[ANN] Jamailet becomes a SourceForge project
Hi, finally Jamailet become a SourceForge project. You can download sources, binaries and the documentation by visiting the following site: http://sourceforge.net/projects/jamailet/ Please feel free to contribute with your ideas, writing to the project manager. Regards, Marco Tedone Jemos Founder - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Is this a valid From: address?
Noel, RFC 2821 section 3.8.4 applies to gateways. My point (2) refers to MTAs acting as a relay. >From RFC 2821 section 3.7, Relaying... "As discussed in section 2.4.1, a relay SMTP has no need to inspect or act upon the headers or body of the message data and MUST NOT do so except to add its own "Received:" header (section 4.4) and, optionally, to attempt to detect looping in the mail system (see section 6.2)." I was wrong in as much as there is no optional element to this. According to the RFC, a relaying MTA should never act as an Internet Message format cop. It shouldn't even be inspecting the headers, let alone rejecting a message due to their content. The case of fetchmail et al. is interesting. Mail fetched from a POP3 or IMAP server is NOT Internet mail as defined by RFC2821 as POP3 and IMAP are a foreign (non-SMTP) systems. Nor is an MTA configured to fetch mail from a POP3 or IMAP server an SMTP gateway >>> as long as the fetched mail is delivered locally <<<. According to the RFC, the server is acting as a gateway only if it is injecting mail into the internet, that is, delivering remotely over the 'net. One of the modifications I have made to fetchmail is to have the default configuration reject mail not intended for a recipient in a local domain. The original reason for doing this was that mail served by POP3/IMAP servers has arrived on them because they are the local delivery points for the domain(s) being served. Fetchmail is simply acting as a POP3/IMAP client that happens to have some very powerful mail tools at its disposal. They should not be used to deliver the fetched mails anywhere but locally. We now have a second reason for this restriction. Doing otherwise would create an SMTP gateway. There are circumstances when it is impossible to fulfil the rules for a gateway as specified by RFC2821, such as we are unable to correct invalid originator fields. If we can't guarantee to lay by the rules, we shouldn't enter the game. Hopefully this clarifies the responsibilities on James when acting as an SMTP relay and why a fetchmail configuration is not, and should never act as, an SMTP gateway. -- Steve - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Step by step guide
Does anyone know of a good step-by-step guide for James? I have exhausted the resources on the Apache site and cannot get my server to work. ~Kulvie
how to test
Is there a good way to test if your pop3 server is working? I tried to use Outlook to talk to the pop3 server of james and kept getting a: The specified server was found but there was no response from the server error. When I send a mail to the box I created, I also do not see the DOS console give me an indication that a mail message was received. Should I be receiving some sort of info on the console? ~Kulvir
Re: How do I use James with a Firewall?
just one thing... if you are using the old tiny personal firewall by tinysoftware.. you might want to check out www.kerio.com which I believe have the continuation of the old tiny personal firewall 2.x series... I'm not sure if they bought the tiny personal firewall, or if it was tinysoftware that had licens to use it or how it works... but it looks and works 99.9% the same,only the name and company has changed... /Christian Andersson Hontvari Jozsef wrote: The old (2.x) Tiny Personal Firewall. People say it is much better then the new, non-free version. - Original Message - From: "Deso Kule" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, May 31, 2003 2:27 PM Subject: Re: How do I use James with a Firewall? The java.exe of my JRE has all access. Which firewall are you using? Thanks, Nick From: "Hontvari Jozsef" <[EMAIL PROTECTED]> Reply-To: "James Users List" <[EMAIL PROTECTED]> To: "James Users List" <[EMAIL PROTECTED]> Subject: Re: How do I use James with a Firewall? Date: Sat, 31 May 2003 14:02:48 +0200 The java.exe of your JRE. I don't know Norton Personal Firewall, but it can be set on my firewall to display a dialog on incoming or outgoing connections. You may want to use a similar feature, and set a permanent rule for James. - Original Message - From: "Deso Kule" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, May 31, 2003 1:51 PM Subject: Re: How do I use James with a Firewall? I have already allowed all traffic in and out of port 25. It might be that I need to allow James to access the internet or port 25 on my domain but which program (or module) in James needs to be given access? Thanks, Nick From: Hontvari Jozsef <[EMAIL PROTECTED]> Reply-To: "James Users List" <[EMAIL PROTECTED]> To: James Users List <[EMAIL PROTECTED]> Subject: Re: How do I use James with a Firewall? Date: Sat, 31 May 2003 08:41:30 +0200 You have to adjust your firewall. Both incoming and outgoing traffic of James (or any other smtp server) goes through port 25. - Original Message - From: "Deso Kule" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, May 31, 2003 2:51 AM Subject: How do I use James with a Firewall? I have Norton Personal Firewall installed. I have written a JSP page that uses James to send emails from the web. I keep receiving this message: javax.mail.SendFailedException: Sending failed; nested exception is: class javax.mail.MessagingException: Could not connect to SMTP host: domain : port If the firewall is disabled then the mail is delivered. Thanks Nick _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: how to test
Kulvir, look at the logs folder, under apps/james/. There is a pop3...log file which registers the POP3 server activities. Hope it will help, Marco - Original Message - From: "Kulvir Bhogal" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 01, 2003 10:10 PM Subject: how to test > Is there a good way to test if your pop3 server is working? > > I tried to use Outlook to talk to the pop3 server of james and kept > getting a: > > > > The specified server was found but there was no response from the server > error. > > > > When I send a mail to the box I created, I also do not see the DOS > console give me an indication that a mail message was received. Should > I be receiving some sort of info on the console? > > > > ~Kulvir > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Step by step guide
As far as I know it doesn't exists yet, but have a look at the documentation on the james site; it's a good point to start. Marco - Original Message - From: "Kulvir Bhogal" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 01, 2003 10:06 PM Subject: Step by step guide > Does anyone know of a good step-by-step guide for James? > > I have exhausted the resources on the Apache site and cannot get my > server to work. > > > > ~Kulvie > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Step by step guide
> I have exhausted the resources on the Apache site and cannot get my > server to work. What isn't working? --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: How do I use James with a Firewall?
That was surprising. Thanks for the info. - Original Message - From: "Christian Andersson" <[EMAIL PROTECTED]> To: "James Users List" <[EMAIL PROTECTED]> Sent: Sunday, June 01, 2003 11:11 PM Subject: Re: How do I use James with a Firewall? > just one thing... if you are using the old tiny personal firewall by > tinysoftware.. you might want to check out www.kerio.com which I > believe have the continuation of the old tiny personal firewall 2.x > series... > > I'm not sure if they bought the tiny personal firewall, or if it was > tinysoftware that had licens to use it or how it works... > > but it looks and works 99.9% the same,only the name and company has > changed... > > /Christian Andersson > > Hontvari Jozsef wrote: > > > The old (2.x) Tiny Personal Firewall. People say it is much better then the > > new, non-free version. > > > > > > - Original Message - > > From: "Deso Kule" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Saturday, May 31, 2003 2:27 PM > > Subject: Re: How do I use James with a Firewall? > > > > > > > >>The java.exe of my JRE has all access. Which firewall are you using? > >>Thanks, > >>Nick > >> > >> > >> > >>>From: "Hontvari Jozsef" <[EMAIL PROTECTED]> > >>>Reply-To: "James Users List" <[EMAIL PROTECTED]> > >>>To: "James Users List" <[EMAIL PROTECTED]> > >>>Subject: Re: How do I use James with a Firewall? > >>>Date: Sat, 31 May 2003 14:02:48 +0200 > >>> > >>>The java.exe of your JRE. > >>> > >>>I don't know Norton Personal Firewall, but it can be set on my firewall > > > > to > > > >>>display a dialog on incoming or outgoing connections. You may want to use > > > > a > > > >>>similar feature, and set a permanent rule for James. > >>> > >>> > >>>- Original Message - > >>>From: "Deso Kule" <[EMAIL PROTECTED]> > >>>To: <[EMAIL PROTECTED]> > >>>Sent: Saturday, May 31, 2003 1:51 PM > >>>Subject: Re: How do I use James with a Firewall? > >>> > >>> > >>> > I have already allowed all traffic