Re: logging

2004-11-29 Thread Ted Cabeen
Johan Barelds <[EMAIL PROTECTED]> writes:

> Just started with cyrus imap and i have to say that the logging is not what i 
> expected. Are there any plans do to a proper /var/log/ logging for all the 
> actions like pop statistics, inbound, outbound mail to specific mailbox, 
> deletion of mail by mailbox users etc.etc.

I'd also like to see statistics on number of messages viewed and
deleted on a per mailbox basis would be nice here as well.  We had
this functionality with qpopper, and it would be nice to have
something similar in the cyrus pop server.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL 
PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot   [EMAIL PROTECTED]

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Re: Spaces and IMAP searching with Cyrus

2004-05-28 Thread Ted Cabeen
Rob Siemborski <[EMAIL PROTECTED]> writes:

> On Fri, 28 May 2004, Ted Cabeen wrote:
>
>> A number of my users have been reporting problems with searching.  It
>> seems like the Cyrus server is totally ignoring whitespace when
>> performing searches.  This behavior causes quite a few false positives
>> in my searches.  For example, a search for "logo" will return messages
>> with the following subject: "Log of changes for ws".  This can
>> make it very hard to find some messages.  Is it possible to
>> reconfigure Cyrus to not match results that cross word boundaries or
>> to respect spaces?  This behavior is pretty non-intuitive.
>
> No, it is not possible without changing the code.  In many cases, its
> better to give too many search results than too few.

How substantial of a code change would it be?  I might be up for
writing a patch if it didn't require widespread changes to the caching
and database systems, which is probably over my head.

> Of course, were are fast approaching the day where the search and sort
> comparitors will require that we do stringprep on all the strings, and
> that day will be very sad.

When that day comes, will this no longer be a problem?  How long is
"fast approaching"?

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Spaces and IMAP searching with Cyrus

2004-05-28 Thread Ted Cabeen
A number of my users have been reporting problems with searching.  It
seems like the Cyrus server is totally ignoring whitespace when
performing searches.  This behavior causes quite a few false positives
in my searches.  For example, a search for "logo" will return messages
with the following subject: "Log of changes for ws".  This can
make it very hard to find some messages.  Is it possible to
reconfigure Cyrus to not match results that cross word boundaries or
to respect spaces?  This behavior is pretty non-intuitive.  

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Multiple defaultdomains?

2004-01-23 Thread Ted Cabeen
Is it possible for there to be multiple defaultdomains?  I have a
number of domains that all merge together, and I'd like all of them to
end up in the unqualified mailboxes.  Is that possible, or do I need
to setup a forwarding system in my MTA?

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Migrate passwords from shadow to mysql

2004-01-22 Thread Ted Cabeen
Ken Murchison <[EMAIL PROTECTED]> writes:

> Shelley Waltz wrote:
>
>> I am installing a new postfix-cyrus mail server.
>> I currently have cyrus-imap 1.6.24 authing PLAIN
>> from /etc/shadow.
>> I wish to migrate the passwords(md5) from the shadow file to
>> a mysql database and use this to auth PLAIN using TLS.
>> Is there a script available to do so - to migrate the users
>> from the shadow file and create the records for mysql authentication?
>> I did search, but found nothing.
>
> First, I'd strongly suggest that you upgrade to a recent version of
> Cyrus, either 2.1.16 or 2.2.3.  To do this, you'll need a recent
> version of SASL (I'd suggest 2.1.17).  Then, you just configure
> Cyrus/SASL to authentication plaintext from /etc/shadow and have it
> autotransition passwords into the SQL auxprop plugin.

That works?  Cool!  

Will that store plaintext passwords in the SQL database, or will it
store them encrypted?

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


virtualdomains and SASL realms?

2004-01-20 Thread Ted Cabeen
A couple of questions about virtual domains before we setup our
virtual domain system.

1) What realm is sent to the SASL layer when a user logs in with an
unqualified username?  Is the realm automatically set to the virtual
domain that they're in?

2) When a user logs in with an unqualified username in the
defaultdomain, are they sent with a blank SASL realm, or with the
defaultdomain as their realm?

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Cyrus IMAPd 2.2.3 Released

2004-01-16 Thread Ted Cabeen
Rob Siemborski <[EMAIL PROTECTED]> writes:

> I'm quite pleased to announce the long-awaited stable release of Cyrus
> IMAPd 2.2.3.  This release contains substantial new features over the 2.1
> series including extensive support for mailbox annotations, NNTP, much
> more stable process accounting, and of course, virtual domains.
>
> This release also contains support for Berkeley DB 4.2, runtime
> configuration of cyrusdb backends, a socket map daemon compatible with
> Sendmail 8.13, and much more.

Now that cyrus supports db4.2, is it recommended to upgrade installs
that use db4.0 to db4,2 as part of an upgrade to 2.2.3?

If so, is there anything I need to do other than point cyrus at the
4.2 libraries during the compile?

