[qmailtoaster] bounce mail handler
hi guys, may be this is not QMT issue but i need to handle my bounce emails. Can somebody suggest me any bounce email handler. -- Erol KAHRAMAN System Network Administrator
Re: [qmailtoaster] Centos 5?
Harry Zink wrote: In one or two sentences, what are the major benefits of Centos 5? Based on my experience of the last upgrade, which went seamlessly via yum, I'm kinda looking forward to what new things Centos will offer. For what you're using it for (email server, maybe some webpages), there won't be any. Some newer version of packages (ver 2.2 of Apache, where as Cent 4.4 uses 2.0.52), better graphics support, and Xen as a install option. smime.p7s Description: S/MIME Cryptographic Signature
Re: [qmailtoaster] bounce mail handler
Erol KAHRAMAN wrote: hi guys, may be this is not QMT issue but i need to handle my bounce emails. Can somebody suggest me any bounce email handler. If you're trying to read them, then use either the webmail client or I'd set up another email program (like Thunderbird) just for that. Not sure what you're trying to do though. smime.p7s Description: S/MIME Cryptographic Signature
Re: [qmailtoaster] bounce mail handler
i am trying to send an info mail to my client. But there are a lot of bounce email. I need to analyze and report the reasons for bounce emails. Therefore, email clients is not what i am aimed. On 4/11/07, Jake Vickers [EMAIL PROTECTED] wrote: Erol KAHRAMAN wrote: hi guys, may be this is not QMT issue but i need to handle my bounce emails. Can somebody suggest me any bounce email handler. If you're trying to read them, then use either the webmail client or I'd set up another email program (like Thunderbird) just for that. Not sure what you're trying to do though. -- Erol KAHRAMAN System Network Administrator
Re: [qmailtoaster] bounce mail handler
Sounds like you should build a mailing list with ezmlm and let it handle the bounces. Either that, or set in your email client 'Bounce- To' as an address where you can collect the bounce messages for analysis and reporting. On Apr 11, 2007, at 8:34 AM, Erol KAHRAMAN wrote: i am trying to send an info mail to my client. But there are a lot of bounce email. I need to analyze and report the reasons for bounce emails. Therefore, email clients is not what i am aimed. On 4/11/07, Jake Vickers [EMAIL PROTECTED] wrote: Erol KAHRAMAN wrote: hi guys, may be this is not QMT issue but i need to handle my bounce emails. Can somebody suggest me any bounce email handler. If you're trying to read them, then use either the webmail client or I'd set up another email program (like Thunderbird) just for that. Not sure what you're trying to do though. -- Erol KAHRAMAN System Network Administrator - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] adding to Blacklist
if i make a change to my var/qmail/control/blacklists basically adding -r bl.spamcop.net -r list.dsbl.org -r cbl.abuseat.org so that it reads -r zen.spamhaus.org -r bl.spamcop.net -r list.dsbl.org -r cbl.abuseat.org do i need to do a # qmailctl stop # qmailctl start or a svc -d /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log svc -t /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log svc -u /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log for that to kick in ? thnaks jim
[qmailtoaster] miscellaneous errors
Wow, I just launched my new ISP and my first customer tries to send an email to all his friends and many of the messages are returned. I can certainly search for each error number on Google and what-not, but can anyone give me a brief explanation of what the heck is going on here? I realize I'll need actual email addys where this person shows aliases to really get to the bottom of things, but to say the least, this is not what I was hoping for. I don't have time to dig into all these today. A sense of direction would help a lot. I built QM not very long ago, like February '07. == Here are the errors I am getting. Thx Russ _ From: System Administrator Sent: Wednesday, April 11, 2007 2:18 PM To: Russ X Subject: Undeliverable: I have Horizon Broadband! Your message did not reach some or all of the intended recipients. Subject: I have Horizon Broadband! Sent: 4/11/2007 2:15 PM The following recipient(s) cannot be reached: [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) 'crankin' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'dehorn' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'dshepard' on 4/11/2007 2:18 PM 571 sorry, reached maximum number of recipients for one session (#5.7.1 - chkuser) 'gsmith' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) 'jwilliams' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'kmustain' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'kquick' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) 'mjones' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) (chopped off a bunch of repeat errors) Thanks anyone. MH - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] miscellaneous errors
