[qmailtoaster] djbdns...

2007-04-08 Thread Mark Samples
Is it just me or has anyone else just gotten the current djbdns-1.0.5 as 
an html script off of the server?
Used 'current-download-script.sh' to get current files, retried, just on 
djbdns with same results both
individually and w/the script.  The SRC rpm is only 74 bytes long and 
contains html code.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Users can't send mails due to RBL / PBL / CBL

2007-03-06 Thread Mark Samples

One thing that could be overlooked... Making the following assumptions:
1) You configuration is using blocklists (blacklists), i.e. you have in 
/var/qmail/control/blacklists, an

entry, e.g. '-r cbl.abuseat.org -r ... -r ...'
On the blacklist entries, these '-r xxx' is used by rblsmtpd to check 
blacklists.  'rblsmtpd' also has an option
to 'exclude' an address from being checked if you add to your blacklist 
a '-a myhosed.domain.com' or
'-a 111.222.333.444', those addresses will be passed through unchecked. 
The submission port is the best way to go, but it has not always been there.

Tim Korves wrote:


Hi list,

we're facing a problem. Some of our users are unable to send mail, regardless 
if using SMTP-Auth or not. The server does not accept their mails for sending 
to a remote host, instead it tells the user, that his IP is listed @spamhaus... 
First I told all users, who were facing this problem to enable their SMTP-Auth, 
but this didn't help them. What can we do now?

Regards,

Tim


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] reverse dns

2007-02-11 Thread Mark Samples

Jean-Paul van de Plasse wrote:


really, also quote the rest next time :)

While most rDNS entries only have one PTR record, it is perfectly 
legal to have many different PTR records[1]. For example, if a 
webserver supports many virtual hosts, there can be one PTR record for 
each host and some versions of name server software will automatically 
add a PTR record for each host. Multiple PTR records can cause a 
couple of problems, including triggering bugs in programs that only 
expect there to ever be a single PTR record and, in the case of a 
large webserver, having hundreds of PTR records can cause the DNS 
packets to be much larger than normal.


Perfectly legal, and can cause a couple of problems .. (jk)

Anyways, You are mixing up 2 things..


Yes and no.
Yes in the sense that a provider should be able to do classless (this is 
so I won't have to call them everytime
I want to change my dns, not that this will be donw that often, just 
don't want to mess with the bureacracy
and want to maintain dns in my own maintenance window, not theirs).  
This is my maintenance issue.


The rfc2317 is part of the overall solution, i.e. put inplace those 
compliances that let my mail server react with
other mail servers, so I can minimize my mail problems (i.e. be 
proactive in playing in the overall sandbox), for any mail customers I 
have.  The truth of the matter is, you are right, most do not do this, 
but with MS's self image of being the sole motivator of innovation, one 
can probably expect anomalies such as this appear
off and on, so whether or not I agree with that is beside the point, if 
I want to play in that sandbox (personally
I don't care, but my  customers do), I have to have in place the pieces 
that accomodate this interaction.  Unless
I wait until it happens again and have 8 godzillian complaints because 
they cannot send to hotmail, complaints are bad, especially if you can 
prevent them.


In order to implement the rfc2317 part, one has to be able to control 
their own dns, especially the reverse delegation.  One can easily 
control their forward delegation, it's the reverse that is the trick, 
unless you yourself control say an entire class C.  If you do not it is 
(for what I want to do) imperative the provider
accomodates classless delegation, some you can control your own dns 
segment.  The main solution everyone
describes works fine for me also, it is working right now.  But server 
farms and large volume mail servers
attract crap mail, users that want to send all kinds of mass mail (I am 
also aware that qmail can control this
also, have utilized it), which causes receivers of this unwanted crap 
mail to tag it as spam in the receiving

ends spam methodology.  This is a whole other subject.

I am a lazy administrator/programmer, if I know a user can (and will) 
produce a particular anomaly before
they do it, I want to be pro-active to circumvent that problem prior to 
it happening, I would rather do work
up front and be prepared, than wait until I encounter the problem again, 
i.e. if you know you have a high probablility of having a fire, it is 
better you have the extinguishers on hand before you open your doors


In summary, my original inquiry was about classless delegation, and if 
anyone using qmail in a similar colocation situation uses it, in my neck 
of the woods, even though they say they can do it, the reality is they
tell you can just to make the sale, and then try to re-negoitate it 
after the fact.  I have to have this in order
to do the other, unless I put in requests and run the gaunlet every time 
I want a dns update (I do not need

my provider to manage my segment).


I am looking into how common classless delegation is and if it is 
reasonable to ask a provider to do it.  It appears in this neck of the 
woods, they know very little about it (in most cases, they want you to 
believe otherwise).  I think probably I should take this to another 
forum, I am an avid qmail admin/user, and maybe
combining these two issues here is occupying unnecessary bandwidth, 
because the same thing could effect
other mail servers, not just qmail.  I ask here, to see if anyone was 
running under similar circumstances.  And
if they have encountered the same problems obtaining classless 
delegation.  I will still run qmail.

*

The issue in regards to this, is that several web server farms already 
let one manage their own dns, seems
like I should be able to do it on a mail server (the implementation 
should be the same).




Classless reverse (rfc 2317) has nothing todo with multimple ptr 
records..
And well if multiple ptr records help, I am intressted, but as far as 
my knowledge goes, the only test is if there is a ptr record at all..


JP

- Original Message - From: Mark Samples [EMAIL PROTECTED

[qmailtoaster] reverse dns

2007-02-10 Thread Mark Samples

Hi all -
Long time no speak...