(Is there a command I can run to tell what DB formats I'm using on my
2.1.15 install?  I want to convert to the defaults if possible,
although I'm already running skiplist for the mboxlistdb and the seendb)

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Cyrus IMSPd 1.6a4 and 1.7a Released

2003-12-12 Thread Ted Cabeen
Rob Siemborski <[EMAIL PROTECTED]> writes:

> On Fri, 12 Dec 2003, Ted Cabeen wrote:
>
>> Do you have a patch for the vulnerability?
>
> Yes, however there are a *lot* of places that are likely to contain
> unproven vulnerabilities that are also fixed in this release.
>
> https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/cyrusimsp/imsp/abook.c.diff?r1=1.18&r2=1.19
>
> Is the patch for the advisory that n.runs is about to publish.  I strongly
> recommend you look at a full upgrade however.

Hmmm that's a start.  A patch that goes from 1.7 to 1.7a would be nice
if there were other good fixed.  If you don't want to generate it, I
can.

Getting imsp to compile here was a pain because of integrating the
lib directory from the current cyrus into IMSP so that it would
compile and run correctly.

-- 
Ted Cabeen
Sr. Systems/Network Administrator
Impulse Internet Services


Re: Cyrus IMSPd 1.6a4 and 1.7a Released

2003-12-12 Thread Ted Cabeen
Rob Siemborski <[EMAIL PROTECTED]> writes:

> This message is to announce the release of Cyrus IMSPd 1.6a4 and 1.7a on
> ftp.andrew.cmu.edu
>
> These releases correct a recently discovered buffer overflow
> vulnerability, as well as clean up a significant amount of buffer handling
> throughout the code.  I'd like to thank Cyrus Daboo for the time he spent
> cleaning up a great deal of the code, and Felix Lindner of n.runs for
> alerting us to the vulnerability.
>
> All sites are urged to upgrade as soon as possible.
>
> The distribution is available at:
>
> ftp://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.6a4.tar.gz
> ftp://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.7a.tar.gz
> and
> http://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.6a4.tar.gz
> http://ftp.andrew.cmu.edu/pub/cyrus/cyrus-imspd-v1.7a.tar.gz

Do you have a patch for the vulnerability?

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: UIDs and seen database format

2003-11-26 Thread Ted Cabeen
"Michael F. Sprague" <[EMAIL PROTECTED]> writes:

> Hi folks,
>
> I got a response to my question yesterday RE POP UIDs and it was confirmed
> that the way Cyrus generates UIDs is different than the way the old POP
> daemon does.  I imagine it is possible to modify the cyrus source to generate
> UIDs the same way the other daemon does.  
>
> The old POP daemon is running on Tru64 and seems to be an implementation of
> Qualcomm's qpopper.  The generated UID seems to look like this:
>
> 3afd3cf6e70c597d217195d42b973ee
>
> Whereas cyrus generates a UID based on the timestamp and message number:
>
> 106979841.1
>
> Anyone on this list know how qpopper generates its UID and/or of any code
> snippets to get cyrus to generate it the same way?  I suspect this is possible
> b/ we had to do something similar for cucipop at an ISP I worked at in the
> late 1990's.

There are two ways that qpopper can generate UIDs, depending on how
you have it configured.  They're both hashes of the body and a few
header fields.  Depending on how you have it configured, there may
also be a random string added to the hash input.  If you have it
configured to add the random hash, then the UID is generated once when
the message is first downloaded, and then stored in the message in the
X-UIDL header.  If you don't want every downloaded message to have to
edited to add the X-UIDL header, you can tell qpopper to generate the
UID without the random input part and it will re-generate the UID
off of the message data every time.

The best place to find the details is in the qpopper source.  The
file popper/pop_uidl.c has all of the gory details.

> Another option for me is to force all users to use IMAP (which would be nice).
> The problem here is that the first time a user connects ALL of the messages
> will be marked as 'unread'.  I think I can get around this by modifying
> the seen flat file as I import the messages, but I cannot find documentation
> of the format of this file anywhere.  Do I have to read through the source or
> can someone point me to a document or post on this topic?

If you have qpopper setup to add Status headers to the messages on the
server, there is a patch to reconstruct floating around that will use
the Status: header in the message to set the seen data and the like
during the reconstruct.  Check the list archives, as I think it was
posted recently and should make it into the next stable release.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: cannot get idled to run

2003-11-19 Thread Ted Cabeen
Craig Constantine <[EMAIL PROTECTED]> writes:

> --On Tuesday, November 18, 2003 8:34 PM -0800 Ted Cabeen
> <[EMAIL PROTECTED]> wrote:
>
>> Try changing the owner of the idle socket to cyrus.  That's how I have
>> mine, and I reacll that I had trouble getting idled started because of
>> permissions.
>
> nope. I changed it to:
>
> # ls -ald /var/imap/socket/idle
> srwxrwxrwx1 cyruscyrus   0 Jun 17 22:24
> /var/imap/socket/idle
>
> SIGHUP'd the master. Nothing about idled appeared in the logs, I'm
> still getting the 'error sending to idled' errors in syslog. Trying to
> start by hand still gives:

I don't think that idled gets restarted if master is HUP'd.  If you
can do it, what I'd do is stop cyrus, run idled totally alone.  If it
starts then kill it and start cyrus up normally.