How many people did he try to send to? By default there is a max recipients specified in the tcprules (/etc/tcprules.d/tcp.smtp). You can raise it, but just don't go too high or you'll open up to easy spamming. Justice London On Wed, 2007-04-11 at 14:44 -0500, Michael H wrote: Wow, I just launched my new ISP and my first customer tries to send an email to all his friends and many of the messages are returned. I can certainly search for each error number on Google and what-not, but can anyone give me a brief explanation of what the heck is going on here? I realize I'll need actual email addys where this person shows aliases to really get to the bottom of things, but to say the least, this is not what I was hoping for. I don't have time to dig into all these today. A sense of direction would help a lot. I built QM not very long ago, like February '07. == Here are the errors I am getting. Thx Russ _ From: System Administrator Sent: Wednesday, April 11, 2007 2:18 PM To: Russ X Subject: Undeliverable: I have Horizon Broadband! Your message did not reach some or all of the intended recipients. Subject: I have Horizon Broadband! Sent: 4/11/2007 2:15 PM The following recipient(s) cannot be reached: [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) 'crankin' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'dehorn' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'dshepard' on 4/11/2007 2:18 PM 571 sorry, reached maximum number of recipients for one session (#5.7.1 - chkuser) 'gsmith' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) 'jwilliams' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'kmustain' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) 'kquick' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) [EMAIL PROTECTED] on 4/11/2007 2:18 PM 502 unimplemented (#5.5.1) 'mjones' on 4/11/2007 2:18 PM 571 sorry, you are violating our security policies (#5.7.1 - chkuser) (chopped off a bunch of repeat errors) Thanks anyone. MH - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] miscellaneous errors
Michael H wrote: Wow, I just launched my new ISP and my first customer tries to send an email to all his friends and many of the messages are returned. I can certainly search for each error number on Google and what-not, but can anyone give me a brief explanation of what the heck is going on here? I realize I'll need actual email addys where this person shows aliases to really get to the bottom of things, but to say the least, this is not what I was hoping for. I don't have time to dig into all these today. A sense of direction would help a lot. I built QM not very long ago, like February '07. == Here are the errors I am getting. 571 sorry, you are violating our security policies (#5.7.1 - chkuser) He put way too many users in the To: or CC: fields. You control this in your /etc/tcprules.d/tcp.smtp file. You'll see a field that says CHKUSER_RCPTLIMIT=25 and that will define how many people can be in the To or CC fields. smime.p7s Description: S/MIME Cryptographic Signature
Re: [qmailtoaster] miscellaneous errors
Justice London wrote: How many people did he try to send to? By default there is a max recipients specified in the tcprules (/etc/tcprules.d/tcp.smtp). You can raise it, but just don't go too high or you'll open up to easy spamming. yeah, my server is built for anti-spam, not so much for easy emailing. But: CHKUSER_RCPTLIMIT=50 and CHKUSER_WRONGRCPTLIMIT=10 Are these what you're talking about? M - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] miscellaneous errors
