Re: Postfix & pop-before-smtp
On Mon, 25 Aug 2008 19:38:04 +0200 "Marcel Grandemange" <[EMAIL PROTECTED]> wrote: > I don't know if anyone will be able to assist me with this one, but > two days ago I decided to redo our mail server. > All went well except for one components.. > Pop-before-smtp, it seems no matter what I did it would simply cause > postfix hassles. > Now I know pop-before-smtp is confed correctly as old working config > was used... > I also know that it DOES create the pop-before-smtp.db file on start > if I delete it manually as test. > I can also check if there are any ip's in db by doing pop-before-smtp > -list. (IT OBVIOUSLY RETURNED NOTHIN) > However postfix keeps throwing errors to the following.. > Aug 25 15:31:21 thavinci postfix/smtpd[77983]: fatal: open database > /usr/local/etc/postfix/pop-before-smtp.db: Invalid argument > Aug 25 11:14:49 thavinci postfix/smtpd[88389]: fatal: open database > /usr/local/etc/postfix/pop-before-smtp.db: Inappropriate file type or > format > Aug 25 12:17:11 thavinci postfix/smtpd[40445]: fatal: open database > /usr/local/etc/postfix/pop-before-smtp.db: Bad file descriptor > And that is the correct location and postfix was compile directly > from ports with option BDB which I understand is required to read > this file. > Ive been trying for a day straight trying to resolve this and had to > continue without this feature for now to allow mail to run.. > At this stage I would worship the ground of anyone that could help me > solve this!!! You would probably be better off asking your question on the Postfix forum. The mailing list is available here: http://www.postfix.org/lists.html You could also start here and search for an answer: http://www.postfix.org/start.html This link might also help you: http://popbsmtp.sourceforge.net/ If you do post on the Postfix forum, be sure to include the output of: 'postconf -n' along with the relevant portions of your log file. By the way, "pop-before-smtp" is rather deprecated. Why not use SASL/TLS instead? It is much more secure and is readily becoming a requirement with many ISPs. -- Gerard [EMAIL PROTECTED] "Fantasies are free." "NO!! NO!! It's the thought police" signature.asc Description: PGP signature
Postfix & pop-before-smtp
I don't know if anyone will be able to assist me with this one, but two days ago I decided to redo our mail server. All went well except for one components.. Pop-before-smtp, it seems no matter what I did it would simply cause postfix hassles. Now I know pop-before-smtp is confed correctly as old working config was used... I also know that it DOES create the pop-before-smtp.db file on start if I delete it manually as test. I can also check if there are any ip's in db by doing pop-before-smtp -list. (IT OBVIOUSLY RETURNED NOTHIN) However postfix keeps throwing errors to the following.. Aug 25 15:31:21 thavinci postfix/smtpd[77983]: fatal: open database /usr/local/etc/postfix/pop-before-smtp.db: Invalid argument Aug 25 11:14:49 thavinci postfix/smtpd[88389]: fatal: open database /usr/local/etc/postfix/pop-before-smtp.db: Inappropriate file type or format Aug 25 12:17:11 thavinci postfix/smtpd[40445]: fatal: open database /usr/local/etc/postfix/pop-before-smtp.db: Bad file descriptor And that is the correct location and postfix was compile directly from ports with option BDB which I understand is required to read this file. Ive been trying for a day straight trying to resolve this and had to continue without this feature for now to allow mail to run.. At this stage I would worship the ground of anyone that could help me solve this!!! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP before SMTP with TCPSERVER
