Re: [vchkpw] bounce maybe used to relay spam

2004-01-30 Thread mysteryadmin
 On 27 Jan 2004 11:57:01 -0800
 Tom Jackson [EMAIL PROTECTED] wrote:

 I'm seeing a number of emails like [EMAIL PROTECTED] coming in to my
 server. They are from different users. Since the local user doesn't
 exist, qmail is attempting to bounce the message back to the sender.
 Most of these are failing, the messages are obviously spam.

 I'm running vpopmail on the domains in question. Is there any way to
 configure vpopmail or qmail to reject email if the local address
 doesn't exist, or to silently trash the email?

 You can delete them pretty easily if you create a catchall account and
 then tell it to delete all e-mail delivered to that account. Something
 like junk or spamtrap is usually a good name for the catchall
 account, if you're making it strictly to dump all mail coming to users
 that don't exist. Make sure you don't have any valid e-mail going to
 that catchall before you start deleting them though.

 HTH,
 Jacob

Could the postmaster account be used for this or would creating a
special account be preferred?

Peace...

Tom


Re: [vchkpw] bounce maybe used to relay spam

2004-01-30 Thread Jacob S.
On Fri, 30 Jan 2004 09:10:17 -0800 (PST)
[EMAIL PROTECTED] wrote:

  On 27 Jan 2004 11:57:01 -0800
  Tom Jackson [EMAIL PROTECTED] wrote:
 
  I'm seeing a number of emails like [EMAIL PROTECTED] coming in to
 my server. They are from different users. Since the local user
 doesn't exist, qmail is attempting to bounce the message back to the
 sender. Most of these are failing, the messages are obviously spam.
snip
  You can delete them pretty easily if you create a catchall account
  and then tell it to delete all e-mail delivered to that account.
  Something like junk or spamtrap is usually a good name for the
  catchall account, if you're making it strictly to dump all mail
  coming to users that don't exist. Make sure you don't have any valid
  e-mail going to that catchall before you start deleting them though.

 Could the postmaster account be used for this or would creating a
 special account be preferred?

I strongly recommend against using the postmaster account that way. If
your domain is ever believed to be spamming or causing any other kind of
problem to people on the internet, the postmaster account is one of the
first places they'll try to use to get you to correct it. Very little
(if any) postmaster mail should be discarded - even if it's spam.

Jacob

- 
GnuPG Key: 1024D/16377135

Computers are like air conditioners -- they stop working properly if you
open Windows


pgp0.pgp
Description: PGP signature


Re: [vchkpw] bounce maybe used to relay spam

2004-01-30 Thread mysteryadmin
 On Fri, 30 Jan 2004 09:10:17 -0800 (PST)
 [EMAIL PROTECTED] wrote:

  On 27 Jan 2004 11:57:01 -0800
  Tom Jackson [EMAIL PROTECTED] wrote:
 
  I'm seeing a number of emails like [EMAIL PROTECTED] coming in to
 my server. They are from different users. Since the local user
 doesn't exist, qmail is attempting to bounce the message back to the
 sender. Most of these are failing, the messages are obviously spam.
 snip
  You can delete them pretty easily if you create a catchall account
  and then tell it to delete all e-mail delivered to that account.
  Something like junk or spamtrap is usually a good name for the
  catchall account, if you're making it strictly to dump all mail
  coming to users that don't exist. Make sure you don't have any valid
  e-mail going to that catchall before you start deleting them though.

 Could the postmaster account be used for this or would creating a
 special account be preferred?

 I strongly recommend against using the postmaster account that way. If
 your domain is ever believed to be spamming or causing any other kind of
 problem to people on the internet, the postmaster account is one of the
 first places they'll try to use to get you to correct it. Very little
 (if any) postmaster mail should be discarded - even if it's spam.

 Jacob

Great point... I'll great a bogus mail account instead.

Thanks for the advice... :)

Peace...

