Re: [toaster] Applying John Simpsons validrcptto patch

2007-11-03 Thread Rick Widmer



Tom Collins wrote:

On Nov 1, 2007, at 4:50 PM, Bill Shupp wrote:

What does this patch do that chkuser doesn't already do?


Validrcptto uses ONCHANGE to monitor actions that add or delete accounts 
on the mail server.  The valid address list is stored in a .cdb file 
that is easy to copy to other servers in a cluster.  Earlier versions 
used cron to scan the user list periodically.


Chkuser links to vchkpw and valias_some kind of get to determine if an 
address is valid.  This should be much faster, but only works on the 
local machine.  Maybe there could be a version that works with 
vpopmaild, but still I think validrcptto is a better choice for clusters.



One big thing that I like is that it can have custom reject messages for 
each address.  So, if I have to kill an address that's overwhelmed with 
spam, I can have a custom reject like that address is no longer in use, 
try fred at smith.com instead.  That way a human sending email to my 
old address could (possibly) see the reject and know to try the new 
address.


That might be a good use for passing the first line of a .qmail file to 
chkuser:


#blackhole That address is no longer in use, try fred at smith.com

Antonio Nati (tonix) has asked for a few bits from gid_flags, and I have 
agreed to assign them.  He hasn't given me the list of what they are 
yet.  Also, I don't know if he is aware of it, but he has a pointer to 
the first line of an alias that matches the address being tested, so any 
.qmail- file could have a comment in its first line that chkuser can use.


I want to use the first word after the '#' if the first line is a 
comment, but everything after that is available.  I would also like to 
be able to produce a list of first word values to accept mail, and 
another list to reject. For example, #Alias, #Mini-List, #Mail-List 
would all be accepted by chkuser, and #blackhole would be rejected, 
passing the rest of the line, if any, as the error message.


When he has time to work on it, I'll try to have a discussion of the 
possibilities on the vpopmail list.









Re: [toaster] Applying John Simpsons validrcptto patch

2007-11-03 Thread Bill Shupp

On Nov 3, 2007, at 9:34 AM, Rick Widmer wrote:




Tom Collins wrote:

On Nov 1, 2007, at 4:50 PM, Bill Shupp wrote:

What does this patch do that chkuser doesn't already do?


Validrcptto uses ONCHANGE to monitor actions that add or delete  
accounts on the mail server.  The valid address list is stored in  
a .cdb file that is easy to copy to other servers in a cluster.   
Earlier versions used cron to scan the user list periodically.


Chkuser links to vchkpw and valias_some kind of get to determine  
if an address is valid.  This should be much faster, but only works  
on the local machine.  Maybe there could be a version that works  
with vpopmaild, but still I think validrcptto is a better choice  
for clusters.


In the clusters I build, I always have NFS mounts of the mail spool  
on the smtp boxes for just this reason.  chkuser works fine if it has  
access to local files, and there's no syncing needed.


Regards,

Bill


Re: [toaster] Applying John Simpsons validrcptto patch

2007-11-02 Thread Sasa Ebach

...
250 snoopy.2000cn.com.au
mail from: [EMAIL PROTECTED]
250 ok
rcpt to: [EMAIL PROTECTED]
511 sorry, no mailbox here by that name (#5.1.1 - chkuser)


Oh, I didn't realize that I could configure that. I will try to find out 
more about that.


But still, does it have the configurable threshhold of J.S.'s approach?

RCPT TO: [EMAIL PROTECTED]
421 too many invalid addresses, goodbye (#4.3.0)
Connection closed by foreign host.

(trying to find more information about chkuser on google, any other hints?)

-se


Re: [toaster] Applying John Simpsons validrcptto patch

2007-11-02 Thread Shane Chrisp
On Fri, 2007-11-02 at 11:45 +0100, Sasa Ebach wrote:
  [1] http://qmail.jms1.net/patches/validrcptto.cdb.shtml
  [2] http://qmail.jms1.net/patches/netqmail-1.05-validrcptto.cdb.2.patch
  
  What does this patch do that chkuser doesn't already do?
 
 It stops delivery of non existant adresses at the earliest possible point. 
 Here is what my server does:
 
 # telnet localhost 25
 Trying 127.0.0.1...
 Connected to localhost.
 Escape character is '^]'.
 220 s1.digitale-wertschoepfung.de ESMTP
 EHLO testing
 250-s1.digitale-wertschoepfung.de
 250-STARTTLS
 250-PIPELINING
 250-8BITMIME
 250-SIZE 0
 250 AUTH LOGIN PLAIN CRAM-MD5
 AUTH PLAIN ...
 235 ok, go ahead (#2.0.0)
 MAIL FROM: [EMAIL PROTECTED]
 250 ok
 RCPT TO: [EMAIL PROTECTED]
 250 ok

I think you better check how your system is setup. This is what you
should get from a system with chkuser patch installed.

...
250 snoopy.2000cn.com.au
mail from: [EMAIL PROTECTED]
250 ok
rcpt to: [EMAIL PROTECTED]
511 sorry, no mailbox here by that name (#5.1.1 - chkuser)

Shane



Re: [toaster] Applying John Simpsons validrcptto patch

2007-11-02 Thread Sasa Ebach

[1] http://qmail.jms1.net/patches/validrcptto.cdb.shtml
[2] http://qmail.jms1.net/patches/netqmail-1.05-validrcptto.cdb.2.patch


What does this patch do that chkuser doesn't already do?


