Re: [qmailtoaster] Big Thank You to Eric B

[Sebastian Grewe]

Thanks for the tip! Enabled this and it seems to work while testing :-)


> On 24 May 2016, at 10:51, Aleksander Podsiadły  wrote:
> 
> W dniu 23.05.2016, pon o godzinie 14∶10 -0400, użytkownik Jaime Lerner
> napisał:
>> Definitely didn't want to be bouncing Gmail emails. So with those
>> codes you've had no issues? If not,
> 
> With this options (without G) I had no problems with Gmail.
> 
> --
> Pozdrawiam/Regards,
> mgr inż. Aleksander Podsiadły
> starszy informatyk
> Urząd Gminy w Mniowie
> ul. Centralna 9
> 26-080 Mniów
> tel:  +48 413737002
> fax:  +48 413737024
> mail: a...@mniow.pl
>   a...@mniow.eu
> jid:  a...@jabber.mniow.pl
> gg:   9150578
> 
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 



signature.asc
Description: Message signed with OpenPGP using GPGMail

Re: [qmailtoaster] CNAME lookup failed temporarily (#4.4.3)

[Sebastian Grewe]

Good I figured that might be the issue. Will contact them directly and let them 
know hey have a misconfiguration at hand.

Thanks a lot guys. Your help was much appreciated!

Sent from my iPhone

> On 05 Apr 2016, at 17:31, Aleksander Podsiadły <a...@mniow.pl> wrote:
> 
> W dniu 05.04.2016, wto o godzinie 09∶40 +0200, użytkownik Sebastian
> Grewe napisał:
>> I am currently getting this error message when trying to send a mail
>> to a domain (audi-kiel.de).
> 
> There is no domain audi-kiel.de, there is only host www.audi-kiel.de.
> 
> 8<--
> [alex@alexia ~]$ host -a audi-kiel.de
> Trying "audi-kiel.de"
> Host audi-kiel.de not found: 2(SERVFAIL)
> Received 30 bytes from 192.168.8.1#53 in 418 ms
> [alex@alexia ~]$ host -a www.audi-kiel.de
> Trying "www.audi-kiel.de"
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30420
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4
> 
> ;; QUESTION SECTION:
> ;www.audi-kiel.de. class="Apple-tab-span" style="white-space:pre">
> INANY
> 
> ;; ANSWER SECTION:
> www.audi-kiel.de. class="Apple-tab-span" style="white-space:pre">3580
> INA217.160.146.108
> 
> ;; AUTHORITY SECTION:
> audi-kiel.de.86273INNSns3.kunde
> nserver.de.
> audi-kiel.de.86273INNSns4.kunde
> nserver.de.
> 
> ;; ADDITIONAL SECTION:
> ns3.kundenserver.de.46045INA217.160.82.
> 130
> ns3.kundenserver.de.46045IN2001:8d8
> :fe:53:0:d9a0:5282:100
> ns4.kundenserver.de.46045INA217.160.83.
> 130
> ns4.kundenserver.de.46045IN2001:8d8
> :fe:53:0:d9a0:5382:100
> 
> Received 187 bytes from 192.168.8.1#53 in 60 ms
> 8<-- EOT
> 
> That's Audi problem.
> 
> -- 
> Pozdrawiam/Regards,
> mgr inż. Aleksander Podsiadły
> starszy informatyk
> Urząd Gminy w Mniowie
> ul. Centralna 9
> 26-080 Mniów
> tel:+48 413737002
> fax:+48 413737024
> mail:a...@mniow.pl
>a...@mniow.eu
> jid:a...@jabber.mniow.pl
> gg:9150578
> 
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CNAME lookup failed temporarily (#4.4.3)

[Sebastian Grewe]

Same for the MX but can't test ANY yet. But since your reply is empty it seems 
that could explain it?

Sent from my iPhone

> On 05 Apr 2016, at 16:47, Tony White <t...@ycs.com.au> wrote:
> 
> What results do you get when you dig on the qmail server?
> 
> If I dig here I get ...
> 
> [root@indialau]# dig @61.88.88.88 mx audi-kiel.de
> 
> ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.6 <<>> @61.88.88.88 mx 
> audi-kiel.de
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40296
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 4096
> ;; QUESTION SECTION:
> ;audi-kiel.de.  IN  MX
> 
> ;; ANSWER SECTION:
> audi-kiel.de.   3600IN  MX  100 mail2.kct-gruppe.de.
> audi-kiel.de.   3600IN  MX  10 mail1.onecloud.direct.
> 
> ;; Query time: 250 msec
> ;; SERVER: 61.88.88.88#53(61.88.88.88)
> ;; WHEN: Wed Apr  6 00:45:38 2016
> ;; MSG SIZE  rcvd: 111
> 
> [root@indialau]# dig @61.88.88.88 any audi-kiel.de
> 
> ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-25.P1.el5_11.6 <<>> @61.88.88.88 any 
> audi-kiel.de
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 47033
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 4096
> ;; QUESTION SECTION:
> ;audi-kiel.de.  IN  ANY
> 
> ;; Query time: 640 msec
> ;; SERVER: 61.88.88.88#53(61.88.88.88)
> ;; WHEN: Wed Apr  6 00:45:52 2016
> ;; MSG SIZE  rcvd: 41
> 
> 
> best wishes
>   Tony White
> 
> On 6/04/2016 00:35, Eric wrote:
>> Another question, do you have another QMT that you could send it from, so it 
>> can determine that it's not just something with that particular QMT you're 
>> running? If you need I could test for you.
>> 
>>> On 4/5/2016 8:14 AM, Sebastian Grewe wrote:
>>> Yes that works so it seems to be a Qmail specific issue. Any hints what to 
>>> check are appreciated.
>>> 
>>> Sent from my iPhone
>>> 
>>> On 05 Apr 2016, at 16:04, Sebastian Grewe <sebast...@grewe.ca> wrote:
>>> 
>>>> Silly me, of course I forgot to do that too.
>>>> 
>>>> Anyway, I sent a mail and will check if they send a reply now or if I get 
>>>> another bounce message.
>>>> 
>>>> Looks fishy though and I still think they changed something that’s causing 
>>>> this.
>>>> 
>>>> Cheers and thanks,
>>>> Sebastian
>>>> 
>>>>> On 05 Apr 2016, at 15:00, Eric <ebr...@whitehorsetc.com> wrote:
>>>>> 
>>>>> Did you try sending it from another account like hotmail?
>>>>> 
>>>>>> On 4/5/2016 1:40 AM, Sebastian Grewe wrote:
>>>>>> dig mx audi-kiel.de
> 

Re: [qmailtoaster] CNAME lookup failed temporarily (#4.4.3)

[Sebastian Grewe]

Sadly not right now but I can probably get access to one this week. And since 
it's not a common address I send to and my contact there is not available right 
now I am not sure we can easily test this. I just hope this will stay a single 
issue and not suddenly crop up with more domains.

Will try to find something else to test. It could be specific to my qmail 
instance for some reason but I'll have to debug further.

Thanks for the heads up so far! 

Sent from my iPhone

> On 05 Apr 2016, at 16:35, Eric <ebr...@whitehorsetc.com> wrote:
> 
> Another question, do you have another QMT that you could send it from, so it 
> can determine that it's not just something with that particular QMT you're 
> running? If you need I could test for you.
> 
>> On 4/5/2016 8:14 AM, Sebastian Grewe wrote:
>> Yes that works so it seems to be a Qmail specific issue. Any hints what to 
>> check are appreciated.
>> 
>> Sent from my iPhone
>> 
>> On 05 Apr 2016, at 16:04, Sebastian Grewe <sebast...@grewe.ca> wrote:
>> 
>>> Silly me, of course I forgot to do that too.
>>> 
>>> Anyway, I sent a mail and will check if they send a reply now 
>>> or if I get another bounce message.
>>> 
>>> Looks fishy though and I still think they changed something that’s causing 
>>> this.
>>> 
>>> Cheers and thanks,
>>> Sebastian
>>> 
>>>> On 05 Apr 2016, at 15:00, Eric <ebr...@whitehorsetc.com> wrote:
>>>> 
>>>> Did you try sending it from another account like hotmail?
>>>> 
>>>>> On 4/5/2016 1:40 AM, Sebastian Grewe wrote:
>>>>> dig mx audi-kiel.de
> 

Re: [qmailtoaster] CNAME lookup failed temporarily (#4.4.3)

[Sebastian Grewe]

Yes that works so it seems to be a Qmail specific issue. Any hints what to 
check are appreciated.

Sent from my iPhone

> On 05 Apr 2016, at 16:04, Sebastian Grewe <sebast...@grewe.ca> wrote:
> 
> Silly me, of course I forgot to do that too.
> 
> Anyway, I sent a mail and will check if they send a reply now or if I get 
> another bounce message.
> 
> Looks fishy though and I still think they changed something that’s causing 
> this.
> 
> Cheers and thanks,
> Sebastian
> 
>> On 05 Apr 2016, at 15:00, Eric <ebr...@whitehorsetc.com> wrote:
>> 
>> Did you try sending it from another account like hotmail?
>> 
>>> On 4/5/2016 1:40 AM, Sebastian Grewe wrote:
>>> dig mx audi-kiel.de
> 

Re: [qmailtoaster] CNAME lookup failed temporarily (#4.4.3)

[Sebastian Grewe]

Silly me, of course I forgot to do that too.

Anyway, I sent a mail and will check if they send a reply now or if I get 
another bounce message.

Looks fishy though and I still think they changed something that’s causing this.

Cheers and thanks,
Sebastian

> On 05 Apr 2016, at 15:00, Eric <ebr...@whitehorsetc.com> wrote:
> 
> Did you try sending it from another account like hotmail?
> 
> On 4/5/2016 1:40 AM, Sebastian Grewe wrote:
>> dig mx audi-kiel.de <http://audi-kiel.de/>

Re: [qmailtoaster] how to increase email size in one email account

[Sebastian Grewe]

Hey Manikandan,

This is from the man page for qmail-smtpd 
(http://www.qmail.org/man/man8/qmail-smtpd.html):

databytes
   Maximum number of bytes allowed in a message, or 0 for
   no limit.  Default: 0.  If a message exceeds this
   limit, qmail-smtpd returns a permanent error code to
   the client; in contrast, if the disk is full or qmail-
   smtpd hits a resource limit, qmail-smtpd returns a
   temporary error code.

   databytes counts bytes as stored on disk, not as
   transmitted through the network.  It does not count the
   qmail-smtpd Received line, the qmail-queue Received
   line, or the envelope.

   If the environment variable DATABYTES is set, it
   overrides databytes.

As you can see there is a environment variable available that can override the 
default setting from your control folder. I am not entirely certain if this 
also works on a per-user basis (I don’t think it would) but it would certainly 
work on a IP basis. This is from another sample on the Webz 
https://www.safaribooksonline.com/library/view/qmail/1565926285/ch04s09.html):

# allow 50 megabyte powerpoints from the boss
209.58.173.10:allow,DATABYTES="5000"
 
# allow 20 meg outgoing mail from nearby hosts
172.16.15.1-127.:allow,RELAYCLIENT="",DATABYTES="2000"
So if that user is running with a specific IP you could allow them to exceed 
your default limit. This may or may not work for you but it’s the best I could 
find quickly. Others may have better ideas/solutions for your problem :-)

Cheers,
Sebastian


> On 05 Apr 2016, at 08:49, Chandran Manikandan  wrote:
> 
> Hi All,
> 
> Am running qmailtoaster in centos 6.6 64 bit.
> 
> I have allowed email size 10 MB in /var/qmail/control/databytes file and able 
> to send and receive emails with the 10 MB size.
> 
> I need to allow one email account 20 MB size email for send and receive, rest 
> of other accounts remain same 10 MB size.
> 
> Is there any option to allow in that file.
> 
> -- 
> Thanks,
> Manikandan.C
> System Administrator

[qmailtoaster] CNAME lookup failed temporarily (#4.4.3)

[Sebastian Grewe]

Hey List!

I am currently getting this error message when trying to send a mail to a 
domain (audi-kiel.de). I Googled and figured out that it’s caused by Qmail not 
handling the ANY DNS request properly when exceeding 512 bytes in answers. 
Strangely this was linked to a DNS patch in Qmail but when I checked my Source 
RPM this patch was applied properly. I even tried re-compiling it and 
re-installing the package to no avail.

Does anyone else have a hint why this seems to be an issue? I haven’t had 
problems so far and this only started recently for that domain.

Things I checked:

* DNS Server Settings, I ran against Google DNS and my Host Provider DNS, both 
causing this
* Qmail Patches, they are all applied and I can see the changes in source code 
being correct for large DNS responses
* Restart Qmail, put in for good measure but of course I did that too 
(including killing processes)

Full error message:

CNAME lookup failed temporarily. (#4.4.3)
I'm not going to try again; this message has been in the queue too long.

I am starting to think this is actually caused by a DNS issue on their end and 
not my end:

$ dig mx audi-kiel.de
[…]
;; QUESTION SECTION:
;audi-kiel.de.  IN  MX

;; ANSWER SECTION:
audi-kiel.de.   1937IN  MX  100 mail2.kct-gruppe.de.
audi-kiel.de.   1937IN  MX  10 mail1.onecloud.direct.
[…]


$ dig cname audi-kiel.de
[…]
;; QUESTION SECTION:
;audi-kiel.de.  IN  CNAME

;; AUTHORITY SECTION:
audi-kiel.de.   599 IN  SOA ns3.kundenserver.de. 
hostmaster.kundenserver.de. 2016032102 28800 7200 604800 600
[…]

If you all agree on this I will get in touch with them to get this fixed. Maybe 
they moved their mail hosting recently which would explain those weird MX 
records :-)

Cheers,
Sebastian

Re: [qmailtoaster] Drown attack

[Sebastian Grewe]

Thanks Emiliano, that indeed fixes the DROWN attack vector. Confirmed by using 
the Drownattack test on their website which showed my server as fixed :-)

Don’t forget that the same key may be used on your Webserver (sampled Apache 
here) so also disable weak ciphers there!

https://drownattack.com/apache.html

Cheers,
Sebastian

> On 04 Mar 2016, at 13:11, Emiliano Lima  wrote:
> 
> HI,
> 
> The following solution.
> Perform update openssl package
> 
> yum update openssl  (y)
> No arquivo tlsserverciphers
> 
> /var/qmail/control/tlsserverciphers
> Include the following command in
> ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM
> [ PicaLO_p0:root ] qmailctl cdb
> Reloaded /etc/tcprules.d/tcp.smtp
> Reloaded /var/qmail/control/badmimetypes.cdb
> Reloaded /var/qmail/control/badloadertypes.cdb
> Reloaded /var/qmail/control/simversions.cdb
> Reloaded /var/qmail/control/simcontrol.cdb
> [ Space_p0:root ] qmailctl restart
> Restarting qmail:
> * Stopping qmail-smtpd.
> * Sending qmail-send SIGTERM and restarting.
> * Restarting qmail-smtpd.
> [ Space_p0:root ]
> 
> 
> 
> 2016-03-03 20:29 GMT-03:00 Helmut Fritz  >:
> I too am wondering the same thing.  It is not easy to tell with the somewhat
> obscure functioning of openssl and tls with smtp, imap, and pop.  At least I
> am not sure I get how it all works!
> 
> -Original Message-
> From: fsanti...@garbage-juice.com  
> [mailto:fsanti...@garbage-juice.com ]
> Sent: Tuesday, March 01, 2016 11:34 AM
> To: qmailtoaster-list@qmailtoaster.com 
> 
> Subject: [qmailtoaster] Drown attack
> 
> QMT stock build affected by Drown attack?
> 
> see:  https://drownattack.com/ 
> 
> - Fabe S.
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
> 
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 
> 
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
> 
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 
> 
> 
> 

Re: [qmailtoaster] glibc Critical Vulnerability - PLEASE READ!

[Sebastian Grewe]

And please don't forget to restart all services or even better your entire 
server. If you don't do this your running processes will still have the old 
libraries loaded.

This is indeed a big one so update ASAP. It's known for a while and actively 
exploited.

Sent from my iPhone

> On 19 Feb 2016, at 17:08, Dan McAllister  wrote:
> 
> Gentle Readers:
> 
> Google and Red Hat have independently discovered a serious vulnerability in 
> glibc, present since the release of version 2.9 -- remote code execution is 
> more than just a theoretical possibility! 
> 
> Detailed technical details are available on the Google security blog at 
> https://googleonlinesecurity.blogspot.ca/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html,
>  but essentially, the glibc DNS client side resolver is vulnerable to a 
> stack-based buffer overflow when the gettaddrinfo() library function is used. 
> (This is the access of the servers listed in /etc/resolv.conf to execute DNS 
> lookups - and has NOTHING TO DO with hosting your own DNS server or resolver!)
> 
> If you are running a mail server (QMail or other), you are relying HEAVILY on 
> this library ... at EXACTLY the crux of this vulnerability! Do yourself a 
> favor and update TODAY (or, at the very least, over the weekend!).
> 
> If you are running RHEL or CentOS 6 or 7, you are likely vulnerable. (If you 
> are still on RHEL or CentOS 4 or 5, your procrastination has accidentally 
> served you well - you never got the update to 2.9, and so while you do have 
> other vulnerabilities, you don't have THIS ONE!).
> 
> Red Hat has released a PATCH -- and in 6, you will have to reboot to effect 
> the change. Fortunately, in 7 there is a command that will swap in the new 
> glibc "live". (See below)
> 
> The earliest PATCHED versions of glibc for RedHat/CentOS are:
>  - RHEL/COS 6 : glibc-2.12-1.166.el6_7.7 
>  - RHEL/COS 7 : glibc-2.17-106.el7_2.4 
> NOTE: On 7, you can run the command: systemctl daemon-reexec to load the 
> updated library, and thus avoid a reboot.
> 
> If you haven't updated your system within the past day or two, you likely 
> need this patch! A simple yum update -y should get you the newest version, as 
> the REPOs should all have the latest release by now.
> 
> Have a good weekend! LOL
> 
> Dan McAllister
> IT4SOHO
> 
> PS: Yes, I have over 40 Linux servers that will have to be managed in the 
> next 2-3 days... happy working weekend for me! 
> 
> 

Re: [qmailtoaster] error sending : SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

[Sebastian Grewe]

Great guide! I was also not a fan of downgrading OpenSSL especially with the 
last upgrades required. 

It seems this is a remote issue then where mail servers have Diffie Helmann 
keys in a smaller size than required by newer OpenSSL versions. It may be a 
good idea to notify those domains with a quick mail to postmaster at least. 
Upgrading those keys isn't hard and takes seconds.

Thanks for the workaround! I am sure others will find it useful!

Sent from my iPhone

 On 30 Jul 2015, at 08:00, Linux distribucionli...@gmail.com wrote:
 
 Thanks guys, I supposed that one option was to return to my old version of 
 openssl but this contains some security problems, the solution I found was to 
 share them if they occur:
 
 
 To resolve the issue I made an exception ssl check for these remote hots.
 
 I leave the steps in case help someone:
 
 mkdir /var/qmail/control/notlshosts
 touch /var/qmail/control/notlshosts/domain.com
 (If you do not know the mx record of the domain you can use: dig mx 
 domain.com)
 
 touch /var/qmail/control/notlshosts/mail.domain.com
 
 qmailctl restart
 
 Done! -- @400055943b8f3a664b64 delivery 1: success: 
 IP_accepted_message./Remote_host_said:_250_2.0.0_t61JC5iW004986_Message_accepted_for_delivery/
 Best regards,
 
 Paul
 
 
 
 2015-07-25 1:31 GMT-03:00 Nicholas Chua nicholasc...@outlook.com:
 Hi,
 
 Try 
 
 yum downgrade openssl-devel openssl 
 
 You might need to downgrade a second time which will allow this issue to 
 solve
 
 Regards
 nic
 
 
 From: distribucionli...@gmail.com
 Date: Tue, 21 Jul 2015 17:58:17 -0300
 To: qmailtoaster-list@qmailtoaster.com
 Subject: [qmailtoaster] error sending : SSL3_CHECK_CERT_AND_ALGORITHM:dh key 
 too small
 
 
 Hello friends, I have QmailToaster + centos 5.9 and sending emails I've been 
 getting some failure notice:
 
 
 --
 mailer-dae...@dominio.com
 mailer-dae...@dominio.com escribió:
 
 Hi. This is the qmail-send program at dominio.com
 I'm afraid I wasn't able to deliver your message to the following
 addresses.
 This is a permanent error; I've given up. Sorry it didn't work out.
 
 jos...@otherdomain.com:
 TLS connect failed: error:14082174:SSL
 routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small; connected to 
 191.8.4.132.
 I'm not going to try again; this message has been in the queue too long.
 ---
 
 
 anyone knows of that is?
 
 Best regards,
 
 Paul
 

Re: [qmailtoaster] Totally stuck with 30 second greeting delay

[Sebastian Grewe]

Some reverse lookups not working maybe?

Sent from my iPhone

 On 26 Jul 2015, at 08:09, Tony White t...@ycs.com.au wrote:
 
 Hi folks,
  This is mad I had a 5 second greeting delay in spamdyke.
 I now seem to have a 35 second delay. Removing the spamdyke
 delay gives me 30 seconds.
  There are no entries in the tcp.smtp file. Can anyone suggest
 where else I have to look for a delay?
 
 -- 
 best wishes
  Tony White
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Forward to a Different Server

[Sebastian Grewe]

Two additions:

1) Don't do it by hand since users have to change their password if you don't 
have plain text enabled: 
http://dba.stackexchange.com/questions/9306/how-do-you-mysqldump-specific-tables
4) use rsync -var

Sent from my iPhone

 On 08 Jul 2015, at 19:54, Eric Broch ebr...@whitehorsetc.com wrote:
 
 I suppose I'd do it in this order
 
 1) Create the domain and all the users on the new server. Given that it's 
 such a small domain, I'd do it by hand you could dump the db but then you'd 
 have to drop the unnecessary tables. I'm not sure of a way to extract one 
 table in mysql.
 2) Point the email clients POP or IMAP to the new server. This would be easy 
 if your using a domain name. 
 3) Route email to the new server. (Mail would not be received between the 
 last two steps).
 4) Copy the mail for the domain over. I would not use unison for this. 
 Recently, I used 'scp' with the recurse option for each user in the domain 
 but had to change the permissions on the new files to vpopmail.vchkpw.
 
 Eric
 
 
 
 On 7/8/2015 11:28 AM, Gilbert T. Gutierrez, Jr. wrote:
 I will try what you suggested.
 
 There are actually several domains (6) and they each have about 30 users 
 each spread over multiple office locations.
 
 Gilbert
 
 On 7/8/2015 10:05 AM, Eric Broch wrote:
 On 7/8/2015 9:18 AM, Gilbert T. Gutierrez, Jr. wrote:
 I have a domain on my Qmail Server that I am migrating to another server. 
 I want both servers to be up as I am transitioning the domain. My question 
 is, how do I keep the old server up and have it just forward new email 
 destined to the domain to the new server and not try to capture it locally?
 
 Gilbert Gutierrez
 Hi Gilbert,
 
 I don't think you can do this with at least a small amount of down time for 
 the new domain, but...
 
 In order to forward mail to the new server from the old ( I think that's 
 what you're asking) without removing the domain from your old server you 
 can comment out the migrated domain in /var/qmail/control/virtualdomains, 
 and put a route to it in /var/qmail/control/smtproutes and restart qmail or 
 reload qmail. Please investigate to your satisfaction first. I tried this 
 once on my server and it worked.
 
 Of course the domain must be created with all the users on the new server 
 in order for it to receive mail and for your IMAP (or POP) clients to work. 
 In order to sync the two hosts you can use unison,  rysnc, or scp. I've 
 used all three. I use unison mostly, and here's a link to it, which setup 
 can be tailored for replication of only one domain 
 (http://wiki.qmailtoaster.com/index.php/QMT_Failover_replication_Setup). 
 
 How big is this domain?
 
 Eric
 

Re: [qmailtoaster] Forward to a Different Server

[Sebastian Grewe]

And here the way I did migrations:

1) Dump and import the Database using mysqldump
2) rsync the email data to the new server
3) Change MX entry
4) during DNS propagation run rsync often to resync new mail files to the new 
sever

Have migrated two servers that way without down times. Disabled qmail and all 
services on the old machine once DNS propagated to ensure all clients have 
switched (all had since I have a whopping 6 users ;-)).

Things get even easier with a separated DB since you can just move the data 
files and make sure the new server connects to the same DB. If you can add a 
NFS storage for mail data too, you can even take that out of the picture. Works 
well enough for smaller setups. Anything bigger would need a clustered file 
system (which I still want to at with [ceph]).

I guess that's for another day though ;-)

Sent from my iPhone

 On 08 Jul 2015, at 20:06, Sebastian Grewe sebast...@grewe.ca wrote:
 
 Two additions:
 
 1) Don't do it by hand since users have to change their password if you don't 
 have plain text enabled: 
 http://dba.stackexchange.com/questions/9306/how-do-you-mysqldump-specific-tables
 4) use rsync -var
 
 Sent from my iPhone
 
 On 08 Jul 2015, at 19:54, Eric Broch ebr...@whitehorsetc.com wrote:
 
 I suppose I'd do it in this order
 
 1) Create the domain and all the users on the new server. Given that it's 
 such a small domain, I'd do it by hand you could dump the db but then you'd 
 have to drop the unnecessary tables. I'm not sure of a way to extract one 
 table in mysql.
 2) Point the email clients POP or IMAP to the new server. This would be easy 
 if your using a domain name. 
 3) Route email to the new server. (Mail would not be received between the 
 last two steps).
 4) Copy the mail for the domain over. I would not use unison for this. 
 Recently, I used 'scp' with the recurse option for each user in the domain 
 but had to change the permissions on the new files to vpopmail.vchkpw.
 
 Eric
 
 
 
 On 7/8/2015 11:28 AM, Gilbert T. Gutierrez, Jr. wrote:
 I will try what you suggested.
 
 There are actually several domains (6) and they each have about 30 users 
 each spread over multiple office locations.
 
 Gilbert
 
 On 7/8/2015 10:05 AM, Eric Broch wrote:
 On 7/8/2015 9:18 AM, Gilbert T. Gutierrez, Jr. wrote:
 I have a domain on my Qmail Server that I am migrating to another server. 
 I want both servers to be up as I am transitioning the domain. My 
 question is, how do I keep the old server up and have it just forward new 
 email destined to the domain to the new server and not try to capture it 
 locally?
 
 Gilbert Gutierrez
 Hi Gilbert,
 
 I don't think you can do this with at least a small amount of down time 
 for the new domain, but...
 
 In order to forward mail to the new server from the old ( I think that's 
 what you're asking) without removing the domain from your old server you 
 can comment out the migrated domain in /var/qmail/control/virtualdomains, 
 and put a route to it in /var/qmail/control/smtproutes and restart qmail 
 or reload qmail. Please investigate to your satisfaction first. I tried 
 this once on my server and it worked.
 
 Of course the domain must be created with all the users on the new server 
 in order for it to receive mail and for your IMAP (or POP) clients to 
 work. In order to sync the two hosts you can use unison,  rysnc, or scp. 
 I've used all three. I use unison mostly, and here's a link to it, which 
 setup can be tailored for replication of only one domain 
 (http://wiki.qmailtoaster.com/index.php/QMT_Failover_replication_Setup). 
 
 How big is this domain?
 
 Eric
 

Re: [qmailtoaster] Roundcube

[Sebastian Grewe]

I don’t think that you get the latest version (including all fixes) from EL?

1.1.1 seems to be the latest.

I guess RC requires a recent PHP version. Personally I am using the REMI 
repository to keep PHP and MySQL up to date. Been using it for 3+ years now and 
never had an issue. Timely security updates too.

Cheers,
Sebastian

 On 18 Apr 2015, at 16:58, Eric Broch ebr...@whitehorsetc.com wrote:
 
 I'm running CentOS 6.6 and tried to install RCM with YUM:
 # yum install roundcubemail
 
 And got the following error:
 
 Error: php56w-common conflicts with php-common-5.3.3-40.el6_6.x86_64
  You could try using --skip-broken to work around the problem
  You could try running: rpm -Va --nofiles --nodigest
 
 Anyone run into, suggestions?
 
