RE: [vchkpw] SMTP authentication not work
Hi, Thank you for your help, but it is a problem on vchkpw. I did "chmod ug+s /home/vpopmail/bin/vchkpw" and all work. -Message d'origine- De : Remo Mattei [mailto:r...@italy1.com] Envoyé : jeudi 5 mai 2011 18:23 À : vchkpw@inter7.com Objet : Re: [vchkpw] SMTP authentication not work Here is mine Run file. #!/bin/sh QMAILDUID=`id -u vpopmail` NOFILESGID=`id -g vpopmail` MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` export QMAILQUEUE=/var/qmail/bin/simscan export NOP0FCHECK=1 export SIMSCAN_DEBUG=0 #IPADDR="208.53.44.231" exec /usr/local/bin/softlimit -m 2500 \ /usr/local/bin/tcpserver -v -H -R -l 0 \ -x /home/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \ -u "$QMAILDUID" -g "$NOFILESGID" 0 25 \ /usr/local/bin/rblsmtpd \ -b -r "x \ -B -r " \ /var/qmail/bin/qmail-smtpd \ /home/vpopmail/bin/vchkpw /bin/true 2>&1 On 5/5/11 2:05 AM, "OVH" wrote: >Hi, > >Since few days I try smtp-auth and chkuser on qmail 1.03. >I managed to apply the patch manually, when tested sending smtp-auth it >never authenticate using vpopmail. > >In my config I have: > >env - PATH="/var/qmail/bin:/usr/local/bin" CHKUSER_START="DOMAIN" \ >tcpserver -v -H -R -x /etc/tcp.smtp.cdb -c100 -u508 -g503 0 smtp \ >/var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw true 2>&1 \ >| /usr/local/bin/tai64n \ >| /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog s50 >n60 /var/log/qmailsmtp/ & > > >and gives me the test with telnet: >220 x.net ESMTP >ehlo x.net >250- x.net >250-PIPELINING >250-STARTTLS >250-8BITMIME >250-SIZE 0 >250 AUTH LOGIN PLAIN >auth login >334 VXNlcm5hbWU6 >UUU >334 UGFzc3dvcmQ6 >PPP >535 authentication failed (#5.7.1) > >You know why it does not work? > > > > > > > !DSPAM:4dc2d36f32715688310734!
Re: [vchkpw] SMTP authentication not work
Here is mine Run file. #!/bin/sh QMAILDUID=`id -u vpopmail` NOFILESGID=`id -g vpopmail` MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` export QMAILQUEUE=/var/qmail/bin/simscan export NOP0FCHECK=1 export SIMSCAN_DEBUG=0 #IPADDR="208.53.44.231" exec /usr/local/bin/softlimit -m 2500 \ /usr/local/bin/tcpserver -v -H -R -l 0 \ -x /home/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \ -u "$QMAILDUID" -g "$NOFILESGID" 0 25 \ /usr/local/bin/rblsmtpd \ -b -r "x \ -B -r " \ /var/qmail/bin/qmail-smtpd \ /home/vpopmail/bin/vchkpw /bin/true 2>&1 On 5/5/11 2:05 AM, "OVH" wrote: >Hi, > >Since few days I try smtp-auth and chkuser on qmail 1.03. >I managed to apply the patch manually, when tested sending smtp-auth it >never authenticate using vpopmail. > >In my config I have: > >env - PATH="/var/qmail/bin:/usr/local/bin" CHKUSER_START="DOMAIN" \ >tcpserver -v -H -R -x /etc/tcp.smtp.cdb -c100 -u508 -g503 0 smtp \ >/var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw true 2>&1 \ >| /usr/local/bin/tai64n \ >| /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog s50 >n60 /var/log/qmailsmtp/ & > > >and gives me the test with telnet: >220 x.net ESMTP >ehlo x.net >250- x.net >250-PIPELINING >250-STARTTLS >250-8BITMIME >250-SIZE 0 >250 AUTH LOGIN PLAIN >auth login >334 VXNlcm5hbWU6 >UUU >334 UGFzc3dvcmQ6 >PPP >535 authentication failed (#5.7.1) > >You know why it does not work? > > > > > > > !DSPAM:4dc2cf0232711860913105!
