Re: [qmailtoaster] relay on tcp.smtp.cdb

2019-07-18 Thread Leonardo Porto

Bingo.
Whitelisting both IPs the relay now works fine.
I guess since the old server (COS5) didn't use spamdyke I used to allow 
only in tcp.smtp file.


Eric, thanks for your help as always.

Leonardo


Em 18/07/2019 14:13, Eric Broch escreveu:


If this is coming from spamdyke that's easy enough to remedy, 
whitelist the ip


On 7/18/2019 11:09 AM, Leonardo - IW Telecom wrote:


If I use port 25 the servers returns "421: Refused. You have no DNS 
reverse entry".


I guess it's still ignoring my rules in tcp.smtp.cdb file.

Could it be because I installed the qmail-1.03-3.1 from development 
version?



Em 18/07/2019 13:41, Eric Broch escreveu:


Why don't you use port 25?

On 7/18/2019 8:22 AM, Leonardo Porto wrote:


Eric,

The first client is an APC Automatic Transfer Switch, it has no 
SMTP authentication method so I configured relay and it was able to 
send us notification messages in the old server, not anymore in the 
new one.


The second client is a PC using Outlook Express, it has no STARTTLS 
support and its SSL method doesn't work, so I want to configure 
relay for it. I tried "my server requires authentication" (Server 
tab) option enabled and disabled, I tried "This /server requires/ a 
/secure connection/ (/SSL/)" (Advanced tab) also, both without success.


Leonardo


Em 18/07/2019 10:58, Eric Broch escreveu:


Are you authorizing with the client?

On 7/18/2019 7:51 AM, Leonardo Porto wrote:


Hi everyone,

My relay rules on tcp.smtp.cdb are not working after I installed 
a new server.


Here is my /etc/tcprules.d/tcp.smtp:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="3",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
10.5.5.189:allow,RELAYCLIENT=""
187.0.147.204:allow,RELAYCLIENT=""
208.84.243.:allow,RBLSMTPD=""

First line is the original from toaster installation, the other 
three lines I included the same way they were in the old server 
and I generated a new cdb file using "qmailctl cdb" command.


My /var/qmail/supervise/submission/run:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
export SMTPAUTH="!"

exec /usr/bin/softlimit -m 12800 \
    /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c 
"$MAXSMTPD" \

    -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
    $SMTPD $VCHKPW /bin/true 2>&1

But I still can't relay from those two clients throught port 587, 
the server asks for authentication. Any clues?




Re: [qmailtoaster] relay on tcp.smtp.cdb

2019-07-18 Thread Eric Broch
If this is coming from spamdyke that's easy enough to remedy, whitelist 
the ip


On 7/18/2019 11:09 AM, Leonardo - IW Telecom wrote:


If I use port 25 the servers returns "421: Refused. You have no DNS 
reverse entry".


I guess it's still ignoring my rules in tcp.smtp.cdb file.

Could it be because I installed the qmail-1.03-3.1 from development 
version?



Em 18/07/2019 13:41, Eric Broch escreveu:


Why don't you use port 25?

On 7/18/2019 8:22 AM, Leonardo Porto wrote:


Eric,

The first client is an APC Automatic Transfer Switch, it has no SMTP 
authentication method so I configured relay and it was able to send 
us notification messages in the old server, not anymore in the new one.


The second client is a PC using Outlook Express, it has no STARTTLS 
support and its SSL method doesn't work, so I want to configure 
relay for it. I tried "my server requires authentication" (Server 
tab) option enabled and disabled, I tried "This /server requires/ a 
/secure connection/ (/SSL/)" (Advanced tab) also, both without success.


Leonardo


Em 18/07/2019 10:58, Eric Broch escreveu:


Are you authorizing with the client?

On 7/18/2019 7:51 AM, Leonardo Porto wrote:


Hi everyone,

My relay rules on tcp.smtp.cdb are not working after I installed a 
new server.


Here is my /etc/tcprules.d/tcp.smtp:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="3",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
10.5.5.189:allow,RELAYCLIENT=""
187.0.147.204:allow,RELAYCLIENT=""
208.84.243.:allow,RBLSMTPD=""

First line is the original from toaster installation, the other 
three lines I included the same way they were in the old server 
and I generated a new cdb file using "qmailctl cdb" command.


My /var/qmail/supervise/submission/run:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
export SMTPAUTH="!"

exec /usr/bin/softlimit -m 12800 \
    /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c 
"$MAXSMTPD" \

    -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
    $SMTPD $VCHKPW /bin/true 2>&1

But I still can't relay from those two clients throught port 587, 
the server asks for authentication. Any clues?




Re: [qmailtoaster] relay on tcp.smtp.cdb

2019-07-18 Thread Leonardo - IW Telecom
If I use port 25 the servers returns "421: Refused. You have no DNS 
reverse entry".


I guess it's still ignoring my rules in tcp.smtp.cdb file.

Could it be because I installed the qmail-1.03-3.1 from development version?


Em 18/07/2019 13:41, Eric Broch escreveu:


Why don't you use port 25?

On 7/18/2019 8:22 AM, Leonardo Porto wrote:


Eric,

The first client is an APC Automatic Transfer Switch, it has no SMTP 
authentication method so I configured relay and it was able to send 
us notification messages in the old server, not anymore in the new one.