in and out of port 25. It might be > >>> > >>>that > >>>I > >>> > need to allow James to access the internet or port 25 on my domain but > >>> > >>>which > >>> > program (or module) in James needs to be given access? > Thanks, > Nick > > > > >From: Hontvari Jozsef <[EMAIL PROTECTED]> > >Reply-To: "James Users List" <[EMAIL PROTECTED]> > >To: James Users List <[EMAIL PROTECTED]> > >Subject: Re: How do I use James with a Firewall? > >Date: Sat, 31 May 2003 08:41:30 +0200 > > > >You have to adjust your firewall. Both incoming and outgoing traffic > > > > of > > > >James (or any other smtp server) goes through port 25. > > > >- Original Message - > >From: "Deso Kule" <[EMAIL PROTECTED]> > >To: <[EMAIL PROTECTED]> > >Sent: Saturday, May 31, 2003 2:51 AM > >Subject: How do I use James with a Firewall? > > > > > > > >>I have Norton Personal Firewall installed. I have written a JSP > > > > page > > > >that > > > >>uses James to send emails from the web. I keep receiving this > >>> > >>>message: > >>> > >>javax.mail.SendFailedException: Sending failed; > >> nested exception is: > >>class javax.mail.MessagingException: Could not connect to SMTP > > > > host: > > > >domain > > > >>: port > >> > >>If the firewall is disabled then the mail is delivered. > >> > >>Thanks > >>Nick > >> > >>_ > >>MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. > >>http://join.msn.com/?page=features/virus > >> > >> > >> > >>> > >>>- > >>> > >>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>For additional commands, e-mail: > > > > [EMAIL PROTECTED] > > > > > >- > >To unsubscribe, e-mail: [EMAIL PROTECTED] > >For additional commands, e-mail: [EMAIL PROTECTED] > > > > _ > Help STOP SPAM with the new MSN 8 and get 2 months FREE* > http://join.msn.com/?page=features/junkmail > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > >>> > >>> > >>>- > >>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>For additional commands, e-mail: [EMAIL PROTECTED] > >>> > >> > >>_ > >>STOP MORE SPAM with the new MSN 8 and get 2 months FREE* > >>http://join.msn.com/?page=features/junkmail > >> > >> > >>- > >>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>For additional c
RE: Is this a valid From: address?
> RFC 2821 section 3.8.4 applies to gateways. My point (2) refers to MTAs > acting as a relay. > According to the RFC, a relaying MTA should never act as > an Internet Message format cop. It shouldn't even be > inspecting the headers, let alone rejecting a message > due to their content. Since POP3 isn't SMTP, it does seem to me that the gateway concept does apply. When acting as an SMTP relay, James does not check those headers. James tries not to touch the content of a message, except where a matcher or mailet might chose to do so. > Mail fetched from a POP3 or IMAP server is NOT Internet mail > as defined by RFC2821 as POP3 and IMAP are a foreign (non-SMTP) > systems. This is why I would view it as a gateway situation. It certainly isn't a relay. Fetchmail is attempting to fabricate an SMTP envelope from SMTP content, so that it can insert it into the SMTP spool for processing along with other mail. If the message had arrived via SMTP, James would have had a valid SMTP envelope. > Fetchmail is simply acting as a POP3/IMAP client that happens to > have some very powerful mail tools at its disposal. They should > not be used to deliver the fetched mails anywhere but locally. > There are circumstances when it is impossible to fulfil > the rules for a gateway as specified by RFC2821, such as > we are unable to correct invalid originator fields. If > we can't guarantee to lay by the rules, we shouldn't enter > the game. It seems to me that James is capable of ensuring that a Fetchmail gateway does not insert mail with invalid routing information. It caught the one that you received. A question is whether or not Fetchmail has the tools needed to properly construct a valid envelope. This has been a subject of discussion in the past, and I believe that the there were changes made to faciliate administrator control over the fabrication process. Certainly if Fetchmail cannot provide a valid envelope, James should not accept it. If Fetchmail were optionally able to take fetched messages for local addresses and deposit them directly into the correct message stores, I don't believe that the POP3Handler would care if the content were bogus. The loss of the mailet pipeline is another issue. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Mailet advice