Don O'Neil wrote: Hi all... I'm having problems with inet crapping out on the qmail-smtp process, so I've started using tcpserver to launch qmail-smtpd However, I'm getting complaints from people that the POP before SMTP authentication patch isn't working when I do this... Here is what I'm launching: #!/bin/sh /usr/local/bin/tcpserver -c 200 -v -u 1009 -g 1003 0 smtp /var/shc/qmail/bin/qmail-smtpd >&1 | /var/shc/qmail/bin/splogger smtpd 3 & Anything wrong with this, or do I need to do something else so that the POP before SMTP authentication works correctly? Thanks! While I like ports I highly recommend you reinstall qmail using the instructions contained in Life with qmail. http://www.lifewithqmail.org/ I also highly recommend Dave Sill's book as well. We have run qmail for over 5 years here on multiple servers and Dave's book still sits on my desk, it is invaluable. Follow his instructions, and any problems you are having will go away. qmail will be efficient, fast, stable, and secure. DAve -- Three years now I've asked Google why they don't have a logo change for Memorial Day. Why do they choose to do logos for other non-international holidays, but nothing for Veterans? Maybe they forgot who made that choice possible. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
POP before SMTP with TCPSERVER
Hi all... I'm having problems with inet crapping out on the qmail-smtp process, so I've started using tcpserver to launch qmail-smtpd However, I'm getting complaints from people that the POP before SMTP authentication patch isn't working when I do this... Here is what I'm launching: #!/bin/sh /usr/local/bin/tcpserver -c 200 -v -u 1009 -g 1003 0 smtp /var/shc/qmail/bin/qmail-smtpd >&1 | /var/shc/qmail/bin/splogger smtpd 3 & Anything wrong with this, or do I need to do something else so that the POP before SMTP authentication works correctly? Thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
No, no - no offense taken - I've done it before but it has been almost 4
years - a lot has changed since I had my stuff going.
I already have my qpopper modified and it's successfully tracking my
IP into the relayers files when I check email, sendmail just isn't checking
the files like it used to -
Looking through your email it appears that Drac
is the same thing that I'm trying to do already.
While my setup is tracking my IP to the relayers file, adding entries like
"10.0.0.2 OK", originally I would be able to auth by only adding the
following lines to my sendmail.cf
Kpopauth hash -o /etc/mail/relayers
### The following two lines are for relayers
R$* $: $(relayers $1 $)
ROK $@ OK
I'm going to scrap my qpopper for now and see if I can get Drac setup as
most likely none of my old sendmail rules
work anymore and it looks like drac pretty much the same thing that I'm
trying to do now. Thanks for the info!! ;P
- Original Message -
From: "Mark" <[EMAIL PROTECTED]>
To: "FreeBSD" <[EMAIL PROTECTED]>; "FreeBSD-Questions"
<[EMAIL PROTECTED]>
Sent: Friday, August 08, 2003 4:01 PM
Subject: Re: POP Before SMTP
> - Original Message -
> From: "FreeBSD" <[EMAIL PROTECTED]>
> To: "FreeBSD-Questions" <[EMAIL PROTECTED]>
> Sent: Friday, August 08, 2003 10:45 PM
> Subject: Re: POP Before SMTP
>
>
> > Already tried googling of course or I wouldnt have asked here, I'm not
> > THAT off ;P Most of the searches bring up close to the same
> > information that I was using previously which is to simply modify
> > the sendmail.cf file with the following information:
> >
> >
> > #
> > Scheck_rcpt
> > R< $+ @ $=w >$@ OK
> > R$+ $: $(dequote "" $&{client_addr} $) $| $1
> > R0 $| $* $@ OK
> > R$* $| $*$: $(relayers $1 $: ERROR $)
> > RERROR$#error $@ 5.7.1 $: "550 SMTP relay denied, authenticate via
> > POP/IMAP first"
> > R$* $@ OK
> >
> >
> >
> >
> > This "used" to be the easiest method to setup and would automatically
> > enter your IP address into the relayers file and thereby allow you to
> > send mail but this does not appear to work with the newer version of
> > sendmail so I was wondering if anyone else had any ideas on a simple
> > setup like this since a Lot of the sendmail rules have changes since
> > I last played with it ;P
>
>
> Dear Katrina,
>
> Not to be rude, but are you sure you have done this before? :) Or did you,
> perchance, edit an existing installation? Because I know of no setup that
> "would automatically enter your IP address into the relayers file and
> thereby allow you to send mail."
