Issue



Anil Aliyan wrote:
Dear Jakes i also have checked it but both the server are managed by 
myself and i have reverse DNS for both the servers.


u can check urself my mailserver for RDNS. 210.212.133.110 points to 
mail.gnfc.in and 203.77.193.20 points at mail.gnvfc.net


mail.gnfc.in has only TrendMicro IMSS installed on it and not a 
qmailtoaster installation its a custom installation done by someone else 
before i joined this company.
mail.gnvfc.net is complete installed by myself and is a qmailtoaster 
installation.


the transcript i sent u in last mail says that an email was sent by 
mail.gnfc.in to  a user on mail.gnvfc.net.
mail.gnfc.in is sending it to mail.gnvfc.net but is denied/refused and 
the mail kept laying in the queue of mail.gnfc.in.


hence mail.gnvfc.net (qmailtoaster) is refusing the clients ip address in 
the mail header and not the ip address of the mail server mail.gnfc.in. 
which is not included in the transcript i have sent u earlier.




So on the QMT machine, what does it show when you lookup the rDNS of the 
sending box? Try restarting bind as well and see if that effects the 
cache.
Also post relevant logs from the QMT machine showing the message and it's 
rejection.


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

Dear Jakes i also have checked it but both the server are managed by myself 
and i have reverse DNS for both the servers.


u can check urself my mailserver for RDNS. 210.212.133.110 points to 
mail.gnfc.in and 203.77.193.20 points at mail.gnvfc.net


mail.gnfc.in has only TrendMicro IMSS installed on it and not a qmailtoaster 
installation its a custom installation done by someone else before i joined 
this company.
mail.gnvfc.net is complete installed by myself and is a qmailtoaster 
installation.


the transcript i sent u in last mail says that an email was sent by 
mail.gnfc.in to  a user on mail.gnvfc.net.
mail.gnfc.in is sending it to mail.gnvfc.net but is denied/refused and the 
mail kept laying in the queue of mail.gnfc.in.


hence mail.gnvfc.net (qmailtoaster) is refusing the clients ip address in 
the mail header and not the ip address of the mail server mail.gnfc.in. 
which is not included in the transcript i have sent u earlier.




Regards,

Anil Aliyan



- Original Message - 
From: "Jake Vickers" 

To: 
Sent: Wednesday, May 06, 2009 11:06 PM
Subject: Re: [qmailtoaster] SpamDyke Issue



Anil Aliyan wrote:
yes i installed it using the script only. My users are using "My Server 
Require Authentication" in their email clients. I have checked this using 
my laptop with datacard but mail are not getting delivered. They keep 
laying in the queue and after 4 hours  recieved them with following 
error:


-Original Message-
From: Mail Delivery Subsystem [mailto:mailer-dae...@gnfc.in]
Sent: Tuesday, May 05, 2009 10:49 PM
To: a...@gnfc.in
Subject: Warning: could not send message for past 4 hours

   **
   **  THIS IS A WARNING MESSAGE ONLY  **
   **  YOU DO NOT NEED TO RESEND YOUR MESSAGE  **
   **

The original message was received at Tue, 5 May 2009 18:05:49 +0530 from
localhost [127.0.0.1]

  - Transcript of session follows - .. while talking to
mail.gnvfc.net.:


They're sitting the in the Qmail queue or the Outlook outbox?
The error you've posted above is a message generated by Postfix. It looks 
like the place you're trying to send a message to is denying your message 
because you have no reverse DNS set up for your mail server. This would 
have nothing to do with qmailtoaster and actually would show that your 
qmailtoaster is functioning correctly. It got the message from your 
Outlook client and is attempting to send it to gnvfc.net, but they're 
denying the message since you do not have rDNS.


-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)


Please visit qmailtoaster.com for the latest news, updates, and 
packages.



 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

Very nice u have showed me a ray of hope. I'll do it and let u know. Thanks


- Original Message - 
From: "Kent Busbee" 

To: 
Sent: Wednesday, May 06, 2009 10:36 PM
Subject: Re: [qmailtoaster] SpamDyke Issue



A quicker more easier option maybe to disable the RDNS in spamdyke:

edit /etc/spamdyke/spamdyke.conf
change
reject-empty-rdns
to
reject-empty-rdns=0

See
http://spamdyke.org/documentation/README.html#RDNS

I am not sure if you have to restart spamdyke, qmail, or reboot (or not).

See response below; Anil Aliyan wrote:

How can i remove spamdyke safely. Please guide.

