RE: [vchkpw] vpopmail clustering examples

[Andrea Cerrito]

-BEGIN PGP SIGNED MESSAGE-

We're using LVS to do load balancing.
Instead of NFS, we're using Opengfs. We have two mail servers and two
mysql servers. The sql servers are both r/w in a two-way replica.

As previously stated, the queue MUST BE local.

Buon lavoro

Andrea Cerrito
IT Manager

+39.  0744.  5441. 1
+39.  348.   4912. 581

www.centromultimediale.tv
Vincitore del 35° Smau Industrial Design
ICOGRADA Excellence Award 2002
www.centromultimediale.it
www.etad.it

== /history
Due giovani e uno meno giovane si trovano proiettati a causa di una
serie di fatalita' in un mondo parallelo dove non esistono le leggi
del business ma solo follia e dolore.

> -Original Message-
> From: Scott Helms [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, December 31, 2002 2:28 PM
> To: John Runnels; Duane Wylie; [EMAIL PROTECTED]
> Subject: Re: [vchkpw] vpopmail clustering examples
>
>
> Duane,
>
>
> No the queues run on local disk rather than on the NFS.
>
> Scott
> - Original Message -
> From: "John Runnels" <[EMAIL PROTECTED]>
> To: "Scott Helms" <[EMAIL PROTECTED]>; "Duane Wylie"
> <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Monday, December 30, 2002 4:38 PM
> Subject: Re: [vchkpw] vpopmail clustering examples
>
>
> > Scott do you also mount the queue dir's from the netapp ???
> >
> >
> > - Original Message -
> > From: "Scott Helms" <[EMAIL PROTECTED]>
> > To: "Duane Wylie" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Monday, December 30, 2002 11:16 AM
> > Subject: Re: [vchkpw] vpopmail clustering examples
> >
> >
> > > Duane,
> > >
> > > We use Alteons to do the load balancing and a pair of
> NetApp F810c's
> > for
> > > the HA NFS system.  I won't include any details since its
> easy enough to
> > get
> > > the data from the guys at Netapp.  We run 7 qmail/vpopmail
> servers with
> 3
> > > mysql servers (one master and 2 slaves that are read only).
> > >
> > > Scott
> > > - Original Message -
> > > From: "Duane Wylie" <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Monday, December 30, 2002 1:41 PM
> > > Subject: RE: [vchkpw] vpopmail clustering examples
> > >
> > >
> > > > Sorry 'bout sending that last message as 'Super-User'...
> > > >
> > > > We're using F5's load balancer and it's been working great
> for us.  It
> > has
> > > > similar features as the Foundry switch you mentioned (and
> the service
> > > > monitoring is great!).
> > > >
> > > > The main worry I have at this point is the NFS server.  Even
> > > > though
> the
> > > file
> > > > system in question is RAID 5, and is in a separate disk
> > > > enclosure, I
> > don't
> > > > like having that one NFS server as a single point of failure.
> > > >
> > > > Is anyone using some sort of HA storage solution?  If so,
> > > > care to
> share
> > > > details?
> > > >
> > > > Thanks,
> > > > Duane Wylie
> > > >
> > > > -Original Message-
> > > > From: Andre Fortin [mailto:[EMAIL PROTECTED]]
> > > > Sent: Monday, December 30, 2002 11:53 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: RE: [vchkpw] vpopmail clustering examples
> > > >
> > > >
> > > > We have a very similar set up.  We have a third machine as
> > > > the MySQL
> > > master
> > > > which doesnt directly interact as a mail server, but it makes
> > > > the
> MySQL
> > > > database triple-redundant without sacrificing performance.
> > > >
> > > > For load balancing/redundancy, we are using Foundry
> > > > (http://www.foundrynetworks.com/) switches with the SLB
> > > > (Server Load Balancing) code.  Very powerful; it not only
> > > > detects if the
> server is
> > > > running, or listening to port 25/110, but it actually
> understands SMTP
> > and
> > > > POP3 and will make sure the SMTP and POP3 servers are
> > > > responding
> > properly
> > > as
> > > > part of its 'heartbeat' tests.. So, for example, if you had
> a machine
> > that
> > > > had a problem and would still listen to port 25 but couldnt
> > > > actually
> > > answer
> > > > with a '220', it would be treated as 'offline' instead of
> opening dead
> > > > connections for clients..  It also allows you to load
> balance between
> X
> > > > number of servers rather than just failing over in 'worst
> > > > case
> scenario'
> > > > situations..
> > > >
> > > > Andre
> > > >
> > > >
> > > >
> > >
> > >
> > >
> >
> >
>
>

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBPhGtw/o9HK4+yTI3AQGwlgf+OitLqMTtv/2Ru4IB/pxqVQMQdMoFFiNm
b5sRF/P0FVsyQf3kOQij97HLWAXIQmWYYPVb5lzdxmF39JBpbLfTofXwSVJkYUlL
ygX8cYhYsqIVuR2iE0UYF2JmzSy2zqn8pGHPhJrizkhGw+EgtschHAOeAYO0LGwG
pgNvNHUondKhm28cYZa0tSskgfyjA4YHmhEX/rUBDax9PWiuQdngsjHZQ1/bOD1I
NVr0YbguL6igB0AGBGWtH9yNT8rcQfkFpa3UHcy0oPSda/lueVOOeG54kKf6IEBy
UN+UwxwOaXGl3YhUy19G5rkyGMBv49D/iefycR8Ri433T7qW8WVFUw==
=OOIN
-END PGP SIGNATURE-

RE: [vchkpw] POP3 authentication error for default domain (userid without @domain trails)

[Andrea Cerrito]

> Dec  3 18:29:28 mail vpopmail[8761]: vchkpw: vpopmail user not found
> [EMAIL PROTECTED],:192.168.1.108
---^
> Dec  3 18:29:41 mail vpopmail[8764]: vchkpw: login success
> [EMAIL PROTECTED]:192.168.1.108
---

> default domain = testlah.com, --enable-default-domain=testlah.com,
   ---^ ---^

Hope it helps.

Buon lavoro

Andrea Cerrito
IT Manager

+39.  0744.  5441. 1
+39.  348.   4912. 581

www.centromultimediale.tv
Vincitore del 35° Smau Industrial Design
ICOGRADA Excellence Award 2002
www.centromultimediale.it
www.etad.it

== /history
Due giovani e uno meno giovane si trovano proiettati a causa di una serie di
fatalita' in un mondo parallelo dove non esistono le leggi del business ma
solo follia e dolore.

RE: [vchkpw] Installation w/ MySQL

[Andrea Cerrito]

And remember to flush.

> FLUSH PRIVILEGES;

Buon lavoro

Andrea Cerrito
IT Manager

+39.  0744.  5441. 1
+39.  348.   4912. 581

www.centromultimediale.tv
Vincitore del 35° Smau Industrial Design
ICOGRADA Excellence Award 2002
www.centromultimediale.it
www.etad.it

== /history
Due giovani e uno meno giovane si trovano proiettati a causa di una serie di
fatalita' in un mondo parallelo dove non esistono le leggi del business ma
solo follia e dolore.

