Re: [vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: failure notice

2003-09-09 Thread Tom Collins 
I tried to email Ken Jones <[EMAIL PROTECTED]> about this, but efilter on 
their server blocked my message.

Ken, if you get this, please unsub [EMAIL PROTECTED]

On Monday, September 8, 2003, at 06:43  PM, Chris Pugh wrote:
Looks like I was right after all about those messages
Shane .. still coming they are... and look what turned
up ..
=
Scan result: Virus [EMAIL PROTECTED] found.
==
Please ref:

http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]

Told you I was receiving rubbish responses.

Watch out all!

Regards,

Chris.

--- Shane Chrisp <[EMAIL PROTECTED]> wrote:
Can we either get cz at neospire dot net to fix the
procmail/preline error
or get them unsub'd from the list. These bounces are
getting very annoying.
Shane

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Monday, 8 September 2003 10:30 PM
To: [EMAIL PROTECTED]
Subject: failure notice
Hi. This is the qmail-send program at
lump.internal.neospire.net.
I'm afraid I wasn't able to deliver your message to
the following addresses.
This is a permanent error; I've given up. Sorry it
didn't work out.
<[EMAIL PROTECTED]>:
preline: fatal: unable to run procmail: file does
not exist
--- Below this line is a copy of the message.

Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 9160 invoked from network); 8 Sep
2003 14:30:10 -
Received: from unknown (HELO localhost) (127.0.0.1)
  by lump with SMTP; 8 Sep 2003 14:30:10 -
Received: from mail.neospire.net [66.111.111.18]
by localhost with POP3 (fetchmail-6.2.2)
for [EMAIL PROTECTED] (single-drop); Mon, 08 Sep 2003
09:30:10 -0500
(CDT)
Received: from ns1.inter7.com [209.218.8.2] by
mail.neospire.net
  (SMTPD32-5.05) id A10E10660048; Mon, 08 Sep 2003
09:24:14 -0500
Received: (qmail 30521 invoked by uid 511); 8 Sep
2003 15:38:47 -
Mailing-List: contact [EMAIL PROTECTED]; run by
ezmlm
Precedence: bulk
List-Post: 
List-Help: 
List-Unsubscribe:

List-Subscribe: 
Delivered-To: mailing list [EMAIL PROTECTED]
Received: from unknown (HELO droopy.2000cn.com.au)
(202.154.116.2)
  by evanston.inter7.com with SMTP; 8 Sep 2003
15:38:46 -
Reply-To: <[EMAIL PROTECTED]>
From: "Shane Chrisp" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Date: Mon, 8 Sep 2003 22:24:01 +0800
Organization: 2000 Computers & Networks
Message-ID:
<[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.4510
In-Reply-To: <[EMAIL PROTECTED]>
X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1165
Importance: Normal
Subject: RE: [vchkpw] Hacked machine
X-RCPT-TO: <[EMAIL PROTECTED]>
X-UIDL: 1634
Status: U
And if your using a mysql backend, dump the db
aswell :)
-Original Message-
From: Rick Macdougall [mailto:[EMAIL PROTECTED]
Sent: Monday, 8 September 2003 10:17 PM
To: Widmer Hannes
Cc: vpopmail list
Subject: Re: [vchkpw] Hacked machine
Hi,

Widmer Hannes wrote:

Hello List

I have a hacked machine and I have to reinstall
this one tonight.
Now, my short question is, what the best way is
to
backup / restore user's mailboxes. Is it enought
if I only macke
a copy of my vpopmail/domains dir ?.
/pathto/vpopmail/domains/*
/pathto/qmail/control/*
/pathto/qmail/users/*
One gotcha is the uid and gid in
/pathto/qmail/users/assign, make sure
it matches vpopmail.vchkpw

Regards,

Rick












__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


--
Tom Collins
[EMAIL PROTECTED]
Project Admin of http://qmailadmin.sf.net/ and http://vpopmail.sf.net/
http://sniffter.com/ - info on the Sniffter hand-held Network Tester

RE: [vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: failure notice

2003-09-08 Thread Shane Chrisp 
Ahh.. I have notifications turned off at the virus scanning
mail server. If I check the logs, I bet there is a heap of
Sobig.F from this sender.

