Re: [qmailtoaster] How to install QT on top of sendmail?

2006-09-27 Thread Erik Espinoza

I actually don't have that much experience with Dovecot, but more than
Courier. I would vote in favor of using Dovecot for the following
reasons:

- It is part of the RHEL 4 distribution. It is already installed, and I
can trust the source. Patches are automatically available via up2date.
(Obviously this is only something that applies to RHEL people, but is
important for me.)


Wouldn't matter, as we'd have to take that out to use dovecot-toaster.
This is because we'd have to configure it to work with the
QmailToaster. We support more than one distro, and we would want to
ensure uniform support. Using QmailToaster pretty much relies on our
project for security.


- It is very easy to configure.


The Courier IMAP Server is already preconfigured.


- It is _supposedly_ more modular, secure, and reliable than courier.

See: http://www.dovecot.org/doc/


Dovecot is a new code base. Time wil judge the security. As far as
modularity, it does look a little more modular in the design, I will
have to take a closer look.

Courier does separate the auth with the mail daemon as well, which is
why we have a courier-authlib package.


Since this is already installed and running, and apparently hooks into
vpopmail, I will probably just keep on using it.


Good luck, let me know.


What about you, any particular reason for me to use Courier (or more
specifically, the QT Courier package)?


Support. If you send mail here asking about issues with pop/imap,
you'll get answers about courier or no answers at all.

I will look closer at Dovecot, and will possibly release a package if
theres enough demand for it.

Thanks,
Erik

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] Openssl and fdr40-install-script.sh

2006-09-27 Thread Alan Boyd

Hi,

I seem to be having a problem running fdr40-install-script.sh,  
particularly at the qmail-toaster-1.03-1.3.5.src.rpm part of the  
installation


Installing qmail-toaster-1.03-1.3.5.src.rpm
Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.90167
+ umask 022
+ cd /usr/src/redhat/BUILD
+ LANG=C
+ export LANG
+ unset DISPLAY
+ cd /usr/src/redhat/BUILD
+ rm -rf qmail-1.03
+ tar -xf -
+ /usr/bin/bzip2 -dc /usr/src/redhat/SOURCES/qmail-1.03.tar.bz2
+ STATUS=0
+ '[' 0 -ne 0 ']'
+ cd qmail-1.03
++ /usr/bin/id -u
+ '[' 0 = 0 ']'
+ /bin/chown -Rhf root .
++ /usr/bin/id -u
+ '[' 0 = 0 ']'
+ /bin/chgrp -Rhf root .
+ /bin/chmod -Rf a+rX,u+w,g-w,o-w .
+ echo 'Patch #0 (qmailtoaster-1.3.1.patch.bz2):'
Patch #0 (qmailtoaster-1.3.1.patch.bz2):
+ /usr/bin/bzip2 -d
+ patch -p0 -s
+ STATUS=0
+ '[' 0 -ne 0 ']'
+ echo 'Patch #1 (qmail-chkuser.patch.bz2):'
Patch #1 (qmail-chkuser.patch.bz2):
+ /usr/bin/bzip2 -d
+ patch -p1 -s
+ STATUS=0
+ '[' 0 -ne 0 ']'
+ /usr/bin/perl -pi -e 's|\#define AUTHCRAM||g' qmail-smtpd.c
+ /usr/bin/perl -pi -e 's|LDK_PATH|/usr/lib/libdomainkeys.a|g' Makefile
+ '[' -f /var/tmp/qmail-1.03-gcc ']'
+ echo gcc
+ '[' -f /var/tmp/qmail-1.03-show_flags ']'
+ cat
+ chmod u+x /var/tmp/qmail-1.03-show_flags
+ /var/tmp/qmail-1.03-show_flags


RPM RELEASE: qmail-toaster-1.03-1.3.5
OS TYPE IS : Fedora Core 4 Linux
BUILD DATE : Sat Jul 08 2006
CCFLAGS: -O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -m32 - 
march=i386 -mtune=pentium4 -fasynchronous-unwind-tables - 
DTLS=20060104 -I/home/vpopmail/include
LDFLAGS: -O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -m32 - 
march=i386 -mtune=pentium4 -fasynchronous-unwind-tables



+ '[' -f /var/tmp/qmail-1.03-show_flags ']'
+ rm -f /var/tmp/qmail-1.03-show_flags
+ exit 0
Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.6
+ umask 022
+ cd /usr/src/redhat/BUILD
+ cd qmail-1.03
+ LANG=C
+ export LANG
+ unset DISPLAY
+ '[' -n /var/tmp/qmail-toaster-1.03 -a /var/tmp/qmail-toaster-1.03 '! 
=' / ']'

+ rm -rf /var/tmp/qmail-toaster-1.03
+ mkdir -p /var/tmp/qmail-toaster-1.03
++ /usr/bin/id -g nofiles
+ '[' -z '' ']'
+ /usr/sbin/groupadd -g 2107 -r nofiles
groupadd: group nofiles exists
+ :
++ /usr/bin/id -g qmail
+ '[' -z '' ']'
+ /usr/sbin/groupadd -g 2108 -r qmail
groupadd: group qmail exists
+ :
++ /usr/bin/id -u alias
+ '[' -z 7790 ']'
++ /usr/bin/id -u qmaild
+ '[' -z 7791 ']'
++ /usr/bin/id -u qmaill
+ '[' -z 7792 ']'
++ /usr/bin/id -u qmailp
+ '[' -z 7793 ']'
++ /usr/bin/id -u qmailq
+ '[' -z 7794 ']'
++ /usr/bin/id -u qmailr
+ '[' -z 7795 ']'
++ /usr/bin/id -u qmails
+ '[' -z 7796 ']'
++ cat /var/tmp/qmail-1.03-gcc
+ echo 'gcc -O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -m32 - 
march=i386 -mtune=pentium4 -fasynchronous-unwind-tables - 
DTLS=20060104 -I/home/vpopmail/include'

++ cat /var/tmp/qmail-1.03-gcc
+ echo 'gcc -s -O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -m32  
-march=i386 -mtune=pentium4 -fasynchronous-unwind-tables'