> -Original Message-
> From: Marco [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, November 19, 2002 4:42 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [vchkpw] Installation w/ MySQL
>
>
> Oops, I meant the mysql *user* doesn't have permissions.  Not the tables.
>
> - Original Message -
> From: "Marco" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, November 19, 2002 9:26 AM
> Subject: Re: [vchkpw] Installation w/ MySQL
>
>
> > Try logging into mysql as the user and set them up manually.
> I'm guessing
> > that the mysql tables you set up don't have the right permissions.  As
> root
> > mysql user try:
> > GRANT ALL PRIVILEGES ON vpopmail.* to user@localhost identified by
> > 'password'
> >
> > Hope this helps.
> >
> > Marco
> > - Original Message -
> > From: "Willy Scalioni (WBOX)" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, November 19, 2002 8:10 AM
> > Subject: [vchkpw] Installation w/ MySQL
> >
> >
> > > Hi,
> > >
> > > I had a problem installing vpopmail with MySQL. The vmysql.h file is
> > > already configured, VPOPMAIL was compiled and installed without error
> > > messages (a lot of times) but the MySQL tables were not created.
> > >
> > > Versions:
> > > RedHat 7.2
> > > MySQL 3.23.41
> > > VPOPMAIL 5.2 (not 5.2.1)
> > >
> > > Thanks,
> > > Willy Scalioni
> > >
> > >
> > >
> > >
> >
> >
> >
>
>
>

RE: [vchkpw] "-ERR aack, child crashed"

[Andrea Cerrito]

> From: Davide Salerno [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, November 19, 2002 1:26 PM
> To: [EMAIL PROTECTED]
> Subject: [vchkpw] "-ERR aack, child crashed"
>
>
>
> Hello all,
> I have a trouble with qmail-vpopmail-ldap on a Linux RedHat 7.3 box. My
> Ldap server is up and running. I can add a user and a domain with
> vpopmail over my Ldap server. But When i try to autenticate via telnet
> pop3, it fails with the error:
>
>  "-ERR aack, child crashed"

I think it might be useful a strace of the process.

Buon lavoro

Andrea Cerrito
IT Manager

+39.  0744.  5441. 1
+39.  348.   4912. 581

www.centromultimediale.tv
Vincitore del 35? Smau Industrial Design
ICOGRADA Excellence Award 2002
www.centromultimediale.it
www.etad.it

== /history
Due giovani e uno meno giovane si trovano proiettati a causa di una serie di
fatalita' in un mondo parallelo dove non esistono le leggi del business ma
solo follia e dolore.

RE: [vchkpw] Wrapping Services

[Andrea Cerrito]

-BEGIN PGP SIGNED MESSAGE-

You can do it on user-basis.

# ./vmoduser -h
vmoduser: usage: [options] email_addr or domain ( for the entire
domain )
options: -v ( display the vpopmail version number )
 -n ( don't rebuild the vpasswd.cdb file )
 -q quota ( set quota )
 -c comment (set the comment/gecos field )
 -e encrypted_passwd (set the password field )
 -C clear_text_passwd (set the password field )
the following options are bit flags in the gid int field
 -u ( set no dialup flag )
 -d ( set no password changing flag )
 -p ( set no pop access flag )
 -w ( set no web mail access flag )
 -i ( set no imap access flag )
 -b ( set bounce mail flag )
 -r ( set no external relay flag )
 -a ( grant qmailadmin administrator privileges)
 -0 ( set V_USER0 flag )
 -1 ( set V_USER1 flag )
 -2 ( set V_USER2 flag )
 -3 ( set V_USER3 flag )
 -x ( clear all flags )

Andrea Cerrito
IT Manager

+39.  0744.  5441. 1
+39.  348.   4912. 581

www.centromultimediale.tv
Vincitore del 35° Smau Industrial Design
ICOGRADA Excellence Award 2002
www.centromultimediale.it
www.etad.it

== /history
Due giovani e uno meno giovane si trovano proiettati a causa di una
serie di fatalita' in un mondo parallelo dove non esistono le leggi
del business ma solo follia e dolore.

> -Original Message-
> From: Alessandro A. [mailto:Alessandro@;CSP.it]
> Sent: Thursday, November 07, 2002 12:15 PM
> To: [EMAIL PROTECTED]
> Subject: [vchkpw] Wrapping Services
>
>
> Hello,
> I've installed Courier-IMAP+vpopmail 5.3.9+Qmail 1.03 in my email
> server and
> it's working fine.
> There is a method for "wrapping" POP3 and IMAP services? I would
> limit access only for some machines and/or networks.
>
> Thanks in advance!
>
> Alessandro Avidano
>
>

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBPcpc/Po9HK4+yTI3AQEIvgf9F5XT51OeFL/tV5O7cMjPV8YV+R8NK4mN
uaK3UVJoWXPNPny97mAEUkYBti9vGvmJin577SK/FBiap2ZaOFbpCxNgRWZBj+Qp
iOuP2NcpVcxU5OndeWd+3XXp1lFSM92sZwiq2YNtU7rSn/ZNaBwDlI34ylTMwicb
wMMNHc+ry8uHZy+w6niDSjTgNlCC6nkwhQHiLCvhujG1/W66QvHT/D2i0n1Z+EAL
l0QLRNp9bRjQ+twIx9Rl09FmkYQGPDWr8IyWPUfToB8dA18RkYZ3xe1Pfz2LB4b6
Cxo38f9vj955Xnqina8FP9/ZT6cTdAr3+fPCL7yhONG4DC3a5ELO7g==
=t4bl
-END PGP SIGNATURE-

RE: [vchkpw] differences mysql user-table in vpopmail versions 4.9.10 and 5.2.1?

[Andrea Cerrito]

-BEGIN PGP SIGNED MESSAGE-

Search the new vpopmail doc in the tar.gz: you should find a doc to
upgrade from old mysql table to 5.2 one.
Anyway, if my mind isn't corrupted :), the only change is the new
column pw_clear_password.

Andrea Cerrito
IT Manager

+39.  0744.  5441. 1
+39.  348.   4912. 581

www.centromultimediale.tv
Vincitore del 35° Smau Industrial Design
ICOGRADA Excellence Award 2002
www.centromultimediale.it
www.etad.it

== /history
Due giovani e uno meno giovane si trovano proiettati a causa di una
serie di fatalita' in un mondo parallelo dove non esistono le leggi
del business ma solo follia e dolore.

> -Original Message-
> From: Michael Bowe [mailto:mbowe@;pipeline.com.au]
> Sent: Friday, November 01, 2002 12:38 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [vchkpw] differences mysql user-table in vpopmail
> versions 4.9.10 and 5.2.1?
>
>
> You should be able to compare the table layouts by looking in the
> vmysql.h file for both versions.
>
> I am sure there have been some changes made along the way.
>
> Michael.
>
>
> - Original Message -
> From: "Jan Reilink" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Friday, November 01, 2002 10:12 PM
> Subject: [vchkpw] differences mysql user-table in vpopmail versions
> 4.9.10 and 5.2.1?
>
>
> > [Let's hope this is the correct mailinglist, I'm new here]
> >
> > Unable to find an answer on the Net, I'm trying here. Is there a
> > difference in the mysql user-table between the vpopmail versions
> > 4.9.10 and 5.2.1?
> >
> > We are trying to install a new mailserver running qmail and
> > vpopmail and doing so we tried to copy the database 1 on 1 to the
> > new server. After we did this and tried to telnet to
> > localhost:110 we got a table structure error[1].
> >
> > We have approx. 10,000 virtual domains with a possible 100,000
> > users (10 POP accounts per domain), so you can understand our
> > problem :) Did anyone else encounter this problem? If yes, how
> > did you/he/she solve this?
> > I noticed there is a 17 pages Changelog between these versions,
> > so it wouldn't suprise me if there has changed something in the
> > databse :)
> >
> > The domain dsinet.be (my test domain :) is already running on the
> > new mailserver, telnetting to it gives me this:
> > telnet pop.dsinet.be 110
> > user @dsinet.be
> > +OK
> > pass 
> > vmysql: sql error[3]: Unknown column 'pw_clear_passwd' in
> > 'field list'
> > -ERR authorization failed
> > Connection closed by foreign host.
> >
> > Thanks in advance for any pointers/urls/help.
> >
> > --
> > Best regards,
> >
> > Jan reilink
> > VEVIDA Services
> >
> >
> >
>
>

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBPcLbW/o9HK4+yTI3AQFR4Qf9G1MDEoYMgXHYvTezLknr8ga95Gbq7gLL
TEE7YpTzgcDunOByU0cgnLW2z8CXcwRNeF9dbYSVoVPV7XhStRekFyZi0DRSABvq
DMaWXo7orcf3ljuarFDDUm6yDzINC2jbcQnDjrsEHkndxN0qBpK4mMYAmpCqjEMe
nMjC+hHCux+4zmsyW+4/ZmbuGuqLzp6Ywy36TzD6b/XEiXSJhWVYIZzoJgWshdc2
3Nar0XaXfUb9sJp1hDvZ3U1UYzx3eGe2eWyw7gy6JVwXa5j4nIroAlVVLp+QuXKb
JGMlrt0z2Ko+58uAqvwT1XZsPwYi9EIcRUJ62aA+zEX4/vKhtPd5hA==
=5qpn
-END PGP SIGNATURE-

RE: [vchkpw] Vpopmail locking problem on NFS filesystem

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

I think that for a NFS solution the SQL backend is a must-have.
Regards,

Andrea Cerrito
IT Manager

+39.  0744.  5441. 1
+39.  348.   4912. 581

www.centromultimediale.tv
www.centromultimediale.it
www.etad.it 

== /history
Due giovani e uno meno giovane si trovano proiettati a causa di una
serie di fatalita' in un mondo parallelo dove non esistono le leggi
del business ma solo follia e dolore.

