Re: [courier-users] [PATCH] SPF include recursion handled improperly

2014-08-21 Thread Alessandro Vesely
On Wed 20/Aug/2014 03:38:32 +0200 Sam Varshavchik wrote: Xepher writes: I've attached a patch (spf-recursive.patch) which, I believe, properly resolves the issue. However, as the current SPF tests provided with courier (./testspf -test=1) do not work (the DNS records used are no longer

Re: [courier-users] Plans for SMTPUTF8 support?

2014-08-08 Thread Alessandro Vesely
On Fri 08/Aug/2014 01:29:39 +0200 Sam Varshavchik wrote: [rise in UTF-8 interest...] This is a big nothing-burger. For starters, the only thing that's needed to add SMTPUTF8 support to an SMTP server is to advertise the SMTPUTF8 extension. Done. All that means is that the mail server

[courier-users] Plans for SMTPUTF8 support?

2014-08-07 Thread Alessandro Vesely
Sam, let me forward this message, as it captures what looks like a sudden rise in UTF-8 interest... Ale Forwarded Message Subject: Re: Postfix SMTPUTF8 support (unicode email addresses) Date: Wed, 6 Aug 2014 13:46:04 +0200 From: Sebastian Wiesinger postfix-us...@ml.karotte.org

Re: [courier-users] Courier MLM From Rewrite

2014-05-30 Thread Alessandro Vesely
On Fri 30/May/2014 00:46:18 +0200 Sam Varshavchik wrote: Lindsay Haisley writes: The author and the sender of a message are distinct entities, and it seems that they often get confused in discussions of DMARC. 2822 (3.6.2): [...] But as far as sender validation goes, MAIL FROM: is what

Re: [courier-users] Courier MLM From Rewrite

2014-05-27 Thread Alessandro Vesely
On Sun 25/May/2014 23:51:46 +0200 Lindsay Haisley wrote: On Sun, 2014-05-25 at 11:24 +0200, Alessandro Vesely wrote: An alternative solution is to replace: From: John Doe j...@yahoo.com with: From: List l...@example.com, John Doe j...@yahoo.com.INVALID The Mailman list server

Re: [courier-users] Courier MLM From Rewrite

2014-05-25 Thread Alessandro Vesely
On Sun 25/May/2014 02:55:45 +0200 Sam Varshavchik wrote: Lindsay Haisley writes: On Sat, 2014-05-24 at 09:00 -0400, Sam Varshavchik wrote: kb2...@kb2ear.net writes: With the recent DMARC implementation from AOL and Yahoo I have a very broken mailing list. Is there any way using MLM to

[courier-users] RFC 7208 is the new SPF proposed standard (Standards Track)

2014-04-27 Thread Alessandro Vesely
Care was taken to avoid incompatibility issues in RFC 7208. Changes in Implementation Requirements from RFC 4408 are given in: http://tools.ietf.org/html/rfc7208#appendix-B I only quote the first bullet: o Use of DNS RR type SPF (99) has been removed from the protocol; see [RFC6686]

Re: [courier-users] Logging help

2014-04-04 Thread Alessandro Vesely
On Fri 04/Apr/2014 15:15:19 +0200 Lisa Muir wrote: Bowie's heads up on the courierd logging helps me concentrate my search, I'm getting dns name of the host that sent the message there instead of the auth string. Apr 4 07:03:10 mail courierd: newmsg,id=01884042.533E4B1D.1080: dns;

Re: [courier-users] courier unreachable

2014-03-26 Thread Alessandro Vesely
On Wed 26/Mar/2014 11:38:59 +0100 Raphael Bauduin wrote: earlier this week we had this message appearing in the logs, preventing anyone to access their mails. imapd-ssl: gdbm fatal: couldn't init cache I've seen this error today for users still accessing their mails, so it might not

Re: [courier-users] Determining if a user is succesfully authenticated within perl filter

2014-03-13 Thread Alessandro Vesely
On Wed 12/Mar/2014 16:29:52 +0100 Lorenzo Perone wrote: The problem I would like to solve is (if there is another way, I'll go for it): Sometimes user passwords get guessed / lost, and spammers will use that account, authenticate as it, and 'relay' mails around. I'd like to be able to log

Re: [courier-users] LUA filters?

2014-02-25 Thread Alessandro Vesely
On Tue 25/Feb/2014 02:54:15 +0100 Sam Varshavchik wrote: Mark Constable writes: The issue of how to rate limit outgoing mail is still bugging us here and it looks like I have no choice (short of using postfix) but to dig in to the courier filter system and come up with some kind of

Re: [courier-users] Courier-IMAP and IPHONE IOS 7

2014-02-07 Thread Alessandro Vesely
On Fri 07/Feb/2014 08:04:37 +0100 Daniel Müller wrote: This is a bug in your Iphone OS. In our environment it was working with the older IOS without any error. With the new IOS it stopped working after a while. The only thing to do is, delete the account, set it up anew and it is working

