Re: [vchkpw] Qmail smtp oddity with vpopmail and chkuser

2006-10-30 Thread DAve 

Tom Collins wrote:

On Oct 27, 2006, at 7:06 AM, DAve wrote:

mail from: [EMAIL PROTECTED]
## At this point qmail-smtpd just sits and never responds 250 ok

The only difference is the colon after the mail from command. No colon 
and qmail-smtpd responds, a colon and it does not, ever. I narrowed it 
down to stock qmail works, and qmail + chkuser does not. It seems to 
make no difference which vpopmail I use. This is very odd to me 
because this configuration has passed millions of messages in the past 
two years. I see no reason why it should fail to respond to an 
incoming connection incorrectly now.


Just as an FYI, RFC821 says you need angle brackets around the email 
address (and no space after the colon).


Regardless, qmail-smtpd should come back.  I just tried your test on my 
system (Shupp Toaster) and it came back fine.




Yea, I normally use the full correct syntax, but I know my server do not 
require it so I generally type by habit, right or wrong. I did try a 
correct syntax and the results got even odder.


bash-2.05b# telnet 10.0.241.135 25
Trying 10.0.241.135...
Connected to ecluster5.
Escape character is '^]'.
220 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED! ESMTP
helo avhost1
250 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED!
mail from:<[EMAIL PROTECTED]>
^]
telnet> quit
Connection closed.
bash-2.05b# telnet 10.0.241.135 25
Trying 10.0.241.135...
Connected to ecluster5.
Escape character is '^]'.
220 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED! ESMTP
helo avhost1
250 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED!
mail from<[EMAIL PROTECTED]>
^]
telnet> quit
Connection closed.
bash-2.05b# telnet 10.0.241.135 25
Trying 10.0.241.135...
Connected to ecluster5.
Escape character is '^]'.
220 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED! ESMTP
helo avhost1
250 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED!
mail from <[EMAIL PROTECTED]>
^]
telnet> quit
Connection closed.
bash-2.05b# telnet 10.0.241.135 25
Trying 10.0.241.135...
Connected to ecluster5.
Escape character is '^]'.
220 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED! ESMTP
helo avhost1
250 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED!
mail from [EMAIL PROTECTED]
250 ok
^]
telnet> quit

Now only "mail from [EMAIL PROTECTED]" works. Noting else does. 
I am completely perplexed. I have made one more change, I scp'd over my 
sources for vpopmail from a working server and recompiled and 
reinstalled onto the failing server and the problem persisted.


I will try doing the same with qmail and chckuser next. Need to get some 
things done first. It is looking like the only difference will be 
FreeBSD versions.


DAve


--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.

Re: [vchkpw] Qmail smtp oddity with vpopmail and chkuser

2006-10-27 Thread Tom Collins 

On Oct 27, 2006, at 7:06 AM, DAve wrote:

mail from: [EMAIL PROTECTED]
## At this point qmail-smtpd just sits and never responds 250 ok

The only difference is the colon after the mail from command. No  
colon and qmail-smtpd responds, a colon and it does not, ever. I  
narrowed it down to stock qmail works, and qmail + chkuser does  
not. It seems to make no difference which vpopmail I use. This is  
very odd to me because this configuration has passed millions of  
messages in the past two years. I see no reason why it should fail  
to respond to an incoming connection incorrectly now.


Just as an FYI, RFC821 says you need angle brackets around the email  
address (and no space after the colon).


Regardless, qmail-smtpd should come back.  I just tried your test on  
my system (Shupp Toaster) and it came back fine.


--
Tom Collins  -  [EMAIL PROTECTED]
Vpopmail - virtual domains for qmail: http://vpopmail.sf.net/
QmailAdmin - web interface for Vpopmail: http://qmailadmin.sf.net/

[vchkpw] Qmail smtp oddity with vpopmail and chkuser

2006-10-27 Thread DAve 

Good morning,

I have been upgrading one of my toasters and ran into a problem. It 
seems that my MailScanner server keeps timing out trying to connect to 
this one toaster. Checking it via telnet from the MailScanner server 
shows this to be true, under an odd circumstance.


This works,
bash-2.05b# telnet 10.0.241.135 25
Trying 10.0.241.135...
Connected to ecluster5.
Escape character is '^]'.
220 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED! ESMTP
helo avhost1
250 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED!
mail from [EMAIL PROTECTED]
250 ok

This does not,
bash-2.05b# telnet 10.0.241.135 25
Trying 10.0.241.135...
Connected to ecluster5.
Escape character is '^]'.
220 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED! ESMTP
helo avhost1
250 smtp.tls.net UNAUTHORIZED USE WILL BE PROSECUTED!
mail from: [EMAIL PROTECTED]
## At this point qmail-smtpd just sits and never responds 250 ok

The only difference is the colon after the mail from command. No colon 
and qmail-smtpd responds, a colon and it does not, ever. I narrowed it 
down to stock qmail works, and qmail + chkuser does not. It seems to 
make no difference which vpopmail I use. This is very odd to me because 
this configuration has passed millions of messages in the past two 
years. I see no reason why it should fail to respond to an incoming 
connection incorrectly now.


