Re: [vchkpw] [SPAM] Re: [vchkpw] [SPAM] perl5.10.1 segfault when trying to send an email

2012-06-24 Thread Rick Macdougall

On 23/06/2012 6:23 PM, Stéphane Dupont wrote:

Thank you, it worked!

... it was 4000, I put 4. Isn't it too much ? What's the
implication of this ?



Yah, that's a little high unless you have 16 gigs of ram in the machine. 
 The implication is a DDOS using up all your ram.


I use 1200 on my machines without a problem.

Having you add an extra zero was just a quick way of checking to see if 
qmail-queue had enough ram to launch simscan and clamd.


Regards,

Rick


!DSPAM:4fe70dcd34181476212059!



[vchkpw] [SPAM] Re: [vchkpw] [SPAM] perl5.10.1 segfault when trying to send an email

2012-06-23 Thread Rick Macdougall
Hi,

Sounds like your soft limit is to low.  Try adding an extra zero to it and see 
what happens.

Also, please post your service/quail-smtpd/run file.

Regards,

Rick

Sent from my iPad

On 2012-06-23, at 4:19 PM, Stéphane Dupont steph.el...@gmail.com wrote:

 Hello,
 
 I've got a problem with a vpopmail / qmail / spamassassin / clamav 
 installation.
 
 To do some testing before going live, I tried to send an email via
 telnet, and I've got this:
 
 telnet XXX.XXX.XXX.XXX 25
 Trying XXX.XXX.XXX.XXX...
 Connected to XXX.XXX.XXX.XXX.
 Escape character is '^]'.
 220 mail.xxx.xxx ESMTP
 ehlo mail.xxx.xxx
 250-mail.xxx.xxx
 250-STARTTLS
 250-SIZE 0
 250-PIPELINING
 250 8BITMIME
 mail from: x...@gmail.com
 250 ok
 rcpt to: x...@xxx.com
 250 ok
 data
 354 go ahead
 test
 ..
 451 qq crashed (#4.3.0)
 
 At the time I enter the data command, I've got this in the syslog file:
 
 Jun 23 21:56:25 mail kernel: [  910.578019] perl5.10.1[1951]: segfault
 at 20 ip 7f4adf64d138 sp 7fff09275940 error 4 in
 libperl.so.5.10.1[7f4adf60d000+165000]
 
 Also, this happens only if I do this from outside the server. If I'm
 doing the same thing from the server (telnet localhost), the problem
 doesn't happen...
 
 Any idea?
 
 I just built this new system to migrate from an old one. The
 installation is based on qmailrocks.
 
 Debian Squeeze 64bits
 vpopmail-5.4.32
 qmail-1.03
 SpamAssassin-3.3.2
 clamav-0.97.5
 
 Thanks a lot,
 Stéphane Dupont.
 
 (PS : sorry for the previous message, I forgot to put a subject)
 
 
 

!DSPAM:4fe62ced34184667916774!



Re: [vchkpw] SMTP-AUTH problem with vchkpw

2011-07-03 Thread Rick Macdougall

On 03/07/2011 5:11 AM, a...@ltmd.org wrote:

Hello Rick,

Saturday, July 2, 2011, 16:59:09, Rick Macdougall wrote:

User vpopmail realy exists. I also cannot find the

difference between working x86 server configuration and the new
amd64 one. I tried to reconfigure my system from no-multilib to
multilib and to reemerge netqmail and vpopmail ebuilds, but still no
success. :( Is there some way to debug that plain SMTP-AUTH to figure
out what is really happening?


RM  You can use recordio (part of one of djb's packages) to log everything
RM  that happens within an smtp conversation.

RM  http://cr.yp.to/ucspi-tcp/recordio.html

Thank you for your assistance, Rick. I tried to use that nice tool.
And here goes the result:

@40004e1029d019fc59f4 22218  220 mail.domain.com ESMTP
@40004e1029d035004684 22218  EHLO [10.1.1.177]
@40004e1029d035017b1c 22218  250-mail.domain.com
@40004e1029d03501b1cc 22218  250-STARTTLS
@40004e1029d03501e494 22218  250-PIPELINING
@40004e1029d03502175c 22218  250-8BITMIME
@40004e1029d03502463c 22218  250-SIZE 0
@40004e1029d035027904 22218  250 AUTH LOGIN PLAIN
@40004e1029d10834940c 22218  AUTH PLAIN
@40004e1029d108356ecc 22218  334
@40004e1029d109252dcc 22218  c2VuZGVyLmNvbXBhc3N3b3Jk
@40004e1029d6092f863c 22218  535 authentication failed (#5.7.1)
@40004e1029d60994146c 22218  RSET
@40004e1029d60994e374 22218  250 flushed
@40004e1029d60b8495e4 22218  AUTH LOGIN
@40004e1029d60b85ca7c 22218  334 VXNlcm5hbWU6
@40004e1029d60c5eadec 22218  c2VuZGVyLmNvbQ==
@40004e1029d60c5ff9f4 22218  334 UGFzc3dvcmQ6
@40004e1029d60d4acf24 22218  cGFzc3dvcmQ=
@40004e1029db0d59619c 22218  535 authentication failed (#5.7.1)
@40004e1029db0e782f7c 22218  RSET
@40004e1029db0e78cbbc 22218  250 flushed
@40004e1029db10ef51cc 22218  MAIL FROM:sen...@domain.com  SIZE=524
@40004e1029db10f0f3c4 22218  250 ok
@40004e1029db281154f4 22218  RCPT TO:receip...@domain.com
@40004e1029db2812eb34 22218  250 ok
@40004e1029db2a9afd74 22218  DATA
@40004e1029db2aa021dc 22218  354 go ahead
@40004e1029db2b9f619c 22218  Date: Sun, 3 Jul 2011 11:35:32 +0300
@40004e1029db2ba00d7c 22218  From: Name Surnamesen...@domain.com
@40004e1029db2ba08e64 22218  Reply-To: Name Surnamesen...@domain.com
@40004e1029db2ba10b64 22218  X-Priority: 3 (Normal)
@40004e1029db2ba1847c 22218  
Message-ID:86092590.20110703113...@domain.com
@40004e1029db2ba1fd94 22218  To: receip...@domain.com
@40004e1029db2ba276ac 22218  Subject: test
@40004e1029db2ba2efc4 22218  MIME-Version: 1.0
@40004e1029db2ba364f4 22218  Content-Type: text/plain; charset=utf-8
@40004e1029db2ba3de0c 22218  Content-Transfer-Encoding: quoted-printable
@40004e1029db2ba45724 22218
@40004e1029db2ba5ba9c 22218  test
@40004e1029db2ba9f88c 22218  .
@40004e1029db376d0894 22218  250 ok 1309682129 qp 2
@40004e1029db3888d4ec 22218  RSET
@40004e1029db3889cb04 22218  250 flushed
@40004e1029db3982d104 22218  QUIT
@40004e1029db398a79f4 22218  221 mail.domain.com
@40004e1029db398a81c4 22218  [EOF]
@40004e1029db399445c4 tcpserver: end 22217 status 0
@40004e1029db39944d94 tcpserver: status: 0/40

Right now I see that there is something goes wrong with a
authentication process in qmail and this dump is not very useful for
me. :( Are there any other ideas I can try?



Hi,

I'd trying asking on a spamdyke mailing list.  If it was plain 
qmail-smtpd then you'd see in the logs why it failed.


Rick


!DSPAM:4e10799632711821815719!



Re: [vchkpw] SMTP-AUTH problem with vchkpw

2011-07-02 Thread Rick Macdougall

On 01/07/2011 12:54 PM, a...@ltmd.org wrote:


User vpopmail realy exists. I also cannot find the
difference between working x86 server configuration and the new
amd64 one. I tried to reconfigure my system from no-multilib to
multilib and to reemerge netqmail and vpopmail ebuilds, but still no
success. :( Is there some way to debug that plain SMTP-AUTH to figure
out what is really happening?



Hi,

You can use recordio (part of one of djb's packages) to log everything 
that happens within an smtp conversation.


http://cr.yp.to/ucspi-tcp/recordio.html

ie

/service/qmail-smtpd/run

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
exec /usr/local/bin/softlimit -m 1200 \
/usr/local/bin/tcpserver -v -h -R \
-x /home/vpopmail/etc/tcp.smtp.cdb -c $MAXSMTPD \
-u $QMAILDUID -g $NOFILESGID 0 smtp \
/usr/local/bin/rblsmtpd -t 2 -b \
-r cbl.aei.ca \
-r bl.spamcop.net \
recordio /var/qmail/bin/qmail-smtpd \
/home/vpopmail/bin/vchkpw /bin/true 21

Rick

!DSPAM:4e0f243632713934528930!



Re: [vchkpw] SMTP-AUTH problem with vchkpw

2011-07-01 Thread Rick Macdougall

On 30/06/2011 8:10 PM, a...@ltmd.org wrote:

I tried to migrate my mail service (qmail+vpopmail+mysql) to the
64-bit Gentoo platform and almost succeeded, but SMTP-AUTH problem
blocked me.

Right now I have no multilib 64-bit hardened Gentoo system with
netqmail-1.06, vpopmail-5.4.30-r2, dovecot-2.0.13 and some other
stuff. Everything seems working fine, except SMTP-AUTH function.

My mailer on this new server shows me:

SEND  - connected to SMTP server
SEND  - authenticating (plain)...
SEND  - Server reports error. The response is: authentication failed (#5.7.1)
SEND  - authenticating (login)...
SEND  - Server reports error. The response is: authentication failed (#5.7.1)
SEND  - WARNING: there were no compatible authentication mechanisms detected

Here goes my config /var/qmail/control/conf-smtpd:
---
TCPSERVER_OPTS=${TCPSERVER_OPTS} -R
QMAIL_SMTP_PRE=${QMAIL_SMTP_PRE} spamdyke -f /etc/spamdyke/spamdyke.conf
QMAIL_SMTP_CHECKPASSWORD=/var/vpopmail/bin/vchkpw
[[ -n ${QMAIL_SMTP_CHECKPASSWORD} ]]  {
 [[ -z ${QMAIL_SMTP_POST} ]]  QMAIL_SMTP_POST=/bin/true
 QMAIL_SMTP_POST=${QMAIL_SMTP_CHECKPASSWORD} ${QMAIL_SMTP_POST}
}
---



Hi,

You should be able to see the auth attempt in one f your log files.  On 
all my servers it's in /var/log/messages.  This might help show where 
the problem lies.


One of my lines as an example - Jul  1 04:43:17 mail002 vpopmail[24348]: 
vchkpw-smtp: vpopmail user not found rlev...@aei.ca:14.208.230.43


Rick

!DSPAM:4e0dc81232712410438437!



Re: [vchkpw] submission port 587

2010-09-11 Thread Rick Macdougall
Sorry for the top post, on my IPod.

If no one answers before tomorrow, I'll reply when I get on my computer.  It's 
pretty straight forward.

Rick

On 2010-09-11, at 18:39, jeffk...@intersessions.com wrote:

 This may be the wrong forum for this but I can’t seem to find any info.
 
  
 
 Does anyone have information on how to setup a second SMTP process within 
 qmail that listens on port 587 and accepts ONLY authenticated smtp 
 connections? In this scenario port 25 would accept normal smtp (non-relay) 
 and smtp-auth traffic but now could also be filtered to block dynamic IP 
 ranges.
 
  
 
 Thanks,
 
  
 
 Jeff Koch
 
  


!DSPAM:4c8c257c32711108372815!


Re: [vchkpw] vpopmail and smtp auth

2010-06-28 Thread Rick Macdougall

 On 28/06/2010 6:43 PM, Den Arion wrote:


I was looking for a version or patch to work with authentication with 
vpopmail. Almost all patches I found need additional software that 
it’s not available..


