Re: [vchkpw] rblsmtpd with vchkpw

2006-04-04 Thread Fernando Milovich

Thank so much to all people that respond my question.
I think i´ll be use a custom rbl zone first, and then another 
implementation.


Sorry about speeling and regards,

Fernando Milovich

- Original Message - 
From: "John Simpson" <[EMAIL PROTECTED]>

To: 
Sent: Tuesday, April 04, 2006 2:46 PM
Subject: Re: [vchkpw] rblsmtpd with vchkpw




Re: [vchkpw] Re: 5.4.15 onchange patch

2006-04-04 Thread John Simpson

On 2006-04-03, at 1442, John Simpson wrote:

On 2006-04-03, at 0727, Rick Widmer wrote:


In the patch, how do you separate password and real_name in  
add_user?  I know the help doesn't mention it, but I think it  
requires a real name value to put into GECOS.  It is at least an  
option.


good point. i totally missed that, and i even changed one of the  
_TOKENS strings to be called GECOS_TOKENS after seeing that it was  
only used the one time. now we see why it's better to have several  
eyes looking at the code.


this is going to be another problem. since a password may contain  
spaces, and a gecos may also contain spaces, there is no reliable  
way to write such a parser unless there is a specific delimiter  
between them... and since a password, by definition, can contain  
any printable character (ASCII 0x21 - 0x7E) the delimiter cannot be  
one of these.


my honest answer is this: README.vpopmaild doesn't talk about there  
being a gecos field, neither does the vpopmaild wiki entry. in this  
one case, because the documentation doesn't mention it and because  
it causes a problem, i would say to pull the gecos functionality  
out of the add_user command, and add a "gecos" verb to  
"mod_user" (which needs one anyway.)


there will be a newer patch on my web site this evening (i would do  
it now but i need to run some errands first.)


actually, README.vpopmaild DID have a mention of "long_name", i had  
just never noticed it.


the updated version of README.vpopmail on my web site now does not  
have this, and there is also a "vpopmail-5.4.15-cslogin.2.patch"  
where the add_user code no longer looks for a gecos name. when it  
calls adduser() to create the mailbox, it passes the mailbox name as  
the gecos name, so the new mailbox will have the same name as the  
mailbox itself.


--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   <[EMAIL PROTECTED]> |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--




PGP.sig
Description: This is a digitally signed message part


Re: [vchkpw] How to Unsubscribe

2006-04-04 Thread Jeremy Kitchen
On Tuesday 04 April 2006 10:15, sanskar sony wrote:
> Would anyone please let me know , How to unsubscribe from this group?

we've already told you.

If you still can't figure out out, view the source of this message, and look 
for the "List-Unsubscribe" header.

-Jeremy
>
> Either i want everything or nothing.

I assume now, that this is your signature.  You really should make that more 
clear, as right now it is not clear.  Notice how my signature is separated 
from my message body with a '--'.  If your MUA won't automatically put this 
in for you, a simple 'hack' would be to simply add the '--' to the top line 
of your signature.

-- 
Jeremy Kitchen ++ [EMAIL PROTECTED]

In the beginning was The Word and The Word was Content-type: text/plain
  -- The Word of Bob.

And the lord said unto John; Come forth and receive eternal life. John came
fifth and won a toaster.


pgpohyg5A23Bc.pgp
Description: PGP signature


[vchkpw] How to Unsubscribe

2006-04-04 Thread sanskar sony
Would anyone please let me know , How to unsubscribe from this group?Either i want everything or nothing.
		Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less.

Re: [vchkpw] rblsmtpd with vchkpw

2006-04-04 Thread John Simpson

On 2006-04-05, at 0002, Fernando Milovich wrote:
I mean bypass RBL is the client is authenticated. But it seems to  
be no possibly.
This problem is because our customers use ISP connections like ADSL  
and Dial Up and these connections are blocked by CBL at spamhaus.org

I think i´ll have to change the RBL checker.


set up a second SMTP service for your users. it should not use port  
25, it should not accept mail at all unless the client has sent a  
successful AUTH command, and it should not accept an AUTH command  
unless the connection is encrypted (via SSL or TLS.)


depending on the qmail patches you are using, the second and third  
conditions may not be possible for you- but the first condition,  
running an SMTP service on some other port, anybody can do. usually  
the biggest mental hurdle is realizing that it is possible to run  
multiple SMTP services on the same machine.


just take the "run" script from your existing service and copy it to  
a new service directory... change the port number from 25 (or "smtp",  
if that's how it's listed in your file) to 587, and fire it up. or  
run it on port 465, substitute sslserver for tcpserver, make a key  
pair, and you're up and running with an SSL-secured SMTP server.


http://qmail.jms1.net/smtp-service.shtml is a web page i wrote which  
explains how to set up SMTP services. it's slanted towards people who  
use my combined patch file (which you may want to take a look at-  
lots of tasty goodies in there) but the basic idea is the same for  
any qmail system- you can have as many SMTP services as you need, as  
long as each one has its own IP/PORT combination. it may contain some  
helpful information, and it certainly explains things in more detail  
than this message. enjoy.


--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   <[EMAIL PROTECTED]> |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--




PGP.sig
Description: This is a digitally signed message part


Re: [vchkpw] rblsmtpd with vchkpw

2006-04-04 Thread Jeremy Kitchen
On Monday 03 April 2006 07:24, [EMAIL PROTECTED] wrote:
> Hi, there is any rule to put in ~vpopmail/etc/tcp.smtp for one user has
> been authenticated not be IP checked on rblsmtpd ? I think that can be
> possible using environment variables, may not.
>
> Something like this:
>
> 111.111.111.111:allow,RBLSMTPD=""

if you are authenticating with pop-before-smtp, this should be a fairly 
trivial change to the vpopmail code.  Look for the string 'RELAYCLIENT' in 
the vpopmail source and slap in RBLSMTPD="" into there.

If you're using smtp auth only, you really can't do what you are asking, other 
than recoding qmail-smtpd to integrate rblsmtpd support as well as smtp auth 
*shrugs*

-Jeremy

-- 
Jeremy Kitchen ++ [EMAIL PROTECTED]

In the beginning was The Word and The Word was Content-type: text/plain
  -- The Word of Bob.

And the lord said unto John; Come forth and receive eternal life. John came
fifth and won a toaster.


pgpgaomySlwun.pgp
Description: PGP signature


Re: [vchkpw] rblsmtpd with vchkpw

2006-04-04 Thread Michael Krieger
Use a scoring based RBL check.  rblsmtpd denies all connections existing in RBLs  You could modify it to do a scoring algorithm if you wanted, finding only the popular entries.  SpamAssassin (with simscan) will do what you want, adding a score based  on the credibility and error rates of each RBL.  So something in  one RBL will have a higher Spam score (and combined with other features  may throw it over the edge), but something in three RBLs will be enough  to reject the message.You could of course just find RBLs that don't block your customers or have good removal rules.-M  Fernando Milovich <[EMAIL PROTECTED]> wrote:  I mean bypass RBL is the client is authenticated. But it seems to be no possibly.This problem is because our customers use ISP connections like ADSL and Dial Up and
 these connections are blocked by CBL at spamhaus.orgI think i´ll have to change the RBL checker.Thanks so much.- Original Message - From: "John Simpson" To: Sent: Monday, April 03, 2006 7:18 PMSubject: Re: [vchkpw] rblsmtpd with vchkpw