Re: [vchkpw] smtp after pop
Hi > > I have vpopmail running with smtp-after-pop functionality > > (--enable-roaming-users). the pop-daemon is from qmail. this works fine > > for normal (unsecure) connection via port 110. but this doesn't work if > > connecting via strunnel on port 995. I know, thats correct, because > > stunnel is connecting to qmail's pop3 daemon from ip 127.0.0.1. > > > > Is there any setup known, that results in writing users ip-address to > > open-smtp file so that smtp-after-pop work's even if connected via > > stunnel ? > > As STunnel proxies the connection, it probably looks like a connection > on 127.0.0.1 to the SMTP server. > > You might want to look at using ucspi-ssl > (http://www.superscript.com/ucspi-ssl/intro.html) which is an > SSL-enabled version of tcpserver. Thanks for that tip. It works fine. for your interest. compiling uscpi-ssl with default conf-* files, my run script (on openbsd4.1 system) looks as follows #!/bin/sh CAFILE="/var/qmail/control/pop3d.pem" CERTFILE="/var/qmail/control/pop3d.pem" KEYFILE="/var/qmail/control/pop3d.pem" DHFILE="/var/qmail/control/dh1024.pem" export CAFILE CERTFILE KEYFILE DHFILE MAX_CON=60 VPOPMAILUID=`id -u vpopmail` VPOPMAILGID=`id -g vpopmail` LOCAL=`head -1 /var/qmail/control/me` LISTEN_IP=123.123.123.123 exec /usr/local/bin/softlimit -m 500 \ sslserver -e -v -HR -l "$LOCAL" \ -c $MAX_CON \ -u"$VPOPMAILUID" -g"$VPOPMAILGID" "$LISTEN_IP" 995 \ /var/qmail/bin/qmail-popup `hostname` \ /home/vpopmail/bin/vchkpw \ /var/qmail/bin/qmail-pop3d Maildir 2>&1 cu Christoph !DSPAM:473794ce32002129798806!
Re: [vchkpw] smtp after pop
ckubu wrote: > Hi, > > I have vpopmail running with smtp-after-pop functionality > (--enable-roaming-users). the pop-daemon is from qmail. this works fine for > normal (unsecure) connection via port 110. but this doesn't work if > connecting via strunnel on port 995. I know, thats correct, because stunnel > is connecting to qmail's pop3 daemon from ip 127.0.0.1. > > Is there any setup known, that results in writing users ip-address to > open-smtp file so that smtp-after-pop work's even if connected via stunnel ? > > best wishes > christoph > > > > > As STunnel proxies the connection, it probably looks like a connection on 127.0.0.1 to the SMTP server. You might want to look at using ucspi-ssl (http://www.superscript.com/ucspi-ssl/intro.html) which is an SSL-enabled version of tcpserver. - Michael !DSPAM:4734b96c32001702069144!
Re: [vchkpw] smtp after pop
Hello Pat, phps use pop before smtp see bill shupp´s qmail toaster. Oliver - Original Message - From: <[EMAIL PROTECTED]> To: Sent: Tuesday, July 05, 2005 7:24 PM Subject: [vchkpw] smtp after pop > by the way: does anyone know a good howto to use smtp after pop with vpopmail? > regards > Patrick Gehm >
Re: [vchkpw] smtp after pop
Since you are using a .de e-mail address i suppose that you speak german :-) If so, take a look at pofo.de. Olli wrote a howto for FreeBSD including a (short) smtp-after-pop-hack section. mfg Bernd On Tue, 2005-07-05 at 19:24 +0200, [EMAIL PROTECTED] wrote: > by the way: does anyone know a good howto to use smtp after pop with vpopmail? > regards > Patrick Gehm
Re: [vchkpw] SMTP after POP
naco ti je POP before SMTP ?? Rene - Original Message - From: "Juraj Hantak" <[EMAIL PROTECTED]> To: Sent: Wednesday, April 27, 2005 4:28 PM Subject: [vchkpw] SMTP after POP Hi, I have a question is smtp after POP feature supported in the newest Courier Imap? I have installed courier-imap-4.0.2 and courier-authlib-0.55 everythink is OK but the SMTP after POP feature is not working. Is there any know issue or I am doing sometihing wrong? I was looking into .c code courier-authlib-0.55 file: authvchkpw.c if ( (vpw->pw_flags & NO_RELAY)==0 && ((strcmp("pop3", service)==0) || (strcmp("imap", service)==0)) ) { /* Michael Bowe 13th August 2003 * * There is a problem here because open_smtp_relay needs * to get the user's ip from getenv("TCPREMOTEIP"). * If we run --with-authvchkpw --without-authdaemon, * then this var is available. * But if we run --with-authvchkpw --with-authdaemon, * then TCPREMOTEIP is null * * If TCPREMOTEIP isnt available, then open_smtp_relay() * will just return() back immediately. */ open_smtp_relay(); } -- Best regards. Juraj Hantak
Re: [vchkpw] SMTP after POP
- Original Message - From: "Juraj Hantak" <[EMAIL PROTECTED]> > Hi, > > I have a question is smtp after POP feature supported in the newest > Courier Imap? > I have installed courier-imap-4.0.2 and courier-authlib-0.55 everythink > is OK but > the SMTP after POP feature is not working. IMAP-before-SMTP is possible when using Courier-IMAP v3.x. However it only works when configured "--with-authvchkpw --without-authdaemon". When running --without-authdaemon, Courier-IMAP's authvchkpw code is able to make use of vpopmail's roaming user functions to allow IMAP-before-SMTP functionality. IMAP-before-SMTP is not possible when Courier-IMAP has been complied --with-authdaemon, because in this mode the user's IP address is not made available to the authvchkpw code (via the TCPREMOTEIP env var). Also note that in Courier-IMAP v4.x and later, --without-authdaemon functionality is no longer available thus preventing IMAP-before-SMTP from working. Courier-pop3d uses the same backend code as courier-imap, so courier-pop-before-smtp is also not available in v4.x Michael.