Does somebody in the list have running smtp auth with vpopmail users 
authentication? If yes just check if additional software needed is 
available.





Hi,

See http://www.shupp.org/toaster/

Regards,

Rick


!DSPAM:4c2933d632711622915284!



Re: [vchkpw] Qmail migration

2010-06-15 Thread Rick Macdougall

On 15/06/2010 1:34 PM, ta...@nayatel.com wrote:

please suggest

I am migrating Qmail from one Machine to another.Have taken following
steps but no luck.

1- I have taken dump of Mysql and and restored it on new machine.
2- SCP all Domain and email boxes to new machine.
3- Fixed all permissions.

while giving command vdomaininfo or vuserinof it does not find the domain.


Hi,

Did you copy over the contents of /var/qmail/control and /var/qmail/users ?

Regards,

Rick


!DSPAM:4c17c03e32717630316849!



Re: [vchkpw] how to define 2 or more archive addresses?

2010-05-10 Thread Rick Macdougall

On 10/05/2010 11:43 AM, Bulend Kolay wrote:

I use taps patch on qmail.

cat taps;
a...@domain.com:t...@domain.com

When I send an email from a...@domain.com to x...@internet.com, the mail
also comes to t...@domain.com
Namely it works.

But I wish to define two or more archive addresses.

How can I do that ?



Set t...@domain.com to forward a copy to additional email accounts.

Rick


!DSPAM:4be82c8332713402174455!



Re: [vchkpw] vpopmaild

2010-04-08 Thread Rick Macdougall

On 08/04/2010 3:01 PM, Victor Subervi wrote:

On Thu, Apr 8, 2010 at 2:13 PM, Rick Macdougall ri...@ummm-beer.com
mailto:ri...@ummm-beer.com wrote:

On 08/04/2010 2:18 PM, Victor Subervi wrote:

Hi;
Where can I download a copy of vpopmaild for 5.4.30?
TIA,
Victor


Hi,

It should be part of the standard tarball, and it should already be
installed in $vpopmail/bin (usually /home/vpopmail/bin).


Nope. Ran a find for it and got a zillion results with Permission
denied. Dunno what that means, but didn't find the binary. How build it
without rebuilding vpopmail?


Hi,

Can you show me the output of

ls -l /home/vpopmail/bin/

Regards,

Rick


!DSPAM:4bbe2e0d32711561818756!



Re: [vchkpw] vpopmaild

2010-04-08 Thread Rick Macdougall

On 08/04/2010 3:31 PM, Victor Subervi wrote:

On Thu, Apr 8, 2010 at 2:57 PM, Rick Macdougall ri...@ummm-beer.com
mailto:ri...@ummm-beer.com wrote:

Can you show me the output of

ls -l /home/vpopmail/bin/


# ls -l /home/vpopmail/bin/
-rwx--x--x 1 vpopmail vchkpw 74776 Feb 23 04:46 vmoddomlimits
-rwx--x--x 1 vpopmail vchkpw 70008 Feb 23 04:46 vmoduser
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vpasswd
-rwx--x--x 1 vpopmail vchkpw 69208 Feb 23 04:46 vpopbull


Very strange.  Guess one of the Dev's will have to speak up because on 
my 5.4.13 it's installed by default.


-rwx--x--x  1 vpopmail vchkpw 63068 Aug  1  2007 vmoduser
-rwx--x--x  1 vpopmail vchkpw 60348 Aug  1  2007 vpasswd
-rwx--x--x  1 vpopmail vchkpw 64476 Aug  1  2007 vpopbull
-rwx--x--x  1 vpopmail vchkpw 85404 Aug  1  2007 vpopmaild
-rwx--x--x  1 vpopmail vchkpw 60412 Aug  1  2007 vsetuserquota

Did you install with the sourceforge package or a 3rd party package ?

Regards,

Rick

!DSPAM:4bbe313f32711221957189!



Re: [vchkpw] Scripting With vadduser

2010-03-22 Thread Rick Macdougall

On 22/03/2010 2:12 PM, Victor Subervi wrote:

On Sat, Mar 20, 2010 at 2:41 PM, Rick Macdougall ri...@ummm-beer.com
mailto:ri...@ummm-beer.com wrote:

You would be best off interfacing with the vpopmaild daemon.

Instructions for running it and interfacing with it should be in the
vpopmail source directory.


They're not. There's README.vpopmaild which addresses how to run it and
*says* it shows how to install it, but doesn't. So how do I install it?
It mentions the address to a wiki that isn't there. Is there a wiki or
community for this?
TIA,
Victor



Hi,

What version of vpopmail are you running ?

The README I have here contains the following snippets:

To run as daemon:
tcpserver -vHRD 0 89 ./vpopmaild

Then as client
telnet localhost 89

Or to run on the command line for testing
./vpopmaild

First login. example:
login postmas...@example.com password

Then for list of commands:
help


And then goes on with all the possible commands.

It assumes that you are in the bin directory of vpopmail, usually 
/home/vpopmail/bin


Regards,

Rick


!DSPAM:4ba7b9cc32712127863668!



Re: [vchkpw] Scripting With vadduser

2010-03-22 Thread Rick Macdougall

On 22/03/2010 3:01 PM, Victor Subervi wrote:

On Mon, Mar 22, 2010 at 2:40 PM, Rick Macdougall ri...@ummm-beer.com
mailto:ri...@ummm-beer.com wrote:

On 22/03/2010 2:12 PM, Victor Subervi wrote:
What version of vpopmail are you running ?


Where do I find it? Looking at the doc_html file I see it's newer than
3.4.10, and I just installed it last month from a qmailrocks tarball.


Or to run on the command line for testing
./vpopmaild


[root]# ./vpopmaild
bash: ./vpopmaild: No such file or directory
TIA,
Victor




Hi,

As I said in my previous email it assumes you are in the vpopmail bin 
directory, usually /home/vpopmail/bin


Regards,

Rick


!DSPAM:4ba7c07132711752512807!



Re: [vchkpw] Scripting With vadduser

2010-03-20 Thread Rick Macdougall

On 20/03/2010 11:03 AM, Victor Subervi wrote:

Hi;
I'd like to write a python script that can enable my clients to add
users or change passwords. I need to know how to interface with vadduser
and vchangepw which, of course, are binaries. Please advise/
TIA, 


Hi,

You would be best off interfacing with the vpopmaild daemon.

Instructions for running it and interfacing with it should be in the 
vpopmail source directory.


Regards,

Rick


!DSPAM:4ba516c732711378039812!



Re: [vchkpw] Simscan and Clam 0.95.3

2010-01-27 Thread Rick Macdougall

On 27/01/2010 1:35 PM, DAve wrote:

Good afternoon all,

I was just getting going upgrading our Clamav install and beginning to
use clamav on our outbound mail as well as SA.
simscan: calling clamdscan
simscan: cdb looking up version clamav
simscan: fatal error executing clamdscan
simscan: exit error code: 71
qmail-inject: fatal: mail server temporarily rejected message (#4.3.0)
[r...@smtp1:/usr/local/src/simscan-1.4.0]# clamdscan .
/usr/local/src/simscan-1.4.0/.: OK



Could be a permissions problem.  I've seen that error message with 
permission problems before.


I've also sen it with selinux installed as well.

Regards,

Rick

!DSPAM:4b6092a132711732464874!



Re: [vchkpw] [SPAM] How can I disable user over quota message?

2010-01-20 Thread Rick Macdougall

On 20/01/2010 9:51 AM, Bulend Kolay wrote:

Hello

I use vpopmail on qmail.
As default, when a mail account reaches to its quota, vpopmail sends a
warning message to sender addres about user over quota.
How can I disable to send these warning messages to sender?
I think this condition causes backscatter.
any advice?



Use the chkuser patch.  It checks at smtp time of the user is over quota 
and doesn't accept the message if they are.


Regards,

Rick


!DSPAM:4b571a9e32712121569537!



Re: [vchkpw] How can I disable user over quota message?

2010-01-20 Thread Rick Macdougall

On 20/01/2010 10:43 AM, Bulend Kolay wrote:

I use validrcptto.patch with jms1.net.
is there a option on it? Otherwise do I have to use chkuser patch ?



Hi,

The chkuser patch will replace the functionality of the 
validrcptto.patch and also add Quota checking, max invalid recipient 
checking, the ability to run another instance of qmail-smtpd which only 
authenticated users can use, and a host of other options


Regards,

Rick


!DSPAM:4b572a3132717705910706!



Re: [vchkpw] vdeliver perimission denied for vadddomain -u

2009-12-04 Thread Rick Macdougall

Matt Brookings wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Michael Mussulis wrote:

Furthermore, having followed the instructions to the letter, I would
expect it to simply work - unless there's something silly I've missed
(or perhaps undocumented). If other people have -u to work perhaps they
can shed some light on whether they had to take special steps to make it
work. 


I would also expect it to work.  I have no reports of failure of this feature
anywhere, and my local tests show that it's working with all of the recent 
versions
available.  Are you running a version prior to 5.4.15?

Unfortunately I do not have any further ideas what it might be.


Hi,

I believe when I used to run it with other users, I had to run 
qmail-smtpd as root.  Otherwise it can't setuid to the other users.


Regards,

Rick


!DSPAM:4b191aa032712038539215!



Re: [vchkpw] Duplicate pw_dir first time I use webmail

2009-11-19 Thread Rick Macdougall

Roberto wrote:

Hi everyone. I'm not sure if this is a vpopmail or a dovecot issue.

When I browse the ~vpopmail/domains/mydomain/ dir I see that a subfolder 
named 0 contains part of the accounts. And the pw_dir of the newly 
created accounts is placed in that directory.
I can retrieve the messages via pop3 but not via imap/webmail because 
the messages are checked in the upper dir.


Trying to be more specific, if bob is the pw_name and 
~vpopmail/domains/mydomain/0/bob is the pw_dir, when bob connects via 
webmail/imap a dir ~vpopmail/domains/mydomain/bob (not in the 0/ subdir) 
is created and he cannot retrieve his message.


Can you tell me the reason of that 0/ subdir? Is it normal?

Here is my config:
netqmail 1.05
vpopmail 5.4.25
dovecot 1.2.2
webmail: roundcube 0.3



Hi,

Most likely a problem with dovecot as it would be the one creating those 
directories.  How ever we don't know if it's a bug in Dovecot or a 
problem with your configuration.


I looked through all the change logs of Dovecot 1.2.3 till 1.2.7 and 
didn't see any mention of a fix.


Could you post your Dovecot config file to a pastie site (like 
www.pastie.org) and give us the url so we can take a look ?


Regards,

Rick


!DSPAM:4b056d9332711694420003!



Re: [vchkpw] Duplicate pw_dir first time I use webmail

2009-11-19 Thread Rick Macdougall

Roberto wrote:

Hi Rick,
you can see my dovecot.conf here http://www.filologiasarda.eu/dovecot.conf

thanks a lot
Roberto




Trying to be more specific, if bob is the pw_name and 
~vpopmail/domains/mydomain/0/bob is the pw_dir, when bob connects via 
webmail/imap a dir ~vpopmail/domains/mydomain/bob (not in the 0/ 
subdir) is created and he cannot retrieve his message.


Can you tell me the reason of that 0/ subdir? Is it normal?



Hi,

Most likely a problem with dovecot as it would be the one creating 
those directories.  How ever we don't know if it's a bug in Dovecot or 
a problem with your configuration.


I looked through all the change logs of Dovecot 1.2.3 till 1.2.7 and 
didn't see any mention of a fix.


Could you post your Dovecot config file to a pastie site (like 
www.pastie.org) and give us the url so we can take a look ?