Brian J. Sayatovic wrote: I'm developing a mailet which needs to add headers specific to local users. Since some e-als could have multiple local recipients, I have a conflict. One message can't have two values for the same header. Does anyone have suggestions on how to handle this? I'm afraid if I fork the message somehow, each user will not see the real list of recipients. Brian, Please direct your questions to the james-user mailing list. Thanks. -- Serge Knystautas President Lokitech >> software . strategy . design >> http://www.lokitech.com/ p. 1.301.656.5501 e. [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Mailet advice
Brian J. Sayatovic wrote: I'm developing a mailet which needs to add headers specific to local users. Since some e-als could have multiple local recipients, I have a conflict. One message can't have two values for the same header. Does anyone have suggestions on how to handle this? I'm afraid if I fork the message somehow, each user will not see the real list of recipients. Brian, Please direct your questions to the james-user mailing list. Thanks. -- Serge Knystautas President Lokitech >> software . strategy . design >> http://www.lokitech.com/ p. 1.301.656.5501 e. [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Mailet advice
Brian J. Sayatovic wrote: > I'm developing a mailet which needs to add headers specific to local users. > Since some e-als could have multiple local recipients, I have a conflict. > One message can't have two values for the same header. > > Does anyone have suggestions on how to handle this? See the source for LocalDelivery. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [ANN] Jamailet becomes a SourceForge project
Congratulation Marco! This is the *first* mailet project I've heard of, well done. d. > -Original Message- > From: Marco Tedone [mailto:[EMAIL PROTECTED] > Sent: 01 June 2003 19:52 > To: James-user-list > Subject: [ANN] Jamailet becomes a SourceForge project > > > Hi, finally Jamailet become a SourceForge project. > > You can download sources, binaries and the documentation by visiting the > following site: > > http://sourceforge.net/projects/jamailet/ > > Please feel free to contribute with your ideas, writing to the project > manager. > > Regards, > > Marco Tedone > Jemos Founder > > > > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] >
RE: Is this a valid From: address?
> Since POP3 isn't SMTP, it does seem to me that the gateway > concept does > apply. RFC2821 is clear enough. If James/fetchMail is only delivering locally, it is not an SMTP gateway as defined therein. Semantically, it is a gateway between a POP3/IMAP server and James' SMTP spool, but that isn't the same thing. We are free to do what we consider to be 'the right thing', which is what I am trying to get a consensus on. > If the message had arrived via SMTP, James > would have had > a valid SMTP envelope. Not necessarily. Forget about fetchmail for a moment. If an SMTP MTA that allows invalid envelopes injects a such a message into the 'net , James would receive a message with an invalid envelope. James would have to deal with it according to RFC2821. Does this happen? Oh yes. I tried inject mail with an invalid From: header (missing domain part) via a number of non-James MTAs and didn't get a single rejection or failed delivery. One rewrote the From: header adding its hostname as the domain part. This SMTP relay made the From: header legal, but according to the RFC acted illegally as the headers should not be modified by a relay! So, in real world deployments, the statement "If the message had arrived via SMTP, James would have had a valid SMTP envelope" is incorrect. The real world does not enforce the RFCs and does not play by the rules! > If Fetchmail were optionally able to take fetched messages for local > addresses and deposit them directly into the correct message > stores, I don't > believe that the POP3Handler would care if the content were > bogus. The loss > of the mailet pipeline is another issue. I do not think this is a viable approach as... 1) If fetchmail bypasses the SMTP spool we lose all the benefits of James's delivery chain. 2) Without going through mailet processing, we cannot determine "the correct message stores". It seems to me that to progress we need to agree that... 1) fetchmail will only deliver locally 2) Further consideration is required regarding James' policy for dealing with invalid SMTP envelopes however they are received. This should be at a different time in a different thread. 3) As an >interim< measure, in my fetchmail enhancements, I will modify the code so that a From: header with a missing domain part is made valid by appending the local host name (didn't Danny suggest that a while back)? Adios! -- Steve - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
