Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread Alex Povolotsky

[EMAIL PROTECTED] wrote:

I have a fairly new installation of Qmail running, and when it works, 
it works great. But, from time to time it will begin to time out.
 
There are zero error messages appearing in any of the logs 
/var/log/messages or /var/log/qmail.
 
All services are running
 
A packet sniffer shows the entire session going as what would appear 
to be normal. I receive the final POP Request: QUIT packet and the 
mail server replying POP Response: +OK
 
Though the mail will not leave Outlook
 
This is a LAN wide issue on all workstations.
 
The only thing that looks out of the nor is in my running processes 
that are listed below from doing a ps -aux
 
Note: network issue are ruled out. The network is entirely Cisco and 
wide open on the inside and confirmed error free at router and 
switching level.
 
This error occurs when trying to send mail only and can be quickly 
band-aided by running a restore script of the master configuration 
from weeks back.
 
Surely you can see this as being a pain.
 
This problem occurs daily
 
MY ps -aux
 

vpopmail  4417  0.0  0.2  3500 1176 ?S00:05   0:00 
/var/qmail/bin/qm
qscand4418  0.0  0.7  8984 3988 ?S00:05   0:00 
/usr/bin/perl -T
vpopmail  4476  0.0  0.2  3500 1376 ?S00:19   0:00 
/var/qmail/bin/qm
qscand4477  0.0  0.9  9664 4780 ?S00:19   0:00 
/usr/bin/perl -T


Are you running some kind of perl-based filter forking or starting for 
every message? This is a sure way to bring any production system down.


Alex.




Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread Adi Pircalabu
On Wed, 6 Jul 2005 17:50:17 EDT
[EMAIL PROTECTED] wrote:

 vpopmail   4417  0.0  0.2  3500 1176  ?S 00:05   0:00 
 /var/qmail/bin/qm
 qscand4418   0.0  0.7  8984 3988 ? S00:05   0:00 
 /usr/bin/perl -T

Hello, is it qmail-scanner calling spamassassin for every qmail-queue
process spawned? If this is your case, depending on your hardware
resources and email traffic, increasing incoming / local / remote /
concurrency limits is the perfect method of bringing your system down
to its knees, and below :)
If I were you, I should first reconfigure qmail-scanner to not use
spamassassin at all, I'd call SA only for local delivery. After all,
would you like to have your outgoing mails marked (even accidentally)
as spam? Don't think so ;)
I could never understand why on earth would any reasonable admin call a
perl program from another perl program for every message delivered by a
mailserver.

-- 
Adi Pircalabu (PGP Key ID 0x04329F5E)


-- 
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://www.bitdefender.com/



[vchkpw] Re: smtp-auth problem

2005-07-07 Thread Peter Palmreuther
Hello List,

On Wednesday, July 6, 2005 at 3:36:39 PM patrick wrote:

Please post the output of

/var/qmail/bin/qmail-showctl

 rcpthosts: (Default.) SMTP clients may send messages to any recipient.

*THIS* is your problem: you don't have any domain in 'rcpthosts' and
therefore your qmail-smtpd feels responsible for *all* domains = your
installation is an open relay.

Put

,-
| linux.koneg.de
| koneg.de
| gs-altneudorf.de
`-

into 'rcpthosts', this will make your installation accept only mail to
one of these domains, unless RELAYCLIENT is set (which is done if you
SMTP-AUTH). Additionally follow Jeremys advice to delete these domains
from 'locals' and insert them formatted correctly into
'virtualdomains' to make vpopmail handle them again.
-- 
Best regards
Peter Palmreuther

Your true value depends entirely on what you are compared with.



Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread BSUMRALLL



Good point, I had increased the concurrency limits to 255 based on a 
previous suggestion by another gentleman. The concurrencies were running 30/30, 
you could see what was filling up based on the behavior.

tail -f /var/log/qmail/qmail-smtp/current show this and nothing 
else:@400042cc596c30281e0c tcpserver: end 24543 status 
256@400042cc596c30283194 tcpserver: status: 
29/30@400042cc596c30284134 tcpserver: status: 
30/30@400042cc596c302850d4 tcpserver: pid 30981 from 
12.41.204.71@400042cc59810249bb44 tcpserver: ok 30981 
entekbuckets.com:192.168.0.49:25 
dcmgatemt01.hertz.com:12.41.204.71::33001@400042cc5981024f54dc 
tcpserver: end 30981 status 0@400042cc5981024f647c tcpserver: status: 
29/30@400042cc5981024f741c tcpserver: status: 
30/30@400042cc5981024f7fd4 tcpserver: pid 31079 from 
65.54.175.87@400042cc59810811fc94 tcpserver: ok 31079 
entekbuckets.com:192.168.0.49:25 
bay104-dav15.bay104.hotmail.com:65.54.175.87::1089

Is your suggestion to lower the concurrency limits back to 30 and disable 
SA for outgoing email?
If so, where do I find this switch?

Brad Sumrall


Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread Adi Pircalabu
On Thu, 7 Jul 2005 03:43:25 EDT
[EMAIL PROTECTED] wrote:

 Is your suggestion to lower the concurrency limits back to 30 and
 disable  SA for outgoing email?

I'd rather suggest modifying the concurrency values after getting rid
of spamassassin from qq and testing the behaviour.

 If so, where do I find this switch?

You can search for scanner_array in your qmail-scanner wrapper and
take spammassassin out of there. Alternately, if you use qmail-scanner
ONLY for SpamAssassin, disable it completely.

-- 
Adi Pircalabu (PGP Key ID 0x04329F5E)


-- 
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://www.bitdefender.com/



AW: [vchkpw] Re: smtp-auth problem

2005-07-07 Thread patrick_gehm

Hello List,

On Wednesday, July 6, 2005 at 3:36:39 PM patrick wrote:

Please post the output of

/var/qmail/bin/qmail-showctl

 rcpthosts: (Default.) SMTP clients may send messages to any recipient.

*THIS* is your problem: you don't have any domain in 'rcpthosts' and
therefore your qmail-smtpd feels responsible for *all* domains = your
installation is an open relay.


Yepp...! That's what I figured out yesterday night... All the time I thought, 
for any reason, that smtp-auth controls every incoming mail and blocks every 
mail without a vpopmail account, while rcpthosts must be open... but it 
actually let's vpopmail-users send mail to remote clients, while the sending 
possibility is actually blocked by the rcpthosts-file... I feel quite ashame 
for having the solution so obviously in front of me without seeing it... But 
thanx to all of you... Now everything works fine! (Receiving email did't work 
because I had the domains in my locals-file)
Regards
Patrick Gehm





Put

,-
| linux.koneg.de
| koneg.de
| gs-altneudorf.de
`-

into 'rcpthosts', this will make your installation accept only mail to
one of these domains, unless RELAYCLIENT is set (which is done if you
SMTP-AUTH). Additionally follow Jeremys advice to delete these domains
from 'locals' and insert them formatted correctly into
'virtualdomains' to make vpopmail handle them again.
-- 
Best regards
Peter Palmreuther

Your true value depends entirely on what you are compared with.



[vchkpw] Disable local relay

2005-07-07 Thread michele



Hi, it's possible to 
disable relaying for local domains?
Our server host mail 
for domain.com; if i try to send a message from anothercomputerto [EMAIL PROTECTED], using our server as 
smtp server, it does allow relay: there is a way to prevent 
this?
Thanks


Re: [vchkpw] Disable local relay

2005-07-07 Thread Tom Collins

On Jul 7, 2005, at 10:47 AM, michele wrote:

Hi, it's possible to disable relaying for local domains?
Our server host mail for domain.com; if i try to send a message from 
another computer to [EMAIL PROTECTED], using our server as smtp 
server, it does allow relay: there is a way to prevent this?

