Re: [toaster] Problem with an open relay

2007-01-10 Thread Matthew Walker

On Tue, January 9, 2007 5:12 pm, [EMAIL PROTECTED] wrote:
 yes ,you are right ,thank you very much
 i see the log in mysql log like this

 2851 webmaster 12345 sve-tech.com webmaster 59.40.27.78 vchkpw-smtp:
 password fail (pass: '12345') webmast... 1168331134 3
   2852 webmaster 123456 sve-tech.com webmaster 59.40.27.78
 vchkpw-smtp: password fail (pass: '123456') webmas... 1168342700 3

Glad to see you got it cleaned up. :) One less spam relay in the world is
always a good thing.

-- 
Matthew Walker
Kydance Hosting  Consulting
LAMP Specialist


Re: [toaster] Problem with an open relay

2007-01-09 Thread Matthew Walker

On Tue, January 9, 2007 4:44 am, [EMAIL PROTECTED] wrote:
 but we see message header ,we can see any valid username  ,but we see the
 From HEADER is 168.1.49.97dgrrtgr  and no  [EMAIL PROTECTED]


 Return-Path: 
 Received: (qmail 10514 invoked by uid 89); 8 Jan 2007 01:04:33 -
 Received: by simscan 1.2.0 ppid: 10447, pid: 10511, t: 0.2801s
  scanners: attach: 1.2.0 clamav: 0.88.7/m:41/d:2352
 Received: from unknown (HELO winxp) ([EMAIL PROTECTED])
   by 0 with ESMTPA; 8 Jan 2007 01:04:33 -
 From: 168.1.49.97dgrrtgr 
 Subject: =?GB2312?B?yeixuM6s0N653MDt?=
 To: [EMAIL PROTECTED]
 Content-Type: text/plain
 MIME-Version: 1.0
 Content-Transfer-Encoding: base64
 Date: Mon, 8 Jan 2007 09:08:40 +0800


Headers are NOT reliable. Once a client has authenticated with a valid
username and password, they can say whatever they want about who they are
for the rest of the conversation.

Seriously, you have a compromised account, or a user who is intentionally
spamming through your server. Shut them down.

-- 
Matthew Walker
Kydance Hosting  Consulting
LAMP Specialist


Re: [toaster] Problem with an open relay

2007-01-09 Thread Matthew Walker

On Tue, January 9, 2007 9:41 am, Rick Macdougall wrote:
 Just a thought.  Did you upgrade over an older copy of the toaster ?
   Perhaps one where the smtp-auth code required the domain.com name
 listed in the run file ?

 If so, when you upgraded did you just use the old run file and not
 upgrade as you should, there by leaving yourself as an open relay
 (because using the old run file with the new code allows anyone to
 authenticate) ?


I suppose he might have that problem, but unless his auth is completely
broken, that original log snipped showed a user logging in successfully,
which he claims is responsible for sending the spams.

-- 
Matthew Walker
Kydance Hosting  Consulting
LAMP Specialist


[toaster] Local Delivery Failing!

2004-11-11 Thread Matthew Walker
I just set up a new toaster for my work mail server, and I'm having a
problem I've never encountered before. ALL local delivery is failing.

Here's the log messages:

@40004193a0f03b14234c starting delivery 91: msg 1807312 to local
[EMAIL PROTECTED]
@40004193a0f03b144a5c status: local 1/10 remote 0/20
@40004193a0f03b455cdc delivery 91: failure:
Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/

/var/qmail/users/assign:
+thebraingarden.com-:thebraingarden.com:89:89:/home/vpopmail/domains/thebraingarden.com:-::
+mail.thebraingarden.com-:thebraingarden.com:89:89:/home/vpopmail/domains/thebraingarden.com:-::
.

[EMAIL PROTECTED] qmail]# cat /var/qmail/control/locals


[EMAIL PROTECTED] qmail]# cat /var/qmail/control/me
mail.thebraingarden.com


[EMAIL PROTECTED] qmail]# cat /var/qmail/control/virtualdomains
thebraingarden.com:thebraingarden.com
mail.thebraingarden.com:mail.thebraingarden.com


[EMAIL PROTECTED] qmail]# cat /var/qmail/control/rcpthosts
thebraingarden.com
mail.thebraingarden.com

[EMAIL PROTECTED] bin]# ./vuserinfo [EMAIL PROTECTED]
name:   mwalker
passwd: $1$eWC2FsRj$ThiVifvUKWqNRfezrLdXW1
clear passwd: YouWish
uid:1
gid:0
flags:  0
gecos: mwalker
limits: No user limits set.
dir:   /home/vpopmail/domains/thebraingarden.com/mwalker
quota: NOQUOTA
usage: NOQUOTA
last auth: Thu Nov 11 10:26:36 2004
last auth ip: 127.0.0.1


I can authenticate to all users successfully, but any attempt to deliver
mail to them fails. Remote delivery has no problems.