I have a server, I have had to move (re-colocate), it is my own, in 
specific,
the reason I ask is for my own dns purposes, I seem to believe even 
though I may have only a /29 at my
current location, I still want to run my own dns so I can update it as 
needed and on my own time frame (I want to skip the need to contact 
someone else to do something I can do).  In regards to the dns, it is my 
belief, based on what I have encountered running commercial mail servers 
and dealing with the customer end and spam
and all, that the reverse is important to reach certain domains, i.e. 
multiple PTR records for the same IP.
I got this talking directly to MicroSlug hotmail boys.  Now, I know, to 
get mail working, this is not a total requirement, my issue with it, its 
basically, I want to develop an overall mail system that can be tweeked to
require minimal physical interaction (in particular, automatic inclusion 
of the main philosophies and requirements).


I colocated to a colocation provider that said I would be able to run my 
own dns and I actually asked about the reverse delegation, so I could 
manage my own without having to get their intervention everytime (I have 
done dns and I know this methodology), so, my question, is there other 
more widely accepted methodologies
for doing this that has worked for others?  If so I am interested in 
hearing about your solutions, as I may have overlooked something in this 
regard.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] reverse dns

2007-02-10 Thread Mark Samples

Vince Callaway wrote:


I'm running several servers on dynamic IP's.  The reverse DNS is not
important for those.

Your upstream provider should be able to provide you with a mail server
you can relay through.  QT is setup to do that with no issues.
 

I am using freedns.afraid.org.  I am not using a dynamic IP, it is 
static, I colocated because
all I needed was the connection.  All is working well, as is,  I just 
wanted to be able to accomodate those large
email servers and comply (even though I personally am not fond of them) 
with their philosophies, in particular hotmail, since many customers 
send to people at hotmail, just did want problems with not
accepting mail because the domain is not listed as a reverse PTR.  Did 
some research on this, and in the
past it has never been a problem, but recently with all of the 
blacklisting, reverse dns is being checked by some of the large 
providers.  Of course my experience with this is the provider I worked 
for was being spammed more than my current employer (maybe it was for 
other reasons, this was above and beyond virus,
seems someone was pissed at them) which is 100,000 times bigger.  As a 
side note, the place where I am colocated at  I get virtually no spam 
(of course I use toaster and other counter measures which I do not wnat 
to disclose, oops this'll probably open that door(:-)).



As for DNS I use http://xpertdns.com It is $6.95 a year for 1 to 5
domains.  They have a web interface that is simple to use and I control
everything.  Their nameservers are hosted in two different parts of the
country.  Something I feel is important.  They also support dynamic IP.

I personally feel that using static IPs is just bad policy.  Sometime
soon I will share with this group a disaster recorvery plan I'm working
on for my clients.  It outlines why hosting DNS yourself and static IPs
are bad.




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] reverse dns

2007-02-10 Thread Mark Samples
Try this URL, it explains it, however, this is U.S., not all overseas 
providers do the same and vice-versa,
it is my understanding China (RIPE?) does not require a reverse. 
http://en.wikipedia.org/wiki/Reverse_DNS_lookup

Jean-Paul van de Plasse wrote:


Hi,

I am trying to follow this, but getting somewhat confuzed really..
If I read this correctly you want an ip to resolve to multiple 
hostname's (one for each of your mail domains).
And the reason is that providers (ie hotmail) are checking the prt 
record to match with the domain?
Are you really sure this is happening, I know that it is checked if 
there is a ptr record for an ip, but not if the content matched the 
email domain..


This would be quite a problem otherwise, as far as I know, only one 
ptr per ip is allowed..


The other thing is, what makes static ip's a bad thing?

JP
- Original Message - From: Mark Samples [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Sent: Saturday, February 10, 2007 7:42 PM
Subject: Re: [qmailtoaster] reverse dns



Vince Callaway wrote:


I'm running several servers on dynamic IP's.  The reverse DNS is not
important for those.

Your upstream provider should be able to provide you with a mail server
you can relay through.  QT is setup to do that with no issues.

I am using freedns.afraid.org.  I am not using a dynamic IP, it is 
static, I colocated because
all I needed was the connection.  All is working well, as is,  I just 
wanted to be able to accomodate those large
email servers and comply (even though I personally am not fond of 
them) with their philosophies, in particular hotmail, since many 
customers send to people at hotmail, just did want problems with not
accepting mail because the domain is not listed as a reverse PTR.  
Did some research on this, and in the
past it has never been a problem, but recently with all of the 
blacklisting, reverse dns is being checked by some of the large 
providers. Of course my experience with this is the provider I worked 
for was being spammed more than my current employer (maybe it was for 
other reasons, this was above and beyond virus,
seems someone was pissed at them) which is 100,000 times bigger.  As 
a side note, the place where I am colocated at  I get virtually no 
spam (of course I use toaster and other counter measures which I do 
not wnat to disclose, oops this'll probably open that door(:-)).



As for DNS I use http://xpertdns.com It is $6.95 a year for 1 to 5
domains.  They have a web interface that is simple to use and I control
everything.  Their nameservers are hosted in two different parts of the
country.  Something I feel is important.  They also support dynamic IP.

I personally feel that using static IPs is just bad policy.  Sometime
soon I will share with this group a disaster recorvery plan I'm working
on for my clients.  It outlines why hosting DNS yourself and static IPs
are bad.




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: 
[EMAIL PROTECTED]







-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] reverse dns

2007-02-10 Thread Mark Samples
I think the key term in the portion that pertains to Multiple PTR 
Records, is not that it is required, but,
'perfectly legal' (i.e. not a requirement), read on for the details.  
IMHO the DNS as it exists is too open, i.e. it want to be everybody's 
buddy by giving them an out, instead of a static standard.  There are 
many different methodologies implemented to attempt to accomodate or 
ever expanding internet.  A lot of them are work arounds for upcoming 
and already exisiting problems with system, some of them really should 
not be leveraged at
al large scale, but if you read this, you will find many providers have 
elected to leverage some of these, such as multiple reverse PTR's to 
implemented an anti-spamming or security strategy.  As of now, I am not 
sure that MicroSlug hotmail is still doing it but they were a year or so 
ago, and I had many calls regarding customers not being able to send to 
hotmail accounts, hence that prompted the enquiry.