Yep. Justice On Wed, 2007-04-11 at 15:01 -0500, Michael H wrote: Justice London wrote: How many people did he try to send to? By default there is a max recipients specified in the tcprules (/etc/tcprules.d/tcp.smtp). You can raise it, but just don't go too high or you'll open up to easy spamming. yeah, my server is built for anti-spam, not so much for easy emailing. But: CHKUSER_RCPTLIMIT=50 and CHKUSER_WRONGRCPTLIMIT=10 Are these what you're talking about? M - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] miscellaneous errors
Jake Vickers wrote: He put way too many users in the To: or CC: fields. You control this in your /etc/tcprules.d/tcp.smtp file. You'll see a field that says CHKUSER_RCPTLIMIT=25 and that will define how many people can be in the To or CC fields. Okay... easy enough. I'll change those to 100 and 25 and see what happens. Thanks greatly ... wow, quick responses! - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] miscellaneous errors
Also, I have my RCPTLIMIT set to 200 and we haven't really had any great issue. Justice On Wed, 2007-04-11 at 13:02 -0700, Justice London wrote: Yep. Justice On Wed, 2007-04-11 at 15:01 -0500, Michael H wrote: Justice London wrote: How many people did he try to send to? By default there is a max recipients specified in the tcprules (/etc/tcprules.d/tcp.smtp). You can raise it, but just don't go too high or you'll open up to easy spamming. yeah, my server is built for anti-spam, not so much for easy emailing. But: CHKUSER_RCPTLIMIT=50 and CHKUSER_WRONGRCPTLIMIT=10 Are these what you're talking about? M - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] miscellaneous errors
Justice London wrote: Also, I have my RCPTLIMIT set to 200 and we haven't really had any great issue. you mean the CHKUSER_RCPTLIMIT? Sorry, I could be misled. I changed my tcp.smtp file and service qmail stop and service qmail start. That okay? - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] miscellaneous errors
You actually don't need to restart qmail to affect changes to cdb files. You can simply run 'qmailctl cdb' and it will update the necessary cdb files. Justice On Wed, 2007-04-11 at 15:08 -0500, Michael H wrote: Justice London wrote: Also, I have my RCPTLIMIT set to 200 and we haven't really had any great issue. you mean the CHKUSER_RCPTLIMIT? Sorry, I could be misled. I changed my tcp.smtp file and service qmail stop and service qmail start. That okay? - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Fax as tif
Putting yahoogroups in local.cf seems to have increased the spam score by 0.9: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on server.northvalleycomputing.com X-Spam-Level: ** X-Spam-Status: Yes, score=2.3 required=2.2 tests=AWL,HTML_MESSAGE, HTML_TINY_FONT autolearn=no version=3.1.8 X-Spam-Report: * 0.0 HTML_MESSAGE BODY: HTML included in message * 1.4 HTML_TINY_FONT RAW: body contains 1 or 0-point font * 0.9 AWL AWL: From: address is in the auto white-list Received: from unknown (HELO n32.bullet.scd.yahoo.com) (66.94.237.26) by server.northvalleycomputing.com with SMTP; 11 Apr 2007 06:49:21 - Contents of /etc/mail/spamassassin/local.cf: # These values can be overridden by editing ~/.spamassassin/user_prefs.cf # (see spamassassin(1) for details) # These should be safe assumptions and allow for simple visual sifting # without risking lost emails. ok_locales all skip_rbl_checks 1 required_score 2.2 report_safe 0 rewrite_header Subject ***SPAM*** use_pyzor 1 use_auto_whitelist 1 use_bayes 1 use_bayes_rules 1 bayes_auto_learn 1 # 04/02/07 NVC: Allow yahoogroups.com whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com So how do I make the score reduce if the mail is in the AWL? George Toft, CISSP, MSIS 623-203-1760 Jake Vickers wrote: George Toft wrote: Closely related . . . How do I whitelist based on a header field? I belong to a couple of mailing lists and some messages are getting flagged as ***SPAM***. Can I whitelist messages based on any of these headers: X-eGroups-Approved-By: azipaegroups [EMAIL PROTECTED] via web; 02 Apr 2007 22:53:49 - Sender: [EMAIL PROTECTED] Mailing-List: list [EMAIL PROTECTED]; contact [EMAIL PROTECTED] Delivered-To: mailing list [EMAIL PROTECTED] List-Id: azipa.yahoogroups.com I've tried editing local.cf (seems to be wrong) and /usr/share/spamassassin/60_whitelist.cf. I might be in the right place on the latter, but need a gentle shove in the right direction. You were in the right spot. You don't want to edit the files in /usr/shares/spamassassin as they'll be deleted whenever an upgrade comes around. You want to put the entries in your /etc/mail/spamassassin/local.cf file. Just