> # su - cyrus -c '/usr/cyrus/bin/idled -C /etc/imapd.conf'
> bind: Address already in use
>
> How do I figure out what exactly it is trying to bind to?

You could trace it.  Do you see idled in the process table?
fuser might also tell you what process has the socket open.

-- 
Ted Cabeen
Sr. Systems/Network Administrator
Impulse Internet Services


Re: cannot get idled to run

2003-11-18 Thread Ted Cabeen
On Tue, Nov 18, 2003 at 10:50:13PM -0500, Craig Constantine wrote:
> --On Tuesday, November 18, 2003 2:10 PM -0800 Ted Cabeen 
> <[EMAIL PROTECTED]> wrote:
> 
> >What are the permissions on your idle socket and the directory that
> >the socket is in?
> 
> # ls -ald /var
> drwxr-xr-x   21 root root 4096 Jun 17 21:36 /var
> # ls -ald /var/imap
> drwxrwsr-x   12 smmspcyrus4096 Nov 18 22:37 /var/imap
> # ls -ald /var/imap/socket
> drwxr-s---2 smmspcyrus4096 Nov 18 15:42 /var/imap/socket
> # ls -ald /var/imap/socket/idle
> srwxrwxrwx1 root cyrus   0 Jun 17 22:24 
> /var/imap/socket/idle
> 
> ...and my 'master' process runs as cyrus as you'd expect.

Try changing the owner of the idle socket to cyrus.  That's how I have
mine, and I reacll that I had trouble getting idled started because of
permissions.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: cannot get idled to run

2003-11-18 Thread Ted Cabeen
Craig Constantine <[EMAIL PROTECTED]> writes:

> I'm running (compiled from source) Cyrus-imapd-2.1.13 on RedHat Linux
> 8.0 [all patched up to date.]
>
> With every incoming message I get the oft seen "error sending to
> idled" message in syslog facility local6. Cyrus is of course compiled
> to use idled.  :)
>
> The only thing (that I see) idled should be binding to is the unix socket named in 
> imapd.conf via 'idlesocket'. But a netstat shows that the unix socket 
> /var/imap/socket/idled is not in use, and invoking fuser on the sockets in 
> /var/imap/socket confirms the idled socket is not inuse. (I fuser'd the lmtp socket 
> to make sure fuser does what I think it does. -- 
> 7145 is the cyrus master at the moment. :)
> snip---
> # fuser lmtp
> lmtp: 7145  7584
> # fuser idle
> #
> snip---
>
> Anyone care to swing the clue bat at me?

What are the permissions on your idle socket and the directory that
the socket is in?

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Sql based Spamassassin with sieve

2003-09-12 Thread Ted Cabeen
Pat Lashley <[EMAIL PROTECTED]> writes:
> --On Friday, September 12, 2003 09:50:43 -0700 Ted Cabeen
> <[EMAIL PROTECTED]> wrote:
>
>> Why does it need to run 5 times?  If you've got 5 people with
>> different settings, you can run spamassassin one time and still have
>> individual preferences.  The score of a message is not determined by a
>> user's SA preferences in most cases.
>
> Indeed, few people change the list of tests to be performed or the
> scores of the individual tests; but now that SA has Baysean filtering
> it is quite simple for individuals to maintain their own training
> sets to define what they do or do not consider to be spam.  And that
> will lead to different scores for the same message.

True enough.  I forgot about that.  We just run a site-wide bayesian
database, which while not as good as personal bayesian databases,
helps somewhat.

> I know this is fairly easy to do in Exim.  (Using SA from a router
> rather than an ACL.)  I suspect it's not too difficult for other
> MTAs.  (It does prevent the use of Cyrus' single store option though.)

It's fairly easy to do in postfix as well.  The usual way I've seen it
done is to use procmail as the LDA with a glocal .procmailrc that runs
the SA for each user.  Once the processing has been completed,
procmail hands the mail to deliver.

-- 
Ted Cabeen
Sr. Systems/Network Administrator
Impulse Internet Services


Re: Sql based Spamassassin with sieve

2003-09-12 Thread Ted Cabeen
Ramprasad A Padmanabhan <[EMAIL PROTECTED]> writes:

> On Thu, 2003-09-11 at 05:53, Ted Cabeen wrote:
>> Ramprasad A Padmanabhan <[EMAIL PROTECTED]> writes:
>> 
>> > I am using a gateway spamassassin with Mailscanner. The problem is every
>> > user would like his own individual preferences stored.
>> >
>> > So I was looking if there was a way I could use sieve to fork
>> > spamassassin per user with the user name and the prefernces stored in
>> > Mysql database.
>> >
>> > I found that some people have done this, But there doesnt seem to be
>> > much documentation
>> 
>> We do it with amavisd-new before the mail reaches cyrus.  It uses a
>> slightly different schema for the preferences than SA, but it works
>> well.  Using amavisd-new for this also means that multi-recipient
>> messages are only run through SA once, regardless of the number of
>> recipients.
> Precisely.
> But thats what I do not want. There are some people in my office who
> themselves will decide what is spam and what is not
> Now How Can I run a spamassassasin with individual settings
> If there are 5 rcpts the SA must sperate instances run for all 5 of them
> Must be someway in sieve But I am not able to get one working

Why does it need to run 5 times?  If you've got 5 people with
different settings, you can run spamassassin one time and still have
individual preferences.  The score of a message is not determined by a
user's SA preferences in most cases.  In general, every recipient will
get the same score for the message.  The only thing that changes is
whether the message's score is sufficient to tag the message as spam.
amavisd-new is designed around this method.  It runs the spam check,
gets a result and then compares the score of the message to the
threshold for each recipient.  Depending on their threshold, the
message is either tagged as spam or not.