RE: [vchkpw] SMTP authentication not work
Hi, In my /var/log/mail.log, I have : May 5 09:39:06 web1 vpopmail[4328]: vchkpw-smtp: vpopmail user not found postmas...@xxx.net:82.233.xxx.xxx May 5 09:40:04 web1 imapd: Connection, ip=[:::82.233.xxx.xxx] May 5 09:40:04 web1 imapd: LOGIN, user=postmas...@xxx.net, ip=[:::82.233.xxx.xxx], protocol=IMAP May 5 09:40:54 web1 imapd: LOGOUT, user=postmas...@xxx.net, ip=[:::82.233.xxx.xxx], headers=0, body=0, time=178 and in /var/log/qmailsmtp/ current, I have : @40004dc253f80a2dc044 tcpserver: pid 4249 from 82.233.xxx.xxx @40004dc253f80a3f7384 tcpserver: ok 4249 xxx.net::::91.121. xxx.xxx:25 ::::82.233.xxx.xxx::61197 @40004dc253fd140b4f3c tcpserver: end 4249 status 256 @40004dc253fd140b4f3c tcpserver: status: 0/100 -Message d'origine- De : Tonix (Antonio Nati) [mailto:to...@interazioni.it] Envoyé : jeudi 5 mai 2011 10:11 À : vchkpw@inter7.com Objet : Re: [vchkpw] SMTP authentication not work You sould find in maillog the reason of failure. Regards, Tonino Il 05/05/2011 10:05, OVH ha scritto: > Hi, > > Since few days I try smtp-auth and chkuser on qmail 1.03. > I managed to apply the patch manually, when tested sending smtp-auth it > never authenticate using vpopmail. > > In my config I have: > > env - PATH="/var/qmail/bin:/usr/local/bin" CHKUSER_START="DOMAIN" \ > tcpserver -v -H -R -x /etc/tcp.smtp.cdb -c100 -u508 -g503 0 smtp \ > /var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw true 2>&1 \ > | /usr/local/bin/tai64n \ > | /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog s50 > n60 /var/log/qmailsmtp/& > > > and gives me the test with telnet: > 220 x.net ESMTP > ehlo x.net > 250- x.net > 250-PIPELINING > 250-STARTTLS > 250-8BITMIME > 250-SIZE 0 > 250 AUTH LOGIN PLAIN > auth login > 334 VXNlcm5hbWU6 > UUU > 334 UGFzc3dvcmQ6 > PPP > 535 authentication failed (#5.7.1) > > You know why it does not work? > > > > > -- Inter@zioniInterazioni di Antonio Nati http://www.interazioni.it to...@interazioni.it !DSPAM:4dc2623a32711728120213!
Re: [vchkpw] SMTP authentication not work
You sould find in maillog the reason of failure. Regards, Tonino Il 05/05/2011 10:05, OVH ha scritto: Hi, Since few days I try smtp-auth and chkuser on qmail 1.03. I managed to apply the patch manually, when tested sending smtp-auth it never authenticate using vpopmail. In my config I have: env - PATH="/var/qmail/bin:/usr/local/bin" CHKUSER_START="DOMAIN" \ tcpserver -v -H -R -x /etc/tcp.smtp.cdb -c100 -u508 -g503 0 smtp \ /var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw true 2>&1 \ | /usr/local/bin/tai64n \ | /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog s50 n60 /var/log/qmailsmtp/& and gives me the test with telnet: 220 x.net ESMTP ehlo x.net 250- x.net 250-PIPELINING 250-STARTTLS 250-8BITMIME 250-SIZE 0 250 AUTH LOGIN PLAIN auth login 334 VXNlcm5hbWU6 UUU 334 UGFzc3dvcmQ6 PPP 535 authentication failed (#5.7.1) You know why it does not work? -- Inter@zioniInterazioni di Antonio Nati http://www.interazioni.it to...@interazioni.it !DSPAM:4dc25b8e32711010717463!