Jean-Paul van de Plasse wrote:


Hi,

I am trying to follow this, but getting somewhat confuzed really..
If I read this correctly you want an ip to resolve to multiple 
hostname's (one for each of your mail domains).
And the reason is that providers (ie hotmail) are checking the prt 
record to match with the domain?
Are you really sure this is happening, I know that it is checked if 
there is a ptr record for an ip, but not if the content matched the 
email domain..


This would be quite a problem otherwise, as far as I know, only one 
ptr per ip is allowed..


The other thing is, what makes static ip's a bad thing?

JP
- Original Message - From: Mark Samples [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Sent: Saturday, February 10, 2007 7:42 PM
Subject: Re: [qmailtoaster] reverse dns



Vince Callaway wrote:


I'm running several servers on dynamic IP's.  The reverse DNS is not
important for those.

Your upstream provider should be able to provide you with a mail server
you can relay through.  QT is setup to do that with no issues.

I am using freedns.afraid.org.  I am not using a dynamic IP, it is 
static, I colocated because
all I needed was the connection.  All is working well, as is,  I just 
wanted to be able to accomodate those large
email servers and comply (even though I personally am not fond of 
them) with their philosophies, in particular hotmail, since many 
customers send to people at hotmail, just did want problems with not
accepting mail because the domain is not listed as a reverse PTR.  
Did some research on this, and in the
past it has never been a problem, but recently with all of the 
blacklisting, reverse dns is being checked by some of the large 
providers. Of course my experience with this is the provider I worked 
for was being spammed more than my current employer (maybe it was for 
other reasons, this was above and beyond virus,
seems someone was pissed at them) which is 100,000 times bigger.  As 
a side note, the place where I am colocated at  I get virtually no 
spam (of course I use toaster and other counter measures which I do 
not wnat to disclose, oops this'll probably open that door(:-)).



As for DNS I use http://xpertdns.com It is $6.95 a year for 1 to 5
domains.  They have a web interface that is simple to use and I control
everything.  Their nameservers are hosted in two different parts of the
country.  Something I feel is important.  They also support dynamic IP.

I personally feel that using static IPs is just bad policy.  Sometime
soon I will share with this group a disaster recorvery plan I'm working
on for my clients.  It outlines why hosting DNS yourself and static IPs
are bad.




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: 
[EMAIL PROTECTED]







-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] reverse dns ALSO...

2007-02-10 Thread Mark Samples
This also describes what I originally was inquiring about any way, 
Classless Reverse DNS, described in
RFC 2317, the 'technical name' eluded me at the time, but this 
description describes my earlier question and

colocation.

Mark Samples wrote:

I think the key term in the portion that pertains to Multiple PTR 
Records, is not that it is required, but,
'perfectly legal' (i.e. not a requirement), read on for the details.  
IMHO the DNS as it exists is too open, i.e. it want to be everybody's 
buddy by giving them an out, instead of a static standard.  There are 
many different methodologies implemented to attempt to accomodate or 
ever expanding internet.  A lot of them are work arounds for upcoming 
and already exisiting problems with system, some of them really should 
not be leveraged at
al large scale, but if you read this, you will find many providers 
have elected to leverage some of these, such as multiple reverse PTR's 
to implemented an anti-spamming or security strategy.  As of now, I am 
not sure that MicroSlug hotmail is still doing it but they were a year 
or so ago, and I had many calls regarding customers not being able to 
send to hotmail accounts, hence that prompted the enquiry.

Jean-Paul van de Plasse wrote:


Hi,

I am trying to follow this, but getting somewhat confuzed really..
If I read this correctly you want an ip to resolve to multiple 
hostname's (one for each of your mail domains).
And the reason is that providers (ie hotmail) are checking the prt 
record to match with the domain?
Are you really sure this is happening, I know that it is checked if 
there is a ptr record for an ip, but not if the content matched the 
email domain..


This would be quite a problem otherwise, as far as I know, only one 
ptr per ip is allowed..


The other thing is, what makes static ip's a bad thing?

JP
- Original Message - From: Mark Samples 
[EMAIL PROTECTED]

To: qmailtoaster-list@qmailtoaster.com
Sent: Saturday, February 10, 2007 7:42 PM
Subject: Re: [qmailtoaster] reverse dns



Vince Callaway wrote:


I'm running several servers on dynamic IP's.  The reverse DNS is not
important for those.

Your upstream provider should be able to provide you with a mail 
server

you can relay through.  QT is setup to do that with no issues.

I am using freedns.afraid.org.  I am not using a dynamic IP, it is 
static, I colocated because
all I needed was the connection.  All is working well, as is,  I 
just wanted to be able to accomodate those large
email servers and comply (even though I personally am not fond of 
them) with their philosophies, in particular hotmail, since many 
customers send to people at hotmail, just did want problems with not
accepting mail because the domain is not listed as a reverse PTR.  
Did some research on this, and in the
past it has never been a problem, but recently with all of the 
blacklisting, reverse dns is being checked by some of the large 
providers. Of course my experience with this is the provider I 
worked for was being spammed more than my current employer (maybe it 
was for other reasons, this was above and beyond virus,
seems someone was pissed at them) which is 100,000 times bigger.  As 
a side note, the place where I am colocated at  I get virtually no 
spam (of course I use toaster and other counter measures which I do 
not wnat to disclose, oops this'll probably open that door(:-)).



As for DNS I use http://xpertdns.com It is $6.95 a year for 1 to 5
domains.  They have a web interface that is simple to use and I 
control
everything.  Their nameservers are hosted in two different parts of 
the
country.  Something I feel is important.  They also support dynamic 
IP.


I personally feel that using static IPs is just bad policy.  Sometime
soon I will share with this group a disaster recorvery plan I'm 
working
on for my clients.  It outlines why hosting DNS yourself and static 
IPs

are bad.