Re: [courier-users] Courier-IMAP and IPHONE IOS 7

2014-02-07 Thread Alessandro Vesely
On Fri 07/Feb/2014 14:39:11 +0100 Matus UHLAR - fantomas wrote: On Fri 07/Feb/2014 08:04:37 +0100 Daniel Müller wrote: With the new IOS it stopped working after a while. The only thing to do is, delete the account, set it up anew and it is working (for a while). Alessandro Vesely writes: I

Re: [courier-users] Error message

2014-01-14 Thread Alessandro Vesely
On Tue 14/Jan/2014 19:10:04 +0100 Ryta Kashemire wrote: Hi All am running courier on my inbound server and have noticed from the mail.warn logs that some emails are not being delivered and the error message is as bellow -- Jan 14 17:14:31 pop courieresmtpd:

[courier-users] Alternatives to Courier

2013-09-24 Thread Alessandro Vesely
The software taxonomy and statistics hosted by the AlternativeTo web site seem to be quite skewed. At any rate, I added a couple of Courier packages, since they were missing. If anyone wants to comment or vote (requires some auth): http://alternativeto.net/software/courier-imap/

Re: [courier-users] Courier build 20130913 released

2013-09-14 Thread Alessandro Vesely
On Fri 13/Sep/2013 14:19:41 +0200 Sam Varshavchik wrote: Download: http://www.courier-mta.org/download.php New builds of courier and courier-authlib packages. The courier package requires the new build of courier-authlib to be installed first. Changes: • Include userid of failed SASL

Re: [courier-users] Rate limiting

2013-09-12 Thread Alessandro Vesely
On Thu 12/Sep/2013 06:25:37 +0200 Gordon Messmer wrote: On 09/10/2013 11:44 PM, Mark Constable wrote: A crazy thought on this issue... what if couriersmtp and friends were run at the very lowest cpu and i/o priority possible, would that tend to naturally rate limit courier in general? Not

Re: [courier-users] How to block a local user from sending email?

2013-09-05 Thread Alessandro Vesely
On Thu 05/Sep/2013 04:12:14 +0200 Mark Constable wrote: Most of my other courier based servers do not have either python or perl installed (rpi, nas and small 128mb vps's) so would it be possible to do some shell scripted (or PHP) rate limiting for local filters? Hm... Wouldn't you use a DB

[courier-users] Ads, was SPF check fails on items that used to work?

2013-09-04 Thread Alessandro Vesely
On Wed 04/Sep/2013 16:01:40 +0200 Matus UHLAR - fantomas wrote: ... I wonder why your mails contain 2 pages of empty lines below your text and over the ads. Those taglines push the ads below the fold. Cleaner, no? --

Re: [courier-users] How to block a local user from sending email?

2013-09-03 Thread Alessandro Vesely
On Tue 03/Sep/2013 17:58:33 +0200 Jeff Potter wrote: Does anyone know how to block a local user from being able to send email through the command line, while otherwise allowing other users to continue with local submission? (I.e. I'd like to block all email from user id 1043, let's say).

[courier-users] Abuse reports, was Relay Control

2013-09-03 Thread Alessandro Vesely
On Thu 29/Aug/2013 23:06:46 +0200 Lindsay Haisley wrote: The only thing I have in place which is close to this is for mailing lists which FMP hosts. If an AOL or Earthlink customer hits Report spam (or whatever the button is called) on their proprietary mail readers, then I, personally, get

Re: [courier-users] SPF check fails on items that used to work?

2013-09-03 Thread Alessandro Vesely
On Tue 03/Sep/2013 17:41:41 +0200 Matus UHLAR - fantomas wrote: On 23.08.13 14:13, Alessandro Vesely wrote: The spec was buggy on what type servers should look up, and querying both --which is what Courier does-- is a waste of resources. Skipping an unnecessary query seems to be rather

Re: [courier-users] Relay Control

2013-08-29 Thread Alessandro Vesely
to bring fresher perspectives. On Mon, Aug 26, 2013 at 2:43 PM, Alessandro Vesely ves...@tana.it wrote: On Mon 26/Aug/2013 10:00:52 +0200 Jan Ingvoldstad wrote: It is also quite sensible that e-mail is handled as close to the point of origin as possible. According to what topology? The ISP

Re: [courier-users] Relay Control

2013-08-26 Thread Alessandro Vesely
On Mon 26/Aug/2013 10:00:52 +0200 Jan Ingvoldstad wrote: On Mon, Aug 26, 2013 at 8:44 AM, Matus UHLAR - fantomas wrote: At my former job (an ISP), I recommended users to use SMTP service from they e-mail providers, because - if someone gets paid for mail service, they should provide SMTP

Re: [courier-users] Relay Control

2013-08-24 Thread Alessandro Vesely
On Fri 23/Aug/2013 23:00:01 +0200 Lindsay Haisley wrote: On Fri, 2013-08-23 at 20:00 +0200, Alessandro Vesely wrote: Unfortunately, I hadn't updated MYSQL_SELECT_CLAUSE which had been copied from a previous courier installation on another server which didn't look at my auth flag. The result

Re: [courier-users] SPF check fails on items that used to work?