Do many of your users have SA preference requirements that they would
get a different score for a message than other users?

Also, for whitelists and the like, you can just add sieve rules for
the whitelisting before you check the X-Spam-Flag header.

-- 
Ted Cabeen
Sr. Systems/Network Administrator
Impulse Internet Services


Re: Sql based Spamassassin with sieve

2003-09-10 Thread Ted Cabeen
Ramprasad A Padmanabhan <[EMAIL PROTECTED]> writes:

> I am using a gateway spamassassin with Mailscanner. The problem is every
> user would like his own individual preferences stored.
>
> So I was looking if there was a way I could use sieve to fork
> spamassassin per user with the user name and the prefernces stored in
> Mysql database.
>
> I found that some people have done this, But there doesnt seem to be
> much documentation

We do it with amavisd-new before the mail reaches cyrus.  It uses a
slightly different schema for the preferences than SA, but it works
well.  Using amavisd-new for this also means that multi-recipient
messages are only run through SA once, regardless of the number of
recipients.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: deliver.db == 50MB

2003-07-25 Thread Ted Cabeen
Henrique de Moraes Holschuh <[EMAIL PROTECTED]> writes:

> On Fri, 25 Jul 2003, Mike Cathey wrote:
>> I just wanted to see if it was normal to see the deliver db get this
>> big...
>
>> SNIP
>> -rw---1 cyrusmail  50M Jul 25 11:04 deliver.db
>> SNIP
>> 
>
> It will get as big as you let it to.  Depends on frequency of prunning, and
> the ammount of traffic through lmtp.  Mine is at 11MB right now.

How often should it be pruned and what is the standard method for
doing so?

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Sieve with Spamassassin && virus checking mechanisms?

2003-07-07 Thread Ted Cabeen
James Pattie <[EMAIL PROTECTED]> writes:

> foobar wrote:
>> Hi,
>>
>> Is this (see subject) possible in anyway per account basis in sieve? ( I
>> don't remember if there was any proper plugin-support in sieve (haven't
>> investigated the code too much ).
>>
>> Thing what I done was when I didn't invent anything else and was lazy to
>> read the code:
>>
>> MTA lmtp-> sa_lmtpd (pre-loaded spamassassin-instance which can be re-used
>> (better than that idiotic pipe-wrapper) lmtp-> MDA.
>>
>> by tweakin transports, there is sa.foo.bar which destination is
>> lmtp:where_sa_lmtpd_is and every user which wants sa-processed mail
>> inserts forward [EMAIL PROTECTED] and it goes thru sa_lmtpd to cyrus's
>> lmtpd. That sa_lmtpd is my written perl-daemon which re-uses
>> checker-instances.
>>
>> So,
>> Is there any better way to do this?
>>
>> ++Titus
>>
>
> Check out MailScanner (http://www.mailscanner.info) for a Virus/Spam mail
> filtering product that plugs into the sendmail/exim/whatever flow and uses
> SpamAssassin for it's main spam checking/marking.

If you're using postfix, amavisd-new is quite nice. It does single
spam scan per message, regardless of numberrecipients and allows for
SQL-based storage of SA preferences.

> I use it to deliver to my cyrus server and just wrote a sieve rule to move any
> emails where the subject starts with {SPAM?} (the default in MailScanner) to my
> SPAM folder.  There are lots of other stuff you can do with it also. ;)

We have a web interface that allows for the simple installation of
predefined rules for filter and delete spam.  For advanced stuff, we
use standard Sieve scripts.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Bounce from lmtp with 5.5.2 Syntax error

2003-06-20 Thread Ted Cabeen
Rob Siemborski <[EMAIL PROTECTED]> writes:

> On Fri, 20 Jun 2003, Ted Cabeen wrote:
>
>> Anybody know what would cause this error?  I get it every couple of
>> thousand messages on this testing mailbox.
> [snip]
>> <[EMAIL PROTECTED]>: host
>> /var/spool/postfix/sockets/lmtp[/var/spool/postfix/sockets/lmtp] said: 500
>> 5.5.2 Syntax error (in reply to MAIL FROM command)
>
> If you had the protocol logs of this transaction it would help to diagnose
> the problem.

Okay.  I'll turn on the debugging tonight and if it happens over the
weekend, I'll send it to the list.

> My guess is that postfix is sending a badly formed command of some sort,
> but I can't be more specific than that without the logs (enable telemetry
> logging for lmtp and find a transaction that fails in this way).