Regards,

Anil Aliyan
  - Original Message -
  From: Phil Leinhauser
  To: qmailtoaster-list@qmailtoaster.com
  Sent: Wednesday, May 06, 2009 7:14 PM
  Subject: Re: [qmailtoaster] SpamDyke Issue


  Sure, you have a couple of choices,
  - remove spamdyke
  - add RDNS exclusions for all the IPs your clients use


  Because 587 hasn't come to full acceptance YET, client applications 
like

Outlook lack the wizard settings to flip this easily.  There are several
sites that show how to make these changes, in fact, I made one myself
for my customers.  I have over 50 domains and an average of 30 users per
domain.  Yes, it's a painful pill to have to swallow but in a lot of
cases you won't have any choice.  It's better to get it over with now.
I have also run into a few broadband providers that block port 25 all
together (Comcast & RCN)!  They only allow you to use 25 to their server
or you use 587.  This is a huge boost for spam prevention because it
keeps the low lifes of the world from putting up a spam server.






  > Hiii,
  >
  > But i think thats not the only solution. What if i am an ISP??? 
Should

i
  > tell all my customers not to use port 25??? I have 5 virtual domains
and
  > nearly 500 employees and i cannot guide daily every that please do 
not

use
  > port 25 instead use 587. most of the users just know how to send
recieve
  > and read write emails they dont understand how to change setting etc.
So
  > practically sometimes it becomes very difficult to teach them on the
  > phone.
  >
  > Regards,
  >
  > Anil Aliyan
  > - Original Message -
  >
  From: Phil Leinhauser
  > To: qmailtoaster-list@qmailtoaster.com
  > Sent: Wednesday, May 06, 2009 5:37 PM
  > Subject: Re: [qmailtoaster] SpamDyke Issue
  >
  >
  > Are your users using port 587 and SMTP auth for submitting their 
mail?

  > I believe all the checks are bypassed when mail comes in that port.
587
  > has been gaining favor in the past several years as the standard
  > submission port for clients instead of 25.
  >
  > Phil
  >
  > > Dear Jakes,
  > >
  > > This is regarding SpamDyke. I have installed SpamDyke 3-4 days back
  > only.
  > > Before that i was not using it. But since the installation most of
my
  > > roaming users and remote offices who are using different isp
broadband
  > > connection are unable to send mails as spamdyke deny to accept 
mails

  > from
  > > them due to no RDNS.
  > >
  > > It is understandable if spamdyke refuses connections from mail
servers
  > who
  > > does'nt point to any RDNS but I just dont understand why does it
  > refuses
  > > my
  > > authentic/genuine local users who are using my mailserver. Why does
  > > spamdyke
  > > checks RDNS for clients who are using other ISPs internet
  > connections???
  > >
  > > Is there anyway to tell spamdyke not to check RDNS for client ip
  > > addresses.
  > > Some of my roaming users use Data Cards and everytime they connect
  > > internet
  > > using data card a different ip address is assigned to the laptop so
i
  > > cannot
  > > keep track of each and every address and allow them in the spamdyke
  > > whiletlists.
  > >
  > > Or i should not use spamdyke at all.
  > >
  > > Regards,
  > >
  > > Anil Aliyan
  > >
  > >
  > 
 > -

  > > Managed Qmailtoaster servers are now available
  > > Visit http://qmailtoaster.com/QMTManaged.html to order yours today!
  > >
  > > Qmailtoaster is sponsored by Vickers Consulting Group
  > > (www.vickersconsulting.com)
  > >
  > > Please visit qmailtoaster.com for the latest news, updates, and
  > > packages.
  > >
  > >
  > > To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
  > > For additional commands, e-mail: testing-h...@qmailtoaster.com
  > >
  > >
  > >



Kent Busbee
Director of Technology
Northlake Christian School


-
   

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

For the time being i have removed the qmail/supervise/run --> run.spamdyke
and copied original qmail/supervise/run  and now server is runing as before 
without spamdyke checks.


Regards,

Anil Aliyan

- Original Message - 
From: "Phil Leinhauser" 

To: 
Sent: Wednesday, May 06, 2009 10:55 PM
Subject: RE: [qmailtoaster] SpamDyke Issue


Not being that familiar with spamdyke, isn't the whole point RDNS?

-Original Message-
From: Kent Busbee 
Sent: Wednesday, May 06, 2009 1:06 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] SpamDyke Issue

A quicker more easier option maybe to disable the RDNS in spamdyke:

edit /etc/spamdyke/spamdyke.conf
change
reject-empty-rdns
to
reject-empty-rdns=0

See
http://spamdyke.org/documentation/README.html#RDNS

I am not sure if you have to restart spamdyke, qmail, or reboot (or not).

See response below; Anil Aliyan wrote:

How can i remove spamdyke safely. Please guide.