-- 
Matthew Walker
Kydance Hosting  Consulting
http://www.kydance.net



Re: [toaster] Local Delivery Failing!

2004-11-11 Thread Matthew Walker
Ahem. I should google a little more before posting. Excuse the panic, I
found the problem. I'd accidentally deleted the .qmail-default. Replaced
it, and everything is working fine.

-- 
Matthew Walker
Kydance Hosting  Consulting
http://www.kydance.net



[toaster] Odd SMTP banner...

2004-11-11 Thread Matthew Walker

Relating to the new toaster I set up, I've noticed some odd behavior with
the banner when you connect to SMTP. Also, commands seem to be somewhat
limited on remote connections. For example...

Local Test:

[EMAIL PROTECTED] squirrelmail]# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mail.thebraingarden.com ESMTP
EHLO thebraingarden.com
250-mail.thebraingarden.com
250-STARTTLS
250-PIPELINING
250-8BITMIME
250 AUTH LOGIN PLAIN CRAM-MD5
MAIL FROM: [EMAIL PROTECTED]
250 ok
RCPT TO: [EMAIL PROTECTED]
250 ok
QUIT
221 mail.thebraingarden.com
Connection closed by foreign host.


All very normal, and very well behaved. (And no, it's not an open relay
unless you're localhost. ;)

Now... Remote Test:

arsenic ~ # telnet mail.thebraingarden.com 25
Trying 209.90.91.5...
Connected to user-5.pl107658.fiber.net.
Escape character is '^]'.
220 *
EHLO kydance.net
502 unimplemented (#5.5.1)
AUTH LOGIN
502 unimplemented (#5.5.1)
MAIL FROM: [EMAIL PROTECTED]
250 ok
RCPT TO: [EMAIL PROTECTED]
553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
250 ok
QUIT
221 mail.thebraingarden.com
Connection closed by foreign host.


Does this seem odd to anyone else? It behaves /totally/ differently on the
external connection than it does on the internal.

-- 
Matthew Walker
Kydance Hosting  Consulting
http://www.kydance.net



Re: [toaster] Odd SMTP banner...

2004-11-11 Thread Matthew Walker

Ahmet YAZICI said:
 Matthew Walker wrote:

Relating to the new toaster I set up, I've noticed some odd behavior with
the banner when you connect to SMTP. Also, commands seem to be somewhat
limited on remote connections. For example...

Local Test:

[EMAIL PROTECTED] squirrelmail]# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mail.thebraingarden.com ESMTP
EHLO thebraingarden.com
250-mail.thebraingarden.com
250-STARTTLS
250-PIPELINING
250-8BITMIME
250 AUTH LOGIN PLAIN CRAM-MD5
MAIL FROM: [EMAIL PROTECTED]
250 ok
RCPT TO: [EMAIL PROTECTED]
250 ok
QUIT
221 mail.thebraingarden.com
Connection closed by foreign host.


All very normal, and very well behaved. (And no, it's not an open relay
unless you're localhost. ;)

Now... Remote Test:

arsenic ~ # telnet mail.thebraingarden.com 25
Trying 209.90.91.5...
Connected to user-5.pl107658.fiber.net.
Escape character is '^]'.
220 *
EHLO kydance.net
502 unimplemented (#5.5.1)
AUTH LOGIN
502 unimplemented (#5.5.1)
MAIL FROM: [EMAIL PROTECTED]
250 ok
RCPT TO: [EMAIL PROTECTED]
553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
250 ok
QUIT
221 mail.thebraingarden.com
Connection closed by foreign host.


Does this seem odd to anyone else? It behaves /totally/ differently on
 the
external connection than it does on the internal.



 Behind a firewall ?