Tom


Re: [vchkpw] bounce maybe used to relay spam

2004-01-28 Thread Jeremy Kitchen
On Tue, 2004-01-27 at 14:45, Oden Eriksson wrote:
  Or, try to apply the check user patch to the smtp server so the
  email never makes it into your queue.
 
 Would it be possible to make a domain that uses this technique but forward all 
 mail to another server, as a gateway?

checkuser patch uses vpopmail calls.  the domain would have to be in 
vpopmail on the other server and/or would require some more advanced
configuration.

-Jeremy

-- 
Jeremy Kitchen
Systems Administrator
[EMAIL PROTECTED]
Kitchen @ #qmail on EFNet - Join the party!
.
Inter7 Internet Technologies, Inc.
www.inter7.com
866.528.3530 toll free
847.492.0470 int'l
847.492.0632 fax
GNUPG key ID: 93BDD6CE



Re: [vchkpw] bounce maybe used to relay spam

2004-01-28 Thread Tom Jackson
On Tue, 2004-01-27 at 23:02, Jeremy Kitchen wrote:

 checkuser patch uses vpopmail calls.  the domain would have to be in 
 vpopmail on the other server and/or would require some more advanced
 configuration.

I ran into another problem. My mx server, which really shouldn't have
email addresses is listed in defaultdomain, rcpthosts and
virtualdomains. However I never added it as a domain. I discovered that
qmail was trying to deliver to a box in this domain (which didn't
exist). So I tried to add the domain and got a segfault. 

Some how I got it into a state where trying to delete the domain give
Domain doesn't exist and trying to add it returns Domain already
exists. 

Have I totally screwed up here? How can I recover this install?

Any help is greatly appreciated.

tom jackson



Re: [vchkpw] bounce maybe used to relay spam

2004-01-28 Thread Jeremy Kitchen
please don't include me in the receipient list of messages posted to the
list.  I already get a copy, I do not need multiple copies, thank you.

On Wed, 2004-01-28 at 01:45, Tom Jackson wrote:
 I ran into another problem. My mx server, which really shouldn't have
 email addresses is listed in defaultdomain, rcpthosts and
 virtualdomains. However I never added it as a domain. I discovered that
 qmail was trying to deliver to a box in this domain (which didn't
 exist). So I tried to add the domain and got a segfault. 

so this is not related to the thread you replied to to make this post?  
If not, please, in the future, start a new thread when asking a new,
unrelated question.  Most mail clients have a 'new mail' function that
cna handle this.  That being said:

 Some how I got it into a state where trying to delete the domain give
 Domain doesn't exist and trying to add it returns Domain already
 exists. 

if it's only in rcpthosts and virtualdomains, just remove it from them
manually (text editor, sed, perl, c program, lots of ways to do this)
and then HUP qmail-send.

If this machine is to receive email for the domain and pass it off to
another server, simply add the domain to to rcpthosts and make a
corresponding smtproutes entry to pass it to the other machine.  You
will of course have to remove the domain from virtualdomains to prevent
local delivery of the mail from being attempted.

-Jeremy

-- 
Jeremy Kitchen
Systems Administrator
[EMAIL PROTECTED]
Kitchen @ #qmail on EFNet - Join the party!
.
Inter7 Internet Technologies, Inc.
www.inter7.com
866.528.3530 toll free
847.492.0470 int'l
847.492.0632 fax
GNUPG key ID: 93BDD6CE



Re: [vchkpw] bounce maybe used to relay spam

2004-01-28 Thread Oden Eriksson
onsdagen den 28 januari 2004 08.02 skrev Jeremy Kitchen:
 On Tue, 2004-01-27 at 14:45, Oden Eriksson wrote:
   Or, try to apply the check user patch to the smtp server so the
   email never makes it into your queue.
 
  Would it be possible to make a domain that uses this technique but
  forward all mail to another server, as a gateway?

 checkuser patch uses vpopmail calls.  the domain would have to be in
 vpopmail on the other server and/or would require some more advanced
 configuration.

