[qmailtoaster] How can I configure qmailtoaster to prevent outbound spamming/ set up throttling/filter inbound spam messages with keywords in subject, body, so on

2012-01-09 Thread Amir Abbasi
Thanks in advance for any assistanc.

Re: [qmailtoaster] Problem enter to account

2012-01-09 Thread Juan Carlos
i´m sorry, the problem is imap rejects me enter an account and also get
this error as I am login (by this I know that is not permission issue):

-ERROR: Conexion terminada por el servidor IMAP
(Connection terminated by IMAP server)




 Hi Juan,

 On Thu, Jan 5, 2012 at 1:31 PM, Juan Carlos carlos...@tmgranada.es
 wrote:
 I have a problem to enter account every days from two week ago, the time
 to enter is too long and reject the user, to login both web as outlook,
 the memory and cpu is ok, all processes runing ok, i can enter ssh,
 webmin, etc..
 to restore only work reboot the server.
 I tried to restart a service only; network, qmailctl, httpd and no works

 At least I didn't quite understand what your problem actually is: what
 do you mean by enter account and with that the time to enter is too
 long?

 Could you please explain a little more and perhaps copy some error
 messages here that you are receiving? Also check the qmail logs if you
 see anything related to your problem there and please provide us the
 info about the versions of the software you are using.

 Best,
 Peter

 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and
 installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Problem enter to account

2012-01-09 Thread Peter Peltonen
Hi Juan,

On Mon, Jan 9, 2012 at 12:04 PM, Juan Carlos carlos...@tmgranada.es wrote:
 i´m sorry, the problem is imap rejects me enter an account and also get
 this error as I am login (by this I know that is not permission issue):

 -ERROR: Conexion terminada por el servidor IMAP
 (Connection terminated by IMAP server)

Please do not top post.

That is an error you receive in your email client? Which client are
you using? What about accessing the same account with Squirrelmail?

And you did not still provide us the following information:

 messages here that you are receiving? Also check the qmail logs if you
 see anything related to your problem there and please provide us the
 info about the versions of the software you are using.

Regards,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Problem enter to account

2012-01-09 Thread Juan Carlos
 Hi Juan,

 On Mon, Jan 9, 2012 at 12:04 PM, Juan Carlos carlos...@tmgranada.es
 wrote:
 i´m sorry, the problem is imap rejects me enter an account and also get
 this error as I am login (by this I know that is not permission issue):

 -ERROR: Conexion terminada por el servidor IMAP
 (Connection terminated by IMAP server)

 Please do not top post.

 That is an error you receive in your email client? Which client are
 you using? What about accessing the same account with Squirrelmail?

that error recive in all user in all domains.


 And you did not still provide us the following information:

 messages here that you are receiving? Also check the qmail logs if you
 see anything related to your problem there and please provide us the
 info about the versions of the software you are using.

how see the versions?
spamassassin 3.2.5
maillog:
Jan  9 09:14:10 mail spamc[914]: skipped message, greater than max message
size (512000 bytes)

this line is the only i seen diferent



 Regards,
 Peter

 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and
 installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Problem enter to account

2012-01-09 Thread Peter Peltonen
Hi,

On Mon, Jan 9, 2012 at 1:45 PM, Juan Carlos carlos...@tmgranada.es wrote:
 -ERROR: Conexion terminada por el servidor IMAP
 (Connection terminated by IMAP server)

 That is an error you receive in your email client? Which client are
 you using? What about accessing the same account with Squirrelmail?

 that error recive in all user in all domains.

Yes, but which mail client are they using: Thunderbird, Outlook,
Squirrelmail or something else?

Does login work from Squirrelmail?



 And you did not still provide us the following information:

 messages here that you are receiving? Also check the qmail logs if you
 see anything related to your problem there and please provide us the
 info about the versions of the software you are using.

 how see the versions?

As root issue the command:

rpm -qa |grep toaster


 spamassassin 3.2.5
 maillog:
 Jan  9 09:14:10 mail spamc[914]: skipped message, greater than max message
 size (512000 bytes)

 this line is the only i seen diferent

The error messages you are receive seem to be IMAP related.

