Re: [vchkpw] I'm stumped

2005-03-18 Thread Cream
Dave Goodrich wrote:
Good morning,
I've a problem that has been harassing me for a week now. I'm no 
qmail/vpopmail expert, but I've solved most all my problems over the 
years with the archives and The qmail Handbook. So I've done my share of 
troubleshooting and I think I have a pretty good grasp on how qmail 
vpopmail work. This one has me stumped.

I have a user who claims he is not getting emails. I can find the 
delivery using qmLogsort and the log shows the messages delivered just 
fine.

2005-03-17 11:33:37.868623500 new msg 3415139
2005-03-17 11:33:37.868763500 info msg 3415139: bytes 9817 from 
[EMAIL PROTECTED] qp 93531 uid 89
2005-03-17 11:34:37.429451500 end msg 3415139
2005-03-17 11:33:37.877803500 starting delivery 783121: msg 3415139 to 
local [EMAIL PROTECTED]
2005-03-17 11:34:08.086894500 delivery 783121: success: did_0+0+2/

Looks good, the users .qmail file looks like so,
# less /home/vpopmail/domains/x.com/.qmail-alicia\:hitchcock
|/home/vpopmail/bin/tls-spamtest.sh [EMAIL PROTECTED] 
[EMAIL PROTECTED]
|/home/vpopmail/bin/vdelivermail '' delete

Two program deliveries as it should be. Yet the user claims the message 
never arrived and the pop3d log is useless other than for mrtg. The 
tls-spamtest.sh script is a modified version of ifspamh and delivers all 
spam to the [EMAIL PROTECTED] account, which we check, and the messages are 
not arriving there. The spamd log shows the message was clean.

The odd thing is that I have another user claiming the same thing and 
again I can find the message. I even changed this users .qmail file to 
this,

# less /home/vpopmail/domains/x.com/.qmail-joel\:daas
/home/vpopmail/domains/x.com/0/joel.daas/Maildir/
/home/vpopmail/domains/x.com/0/joeltest/Maildir/
Every message he receives should deliver to the joeltest account *if* 
the delivery to joel.daas was successful. The logs show this. This 
delivery doesn't even use vdelivermail so I've effectivly cut everything 
I could from the delivery process.

2005-03-16 10:55:56.890400500 starting delivery 754144: msg 3415073 to 
local [EMAIL PROTECTED]
2005-03-16 10:55:57.559319500 delivery 754144: success: did_2+0+0/

Interestingly, the joeltest account has never lost a message. Whenever 
joel.daas claims he did not receive a message, I can find it in joeltest.

Now my take on this is the users have an issue with their mail clients, 
or they are a bit too quick with the delete button. How do I prove it? I 
can show where the logs say the message was handed to two programs or 
delivered to two files, but I can't prove the user got the message 
beyond that.
at the bottom of the .qmail file add a:
|/bin/ls -lat /home/vpopmail/domains/x.com/0/joel.daas/Maildir/ 
/var/log/joel.delivery.log

then touch /var/log/joel.delivery.log and chown vpopmail:vchkpw 
/var/log/joel.delivery.log

Now every time he recives a mail, it afterwards gives you a 
directorylisting, proving that the mail is there before his mail client 
fetches it.