+ '[' -f /var/tmp/qmail-1.03-gcc ']'
+ rm -f /var/tmp/qmail-1.03-gcc
+ make clean
rm -f `cat TARGETS`
+ make compile makelib
( cat warn-auto.sh; \
echo CC=\'`head -1 conf-cc`\'; \
echo LD=\'`head -1 conf-ld`\' \
)  auto-ccld.sh
cat auto-ccld.sh make-compile.sh  make-compile
chmod 755 make-compile
cat auto-ccld.sh find-systype.sh  find-systype
chmod 755 find-systype
./find-systype  systype
( cat warn-auto.sh; ./make-compile `cat systype` )  \
compile
chmod 755 compile
cat auto-ccld.sh make-makelib.sh  make-makelib
chmod 755 make-makelib
( cat warn-auto.sh; ./make-makelib `cat systype` )  \
makelib
chmod 755 makelib
+ make it man
cat auto-ccld.sh make-load.sh  make-load
chmod 755 make-load
( cat warn-auto.sh; ./make-load `cat systype` )  load
chmod 755 load
( ( ./compile tryvfork.c  ./load tryvfork ) /dev/null \
21 \
 cat fork.h2 || cat fork.h1 )  fork.h
rm -f tryvfork.o tryvfork
./compile qmail-local.c
qmail-local.c: In function 'main':
qmail-local.c:461: warning: return type of 'main' is not 'int'
./compile qmail.c
./compile quote.c
./compile now.c
./compile gfrom.c
./compile myctime.c
./compile slurpclose.c
./compile case_diffb.c
./compile case_diffs.c
./compile case_lowerb.c
./compile case_lowers.c
./compile case_starts.c
./compile case_startb.c
./makelib case.a case_diffb.o case_diffs.o case_lowerb.o \
case_lowers.o case_starts.o case_startb.o
./compile getln.c
./compile getln2.c
./makelib getln.a getln.o getln2.o
./compile subgetopt.c
./compile sgetopt.c
./makelib getopt.a subgetopt.o sgetopt.o
./compile sig_alarm.c
( ( ./compile trysgprm.c  ./load trysgprm ) /dev/null \
21 \
 echo \#define HASSIGPROCMASK 1 || exit 0 )  hassgprm.h
rm -f trysgprm.o trysgprm
./compile sig_block.c
( ( ./compile trysgact.c  ./load trysgact ) /dev/null \
21 \
 echo \#define HASSIGACTION 1 || exit 0 )  hassgact.h
rm -f trysgact.o trysgact
./compile sig_catch.c
./compile sig_pause.c
./compile sig_pipe.c
./compile sig_child.c
./compile sig_hup.c
./compile sig_term.c
./compile sig_bug.c
./compile sig_misc.c
./makelib sig.a sig_alarm.o 

Re: [qmailtoaster] Openssl and fdr40-install-script.sh

2006-09-27 Thread Alan Boyd

On 27 Sep 2006, at 10:43, Alan Boyd wrote:


Hi,

I seem to be having a problem running fdr40-install-script.sh,  
particularly at the qmail-toaster-1.03-1.3.5.src.rpm part of the  
installation


[snip]

From a little googling, it seems to be that this is related to  
openssl. I'm running version

OpenSSL 0.9.7f 22 Mar 2005


No, I'm not.

I'm running:
OpenSSL 0.9.8c 05 Sep 2006

Cheers!

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] Catchall

2006-09-27 Thread K Anand
Hi all,

Could someone please elaborate what the Catchall option does ??
Recently I had changed catchall to deleted. I think from that time, chkuser
was not rejecting mails to non existant users ...

Thanx

Anand


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Catchall

2006-09-27 Thread K Anand
So what happens if Catchall is set to bounced...It seems that when it is set
ot bounced, it bounces the mails. But when set to deleted, it seems to be
accepting mails..

The reason why I set it to deleted was that I was getting double bounces to
the postmaster account. I basically want to stop that.

Anand

- Original Message - 
From: Jake Vickers [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Sent: Wednesday, September 27, 2006 5:06 PM
Subject: Re: [qmailtoaster] Catchall


 K Anand wrote:
  Hi all,
 
  Could someone please elaborate what the Catchall option does ??
  Recently I had changed catchall to deleted. I think from that time,
chkuser
  was not rejecting mails to non existant users ...
 
 
 The catchall account gets all the emails that are not destined for a
 valid user. I could send an email to a fake address at your domain, and
 the catchall would receive it.


 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Catchall

2006-09-27 Thread Jake Vickers

K Anand wrote:

So what happens if Catchall is set to bounced...It seems that when it is set
ot bounced, it bounces the mails. But when set to deleted, it seems to be
accepting mails..

The reason why I set it to deleted was that I was getting double bounces to
the postmaster account. I basically want to stop that.
  
I believe that delete is for those who do not want to send confirmations 
back to spammers and what not. It takes the email, but then deletes it, 
sending no message back to the sender.
Bounce on the other hand, does send a message back to the sender, 
letting them know the email address was invalid (read: sorry spammer, 
that was not a real email, try again!).
Unless the functionality has change since last time I looked at it 
And that was a while ago.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Catchall

2006-09-27 Thread K Anand
OK ..thanx for the confirmation...So how do I stop these double bounces from
filling up the mailbox of postmaster ??

Anand
- Original Message - 
From: Jake Vickers [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Sent: Wednesday, September 27, 2006 5:17 PM
Subject: Re: [qmailtoaster] Catchall


 K Anand wrote:
  So what happens if Catchall is set to bounced...It seems that when it is
set
  ot bounced, it bounces the mails. But when set to deleted, it seems to
be
  accepting mails..
 
  The reason why I set it to deleted was that I was getting double bounces
to
  the postmaster account. I basically want to stop that.
 
 I believe that delete is for those who do not want to send confirmations
 back to spammers and what not. It takes the email, but then deletes it,
 sending no message back to the sender.
 Bounce on the other hand, does send a message back to the sender,
 letting them know the email address was invalid (read: sorry spammer,
 that was not a real email, try again!).
 Unless the functionality has change since last time I looked at it
 And that was a while ago.

 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] duplicate emails

2006-09-27 Thread Steve Ingraham
George Sweetnam wrote:
You might also want to add some additional blacklists from orbs (don't
do 
the all-in-one).  Some like the dynamic shouldn't be used, but the
exploited 
server rbl is very handy.  I added 5 or 6 to my servers and it's helped
even more.

The content of my current blacklists control file (I does change):
 -r sbl.spamhaus.org
 -r bl.spamcop.net
 -r relays.ordb.org
 -r block.dnsbl.sorbs.net
 -r http.dnsbl.sorbs.net
 -r misc.dnsbl.sorbs.net
 -r rhsbl.sorbs.net
 -r smtp.dnsbl.sorbs.net
 -r socks.dnsbl.sorbs.net
 -r spam.dnsbl.sorbs.net
 -r web.dnsbl.sorbs.net
 -r zombie.dnsbl.sorbs.net

Just eliminate the biggest files in your setup - comment out BLACKLIST
and BLACKLIST_URL from your config. Those two are huge and taking them
out of my setup returned my system to normal behavior.


Thanks, I will look at adding to my blacklists control file.  Can you
tell me what the -r command means?

Steve Ingraham



--Original Message--

 Steve Ingraham wrote:

 I need help with a problem. Our users are seeing some multiple
 duplicate emails coming from the same sender. This is not occurring
 with every email so there does not seem to be any pattern to which
 incoming emails will be duplicated and which ones won't. They are also
 reporting that duplicate emails are sent when they send to an outside
 email. Has anyone experienced this problem before? What could be
 causing this to occur and what can I do to stop this? I am running
 qmailtoaster and spamassassin as an external email gateway. There has
 been nothing changed with qmail but I did update some rules in SA
 using rules_du_jour yesterday. Would these rules updates cause this
 problem? If so, what would have changed?