If you look at log files

/var/log/qmail/imap4/current
/var/log/qmail/imap4-ssl/current

do you see anything there if you try to log in with your account (for
example using Squirrelmail)?

Or if you have replaced Courier-IMAP with Dovecot, look at log file:

/var/log/dovecot.log

You should see something there when you try to login. If you do not,
then there is probably something wrong with your firewall. Try this
from a remote machine (not from your qmailtoaster server):

telnet yourmailserversaddress 143
telnet yourmailserversaddress 993

Either of those commands should give you a welcome message? If you get
no response then there is indeed a problem with your firewall or your
imap services are not running (and you should start them).

Regards,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: How can I configure qmailtoaster to prevent outbound spamming/ set up throttling/filter inbound spam messages with keywords in subject, body, so on

2012-01-09 Thread Eric Shubert

On 01/09/2012 01:41 AM, Amir Abbasi wrote:

Thanks in advance for any assistanc.


Authenticated users are trusted to not send spam, so preventing outbound 
spam from QMT is limited to being sure that it's not configured to be an 
open relay (the default configuration), and protecting login 
credentials. The later can be difficult depending on users, but you 
should be ensure that no clients are configured to send passwords in 
clear text (TLS/SSL is recommended for all connections). This can be 
inforced with dovecot (recommended over the stock courier), but there is 
no enforcement mechanism for outbound connections.


Your best defense against inbound spam is to use spamdyke. After that, 
some tuning of spamassassin (adjusting scoring, etc) might be helpful. 
Keyword filtering is typically not an effective way to fight spam.


HTH.

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Problem enter to account

2012-01-09 Thread Juan Carlos
 Hi,

 On Mon, Jan 9, 2012 at 1:45 PM, Juan Carlos carlos...@tmgranada.es
 wrote:
 -ERROR: Conexion terminada por el servidor IMAP
 (Connection terminated by IMAP server)

 That is an error you receive in your email client? Which client are
 you using? What about accessing the same account with Squirrelmail?

 that error recive in all user in all domains.

 Yes, but which mail client are they using: Thunderbird, Outlook,
 Squirrelmail or something else?

 Does login work from Squirrelmail?

nothings works, don´t allow login: ERROR:Connection dropped by IMAP server
 and if you are viewing a message, get out of this account with the same
error




 And you did not still provide us the following information:

 messages here that you are receiving? Also check the qmail logs if
 you
 see anything related to your problem there and please provide us the
 info about the versions of the software you are using.

 how see the versions?

 As root issue the command:

 rpm -qa |grep toaster


daemontools-toaster-0.76-1.3.6
courier-imap-toaster-4.1.2-1.3.10
maildrop-toaster-devel-2.0.3-1.3.8
qmailtoaster-plus.repo-0.1-1
libdomainkeys-toaster-0.68-1.3.6
ezmlm-toaster-0.53.324-1.3.6
squirrelmail-toaster-1.4.19-1.3.15
vpopmail-toaster-5.4.17-1.3.7
qmail-pop3d-toaster-1.03-1.3.18
control-panel-toaster-0.5-1.3.7
qmailmrtg-toaster-4.2-1.3.6
vqadmin-toaster-2.3.4-1.3.6
ripmime-toaster-1.4.0.6-1.3.6
ucspi-tcp-toaster-0.88-1.3.8
qmail-toaster-1.03-1.3.18
autorespond-toaster-2.0.4-1.3.6
qmailadmin-toaster-1.2.12-1.3.8
isoqlog-toaster-2.1-1.3.7
clamav-toaster-0.95.2-1.3.29
qmailtoaster-plus-0.3.1-1.4.11
libsrs2-toaster-1.0.18-1.3.6
ezmlm-cgi-toaster-0.53.324-1.3.6
spamassassin-toaster-3.2.5-1.3.17
courier-authlib-toaster-0.59.2-1.3.10
maildrop-toaster-2.0.3-1.3.8
simscan-toaster-1.4.0-1.3.1

 spamassassin 3.2.5
 maillog:
 Jan  9 09:14:10 mail spamc[914]: skipped message, greater than max
 message
 size (512000 bytes)

 this line is the only i seen diferent

 The error messages you are receive seem to be IMAP related.

