Re: [qmailtoaster] deny ip at smtp level
W dniu 29.06.2009 15:25, Karpaha Vinayaham pisze: Dear All, Can anyone tell me how to reject the IP at SMTP level, who is sending mails more than 100 . With Regards Vinay Vinay, Your question is very unprecise. Someone sending 100 emails to Your host or to external hosts via NAT, 100 concurrent connection or 100 emails at all? If You are interrested in SMTP transparent proxy look at http://smtp-proxy.klolik.org/ It works for me very effectively in my local intranet (about 50 hosts). -- Pozdrawiam / Regards, Aleksander Podsiad?y
Re: [qmailtoaster] Help needed in setting domainkey in BIND DNS
W dniu 03.07.2009 20:04, amit IKF pisze: Hi All, I'm using BIND DNS. When I'm trying to create associated TXT record by name _domainkey, it is giving me error that key should be start with number or alphabet. Will it be fine if I created it via name domainkey and private.domainkey. I think I also have to modify in public.txt file in domainkey folder of qmail from private._domainkey to private.domainkey. Please help me if I'm making any mistake. Thanks and regards, Amit Look at RFC-1033 (p. 3): 8-- [...] Because of other protocol restrictions, only the following characters are recommended for use in a host name (besides the dot separator): A-Z, a-z, 0-9, dash and underscore [...] 8-- EOT -- Regards, Aleksander Podsiad?y
Re: [qmailtoaster] Help needed in setting domainkey in BIND DNS
W dniu 03.07.2009 22:57, amit IKF pisze: Hi Aleksander, But I was trying to use _domainkey and bind doesn't allowed me to use _ Amit It's impossible, i one of my servers I have 4 records: _xmpp-server._tcp.jabberIN SRV 5 0 5269 jabber _xmpp-client._tcp.jabberIN SRV 5 0 5222 jabber _jabber._tcp.jabber IN SRV 5 0 5269 jabber _domainkey IN TXT o=- All names starting with underscore and all works fine. Check Your files, maybe the problem is one line above? -- Regards, Aleksander Podsiadły
Re: [qmailtoaster] Help needed in setting domainkey in BIND DNS
W dniu 03.07.2009 23:08, amit IKF pisze: I'm trying with GUI interface of BIND server. And its not allowing _. /var/named/chroot/ /var/named/chroot/etc /var/named/chroot/var/named Try to use vim editor. ;) Do not use GUI interface. -- Regards, Aleksander Podsiadły
Re: [qmailtoaster] Qmail Queue running slow
W dniu 03.07.2009 09:18, Ganesh Payelkar pisze: Dear List, I have 1 qmail server, we are sending more than 5 to 6 lakh mails daily, DNS and MX record are very much proper, I have qmail+mailscanner+clamav and i need to archive these mails also, But problem is that mail are going very slowly. Because of this problem i am getting so many problems..Kinldy suggest me how to solve this problem.. Regards, Ganesh Payelkar You have the big server, maybe you should read http://lartc.org/howto/ IMO setting proper packet priority for protocols and queueing disciplines should help You fix the problem. -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] qtp-build-unionfs failed
W dniu 07.07.2009 15:43, António Pedro Lima pisze: [...] From /var/log/aufs-build.log I get this: [...] make: *** /lib/modules/2.6.18-128.1.6.el5/build: No such file or directory. Stop. make: *** [fs/aufs/aufs.ko] Error 2 Probably the easy way would be reinstall it all over… Any hint? I’d appreciate that. Thank you, António Pedro Lima Probably You have to install kernel-devel RPM: yum update kernel-devel -- Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] server listed in spamcop
W dniu 07.07.2009 12:53, Peter Peltonen pisze: Hi, I've encountered a problem: one of my mail server's ip address is listed by spamcop. Spamcop says that my system has sent email to one of its spam traps twice in 15.6 days. [...] So, I am interested in finding out two things: 1) what would be the best way to find out what caused this listing? 2) how to prevent it happening again? should i disable autoresponder (how do i do that)? Regards, Peter Is SNAT on this banned server? Maybe one of intranet computers is infected. You can use SMTP Transparent proxy http://smtp-proxy.klolik.org/ to block infected workstations. Works for me. :) -- Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] /bin/sh:_/home/vpopmail/bin/vdelivermail:_Permission_denied/
W dniu 09.07.2009 12:39, Alessandro Leonardi pisze: thx but it's the same any other suggestions? Try queue_repair.py from QTP. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] /bin/sh:_/home/vpopmail/bin/vdelivermail:_Permission_denied/
W dniu 09.07.2009 13:11, Alessandro Leonardi pisze: Dziękuję bardzo but the queue it's ok I don't understand ( Nie rozumiem???) why vdelivermail in another folder with the same permission running fine. (my girlfriend is polish ;)) Alessandro Pozdrowienia dla dziewczyny. :) My /home/vpopmail/bin directory and permissions: [r...@srv bin]# ls -al /home/vpopmail/bin drwxr-xr-x 2 vpopmail vchkpw 4096 cze 16 08:52 . drwx-- 11 vpopmail vchkpw 4096 cze 16 08:37 .. -rwxr-x--x 1 vpopmail vchkpw 83216 cze 16 08:37 vdelivermail I don't know what is improper in your installation. Maybe is something in /var/log/messages -- Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] vchkpw-smtp attack
W dniu 07.07.2009 00:36, Jake Vickers pisze: *Those* types of attacks can be handled with fail2ban. And with ossec-hids. -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] vchkpw-smtp attack
W dniu 09.07.2009 23:28, nightduke pisze: i don't understand, can you explain? Thanks 2009/7/9 Aleksander Podsiadlya...@westside.kielce.pl: W dniu 07.07.2009 00:36, Jake Vickers pisze: *Those* types of attacks can be handled with fail2ban. And with ossec-hids. -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com OSSEC is intrusion detection system. It performs log log analysis, for example maillog. It can alert you and allows automaticaly execute commands when a specific event is triggered. It's scalable, you can write your own rules. Project site: http://www.ossec.net/ Real examples, 2 alerts when when I was writing this post: 8-- OSSEC HIDS Notification. 2009 Jul 10 07:49:10 Received From: (opatow) xxx.xxx.xxx.xxx-/var/log/secure Rule: 5712 fired (level 10) - SSHD brute force trying to get access to the system. Portion of the log(s): Jul 10 07:49:21 srv sshd[25153]: Invalid user oracle from 211.219.166.235 Jul 10 07:49:18 srv sshd[25151]: Invalid user bind from 211.219.166.235 Jul 10 07:48:55 srv sshd[29527]: Invalid user oracle from :::211.219.166.235 Jul 10 07:48:52 srv sshd[29525]: Invalid user bind from :::211.219.166.235 Jul 10 07:48:38 srv sshd[25080]: Invalid user oracle from 211.219.166.235 Jul 10 07:48:28 srv sshd[25074]: Invalid user sami from 211.219.166.235 Jul 10 07:48:10 srv sshd[29499]: Invalid user oracle from :::211.219.166.235 --END OF NOTIFICATION OSSEC HIDS Notification. 2009 Jul 10 07:51:45 Received From: (jedrzejow) yyy.yyy.yyy.yyy-/var/log/secure Rule: 5712 fired (level 10) - SSHD brute force trying to get access to the system. Portion of the log(s): Jul 10 07:51:43 srv sshd[29640]: Invalid user nagios from :::211.219.166.235 Jul 10 07:51:40 srv sshd[29638]: Invalid user nagios from :::211.219.166.235 Jul 10 07:51:37 srv sshd[29636]: Invalid user nagios from :::211.219.166.235 Jul 10 07:51:34 srv sshd[29634]: Invalid user nagios from :::211.219.166.235 Jul 10 07:51:02 srv sshd[29614]: Invalid user test from :::211.219.166.235 Jul 10 07:50:40 srv sshd[29600]: Invalid user mythtv from :::211.219.166.235 Jul 10 07:50:25 srv sshd[29590]: Invalid user cgi-bin from :::211.219.166.235 --END OF NOTIFICATION 8-- EOT This 2 host are blocked for 10 minutes and my logs are shorter. :) -- Pozdrawiam / Regards, Aleksander Podsiadły
Re: [qmailtoaster] R: Re: [qmailtoaster] Strange problem : smtp become really slow