> -Original Message-
> From: Steve Fulton [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, October 09, 2002 5:44 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [vchkpw] Vpopmail locking problem on NFS filesystem
> 
> 
> At 10:42 09/10/2002 +0200, you wrote
> 
> Which directories did you mount as NFS?  Are you using CDB files 
> or an SQL 
> backend for authentication?
> 
> -- Steve
> 
> >Hi,
> >
> >I'm trying to share maildir directories with NFS from a backend
> >file  server to distribute load on a couple frontend pop/smtp
> >boxes. 
> In my first 
> >tests, everything works ok at the moment with vpopmail,
> >qmail-pop3d and  courier-imapd managing remotely exported
> >mailboxes, but I get a  nfs-related locking error when trying to
> >add/edit user accounts,  
> changinng 
> >passwords, quotas, etc.
> >
> >vpopmail tools complaint with non-NFS related error messages, but
> >when  running them thru strace, I find a timeout while trying to
> >lock  
> vusers cdb 
> >files. NFS client boxes are linux, server is a netapp.com filer, 
> nfs mount 
> >options are the defaults (got error when trying to switch to
> >tcp-based  nfs), and lockd service is enabled.
> >
> >I know this is not directly related to vpopmail, but what nfs 
> settings are 
> >appropiate for this purpose?
> >
> >Thnx
> >

-BEGIN PGP SIGNATURE-
Version: PGP 7.0.4

iQEVAwUBPaRaD/o9HK4+yTI3AQEaFQf+NuI4OOkPOt44PSPZVtLuqE9TjvfqgNk/
ouqXhhbUCiTzJmR/YIp0XQUpaVS9QXFtUKSl7bj1FlrV1G9Gn35D7FHPxrho8L3i
2GnxFS6OOchkHKIzE8bn6tMkZQIwAFnUSRXRi6yZYnjhnYlaRj03XsBZsGhu82g4
7DT1t/MnQarKAq+McGrqrXFG6om4c/gu/qo49oWpJt1kRWDsIPab8XWMhxs0oDa7
9Jr9mnmVBPyXPkdjZMY5ANpCvttHsrKvJnUuOcXL/y2OTD/OYyK0hfM0FzNpV6HA
9YaA5oYKYF1R/DXiygDE3kur/mt9dao/IvuyhKd13JcyhDgJiHGaQA==
=YoAH
-END PGP SIGNATURE-

Re: Info about MicrosoftSQL

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

> *grin*  You're expecting not to get flamed?  ;)

Eh eh eh... :)

>  Well, to my knowledge no
> one has written a module like that.  Umm...I suppose if you could
> possibly write an ODBC module? 

I'll love it!

> Obviously my knowledge of M$SQL is limited 
> (read: non
> existant ;)

Me too

> but all you really need is a way of opening a connection and
> being able to read and write data to the database.

Yep.

>  Check the list
> archives...I think I remember a message about someone on here who 
> wanted to
> do something similar to you...Not sure though...

Mmmh... unfortunately not found! I searched through the archive but
nothing... :(

> it's 7AM here and 
> I'm out of
> coffee...

eh eh eh thanks again
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

-BEGIN PGP SIGNATURE-
Version: PGP 7.0.4

iQEVAwUBO9A9nvo9HK4+yTI3AQEBEwf/fkL4qysjrQ2drWP1rxXIZodYpCzPICZT
pPFItqgALJXb9G3CZ2VGKFH9+1YbQMhg96sqpihrpPyaz37tzYKik5q14OLIqmD4
rpvHil7q13nezsfhPVsig9D0RbZRa+It/44D9rwIeUer+d9T7WNgnnPsO0z9ozmi
iJ40zog7GlrBgd1FUwLK59JIKUJcmwv9jYZ/YfLvgnDVXGZKk+9Yzpioj3yVXAyk
lAOmbNu6wZQZCTe5PrYzzx24GeqdyvM+1T7934iqSGW9i2pT1xr3COvhLbT04njC
8k5g5HCmr/RKx6DyBUtdkw6Ieimnki6LQ3Rel/iXIwxL0uqAdLU8vQ==
=9Yfo
-END PGP SIGNATURE-

Info about MicrosoftSQL

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

Hi to all,

don't flame me for asking this silly question... :) but does exist a
module / patch to use a MS SQL server as authentication backend for
vpopmail? Something like mySQL one...

Thank you
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

-BEGIN PGP SIGNATURE-
Version: PGP 7.0.4

iQEVAwUBO8/jw/o9HK4+yTI3AQG0FAgAqcTBHnLcFWNWBYsV8EiarwG6UzxT84/q
LGpItlncle9iTv3dL4P/8NTaaeCPTiTw7kxtdFB0B2SBtuAfA6gAFsbZVbcAyf3a
wrN87M7uT36UwQvPbTP3KvVX7BMMlvRGjWgAMXWFS8m3fIjvtWIyQ1o7T9Jy3LNS
CyqEUi60FHjYEaqJcRVgliN9Ndt9ByA+5oopmQlJMMj4DKiPukFIxYHcat9uuTjW
7cU4MOtdRQJ4BNQihyBBy15SA5SjuFA1jkjm58d6JctNceoJbE09QLyJhT2CPSEr
UV+PUhXUCJjbaofjv8Z0f5Svg3lizduFCekJW8x2ciLkakIgs2SfTg==
=T4aP
-END PGP SIGNATURE-

R: relay

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

> Hi,
> I installed qmail and vpopmail on a Suse linuxbox, and I added a
> domain 'test.it' and a user 'utente'.
> I made a corresponding account 'utente' on an Outlook Express 
> client, and I
> added its IP address in ~vpopmail/etc/tcp.smtp to allow relaying
> from that IP. but when I tried to send a mail to a user in another
> domain (not belonging to this server), the server rejected the
> message because the domain "isn't in my list of allowed rcpthosts
> (#5.7.1)".
> Someone can tell me why?

Ciao Franco, probably because you didn't run tcprules to generate the
appropriate CDB, or probably because your run script is broken about
the tcp.smtp.

> Another problem:
> ~vpopmail/etc/tcp.smtp allows relay from selected IP addresses, not
> from a selected user '[EMAIL PROTECTED]'.
> If I travel with a laptop and I must change its IP address, I 
> cannot connect
> to my mailserver with my account on the Outlook Express client.
> Maybe I must configure the server adding all possible IP addresses
> in ~vpopmail/etc/tcp.smtp?

