wrote:
The rspam documentation is awful, in my opinion, however, it is
drop in and can be used in .qmail files which is why I
implemented it. I will not be much help on configuring it.
On 4/17/2024 8:19 AM, Gary Bowling
wrote
.
--
Gary Bowling
The
Moderns album NEXT on your favorite streaming platform
-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e
:52 PM, Gary Bowling
wrote:
Yes, the script can go in those directories not in a cron. I
don't believe you have to call --deploy-hook on the command line
if the script is in those directories. Actually you don't call
anything
6:33 AM Gary Bowling <g...@gbco.us>
wrote:
I'll help edit it if someone else that is currently going
through it wants to start it. Maybe set up a google doc
and give some people edit
how-to-secure-apache-with-lets-encrypt-certificates-on-rhel-8/
Hope this helps.. Gary
On 4/15/2024 1:33 PM, Eric Broch wrote:
Anyone
feel like doing a write-up and I'll put it on the wiki?
On 4/15/2024 11:18 AM, Gary Bowling wrote:
Gary
On 4/15/2024 1:04 PM, William
Silverstein wrote:
I would not use a cron script. I use --deploy-hook option on the
certbot-auto to handle it.
On Mon, April 15, 2024 9:59 am, Gary Bowling wrote:
Great. One question. Seems like everything on
:
Neither,
/var/qmail/control/dh2048.pem
/var/qmail/control/rsa2048.pem
On 4/15/2024 10:33 AM, Gary Bowling
wrote:
Thanks, will still require rsa?
On 4/15/2024 10:47 AM
.
SSL_CTX_set_tmp_rsa_callback ·
openssl/openssl · Discussion #23769 (github.com)
On 4/15/2024 6:25 AM, Gary Bowling
wrote:
Hey Jeff, glad you're making progress. Be aware that when you
get a new cert from
Hey Jeff, glad you're making progress. Be aware that when you get
a new cert from Letsencrypt that the default now retrieves an
ECDSA cert. Which is fine for apache, but doesn't work on qmail,
or at least it didn't for me. To fix that you'll need to
When I go to the admin link for my server,
https://mail.gbco.us/admin-toaster , it flips it to
https://mail.gbco.usadmin-toaster/ and fails.
The alias line in toaster.conf is
Alias /admin-toaster /usr/share/toaster/htdocs/admin/
Oh, and totally agree that using drop ins is much better than
patching.
Gary
On 3/23/2024 11:05 AM, Gary Bowling
wrote:
Thanks.
Yes, spamassassin is working fine for the verification
on the ingress side of your server to
score dkim in messages.
On 3/23/2024 8:23 AM, Gary Bowling
wrote:
hmm, not sure. Maybe a weekend thing. Glad to know it's still
there though for future needs
, Gary Bowling ha
scritto:
Thanks, the error turned out to be solved by fixing up the
/var/qmail/supervise/submission/run file to accept starttls
and encrypted passwords.
On 3/23/2024 4:20 AM, Tonix wrote
Sent from
my Galaxy
Original message
From: Gary Bowling
Date: 2024-03-23 7:49 a.m. (GMT-07:00)
To: qmailtoaster-list@qmailtoaster.com
correctly.
On 3/23/2024 9:24 AM, Gary Bowling
wrote:
Oops, got a bit confused there between signing and verifying..
For signing, it looks like we are still using a modified
qmail-remote. So back to my original
On 3/23/2024 8:31 AM, Gary Bowling
wrote:
Hmm, this line in the wiki says qmail-queue needs to be "link"
which mine is not.
4. DKIM verification (no patch):
Assumes 'QMAILQUEUE="
DKIM with an updated server???
Gary
On 3/23/2024 8:24 AM, Gary Bowling
wrote:
I see, looks like we're using a combination of simscan and
modifying /var/qmail/supervise/smtp/run to do DKIM now and not
I see, looks like we're using a combination of simscan and
modifying /var/qmail/supervise/smtp/run to do DKIM now and not
modifying qmail-remote.
On 3/23/2024 7:57 AM, Gary Bowling
wrote
-remote
But that times out and doesn't work.
