Pb with cyradmin and quotas...
Hello, I use quotas on mailbox with cyradmin. I use scripts which check (in the night) if user go out the warning limit (80%) of is mailbox quota. Today, i see that a user maibox is 85% full. So i use cyradm to check it, and cyradm write: localhost lq user.toto STORAGE 5996/1 (59%) I didn't understand and i made a check on the file systeme: # du -h /var/spool/cyrus/mail/user/toto 28k/var/spool/cyrus/mail/user/toto/Transmis 856k/var/spool/cyrus/mail/user/toto/Poubelle 16k/var/spool/cyrus/mail/user/toto/Brouillon 16k/var/spool/cyrus/mail/user/toto/arch1 16k/var/spool/cyrus/mail/user/toto/arch2 16k/var/spool/cyrus/mail/user/toto/arch3 8.5M/var/spool/cyrus/mail/user/totoe What's happend?.. I don't understand. Do you have an idea? Regards, E.Bullier
Solution: Unable to open maildrop
Last year, I had a question: [...] But I'm not able to connect via POP3: as9(ke): telnet imp 110 Trying 192.168.111.32... Connected to imp.ibbone.helinet.de. Escape character is '^]'. +OK imp Cyrus POP3 v2.1.3-Debian(unstable) server ready 424808546.1020438307@imp user Kerstin.Espey +OK Name is a valid mailbox pass *** -ERR [SYS/PERM] Unable to open maildrop user Zulu +OK Name is a valid mailbox pass *** -ERR [SYS/PERM] Unable to open maildrop The other thing is, that I'm not able to send mail to the mailboxes. Perhaps it is the same problem? [...] As I got several mails with the same question since them, here is the fix: the problem was, that I created the mailboxes with cm Kerstin.Espey but not with cm user/Kerstin.Espey After creating my mailboxes with user/ in front of the name, everything works fine. Dots in usernames are no proplems, as we use the option unixhierarchysep. -- Hope that helps. Kerstin
Re: cvs cyrus-imapd-2_2 and quota with virualdomain
Hi, From the previous posts in this mailing list about virutal domains I can remember reading something about running mkimap before you could setup virtual domain mailboxes... Try to browse this mailing list with some keywords like virtual domains... I guess that's your problem. Regards Marc Vittorio Manfredini To: [EMAIL PROTECTED] [EMAIL PROTECTED] cc: Sent by: Subject: cvs cyrus-imapd-2_2 and quota with virualdomain [EMAIL PROTECTED] ew.cmu.edu 01/21/03 11:10 AM I just install to test the cvs version and I activate it on a machine using a virtual domain. All seem to work fine, but when I try to set quota on a virtual domain mailbox I have an I/O error. When I read the log file I found this error : Jan 21 11:08:06 www imap[1614]: IOERROR: creating quota file /var/imap/domain/S/dotalia.com/quota/P/user.franro.NEW: No such file or directory dotalia.com is the virtual domain [EMAIL PROTECTED] is the user name what is strange is that the directory /var/imap/domain/S/ is empty, because the domain was created under /var/imap/domain/d/ It is a bug or maybe I did same error with the configuration ? vittorio - This mail sent through IMP: http://horde.org/imp/
All messages marked as New
Hello, We've recently moved accounts from servers running 1.5.14 to 2.1.11. We've had several users report that all their messages are being shown as New ( Unread ) by their email client and remain so despite reading the messages. Removing the users seen file fixes the problem for new mail. We however do not know why this is happening. Has anyone else seen similar problems? Is there a better fix available, ie, one that can read the seen status of the old server's format and translate that to the new server? Regards, Earl Shannon -- Systems Programmer, Computing Services, Information Technology NC State University. http://www.earl.ncsu.edu
Re: Pb with cyradmin and quotas...
