[qmailtoaster] Is it possible with Qmail
Dear All , I have a prospect customer who wish to host their mailing server with us and wish to the following capabilities in the provided mailing solution. Can we have all these mentioned below in Qmail or any add-on for qmail. 1. Every incoming outgoing messages must have unique number generated at server level. 2. Every incoming outgoing message track/ status should be maintained and administrator can monitored the overall log. 3. Admin can maintain user profile and grouping. 4. Admin can review overall / user wise activities. Regards, Anil Aliyan
RE: [qmailtoaster] Re: Is it possible with Qmail
Dear Eric, Yes these requirements are made by the customer. I know exchange server has all these features but just wanted to check if other mail servers like Qmail etc. can provide all these features or not as Exchange Server will be a costly affair. Regards, Anil Aliyan -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Thursday, February 03, 2011 7:24 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Is it possible with Qmail On 02/03/2011 06:02 AM, Anil Aliyan wrote: Dear All , I have a prospect customer who wish to host their mailing server with us and wish to the following capabilities in the provided mailing solution. Can we have all these mentioned below in Qmail or any add-on for qmail. 1.Every incoming outgoing messages must have unique number generated at server level. 2.Every incoming outgoing message track/ status should be maintained and administrator can monitored the overall log. 3.Admin can maintain user profile and grouping. 4.Admin can review overall / user wise activities. Regards, Anil Aliyan Were these requirements written by you or your prospective customer? -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] scanning question
HI, I don't understand on what basis you are saying that its not working? What is it in the header you have posted that made you believe so? Regards, Anil Aliyan -Original Message- From: Randy Katz [mailto:rk...@simplicityhosting.com] Sent: 06 January 2011 13:17 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] scanning question Hi, I have email coming into a user, in the header it looks like this: Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 - Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s scanners: attach: 1.4.0 clamav: 0.96.5 /m:51/d:9697 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE autolearn=no version=3.2.5 But in /var/qmail/control/simcontrol the entry for the email address is: k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach =.mp3:.src:.bat:.pif So it seems it is not working correctly. How do I get simscan to be authoritative for spam scanning, overrides and what gets through, and how do I verify that this is working? Thank you in advance, Randy Katz - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] Re: Strange Behavior of Domainkey
I agree. SPF has nothing to do with signing of the mail by Domainkeys or DKIM. If need any help in setting up DKIM please let me know. I have 5 servers and all are configured with DKIM and working without any issue. Regards, Anil Aliyan -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: 28 December 2010 23:24 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Strange Behavior of Domainkey The stock qmail-dk is just plain broken. It sometimes works, but it also fails to sign properly in some (unpredictable AFAICT) circumstances. I recommmend using DKIM if you really need to sign messages with a key. -- -Eric 'shubes' On 12/28/2010 10:34 AM, ya...@ardmail.com wrote: SPF is configured and not causing any problem in both cases. I was contemplating the possibility that it could be some difference in the config line for localhost vs anything else, but i made them identical as well. and it doesn't help :( 127.:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/private,R BLSMTPD=,NOP0FCHECK=1 192.168.1.60:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/pr ivate,RBLSMTPD=,NOP0FCHECK=1 :allow,BADMIMETYPE=,BADLOADERTYPE=M,CHKUSER_RCPTLIMIT=50,CHKUSER_WRONG RCPTLIMIT=10,DKSIGN=/var/qmail/control/domainkeys/%/private On 12/28/2010 02:36 AM, Anil Aliyan wrote: Is your tcp.smtp configuration for localhost or mailserver and you client has the same configuration? This is on the right track. The 'stock' configuration for squirrelmail presently uses an open relay configuration for localhost, with no authentication (this will hopefully change in v2). For the sake of consistency (and a little better security), I change my SM config to submit via port 587 and authenticate, and remove the 127.: line from tcp.smtp. See http://wiki.qmailtoaster.com/index.php/Fetchmail for such SM configuration. I expect that this will not fix your problem, and will cause the problem to exist with SM as well as Outlook. There's something to be said for consistency. ;) How have you implemented DK? The 'stock' configuration is a bit flakey. I think that there is a DKIM implementation that works well, although I haven't used it personally yet. I would look into DKIM (as opposed to using DK) if you haven't already. Have you configured SPF records for your clients network in your DNS records? Shouldn't need this, as SPF has to do with the server which sends the message, not client (origin) addresses. Regards, Anil Aliyan Thanks for your input, Anil. I'll let you help Yuri on this further. -Original Message- From: ya...@ardmail.com [mailto:ya...@ardmail.com] Sent: 28 December 2010 14:36 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Strange Behavior of Domainkey Hello, I noticed very strange behavior of domainkey with yahoo :( if i am sending the mail from squirrelmail everything works and yahoo passing the signature. if i am sending the same mail from outlook client yahoo says the signature is bad. is this a problem of my configuration? Any help will be appreciated. Thanks, ~yuri - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com -- --- Qmailtoaster is sponsored by Vickers Consulting Group
RE: [qmailtoaster] smtp greeting banner frustration
This happens because you smtp service is listening on all ip addresses. If you want to send separate greeting message individual domains you'll have to configure multiples instances of smtp services for all the domains on your server. I am not an expert but this my own understanding, I could be wrong. Regards, Anil Aliyan From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] Sent: 28 October 2010 16:02 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] smtp greeting banner frustration Hi Everyone, I was wondering if any list member would be able to help. I have a number of domains, on separate IP addresses but whenever a server connects to the server it receives the same SMTP greeting: 220 cpa2.localdomain - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP Whereas the hostname should only be the one which reverse resolves in DNS i.e. mail.domain.com Does anyone know how I would go about enabling this compliance with RFC821 4.3 and RFC2821 4.3.1 Any help will be gratefully received, Fin
RE: [qmailtoaster] smtp greeting banner frustration
This happens because you smtp service is listening on all ip addresses. If you want to send separate greeting message individual domains you'll have to configure multiples instances of smtp services for all the domains listening to the specific ip address bindings on your server. I am not an expert but this my own understanding, I could be wrong. Regards, Anil Aliyan From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] Sent: 28 October 2010 16:02 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] smtp greeting banner frustration Hi Everyone, I was wondering if any list member would be able to help. I have a number of domains, on separate IP addresses but whenever a server connects to the server it receives the same SMTP greeting: 220 cpa2.localdomain - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP Whereas the hostname should only be the one which reverse resolves in DNS i.e. mail.domain.com Does anyone know how I would go about enabling this compliance with RFC821 4.3 and RFC2821 4.3.1 Any help will be gratefully received, Fin
RE: [qmailtoaster] smtp greeting banner frustration
May be you can get some help from the link given below: http://www.gossamer-threads.com/lists/qmail/users/129252 Regards, Anil Aliyan From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] Sent: 28 October 2010 17:14 To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] smtp greeting banner frustration Thanks for your reply Anil, I was afraid that you might say that. Doesn't that mean that I need complete installations of toaster? I was hoping that someone had patched the daemon L Thanks again, Fin PS: Just in case... any Uber-Geeks out there with alternate suggestions? From: Anil Aliyan [mailto:acali...@gnvfc.net] Sent: 28 October 2010 12:34 To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] smtp greeting banner frustration This happens because you smtp service is listening on all ip addresses. If you want to send separate greeting message individual domains you'll have to configure multiples instances of smtp services for all the domains listening to the specific ip address bindings on your server. I am not an expert but this my own understanding, I could be wrong. Regards, Anil Aliyan From: Edward Finlayson [mailto:edward.finlay...@btinternet.com] Sent: 28 October 2010 16:02 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] smtp greeting banner frustration Hi Everyone, I was wondering if any list member would be able to help. I have a number of domains, on separate IP addresses but whenever a server connects to the server it receives the same SMTP greeting: 220 cpa2.localdomain - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP Whereas the hostname should only be the one which reverse resolves in DNS i.e. mail.domain.com Does anyone know how I would go about enabling this compliance with RFC821 4.3 and RFC2821 4.3.1 Any help will be gratefully received, Fin
RE: [qmailtoaster] Forwarding outgoing emails to a monitoring email box - Reg.
Use taps http://wiki.qmailtoaster.org/index.php/Taps From: Atul Paralikar [mailto:a...@etisbew.com] Sent: 26 October 2010 16:44 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Forwarding outgoing emails to a monitoring email box - Reg. Hi All, We have a requirement in our mailing service, where we would like to forward all the emails sent or written by any or a particular email user our mail server to be forwarded to a monitoring mail box. How can we achieve this? Thanks and Regards, Atul Paralikar
RE: [qmailtoaster] Issue with yahoo differing our email
Hi, Your DKIM key is not yet published properly in the DNS and yahoo mail server is unable to read it from YOUR DNS server. Are you using different keys for both Domainkeys and DKIM??? If yes then then check you signing key file and the public key you have published in your DNS. If you are not sure then regenerate the keys and republish it in the DNS. Regards, Anil Aliyan From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] Sent: 20 October 2010 11:39 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Issue with yahoo differing our email Hi List, I forgot to send to you the full header of successful message which yahoo didn't differ one of our mail. __ From j...@booom.com.ph Wed Oct 20 04:55:45 2010 X-RocketMail: 0001;R---S---MK--;5104 X-RocketUID: 00 X-RocketYMUMID: AEB5/NgAAWdYTL52VwoRo169a/Q X-RocketMIF: 1287550551;3008; X-RocketSGL: type=INBOX_VIEWS_PROTECT;hasTIP=0; X-Apparently-To: jet_zum...@yahoo.com via 216.252.121.64; Tue, 19 Oct 2010 21:55:51 -0700 X-RocketRCL: ;;;33 Return-Path: j...@booom.com.ph X-RocketTIP: 203.177.60.42 ; NO_TIP_HEADER_ALLOWED ; X-RocketSRV: s_ip=203.177.60.42;d_t=1287550551;Retro=N;SgrnP=N X-Rocket-Spam: 203.177.60.42 X-YahooFilteredBulk: 203.177.60.42 Received-SPF: pass ( http://mta1051.mail.ac4.yahoo.com/ mta1051.mail.ac4.yahoo.com: domain of j...@booom.com.ph designates 203.177.60.42 as permitted sender) X-Rocket-Track: cat=SP; info=rule:SPid=310;cconsam:UK;dmcu:UKtoken=NO_MATCH;cip_features:UK;ip:NNip=203.177.60.42,policy=n-w0,n100,g0;ipsh:UKip=203.177.60.42,policy=P=-1,X=-1,S=-1;cmsgbk:UKtoosmall, 0;mip:UKp=not_run;url2db:SPurl=booom.com.ph;wlrcpts:UK;abaca=ER0,jet_zum...@yahoo.com,1,er=-12/14001; id=a1u00MCh000-9J2155p; fs=49; gv=50; ip=203.177.60.42; av=12.5931p3; db=ver/5309.6049/81aa/svrs/0:32,2:17,3:18,4:19,11:60,12:61,13:62,14:63,21:140,22:141,23:142,24:143/shards/0:0:-o26,1:2,11,12,21,22:0-499,2:2,3,12,13,22,23:2500-2999,3:3,4,13,14,23,24:5000-5499,4:4,14,11,24,21:9000-9998/NbhDLC/0:-1:0/2; ,SRV_OR=0,WS_OR=0,OR=0,AB_WS_IP=0 X-YMailISG: 44Kw02UcZApNFJDwxlgnBG4nYBXBKngRYOdArZSyLzVqB.Eo LfXZS5.fHeg5ItE45YYyyt8c.YCPDEzpmOkPN.MT4svNXLeLY4P7EXd1ZhHM AtH4lbDCdF8hVHtjClwr219UoTuEwHkCT7.Vq.wg_GaAtpe70iZiQB6Bua6. _eXKdP8LZMRk0UbSOd69RQ18w8HtwBdRL4VrCfJ7zdi.xGHmwtqT0S39e38k aCZf3WFIfyQRpq1mvjxdRHmdHPgTrbO2iye8frvCMNS1jikztwO3yKXMl6K. k_uYCUSnKvZFry7kjD6z92iNUtDhawkA.4h2QHvEk_yRvhRV.K2W183DDV4p jJe2R2s9za_RNb0NEtMd3AZ1J7CMX.41kLyCc0AqHCyPlQThKXBp.iYoNV8T 2vc2UOmMJmon53_RaE6PU6q3TTQPZwgbbe5z.SPmA7_WH.x5WgDhX2XfU2.R Qq6MgJ2JfXbCb.DS8kaRzorp8_RxSweXEXnGy8B9YuiuILhmLyXUcuBySj8v jIWGi2s4SMbMZdkMBmuqv7TP_eA11sv9U7ImYCCmg8JNKbQwUjQSikk38pBy tlIudKMnKw3N0YGbZ3p06HGkXc9ej9_uRqpqpERPBdVrSJ7WRvKxwXWrdWwF Sh7Dtvwm1isDsJhlNincnoLzX4S69w3XIti54.b7eAZCLzbA6RXe5KrPYnMZ 2oWUsrbWm3NsbZOqKHL64.hNEnovD_XDWOgKTm2UUiEC5.WQZk55OCZqRD.1 jcLK4hnnbQDIuaqJTYxc4jD_twMRtgFJpZcGwu0_W3HVK18rO5C7AXubK4qI JULyY5VbppWK3AfM7shx8kErDzGGbLIoU8TAIUzCt0fz0.1nb9btsFySDKdo kK.uNiD8VNqr19h.gi1SZsTZpAHNRSp45xICPUYNPT6PqSGzTOl1Jq3eL.le b_c1YMkpSlqW6iY1Qpt1lWtQNBoLKd6VVE8o5Dvi1.MiFcAC25xSyPvYL8Z3 VQwS2GOiz8plU2xLMd35ipDxtYd7tSEGusDnGJ5PP_UmzZkxkCMykc85bTgb BIGQee9wFKKl53F8LaE- X-RocketHELO: http://erato.booom.com.ph/ erato.booom.com.ph X-RocketMAILFROM: j...@booom.com.ph X-RocketRCPTTO: 0-jet_zum...@yahoo.com X-RocketMSGID: 1287550546.333779.53...@mta1051.mail.ac4.yahoo.com#0 X-Originating-IP: [203.177.60.42] Authentication-Results: mta1051.mail.ac4.yahoo.com from=booom.com.ph; domainkeys=pass (ok); from=erato.booom.com.ph; dkim=permerror (no key) Received: from 127.0.0.1 (EHLO erato.booom.com.ph) (203.177.60.42) by mta1051.mail.ac4.yahoo.com with SMTP; Tue, 19 Oct 2010 21:55:51 -0700 DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=erato.booom.com.ph; h= message-id:date:subject:from:to:mime-version:content-type :content-transfer-encoding; s=dkim1; bh=/j9Y8LrOqVpbsy5chnp8gGGh tlg=; b=c+a9FrRJywCWxCl/4ovBQGu0v40P1WbmsNEOXoONZG0bZ/ciFI9cgEcG ++dYOp4Y Received: (qmail 20967 invoked by uid 89); 20 Oct 2010 04:55:45 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; b=sK1Lt9DnCQsA1ewoDbpcCpmlh6MuVU7S0beBm1p/Of8xUo5ArYL7piaMJE+0XeQx; Received: from unknown (HELO http://booom.com.ph/ booom.com.ph) (127.0.0.1) by erato.booom.com.ph with SMTP; 20 Oct 2010 04:55:45 - Received: from 124.6.155.51 (proxying for 192.168.0.135) (SquirrelMail authenticated user
RE: [qmailtoaster] Issue with yahoo differing our email
I am using same keys for Domainkeys and DKIM without any problems and have published same key for Domainkeys and DKIM in my DNS. If you are using DKIM setup you can configure Domainkeys along with DKIM in the same configuration file and need not configure Domainkeys separately. From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] Sent: 20 October 2010 11:39 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Issue with yahoo differing our email Hi List, I forgot to send to you the full header of successful message which yahoo didn't differ one of our mail. __ From j...@booom.com.ph Wed Oct 20 04:55:45 2010 X-RocketMail: 0001;R---S---MK--;5104 X-RocketUID: 00 X-RocketYMUMID: AEB5/NgAAWdYTL52VwoRo169a/Q X-RocketMIF: 1287550551;3008; X-RocketSGL: type=INBOX_VIEWS_PROTECT;hasTIP=0; X-Apparently-To: jet_zum...@yahoo.com via 216.252.121.64; Tue, 19 Oct 2010 21:55:51 -0700 X-RocketRCL: ;;;33 Return-Path: j...@booom.com.ph X-RocketTIP: 203.177.60.42 ; NO_TIP_HEADER_ALLOWED ; X-RocketSRV: s_ip=203.177.60.42;d_t=1287550551;Retro=N;SgrnP=N X-Rocket-Spam: 203.177.60.42 X-YahooFilteredBulk: 203.177.60.42 Received-SPF: pass ( http://mta1051.mail.ac4.yahoo.com/ mta1051.mail.ac4.yahoo.com: domain of j...@booom.com.ph designates 203.177.60.42 as permitted sender) X-Rocket-Track: cat=SP; info=rule:SPid=310;cconsam:UK;dmcu:UKtoken=NO_MATCH;cip_features:UK;ip:NNip=203.177.60.42,policy=n-w0,n100,g0;ipsh:UKip=203.177.60.42,policy=P=-1,X=-1,S=-1;cmsgbk:UKtoosmall, 0;mip:UKp=not_run;url2db:SPurl=booom.com.ph;wlrcpts:UK;abaca=ER0,jet_zum...@yahoo.com,1,er=-12/14001; id=a1u00MCh000-9J2155p; fs=49; gv=50; ip=203.177.60.42; av=12.5931p3; db=ver/5309.6049/81aa/svrs/0:32,2:17,3:18,4:19,11:60,12:61,13:62,14:63,21:140,22:141,23:142,24:143/shards/0:0:-o26,1:2,11,12,21,22:0-499,2:2,3,12,13,22,23:2500-2999,3:3,4,13,14,23,24:5000-5499,4:4,14,11,24,21:9000-9998/NbhDLC/0:-1:0/2; ,SRV_OR=0,WS_OR=0,OR=0,AB_WS_IP=0 X-YMailISG: 44Kw02UcZApNFJDwxlgnBG4nYBXBKngRYOdArZSyLzVqB.Eo LfXZS5.fHeg5ItE45YYyyt8c.YCPDEzpmOkPN.MT4svNXLeLY4P7EXd1ZhHM AtH4lbDCdF8hVHtjClwr219UoTuEwHkCT7.Vq.wg_GaAtpe70iZiQB6Bua6. _eXKdP8LZMRk0UbSOd69RQ18w8HtwBdRL4VrCfJ7zdi.xGHmwtqT0S39e38k aCZf3WFIfyQRpq1mvjxdRHmdHPgTrbO2iye8frvCMNS1jikztwO3yKXMl6K. k_uYCUSnKvZFry7kjD6z92iNUtDhawkA.4h2QHvEk_yRvhRV.K2W183DDV4p jJe2R2s9za_RNb0NEtMd3AZ1J7CMX.41kLyCc0AqHCyPlQThKXBp.iYoNV8T 2vc2UOmMJmon53_RaE6PU6q3TTQPZwgbbe5z.SPmA7_WH.x5WgDhX2XfU2.R Qq6MgJ2JfXbCb.DS8kaRzorp8_RxSweXEXnGy8B9YuiuILhmLyXUcuBySj8v jIWGi2s4SMbMZdkMBmuqv7TP_eA11sv9U7ImYCCmg8JNKbQwUjQSikk38pBy tlIudKMnKw3N0YGbZ3p06HGkXc9ej9_uRqpqpERPBdVrSJ7WRvKxwXWrdWwF Sh7Dtvwm1isDsJhlNincnoLzX4S69w3XIti54.b7eAZCLzbA6RXe5KrPYnMZ 2oWUsrbWm3NsbZOqKHL64.hNEnovD_XDWOgKTm2UUiEC5.WQZk55OCZqRD.1 jcLK4hnnbQDIuaqJTYxc4jD_twMRtgFJpZcGwu0_W3HVK18rO5C7AXubK4qI JULyY5VbppWK3AfM7shx8kErDzGGbLIoU8TAIUzCt0fz0.1nb9btsFySDKdo kK.uNiD8VNqr19h.gi1SZsTZpAHNRSp45xICPUYNPT6PqSGzTOl1Jq3eL.le b_c1YMkpSlqW6iY1Qpt1lWtQNBoLKd6VVE8o5Dvi1.MiFcAC25xSyPvYL8Z3 VQwS2GOiz8plU2xLMd35ipDxtYd7tSEGusDnGJ5PP_UmzZkxkCMykc85bTgb BIGQee9wFKKl53F8LaE- X-RocketHELO: http://erato.booom.com.ph/ erato.booom.com.ph X-RocketMAILFROM: j...@booom.com.ph X-RocketRCPTTO: 0-jet_zum...@yahoo.com X-RocketMSGID: 1287550546.333779.53...@mta1051.mail.ac4.yahoo.com#0 X-Originating-IP: [203.177.60.42] Authentication-Results: mta1051.mail.ac4.yahoo.com from=booom.com.ph; domainkeys=pass (ok); from=erato.booom.com.ph; dkim=permerror (no key) Received: from 127.0.0.1 (EHLO erato.booom.com.ph) (203.177.60.42) by mta1051.mail.ac4.yahoo.com with SMTP; Tue, 19 Oct 2010 21:55:51 -0700 DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=erato.booom.com.ph; h= message-id:date:subject:from:to:mime-version:content-type :content-transfer-encoding; s=dkim1; bh=/j9Y8LrOqVpbsy5chnp8gGGh tlg=; b=c+a9FrRJywCWxCl/4ovBQGu0v40P1WbmsNEOXoONZG0bZ/ciFI9cgEcG ++dYOp4Y Received: (qmail 20967 invoked by uid 89); 20 Oct 2010 04:55:45 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; b=sK1Lt9DnCQsA1ewoDbpcCpmlh6MuVU7S0beBm1p/Of8xUo5ArYL7piaMJE+0XeQx; Received: from unknown (HELO http://booom.com.ph/ booom.com.ph) (127.0.0.1) by erato.booom.com.ph with SMTP; 20 Oct 2010 04:55:45 - Received: from 124.6.155.51 (proxying for 192.168.0.135) (SquirrelMail authenticated user july) by booom.com.ph with HTTP; Wed, 20 Oct 2010 12:55:45 +0800 Message-ID:
RE: [qmailtoaster] Issue with yahoo differing our email
Please check your DNS records for Domainkeys and DKIM on the below mentioned links. If possible please do paste your DNS server entries for DKIM here. http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html regards Anil Aliyan From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] Sent: 20 October 2010 11:39 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Issue with yahoo differing our email Hi List, I forgot to send to you the full header of successful message which yahoo didn't differ one of our mail. __ From j...@booom.com.ph Wed Oct 20 04:55:45 2010 X-RocketMail: 0001;R---S---MK--;5104 X-RocketUID: 00 X-RocketYMUMID: AEB5/NgAAWdYTL52VwoRo169a/Q X-RocketMIF: 1287550551;3008; X-RocketSGL: type=INBOX_VIEWS_PROTECT;hasTIP=0; X-Apparently-To: jet_zum...@yahoo.com via 216.252.121.64; Tue, 19 Oct 2010 21:55:51 -0700 X-RocketRCL: ;;;33 Return-Path: j...@booom.com.ph X-RocketTIP: 203.177.60.42 ; NO_TIP_HEADER_ALLOWED ; X-RocketSRV: s_ip=203.177.60.42;d_t=1287550551;Retro=N;SgrnP=N X-Rocket-Spam: 203.177.60.42 X-YahooFilteredBulk: 203.177.60.42 Received-SPF: pass ( http://mta1051.mail.ac4.yahoo.com/ mta1051.mail.ac4.yahoo.com: domain of j...@booom.com.ph designates 203.177.60.42 as permitted sender) X-Rocket-Track: cat=SP; info=rule:SPid=310;cconsam:UK;dmcu:UKtoken=NO_MATCH;cip_features:UK;ip:NNip=203.177.60.42,policy=n-w0,n100,g0;ipsh:UKip=203.177.60.42,policy=P=-1,X=-1,S=-1;cmsgbk:UKtoosmall, 0;mip:UKp=not_run;url2db:SPurl=booom.com.ph;wlrcpts:UK;abaca=ER0,jet_zum...@yahoo.com,1,er=-12/14001; id=a1u00MCh000-9J2155p; fs=49; gv=50; ip=203.177.60.42; av=12.5931p3; db=ver/5309.6049/81aa/svrs/0:32,2:17,3:18,4:19,11:60,12:61,13:62,14:63,21:140,22:141,23:142,24:143/shards/0:0:-o26,1:2,11,12,21,22:0-499,2:2,3,12,13,22,23:2500-2999,3:3,4,13,14,23,24:5000-5499,4:4,14,11,24,21:9000-9998/NbhDLC/0:-1:0/2; ,SRV_OR=0,WS_OR=0,OR=0,AB_WS_IP=0 X-YMailISG: 44Kw02UcZApNFJDwxlgnBG4nYBXBKngRYOdArZSyLzVqB.Eo LfXZS5.fHeg5ItE45YYyyt8c.YCPDEzpmOkPN.MT4svNXLeLY4P7EXd1ZhHM AtH4lbDCdF8hVHtjClwr219UoTuEwHkCT7.Vq.wg_GaAtpe70iZiQB6Bua6. _eXKdP8LZMRk0UbSOd69RQ18w8HtwBdRL4VrCfJ7zdi.xGHmwtqT0S39e38k aCZf3WFIfyQRpq1mvjxdRHmdHPgTrbO2iye8frvCMNS1jikztwO3yKXMl6K. k_uYCUSnKvZFry7kjD6z92iNUtDhawkA.4h2QHvEk_yRvhRV.K2W183DDV4p jJe2R2s9za_RNb0NEtMd3AZ1J7CMX.41kLyCc0AqHCyPlQThKXBp.iYoNV8T 2vc2UOmMJmon53_RaE6PU6q3TTQPZwgbbe5z.SPmA7_WH.x5WgDhX2XfU2.R Qq6MgJ2JfXbCb.DS8kaRzorp8_RxSweXEXnGy8B9YuiuILhmLyXUcuBySj8v jIWGi2s4SMbMZdkMBmuqv7TP_eA11sv9U7ImYCCmg8JNKbQwUjQSikk38pBy tlIudKMnKw3N0YGbZ3p06HGkXc9ej9_uRqpqpERPBdVrSJ7WRvKxwXWrdWwF Sh7Dtvwm1isDsJhlNincnoLzX4S69w3XIti54.b7eAZCLzbA6RXe5KrPYnMZ 2oWUsrbWm3NsbZOqKHL64.hNEnovD_XDWOgKTm2UUiEC5.WQZk55OCZqRD.1 jcLK4hnnbQDIuaqJTYxc4jD_twMRtgFJpZcGwu0_W3HVK18rO5C7AXubK4qI JULyY5VbppWK3AfM7shx8kErDzGGbLIoU8TAIUzCt0fz0.1nb9btsFySDKdo kK.uNiD8VNqr19h.gi1SZsTZpAHNRSp45xICPUYNPT6PqSGzTOl1Jq3eL.le b_c1YMkpSlqW6iY1Qpt1lWtQNBoLKd6VVE8o5Dvi1.MiFcAC25xSyPvYL8Z3 VQwS2GOiz8plU2xLMd35ipDxtYd7tSEGusDnGJ5PP_UmzZkxkCMykc85bTgb BIGQee9wFKKl53F8LaE- X-RocketHELO: http://erato.booom.com.ph/ erato.booom.com.ph X-RocketMAILFROM: j...@booom.com.ph X-RocketRCPTTO: 0-jet_zum...@yahoo.com X-RocketMSGID: 1287550546.333779.53...@mta1051.mail.ac4.yahoo.com#0 X-Originating-IP: [203.177.60.42] Authentication-Results: mta1051.mail.ac4.yahoo.com from=booom.com.ph; domainkeys=pass (ok); from=erato.booom.com.ph; dkim=permerror (no key) Received: from 127.0.0.1 (EHLO erato.booom.com.ph) (203.177.60.42) by mta1051.mail.ac4.yahoo.com with SMTP; Tue, 19 Oct 2010 21:55:51 -0700 DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=erato.booom.com.ph; h= message-id:date:subject:from:to:mime-version:content-type :content-transfer-encoding; s=dkim1; bh=/j9Y8LrOqVpbsy5chnp8gGGh tlg=; b=c+a9FrRJywCWxCl/4ovBQGu0v40P1WbmsNEOXoONZG0bZ/ciFI9cgEcG ++dYOp4Y Received: (qmail 20967 invoked by uid 89); 20 Oct 2010 04:55:45 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; b=sK1Lt9DnCQsA1ewoDbpcCpmlh6MuVU7S0beBm1p/Of8xUo5ArYL7piaMJE+0XeQx; Received: from unknown (HELO http://booom.com.ph/ booom.com.ph) (127.0.0.1) by erato.booom.com.ph with SMTP; 20 Oct 2010 04:55:45 - Received: from 124.6.155.51 (proxying for 192.168.0.135) (SquirrelMail authenticated user july) by booom.com.ph with HTTP; Wed, 20 Oct 2010 12:55:45 +0800
RE: [qmailtoaster] Addressbook restoration issue
HI, Install php-pear on your system. #yum –y install php-pear Regards, Anil Aliyan From: Joselito Tapangan [mailto:joselitotapan...@gmail.com] Sent: 21 October 2010 16:55 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Addressbook restoration issue Hi list, I have try to restore our address book is squirrelmail. the restoration of the database is successfully done the database of squirrelmail together with the data. I only add to the config.php in squirrel is: $addrbook_dsn = ' mysql://username:password@localhost/squirrelmail'; $addrbook_table = 'address'; $prefs_dsn = ' mysql://username:password@localhost/squirrelmail'; $prefs_table = 'userprefs'; When I try to view the information saved in the addressbook in squirrelmail. I got this error ERROR:Could not include PEAR database functions required for the database backend. Is PEAR installed, and is the include path set correctly to find DB.php? Please contact your system administrator and report this error. . What does this mean? How can I solve this issue? I am using latest version of CentOS, php version is 5.3, and I also install latest version of qmail-toaster. Respectfully Yours, Joselito E. Tapangan Network Administrator Booom!! Interactive, Inc. 2F Tulips Center Bldg. A.S. Fortuna St. Mandaue City, Cebu Philippines, 6014.