Regards,

Anil Aliyan
  - Original Message -
  From: Phil Leinhauser
  To: qmailtoaster-list@qmailtoaster.com
  Sent: Wednesday, May 06, 2009 7:14 PM
  Subject: Re: [qmailtoaster] SpamDyke Issue


  Sure, you have a couple of choices,
  - remove spamdyke
  - add RDNS exclusions for all the IPs your clients use


  Because 587 hasn't come to full acceptance YET, client applications like
Outlook lack the wizard settings to flip this easily.  There are several
sites that show how to make these changes, in fact, I made one myself
for my customers.  I have over 50 domains and an average of 30 users per
domain.  Yes, it's a painful pill to have to swallow but in a lot of
cases you won't have any choice.  It's better to get it over with now.
I have also run into a few broadband providers that block port 25 all
together (Comcast & RCN)!  They only allow you to use 25 to their server
or you use 587.  This is a huge boost for spam prevention because it
keeps the low lifes of the world from putting up a spam server.






  > Hiii,
  >
  > But i think thats not the only solution. What if i am an ISP??? Should
i
  > tell all my customers not to use port 25??? I have 5 virtual domains
and
  > nearly 500 employees and i cannot guide daily every that please do not
use
  > port 25 instead use 587. most of the users just know how to send
recieve
  > and read write emails they dont understand how to change setting etc.
So
  > practically sometimes it becomes very difficult to teach them on the
  > phone.
  >
  > Re


[The entire original message is not included]

-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)


Please visit qmailtoaster.com for the latest news, updates, and 
packages.



 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com




-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Please visit qmailtoaster.com for the latest news, updates, and packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

yes i installed it using the script only. My users are using "My Server 
Require Authentication" in their email clients. I have checked this using my 
laptop with datacard but mail are not getting delivered. They keep laying in 
the queue and after 4 hours  recieved them with following error:


-Original Message-
From: Mail Delivery Subsystem [mailto:mailer-dae...@gnfc.in]
Sent: Tuesday, May 05, 2009 10:49 PM
To: a...@gnfc.in
Subject: Warning: could not send message for past 4 hours

   **
   **  THIS IS A WARNING MESSAGE ONLY  **
   **  YOU DO NOT NEED TO RESEND YOUR MESSAGE  **
   **

The original message was received at Tue, 5 May 2009 18:05:49 +0530 from
localhost [127.0.0.1]

  - Transcript of session follows - .. while talking to
mail.gnvfc.net.:

DATA

<<< 421 Refused. You have no reverse DNS entry.

QUIT

<<< 421 Refused. You have no reverse DNS entry.
421 Refused. You have no reverse DNS entry.
421 Refused. You have no reverse DNS entry.
221 Refused. You have no reverse DNS entry.
... Deferred: 421 Refused. You have no reverse DNS
entry.
... Deferred: 421 Refused. You have no reverse DNS
entry.
... Deferred: 421 Refused. You have no reverse DNS entry.
Warning: message still undelivered after 4 hours Will keep trying until
message is 1 day old



Regards,

Anil Aliyan



- Original Message - 
From: "Eric Shubert" 

To: 
Sent: Wednesday, May 06, 2009 10:02 PM
Subject: Re: [qmailtoaster] SpamDyke Issue



You can find instructions on disabling spamdyke on the wiki page.

I don't think you want to do that though. Your roaming/remote users should 
not be blocked by spamdyke if they authenticate successfully. Spamdyke 
bypasses all filters for authenticated connections. I'd check into why 
authentication is not apparently working.


Did you use qtp-install-spamdyke to install spamdyke?
Which version are you running?

Anil Aliyan wrote:

How can i remove spamdyke safely. Please guide.
 Regards,
 Anil Aliyan

- Original Message -
*From:* Phil Leinhauser <mailto:p...@teqknow.com>
*To:* qmailtoaster-list@qmailtoaster.com
<mailto:qmailtoaster-list@qmailtoaster.com>
*Sent:* Wednesday, May 06, 2009 7:14 PM
*Subject:* Re: [qmailtoaster] SpamDyke Issue

Sure, you have a couple of choices,
- remove spamdyke
- add RDNS exclusions for all the IPs your clients use


Because 587 hasn't come to full acceptance YET, client applications
like Outlook lack the wizard settings to flip this easily.  There
are several sites that show how to make these changes, in fact, I
made one myself for my customers.  I have over 50 domains and an
average of 30 users per domain.  Yes, it's a painful pill to have to
swallow but in a lot of cases you won't have any choice.  It's
better to get it over with now.  I have also run into a few
broadband providers that block port 25 all together (Comcast &
RCN)!  They only allow you to use 25 to their server or you use
587.  This is a huge boost for spam prevention because it keeps the
low lifes of the world from putting up a spam server.