>
> Understand, of course, that sendmail has nothing to do with IP addresses
> harvested from POP requests. That little code-snippet from sendmail.cf
> relies on an external file, presumably generated by a POP server. It used
to
> be that patches existed for, say, qpopper, so the POP daemon would log IP
> numbers. But, nowadays, if you want POP-before-SMTP, you should really use
> DRAC (Dynamic Relay Authorization Control).
>
> This means your first task is to recompile qpopper (if that is your POP
> server, of course), for use with DRAC. Say you have it log IP addresses to
> /usr/local/etc/dracd.db, then you could edit sendmail.cf as follows. You
add
> a line that says:
>
> Kdrac btree -o /usr/local/etc/dracd
>
> Then, at the right place, you add:
>
> ### The following four lines are for drac.
>
> R$* $: $&{client_addr}
> R$+ $: $(drac $1 $: ? $)
> R? $@ $#error $@ 5.7.1 $: "550 Relaying denied"
> R$+ $@ $#OK
>
> Only this way will it go "automatically". :)
>
> Check out:
>
> http://mail.cc.umanitoba.ca/drac/index.html
>
> Having said all that, why not use SMTP AUTH, while you are at it? :)
>
> - Mark
>
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
>
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
Glad to hear everything is okay. But are you sure you do not want to give
that recompile thingy a try? :) We are at qpopper 4.0.5 already. Several
security issues have been discovered since.
- Mark
---
asarian-host: {root} % telnet nightrealmstudios.com 110
Trying 216.162.217.31...
Connected to nightrealmstudios.com.
Escape character is '^]'.
+OK QPOP (version 3.1b5) at firewire.nightrealmstudios.com starting.
---
- Original Message -
From: "FreeBSD" <[EMAIL PROTECTED]>
To: "FreeBSD-Questions" <[EMAIL PROTECTED]>
Sent: Saturday, August 09, 2003 6:24 AM
Subject: Re: POP Before SMTP
> WOOT! Thanks to all the responses I finally got my popauth working
> again. Before I totally wiped out the popauth and qpopper I created
> I decided to mess with my sendmail rules after comparing them to the
> Drac rules that was in someones elses email here. After tweaking them
> a little bit I finally got them to work with my popauth and qpopper
> programs and all is well ;P
> Thanks!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
- Original Message - From: "Doug Hardie" <[EMAIL PROTECTED]> To: "Matthew Seaman" <[EMAIL PROTECTED]> Cc: "FreeBSD" <[EMAIL PROTECTED]>; "FreeBSD-Questions" <[EMAIL PROTECTED]> Sent: Monday, August 11, 2003 7:10 AM Subject: Re: POP Before SMTP > The handbook seems to be missing some instructions. > I tried what it says and sendmail does not accept authentication > requests. There is an error in the maillog about > /usr/local/etc/sasldb.db having group permissions. > Changing that to 700 changes the error to one where it > can't access the file. Changing the owner of that to root eliminates > the error messages. Sendmail then acknowledges that it has auth > capability. This is how its permissions are set for me: -rw-r- 1 cyrus mail 155648 Aug 8 15:02 sasldb2.db Maybe you should give the "cyrus" user r/w access too. :) I if remember correctly, the SASL2 install creates the cyrus user for you. - Mark ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
Already tried googling of course or I wouldnt have asked here, I'm not THAT
off ;P Most of the searches bring up close to the same information that I
was using previously which is to simply modify the sendmail.cf file with the
following information:
# Add these lines to your ~/etc/sendmail.cf to implement the
POP-before-SMTP
# anti-spam configuration.
Krelayers hash /etc/relayers
Kdequote dequote
#
# Anti-Spam Support: Limit SMTP relaying to previously authenticated users
#
#
Scheck_rcpt
R< $+ @ $=w >$@ OK
R$+ $: $(dequote "" $&{client_addr} $) $| $1
R0 $| $* $@ OK
R$* $| $*$: $(relayers $1 $: ERROR $)
RERROR$#error $@ 5.7.1 $: "550 SMTP relay denied, authenticate via
POP/IMAP first"
R$* $@ OK
This "used" to be the easiest method to setup and would automatically
enter your IP address into the relayers file and thereby allow you to send
mail but this does not appear to work with the newer version of sendmail so
I was wondering if anyone else had any ideas on a simple setup like this
since a Lot of the sendmail rules have changes since I last played with it
;P
- Original Message -
From: "Charlie Schluting" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, August 08, 2003 1:06 PM
Subject: Re: POP Before SMTP
>
>
> http://www.google.com/search?q=pop+before+smtp+sendmail
>
>
> On Fri, 8 Aug 2003, FreeBSD wrote:
>
> > Does anyone have any URL's for "POP Before SMTP" setup for sendmail?