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: 
[EMAIL PROTECTED]







-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: 
[EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org

Re: [qmailtoaster] reverse dns

2007-02-10 Thread Mark Samples
Virtual domains, running under one IP, multiple PTR records pointed at 
the same IP.


Erik A. Espinoza wrote:


I dont get what your asking.

If your colo provider is allowing you to run dns for your ip
addresses, and you own a domain wehre is the problem.

Simply set A records, and PTR records that match. Viola.

Erik

On 2/10/07, Mark Samples [EMAIL PROTECTED] wrote:


Hi all -
Long time no speak...

I have a server, I have had to move (re-colocate), it is my own, in
specific,
the reason I ask is for my own dns purposes, I seem to believe even
though I may have only a /29 at my
current location, I still want to run my own dns so I can update it as
needed and on my own time frame (I want to skip the need to contact
someone else to do something I can do).  In regards to the dns, it is my
belief, based on what I have encountered running commercial mail servers
and dealing with the customer end and spam
and all, that the reverse is important to reach certain domains, i.e.
multiple PTR records for the same IP.
I got this talking directly to MicroSlug hotmail boys.  Now, I know, to
get mail working, this is not a total requirement, my issue with it, its
basically, I want to develop an overall mail system that can be 
tweeked to

require minimal physical interaction (in particular, automatic inclusion
of the main philosophies and requirements).

I colocated to a colocation provider that said I would be able to run my
own dns and I actually asked about the reverse delegation, so I could
manage my own without having to get their intervention everytime (I have
done dns and I know this methodology), so, my question, is there other
more widely accepted methodologies
for doing this that has worked for others?  If so I am interested in
hearing about your solutions, as I may have overlooked something in this
regard.

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] reverse dns

2007-02-10 Thread Mark Samples
The problem is not the mail server, but, the anti spam measures other 
mail providers take
as anti spamming measures.  I.e. [EMAIL PROTECTED] send email to 
[EMAIL PROTECTED], domainb as an anti spam
measure, checks reverse dns PTR if the  domaina is not in the reverse 
lookup, say it is actually  server
joe.blow.com not mail.domaina, the antispam measure turns down the 
message (on the receiving end).


This is where I actually talked to MicroSlug, and they were saying that 
if one did  virtual  hosting
(i.e  through naming) they said that each on had to have a reverse PTR 
for each domain.  Which after
doing some investigation, I came upon a few sites that actually had 
multiple PTR (reverse records) that pointed to the same IP, which if you 
read the URL I posted, it actually addresses the Multiple revers PTRS,
there is an RFC pertaining to it.  There is currently no problem with 
mine at this time, but, I want to have counter measures in place prior 
to any such encounter (it did happen with one of my companies mail 
servers, and that is what I found out).


In the biggest part of the DNS world I would say most do not encounter 
this and thus deny it's existence, but
it does exist, and I have encountered, and if I had a correct answer, I 
would agree with everyone else.  And say what is the problem  Best 
explaination I can give you.


The main issue is to circumvent this problem so it does not effect your 
customers.  Is it right?  Is it proper? That's debatable. The fact is 
when a mainstream mail provider does it, and you have customers that send to
that provider, because there are millions of accounts there, it makes 
more sense (at least in the short term) to comply with (in this case 
MicroSlug hotmail) than to have to explain to 200 or 300 customers why 
mail your
mail is being turned down at hotmail.Hope this helps put things in 
perspective, it is not a 'toaster' issue, maybe it does nopt belong 
here, back to the original question about classless reverse delegation.


Erik A. Espinoza wrote:


I dont get what your asking.

If your colo provider is allowing you to run dns for your ip
addresses, and you own a domain wehre is the problem.

Simply set A records, and PTR records that match. Viola.

Erik

On 2/10/07, Mark Samples [EMAIL PROTECTED] wrote:


Hi all -
Long time no speak...

I have a server, I have had to move (re-colocate), it is my own, in
specific,
the reason I ask is for my own dns purposes, I seem to believe even
though I may have only a /29 at my
current location, I still want to run my own dns so I can update it as
needed and on my own time frame (I want to skip the need to contact
someone else to do something I can do).  In regards to the dns, it is my
belief, based on what I have encountered running commercial mail servers
and dealing with the customer end and spam
and all, that the reverse is important to reach certain domains, i.e.
multiple PTR records for the same IP.
I got this talking directly to MicroSlug hotmail boys.  Now, I know, to
get mail working, this is not a total requirement, my issue with it, its
basically, I want to develop an overall mail system that can be 
tweeked to

require minimal physical interaction (in particular, automatic inclusion
of the main philosophies and requirements).

I colocated to a colocation provider that said I would be able to run my
own dns and I actually asked about the reverse delegation, so I could
manage my own without having to get their intervention everytime (I have
done dns and I know this methodology), so, my question, is there other
more widely accepted methodologies
for doing this that has worked for others?  If so I am interested in
hearing about your solutions, as I may have overlooked something in this
regard.

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Exporting thunderbird's junk filters

2006-11-18 Thread Mark Samples
I have thought about this also, seems like one could get the source for 
T'bird, their filters are really very good,

haven't had time to look into it though.
Eric Shubes wrote:


Guillermo Villasana wrote:
 


I was wondering. Is there a way to export the thunderbird's junk filters
and add them to spammassasin?

Just a thought.

Greetz
Terius

   


Not that I'm aware of, and I highly doubt it (although it's an interesting
thought).

The process that's been commonly used is simply to run sa-learn against TB's
junk folder. That should accomplish the same thing. Keep in mind, when
training the SA bayes database, you need to train it with ham as well as
spam for it to be effective.

 





Re: [qmailtoaster] Slow pop3 login

2006-11-05 Thread Mark Samples

Erik Espinoza wrote:


Great, i'll keep telling anyone using BIND to not to :-P



I am personally looking for an alternative to BIND. I just don't like 
djbdns :P


I have used bind, powerdns, djbdns.  Out of all three, both powerdns and 
djbdns separate the cache from
the authoratative portion, for instance, on powerdns, it's recursor 
lacks something to be desired, it has
not matured - yet.  So in that case, you end up running dnscache or bind 
as the backend caching nameserver.