The second client is a PC using Outlook Express, it has no STARTTLS 
support and its SSL method doesn't work, so I want to configure relay 
for it. I tried "my server requires authentication" (Server tab) 
option enabled and disabled, I tried "This /server requires/ a 
/secure connection/ (/SSL/)" (Advanced tab) also, both without success.


Leonardo


Em 18/07/2019 10:58, Eric Broch escreveu:


Are you authorizing with the client?

On 7/18/2019 7:51 AM, Leonardo Porto wrote:


Hi everyone,

My relay rules on tcp.smtp.cdb are not working after I installed a 
new server.


Here is my /etc/tcprules.d/tcp.smtp:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="3",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
10.5.5.189:allow,RELAYCLIENT=""
187.0.147.204:allow,RELAYCLIENT=""
208.84.243.:allow,RBLSMTPD=""

First line is the original from toaster installation, the other 
three lines I included the same way they were in the old server and 
I generated a new cdb file using "qmailctl cdb" command.


My /var/qmail/supervise/submission/run:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
export SMTPAUTH="!"

exec /usr/bin/softlimit -m 12800 \
    /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c 
"$MAXSMTPD" \

    -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
    $SMTPD $VCHKPW /bin/true 2>&1

But I still can't relay from those two clients throught port 587, 
the server asks for authentication. Any clues?




Re: [qmailtoaster] relay on tcp.smtp.cdb

2019-07-18 Thread Eric Broch

Why don't you use port 25?

On 7/18/2019 8:22 AM, Leonardo Porto wrote:


Eric,

The first client is an APC Automatic Transfer Switch, it has no SMTP 
authentication method so I configured relay and it was able to send us 
notification messages in the old server, not anymore in the new one.


The second client is a PC using Outlook Express, it has no STARTTLS 
support and its SSL method doesn't work, so I want to configure relay 
for it. I tried "my server requires authentication" (Server tab) 
option enabled and disabled, I tried "This /server requires/ a /secure 
connection/ (/SSL/)" (Advanced tab) also, both without success.


Leonardo


Em 18/07/2019 10:58, Eric Broch escreveu:


Are you authorizing with the client?

On 7/18/2019 7:51 AM, Leonardo Porto wrote:


Hi everyone,

My relay rules on tcp.smtp.cdb are not working after I installed a 
new server.


Here is my /etc/tcprules.d/tcp.smtp:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="3",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
10.5.5.189:allow,RELAYCLIENT=""
187.0.147.204:allow,RELAYCLIENT=""
208.84.243.:allow,RBLSMTPD=""

First line is the original from toaster installation, the other 
three lines I included the same way they were in the old server and 
I generated a new cdb file using "qmailctl cdb" command.


My /var/qmail/supervise/submission/run:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
export SMTPAUTH="!"

exec /usr/bin/softlimit -m 12800 \
    /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c 
"$MAXSMTPD" \

    -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
    $SMTPD $VCHKPW /bin/true 2>&1

But I still can't relay from those two clients throught port 587, 
the server asks for authentication. Any clues?




Re: [qmailtoaster] relay on tcp.smtp.cdb

2019-07-18 Thread Leonardo Porto

Eric,

The first client is an APC Automatic Transfer Switch, it has no SMTP 
authentication method so I configured relay and it was able to send us 
notification messages in the old server, not anymore in the new one.


The second client is a PC using Outlook Express, it has no STARTTLS 
support and its SSL method doesn't work, so I want to configure relay 
for it. I tried "my server requires authentication" (Server tab) option 
enabled and disabled, I tried "This /server requires/ a /secure 
connection/ (/SSL/)" (Advanced tab) also, both without success.


Leonardo


Em 18/07/2019 10:58, Eric Broch escreveu:


Are you authorizing with the client?

On 7/18/2019 7:51 AM, Leonardo Porto wrote:


Hi everyone,

My relay rules on tcp.smtp.cdb are not working after I installed a 
new server.


Here is my /etc/tcprules.d/tcp.smtp:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="3",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
10.5.5.189:allow,RELAYCLIENT=""
187.0.147.204:allow,RELAYCLIENT=""
208.84.243.:allow,RBLSMTPD=""

First line is the original from toaster installation, the other three 
lines I included the same way they were in the old server and I 
generated a new cdb file using "qmailctl cdb" command.


My /var/qmail/supervise/submission/run:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
export SMTPAUTH="!"

exec /usr/bin/softlimit -m 12800 \
    /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
    -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
    $SMTPD $VCHKPW /bin/true 2>&1

But I still can't relay from those two clients throught port 587, the 
server asks for authentication. Any clues?




Re: [qmailtoaster] relay on tcp.smtp.cdb

2019-07-18 Thread Eric Broch

Are you authorizing with the client?

On 7/18/2019 7:51 AM, Leonardo Porto wrote:


Hi everyone,

My relay rules on tcp.smtp.cdb are not working after I installed a new 
server.


Here is my /etc/tcprules.d/tcp.smtp:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="3",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private"
10.5.5.189:allow,RELAYCLIENT=""
187.0.147.204:allow,RELAYCLIENT=""
208.84.243.:allow,RBLSMTPD=""

First line is the original from toaster installation, the other three 
lines I included the same way they were in the old server and I 
generated a new cdb file using "qmailctl cdb" command.


My /var/qmail/supervise/submission/run:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
export SMTPAUTH="!"

exec /usr/bin/softlimit -m 12800 \
    /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
    -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
    $SMTPD $VCHKPW /bin/true 2>&1

But I still can't relay from those two clients throught port 587, the 
server asks for authentication. Any clues?