 Jake Vickers wrote:

 If your system is low on resources (ie: RAM), then the spamd process
 can take too long, making Toaster think the mail got lost somewhere,
 so it resends it.
 Might want to check and see how much RAM you're using.

 I want to thank everyone who posted a reply on my inquiry. I believe
 Jake Vickers was right about the problem. The RAM on the email server
 was bogged down since yesterday when I updated the various .cf files
 using rules_du_jour. I had included just a handful of rules from RDJ
 but it appears that RDJ utilizes much too much of my server resources
 to use it to update my spamassassin rules. It was slowing down the
 server so much that simple functions were not responding. This appears
 to have affected the delivery of emails. In fact I noticed that my
 original message to these mail lists took several hours to post and
 were duplicated also. I resolved the problem by moving the various
 rules .cf files out of the /etc/mail/spamassassin folder and
 restarting spamassassin.

 If anyone has a simple way of updating rules for spamassassin I would
 welcome your input. I still need to update the rules as I have been
 getting a great number of emails coming through to users.
 Specifically, we are getting a lot of the pharmaceutical spam and the
 stock spam.

 Again, thanks to everyone for the posts.

 Steve Ingraham



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] duplicate emails

2006-09-27 Thread Steve Ingraham
Jdow wrote:
Steve, it might help if you listed which rule sets. There are some
which are obscenely large and others that are obsolete. Maybe we
can prune the list for you a little.

As some have mentioned I may have too many rules.  I would like to know
what is a must have and what I should not use.  Here is a list of what
is currently in the /etc/mail/spamassassin/ folder:

CURRENTLY IN /ETC/MAIL/SPAMASSASSIN
70_sare_adult.cf
70_sare_bayes_poison_nxm.cf
70_sare_evilnum0.cf
occa_phishing.cf
occa_replica.cf
sa-blacklist.cf
sa-blacklist.current.uri.cf
tripwire.cf
chickenpox.cf
init.pre
random.cf
random.current.cf
weeds2.cf
local.cf

The rules below were moved yesterday and placed in a different folder.
Once I moved these and restarted spamassassin by rebooting the server it
was no longer bogging down and duplicating emails.

REMOVED YESTERDAY FROM /ETC/MAIL/SPAMASSASSIN
70_sare_evilnum1.cf
70_sare_evilnum2.cf
70_sare_header0.cf
70_sare_header.cf
70_sare_header_eng.cf
70_sare_html0.cf
70_sare_html1.cf
70_sare_html2.cf
70_sare_html3.cf
70_sare_html4.cf
70_sare_html_eng.cf
70_sare_oem.cf
70_sare_random.cf
70_sare_ratware.cf
70_sare_specfic.cf
70_sare_uri0.cf
70_sare_uri.cf
70_sare_whitlelist.cf
70_sare_whitelist_pre30.cf
72_sare_bml_post23x.cf
99_sare_fraud_post25x.cf
antidrug.cf
blacklist.cf
blacklist-uri.cf
bogus-virus-warnings.cf


Here is the content of my config file for rules_du_jour:

TRUSTED_RULESETS=TRIPWIRE ANTIDRUG SARE_EVILNUMBERS0 BLACKLIST
BLACKLIST_URI RANDOMVAL BOGUSVIRUS SARE_ADULT SARE_FRAUD
SARE_BAYES_POISON_NXM SARE_OEM SARE_RANDOM SARE_HEADER SARE_HEADER0
SARE_HEADER_ENG SARE_HTML0 SARE_HTML1 SARE_HTML2 SARE_HTML3 SARE_HTML4
SARE_HTML_ENG SARE_RATWARE SARE_SPECIFIC SARE_URI SARE_BML_POST25X
SARE_WHITELIST SARE_WHITELIST_PRE30
SA_DIR=/etc/mail/spamassassin
MAIL_ADDRESS=[EMAIL PROTECTED]
SA_RESTART=killall -HUP spamd

I have quite a few users who get a lot of spam, especially
pharmaceuticals and stocks delivered to their mailboxes.  They are why I
began trying to work on the spamassassin filtering.  An interesting note
I have observed but do not understand why it is happening.  When I
updated the rules on Monday, many users started seeing an increase
number of spam in their mailboxes.  One user who was getting a great
deal of duplicate emails was also seeing a huge increase in the total
numbers of spam emails.  Where she would receive 100 spam emails per day
before the rules_du_jour update, afterwards she was seeing 800 or 900
spam emails per day.  Much of it was porn spam that she was not seeing
before the update to the rules files.

I would appreciate any advice and/or education offered on the spam
filtering.

Thanks,
Steve Ingraham


{^_^}
- Original Message - 
From: Steve Ingraham [EMAIL PROTECTED]


Steve Ingraham wrote: 

I need help with a problem.  Our users are seeing some multiple
duplicate emails coming from the same sender.  This is not occurring
with every email so there does not seem to be any pattern to which
incoming emails will be duplicated and which ones won't.  They are also
reporting that duplicate emails are sent when they send to an outside
email.  Has anyone experienced this problem before?  What could be
causing this to occur and what can I do to stop this?  I am running
qmailtoaster and spamassassin as an external email gateway.  There has
been nothing changed with qmail but I did update some rules in SA using
rules_du_jour yesterday.  Would these rules updates cause this problem?
If so, what would have changed?

 

Jake Vickers wrote:

If your system is low on resources (ie: RAM), then the spamd process can
take too long, making Toaster think the mail got lost somewhere, so it
resends it.
Might want to check and see how much RAM you're using.

 

I want to thank everyone who posted a reply on my inquiry.  I believe
Jake Vickers was right about the problem.  The RAM on the email server
was bogged down since yesterday when I updated the various .cf files
using rules_du_jour.  I had included just a handful of rules from RDJ
but it appears that RDJ utilizes much too much of my server resources to
use it to update my spamassassin rules.  It was slowing down the server
so much that simple functions were not responding.  This appears to have
affected the delivery of emails.  In fact I noticed that my original
message to these mail lists took several hours to post and were
duplicated also.  I resolved the problem by moving the various rules .cf
files out of the /etc/mail/spamassassin folder and restarting
spamassassin.

 

If anyone has a simple way of updating rules for spamassassin I would
welcome your input.  I still need to update the rules as I have been
getting a great number of emails coming through to users.  Specifically,
we are getting a lot of the pharmaceutical spam and the stock spam.

 

Again, thanks to everyone for the posts.

Steve Ingraham



-
 QmailToaster hosted by: VR 

[qmailtoaster] Re: your mail

2006-09-27 Thread Mark Samples

Of course if one gets a lot, it could be a problem, one solution I use
is putting this type (once the
domain is confirmed and some whois data as well as who owns he IP
address space) in the badmailfrom
of qmail.  Stearns Blacklist (if it wasn't so huge) stops a bunch of
this at connection time.
Internal RBL's can be helpful also, basically stop these, although, this
either requires programming to
automate, or human intervention to maintain.  This type, for me I just
stop at the session level.
I have found (lately) most come from a particular geographic region,
this may only be a trend,
but, that may be trackable.
John D. Hardin wrote:


On Wed, 27 Sep 2006, Peter Smith wrote:

 


The messages are simply a random stream of words, with punctuation
scattered in them. No HTML, no URLs being advertised, no excessive
capitalisation, just meaningless text.
   