From an ISP standpoint after having done pretty much all three, bind 
and it's operation and the way
it is supposed to behave,  is the best and least problematic 
(maintenance is not as easy as with the other
two).  Given the vast amount of help one may get on a small ISP and 
needing someone with enough experience to deal with BIND if you are 
going on vacation, anything much more complex than shutting down
and restarting the server, is a pipe dream.  Most people I ever got 
didn't have a clue about *nix, didn't
wanna know, and were just Windows geeks.  The new BIND mentions using 
different backends on
the authoritative  side, so maybe someone will come up with a plugin 
that will work.



I like Microsoft DNS Server better than djbdns. . . But I digress. . .

Erik

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Kinda has something to do with qmail

2006-11-03 Thread Mark Samples
I have all of the previous mentioned, just checking to see if I missed 
some.  I am trying
rsync as many as possible for my server, the remainder that has no 
ability to rsync (or other such
updateable method), I go ahead and put in /var/qmail/control/blacklists, 
the mail server responds
much more quickly if these are run locally rather than doing external 
lookups.


BTW, I have one coming in (consistently) that looks like a method to 
gateway spammers, not for sure,
but it come through with a different IP every time.  I have gone to the 
URL and jacked with it a bit,

maybe someone here can shed some light...
Here is the 'Received:' line from the mail header:
from unknown (HELO ?http://mail.oldartero.com:8889/cgi-bin/put) 
(84.108.51.126)  by hq.dmsgranbury.com with SMTP; 27 Oct 2006 12:49:37 -0


The IP number is different every time.

[EMAIL PROTECTED] wrote:


I think in particular what you are asking for are ranges of IP addresses
that belong to dialup and broadband internet access providers.  I, too,
would like these addresses for blacklisting purposes.
   



Try blackholes.us they differentiate between countries and ISP's

Google a lil' about blackholes.us +isp


 


Dairenn Lombard [EMAIL PROTECTED] - BroadSpire Systems
Administration Dept.
BroadSpire, Inc. - http://www.broadspire.com/
Security, Scalability  Automation

   


-Original Message-
From: Mark Samples [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 02, 2006 4:14 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Kinda has something to do with qmail


Does anyone know of any downloadable dul lists for stateside
dsl/dialup.  In particular
verizon and swsmell (er swbell)?  Looking for some blocklist
info on dul
and have run into very little
as far as dul

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]


 


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


   





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] Kinda has something to do with qmail

2006-11-02 Thread Mark Samples
Does anyone know of any downloadable dul lists for stateside 
dsl/dialup.  In particular
verizon and swsmell (er swbell)?  Looking for some blocklist info on dul 
and have run into very little

as far as dul

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Changelog for spamassassin and qmail-toaster

2006-10-13 Thread Mark Samples
I would hold on the spamassassin, it appears they have already released 
3.1.7, 3.1.6 apparently
had a major problem (saw this on the spamassassin site the other day, 
3.1.6 has only been out,

I believe less than a month)
Michael Amster wrote:

What are the changes in 1.3.3 of spamassasin-toaster (looks like it 
went from 3.1.4 to 3.1.5) and what changed in qmail-toaster-1.0.3?  
When is the spamassassin-3.1.6 making it to the qmailtoaster site from 
Erik's dev site?



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] tcpserver

2006-10-12 Thread Mark Samples
With all of the discussion on rbl's and utilization of such, also with 
the recent changes
in spammers counter measures, in particular, the recent 'bayes 
poisoning' attempts (specifically
random text with an image, if this is run through spamassassin, and 
learned as spam, the text
portion will poison your bayes db).  I would like to open the following 
discussion in terms of

the toaster's methodology.

What, in terms of tcpserver's rules, could be done to this. Obviously, 
blacklists have their

pro's and con's, i.e. what is one man's garbage is another man's gold.
In particular, if one is going to check blacklists, what could be done 
to do this at the
tcpserver level, for instance, when the run  script is run for smtp, the 
options, '-R' and '-H'
is set, so if one is going to check a blacklist, and do a dns lookup 
anyway, what would be the
pro's and con's of removing '-R' and '-H' and changing the program from 
'true' to something else?
If certain tests weren't met at that level send back the appropriate 
error message, and terminate

the connection.

Ideas?

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] how to do this?

2006-10-12 Thread Mark Samples
See topic 'tcpserver' maybe I should have been more descriptive, it is 
an effort to try and
address this.  My idea is if one is going to do an rblcheck anyway why 
not address this at the

/var/qmail/supervise/smtp/run level with tcpserver.

What I am thinking is the rblcheck comes after the initial tcpserver 
connection anyway, so if one
had a set of other qualifying rules (probably specific to their mail 
system), why not do some of the

'culling' at that level, before it even reaches spamassassin.

Let's face it, whereas one does not want to become too conservative in 
this manner, I firmly believe
by establishing certain criteria up front, will (eventually) force ISP 
compliance to certain rules.
Having worked with ISP's and being gouged to comply with reverse PTR's 
by major players, this is
not a half bad idea, reverse DNS is important, simply because analyzing 
most of the spam I
receive that makes it past spamassassin, in a large part come from 
dialup's (what I am seeing

is around 40%).

So here is the theory, cull out mail at the lowest possible level, so if 
doing a lookup at the tcpserver
level against a *.cdb in the run script, stops it there, there is no 
need to go further.



Simone Marzona wrote:


Hi all

Is there a way to mark a mail as spam in a similar way of the one done 
by spamassassin, but using only rbl lookup?


I'm searching something like qmail-rblchk of (www.morettoni.net) wich 
could be installed system wide ( qmailqueue ?) and doesn't use .qmail .