 Eric
 
 
 On 4/17/2015 5:02 PM, Dave M wrote:
 Simple, 
 
 That Fixed it, 
 now I can login to RC , no errors, will do some tests
 
 Thanks everyone, 
 
 
 On 17/04/2015 2:46 PM, Fox Hound wrote:
 Try 
 
 Yum install php-mysql
 
 Then restart httpd
 
 Then test again.
 
 
 
 On Apr 17, 2015, at 6:45 PM, Dave M sysad...@tricubemedia.com 
 mailto:sysad...@tricubemedia.com wrote:
 
 Tried new install using simple yum install
 
 running the setup
 Checking PHP version
 
 Version:  OK(PHP 5.4.16 detected)
 
 Getting couple errors
 
 MySQL:  NOT AVAILABLE(Could be loaded. Please add in php.ini; See 
 http://www.php.net/manual/en/ref.pdo-mysql.php 
 http://www.php.net/manual/en/ref.pdo-mysql.php)
 MYSQL is installed of course, 
 
 added extension=mysql.so
 to php.ini
 restarted apache, refreshed installer page, same thing
 
 However SQLite : OK
 
 and
 Net_LDAP3:  NOT AVAILABLE(Recommended to install Net_LDAP3 from 
 git.kolab.org http://git.kolab.org/; See 
 http://git.kolab.org/pear/Net_LDAP3 http://git.kolab.org/pear/Net_LDAP3)
 Cant seem to find an installer for that
 
 
 
 

Re: [qmailtoaster] Roundcube

[Sebastian Grewe]

It does? I had to login via IMAP credentials, are these cached in a DB? I don't 
remember having troubles logging in to Roundcube after changing my mail 
password.

And for sending mails it can also use the same credentials used on Login.

Sent from my iPhone

 On 17 Apr 2015, at 19:54, Dan McAllister q...@it4soho.com wrote:
 
 My only caveat is the same one I tell people who use QMT in general -- DO NOT 
 use the default SQL passwords!
 You don't have to make them super hard, but leaving them default is just 
 ASKING for trouble!
 
 (Yes, roundcube creates and uses a MySQL database of users - separate from 
 the vpopmail database.)
 
 Dan McAllister
 IT4SOHO
 
 On 4/17/2015 2:15 PM, Dave M wrote:
 Thanks for the info Dan,
 I to am finding more ofo our users are requesting it be added.
 
 I am running a Centos 6 and 7 VM test boxes, so I will go ahead and test 
 further.
 Any  caveats to worry about?
 
 Cheers,
 Dave M
 
 On 17/04/2015 10:09 AM, Dan McAllister wrote:
 Dave:
 
 I offer both on my sites:
 roundcube at mail.domain.com
 squirrelmail at www.domain.com/webmail
 
 MOST of my clients prefer the roundcube...
 
 Just my experience
 
 Dan McAllister
 IT4SOHO
 
 On 4/17/2015 2:00 PM, Dave M wrote:
 Any one had the opportunity to install roundcube as apposed to squirrel 
 mail,
 in qmail-toaster Centos 6 or 7
 
 Just looking to see if its possible and worth it.
 
 Cheers
 
 Dave M
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -- 
 IT4SOHO, LLC
 33 - 4th Street N, Suite 211
 St. Petersburg, FL 33701-3806
 
 CALL TOLL FREE:
  877-IT4SOHO
 
 877-484-7646 Phone
 727-647-7646 Local
 727-490-4394 Fax
 
 We have support plans for QMail!
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Roundcube

[Sebastian Grewe]

Hey Dave,

Not really a whole lot of issues to expect with roundcube. It speaks regular 
IMAP with a DB backend for some data. I'd recommend looking into sauserprefs 
(install via RC Plugin, look it up). I don't really host massive users (just 
family really) but it's useful to change the exact way Spamassassin works for 
each individual user and letting them configure blacklists, languages, scores 
etc.

Takes some work to get it to run (need the DB and table setup, hangs Spamd to 
use it) but I could dig all that up for you.

In my opinion there is only Roundcube right now. Everything else looks way too 
80s and is clumsy to use.

Cheers,
Sebastian

Sent from my iPhone

 On 17 Apr 2015, at 20:15, Dave M sysad...@tricubemedia.com wrote:
 
 Thanks for the info Dan,
 I to am finding more ofo our users are requesting it be added.
 
 I am running a Centos 6 and 7 VM test boxes, so I will go ahead and test 
 further.
 Any  caveats to worry about?
 
 Cheers,
 Dave M
 
 On 17/04/2015 10:09 AM, Dan McAllister wrote:
 Dave:
 
 I offer both on my sites:
 roundcube at mail.domain.com
 squirrelmail at www.domain.com/webmail
 
 MOST of my clients prefer the roundcube...
 
 Just my experience
 
 Dan McAllister
 IT4SOHO
 
 On 4/17/2015 2:00 PM, Dave M wrote:
 Any one had the opportunity to install roundcube as apposed to squirrel 
 mail,
 in qmail-toaster Centos 6 or 7
 
 Just looking to see if its possible and worth it.
 
 Cheers
 
 Dave M
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Roundcube

[Sebastian Grewe]

Roundcube is a simple PHP app that doesn't run any services. Install it at a 
remote node, got it a DB to write to and IMAP to read mails from. And of course 
Submission to send mails. I have successfully connected my local RC instance 
with remote IMAP/Mail services.

I would be rather shocked if RC could completely kill an IMAP server when 
speaking IMAP protocol with it ;-)

Sent from my iPhone

 On 17 Apr 2015, at 23:22, Dave M sysad...@tricubemedia.com wrote:
 
 No worries, it does use systemd, so trying again.
 
 Dave M
 
 On 17/04/2015 1:20 PM, fsanti...@deviltracks.net wrote:
 sorry replied under a different account so making sure you don't get 
 confused:
 
 
 
 That's what I did. I set it all up, and tested with squirrelmail prior to 
 deploying Rc.
  
 Centos 7 uses systemd right? That differs from v6.6, but not sure that 
 really matters in this case. Just throwing it out there. 
 
 - fabe 
  
  
  
 
  
 On 2015-04-17 17:15, Dave M wrote:
 
 So, 
 doing a clean install VM Centos 7, 
 after install is it best to  add domains and users then roundcube right 
 after ?
 
 Dave M
 
 
 On 17/04/2015 12:41 PM, fsanti...@deviltracks.net wrote:
 I have RC going on Centos 6.6 64-bit with latest QMT. I had to do nothing 
 special to get it up and running except i didn't feel like upgrading php 
 so i stuck with v1.05 of RC. I use it with mysql backend. 
 
 works fine although I still get odd IMAP login failures through RC 
 occasionally that i haven't tracked down yet. but mostly it works fine. I 
 only host for friends / family on a small single server VPS instance 
 (Linode). 
 
 - Fabian S.
 
  
 
  
 On 2015-04-17 16:16, Dave M wrote:
 
 Dovecot terminated with signal 15
 
 or something like that
 
 Will do another test shortly, 
 
 Dave M
 
 
 On 17/04/2015 12:05 PM, Cecil Yother, Jr. wrote:
 You give up too easy.  What did your logs say?
 
 On 04/17/2015 01:03 PM, Dave M wrote:
 Well, 
 
 after installing round cube and its needed files, 
 
 It has messed up  Dovecot  
 My Centos 7 install is now non functional, 
 Good news, I do get the roundcube login screen 
 
 ( sad grin ) 
 
 Thankfully, I did a VM Snapshot, and am about to reverse this roundcube 
 attempt. 
 
 Dave M 
 
 On 17/04/2015 11:05 AM, Sebastian Grewe wrote: 
 It does? I had to login via IMAP credentials, are these cached in a DB? I 
 don't remember having troubles logging in to Roundcube after changing my 
 mail password. 
 
 And for sending mails it can also use the same credentials used on Login. 
 
 Sent from my iPhone 
 
 On 17 Apr 2015, at 19:54, Dan McAllister q...@it4soho.com wrote: 
 
 My only caveat is the same one I tell people who use QMT in general -- DO 
 NOT use the default SQL passwords! 
 You don't have to make them super hard, but leaving them default is just 
 ASKING for trouble! 
 
 (Yes, roundcube creates and uses a MySQL database of users - separate from 
 the vpopmail database.) 
 
 Dan McAllister 
 IT4SOHO 
 
 On 4/17/2015 2:15 PM, Dave M wrote: 
 Thanks for the info Dan, 
 I to am finding more ofo our users are requesting it be added. 
 
 I am running a Centos 6 and 7 VM test boxes, so I will go ahead and test 
 further. 
 Any  caveats to worry about? 
 
 Cheers, 
 Dave M 
 
 On 17/04/2015 10:09 AM, Dan McAllister wrote: 
 Dave: 
 
 I offer both on my sites: 
 roundcube at mail.domain.com 
 squirrelmail at www.domain.com/webmail 
 
 MOST of my clients prefer the roundcube... 
 
 Just my experience 
 
 Dan McAllister 
 IT4SOHO 
 
 On 4/17/2015 2:00 PM, Dave M wrote: 
 Any one had the opportunity to install roundcube as apposed to squirrel 
 mail, 
 in qmail-toaster Centos 6 or 7 
 
 Just looking to see if its possible and worth it. 
 
 Cheers 
 
 Dave M 
 
 
 - 
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 - 
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 -- 
 IT4SOHO, LLC 
 33 - 4th Street N, Suite 211 
 St. Petersburg, FL 33701-3806 
 
 CALL TOLL FREE: 
   877-IT4SOHO 
 
 877-484-7646 Phone 
 727-647-7646 Local 
 727-490-4394 Fax 
 
 We have support plans for QMail! 
 
 
 - 
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 
 
 - 
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com 
 
 
 
 - 
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com 
 For additional

Re: [qmailtoaster] Q7

[Sebastian Grewe]

Third tip: run openVPN on your server and disallow public access to all non VPN 
IPs to 
all ports and open only those to public you really need. Keep OpenVPN updated 
to avoid stuff like the past heart bleed attack and rotate certificates. 
Connect to VPN to access all privileged ports that are only available through 
VPN.

Cheers,
Sebastian

 On 03 Apr 2015, at 11:41, Hasan Akgöz hasanak...@mail.ru wrote:
 
 second tip ;
 
 It does this by using simple Access List Rules which are included in the two 
 files /etc/hosts.allow and /etc/hosts.deny . Firstly allow access by placing 
 the following inside /etc/hosts.allow:
 
 /etc/hosts.allow
 sshd: 1.2.3.0/255.255.255.0( 1.2.3.0 secure network )
 
 Then disallow all further access by placing this in /etc/hosts.deny:
 
 /etc/hosts.deny
 sshd: ALL
 
 third tip :
 
 Change the absolute ssh port. For example 2122 .
 
 
 
 
 2015-04-03 17:01 GMT+03:00 Dan McAllister q...@it4soho.com:
 On 4/2/2015 5:20 PM, Dave M wrote:
 This should make you smile
 
 I have just this minute finished an install of Centos7 to prepare for the 
 qmail-toaster install.
 
 After the first update , and reboot, I logged in via ssh
 
 Up pops the security message:
 
 There were 249 failed login attempts since the last successful login.
 
 Thankfully the default firewall took care of them
 
 Just be careful doing installs with live external IP, and disabling the 
 firewall until you are done
 
 Made me laugh : )
 
 Just a tip -- 
 
 Instead of leaving your SSH port open, put a connection limit on it:
 
 The following entries are from an iptables config file:
 
 -A INPUT -p tcp --dport   22 -m limit --limit 2/minute  -j ACCEPT
 -A INPUT -p tcp --dport   22 -j DROP
 
 You can fail your login attempt twice per minute, then you're dropped for 
 the remainder of the minute.
 In most cases, they fail the login twice in like a 10-second period, fail a 
 few more times (with unsuccessful connections this time) and finally quit -- 
 blissfully unaware that they could try 2 more times in 60 seconds.
 
 The point is, if you're just fat-fingering your SSH password, no worries - 
 wait 60 seconds
 But if you're trying a brute-force attack, good luck -- instead of hundreds 
 of tries per minute, you now get just 2...
 
 Needless to say, you can adjust to your own recipe...
 
 Dan McAllister
 IT4SOHO
 
 
 -- 
 IT4SOHO, LLC
 33 - 4th Street N, Suite 211
 St. Petersburg, FL 33701-3806
 
 CALL TOLL FREE:
   877-IT4SOHO
 
 877-484-7646 Phone
 727-647-7646 Local
 727-490-4394 Fax 
 
 We have support plans for QMail!
 
 

Re: [qmailtoaster] Qmailtoaster

[Sebastian Grewe]

Hey EricB,

That sounds great! Ping me off-list or on the development list once you got 
those packaged up and running for testing CentOS7. I am only waiting for some 
packages to exist to continue working on the cookbook.

Cheers,
Sebastian

Sent from my iPhone

 On 23 Feb 2015, at 18:33, Eric Broch ebr...@whitehorsetc.com wrote:
 
 
 
 
 
 Hi again, Johannes.
 
 Thanks again for the phone number. I got a hold of Eric S. He's well,
 has been busy of late and will be back on the list when time allows.
 
 Also, I discussed with him my work on COS7 hosted QMT so as not to step
 on his toes as QMT lead. I'd like to make it available in the testing
 repos but have to get it onto Github first.
 Be patient as the inner workings of Github don't come naturally to me.
 
 In the mean time I've written two install scripts, qt_prep.sh and
 qt_install.sh, for a COS7/QMT install modeled after EricS's COS6
 scripts. These should be run AFTER  a COS7 minimal install(Compatibility
 Libraries, Development Tools checked). All the packages are installed
 from my server, NOT the testing repo. I did this for my benefit in
 testing. I've tested these scripts three times with a successful install
 on all three occasions and a running QMT host. This is for TESTING only
 and is not the official QMT release.
 
 The procedure:
 
 1) Download and run qt_prep.sh:
   # curl
 ftp://ftp.whitehorsetc.com/pub/qmail/CentOS7/qmt/scripts/qt_prep.sh 
 qt_prep.sh
   # ./qt_prep.sh
 2) After the reboot:
   # ./qt_install.sh
 
 qt_prep.sh turns off selinux and downloads qt_install.sh
 
 Hopefully, if there are any takers, this will install for you as easily
 as it did for me.
 
 Things to note (not in any particular order):
 1) Many of the dependencies come from the EPEL repo which is
 automatically installed by qt_install.sh
 2) If one views qt_install.sh the differences between COS6  COS7 will
 become obvious.
 3) The source files are also available at
 ftp://ftp.whitehorsetc.com/pub/qmail/CentOS7/qmt/srpms/ if anyone is
 interested in looking at the specs and the changes I made to them. It
 would make me feelbetter if their were more sets of eyes examining
 the changes I made.
 4) The longest part of the install, at least while the QMT packages are
 installing, is the download of the ClamAV databases, during clamav
 install, which are necessary for the ClamAV daemon to start.
 5) I include DSPAM and Unison as options in the install because I use both.
 6) Send, smtp, submission and their respective logging are all still
 running under daemontools, not systemd, for now.
 7 Finally, I'm hoping to have this in the official testing repo within
 the next week or so (*crossing my fingers*).
 
 Anyway, the process takes about 30 minutes give or take.
 
 EricB
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] New installation on CentOs7, DB-replication MariaDB

[Sebastian Grewe]

There are no CentOS 7 packages available yet. CentOS 6 is the latest officially 
supported version.

I use the Chef Cookbook to deploy to CentOS 6 myself. Others may use the 
regular RPM package installation.

I am not sure where the documentation for CentOS 6 is exactly but there are a 
few mails dealing with that. Search the list :-)

- Sebastian

 On 20 Feb 2015, at 10:26, Andreas Galatis a...@unet.de wrote:
 
 Hi List,
  
  
 What ist he current best aproach to install a Qmailtoaster on CentOs7?
  
 Is it possible to replicate the vpopmail-databases between MySQL and MariaDB?
  
 Thanks 
  
 Andreas

Re: [qmailtoaster] off topic

[Sebastian Grewe]

I think the idea is to start an actual Forum, not just a mailing list.

I would be all for that. Forums are much easier accessible by people, better to 
search in and probably allow finding archived posts much easier.

- Sebastian

 On 20 Feb 2015, at 13:48, Johannes Weberhofer jweberho...@weberhofer.at 
 wrote:
 
 I'd recommend not to split it up into to many different mailing-lists.
 
 Johannes
 
 Am 20.02.2015 um 11:26 schrieb Tony White:
 Dave,
   Should we start one?
 
 best wishes
   Tony White
 
 On 20/02/2015 19:43, Johannes Weberhofer wrote:
 
 Dave,
 
 there is only this list and a developers list (having very low traffic).
 
 Best regrads,
 Johannes
 
 Am 19.02.2015 um 23:57 schrieb Dave M:
 Is there a qmailtoaster users forum, for matters other than qmail specific
 eg: Vmware ( but only for qmailtoaster users )
 
 Dave M
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -- 
 Johannes Weberhofer
 Weberhofer GmbH, Austria, Vienna
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] qmailtoaster CPU 96.8% please help me

[Sebastian Grewe]

Check the status output if those are correct requests.

If they are all proper requests with a lot of proper users, the only way is 
reading up on how to run multiple web-nodes as pool. This is a bit more complex 
and certainly exceeds this mailing lists scope. But since it’s a regular PHP 
Application (squirrelmail?) with a Database backend, any guide on how scaling 
PHP app and their sessions will do the trick.

If you can’t scale that way, only increasing the server performance can help 
you out.

- Sebastian

 On 10 Feb 2015, at 14:12, Giuseppe Perna gpe...@csait.eu wrote:
 
 Hello Sebastian,
 thanks for you replay.
 
 in my server, actually, there are many many users.
 this overload problem manifests itself especially in the morning.
 What should I do? I have already given more ram, 4GB (server is 32
 bit) and multiple cores.
 
 logs, apache I noticed that there are also several ip of foreign
 countries and not only in my country.
 
 You could give me some guidance on what to check?
 
 
 2015-02-10 13:58 GMT+01:00 Sebastian Grewe sebast...@grewe.ca:
 Enable status module, enable extended status, then run apachectl fullstatus. 
 Returns a list of all current and past connections to workers with their IP 
 and the target URL.
 
 If you have a ton of users, this may be normal. If it suddenly spiked it may 
 be a exploit scan or DOS?
 
 - Sebastian
 
 On 10 Feb 2015, at 13:51, Giuseppe Perna gpe...@csait.eu wrote:
 
 hello,
 i  have this problem whit my server:
 the httpd process allocates many resources and blocks nearly the server.
 how can I see who stops me the server?
 
 
 top - 13:06:40 up 3 days, 21:35,  2 users,  load average: 14.42, 18.17, 
 29.27
 Tasks: 267 total,   8 running, 259 sleeping,   0 stopped,   0 zombie
 Cpu(s): 96.8% us,  3.1% sy,  0.0% ni,  0.0% id,  0.0% wa,  0.1% hi,  0.0% si
 Mem:   4147308k total,  4078692k used,68616k free,   194268k buffers
 Swap:  1052280k total,  208k used,  1052072k free,  2769732k cached
 
 PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
 11392 apache25   0 33932  16m 5164 R 71.0  0.4  14:18.90 httpd
 8669 apache25   0 33940  15m 4648 R 36.8  0.4  14:28.61 httpd
 8668 apache25   0 33996  16m 4972 R 36.5  0.4  14:08.75 httpd
 13379 apache25   0 33876  15m 4480 R 36.1  0.4  14:26.00 httpd
 13380 apache25   0 33876  15m 4484 R 36.1  0.4  14:23.78 httpd
 22068 apache25   0 33972  15m 4660 R 36.1  0.4  34:29.64 httpd
 28017 apache15   0 27320 9904 4964 S  5.6  0.2   0:03.08 httpd
 30771 apache16   0 27252 9964 5008 S  5.3  0.2   0:02.36 httpd
 30406 apache16   0 34268  16m 4900 S  3.0  0.4   0:01.34 httpd
 29621 apache16   0 27436 9952 4884 S  2.6  0.2   0:02.24 httpd
 30753 apache15   0 27196 9956 5132 S  2.6  0.2   0:00.89 httpd
 31726 apache17   0 26972 9024  S  2.6  0.2   0:00.08 httpd
 28752 apache16   0 33224  14m 4660 S  2.3  0.4   0:01.69 httpd
 29972 apache16   0 27432 9932 4876 S  2.0  0.2   0:01.15 httpd
 30728 apache19   0 27120 9388 4616 S  2.0  0.2   0:00.91 httpd
 29958 apache16   0 27196 9.9m 5244 S  1.6  0.2   0:01.94 httpd
 32322 vpopmail  16   0  4520  868  692 S  1.3  0.0   0:00.04 imapd
 3614 mysql 15   0  173m  38m 5120 S  0.7  0.9   5:26.43 mysqld
 31347 vpopmail  15   0  6800 1376 1024 S  0.7  0.0   0:00.50 qmail-smtpd
 22439 root  16   0  6892 1452  968 S  0.3  0.0   0:04.44 authdaemond
 24859 apache16   0 27344  10m 5532 S  0.3  0.3   0:04.73 httpd
 30426 apache15   0 27320 9924 4996 S  0.3  0.2   0:01.36 httpd
 31277 vpopmail  15   0  3900 1596 1276 S  0.3  0.0   0:00.30 spamdyke
   1 root  16   0  3640  544  464 S  0.0  0.0   0:01.49 init
 
 
 
 
 
 # qtp-whatami
 qtp-whatami v0.2.4
 DISTRO=CentOS
 OSVER=4.8
 ARCH=i686
 BUILD_DIST=cnt40
 BUILD_DIR=/usr/src/redhat
 This machine's OS is supported, but this version/arch has not been tested.
 
 
 
 # rpm -qa | grep toaster
 control-panel-toaster-0.5-1.3.4
 courier-authlib-toaster-0.59.2-1.3.6
 qmailtoaster-plus-0.2.14-1.3.17
 avvertimento: only V3 signatures can be verified, skipping V4 signature
 ezmlm-cgi-toaster-0.53.324-1.3.3
 ripmime-toaster-1.4.0.6-1.3.3
 ucspi-tcp-toaster-0.88-1.3.5
 isoqlog-toaster-2.1-1.3.4
 vpopmail-toaster-5.4.17-1.3.4
 vqadmin-toaster-2.3.4-1.3.3
 avvertimento: only V3 signatures can be verified, skipping V4 signature
 libdomainkeys-toaster-0.68-1.3.3
 ezmlm-toaster-0.53.324-1.3.3
 squirrelmail-toaster-1.4.9a-1.3.6
 libsrs2-toaster-1.0.18-1.3.3
 spamassassin-toaster-3.1.8-1.3.8
 clamav-toaster-0.95.2-1.3.30
 qmailmrtg-toaster-4.2-1.3.3
 qmail-toaster-1.03-1.3.15
 qmailadmin-toaster-1.2.11-1.3.4
 simscan-toaster-1.3.1-1.3.6
 daemontools-toaster-0.76-1.3.3
 maildrop-toaster-devel-2.0.3-1.3.5
 maildrop-toaster-2.0.3-1.3.5
 qmail-pop3d-toaster-1.03-1.3.15
 autorespond-toaster-2.0.4-1.3.3
 courier-imap-toaster-4.1.2-1.3.7
 
 
 
 --
 
 
 
 
 Giuseppe
 
 -
 To unsubscribe, e-mail

Re: [qmailtoaster] qmailtoaster CPU 96.8% please help me

[Sebastian Grewe]

Enable status module, enable extended status, then run apachectl fullstatus. 
Returns a list of all current and past connections to workers with their IP and 
the target URL.

If you have a ton of users, this may be normal. If it suddenly spiked it may be 
a exploit scan or DOS?

- Sebastian

 On 10 Feb 2015, at 13:51, Giuseppe Perna gpe...@csait.eu wrote:
 
 hello,
 i  have this problem whit my server:
 the httpd process allocates many resources and blocks nearly the server.
 how can I see who stops me the server?
 
 
 top - 13:06:40 up 3 days, 21:35,  2 users,  load average: 14.42, 18.17, 29.27
 Tasks: 267 total,   8 running, 259 sleeping,   0 stopped,   0 zombie
 Cpu(s): 96.8% us,  3.1% sy,  0.0% ni,  0.0% id,  0.0% wa,  0.1% hi,  0.0% si
 Mem:   4147308k total,  4078692k used,68616k free,   194268k buffers
 Swap:  1052280k total,  208k used,  1052072k free,  2769732k cached
 
  PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
 11392 apache25   0 33932  16m 5164 R 71.0  0.4  14:18.90 httpd
 8669 apache25   0 33940  15m 4648 R 36.8  0.4  14:28.61 httpd
 8668 apache25   0 33996  16m 4972 R 36.5  0.4  14:08.75 httpd
 13379 apache25   0 33876  15m 4480 R 36.1  0.4  14:26.00 httpd
 13380 apache25   0 33876  15m 4484 R 36.1  0.4  14:23.78 httpd
 22068 apache25   0 33972  15m 4660 R 36.1  0.4  34:29.64 httpd
 28017 apache15   0 27320 9904 4964 S  5.6  0.2   0:03.08 httpd
 30771 apache16   0 27252 9964 5008 S  5.3  0.2   0:02.36 httpd
 30406 apache16   0 34268  16m 4900 S  3.0  0.4   0:01.34 httpd
 29621 apache16   0 27436 9952 4884 S  2.6  0.2   0:02.24 httpd
 30753 apache15   0 27196 9956 5132 S  2.6  0.2   0:00.89 httpd
 31726 apache17   0 26972 9024  S  2.6  0.2   0:00.08 httpd
 28752 apache16   0 33224  14m 4660 S  2.3  0.4   0:01.69 httpd
 29972 apache16   0 27432 9932 4876 S  2.0  0.2   0:01.15 httpd
 30728 apache19   0 27120 9388 4616 S  2.0  0.2   0:00.91 httpd
 29958 apache16   0 27196 9.9m 5244 S  1.6  0.2   0:01.94 httpd
 32322 vpopmail  16   0  4520  868  692 S  1.3  0.0   0:00.04 imapd
 3614 mysql 15   0  173m  38m 5120 S  0.7  0.9   5:26.43 mysqld
 31347 vpopmail  15   0  6800 1376 1024 S  0.7  0.0   0:00.50 qmail-smtpd
 22439 root  16   0  6892 1452  968 S  0.3  0.0   0:04.44 authdaemond
 24859 apache16   0 27344  10m 5532 S  0.3  0.3   0:04.73 httpd
 30426 apache15   0 27320 9924 4996 S  0.3  0.2   0:01.36 httpd
 31277 vpopmail  15   0  3900 1596 1276 S  0.3  0.0   0:00.30 spamdyke
1 root  16   0  3640  544  464 S  0.0  0.0   0:01.49 init
 
 
 
 
 
 # qtp-whatami
 qtp-whatami v0.2.4
 DISTRO=CentOS
 OSVER=4.8
 ARCH=i686
 BUILD_DIST=cnt40
 BUILD_DIR=/usr/src/redhat
 This machine's OS is supported, but this version/arch has not been tested.
 
 
 
 # rpm -qa | grep toaster
 control-panel-toaster-0.5-1.3.4
 courier-authlib-toaster-0.59.2-1.3.6
 qmailtoaster-plus-0.2.14-1.3.17
 avvertimento: only V3 signatures can be verified, skipping V4 signature
 ezmlm-cgi-toaster-0.53.324-1.3.3
 ripmime-toaster-1.4.0.6-1.3.3
 ucspi-tcp-toaster-0.88-1.3.5
 isoqlog-toaster-2.1-1.3.4
 vpopmail-toaster-5.4.17-1.3.4
 vqadmin-toaster-2.3.4-1.3.3
 avvertimento: only V3 signatures can be verified, skipping V4 signature
 libdomainkeys-toaster-0.68-1.3.3
 ezmlm-toaster-0.53.324-1.3.3
 squirrelmail-toaster-1.4.9a-1.3.6
 libsrs2-toaster-1.0.18-1.3.3
 spamassassin-toaster-3.1.8-1.3.8
 clamav-toaster-0.95.2-1.3.30
 qmailmrtg-toaster-4.2-1.3.3
 qmail-toaster-1.03-1.3.15
 qmailadmin-toaster-1.2.11-1.3.4
 simscan-toaster-1.3.1-1.3.6
 daemontools-toaster-0.76-1.3.3
 maildrop-toaster-devel-2.0.3-1.3.5
 maildrop-toaster-2.0.3-1.3.5
 qmail-pop3d-toaster-1.03-1.3.15
 autorespond-toaster-2.0.4-1.3.3
 courier-imap-toaster-4.1.2-1.3.7
 
 
 
 -- 
 
 
 
 
 Giuseppe
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] How to see the spamdyke log in centos 6.6 32 bit with new Qmailtoaster

[Sebastian Grewe]

Hey *,

DENIED_OTHER is a message by Spamdyke followed by the reason at the end why it 
was rejected outside of the scope of Spamdyke Filtering: 503_MAIL_first

This could be an indicator that the mail server or mail client is not doing a 
proper ‘handshake’.