 > Hiii,
 >
 > But i think thats not the only solution. What if i am an ISP???
Should i
 > tell all my customers not to use port 25??? I have 5 virtual
domains and
 > nearly 500 employees and i cannot guide daily every that please
do not use
 > port 25 instead use 587. most of the users just know how to send
recieve
 > and read write emails they dont understand how to change setting
etc. So
 > practically sometimes it becomes very difficult to teach them on 
the

 > phone.
 >
 > Regards,
 >
 > Anil Aliyan
 > - Original Message -
 >
From: Phil Leinhauser
 > To: qmailtoaster-list@qmailtoaster.com
 > Sent: Wednesday, May 06, 2009 5:37 PM
 > Subject: Re: [qmailtoaster] SpamDyke Issue
 >
 >
 > Are your users using port 587 and SMTP auth for submitting their
mail?
 > I believe all the checks are bypassed when mail comes in that
port. 587
 > has been gaining favor in the past several years as the standard
 > submission port for clients instead of 25.
 >
 > Phil
 >
 > > Dear Jakes,
 > >
 > > This is regarding SpamDyke. I have installed SpamDyke 3-4 days 
back

 > only.
 > > Before that i was not using it. But since the installation most
of my
 > > roaming users and remote offices who are using different isp
broadband
 > > connection are unable to send mails as spamdyke deny to accept
mails
 > from
 > > them due to no RDNS.
 > >
 > > It i

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

How can i remove spamdyke safely. Please guide.

Regards,

Anil Aliyan
  - Original Message - 
  From: Phil Leinhauser 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Wednesday, May 06, 2009 7:14 PM
  Subject: Re: [qmailtoaster] SpamDyke Issue


  Sure, you have a couple of choices, 
  - remove spamdyke
  - add RDNS exclusions for all the IPs your clients use


  Because 587 hasn't come to full acceptance YET, client applications like 
Outlook lack the wizard settings to flip this easily.  There are several sites 
that show how to make these changes, in fact, I made one myself for my 
customers.  I have over 50 domains and an average of 30 users per domain.  Yes, 
it's a painful pill to have to swallow but in a lot of cases you won't have any 
choice.  It's better to get it over with now.  I have also run into a few 
broadband providers that block port 25 all together (Comcast & RCN)!  They only 
allow you to use 25 to their server or you use 587.  This is a huge boost for 
spam prevention because it keeps the low lifes of the world from putting up a 
spam server.






  > Hiii,
  > 
  > But i think thats not the only solution. What if i am an ISP??? Should i
  > tell all my customers not to use port 25??? I have 5 virtual domains and
  > nearly 500 employees and i cannot guide daily every that please do not use
  > port 25 instead use 587. most of the users just know how to send recieve
  > and read write emails they dont understand how to change setting etc. So
  > practically sometimes it becomes very difficult to teach them on the
  > phone.
  > 
  > Regards,
  > 
  > Anil Aliyan
  > - Original Message -
  > 
  From: Phil Leinhauser
  > To: qmailtoaster-list@qmailtoaster.com
  > Sent: Wednesday, May 06, 2009 5:37 PM
  > Subject: Re: [qmailtoaster] SpamDyke Issue
  > 
  > 
  > Are your users using port 587 and SMTP auth for submitting their mail? 
  > I believe all the checks are bypassed when mail comes in that port. 587
  > has been gaining favor in the past several years as the standard
  > submission port for clients instead of 25.
  > 
  > Phil
  > 
  > > Dear Jakes,
  > >
  > > This is regarding SpamDyke. I have installed SpamDyke 3-4 days back
  > only.
  > > Before that i was not using it. But since the installation most of my
  > > roaming users and remote offices who are using different isp broadband
  > > connection are unable to send mails as spamdyke deny to accept mails
  > from
  > > them due to no RDNS.
  > >
  > > It is understandable if spamdyke refuses connections from mail servers
  > who
  > > does'nt point to any RDNS but I just dont understand why does it
  > refuses
  > > my
  > > authentic/genuine local users who are using my mailserver. Why does
  > > spamdyke
  > > checks RDNS for clients who are using other ISPs internet
  > connections???
  > >
  > > Is there anyway to tell spamdyke not to check RDNS for client ip
  > > addresses.
  > > Some of my roaming users use Data Cards and everytime they connect
  > > internet
  > > using data card a different ip address is assigned to the laptop so i
  > > cannot
  > > keep track of each and every address and allow them in the spamdyke
  > > whiletlists.
  > >
  > > Or i should not use spamdyke at all.
  > >
  > > Regards,
  > >
  > > Anil Aliyan
  > >
  > >
  > > 
-
  > > Managed Qmailtoaster servers are now available
  > > Visit http://qmailtoaster.com/QMTManaged.html to order yours today!
  > >
  > > Qmailtoaster is sponsored by Vickers Consulting Group
  > > (www.vickersconsulting.com)
  > >
  > > Please visit qmailtoaster.com for the latest news, updates, and
  > > packages.
  > >
  > >
  > > To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
  > > For additional commands, e-mail: testing-h...@qmailtoaster.com
  > >
  > >
  > >

[qmailtoaster] QmailToaster with TrendMicro IMSS

[Anil Aliyan]

Hi,

Has anyone setup and using QmailToaster with TrendMicro IMSS. If yes please 
guide me how can I install and configure the same.

