qmail Digest 19 May 2001 10:00:00 -0000 Issue 1369

Topics (messages 62720 through 62763):

Large posting
        62720 by: Manuel de Ferran
        62721 by: Peter van Dijk
        62722 by: Faried Nawaz

Re: unauthorized relay :-(
        62723 by: Todd Finney
        62725 by: Henning Brauer
        62727 by: Roger Walker
        62728 by: Roger Walker
        62730 by: Mark Delany
        62735 by: Roger Walker
        62738 by: Mark Delany
        62748 by: Roger Walker

Re: Unsubscribe Me
        62724 by: Mohamed Yasin
        62732 by: Joy Hundley

Re: qmail bounce patch help
        62726 by: Santosh Pasi

Re: bare linefeed problem by worm?
        62729 by: Markus Schaefer

Unauthorized relay :-( ==> formmail
        62731 by: Roger Walker

qmail-inject internals question
        62733 by: dan.kelley
        62737 by: Peter van Dijk
        62742 by: Mark Delany

migrating from qmail-pop to vpopmail
        62734 by: Fabio Pedrazzoli
        62739 by: Charles Cazabon
        62741 by: Henning Brauer

Re: How to send individual messages?
        62736 by: Charles Cazabon

Re: Where can I put pop3 log
        62740 by: Karsten W. Rohrbach

Re: qmail and sqwebmail
        62743 by: Joshua Nichols

Qmail-Sqwebmail-LDAP
        62744 by: Remo Mattei

doublebounceto ignored??
        62745 by: David Boone
        62747 by: Charles Cazabon
        62749 by: Markus Stumpf
        62750 by: Dave Sill

procmail and spambouncer
        62746 by: Gawain Reifsnyder
        62752 by: Charles Cazabon

#4.2.1 access denied
        62751 by: Tom Beer
        62753 by: Charles Cazabon
        62754 by: Markus Stumpf

qmail + mutt
        62755 by: Bruno Wolff III

patch combination: qmtp + outgoingip
        62756 by: Jim Steele
        62762 by: Jim Steele

vpopmail or sqwebmail bypasses qmail?
        62757 by: Rick Stanley
        62759 by: Einar Bordewich

My custom messages returned by rblsmtp?
        62758 by: Ed Weinberg

Migration to qmail
        62760 by: vincent.idigi.net.my

Re: Lotsa messages from perl with qmail-remote
        62761 by: John R. Levine

QMail configuration problem
        62763 by: Fares Gianluca

Administrivia:

To unsubscribe from the digest, e-mail:
        [EMAIL PROTECTED]

To subscribe to the digest, e-mail:
        [EMAIL PROTECTED]

To bug my human owner, e-mail:
        [EMAIL PROTECTED]

To post to the list, e-mail:
        [EMAIL PROTECTED]


----------------------------------------------------------------------


I have to send an email to about 5000 persons.

I was wondering if it s better to use an ezmlm list or a .qmail-smth
which contains the list of the users.

Regards,

/Manuel




On Fri, May 18, 2001 at 11:58:17AM +0200, Manuel de Ferran wrote:
> I have to send an email to about 5000 persons.
> 
> I was wondering if it s better to use an ezmlm list or a .qmail-smth
> which contains the list of the users.

ezmlm, because it does bounce-handling.

Greetz, Peter.




Manuel de Ferran wrote:

  I was wondering if it s better to use an ezmlm list or a .qmail-smth
  which contains the list of the users.

ezmlm.  It's what it was designed for.




At 04:47 AM 5/18/01, Henning Brauer wrote:
>On Thu, May 17, 2001 at 08:47:46PM -0400, Todd Finney wrote:
> > At 08:55 PM 5/17/01, Roger Walker wrote:
> > >:allow
> > Doesn't that last allow line cause an open relay?
>
>NO! The last :allow is needed for other Mailservers delivering mail to 
>your
>domains listed in rcpthosts. Unless RELAYCLIENT is set qmail does not 
>relay
>to foreign domains.

No need to shout there, Henning.  Please note the question mark at the 
end of my sentence; I wasn't sure.

If you must use caps, please save them for the idiots that can't figure 
out how to unsubscribe.

cheers,
Todd






On Fri, May 18, 2001 at 06:53:30AM -0400, Todd Finney wrote:
> At 04:47 AM 5/18/01, Henning Brauer wrote:
> >On Thu, May 17, 2001 at 08:47:46PM -0400, Todd Finney wrote:
> > > At 08:55 PM 5/17/01, Roger Walker wrote:
> > > >:allow
> > > Doesn't that last allow line cause an open relay?
> >NO! The last :allow is needed for other Mailservers delivering mail to 
> >your
> >domains listed in rcpthosts. Unless RELAYCLIENT is set qmail does not 
> >relay
> >to foreign domains.
> No need to shout there, Henning.  

No offense intended, Todd. Just meant as clarification.


-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany               *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)




On 18 May 2001, Mark Delany wrote:

> So you are saying that you've checked the qmail-send logs and there is
> no injection that matches the headers of the bounce? Are you sure?
>
> If you found a match, then the uid trail will tell you who did it.

        The log portion I supplied is indicative of all of the stuff
related to the aol mail. The PID associated with those messages was not
there when I became aware of what was happening, so I can't definitively
trace it.

> Well, if you showed us the headers and corresponding log entries from
> qmail-send and tcpserver, we wouldn't have to speculate would we now?
> Surely as a person who "administer[s] mail servers for a major ISP"
> you realise the value that concrete data has in reducing speculation.

        All of the logs for qmail I have go to a single file. I do not
have headers, or I would probably have been able to definitely say that
this was a relay (or generated directly from my system by a cracker).

