qmail Digest 5 May 2000 10:00:01 -0000 Issue 992

Topics (messages 40984 through 41085):

lots of XXX and Sendmail 8.8.8
        40984 by: João Dinis
        40988 by: Chris Stratford

Re: stralloc problem
        40985 by: Daniel Neri

Converting sendmail mailboxes to qMail
        40986 by: Isaiah Chua
        40987 by: Vince Vielhaber
        40991 by: Russell P. Sutherland

qmail-unscribe
        40989 by: Erry Rahmawan

Re: Backing up HUGE Maildir systems
        40990 by: Uwe Ohse
        40998 by: Jeff Hayward
        41009 by: markd.bushwire.net
        41010 by: John Gonzalez/netMDC admin
        41011 by: John Gonzalez/netMDC admin
        41020 by: Brian Johnson
        41021 by: John Gonzalez/netMDC admin
        41051 by: Racer X

Re: redirecting some email
        40992 by: Uwe Ohse
        40993 by: Jason Brooke

Re: Making progress
        40994 by: Dave Sill
        40995 by: Tim Hunter

qmail won't start!?
        40996 by: Isaiah Chua
        41016 by: Dave Sill

Re: accustamp|tailocal|matchup
        40997 by: Dave Sill
        41027 by: Kins Orekhov
        41031 by: Dave Sill
        41034 by: Mikko Hänninen
        41036 by: Dave Sill
        41070 by: Peter Samuel
        41072 by: David Dyer-Bennet
        41073 by: Peter Samuel
        41074 by: David Dyer-Bennet
        41075 by: Juan E Suris

Re: No retry and no bounce?
        40999 by: Dave Sill

Re: Another question on mailboxes
        41000 by: Dave Sill

Re: Problems using qmail on very large site
        41001 by: root
        41012 by: root
        41030 by: Yuan P Li
        41049 by: root

qmail-unsubscribe
        41002 by: Patrick, Robert
        41013 by: Erry Rahmawan
        41015 by: Dave Sill

Send retries
        41003 by: Martin Renner
        41004 by: Dave Sill

The "I love you virus" .. and content based filtering
        41005 by: Nicolas MONNET
        41007 by: Johan Almqvist
        41019 by: Jennifer Tippens
        41067 by: Noel Mistula

Global Address Book?
        41006 by: Albert Hopkins

Messages stop getting delivered
        41008 by: Narvekar, Ashish

blocking mails by subject?
        41014 by: Jerry Walsh

Re: Emergency with the queue
        41017 by: Dave Sill

Re: Delivers and retrieves...
        41018 by: Dave Sill

System Requirements
        41022 by: Mark Douglas
        41024 by: markd.bushwire.net
        41026 by: Steve Wolfe

Re: Setup of local delivery &fastforward (newbie question)
        41023 by: Dave Sill

Two Delivered-To headers - Why ?
        41025 by: PPPindia
        41028 by: Soffen, Matthew
        41032 by: PPPindia
        41033 by: Dave Sill
        41035 by: PPPindia
        41037 by: Soffen, Matthew
        41038 by: Dave Sill

Smtp-poplock
        41029 by: Bert Beaudin
        41039 by: Vince Vielhaber

Alias file
        41040 by: Mario Rafael

qmail needs more time to finish.  Sleeping 1 second...
        41041 by: Flemming Funch
        41042 by: markd.bushwire.net
        41052 by: Peter van Dijk
        41071 by: Peter Samuel

PLEASE HELP! Messages stop getting delivered
        41043 by: Narvekar, Ashish
        41044 by: markd.bushwire.net

hack for filtering "i love you" worm
        41045 by: Neil Schemenauer
        41046 by: John Gonzalez/netMDC admin
        41047 by: Neil Schemenauer
        41048 by: Bruce Guenter
        41050 by: Bruce Guenter
        41055 by: Searcher
        41059 by: Jason Haar
        41077 by: Benjamin de los Angeles Jr.
        41078 by: Bruce Guenter
        41080 by: Neil Schemenauer
        41081 by: Rainer Link
        41082 by: Mulindwa Eric
        41083 by: Johan Almqvist
        41084 by: Johan Almqvist

multiple rcpt patch idea etc
        41053 by: David L. Nicol

VMS mail.mai files?
        41054 by: David L. Nicol

ETRN and QMail
        41056 by: Jose de Leon
        41058 by: Jon Rust
        41061 by: Jose de Leon
        41064 by: Jon Rust
        41065 by: Peter van Dijk
        41068 by: Jon Rust

qmail abuse...
        41057 by: Luke Chiam

db files for vpopmail and courier imap
        41060 by: Cono D'Elia

qmailqueue install prob
        41062 by: Jon Rust
        41063 by: Peter van Dijk
        41066 by: Jon Rust

Global filtering
        41069 by: Bennett Samowich

Rejecting emails
        41076 by: Ronneil Camara

shared folders
        41079 by: Colin Humphreys

SUSE and qmail/Spamcontrol
        41085 by: Erwin Hoffmann

Administrivia:

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To bug my human owner, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------


Hello,

from some time now, i'm receiving messages
corrupted with sequences of the char 'X'.

It dos not happen with all the messages, only
with a few, but it is persistent. Sometimes it
corrupts the header making the all messages
unreadable. Sometime corrupts attached files.

After doing some traces, I found that it could be
related to emails coming from Sendmail 8.8.8
servers (or Sendmails with a similar version).

Does anybody have the same (or similar problem)?
Is it Qmail or Sendmail problem?
Could it be a "chip is bad" problem?

By the way, I'm using Qmail 1.03 (19980615)
on a Linux box (Compaq Prosignia, 486DX 66Mhz)
with 2 Realtek ethernet cards.

Thanks,


João Dinis








On Thu, 4 May 2000, João Dinis wrote:

> from some time now, i'm receiving messages
> corrupted with sequences of the char 'X'.
> 
> It dos not happen with all the messages, only
> with a few, but it is persistent. Sometimes it
> corrupts the header making the all messages
> unreadable. Sometime corrupts attached files.

Does your mail go anywhere near a system running the Cyrus IMAP/POP
server?  There's an option in that to make illegal header values legal by
simply replacing the illegal characters with an 'X'.  Your situation
sounds similar.

    Chris.





"Petr Novotny" <[EMAIL PROTECTED]> writes:

> You may want to read the source of the function, I would think. Or 
> find a documentation.

http://cr.yp.to/lib/stralloc.html


Regards,
/Daniel

-- 
Daniel Neri
Signalteknik AB, Sweden





hi,
 
I read somewhere on the mailing list archive that it's possible to convert existing /var/mail/user mailboxes that were under sendmail to qmail Maildir formats using a perl script called convert-and-create. The author said to look for it at the qMail site, but my luck's run dry with that option.
 
Does anyone know where I can find this script? I desperately need to convert 'lost' emails from my boss's sendmail box to qMail so she can pick them up.
 
Thanks!
 
 
Best regards,
 
Isaiah Chua




On Thu, 4 May 2000, Isaiah Chua wrote:

> hi,
> 
> I read somewhere on the mailing list archive that it's possible to convert existing 
>/var/mail/user mailboxes that were under sendmail to qmail Maildir formats using a 
>perl script called convert-and-create. The author said to look for it at the qMail 
>site, but my luck's run dry with that option.
> 
> Does anyone know where I can find this script? I desperately need to convert 'lost' 
>emails from my boss's sendmail box to qMail so she can pick them up.

If anywhere, you should be able to find it at www.qmail.org.  BTW, what
is qMail?  

Vince.
-- 
==========================================================================
Vince Vielhaber -- KA8CSH    email: [EMAIL PROTECTED]    http://www.pop4.net
 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
        Online Campground Directory    http://www.camping-usa.com
       Online Giftshop Superstore    http://www.cloudninegifts.com
==========================================================================







* Vince Vielhaber ([EMAIL PROTECTED]) [ 4 May 2000 06:47]:

> If anywhere, you should be able to find it at www.qmail.org.  BTW, what
> is qMail?  

http://madhaus.utcs.utoronto.ca/qmail/mbox2maildir

-- 
Quist Consulting                Email: [EMAIL PROTECTED]
219 Donlea Drive                Voice: +1.416.696.7600
Toronto ON  M4G 2N1             Fax:   +1.416.978.6620
CANADA                          WWW:   http://www.quist.on.ca










On Thu, May 04, 2000 at 01:14:25AM -0700, Tracy R Reed wrote:

> Anyone have any tips on how to effeciently backup Maildir systems with millions
> of files? 

don't do it. Nobody likes getting duplicate mail.

> I am pondering switching the company mail server over to Maildir.
> It's a very large and busy system. We have had situations before where there

Use a raid system.

Regards, Uwe




On Thu, 4 May 2000, Tracy R Reed wrote:

  Anyone have any tips on how to effeciently backup Maildir systems with millions
  of files? I am pondering switching the company mail server over to Maildir.
  It's a very large and busy system. We have had situations before where there
  were millions of files to be backed up which took many days or perhaps even
  weeks to fully back up. In this case we were backing up from a NetApp to a DLT
  robot using NDMP. We never successfully finished a backup and ended up totally
  rearchitecting that setup but this won't be possible with the mail system. 
  
Short answer: Don't use tape.

Long answer: There are two different requirements you may be addressing;
archival copies so you can go back in time to retrieve files, and disaster
recovery such as having a lunatic empty a machine gun in to your disk
farm.  The thing to worry about in the latter is time-to-restore.

We store about 7.9 million messages on a single NetApp.  We don't make
archival copies as they aren't likely to capture much of the message
stream.  Not having archival copies also keeps us out of messy legal
territory.

We do replicate the entire message store on a warm standby NetApp using
their snapmirror feature.  We snapshot every 15 minutes, so we'll never be
more than that interval out of date if we have to go to the standby.  The
snapmirror update is incremental, so we aren't transferring much data at
each interval.  The snapshot mechanism is nice because it provides a clean
time delineation of what is snapped.

If you want to keep archival copies you can simply take daily/whatever
standard snapshots on the source filer and leave them online for whatever
your retention period may be.  All it costs is disk space, which isn't
cheap with NetApp, but it's better than tape.

It takes about 10 minutes to switch to the standby - something we've only
done once in production (in a controlled manner for a hardware upgrade).  
All that's involved is mounting file systems from the standby on our unix
boxes.

Our standby filer isn't co-located with the active one... 

-- Jeff Hayward






On Thu, May 04, 2000 at 01:14:25AM -0700, Tracy R Reed wrote:
> Anyone have any tips on how to effeciently backup Maildir systems with millions
> of files? I am pondering switching the company mail server over to Maildir.
> It's a very large and busy system. We have had situations before where there
> were millions of files to be backed up which took many days or perhaps even

Above and beyond the comments of the other people wrt whether it's worth backing
up in this way, I'm told that something like the dump command may more efficiently
deal with large numbers of small files because it forks off multiple processes rather
than serializes as other products/programs may do.

Then again, many millions of file system lookup are probably going to hose
your system for a long long time.


Regards.




Yes, use rsync, and update frequently. This will backup the system and
only 'backup' changes that are taking place, thus not requiring you to do
a FULL backup.

With this method however, you will lose any information that has changed
between your rsync updates.