Quick google lead to this post on this mailing list: 
http://permalink.gmane.org/gmane.mail.qmail.toaster/37650 
http://permalink.gmane.org/gmane.mail.qmail.toaster/37650

Maybe you can find further answers there, but I’d assume it’s the remote server 
or client having an issue with properly formatting the mail handshake (just a 
guess).

- Sebastian


 On 28 Jan 2015, at 15:23, Finn Buhelt f...@kirstineslund.dk wrote:
 
 Hi again.
 
 Also look at the lines before this entry - DENIED_OTHER is mostly because 
 something was caught/wrong in the mail - maybe by spamassassin.
 
 /
 Finn
 
 
 Den 28-01-2015 kl. 11:34 skrev Chandran Manikandan:
 Hi All,
 
 I have below issue. One of our friend send email to me . but couldn't
 receive that email on my mailbox then i went to check the mail log it's
 shows below message.
 
 DENIED_OTHER from: exam...@gmail.com mailto:exam...@gmail.com to:
 exam...@panasiagroup.net mailto:exam...@panasiagroup.net origin_ip:
 202.40.249.108 origin_rdns: r08.singnet.com.sg
 http://r08.singnet.com.sg auth: (unknown) encryptio
 n: (none) reason: 503_MAIL_first_(#5.5.1)
 
 I am able to see the qmail log only smtp,send,submission folders under
 the qmail folder and couldn't see the spamd folder.
 
 Could anyone help me to resolve this issue.
 
 --
 *Thanks,*
 *Manikandan.C*
 *System Administrator*
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

Re: [qmailtoaster] QMT on CentOS6 64bit Bug in QmailAdmin Change Password and Dovecot Update Lagging

[Sebastian Grewe]

Here may be the reason: http://wiki2.dovecot.org/Authentication/Caching 
http://wiki2.dovecot.org/Authentication/Caching

Dovecot caches authentication information to decrease load on the backend 
authentication processes, if enabled. Maybe this option is turned on for your 
system. Check that, disable it and you should be fine (if that was enabled ;-)).

- Sebastian



 On 28 Jan 2015, at 15:41, Dan McAllister q...@it4soho.com wrote:
 
 Actually, I think your prior experience (on what made it work) points us in 
 another direction.
 Specifically, you said making the password change in qmailadmin worked 
 everywhere BUT Dovecot, and restarting Dovecot made it work there too...
 This would leave me to believe that Dovecot is caching passwords from the 
 MySQL database, and probably has to be told to stop doing so.
 
 Just my thoughts -- I had trouble with Dovecot on a large heavy-use server 
 and switched back to courier, so I don't use dovecot myself.
 
 Dan McAllister
 
 
 On 1/27/2015 8:52 PM, Edwin C wrote:
 Yes, there is absolutely nothing in dovecot.log
 
 This has been going on since CentOS5 with the manual switch from courier to 
 dovecot.
 
 Seems courier has always worked in password synchronization automatically 
 with change in qmailadmin.  
 
 But dovecot i have yet to see it work.  Maybe no one has put in the 
 functionality yet in qmailadmin?  Maybe just order a restart every time a 
 password change is made?
 
 Best wishes,
 Edwin
 
 On Jan 27, 2015, at 10:54 PM, Eric Broch ebr...@whitehorsetc.com 
 mailto:ebr...@whitehorsetc.com wrote:
 
 Edwin,
 
 Interesting. Have you looked in the dovecot log to see what's going on?
 
 EricB
 
 On 1/27/2015 12:20 AM, Edwin C wrote:
 I have installed on a VPS under Linode 1GB Memory 1 CPU a QMT on CentOS6 
 64bit 
 
 I found a definite bug in QmailAdmin Change Password with Dovecot Update 
 Lagging
 
 So I can go to qmailadmin and change my user password...
 
 ...but when I log out and try to login again with the NEW password I get 
 an error:
 
 Error: ERROR: Connection dropped by IMAP server.
 Query: LOGOUT
 
 I try logging in again and use the OLD password and I get in.
 
 The only time I can get in with the new password is if restart dovecot:
 
 # service dovecot restart
 
 I have repeated this experiment with qmailadmin in squirrelmail and from 
 outside just qmailadmin independent.
 
 I also upgraded qmailadmin to testing 
 http://mirror3.qmailtoaster.com/testing/CentOS/6/x86_64/qmailadmin-1.2.16-1.qt.el6.x86_64.rpm
  
 http://mirror3.qmailtoaster.com/testing/CentOS/6/x86_64/qmailadmin-1.2.16-1.qt.el6.x86_64.rpm
  
 
 But I still have the same problem with this lag in dovecot updating / 
 synchronizing with a just changed password.
 
 As a work around, I resort to doing a cron job to restart dovecot every 
 few minutes just so any change in password will be caught and updated.
 
 Maybe the guys in charge of Qmailadmin - Dovecot modules can coordinate to 
 get this updating done?
 
 Or if you have a fix, already post it here?
 
 Best wishes,
 Edwin
 
 
 
 
 -- 
 IT4SOHO, LLC
 33 - 4th Street N, Suite 211
 St. Petersburg, FL 33701-3806
 
 CALL TOLL FREE:
   877-IT4SOHO
 
 877-484-7646 Phone
 727-647-7646 Local
 727-490-4394 Fax 
 
 We have support plans for QMail!
 
 

Re: [qmailtoaster] How to modified the qt-backup script.

[Sebastian Grewe]

  $backupdest\$gzmysqldata \

I think that backslash shouldn't be there and may cause the files not being 
deleted?

Sent from my iPhone

 On 23 Jan 2015, at 08:09, Chandran Manikandan tech2m...@gmail.com wrote:
 
   $backupdest\$gzmysqldata \

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Concerns for Updates, Viability, Future of Qmailtoaster

[Sebastian Grewe]

CentOS 6 installs cleanly with my provided chef cookbook. The idea was to put 
it all into a Omnibus Package (if possible) and allow users to easily install 
this.

CentOS 7 would also work (with some adjustments on the Cookbook) but I am 
lacking binary packages for it.

But agreed on the actual package updates. Those are the actual grunt work and 
require a lot of time and testing. With a proper fee this could be compensated?

Sent from my iPhone

 On 15 Jan 2015, at 15:06, Edwin Casimero ecasim...@hotmail.com wrote:
 
 Hi Guys,
 
 I am concerned for the future of Qmailtoaster, updates, viability.
 
 Free is good at the start, but when your software is run by corporations, 
 these corporations need constant updates and tech support.
 
 What I mean is that it is 2015, and the default install is still just for 
 CentOS 5.x
 
 But CentOS 5.x is usually no longer in the list of VPS-Xen installs.
 
 CentOS 6.x installs I see here discussed and on the Wiki does not seem stable.
 
 QTP-Menu does not really seem to work fully to update everything.
 
 And updates are few and far between.
 
 How about you guys start charging for an annual fee or something?
 
 Just to assure that qmailtoaster gets updated all the time: dovecot, 
 spamassassin, clamav... the rest of the stuff.
 
 Then you should have flawless installs on CentOS 6 and CentOs 7.
 
 Just my 2 cents.
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: problems with a new install

[Sebastian Grewe]

Wisdom, we are full of it!

Look for spamdykes early talker setting. That sounds like a value that one 
would reduce from 5 to 1 ;-)

Sent from my iPhone

 On 26 Nov 2014, at 18:51, Jim Shupert jshup...@pps-inc.com wrote:
 
 
 This is intentional. Clients should be configured to use STARTTLS. If that's 
 not possible, they should use SSL. If that's not possible they can use an 
 encrypted password, but support for that will probably be deprecated in the 
 future, as encrypted passwords require passwords to be store in clear text, 
 which isn't exactly secure either. 
 Thanks Eric,
 
 Wow , I have the red face -- i just need to change the client.
 
 Yes if I change my client -- then it works.
 I was confused by the matter that my Old ( current qmt mail server ) is of 
 such vintage that one does not use TLS.
 
 I do see one oddity
 
 while it is working sending  recieveng.
 When I frist go to use ... it can time out with
 
 Sending of message failed.
 The message could not be sent because the connection to SMTP server 
 mailhost.data-wranglers.com timed out. Try again or contact your network 
 administrator.
 
 but -- then will be just fine , quick as one would expect.
 
 I am wondering If I have some sort of php time thing ... 
 I vaugely recall some some mentioning a time out in a conf ---  which has a 
 default of 5 but they set theirs to 1
 
 and or
 
 DNS
 
 specifically running bind or 
 djbdns resolver
 
 I am looking at
 https://github.com/QMailToaster/qmailtoaster-util/blob/master/qt-install-dns-resolver
 https://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg35600.html
 
 
 what can I look at or test to see if this is my  issue?
 
 Thanks much - i do appreciate the wisdom
 
 

Re: [qmailtoaster] forwarding submission mail to alternate host

[Sebastian Grewe]

Hey Quinn,

I don't know what HIPAA is (something like PCI compliance I guess) but wouldn't 
sending stuff through your server prior to delivering it to Barracuda break the 
security chain? You would be a third, insecure party handling mail before sent 
of the the secure service.

Maybe it's my lack of understanding what Barracuda does and how that makes it 
HIPAA compliant, but in my opinion I'd tell that costumer to use Barracuda as 
their outgoing mail provider and skip the man in the middle.

Just my two cents :-)

And as for your original question, haven't heard of such a thing yet but that 
doesn't mean it doesn't exist somehow.

- Sebastian 

Sent from my iPhone

 On 26 Nov 2014, at 07:43, Quinn Comendant qu...@strangecode.com wrote:
 
 We have a customer who wants to use a Barracuda encryption service so they 
 can be HIPAA compliant. They have requested that outgoing mail their office 
 submits to our server on port 587 be forwarded to a barracuda network. I know 
 qmail's `smtproutes` allows incoming mail for a domain to be routed to 
 another host, but this requires the reverse of that: mail originating from a 
 domain to be routed to another host. Is there an equivalent 
 `submissionroutes` configuration?
 
 Thanks,
 Quinn
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Q regarding my battle with spam : 2 Qs

[Sebastian Grewe]

You can disable the firewall in the qt-install script - PR is here: 
https://github.com/QMailToaster/qmailtoaster-util/pull/4/files 
https://github.com/QMailToaster/qmailtoaster-util/pull/4/files

Simple change really :-)

 On 10 Nov 2014, at 16:10, Jim Shupert jshup...@pps-inc.com wrote:
 
 
 On 11/8/2014 1:03 PM, Eric Shubert wrote:
 On 11/06/2014 07:27 AM, Jim Shupert wrote:
 !st let me say that I am going to be building a new qmail toaster
 mailserver because my current one is old.
 ( and has served us very well -- yahoo qmt )
 
 I also very much wish to better' my situation regarding spam.
 I hope to employ spam dyke
 
 and I am wondering what might my expectations be?
 example
 
 I have just gotten a whitelist request from a usr. for the dom of
 
 alloyfx.com
 
 www.blacklistalert.org/
 
 dynamic.rhs.mailpolice.com /*LISTED!* /
 **multi.uribl.com /*LISTED!* /
 **webmail.rhs.mailpolice.com /*LISTED!*/
 
 Yes, if one checks they are listed , likely they have no rdns
 
 so - Am i to expect that this domaine will cont to need to be whitelisted
 because they will continue to be 'listed
 
 so Q 1 , is that correct ? they will continue to be marked *** SPAM
 ***   - yes?
 
 They'll need to be whitelisted in spamdyke in order to accept them. They can 
 also be whitelisted in spamassassin to get rid of the *** SPAM *** subject 
 tag, and to ensure that the scoring total there doesn't trigger a rejection.
 
 Q2
 do I need to do anything special beyond the bootstrap.sh 1  2  to get
 spam dyke
 ( and any other anti Spam suggestions you may have )
 going?
 
 Nothing additional is required.
 
 what am i to expect?
 
 Generally, I would expect smooth sailing, with spamdyke rejecting 80%+ of 
 incoming messages (without even receiving let alone scanning them!).
 
 Caution: regarding the firewall, if your QMT is behind a nat'ing router (on 
 a private subnet), you should adjust the firewall script accordingly. I hope 
 to have Sebastian's fix for this in a subsequent release soon.
 
 
 1st thanks for the info , i do appreciate you kind wisdom.
 
 Yes my QMT IS behind a nating router [ cisco pix 515e ]
 what - where is the firewall script?
 part of bootstrap 1 or 2 ?
 I am unfamiliar w Sebastian's fix
 
 looking at past docs  -- you are referring to
 modify the qt-setup-firewall script before running qt-install
 so I am guessing that it is part of
 
 qt-bootstrap-2
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

Re: [qmailtoaster] migration to qmailtoaster 64bit version

[Sebastian Grewe]

Hey Rajesh,

I really can only help on one: 1) Port 110 is disabled by default since anyone 
in between could read the password. I recommend not to enable it - though with 
the SSLv3 issues now it may not even matter ;-)

As for Webmail I am using Roundcube (sleeker design and specifically only a web 
mailer). It had a plugin to change the password but I'd be lying if I knew it 
still worked after a lot of updates I did.

Cheers,
- Sebastian

Sent from my iPhone

 On 29 Oct 2014, at 19:29, Rajesh M. 24x7ser...@24x7server.net wrote:
 
 hi Eric S
 
 we have started using the 64 bit qt packages on centos 6.5 64 bit in full 
 production mode and it is working well.
 
 i am facing the following issues
 
 1) dovecot is giving problems for mac / ipad machines. pop3 with 110 does not 
 work and keeps throwing errors. i have to enable ssl and use port 995 and 
 then pop works
 is there any solution for the same ie use 110 port ?
 
 2) while using squirrel mail if login fails instead of saying invalid userid 
 or password i get an error 
 ERROR: Connection dropped by IMAP server.
 Query: LOGOUT
 
 the same squirrelmail package displays correct message on my centos 5 server
 
 how to change this message to invalid userid or password
 
 i tried to login to dovecot using command line (with correct email id and 
 wrong password ) and got message : authentication failed.
 
 3) i still could no get how to change password from the squirrelmail 
 interface.
 i tried to use change sql password plugin
 http://squirrelmail.org/plugin_view.php?id=25
 but still could not get it working
 if anybody is already using this please guide me
 (i do not wish to use qmailadmin within squirrelmail)
 
 thanks very much
 
 rajesh
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: current install process

[Sebastian Grewe]

I think the Github Wiki gives access to anyone willing to modify content - but 
I could be wrong.

I can take a look sometime and use a CentOS base installation to test your 
steps again and see if it goes well. Then I add some documentation and 
explanation to the GH Wiki. Maybe a TL;DR version like your readme too ;-)

I am on the DevOps days in Berlin until late Friday but maybe I can get started 
in the hotel - gotta pass some time until tomorrow right ;-)

Cheers,
Sebastian

Sent from my iPhone

 On 23 Oct 2014, at 16:06, Eric Shubert e...@shubes.net wrote:
 
 On 10/22/2014 11:20 AM, DNK wrote:
 I was poking around the github site and (probably just blind) did not see 
 the current install process (still running a V1 toaster).
 
 Current link?
 
 Regards.
 
 D
 -
 
 Thanks for asking. I hope we'll have some wiki content on github before too 
 long. We probably should update the existing wiki with this info though, and 
 point out that the legacy (*-toaster) packages are not recommended for new 
 installs.
 
 Would someone with wiki update capability care to modify the current wiki 
 accordingly? That'd be helpful.
 
 https://github.com/QMailToaster/qmailtoaster-util/blob/master/README.install
 
 Thanks!
 
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Squirrelmail and php update

[Sebastian Grewe]

Hey Tony,

Have you checked your php.ini file? It requires a date.timezone with one of 
those updates. Don’t remember which exactly ...

Cheers,
Sebastian

On 21 Sep 2014, at 18:05, Tony White t...@ycs.com.au wrote:

 Hi folks,
  Just had an embarrassing time with a customer whose date time
 stamps were all wrong in Squirrelmail.
  Seems my last PHP update caused some issue that required me
 to set the default timezone for each clients account.
  So if anyone has an issue with the same thing please contact me
 as I have a very simple script to add a single line to every pref file
 to sure the issue.
  if I am wrong can you point out where please as it was only after
 my last php update the problem arose.
 
 
 
 -- 
 best wishes
  Tony White
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 



signature.asc
Description: Message signed with OpenPGP using GPGMail

Re: [qmailtoaster] Urgent!!! asking repeatedly password in outlook

[Sebastian Grewe]

Great! I am glad it worked out.

Ran into this same thing a couple times myself ;-)

Cheers,
Sebastian

On 28 Aug 2014, at 12:23, rajeshrudramani rajeshrudram...@gmail.com wrote:

 Dear Sebastian,
 
 In a doubt i had implemented the option which
 you had provided with 25 percent of confidence. But it was amazing''
 It worked with out any interruption. and that Amazing fact we peoples
 in our team had realised and implemented in rest of the ma... anyways
 Mr. Seba Thanks a lot.
 
 
 Cheers
 Rajesh R
 
 
 
 On Thu, Aug 28, 2014 at 10:16 AM, Sebastian Grewe sebast...@grewe.ca wrote:
 Potentially a recent server upgrade has added some memory footprint to the 
 Pop3 libraries which now fails to run. It's mentioned in the error message: 
 unable to allocate memory.
 
 Increase the memory limit in the pop3 run script. There should be one large 
 number in it, just increase that until the pop3 login error goes away.
 
 Reason why webmail works: it uses IMAP instead and probably loads different 
 libs or has enough memory allocated to it.
 
 Sent from my iPhone
 
 On 28 Aug 2014, at 06:23, rajeshrudramani rajeshrudram...@gmail.com wrote:
 
 Hi all,
 
Good morning !!!
 
 We are maintaing q mail in our Organization, from today morning our
 client those who are using outlook are not able to accessing emails.
 The error which throwing is asking password frequently if user
 providing password again it asking for password. Mean while all the
 same users are able to access Webmail with out any issue. Error screen
 shot had been attached with this communication page.
 
 
 Requesting any one to advice for this issue ASAP. will be grate full.
 
 Thanks in Advance
 Rajesh Rudramani.R
 outlook error.JPG
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 



signature.asc
Description: Message signed with OpenPGP using GPGMail

Re: [qmailtoaster] Urgent!!! asking repeatedly password in outlook

[Sebastian Grewe]

Potentially a recent server upgrade has added some memory footprint to the Pop3 
libraries which now fails to run. It's mentioned in the error message: unable 
to allocate memory.

Increase the memory limit in the pop3 run script. There should be one large 
number in it, just increase that until the pop3 login error goes away.

Reason why webmail works: it uses IMAP instead and probably loads different 
libs or has enough memory allocated to it.

Sent from my iPhone

 On 28 Aug 2014, at 06:23, rajeshrudramani rajeshrudram...@gmail.com wrote:
 
 Hi all,
 
 Good morning !!!
 
 We are maintaing q mail in our Organization, from today morning our
 client those who are using outlook are not able to accessing emails.
 The error which throwing is asking password frequently if user
 providing password again it asking for password. Mean while all the
 same users are able to access Webmail with out any issue. Error screen
 shot had been attached with this communication page.
 
 
 Requesting any one to advice for this issue ASAP. will be grate full.
 
 Thanks in Advance
 Rajesh Rudramani.R
 outlook error.JPG
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] many failure notice - a failed spoof?

[Sebastian Grewe]

Thanks Dan, you pretty much explained in details what I suggested ;-)

I agree that this is indeed a hijacked account sending out spam and receiving 
bounces from those that were not delivered. In addition to Dans suggestions 
(password change and malware scan on systems) I would recommend checking 
Blocklist for entries for your host (http://mxtoolbox.com/blacklists.aspx) to 
get cleared from them (if you landed on one of those).

Cheers,
Sebastian


On 26 Aug 2014, at 16:53, Dan McAllister q...@it4soho.com wrote:

 On 8/25/2014 11:27 AM, Jim Shupert wrote:
 friends,
 
 I have one user [ MrBlue } who is a valid user on my domain of  
 theppjgroup.com
 
 It seems MrBlue has been getting overloaded with failure notices..
 I *Think 
 that someone is sending mail spoofing MrBlue -- but they do not have the 
 password  -- so it fails
 and My ( actual ) MrBlue then gets a a failure notice.
 
 well,
  my mr blue is red with rage.
 I wonder what i can do to relieve some of the pain?
 
 below please find one of the failure notice
 
 Thanks
 
 
 
 -Original Message-
 From: mailer-dae...@mailhost.theppjgroup.com
 [mailto:mailer-dae...@mailhost.theppjgroup.com] 
 Sent: Friday, August 22, 2014 6:49 AM
 To: mrb...@theppjgroup.com
 Subject: failure notice
 
 Hi. This is the qmail-send program at mailhost.theppjgroup.com.
 I'm afraid I wasn't able to deliver your message to the following addresses.
 This is a permanent error; I've given up. Sorry it didn't work out.
 
 ca...@hotmail.com:
 User and password not set, continuing without authentication.
 65.54.188.126 does not like recipient.
 Remote host said: 550 Requested action not taken: mailbox unavailable Giving
 up on 65.54.188.126.
 
 --- Below this line is a copy of the message.
 
 Return-Path: mrb...@theppjgroup.com
 Received: (qmail 8984 invoked by uid 89); 22 Aug 2014 10:48:53 -
 Received: by simscan 1.3.1 ppid: 8975, pid: 8980, t: 0.3711s
  scanners: attach: 1.3.1 clamav: 0.95.2/m:
 Received: from unknown (HELO ?192.168.249.85?)
 (mrb...@theppjgroup.com@72.189.129.134)
   by mailhost.theppjgroup.com with ESMTPA; 22 Aug 2014 10:48:53 -
 Content-Type: multipart/alternative;
  boundary0847007466868061251==
 MIME-Version: 1.0
 Message-ID: 53f7202f.2848...@theppjgroup.com
 Date: Fri, 22 Aug 2014 13:49:19 +0300
 From: KL Gates international mrb...@theppjgroup.com
 Subject: Urgent indebtedness notification
 To: ca...@hotmail.com
 
 OK - So I want to take this opportunity to educate on the reading of Mail 
 Headers
 
 First, new header entries always go to the TOP, so to trace the path of a 
 message, start at the bottom (of the header).
 In the above example, the message STARTED with a header of:
 Date: Fri, 22 Aug 2014 13:49:19 +0300
 From: KL Gates international mrb...@theppjgroup.com
 Subject: Urgent indebtedness notification
 To: ca...@hotmail.com
 At which point, your SMTP server collected it and added:
 Received: from unknown (HELO ?192.168.249.85?)
 (mrb...@theppjgroup.com@72.189.129.134)
   by mailhost.theppjgroup.com with ESMTPA; 22 Aug 2014 10:48:53 -
 Content-Type: multipart/alternative;
  boundary0847007466868061251==
 MIME-Version: 1.0
 Message-ID: 53f7202f.2848...@theppjgroup.com
 And HERE is where you'll find how this message is coming in...
 The end-user connected to you with a PC (or other client device) that had a 
 LOCAL (LAN) IP address of 192.168.249.85
  - Is this the LAN IP address range of Mr Blue? If not, someone's logging 
 into your server from another LAN
 The Public IP address of this client system is 72.189.129.134 (That is, the 
 public IP address of the source of the SMTP connection)
  - Is this the WAN IP address of Mr Blue's office? Again, if not, someone's 
 logging into your mail server with falsified credentials)
 The SMTP AUTH credential provided was mrb...@theppjgroup.com -- so if 
 someone's been hacked, it's Mr. Blue himself!
 
 The remaining headers (moving up) are the internal processing of your QMT:
 Return-Path: mrb...@theppjgroup.com
 Received: (qmail 8984 invoked by uid 89); 22 Aug 2014 10:48:53 -
 Received: by simscan 1.3.1 ppid: 8975, pid: 8980, t: 0.3711s
  scanners: attach: 1.3.1 clamav: 0.95.2/m:
 Now you could argue at which point any of these lines gets added, but the 
 point in reading a mail header is that you work from the bottom up!
 
 So, while others have suggested MrBlue is being spoofed, or that this is 
 back-scatter, I think the proof here is that he may have been HACKED (that 
 is, if the LAN and WAN IPs don't match Mr Blue's environment, someone is 
 impersonating him - so change the password, pronto!), or that he has a 
 MALWARE infection (if those are his addresses). That LAN host -- ending in 
 249.85 -- likely is the system with the malware, so scan that system (and 
 change the account password as well).
 
 I hope this helps...
 
 Dan
 IT4SOHO
 
  -- 
 IT4SOHO, LLC
 33 - 4th Street N, Suite 211
 St. Petersburg, FL 

Re: [qmailtoaster] many failure notice - a failed spoof?

[Sebastian Grewe]

It looks more like an authenticated mail from your server from a hijacked 
account. Check you servers logs for indications what account has been sending a 
lot of mails lately and change that accounts password.


Sent from my iPhone

 On 25 Aug 2014, at 17:27, Jim Shupert jshup...@pps-inc.com wrote:
 
 friends,
 
 I have one user [ MrBlue } who is a valid user on my domain of  
 theppjgroup.com
 
 It seems MrBlue has been getting overloaded with failure notices..
 I *Think 
 that someone is sending mail spoofing MrBlue -- but they do not have the 
 password  -- so it fails
 and My ( actual ) MrBlue then gets a a failure notice.
 
 well,
  my mr blue is red with rage.
 I wonder what i can do to relieve some of the pain?
 
 below please find one of the failure notice
 
 Thanks
 
 
 
 -Original Message-
 From: mailer-dae...@mailhost.theppjgroup.com
 [mailto:mailer-dae...@mailhost.theppjgroup.com] 
 Sent: Friday, August 22, 2014 6:49 AM
 To: mrb...@theppjgroup.com
 Subject: failure notice
 
 Hi. This is the qmail-send program at mailhost.theppjgroup.com.
 I'm afraid I wasn't able to deliver your message to the following addresses.
 This is a permanent error; I've given up. Sorry it didn't work out.
 
 ca...@hotmail.com:
 User and password not set, continuing without authentication.
 65.54.188.126 does not like recipient.
 Remote host said: 550 Requested action not taken: mailbox unavailable Giving
 up on 65.54.188.126.
 
 --- Below this line is a copy of the message.
 
 Return-Path: mrb...@theppjgroup.com
 Received: (qmail 8984 invoked by uid 89); 22 Aug 2014 10:48:53 -
 Received: by simscan 1.3.1 ppid: 8975, pid: 8980, t: 0.3711s
  scanners: attach: 1.3.1 clamav: 0.95.2/m:
 Received: from unknown (HELO ?192.168.249.85?)
 (mrb...@theppjgroup.com@72.189.129.134)
   by mailhost.theppjgroup.com with ESMTPA; 22 Aug 2014 10:48:53 -
 Content-Type: multipart/alternative;
  boundary0847007466868061251==
 MIME-Version: 1.0
 Message-ID: 53f7202f.2848...@theppjgroup.com
 Date: Fri, 22 Aug 2014 13:49:19 +0300
 From: KL Gates international mrb...@theppjgroup.com
 Subject: Urgent indebtedness notification
 To: ca...@hotmail.com
 
 --===0847007466868061251==
 Content-Type: text/plain; charset=us-ascii
 MIME-Version: 1.0
 Content-Transfer-Encoding: 7bit
 
 KL; GATES
 
 Final notice
 
 Hereby you are notified that you have [unpaid utility
 bills](http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke/index
 .p
 hp?service_id=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us=) and your debt
 amounts to $45 for August 21, 2014.  
   
 If you do not fulfill your debt-service obligations within three days in
 accordance with the applicable legislation, we will have to file actions
 with the court and apply enforcement options - in this case you can be
 evicted from the occupied territory (property rights termination).  
   