-- 
Roger Walker                         <http://www.rat-hole.com>
Voice/Fax 1-780-440-2685             <http://www.man-from-linux.com>
"HIS Pain; YOUR Gain"                <http://www.rope.net>
<http://www.rope.net/signature.html>





On 18 May 2001, John R. Levine wrote:

> Any chance it's coming from formmail.pl or a similar insecure CGI?
> That seems a lot more likely than spam sneaking in via SMTP.

        Actually, that thought just occured to me this morning. I was
talking with the other person who has access to the system and he
mentioned that the only "anonymous" address he ever saw was from a
formmail script. I have an altered one that allows those I've blocked to
contact me (i.e. relays, spammers, scanners) when their email won't
otherwise get through.

        Since the form creates email on the system, qmail would not block
the outbound "relay." Unfortunately, I might not be able to get to this
until next week. Fortunately, it seems to have been a one time occurance.
However, I now have something to go on that sounds reasonable, and it's a
good idea for others to check their setups, too.

        Thanks.

-- 
Roger Walker                         <http://www.rat-hole.com>
Voice/Fax 1-780-440-2685             <http://www.man-from-linux.com>
"HIS Pain; YOUR Gain"                <http://www.rope.net>
<http://www.rope.net/signature.html>





On Fri, May 18, 2001 at 06:55:59AM -0600, Roger Walker wrote:
> On 18 May 2001, Mark Delany wrote:
> 
> > So you are saying that you've checked the qmail-send logs and there is
> > no injection that matches the headers of the bounce? Are you sure?
> >
> > If you found a match, then the uid trail will tell you who did it.
> 
>       The log portion I supplied is indicative of all of the stuff
> related to the aol mail. The PID associated with those messages was not
> there when I became aware of what was happening, so I can't definitively
> trace it.

UID != PID

And, er, qmail-send (with UID) and (tcpserver with PID)
unconditionally log their UID and PID, so what exactly do you mean by
"was not there"?


But, AOL doesn't help matters as their bounces don't return any
original header information, blah.


Regards.




On 18 May 2001, Mark Delany wrote:

> >     The log portion I supplied is indicative of all of the stuff
> > related to the aol mail. The PID associated with those messages was not
> > there when I became aware of what was happening, so I can't definitively
> > trace it.
>
> UID != PID

        Sorry, I was distracted. The UID was for apache, further evidence
that this was done through a formmail script.

> And, er, qmail-send (with UID) and (tcpserver with PID)
> unconditionally log their UID and PID, so what exactly do you mean by
> "was not there"?

        I do not seem to have any tcpserver logs, except for my RBL setup.
Here's the tcpserver invocation:

        tcpserver -p -x /etc/tcpserver/tcp.smtp.cdb -u 301 -g 300 0 smtp \
                /usr/local/bin/rblsmtpd \
                -rrbl.maps.vix.com \
                -rinputs.orbs.org \
                -routputs.orbs.org \
                -rspamsources.orbs.org \
                -rspamsource-netblocks.orbs.org \
                -runtestable-netblocks.orbs.org \
                -rmanual.orbs.org \
                -rdialups.mail-abuse.org \
                -rrbl.rope.net \
                /var/qmail/bin/qmail-smtpd 2>&1 \
                | setuidgid qmaill tai64n | setuidgid qmaill tai64nlocal \
                | setuidgid qmaill multilog +\* /var/log/rbl &

> But, AOL doesn't help matters as their bounces don't return any
> original header information, blah.

        So I've noticed...

-- 
Roger Walker                         <http://www.rat-hole.com>
Voice/Fax 1-780-440-2685             <http://www.man-from-linux.com>
"HIS Pain; YOUR Gain"                <http://www.rope.net>
<http://www.rope.net/signature.html>






On Fri, May 18, 2001 at 08:37:37AM -0600, Roger Walker wrote:
> > UID != PID
> 
>       Sorry, I was distracted. The UID was for apache, further evidence
> that this was done through a formmail script.

Ok... And what did your apache logs say at the time? They are logging
IP addresses, right?

> Here's the tcpserver invocation:
> 
>         tcpserver -p -x /etc/tcpserver/tcp.smtp.cdb -u 301 -g 300 0 smtp \
>                 /usr/local/bin/rblsmtpd \
>                 -rrbl.maps.vix.com \
>                 -rinputs.orbs.org \
>                 -routputs.orbs.org \
>                 -rspamsources.orbs.org \
>                 -rspamsource-netblocks.orbs.org \
>                 -runtestable-netblocks.orbs.org \
>                 -rmanual.orbs.org \
>                 -rdialups.mail-abuse.org \
>                 -rrbl.rope.net \
>                 /var/qmail/bin/qmail-smtpd 2>&1 \
>                 | setuidgid qmaill tai64n | setuidgid qmaill tai64nlocal \
>                 | setuidgid qmaill multilog +\* /var/log/rbl &

Superficially that looks ok, again kinda different from what one
usually sees.

So there are not entries in /var/log/rbl/current like:

@400000003b053761268c7a14 tcpserver: pid 16838 from 131.193.178.181?


Regards.




On 18 May 2001, Mark Delany wrote:

> Ok... And what did your apache logs say at the time? They are logging
> IP addresses, right?

        I had to disappear for some other commitments, so I was gone for a
few hours :-)

        I've removed the form completely. I'll have to do up another
script when I get some time in a few days. I've got another one that
I wrote that doesn't do formmail stuff, so I can adapt it.