On Thu, 4 May 2000, Tracy R Reed wrote:

>Anyone have any tips on how to effeciently backup Maildir systems with millions
>of files? I am pondering switching the company mail server over to Maildir.
>It's a very large and busy system. We have had situations before where there
>were millions of files to be backed up which took many days or perhaps even
>weeks to fully back up. In this case we were backing up from a NetApp to a DLT
>robot using NDMP. We never successfully finished a backup and ended up totally
>rearchitecting that setup but this won't be possible with the mail system. 
>--
>Tracy Reed      http://www.ultraviolet.org
>My karma ran over your dogma.
>

  _    __   _____      __   _________      
______________  /_______ ___  ____  /______  John Gonzalez/Net.Tech
__  __ \ __ \  __/_  __ `__ \/ __  /_  ___/ MDC Computers/netMDC!
_  / / / `__/ /_  / / / / / / /_/ / / /__ (505)437-7600/fax-437-3052
/_/ /_/\___/\__/ /_/ /_/ /_/\__,_/  \___/ http://www.netmdc.com
[---------------------------------------------[system info]-----------]
 10:15am  up 100 days, 17:12,  7 users,  load average: 0.05, 0.09, 0.10





On Thu, 4 May 2000, Uwe Ohse wrote:
>On Thu, May 04, 2000 at 01:14:25AM -0700, Tracy R Reed wrote:
>> Anyone have any tips on how to effeciently backup Maildir systems with millions
>> of files? 
>
>don't do it. Nobody likes getting duplicate mail.

Doing backups has absolutely nothing to do with duplicate emails? I fail
to see your point here?

>> I am pondering switching the company mail server over to Maildir.
>> It's a very large and busy system. We have had situations before where there
>
>Use a raid system.

While a RAID system will protect you from certain failures (ie. hard drive
crash) there are other failures that it cannot protect you against. Human
error, hacker rm -rf'ing your server, etc, etc) whereas offsite, or off
machine backups will.

I would feel better knowing that my users precious mail is also backed up
on RAID as well as on another machine/media. Im sure they would feel the
same way as well.

  _    __   _____      __   _________      
______________  /_______ ___  ____  /______  John Gonzalez/Net.Tech
__  __ \ __ \  __/_  __ `__ \/ __  /_  ___/ MDC Computers/netMDC!
_  / / / `__/ /_  / / / / / / /_/ / / /__ (505)437-7600/fax-437-3052
/_/ /_/\___/\__/ /_/ /_/ /_/\__,_/  \___/ http://www.netmdc.com
[---------------------------------------------[system info]-----------]
 10:20am  up 100 days, 17:17,  7 users,  load average: 0.11, 0.11, 0.09





John Gonzalez/netMDC admin wrote:

> On Thu, 4 May 2000, Uwe Ohse wrote:
> >don't do it. Nobody likes getting duplicate mail.
>
> Doing backups has absolutely nothing to do with duplicate emails? I fail
> to see your point here?
>
> >> I am pondering switching the company mail server over to Maildir.
> >> It's a very large and busy system. We have had situations before where there
> >
> >Use a raid system.
>
> While a RAID system will protect you from certain failures (ie. hard drive
> crash) there are other failures that it cannot protect you against. Human
> error, hacker rm -rf'ing your server, etc, etc) whereas offsite, or off
> machine backups will.
>
> I would feel better knowing that my users precious mail is also backed up
> on RAID as well as on another machine/media. Im sure they would feel the
> same way as well.

the point is that backing-up e-mail doesn't prevent lost messages, and more results
in duplkicate messages if you restore your backup.   e-mail usually moves so fast
that many messages come and go from the server between nightly backups, and many of
the messages you may backup (unless the server crashes immediately after the backup
is completed) will be delivered before the server crashes, and many more messages
will get queued in that time as well...  to keep a usefull backup of e-mail you'd
need something that stores the messages as their recieved and erases them when
they're sucessfully delivered..  so either use a RAID system, or write a program that
sends them off to a secondary server whenever they come in..  but nightly backups
just don't cut it for e-mail..
-Brian





On Thu, 4 May 2000, Brian Johnson wrote:

>sends them off to a secondary server whenever they come in..  but nightly backups
>just don't cut it for e-mail..
>-Brian

As stated in previous email, rsync, 15 minute intervals....

  _    __   _____      __   _________      
______________  /_______ ___  ____  /______  John Gonzalez/Net.Tech
__  __ \ __ \  __/_  __ `__ \/ __  /_  ___/ MDC Computers/netMDC!
_  / / / `__/ /_  / / / / / / /_/ / / /__ (505)437-7600/fax-437-3052
/_/ /_/\___/\__/ /_/ /_/ /_/\__,_/  \___/ http://www.netmdc.com
[---------------------------------------------[system info]-----------]
 11:25am  up 100 days, 18:22,  7 users,  load average: 0.02, 0.06, 0.09





some rdbms systems have the ability to snapshot the database and do a
hot backup of the database.  while that specifically does not answer the
question of how to backup, if you stored all your email in the database
somehow, you would be able to take advantage of the rdbms facilities for
hot backup and not have to reinvent the wheel.

shag

----- Original Message -----
From: <[EMAIL PROTECTED]>
To: "Tracy R Reed" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thu 4 May 2000 9:02
Subject: Re: Backing up HUGE Maildir systems


> On Thu, May 04, 2000 at 01:14:25AM -0700, Tracy R Reed wrote:
> > Anyone have any tips on how to effeciently backup Maildir systems
with millions
> > of files? I am pondering switching the company mail server over to
Maildir.
> > It's a very large and busy system. We have had situations before
where there
> > were millions of files to be backed up which took many days or
perhaps even
>
> Above and beyond the comments of the other people wrt whether it's
worth backing
> up in this way, I'm told that something like the dump command may more
efficiently
> deal with large numbers of small files because it forks off multiple
processes rather
> than serializes as other products/programs may do.
>
> Then again, many millions of file system lookup are probably going to
hose
> your system for a long long time.
>
>
> Regards.
>





On Thu, May 04, 2000 at 10:04:58AM +1000, Jason Brooke wrote:
 
> Is it possible to have qmail forward email destined to one address, to
> another address instead, if it contains certain file attachments based on
> file extension?

yes. Use some magic inside the .qmail file.

man dot-qmail
man qmail-command

Note that this is not really trivial to do.

Regards, Uwe





I wrote a script to pipe the emails into from the .qmail file. Seems to work
ok, thanks

jason



> yes. Use some magic inside the .qmail file.
>
> man dot-qmail
> man qmail-command
>
> Note that this is not really trivial to do.
>
> Regards, Uwe
>





"Bolivar Diaz Galarza" <[EMAIL PROTECTED]> wrote:

>qmail-pop3d is installed in my computer, my problem is how do I configure it
>to deliver from Maildir instead of mbox (right now it works with
>mbox)?

qmail-pop3d *only* does maildir's. If you're seeing mbox's, you're not 
using qmail-pop3d.

-Dave




qmail-pop3d only reads Maildir.

-----Original Message-----
From: Bolivar Diaz Galarza [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 03, 2000 7:08 PM
To: Tim Hunter; [EMAIL PROTECTED]
Subject: Re: Making progress


qmail-pop3d is installed in my computer, my problem is how do I configure it
to deliver from Maildir instead of mbox (right now it works with mbox)?

Thanks for replying...

Bolivar,


----- Original Message -----
From: "Tim Hunter" <[EMAIL PROTECTED]>
To: "Bolivar Diaz Galarza" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, May 03, 2000 2:56 PM
Subject: RE: Making progress


> I have a feeling I am not the only one confused.
>
> I assume you changed your default delivery method to ./Maildir/ which will
> put mails in your ./Maildir/new/ directory.
>
> If you are trying to retrieve mails from there now with pop, you need
> qmail-pop3d or any other program that can read /Maildir/'s.  AFAIK nothing
> can pop mail from a Maildir besides qmail-pop3d, but I have been know to
be
> wrong, but why would anyone make anything, qmail-pop3d is distributed with
> qmail and its great.
>
> -- Tim
>
> -----Original Message-----
> From: Bolivar Diaz Galarza [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, May 03, 2000 5:49 PM
> To: [EMAIL PROTECTED]
> Subject: Making progress
>
>
> I have succesfully switch the incoming e-mails to use Maildir instead of
> Mailbox or mbox, my problem remaining is when a user retrieves his e-mail
> from a POP client, he gets no e-mail......which programs delivers e-mail
to
> clients is it pop3d?
>
> I need to make qmail deliver whatever is in Maildir/new instead of mbox or
> Mailbox...
>
> Thanks...
>






hi folks,
 
I've finally got qmail to work with a lot of help from Johan Almqvist and Peter Samuel - thanks guys! However, the funny thing is that when we had to reboot the server, qmail just won't start!
 
The init scripts are in, and I even tried starting it from the command line, but nothing happens. I'm using tcpserver to start the qmail-pop3 and qmail itself in my inetd.conf file.
 
What might be wrong?
 
 
Best regards,
 
Isaiah Chua
Official Email: [EMAIL PROTECTED]
AIM Nick : radar00




"Isaiah Chua" <[EMAIL PROTECTED]> wrote:

>The init scripts are in,

In what/where? And what's in them? And what platform are you using?

>and I even tried starting it from the command line, but nothing
>happens.

By "nothing happens" do you mean that the script runs but doesn't
output anything, runs but exits immediately, or what?

>I'm using tcpserver to start the qmail-pop3 and qmail itself in my
>inetd.conf file.

You can't start qmail from inetd.conf. Perhaps you mean qmail-smtpd?

>What might be wrong?

Your startup scripts might be misconfigured.

-Dave




[EMAIL PROTECTED] wrote:

>Now, I'm really confused.
>
>Here's the path that logs go thru on my machine:
>
>qmail -> accustamp -> tailocal
>
>If I'm disabling tailocal, then my logs ARE suitable for qmailanalog,
>so why do I need to run my logs thru tai64nfrac if everything
>works fine in this case?

qmail-analog wants the timestamps in "TAI" format, not "TAI64", and
not local.

accustamp outputs the format qmail-analog requires.

daemontools 0.60+ (multilog) uses TAI64. Tai64nfrac converts TAI64
timestamps to the older "TAI" format that qmail-analog requires.

-Dave




> 
> Why not just store the logs in there accustamp or multilog form and
> convert them to localtime ONLY when you need to look at them.

Because we look at them too often :)

-- 
Kins Orekhov
Outlook Technologies, Inc.
E-mail: [EMAIL PROTECTED]
Phone: 773-775-2099, ext. 226
http://swoop.outlook.net





[EMAIL PROTECTED] wrote:

>> Why not just store the logs in there accustamp or multilog form and
>> convert them to localtime ONLY when you need to look at them.
>
>Because we look at them too often :)

So what? Do you have a quota on the number of times tailocal can be
run?

-Dave




Dave Sill <[EMAIL PROTECTED]> wrote on Thu, 04 May 2000:
> So what? Do you have a quota on the number of times tailocal can be
> run?

I'm not the person asking the question, but I'm guessing that the
annoyance factor of having to do

  tailocal < logfile | less

instead of

  less logfile

is quite high.  I wonder if there is some automagical solution that
could be used with lessopen.sh, or something else?  It's of course
possible to create an alias or whatever, but that also has an annoyance
factor greater than the simplest form, since you'd need to use a
separate command for the mail logs.