I think your better solution is to use smtp/after/pop, also called
roaming (read vpopmail docs to find how).
I hope it helps.
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBO6i/w/o9HK4+yTI3AQGi+Af/QOUsVkGRbHxvv7hzhTD76Yp4UVPBrKOy
1XQI3v7UYasYh1BSoH1iYrE/Fnpd6HJtRFUd/nouUlp87XsDV2SmJ41R+ltjesxx
eU1Rfhhk40ZrWruWHLAcy3yGlQ8SryOghY7izXlgWPXQJj3VrFB+aBo5716XNVxp
Q1Gcj8OcdfyTbW8b8OYeLhEBKJq9UUUIzcBTtB6wEIx/lBUA6jH9DXCfkHW4x3Py
2kvMSwDTcXH0IU5Ej/YlHzNlq9Hd0RC8h3RpMFFoIC0QcsZe7PzYvDg3DzrB+Lc4
ZLKHGYjvMvtkEDwldh3PWt3ZnSDku1vqB4yfc6naZNOw02SiigwooA==
=WTff
-END PGP SIGNATURE-

R: courier wants -lvpopmail

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

> echo $ac_n "checking for secured VPopmail Library""... $ac_c" 1>&6
> echo "configure:: checking for secured VPopmail Library" >&5
> # First we need to see if vpopmail is installed.
> if [ -d ~vpopmail ]
> then
>   if [ ! -r ~vpopmail/lib/libvpopmail.a ]
> then
>   echo "" 1>&6
>   echo "$ac_n""found...Please read VPopmail FAQ #??" 1>&6
> else
>   echo "" 1>&6
>   echo "$ac_n""unsecured...recommended to upgrade to latest
> vpopmail version

ERROR: if user made libvpopmail.a readable, then the configure will
say "unsecured... blah blah blah". Really, I don't know how to check
for the lib version, but I think that something like this it's a
little bit correct:

if [ -d ~vpopmail ]
then
  if [ ! -r ~vpopmail/lib/libvpopmail.a -a `$HOW_TO_CHECK_LIBVERSION`
]
then
  echo "" 1>&6
  echo "$ac_n""found...Please read VPopmail FAQ #??" 1>&6
else
if [ -r ~vpopmail/lib/libvpopmail.a -a `$HOW_TO_CHECK_LIBVERSION` ]
echo "" 1>&6
echo "$ac_n""found...ok, I can use libvpopmail.a" 1>&6
fi
if [ -r ~vpopmail/lib/libvpopmail.a -a ! `$HOW_TO_CHECK_LIBVERSION`
]
  then 
  echo "" 1>&6
  echo "$ac_n""found an old version... Please upgrade to VPopmail
5.xx" 1>&6
  fi
  fi
else
  echo "" 1>&6
  echo "$ac_n""not found... Please install VPopmail or check your
installation" 1>&6
fi

> Please keep all snickers to a minimum as this is my first attempt
> to play with the configure script...but this should be easilly
> fixable if it doesn't work.

:)
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> 
> -Original Message-
> From: Charlie Chrisman [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, September 10, 2001 9:35 AM
> To: 'Tren Blackburn'; 'Ken Jones'
> Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
> Subject: RE: courier wants -lvpopmail
> 
> 
> Open source at its best!!!  I love it.
> 
> Just thought I'd share my awe.
> 
> ; )
> 
> charlie
> 
> -Original Message-
> From: Tren Blackburn [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, September 10, 2001 10:50 AM
> To: 'Ken Jones'
> Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
> Subject: RE: courier wants -lvpopmail
> 
> 
> *eek*  If that's the case let me see if I can build a proper stanza
> for the configure.in.  =)  That was just an example, didn't mean
> for you to use it.  *grin*
> 
> Tren.
> 
> -Original Message-
> From: Ken Jones [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, September 10, 2001 8:34 AM
> To: Tren Blackburn
> Cc: 'Andrea Cerrito'; [EMAIL PROTECTED]
> Subject: RE: courier wants -lvpopmail
> 
> 
> Sounds like we already have a consensus.
> 
> I'll email MrSam and see if we can get your test code
> into the courier-imap configure.in
> 
> Ken
> 
> On Mon, 2001-09-10 at 09:26, Tren Blackburn wrote:
> > Hi Andrea;
> > 
> > I think that's a good suggestion.  Have the configure script
> > check for 
> 
> > the permissions of ~vpopmail/lib/libvpopmail.a
> > 
> >  if [ ! -r ~vpopmail/lib/libvpopmail.a ]
> >  then
> >echo "You have a secured version of VPOPMail.  Please read
> > VPOPMail 
> 
> > FAQ #??"
> >break
> >  else
> >continue
> >  fi
> > 
> > But I think that's FAR preferable to changing the perms or having
> > *JUST* a FAQ item.
> > 
> > Cheers,
> > 
> > Tren.
> > 
> > -Original Message-
> > From: Andrea Cerrito [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, September 10, 2001 8:11 AM
> > To: Ken Jones
> > Cc: [EMAIL PROTECTED]
> > Subject: R: courier wants -lvpopmail
> > 
> > 
> >  
> > -BEGIN PGP SIGNED MESSAGE-
> > 
> > > If we do 1) we won't get these couerier-imap questions, but
> > > security 
> 
> > > won't be as tight. If we do 2) we will still get emails like
> > > this.  
> > > 
> > > I thought changing the permissions on vpopmail/lib directory
> > > would cause problems, that's why I was against it. But it seems
> > > security 
> is 
> >

R: courier wants -lvpopmail

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

> If we do 1) we won't get these couerier-imap questions, but
> security won't be as tight. If we do 2) we will still get
> emails like this.
> 
> I thought changing the permissions on vpopmail/lib directory
> would cause problems, that's why I was against it. But it
> seems security is of higher concern.

Hi Ken,
I think security on frontend servers (backend too) is more important
that compile time ;) because:

- - if courier needs lvpopmail access just during compile time, doing a
chmod o+r before compile and removing it at the end, it isn't a very
hard work to do;
- - usually, you can compile apps on test machines and port them just
compiled, so I really don't see the needs to remove a tightened
security;
- - why not change courier configure? something like

Checking vpopmail... *** Warning! Found vpopmail 5.x: you have to
temporary change permissions on [vpopmail/lib] as root!!!

Anyway, this is IMHO. ;) 
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBO5zKB/o9HK4+yTI3AQE9AAgAgo2gCzD8fJcIcaf65dlkxFk4u/72B2QU
pL6iqq++blMqo/qeDuJ2/fwLn1ttza3lReH+Hz5S2zha0xqX06MNo+tlJ9tYtmGy
y3GpVVs6mqLmf+QBDf1aU/wJBhO4iGi/P/WHLXmJpcUBc4Saw2dbxWay1OEBEHK3
ZnPfrVFCCQFqtbt+37YPvmZpsVQaSgDgFiTa/6L2zwzbyTb5G48JUi1J0KU6ngbd
uFLYMbbhT7iwpfR6icevCN+zb2qxdGLWNMneWGr6QSNab4ISgnuScnuEXx2wPJH8
ZjdCB4IfI/6y2cnsOFZ8UB/ixlx3qBIueYUmvu4a7CVHKwvqlWRgCQ==
=5whu
-END PGP SIGNATURE-

R: Half Topic question : stunnel and vpopmail

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

This is my setup:

exec /usr/bin/env - PATH="/var/qmail/bin:$PATH" \
/usr/local/bin/tcpserver -v -c 50 -H -P -R -l hostname ip
port /usr/local/stunnel/sbin/stunnel -p /var/qmail/control/spop3.pem
- -N spop3 -f -l /var/qmail/bin/qmail-popup /var/qmail/bin/qmail-popup
hostname /home/vpopmail/bin/vchkpw /var/qmail/bin/qmail-pop3d Maildir
2>&1

Hope it helps.
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> -Messaggio originale-
> Da: Florent [mailto:[EMAIL PROTECTED]]
> Inviato: venerdi 31 agosto 2001 11.45
> A: [EMAIL PROTECTED]
> Oggetto: Half Topic question : stunnel and vpopmail
> 
> 
> Hi,
> 
> I'm actually playing with stunnel to provide pop3-ssl (pop3s) for 
> my distant users.
> 
> I face problems with the following scripts:
> 
> 1st : stunnel -T -d pop3s -l /var/qmail/bin/qmail-popup 
> --qmail-popup my.box.my.domain /home/vpopmail/bin/vchkpw 
> /var/qmail/bin/qmail-pop3d Maildir/
> 
> -> The pop3s service works but vpopmail don't get any IP for the 
> open-smtp feature : "vpopmail[10333]: vchkpw login xxx@x:"
> 
> 2nd : stunnel -d pop3s -r pop3
> and qmail-popup started with tcpserver
> 
> -> vpopmail gets the local IP adress.
> 
> In both cases, the distant user won't be able to have the server 
> relaying is mails.
> And even more, if I want to provide the smtp-ssl (ssmtp) feature 
> to those users :  stunnel -d ssmtp -r smtp
> I will have my server getting an openrelay through ssmtp.
> 
> I have also tried to use the -T option of stunnel with stunnel 
> running on my linux Firewall but I got a strange error : 
> transparent bind : can't use the asked address.
> 
> 
> Anyone have a sample example of stunnel+vpopmail (+tcpserver??)  ?
> 
> 
> Florent