Mr Bullier Erick wrote: I use quotas on mailbox with cyradmin. I use scripts which check (in the night) if user go out the warning limit (80%) of is mailbox quota. Today, i see that a user maibox is 85% full. So i use cyradm to check it, and cyradm write: localhost lq user.toto STORAGE 5996/1 (59%) I didn't understand and i made a check on the file systeme: # du -h /var/spool/cyrus/mail/user/toto 28k/var/spool/cyrus/mail/user/toto/Transmis 856k/var/spool/cyrus/mail/user/toto/Poubelle 16k/var/spool/cyrus/mail/user/toto/Brouillon 16k/var/spool/cyrus/mail/user/toto/arch1 16k/var/spool/cyrus/mail/user/toto/arch2 16k/var/spool/cyrus/mail/user/toto/arch3 8.5M/var/spool/cyrus/mail/user/totoe What's happend?.. I don't understand. Do you have an idea? The cyrus quota doesn't include administrative files, such as cyrus.index and cyrus.cache -- the user is only charged for files they have control over. Rather than checking the filesystem directly, use /usr/local/cyrus/bin/quota (or wherever you installed it) and process that output, or have a script connect to the IMAP server using an administrative account and do getquotaroot commands. -- John A. Tamplin Unix System Administrator Emory University, School of Public Health +1 404/727-9931
Re: cvs cyrus-imapd-2_2 and quota with virualdomain
Vittorio Manfredini wrote: I just install to test the cvs version and I activate it on a machine using a virtual domain. All seem to work fine, but when I try to set quota on a virtual domain mailbox I have an I/O error. When I read the log file I found this error : Jan 21 11:08:06 www imap[1614]: IOERROR: creating quota file /var/imap/domain/S/dotalia.com/quota/P/user.franro.NEW: No such file or directory dotalia.com is the virtual domain [EMAIL PROTECTED] is the user name what is strange is that the directory /var/imap/domain/S/ is empty, because the domain was created under /var/imap/domain/d/ It is a bug or maybe I did same error with the configuration ? Did you compile with --enable-fulldirhash? If so, this might be the problem because mkimap does not support this yet. That being said, I didn't think that fulldirhash used upper case letters for the hash directories. What does the path to this mailbox look like (/var/spool/imap/domain/...)? -- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key--http://www.oceana.com/~ken/ksm.pgp
Re: Pb with cyradmin and quotas...
The cyrus quota doesn't include administrative files, such as cyrus.index and cyrus.cache -- the user is only charged for files they have control over. Rather than checking the filesystem directly, use /usr/local/cyrus/bin/quota (or wherever you installed it) and process that output, or have a script connect to the IMAP server using an administrative account and do getquotaroot commands. I made this check (see in the first mail) and the result was to the filesystem check more than 2.5 Mo! I checked to the cyrus administrative file , and only one was very big: the top level cyrus.cache file (fast 1 Mo). The another were normal... The difference between the filesytem check end the cyrus quota check isn't normal for me (even whith the admin files...). Because i posted this mail this morning. Maybe there is something i don't know... Thank's for your help, Regards, Erick Bullier
Re: cvs cyrus-imapd-2_2 and quota with virualdomain
On Tue, 21 Jan 2003, Ken Murchison wrote: Did you compile with --enable-fulldirhash? If so, this might be the problem because mkimap does not support this yet. That being said, I didn't think that fulldirhash used upper case letters for the hash directories. What does the path to this mailbox look like It does. lowercase for the old hash, uppercase for full hash. (/var/spool/imap/domain/...)? -- One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie. -- The Silicon Valley Tarot Henrique Holschuh
Re: cvs cyrus-imapd-2_2 and quota with virualdomain
Henrique de Moraes Holschuh wrote: On Tue, 21 Jan 2003, Ken Murchison wrote: Did you compile with --enable-fulldirhash? If so, this might be the problem because mkimap does not support this yet. That being said, I didn't think that fulldirhash used upper case letters for the hash directories. What does the path to this mailbox look like It does. lowercase for the old hash, uppercase for full hash. Thanks. Does fullhash use both upper and lower or just upper exclusively? (I could look at the code, but I'm being lazy) -- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key--http://www.oceana.com/~ken/ksm.pgp
Re: unix:lmtp vs /usr/cyrus/bin/deliver ?