Thanks, Gary
--
Gary Bowling
The
Moderns on Spotify
Thanks, the error turned out to be solved by fixing up the
/var/qmail/supervise/submission/run file to accept starttls and
encrypted passwords.
On 3/23/2024 4:20 AM, Tonix wrote:
"However, when I try to send to external domains,
Thanks Peter, good to know as it looks like they are going to
ecdsa for the default.
On 3/23/2024 3:18 AM, Peter Peterse
wrote:
Hi,
Letsencrypt van generate rsa keys by using --key-type rsa
$SMTPD $VCHKPW /bin/true 2>&1
Thunderbird:
Port: 587
Connection Security: STARTTLS
Authentication: Normal Password
On 3/22/2024 6:34 PM, Gary Bowling
wrote:
Rocky 9.3.
Rocky 9.3.
Gary
On 3/22/2024 8:31 PM, Eric Broch wrote:
What are you running EL 8 or 9?
On 3/22/2024 6:28 PM, Gary Bowling
wrote:
Yea did
Yea did that.
I tried what Remo suggested, which was to change the client send
config to:
port 465
SSL/TLS
Normal Password
This should send mail through the /var/qmail/supervise/smtps/
config. That worked, which told
razor/'
--razor-log-file='sys-syslog'"
errors and right accesses
Regards
-P
On 3/22/24 18:30, Gary Bowling wrote:
Also, in /etc/sysconfig/spamassassin the options are set as
ck in 2022, but there really
wasn't any conclusion on that thread. Razor is not installed or
configured in the installation. What should those SPAMDOPTIONS
really be?
--
____
Gary Bowling
The
Moderns
not afford to completely block any of those servers. It
kills my clients as they don't get emails from their customers and
partners.
g
On 3/22/2024 10:58 AM, William
Silverstein wrote:
On Fri, March 22, 2024 4:40 am, Gary Bow
: Gary Bowling
Date: 2024-03-22 8:39 a.m. (GMT-07:00)
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Spamassassin
I found it.
My old server used /etc/spamassassin/
My new server uses /etc/mail/spamassassin/
Therefore I need to pull out the custom items I've added to
/etc
/local.cf
I'm still not sure about spamcop in spamdyke.conf.
On 3/22/2024 10:23 AM, Gary Bowling
wrote:
This page, http://wiki.qmailtoaster.org/index.php?title=Spamassassin
says that it's using /etc/mail
d to trust anything it says.
Gary
On 3/22/2024 10:13 AM, Gary Bowling
wrote:
While I was poking around looking at spam things..
There is a directory /etc/spamassassin/ contains what
looks to
pdate"
Thanks
--
____
Gary Bowling
The
Moderns on Spotify
-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailt
In the spamdyke config, the default is to use spamcop for
blacklisting. I've had a lot of trouble recently with spamcop.
They keep adding the outlook.com servers to their database. Which
means every company that uses Microsoft office 365 for mail gets
Contacts
On 2/23/2024 4:39 PM, Gary Bowling
wrote:
Anyone have a script for moving Squirrelmail address books to
the Roundcube database?
Thanks, gb
Anyone have a script for moving Squirrelmail address books to the
Roundcube database?
Thanks, gb
--
Gary Bowling
The
Moderns on Spotify
/2024 2:39 PM, Gary Bowling
wrote:
Yes, and very importantly for apache, you to have to match
the "php files" and send them to a handler in a conf file with
the FilesMatch and SetHandler directives. That'
s laughing at myself as well.
gb
On 2/23/2024 2:51 PM, Quinn Comendant
wrote:
On 23 Feb 2024, at 9:10, Gary Bowling wrote:
LoadModule
php5_module modules/libphp5.so
On my R
to
make it more safe and robust.
Thanks, gb
--
Gary Bowling
The
Moderns on Spotify
-
To unsubscribe, e-mail: qmailtoaster
and
re-installed the original php.conf which comes from the rpm
php-fpm.
Now everything is working..
gb
On 2/23/2024 12:06 PM, Gary Bowling
wrote:
I usually like to work through these type
On 2/23/2024 11:55 AM, Gary Bowling
wrote:
Here you go Eric.. The 96.46.15.70 address was added as that's
my home IP where I'm working from.
