[vchkpw] Chkuser (2.0.9): accepted any recipient for this domain why ?

2007-10-02 Thread zio budda
Hi all, this is my first message so any RTFM is wellcome.

I have installed netqmail 1.0.5 and chkuser 2.0.9 with #define
CHKUSER_STARTING_VARIABLE CHKUSER_START
but not with #define CHKUSER_ALWAYS_ON

This is my /etc/tcp.smtp

127.:allow,RELAYCLIENT=,SIMSCAN_DEBUG=3,QMAILQUEUE=/var/qmail/bin/simscan,CHKUSER_START=DOMAIN
:allow,QMAILQUEUE=/var/qmail/bin/simscan,NOP0FCHECK='1',SIMSCAN_DEBUG='3',CHKUSER_START=DOMAIN

My problem is that chkuser do not check if the rcpt to is an existent
user:

mail from: [EMAIL PROTECTED]
250 ok
rcpt to: [EMAIL PROTECTED]
250 ok

This is in the log:

@400047021726037c0954 CHKUSER accepted any rcpt: from 
[EMAIL PROTECTED]:: remote :x.x.x.x:y.y.y.y rcpt [EMAIL PROTECTED] :
accepted any recipient for this domain

Why accept any rcpt ?

this is my qmail-default of test.com domain:

| /opt/vpopmail/bin/vdelivermail '' bounce-no-mailbox

Ah, this works:
# cd /root/netqmail-1.05/netqmail-1.05
# export CHKUSER_START=DOMAIN
# ./qmail-smtpd
220 mailmw.merlinwizard.com ESMTP
mail from: [EMAIL PROTECTED]
CHKUSER accepted sender: from [EMAIL PROTECTED]:: remote
:unknown:unknown rcpt  : sender accepted
250 ok
rcpt to: [EMAIL PROTECTED]
CHKUSER rejected rcpt: from [EMAIL PROTECTED]:: remote
:unknown:unknown rcpt [EMAIL PROTECTED] : not existing recipient
550 5.1.1 sorry, no mailbox here by that name (chkuser)



Any help is wellcome.

M.

-- 
Michel 'ZioBudda' Morelli   [EMAIL PROTECTED]
Consulenza sistemistica in ambito OpenSource.
Sviluppo applicazioni web dinamiche (LAMP+Ajax)
Telefono: +39-3939890025 --  Fax: +39-0291390660

http://www.ziobudda.net ICQ: 58351764
http://www.ziobuddalabs.it  Skype: zio_budda
http://www.ajaxblog.it  MSN: [EMAIL PROTECTED]


Re: [vchkpw] Chkuser (2.0.9): accepted any recipient for this domain why ?

2007-10-02 Thread tonix (Antonio Nati)

Hi Michel,

you have to check if bouncing is enabled for each domain (DOMAIN 
setting in CHKUSER_START variable).


Check in each domain's .qmail-default or use qmailadmin and set 
bouncing on for the domain.


See 
http://www.interazioni.it/opensource/chkuser/documentation/faq/enabling.html#D1 
for more informations.


Ciao,

Tonino

At 11.15 02/10/2007, you wrote:

Hi all, this is my first message so any RTFM is wellcome.

I have installed netqmail 1.0.5 and chkuser 2.0.9 with #define 
CHKUSER_STARTING_VARIABLE CHKUSER_START

but not with #define CHKUSER_ALWAYS_ON

This is my /etc/tcp.smtp

127.:allow,RELAYCLIENT=,SIMSCAN_DEBUG=3,QMAILQUEUE=/var/qmail/bin/simscan,CHKUSER_START=DOMAIN
:allow,QMAILQUEUE=/var/qmail/bin/simscan,NOP0FCHECK='1',SIMSCAN_DEBUG='3',CHKUSER_START=DOMAIN 



My problem is that chkuser do not check if the rcpt to is an existent user:

mail from: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
250 ok
rcpt to: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
250 ok

This is in the log:

@400047021726037c0954 CHKUSER accepted any rcpt: from 
[EMAIL PROTECTED]:: remote :x.x.x.x:y.y.y.y rcpt 
mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] : accepted any 
recipient for this domain


Why accept any rcpt ?

this is my qmail-default of http://test.comtest.com domain:

| /opt/vpopmail/bin/vdelivermail '' bounce-no-mailbox

Ah, this works:
# cd /root/netqmail-1.05/netqmail-1.05
# export CHKUSER_START=DOMAIN
# ./qmail-smtpd
220 http://mailmw.merlinwizard.commailmw.merlinwizard.com ESMTP
mail from: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
CHKUSER accepted sender: from [EMAIL PROTECTED]:: remote 
:unknown:unknown rcpt  : sender accepted

250 ok
rcpt to: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
CHKUSER rejected rcpt: from [EMAIL PROTECTED]:: remote 
:unknown:unknown rcpt mailto:[EMAIL PROTECTED][EMAIL PROTECTED] 
: not existing recipient

550 5.1.1 sorry, no mailbox here by that name (chkuser)



Any help is wellcome.

