this situation.
It automatically adds iptables rules to drop traffic from IP's which
repeatedly hit the various log files.
It has plenty of configuration options.
It either supports courier's log format out-of-the-box or can be easily
configured
option is missing in yours - this is what tells
the authdaemon which modules to use, and according to the logs it's not
attempting to connect to your SQL database.
For reference, my /etc/courier/authdaemonrc and /etc/courier/authmysqlrc
files are (my database server IP, user/pass have been deliberatel
aemond: no password available to compare
> Mar 5 06:08:05 e350 authdaemond: authmysql: REJECT - try next module
> Mar 5 06:08:05 e350 authdaemond: FAIL, all modules rejected
>
> #########
It would appear that you don't have a row in the passwd table where id =
'
auses can be reduced seriously.
Also, please ensure that your reply goes to the mailing list rather than
my personal email address. This will increase the time it takes for
your problem to be resolved, and can cause thread-splits, which makes it
harder for people to follow the conversation flow.
R
ons, or not
delivered to a mailbox which is read on a regular/routine basis.
You could also put a firewall rule in which REJECTs the identlookup
packets sent from your email server toward theirs. This would
work-around the impatience as well.
Good luck.
Cheers,
Tim Lyth
--
; as I trust myself to not let my servers
become bad netizens without my involvement, and I usually treat traffic
coming in to a firewall system from the LAN in the same way until I
notice bad behaviour from a device on the LAN ("-i -o
-j ACCEPT" and "-m state -i -o
ore local to the individuals trying
to browse the Courier website.
Cheers,
Tim Lyth
--
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills cu
ry of subnet masks (long and/or short
form) in the smtpaccess/* files, so that you can more easily lock down
your RELAYCLIENTs to only the IPs you really want to be allowed to relay?
Cheers,
Tim Lyth
--
LogMeIn Rescue: Any
Hi Matt,
What runlevel is it booting in to, and what does the appropriate
/etc/rc?.d/ have in the way of {K,S}??courier-mta symlinks?
Sounds like there's no S??courier-mta in the default runlevel.
Cheers,
Tim Lyth
On 22/09/2012 9:51 AM, m...@corenetworks.com.au wrote:
> just got my rasp
off the mark with this.
But having dealt with transferring files between Windows and Linux
systems, I am WELL aware of Windows being case insensitive for just
about everything except passwords.
HTH,
Cheers,
Tim Lyth
--
Live
off to the
Sent Items instead of leaving it in the Outbox.
I'm running Debian Sid on my SMTP server, and it's got Courier 0.68.2-1,
which suggests that 0.64.0 is rather out of date, and there might have
been a bug in it which caused it to both pass back the 450 error
as the 2nd line of defense, but it rarely gets called upon to
declare an email as spam.
Greylisting works because of two things:
1) The SMTP protocol requires SMTP servers to re-try delivery to a
remote server if they are given a soft error code;
and will see 0 spam email get in for
months on end.
Also, when you say that your email address is given in all-caps, are
you refering to the RCPT TO: in the SMTP transaction of the 'To:'
field in the DATA of the SMTP transaction?
Cheers,
Tim Lyth
-BEGIN PGP SIGNATURE-
Version:
the
system, alongside v2.6...
Cheers,
Tim Lyth
On 20/08/2010 14:48, Jeff Jansen wrote:
> Tim Lyth wrote on 2010-Aug-20:
>> After I upgraded the python packages on my server, I'm no getting
>> neither of my greylisting or SA filtering methods applied through
>> the PythonF
0 13:44:27 smtp courierfilter: ImportError: No module named
courier.config
Where should the module "courier.config" be located and how do I fix this?
Regards,
Tim Lyth.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - h
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 17/05/2010 21:22, Alessandro Vesely wrote:
> On 17/May/10 09:12, Tim Lyth wrote:
>
>> I've scoured log files to find any mention of requiring FAM on the
>> server and can't. I didn't see any warnings while '
up, where I'd expect to see some request about
FAM support being required but not available.