RE: [qmailtoaster] Issue with yahoo differing our email
Can you tell us when you updated your DNS records for Domain Keys??? -Original Message- From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com] Sent: 16 October 2010 16:48 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Issue with yahoo differing our email Hi, Update from yahoo differed full headers. Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. t...@yahoo.com: ould not find ParserDetails.ini in /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX rUser and password not set, continuing without authentication. t...@yahoo.com 74.6.136.65 failed after I sent the message. Remote host said: 554 Message not allowed - [PH01] Email not accepted for policy reasons. Please visit http://postmaster.yahoo.com/errors/postmaster-27.html [120] --- Below this line is a copy of the message. Return-Path: sctene...@booom.com.ph Received: (qmail 11368 invoked by uid 89); 16 Oct 2010 11:13:06 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; b=rutsd3WrxguNgCgfu7JnbQdZL0Rpv3Xm7IqLzOr+5AaKB8/Fppr8zoEm+VKh0Cys; Received: from unknown (HELO booom.com.ph) (127.0.0.1) by erato.booom.com.ph with SMTP; 16 Oct 2010 11:13:06 - Received: from 124.6.155.51 (proxying for 192.168.0.5) (SquirrelMail authenticated user sctene...@booom.com.ph) by booom.com.ph with HTTP; Sat, 16 Oct 2010 19:13:06 +0800 Message-ID: a92648d2dc3ad43bd31e8430b0c70437.squir...@booom.com.ph Date: Sat, 16 Oct 2010 19:13:06 +0800 Subject: test From: sctene...@booom.com.ph To: t...@yahoo.com User-Agent: SquirrelMail/1.4.20-1.3.17 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal I also tried to add dkim but with no avail. its now DKIM + domain keys. If this is no good please let me know which is the standard and how to remove 1. Please advice. Thank you, Sandeil - Original Message From: Sandeil Tenebro mayukmo...@yahoo.com To: qmailtoaster mailing list qmailtoaster-list@qmailtoaster.com Sent: Saturday, October 16, 2010 6:46:09 PM Subject: [qmailtoaster] Issue with yahoo differing our email Hi List, Just migrated to a new server. We can properly send emails to other public domains but we have an issue with yahoo. The are differing our email. Domain key is configured but with no avail. Full message from yahoo: Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. t...@yahoo.com: User and password not set, continuing without authentication. t...@yahoo.com 98.139.54.60 failed after I sent the message. Remote host said: 554 Message not allowed - [PH01] Email not accepted for policy reasons. Please visit http://postmaster.yahoo.com/errors/postmaster-27.html [120] --- Below this line is a copy of the message. Return-Path: sctene...@booom.com.ph Received: (qmail 9522 invoked by uid 89); 16 Oct 2010 10:42:31 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; b=TE7CUoKQUNn55fHcF7j9Oup+PXV3dF8YJBHkEgXD5bYc5SK8FMFOWHJW9/LP9zpS; Received: from unknown (HELO booom.com.ph) (127.0.0.1) by erato.booom.com.ph with SMTP; 16 Oct 2010 10:42:31 - Received: from 124.6.155.51 (proxying for 192.168.0.5) (SquirrelMail authenticated user sctene...@booom.com.ph) by booom.com.ph with HTTP; Sat, 16 Oct 2010 18:42:31 +0800 Message-ID: c62ad9e34ce048b2e1d1ad032fc97f1b.squir...@booom.com.ph Date: Sat, 16 Oct 2010 18:42:31 +0800 Subject: test From: sctene...@booom.com.ph To: t...@yahoo.com User-Agent: SquirrelMail/1.4.20-1.3.17 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Full header from google: Delivered-To: t...@gmail.com Received: by 10.216.52.66 with SMTP id d44cs397493wec; Sat, 16 Oct 2010 03:23:25 -0700 (PDT) Received: by 10.142.211.20 with SMTP id j20mr1526362wfg.408.1287224601655; Sat, 16 Oct 2010 03:23:21 -0700 (PDT) Return-Path: sctene...@booom.com.ph Received: from erato.booom.com.ph (ns2.booom.com.ph [203.177.60.42]) by mx.google.com with ESMTP id l40si30124712wfa.106.2010.10.16.03.23.19; Sat, 16 Oct 2010 03:23:20 -0700 (PDT) Received-SPF: pass (google.com: domain of sctene...@booom.com.ph designates 203.177.60.42 as permitted sender) client-ip=203.177.60.42; DomainKey-Status: good Authentication-Results: mx.google.com; spf=pass (google.com: domain of sctene...@booom.com.ph designates 203.177.60.42 as permitted sender)
RE: [qmailtoaster] Issue with yahoo differing our email
http://perl-xml.sourceforge.net/faq/#parserdetails.ini 3.18. could not find ParserDetails.ini A number of people have reported encountering the error could not find ParserDetails.ini in ... when installing or attempting to use XML::SAX. ParserDetails.ini is used by XML::SAX::ParserFactory to determine which SAX parser modules are installed. It should be created by the XML::SAX installation script and should be updated automatically by the install script for each SAX parser module. If you are installing XML::SAX manually you must run Makefile.PL. Unpacking the tarball and copying the files into your Perl lib directory will not work. During the initial installation, if you are asked whether ParserDetails.ini should be updated, always say yes. If you say no, the file will not be created. If you are using ActivePerl, the following command should resolve the problem: ppm install http://theoryx5.uwinnipeg.ca/ppms/XML-SAX.ppd Once you have successfully installed XML::SAX, you should consider installing a module such as XML::SAX::Expat or XML::LibXML to replace the slower pure-Perl parser bundled with SAX. If you are packaging XML::SAX in an alternative distribution format (such as RPM), your post-install script should check if ParserDetails.ini exists and if it doesn't, run this command: perl -MXML::SAX -e XML::SAX-add_parser(q(XML::SAX::PurePerl))-save_parsers() Don't unconditionally run this command, or users who re-install XML::SAX may find that any fast SAX parser they have installed will be replaced as the default by the pure-Perl parser. I hope this will help many of us who are facing this problem. Regards, Anil Aliyan -Original Message- From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com] Sent: 16 October 2010 16:48 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Issue with yahoo differing our email Hi, Update from yahoo differed full headers. Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. t...@yahoo.com: ould not find ParserDetails.ini in /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX rUser and password not set, continuing without authentication. t...@yahoo.com 74.6.136.65 failed after I sent the message. Remote host said: 554 Message not allowed - [PH01] Email not accepted for policy reasons. Please visit http://postmaster.yahoo.com/errors/postmaster-27.html [120] --- Below this line is a copy of the message. Return-Path: sctene...@booom.com.ph Received: (qmail 11368 invoked by uid 89); 16 Oct 2010 11:13:06 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; b=rutsd3WrxguNgCgfu7JnbQdZL0Rpv3Xm7IqLzOr+5AaKB8/Fppr8zoEm+VKh0Cys; Received: from unknown (HELO booom.com.ph) (127.0.0.1) by erato.booom.com.ph with SMTP; 16 Oct 2010 11:13:06 - Received: from 124.6.155.51 (proxying for 192.168.0.5) (SquirrelMail authenticated user sctene...@booom.com.ph) by booom.com.ph with HTTP; Sat, 16 Oct 2010 19:13:06 +0800 Message-ID: a92648d2dc3ad43bd31e8430b0c70437.squir...@booom.com.ph Date: Sat, 16 Oct 2010 19:13:06 +0800 Subject: test From: sctene...@booom.com.ph To: t...@yahoo.com User-Agent: SquirrelMail/1.4.20-1.3.17 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal I also tried to add dkim but with no avail. its now DKIM + domain keys. If this is no good please let me know which is the standard and how to remove 1. Please advice. Thank you, Sandeil - Original Message From: Sandeil Tenebro mayukmo...@yahoo.com To: qmailtoaster mailing list qmailtoaster-list@qmailtoaster.com Sent: Saturday, October 16, 2010 6:46:09 PM Subject: [qmailtoaster] Issue with yahoo differing our email Hi List, Just migrated to a new server. We can properly send emails to other public domains but we have an issue with yahoo. The are differing our email. Domain key is configured but with no avail. Full message from yahoo: Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. t...@yahoo.com: User and password not set, continuing without authentication. t...@yahoo.com 98.139.54.60 failed after I sent the message. Remote host said: 554 Message not allowed - [PH01] Email not accepted for policy reasons. Please visit http://postmaster.yahoo.com/errors/postmaster-27.html [120] --- Below this line is a copy of the message. Return-Path: sctene...@booom.com.ph Received: (qmail 9522 invoked by uid 89); 16 Oct 2010 10:42:31 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa
RE: [qmailtoaster] Issue with yahoo differing our email
Can you send a test message on a valid yahoo email address instead of t...@yahoo.com and then check it. Send a test message on my email address anil.ali...@yahoo.co.in -Original Message- From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com] Sent: 16 October 2010 18:12 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Issue with yahoo differing our email Hi Anil, Domain keys and dkim $ORIGIN mydomain.com. _domainkey TXT t=y\; o=-\; r=t...@booom.com.ph $ORIGIN _domainkey.mydomain.com. dkim1 TXT k=rsa\; p=My Key private TXT k=rsa\; p=My Key That is the entry for DNS its a slave DNS in this case The suggested procedure worked. Thank you This is the new header: Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. t...@yahoo.com: User and password not set, continuing without authentication. t...@yahoo.com 66.94.236.34 failed after I sent the message. Remote host said: 554 Message not allowed - [PH01] Email not accepted for policy reasons. Please visit http://postmaster.yahoo.com/errors/postmaster-27.html [120] --- Below this line is a copy of the message. Return-Path: sctene...@booom.com.ph Received: (qmail 7558 invoked by uid 89); 16 Oct 2010 12:35:39 - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=booom.com.ph; b=WjTuJw1zMG5xMPNvZ2u1G/TeGp4eqFjBhOW162fBjqAWMUk+FOq1oyb6wU6yw2Ea; Received: from unknown (HELO booom.com.ph) (127.0.0.1) by erato.booom.com.ph with SMTP; 16 Oct 2010 12:35:39 - Received: from 124.6.155.51 (proxying for 192.168.0.5) (SquirrelMail authenticated user sctene...@booom.com.ph) by booom.com.ph with HTTP; Sat, 16 Oct 2010 20:35:39 +0800 Message-ID: 93a971cd7d3814d8dff19d55d42bfed5.squir...@booom.com.ph Date: Sat, 16 Oct 2010 20:35:39 +0800 Subject: test From: sctene...@booom.com.ph To: t...@yahoo.com User-Agent: SquirrelMail/1.4.20-1.3.17 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Any idea from the group? Thanks - Original Message From: Anil Aliyan acali...@gnvfc.net To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, October 16, 2010 7:52:57 PM Subject: RE: [qmailtoaster] Issue with yahoo differing our email http://perl-xml.sourceforge.net/faq/#parserdetails.ini 3.18. could not find ParserDetails.ini A number of people have reported encountering the error could not find ParserDetails.ini in ... when installing or attempting to use XML::SAX. ParserDetails.ini is used by XML::SAX::ParserFactory to determine which SAX parser modules are installed. It should be created by the XML::SAX installation script and should be updated automatically by the install script for each SAX parser module. If you are installing XML::SAX manually you must run Makefile.PL. Unpacking the tarball and copying the files into your Perl lib directory will not work. During the initial installation, if you are asked whether ParserDetails.ini should be updated, always say yes. If you say no, the file will not be created. If you are using ActivePerl, the following command should resolve the problem: ppm install http://theoryx5.uwinnipeg.ca/ppms/XML-SAX.ppd Once you have successfully installed XML::SAX, you should consider installing a module such as XML::SAX::Expat or XML::LibXML to replace the slower pure-Perl parser bundled with SAX. If you are packaging XML::SAX in an alternative distribution format (such as RPM), your post-install script should check if ParserDetails.ini exists and if it doesn't, run this command: perl -MXML::SAX -e XML::SAX-add_parser(q(XML::SAX::PurePerl))-save_parsers() Don't unconditionally run this command, or users who re-install XML::SAX may find that any fast SAX parser they have installed will be replaced as the default by the pure-Perl parser. I hope this will help many of us who are facing this problem. Regards, Anil Aliyan -Original Message- From: Sandeil Tenebro [mailto:mayukmo...@yahoo.com] Sent: 16 October 2010 16:48 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Issue with yahoo differing our email Hi, Update from yahoo differed full headers. Hi. This is the qmail-send program at erato.booom.com.ph. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. t...@yahoo.com: ould not find ParserDetails.ini in /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX rUser and password not set, continuing without authentication. t...@yahoo.com 74.6.136.65 failed after I sent the message. Remote host said: 554 Message not allowed - [PH01] Email not accepted for policy
RE: [qmailtoaster] Block Mail
As rightly mentioned below Add the domain in badmailfrom file locate in /var/qmail/control/ Secondly , I am sorry but I really hate customers who instead of taking action at their end and push other parties to get things done for them. As an service provider you should block their mail server and force them to take necessary action on their exchange mail server. From: Amit Dalia [mailto:a...@ikf.co.in] Sent: 21 September 2010 12:36 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Block Mail Thanks Dhaval, Actually my server is QMT box is used as a filtering and relaying server for my client exchange server. Now problem is their exchange server is compromised and its relaying 1000s of spam mails to my QMT server. I don't have access to exchange server but client wants my QMT server to block all incoming as well as outgoing spam mails.Right now I have 5000 spam mails in my queue because of which delivery to genuine mail is getting delayed. How can I prevent and optimize my server. All from address is someting like mentioned below: asd...@*.hinet.net where * is any subdomain name. So how do I restrict *.hinet.net to enter my server. Regards, Amit At Tuesday, 21-09-2010 on 11:39 dhaval thakar wrote: On Tue, Sep 21, 2010 at 10:37 AM, Amit Dalia a...@ikf.co.in wrote: Hi, Is there any way to reject the mail if anywhere in the headers there is a specific domain. I want to reject the mail for incoming as well as for outgoing to that domain. I don't care if the mail is coming from authenticated user account. Amit for incoming you can try qmail/control/badmailfrom -- Regards Dhaval Thakar http://www.linuxreaders.com/ http://www.ipguide.info/
RE: [qmailtoaster] Attack?
This could happen if the client machine of a valid user is infected with some virus or Trojan which send mail using outlook settings. From: senthil vel [mailto:senthilv...@gmail.com] Sent: 22 June 2010 17:07 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Attack? Seems some one is spamming. Any one of your mail account might be compromised. The server is using port 587 to accept mails from local users? . /var/log/qmail/submission or /var/log/qmail/smtp will tell the truth. say for example, search for qeezajtze...@stargate5.com in above mentioned logs. So that we can get the origination of this mail. If it is using a local mail id for authentication, reset the password of the mail. Also remove the mails in queue using qmail-remove. --Senthilvel. On Tue, Jun 22, 2010 at 4:29 PM, Rafael Andrade raf...@riosulense.com.br wrote: Hello list, I have a production server with qmailtoaster on centos running 2 years perfectly, recently the server stuck, with many messages in queue, i need to stop qmail, clean the queue and running qmail again, but i need a solution to fix this problem, any knows or can help? Thanks so much Examples in queue: Client = Hide Client Domain [r...@net ~]# qmailctl queue | head messages in queue: 14691 messages in queue but not yet preprocessed: 2 21 Jun 2010 22:45:02 GMT #3087267 1435 anonym...@client.ind.br remote prittyg...@yahoo.com.br 21 Jun 2010 22:34:44 GMT #3069258 1430 anonym...@client.ind.br remote prisci...@terra.com.br 21 Jun 2010 22:44:39 GMT #3079585 1439 anonym...@client.ind.br remote priscillame...@yahoo.com.br 22 Jun 2010 00:02:57 GMT #2443198 1438 anonym...@client.ind.br remote qeezajtze...@stargate5.com Thanks so much - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] dovecot install error
Try inside the dir /usr/src/redhat/SPECS rpmbuild --bb --target=i686 dovecot.spec or rpmbuild --bb dovecot.spec Regards, Anil Aliyan -Original Message- From: Rajesh M [mailto:24x7ser...@24x7server.net] Sent: 12 June 2010 08:11 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] dovecot install error hi i followed the instructions as posted by mr amit http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg25551.html i downloaded the rpm from http://dl.atrpms.net/all/dovecot-1.2.11-3_108.src.rpm and put it in /usr/src/qtms-install rpm -i dovecot*.src.rpm it gave a warning warning: dovecot-1.2.11-3_108.src.rpm Header V4 DSA signature: NOKEY, key ID 6534c2b when i did rpmbuild -ba --target=i686 dovecot.spec i got error rpmbuild failed to stat /usr/src/qtms-install/-ba no such file or directory i am stuck here. help required please if any body has implemented this i would like the exact steps please thanks very much What system are you building on? I'd venture to guess that you're in the wrong directory. If you're running CentOS, you want to be in /usr/src/redhat/SPECS to run the command you were running. - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com hi i tried that also, it now gives error failed to stat /usr/src/redhat/SPECS/-ba no such file or directory i think this is some other issue --- why is it considering the option -ba as a directory rajesh - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Receiving two copies of every mail.
Hi All, I am receiving two copies of every mail from qmailtoaster-list@qmailtoaster.com since last couple of weeks, but I realised this yesterday only. This is not the case when I receive mails from any other mail domain or email address which makes me believe that there is nothing wrong my side. Is anybody else facing this problem??? Regards, Anil Aliyan
RE: [qmailtoaster] Re: Receiving two copies of every mail.
Hii, I wasn't expecting such a long discussion on this matter. It got resolved on its one this afternoon and I am not receiving any them twice anyone. I rarely touch my server and there is no possibility that things get changed on their own in the server. Anyways its solved for me on its own as it started on its own. Regards, Anil Aliyan -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: 09 June 2010 00:08 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Receiving two copies of every mail. That's ok. Sometimes one thing leads to another. (Who did that song?) ;) Thanks. -- -Eric 'shubes' Patrick Ring wrote: OK. I didn't mean to hijack the original thread. I'll see what I can come up with on what I brought up. Patrick M. Ring P. Ring Technologies Louisiana Web Host, LLC. 985-868-4200 -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Tuesday, June 08, 2010 12:46 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Receiving two copies of every mail. Interesting. I wonder if it's somehow related to either: .) the spambox feature (which I believe modifies this file) or perhaps .) some side effect of a user changing their preferences. Might want to test these to see if you can recreate the result. I think the former is more likely. In any case, this seems to point to a problem with the maildrop-toaster package. Please start a new thread for further discussion about this. -- -Eric 'shubes' Patrick Ring wrote: Thank you. I've been trying to figure it out for 4 years now. Some process seems to add the second entry to the .qmail file along the way. I'm not sure if it is when the account is modified by one of the web interfaces or by some other process. Here is an example of a .qmail file from an account that was receiving double emails: | /var/qmail/bin/preline /usr/bin/maildrop -A 'Content-Filter:maildrop-toaster' /etc/mail/mailfilter #/home/vpopmail/domains/somedomain.com/mary/Maildir/ Notice I remarked the second line. After that, the account has been fine ever since. Every now and again, I get one that somehow reverts back. Whenever it comes up, I'll look for answers for a day or two, then get busy and forget about it Last time it happened was when I was still using the older Qmail Toaster Admin (http://mail.domain.xyz/admin-toaster/) I have been using the qcontrol (thank you Jake) for a while now, and I'm not sure I've seen the occurrence since I started using it. Patrick M. Ring P. Ring Technologies Louisiana Web Host, LLC. 985-868-4200 -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Tuesday, June 08, 2010 11:28 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Receiving two copies of every mail. Nice catch, Patrick. Any idea how these entries may have gotten in the .qmail file(s)? Just curious. -- -Eric 'shubes' Patrick Ring wrote: Sometimes it's also helpful to check your .qmail file in the accounts where this happens. It might be pushing the mail through the spamfilter twice. Remark or delete the second entry in the /home/vpopmail/domains/yourdomain.com/youruser/.qmail file if this happens. (at least this has worked for me) Patrick M. Ring P. Ring Technologies Louisiana Web Host, LLC. 985-868-4200 -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Tuesday, June 08, 2010 10:36 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Receiving two copies of every mail. Anil Aliyan wrote: Hi All, I am receiving two copies of every mail from qmailtoaster-list@qmailtoaster.com mailto:qmailtoaster-list@qmailtoaster.com since last couple of weeks, but I realised this yesterday only. This is not the case when I receive mails from any other mail domain or email address which makes me believe that there is nothing wrong my side. Is anybody else facing this problem??? Regards, Anil Aliyan I wouldn't experience this, as I use gmane.org for list access, and don't receive any posts directly. Duplicates are typically the result of a timeout, which could be on either end. When a timeout occurs, the session does not complete successfully and the sending server (appropriately) resends the message. If your server can experience periods of heavy load (usually caused by multiple concurrent scans), be sure that your timeout settings are not too restrictive. Spamdyke's idle-timeout-secs setting may need to be increased a bit. FWIW, I'm presently using 180 for this. /var/qmail/control/timeoutsmtpd is another setting that you should check. Given that multiple users are seeing duplicates only from this list, I would guess that perhaps the sending server has experienced periods of heavy load. Jake?? -- -Eric 'shubes
[qmailtoaster] Horde Webmail Configuration (Important Note)
Hi ALL, Please don't forget to make an important change in horde config file. In /var/www/html/horde/config/conf.php file Look for the $conf['auth']['checkip'] = True; And change it to False. $conf['auth']['checkip'] = False; If you don't then once a user login into the webmail from a client computer will not be able to login from other client computer with a different IP Address. Keeping this setting to True means that the user will be using same ip address everytime to access his/her webmail account and will not be allowed to login into the webmail from any other IP address. Disabling it will enable users to login into the webmail from any ip address. Regards, Anil Aliyan - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] Re: Horde Webmail
Hi Eric, I would love to help in building a horde package for toaster but I am not a developer but I would like to team with someone who is developer and can write codes. Regards, Anil Aliyan -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Tuesday, June 01, 2010 9:39 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Horde Webmail Would (some of) you Horde users care to form a team to work on coming up with a horde-toaster package? I'd like to see a small group (2+) of horde users work on this. Any takers? Anil Aliyan wrote: Hi All, I am using Horde as webmail since last 5-6 yrs on my 5 mail servers without any issue. Its very simple and easy to install/configure. I`ll post a small installation guide soon. Regards, Anil Aliyan *From:* Scott Hughes [mailto:sonicscott9...@gmail.com] *Sent:* Tuesday, June 01, 2010 4:00 AM *To:* qmailtoaster-list@qmailtoaster.com *Subject:* [qmailtoaster] Horde Webmail I'm just curious if anyone is using Horde webmail on their QMT system? If so, how difficult and involved was the install process. Horde has a lot of good features that I believe my users would benefit from, but it also looks like a bear of an install and upkeep. Thanks, Scott -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] Horde Webmail Configuration (Important Note)
Hi, Yes you are right but I wanted to keep it simple . But once the ip address is stored in the database it will not let you login from any other ip address. You verify is by keeping the setting to true and then login with same username from different machine or ip addresses. Regards, Anil Aliyan -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Wednesday, June 02, 2010 7:56 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Horde Webmail Configuration (Important Note) According to the text on the config page, that's not exactly what it does. It's per session. I have it checked and have logged in from two machines with different IP's with no problems. Administration Setup Authentication $conf[auth][checkip] Should we always store and validate the IP address of the client (as seen by the web server) in the session? Doing so will help increase security by making it harder for an attacker from another host to hijack the session. On 06/01/2010 11:19 PM, Anil Aliyan wrote: Hi ALL, Please don't forget to make an important change in horde config file. In /var/www/html/horde/config/conf.php file Look for the $conf['auth']['checkip'] = True; And change it to False. $conf['auth']['checkip'] = False; If you don't then once a user login into the webmail from a client computer will not be able to login from other client computer with a different IP Address. Keeping this setting to True means that the user will be using same ip address everytime to access his/her webmail account and will not be allowed to login into the webmail from any other IP address. Disabling it will enable users to login into the webmail from any ip address. Regards, Anil Aliyan - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com -- Cecil Yother, Jr. cj cj's 2318 Clement Ave Alameda, CA 94501 tel 510.865.2787 http://yother.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Horde Webmail Configuration Guide
the database requires a network connection. [y] (y) Yes (n) No Type your choice: n Done creating database. Horde Groupware Webmail Edition Configuration Menu (0) Exit (1) Configure database settings (2) Create database or tables (3) Configure administrator settings (4) Update PEAR for a new or changed location (5) Update from an older Horde Groupware Webmail Edition version Type your choice: 0 Thank you for using Horde Groupware Webmail Edition! [r...@mail-srv horde]# Your all done now with the basic installation of Horde. Go to the URL http://your-server-ip/horde or https://yourmaildomain/horde and login with your email username and password. To coustomise the webmail options/features/prefs you need to edit imp/config/prefs.php file. If need any help please write me an email. Enjoy Regards, Anil Aliyan From: Scott Hughes [mailto:sonicscott9...@gmail.com] Sent: Tuesday, June 01, 2010 4:00 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Horde Webmail I'm just curious if anyone is using Horde webmail on their QMT system? If so, how difficult and involved was the install process. Horde has a lot of good features that I believe my users would benefit from, but it also looks like a bear of an install and upkeep. Thanks, Scott
RE: [qmailtoaster] Smart Host not working
Hi, Why SMART HOST would be asking for authentication Authentication must be checked on the mailserver itself and not on the SMARTHOST, isn’t it so??? Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, May 10, 2010 5:18 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Smart Host not working Hi Jake, Password is correct and same details work perfectly on another QMT Server. Please let me know what details you required? Regards, Amit At Monday, 10-05-2010 on 17:09 Jake Vickers wrote: On 05/08/2010 04:59 PM, Amit Dalia wrote: Hi Everyone, On one of my server I'm using Smart Host to relay mail, but is not working and giving below error in send log: 2010-05-09 01:37:36.089135500 delivery 1: deferral: Connected_to_203.199.162.243_but_authentication_was_rejected_(password)./Remote_host_said:_503_Authentication_failed/ But same smart host is working on another QMT server. Any help what can be issue? Regards, Amit The entry you gave us would indicate a bad password, but we do not have any config files or logs to correlate this against.