Interesting.

> The 5.5.2 error is specifically generated if we can't match the first
> character of the command.  So it looks like postfix thinks its sending
> MAIL FROM but is actually sending something else (\rMAIL FROM maybe?)

I'll look at that.  Thanks for the info.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Bounce from lmtp with 5.5.2 Syntax error

2003-06-20 Thread Ted Cabeen
Anybody know what would cause this error?  I get it every couple of
thousand messages on this testing mailbox.

This is the Postfix program at host red.impulse.net.

I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.

For further assistance, please send mail to 

If you do so, please include this problem report. You can
delete your own text from the message returned below.

The Postfix program

<[EMAIL PROTECTED]>: host
/var/spool/postfix/sockets/lmtp[/var/spool/postfix/sockets/lmtp] said: 500
5.5.2 Syntax error (in reply to MAIL FROM command)


Received: from localhost (localhost [127.0.0.1])
by red.impulse.net (Postfix) with ESMTP id 761851D1762
for <[EMAIL PROTECTED]>; Fri, 20 Jun 2003 11:38:31 -0700 (PDT)
Received: from red.impulse.net ([127.0.0.1])
 by localhost (red.impulse.net [127.0.0.1:10024]) (amavisd-new) with ESMTP
 id 09860-15 for <[EMAIL PROTECTED]>;
 Fri, 20 Jun 2003 11:38:31 -0700 (PDT)
Received: from localhost.localdomain (demon.impulse.net [207.154.64.163])
by red.impulse.net (Postfix) with ESMTP id 0DB1D1D1726
for <[EMAIL PROTECTED]>; Fri, 20 Jun 2003 11:38:31 -0700 (PDT)
To: [EMAIL PROTECTED]
Subject: E-Mail Ping [ID#1056134311#25282]
Message-Id: <[EMAIL PROTECTED]>
Date: Fri, 20 Jun 2003 11:38:31 -0700 (PDT)
From: [EMAIL PROTECTED]
X-Virus-Scanned: by amavisd-new
X-Spam-Status: No, hits=-4.3 tagged_above=-100.0 required=7.0 tests=BAYES_01,
 NO_REAL_NAME
X-Spam-Level: 

This is a automatically sended E-Mail.
It ist not intended for human reader.

Serial No: ID#1056134311#25282

-- 
Ted Cabeen
Systems/Network Administrator
Impulse Internet Services


Detailed logging for lmtpd?

2003-06-09 Thread Ted Cabeen
Is there anyway to get detailed logging out of lmtpd and pop3d?  I've
recently started monitoring mail delivery from end-to-end, and the
nagios plugin that I'm using is reporting about 1 lost message a day.
I'd like to get some better logging data out of lmtpd and pop3d (mails
written to disk and retrieved from box at the least) so that I can
isolate the problem and find the bug in cyrus or the monitoring
script.

Will using -d be sufficient, or are there other logging options that
aren't documented.  I've got syslog running at debug level, but that
doesn't give much.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Cyrus 2.1.13 and single store?

2003-06-05 Thread Ted Cabeen
Bernd Nies <[EMAIL PROTECTED]> writes:

> Simon Matter wrote:
>> Bernd Nies schrieb:
>>
>>>>Looks like this has changed with postfix 2.x. According to the file
>>>>.../README_FILES/LMTP_README, you can do something like
>>>>
>>>>mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
>>>>local_destination_recipient_limit = 300
>>>>
>>>>and it should work. Can anybody confirm this?
>>>
>>>I tried it but it did not work. I guess this option does only work with
>>>local_transport, which does not expand aliases:
>> Are you really using postfix version 2? According to the README, v1
>> was
>> different.
>
> Yes, its Postfix 2.0.7 and I set
>
>mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
>default_destination_recipient_limit = 300
>
> And it did not work. According to the guys from the postfix mailing
> list single message store works only when I bypass the local delivery
> agent and deliver directly to LMTP. But then also the aliases and
> .forward are ignored and aliases have to be moved to virtual aliases,
> where piping to commands is not supported.

You can get around this by using the transport table.  Setup a domain
like special.adnovum.ch and use the transport table to specify that
the local transport should be used for that domain.  You can then
alias the addresses that need program deliveries to addresses
@special.adnovum.ch and they'll use the entries in your aliases file,
including the program deliveries.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Cyrus 2.1.13 and single store?

2003-06-05 Thread Ted Cabeen
Simon Matter <[EMAIL PROTECTED]> writes:

> Ted Cabeen schrieb:
>> 
>> Bernd Nies <[EMAIL PROTECTED]> writes:
>> 
>> > Ken Murchison wrote:
>> >> I'd have to see the LMTP conversation between Postfix and Cyrus, but
>> >> my guess would be that Postfix isn't sending the message to all of
>> >> the recipients in one connection to Cyrus (with multiple RCPT TO).
>> >> If Cyrus gets thems in separate connections, then it has no way of
>> >> doing the links.
>> >
>> > Unfortunately I can't sniff on a Unix socket or at least don't know
>> > how to do it with snoop or ethereal. All I can give you is the Postfix
>> > configuration:
>> >
>> > mailbox_transport = lmtp:unix:/var/cyrus/socket/lmtp
>> 
>> This is it.  The postfix local transport always breaks up multiple
>
> Looks like this has changed with postfix 2.x. According to the file
> .../README_FILES/LMTP_README, you can do something like
>
> mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
> local_destination_recipient_limit = 300
>
> and it should work. Can anybody confirm this?