Mikko
-- 
// Mikko Hänninen, aka. Wizzu  //  [EMAIL PROTECTED]  //  http://www.iki.fi/wiz/
// The Corrs list maintainer  //   net.freak  //   DALnet IRC operator /
// Interests: roleplaying, Linux, the Net, fantasy & scifi, the Corrs /
"Youth has nothing to do with age; it's all about attitude."  -- MIMP




Mikko Hänninen <[EMAIL PROTECTED]> wrote:

>I wonder if there is some automagical solution that
>could be used with lessopen.sh, or something else?  It's of course
>possible to create an alias or whatever, but that also has an annoyance
>factor greater than the simplest form, since you'd need to use a
>separate command for the mail logs.

How about a "less" wrapper that looks for filenames of the form
@[0-9]+ and passes them through tailocal?

-Dave




On Thu, 4 May 2000, Kins Orekhov wrote:

> > 
> > Why not just store the logs in there accustamp or multilog form and
> > convert them to localtime ONLY when you need to look at them.
> 
> Because we look at them too often :)

And can't you look at them by passing them through tai64nlocal each
time? Can you spell "shell script wrapper"? :)

Regards
Peter
----------
Peter Samuel                                [EMAIL PROTECTED]
Technical Consultant                        or at present:
eServ. Pty Ltd                              [EMAIL PROTECTED]
Phone: +61 2 9206 3410                      Fax: +61 2 9281 1301

"If you kill all your unhappy customers, you'll only have happy ones left"





Peter Samuel <[EMAIL PROTECTED]> writes on 5 May 2000 at 11:56:47 +1000
 > On Thu, 4 May 2000, Kins Orekhov wrote:
 > 
 > > > 
 > > > Why not just store the logs in there accustamp or multilog form and
 > > > convert them to localtime ONLY when you need to look at them.
 > > 
 > > Because we look at them too often :)
 > 
 > And can't you look at them by passing them through tai64nlocal each
 > time? Can you spell "shell script wrapper"? :)

Except I don't usually look at those log files  by starting up a new
instance of some program; I usually look at them by calling them into
a buffer in an already-running instance of an editor.
-- 
Photos: http://dd-b.lighthunters.net/ Minicon: http://www.mnstf.org/minicon
Bookworms: http://ouroboros.demesne.com/ SF: http://www.dd-b.net/dd-b 
David Dyer-Bennet / Welcome to the future! / [EMAIL PROTECTED]




On Thu, 4 May 2000, David Dyer-Bennet wrote:

> Peter Samuel <[EMAIL PROTECTED]> writes on 5 May 2000 at 11:56:47 +1000
>  > On Thu, 4 May 2000, Kins Orekhov wrote:
>  > 
>  > > > 
>  > > > Why not just store the logs in there accustamp or multilog form and
>  > > > convert them to localtime ONLY when you need to look at them.
>  > > 
>  > > Because we look at them too often :)
>  > 
>  > And can't you look at them by passing them through tai64nlocal each
>  > time? Can you spell "shell script wrapper"? :)
> 
> Except I don't usually look at those log files  by starting up a new
> instance of some program; I usually look at them by calling them into
> a buffer in an already-running instance of an editor.

And you editor can't read in the results of a program?

Regards
Peter
----------
Peter Samuel                                [EMAIL PROTECTED]
Technical Consultant                        or at present:
eServ. Pty Ltd                              [EMAIL PROTECTED]
Phone: +61 2 9206 3410                      Fax: +61 2 9281 1301

"If you kill all your unhappy customers, you'll only have happy ones left"





Peter Samuel <[EMAIL PROTECTED]> writes on 5 May 2000 at 13:52:17 +1000
 > On Thu, 4 May 2000, David Dyer-Bennet wrote:
 > 
 > > Peter Samuel <[EMAIL PROTECTED]> writes on 5 May 2000 at 11:56:47 +1000
 > >  > On Thu, 4 May 2000, Kins Orekhov wrote:
 > >  > 
 > >  > > > 
 > >  > > > Why not just store the logs in there accustamp or multilog form and
 > >  > > > convert them to localtime ONLY when you need to look at them.
 > >  > > 
 > >  > > Because we look at them too often :)
 > >  > 
 > >  > And can't you look at them by passing them through tai64nlocal each
 > >  > time? Can you spell "shell script wrapper"? :)
 > > 
 > > Except I don't usually look at those log files  by starting up a new
 > > instance of some program; I usually look at them by calling them into
 > > a buffer in an already-running instance of an editor.
 > 
 > And you editor can't read in the results of a program?

I can think offhand of a couple of ways of doing it, but all of them
are grossly inefficient and take lots of keystrokes.  There may well
be an easy way I'm overlooking, too.  Nothing exotic, I'm an emacs
user.  I'm not starting a new instance, I'm visiting the log file from
my existing instance.
-- 
Photos: http://dd-b.lighthunters.net/ Minicon: http://www.mnstf.org/minicon
Bookworms: http://ouroboros.demesne.com/ SF: http://www.dd-b.net/dd-b 
David Dyer-Bennet / Welcome to the future! / [EMAIL PROTECTED]




> Peter Samuel <[EMAIL PROTECTED]> writes on 5 May 2000 at
13:52:17 +1000
>  > On Thu, 4 May 2000, David Dyer-Bennet wrote:
>  >
>  > > Peter Samuel <[EMAIL PROTECTED]> writes on 5 May 2000 at
11:56:47 +1000
>  > >  > On Thu, 4 May 2000, Kins Orekhov wrote:
>  > >  >
>  > >  > > >
>  > >  > > > Why not just store the logs in there accustamp or multilog
form and
>  > >  > > > convert them to localtime ONLY when you need to look at them.
>  > >  > >
>  > >  > > Because we look at them too often :)
>  > >  >
>  > >  > And can't you look at them by passing them through tai64nlocal
each
>  > >  > time? Can you spell "shell script wrapper"? :)
>  > >
>  > > Except I don't usually look at those log files  by starting up a new
>  > > instance of some program; I usually look at them by calling them into
>  > > a buffer in an already-running instance of an editor.
>  >
>  > And you editor can't read in the results of a program?
>
> I can think offhand of a couple of ways of doing it, but all of them
> are grossly inefficient and take lots of keystrokes.  There may well
> be an easy way I'm overlooking, too.  Nothing exotic, I'm an emacs
> user.  I'm not starting a new instance, I'm visiting the log file from
> my existing instance.
> --
> Photos: http://dd-b.lighthunters.net/ Minicon:
http://www.mnstf.org/minicon
> Bookworms: http://ouroboros.demesne.com/ SF: http://www.dd-b.net/dd-b
> David Dyer-Bennet / Welcome to the future! / [EMAIL PROTECTED]

I think that this discussion has come to the point where you are both right
and it's just a matter preference. Let it rest before flame starts flying
around.

JES





<[EMAIL PROTECTED]> wrote:

>How can I setup email to ignore all messages that cannot be delivered,
>i.e., even not to bother the re-delievery and bounce?

Setting queuelifetime to 0 should prevent all retries. Disabling
bounces will require hacking the code, but it should be trivial.

-Dave




"Isaiah Chua" <[EMAIL PROTECTED]> wrote:

>I keep getting this error message when trying to send mails to my new
>qmail server at the office:
>
>Hi. This is the qmail-send program at mail.twc-sg.com.
>I'm afraid I wasn't able to deliver your message to the following addresses.
>This is a permanent error; I've given up. Sorry it didn't work out.
>
><[EMAIL PROTECTED]>:
>Sorry, no mailbox here by that name. (#5.1.1)
>
>I've already created the Maildir dir in the $HOME for myself. What
>can be wrong?

Your username is isaiah.chua? Do you own Maildir? What Do The Logs
Say(tm)?

-Dave




Hi Mark,

They stay running forever and the parent process is qmail-queue. Now I
have 162 defunct process.

Today I will try to alter rlim_fd_cur to 64  (the number of file
descriptors - Today the value is 1024. 64 was the original value) and keep
the rlim_fd_max to 2048, like it is today and I will reboot the machines.
I read somewhere that isn't a good idea change the default current limit
of file descriptors like I did. They suggest only change the max number of
file descriptor. Well, is just a guess, but I think that won't cause any
damage to try ;-)

Thanks for your attention !

Regards.


> > The problem is the fact that  I'm having too much defunct process.
> > Usually I have between 350-500 process running by machine. From that,
> > normally I have between 90-120 defunct process per machine.
>
> Do they stay forever, or do they go away?
>
> Which qmail process is the parent?
>
> I have seen Solaris 2.x systems where processes do stay around forever,
> but I have not seen in on, eg, FreeBSD.
>
> Regards.





Yuan,

For change the current and  max number of file descriptors in Solaris 2.6 (in
2.7 I think is the same but I'm not sure), you need add two entries in your
/etc/system file:

set rlim_fd_cur=1024
set rlim_fd_max=2048

and you MUST reboot your machine in order to changes take effect.

To see if everythings works, try to use the command ulimit -a before and after
the modifications. Unfortanately the max number of file descriptors wouldn't be
showed, just the current will (open files parameter).

Hope this helps.

Regards,

Claudio

> Hi,
>
> Excuse me for asking a silly question. In Solaris 2.6 or 2.7, how do
> you change rlim_fd_max etc? I cannot find it in the Answer Books.
>
> Thank you very much.
>
> Yuan
>
> >
> > Hi Mark,
> >
> > They stay running forever and the parent process is qmail-queue. Now I
> > have 162 defunct process.
> >
> > Today I will try to alter rlim_fd_cur to 64  (the number of file
> > descriptors - Today the value is 1024. 64 was the original value) and keep
> > the rlim_fd_max to 2048, like it is today and I will reboot the machines.
> > I read somewhere that isn't a good idea change the default current limit
> > of file descriptors like I did. They suggest only change the max number of
> > file descriptor. Well, is just a guess, but I think that won't cause any
> > damage to try ;-)
> >
> > Thanks for your attention !
> >
> > Regards.
> >
> >
> > > > The problem is the fact that  I'm having too much defunct process.
> > > > Usually I have between 350-500 process running by machine. From that,
> > > > normally I have between 90-120 defunct process per machine.
> > >
> > > Do they stay forever, or do they go away?
> > >
> > > Which qmail process is the parent?
> > >
> > > I have seen Solaris 2.x systems where processes do stay around forever,
> > > but I have not seen in on, eg, FreeBSD.
> > >
> > > Regards.
> >





Claudio,

I looked at my record just now. 

I have a Sun Ultra 5 running Solaris 2.7. When I increased the 
number of concurrent remote processes to 50, the log file
shows "cannot open pipe" error for a lot of the processes.

Is this caused by rlim_fd_max too small?

Sincerely,
Yuan
> 
> Yuan,
> 
> For change the current and  max number of file descriptors in 
> Solaris 2.6 (in
> 2.7 I think is the same but I'm not sure), you need add two 
> entries in your
> /etc/system file:
> 
> set rlim_fd_cur=1024
> set rlim_fd_max=2048
> 
> and you MUST reboot your machine in order to changes take effect.
> 
> To see if everythings works, try to use the command ulimit -a 
> before and after
> the modifications. Unfortanately the max number of file 
> descriptors wouldn't be
> showed, just the current will (open files parameter).
> 
> Hope this helps.
> 
> Regards,
> 
> Claudio





Yuan,

In my case, I changed both (rlim_fd_max and rlim_fd_cur to 2048 and 1024
respectively). After reboot my machines
I don't received more messages like that. By the way, my concurrency
remote is set to 255. So, I believe that for your case (50) this set
(2048) should work fine too. I suggest that you try  change just the
rlim_fd_max, because I think that change rlim_fd_cur is unnecessary or,
even (I still couldn't try decrease it like I said that I will), cause
that problem that originate all this discussion: a lot of defunct
process running in my machine ! But in my case, like I said,  I'm using
Solaris 2.6 and not 2.7 like you....