RE: [qmailtoaster] Re: Error in Sending Mail
Hi Amit/Eric This is true that the spamassassin uses perl but why It needs ParserDetails.ini is not known, may just to make sure that all XML Parser modules are install and upto-date. When we do rpm install of XML-SAX this ParserDetails.ini file doesn’t gets created as it requires manual compilation and installation of the SAX and XML Parser modules, that’s what I have read few days back when I was updating my server and I faced the similar problem with qmail send. So I simply downloaded an ParserDetails.ini and placed in the perl SAX folder and every thing works fine now. Please find the ParserDetails.ini file attached with this mail. Place it in the /usr/lib/perl5/vendor_perl/5.8.8/XML/SAX And everything should work now. Regards, Anil Aliyan -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Wednesday, April 28, 2010 10:03 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Error in Sending Mail Hey Amit, I'm particularly interested in the --lint output which lists diag:, so I guess you could do: # sudo -u vpopmail -H spamassassin -D --lint 21 | grep diag: That will show if modules that are used, and if any are missing. From what Steve said though, I'm not sure it will show what all is missing with XML/SAX. The stock QMT does not use LDAP of any kind (that I'm aware of, and I'm pretty sure about that). FWIW, I hope to introduce an LDAP option (in place of MySQL) once vpopmail 5.5 is fully available. I don't know of an estimated target date for that, but I expect it will be at least several months from now. I'll be happy if we see it by the end of this year. -- -Eric 'shubes' Amit Dalia wrote: Dear Eric/Steve, Sorry I agree I should google first. Eric: Please find output of command sudo -u vpopmail -H spamassassin -D --lint below: [14326] dbg: rules: compiled meta tests [14326] dbg: check: running tests for priority: 1000 [14326] dbg: rules: running head tests; score so far=4.205 [14326] dbg: rules: compiled head tests [14326] dbg: rules: running body tests; score so far=4.205 [14326] dbg: rules: compiled body tests [14326] dbg: rules: running uri tests; score so far=4.205 [14326] dbg: rules: compiled uri tests [14326] dbg: rules: running rawbody tests; score so far=4.205 [14326] dbg: rules: compiled rawbody tests [14326] dbg: rules: running full tests; score so far=4.205 [14326] dbg: rules: compiled full tests [14326] dbg: rules: running meta tests; score so far=4.205 [14326] dbg: rules: compiled meta tests [14326] dbg: check: is spam? score=4.205 required=5 [14326] dbg: check: tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS [14326] dbg: check: subtests=__HAS_MSGID,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY,__UNUSABLE_MSGID There was lot more but I thought to post last few line, if require will post complete output. Also I found that perl-LDAP module depands on perl-XML-SAX. Does QMT perl-LDAP module(I don't think so)? Regards, Amit At Wednesday, 28-04-2010 on 0:21 Eric Shubert wrote: Steve Huff wrote: On Apr 27, 2010, at 2:18 PM, Eric Shubert wrote: Perhaps there's another XML parser that is used if XML::SAX doesn't exist? I can only speculate. I expect that there are others on the list that know better than I do about this. it's the other way around; that error message indicates that XML::SAX is falling back to its built-in pure-Perl parser, and the fix is to install a better one (or to take action that indicates to XML::SAX that yes, you really do want it to use the pure-Perl parser). it's all in the FAQ. -shuff -- Ah, I see. That makes sense. I read the FAQ but that wasn't clear to me. I still wonder though which package Amit could be missing. Amit, can you post the result of: # sudo -u vpopmail -H spamassassin -D --lint -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support
RE: [qmailtoaster] Re: Error in Sending Mail -- ParserDetails ini not found error
http://perl-xml.sourceforge.net/faq/#parserdetails.ini 3.18. could not find ParserDetails.ini A number of people have reported encountering the error could not find ParserDetails.ini in ... when installing or attempting to use XML::SAX. ParserDetails.ini is used by XML::SAX::ParserFactory to determine which SAX parser modules are installed. It should be created by the XML::SAX installation script and should be updated automatically by the install script for each SAX parser module. If you are installing XML::SAX manually you must run Makefile.PL. Unpacking the tarball and copying the files into your Perl lib directory will not work. During the initial installation, if you are asked whether ParserDetails.ini should be updated, always say yes. If you say no, the file will not be created. If you are using ActivePerl, the following command should resolve the problem: ppm install http://theoryx5.uwinnipeg.ca/ppms/XML-SAX.ppd Once you have successfully installed XML::SAX, you should consider installing a module such as XML::SAX::Expat or XML::LibXML to replace the slower pure-Perl parser bundled with SAX. If you are packaging XML::SAX in an alternative distribution format (such as RPM), your post-install script should check if ParserDetails.ini exists and if it doesn't, run this command: perl -MXML::SAX -e XML::SAX-add_parser(q(XML::SAX::PurePerl))-save_parsers() Don't unconditionally run this command, or users who re-install XML::SAX may find that any fast SAX parser they have installed will be replaced as the default by the pure-Perl parser. I hope this will help many of us who are facing this problem. Regards, Anil Aliyan -Original Message- From: Eric Shubert [mailto:e...@shubes.net] Sent: Wednesday, April 28, 2010 10:03 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Re: Error in Sending Mail Hey Amit, I'm particularly interested in the --lint output which lists diag:, so I guess you could do: # sudo -u vpopmail -H spamassassin -D --lint 21 | grep diag: That will show if modules that are used, and if any are missing. From what Steve said though, I'm not sure it will show what all is missing with XML/SAX. The stock QMT does not use LDAP of any kind (that I'm aware of, and I'm pretty sure about that). FWIW, I hope to introduce an LDAP option (in place of MySQL) once vpopmail 5.5 is fully available. I don't know of an estimated target date for that, but I expect it will be at least several months from now. I'll be happy if we see it by the end of this year. -- -Eric 'shubes' Amit Dalia wrote: Dear Eric/Steve, Sorry I agree I should google first. Eric: Please find output of command sudo -u vpopmail -H spamassassin -D --lint below: [14326] dbg: rules: compiled meta tests [14326] dbg: check: running tests for priority: 1000 [14326] dbg: rules: running head tests; score so far=4.205 [14326] dbg: rules: compiled head tests [14326] dbg: rules: running body tests; score so far=4.205 [14326] dbg: rules: compiled body tests [14326] dbg: rules: running uri tests; score so far=4.205 [14326] dbg: rules: compiled uri tests [14326] dbg: rules: running rawbody tests; score so far=4.205 [14326] dbg: rules: compiled rawbody tests [14326] dbg: rules: running full tests; score so far=4.205 [14326] dbg: rules: compiled full tests [14326] dbg: rules: running meta tests; score so far=4.205 [14326] dbg: rules: compiled meta tests [14326] dbg: check: is spam? score=4.205 required=5 [14326] dbg: check: tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS [14326] dbg: check: subtests=__HAS_MSGID,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_ MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY ,__UNUSABLE_MSGID There was lot more but I thought to post last few line, if require will post complete output. Also I found that perl-LDAP module depands on perl-XML-SAX. Does QMT perl-LDAP module(I don't think so)? Regards, Amit At Wednesday, 28-04-2010 on 0:21 Eric Shubert wrote: Steve Huff wrote: On Apr 27, 2010, at 2:18 PM, Eric Shubert wrote: Perhaps there's another XML parser that is used if XML::SAX doesn't exist? I can only speculate. I expect that there are others on the list that know better than I do about this. it's the other way around; that error message indicates that XML::SAX is falling back to its built-in pure-Perl parser, and the fix is to install a better one (or to take action that indicates to XML::SAX that yes, you really do want it to use the pure-Perl parser). it's all in the FAQ. -shuff -- Ah, I see. That makes sense. I read the FAQ but that wasn't clear to me. I still wonder though which package Amit
RE: [qmailtoaster] domainkeys mulitple domain issue
Hi Amit, Please create two new files /var/qmail/control/domain1 ß Enter sem-pune.in in the file and save /var/qmail/control/domain2 ß Enter sem-pune.co.in in the file and save Then edit you signconf.xml as below: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 query=dns keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global sem-pune.in domain=/var/qmail/control/domain1 selector=dkim1 types id=dkim / types id=domainkey method=nofws / / sem-pune.in sem-pune.co.in domain=/var/qmail/control/domain2 selector=dkim1 types id=dkim / types id=domainkey method=nofws / / sem-pune.co.in /dkimsign Regards, Anil Aliyan
RE: [qmailtoaster] domainkeys mulitple domain issue
Dear Amit, Have u published the dkim public in the DNS records of all these domains If you are using single key for all the domain then all the domain should have same key in the dns records. Regards, Anil Aliyan From: Rob Wellard [mailto:r...@brainiacmedia.net] Sent: Wednesday, April 14, 2010 12:56 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue I Guess nobody knows the answer, if i work it out, ill let you know. Rob From: Amit Dalia [mailto:a...@ikf.co.in] Sent: 14 April 2010 05:40 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] domainkeys mulitple domain issue Hi Everyone, Any help on how to setup DKIM for multiple domains on the same QMT server? I'm getting below error. Regards, Amit At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote: Hi Everyone, Even I was going to post this today. I had got around 15 domains on the same toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it is signing only 1 domain perfectly but other domains are getting bad signature. Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 is neither permitted nor denied by domain of i...@sem-pune.in mailto:a...@vanaz.com ) smtp.mail= mailto:smtp.mail=a...@vanaz.com i...@sem-pune.in mailto:a...@vanaz.com ; dkim=neutral (no key) mailto:header...@mailserver header...@webapplication.co.in My server hostname is mail.webapplication.co.in. How do I replace header.i value for respective domain. Thanks and regards, Amit At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote: I have the latest toaster installed, Everything works beautifully. However i seem to be getting a weird problem with the domainkey. I have several domains on the one toaster, and i can get the last one working perfectly, however the rest come back with bad signature. And it’s always the latest one that seems to work. Is there something i am doing wrong. Please can you help
RE: [qmailtoaster] domainkeys mulitple domain issue
Hi All, First of all mail server must be configured properly to work everything smoothly, such as hostname and other virtual domains etc must exists in the /etc/hosts file. Most Importantly RDNS must exist for all the domains. If all the domain share single ip address then all domain must be entered in the /etc/hosts file against that ip address. Example: 1.2.3.1 mail.vanaz.com mail.bbc.com mail.cnn.com Secondly, the key that all the domain get signed by the DKIM for all the domain is the singconf.xml file. Example given below: The default signconf.xml file contains the first section in brown color below with a domain=”/var/qmail/control/me” in it. Remove this line and add query=dns. Coz of this the dkim looks for the hostname or domains in the “/var/qmail/control/me” file to sign the mails for. Add your domains individually as shown in the example below. dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global After modification your signconf.xml file should look like as in example given below, and if everything is set accordingly then everything should work: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 query=dns keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / types id=domainkey method=nofws / /global vanaz.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /vanaz.com bbc.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /bbc.com cnn.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /cnn.com /dkimsign Regards, Anil Aliyan From: Rob Wellard [mailto:r...@brainiacmedia.net] Sent: Wednesday, April 14, 2010 12:56 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue I Guess nobody knows the answer, if i work it out, ill let you know. Rob From: Amit Dalia [mailto:a...@ikf.co.in] Sent: 14 April 2010 05:40 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] domainkeys mulitple domain issue Hi Everyone, Any help on how to setup DKIM for multiple domains on the same QMT server? I'm getting below error. Regards, Amit At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote: Hi Everyone, Even I was going to post this today. I had got around 15 domains on the same toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it is signing only 1 domain perfectly but other domains are getting bad signature. Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 is neither permitted nor denied by domain of i...@sem-pune.in mailto:a...@vanaz.com ) smtp.mail= mailto:smtp.mail=a...@vanaz.com i...@sem-pune.in mailto:a...@vanaz.com ; dkim=neutral (no key) mailto:header...@mailserver header...@webapplication.co.in My server hostname is mail.webapplication.co.in. How do I replace header.i value for respective domain. Thanks and regards, Amit At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote: I have the latest toaster installed, Everything works beautifully. However i seem to be getting a weird problem with the domainkey. I have several domains on the one toaster, and i can get the last one working perfectly, however the rest come back with bad signature. And it’s always the latest one that seems to work. Is there something i am doing wrong. Please can you help
RE: [qmailtoaster] domainkeys mulitple domain issue
Hi Rob, My answer are regarding DKIM which signs mails for both DKIM and Domainkeys. Regards, Anil Aliyan From: Rob Wellard [mailto:r...@brainiacmedia.net] Sent: Wednesday, April 14, 2010 4:25 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue Hi Anil Thanks a million for answering my question, i really appreciate it. Quick question. Are you referring to domainkeys here or dkim? I am having a problem with domainkeys and have not setup dkim, thats my next step. Thanks Rob From: Anil Aliyan [mailto:acali...@gnvfc.net] Sent: 14 April 2010 11:15 To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue Hi All, First of all mail server must be configured properly to work everything smoothly, such as hostname and other virtual domains etc must exists in the /etc/hosts file. Most Importantly RDNS must exist for all the domains. If all the domain share single ip address then all domain must be entered in the /etc/hosts file against that ip address. Example: 1.2.3.1 mail.vanaz.com mail.bbc.com mail.cnn.com Secondly, the key that all the domain get signed by the DKIM for all the domain is the singconf.xml file. Example given below: The default signconf.xml file contains the first section in brown color below with a domain=”/var/qmail/control/me” in it. Remove this line and add query=dns. Coz of this the dkim looks for the hostname or domains in the “/var/qmail/control/me” file to sign the mails for. Add your domains individually as shown in the example below. dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global After modification your signconf.xml file should look like as in example given below, and if everything is set accordingly then everything should work: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 query=dns keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / types id=domainkey method=nofws / /global vanaz.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /vanaz.com bbc.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /bbc.com cnn.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /cnn.com /dkimsign Regards, Anil Aliyan From: Rob Wellard [mailto:r...@brainiacmedia.net] Sent: Wednesday, April 14, 2010 12:56 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue I Guess nobody knows the answer, if i work it out, ill let you know. Rob From: Amit Dalia [mailto:a...@ikf.co.in] Sent: 14 April 2010 05:40 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] domainkeys mulitple domain issue Hi Everyone, Any help on how to setup DKIM for multiple domains on the same QMT server? I'm getting below error. Regards, Amit At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote: Hi Everyone, Even I was going to post this today. I had got around 15 domains on the same toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it is signing only 1 domain perfectly but other domains are getting bad signature. Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 is neither permitted nor denied by domain of i...@sem-pune.in mailto:a...@vanaz.com ) smtp.mail= mailto:smtp.mail=a...@vanaz.com i...@sem-pune.in mailto:a...@vanaz.com ; dkim=neutral (no key) mailto:header...@mailserver header...@webapplication.co.in My server hostname is mail.webapplication.co.in. How do I replace header.i value for respective domain. Thanks and regards, Amit At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote: I have the latest toaster installed, Everything works beautifully. However i seem to be getting a weird problem with the domainkey. I have several domains on the one toaster, and i can get the last one working perfectly, however the rest come back with bad signature. And it’s always the latest one that seems to work. Is there something i am doing wrong. Please can you help
RE: [qmailtoaster] domainkeys mulitple domain issue
Please read my previous mail and edit your signconfig.xml file accordingly From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Wednesday, April 14, 2010 5:53 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue Dear Anil, I tried what you had told but seems like its not working. Its just picking domain from file /var/qmail/control/me. Any help? Regards, Amit At Wednesday, 14-04-2010 on 16:46 Anil Aliyan wrote: Hi Rob, My answer are regarding DKIM which signs mails for both DKIM and Domainkeys. Regards, Anil Aliyan From: Rob Wellard [mailto:r...@brainiacmedia.net] Sent: Wednesday, April 14, 2010 4:25 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue Hi Anil Thanks a million for answering my question, i really appreciate it. Quick question. Are you referring to domainkeys here or dkim? I am having a problem with domainkeys and have not setup dkim, thats my next step. Thanks Rob From: Anil Aliyan [mailto:acali...@gnvfc.net] Sent: 14 April 2010 11:15 To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue Hi All, First of all mail server must be configured properly to work everything smoothly, such as hostname and other virtual domains etc must exists in the /etc/hosts file. Most Importantly RDNS must exist for all the domains. If all the domain share single ip address then all domain must be entered in the /etc/hosts file against that ip address. Example: 1.2.3.1 mail.vanaz.com mail.bbc.com mail.cnn.com Secondly, the key that all the domain get signed by the DKIM for all the domain is the singconf.xml file. Example given below: The default signconf.xml file contains the first section in brown color below with a domain=”/var/qmail/control/me” in it. Remove this line and add query=dns. Coz of this the dkim looks for the hostname or domains in the “/var/qmail/control/me” file to sign the mails for. Add your domains individually as shown in the example below. dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global After modification your signconf.xml file should look like as in example given below, and if everything is set accordingly then everything should work: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 query=dns keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / types id=domainkey method=nofws / /global vanaz.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /vanaz.com bbc.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /bbc.com cnn.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /cnn.com /dkimsign Regards, Anil Aliyan From: Rob Wellard [mailto:r...@brainiacmedia.net] Sent: Wednesday, April 14, 2010 12:56 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] domainkeys mulitple domain issue I Guess nobody knows the answer, if i work it out, ill let you know. Rob From: Amit Dalia [mailto:a...@ikf.co.in] Sent: 14 April 2010 05:40 To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] domainkeys mulitple domain issue Hi Everyone, Any help on how to setup DKIM for multiple domains on the same QMT server? I'm getting below error. Regards, Amit At Tuesday, 13-04-2010 on 15:46 Amit Dalia wrote: Hi Everyone, Even I was going to post this today. I had got around 15 domains on the same toaster. I had configure DKIM as per Jake's Video on How to setup DKIM, but it is signing only 1 domain perfectly but other domains are getting bad signature. Authentication-Results: mx.google.com; spf=neutral (google.com: 180.92.170.125 is neither permitted nor denied by domain of i...@sem-pune.in mailto:a...@vanaz.com ) smtp.mail= mailto:smtp.mail=a...@vanaz.com i...@sem-pune.in mailto:a...@vanaz.com ; dkim=neutral (no key) mailto:header...@mailserver header...@webapplication.co.in My server hostname is mail.webapplication.co.in. How do I replace header.i value for respective domain. Thanks and regards, Amit At Tuesday, 13-04-2010 on 13:57 Rob Wellard wrote: I have the latest toaster installed, Everything works beautifully. However i seem to be getting a weird problem with the domainkey. I have several domains on the one toaster, and i can get the last one working perfectly, however the rest come back with bad signature. And it’s always the latest one that seems to work. Is there something i am doing wrong. Please can you help
RE: [qmailtoaster] disable mx check in chkuser
By commenting #define CHKUSER_SENDER_MX the desired purpose can be achieved. Suppose you send mail to 10 recipients and out of those 2 are not valid or are wrong email addresses, then mail to the rest 8 recipients will be delivered and for rest 2 email addresses you will receive message something like example given below: Your message did not reach some or all of the intended recipients. Subject: Report Sent: 4/6/2010 2:00 PM The following recipient(s) cannot be reached: 'acal...@gnvfc.net' on 4/6/2010 2:00 PM 511 sorry, no mailbox here by that name (#5.1.1 - chkuser) Regards, Anil Aliyan -Original Message- From: Lucian Cristian [mailto:l...@createc.ro] Sent: Tuesday, April 06, 2010 1:43 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] disable mx check in chkuser You will have to modify the CHKUSER_SENDER_FORMAT too like this //#define CHKUSER_RCPT_FORMAT and for outgoing //#define CHKUSER_SENDER_MX //#define CHKUSER_SENDER_FORMAT Regards Lucian Rajesh M wrote: hi sorry but your reply does not solve my problem. people add email addresses to their address book and some times there are errors which are bound to come up. let us say my customer is sending to around 100 users and one of the id's are incorrect -- the way i need to handle is either point out where the error ie which email id is wrong, or alternatively let all the emails go and the bad one to bounce. i don't want the customer to go thru every single email id and try to figure out which one is wrong. chkuser can definitely be disabled if required -- but what i need to do is disable only mx check and that too only for a specific ip address those emails that originate from within my server thanks rajesh Rajesh, Maybe your customers should be more careful entering the address they are sending to? You can't make everything stupid proof. I don't think you can disable CHKUSER nor do I think you'd want to. This occurs not only in Squirrelmail, but in Thunderbird and other e mail clients when the recipient is addressed incorrectly. CJ On 04/05/2010 07:35 PM, Rajesh M wrote: hi i use squirrelmail when customers send emails to a number of people from webmail then if there is one address that is wrong the message that is shown is #5.1.1 chkuser - can't find valid MX for rcpt domain however the exact domain name where the problem exists is not shown here i see two ways out a) either i get the exact email id which has the problem, but i am not sure whether squirrelmail needs to be modified or chkuser --- this would be ideal. b) the easy way -- disable chkuser MX checks for webmail users so that the bad email id bounces back after some time. could you please guide me on how to do this ? thanks rajesh - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com -- Cecil Yother, Jr. cj cj's 2318 Clement Ave Alameda, CA 94501 tel 510.865.2787 | fax 510.864.7300 http://yother.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] Re: Mails getting bounced
Dear Amit, I think your DNS wasn’t configured properly for DKIM/DomainKeys that’s why you faced this problem. I am using both DKIM and DomainKeys my server and both are working perfectly. You can verify this by looking at the headers of this very mail. Public key text published in the DNS recods takes some time to update and reflect on the global dns servers and one should wait for atleast 3 days for them reflect all around the world. Servers like yahoo etc takes sometime to update their caching dns server and you have to patient till they start reading your public key from the dns records verify signature in the mails. You have not mentioned this in your mail that how long back you published your public in the dns before you checked for domainkey test. If you need any assistance please feel free to contact me on this mailing list. I would love to help. Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 2:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for private._domainkey.vanaz.com and Testing _domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for _domainkey.vanaz.com So there is no policy for vanaz.com, hence this domain would fail domainkey policy on other servers. You need to insert 2 TXT records in vanaz.com DNS. Regards Alex On 05/04/2010 07:21, Amit Dalia wrote: Hi Eric/Jake, I had removed Domain Key from my server but I'm still getting below error: pnq.fitd...@orbit-star.com: 202.46.201.27 failed after I sent the message. Remote host said: 550 Message does not pass DomainKeys requirements for domain vanaz.com http://vanaz.com/ Any help since this is creating problem to me know. Regards, Amit At Monday, 29-03-2010 on 21:53 Eric Shubert wrote: Not at all. Amit Dalia wrote: Eric/Jake, Will re-installing qmail toaster package can solve the problem? Amit At Monday, 29-03-2010 on 21:18 Eric Shubert wrote: Amit, No way to repair qmail-dk, until someone steps up and fixes the code. Check out Jake's videos for a way to use DKIM. In order to disable DK entirely, do: # cd /var/qmail/bin # ln -sf qmail-queue.orig qmail-queue -- -Eric 'shubes' Amit Dalia wrote: Dear Eric, This was outgoing mail from server and occurred first time only. If qmail-dk is broken then is there any way to repair this? Is there any other way to use Domain Key or DKIM with my server? Else how to remove Domain Key from my server. Thanks and regards, Amit At Monday, 29-03-2010 on 20:50 Eric Shubert wrote: Amit Dalia wrote: Dear Team, I have been using Domain Key for one of my domain without any problem from long time. But today 1 server bounced it back mentioning the below error: [02] The reason of the delivery failure was: 550 Message does not pass DomainKeys requirements for domain vanaz.com Is my domain key break? Thanks and regards, Amit Perhaps. The qmail-dk program included with QMT is broken in some areas, particularly inbound. While we've been under the impression that signing was working ok, it's entirely possible that there's a bug in there. The safest bet is to simply not use it at all. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates
RE: [qmailtoaster] Re: Mails getting bounced