2013-08-23 Thread Alessandro Vesely
Sorry for the delay, I was in a badly connected place. On Wed 21/Aug/2013 11:35:17 +0200 Matus UHLAR - fantomas wrote: On 20.08.13 19:13, Alessandro Vesely wrote: BTW, 4408bis just entered Last Call. There are not many differences, but it seems to be a good occasion to review SPF

Re: [courier-users] Relay Control

2013-08-23 Thread Alessandro Vesely
On Wed 21/Aug/2013 02:42:39 +0200 Lindsay Haisley wrote: On Tue, 2013-08-20 at 13:59 -0700, Nick Ellson wrote: It appears that the main issue was that my account credentials were compromised for a 1 month period, which loaded my system up with so much spam things would not function. This made

Re: [courier-users] SPF check fails on items that used to work?

2013-08-20 Thread Alessandro Vesely
On Tue 20/Aug/2013 01:33:34 +0200 Sam Varshavchik wrote: I agree that in this situation, 'none' would be the more technically proper result. This will be changed. BTW, 4408bis just entered Last Call. There are not many differences, but it seems to be a good occasion to review SPF

Re: [courier-users] IMAP in general use

2013-08-16 Thread Alessandro Vesely
On Fri 16/Aug/2013 04:55:10 +0200 Lindsay Haisley wrote: On Thu, 2013-08-15 at 22:04 -0400, Sam Varshavchik wrote: I wish I could say otherwise, but that's what it is. The flip side of the coin is that IMAP is a mature protocol. It does its job, and there is no viable replacement for it.

Re: [courier-users] zdkimfilter dkim=fail while SpamAssassin says DKIM=pass

2013-07-29 Thread Alessandro Vesely
On Fri 26/Jul/2013 22:08:58 +0200 Anders wrote: By chance I compared the dkim=fail against what SpamAssassin said: == courier log Jul 26 21:45:47 e350 courierfilter: zdkimfilter[12888]:id=00C804FC.51F2D1E6.3235: verified: dkim=fail

Re: [courier-users] zdkimfilter dkim=fail while SpamAssassin says DKIM=pass

2013-07-29 Thread Alessandro Vesely
On Mon 29/Jul/2013 09:12:12 +0200 I wrote: On Fri 26/Jul/2013 22:08:58 +0200 Anders wrote: By chance I compared the dkim=fail against what SpamAssassin said: == courier log Jul 26 21:45:47 e350 courierfilter: zdkimfilter[12888]:id=00C804FC.51F2D1E6.3235:

Re: [courier-users] zdkimfilter

2013-07-24 Thread Alessandro Vesely
Hi, On Wed 24/Jul/2013 00:17:17 +0200 Anders wrote: So, now comes to testing it all... To summarize, no mails are signed because I think that zdkimfilter can't find anything suitable to match domain/selector against. What can be the cause? I think that's because you set RELAYCLIENT based

Re: [courier-users] Mails Copy

2013-07-24 Thread Alessandro Vesely
On Wed 24/Jul/2013 06:10:15 +0200 Direct Logic wrote: Is there any method to save copy of users email on other location with courier just like exim shadow copy save. when mail is fetched by user its copy stores in location define by admin. Check ARCHIVEDIR in your courierd config file.

Re: [courier-users] zdkimfilter

2013-07-24 Thread Alessandro Vesely
On Wed 24/Jul/2013 13:39:37 +0200 Anders wrote: I'll comment in-line. Yup :-) I am using zdkimfilter-1.2 , provided by gentoo ebuild/portage. Compiler is gcc 4.7.3 I haven't been able to find that version --see below. I think that's because you set RELAYCLIENT based on the IP address,

Re: [courier-users] zdkimfilter

2013-07-24 Thread Alessandro Vesely
On Wed 24/Jul/2013 20:51:06 +0200 Anders wrote: On 2013-07-24 18:10, Alessandro Vesely wrote: The opendkim-2.2.2 version they used to build zdkimfilter seems to be lost. I realise I have a local overlay with zdkimfilter-1.2. I will revert to 1.1. It won't get things better. Knowing

Re: [courier-users] zdkimfilter

2013-07-23 Thread Alessandro Vesely
Hi Anders, On Sun 21/Jul/2013 13:23:16 +0200 Anders wrote: Can someone contribute with some example configuration files for zdkimfilter and courier, especially for signing outgoing mail. something like this zone-file snippet? beta._domainkey IN TXT ( v=DKIM1; k=rsa;

[courier-users] Some imap keywords get lost

2013-04-05 Thread Alessandro Vesely
Hi, I lose some imap flags that I put on delivery by setting the KEYWORDS environment variable in a maildrop recipe. I tried to dump the dialog between imaplogin and thunderbird, but couldn't grasp what happens: There are several sequences where each folder is queried without showing the flags,

