RE: [vchkpw] /var/mail/vpopmail
Hi Matias,
thanks for the tip. Nothing strange here. Can you please take a look and
see if you find anything weird?
~vpopmail/yimports.com/# cat .qmail-default
| maildrop mailfilter
~vpopmail/yimports.com/# cat mailfilter
#!/bin/bash
VPOP="| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox"
VHOME=`/home/vpopmail/bin/vuserinfo -d [EMAIL PROTECTED]
if ( $SIZE < 262144 )
{
exception {
xfilter "/usr/bin/spamc -f -d 127.0.0.1 -u [EMAIL PROTECTED]"
}
}
if (/^X-Spam-Flag: *YES/)
{
# try filtering it using user-defined rules
exception {
include $VHOME/Maildir/.mailfilter
}
# then try delivering it to a Spam folder
exception {
# to "$VPOP"
to "$VHOME/Maildir/.Spam/"
}
# ah well, I guess they'll just have to live with disappointment
exception {
to "$VPOP"
}
}
else
{
exception {
include $VHOME/Maildir/.mailfilter
}
exception {
to "$VPOP"
}
}
/var/mail# head -n 30 vpopmail
>From vpopmail Thu Feb 12 23:10:09 2004
Received: (qmail 1652 invoked from network); 10 Feb 2004 10:50:23 -
Received: from adslfixo-b3-115-147.telepac.pt (HELO halconviajes.com)
(213.13.115.147)
by cb.yimports.com with SMTP; 10 Feb 2004 10:50:23 -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: hello
Date: Tue, 10 Feb 2004 10:53:17 +
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000__E0E0A74D.C039BD2E"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
--=_NextPart_000__E0E0A74D.C039BD2E
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
and that's all there is... Ah, about that /var/mail/vpopmail mbox file,
there's no [EMAIL PROTECTED] address so i suppose that should be a bounce
email.
Again, thanks for all your help.
Regards,
Celso
On Sex, 2004-02-13 at 01:31, Matias G. Lambert ( OSInet ) wrote:
> It is possible that you have a default delivery to a mbox.
> Take a look at any .qmail files in /var/qmail/alias, and .qmail-default
> files in the domain directories ( /home/vpopmail/domain/directory.com/ ) .
> If you have the email you can see if they are a bounced messages, or what is
> the delivery route ( send us the header ).
> I hope that I help,
>
> Matias Lambert
> OSInet Telecomunicaciones
> Capital Federal - Buenos Aires
> Argentina - CA1185ACA
> http://www.osinet.com.ar
>
>
>
> > -Mensaje original-----
> > De: Celso Pinto [mailto:[EMAIL PROTECTED]
> > Enviado el: Jueves, 12 de Febrero de 2004 08:43 p.m.
> > Para: [EMAIL PROTECTED]
> > Asunto: Re: [vchkpw] /var/mail/vpopmail
> >
> >
> > No, not really... only /usr/sbin/sendmail and /usr/lib/sendmail both
> > symlinks to qmail binary replacement.
> >
> > On Qui, 2004-02-12 at 23:18, Marcin Sołtysiak wrote:
> > > Hi
> > > > I have Vpopmail installed on my server and with this new mydoom worm i
> > > > noticed how quickly I was running out of disk space.
> > > >
> > > > Doing some du . -s I found out that vpopmail has been feeding an mbox
> > > > file at /var/mail named vpopmail.
> > > >
> > >
> > > Perhaps you got several "sendmail" binaries and one of them is
> > not a qmail
> > > replacement. It looks like mail to ordinary MBOX has been delivered as a
> > > local delivery which is done mostly by sendmail binary. If it
> > was and old
> > > ona, like from postfix or pure sendmail packages it could
> > deliver to wrong
> > > place.