make sure you lint it and restart the daemon when finished: spamassassin -D --lint And for restarting the daemon you can download a script from my site (v2gnu.com) called qmail-spam or install QT-Plus (qtp.qmailtoaster.com) as it's included in there. You can also do it manually: svc -d /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log svc -t /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log svc -u /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log And you would whitelist yahoogroups.com I know there's been a running thread on the best way to whitelist Yahoo groups on the spamassassin mailing list. Might want to peek at their archives. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Fax as tif
George Toft wrote: Putting yahoogroups in local.cf seems to have increased the spam score by 0.9: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on server.northvalleycomputing.com X-Spam-Level: ** X-Spam-Status: Yes, score=2.3 required=2.2 tests=AWL,HTML_MESSAGE, HTML_TINY_FONT autolearn=no version=3.1.8 X-Spam-Report: * 0.0 HTML_MESSAGE BODY: HTML included in message * 1.4 HTML_TINY_FONT RAW: body contains 1 or 0-point font * 0.9 AWL AWL: From: address is in the auto white-list Received: from unknown (HELO n32.bullet.scd.yahoo.com) (66.94.237.26) by server.northvalleycomputing.com with SMTP; 11 Apr 2007 06:49:21 - We'd need to see the full headers to see where the email is coming from # 04/02/07 NVC: Allow yahoogroups.com whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com I personally don't lock down my config that much, so I would use: whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED] You can do the received way, but I think you can only define 1 per line: whitelist_from_rcvd [EMAIL PROTECTED] whitelist_from_rcvd [EMAIL PROTECTED] Then restart spamd and it should get a little better. smime.p7s Description: S/MIME Cryptographic Signature
Re: [qmailtoaster] Disappearing Email
Adding more noise and not enough info . . . I noticed this also one day when I was using squirrelmail - a bunch of spam showed up (10-15 messages), I read one, clicked on the inbox link, and they we all gone. I did not delete even one - they just went away. What process would possibly delete mail after they have been delivered? George Toft, CISSP, MSIS 623-203-1760 Ed Morrison wrote: Anyone have any thoughts on this? Thanks! On 3/20/07, *Erik A. Espinoza* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Hello Phil, Make sure you are using the latest clamav. Perhaps you are using clamav 0.90 which contained some issues that caused mail to be lost. Erik I am experiencing this issue myself. When running qtp-newmodel clam does not appear to have a newer version(?). How should I update this? Thanks! [EMAIL PROTECTED] qmail]# qtp-newmodel qtp-newmodel v0.2.7 starting Tue Apr 10 05:25:12 PDT 2007 qtp-whatami v0.2.3 DISTRO=CentOS OSVER=4.4 ARCH=i686 BUILD_DIST=cnt40 BUILD_DIR=/usr/src/redhat This machine's OS is supported, but this version/arch has not been tested. If your OS is not current, you should consider upgrading it. Do you want to proceed at your own risk? (yes, no) y/[n] : y Ok, here we go ... Do you want to include development packages? (This is *not* recommended for production servers) Shall we continue? (yes, no|skip, batch, quit) y / [n]|s / b / q : n Getting package list ... qmail Toaster is an integrated distribution. Packages are preconfigured for the whole distro. As a result, a partial install might be misconfigured. Upgrading all packages to their latest version is strongly recommended. Now that you've been warned, we will proceed with package selection ... zlib-1.2.3-1.0.3 is already installed, bypassed daemontools-toaster-0.76-1.3.2 is already installed, bypassed ucspi-tcp-toaster-0.88-1.3.4 is already installed, bypassed vpopmail-toaster-5.4.13-1.3.3 is already installed, bypassed libdomainkeys-toaster-0.68-1.3.2 is already installed, bypassed libsrs2-toaster-1.0.18-1.3.2 is already installed, bypassed qmail-toaster-1.03-1.3.14 is already installed, bypassed courier-authlib-toaster-0.59.1-1.3.5 is already installed, bypassed courier-imap-toaster-4.1.2-1.3.6 is already installed, bypassed autorespond-toaster-2.0.4-1.3.2 is already installed, bypassed control-panel-toaster-0.5-1.3.3 is already installed, bypassed ezmlm-toaster-0.53.324-1.3.2 is already installed, bypassed qmailadmin-toaster-1.2.9-1.3.3 is already