        I did check the logs and now I can pursue this further. I'll have
to check my RBL and blocks to see if this is in retaliation (which, given
the few in number messages, makes sense). Here's an example entry:

cc172422-a.union1.nj.home.com - - [17/May/2001:15:38:23 -0600] "GET
/cgi-bin/formmail.pl?[EMAIL PROTECTED]&subject=Someone%20Has%20Sent%20You%
20An%20eCard!&=Hello,%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%
20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%2
0%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Someone%20has%20sent%20you%20an%20eCard%20-%20Electronic%20Greeting%20Card!%20%20%20%20%20%20%20
%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20<%20a%20href%3D"aol://1223:26260/http://www.wo0tspamma.net/mypics";>
Click%20Here%20To%20Pick%20It%20Up!</a>&[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],Cheerbarb
[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],Gu
[EMAIL PROTECTED], HTTP/1.1" 200 1169 "-" "Mozilla/4.0 (compatible; MSIE 5.5;
Windows 98; Win 9x 4.90)"

> > Here's the tcpserver invocation:
> >
> >         tcpserver -p -x /etc/tcpserver/tcp.smtp.cdb -u 301 -g 300 0 smtp \
> >                 /usr/local/bin/rblsmtpd \
> >                 -rrbl.maps.vix.com \
> >                 -rinputs.orbs.org \
> >                 -routputs.orbs.org \
> >                 -rspamsources.orbs.org \
> >                 -rspamsource-netblocks.orbs.org \
> >                 -runtestable-netblocks.orbs.org \
> >                 -rmanual.orbs.org \
> >                 -rdialups.mail-abuse.org \
> >                 -rrbl.rope.net \
> >                 /var/qmail/bin/qmail-smtpd 2>&1 \
> >                 | setuidgid qmaill tai64n | setuidgid qmaill tai64nlocal \
> >                 | setuidgid qmaill multilog +\* /var/log/rbl &
>
> Superficially that looks ok, again kinda different from what one
> usually sees.
>
> So there are not entries in /var/log/rbl/current like:
>
> @400000003b053761268c7a14 tcpserver: pid 16838 from 131.193.178.181?

        No. Now we are onto a different topic, but I would still
appreciate some input on this. I noticed when I set this up that I was
only getting the RBL stuff logged.

        Again, I really appreciate the help I've received from everyone on
the list. Thanks.

-- 
Roger Walker                         <http://www.rat-hole.com>
Voice/Fax 1-780-440-2685             <http://www.man-from-linux.com>
"HIS Pain; YOUR Gain"                <http://www.rope.net>
<http://www.rope.net/signature.html>





Unsubscribe






Joy Hundley
Internet Services
Service Transport
800-528-1616 ext. 240

 Visit us on the Web at www.service-transport.com




Hi all,

No single reply, no problem.
I got the solution, it was my mistake while applying patching.
Actually, i have two patches one for ldap and other bounce patch.

So while appying patch, both patches patch same qmail-send.c file. 
In last configuration, I had first patch for ldap and then bounce-patch,
using 
patch -p1 qmail-ldap-1.03-20000601.patch 
patch -p1 qmail-bounce.patch 


This time i had changed the order
patch -p1 qmail-bounce.patch 
patch -p1 qmail-ldap-1.03-20000601.patch 

while patching for ldap support it showed this lines

patching file `qmail-send.c'
Hunk #1 succeeded at 58 (offset 2 lines).
Hunk #3 succeeded at 737 (offset 2 lines).
Hunk #4 succeeded at 939 (offset 8 lines).
Hunk #5 succeeded at 1482 (offset 3 lines).
Hunk #6 succeeded at 1581 (offset 8 lines).
Hunk #7 succeeded at 1584 (offset 3 lines).
patching file `qmail-showctl.c'

and my problem got solved.

Thanks

Santosh Pasi


---------------Original Message------------------
To: [EMAIL PROTECTED]
>From: Santosh Pasi<[EMAIL PROTECTED]>
>Cc: 
>Reply-To: Santosh Pasi<[EMAIL PROTECTED]>
>Date: Fri, 18 May 2001 17:41:36 +0530
>Subject: qmail bounce patch help
>
>Hi everyone,

>I have applied qmail bounce patch 
>(www.jedi.claranet.fr/qmail-bounce.patch), and it works ( as you  can 
>see line "--- End of message stripped"), but my problem is that still i 
>get full mail including attachment, when mail bounce.
>The problem is that it works to header part and not to message part(i 
>guess) as you can see below.  Moreover
>
>--- End of message stripped.
>--- Below this line is a copy of the message.
>
>why " -- Below this line is a copy of the message." is after "-- End of 
>message stripped." ?
>
>for testing, the content of bouncemaxbytes file is 30
>Am i doing some thing wrong?Thanks in advanceSantosh Pasi
>
>-----------this is sample when i get bounce mail----------------------
>Hi. This is the qmail-send program at mymail.mydomain.com.
>I'm afraid I wasn't able to deliver your message to the following 
>addresses.This is a permanent error; I've given up. Sorry it didn't 
work out.>User exceeded it's quota limit<[EMAIL PROTECTED]>:
>Sorry, no mailbox here by that name. (#5.1--- End of message stripped.
>--- Below this line is a copy of the message.Return-Path: 
><[EMAIL PROTECTED]>Received: (qmail 3867 invoked from network); 15 May 
2001 07:14:32 -0000>Received: from mymail.mydomain.com (HELO localhost) 
>(vuser@[192.168.0.212]) (envelope-sender <[EMAIL PROTECTED]>)         
>by mymail.mydomain.com (qmail-ldap-1.03) with SMTP        for 
><[EMAIL PROTECTED]>; 15 May 2001 07:14:32 -0000To: 
[EMAIL PROTECTED]: Santosh Pasi<[EMAIL PROTECTED]>Cc: >X-Mailer: Perl 
Mail::Sender Version 0.6.7 Jan Krynicky  
><[EMAIL PROTECTED]> Czech Republicreply-to:Santosh 
>Pasi<[EMAIL PROTECTED]>Message-ID:[EMAIL PROTECTED]
>Date:Tue, 15 May 2001 12:44:32 +0530Subject: testing bounce patch

>---------------------start-of-message------------------------------------
>0000000000000000000000000000000000000000000000000000000000000000000000000
>1111111111111111111111111111111111111111111111111111111111111111111111111>......................................................................
>
>-------------------end-of-message--box----------------------------------
>
>





"Frank Tegtmeyer" <[EMAIL PROTECTED]> writes:

> The sending systems are Microsoft Exchange 5.5 and Sendmail 8.11. It 
> seems that they switch to bare linefeeds under load. Very mysterious.