M.

--
Michel 'ZioBudda' 
Morelli   mailto:[EMAIL PROTECTED][EMAIL PROTECTED]

Consulenza sistemistica in ambito OpenSource.
Sviluppo applicazioni web dinamiche (LAMP+Ajax)
Telefono: +39-3939890025 --  Fax: +39-0291390660

http://www.ziobudda.nethttp://www.ziobudda.net 
ICQ: 58351764
http://www.ziobuddalabs.ithttp://www.ziobuddalabs.it 
Skype: zio_budda
http://www.ajaxblog.ithttp://www.ajaxblog.it 
MSN: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]


Re: [vchkpw] Chkuser (2.0.9): accepted any recipient for this domain why ?

2007-10-02 Thread tonix (Antonio Nati)

Sorry,

I did not read carefully your message.

It looks like qmail-smtpd is not able to read .qmail-default (infact 
when you run it directly, probably as root, it works fine).


How do you run qmail-smtpd? Are you using the vpopmail user?

Tonino

At 11.35 02/10/2007, tonix (Antonio Nati) wrote:

Hi Michel,

you have to check if bouncing is enabled for each domain (DOMAIN 
setting in CHKUSER_START variable).


Check in each domain's .qmail-default or use qmailadmin and set 
bouncing on for the domain.


See 
http://www.interazioni.it/opensource/chkuser/documentation/faq/enabling.html#D1 
for more informations.


Ciao,

Tonino

At 11.15 02/10/2007, you wrote:

Hi all, this is my first message so any RTFM is wellcome.

I have installed netqmail 1.0.5 and chkuser 2.0.9 with #define 
CHKUSER_STARTING_VARIABLE CHKUSER_START

but not with #define CHKUSER_ALWAYS_ON

This is my /etc/tcp.smtp

127.:allow,RELAYCLIENT=,SIMSCAN_DEBUG=3,QMAILQUEUE=/var/qmail/bin/simscan,CHKUSER_START=DOMAIN
:allow,QMAILQUEUE=/var/qmail/bin/simscan,NOP0FCHECK='1',SIMSCAN_DEBUG='3',CHKUSER_START=DOMAIN 



My problem is that chkuser do not check if the rcpt to is an existent user:

mail from: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
250 ok
rcpt to: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
250 ok

This is in the log:

@400047021726037c0954 CHKUSER accepted any rcpt: from 
[EMAIL PROTECTED]:: remote :x.x.x.x:y.y.y.y rcpt 
mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] : accepted any 
recipient for this domain


Why accept any rcpt ?

this is my qmail-default of http://test.comtest.com domain:

| /opt/vpopmail/bin/vdelivermail '' bounce-no-mailbox

Ah, this works:
# cd /root/netqmail-1.05/netqmail-1.05
# export CHKUSER_START=DOMAIN
# ./qmail-smtpd
220 http://mailmw.merlinwizard.commailmw.merlinwizard.com ESMTP
mail from: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
CHKUSER accepted sender: from [EMAIL PROTECTED]:: remote 
:unknown:unknown rcpt  : sender accepted

250 ok
rcpt to: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
CHKUSER rejected rcpt: from [EMAIL PROTECTED]:: remote 
:unknown:unknown rcpt mailto:[EMAIL PROTECTED][EMAIL PROTECTED] 
: not existing recipient

550 5.1.1 sorry, no mailbox here by that name (chkuser)



Any help is wellcome.

M.

--
Michel 'ZioBudda' 
Morelli   mailto:[EMAIL PROTECTED][EMAIL PROTECTED]

Consulenza sistemistica in ambito OpenSource.
Sviluppo applicazioni web dinamiche (LAMP+Ajax)
Telefono: +39-3939890025 --  Fax: +39-0291390660

http://www.ziobudda.nethttp://www.ziobudda.net 
ICQ: 58351764
http://www.ziobuddalabs.ithttp://www.ziobuddalabs.it 
Skype: zio_budda
http://www.ajaxblog.ithttp://www.ajaxblog.it 
MSN: mailto:[EMAIL PROTECTED][EMAIL PROTECTED]


Re: [vchkpw] Chkuser (2.0.9): accepted any recipient for this domain why ?