It stops delivery of non existant adresses at the earliest possible point. 
Here is what my server does:


# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 s1.digitale-wertschoepfung.de ESMTP
EHLO testing
250-s1.digitale-wertschoepfung.de
250-STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE 0
250 AUTH LOGIN PLAIN CRAM-MD5
AUTH PLAIN ...
235 ok, go ahead (#2.0.0)
MAIL FROM: [EMAIL PROTECTED]
250 ok
RCPT TO: [EMAIL PROTECTED]
250 ok


Now compare that to this:

(i copy and pasted this from the aforementioned site)

% telnet a.mx.jms1.net 25
Trying 209.114.200.128...
Connected to a.mx.jms1.net.
Escape character is '^]'.
220 a.mx.jms1.net NO UCE ESMTP
EHLO testing
250-a.mx.jms1.net NO UCE
250-STARTTLS
250-PIPELINING
250 8BITMIME
MAIL FROM: [EMAIL PROTECTED]
250 ok
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
553 sorry, this recipient is not in my validrcptto list (#5.7.1)
RCPT TO: [EMAIL PROTECTED]
421 too many invalid addresses, goodbye (#4.3.0)
Connection closed by foreign host.

Can chkuser do this?

(Please read http://qmail.jms1.net/patches/validrcptto.cdb.shtml)

-se


Re: [toaster] Applying John Simpsons validrcptto patch

2007-11-02 Thread Tom Collins

On Nov 1, 2007, at 4:50 PM, Bill Shupp wrote:

What does this patch do that chkuser doesn't already do?


One big thing that I like is that it can have custom reject messages  
for each address.  So, if I have to kill an address that's  
overwhelmed with spam, I can have a custom reject like that address  
is no longer in use, try fred at smith.com instead.  That way a  
human sending email to my old address could (possibly) see the reject  
and know to try the new address.


I also like that if you're going to have a separate server to do all  
of your spam/virus scanning, it just needs a single cdb file to know  
what addresses are good and which are bad.  AND, if you do spam/virus  
scanning for other people (who may host their email on an Exchange  
server, for example), you can continue to reject email to bad addresses.


--
Tom Collins  -  [EMAIL PROTECTED]
Vpopmail - virtual domains for qmail: http://vpopmail.sf.net/
QmailAdmin - web interface for Vpopmail: http://qmailadmin.sf.net/




[toaster] Applying John Simpsons validrcptto patch

2007-11-01 Thread Sasa Ebach

Hey,

I am trying to apply John Simpsons validrcptto[1] patch[2] to the netqmail 
source, but I am getting errors.


# patch  ../netqmail-1.05-validrcptto.cdb.2.patch
patching file Makefile
Hunk #1 FAILED at 1535.
Hunk #2 FAILED at 1553.
2 out of 2 hunks FAILED -- saving rejects to file Makefile.rej
patching file qmail-smtpd.c
Hunk #1 FAILED at 23.
Hunk #2 succeeded at 291 with fuzz 2 (offset 230 lines).
Hunk #3 FAILED at 331.
Hunk #4 FAILED at 355.
Hunk #5 succeeded at 475 (offset 252 lines).
Hunk #6 FAILED at 590.
Hunk #7 FAILED at 753.
5 out of 7 hunks FAILED -- saving rejects to file qmail-smtpd.c.rej

I am applying this patch after I applied the toaster patches. Which is 
probably why it won't work. I am wondering if anybody else has done this 
successfully? Are these two patches mutually exclusive?


[1] http://qmail.jms1.net/patches/validrcptto.cdb.shtml
[2] http://qmail.jms1.net/patches/netqmail-1.05-validrcptto.cdb.2.patch

-se


Re: [toaster] Applying John Simpsons validrcptto patch

2007-11-01 Thread Bill Shupp


On Nov 1, 2007, at 8:08 AM, Sasa Ebach wrote:


Hey,

I am trying to apply John Simpsons validrcptto[1] patch[2] to the  
netqmail source, but I am getting errors.


# patch  ../netqmail-1.05-validrcptto.cdb.2.patch
patching file Makefile
Hunk #1 FAILED at 1535.
Hunk #2 FAILED at 1553.
2 out of 2 hunks FAILED -- saving rejects to file Makefile.rej
patching file qmail-smtpd.c
Hunk #1 FAILED at 23.
Hunk #2 succeeded at 291 with fuzz 2 (offset 230 lines).
Hunk #3 FAILED at 331.
Hunk #4 FAILED at 355.
Hunk #5 succeeded at 475 (offset 252 lines).
Hunk #6 FAILED at 590.
Hunk #7 FAILED at 753.
5 out of 7 hunks FAILED -- saving rejects to file qmail-smtpd.c.rej

I am applying this patch after I applied the toaster patches. Which  
is probably why it won't work. I am wondering if anybody else has  
done this successfully? Are these two patches mutually exclusive?


[1] http://qmail.jms1.net/patches/validrcptto.cdb.shtml
[2] http://qmail.jms1.net/patches/netqmail-1.05-validrcptto.cdb. 
2.patch


What does this patch do that chkuser doesn't already do?

Bill