W dniu 13.07.2009 20:25, Eric Shubert pisze: I see you've bumped it up. Quite a bit! Hmmm. rtar...@host2max.com wrote: exec /usr/bin/softlimit -m 85000 \ [...] On my Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz I have an option ,,-m 1'' and works fine. Standard parameter for Centos 5.3 x6_64 is too little. But above 8 times more than my is to high. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] R: Re: [qmailtoaster] Strange problem : smtp become really slow
W dniu 13.07.2009 21:02, Ronnie Tartar pisze: I cut mine to the same but still have the issues. Eric, I turned my recordio back off, is there anything in there I should look @ ? Regards IMHO You should read Your logs, do the tests like ping. Maybe You do not control outbound transmission. Do You have mrtg statistics of particular protocols and client's transmission? Do You know what is the usage of Your bandwidth? Maybe You should generate new firewall (fwbuilder can help You) to check whats up. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Missing HELO identifier
W dniu 13.07.2009 22:16, Tim Pleiman pisze: /var/qmail/control/me contains the primary server mail domain name, e.g: mail.servername.org Tim It should be the same as result of `hostname`, just the servername. Not ,,mail.servername.org'' but FQDN servername with all dots. Not the value of CNAME, but the name from record A, the same as the name from PTR record. IMO it's the best, clear and proper configuration. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] denied by policy in reply to RCPT TO command
W dniu 13.07.2009 22:48, Robin W. Sanchez C. pisze: What mean this error and How can I fix? robin-sanc...@i.com mailto:robin-sanc...@i.com: host mail.i.com[111.111.111.111] said: 550 cannot message robin-sanc...@i.com mailto:robin-sanc...@i.com (#5.0.0 denied by policy) (in reply to RCPT TO command) http://www.ietf.org/rfc/rfc2821.txt -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] how to control infected users
W dniu 14.07.2009 14:19, Karpaha Vinayaham pisze: Dear All One of my user machine was infected by a virus and it start sending lots of spam mails. As the user was using smtp-auth my server accepted the mail. Because of this my server IP is blacklisted, after diagnosing i have blocked the infected machine IP through iptable and scanned for virus. Now the problem is solved, but i wanted to know how to control this behaviour. With Regards Vinay SMTP proxy can help you: http://smtp-proxy.klolik.org/ It successfuly works on one of my networks. -- Pozdrawiam / Regards, Aleksander Podsiad?y
Re: [qmailtoaster] Date and time in qmail log file
W dniu 15.07.2009 20:49, Vincent Deschênes pisze: Thanks, I did not know about this tai64 tool. To find log of mail sent to a specific address I am using this command on my log folder and I know have the time! more * | grep u...@domain.com | tai64nlocal Thanks. VD IMHO better: cd /var/log/qmail/smtp grep u...@domain.com *.[su] current | tai64nlocal | less -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Fedora rpmbuild directories
W dniu 15.07.2009 22:19, Eric Shubert pisze: Can anyone on the list help fill me in on exactly which FC version changed the rpmbuild directory from /usr/src/redhat/ to $HOME/rpmbuild/ ? I know that FC10 has $HOME/rpmbuild/, but am wondering about FC9, FC8, FC7, FC6. If you're running a toaster on any of these versions, have you ever run qtp-newmodel successfully? (It will most definitely fail on versions that have changed). I'm wondering most about FC9 and FC8. Thanks for your help. No one version. If any user has file $HOME/.rpmmacros with record e.g.: %_topdir /home/user/rpm and this directory has subdirectories: rpm rpm/RPMS rpm/BUILDROOT rpm/SPECS rpm/SOURCES rpm/SRPMS rpm/BUILD then he can build packages in this this directory. Only the qmail-toaster I have to build as root, all others packages I'm building as alex, it's more secure. -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Fedora rpmbuild directories
W dniu 16.07.2009 16:55, Eric Shubert pisze: [...] but as some point the distro changed the *default* behavior, perhaps by adding the .rpmmacros file to the /root folder. FC10 appears to be when that happened. [...] I have got F11 on my actual notebook. I had F9, F10 before. I do not notice something like that. -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Fedora rpmbuild directories
W dniu 17.07.2009 12:58, Jake Vickers pisze: Aleksander Podsiadly wrote: W dniu 16.07.2009 16:55, Eric Shubert pisze: [...] but as some point the distro changed the *default* behavior, perhaps by adding the .rpmmacros file to the /root folder. FC10 appears to be when that happened. [...] I have got F11 on my actual notebook. I had F9, F10 before. I do not notice something like that. I get the same behavior when I do fresh installs with Fedora (using %home/rpm). Maybe because you performed an upgrade it stayed the same for you? It was fresh install from DVD. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] vchkpw-smtp attack
W dniu 19.07.2009 21:58, nightduke pisze: Nice tool. I will use it. Thanks Than look at open bugs #219 and #220, there are my 2 proposed patches for proper interpreting Apache log and vpopmail. http://www.ossec.net/bugs/ On http://www.ossec.net/wiki/index.php/SquirrelMail are my rules for SquirrelMail. Below example of vchkpw-smtp attack, aggressor detected and blocked. :) 8-- Received From: srv-/var/log/maillog Rule: 9952 fired (level 10) - VPOPMAIL brute force (email harvesting). Portion of the log(s): Jul 15 09:43:42 srv vpopmail[24889]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:43:33 srv vpopmail[24876]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:43:23 srv vpopmail[24863]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:43:15 srv vpopmail[24854]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:43:07 srv vpopmail[24845]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:43:00 srv vpopmail[24838]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:42:53 srv vpopmail[24831]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:42:47 srv vpopmail[24824]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 Jul 15 09:42:39 srv vpopmail[24815]: vchkpw-smtp: vpopmail user not foundwebmaster@:121.33.123.239 8-- EOT -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Squirrel mail login
W dniu 23.07.2009 11:49, Mahesh Bhat pisze: Hi All, When I login to my web login.. I need to put u...@domain.com mailto:u...@domain.com and then the password.. is there a way to just use USER in the Section Username rather than u...@domain.com. / -Regards Mahesh Bhat / IMO standard configuration without default domain is more secure. Most of the dictionary pop3 attacks specify only the user login name, not u...@domain. The bots are stupid. ;-) -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] spamassassin and clamav not scanning emails
W dniu 26.07.2009 08:22, ganesh payelkar pisze: Dear Friend, Kindly let us know that what is the entry in /var/qmail/control/simcontrol Regards. Ganesh A detailed description;: http://www.qmailwiki.org/index.php/Simscan/Guide How to generate .cdb files: http://www.qmailwiki.org/index.php/Simscan/Related_Docs/Simscan_ClamAV_Chkuser_Installation_Guide -- Pozdrawiam / Regards, Aleksander Podsiad?y
Re: [qmailtoaster] spamassassin and clamav not scanning emails
W dniu 24.07.2009 16:01, José Campos pisze: Looking at received emails full header, I checked that the messages not been scanned. Something is not working as it should. Can anyone help me. Thanks in advance José, read it please: http://www.celiojunior.com.br/comofazerperguntas.htm in English: http://www.catb.org/~esr/faqs/smart-questions.html and ask again. ;-) -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Virus problem
W dniu 29.07.2009 19:46, Natalio Gatti pisze: Hi List. I'm having an intermitten virus problem. From time to time a user gets infected with a virus/worm that send tons of spam through the server. All users are behind a NAT, so I can't know exactly which user/PC is the source of the problem. How can I minimize this problem? Natalio Look at topic ,,how to control infected users'' and my post: http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg23261.html -- Pozdrawiam / Regards, Aleksander Podsiad?y
