Hi Matias,
thanks for the tip. Nothing strange here. Can you please take a look and
see if you find anything weird?
~vpopmail/yimports.com/# cat .qmail-default
| maildrop mailfilter
~vpopmail/yimports.com/# cat mailfilter
#!/bin/bash
VPOP="| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox"
VHOME=`/home/vpopmail/bin/vuserinfo -d [EMAIL PROTECTED]
if ( $SIZE < 262144 )
{
exception {
xfilter "/usr/bin/spamc -f -d 127.0.0.1 -u [EMAIL PROTECTED]"
}
}
if (/^X-Spam-Flag: *YES/)
{
# try filtering it using user-defined rules
exception {
include $VHOME/Maildir/.mailfilter
}
# then try delivering it to a Spam folder
exception {
# to "$VPOP"
to "$VHOME/Maildir/.Spam/"
}
# ah well, I guess they'll just have to live with disappointment
exception {
to "$VPOP"
}
}
else
{
exception {
include $VHOME/Maildir/.mailfilter
}
exception {
to "$VPOP"
}
}
/var/mail# head -n 30 vpopmail
>From vpopmail Thu Feb 12 23:10:09 2004
Received: (qmail 1652 invoked from network); 10 Feb 2004 10:50:23 -0000
Received: from adslfixo-b3-115-147.telepac.pt (HELO halconviajes.com)
(213.13.115.147)
by cb.yimports.com with SMTP; 10 Feb 2004 10:50:23 -0000
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: hello
Date: Tue, 10 Feb 2004 10:53:17 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0000_E0E0A74D.C039BD2E"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0000_E0E0A74D.C039BD2E
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
and that's all there is... Ah, about that /var/mail/vpopmail mbox file,
there's no [EMAIL PROTECTED] address so i suppose that should be a bounce
email.
Again, thanks for all your help.
Regards,
Celso
On Sex, 2004-02-13 at 01:31, Matias G. Lambert ( OSInet ) wrote:
> It is possible that you have a default delivery to a mbox.
> Take a look at any .qmail files in /var/qmail/alias, and .qmail-default
> files in the domain directories ( /home/vpopmail/domain/directory.com/ ) .
> If you have the email you can see if they are a bounced messages, or what is
> the delivery route ( send us the header ).
> I hope that I help,
>
> Matias Lambert
> OSInet Telecomunicaciones
> Capital Federal - Buenos Aires
> Argentina - CA1185ACA
> http://www.osinet.com.ar
>
>
>
> > -----Mensaje original-----
> > De: Celso Pinto [mailto:[EMAIL PROTECTED]
> > Enviado el: Jueves, 12 de Febrero de 2004 08:43 p.m.
> > Para: [EMAIL PROTECTED]
> > Asunto: Re: [vchkpw] /var/mail/vpopmail
> >
> >
> > No, not really... only /usr/sbin/sendmail and /usr/lib/sendmail both
> > symlinks to qmail binary replacement.
> >
> > On Qui, 2004-02-12 at 23:18, Marcin Sołtysiak wrote:
> > > Hi
> > > > I have Vpopmail installed on my server and with this new mydoom worm i
> > > > noticed how quickly I was running out of disk space.
> > > >
> > > > Doing some du . -s I found out that vpopmail has been feeding an mbox
> > > > file at /var/mail named vpopmail.
> > > >
> > >
> > > Perhaps you got several "sendmail" binaries and one of them is
> > not a qmail
> > > replacement. It looks like mail to ordinary MBOX has been delivered as a
> > > local delivery which is done mostly by sendmail binary. If it
> > was and old
> > > ona, like from postfix or pure sendmail packages it could
> > deliver to wrong
> > > place.
> > >
> > > Solt
> > >
> > >
> >
> >
> >
