Eric Shubert wrote:
David
Milholen wrote:
Hello All,
I am querying the list to help me find my security hole in my server.
This is after I had placed this ip in the spamdyke blacklist_ip file
I even added the email addy to the blacklist_senders list
Maybe I was
Eric Shubert wrote:
David
Milholen wrote:
Hello All,
I am querying the list to help me find my security hole in my server.
This is after I had placed this ip in the spamdyke blacklist_ip file
I even added the email addy to the blacklist_senders list
Maybe I was
Eric Shubert wrote:
David
Milholen wrote:
Eric Shubert wrote:
David Milholen wrote:
Hello All,
I am querying the list to help me find my security hole in my server.
This is after I had placed this ip in the spamdyke blacklist_ip file
:
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com
I am seeing some of this also..
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
Hello All,
Just polling anyone to see if they may have an old script they are
using or just laying around that I can get to provide a report for
showing only over-quota accounts or accounts that are 90%.
--Dave
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
r a DVD set of topic specific videos I choose to
place on the DVD.
I am looking forward to what ever you can put together,
Like Jake I stay very busy with my day job and very busy with family.
After 4 yrs of being over seas I take every day at a time.
--Dave
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
time to figure out what I did
wrong when I did the cert.
--dave
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com
Jake,
Thanks for the update. Ill just wait a bit till things calm down.
I still have my patients .
--Dave
--
David Milholen
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
Eric Shubert wrote:
David
Milholen wrote:
I was reading about the possibly of using a
ram drive to do all of the scanning for clam and spamAssassin.
How much trouble is it to do this and does this present any known
issues.
I also think Jake has a video tut on this but have not
.
Thanks
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
Steve Huff wrote:
On May 17, 2010, at 4:51 PM, David Milholen wrote:
I know there something a while back on email for blackberrys and othe pda type phones.
I am not seeing any current smtp connections from some phones using verizon,
The sender is getting a 5.7.1 error message
Hey All,
I was trying to do a qtp-restore on a nice new machine with centos 5.4
and the latest toaster packages from a centos 4.8.
Everything went well except when I tried to login as the postmaster for
one my domains using qmailadmin this is what I got.
file permission error
/home/vpopmail/
On 05/27/2010 01:16 PM, Eric Shubert wrote:
David
Milholen wrote:
Hey All,
I was trying to do a qtp-restore on a nice new machine with centos 5.4
and the latest toaster packages from a centos 4.8.
Everything went well except when I tried to login as the postmaster for
one my
updates.
I have 4 blow away servers to test these caveats on before I mess with
the production machine again.
Thanks
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
On 6/4/2010 5:12 PM, Eric Shubert wrote:
David Milholen wrote:
I am having a little trouble with the backup script not backing up
all the accounts in one of my oldest domains.
One of the accounts is the postmaster account. So when I do a
restore I have to manually copy the account over to
On 6/17/2010 8:48 PM, Scott Hughes wrote:
On 6/17/10 3:31 PM, Jake Vickers wrote:
The QTP website is at least partially back online. More to follow as
I get some time.
Jake,
Thanks for taking the time to get that site back up. Call me a geek,
but I enjoy going over the QMT website(s)
achine I have.
I am still taking notes so if I have to build out again I will not have
to rely on my brain LOL
--Dave
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
as well.
I am all ears to any suggestions on help for a fix.
If I can just get a good backup I can blow the old one away and
replace the drives.
--Thanks
Dave
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
On 6/22/2010 5:10 PM, Eric Shubert wrote:
David Milholen wrote:
When I run qtp-backup I do not get an email saying its completed and
I also do not see the postmaster account and some of the other
accounts on any of my domains.
When a restore is complete the domains argue about not having a
On 6/22/2010 8:12 PM, Eric Shubert wrote:
David Milholen wrote:
On 6/22/2010 5:10 PM, Eric Shubert wrote:
David Milholen wrote:
When I run qtp-backup I do not get an email saying its completed
and I also do not see the postmaster account and some of the other
accounts on any of my
On 6/22/2010 5:02 PM, Eric Shubert wrote:
You need to track a message back to the smtp log, and see which user
account was used to submit it. Then change that password.
If you're having trouble with that, show us some of the queue again,
and we'll go from there.
Rafael Andrade wrote:
The
Hi All,
Jake this may be your territory but anyways I am wanting to add a
small virtual drive for doing my clam scans.
Not sure where I should begin.