Re: [qmailtoaster] Virus problem
W dniu 29.07.2009 20:39, Natalio Gatti pisze: I saw your post, but using a proxy does not seem to be a solution for me. I already scan mails with clamav and spamassassin. I don't see which other benefits brings up to use that proxy. The spam sent by the infected machine does not contains virus. You scan only emails sent via you mail server. You don't scan emails sent directly to random IP's or via external mail servers, and that is the problem. SMTP-proxy and proper port 25 redirection can help you. For example: iptables -t nat -A PREROUTING -i $I_DEV -p tcp --dport 25 -s $MY_INTRANET --dst ! $E_IP -j DNAT --to $I_IP:9199 I_DEV - intranet eth device E_IP - external server IP I_IP - internal (intranet) server IP MY_INTRANET - IP/mask of intranet -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Virus problem
W dniu 29.07.2009 22:01, Natalio Gatti pisze: Maybe I didn'y explain myself. The infected user sends spam using my mail server. Maybe your server is hacked. :( You should check logs, directories with write permission for all. There are many dictionary attacks on ports ssh and pop3. Check ssh daemon (if you're hacked you probably have sshd2), try to find strange directories or binaries. There is possibility that someone has weak password and it was guessed by attacker. OSSEC can help you to protect your server, tripwire is good solution to protect your files. -- Pozdrawiam / Regards, Aleksander Podsiad?y
Re: [qmailtoaster] Firewall.sh
W dniu 31.07.2009 10:14, Ole N.Johansen pisze: Hello List, I need som help regarding iptables/firewall.sh I have multiple virtual ipadresses, all official ip addresses. ( 5 ip adr total) I need to add those into the iptables and make the iptables to work as usual, open for ssh, ftp, http, https, imap, pop3, smtp, submission, port 1, port 2, port 3 Yes I have googled it and just getting more confused. I have tested abit but just keep locking up my connectivity to the centos box. Thanks for input. Best Regards Ole J http://lartc.org/ -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Blocking Viagra mail
W dniu 05.08.2009 05:28, dani pisze: Return-Path:d...@stanley.co.id Delivered-To: d...@stanley.co.id Received: (qmail 8887 invoked by uid 89); 5 Aug 2009 02:23:20 - Received: from unknown (HELO ppp-124-120-48-179.revip2.asianet.co.th) (124.120.48.179) by mailsvr.stanley.co.id with SMTP; 5 Aug 2009 02:23:19 - Received-SPF: none (mailsvr.stanley.co.id: domain at stanley.co.id does not designate permitted sender hosts) From: C VIAGRA R Official Sited...@stanley.co.id To: d...@stanley.co.id Subject: Dear d...@stanley.co.id 73% 0FF on Pfizer ! MIME-Version: 1.0 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit This the message option Thanks -Original Message- From: news [mailto:n...@ger.gmane.org] On Behalf Of Eric Shubert Sent: Wednesday, August 05, 2009 9:54 AM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Blocking Viagra mail dani wrote: Dear all I want ask about qmail.how to blocking mail with subject C VIAGRA R Official Site but from my account??? Thanks for the solution Dani It would help if you showed us the headers of an example you'd like to block. Are you using spamdyke? Highly recommended. Spamdyke blocks a huge amount of spam without even scanning, reducing the load on your toaster substantially. With spamdyke, you can also blacklist IP addresses, rDNS contents, and senders (full or partial addresses), which would likely let you accomplish what you're trying to do. It's not from Your account. This email came from dialup line from Thailand. The SpamHause RBL can help You. http://www.spamhaus.org/query/bl?ip=124.120.48.179 Computer ppp-124-120-48-179.revip2.asianet.co.th is infected with a high volume spam sending trojan. Use spamdyke with RBL. -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Spamassassin - Crypt::OpenSSL::RSA Error
W dniu 10.08.2009 08:24, Mike Canty pisze: Eric, Thanks for your feedback, much appreciated. When I tried the qtp-newmodel, it ran fine and finished with the lines below Qmailtoaster packages are all current. There is nothing more to do. Then I tried to run yum install perl(Mail::DomainKeys). I am new to this setup, so I was not surprised when I got a syntax error for the ( yum install perl-Mail-DomainKeys Can you please tell me what the correct syntax should be with the --enablerepo=rpmforge flag included. Cheers man yum -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamassassin Errors - Still
W dniu 11.08.2009 20:49, Eric Shubert pisze: Jake Vickers wrote: I'd really like to be clear on this, so I understand the inner workings. My understanding is that yes, the SMTP session remains open during the simscan phase. If the score is over the threshold in the simcontrol file (spam_hits=n), then the message is flat out rejected, and the sending server is notified as such before the smtp session terminates. The message is never received (successfully), nor delivered to /dev/null. The sending server subsequently bounces the message back to the sender. Please correct me if I'm wrong on this. You're right. 8-- e.g. 2009-08-08 23:58:28.774694500 simscan:[30471]:SPAM REJECT (17.30/12.00):1.8013s:***SPAM*** URGENT NOTICE.:93.17.128.19:am-chamb...@superchat.biz:m...@my.domain 2009-08-08 23:58:28.774697500 qmail-smtpd: qq hard reject (Your email is considered spam (17.30 spam-hits)): MAILFROM:am-chamb...@superchat.biz RCPTTO:m...@my.domain 8--EOT e.g. -- Pozdrawiam / Regards, Aleksander Podsiadły http://www.catb.org/~esr/faqs/smart-questions.html ;) - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] qmail machine being spammer help...
W dniu 31.08.2009 05:32, Hajid pisze: My domain panentour.com * From: * Vidyadhar [mailto:vidyadha...@gmail.com] *Sent:* Monday, August 31, 2009 10:23 AM *To:* qmailtoaster-list@qmailtoaster.com *Subject:* Re: [qmailtoaster] qmail machine being spammer help... What is your domain name? Sent on my BlackBerry® from Vodafone Essar * From *: Hajid *Date*: Mon, 31 Aug 2009 08:37:45 +0700 *To*: qmailtoaster-list@qmailtoaster.com *Subject*: [qmailtoaster] qmail machine being spammer help... Hi all, please help me with this spam. My qmail machine being spammer. MESSAGE NUMBER 144860 -- Received: (qmail 26019 invoked by uid 30); 26 Aug 2009 21:18:10 - To: undisclosed-recipients: ; Subject: Employment Opportunity . MIME-Version: 1.0 Date: Thu, 27 Aug 2009 04:18:10 +0700 From: Jiangsu Chemical Co. Ltd jiangsuchemicals1...@yahoo.co.uk Reply-To: dr.jim...@yahoo.co.uk mailto:dr.jim...@yahoo.co.uk Message-ID: 4858311e857373283a28c403d3b24...@localhost X-Sender: jiangsuchemicals1...@yahoo.co.uk mailto:jiangsuchemicals1...@yahoo.co.uk User-Agent: RoundCube Webmail/0.2 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=UTF-8 26379 ? S 0:00 qmail-remote mysmtpmail.com jiangsuchemicals1...@yahoo.co.uk mailto:jiangsuchemicals1...@yahoo.co.uk philomenag...@mysmt 26380 ? S 0:00 qmail-remote mysmtpmail.com jiangsuchemicals1...@yahoo.co.uk mailto:jiangsuchemicals1...@yahoo.co.uk philomenaginocchio@ 26383 ? S 0:00 qmail-remote dotstandards.com jiangsuchemicals1...@yahoo.co.uk mailto:jiangsuchemicals1...@yahoo.co.uk philomenaginocchi 26384 ? S 0:00 qmail-remote dotstandards.com jiangsuchemicals1...@yahoo.co.uk mailto:jiangsuchemicals1...@yahoo.co.uk philomenagi...@do Remove RoundCube, use squirrelmail. Check your http log, you probably find successful attack on RC (POST method). For example: POST /roundcube/bin/html2text.php HTTP/1.0 and check http error.log, if you find something like saved your server is hacked. :( Check do you have /etc/ssh2 or strange directory in /tmp. Tripwire could help you but IMHO it's too late. -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] qmail machine being spammer help...