Thanks


That isn't relay -- your server is the final destination for domain.com 
so it won't relay it to another server.


What are you trying to accomplish?  Your server needs to operate that 
way so people on the Internet can send mail to domain.com.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com




RE: [vchkpw] Disable local relay

2005-07-07 Thread michele
Ok, sorry I made a mistake :)

 
 On Jul 7, 2005, at 10:47 AM, michele wrote:
  Hi, it's possible to disable relaying for local domains?
  Our server host mail for domain.com; if i try to send a 
 message from 
  another computer to [EMAIL PROTECTED], using our server as smtp 
  server, it does allow relay: there is a way to prevent this?
  Thanks
 
 That isn't relay -- your server is the final destination for 
 domain.com so it won't relay it to another server.
 
 What are you trying to accomplish?  Your server needs to 
 operate that way so people on the Internet can send mail to 
 domain.com.
 





[vchkpw] Using alternate sending IP on outbound mail

2005-07-07 Thread Tom Collins
I started writing an email to the list asking for help, and in the 
process I found a solution.  I figured I'd share the solution, as 
others might benefit from it as well.


A spammer exploited a formmail script on my server to send a bunch of 
spam to aol users.  As a result, AOL has temporarily blacklisted my IP 
address.  I was able to clean up the remaining spam in the queue, but 
now legitimate email to aol.com was getting deferred.


My server (Linux FC3) has a secondary IP on it's network interface, so 
I tried to find a way to route outbound mail via that IP instead of the 
primary (blacklisted) IP.


The solution was actually quite simple and clean.  I added a route for 
AOL's mailserver netblocks to the server's routing table and told them 
to use interface eth0:0 instead of eth0.  Substitute your server's 
actual gateway for 123.45.67.89 and the netblocks you want to re-route 
for 64.12.0.0 and 205.188.0.0.


# route add -net 64.12.0.0 netmask 255.255.0.0 gw 123.45.67.89 dev 
eth0:0
# route add -net 205.188.0.0 netmask 255.255.0.0 gw 123.45.67.89 dev 
eth0:0


In about a day or so (once the blacklisting is over), I'll delete the 
routes.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com




Re: [vchkpw] Using alternate sending IP on outbound mail

2005-07-07 Thread mike
I ran into a similar problem a while ago. The easiest way with qmail is
just to apply this patch and in control/outgoingip put the ip you want
mail sent out on.

http://www.qmail.org/outgoingip.patch

:)

--
Mike Garrison

 I started writing an email to the list asking for help, and in the
 process I found a solution.  I figured I'd share the solution, as
 others might benefit from it as well.

 A spammer exploited a formmail script on my server to send a bunch of
 spam to aol users.  As a result, AOL has temporarily blacklisted my IP
 address.  I was able to clean up the remaining spam in the queue, but
 now legitimate email to aol.com was getting deferred.

 My server (Linux FC3) has a secondary IP on it's network interface, so
 I tried to find a way to route outbound mail via that IP instead of the
 primary (blacklisted) IP.

 The solution was actually quite simple and clean.  I added a route for
 AOL's mailserver netblocks to the server's routing table and told them
 to use interface eth0:0 instead of eth0.  Substitute your server's
 actual gateway for 123.45.67.89 and the netblocks you want to re-route
 for 64.12.0.0 and 205.188.0.0.

 # route add -net 64.12.0.0 netmask 255.255.0.0 gw 123.45.67.89 dev
 eth0:0
 # route add -net 205.188.0.0 netmask 255.255.0.0 gw 123.45.67.89 dev
 eth0:0

 In about a day or so (once the blacklisting is over), I'll delete the
 routes.