installed, bypassed qmailmrtg-toaster-4.2-1.3.2 is already installed, bypassed maildrop-toaster-2.0.3-1.3.4 is already installed, bypassed isoqlog-toaster-2.1-1.3.3 is already installed, bypassed squirrelmail-toaster-1.4.9a-1.3.5 is already installed, bypassed spamassassin-toaster-3.1.8-1.3.7 is already installed, bypassed clamav-toaster-0.90.1-1.3.11 is already installed, bypassed ripmime-toaster-1.4.0.6-1.3.2 is already installed, bypassed simscan-toaster-1.3.1-1.3.5 is already installed, bypassed vqadmin-toaster-2.3.4-1.3.2 is already installed, bypassed djbdns is not installed, would you like to install it? Shall we continue? (yes, no|skip, batch, quit) [y] / n|s / b / q : n qmail Toaster packages are all current. There is nothing more to do. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] adding to Blacklist
Jim Shupert, Jr. wrote: if i make a change to my var/qmail/control/blacklists basically adding -r bl.spamcop.net -r list.dsbl.org -r cbl.abuseat.org so that it reads -r zen.spamhaus.org -r bl.spamcop.net -r list.dsbl.org -r cbl.abuseat.org do i need to do a # qmailctl stop # qmailctl start or a svc -d /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log svc -t /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log svc -u /var/qmail/supervise/spamd /var/qmail/supervise/spamd/log for that to kick in ? thnaks jim # qmailctl restart or # service qmail restart should do it. -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Fax as tif
Hi Jake, Here are the headers . . . From - Wed Apr 11 00:56:31 2007 X-Account-Key: account1 X-UIDL: 1176274162.6630.server.northvalleycomputing.com,S=18178 X-Mozilla-Status: 0001 X-Mozilla-Status2: Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 6628 invoked by uid 89); 11 Apr 2007 06:49:22 - DomainKey-Status: bad Received: by simscan 1.3.1 ppid: 6622, pid: 6623, t: 0.9315s scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:42/d:2691 spam: 3.1.8 X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on server.northvalleycomputing.com X-Spam-Level: ** X-Spam-Status: Yes, score=2.3 required=2.2 tests=AWL,HTML_MESSAGE, HTML_TINY_FONT autolearn=no version=3.1.8 X-Spam-Report: * 0.0 HTML_MESSAGE BODY: HTML included in message * 1.4 HTML_TINY_FONT RAW: body contains 1 or 0-point font * 0.9 AWL AWL: From: address is in the auto white-list Received: from unknown (HELO n32.bullet.scd.yahoo.com) (66.94.237.26) by server.northvalleycomputing.com with SMTP; 11 Apr 2007 06:49:21 - Received-SPF: none (server.northvalleycomputing.com: domain at returns.groups.yahoo.com does not designate permitted sender hosts) Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com; b=KCSruvypzTqYlQSrC8nagKE9GdXJA1tx8AsHVgVI5WMlIlwgIREHEhayV6UgIwjz6SXV/6lG7yrCYu3NhlpVa4RmfaBe/eLzEPbEmY2hUu2bicjmIT14N8xMLeVD7nvf; Received: from [209.73.164.83] by n32.bullet.scd.yahoo.com with NNFMP; 11 Apr 2007 06:49:19 - Received: from [66.218.67.85] by t7.bullet.scd.yahoo.com with NNFMP; 11 Apr 2007 06:49:19 - X-Yahoo-Newman-Id: 3517437-m1790 Received: (qmail 17957 invoked from network); 11 Apr 2007 06:49:18 - Received: from unknown (66.218.66.70) by m49.grp.scd.yahoo.com with QMQP; 11 Apr 2007 06:49:18 - Received: from unknown (HELO n7c.bullet.sp1.yahoo.com) (69.147.64.167) by mta12.grp.scd.yahoo.com with SMTP; 11 Apr 2007 06:49:18 - Received: from [216.252.122.217] by n7.bullet.sp1.yahoo.com with NNFMP; 11 Apr 2007 06:48:29 - Received: from [66.218.69.4] by t2.bullet.sp1.yahoo.com with NNFMP; 11 Apr 2007 06:48:29 - Received: from [66.218.66.81] by t4.bullet.scd.yahoo.com with NNFMP; 11 Apr 2007 06:48:29 - X-Sender: [EMAIL PROTECTED] X-Apparently-To: [EMAIL PROTECTED] Received: (qmail 87929 invoked from network); 10 Apr 2007 19:07:52 - Received: from unknown (66.218.67.35) by m31.grp.scd.yahoo.com with QMQP; 10 Apr 2007 19:07:52 - Received: from unknown (HELO n31b.bullet.sp1.yahoo.com) (209.131.38.209) by mta9.grp.scd.yahoo.com with SMTP; 10 Apr 2007 19:07:52 - Received: from [216.252.122.216] by n31.bullet.sp1.yahoo.com with NNFMP; 10 Apr 2007 19:05:37 - Received: from [66.218.69.1] by t1.bullet.sp1.yahoo.com with NNFMP; 10 Apr 2007 19:05:37 - Received: from [66.218.66.90] by t1.bullet.scd.yahoo.com with NNFMP; 10 Apr 2007 19:05:37 - To: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] User-Agent: eGroups-EW/0.82 X-Mailer: Yahoo Groups Message Poster X-Originating-IP: 209.131.38.209 X-eGroups-Msg-Info: 1:6:0:0 