 We are asking you to pay the arrears as soon as possible! [ See further
 details
 here.](http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke
 /index.php?info=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us=)
 
 Copyright (c) 2014 | All right reserved
 
 
 --===0847007466868061251==
 Content-Type: text/html; charset=us-ascii
 MIME-Version: 1.0
 Content-Transfer-Encoding: 7bit
 Format: Flowed
 
 html
 body
 table border=0 width=700 height=auto style=border-collapse:
 collapse;font-family:'Arial',sans-serif;color:#33;font-size:12px;backgro
 und:#fff;height:auto;
 font-weight: 100; font-size: 15px; text-align: left; margin:0; padding:0;
 tr heigh=40th
 p style=color:#51626f; font-size:30px;margin:5px 0 15px 30px;KL
 GATES/p
 /th
 /tr
 tr heigh=5th style=background:#667582;height:5px;
 /th
 /tr
 tr heigh=2th style=background:#fff;height:2px;
 /th
 /tr
 tr heigh=5th style=background:#c43249;height:5px;
 /th
 /tr
 tr
 th
 p style=color:#822433;font-size:16px;font-weight:bold;margin:10px 0 0
 7px;Final notice/p p style=font-size:14px;margin:10px 0 15px
 7px;font-weight: normal; Hereby you are notified that you have a
 href=http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke/index.
 php?service_id=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us=unpaid utility
 bills/a and your debt amounts to $45 for August 21, 2014.br br If you
 do not fulfill your debt-service obligations within three days in accordance
 with the applicable legislation, we will have to file actions with the court
 and apply enforcement options - in this case you can be evicted from the
 occupied territory (property rights termination).br br We are asking you
 to pay the arrears as soon as possible! a
 href=http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke/index.
 php?info=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us=
 See further details here./a
 /p
 /th
 /tr
 tr heigh=5th style=background:#667582;height:5px;
 /th
 /tr
 tr heigh=2th style=background:#fff;height:2px;
 /th
 /tr
 tr heigh=5th style=background:#c43249;height:5px;
 /th
 /tr 

Re: [qmailtoaster] Re: Fail2Ban

[Sebastian Grewe]

As long as you feed ELK from logstash by reading logs there is no reason that 
you couldn't attach fail2ban to the same logs. If you plan to forward logs to 
elk without local files being written you will have problems.

I have been doing a lot on ELK lately. It's a great system and Kibana 
Dashboards look awesome ;-)

Sent from my iPhone

 On 07 Aug 2014, at 01:26, Eric Shubert e...@shubes.net wrote:
 
 On 08/06/2014 03:09 PM, Dan McAllister wrote:
 I am curious -- has anyone looked into a fail2ban implementation for QMT
 
 On a general note, I believe several people here have implemented f2b on QMT. 
 You should find discussions and perhaps some other configurations in the list 
 archives. It'd be nice if people would share their configurations here (even 
 if they've done so before).
 
 FWIW, I'm indeed hoping to have a QMT package available for f2b at some 
 point. This will happen after logging is straightened around though, as f2b 
 relies on the logs. I'm not yet sure how it'll all look with the ELK stack 
 for log analysis and reporting, but I will be taking f2b into account as that 
 progresses.
 
 Thanks.
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: keeping Qmail SMTP in DMZ

[Sebastian Grewe]

I don't think you need qmail for that. If it's a simple relay that you want to 
run Id probably go for Exim4 or Postfix. They can do this simple work easily 
and there is probably a lot of documentation available how to set it up.

For added security you should consider using firewall rules to only allow that 
amazon instance access to it.

Cheers,
Sebastian

 On 01.08.2014, at 07:59, Aneesh Hariyappan aneeshk...@gmail.com wrote:
 
 hi seb / eric
 we are on the same page... thanks for your answers .. Is it possible to setup 
 the mail relay agent in DMZ ? I dont know the full capabilities of Qmail . 
 Does QMail have a relay agent ? if so give me some help to set it up
 
 cheers!!
 
 
 
 On Fri, Aug 1, 2014 at 12:59 AM, Eric Shubert e...@shubes.net wrote:
 So I guess the answer to his original question is yes. :)
 
 It depends on the circumstances (requirements and constraints) as to how 
 best to achieve the result.
 
 Thanks Sebastian. I presume Aneesh will reply with any further questions he 
 might have.
 
 -- 
 -Eric 'shubes'
 
 
 On 07/31/2014 11:20 AM, Sebastian Grewe wrote:
 I think they don't wanna take any risk and loop it through an internal 
 connection. No outside one at all.
 
 Under that aspect I see a relay being useful. It can deal with nasty stuff 
 instead of the important machine on the LAN.
 
 Could be a security requirement in the company, maybe PCI compliance ;-)
 
 Cheers,
 Sebastian
 
 On 31.07.2014, at 20:08, Eric Shubert e...@shubes.net wrote:
 
 On 07/31/2014 10:30 AM, Sebastian Grewe wrote:
 I think the mail server is not connected to the internet and does not 
 handle public domain emails. It only handled email tragic internally. 
 So the cloud app needs a way in and the idea is to use a simple public 
 mta that accepts the mail as-is and passes it on to the internal server 
 which delivers to the user(s).
 
 I think a simple mail relay will do the trick allowing traffic from that 
 one IP.
 
 Cheers,
 Sebastian
 
 I see. I believe you're correct.
 
 Why bother with the relay though? The intranet mail host could be 
 configured to accept external email only from the cloud host, as well as 
 intranet connections. Simply modify the tcp.smtp file accordingly. No?
 
 --
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 
 -- 
 Regards ,
 
 Aneesh K H
 

Re: [qmailtoaster] Re: keeping Qmail SMTP in DMZ

[Sebastian Grewe]

I think the mail server is not connected to the internet and does not handle 
public domain emails. It only handled email tragic internally. So the cloud 
app needs a way in and the idea is to use a simple public mta that accepts 
the mail as-is and passes it on to the internal server which delivers to the 
user(s).

I think a simple mail relay will do the trick allowing traffic from that one IP.

Cheers,
Sebastian

 On 31.07.2014, at 19:22, Eric Shubert e...@shubes.net wrote:
 
 If I understand correctly, you'd like to be able to send emails from a cloud 
 web app to intranet (local) users.
 
 As long as the intranet users are in domains for which your mail server 
 receives emails (the domain is in your rcpthosts), you shouldn't need to do 
 anything special. Just set up your cloud app to send emails in the normal 
 fashion, and they should be received by your local accounts.
 
 If the cloud app needs to send emails to domains that are not in your 
 rcpthosts, then it will take a little more configuration, but can be done. I 
 presume your intranet users are all domains in your rcpthosts though, so 
 that shouldn't be necessary. Let me know if this is the case or not, and I 
 can explain what you need to do to if you intranet users are outside of your 
 mail host.
 
 Thanks.
 
 -- 
 -Eric 'shubes'
 
 On 07/30/2014 08:41 PM, Aneesh Hariyappan wrote:
 hi eric,
 
 sorry for not detailing . I need to obtain the following solution. I
 have a software running on the cloud, from which i need to send email
 notifications to my intranet users. My qmail server is in my LAN not
 public domain. I dont want to give direct inbound connection to mail
 server in LAN. Is it possible to keep a SMTP forwarder kind of
 application in DMZ to send the email notifications to intranet users..
 
 
 On Wed, Jul 30, 2014 at 8:37 PM, Eric Shubert e...@shubes.net
 mailto:e...@shubes.net wrote:
 
On 07/30/2014 01:04 AM, Aneesh Hariyappan wrote:
 
Hi,
 
Is there any way to put a SMTP forwarder kind of application on
DMZ to
allow a webserver on the WAN to allow email notifications to an
internal
QMail server?
 
--
Regards ,
 
Aneesh K H
 
 
I don't quite understand what you're trying to accomplish.
 
Please elaborate by explaining the problem you have, and then the
solution you have in mind.
 
 
--
-Eric 'shubes'
 
 
--__--__-
To unsubscribe, e-mail:
qmailtoaster-list-unsubscribe@__qmailtoaster.com
mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-help@__qmailtoaster.com
mailto:qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 
 --
 Regards ,
 
 Aneesh K H
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: keeping Qmail SMTP in DMZ

[Sebastian Grewe]

I think they don't wanna take any risk and loop it through an internal 
connection. No outside one at all.

Under that aspect I see a relay being useful. It can deal with nasty stuff 
instead of the important machine on the LAN.

Could be a security requirement in the company, maybe PCI compliance ;-)

Cheers,
Sebastian

 On 31.07.2014, at 20:08, Eric Shubert e...@shubes.net wrote:
 
 On 07/31/2014 10:30 AM, Sebastian Grewe wrote:
 I think the mail server is not connected to the internet and does not handle 
 public domain emails. It only handled email tragic internally. So the 
 cloud app needs a way in and the idea is to use a simple public mta that 
 accepts the mail as-is and passes it on to the internal server which 
 delivers to the user(s).
 
 I think a simple mail relay will do the trick allowing traffic from that one 
 IP.
 
 Cheers,
 Sebastian
 
 I see. I believe you're correct.
 
 Why bother with the relay though? The intranet mail host could be configured 
 to accept external email only from the cloud host, as well as intranet 
 connections. Simply modify the tcp.smtp file accordingly. No?
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Prevent sender from spoofing email address

[Sebastian Grewe]

He does have a point there :D or just mail-toaster!

 On 28.07.2014, at 16:31, Dan McAllister q...@it4soho.com wrote:
 
 On 7/27/2014 1:58 AM, Eric Shubert wrote:
 On 07/26/2014 09:03 PM, Hasan Akgöz wrote:
 I have both postfix and qmail mail servers. smtpd_sender_login_maps (
 for postfix) The controlled_envelope_senders table specifies the binding
 between a sender envelope address and the SASL login names that own that
 address. You can use regex ( pcre ) or mysql tables etc..  for it. in
 the meantime Why not suitable for QMT.?
 
 I believe that this is what I described as being practical (without knowing 
 of this capability in postfix). It's not suitable for QMT largely because it 
 would involve a fairly major change to vpopmail and qmail, which is 
 something we simply don't have resources to do. Perhaps suitable wasn't 
 the best term to use.
 
 That being said, I think we should add this to the reasons for switching to 
 postfix at some point in the future for use as a submission server, if not 
 all roles which use smtp (also mx and sending, which use smtp).
 
 Another reason for using postfix is that it can be configured to throttle 
 outbound messages. This is something that could be patched into qmail-remote 
 (as we've discussed and I've even written a spec for), but at this point I 
 feel that whatever time is spent doing this might be better spent converting 
 to postfix.
 
 Anyone care to share their thoughts about this?
 
 Thanks.
 
 If we switch everything over to postfix, shouldn't we rename the project 
 postfix-toaster?
 
 grin
 
 Dan
 
 
 
 -- 
 IT4SOHO, LLC
 33 - 4th Street N, Suite 211
 St. Petersburg, FL 33701-3806
 
 CALL TOLL FREE:
  877-IT4SOHO
 
 877-484-7646 Phone
 727-647-7646 Local
 727-490-4394 Fax
 
 We have support plans for QMail!
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Firewall

[Sebastian Grewe]

Yeah I saw that tar file they offer. I wanted to use it with chef and just feed 
shorewall some include files. Will see how it goes.

Cheers,
Sebastian

 On 17.07.2014, at 22:48, M sysad...@tricubemedia.com wrote:
 
 Shorewall firewall is based on iptables so it should work.
 and this script gets its data from :
 DLROOT=http://www.ipdeny.com/ipblocks/data/countries;
 
 Dave M
 
 On 7/17/2014 10:28 AM, Sebastian Grewe wrote:
 Hey Dave,
 
 That's one great script there. I will have to check for that ipdeny.com list 
 - maybe I can also add it to shorewall somehow.
 
 Cheers,
 Sebastian
 
 On 16.07.2014, at 21:02, M sysad...@tricubemedia.com wrote:
 
 Hi list, recently i had a request for a VM for one of our qmailers.
 
 Subsequently , after deployment, we found the VM to be compromised, so 
 hackers got in before I could secure the qmail VM.
 
 I rebuilt the VM, and added  My  firewall rules , and sent it off again. 
 No probs this time.
 I was asked if they could share the firewall rules, No probs, but I looked 
 for a way to block by country.
 
 Here is what I found, and modified for our qmail needs ( rules etc )
 Thanks go to the original script writer, I merely modified it.
 
 Firewall script , so you can block specific countries, eg China ( ISO cn ) 
 working as of July 16th 2014
 
 ***No offense meant to any countries listed here, for demo purposes only***
 
 Do a ISO country code look up for your needs
 
 Tested on qmail-Centos5, and qmail-Centos6.
 
 Should work an other iptables type firewalls
 
 Install  Setup.
 *** Backup your existing firewall script. ***
 Centos5 qmail install ( cp /etc/rc.d/firewall.ruleset 
 /etc.rc.d/firewall.org )
 Centos6 qmail install ( cp /etc/sysconfig/iptables 
 /etc/sysconfig/iptables.org )
 
 copy script to your server, make executable ( chmod +x country_block.sh )
 Edit file, and modify to your needs.
 specific areas
 ISO=af cn kr 
 # Set your own ports you need , these are set for a standard qmail 
 install..remove 3306 if you dont do database sync`s
 ALLOWPORTS=22,25,80,110,143,443,465,587,993,995,3306
 #Set your subnet 
 ALLOWSUBNET=192.168.0.0/255.255.0.0
 
 
 Run script
 ./country_block.sh
 Wait until complete.
 check it added the rules,  iptables -L -n, you should see a whole bunch of 
  countrydrop  lines
 
 Centos 5 Qmail installs
 Save iptables to your /etc/rc.d/firewall.ruleset
 /sbin/iptables-save  /etc/rc.d/firewall.ruleset
 
 Stop and start firewall 
 firewall down
 firewall up
 Check again iptables -L -n
 
 Centos 6 Qmail installs
 Save iptables to your /etc/sysconfig/iptables
 /sbin/iptables-save  /etc/sysconfig/iptables
 
 Some say this may cause slowness on the email server, I have not found that 
 to be the case.
 Based on   My ruleset  ( thousands of entries ) I have been running the 
 rules for years.
 
 Dave M
 country_block.sh
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

Re: [qmailtoaster] Firewall

[Sebastian Grewe]

I guess the referrer has to match. Otherwise they serve an empty file.

I wouldn't distribute the files but rather let Chef download them. Not sure if 
that's the same thing though and would also fall under that restriction.

Cheers,
Sebastian

 On 18.07.2014, at 21:41, M sysad...@tricubemedia.com wrote:
 
 Well, maybe we cant:
  
 “
 YOU MAY NOT RE-DISTRIBUTE OUR IP ZONE FILES. HOWEVER, YOU CAN LINK TO
 OUR IP COUNTRY ZONE FILES FOLDER ACCESSABLE AT 
 http://www.ipdeny.com/ipblocks/data/countries, BUT NOT TO THE
 FILES DIRECTLY, UNLESS YOU COMPLY WITH FAIR USAGE LIMITS POLICY.
 “
 Also ,I found their zip file of all zones to be zero bytes.
 
 Dave M
 
 On 7/18/2014 12:59 PM, Me wrote:
 I also downloaded their tar file, of all the countries IP`s,
 Just wondering, maybe I will look at modifying the script, so it looks on 
 local drive for “ DLROOT”
 instead of trolling their website, as I used to use this a long time ago, 
 and found many of the files inside the tar to be zero bytes.
  
  
 Will let everyone know what I find.
  
 Dave M
  
 From: Sebastian Grewe
 Sent: Friday, July 18, 2014 12:43 AM
 To: qmailtoaster-list@qmailtoaster.com
 Subject: Re: [qmailtoaster] Firewall
  
 Yeah I saw that tar file they offer. I wanted to use it with chef and just 
 feed shorewall some include files. Will see how it goes.
 
 Cheers,
 Sebastian
 
 On 17.07.2014, at 22:48, M sysad...@tricubemedia.com wrote:
 
 Shorewall firewall is based on iptables so it should work.
 and this script gets its data from :
 DLROOT=http://www.ipdeny.com/ipblocks/data/countries;
 
 Dave M
 
 On 7/17/2014 10:28 AM, Sebastian Grewe wrote:
 Hey Dave,
  
 That's one great script there. I will have to check for that ipdeny.com 
 list - maybe I can also add it to shorewall somehow.
 
 Cheers,
 Sebastian
 
 On 16.07.2014, at 21:02, M sysad...@tricubemedia.com wrote:
 
 Hi list, recently i had a request for a VM for one of our qmailers.
 
 Subsequently , after deployment, we found the VM to be compromised, so 
 hackers got in before I could secure the qmail VM.
 
 I rebuilt the VM, and added  My  firewall rules , and sent it off 
 again. No probs this time.
 I was asked if they could share the firewall rules, No probs, but I 
 looked for a way to block by country.
 
 Here is what I found, and modified for our qmail needs ( rules etc )
 Thanks go to the original script writer, I merely modified it.
 
 Firewall script , so you can block specific countries, eg China ( ISO cn 
 ) working as of July 16th 2014
 
 ***No offense meant to any countries listed here, for demo purposes 
 only***
 
 Do a ISO country code look up for your needs
 
 Tested on qmail-Centos5, and qmail-Centos6.
 
 Should work an other iptables type firewalls
 
 Install  Setup.
 *** Backup your existing firewall script. ***
 Centos5 qmail install ( cp /etc/rc.d/firewall.ruleset 
 /etc.rc.d/firewall.org )
 Centos6 qmail install ( cp /etc/sysconfig/iptables 
 /etc/sysconfig/iptables.org )
 
 copy script to your server, make executable ( chmod +x country_block.sh )
 Edit file, and modify to your needs.
 specific areas
 ISO=af cn kr 
 # Set your own ports you need , these are set for a standard qmail 
 install..remove 3306 if you dont do database sync`s
 ALLOWPORTS=22,25,80,110,143,443,465,587,993,995,3306
 #Set your subnet 
 ALLOWSUBNET=192.168.0.0/255.255.0.0
 
 
 Run script
 ./country_block.sh
 Wait until complete.
 check it added the rules,  iptables -L -n, you should see a whole bunch 
 of  countrydrop  lines
 
 Centos 5 Qmail installs
 Save iptables to your /etc/rc.d/firewall.ruleset
 /sbin/iptables-save  /etc/rc.d/firewall.ruleset
 
 Stop and start firewall 
 firewall down
 firewall up
 Check again iptables -L -n
 
 Centos 6 Qmail installs
 Save iptables to your /etc/sysconfig/iptables
 /sbin/iptables-save  /etc/sysconfig/iptables
 
 Some say this may cause slowness on the email server, I have not found 
 that to be the case.
 Based on   My ruleset  ( thousands of entries ) I have been running the 
 rules for years.
 
 Dave M
 country_block.sh
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

Re: [qmailtoaster] Firewall

[Sebastian Grewe]

Hey Dave,

That's one great script there. I will have to check for that ipdeny.com list - 
maybe I can also add it to shorewall somehow.

Cheers,
Sebastian

 On 16.07.2014, at 21:02, M sysad...@tricubemedia.com wrote:
 
 Hi list, recently i had a request for a VM for one of our qmailers.
 
 Subsequently , after deployment, we found the VM to be compromised, so 
 hackers got in before I could secure the qmail VM.
 
 I rebuilt the VM, and added  My  firewall rules , and sent it off again. No 
 probs this time.
 I was asked if they could share the firewall rules, No probs, but I looked 
 for a way to block by country.
 
 Here is what I found, and modified for our qmail needs ( rules etc )
 Thanks go to the original script writer, I merely modified it.
 
 Firewall script , so you can block specific countries, eg China ( ISO cn ) 
 working as of July 16th 2014
 
 ***No offense meant to any countries listed here, for demo purposes only***
 
 Do a ISO country code look up for your needs
 
 Tested on qmail-Centos5, and qmail-Centos6.
 
 Should work an other iptables type firewalls
 
 Install  Setup.
 *** Backup your existing firewall script. ***
 Centos5 qmail install ( cp /etc/rc.d/firewall.ruleset /etc.rc.d/firewall.org )
 Centos6 qmail install ( cp /etc/sysconfig/iptables 
 /etc/sysconfig/iptables.org )
 
 copy script to your server, make executable ( chmod +x country_block.sh )
 Edit file, and modify to your needs.
 specific areas
 ISO=af cn kr 
 # Set your own ports you need , these are set for a standard qmail 
 install..remove 3306 if you dont do database sync`s
 ALLOWPORTS=22,25,80,110,143,443,465,587,993,995,3306
 #Set your subnet 
 ALLOWSUBNET=192.168.0.0/255.255.0.0
 
 
 Run script
 ./country_block.sh
 Wait until complete.
 check it added the rules,  iptables -L -n, you should see a whole bunch of  
 countrydrop  lines
 
 Centos 5 Qmail installs
 Save iptables to your /etc/rc.d/firewall.ruleset
 /sbin/iptables-save  /etc/rc.d/firewall.ruleset
 
 Stop and start firewall 
 firewall down
 firewall up
 Check again iptables -L -n
 
 Centos 6 Qmail installs
 Save iptables to your /etc/sysconfig/iptables
 /sbin/iptables-save  /etc/sysconfig/iptables
 
 Some say this may cause slowness on the email server, I have not found that 
 to be the case.
 Based on   My ruleset  ( thousands of entries ) I have been running the 
 rules for years.
 
 Dave M
 
 
 
 country_block.sh
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: DSPAM status

[Sebastian Grewe]

Maybe I just fed it better files back then or spam was more obvious back in the 
days ;-) 

Cheers,
Sebastian

 On 11.07.2014, at 20:15, Angus McIntyre an...@pobox.com wrote:
 
 Eric Shubert wrote:
 P.S. Anyone else using DSPAM?
 
 I set up DSPAM and have it running, but I haven't had much luck with it.
 
 I have a vague memory of seeing someone claim that you could train DSPAM
 using only 'spam' samples (no 'ham'), so I fed it my entire spam archive
 for the month, with only a very small number of 'ham' examples.
 Afterwards, DSPAM decided that all email was spam. (Granted, that probably
 gives it a false-positive rate of about 3%, but still).
 
 I then blew away its databases and tried to train it more selectively,
 letting it rate everything and forcing it to re-learn (as Spam) any
 messages that it had wrongly classified as Innocent. Unfortunately, I
 never seemed to be able to even move the needle: feeding numerous
 samples of a highly-recognizable type of spam only reduced DSPAM's
 confidence that they were Innocent, but it never seemed to tip over into
 considering them Spam. I think the best that I ever got was a verdict that
 some particularly flagrant piece of spam was only Innocent with 60%
 probability.
 
 I should work out a more intelligent training regime and see if I can't
 get it to behave as advertised, but for me it certainly hasn't been the
 'out-of-the-box' spam-recognizing miracle that it has been for some
 people.
 
 Angus
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Problem received wrong mail address

[Sebastian Grewe]

Qmail should do auto aliasing for any user-anything address. Apparently it 
doesn't do it for him?

I can do it just fine for my mail account on my server so maybe it's a setting 
that's disabled?

Cheers,
Sebastian

 On 06.06.2014, at 07:13, Eric Broch ebr...@whitehorsetc.com wrote:
 
 Set up the account 'ithw-...@domain.com' on your qmailtoaster.
 First, open a terminal and log into your qmailtoaster. Second, run the
 following commands and the prompt:
 [user@server ~]# cd /home/vpopmail/bin
 [user@server bin]# ./vadduser ithw-...@domains.com accountpassword
 
 where 'accountpassword' is the password of your choosing.
 
 
 
 
 On 6/5/2014 9:46 PM, Agni Isador H wrote:
 Dear All,
 
 I need your help about my problem with qmailtoaster server,
 in my server there are i...@domain.com account, but when i send mail
 to ithw-...@domain.com, i'm not received
 
 Sorry, no mailbox here by that name. (#5.1.1)
 
 but mail still received by i...@domain.com,
 what wrong with my mailserver.
 
 Thx
 
 regards
 
 Agni Isador H
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Roundcube Survey

[Sebastian Grewe]

If it runs on PHP it will run on nginx + PHP FPM - that's been my experience 
with personal and upstream projects anyway. I would say Roundcube will work 
just fine.

And having Roundcube to replace squirrelmail would be great. I have never 
seriously used it (GUI, Funxtionality and all not up to par with modern web 
apps).

Not home for another few days but can try it out then.


Cheers,
Sebastian

 On 28.05.2014, at 04:28, Eric Shubert e...@shubes.net wrote:
 
 For those using Roundcube, please be so gracious as to answer a couple 
 questions.
 
 Do you use it with nginx? (I expect mostly no answers)
 
 If not, have you used nginx for anything else?
 
 Thank you for your participation. I'm contemplating adding Roundcube to the 
 'stock' QMT. It's been long overdue.
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] http service survey

[Sebastian Grewe]

+1

Nginx does have a minor drawback: Monitoring it with stock modules included in 
most setups is horrid. You have no upstream status information (which nodes 
failed, why did they fail, how long etc) nor any serious graphable information. 
It's been an issue at work for is for a while and has led us to run a custom 
nginx package with additional modules to get at least some rudimentary 
monitoring included.

I would like to see a clean separation of frontend and backend code. Something 
that allows me to install a QMT host without any dependencies to front end 
packages (and vice versa where possible). I am a fan of clean roles assigned to 
machines and this may be a good step in the right direction.

Cheers,
Sebastian

 On 28.05.2014, at 05:07, Eric Shubert e...@shubes.net wrote:
 
 For everyone, how do you feel about changing QMT's apache dependencies to 
 nginx? (Long term - this isn't going to happen over night)
 
 Note, http related .qt. packages are not part of the 'core' (operational) QMT 
 components. A QMT host can function fine without any of these packages (e.g. 
 qmailadmin, vqadmin, isoqlog, etc.).
 
 I'm not suggesting we drop http functionality. Far from it. I'm merely 
 suggesting that nginx might be (is likely to be) more suitable in the future 
 as a http server component for QMT than apache is. nginx is very efficient, 
 and much easier to configure. The ease of configuration may likely (imo) pay 
 dividends down the road.
 
 I already run SquirrelMail on its own (virtual) PHP server, augmented by an 
 nginx (virtual) (reverse-proxy) web server. It works quite nicely, and 
 separates the webmail component entirely from the base mail server.
 
 I'm under the impression that fastcgi can run qmailadmin and vqadmin (C 
 stuff) as well as PHP code. If that's indeed the case, other QMT components 
 could be adapted in a similar manner. Of course, separate hosts wouldn't be 
 required. It would just be an option which allows separation (and scaling in 
 a big way).
 
 So what are your thoughts?
 Thanks.
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Learned tokens from....

[Sebastian Grewe]

Error states that .Spam exists but is not a folder. Probably a file instead or 
a symlink? Fix that .Spam mail folder and you should get the delivered.

Cheers,
Sebastian

On 19 Apr 2014, at 07:55, Linux li...@ikf.co.in wrote:

 Hi all,
  
 When my clients send me mails and if it marked as spam. Then these mails not 
 received in my mailbox ( not even in spam folder ).
  In short, I am not able to receive any spam mails. 
  
 They got following error.
  
  
 myem...@mydomain.com:
 Learned tokens from 0 message(s) (1 message(s) examined)
 maildirmake: /home/vpopmail/domains/MYDOMAIN.COM/MYEMAIL/Maildir/.Spam: File 
 exists
 /home/vpopmail/domains/MYDOMAIN.COM/MYEMAIL/Maildir/.Spam: Not a directory
 maildrop: error writing to mailbox.
 /usr/bin/maildrop: Unable to deliver to mailbox.
 I'm not going to try again; this message has been in the queue too long.
  
 --- Below this line is a copy of the message.
  
 Return-Path: mycli...@clientdomain.com
 Received: (qmail 11708 invoked by uid 89); 18 Apr 2014 04:02:14 -
 Received: by simscan 1.4.0 ppid: 11591, pid: 11604, t: 12.3326s
  scanners: attach: 1.4.0 clamav: 0.98/m:55/d:18816 spam: 3.3.2
 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on MAIL.MYDOMAIN.COM
 X-Spam-Flag: YES
 X-Spam-Level: ***
 X-Spam-Status: Yes, score=7.7 required=7.0 tests=AWL,BAYES_99,BAYES_999,
 
 DEAR_SOMETHING,HTML_MESSAGE,RDNS_NONE,SARE_GIF_ATTACH,UNPARSEABLE_RELAY
 autolearn=no version=3.3.2
 X-Spam-Report:
 *  3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
 *  [score: 1.]
 *  2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
 *  0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
 *  [score: 1.]
 *  0.0 HTML_MESSAGE BODY: HTML included in message
 *  1.4 SARE_GIF_ATTACH FULL: Email has a inline gif
 *  0.8 RDNS_NONE Delivered to internal network by a host with 
 no rDNS
 *  0.0 UNPARSEABLE_RELAY Informational: message has 
 unparseable relay lines
 * -0.2 AWL AWL: From: address is in the auto white-list

Re: [qmailtoaster] MYSQL replication question.