Hi,

The problem is your mail_location.  You are forcing it to be in 
/home/vpopmail/domains/domain.com/username


You want to use

mail_location = maildir:%h/Maildir

instead.

Regards,

Rick

!DSPAM:4b0575e832711937610741!



Re: [vchkpw] Duplicate pw_dir first time I use webmail

2009-11-19 Thread Rick Macdougall

Roberto wrote:
I would expect that the dovecot reads the pw_dir from the vpopmail db 
instead of using this line

mail_location = maildir:/home/vpopmail/domains/%d/%n/Maildir

which not contains the 0/ subdir. Is there a way to inhibit vpopmail 
from storing user Maildir in the subdirs?




Hi,

You are correct that you should use pw_dir.  In Dovecot pw_dir is equal 
to %h, so the correct usage is mail_location = maildir:%h/Maildir


To disable the hashing of the user subdirs you can use the compile flag 
--disable-users-big-dir but you don't want to do this unless you know 
you will never have a large user base.


Regards,

Rick


!DSPAM:4b0577c732711024623068!



Re: [vchkpw] Failure to update tcp.smtp - No authorized relaying for roaming user!

2009-11-10 Thread Rick Macdougall

atomdeb...@gmail.com wrote:
OK, I'm sold; I'll use SMTP-AUTH instead of POP-before-SMTP.  I can 
authenticate from inside or outside the network, using SMTP-AUTH in 
either PLAIN or LOGIN mode.  CRAM-MD5 is apparently not implemented (yet).
 
I can only relay when I connect from inside the network.  Attempting to 
relay from outside the network gives me the error 553 sorry, that 
domain isn't in my list of allowed rcpthosts.


I am not using a SQL db for the backend.  Should I be seeing a file 
called open-smtp?  It doesn't exist. 
 
How do I get this thing to allow me to relay from my dynamic IP address 
once I've authenticated with SMTP-AUTH?




CRAM-MD5 is only going to work if you have clear text passwords stored.

If your email domain is in locals, it will probably not work since it 
will try to auth via the local passwd/shadow files.


Your locals file should contain the name of your machine, not your email 
domain.


Regards,

Rick


!DSPAM:4af9d57232712411720135!



Re: [vchkpw] Problem with vpopmail: deliver all mail to /var/spool/mail/vpopmail

2009-10-08 Thread Rick Macdougall

Javier de Miguel Rodrí­guez wrote:


Hello

I have netqmail 1.06 on a Red Hat Enterprise Linux 5.4 x86 following 
LWQ. I have installed vpopmail 5.4.28 with the following compile options


./configure --enable-file-sync --prefix=/buzones/ --enable-maildrop 
--enable-domainquotas



So NO mysql support.

   I have created a test domain (javierito.com) to test that everything 
works as desired. I see in /home/vpopmail (a symbolic link to 
/buzones/vpopmail) that in the folder /buzones/vpopmail/domains exists a 
folder called javierito.com


With qmailadmin I can create users successfully . I also have 
configured dovecot to auth against vpopmail, everything works great 
exepct that mail is NOT deliveres where it should.


Example:

- I create a user pru...@javierito.com
- I check that /buzones/vpopmail/domains/javierito.com/prueba has 
been created, permissions and owner ok.
- When I send a mail to pru...@javierito.com I see in 
/var/log/qmail/current the following:


@40004acdd2f818008224 info msg 4485292: bytes 232 from 
javierdemig...@us.es qp 18966 uid 501
@40004acdd2f81b7da2c4 starting delivery 2: msg 4485292 to local 
javierito.com-pru...@javierito.com

@40004acdd2f81b7da6ac status: local 1/10 remote 0/20
@40004acdd2f822f5af24 delivery 2: success: did_0+0+1/
@40004acdd2f822f5b30c status: local 0/10 remote 0/20
@40004acdd2f822f5b6f4 end msg 4485292

But mail does NOT appear in 
/buzones/vpopmail/domains/javierito.com/prueba/Maildir/new. Instead, the 
mail is delivered to /var/spool/mail/vpomail, in mbox format.




Hi,

What is in /var/qmail/control/defaultdelivery ?

Regards,

Rick


!DSPAM:4acdddec32713580789896!



Re: [vchkpw] Problem with vpopmail: deliver all mail to /var/spool/mail/vpopmail

2009-10-08 Thread Rick Macdougall

Javier de Miguel Rodrí­guez wrote:




Hi,

What is in /var/qmail/control/defaultdelivery ?


cat /var/qmail/control/defaultdelivery

./Maildir/



Stranger and stranger.

Does the last line in /var/qmail/users/assign just have a . in it ?

Rick


!DSPAM:4acde5c632711508219439!



Re: [vchkpw] Problem with vpopmail: deliver all mail to /var/spool/mail/vpopmail

2009-10-08 Thread Rick Macdougall

Wouter van der Schagt wrote:

Does the last line in /var/qmail/users/assign just have a . in it ?


Yes

Sincerely,
- Wouter van der Schagt







Hi,

Can you get the output of /var/qmail/bin/qmail-showctl and pastebin it 
somewhere and send the URL to the list please.


Regards,

Rick


!DSPAM:4acdee8b32716031318004!



Re: [vchkpw] Problem with vpopmail: deliver all mail to /var/spool/mail/vpopmail

2009-10-08 Thread Rick Macdougall

Javier de Miguel Rodrí­guez wrote:




Can you get the output of /var/qmail/bin/qmail-showctl and pastebin it 
somewhere and send the URL to the list please.




Very strange indeed.

The only inconsistency that I can see is you compiled vpopmail with 
--prefix=/buzones but the assign file uses /home/vpopmail/, not sure if 
that is going to cause any problems since logically it is the same place 
but that's the only thing I can see at the moment.


Regards,

Rick


!DSPAM:4ace110d32711344485583!



Re: [vchkpw] Problem with vpopmail: deliver all mail to /var/spool/mail/vpopmail

2009-10-08 Thread Rick Macdougall

Javier de Miguel Rodrí­guez wrote:




Hi,

What is in /var/qmail/control/defaultdelivery ?


cat /var/qmail/control/defaultdelivery

./Maildir/


cat /var/qmail/rc

#!/bin/sh

# Using stdout for logging
# Using control/defaultdelivery from qmail-local to deliver messages by 
default


exec env - PATH=/var/qmail/bin:$PATH \
qmail-start ./Maildir/




Don't know if it makes a difference but my /var/qmail/rc has quotes 
around ./Maildir/


ie

qmail-start ./Maildir/

Regards,

Rick


!DSPAM:4ace139132711571019702!



Re: [vchkpw] Problem with vpopmail: deliver all mail to /var/spool/mail/vpopmail

2009-10-08 Thread Rick Macdougall

Javier de Miguel Rodrí­guez wrote:




Can you get the output of /var/qmail/bin/qmail-showctl and pastebin it 
somewhere and send the URL to the list please.


/var/qmail/bin/qmail-showctl



Hi,

Can you do a

ps -ax | grep qmail-lspawn

and report the output please.

Regards,

Rick


!DSPAM:4ace13f932712029419206!



Re: [vchkpw] Problem with vpopmail: deliver all mail to /var/spool/mail/vpopmail

2009-10-08 Thread Rick Macdougall

Javier de Miguel Rodrí­guez wrote:

Just for the record, a full SMTP transaction:


telnet 192.168.5.103 25


Trying 192.168.5.103...
Connected to buzones_externos (192.168.5.103).
Escape character is '^]'.
220 Bienvenido al servidor de correo de buzones externos ESMTP
HELO test.com
250 Bienvenido al servidor de correo de buzones externos
MAIL FROM:t...@test.com
250 ok
RCPT TO:pru...@javierito.com
250 ok
DATA
354 go ahead
Subject: Just a test
Testing
..
..
250 ok 1255027977 qp 30614
quit
221 Bienvenido al servidor de correo de buzones externos



Log in /var/qmail/current


2009-10-08 20:52:57.802952500 new msg 4485292
2009-10-08 20:52:57.802954500 info msg 4485292: bytes 222 from 
t...@test.com qp 30614 uid 501
2009-10-08 20:52:57.851700500 starting delivery 6: msg 4485292 to local 
javierito.com-pru...@javierito.com

2009-10-08 20:52:57.851701500 status: local 1/10 remote 0/20
2009-10-08 20:52:57.896962500 delivery 6: success: did_0+0+1/
2009-10-08 20:52:57.896963500 status: local 0/10 remote 0/20
2009-10-08 20:52:57.896964500 end msg 4485292


Info about that user (pru...@javierito.com)

home/vpopmail/bin/vuserinfo pru...@javierito.com
name:   prueba
passwd: $1$drHXhmxJ$CpapulqXSV014Uyjz8qb00
clear passwd: prueba
comment/gecos: Hola soy pepe
uid:1
gid:0
flags:  0
gecos: Hola soy pepe
limits: No user limits set.
dir:   /home/vpopmail/domains/javierito.com/prueba
quota: 157286400S
usage: 0%
account created: Wed Oct  7 13:14:07 2009
last auth: Never logged in


Info about the domain

vdominfo javierito.com

domain: javierito.com
uid:89
gid:89
dir:/home/vpopmail/domains/javierito.com
users:  3



Let's see if mail has arrived..

ls -l /home/vpopmail/domains/javierito.com/prueba/Maildir/new/

total 0


Now look to /var/spool/mail/vpopmail

tail -12 /var/spool/mail/vpopmail


 From vpopmail Thu Oct  8 20:52:57 2009
Return-Path: t...@test.com
Delivered-To: javierito.com-pru...@javierito.com
Received: (qmail 30614 invoked from network); 8 Oct 2009 18:52:47 -
Received: from unknown (HELO test.com) (192.168.5.103)
  by localhost.localdomain with SMTP; 8 Oct 2009 18:52:47 -
Subject: Just a test
Testing
..

This is very strange :( :( :(


This is getting me crazy. I have installed several qmail+vpopmail in the 
past and I never had this problem :(




Yah, I'd still like to see what the ouput of ps -ax | grep qmail-lspawn is.

If it's not qmail-lspawn ./Maildir/ then that is the problem.

Regards,

Rick


!DSPAM:4ace38c032711953120205!



Re: [vchkpw] Logging vpopmail password failures

2009-10-02 Thread Rick Macdougall

Rob Wright wrote:

Greetings,

I have vpopmail installed by Inter7. How can I set up logging to see what 
password users are passing for POP3, IMAP and SMTP? Is it even possible. I 
don't even need to see the good passwords, just the failures.


Thanks,

Rob Wright





Hi,

Mine just does it.

In /var/log/maillog I get entries similar to

Oct  2 18:33:27 mail002 vpopmail[22243]: vchkpw-pop3: password fail 
(pass: 'dtapt') someu...@mydomain.com:10.10.10.10


The compile option, I believe, that does this is --enable-logging=v

Regards,

Rick

!DSPAM:4ac6839b32712122210896!



Re: [vchkpw] how to apply various patches to qmail

2009-08-26 Thread Rick Macdougall

Bogdan Motoc - CRC wrote:

Hello fellow qmail enthusiasts,

While preparing for a new mail server installation some questions have 
surfaced.

The intent is to use:
- smtp authentication to allow roaming users to relay mail
- chkuser to validate recipient existence and reject messages before 
they are sent
- simscan to process messages through clamav and spamassassin while they 
are being transfered
All of these require qmail to be patched several times, and probably in 
a certain order. The documentations for the above refer to patching 
netqmail-1.05, but usually they don't take into account the other 
patches. So, while they might apply cleanly to netqmail, combined they 
can't be applied automatically and some source editing is required. 
Meanwhile, netqmail-1.06 seems to be the current version and the CHANGES 
file doesn't list the additions from 1.05 except the legal changes.