Regards,

Claudio

> Is this caused by rlim_fd_max too small?
>
> Sincerely,
> Yuan
> >
> > Yuan,
> >
> > For change the current and  max number of file descriptors in
> > Solaris 2.6 (in
> > 2.7 I think is the same but I'm not sure), you need add two
> > entries in your
> > /etc/system file:
> >
> > set rlim_fd_cur=1024
> > set rlim_fd_max=2048
> >
> > and you MUST reboot your machine in order to changes take effect.
> >
> > To see if everythings works, try to use the command ulimit -a
> > before and after
> > the modifications. Unfortanately the max number of file
> > descriptors wouldn't be
> > showed, just the current will (open files parameter).
> >
> > Hope this helps.
> >
> > Regards,
> >
> > Claudio
















Try sending a message to [EMAIL PROTECTED]

-Dave




Hi.

When and how often tries qmail to resend a mail to a specific recipient
after a delivery failure?

I already have found this information some time ago, but now I cannot
find it again. It was something like after 4 hours, after 9 hours, after
1 day (and so on...)

Where can I find this information?


Martin




Martin Renner <[EMAIL PROTECTED]> wrote:

>When and how often tries qmail to resend a mail to a specific recipient
>after a delivery failure?
>
>Where can I find this information?

http://Web.InfoAve.Net/~dsill/lwq.html#retry-schedule

-Dave






Lusers are stupid, and it's a shame that we have to do this, but ... to
stop the plague before things get too nasty, we need to filter that bloody
"I love you" worm. Is there any way to quickly (and dirtily) implement
that in qmail? I'm not looking for a permanent solution, just a quick
workaround that I'll get rid off later.






On Thu, May 04, 2000 at 05:28:37PM +0200, Nicolas MONNET wrote:
> Lusers are stupid, and it's a shame that we have to do this, but ... to
> stop the plague before things get too nasty, we need to filter that bloody
> "I love you" worm. Is there any way to quickly (and dirtily) implement
> that in qmail? I'm not looking for a permanent solution, just a quick
> workaround that I'll get rid off later.

I'll say it again: 

scan4virus from the qmail homepage can do that.

-Johan
-- 
Johan Almqvist




I installed the new AmaVis a few days ago.  It works right off, is easy to
impliment and we did not get the virus. :)  I got 4 notices about it
though.  I am using AmaVis and NAI.
-Jennifer

     
On Thu, 4 May 2000, Johan Almqvist wrote:

> On Thu, May 04, 2000 at 05:28:37PM +0200, Nicolas MONNET wrote:
> > Lusers are stupid, and it's a shame that we have to do this, but ... to
> > stop the plague before things get too nasty, we need to filter that bloody
> > "I love you" worm. Is there any way to quickly (and dirtily) implement
> > that in qmail? I'm not looking for a permanent solution, just a quick
> > workaround that I'll get rid off later.
> 
> I'll say it again: 
> 
> scan4virus from the qmail homepage can do that.
> 
> -Johan
> -- 
> Johan Almqvist
> 
> 





Hi,

try my crude script.

http://www.ornl.gov/its/archives/mailing-lists/qmail/1999/07/msg00518.html

cheers

noel

-----Original Message-----
From: Nicolas MONNET <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Friday, 5 May 2000 0:44
Subject: The "I love you virus" .. and content based filtering 


>
>
>Lusers are stupid, and it's a shame that we have to do this, but ... to
>stop the plague before things get too nasty, we need to filter that bloody
>"I love you" worm. Is there any way to quickly (and dirtily) implement
>that in qmail? I'm not looking for a permanent solution, just a quick
>workaround that I'll get rid off later.
>
>
>






We have been using qmail for our main email server/gateway.  We use
regular Unix accounts for email accounts.  Our client is MS Outlook.  I
was just wondering if this configuration could be used to create a global
address book for our users.

-- 
                                                     Albert Hopkins
                                             Sr. Systems Specialist
                                                      Dynacare Inc.
                                              [EMAIL PROTECTED]





I am not the system administrator for qmail or Cyrus and am a newbie to
qmail so bear with any incorrect statements.
I tried to look up the FAQs for qmail but did not find anything specific to
this problem.

We have been seeing a strange problem with mail not being delivered to the
mailbox.

We have qmail (release 1.03) mail transfer agent running on a linux box.

Mail is delivered to Cyrus (IMAP v1.5.14) using the following command

|preline -f /usr/cyrus/bin/deliver -a sb -e sb 


We have an application that listens to the mailboxes on the Cyrus server
using the javamail API. We have situations where more than one application
program may be listening to the same mailbox at the same time.
We run into a situation about once in every two days or so where mail does
not get delivered to the mailboxes. The qmail logs don't give any error
messages. We see that qmail is trying to deliver messages but there is no
notification of successfuly delivery. The imap server is fine though because
we can still process existing emails. Only new messages encounter this. At
this point, our system administrators just give up and reboot both qmail and
Cyrus. Once the servers are rebooted, all the messages appear correctly in
the mailbox (even the new ones that seemed to be hung somewhere). Has
anybody faced this problem before? Any ideas as to what might be going on?
Is it possible that multiple clients accessing the same mailbox is somehow
causing this problem?

Any pointers would be greatly appreciated.

Thanks.

--
Ashish P. Narvekar
email: [EMAIL PROTECTED]





Hi,

with the mass amount of worms and trojans spreading around these days i am
wondering if it's possible to block mails with qmail by subject? (for
example the current "LOVEBUG" worm: if subject = 'ILOVEYOU' then block it)

Any help would be greatly appreciated.

Jerry.
--

Jerry Walsh                           [EMAIL PROTECTED]
Aardvark IPL                          Fax +353 21 896040 
Morris house                          Tel +353 21 896060
Douglas 
Cork Ireland.                         http://www.aardvark.ie/






clifford thurber <[EMAIL PROTECTED]> wrote:

>I have a user who is spamming. Is there a way to stop qmail

# qmail stop (LWQ)

# killall qmail-send (Linux, IRIX, *not* Solaris)

# ps -ef|grep qmail-send
# kill [PID of qmail-send]

>and delete
>everything from the queue?

# find /var/qmail/queue -type f -exec rm {} \;

-Dave




"Bolivar Diaz Galarza" <[EMAIL PROTECTED]> wrote:

>My /var/qmail/rc file looks like this:
>
>#! /bin/sh
>
>exec env - PATH="/var/qmail/bin:$PATH" \
>qmail-start '|dot-forward .forward
>./Maildir/'

So default delivery is to ./Maildir/ --barring existence of a .forward
for .qmail file.

>My /etc/skel looks like this
>
>Maildir
>    - cur
>    - new
>    - tmp
>Mailbox
>mbox

You don't need/want Mailbox or mbox.

>PROBLEM: Qmail delivers to the file Mailbox,

Yes, that's a problem. Did you restart qmail after changing
/var/qmail/rc? Does ps show qmail-start with the right delivery
instructions?

>and when a user checks his
>e-mail using a POP3 cliente like Netscape, delivers whatever is in
>mbox,

Another problem. Which POP daemon are you running? You should probably 
run qmail-pop3d, if you want to use Maildirs.

-Dave




Hi,

I'm currently investigating setting up a Qmail server for a local ISP who is
having some problems with it's local setup. I've done some work with Qmail,
however I've never built a production server with it. I'm just wondering
what kind of system specs you would recommend for a server that is going to
start out hosting approximately 700 users, with a max of 120 being able to
access the system at a time. I would like these specs to be mid to high end
requirements for this setup, to leave a fair amount of room for expanding
without having to do any work on the server itself.

Thanks,

Mark

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Mark Douglas <-----------------> Computer Technician, A+, MCP
[EMAIL PROTECTED] <------------> VB, VC++, App & Game Programming
http://www.9thlevel.org/ <-----> General Computer Geek Extraordinaire
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-





On Thu, May 04, 2000 at 10:54:09AM -0700, Mark Douglas wrote:
> Hi,
> 
> I'm currently investigating setting up a Qmail server for a local ISP who is
> having some problems with it's local setup. I've done some work with Qmail,
> however I've never built a production server with it. I'm just wondering
> what kind of system specs you would recommend for a server that is going to
> start out hosting approximately 700 users, with a max of 120 being able to

Notwithstanding that these are pretty unusual ratios for an ISP, 700 users is
a very small number if you're talking about just SMTP, POP3 and some form of
standard authentication, such as NIS+, /etc/passwd.

> access the system at a time. I would like these specs to be mid to high end
> requirements for this setup, to leave a fair amount of room for expanding
> without having to do any work on the server itself.

If I know a system is likely to expand a lot, what I do is ensure that the
system can be distributed at a later stage, this can mean something as simple
as careful selection of DNS names and multi-homing and tcpserver.

Eg, make sure they use smtp.some.domain for sending, pop.some.domain for
fetching and have these on separate IP addresses.

For ISPs with 5000-10000 I typically see a single pentium box with decent
scsi spindles doing just fine. The most important thing is probably ensuring
you have room to grow disk-wise and spindle-wise. So starting with a scsi
controller disk subsystem with a couple of spindles is probably the most
important thing you can do.


Regards.




> I'm currently investigating setting up a Qmail server for a local ISP who
is
> having some problems with it's local setup. I've done some work with
Qmail,
> however I've never built a production server with it. I'm just wondering
> what kind of system specs you would recommend for a server that is going
to
> start out hosting approximately 700 users, with a max of 120 being able
to
> access the system at a time.
> I would like these specs to be mid to high end
> requirements for this setup, to leave a fair amount of room for expanding
> without having to do any work on the server itself.

  The limitations that you'll have the largest trouble dealing with are
network bandwidth and disk I/O.  The Pentium 233 that I used for a mail
server for quite a while handled high loads very well, as far CPU.  The
limiting factors were the 512k pipe, and the throughput to the IDE disk,
not the CPU.

  So.... use SCSI disks, and any recent processor (celeron/PII/PIII).
You'll be able to handle volumes of mail that the ISP hasn't even dreamed
of yet.

steve





Mikhail Kuzminsky <[EMAIL PROTECTED]> wrote:

> 1) Is it possible (and how) to setup Qmail and fastforward
>    for work with /bin/mail as a local delivery agent
>    *and* to deliver all the mail messages (sent to particular user 
>    - to blah, for example) - to the pipe like 
>    |usr/people/blah/program > /usr/people/blah/blahfile ?

Install qmail and fastforward. Put:

  |usr/people/blah/program > /usr/people/blah/blahfile

in ~blah/.qmail.

> 2) Is it possible (and how) to setup qmail-local 
>    (as local delivery agent) to deliver:
>    a) mail for any user to /var/mail/user

No, qmail-local only delivers to $HOME. You can do that with other
delivery agents, though.

>    b) but excluding user blah - for this user mail should be 
>       transferred to pipe
> 
>     |/usr/people/blah/program > /usr/people/blah/blahfile ?

qmail-users can be used to override the default delivery instructions
as well as the .qmail files in a user's directory.

Why don't you jsut tell us what you're trying to do, and we'll tell
you how to do it, if we can.