[Sebastian Grewe]

Hey Goddon,

Sorry, haven't followed the entire convo here but did you try adding the 
user@ip too? I see you try to connect with an IP so maybe it circumvents the 
host check?

Cheers,
Sebastian

 On 12.04.2014, at 21:50, Richard Whittaker rich...@avits.ca wrote:
 
 On 2014-04-11 16:41, Wim Godden wrote:
 Have you tried setting it up as 'mail1_user'@'mail.avits.ca' ? Because 
 that's the one being specified... MySQL is very picky on this.
 
 So I did some more digging on this, and realized the IP 192.168.0.4 reverse 
 resolved to more than one hostname, so I thought that might be part of the 
 problem. I removed the second hostname from the reverse mapping, and updated 
 the grants table to use the one hostname that I knew would resolve back to. 
 No joy. 
 
 mysql GRANT REPLICATION SLAVE ON *.* TO 'mail1_user'@'defiant.avits.ca' 
 IDENTIFIED BY 'blah';
 Query OK, 0 rows affected (0.00 sec)
 
 mysql FLUSH PRIVILEGES;
 Query OK, 0 rows affected (0.00 sec)
 
 
 Client connections work just fine from the same IP, and with the same 
 username/password combo as the replication account. 
 
 [root@defiant conf.d]# mysql -h192.168.64.4 -umail1_user -p
 Enter password:
 Welcome to the MySQL monitor.  Commands end with ; or \g.
 Your MySQL connection id is 422
 Server version: 5.0.95-log Source distribution
 
 Copyright (c) 2000, 2011, Oracle and/or its affiliates. All rights reserved.
 
 Oracle is a registered trademark of Oracle Corporation and/or its
 affiliates. Other names may be trademarks of their respective
 owners.
 
 Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
 
 mysql quit
 
 Really, really scratching my head here. 
 
 Thanks in advance for any advice. 
 
 
 -- 
 Alberni Valley IT Services
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Help, I'm an open relay!!

[Sebastian Grewe]

Have you checked for hijacked accounts? Looks like all mails are sent from a 
single account and IP. Most likely a guessed/leaked password.


Cheers,
Sebastian

 On 03.04.2014, at 14:30, Kelly Cobean kcob...@vipercrazy.com wrote:
 
 I don't understand what's going on here, but somehow all of a sudden I am on 
 the spamcop RBL.  If I tail /var/log/qmail/smtp/current, I'm seeing a TON of 
 emails getting relayed that are all .ru hosts and addresses.
 
 I've run every open relay test I could find and all of them say I'm good to 
 go, but spamdyke says I'm accepting over 75000 emails a day and they're not 
 hitting any of my inboxes. 
 
 
 Can y'all help me diagnose and solve this?  Here's a snippet of the current 
 file:
 
  
 
 @4000533d52101655376c CHKUSER relaying rcpt: from 
 fe...@782782.ru:kcob...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt 1dawmydgeaa...@prosoft-m.ru : client 
 allowed to relay
 @4000533d521016554324 policy_check: local kcob...@vipercrazy.com - 
 remote 1dawmydgeaa...@prosoft-m.ru (AUTHENTICATED SENDER)
 @4000533d52101655470c policy_check: policy allows transmission
 @4000533d52101703edfc CHKUSER accepted sender: from 
 i...@3vlodke.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt  : sender accepted
 @4000533d521108b8a88c CHKUSER relaying rcpt: from 
 i...@3vlodke.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt inf...@dvugadn.kht.ru : client 
 allowed to relay
 @4000533d521108b8b444 policy_check: local bi...@vipercrazy.com - remote 
 inf...@dvugadn.kht.ru (AUTHENTICATED SENDER)
 @4000533d521108b8b444 policy_check: policy allows transmission
 @4000533d52112c20499c 
 simscan:[13710]:RELAYCLIENT:1.1458s:-:91.235.7.37:fe...@782782.ru:1dawmydgeaa...@prosoft-m.ru
 @4000533d52112cba283c spamdyke[13709]: ALLOWED from: fe...@782782.ru to: 
 1dawmydgeaa...@prosoft-m.ru origin_ip: 91.235.7.37 origin_rdns: (unknown) 
 auth: kcob...@vipercrazy.com encryption: (none) reason: 
 250_ok_1396527623_qp_13732
 @4000533d521139ada1f4 tcpserver: end 13709 status 0
 @4000533d521139ada5dc tcpserver: status: 1/100
 @4000533d5212129d193c 
 simscan:[13718]:RELAYCLIENT:0.9592s:-:91.235.7.37:i...@3vlodke.ru:inf...@dvugadn.kht.ru
 @4000533d52121316601c spamdyke[13717]: ALLOWED from: i...@3vlodke.ru to: 
 inf...@dvugadn.kht.ru origin_ip: 91.235.7.37 origin_rdns: (unknown) auth: 
 bi...@vipercrazy.com encryption: (none) reason: 250_ok_1396527624_qp_13752
 @4000533d52121a62824c tcpserver: status: 2/100
 @4000533d52121a628634 tcpserver: pid 13764 from 91.235.7.37
 @4000533d52121a628634 tcpserver: ok 13764 
 www.novagunrunners.com:66.151.32.133:25 :91.235.7.37::64980
 @4000533d5212201bdb34 tcpserver: end 13717 status 0
 @4000533d5212201bdf1c tcpserver: status: 1/100
 @4000533d521302016b8c tcpserver: status: 2/100
 @4000533d521302017744 tcpserver: pid 13766 from 91.235.7.37
 @4000533d521302017744 tcpserver: ok 13766 
 www.novagunrunners.com:66.151.32.133:25 :91.235.7.37::64990
 @4000533d52132c0ba474 CHKUSER accepted sender: from 
 pa...@143904.ru:kcob...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt  : sender accepted
 @4000533d52133ae2b6f4 CHKUSER relaying rcpt: from 
 pa...@143904.ru:kcob...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt 
 4-1696808-19797-20060901154637-v...@subscribe.ru : client allowed to relay
 @4000533d52133ae2c2ac policy_check: local kcob...@vipercrazy.com - 
 remote 4-1696808-19797-20060901154637-v...@subscribe.ru (AUTHENTICATED SENDER)
 @4000533d52133ae2ca7c policy_check: policy allows transmission
 @4000533d521413dbfdf4 CHKUSER accepted sender: from 
 o...@7-design.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt  : sender accepted
 @4000533d52142423c32c 
 simscan:[13765]:RELAYCLIENT:0.4157s:-:91.235.7.37:pa...@143904.ru:4-1696808-19797-20060901154637-v...@subscribe.ru
 @4000533d521424f524bc spamdyke[13764]: ALLOWED from: pa...@143904.ru to: 
 4-1696808-19797-20060901154637-v...@subscribe.ru origin_ip: 91.235.7.37 
 origin_rdns: (unknown) auth: kcob...@vipercrazy.com encryption: (none) 
 reason: 250_ok_1396527626_qp_13785
 @4000533d5214285cb1ec CHKUSER relaying rcpt: from 
 o...@7-design.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt pavel_ma...@tut.by : client allowed 
 to relay
 @4000533d5214285cb9bc policy_check: local bi...@vipercrazy.com - remote 
 pavel_ma...@tut.by (AUTHENTICATED SENDER)
 @4000533d5214285cbda4 policy_check: policy allows transmission
 @4000533d5214317e9204 tcpserver: end 13764 status 0
 @4000533d5214317e95ec tcpserver: status: 1/100
 @4000533d521513228964 tcpserver: status: 2/100
 @4000533d521513228d4c tcpserver: pid 13811 from 91.235.7.37
 @4000533d521513229134 tcpserver: ok 13811 
 www.novagunrunners.com:66.151.32.133:25 :91.235.7.37::65030
 @4000533d52152188a204 
 

Re: [qmailtoaster] Help, I'm an open relay!!

[Sebastian Grewe]

Auth line is: kcob...@vipercrazy.com
 I'd guess that's the account?

Cheers,
Sebastian

 On 03.04.2014, at 18:46, Helmut Fritz hel...@fritz.us.com wrote:
 
 I would shut down bi...@vipercrazy.com for now and see if the relaying stops.
  
 Do you know if that was an easily hacked password?
  
 From: Sebastian Grewe [mailto:sebast...@grewe.ca] 
 Sent: Thursday, April 03, 2014 8:42 AM
 To: qmailtoaster-list@qmailtoaster.com
 Subject: Re: [qmailtoaster] Help, I'm an open relay!!
  
 Have you checked for hijacked accounts? Looks like all mails are sent from a 
 single account and IP. Most likely a guessed/leaked password.
 
 
 Cheers,
 Sebastian
 
 On 03.04.2014, at 14:30, Kelly Cobean kcob...@vipercrazy.com wrote:
 
 I don't understand what's going on here, but somehow all of a sudden I am on 
 the spamcop RBL.  If I tail /var/log/qmail/smtp/current, I'm seeing a TON of 
 emails getting relayed that are all .ru hosts and addresses.
 
 I've run every open relay test I could find and all of them say I'm good to 
 go, but spamdyke says I'm accepting over 75000 emails a day and they're not 
 hitting any of my inboxes. 
 
 
 Can y'all help me diagnose and solve this?  Here's a snippet of the current 
 file:
 
  
 
 @4000533d52101655376c CHKUSER relaying rcpt: from 
 fe...@782782.ru:kcob...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt 1dawmydgeaa...@prosoft-m.ru : client 
 allowed to relay
 @4000533d521016554324 policy_check: local kcob...@vipercrazy.com - 
 remote 1dawmydgeaa...@prosoft-m.ru (AUTHENTICATED SENDER)
 @4000533d52101655470c policy_check: policy allows transmission
 @4000533d52101703edfc CHKUSER accepted sender: from 
 i...@3vlodke.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt  : sender accepted
 @4000533d521108b8a88c CHKUSER relaying rcpt: from 
 i...@3vlodke.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt inf...@dvugadn.kht.ru : client 
 allowed to relay
 @4000533d521108b8b444 policy_check: local bi...@vipercrazy.com - remote 
 inf...@dvugadn.kht.ru (AUTHENTICATED SENDER)
 @4000533d521108b8b444 policy_check: policy allows transmission
 @4000533d52112c20499c 
 simscan:[13710]:RELAYCLIENT:1.1458s:-:91.235.7.37:fe...@782782.ru:1dawmydgeaa...@prosoft-m.ru
 @4000533d52112cba283c spamdyke[13709]: ALLOWED from: fe...@782782.ru to: 
 1dawmydgeaa...@prosoft-m.ru origin_ip: 91.235.7.37 origin_rdns: (unknown) 
 auth: kcob...@vipercrazy.com encryption: (none) reason: 
 250_ok_1396527623_qp_13732
 @4000533d521139ada1f4 tcpserver: end 13709 status 0
 @4000533d521139ada5dc tcpserver: status: 1/100
 @4000533d5212129d193c 
 simscan:[13718]:RELAYCLIENT:0.9592s:-:91.235.7.37:i...@3vlodke.ru:inf...@dvugadn.kht.ru
 @4000533d52121316601c spamdyke[13717]: ALLOWED from: i...@3vlodke.ru to: 
 inf...@dvugadn.kht.ru origin_ip: 91.235.7.37 origin_rdns: (unknown) auth: 
 bi...@vipercrazy.com encryption: (none) reason: 250_ok_1396527624_qp_13752
 @4000533d52121a62824c tcpserver: status: 2/100
 @4000533d52121a628634 tcpserver: pid 13764 from 91.235.7.37
 @4000533d52121a628634 tcpserver: ok 13764 
 www.novagunrunners.com:66.151.32.133:25 :91.235.7.37::64980
 @4000533d5212201bdb34 tcpserver: end 13717 status 0
 @4000533d5212201bdf1c tcpserver: status: 1/100
 @4000533d521302016b8c tcpserver: status: 2/100
 @4000533d521302017744 tcpserver: pid 13766 from 91.235.7.37
 @4000533d521302017744 tcpserver: ok 13766 
 www.novagunrunners.com:66.151.32.133:25 :91.235.7.37::64990
 @4000533d52132c0ba474 CHKUSER accepted sender: from 
 pa...@143904.ru:kcob...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt  : sender accepted
 @4000533d52133ae2b6f4 CHKUSER relaying rcpt: from 
 pa...@143904.ru:kcob...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt 
 4-1696808-19797-20060901154637-v...@subscribe.ru : client allowed to relay
 @4000533d52133ae2c2ac policy_check: local kcob...@vipercrazy.com - 
 remote 4-1696808-19797-20060901154637-v...@subscribe.ru (AUTHENTICATED SENDER)
 @4000533d52133ae2ca7c policy_check: policy allows transmission
 @4000533d521413dbfdf4 CHKUSER accepted sender: from 
 o...@7-design.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt  : sender accepted
 @4000533d52142423c32c 
 simscan:[13765]:RELAYCLIENT:0.4157s:-:91.235.7.37:pa...@143904.ru:4-1696808-19797-20060901154637-v...@subscribe.ru
 @4000533d521424f524bc spamdyke[13764]: ALLOWED from: pa...@143904.ru to: 
 4-1696808-19797-20060901154637-v...@subscribe.ru origin_ip: 91.235.7.37 
 origin_rdns: (unknown) auth: kcob...@vipercrazy.com encryption: (none) 
 reason: 250_ok_1396527626_qp_13785
 @4000533d5214285cb1ec CHKUSER relaying rcpt: from 
 o...@7-design.ru:bi...@vipercrazy.com: remote 
 91.235.7.37:unknown:91.235.7.37 rcpt pavel_ma...@tut.by : client allowed 
 to relay
 @4000533d5214285cb9bc policy_check: local bi...@vipercrazy.com - remote

Re: [qmailtoaster] No package compat-libf2c compat-libgcc compat-libsdc++-33 available

[Sebastian Grewe]

Keep in mind that QMT is closing in on a new release including CentOS 6. Iirc 
there is a beta going now that offers binary packages already.

Cheers,
Sebastian

 On 14.01.2014, at 17:51, Wicus Roets wi...@r4c.co.za wrote:
 
 Hi,
  
 I’ve completed a NEW installation of qmailtoaster on a virtual Centos 6 
 x86_64 server, though not without a few curve balls.
  
 Thanks to Dan, the only reason I have vqadmin working is as I could download 
 his compiled ..rpm after digging the archives. Attached is his “QMT-CentOS6” 
 script which I “extracted” “fixed” from an old mail. ( As it isn’t on the 
 mirror4 or mirror9 sites any more)
  
 However, though all seems and looks fine at present, the following 
 dependencies failed when the cnt5064-deps.sh script was run during the 
 initial setup stages
  
 No package compat-libf2c available.
 No package compat-libgcc available.
 No package compat-libsdc++-33 available.
  
 Regardless, I soldiered on, as “rpm –qa | grep compat-“ reflected the 
 following packages on the system
  
 compat-gcc-34-c++-3..4.6-19.el6.x86_64
 compat-gcc-34-3.4.6-19.el6.x86_64
 compat-libstdc++-296-2.96-144.el6.i686
 compat-glibc-2.5-46..2.x86_64
 compat-libf2c-34-3.4.6-19.el6.x86_64
 compat-libstdc++-33-3.2.3-69.el6.x86_64
 compat-glibc-headers-2.5-46.2.x86_64
  
 As mentioned, except for vqadmin, all the other packages compiled fine. 
 (vqadmin having been downloaded  installed as an rpm from Dan’s site)
  
 The final step though, being to implement qmailtoaster-plus. However, the 
 above dependencies are back to haunt me when I run “qtp-newmodel”, as seen 
 below
  
 qtp-dependencies v0.3.2
 qtp-install-rpmforge v0.4.0 - getting latest version of rpmforge-release 
 qtp-install-rpmforge - rpmforge-release-0.5.3-1.el6.rf.x86_64 is installed, 
 upgrading to 0.5.3-1
 qtp-install-rpmforge - your distro/ver is not supported by RPMforge, exiting.
  
 qtp-dependencies - installing  compat-libf2c compat-libgcc compat-libsdc++-33 
 
 Loaded plugins: fastestmirror, presto
 Loading mirror speeds from cached hostfile
 * base: ftp.is.co.za
 * centosplus: ftp.is.co.za
 * extras: ftp.is.co.za
 * rpmforge: ftp.is.co.za
 * updates: ftp.is.co.za
 Setting up Install Process
 No package compat-libf2c available.
 No package compat-libgcc available.
 No package compat-libsdc++-33 available.
 Error: Nothing to do
 qtp-dependencies - installation of base dependencies failed, exiting
 qtp-newmodel - dependent packages processing failed, exiting
  
 Instructions as per 
 http://qtp.qmailtoaster.com/trac/wiki/WikiStart#a1-InstallQTPRepository were 
 followed and the repositories I had added are

 Rpmforge
 Qmailtoaster-plus
  
  
 Though I expected a working qmail toaster, softlimits seems to be yet another 
 issue to deal with… IMAP (port 143) works.  SMTP (port 25)  submission (port 
 587) not…
  
 SMTP was resolved by changing the softlimit from 20M to 65M within 
 /var/log/qmail/smtp/run at the time /var/log/qmail/smtp/current log reflected 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libcrypt.so.1: failed to map segment from shared object: Cannot allocate 
 memory”
  
 However, with submission (port 587) changing or even uncommenting the 
 softlimit within /var/ qmail/supervise/submission/run had no effect and 
 /var/log/qmail/submission/current simply keeps on reflecting 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libselinux.so.1: failed to map segment from shared object: Cannot allocate 
 memory” with every send test. In earlier tests however, the log stated 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libmysqlclient.so.16: failed to map segment from shared object: Cannot 
 allocate memory”
  
 Virtual machine’s memory stats being
  
  total   used   free sharedbuffers cached
 Mem:  1877816   1060  0 27297
 -/+ buffers/cache:491   1385
 Swap: 2015  0   2015
  
 Would the solution be as simple as a repository I would need to 
 included/exclude for the dependencies that failed with qmailtoaster-plus, 
 thereby removing the compat libs I currently have ?
  
 I’m dumbstruck …
 
 
   
 This email is free from viruses and malware because avast! Antivirus 
 protection is active.
 
 
 QMT-CentOS6
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] No package compat-libf2c compat-libgcc compat-libsdc++-33 available

[Sebastian Grewe]

As for your issue: change the run file and increase the memory softlimit. That 
should fix those memory issues.



Cheers,
Sebastian

 On 14.01.2014, at 17:51, Wicus Roets wi...@r4c.co.za wrote:
 
 Hi,
  
 I’ve completed a NEW installation of qmailtoaster on a virtual Centos 6 
 x86_64 server, though not without a few curve balls.
  
 Thanks to Dan, the only reason I have vqadmin working is as I could download 
 his compiled ..rpm after digging the archives. Attached is his “QMT-CentOS6” 
 script which I “extracted” “fixed” from an old mail. ( As it isn’t on the 
 mirror4 or mirror9 sites any more)
  
 However, though all seems and looks fine at present, the following 
 dependencies failed when the cnt5064-deps.sh script was run during the 
 initial setup stages
  
 No package compat-libf2c available.
 No package compat-libgcc available.
 No package compat-libsdc++-33 available.
  
 Regardless, I soldiered on, as “rpm –qa | grep compat-“ reflected the 
 following packages on the system
  
 compat-gcc-34-c++-3..4.6-19.el6.x86_64
 compat-gcc-34-3.4.6-19.el6.x86_64
 compat-libstdc++-296-2.96-144.el6.i686
 compat-glibc-2.5-46..2.x86_64
 compat-libf2c-34-3.4.6-19.el6.x86_64
 compat-libstdc++-33-3.2.3-69.el6.x86_64
 compat-glibc-headers-2.5-46.2.x86_64
  
 As mentioned, except for vqadmin, all the other packages compiled fine. 
 (vqadmin having been downloaded  installed as an rpm from Dan’s site)
  
 The final step though, being to implement qmailtoaster-plus. However, the 
 above dependencies are back to haunt me when I run “qtp-newmodel”, as seen 
 below
  
 qtp-dependencies v0.3.2
 qtp-install-rpmforge v0.4.0 - getting latest version of rpmforge-release 
 qtp-install-rpmforge - rpmforge-release-0.5.3-1.el6.rf.x86_64 is installed, 
 upgrading to 0.5.3-1
 qtp-install-rpmforge - your distro/ver is not supported by RPMforge, exiting.
  
 qtp-dependencies - installing  compat-libf2c compat-libgcc compat-libsdc++-33 
 
 Loaded plugins: fastestmirror, presto
 Loading mirror speeds from cached hostfile
 * base: ftp.is.co.za
 * centosplus: ftp.is.co.za
 * extras: ftp.is.co.za
 * rpmforge: ftp.is.co.za
 * updates: ftp.is.co.za
 Setting up Install Process
 No package compat-libf2c available.
 No package compat-libgcc available.
 No package compat-libsdc++-33 available.
 Error: Nothing to do
 qtp-dependencies - installation of base dependencies failed, exiting
 qtp-newmodel - dependent packages processing failed, exiting
  
 Instructions as per 
 http://qtp.qmailtoaster.com/trac/wiki/WikiStart#a1-InstallQTPRepository were 
 followed and the repositories I had added are

 Rpmforge
 Qmailtoaster-plus
  
  
 Though I expected a working qmail toaster, softlimits seems to be yet another 
 issue to deal with… IMAP (port 143) works.  SMTP (port 25)  submission (port 
 587) not…
  
 SMTP was resolved by changing the softlimit from 20M to 65M within 
 /var/log/qmail/smtp/run at the time /var/log/qmail/smtp/current log reflected 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libcrypt.so.1: failed to map segment from shared object: Cannot allocate 
 memory”
  
 However, with submission (port 587) changing or even uncommenting the 
 softlimit within /var/ qmail/supervise/submission/run had no effect and 
 /var/log/qmail/submission/current simply keeps on reflecting 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libselinux.so.1: failed to map segment from shared object: Cannot allocate 
 memory” with every send test. In earlier tests however, the log stated 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libmysqlclient.so.16: failed to map segment from shared object: Cannot 
 allocate memory”
  
 Virtual machine’s memory stats being
  
  total   used   free sharedbuffers cached
 Mem:  1877816   1060  0 27297
 -/+ buffers/cache:491   1385
 Swap: 2015  0   2015
  
 Would the solution be as simple as a repository I would need to 
 included/exclude for the dependencies that failed with qmailtoaster-plus, 
 thereby removing the compat libs I currently have ?
  
 I’m dumbstruck …
 
 
   
 This email is free from viruses and malware because avast! Antivirus 
 protection is active.
 
 
 QMT-CentOS6
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] No package compat-libf2c compat-libgcc compat-libsdc++-33 available

[Sebastian Grewe]

I just read over your mail again and then noticed your comments inside the 
error lines. My bad.

It may sound silly but I'd try to put it way too high and see if it works at 
all. I'd thin uncommenting softlimit enables a default.

I remember having those issues but mine were solved by upping the softlimit in 
submission. No box access now to check though :-/

Cheers,
Sebastian

 On 14.01.2014, at 18:33, Wicus Roets wi...@r4c.co.za wrote:
 
 Increasing the softlimit for the SMTP (port 25) from 20M to 65M worked. Noted 
 that on 64M it won’t work.
  
 Doing the exact same for the SUBMISSION (port 587) did not work. Had it up to 
 200M and then finally uncommented the softlimit line, which still does not 
 allow it to work …
  
 From: Sebastian Grewe [mailto:sebast...@grewe.ca] 
 Sent: 14 January 2014 06:55 PM
 To: qmailtoaster-list@qmailtoaster.com
 Subject: ***SPAM*** Re: [qmailtoaster] No package compat-libf2c compat-libgcc 
 compat-libsdc++-33 available
  
 As for your issue: change the run file and increase the memory softlimit. 
 That should fix those memory issues.
  
 
 
 Cheers,
 Sebastian
 
 On 14.01.2014, at 17:51, Wicus Roets wi...@r4c.co.za wrote:
 
 Hi,
  
 I’ve completed a NEW installation of qmailtoaster on a virtual Centos 6 
 x86_64 server, though not without a few curve balls.
  
 Thanks to Dan, the only reason I have vqadmin working is as I could download 
 his compiled ...rpm after digging the archives. Attached is his “QMT-CentOS6” 
 script which I “extracted” “fixed” from an old mail. ( As it isn’t on the 
 mirror4 or mirror9 sites any more)
  
 However, though all seems and looks fine at present, the following 
 dependencies failed when the cnt5064-deps.sh script was run during the 
 initial setup stages
  
 No package compat-libf2c available.
 No package compat-libgcc available.
 No package compat-libsdc++-33 available.
  
 Regardless, I soldiered on, as “rpm –qa | grep compat-“ reflected the 
 following packages on the system
  
 compat-gcc-34-c++-3...4.6-19.el6.x86_64
 compat-gcc-34-3.4.6-19.el6.x86_64
 compat-libstdc++-296-2.96-144.el6.i686
 compat-glibc-2.5-46...2.x86_64
 compat-libf2c-34-3.4.6-19.el6.x86_64
 compat-libstdc++-33-3.2.3-69.el6.x86_64
 compat-glibc-headers-2.5-46.2.x86_64
  
 As mentioned, except for vqadmin, all the other packages compiled fine. 
 (vqadmin having been downloaded  installed as an rpm from Dan’s site)
  
 The final step though, being to implement qmailtoaster-plus. However, the 
 above dependencies are back to haunt me when I run “qtp-newmodel”, as seen 
 below
  
 qtp-dependencies v0.3.2
 qtp-install-rpmforge v0.4.0 - getting latest version of rpmforge-release .
 qtp-install-rpmforge - rpmforge-release-0.5.3-1.el6.rf.x86_64 is installed, 
 upgrading to 0.5.3-1
 qtp-install-rpmforge - your distro/ver is not supported by RPMforge, exiting.
  
 qtp-dependencies - installing  compat-libf2c compat-libgcc compat-libsdc++-33 
 .
 Loaded plugins: fastestmirror, presto
 Loading mirror speeds from cached hostfile
 * base: ftp.is.co.za
 * centosplus: ftp.is.co.za
 * extras: ftp.is.co.za
 * rpmforge: ftp.is.co.za
 * updates: ftp.is.co.za
 Setting up Install Process
 No package compat-libf2c available.
 No package compat-libgcc available.
 No package compat-libsdc++-33 available.
 Error: Nothing to do
 qtp-dependencies - installation of base dependencies failed, exiting
 qtp-newmodel - dependent packages processing failed, exiting
  
 Instructions as per 
 http://qtp.qmailtoaster.com/trac/wiki/WikiStart#a1-InstallQTPRepository were 
 followed and the repositories I had added are

 Rpmforge
 Qmailtoaster-plus
  
  
 Though I expected a working qmail toaster, softlimits seems to be yet another 
 issue to deal with… IMAP (port 143) works.  SMTP (port 25)  submission (port 
 587) not…
  
 SMTP was resolved by changing the softlimit from 20M to 65M within 
 /var/log/qmail/smtp/run at the time /var/log/qmail/smtp/current log reflected 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libcrypt.so.1: failed to map segment from shared object: Cannot allocate 
 memory”
  
 However, with submission (port 587) changing or even uncommenting the 
 softlimit within /var/ qmail/supervise/submission/run had no effect and 
 /var/log/qmail/submission/current simply keeps on reflecting 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libselinux.so.1: failed to map segment from shared object: Cannot allocate 
 memory” with every send test. In earlier tests however, the log stated 
 “/var/qmail/bin/qmail-smtpd: error while loading shared libraries: 
 libmysqlclient.so.16: failed to map segment from shared object: Cannot 
 allocate memory”
  
 Virtual machine’s memory stats being
  
  total   used   free sharedbuffers cached
 Mem:  1877816   1060  0 27297
 -/+ buffers/cache:491   1385
 Swap

Re: [qmailtoaster] lost+found

[Sebastian Grewe]

Maybe you hit CTRL+E? Or a combination that deleted instead of Closing Window 
CTRL+W?