Is this an issue with Courier-IMAP, Courier-base or a Debian packaging
issue?
Cheers,
Tim Lyth
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla -
s own dns with mail server's private
> adress to keep thunderbird happy.
Absolutely nothing wrong with this AFAIK.
My mail server is set up in exactly the same way.
HTH,
Cheers,
Tim Lyth
--
This SF.Net em
l.com/c10k.html
...
- or anything else I can do with the exception of replacing the hardware or
courier itself.
Have you considered using the greylisting module within pythonfilter?
It's low in the resource usage stakes AFAIK, but is very effective at
stopping 90%+ of spam
Hi Alistair,
The best answer to your question will require further information from
you regarding your system setup, primarily which backend you are using
to keep your subscribers in.
Regards,
Tim Lyth
Mediawire - Alistair Campion wrote:
I
am looking for a script or an
ue aliases when
using an SQL database directly with Courier-{imap,mta}.
Hope this provides you with the capabilities you want.
Cheers,
Tim Lyth
--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simp
Sam Varshavchik wrote:
> Tim Lyth writes:
>
>> So, to get the mailing list working correctly, do I:
>> add this to my database (same field order as above)
>> group70,trains.homedns.org103,1001,/home/couriermta/mailinglist
>> run `couriermlm /home/couriermta/m
.org103,1001,/home/couriermta/mailinglist
run `couriermlm /home/couriermta/mailinglist/group70
address=grou...@trains.homedns.org`
and add .courier and .courier-default files to
/home/couriermta/mailinglist to deal with it
ll the subscribe bit be
stripped off so that I only need to have @domain in my
database, or would I need both @domain AND
-subscr...@domain in the database as separate rows?
Cheers,
Tim Lyth
--
Register Now &
p greatly appreciated.
Cheers,
Tim Lyth
--
Register Now & Save for Velocity, the Web Performance & Operations
Conference from O'Reilly Media. Velocity features a full day of
expert-led, hands-on works
uldn't
tell you as I haven't filtered through the log files recently.
HTH,
Tim Lyth
--
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform c
The result will often be that an innocent person will receive your DSN
failure message and think that you are spamming them.
My advise is to leave your script the way it is, or at the very least
flag the message as spam so that your users can filter it in to a spam
folder in their email clien
Ken Sarkies wrote:
> Ummm - just found the sqwebmail datafiles in the users' Maildir
> directories, and deleting them seems to solve the problem. Whatever
> happened seems to have hit all users.
>
> cheers, Ken
>
Hi Ken,
I had a similar issue where my greylisting went hay-wire because of gdbm
is a consistent way to identify the different salt lengths then
it shouldn't be too hard to patch courier-authldap to figure out the
correct salt length and value, should it?
Cheers,
Tim Lyth
--
Create and
and will keep re-trying).
It's not called "SMTP" for no reason - the "S" is for SIMPLE, and the
obligation is on the client in an SMTP transaction to deal with any
error messages from the server.
HTH,
Tim Lyth
--
other hosts on the same network.
I can confirm correct DNS responses from my ISP's DNS servers for the
emiratesbank.com domain.
Have you tried rebooting the system (probably can restart one or more
services instead, but rebooting is more straight-forward)?
HTH,
Tim Lyth
---
Hi all,
Apart from courier-analog, can anyone recommend any log analyser
programs that can read courier mail logs?
Cheers,
Tim Lyth
--
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell
t, and the emails are being sent out via
the smarthost. :D:D
Thanks for the assistance.
Cheers,
Tim Lyth
--
This SF.net email is sponsored by:
SourcForge Community
SourceForge wan
hey work on the server.
But the telnet results:
220 smtp.ains.net.au ESMTP
EHLO tcl.homedns.org
250-smtp.ains.net.au
250-PIPELINING
250-8BITMIME
250 SIZE 2000
Doesn't give any clear suggestion as to what flavour of SMTP it's
running as far as I can tell.
Sam Varshavchik wrote:
Tim Ly
behaviour has.