-Dave




Setup:
LAN, Redhat 6.1, qmail, vpopmail/vchkpw, Mailman list software
Default domain : sanshri.com, Virtual domain : ppp.com 
Mailman list is configured for the virtual domain ppp.com

Problem : Two Delivered-To headers are being generated
- one addressed to the alias, and the other with the actual
destination address - the mailman list owner address. (see below)
I am having this problem not only in this case, but also
when i manually create an alias in the default domain sanshri.com

So far i have never been able to create an alias entry 
without the mail having two delivered-to headers ?
I do not have this problem when i create an alias
through qmailadmin/vpopmail.

The alias setup for the virtual domain is as follows : -
In /domains/ppp.com/.qmail-pppshar
| preline /home/mailman/mail/wrapper post pppshar

In .qmail-default the vdelivermail is called...
and the default line put by vpopmail is there undisturbed
in /var/qmail/users/assign

Headers :
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 1040 invoked from network); 4 May 2000 12:02:28 -0000
Received: from unknown (HELO sanshri.com) ([EMAIL PROTECTED])
  by 192.168.0.15 with SMTP; 4 May 2000 12:02:28 -0000
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 986 invoked from network); 4 May 2000 11:57:05 -0000
Received: from unknown (HELO ppp) (192.168.0.3)
  by 192.168.0.15 with SMTP; 4 May 2000 11:57:05 -0000
Message-ID: <003f01bfb5be$ddd1ef80$0300a8c0@ppp>
From: "listc" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
-------------------------

What could be the problem here ?
I want only one Delivered-To header in the messages.

Please help
ksamy
+--------------------------------------------------------+
PPPshar- Internet for your LAN with one Internet account
netMailshar -Email for every desktop with one 'Net account.
MailAssistant - Speaking Email Notifier
GetAgain - resume interrupted downloads.
Visit http://www.pppindia.com/software
+--------------------------------------------------------+





But its being delivered to 2 places.

This is perfectly normal behavior for qmail.

Why should it matter how many delivered-to headers there are ?

Matt Soffen 
        Web Intranet Developer
        http://www.iso-ne.com/
==============================================
Boss    - "My boss says we need some eunuch programmers."
Dilbert - "I think he means UNIX and I already know UNIX."
Boss    - "Well, if the company nurse comes by, tell her I said 
             never mind."
                                       - Dilbert -
==============================================


> -----Original Message-----
> From: PPPindia [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, May 04, 2000 1:57 PM
> To:   [EMAIL PROTECTED]
> Subject:      Two Delivered-To headers - Why ?
> 
> Setup:
> LAN, Redhat 6.1, qmail, vpopmail/vchkpw, Mailman list software
> Default domain : sanshri.com, Virtual domain : ppp.com 
> Mailman list is configured for the virtual domain ppp.com
> 
> Problem : Two Delivered-To headers are being generated
> - one addressed to the alias, and the other with the actual
> destination address - the mailman list owner address. (see below)
> I am having this problem not only in this case, but also
> when i manually create an alias in the default domain sanshri.com
> 
> So far i have never been able to create an alias entry 
> without the mail having two delivered-to headers ?
> I do not have this problem when i create an alias
> through qmailadmin/vpopmail.
> 
> The alias setup for the virtual domain is as follows : -
> In /domains/ppp.com/.qmail-pppshar
> | preline /home/mailman/mail/wrapper post pppshar
> 
> In .qmail-default the vdelivermail is called...
> and the default line put by vpopmail is there undisturbed
> in /var/qmail/users/assign
> 
> Headers :
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 1040 invoked from network); 4 May 2000 12:02:28 -0000
> Received: from unknown (HELO sanshri.com) ([EMAIL PROTECTED])
>   by 192.168.0.15 with SMTP; 4 May 2000 12:02:28 -0000
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 986 invoked from network); 4 May 2000 11:57:05 -0000
> Received: from unknown (HELO ppp) (192.168.0.3)
>   by 192.168.0.15 with SMTP; 4 May 2000 11:57:05 -0000
> Message-ID: <003f01bfb5be$ddd1ef80$0300a8c0@ppp>
> From: "listc" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> -------------------------
> 
> What could be the problem here ?
> I want only one Delivered-To header in the messages.
> 
> Please help
> ksamy
> +--------------------------------------------------------+
> PPPshar- Internet for your LAN with one Internet account
> netMailshar -Email for every desktop with one 'Net account.
> MailAssistant - Speaking Email Notifier
> GetAgain - resume interrupted downloads.
> Visit http://www.pppindia.com/software
> +--------------------------------------------------------+




"Soffen, Matthew" wrote:
> 
> But its being delivered to 2 places.
> 
> This is perfectly normal behavior for qmail.
> 
> Why should it matter how many delivered-to headers there are ?


No. Only one copy is delivered to one address. First, qmail sents
to the alias, then mailman program is called in the alias.

I have also said ...
 So far i have never been able to create an alias entry
 without the mail having two delivered-to headers ?
I do not have this problem when i create an alias
 through qmailadmin/vpopmail.

I suspect some problem here for me.

If there are two headers, how does a mail server 
(say running in a remote place in an intranet) identify to whom
it is sent to ? 
Or is it "legal" to have more than one delivered-to header ?

ksamy

> 
> > -----Original Message-----
> > From: PPPindia [SMTP:[EMAIL PROTECTED]]
> > Sent: Thursday, May 04, 2000 1:57 PM
> > To:   [EMAIL PROTECTED]
> > Subject:      Two Delivered-To headers - Why ?
> >
> > Setup:
> > LAN, Redhat 6.1, qmail, vpopmail/vchkpw, Mailman list software
> > Default domain : sanshri.com, Virtual domain : ppp.com
> > Mailman list is configured for the virtual domain ppp.com
> >
> > Problem : Two Delivered-To headers are being generated
> > - one addressed to the alias, and the other with the actual
> > destination address - the mailman list owner address. (see below)
> > I am having this problem not only in this case, but also
> > when i manually create an alias in the default domain sanshri.com
> >
> > So far i have never been able to create an alias entry
> > without the mail having two delivered-to headers ?
> > I do not have this problem when i create an alias
> > through qmailadmin/vpopmail.
> >
> > The alias setup for the virtual domain is as follows : -
> > In /domains/ppp.com/.qmail-pppshar
> > | preline /home/mailman/mail/wrapper post pppshar
> >
> > In .qmail-default the vdelivermail is called...
> > and the default line put by vpopmail is there undisturbed
> > in /var/qmail/users/assign
> >
> > Headers :
> > Return-Path: <[EMAIL PROTECTED]>
> > Delivered-To: [EMAIL PROTECTED]
> > Received: (qmail 1040 invoked from network); 4 May 2000 12:02:28 -0000
> > Received: from unknown (HELO sanshri.com) ([EMAIL PROTECTED])
> >   by 192.168.0.15 with SMTP; 4 May 2000 12:02:28 -0000
> > Return-Path: <[EMAIL PROTECTED]>
> > Delivered-To: [EMAIL PROTECTED]
> > Received: (qmail 986 invoked from network); 4 May 2000 11:57:05 -0000
> > Received: from unknown (HELO ppp) (192.168.0.3)
> >   by 192.168.0.15 with SMTP; 4 May 2000 11:57:05 -0000
> > Message-ID: <003f01bfb5be$ddd1ef80$0300a8c0@ppp>
> > From: "listc" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > -------------------------
> >
> > What could be the problem here ?
> > I want only one Delivered-To header in the messages.
> >
> > Please help
> > ksamy

+--------------------------------------------------------+
PPPshar- Internet for your LAN with one Internet account
netMailshar -Email for every desktop with one 'Net account.
MailAssistant - Speaking Email Notifier
GetAgain - resume interrupted downloads.
Visit http://www.pppindia.com/software
+--------------------------------------------------------+




[EMAIL PROTECTED] wrote:

>If there are two headers, how does a mail server 
>(say running in a remote place in an intranet) identify to whom
>it is sent to ? 
>Or is it "legal" to have more than one delivered-to header ?

There can be as many Delivered-To fields as necessary. What's
"illegal" is two identical Delivered-To fields, which means a message
is looping.

-Dave




Dave Sill wrote:
> 
> [EMAIL PROTECTED] wrote:
> 
> >If there are two headers, how does a mail server
> >(say running in a remote place in an intranet) identify to whom
> >it is sent to ?
> >Or is it "legal" to have more than one delivered-to header ?
> 
> There can be as many Delivered-To fields as necessary. What's
> "illegal" is two identical Delivered-To fields, which means a message
> is looping.
> 
> -Dave

But only one delivered-to is generated if i use vpopmail !
If i create an alias .qmail-alias by myself from the command line
i have this two deliv.to header problem ?
In my case, there is only one message to a single recipient.
But the Delivered header shows - one to recipient and other 
delivered-to to list address !!

Otherwise, is it possible to config. qmail so that only one 
delivered-to (that of final recipient) is generated ?
I have seen so many headers of the mails generated by qmail
from different providers and i don't see two delivered-to headers there
?

I am confused now.
ksamy




OK.. How about this example.

1) You have an alias /var/qmail/alias/.qmail-ppp  (in this file you have
&[EMAIL PROTECTED]).
2) You also have an alias /var/qmail/alias/.qmail-pppindia (in this file you
have [EMAIL PROTECTED]).
3) you have /home/ksamy/ as your real account.

An email is sent to [EMAIL PROTECTED]

The mail gets delivered to ppp (then the Delivered-To: ppp header is added).
qmail then sends this to [EMAIL PROTECTED]).

When the mail gets to pppindia another Delivered-To header is added (because
it was delivered to pppindia).

Then the mail gets sent to [EMAIL PROTECTED] where a third header is added
(Delivered-To: ksamy@localhost)

Does this clear it up ?

The gist of it is, whenever qmail delivers a piece of mail (be it to a real
account or a .qmail alias) it adds a delivered-to header to suppress mail
loops.

Matt Soffen 
        Web Intranet Developer
        http://www.iso-ne.com/
==============================================
Boss    - "My boss says we need some eunuch programmers."
Dilbert - "I think he means UNIX and I already know UNIX."
Boss    - "Well, if the company nurse comes by, tell her I said 
             never mind."
                                       - Dilbert -
==============================================



> -----Original Message-----
> From: PPPindia [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, May 04, 2000 3:24 PM
> To:   Dave Sill
> Cc:   [EMAIL PROTECTED]
> Subject:      Re: Two Delivered-To headers - Why ?
> 
> Dave Sill wrote:
> > 
> > [EMAIL PROTECTED] wrote:
> > 
> > >If there are two headers, how does a mail server
> > >(say running in a remote place in an intranet) identify to whom
> > >it is sent to ?
> > >Or is it "legal" to have more than one delivered-to header ?
> > 
> > There can be as many Delivered-To fields as necessary. What's
> > "illegal" is two identical Delivered-To fields, which means a message
> > is looping.
> > 
> > -Dave
> 
> But only one delivered-to is generated if i use vpopmail !
> If i create an alias .qmail-alias by myself from the command line
> i have this two deliv.to header problem ?
> In my case, there is only one message to a single recipient.
> But the Delivered header shows - one to recipient and other 
> delivered-to to list address !!
> 
> Otherwise, is it possible to config. qmail so that only one 
> delivered-to (that of final recipient) is generated ?
> I have seen so many headers of the mails generated by qmail
> from different providers and i don't see two delivered-to headers there
> ?
> 
> I am confused now.
> ksamy




[EMAIL PROTECTED] wrote:

>But only one delivered-to is generated if i use vpopmail !