 --
 Tom Collins  -  [EMAIL PROTECTED]
 QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
 You don't need a laptop to troubleshoot high-speed Internet:
 sniffter.com






Re: [vchkpw] Re: smtp-auth problem

2005-07-07 Thread Jeremy Kitchen
On Thursday 07 July 2005 02:31 am, Peter Palmreuther wrote:
 Hello List,

 On Wednesday, July 6, 2005 at 3:36:39 PM patrick wrote:
 Please post the output of
 
 /var/qmail/bin/qmail-showctl
 
  rcpthosts: (Default.) SMTP clients may send messages to any recipient.

 *THIS* is your problem: you don't have any domain in 'rcpthosts' and
 therefore your qmail-smtpd feels responsible for *all* domains = your
 installation is an open relay.

while this certainly is the problem, it's not as you describe.

if rcpthosts exists, but is empty, clients must have RELAYCLIENT to send 
messages.

If rcpthosts doesn't exist, then you are an open relay.

-Jeremy

-- 
Jeremy Kitchen + kitchen @ #qmail #gentoo on EFnet IRC
kitchen at scriptkitchen dot com


pgp2GI9vFPIwi.pgp
Description: PGP signature


Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread Jeremy Kitchen
On Wednesday 06 July 2005 06:50 pm, Paul Theodoropoulos wrote:
 At 03:57 PM 7/6/2005, you wrote:
 In a message dated 7/6/2005 3:46:31 P.M. Pacific Daylight Time,
 [EMAIL PROTECTED] writes:
 change the CONCURRENCY environment variable
 
 Where can I locate the change the CONCURRENCY environment variables?
 
 Brad Sumrall

 assuming you're running daemontools,

  cd /service/smtpd/env/CONCURRENCY
  echo 255  CONCURRENCY

 svc -t /service/smtpd

CONCURRENCY is not an environment variable tcpservers afaik.  
Also, /service/smtpd/env would not be read unless you have an envdir 
invocation.

I would suggest, rather, having the OP look at the -c flag to tcpserver in his 
startup script, rather than giving very specific (and probably not fitting 
his setup) instructions :)

-Jeremy

-- 
Jeremy Kitchen + kitchen @ #qmail #gentoo on EFnet IRC
kitchen at scriptkitchen dot com


pgpkVme61ftms.pgp
Description: PGP signature


[vchkpw] Fwd: 2 quest: variables that could be used in tcp.smtp? chkusr version?

2005-07-07 Thread hnet


Hi
This is my first post to this list.
I've found this in one of simscan docs:
:allow,CHKUSER_RCPTLIMIT=15,CHKUSER_WRONGRCPTLIMIT=3,QMAILQUEUE=/var/qma
:il/bin/simscan
I'm using Shupp toaster last version + spamassassin, clamav, simscan.
It seems to be CHKUSER variables said to be 2.0. What version is toaster
patch?
2- Where could I find docs to get all the variables that could be used in
tcp.smtp fime for instance or somewhere else in qmail and/or related options?

Thanks
Helio Nunes



Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread BSUMRALLL



Hello all!

First off, I would truly like to thank all of the 
people who have responded to my post. Your level of support has been all so 
helpful. Everyone that has passed my emailhas beeninvestigated 
deeply.

The best part is that I have more question due to 
the enlightenment I now have, and a few suggestions for the 
developers.

Quickly, my background is USMC and self taught 
training. My expertise is in routing / networks / and apps that support them. I 
have about 6 collage credits towards programming, so my c++ is very basic with 
many memory leaks etc...in my programs which is why I leave most of that 
to you guys (and girls!).

So, as a knuckle head who stepped away from 
Microsoft about 3 years ago to Linux (gratefully), I think I am slightly past 
novice. So my questions are very legit for the typical admin embracing 
QMail.

Quick follow up because most of the previous emails 
have been chopped from the replies.

My original problem was qmail failing.

After a day or so or less, outgoing emails would 
not make it out. Our typical mail program is MS Outlook. (Yes, I know, MS sucks, 
but preferred with my customers).