Re: [vchkpw] SMTP after POP
Aran Clary Deltac wrote: /me wonders what the pop3d config file and libexec/pop3d.rc files are for in the courier directory. Your have courier pop3d installed, perhaps? Hi, No, the default installation of Courier-IMAP comes with both an IMAP and POP server. Regards, Rick
Re: [vchkpw] SMTP after POP
> /me wonders what the pop3d config file and libexec/pop3d.rc files are > for in the courier directory. Your have courier pop3d installed, perhaps? > Aran Clary Deltac wrote: >> Courier IMAP provides neither POP nor SMTP services. It provides IMAP >> services. If you are asking for IMAP before POP (sounds kinda silly to >> me, but people have asked for it before), then yes, Courier IMAP can do >> this. >> >> >
Re: [vchkpw] SMTP after POP
> Courier IMAP provides neither POP nor SMTP services. It provides IMAP > services. If you are asking for IMAP before POP (sounds kinda silly to Augh... I mean "IMAP before SMTP", which actually doesn't sound as silly. Aran > me, but people have asked for it before), then yes, Courier IMAP can do > this. > > Go to: > > http://www.inter7.com/vpopmail/FAQ.txt > > And check out item #34. > > Aran > > >> Hi, >> >> I have a question is smtp after POP feature supported in the newest >> Courier Imap? >> I have installed courier-imap-4.0.2 and courier-authlib-0.55 everythink >> is OK but >> the SMTP after POP feature is not working. >> >> Is there any know issue or I am doing sometihing wrong? >> >> I was looking into .c code courier-authlib-0.55 file: authvchkpw.c >> >> >> if ( (vpw->pw_flags & NO_RELAY)==0 && ((strcmp("pop3", >> service)==0) || (strcmp("imap", service)==0)) ) { >> /* Michael Bowe 13th August 2003 >> * >> * There is a problem here because open_smtp_relay needs >> * to get the user's ip from getenv("TCPREMOTEIP"). >> * If we run --with-authvchkpw --without-authdaemon, >> * then this var is available. >> * But if we run --with-authvchkpw --with-authdaemon, >> * then TCPREMOTEIP is null >> * >> * If TCPREMOTEIP isnt available, then open_smtp_relay() >> * will just return() back immediately. >> */ >> open_smtp_relay(); >> } >> >> >> >> >> >> >> -- >> Best regards. >> >> Juraj Hantak >> >> >> > > >
Re: [vchkpw] SMTP after POP
/me wonders what the pop3d config file and libexec/pop3d.rc files are for in the courier directory. Aran Clary Deltac wrote: Courier IMAP provides neither POP nor SMTP services. It provides IMAP services. If you are asking for IMAP before POP (sounds kinda silly to me, but people have asked for it before), then yes, Courier IMAP can do this.