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBO49lLPo9HK4+yTI3AQFOXQf9GhojOeM12gqljXorYS04Ofj1B69M6xOO
iS4BQtCO+swiyQ2Z9rS9Reimwp45BcE6bm6qOKMRvI71HufplENyA9M/PFpY8vvd
hhqBG+ShJ0Sxf2XJRnPP25SkfaBcGcR2V7H6cJxzrmtLBQX+oARZYT+OktDnz+6I
7CbAVuPuFhfpa4iznqUoI+XwTMDc7/Uz/Q5kUPLDkxu0YdSteF3jlVR8snHNQHSc
zcP3bo41e4JXQMK0SPy9Aar5NRvXZ1n789Hz4H4g29awGhRgoBtgBL544hS1AAjd
ew0Pc8ej3IvSlnrgUGfX6zJgyZdzthbRnJptNfP7v7z/4ZwUMxfamA==
=8KKD
-END PGP SIGNATURE-

Re: attachment size limit

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

> Hello,
>  
> i have installed qmail + vpopmail + sqwebmail + qmailadmin;
> everything  works fine, but i noticed that a users cannot send out
> a messages with  an attachment over 2M. How can i tell qmail to
> accept until 5M outbound  messages?

Mmmhh. I don't like to send mail like this, but you are asking a lot
of faqs.
You can solve your problem searching, reading the faq, using man, and
running qmail-showctl too.

Please try to learn qmail before asking.

- --- solution
(1) http://www.google.com/search?q=qmail+limit+size&hl=it&lr=
...
http://www.ultraviolet.org/mail-archives/qmail.2000/15833.html

(2) http://www.lifewithqmail.org/lwq.html#config-files
...
databytes  0  qmail-smtpd  max number of bytes in message (0=no
limit)  
...

(3) man qmail-control
...
  databytes   0  qmail-smtpd
...

(4) qmail-showctl
...
databytes: SMTP DATA limit is 200 bytes.
...
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBO49kMvo9HK4+yTI3AQGG+AgAgdIpyOSIp0AA116DU1eT/1slPe7pH1uD
ijjWmQ6m5fJUmzlhl4AwsFqlMhnaCGf+0hYjRqEhWJYm5nzYyaxDwarY3M+zQJY7
wiOyLXd2yf4s4j5eJaNUaTSMOWmJuDTH7PPW6bUdGfYr7NR8IeTEgt1kLJfSd3y3
Aa2u2LFq9NA0kmjoEBybdk5lb/FHQBKC1B2SZtcxbioZJLEvNv+OFkb/Sxiu4tqV
M9lDMEOyHbr2U1ie9roKuZVAx8qmyIXg0VyD1vz5q6GAcIDHlKaPwBrPbFbQQhxw
bbxgFE6P3bEn5CLuyNzXDIhRG4ySuOp0Fw24u1D4ZdSrU8Fki7k4tA==
=uoaq
-END PGP SIGNATURE-

R: pop3s

[Andrea Cerrito]

 
-BEGIN PGP SIGNED MESSAGE-

What do you mean with pop3s? pop3-ssl?
If it is so, mine is running fine with stunnel.

:)
- ---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> -Messaggio originale-
> Da: Florent [mailto:[EMAIL PROTECTED]]
> Inviato: lunedi 27 agosto 2001 16.50
> A: [EMAIL PROTECTED]
> Oggetto: pop3s
> 
> 
> Hi,
> 
> Have anyone already built a pop3s solution with vpopmail?
> What is requeried on the client side for pop3s to work?
> 
> Florent

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQEVAwUBO4qAr/o9HK4+yTI3AQE2FAgAhqk/g0T8IP9EOtWc5mipf8pjKVoMReUD
7vXLr+G8kc6t2bb5amQnm9YUCmT6eNVihOSUTfpqGsECSHC/sD7jwFU7/yWkwNJM
B08XknbzhI1Liezd3XfIjEkP6BG3EngvuryT22sqU7ovDppXf6sYNDUgf7QCEYTZ
wWU+kqGjPlwOCVEJGW9udcmf6BMMw7tlrHOYeHmk5w/WR4jCcI9sf7lvHddOxjr5
XJRybnTxeKQXFJRzXKxPoX7fe9LtfPokd3+PPGGai9TFa2BcWFb8U6p8ntv6bn3p
1Qt373zGFLeMBZ1PJpOAlBNij08udOEkNypXh5mQPTz2p5q7HXHeSQ==
=ExrI
-END PGP SIGNATURE-

Re: clearopensmtp

[Andrea Cerrito]

> i compiled vpopmail w/ roaming users feature and at the end of
> compiling it
> suggest me to put this line into my crontab and run every 40 minutes, so i
> did.. it worked fine for some while and i dont know what happened now i
> found quite a few process running clearopensmtp.. and i'm confused..

Try to do an strace on it.
I mean,

# strace -f ~vpopmail/bin/clearopensmtp

and look what's happening.
Goodluck
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

Re: [sqwebmail] How can verify if attach file contain some virus?

[Andrea Cerrito]

> Currently in order to verify the received external mail via smtp
> I am using
> with succeeding qmail-scanner-queue
> (http://qmail-scanner.sourceforge.net) +
> Micro Antivirus Trend, but when a shipment happens from a local user or
> external user via sqwebmail, the control of encloses to you does
> not happen,
> in these cases qmail it uses qmail-local and not qmail-queue for the
> delivery of the messages.

I think you have to change your sendit.sh script, to force scanning before
injecting. I can't tell you an example, because I'm not using an antivir
solution, :( but I think it will really simple.

Something like:

/path/scan "$1"
if [ $? -eq 0 ]; then
exec /usr/local/qmail/bin/qmail-inject -f "$1"
else
'whatever you like'
fi

Hope it helps

(I'm italian too :)
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

Re: SqWebMail+vpopmail

[Andrea Cerrito]

> I've read like --with-authvchkpw is automatically included when
> configuring
> with --enable-webpass=vpopmail?

Don't know. Anyway, trying to force when you compile can't make problems :).

> Anyway, I also tried that without
> difference.
> Could it mean, that I have to explicitely _exclude_ all other
> authentification
> methods (--without-authpam, -passwd etc.) ?
>
> Thanks, Alexander.

Have a look into your authmodulelist: is there a "authvchkpw"?
Anyway, my configure was like:

./configure --enable-webpass=vpopmail --without-authpwd --without-authshadow
 --without-authpam --without-authuserdb --without-authldap --without-authdae
mon --with-vchkpw

And my authmodulelist is

[root@homer-b sqwebmail]# cat authmodulelist
authcustom authvchkpw
[root@homer-b sqwebmail]#

Hope it helps
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

Re: SqWebMail+vpopmail

[Andrea Cerrito]

> Hello,
> 
> Now how does SqWebMail find out where the vpopmail-password files 
> are located?

With the right authmodule.

> Which rights do SqWebMail's CGI-Script must have that it can read 
> the password
> file?

None specially.

> Are there any parameters besides --enable-webpass=vpopmail that 
> have to be set?

Yes, read the Install file about the authmodules.

> Is there anything in vpopmail-config that has to be reconfigured 
> for SqWebMail?

No.

You have to set the authmodule / compile, as stated in the INSTALL file.

* VPOPMAIL authentication
...
 * --without-module  -  explicitly  disable  an authentication module
   named  "module".  Example:  --without-authpam.  See below for more
   details. (read   Available authentication modules:)
...
 * --enable-webpass=vpopmail  -  use the vpopmail.a library to change
   passwords  (this will only work if the virtual userid used for the
   accounts also owns the vpopmail password database).
...
 * authvchkpw  -  this  module  is  compiled  by  default only if the
   vpopmail account is defined.

