[vchkpw] SMTP_VRFY supported?
Hello, I'm trying to use a mail filter appliance with a qmail/vpopmail (gentoo) install and am running into a issue with the filter generating excessive email accounts due to the way qmail handles invalid email addresses. I'm familiar with the chkuser 2 patch and have tried it with little success. I am using TLS on my system and the chkuser patch works exactly one time then begins rejecting even valid addresses. The vendor that makes the filter suggested using SMTP_VRFY but I'm unable to find a way to implement this in qmail/vpopmail. Can anyone here point me in the right direction? Thanks, Matt Kane [EMAIL PROTECTED]
Re: [vchkpw] SMTP_VRFY supported?
Quoting Joshua Megerman [EMAIL PROTECTED]:
I don't have it enabled, and I have no problems running qmail-smtpd as
vpopmail:vchkpw using tcpserver flags (-u vpopmail -g vchkpw). Which TLS
patch set are you using?
I am using the Gentoo ebuild and I have read all the negative
information reguarding the state of the ebuild but as I am new to
Gentoo and qmail I thought it would be a good route for me. As such,
I'm not to sure how to answer the TLS patch question.
I do believe I've ran my issue down to a permissions problem. When I
run qmail-smtpd as the vpopmail user group chkuser works but TLS
does not. The opposite happens when it is ran as the qmail user. I
have edited /etc/group and added qmaild to the vpopmail group and
vpopmail to the qmaild group (qmail-smtpd was set to run as
${QMAILDUID} by default) but that did not fix the problem.
The issue I'm experiencing is compounded by the fact that I'm running
qmail-smtpd with chkuser on port 2525 so as not to affect users on the
standard port. I have been thus far unable to make logging of the
second service work so I can't tell what file(s) are being permission
restricted.
If anyone has any suggestions as to what file permissions I could
check out, I'm all ears. Thanks again for all your help Josh.
Matt
This message was sent using IMP, the Internet Messaging Program.
Re: [vchkpw] SMTP_VRFY supported?
Jens Josh,
Thanks a ton for all your help. I pieced together everything and was
able to make tls chkuser happy by doing the following:
running qmail-smtp as the vpopmail user
changing ownership of /var/qmail/control/servercert.pem to
qmaild.vpopmail (440)
compiled chkuser2 patch without the uid/gid switching
My logging issues were due to not having generated the cdb files in
/etc/tcprules.d (tcp.qmail-smtp.cdb); once I created these files the
logging started working right away. Looks like everything else was
simple a permissions problem. This was a lot harder to figure out
without logging. Once I got logging working correctly the problem made
itself obvious.
Thanks again for all your help.
Matt
Jens Ott - intergenia AG wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matt Kane schrieb:
Quoting Joshua Megerman [EMAIL PROTECTED]:
I don't have it enabled, and I have no problems running qmail-smtpd as
vpopmail:vchkpw using tcpserver flags (-u vpopmail -g vchkpw). Which TLS
patch set are you using?
I am using the Gentoo ebuild and I have read all the negative
information reguarding the state of the ebuild but as I am new to Gentoo
and qmail I thought it would be a good route for me. As such, I'm not
to sure how to answer the TLS patch question.
I do believe I've ran my issue down to a permissions problem. When I
run qmail-smtpd as the vpopmail user group chkuser works but TLS does
not. The opposite happens when it is ran as the qmail user. I have
edited /etc/group and added qmaild to the vpopmail group and vpopmail to
the qmaild group (qmail-smtpd was set to run as ${QMAILDUID} by default)
but that did not fix the problem.
The issue I'm experiencing is compounded by the fact that I'm running
qmail-smtpd with chkuser on port 2525 so as not to affect users on the
standard port. I have been thus far unable to make logging of the
second service work so I can't tell what file(s) are being permission
restricted.
If you're running default-setup in gentoo:
mkdir /service/$YOURSERVICENAME/log
and create a file
/service/$YOURSERVICENAME/log/run
with the following contents
- SNIP
#!/bin/sh
# Gentoo Startup script for qmail's SMTP daemon (logging)
# $Header:
# /home/cvsroot/gentoo-x86/net-mail/qmail/files/run-qmailsmtpdlog,v 1.1
# 2003/11/30 11:32:06 robbat2 Exp $
SERVICE=smtp
source /var/qmail/bin/qmail-config-system \
exec /usr/bin/setuidgid qmaill /usr/bin/multilog \
${LOG_OPTS} ${LOG_DEST}2
- --- SNAP --
make it executable (chmod +x) and you'll have your log in
/var/log/qmail/qmail-smtpd2/current
If anyone has any suggestions as to what file permissions I could check
out, I'm all ears. Thanks again for all your help Josh.
Maybe try chmod g+s /var/vpopmail/bin/vchkpw
Matt
This message was sent using IMP, the Internet Messaging Program.