/Kris


Re: [vchkpw] I'm stumped

2005-03-18 Thread Matt Brookings
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| Interestingly, the joeltest account has never lost a message. Whenever
| joel.daas claims he did not receive a message, I can find it in joeltest.
|
| Now my take on this is the users have an issue with their mail clients,
| or they are a bit too quick with the delete button. How do I prove it? I
| can show where the logs say the message was handed to two programs or
| delivered to two files, but I can't prove the user got the message
| beyond that.
|
| I've looked for any patches changes to qmail that might increase my
| logging, but no luck. There is a patch and a wrapper for qmail-pop3d but
| they only add username to the logging. I believe I need a way to record
| the message ID as the user is downloading it.
|
| The only change prior to this issue arrising has been the use of valias,
| but neither of these addresses are aliased.
|
| I am open to suggestions for next steps, criticisim of my
| troubleshooting, etc.
|
| Thanks,
|
| DAve
|
I think the point you made earlier, is that users make blaringly
obvious mistakes, quite frequently, when using mail clients.  They'll
lose a message in a thread, due a message filter, etc.  We've had
this same type of conversation with admins, etc.  What it comes down
to, aside from technical research of the problem, is that if you're
confident that the message is being delivered, tell them.  If you
can, get on the phone with them, send a message while they're on
the phone.  If they get it, tell them, Works fine.  This seems
more like a customer management issue at this point, but here are a
few things I'd tell the end-user to do in this situation.  Disable
message filters, sort messages in all folders by date and time,
rather than by thread, and disable any sort of in-client spam filtering
that might be deleting the message automatically or moving it to
a seperate folder.
Hope that helps a bit!
- --
/*
~Matt Brookings [EMAIL PROTECTED]   GnuPG Key 7D7E5F37
~Software developer Systems technician
~Inter7 Internet Technologies, Inc. (815)776-9465
*/
banner(Support open-source!\n);
void banner(char *arg) {
~  char b[50];
~  strcpy(b, arg);
~  printf(b);
}
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
iD8DBQFCOvC9/pZz8n1+XzcRAsd0AJ4kbASMs2SfmqLTg7Gwx5QaOrq73ACgoEgy
Lg6h8tzEUb0W2Djc5ogmOhE=
=FFSC
-END PGP SIGNATURE-


Re: [vchkpw] I'm stumped

2005-03-18 Thread Dave Goodrich
Cream wrote:
Dave Goodrich wrote:
Good morning,
I've a problem that has been harassing me for a week now. I'm no 
qmail/vpopmail expert, but I've solved most all my problems over the 
years with the archives and The qmail Handbook. So I've done my share 
of troubleshooting and I think I have a pretty good grasp on how qmail 
vpopmail work. This one has me stumped.

I have a user who claims he is not getting emails. I can find the 
delivery using qmLogsort and the log shows the messages delivered just 
fine.

2005-03-17 11:33:37.868623500 new msg 3415139
2005-03-17 11:33:37.868763500 info msg 3415139: bytes 9817 from 
[EMAIL PROTECTED] qp 93531 uid 89
2005-03-17 11:34:37.429451500 end msg 3415139
2005-03-17 11:33:37.877803500 starting delivery 783121: msg 3415139 to 
local [EMAIL PROTECTED]
2005-03-17 11:34:08.086894500 delivery 783121: success: did_0+0+2/

Looks good, the users .qmail file looks like so,
# less /home/vpopmail/domains/x.com/.qmail-alicia\:hitchcock
|/home/vpopmail/bin/tls-spamtest.sh [EMAIL PROTECTED] 
[EMAIL PROTECTED]
|/home/vpopmail/bin/vdelivermail '' delete

Two program deliveries as it should be. Yet the user claims the 
message never arrived and the pop3d log is useless other than for 
mrtg. The tls-spamtest.sh script is a modified version of ifspamh and 
delivers all spam to the [EMAIL PROTECTED] account, which we check, and the 
messages are not arriving there. The spamd log shows the message was 
clean.

The odd thing is that I have another user claiming the same thing and 
again I can find the message. I even changed this users .qmail file to 
this,

# less /home/vpopmail/domains/x.com/.qmail-joel\:daas
/home/vpopmail/domains/x.com/0/joel.daas/Maildir/
/home/vpopmail/domains/x.com/0/joeltest/Maildir/
Every message he receives should deliver to the joeltest account *if* 
the delivery to joel.daas was successful. The logs show this. This 
delivery doesn't even use vdelivermail so I've effectivly cut 
everything I could from the delivery process.