I don't think that will work.  See the note in that file just a few
lines down:

Not all local delivery agent transports can support a recipient
limit greater than 1.  Be sure to check the man page of the
specific transport before attempting this with anything but the
    Postfix LMTP client.

Also, recent comments on the postfix list imply that even if local
supports multiple recipients, you'll see a significant performance hit
over using the lmtp transport directly.

-- 
Ted Cabeen
Systems/Network Administrator
Impulse Internet Services


Re: Cyrus 2.1.13 and single store?

2003-06-04 Thread Ted Cabeen
Bernd Nies <[EMAIL PROTECTED]> writes:

> Ken Murchison wrote:
>> I'd have to see the LMTP conversation between Postfix and Cyrus, but
>> my guess would be that Postfix isn't sending the message to all of
>> the recipients in one connection to Cyrus (with multiple RCPT TO).
>> If Cyrus gets thems in separate connections, then it has no way of
>> doing the links.
>
> Unfortunately I can't sniff on a Unix socket or at least don't know
> how to do it with snoop or ethereal. All I can give you is the Postfix
> configuration:
>
> mailbox_transport = lmtp:unix:/var/cyrus/socket/lmtp

This is it.  The postfix local transport always breaks up multiple
recipient messages into single messages for delivery.  If you want to
use single message store, you can't use the local transport for your
main delivery.  mailbox_transport is part of the local transport.

You'll need to change the local transport like this:

local_transport = lmtp:unix:/var/spool/postfix/sockets/lmtp
lmtp_destination_recipient_limit=100

Note that if you're not using the postfix local transport, you won't
be able to directly use alias files or any other postfix feature that
the local transport provides.  You can still do aliases using the
virtual aliases system.  If you really need local transport features,
you can use the virtual alias system to forward mail to a subdomain
that uses the transport table to be directed to the real local
transport.

If you have any other questions about this sort of setup, let me
know.  I've got it working here, and it's great.

-- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


Re: Vacation for non-existant users?

2003-02-13 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, Tarjei Huse writes:
>
>> I would do this in the MTA. If you're using Sendmail, look at
>> cf/README.  There is an example of exactly what you want to do there
>> -- I believe it can be implemented in either the access map or the
>> virtusertable (or maybe both).
>> 
>Darn, postfix :)

man 5 relocated

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+TBx9oayJfLoDSdIRAvnhAKDI9oSv70R9d/LJB81gwM5O0+vsyQCgq7k/
bVNfaCuz+egFXJP3/J+dq0A=
=VhMb
-END PGP SIGNATURE-




Re: Vacation for non-existant users?

2003-02-13 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, Tarjei Huse writes:
>I got a few users whom I've removed, and now I'd like to set a
>auto-responder for the addresses.
>
>I'd like to do this so people emailing them get their new address.
>
>Any suggestions on how to set this using sieve?

Why use sieve?  Most MTA's have support for a table of users that have 
relocated.  Check out your MTA's documentation.  You will probably find 
something there.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+TBJooayJfLoDSdIRAiqUAJ9z22S9sKD7+pRX8wrZJaG1G6M3zwCffPmC
tno2q6GgZ5t46KIyQqtpd1E=
=bCNd
-END PGP SIGNATURE-




Re: Problem with cyrus and deleting a message with a virus.

2003-01-21 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, John Alton Tamplin writes:
>Ted Cabeen wrote:
>>Right.  Other than losing the flags data, are there any other downsides to 
>>this solution?  (We were thinking of using this to delete old messages from 
>>users spam folders)
>>  
>>
>If your users all have spam folders named the same or similar 
>(presumably put there by spam filtering software), wouldn't ipurge do 
>what you want already and without screwing with Cyrus's data structures?

Hmmm.  Didn't know that existed.  I'll take a look at that

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+LcrEoayJfLoDSdIRAt/kAJwMxrY/wMyrOHwxWdybg1jYGgLaIQCgynOV
Da8Xp41o5SFKOlt6LEFf37Q=
=D6Fz
-END PGP SIGNATURE-




Re: Problem with cyrus and deleting a message with a virus.

2003-01-21 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, Rob S
iemborski writes:
>On Tue, 21 Jan 2003, Mark London wrote:
>If you're messing around with the internal data stores of a program, and
>then you get upset when the program doesn't work, I'd say that you've
>created your own problem.
>
>If you really want to do this, convince your virus scanner to delete the
>files via the IMAP protocol instead of arbitrarly altering data structures
>that it knows nothing about.
>
>-Rob
>
>(Note that you can also rebuild the mailbox with the reconstruct command,
>but I don't recommend this as a general solution).