The idea is this: if a mail comes from a listed ip then deliver it to 
a specific maildir (or put a specific header inside and deliver 
normally). If it's not listed deliver normali through 
qmailqueue/spamassassin.


Whitout rbl lookups the spam is too high, with rbl there are too many 
false positives.


thanks in advance

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] OOPs... Re: [qmailtoaster] tcpserver

2006-10-12 Thread Mark Samples

I have to correct myself... :-[
The rbl checks are done at the 'run' script level
Mark Samples wrote:

With all of the discussion on rbl's and utilization of such, also with 
the recent changes
in spammers counter measures, in particular, the recent 'bayes 
poisoning' attempts (specifically
random text with an image, if this is run through spamassassin, and 
learned as spam, the text
portion will poison your bayes db).  I would like to open the 
following discussion in terms of

the toaster's methodology.

What, in terms of tcpserver's rules, could be done to this. Obviously, 
blacklists have their

pro's and con's, i.e. what is one man's garbage is another man's gold.
In particular, if one is going to check blacklists, what could be done 
to do this at the
tcpserver level, for instance, when the run  script is run for smtp, 
the options, '-R' and '-H'
is set, so if one is going to check a blacklist, and do a dns lookup 
anyway, what would be the
pro's and con's of removing '-R' and '-H' and changing the program 
from 'true' to something else?
If certain tests weren't met at that level send back the appropriate 
error message, and terminate

the connection.

Ideas?

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] smtp gateway

2006-10-10 Thread Mark Samples
That would be. yes! 
1) Make an MX record for whatever server(s) you want to do this with 
that point to

your qmail-toaster
2) for the domain you want to do this for, assign that new MX record as 
it's mail exchanger.

3) Add an entry into smtproutes for that domain, format:
   domain:relay:port

I use the MX records for a domain as a tag, more than anything, a naming 
convention,
you do not have to use them specifically, just make sure whichever host 
is utilizing this,

has MX records that point to your gateway.

You will have to have some method to sort the messages into folders, 
i.e. when they come
through tagged as spam, either the client (Outlook) or some other 
method, like maildrop

to put things in their proper places.

Erol KAHRAMAN wrote:


hi guys,
is it possible to configure my qmail box as a smtp gateway ? it will 
check

for viruses and spams and will forward mails to an other mail server like
exchange. If this is possible, my second question will this, is it 
possible

to get users from exchange for qmail smtp gateway ?




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Spamassassin user preferences

2006-10-09 Thread Mark Samples

Quinn Comendant wrote:

I also was wondering about this. 

With unix accounts + sendmail every user has their own SA config file at ~/.spamassassin/user_prefs. But with vpopmail I don't think SA knows where to look for the file. 


I think the best option is to move all SA configuration into MySQL and then it 
can be managed by the user via a web-based interface. Does anybody know how 
this works? I will check into it and report back.
 

I use MySQL db configuration exclusively.  No directory files, 
Squirrelmail, all userprefs can be
controlled through Squirrelmail, and the db is dumped every night (BTW, 
all the addressbook

stuff, is included in this dump).


Quinn


On Fri, 29 Sep 2006 11:17:30 -0700, Eric Shubes wrote:
 

There is some user level control available in 
/var/qmail/control/simcontrol.  You can vary the level at which spam 
is dropped (spam_hits setting). See 
http://wiki.qmailtoaster.com/index.php/Simscan
I don't know if you can adjust the score at which something is 
considered spam or not though.


Please let us know what you find out (and update the wiki accordingly!). ;)
   



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



 




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] [REQUEST I NFO] Spamassasin autoremove

2006-10-09 Thread Mark Samples

Erik Espinoza wrote:


Mattias,

This is a simscan 1.2 thing. If you're using all the latest packages,
spam with 12+ settings would work just fine.

I gave Jake a copy of my mailfilter mods to stress test (actually, it 
should work w/o
stress testing, the major things I did different was just the regex 
matching, I added a couple

of extra checks), have not heard from him.  It is working fine here.
If anyone else wants to run it and test it, I'll send it to them.  If 
Eric want's it to test at

the development level.


This is why I've not been working on mailfilter. I just plain don't
have the time to develop this feature right now.

Sorry. . .

Erik

On 10/8/06, Mattias Segerdahl [EMAIL PROTECTED] wrote:


Erik,

Did this change in the 3.1.6 update, meaning that mailfilter is active
again? Because in the versions before that, even spam with 12+ didn't
get rejected.

mattias

Erik Espinoza wrote:
 I find my qmailtoaster running well on my CentOS, Every spam are
 re-marked
 with SPAM, and send a notification mail to senders and 
postmaster

 about the spam e-mails they sent.

 That's odd. It shouldn't do that. It should send the mail to the
 reciever with the subject ***SPAM***. The only way it could do this is
 if you are running qmail-scanner
 (http://toribio.apollinare.org/qmail-scanner/), which is an
 unsupported QmailToaster configuration.

 If you are using this, you'll probably have better luck e-mailing
 their mailing list for config details.

 But could we set the these spam mail to be automatically deleted, 
and let

 only postmaster received the notification? rather than the current
 policies.

 Currently mail with a score of 5 - 11.9 gets the subject rewritten to
 ***SPAM*** and sent to the receiver.  12 and up gets rejected at the
 smtp server, and the sending smtp server is responsible for generating
 an error message to the sender (or in the case of the spammer, move on
 to the next victim).

 Because when the qmailtoaster send the notification to the sender 
I found

 that every sender of the spam  are nonexistent mailboxes, these will
 waste
 bandwidth at certain number notifications sent by the qmailtoaster.

 Which is why the QmailToaster doesn't do this.

 Erik

 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: 
[EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] MYSQL help

2006-10-09 Thread Mark Samples

Craig Smith wrote:


Hi there,

I'm currently working on a setup and scripts that will give our company a
failover server that we can immediately switch to
in the event of failure without clients ever knowing it was off.  I am
planning of putting this in the wiki if people
are interested.