The reason was the try to add one of this stupid "standard
disclaimers" to every outgoing mail. I think the prepared text file
was in the wrong format and the mailserver didn't convert it.

So mystery resolves to stupidity.

Regards,
Markus




        This would seem to be the conclusive evidence that the formmail
was the back door to allow the relay, although I'm not immediately sure
how it was done - check the bottom of the message...

        The IP is for mail-in.namezero.com, which also happens to be the
MX for spammah.com. I don't know that this information is meaningful or
not, at the moment.

        In any case, I hope to try some things and see if I can get it to
relay. I'll let the list know what I find. I'll probably replace it
anyway, with a custom perl cgi that will only deliver to a specific
address, period.

-- 
Roger Walker                         <http://www.rat-hole.com>
Voice/Fax 1-780-440-2685             <http://www.man-from-linux.com>
"HIS Pain; YOUR Gain"                <http://www.rope.net>
<http://www.rope.net/signature.html>

---------- Forwarded message ----------
Date: 18 May 2001 02:07:12 -0000
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: failure notice

Hi. This is the qmail-send program at nylon.rope.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[EMAIL PROTECTED]>:
216.34.13.240 does not like recipient.
Remote host said: 550 Mail for [EMAIL PROTECTED] not accepted at bronze
Giving up on 216.34.13.240.

--- Below this line is a copy of the message.

Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 731 invoked by uid 48); 18 May 2001 02:07:07 -0000
Date: 18 May 2001 02:07:07 -0000
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
  [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
  [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
  [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
  [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
  [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
  [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
  [EMAIL PROTECTED]
From: [EMAIL PROTECTED] ()
Subject: AOL Billing Error

Below is the result of your feedback form.  It was submitted by
 ([EMAIL PROTECTED]) on Thursday, May 17, 2001 at 20:07:07
---------------------------------------------------------------------------

: < a href="aol://2000:http://www.envy.nu/aolbilling50/";>AOL Billing Center</a>

---------------------------------------------------------------------------






hi-

I've started to hack around with qmail-inject.c a bit. i'm trying to modify 
the file to optionally look for a "control/addmessage" file, the contents of 
which will be appended to every locally generated message.  

i'm having some difficulty tacking the addmessage onto the message as it 
passes through qmail-inject, so i'm trying to insert some simple logging 
messages so i can follow the execution of  qmail-inject.

one thing that i'm having a difficult time following:  it looks like Dan 
Berenstein's logging architecture for qmail is broken down into 3 pretty 
simple calls:

(from qsutil.c)
void log1(s1) char *s1; {
 substdio_putsflush(&sserr,s1); }
void log2(s1,s2) char *s1; char *s2; {
 substdio_putsflush(&sserr,s1);
 substdio_putsflush(&sserr,s2); }
void log3(s1,s2,s3) char *s1; char *s2; char *s3; {
 substdio_putsflush(&sserr,s1);
 substdio_putsflush(&sserr,s2);
 substdio_putsflush(&sserr,s3); }

from what i gather, all of these just write messages to stderr, and 
multilog/splogger are responsible for collecting them.

i happen to be using multilog (LWQ style)

but when i modify qmail-inject to place a logging call, i get nothing in 
/var/log/qmail/current

this line placed in void main(), before any other function.

log1("qmail-inject: started");

can anyonepoint me in the right direction to understand why this fails?

thanks-

dan







 




On Fri, May 18, 2001 at 10:16:41AM -0500, dan . kelley wrote:
[snip]
> from what i gather, all of these just write messages to stderr, and 
> multilog/splogger are responsible for collecting them.

qmail-inject is unable to log anything, since it doesn't run as a
daemon connected to multilog/splogger. Just spew your debugging to
stderr and the user (you :) will see it.

Greetz, Peter.




On Fri, May 18, 2001 at 10:16:41AM -0500, dan . kelley wrote:
> 
> hi-
> 
> I've started to hack around with qmail-inject.c a bit. i'm trying to modify 
> the file to optionally look for a "control/addmessage" file, the contents of 
> which will be appended to every locally generated message.  

Right. So that won't catch messages submitted via SMTP from your local
(windows) clients. I presume that's ok? If you're not sure about where
qmail-inject and friends fit into the scheme of things, carefully read
and understand all of the PIC.* files in the qmail source before
proceeding.

I also assume you're aware of the MIME related issues in trying to do
this. It's been discussed many times on this list - the archives are
your friend.

> i'm having some difficulty tacking the addmessage onto the message as it 
> passes through qmail-inject, so i'm trying to insert some simple logging 
> messages so i can follow the execution of  qmail-inject.
> 
> one thing that i'm having a difficult time following:  it looks like Dan 
> Berenstein's logging architecture for qmail is broken down into 3 pretty 
> simple calls:

Well, qmail-inject doesn't log particularly. It's meant to be invoked
from a shell and thus informs you of results via stderr and the exit
code.

> (from qsutil.c)
> void log1(s1) char *s1; {
>  substdio_putsflush(&sserr,s1); }
> void log2(s1,s2) char *s1; char *s2; {
>  substdio_putsflush(&sserr,s1);
>  substdio_putsflush(&sserr,s2); }
> void log3(s1,s2,s3) char *s1; char *s2; char *s3; {
>  substdio_putsflush(&sserr,s1);
>  substdio_putsflush(&sserr,s2);
>  substdio_putsflush(&sserr,s3); }
> 
> from what i gather, all of these just write messages to stderr,
> and multilog/splogger are responsible for collecting them.

multilog is *nothing* like syslog. You just can't make a call to write
to stderr in one process such as qmail-inject and magically have it
show up with the output of some other process such as qmail-send.