Right.  Other than losing the flags data, are there any other downsides to 
this solution?  (We were thinking of using this to delete old messages from 
users spam folders)

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+Lb10oayJfLoDSdIRAruBAJ47lR+8YkN3UwjBLE4KCBD0lwVsVACgpbwD
0xC2+RXRVadgscm59feoPP4=
=YLop
-END PGP SIGNATURE-




Re: Folders must be in Inbox

2003-01-14 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, David Borges
en writes:
>Our company recently installed Cyrus and we can not add folders at the same 
>level as the Inbox.  He says we must place all folers within the Inbox.  Is 
>this accurate, if so can we change it so I can have all my core folders at 
>the root level and not within the in box?  Also my folders and mailboxes 
>both look like folders in Eudora, any idea why?

The altnamespace option in imapd.conf should restore the old mailbox style.  
However, you should read the stuff in the documentation about altnamespace 
before you enable it.  Also, note that changing that setting will require 
everyone to resynchronize their mailbox list and reconfigure all of their 
filters.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+JIXPoayJfLoDSdIRAqCdAJ4rHznC8zVkdoJ2jfDIdPJlVxiJ2ACgn74/
L4xHiJc/uB3KAa3BelZnps4=
=LjG9
-END PGP SIGNATURE-




Re: Print bad passwords feature request?

2003-01-14 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, Rob 
Siemborski writes:
>On Mon, 13 Jan 2003, Ted Cabeen wrote:
>> Would it be possible to add an option that makes cyrus print bad passwords in
>> the log file?  I know that there is a slight security issue with revealing
>> the incorrect passwords that users attempt to use, but doing telephone Tech
>> Support without it is difficult.
>>
>> I have a patch that does this, but it doesn't make it into a settable option.
>
>No, it isn't possible.  Atleast not generally.
>
>For example, you can't extract passwords from DIGEST-MD5 and CRAM-MD5 SASL
>mechanisms, and the concept doesn't even make sense with the Kerberos
>mechanisms.

Duh.  Of course.

>If you're only worried about the plaintext mechanisms, the right place to
>put this is in sasl_checkpass (in libsasl).

Good thought.  I'll look there.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+JE4poayJfLoDSdIRAv90AKCcFHGoivzWHCWqHppfpZHk6B13DgCgsndo
DTEmNP2+ThCN+M1pQOooL20=
=Wr1r
-END PGP SIGNATURE-




Print bad passwords feature request?

2003-01-13 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

Would it be possible to add an option that makes cyrus print bad passwords in 
the log file?  I know that there is a slight security issue with revealing 
the incorrect passwords that users attempt to use, but doing telephone Tech 
Support without it is difficult.

I have a patch that does this, but it doesn't make it into a settable option.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+I0/HoayJfLoDSdIRAkvtAKCA8Zsmz/8xJA1+aEZ7PccuZZWPuACbBZb4
qTffjB8XtiltvltGAUbB5/8=
=cKUm
-END PGP SIGNATURE-




Re: [PATCH][CVS IMAPd 2.1] lmtp_downcase_rcpt implementation (2)

2003-01-13 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <20021226163734.GA5176@khazad-dum>, Henrique de Moraes Holschuh writ
es:
>On Thu, 26 Dec 2002, John Alton Tamplin wrote:
>> Henrique de Moraes Holschuh wrote:
>> >Here's the improved patch. It skips over the +Mailbox part of the 
>> >recipient,
>> >
>> Would it make sense to make the control more generic, such as 
>> downcase_account_name, and have it also apply to logins and other places 
>> besides LMTP?  We have a number of users who were logging in with 
>
>That's something that the canonical name remapping should do. I am not
>touching that area right now (I need to understand that first).
>
>So, if someone does this, it won't be me.  Besides, we HAVE to draw a line
>somewhere, and tell the users to stop being wackos.

So is this patch going to make it into 2.1?  I have the same problem here 
with LMTP downcasing, and would like to have a solution that doesn't require 
me to patch either postfix or cyrus, if possible.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+IxO+oayJfLoDSdIRAltvAKC8gB4EguwlKduNX0TPc+nKLmof/QCgptWu
/8Z3gqXlmy7eW3VrXNug1ho=
=8OnW
-END PGP SIGNATURE-




All numeric usernames?

2003-01-13 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

Is there any reason that cyrus doesn't allow all-numeric usernames?  We have 
some legacy customers who have all numeric usernames, and I had to patch 
cyrus to allow usernames that are wholly numeric.  Would you consider 
allowing usernames of this sort in the next cyrus release?  