2005-03-16 10:55:56.890400500 starting delivery 754144: msg 3415073 to 
local [EMAIL PROTECTED]
2005-03-16 10:55:57.559319500 delivery 754144: success: did_2+0+0/

Interestingly, the joeltest account has never lost a message. Whenever 
joel.daas claims he did not receive a message, I can find it in joeltest.

Now my take on this is the users have an issue with their mail 
clients, or they are a bit too quick with the delete button. How do I 
prove it? I can show where the logs say the message was handed to two 
programs or delivered to two files, but I can't prove the user got the 
message beyond that.

at the bottom of the .qmail file add a:
|/bin/ls -lat /home/vpopmail/domains/x.com/0/joel.daas/Maildir/ 
 /var/log/joel.delivery.log
Excellent! It is always the simple solutions you miss.
|/bin/ls -lat /home/vpopmail/domains/x.com/0/joel.daas/Maildir/new/
Added new to the path.
then touch /var/log/joel.delivery.log and chown vpopmail:vchkpw 
/var/log/joel.delivery.log
Hmm, think I'll do this first in case a message delivers immediately 
after I write the .qmail file.

I'd really like to see the message ID get logged at delivery and and 
when it is read by the pop client. This would nail many client issues.

Thanks,
DAve
--
Dave Goodrich
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] I'm stumped

2005-03-18 Thread Bill Wichers

 at the bottom of the .qmail file add a:
 |/bin/ls -lat /home/vpopmail/domains/x.com/0/joel.daas/Maildir/
  /var/log/joel.delivery.log

 Excellent! It is always the simple solutions you miss.

You can also telnet into port 110 (pop3), and manually log in and list the
messages. I've done that lots of times when I suspect a mail-client issue
since it's easy to just quick telnet in and see if there are any messages
there. If there aren't any messages, then the logging way is probably
easier unless you want to disable the user's POP3 login for a while to see
if messages build up when the user isn't downloading them.

 -Bill

*
Waveform Technology
UNIX Systems Administrator




Re: [vchkpw] I'm stumped

2005-03-18 Thread Dave Goodrich
Bill Wichers wrote:
at the bottom of the .qmail file add a:
|/bin/ls -lat /home/vpopmail/domains/x.com/0/joel.daas/Maildir/
/var/log/joel.delivery.log
Excellent! It is always the simple solutions you miss.

You can also telnet into port 110 (pop3), and manually log in and list the
messages. I've done that lots of times when I suspect a mail-client issue
since it's easy to just quick telnet in and see if there are any messages
there. If there aren't any messages, then the logging way is probably
easier unless you want to disable the user's POP3 login for a while to see
if messages build up when the user isn't downloading them.
Yes, I started that way, but unfortunately most of our business clients 
check pop every 5 minutes. By the time they tell me there is a message 
missing it is the next day.

What would really be useful would be logging of message IDs in the 
qmail-send log at delivery, and in the qmail-pop3d log when the message 
is deleted by the pop client. I could then say, it was delivered, you 
popped it and deleted it.

Currently I am logging the deliveries, I have the user removing his 
filters, stopping his email anti-virus (we already scan for them), and 
leaving his messages on the server.

Thanks all, we will see what happens the rest of the day.
DAve
--
Dave Goodrich
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] I'm stumped

2005-03-18 Thread Jeremy Kitchen
On Friday 18 March 2005 11:58 am, Dave Goodrich wrote:
 What would really be useful would be logging of message IDs in the
 qmail-send log at delivery, and in the qmail-pop3d log when the message
 is deleted by the pop client. I could then say, it was delivered, you
 popped it and deleted it.

you could do that with a delivery instruction in the .qmail file

|echo delivering `822field Message-ID`

822field is from the mess822 package http://cr.yp.to/mess822.html
Note that I have not tested this with emails that do not have a message-id 
header (such as ones that come from broken-ass outhouse 2003), you might want 
to do that before implementing this ;)

