Re: [vchkpw] How to run multiple qmail-queue

2005-10-29 Thread John Simpson

On 2005-10-28, at 0800, Ingo Claro wrote:
Your could have many instances of qmail running in different ports.  
and

with smtproutes deliver some domains to the qmails...


no. you can have many instances of qmail-smtpd running on different  
IP addresses and/or ports, but it's still just the one instance of  
qmail. there can be only one qmail-send process (which is what i  
understood the original question to be about when he said qmail- 
queue- i followed his terminology so he would understand what i was  
saying, meaning to correct him at the end but i forgot.)


for the record, qmail-queue is the program called by qmail-smtpd,  
qmail-queue, qmail-qmtpd, qmail-qmqpd, and (if you have the mess822  
package installed) qmail-ofmipd program. it handles adding messages  
to the queue.


what the original question was asking about, as near as i could tell,  
was qmail-send. this is the program which manages the messages in  
the queue, once they've been added. this process handles scheduling  
all deliveries, either to a mailbox (i.e. a local delivery) or to  
another mail server (i.e. a remote delivery.)


by default, qmail-send will not schedule more than 20 remote  
deliveries at the same time. if you need to have more outbound  
deliveries happen at once, you can create or change the /var/qmail/ 
control/concurrencyremote file. this file should contain the number  
of remote deliveries you want to see at once. there is an upper limit  
of 120 on this value, if you need it higher you will need to edit the  
source code and re-compile qmail.


--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   [EMAIL PROTECTED] |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--




PGP.sig
Description: This is a digitally signed message part


Re: [vchkpw] How expensive is reloading the tcp.smtp.cdb?

2005-10-29 Thread John Simpson

On 2005-10-28, at 0803, Ingo Claro wrote:


what do you mean by delete.net domain ? you have a bogus  
virtualdomain to

catch spammers?


i own the domain delete.net, and i run it as a honeypot.

the http://www.delete.net/ web page explains this.

--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   [EMAIL PROTECTED] |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--




PGP.sig
Description: This is a digitally signed message part


Re: [vchkpw] vpopmail upgrade == qmail recompile needed ?

2005-10-29 Thread John Simpson

On 2005-10-28, at 1328, Jeremy Kitchen wrote:

On Thursday 27 October 2005 10:57 pm, John Simpson wrote:

On 2005-10-26, at 1949, Rick Macdougall wrote:

Domain Quotas are not going to happen anytime soon I think, the
over head of calculating the quota for a domain of 20K users is
just too much.  If you really need domain quotas, use a separate
user for each domain and use system quotas.  Of course you will
then have to run qmail-smtpd as root.


or make the vchkpw binary setuid root, and let qmail-smtpd run as
qmaild (as it was designed.)


but that will break chkuser.


thinking about how chkuser works, that makes sense. i didn't think  
about that because i don't use chkuser.


i've looked at chkuser twice (once over a year ago, and once again a  
few months ago) and i'm not comfortable with having qmail tied that  
closely into vpopmail. that's why i wrote the validrcptto.cdb patch,  
to reject messages which are addressed to non-existent recipients,  
without tying qmail to any one technology (such as vpopmail, or  
courier-authlib.) any system which allows you to generate a list of  
valid addresses can be used to build a cdb file, and my web site has  
a perl script which does this for system and vpopmail accounts.


the weakness of my patch is that it relies on a cdb file which must  
be rebuilt whenever the underlying data changes (i.e. mailboxes or  
domains added or deleted.) however, because it uses a cdb file, the  
recipient checks are done VERY quickly, without having to fork/exec  
any other processes, and the cdb file can be copied out to internet- 
facing pre-filtering servers which otherwise would not have any way  
to check recipients.


as i've said before, the various recipient check patches each have  
their own strengths and weaknesses... i will admit to being slightly  
biased towards mine, but i don't think any more or less of anybody  
for choosing one of the others. i figure anybody smart enough to  
apply a patch will also be smart enought to choose one based on their  
own needs and the particulars of each patch.


as a separate issue, i'm also not comfortable with the idea of  
running internet-accessible services as root. i did my time running  
sendmail and bind, back before i was introduced to qmail and djbdns,  
and i still have flashbacks to evenings spent rebuilding mail and DNS  
servers because some joker in germany had nothing better to do with  
his time than trash my server.


--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   [EMAIL PROTECTED] |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--




PGP.sig
Description: This is a digitally signed message part


RE: [vchkpw] How to run multiple qmail-queue

2005-10-29 Thread Ingo Claro
but if you install many qmails in different directories (/var/qmail,
/var/qmail2, ...) you can have multiple queues. the qmail listening on port
25 with smtp routes to the others qmails (running in other ports) can
distribute the mails, this way handling different priority queues
depending on the domain... 
for example domain1 and domain2 goes to qmail2 and all the rest to qmail3.

you need the change also concorrencylocal and concurrency remote for
parallel dispatching.

regards,
Ingo Claro 
Gerente de Operaciones
[EMAIL PROTECTED] 
(+56-2) 43 00 155



-Mensaje original-
De: John Simpson [mailto:[EMAIL PROTECTED] 
Enviado el: Sábado, 29 de Octubre de 2005 7:28
Para: vchkpw@inter7.com
Asunto: Re: [vchkpw] How to run multiple qmail-queue

On 2005-10-28, at 0800, Ingo Claro wrote:
 Your could have many instances of qmail running in different ports.  
 and
 with smtproutes deliver some domains to the qmails...

no. you can have many instances of qmail-smtpd running on different IP
addresses and/or ports, but it's still just the one instance of qmail. there
can be only one qmail-send process (which is what i understood the original
question to be about when he said qmail-
queue- i followed his terminology so he would understand what i was saying,
meaning to correct him at the end but i forgot.)

for the record, qmail-queue is the program called by qmail-smtpd,
qmail-queue, qmail-qmtpd, qmail-qmqpd, and (if you have the mess822  
package installed) qmail-ofmipd program. it handles adding messages to the
queue.

what the original question was asking about, as near as i could tell, was
qmail-send. this is the program which manages the messages in the queue,
once they've been added. this process handles scheduling all deliveries,
either to a mailbox (i.e. a local delivery) or to another mail server
(i.e. a remote delivery.)

by default, qmail-send will not schedule more than 20 remote deliveries at
the same time. if you need to have more outbound deliveries happen at once,
you can create or change the /var/qmail/ control/concurrencyremote file.
this file should contain the number of remote deliveries you want to see at
once. there is an upper limit of 120 on this value, if you need it higher
you will need to edit the source code and re-compile qmail.

--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   [EMAIL PROTECTED] |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--