Thanks
---Dave
-
Qmailtoaster is sponsored by Vickers Consulti
n_rdns: host-217-159-121-90.satlynx.net auth:
(unknown)
@40004c3b78a914e6bb1c spamdyke[15651]: TIMEOUT from:
oqocegogel1...@satlynx.net to: 44b2a950.4000...@wletc.com origin_ip:
217.159.121.90 origin_rdns: host-217-159-121-90.satlynx.net auth:
(unknown) reason: TIMEOUT
Thanks,
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
notes on what I have done with the lists help to
make this a very streamline server.
I wish we had a wiki that would have all the tweaks on security in one
place and another for performance.
My notes are divided this way.
--Thanks
--Dave
On 7/10/2010 7:33 PM, Eric Shubert wrote:
David
On 7/12/2010 8:51 PM, Eric Shubert wrote:
David Milholen wrote:
Eric,
I did exactly what you said and I do remember this type of setup
doing work with the cacti project..
Been a while since I have had to pay attention to Hardware like
drives and memory.
I can definitely see a difference
On 7/11/2010 10:41 AM, Jake Vickers wrote:
On 07/10/2010 07:44 PM, David Milholen wrote:
Hi All,
Jake this may be your territory but anyways I am wanting to add a
small virtual drive for doing my clam scans.
Not sure where I should begin.
Thanks
I actually had done a video on this
On 7/12/2010 8:51 PM, Eric Shubert wrote:
David Milholen wrote:
Eric,
I did exactly what you said and I do remember this type of setup
doing work with the cacti project..
Been a while since I have had to pay attention to Hardware like
drives and memory.
I can definitely see a difference
On 7/12/2010 8:28 PM, Eric Shubert wrote:
If all of your submissions come from authenticated connections (which
they should), you can blacklist your own domain. I know this sounds
counter-intuitive, but since all of your domains authenticate, the
only rejections will be those who claim to com
Ok I have drawn a blank on how to do this.
My catchall account is getting filled up daily with mail that has no
valid recipient for it.
I do not want to just delete all using qmailadmin.
Is there a way to tell chkuser or spamdyke to just drop this mail?
--Thanks
--
David Milholen
On 07/21/2010 09:29 AM, Tonix (Antonio Nati) wrote:
David Milholen ha scritto:
Ok I have drawn a blank on how to do this.
My catchall account is getting filled up daily with mail that has no
valid recipient for it.
I do not want to just delete all using qmailadmin.
Is there a
On 07/21/2010 10:47 AM, Jake Vickers wrote:
On 07/21/2010 11:32 AM, David Milholen wrote:
On 07/21/2010 09:29 AM, Tonix (Antonio Nati) wrote:
David Milholen ha scritto:
Ok I have drawn a blank on how to do this.
My catchall account is getting filled up
Hi All,
I am sure some have seen this before in their smtp logs.
@40004c54490126e69094 CHKUSER relaying rcpt: from
remote <*User:unknown:63.147.8.197*> rcpt
: client allowed to relay
@40004c54490126ec513c spamdyke[1982]: ALLOWED from:
keithra...@gmail.com to: zara-har...@hotmail.com
down 'no auth'.
I do not allow open relay from anyone outside of the subnets I list on
the server. Only allow for those on listed subnets.
What is the best way to lock this down?
--Thanks
Dave
On 7/31/2010 9:17 PM, Eric Shubert wrote:
Jake Vickers wrote:
On 07/31/2010 01:35
rs.. It may not be needed any
longer but I do have a lot of customers starting to use their I-phones
for logging in. They have no choice but to use authentication.
unless this could be a leak outside of my current list of subnets.
Because it sure looks like it.
thanks
Dave
On 7/31/2010 9:17 PM
=dnsbl.njabl.org
#dns-blacklist-entry=bl.spamcop.net
#dns-blacklist-entry=dnsbl.kempt.net
#dns-blacklist-entry=dnsbl.sorbs.net
Any better ideas on cleaning this up would be great:)
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
I don't know what you mean by your first sentence. What does
Authentication have to do with RBLs, and why do you feel stuck using
them?
Personally, I use only zen.spamhaus.org and bl.spamcop.net. Have you
searched your logs to see if the others are effective? Eg:
# qmlog -lc zombie.dnsbl.
basic things I
have done to close down open DNS, but I am sure there is something I am
missing to possibly tighten it up some more.
--Thanks
--Dave
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
new one is beefy-er also.
I am having trouble understanding why the backup is broken?
I cant seem to pin it down to HHD or just some script issue.
Any help would be great..
--Thanks
-Dave
--
David Milholen
Project Engineer
501-318-1300
Wireless Etc
On 08/11/2010 02:53 PM, David Milholen wrote:
Ok,
I am trying to migrate from an older dying machine to a newer machine
till I can get the old one repaired and updated.