Technically, then, it's not spam. Spam requires a commercial message
of some sort. :)

 


As such, SA is finding very little to complain about, and is even
lowering the scoring because the bayes filtering deems it to be
good.
   



I'm torn about whether or not to train on such messages. I do hand
training so I keep pretty tight control over what gets trained.

I would agree that it's an attempt to poison your bayes database,
assuming that you have autolearn turned on, either by skewing the
scores towards ham or by bloating the database.

 


Any thoughts on what I can do about these messages? Even with
bayes turned off, they would still fail to score more than say 2
or 3. Each message contains a different paragraph of random text,
so it's not possible to pick out keywords; and the messages are
coming from dialup machines, so blocking IP isn't going to be very
effective.
   



Look for punctuation? A good deal of the random bayes poison at one
time was totally without punctuation.

--
John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/
[EMAIL PROTECTED]FALaholic #11174pgpk -a [EMAIL PROTECTED]
key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
 ...every time I sit down in front of a Windows machine I feel as
 if the computer is just a place for the manufacturers to put their
 advertising.-- fwadling on Y! SCOX
--



 





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] How to install QT on top of sendmail?

2006-09-27 Thread Michael Handiboe

Quinn Comendant wrote:

Ok, ok...I see where this is going. I can do it on two machines. ;P



yeah, dude, your head will not fit through that hole!

stop it.


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Catchall

2006-09-27 Thread Eric \Shubes\

K Anand wrote:

OK ..thanx for the confirmation...So how do I stop these double bounces from
filling up the mailbox of postmaster ??

Anand


Don't bounce catchall email. IOW, set your catchall (postmaster or other) 
account to standard routing.


BTW, how did you set your catchall account to bounce? I don't see such an 
option. What version of toaster are you running?

--
-Eric 'shubes'

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] How to install QT on top of sendmail?

2006-09-27 Thread Eric \Shubes\

Steve Huff wrote:


On Sep 26, 2006, at 7:27 PM, Quinn Comendant wrote:


I will need to find _some_ solution. What are my options, as painful as
they might be?


so you have the old sendmail solution running on your production 
hardware right now?  here's my suggestion:


1) build another box
2) migrate the sendmail solution to it
3) put the other box into production for a short time
4) build your qmailtoaster on the production box
5) migrate gradually
6) retire the other box

-steve

---


I'll 2nd that approach.

--
-Eric 'shubes'

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] problem receiving remote email

2006-09-27 Thread Eric \Shubes\
I'm trying to track down a problem with a high volume server and would 
appreciate any insights.


To begin with, there was a networking problem which I know nothing about 
that apparently started this whole ordeal. The network problem is allegedly 
fixed, but the email problem persists.


The smtp log appears to be normal, except that there are no simscan 
messages. A test email eventually bounced with Sorry, I wasn't able to 
establish an SMTP connection. (#4.4.1). Something's misleading though, as I 
saw the smtp session for this message in the log, and it ended with status 0 
(but no simscan record).


Guessing that simscan (or more likely something within it like SA or clamav) 
was having a problem, I disabled simscan, and mail is flowing once again.


Any ideas what might be the problem here?
--
-Eric 'shubes'

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] OpenSSL Vulerability

2006-09-27 Thread Erik Espinoza

'yum update'

On 9/27/06, Alex [EMAIL PROTECTED] wrote:

Seems like new bug had been discovered in OpenSSL that makes it possible
to exploit some certificates and login as root without a password.

Does anyone know what is the safest way to patch openssl on qmailtoaster
without disrupting other applications/services on centos 4.2 and 4.3..


Thank you


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] OpenSSL Vulerability

2006-09-27 Thread Alex
Here is the advisory

http://www.openssl.org/news/secadv_20060905.txt

-Original Message-
From: Alex [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 27, 2006 10:02 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] OpenSSL Vulerability

Seems like new bug had been discovered in OpenSSL that makes it possible
to exploit some certificates and login as root without a password.

Does anyone know what is the safest way to patch openssl on qmailtoaster
without disrupting other applications/services on centos 4.2 and 4.3.. 


Thank you


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] vpopmail + permissions + httpd

2006-09-27 Thread Mark Samples
Anyone know (before I hose something) if adding the setgid bit on the 
vchkpw group will effect mail
delivery on qmail?  The reason, I am pondering the idea of moving 
websites to the same directory
as the domains, I want to run httpd as vpopmail.vchkpw so it can access 
this via apache.


Has anyone done this and if so are there anythings (from your 
experiences) you may want to

share?  Or any holes one might want to shoot into this?

Thanks in advance.

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] OpenSSL Vulerability

2006-09-27 Thread info
yum update openssl

I don't see how it would mess anything else up. But then again, i could be
wrong:-)






 Seems like new bug had been discovered in OpenSSL that makes it possible
 to exploit some certificates and login as root without a password.

 Does anyone know what is the safest way to patch openssl on qmailtoaster
 without disrupting other applications/services on centos 4.2 and 4.3..


 Thank you


 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] vpopmail + permissions + httpd

2006-09-27 Thread Erik Espinoza

Just so I understand you, you want to basically put the web sites in
the /home/vpopmail/domains directory?

Erik

On 9/27/06, Mark Samples [EMAIL PROTECTED] wrote:

Anyone know (before I hose something) if adding the setgid bit on the
vchkpw group will effect mail
delivery on qmail?  The reason, I am pondering the idea of moving
websites to the same directory
as the domains, I want to run httpd as vpopmail.vchkpw so it can access
this via apache.

Has anyone done this and if so are there anythings (from your
experiences) you may want to
share?  Or any holes one might want to shoot into this?

Thanks in advance.

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] vpopmail + permissions + httpd

2006-09-27 Thread Mark Samples

Erik Espinoza wrote:


Just so I understand you, you want to basically put the web sites in
the /home/vpopmail/domains directory?

That would be correct, i.e. make a directory in the 'domain.com' 
directory called say 'web' and
point the we server to that directory to also serve web sites.  The 
webserver could run under
user=vpopmail,group=vchkpw, and web and below would have g+rws so this 
directory

could be maintainable.


Erik

On 9/27/06, Mark Samples [EMAIL PROTECTED] wrote:


Anyone know (before I hose something) if adding the setgid bit on the
vchkpw group will effect mail
delivery on qmail?  The reason, I am pondering the idea of moving
websites to the same directory
as the domains, I want to run httpd as vpopmail.vchkpw so it can access
this via apache.

Has anyone done this and if so are there anythings (from your
experiences) you may want to
share?  Or any holes one might want to shoot into this?

Thanks in advance.

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] vpopmail + permissions + httpd

2006-09-27 Thread Erik Espinoza

That's just bad policy. One miscoding in apache, one badly written
cgi, one bug in your config and you're serving mail directories.

It can be done, sure, but I'd recommend against it.