On Monday 20 January 2003 19:52, Kendrick Vargas wrote: Thanks for the clarification. i have to admit that I'd never worked with LMTP before I undertook this project... Anyways, with the AMaViS virus filtering, could you clarify a bit? Does your MX point to an AMaViS server which then forwards to your Postfix/Cyrus box? (MX) -- [AMaViS-smtp1] -- [Postfix-smtp2] ? Or is it something different? For some reason I thought that most filtering solutions worked between the SMTP process and the message store (as in a /bin/deliver replacement). (Oh, and I'm assuming that hosting multiple domains doesn't complicate this?) If you wouldn't mind sharing a config file I'd appreciate it ... Thanks, Thomas The deliver method is gonna be more costly in terms of resources than lmtp. Every time postfix is going to deliver the mail, it has to spawn a shell which loads the binary every time, chews up memory, etc, just to deliver mail. With lmtp, cyrus is allready spawning and listening on a socket and all postfix has to do is open and write to the socket. Not to mention that you'll have permissions and security issues with the deliver method over the lmtp method. If you're worried about filter flexibility, don't. Postfix is very flexible in this sense. I use AMaViS with my server (several domains) and I have it running as a local only smtp daemon, and I essentially redirect email through it to provide the filtering. It's alot safer this way. I have spam filtering defined as a postfix content filter but I could do it as a smtp redirect as well. -peace
Re: cvs cyrus-imapd-2_2 and quota with virualdomain
On Tue, Jan 21, 2003 at 11:09:56AM -0500, Ken Murchison wrote: Does fullhash use both upper and lower or just upper exclusively? (I could look at the code, but I'm being lazy) It uses upper case exclusively, to distinguish it from the original hash scheme. -- -Gary Mills--Unix Support--U of M Academic Computing and Networking-
financial support - Re: Per-Domain-Quota in 2.2 with virtual domainsturned on ?
Rob Siemborski wrote: doc/readme.html: If you wish to provide financial support to the Cyrus Project, send a check payable to Carnegie Mellon University to Project Cyrus Computing Services Carnegie Mellon University 5000 Forbes Ave Pittsburgh, PA 15213 USA I'm not sure it can be stated more clearly than that. With a prominent link on the website, and the ability to use paypal or credit card? -- Kervin Pierre [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
Re: unix:lmtp vs /usr/cyrus/bin/deliver ?
On Tue, 21 Jan 2003, Thomas Hannan wrote: Anyways, with the AMaViS virus filtering, could you clarify a bit? Does your Get amavisd-new, tell your MTA to deliver to amavisd-new through SMTP, then deliver it back to the MTA through SMTP, and let it deliver to Cyrus through LMTP. Trivial to do with postfix, if you read the docs... and *very* fast. You don't interface amavisd-new directly to cyrus (although you COULD do so) so that it can generate bounces, and do some intelligent per-user processing. Besides, it is safer to have it send the messages back to a MTA. -- One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie. -- The Silicon Valley Tarot Henrique Holschuh
Re: unix:lmtp vs /usr/cyrus/bin/deliver ?
On Tue, 21 Jan 2003, Thomas Hannan wrote: Thanks for the clarification. i have to admit that I'd never worked with LMTP before I undertook this project... Anyways, with the AMaViS virus filtering, could you clarify a bit? Does your MX point to an AMaViS server which then forwards to your Postfix/Cyrus box? (MX) -- [AMaViS-smtp1] -- [Postfix-smtp2] ? Or is it something different? For some reason I thought that most filtering solutions worked between the SMTP process and the message store (as in a /bin/deliver replacement). (Oh, and I'm assuming that hosting multiple domains doesn't complicate this?) Well, they probably were originally, and my method is mostly the same, only instead of piping to a script, I simply open a socket to SMTP. The AMaViS smtp server is extremely simple, and doesn't take any consideration of spammers, relay, etc. All it does is take in, filter, and spit out, therefore you don't want to run something like that on an open network port. The docs recommend running it on the localhost (127.0.0.1) interface so that it's only accessible from the local machine. Essentially my setup receives all mail externally and internally with postfix. Postfix is then configured to router mail through AMaViS's smtp daemon and listen on the outport for AMaViS for filtered email. If you wouldn't mind sharing a config file I'd appreciate it ... I'll take this off list. -peace -- Let he who is without clue kiss my ass
Re: unix:lmtp vs /usr/cyrus/bin/deliver ?
Henrique de Moraes Holschuh wrote: On Tue, 21 Jan 2003, Thomas Hannan wrote: Anyways, with the AMaViS virus filtering, could you clarify a bit? Does your Get amavisd-new, tell your MTA to deliver to amavisd-new through SMTP, then deliver it back to the MTA through SMTP, and let it deliver to Cyrus through LMTP. Trivial to do with postfix, if you read the docs... and *very* fast. You don't interface amavisd-new directly to cyrus (although you COULD do so) so that it can generate bounces, and do some intelligent per-user processing. Besides, it is safer to have it send the messages back to a MTA. Actually, the very latest release of amavisd-new fully supports using LMTP to send the messages on after scanning, so it can be used to send them to Cyrus in LMTP mode. It can then generate DSNs if necessary and send them out via whatever SMTP MTA you are using.