When I enable the smarthost line, any email sent out is immediately
DSN'd back stating:
<<< Compatible SASL authentication not available.
What needs to be fixed, and how do I do it? (other than disabling
smarthosti
Thanks for the reply Gordon.
I'm using v1.5 and Debian.
Unfortunately, the log file is vague.
And you were right about python-gdbm not being installed already.
So, it's now installed, and hopefully my greylisting of local clients
will be solved...
Cheers,
Tim Lyth
Gordon Messmer w
ppreciated.
Cheers,
Tim Lyth
--
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
___
courier-use
Add '-noidentlookup' to TCPDOPTS in /etc/courier/esmtpd and restart
Courier-MTA.
mattias wrote:
> yes as the subject
> how to spid upp it
> i not remember
>
>
> --
> Check out the new SourceForge.net Marketplace.
> It is
Can anyone say "Catch 22".
The problem (emails from Sam via this mailing list are being blocked
with a 517 error) will prevent the solution provided by Sam from being
received by Nick.
Hopefully Nick will be able to receive my email and get the solution.
Cheers,
Tim Lyth
Sam V
Juan,
As per a previous message from you, you are using a MySQL backend.
There should be an option to specify the home directory for each account.
This in turn should be able to be returned by authlib and therefore save
you from having to build it up yourself.
HTH,
Cheers,
Tim Lyth
Juan
It should be.
That's Sam Varshavchik's address.
Nick Ellson wrote:
> Just watching my logs and noticed this:
>
> courieresmtpd:
> error,relay=:::216.34.181.88,from=:
> 517 SPF fail mr...@courier-mta.com: Address does not pass the Sender Policy
> Framework
>
> Is this a legit addy from courie
Forgot to include the list...
Incoming mail would be handled over SMTP, most probably, so Postfix
would be the daemon to handle the .forward file.
Khosrow Ebrahimpour wrote:
On 19 November 2008 02:08, Sam Varshavchik wrote:
If this was working before, than you were not using Courier.
Ricardo,
Have you checked to ensure that your mail filters are all running?
Check for any defunct courierfilter processes via top or ps.
Also, what version of Courier are you running?
Cheers,
Tim Lyth
Ricardo Kleemann wrote:
> Hi,
>
> I'm seeing this error in the mail log, repea
CourierMTA and CourierIMAP daemons,
and I've never encountered any issues with duplicate attachments.
Cheers,
Tim Lyth
matt chipman wrote:
Every so often (maybe 1 time per month) I get a user who recieves an
email with 2 identical copies of the attachments sent with the
original email. In
Thanks Martin,
I used the first two characters as the salt and was able to reproduce
the encryption and get the same cipher text.
This has made my task a lot easier now.
Cheers,
Tim Lyth
Martin Schuster (IFKL IT OS DSM CD) wrote:
Tim Lyth wrote:
[...]
I'm trying to write me own c
be better off switching back to
"clear-text" password but use an MD5 hash instead, or should I just hook
in to the authdaemon?
Thanks in advance,
Cheers,
Tim Lyth
-
This SF.Net email is sponsored by the Moblin
some internal DNS system (or /etc/hosts if you've
got a small number of systems) to resolve LAN IP's in to FQDNs - this
will mean that your email client (as well as courier) will have an FQDN
for every system it will speak to.
HTH again,
Tim Lyth
Sam Kuper wrote:
Hi Tim,
I hope you
I'm pretty sure that there's a .deb version of pythonfilter available
somewhere - I run Debian, but I can't remember how I installed
pythonfilter on my server. Gordon Messmer would know more.
Ricardo Kleemann wrote:
> Hi,
>
> I'm running Ubuntu with courier and wanted to implement greylisting.
I've done that before and it was successful.
YMMV.
Ricardo Kleemann wrote:
> Hi,
>
> I have my mailq filled with about 2500 messages, but I want to discard
> them all. The cancelmsg command requires a msgid, there's no way to
> wildcard.