[vchkpw] SMTP authentication not work
Hi, Since few days I try smtp-auth and chkuser on qmail 1.03. I managed to apply the patch manually, when tested sending smtp-auth it never authenticate using vpopmail. In my config I have: env - PATH="/var/qmail/bin:/usr/local/bin" CHKUSER_START="DOMAIN" \ tcpserver -v -H -R -x /etc/tcp.smtp.cdb -c100 -u508 -g503 0 smtp \ /var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw true 2>&1 \ | /usr/local/bin/tai64n \ | /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog s50 n60 /var/log/qmailsmtp/ & and gives me the test with telnet: 220 x.net ESMTP ehlo x.net 250- x.net 250-PIPELINING 250-STARTTLS 250-8BITMIME 250-SIZE 0 250 AUTH LOGIN PLAIN auth login 334 VXNlcm5hbWU6 UUU 334 UGFzc3dvcmQ6 PPP 535 authentication failed (#5.7.1) You know why it does not work? !DSPAM:4dc25a6e32714504615253!
Re: [vchkpw] smtp authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: > Dear All, > > How can i force my users to provide username and password for sending > mails also.I have installed the Auth patch but dont have a clue how to > force it. I know you've received a few replies, but you might also be interested in eMPF. Not only does it give you the option of requiring SMTP authentication to send mail, it also has messaging policies built in, which reduce spam automatically. http://www.qmailwiki.org/EMPF - -- /* Matt Brookings <[EMAIL PROTECTED]> GnuPG Key B7B54216 Software developer Systems technician Inter7 Internet Technologies, Inc. (815)776-9465 */ -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFDjzgGhzYRRre1QhYRAg6ZAJ4lK6pt4K4Vhla7MY38g77m4U4RUgCfe17b ENs9cMd/whdzPyojL2j1VYM= =U6X3 -END PGP SIGNATURE-
Re: [vchkpw] smtp authentication
On 2005-11-27, at 1318, [EMAIL PROTECTED] wrote: ok i know how to force users to provide username and password(ofcourse using jms's patch) for sending mail but what about the servers on the internet how they'll send mails to this server can i excluded say any ip to not be authenticated. it depends on what you mean by "ip not to be authenticated". three different things come to mind: (1) if you're worried about other servers doing normal deliveries to mailboxes which are handled by your server, as long as you don't set REQUIRE_AUTH or FORCE_TLS on the server, they will still be able to do normal deliveries. (2) if you want certain IP addresses to be able to relay (i.e. send mail anywhere without being required to AUTH first) you can add the line to your tcpserver access control file (normally /etc/tcp.smtp) with a line that sets RELAYCLIENT="". a few other people have already pointed this out. (3) if you want certain IP addresses to not be able to use AUTH at all, for example if you know that a certain IP block is full of spammers and you don't want them to use AUTH at all, even if they do know one of your users' passwords... hrmmm... it sounds like i might need to add a DENY_AUTH environment variable (no, it doesn't exist yet.) the closest you can get for right now is this: - make sure you're using at least version 6 of my combined patch - make sure the SMTP service correctly supports STARTTLS - do NOT use the option to "allow insecure AUTH" (you shouldn't use this option anyway) - add a line to your tcpserver access control file which has DENY_TLS="" for their IP range this will prevent them from being able to use STARTTLS, and without TLS the AUTH command won't be available... which means they will be limited to standard deliveries to your domains only, and never able to use AUTH and gain permission to relay. of course this means your users will have to use STARTTLS before they can AUTH, but that's just a matter of turning on a checkbox in their mail program. -- | John M. Simpson - KG4ZOW - Programmer At Large | | http://www.jms1.net/ <[EMAIL PROTECTED]> | -- | Mac OS X proves that it's easier to make UNIX | | pretty than it is to make Windows secure. | -- PGP.sig Description: This is a digitally signed message part