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule
My Box:
# find / -name "*libphp*"
#
Nothing. And yet, my toaster-admin works.
On 2/23/2024 8:33 AM, Gary
Bowling wrote:
Yes I know that. Bu
On venerdì, feb 23, 2024 at 07:11, Gary Bowling <g...@gbco.us> wrote:
Question. On your Rocky 9 boxes, do you have a libphp5.so
module? Listed in the /etc/httpd/conf.d/php.con
.el9_2.x86_64
php-opcache-8.0.30-1.el9_2.x86_64
php-8.0.30-1.el9_2.x86_64
On Feb 22, 2024, at 19:58, Gary Bowling
wrote
?
gb
On 2/22/2024 10:45 PM, Remo Mattei
wrote:
Hi Gary,
I have the default di don’t change anything on that file
On Feb 22, 2024, at 18:59, Gary Bowling
wrote
:
Mine as well. It'd be nice to see some errors in the httpd
log.
On 2/22/2024 11:15 AM, Gary Bowling
wrote:
Thanks. So Eric, my version is 8.0.3 as I stated
for the
confusion.
Remo
On Feb 22, 2024, at 10:05, Gary Bowling
wrote:
Not sure what you're saying Remo. My version
, Remo Mattei
wrote:
I just upgraded to 8.3 myself seems you can do that no problem but
keep 8 there Gary.
Remo
On Feb 22, 2024, at 09:50, Gary Bowling
wrote
have all worked. I can now use ./vuserinfo and get
correct entries. The other tables, valias, lastauth,
dir_control, all seem to be the same.
So I think I'm on to the next challenge. The script you showed
on that page would have been a little eas
sion - QMT
(qmailtoaster.org)
On 2/20/2024 9:37 AM, Gary Bowling
wrote:
Thanks Eric.
Continuing through the "migration" page. After going through
everything moving configs and my database, then restarting.
and no issues at all.
Remo
On Feb 20, 2024, at 09:20, Gary Bowling
wrote:
hmm, looks like the db structure changed since my
swd |
+++++-+---++--+
The difference being the field "pw_domain"
So I guess the new structure has all the domains in the same
table? If it does, then I need to figure out how to migrate my old
db to the new format.
Thanks, gb
On 2/20/2024 11:37 AM,
wrote:
It's all good and there's nothing to do.
On 2/20/2024 7:11 AM, Gary Bowling
wrote:
Another question on my migration. On the qmailtoaster.com
site, under the RHEL9 derivative insta
Another question on my migration. On the qmailtoaster.com site,
under the RHEL9 derivative install heading. There is the
qmail1.03-3.3.8 header and underneath it is a link for "patches
applied"
I'm confused if that means. It implies that those patches
, gb
On 2/19/2024 9:36 AM, Eric Broch wrote:
Not sure what went wrong...did a search...
Can't connect to local MySQL server
through socket '/var/mysql/mysql.sock' (38) - Stack Overflow
On 2/19/2024 6:55 AM, Gary Bowling
w
24 8:03 AM, Gary Bowling
wrote:
Answering my own note.. haha.
I see that I was wrong, both mysql and maria are supported by
the OS. I don't think there is anything in my old maria db files
that would not be compatible with
and let the script install mysql.
Thanks, gb
On 2/19/2024 7:55 AM, Gary Bowling
wrote:
Ok, thanks. Isn't maria the supported db by the OS? I thought I
was using maria because it got regular security updates via
the packages are compiled
with MySQL support, not Maria, on Rocky/Alma/Springdale 9.
On 2/18/2024 5:39 PM, Gary Bowling
wrote:
Per the previous question about Rocky.. I'm in the process of
doing a Rocky 9
On 2/18/2024 8:59 PM, Remo Mattei
wrote:
Gary nah!!
Remo
On Sunday, Feb 18, 2024 at 17:51, Gary Bowling &l
On domenica, feb 18, 2024 at 17:26, Gary Bowling <g...@gbco.us> wrote:
Thanks, yea I understand. It's just the script calls and
tries to install mysql. In your migration a whil
On domenica, feb 18, 2024 at 16:52, Gary Bowling <g...@gbco.us> wrote:
AH, I also see that the qt_install tries to install
mysql-server. My old toaster already has mariadb
installed.
it's all ok prior to cutting over. So I have some time. Any
help would be appreciated.