 -Jeremy

Soon I will have to implement this. I have seen other similar solutions that 
are vpopmail independent. I don't want to lose /etc/passwd user 
functionalities..., as with the checkuser patch. I want both;)

It would be very nice if this was added to vpopmail+qmailadmin, like a ghost 
or maybe a forward domain where one can keep the email addresses in sync by 
uploading a csv file or something like that.

This particular setup I'm having is a wan - qmail - groupwise thing, plus 
standard vpopmail domains.

Cheers.



[vchkpw] bounce maybe used to relay spam

2004-01-27 Thread Tom Jackson
I'm seeing a number of emails like [EMAIL PROTECTED] coming in to my
server. They are from different users. Since the local user doesn't
exist, qmail is attempting to bounce the message back to the sender.
Most of these are failing, the messages are obviously spam.

I'm running vpopmail on the domains in question. Is there any way to
configure vpopmail or qmail to reject email if the local address doesn't
exist, or to silently trash the email?

TIA

tom jackson





Re: [vchkpw] bounce maybe used to relay spam

2004-01-27 Thread Ken Jones
On Tuesday 27 January 2004 1:57 pm, Tom Jackson wrote:
 I'm seeing a number of emails like [EMAIL PROTECTED] coming in to my
 server. They are from different users. Since the local user doesn't
 exist, qmail is attempting to bounce the message back to the sender.
 Most of these are failing, the messages are obviously spam.

 I'm running vpopmail on the domains in question. Is there any way to
 configure vpopmail or qmail to reject email if the local address doesn't
 exist, or to silently trash the email?

 TIA

 tom jackson

Set your bounce option to delete. The .qmail-default file will look like
| /home/vpopmail/bin/vdelivermail '' delete

Or, try to apply the check user patch to the smtp server so the
email never makes it into your queue.

Ken Jones


Re: [vchkpw] bounce maybe used to relay spam

2004-01-27 Thread Jacob S.
On 27 Jan 2004 11:57:01 -0800
Tom Jackson [EMAIL PROTECTED] wrote:

 I'm seeing a number of emails like [EMAIL PROTECTED] coming in to my
 server. They are from different users. Since the local user doesn't
 exist, qmail is attempting to bounce the message back to the sender.
 Most of these are failing, the messages are obviously spam.
 
 I'm running vpopmail on the domains in question. Is there any way to
 configure vpopmail or qmail to reject email if the local address
 doesn't exist, or to silently trash the email?

You can delete them pretty easily if you create a catchall account and
then tell it to delete all e-mail delivered to that account. Something
like junk or spamtrap is usually a good name for the catchall
account, if you're making it strictly to dump all mail coming to users
that don't exist. Make sure you don't have any valid e-mail going to
that catchall before you start deleting them though.

HTH,
Jacob

- 
GnuPG Key: 1024D/16377135

Where do you want to go today? Don't ask Microsoft for directions.


pgp0.pgp
Description: PGP signature


Re: [vchkpw] bounce maybe used to relay spam

2004-01-27 Thread Oden Eriksson
tisdagen den 27 januari 2004 20.59 skrev Ken Jones:
 On Tuesday 27 January 2004 1:57 pm, Tom Jackson wrote:
  I'm seeing a number of emails like [EMAIL PROTECTED] coming in to my
  server. They are from different users. Since the local user doesn't
  exist, qmail is attempting to bounce the message back to the sender.
  Most of these are failing, the messages are obviously spam.
 
  I'm running vpopmail on the domains in question. Is there any way to
  configure vpopmail or qmail to reject email if the local address doesn't
  exist, or to silently trash the email?
 
  TIA
 
  tom jackson

 Set your bounce option to delete. The .qmail-default file will look like

 | /home/vpopmail/bin/vdelivermail '' delete

 Or, try to apply the check user patch to the smtp server so the
 email never makes it into your queue.

Would it be possible to make a domain that uses this technique but forward all 
mail to another server, as a gateway?