Erik

On 9/27/06, Mark Samples [EMAIL PROTECTED] wrote:

Erik Espinoza wrote:

 Just so I understand you, you want to basically put the web sites in
 the /home/vpopmail/domains directory?

That would be correct, i.e. make a directory in the 'domain.com'
directory called say 'web' and
point the we server to that directory to also serve web sites.  The
webserver could run under
user=vpopmail,group=vchkpw, and web and below would have g+rws so this
directory
could be maintainable.

 Erik

 On 9/27/06, Mark Samples [EMAIL PROTECTED] wrote:

 Anyone know (before I hose something) if adding the setgid bit on the
 vchkpw group will effect mail
 delivery on qmail?  The reason, I am pondering the idea of moving
 websites to the same directory
 as the domains, I want to run httpd as vpopmail.vchkpw so it can access
 this via apache.

 Has anyone done this and if so are there anythings (from your
 experiences) you may want to
 share?  Or any holes one might want to shoot into this?

 Thanks in advance.

 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] vpopmail + permissions + httpd

2006-09-27 Thread Steve Huff


On Sep 27, 2006, at 3:26 PM, Erik Espinoza wrote:


That's just bad policy. One miscoding in apache, one badly written
cgi, one bug in your config and you're serving mail directories.

It can be done, sure, but I'd recommend against it.


mark,

are you doing this in an attempt to make mailing list archives web- 
accessible?  perhaps an alternate (and much safer) plan would look  
something like this:


1) set up a web-accessible directory somewhere
2) write a script that traverses /home/vpopmail/domains, identifies  
the appropriate list directories, and uses rsync to push changes over  
to the web directory
3) use cron to run this script every minute (or every five minutes,  
or whenever)


this doesn't expose your users' mail spools to potential compromise  
via apache, and it also means that if anything happens to your  
webspace, it's easy to regenerate your mail archives by rerunning  
your script.


-steve

--
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v





-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] duplicate emails

2006-09-27 Thread Steve Ingraham
Jimmy Smith wrote:
required_hits 3
report_safe 0
# report_header 1
# use_terse_report 1
# rewrite_subject 0
rewrite_header Subject ***SPAM***

Here, required_hits sets the threshold for what is marked and
considered
spam (score of 3). The report_safe is turned off, leaving the original
message intact. The next three are commented out, leaving the Headers
as
originally sent. The setting, terse_reports shortens the report
format
without losing valuable information. Being commented out allows
spamassassin to insert information as well as some explanations. The
rewrite_subject has been set to insert the SPAM tag in the subject
line when hitting the threshold of 3.

These are typical of most installations. The local.cf file over-rides
the rules in the /usr/share folder. This is where you should place
custom rules that are specific to the type of mail your organization
receives. The settings above won't have any effect on your duplication
problem.

For more information, at the mailfilter type perldoc
Mail::SpamAssassin::Conf for some tips and guidelines about rules and
configuration. There are many sites that will help with understanding
configuration settings, such as the one below.

http://www.mines.edu/academic/computer/spamuserprefs.shtml

Good Luck!

Luck appears to be what I am running out of.  These email problems are
eating my lunch!  I know everyone out there has been very helpful and I
appreciate the information.  However, the suggestions do not seem to be
effective in my getting our email functional again.  We are still having
multiple email failures.  Duplicate emails are still coming in, users
emails that are sent from our network are not being delivered (this is
upsetting users the most as they feel they cannot trust that their
emails are being delivered) and outside emails are also being delayed or
not delivered at all.

These problems began on Monday when I was attempting to update SA rules
using RDJ.  I have removed all but a small number of .cf files in
/etc/mail/spamassassin and rebooted the server.  The files currently in
/etc/mail/spamassassin folder are:
70_sare_adult.cf
70_sare_bayes_poison_nxm.cf
70_sare_evilnum0.cf
occa_phishing.cf
occa_replica.cf
chickenpox.cf
init.pre
random.cf
tripwire.cf
weeds2.cf
local.cf

Right now I cannot rely on receiving emails as delivery is very
sporadic.  Please send any replies to this post to
[EMAIL PROTECTED]  As of this writing no outside email is being
delivered to our mailboxes.  I would appreciate any help anyone can
offer.

Steve Ingraham

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] duplicate emails

2006-09-27 Thread Steve Ingraham
Eric (Shubes) wrote:
Caution: the contents of /var/qmail/control/blacklists must be on a
single 
line (I think - you might be able to escape the newline (CR), but I'm
not 
sure w/out testing it).

Eric, can you explain what you are referring to in your Caution
statement above?  Do you mean that all of the content should be listed
on one line?  So using an example from George's blacklist below the
content should look like:

-r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org . . . etc.

If this is the way it needs to be input into the blacklists file should
there be commas, spaces or something else between each entry?  If not,
then I guess I am a little confused on what you are referring to.

Steve Ingraham
___

 George Sweetnam wrote:
 You might also want to add some additional blacklists from orbs
(don't
 do 
 the all-in-one).  Some like the dynamic shouldn't be used, but the
 exploited 
 server rbl is very handy.  I added 5 or 6 to my servers and it's
helped
 even more.
 
 The content of my current blacklists control file (I does change):
 -r sbl.spamhaus.org
 -r bl.spamcop.net
 -r relays.ordb.org
 -r block.dnsbl.sorbs.net
 -r http.dnsbl.sorbs.net
 -r misc.dnsbl.sorbs.net
 -r rhsbl.sorbs.net
 -r smtp.dnsbl.sorbs.net
 -r socks.dnsbl.sorbs.net
 -r spam.dnsbl.sorbs.net
 -r web.dnsbl.sorbs.net
 -r zombie.dnsbl.sorbs.net
 
 Just eliminate the biggest files in your setup - comment out
BLACKLIST
 and BLACKLIST_URL from your config. Those two are huge and taking
them
 out of my setup returned my system to normal behavior.
 
 
 Thanks, I will look at adding to my blacklists control file.  Can you
 tell me what the -r command means?
 
 Steve Ingraham
 
 
 
 --Original Message--
 
 Steve Ingraham wrote:

 I need help with a problem. Our users are seeing some multiple
 duplicate emails coming from the same sender. This is not occurring
 with every email so there does not seem to be any pattern to which
 incoming emails will be duplicated and which ones won't. They are
also
 reporting that duplicate emails are sent when they send to an outside
 email. Has anyone experienced this problem before? What could be
 causing this to occur and what can I do to stop this? I am running
 qmailtoaster and spamassassin as an external email gateway. There has
 been nothing changed with qmail but I did update some rules in SA
 using rules_du_jour yesterday. Would these rules updates cause this
 problem? If so, what would have changed?

 Jake Vickers wrote:

 If your system is low on resources (ie: RAM), then the spamd process
 can take too long, making Toaster think the mail got lost somewhere,
 so it resends it.
 Might want to check and see how much RAM you're using.