> this line placed in void main(), before any other function.
> 
> log1("qmail-inject: started");

You might want to actually copy the way qmail-inject generates its
messages. Hint: search for the string "memory".


Regards.




Hi guys, straight to the probl.:

A customer of mine asked me for webmail.
He use a qmail-based mailserver whit about 100 mail virtual-domains.

The problem is the virtual domain handling.

I know sqwebmail need vpopmail, but on that server virtual domains are
handled in the "classic" qmail way, with the prefix on the user name associated 
at the /var/qmail/control/virtualhost file; users autenticate against
pop with "prefix-username" instead of "username@domain".

So, is there a way to "wrap" this old autentication method to allow
the webmail compatibility without changing the username field configuration
in ALL the user's mail client? (They are about 2200 users ...)


Thanks in avance
Fabio

-- 
Fabio Pedrazzoli      | www.bee-side.com
Network Administrator | www.rigadicomando.org
IT Consultant         |




Fabio Pedrazzoli <[EMAIL PROTECTED]> wrote:
> 
> A customer of mine asked me for webmail.  He use a qmail-based mailserver
> whit about 100 mail virtual-domains.  The problem is the virtual domain
> handling.
> 
> I know sqwebmail need vpopmail, but on that server virtual domains are
> handled in the "classic" qmail way, with the prefix on the user name
> associated at the /var/qmail/control/virtualhost file; users autenticate
> against pop with "prefix-username" instead of "username@domain".
> 
> So, is there a way to "wrap" this old autentication method to allow the
> webmail compatibility without changing the username field configuration in
> ALL the user's mail client? (They are about 2200 users ...)

You might want to consider using vmailmgr and oMail instead of
vpopmail/squebmail.  vmailmgr, I believe, even supports the prefix-username
format for authentication.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




On Fri, May 18, 2001 at 04:34:18PM +0200, Fabio Pedrazzoli wrote:
> I know sqwebmail need vpopmail

This isn't true. I'm running sqwebmail with qmail-ldap.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany               *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)




Evelyn Huang <[EMAIL PROTECTED]> wrote:
> 
> Can someone help me to find a way to send individual messages staying in the
> queue?  I really need help on this, and I've read all the necessary
> documents but couldn't find an answer.  Or there is no way to do so with
> qmail?  Thanks a lot!

qmail automatically retries delivery on messages which did not get
successfully delivered the first time, using a quadratic backoff algorithm.
In general, there's no need to mess with this.  If you absolutely want to
force a "queue run", send qmail-send an ALRM signal.  However, this will make
qmail-send immediately retry all messages in the queue (well, except those for
which it has recorded a recent timeout -- qmail-tcpok will clear that list).

There's no easy way to force-retry a single message.  Why do you want to do
this, anyway?

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




liu zhi([EMAIL PROTECTED])@2001.05.18 15:03:26 +0000:
> I have use splogger to write qmail log.(I just use /var/qmail/boot/proc as my 
>/var/qmail/rc),and I use checkpassword to varify users.
> (I use tcpserver -c 100 0 pop-3 /var/qmail/bin/qmail-popup www3.imaginechina.com 
>/bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir /var/qmail/bin/splogger pop3d &)
> But I can't see pop3 logs in /var/log/maillog
> Where is the pop3 log?
i guess it would be in /var/log/messages, then
anyway, you should consider switching to multilog and get completely rid
of syslogd with all it's deficiencies ;-)

/k

-- 
> "If you make people think they're thinking, they'll love you; but if you
> really make them think they'll hate you."
KR433/KR11-RIPE -- http://www.webmonster.de -- ftp://ftp.webmonster.de
[Key] [KeyID---] [Created-] [Fingerprint-------------------------------------]
GnuPG 0x2964BF46 2001-03-15 42F9 9FFF 50D4 2F38 DBEE  DF22 3340 4F4E 2964 BF46






> -----Original Message-----
> From: Chris Hellberg [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, May 17, 2001 9:09 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: qmail and sqwebmail
>
>
> I've installed the two, but not with checkpassword, so take my advice
> with a grail of salt.
>

It sounds as though no one has.  Is there a way to install vpopmail without
installing all of Courier?


--joshua.





Hi guys, here is the scenario:
I had everything working no problem, Sqwebmail and LDAP, but once
I upgrade to 2.4.3 kernel and iptables 1.2.1a then my LDAP stopped
working, I wonder if anyone has had same problem. I tried it without any
firewall rules to check if it would work but no luck, Again worked fine
with ipchains.

Thanks Again guys,
REMO





Trying to get rid of annoying doublebounceto emails I get as a 
result of spam, I did an echo "doublebounce" > 
/var/qmail/control/doublebounceto and an echo '#' > 
~alias/.qmail-doublebounce in an effort to stop them from being 
delivered to postmaster.  a showctl indicates that doublebounceto is 
being recognized.

<snip>
doublebounceto: 2B recipient user: doublebounce.
<snip>

Yet I still get double bounces at the postmaster@ addy :(

and here's a snippet from maillog showing the double bounce going to 
the wrong place.