I'm on Fbsd4.8 with the current Sendmail 8.12.8. I havent used pop and
smtp on my server in 4 years now so none of my old information or
configurations work anymore. =/
> > ___
> > [EMAIL PROTECTED] mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
> >
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
>
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
- Original Message - From: "Jamie" <[EMAIL PROTECTED]> To: "FreeBSD" <[EMAIL PROTECTED]> Sent: Friday, August 08, 2003 1:19 PM Subject: Re: POP Before SMTP I havent heard of SASL before. Do you have a URL and I will definitly check it out - so far all my searches are dry =/ > > >Hmmm...have you considered using Sendmail with SASL? > > > > > On Fri, 8 Aug 2003, FreeBSD wrote: > > > Does anyone have any URL's for "POP Before SMTP" setup for sendmail? I'm on Fbsd4.8 with the current Sendmail 8.12.8. I havent used pop and smtp on my server in 4 years now so none of my old information or configurations work anymore. =/ > > ___ > > [EMAIL PROTECTED] mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > > > > "A friend is someone who lets you have total freedom to be yourself." > > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
> Does anyone have any URL's for "POP Before SMTP" setup for sendmail? I'm on > Fbsd4.8 with the current Sendmail 8.12.8. I havent used pop and smtp on my > server in 4 years now so none of my old information or configurations work > anymore. =/ I'm using dracd (available in the ports collection) for pop-before-smtp with sendmail. No problem what so ever and very easy to set up. -- Antoine Jacoutot [EMAIL PROTECTED] http://www.lphp.org PGP/GnuPG key: http://www.lphp.org/ressources/ajacoutot.asc ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
On Monday, Aug 11, 2003, at 04:06 US/Pacific, Mark wrote: - Original Message - From: "Doug Hardie" <[EMAIL PROTECTED]> To: "Matthew Seaman" <[EMAIL PROTECTED]> Cc: "FreeBSD" <[EMAIL PROTECTED]>; "FreeBSD-Questions" <[EMAIL PROTECTED]> Sent: Monday, August 11, 2003 7:10 AM Subject: Re: POP Before SMTP The handbook seems to be missing some instructions. I tried what it says and sendmail does not accept authentication requests. There is an error in the maillog about /usr/local/etc/sasldb.db having group permissions. Changing that to 700 changes the error to one where it can't access the file. Changing the owner of that to root eliminates the error messages. Sendmail then acknowledges that it has auth capability. This is how its permissions are set for me: -rw-r- 1 cyrus mail 155648 Aug 8 15:02 sasldb2.db Maybe you should give the "cyrus" user r/w access too. :) I if remember correctly, the SASL2 install creates the cyrus user for you. Well I found the following on the sendmail.org pages: sendmail requires sasldb to be owned by root or the trusted user and not be readable by anyone else since the file contains sensitive data (shared secrets). Ok. I guess thats probably the way to go then. At least there are no error messages. But, now how do I get past the missing pipe? Something else needs to be started, but what? -- Doug ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
Sure, here is a link: http://www.sendmail.org/~ca/email/auth.html and another: ftp://ftp.isi.edu/in-notes/rfc.txt There are ports available that you can use to set it up: /usr/ports/security/cyrus-sasl2 /usr/ports/security/cyrus-sasl2-saslauthd /usr/ports/mail/sendmail-sasl It is a pretty nice setup, IMHO. I've never setup pop-before-smtp though. - Jamie On Fri, 8 Aug 2003, FreeBSD wrote: > > - Original Message - > From: "Jamie" <[EMAIL PROTECTED]> > To: "FreeBSD" <[EMAIL PROTECTED]> > Sent: Friday, August 08, 2003 1:19 PM > Subject: Re: POP Before SMTP > > I havent heard of SASL before. Do you have a URL and I will definitly check > it out - so far all my searches are dry =/ > > > > > > > >Hmmm...have you considered using Sendmail with SASL? > > > > > > > > > > On Fri, 8 Aug 2003, FreeBSD wrote: > > > > > Does anyone have any URL's for "POP Before SMTP" setup for sendmail? > I'm on Fbsd4.8 with the current Sendmail 8.12.8. I havent used pop and > smtp on my server in 4 years now so none of my old information or > configurations work anymore. =/ > > > ___ > > > [EMAIL PROTECTED] mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > > > > > > > "A friend is someone who lets you have total freedom to be yourself." > > > > > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > "A friend is someone who lets you have total freedom to be yourself." ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