X-Yahoo-Post-IP: 68.3.11.126 From: Tony Deblon [EMAIL PROTECTED] X-Yahoo-Profile: antonyd1976 X-eGroups-Approved-By: azipaegroups [EMAIL PROTECTED] via web; 11 Apr 2007 06:48:29 - Sender: [EMAIL PROTECTED] MIME-Version: 1.0 Mailing-List: list [EMAIL PROTECTED]; contact [EMAIL PROTECTED] Delivered-To: mailing list [EMAIL PROTECTED] List-Id: aztech-work.yahoogroups.com Precedence: bulk List-Unsubscribe: mailto:[EMAIL PROTECTED] Date: Tue, 10 Apr 2007 19:05:37 - Subject: ***SPAM*** [aztech-work] C++ Application Developer with Tivoli Storage Manager X-Yahoo-Newman-Property: groups-email-ff Content-Type: multipart/alternative; boundary=F2wXmUQ1XMxgz6e9YfpmR3BQK3zzUP6k7CN7Yvz X-Spam-Prev-Subject: [aztech-work] C++ Application Developer with Tivoli Storage Manager --F2wXmUQ1XMxgz6e9YfpmR3BQK3zzUP6k7CN7Yvz Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable George Toft, CISSP, MSIS 623-203-1760 Jake Vickers wrote: George Toft wrote: Putting yahoogroups in local.cf seems to have increased the spam score by 0.9: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on server.northvalleycomputing.com X-Spam-Level: ** X-Spam-Status: Yes, score=2.3 required=2.2 tests=AWL,HTML_MESSAGE, HTML_TINY_FONT autolearn=no version=3.1.8 X-Spam-Report: * 0.0 HTML_MESSAGE BODY: HTML included in message * 1.4 HTML_TINY_FONT RAW: body contains 1 or 0-point font * 0.9 AWL AWL: From: address is in the auto white-list Received: from unknown (HELO n32.bullet.scd.yahoo.com) (66.94.237.26) by server.northvalleycomputing.com with SMTP; 11 Apr 2007 06:49:21 - We'd need to see the full headers to see where the email is coming from # 04/02/07 NVC: Allow yahoogroups.com
Re: [qmailtoaster] Fax as tif
George Toft wrote: Hi Jake, Here are the headers . . . X-Spam-Status: Yes, score=2.3 required=2.2 tests=AWL,HTML_MESSAGE, That score is rather low in my opinion. The default required is 5. Almost all of the scores in SA are geared to get it above the 5 score, so almost all of them will score above 2.2 smime.p7s Description: S/MIME Cryptographic Signature
Re: [qmailtoaster] Disappearing Email
Nothing should delete mail after delivery other than a client. Sounds like you may have something else running on your machine that is causing problems. Erik On 4/11/07, George Toft [EMAIL PROTECTED] wrote: Adding more noise and not enough info . . . I noticed this also one day when I was using squirrelmail - a bunch of spam showed up (10-15 messages), I read one, clicked on the inbox link, and they we all gone. I did not delete even one - they just went away. What process would possibly delete mail after they have been delivered? George Toft, CISSP, MSIS 623-203-1760 Ed Morrison wrote: Anyone have any thoughts on this? Thanks! On 3/20/07, *Erik A. Espinoza* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Hello Phil, Make sure you are using the latest clamav. Perhaps you are using clamav 0.90 which contained some issues that caused mail to be lost. Erik I am experiencing this issue myself. When running qtp-newmodel clam does not appear to have a newer version(?). How should I update this? Thanks! [EMAIL PROTECTED] qmail]# qtp-newmodel qtp-newmodel v0.2.7 starting Tue Apr 10 05:25:12 PDT 2007 qtp-whatami v0.2.3 DISTRO=CentOS OSVER=4.4 ARCH=i686 BUILD_DIST=cnt40 BUILD_DIR=/usr/src/redhat This machine's OS is supported, but this version/arch has not been tested. If your OS is not current, you should consider upgrading it. Do you want to proceed at your own risk? (yes, no) y/[n] : y Ok, here we go ... Do you want to include development packages? (This is *not* recommended for production servers) Shall we continue? (yes, no|skip, batch, quit) y / [n]|s / b / q : n Getting package list ... qmail Toaster is an integrated distribution. Packages are preconfigured for the whole distro. As a result, a partial install might be misconfigured. Upgrading all packages to their latest version is strongly recommended. Now that you've been warned, we will proceed with package selection ... zlib-1.2.3-1.0.3 is already installed, bypassed daemontools-toaster-0.76-1.3.2 is already installed, bypassed ucspi-tcp-toaster-0.88-1.3.4 is already installed, bypassed vpopmail-toaster-5.4.13-1.3.3 is already installed, bypassed libdomainkeys-toaster-0.68-1.3.2 is already installed, bypassed libsrs2-toaster-1.0.18-1.3.2 is already installed, bypassed qmail-toaster-1.03-1.3.14 is already installed, bypassed