As part of my solution I am using a mysqldump and import, but I've heard
that mysql can replicate the database live.
 

I have used this and mysqldump is better for the following reasons (BTW 
I have used SQL
extensively and have set up this  exact same scenario, to include Sybase 
and Unify):


1) Unless you have SERIOUS Support for the DB back end in terms of a robust
   database setup, in the case of MySQL, InnoDB tables, RAID, etc.  The 
replication

   is not worth the headache.
2) In my experience, the way MySQL is typically used on the internet, it 
is a quick

   and dirty database, works well, is relatively easy to set up... BUT...
3) When dealing with databases, replication (IMHO) lends itself to 
relatively HIGH END
   equipment, large databases, as well as huge amounts of sensitive 
data (not that your
   email accounts aren't sensitive).  So unless your benefactor 
(whether it be yourself or
   other) is willing to invest in a minimum of 2 identical servers just 
for databases and replication,
   MySQL is fast enough and there is probably not that many rows of 
data to be worth
   replication.  Typically to do this (in a way I consider 
philosophically worth while), replication

   is not needed, and it is much more prudent to dump and restore.
4) In a nutshell, unless you have millions of rows of sensitive data, 
the complexity tradeoff is not worth

   it.


How do I go about configuring mysql to specifically replicate the vpopmail
database to my backup server so that the backup
server always has an up to date copy of the mysql database?

I can manage without that, but I think it would be more efficient method.  


Either way though, with the procedure I'm finalising, should our server A go
down server B will take over it's role 
with minimal amount of input.  Or with the right script automatically.

Server B will be up to date in terms of A up to the last
minute before failure.  This includes uncollected mail etc.  Accounts only
have to be created on the main server, the changes will replicate to the
backup server every minute. (or x time frame as scheduled)

So I guess this post is two fold, are people interested in a method for the
above, or are there already loads of solutions out there,
and how does one configure mysql for replication.

Bearing in mind my SQL knowledge is nil.  I've only just started getting to
grips with scripting so that's a later project. :-)

Thanks in advance.

Craig


---
Craig Smith - Systems Engineer - Doctor Net
t. 0870 770 4990 - f. 0870 770 4991

Visit www.doc-net.com - let us be your key to success
Visit www.eMailCampaigner.com - close sales cheaper and faster
Visit www.SprintCRM.com - understand your customers better and increase 
sales

---
The information transmitted is intended only for the person or entity to 
which it is addressed and may contain confidential and/or privileged 
material. If you received this in error, please contact the sender and 
delete the material. 



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



 




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] Stearns / badmailfrom

2006-10-08 Thread Mark Samples

Anyone used this?  Stearns provides a badmailfrom  file for use with
qmail.  I do not know if it is something in my setup, while all appears 
to work,
it also slows down the ability to send mail.  There may be a parameter I 
can change
to alleviate the slowness when sending outgoing mail I am missing, but, 
there appears
to be a direct correlation to sending outgoing email and the size of 
this file.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Updates Q?

2006-10-08 Thread Mark Samples
I think they are fine the way they are, some updates need runtime, 
before general
release, doing it the way you do at least will mean that whoever 
downloads it,

knows it is in testing.
Erik Espinoza wrote:


Greetings,

Would people prefer updates to move from devel to the main site faster
or do you like it as is, where they stay on devel for about a month
before going to the release site?

Thanks,
Erik

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Mailfilter question

2006-10-02 Thread Mark Samples
I gave a modified mailfilter to Jake last week, I have been using it for 
about 2 weeks,
it is working here, just need some confirmation.  Jake is supposed to 
test it and verify

it this week.
Erik Espinoza wrote:


Nope.

FYI: 
http://wiki.qmailtoaster.com/index.php/FAQs#I_upgraded_my_QmailToaster_to_the_latest_and_I_no_longer_have_the_.22Spam_Detection.22_box_in_Qmailadmin. 


There is currently a project underway to restore this capability.

Who is working on this?

Erik

On 10/2/06, Mattias Segerdahl [EMAIL PROTECTED] wrote:


Has mailfilter been enabled in the latest version?

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] Re: your mail

2006-09-27 Thread Mark Samples

Of course if one gets a lot, it could be a problem, one solution I use
is putting this type (once the
domain is confirmed and some whois data as well as who owns he IP
address space) in the badmailfrom
of qmail.  Stearns Blacklist (if it wasn't so huge) stops a bunch of
this at connection time.
Internal RBL's can be helpful also, basically stop these, although, this
either requires programming to
automate, or human intervention to maintain.  This type, for me I just
stop at the session level.
I have found (lately) most come from a particular geographic region,
this may only be a trend,
but, that may be trackable.
John D. Hardin wrote:


On Wed, 27 Sep 2006, Peter Smith wrote:

 


The messages are simply a random stream of words, with punctuation
scattered in them. No HTML, no URLs being advertised, no excessive
capitalisation, just meaningless text.
   



Technically, then, it's not spam. Spam requires a commercial message
of some sort. :)

 


As such, SA is finding very little to complain about, and is even
lowering the scoring because the bayes filtering deems it to be
good.
   



I'm torn about whether or not to train on such messages. I do hand
training so I keep pretty tight control over what gets trained.

I would agree that it's an attempt to poison your bayes database,
assuming that you have autolearn turned on, either by skewing the
scores towards ham or by bloating the database.

 


Any thoughts on what I can do about these messages? Even with
bayes turned off, they would still fail to score more than say 2
or 3. Each message contains a different paragraph of random text,
so it's not possible to pick out keywords; and the messages are
coming from dialup machines, so blocking IP isn't going to be very
effective.
   



Look for punctuation? A good deal of the random bayes poison at one
time was totally without punctuation.