- --
Jens Ott
Leiter Operations
intergenia Webhosting AG
Daimlerstr. 9-11
50354 Hürth
Tel. : +49 2233 612 503
Fax : +49 2233 612 513
Mail : [EMAIL PROTECTED]
GPG-Fingerprint: D190 09C6 FCDF D0B4 3A44 FB6E 440E C024 7E27 ACCF
http://www.intergenia.de
Vorstand:
Andreas Niehaus - Frank Gross - Jochen Berger - Oliver Drifthaus
Dr. Stephan Göbel - Thomas Strohe
Aufsichtsratsvorsitz: Claudius Schmalschläger
Gerichtsstand: HRB Köln 58428 - Umsatzsteuer-ID: DE216740823
Bankverbindung: Sparkasse Waldkirchen
BLZ: 740 512 30 - Kto. Nr.: 919 85 65
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGUxkPRA7AJH4nrM8RAnJHAKCVmjqViYbsf9yiYsfpP9N7TUBSdwCgiEO3
kIL90NDLRTLWU+vJA/oR+Q8=
=gpXB
-END PGP SIGNATURE-
Re: [vchkpw] Autoresponder havoc
A bit delayed IMO but thanks none the less. I've been forwarding these messages to the address in the auto responder hoping he would fix it. On Apr 22, 2012, at 6:55 AM, Matt Brookings m...@inter7.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, our apologies that happened. It's all cleared up for those of you who put up with the mess! :) - -- /* Matt Brookings m...@inter7.com GnuPG Key 5F3258AD Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPlA3WAAoJEGgfLslfMlitRMgH/RR1QYnUb72YUtRlZll8Pw7A b0DGuoVWvG1SUMtGMNZjColbgcjqMxbh5+7+XGIKM/BxTJ6eLanoc8Hv14KKS2a0 jU8JE+VxglaTxQOj9VCKNekFZmo9bxO2YJfzT8uzp8pCieMmOqbZsGIGtI6rvqlz JaUiJ8paWrzKPkL7IeShZMo9VPxCuHXnvz5K16qHIbNHsv0Kzra6ULBk1nG7TT/w zDjjpfC4ZE48tRsHEuooV5vIUABQR02icv52m8Ds97XqYUrWH5dkZf7+CTbez1RH qzfJmNQCCbd4qOXOr/OnW7fhoTkykc2ItYh6gbhhrXPN9IEuPXBK1g8DBiwz9F4= =AI4n -END PGP SIGNATURE- !DSPAM:4f940e4d34841603525635!
Re: [vchkpw] Autoresponder havoc
You guys don't work on Saturday? This started happening early yesterday evening. On Apr 22, 2012, at 6:58 AM, Matt Brookings m...@inter7.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/22/2012 08:59 AM, Matt Kane wrote: A bit delayed IMO but thanks none the less. I've been forwarding these messages to the address in the auto responder hoping he would fix it. Well, some of us aren't monitoring our email early on a Sunday morning :) - -- /* Matt Brookings m...@inter7.com GnuPG Key 5F3258AD Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPlA6NAAoJEGgfLslfMlitn54H/2nM2192ZQJiCV2Syb/zBpvt BFKL8L3Xy8Ptr15bvfPLD3pKZAaqJPzY1Yvd6Jv8zYWgEg/4hRBrg4D7jmueLJB5 Aoadz4CHTXjgew1e4Tj17TdSAfFrhhFRKxfykFMcJyToBHl27+C8Bb3ARKRxpuOP 8PtMToRfpuDL3Z3G/VhvN1xudrWMJJWTTS1d4zexqsbJpxfCsTNQkFXMSqy7L7nI CRn9rsRtzRUBg7FAUHQK6rM5B2616qNJ7Eeq1liEc7a2hfHEQKvlEAvFKjFi6aze PZeeAnmMLlTDPnzl/DyUP2ncmDp2r/Xq38AggK2LlF7rcA+Xz2OJYf8zAsYhXjw= =NM1h -END PGP SIGNATURE- !DSPAM:4f940f1734849148518935!
Re: [vchkpw] Autoresponder havoc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 4/22/2012 7:07 AM, Matt Brookings wrote: On 04/22/2012 09:02 AM, Matt Kane wrote: You guys don't work on Saturday? This started happening early yesterday evening. I'm not sure if you're joking or not! We do not work weekends unless emergency work is requested. I'm just harassing you, the auto responders on the list are seriously annoying. Thanks for taking care of it at all. Matt -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPlBDrAAoJEGESrvan7TCjm18H/1In6M0XfEg6RiSldtDR0XQ5 jRttZVOmkiFObMvg0yyYd+R4iiJ49rAOoejWz4r3Tiqub5JSpQTccATe1VZcaxkq fN2/SPtXX2iN9c/GYJEytr27aQxU/iAqwJo0R03dmTiz4RVPAzr48vSxJkzHUV3p E/TNcz0GaywDOpcYJwtUY0AR+uJwy4QDAlbwnXRAxx9gXXrE/QpSQqksidj1cFmK B25HGYUF2UZRWZCCkLICJxT9vtl69IdVB4TSpzl+x2QzJHutousbm4KpMwQp6MuZ ThLMNIsbHckIfA3s9rXUewHE5MAUV+oy3jug4zr385JC1c4m8qw1YORTlKa/W50= =1mBI -END PGP SIGNATURE- !DSPAM:4f9410e934841868619884!