Re: [vchkpw] smtp authentication
Dear all, relay(ie tcp.smtp file) only helps if the mails are being sent to someother outer domains but what about if the mails are being sent to the mailboxes on this server only . idont want any of the employee of this organisation to send mail posing as the ceo of the organisation. > > Never allow relay. Only allow 127.0.0.1 (localhost) to send email > using SMTP. when your users authenicate the message will relay from > localhost and not their IP address. This also prevents servers from > using your SMTP server to route messages through it. > > When SMTP auth is enabled, you will need to configure your email client > like outlook, outlooke express etc MY SERVER REQUIRES AUTHENICATION for > the outbound SMTP server settings. > > Hope that helps. > > Cheers. > > > > */Jeff Norris/* > /~ Web Hosting ~ VPN Solutions ~ Network Management ~ > Design, deploy, kick ass. / > *N*orris*Techs* dot net > http://www.norristechs.net > *AOL IM or Yahoo IM: _ ntshelper _* > > > > [EMAIL PROTECTED] wrote: > >>Dear All, >> >>ok i know how to force users to provide username and password(ofcourse >>using jms's patch) for sending mail but what about the servers on the >>internet how they'll send mails to this server can i excluded say any ip >>to not be authenticated. >> >>Regards >> >> >>RM >> >> >> >> >> >>>On Sat, November 26, 2005 3:13 am, Jimmy said: >>> >>> [EMAIL PROTECTED] wrote: >Dear All, > >How can i force my users to provide username and password for sending >mails also.I have installed the Auth patch but dont have a clue how to >force it. > >Regards >RM > > > The qmail toaster patch on shupp.org will do the trick, >>>You can also take a look at John Simpson's site: >>>http://qmail.jms1.net >>> >>> >>> >>> >> >> >> >> >> >> >> >
Re: [vchkpw] smtp authentication
Never allow relay. Only allow 127.0.0.1 (localhost) to send email using SMTP. when your users authenicate the message will relay from localhost and not their IP address. This also prevents servers from using your SMTP server to route messages through it. When SMTP auth is enabled, you will need to configure your email client like outlook, outlooke express etc MY SERVER REQUIRES AUTHENICATION for the outbound SMTP server settings. Hope that helps. Cheers. Jeff Norris ~ Web Hosting ~ VPN Solutions ~ Network Management ~ Design, deploy, kick ass. NorrisTechs dot net http://www.norristechs.net AOL IM or Yahoo IM: ntshelper [EMAIL PROTECTED] wrote: Dear All, ok i know how to force users to provide username and password(ofcourse using jms's patch) for sending mail but what about the servers on the internet how they'll send mails to this server can i excluded say any ip to not be authenticated. Regards RM On Sat, November 26, 2005 3:13 am, Jimmy said: [EMAIL PROTECTED] wrote: Dear All, How can i force my users to provide username and password for sending mails also.I have installed the Auth patch but dont have a clue how to force it. Regards RM The qmail toaster patch on shupp.org will do the trick, You can also take a look at John Simpson's site: http://qmail.jms1.net
Re: [vchkpw] smtp authentication
On Sun, 2005-11-27 at 23:48 +0530, [EMAIL PROTECTED] wrote: > Dear All, > > ok i know how to force users to provide username and password(ofcourse > using jms's patch) for sending mail but what about the servers on the > internet how they'll send mails to this server can i excluded say any ip > to not be authenticated. In ~/vpopmail/etc/tcp.smtp add lines such as 1.2.3.4:allow,RELAYCLIENT="" 5.6.7.:allow,RELAYCLIENT="" to allow the ip 1.2.3.4 and the range 5.6.7.0/24 to relay. Dont forget to rebuild the tcpserver file. Shane
Re: [vchkpw] smtp authentication