--
John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/
[EMAIL PROTECTED]FALaholic #11174pgpk -a [EMAIL PROTECTED]
key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
 ...every time I sit down in front of a Windows machine I feel as
 if the computer is just a place for the manufacturers to put their
 advertising.-- fwadling on Y! SCOX
--



 





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] vpopmail + permissions + httpd

2006-09-27 Thread Mark Samples
Anyone know (before I hose something) if adding the setgid bit on the 
vchkpw group will effect mail
delivery on qmail?  The reason, I am pondering the idea of moving 
websites to the same directory
as the domains, I want to run httpd as vpopmail.vchkpw so it can access 
this via apache.


Has anyone done this and if so are there anythings (from your 
experiences) you may want to

share?  Or any holes one might want to shoot into this?

Thanks in advance.

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] vpopmail + permissions + httpd

2006-09-27 Thread Mark Samples

Erik Espinoza wrote:


Just so I understand you, you want to basically put the web sites in
the /home/vpopmail/domains directory?

That would be correct, i.e. make a directory in the 'domain.com' 
directory called say 'web' and
point the we server to that directory to also serve web sites.  The 
webserver could run under
user=vpopmail,group=vchkpw, and web and below would have g+rws so this 
directory

could be maintainable.


Erik

On 9/27/06, Mark Samples [EMAIL PROTECTED] wrote:


Anyone know (before I hose something) if adding the setgid bit on the
vchkpw group will effect mail
delivery on qmail?  The reason, I am pondering the idea of moving
websites to the same directory
as the domains, I want to run httpd as vpopmail.vchkpw so it can access
this via apache.

Has anyone done this and if so are there anythings (from your
experiences) you may want to
share?  Or any holes one might want to shoot into this?

Thanks in advance.

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] maildrip, er maildrop --- mailfilter

2006-09-25 Thread Mark Samples

Jake Vickers wrote:


Mark Samples wrote:

Here is a stderr dump with VERBOSE turned on, I don't see what's 
wrong with

this match rule, but maildrop says it doesn't match.  Any ideas?

Matching /^X-Spam-Status: Yes, score=![0-9]+\.[0-9]+! / against 
X-Spam-Status: Yes, score=5.3 required=5.0 
tests=DATE_IN_FUTURE_03_06,  
EXTRA_MPART_TYPE,HTML_20_30,HTML_IMAGE_ONLY_32,HTML_MESSAGE,TW_WT   
autolearn=no version=3.1.5

Not matched.

What does the line look like in your mailfilter script? We had 
problems with the mailfilter script included with Toaster (not just a 
quota issue) which is another reason it's not used right now, BTW.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



I believe I fixed it. I am still testing, to be sure.  If you have a 
place to upload the modified mailfilter,
I'll send it.  I took the filter apart piece by piece, and finally got 
it working.  I can send it to you now, if

you want to see the difference and to test yourself.  Seems to be working.

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Squirrelmail

2006-09-25 Thread Mark Samples
I have had quite a few of these recently, the spammers are resorting to 
whatever methods they
can to get by. 
Jake Vickers wrote:



Michael Handiboe wrote:


Stanley Robins wrote:


hi all

I am receiving complaints that when my users receive emails in 
squirrelmail they see white box and cannot read anything, but if 
they select the white box with select all, they can see the html, 
also i checked it works with squirrelmail default theme, but with 
other themes/skins it does not seem to work, what can be done now ? 
i googled it but no avail..  and this happens in FF, opera, ie


thank you




Sounds like the text as it's displayed in the browser has the same 
color as the background color of the browser ...


I've seen this with spam before. They usually put the text as the same 
color as the background, and then overlay a gif advertising their 
pills over it all. Helps them get by spamassassin and bayesian filters.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] maildrip, er maildrop --- mailfilter

2006-09-25 Thread Mark Samples
I am pretty sure it's working now, I just like to test for a while and 
be for sure before I put it
out.  There are some minor mods to the filter (some extra checking) as 
well as some regex
changes, it appears the regex parsing may have changed.  The old one 
would not work with
the '!' characters, I guess the original maildrop (a version or 2 ago) 
did.  If any of you are
interested in further testing it, let me know, I'll email it to you or 
upload it.

Michael Amster wrote:

Make sure that your whitespace are exact in your match pattern - do 
not assume that they are spaces - you may need to match \w or whatever 
the regex expression for Maildrop may be.

-MA

Jake Vickers wrote:


Mark Samples wrote:

Here is a stderr dump with VERBOSE turned on, I don't see what's 
wrong with

this match rule, but maildrop says it doesn't match.  Any ideas?

Matching /^X-Spam-Status: Yes, score=![0-9]+\.[0-9]+! / against 
X-Spam-Status: Yes, score=5.3 required=5.0 
tests=DATE_IN_FUTURE_03_06,  
EXTRA_MPART_TYPE,HTML_20_30,HTML_IMAGE_ONLY_32,HTML_MESSAGE,TW_WT   
autolearn=no version=3.1.5

Not matched.

What does the line look like in your mailfilter script? We had 
problems with the mailfilter script included with Toaster (not just a 
quota issue) which is another reason it's not used right now, BTW.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] maildrip, er maildrop --- mailfilter

2006-09-22 Thread Mark Samples

Here is a stderr dump with VERBOSE turned on, I don't see what's wrong with
this match rule, but maildrop says it doesn't match.  Any ideas?

Matching /^X-Spam-Status: Yes, score=![0-9]+\.[0-9]+! / against 
X-Spam-Status: Yes, score=5.3 required=5.0 tests=DATE_IN_FUTURE_03_06,  
EXTRA_MPART_TYPE,HTML_20_30,HTML_IMAGE_ONLY_32,HTML_MESSAGE,TW_WT   
autolearn=no version=3.1.5

Not matched.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] SpamAssassin upgrades - implications

2006-09-19 Thread Mark Samples

Hi all -
I am new to this list, but use qmailtoaster from a previous life
Need some advice, since qmailtoaster packages it's own spamassassin,
I am on v.3.14 and would like to upgrade to 3.1.5.  Are there any
contra-indications
to upgrading via CPAN?

Thanks much



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]