Cheers,
Sebastian

 On 19.12.2013, at 18:35, Eric Broch ebr...@whitehorsetc.com wrote:
 
 Hello list,
 
 I was working on a client's email server traversing the /home/vpopmail
 directory, closed the file browser and opened it up again and my whole
 'vpopmail' directory was in the folder /home/lost+found.
 
 Has anyone EVER seen or heard of such a thing? In my 13+ years working
 on Linux I've never encountered anything like this before. So, currently
 I'm running the command to copy recursively the 'vpopmail' directory
 from /home/lost+found to /home
 
 Any comments or revelations would be most appreciated as I have NO idea
 how this happened.
 
 Eric
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: failure notice

[Sebastian Grewe]

https://gist.github.com

Pulic post and share it :)

On Nov 22, 2013, at 7:01 PM, System Admin sysad...@tricubemedia.com wrote:

 Hi Angus,
 
 Care to share
 
   I banned a bunch of Chinese class C's
 
 I tried to attach my iptables , but get bounce back saying file to big.
 
 So anyone who wants a copy of mine,
 Exported from a Atomic Linux install
 
 http://www.techyguru.com/qmail.fw
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Blocked.

[Sebastian Grewe]

Hey,

What is the filter configuration and when would it get triggered? That might 
help to sched some light on this.

Cheers,
Sebastian

 On 21.11.2013, at 21:59, System Admin sysad...@tricubemedia.com wrote:
 
 Hi guys n Gals,
 
 I know this is now a qmail problem, just looking for input.
 
 suddenly fail2ban on my server has blocked  My  IP from sending on port 25
 In the fail2ban logs I see:
 fail2ban.actions: WARNING [username-notfound] Ban my-ipaddress 
 
 It resets the firewall  if I do /etc/init.d/fail2ban stop and 
 /etc/init.d/fail2ban/start
 Has anyone experienced this,
 Possible virus on PC, looks to me like a computer may be sending spam as a no 
 existent user.
 
 Thanks
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: virus scan on webmail

[Sebastian Grewe]

Hey,

 On 22.11.2013, at 06:25, Eric Shubert e...@shubes.net wrote:
 
 On 11/21/2013 06:36 PM, Rajesh M wrote:
 two more questions eric
 
 1) RELAYCLIENT= -- if i remove this will that mean that smtp
 authentication is mandatory for relaying emails for 127. ?
 
 Yes. Or simply remove the 127.: line. That's what the new QMT will have. 
 Squirrelmail will be configured to authenticate. You can see this here:
 https://github.com/QMailToaster/pkgs/blob/master/squirrelmail/config_local.php
 
 Isn't github nice? :)

Yes, yes it is.

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] CentOS 6 (and 5) rpms

[Sebastian Grewe]

Hey Eric,

This is great. Is that an actual repo that I can use in Chef to trigger a 
regular RPM/YUM based installation? Then I will re-factor my cookbook and start 
using this - then it should work once we are on repoforge.

Cheers,
Sebastian

On Nov 21, 2013, at 8:46 AM, Chandran Manikandan tech2m...@gmail.com wrote:

 Thanks Eric,
 Shall i do same installed procedure for centos 6 with qmailtoaster which is 
 showing in Wiki for centos 5 qmailtoaster.
 
 
 On Wed, Nov 20, 2013 at 11:11 PM, Eric Shubert e...@shubes.net wrote:
 Binary rpms can now be found at
 http://mirrors.qmailtoaster.com/repos/testing
 
 While packages in /testing should be considered beta, when they end up being 
 migrated to /current there will be no need to update them (so long as you've 
 installed the final testing version).
 
 I'm presently getting the qmailtoaster-release package built, which will 
 provide yum capability. I just thought that some of you might want to do some 
 initial testing.
 
 Thanks.
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 
 -- 
 Thanks,
 Manikandan.C
 System Administrator

Re: [qmailtoaster] Bounce back even I am not sent mail

[Sebastian Grewe]

Some Spammer uses your mail as the FROM address for Spam. Not sure if you can 
do anything against that but I doubt it.

Cheers,
Sebastian

On Nov 12, 2013, at 11:05 AM, Linux li...@ikf.co.in wrote:

 Team,
 I am not sending the mails on mail.ru, but I received the daily failure 
 notice as the following, please guide someone how this happening and how to 
 stop it.
  
  
 From: mailer-dae...@email.mydomain.com 
 [mailto:mailer-dae...@email.mydomain.com]
 Sent: Tuesday, November 12, 2013 2:58 PM
 To: u...@mydomain.com
 Subject: failure notice
  
 Hi. This is the qmail-send program at email.cqra.com.
 I'm afraid I wasn't able to deliver your message to the following addresses.
 This is a permanent error; I've given up. Sorry it didn't work out.
  
 crew...@mail.ru:
 User and password not set, continuing without authentication.
 crew...@mail.ru 94.100.176.20 failed after I sent the message.
 Remote host said: 550 spam message rejected. Please visit 
 http://help.mail.ru/notspam-support/id?c=THgN9kw_8BCFD-q-SgAmAldgUqSIBUhpSiD
 XWzSOyHRVDNJwsXVattOecD39RrDxaDQi3_anVQ8JbVsAALX30yc~ or  report details 
 to ab...@corp.mail.ru. Error code:
 F60D784C10F03F4CBEEA0F850226004AA4526057694805885BD7204A74C88E3470D20C55B65A
 75B13D709ED3F1B046FDDF2234680F55A7F6. ID: 00095B6D27D3F7B5.
  
 --- Below this line is a copy of the message.
  
 Return-Path: u...@mydomain.com
 Received: (qmail 20154 invoked by uid 89); 12 Nov 2013 09:01:27 -
 Received: by simscan 1.4.0 ppid: 20137, pid: 20147, t: 0.4466s
  scanners: attach: 1.4.0 clamav: 0.97.3/m:55/d:18031
 Received: from unknown (HELO mail.promhzoj.com)
 (u...@mydomain.com@188.187.138.103)
   by email.cqra.com with ESMTPA; 12 Nov 2013 09:01:27 -
 Received: from [464.19.514.13] (port=76243 helo=[89.835.936.577])
 by smtp82.i.mail.ru with esmtps (envelope-from
 u...@mydomain.com)
 id 1Gucxu-0002zc-aV
 for crew...@mail.ru; Tue, 12 Nov 2013 12:01:20 +0300
 Message-ID: DSxBTlNKQYRwUSFDahOmOEwoynUXIESyiCbZXPzRpcvFswigaz@mbnruokx
 Date: Tue, 12 Nov 2013 12:01:20 +0300
 Reply-To: =?utf-8?B?0JDRhNCz0L7QvSDQpdCw0LvQuNC90LrQvtCy0YHQutCw?=
   =?utf-8?B?0Y8=?= u...@mydomain.com
 From: =?utf-8?B?0JDRhNCz0L7QvSDQpdCw0LvQuNC90LrQvtCy0YHQutCw?=
   =?utf-8?B?0Y8=?= u...@mydomain.com
 To: crew571 crew...@mail.ru
 Subject: =?utf-8?B?0Jgg0LPQvtC70L7RgSDQstC10YnQtdCz0L4g0JHQsNGP?=
   =?utf-8?B?0L3QsCw=?=
 MIME-Version: 1.0
 Content-Type: text/plain;
   charset=utf-8;
 Content-Transfer-Encoding: quoted-printable
  
  
  crew571!
  
 =D0=9F=D1=80=D0=B8=D1=8F=D0=B2 =D1=81=D1=83=D0=BF=D1=80=D1=83=D0=B6=D0=B5=
 =D1=81=D0=BA=D0=B8=D0=B9 =D0=B2=D0=B5=D0=BD=D0=B5=D1=86
 =D0=A3=D0=B6=D0=B5 =D0=BA=D0=BE=D0=BB=D0=B4=D1=83=D0=BD =D0=BF=D0=BE=D0=B4=  
 =D0=BE=D0=B1=D0=BB=D0=B0=D0=BA=D0=B0=D0=BC=D0=B8;
 Into a curious-hill'd and curious-valley'd Vast, 
 =D0=A1=D0=B1=D1=8B=D0=BB=D0=B8=D1=81=D1=8C =D0=B4=D0=B0=D0=B2=D0=BD=D0=B8=
 =D1=88=D0=BD=D0=B8=D0=B5 =D0=BC=D0=B5=D1=87=D1=82=D1=8B,
 http://mountainregionallibrary.org/awstats-icon/foto/crew571
 Swiftly responsive to the cry of ill:
 =D0=A9=D0=B8=D1=82=D1=8B =D1=82=D1=80=D0=B5=D1=89=D0=B0=D1=82, =D0=B2 =D0=
 =BA=D1=83=D1=81=D0=BA=D0=B8 =D1=80=D0=B0=D0=B7=D0=B1=D0=B8=D1=82=D1=8B...
 =D0=A3=D0=BD=D1=8B=D0=BB=D1=8B, =D0=B3=D1=80=D1=83=D0=B1=D1=8B =D0=BD=D0=B0=
 =D1=81=D0=BB=D0=B0=D0=B6=D0=B4=D0=B5=D0=BD=D1=8C=D1=8F:
 What ails thee at thy vows?
 13
  
 =D0=A1=D1=83=D1=80=D0=B5=D0=BD=D0=B4=D1=80=D0=B0 =D0=9B=D0=B0=D0=B1=D1=83=
 =D0=BD=D0=B5=D0=B9

Re: [qmailtoaster] chef-solo-qmailtoaster on COS 6.4 64 bit

[Sebastian Grewe]

It only supports 64 bit systems.

Cheers,
Sebastian

 On 09.11.2013, at 07:14, Amit Dalia a...@ikf.co.in wrote:
 
 Hi Sebastian,
 I'm giving a try to chef book. Will it work on 64 bit or currently it support 
 only 32 bit.
 
 --Amit

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster]

[Sebastian Grewe]

Send a new mail to the list, do not just remove the subject line. It will be 
appended to an existing conversation!

Cheers,
Sebastian

On Oct 22, 2013, at 11:30 AM, Syachri syac...@gn-ota.or.id wrote:

 Hi all,
  
 Please help me,
  
 why if I am send an email through microsoft outlook is very long but if I 
 send an email with webmail so quickly no problems
  
 is there a problem with our email server
  
 please help me I am Newbie  about qmailtoaster
  
 regards
  
 
 
   
 Email ini bebas virus dan malware karena avast! Antivirus proteksi aktif.
 

Re: [qmailtoaster] load balencing on qmail

[Sebastian Grewe]

Hey Vivek,

It's been a while that I worked with a qmail cluster so this might be outdated 
information.

We ran a dual SMTP setup with a shared SQL backened and mail directories stored 
on a NFS share. We also shared our qmail configurations and other relevant 
files via nfs to ensure the clusters integrity.

By using a simple load balancer (Linux virtual server) we accepted connection 
on a single ip and forwarded it to the SMTP nodes behind. Iirc we used route 
based balancing with SMTP nodes sending their own answers over their own public 
ips (might be wrong here, been too long ago).

I have since left that company but they are still running the same setup now.

Cheers,
Sebastian

 On 22.10.2013, at 07:37, Linux li...@ikf.co.in wrote:
 
 Hi all,
 I want to setup Qmail server with multiple SMTP. How I can built it.
  
 Purpose:
 Want to create 3 SMTP as sm...@abc.com, sm...@xyz.co.in, sm...@cdf.org.
 When I use all SMTP to send mails, it should balance the queue or separate 
 the queue to speedup sending.
 Or how I can assign separate IP address to SMTP.
  
  
 Regards,
  
 Vivek Patil
 system admin
  
  
  
  

Re: [qmailtoaster] clamav stats gathering

[Sebastian Grewe]

I am also for supplying Data that helps improving ClamAV.

Quick question though, what kind of data will be sent? What kind of stats are 
they tracking?

Cheers,
Sebastian

 On 17.10.2013, at 17:38, Peter Peltonen peter.pelto...@gmail.com wrote:
 
 
 
 
 On Thu, Oct 17, 2013 at 6:35 PM, Eric Shubert e...@shubes.net wrote:
 
 I think it would be appropriate to change the default QMT configuration to 
 provide stats to the clamav developer. 
 
 ...
  
 What do you think about this?
 
 Sounds like a good idea to have ways like this to contribute to the projects 
 that make qmt possible!
 
 Best,
 Peter

Re: [qmailtoaster] How to avoid this kind of email receive

[Sebastian Grewe]

Looks like a forged mail address used for injecting a malicious file.

Not sure what can be done about this. I have not yet received any of those but 
I have seen them in the past.

Cheers,
Sebastian

On Oct 9, 2013, at 4:46 AM, Chandran Manikandan tech2m...@gmail.com wrote:

 Hi All,
 
 One of our users receive below email instead of don't have this email account 
 in our domain.
 
 we don't have this email account e...@panasiagroup.net, but one of our below 
 users receive this email with zip attachment. 
 
 FYR below email attached here.
 
 Kindly anyone help me to resolve this issue.
 -Original Message-
 
 From: Erin Valenzuela [mailto:e...@panasiagroup.net]
 
 Sent: Wednesday, 9 October, 2013 12:09 AM
 
 To: saiki...@panasiagroup.net
 
 Subject: Annual Form - Authorization to Use Privately Owned Vehicle on State 
 Business
 
  
 All employees need to have on file this form STD 261 (attached).  The 
 original is retained by supervisor and copy goes to Accounting. Accounting 
 need this form to approve mileage reimbursement.
 
  
 The form can be used for multiple years, however it needs to re-signed 
 annually by employee and supervisor.
 
  
 Please confirm all employees that may travel using their private car on state 
 business (including training) has a current STD 261 on file.  Not having a 
 current copy of this form on file in Accounting may delay a travel 
 reimbursement claim.
 
  
 
 -- 
 Thanks,
 Manikandan.C
 System Administrator

Re: [qmailtoaster] Where does VQADMIN get domain list from?

[Sebastian Grewe]

Have you checked the /var/qmail/control folder? Maybe it's in there still.

Not sure what other places it would look, might have to check the source if 
nobody has an idea :)

Cheer,
Sebastian


On Oct 9, 2013, at 6:50 AM, LHTek dennywjo...@yahoo.com wrote:

 I've got rogue entry in the domain list when I view the list of domains via 
 VQADMIN. It's a domain I know was deleted sometime ago but there must be some 
 remnant of it still there. The problem is I can't find it in the vpopmail 
 MySql database. There also is no directory in ~/vpopmail/domains for this 
 domain. I can't seem to find the little booger.
 
 Where does VQADMIN keeps it's list of domains?
 
 Thanks,
 Denny
 

[qmailtoaster] Chef Deployment

[Sebastian Grewe]

Hey List,

Just as a heads up, I have mailed a while ago that I was working on a Chef 
Cookbook for qmailtoaster. Since I have recently moved to a new root server, 
here the good news: It worked ;)

If others are curious, this is what I did:

* Deploy all cookbooks and dependencies on my Hosted Chef account
* Bootstrap the target node into my Chef Account
* Apply a qmailtoaster role to the node that includes my cookbook
* Run chef-client on the Node and wait for qmailtoaster to be installed 
including spamdyke
* Sync data from the old server:
 * Database Dump and User Information for vpopmail
 * /home/vpopmail/domains folder
 * /home/qmail/control folder with changes to hostnames
 * /home/qmail/users folder to fetch qmail user CDB file

And that was all. That move was painless and without issues, actually one of 
the best ones I had so far.

Here some restrictions though:

* I am not using any of the fronteds supplied in qmailtoaster (squirrel mail, 
qmailadmin etc)
 * The Chef way to install the frontend is prepared but not ready to use
* CentOS 6.4


@Eric: If you are curious, I have pushed my Chef files to Github so you (and 
others) can take a look: https://github.com/TheSerapher/chef-repo This does not 
include the cookbooks I am using but the qmailtoaster cookbook can be found 
here: https://github.com/TheSerapher/chef-qmailtoaster

Someday qmailtoaster will be in for some changes again, maybe we should 
consider wrapping it around a Chef way to install it instead of dealing with 
configuration changes, file adjustments and all that via RPM packages. This 
could even be accomplished without a Chef Server by using Chef Solo as 
described in my blog which I posted a while ago too. Just a few ideas, I love 
qmailtoaster and I will be happy with anything the list comes up with.
-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Chef Deployment

[Sebastian Grewe]

Yes, the concept behind Chef is rather hard to grasp at first. Took me a while 
to get it entirely. Using a pre-setup Chef Solo package is not hard. It's 
actually harder to prepare it for users than actually using it ;)

By no means I am trying to push this. It worked great for me, added a lot of 
flexibility to my deployment process and automated it completely. Figured I'd 
share this with others.

I am a HUGE fan of qmailtoaster and for that reason alone I have been running 
CentOS for years now. I can't imagine running anything else anymore ;-)

Cheers,
Sebastian

On Oct 4, 2013, at 8:10 AM, cj yother c...@yother.com wrote:

 Well you certainly make it sound easy, but when I tried I failed.  I don't 
 understand the cookbook concept and it's not very self explanatory.  Glad it 
 worked out, but I'm lost at deploy all the cookbooks.  I found the .iso much 
 simpler, however apparently not as modular.
 On 10/03/2013 11:06 PM, Sebastian Grewe wrote:
 Hey List,
 
 Just as a heads up, I have mailed a while ago that I was working on a Chef 
 Cookbook for qmailtoaster. Since I have recently moved to a new root server, 
 here the good news: It worked ;)
 
 If others are curious, this is what I did:
 
 * Deploy all cookbooks and dependencies on my Hosted Chef account
 * Bootstrap the target node into my Chef Account
 * Apply a qmailtoaster role to the node that includes my cookbook
 * Run chef-client on the Node and wait for qmailtoaster to be installed 
 including spamdyke
 * Sync data from the old server:
  * Database Dump and User Information for vpopmail
  * /home/vpopmail/domains folder
  * /home/qmail/control folder with changes to hostnames
  * /home/qmail/users folder to fetch qmail user CDB file
 
 And that was all. That move was painless and without issues, actually one of 
 the best ones I had so far.
 
 Here some restrictions though:
 
 * I am not using any of the fronteds supplied in qmailtoaster (squirrel 
 mail, qmailadmin etc)
  * The Chef way to install the frontend is prepared but not ready to use
 * CentOS 6.4
 
 
 @Eric: If you are curious, I have pushed my Chef files to Github so you (and 
 others) can take a look: https://github.com/TheSerapher/chef-repo This does 
 not include the cookbooks I am using but the qmailtoaster cookbook can be 
 found here: https://github.com/TheSerapher/chef-qmailtoaster
 
 Someday qmailtoaster will be in for some changes again, maybe we should 
 consider wrapping it around a Chef way to install it instead of dealing with 
 configuration changes, file adjustments and all that via RPM packages. This 
 could even be accomplished without a Chef Server by using Chef Solo as 
 described in my blog which I posted a while ago too. Just a few ideas, I 
 love qmailtoaster and I will be happy with anything the list comes up with.
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -- 
 cj's_sig.png

Re: [qmailtoaster] Windows 8 mail client and courier-IMAP SSL woes

[Sebastian Grewe]

If you are planning to run a real server you should consider getting a valid 
SSL certificate. The ones supplied with qmailtoaster are self signed and will 
be rejected by mail clients. Most clients allow to accept self signed 
certificates, as for windows 8 I am not sure but Google might help.



Cheers,
Sebastian

 On 04.10.2013, at 04:51, Kelly Cobean kcob...@vipercrazy.com wrote:
 
 I'm trying to set up my first Windows 8 laptop and the email client won't 
 allow me to set up my email because it says I need to install an SSL 
 certificate because I'm using SSL for the IMAP connection.  I'm using the 
 cert that got installed when I installed QMT on the server.  Anyone have any 
 insights on how to make this work?
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Fwd: Some emails goto destination mailbox with spam mark

[Sebastian Grewe]

Like I mentioned maybe the mail header lets you know why they were tagged as 
spam. If it is the internal outlook filter I doubt there is a whole lot you can 
do other than people adding you to a whitelist (or just the address book 
sometimes is enough).

Cheers,
Sebastian

On 12.04.2013, at 10:07, ChandranManikandan kand...@gmail.com wrote:

 Thanks sebastian,
 I had checked SPF and Domain keys are fine. Any other you can help me.
 
 
 On Fri, Apr 12, 2013 at 11:51 AM, Sebastian Grewe sebast...@grewe.ca wrote:
 You will probably need some full mail header to see what causes your score 
 to go over their threshold. If they are MS Exchange clients they could also 
 add you to a whitelist or mark you as not spam.
 
 Also valid SPF records or domain keys can help to avoid being marked as spam.
 
 Cheers,
 Sebastian
 
 On 12.04.2013, at 04:45, ChandranManikandan kand...@gmail.com wrote:
 
 Hi Eric,
 Thanks for your reply. Here some times when i sent email to some 
 destination it's going to their spam box or Junk email. Any solution is 
 there to avoid this kind of issue.
 
 
 On Wed, Apr 10, 2013 at 12:25 AM, Eric Shubert e...@shubes.net wrote:
 On 04/08/2013 11:30 PM, ChandranManikandan wrote:
 Hi,
 Some email recipient inform my emails went to spam folder as well spam
 marks. How to avoid this issue in our server.
 
 --
 */Thanks  Best Regards,
 Manikandan.C
 /*
 http://wiki.qmailtoaster.com/index.php/Spamassassin#Configuration_and_Rules
 Lower the required_score value.
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 -- 
 Thanks  Best Regards,
 Manikandan.C
 
 
 
 -- 
 Thanks  Best Regards,
 Manikandan.C

Re: [qmailtoaster] Re: Fwd: Some emails goto destination mailbox with spam mark

[Sebastian Grewe]

You will probably need some full mail header to see what causes your score to 
go over their threshold. If they are MS Exchange clients they could also add 
you to a whitelist or mark you as not spam.

Also valid SPF records or domain keys can help to avoid being marked as spam.

Cheers,
Sebastian

On 12.04.2013, at 04:45, ChandranManikandan kand...@gmail.com wrote:

 Hi Eric,
 Thanks for your reply. Here some times when i sent email to some destination 
 it's going to their spam box or Junk email. Any solution is there to avoid 
 this kind of issue.
 
 
 On Wed, Apr 10, 2013 at 12:25 AM, Eric Shubert e...@shubes.net wrote:
 On 04/08/2013 11:30 PM, ChandranManikandan wrote:
 Hi,
 Some email recipient inform my emails went to spam folder as well spam
 marks. How to avoid this issue in our server.
 
 --
 */Thanks  Best Regards,
 Manikandan.C
 /*
 http://wiki.qmailtoaster.com/index.php/Spamassassin#Configuration_and_Rules
 Lower the required_score value.
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 -- 
 Thanks  Best Regards,
 Manikandan.C

Re: [qmailtoaster] Re: Bounce Message

[Sebastian Grewe]

Looks like the remote server is starting the smtp connection out of order:

503_MAIL_first

Maybe it starts with a rcpt to for some reason. Seeing its a Microsoft node:

* Outlook client without authentication?
* Is it always the same server failing?
* only one sender affected by this?

Rather strange indeed - maybe something trivial as packet loss?

Cheers,
Sebastian

On 29.03.2013, at 18:35, Eric Shubert e...@shubes.net wrote:

 On 03/29/2013 10:26 AM, Aleksander Podsiadły wrote:
 Dnia 2013-03-29, pią o godzinie 17:38 +0530, Amit pisze:
 reason: 503_MAIL_first_(#5.5.1)
 
 IMHO it's the greylist, try again.
 
 You can try again, but I don't think that's it. DENIED_OTHER is a rejection 
 outside the scope of spamdyke, which is what does graylisting. If it were 
 graylisting, you'd see DENIED_GRAYLISTED in the log.
 
 -- 
 -Eric 'shubes'
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] DNS server error

[Sebastian Grewe]

Hotmail was having issues with their server farm. Many servers died due to high 
temperatures. Maybe it's related?

http://www.pcworld.com/article/2030836/microsoft-blames-outlook-hotmail-outage-on-overheated-servers-apologizes.html

Also some things I thought about

* can your look up and resolve some of their MXers?
** dig mx hotmail.com
* did your host make it on a blocklist?
** http://mxtoolbox.com/blacklists.aspx

On Tue, 19 Mar 2013 10:04:41 -0600
Eric Broch ebr...@whitehorsetc.com wrote:

 On 3/19/2013 9:49 AM, cj yother wrote:
  On 03/19/2013 05:08 AM, Eric Broch wrote:
  Hello list,
 
  I have a user trying to send mail to a Hotmail account. The following
  error continues to reoccur:
 
  Server error: '451 DNS temporary failure (#4.5.1 - chkuser)'
 
  I looked over qmail archives and found scant info on the subject. Is
  this a problem with hotmail?
 
  Eric
 
  -
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
  That's most likely on your end.  Does your server resolve hotmail.com
  correctly?  I also have heard that hotmail is being phased out and
  maybe they are in the process of making the changes.
 
 CJ, Yes it resolves correctly.
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 


-- 
Sebastian Grewe sebast...@grewe.ca

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] clamav-toaster-0.97.7-1.43 available

[Sebastian Grewe]

Thanks Eric! Your work is much appreciated. I shall install it later today and 
also update the chef cookbook to use the latest version.

Cheers,
Sebastian

On 16.03.2013, at 06:09, Eric Shubert e...@shubes.net wrote:

 It's hot off the presses. Source rpm is on the master repo, and should be 
 available on all the mirrors within an hour.
 
 I wouldn't put it on anything too important until we hear back from some 
 early testers. Build went well though with no hitches (as have the last 2), 
 and it installed cleanly on CentOS5 32- and 64-bit.
 
 Speaking of which, if you'd like to try the udpate w/out building your own 
 binaries, they're available for CentOS5 i386 and x86_64 on the mirrors. You 
 can find them in the appropriate 'current' subdirectory. Not quite yum-able 
 yet, but that'll be coming soon.
 
 Once we have a few reports of it being stable, I'll put it in the current.txt 
 file so it'll be picked up automatically by qtp-newmodel and whatever other 
 scripts.
 
 Thanks everyone!
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Missing POP3 Supervise

[Sebastian Grewe]

Hey Eric,

Don't worry, no offense taken whatsoever.

I totally agree on your view on pop3 and the security implications involved. I 
am not using pop3 myself and probably never will. On my small server I moved 
most clients over to the SSL version or even IMAP-SSL.

Since you mentioned that dovecot is going to replace courier in the future, 
should I drop the courier packages and use dovecot instead? If you could link 
me to some resources that will help me that would be great.

If the development list is interested in Qmailtoaster with Chef I will make 
sure to join. I do think that this combination is great for new setups and 
takes away a lot of configuration type scripting from the RPM packages. Heck, 
it could even allow us to deploy Qmailtoaster on any system if we went down to 
source code compiling without rpmbuild (which also works fine as other 
cookbooks use it, like the daemontools cookbook that already exists).


Cheers,
Sebastian

On 09.03.2013, at 05:27, Eric Shubert e...@shubes.net wrote:

 On 03/08/2013 11:18 AM, Eric Shubert wrote:
 On 03/08/2013 12:50 AM, Sebastian Grewe wrote:
 Hey List,
 
 I have been working on my Chef Cookbook for Qmailtoaster lately and
 was working on minitests and noticed something strange:
 
 /var/qmail/supervise/pop3 is missing. At first I thought my unit test
 failed because I made a mistake but then realized there was no pop3
 running at all.
 
 /var/qmail/supervise/pop3-ssl does exist and works fine, my test user
 could login and see the mails.
 
 Has anyone noticed this with a fresh installation? Or am I missing
 something here?
 
 Cheers,
 Sebastian
 -
 
 I haven't noticed, but I haven't been in a situation lately where I
 might notice. I'd like to make a few comments regarding pop3 though.
 
 First is that while qmail-pop3d can handle TLS (IIRC), there's no way to
 mandate that clients use a secure connection. This is a security hole
 that is removed when only pop3-ssl is available.
 
 Second, pop3 chores will be taken over by dovecot when dovecot is
 formally integrated into the stock QMT. Dovecot will handle both imap
 and pop3 processing, and can enforce secure connections so that
 passwords aren't sent in the clear.
 