> > >
> > > Solt
> > >
> > >
> >
> >
> >
RE: [vchkpw] /var/mail/vpopmail
It is possible that you have a default delivery to a mbox. Take a look at any .qmail files in /var/qmail/alias, and .qmail-default files in the domain directories ( /home/vpopmail/domain/directory.com/ ) . If you have the email you can see if they are a bounced messages, or what is the delivery route ( send us the header ). I hope that I help, Matias Lambert OSInet Telecomunicaciones Capital Federal - Buenos Aires Argentina - CA1185ACA http://www.osinet.com.ar > -Mensaje original- > De: Celso Pinto [mailto:[EMAIL PROTECTED] > Enviado el: Jueves, 12 de Febrero de 2004 08:43 p.m. > Para: [EMAIL PROTECTED] > Asunto: Re: [vchkpw] /var/mail/vpopmail > > > No, not really... only /usr/sbin/sendmail and /usr/lib/sendmail both > symlinks to qmail binary replacement. > > On Qui, 2004-02-12 at 23:18, Marcin Sołtysiak wrote: > > Hi > > > I have Vpopmail installed on my server and with this new mydoom worm i > > > noticed how quickly I was running out of disk space. > > > > > > Doing some du . -s I found out that vpopmail has been feeding an mbox > > > file at /var/mail named vpopmail. > > > > > > > Perhaps you got several "sendmail" binaries and one of them is > not a qmail > > replacement. It looks like mail to ordinary MBOX has been delivered as a > > local delivery which is done mostly by sendmail binary. If it > was and old > > ona, like from postfix or pure sendmail packages it could > deliver to wrong > > place. > > > > Solt > > > > > > > BEGIN:VCARD VERSION:2.1 N:Lambert;Matias;German FN:Matias Lambert ( OSInet ) ORG:OSInet TeleComunicaciones TEL;WORK;VOICE:+54 11 4861 5616 TEL;HOME;VOICE:+54 11 4861 5616 TEL;CELL;VOICE:+54 11 (15) 4429 9469 TEL;WORK;FAX:+54 11 4861 5616 TEL;HOME;FAX:+54 11 4861 5616 ADR;WORK:;;Panamá 933 12 E;Capital Federal;Buenos Aires;C1185ACA;Argentina LABEL;WORK;ENCODING=QUOTED-PRINTABLE:Panam=E1 933 12 E=0D=0ACapital Federal, Buenos Aires C1185ACA=0D=0AArgentina URL;WORK:http://www.osinet.com.ar EMAIL;PREF;INTERNET:[EMAIL PROTECTED] REV:20030313T150013Z END:VCARD
Re: [vchkpw] /var/mail/vpopmail
No, not really... only /usr/sbin/sendmail and /usr/lib/sendmail both symlinks to qmail binary replacement. On Qui, 2004-02-12 at 23:18, Marcin Sołtysiak wrote: > Hi > > I have Vpopmail installed on my server and with this new mydoom worm i > > noticed how quickly I was running out of disk space. > > > > Doing some du . -s I found out that vpopmail has been feeding an mbox > > file at /var/mail named vpopmail. > > > > Perhaps you got several "sendmail" binaries and one of them is not a qmail > replacement. It looks like mail to ordinary MBOX has been delivered as a > local delivery which is done mostly by sendmail binary. If it was and old > ona, like from postfix or pure sendmail packages it could deliver to wrong > place. > > Solt > >
Re: [vchkpw] /var/mail/vpopmail
Hi > I have Vpopmail installed on my server and with this new mydoom worm i > noticed how quickly I was running out of disk space. > > Doing some du . -s I found out that vpopmail has been feeding an mbox > file at /var/mail named vpopmail. > Perhaps you got several "sendmail" binaries and one of them is not a qmail replacement. It looks like mail to ordinary MBOX has been delivered as a local delivery which is done mostly by sendmail binary. If it was and old ona, like from postfix or pure sendmail packages it could deliver to wrong place. Solt
RE: [vchkpw] /var/mail/vpopmail
My /var/mail/vpopmail file is still growing... :-(
Is there someone on the list that understand what's going wrong?
> What does your /var/qmail/rc file look like?
My qmail/rc file looks like this:
===START===
#!/bin/sh
# Using stdout for logging
# Using control/defaultdelivery from qmail-local to deliver messages by
default
exec env - PATH="/var/qmail/bin:$PATH" \
qmail-start "`cat /var/qmail/control/defaultdelivery`"
===END===
/var/qmail/control/defaultdelivery looks like this:
===START===
|dot-forward .forward
|preline procmail
===END===
Any suggestions?
Thanks in advance!