Problem with cyrus and deleting a message with a virus.
Hi - We are running uvscan, and it will delete a cyrus message file that contains a virus. Of course, cyrus doesn't know that the message is deleted, so it still shows that message, albeit it shows up as being from Unknown with (no subject). The problem is that this message can't be deleted, no matter what method the user tries. The only solution we have found is to replace the deleted message with a dummy file, and then it can be deleted. We can't be the only one having this problem. Do other people run virus scanning software, like uvscan, on their server? Thanks. - Mark
Re: Problem with cyrus and deleting a message with a virus.
On Tue, 21 Jan 2003, Mark London wrote: Hi - We are running uvscan, and it will delete a cyrus message file that contains a virus. Of course, cyrus doesn't know that the message is deleted, so it still shows that message, albeit it shows up as being from Unknown with (no subject). The problem is that this message can't be deleted, no matter what method the user tries. The only solution we have found is to replace the deleted message with a dummy file, and then it can be deleted. We can't be the only one having this problem. Do other people run virus scanning software, like uvscan, on their server? Thanks. - Mark If you're messing around with the internal data stores of a program, and then you get upset when the program doesn't work, I'd say that you've created your own problem. If you really want to do this, convince your virus scanner to delete the files via the IMAP protocol instead of arbitrarly altering data structures that it knows nothing about. -Rob (Note that you can also rebuild the mailbox with the reconstruct command, but I don't recommend this as a general solution). -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 Research Systems Programmer * /usr/contributed Gatekeeper
Re: Problem with cyrus and deleting a message with a virus.
Hi - We are running uvscan, and it will delete a cyrus message file that contains a virus. Of course, cyrus doesn't know that the message is deleted, so it still shows that message, albeit it shows up as being from Unknown with (no subject). The problem is that this message can't be deleted, no matter what method the user tries. The only solution we have found is to replace the deleted message with a dummy file, and then it can be deleted. We can't be the only one having this problem. Do other people run virus scanning software, like uvscan, on their server? Thanks. - Mark If you're messing around with the internal data stores of a program, and then you get upset when the program doesn't work, I'd say that you've created your own problem. I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? Btw, I would think cyrus should be able to handle the simple case of a missing single file. I should be able to delete a message for which the message file is already missing. We're not talking about a complex database file structure here. It's a single file with a single message.
Re: Problem with cyrus and deleting a message with a virus.
On Tue, 21 Jan 2003, Mark London wrote: I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? Run a scanner as a part of your MTA, and don't let the messages get delivered to cyrus in the first place. Programs such as mimedefang provide ways to do this. Btw, I would think cyrus should be able to handle the simple case of a missing single file. I should be able to delete a message for which the message file is already missing. We're not talking about a complex database file structure here. It's a single file with a single message. Why is it any different from a database? Just because the mailstore is spread between multiple files and an index doesn't mean that one part can be tossed away needlessly. A mailstore is just that... a database. If you deleted the data file for a mysql database, but left the index file around, would you expect it to still work perfectly? -Rob -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456 Research Systems Programmer * /usr/contributed Gatekeeper
Re: Problem with cyrus and deleting a message with a virus.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Content-Type: text/plain; charset=us-ascii In message [EMAIL PROTECTED], Rob S iemborski writes: On Tue, 21 Jan 2003, Mark London wrote: If you're messing around with the internal data stores of a program, and then you get upset when the program doesn't work, I'd say that you've created your own problem. If you really want to do this, convince your virus scanner to delete the files via the IMAP protocol instead of arbitrarly altering data structures that it knows nothing about. -Rob (Note that you can also rebuild the mailbox with the reconstruct command, but I don't recommend this as a general solution). Right. Other than losing the flags data, are there any other downsides to this solution? (We were thinking of using this to delete old messages from users spam folders) - -- Ted Cabeen http://www.pobox.com/~secabeen[EMAIL PROTECTED] Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED] I have taken all knowledge to be my province. -F. Bacon [EMAIL PROTECTED] Human kind cannot bear very much reality.-T.S.Eliot[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (FreeBSD) Comment: Exmh version 2.5 07/13/2001 iD8DBQE+Lb10oayJfLoDSdIRAruBAJ47lR+8YkN3UwjBLE4KCBD0lwVsVACgpbwD 0xC2+RXRVadgscm59feoPP4= =YLop -END PGP SIGNATURE-
Re: Problem with cyrus and deleting a message with a virus.