On Saturday, Aug 9, 2003, at 05:30 US/Pacific, Matthew Seaman wrote: Hmmm... Don't know precisely about pop before sendmail, but setting up sendmail so that it requires authentication before it will relay a message from a "foreign" location is quite do-able, and can easily be integrated with the standard system sendmail. Probably the easiest way to get going is to follow the instructions at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/smtp- auth.html The handbook seems to be missing some instructions. I tried what it says and sendmail does not accept authentication requests. There is an error in the maillog about /usr/local/etc/sasldb.db having group permissions. Changing that to 700 changes the error to one where it can't access the file. Changing the owner of that to root eliminates the error messages. Sendmail then acknowledges that it has auth capability. But it doesn't authenticate anything. A ktrace shows that it tries to access a pipe in /var/pwcheck/pwcheck. The directory exists, but it is completely empty. Something else is needed to get whatever its trying to communicate with up. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
WOOT! Thanks to all the responses I finally got my popauth working again. Before I totally wiped out the popauth and qpopper I created I decided to mess with my sendmail rules after comparing them to the Drac rules that was in someones elses email here. After tweaking them a little bit I finally got them to work with my popauth and qpopper programs and all is well ;P Thanks! - Original Message - From: "Jamie" <[EMAIL PROTECTED]> To: "FreeBSD" <[EMAIL PROTECTED]> Cc: "FreeBSD-Questions" <[EMAIL PROTECTED]> Sent: Friday, August 08, 2003 5:32 PM Subject: Re: POP Before SMTP > > > >Sure, here is a link: > > > http://www.sendmail.org/~ca/email/auth.html > > and another: > > ftp://ftp.isi.edu/in-notes/rfc.txt > > > There are ports available that you can use to set it up: > > /usr/ports/security/cyrus-sasl2 > /usr/ports/security/cyrus-sasl2-saslauthd > /usr/ports/mail/sendmail-sasl > > It is a pretty nice setup, IMHO. I've never setup pop-before-smtp > though. > > >- Jamie > > > > > > > > On Fri, 8 Aug 2003, FreeBSD wrote: > > > > > ----- Original Message - > > From: "Jamie" <[EMAIL PROTECTED]> > > To: "FreeBSD" <[EMAIL PROTECTED]> > > Sent: Friday, August 08, 2003 1:19 PM > > Subject: Re: POP Before SMTP > > > > I havent heard of SASL before. Do you have a URL and I will definitly check > > it out - so far all my searches are dry =/ > > > > > > > > > > > > >Hmmm...have you considered using Sendmail with SASL? > > > > > > > > > > > > > > > On Fri, 8 Aug 2003, FreeBSD wrote: > > > > > > > Does anyone have any URL's for "POP Before SMTP" setup for sendmail? > > I'm on Fbsd4.8 with the current Sendmail 8.12.8. I havent used pop and > > smtp on my server in 4 years now so none of my old information or > > configurations work anymore. =/ > > > > ___ > > > > [EMAIL PROTECTED] mailing list > > > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > > > To unsubscribe, send any mail to > > "[EMAIL PROTECTED]" > > > > > > > > > > "A friend is someone who lets you have total freedom to be yourself." > > > > > > > > > > ___ > > [EMAIL PROTECTED] mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > > > > "A friend is someone who lets you have total freedom to be yourself." > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
- Original Message -
From: "FreeBSD" <[EMAIL PROTECTED]>
To: "FreeBSD-Questions" <[EMAIL PROTECTED]>
Sent: Friday, August 08, 2003 10:45 PM
Subject: Re: POP Before SMTP
> Already tried googling of course or I wouldnt have asked here, I'm not
> THAT off ;P Most of the searches bring up close to the same
> information that I was using previously which is to simply modify
> the sendmail.cf file with the following information:
>
>
> #
> Scheck_rcpt
> R< $+ @ $=w >$@ OK
> R$+ $: $(dequote "" $&{client_addr} $) $| $1
> R0 $| $* $@ OK
> R$* $| $*$: $(relayers $1 $: ERROR $)