>
> Can I simply delete directories under /var/lib/courier/m
ering/sorting within my email client is easy -
base it on the "To:" header, which doesn't change anywhere along the way.
HTH.
Cheers,
Tim Lyth
-
This SF.Net email is sponsored by the Moblin Your Move Developer
Steve Shockley wrote:
Tim Lyth wrote:
What do people recommend I do?
New wife is the only reasonable option.
I like the lateral thinking.
And I HAVE considered that, but for other reasons...
Cheers,
Tim Lyth
t as if it were just
another folder.
Cheers,
Tim Lyth
Jérôme Blion wrote:
Sam Varshavchik a écrit :
Thomas writes:
Hi,
Is it somehow possible to use administrator credentials to access all
mailboxes? I'm using courier-imap-4.0.2 with courier-authlib-0.55.
Not in this preh
x27;m tempted to dig through the SA config file to edit the weighting for
the SPF_PASS test, but I'm concerned that this may lead to
false-negatives for genuine spam.
What do people recommend I do?
Cheers,
Tim Lyth
-
T
of default formatting within in IPv6 capable environment.
Lindsay Haisley wrote:
On Sun, 2008-05-25 at 20:41 +1000, Tim Lyth wrote:
What does `netstat -npl|grep courier|grep 25` show?
netstat shows network connections.
-n shows results numerically rather than resolving service and domain
What does `netstat -npl|grep courier|grep 25` show?
On my system I get:
netstat -npl|grep courier|grep 25
tcp6 0 0 :::25 :::*
LISTEN 12828/couriertcpd
Cheers,
Tim Lyth
Jan Müller wrote:
-- Forwarded message --
From: Bowie
You win.
I hadn't edited /etc/pythonfilter.conf.
My bad, again.
Cheers,
Tim Lyth
-=Devil_InSide=- wrote:
> your python filter probably not configured properly
> after start of pythonfilter in log writes messages of each filters :
>
> ---
> filterctl stop pythonfilt
start` and the
only difference in the log file is the date and time.
-=Devil_InSide=- wrote:
> what is in /var/log/mail.log after "filterctl stop pythonfilter ; filterctl
> start ptythonfilter" ?
> tail -n 100 /var/log/mail.log | grep courierfilter
>
> ,--[Tim Lyth, T
nfilter.
Any suggestions on where to look for further error messages/solutions?
Cheers,
Tim Lyth
-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. Th
followed the link to your
pythonfilter page - I see you're up to 1.1 now - time for an upgrade I
think... :)
I downloaded v1.1 and installed that. Now I have a pythonfilter process
that isn't defunct. :D
Thanks for the quick assistance again, Gordon.
Gordon Messmer wrote:
Tim Lyth
File "", line 1, in
ImportError: No module named courier.config
Curiously (perhaps):
$ find / -name courier.config
$
Gordon Messmer wrote:
Tim Lyth wrote:
It seems that my pythonfilter is going defunct immediately after
courierfilter starts it.
...
May 2 20:39:34 five-h
amed
courier.config
Any suggestions on how to fix this issue?
Cheers,
Tim Lyth
-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to sa
You aren't by any chance using greylisting via pythonfilter?
If so, check the version of the db files it uses with the `file` command.
Best way to check to see if it MIGHT be greylisting DB issues is to
check the log files when Courier-MTA is restarted.
Matt Miller wrote:
> I've just finished bui
an `apt-get update`/`apt-get upgrade` and I now
have libdb4.6 installed.
`/etc/init.d/courier-mta` has NOT complained about the file versions,
but they are still version 8, not version 9.
Putting one of the version 9 files in to /var/state/pythonfilter and
`/etc/init.d/courier-mta restart` comp
aded from
2.4.4-7 to 2.4.4-8 - I'm suspecting that this has changed some of the
default values which pythonfilter depends on.
In either case, something changed and I was able to fix it ultimately,
so I'm happy.
Cheers,
Tim Lyth
apt-get update`, `apt-get upgrade`/`apt-get dist-upgrade` was
preformed on March 4, 2008.