May 17 10:21:14 talon qmail: 990120074.337132 new msg 8429
May 17 10:21:14 talon qmail: 990120074.338296 info msg 8429: bytes 
789 from <[EMAIL PROTECTED]> qp 95432 uid 1003
May 17 10:21:14 talon qmail: 990120074.340912 starting delivery 
20134: msg 8429 to local ano-sdlfjasdlfjk@<snip>.com
May 17 10:21:14 talon qmail: 990120074.342103 status: local 1/10 
remote 1/20
May 17 10:21:14 talon qmail: 990120074.356238 delivery 20134: 
failure: vdeliver:_Invalid_or_unknown_virtual_user_'sdlfjasdlfjk'/
May 17 10:21:14 talon qmail: 990120074.358291 status: local 0/10 
remote 1/20
May 17 10:21:14 talon qmail: 990120074.365226 bounce msg 8429 qp 
95437
May 17 10:21:14 talon qmail: 990120074.366541 end msg 8429
May 17 10:21:14 talon qmail: 990120074.369095 new msg 8434
May 17 10:21:14 talon qmail: 990120074.370105 info msg 8434: bytes 
1383 from <> qp 95437 uid 1008
May 17 10:21:14 talon qmail: 990120074.372649 starting delivery 
20135: msg 8434 to remote [EMAIL PROTECTED]
May 17 10:21:14 talon qmail: 990120074.373478 status: local 0/10 
remote 2/20
May 17 10:21:14 talon qmail: 990120074.411459 delivery 20135: 
failure: 
Sorry,_I_couldn't_find_any_host_named_lkqjldakjlkajsjdf.com._(#5.1.2)/
May 17 10:21:14 talon qmail: 990120074.413529 status: local 0/10 
remote 1/20
May 17 10:21:14 talon qmail: 990120074.436333 bounce msg 8434 qp 
95439
May 17 10:21:14 talon qmail: 990120074.437654 end msg 8434
May 17 10:21:14 talon qmail: 990120074.440219 new msg 8429
May 17 10:21:14 talon qmail: 990120074.441253 info msg 8429: bytes 
1896 from <#@[]> qp 95439 uid 1008
May 17 10:21:14 talon qmail: 990120074.443820 starting delivery 
20136: msg 8429 to local [EMAIL PROTECTED]
May 17 10:21:14 talon qmail: 990120074.444969 status: local 1/10 
remote 1/20


Any ideas?

Thanks

- Dave




David Boone <[EMAIL PROTECTED]> wrote:
> Trying to get rid of annoying doublebounceto emails I get as a 
> result of spam, I did an echo "doublebounce" > 
> /var/qmail/control/doublebounceto and an echo '#' > 
> ~alias/.qmail-doublebounce in an effort to stop them from being 
> delivered to postmaster.  a showctl indicates that doublebounceto is 
> being recognized.
[...] 
> Yet I still get double bounces at the postmaster@ addy :(

Did you restart qmail?  `man qmail-send` will tell you why this is necessary.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




On Fri, May 18, 2001 at 09:09:26AM -0700, David Boone wrote:
> Trying to get rid of annoying doublebounceto emails I get as a 
> result of spam, I did an echo "doublebounce" > 

Did you restart qmail-send after the change?
If not, do it ;-)

        \Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
Stress is when you wake up screaming and you realize you haven't fallen
asleep yet.




David Boone <[EMAIL PROTECTED]> wrote:

>Trying to get rid of annoying doublebounceto emails I get as a=20
>result of spam, I did an echo "doublebounce" >=20
>/var/qmail/control/doublebounceto and an echo '#' >=20
>~alias/.qmail-doublebounce in an effort to stop them from being=20
>delivered to postmaster.  a showctl indicates that doublebounceto is=20=

>being recognized.

Correction: showctl indicates that the doublebounceto control file is
set.

"man qmail-control" says:

              control             default            used by
              doublebounceto      postmaster         qmail-send

"man qmail-send" says:

       WARNING: qmail-send reads its control files only when it
       starts.  If you change the control files, you must stop and
       restart qmail-send.  Exception: If qmail-send receives a HUP
       signal, it will reread locals and virtualdo=AD mains.

So you need to restart qmail-send.

-Dave




I want to implement spam filtering for several users. My ISP recently 
installed qmail and vpopmail on our colocated Yellow Dog Linux 
server. The machine already has procmail 3.14 installed, although 
I've never used it. I installed spambouncer 
<http://www.spambouncer.org> (which uses procmail) according to the 
directions, but it doesn't seem to be doing anything. Are there any 
known gotchas with this setup?

Gawain




Gawain Reifsnyder <[EMAIL PROTECTED]> wrote:
> I want to implement spam filtering for several users. My ISP recently 
> installed qmail and vpopmail on our colocated Yellow Dog Linux 
> server. The machine already has procmail 3.14 installed, although 
> I've never used it. I installed spambouncer 
> <http://www.spambouncer.org> (which uses procmail) according to the 
> directions, but it doesn't seem to be doing anything. Are there any 
> known gotchas with this setup?

I don't know anything about "spambouncer", but purely based on the name, I'd
say it's useless.  I've seen some systems which generate late bounces to
suspicious mail to try to get your name removed from spammers' lists, but the
basic idea is flawed because spammers universally use forged envelope sender
addresses and therefore never see the bounces.