> RERROR$#error $@ 5.7.1 $: "550 SMTP relay denied, authenticate via
> POP/IMAP first"
> R$* $@ OK
>
>
>
>
> This "used" to be the easiest method to setup and would automatically
> enter your IP address into the relayers file and thereby allow you to
> send mail but this does not appear to work with the newer version of
> sendmail so I was wondering if anyone else had any ideas on a simple
> setup like this since a Lot of the sendmail rules have changes since
> I last played with it ;P
Dear Katrina,
Not to be rude, but are you sure you have done this before? :) Or did you,
perchance, edit an existing installation? Because I know of no setup that
"would automatically enter your IP address into the relayers file and
thereby allow you to send mail."
Understand, of course, that sendmail has nothing to do with IP addresses
harvested from POP requests. That little code-snippet from sendmail.cf
relies on an external file, presumably generated by a POP server. It used to
be that patches existed for, say, qpopper, so the POP daemon would log IP
numbers. But, nowadays, if you want POP-before-SMTP, you should really use
DRAC (Dynamic Relay Authorization Control).
This means your first task is to recompile qpopper (if that is your POP
server, of course), for use with DRAC. Say you have it log IP addresses to
/usr/local/etc/dracd.db, then you could edit sendmail.cf as follows. You add
a line that says:
Kdrac btree -o /usr/local/etc/dracd
Then, at the right place, you add:
### The following four lines are for drac.
R$* $: $&{client_addr}
R$+ $: $(drac $1 $: ? $)
R? $@ $#error $@ 5.7.1 $: "550 Relaying denied"
R$+ $@ $#OK
Only this way will it go "automatically". :)
Check out:
http://mail.cc.umanitoba.ca/drac/index.html
Having said all that, why not use SMTP AUTH, while you are at it? :)
- Mark
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
On Fri, Aug 08, 2003 at 12:10:43PM -0700, FreeBSD wrote: > Does anyone have any URL's for "POP Before SMTP" setup for sendmail? I'm on Fbsd4.8 > with the current Sendmail 8.12.8. I havent used pop and smtp on my server in 4 > years now so none of my old information or configurations work anymore. =/ Hmmm... Don't know precisely about pop before sendmail, but setting up sendmail so that it requires authentication before it will relay a message from a "foreign" location is quite do-able, and can easily be integrated with the standard system sendmail. Probably the easiest way to get going is to follow the instructions at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/smtp-auth.html The line: TRUST_AUTH_MECH(`GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN')dnl in the sendmail.mc will allow most widely used MUA's that speak SMTP to the mail server to authenticate before sending a message, although working out exactly which buttons to press and which checkboxes to check in the client is another problem. You will need to create real user accounts for each person, and configure the MUA to supply the password for that account to the server. I know first hand that this works with the Mozilla mail client and with Microsoft Outlook Express. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: POP Before SMTP
http://www.google.com/search?q=pop+before+smtp+sendmail On Fri, 8 Aug 2003, FreeBSD wrote: > Does anyone have any URL's for "POP Before SMTP" setup for sendmail? I'm on Fbsd4.8 > with the current Sendmail 8.12.8. I havent used pop and smtp on my server in 4 > years now so none of my old information or configurations work anymore. =/ > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: POP Before SMTP
Most likely I'll play around with Drac to figure out how to set it up next
and recompile my qpopper, I just wanted to get it working for now. I need
to catch up on Sendmail and the .cf file first, lots of changes since I've
played with any of this stuff - Thanks again for the info ;P
- Original Message -
From: "Mark" <[EMAIL PROTECTED]>
To: "FreeBSD" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Friday, August 08, 2003 11:36 PM
Subject: Re: POP Before SMTP
> Glad to hear everything is okay. But are you sure you do not want to give
> that recompile thingy a try? :) We are at qpopper 4.0.5 already. Several
> security issues have been discovered since.