W dniu 31.08.2009 10:35, Hajid pisze: I got this log from apache. 143.127.102.144 - - [27/Jul/2009:02:23:55 +0700] POST http://143.127.103.23:25/ HTTP/1.0 302 - - - 195.4.92.4 - - [14/Aug/2009:01:00:44 +0700] CONNECT mtrap.freenet.de:25 HTTP/1.0 302 - - - 195.4.92.4 - - [14/Aug/2009:01:00:45 +0700] PUT http://mtrap.freenet.de:25 HTTP/1.0 302 - - - 195.4.92.4 - - [14/Aug/2009:01:00:46 +0700] PUT http://mail.panentour.com:25 HTTP/1.0 302 - - - 195.4.92.4 - - [14/Aug/2009:01:00:47 +0700] PUT http://localhost:25 HTTP/1.0 302 - - - 195.4.92.4 - - [14/Aug/2009:01:00:47 +0700] POST http://mtrap.freenet.de:25 HTTP/1.0 302 - - - 195.4.92.4 - - [14/Aug/2009:01:00:48 +0700] POST http://mail.panentour.com:25 HTTP/1.0 302 - - - 195.4.92.4 - - [14/Aug/2009:01:00:49 +0700] POST http://localhost:25 HTTP/1.0 302 - - - [...] Error code 302 means for POST success, redirect after proper fill in form (e.g. login in Squirrelmail). You should read lines GET after POST/PUT with error 302. Do you have apache proxy module enabled? -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Domain Letter Ñ
W dniu 31.08.2009 22:15, Ariel pisze: Hello list, I need to add a domain in QMT, bearing the letter Ñ, is possible? Hola lista, necesito agregar un dominio en qmt, que lleva la letra Ñ , es posible ?? http://en.wikipedia.org/wiki/Internationalized_domain_name -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Off Topic | Spammers
W dniu 03.09.2009 13:12, Ole N.Johansen pisze: Hello list. Just wonder if it any point to send abuse email of Spammers to hostmaster? I get a lot of attempts and inbound emails about the usual stuff. Pills, lottery etc. I see 3-4 regular visitors F.ex this one: canonical name host89-233-dynamic.56-82-r.retail.telecomitalia.it. aliases addresses 82.56.233.89 Received: from unknown (HELO host89-233-dynamic.56-82-r.retail.telecomitalia.it) (82.56.233.89) by my.email.server.tld with SMTP; 3 Sep 2009 10:53:56 - Received-SPF: neutral (my.email.server.tld: 82.56.233.89 is neither permitted nor denied by SPF record at bluehost.com) Just an another thought :) Ole J Use zen.spamhause.org RBL http://www.spamhaus.org/zen/index.lasso -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Off Topic | Spammers
W dniu 03.09.2009 13:36, Aleksander Podsiadly pisze: Use zen.spamhause.org RBL http://www.spamhaus.org/zen/index.lasso Oh, IP:82.56.233.89 isn't listed. :| You can send spam to http://members.spamcop.net/ -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Off Topic | Spammers
W dniu 03.09.2009 13:51, Ole N.Johansen pisze: I run loose lists on the server because i have clients who recieve alot of emails from fare east .. (lots of blackholed networks there) I am not a member of spamcop either. But the question was, is it any point to send abuse email to the hostmaster for origin of the spammer's network? SpamCop analize spam and send (if you accept) reports. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Off Topic | Spammers
W dniu 03.09.2009 17:58, Eric Shubert pisze: Aleksander Podsiadly wrote: Speaking of which, is anyone using dsn.rfc-ignorant.org as an RBL? I'm using, the dsn list only from rfc-ignorant.org. Spamassasin checks dsn and bogusmx lists. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] No mails in Bcc should be delivered
Bcc is known only sender, the only one way is to compare header fields ,,To:'' and ,,Cc:'' with ,,RCPT TO:'' field from smtp dialog. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] qtp-extraclam error
W dniu 25.09.2009 13:24, Kartone pisze: Sorry guys a noob question: how do i can upgrade the unofficial script with the new official one ? Thx Download and unpack http://www.inetmsg.com/pub/clamav-unofficial-sigs.tar.gz (Script 1 from http://sanesecurity.org.uk/download_scripts_linux.htm) copy file clamav-unofficial-sigs.conf to /etc edit file /etc/clamav-unofficial-sigs.conf, change 4 lines: -clam_dbs=/var/lib/clamav +clam_dbs=/usr/share/clamav -reload_dbs=no +reload_dbs=yes -enable_logging=no +enable_logging=yes -user_configuration_complete=no +user_configuration_complete=yes copy clamav-unofficial-sigs.sh to /usr/local/bin Remove 2 files: /etc/cron.hourly/unofficial-clamav-sigs.sh /etc/unofficial-clamav-sigs.conf copy clamav-unofficial-sigs-cron to /cron.d/ end edit: -45 * * * * root /usr/local/bin/clamav-unofficial-sigs.sh -c /usr/local/etc/clamav-unofficial-sigs.conf +45 * * * * root /usr/local/bin/clamav-unofficial-sigs.sh -c /etc/clamav-unofficial-sigs.conf 21 /dev/null -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] qtp-extraclam error
W dniu 25.09.2009 14:04, Aleksander Podsiadly pisze: W dniu 25.09.2009 13:24, Kartone pisze: Sorry guys a noob question: how do i can upgrade the unofficial script with the new official one ? Thx Download and unpack http://www.inetmsg.com/pub/clamav-unofficial-sigs.tar.gz [...] I forgot, copy clamav-unofficial-sigs-logrotate to /etc/logrotate.d/clamav-unofficial-sigs-logrotate -- Pozdrawiam / Regards, Aleksander Podsiad?y
Re: [qmailtoaster] Advantage/Disadvantage ...??
W dniu 24.09.2009 22:45, Patrick Ring pisze: I'm loading up a fresh QmailToaster (to be used as a cache/backup) and usually I've always been under the assumption that it is best to do away with the LVM groups and format the partitions direct to the drive. Is there an advantage to using LVM vs not using LVM for QmailToaster? I know this is a matter of opinion but I'd like to know what others are doing... Thank you, Patrick M. Ring P. Ring Technologies Louisiana Web Host, LLC. 985-868-4200 LVM is very helpfull if you have 2 hard disks and RAID-1 (mirror) /boot - /dev/md0 - raid1 (sda1, sda2) - small partion VolGroup00 - /dev/md1 - raid1 (sda2, sdb2) - rest of disk Then with LVM I can create as many partition as I need: /dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw) /dev/mapper/VolGroup00-LogVol01 on /var type ext3 (rw,mand) /dev/mapper/VolGroup00-LogVol02 - swap /dev/mapper/VolGroup00-LogVol03 on /tmp type ext3 (rw) /dev/mapper/VolGroup00-LogVol04 on /home type ext3 (rw) /dev/mapper/VolGroup00-LogVol05 on /samba type ext3 (rw) /dev/mapper/VolGroup00-LogVol06 on /samba1 type ext3 (rw) and /dev/md0 on /boot type ext3 (rw) Separate parttions for users system resources is more secure. Only 2 physical partions simplify RAID creation (and restoring). -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] qtp-extraclam error
W dniu 25.09.2009 14:28, Constantin IOAJA pisze: *No need for 21 /dev/null in clamav-unofficial-sigs-cron ! set yes for silence - receive only error conditions - in clamav-unofficial-sigs.conf : * [...] *You need to see errors, right? Regards, Constantin * You're right. :) I will check it. -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] qtp-extraclam error
W dniu 25.09.2009 16:17, Eric Shubert pisze: Thanks Aleksander and Constantin. You just made my scripting a bit easier. I'll be modifying qtp-extraclam to download the latest version and install it, so as newer releases are done they won't need to be incorporated into QTP. Simply rerunning qtp-extraclam will install the latest version (similar to qtp-install-spamdyke). If there's anything else someone would like to see related to this, now's the time to ask! One more, after: #reload_opt= line: reload_opt=qmail-clam restart 21 /dev/null That's all I think. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 27.09.2009 17:05, Maxwell Smart pisze: Can you use 192.168.0.1/12 in the whitelist_ip file? 12 bit netmask for this host? Look at RFC-1918 and RFC-1466. -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 06:02, Maxwell Smart pisze: I think this is what your looking for (/var/log/qmail/smtp/). Even with this origin IP in the whitelist_ip it doesn't work, or in the whitelist_rdns. @40004abf75d32e6d5294 spamdyke[19048]: DENIED_RDNS_MISSING from: r...@area510.net to: c...@yother.com origin_ip: 207.115.36.143 origin_rdns: (unknown) auth: (unknown) @40004abf793115494994 spamdyke[19678]: DENIED_RDNS_MISSING from: web...@area510.net to: c...@yother.com origin_ip: 207.115.36.143 origin_rdns: (unknown) auth: (unknown) @40004abf79462e4b20ac spamdyke[19684]: DENIED_RDNS_MISSING from: r...@area510.net to: c...@yother.com origin_ip: 207.115.36.143 origin_rdns: (unknown) auth: (unknown) DENIED_RDNS_MISSING: The connection was blocked because the remote server has no rDNS name at all. 8-- my test [a...@alexia ~]$ host 207.115.36.143 143.36.115.207.in-addr.arpa domain name pointer nlpi129.sbcis.sbc.com. [a...@alexia ~]$ host -t mx yother.com yother.com mail is handled by 10 mail.yother.com. [a...@alexia ~]$ host mail.yother.com mail.yother.com has address 64.168.70.133 [a...@alexia ~]$ host 64.168.70.133 133.70.168.64.in-addr.arpa is an alias for 133.128.70.168.64.in-addr.arpa. 133.128.70.168.64.in-addr.arpa domain name pointer mail.yother.com. 133.128.70.168.64.in-addr.arpa domain name pointer laetitia.area510.net. 8-- EOT my test Check configuration of DNS on your server. Probably your server can't resolve name from IP. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 07:51, Aleksander Podsiadly pisze: [...] Check configuration of DNS on your server. Probably your server can't resolve name from IP. Example from smtp log: 2009-09-28 11:34:17.730211500 spamdyke[2778]: DENIED_RDNS_MISSING from: moon...@gmail.com to: wie...@maximumlist.com origin_ip: 222.170.127.111 origin_rdns: (unknown) auth: (unknown) and the test: [a...@alexia ~]$ host 222.170.127.111 Host 111.127.170.222.in-addr.arpa. not found: 3(NXDOMAIN) -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 19:18, Maxwell Smart pisze: [...] What is reason not to have recursion set to yes? Security! -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 16:31, Eric Shubert pisze: I concur. Presuming you have 127.0.0.1 as the first line in your /etc/resolv.conf, what does # dig @127.0.0.1 -x 207.115.36.143 give you? You should use whatever nameserver address is listed first in your toaster's /etc/resolv.conf file. I have on one of my servers in resolv.conf only one line: search domain_name and all works fine, on the second one two lines: search domain_name nameserver 127.0.0.1 what is the same meaning as in the thirst example. All works fast and proper. The problem is not in QT, the problem is in proper network and name server configuration. http://www.centos.org/docs/4/4.5/Reference_Guide/ch-bind.html -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 19:46, Maxwell Smart pisze: [...] I may have to separate my DNS server from my web/mail server even though it's only a slave server. What for? I have all services on one server and all works fine. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 20:10, Maxwell Smart pisze: [...] Are you running a caching nameserver on yours? Yes I am. package: caching-nameserver FIles from /etc: /etc/named.caching-nameserver.conf /etc/named.conf /etc/named.rfc1912.zones -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 20:22, Maxwell Smart pisze:
What are the options in your named.conf file?