[courier-users] ANN: zdkimfilter 1.2

2013-04-02 Thread Alessandro Vesely
This release works with recent Courier development releases: * It has a trust_ar option, to accept Authentication-Results header fields rather than deleting the ones that claim, by virtue of their authentication service identifier, to have been added locally. * It reads the dnswl information

Re: [courier-users] /var/run issues

2013-03-30 Thread Alessandro Vesely
On Sat 23/Feb/2013 00:24:13 +0100 Sam Varshavchik wrote: Kristian Duus Østergaard writes: On 2013-02-22 14:35, Sam Varshavchik wrote: Kristian Duus Østergaard writes: mkdir -p ${PIDFILE%/*} Hopefully, that's all that your Gentoo package puts into /var/run. If your package uses the

Re: [courier-users] Misconfigured Exchange Servers

2013-03-22 Thread Alessandro Vesely
On Fri 22/Mar/2013 01:10:35 +0100 Lindsay Haisley wrote: I've run into the problem described at http://courier-mail-server.10983.n7.nabble.com/courieresmtp-quot-No-such-file-or-directory-quot-td11972.html I'm running Courier 0.66.1 as distributed with Ubuntu Server 12.04 LTS, Ignoring

Re: [courier-users] Courier and Cone builds 20130220

2013-02-24 Thread Alessandro Vesely
On Thu 21/Feb/2013 14:31:05 +0100 Sam Varshavchik wrote: • Courier will add an Authentication-Results when using DNS-based whitelists. More info in the couriertcpd man page, and the esmtpd configuration file. I installed this today, and it seems to work fine. Thanks Sam!! One thing I think

Re: [courier-users] Whitelist filtering, including a draft patch

2013-01-25 Thread Alessandro Vesely
On Thu 24/Jan/2013 13:08:21 +0100 Sam Varshavchik wrote: Just looking at the results of trying to meta-program the DNSBL lookup logic in couriertcpd, using pcre, doesn't look right to me. PCRE in couriertcpd would be ok, it's just all the rest of it looks overly complicated. Yeah, it

Re: [courier-users] Whitelist filtering, including a draft patch

2013-01-24 Thread Alessandro Vesely
On Thu 24/Jan/2013 02:00:15 +0100 Sam Varshavchik wrote: Alessandro Vesely writes: -allow=zone[,varspec]... [...] Now for passing the results to global filters. In 2010 we thought of I still think -allow is ok, but I don't see much need to do anything with regards to the headers

Re: [courier-users] Whitelist filtering, including a draft patch

2013-01-23 Thread Alessandro Vesely
/assignments/email-auth/email-auth.xml On Wed 29/Sep/2010 23:56:50 +0200 Sam Varshavchik wrote: Alessandro Vesely writes: On 28/Sep/10 23:18, Sam Varshavchik wrote: Alessandro Vesely writes: An alternative is to define skiplists explicitly, e.g. -allow=swl.spamhaus.org,ALLOW \ -block

Re: [courier-users] Invalid Signature

2013-01-16 Thread Alessandro Vesely
On Wed 16/Jan/2013 07:19:17 +0100 Bernd Wurst wrote: Am 15.01.2013 20:01, schrieb Lindsay Haisley: Slightly OT, but about half or more of Sam's posts to this list show an invalid signature in my mail reader. The PGP (GPG) ID of the signature is the same - 81E550E2 - whether it shows up as

Re: [courier-users] courier-imap and the client connection

2012-12-30 Thread Alessandro Vesely
On Sat 29/Dec/2012 11:18:53 +0100 Asmaa Ahmed wrote: [re-arranged for inline replying] Date: Sat, 29 Dec 2012 10:45:58 +0100, From: ves...@tana.it On Sat 29/Dec/2012 04:29:34 +0100 Asmaa Ahmed wrote: I wonder how does courier-imap know that the client is connected, so he starts processing his

Re: [courier-users] courier-imap and the client connection

2012-12-29 Thread Alessandro Vesely
On Sat 29/Dec/2012 04:29:34 +0100 Asmaa Ahmed wrote: I wonder how does courier-imap know that the client is connected, so he starts processing his messages from 'new' directory to 'cur' directory? Daemon processes are listening on the IMAP ports. When they accept a new connection they get to

Re: [courier-users] Subtle header modification PATCH

2012-12-17 Thread Alessandro Vesely
On Fri 14/Dec/2012 13:03:50 +0100 Sam Varshavchik wrote: Alessandro Vesely writes: On Fri 14/Dec/2012 01:01:23 +0100 Sam Varshavchik wrote: Alessandro Vesely writes: From: u...@example.com To: l...@example.org get changed to: From: u...@example.com To: l...@example.org After

Re: [courier-users] Subtle header modification PATCH

2012-12-17 Thread Alessandro Vesely
This time with the patch... On Fri 14/Dec/2012 13:03:50 +0100 Sam Varshavchik wrote: Alessandro Vesely writes: On Fri 14/Dec/2012 01:01:23 +0100 Sam Varshavchik wrote: Alessandro Vesely writes: From: u...@example.com To: l...@example.org get changed to: From: u...@example.com