Thanks, gb
On 2/18/2024 7:39 PM, Gary Bowling
wrote:
Per the previous question about Rocky.. I'm in the process of
doing
Per the previous question about Rocky.. I'm in the process of
doing a Rocky 9 install right now! So yes, I believe it's the way
to go, although I'm not an expert.
My problem right now is... I ran qt_install per the instructions.
What is everyone doing with selinux on new Rocky 9 builds?
In the past, I've always disabled selinux. But maybe for some
added security it's time to do something different. I've learned a
bit about selinux and am using it successfully in my new
Thanks Remo, I'll be doing this later this year as "7" goes out
of maintenance.
Thanks.
On 1/13/2024 3:52 PM, Remo Mattei
wrote:
I was looking at that and I think the certs are missing. I want to
On 3/10/2023 11:45 AM, Quinn Comendant wrote:
On 10 Mar 2023, at 11:16, Gary Bowling wrote:
What's the status these days of a repository that "just
works" for
What's the status these days of a repository that "just works"
for installing the toaster?
I know at one time, (maybe even for my current CentOS7 install?),
all I did was set up the repository and do a yum install.
That was the original
I tried it again and didn't get that error. I guess all is good,
weird.
Gary
On 2/26/2023 10:13 PM, Gary Bowling
wrote:
base/7/x86_64 CentOS-7 -
Base 10,065+7
, 2023 at 18:57, Gary Bowling <g...@gbco.us> wrote:
Tried to do a yum update on my mail server this evening.
Got the following.
Could not retrieve mirrorlist
pired."
Thanks, Gary
--
____
Gary Bowling
The
Moderns on Spotify
-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For
On 1/5/2023 12:41 PM, Gary Bowling
wrote:
I thought the syntax for whitelisting RDNS via a file was to
make a file with entries as follows:
.domain1.com
.domain2.com
.domain3.com
--
Gary Bowling
The
Moderns on Spotify
-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h
r (old) email.
BACKUP BACKUP Your data since there's no way back from ver
102
/Finn
Den 07-07-2022 kl. 15:05 skrev Gary Bowling:
was okay rest of the email - empty or filled with stuff
from another (old) email.
BACKUP BACKUP Your data since there's no way back from ver 102
/Finn
Den 07-07-2022 kl. 15:05 skrev
.net/en-US/thunderbird/102.0.1/releasenotes/
At least until this is fixed.
Does it happen every time you send mail?
On 7/7/2022 7:05 AM, Gary Bowling
wrote:
Thanks for that Finn, so maybe I have tw
complains about TB ver 102.0 claiming 'missing space for new
emails' (amongst other issues for the new release).
Chers,
Finn
Den 06-07-2022 kl. 20:55 skrev Gary Bowling:
For some reason, over the past few days, I've
I see this error message every once in a while when my dns
settings are messed up and the client cannot connect to the
server.
On 7/6/2022 12:55 PM, Gary Bowling
wrote:
For some reason, over the past few day
For some reason, over the past few days, I've been getting this
error from my email client, Thunderbird ver 102.0 windows 64 bit
client. I've been using Thunderbird for years, nothing in the
settings, setup, or anything has been changed in years.
In my maillog I get messages like this. The user/domain/ip have
been changed, but they are all valid:
spamdyke[10162]: DENIED_RDNS_RESOLVE from: fromu...@domain.com
to: tou...@otherdomain.com origin_ip: 162.xxx.sss.yyy origin_rdns:
1 11:42 AM, Eric Broch
wrote:
whitelist
it in spamdyke
On 7/16/2021 8:28 AM, Gary Bowling wrote:
I have an issue with mail getting rejected from a specific
domain. It's getting rejected due to Spamdyke and RD
I have an issue with mail getting rejected from a specific
domain. It's getting rejected due to Spamdyke and RDNS. Here's the
line out of the log.
Jul 16 09:02:41 vm1 spamdyke[32358]: DENIED_RDNS_RESOLVE from:
***@**nd.com to:
Another point, I guess if we leave the cron in place.