So what? That means vpopmail deliveries only take a single
delivery. Some deliveries require two, three, ...

>If i create an alias .qmail-alias by myself from the command line
>i have this two deliv.to header problem ?
>In my case, there is only one message to a single recipient.

That's irrelevant to the number of delivery hops.

>But the Delivered header shows - one to recipient and other 
>delivered-to to list address !!

List address? You mean the message was "delvered" to a list alias,
then "delivered" to the recipient? And you're suprised there are two
Delivered-To fields?

>Otherwise, is it possible to config. qmail so that only one 
>delivered-to (that of final recipient) is generated ?

No, that would defeat the loop detection function of the Delivered-To
header.

I think you just need to relax. Multiple Delivered-To headers are
normal.

-Dave




Hello all
        Has anyone been able to get smtp-poplock to work with the following 
configuration

qmail-1.03
tcpserv
qpopper
mbox to ~/Mailbox

 From the doc I must run qmail and tcpserv under supervise. Currently I 
start qmail and tcpserv from one of my rc.d scripts. Any ideas or pointers?

Thanks
Bert Beaudin





On Thu, 4 May 2000, Bert Beaudin wrote:

> Hello all
>       Has anyone been able to get smtp-poplock to work with the following 
> configuration
> 
> qmail-1.03
> tcpserv
> qpopper
> mbox to ~/Mailbox
> 
>  From the doc I must run qmail and tcpserv under supervise. Currently I 
> start qmail and tcpserv from one of my rc.d scripts. Any ideas or pointers?
> 
> Thanks
> Bert Beaudin
> 
> 

I have it in a number of locations.  If you're using qpopper 2.53 you  
need to apply a patch, if you're using 3.0 I haven't done it yet.  In
a nutshell here's what you want to do:

1) patch qpopper
2) install smtp-poplock
3) add the text from the readme in the qpopper patch to smtp-poplock.conf
4) modify your startup line for qmail-smtpd
5) start it all up.

Drop me a note offline if you have any problems.

Vince.
-- 
==========================================================================
Vince Vielhaber -- KA8CSH    email: [EMAIL PROTECTED]    http://www.pop4.net
 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
        Online Campground Directory    http://www.camping-usa.com
       Online Giftshop Superstore    http://www.cloudninegifts.com
==========================================================================







        Hi :), I have several questions.... I have an /var/spool/mail/alias file
that is getting bigger and bigger each moment, what it's is purpose?, I
have taken a lookt at it and it seems that the messages double bouncing are
stored there... how can I directly throw those messages to /dev/null?,
thanks in advance.

Mario Rafael 
e-Mail : [EMAIL PROTECTED]




In all my qmail installations it often takes forever to shutdown or restart 
qmail. I'm getting the message:

"qmail needs more time to finish.  Sleeping 1 second..."

which keeps repeating for sometimes 1/2 or a whole hour. Longer when the 
mail queue is large.

Like, right now it has been about 1.5 hours on one machine which has about 
250,000 messages waiting in the queue.

I'm not quite sure what program is giving the message. I'm on RedHat6.2, 
I'm using ucspi-tcp and daemon tools. My qmail is from 
qmail-1.03-102memphis.src.rpm. I restart qmail with:
/etc/rc.d/init.d/qmail.init restart

Am I doing something wrong, or this how it is supposed to be? And, if so, 
is there a faster way of shutting down qmail? This same thing will happen 
if I need to reboot the server. It might be delayed for 1 hour or so, 
waiting for qmail to shut down.

Nothing is being sent while qmail "needs more time". The remote processes 
die out pretty quickly.

Help!

- Flemming






On Thu, May 04, 2000 at 02:50:24PM -0700, Flemming Funch wrote:
> In all my qmail installations it often takes forever to shutdown or restart 
> qmail. I'm getting the message:
> 
> "qmail needs more time to finish.  Sleeping 1 second..."

$ grep 'needs more time' daemontools-0.61/* qmail-1.03/* ucspi-tcp-0.88/*
$

Well, whatever it is, it's not a message coming from any relevant qmail or
associated program. This message (and the probably source of the problem) is
coming from something specific to your shutdown procedure or possibly
the rpm. 

You'll need to find out what is generating that message and look at it.



Regards.


> 
> which keeps repeating for sometimes 1/2 or a whole hour. Longer when the 
> mail queue is large.
> 
> Like, right now it has been about 1.5 hours on one machine which has about 
> 250,000 messages waiting in the queue.
> 
> I'm not quite sure what program is giving the message. I'm on RedHat6.2, 
> I'm using ucspi-tcp and daemon tools. My qmail is from 
> qmail-1.03-102memphis.src.rpm. I restart qmail with:
> /etc/rc.d/init.d/qmail.init restart
> 
> Am I doing something wrong, or this how it is supposed to be? And, if so, 
> is there a faster way of shutting down qmail? This same thing will happen 
> if I need to reboot the server. It might be delayed for 1 hour or so, 
> waiting for qmail to shut down.
> 
> Nothing is being sent while qmail "needs more time". The remote processes 
> die out pretty quickly.
> 
> Help!
> 
> - Flemming
> 
> 




On Thu, May 04, 2000 at 02:50:24PM -0700, Flemming Funch wrote:
> In all my qmail installations it often takes forever to shutdown or restart 
> qmail. I'm getting the message:
> 
> "qmail needs more time to finish.  Sleeping 1 second..."
> 
> which keeps repeating for sometimes 1/2 or a whole hour. Longer when the 
> mail queue is large.

This is from the SysV init scripts for qmail. What I do:
/etc/rc.d/init.d/qmail stop
ctrl-Z
bg
killall qmail-remote (watch out, killall might not do what you want on
non-linux systems!)

Greetz, Peter.
-- 
Peter van Dijk - student/sysadmin/ircoper/madly in love/pretending coder 
|  
| 'C makes it easy to shoot yourself in the foot;
|  C++ makes it harder, but when you do it blows your whole leg off.'
|                             Bjarne Stroustrup, Inventor of C++




On Thu, 4 May 2000, Flemming Funch wrote:

> In all my qmail installations it often takes forever to shutdown or restart 
> qmail. I'm getting the message:
> 
> "qmail needs more time to finish.  Sleeping 1 second..."

Looks like you are using Harald Hanche-Olsen's startup script. It
waits for qmail-send to die and gives messages like that quoted above
when qmail-send doesn't die quickly. qmail-send won't die until all of its
children have died. So, if you are still delivering some messages via
qmail-remote and/or qmail-local, qmail-send will wait until these
processes have finished. If they are delivering BIG messages, that can
take quite some time.

As others have suggested. If you really want to kill all the qmail
processes, send qmail-send a SIGTERM and then send all running
qmail-remote and qmail-local processes a SIGTERM.

Regards
Peter
----------
Peter Samuel                                [EMAIL PROTECTED]
Technical Consultant                        or at present:
eServ. Pty Ltd                              [EMAIL PROTECTED]
Phone: +61 2 9206 3410                      Fax: +61 2 9281 1301

"If you kill all your unhappy customers, you'll only have happy ones left"





Did not receive any responses to my previous message. Trying again.
Desperately need some pointers.

Thanks,
--
Ashish P. Narvekar
email: [EMAIL PROTECTED]


-----Original Message-----
From: Narvekar, Ashish [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, May 04, 2000 11:16 AM
To: [EMAIL PROTECTED]
Subject: Messages stop getting delivered


I am not the system administrator for qmail or Cyrus and am a newbie to
qmail so bear with any incorrect statements.
I tried to look up the FAQs for qmail but did not find anything specific to
this problem.

We have been seeing a strange problem with mail not being delivered to the
mailbox.

We have qmail (release 1.03) mail transfer agent running on a linux box.

Mail is delivered to Cyrus (IMAP v1.5.14) using the following command

|preline -f /usr/cyrus/bin/deliver -a sb -e sb 


We have an application that listens to the mailboxes on the Cyrus server
using the javamail API. We have situations where more than one application
program may be listening to the same mailbox at the same time.
We run into a situation about once in every two days or so where mail does
not get delivered to the mailboxes. The qmail logs don't give any error
messages. We see that qmail is trying to deliver messages but there is no
notification of successfuly delivery. The imap server is fine though because
we can still process existing emails. Only new messages encounter this. At
this point, our system administrators just give up and reboot both qmail and
Cyrus. Once the servers are rebooted, all the messages appear correctly in
the mailbox (even the new ones that seemed to be hung somewhere). Has
anybody faced this problem before? I know this might not be a qmail problem
but does anybody have any ideas as to what might be going on?
Is it possible that multiple clients accessing the same mailbox is somehow
causing this problem?

Any pointers would be greatly appreciated.

Thanks.

--
Ashish P. Narvekar
email: [EMAIL PROTECTED]




On Thu, May 04, 2000 at 05:59:12PM -0400, Narvekar, Ashish wrote:
> Did not receive any responses to my previous message. Trying again.
> Desperately need some pointers.

You need to provide log information if you want anyone to help.

Paraphrasing the problem thusly:

> not get delivered to the mailboxes. The qmail logs don't give any error
> messages. We see that qmail is trying to deliver messages but there is no
> notification of successfuly delivery. The imap server is fine though because
> we can still process existing emails. Only new messages encounter this. At

Provides no information. How do you know that qmail is trying to deliver? Why not
show us this? How do you know that the delivery is successful? Show us?

> this point, our system administrators just give up and reboot both qmail and
> Cyrus. Once the servers are rebooted, all the messages appear correctly in
> the mailbox (even the new ones that seemed to be hung somewhere). Has
> anybody faced this problem before? I know this might not be a qmail problem
> but does anybody have any ideas as to what might be going on?
> Is it possible that multiple clients accessing the same mailbox is somehow
> causing this problem?
> 
> Any pointers would be greatly appreciated.

If you're not the mail admin and it's all new to you and your only resource
is this mailing list, you might want to seek commercial help.


Regards.





#!/usr/bin/python
#
# A quick hack to filter the ILOVEYOU worm with qmail.  Use:
#
#   $ cp qmail-filter.py /var/qmail/bin
#   $ cd /var/qmail/bin
#   $ chmod +x qmail-filter.py
#   $ mv qmail-queue qmail-queue-real; ln -s qmail-filter.py qmail-queue
#
# Test:
#
#   $ echo "test 1" | mail -s okay myself
#   $ echo "test 2" | mail -s ILOVEYOU myself
#
# You might have to modify the Python path at the top.  This is a
# temporary fix.  Remove it after the dust settles:
#
#   $ cd /var/qmail/bin
#   $ mv qmail-queue-real qmail-queue
#
# Neil Schemenauer <[EMAIL PROTECTED]>

PATTERN = r"^Subject: ILOVEYOU\s*$"
QMAIL_QUEUE = "/var/qmail/bin/qmail-queue-real"

import re
import string
import sys
import os
import tempfile

def mktemp():
    for i in range(10):
        tmp = tempfile.mktemp()
        try:
            fd = os.open(tmp, os.O_RDWR|os.O_CREAT|os.O_EXCL, 0700)
        except OSError:
            continue
        file = os.fdopen(fd, "w+b")
        os.unlink(tmp)
        return file
    return None
    

try:
    mess = mktemp()
    if not mess:
        os._exit(53) # write error
    header = 1
    while 1:
        line = sys.stdin.readline()
        if not line:
            break
        if line in ("\r\n", "\n"):
            header = 0
        if header and re.search(PATTERN, line):
            os._exit(31) # blocked, permanent error
        mess.write(line)
    mess.flush()
    mess.seek(0)
    os.dup2(mess.fileno(), 0)
    os.execv(QMAIL_QUEUE, ())
except:
    os._exit(81) # internal error




For anyone using this filter, i'd like to hear feedback before i modify a
production server. Also, should this interfere with vmailmgr?