Re: [courier-users] Subtle header modification

2012-12-14 Thread Alessandro Vesely
On Fri 14/Dec/2012 01:01:23 +0100 Sam Varshavchik wrote: Alessandro Vesely writes: when I receive a message with, say: From: u...@example.com To: l...@example.org those non-compliant headers get changed to: From: u...@example.com To: l...@example.org I'm unclear on where

[courier-users] Subtle header modification

2012-12-13 Thread Alessandro Vesely
Sam, when I receive a message with, say: From: u...@example.com To: l...@example.org those non-compliant headers get changed to: From: u...@example.com To: l...@example.org I'm unclear on where the angle bracket removal happens. The code in submit.C seems to be concerned with

Re: [courier-users] ANN: zdkimfilter 1.1

2012-12-06 Thread Alessandro Vesely
Hi, On Wed 05/Dec/2012 19:46:42 +0100 Jérôme Blion wrote: Le 05/12/2012 18:28, Alessandro Vesely a écrit : This version implements blocking an authenticated user, which I hope will never trigger. One can specify a plain file with a list of users that the filter will reject. The file can

[courier-users] ANN: zdkimfilter 1.1

2012-12-05 Thread Alessandro Vesely
This version implements blocking an authenticated user, which I hope will never trigger. One can specify a plain file with a list of users that the filter will reject. The file can be populated by zdkimfilter basing on the result of an sql query, or by any other means. The dkimsign command has

Re: [courier-users] ANN: zdkimfilter 1.0

2012-12-03 Thread Alessandro Vesely
Hi Matthias, On Mon 03/Dec/2012 16:21:10 +0100 Matthias Wimmer wrote: I just downloaded the new archive and had some problems compiling it: - There are some problems with zdkimfilter if nettle is not installed: - redact.c cannot be compiled without “#include parm.h” being

Re: [courier-users] using dnsbl in maildroprc

2012-11-21 Thread Alessandro Vesely
Daniel, On Tue 20/Nov/2012 12:56:38 +0100 Sam Varshavchik wrote: cour...@devloop.de writes: Just another question: Alessandro was talking about embedded mode of maildrop. I have seen in the documentation that this mode is enabled by -m or -M option. But where I have to set this option? Is

Re: [courier-users] using dnsbl in maildroprc

2012-11-19 Thread Alessandro Vesely
On Mon 19/Nov/2012 19:58:43 +0100 courier wrote: BLACKLISTS=-block=ix.dnsbl.manitu.net,BLOCK_DNSBL_MANITU That looks fine to me. As far as I have understood BLOCK_DNSBL_MANITU is an environment variable which gets set if the sender IP is listed in the DNSBL. Now I did the following in

Re: [courier-users] limiting the rate that authenticated users can send mail

2012-11-15 Thread Alessandro Vesely
On Wed 14/Nov/2012 11:16:26 +0100 Mark Constable wrote: We've got a few thousand users and every now and then one will answer a phishing spam with their login details Heck. In that case it's useless to estimate a password's entropy and then count the failed attempts against it :-/ Some

Re: [courier-users] limiting the rate that authenticated users can send mail

2012-11-13 Thread Alessandro Vesely
On Wed 14/Nov/2012 06:57:14 +0100 Andy Gajetzki wrote: We have a small mail server for our organization handling both incoming and outgoing mail smtp auth. One of the users had a weak password, and a brute forcer got a hold of it. They sent about 1.1 million messages before I noticed. We

Re: [courier-users] Invalid 7bit data

2012-10-10 Thread Alessandro Vesely
On Tue 09/Oct/2012 23:01:53 +0200 William Hue wrote: Original messages with attachments (or, at least, 2+ MIME sections) created by M$ LookOut! will usually generate Invalid 7bit data errors, as will forwarding said messages (and the Invalid 7bit data DSNs!) using Thunderbird. Creating a

Re: [courier-users] SQLite authentication module?

2012-10-02 Thread Alessandro Vesely
On Wed 03/Oct/2012 00:47:01 +0200 Sam Varshavchik wrote: Mark Constable writes: Just wondering if it may ever be possible to see a authsqlite option for the authdaemon one day? ATM I have to use postfix on embedded devices... painful. MySQL and Postgresql are out of the question because of

Re: [courier-users] Courieresmtp and 450 errors

2012-08-24 Thread Alessandro Vesely
On Thu 23/Aug/2012 07:05:27 +0200 Lindsay Haisley wrote: On Wed, 2012-08-22 at 20:08 -0400, Sam Varshavchik wrote: So, with the sender doesn't really have a way of knowing what happened, the sender will rightfully assume – and it would be the correct choice – that it failed, and will try

Re: [courier-users] DKIM support i Courier ESMTP

2012-07-20 Thread Alessandro Vesely
On Thu 19/Jul/2012 12:21:20 +0200 Matthias Wimmer wrote: Hi Anders, Anders schrieb am 2012-07-17 19:29:14: Which version of OpenDKIM are you using? I am Gentoo based and available versions are 2.4.3 and 2.5.2-r1 plus unstable (2.6.0 2.6.1 2.6.3 2.6.4) I am using zdkimfilter-0.5 and