 If you look at log files

 /var/log/qmail/imap4/current
 /var/log/qmail/imap4-ssl/current

 do you see anything there if you try to log in with your account (for
 example using Squirrelmail)?

ok, but this problem is for all account, anyone can´t log


 Or if you have replaced Courier-IMAP with Dovecot, look at log file:

 /var/log/dovecot.log

 You should see something there when you try to login. If you do not,
 then there is probably something wrong with your firewall. Try this
 from a remote machine (not from your qmailtoaster server):

 telnet yourmailserversaddress 143
 telnet yourmailserversaddress 993

 Either of those commands should give you a welcome message? If you get
 no response then there is indeed a problem with your firewall or your
 imap services are not running (and you should start them).

 Regards,
 Peter

 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and
 installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] vchkpw-pop3: vpopmail user not found

2012-01-09 Thread Kalil Costa - Brasilsite

  
  
Hi all,


Sometimes I get this error in my / var / log / maillog 'vchkpw-pop3: vpopmail user not found' and my
clients start complaining.
  
  anyone seen this?
  
  At the moment, I have over
1300 email accounts in my servers.


Thks for help.


--kalz--

  


  


-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Problem enter to account

2012-01-09 Thread Peter Peltonen
On Mon, Jan 9, 2012 at 6:25 PM, Juan Carlos carlos...@tmgranada.es wrote:
 nothings works, don´t allow login: ERROR:Connection dropped by IMAP server
  and if you are viewing a message, get out of this account with the same
 error

Has it worked before or is this your first installation? A quick look
on your packages at least reveals the fact that at least some of the
packages are not of the newest version? If your toaster worked before,
did you do something after which it stopped working?

I would try logging in with Squirrelmail and then checking also Apache
logs what error you get there. Nothing works is not much we can work
with here :)



 The error messages you are receive seem to be IMAP related.

 If you look at log files

 /var/log/qmail/imap4/current
 /var/log/qmail/imap4-ssl/current

 do you see anything there if you try to log in with your account (for
 example using Squirrelmail)?

 ok, but this problem is for all account, anyone can´t log

Please try this and provide us a copy of the messsages you see in your
logs when you try login. If someone cannot login there must be a
reason for it and most likely in the logs you will see an error about
it.

If you do not see any errors then I would suggest you try to debug
your firewall as I suggested before:

 You should see something there when you try to login. If you do not,
 then there is probably something wrong with your firewall. Try this
 from a remote machine (not from your qmailtoaster server):

 telnet yourmailserversaddress 143
 telnet yourmailserversaddress 993

 Either of those commands should give you a welcome message? If you get
 no response then there is indeed a problem with your firewall or your
 imap services are not running (and you should start them).


Regards,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] vchkpw-pop3: vpopmail user not found

2012-01-09 Thread Peter Peltonen
On Mon, Jan 9, 2012 at 7:30 PM, Kalil Costa - Brasilsite
ka...@brasilsite.com.br wrote:
 Sometimes I get this error in my / var / log / maillog  'vchkpw-pop3:
 vpopmail user not found'   and my clients start complaining.

 anyone seen this?

If those error messages are about nonexistent user accounts and there
are a lot of those, perhaps someone is trying to guess the correct
user account names and passwords by brute-force? At least googling
that error pointed me to this:

http://www.computersolutions.cn/blog/2009/10/how-to-setup-fail2ban-to-block-vpopmail-attacks/

As suggested by the article you can use fail2ban to prevent that kind
of brute-forcing. Haven't tried that out myself yet, though.

Regards,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] vchkpw-pop3: vpopmail user not found

2012-01-09 Thread Kalil Costa - Brasilsite

  
  

unfortunately it's not brute-force. They are real users, the
error begins to appear and I get calls in my help desk reporting
the problem.