Regards,

Anil Aliyan

Re: [qmailtoaster] SpamDyke Issue

[Anil Aliyan]

Hiii,

But i think thats not the only solution. What if i am an ISP??? Should i tell 
all my customers not to use port 25??? I have 5 virtual domains and nearly 500 
employees and i cannot guide daily every that please do not use port 25 instead 
use 587. most of the users just know how to send recieve and read write emails 
they dont understand how to change setting etc. So practically sometimes it 
becomes very difficult to teach them on the phone.

Regards,

Anil Aliyan
  - Original Message - 
  From: Phil Leinhauser 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Wednesday, May 06, 2009 5:37 PM
  Subject: Re: [qmailtoaster] SpamDyke Issue


  Are your users using port 587 and SMTP auth for submitting their mail?  I 
believe all the checks are bypassed when mail comes in that port.  587 has been 
gaining favor in the past several years as the standard submission port for 
clients instead of 25.

  Phil

  > Dear Jakes,
  > 
  > This is regarding SpamDyke. I have installed SpamDyke 3-4 days back only.
  > Before that i was not using it. But since the installation most of my
  > roaming users and remote offices who are using different isp broadband
  > connection are unable to send mails as spamdyke deny to accept mails from
  > them due to no RDNS.
  > 
  > It is understandable if spamdyke refuses connections from mail servers who
  > does'nt point to any RDNS but I just dont understand why does it refuses
  > my
  > authentic/genuine local users who are using my mailserver. Why does
  > spamdyke
  > checks RDNS for clients who are using other ISPs internet connections???
  > 
  > Is there anyway to tell spamdyke not to check RDNS for client ip
  > addresses.
  > Some of my roaming users use Data Cards and everytime they connect
  > internet
  > using data card a different ip address is assigned to the laptop so i
  > cannot
  > keep track of each and every address and allow them in the spamdyke
  > whiletlists.
  > 
  > Or i should not use spamdyke at all.
  > 
  > Regards,
  > 
  > Anil Aliyan
  > 
  > 
  > 
-
  > Managed Qmailtoaster servers are now available
  > Visit http://qmailtoaster.com/QMTManaged.html to order yours today!
  > 
  > Qmailtoaster is sponsored by Vickers Consulting Group
  > (www.vickersconsulting.com)
  > 
  > Please visit qmailtoaster.com for the latest news, updates, and
  > packages.
  > 
  > 
  > To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
  > For additional commands, e-mail: testing-h...@qmailtoaster.com
  > 
  > 
  >

[qmailtoaster] SpamDyke Issue

[Anil Aliyan]

Dear Jakes,

This is regarding SpamDyke. I have installed SpamDyke 3-4 days back only. 
Before that i was not using it. But since the installation most of my 
roaming users and remote offices who are using different isp broadband 
connection are unable to send mails as spamdyke deny to accept mails from 
them due to no RDNS.


It is understandable if spamdyke refuses connections from mail servers who 
does'nt point to any RDNS but I just dont understand why does it refuses my 
authentic/genuine local users who are using my mailserver. Why does spamdyke 
checks RDNS for clients who are using other ISPs internet connections???


Is there anyway to tell spamdyke not to check RDNS for client ip addresses. 
Some of my roaming users use Data Cards and everytime they connect internet 
using data card a different ip address is assigned to the laptop so i cannot 
keep track of each and every address and allow them in the spamdyke 
whiletlists.


Or i should not use spamdyke at all.

Regards,

Anil Aliyan 



-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Please visit qmailtoaster.com for the latest news, updates, and packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

[qmailtoaster] Spam Folder creation

[Anil Aliyan]

Dear Jakes,

I have one big question:

Why email clients such as MS Outlook, Outlook Express or Windows Mail are able 
to detect and segregate junk/spam mails and deliver them into junk/spam mailbox 
folder, specially those mails which are not marked or detected as SPAM mail by 
spamassassin/simscan. Is there anyway to enable my qmailtoaster mail server to 
achieve that level of detection of spam mails which above mentioned clients 
provide?

Regards,

Anil Aliyan 

Re: [qmailtoaster] Invalid Message Content Error With .DOC Attachment?

[Anil Aliyan]

and also check your /var/qmail/control/simcontrolfile.

Regards,

Anil Aliyan

- Original Message - 
From: "Jake Vickers" 

To: 
Sent: Wednesday, May 06, 2009 5:57 AM
Subject: Re: [qmailtoaster] Invalid Message Content Error With .DOC 
Attachment?




Duncan Sterling wrote:

Greetings All,

A client is complaining that all of a sudden, a regular mailing he 
receives with a .doc (M$ Word attachment) is bouncing:


> >>> DATA
> <<< 554 invalid message content  (#5.3.2)
> 554 5.0.0 Service unavailable

Any suggestions as to what my trigger this?