>
> - Mark
>
> ---
> asarian-host: {root} % telnet nightrealmstudios.com 110
> Trying 216.162.217.31...
> Connected to nightrealmstudios.com.
> Escape character is '^]'.
> +OK QPOP (version 3.1b5) at firewire.nightrealmstudios.com starting.
> ---
>
>
> - Original Message -
> From: "FreeBSD" <[EMAIL PROTECTED]>
> To: "FreeBSD-Questions" <[EMAIL PROTECTED]>
> Sent: Saturday, August 09, 2003 6:24 AM
> Subject: Re: POP Before SMTP
>
>
> > WOOT! Thanks to all the responses I finally got my popauth working
> > again. Before I totally wiped out the popauth and qpopper I created
> > I decided to mess with my sendmail rules after comparing them to the
> > Drac rules that was in someones elses email here. After tweaking them
> > a little bit I finally got them to work with my popauth and qpopper
> > programs and all is well ;P
> > Thanks!
>
>
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
POP Before SMTP
Does anyone have any URL's for "POP Before SMTP" setup for sendmail? I'm on Fbsd4.8 with the current Sendmail 8.12.8. I havent used pop and smtp on my server in 4 years now so none of my old information or configurations work anymore. =/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Postfix/pop-before-smtp virtual domain relay problem on FBSD
Hello,
I am having a problem using my FreeBSD/Postfix mail server to accept
relays from my virtual domain clients. I use pop-before-smtp on this
server and the users for these virtual domains are able to pop their
mail but not relay through the server. Here are some vital settings
from my main.cf
virtual_maps = hash:/usr/local/etc/postfix/virtual
relay_domains = $mydestination, $virtual_maps
smtpd_recipient_restrictions = permit_mynetworks, check_client_access
hash:/etc/postfix/pop-before-smtp,check_relay_domains
These virtual domains are postfix virtual domains. Below what I have
the virtual file setup as:
#
mydomain.com anything
[EMAIL PROTECTED] cstrzelc
In my pop-before-smtp-config.pl I have the following specified:
$file_tail('name') = '/var/log/messages';
These are the recommended settings per the pop-before-smtp website. I
can realy when I am sending from the [EMAIL PROTECTED] to another
address. I can not when I try to send from [EMAIL PROTECTED] to
another address. I believe these are all the settings I need.