The *two* differences between my working configurations and this one is 
FreeBSD version, and my other installs also carried these patches,


5.4.10-spamc-to-maildrop.patch
5.4.10-spamc.patch

Both of which we no longer need. Any head slaps, finger pointing, clue 
bats appreciated.


DAve



Install information follows.


I am running the following versions,
FreeBSD 6.2
qmail-1.03 (conf-split = 97)
qmail-0.0.0.0.patch
qmail-103.patch
qmail-maildir++.patch
vpopmail-5.4.10 and/or vpopmail-5.4.17
chkuser-2.0.8b-release

===
vpopmail configured as follows,
./configure --enable-tcpserver-file=/shared/qmail/control 
--enable-learn-passwords --enable-vpopuser=vpopmail 
--enable-vpopgroup=vchkpw --enable-qmail-ext 
--enable-incdir=/usr/local/include/mysql 
--enable-libdir=/usr/local/lib/mysql --enable-clear-password 
--enable-auth-module=mysql --enable-valias --enable-spamassassin


=
chkuser_settings.h
#define CHKUSER_VPOPMAIL
#define CHKUSER_STARTING_VARIABLE "CHKUSER_START"
#define CHKUSER_ENABLE_UIDGID
#define CHKUSER_DOMAIN_WANTED
#define CHKUSER_ENABLE_USERS
#define CHKUSER_ENABLE_ALIAS
#define CHKUSER_EZMLM_DASH '-'
#define CHKUSER_BOUNCE_STRING "bounce-no-mailbox"
#define CHKUSER_ENABLE_LOGGING
#define CHKUSER_SENDER_NOCHECK_VARIABLE "RELAYCLIENT"
#define CHKUSER_MIN_DOMAIN_LEN 4
#define CHKUSER_LOG_VALID_SENDER
#define CHKUSER_RCPT_LIMIT_VARIABLE "CHKUSER_RCPTLIMIT"
#define CHKUSER_WRONGRCPT_LIMIT_VARIABLE "CHKUSER_WRONGRCPTLIMIT"
#define CHKUSER_MBXQUOTA_VARIABLE "CHKUSER_MBXQUOTA"
#define CHKUSER_ERROR_DELAY 1000
#define CHKUSER_RCPT_DELAY_ANYERROR
#define CHKUSER_SENDER_DELAY_ANYERROR
#define CHKUSER_NORCPT_STRING "511 sorry, no mailbox here by that name 
(#5.1.1 - chkuser)\r\n"
#define CHKUSER_RESOURCE_STRING "430 system temporary unavailable, try 
again later (#4.3.0 - chkuser)\r\n"
#define CHKUSER_MBXFULL_STRING "522 sorry, recipient mailbox is full 
(#5.2.2 - chkuser)\r\n"
#define CHKUSER_MAXRCPT_STRING "571 sorry, reached maximum number of 
recipients for one session (#5.7.1 - chkuser)\r\n"
#define CHKUSER_MAXWRONGRCPT_STRING "571 sorry, you are violating our 
security policies (#5.1.1 - chkuser)\r\n"
#define CHKUSER_DOMAINMISSING_STRING "511 sorry, you must specify a 
domain (#5.1.1 - chkuser)\r\n"
#define CHKUSER_RCPTFORMAT_STRING "511 sorry, recipient address has 
invalid format (#5.1.1 - chkuser)\r\n"
#define CHKUSER_RCPTMX_STRING "511 sorry, can't find a valid MX for rcpt 
domain (#5.1.1 - chkuser)\r\n"
#define CHKUSER_SENDERFORMAT_STRING "571 sorry, sender address has 
invalid format (#5.7.1 - chkuser)\r\n"
#define CHKUSER_SENDERMX_STRING "511 sorry, can't find a valid MX for 
sender domain (#5.1.1 - chkuser)\r\n"
#define CHKUSER_INTRUSIONTHRESHOLD_STRING "571 sorry, you are violating 
our security policies (#5.7.1 - chkuser)\r\n"
#define CHKUSER_NORELAY_STRING "553 sorry, that domain isn't in my list 
of allowed rcpthosts (#5.5.3 - chkuser)\r\n"

#define CHKUSER_ENABLE_EZMLM_LISTS
#define CHKUSER_IDENTIFY_REMOTE_VARIABLE "CHKUSER_IDENTIFY"
#define CHKUSER_USERS_DASH '-'
#define CHKUSER_RCPTMX_TMP_STRING "451 DNS temporary failure (#4.5.1 - 
chkuser)\r\n"
#define CHKUSER_SENDERMX_TMP_STRING "451 DNS temporary failure (#4.5.1 - 
chkuser)\r\n"

#define CHKUSER_MAILMAN_STRING "mailman"
#define CHKUSER_MAILMAN_DASH '-'
#define CHKUSER_DB_CLEANUP
#define CHKUSER_RCPT_FORMAT
#define CHKUSER_SENDER_FORMAT
#define CHKUSER_ERROR_DELAY_INCREASE 300

===
bash-2.05b# cat /service/qmail-sm