On 21 Jan 2003 at 16:31, Mark London wrote: I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? The only valid way to access messages under Cyrus control is via the protocols (IMAP/POP), that's stated clearly in the project description. Why don't you stop the virus before the MTA hands the infected message to Cyrus or even better before the MTA accepts it. There are several software pieces (both commercial and Open Source) that implement that kind of functionality. Btw, I would think cyrus should be able to handle the simple case of a missing single file. I should be able to delete a message for which the message file is already missing. We're not talking about a complex database file structure here. It's a single file with a single message. Ok if that's simple enough then implement this functionality or get somebody on your organization with the relevant programming skills to implement it. Send the patch to the Cyrus developers maybe they will accept and it will get included in the official distribution. If not, you can maintain a it as a local patch and update is to every new Cyrus release you deploy. - Ramiro
Re: Problem with cyrus and deleting a message with a virus.
We run Interscan VirusWall--it only deleted the infected attachment, and leaves the message intact (with a note inside telling the user that the attachment was deleted). This makes for some confusion (the user still wants the attachment, thinking it is real mail, and not just a virus. That seems to be a hard concept), but leaves cyrus unaffected. Are there any viruses that infect the whole message? I cannot think of any, maybe you can modify the uvscan program to just delete the attachment, instead of the whole message? c* - Original Message - From: Mark London [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 21, 2003 3:07 PM Subject: Problem with cyrus and deleting a message with a virus. Hi - We are running uvscan, and it will delete a cyrus message file that contains a virus. Of course, cyrus doesn't know that the message is deleted, so it still shows that message, albeit it shows up as being from Unknown with (no subject). The problem is that this message can't be deleted, no matter what method the user tries. The only solution we have found is to replace the deleted message with a dummy file, and then it can be deleted. We can't be the only one having this problem. Do other people run virus scanning software, like uvscan, on their server? Thanks. - Mark
Re: Problem with cyrus and deleting a message with a virus.
Mark London wrote: I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? I think most people scanning their mail do so before it is stored in the filesystem. Btw, I would think cyrus should be able to handle the simple case of a missing single file. I should be able to delete a message for which the message file is already missing. We're not talking about a complex database file structure here. It's a single file with a single message. How far should the server go assuming it knows the reason why some unexpected condition exists? Should it happily ignore a missing /etc/cyrus.conf and assume default settings? Should it assume /var/imap ran out of disk space because there were log files it should silently clean up for you? I imagine it wouldn't be very difficult to hack the source so that whenever it tried to open a message file that didn't exist, it could create a message that says it was removed by virus scanning and then open that file, but that would have to be something you want to run -- I wouldn't want that in the version I was running and I doubt such a hack would get accepted into the codebase. -- John A. Tamplin Unix System Administrator Emory University, School of Public Health +1 404/727-9931
Re: Problem with cyrus and deleting a message with a virus.
On Tue, 21 Jan 2003, Mark London wrote: I'm not messing with it, uvscan is doing it. Is there a better software You told it to... alternative that will delete viruses on the server? Are we the only people Yes, you don't let the virus in the server on the first place, using a content scanning proxy coupled to the antivirus, and tie them to the MTA BEFORE Cyrus. Users can still upload viruses through IMAP, but then they're asking for a account removal... using cyrus that are running virus scanning software on the server? Well, everyone I know does it in the MTA to avoid trashing the Cyrus spool. Btw, I would think cyrus should be able to handle the simple case of a missing It handles that fine, but not in the way you want it to :) I am not sure exactly what changes would need to be made to make it 'test if a message file is there before it tries to unlink it', or to ignore JUST the 'file not found' error when trying to unlink it. After all, all other IO errors must still not be ignored... -- One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie. -- The Silicon Valley Tarot Henrique Holschuh
Re: Problem with cyrus and deleting a message with a virus.
Mark London said: I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? There was a discussion on this last week. Search the archives. Btw, I would think cyrus should be able to handle the simple case of a missing single file. I should be able to delete a message for which the message file is already missing. We're not talking about a complex database file structure here. It's a single file with a single message. It's not as simple as a simple missing file and if that's the depth of your understanding of how Cyrus works, you're in trouble. You have an index of all messages and just arbitrarily removing or mangling it outside of the proper delivery mechanism will cause problems. -- Brian
Re: Problem with cyrus and deleting a message with a virus.