Once you are done as Alex said below. Install the dkim package attached with this mail and then let me know how to configure DKIM and Domainkeys all together. Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 3:34 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit Dalia wrote: It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for private._domainkey.vanaz.com and Testing _domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for _domainkey.vanaz.com So there is no policy for vanaz.com, hence this domain would fail domainkey policy on other servers. You need to insert 2 TXT records in vanaz.com DNS. Regards Alex On 05/04/2010 07:21, Amit Dalia wrote: Hi Eric/Jake, I had removed Domain Key from my server but I'm still getting below error: pnq.fitd...@orbit-star.com: 202.46.201.27 failed after I sent the message. Remote host said: 550 Message does not pass DomainKeys requirements for domain vanaz.com http://vanaz.com/ Any help since this is creating problem to me know. Regards, Amit At Monday, 29-03-2010 on 21:53 Eric Shubert wrote: Not at all. Amit Dalia wrote: Eric/Jake, Will re-installing qmail toaster package can solve the problem? Amit At Monday, 29-03-2010 on 21:18 Eric Shubert wrote: Amit, No way to repair qmail-dk, until someone steps up and fixes the code. Check out Jake's videos for a way to use DKIM. In order to disable DK entirely, do: # cd /var/qmail/bin # ln -sf qmail-queue.orig qmail-queue -- -Eric 'shubes' Amit Dalia wrote: Dear Eric, This was outgoing mail from server and occurred first time only. If qmail-dk is broken then is there any way to repair this? Is there any other way to use Domain Key or DKIM with my server? Else how to remove Domain Key from my server. Thanks and regards, Amit At Monday, 29-03-2010 on 20:50 Eric Shubert wrote: Amit Dalia wrote: Dear Team, I have been using Domain Key for one of my domain without any problem from long time. But today 1 server bounced it back mentioning the below error: [02] The reason of the delivery failure was: 550 Message does not pass DomainKeys requirements for domain vanaz.com Is my domain key break? Thanks and regards, Amit Perhaps. The qmail-dk program included with QMT is broken in some areas, particularly inbound. While we've been under the impression that signing was working ok, it's entirely possible that there's a bug in there. The safest bet is to simply not use it at all. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group
RE: [qmailtoaster] Re: Mails getting bounced
I am sorry I mean to say once you are done with as Alex said then let me know and I’ll tell you how to configure the DKIM and Domainkeys for ur domains. I have learnt all this from the qmailtoaster videos made by Jake. Regards, Anil Aliyan From: Anil Aliyan [mailto:acali...@gnvfc.net] Sent: Monday, April 05, 2010 3:43 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Once you are done as Alex said below. Install the dkim package attached with this mail and then let me know how to configure DKIM and Domainkeys all together. Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 3:34 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit Dalia wrote: It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for private._domainkey.vanaz.com and Testing _domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for _domainkey.vanaz.com So there is no policy for vanaz.com, hence this domain would fail domainkey policy on other servers. You need to insert 2 TXT records in vanaz.com DNS. Regards Alex On 05/04/2010 07:21, Amit Dalia wrote: Hi Eric/Jake, I had removed Domain Key from my server but I'm still getting below error: pnq.fitd...@orbit-star.com: 202.46.201.27 failed after I sent the message. Remote host said: 550 Message does not pass DomainKeys requirements for domain vanaz.com http://vanaz.com/ Any help since this is creating problem to me know. Regards, Amit At Monday, 29-03-2010 on 21:53 Eric Shubert wrote: Not at all. Amit Dalia wrote: Eric/Jake, Will re-installing qmail toaster package can solve the problem? Amit At Monday, 29-03-2010 on 21:18 Eric Shubert wrote: Amit, No way to repair qmail-dk, until someone steps up and fixes the code. Check out Jake's videos for a way to use DKIM. In order to disable DK entirely, do: # cd /var/qmail/bin # ln -sf qmail-queue.orig qmail-queue -- -Eric 'shubes' Amit Dalia wrote: Dear Eric, This was outgoing mail from server and occurred first time only. If qmail-dk is broken then is there any way to repair this? Is there any other way to use Domain Key or DKIM with my server? Else how to remove Domain Key from my server. Thanks and regards, Amit At Monday, 29-03-2010 on 20:50 Eric Shubert wrote: Amit Dalia wrote: Dear Team, I have been using Domain Key for one of my domain without any problem from long time. But today 1 server bounced it back mentioning the below error: [02] The reason of the delivery failure was: 550 Message does not pass DomainKeys requirements for domain vanaz.com Is my domain key break? Thanks and regards, Amit Perhaps. The qmail-dk program included with QMT is broken in some areas, particularly inbound. While we've been under the impression that signing was working ok, it's entirely possible that there's a bug in there. The safest bet is to simply not use it at all. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today
RE: [qmailtoaster] Re: Mails getting bounced
Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.comSubmit=Submit Anyway I will proceed for DKIM installation now. Thanks and regards, Amit At Monday, 05-04-2010 on 15:34 Postmaster wrote: Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit Dalia wrote: It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for private._domainkey.vanaz.com and Testing _domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for _domainkey.vanaz.com So there is no policy for vanaz.com, hence this domain would fail domainkey policy on other servers. You need to insert 2 TXT records in vanaz.com DNS. Regards Alex On 05/04/2010 07:21, Amit Dalia wrote: Hi Eric/Jake, I had removed Domain Key from my server but I'm still getting below error: pnq.fitd...@orbit-star.com: 202.46.201.27 failed after I sent the message. Remote host said: 550 Message does not pass DomainKeys requirements for domain vanaz.com http://vanaz.com/ Any help since this is creating problem to me know. Regards, Amit At Monday, 29-03-2010 on 21:53 Eric Shubert wrote: Not at all. Amit Dalia wrote: Eric/Jake, Will re-installing qmail toaster package can solve the problem? Amit At Monday, 29-03-2010 on 21:18 Eric Shubert wrote: Amit, No way to repair qmail-dk, until someone steps up and fixes the code. Check out Jake's videos for a way to use DKIM. In order to disable DK entirely, do: # cd /var/qmail/bin # ln -sf qmail-queue.orig qmail-queue -- -Eric 'shubes' Amit Dalia wrote: Dear Eric, This was outgoing mail from server and occurred first time only. If qmail-dk is broken then is there any way to repair this? Is there any other way to use Domain Key or DKIM with my server? Else how to remove Domain Key from my server. Thanks and regards, Amit At Monday, 29-03-2010 on 20:50 Eric Shubert wrote: Amit Dalia wrote: Dear Team, I have been using Domain Key for one of my domain without any problem from long time. But today 1 server bounced it back mentioning the below error: [02] The reason of the delivery failure was: 550 Message does not pass DomainKeys requirements for domain vanaz.com Is my domain key break? Thanks and regards, Amit Perhaps. The qmail-dk program included with QMT is broken in some areas, particularly inbound. While we've been under the impression that signing was working ok, it's entirely possible that there's a bug in there. The safest bet is to simply not use it at all. -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers
RE: [qmailtoaster] Re: Mails getting bounced
I have checked you DNS and its perfect now. But your new key is not populated on the external DNS server worldwide yet so you will have to wait untill rest of the server start reading your new public key. Can you send me a test message from your mailserver to my email address acali...@gnvfc.net ??? Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 5:16 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Dear Anil, Yes I saw that and modified it on my DNS server. Also I had setup DKIM for my server as per Jake Video on settuping up DKIM. I think, I have to check it know whether its working or not, so how can I check it? Regards, Amit At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote: Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.comSubmit=Submit Anyway I will proceed for DKIM installation now. Thanks and regards, Amit At Monday, 05-04-2010 on 15:34 Postmaster wrote: Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit Dalia wrote: It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for private._domainkey.vanaz.com and Testing _domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for _domainkey.vanaz.com So there is no policy for vanaz.com, hence this domain would fail domainkey policy on other servers. You need to insert 2 TXT records in vanaz.com DNS. Regards Alex On 05/04/2010 07:21, Amit Dalia wrote: Hi Eric/Jake, I had removed Domain Key from my server but I'm still getting below error: pnq.fitd...@orbit-star.com: 202.46.201.27 failed after I sent the message. Remote host said: 550 Message does not pass DomainKeys requirements for domain vanaz.com http://vanaz.com/ Any help since this is creating problem to me know. Regards, Amit At Monday, 29-03-2010 on 21:53 Eric Shubert wrote: Not at all. Amit Dalia wrote: Eric/Jake, Will re-installing qmail toaster package can solve the problem? Amit At Monday, 29-03-2010 on 21:18 Eric Shubert wrote: Amit, No way to repair qmail-dk, until someone steps up and fixes the code. Check out Jake's videos for a way to use DKIM. In order to disable DK entirely, do: # cd /var/qmail/bin # ln -sf qmail-queue.orig qmail-queue -- -Eric 'shubes' Amit Dalia wrote: Dear Eric, This was outgoing mail from server and occurred first time only. If qmail-dk is broken then is there any way to repair this? Is there any other way to use Domain Key or DKIM with my server? Else how to remove Domain Key from my server. Thanks and regards, Amit At Monday, 29-03-2010 on 20:50 Eric Shubert wrote: Amit Dalia wrote: Dear
RE: [qmailtoaster] Re: Mails getting bounced
I have checked both the entries exists but not updated globally yet. BUT BOTH KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys If you run dig command from your server you can see these records: dig txt _domainkey.vanza.com(Answers as Below) [r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt dkim1._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 27481 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;dkim1._domainkey.vanaz.com.IN TXT ;; ANSWER SECTION: dkim1._domainkey.vanaz.com. 3600 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB ;; AUTHORITY SECTION: vanaz.com. 172368 IN NS ns2.iknowledgefactory.com. vanaz.com. 172368 IN NS ns.iknowledgefactory.com. [r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt private._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 54065 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;private._domainkey.vanaz.com. IN TXT ;; ANSWER SECTION: private._domainkey.vanaz.com. 2753 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:23 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is another problem. You should have two entries for Domainkeys and one entry for DKIM: Domainkey: - _domainkey.vanaz.com - private._domainkey.vanaz.com Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys DKIM: - dkim1._domainkey.vanaz.com Please refer to video.qmailtoaster.com One of your TXT records is for vanaz.com rather than _domainkey.vanaz.com - please correct it. Once again see the above link about Domiankeys on how to setup your DNS. Regards Alex On 05/04/2010 12:34, Anil Aliyan wrote: Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit Submit=Submit http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.comSubmit=Submit Submit=Submit Anyway I will proceed for DKIM installation now. Thanks and regards, Amit At Monday, 05-04-2010 on 15:34 Postmaster wrote: Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit Dalia wrote: It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing
RE: [qmailtoaster] Re: Mails getting bounced
Yes, if you are using a smarhost then all outgoing mails will be signed by your smarthost server and you’ll have to configure these keys on that server. Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 5:22 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Sorry but 1 important thing which I forgot to mention is I'm using Smarthost on server for sending emails. Can this be the reason for fail of Domain Key and DKIM? Regards, Amit At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote: Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.comSubmit=Submit Anyway I will proceed for DKIM installation now. Thanks and regards, Amit At Monday, 05-04-2010 on 15:34 Postmaster wrote: Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit Dalia wrote: It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for private._domainkey.vanaz.com and Testing _domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for _domainkey.vanaz.com So there is no policy for vanaz.com, hence this domain would fail domainkey policy on other servers. You need to insert 2 TXT records in vanaz.com DNS. Regards Alex On 05/04/2010 07:21, Amit Dalia wrote: Hi Eric/Jake, I had removed Domain Key from my server but I'm still getting below error: pnq.fitd...@orbit-star.com: 202.46.201.27 failed after I sent the message. Remote host said: 550 Message does not pass DomainKeys requirements for domain vanaz.com http://vanaz.com/ Any help since this is creating problem to me know. Regards, Amit At Monday, 29-03-2010 on 21:53 Eric Shubert wrote: Not at all. Amit Dalia wrote: Eric/Jake, Will re-installing qmail toaster package can solve the problem? Amit At Monday, 29-03-2010 on 21:18 Eric Shubert wrote: Amit, No way to repair qmail-dk, until someone steps up and fixes the code. Check out Jake's videos for a way to use DKIM. In order to disable DK entirely, do: # cd /var/qmail/bin # ln -sf qmail-queue.orig qmail-queue -- -Eric 'shubes' Amit Dalia wrote: Dear Eric, This was outgoing mail from server and occurred first time only. If qmail-dk is broken then is there any way to repair this? Is there any other way to use Domain Key or DKIM with my server? Else how to remove Domain Key from my server. Thanks and regards, Amit At Monday, 29-03-2010 on 20:50 Eric Shubert wrote: Amit Dalia wrote: Dear Team, I have been using Domain Key for one of my domain without any problem from long time. But today 1 server bounced it back mentioning the below error: [02] The reason of the delivery
RE: [qmailtoaster] Re: Mails getting bounced
Dear Amit, Please ignore my last mail about smarthost. Your mail signed by you main mail server should work actually. I have checked your test message and it is signed by DKIM but doesn’t singed for Domainkeys. You need to entry for both in your signconf.xml file: Your file should look like below mentioned example: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 query=dns keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global vanza.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /vanza.com /dkimsign From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 5:30 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil, Please check I had send test mail on your email id. Regards, Amit At Monday, 05-04-2010 on 17:26 Postmaster wrote: It may take a while for the DNS entries to propagate. Send an e-mail with test in the subject line to sa-t...@sendmail.net and you should have a reply with output like this shortly: sendmail.net Sender Authentication Auto-Responder $Revision: 1.19 $ This service runs at mailto:sa-t...@sendmail.net sa-t...@sendmail.net and allows remote users to perform a simple, automated test to see if different Sender Authentication schemes are working. Mail sent to this service is checked by our Sender Authentication filters for any valid credentials or signatures. A script receives the message, checks for a special header with the results of the tests, and composes this response message based on what it finds. This response is also signed with DomainKeys and DomainKeys Identified Mail (DKIM). Please note that the DKIM filter signing this reply message conforms to the latest IETF draft version, and thus may not be successfully verified by older implementations. If you are using dkim-filter from Sendmail, Inc., upgrade to at least version 1.0.0 to be compatible with the most recent version of DKIM. We hope this service has been helpful to you. Authentication System: DomainKeys Identified Mail Result: DKIM signature confirmed GOOD Description: Signature verified, message arrived intact Reporting host: sendmail.net More information: http://mipassoc.org/dkim/ Sendmail milter: https://sourceforge.net/projects/dkim-milter/ Authentication System: Domain Keys Result: DK signature confirmed GOOD Description: Signature verified, message arrived intact Reporting host: sendmail.net More information: http://antispam.yahoo.com/domainkeys Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/ Authentication System: Sender ID Result: SID data confirmed GOOD Description: Sending host is authorized for sending domain Reporting host: sendmail.net More information: http://www.microsoft.com/senderid Sendmail milter: https://sourceforge.net/projects/sid-milter/ Authentication System: Sender Permitted From (SPF) Result: SPF data confirmed GOOD Description: Sending host is authorized for sending domain Reporting host: sendmail.net More information: http://spf.pobox.com/ Regards Alex On 05/04/2010 12:46, Amit Dalia wrote: Dear Anil, Yes I saw that and modified it on my DNS server. Also I had setup DKIM for my server as per Jake Video on settuping up DKIM. I think, I have to check it know whether its working or not, so how can I check it? Regards, Amit At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote: Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit Submit=Submit http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com http://domainkeys.sourceforge.net/cgi
RE: [qmailtoaster] Re: Mails getting bounced
Key generated by DKIM is used for both by default. From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 5:38 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced So which key should I use? Key generated by DKIM or key generated by Domain Key. Regards, Amit At Monday, 05-04-2010 on 17:31 Anil Aliyan wrote: I have checked both the entries exists but not updated globally yet. BUT BOTH KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys If you run dig command from your server you can see these records: dig txt _domainkey.vanza.com(Answers as Below) [r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt dkim1._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 27481 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;dkim1._domainkey.vanaz.com.IN TXT ;; ANSWER SECTION: dkim1._domainkey.vanaz.com. 3600 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB ;; AUTHORITY SECTION: vanaz.com. 172368 IN NS ns2.iknowledgefactory.com. vanaz.com. 172368 IN NS ns.iknowledgefactory.com. [r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt private._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 54065 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;private._domainkey.vanaz.com. IN TXT ;; ANSWER SECTION: private._domainkey.vanaz.com. 2753 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:23 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is another problem. You should have two entries for Domainkeys and one entry for DKIM: Domainkey: - _domainkey.vanaz.com - private._domainkey.vanaz.com Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys DKIM: - dkim1._domainkey.vanaz.com Please refer to video.qmailtoaster.com One of your TXT records is for vanaz.com rather than _domainkey.vanaz.com - please correct it. Once again see the above link about Domiankeys on how to setup your DNS. Regards Alex On 05/04/2010 12:34, Anil Aliyan wrote: Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit Submit=Submit http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.comSubmit=Submit Submit=Submit Anyway I will proceed for DKIM installation now. Thanks and regards, Amit At Monday, 05-04-2010 on 15:34 Postmaster wrote: Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit
RE: [qmailtoaster] Re: Mails getting bounced
If you are using DKIM then you don’t require a separate domainkey signature file, same DKIM signature file is used for both. Moreover you don’t even require domainkeys folder in your /var/qmai/control directory. From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 5:39 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Alex, I had done this for SPF part. Regards, Amit At Monday, 05-04-2010 on 17:37 Postmaster wrote: No, you should not have any problems with Domainkey/DKIM using a smart host. However, you need to redefine your SPF in your DNS to allow relay from the smart host. Regards Alex On 05/04/2010 12:52, Amit Dalia wrote: Sorry but 1 important thing which I forgot to mention is I'm using Smarthost on server for sending emails. Can this be the reason for fail of Domain Key and DKIM? Regards, Amit At Monday, 05-04-2010 on 17:04 Anil Aliyan wrote: Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit Submit=Submit http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_selector?selector=private._domainkey.vanaz.comSubmit=Submit Submit=Submit Anyway I will proceed for DKIM installation now. Thanks and regards, Amit At Monday, 05-04-2010 on 15:34 Postmaster wrote: Issue the following command: ln -sf qmail-dk qmail-queue Restart qmail and do not forget to insert two TXT records into your DNS and make sure you have done it in a right way. This would help you to test it: http://domainkeys.sourceforge.net/policycheck.html http://domainkeys.sourceforge.net http://domainkeys.sourceforge.net/policycheck.html Also refer to qmailtoaster wiki. Regards Alex On 05/04/2010 10:57, Amit Dalia wrote: I had removed qmail-dk from my server using ln -sf qmail-queue.orig qmail-queue Now how do re-enable qmail-dk for my server. Regards, Amit At Monday, 05-04-2010 on 15:08 Postmaster wrote: This may not help. You do not have control over the other server and your domain may be rejected if the other server has a strict Domainkey policy. I would recommend to keep qmail-dk and DNS entries unless you have serious problems (qmail-dk is completely broken). Personally, I have not had any issues with Domainkey. Regards Alex On 05/04/2010 10:21, Amit Dalia wrote: It is my domain which got rejected. And I had now removed domain key for signing my out going emails. Also I had deleted domain key entries from my DNS Server. Amit At Monday, 05-04-2010 on 14:48 Postmaster wrote: Is it your server rejecting mail or is it your domain got rejected? Let's check - http://domainkeys.sourceforge.net/policycheck.html Testing private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for private._domainkey.vanaz.com and Testing _domainkey.vanaz.com New test http://domainkeys.sourceforge.net/policycheck.html No _domainkey TXT record found for _domainkey.vanaz.com So there is no policy for vanaz.com, hence this domain would fail domainkey policy on other servers. You need to insert 2 TXT records in vanaz.com DNS. Regards Alex On 05/04/2010 07:21, Amit Dalia wrote: Hi Eric/Jake, I had removed Domain Key from my server but I'm still getting below error: pnq.fitd...@orbit-star.com: 202.46.201.27 failed after I sent the message. Remote host said: 550 Message does not pass DomainKeys requirements for domain vanaz.com http://vanaz.com/ Any help since this is creating problem to me know. Regards, Amit At Monday, 29-03-2010 on 21:53 Eric Shubert wrote: Not at all. Amit Dalia wrote: Eric/Jake, Will re-installing qmail toaster package can solve the problem? Amit At Monday, 29-03-2010 on 21:18 Eric Shubert wrote: Amit, No way to repair qmail-dk, until someone steps up and fixes the code. Check out Jake's videos for a way to use DKIM. In order to disable DK entirely, do: # cd /var/qmail/bin # ln -sf qmail-queue.orig qmail-queue -- -Eric 'shubes' Amit Dalia wrote: Dear Eric
RE: [qmailtoaster] Re: Mails getting bounced
Dear Alex,
That’s what I am saying that with DKIM you can sign your mail for both DKIM as
well as for DomainKeys.
I am using dkim and I don’t have any folder like /var/qmail/control/domainkey
instead I have /var/qmail/control/dkim
Please look at the last section of the qmail-remote file which replaced by the
DKIM installation. It also signs mails for Domainkeys as well:
# generate signatures
my $sigdone = 0;
foreach my $type (keys(%{$conf-{'types'}}))
{
my $sigconf = $conf-{'types'}-{$type};
if ($type eq 'dkim')
{
$signer-add_signature(
new Mail::DKIM::Signature(
Algorithm = $sigconf-{'algorithm'} || $conf-{'algorithm'} ||
$signer-algorithm,
Method = $sigconf-{'method'} || $conf-{'method'}||
$signer-method,
Headers= $sigconf-{'headers'}|| $conf-{'headers'} ||
$signer-headers,
Domain = $sigconf-{'domain'} || $conf-{'domain'}||
$signer-domain,
Selector = $sigconf-{'selector'} || $conf-{'selector'} ||
$signer-selector,
Query = $sigconf-{'query'} || $conf-{'query'},
Identity = $sigconf-{'identity'} || $conf-{'identity'},
Expiration = $sigconf-{'expiration'} || $conf-{'expiration'}
)
);
$sigdone = 1;
}
elsif ($type eq 'domainkey')
{
$signer-add_signature(
new Mail::DKIM::DkSignature(
Algorithm = 'rsa-sha1', # only rsa-sha1 supported
Method = $sigconf-{'method'} || $conf-{'method'} ||
$signer-method,
Headers= $sigconf-{'selector'} || $conf-{'headers'} ||
$signer-headers,
Domain = $sigconf-{'domain'} || $conf-{'domain'} ||
$signer-domain,
Selector = $sigconf-{'selector'} || $conf-{'selector'} ||
$signer-selector,
Query = $sigconf-{'query'}|| $conf-{'query'}
)
);
$sigdone = 1;
}
}
return $sigdone;
}
Regards,
Anil Aliyan
From: Postmaster [mailto:postmas...@seawise-chartering.co.uk]
Sent: Monday, April 05, 2010 5:48 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced
Anil
The file below you are referring is for DKIM and not for Domainkey.
For Domainkey tcp.smtp should have the following in order for the outgoing
email to be signed:
DKSIGN=/var/qmail/control/domainkeys/%/private
and
DKVERIFY=
if you have to accept incoming e-mail failing Domainkey
Regards
Alex
On 05/04/2010 13:09, Anil Aliyan wrote:
Dear Amit,
Please ignore my last mail about smarthost. Your mail signed by you main mail
server should work actually.
I have checked your test message and it is signed by DKIM but doesn’t singed
for Domainkeys. You need to entry for both in your signconf.xml file: Your
file should look like below mentioned example:
dkimsign
!-- per default sign all mails using dkim --
global algorithm=rsa-sha1 query=dns
keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1
types id=dkim /
/global
vanza.com selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/vanza.com
/dkimsign
From: Amit Dalia [mailto:a...@ikf.co.in]
Sent: Monday, April 05, 2010 5:30 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Mails getting bounced
Dear Anil,
Please check I had send test mail on your email id.
Regards,
Amit
At Monday, 05-04-2010 on 17:26 Postmaster wrote:
It may take a while for the DNS entries to propagate.
Send an e-mail with test in the subject line to sa-t...@sendmail.net
and you should have a reply with output like this shortly:
sendmail.net Sender Authentication Auto-Responder $Revision: 1.19 $
This service runs at mailto:sa-t...@sendmail.net sa-t...@sendmail.net and
allows remote users
to perform a simple, automated test to see if different Sender
Authentication schemes are working. Mail sent to this service
is checked by our Sender Authentication filters for any valid
credentials or signatures. A script receives the message, checks
for a special header with the results of the tests, and composes
this response message based on what it finds. This response is also
signed with DomainKeys and DomainKeys Identified Mail (DKIM).
Please note that the DKIM filter signing this reply message conforms
to the latest IETF draft version, and thus may not be successfully
verified by older implementations. If you are using dkim-filter from
Sendmail, Inc., upgrade to at least version 1.0.0 to be compatible
with the most recent version of DKIM.
We hope this service has been helpful to you.