2007-10-02 Thread zio budda
2007/10/2, tonix (Antonio Nati) [EMAIL PROTECTED]:

  Hi Michel,



Hi Tonino

I have not understand what you say. Sorry :(

CHKUSER_START contain DOMAIN in chkuser_settings.h

my .qmail-default (for test.com) is:

| /opt/vpopmail/bin/vdelivermail '' bounce-no-mailbox

If I remove CHKUSER_START=DOMAIN from tcp.smtp the log say me:

accepted any recipient for any rcpt domain

(I think that is correct).

M.



you have to check if bouncing is enabled for each domain (DOMAIN setting
 in CHKUSER_START variable).

 Check in each domain's .qmail-default or use qmailadmin and set bouncing
 on for the domain.

 See
 http://www.interazioni.it/opensource/chkuser/documentation/faq/enabling.html#D1for
  more informations.

 Ciao,

 Tonino

 At 11.15 02/10/2007, you wrote:

 Hi all, this is my first message so any RTFM is wellcome.

 I have installed netqmail 1.0.5 and chkuser 2.0.9 with #define
 CHKUSER_STARTING_VARIABLE CHKUSER_START
 but not with #define CHKUSER_ALWAYS_ON

 This is my /etc/tcp.smtp


 127.:allow,RELAYCLIENT=,SIMSCAN_DEBUG=3,QMAILQUEUE=/var/qmail/bin/simscan,CHKUSER_START=DOMAIN
 :allow,QMAILQUEUE=/var/qmail/bin/simscan,NOP0FCHECK='1',SIMSCAN_DEBUG='3',CHKUSER_START=DOMAIN


 My problem is that chkuser do not check if the rcpt to is an existent
 user:

 mail from: [EMAIL PROTECTED]
 250 ok
 rcpt to: [EMAIL PROTECTED]
 250 ok

 This is in the log:

 @400047021726037c0954 CHKUSER accepted any rcpt: from 
 [EMAIL PROTECTED]:: remote :x.x.x.x:y.y.y.y rcpt  [EMAIL PROTECTED]
 : accepted any recipient for this domain

 Why accept any rcpt ?

 this is my qmail-default of test.com domain:

 | /opt/vpopmail/bin/vdelivermail '' bounce-no-mailbox

 Ah, this works:
 # cd /root/netqmail-1.05/netqmail-1.05
 # export CHKUSER_START=DOMAIN
 # ./qmail-smtpd
 220 mailmw.merlinwizard.com ESMTP
 mail from: [EMAIL PROTECTED]
 CHKUSER accepted sender: from [EMAIL PROTECTED]:: remote
 :unknown:unknown rcpt  : sender accepted
 250 ok
 rcpt to: [EMAIL PROTECTED]
 CHKUSER rejected rcpt: from [EMAIL PROTECTED]:: remote
 :unknown:unknown rcpt [EMAIL PROTECTED] : not existing recipient
 550 5.1.1 sorry, no mailbox here by that name (chkuser)



 Any help is wellcome.

 M.

 --
 Michel 'ZioBudda' Morelli   [EMAIL PROTECTED]
 Consulenza sistemistica in ambito OpenSource.
 Sviluppo applicazioni web dinamiche (LAMP+Ajax)
 Telefono: +39-3939890025 --  Fax: +39-0291390660

 http://www.ziobudda.net  ICQ: 58351764
 http://www.ziobuddalabs.it   Skype: zio_budda
 http://www.ajaxblog.it   MSN: [EMAIL PROTECTED]





-- 
Michel 'ZioBudda' Morelli   [EMAIL PROTECTED]
Consulenza sistemistica in ambito OpenSource.
Sviluppo applicazioni web dinamiche (LAMP+Ajax)
Telefono: +39-3939890025 --  Fax: +39-0291390660

http://www.ziobudda.net ICQ: 58351764
http://www.ziobuddalabs.it  Skype: zio_budda
http://www.ajaxblog.it  MSN: [EMAIL PROTECTED]


[vchkpw] vpopmail or qmail problem?

2007-10-02 Thread Andy
Hey,

I'm running netqmail-1.05 and vpopmail-5.4.16 on Gentoo, but I don't
believe this Gentoo specific (if it is, apologies in advance).