On Thu, 4 May 2000, Neil Schemenauer wrote:



  _    __   _____      __   _________      
______________  /_______ ___  ____  /______  John Gonzalez/Net.Tech
__  __ \ __ \  __/_  __ `__ \/ __  /_  ___/ MDC Computers/netMDC!
_  / / / `__/ /_  / / / / / / /_/ / / /__ (505)437-7600/fax-437-3052
/_/ /_/\___/\__/ /_/ /_/ /_/\__,_/  \___/ http://www.netmdc.com
[---------------------------------------------[system info]-----------]
  4:05pm  up 100 days, 23:02,  7 users,  load average: 0.06, 0.59, 0.64





On Thu, May 04, 2000 at 04:08:40PM -0600, John Gonzalez/netMDC admin wrote:
> For anyone using this filter, i'd like to hear feedback before i modify a
> production server. Also, should this interfere with vmailmgr?

Its not too efficient so a C version of would be better on a high
volume mail server.  I don't know what vmailmgr it shouldn't
cause a problem.  The qmail-queue interface is very simple.

Updated versions of this script will appear here:

    http://www.enme.ucalgary.ca/~nascheme/qmail-filter.py

I have only tested it on my machine so I would be interested in
feedback as well.


    Neil

-- 
"Simplicity does not precede complexity, but follows it." -- Alan Perlis




On Thu, May 04, 2000 at 04:08:40PM -0600, John Gonzalez/netMDC admin wrote:
> For anyone using this filter, i'd like to hear feedback before i modify a
> production server. Also, should this interfere with vmailmgr?

If you are using qmail patched with the QMAILQUEUE patch, you can use
qmail-qfilter and the following two scripts to achieve the same effect.
I am using this on two production servers (firewalls, actually), and it
should have no impact on vmailmgr or vpopmail.

Save the following as /path/love-filter:
#!/usr/bin/perl
# Header scan
while(<>) {
  exit(31) if /^Subject:\s*ILOVEYOU\s*$/o;
  print;
  last if /^\s*$/o;
}
# Body scan
while(<>) {
  exit(31) if /name="LOVE-LETTER-FOR-YOU.TXT.vbs"/o;
  print;
}

Save the following as /path/smtpd-queue:
#!/bin/sh
exec /usr/bin/qmail-qfilter /path/love-filter

Then add the following to the end of every line in smtpd.rules and
rebuild the smtpd.cdb file:
        ,QMAILQUEUE="/path/smtpd-queue"

(Replace "/path" with some appropriate path to where you want the
scripts to go).
-- 
Bruce Guenter <[EMAIL PROTECTED]>                       http://em.ca/~bruceg/




On Thu, May 04, 2000 at 05:31:04PM -0600, Neil Schemenauer wrote:
> On Thu, May 04, 2000 at 04:21:45PM -0600, Bruce Guenter wrote:
> > If you are using qmail patched with the QMAILQUEUE patch, you can use
> > qmail-qfilter and the following two scripts to achieve the same effect.
> QMAILQUEUE is nicer but I think a lot of admins are not using
> this patch and want a quick fix.  Do you have any ideas on
> filtering this with standard qmail?

When you compile qmail-qfilter, define the C symbol QMAIL_QUEUE to some
other path.  Move the real qmail-queue to that path, and install a
script that calls qmail-qfilter as qmail-queue, and use the previously
posted love-filter script.  That's the only other way I can think of.
-- 
Bruce Guenter <[EMAIL PROTECTED]>                       http://em.ca/~bruceg/




>   exit(31) if /name="LOVE-LETTER-FOR-YOU.TXT.vbs"/o;

Am I missing something here?

Anyone can rename that .vbs to what ever they want and send it around again
so wouldn't it be more efficient to filter all .vbs attachments?  Before
some one yells "We trade vbs files"  zip them up and send away.  Same with
executables.  If someone is dumb enough to run an exe from any source before
scanning it I don't think they will be winzip users so filtering an exe is
not out of the question either.

It seems we MUST protect the aol user types from themselves so we don't get
hurt by their careless actions.  Other times it was "so what it is just
newbies getting burned" but not this time.  Not when we lag servers to their
knees.

Comments not flames accepted ;)

Rick





Don't forget - this is a general problem - you need an antivirus solution.

You can try my scan4virus anti-virus harness. Specifically written for
Qmail. Capable of multi-scanner support and will FEED YOUR CAT! :-)

[I used it's perlscanner interface to match on the attachment filename while
waiting for the Antivirus vendors to come up with an "official" fix :-)]


See http://www.geocities.com/jhaar/scan4virus/


-- 
Cheers

Jason Haar

Unix/Network Specialist, Trimble NZ
Phone: +64 3 9635 377 Fax: +64 3 9635 417
               





Can you sight pros/cons of using your antivirus software compared to
AmaVis?

On Fri, 5 May 2000, Jason Haar wrote:

> Don't forget - this is a general problem - you need an antivirus solution.
> 
> You can try my scan4virus anti-virus harness. Specifically written for
> Qmail. Capable of multi-scanner support and will FEED YOUR CAT! :-)
> 
> [I used it's perlscanner interface to match on the attachment filename while
> waiting for the Antivirus vendors to come up with an "official" fix :-)]
> 
> 
> See http://www.geocities.com/jhaar/scan4virus/
> 





On Thu, May 04, 2000 at 07:28:32PM -0400, Searcher wrote:
> >   exit(31) if /name="LOVE-LETTER-FOR-YOU.TXT.vbs"/o;
> 
> Am I missing something here?
> 
> Anyone can rename that .vbs to what ever they want and send it around again
> so wouldn't it be more efficient to filter all .vbs attachments?

Nope, you're exactly right.  However, the question was, how do I filter
the "ILOVEYOU" worm, and the above is a quick (and somewhat dirty)
answer.  If you know how to identify VBS source, with the absence of a
MIME type, please tell us.  I intend to do this for my employers, so I'm
not just being facetious.
-- 
Bruce Guenter <[EMAIL PROTECTED]>                       http://em.ca/~bruceg/




On Thu, May 04, 2000 at 07:28:32PM -0400, Searcher wrote:
> >   exit(31) if /name="LOVE-LETTER-FOR-YOU.TXT.vbs"/o;
> 
> Am I missing something here?

Nothing except that fact that the real solution is to fix the
broken mail clients.  IMHO, virus scanners and the like are
fundamentally broken.


    Neil

-- 
"The lyf so short, the craft so long to lerne." -- Chaucer




"Benjamin de los Angeles Jr." wrote:
> 
> Can you sight pros/cons of using your antivirus software compared to
> AmaVis?
> > [I used it's perlscanner interface to match on the attachment filename while
> > waiting for the Antivirus vendors to come up with an "official" fix :-)]
> > See http://www.geocities.com/jhaar/scan4virus/

Well, I think you refer to AMaViS-Perl? AMaViS-Perl does not require any
qmail patch(es) and supports more antivirus software. 
scan4virus provides a "generic filter/scanner" to filter out eMails with
a specific attachment name - which in case of "I love you" is a good
thing, but it's very easy to change the file name (or the subject line),
according to BugTraq this has happend. 
(Btw, stopping hoaxes is a also a difficult task - anyone can change
subject or the body easily ...).
Well, scan4virus is specific to qmail, whereas AMaViS supports sendmail
& postfix, too (the shell script version supports exim, too).

Jason? :-)

best regards,
Rainer Link
-- 
Rainer Link  | Member of Virus Help Munich (www.vhm.haitec.de)           
[EMAIL PROTECTED] | Member of AMaViS Development Team (amavis.org)            
rainer.w3.to | Maintainer FAQ "antivirus for Linux" (av-linux.w3.to)




but hoe can one use Amavis with qmail, p'se help
Eric

On Fri, 5 May 2000, Rainer Link wrote:

> "Benjamin de los Angeles Jr." wrote:
> > 
> > Can you sight pros/cons of using your antivirus software compared to
> > AmaVis?
> > > [I used it's perlscanner interface to match on the attachment filename while
> > > waiting for the Antivirus vendors to come up with an "official" fix :-)]
> > > See http://www.geocities.com/jhaar/scan4virus/
> 
> Well, I think you refer to AMaViS-Perl? AMaViS-Perl does not require any
> qmail patch(es) and supports more antivirus software. 
> scan4virus provides a "generic filter/scanner" to filter out eMails with
> a specific attachment name - which in case of "I love you" is a good
> thing, but it's very easy to change the file name (or the subject line),
> according to BugTraq this has happend. 
> (Btw, stopping hoaxes is a also a difficult task - anyone can change
> subject or the body easily ...).
> Well, scan4virus is specific to qmail, whereas AMaViS supports sendmail
> & postfix, too (the shell script version supports exim, too).
> 
> Jason? :-)
> 
> best regards,
> Rainer Link
> -- 
> Rainer Link  | Member of Virus Help Munich (www.vhm.haitec.de)           
> [EMAIL PROTECTED] | Member of AMaViS Development Team (amavis.org)            
> rainer.w3.to | Maintainer FAQ "antivirus for Linux" (av-linux.w3.to)
> 





On Fri, May 05, 2000 at 12:18:11PM +1200, Jason Haar wrote:
> You can try my scan4virus anti-virus harness. Specifically written for
> Qmail. Capable of multi-scanner support and will FEED YOUR CAT! :-)

See, I told you all day yesterday... ;->

> [I used it's perlscanner interface to match on the attachment filename while
> waiting for the Antivirus vendors to come up with an "official" fix :-)]

Just wanted to say thank you again, Jason! I did the same thing. Shame the
radio news didn't say what size that attachment was (yes, that virus was
on radio an tv news in Sweden yesterday)

H+BEDV was first out for me. You might want to notice that their German
version is updated more often than the English version... And their
program is free for personal use. http://www.antivir.de/

> See http://www.geocities.com/jhaar/scan4virus/

-Johan
-- 
Johan Almqvist




On Fri, May 05, 2000 at 10:19:53AM +0200, Rainer Link wrote:
> "Benjamin de los Angeles Jr." wrote:
> > 
> > Can you sight pros/cons of using your antivirus software compared to
> > AmaVis?
> > > [I used it's perlscanner interface to match on the attachment filename while
> > > waiting for the Antivirus vendors to come up with an "official" fix :-)]
> > > See http://www.geocities.com/jhaar/scan4virus/
> 
> Well, I think you refer to AMaViS-Perl? AMaViS-Perl does not require any
> qmail patch(es) and supports more antivirus software. 

Well, nor does scan4virus. You could just move the real qmail-queue to
another location, call the scan4virus script ("antivirus-qmail-queue.pl")
qmail-queue and change the "real" qmail-queue path and name in that
script...

> scan4virus provides a "generic filter/scanner" to filter out eMails with
> a specific attachment name - which in case of "I love you" is a good
> thing, but it's very easy to change the file name (or the subject line),
> according to BugTraq this has happend.

Yes, but scan4virus also interfaces to all known(?) virus scanners out
there, if they're installed. And for such quick fixes as were needed in
this case, the attachment name fix was the most effective. I now stop all
.vbs files. Can't see why someone would send one of these.