Hope it helps.
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

R: VPOPMAIL - LASTAUTH - DATE/TIME STAMP NOT RIGHT

[Andrea Cerrito]

I've the same problem. During pop login (4.10.28) the lastauth table wasn't
updated.
After user [EMAIL PROTECTED] login:

mysql> select * from lastauth;
+--+---+--+-
+
| user | domain| remote_ip| timestamp
|
+--+---+--+-
+
| test | test.com  | 10.10.32.151 | 2000-09-94 77:62:52 |
+--+---+--+-
+

And:

[root@test bin]# ./vuserinfo [EMAIL PROTECTED]
name:   test
passwd: xx
uid:0
gid:0
all services available
test
/coda/qmail/vpopmail/domains/test.com/test
15M
last auth:  Thu Jan  1 01:33:20 1970


But: looking at the db during auth session,

010710 16:52:439072 Connect [EMAIL PROTECTED] on vpopmail
   9072 Query   select pw_name, pw_passwd, pw_uid,
pw_gid, pw_gecos, pw_dir, pw_shell from vpopmail where pw_name = "test" and
pw_domain = "test.com"
   9072 Query   select ip_addr from relay
010710 16:52:449072 Quit

Where is the timestamp for the auth?
Did your patch solve this issue?

Thanks
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> -Messaggio originale-
> Da: Richard A. Secor [mailto:[EMAIL PROTECTED]]
> Inviato: martedì 10 luglio 2001 22.43
> A: Scott Ramshaw; [EMAIL PROTECTED]
> Oggetto: Re: VPOPMAIL - LASTAUTH - DATE/TIME STAMP NOT RIGHT
>
>
> Scott,
>
> This is an example of what is in my databaes in the lastauth table:
>
> +-+---+-+--+
> | user| domain| remote_ip | timestamp
> |
> +-+---+-+--+
> | test | test.com  | 192.168.1.1 | 2001-07-10 16:44:00 |
> +-+---+-+--+
>
> This is all in the development copies of vpopmail.
>
> -Richard A. Secor
> [EMAIL PROTECTED]
> Sequential Logic
>
> - Original Message -
> From: "Scott Ramshaw" <[EMAIL PROTECTED]>
> To: "Richard A. Secor" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Tuesday, July 10, 2001 15:33
> Subject: Re: VPOPMAIL - LASTAUTH - DATE/TIME STAMP NOT RIGHT
>
>
> > The vpopmail FAQ implies this is only for POP logins, does it really log
> ANY
> > vpopmail authentication or is it really just for POP?  And I
> assume we are
> > talking about the --enable-auth-logging=y  from section 27 on the FAQ of
> > vpopmail 4.9.10? Or are you talking about a seperate feature?  I don't
> have
> > any lastauth table but I have upgraded from earlier vpopmail
> versions and
> > not installed fresh.
> >
> > I would like this to disable accounts that haven't been used in a long
> time.
> > I also don' have a vdeloldusers bin or a .c in source, is this off some
> > patch?
> >
> > - Original Message -
> > From: "Richard A. Secor" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, July 10, 2001 2:47 PM
> > Subject: Re: VPOPMAIL - LASTAUTH - DATE/TIME STAMP NOT RIGHT
> >
> >
> > > Also, had to change vdeloldusers.c.
> > > Around lines: 92-94
> > >
> > > snprintf(SqlBuf, MAX_BUFF,
> > > "select user,domain from lastauth where timestamp <
> > > 'FROM_UNIXTIME(%lu)'",
> > >nowt);
> > >
> > > -Richard A. Secor
> > >  [EMAIL PROTECTED]
> > >  Sequential Logic
> > >
> > > - Original Message -
> > > From: "Richard A. Secor" <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Tuesday, July 10, 2001 14:42
> > > Subject: VPOPMAIL - LASTAUTH - DATE/TIME STAMP NOT RIGHT
> > >
> > >
> > > > I was sick of having the wrong Date/Time stamps in my lastauth table
> so
> > > > here's the fix:
> > > >
> > > > File: vmysql.c
> > > > Around lines: 1046-1048
> > > > Note: I just added:
> > > >   FROM_UNIXTIME( )
> > > >
> > > > snprintf( SqlBufUpdate, SQL_BUF_SIZE,
> > > > "replace into lastauth set user='%s', domain='%s', \
> > > > remote_ip='%s', timestamp=FROM_UNIXTIME(%lu)", user,
> domain, remoteip,
> > > > time(NUL
> > > > L));
> > > >
> > > > Richard A. Secor
> > > > [EMAIL PROTECTED]
> > > > Sequential Logic
> > > >
> > > >
> > >
> > >
> >
> >
>
>

R: Deferral on database failure

[Andrea Cerrito]

I agree with Ken.
What are the needs for a cdb file when you have a replicated mysql db?
About speed, if the db is very large, I don't think that a cdb file can be
faster than a mysql lookup.

About replicated db, a question. I've looked at the code and I think it was
made for a read-write + read-only system, isn't it? If it is so, why?

I mean, mySQL replication can be applied in an two way read/write system (or
read/write + n * read-only system).
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> -Messaggio originale-
> Da: inter7 [mailto:inter7]Per conto di Ken Jones
> Inviato: lunedi 9 luglio 2001 16.57
> A: [EMAIL PROTECTED]
> Oggetto: Re: Deferral on database failure
>
>
>
> Sounds like a disaster waiting to happen.
> Ever try to build a replicated database (which is kinda what
> you are talking about). The things you have to watch for
> are almost endless.

R: password encryption

[Andrea Cerrito]

In last dev releases you can choose to use or not to use mysql clear
passwords.
Hope it helps.
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> -Messaggio originale-
> Da: P. Schaub [mailto:[EMAIL PROTECTED]]
> Inviato: sabato 7 luglio 2001 0.21
> A:
> Oggetto: password encryption
>
>
> I am using mysql for authentication and want to write
> a script which needs to work with the clear-text-password.
> How does vpopmail encrypt/decrypt its passwords ?

R: sqwebmail w/ encyption feature + vpopmail w/ mysql support

[Andrea Cerrito]

> nope.. didn't help:(

Well, you have to change:

LDFLAGS=" -L/where/are/your/mysql/lib -lmysqlclient" ./configure --blablabla

All on the same line. To find /where/are/your/mysql/lib try

# find / -name libmysqlclient.*

But: are mysql libs installed? Did you install mysql with rpm? If it is so,
did you install the mysql-dev?
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

R: sqwebmail w/ encyption feature + vpopmail w/ mysql support

[Andrea Cerrito]

Hope it helps: try

LDFLAGS=" -L/usr/local/mysql/lib/mysql -lmysqlclient"
./configure --blablabla
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

> -Messaggio originale-
> Da: KEnet Webmaster [mailto:[EMAIL PROTECTED]]
> Inviato: venerdì 6 luglio 2001 17.24
> A: Ken Jones; alexus
> Cc: [EMAIL PROTECTED]
> Oggetto: Re: sqwebmail w/ encyption feature + vpopmail w/ mysql support
>
>
> Oh, Just to note
>
> Im running SuSe Linux v 7.0 with Kernel 2.2.18smp

Re: Prob

[Andrea Cerrito]

Verify 
your compile / configure options for the template.
Anyway, it's always a better solution to post some config 
files.
---Cordiali saluti / Best regardsAndrea 
Cerrito^^Net.Admin @ Centro MultiMediale di Terni 
S.p.A.P.zzale Bosco 3A05100 Terni ITTel. +39 744 5441330Fax. +39 
744 5441372 

  -Messaggio originale-Da: Manuel Magnani 
  [mailto:[EMAIL PROTECTED]]Inviato: giovedì 5 luglio 2001 
  10.26A: [EMAIL PROTECTED]Oggetto: 
  Prob
  Hi, this is my problem..
  http://webmail.queen.it/cgi-bin/sqwebmail?index=1
  any suggestions?
  bye & thx a lot
  Manuel

R: iptable rules for mail server

[Andrea Cerrito]

Well, not iptable but ipchains (very similar).