Dear All, ok i know how to force users to provide username and password(ofcourse using jms's patch) for sending mail but what about the servers on the internet how they'll send mails to this server can i excluded say any ip to not be authenticated. Regards RM > > > On Sat, November 26, 2005 3:13 am, Jimmy said: >> [EMAIL PROTECTED] wrote: >>> Dear All, >>> >>> How can i force my users to provide username and password for sending >>> mails also.I have installed the Auth patch but dont have a clue how to >>> force it. >>> >>> Regards >>> RM >>> >> >> The qmail toaster patch on shupp.org will do the trick, >> > > You can also take a look at John Simpson's site: > http://qmail.jms1.net > >
Re: [vchkpw] smtp authentication
On Sat, November 26, 2005 3:13 am, Jimmy said: > [EMAIL PROTECTED] wrote: >> Dear All, >> >> How can i force my users to provide username and password for sending >> mails also.I have installed the Auth patch but dont have a clue how to >> force it. >> >> Regards >> RM >> > > The qmail toaster patch on shupp.org will do the trick, > You can also take a look at John Simpson's site: http://qmail.jms1.net
Re: [vchkpw] smtp authentication
[EMAIL PROTECTED] wrote: Dear All, How can i force my users to provide username and password for sending mails also.I have installed the Auth patch but dont have a clue how to force it. Regards RM The qmail toaster patch on shupp.org will do the trick,
[vchkpw] smtp authentication
Dear All, How can i force my users to provide username and password for sending mails also.I have installed the Auth patch but dont have a clue how to force it. Regards RM
Re: [vchkpw] smtp authentication
Payal Rathod wrote: On Wed, May 18, 2005 at 08:54:15AM -0500, DAve wrote: Payal Rathod wrote: We have been very happy with the smtp-auth that is included in the contrib directory of vpopmail. It uses vchkpw so checking against the system users, vpopmail users in cdb, vpopmail users in SQL, all work fine. Great. Does it work with multiple domains too and is it easy to set up? I use it with 250+ domains and had it setup in minutes. See this thread for my issue on smtp-auth, and an offer of a solution from Jason Wilkinson. http://msgs.securepoint.com/cgi-bin/get/qmail0505/57/1/4/1.html DAve
Re: [vchkpw] smtp authentication
On Wed, May 18, 2005 at 08:54:15AM -0500, DAve wrote: > Payal Rathod wrote: > We have been very happy with the smtp-auth that is included in the > contrib directory of vpopmail. It uses vchkpw so checking against the > system users, vpopmail users in cdb, vpopmail users in SQL, all work > fine. Great. Does it work with multiple domains too and is it easy to set up? With warm regards, -Payal
Re: [vchkpw] smtp authentication
On Wednesday, May 18 at 09:12 AM, quoth Payal Rathod: Can someone tell me which kind of SMTP-Auth patch (or qmail-smtpd replacement) integrates properly with vpopmail+qmail setup? I don't want to use mailfront for the same but I am open to other ideas where SMTP-Auth module can check the password from vpasswd files of vpopmail. I've been using the patch available here: http://www.fehcom.de/qmail/smtpauth.html for about three years on a production machine with vpopmail without trouble. ~Kyle -- Our lives begin to end the day we become silent about things that matter. -- Martin Luther King Jr. signature.asc Description: Digital signature
Re: [vchkpw] smtp authentication
Payal Rathod wrote: Hi, Can someone tell me which kind of SMTP-Auth patch (or qmail-smtpd replacement) integrates properly with vpopmail+qmail setup? I don't want to use mailfront for the same but I am open to other ideas where SMTP-Auth module can check the password from vpasswd files of vpopmail. Thanks for the replies in advance. With warm regards, -Payal We have been very happy with the smtp-auth that is included in the contrib directory of vpopmail. It uses vchkpw so checking against the system users, vpopmail users in cdb, vpopmail users in SQL, all work fine. DAve
[vchkpw] smtp authentication