 Many QMT operators already use dovecot, as it is far superior to courier
 for IMAP processing. It's pretty simple to convert from courier to
 dovecot, and there are some dovecot binary packages available in the QTP
 repo which can be installed using yum, and are appropriately built and
 configured for use with QMT. See the wiki for more details.
 
 Thanks go to many community members who have helped to get dovecot
 integrated with QMT. I hope we can complete the process sometime this
 year so that dovecot is stock, and courier is no more.
 
 If you're interested in more about this, please join us on the
 development list.
 
 After reading this post, I see that the message could be interpreted more 
 than one way, and I'd like to clarify.
 
 While I hope and expect that the devel list will become more active in the 
 future, I didn't mean to imply that this post was inappropriate for this list.
 
 I am (and I hope that others are) grateful to Sebastian for his 
 contributions. The software he's writing is leading edge stuff, people. He's 
 doing some of the groundwork I wish I had time to explore. I expect his work 
 will be part of QMT's future, one way or another.
 
 Thanks, Sebastian.
 
 -- 
 -Eric 'shubes'
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Unable to change bounce processing with qmailadmin

[Sebastian Grewe]

Not that I am using qmailadmin myself but I had used it in the past. Being able 
to separate mail and web services would totally make sense though. Right now 
it's not possible at all and with vpopmaild being used at least we had the 
ability to not run a web host on a core service. 

Cheers,
Sebastian

On 19.02.2013, at 18:53, Eric Shubert e...@shubes.net wrote:

 I've had a look at the code. There's a section in command.c which should kick 
 in the catchall functions. This section is conditionally included according 
 to #ifdef, which should be set according to the .configure options. I checked 
 the configure output from my build, and every indication is that catchall 
 processing is enabled. It appears though that the variable isn't being set 
 for that particular module, so the functions aren't being invoked. The 
 behavior is the same as if you put an invalid function in the URL. There is 
 no code in the program to send an unknown function message anywhere, it 
 simply returns a blank screen. Pretty lame.
 
 The config/make code for qmailadmin is a bit convoluted, but I'll see if I 
 can find an appropriate fix. It seems to me that it wouldn't hurt to check 
 for the catchall functions in the command.c module even if/when the 
 configuration has it disabled (ie remove the #ifdef in the source code), 
 which should fix things up w/out having to delve into the rest of the 
 (convoluted) build code.
 
 I'll try to get that tested in the next couple days to see if I'm right about 
 this. If it works, I'll release a fixed package, and report the results 
 upstream.
 
 On a related note, it was mentioned on the vpopmail list recently that it'd 
 be nice to have qmailadmin modified to use vpopmaild instead of doing things 
 directly itself. This would allow qmailadmin to be run on a separate (web) 
 host from the mail server. I think that's a good idea. Does anyone have any 
 thoughts on this?
 
 Thanks.
 
 -- 
 -Eric 'shubes'
 
 On 02/18/2013 11:39 PM, Casey James Price wrote:
 I've experienced the same issue. Any ideas what might be causing this?
 
 /*Casey James Price*/
 Operations/Technical Support
 
 Smile Global
 www.smileglobal.com http://www.smileglobal.com
 https://twitter.com/#%21/SmileInternet
 https://www.facebook.com/smileglobal
 On 2/15/13 9:37 PM, Cecil Yother, Jr. wrote:
 On 02/15/2013 05:39 PM, Eric Shubert wrote:
 I'm running qmailadmin 1.2.16 (with vpopmail 5.4.33), and when I
 click on an account's catchall button or otherwise attempt to change
 the catchall status for the domain, it simply returns a blank page
 without having changed anything. The url appears to be properly
 formatted, and I see what appears to be a normal message in the
 apache access log. I'm running the same version on several hosts, and
 they all have this problem.
 
 Anyone else experiencing this? I'm guessing that the latest upgrade
 broke something.
 
 The permissions of the files all look ok. I've looked at the C source
 code, and it appears that if there's a problem, it should be showing
 a message somewhere. I'm wonder if perhaps it's not getting to that
 point in the code.
 
 Anyone have any input on this?
 
 Thanks.
 Eric,
 
 I am experiencing the same problem here.  On the same machine I am
 having trouble with vadddomain
 
 CJ
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] QMT-CentOS6-12010.07.sh

[Sebastian Grewe]

You could try the chef solo installation I described : 
http://www.grewe.ca/chef-solo-qmailtoaster/

This was tested on CentOS 6.3 64 bit and might work for you too.

Cheers,
Sebastian

On 14.02.2013, at 16:26, Dan McAllister q...@it4soho.com wrote:

 CJ -
 
 The script is for COS 6 only -- and I believe that there is a perl dependency 
 error in COS 6.3
 
 I haven't worked on this in a while, I've been swamped by clients who have 
 updated their Windows SBS 2003 systems to SBS 2011 (a nightmare upgrade BTW) 
 and I've had to devote many an hour learning Exchange 2010 (barf) and 
 SharePoint (more barf)
 
 Dan
 
 On 2/13/2013 10:28 PM, Cecil Yother, Jr. wrote:
 On 12/04/2012 03:09 PM, Dan McAllister wrote:
 Greetings all...
 
 I've received a few requests lately from people wanting the latest 
 QMT-CentOS6 script... the latest of which is attached (with the file 
 extension changed to avoid being blocked by spam/av filters).
 
 Save the file, remove the .TXT from the name and run it as a bash script 
 (as root: bash QMT-CentOS6-12.10.28.sh)
 
 Please provide feedback as to how well it works for you!
 
 Thanks
 
 Dan McAllister
 -- 
 
 IT4SOHO, LLC
 PO Box 507
 St. Petersburg, FL 33731-0507
 
 CALL TOLL FREE:
   877-IT4SOHO
 
 We have support plans for QMail!
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 Dan,
 
 I am about to run your script.  Can this be run to upgrade 5.8?  or does it 
 need to run on 6.0 or better?  Will it run on 6.3?
 
 Thanks,
 
 CJ
 
 --
 
 
 -- 
 
 IT4SOHO, LLC
 PO Box 507
 St. Petersburg, FL 33731-0507
 
 CALL TOLL FREE:
   877-IT4SOHO
 
 We have support plans for QMail!
 

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

Only on my mobile now but here a list of all the packages sorted via 'rpm -qa | 
sort'. Isn't it amazing what phones are capable nowadays? :D

a52dec-0.7.4-8.el5.rf
alsa-lib-1.0.17-1.el5
amanda-2.5.0p2-9.el5
amanda-client-2.5.0p2-9.el5
apg-2.3.0b-5.el5
apr-1.2.7-11.el5_6.5
apr-devel-1.2.7-11.el5_6.5
apr-util-1.2.7-11.el5_5.2
apr-util-devel-1.2.7-11.el5_5.2
aspell-0.60.3-12
aspell-en-6.0-3
atk-1.12.2-1.fc6
atop-1.26-3.el5
audiofile-0.2.6-5
audit-libs-1.8-2.el5
audit-libs-python-1.8-2.el5
authconfig-5.3.21-7.el5
autoconf-2.59-12
automake17-1.7.9-7.el5.2
automake-1.9.6-2.3.el5
autorespond-toaster-2.0.5-1.4.0
avahi-0.6.16-10.el5_6
avahi-glib-0.6.16-10.el5_6
awstats-7.0-2.el5.rf
basesystem-8.0-5.1.1.el5.centos
bash-3.2-32.el5
bind-libs-9.3.6-20.P1.el5_8.6
bind-utils-9.3.6-20.P1.el5_8.6
binutils-2.17.50.0.6-20.el5_8.3
bison-2.3-2.1
bitstream-vera-fonts-1.10-7
bzip2-1.0.3-6.el5_5
bzip2-devel-1.0.3-6.el5_5
bzip2-libs-1.0.3-6.el5_5
cairo-1.2.4-5.el5
centos-release-5-9.el5.centos.1
centos-release-notes-5.9-0
check_logfiles-3.4.2-1.el5.rf
check_mk-agent-1.2.0p2-1
check_mk-agent-logwatch-1.2.0p2-1
checkpolicy-1.33.1-6.el5
chkconfig-1.3.30.2-2.el5
clamav-toaster-0.97.6-1.4.2
compat-gcc-34-3.4.6-4.1
compat-gcc-34-c++-3.4.6-4.1
compat-glibc-2.3.4-2.26
compat-glibc-headers-2.3.4-2.26
compat-libcurl3-7.15.5-2.el5.remi
compat-mysql51-5.1.54-1.el5.remi
control-panel-toaster-0.5-1.4.0
coreutils-5.97-34.el5_8.1
courier-authlib-toaster-0.59.2-1.3.10
courier-imap-toaster-4.1.2-1.3.10
cpio-2.6-25.el5
cpp-4.1.2-54.el5
cppunit-1.12.0-4.el5.1
cpuspeed-1.2.1-10.el5
cracklib-2.8.9-3.3
cracklib-dicts-2.8.9-3.3
createrepo-0.4.11-3.el5
cronolog-1.6.2-5.el5
crontabs-1.10-11.el5
cryptsetup-luks-1.0.3-8.el5
cups-libs-1.3.7-30.el5
curl-7.21.7-5.el5.remi.2
cyrus-sasl-2.1.22-7.el5_8.1
cyrus-sasl-devel-2.1.22-7.el5_8.1
cyrus-sasl-lib-2.1.22-7.el5_8.1
daemontools-toaster-0.76-1.3.6
db4-4.3.29-10.el5_5.2
db4-devel-4.3.29-10.el5_5.2
dbus-1.1.2-16.el5_7
dbus-glib-0.73-10.el5_5
dbus-libs-1.1.2-16.el5_7
dbus-python-0.70-9.el5_4
desktop-file-utils-0.10-7
device-mapper-1.02.67-2.el5
device-mapper-event-1.02.67-2.el5
device-mapper-multipath-0.4.7-54.el5_9.1
dhclient-3.0.5-33.el5_9
dhcpv6-client-1.0.10-20.el5
dialog-1.0.20051107-1.2.2
diffutils-2.8.1-16.el5
dirac-1.0.2-1.el5.rf
distcache-1.4.5-14.1
djbdns-1.05-1.0.6
djbdns-localcache-1.05-1.0.6
dkms-2.2.0.3-2.el5
dkms-fuse-2.7.4-1.nodist.rf
dmidecode-2.11-1.el5
dmraid-1.0.0.rc13-65.el5
dmraid-events-1.0.0.rc13-65.el5
dnsmasq-2.55-1.el5.rf
docbook-dtds-1.0-30.1
dos2unix-3.1-27.2.el5
e2fsprogs-1.39-35.el5
e2fsprogs-devel-1.39-35.el5
e2fsprogs-libs-1.39-35.el5
ed-0.2-39.el5_2
elfutils-0.137-3.el5
elfutils-libelf-0.137-3.el5
elfutils-libelf-devel-0.137-3.el5
elfutils-libelf-devel-static-0.137-3.el5
elfutils-libs-0.137-3.el5
elinks-0.11.1-6.el5_4.1
epel-release-5-4
esound-0.2.36-4
ethtool-6-4.el5
expat-1.95.8-11.el5_8
expat-devel-1.95.8-11.el5_8
expect-5.43.0-8.el5
expect-devel-5.43.0-8.el5
ezmlm-cgi-toaster-0.53.324-1.3.6
ezmlm-toaster-0.53.324-1.3.6
faac-1.26-1.el5.rf
fail2ban-0.8.4-29.el5
ffmpeg-0.6.5-1.el5.rf
ffmpeg-libpostproc-0.6.5-1.el5.rf
file-4.17-28
filesystem-2.4.0-3.el5.centos
findutils-4.2.27-6.el5
fipscheck-1.2.0-1.el5
fipscheck-lib-1.2.0-1.el5
flex-2.5.4a-41.fc6
fontconfig-2.4.1-7.el5
fping-3.4-1.el5.rf
freetype-2.2.1-32.el5_9.1
fuse-2.7.4-8.el5
fuse-libs-2.7.4-8.el5
fuse-unionfs-0.23-1.el5.rf
gamin-0.1.7-10.el5
gamin-python-0.1.7-10.el5
gawk-3.1.5-16.el5
gcc-4.1.2-54.el5
gcc-c++-4.1.2-54.el5
GConf2-2.14.0-9.el5
gd-2.0.33-9.4.el5_4.2
gdbm-1.8.0-28.el5
gdbm-devel-1.8.0-28.el5
GeoIP-1.4.8-1.el5
giflib-4.1.3-7.3.3.el5
glib2-2.12.3-4.el5_3.1
glibc-2.5-107
glibc-common-2.5-107
glibc-devel-2.5-107
glibc-headers-2.5-107
gmp-4.1.4-10.el5
gmp-devel-4.1.4-10.el5
gnome-doc-utils-0.8.0-2.fc6
gnome-keyring-0.6.0-1.fc6
gnome-mime-data-2.4.2-3.1
gnome-mount-0.5-3.el5
gnome-python2-2.16.0-1.fc6
gnome-python2-bonobo-2.16.0-1.fc6
gnome-python2-canvas-2.16.0-1.fc6
gnome-python2-gnomevfs-2.16.0-1.fc6
gnome-vfs2-2.16.2-10.el5
gnupg-1.4.5-14.el5_5.1
gnutls-1.4.1-10.el5
gpg-pubkey-00f97f56-467e318a
gpg-pubkey-1aa78495-3eb24301
gpg-pubkey-217521f6-45e8a532
gpg-pubkey-6b8d79e6-3f49313d
gpg-pubkey-6b8d79e6-3f49313d
gpg-pubkey-b1fd9982-4bc21a5a
gpg-pubkey-cd2efd2a-4b26dda1
gpg-pubkey-e42d547b-3960bdf1
gpg-pubkey-e8562897-459f07a4
grep-2.5.1-55.el5
grewe-centos-repo-1.0-1.sg
groff-1.18.1.1-13.el5
grub-0.97-13.10.el5
gsm-1.0.13-1.el5.rf
gtk2-2.10.4-29.el5
gzip-1.3.5-13.el5.centos
hal-0.5.8.1-64.el5
hdparm-6.6-2
hicolor-icon-theme-0.9-2.1
hmaccalc-0.9.6-4.el5
httpd-2.2.3-76.el5.centos
httpd-devel-2.2.3-76.el5.centos
httpd-manual-2.2.3-76.el5.centos
hwdata-0.213.28-1.el5
iftop-1.0-0.1.pre2.el5
imake-1.0.2-3
imlib2-1.4.4-1.el5.rf
info-4.8-14.el5
initscripts-8.45.42-1.el5.centos.1
innotop-1.9.0-3.el5
iproute-2.6.18-15.el5
iptables-1.3.5-9.2.el5_8
iptables-ipv6-1.3.5-9.2.el5_8
iptraf-3.0.0-5.el5
iputils-20020927-46.el5
iscsi-initiator-utils-6.2.0.872-16.el5
isoqlog-toaster-2.1-1.3.7
jre-1.6.0_21-fcs
kbd-1.12-22.el5

Re: [qmailtoaster] Opscode Chef Qmailtoaster : Chef Solo

[Sebastian Grewe]

Hard Iron too. It's been written with bare metal in mind so you should be fine.

Please report any issues you might have on GitHub :-)

Cheers,
Sebastian

On 11.02.2013, at 19:29, Cecil Yother, Jr. c...@yother.com wrote:

 On 02/10/2013 12:15 PM, Sebastian Grewe wrote:
 Hey List,
 
 I have announced it a while back that I have been working on a Cookbook for 
 Opscode Chef to simplify the installation of Qmailtoaster. As it was mainly 
 desgined to work for me and Hosted Chef, I noticed that it might not be as 
 widely accepted as it could be. So I went ahead and wrote a little 
 documentation on how to install Qmailtoaster using my Cookbook (and 
 dependencies) using Chef Solo. This will allow you to install everything 
 without the need of a Chef Server or Hosted Chef account with a single 
 command.
 
 Documentation: http://www.grewe.ca/chef-solo-qmailtoaster/
 Github Repo: https://github.com/TheSerapher/chef-qmailtoaster
 
 Feel free to try it out on any CentOS 6.3 Virtual Machine (I used VirtualBox 
 during my tests). I am also actively developing this cookbook so I am open 
 for suggestions and bug reports on the Github repository!
 
 Feedback welcome :-)
 
 Cheers,
 Sebastian
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 Will this work on hard iron or only VM?
 
 -- 
 cj's_sig.png

[qmailtoaster] Opscode Chef Qmailtoaster : Chef Solo

[Sebastian Grewe]

Hey List,

I have announced it a while back that I have been working on a Cookbook for 
Opscode Chef to simplify the installation of Qmailtoaster. As it was mainly 
desgined to work for me and Hosted Chef, I noticed that it might not be as 
widely accepted as it could be. So I went ahead and wrote a little 
documentation on how to install Qmailtoaster using my Cookbook (and 
dependencies) using Chef Solo. This will allow you to install everything 
without the need of a Chef Server or Hosted Chef account with a single command.

Documentation: http://www.grewe.ca/chef-solo-qmailtoaster/
Github Repo: https://github.com/TheSerapher/chef-qmailtoaster

Feel free to try it out on any CentOS 6.3 Virtual Machine (I used VirtualBox 
during my tests). I am also actively developing this cookbook so I am open for 
suggestions and bug reports on the Github repository!

Feedback welcome :-)

Cheers,
Sebastian

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

Maybe it tried to compile on 64bit? Just kidding .. here my Repos

 * base
 * epel
 * extras
 * remi
 * rpmforge
 * updates

On Thu, 07 Feb 2013 23:59:43 -0800
Cecil Yother, Jr. c...@yother.com wrote:

 It looks like you are running a 64 bit system.  Mine is 32 bit.  I 
 wonder if that's the difference.  What repos are you using?
 
 On 02/07/2013 11:42 PM, Sebastian Grewe wrote:
  Installed the updates without issues.
 
  That makes your issue even weirder because I'd expect it to break for me 
  too...
 
 
  On Fri, 8 Feb 2013 08:38:21 +0100
  Sebastian Grewe sebast...@grewe.ca wrote:
 
  Okay so I checked my Own server and it's also running CentOS 5.9.
 
  I have not installed some of the latest updates yet and vadddomain works 
  fine. Installing these updates now:
 
  Dependencies Resolved
 
  =
Package  Arch
  Version   Repository   
 Size
  =
  Installing:
kernel   x86_64  
  2.6.18-348.1.1.el5updates  
 22 M
kernel-devel x86_64  
  2.6.18-348.1.1.el5updates  
5.8 M
  Updating:
device-mapper-multipath  x86_64  
  0.4.7-54.el5_9.1  updates  
3.0 M
dhclient x86_64  
  12:3.0.5-33.el5_9 updates  
287 k
freetype x86_64  
  2.2.1-32.el5_9.1  updates  
312 k
kernel-headers   x86_64  
  2.6.18-348.1.1.el5updates  
1.5 M
kpartx   x86_64  
  0.4.7-54.el5_9.1  updates  
445 k
nspr x86_64  
  4.9.2-2.el5_9 updates  
121 k
nspr-devel   x86_64  
  4.9.2-2.el5_9 updates  
111 k
nss  x86_64  
  3.13.6-3.el5_9updates  
1.1 M
nss-develx86_64  
  3.13.6-3.el5_9updates  
244 k
tzdata   x86_64  
  2012j-1.el5   updates  
793 k
  Removing:
kernel   x86_64  
  2.6.18-308.24.1.el5   installed
 98 M
kernel-devel x86_64  
  2.6.18-308.24.1.el5   installed
 16 M
 
  I will report back once completed.
 
  On Thu, 07 Feb 2013 20:35:44 -0800
  Cecil Yother, Jr. c...@yother.com wrote:
 
  On 02/07/2013 04:24 PM, Eric Shubert wrote:
  That's up to you, but I wouldn't quite yet.
 
  I'd like to know if anyone else is running QMT on COS5.9, with or
  w/out this problem.
 
  Anybody?
 
  In searching for a solution I found a Gentoo thread that resembled my
  problem.
 
  https://bugs.gentoo.org/show_bug.cgi?id=13908
 
  I ran gdb like they did and this was the output.  Maybe it will help in
  debugging.  I don't know where to go from here.
 
  [root@viktorya bin]# gdb vadddomain
  GNU gdb (GDB) CentOS (7.0.1-45.el5.centos)
  Copyright (C) 2009 Free Software Foundation, Inc.
  License GPLv3+: GNU GPL version 3 or later
  http://gnu.org/licenses/gpl.html
  This is free software: you are free to change and redistribute it.
  There is NO WARRANTY, to the extent permitted by law.  Type show copying
  and show warranty for details.
  This GDB was configured as i386-redhat-linux-gnu.
  For bug reporting instructions, please see:
  http://www.gnu.org/software/gdb/bugs/...
  Reading symbols from

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

Maybe something is wrong with your vpopmail table for that domain (dom_89)? 
Unless of course the domain is always another one.


On Wed, 06 Feb 2013 23:27:01 -0800
Cecil Yother, Jr. c...@yother.com wrote:

 snip
 
 umask(077)  = 022
 open(., O_RDONLY) = 5
 chdir(/home/vpopmail) = 0
 chdir(domains)= 0
 poll([{fd=4, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
 write(4, \1\0\0\0\16, 5)  = 5
 read(4, \7\0\0\1\0\0\0\2\0\0\0, 16384) = 11
 poll([{fd=4, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
 write(4, \365\0\0\0\3select cur_users, level_cur, level_max, 
 level_start0, level_start1, level_start2, level_end0, level_end1, 
 level_end2, level_mod0, level_mod1, level_mod2, level_index0, 
 level_index1, level_index2, the_dir from dir_control where domain = 
 'dom_89', 249) = 249
 read(4, 
 \1\0\0\1\20F\0\0\2\3def\10vpopmail\vdir_control\vdir_control\tcur_users\tcur_users\f?\0\v\0\0\0\3\0\0\0\0\0F\0\0\3\3def\10vpopmail\vdir_control\vdir_control\tlevel_cur\tlevel_cur\f?\0\v\0\0\0\3\0\0\0\0\0F\0\0\4\3def\10vpopmail\vdir_control\vdir_control\tlevel_max\tlevel_max\f?\0\v\0\0\0\3\0\0\0\0\0L\0\0\5\3def\10vpopmail\vdir_control\vdir_control\flevel_start0\flevel_start0\f?\0\v\0\0\0\3\0\0\0\0\0L\0\0\6\3def\10vpopmail\vdir_control\vdir_control\flevel_start1\flevel_start1\f?\0\v\0\0\0\3\0\0\0\0\0L\0\0\7\3def\10vpopmail\vdir_control\vdir_control\flevel_start2\flevel_start2\f?\0\v\0\0\0\3\0\0\0\0\0H\0\0\10\3def\10vpopmail\vdir_control\vdir_control\nlevel_end0\nlevel_end0\f?\0\v\0\0\0\3\0\0\0\0\0H\0\0\t\3def\10vpopmail\vdir_control\vdir_control\nlevel_end1\nlevel_end1\f?\0\v\0\0\0\3\0\0\0\0\0H\0\0\n\3def\10vpopmail\vdir_control\vdir_control\nlevel_end2\nlevel_end2\f?\0\v\0\0\0\3\0\0\0\0\0H\0\0\v\3def\10vpopmail\vdir_control\vdir_control\nlevel_mod0\nlevel_mod0\f?\0\v\0\0\0\3\0\0\0\0\0H\0\0\f\3def\10vpopmail\vdir_control\vdir_control\nlevel_mod1\nlevel_mod1\f?\0\v\0\0\0\3\0\0\0\0\0H\0\0\r\3def\10vpopmail\vdir_control\vdir_control\nlevel_mod2\nlevel_mod2\f?\0\v\0\0\0\3\0\0\0\0\0L\0\0\16\3def\10vpopmail\vdir_control\vdir_control\flevel_index0\flevel_index0\f?\0\v\0\0\0\3\0\0\0\0\0L\0\0\17\3def\10vpopmail\vdir...,
  
 16384) = 1290
 --- SIGSEGV (Segmentation fault) @ 0 (0) ---
 +++ killed by SIGSEGV +++
 
 
 On 02/06/2013 10:45 PM, Sebastian Grewe wrote:
  Looks like it crashes right after receiving the results from the DB. 
  Run strace -f -s1024 to see more data.
 
  I'd guess it might help to run gdb as well but I'd have to look up how 
  to use it exactly - it might help better.
 
  Cheers,
  Sebastian
 
  On 07.02.2013, at 07:28, Cecil Yother, Jr. c...@yother.com 
  mailto:c...@yother.com wrote:
 
  On 02/06/2013 10:17 PM, Sebastian Grewe wrote:
  Try recompiling it. Maybe a library got updated?
  Already did to no avail.
 
  Last several lines.  Let me know if you need the whole trace
 
  lseek(5, 112, SEEK_SET) = 112
  read(5, o\17\0\0\0\0\0\0, 8)  = 8
  close(5)= 0
  open(/var/qmail/users/cdb, O_RDONLY)  = 5
  lseek(5, 112, SEEK_SET) = 112
  read(5, o\17\0\0\0\0\0\0, 8)  = 8
  close(5)= 0
  umask(077)  = 022
  open(., O_RDONLY) = 5
  chdir(/home/vpopmail) = 0
  chdir(domains)= 0
  poll([{fd=4, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
  write(4, \1\0\0\0\16, 5)  = 5
  read(4, \7\0\0\1\0\0\0\2\0\0\0, 16384) = 11
  poll([{fd=4, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
  write(4, \365\0\0\0\3select cur_users, level_cur..., 249) = 249
  read(4, \1\0\0\1\20F\0\0\2\3def\10vpopmail\vdir_contr..., 16384) = 1290
  --- SIGSEGV (Segmentation fault) @ 0 (0) ---
  +++ killed by SIGSEGV +++
 
  Also strace or gdb might help to figure out why it crashes.
 
  Cheers,
  Sebastian
 
  On 07.02.2013, at 06:50, Cecil Yother, Jr.c...@yother.com  wrote:
 
  On 02/06/2013 09:35 PM, Eric Shubert wrote:
  On 02/06/2013 07:50 PM, Cecil Yother, Jr. wrote:
  On 02/06/2013 06:39 PM, Eric Shubert wrote:
  On 02/06/2013 12:38 PM, Cecil Yother, Jr. wrote:
  I am getting a segmentation fault when I try to add a new domain 
  using
  vpopmail.  Has anyone ever experienced this?  Any ideas on where to
  start to debug?
 
  ./vadddomainmoparclassified.com  http://moparclassified.com
  Please enter password for postmaster:
  enter password again:
  Segmentation fault
 
  REAL_DIST=CentOS
  DISTRO=CentOS
  OSVER=5.9
  QTARCH=i686
  QTKERN=2.6.18-348.1.1.el5
  BUILD_DIST=cnt50
  BUILD_DIR=/usr/src/redhat
  This machine's OS is supported and has been tested
 
 
  Thanks,
 
  CJ
 
  -
  I don't know.
  Are you running the latest vpopmail-toaster package? If so, I'd ask
  about this on the vpopmail users list (mailto:vch...@inter7.com).
  Yes I am.  Any other way to add users

Re: [qmailtoaster] re: segmentation fault

[Sebastian Grewe]

Then it's a library issue. I had the same thing and re-did some toaster 
packages to fix it. I am pretty sure it's just vpopmail that needs to be linked 
against the new libraries.

Cheers,
Sebastian

On 07.02.2013, at 17:35, Cecil Yother, Jr. c...@yother.com wrote:

 On 02/07/2013 05:40 AM, Johannes Weberhofer wrote:
 
 Am 06.02.2013 20:38, schrieb Cecil Yother, Jr.:
 I am getting a segmentation fault when I try to add a new domain using 
 vpopmail.  Has anyone ever experienced this?  Any ideas on where to start 
 to debug?
 
 ./vadddomain moparclassified.com
 Please enter password for postmaster:
 enter password again:
 Segmentation fault
 
 REAL_DIST=CentOS
 DISTRO=CentOS
 OSVER=5.9
 QTARCH=i686
 QTKERN=2.6.18-348.1.1.el5
 BUILD_DIST=cnt50
 BUILD_DIR=/usr/src/redhat
 This machine's OS is supported and has been tested
 
 
 I've seen segfaults like this after migrating to a new server when the 
 binaries and libraries did not match in version or architecture...
 