Re: [courier-users] DKIM support i Courier ESMTP

2012-07-17 Thread Alessandro Vesely
On Mon 16/Jul/2012 23:43:31 +0200 Anders wrote: I've been looking at both links from http://www.courier-mta.org/links.html and they are outdated; zdkimfilter seem to rely on an old version of OpenDKIM OpenDKIM relentlessly issue new versions, one after the other, but they shouldn't have

Re: [courier-users] RFC 1035

2012-06-26 Thread Alessandro Vesely
On Tue 26/Jun/2012 13:14:34 +0200 Jan Ingvoldstad wrote: On Tue, Jun 26, 2012 at 12:52 PM, Sam Varshavchik mr...@courier-mta.com mailto:mr...@courier-mta.com wrote: There are no prescribed means for handling bad DNS data. If DNS is wrong, one cannot have any expectation that it will

Re: [courier-users] Lost message... how come?! (solved)

2012-06-20 Thread Alessandro Vesely
On Wed 20/Jun/2012 01:36:32 +0200 Sam Varshavchik wrote: Alessandro Vesely writes: Jun 11 20:57:34 north courierlocal: [...] size=5061 Jun 11 20:53:18 north courierlocal: [...] size=4921 The supposedly lost message was just 140 bytes longer than the second (size should have increased by 1k

Re: [courier-users] Lost message... how come?!

2012-06-15 Thread Alessandro Vesely
On Tue 12/Jun/2012 14:37:43 +0200 Sam Varshavchik wrote: Alessandro Vesely writes: I apparently lost a message. I found it in the log: [...] But it wasn't in the folder it should have gone to. It isn't anywhere. The Maildrop recipe consists of if (...) { ...; to ./...; } and terminates

Re: [courier-users] Courier market share

2012-05-12 Thread Alessandro Vesely
On Sat 12/May/2012 10:18:35 +0200 Lindsay Haisley wrote: Does anyone have any stats, or reference to recent surveys, with some figures? For a very very very skewed survey, since Courier is one of the MTA packages that support SPF, its share among those who enable reject-on-fail at the MAIL

[courier-users] SPF deployment survey

2012-04-27 Thread Alessandro Vesely
All, as you may know, an IETF working group is reviewing the SPF spec. The evaluation of current deployment is nearly completed, but thus far only analyzes published SPF records. Please contribute to a better understanding by completing the survey:

Re: [courier-users] ETRN patch for courieresmtpd

2012-04-14 Thread Alessandro Vesely
On Sat 14/Apr/2012 17:43:19 +0200 Sam Varshavchik wrote: Matus UHLAR - fantomas writes: Available in what way? Note that many clients support ETRN, while not many support calling external comands... Really? Which clients would those be. Honestly, I haven't heard anyone mention ETRN in

Re: [courier-users] ETRN patch for courieresmtpd

2012-04-13 Thread Alessandro Vesely
On Fri 13/Apr/2012 11:43:33 +0200 Matus UHLAR - fantomas wrote: This the courieresmtpd will only log ETRN message with source IP, and implementing the functionality is up to external scripts watching logs... But then to watch the logs is not quite a breeze. Isn't it more effective to have a

Re: [courier-users] Q: Message transformation (reformime+makemime?)

2012-03-11 Thread Alessandro Vesely
On 10/Mar/12 19:10, Sam Varshavchik wrote: Alessandro Vesely writes: On 10/Mar/12 02:03, Sam Varshavchik wrote: makemime creates new content, while reformail munges top level mail headers. makemime is able to consume multiple pipes at once. Are you planning to have reformime provide

Re: [courier-users] Q: Message transformation (reformime+makemime?)

2012-03-10 Thread Alessandro Vesely
On 10/Mar/12 02:03, Sam Varshavchik wrote: Alessandro Vesely writes: reformime -X /usr/bin/funzip | xsltproc dmarc_report.xsl and get text/html (which is more readable.) Thus, it might be enough to suitably pipe the above through makemime. But how do I keep the existing header

[courier-users] Q: Message transformation (reformime+makemime?)

2012-03-09 Thread Alessandro Vesely
Hi Sam and all What is the best method to transform a message, changing only some headers while mangling its content, possibly without explicitly creating temporary files? Until now, for process-triggering messages, I've just run some command via xfilter, appending any output after the original

Re: [courier-users] re-writing of MIME boundaries

2012-02-27 Thread Alessandro Vesely
On 26/Feb/12 12:09, Mike Korizek wrote: If the email is digitally signed first, the verification fails due to this re-writing. I have no access to the server where courier runs on but I can filter/process the email before it gets signed and sent to courier and before it gets verified and

[courier-users] FYI: RFCs 6530-6533 of Internationalized Email are out

2012-02-18 Thread Alessandro Vesely
The IETF yesterday issued the following four Proposed Standards by the Email Address Internationalization (eai) working group http://datatracker.ietf.org/wg/eai/ : Overview and Framework for Internationalized Email http://tools.ietf.org/html/rfc6530 SMTP Extension for Internationalized Email