Re: [vchkpw] SMTP after POP
Courier IMAP provides neither POP nor SMTP services. It provides IMAP services. If you are asking for IMAP before POP (sounds kinda silly to me, but people have asked for it before), then yes, Courier IMAP can do this. Go to: http://www.inter7.com/vpopmail/FAQ.txt And check out item #34. Aran > Hi, > > I have a question is smtp after POP feature supported in the newest > Courier Imap? > I have installed courier-imap-4.0.2 and courier-authlib-0.55 everythink > is OK but > the SMTP after POP feature is not working. > > Is there any know issue or I am doing sometihing wrong? > > I was looking into .c code courier-authlib-0.55 file: authvchkpw.c > > > if ( (vpw->pw_flags & NO_RELAY)==0 && ((strcmp("pop3", > service)==0) || (strcmp("imap", service)==0)) ) { > /* Michael Bowe 13th August 2003 > * > * There is a problem here because open_smtp_relay needs > * to get the user's ip from getenv("TCPREMOTEIP"). > * If we run --with-authvchkpw --without-authdaemon, > * then this var is available. > * But if we run --with-authvchkpw --with-authdaemon, > * then TCPREMOTEIP is null > * > * If TCPREMOTEIP isnt available, then open_smtp_relay() > * will just return() back immediately. > */ > open_smtp_relay(); > } > > > > > > > -- > Best regards. > > Juraj Hantak > > >
Re: [vchkpw] SMTP after POP
Kyle Wheeler wrote: On Wednesday, April 27 at 04:28 PM, quoth Juraj Hantak: Hi, I have a question is smtp after POP feature supported in the newest Courier Imap? Courier IMAP provides neither SMTP nor POP service, so my guess is: no. ~Kyle Hi, Yes Courier-IMAP does provide POP service, how ever I think with the 4.x release, Courier no longer support POP before SMTP. Regards, Rick
Re: [vchkpw] SMTP after POP
Hi, Do you have me wrong understand I mean the SMTP after POP authentification for relaying. I mean the feature roaming users if it is available in the newest courier imap. Is someone using it with the 4.x version of courier imap? On Wednesday, April 27 at 04:28 PM, quoth Juraj Hantak: Hi, I have a question is smtp after POP feature supported in the newest Courier Imap? Courier IMAP provides neither SMTP nor POP service, so my guess is: no. ~Kyle -- Best regards Juraj Hantak
Re: [vchkpw] SMTP after POP
On Wednesday, April 27 at 04:28 PM, quoth Juraj Hantak: Hi, I have a question is smtp after POP feature supported in the newest Courier Imap? Courier IMAP provides neither SMTP nor POP service, so my guess is: no. ~Kyle -- Genius may have its limitations but stupidity is not thus handicapped. -- Elbert Hubbard signature.asc Description: Digital signature
Re: [vchkpw] smtp after pop
On Thursday 20 January 2005 05:07 pm, Eric Ziegast wrote: > To see ensure that your mail relay filters are working, go here: > http://www.abuse.net/relay.html http://homepages.tesco.net/~J.deBoynePollard/FGA/smtp-erroneous-open-relay-tests.html -Jeremy -- Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l kitchen @ #qmail #gentoo on EFnet IRC ++ scriptkitchen.com/qmail GnuPG Key ID: 481BF7E2 ++ jabber:[EMAIL PROTECTED] pgpF51z7V47FS.pgp Description: PGP signature
Re: [vchkpw] smtp after pop
On Jan 20, 2005, at 5:05 PM, kalin mintchev wrote: thanks Eric. that was what i was suggesting in my third question. i'd think that the vpopmail sessions are id-ed on mac numbers. isn't it true then that if i go to a public space where i use my laptop to retrieve my mail everybody in that space will be able to use my smtp server - if they knew which is it - to send their mail and maybe spam? Yep. That's one reason why SMTP AUTH is better. To see ensure that your mail relay filters are working, go here: http://www.abuse.net/relay.html and follow the instructions for the anonymous test. Or just telnet from an untrusted host and see if you can send email to a domain that you don't host. When I tested from my properly-configured server, it failed one test: Relay test 6 >>> RSET <<< 250 flushed >>> MAIL FROM:<[EMAIL PROTECTED]> <<< 250 ok >>> RCPT TO:<[EMAIL PROTECTED]> <<< 250 ok When I did a manual test on my server, the message was accepted but then it bounced. A quick look at the vpopmail source code seemed to indicate that vdelivermail will bounce the message because it doesn't like '%' in the address. -- Tom Collins - [EMAIL PROTECTED] QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/ Info on the Sniffter hand-held Network Tester: http://sniffter.com/
Re: [vchkpw] smtp after pop
>> 1. how come i'm able to use the same smtp on two different machines on >> the >> home network without having to authenticate for smtp on the imap >> account? > > It is possible that you're using a NAT router/gateway between your > home network and your ISP? If so, the NAT address on the WAN side > of your router serves both of your home computers. That address is > the one that is known to the Qmail/Vpopmail server, not the different > internal addresses. To the mail server, you're coming from the same > address. thanks Eric. that was what i was suggesting in my third question. i'd think that the vpopmail sessions are id-ed on mac numbers. isn't it true then that if i go to a public space where i use my laptop to retrieve my mail everybody in that space will be able to use my smtp server - if they knew which is it - to send their mail and maybe spam? > To see ensure that your mail relay filters are working, go here: > http://www.abuse.net/relay.html > and follow the instructions for the anonymous test. great i got this.. blinking: THIS MAY OR MAY NOT MEAN THAT IT'S AN OPEN RELAY. that doesn't really resolve it for me is that because of qmail first accepting the message and then checking against the rcpthosts. what about the tcp rules in tcp.smtp.db? > > -- > Eric Ziegast > --
Re: [vchkpw] smtp after pop
> 1. how come i'm able to use the same smtp on two different machines on the > home network without having to authenticate for smtp on the imap account? It is possible that you're using a NAT router/gateway between your home network and your ISP? If so, the NAT address on the WAN side of your router serves both of your home computers. That address is the one that is known to the Qmail/Vpopmail server, not the different internal addresses. To the mail server, you're coming from the same address. To see ensure that your mail relay filters are working, go here: http://www.abuse.net/relay.html and follow the instructions for the anonymous test. -- Eric Ziegast