So my question is this: in which order must the following patches be 
applied to netqmail-1.06?

- qmailqueue
- qmail-maildir++
- chkuser
- qmail-queue-custom-error
- qmail-smtpd-auth
Have any of these been integrated into netqmail-1.06, thus not needing 
patching anymore?


Vpopmail has to be installed before any patching is done to qmail or 
installing simscan, right?




Hi,

http://www.shupp.org/toaster/ has all the patches and links needed for 
all of the above.


Regards,

Rick


!DSPAM:4a954b9832711469610154!



Re: [vchkpw] smtp auth with chkuser problems

2009-06-10 Thread Rick Macdougall

James Cox wrote:

I've had it running for a few hours, and have this:

  1 CHKUSER rejected relaying
  5 CHKUSER accepted any rcpt
 28 CHKUSER relaying rcpt
362 CHKUSER accepted rcpt
   1719 CHKUSER rejected rcpt
   1758 CHKUSER accepted sender

and... in my defines...
neither of those two are enabled.

version 2.0.9 for me.



What version of SMTP AUTH are you using ?

I know there is a version out there that causes the exact problem you 
are seeing, although to my knowledge it hasn't been seen in years.


Regards,

Rick


!DSPAM:4a2fb48732661746112274!



Re: [vchkpw] smtp auth with chkuser problems

2009-06-10 Thread Rick Macdougall

James Cox wrote:


On 10 Jun 2009, at 14:26, Rick Macdougall wrote:


James Cox wrote:

I've had it running for a few hours, and have this:
 1 CHKUSER rejected relaying
 5 CHKUSER accepted any rcpt
28 CHKUSER relaying rcpt
   362 CHKUSER accepted rcpt
  1719 CHKUSER rejected rcpt
  1758 CHKUSER accepted sender
and... in my defines...
neither of those two are enabled.
version 2.0.9 for me.


What version of SMTP AUTH are you using ?

I know there is a version out there that causes the exact problem you 
are seeing, although to my knowledge it hasn't been seen in years.

Rick:

yeah, i saw that patch. but i am using the current version (i think?) 0.31

james





Don't know what that patch is or does.

I use Bill Shupp's toaster (http://www.shupp.org/toaster/) which uses 
the following


smtp-auth patch v. 0.5.7 by Erwin Hoffmann
http://www.fehcom.de/qmail/smtpauth.html

Regards,

Rick


!DSPAM:4a2fd06a32661582142373!



Re: [vchkpw] smtp auth with chkuser problems

2009-06-10 Thread Rick Macdougall

Rick Macdougall wrote:

James Cox wrote:


On 10 Jun 2009, at 14:26, Rick Macdougall wrote:


James Cox wrote:

I've had it running for a few hours, and have this:
 1 CHKUSER rejected relaying
 5 CHKUSER accepted any rcpt
28 CHKUSER relaying rcpt
   362 CHKUSER accepted rcpt
  1719 CHKUSER rejected rcpt
  1758 CHKUSER accepted sender
and... in my defines...
neither of those two are enabled.
version 2.0.9 for me.


What version of SMTP AUTH are you using ?

I know there is a version out there that causes the exact problem you 
are seeing, although to my knowledge it hasn't been seen in years.

Rick:

yeah, i saw that patch. but i am using the current version (i think?) 
0.31


james





Don't know what that patch is or does.

I use Bill Shupp's toaster (http://www.shupp.org/toaster/) which uses 
the following


smtp-auth patch v. 0.5.7 by Erwin Hoffmann
http://www.fehcom.de/qmail/smtpauth.html

Regards,

Rick






Hi,

Yup, I'm pretty sure your 0.31 patch is the culprit.

-- quote --

now mostly superseded with Krysztof Dabrowski's (and Eric M. Johnston) 
qmail-smtpd-auth-0.31 patch to include support for CRAM-MD5 with an 
additional cmd5checkpw  PAM. Unfortunately, though wide-spread, Krysztof 
Dabrowski's SMTP-Auth patch breaks the checkpassword interface for 
CRAM-MD5. Instead of transmitting the sequence 
'userid\0password\0challenge\0' it uses 'userid\0challenge\0password\0'.


*** Another obstacle is to close (like 'qmail-popup') unnecessarily file 
descriptor 2 (FD 2). This inhibits a common logging to STDERR. ***


Also, the unconditional close of FD 3 (to provide the AUTH information 
to the PAM) conflicts with reading control/morercpthosts.cdb. Further, 
there are some problems decoding BASE64.


-- end quote --

Regards,

Rick

!DSPAM:4a2fd83732661317915693!



Re: [vchkpw] smtp auth with chkuser problems

2009-06-10 Thread Rick Macdougall

James Cox wrote:


On 10 Jun 2009, at 18:02, Tonix (Antonio Nati) wrote:


Roberto ha scritto:

Hi James,
what version of netqmail are you using?
does anybody knows if chkuser is compatible with 1.06?





Problem should be the auth patch which breaks the output.
In the past other people with other auth patches complained. They 
passed to the one contained in Shupp's Toaster (the unique one I've 
checked) and all problems went away.

As alternative, should try to disable logs.


So, versions-

I've got 
- netqmail 1.06

- smtp auth 1.03 from http://members.elysium.pl/brush/qmail-smtpd-auth/
- chkuser 2.0.9 

i tried looking at the toaster, but it is patched against a different 
netqmail - 1.05?


wasn't sure if i should look to back out that patch and rebuild qmail..



Hi,

Bill's qmail-toaster-0.9.1.patch.bz2 applies cleanly and makes cleanly 
against netqmail 1.06.  I just tested that.


I didn't install it how ever.

Regards,

Rick


!DSPAM:4a3023b532661537351311!



Re: [vchkpw] non plaintext authentication methods

2009-05-10 Thread Rick Macdougall

ckubu wrote:

hi,

I'm running qmail+vpopmail+dovecot on FreeBSD stable system and all worked 
fine, almost all. I'm not able to bring non-plaintext authentication methods 
working on qmails pop3 service (APOP), and on dovecots imap service 
(CRAM-MD5).


Maybe this is an OS issue and this question isn't on he right place here, in 
this case sorry about that.


my versions:
(net)qmail with tls-smtp-auth patch
vpopmail 5.4.27
dovecot 1.1.14

i have tried older versions of vpopmail and dovecot, but with the same result: 
non-plaintext authentication methods doesn't work.


what did i wrong ? can aybody help me ?



Hi,

The only reason I can think of that CRAM-MD5 doesn't work with pop or 
imap is that clear text passwords are disabled.


To use CRAM-MD5, you need a clear text password stored locally.

Did you perhaps compile vpopmail with the --disable-clear-passwd flag ?

Regards,

Rick


!DSPAM:4a07579332681530816047!



Re: [vchkpw] Some vaddaliasdomain questions

2009-05-06 Thread Rick Macdougall

Wouter van der Schagt wrote:

Hi all, i have a few questions about domain-wide aliases.

1. I understand that vaddaliasdomain creates a domain wide alias, but am 
not sure what deletes them. As far as i understand valias is used for 
individual aliases. Do i use vdeldomain aliasdomain to delete the 
alias domain? if not, what do i use?


Correct, vdeldomain is the correct way to remove a domain alias



2. What happens to the alias domains if the main domain is deleted with 
vdeldomain, are they also deleted or do they remain in the configuration ?


Not in the version I am running, it may in new versions.  I'd always try 
and delete the alias before deleting the main domain.




3. Am I correct in assuming that the aliased domain cannot be used for 
authentication? (MySQL backend?)


The alias domain should be able to be used for authentication.  It is an 
alias.  Both the main and aliased domain should be able to be used.


HTH,

Rick


!DSPAM:4a0183fc32681673434890!



Re: [vchkpw] vpopmail valias wildcard support - every...@domain.com

2009-04-28 Thread Rick Macdougall

Matt Brookings wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jeff Koch wrote:

Hi:

In the case where a domain has, say, 100 email accounts, is there an
easy way to configure a wildcard alias or mailinglist so that an email
can be sent to everyone? Otherwise I can see that in a constantly
changing organization it could be a lot of work to keep a mailing list
or alias current.

vpopbull would not work since the individual domains don't have that
access.


There's no current way to do this, mostly because there's no easy way to
authenticate the sent mail.  You wouldn't want a spammer, or an employee
who shouldn't be emailing everyone, to email company-wide.

You could write an email interface to vpopbull probably.  One that requires
a password somewhere in the email, and have it passed the message via a
dotqmail file.


Perhaps it should be something added to vpopmaild, allowing the 
postmaster to send to their domain and the administrator to send to all 
domains.


Just an idea.

Rick

!DSPAM:49f7238932683784218311!



Re: [vchkpw] logging capabilities

2009-04-27 Thread Rick Macdougall

d...@stean.ch wrote:

hello there,

i am using vpopmail 5.4.17 with cdb backend and i would like to know
if there are some real logging capabilities for it.

i have a rather big tool chain installed on the server around qmail
and i need to have an overview of what happens with all the e-mails.
this includes the path they took through that chain until they land
inside the users maildir, or the reason and location they got
rejected (spam,...).

now, using for example vdelivermail with the option delete, qmail
will log in either way that the delivery was successful, however,
for the overall statistics i get a wrong result, because delete
mail (wrong recipient) is not the same than a mail delivered to an
existing account.

as far as i know vdelivermail does not log anything? any plans for
this ?



You should really have the chkuser qmail patch installed and use 
bounce-no-mailbox instead of delete.


Is there a reason why you are using delete rather than rejecting unknown 
users in the smtp conversation ?


Regards,

Rick


!DSPAM:49f5b57f32684979047480!



Re: [vchkpw] logging capabilities

2009-04-27 Thread Rick Macdougall

d...@stean.ch wrote:

hello rick,

yes i have two points why i dont use bounce-no-mailbox.
one is dictionary based spamming, meaning that if one
tries out hard enough, he will, by scanning with lots of
recipients, find out what valid user accounts exist on my
server. the other one is the problem called backscatter,
sending spam by bouncing back. although there seems to
be a patch in the wild for the latter.

however, if the patch you mention would deny the
communication, instead of reject the email, i would
certainly use it.



The patch in question rejects at the smtp communication level.  It does 
not cause backscatter.  It's rejects the email with a 551 User unknown 
response.


It does not stop the dictionary attack scenario but it can be set to 
reject any email address after a configurable bad recipient limit has 
been reached.


I'd recommend at least taking a look at everything it can do.

It can be found at http://www.interazioni.it/opensource/chkuser/ and is 
incorporated into many qmail/vpopmail toaster scripts.


Regards,

Rick




!DSPAM:49f532687681187851!



Re: [vchkpw] Where vmoduser save changes to user's limits?

2009-03-26 Thread Rick Macdougall

Alessio Cecchi wrote:

Hi,

I'm running vpopmail 5.4.X with MySQL backend. When I change the limits
of one user, for example disable SMTP, or POP3, where are saved these
informations? I have not found any entry related to this in the MySQL DB.

Thanks


It is a bit flag in the users GID field.

Regards,

Rick

!DSPAM:49cb802e32681703411845!



Re: [vchkpw] Re: vpopmail FHS compliance

2009-03-18 Thread Rick Macdougall

Itamar Reis Peixoto wrote:

that's a great , but qmail is no more maintaned (no new features)

will be a good ideia to make vpopmail more compatible with postfix and
maybe others MTA's




Qmail is now in the public domain.  You are free to add any new features 
you want.


Regards,

Rick


!DSPAM:49c13c5f32681609681472!



Re: [vchkpw] vpopmail domain quotas

2009-03-11 Thread Rick Macdougall

real estate agent wrote:

 I need to know how to unsubscribe again...