Re: [courier-users] empty local part in mail from:

2012-01-17 Thread Alessandro Vesely
On 17/Jan/12 00:33, Matus UHLAR - fantomas wrote: On 16.01.12 19:28, Jean-Christophe Boggio wrote: Why ? The FROM field is just informational (is it even mandatory ?) FWIW, according to Section 3.6 of RFC 5322, From: is one of the two fields whose minimum number of occurrences is non-zero (the

Re: [courier-users] Setting Postfix + Courier + Cyrus: cannot find user dir on authentication

2012-01-09 Thread Alessandro Vesely
On 09/Jan/12 11:38, Sergi Pons Freixes wrote: From what I understand from the documentation, a maildir is actually a hierachy of subfolders (./new, ./cur, ./tmp, etc), which is usually located at /home/user/Maildir. Yes, Maildir is the default mail directory, in a user's home. You may want

Re: [courier-users] reload the courier mta config

2011-12-03 Thread Alessandro Vesely
On 03/Dec/11 05:28, Sam Varshavchik wrote: Ken Perl writes: When a session is terminated by courier, what code and error will return to client to handle such situation, then a client will have chance to retry? When the daemons are forcibly restarted, there is no explicit error code that

Re: [courier-users] Authdb authentication

2011-11-23 Thread Alessandro Vesely
On 23/Nov/11 11:51, Nik Mitev wrote: During testing it turned out that password checking is behaving unexpectedly. If I configure a password of 'test' in authdb I can login with 'test' AND 'testwhatevermaybehere' - any string that starts with the configured password will do. 1. Is this a

Re: [courier-users] authdaemon - Permission denied

2011-11-22 Thread Alessandro Vesely
On 22/Nov/11 10:51, Benjamin Meier wrote: # debug.log: Nov 22 09:40:31 mars courieresmtpd: started,ip=[::1] Nov 22 09:41:11 mars courieresmtpd: authdaemon: s_connect() failed: Permission denied Nov 22 09:41:11 mars courieresmtpd:

Re: [courier-users] virtual mailboxes

2011-11-12 Thread Alessandro Vesely
On 12/Nov/11 01:38, Sam Varshavchik wrote: Lucio Crusca writes: In data martedì 27 settembre 2011 23:49:25, Sam Varshavchik ha scritto: Lucio Crusca writes: 7. some users share a common mailbox (info@). They SHOULD see unread messages as unread, even when another user has already read

Re: [courier-users] ESMTP_USE_STARTTLS error question

2011-11-06 Thread Alessandro Vesely
On 06/Nov/11 05:47, Sam Varshavchik wrote: Matus UHLAR - fantomas writes: If the error was temporary, I could disable TLS negotiation for remote server and ask them to fix the problem. After some soul-searching, I've changed my mind. I'm going to change so that the default configuration

Re: [courier-users] ESMTP_USE_STARTTLS error question

2011-11-04 Thread Alessandro Vesely
On 04/Nov/11 01:48, Sam Varshavchik wrote: Alessandro Vesely writes: An intermediate approach could be to have a starttls-something database anyway, where each host's entry contains the state of the last handshake, any of known CA, auto-trusted with fingerprint and dates, or broken

Re: [courier-users] ESMTP_USE_STARTTLS error question

2011-10-31 Thread Alessandro Vesely
On 30.10.2011 20:03, Ben Kennedy wrote: On 30 Oct 2011, at 7:50 am, Alessandro Vesely wrote: We don't need to actually trust the certificate if all what is wanted is to encrypt the channel for privacy. I bet Sam is going to say: if you don't trust the cert, how can you be sure

Re: [courier-users] ESMTP_USE_STARTTLS error question

2011-10-30 Thread Alessandro Vesely
On 27/Oct/11 13:45, Matus UHLAR - fantomas wrote: On 15.08.11 15:02, Sam Varshavchik wrote: There are several possibilities. If the STARTTLS command itself fails, it's an SMTP error no difference then any other SMTP error, and will be either permanent or transient depending on its numerical

Re: [courier-users] auth smtp and rcptfilter

2011-10-14 Thread Alessandro Vesely
On 13/Oct/11 12:52, aueb-...@aueb.gr wrote: Thank you very much Alessandro for your answer You're welcome. This is exactly what I need... BTW this environment variable is not mentioned in localmailfilter/maildrop* documentation ... unless I have missed it ... Googling for it, I only found

Re: [courier-users] virtual mailboxes

2011-10-03 Thread Alessandro Vesely
On 02/Oct/11 11:21, Lucio Crusca wrote: When Sam Varshavchik wrote: Passwords can be changed via webmail, with some additional setup. They can be stored encrypted, however you must realize that fundamental laws of this universe will not allow you to use hash-based authentication via IMAP