SMTP+SSL howto
Hello, I try to do a short howto to configure James with SSL/TLS. Hope it will help you. EmmanuelAbstract: - How to configure James to enable a secure connection using SSL/TLS. This document describes the steps to have a running instance of James with a SMTP and a POP handler either with SSL/TLS feature. Issues: --- There are 2 issues, a major and a minor. Major issue: quite all SMTP servers around the world use a plain text session on port 25 to exchange mails between them. This implies you must have 2 SMTP handlers on James. The first one will use plain text session on port 25. The second one will use a SSL/TLS session on port 465. If you don't setup the first, nobody can send you mails. Minor issue: some mail clients could not use the SSL/TLS feature to receive mail. If it happens, you should setup 2 POP handlers (same as for SMTP). Note: - If you don't know which port to use, have a look in the file /etc/services. It defines all standard ports. Configuring the SMTP handler: - Step 1: configure james/SAR-INF/config.xml like this (I remove all comments to be clear). I enbale auth and verify in order to prevent any open relay (correct me if I'm wrong). 25 myMailServer 36 true true 0 465 true myMailServer 36 true true 0 . // Enable the ssl factory and specify where the java keystore is located // ( here in james/SAR-INF/conf -> james/SAR-INF/conf/keystore ) conf/keystore keystore JKS TLS SunX509 false Step 2: in file james/SAR-INF/assembly.xml , duplicate the bloc which has name "smtpserver". In the duplicated bloc, change "smtpserver" by "smtpserver-tls". This reflects the second handler in the file config.xml. Step 3: create the keystore in james/SAR-INF/conf In a shell, type the following: ---<>--- : keytool -selfcert -genkey -validity 365 -keypass keystore -keystore ./keystore Enter keystore password: keystore What is your first and last name? [Unknown]: What is the name of your organizational unit? [Unknown]: What is the name of your organization? [Unknown]: What is the name of your City or Locality? [Unknown]: What is the name of your State or Province? [Unknown]: What is the two-letter country code for this unit? [Unknown]: Is CN=Unknown, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown correct? [no]: yes ---<>--- Type the correct values for your certificate ;-) Note: use same password (here keystore) everywhere! Configuring the POP handler: - It's the same story as for SMTP. Just decide if you want only a SSL/TLS or a PLAIN + SSL/TLS connection. Testing: Start James. If all is correct, it should start without any error message. To test the SSL/TLS feature, start openssl in a shell and type: ---<>--- : openssl OpenSSL> s_client -connect localhost:465 //and ssl will print a lot of information... ---<>--- That's all. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Step by step guide
On (2003/06/01 16:06), Kulvir Bhogal wrote: > Does anyone know of a good step-by-step guide for James? > > I have exhausted the resources on the Apache site and cannot get my > server to work. I found the documentation a pleasure: How to install James http://james.apache.org/installation_instructions_2_1.html Once you've been through that process and find James still "isn't working", send errors, either from phoenix's stderr output, or from the actual James log files, as appropriate. Ciao, Sheldon. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Step by step guide
Also, be sure to read and act on the comments in 'config.xml' indicating where things need to be changed. You will also find it helpful to uncomment the 'notifyPostmaster' snippets to get notification when things fail. You will need to add 'Postmaster' as a local user using the telnet interface, being sure to add it using the correct mixed-case name. Finally, 'tailing' the logs so you can see what happens as it happens is helpful. -- Steve > -Original Message- > From: Sheldon Hearn [mailto:[EMAIL PROTECTED] > Sent: 02 June 2003 10:54 > To: James Users List > Subject: Re: Step by step guide > > > On (2003/06/01 16:06), Kulvir Bhogal wrote: > > > Does anyone know of a good step-by-step guide for James? > > > > I have exhausted the resources on the Apache site and cannot get my > > server to work. > > I found the documentation a pleasure: > > How to install James > http://james.apache.org/installation_instructions_2_1.html > > Once you've been through that process and find James still "isn't > working", send errors, either from phoenix's stderr output, > or from the > actual James log files, as appropriate. > > Ciao, > Sheldon. > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