The system is behind some kind of NAT setup, but I don't know the precise
details. However, I'm fairly certain that it is simply a port-forwarding
NAT box, and isn't doing any active firewalling/filtering of the
connection. Is there anything else that could cause this? It's not urgent
at the moment, but the minute one of the employees tries to send mail from
their home computer, it's going to escalate to critical.


-- 
Matthew Walker
Kydance Hosting  Consulting
http://www.kydance.net



RE: [toaster] Odd SMTP banner...

2004-11-11 Thread Matthew Walker

trevor said:
 Your isp may be redirecting port 25 bound traffic to it's own servers.
 Most
 of the larger ones do this.  When I setup a toaster for my last employer,
 everything worked great inside the office network but when people brought
 their laptops home a good 75% of them could not send emails.  I figured
 out
 that their isps were redirecting port 25 traffic.  To work around this I
 just setup another smtpd listener on 2525, configured laptop users email
 clients smtp port to 2525 and everyone was happy.


Nope, that's not happening. This is a professional CoLo facility, and it
is /definately/ going to our mail server. I can watch the connection come
in on the log files, and other than the missing commands, it behaves as if
it was our system.

-- 
Matthew Walker
Kydance Hosting  Consulting
http://www.kydance.net



Re: [toaster] Odd SMTP banner...

2004-11-11 Thread Matthew Walker

Tom Collins said:
 On Nov 11, 2004, at 9:41 AM, Matthew Walker wrote:
 Now... Remote Test:

 arsenic ~ # telnet mail.thebraingarden.com 25
 Trying 209.90.91.5...
 Connected to user-5.pl107658.fiber.net.
 Escape character is '^]'.
 220 *

 Can you watch the network with a packet sniffer like Ethereal?  You
 said that 209.90.91.5 is actually port forwarded to your server.  It
 looks like it's not transparent -- like there's a proxy of some sort
 running on 209.90.91.5.

 Is it possible to connect directly to the Ethernet interface of the
 server without going through any firewalls?


Yes, it is. It's also accessible from the 10.* private network that's used
at work... Here, let me make a little diagram...


Internet (209.90.91.5) = Server (192.168.1.19) = Internal (10.*)


There's NAT of some kind going on at both boundaries. I'm attempting to
find someone who knows, but I haven't found anyone yet. Regardless, the
only problem is with the Internet = Server interface. Clients on the
Internal network have no problems.

-- 
Matthew Walker
Kydance Hosting  Consulting
http://www.kydance.net



[toaster] Creating Gentoo Toaster Page

2003-08-20 Thread Matthew Walker
Just letting everyone know (But especially Bill Shupp) that I'm making a
companion page for his that details how to set up a toaster on Gentoo Linux.

I've been pleasantly suprised to discover that 90% of the work is already
done, and part of the Gentoo packages. So far the only piece that can't be
installed from a Gentoo package is qmailadmin, and I'll probably write an
ebuild for that myself later.

If there are any other Gentoo users on the list who have used Portage to
install various pieces of the toaster, contact me and tell me what part you
used Portage for, and how well it worked.

Thanks!

Matthew


-- 
 Was I helpful?  Let others know:
 http://svcs.affero.net/rm.php?r=utoxinp=main


Re: [toaster] SOLVED: Disabling TLS in Toaster Patch - How?

2003-07-02 Thread Matthew Walker
Well, not really solved yet. But at least closer to a solution. I've managed
to track the problem down to my webmail client, and the way it parses
addresses. So there's nothing wrong with the toaster setup. Just thought I'd
let you all know.


Matthew Walker said:
 *throws up hands in defeat*

 I compiled the patches I wanted by hand, and /still/ get bizarre mail
 routing. Only now the problem is getting ever more severe. /All/ mail sent
 from my personal server at work to the others servers is getting re-routed
 back to my server by the main servers.

 If anyone has any clues about this, PLEASE share them. I've read every FAQ
 and mailling list archive I can find, and asked everywhere, and nothing I've
 tried has helped.

 Thanks in advance for any help you can give.