 I want to thank everyone who posted a reply on my inquiry. I believe
 Jake Vickers was right about the problem. The RAM on the email server
 was bogged down since yesterday when I updated the various .cf files
 using rules_du_jour. I had included just a handful of rules from RDJ
 but it appears that RDJ utilizes much too much of my server resources
 to use it to update my spamassassin rules. It was slowing down the
 server so much that simple functions were not responding. This
appears
 to have affected the delivery of emails. In fact I noticed that my
 original message to these mail lists took several hours to post and
 were duplicated also. I resolved the problem by moving the various
 rules .cf files out of the /etc/mail/spamassassin folder and
 restarting spamassassin.

 If anyone has a simple way of updating rules for spamassassin I would
 welcome your input. I still need to update the rules as I have been
 getting a great number of emails coming through to users.
 Specifically, we are getting a lot of the pharmaceutical spam and the
 stock spam.

 Again, thanks to everyone for the posts.

 Steve Ingraham



-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] duplicate emails

2006-09-27 Thread Eric \Shubes\

Steve Ingraham wrote:

Eric (Shubes) wrote:

Caution: the contents of /var/qmail/control/blacklists must be on a
single 

line (I think - you might be able to escape the newline (CR), but I'm
not 

sure w/out testing it).


Eric, can you explain what you are referring to in your Caution
statement above?  Do you mean that all of the content should be listed
on one line?  So using an example from George's blacklist below the
content should look like:

-r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org . . . etc.


Yes, that looks good.


If this is the way it needs to be input into the blacklists file should
there be commas, spaces or something else between each entry?


Just spaces between each entry. No commas, only space(s).


If not,
then I guess I am a little confused on what you are referring to.


Don't put them on separate lines.


Steve Ingraham
___


George Sweetnam wrote:

You might also want to add some additional blacklists from orbs

(don't
do 

the all-in-one).  Some like the dynamic shouldn't be used, but the
exploited 
server rbl is very handy.  I added 5 or 6 to my servers and it's

helped

even more.
The content of my current blacklists control file (I does change):
-r sbl.spamhaus.org
-r bl.spamcop.net
-r relays.ordb.org
-r block.dnsbl.sorbs.net
-r http.dnsbl.sorbs.net
-r misc.dnsbl.sorbs.net
-r rhsbl.sorbs.net
-r smtp.dnsbl.sorbs.net
-r socks.dnsbl.sorbs.net
-r spam.dnsbl.sorbs.net
-r web.dnsbl.sorbs.net
-r zombie.dnsbl.sorbs.net
Just eliminate the biggest files in your setup - comment out

BLACKLIST

and BLACKLIST_URL from your config. Those two are huge and taking

them

out of my setup returned my system to normal behavior.


Thanks, I will look at adding to my blacklists control file.  Can you
tell me what the -r command means?

Steve Ingraham



--Original Message--


Steve Ingraham wrote:

I need help with a problem. Our users are seeing some multiple
duplicate emails coming from the same sender. This is not occurring
with every email so there does not seem to be any pattern to which
incoming emails will be duplicated and which ones won't. They are

also

reporting that duplicate emails are sent when they send to an outside
email. Has anyone experienced this problem before? What could be
causing this to occur and what can I do to stop this? I am running
qmailtoaster and spamassassin as an external email gateway. There has
been nothing changed with qmail but I did update some rules in SA
using rules_du_jour yesterday. Would these rules updates cause this
problem? If so, what would have changed?

Jake Vickers wrote:

If your system is low on resources (ie: RAM), then the spamd process
can take too long, making Toaster think the mail got lost somewhere,
so it resends it.
Might want to check and see how much RAM you're using.

I want to thank everyone who posted a reply on my inquiry. I believe
Jake Vickers was right about the problem. The RAM on the email server
was bogged down since yesterday when I updated the various .cf files
using rules_du_jour. I had included just a handful of rules from RDJ
but it appears that RDJ utilizes much too much of my server resources
to use it to update my spamassassin rules. It was slowing down the
server so much that simple functions were not responding. This

appears

to have affected the delivery of emails. In fact I noticed that my
original message to these mail lists took several hours to post and
were duplicated also. I resolved the problem by moving the various
rules .cf files out of the /etc/mail/spamassassin folder and
restarting spamassassin.

If anyone has a simple way of updating rules for spamassassin I would
welcome your input. I still need to update the rules as I have been
getting a great number of emails coming through to users.
Specifically, we are getting a lot of the pharmaceutical spam and the
stock spam.

Again, thanks to everyone for the posts.

Steve Ingraham







--
-Eric 'shubes'

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] duplicate emails

2006-09-27 Thread Eric \Shubes\

Steve Ingraham wrote:


Luck appears to be what I am running out of.  These email problems are
eating my lunch!  I know everyone out there has been very helpful and I
appreciate the information.  However, the suggestions do not seem to be
effective in my getting our email functional again.  We are still having
multiple email failures.  Duplicate emails are still coming in, users
emails that are sent from our network are not being delivered (this is
upsetting users the most as they feel they cannot trust that their
emails are being delivered) and outside emails are also being delayed or
not delivered at all.


Are you sure all your problems are SA related? SA shouldn't affect outgoing 
main in normal configurations. I would try disabling SA (change 
/var/qmail/control/simcontrol, then # qmailctl cdb) and see if things 
stabilize. Then add SA back in a little at a time. Local rules only at 
first, then add rules which require network access, a few at a time. Leave 
bayes db disabled until all other rules seem to work ok.



These problems began on Monday when I was attempting to update SA rules
using RDJ.  I have removed all but a small number of .cf files in
/etc/mail/spamassassin and rebooted the server.  The files currently in
/etc/mail/spamassassin folder are:
70_sare_adult.cf
70_sare_bayes_poison_nxm.cf
70_sare_evilnum0.cf
occa_phishing.cf
occa_replica.cf
chickenpox.cf
init.pre
random.cf
tripwire.cf
weeds2.cf
local.cf

Right now I cannot rely on receiving emails as delivery is very
sporadic.  Please send any replies to this post to
[EMAIL PROTECTED]  As of this writing no outside email is being
delivered to our mailboxes.  I would appreciate any help anyone can
offer.


Duplicates are symptomatic of smtp timeouts. Are you getting a lot of exit 
256 status codes? When the session times out in SA, the sender will send 
again, and often the mail is delivered too, resulting in duplicates.


I've experienced a problem with the bayes database that I haven't nailed 
down yet. When expiration of tokens kicks in, SA seems to hang. I rename (or 
remove) /home/vpopmail/.spamassassin directory (where bayes db resides), and 
everything is hunky dorey for a while, until token expiration rules kick in 
again (apparently).



Steve Ingraham




--
-Eric 'shubes'

-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] themes para squirrelmail

2006-09-27 Thread Ariel
Hola lista , alguien conoce donde descargar themes para squirrelmail gratuitos?o modificar por lo menos la web de inicio?no puedo agrandar el cuadro de ingreso de ususario Gracias


Re: [qmailtoaster] problem receiving remote email

2006-09-27 Thread Jake Vickers

Eric Shubes wrote:
I'm trying to track down a problem with a high volume server and would 
appreciate any insights.


To begin with, there was a networking problem which I know nothing 
about that apparently started this whole ordeal. The network problem 
is allegedly fixed, but the email problem persists.