I'm thinking it might be mysql.. 


any ideia ?


thks Peter





  Em 09-01-2012 18:33, Peter Peltonen escreveu:

  On Mon, Jan 9, 2012 at 7:30 PM, Kalil Costa - Brasilsite
ka...@brasilsite.com.br wrote:

  
Sometimes I get this error in my / var / log / maillog 'vchkpw-pop3:
vpopmail user not found' and my clients start complaining.

anyone seen this?

  
  
If those error messages are about nonexistent user accounts and there
are a lot of those, perhaps someone is trying to guess the correct
user account names and passwords by brute-force? At least googling
that error pointed me to this:

http://www.computersolutions.cn/blog/2009/10/how-to-setup-fail2ban-to-block-vpopmail-attacks/

As suggested by the article you can use fail2ban to prevent that kind
of brute-forcing. Haven't tried that out myself yet, though.

Regards,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com






  


-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] vchkpw-pop3: vpopmail user not found

2012-01-09 Thread Peter Peltonen
On Mon, Jan 9, 2012 at 10:54 PM, Kalil Costa - Brasilsite
ka...@brasilsite.com.br wrote:

 unfortunately it's not brute-force. They are real users, the error begins to
 appear and I get calls in my help desk reporting the problem.

 I'm thinking it might be mysql..


 any ideia ?

I have seen problems with a toaster that has a mysql under heavy load.

I would recommend running 'mytop' or similiar utility to see what's
going on with mysql? If you are running any other web apps on the
server they might be also the reason behind mysql slowing down.

Also just running top and sar should give you an estimate how burdened
your server is in general.

If you get the errors only when you have heavy load, then its most
probable that you do not have enough resources or you have broken
hardware (a failing hard disk causing a lot of extra i/o or broken
memory doing strange things).

One thing you can always try if you haven't yet, is to replace
courier-imap with dovecot? Its much more slicker and most likely
causes less burden on vpopmail.

Regards,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: [?? Probable Spam] [qmailtoaster] Re: How can I configure qmailtoaster to prevent outbound spamming/ set up throttling/filter inbound spam messages with keywords in subject, body,

2012-01-09 Thread Amir Abbasi

Thanks. Could someone please let me know what I
have to do to prevent blacklisting the IP address of the server? Such as
domain keys, SPF record, so on.

- Original Message - 
From: Eric Shubert e...@shubes.net

To: qmailtoaster-list@qmailtoaster.com
Sent: Monday, January 09, 2012 7:28 PM
Subject: [?? Probable Spam] [qmailtoaster] Re: How can I configure 
qmailtoaster to prevent outbound spamming/ set up throttling/filter inbound 
spam messages with keywords in subject, body, so on




On 01/09/2012 01:41 AM, Amir Abbasi wrote:

Thanks in advance for any assistanc.


Authenticated users are trusted to not send spam, so preventing outbound 
spam from QMT is limited to being sure that it's not configured to be an 
open relay (the default configuration), and protecting login credentials. 
The later can be difficult depending on users, but you should be ensure 
that no clients are configured to send passwords in clear text (TLS/SSL is 
recommended for all connections). This can be inforced with dovecot 
(recommended over the stock courier), but there is no enforcement 
mechanism for outbound connections.


Your best defense against inbound spam is to use spamdyke. After that, 
some tuning of spamassassin (adjusting scoring, etc) might be helpful. 
Keyword filtering is typically not an effective way to fight spam.


HTH.

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] simscan/simcontrol spam options

2012-01-09 Thread Helmut Fritz
By default, will the toaster compiled simscan support the pass through
option?  By domain filtering?  What options is it compiled with?

Or what number should I set my spam_hits to (i.e. recommendation) so that
most email is accepted and passed through to users?  Those that score over
my threshold in /etc/mail/spamassassin/local.cf should then be marked spam
with the rewrite_header SUBJECT ***SPAM*** entry, correct?

I have some execs that insist they get all their mail, even if it is spam.

Thx!

Helmut


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com