-Jeremy

-- 
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
  kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
 GnuPG Key ID: 481BF7E2 ++ jabber:[EMAIL PROTECTED]


pgpKkN8xU844J.pgp
Description: PGP signature


Re: [vchkpw] I'm stumped

2005-03-18 Thread Dave Goodrich
Jeremy Kitchen wrote:
On Friday 18 March 2005 11:58 am, Dave Goodrich wrote:
What would really be useful would be logging of message IDs in the
qmail-send log at delivery, and in the qmail-pop3d log when the message
is deleted by the pop client. I could then say, it was delivered, you
popped it and deleted it.

you could do that with a delivery instruction in the .qmail file
|echo delivering `822field Message-ID`
822field is from the mess822 package http://cr.yp.to/mess822.html
Note that I have not tested this with emails that do not have a message-id 
header (such as ones that come from broken-ass outhouse 2003), you might want 
to do that before implementing this ;)
Good point, maybe what I really need is to log the message file name on 
disk? That info is already available to qmail/vpopmail when it writes 
the message to the users Maildir, and when it reads the message from the 
users Maildir.

I could positively tie a message from the delivery line in qmail/current 
to a pop retr command in qmail-pop3d/current then.

DAve

--
Dave Goodrich
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] I'm stumped

2005-03-18 Thread Jeremy Kitchen
On Friday 18 March 2005 12:44 pm, Dave Goodrich wrote:
 Good point, maybe what I really need is to log the message file name on
 disk? That info is already available to qmail/vpopmail when it writes
 the message to the users Maildir, and when it reads the message from the
 users Maildir.

I don't know of any way to do this without modifying qmail-local

 I could positively tie a message from the delivery line in qmail/current
 to a pop retr command in qmail-pop3d/current then.

you would then also have to log their pop3 RETR commands (which is easy to do 
with recordio and multilog), and assume that they are using UIDL and 
retrieving with that (which is a pretty safe assumption, as I think most pop3 
clients use UIDL)

-Jeremy

-- 
Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc.
[EMAIL PROTECTED] ++ inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l
  kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail
 GnuPG Key ID: 481BF7E2 ++ jabber:[EMAIL PROTECTED]


pgpa3y1kIsZ5Y.pgp
Description: PGP signature


Re: [vchkpw] I'm stumped

2005-03-18 Thread Dave Goodrich
Cream wrote:
at the bottom of the .qmail file add a:
|/bin/ls -lat /home/vpopmail/domains/x.com/0/joel.daas/Maildir/ 
 /var/log/joel.delivery.log

then touch /var/log/joel.delivery.log and chown vpopmail:vchkpw 
/var/log/joel.delivery.log

Now every time he recives a mail, it afterwards gives you a 
directorylisting, proving that the mail is there before his mail client 
fetches it.

Uhh, looking at that again, isn't that going to write an additional copy 
of the message to the Maildir everytime a delivery is made? Seems 
qmail-local would pipe the message to that line.

DAve

--
Dave Goodrich
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] I'm stumped

2005-03-18 Thread Tom Collins
On Mar 18, 2005, at 12:44 PM, Dave Goodrich wrote:
at the bottom of the .qmail file add a:
|/bin/ls -lat /home/vpopmail/domains/x.com/0/joel.daas/Maildir/  
/var/log/joel.delivery.log
then touch /var/log/joel.delivery.log and chown vpopmail:vchkpw 
/var/log/joel.delivery.log
Now every time he recives a mail, it afterwards gives you a 
directorylisting, proving that the mail is there before his mail 
client fetches it.
Uhh, looking at that again, isn't that going to write an additional 
copy of the message to the Maildir everytime a delivery is made? Seems 
qmail-local would pipe the message to that line.
I imagine that ls just ignores whatever is piped to it on stdin.  It 
shouldn't result in any duplicates.

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com