The smtp log appears to be normal, except that there are no simscan 
messages. A test email eventually bounced with Sorry, I wasn't able 
to establish an SMTP connection. (#4.4.1). Something's misleading 
though, as I saw the smtp session for this message in the log, and it 
ended with status 0 (but no simscan record).


Guessing that simscan (or more likely something within it like SA or 
clamav) was having a problem, I disabled simscan, and mail is flowing 
once again.


Any ideas what might be the problem here?
Hey Eric. Any more details? Was anything changed prior to this? Is it 
maybe failing while trying to DNS lookups for blacklists or URIBLs? 
Maybe try shutting one of those off at a time to see if they're the 
culprit or not?


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] problem receiving remote email

2006-09-27 Thread Erik Espinoza

Does this machine have a caching name server? What do the logs say?

Erik

On 9/27/06, Eric Shubes [EMAIL PROTECTED] wrote:

I'm trying to track down a problem with a high volume server and would
appreciate any insights.

To begin with, there was a networking problem which I know nothing about
that apparently started this whole ordeal. The network problem is allegedly
fixed, but the email problem persists.

The smtp log appears to be normal, except that there are no simscan
messages. A test email eventually bounced with Sorry, I wasn't able to
establish an SMTP connection. (#4.4.1). Something's misleading though, as I
saw the smtp session for this message in the log, and it ended with status 0
(but no simscan record).

Guessing that simscan (or more likely something within it like SA or clamav)
was having a problem, I disabled simscan, and mail is flowing once again.

Any ideas what might be the problem here?
--
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] Installatioin Error in MYSQL when running script

2006-09-27 Thread Gabriel Lai - E Technology



Hello,

Attached is a snap shot of what I'm facing 
now

Please advice on how to resolve.

Thanks
Gabriel
attachment: error_qmail.JPG
-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Installatioin Error in MYSQL when running script

2006-09-27 Thread aledr
You have a database called vpopmail as We can see at the screenshot. If You **have never** used qmail + vpopmail You can just drop this database with the command mysqladmin drop vpopmail -p as root (where -p parameter asks for Your root password to access MySQL. After all You can be patiently and edit the script, then paste in the correct place Your MySQL's root password.
Best regards.2006/9/27, Gabriel Lai - E Technology [EMAIL PROTECTED]:







Hello,

Attached is a snap shot of what I'm facing 
now

Please advice on how to resolve.

Thanks
Gabriel

-   QmailToaster hosted by: VR Hosted http://www.vr.org
-To unsubscribe, e-mail: 
[EMAIL PROTECTED]For additional commands, e-mail: [EMAIL PROTECTED]
-- [ ]'sAledr - AlexandreOpenSource Solutions for SmallBusiness Problems


Re: [qmailtoaster] Catchall

2006-09-27 Thread K Anand
Hi,

I have not set any account as catchall...From the qmailadin, I used the Set
Catchall bounced option. I'm running qmail-toaster-1.03-1.2.10 with
qmailadmin-toaster-1.2.9-1.2.11. Should I mark any account as a catchall
account or by default it is set to some account ?? I just saw that the
postmaster account was not set as a catchall account.

Anand


- Original Message - 
From: Eric Shubes [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Sent: Wednesday, September 27, 2006 8:45 PM
Subject: Re: [qmailtoaster] Catchall


 K Anand wrote:
  OK ..thanx for the confirmation...So how do I stop these double bounces
from
  filling up the mailbox of postmaster ??
 
  Anand

 Don't bounce catchall email. IOW, set your catchall (postmaster or other)
 account to standard routing.

 BTW, how did you set your catchall account to bounce? I don't see such an
 option. What version of toaster are you running?
 -- 
 -Eric 'shubes'

 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]





-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] Problem with SMTP, not working

2006-09-27 Thread TV SIVARAMAN
Thanks, Craig, SMTP is now working, with your
suggestion, we could solve the problem.

Sivaraman.

--- Craig Smith [EMAIL PROTECTED] wrote:

 Hi There,
 
 Check /var/qmail/supervise/smtp/run   Part of the
 smtp run file is the path
 to rblsmtpd which is located in /usr/bin on mine and
 I assume by default.
 
 Check your path and then check the path for that
 file.  If it isn't in the
 path search the system and copy or link it.
 
 I'm not sure which portion of the toaster installs
 this file, but your's is
 either missing or in a different location.  I take
 it you don't get any
 errors during install?
 
 
 -Original Message-
 From: TV SIVARAMAN [mailto:[EMAIL PROTECTED] 
 Sent: 26 September 2006 15:49
 To: qmailtoaster toaster
 Subject: [qmailtoaster] Problem with SMTP, not
 working
 
 Hi:
 
 I am having problem with SMTP. I get the following
 message in the SMTP log:
 
 @400045193e73107e63a4 rblsmtpd: fatal: unable to
 run #: file does not exist
 @400045193e7310819bdc tcpserver: end 16108
 status
 28416
 @400045193e731081e22c tcpserver: status:
 0/500500500500500
 
 I am running qmailtoaster on a quad xeon x86_64
 processor. All the available packages at the
 qmailtoaster.com site has been implemented. 
 
 Sivaraman.
 
 __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam
 protection around 
 http://mail.yahoo.com 
 

-
  QmailToaster hosted by: VR Hosted
 http://www.vr.org

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 
 

-
  QmailToaster hosted by: VR Hosted
 http://www.vr.org

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] Problem with SMTP, not working

2006-09-27 Thread TV SIVARAMAN
Craig, thanks again. Is there any compatibility
problem of ucspi-toaster with CentOS 4.3 x86_64
version of gcc? There was some comment on it sometime
back.

Please see the following the Note from 
http://www.shupp.org/toaster/#ucspi-tcp 

 cd /var/src/
tar -xzf tar/ucspi-tcp-0.88.tar.gz
cd ucspi-tcp-0.88
patch -p1 
/var/src/netqmail-1.05/other-patches/ucspi-tcp-0.88.errno.patch

# NOTE: If you are on the x86_64 platform, you need to
remove the
# -02 argument to gcc in conf-cc. See this for
details

make
make setup check

I am pointing this out because we had problem with tcp
server sometime back, pop3, smtp, imap stoped working
after about a month of running qmail. We had
re-install uscpi.

Sivaraman.

--- Craig Smith [EMAIL PROTECTED] wrote:

 Hi Again
 
 As a follow up rblsmtpd is a part of the ucspi-tcp
 http://www.flounder.net/qmail/qmail-howto.html#12.
 
 Hope that helps as well.
 
 Craig
  
 
 -Original Message-
 From: TV SIVARAMAN [mailto:[EMAIL PROTECTED] 
 Sent: 26 September 2006 15:49
 To: qmailtoaster toaster
 Subject: [qmailtoaster] Problem with SMTP, not
 working
 
 Hi:
 
 I am having problem with SMTP. I get the following
 message in the SMTP log:
 
 @400045193e73107e63a4 rblsmtpd: fatal: unable to
 run #: file does not exist
 @400045193e7310819bdc tcpserver: end 16108
 status
 28416
 @400045193e731081e22c tcpserver: status:
 0/500500500500500
 
 I am running qmailtoaster on a quad xeon x86_64
 processor. All the available packages at the
 qmailtoaster.com site has been implemented. 
 