From the message headers:

List-Post: mailto:vchkpw@inter7.com
List-Help: mailto:vchkpw-h...@inter7.com
List-Unsubscribe: mailto:vchkpw-unsubscr...@inter7.com
List-Subscribe: mailto:vchkpw-subscr...@inter7.com

Regards,

Rick


!DSPAM:49b7ff9c32683841819056!



Re: [vchkpw] Courier support

2009-03-10 Thread Rick Macdougall

Matt Brookings wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

It's a sad tale, but a true one.  We're all probably aware that Courier-MTA has 
dropped support for vpopmail.
This has forced many of us to move to the speedier, and in my opinion, overall 
better, Dovecot package --An easy
move indeed.


My question is this: Courier-IMAP has dropped us, should we drop Courier-IMAP?
- --


My $0.02 says yes.

Regards,

Rick


!DSPAM:49b6878732681537220343!



Re: [vchkpw] New Command vmoddomain

2009-01-29 Thread Rick Macdougall

Remo Mattei wrote:
How about spam enable and disable feature? Also vacation will be a good one 



vacation on a domain ?

Regards,

Rick


!DSPAM:4981cbd732681663383336!



Re: [vchkpw] validrcptto functionality in chkuser

2008-10-09 Thread Rick Macdougall

Guli wrote:

Hello
I have machine as primary MX with mailboxes and I use it also as
secondary MX for few domains.

I use toaster installation by http://mail-toaster.org/ (vpopmail +
netqmail + simscan)
I would like use similar functionality as validrcptto do
(http://qmail.jms1.net/patches/validrcptto.cdb.shtml)
but with chkuser ( http://www.interazioni.it/opensource/chkuser/ ).

If I have domain in morercpthosts (as the backup MX record) , than it
catches all accounts for this backup domain, even if accounts doesn't
exists on its primary MX.
I would like to export  list  of  real accounts from primary MX and
check them on secondary for relay, but together with normal local
vpopmail accounts on the same machine.
I observe google, mailinglists etc.., but I didn't found any solution.
Is there any way to do it with chkuser?



Hi,

Have the domains in question on the MX server and in 
control/morercpthosts and user/assign but not in virtualhosts


chkuser will then validate the users as being local but qmail will send 
the message on to the primary MX (or use smtproutes to send it to the 
correct place).


Regards,

Rick


!DSPAM:48ee119032311666416715!



Re: [vchkpw] incoming mails from vpopmail to exchange

2008-10-02 Thread Rick Macdougall

[EMAIL PROTECTED] wrote:

not working !!! :(

qmail store incoming mail local in vpopmail user maildir/new folder

smtproutes file ip address 
walts.com:[10.10.10.10]


( no matter ip with or without brackets )



remove the domain from the /var/qmail/control/virualhosts file and HUP 
qmail-send


Users will still be checked against the local vpopmail user database to 
see if they exist but will be forwarded.


Regards,

Rick


!DSPAM:48e5245632314693716533!



Re: [vchkpw] incoming mails from vpopmail to exchange

2008-10-01 Thread Rick Macdougall

[EMAIL PROTECTED] wrote:

Hi

I have external mailserver ( free bsd ) with qmail + vpopmail software and i
need configure external mail server to forward all incoming mail messages to
the internal ms exchange server. between servers i have cisco pix firewall with
open incoming smtp port from external mail server !!
both mailservers have the same domain name.





Use smtproutes to forward (lok on www.lifewithqmail.org for more 
information).



domain1.com:exchange.domain1.com

Where domain1.com is your incoming domain and exchange.domain1.com 
resolves to the IP address of your internal smtp port.


Regards,

Rick

!DSPAM:48e37c2e32311476914973!



Re: [vchkpw] incoming mails from vpopmail to exchange

2008-10-01 Thread Rick Macdougall

[EMAIL PROTECTED] wrote:

I was change smtproutes file with :

domain1.com:10.10.10.10

where ip 10.10.10.10  is cisco pix ip adress

but i'ts not working !! :(



Use smtproutes to forward (lok on www.lifewithqmail.org for more 
information).



domain1.com:exchange.domain1.com

Where domain1.com is your incoming domain and exchange.domain1.com 
resolves to the IP address of your internal smtp port.




Hi,

Did you HUP or restart qmail-send ?  It needs to be HUPed or restart to 
take affect.


Regards,

Rick


!DSPAM:48e3861e32311553488391!



Re: [vchkpw] incoming mails from vpopmail to exchange

2008-10-01 Thread Rick Macdougall

Shane Chrisp wrote:

On Wed, 2008-10-01 at 16:52 +0300, [EMAIL PROTECTED] wrote:

Try putting the IP address in square brackets like

domain1.com:[10.10.10.10]



Hi,

No, there is no need to do that.

I manage 50 or more external domains (for anti-virus/anti-spam 
applications) and you do not need the square brackets.


Regards,

Rick


!DSPAM:48e3876b32311100639383!



Re: [vchkpw] incoming mails from vpopmail to exchange

2008-10-01 Thread Rick Macdougall

Shane Chrisp wrote:

On Wed, 2008-10-01 at 10:21 -0400, Rick Macdougall wrote:

Shane Chrisp wrote:

On Wed, 2008-10-01 at 16:52 +0300, [EMAIL PROTECTED] wrote:

Try putting the IP address in square brackets like

domain1.com:[10.10.10.10]


Hi,

No, there is no need to do that.

I manage 50 or more external domains (for anti-virus/anti-spam 
applications) and you do not need the square brackets.


Regards,

Rick


Hi,

If there is no dns available, not using the brackets can cause issues I
have found. I just use the brackets by default when using private IP
space in particular.

Taken directly from man qmail-remote

 The  remote  host  is  qmail-remote's first argument, host.
qmail-remote sends the message to host, or to a mail exchanger for host
listed in the
   Domain Name System, via the Simple Mail Transfer Protocol (SMTP).
host can be either a fully-qualified domain name:

silverton.berkeley.edu

   or an IP address enclosed in brackets:

[128.32.183.163]


Cool, learn something new every day.  Guess I never got bitten by it as 
all the IPs I use are public.


Regards,

Rick


!DSPAM:48e395eb32311890320117!



Re: [vchkpw] MySQL server has gone away

2008-09-25 Thread Rick Macdougall

Jordi Prats wrote:

Hi all,
I'm facing this error:

dovecot: auth(default): vmysql: sql error[3]: MySQL server has gone away

I've been googling about this but it seems to be a resolved
issuem(back to 2005), so it should just reconnect but it does not so.
If I just restart dovecot (my IMAP server) it works OK.

I'm using vpopmail 5.4.25


Any ideas why it's not reconnecting?

Thanks you!



Mysql 5 ?

If so it may be that MySQL is closing the connection after a period of 
inactivity.  If that's the case you need to increase the idle timeout or 
eliminate it completely.


We set ours at 4 days to allow for long weekends etc.

Regards,

Rick


!DSPAM:48dbae0d32311477465604!



Re: [vchkpw] MySQL server has gone away

2008-09-25 Thread Rick Macdougall

Jordi Prats wrote:

I'm using dovecot 1.1.3 with MySQL 5.0.67.

I think that disabling idle timeout it's not a good idea since MySQL
could die for too many useless idle conections too. There is not any
better solution? Any vpopmail parameter that I'm missing?

Thank you !



Have a network monitor login to IMAP every half hour to keep the 
connection open ?


There really is no downside to increasing the timeout unless you also 
have user generated code that can do pconnects instead of connects.


Rick


!DSPAM:48dbbb5b32311497813221!



Re: [vchkpw] how to check local mailaddresses on mx server ?

2008-07-14 Thread Rick Macdougall

Bulent Kolay wrote:

I have some domains. I use vpopmail5.x on qmail-1.03.

I have a MX server and a Pop3 server for my domains.

I want my mx server to check for local users on my pop3 server.
I don't want my pop3 server to check these local mailaddresses again.

The pop3 server stores passwords of users in cdb database.

How can I configure the mx server?
How do I show the mx server users's info as online ?
Could you give me an example or a useful link ?

Thanks
  






Have the MX server mount the vpopmail and qmail home dirs over NFS and 
have it deliver locally ?


That's what we do here, every thing is on a netapps, although any NFS 
server capable machine would do.


Rick


!DSPAM:487bc38b32351811548716!



Re: [vchkpw] delivery failure

2008-07-06 Thread Rick Macdougall

Quey wrote:

Hi,

On 06/07/08 18:44:29, kalin m wrote:

sorry... i had to change mail accounts...

no. it never worked.

vpomail is compiled from source with:
$ ./configure --enable-clear-passwd --enable-valias 
--enable-auth-module=mysql --enable-domainquotas --disable-roaming-users


Firstly do not use domainquoatas, they never really worked, and in fact 
this option has been removed from current versions.






Enable MySQL logging and see if it tries to hit the database


i haven;t added anything to this installation. just trying to set it 
for the first time on this machine...


the tar i fot off the inter7 site is called vpopmail-5.4.2.tar.gz 
there is no (24|25|26)




yikes! thats like many many many years old! .. Please grab the latest 
stable version from inter7's web site before doing anything else..




The latest versions are on SourceForge now

http://sourceforge.net/projects/vpopmail/

Regards,

Rick

!DSPAM:4870cb6732351040664929!



Re: [vchkpw] Strange maildirsize problem

2008-07-02 Thread Rick Macdougall

Steve Cole wrote:

On Wednesday 02 July 2008, Eric Olsen wrote:

I'm starting to think someone needs to fork vpopmail (if possible), since the 
maintainers appear to have no interest in vpopmail anymore.  I'd have done it 
already, pending a study of the license, if I had better coding abilities.  
As an example,  also lapsed is the support in courier-imap for vpopmail 
because the vpopmail maintainers have stopped submitting or signing off on 
the vpopmail authentication code in courier-authdaemon.  


Sorry there isn't better news.



Hi,

I believe the courier problem resides with Mr Sam.  I know for a fact 
that at least one of the devs has submitted patches that were ignored.


I believe it was Bill but I could be wrong.

If the devs want to roll out a new version I do have a couple of 
different OS's I can test the current dev code on.


Tom, Rick, Bill ?  Any interest ?

Regards,

Rick

!DSPAM:486c0f6532359052687108!



Re: [vchkpw] strange problem bin file all gone

2008-06-17 Thread Rick Macdougall

Remo Mattei wrote:

I checked and never had this problem before. Filesystem looks good. Keep
investigating.. :)




Only time it ever happened to me is when I did an rsync and left out a 
trailing / on the receiving side with the --delete option.


Cheers,

Rick


!DSPAM:4857ed2232356768810171!



Re: [vchkpw] migrating to new server

2008-06-11 Thread Rick Macdougall

Lampa wrote:

Hello,

problem is that is not only one domains (about 200 domains) and i need
migrate only some domains.

2008/6/11, Tonix (Antonio Nati) [EMAIL PROTECTED]:

Lampa ha scritto:


Hello,

i need move from old server to new one. Problem is while DNS are
replicated i need disable whole access to domain (delivering - smtp,
pop3, imap). I know that via vpopmail is possbile disable access to
imap/pop3. but is possible to disable smtp. In best case i need that
smtp returns some error and message will be delivered later (to new
mail server)



modify DNS to lower TTL for MX

Create new domains on new server without smtpd running

rsync data over to new server

on old server add domains to smtproutes (pointing to new server)

on old server remove domains from virtualdomains

change dns

restart or hup qmail-send

rsync data over to new server again

start mail services on new server

Voila!


!DSPAM:484fb8d832351350751482!



Re: [vchkpw] Problems with domain limits

2008-06-05 Thread Rick Macdougall

Nick Bright wrote:

Update to this issue:

It seems a little odd, but with vpopmail compiled for 
--disable-mysql-limits if the limits table exists, vmoddomlimits 
will apply settings to that table. If the table is deleted, it applies 
them to the .qmailadmin-limits file.