 Matthew


 Matthew Walker said:
 I need to disable TLS in the Toaster patch urgently. Is it all in one area
 in the patch file? TLS is looking more and more likely to be the problem
 causing my myserious misrouting of mail. (Why, I still have no idea, but a
 hand-run SMTP session with no TLS works perfectly)


 --
  Was I helpful?  Let others know:
  http://svcs.affero.net/rm.php?r=utoxinp=main



 --
  Was I helpful?  Let others know:
  http://svcs.affero.net/rm.php?r=utoxinp=main



-- 
 Was I helpful?  Let others know:
 http://svcs.affero.net/rm.php?r=utoxinp=main


[toaster] Qmail Rewriting Email Addresses

2003-07-02 Thread Matthew Walker
Well, I've done a bunch of recordio debugging now that I have TLS out of the
way, so that I can actually read what my SMTP servers are saying to
eachother, and things have gotten very interesting. I've included three
recordio sessions in this mail, and I'll be commenting them above each
session.

Here's the first session. This is from mail.kydance.net, and is the output
from squirrelmail talking to the SMTP server on the initial delivery request
for the message. Everything in this session is correct.

 9991  220 mail.kydance.net ESMTP
 9991  HELO webmail.kydance.net
 9991  250 mail.kydance.net
 9991  MAIL FROM: [EMAIL PROTECTED]
 9991  250 ok
 9991  RCPT TO: [EMAIL PROTECTED]
 9991  250 ok
 9991  DATA
 9991  354 go ahead
 9991  Received: from 216.190.203.130 (proxying for 192.168.1.254)
 9991  (SquirrelMail authenticated user mwalker%kydance.net)
 9991  by squirrelmail.kydance.net with HTTP;
 9991  Wed, 2 Jul 2003 16:12:20 -0600 (MDT)
 9991  Message-ID: 37732.216.190.203.130.105+
 9991  [EMAIL PROTECTED]
 9991  Date: Wed, 2 Jul 2003 16:12:20 -0600 (MDT)
 9991  Subject: Re: FW: Website info.
 9991  From: Matthew Walker [EMAIL PROTECTED]
 9991  To: [EMAIL PROTECTED]
 9991  User-Agent: SquirrelMail/1.4.1 [CVS]
 9991  MIME-Version: 1+
 9991  .0
 9991  Content-Type: text/plain;charset=iso-8859-1
 9991  Content-Transfer-Encoding: 8bit
 9991  X-Priority: 3
 9991  Importance: Normal
 9991 
 9991  This is a test
 9991 
 9991  .
 9991  250 ok 1057183940 qp 9993
 9991  QUIT
 9991  221 mail.kydance.net
 9991  [EOF]


Now, this is the recordio session from the server hosting
epliantmarketing.com's email (Technically helium.mthmarketing.com, or any of
200 other names...) Pay special attention to the RCPT TO: line, and compare
it with what was in the first session. WTF?

 0084  220 helium.mthmarketing.com ESMTP
 0084  HELO mail.kydance.net
 0084  250 helium.mthmarketing.com
 0084  MAIL FROM:[EMAIL PROTECTED]
 0084  250 ok
 0084  RCPT TO:[EMAIL PROTECTED]
 0084  250 ok
 0084  DATA
 0084  354 go ahead
 0084  Received: (qmail 9993 invoked by uid 1028); 2 Jul 2003 22:12:20 -
 0084  Received: from unknown (HELO webmail.kydance.net) (127.0.0.1)
 0084by 0 with SMTP; 2 Jul 2003 22:12:20 -
 0084  Received: from 216.190.203.130 (proxying for 192.168.1.254)
20084  (Squirre+
 0084  lMail authenticated user mwalker%kydance.net)
 0084  by squirrelmail.kydance.net with HTTP;
 0084  Wed, 2 Jul 2003 16:12:20 -0600 (MDT)
 0084  Message-ID:
[EMAIL PROTECTED]
20084  Date: Wed, 2 Jul 2003 16:12:20 -0+
 0084  600 (MDT)
 0084  Subject: Re: FW: Website info.
 0084  From: Matthew Walker [EMAIL PROTECTED]
 0084  To: [EMAIL PROTECTED]
 0084  User-Agent: SquirrelMail/1.4.1 [CVS]
 0084  MIME-Version: 1.0
 0084  Content-Type: text/plain;charset=iso-8859-1
20084  Content-Transfer-Encoding: 8+
 0084  bit
 0084  X-Priority: 3
 0084  Importance: Normal
 0084 
 0084  This is a test
 0084 
 0084  .
 0084  250 ok 1057183945 qp 20086
 0084  QUIT
 0084  221 helium.mthmarketing.com
20084  [EOF]


Finally, this is from mail.kydance.net again, as helium.mthmarketing.com
re-routes the mail back to it, since the RCPT TO address is indeed for
kydance.net at this point. Nothing seems out of the ordinary here,
considering this /is/ what helium.mthmarketing.com recieved.