Authentication System: DomainKeys Identified Mail
Result: DKIM signature confirmed GOOD
Description: Signature verified, message arrived intact
Reporting host
RE: [qmailtoaster] Re: Mails getting bounced
By default singconf.xml file contains on first line as below and only signs for DKIM: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global /dkimsign But if you want to sign mails for Domainkeys as well then you will have to add one more line just below types id=dkim / and above /global in the above example: types id=domainkey method=nofws / Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced I have not looked into possibility of having Domainkey and DKIM signed by DKIM as I installed qmailtoaster with Domainkey first and then added DKIM functionality and for this reason I'd keep them separate. Regards Alex On 05/04/2010 13:15, Anil Aliyan wrote: Dear Alex, I do agree with you and we can use two different keys but them you will have to use both DKIM and Domainkeys separately and need to configure them separately. But when DKIM alone can handle both DKIM and Domainkeys with single key its not required to configure serparately. Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:41 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is no reason why different keys cannot be used for Domainkey and DKIM. I am using different keys and have had no problems so far. Regards Alex On 05/04/2010 13:01, Anil Aliyan wrote: I have checked both the entries exists but not updated globally yet. BUT BOTH KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys If you run dig command from your server you can see these records: dig txt _domainkey.vanza.com(Answers as Below) [r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt dkim1._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 27481 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;dkim1._domainkey.vanaz.com.IN TXT ;; ANSWER SECTION: dkim1._domainkey.vanaz.com. 3600 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB ;; AUTHORITY SECTION: vanaz.com. 172368 IN NS ns2.iknowledgefactory.com. vanaz.com. 172368 IN NS ns.iknowledgefactory.com. [r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt private._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 54065 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;private._domainkey.vanaz.com. IN TXT ;; ANSWER SECTION: private._domainkey.vanaz.com. 2753 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:23 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is another problem. You should have two entries for Domainkeys and one entry for DKIM: Domainkey: - _domainkey.vanaz.com - private._domainkey.vanaz.com Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys DKIM: - dkim1._domainkey.vanaz.com Please refer to video.qmailtoaster.com One of your TXT records is for vanaz.com rather than _domainkey.vanaz.com - please correct it. Once again see the above link about Domiankeys on how to setup your DNS. Regards Alex On 05/04/2010 12:34, Anil Aliyan wrote: Dear Amit, Your DNS entry has one problem. You have k=rsa; twice in you DNS entry please remove one k=rsa; from the DNS entry. private._domainkey.vanaz.com New test http://domainkeys.sourceforge.net/selectorcheck.html TXT Record length = 120 k=rsa; k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSB ...aKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB This selector is in error: TagValue# 2, Tag 'k': Duplicate token at position 1 Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 4:20 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil/Alex, Please check the link below: http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.com http://domainkeys.sourceforge.net/cgi-bin/check_policy?domain=vanaz.comSubmit=Submit Submit=Submit
RE: [qmailtoaster] Re: Mails getting bounced
Make you signconf.xml look like this : dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 query=dns keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global vanza.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /vanza.com /dkimsign From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 6:09 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Dear Anil, Please find my signconf.xml file contains is below: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global /dkimsign But your file doesn't contain this. So do I modify my file as per you mentioned. Regards, Amit At Monday, 05-04-2010 on 17:39 Anil Aliyan wrote: Dear Amit, Please ignore my last mail about smarthost. Your mail signed by you main mail server should work actually. I have checked your test message and it is signed by DKIM but doesn’t singed for Domainkeys. You need to entry for both in your signconf.xml file: Your file should look like below mentioned example: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 query=dns keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global vanza.com selector=dkim1 types id=dkim / types id=domainkey method=nofws / /vanza.com /dkimsign From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 5:30 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced Dear Anil, Please check I had send test mail on your email id. Regards, Amit At Monday, 05-04-2010 on 17:26 Postmaster wrote: It may take a while for the DNS entries to propagate. Send an e-mail with test in the subject line to sa-t...@sendmail.net and you should have a reply with output like this shortly: sendmail.net Sender Authentication Auto-Responder $Revision: 1.19 $ This service runs at mailto:sa-t...@sendmail.net sa-t...@sendmail.net and allows remote users to perform a simple, automated test to see if different Sender Authentication schemes are working. Mail sent to this service is checked by our Sender Authentication filters for any valid credentials or signatures. A script receives the message, checks for a special header with the results of the tests, and composes this response message based on what it finds. This response is also signed with DomainKeys and DomainKeys Identified Mail (DKIM). Please note that the DKIM filter signing this reply message conforms to the latest IETF draft version, and thus may not be successfully verified by older implementations. If you are using dkim-filter from Sendmail, Inc., upgrade to at least version 1.0.0 to be compatible with the most recent version of DKIM. We hope this service has been helpful to you. Authentication System: DomainKeys Identified Mail Result: DKIM signature confirmed GOOD Description: Signature verified, message arrived intact Reporting host: sendmail.net More information: http://mipassoc.org/dkim/ Sendmail milter: https://sourceforge.net/projects/dkim-milter/ Authentication System: Domain Keys Result: DK signature confirmed GOOD Description: Signature verified, message arrived intact Reporting host: sendmail.net More information: http://antispam.yahoo.com/domainkeys Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/ Authentication System: Sender ID Result: SID data confirmed GOOD Description: Sending host is authorized for sending domain Reporting host: sendmail.net More information: http://www.microsoft.com/senderid Sendmail milter: https://sourceforge.net/projects/sid-milter/ Authentication System: Sender Permitted From (SPF) Result: SPF data confirmed GOOD Description: Sending host is authorized for sending domain Reporting host: sendmail.net More information: http://spf.pobox.com/ Regards Alex On 05/04/2010 12:46, Amit Dalia wrote: Dear Anil, Yes I saw that and modified it on my DNS server. Also I had setup DKIM for my server as per Jake Video on settuping up DKIM. I think, I have to check it know whether its working or not, so how
RE: [qmailtoaster] Re: Mails getting bounced
Dear Amit, 1) do I need to remove delete domainkey folder from control? Simply rename the domainkey folder to domain-key or something else , that’s upto you. 2) do I need to modify DKSIGN= in tcp.smtp? You don’t have to make any changes in your tcp.smtp, just keep them as it is. 3) do I need to modify my DNS server entries and if yes then what the new entry I should made? If the DNS entry for dkim1._domainkey.vanza.com is the same key you have generated for DKIM then you need not do anything else. Just keep the same key and same key will be used for verification of botk DKIM and Domainkey. Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 6:13 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Dear Anil, Ok. After modifying this, I have queries: 1) do I need to remove delete domainkey folder from control? 2) do I need to modify DKSIGN= in tcp.smtp? 3) do I need to modify my DNS server entries and if yes then what the new entry I should made? Thanks and regards, Amit At Monday, 05-04-2010 on 18:05 Anil Aliyan wrote: By default singconf.xml file contains on first line as below and only signs for DKIM: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global /dkimsign But if you want to sign mails for Domainkeys as well then you will have to add one more line just below types id=dkim / and above /global in the above example: types id=domainkey method=nofws / Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced I have not looked into possibility of having Domainkey and DKIM signed by DKIM as I installed qmailtoaster with Domainkey first and then added DKIM functionality and for this reason I'd keep them separate. Regards Alex On 05/04/2010 13:15, Anil Aliyan wrote: Dear Alex, I do agree with you and we can use two different keys but them you will have to use both DKIM and Domainkeys separately and need to configure them separately. But when DKIM alone can handle both DKIM and Domainkeys with single key its not required to configure serparately. Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:41 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is no reason why different keys cannot be used for Domainkey and DKIM. I am using different keys and have had no problems so far. Regards Alex On 05/04/2010 13:01, Anil Aliyan wrote: I have checked both the entries exists but not updated globally yet. BUT BOTH KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys If you run dig command from your server you can see these records: dig txt _domainkey.vanza.com(Answers as Below) [r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt dkim1._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 27481 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;dkim1._domainkey.vanaz.com.IN TXT ;; ANSWER SECTION: dkim1._domainkey.vanaz.com. 3600 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB ;; AUTHORITY SECTION: vanaz.com. 172368 IN NS ns2.iknowledgefactory.com. vanaz.com. 172368 IN NS ns.iknowledgefactory.com. [r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt private._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 54065 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;private._domainkey.vanaz.com. IN TXT ;; ANSWER SECTION: private._domainkey.vanaz.com. 2753 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMOyyYU7C8EPAq5QMKFXWuaEbtS/uCSBaKlCU8bNlpTcIyVZxDvoQJra6um3v9mc5QIDAQAB Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:23 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is another problem. You should have two entries for Domainkeys and one entry for DKIM: Domainkey: - _domainkey.vanaz.com - private._domainkey.vanaz.com Please refer to http://wiki.qmailtoaster.com/index.php/Domainkeys DKIM: - dkim1
RE: [qmailtoaster] Re: Mails getting bounced
That’s nice. If you would have simply renamed the domainkey folder would have served the purpose. Coz if the domainkey folder doesn’t exist that line in the tcp.smtp will not have any effect. Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 6:30 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Dear Anil, Yes, dkim1._domainkey.vanaz.com is the same key which I generate for DKIM. Second, right now DKSIGN=/var/qmail/control/%/private. So do I modify it to DKSIGN=. Regards, Amit At Monday, 05-04-2010 on 18:23 Anil Aliyan wrote: Dear Amit, 1) do I need to remove delete domainkey folder from control? Simply rename the domainkey folder to domain-key or something else , that’s upto you. 2) do I need to modify DKSIGN= in tcp.smtp? You don’t have to make any changes in your tcp.smtp, just keep them as it is. 3) do I need to modify my DNS server entries and if yes then what the new entry I should made? If the DNS entry for dkim1._domainkey.vanza.com is the same key you have generated for DKIM then you need not do anything else. Just keep the same key and same key will be used for verification of botk DKIM and Domainkey. Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 6:13 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Dear Anil, Ok. After modifying this, I have queries: 1) do I need to remove delete domainkey folder from control? 2) do I need to modify DKSIGN= in tcp.smtp? 3) do I need to modify my DNS server entries and if yes then what the new entry I should made? Thanks and regards, Amit At Monday, 05-04-2010 on 18:05 Anil Aliyan wrote: By default singconf.xml file contains on first line as below and only signs for DKIM: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global /dkimsign But if you want to sign mails for Domainkeys as well then you will have to add one more line just below types id=dkim / and above /global in the above example: types id=domainkey method=nofws / Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced I have not looked into possibility of having Domainkey and DKIM signed by DKIM as I installed qmailtoaster with Domainkey first and then added DKIM functionality and for this reason I'd keep them separate. Regards Alex On 05/04/2010 13:15, Anil Aliyan wrote: Dear Alex, I do agree with you and we can use two different keys but them you will have to use both DKIM and Domainkeys separately and need to configure them separately. But when DKIM alone can handle both DKIM and Domainkeys with single key its not required to configure serparately. Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:41 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is no reason why different keys cannot be used for Domainkey and DKIM. I am using different keys and have had no problems so far. Regards Alex On 05/04/2010 13:01, Anil Aliyan wrote: I have checked both the entries exists but not updated globally yet. BUT BOTH KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys If you run dig command from your server you can see these records: dig txt _domainkey.vanza.com(Answers as Below) [r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt dkim1._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 27481 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;dkim1._domainkey.vanaz.com.IN TXT ;; ANSWER SECTION: dkim1._domainkey.vanaz.com. 3600 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB ;; AUTHORITY SECTION: vanaz.com. 172368 IN NS ns2.iknowledgefactory.com. vanaz.com. 172368 IN NS ns.iknowledgefactory.com. [r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt private._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 54065 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;private._domainkey.vanaz.com. IN TXT ;; ANSWER SECTION: private
RE: [qmailtoaster] Re: Mails getting bounced
Now send a test mail to me and yourself and check the headers if you see signatures for both DKIM and Domainkey. From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 6:30 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Dear Anil, Yes, dkim1._domainkey.vanaz.com is the same key which I generate for DKIM. Second, right now DKSIGN=/var/qmail/control/%/private. So do I modify it to DKSIGN=. Regards, Amit At Monday, 05-04-2010 on 18:23 Anil Aliyan wrote: Dear Amit, 1) do I need to remove delete domainkey folder from control? Simply rename the domainkey folder to domain-key or something else , that’s upto you. 2) do I need to modify DKSIGN= in tcp.smtp? You don’t have to make any changes in your tcp.smtp, just keep them as it is. 3) do I need to modify my DNS server entries and if yes then what the new entry I should made? If the DNS entry for dkim1._domainkey.vanza.com is the same key you have generated for DKIM then you need not do anything else. Just keep the same key and same key will be used for verification of botk DKIM and Domainkey. Regards, Anil Aliyan From: Amit Dalia [mailto:a...@ikf.co.in] Sent: Monday, April 05, 2010 6:13 PM To: qmailtoaster-list@qmailtoaster.com Subject: RE: [qmailtoaster] Re: Mails getting bounced Dear Anil, Ok. After modifying this, I have queries: 1) do I need to remove delete domainkey folder from control? 2) do I need to modify DKSIGN= in tcp.smtp? 3) do I need to modify my DNS server entries and if yes then what the new entry I should made? Thanks and regards, Amit At Monday, 05-04-2010 on 18:05 Anil Aliyan wrote: By default singconf.xml file contains on first line as below and only signs for DKIM: dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global /dkimsign But if you want to sign mails for Domainkeys as well then you will have to add one more line just below types id=dkim / and above /global in the above example: types id=domainkey method=nofws / Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:52 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced I have not looked into possibility of having Domainkey and DKIM signed by DKIM as I installed qmailtoaster with Domainkey first and then added DKIM functionality and for this reason I'd keep them separate. Regards Alex On 05/04/2010 13:15, Anil Aliyan wrote: Dear Alex, I do agree with you and we can use two different keys but them you will have to use both DKIM and Domainkeys separately and need to configure them separately. But when DKIM alone can handle both DKIM and Domainkeys with single key its not required to configure serparately. Regards, Anil Aliyan From: Postmaster [mailto:postmas...@seawise-chartering.co.uk] Sent: Monday, April 05, 2010 5:41 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Re: Mails getting bounced There is no reason why different keys cannot be used for Domainkey and DKIM. I am using different keys and have had no problems so far. Regards Alex On 05/04/2010 13:01, Anil Aliyan wrote: I have checked both the entries exists but not updated globally yet. BUT BOTH KEYS ARE DIFFERENT, please use one single key for both DKIM and DomainKeys If you run dig command from your server you can see these records: dig txt _domainkey.vanza.com(Answers as Below) [r...@ncode-imss ~]# dig txt dkim1._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt dkim1._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 27481 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;dkim1._domainkey.vanaz.com.IN TXT ;; ANSWER SECTION: dkim1._domainkey.vanaz.com. 3600 IN TXT k=rsa\; p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOAIxAMr0cG1KMKOsR3sNt69ZuqdCPts+mUfBappgKc0qvB+6+X1cXYln9Eq6sikdiIzV4QIDAQAB ;; AUTHORITY SECTION: vanaz.com. 172368 IN NS ns2.iknowledgefactory.com. vanaz.com. 172368 IN NS ns.iknowledgefactory.com. [r...@ncode-imss ~]# dig txt private._domainkey.vanaz.com ; DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 txt private._domainkey.vanaz.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 54065 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;private._domainkey.vanaz.com. IN TXT ;; ANSWER SECTION: private._domainkey.vanaz.com. 2753 IN TXT k=rsa\; p
[qmailtoaster] disable mx check in chkuser
Dear Rajesh, Please refer to the url mentioned below to solve your problem: http://wiki.qmailtoaster.org/index.php/Chkuser Chkuser From QMail-Toaster chkuser configuration is not configurable on the fly. Configuration settings currently in use are documented at /var/qmail/doc/chkuser_settings.h. To tailor your chkuser settings, use the following procedure (provided by Nick): # rpm -Uvh qmail-toaster*.src.rpm # cd /usr/src/redhat/SPECS (assuming you are using CentOS 4) edit qmail-toaster.spec. find 'sleep 5' (should be line 606). change 5 to 300 (5 seconds to 300 seconds). save. # rpmbuild -bb --with cnt40 qmail-toaster.spec (use the appropriate --with value for your distro) When the build process pauses, open another terminal and edit /usr/src/redhat/BUILD/qmail-1.03/chkuser_settings.h to your liking. You have 5 minutes (or whatever you changed the sleep parameter to). Save your changes and wait for the 300 seconds to expire and watch it build. Search for #define CHKUSER_RCPT_MX(4th statement from below in the chkuser_settings.h file) Modify the line to comment it. Before change : #define CHKUSER_RCPT_MX After Change : /* #define CHKUSER_RCPT_MX */ Then save the file and let the rpm rebuild # cd ../RPMS/i386/ # qmailctl stop # rpm -Uvh --replacefiles --replacepkgs qmail-*.rpm # qmailctl start That's the procedure for now. Regards, Anil Aliyan hi i use squirrelmail when customers send emails to a number of people from webmail then if there is one address that is wrong the message that is shown is #5.1.1 chkuser - can't find valid MX for rcpt domain however the exact domain name where the problem exists is not shown here i see two ways out a) either i get the exact email id which has the problem, but i am not sure whether squirrelmail needs to be modified or chkuser --- this would be ideal. b) the easy way -- disable chkuser MX checks for webmail users so that the bad email id bounces back after some time. could you please guide me on how to do this ? thanks rajesh - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] RPM Build for Second Instance of Qmail
Dear Jake,
I need to install Trend Micro IMSS for qmail at our company HO and for the
at we need to install two instances of qmail on the same server (called
Sandwich Mode installation). I have installed first instance of qmailtoaster
and tried to rebuild srpm for the second instance by modifying the spec
file. I made the following changes in the ##RPM## section of the spec file:
%define qdir /var/qmail -- %define qdir /var/qmail2
Name: %{name}-toaster -- Name: %{name}-toaster2
RPM gets build without any errors but when I install the same it says
/usr/sbin/sendmail already exists and fails to install.
One more thing is haunting me is the startup scripts of second instance in
the /etc/rc.* directory and /var/log/qmail logs. Is it going to overwrite
the startup scripts and log files of the first instance?? As I am unable to
find where to make changes in spec file for these two paths or if I can
rename the startup scripts and log files for the second instance so that
they do not conflict with the first instance.
Though I am still trying to find out the reason and ways to resolve the same
but meanwhile if an expert like you can help me out and guide me it can be
achieved in less time.
Thanks Regards,
Anil Aliyan
-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] LDAP
Dear Madmac, If you haven't selected the ldapserver during os installation its not there but you can install later on also. yum -y install openldap-server this command will install openldap-server and other necessary packages for you. Internet connectivity is a must if you are installing using yum or else u can install openldap-server rpm from the dvd/cd of your distro also. Regards, Anil Aliyan -Original Message- From: sysadmin [mailto:sysad...@tricubemedia.com] Sent: Thursday, February 04, 2010 12:09 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] LDAP Can anyone tell me if LDAP is installed by default using the ISO installer ( Centos 5.x) If so , can you give me a quick how to. Or link to the hown to Thanks madmac - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] Domainkeys Problems
Hi All, Same thing happened with me when I setup domainkeys and dkim for my mailserver and published my public key in the DNS. Some of the public mailserver like gmail start reading the dns entry after few hours but some other mailserver like yahoo takes time to update their dns server/dns caching servers. So one should wait for atleast 3-4 days from the day you publish your public key in the DNS to be reflected globally. Regards, Anil Aliyan -Original Message- From: Martin Waschbuesch [mailto:mar...@waschbuesch.de] Sent: Wednesday, February 03, 2010 2:23 AM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Domainkeys Problems Actually gmail says it passes Domainkeys check. This is the header for an email I just sent my gmail account: Odd. In that case, what services did you test with that did not work? And when did you enable Domainkeys? Is it possible that your updated DNS information had not yet spread and that those services were using cached (and therefor wrong) DNS information. E.g. they might not have been able to see the selector or policy record... -- Corporation. An ingenious device for obtaining individual profit without individual responsibility. Bierce, Ambrose - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] OT: VMWare question
Dear Michael, You can copy your vm image on to some other desktop or server using vmware converter and once your server ready with vmware you can move same image back to the server using vmware converter. If you need any help further please feel free to write to me. Regards, Anil Aliyan -Original Message- From: Michael Handiboe [mailto:mich...@horizonbroadband.net] Sent: Wednesday, February 03, 2010 10:43 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] OT: VMWare question sorry guys, I'll keep this short... I know that many of you are experienced with VMWare. I want to get involved, but I want to keep my present hard drive image -- I like it the way it is. I'd be happy to make a backup (or drive image) and wipe my drives and install VMWare and then 'restore' my existing image on top of VMWare, but I don't know if I can do that. Is this do-able? Thanks, - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] Email testing service
Dear Jake, I tested the new script by send a test mail at email-t...@qmailtoaster.com but I got a negative response SPF Record: PASS Sent from a valid domain: PASS DomainKey: FAIL On the other hand when I send any mail to yahoo or gmail who checks for SPF, DomainKeys and DKIM all tests are passed by test messages. Received: from gnvfc.net (mail.gnvfc.net [203.77.193.20]) by mx.google.com with ESMTP id 27si13138810pzk.30.2010.01.31.20.42.06; Sun, 31 Jan 2010 20:42:07 -0800 (PST) Received-SPF: pass (google.com: domain of acali...@gnvfc.net designates 203.77.193.20 as permitted sender) client-ip=203.77.193.20; Authentication-Results: mx.google.com; spf=pass (google.com: domain of acali...@gnvfc.net designates 203.77.193.20 as permitted sender) smtp.mail=acali...@gnvfc.net; dkim=pass header...@gnvfc.net DomainKey-Signature: a=rsa-sha1; c=nofws; d=gnvfc.net; h=reply-to:from :to:subject:date:message-id:mime-version:content-type; q=dns; s= dkim1; b=B5UQuHbRhRTQeP9QYP7Ug/8fG5dHP2WVGUje8ezNPQmJt8rhBcRF7/D qoSafZTHqq6t6v7bpyhqxIfhDGAKuhHT4vdbUPFcCT2VTEMVHBqYjjwNcy3X0Og5 SFcuHIqXbQ5Y4dR8WqAdHhnt5YWtkie2nXyZBE4LECEhA2Rr6590= DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=gnvfc.net; h=reply-to:from :to:subject:date:message-id:mime-version:content-type; q=dns; s= dkim1; bh=fp2rT3SJ3BhIIB9+RfNnTLM2Jf0=; b=sqffRXUdCw4AXAxYWFodV5 Ppshawwplo3jG1DFd3nyvFhzQbuCK1Q4tKz6WCEQ1rq5iqH/MT4GhC4TXzNgNOeL dqVGrqzWGjduEjrTzJQepxy1eweiX0sJhowk9FB7X8GdQYR0H9quQ3aBl87UPqy1 hrK4iMGEHJrMt+Orpw8qk= This is just for your information and to help in building your script more efficient and accurate. Regards, Anil Aliyan -Original Message- From: Jake Vickers [mailto:j...@qmailtoaster.com] Sent: Monday, February 01, 2010 9:02 AM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] Email testing service Just realized that I had not posted this on the users mailing list - I wrote a quick email-test script that you can send emails to and get a quick report back on some of your email health. This is the first draft of the script and more checks/features will be added in the future. Here is an example output: Qmailtoaster.com Email Message Report - This message is from the qmailtoaster.com email test service (email-t...@qmailtoaster.com). This service is used to give users an automated response to perform simple checks on their email and DNS configurations. The emails sent to this service's address are processed by a script that checks email headers and other email related information and returns a response email report to the original sender. These tests should not be considered authorative, and results may be returned from cached DNS information. - Message was not considered spam. (Note: This will vary from server to server, and from message to message!) Here are the spamassassin headers from this server: No, score=2.7 required=5.0 tests=AWL,DK_SIGNED,DK_VERIFIED, RDNS_NONE,TVD_SPACE_RATIO autolearn=no version=3.2.5 Return path was: Jake Vickers j...@v2gnu.com Original test request was sent using: Thunderbird 2.0.0.23 (X11/20090817) SPF Record: PASS Sent from a valid domain: PASS DomainKey: PASS You can use this service by sending an email to email-t...@qmailtoaster.com and within a few seconds a reply will be sent. Enjoy! - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] DKIM Error
Dear Jake,
I have changed my config file qmail-remote as follows:
dkimsign
!-- per default sign all mails using dkim --
global algorithm=rsa-sha256 domain=/var/qmail/control/me
keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1
types id=dkim /
/global
!-- use dkim + domainkey for example.com --
gnvfc.net selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/gnvfc.net
nprocure.com selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/nprocure.com
npay.in selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/npay.in
ncode.in selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/ncode.in
!-- no signing for example2.com --
example2.com /
/dkimsign
But I have another issue now. Before install dkim i was already using
DomainKeys and have a folder for domain in keys in my control dir and it was
working fine till the day I installed DKIM. now my mails are getting singed
twice for domainkeys after putting new qmail-remote file.
Received-SPF: pass (google.com: domain of acali...@gnvfc.net designates
203.77.193.20 as permitted sender) client-ip=203.77.193.20;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
acali...@gnvfc.net designates 203.77.193.20 as permitted sender)
smtp.mail=acali...@gnvfc.net; dkim=neutral (no key) header...@gnvfc.net
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gnvfc.net; h=message-id
:reply-to:from:to:cc:subject:date:mime-version:content-type; q=
dns; s=dkim1; b=oPBhLaC3ThBMUn8wFl4ZFpJYlqdXplzczaVB1iESxqGLGIUR
vkmItNyTFpuMtFtMrzfFQ4oqNEXMZ96dIfKbCPCQYdpvA7BgkqhZvzTOkYoZIPcT
oWPvmfhjT3T4n+aLwThDBn/QLNWbRccoObaYFBqEJwWeY5fxPbo0peZbY70=
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=gnvfc.net; h=message-id
:reply-to:from:to:cc:subject:date:mime-version:content-type; s=
dkim1; bh=iHUq0zWCNvVWpMdk41w7F+GJs8A=; b=lNVvKsVPYpDjDvGO5M3ib7
+ITzHwjluyLcDzy0DLiNvv3mmYuqSUJB72keCx5W5TJaKPJRtAkDSSxKP7vTyUB6
9/Xx2sQilYSGFXuhmWt2gGDBSyDd9g3ftSF2HlYEFr3CA48cr/wgLk60NsDQHB0x
iQDnbl7kfjVGoFo4R64Pc=
Received: (qmail 11637 invoked by uid 89); 3 Nov 2009 07:58:09 -
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=private; d=gnvfc.net;
b=2gAcG+kbzh8Etw72xpd/pQzg1uMKJ0ucro5sqtM3TSdK4eIM45uBC9/K3OlPthBbbhFzIDdxRnWIinELV6SHxx6UuYpd9fkwAoyvGkI/WbRSu0hJGCrYDAJjTFqm0gxShkolKzL4rJv9qRS4k2HzQAZGNtspZ5SJqyiumIyVFoE=;
Received: by simscan 1.4.0 ppid: 11631, pid: 11633, t: 0.0337s
scanners: attach: 1.4.0 clamav: 0.95.2/m:51/d:9979
Received: from unknown (HELO ANIL) (acali...@gnvfc.net@203.77.193.110)
How can discard old domainkeys not to sign mails instead use DIKM+Domainkeys
config. As I have used types id=domainkey method=nofws/ in the above
config that means same keys will be used for DomainKeys as well, if i am wrong
and old domainkeys will not be used in this case.
To achieve the same i removed below mentioned line from tcp.smtp
DKSIGN=/var/qmail/control/domainkeys/%/private
But after removinTimes New Romang this line fTimes New Romanrom Times New
Romantcp.smtp my clients unable to deliver mails with an error saying that it
cannot read the key file to sign the mail.
- Original Message -
From: Anil Aliyan
To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, November 03, 2009 1:01 PM
Subject: Re: [qmailtoaster] DKIM Error
Dear Jake,
I am ready to provide all the details, please let me know what information or
config file you want to provide to you.
use strict;
use warnings;
our $VERSION = '0.2';
use Mail::DKIM 0.29;
use Mail::DKIM::Signer;
# enable support for pretty signatures, if available
eval 'require Mail::DKIM::TextWrap';
=head
config file structure
- missing settings will be merged from the global-node
- domain-entry will also match its subdomains
- create empty domain-node to omit signing (or specify none as id)
dkimsign
!-- per default sign all mails using dkim --
global algorithm=rsa-sha256 domain=/var/qmail/control/me
keyfile=/var/qmail/control/dkim/global.key method=simple selector=beta
types id=dkim /
/global
!-- use dkim + domainkey for example.com --
example.com selector=beta2
types id=dkim /
types id=domainkey method=nofws /
/example.com
!-- no signing for example2.com --
example2.com /
/dkimsign
=cut
my $configfile = undef;
$configfile = '/var/qmail/control/dkim/signconf.xml';
my $debugfile = undef;
#$debugfile = '/tmp/dkim.debug';
my $qremote = '/var/qmail/bin/qmail-remote.orig';
my $binary = 0;
our $config;
$config-{'global'} = {
types = { dkim = {} },
keyfile = '/var/qmail/control/dkim/global.key',
algorithm = 'rsa-sha256',
method = 'simple',
selector = 'beta',
# either string or file (first line of file will be used)
domain = '/var/qmail/control/me
[qmailtoaster] DKIM Error (Please ignore last mail)
Dear Jake,
I have changed my config file qmail-remote as follows:
dkimsign
!-- per default sign all mails using dkim --
global algorithm=rsa-sha256 domain=/var/qmail/control/me
keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1
types id=dkim /
/global
!-- use dkim + domainkey for example.com --
gnvfc.net selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/gnvfc.net
nprocure.com selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/nprocure.com
npay.in selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/npay.in
ncode.in selector=dkim1
types id=dkim /
types id=domainkey method=nofws /
/ncode.in
!-- no signing for example2.com --
example2.com /
/dkimsign
But I have another issue now. Before install dkim i was already using
DomainKeys and have a folder for domain in keys in my control dir and it was
working fine till the day I installed DKIM. now my mails are getting singed
twice for domainkeys after putting new qmail-remote file.
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
acali...@gnvfc.net designates 203.77.193.20 as permitted sender)
smtp.mail=acali...@gnvfc.net; dkim=neutral (no key) header...@gnvfc.net
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gnvfc.net; h=message-id
:reply-to:from:to:cc:subject:date:mime-version:content-type; q=
dns; s=dkim1; b=oPBhLaC3ThBMUn8wFl4ZFpJYlqdXplzczaVB1iESxqGLGIUR
vkmItNyTFpuMtFtMrzfFQ4oqNEXMZ96dIfKbCPCQYdpvA7BgkqhZvzTOkYoZIPcT
oWPvmfhjT3T4n+aLwThDBn/QLNWbRccoObaYFBqEJwWeY5fxPbo0peZbY70=
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=gnvfc.net; h=message-id
:reply-to:from:to:cc:subject:date:mime-version:content-type; s=
dkim1; bh=iHUq0zWCNvVWpMdk41w7F+GJs8A=; b=lNVvKsVPYpDjDvGO5M3ib7
+ITzHwjluyLcDzy0DLiNvv3mmYuqSUJB72keCx5W5TJaKPJRtAkDSSxKP7vTyUB6
9/Xx2sQilYSGFXuhmWt2gGDBSyDd9g3ftSF2HlYEFr3CA48cr/wgLk60NsDQHB0x
iQDnbl7kfjVGoFo4R64Pc=
Received: (qmail 11637 invoked by uid 89); 3 Nov 2009 07:58:09 -
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=private; d=gnvfc.net;
b=2gAcG+kbzh8Etw72xpd/pQzg1uMKJ0ucro5sqtM3TSdK4eIM45uBC9/K3OlPthBbbhFzIDdxRnWIinELV6SHxx6UuYpd9fkwAoyvGkI/WbRSu0hJGCrYDAJjTFqm0gxShkolKzL4rJv9qRS4k2HzQAZGNtspZ5SJqyiumIyVFoE=;
Received: by simscan 1.4.0 ppid: 11631, pid: 11633, t: 0.0337s
scanners: attach: 1.4.0 clamav: 0.95.2/m:51/d:9979
Received: from unknown (HELO ANIL) (acali...@gnvfc.net@203.77.193.110)
How can discard old domainkeys not to sign mails instead use DIKM+Domainkeys
config. As I have used types id=domainkey method=nofws/ in the above
config that means same keys will be used for DomainKeys as well, if i am wrong
and old domainkeys will not be used in this case.
To achieve the same i removed below mentioned line from tcp.smtp
DKSIGN=/var/qmail/control/domainkeys/%/private
But after removing this line from tcp.smtp my clients are unable to deliver
mails with an server side error saying that it cannot read the key file to sign
the mail.