So now, vpopmail and vqadmin are talking to .qmailadmin-limits; all that 
remains is to get qmailadmin to talk to .qmailadmin-limits.




After recompiling vpopmail with --disable-mysql-limits, make clean and 
make qmailadmin. That should fix the problem.


qmailadmin reads fine from .qmailadmin-limits here.

Regards,

Rick


!DSPAM:48484e3532351715118327!



Re: [vchkpw] One char username too short. Why?

2008-04-17 Thread Rick Macdougall

D. Hilbig wrote:

Would the --disable-users-big-dir option allow single character usernames?

D. Hilbig wrote:

vadduser will not let me create a mailbox where the username part is just
one letter (eg. [EMAIL PROTECTED]).  Is there a valid reason why one letter is
too short?



Because vpopmails hashing function uses A-z and 0-9 for subdirectories, 
each a single character.


Hence there would be no way to tell if d was a subdir or a valid user.



I'd have to look at the code but I doubt it.  Perhaps one of the devs 
can chime in.


Regards,

Rick

!DSPAM:4807ab5d120501098313551!



Re: [vchkpw] One char username too short. Why?

2008-04-16 Thread Rick Macdougall

D. Hilbig wrote:

vadduser will not let me create a mailbox where the username part is just
one letter (eg. [EMAIL PROTECTED]).  Is there a valid reason why one letter is
too short?




Hi,

Because vpopmails hashing function uses A-z and 0-9 for subdirectories, 
each a single character.


Hence there would be no way to tell if d was a subdir or a valid user.

Regards,

Rick


!DSPAM:4806879e120501594313875!



Re: [vchkpw] dovecot + vpopmail

2008-03-01 Thread Rick Macdougall

Dhaval Thakar wrote:



can anyone please guide me with vpasswd.cdb not getting modified while 
using dovecot,

whereas its working proper with courier-authlib.
i have recompiled vpopmail also.



Why would vpasswd.cdb get modified by a pop or imap process ?

Regards,

Rick

!DSPAM:47c95278120504298468128!



Re: [vchkpw] Bogus quota warnings

2008-02-29 Thread Rick Macdougall

Christian Lerrahn wrote:

Hi Rick,

I'm using vpopmail 5.4.16. However, I already upgraded to this
version

Sorry, this has to be 5.4.25.

Cheers,
Christian




I believe there is a quota bug in 5.4.25, I'd back down to 5.4.24


I've downgraded to 5.4.24 a while ago but I'm being told that people
still get these bogus warnings. Unfortunately I can't downgrade too far
because I need the onchange patch but I might still try a couple of
lower versions.



Are you using maildrop or some other final delivery method that doesn't 
support maildir++ quotas ?


What has access to the users Maildir ?

pop
imap
delivery
sqwebmail (direct access)
etc ?

Regards,

Rick


!DSPAM:47c811b0120501373636321!



Re: [vchkpw] setting up a secondary MX

2008-02-26 Thread Rick Macdougall

Bogdan Motoc - CRC wrote:


Florian Leeber wrote:

Bogdan,

try it with the CHKUSER patch for qmail-smtpd, I had the same problems
like you, and I got all issues solved with that. The only thing I have
to solve is the fact that the vpopmail data should be replicated on the
secondary MX. So far this would be no problem except that my domain
users all got their private vpopmail domain directory which is difficult
to replicate ...
FL
there is a patchset including smtp-auth and so on, but unfortunately you
would have to google this...

Ok, what do I have to replicate from qmail/vpopmail for it to work and 
not deliver mail localy, but to the primary MX? Replicating everyting, 
including maildirs is out of the question.




The validrcptto patch or using mysql as the backend will both work.

We happen to use the mysql option.

Regards,

Rick


!DSPAM:47c46d2c310548438657577!



Re: [vchkpw] Bogus quota warnings

2008-02-21 Thread Rick Macdougall

Christian Lerrahn wrote:

I'm using vpopmail 5.4.16. However, I already upgraded to this version


Sorry, this has to be 5.4.25.

Cheers,
Christian





I believe there is a quota bug in 5.4.25, I'd back down to 5.4.24

Regards,

Rick


!DSPAM:47bd9849310541696317520!



Re: [vchkpw] OT: Webmail trends for vpopmail/qmail/IMAP

2008-01-03 Thread Rick Macdougall

ISP Lists wrote:

Off-topic, perhaps respond off-list?

What are the hot applications in F/OSS webmail that start to move towards
AJAX  clients (yahoo! mail beta, gmail) that might function well on a
vpopmail/qmail/IMAP infrastructure?  I looked at Sourceforge and didn't
see much that would leap past squirrelmail.



We use RoundCube in addition to Squirell.

http://roundcube.net/

Regards,

Rick


!DSPAM:477d499e310541353510414!



Re: [vchkpw] OT: Webmail trends for vpopmail/qmail/IMAP

2008-01-03 Thread Rick Macdougall

Charles Kung wrote:

Hi Rick,
 
I like to use Roudcube as you recommanded. Wonder if you have ways to do 
messag filter as they will implement much later in their milestone.

http://trac.roundcube.net/milestone/later
 


Nope, I haven't had time to look at the code base.  Other stuff keeps me 
busy enough.


Cheers!


!DSPAM:477d50d0310545469914480!



Re: [vchkpw] [OT] IMAP Servers: Dovecot or Binc?

2007-12-19 Thread Rick Macdougall

Tom Collins wrote:
Courier-IMAP seems to be putting a heavy load on my server when someone 
accesses a mailbox with a large number of messages in it.  I recently 
scanned the mailboxes on my server, and sent some notices out to clients 
who had boxes with old, unread messages in them.  I think that today 
some have gone online to pick up that mail, and I'm suffering the 
consequences (server load of 14.0+).


What's the preferred IMAP server for a machine that will have 100-200 
connections (plan for growth...) but may have an occasional mailbox with 
1000+ messages in it.  I've searched the archives and tried to google 
for imap server performance and imap server comparison but haven't 
come up with much after an hour.


My impression is that Dovecot performs well, better than courier, but 
I'm wondering if anyone can offer up some real-world numbers to help me 
make my decision.




On a folder with 15K messages in it, Courier took well over 2 minutes to 
open it (Thunbderbird as the email client).  Dovecot took under 45 seconds.


I never did check the load though.

HTH,

Rick


!DSPAM:4769741932008691119870!



[vchkpw] Just thought I'd share

2007-11-27 Thread Rick Macdougall

Hi,

We just finished successfully moving a 20K user sendmail setup to 
qmail/vpopmail.


What we did, in stages, is:

1) Create two external smtp in MTA's using qmail

2) Create a NSF mount located on a Netapps for /home/vpopmail/domains

3) Create all the 20K users on an SMTP OUT/POP host running 
qmail/vpopmail using the mysql module.


4) Add chkuser on the external MTAs for user checking by having the 
domains listed in rcpthosts and users/assign, but not in virtualdomains


5) Today we moved sendmail IP over to a qmail/vpopmail server and added 
the domains to virtualdomains so the external MTAs do local delivery to 
the NFS mount.


End result, we have the two external MTAs receiving, validating and 
virus/spam scanning the incoming emails and doing local delivery for our 
 main domains (we're an ISP).


As well, we are now scanning user outbound mail for viri and spam which 
we were not doing with sendmail.


Identical systems and the old sendmail server was running at 1.5 - 3.0 
load.  The new qmail server is running at 0.13.


Just thought you might be interested in the setup.

Regards,

Rick

!DSPAM:474ca45332001386380848!



Re: [vchkpw] relay server

2007-11-09 Thread Rick Macdougall

ed wrote:


In order to accept the mail, the domains in question should exist in:

  /v/q/c/virtualdomains
  /v/q/c/rcpthosts

Then the domains should also exist in

  /v/q/u/assign

Which should also be compiled to a cdb

  /v/q/u/cdb


(check that the two have similar information)

Then you should check that ~vpopmail/bin/vdominfo shows appropriate
information.

Should the domain exist in /v/q/c/smtproutes then the delivery will not
be treated as local and the mail will be sent to the next hop.



No, if the domain is in /v/q/c/virtualdomains then the smtproutes file 
will not be looked at.


Regards,

Rick

!DSPAM:47346b9c32001320215767!



Re: [vchkpw] Two qmails in same machine

2007-11-08 Thread Rick Macdougall

Quey wrote:


We have sendmail boxes as front line, that do all the pre-connect tests 
easily without adding in 35 patches like we have to make qmail 
modern-ish and then anti virus/spam/phishing/etc tests, one important 
factor is the milter smf-sav which asks the database server (we call) 
qmaster (a vpopmail/mysql db server) if user exists to avoid 
backchatter,  if it does, then sendmail sends to qrouter which is a 
simple qmail/vpopmail install that accepts the mail and puts it into the 
users dir (which are NFS attached) all the nfs stuff  and qmaster and 
qrouter all operate on pvt address space, on second gbit port for added 
protection, but of course could be run on live net interfaces if you 
dont have the option of dual ethernet.


(we tried postfix with its remote recipient verification, but it cant 
handle the loads and even its author recommends not to use on very busy 
systems, we dont use qmail on the front line boxes because we dont have 
to fear breaking patches trying to incorporate RBL, SPF, SAV,  DNS 
checks, badmx zone checks, bad helo, force helo, and milter-regex to 
stop all home users etc etc etc, sure we might end up geting qmail to do 
all these, but after how many hours, when with sendmail its just there 
and adding a milter  after another milter cant break patching like with 
qmail :) )




We do the same thing but with Bill Shupp's qmail toaster (and no 
additional patches).  Each external MX talks to two SA servers in round 
robin and then the mail is delivered to the end user pop/smtp server 
(soon to be delivered directly by the external MX's, whoot!).


It's all mounted NFS on a netapps and we use MySQL as a backend Auth 
running on two sql servers mounted iSCSI on the netapps for the databases.


Works well.

Just my $0.02 CAD.

Regards,

Rick

!DSPAM:4733921a32001988532304!



Re: [vchkpw] busy try again later error

2007-10-10 Thread Rick Macdougall

Michael Johnson wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've been running into an issue on our mail server recently. As traffic
has been increasing on it, I've been getting the response that I listed
in the subject more often, and now customers are also seeing it (busy
try again later!). Of course, this response causes any mail clients to
prompt for password, making it rather annoying.



Is your timeoutsmtpd set in /var/qmail/control to something lower than 
7200 ?  (I'm using 180, I know at least one person on this list is using 
60).


Regards,

Rick



Re: [vchkpw] busy try again later error

2007-10-10 Thread Rick Macdougall

Michael Johnson wrote:

I don't have that file, so I'm using the default (7200 then).

How would this have an effect on POP3 connections?
___
Michael Johnson  909-740-3156 x3163
System Administrator  [EMAIL PROTECTED]
PhD Computing  http://www.phdcomputing.net/


Rick Macdougall wrote:

Michael Johnson wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've been running into an issue on our mail server recently. As traffic
has been increasing on it, I've been getting the response that I listed
in the subject more often, and now customers are also seeing it (busy
try again later!). Of course, this response causes any mail clients to
prompt for password, making it rather annoying.


Is your timeoutsmtpd set in /var/qmail/control to something lower than
7200 ?  (I'm using 180, I know at least one person on this list is using
60).



Heh, sorry. I just glanced through it and assumed it was an smtp error. 
I didn't see any mention of pop3 in there.


You could increase the number of allowed pop3 connections though.  The 
default is 40.  You can increase it by using the -c xx flag with 
tcpserver, where xx is your required number of connections.