 Johannes
 No migration.  I started with a QMTISO and have simply done the yum updates 
 to get me here.  It was working when setup.  I have two identical servers and 
 both are doing the same thing.  It sounds like a yum update has broken it, 
 but I have no idea how far back it was.
 
 -- 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

I also found this, maybe it applies to you too:

http://forums.gentoo.org/viewtopic.php?p=759909#759909

In any case the strace indicates the SQL statements are executed and then fail 
with a segfault when retrieving the data. I'd dig deeper in this if I could 
replicate it here but I am running CentOS 5 for a while and haven't added 
domains either for a while.

I shall hop on a server and see if its broken for me too after I update.

Cheers,
Sebastian

On 07.02.2013, at 18:13, Eric Shubert e...@shubes.net wrote:

 On 02/07/2013 09:35 AM, Cecil Yother, Jr. wrote:
 No migration.  I started with a QMTISO and have simply done the yum
 updates to get me here.  It was working when setup.  I have two
 identical servers and both are doing the same thing.  It sounds like a
 yum update has broken it, but I have no idea how far back it was.
 
 I would try rebuilding vpopmail and associated packages. Using qtp-newmodel, 
 select vpopmail and it should select the others which are dependent.
 
 Possibly there's some dynamic library in COS5.9 that's breaking it. Do you 
 recall if you did 5.9 upgrade or vpopmail-5.4.33 upgrade first?
 
 -- 
 -Eric 'shubes'
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

BTW what did apache log regarding that Internal server error when trying to add 
the domain via web interface? I'd assume something like killed child?

Cheers,
Sebastian

On 07.02.2013, at 18:22, Cecil Yother, Jr. c...@yother.com wrote:

 I did this yesterday,but will try again.
 
 Don't recall , but probably vpopmail first.
 
 Eric Shubert e...@shubes.net wrote:
 
 On 02/07/2013 09:35 AM, Cecil Yother, Jr. wrote:
 No migration.  I started with a QMTISO and have simply done the yum
 updates to get me here.  It was working when setup.  I have two
 identical servers and both are doing the same thing.  It sounds like a
 yum update has broken it, but I have no idea how far back it was.
 
 I would try rebuilding vpopmail and associated packages. Using 
 qtp-newmodel, select vpopmail and it should select the others which are 
 dependent.
 
 Possibly there's some dynamic library in COS5.9 that's breaking it. Do 
 you recall if you did 5.9 upgrade or vpopmail-5.4.33 upgrade first?
 
 -- 
 -Eric 'shubes'
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

Installed the updates without issues.

That makes your issue even weirder because I'd expect it to break for me too...


On Fri, 8 Feb 2013 08:38:21 +0100
Sebastian Grewe sebast...@grewe.ca wrote:

 Okay so I checked my Own server and it's also running CentOS 5.9.
 
 I have not installed some of the latest updates yet and vadddomain works 
 fine. Installing these updates now:
 
 Dependencies Resolved
 
 =
  Package  Arch
 Version   Repository  
 Size
 =
 Installing:
  kernel   x86_64  
 2.6.18-348.1.1.el5updates 
 22 M
  kernel-devel x86_64  
 2.6.18-348.1.1.el5updates 
5.8 M
 Updating:
  device-mapper-multipath  x86_64  
 0.4.7-54.el5_9.1  updates 
3.0 M
  dhclient x86_64  
 12:3.0.5-33.el5_9 updates 
287 k
  freetype x86_64  
 2.2.1-32.el5_9.1  updates 
312 k
  kernel-headers   x86_64  
 2.6.18-348.1.1.el5updates 
1.5 M
  kpartx   x86_64  
 0.4.7-54.el5_9.1  updates 
445 k
  nspr x86_64  
 4.9.2-2.el5_9 updates 
121 k
  nspr-devel   x86_64  
 4.9.2-2.el5_9 updates 
111 k
  nss  x86_64  
 3.13.6-3.el5_9updates 
1.1 M
  nss-develx86_64  
 3.13.6-3.el5_9updates 
244 k
  tzdata   x86_64  
 2012j-1.el5   updates 
793 k
 Removing:
  kernel   x86_64  
 2.6.18-308.24.1.el5   installed   
 98 M
  kernel-devel x86_64  
 2.6.18-308.24.1.el5   installed   
 16 M
 
 I will report back once completed.
 
 On Thu, 07 Feb 2013 20:35:44 -0800
 Cecil Yother, Jr. c...@yother.com wrote:
 
  On 02/07/2013 04:24 PM, Eric Shubert wrote:
   That's up to you, but I wouldn't quite yet.
  
   I'd like to know if anyone else is running QMT on COS5.9, with or 
   w/out this problem.
  
   Anybody?
  
  
  In searching for a solution I found a Gentoo thread that resembled my 
  problem.
  
  https://bugs.gentoo.org/show_bug.cgi?id=13908
  
  I ran gdb like they did and this was the output.  Maybe it will help in 
  debugging.  I don't know where to go from here.
  
  [root@viktorya bin]# gdb vadddomain
  GNU gdb (GDB) CentOS (7.0.1-45.el5.centos)
  Copyright (C) 2009 Free Software Foundation, Inc.
  License GPLv3+: GNU GPL version 3 or later 
  http://gnu.org/licenses/gpl.html
  This is free software: you are free to change and redistribute it.
  There is NO WARRANTY, to the extent permitted by law.  Type show copying
  and show warranty for details.
  This GDB was configured as i386-redhat-linux-gnu.
  For bug reporting instructions, please see:
  http://www.gnu.org/software/gdb/bugs/...
  Reading symbols from /home/vpopmail/bin/vadddomain...(no debugging 
  symbols found)...done.
  (gdb) run moparclassified.com test
  Starting program: /home/vpopmail/bin/vadddomain moparclassified.com test
  
  Program received signal SIGSEGV, Segmentation fault.
  0x0037fd40 in strncpy () from /lib/libc.so.6
  (gdb)
  
  
  -
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

Try recompiling it. Maybe a library got updated?

Also strace or gdb might help to figure out why it crashes.

Cheers,
Sebastian

On 07.02.2013, at 06:50, Cecil Yother, Jr. c...@yother.com wrote:

 On 02/06/2013 09:35 PM, Eric Shubert wrote:
 On 02/06/2013 07:50 PM, Cecil Yother, Jr. wrote:
 On 02/06/2013 06:39 PM, Eric Shubert wrote:
 On 02/06/2013 12:38 PM, Cecil Yother, Jr. wrote:
 I am getting a segmentation fault when I try to add a new domain using
 vpopmail.  Has anyone ever experienced this?  Any ideas on where to
 start to debug?
 
 ./vadddomain moparclassified.com
 Please enter password for postmaster:
 enter password again:
 Segmentation fault
 
 REAL_DIST=CentOS
 DISTRO=CentOS
 OSVER=5.9
 QTARCH=i686
 QTKERN=2.6.18-348.1.1.el5
 BUILD_DIST=cnt50
 BUILD_DIR=/usr/src/redhat
 This machine's OS is supported and has been tested
 
 
 Thanks,
 
 CJ
 
 -
 
 I don't know.
 Are you running the latest vpopmail-toaster package? If so, I'd ask
 about this on the vpopmail users list (mailto:vch...@inter7.com).
 Yes I am.  Any other way to add users?
 
 --
 
 Vqadmin.
 Doesn't work either Internal Server Error
 
 -- 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: segmentation fault

[Sebastian Grewe]

Looks like it crashes right after receiving the results from the DB. Run strace 
-f -s1024 to see more data.

I'd guess it might help to run gdb as well but I'd have to look up how to use 
it exactly - it might help better.

Cheers,
Sebastian

On 07.02.2013, at 07:28, Cecil Yother, Jr. c...@yother.com wrote:

 On 02/06/2013 10:17 PM, Sebastian Grewe wrote:
 Try recompiling it. Maybe a library got updated?
 Already did to no avail.
 
 Last several lines.  Let me know if you need the whole trace
 
 lseek(5, 112, SEEK_SET) = 112
 read(5, o\17\0\0\0\0\0\0, 8)  = 8
 close(5)= 0
 open(/var/qmail/users/cdb, O_RDONLY)  = 5
 lseek(5, 112, SEEK_SET) = 112
 read(5, o\17\0\0\0\0\0\0, 8)  = 8
 close(5)= 0
 umask(077)  = 022
 open(., O_RDONLY) = 5
 chdir(/home/vpopmail) = 0
 chdir(domains)= 0
 poll([{fd=4, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
 write(4, \1\0\0\0\16, 5)  = 5
 read(4, \7\0\0\1\0\0\0\2\0\0\0, 16384) = 11
 poll([{fd=4, events=POLLIN|POLLPRI}], 1, 0) = 0 (Timeout)
 write(4, \365\0\0\0\3select cur_users, level_cur..., 249) = 249
 read(4, \1\0\0\1\20F\0\0\2\3def\10vpopmail\vdir_contr..., 16384) = 1290
 --- SIGSEGV (Segmentation fault) @ 0 (0) ---
 +++ killed by SIGSEGV +++
 
 
 Also strace or gdb might help to figure out why it crashes.
 
 Cheers,
 Sebastian
 
 On 07.02.2013, at 06:50, Cecil Yother, Jr. c...@yother.com wrote:
 
 On 02/06/2013 09:35 PM, Eric Shubert wrote:
 On 02/06/2013 07:50 PM, Cecil Yother, Jr. wrote:
 On 02/06/2013 06:39 PM, Eric Shubert wrote:
 On 02/06/2013 12:38 PM, Cecil Yother, Jr. wrote:
 I am getting a segmentation fault when I try to add a new domain using
 vpopmail.  Has anyone ever experienced this?  Any ideas on where to
 start to debug?
 
 ./vadddomain moparclassified.com
 Please enter password for postmaster:
 enter password again:
 Segmentation fault
 
 REAL_DIST=CentOS
 DISTRO=CentOS
 OSVER=5.9
 QTARCH=i686
 QTKERN=2.6.18-348.1.1.el5
 BUILD_DIST=cnt50
 BUILD_DIR=/usr/src/redhat
 This machine's OS is supported and has been tested
 
 
 Thanks,
 
 CJ
 
 -
 I don't know.
 Are you running the latest vpopmail-toaster package? If so, I'd ask
 about this on the vpopmail users list (mailto:vch...@inter7.com).
 Yes I am.  Any other way to add users?
 
 --
 Vqadmin.
 Doesn't work either Internal Server Error
 
 -- 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 -- 
 cj's_sig.png

Re: [qmailtoaster] Detecting compromised accounts

[Sebastian Grewe]

Hey,

How about doing a threshold scan for users. See what their baseline is and then 
start reporting when you see some unexpected high amount of mails going out. 
I'd think that's usually a good sign for spammy behavior. Even with an already 
high amount of mails the baseline would still help to see if their is an usual 
peak.

Just my two cents but I'd be interested in this too because it just recently 
happened to me as well. Come to think of it I might go and try to write a 
Nagios plugin for it some day... I guess with are large amount of users this 
will get difficult.

Cheers,
Sebastian

On 03.02.2013, at 18:59, South Computers i...@southcomputers.com wrote:

 Looking for ideas on detecting compromised accounts, especially for smtp 
 submission. While there are programs available to detect failed login 
 attempts (fail2ban, etc), what if the person already has / knows the correct 
 password, such as from a keylogger, or another account hacked elsewhere (for 
 example twitter a couple of days ago). I had a user whose account was being 
 used to sending spam today, managed to find it  shut it down, but wondering 
 if there might be a good way to attempt to find / prevent things before they 
 get out of hand. I manually checked their computer for trojans / rootkits, 
 found nothing, and it was not an easy password, so must have been the same 
 passwrod they used elsewhere that was hacked. Hopefully anyway...
 
 Just random initial thoughts:
 
 Track the different ips a user is connecting from. If there are over x number 
 of logins within x period of time from x number of ip addresses, then disable 
 the account, or generate a random new password for it, and maybe add a block 
 in iptables. Perhaps also adding ip location to it on some way, so if logins 
 are coming from multiple countries in a short period of time, it could also 
 be detected.
 
 Just thinking out loud to the group...   Thoughts welcomed, or suggestions if 
 there is already something out there like this.
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Detecting compromised accounts

[Sebastian Grewe]

Hey,

By monitoring my send queue I actually noticed the issue in the first place. As 
soon as it exceeds a threshold I look for suspicious activity.

Having this build in qmail-remote (frequency check) would also help. I will 
still check how one could handle a per user check for baselining. I'd guess 
you'd have to monitor accounts over a course of X hours to get a good result. 
If an account was already spamming this would fail of course unless you also 
add soft limits that'd notify you of very active accounts.

Cheers,
Sebastian

On 03.02.2013, at 21:50, Eric Shubert e...@shubes.net wrote:

 Nice thinking.
 
 I like the way Gmane.org controls submissions. They restrict the frequency 
 that a given user can send out messages. This is done by throttling the send 
 queue to only allow one message to go out every so often (a minute or so I'm 
 thinking) per user. If a user submits more messages than they're allowed, 
 excess messages simply sit in the send queue and trickle out at the 
 acceptable rate.
 
 I'd very much like to see a throttle put on qmail-remote which would allow a 
 per-user interval to be specified. When abuse occurs, the send queue would 
 grow noticably, which could easily be monitored.
 
 This doesn't address compromised accounts specifically, but it controls a 
 common bad thing that happens when an account is compromised.
 
 Thoughts?
 
 -- 
 -Eric 'shubes'
 
 On 02/03/2013 11:14 AM, Sebastian Grewe wrote:
 Hey,
 
 How about doing a threshold scan for users. See what their baseline is and 
 then start reporting when you see some unexpected high amount of mails going 
 out. I'd think that's usually a good sign for spammy behavior. Even with an 
 already high amount of mails the baseline would still help to see if their 
 is an usual peak.
 
 Just my two cents but I'd be interested in this too because it just recently 
 happened to me as well. Come to think of it I might go and try to write a 
 Nagios plugin for it some day... I guess with are large amount of users this 
 will get difficult.
 
 Cheers,
 Sebastian
 
 On 03.02.2013, at 18:59, South Computers i...@southcomputers.com wrote:
 
 Looking for ideas on detecting compromised accounts, especially for smtp 
 submission. While there are programs available to detect failed login 
 attempts (fail2ban, etc), what if the person already has / knows the 
 correct password, such as from a keylogger, or another account hacked 
 elsewhere (for example twitter a couple of days ago). I had a user whose 
 account was being used to sending spam today, managed to find it  shut it 
 down, but wondering if there might be a good way to attempt to find / 
 prevent things before they get out of hand. I manually checked their 
 computer for trojans / rootkits, found nothing, and it was not an easy 
 password, so must have been the same passwrod they used elsewhere that was 
 hacked. Hopefully anyway...
 
 Just random initial thoughts:
 
 Track the different ips a user is connecting from. If there are over x 
 number of logins within x period of time from x number of ip addresses, 
 then disable the account, or generate a random new password for it, and 
 maybe add a block in iptables. Perhaps also adding ip location to it on 
 some way, so if logins are coming from multiple countries in a short period 
 of time, it could also be detected.
 
 Just thinking out loud to the group...   Thoughts welcomed, or suggestions 
 if there is already something out there like this.
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Dependency issue

[Sebastian Grewe]

There are currently a bunch of updates being released for CentOS 5. I am 
getting tons of mails from the announce mailing list. Wait until everything is 
synced up and try again?

Cheers,
Sebastian

On 16.01.2013, at 23:09, Mike Tirpak mike.tir...@mobilcom.net wrote:

 I'm doing a fresh install of qmailtoaster and I get dependency errors when I 
 run qtp-dependencies.  This is what I get...
 
 qtp-dependencies - installing  bzip2-devel compat-gcc-34 compat-gcc-34-c++ 
 compat-glibc compat-glibc-headers compat-libf2c compat-libgcc 
 compat-libstdc++-296 compat-libsdc++-33 curl-devel expect-devel gdbm-devel 
 gmp-devel httpd-devel krb5-auth-dialog libidn-devel libtool-ltdl-devel 
 openssh-askpass pcre-devel php-pear rpm-devel ...
 Loaded plugins: dellsysid, fastestmirror, security
 Loading mirror speeds from cached hostfile
 * base: mirror.us.leaseweb.net
 * epel: mirror.steadfast.net
 * extras: centos.corenetworks.net
 * rpmforge: mirror.rit.edu
 * updates: mirrors.serveraxis.net
 Setting up Install Process
 No package compat-libf2c available.
 No package compat-libgcc available.
 No package compat-libsdc++-33 available.
 Resolving Dependencies
 -- Running transaction check
 --- Package bzip2-devel.i386 0:1.0.3-6.el5_5 set to be updated
 --- Package compat-gcc-34.i386 0:3.4.6-4.1 set to be updated
 --- Package compat-gcc-34-c++.i386 0:3.4.6-4.1 set to be updated
 --- Package compat-glibc.i386 1:2.3.4-2.26 set to be updated
 --- Package compat-glibc-headers.i386 1:2.3.4-2.26 set to be updated
 --- Package compat-libstdc++-296.i386 0:2.96-138 set to be updated
 --- Package curl-devel.i386 0:7.15.5-15.el5 set to be updated
 --- Package expect-devel.i386 0:5.43.0-8.el5 set to be updated
 --- Package gdbm-devel.i386 0:1.8.0-26.2.1.el5_6.1 set to be updated
 --- Package gmp-devel.i386 0:4.1.4-10.el5 set to be updated
 --- Package httpd-devel.i386 0:2.2.3-65.el5.centos.3 set to be updated
 -- Processing Dependency: httpd = 2.2.3-65.el5.centos.3 for package: 
 httpd-devel
 -- Processing Dependency: apr-util-devel for package: httpd-devel
 -- Processing Dependency: apr-devel for package: httpd-devel
 --- Package krb5-auth-dialog.i386 0:0.7-1 set to be updated
 --- Package libidn-devel.i386 0:0.6.5-1.1 set to be updated
 --- Package libtool-ltdl-devel.i386 0:1.5.22-7.el5_4 set to be updated
 --- Package openssh-askpass.i386 0:4.3p2-82.el5 set to be updated
 --- Package pcre-devel.i386 0:6.6-6.el5_6.1 set to be updated
 --- Package php-pear.noarch 1:1.4.9-8.el5 set to be updated
 -- Processing Dependency: php-devel for package: php-pear
 --- Package rpm-devel.i386 0:4.4.2.3-28.el5_8 set to be updated
 -- Processing Dependency: rpm = 4.4.2.3-28.el5_8 for package: rpm-devel
 -- Processing Dependency: rpm-libs = 4.4.2.3-28.el5_8 for package: rpm-devel
 -- Processing Dependency: popt = 1.10.2.3-28.el5_8 for package: rpm-devel
 -- Processing Dependency: elfutils-libelf-devel for package: rpm-devel
 -- Processing Dependency: sqlite-devel for package: rpm-devel
 -- Processing Dependency: nss-devel for package: rpm-devel
 -- Running transaction check
 --- Package apr-devel.i386 0:1.2.7-11.el5_6.5 set to be updated
 --- Package apr-util-devel.i386 0:1.2.7-11.el5_5.2 set to be updated
 -- Processing Dependency: openldap-devel for package: apr-util-devel
 -- Processing Dependency: db4-devel for package: apr-util-devel
 -- Processing Dependency: expat-devel for package: apr-util-devel
 --- Package elfutils-libelf-devel.i386 0:0.137-3.el5 set to be updated
 -- Processing Dependency: elfutils-libelf-devel-static-i386 = 0.137-3.el5 
 for package: elfutils-libelf-devel
 --- Package httpd-devel.i386 0:2.2.3-65.el5.centos.3 set to be updated
 -- Processing Dependency: httpd = 2.2.3-65.el5.centos.3 for package: 
 httpd-devel
 --- Package nss-devel.i386 0:3.13.5-4.el5_8 set to be updated
 -- Processing Dependency: nss = 3.13.5-4.el5_8 for package: nss-devel
 -- Processing Dependency: nspr-devel = 4.9.1 for package: nss-devel
 --- Package php-devel.i386 0:5.1.6-39.el5_8 set to be updated
 --- Package rpm-devel.i386 0:4.4.2.3-28.el5_8 set to be updated
 -- Processing Dependency: rpm = 4.4.2.3-28.el5_8 for package: rpm-devel
 -- Processing Dependency: rpm-libs = 4.4.2.3-28.el5_8 for package: rpm-devel
 -- Processing Dependency: popt = 1.10.2.3-28.el5_8 for package: rpm-devel
 --- Package sqlite-devel.i386 0:3.3.6-5 set to be updated
 -- Processing Dependency: sqlite = 3.3.6-5 for package: sqlite-devel
 -- Running transaction check
 --- Package db4-devel.i386 0:4.3.29-10.el5_5.2 set to be updated
 --- Package elfutils-libelf-devel-static.i386 0:0.137-3.el5 set to be updated
 --- Package expat-devel.i386 0:1.95.8-11.el5_8 set to be updated
 --- Package httpd-devel.i386 0:2.2.3-65.el5.centos.3 set to be updated
 -- Processing Dependency: httpd = 2.2.3-65.el5.centos.3 for package: 
 httpd-devel
 --- Package nspr-devel.i386 0:4.9.1-4.el5_8 set to be updated
 -- Processing Dependency: nspr = 4.9.1-4.el5_8 for package: nspr-devel
 --- Package 

Re: [qmailtoaster] squirrelmail plugins / force https webmail alias

[Sebastian Grewe]

Do a location based redirect? Shouldn't that also work outside a vhost 
configuration and hence be valid for everything?

Cheers,
Sebastian

On 07.01.2013, at 05:06, South Computers i...@southcomputers.com wrote:

 First, Happy New Year all!
 
 Just put a new toaster online, replacing one I've had up for about 7 years. 
 Went mostly smoothly, except for the http side of stuff.
 
 Pardon me for rehashing anything that's be brought up recently, haven't had 
 the time to keep up lately.
 
 Anyway, getting the ever popular You must be logged in to access this page 
 in squirrelmail intermittently, so in doing some digging, I fidn it is most 
 likely a a sessions problem. Apparently sqmail wants to use Encrypted 
 connections only cookies out of the box, so I try logging in with https, and 
 sure enough, all works well every time (so far anyway).
 
 Which leads me to search for an easy way to force my /webmail httpd alias to 
 force everything to use https. I find the secure_login plugin on the sqmail 
 site, and go looking for the plugins dir. Appears to be missing in the 
 current build. No worries. I copy it from another box, put it on the new box, 
 and enable the secure_login plugin. It still has issues apparently, so I 
 disabled it again.
 
 So  just an fyi that sqmail plugins directory appears to be missing in 
 the current packages.
 
 And, back to the main issue. Anyone have an easy way to force a redirect to 
 https for the /webmail alias without having to do each domain individually, 
 or a bunch of rewrites/htaccess work?
 
 Thanks!
 Scott
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Centos 6

[Sebastian Grewe]

Only a chef cookbook, not a script by itself.

Cheers,
Sebastian

On 07.01.2013, at 05:13, Dave MacDonald dmacd6...@gmail.com wrote:

 Hi all
 Any one got a working install script for centos 6
 
 Thanks
 Dave

Re: [qmailtoaster] Fwd: mail bouncing

[Sebastian Grewe]

I'd try to contact Yahoo postmaster support to get this resolved since 
searching their Postnaster Help does not yield any results for PH01.

Cheers,
Sebastian

On 29.12.2012, at 09:30, rajeshrudramani rajeshrudram...@gmail.com wrote:

 
 
 
 Hi All,
 
 
   When i tried to send mail from qmail server to yahoo, mails 
 are bouncing below are the error
 
 
 Remote_host_said:_554_Message_not_allowed_-_[PH01]_Email_not_accepted_for_policy_reasons.__Please_visit_http://postmaster.yahoo.com/errors/postmaster-27.html_[120]/
 
 
 
 
 Regards,
 Rajesh
 
 
 
 

Re: [qmailtoaster] Question about send email to non existent email

[Sebastian Grewe]

Hey Nikolay,

I would guess that depends on the remote server. Did you check what the error 
message of the other end is? Maybe they send a temporary error message instead 
of a hard error so your server keeps trying until it times out?

Cheers,
Sebastian

On 20.12.2012, at 16:59, Nikolay Mitev mite...@gmail.com wrote:

 Hi Team,
 
 I would like to ask the following thing,
 
 When sending mail to non-existent email accounts in some case message
 is returned immediately and in other case email remains in the queue
 though email sent to non existent.
 
 How to change it so that the message is returned to the sender after a
 fixed time.
 
 Best regards,
 Nikolay
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Squirrelmail alternatives? Looking for recs

[Sebastian Grewe]

Forgot to add the links, posted it them while back I think:

https://github.com/TheSerapher/chef-roundcube

You can also find one for Qmailtoaster:

https://github.com/TheSerapher/chef-qmailtoaster

Cheers,
Sebastian

On 06.12.2012, at 18:44, Sebastian Grewe sebast...@grewe.ca wrote:

 Hey Diana,
 
 I am using RoundCube myself and I am very happy with it. It is exactly what 
 you said: A Webmailer without all the bells and whistles others offer.
 
 Installation is easy and straight forward. You can try it out on any LAMP 
 host and point it towards your IMAP/SMTP host to try it out. Or I make a 
 quick account for you to see the UI ;-)
 
 Sidenote: I have written an Opscode Chef cookbook for it too. 
 
 Cheers,
 Sebastian
 
 On 06.12.2012, at 18:24, Diana Calder dcal...@essexcountylibrary.ca wrote:
 
 Anyone using something other than Squirrelmail for webmail with
 Qmailtoaster? I'm working my way through researching the options
 listed in the Wiki but I'd like to get some feedback from someone
 who's actually using one of the alternative webmail packages. So far,
 it looks like atmail is gone (the free community version, at least),
 and AfterLogic lite, eGroupware, Horde, and RoundCube all look like
 they're worth taking a deeper look at.
 
 I'd prefer something that looks a little less dated than Squirrelmail
 and that has a good mobile interface. Our Intranet is a hosted Noodle
 instance, so I'm not really interested in extra bells and whistles
 like calendars and such - just good solid email features like a decent
 address book (though a nice shared one in addition to personal ones
 would be nice), the ability to set a vacation response, basic
 filtering, and allowing individual users to change their password.
 eGroupware is probably overkill for our needs and even Horde may be a
 little over the top - but they're also the two nicest looking. I'll be
 continuing to research but some helpful comments from the Qmailtoaster
 community would be greatly appreciated.
 
 Hoping for some good recommendations,
 Diana
 
 
 -- 
 Best regards,
 Diana  mailto:dcal...@essexcountylibrary.ca
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

Re: [qmailtoaster] problem in queue in local delivery

[Sebastian Grewe]

Maybe run atop or other tools to see where your bottleneck is?

Cheers,
Sebastian

On 04.12.2012, at 16:15, Rajesh M 24x7ser...@24x7server.net wrote:

 hi
 
 i have a server with around 6000 mail boxes
 
 it is a dual processor quad core with 4 gb ram
 centos 5 with qmail toaster
 
 it contains around 3.5 terrabytes of data
 
 the data is spread over the 2 nrs 2 tb drives
 
 about half the mailboxes have the normal path ie /home/vpopmail/domains/
 
 and the other half has path to the second drive
 (i changed the path in the mysql database for around half mailboxes to
 point to the second drive)
 
 the machine is accessed by pop / imap / smtp
 
 this was working fine till 2 days ago
 
 i noted that users were not cleaning up the trash folders and space
 utilization had gone to 90%. So i ran the qmail-clean-trash script which
 cleaned up a lot of trash data. usage is arond 85 % .
 
 this was done in the weekend - ie 2 days ago
 
 now since monday onwards ie the local queue is piling up and delivering
 very slowly.
 
 the email traffic send+receive is around 250,000 (around 20 gb of data)
 emails per day  with most of the emails being delivered locally.
 
 i have to keep firing perl qmhandle -a -- to get the local emails delivred
 
 but still it is very slow
 
 can somebody let me know the reason for this sudden slow delivery of
 emails
 
 rajesh
 
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 
 
 in addition to the above information
 
 i have kept concurrencyincoming - 400, concurrencylocal - 300,
 concurrencyremote - 200
 
 server load goes as high 200 sometimes
 
 also please let me know how i can spread the data / load between two or
 more servers. Any solutions for the same ?
 
 rajesh
 
 
 
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com