courier-authlib-toaster-0.59.1-1.3.5 is already installed, bypassed courier-imap-toaster-4.1.2-1.3.6 is already installed, bypassed autorespond-toaster-2.0.4-1.3.2 is already installed, bypassed control-panel-toaster-0.5-1.3.3 is already installed, bypassed ezmlm-toaster-0.53.324-1.3.2 is already installed, bypassed qmailadmin-toaster-1.2.9-1.3.3 is already installed, bypassed qmailmrtg-toaster-4.2-1.3.2 is already installed, bypassed maildrop-toaster-2.0.3-1.3.4 is already installed, bypassed isoqlog-toaster-2.1-1.3.3 is already installed, bypassed squirrelmail-toaster-1.4.9a-1.3.5 is already installed, bypassed spamassassin-toaster-3.1.8-1.3.7 is already installed, bypassed clamav-toaster-0.90.1-1.3.11 is already installed, bypassed ripmime-toaster-1.4.0.6-1.3.2 is already installed, bypassed simscan-toaster-1.3.1-1.3.5 is already installed, bypassed vqadmin-toaster-2.3.4-1.3.2 is already installed, bypassed djbdns is not installed, would you like to install it? Shall we continue? (yes, no|skip, batch, quit) [y] / n|s / b / q : n qmail Toaster packages are all current. There is nothing more to do. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Fax as tif
Looking at the type of mail that I receive, 2.2-2.8 provides a good balance of minimizing spam, and getting [virtually] no false positives. Perhaps I'm trying to tune SA with the wrong tool (adjusting the score)? When all you have is a hammer, every problem looks like a nail. Maybe I need a screwdriver? George Toft, CISSP, MSIS 623-203-1760 Jake Vickers wrote: George Toft wrote: Hi Jake, Here are the headers . . . X-Spam-Status: Yes, score=2.3 required=2.2 tests=AWL,HTML_MESSAGE, That score is rather low in my opinion. The default required is 5. Almost all of the scores in SA are geared to get it above the 5 score, so almost all of them will score above 2.2 - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Disappearing Email
George Toft wrote: Adding more noise and not enough info . . . I noticed this also one day when I was using squirrelmail - a bunch of spam showed up (10-15 messages), I read one, clicked on the inbox link, and they we all gone. I did not delete even one - they just went away. What process would possibly delete mail after they have been delivered? Squirrelmail filters? smime.p7s Description: S/MIME Cryptographic Signature
Re: [qmailtoaster] Disappearing Email
CentOS 4.4 install with QMT. Nothing else. No users, except me. A few cron jobs, but nothing that makes changes (just monitoring stuff). Weird. The squirrelmail isn't compiled with some kind of smap filter is it? George Toft, CISSP, MSIS 623-203-1760 Erik A. Espinoza wrote: Nothing should delete mail after delivery other than a client. Sounds like you may have something else running on your machine that is causing problems. Erik On 4/11/07, George Toft [EMAIL PROTECTED] wrote: Adding more noise and not enough info . . . I noticed this also one day when I was using squirrelmail - a bunch of spam showed up (10-15 messages), I read one, clicked on the inbox link, and they we all gone. I did not delete even one - they just went away. What process would possibly delete mail after they have been delivered? George Toft, CISSP, MSIS 623-203-1760 Ed Morrison wrote: Anyone have any thoughts on this? Thanks! On 3/20/07, *Erik A. Espinoza* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Hello Phil, Make sure you are using the latest clamav. Perhaps you are using clamav 0.90 which contained some issues that caused mail to be lost. Erik I am experiencing this issue myself. When running qtp-newmodel clam does not appear to have a newer version(?). How should I update this? Thanks! [EMAIL PROTECTED] qmail]# qtp-newmodel qtp-newmodel v0.2.7 starting Tue Apr 10 05:25:12 PDT 2007 qtp-whatami v0.2.3 DISTRO=CentOS OSVER=4.4 ARCH=i686 BUILD_DIST=cnt40 BUILD_DIR=/usr/src/redhat This machine's OS is supported, but this version/arch has not been tested. If your OS is not current, you should consider upgrading it. Do you want to proceed at your own risk? (yes, no) y/[n] : y Ok, here we go ... Do you want to include development packages? (This is *not* recommended for production servers) Shall we continue? (yes, no|skip, batch, quit) y / [n]|s / b / q : n Getting package list ... qmail Toaster is an integrated distribution. Packages are preconfigured for the whole distro. As a result, a partial install might be misconfigured. Upgrading