My problem is that for one of my domains I can't seem to get qmail to
follow the right .qmail file. I have an account, e.g. bob, which is
located in /home/vpopmail/domains/example.org/bob and I setup a
.qmail-bob-default in /home/vpopmail/domains/example.org which delivers
to the bob account. This lets me use any email address in the format
[EMAIL PROTECTED] and it will all end up in the same account. Its
perfect for one-time email addresses you need to see or emails that
might get spammed (like mailing lists).

So I setup one such address, [EMAIL PROTECTED] (clamav mailing
list) and soon enough it started to get spam to it, so I thought i'd
ditch it. Here's my problem, if I setup .qmail-bob-clamav (which will
delete emails) qmail doesn't use it, it still uses .qmail-bob-default
(so I still get the spam).

Am I missing something obvious? I always thought -default was checked
last and I can't see why its not using the exact match on
.qmail-bob-clamav

At first I thought it was because valias was enabled and it was using
aliases/forwards in mysql, but I disabled that option and it hasn't made
a difference.  I've even ditched mysql options completely and it
still doesn't work.

Thanks in advance.
Andy.


Re: [vchkpw] vpopmail user/group

2007-10-02 Thread aledr
I do not want to check the vpopmail user and group :)

Regards

2007/10/2, John Simpson [EMAIL PROTECTED]:
 On 2007-09-30, at 1622, aledr wrote:
 
  I need to build vpopmail as non-root user and used
  --enable-non-root-build but I got this message:
 
  checking for valid vpopmail user and group... yes
  checking whether password file entry for the vpopmail user exists...
  No vpopmail user found.
  Please add the vchkpw group and
  vpopmail user. Then run configure again
  no
  configure: error: Could not compile and run even a trivial ANSI C
  program - check CC.
 
  So, is there a way to do not check the vpopmail user and group at
  build time?

 fix the Could not compile and run even a trivial ANSI C program -
 check CC issue.

 that will probably allow it to compile the test program which looks
 for the vpopmail user and vchkpw group.

 
 | John M. Simpson---   KG4ZOW   ---Programmer At Large |
 | http://www.jms1.net/ [EMAIL PROTECTED] |
 
 | http://video.google.com/videoplay?docid=-1656880303867390173 |
 




-- 
[ ]'s
Aledr - Alexandre
OpenSource Solutions for SmallBusiness Problems


Re: [vchkpw] vpopmail user/group

2007-10-02 Thread Rick Widmer



aledr wrote:

I do not want to check the vpopmail user and group :)


You don't get any choice in the matter.  The vpopmail uid and vchkpw gid 
are compiled into the program, and must not change between compile and 
run time.  If those uid/gid values change, you must re-compile vpopmail 
to work with the new values.




2007/10/2, John Simpson [EMAIL PROTECTED]:

On 2007-09-30, at 1622, aledr wrote:

I need to build vpopmail as non-root user and used
--enable-non-root-build but I got this message:

checking for valid vpopmail user and group... yes
checking whether password file entry for the vpopmail user exists...
No vpopmail user found.
Please add the vchkpw group and
vpopmail user. Then run configure again


Have you created the vpopmail user and vchkpw group?  If not you must.


no
configure: error: Could not compile and run even a trivial ANSI C
program - check CC.

So, is there a way to do not check the vpopmail user and group at
build time?


No there is not.  The uid and gid values must be correctly compiled into 
the program, so the user and group must exist when you compile.



fix the Could not compile and run even a trivial ANSI C program -
check CC issue.

that will probably allow it to compile the test program which looks
for the vpopmail user and vchkpw group.


| John M. Simpson---   KG4ZOW   ---Programmer At Large |
| http://www.jms1.net/ [EMAIL PROTECTED] |

| http://video.google.com/videoplay?docid=-1656880303867390173 |







Re: [vchkpw] vpopmail user/group

2007-10-02 Thread aledr
2007/10/2, Rick Widmer [EMAIL PROTECTED]:


 aledr wrote:
  I do not want to check the vpopmail user and group :)

 You don't get any choice in the matter.  The vpopmail uid and vchkpw gid
 are compiled into the program, and must not change between compile and
 run time.  If those uid/gid values change, you must re-compile vpopmail
 to work with the new values.


  2007/10/2, John Simpson [EMAIL PROTECTED]:
  On 2007-09-30, at 1622, aledr wrote:
  I need to build vpopmail as non-root user and used
  --enable-non-root-build but I got this message:
 
  checking for valid vpopmail user and group... yes
  checking whether password file entry for the vpopmail user exists...
  No vpopmail user found.
  Please add the vchkpw group and
  vpopmail user. Then run configure again

 Have you created the vpopmail user and vchkpw group?  If not you must.