 Sivaraman.
 
 __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam
 protection around 
 http://mail.yahoo.com 
 

-
  QmailToaster hosted by: VR Hosted
 http://www.vr.org

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 
 

-
  QmailToaster hosted by: VR Hosted
 http://www.vr.org

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] problem receiving remote email

2006-09-27 Thread George Sweetnam
Since it worked when you disabled simscan you should turn it back on again 
and manually disable the spam and clam in the control file for it. 
spam=no,clam=no
On the line above the default entry (it reads down from the top put a line 
specific to your email address).  Turn spam off for all domains.  Then send 
a test message to the [EMAIL PROTECTED] and see if you can get it to that box.

[EMAIL 
PROTECTED]:clam=yes,spam=yes,trophie=yes,spam_hits=20,attach=.scr:.bat:.com:.pif:.exe:.vbs:.lnk:.wsh:.hta
[EMAIL 
PROTECTED]:clam=yes,spam=no,trophie=yes,attach=.scr:.bat:.com:.pif:.exe:.vbs:.lnk:.wsh:.hta
:clam=no,spam=no,trophie=no,spam_hits=5.5,attach=.scr:.bat:.com:.pif:.exe:.vbs:.lnk:.wsh:.hta


Then do this:
 /var/qmail/bin/simscanmk
 /var/qmail/bin/simscanmk -g

It's likely you did an update to spamassassin and forgot to update the 
simscan db file (-g command) previously to the network issue.   Then when 
you were having the problem rebooted the machine or restarted qmail, which 
made the update effective.


George Sweetnam


- Original Message - 
From: Eric Shubes [EMAIL PROTECTED]
To: qmailtoaster-list qmailtoaster-list@qmailtoaster.com
Sent: Wednesday, September 27, 2006 12:03 PM
Subject: [qmailtoaster] problem receiving remote email


I'm trying to track down a problem with a high volume server and would
appreciate any insights.

To begin with, there was a networking problem which I know nothing about
that apparently started this whole ordeal. The network problem is allegedly
fixed, but the email problem persists.

The smtp log appears to be normal, except that there are no simscan
messages. A test email eventually bounced with Sorry, I wasn't able to
establish an SMTP connection. (#4.4.1). Something's misleading though, as I
saw the smtp session for this message in the log, and it ended with status 0
(but no simscan record).

Guessing that simscan (or more likely something within it like SA or clamav)
was having a problem, I disabled simscan, and mail is flowing once again.

Any ideas what might be the problem here?
-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] duplicate emails

2006-09-27 Thread George Sweetnam
You need the -r which means to use as a rejection list -a is a white list 
(don't run through an rbl).  I don't have any problems using multiple lines 
when entering then in the blacklists file... putting it directly into the 
smtp/run file without a \ on the end of the line would be foolish though.

Use the qmail-inject line I sent last time to test your email...it'll show 
you where it's failing.

George.

- Original Message - 
From: Eric Shubes [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Cc: [EMAIL PROTECTED]
Sent: Wednesday, September 27, 2006 6:12 PM
Subject: Re: [qmailtoaster] duplicate emails


Steve Ingraham wrote:
 Eric (Shubes) wrote:
 Caution: the contents of /var/qmail/control/blacklists must be on a
 single
 line (I think - you might be able to escape the newline (CR), but I'm
 not
 sure w/out testing it).

 Eric, can you explain what you are referring to in your Caution
 statement above?  Do you mean that all of the content should be listed
 on one line?  So using an example from George's blacklist below the
 content should look like:

 -r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org . . . etc.

Yes, that looks good.

 If this is the way it needs to be input into the blacklists file should
 there be commas, spaces or something else between each entry?

Just spaces between each entry. No commas, only space(s).

 If not,
 then I guess I am a little confused on what you are referring to.

Don't put them on separate lines.

 Steve Ingraham
 ___

 George Sweetnam wrote:
 You might also want to add some additional blacklists from orbs
 (don't
 do
 the all-in-one).  Some like the dynamic shouldn't be used, but the
 exploited
 server rbl is very handy.  I added 5 or 6 to my servers and it's
 helped
 even more.
 The content of my current blacklists control file (I does change):
 -r sbl.spamhaus.org
 -r bl.spamcop.net
 -r relays.ordb.org
 -r block.dnsbl.sorbs.net
 -r http.dnsbl.sorbs.net
 -r misc.dnsbl.sorbs.net
 -r rhsbl.sorbs.net
 -r smtp.dnsbl.sorbs.net
 -r socks.dnsbl.sorbs.net
 -r spam.dnsbl.sorbs.net
 -r web.dnsbl.sorbs.net
 -r zombie.dnsbl.sorbs.net
 Just eliminate the biggest files in your setup - comment out
 BLACKLIST
 and BLACKLIST_URL from your config. Those two are huge and taking
 them
 out of my setup returned my system to normal behavior.

 Thanks, I will look at adding to my blacklists control file.  Can you
 tell me what the -r command means?

 Steve Ingraham



 --Original Message--

 Steve Ingraham wrote:

 I need help with a problem. Our users are seeing some multiple
 duplicate emails coming from the same sender. This is not occurring
 with every email so there does not seem to be any pattern to which
 incoming emails will be duplicated and which ones won't. They are
 also
 reporting that duplicate emails are sent when they send to an outside
 email. Has anyone experienced this problem before? What could be
 causing this to occur and what can I do to stop this? I am running
 qmailtoaster and spamassassin as an external email gateway. There has
 been nothing changed with qmail but I did update some rules in SA
 using rules_du_jour yesterday. Would these rules updates cause this
 problem? If so, what would have changed?

 Jake Vickers wrote:

 If your system is low on resources (ie: RAM), then the spamd process
 can take too long, making Toaster think the mail got lost somewhere,
 so it resends it.
 Might want to check and see how much RAM you're using.

 I want to thank everyone who posted a reply on my inquiry. I believe
 Jake Vickers was right about the problem. The RAM on the email server
 was bogged down since yesterday when I updated the various .cf files
 using rules_du_jour. I had included just a handful of rules from RDJ
 but it appears that RDJ utilizes much too much of my server resources
 to use it to update my spamassassin rules. It was slowing down the
 server so much that simple functions were not responding. This
 appears
 to have affected the delivery of emails. In fact I noticed that my
 original message to these mail lists took several hours to post and
 were duplicated also. I resolved the problem by moving the various
 rules .cf files out of the /etc/mail/spamassassin folder and
 restarting spamassassin.

 If anyone has a simple way of updating rules for spamassassin I would
 welcome your input. I still need to update the rules as I have been
 getting a great number of emails coming through to users.
 Specifically, we are getting a lot of the pharmaceutical spam and the
 stock spam.

 Again, thanks to everyone for the posts.

 Steve Ingraham





-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-