Standard options from caching name server. This file was unchanged many
years. Only my server and secondary DNS can read all recursive. No one more.
8-- /etc/named.conf - /var/named/chroot/etc/named.conf
//
// named.conf for Red Hat caching-nameserver
//
options {
directory /var/named;
dump-file /var/named/data/cache_dump.db;
statistics-file /var/named/data/named_stats.txt;
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};
zone westside.kielce.pl {
type master;
file db.westside.kielce.pl;
allow-transfer {
81.26.15.66;
};
};
zone 1.168.192.in-addr.arpa {
type master;
file db.1.168.192;
};
include /etc/named.rfc1912.zones;
include /etc/rndc.key;
8-- EOT /etc/named.conf - /var/named/chroot/etc/named.conf
--
Pozdrawiam / Regards,
Aleksander Podsiadły
mail: a...@westside.kielce.pl
jid: a...@jabber.westside.kielce.pl
ICQ: 201121279
gg: 9150578
-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 20:37, Eric Shubert pisze: Alexsander, Max is trying to configure bind to be both authoritative secondary and caching nameserver on his toaster host. Can you help him with that? It's trivial when you know it, but prone to error when you don't. ;) As for myself, I'm don't have a need to do this, so I haven't learned how. I know, but IMHO it's not this phorum. There are manuals, there is the Google and there is http://www.catb.org/~esr/faqs/smart-questions.html#before ;) If someone tries to be an admin he should read the manuals, search the WEB. To many possibilities, I haven't got enough informations to help. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Spamdyke
W dniu 28.09.2009 21:33, Maxwell Smart pisze: I agree to a certain point to. Originally my question was why doesn't Spamdyke allow those addresses in my whitelist's Even if I have the pacbell address in the whitelist. According to the documentation this should allow these through the filter, regardless of my DNS configuration. Sorry, do You remember? 8-- [...] 192.168.0.1/12 [...] [...] DENIED_RDNS_MISSING [...] 8-- EOT Spamdyke work correct, simply it cannot find the World. -- Pozdrawiam / Regards, Aleksander Podsiadły mail:a...@westside.kielce.pl jid:a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Qmail-Toaster Installation
W dniu 01.10.2009 16:02, Benedict Claver pisze: Hi, I have checked again after rebuild the .rpm file is not found in this path..[/usr/src/redhat/RPMS/i386/] running gives the error below: - # rpm -Uvh /usr/src/redhat/RPMS/i386/control-panel-toaster* error: File not found by glob: /usr/src/redhat/RPMS/i386/control-panel-toaster* Regards, Benedict Read the log carefully, there is all information you need to find the builded package. ;) In the log you attached is: 8-- [...] Wrote: /usr/src/redhat/RPMS/noarch/control-panel-toaster-0.5-1.3.7.noarch.rpm Wrote: /usr/src/redhat/RPMS/noarch/send-emails-toaster-0.5-1.3.7.noarch.rpm [...] 8-- EOT -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] From_failed problem
W dniu 04.10.2009 15:47, Fernando Ortega pisze: [...] Perhaps a problem of space in the queue? How can i increase it? Thanks I don't think, the problem is in phpmailer, search the Google: http://www.google.pl/search?q=phpmailer+%22Language+string+failed+to+load -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] From_failed problem
W dniu 04.10.2009 18:49, Fernando Ortega pisze: But the same script is working with another mail server fine, without problems. The Language string problem it's only a warning because the lang directory isn't installed, but isn't important. [...] Check the log files (Apache, QMT, system), IMO there should be an answer. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Dovecot howto
On my office servers I have Dovecot one year but I didn't know how it is
fast.
Yesterday I installed the newest version 1.2.5 on my private server.
It's 2-3 times faster then courier-imap. Source from
http://atrpms.net/dist/el5/dovecot/ a little modification in spec file
(added compile option --with-vpopmail) and voila.
Next stop qmail, remove: courier-authlib-toaster, courier-imap-toaster
and qmail-pop3d-toaster and check /var/qmail/supervise directory. There
should be only: clamd, send, smtp, spamd and submission.
Then migration: http://www.dovecot.org/tools/courier-dovecot-migrate.pl
described on http://wiki.dovecot.org/Migration/Courier
Next edit /etc/dovecot.conf:
8-- patch
--- dovecot.conf.org2009-10-05 14:57:16.0 +0200
+++ dovecot.conf2009-10-05 16:42:06.0 +0200
@@ -238,15 +238,17 @@
# explicitly, ie. mail_location does nothing unless you have a namespace
# without a location setting. Default namespace is simply done by having a
# namespace with empty prefix.
-#namespace private {
+namespace private {
# Hierarchy separator to use. You should use the same separator for all
# namespaces or some clients get confused. '/' is usually a good one.
# The default however depends on the underlying mail storage format.
#separator =
+ separator = .
# Prefix required to access this namespace. This needs to be
different for
# all namespaces. For example Public/.
#prefix =
+ prefix = INBOX.
# Physical location of the mailbox. This is in same format as
# mail_location, which is also the default for it.
@@ -255,6 +257,7 @@
# There can be only one INBOX, and this setting defines which namespace
# has it.
#inbox = no
+ inbox = yes
# If namespace is hidden, it's not advertised to clients via NAMESPACE
# extension. You'll most likely also want to set list=no. This is
mostly
@@ -271,7 +274,7 @@
# Namespace handles its own subscriptions. If set to no, the parent
# namespace handles them (empty prefix should always have this as
yes)
#subscriptions = yes
-#}
+}
# Example shared namespace configuration
#namespace shared {
@@ -298,6 +301,8 @@
# or names. doc/wiki/UserIds.txt
#mail_uid =
#mail_gid =
+mail_uid = 89
+mail_gid = 89
# Group to enable temporarily for privileged operations. Currently this is
# used only with INBOX when either its initial creation or dotlocking
fails.
@@ -377,6 +382,8 @@
# be done even if first_valid_uid is set to 0.
#first_valid_uid = 500
#last_valid_uid = 0
+first_valid_uid = 89
+last_valid_uid = 89
# Valid GID range for users, defaults to non-root/wheel. Users having
# non-valid GID as primary group ID aren't allowed to log in. If user
@@ -384,6 +391,8 @@
# not set.
#first_valid_gid = 1
#last_valid_gid = 0
+first_valid_gid = 89
+last_valid_gid = 89
# Maximum number of running mail processes. When this limit is reached,
# new users aren't allowed to log in.
@@ -908,7 +917,7 @@
# database (passwd usually), you can use static userdb.
# REMEMBER: You'll need /etc/pam.d/dovecot file created for PAM
# authentication to actually work. doc/wiki/PasswordDatabase.PAM.txt
- passdb pam {
+ #passdb pam {
# [session=yes] [setcred=yes] [failure_show_msg=yes]
[max_requests=n]