Regards,
Anil Aliyan
- Original Message -
From: Anil Aliyan
To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, November 03, 2009 1:01 PM
Subject: Re: [qmailtoaster] DKIM Error
Dear Jake,
I am ready to provide all the details, please let me know what information or
config file you want to provide to you.
use strict;
use warnings;
our $VERSION = '0.2';
use Mail::DKIM 0.29;
use Mail::DKIM::Signer;
# enable support for pretty signatures, if available
eval 'require Mail::DKIM::TextWrap';
=head
config file structure
- missing settings will be merged from the global-node
- domain-entry will also match its subdomains
- create empty domain-node to omit signing (or specify none as id)
dkimsign
!-- per default sign all mails using dkim --
global algorithm=rsa-sha256 domain=/var/qmail/control/me
keyfile=/var/qmail/control/dkim/global.key method=simple selector=beta
types id=dkim /
/global
!-- use dkim + domainkey for example.com --
example.com selector=beta2
types id=dkim /
types id=domainkey method=nofws /
/example.com
!-- no signing for example2.com --
example2.com /
/dkimsign
=cut
my $configfile = undef;
$configfile = '/var/qmail/control/dkim/signconf.xml';
my $debugfile = undef;
#$debugfile = '/tmp/dkim.debug';
my $qremote = '/var/qmail/bin/qmail-remote.orig';
my $binary = 0;
our $config;
$config-{'global'} = {
types = { dkim = {} },
keyfile = '/var/qmail/control/dkim/global.key',
algorithm = 'rsa-sha256',
method = 'simple',
selector = 'beta',
# either string or file (first line of file will be used)
domain = '/var/qmail/control/me'
};
#---
# read config file. safely
if (defined($configfile) -r $configfile)
{
eval 'use XML::Simple';
if (!$@)
{
my $xmlconf;
eval { $xmlconf = XMLin($configfile, ForceArray = ['types'], KeyAttr =
['id']); };
qexit_deferral('Unable to read config file: ', $@)
if ($@);
ConfigMerge::merge($config
[qmailtoaster] DKIM Error
Dear Jakes, Please find some time to help resolve my problem also, will very greatful to you. Thanks Regards, Anil Aliyan - Original Message - From: Anil Aliyan To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, October 31, 2009 2:28 AM Subject: [qmailtoaster] DKIM Error Jakes, Please find the config file attached with this mail. I have not changed anything in the conf file and i copied it as it is in the /var/qmail/control/dkim folder persmission are: -rw-r--r-- 1 qmailr qmail 891 Oct 29 17:06 global.key -rw-r--r-- 1 qmailr qmail 241 Oct 29 17:07 public.txt -rw-r--r-- 1 qmailr qmail 250 Oct 29 17:10 signconf.xml I performed following steps to install the DKIM: install required perl packages perl-XML-Simple perl-Mail-DKIM perl-XML-Parser --- mkdir /var/qmail/control/dkim dknewkey /var/qmail/control/dkim/global.key /var/qmail/control/dkim/public.txt perl -pi -e 's/global.key._domainkey/dkim1/' /var/qmail/control/dkim/public.txt ---Download DKIM Package --- wget http://qmailtoaster.org/dkim.tgz tar zxvf dkim.tgz cd dkim qmailctl stop mv signconf.xml /var/qmail/control/dkim/ chown -R qmailr:qmail /var/qmail/control/dkim mv /var/qmail/bin/qmail-remote /var/qmail/bin/qmail-remote.orig mv qmail-remote /var/qmail/bin/ chmod 777 /var/qmail/bin/qmail-remote chown root:qmail /var/qmail/bin/qmail-remote qmailctl start Copy Contents of public.key and paste into dns zone as it is without any modifications. - - Original Message - From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Friday, October 30, 2009 10:16 PM Subject: Re: [qmailtoaster] DKIM Error Anil Aliyan wrote: Dear All, I have setup DKIM as per instution in the DKIM video. Everything is setup correctly but still when i see mail hearders on yahoo or gmail i see Authentication-Results: mta164.mail.in.yahoo.com from=gnvfc.net; domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok); and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key) why is says from=? different in both the cases in domainkeys its gnvfc.net and in DKIM its mail.gnvfc.net. When recipient mail server verifies the key it might be looking for the domain name instead of hostname+domain name. DKIM reads the domain name from the me file in control dir, if i am not wrong. while Domain keys only selects the actual domain name from the email address or sending mailserver. DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; I have 5 virtual domains and if i use globalkey for the severs all maildomains will have samekey and every mail deliverd on yahoo will look for d=gnvfc.net for public key. How can i setup dkim for individual domain. and how can i get d=gnvfc.net as shown in RED above in both Signature headers. And is my DKIM entry in DNS is in the format given below, is it correct. I have simply copied it from the public.txt file and pasted into my dns, you can check the same from http://domainkeys.sourceforge.net/selectorcheck.html with dkim.gnvfc.net: dkim1 IN TXT k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB Regards, Anil Aliyan Show us your DKIM config file. I suspect you have something configured incorrectly there. The DKIM patch for Qmail will allow you to sign multiple domains individually (when configured correctly, Yahoo will look at each domain for the DKIM key). The patch will force you to use ONE key to sign the domains however. So you use the same hash to sign, but each domain will get a DNS entry and each domain will sign for itself by configuring the DKIM config file correctly. - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com dkimsign !-- per default sign
Re: [qmailtoaster] DKIM Error
'}-{$type};
if ($type eq 'dkim')
{
$signer-add_signature(
new Mail::DKIM::Signature(
Algorithm = $sigconf-{'algorithm'} || $conf-{'algorithm'} ||
$signer-algorithm,
Method = $sigconf-{'method'} || $conf-{'method'} || $signer-method,
Headers = $sigconf-{'headers'} || $conf-{'headers'} || $signer-headers,
Domain = $sigconf-{'domain'} || $conf-{'domain'} || $signer-domain,
Selector = $sigconf-{'selector'} || $conf-{'selector'} || $signer-selector,
Query = $sigconf-{'query'} || $conf-{'query'},
Identity = $sigconf-{'identity'} || $conf-{'identity'},
Expiration = $sigconf-{'expiration'} || $conf-{'expiration'}
)
);
$sigdone = 1;
}
elsif ($type eq 'domainkey')
{
$signer-add_signature(
new Mail::DKIM::DkSignature(
Algorithm = 'rsa-sha1', # only rsa-sha1 supported
Method = $sigconf-{'method'} || $conf-{'method'} || $signer-method,
Headers = $sigconf-{'selector'} || $conf-{'headers'} || $signer-headers,
Domain = $sigconf-{'domain'} || $conf-{'domain'} || $signer-domain,
Selector = $sigconf-{'selector'} || $conf-{'selector'} || $signer-selector,
Query = $sigconf-{'query'} || $conf-{'query'}
)
);
$sigdone = 1;
}
}
return $sigdone;
}
Regards,
Anil Aliyan
- Original Message -
From: Jake Vickers
To: qmailtoaster-list@qmailtoaster.com
Sent: Monday, November 02, 2009 11:42 PM
Subject: Re: [qmailtoaster] DKIM Error
Anil Aliyan wrote:
Dear Jakes,
Please find some time to help resolve my problem also, will very greatful
to you.
Thanks Regards,
Anil Aliyan
- Original Message -
From: Anil Aliyan
To: qmailtoaster-list@qmailtoaster.com
Sent: Saturday, October 31, 2009 2:28 AM
Subject: [qmailtoaster] DKIM Error
Jakes,
Please find the config file attached with this mail.
Pasting the config file into the email is easier for us to help you.
It looks like your config file may be wrong, depending on how you configured
your system.
Right now, your system is going to sign every domain sending email as the
domain listed in your /var/qmail/control/me file since you only defined a
global rule. This is fine if the me file only contain your domain name
(gnvfc.com) but you probably have your hostname in the me file as well
(mail.gnvfc.com) so it's signing using that domain.
You can define individual domains to sign for in this format:
dkimsign
!-- per default sign all mails using dkim --
global algorithm=rsa-sha1 domain=/var/qmail/control/me
keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1
types id=dkim /
/global
gnvfc.com selector=dkim1
types id=dkim /
/gnvcf
/dkimsign
This will inherit any declarations from the global tags that you do not
override (so it will inherit the algorithm=rsa-sha1, keyfile, method).
But without seeing how you configured other things it's hard to guess.
[qmailtoaster] DKIM Error
Dear All, I have setup DKIM as per instution in the DKIM video. Everything is setup correctly but still when i see mail hearders on yahoo or gmail i see Authentication-Results: mta164.mail.in.yahoo.com from=gnvfc.net; domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok); and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key) why is says from=? different in both the cases in domainkeys its gnvfc.net and in DKIM its mail.gnvfc.net. When recipient mail server verifies the key it might be looking for the domain name instead of hostname+domain name. DKIM reads the domain name from the me file in control dir, if i am not wrong. while Domain keys only selects the actual domain name from the email address or sending mailserver. DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; I have 5 virtual domains and if i use globalkey for the severs all maildomains will have samekey and every mail deliverd on yahoo will look for d=gnvfc.net for public key. How can i setup dkim for individual domain. and how can i get d=gnvfc.net as shown in RED above in both Signature headers. And is my DKIM entry in DNS is in the format given below, is it correct. I have simply copied it from the public.txt file and pasted into my dns, you can check the same from http://domainkeys.sourceforge.net/selectorcheck.html with dkim.gnvfc.net: dkim1 IN TXT k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB Regards, Anil Aliyan
Re: [qmailtoaster] DKIM Error
Jakes, Please find the config file attached with this mail. I have not changed anything in the conf file and i copied it as it is in the /var/qmail/control/dkim folder persmission are: -rw-r--r-- 1 qmailr qmail 891 Oct 29 17:06 global.key -rw-r--r-- 1 qmailr qmail 241 Oct 29 17:07 public.txt -rw-r--r-- 1 qmailr qmail 250 Oct 29 17:10 signconf.xml I performed following steps to install the DKIM: install required perl packages perl-XML-Simple perl-Mail-DKIM perl-XML-Parser --- mkdir /var/qmail/control/dkim dknewkey /var/qmail/control/dkim/global.key /var/qmail/control/dkim/public.txt perl -pi -e 's/global.key._domainkey/dkim1/' /var/qmail/control/dkim/public.txt ---Download DKIM Package --- wget http://qmailtoaster.org/dkim.tgz tar zxvf dkim.tgz cd dkim qmailctl stop mv signconf.xml /var/qmail/control/dkim/ chown -R qmailr:qmail /var/qmail/control/dkim mv /var/qmail/bin/qmail-remote /var/qmail/bin/qmail-remote.orig mv qmail-remote /var/qmail/bin/ chmod 777 /var/qmail/bin/qmail-remote chown root:qmail /var/qmail/bin/qmail-remote qmailctl start Copy Contents of public.key and paste into dns zone as it is without any modifications. - - Original Message - From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Friday, October 30, 2009 10:16 PM Subject: Re: [qmailtoaster] DKIM Error Anil Aliyan wrote: Dear All, I have setup DKIM as per instution in the DKIM video. Everything is setup correctly but still when i see mail hearders on yahoo or gmail i see Authentication-Results: mta164.mail.in.yahoo.com from=gnvfc.net; domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok); and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key) why is says from=? different in both the cases in domainkeys its gnvfc.net and in DKIM its mail.gnvfc.net. When recipient mail server verifies the key it might be looking for the domain name instead of hostname+domain name. DKIM reads the domain name from the me file in control dir, if i am not wrong. while Domain keys only selects the actual domain name from the email address or sending mailserver. DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; I have 5 virtual domains and if i use globalkey for the severs all maildomains will have samekey and every mail deliverd on yahoo will look for d=gnvfc.net for public key. How can i setup dkim for individual domain. and how can i get d=gnvfc.net as shown in RED above in both Signature headers. And is my DKIM entry in DNS is in the format given below, is it correct. I have simply copied it from the public.txt file and pasted into my dns, you can check the same from http://domainkeys.sourceforge.net/selectorcheck.html with dkim.gnvfc.net: dkim1 IN TXT k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB Regards, Anil Aliyan Show us your DKIM config file. I suspect you have something configured incorrectly there. The DKIM patch for Qmail will allow you to sign multiple domains individually (when configured correctly, Yahoo will look at each domain for the DKIM key). The patch will force you to use ONE key to sign the domains however. So you use the same hash to sign, but each domain will get a DNS entry and each domain will sign for itself by configuring the DKIM config file correctly. dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global /dkimsign - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] DKIM Error
Jakes, Please find the config file attached with this mail. I have not changed anything in the conf file and i copied it as it is in the /var/qmail/control/dkim folder persmission are: -rw-r--r-- 1 qmailr qmail 891 Oct 29 17:06 global.key -rw-r--r-- 1 qmailr qmail 241 Oct 29 17:07 public.txt -rw-r--r-- 1 qmailr qmail 250 Oct 29 17:10 signconf.xml I performed following steps to install the DKIM: install required perl packages perl-XML-Simple perl-Mail-DKIM perl-XML-Parser --- mkdir /var/qmail/control/dkim dknewkey /var/qmail/control/dkim/global.key /var/qmail/control/dkim/public.txt perl -pi -e 's/global.key._domainkey/dkim1/' /var/qmail/control/dkim/public.txt ---Download DKIM Package --- wget http://qmailtoaster.org/dkim.tgz tar zxvf dkim.tgz cd dkim qmailctl stop mv signconf.xml /var/qmail/control/dkim/ chown -R qmailr:qmail /var/qmail/control/dkim mv /var/qmail/bin/qmail-remote /var/qmail/bin/qmail-remote.orig mv qmail-remote /var/qmail/bin/ chmod 777 /var/qmail/bin/qmail-remote chown root:qmail /var/qmail/bin/qmail-remote qmailctl start Copy Contents of public.key and paste into dns zone as it is without any modifications. - - Original Message - From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Friday, October 30, 2009 10:16 PM Subject: Re: [qmailtoaster] DKIM Error Anil Aliyan wrote: Dear All, I have setup DKIM as per instution in the DKIM video. Everything is setup correctly but still when i see mail hearders on yahoo or gmail i see Authentication-Results: mta164.mail.in.yahoo.com from=gnvfc.net; domainkeys=pass (ok); from=mail.gnvfc.net; dkim=permerror (no key) Secondly, for domain keys it says from=gnvfc.net; domainkeys=pass (ok); and for DKIM is says from=mail.gnvfc.net; dkim=permerror (no key) why is says from=? different in both the cases in domainkeys its gnvfc.net and in DKIM its mail.gnvfc.net. When recipient mail server verifies the key it might be looking for the domain name instead of hostname+domain name. DKIM reads the domain name from the me file in control dir, if i am not wrong. while Domain keys only selects the actual domain name from the email address or sending mailserver. DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=mail.gnvfc.net; h= message-id:reply-to:from:to:subject:date:mime-version :content-type; s=dkim1; DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private; d=gnvfc.net; I have 5 virtual domains and if i use globalkey for the severs all maildomains will have samekey and every mail deliverd on yahoo will look for d=gnvfc.net for public key. How can i setup dkim for individual domain. and how can i get d=gnvfc.net as shown in RED above in both Signature headers. And is my DKIM entry in DNS is in the format given below, is it correct. I have simply copied it from the public.txt file and pasted into my dns, you can check the same from http://domainkeys.sourceforge.net/selectorcheck.html with dkim.gnvfc.net: dkim1 IN TXT k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0KkrMRWFDOYr41TzzIDAzXVumAXtAXw4XthJPLZ22YwZhh2jtu1V7jnvrywT2aMhh03UdxrGlipI2waX2m1JyTxp5sy07Bgm4AvYZXtm90Jq74b6V7jZqF04ur9IoaN9HEUdaFeY5HeYgab53phMOvwX5UH8Z6qgj3rC7hWtQPwIDAQAB Regards, Anil Aliyan Show us your DKIM config file. I suspect you have something configured incorrectly there. The DKIM patch for Qmail will allow you to sign multiple domains individually (when configured correctly, Yahoo will look at each domain for the DKIM key). The patch will force you to use ONE key to sign the domains however. So you use the same hash to sign, but each domain will get a DNS entry and each domain will sign for itself by configuring the DKIM config file correctly. dkimsign !-- per default sign all mails using dkim -- global algorithm=rsa-sha1 domain=/var/qmail/control/me keyfile=/var/qmail/control/dkim/global.key method=simple selector=dkim1 types id=dkim / /global /dkimsign - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] problem
The owner of the domain or mail server for which rdns fails need to ask his internet service provider to create a RDNS entry for the said domain in hos DNS server. The IP should resolve back to a domain name. Regards, Anil Aliyan - Original Message - From: Noel Rivera (Border Less) To: qmailtoaster-list@qmailtoaster.com Sent: Friday, October 16, 2009 4:12 AM Subject: RE: [qmailtoaster] problem How to do that? The reverse dns in my server Saludos. Borderless Consulting Group SA de CV. Noel Alban Rivera Rivera Jefe de Redes y Telecomunicaciones Tel. (915) 633-31-04 Nextel 62*142650*2 P Por favor considera el medio ambiente antes de imprimir este e-mail. -- CONFIDENTIALITY NOTICE: This e-mail message including attachments, if any, is intended only for the person or entity to which it is addressed and may contain confidential and /or privileged material. Any review, use, disclosure or distribution of such confidential information without the written authorization of Borderless Consulting Group is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. By receiving this e-mail you acknowledge that any breach by you and/or your representatives of the above provisions may entitle Borderless Consulting Group to seek for damages. AVISO DE CONFIDENCIALIDAD: Este correo electrónico, incluyendo en su caso, los archivos adjuntos al mismo, pueden contener información de carácter confidencial y/o privilegiada, y se envían a la atención única y exclusivamente de la persona y/o entidad a quien va dirigido. La copia, revisión, uso, revelación y/o distribución de dicha información confidencial sin la autorización por escrito de Borderless Consulting Group está prohibida. Si usted no es el destinatario a quien se dirige el presente correo, favor de contactar al remitente respondiendo al presente correo y eliminar el correo original incluyendo sus archivos, así como cualesquiera copia del mismo. Mediante la recepción del presente correo usted reconoce y acepta que en caso de incumplimiento de su parte y/o de sus representantes a los términos antes mencionados, Borderless Consulting Group tendrá derecho a los daños y perjuicios que esto le cause. From: Craig McLaughlin [mailto:craig.p.mclaugh...@gmail.com] Sent: Thursday, October 15, 2009 4:33 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] problem The remote host (the mx server for algebasa.com) is trying to check the reverse DNS of the sending machine - presumably to make sure that the sending domain matches. Maxwell is correct, you need to set your reverse DNS. On Thu, Oct 15, 2009 at 1:43 PM, Maxwell Smart c...@yother.com wrote: What I'm trying to say is that your DNS server is not resolving your rDNS. It's coming up as a SERVFAIL. I am no expert, but I think this is where your problem lies. Noel Rivera (Border Less) wrote: Its ping timeout because I have firewall in the mailserver My address @borderless.com.mx is in the 12.23.82.41 IP. -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Thursday, October 15, 2009 2:15 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] problem OK, but when I try to resolve the address 12.23.82.41 it's not resolving. algebasa.com is 69.90.30.253 and resolves. Noel Rivera (Border Less) wrote: I have only the problem with this domains, the all others domains can resolve without problems -Original Message- From: Maxwell Smart [mailto:c...@yother.com] Sent: Thursday, October 15, 2009 1:59 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] problem It appears that you have a DNS server failure, the IP address 12.23.82.41 cannot be resolved. Noel Rivera (Border Less) wrote: Hello List I have a problem with sending mail to domain @algebasa.com Remote host said: 450 4.7.1 oscar.amezqu...@algebasa.com mailto:oscar.amezqu...@algebasa.com... Access temporarily denied. Cannot resolve PTR record for 12.23.82.41 Giving up on 76.74.255.168. How can I solve this problem? -- Cecil Yother, Jr. cj cj's 2318 Clement Ave Alameda, CA 94501 tel 1.510.865.2787 | fax 1.510.864.7300 http://yother.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your
Re: [qmailtoaster] Why does username require domain name?