MS Outlook would just sit there and time out on an 
outgoing email request.

A gentlemen pointed out he my CONCURRENCY limits 
were max-ing out. They were set to 30 for an office of about 23 workstations 
(makes sense because Microsoft does not like to let go of stuff).

I set the limits to the max.

Ok, someone pointed out that this was not a good 
idea unless I wanted my server to come to it's knees due to a memory flood. I 
began to see this response and switched it to 115.

Ok, it seems to be doing ok now, but...

(yes, all can criticize me on this, but the 
situation merits it right now)
This server right now is also being used as a 
master file server for engineering data.

This 115 might very well shoot me in the foot very 
soon due to load issues

I was told to disable spamassasin for out going 
emails. 
(good point but how?)

Or disable it all together (can't, this IP was 
identified and a prime spam source when MS Exchange was running the email (go 
figure, someone hacked Exchange 2003).

 I just had a gentleman refer to a -c flag 
adjustment (Dude, chu wanna come work for me? You are on a level way above 
me. Keep up the good work!)

I followed the QMailRocks installation to the "t" 
for this Qmail installation.

Ok, the nuts and bolts,

I can find no indication that I am scanning 
outgoing email at all, in the Qmail scanner. 

How do I find/verify and disable?

What are the key apps I should launch to see what 
or who has control in qmail issues and why (i am aware of the obvious 
/var/log/ and netstat and ps and the other very basics.)

What are the recommendations to tune this system 
correctly (this is a new install and 3rd qmail install for myself)\

Suggestion for the developers

A simple question during configure for the expected number of users... 
To prevent this obvious and known issue.

Thank YOU, Thank YOU everyone!!!

Brad Sumrall


Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread BSUMRALLL



Let's make my last thread public as well,,, some good info will come from 
it!!!

Brad


[vchkpw] new vpopmail install problem

2005-07-07 Thread W.D.McKinney
Hello,

Looking forward to help here with vpopmal  maildir setup.
I have a qmail MTA config:

-
# ./qmail-showctl
qmail home directory: /var/qmail.
user-ext delimiter: -.
paternalism (in decimal): 2.
silent concurrency limit: 120.
subdirectory split: 23.
user ids: 1001, 1002, 1003, 0, 1004, 1005, 1006, 1007.
group ids: 1001, 1002.

badmailfrom: (Default.) Any MAIL FROM is allowed.

bouncefrom: (Default.) Bounce user name is MAILER-DAEMON.

bouncehost: (Default.) Bounce host name is avocado.akwireless.net.

concurrencylocal: (Default.) Local concurrency is 10.

concurrencyremote: (Default.) Remote concurrency is 20.

databytes: (Default.) SMTP DATA limit is 0 bytes.

defaultdomain: Default domain name is avocado.akwireless.net.

defaulthost: (Default.) Default host name is avocado.akwireless.net.

doublebouncehost: (Default.) 2B recipient host: avocado.akwireless.net.

doublebounceto: (Default.) 2B recipient user: postmaster.

envnoathost: (Default.) Presumed domain name is avocado.akwireless.net.

helohost: (Default.) SMTP client HELO host name is avocado.akwireless.net.

idhost: (Default.) Message-ID host name is avocado.akwireless.net.

localiphost: (Default.) Local IP address becomes avocado.akwireless.net.

locals:
Messages for localhost are delivered locally.
Messages for avocado.akwireless.net are delivered locally.

me: My name is avocado.akwireless.net.

percenthack: (Default.) The percent hack is not allowed.

plusdomain: Plus domain name is akwireless.net.

qmqpservers: (Default.) No QMQP servers.

queuelifetime: (Default.) Message lifetime in the queue is 604800 seconds.

rcpthosts:
SMTP clients may send messages to recipients at localhost.
SMTP clients may send messages to recipients at avocado.akwireless.net.
SMTP clients may send messages to recipients at akwireless.net.
SMTP clients may send messages to recipients at wdm.com.