 1  220 mail.kydance.net ESMTP
 1  HELO helium.mthmarketing.com
 1  250 mail.kydance.net
 1  MAIL FROM:[EMAIL PROTECTED]
 1  250 ok
 1  RCPT TO:[EMAIL PROTECTED]
 1  250 ok
 1  DATA
 1  354 go ahead
 1  Received: (qmail 20094 invoked by uid 204); 2 Jul 2003 22:12:25 -
 1  Received: from [EMAIL PROTECTED] by helium.mthmarketing.com by
uid 1000 with qmail-scanner-1.16
 1   (clamscan: 0.54. spamassassin: 2.55.  Clear:.
 1   Processed in 0.379036 secs); 02 Jul+
 1   2003 22:12:25 -
 1  Received: from unknown (HELO mail.kydance.net) (216.190.203.134)
 1by 0 with SMTP; 2 Jul 2003 22:12:24 -
 1  Received: (qmail 9993 invoked by uid 1028); 2 Jul 2003 22:12:20 -
 1  Received: from unknown (HELO webmail.kydance.net) (1+
 1  27.0.0.1)
 1by 0 with SMTP; 2 Jul 2003 22:12:20 -
 1  Received: from 216.190.203.130 (proxying for 192.168.1.254)
 1  (SquirrelMail authenticated user mwalker%kydance.net)
 1  by squirrelmail.kydance.net with HTTP;
 1  Wed, 2 Jul 2003 16:1+
 1  2:20 -0600 (MDT)
 1  Message-ID:
[EMAIL PROTECTED]
 1  Date: Wed, 2 Jul 2003 16:12:20 -0600 (MDT)
 1  Subject: Re: FW: Website info.
 1  From: Matthew Walker [EMAIL PROTECTED]
 1  To: [EMAIL PROTECTED]
 1  m
 1  User-Agent: SquirrelMail/1.4.1 [CVS]
 1  MIME-Version: 1.0
 1  Content-Type: text/plain;charset=iso-8859-1
 1  Content-Transfer-Encoding: 8bit
 1  X-Priority: 3
 1  Importance: Normal
 1 
 1  This is a test
 1 
 1  .
 1  250 ok 1057183941 qp 10002
 1

Re: [toaster] tcpserver and IPv6 problems

2003-06-23 Thread Matthew Walker
Oops. Sent this to Bill directly first.

Bill Shupp said:

 Yeah, but then it stores the stripped version, and when tcpserver tries to
 validate the connecting IP address, it bombs. Maybe I'll see if I can write
 a patch to enable IPv6 in vpopmail.

 Sounds like tcpserver isn't dealing with the cdb file formats correctly
when patched for IPv6.  Have you verified that the IPv4 IP is stored
correctly?  Is IPv6 tcpserver supposed to read both IPv4 and IPv6
addresses in the cdb file?

It would probably work correctly, if the incoming address was in IPv4
format, but the local interfaces are talking to eachother using their
IPv6-ized address, so it doesn't match up with the stripped address. Maybe
tcpserver could handle it better, but it seems to be it would be easier to
make vpopmail not strip it. ;)


 Regards,

 Bill







[toaster] Disabling TLS

2003-06-20 Thread Matthew Walker
How can I disable TLS on my qmail installations? All my tests point at it
being behind the bizarre routing of mail between two of my servers.

Matthew Walker


Re: [toaster] Odd Delivery Problems...

2003-05-31 Thread Matthew Walker
Yes, they are two seperate machines. Sitting in the same room, but they are
seperate.

Jason 'XenoPhage' Frisvold said:
 On Thu, 2003-05-29 at 22:06, Matthew Walker wrote:
 *tears hair out* Another test message just pulled the old trick again.
 Nothing different from any of the other tests.

 Are kydance and forgeglobal 2 separate servers?  I get this :

 Note that according to my testing, I'm seeing 2 separate servers...
 arsenic and lanparty...  Is lanparty forwarding everything to arsenic
 for some reason?


Not as far as I can tell. As I've said before, lanparty recieves mail from
everywhere except arsenic just fine. The only time it doesn't work is when
sending mail directly from arsenic to lanparty. (Though, if I hand-enter the
message, it works...)