# [cache_key=key] [service name]
#
@@ -941,7 +950,7 @@
# args = session=yes %Ls
# args = cache_key=%u dovecot
#args = dovecot
- }
+ #}
# System users (NSS, /etc/passwd, or similiar)
# In many systems nowadays this uses Name Service Switch, which is
@@ -995,12 +1004,12 @@
#}
# vpopmail authentication doc/wiki/AuthDatabase.VPopMail.txt
- #passdb vpopmail {
+ passdb vpopmail {
# [cache_key=key] - See cache_key in PAM for explanation.
# [quota_template=template] - %q expands to Maildir++ quota
# (eg. quota_template=quota_rule=*:backend=%q)
-#args =
- #}
+args = webmail=127.0.0.1
+ }
#
# User database specifies where mails are located and what
user/group IDs
@@ -1073,8 +1082,9 @@
#}
# vpopmail doc/wiki/AuthDatabase.VPopMail.txt
- #userdb vpopmail {
- #}
+ userdb vpopmail {
+args = quota_template=quota_rule=*:backend=%q
+ }
# User to use for the process. This user needs access to only user and
# password databases, nothing else. Only shadow and pam authentication
@@ -1091,6 +1101,7 @@
# Number of authentication processes to create
#count = 1
+ count = 1
# Require a valid SSL client certificate or the authentication fails.
#ssl_require_client_cert = no
@@ -1191,6 +1202,7 @@
# quota_warning = storage=95%% /usr/local/bin/quota-warning.sh 95
# quota_warning2 = storage=80%% /usr/local/bin/quota-warning.sh 80
#quota = maildir
+ quota = maildir:ignore=Trash
# ACL plugin. vfile backend reads ACLs from dovecot-acl file from
maildir
# directory. You can also optionally give a global ACL directory
path where
8-- EOT patch
Start services qmail and
Re: [qmailtoaster] create 'New Forward' from command line
W dniu 07.10.2009 06:47, senthil vel pisze: Dear List, Can i create new forward account from command line? Is there any utility in /home/vpopmail/bin can do this? where will be the man pages for the utilities in /home/vpopmail/bin located? Please suggest me... Thanks and Regards, S.Senthilvel, As root: su -s /bin/bash - vpopmail and as vpopmail: valias -i u...@domain ali...@domain valias -i u...@domain ali...@domain -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] deliverquota load on server
W dniu 09.10.2009 15:52, David Milholen pisze: It was an 11 MB file attachment. The msg was being delivered to a outlook express client. Their mailbox is set to 40MB via qmail admin. I am looking into the other. One question would courier be involved if the client is using pop to check their mail and not webmail? TM Dave I had analog problem when email was sent to an alias, not to user. One of two alias connected users had full mailbox and after bounce stupid email server sent another time an email to the alias, many, many times. :( Ping pong - bounce, sending, bounce, sending One of users had many identical messages, the second one full mailbox without that email. I had to change the second users mailbox limit, kill the smtp connections, empty qmail queue and restart the qmail-toster. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Blacklist Qmail+spamdyke
W dniu 12.10.2009 13:08, qmailtoaster pisze: [...] dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=bl.spamcop.net [...] Proper options are: dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=bl.spamcop.net rhs-blacklist-entry=dsn.rfc-ignorant.org not ,,check-dnsrbl''. Maybe you edit this file by Windows editor? -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Account.Inbox as subfolder of other account
W dniu 14.10.2009 08:32, Richard Vinke pisze: Hi list, On my e-mail server I have the account 'rich...@..' and 'postmas...@..'. With Thunderbird I setup the two accounts and I can see both mail, just by clicking on the INBOX of each account. With webmail I have to logout, and login back with the other account to see the mail of the other account. I cannot switch quickly between those accounts. Also not with different tabs in Firefox. And now the dirty question: Can I have the 'postmaster.Inbox' as subfolder of 'rich...@..'? You can create an alias (forward) from postmaster to your email. The postmaster account should be use to manage users. Mails to postmaster can be redirect to another user/users. I have never logged as postmaster. :) First mail account I create with ,,vadduser'', then create alias postmaster to my email and ,,vmoduser -a'' to be an admin. After this I can do all with my email, I can forget postmaster password. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] policy_check in the log files?
W dniu 16.10.2009 16:45, d...@acbsco.com pisze: Jake, excuse me if this is a dumb question, but where would I find the current eMPF patch used by qmail-toaster? Dave [...] mailto:d...@acbsco.com In the latest qmail-toaster package: http://www.qmailtoaster.com/download/stable/qmail-toaster-1.03-1.3.20.src.rpm -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Re: Newmodel update
Isn't the main problem: Error: No Package Matching perl(Archive::Tar) ? -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] CentOS 5.4 and named
IMHO important information for CentOS users: http://forums.cpanel.net/f5/rh-5-4-update-bind-named-network-unreachable-resolving-ipv6-129889.html -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: qtp-newmodel fails on FUSE
W dniu 28.10.2009 06:53, Maxwell Smart pisze: Nah, 32bit here. For reference. * rpm -qa | grep kernel* kernel-2.6.18-128.7.1.el5 ne with a x86_64 toaster actually running a newer kernel? Please chime in. [...] I have CentOS 5.4 and there is no problem to mount sandbox: 8-- [r...@srv ~]# qtp-mount-sandbox qtp-mount-sandbox v0.3.3 qtp-mount-sandbox - updating dependencies ... Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: ftp.ps.pl * base: ftp.ps.pl * centosplus: ftp.ps.pl * extras: ftp.ps.pl * rpmforge: ftp-stud.fht-esslingen.de * updates: ftp.ps.pl Setting up Update Process No Packages marked for Update qtp-mount-sandbox: sandbox mounted successfully [r...@srv ~]# qtp-umount-sandbox qtp-umount-sandbox v0.3.2 qtp-umount-sandbox: sandbox umounted successfully [r...@srv ~]# cat /etc/issue CentOS release 5.4 (Final) Kernel \r on an \m [r...@srv ~]# uname -a Linux srv.witd.kielce.pl 2.6.18-164.2.1.el5.plus #1 SMP Fri Oct 9 12:27:45 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux 8-- EOT Get http://www.qmailtoaster.com/distro/centos/cnt50/cnt50-install-script.sh, read it and check did you install all needed packages. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] qmailtoaster-plus-0.3.1-1.4.14 released
W dniu 28.10.2009 06:13, Eric Shubert pisze: I meant to mention that the FUSE unionfs hasn't been tested on x86_64. I'm really sorry to have omitted that. I hope we can get this working on x86_64 hosts in short order. Works 4 me. :) -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: qtp-newmodel fails on FUSE
W dniu 28.10.2009 08:01, Wim Godden pisze: Regardless of the architecture, Grub should load the newer kernel, right ? If someone can tell me how to get that fixed, I can test the toast-ability of x86_64 ;-) GRUB loads what you want to load, default kernel shown in line: default= automatically after time in seconds: timeout= It can be MS Windows too. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: qmailtoaster-plus-0.3.1-1.4.14 released
W dniu 28.10.2009 16:31, Eric Shubert pisze: Thanks Aleksander. It had me worried a little last night. I put all the packages in place, just didn't have a x86_64 host to test with. Which distro/version(s) are you running on 64? Has anyone run this on Fedora with 64-bit? Just curious. Centos Centos 5.4 on ,,Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz''. IMHO Fedora has to short serve time to be used on server. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] shared folders
W dniu 29.10.2009 15:08, Eric Broch pisze: Hello list, I had a client ask me if there was any way to create a shared email folder that all IMAP clients could access and store project email. My first thought was to create a symbolic link in each email clients folder. Has anyone ever heard of such a thing? Eric You can use symbolic links. http://wiki.dovecot.org/SharedMailboxes -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] shared folders
W dniu 29.10.2009 16:40, Eric Broch pisze: Thanks Alex and Vidyadhar, So, you cannot use courier IMAP, which must be replaced by dovecot? And, where might I find a tutorial which explains how to replace courier IMAP with dovecot or is there one? Eric You can try symbolic links with courier-imap. I moved to dovecot a few months ago. How to do it? Salvatore's blog: http://ansani.it/2008/08/14/qmailtoaster-dovecot-imap/ particularly read my comments ;-) and the latest, my post on the QMT mailing list: http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg24761.html It's very simple. :-) -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] shared folders
W dniu 29.10.2009 18:35, Francesco Saverio Giudice pisze: Hi Alex, Very interesting, thank you for sharing it. Do you have had any problem with other parts of qmailtoaster (clamav, qmail-admin, squirrelmail, anti-spam option box, etc.) ? Best Regards, Francesco No, I haven't. any problems. Dovecot is IMO 2 or 3 time faster than courier-imap. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Dovecot howto
W dniu 06.10.2009 15:28, Aleksander Podsiadly pisze:
On my office servers I have Dovecot one year but I didn't know how it
is fast.
[...]
A little change to previous dovecot.conf patch. I modified some lines
for imap/vpopmail quota support. Now it works like with original QMT and
squirrelmail shows quota. :)
This patch was made for the latest
http://dl.atrpms.net/all/dovecot-1.2.6-1_101.src.rpm dovecot
distribution. Don't forget to modify spec file (--with-vpopmail).
*Warning:*
This patch is for x86_64 environment!
For 32 bit OS change one line in this patch:
from:
mail_plugin_dir = /usr/lib64/dovecot/imap
to:
mail_plugin_dir = /usr/lib/dovecot/imap
8-- dovecot_config_x86_64.patch
--- dovecot.conf.rpmnew2009-10-30 09:08:57.0 +0100
+++ dovecot.conf2009-10-30 16:55:34.0 +0100
@@ -238,15 +238,17 @@
# explicitly, ie. mail_location does nothing unless you have a namespace
# without a location setting. Default namespace is simply done by having a
# namespace with empty prefix.
-#namespace private {
+namespace private {
# Hierarchy separator to use. You should use the same separator for all
# namespaces or some clients get confused. '/' is usually a good one.
# The default however depends on the underlying mail storage format.
#separator =
+ separator = .
# Prefix required to access this namespace. This needs to be
different for
# all namespaces. For example Public/.
#prefix =
+ prefix = INBOX.