Shane

>-Original Message-
>From: Chris Pugh [mailto:[EMAIL PROTECTED] 
>Sent: Tuesday, 9 September 2003 9:43 AM
>To: [EMAIL PROTECTED]
>Subject: [vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: 
>failure notice
>
>
>Looks like I was right after all about those messages
>Shane .. still coming they are... and look what turned
>up ..
>
>=
>Scan result: Virus [EMAIL PROTECTED] found. 
>==
>
>Please ref:
>
>http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
>
>Told you I was receiving rubbish responses.
>
>Watch out all!
>
>Regards,
>
>
>Chris. 
>
>--- Shane Chrisp <[EMAIL PROTECTED]> wrote:
>> Can we either get cz at neospire dot net to fix the
>> procmail/preline error
>> or get them unsub'd from the list. These bounces are
>> getting very annoying.
>> 
>> Shane
>> 
>> -Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] 
>> Sent: Monday, 8 September 2003 10:30 PM
>> To: [EMAIL PROTECTED]
>> Subject: failure notice
>> 
>> 
>> Hi. This is the qmail-send program at
>> lump.internal.neospire.net.
>> I'm afraid I wasn't able to deliver your message to
>> the following addresses.
>> This is a permanent error; I've given up. Sorry it
>> didn't work out.
>> 
>> <[EMAIL PROTECTED]>:
>> preline: fatal: unable to run procmail: file does
>> not exist
>> 
>> --- Below this line is a copy of the message.
>> 
>> Return-Path: <[EMAIL PROTECTED]>
>> Received: (qmail 9160 invoked from network); 8 Sep
>> 2003 14:30:10 -
>> Received: from unknown (HELO localhost) (127.0.0.1)
>>   by lump with SMTP; 8 Sep 2003 14:30:10 -
>> Received: from mail.neospire.net [66.111.111.18]
>>  by localhost with POP3 (fetchmail-6.2.2)
>>  for [EMAIL PROTECTED] (single-drop); Mon, 08 Sep 2003
>> 09:30:10 -0500
>> (CDT)
>> Received: from ns1.inter7.com [209.218.8.2] by
>> mail.neospire.net
>>   (SMTPD32-5.05) id A10E10660048; Mon, 08 Sep 2003
>> 09:24:14 -0500
>> Received: (qmail 30521 invoked by uid 511); 8 Sep
>> 2003 15:38:47 -
>> Mailing-List: contact [EMAIL PROTECTED]; run by
>> ezmlm
>> Precedence: bulk
>> List-Post: <mailto:[EMAIL PROTECTED]>
>> List-Help: <mailto:[EMAIL PROTECTED]>
>> List-Unsubscribe:
>> <mailto:[EMAIL PROTECTED]>
>> List-Subscribe: <mailto:[EMAIL PROTECTED]>
>> Delivered-To: mailing list [EMAIL PROTECTED]
>> Received: from unknown (HELO droopy.2000cn.com.au)
>> (202.154.116.2)
>>   by evanston.inter7.com with SMTP; 8 Sep 2003
>> 15:38:46 -
>> Reply-To: <[EMAIL PROTECTED]>
>> From: "Shane Chrisp" <[EMAIL PROTECTED]>
>> To: <[EMAIL PROTECTED]>
>> Date: Mon, 8 Sep 2003 22:24:01 +0800
>> Organization: 2000 Computers & Networks
>> Message-ID:
>> <[EMAIL PROTECTED]>
>> MIME-Version: 1.0
>> Content-Type: text/plain;
>>  charset="US-ASCII"
>> Content-Transfer-Encoding: 7bit
>> X-Priority: 3 (Normal)
>> X-MSMail-Priority: Normal
>> X-Mailer: Microsoft Outlook, Build 10.0.4510
>> In-Reply-To: <[EMAIL PROTECTED]>
>> X-MimeOLE: Produced By Microsoft MimeOLE
>> V6.00.2800.1165
>> Importance: Normal
>> Subject: RE: [vchkpw] Hacked machine
>> X-RCPT-TO: <[EMAIL PROTECTED]>
>> X-UIDL: 1634
>> Status: U
>> 
>> And if your using a mysql backend, dump the db
>> aswell :)
>> 
>> >-Original Message-
>> >From: Rick Macdougall [mailto:[EMAIL PROTECTED] 
>> >Sent: Monday, 8 September 2003 10:17 PM
>> >To: Widmer Hannes
>> >Cc: vpopmail list
>> >Subject: Re: [vchkpw] Hacked machine
>> >
>> >
>> >Hi,
>> >
>> >
>> >Widmer Hannes wrote:
>> >
>> >> Hello List
>> >> 
>> >> 
>> >> I have a hacked machine and I have to reinstall
>> this one tonight. 
>> >> Now, my short question is, what the best way is
>> to 
>> >> backup / restore user's mailboxes. Is it enought
>> if I only macke 
>> >> a copy of my vpopmail/domains dir ?.
>> >
>> >/pathto/vpopmail/domains/*
>> >/pathto/qmail/control/*
>> >/pathto/qmail/users/*
>> >
>> >One gotcha is the uid and gid in
>> /pathto/qmail/users/assign, make sure 
>> >it matches vpopmail.vchkpw
>> >
>> >Regards,
>> >
>> >Rick
>> >
>> >
>> >
>> >
>> >
>> 
>> 
>> 
>> 
>> 
>
>
>__
>Do you Yahoo!?
>Yahoo! SiteBuilder - Free, easy-to-use web site design software
>http://sitebuilder.yahoo.com
>
>
>

[vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: failure notice

2003-09-08 Thread Chris Pugh 
Looks like I was right after all about those messages
Shane .. still coming they are... and look what turned
up ..