all packages to their latest version is strongly recommended. Now that you've been warned, we will proceed with package selection ... zlib-1.2.3-1.0.3 is already installed, bypassed daemontools-toaster-0.76-1.3.2 is already installed, bypassed ucspi-tcp-toaster-0.88-1.3.4 is already installed, bypassed vpopmail-toaster-5.4.13-1.3.3 is already installed, bypassed libdomainkeys-toaster-0.68-1.3.2 is already installed, bypassed libsrs2-toaster-1.0.18-1.3.2 is already installed, bypassed qmail-toaster-1.03-1.3.14 is already installed, bypassed courier-authlib-toaster-0.59.1-1.3.5 is already installed, bypassed courier-imap-toaster-4.1.2-1.3.6 is already installed, bypassed autorespond-toaster-2.0.4-1.3.2 is already installed, bypassed control-panel-toaster-0.5-1.3.3 is already installed, bypassed ezmlm-toaster-0.53.324-1.3.2 is already installed, bypassed qmailadmin-toaster-1.2.9-1.3.3 is already installed, bypassed qmailmrtg-toaster-4.2-1.3.2 is already installed, bypassed maildrop-toaster-2.0.3-1.3.4 is already installed, bypassed isoqlog-toaster-2.1-1.3.3 is already installed, bypassed squirrelmail-toaster-1.4.9a-1.3.5 is already installed, bypassed spamassassin-toaster-3.1.8-1.3.7 is already installed, bypassed clamav-toaster-0.90.1-1.3.11 is already installed, bypassed ripmime-toaster-1.4.0.6-1.3.2 is already installed, bypassed simscan-toaster-1.3.1-1.3.5 is already installed, bypassed vqadmin-toaster-2.3.4-1.3.2 is already installed, bypassed djbdns is not installed, would you like to install it? Shall we continue? (yes, no|skip, batch, quit) [y] / n|s / b / q : n qmail Toaster packages are all current. There is nothing more to do. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] qq soft reject -- clamd issue
Hey everyone, Sometime yesterday my mail server suddenly stopped accepting e-mail. It was erroring everything out with messages similar to the following: (from smtp/current) @4000461dacfb03d7352c CHKUSER accepted sender: from [EMAIL PROTECTED]:: remote hosting.splintered.net:unknown:66.250.216.130 rcpt : sender accepted @4000461dacfb0d17016c CHKUSER accepted rcpt: from [EMAIL PROTECTED]:: remote hosting.splintered.net:unknown:66.250.216.130 rcpt [EMAIL PROTECTED] : found existing recipient @4000461dacfb1c16837c connect(): No such file or directory @4000461dacfb1c28cb2c qmail-smtpd: qq soft reject (mail server temporarily rejected message (#4.3.0)): MAILFROM:[EMAIL PROTECTED] RCPTTO:[EMAIL PROTECTED] I found these errors in the clamd/current log: @4000461dacb1117de9b4 clamd daemon 0.90 (OS: linux-gnu, ARCH: i386, CPU: i386) @4000461dacb1117e62cc Log file size limited to 1048576 bytes. @4000461dacb1117f5ccc Reading databases from /usr/share/clamav @4000461dacb73589e114 LibClamAV Error: Can't load /usr/share/clamav/*.cvd: Broken or not a CVD file @4000461dacb7358ce29c ERROR: Broken or not a CVD file @4000461dacb7358e1734 ERROR: Broken or not a CVD file @4000461dacb73675bbfc +++ Started at Wed Apr 11 21:51:09 2007 @4000461dacb73676fc4c clamd daemon 0.90 (OS: linux-gnu, ARCH: i386, CPU: i386) @4000461dacb7367769ac Log file size limited to 1048576 bytes. @4000461dacb736784084 Reading databases from /usr/share/clamav @4000461dacbe1b3d3694 LibClamAV Error: Can't load /usr/share/clamav/*.cvd: Broken or not a CVD file @4000461dacbe1b40287c ERROR: Broken or not a CVD file @4000461dacbe1b4139ec ERROR: Broken or not a CVD file @4000461dacbe1c1a9e44 +++ Started at Wed Apr 11 21:51:16 2007 @4000461dacbe1c1b2ae4 clamd daemon 0.90 (OS: linux-gnu, ARCH: i386, CPU: i386) @4000461dacbe1c1b657c Log file size limited to 1048576 bytes. @4000461dacbe1c1bcef4 Reading databases from /usr/share/clamav @4000461dacc509f67bd4 LibClamAV Error: Can't load /usr/share/clamav/*.cvd: Broken or not a CVD file @4000461dacc509f8cd94 ERROR: Broken or not a CVD file @4000461dacc509f96dbc ERROR: Broken or not a CVD file @4000461dacc50d8ac624 +++ Started at Wed Apr 11 21:51:23 2007 @4000461dacc50d8ae564 clamd daemon 0.90 (OS: linux-gnu, ARCH: i386, CPU: i386) @4000461dacc50d8aed34 Log file size limited to 1048576 bytes. @4000461dacc50d8af11c Reading databases from /usr/share/clamav I finally found a file called *.cvd in the /usr/share/clamav folder, but I haven't got a clue how it got there. Anyone have any ideas? I've deleted it and I'm getting mail but I want to be sure this doesn't happen again. Thanks, Robert - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