# Physical location of the mailbox. This is in same format as
# mail_location, which is also the default for it.
@@ -255,6 +257,7 @@
# There can be only one INBOX, and this setting defines which namespace
# has it.
#inbox = no
+ inbox = yes
# If namespace is hidden, it's not advertised to clients via NAMESPACE
# extension. You'll most likely also want to set list=no. This is
mostly
@@ -271,7 +274,7 @@
# Namespace handles its own subscriptions. If set to no, the parent
# namespace handles them (empty prefix should always have this as
yes)
#subscriptions = yes
-#}
+}
# Example shared namespace configuration
#namespace shared {
@@ -298,6 +301,8 @@
# or names. doc/wiki/UserIds.txt
#mail_uid =
#mail_gid =
+mail_uid = 89
+mail_gid = 89
# Group to enable temporarily for privileged operations. Currently this is
# used only with INBOX when either its initial creation or dotlocking
fails.
@@ -377,6 +382,8 @@
# be done even if first_valid_uid is set to 0.
#first_valid_uid = 500
#last_valid_uid = 0
+first_valid_uid = 89
+last_valid_uid = 89
# Valid GID range for users, defaults to non-root/wheel. Users having
# non-valid GID as primary group ID aren't allowed to log in. If user
@@ -384,6 +391,8 @@
# not set.
#first_valid_gid = 1
#last_valid_gid = 0
+first_valid_gid = 89
+last_valid_gid = 89
# Maximum number of running mail processes. When this limit is reached,
# new users aren't allowed to log in.
@@ -563,8 +572,8 @@
# Support for dynamically loadable plugins. mail_plugins is a space
separated
# list of plugins to load.
- #mail_plugins =
- #mail_plugin_dir = /usr/lib/dovecot/imap
+ mail_plugins = imap_quota quota trash
+ mail_plugin_dir = /usr/lib64/dovecot/imap
# IMAP logout format string:
# %i - total number of bytes read from client
@@ -908,7 +917,7 @@
# database (passwd usually), you can use static userdb.
# REMEMBER: You'll need /etc/pam.d/dovecot file created for PAM
# authentication to actually work. doc/wiki/PasswordDatabase.PAM.txt
- passdb pam {
+ #passdb pam {
# [session=yes] [setcred=yes] [failure_show_msg=yes]
[max_requests=n]
# [cache_key=key] [service name]
#
@@ -941,7 +950,7 @@
# args = session=yes %Ls
# args = cache_key=%u dovecot
#args = dovecot
- }
+ #}
# System users (NSS, /etc/passwd, or similiar)
# In many systems nowadays this uses Name Service Switch, which is
@@ -995,12 +1004,13 @@
#}
# vpopmail authentication doc/wiki/AuthDatabase.VPopMail.txt
- #passdb vpopmail {
+ passdb vpopmail {
# [cache_key=key] - See cache_key in PAM for explanation.
# [quota_template=template] - %q expands to Maildir++ quota
# (eg. quota_template=quota_rule=*:backend=%q)
#args =
- #}
+args = webmail=127.0.0.1
+ }
#
# User database specifies where mails are located and what
user/group IDs
@@ -1073,8 +1083,8 @@
#}
# vpopmail doc/wiki/AuthDatabase.VPopMail.txt
- #userdb vpopmail {
- #}
+ userdb vpopmail {
+ }
# User to use for the process. This user needs access to only user and
# password databases, nothing else. Only shadow and pam authentication
@@ -1090,7 +1100,7 @@
#chroot =
# Number of authentication processes to create
- #count = 1
+ count = 1
# Require a valid SSL client certificate or the authentication fails.
#ssl_require_client_cert = no
@@ -1190,7 +1200,8 @@
# Note that % needs to be escaped as %%, otherwise % expands
Re: [qmailtoaster] Re: Dovecot howto
W dniu 30.10.2009 17:42, Eric Shubert pisze: Thanks, Aleksander. I wonder if there isn't some way to specify a variable of some sort in the dovecot.conf file that will pick up the difference between 32 and 64 bit environments. How are other packages handling this? We typically don't/shouldn't need to change a configuration file for different processors. Or do we? I found that dovecot-example.conf is simply moved to binary package as dovecot.conf. The problem is with /usr/lib directory. Architecture x86_64 use /usr/lib64 directory for libraries. In this case thare is only one line to change. There is no problem to check architecture in spec file and apply one of 2 patches on dovecot-example.conf. :-) My simple patch shows only what to change. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Server Mail
W dniu 30.10.2009 18:32, Eric Shubert pisze: While I agree with your position and hypothetical scenario, I don't believe that adding an MX record for each host is the correct nor best solution. I don't see any purpose in adding an MX record for each host that sends email. [...] That's right, have to be in DNS the MX record or A record for literal after ,,@''. -- Pozdrawiam / Regards, Aleksander Podsiadły - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Server Mail
W dniu 30.10.2009 20:43, Eric Shubert pisze: I'm not (necessarily) disputing that. I believe that the sending server should probably not have the host name included in the address after the @. IE @host.domain.com should simply be @domain.com, and this is configured on the sending server. One other point I'd like to make. If you create an MX record for host.domain.com, shouldn't host.domain.com also be defined in your toaster as local or alias domain? I would think it should. So now you're talking about a configuration change in DNS and the toaster for each host that's going to submit email, as opposed to (simply) configuring each server to authenticate. The later seems simpler to me. http://www.ietf.org/rfc/rfc2821.txt ,,3.6 Domains Only resolvable, fully-qualified, domain names (FQDNs) are permitted when domain names are used in SMTP. In other words, names that can be resolved to MX RRs or A RRs (as discussed in section 5) are permitted, as are CNAME RRs whose targets can be resolved, in turn, to MX or A RRs. Local nicknames or unqualified names MUST NOT be used. There are two exceptions to the rule requiring FQDNs: - The domain name given in the EHLO command MUST BE either a primary host name (a domain name that resolves to an A RR) or, if the host has no name, an address literal as described in section 4.1.1.1. - The reserved mailbox name postmaster may be used in a RCPT command without domain qualification (see section 4.1.1.3) and MUST be accepted if so used.'' -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] interesting header
W dniu 01.11.2009 17:00, David Milholen pisze: Hello All, I have an account on our system that seems to think we have been compromised because he received a few hundred undeliverable messages from our server. It looks like something tried to forge his email address thru another domain. Here is the header: The wletc.com domain is my domain. I am having trouble figuring out why *...@66.173.241.56 *is trailing the email address. If anyone can give me some insight on what is happening here would be great! *Hi. T*his is the qmail-send program at ns2.wletc.com. *I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. : User and password not set, continuing without authentication. 98.137.54.237 failed after I sent the message. Remote host said: 554 delivery error: dd This user doesn't have a yahoo.com account (mobil_unloc...@yahoo.com ) [0] - mta171.mail.sp2.yahoo.com /--- Below this line is a copy of the message. Return-Path: Received: (qmail 20793 invoked by uid 89); 30 Oct 2009 16:39:17 - Received: by simscan 1.3.1 ppid: 20676, pid: 20789, t: 0.2022s scanners: attach: 1.3.1 Received: from unknown (HELO localhost.localdomain) (gbutt...@wletc.com @66.173.241.56) by ns2.wletc.com with ESMTPA; 30 Oct 2009 16:39:17 - From:quot;YAHOO MARKETING SOLUTIONSquot; To: Subject: ACCOUNT SUSPENSION Content-type: text/html; charset=us-ascii * * * Edit your /var/qmail/control/badhelo file, no one smtp client should say that he is: 8-- # block host strings with no dot (not a FQDN) !\. localhost\.localdomain ns2\.wletc\.com mail\.wletc\.com 63\.147\.8\.8 8-- EOT Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] interesting header
W dniu 01.11.2009 20:46, David Milholen pisze: I do not have a badhelo file but I do have a badmailfrom and badmailto. So, what is happening here? Than create it. This file checks how the sending server introduce itself. If say that hi is you it lies, similarly if introduce itself as localhost.localdomain (127.0.0.1). -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] interesting header
W dniu 01.11.2009 20:57, Aleksander Podsiadly pisze: W dniu 01.11.2009 20:46, David Milholen pisze: I do not have a badhelo file but I do have a badmailfrom and badmailto. So, what is happening here? Than create it. This file checks how the sending server introduce itself. If say that hi is you it lies, similarly if introduce itself as localhost.localdomain (127.0.0.1). Sorry for my English, should be: ,, If someone says that he is you he lies...''. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Re: Spam Help Plz
W dniu 05.11.2009 20:02, Eric Shubert pisze: I just came across what I think is a possible hole in spamdyke's configuration. I've been reading through the documentation regarding TLS, and it appears that with no tls-level option specified, if a spammer were to use TLS (advertised by qmail), spamdyke would be unable to use several of its filters because the data is encrypted passing through spamdyke to qmail-smtp. [...] I don't think so. From http://www.spamdyke.org/documentation/README.html ,,If |tls-level| is not given, spamdyke will use a value of |smtp|.'' -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] QMT to QMT smtp encryption