=
Scan result: Virus [EMAIL PROTECTED] found. 
==

Please ref:

http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]

Told you I was receiving rubbish responses.

Watch out all!

Regards,


Chris. 

--- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> Can we either get cz at neospire dot net to fix the
> procmail/preline error
> or get them unsub'd from the list. These bounces are
> getting very annoying.
> 
> Shane
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] 
> Sent: Monday, 8 September 2003 10:30 PM
> To: [EMAIL PROTECTED]
> Subject: failure notice
> 
> 
> Hi. This is the qmail-send program at
> lump.internal.neospire.net.
> I'm afraid I wasn't able to deliver your message to
> the following addresses.
> This is a permanent error; I've given up. Sorry it
> didn't work out.
> 
> <[EMAIL PROTECTED]>:
> preline: fatal: unable to run procmail: file does
> not exist
> 
> --- Below this line is a copy of the message.
> 
> Return-Path: <[EMAIL PROTECTED]>
> Received: (qmail 9160 invoked from network); 8 Sep
> 2003 14:30:10 -
> Received: from unknown (HELO localhost) (127.0.0.1)
>   by lump with SMTP; 8 Sep 2003 14:30:10 -
> Received: from mail.neospire.net [66.111.111.18]
>   by localhost with POP3 (fetchmail-6.2.2)
>   for [EMAIL PROTECTED] (single-drop); Mon, 08 Sep 2003
> 09:30:10 -0500
> (CDT)
> Received: from ns1.inter7.com [209.218.8.2] by
> mail.neospire.net
>   (SMTPD32-5.05) id A10E10660048; Mon, 08 Sep 2003
> 09:24:14 -0500
> Received: (qmail 30521 invoked by uid 511); 8 Sep
> 2003 15:38:47 -
> Mailing-List: contact [EMAIL PROTECTED]; run by
> ezmlm
> Precedence: bulk
> List-Post: 
> List-Help: 
> List-Unsubscribe:
> 
> List-Subscribe: 
> Delivered-To: mailing list [EMAIL PROTECTED]
> Received: from unknown (HELO droopy.2000cn.com.au)
> (202.154.116.2)
>   by evanston.inter7.com with SMTP; 8 Sep 2003
> 15:38:46 -
> Reply-To: <[EMAIL PROTECTED]>
> From: "Shane Chrisp" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Date: Mon, 8 Sep 2003 22:24:01 +0800
> Organization: 2000 Computers & Networks
> Message-ID:
> <[EMAIL PROTECTED]>
> MIME-Version: 1.0
> Content-Type: text/plain;
>   charset="US-ASCII"
> Content-Transfer-Encoding: 7bit
> X-Priority: 3 (Normal)
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook, Build 10.0.4510
> In-Reply-To: <[EMAIL PROTECTED]>
> X-MimeOLE: Produced By Microsoft MimeOLE
> V6.00.2800.1165
> Importance: Normal
> Subject: RE: [vchkpw] Hacked machine
> X-RCPT-TO: <[EMAIL PROTECTED]>
> X-UIDL: 1634
> Status: U
> 
> And if your using a mysql backend, dump the db
> aswell :)
> 
> >-Original Message-
> >From: Rick Macdougall [mailto:[EMAIL PROTECTED] 
> >Sent: Monday, 8 September 2003 10:17 PM
> >To: Widmer Hannes
> >Cc: vpopmail list
> >Subject: Re: [vchkpw] Hacked machine
> >
> >
> >Hi,
> >
> >
> >Widmer Hannes wrote:
> >
> >> Hello List
> >> 
> >> 
> >> I have a hacked machine and I have to reinstall
> this one tonight. 
> >> Now, my short question is, what the best way is
> to 
> >> backup / restore user's mailboxes. Is it enought
> if I only macke 
> >> a copy of my vpopmail/domains dir ?.
> >
> >/pathto/vpopmail/domains/*
> >/pathto/qmail/control/*
> >/pathto/qmail/users/*
> >
> >One gotcha is the uid and gid in
> /pathto/qmail/users/assign, make sure 
> >it matches vpopmail.vchkpw
> >
> >Regards,
> >
> >Rick
> >
> >
> >
> >
> >
> 
> 
> 
> 
> 


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com