I still dont understand whats wrong here??? if u get @137.52.23.46 in the headers of the mail Received: from unknown (HELO ?137.52.23.46?) (adamt...@awabllc.com@137.52.23.46) Please try to understand the meaning of this header line above . To the mailserver this client i.e., 137.52.23.46 is an unknown client because this clinet doesnt have any RDNS defined for it and cannot be resolved, hence its unknown. Secondly, adamt...@awabllc.com is the authenticated user who is sending mail from the client 137.52.23.46 Thats what this line stands for in the hearder of you mail. I dont understand whats wrong with that??? Regards, Anil Aliyan - Original Message - From: Adam Glass To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, October 10, 2009 1:10 AM Subject: Re: [qmailtoaster] Why does username require domain name? CJ, It is probably not the e-mail client. The problem was discovered by someone using Mulberry (which I think is a variant of Eudora) and I reproduced it with Thunderbird/Linux and on Thunderbird/Macintosh. Thanks, Adam On Fri, Oct 9, 2009 at 3:15 PM, Maxwell Smart c...@yother.com wrote: Adam, Yes for (incoming and outgoing)authentication you must put in the entire address otherwise the mail server doesn't know who you are. Something else is wrong with your setup that is adding that @137.52.23.46 Is there a possibility that it's the e mail client? CJ Adam Glass wrote: CJ, Unfortunately we are seeing different. The user was created just as adamtest, without the @ or the domain name. But if I put the username adamtest in for SMTP authentication (using Thunderbird), it does not work. I must type the full address. Then another @ is added, so it looks like this... Received: from unknown (HELO ?137.52.23.46?) (adamt...@awabllc.com@137.52.23.46) In the example above, that is the IP of my local PC, not the mail server. Hopefully I haven't stumped the panel :-) --Adam On Fri, Oct 9, 2009 at 2:39 PM, Maxwell Smart c...@yother.com mailto:c...@yother.com wrote: Adam, No, the user will only have one @ sign since when you create the account you only put in adamtest since you are logged into the domain you are creating a user for. Qmailadmin adds the @example.com http://example.com portion of the address. You do not create a user adamt...@example.com mailto:adamt...@example.com in the Qmailadmin as it will do exactly what you describe. CJ Adam Glass wrote: Okay, that's understandable. But it also means the SMTP username must be adamt...@awabllc.com mailto:adamt...@awabllc.com mailto:adamt...@awabllc.com mailto:adamt...@awabllc.com and so the HELO message has two @ signs. Unfortunately this has now gotten us put on a CBL so I'm under more pressure to figure this out. Thanks again, --Adam On Fri, Oct 9, 2009 at 1:37 PM, Jake Vickers j...@qmailtoaster.com mailto:j...@qmailtoaster.com mailto:j...@qmailtoaster.com mailto:j...@qmailtoaster.com wrote: Adam Glass wrote: Hi all, I am still trying to solve a QMT problem and have reduced it to the simplest case: I created an account on domain awabllc.com http://awabllc.com http://awabllc.com with the username adamtest (using qmailadmin web interface). Then I tried to log in via Squirrelmail. If the username is adamtest it says ERROR: Unknown user or password incorrect. If the username is adamt...@awabllc.com mailto:adamt...@awabllc.com mailto:adamt...@awabllc.com mailto:adamt...@awabllc.com it logs in successfully. Does anyone know why this happens? Because this is a virtual domain setup, and is designed to host hundreds (thousands even) of different domains. Two users on different domains with the same name would invariably happen, so the system requires the full email address as the username. Otherwise how would it know that adam from the example.com http://example.com http://example.com was logging in when there was another user named adam at the other.com http://other.com http://other.com domain? If you are not going to run many domains (read: only one or two) you can configure it to accept short usernames and not full addresses in the Squirrelmail config if I remember right. Look
Re: [qmailtoaster] Problem Updating qmail-toaster (version: 1.03-1.3.20)
Your RPM database is probably stuck. This can occur if force killed rpm was with a force kill (kill -9 / skill -9 / killall -9) and the lock stat information was left behind. This lock information will limit what further processes can do to the rpm databases and needs to be cleared out by hand. The files that hold lock stat information are stored in /var/lib/rpm/ as __db.*. It is generally considered relatively safe to clear by just removing them (rm -f) as they are automatically re-created. Clear them and run your rpm command again. Keep in mind if this has been a situation on your box, any daily update routine you may have that uses RPM was likely not functioning as intended as a result of this and you should run an update on your machine to ensure you packages are current. On CentOS and Fedora machines this can be done with the command yum upgrade (yum -y upgrade to automate the process), and on RedHat ES machine you can use up2date upgrade. - Original Message - From: Alberto Guzzetti alberto.guzze...@digital-instruments.com To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, October 08, 2009 12:40 PM Subject: [qmailtoaster] Problem Updating qmail-toaster (version: 1.03-1.3.20) Hi List, I have some problem installing the latest qmail-toaster pack (1.03.-1.3.20) below the problem, apart from the warning that aren't such a problem. Installing qmail-toaster-1.03-1.3.20.src.rpm warning: user shubes does not exist - using root warning: group shubes does not exist - using root rpmdb: Lock table is out of available locker entries rpmdb: Unknown locker ID: cbb error: db4 error(22) from dbenv-close: Invalid argument error: cannot open Packages index using db3 - Cannot allocate memory (12) error: cannot open Packages database in /var/lib/rpm 1:qmail-toaster warning: user shubes does not exist - using root%) warning: group shubes does not exist - using root ### [100%] error: File not found by glob: /usr/src/redhat/RPMS/x86_64/qmail-pop3d*.rpm any help? -- Cordialmente, --- Alberto Guzzetti - RD Network Administrator alberto.guzze...@digital-instruments.it Digital Instruments S.r.l. Via Parco degli Scout, 13 - 20091 Bresso (MI) Tel: +39 02 66506250 Fax: +39 02 66506103 www.digital-instruments.it --- Le informazioni, i dati ed il contenuto della comunicazione che precede, nonch i suoi eventuali allegati, hanno carattere strettamente confidenziale o comunque non accessibile al pubblico, e sono destinati esclusivamente al destinatario. La loro diffusione, divulgazione, copiatura o utilizzo da parte di soggetti diversi da quest'ultimo proibita ai sensi del D. Lgs. 196/2003 (Testo Unico Privacy). Il contenuto della comunicazione che precede, nonch i suoi eventuali allegati, possono inoltre essere tutelati dal segreto professionale, dal diritto d'autore, da brevetto, da marchio registrato o da altro diritto di privativa. La loro diffusione, divulgazione, copiatura o utilizzo da parte di soggetti diversi dal titolare del diritto quindi proibita anche ai sensi della normativa di legge in materia, nonch perseguibile legalmente. Qualora la comunicazione che precede sia stata da Voi ricevuta per errore, del quale ci scusiamo, Vi preghiamo di comunicarcelo immediatamente e di cancellarla senza diffonderla, riprodurla o utilizzarla in alcun modo. Grazie per la collaborazione. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and delete this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. Diese E-Mail enthält vertrauliche und/ oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese E-Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser E-Mail ist nicht gestattet. Nessun virus nel messaggio in uscita. Controllato da AVG - www.avg.com Versione: 8.5.421 / Database dei virus: 270.14.7/2421 - Data di rilascio: 10/07/09 20:49:00 - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and
Re: [qmailtoaster] Webmin Install
Gentleman please allow port 1 in iptables firewall if its enabled on ur system. U can disable the firewall and then check it from other system if its working on not. - Original Message - From: Scott Collingwood scott.collingw...@it-medic.ca To: qmailtoaster-list@qmailtoaster.com Sent: Friday, October 09, 2009 1:04 AM Subject: RE: [qmailtoaster] Webmin Install Thanks for you reply SELinux is disabled Scott -Original Message- From: David Milholen [mailto:dmilho...@wletc.com] Sent: October-08-09 1:25 PM To: qmailtoaster-list@qmailtoaster.com Subject: Re: [qmailtoaster] Webmin Install sound like a SElinux issue. If this is turned on it may not like port 1 just for temp turn off the firewall and then check also disable SElinux then re enable one at a time to see which is causing issue. Scott Collingwood wrote: No errors other the page not found from the workstation. Regards Scott *From:* Vidyadhar [mailto:vidyadha...@gmail.com] *Sent:* October-08-09 12:13 PM *To:* qmailtoaster-list@qmailtoaster.com *Subject:* Re: [qmailtoaster] Webmin Install Any error are you getting while accessing http://myserver:1 ? Regards, Vidyadhar *From: *Scott Collingwood scott.collingw...@it-medic.ca *Date: *Thu, 8 Oct 2009 11:39:54 -0600 *To: *qmailtoaster-list@qmailtoaster.com *Subject: *[qmailtoaster] Webmin Install I am new to the qmail toaster. have installed centos 5.0 x64 from the iso.The mail server is running great . I ran the webmin install from the command line instructions and it installed without error. However I am not able to access the https://myserver:1 link Scott Collingwood __ Information from ESET NOD32 Antivirus, version of virus signature database 4491 (20091008)__ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4491 (20091008) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4491 (20091008) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4491 (20091008) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4491 (20091008) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] QMT on VMWare ESXi
Dear Michael, Have u install vmware-tools in the centos qmt guest ??? And in ur ESXi server have u setup ntp server??? if both are set then ur maching should sync time with ur ESXi host time. I am using more than 10 ESX and ESXi server in my environment with amost every OS guest machines and all are having correct time. Most importantly ur ESX host must have a working NTP server configured to keep host and guest to correct time. If u can check and tell more bout ur ESX and guest configs will help in sorting out the problem. Sometimes ISO images are configured with some scripts which are croned and run regularly to set time automatically. please check if ur guest has any such script installed. Secondly make sure that you have rights to change settings on ur guest os. try # ln -sf /usr/share/zoneinfo/urzone(e.g. US)/Cental /etc/localtime Regards, Anil Aliyan - Original Message - From: Michael Colvin mcol...@norcalisp.com To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, October 07, 2009 10:08 PM Subject: [qmailtoaster] QMT on VMWare ESXi Is anyone running the QMT iso on a VMWare VM? I had one set up just to play with, but noticed the clock keeps horrible time. I was able to adjust the ticks to keep it more accurate, along with an hourly sync, but this seems ridiculous. From what I've found, it's an issue with CentOS in a VM, but I've got CentOS running in a VM for a PBX, and it seems fine. This is the only time I've ever had an issue with the system/hardware clock drifting dramatically in a VM. There are also other VM's on this physical server that keep sync fine... Michael J. Colvin NorCal Internet Services www.norcalisp.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] QMT on VMWare ESXi
Make sure kenel-hearders rpm is installed before you install vmware-tools. - Original Message - From: Michael Colvin mcol...@norcalisp.com To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, October 07, 2009 10:08 PM Subject: [qmailtoaster] QMT on VMWare ESXi Is anyone running the QMT iso on a VMWare VM? I had one set up just to play with, but noticed the clock keeps horrible time. I was able to adjust the ticks to keep it more accurate, along with an hourly sync, but this seems ridiculous. From what I've found, it's an issue with CentOS in a VM, but I've got CentOS running in a VM for a PBX, and it seems fine. This is the only time I've ever had an issue with the system/hardware clock drifting dramatically in a VM. There are also other VM's on this physical server that keep sync fine... Michael J. Colvin NorCal Internet Services www.norcalisp.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Error while sending mail from outlook
Dear Amit, U can ask ur remote clients to use submission port 587 instead of smtp port 25 This way you`ll not have to change anything on server side. Regards, Anil Aliyan - Original Message - From: a...@ikf.co.in To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, October 03, 2009 5:02 PM Subject: [qmailtoaster] Error while sending mail from outlook Hi Everyone, From today onwards I started getting error in outlook while sending mail from one of my remote location office..Error image is attached with the mail..I had white listed the static ip of remote location in spamdyke..Also I had make and entry for particular static ip in tcp.smtp file to skip the RBL check..But still I'm getting same error. Regards, Amit -- - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] No mails in Bcc should be delivered
Hi Amit, I am not sure but after reading your posts i was looking for some solution for the problem u are facing. I dont know much but i have found a url about qmail-inject. It says about some arguments to be passed to qmail-inject to send the mails. with these arguments u can force ur qmail server to send mails the way u want. I am just assuming that it may help you, so just read the url given below for those options. If i`ll find anything else more specific i`ll let u know. And may be Eric can explain in more detail about those options. http://www.qmail.org/qmail-manual-html/man8/qmail-inject.html qmail-inject(8) Maintenance Procedures qmail-inject(8) iDelete any incoming Message-ID field. Normally, if Message-ID is supplied, it overrides the usual Message-ID field created by qmail-inject. rUse a per-recipient VERP. qmail-inject will append each recipient address to the envelope sender of the copy going to that recipient. mUse a per-message VERP. qmail-inject will append the current date and process ID to the envelope sender. OPTIONS -aSend the message to all addresses given as recip argu- ments; do not use header recipient addresses. -hSend the message to all header recipient addresses. For non-forwarded messages, this means the addresses listed under To, Cc, Bcc, Apparently-To. For forwarded messages, this means the addresses listed under Resent-To, Resent-Cc, Resent-Bcc. Do not use any recip arguments. -A(Default.) Send the message to all addresses given as recip arguments. If no recip arguments are supplied, send the message to all header recipient addresses. -HSend the message to all header recipient addresses, and to all addresses given as recip arguments. -fsender Pass sender to qmail-queue as the envelope sender address. This overrides Return-Path and all environ- ment variables. -N(Default.) Feed the resulting message to qmail-queue. -nPrint the message rather than feeding it to qmail- queue. Regards, Anil Aliyan - Original Message - From: amit IKF To: qmailtoaster-list@qmailtoaster.com Sent: Friday, September 18, 2009 10:27 AM Subject: Re: [qmailtoaster] No mails in Bcc should be delivered Hi Eric, If Bcc is there then I should be able to track to whose id the mail was sent,so I can provide the log to the sir. Regards, Amit On Fri, Sep 18, 2009 at 2:35 AM, Eric Shubert e...@shubes.net wrote: I think you would need to do some custom coding to accomplish this. Of course, it would only apply to submissions. After an email is submitted there is no bcc to speak of any more. What would you want to have happen if someone were to use bcc? amit IKF wrote: Hi Eric, Actually problem is that my sir wants to tap all the incoming and outgoing mails from that server. For this I had modified tap file. But problem is I'm unable to tap Bcc mail. Actually the more problem is I'm able to get mail on email id where I had moved a copy of both incoming and outgoing emails, but i'm unable to get detail to which id the mail sent. So my sir asked me to completely stop Bcc mail transaction from the server. Any help would be appreciated for the same. Regards, Amit On Thu, Sep 17, 2009 at 8:13 PM, Eric Shubert e...@shubes.net mailto:e...@shubes.net wrote: I believe that would require some custom coding. What is the problem you're trying to solve? Perhaps there is a better solution. amit IKF wrote: Hi Andreas, Thats ok for me. Actually its for my another server and I don't my any users on that server to send or recieve the Bcc mails. Regards, Amit On Thu, Sep 17, 2009 at 1:21 PM, Andreas Galatis a...@unet.de mailto:a...@unet.de mailto:a...@unet.de mailto:a...@unet.de wrote: Hi Amit, Do you really want that? You would not be able to receive mails from any mailinglist. Andreas Am Thursday 17 September 2009 09:14:56 schrieb amit IKF: Hi Everyone, Is there any way that non of the Bcc mails get delivered to anyone from my server? This should be apply for both incoming and outgoing Bcc mails. Thanks and regards, Amit ---Eric 'shubes' -- -Eric 'shubes
Re: [qmailtoaster] No mails in Bcc should be delivered
Hi Amit/Eric Read this. May be u can find a solution this way. http://www.nabble.com/how-to-block-BCC-recipients-or-BCC-mails-using-qmail-td14040662.html Regards, Anil Aliyan - Original Message - From: amit IKF To: qmailtoaster-list@qmailtoaster.com Sent: Friday, September 18, 2009 10:52 PM Subject: Re: [qmailtoaster] No mails in Bcc should be delivered Hi Anil, Eric is correct, qmail-inject wont work in my case. Basically I want to track Bcc email id on the server or do not deliver Bcc emails at all. Is there any way from the log file of SMTP from where we can find out the Bcc mails delivery? Regards, Amit On Fri, Sep 18, 2009 at 7:39 PM, Eric Shubert e...@shubes.net wrote: Anil Aliyan wrote: Hi Amit, I am not sure but after reading your posts i was looking for some solution for the problem u are facing. I dont know much but i have found a url about qmail-inject. It says about some arguments to be passed to qmail-inject to send the mails. with these arguments u can force ur qmail server to send mails the way u want. I am just assuming that it may help you, so just read the url given below for those options. If i`ll find anything else more specific i`ll let u know. And may be Eric can explain in more detail about those options. http://www.qmail.org/qmail-manual-html/man8/qmail-inject.html qmail-inject(8) Maintenance Procedures qmail-inject(8) *i*Delete any incoming *Message-ID* field. Normally, if *Message-ID* is supplied, it overrides the usual *Message-ID* field created by *qmail-inject*. *r*Use a per-recipient VERP. *qmail-inject* will append each recipient address to the envelope sender of the copy going to that recipient. *m*Use a per-message VERP. *qmail-inject* will append the current date and process ID to the envelope sender. *OPTIONS* *-a*Send the message to all addresses http://www.qmail.org/qmail-manual-html/man5/addresses.html given as /recip/ argu- ments; do not use header recipient addresses. *-h*Send the message to all header recipient addresses. For non-forwarded messages, this means the addresses listed under *To*, *Cc*, *Bcc*, *Apparently-To*. For forwarded messages, this means the addresses listed under *Resent-To*, *Resent-Cc*, *Resent-Bcc*. Do not use any /recip/ arguments. *-A*(Default.) Send the message to all addresses given as /recip/ arguments. If no /recip/ arguments are supplied, send the message to all header recipient addresses. *-H*Send the message to all header recipient addresses, and to all addresses given as /recip/ arguments. *-f*/sender/ Pass /sender/ to *qmail-queue* as the envelope sender address. This overrides *Return-Path* and all environ- ment variables. *-N*(Default.) Feed the resulting message to *qmail-queue*. *-n*Print the message rather than feeding it to *qmail-* *queue*. Regards, Anil Aliyan - Original Message - *From:* amit IKF mailto:a...@ikf.co.in *To:* qmailtoaster-list@qmailtoaster.com mailto:qmailtoaster-list@qmailtoaster.com *Sent:* Friday, September 18, 2009 10:27 AM *Subject:* Re: [qmailtoaster] No mails in Bcc should be delivered Hi Eric, If Bcc is there then I should be able to track to whose id the mail was sent,so I can provide the log to the sir. Regards, Amit On Fri, Sep 18, 2009 at 2:35 AM, Eric Shubert e...@shubes.net mailto:e...@shubes.net wrote: I think you would need to do some custom coding to accomplish this. Of course, it would only apply to submissions. After an email is submitted there is no bcc to speak of any more. What would you want to have happen if someone were to use bcc? amit IKF wrote: Hi Eric, Actually problem is that my sir wants to tap all the incoming and outgoing mails from that server. For this I had modified tap file. But problem is I'm unable to tap Bcc mail. Actually the more problem is I'm able to get mail on email id where I had moved a copy of both incoming and outgoing emails, but i'm unable to get detail to which id the mail sent. So my sir asked me to completely stop Bcc mail transaction from the server. Any help would be appreciated
[qmailtoaster] Qmail-toaster rebuild with chkuser
Dear Jakes, I followed the instructions given on the http://wiki.qmailtoaster.org/index.php/Chkuser page and did a rebuild of qmail-toaster and installed it. Rebuild and Installation process went smooth but after installation when i did qmailctl start it showed an error as given below. I tried second time to start the server and this time it started but still unable to send or recieve mails. What went wrong? Restarting qmail: * Stopping qmail-smtpd. svc: warning: unable to control /var/qmail/supervise/smtp: supervise not running * Sending qmail-send SIGTERM and restarting. svc: warning: unable to control /var/qmail/supervise/send: supervise not running * Restarting qmail-smtpd. svc: warning: unable to control /var/qmail/supervise/smtp: supervise not running [r...@mail service]# Regards, Anil Aliyan - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Qmail-toaster rebuild with chkuser (Resolved)
Sorry for inconvenience... i made a mistake in editing the checkuser_settings.h file which casued the problem. Same has been resloved now. Regards, Anil Aliyan - Original Message - From: Anil Aliyan acali...@gnvfc.net To: qmailtoaster-list@qmailtoaster.com Sent: Monday, May 18, 2009 8:05 PM Subject: [qmailtoaster] Qmail-toaster rebuild with chkuser Dear Jakes, I followed the instructions given on the http://wiki.qmailtoaster.org/index.php/Chkuser page and did a rebuild of qmail-toaster and installed it. Rebuild and Installation process went smooth but after installation when i did qmailctl start it showed an error as given below. I tried second time to start the server and this time it started but still unable to send or recieve mails. What went wrong? Restarting qmail: * Stopping qmail-smtpd. svc: warning: unable to control /var/qmail/supervise/smtp: supervise not running * Sending qmail-send SIGTERM and restarting. svc: warning: unable to control /var/qmail/supervise/send: supervise not running * Restarting qmail-smtpd. svc: warning: unable to control /var/qmail/supervise/smtp: supervise not running [r...@mail service]# Regards, Anil Aliyan - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Qmail Queue Problem after Restore from Backup
Dear Jakes, I have installed latest Qmailtoaster on Centos 5.3 and restored backup from my previous mail server which was running on Fedora 5. But there are a few problem after i restored from the backup. 1. I am getting errors in the /var/log/qmail/send/current 2009-05-17 07:45:08.019361500 warning: unable to open todo/9540194 2009-05-17 07:45:08.020361500 warning: unable to open todo/522 2009-05-17 07:45:08.020361500 warning: unable to open todo/5244495 2009-05-17 07:45:08.020361500 warning: unable to open todo/5244489 2009-05-17 07:45:08.021360500 warning: unable to open todo/9540192 2009-05-17 07:45:08.021360500 warning: unable to open todo/5243547 2009-05-17 07:45:08.021360500 warning: unable to open todo/5243666 2009-05-17 07:45:08.022360500 warning: unable to open todo/5244451 I tried repairing the queue using qmqtool and queue_repair.py but problem remains the same. 2. I cannot modify user details in vqadmin and qmailadmin, such as password and quota. How can resolve these issues. Please help this my production server. Regards, Anil Aliyan
[qmailtoaster] I HATE READ RECIEPTS ------ Re: [qmailtoaster] Deleted email accounts.
- Original Message - From: Ernie Regaspi ernie.rega...@mgenesis.com To: qmailtoaster-list@qmailtoaster.com Sent: Friday, May 15, 2009 2:03 AM Subject: [qmailtoaster] Deleted email accounts. Hi, Is there a logs in qmail where I can trace deleted email accounts? Thanks -- Ernie P. Regaspi System Engineer Technical Support Center MICROGENESIS BUSINESS SYSTEMS 2nd Floor Alegria Bldg., Annex 2229 Chino Roces Ave., Makati City Tel. : +632.8930584 Ext. 204 Fax : +632.892.6710 Cel : +632.9228572181 Email : erega...@mgenesis.com URL : www.mgenesis.com This communication is intended solely for the individual to whom it is addressed. If you are not the intended recipient of this communication, you may not disseminate, distribute, copy or otherwise disclose or use the contents of this communication without the written authority of Microgenesis Business Systems. If you have received this communication in error, please delete and destroy all copies and kindly notify the sender by return email or telephone immediately. Thank you - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] SpamDyke Issue
Hiii, But i think thats not the only solution. What if i am an ISP??? Should i tell all my customers not to use port 25??? I have 5 virtual domains and nearly 500 employees and i cannot guide daily every that please do not use port 25 instead use 587. most of the users just know how to send recieve and read write emails they dont understand how to change setting etc. So practically sometimes it becomes very difficult to teach them on the phone. Regards, Anil Aliyan - Original Message - From: Phil Leinhauser To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 5:37 PM Subject: Re: [qmailtoaster] SpamDyke Issue Are your users using port 587 and SMTP auth for submitting their mail? I believe all the checks are bypassed when mail comes in that port. 587 has been gaining favor in the past several years as the standard submission port for clients instead of 25. Phil Dear Jakes, This is regarding SpamDyke. I have installed SpamDyke 3-4 days back only. Before that i was not using it. But since the installation most of my roaming users and remote offices who are using different isp broadband connection are unable to send mails as spamdyke deny to accept mails from them due to no RDNS. It is understandable if spamdyke refuses connections from mail servers who does'nt point to any RDNS but I just dont understand why does it refuses my authentic/genuine local users who are using my mailserver. Why does spamdyke checks RDNS for clients who are using other ISPs internet connections??? Is there anyway to tell spamdyke not to check RDNS for client ip addresses. Some of my roaming users use Data Cards and everytime they connect internet using data card a different ip address is assigned to the laptop so i cannot keep track of each and every address and allow them in the spamdyke whiletlists. Or i should not use spamdyke at all. Regards, Anil Aliyan - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
[qmailtoaster] QmailToaster with TrendMicro IMSS
Hi, Has anyone setup and using QmailToaster with TrendMicro IMSS. If yes please guide me how can I install and configure the same. Regards, Anil Aliyan
Re: [qmailtoaster] SpamDyke Issue
How can i remove spamdyke safely. Please guide. Regards, Anil Aliyan - Original Message - From: Phil Leinhauser To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 7:14 PM Subject: Re: [qmailtoaster] SpamDyke Issue Sure, you have a couple of choices, - remove spamdyke - add RDNS exclusions for all the IPs your clients use Because 587 hasn't come to full acceptance YET, client applications like Outlook lack the wizard settings to flip this easily. There are several sites that show how to make these changes, in fact, I made one myself for my customers. I have over 50 domains and an average of 30 users per domain. Yes, it's a painful pill to have to swallow but in a lot of cases you won't have any choice. It's better to get it over with now. I have also run into a few broadband providers that block port 25 all together (Comcast RCN)! They only allow you to use 25 to their server or you use 587. This is a huge boost for spam prevention because it keeps the low lifes of the world from putting up a spam server. Hiii, But i think thats not the only solution. What if i am an ISP??? Should i tell all my customers not to use port 25??? I have 5 virtual domains and nearly 500 employees and i cannot guide daily every that please do not use port 25 instead use 587. most of the users just know how to send recieve and read write emails they dont understand how to change setting etc. So practically sometimes it becomes very difficult to teach them on the phone. Regards, Anil Aliyan - Original Message - From: Phil Leinhauser To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 5:37 PM Subject: Re: [qmailtoaster] SpamDyke Issue Are your users using port 587 and SMTP auth for submitting their mail? I believe all the checks are bypassed when mail comes in that port. 587 has been gaining favor in the past several years as the standard submission port for clients instead of 25. Phil Dear Jakes, This is regarding SpamDyke. I have installed SpamDyke 3-4 days back only. Before that i was not using it. But since the installation most of my roaming users and remote offices who are using different isp broadband connection are unable to send mails as spamdyke deny to accept mails from them due to no RDNS. It is understandable if spamdyke refuses connections from mail servers who does'nt point to any RDNS but I just dont understand why does it refuses my authentic/genuine local users who are using my mailserver. Why does spamdyke checks RDNS for clients who are using other ISPs internet connections??? Is there anyway to tell spamdyke not to check RDNS for client ip addresses. Some of my roaming users use Data Cards and everytime they connect internet using data card a different ip address is assigned to the laptop so i cannot keep track of each and every address and allow them in the spamdyke whiletlists. Or i should not use spamdyke at all. Regards, Anil Aliyan - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] SpamDyke Issue
yes i installed it using the script only. My users are using My Server Require Authentication in their email clients. I have checked this using my laptop with datacard but mail are not getting delivered. They keep laying in the queue and after 4 hours recieved them with following error: -Original Message- From: Mail Delivery Subsystem [mailto:mailer-dae...@gnfc.in] Sent: Tuesday, May 05, 2009 10:49 PM To: a...@gnfc.in Subject: Warning: could not send message for past 4 hours ** ** THIS IS A WARNING MESSAGE ONLY ** ** YOU DO NOT NEED TO RESEND YOUR MESSAGE ** ** The original message was received at Tue, 5 May 2009 18:05:49 +0530 from localhost [127.0.0.1] - Transcript of session follows - .. while talking to mail.gnvfc.net.: DATA 421 Refused. You have no reverse DNS entry. QUIT 421 Refused. You have no reverse DNS entry. 421 Refused. You have no reverse DNS entry. 421 Refused. You have no reverse DNS entry. 221 Refused. You have no reverse DNS entry. a...@gnvfc.net... Deferred: 421 Refused. You have no reverse DNS entry. x...@gnvfc.net... Deferred: 421 Refused. You have no reverse DNS entry. k...@gnvfc.net... Deferred: 421 Refused. You have no reverse DNS entry. Warning: message still undelivered after 4 hours Will keep trying until message is 1 day old Regards, Anil Aliyan - Original Message - From: Eric Shubert e...@shubes.net To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 10:02 PM Subject: Re: [qmailtoaster] SpamDyke Issue You can find instructions on disabling spamdyke on the wiki page. I don't think you want to do that though. Your roaming/remote users should not be blocked by spamdyke if they authenticate successfully. Spamdyke bypasses all filters for authenticated connections. I'd check into why authentication is not apparently working. Did you use qtp-install-spamdyke to install spamdyke? Which version are you running? Anil Aliyan wrote: How can i remove spamdyke safely. Please guide. Regards, Anil Aliyan - Original Message - *From:* Phil Leinhauser mailto:p...@teqknow.com *To:* qmailtoaster-list@qmailtoaster.com mailto:qmailtoaster-list@qmailtoaster.com *Sent:* Wednesday, May 06, 2009 7:14 PM *Subject:* Re: [qmailtoaster] SpamDyke Issue Sure, you have a couple of choices, - remove spamdyke - add RDNS exclusions for all the IPs your clients use Because 587 hasn't come to full acceptance YET, client applications like Outlook lack the wizard settings to flip this easily. There are several sites that show how to make these changes, in fact, I made one myself for my customers. I have over 50 domains and an average of 30 users per domain. Yes, it's a painful pill to have to swallow but in a lot of cases you won't have any choice. It's better to get it over with now. I have also run into a few broadband providers that block port 25 all together (Comcast RCN)! They only allow you to use 25 to their server or you use 587. This is a huge boost for spam prevention because it keeps the low lifes of the world from putting up a spam server. Hiii, But i think thats not the only solution. What if i am an ISP??? Should i tell all my customers not to use port 25??? I have 5 virtual domains and nearly 500 employees and i cannot guide daily every that please do not use port 25 instead use 587. most of the users just know how to send recieve and read write emails they dont understand how to change setting etc. So practically sometimes it becomes very difficult to teach them on the phone. Regards, Anil Aliyan - Original Message - From: Phil Leinhauser To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 5:37 PM Subject: Re: [qmailtoaster] SpamDyke Issue Are your users using port 587 and SMTP auth for submitting their mail? I believe all the checks are bypassed when mail comes in that port. 587 has been gaining favor in the past several years as the standard submission port for clients instead of 25. Phil Dear Jakes, This is regarding SpamDyke. I have installed SpamDyke 3-4 days back only. Before that i was not using it. But since the installation most of my roaming users and remote offices who are using different isp broadband connection are unable to send mails as spamdyke deny to accept mails from them due to no RDNS. It is understandable if spamdyke refuses connections from mail servers who does'nt point to any RDNS but I just dont understand why does it refuses my authentic
Re: [qmailtoaster] SpamDyke Issue
Very nice u have showed me a ray of hope. I'll do it and let u know. Thanks - Original Message - From: Kent Busbee kbus...@northlakechristian.org To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 10:36 PM Subject: Re: [qmailtoaster] SpamDyke Issue A quicker more easier option maybe to disable the RDNS in spamdyke: edit /etc/spamdyke/spamdyke.conf change reject-empty-rdns to reject-empty-rdns=0 See http://spamdyke.org/documentation/README.html#RDNS I am not sure if you have to restart spamdyke, qmail, or reboot (or not). See response below; Anil Aliyan wrote: How can i remove spamdyke safely. Please guide. Regards, Anil Aliyan - Original Message - From: Phil Leinhauser To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 7:14 PM Subject: Re: [qmailtoaster] SpamDyke Issue Sure, you have a couple of choices, - remove spamdyke - add RDNS exclusions for all the IPs your clients use Because 587 hasn't come to full acceptance YET, client applications like Outlook lack the wizard settings to flip this easily. There are several sites that show how to make these changes, in fact, I made one myself for my customers. I have over 50 domains and an average of 30 users per domain. Yes, it's a painful pill to have to swallow but in a lot of cases you won't have any choice. It's better to get it over with now. I have also run into a few broadband providers that block port 25 all together (Comcast RCN)! They only allow you to use 25 to their server or you use 587. This is a huge boost for spam prevention because it keeps the low lifes of the world from putting up a spam server. Hiii, But i think thats not the only solution. What if i am an ISP??? Should i tell all my customers not to use port 25??? I have 5 virtual domains and nearly 500 employees and i cannot guide daily every that please do not use port 25 instead use 587. most of the users just know how to send recieve and read write emails they dont understand how to change setting etc. So practically sometimes it becomes very difficult to teach them on the phone. Regards, Anil Aliyan - Original Message - From: Phil Leinhauser To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 5:37 PM Subject: Re: [qmailtoaster] SpamDyke Issue Are your users using port 587 and SMTP auth for submitting their mail? I believe all the checks are bypassed when mail comes in that port. 587 has been gaining favor in the past several years as the standard submission port for clients instead of 25. Phil Dear Jakes, This is regarding SpamDyke. I have installed SpamDyke 3-4 days back only. Before that i was not using it. But since the installation most of my roaming users and remote offices who are using different isp broadband connection are unable to send mails as spamdyke deny to accept mails from them due to no RDNS. It is understandable if spamdyke refuses connections from mail servers who does'nt point to any RDNS but I just dont understand why does it refuses my authentic/genuine local users who are using my mailserver. Why does spamdyke checks RDNS for clients who are using other ISPs internet connections??? Is there anyway to tell spamdyke not to check RDNS for client ip addresses. Some of my roaming users use Data Cards and everytime they connect internet using data card a different ip address is assigned to the laptop so i cannot keep track of each and every address and allow them in the spamdyke whiletlists. Or i should not use spamdyke at all. Regards, Anil Aliyan - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com Kent Busbee Director of Technology Northlake Christian School - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] SpamDyke Issue
i'll arrange for sending logs to you jakes. - Original Message - From: Jake Vickers j...@qmailtoaster.com To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, May 06, 2009 11:33 PM Subject: Re: [qmailtoaster] SpamDyke Issue Anil Aliyan wrote: Dear Jakes i also have checked it but both the server are managed by myself and i have reverse DNS for both the servers. u can check urself my mailserver for RDNS. 210.212.133.110 points to mail.gnfc.in and 203.77.193.20 points at mail.gnvfc.net mail.gnfc.in has only TrendMicro IMSS installed on it and not a qmailtoaster installation its a custom installation done by someone else before i joined this company. mail.gnvfc.net is complete installed by myself and is a qmailtoaster installation. the transcript i sent u in last mail says that an email was sent by mail.gnfc.in to a user on mail.gnvfc.net. mail.gnfc.in is sending it to mail.gnvfc.net but is denied/refused and the mail kept laying in the queue of mail.gnfc.in. hence mail.gnvfc.net (qmailtoaster) is refusing the clients ip address in the mail header and not the ip address of the mail server mail.gnfc.in. which is not included in the transcript i have sent u earlier. So on the QMT machine, what does it show when you lookup the rDNS of the sending box? Try restarting bind as well and see if that effects the cache. Also post relevant logs from the QMT machine showing the message and it's rejection. - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] SpamDyke Issue
Hi Jakes Here u can see in the extracts of the log that its denying the origin ip address not the mail server ip address 210.212.133.110 @40004a00cf3b25b4b3cc DENIED_RDNS_MISSING from: size=5810 to: pmbh...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: (unknown) @40004a00cf3c01b5763c tcpserver: end 7014 status 0 @40004a00cf3c01b585dc tcpserver: status: 21/30 @40004a00cf3c09ec61e4 tcpserver: status: 22/30 @40004a00cf3c09eebf5c tcpserver: pid 7017 from 220.225.151.180 @40004a00cf3c09efc8fc tcpserver: ok 7017 mail.gnvfc.net:203.77.193.20:25 :220.225.151.180::42866 @40004a00cf3d13d37e2c DENIED_RDNS_MISSING from: a...@gnfc.in to: gsar...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: (unknown) @40004a00cf3d2b522814 tcpserver: end 7017 status 0 @40004a00cf3d2b523b9c tcpserver: status: 21/30 @40004a00cf3d330bd154 tcpserver: status: 22/30 @40004a00cf3d330e3e6c tcpserver: pid 7019 from 220.225.151.180 @40004a00cf3d330f4bf4 tcpserver: ok 7019 mail.gnvfc.net:203.77.193.20:25 :220.225.151.180::42867 @40004a00cf3f03bc2b4c DENIED_RDNS_MISSING from: a...@gnfc.in to: sase...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: (unknown) @40004a00cf3f1c2c844c tcpserver: end 7019 status 0 @40004a00cf3f1c2c93ec tcpserver: status: 21/30 @40004a00cf3f23aa97a4 tcpserver: status: 22/30 @40004a00cf3f23ad00d4 tcpserver: pid 7021 from 220.225.151.180 @40004a00cf3f23ae3184 tcpserver: ok 7021 mail.gnvfc.net:203.77.193.20:25 :220.225.151.180::42868 @40004a00cf402daff21c DENIED_RDNS_MISSING from: a...@gnfc.in to: sase...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: (unknown) @40004a00cf41099646ec tcpserver: end 7021 status 0 @40004a00cf4109969124 tcpserver: status: 21/30 @40004a00cf41112eb45c tcpserver: status: 22/30 @40004a00cf411131255c tcpserver: pid 7023 from 220.225.151.180 @40004a00cf4111322b14 tcpserver: ok 7023 mail.gnvfc.net:203.77.193.20:25 :220.225.151.180::42869 @40004a00cf411df1f26c tcpserver: status: 23/30 @40004a00cf411df46b3c tcpserver: pid 7025 from 88.243.103.52 @40004a00cf411df549e4 tcpserver: ok 7025 mail.gnvfc.net:203.77.193.20:25 :88.243.103.52::2507 @40004a00cf421afca73c DENIED_RDNS_MISSING from: a...@gnfc.in to: aktotl...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: (unknown) @40004a00cf421afdd404 DENIED_RDNS_MISSING from: a...@gnfc.in to: sase...@gnvfc.net origin_ip: 220.225.151.180 origin_rdns: (unknown) auth: (unknown) @40004a00cf423277fd94 tcpserver: end 7023 status 0 @40004a00cf423278111c tcpserver: status: 22/30 - Original Message - From: Jake Vickers j...@qmailtoaster.com To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, May 07, 2009 1:08 AM Subject: Re: [qmailtoaster] SpamDyke Issue Anil Aliyan wrote: i'll arrange for sending logs to you jakes. You can just post the rejection parts. And post them to the list. I'm leaving for the day, so I may or may not be back on list this evening. Plus on the list you will get others looking at things that I may overlook. - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] SpamDyke Issue
We can send mails to that server they cannot send us @40004a00fe3f1c9694a4 CHKUSER accepted rcpt: from skkham...@gnfc.in:: remote mail.gnfc.in:unknown:210.212.133.110 rcpt rajivs...@gnvfc.net : found existing recipient @40004a00fe3f1c975024 ALLOWED from: skkham...@gnfc.in to: rajivs...@gnvfc.net origin_ip: 210.212.133.110 origin_rdns: (unknown) auth: (unknown) @40004a00fe3f1c99115c CHKUSER accepted rcpt: from skkham...@gnfc.in:: remote mail.gnfc.in:unknown:210.212.133.110 rcpt rgseque...@gnvfc.net : found existing recipient @40004a00fe3f1ca4dce4 ALLOWED from: skkham...@gnfc.in to: rgseque...@gnvfc.net origin_ip: 210.212.133.110 origin_rdns: (unknown) auth: (unknown) - Original Message - From: Jake Vickers j...@qmailtoaster.com To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, May 07, 2009 1:08 AM Subject: Re: [qmailtoaster] SpamDyke Issue Anil Aliyan wrote: i'll arrange for sending logs to you jakes. You can just post the rejection parts. And post them to the list. I'm leaving for the day, so I may or may not be back on list this evening. Plus on the list you will get others looking at things that I may overlook. - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
[qmailtoaster] Clamav 0.95.1 update issue
Hi All, I updated clamav-toaster 3 days back to new version clamav-toaster-0.95.1-1.3.27 and today all of sudden my mail server stopped responding. I logged in and couldnt find any thing abnormal untill i restarted the qmail services and it prompted that there is not enough space to started th services. I looked everywhere but couldn't find anything space consuming in any folder untill i entered the /tmp folder which was full of clamav tmp folder which were created due to freshclam. Why these folder are not getting deleted once the update is completed?? Why is it downloading entire database again (main.cvd)? I there something wrong with this new version. For now i have reverted back to the previous version and its working fine. Please guide me. Regards, Anil Aliyan - Original Message - From: Alberto Guzzetti To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, April 21, 2009 12:57 PM Subject: [qmailtoaster] Clamav 0.95.1 issue Greetings List, I've got the following error trying to install the last clamav update on CentOS 5.2 Installing clamav-toaster-0.95.1-1.3.27.src.rpm rpmdb: Lock table is out of available locker entries rpmdb: Unknown locker ID: 8bd error: db4 error(22) from dbenv-close: Invalid argument error: cannot open Packages index using db3 - Cannot allocate memory (12) error: cannot open Packages database in /var/lib/rpm Any idea? It's the first time I have an error like that. - Managed Qmailtoaster servers are now available Visit http://qmailtoaster.com/QMTManaged.html to order yours today! Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: testing-unsubscr...@qmailtoaster.com For additional commands, e-mail: testing-h...@qmailtoaster.com
Re: [qmailtoaster] Clamav 0.95.1 update issue
This is what my freshclam log has: freshclam daemon 0.95.1 (OS: linux-gnu, ARCH: i386, CPU: i386) ClamAV update process started at Sat Apr 25 12:21:00 2009 main.cvd is up to date (version: 50, sigs: 500667, f-level: 38, builder: sven) WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 193.1.193.64) WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net Trying host db.in.clamav.net (130.59.10.36)... WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 130.59.10.36) WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net WARNING: Incremental update failed, trying to download daily.cvd Downloading daily.cvd [100%] daily.cvd updated (version: 9288, sigs: 45614, f-level: 42, builder: guitar) Database updated (546281 signatures) from db.in.clamav.net (IP: 193.1.193.64) Regards, Anil Aliyan - Original Message - From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, April 25, 2009 4:23 PM Subject: Re: [qmailtoaster] Clamav 0.95.1 update issue Anil Aliyan wrote: Hi All, I updated clamav-toaster 3 days back to new version clamav-toaster-0.95.1-1.3.27 and today all of sudden my mail server stopped responding. I logged in and couldnt find any thing abnormal untill i restarted the qmail services and it prompted that there is not enough space to started th services. I looked everywhere but couldn't find anything space consuming in any folder untill i entered the /tmp folder which was full of clamav tmp folder which were created due to freshclam. Why these folder are not getting deleted once the update is completed?? Why is it downloading entire database again (main.cvd)? I there something wrong with this new version. For now i have reverted back to the previous version and its working fine. Please guide me. I am not experiencing that issue here. Look in your /var/log/clamav/freshclam.log file for any clues as to why your system is behaving differently.