morercpthosts: (Default.) No effect.

morercpthosts.cdb: (Default.) No effect.

smtpgreeting: (Default.) SMTP greeting: 220 avocado.akwireless.net.

smtproutes: (Default.) No artificial SMTP routes.

timeoutconnect: (Default.) SMTP client connection timeout is 60 seconds.

timeoutremote: (Default.) SMTP client data timeout is 1200 seconds.

timeoutsmtpd: (Default.) SMTP server data timeout is 1200 seconds.

virtualdomains:
Virtual domain: avocado.akwireless.net:avocado.akwireless.net

defaultdelivery: I have no idea what this file does.

concurrencyincoming: I have no idea what this file does.

rcpthosts.lock: I have no idea what this file does.

virtualdomains.lock: I have no idea what this file does.

locals.lock: I have no idea what this file does.
--

For /var/qmail/control/defaultdelivery I have 

./Maildir/

Yes, /var/qmail/bin/qmail-showctl says defaultdelivery: I have no idea what 
this file does.

I haven't been able to get maildir's to work yet. Here's the log when I try to 
send to a test account.


2005-07-07 09:41:49.255292500 info msg 1955170: bytes 912 from [EMAIL 
PROTECTED] qp 1723 uid 1002
2005-07-07 09:41:49.363329500 starting delivery 10: msg 1955170 to local [EMAIL 
PROTECTED]
2005-07-07 09:41:49.363442500 status: local 1/10 remote 0/20
2005-07-07 09:41:49.367860500 delivery 10: failure: 
Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/
2005-07-07 09:41:49.368645500 status: local 0/10 remote 0/20
200

(Sorry about the word wrap, it's because of our webmail app.)

Here's the vpopmail directory structure:

# ls -la /home/vpopmail
total 32
drwxr-xr-x  8 vpopmail vchkpw 4096 Jul  6 11:23 .
drwxrwsr-x  6 root staff  4096 Jul  7 06:24 ..
drwxr-xr-x  2 vpopmail vchkpw 4096 Jul  6 11:23 bin
drwxr-xr-x  4 vpopmail vchkpw 4096 Jul  6 11:23 doc
drwx--  3 vpopmail vchkpw 4096 Jul  6 11:24 domains
drwxr-xr-x  2 vpopmail vchkpw 4096 Jul  7 09:56 etc
drwxr-xr-x  2 vpopmail vchkpw 4096 Jul  6 11:23 include
drwxr-xr-x  2 vpopmail vchkpw 4096 Jul  6 11:23 lib


avocado:/var/qmail/control# ls -la 
/home/vpopmail/domains/avocado.akwireless.net/
total 40
drwx--  6 vpopmail vchkpw 4096 Jul  6 15:25 .
drwx--  3 vpopmail vchkpw 4096 Jul  6 11:24 ..
-rw---  1 vpopmail vchkpw   34 Jul  6 15:25 .dir-control
-rw---  1 vpopmail vchkpw   55 Jul  6 11:24 .qmail-default
-rw---  1 vpopmail vchkpw0 Jul  6 15:25 .vpasswd.lock
drwx--  3 vpopmail vchkpw 4096 Jul  6 15:25 dee
drwx--  3 vpopmail vchkpw 4096 Jul  6 11:25 deem
drwx--  3 vpopmail vchkpw 4096 Jul  6 15:25 jeanie
drwx--  3 vpopmail vchkpw 4096 Jul  6 11:24 postmaster
-rw---  1 vpopmail vchkpw  486 Jul  6 15:25 vpasswd
-rw---  1 vpopmail vchkpw 2622 Jul  6 15:25 vpasswd.cdb

I followed Life with qmail, and the Inter7 online instructions.
It's a Debian 3.1 install also. 

Any pointers on what to do now?