My current suspicion is that somehow the headers are getting screwed up by
the encryption the two boxes are using to communicate. Does anyone know how
I can turn it off?


Re: [toaster] Odd Delivery Problems...

2003-05-31 Thread Matthew Walker
Tom Collins said:
 On Friday, May 30, 2003, at 08:24  AM, Matthew Walker wrote:
 Not as far as I can tell. As I've said before, lanparty recieves mail
 from
 everywhere except arsenic just fine. The only time it doesn't work is
 when
 sending mail directly from arsenic to lanparty. (Though, if I
 hand-enter the
 message, it works...)

 My guess is that for some reason arsenic is deciding that the mail is
 local and doesn't need to be delivered to lanparty.

 Unless you're seeing it get delivered with TLS and then immediately
 returned.

Exactly.


 Can you post the full headers from one of the mis-behaving messages?

Return-Path: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 27981 invoked from network); 30 May 2003 15:26:22 -
Received: from unknown (HELO lanparty.mthmarketing.com) (216.190.203.151)
 by mail.kydance.net with SMTP; 30 May 2003 15:26:22 -

^^ Forgeglobal.com returning it to Kydance.net re-addressed. Notice the
'delivered-to' header.

Received: (qmail 15992 invoked by uid 89); 30 May 2003 15:26:21 -
Received: from unknown (HELO arsenic.mthmarketing.com) (216.190.203.134)
 by 0 with DES-CBC3-SHA encrypted SMTP; 30 May 2003 15:26:21 -

^^ Forgeglobal.com recieving it from Kydance.net


Received: (qmail 27976 invoked by uid 81); 30 May 2003 15:26:21 -
Received: from 216.190.203.130
 (SquirrelMail authenticated user mwalker%kydance.net)
 by squirrelmail.kydance.net with HTTP;
 Fri, 30 May 2003 09:26:21 -0600 (MDT)

^^ SquirrelMail delivering it to Qmail.


Message-ID:
 [EMAIL PROTECTED]
In-Reply-To: [EMAIL PROTECTED]
References:
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
Date: Fri, 30 May 2003 09:26:21 -0600 (MDT)
Subject: RE: Testing
From: Matthew Walker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]

^^ I know this isn't authoritative, but notice the correct
forgeglobal.com address here.


User-Agent: SquirrelMail/1.4.0
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3
Importance: Normal




Re: [toaster] Odd Delivery Problems...

2003-05-30 Thread Matthew Walker
Anyone have any more insight on this? I've double and triple checked the
configuration and DNS entries for both machines involved, and they're
configured just fine, and both recieving mail from other machines just fine.

The issue is /specifically/ when sending mail from the machine that hosts
kydance.net to the machine that hosts forgeglobal.com. I've now discovered
that any mail sent from any domain on the kydance.net machine destined for
the forgeglobal.com machine gets it's domain rewritted to kydance.net by the
forgeglobal.com machine, and sent back.

I'm at wits end... Help?

Matthew Walker said:
 Tom Collins said:
 On Monday, May 19, 2003, at 02:59  PM, Matthew Walker wrote:
 However, when I try and send mail from kydance.net to
 forgeglobal.com, the mail gets delivered to kydance.net. Looking at the
 headers and logs, I can see that the message does in fact get
 delivered to
 the machine that hosts forgeglobal.com. However, it then gets
 delivered to
 kydance.net.

 Check the MX records for each hostname, along with the contents of the
 following files on each server:

 /var/qmail/control/locals
 Kydance.net server:
 arsenic.mthmarketing.com

 ForgeGlobal.com server:
 lanparty.mthmarketing.com

 /var/qmail/control/virtualdomains
 Kydance.net server:
 kydance.net:kydance.net
 kaneq.com:kaneq.com
 slamr.org:slamr.org
 tarynn.net:tarynn.net
 companyrank.com:companyrank.com
 culvercrest.com:culvercrest.com
 vorkink.com:vorkink.com
 witrailblazers.info:witrailblazers.info
 we-rank-media.com:we-rank-media.com
 sacreddragons.com:sacreddragons.com

 ForgeGlobal.com server:
 test.com:test.com
 forgeglobal.com:forgeglobal.com
 missionties.com:missionties.com
 lanpartyinc.com:lanpartyinc.com
 thewildernesswoods.com:thewildernesswoods.com