Regards,

Rick



Re: [vchkpw] busy try again later error

2007-10-10 Thread Rick Macdougall

Michael Johnson wrote:

Rick Macdougall wrote:


I've been running into an issue on our mail server recently. As traffic
has been increasing on it, I've been getting the response that I listed
in the subject more often, and now customers are also seeing it (busy
try again later!). Of course, this response causes any mail clients to
prompt for password, making it rather annoying.



I'm using sslserver from the ucspi-ssl package so I can offer
ssl-encrypted connections as well. The non-encrypted process is set to
300 connections, and the ssl process is at 200.



And you have about 6K users ???  Our server with about 30K users almost 
never goes over 40 concurrent connections, and we do have quite a few 
users checking every minute.


Are you sure there isn't some issue with authentication or perhaps I/O 
that is slowing down the pop connections ?


Regards,

Rick



Re: [vchkpw] qmail high performance

2007-10-07 Thread Rick Macdougall

Hi,

João Luiz - Terra wrote:

Hi Tren,

Sorry. My english is not good :).

My server is dual xeon 2.4 with 2 Gb RAM and HD SCSI 73 Gb.
I have problems with delivery delay when my server is with many 
connections POP3 and SMTP.
I use isoqlog to analyze my email traffic, but I don´t have stats of 
POP3 and connections with my SMTP (RBL, no delivery, ...). Exists any 
software to analyze POP3 and SMTP log?


qmailmrtg7 is a graphing tool for qmail/pop3/dnscache etc.  You can find 
it at http://www.inter7.com



When my server is slow, I have:
SMTP concurrent: 40 - 50
POP3 concurrent: 20 - 30
Load Average: 30 - 40


Are you running SA and Clam on the same machine ?

Also, are you running the update_tmprsadh nightly (if your not it has to 
generate a new key for every encrypted connection).




I have many SMTP connections with not existing recipient.



If that message is in the smtpd log, that's fine.

You may also want to look at decreasing your timeoutsmtpd, put 180 or 
something similar in /var/qmail/control/timeoutsmtpd to change the 
default of 7200 (this will stop the spam zombie who hang around just 
using up a connection slot).


My server was very good. Between last monday and last friday it is very 
slow.

How can I identify a possible attack?



Hope the above helps.

Regards,

Rick


Re: [vchkpw] Vpopmail mysql and aborted clients

2007-10-06 Thread Rick Macdougall

Christopher Chan wrote:

[EMAIL PROTECTED] wrote:

So then no matter for worrying about this? This can't break the database
or... don't know cause any type of problem... or should I do any conf in
authdaemon for this to be avoided? or is this normal and nothing happens
with it?



Either restarted authdaemon if this happens or upgrade vpopmail. This 
should not break the database. It just affects your imap connections.


Or change your my.cnf for mysql to allow unlimited timeout's.  That's 
what I did (Well I actually set it to 4 days).


Rick



Re: [vchkpw] vpopmail and mysql

2007-10-01 Thread Rick Macdougall

Carlos Collart wrote:

I am the dumbest person alive, and in charge of a vpopmail server,
I manage to drop database vpopmail
the system was a production one, under the domain xx_at_aduanett_dot_hn
I have a backup with the username, name, password in a CVS format

I am trying and getting:
[EMAIL PROTECTED] bin]# ./vadduser -q 10 -c Carlos Collart ccollart 
'password'

Error: User's directory already exists?

i am googling for alternatives
./vadduser -ignoredirectory

or

how could i re-poblate the mysql directly?
insert values(xxx,hash(xxx),xx,xx) into 'aduanett.hn 
http://aduanett.hn'.vpopmail or crypt?



[EMAIL PROTECTED] bin]# ./vadduser -v
version: 5.4.13


Hi,

If all you have is user, pass and domain name (what's the difference 
between username and name in your post ?  gecos perhaps ?), you'll need 
a script to find the users homedir.


You can then take the information gathered above and add it directly to 
the mysql database.  If all you have is the plain text password, you'll 
have to have a routine to encrypt it to MD5 before storing it.


If you don't care about losing the users existing email, just remove all 
the users directories in the/home/vpopmail/domains/domain.com directory 
and let vpopmail automagically add them.


If you need help, just ask.

Regards,

Rick



Re: [vchkpw] Re: Mysql table

2007-09-22 Thread Rick Macdougall

Rick Widmer wrote:
I wasn't quite ready for this, but it has been on my list for a long 
time...  since it has come up, let me throw up this database structure 
for comment.  I have reduced the number of tables (in a full 
installation) and made it relational.-





CREATE TABLE relay(
   ip_addr  char(18) not null,
   timestampdatetime,

   primary key( ip_addr )
   ),


No coffee yet so this may well be out in left field, but on large 
systems when a clear open smtp is run I don't think you'll want to be 
searching through 20K records in the table to see who to expire.


I'd add a key on timestamp.

Rick



Re: [vchkpw] Re: Mysql table

2007-09-21 Thread Rick Macdougall

Robin Bowes wrote:

Tom Collins wrote:

I understand what you're proposing, but I would suggest that it would
add complexity for little gain. Of course, that would need benchmarking
to establish which is the faster method.

If someone can give me a large dataset, I'm happy to crunch some numbers.

R.



How large ?  5k, 15k, 100k ?

Rick


Re: [vchkpw] Re: Mysql table

2007-09-21 Thread Rick Macdougall

Robin Bowes wrote:

Rick Macdougall wrote:

Robin Bowes wrote:

Tom Collins wrote:

I understand what you're proposing, but I would suggest that it would
add complexity for little gain. Of course, that would need benchmarking
to establish which is the faster method.

If someone can give me a large dataset, I'm happy to crunch some numbers.

R.


How large ?  5k, 15k, 100k ?


What sort of size of database are folk using in the real world? How many
users?

What's the most common no. of users?

R.



I'm guessing 200 - 2000 but that's based on the servers I manage for 
clients (around 20 or so).


The biggest installation I manage is around 18k users and I could export 
that with munged domain names / passwords if you wanted something that big.


Rick



Re: [vchkpw] shupp clamav hi cpu

2007-09-19 Thread Rick Macdougall

Remo Mattei wrote:

Hello, I just wonder if someone had the same problem I had with 90.2
clamav on hi cpu also I had the problem that it same ERROR need a full
path after clamav started. I found a patch for that and I have applied
the shupp's patch to 90.3 and now the load is low.

Just my 2 cents.

Remo Mattei
Network Security


Yes, but 0.91.2 doesn't seem to have the same problem.

Regards,

Rick



Re: [vchkpw] Delivery Problem

2007-09-14 Thread Rick Macdougall

Marco wrote:

Hi

Qmail does not write into directory of domains of vpopmail.
As I can say to qmail to write inside to virtual domains?
This is a part of log file (/var/log/qmail/smtpd/current):
@400046eacdee2f7ec67c tcpserver: status: 1/20
@400046eacdee2f7ed61c tcpserver: pid 4176 from 127.0.0.1
@400046eacdee33365bf4 tcpserver: ok 4176
mail2.flynter.net:127.0.0.1:25 localhost:127.0.0.1::46480
@400046eace3d04c16a34 tcpserver: end 4176 status 0
@400046eace3d04c175ec tcpserver: status: 0/20
@400046eaceaa37dda0cc tcpserver: status: 1/20
@400046eaceaa37e15604 tcpserver: pid 4184 from 127.0.0.1
@400046eaceaa3b0e3f7c tcpserver: ok 4184
mail2.flynter.net:127.0.0.1:25 localhost:127.0.0.1::47801
@400046eacec224833c94 tcpserver: end 4184 status 0
@400046eacec22483484c tcpserver: status: 0/20
@400046ead150248da88c tcpserver: status: 1/20
@400046ead150248dbc14 tcpserver: pid 4220 from 127.0.0.1
@400046ead15027a21094 tcpserver: ok 4220
mail2.flynter.net:127.0.0.1:25 localhost:127.0.0.1::42118
@400046ead1820ed83d54 tcpserver: end 4220 status 0
@400046ead1820ed84cf4 tcpserver: status: 0/20

Thanks


Delivery logs are in /var/log/qmail/current, not 
/var/log/qmail/smtpd/current.


Look there instead to see what the problem might be.

Regards,

Rick



Re: [vchkpw] POP3 and IMAP login same username without domain

2007-08-27 Thread Rick Macdougall

Miguel News wrote:

I'm migrating a server with Plesk to qmailtoaster (with vpopmail).
I have some email accounts with the same username and differente domains.
Say:
 username at domain1.com http://domain1.com

 username at domain2.com http://domain2.com
 username at domain3.com http://domain3.com
 ...

Using plesk, users could login via POP3 and IMAP using only the username.
I need to mantain this on the new server.


Thanks in advance



Hi,

You'll need vipmap and an IP for each domain.

Sadly this solution doesn't work with the newest courier-imap or dovecot.

Regards,

Rick


Re: [vchkpw] POP3 and IMAP login same username without domain

2007-08-27 Thread Rick Macdougall

Miguel News wrote:

Um...  I don't know how Plesk works (I've heard questionable things about
it's Licensing status, plus it being closed source - I like to be able to
fix my server bugs :)), but unless you are using a different IP address



and POP3/IMAP server instance for each domain, I don't see how you could
be doing this right now.


I have multiple domains in the same IP.
I tested Plesk with the same username in 3 different domains.

I think the way it works is by comparing username and password and associate it 
with a domain... Not an elegant solution.

When I try to change the password to one that exists on the same username for 
another domain it give me an error.


If it is like this I think I'm going to inform my users to add domain to every 
login.



Multiple domains on the same IP will require the users to use the fully 
qualified name.  There is no way around this.


Regards,

Rick



Re: [vchkpw] [Fwd: [Fwd: [Fwd: Squirrelmail falls over every 8 hrs]]]

2007-08-21 Thread Rick Macdougall

Dave Johnson wrote:

Hi All

Sorry for the cross posting. 


I am not such whether it is a MYSQL, IMAP or Vpopmail problem.

Platform Info

6.2-STABLE FreeBSD 6.2-STABLE #0: Wed Mar 21 22:00:47 


Qmail
php5-5.2.1_3
php5-mysqli-5.2.1_3
mysql-server-5.0.37 
courier-authlib-base-0.59.1

courier-authlib-vchkpw-0.59.1
courier-imap-4.1.2,1 IMAP
Squirrelmail


The problem

Every 8 hrs the Squirrelmail facility stops functioning and users get
the following message:

Unknown User or Password Incorrect

We are have to restart the server every 8 hrs for SQUIRRELMail to work
properly.



Hi,

MySQL 5.x closes the courier-authlib connection after a certain period 
of inactivity.  You need to change the inactive timeout in the my.cnf to 
0 (zero) to make sure it never closes the connection.


Regards,

Rick



Re: [vchkpw] 421 unable to read controls (#4.3.0) with vchkpw

2007-08-15 Thread Rick Macdougall

Jonathan Selander wrote:

Hi,

I've been trying to enable SMTP auth using vchkpw with qmail today. The 
login works fine, but after i issue the rcpt to command over telnet, I 
get the 421 unable to read controls (#4.3.0) error. Google told me it' 
s a permissions problem, but the permissions on the /var/qmail/control 
directory (it's actually a symlink to /etc/qmail) are:


When I telnet it looks like this:

Connected to domain.tld.
Escape character is '^]'.
220 domain.tld ESMTP
helo domain.tld
250 domain.tld
auth login
334 VXNlcm5hbWU6
xxx
334 UGFzc3dvcmQ6
yyy
235 ok, [EMAIL PROTECTED], go ahead (#2.0.0)
mail from:[EMAIL PROTECTED]
250 ok
rcpt to:[EMAIL PROTECTED]
421 unable to read controls (#4.3.0)
Connection closed by foreign host.