Thanks,
Dee





Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread Paul Theodoropoulos

At 05:36 PM 7/7/2005, you wrote:


On Wednesday 06 July 2005 06:50 pm, Paul Theodoropoulos wrote:

 assuming you're running daemontools,

  cd /service/smtpd/env/CONCURRENCY
  echo 255  CONCURRENCY

 svc -t /service/smtpd

CONCURRENCY is not an environment variable tcpservers afaik.
Also, /service/smtpd/env would not be read unless you have an envdir
invocation.

I would suggest, rather, having the OP look at the -c flag to 
tcpserver in his

startup script, rather than giving very specific (and probably not fitting
his setup) instructions :)


oops. 'my bad'. i've used the qmail-conf package for so long now, and 
it has the qmail 'look and feel' so much so that it is 
indistinguishable from more recent djb packages (djbdns for example).


http://www.din.or.jp/~ushijima/qmail-conf.html

i'd never go anywhere without it. makes life significantly easier.

but fubars everything if one forgets that it's not default qmail behaviour.

Paul Theodoropoulos
http://www.anastrophe.com
http://www.smileglobal.com




Re: [vchkpw] Qmail keeps failing!

2005-07-07 Thread Kyle Wheeler

On Thursday, July  7 at 09:18 PM, quoth [EMAIL PROTECTED]:
I was told to disable spamassasin for out going  emails. (good point 
but how?)


Depends on how you have it all set up. I understand you use 
qmail-scanner? Basically, you want to unset QMAILQUEUE whenever 
RELAYCLIENT is set. The easiest way is to add a shell script to your run 
file. The basic run file looks like this:


   tcpserver ${TCPSERVER_OPTIONS} qmail-smtpd

So change it to:

   tcpserver ${TCPSERVER_OPTIONS} nospamforrelay.sh qmail-smtpd

Where nospamforrelay.sh is a shell script that looks like this:

   #!/bin/sh
   test `printenv | grep RELAYCLIENT`  unset QMAILQUEUE
   exec $*

Or disable it all together (can't, this IP was  identified and a prime 
spam source when MS Exchange was running the email (go  figure, 
someone hacked Exchange 2003).


What's that got to do with spam filtering for outgoing email?

I can find no indication that I am scanning  outgoing email at all, in 
the Qmail scanner.


Because that's not qmail-scanner's purview. Check out The Big Qmail 
Picture to familiarize yourself with how things work 
(http://www.nrg4u.com/). Qmail-scanner gets stuck between qmail-smtpd 
and qmail-queue, depending on the contents of the QMAILQUEUE environment 
variable.



How do I find/verify and disable?


Does outbound email get tagged with X-Spam-Status headers? If so, then 
you're scanning them unnecessarily. If not, then you're all set.


What are the key apps I should launch to see what  or who has control 
in qmail issues and why (i am aware of the obvious  /var/log/ and 
netstat and ps and the other very basics.)


vi /service/qmail-smtpd/run

;)

~Kyle
--
As we enjoy great Advantages from the Inventions of others we should be 
glad of an Opportunity to serve others by any Invention of ours, and 
this we should do freely and generously.

   -- Benjamin Franklin


signature.asc
Description: Digital signature


RE: [vchkpw] Qmail keeps failing!

2005-07-07 Thread Charles J. Boening



Brad,

If you need some help 
contact me off list. I'd be more than happy to donate an hour or so to 
help you get going.

A little advice. I 
hate stepping on the hard work of others but this isn't the first time I've 
heard of problems with the Qmail Rocks instructions. Follow Bill Shupp's toaster instructions of Life With 
Qmail and you shouldn't have any problems.

Here's how I do my 
installations. Usually takes me two to three hours total depending on how 
many brain-farts I have :) and how fast the Internet connection is. I 
usually just download everything as I need it. I use Mandrake so I urpmi 
stuff as needed as well.