It looks to me like we can just disable the
clamav-freshclam.service.
Is that correct?
Thanks, Gary
On 7/11/2021 4:03 PM, Gary Bowling
.
On 7/11/2021 1:55 PM, Gary Bowling wrote:
Thanks Eric.
So I kinda of like having the service show up in toaststat as
it's an easy way to check things. Which would encourage me to
take option 1
On 7/11/2021 11:11 AM, Gary Bowling wrote:
I see where Chandran had this same issue a few weeks ago. What
did you do to resolve it?
Thanks, Gary
On 7/11/2021 1
I see where Chandran had this same issue a few weeks ago. What
did you do to resolve it?
Thanks, Gary
On 7/11/2021 1:03 PM, Gary Bowling
wrote:
Running a toaster on CentOS 7, with everything updated every
Running a toaster on CentOS 7, with everything updated every
couple of months. Just did an update on my server. The update took
me from
clamav-update-0.103.2-1.el7.x86_64 >
clamav-update-0.103.2-2.el7.x86_64
All the other clamav packages are also
You can literally get something that will do that for $5/month
from linode.com. Reliable service and great prices.
I have one from there that hosts about 4 domains and about 1000
users for $20/month! And I've never had a problem.
I
On 12/11/2020 10:21 AM, Eric Broch
wrote:
What's the cost?
On 12/11/2020 8:14 AM, Gary Bowling
wrote:
Yes, they give you an OS, with the amount of
MEM/disk/processors/etc that you
On 12/11/2020 10:01 AM, Eric Broch
wrote:
Do they allow you to control the repos from which you update?
If so there should not be problem if Rocky is done by then.
On 12/11/2020 7:45 AM, Gary Bowling
wrote
One issue I have is that my toaster is hosted on a virtual
machine at Linode. Others may use virtual solutions as well.
These services offer virtual machines of several popular flavors,
but you have to use whatever they offer. Linode offers
Maybe it's time to move to a new distribution, looks like we have
at least until 2024 to do it.
Maybe arch linux? Or is there something similar to the original
CentOS project?
Gary
On 12/9/2020 11:29 AM,
Yes, this is why I would like to get the quota graph working in
squirrelmail again. This was the easy place for customers to see
if they actually had a quota problem if they got these scam
messages.
Gary
On 12/4/2020
t be wrong.
Anyone else have quota display working in squirrelmail?
Thanks, Gary
--
____
Gary Bowling
The
Moderns
I don't know anything about eset. But, if I were looking for a
paid alternative for virus, I would look at relay services.
A relay service that provides virus scanning makes things very
simple and once configured makes your email server
Good to know Eric. I'm about to do the same.
Gary
On 9/22/2020 11:02 AM, Eric Broch
wrote:
I
have all un-secure protocols turned off and always have.
On 9/22/2020 8:59 AM, Gary Bowling wrote
Question for others using the toaster.
Are you still supporting non-secure protocols? Such as pop3 on
port 110 or imap on port 143?
My concern is this. If you have non-secure protocols configured
on your phone, tablet, laptop, etc.
--
Gary Bowling
The
Moderns on Spotify
-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h
the future?
Gary
On 8/10/2020 9:01 PM, Gary Bowling
wrote:
No, didn't know about that. Guess I need to go back and read
the list :)
Do I need to run it?
Gary
On 8
?
On 8/10/2020 6:26 PM, Gary Bowling
wrote:
Thanks Eric, that worked a charm.
However, the update busted httpd. Turns out the httpd.conf
file had this at the end.
Include /etc
mctl disable mailman.
Thanks, Gary
On 8/10/2020 8:49 PM, r...@mattei.org
wrote:
That should not depend on clamav
Remo
Il giorno 10 ago 2020, alle ore 17:26,
Gary
:
add --disablerepo=qmt-current
On 8/10/2020 5:57 PM, Gary Bowling
wrote:
Just tried "yum updating" my server. I recall some notes back
and forth about updating clamav since we're moving to the epel
ver
--nofiles --nodigest
--
________
Gary Bowling
The
Moderns on Spotify
-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additio
1 - 100 of 175 matches
Mail list logo