On 21 Jan 2003, Mark London writes: Hi - We are running uvscan, and it will delete a cyrus message file that contains a virus. ... If you're messing around with the internal data stores of a program, and then you get upset when the program doesn't work, I'd say that you've created your own problem. I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? How about checking for viruses before mail reaches Cyrus? Such as with a virus scanner that runs as a milter which sendmail talks to when it receives mail? Or a similar approach for whatever your chosen MTA is? We use RAV http://www.ravantivirus.com in its Sendmail-milter version with good results here. There is no really need to treat the cyrus mailstore as a pile of files, or to run software that naively does that (thereby causing your own problem, as has been pointed out) in order to scan email for viruses. Jonathan -- Jonathan Marsden| Internet: [EMAIL PROTECTED] | Making electronic 1252 Judson Street | Phone: +1 (909) 795-3877 | communications work Redlands, CA 92374 | Fax: +1 (909) 795-0327 | reliably for Christian USA | http://www.xc.org/jonathan| missions worldwide
Re: Problem with cyrus and deleting a message with a virus.
Ted Cabeen wrote: Right. Other than losing the flags data, are there any other downsides to this solution? (We were thinking of using this to delete old messages from users spam folders) If your users all have spam folders named the same or similar (presumably put there by spam filtering software), wouldn't ipurge do what you want already and without screwing with Cyrus's data structures? -- John A. Tamplin Unix System Administrator Emory University, School of Public Health +1 404/727-9931
Re: Problem with cyrus and deleting a message with a virus.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Content-Type: text/plain; charset=us-ascii In message [EMAIL PROTECTED], John Alton Tamplin writes: Ted Cabeen wrote: Right. Other than losing the flags data, are there any other downsides to this solution? (We were thinking of using this to delete old messages from users spam folders) If your users all have spam folders named the same or similar (presumably put there by spam filtering software), wouldn't ipurge do what you want already and without screwing with Cyrus's data structures? Hmmm. Didn't know that existed. I'll take a look at that - -- Ted Cabeen http://www.pobox.com/~secabeen[EMAIL PROTECTED] Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED] I have taken all knowledge to be my province. -F. Bacon [EMAIL PROTECTED] Human kind cannot bear very much reality.-T.S.Eliot[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (FreeBSD) Comment: Exmh version 2.5 07/13/2001 iD8DBQE+LcrEoayJfLoDSdIRAt/kAJwMxrY/wMyrOHwxWdybg1jYGgLaIQCgynOV Da8Xp41o5SFKOlt6LEFf37Q= =D6Fz -END PGP SIGNATURE-
Re: Problem with cyrus and deleting a message with a virus.
On Tuesday 21 January 2003 16:58 pm, Will Day wrote: A short time ago, at a computer terminal not so far away, Mark London wrote: If you're messing around with the internal data stores of a program, and then you get upset when the program doesn't work, I'd say that you've created your own problem. I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? We're using Cyrus and doing virus scanning (with uvscan in fact), but we do it from the MTA, before it reaches cyrus (using Anomy as content-filter in postfix). Yes, amavis-new also will do this and is uvscan compatible. http://www.ijs.si/software/amavisd/ Cheers, Jeremy
Re: Problem with cyrus and deleting a message with a virus.
At 16:56 -0500 Brian wrote: Mark London said: I'm not messing with it, uvscan is doing it. Is there a better software alternative that will delete viruses on the server? Are we the only people using cyrus that are running virus scanning software on the server? But uvscan is treating your cyrus store as a fileserver, and you shouldn't do that. Your Cyrus store is a black box which happens to have enough structure to make a tape restore feasible, but even that is living dangerously. I've told my users (who are CS academics and students) that our shiny new IMAP service has got algorithms and leave it at that :) Then they see the dramatic speed increase over our old system, and suddenly the need to quiz my silly slogan vapourises! There was a discussion on this last week. Search the archives. Yes.. unfortunately I don't have time to write an ICAP client, especially as I only have access to uvscan, which doesn't daemonise (and so would probably not benefit from an ICAP server unless there was a big farm of 'em..). (I would have replied earlier, but have been plagued both by illness and our students' return..) Maybe if your uvscan is running as a cron job, you can wrapper it in a privileged IMAP client which fetches every message into a ramdisk, runs uvscan on it and if necessary then move the file from your ramdisk into a quarantine area, uses IMAP to delete expunge the users' mail and finally mails the user to say what's happened.. if your client has got algorithms it could track Message IDs (amongst other things) so that you don't repeatedly scan mail which hasn't changed.