Jasper
> -Original Message-
> From: Jasper Metselaar [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 28, 2003 7:38 AM
> To: [EMAIL PROTECTED]
> Subject: [vchkpw] Re /var/mail/vpopmail
>
>
> Doublebounce settings and .qmail files are ok.
>
> Below is a header of a message dumped to /var/mail/vpopmail. As you can
> see, this is not a bounce message... it's the original. When I sent
> this message to a non existing address the message was dumped to
> /var/mail/vpopmail and a non-delivery report was sent to the originator
> (me).
> START
> From vpopmail Thu Aug 28 16:31:45 2003
> Received: (qmail 4184 invoked from network); 28 Aug 2003 14:31:45 -
> Received: from xxx.xxx.xxx (xxx.xxx.xxx.xx)
> by 0 with SMTP; 28 Aug 2003 14:31:45 -
> Received: from [xxx.xxx.xx.xxx] (helo=..xxx)
>by xx.x.xxx with esmtp (Exim 3.36 #1)
>id 19sNoN-0001mk-00
>for [EMAIL PROTECTED]; Thu, 28 Aug 2003 16:31:43 +0200
> Received: by wfwin3 with Internet Mail Service (5.5.2653.19)
>id ; Thu, 28 Aug 2003 16:31:39 +0200
> Message-ID: <[EMAIL PROTECTED]>
> From: "Metselaar, J.M." <[EMAIL PROTECTED]>
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: This is a test
> Date: Thu, 28 Aug 2003 16:30:29 +0200
> MIME-Version: 1.0
> X-Mailer: Internet Mail Service (5.5.2653.19)
> Content-Type: text/plain
> END
>
> For some reason I think the problem is in my maildrop script, but I
> can't figure out where. The script is below:
>
> START
> import EXT
> import HOST
> VPOP="| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox"
> VHOME=`/home/vpopmail/bin/vuserinfo -d [EMAIL PROTECTED]
>
> if ( $SIZE < 262144 )
> {
> exception {
> xfilter "/usr/bin/spamc -f -u [EMAIL PROTECTED]"
> }
> }
> if (/^X-Spam-Flag: *YES/)
> {
> # try filtering it using user-defined rules
> exception {
> include $VHOME/Maildir/.mailfilter
>}
> # then try delivering it to a Spam folder
> exception {
> # to "$VPOP"
> to "$VHOME/Maildir/"
>}
>
># ah well, I guess they'll just have to live with disappointment
>
> exception {
> to "$VPOP"
>}
> }
>
> else {
>exception {
>include $VHOME/Maildir/.mailfilter
> }
>exception {
>to "$VPOP"
> }
>}
> END
> Any ideas?
>
> Thanks in advance!
>
> - Jasper
>
>
>> I don't think it's vpopmail that's dropping it into that file. It
>> sounds more like mail is being delivered to the vpopmail user on your
>> local system.> What does qmail have for it's double bounce account
>> (run /var/qmail/bin/qmail-showctl to see) and also what does your
>> /var/qmail/alias directory look like.. more specifically the .qmail
>> files inside it.
>>
>>> -Original Message-
>>> From: Jasper Metselaar [mailto:[EMAIL PROTECTED]
>>> Sent: Wednesday, August 27, 2003 3:04 AM
>>> To: [EMAIL PROTECTED]
>>> Subject: [vchkpw] /var/mail/vpopmail
>>>
>>>
>>> Hi,
>>>
>>> Vpopmail is running fine on my server, but there is on thing that's
>>> strange (in my opinion, anyway ;-)):There is a very fast growing
>>> file: /var/mail/vpopmail
>>>
>>> It looks like vpopmail is dumping undeliverable mail into this file.
>>> Is this normal or is there a misconfiguration somewhere?
>>> Thanks!
>>>
>>> - Jasper
RE: [vchkpw] /var/mail/vpopmail
> What does your /var/qmail/rc file look like?
My qmail/rc file looks like this:
===START===
#!/bin/sh
# Using stdout for logging
# Using control/defaultdelivery from qmail-local to deliver messages by
default
exec env - PATH="/var/qmail/bin:$PATH" \
qmail-start "`cat /var/qmail/control/defaultdelivery`"
===END===
/var/qmail/control/defaultdelivery looks like this:
===START===
|dot-forward .forward
|preline procmail
===END===
Any suggestions?