Yes, I will create they when installing the package in my destination
host. This is the why I need to get these values into the package when
building. The build host isn't my dest host.


  no
  configure: error: Could not compile and run even a trivial ANSI C
  program - check CC.
 
  So, is there a way to do not check the vpopmail user and group at
  build time?

 No there is not.  The uid and gid values must be correctly compiled into
 the program, so the user and group must exist when you compile.

So, to do that the package could assume the default value... Clamav
does a trick with option --disable-clamav.


  fix the Could not compile and run even a trivial ANSI C program -
  check CC issue.
 
  that will probably allow it to compile the test program which looks
  for the vpopmail user and vchkpw group.
 
  
  | John M. Simpson---   KG4ZOW   ---Programmer At Large |
  | http://www.jms1.net/ [EMAIL PROTECTED] |
  
  | http://video.google.com/videoplay?docid=-1656880303867390173 |
  
-- 
[ ]'s
Aledr - Alexandre
OpenSource Solutions for SmallBusiness Problems


Re: [vchkpw] vpopmail or qmail problem?

2007-10-02 Thread Christopher Chan



Am I missing something obvious? I always thought -default was checked
last and I can't see why its not using the exact match on
.qmail-bob-clamav


There was some discussion of enabling such support in vpopmail. If you 
look in your assign file, you will find that your address will become 
domain-bob and qmail-local will be told to look for dot files in 
/home/vpopmail/domains/domain. You are missing the effect of the virtual 
domains in qmail and vpopmail's assign entries.


Re: [vchkpw] vpopmail or qmail problem?

2007-10-02 Thread John Simpson

On 2007-10-02, at 1928, Christopher Chan wrote:



Am I missing something obvious? I always thought -default was checked
last and I can't see why its not using the exact match on
.qmail-bob-clamav


There was some discussion of enabling such support in vpopmail.


i'm not sure, but i suspect the discussion you're thinking of had  
to do with .qmail files within the MAILBOX (i.e. siblings of the  
Maildir folder) rather than in the domain's directory (i.e. one  
level up from the mailbox.) those would have to be processed by  
vdelivermail, while the .qmail files in the domain directory itself  
are processed by qmail-local, before vdelivermail is ever executed.


If you look in your assign file, you will find that your address  
will become domain-bob and qmail-local will be told to look for dot  
files in /home/vpopmail/domains/domain. You are missing the effect  
of the virtual domains in qmail and vpopmail's assign entries.


for messages sent to bob-clamav@, qmail-local looks for the  
following files in the domain's directory:


.qmail-bob-clamav
.qmail-bob-default
.qmail-default
.qmail

as for the original question, i'd have to look at things by hand to  
tell for sure, but it sounds like qmail is skipping the .qmail-bob- 
clamav file for some reason. and knowing qmail like i do, i suspect  
there's nothing wrong with qmail-local except maybe some error or  
warning condition that it's silently ignoring, where we might wish it  
would complain about, so we know what's happening and can fix it.  
maybe the filename is wrong, the .qmail-bob-clamav file isn't  
readable to the vpopmail user, or something... i would need to see  
the UN-EDITED contents, ownerships, and permissions of the users/ 
assign, .qmail-bob-clamav, .qmail-bob-default, and .qmail-default  
files, along with the actual headers (again not edited, hiding domain  
names doesn't serve any purpose) of a message which was incorrectly  
delivered.



| John M. Simpson---   KG4ZOW   ---Programmer At Large |
| http://www.jms1.net/ [EMAIL PROTECTED] |

| http://video.google.com/videoplay?docid=-1656880303867390173 |





PGP.sig
Description: This is a digitally signed message part


Re: [vchkpw] vpopmail or qmail problem?

2007-10-02 Thread Christopher Chan

John Simpson wrote:

On 2007-10-02, at 1928, Christopher Chan wrote:



Am I missing something obvious? I always thought -default was checked
last and I can't see why its not using the exact match on
.qmail-bob-clamav


There was some discussion of enabling such support in vpopmail.


i'm not sure, but i suspect the discussion you're thinking of had to 
do with .qmail files within the MAILBOX (i.e. siblings of the 
Maildir folder) rather than in the domain's directory (i.e. one level 
up from the mailbox.) those would have to be processed by 
vdelivermail, while the .qmail files in the domain directory itself are 
processed by qmail-local, before vdelivermail is ever executed.


I believe that is the one yes so it appears I have the details wrong and 
mixed up what is wrong with Andy's setup :-P