I found references to PDFs having this problem via googling/etc, but not 
word documents...




Look in your spam logs (/var/log/qmail/spamd) and your clamav log 
(/var/log/qmail/clamd) and see what is causing it to bounce.
Are you running an older version that still has the badmimetypes and 
badloadertypes that may be catching it?



-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)


Please visit qmailtoaster.com for the latest news, updates, and 
packages.



 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com







-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Please visit qmailtoaster.com for the latest news, updates, and packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] About Unioned Sandbox

[Anil Aliyan]

I was bout to ask same question.


- Original Message - 
From: "Phil Leinhauser" 

To: 
Sent: Saturday, May 02, 2009 10:36 PM
Subject: RE: [qmailtoaster] About Unioned Sandbox



Thanks for clearing that up Eric.  The magic that was going on behind
unionfs was the part I wasn't clear on.  That was a great explanation.

So the only files that end up in the sandbox folder from the unionfs are 
the

ones that actually need to be modified? Ie: the reads come from production
but are written to sandbox?

-Original Message-
From: news [mailto:n...@ger.gmane.org] On Behalf Of Eric Shubert
Sent: Saturday, May 02, 2009 12:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] About Unioned Sandbox

Phil Leinhauser wrote:
One of the developers may clean up my answer if I'm off a bit but I'll 
try

to explain.
The sandbox is an isolated build of your entire current setup.  It copies
your build into it and then runs the update scripts against this 
"virtual"

build.  If there are any errors, the only thing that is broken is the
sandbox, not the production build.  Once all of the patches are applied 
to

the sandbox build and there are no errors, it tells you the build was

clean.

Then it asks if you want to apply it to the production build.  At that
point, when you say yes, it throws the built sandbox system "over the

wall"

into the production folders.

This process does 2 things, first, it safely builds the patches into the
virtual build without jeopardizing the production build.  Second, it 
makes

the downtime VERY short (Less than a minute) while it applies the sandbox
build into production. If you have a lot of patches to apply, the sandbox
build can take a while.  Mine last night was pretty far out and I think I
had every QMT module patched, it took about 45 minutes to build and apply
the sandbox but only 45 seconds to copy into production.  Thus my QMT was
only down for 45 seconds.


Very good, Phil.

The copy sandbox vs unionedfs sandbox is a huge improvement.  In the 
past,
it would actually COPY your entire QMT system into a sandbox folder. 
Just

this, BEFORE applying the patches took over an hour.  Now the unionedfs

does
some magic that I'm not fully clear on but they are links to the files 
and

not copies of them so the sandbox build takes only a few minutes.


Let me see if I can explain this part a little better. There are 3 types
of sandboxes: Copied, Linked, and Unioned.

A Copied sandbox is a normal copy of most of the system files. This
takes a large amount of disk space, and quite a bit of time to create. A
 Copied sandbox is the least preferable type, but it works under any
circumstance. It was the first type developed.

The Linked type of sandbox was developed to reduce disk space
requirements. It creates hard links (directory entries, sort of like
windoze shortcuts) to system files instead of making actual copies of
them. All toaster and rpm files are still copied though, as they
shouldn't be changed in the sandbox. While the Linked type is a big
improvement over a Copied sandbox as far as disk space is concerned,
creating it still takes quite a while, although it is a good deal faster
than a Copied sandbox.

The Unioned type of sandbox was later developed for qtp-newmodel by
Justice London. This is also known as an Overlay file system. It's the
same thing that's used by "Live" CD distros. In essence, the existing
file system is used as a base for all reads. Whenever a file is to be
changed, a copy of the existing file is automatically made to a separate
area, and the changes are made to the copy. New files are also added in
the separate area. The existing/primary file system is never modified.

The Unioned type of sandbox is preferred. It's by far the fastest, and
it uses a minimal amount of disk space. Since it uses a kernel module to
implement a new filesystem type (there are several which might be used
depending on your kernel version), the kernel module needs to be
compiled and installed the first time you use it, and whenever your
kernel version changes. This is all automated (thanks to Justice), but
it does take a minute or so to run (small price to pay). The only
drawback to the Unioned sandbox is that they only work with kernel
versions 2.6.9 or greater. If your toaster runs on an older kernel,
qtp-newmodel will not offer you the option of a Unioned sandbox.

Thanks for the question, Anil, and the answer, Phil. I'll use this to
update the qtp-newmodel web page.


-Original Message-
From: Anil Aliyan [mailto:acali...@gnvfc.net]
Sent: Saturday, May 02, 2009 9:27 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] About Unioned Sandbox

Hi,

I want to know bout Unioned Sandbox. What does actually a sandbox do? 
When



we run qtp-sandbox script and it prompts for "Would you like a unioned
sanbox (qu

[qmailtoaster] About Unioned Sandbox

[Anil Aliyan]

Hi,

I want to know bout Unioned Sandbox. What does actually a sandbox do? When 
we run qtp-sandbox script and it prompts for "Would you like a unioned 
sanbox (quicker, smaller) [y]/n:" what difference does it actually makes???