Thank you for you help
-chris
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: pop-before-smtp
On Mon, 2003-01-13 at 05:55, Dirk Meyer wrote: > $ cd /usr/ports/mail/popa3d && make SMTP_AFTER_POP3=yes install > $ less /usr/local/share/doc/popa3d/POPAUTH Wow, thanks so much this is exactly the kind of solution I was looking for. Best regards. Antoine To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
On Mon, 2003-01-13 at 02:41, Mark wrote: > > I use DRAC + SASL (for sendmail). Admitted, you have to recompile a few > items; but it works like a charm. :) > Looks interesting, thank you... I'll try that. Antoine To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
On Mon, 2003-01-13 at 01:37, pan wrote: > http://popbsmtp.sourceforge.net/ > Thanks, I was just hoping such a solution was included in FreeBSD (in ports or in the distribution). Antoine To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
On Mon, 2003-01-13 at 01:26, Alex wrote: > > Dear/Beste Antoine, > > Monday, January 13, 2003, 12:41:32 AM, you wrote: > > > I've been looking all around but I don't find any pop-before-smtp > > solution within FreeBSD (no package, no ports, at least I didn't find > > any). > > Do you know if such a solution exists. > > What do you mean with: pop-before-smtp. You use STMP to send you mail > from one server to another. And you use POP(3) to receive you mail > from the 2nd server. I use qpopper for my pop3 services. pop-before-smtp is a solution to use smtp from mobile locations without using an smtp-auth technique. Basically, you authenticate through pop, if the authentication is successfull, then your IP is marked as "ok for relaying" during a periiod of time. Very usefull when your users connect from different places as they have dynamic IPs. Antoine To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
- Original Message - From: "Antoine Jacoutot" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, January 13, 2003 12:41 AM Subject: pop-before-smtp > I've been looking all around but I don't find any pop-before-smtp > solution within FreeBSD (no package, no ports, at least I didn't find > any). I use DRAC + SASL (for sendmail). Admitted, you have to recompile a few items; but it works like a charm. :) - Mark System Administrator Asarian-host.org --- "If you were supposed to understand it, we wouldn't call it code." - FedEx To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
* Antoine Jacoutot <[EMAIL PROTECTED]> [20030113 00:40]: > I've been looking all around but I don't find any pop-before-smtp > solution within FreeBSD (no package, no ports, at least I didn't find > any). If you really want to set this up, you might need to work a little harder :o > Do you know if such a solution exists. Yes. I use qmail+vmailmgr+relay-control. It works so well I have forgotten how to install it :) They can be found at http://cr.yp.to/qmail.html, http://untroubled.org/vmailmgr/ and http://untroubled.org/relay-control. To get better support about any installation problems you might have, follow http://www.lifewitqmail.org qvb -- pica To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
> > I've been looking all around but I don't find any pop-before-smtp > > solution within FreeBSD (no package, no ports, at least I didn't find > > any). > > Do you know if such a solution exists. > http://popbsmtp.sourceforge.net/ For the other person who didn't know what pop-before-smtp is; it's a perl daemon utility that maintains a flat file db of those who have recently popped the mail server - db entries contihue to exist for a specific time and then are removed the deamon does not allow anyone not in the flat file to use smtp it's an anti-spam relay technique - really it's a kludge, but it works To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
POP before SMTP is a form of SMTP Authentication. Basically, the SMTP allowes any IP which has succesfully POP'd mail to relay through it for a fixed period, say 15 minutes since the POP3 transaction. It's quite useful for roaming dial users. --Adam - Original Message - From: "Alex" <[EMAIL PROTECTED]> To: "Antoine Jacoutot" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Sunday, January 12, 2003 7:26 PM Subject: Re: pop-before-smtp > > Dear/Beste Antoine, > > Monday, January 13, 2003, 12:41:32 AM, you wrote: > > > I've been looking all around but I don't find any pop-before-smtp > > solution within FreeBSD (no package, no ports, at least I didn't find > > any). > > Do you know if such a solution exists. > > What do you mean with: pop-before-smtp. You use STMP to send you mail > from one server to another. And you use POP(3) to receive you mail > from the 2nd server. I use qpopper for my pop3 services. > > -- > Best regards/Met vriendelijke groet, > Alex > > > To Unsubscribe: send mail to [EMAIL PROTECTED] > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
Re: pop-before-smtp
Dear/Beste Antoine, Monday, January 13, 2003, 12:41:32 AM, you wrote: > I've been looking all around but I don't find any pop-before-smtp > solution within FreeBSD (no package, no ports, at least I didn't find > any). > Do you know if such a solution exists. What do you mean with: pop-before-smtp. You use STMP to send you mail from one server to another. And you use POP(3) to receive you mail from the 2nd server. I use qpopper for my pop3 services. -- Best regards/Met vriendelijke groet, Alex To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
pop-before-smtp
Hi ! I've been looking all around but I don't find any pop-before-smtp solution within FreeBSD (no package, no ports, at least I didn't find any). Do you know if such a solution exists. Thanks in advance. Best regards. Antoine To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