Hi, Can someone tell me which kind of SMTP-Auth patch (or qmail-smtpd replacement) integrates properly with vpopmail+qmail setup? I don't want to use mailfront for the same but I am open to other ideas where SMTP-Auth module can check the password from vpasswd files of vpopmail. Thanks for the replies in advance. With warm regards, -Payal
Re: [vchkpw] SMTP Authentication
Thank you Tom, I just read through part of the page there and it goes through everything I want as I want to add Spam/Virus Scanning before the email gets to my customer's as well and this looks like it has everything I need so far :) Guess my mail will be going down to night while I work on getting this all up and running :) Regards, Rob G [EMAIL PROTECTED] - Original Message - From: Tom Collins To: vpopmail list Sent: Friday, March 28, 2003 9:47 AM Subject: Re: [vchkpw] SMTP Authentication On Friday, March 28, 2003, at 07:21 AM, Rob G wrote: How would I go about enabling SMTP authentication with VPOPMAIL to have my users authenticate with the server via SMTP instead of the POP before SMTP. I have found that this is the easiest way for my customer's instead of expaining how/why the have to check their mail before sending mail.There are various patches for Qmail to support SMTP AUTH.Here's one that Bill Shupp recommends in his toaster document: (See for more info on Bill's excellent document on setting up a new qmail-based server with all the bells and whistles.)--Tom Collins[EMAIL PROTECTED]
Re: [vchkpw] SMTP Authentication
On Friday, March 28, 2003, at 07:21 AM, Rob G wrote: How would I go about enabling SMTP authentication with VPOPMAIL to have my users authenticate with the server via SMTP instead of the POP before SMTP. I have found that this is the easiest way for my customer's instead of expaining how/why the have to check their mail before sending mail. There are various patches for Qmail to support SMTP AUTH. Here's one that Bill Shupp recommends in his toaster document: (See for more info on Bill's excellent document on setting up a new qmail-based server with all the bells and whistles.) -- Tom Collins [EMAIL PROTECTED]
[vchkpw] SMTP Authentication
Hi all, How would I go about enabling SMTP authentication with VPOPMAIL to have my users authenticate with the server via SMTP instead of the POP before SMTP. I have found that this is the easiest way for my customer's instead of expaining how/why the have to check their mail before sending mail. Regards, Rob G [EMAIL PROTECTED]
Re: [vchkpw] SMTP Authentication
I have looked through some of the files. The Following is in /home-of-vpopmail/etc/open-smtp :allow,RELAYCLIENT="",RBLSMTPD="" 1040319290:allow,RELAYCLIENT="",RBLSMTPD="" 1040329310 So it does not seem that this file is being read by Qmail. Hope this helps some more :) Regards, Rob G - Original Message - From: Rob G To: Vchkpw Sent: Thursday, December 19, 2002 4:08 PM Subject: [vchkpw] SMTP Authentication Ok I have the Virtual Directories working proplerly for the domain. I did a oopsie on the install and tried dropping the mail into ./Maildir instead of ./Maildir/ which was the problem. Now I have the problem that I am unable to send email what-so-ever from remote systems through the SMTP server of QMail. I thought I read that vpopmail does this if it is compiled it the --enable-roaming-users=y command Not sure but this is not working at all. It tells me whenever I try to send mail that the address is not in the rcpthosts file. Anyone have any ideas? Regards, Rob G
[vchkpw] SMTP Authentication
Ok I have the Virtual Directories working proplerly for the domain. I did a oopsie on the install and tried dropping the mail into ./Maildir instead of ./Maildir/ which was the problem. Now I have the problem that I am unable to send email what-so-ever from remote systems through the SMTP server of QMail. I thought I read that vpopmail does this if it is compiled it the --enable-roaming-users=y command Not sure but this is not working at all. It tells me whenever I try to send mail that the address is not in the rcpthosts file. Anyone have any ideas? Regards, Rob G