If my memory serves me correctly, one of the older auth patches 
incorrectly closes the FD 3 socket.


Which patch are you trying to use ?

FYI - Bill Shupp's complete patch is the easiest to use IMHO, you can 
get it at www.shupp.org


Regards,

Rick


Re: [vchkpw] [OT] spamhaus down?

2007-08-15 Thread Rick Macdougall

Ken Jones wrote:

Has anyone else noticed spamhaus is down?

None of their rbl host names are resolving.
I've tried:
zen.spamhaus.org
sbl.spamhaus.org
xbl.spamhaus.org
sbl-xbl.spamhaus.org
pbl.spamhaus.org

We noticed a delay in accepting email and tracked
it down to rblsmtpd checks on any of those lists.

Ken Jones


No, they are just blocking high volume servers in an effort to make 
you pay for the service.


Although one of my servers is under 2000 messages a day and it's blocked 
as well.


Rick



Re: [vchkpw] [OT] spamhaus down?

2007-08-15 Thread Rick Macdougall

Trey Nolen wrote:

Neither can we.  I just removed their name from our rbl checks because we
were seeing some slowdowns. I bet this was the cause...
We're currently using bl.spamcop.net and were using sbl-xbl.spamhaus.org.
Can anyone suggest a replacement?



cbl.abuseat.org is a fine one and you can rsync the data and run a local 
copy for improved performance.


Regards,

Rick



Re: [vchkpw] Can I delete mail in user's cur directory via command line?

2007-07-31 Thread Rick Macdougall

Blake Girardot wrote:

Hi,

I am using  qmailadmin 1.2.10 and vpopmail 5.4.15.

I have a user that has around 500 megs worth of messages in their cur
directory. I asked them to please remove messages from the server in
their pop client, but now they say that it just times out after a long
time when checking their email, and I can see that messages are still
not being removed from their cur directory.

Can I just cd into their cur directory and rm * the files myself from
the command line?

I searched the archives of this list but didn't have any luck finding
anything that addressed the question of recent vintage.

Best Wishes.


Hi,

Short answer is yes
long answer is you might have to

find . -type f | xargs rm (in the cur directory)

or

rm 1188*
rm 1189*
etc

to get them all removed.

Regards,

Rick



Re: [vchkpw] smtp logfile .. unable to stat .qmail-file

2007-07-30 Thread Rick Macdougall

[EMAIL PROTECTED] wrote:

am Montag, 30. Juli 2007 um 00:41 schrieben Sie:


[EMAIL PROTECTED] wrote:

Hello,

i hope this is the correct mailinglist for the question and perhaps
someone can help.


command=/usr/bin/env - ${qmailsmtpd_postenv} /usr/pkg/bin/softlimit -m 
${qmailsmtpd_datalimit} ${qmailsmtpd_pretcpserver} /usr/pkg/bin/argv0 /usr/pkg/
bin/tcpserver ${name} ${qmailsmtpd_tcpflags}  -c `/usr/bin/head -1 
/etc/qmail/control/concurrencyincoming` -u `/usr/bin/id -u qmaild` -g 
`/usr/bin/id -g qmaild
` ${qmailsmtpd_tcphost} ${qmailsmtpd_tcpport} ${qmailsmtpd_presmtpd} 
/usr/pkg/bin/qmail-smtpd ${qmailsmtpd_postsmtpd} 21 | /usr/pkg/bin/setuidgid 
qmaill ${qm


Hi,

How is qmail going to read the .qmail-* files owned by vpopmail:vchkpw, 
and only readable by that user, if the user it is running as is qmaild ?


Here my -u is the uid of vpopmail and the -g is the gid of vchkpw

Regards,

Rick



Re: [vchkpw] smtp logfile .. unable to stat .qmail-file

2007-07-29 Thread Rick Macdougall

[EMAIL PROTECTED] wrote:

Hello,

i hope this is the correct mailinglist for the question and perhaps
someone can help.

I´m  using qmail, vpopmail under NetBSD.
The logfile smtpd/current shows these messages for mails that are
delivered to an adress which will be forwarded with an dot-qmail file:

@400046ad060a2ee9c5f4 tcpserver: pid 24710 from 193.99.144.71
@400046ad060a2eeb2d54 tcpserver: ok 24710 0:213.221.xxx.xx:25 
:193.99.144.71::43701
@400046ad060b1956e67c unable to stat 
/usr/daten/vpopmaildomains/domains/xxx.de/.qmail-testrc: access denied
@400046ad060b1b978b94 tcpserver: end 24710 status 0

Where do the line .. unable to stat ... mean?

It seems the .qmail-xxx files are evaluated and the mails
is delivered correctly.

The permissons are the same as on our  other systems.


Hi,

Can you give us the output of an ls -la in the domains and 
domains/xxx.de directories ?


Regards,

Rick



Re: [vchkpw] adduser processing times CDB

2007-07-17 Thread Rick Macdougall

Quey wrote:
Hi All, 


I'm not sure things here are efficient as they could be, what times should I 
expect to run:

./vadduser [EMAIL PROTECTED] -q xxx pass
(or even a moduser)

with 15500 users, on a dual 2.6 xeon, 2g ram, 10K rpm scsi disks in raid1,  
/home/vpopmail/domains is NFS mounted from a netapp  fas 270.

currently this takes about 14 seconds to complete, yes I know it needs to 
rebuild the CDB and this is longest part, but I'm sure this is wa too 
slow for what it should be still,  I really don't want to go to SQL if I can 
help it, so I am curious to times others get, as if we keep growing at the rate 
we are, by  Christmas time it will take 3 mins to add one darn user  which will 
upset our automated CRM scripts and other things, especially management :)  I'm 
sure.

Q



I can't say since we don't use cdb here but just fyi, we added 18K users 
(approx) today to a new vpopmail server using mysql in under 5 minutes.


Regards,

Rick


PS.  What email client are you using that doesn't do wrapping of text ?




Re: [vchkpw] Gray list

2007-05-21 Thread Rick Macdougall

Remo Mattei wrote:
Hello I wonder if there is a way to implement a gray list on a 
specific ip only running qmail. I have  multiple IPs but only some are 
accepting mail and not all of them want to have gray list enable.


Thanks,
Remo


If you are running Bill's toaster then it would be an easy matter to 
install the grey listing patch he has and rewrite the mysql queries to 
only grey list on one (or more) local IP addresses.


Regards,

Rick



Re: [vchkpw] catchh all for mail sent

2007-05-08 Thread Rick Macdougall

Alin Panait wrote:

I need somehow to catch all mails sent from all accounts of some domain to
be sent (as CC or better as BCC) to an email address of that domain.

Can you help me pls with this info ?



Hi,

See qmailtap on the inter7 website - www.inter7.com

Regards,

Rick



Re: [vchkpw] cdb -V- Sql

2007-03-24 Thread Rick Macdougall

Peter Normann wrote:
Quey wrote: 

I've read that use of SQL for vpopmail is really only advantageous
when you get many domains. 


Not exactly. SQL is advantageous if you somewhere down the road want to
implement a web based management system for administering accounts.


However, what about 1 domain, at how many users would it be faster to
use SQL over the default cdb file? 
Is it beneficial at 10K users or 50K users in the same domain, or no
real gain at all until 100K users, or never? 


I am uncertain whether SQL provides performance gains under any
circumstances. Maybe someone could expand on this...

Peter



Hi,

It's good to have them stored in mysql if you are moving domains over 
from another server using rsync and miss a trailing / on the domain name 
while using the --delete delete flag.


This is because vpopmail will recreate the users directory from the path 
stored in mysql.


If you were using .cdb files, those .cdb files would have been deleted 
as well and *I* would have been up a creek without a paddle.


Not that I've ever done that.

/me whistles into the wind.

I know this doesn't answer your question but I thought I'd share.

Rick


Re: [vchkpw] FQDN

2007-02-13 Thread Rick Macdougall

M... wrote:

Hi.

Usually, in qmail, with a single domain, you would
have in locals, your domain and FQDN for which you
accept/deliver email, but when you decide to have many
domains and only use virtual domains in vpopmail, the
locals is empty.

If your main domain = mydomain.com
your mail server FQDN = alpha.mydomain.com

How do you make sure that bounces to
alpha.mydomain.com gets delievered to mydomain.com ?

I'm seeing a few rejections to bounces in my log as
alpha.mydomain.com isn't recognized.

Sorry, I didn't use qmail and multiple domains before
but jumped straight to vpopmailso don't know how that
part works.



Hi,

Make alpha.mydomain.com a domain alias to mydomain.com ?

See ~vpopmail/bin/vaddaliasdomain

Regards,

Rick



Re: [vchkpw] Maintenance mail to all user / to a whole domain

2007-02-02 Thread Rick Macdougall

Renaud wrote:

Hello,

I'm using a qmail+vpopmail and I was wondering if you already heard about
a solution that would let me send a mail to all existing users in the
vpopmail database (or to all users of a specific domain) without the need
to create a mailing list or an alias containing all of them?

My current solution would be to actually update the subscribers list of
such a mailing list every night.. (anyone could post to an alias, the
users wouldn't like it :))


Thanks,

Regards,
Renaud



Hi,

See vpopbull

Regards,

Rick



Re: [vchkpw] Qmail with Simscan, SA and ClamAv

2007-01-31 Thread Rick Macdougall

Max Esquivel wrote:

Thanks all for the suggestions.  Been looking at things in more detail:

1) Im not sure how many sessions we are handling.  I do now we were 
maxing out at 120 connections per sec at peak times.


2) we do have spamc and spamd running.
spamd --max-children 25 -x -v -d --pidfile=/var/run/spamd.pid
25 childs enough?



max children 25 and 1 gig of memory is not going to work.  Once you 
start swapping every thing is going to slow to a halt.


I'd increase the amount of ram (we run 4 gig on all our SA servers) and 
see if it would be possible to get a separate machine to just run spamd on.


Regards,

Rick



Re: [vchkpw] how use chkuser on dmz

2007-01-10 Thread Rick Macdougall

Miki wrote:

Hello all,

I have this setup : mail coming to relay server located in DMZ, and
this server is relaying x domains to internal LAN mail server.
Im receiving lot of unwanted mails for nonexistent addresses.

Ho I can handle it ? Chkuser is working fine when are domains on
server, but how I can check user existency on remote server ?
FYI: rsync of passwd.cdb is ok, but how check against aliases ?

Please, I need some pointing where to look at. i fit is possible done
by chkuser or another way  (qmail-ldap)



One option would be to create a duplicate of the domain, users and 
aliases, on the relay server and then remove the domain.com entry from 
virtualdomains.


chkusr will check the duplicate for required users but qmail-send will 
use the smtproutes to send the mail on to the final destination.


An unintended ability but it works very well all the same.  We use it 
here for pre-filtering Exchange servers for clients.  They can even 
login to qmailadmin and add users.


Cheers,

Rick



Re: [vchkpw] how use chkuser on dmz

2007-01-10 Thread Rick Macdougall

Miki wrote:

Hello all,

I have this setup : mail coming to relay server located in DMZ, and
this server is relaying x domains to internal LAN mail server.
Im receiving lot of unwanted mails for nonexistent addresses.

Ho I can handle it ? Chkuser is working fine when are domains on
server, but how I can check user existency on remote server ?
FYI: rsync of passwd.cdb is ok, but how check against aliases ?

Please, I need some pointing where to look at. i fit is possible done
by chkuser or another way  (qmail-ldap)



Follow up:

You could mount the /home/vpopmail/domains/domain.com dir via NFS or 
rsync it hourly to keep it in sync if needed (rather than have to add 
all new users and aliases on both machines.)


Regards,

Rick



  1   2   3   4   5   >