Re: [qmailtoaster] Clamav 0.95.1 update issue
Dear Jakes, I have installed the lastest rpm 3 days before only and before that i was using clamav-toaster-0.94.2-1.3.24 and everything was just fine till that day. I came to know bout this problem today only when my server stopped responding and when i check it found that there was not space left on the hard drive. Earlier my mail server was using 39 GB and today whole 260 GB HDD was full just because of the clamav update file download files accumulated in the /tmp folder. There were more then 1000 folders in tmp dir and all of them were having around 60 mb of main.cvd and daily.cvd files. After deleting all those tmp folder everything started working asusual. I`ll reinstall it today and let you know. Is it fine to install the new updated version using fdr50-install-script.sh script?? Whenever new updates are availabe i usually un-install the older versions maually and then install newer version using script mentioned above. Is it correct to install this way?? Regards, Anil Aliyan - Original Message - From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Saturday, April 25, 2009 5:02 PM Subject: Re: [qmailtoaster] Clamav 0.95.1 update issue Anil Aliyan wrote: This is what my freshclam log has: freshclam daemon 0.95.1 (OS: linux-gnu, ARCH: i386, CPU: i386) ClamAV update process started at Sat Apr 25 12:21:00 2009 main.cvd is up to date (version: 50, sigs: 500667, f-level: 38, builder: sven) WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 193.1.193.64) WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net Trying host db.in.clamav.net (130.59.10.36)... WARNING: getfile: daily-9214.cdiff not found on remote server (IP: 130.59.10.36) WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net WARNING: getpatch: Can't download daily-9214.cdiff from db.in.clamav.net WARNING: Incremental update failed, trying to download daily.cvd Downloading daily.cvd [100%] daily.cvd updated (version: 9288, sigs: 45614, f-level: 42, builder: guitar) Database updated (546281 signatures) from db.in.clamav.net (IP: 193.1.193.64) That is normal in the top of the log. You should have a LOT more in your logs. If that's all you show, then your freshclam cannot contact any of the update servers to download the .cdiff files to update main.cvd and is downloading the whole thing again. Check your firewall rules. Also check for the existence of the daily.cvd file. Did you make any changes to freshclam's config file? You may also try reinstalling the new version, since you're the only one that has reported any problems out of 323 downloads. Maybe someone else can chime in a few tips - otherwise I'd suggest you go ask over at the clamav mailing lists and see if anyone there offers any suggestions.
[qmailtoaster] Vpopmail
Dear Jakes, I want to enable default domain feature in vpopmail-toaster. I dont see any options in the installer script to add my option --enable-detfault-domain while rebuilding the src rpms. Regards, Anil Aliyan
Re: [qmailtoaster] Upgrade to the Latest RPMs
I am using Fedora Core 5. Regards, Anil Aliyan - Original Message - From: Jake Vickers j...@qmailtoaster.com To: qmailtoaster-list@qmailtoaster.com; acali...@gnvfc.net Sent: Friday, February 27, 2009 5:35 PM Subject: Re: [qmailtoaster] Upgrade to the Latest RPMs Eric Shubert wrote: Anil Aliyan wrote: Dear Jake, I am currently running the last versions of all the packages of Qmail Toaster. Now i want to upgrade to the newly uploaded rpms uploaded on the qmailtoaster website on 02/20/2009. CAN I UPGRADE DIRECTLY on the current installation? or is there any specific procedure i need to follow before installing new RPMs. Please guide me. Thanks Regards, Anil Aliyan Jake will correct me if I'm wrong, but I don't think there's any point in doing so. The newly uploaded rpms only add support for new distro releases. They don't add anything new functionality wise. What distro/version are you running? # qtp-whatami That is correct. The new packages only add support for Fedora 9, Fedora 10, and Suse 11.1. Nothing else. If you wish to upgrade you can either run the qtp-newmodel script and upgrade using that, or manually download, rebuild, and install each package. That is all. - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Upgrade to the Latest RPMs
Dear Jake, I am currently running the last versions of all the packages of Qmail Toaster. Now i want to upgrade to the newly uploaded rpms uploaded on the qmailtoaster website on 02/20/2009. CAN I UPGRADE DIRECTLY on the current installation? or is there any specific procedure i need to follow before installing new RPMs. Please guide me. Thanks Regards, Anil Aliyan
Re: [qmailtoaster] Received: from unknown (HELO xxxx.xxxx.xx ) (127.0.0.1)??
Unknown is the host from where the mail sent using a mail client (outlook etc.) and mail server was unable to resolve the hostname for that host, i think so. Regards, Anil Aliyan - Original Message - From: [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Sunday, November 23, 2008 1:39 AM Subject: [qmailtoaster] Received: from unknown (HELO ..xx ) (127.0.0.1)?? Hi, Just did a qmail virtual appliance install. I've edited the hostnames where ever required. My entire email header seems to be perfect , except for this Received: from unknown (HELO xxx.xxx.xxx ) (127.0.0.1) the HELO contains the host name , but where are the unknown and 127.0.0.1 coming from? raunak - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] Block mails sent to a specific email address
Dear Jakes, How can i block mails sent by any sender to an external email address who i dont want to recieve mails from my server. Regards, Anil Aliyan - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, November 19, 2008 2:02 AM Subject: [qmailtoaster] QControl for CentOS 4 We found an issue with the gcc compiler included with Cent4 versus Cent5. A floating point math error would result in trying to run the QControl program on a Cent4 machine since it was compiled on a Cent5 machine. We have compiled a Cent4 specific version, and it is now available on the site (http://qcontrol.v2gnu.com). Remember that the free version gives control of 1 domain. If you purchased a copy of the commercial version (allowing unlimited domains) then the Cent4 version will be included in your downloads area. If you have any issue, please feel free to contact us off list. Thanks! - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] Multiple Mails from QmailToaster-List
Dear Jake, I am getting same mail multiple times, sent to qmailtoaster-list@qmailtoaster.com by any of the subscibers to the qmailtoaster-list. All the mails are recived 3-4 times. I am not getting single mail many times from anywhere else. Please check it, might be something wrong with your mail server or mailing list. Regards, Anil Aliyan
Re: [qmailtoaster] QControl for CentOS 4
Hi Jakes, I need ur help urgently. My mail server has suddenly stopped responding on port 110. it was up and running till 30 min back my collegues told me then only i came to know that they are not able to recieve mails and download in their outlook. #qmailctl stat authlib: up (pid 5613) 423 seconds clamd: up (pid 5625) 423 seconds imap4: up (pid 5630) 423 seconds imap4-ssl: up (pid 5626) 423 seconds pop3: up (pid 5616) 423 seconds pop3-ssl: up (pid 5629) 423 seconds send: up (pid 5620) 423 seconds smtp: up (pid 5615) 423 seconds spamd: up (pid 5618) 423 seconds submission: up (pid 5619) 423 seconds authlib/log: up (pid 5623) 423 seconds clamd/log: up (pid 5653) 423 seconds imap4/log: up (pid 5628) 423 seconds imap4-ssl/log: up (pid 5624) 423 seconds pop3/log: up (pid 5631) 423 seconds pop3-ssl/log: up (pid 5622) 423 seconds send/log: up (pid 5614) 423 seconds smtp/log: up (pid 5621) 423 seconds spamd/log: up (pid 5627) 423 seconds submission/log: up (pid 5617) 423 seconds What went wrong i dont know at all. Every thing seems alright and nothing has been changed on the server since couple of months. Regards, Anil Aliyan - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] Domainkeys Problem
Untitled DocumentDear All, Till last week my mail were signed by domainkeys but today when i checked and some test messages to google and yahoo it say DomainKey-Status: bad. I dont understand how it can happen on its own when I havent changed anything in my server. When i check my server by sending test mail to http://senderid.espcoalition.org/ it also says that DomainKey-Status: bad: Signature failed verification DKIM-Status: failed (no signature found) SPF records and rest all are OK and verified. how can I make sure that every mail sent by my mail server is signed by the designated private key? Or why doest my sever fails to sign mail?? Regards, Anil Aliyan Asst. Manager (Network) (n)Code Solutions - A Division of GNFC Limited 301, GNFC Infotower, S. G. Highway, Bodakdev, Ahmedabad - 380054 Gujarat. India. [EMAIL PROTECTED] [EMAIL PROTECTED] tel: fax: mobile: +91 79 40007348 +91 79 26857321 +91 98989 94371 All information in this communication, including attachments, is strictly confidential and intended solely for delivery to and authorized use by the address(es) identified above, and may contain privileged, confidential, proprietary and/or trade secret information entitled to protection and/or exempt from disclosure under applicable law. If you are not the intended recipient, please take notice that any use, distribution or copying of this communication, and/or any action taken or omitted to be taken in reliance upon it, is unauthorized and may be unlawful. If you have received this communication in error, please notify the sender and delete/destroy this communication from your computer. image001.jpg
Re: [qmailtoaster] Domainkeys Problem
Untitled DocumentHi Jakes, I have found out why its happening. Please look at my previous mail it has one html signature at the bottom with my name and company information. I removed html signature and then sent the mail to gmail and it recgnised my signature immidiately. How does any stationary or html signature attached to the mail causes domainkeys go corrupt??? Earlier i sent once test message to the email address you gave it was also saying that Authentication System: DomainKeys Identified Mail Result: (no result present) Reporting host: More information: http://mipassoc.org/dkim/ Sendmail milter: https://sourceforge.net/projects/dkim-milter/ Authentication System: Domain Keys Result: DK signature confirmed BAD Description: Signature verification failed, message may have been tampered with or corrupted Reporting host: sendmail.net More information: http://antispam.yahoo.com/domainkeys Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/ But as soon as i removed the html signature from the stationary it changed to Authentication System: DomainKeys Identified Mail Result: (no result present) Reporting host: More information: http://mipassoc.org/dkim/ Sendmail milter: https://sourceforge.net/projects/dkim-milter/ Authentication System: Domain Keys Result: DK signature confirmed GOOD Description: Signature verified, message arrived intact Reporting host: sendmail.net More information: http://antispam.yahoo.com/domainkeys Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/ Regards, Anil Aliyan - Original Message - From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Friday, October 17, 2008 4:49 PM Subject: Re: [qmailtoaster] Domainkeys Problem Anil Aliyan wrote: Dear All, Till last week my mail were signed by domainkeys but today when i checked and some test messages to google and yahoo it say DomainKey-Status: bad. I dont understand how it can happen on its own when I havent changed anything in my server. When i check my server by sending test mail to http://senderid.espcoalition.org/ it also says that DomainKey-Status: bad: Signature failed verification DKIM-Status: failed (no signature found) SPF records and rest all are OK and verified. how can I make sure that every mail sent by my mail server is signed by the designated private key? Or why doest my sever fails to sign mail?? I know Yahoo is horrible about them - one of their servers will show correct, another will show as bad. I see that your message was signed, but I do not check incoming. A reliable place to test is here by sending a message to [EMAIL PROTECTED] Give that a try and see what it returns.
Re: [qmailtoaster] Domainkeys Problem
Untitled DocumentYes, I think you are right. I`ll verify and change the signature and then check the same again. many thanks for your quick response. Regards, Anil Aliyan - Original Message - From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Friday, October 17, 2008 5:14 PM Subject: Re: [qmailtoaster] Domainkeys Problem Anil Aliyan wrote: Hi Jakes, I have found out why its happening. Please look at my previous mail it has one html signature at the bottom with my name and company information. I removed html signature and then sent the mail to gmail and it recgnised my signature immidiately. How does any stationary or html signature attached to the mail causes domainkeys go corrupt??? Earlier i sent once test message to the email address you gave it was also saying that Authentication System: DomainKeys Identified Mail Result: (no result present) Reporting host: More information: http://mipassoc.org/dkim/ Sendmail milter: https://sourceforge.net/projects/dkim-milter/ Authentication System: Domain Keys Result: DK signature confirmed BAD Description: Signature verification failed, message may have been tampered with or corrupted Reporting host: sendmail.net More information: http://antispam.yahoo.com/domainkeys Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/ But as soon as i removed the html signature from the stationary it changed to Authentication System: DomainKeys Identified Mail Result: (no result present) Reporting host: More information: http://mipassoc.org/dkim/ Sendmail milter: https://sourceforge.net/projects/dkim-milter/ Authentication System: Domain Keys Result: DK signature confirmed GOOD Description: Signature verified, message arrived intact Reporting host: sendmail.net More information: http://antispam.yahoo.com/domainkeys Sendmail milter: https://sourceforge.net/projects/domainkeys-milter/ Your signature is not HTML, but a Word doc. I only took a brief look, but it looks like your signature ties back to a couple Microsoft websites, so I can see where that would break things. They're meant to show the message is from who it says it is, and untampered with. Since your signature looks like it calls back to external websites for whatever reason that would break either one since that data is NOT from your mail server. Like I said, that was a brief glance. It could be that DK cannot sign a MIME encoded message - try one with an attachment. I sign my accounts, and on one of those accounts I have a signature at the bottom - plain text attached by Thunderbird, and it works fine. I do not think it has anything to do with the MIME encoded message though - I think your Word signature is calling outside and breaking the schema.
Re: [qmailtoaster] cnt50*-deps.sh script
Yes you are right. The dependency check scirpt remove these packages but these are acutally required. If these packages are moved by the scripts you can reinstall them by yum command and then run the installer script else some of the packages will fail to complie. Regards, Anil Aliyan - Original Message - From: Lee R. Copp [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, October 07, 2008 11:27 PM Subject: [qmailtoaster] cnt50*-deps.sh script The cnt50*-deps.sh has a few bad package names: No package compat-libf2c available. No package compat-libgcc available. No package compat-libsdc++-33 available. I'm guessing it really wants: compat-libf2c-34 compat-libgcc-296 compat-libstdc++-33 -- Lee R. Copp Project Engineer (EE/ME) http://www.michsci.com/ - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simcan FC8
simscanmk.c file might be having some bad code in it. Something similar to this http://trac.aircrack-ng.org/ticket/454 may be someone who knows better bout simscanmk.c file codes can rectify the problem. I found this link after doing some googling and guess this might be the problem with simscan. Regards, Anil Aliyan - Original Message - From: [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, September 30, 2008 12:53 AM Subject: [qmailtoaster] Simcan FC8 I have seen some people have been able to build the toaster on fedora Core 8. I realise it is not a supported distro but none the less it builds mostly using --with=fdr60. I have reached a point where the only package left to build is simscan but I cant seem to get it working. Has anyone built simscan on fc8? any tips ? cat /mnt/qtp-sandbox/usr/src/qtp-upgrade/log/build-recent.log Building simscan-toaster-1.3.1-1.3.6 ... Installing /usr/src/qtp-upgrade/SRPMS/simscan-toaster-1.3.1-1.3.6.src.rpm Building target platforms: i686 Building for target i686 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.56134 + umask 022 + cd /usr/src/redhat/BUILD + LANG=C + export LANG + unset DISPLAY + cd /usr/src/redhat/BUILD + rm -rf simscan-1.3.1 + /usr/bin/bzip2 -dc /usr/src/redhat/SOURCES/simscan-1.3.1.tar.bz2 + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd simscan-1.3.1 ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chown -Rhf root . ++ /usr/bin/id -u + '[' 0 = 0 ']' + /bin/chgrp -Rhf root . + /bin/chmod -Rf a+rX,u+w,g-w,o-w . + echo 'Patch #0 (simscan-1.3.x-clamav.patch.bz2):' Patch #0 (simscan-1.3.x-clamav.patch.bz2): + /usr/bin/bzip2 -d + patch -p0 -s + STATUS=0 + '[' 0 -ne 0 ']' + '[' -f /var/tmp/simscan-1.3.1-gcc ']' + rm -f /var/tmp/simscan-1.3.1-gcc + echo gcc + '[' -f /var/tmp/simscan-1.3.1-show_flags ']' + cat + chmod u+x /var/tmp/simscan-1.3.1-show_flags + /var/tmp/simscan-1.3.1-show_flags RPM RELEASE: simscan-toaster-1.3.1-1.3.6 OS TYPE IS : Fedora Core 6 Linux BUILD DATE : Sat Apr 14 2007 CCFLAGS: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=generic -fasynchronous-unwind-tables LDFLAGS: -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=generic -fasynchronous-unwind-tables + '[' -f /var/tmp/simscan-1.3.1-show_flags ']' + rm -f /var/tmp/simscan-1.3.1-show_flags + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.69990 + umask 022 + cd /usr/src/redhat/BUILD + cd simscan-1.3.1 + LANG=C + export LANG + unset DISPLAY + CFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=generic -fasynchronous-unwind-tables' + export CFLAGS + CXXFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=generic -fasynchronous-unwind-tables' + export CXXFLAGS + FFLAGS='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i686 -mtune=generic -fasynchronous-unwind-tables' + export FFLAGS ++ find . -name config.guess -o -name config.sub + for i in '$(find . -name config.guess -o -name config.sub)' ++ basename ./config.sub + '[' -f /usr/lib/rpm/redhat/config.sub ']' + /bin/rm -f ./config.sub ++ basename ./config.sub + /bin/cp -fv /usr/lib/rpm/redhat/config.sub ./config.sub `/usr/lib/rpm/redhat/config.sub' - `./config.sub' + for i in '$(find . -name config.guess -o -name config.sub)' ++ basename ./config.guess + '[' -f /usr/lib/rpm/redhat/config.guess ']' + /bin/rm -f ./config.guess ++ basename ./config.guess + /bin/cp -fv /usr/lib/rpm/redhat/config.guess ./config.guess `/usr/lib/rpm/redhat/config.guess' - `./config.guess' + ./configure --build=i686-redhat-linux-gnu --host=i686-redhat-linux-gnu --target=i686-redhat-linux-gnu --program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/usr/com --mandir=/usr/share/man --infodir=/usr/share/info --enable-user=clamav --enable-attach --enable-ripmime=/usr/bin/ripmime --enable-per-domain --enable-spam --enable-spam-hits=20 --enable-received --enable-clamavdb-path=/usr/share/clamav --enable-custom-smtp-reject checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for gawk... gawk checking whether make sets $(MAKE)... yes checking build system type... i686-redhat-linux-gnu checking host system type... i686-redhat-linux-gnu checking for style of include used by make... GNU checking for i686-redhat-linux-gnu-gcc... no checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking
Re: [qmailtoaster] Domainkeys
DomainkeysYes it works very well. Follow the instructions given at http://wiki.qmailtoaster.com/index.php/Domainkeys Before enabling the domain keys make sure that your _domainkey.yourdomain.com and private._domainkey.yourdomain.com:k=rsa; p=MEwwDQYJKoZIhvcNAQEBBQ . . . are properly configured in your DNS zone and populated on global root dns server. If these entried are not populated globally and you start using domainkeys, recipient servers wont be able to verify your signature in the mail headers and will return error. If dns entries are correctly populated it wiil start working in first shot. Regards, Anil Aliyan - Original Message - From: Kyle Quillen To: qmailtoaster-list@qmailtoaster.com Sent: Sunday, September 28, 2008 12:34 AM Subject: [qmailtoaster] Domainkeys Hey all, What is the status on domain keys is it now supported or is it still broken. My server is not signing mail with domainkey and I think this is why yahoo is deferring me. Thanks q
Re: [qmailtoaster] qmailctl cdb
hey duke try with command given below:
service qmail cdb
keep space between all the words
hope this will work...
Anil
- Original Message -
From: nightduke [EMAIL PROTECTED]
To: qmailtoaster-list@qmailtoaster.com
Sent: Tuesday, September 23, 2008 6:52 PM
Subject: [qmailtoaster] qmailctl cdb
Hi i have a qmail toaster server but i was unable to use qmailctl cdb
it dosen't work.
qmailctl cdb
Usage: Qmail
{start|stop|restart|condrestart|reload|status|fullstatus|graceful|help|configtest}
Nightduke
-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