Regards,

Anil Aliyan 



-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Please visit qmailtoaster.com for the latest news, updates, and packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] migrating to spamdyke

[Anil Aliyan]

Hi,

Is there anyway to allow a particular mail domain or ip address in spamdyke 
to deliver mails to my mail server.


Regards,

Anil Aliyan



- Original Message - 
From: "David Milholen" 

To: 
Sent: Friday, May 01, 2009 6:38 PM
Subject: Re: [qmailtoaster] migrating to spamdyke



Jake,
I have installed it.. I will keep you posted on how it turns out.
TM
Dave

Jake Vickers wrote:

DAVID wrote:
I was doing some intense reading about spamdyke and it seems to be the 
answer to dropping mail from outside the us or whatever countries you 
need to block for spam.
I want to migrate from spamassassin  to spamdyke. Is there any special 
changes I need to make if I currently use spam assassin to move to 
spamdyke?


Spamdyke is just a frontend for incoming SMTP connections - it has 
nothing to do with Spamassassin. You will still need to run Spamassassin 
to catch spam. Spamdyke just (if configured correctly) limits the number 
of spam messages make it to Spamassassin. Think of Spamdyke as an email 
firewall.

And you can install Spamdyke easily with Qmailtoaster-Plus.

-

Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)


Please visit qmailtoaster.com for the latest news, updates, and 
packages.



 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com





-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)


Please visit qmailtoaster.com for the latest news, updates, and 
packages.



 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com







-
Managed Qmailtoaster servers are now available
  Visit http://qmailtoaster.com/QMTManaged.html to order yours today!

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Please visit qmailtoaster.com for the latest news, updates, and packages.


 To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com
For additional commands, e-mail: testing-h...@qmailtoaster.com

Re: [qmailtoaster] Clamav 0.95.1 update issue

[Anil Aliyan]

Dear Jakes,

Reinstalling clamav-toaster resolved my problem and also i have created a daily 
cron job to delete the clamav_tmp folders from the /tmp dir just to make sure 
that nothing accumulates in the tmp dir.

I am currently running on Fedora 5 but i am planning to move my mailserver to 
Centos 5.3 . I guess backup sciprt and restore scripts will do the job for me 
to migrate current mailboxes to the new installation??? 

Regards,

Anil Aliyan

  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Sunday, April 26, 2009 1:56 AM
  Subject: Re: [qmailtoaster] Clamav 0.95.1 update issue


  Anil Aliyan wrote: 
Dear Jakes,

I have installed the lastest rpm 3 days before only and before that i was 
using clamav-toaster-0.94.2-1.3.24 and everything was just fine till that day.

I came to know bout this problem today only when my server stopped 
responding and when i check it found that there was not space left on the hard 
drive. Earlier my mail server was using 39 GB and today whole 260 GB HDD was 
full just because of the clamav update file download files accumulated in the 
/tmp folder. There were more then 1000 folders in tmp dir and all of them were 
having around 60 mb of main.cvd and daily.cvd files. After deleting all those 
tmp folder everything started working asusual. 

I`ll reinstall it today and let you know.

Is it fine to install the new updated version using fdr50-install-script.sh 
script??

Whenever new updates are availabe i usually un-install the older versions 
maually and then install newer version using script mentioned above. Is it 
correct to install this way??


  What version of Fedora are you running?

[qmailtoaster] Vpopmail

[Anil Aliyan]

Dear Jakes,

I want to enable default domain feature in vpopmail-toaster. I dont see any 
options in the installer script to add my option --enable-detfault-domain while 
rebuilding the src rpms.


Regards,

Anil Aliyan

Re: [qmailtoaster] Clamav 0.95.1 update issue

[Anil Aliyan]

Dear Jakes,

I have installed the lastest rpm 3 days before only and before that i was using 
clamav-toaster-0.94.2-1.3.24 and everything was just fine till that day.

I came to know bout this problem today only when my server stopped responding 
and when i check it found that there was not space left on the hard drive. 
Earlier my mail server was using 39 GB and today whole 260 GB HDD was full just 
because of the clamav update file download files accumulated in the /tmp 
folder. There were more then 1000 folders in tmp dir and all of them were 
having around 60 mb of main.cvd and daily.cvd files. After deleting all those 
tmp folder everything started working asusual. 

I`ll reinstall it today and let you know.

Is it fine to install the new updated version using fdr50-install-script.sh 
script??

Whenever new updates are availabe i usually un-install the older versions 
maually and then install newer version using script mentioned above. Is it 
correct to install this way??