Assuming this scenario (pop3/smtp must be able to resolve, is what did you
mean with "dns"?)

=  ===
 fw with nat   ---  pop3/smtp srv
=  ===

#!/bin/sh
# eth0 external (internet)
# eth1 internal

SERVER=10.10.10.2   # the ip of the pop3/smtp server
EXTERNALIP=1.2.3.4  # the external ip of the firewall
VIRTUALIP=1.2.3.5   # virtual ip associated to service

# Setting internal default router (for pop3 srv)
ifconfig eth1:1 10.10.10.1 netmask 255.255.255.0 broadcast 10.10.10.255

# Delete all old rules
/sbin/ipchains -X
/sbin/ipchains -F
/usr/sbin/ipmasqadm portfw -f

# forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward

# IP defragmenting
echo 1 > /proc/sys/net/ipv4/ip_always_defrag

# anti-spoofing via kernel
for f in /proc/sys/net/ipv4/conf/*/rp_filter
do echo 1 > $f
done

# permit lo traffic
/sbin/ipchains -A input -i lo -j ACCEPT
/sbin/ipchains -A output -i lo -j ACCEPT

# permit DOMAIN to ROOT-SERVERS.NET
/sbin/ipchains -A input -i eth1 -p tcp -s $SERVER -d 0.0.0.0/0 53 -j ACCEPT
/sbin/ipchains -A input -i eth1 -p udp -s $SERVER -d 0.0.0.0/0 53 -j ACCEPT
/sbin/ipchains -A output -i eth1 -p tcp -s 0.0.0.0/0 53 -d $SERVER -j ACCEPT
/sbin/ipchains -A output -i eth1 -p udp -s 0.0.0.0/0 53 -d $SERVER -j ACCEPT
/sbin/ipchains -A forward -i eth0 -p tcp -s $SERVER -d 0.0.0.0/0 53 -j MASQ
/sbin/ipchains -A forward -i eth0 -p udp -s $SERVER -d 0.0.0.0/0 53 -j MASQ
/sbin/ipchains -A output -i eth0 -p tcp -s $EXTERNALIP -d 0.0.0.0/0 53 -j
ACCEPT
/sbin/ipchains -A input -i eth0 -p tcp -s 0.0.0.0/0 53 -d $EXTERNALIP -j
ACCEPT
/sbin/ipchains -A output -i eth0 -p udp -s $EXTERNALIP -d 0.0.0.0/0 53 -j
ACCEPT
/sbin/ipchains -A input -i eth0 -p udp -s 0.0.0.0/0 53 -d $EXTERNALIP -j
ACCEPT

# Permit SMTP from firewall (smtp traffic is as generated by fw instead by
mailserver)
/sbin/ipchains -A input -i eth1 -p tcp -s $SERVER -d 0.0.0.0/0 25 -j ACCEPT
/sbin/ipchains -A input -i eth0 -p tcp -s 0.0.0.0/0 25 -d $EXTERNALIP -j
ACCEPT
/sbin/ipchains -A output -i eth0 -p tcp -s $EXTERNALIP -d 0.0.0.0/0 25 -j
ACCEPT
/sbin/ipchains -A output -i eth1 -p tcp -s 0.0.0.0/0 25 -d $SERVER -j ACCEPT
/sbin/ipchains -A forward -i eth0 -p tcp -s $SERVER -j MASQ

# Masquerading
/usr/sbin/ipmasqadm portfw -a -P tcp -L $VIRTUALIP 25 -R $SERVER 25
/usr/sbin/ipmasqadm portfw -a -P tcp -L $VIRTUALIP 110 -R $SERVER 110

# Permit SMTP/POP3
/sbin/ipchains -A input -i eth0 -p tcp -d $VIRTUALIP 25 -j ACCEPT
/sbin/ipchains -A input -i eth0 -p tcp -d $VIRTUALIP 110 -j ACCEPT
/sbin/ipchains -A input -i eth1 -p tcp -s $SERVER 25 -j ACCEPT
/sbin/ipchains -A input -i eth1 -p tcp -s $SERVER 110 -j ACCEPT
/sbin/ipchains -A output -i eth1 -p tcp -d $SERVER 25 -j ACCEPT
/sbin/ipchains -A output -i eth1 -p tcp -d $SERVER 110 -j ACCEPT
/sbin/ipchains -A output -i eth0 -p tcp -s $VIRTUALIP 25 -j ACCEPT
/sbin/ipchains -A output -i eth0 -p tcp -s $VIRTUALIP 110 -j ACCEPT
/sbin/ipchains -A forward -i eth0 -p tcp -s $SERVER -j MASQ

# Virtual Interface for masq
/sbin/ifconfig eth0:1 $VIRTUALIP netmask 255.255.255.0 broadcast 1.2.3.255

# Negate everything else
/sbin/ipchains -A output -j DENY -l
/sbin/ipchains -A input -j DENY -l
/sbin/ipchains -A forward -j DENY -l

# Negate first rule as any/any/accept
#
/sbin/ipchains -D output 1
/sbin/ipchains -D input 1

## EOF

Hope it helps.
Ciao
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 744 5441330
Fax. +39 744 5441372

> -Messaggio originale-
> Da: inter7 [mailto:inter7]Per conto di Ken Jones
> Inviato: mercoledi 4 luglio 2001 9.21
> A: [EMAIL PROTECTED]
> Oggetto: OT: iptable rules for mail server
>
>
> Hi,
>
> This is off topic, but does anyone have an iptable
> rule set for a mailserver. Like, lock down everything
> except smtp, pop and dns.
>
> Ken Jones
>

qmail + vpopmail + maildrop + sqwebmail

[Andrea Cerrito]

Hi to all.

I'm trying to use new sqwebmail features about autoresponders / mail
filtering.
I've set and running a working farm with qmail 1.0.3 / vpopmail 4.9.8 /
sqwebmail 2.0.0 but I'd like to delete autorespond and use maildrop with
updated vpopmail 4.10.24 / sqwebmail 2.1.1.

What I have to do to use maildrop?

My run script is like:

exec /usr/bin/env - PATH="/coda/qmail/bin:$PATH"
/usr/local/bin/tcpserver -v -c 50 -H -P -R -l pop3.name.ext ip port
/usr/local/qmail/bin/qmail-popup pop3.name.ext
/usr/local/vpopmail/bin/vchkpw /usr/local/qmail/bin/qmail-pop3d Maildir 2>&1

What are steps to make things working togheter? Is there any little howto?
I'm new to maildrop.

Thank you everybody
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 744 5441330
Fax. +39 744 5441372

R: POP3 Cluster

[Andrea Cerrito]

I'm running a linux virtual server (www.linuxvirtualserver.org) with coda fs
(www.coda.cs.cmu.edu) and vpopmail.
I hope it helps
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni SpA
P.zzale Bosco 3A
05100 Terni IT
Tel. 0744 / 5441330
Fax. 0744 / 5441372

> -Messaggio originale-
> Da: Eduardo Augusto Alvarenga [mailto:[EMAIL PROTECTED]]
> Inviato: sabato 5 maggio 2001 1.02
> A: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Oggetto: POP3 Cluster
>
>
> Hi,
>
> Anyone on the list(s) have any idea of how to make a
> "independent-of-another-
> servers" pop3 cluster on a group of qmail-vpopmail servers?
> Preferentlly on
> distinct DMZs.
>
> B.R.
>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Eduardo Augusto Alvarenga - Analista de Suporte - #179653
> Blumenau - Santa Catarina. Tel. (47) 9102-3303
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

R: Trying to use "qmail" on CODA? Read this

[Andrea Cerrito]

Coda is a network filesystem (http://www.coda.cs.cmu.edu). Clicking on this
link explain a lot about it. :)
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni SpA
P.zzale Bosco 3A
05100 Terni IT
Tel. 0744 / 5441330
Fax. 0744 / 5441372

> -Messaggio originale-
> Da: Dan Phoenix [mailto:[EMAIL PROTECTED]]
> Inviato: venerdi 9 marzo 2001 22.19
> A: Andrea Cerrito
> Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Oggetto: Re: Trying to use "qmail" on CODA? Read this
>
>
>
>
> what is coda?
> what does it do for freebsd?