W dniu 06.11.2009 18:39, Jake Vickers pisze: I'll update the patch before too long, but those 3 fixes do not imply anything to do with logging. It may be that logging was added, but notes were not made. We'll see. The problem is more complicated. I applied this new patch (Centos 5.4 x86_64) and nothing changed. :( On CentOS 5.2 and qmail-toaster-1.03-1.3.18 in header is proper information: Received: from unknown (HELO srv.westside.kielce.pl) (83.15.57.58) by xxx.xxx.pl with (DHE-RSA-AES256-SHA encrypted) SMTP; 7 Nov 2009 11:12:04 - On CentOS 5.3 i686 and Centos 5.4 x86_64 with qmail-toaster-1.03-1.3.20 sometimes there is no information about encryption. Maybe some libraries was changed, for example openssl. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: QMT to QMT smtp encryption
W dniu 07.11.2009 20:14, Eric Shubert pisze: Not that it would fix QMT's encryption, but I wonder what happens with spamdyke handling TLS. Of course, this would do nothing for outbound email. Are you observing this breakage on the outbound or inbound side, or only when QMT is used on both ends? The problem is on inbound side, qmail-smtpd don't write to the header information about ESMTP protocol. Works correct, encrypt/decrypt but don't write to header information about encryption. In the header is info about SMTP (not ESMTP) conversation. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: QMT to QMT smtp encryption
W dniu 07.11.2009 20:44, Eric Shubert pisze: I still wonder about what spamdyke would do then. I don't know if spamdyke writes this information at all, or if qmail-smtp does it. Is it possible that perhaps spamdyke is doing TLS, so qmail-smtp doesn't see it? When spamdyke does TLS, it passes the message on to qmail-smtp in plain text (ttbomk). Yes, that is the answer. :) My tests: W/O Spamdyke: Received: from unknown (HELO srv.westside.kielce.pl) (83.15.57.58) by srv.witd.kielce.pl with (DHE-RSA-AES256-SHA encrypted) SMTP; 7 Nov 2009 19:58:45 - With Spamdyke: Received: from unknown (HELO srv.westside.kielce.pl) (83.15.57.58) by srv.witd.kielce.pl with SMTP; 7 Nov 2009 20:01:12 - Spamdyke encrypt/decrypt so there is no information in the mail header. Thanks Shubert, my problem is solved, for me partially but solved. :) -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: QMT to QMT smtp encryption
W dniu 07.11.2009 21:21, Aleksander Podsiadly pisze: Now I find [...] Sorry for ma English, should be ,,found''. :| -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] added entry on wiki
W dniu 08.11.2009 10:57, Martin Waschbuesch pisze: Hi all, As promised, I added the steps I took to make the toaster a little more secure to the user tipstricks section. I am rather unfamiliar with the wiki editing, so please feel free to reformat to make it 'blend in' ;) Martin About http://wiki.qmailtoaster.com/index.php/User_Tips_%26_Tricks#SSH It not hardening system. :( Someone can use dictionary attack on urdinary user account, then after logging as user tried to login as super user (sudo, su or by kernel bug). I prefer: #Protocol 2,1 Protocol 2 PasswordAuthentication no Only version 2 ssh protocol and no way to login by password, I permit root login. File ~/.ssh/authorized_users determines who physically can login. In this file are public keys of authorized to login on this (i.e. root) account. It's more secure. :) Installation of ossec can improve the security of server to. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Bug tracking system
W dniu 06.11.2009 21:43, Jake Vickers pisze: After looking at several bug/defect/ticket systems, I have decided to use Mantis. It works. :) I have the different view to case ID:002 but You're the Master. ;) -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] added entry on wiki
W dniu 08.11.2009 18:31, Martin Waschbuesch pisze: [...] Personally, I prefer to not having to carry my key around with me (on a USB stick??), but I need to be able to log on from different machines. [...] USB stick the file container encrypted by Truecrypt (Realcrypt) solve the problem. Private key is password encrypted to. I can publish my root password and no one can login without physical access to console. :) -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: QMT to QMT smtp encryption
W dniu 09.11.2009 05:52, Eric Shubert pisze: I've posted a message on the spamdyke list requesting that spamdyke add a mail message header with pertinent information, including whether or not TLS was used. We'll see how that goes. Good idea, Alexsander. I was thinking about it and I come to the conclusion that can be difficult to add to header this information. Email with DKIM or domain-keys signature cannot be changed. If filter like Spamdyke add something to the header, qmail rejects it. The only one way to inform us about encryption is to write info to log. Am I wrong? -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] smtp relay
W dniu 09.11.2009 17:59, Eric Broch pisze: Hello List, I just tried to turn off SMTP relaying for one user in my domain with the following command: /home/vpopmail/bin/vmoduser -s us...@mydomain.com mailto:us...@mydomain.com It did not work. I sent an email from this account with no problems after making this adjustment. Should this command stop a user from relaying? Thanks, List! Eric Are You doing it as vpopmail? -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Re: QMT to QMT smtp encryption
W dniu 09.11.2009 15:39, Eric Shubert pisze: [...] Alexsander, are you subscribed to the spamdyke list? Please consider doing so. Thanks again. I'm on to many forums and lists. :) Forums and lists related to local government, government, FOSS, OSSEC, security, qmailtoaster, LUG, wikipedia and so on. It starts to be to much for me. Some times I have to rest and relax. (B) ;) -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] smtp relay
W dniu 09.11.2009 21:58, Eric Broch pisze: Aleksander, No, I'm logged in as administrator, if that's what you mean. Eric Try first: su - -s /bin/bash vpopmail and as this user do what You want to do. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Re: eMPF requires authentication to work?
W dniu 13.11.2009 20:15, d...@acbsco.com pisze: Eric and list, I am sending emails now. I changed the line echo mail.domain.com:587 postmas...@domain.com:password mailto:postmas...@domain.com:password sasl_passwd and used echo 192.168.5.2:587 sasl_passwd ran postmap sasl_passwd restarted postfix and emails started coming through. I still get some certificate errors though, what would be the cause? Nov 13 13:09:03 inet postfix/pickup[19149]: A3DCC20E014B: uid=0 from=root Nov 13 13:09:03 inet postfix/cleanup[19336]: A3DCC20E014B: message-id=20091113190903.a3dcc20e0...@inet.local.solution-group.com mailto:20091113190903.a3dcc20e0...@inet.local.solution-group.com Nov 13 13:09:03 inet postfix/qmgr[19150]: A3DCC20E014B: from=r...@accsnetwork.com mailto:r...@accsnetwork.com, size=729, nrcpt=1 (queue active) Nov 13 13:09:03 inet postfix/smtp[19338]: certificate verification failed for 192.168.5.2: num=18:self signed certificate Nov 13 13:09:03 inet postfix/smtp[19338]: A3DCC20E014B: to=d...@acbsco.com mailto:d...@acbsco.com, relay=192.168.5.2[192.168.5.2]:587, delay=0.16, delays=0.02/0.03/0.09/0.02, dsn=2.0.0, status=sent (250 ok 1258139320 qp 10933) Nov 13 13:09:03 inet postfix/qmgr[19150]: A3DCC20E014B: removed Is this because it is a self signed cert? Thanks, Dave Is the Postfix MTA part of qmailtoaster? Do I miss something? -- Pozdrawiam / Regards, Aleksander Podsiad?y mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578
Re: [qmailtoaster] Cron Reports
W dniu 17.11.2009 08:29, Kartone pisze: Yes, me too. Seems it cannot be stopped. :-) My workaround was to change address where cron send mail to. Il giorno 16/nov/2009, alle ore 17.10, Bill Holt ha scritto: I keep getting these eMail reports every hour. Is something wrong? Restarting clamd /var/qmail/supervise/clamd: up (pid 28142) 2 seconds /var/qmail/supervise/clamd/log: up (pid 28143) 2 seconds If not how do I stop them? Thanks, Bill - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com In my Mozilla Thunderbird I created Filter: If subject contain /usr/local/bin/clamav-unofficial-sigs.sh -c /etc/clamav-unofficial-sigs.conf' then mark as readed and move to Trash. :) The problem is in file /etc/clamav-unofficial-sigs.conf and variable reload_opt. Output from qmail-clam is not empty so there is an email every time clamav databases are updated. Maybe new option in qmail-clam, something like silent_restart could help. -- Pozdrawiam / Regards, Aleksander Podsiadły mail: a...@westside.kielce.pl jid: a...@jabber.westside.kielce.pl ICQ: 201121279 gg: 9150578 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