Regards,

Anil Aliyan

  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Saturday, April 25, 2009 5:02 PM
  Subject: Re: [qmailtoaster] Clamav 0.95.1 update issue


  Anil Aliyan wrote: 
This is what my freshclam log has:

freshclam daemon 0.95.1 (OS: linux-gnu, ARCH: i386, CPU: i386)
ClamAV update process started at Sat Apr 25 12:21:00 2009
main.cvd is up to date (version: 50, sigs: 500667, f-level: 38, builder: 
sven)
WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 
193.1.193.64)
WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net
Trying host db.in.clamav.net (130.59.10.36)...
WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 
130.59.10.36)
WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net
WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 9288, sigs: 45614, f-level: 42, builder: guitar)
Database updated (546281 signatures) from db.in.clamav.net (IP: 
193.1.193.64)



  That is normal in the top of the log. You should have a LOT more in your logs.
  If that's all you show, then your freshclam cannot contact any of the update 
servers to download the .cdiff files to update main.cvd and is downloading the 
whole thing again. Check your firewall rules. Also check for the existence of 
the daily.cvd file.
  Did you make any changes to freshclam's config file?
  You may also try reinstalling the new version, since you're the only one that 
has reported any problems out of 323 downloads.
  Maybe someone else can chime in a few tips - otherwise I'd suggest you go ask 
over at the clamav mailing lists and see if anyone there offers any suggestions.

Re: [qmailtoaster] Clamav 0.95.1 update issue

[Anil Aliyan]

This is what my freshclam log has:

freshclam daemon 0.95.1 (OS: linux-gnu, ARCH: i386, CPU: i386)
ClamAV update process started at Sat Apr 25 12:21:00 2009
main.cvd is up to date (version: 50, sigs: 500667, f-level: 38, builder: sven)
WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 193.1.193.64)
WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net
Trying host db.in.clamav.net (130.59.10.36)...
WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 130.59.10.36)
WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net
WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net
WARNING: Incremental update failed, trying to download daily.cvd
Downloading daily.cvd [100%]
daily.cvd updated (version: 9288, sigs: 45614, f-level: 42, builder: guitar)
Database updated (546281 signatures) from db.in.clamav.net (IP: 193.1.193.64)


Regards,

Anil Aliyan

  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Saturday, April 25, 2009 4:23 PM
  Subject: Re: [qmailtoaster] Clamav 0.95.1 update issue


  Anil Aliyan wrote: 
Hi All,

I updated clamav-toaster 3 days back to new version 
clamav-toaster-0.95.1-1.3.27  and today all of sudden my mail server stopped 
responding. I logged in and couldnt find any thing abnormal untill i restarted 
the qmail services and it prompted that there is not enough space to started th 
services. I looked everywhere but couldn't find anything space consuming in any 
folder untill i entered the /tmp folder which was full of clamav tmp folder 
which were created due to freshclam.

Why these folder are not getting deleted once the update is completed??

Why is it downloading entire database again (main.cvd)?

I there something wrong with this new version.

For now i have reverted back to the previous version and its working fine.

Please guide me.



  I am not experiencing that issue here. 
  Look in your /var/log/clamav/freshclam.log file for any clues as to why your 
system is behaving differently.

[qmailtoaster] Clamav 0.95.1 update issue

[Anil Aliyan]

Hi All,

I updated clamav-toaster 3 days back to new version 
clamav-toaster-0.95.1-1.3.27  and today all of sudden my mail server stopped 
responding. I logged in and couldnt find any thing abnormal untill i restarted 
the qmail services and it prompted that there is not enough space to started th 
services. I looked everywhere but couldn't find anything space consuming in any 
folder untill i entered the /tmp folder which was full of clamav tmp folder 
which were created due to freshclam.

Why these folder are not getting deleted once the update is completed??

Why is it downloading entire database again (main.cvd)?

I there something wrong with this new version.

For now i have reverted back to the previous version and its working fine.

Please guide me.


Regards,

Anil Aliyan

  - Original Message - 
  From: Alberto Guzzetti 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Tuesday, April 21, 2009 12:57 PM
  Subject: [qmailtoaster] Clamav 0.95.1 issue


  Greetings List,

  I've got the following error trying to install the last clamav update on 
CentOS 5.2


  Installing clamav-toaster-0.95.1-1.3.27.src.rpm
  rpmdb: Lock table is out of available locker entries
  rpmdb: Unknown locker ID: 8bd
  error: db4 error(22) from dbenv->close: Invalid argument
  error: cannot open Packages index using db3 - Cannot allocate memory (12)
  error: cannot open Packages database in /var/lib/rpm



  Any idea? It's the first time I have an error like that.

  
-
 Managed Qmailtoaster servers are now available Visit 
http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is 
sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit 
qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, 
e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: 
testing-h...@qmailtoaster.com