Is it worth keeping this faulty files for further analysis or should I
just purge them from the system and forget about this issue that I've had?
Regards,
Tim Lyth
--
My reason for wanting to change to encrypted passwords is if someone
managed to get in to my MySQL database they'd be able to read the
passwords to my email and COULD try use that information to break in to
more things.
I gave it a try in phpmyadmin to modify an existing row in the MySQL
databa
t just a matter of using something like phpmyadmin to dump the
clear passwords in to the encrypted password fields via the function in
answer a)?
Regards,
Tim Lyth
-
This SF.net email is sponsored by: Microsoft
Defy
Did you remember to restart/reload the server to ensure that it's using
the latest config file?
I've been caught out thinking that reconfiguring a plugin (like clamav)
would take effect immediately, but had to restart/reload the server to
get it to pick up the new config.
FM wrote:
> Hello,
>
>
Hi FM,
Add to /etc/courier/bofh (or wherever the Courier config files are for you):
opt BOFHBADMIME=accept
I was getting the same error with my Courier smtpd until I found this
option.
Cheers,
Tim Lyth
FM wrote:
> Hello,
> I upgrade from 0.52.1 to 0.57
>
> Now lots of message
Hi,
I'm using version 2.0.0.6 (20070728) of Thunderbird with Courier-IMAP
(Debian package version 4.2.0-1 ).
I have no issues with it at all. I have IMAP_ENHANCEDIDLE=1.
Cheers,
Tim Lyth
[EMAIL PROTECTED] wrote:
> Hello !
>
> I'm setting up an email server on debian
previous emails, I KNOW that greylisting is
working wonders - I used to get >10 spam every day.
Yes, I know 10 spam isn't many, but it was accounting for over half of
the email I was receiving most days.
Jeff Jansen wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
I'd follow Jeff's advise - rate limiting via IP tables, but I'd add "-i
" to each of those lines.
I am assuming that your email server has multiple network connections
and the attacks are coming from the external interface, not the internal
one.
That way, you don't have ANY impact on your 17,000
5mins.
1 Spammer was persistent enough to get around the greylisting but, as
previously posted, has been caught out by SA.
All in all, I'd say greylisting is a true winner for anyone wanting to
kill spam dead.
Cheers,
Tim Lyth
Jeff Jansen wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash:
posal has already been taken care of by other methods as
detailed in the page I've linked.
Regards,
Tim Lyth
Matthias Wimmer wrote:
> Hi!
>
>
> I am running a courier setup, where I have installed some mail filters,
> that are responsible to do spam and virus checking as wel
ny suggestions/hints on what
to do?
Cheers,
Tim Lyth
Jeff Jansen wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Tim Lyth wrote:
>
>> Thanks for the pointers to look in the folder.
>> Followed the rest of the instructions and my MX now greylists.
>>
:D:D:D:D
Thanks for the pointers to look in the folder.
Followed the rest of the instructions and my MX now greylists.
Goodbye spam (hopefully).
Cheers,
Tim Lyth
[EMAIL PROTECTED] wrote:
> Tim Lyth a écrit :
>
>> In the quick start guide, step 5.2 states to run "
Bah, my bad.
Was late at night and I was tired and wasn't looking in the right place
for the file.
Cheers.
[EMAIL PROTECTED] wrote:
> Tim Lyth a écrit :
>
>> In the quick start guide, step 5.2 states to run "anydbm_import.py
>> ...". Unfortunately, my Deb
an packages which have this script in
them either.
Could someone please advise what to do from here, as I want to be able
to use greylisting to stop the spammers, but don't want to delay local
users (by IP) when they are trying to send email?
Cheers,
Tim Lyth
--
Hi Christos,
Looks like the username might have an extra character in it.
What's the MYSQL_USERNAME variable set to in /etc/courier/authmysqlrc ?
Cheers,
Tim Lyth
Christos Sintoris wrote:
> Hi,
>
> I have setup postfix and courier using mysql auth. Postfix works fine,
>
79 matches
Mail list logo