Jasper
> -Original Message-
> From: Jasper Metselaar [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 28, 2003 7:38 AM
> To: [EMAIL PROTECTED]
> Subject: [vchkpw] Re /var/mail/vpopmail
>
>
> Doublebounce settings and .qmail files are ok.
>
> Below is a header of a message dumped to /var/mail/vpopmail. As you can
> see, this is not a bounce message... it's the original. When I sent
> this message to a non existing address the message was dumped to
> /var/mail/vpopmail and a non-delivery report was sent to the originator
> (me).
> START
> From vpopmail Thu Aug 28 16:31:45 2003
> Received: (qmail 4184 invoked from network); 28 Aug 2003 14:31:45 -
> Received: from xxx.xxx.xxx (xxx.xxx.xxx.xx)
> by 0 with SMTP; 28 Aug 2003 14:31:45 -
> Received: from [xxx.xxx.xx.xxx] (helo=..xxx)
>by xx.x.xxx with esmtp (Exim 3.36 #1)
>id 19sNoN-0001mk-00
>for [EMAIL PROTECTED]; Thu, 28 Aug 2003 16:31:43 +0200
> Received: by wfwin3 with Internet Mail Service (5.5.2653.19)
>id ; Thu, 28 Aug 2003 16:31:39 +0200
> Message-ID: <[EMAIL PROTECTED]>
> From: "Metselaar, J.M." <[EMAIL PROTECTED]>
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: This is a test
> Date: Thu, 28 Aug 2003 16:30:29 +0200
> MIME-Version: 1.0
> X-Mailer: Internet Mail Service (5.5.2653.19)
> Content-Type: text/plain
> END
>
> For some reason I think the problem is in my maildrop script, but I
> can't figure out where. The script is below:
>
> START
> import EXT
> import HOST
> VPOP="| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox"
> VHOME=`/home/vpopmail/bin/vuserinfo -d [EMAIL PROTECTED]
>
> if ( $SIZE < 262144 )
> {
> exception {
> xfilter "/usr/bin/spamc -f -u [EMAIL PROTECTED]"
> }
> }
> if (/^X-Spam-Flag: *YES/)
> {
> # try filtering it using user-defined rules
> exception {
> include $VHOME/Maildir/.mailfilter
>}
> # then try delivering it to a Spam folder
> exception {
> # to "$VPOP"
> to "$VHOME/Maildir/"
>}
>
># ah well, I guess they'll just have to live with disappointment
>
> exception {
> to "$VPOP"
>}
> }
>
> else {
>exception {
>include $VHOME/Maildir/.mailfilter
> }
>exception {
>to "$VPOP"
> }
>}
> END
> Any ideas?
>
> Thanks in advance!
>
> - Jasper
>
>
>> I don't think it's vpopmail that's dropping it into that file. It
>> sounds more like mail is being delivered to the vpopmail user on your
>> local system.> What does qmail have for it's double bounce account
>> (run /var/qmail/bin/qmail-showctl to see) and also what does your
>> /var/qmail/alias directory look like.. more specifically the .qmail
>> files inside it.
>>
>>> -Original Message-
>>> From: Jasper Metselaar [mailto:[EMAIL PROTECTED]
>>> Sent: Wednesday, August 27, 2003 3:04 AM
>>> To: [EMAIL PROTECTED]
>>> Subject: [vchkpw] /var/mail/vpopmail
>>>
>>>
>>> Hi,
>>>
>>> Vpopmail is running fine on my server, but there is on thing that's
>>> strange (in my opinion, anyway ;-)):There is a very fast growing
>>> file: /var/mail/vpopmail
>>>
>>> It looks like vpopmail is dumping undeliverable mail into this file.
>>> Is this normal or is there a misconfiguration somewhere?
>>> Thanks!
>>>
>>> - Jasper
RE: [vchkpw] /var/mail/vpopmail
> What does your /var/qmail/rc file look like?
>
> -Original Message-
> From: Jasper Metselaar [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 28, 2003 7:38 AM
> To: [EMAIL PROTECTED]
> Subject: [vchkpw] Re /var/mail/vpopmail
>
>
> Doublebounce settings and .qmail files are ok.
>
> Below is a header of a message dumped to /var/mail/vpopmail. As you can
> see, this is not a bounce message... it's the original. When I sent
> this message to a non existing address the message was dumped to
> /var/mail/vpopmail and a non-delivery report was sent to the originator
> (me).