If you need my trivial patch, let me know.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+IxH6oayJfLoDSdIRAppTAJ4n9xiaNse3LqYek49Hlj/JO8/GKACgteU6
P9KMoJbB4OnM39xgV3Gn0Oo=
=WohT
-END PGP SIGNATURE-




Re: setup problem: websieve

2003-01-08 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, B
ruhin Gregor writes:
>I try to setup websieve, but I get the following error, has anybody an idea:
>
>Mail Account Management
>Login Error
>There was an error in login you to the server. Please click HERE and try
>again.
>
>System Error: No Errors
>
>It seems to be a known bug ?
>http://sourceforge.net/tracker/index.php?func=detail&aid=511466&group_id=340
>08&atid=409930

Yeah, you need to patch it to fix this.  It's pretty simple if you dig 
through the code, but if you're having trouble finding it, let me know.  
websieve also has problems with quota checking too that I have simple patches 
for.  However, it's pretty much the only game in town for web-based sieve 
stuff, so you'll just have to patch it.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE+HKEzoayJfLoDSdIRAuFuAJ9BZpX2PGcRps0r88z1+OhIze2cKACgyaVe
htlT1eicFdLMLsISnHBDrps=
=xyKV
-END PGP SIGNATURE-




Quick sieve question

2002-12-12 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

Does sieve support filing incoming mail into two mailboxes?  I have a user 
who want to file much of his mail into one backup folder and then process it 
with other filters later.  However, I'm finding that later fileinto actions 
cause the first fileinto action to not take place.  Is there any way to get a 
message to end up in two places?

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE9+TqpoayJfLoDSdIRAobiAKCue/+A0p3MARC/PVNnkfMaa2s75wCgwS0A
jFWcK2NFVHwKDPmBkuZqR4Q=
=GH/8
-END PGP SIGNATURE-




Re: lmtpd's handling of mixed-case addresses

2002-12-11 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, Luc Brouard writes:
>On Wed, Dec 11, 2002 at 09:14:08AM -0800, Ted Cabeen wrote:
>> In recent snapshots of postfix, the lmtp client no longer downcases email
>> addresses sent in RCPT TO commands.  This means that Cyrus lmtpd now rejects
>> email with a user unknown when people capitalize letters in what are normally
>> lowercase usernames.  Since there's no way I can train customers and their
>> correspondents to not capitalize email addresses randomly, can we change 
>> lmtpd/sasl to properly handle these sorts of addresses?
>
>In postfix just add a flags=u in your master.cf transport configuration
>for lmtp.

Isn't flags= only supported as part of the pipe transport?  That's the only 
place I see mention of it in the docs.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE9969moayJfLoDSdIRAiriAJwKX1fvRuhAbaCatWpTMhcR0UD6SwCbBtZl
4FH6GePplPuxn+ts34dshsE=
=baER
-END PGP SIGNATURE-




lmtpd's handling of mixed-case addresses

2002-12-11 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In recent snapshots of postfix, the lmtp client no longer downcases email
addresses sent in RCPT TO commands.  This means that Cyrus lmtpd now rejects
email with a user unknown when people capitalize letters in what are normally
lowercase usernames.  Since there's no way I can train customers and their
correspondents to not capitalize email addresses randomly, can we change 
lmtpd/sasl to properly handle these sorts of addresses?

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE993JgoayJfLoDSdIRAn3rAJ9tsBYj3HVgn8tP9PynFUVuB+dLOACeIUfw
qa9XBXAtw02I5QL8BFeujpE=
=E+Vz
-END PGP SIGNATURE-




Re: using Murder for migration from UW IMAP

2002-12-10 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, "John A. Tamplin" writ
es:
>Quoting Rob Siemborski <[EMAIL PROTECTED]>:
>> Do you really have so much data that it would take 2-3 days to move it?
>
>The tests I have done so far (using both imap-utils mbxcvt and custom perl code)
>it looks like it will take around 60 hours to convert everything (2300 users,
>23000 folders, 70G total), and that is putting /var/imap on a tmpfs filesystem
>for the conversion (about a 2x speed improvement there) and striping /cyrus
>across 14 drives in an FC-AL array.

Have you considered just doing a direct mailbox conversion?  You can convert 
directly to Cyrus mailboxes and then reconstruct everything.  That might be 
faster than dealing with the mbxcvt code.

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE99lFSoayJfLoDSdIRAp5iAKDJGxcgRfjU6k1QI3zWkIzKrOcVRQCeIKBP
IqjyY9I+VrxVbx3pkHu8DiU=
=dvwG
-END PGP SIGNATURE-




Re: /var/imap/socket/lmtp: makeconnection_ds

2002-11-05 Thread Ted Cabeen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <[EMAIL PROTECTED]>, Greg 
Roberts writes:
>Maybe I'm off-base here, but this
>
>>[root@breakme mail]# telnet localhost lmtp
>
>indicates lmtpd is listening on a TCP port, and
>
>/var/imap/socket/lmtp is a UNIX socket.

BTW, this reminds me.  Are there any handy utilities out there that will 
assist you in interfacing with a UNIX socket?

- -- 
Ted Cabeen   http://www.pobox.com/~secabeen[EMAIL PROTECTED] 
Check Website or Keyserver for PGP/GPG Key BA0349D2 [EMAIL PROTECTED]
"I have taken all knowledge to be my province." -F. Bacon  [EMAIL PROTECTED]
"Human kind cannot bear very much reality."-T.S.Eliot[EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE9yAnqoayJfLoDSdIRAsNZAJ4iSoCOFZ/GAP6UtY5YbdWJ561bXACgzhJ1
9D1K+eOZt0/VMNcU6E5pktg=
=LDe3
-END PGP SIGNATURE-