If you do want to use this, you'll probably have to modify either the users'
.qmail files or the default delivery instruction to call procmail.  Typically
this means setting it to something like:

    |preline procmail [.procmailrcfile]

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




Hi,

it's driving me nuts. I don't know a not tested
permission setting. Why do I get an access denied error,
every time a message bounces, because there's no mbox?

ls -la /var/spool/mail

total 8
drwxrwxrwt   2 root     root         4096 May 16 20:44 .
drwxr-xr-x  13 root     root         4096 Aug 23  2000 ..
-rw-r--r--   1 administ users           0 Nov  1  2000 administrator
-rw-r--r--   1 laptop   users           0 Feb 15 13:05 laptop
-rw-r--r--   1 nina     users           0 Aug  6  2000 nina
lrwxrwxrwx   1 tom      users          17 May 15 21:54 tom ->
/home/tom/Mailbox [also content of .qmail
files in /var/qmail alias]

ls -la  /var/qmail/alias

total 24
drwxr-xr-x   2 qmaill   qmail        4096 May 18 20:16 .
drwxr-xr-x  10 root     qmail        4096 May 15 19:26 ..
-rw-r--r--   1 root     root           19 May 18 20:15 .qmail-mailer-daemon
-rw-r--r--   1 root     qmail          19 May 18 20:15 .qmail-postmaster
-rw-r--r--   1 root     qmail          19 May 18 20:14 .qmail-root
-rw-r--r--   1 root     qmail          18 May 16 19:06 .qmail-tom

ls -la /home/tom

total 240
drwxr--r--   2 tom      users        4096 May 18 20:06 .
drwxr-xr-x   8 root     users        4096 May 16 20:45 ..
-rw-r--r--   1 tom      users       13800 Mar 28 22:25 .pinerc
-rw-r--r--   1 root     root        13802 Mar 28 22:21 .pinerc~
-rw-r--r--   1 tom      users        1560 May 18 20:09 Mailbox

/var/log/qmail/current

@400000003b056f360d1a7824 info msg 224726: bytes 205 from
<[EMAIL PROTECTED]> qp 19823 uid 0
@400000003b056f360d51243c starting delivery 1356: msg 224726 to local
[EMAIL PROTECTED]
@400000003b056f360d515ed4 status: local 1/10 remote 0/20
@400000003b056f360e098f2c delivery 1356: failure:
Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/    [that's ok]
@400000003b056f360e09d964 status: local 0/10 remote 0/20
@400000003b056f360e81a55c bounce msg 224726 qp 19826
@400000003b056f360e841a44 end msg 224726
@400000003b056f360e8ca9ac new msg 224842
@400000003b056f360e901894 info msg 224842: bytes 740 from <> qp 19826 uid
1010
@400000003b056f360ee85a54 starting delivery 1357: msg 224842 to local
[EMAIL PROTECTED]
@400000003b056f360eea3eb4 status: local 1/10 remote 0/20
@400000003b056f360f96b70c delivery 1357: deferral:
Unable_to_open_/home/tom/Mailbox:_access_denied._(#4.2.1)/ [that's not]
@400000003b056f360f98e98c status: local 0/10 remote 0/20


Thanks Tom





Tom Beer <[EMAIL PROTECTED]> wrote:
> 
> it's driving me nuts. I don't know a not tested
> permission setting. Why do I get an access denied error,
> every time a message bounces, because there's no mbox?

Because qmail runs with the permissions of the user it is delivering to.

> ls -la  /var/qmail/alias
[...]
> -rw-r--r--   1 root     qmail          18 May 16 19:06 .qmail-tom
> 
> ls -la /home/tom
[...]
> drwxr--r--   2 tom      users        4096 May 18 20:06 .

You implied that ~alias/.qmail-tom contains /home/tom/Mailbox .  Therefore,
if alias is handling this address, user "alias" will be trying to write to
~tom/Mailbox, which won't work.

However, user "tom" should override alias, unless you're using virtualdomains
to do this or something.  Post the output of `qmail-showctl` (unedited) and we
might be able to help you further.  It might be as simple as changing your
~alias/.qmail-tom file to contain a forwarding directive.

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon                            <[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------




On Fri, May 18, 2001 at 08:54:46PM +0200, Tom Beer wrote:
> it's driving me nuts. I don't know a not tested
> permission setting. Why do I get an access denied error,
> every time a message bounces, because there's no mbox?

The problem is, if the delivery is done via ~alias, it's done with
the permissions of the user alias, which is not allowed to write
/home/tom/Mailbox

Whether it's done via ~alias/.qmail-tom depends on entries in /etc/passwd
and/or /var/qmail/users/assign.

However the line

@400000003b056f360ee85a54 starting delivery 1357: msg 224842 to local 
[EMAIL PROTECTED]

indicates that the problem is not with the user tom, but delivery to
user "root", which is handled by ~alias/.qmail-root (under permissions
of user "alias").

Replace in that file (I assume!!)
    /home/tom/Mailbox 
with
    &tom
and it will probably work.

        \Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
Stress is when you wake up screaming and you realize you haven't fallen
asleep yet.




I finally got around to upgrading mutt to 1.25 and took another look at setting
it up to work correctly with qmail.

My solution (which you might want to mention in your qmail help) is:

set sendmail="/var/qmail/bin/qmail-inject -h"
set write_bcc=yes

This lets qmail parse the message headers and get things right, rather
than use the addresses passed on the command line in the incorrect
format. (qmail expects raw addresses, where as sendmail expects rfc821
encoded addresses.)




Does anyone have a qmail-remote.c that has been patched for qmtp AND
outgoingip?  I must have botched the patch combination, since I now get:

qmail-remote2001-05-18 17:21:26.339297500 delivery 1: deferral: qmail-remote_crashed./

Thank goodness I backed up the binaries and use RCS on the source.

Thanks,
JS




Just FYI in case anyone was losing sleep over not being able to use
the QMTP patch and the outgoing IP patche to qmail-remote.c at the
same time.  Well, and also to prevent my previous post from being an
archive orphan.

It turns out that the additional qmail_remote.c code for QMTP totally
confuses the outgoingip patch, and even if the patch wasn't confused,
it would have missed out on patching the additional call to the new
flavor of timeoutconn().  With too few arguments passed in both cases,
no wonder qmail_remote was choking.  Case closed.