> START
> From vpopmail Thu Aug 28 16:31:45 2003
> Received: (qmail 4184 invoked from network); 28 Aug 2003 14:31:45 -
> Received: from xxx.xxx.xxx (xxx.xxx.xxx.xx)
> by 0 with SMTP; 28 Aug 2003 14:31:45 -
> Received: from [xxx.xxx.xx.xxx] (helo=..xxx)
>by xx.x.xxx with esmtp (Exim 3.36 #1)
>id 19sNoN-0001mk-00
>for [EMAIL PROTECTED]; Thu, 28 Aug 2003 16:31:43 +0200
> Received: by wfwin3 with Internet Mail Service (5.5.2653.19)
>id ; Thu, 28 Aug 2003 16:31:39 +0200
> Message-ID: <[EMAIL PROTECTED]>
> From: "Metselaar, J.M." <[EMAIL PROTECTED]>
> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
> Subject: This is a test
> Date: Thu, 28 Aug 2003 16:30:29 +0200
> MIME-Version: 1.0
> X-Mailer: Internet Mail Service (5.5.2653.19)
> Content-Type: text/plain
> END
>
> For some reason I think the problem is in my maildrop script, but I
> can't figure out where. The script is below:
>
> START
> import EXT
> import HOST
> VPOP="| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox"
> VHOME=`/home/vpopmail/bin/vuserinfo -d [EMAIL PROTECTED]
>
> if ( $SIZE < 262144 )
> {
> exception {
> xfilter "/usr/bin/spamc -f -u [EMAIL PROTECTED]"
> }
> }
> if (/^X-Spam-Flag: *YES/)
> {
> # try filtering it using user-defined rules
> exception {
> include $VHOME/Maildir/.mailfilter
>}
> # then try delivering it to a Spam folder
> exception {
> # to "$VPOP"
> to "$VHOME/Maildir/"
>}
>
># ah well, I guess they'll just have to live with disappointment
>
> exception {
> to "$VPOP"
>}
> }
>
> else {
>exception {
>include $VHOME/Maildir/.mailfilter
> }
>exception {
>to "$VPOP"
> }
>}
> END
> Any ideas?
>
> Thanks in advance!
>
> - Jasper
>
>
>> I don't think it's vpopmail that's dropping it into that file. It
>> sounds more like mail is being delivered to the vpopmail user on your
>> local system.> What does qmail have for it's double bounce account
>> (run /var/qmail/bin/qmail-showctl to see) and also what does your
>> /var/qmail/alias directory look like.. more specifically the .qmail
>> files inside it.
>>
>>> -Original Message-
>>> From: Jasper Metselaar [mailto:[EMAIL PROTECTED]
>>> Sent: Wednesday, August 27, 2003 3:04 AM
>>> To: [EMAIL PROTECTED]
>>> Subject: [vchkpw] /var/mail/vpopmail
>>>
>>>
>>> Hi,
>>>
>>> Vpopmail is running fine on my server, but there is on thing that's
>>> strange (in my opinion, anyway ;-)):There is a very fast growing
>>> file: /var/mail/vpopmail
>>>
>>> It looks like vpopmail is dumping undeliverable mail into this file.
>>> Is this normal or is there a misconfiguration somewhere?
>>> Thanks!
>>>
>>> - Jasper
>
>
>
>
>
>
>
RE: [vchkpw] /var/mail/vpopmail
I don't think it's vpopmail that's dropping it into that file. It sounds more like mail is being delivered to the vpopmail user on your local system. What does qmail have for it's double bounce account (run /var/qmail/bin/qmail-showctl to see) and also what does your /var/qmail/alias directory look like.. more specifically the .qmail files inside it. -Original Message- From: Jasper Metselaar [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2003 3:04 AM To: [EMAIL PROTECTED] Subject: [vchkpw] /var/mail/vpopmail Hi, Vpopmail is running fine on my server, but there is on thing that's strange (in my opinion, anyway ;-)):There is a very fast growing file: /var/mail/vpopmail It looks like vpopmail is dumping undeliverable mail into this file. Is this normal or is there a misconfiguration somewhere? Thanks! - Jasper