Re: Problem with cyrus and deleting a message with a virus.
At 14:16 -0800 Jonathan Marsden wrote: How about checking for viruses before mail reaches Cyrus? Such as with a virus scanner that runs as a milter which sendmail talks to when it receives mail? Or a similar approach for whatever your chosen MTA is? Because (as mentioned elsewhere in this thread) lmtpd is not the only way messages can be stored on an IMAP server: eg think of sending a poisoned attachment, which magically ends up in your sent folder.
Re: Problem with cyrus and deleting a message with a virus.
On 21 Jan 2003, [EMAIL PROTECTED] writes: At 14:16 -0800 Jonathan Marsden wrote: How about checking for viruses before mail reaches Cyrus? Such as with a virus scanner that runs as a milter which sendmail talks to when it receives mail? Or a similar approach for whatever your chosen MTA is? Because (as mentioned elsewhere in this thread) lmtpd is not the only way messages can be stored on an IMAP server: eg think of sending a poisoned attachment, which magically ends up in your sent folder. I don't see the 'elsewhere in this thread' mail yet, but anyway: This is technically correct. (a) That 'poisoned attachment' came from somewhere -- where? If from a workstation within your organization, why didn't the virus scanning software on that workstation detect it? Shouldn't this be the first priority? For the attachment to be sent to the Sent folder, the primary layer of workstation virus protection must already have failed. If that happens at all frequently, there is an underlying issue which needs to be addressed on the workstations. (b) That attachment in the IMAP Sent folder can't exactly do much damage from there... it can't be sent to anyone, since the outgoing MTA will trap it. Sure, it can be read/downloaded/run by the sending user... but they already have a copy on their workstation anyway, else how did they get it into the IMAP server in the first place? (c) I suspect that 99.9% of viral email does in fact arrive over the SMTP/MTA channel, so if you configured the server file system scanner to *report* stuff it found under the Cyrus mail partitions(s) but not remove it, and also use an MTA-hosted scanner for the other 99.9%, you'd have a manual user support task for one virus in 1000. That task would be something like: go to or otherwise gain control over the user's workstation concerned, fix that workstation's virus issues if any, then use their mail client to delete that attachment from their Sent folder. This last part is probably not a huge additional workload, since you'd be dealing with the infected workstation anyway. If you absolutely have to have a way to delete rare viral messages from the Cyrus mailstore 100% automatically, I'd suggest writing a small Perl script making use of Cyrus::IMAP::Admin that looks at the output of your filesystem scanner (set to report only, not delete), looks at the content of the file(s) in question (to find a Message ID or other unique identifier) and logs into Cyrus as the admin user and deletes the message(s) concerned. As a general principle, external tools *must* *not* add/edit/delete files or directories within the Cyrus mailstore. Just as they must not add/edit/delete stuff within your Oracle, Postgres or MySQL databases. Cyrus gives you a well defined API (well, two: LMTP and IMAP!). Use them, and only them, to make changes to the Cyrus mailstore, and Cyrus will stay healthier than if you bypass them. Just because your chosen scanner apparently does not respect this principle in its current (default?) configuration, does not mean the problem lies with Cyrus :-) Jonathan -- Jonathan Marsden| Internet: [EMAIL PROTECTED] | Making electronic 1252 Judson Street | Phone: +1 (909) 795-3877 | communications work Redlands, CA 92374 | Fax: +1 (909) 795-0327 | reliably for Christian USA | http://www.xc.org/jonathan| missions worldwide
Re: Problem with cyrus and deleting a message with a virus.