Later,
JS

On Fri, May 18, 2001 at 05:31:19PM -0400, Jim Steele wrote:
> 
> Does anyone have a qmail-remote.c that has been patched for qmtp AND
> outgoingip?  I must have botched the patch combination, since I now get:
> 
> qmail-remote2001-05-18 17:21:26.339297500 delivery 1: deferral: 
>qmail-remote_crashed./
> 
> Thank goodness I backed up the binaries and use RCS on the source.
> 
> Thanks,
> JS




Hello!

I have the following configuration working, using the latest versions of each:

Red Hat 7.1 (Updated)
qmail with patch
QMAILQUEUE patch
qmail-scanner
vpopmail
courier-imap
sqwebmail
qmailadmin

The only problem is, that when I send outgoing mail, using Eudora, through 
the qmail server, it properly invokes qmail-scanner, however, when I use 
sqwebmail, it bypasses the scanner completely.  I can install and configure 
a system like this, but don't have a detailed low-level understanding on 
how all the pieces are talking to each other.  I also don't know if the 
problem is within vpopmail or sqwebmail.  I have used LWQ to install the 
basic qmail package.

My questions are this:  Is vpopmail or sqwebmail bypassing qmail and 
sending the mail out directly?  If this is true, why shouldn't both be 
using qmail to actually send the mail?

If this is not the case, then I need to do further checking of the 
configuration of all the packages.  Everything seems to work correctly.

Thanks in advance for your feedback!

Rick





Put this in your httpd.conf

SetEnv QMAILQUEUE /var/qmail/bin/qmail-scanner-queue.pl

like:

<VirtualHost *>
DocumentRoot /usr/local/httpd/webmail/htdocs
ServerName webmail.my.dom
ServerAlias www.my.dom
ScriptAlias /cgi-bin /usr/local/httpd/webmail/cgi-bin
SetEnv TZ CET
SetEnv QMAILQUEUE /var/qmail/bin/qmail-scanner-queue.pl
</VirtualHost>

Or you could set it in sendit.sh before qmail-inject

--
--------------------------------------------
IDG New Media        Einar Bordewich
Development Manager  Phone: +47 2336 1420
E-Mail:              eibo(at)newmedia.no
Lat: 59.91144 N      Lon: 10.76097 E
--------------------------------------------

----- Original Message -----
From: "Rick Stanley" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Saturday, May 19, 2001 12:39 AM
Subject: vpopmail or sqwebmail bypasses qmail?


> Hello!
>
> I have the following configuration working, using the latest versions of
each:
>
> Red Hat 7.1 (Updated)
> qmail with patch
> QMAILQUEUE patch
> qmail-scanner
> vpopmail
> courier-imap
> sqwebmail
> qmailadmin
>
> The only problem is, that when I send outgoing mail, using Eudora, through
> the qmail server, it properly invokes qmail-scanner, however, when I use
> sqwebmail, it bypasses the scanner completely.  I can install and
configure
> a system like this, but don't have a detailed low-level understanding on
> how all the pieces are talking to each other.  I also don't know if the
> problem is within vpopmail or sqwebmail.  I have used LWQ to install the
> basic qmail package.
>
> My questions are this:  Is vpopmail or sqwebmail bypassing qmail and
> sending the mail out directly?  If this is true, why shouldn't both be
> using qmail to actually send the mail?
>
> If this is not the case, then I need to do further checking of the
> configuration of all the packages.  Everything seems to work correctly.
>
> Thanks in advance for your feedback!
>
> Rick
>
>





I want to return a custom message when rblsmtp bounces my email.
Is there a way to do this?

Why?
I have had a provider who was listed in one of the "black hole" list.
I needed to send someone an email, and could not get it to him any
other way.

If I am going to deny access because someone is on a list I want to
give him a way to contact me.  I want to refer him to a page with a
form on it for him to use.

How can I do this?


Ed Weinberg, Q5 Comm, LLC.
[EMAIL PROTECTED]
tel 914-713-7222
fax 914-713-7227 
Connecting you to the internet...




We are a small ISP and currently having a mail server (InterMail) serving POP3/SMTP 
access to our subscribers.
Let's say mail system A= serverA.domain.com.my and user e-mail address like 
[EMAIL PROTECTED]

We planning to migate from this mail system to qmail.

And we already setup FreeBSD+qmail+vpopmail+sqwebmail+qmailadmin to provide the same 
service POP3/SMTP
Let's say mail system B = serverBdomain.com.my and user e-mail address like 
[EMAIL PROTECTED]

For co-existant purpose (migration) ,
Is there a POP3 and SMTP proxy solution such that userA POP3 and SMTP access will 
still poiting to serverA and 
qmail user (userB) will poiting to serverB ?

Note : Both server having the same e-mail domain name.

Thanks,







>> I whipped up a little message blasting module in perl:
>> 
>>   http://wx.iecc.com/Qspam.pm
>> 
>> It's only 136 lines.
>
>This looks way cool. Thanks, John!
>
>One question: it doesn't look like qspam_send() removes the mail file once
>it has been sent (or queued, if the attempt failed). I am looking at using
>Qspam in a sort of mail merge program; will I need to unlink() the mail file
>myself?

I fiddled it a little more last night so when a delivery is done it
tells the callback routine that's called when a delivery is done
whether the delivery worked or not.  If you don't use failure info to
update the address list (either immediately or when you pass some
threshold of bounces), it really would be spamware.

The callback routine does have to delete the file with the message.
The reason I did it that way is that at some point I want to see
whether it's faster to rewrite existing temp files than to unlink and
create a new one, in which case the callback would just push the temp
file on a list of available ones to reuse.  Or the temp file might be
a named pipe fed by another program or something.

-- 
John R. Levine, IECC, POB 727, Trumansburg NY 14886 +1 607 387 6869
[EMAIL PROTECTED], Village Trustee and Sewer Commissioner, http://iecc.com/johnl, 
Member, Provisional board, Coalition Against Unsolicited Commercial E-mail







smime.p7m



Reply via email to