 /var/qmail/control/rcpthosts
 Kydance.net server:
 arsenic.mthmarketing.com
 kydance.net
 kaneq.com
 slamr.org
 tarynn.net
 companyrank.com
 culvercrest.com
 vorkink.com
 witrailblazers.info
 we-rank-media.com
 sacreddragons.com

 ForgeGlobal.com server:
 lanparty.mthmarketing.com
 test.com
 forgeglobal.com
 missionties.com
 lanpartyinc.com
 thewildernesswoods.com

 /var/qmail/control/morercpthosts
 Kydance.net server:
 meubox.net

 ForgeGlobal.com Server:
 empty

 /var/qmail/users/assign

 Kydance.net server:
 +kydance.net-:kydance.net:1028:408:/home/vpopmail/domains/kydance.net:-::
 +kaneq.com-:kaneq.com:1028:408:/home/vpopmail/domains/kaneq.com:-::
 +slamr.org-:slamr.org:1028:408:/home/vpopmail/domains/slamr.org:-::
 +tarynn.net-:tarynn.net:1028:408:/home/vpopmail/domains/tarynn.net:-::
 +companyrank.com-:companyrank.com:1028:408:/home/vpopmail/domains/companyrank.com:-::
 +culvercrest.com-:culvercrest.com:1028:408:/home/vpopmail/domains/culvercrest.com:-::
 +vorkink.com-:vorkink.com:1028:408:/home/vpopmail/domains/vorkink.com:-::
 +witrailblazers.info-:witrailblazers.info:1028:408:/home/vpopmail/domains/witrailblazers.info:-::
 +we-rank-media.com-:we-rank-media.com:1028:408:/home/vpopmail/domains/we-rank-media.com:-::
 +sacreddragons.com-:sacreddragons.com:1028:408:/home/vpopmail/domains/sacreddragons.com:-::

 ForgeGlobal.com Server:
 +test.com-:test.com:89:89:/var/vpopmail/domains/test.com:-::
 +forgeglobal.com-:forgeglobal.com:89:89:/var/vpopmail/domains/forgeglobal.com:-::
 +missionties.com-:missionties.com:89:89:/var/vpopmail/domains/missionties.com:-::
 +lanpartyinc.com-:lanpartyinc.com:89:89:/var/vpopmail/domains/lanpartyinc.com:-::
 +thewildernesswoods.com-:thewildernesswoods.com:89:89:/var/vpopmail/domains/thewildernesswoods.com:-::


 Make sure that forgeglobal.com is only listed on the server hosting it,
 and kydance.net is likewise, only listed on the server hosting it.

 Make sure that the address you're sending to isn't an alias to an
 address at kydance.net.

 Definately no aliases. The ForgeGlobal.com domain recieves email just fine
 from everyone but kydance.net addresses. Those get looped back to
 Kydance.net by the ForgeGlobal.com server.

 Matthew Walker




Re: [toaster] Odd Delivery Problems...

2003-05-30 Thread Matthew Walker
Well, I got recordio working only to discover that the servers talk to
eachother using STARTTLS, so I can't tell what's being transmitted. Anyone
know how to turn it off so I can get a cleartext message?


Re: [toaster] Odd Delivery Problems...

2003-05-30 Thread Matthew Walker
Matthew Walker said:
 Well, I got recordio working only to discover that the servers talk to
 eachother using STARTTLS, so I can't tell what's being transmitted. Anyone
 know how to turn it off so I can get a cleartext message?


*scratches head*

I haven't changed any configurations, and it just started sending messages
properly.

I was doing more tests to see if I could figure anything out from headers
and qmail-send logs, and now I can't duplicate the problem. despite the fact
that it happened just earlier today.

Well... Until further notice, the problem is solved.


Re: [toaster] Qmail Toaster Not Logging smtpd

2002-12-05 Thread Matthew Walker
Bill Shupp said:
 On Thursday, December 5, 2002, at 12:55  PM, Matthew Walker wrote:

 Add the -v argument to the tcpserver line in /service/qmail-smtpd/run,
 then restart qmail-smtpd:

 svc -du /service/qmail-smtpd

 That fixed it. Thanks!

 Well, it wasn't broken.  qmail-smtpd doesn't log anything as far as I  can
 tell.  By using -v, tcpserver is verbose and logs all connections.

 Bill

And yet we had old logs sitting there from previous to two months ago...
Odd. Too bad I nuked them in the process of trying to troubleshoot it
myself.