> Well, scan4virus is specific to qmail, whereas AMaViS supports sendmail
> & postfix, too (the shell script version supports exim, too).

Oh, I'm sure scan4virus can be hacked into sendmail.cf if you'd want
that...

-Johan
-- 
Johan Almqvist




Dave Kitabjian wrote:
> 
> Regarding: http://web.infoave.net/~dsill/lwq.html#multi-rcpt
> 
> Dave S,
> 
> I'm having trouble accepting this logic. You mention 3 options:
> 
> "Say you're an MTA, and one of your users sends a message to three
> people on hostx.example.com. There are several ways you could do this.
> 
>         1. You could open an SMTP connection to hostx, send a copy of
> the message to the first user, send a copy to the second user, send a
> copy to the third user, then close the connection.
>         2. You could start three processes, each of which opens an SMTP
> connection to hostx, sends a copy of the message to one of the users,
> then closes the connection.
>         3. You could open an SMTP connection to host, send a copy of the
> message addressed to all three users, then close the connection. "
> 
> and that qmail uses option #2. Clearly, the rank of efficiency is, from
> best to worst,: 3, 1, 2

You have analyzed the situation (or part of it at least) correctly.

Thing is, Dan optimized for SECURITY not EFFICIENCY.  There exists or
may exist a class of broken  MTA which cannot process multiple receipts
correctly; or which leaks bcc information during a multiple receipt.

I wrote some code that pre-invokes qmail-remote, feel free to give
me credit when you use it, it is at
http://www.davidnicol.com/qmail.html
and I will be revising is as needed (into its own file most likely)

Before I patch qmail-smtpd to do essentially that preprocess when
there are multiple recipients, instead of whatever it normally does,
somebody talk me out of it?

My thought is, if mail only gets into the queue after it has
been attempted once, then mail in the queue has already failed at
least once and properly should be attempted in trickles.  And also

Chris Hardie writes:
> Clearly it's a complicated issue, but it seems that as broadband access to
> the net becomes more common, businesses are going to expect to be able to
> use one "interface" to do all their communications, be it plain text
> messages or large multi-megabyte file transfers.  I cringe every time
> someone sends me a 7 MB mail message, but it's difficult to explain to
> them why this is a bad idea.
> 
> I'd be interested to hear if anyone's found a good general solution to
> this in a production/business environment.

One approach might be to rig the MTA to unpack attachments, give them
unique and secret file names, store them in per-user directories 
where a http server on the MTA host can see them (but not server directory
indexes) and replace the attachments with links to the files.  This 
would have the effect of server-side-selecting the "view attachments as
links" option present in some MUAs.

Fine-grained administrative control could be asserted over how much
space in e-mail attachments you may have before the last used gets
cleared to make space, and so forth.  This is what Scott Gifford
suggested, although he wanted to add password-protection instead
of giving unique, random file names.


__________________________________________________________________
                          David Nicol 816.235.1187 [EMAIL PROTECTED]
        "Lord Macbeth knew he was approaching the SITE of the rout
 from the SIGHT of odd body parts scattered on the blasted heath."






Anyone got any
.mai conversion tools?

 
__________________________________________________________________
                          David Nicol 816.235.1187 [EMAIL PROTECTED]
        "Lord Macbeth knew he was approaching the SITE of the rout
 from the SIGHT of odd body parts scattered on the blasted heath."




I have heard of a patch or program that can help me support clients that use
ETRN.

Can somebody point me to the sources?

Thanks,

Jose de Leon
System Administrator
InVision Telecommunications
(209) 549-8800






I use the serialmail package from DJB. There's a file in the package 
that describes how to set-up AUTOTURN. Works like a champ. Not quite 
ETRN, but from what I can tell, enough of it's functionality to make 
Exchange servers happy.

jon

At 4:56 PM -0700 5/4/00, Jose de Leon wrote:
>I have heard of a patch or program that can help me support clients that use
>ETRN.
>
>Can somebody point me to the sources?
>
>Thanks,
>
>Jose de Leon
>System Administrator
>InVision Telecommunications
>(209) 549-8800





Thanks Jon for the suggestion.  I looked at AutoTURN.  It won't work for us
as we don't want to provide a static IP to this customer.  As far as I can
tell, all I really need to do is get the clients IP address when logged in
somehow, and then initiate maildir2smtp while they are online.



Jose de Leon
System Administrator
InVision Telecommunications
(209) 549-8800

----- Original Message -----
From: Jon Rust <[EMAIL PROTECTED]>
To: Jose de Leon <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, May 04, 2000 5:11 PM
Subject: Re: ETRN and QMail


I use the serialmail package from DJB. There's a file in the package
that describes how to set-up AUTOTURN. Works like a champ. Not quite
ETRN, but from what I can tell, enough of it's functionality to make
Exchange servers happy.

jon

At 4:56 PM -0700 5/4/00, Jose de Leon wrote:
>I have heard of a patch or program that can help me support clients that
use
>ETRN.
>
>Can somebody point me to the sources?
>
>Thanks,
>
>Jose de Leon
>System Administrator
>InVision Telecommunications
>(209) 549-8800







At 5:33 PM -0700 5/4/00, Jose de Leon wrote:
>Thanks Jon for the suggestion.  I looked at AutoTURN.  It won't work for us
>as we don't want to provide a static IP to this customer.  As far as I can
>tell, all I really need to do is get the clients IP address when logged in
>somehow, and then initiate maildir2smtp while they are online.

You could set-up a separate port for them. For example make tcpserver 
listen on port 1025 and run the AutoTURN stuff from there. It would 
be their own private port, so the AutoTURN script could be dedicated 
to them. I guess what i'm saying is that it's possible to do this 
with a dynamic IP. :-)

jon




On Thu, May 04, 2000 at 05:39:23PM -0700, Jon Rust wrote:
> At 5:33 PM -0700 5/4/00, Jose de Leon wrote:
> >Thanks Jon for the suggestion.  I looked at AutoTURN.  It won't work for us
> >as we don't want to provide a static IP to this customer.  As far as I can
> >tell, all I really need to do is get the clients IP address when logged in
> >somehow, and then initiate maildir2smtp while they are online.
> 
> You could set-up a separate port for them. For example make tcpserver 
> listen on port 1025 and run the AutoTURN stuff from there. It would 
> be their own private port, so the AutoTURN script could be dedicated 
> to them. I guess what i'm saying is that it's possible to do this 
> with a dynamic IP. :-)

So much for security, eh?

Greetz, Peter.
-- 
Peter van Dijk - student/sysadmin/ircoper/madly in love/pretending coder 
|  
| 'C makes it easy to shoot yourself in the foot;
|  C++ makes it harder, but when you do it blows your whole leg off.'
|                             Bjarne Stroustrup, Inventor of C++




At 2:43 AM +0200 5/5/00, Peter van Dijk wrote:
>So much for security, eh?
>

Hrmf. You have apoint there. :-/ Guess I should think before typing. 
Of course, by limiting the range of IPs allowed to trigger the 
download, you could decrease the exposure, but it would be far from 
perfect.

(crawling back into lurk mode)

jon




I suspect someone is sending bulk mail using our qmail server, as we are =
getting a lot of rebounced mail and delivery failure notice.
How can I stop that or tracking the real sender?

Luke





Hello,
 
Is there a limitation for the amount of users courier imap and vpopmail can support using the db type files? Is it better to go with an sql database instead?
 
 
Thanks,
 
Cono.




I applied the patch, did a make... so far so good. Then I stopped 
qmail (qmail-ctl stop) and

    mail:/usr/local/src/qmail-1.03{36} # make setup check
    ( ( ./compile tryrsolv.c && ./load tryrsolv dns.o  ipalloc.o ip.o \
     stralloc.a alloc.a error.a fs.a str.a  -lresolv `cat socket.lib` ) \
     >/dev/null 2>&1  && echo -lresolv || exit 0 ) > dns.lib
    rm -f tryrsolv.o tryrsolv
    ./install
    install: fatal: unable to write .../bin/qmail-queue: text busy
    *** Error code 111

    Stop.

Hrmf. Anyhelp for this non-programmer-type?

jon




On Thu, May 04, 2000 at 05:24:59PM -0700, Jon Rust wrote:
[snip]
> 
> Hrmf. Anyhelp for this non-programmer-type?

Something was still busy injecting mail thru qmail-queue.

Greetz, Peter.
-- 
Peter van Dijk - student/sysadmin/ircoper/madly in love/pretending coder 
|  
| 'C makes it easy to shoot yourself in the foot;
|  C++ makes it harder, but when you do it blows your whole leg off.'
|                             Bjarne Stroustrup, Inventor of C++




At 2:35 AM +0200 5/5/00, Peter van Dijk wrote:
>On Thu, May 04, 2000 at 05:24:59PM -0700, Jon Rust wrote:
>[snip]
>>
>>  Hrmf. Anyhelp for this non-programmer-type?
>
>Something was still busy injecting mail thru qmail-queue.
>

Ahhh... I see. Gotta wait longer after telling qmail to stop. :-) Gotcha.

Thanks,
jon




Greetings,

I am relatively new to qmail, so forgive me if this is too simple...

With all of the current goings on about the "luv bug", I have a question 
concerning qmail and filtering.  My customer base uses sendmail primarily, 
while I have been experimenting with qmail at my site.  With the sendmail 
sites I was able to implement a configuration "hack" to stop initial 
instances of the message.  I was also able to implement a global procmail 
filter to accomplish the same thing.

My question is this:
Does qmail have the ability to implement global filters.  I know that I can 
put procmail lines in each users .qmail file, but that seems like alot of work.

Thanks in advance,
- Bennett





Hi. I wanted to reject email with macthing words in the Subject. This
triggered me because of the ILOVEYOU email.

Anyways, I was able to do it using procmail and qmail. I saw it in the FAQ.
But I've got a different qmail setup. My qmail is configured as an email
gateway. So, there are no users on my qmail servers. So, how do I solve this
problem?

Thanks in advance!

Ronneil




Hi,
I don't know whether this is a qmail or courier-imap question, 
but I am hoping someone can help me out. I am trying to set up
shared folders using courier-imap and qmail, but I am having 
problems.

The problem is that the shared system ignores the ./new dir and
only looks at ./cur . This means that the shared folder works
fine for emails copied into the shared folder, but emails
delivered to the directory don't show up.
Is there a way to make the emails turn up in cur instead of new?
thanks,
Colin





 




Hi,

I gathered some infos about setting up QMAIL under SUSE Linux in my
Web-page http://www.fehcom.de/qmail_en.html

Additionally, I have integreted the MFCHECK patch into my SPAMCONTROL with
some gadgets. 

Everybody is welcome to use and comment it.

Cheers.
eh.
+-----------------------------------------------------------------------+
|  fff        hh         http://www.fehcom.de        Dr. Erwin Hoffmann |
| ff          hh                                                        |
| ff    eee   hhhh      ccc   ooo    mm mm  mm       Wiener Weg 8       |
| fff  ee ee  hh  hh   cc   oo   oo  mmm  mm  mm     50858 Koeln        |
| ff  ee eee  hh  hh  cc   oo     oo mm   mm  mm                        |
| ff  eee     hh  hh   cc   oo   oo  mm   mm  mm     Tel 0221 484 4923  |
| ff   eeee   hh  hh    ccc   ooo    mm   mm  mm     Fax 0221 484 4924  |
+-----------------------------------------------------------------------+


Reply via email to