Re: [qmailtoaster] Close to quota message or scam
Yes, this is why I would like to get the quota graph working in squirrelmail again. This was the easy place for customers to see if they actually had a quota problem if they got these scam messages. Gary On 12/4/2020 9:58 AM, Angus McIntyre wrote: "Valued Customer" is such an obvious giveaway that I wouldn't bother looking any further. It's a very common phrase in scams of all kinds. Your message is a scam and it almost certainly came from outside your system. Incidentally, on the subject of quota messages, I did see an interesting case the other day. Mail was bouncing from one user and the bounce messages claimed that the message couldn't be delivered because the user was over their quota. I knew this couldn't be the case, because I don't have quotas and in fact the user in question was 'virtual': a non-existent user who was being processed by the catch-all and delivered directly to a mailbox (a sub-mailbox of another user who was having no trouble receiving mail). I finally tracked it down to a dovecot file -- 'dovecot-uidlist', if I remember correctly -- that had the wrong ownership. It was owned by root instead of vpopmail, so dovecot couldn't read it and was bouncing mail with that spurious 'over quota' message. This doesn't relate to your case -- which sounds like simple phishing -- but I thought I'd share it just for general enlightenment. If you get weird quota-related bounces, remember to check ownership and permissions. Angus Jeff Koch wrote on 12/4/20 9:41 AM: One of our QT7 mailserver accounts got an email addressed to a non-existent account that was picked up by his catch-all with the subject 'Mail quota warning - You are close to your quota' He's using about 0% of his quota which I confirmed by manually checking the space used by his account. The header on this email says almost nothing except the email came from Mailer-Daemon and it's addressed to 'Valued Customer:;' I've seen over-quota messages but never a warning message. Is there anything in QT7 that could be generating such a message. Thanks, Jeff Koch - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Close to quota message or scam
"Valued Customer" is such an obvious giveaway that I wouldn't bother looking any further. It's a very common phrase in scams of all kinds. Your message is a scam and it almost certainly came from outside your system. Incidentally, on the subject of quota messages, I did see an interesting case the other day. Mail was bouncing from one user and the bounce messages claimed that the message couldn't be delivered because the user was over their quota. I knew this couldn't be the case, because I don't have quotas and in fact the user in question was 'virtual': a non-existent user who was being processed by the catch-all and delivered directly to a mailbox (a sub-mailbox of another user who was having no trouble receiving mail). I finally tracked it down to a dovecot file -- 'dovecot-uidlist', if I remember correctly -- that had the wrong ownership. It was owned by root instead of vpopmail, so dovecot couldn't read it and was bouncing mail with that spurious 'over quota' message. This doesn't relate to your case -- which sounds like simple phishing -- but I thought I'd share it just for general enlightenment. If you get weird quota-related bounces, remember to check ownership and permissions. Angus Jeff Koch wrote on 12/4/20 9:41 AM: One of our QT7 mailserver accounts got an email addressed to a non-existent account that was picked up by his catch-all with the subject 'Mail quota warning - You are close to your quota' He's using about 0% of his quota which I confirmed by manually checking the space used by his account. The header on this email says almost nothing except the email came from Mailer-Daemon and it's addressed to 'Valued Customer:;' I've seen over-quota messages but never a warning message. Is there anything in QT7 that could be generating such a message. Thanks, Jeff Koch - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Close to quota message or scam
One of our QT7 mailserver accounts got an email addressed to a non-existent account that was picked up by his catch-all with the subject 'Mail quota warning - You are close to your quota' He's using about 0% of his quota which I confirmed by manually checking the space used by his account. The header on this email says almost nothing except the email came from Mailer-Daemon and it's addressed to 'Valued Customer:;' I've seen over-quota messages but never a warning message. Is there anything in QT7 that could be generating such a message. Thanks, Jeff Koch
[qmailtoaster] SOLVED (was: Re: [qmailtoaster] maildrop and qmail)
I figured out what was going wrong with maildrop. The environment variable SHELL (which holds the shell specified to process maildrop forwards and pipes) defaults to '/bin/nologin'. Obviously, this can't handle pipes or spawn a sendmail process to forward mail. So making sure that your maildrop filter file contains something like: SHELL=/bin/bash should take care of it. Note also that string arguments to 'to' need to be quoted, so that the correct form is: to "!someaddr...@example.com" With this problem solved, I think maildrop makes a pretty good replacement for procmail for final delivery filtering on your qmailtoaster. Angus Angus McIntyre wrote on 11/29/20 10:01 PM: Yeah, for some reason that doesn't work for me. I'm not sure if I need to be running maildrop in a different mode or something, but when I tell it: to "!someaddr...@example.com" it logs: Err!: !someaddr...@example.com and throws the message back in the queue. If I try: to !someaddr...@example.com it doesn't throw an error, but it writes everything locally to a file named '0'. Attempts to pipe the output through something also produce 'Err!' errors. I haven't yet found a way to get it to be more explicit about what's bothering it (verbose logging doesn't seem to work). It handles local deliveries without problems, but anything else seems to cause mysterious errors. Thanks nonetheless, Angus Eric Broch wrote on 11/29/20 9:14 PM: https://serverfault.com/questions/151262/how-can-i-use-maildrop-to-forward-a-copy-to-another-email-address On 11/29/2020 6:59 PM, Angus McIntyre wrote: Does anyone have any experience of using maildrop with qmail? I'm able to get maildrop to filter and deliver locally without problems, but attempts to forward to remote (or local) addresses just cause maildrop to report an unhelpful "Err!". If anyone has made this work successfully, I'd welcome some guidance. Thanks Angus - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Email is not delivered
Hi Friends, We are trying to install a fortigate firewall on our network to protect email servers. Our email server was configured on a private ip and one to one NAT map in the firewall. After setup firewall, firewall team to put private dns like firewall router ip in server. We are unable to receive emails after configuring router ip and our isp dns ip in our server. Sample below for smtp log /var/log/qmail/smtp/current CHKUSER accepted sender: from remote rcpt <> : sender accepted Empty showing in rcpt<> After the fallback firewall it is working fine like rcp found an existing recipient and got delivered. my tcp.smtp below 127.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1" Appreciate any one who helps me. -- *Regards,Manikandan.C*