Here is what I am having trouble with..
The qtp-restore which is V2.11 is having issues copying all of the
accounts in
On 08/12/2010 10:16 AM, Eric Shubert wrote:
David
Milholen wrote:
On 08/11/2010 02:53 PM, David Milholen wrote:
Ok,
I am trying to migrate from an older dying machine to a newer machine
till I can get the old one repaired and updated.
Here is what I am having
I dont like answering my self but just wanted to post an update on this.
I retried the backup/restore and all seemed to be restored perfectly
this time.
Accept vqadmin is broke when viewing domains. It will only see one which
is the most recent one
I submitted.
The other domains have been wit
On 8/14/2010 10:56 PM, Jake Vickers wrote:
On 08/14/2010 11:42 PM, David Milholen wrote:
I dont like answering my self but just wanted to post an update on
this.
I retried the backup/restore and all seemed to be restored perfectly
this time.
Accept vqadmin is broke when viewing domains. It
On 08/15/2010 10:38 AM, Jake Vickers wrote:
On
08/15/2010 12:10 AM, David Milholen wrote:
On 8/14/2010 10:56 PM, Jake Vickers wrote:
On 08/14/2010 11:42 PM, David Milholen
wrote:
I dont like answering my self but just
wanted to post an update on this.
I
On 08/16/2010 08:57 AM, Jake Vickers wrote:
On 08/16/2010 09:45 AM, David Milholen wrote:
On 08/15/2010 10:38 AM, Jake Vickers wrote:
On
08/15/2010 12:10 AM, David Milholen wrote:
On 8/14/2010 10:56 PM, Jake Vickers
wrote:
On 08/14/2010 11:42 PM, David
On 8/17/2010 10:31 AM, David Milholen wrote:
On 08/16/2010 08:57 AM, Jake Vickers wrote:
On 08/16/2010 09:45 AM, David Milholen wrote:
On 08/15/2010 10:38 AM, Jake Vickers wrote:
On
I am trying to get a single server up and running using cent5.5 and
the latest QMT packages.
I followed eveything to a T using the Wiki and Docs.
I have the server up and all seems ok except when I migrate from my
older system using qtp-restore.
It seems to be working ok except when I use v
On 9/22/2010 11:05 AM, Eric Shubert wrote:
David Milholen wrote:
I am trying to get a single server up and running using cent5.5 and
the latest QMT packages.
I followed eveything to a T using the Wiki and Docs.
I have the server up and all seems ok except when I migrate from my
older
On 9/22/2010 5:47 PM, Jake Vickers wrote:
On 09/22/2010 06:31 PM, David Milholen wrote:
Ok, So why will qcontrol only show one domain or is this version the
teaser?
It only shows the latest domain entry.
--Dave
QControlPE (Personal Edition, the free one) only allows you to
administer
On 9/27/2010 1:23 AM, Jake Vickers wrote:
On 09/26/2010 08:09 PM, David Milholen wrote:
On 9/22/2010 5:47 PM, Jake Vickers wrote:
On 09/22/2010 06:31 PM, David Milholen wrote:
Ok, So why will qcontrol only show one domain or is this version
the teaser?
It only shows the latest domain
On 10/2/2010 1:24 PM, Eric Shubert wrote:
Tonix (Antonio Nati) wrote:
Il 01/10/2010 21:04, Eric Shubert ha scritto:
Tonix (Antonio Nati) wrote:
There are too many sides to examine.
I have a pretty clear picture of what I have in mind. Perhaps I
haven't communicated it well, or am not con
On 10/3/2010 12:51 PM, Natalio Gatti wrote:
Just to expand a bit on my situation.
Further investigation showed that the compromised account
belonging to a host on our network with a public IP was
compromised with a trojan on the machine. This trojan I suppose
was running a smal
On 10/5/2010 10:11 AM, Eric Shubert wrote:
Eric Shubert wrote:
Mike Tirpak wrote:
I'm doing to fresh install of centos 5.5 and qmailtoaster. Followed
the wiki page up to installing perl dependencies. Installed
qmailtoaster-plus with no problems, but I can't run
"qtp-dependencies" command.
nk you
--
David Milholen
Project Engineer
P:501-318-1300
r server will be substantially
higher if you have spamassassin on with no spamdyke.
--
David Milholen
Project Engineer
P:501-318-1300
is becoming to loaded.
I love the qmail plugin I got for cacti and with Thold in place all
is well.
--Dave
--
David Milholen
Project Engineer
P:501-318-1300
and there were about 50
from one place in Bulgaria. The only way to drop that way to add a
drop rule into the gateway.
What is everyone using to stop this kind of force attack on the pop
side?