You sound small enough 
that you probably don't need to use MySQL or PostgreSQL. I use PostgreSQL 
personally. If you are going to store your users in a database then you'll 
need to have that all installed prior to starting the process.

install qmail with no 
patches
install 
vpopmail
patch qmail with Bill 
Shupp's toaster patch and custom patch
reinstall 
qmail
install 
clamav
install 
razor-agents
install 
spamassassin
install 
ripmime
install 
simscan
install 
daemontools
install 
ucspi
install 
maildrop
install 
courier-auth
install 
courier-imap
install 
squirrelmail

I think that's about 
it. I'm sure I had a lapse in memory somewhere. I have BGP on the 
brain right now! :). The order should be about right too. I'm sure 
someone here will let me know if I missed anything. :) 

For your size of office, 
I'd say a concurrency of 20 should be sufficient. Looking back to your 
process list, it appears you have some process that's hanging and causing you to 
have too many concurrent connections. I run a small ISP with about 1500 
addresses on my server. I run my concurrency max at 100 but rarely see 
over 10 to 20 connections. My max today was close to 40. That's both 
inbound and outbound SMTP connections. Using simscan, I scan every message 
using SpamAssassin and ClamAV and don't have concurrency issues.


Hope you find this information useful.


Charlie



  
  
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  Sent: Thursday, July 07, 2005 6:19 PMTo: 
  vchkpw@inter7.comSubject: Re: [vchkpw] Qmail keeps 
  failing!
  
  Hello all!
  
  First off, I would truly like to thank all of the 
  people who have responded to my post. Your level of support has been all so 
  helpful. Everyone that has passed my emailhas beeninvestigated 
  deeply.
  
  The best part is that I have more question due to 
  the enlightenment I now have, and a few suggestions for the 
  developers.
  
  Quickly, my background is USMC and self taught 
  training. My expertise is in routing / networks / and apps that support them. 
  I have about 6 collage credits towards programming, so my c++ is very basic 
  with many memory leaks etc...in my programs which is why I leave most of 
  that to you guys (and girls!).
  
  So, as a knuckle head who stepped away from 
  Microsoft about 3 years ago to Linux (gratefully), I think I am slightly past 
  novice. So my questions are very legit for the typical admin embracing 
  QMail.
  
  Quick follow up because most of the previous 
  emails have been chopped from the replies.
  
  My original problem was qmail failing.
  
  After a day or so or less, outgoing emails would 
  not make it out. Our typical mail program is MS Outlook. (Yes, I know, MS 
  sucks, but preferred with my customers).
  
  MS Outlook would just sit there and time out on 
  an outgoing email request.
  
  A gentlemen pointed out he my CONCURRENCY limits 
  were max-ing out. They were set to 30 for an office of about 23 workstations 
  (makes sense because Microsoft does not like to let go of stuff).
  
  I set the limits to the max.
  
  Ok, someone pointed out that this was not a good 
  idea unless I wanted my server to come to it's knees due to a memory flood. I 
  began to see this response and switched it to 115.
  
  Ok, it seems to be doing ok now, but...
  
  (yes, all can criticize me on this, but the 
  situation merits it right now)
  This server right now is also being used as a 
  master file server for engineering data.
  
  This 115 might very well shoot me in the foot 
  very soon due to load issues
  
  I was told to disable spamassasin for out going 
  emails. 
  (good point but how?)
  
  Or disable it all together (can't, this IP was 
  identified and a prime spam source when MS Exchange was running the email (go 
  figure, someone hacked Exchange 2003).
  
   I just had a gentleman refer to a -c flag 
  adjustment (Dude, chu wanna come work for me? You are on a level way above 
  me. Keep up the good work!)
  
  I followed the QMailRocks installation to the "t" 
  for this Qmail installation.
  
  Ok, the nuts and bolts,
  
  I can find no indication that I am scanning 
  outgoing email at all, in the Qmail scanner. 
  
  How do I find/verify and disable?
  
  What are the key apps I should launch to see what 
  or who has control in qmail