Trying to use "qmail" on CODA? Read this

[Andrea Cerrito]

Hi to all

I'm sending this mail to prevent nightmares to all users trying to use CODA
and qmail together.

qmail use a cool way to copy files between dirs (link() function) unallowed
on CodaFS. So, the first thing is to modify qmail, with qmail-coda.patch.

But if you are using Vpopmail too (http://www.inter7.com/vpopmail/), well
your nightmares aren't gone away: vpopmail (before 4.9.9, develop as the
time of this mail) uses the same function as qmail, so the problem will
persist.

You have two choices: (preferred) use the new version of vpopmail,
(deferred) use vpopmail-coda.patch
(note: the patch remove link() function and new vpopmail integrate a check
to see if hardlinks are allowed - if not, rename will be used: of course,
last choice is to be preferred).

I hope it helps and thanks to all people around making these great
softwares.

References:
1) Jan Harkes speaks about link() and coda =
http://www.coda.cs.cmu.edu/maillists/codalist-2000/0719.html
2) Me and Ken Jones speaking about vdelivermail.c =
http://www.mail-archive.com/vchkpw%40inter7.com/msg03255.html
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni SpA
P.zzale Bosco 3A
05100 Terni IT
Tel. 0744 / 5441330
Fax. 0744 / 5441372

 vpopmail-coda.patch
 qmail-coda.patch

R: CODA and VPOPMAIL and link/rename

[Andrea Cerrito]

> -Messaggio originale-
> Da: kbo [mailto:kbo]Per conto di Ken Jones
> Inviato: giovedi 8 marzo 2001 16.35
> A: Andrea Cerrito
> Cc: [EMAIL PROTECTED]
> Oggetto: Re: CODA and VPOPMAIL and link/rename
>
>
> This is really interesting. So CODA has problems with the link/unlink
> function but works okay with the rename function.

No. Just with link(). Here it is what a Coda developer said about the link
function: http://www.coda.cs.cmu.edu/maillists/codalist-2000/0719.html

> Hmm.. why not
> change all the link's in vpopmail to renames?

Done (see attached patch) and it appears to work. Anyway, I haven't tested
it a lot, but I think it's all ok (I mean, we are just changing the way
vpopmail move files, nothing else).

> Is there any major performance problem or other gotcha's we could
> run into if we switched the links to renames? If not, let's make
> the change.

I don't think there are performance issues, but security issue: qmail uses
link function in Maildir to be sure to successfully deliver mail even in
case of disk failure. I don't know how rename() can be in such situations.

> While we are at it. There is an fsync in vdelivermail.c. I don't
> really see a reason and it would just increase the disk I/O load.

Well, haven't looked at that. :)
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni SpA
P.zzale Bosco 3A
05100 Terni IT
Tel. 0744 / 5441330
Fax. 0744 / 5441372


ÿþ*** vdelivermail.c.old  Thu Mar  8 
16:57:56 2001

--- vdelivermail.c      Thu Mar  8 
16:55:26 2001

***************

*** 573,591 ****

        if ( hit_filter == 1 ) {

                do_filter_delivery( 
tmp_file );

        } else {

!               if 
(link(tmp_file,mailname) == -1) {

                        delete_tmp();

                        failtemp("Unable 
to link tmp to new (#4.3.7)\n");

                }

        }

  #else

!       if (link(tmp_file_f,mailname) == 
-1) {

                delete_tmp_f();

                failtemp("Unable to link 
tmp to new (#4.3.7)\n");

        }

  #endif

  

!       delete_tmp_f();

  }

  

  

--- 573,595 ----

        if ( hit_filter == 1 ) {

                do_filter_delivery( 
tmp_file );

        } else {

! 

! /* Using rename() instead of link() due 
to Codafs. */

!               if 
(rename(tmp_file,mailname) == -1) { 

                        delete_tmp();

                        failtemp("Unable 
to link tmp to new (#4.3.7)\n");

                }

        }

  #else

!       if (rename(tmp_file_f,mailname) == 
-1) {

                delete_tmp_f();

                failtemp("Unable to link 
tmp to new (#4.3.7)\n");

        }

  #endif

  

! /* We don't need delete_tmp_f anymore, 
because rename() "deletes" file in tmp/ 
dir.

!       delete_tmp_f(); 

! */

  }

  

  

***************

*** 783,793 ****

                delete_tmp();

                failtemp("Unable to 
close() tmp file (#4.3.6)\n");

        }

!       if (link(tmp_file,mailname) == -1) 
{

                delete_tmp();

                failtemp("Unable to link 
tmp to new (#4.3.7)\n");

        }

!       delete_tmp();

CODA and VPOPMAIL

[Andrea Cerrito]

(sorry if this message will exist twice)

Hi to all,

I'm trying to test a future production system using qmail + vpopmail +
codafs.

I know there is a patch for qmail to run on codafs, using Maildirs (function
link(from,to) isn't allowed on codafs), and I think I've to do the same on
vpopmail.
Here is the patch for qmail (qmail-local)

= begin
*** qmail-local.c.orig Tue Mar 14 10:21:56 2000
--- qmail-local.c Tue Mar  7 11:49:35 2000
***
*** 127,134 
--- 127,138 
   if (fsync(fd) == -1) goto fail;
   if (close(fd) == -1) goto fail; /* NFS dorks */

+ #ifdef NFS_HACK
   if (link(fntmptph,fnnewtph) == -1) goto fail;
 /* if it was error_exist, almost certainly successful; i hate NFS */
+ #else
+  if (rename(fntmptph,fnnewtph) == -1) goto fail;
+ #endif
   tryunlinktmp(); _exit(0);
   fail: tryunlinktmp(); _exit(1);

= end

This patch allow another (even not so sure) method of switching files
between dirs. I saw that vpopmail code is using the same technique as qmail,
and infact, after patching qmail, I have that problem only to virtual
accounts (#4.3.4).

Do you think sufficient changing all link(from,to) into rename(from,to)
functions in all .c of vpopmail?
Is there an official patch to vpopmail to work on codafs?

Thank you

---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni SpA
P.zzale Bosco 3A
05100 Terni IT
Tel. 0744 / 5441330
Fax. 0744 / 5441372

CODA and VPOPMAIL

[Andrea Cerrito]

Hi to all,

I'm trying to test a future production system using qmail + vpopmail +
codafs.

I know there is a patch for qmail to run on codafs, using Maildirs (function
link(from,to) isn't allowed on codafs), and I think I've to do the same on
vpopmail.
Here is the patch for qmail (qmail-local)

= begin
*** qmail-local.c.orig Tue Mar 14 10:21:56 2000
--- qmail-local.c Tue Mar  7 11:49:35 2000
***
*** 127,134 
--- 127,138 
   if (fsync(fd) == -1) goto fail;
   if (close(fd) == -1) goto fail; /* NFS dorks */

+ #ifdef NFS_HACK
   if (link(fntmptph,fnnewtph) == -1) goto fail;
 /* if it was error_exist, almost certainly successful; i hate NFS */
+ #else
+  if (rename(fntmptph,fnnewtph) == -1) goto fail;
+ #endif
   tryunlinktmp(); _exit(0);
   fail: tryunlinktmp(); _exit(1);

= end

This patch allow another (even not so sure) method of switching files
between dirs. I saw that vpopmail code is using the same technique as qmail,
and infact, after patching qmail, I have that problem only to virtual
accounts (#4.3.4).

Do you think sufficient changing all link(from,to) into rename(from,to)
functions in all .c of vpopmail?
Is there an official patch to vpopmail to work on codafs?

Thank you

---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni SpA
P.zzale Bosco 3A
05100 Terni IT
Tel. 0744 / 5441330
Fax. 0744 / 5441372