--Dave
--
David Milholen
Project Engineer
P:501-318-1300
see what happens. I am redirecting him straight
to the test machine which imitates my production machine.
--Dave
On 10/28/2010 6:49 PM, Eric Shubert wrote:
On
10/28/2010 04:02 PM, David Milholen wrote:
Hi everyone,
I had an interesting day
streams for
anti-piracy.
--Dave
On 10/31/2010 9:41 AM, Eric Shubert wrote:
Sounds
good to me. I think you're lucky to have an attacker who's
persistent and will help you to test things out. ;)
--
Davi
ot great market penetration (yet), but respectable growth.
--
David Milholen
Project Engineer
P:501-318-1300
em to be a lot of folks wanting to ditch Exchange. The
FOSS community will do well to providing a strong alternative in
that area.
--
David Milholen
Project Engineer
P:501-318-1300
.
Thanks.
On 19/11/2010 12:26 PM, Eric Shubert wrote:
You can easily disable greylisting and
still get a large benefit from the rest of spamdyke's filters.
--
David Milholen
Project Eng
d To:"
header. This is the address that badmailfrom will filter.
Is that perhaps the problem you're having?
--
David Milholen
Project Engineer
P:501-318-1300
been
hijacked?
If so how did you come to that conclusion and what would the
remedy be?
On 29/11/2010 12:17 PM, David Milholen wrote:
If you want you could drop the
host(95.45.226.126) in Tcp.rules.
I would:)
Will we ever see a new release in centos 5.x just like the original
iso that has cent4.x on it?
Also, latest release of QMT :)
Be a nice package under the tree :) wink
--Dave
--
David Milholen
Project Engineer
P:501-318-1300
wrote:
Hi
David,
I do not think it is not very expensive to buy Jakes
CentOS5 32 or 64 bit isos. $20USD if I remember.
Best thing I ever did for myself.
On 05/12/2010 2:02 PM, David Milholen wrote
Sweet,
that will be my Christmas and birthday present rolled in one :)
Videos + ISO = Happiness
--Dave
On 12/11/2010 6:28 PM, Jake Vickers wrote:
On 12/04/2010 10:02 PM, David Milholen wrote:
Will we ever see a new
Hi all,
I get these in my qmail send logs
How do I fix these
2010-12-15 21:23:15.166466500 warning: unable to stat
mess/8/10585942
There are about 20 of them.
--thanks
Dave
--
David Milholen
Project Engineer
Looks like qm cannot find a file its looking for.IE 10585809
--Dave
--
David Milholen
Project Engineer
P:501-318-1300
.@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com
--
David Milholen
Project Engineer
P:501-318-1300
variety of addresses.
fail2ban will do essentially this automatically and for whatever
addresses attacks may come from. fail2ban is much better solution
imo.
--
David Milholen
Project Engineer
P:501-318-1300
tion="">
Have at it. I've added a link to this page under the
Configuration-> Security section. It's a start (albeit not much
of one).
--
David Milholen
Project Engineer
P:501-318-1300
Hi all,
Is there a way to report how much mail is sent by each account?
thanks
--
David Milholen
Project Engineer
P:501-318-1300
To All,
what is everyone using for queue management?
I recently had a multiple attack of compromised and just spam fill
my queue up and I needed to delete them.
I used qmHandle but I was very clunky with the syntax.
thanks
--
David Milholen
, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
--
David Milholen
Project Engineer
P:501-318-1300
hed over to google mail and neglected
to modify their spf record.
Face Palm..
I should of caught that
Its been a long day :)
Thanks
Dave
--
David Milholen
Project Engineer
P:501-318-1300
pamdyke in order to try it out.
+1
that is the way I do it.. Most customers do not have a clue on how
spam happens or occurs so it is left to us to deal with and educate the
clueless.
--
David Milholen
Project Engineer
P:501-318-1300
nd installing the qmailtoaster-plus
package first, then use qtp-newmodel to build and install the
packages. It's pretty simple that way.
--
David Milholen
Project Engineer
P:501-318-1300
md5 (and clear text
passwords) be removed.
That's all I have on this at the moment. Any thoughts?
--
David Milholen
Project Engineer
P:501-318-1300
over I
will do the restore again.
Thanks
Dave
--
David Milholen
Project Engineer
P:501-318-1300
38:50 2012] [error] [client 98.16.107.2] Premature end of
script headers: toaster.vqadmin, referer:
http://mx2.wletc.com/mail/vqadmin/toaster.vqadmin
What did I break to cause vqadmin to die. Is there another domain
manager out there?
thanks
Dave
--
David Milholen
Project Engineer
P:501-318-1300
ake this a smoother transition.