[EMAIL PROTECTED] wrote: At 14:16 -0800 Jonathan Marsden wrote: How about checking for viruses before mail reaches Cyrus? Such as with a virus scanner that runs as a milter which sendmail talks to when it receives mail? Or a similar approach for whatever your chosen MTA is? Because (as mentioned elsewhere in this thread) lmtpd is not the only way messages can be stored on an IMAP server: eg think of sending a poisoned attachment, which magically ends up in your sent folder. ...where it would be relatively harmless anyway except to the already-infected local user... Putting the virus scanner in your MTA not only greatly limits the possibility that computers accessing your Cyrus server will be infected in the first place, but also insures against the possibility of having locally infected computers sending virii to all your associates, clients, vendors, etc. (assuming that you block unauthorized outgoing SMTP at your firewall). IMHO the MTA is by far the best possible place to put a virus scanner. -- Jules Agee System Administrator Pacific Coast Feather Co. [EMAIL PROTECTED] x284
Conversion/Migration
Hi! I am aware this question has been asked several times before, so please go easy on me. I'm wishing to move people off BSD popper over to a Cyrus system I've set up. Unfortunately, being school holidays, they've gone and got their current mailboxes jammed with stuff that is (no doubt) so damned important I'd be hung, drawn and quartered if the little blighters lost it. I've done some digging in the archives, and it seems the 'best' way recommended to do this is with the UOW mailutil program. I've run what I seem to think the command required is, but I get : Read-only POP3 access not available I was trying to 'copy' as a test, as I don't want to go destroying data untul such time as I'm confident I've got it right. Now, there's a couple of points I wish to ask. 1. I *assume* that this is POPPER throwing this error. So, one quiet night if I cut over to CYRUS, disable external access to the POP server, then enable read only access it'll convert files. If so, what's the easiest way to do this inside cyrus's config file? 2. Does this work 'globally', or will each user need to have it run in their account? From what I can make out of the source, I could set up the POP daemon read only, then feed it user names (ie, not prompting for passwords), and 'do it' that way, then mailutil will (hopefully :-) pass the user back into Cyrus IMAP. 3. Point 2 brings up the matter creating the User's INBOX folder and feeding the mail in as appropriate. I'd assume that this feeding into IMAP would need to be done as the cyrus admin user (for permission reasons). Therefore, step 2 would also need to be done as the cyrus admin. Therefore, is it possible to set up Cyrus POP to be read only if the cyrus admin user connects (no, I don't intend to leave this feature enabled). Any thoughts appreciated. Cheers, Pete.
Re: Working Vacation??
Hi Ken, On Fri, 10 Jan 2003 12:43:12 -0500, Ken Murchison [EMAIL PROTECTED] wrote... Did you try sieve/test on your script and a message? I've finally had a chance to try sieve/test on the script and a message as you suggested. The test program after asking questions decided to send a vacation response. However, the same message sent through lmtp to a user with a vacation script doesn't cause a vacation reply. I've hacked in the sieve/script.c VACATION section. Adding syslog LOG_DEBUG calls where SIEVE_DONE is set. It gets to the section where it tries to find my address in the headers TO, CC or BCC. However, myaddr contains test@unspecified-domain rather than [EMAIL PROTECTED] and since it can't find the unspecified-domain address in the headers, it bails out and doesn't send a vacation response. Where does unspecified-domain come from? How can I fix it? I was connecting directly to sendmail so I'm certain that I didn't enter the unspecified-domain. I suppose that sendmail is stripping off the domain part. helo test.air.co.jp mail from: [EMAIL PROTECTED] rcpt to: [EMAIL PROTECTED] data Date: Wed, 22 Jan 2003 17:21:09 +0900 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Test Message-ID: [EMAIL PROTECTED] Test message text goes here . quit Here is the cyrus entry from sendmail.cf if that helps any. Mcyrus, P=[IPC], F=lsDFMnqA@/:|SmXz, E=\r\n, S=EnvFromL, R=EnvToL/HdrToL, T=DNS/RFC822/X-Unix, A=FILE /var/imapd/socket/lmtp Regards, Mark Keasling [EMAIL PROTECTED]
Cyrus-imap-2.2 cyradm failure
hi all, I got a Cyrus-imap-2.2 from CVS yeserday and I compiled it successfully.But I can't use cyradm to create mailbox. System gave me a error message as follows Can't load '/usr/lib/perl5/site_perl/5.6.1/i386-linux/auto/Cyrus/IMAP/IMAP.so' f or module Cyrus::IMAP: /usr/lib/perl5/site_perl/5.6.1/i386-linux/auto/Cyrus/IMAP /IMAP.so: undefined symbol: db_version at /usr/lib/perl5/5.6.1/i386-linux/DynaLo ader.pm line 206. at /usr/lib/perl5/site_perl/5.6.1/i386-linux/Cyrus/IMAP/Admin.pm line 44 Compilation failed in require at /usr/lib/perl5/site_perl/5.6.1/i386-linux/Cyrus /IMAP/Admin.pm line 44. --- would anyone help me ? Thanks a lot. --- Kai __ Do You Yahoo!? Yahoo! BB is Broadband by Yahoo! http://bb.yahoo.co.jp/