Re: [courier-users] virtual mailboxes

2011-09-28 Thread Alessandro Vesely
On 28/Sep/11 14:06, Lucio Crusca wrote: In data mercoledì 28 settembre 2011 12:55:47, Sam Varshavchik ha scritto: Yes, but that's a separate configuration issue. Whether you're going to allow non-encrypted IMAP, POP3, or HTTP connections is separate from whether or not passwords are kept

Re: [courier-users] FYI: An experiment on spam-reporting using IMAP

2011-08-31 Thread Alessandro Vesely
On 31/Aug/11 05:09, Sam Varshavchik wrote: Alessandro Vesely writes: [http://tools.ietf.org/html/draft-ordogh-spam-reporting-using-imap] Looking over this, it doesn't really do a lot that cannot be accomplished in IMAP already. All this is, is just an alias for a COPY+DELETE+EXPUNGE

[courier-users] FYI: An experiment on spam-reporting using IMAP

2011-08-27 Thread Alessandro Vesely
The Internet-Draft below originates in the framework of Enhanced Visual Voice Mail, Open Mobile Alliance (www.openmobilealliance.org), but the idea seems to be cleanly amenable to any IMAP implementation. I look forward to clients and servers implementing it, so that the hacking needed to get

Re: [courier-users] drweb antivirus with courier

2011-07-27 Thread Alessandro Vesely
On 26/Jul/11 19:23, Matus UHLAR - fantomas wrote: Does courier do an autoclean if the filter fails? Or is the filter expected to be so robust that it's not needed? Courier sends the prepackaged 432 Mail filters temporarily unavailable in case of failure. Cleaning up queues is presumably part

Re: [courier-users] drweb antivirus with courier

2011-07-21 Thread Alessandro Vesely
On 21/Jul/11 14:28, Matus UHLAR - fantomas wrote: On 19.07.11 19:53, Alessandro Vesely wrote: Yes, _was_ until version 57.1, announced on 14 October 2007 (The line saying Invoke Courier filters after closing all control files.) Hmmm, does that apply for data file too? ;-) However

Re: [courier-users] drweb antivirus with courier

2011-07-19 Thread Alessandro Vesely
On 18/Jul/11 15:54, Matus UHLAR - fantomas wrote: I'm afraid this is caused by drweb-courier dropping all mail and creating new one - as someone here mentioned, it is (or was) the only way to add headers to mail. Yes, _was_ until version 57.1, announced on 14 October 2007 (The line saying

Re: [courier-users] changing passwords using sqwebmail

2011-07-08 Thread Alessandro Vesely
On 08/Jul/11 10:23, kajani kaunda wrote: I want to allow users who login using a non-fully qualified email address like: 'john' and NOT 'j...@abc.com' to be able to change their passwords FROM the sqwebmail interface. as of now it throws the following error when you try to change

Re: [courier-users] Build failure with recent OpenSSL

2011-04-11 Thread Alessandro Vesely
On 11/Apr/11 08:48, Stefan Hornburg (Racke) wrote: Hello, apparently SSLv2 support has been removed from recent OpenSSL versions which cause Courier to fail building: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622014 Please suggest a solution. * Eliminate SSLv2 also from

Re: [courier-users] renaming Received-SPF: to Old-Received-SPF:

2011-04-01 Thread Alessandro Vesely
On 01/Apr/11 12:59, Sam Varshavchik wrote: Matus UHLAR - fantomas writes: I'm fine with Received-SPF being renamed when mail is received from untrusted host. But for mail received from our (trusted) mail backups: - the SPF check will apparently fail (thus I better turn if off) - I could

[courier-users] spamfiltering, was spamassassin into courierfilter

2011-03-27 Thread Alessandro Vesely
Hi, I change the subject not only for the delay --that I apologize for-- but also for the desire to take into account Michelle's recent post. On 23/Mar/11 20:13, Matus UHLAR - fantomas wrote: On 22.03.11 13:26, Alessandro Vesely wrote: That will apparently result in non-uniform filtering

Re: [courier-users] spamassassin into courierfilter

2011-03-22 Thread Alessandro Vesely
On 21.03.2011 20:19, Matus UHLAR - fantomas wrote: On 22.03.11 02:38, bamakoj...@gmail.com wrote: The advantage of running spamc from perl/pythonfilter (IMO) is that you can reject mail based on spam score. The disadvantage, if I understand correctly, is that you can't have per-user settings

Re: [courier-users] Add IP detail to authdaemond logging

2011-03-03 Thread Alessandro Vesely
On 03/Mar/11 04:20, Mark Constable wrote: We just had 2 accounts compromised and used for sending out a ton of spam, one I found because an irate recipient sent back a complaint which included the headers and the AUTH: LOGIN details. That only has the user's name, not the password. It is in

Re: [courier-users] How to track failed authentication attempts?

2011-02-25 Thread Alessandro Vesely
On 24/Feb/11 22:23, Carlos Lopez wrote: The Kernel lacks support of Deep Packet Inspection... With DPI you can do all dirty tricks to leave crackers out of the box/net. It is true that the main kernel does not support it, but there are many commercial vendors that are open sourcing their

<    1   2   3   4   5   6   7   >