Thanks
Dave
--
David Milholen
Project Engineer
P:501-318-1300
Ok,
I just read that post.. I kinda thought so.
I will start doing trial runs with Q-control.
I thought i had to purchase q-control to use the full version?
Dave
On 5/8/2012 9:54 AM, Eric Shubert wrote:
On 05/08/2012 05:32 AM, David Milholen wrote:
Hello all,
I have recently installed a new
ssional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and
packages.
To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-lis
I am trying to do a yum update on a new install of QMT-ISO5-1.2 that I
got from Jakes site.
Only thing is when I do. The server will not boot the new kernel .
It boots into Grub and a prompt and thats it.
The server is running Hardware Raid.
Any ideas ?
Thanks
Dave
--
David Milholen
Project
that Mail Queue list? I'm thinking
it should be in the stock QMT.
--
David Milholen
Project Engineer
P:501-318-1300
I am looking to spice up the webmail on our internal qmail box.
What is every one using for their qmail-toaster box and which is easier
to install?
Thanks
Dave
--
David Milholen
Project Engineer
P:501-318-1300
ion, which will allow you to specify
the drive configuration. This is where you would defined the raid
partitions and arrays.
--
David Milholen
Project Engineer
P:501-318-1300
will do the traditional SW raid.
On 5/16/2012 12:02 AM, Eric Shubert wrote:
FWIW, stay away from raid-5 if at all possible. Raid-1 is best,
raid-10 ok.
--
David Milholen
Project Engineer
P:501-318-1300
different. However, re-synchronizing
makes a big impact indeed. A 1TB drive typically resyncs in 6 hours or
so though (iirc), so it's tolerable so long as the re-sync is done
during off hours (presuming there are off hours).
--
David Milholen
Project Engineer
P:501-318-1300
Just got my new server up running with atmailopen and it looks good.
Just trying to figure out why it is taking gmail and yahoo a while to
send a message to the server. I have checked all of the obvious down
to the last spf record.
Dave
--
David Milholen
Project Engineer
P:501-318-1300
anges are picked up on the fly, so there's nothing
to restart. Just be sure the directory exists, and has appropriate
permissions.
# ls -ld /var/log/spamdyke
drwxr-xr-x 2 vpopmail vchkpw 4096 Jul 25 12:24 /var/log/spamdyke
--
David Milholen
Project Engineer
P:501-318-1300
On 11/5/2012 2:27 PM, Eric Shubert wrote:
On 11/05/2012 12:27 PM, Postmaster wrote:
I am still experimenting and trying to find the Holly Grail.
It's called Android. ;)
+1 googleplex :)
--
David Milholen
Project Engineer
P:501-318-1300
-ale "My Ios is bigger
than yours"
ROFL
--
David Milholen
Project Engineer
P:501-318-1300
D from: su...@yahoo.com
to: dmilho...@wletc.com origin_ip: 222.254.188.144 origin_rdns:
localhost auth: (unknown) encryption: (none) reason:
250_ok_1358223529_qp_18005
not sure how to stop localhost with out breaking something..
thanks
Dave
--
David Milholen
Project Engineer
P:501-318-1300
On 1/14/2013 11:45 PM, Tony White wrote:
You might try putting the From: address into the spamdyke senders
blacklist.
/opt/spamdyke/etc/blacklist_senders
best wishes
Tony White
On 15/01/2013 16:33, PakOgah wrote:
On 01/15/13 11:22, David Milholen wrote:
Hello all,
Been a long time
On 1/15/2013 10:42 AM, Eric Shubert wrote:
On 01/14/2013 09:22 PM, David Milholen wrote:
Hello all,
Been a long time since I ve been here to ask a question.
I am getting spam from localhost but its not my localhost..
How do I block this using spamdyke?
SMTP LOG
@400050f4d8b10021a73c
roup.net
# host smtp.panasiagroup.net
This host looks ok to me from what I can check.
--
David Milholen
Project Engineer
P:501-318-1300
I was speaking about the client not the server :)
On 9/15/2013 11:02 PM, ChandranManikandan wrote:
Hi Dave,
I have run only clamav in our server as well iptables and i have
allowed 143 and 993 ports.
On Mon, Sep 16, 2013 at 11:10 AM, David Milholen <mailto:dmilho...@wletc.com>&
Hi All,
It seems I have disabled my SA at the tcp level.
SA seems to be in tacked and running but nothing is being sent to it.
I have got some spam that is really irritating that with spamdyke and
all its
glory cannot stop it.
I have had SA disabled for a very long time but these new emails a
101 - 200 of 206 matches
Mail list logo