RE: SMTP
Sorry, I forgot :-). I have this on my Tomcat 4.0 server.xml: !-- Define an SSL HTTP/1.1 Connector on port 443 -- Connector className=org.apache.catalina.connector.http.HttpConnector port=443 minProcessors=5 maxProcessors=75 enableLookups=true acceptCount=10 debug=0 scheme=https secure=true Factory className=org.apache.catalina.net.SSLServerSocketFactory keystoreFile=C:/Program Files/Apache Tomcat 4.0/kkk.keystore keystorePass=x clientAuth=false protocol=TLS/ /Connector Vincenzo -Original Message- From: David Schwartz [mailto:[EMAIL PROTECTED] Sent: martedi 24 giugno 2003 15.33 To: James Users List Subject: RE: SMTP -Original Message- From: Vincenzo Gianferrari Pini [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:22 PM To: James Users List Subject: RE: SMTP Sorry, David, I have to rush out. I'll answer you back tomorrow. Vincenzo -Original Message- From: David Schwartz [mailto:[EMAIL PROTECTED] Sent: giovedi 19 giugno 2003 19.14 To: James Users List Subject: RE: SMTP What module did you use for ssl on Tomcat? -Original Message- From: Vincenzo Gianferrari Pini [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:10 PM To: James Users List Subject: RE: SMTP Yes. That's exactly what I want to do. What did you use for ssl on Tomcat? I wanted to make sure that only authenticated users could use the web mail client servlet; as I wanted to have the password used for the tomcat logon be safe, I activated ssl (https) for the logon itself, and for the rest of the web mail session. Also, can I use my existing ssl certificate on an IP address, not a domain name? I don't know that, sorry. Vincenzo - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Thanks Noel If the connector between the web server and tomcat is secure... Are you referring to the apache connector for tomcat? What if I'm using tomcat as the web server, without Apache? -Original Message- From: Noel J. Bergman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 3:55 PM To: James Users List Subject: RE: SMTP Only problem is that I wasn't planning on putting Tomcat on the server with the ssl certificate - yet. I wanted to have java/james/tomcat on a server web server with ssl on dif machine. If the connector between the web server and tomcat is secure, then you are fine. Otherwise, an intruder could attempt connecting to tomcat directly on the second machine. Also, if you have the password conveyed over the connector, it is possible that it could be sniffed. The issue, at this point, is just a webapp security topic. Please note (http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html): When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. Typically, this server will negotiate all SSL-related functionality, then pass on any requests destined for the Tomcat container only after decrypting those requests. Likewise, Tomcat will return cleartext responses, that will be encrypted before being returned to the user's browser. In this environment, Tomcat knows that communications between the primary web server and the client are taking place over a secure connection (because your application needs to be able to ask about this), but it does not participate in the encryption or decryption itself. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Even better; I have a tomcat as a web server and J2EE web container, using an ssl connector, with a servlet/jsp application that talks to a James instance in the same machine, that accepts only smtp requests from that same machine if outbound. If I understood correctly all your postings this is exactly what you are looking for. It works fine and secure. Vincenzo -Original Message- From: David Schwartz [mailto:[EMAIL PROTECTED] Sent: giovedi 19 giugno 2003 18.40 To: James Users List Subject: RE: SMTP Thanks Noel If the connector between the web server and tomcat is secure... Are you referring to the apache connector for tomcat? What if I'm using tomcat as the web server, without Apache? -Original Message- From: Noel J. Bergman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 3:55 PM To: James Users List Subject: RE: SMTP Only problem is that I wasn't planning on putting Tomcat on the server with the ssl certificate - yet. I wanted to have java/james/tomcat on a server web server with ssl on dif machine. If the connector between the web server and tomcat is secure, then you are fine. Otherwise, an intruder could attempt connecting to tomcat directly on the second machine. Also, if you have the password conveyed over the connector, it is possible that it could be sniffed. The issue, at this point, is just a webapp security topic. Please note (http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html): When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. Typically, this server will negotiate all SSL-related functionality, then pass on any requests destined for the Tomcat container only after decrypting those requests. Likewise, Tomcat will return cleartext responses, that will be encrypted before being returned to the user's browser. In this environment, Tomcat knows that communications between the primary web server and the client are taking place over a secure connection (because your application needs to be able to ask about this), but it does not participate in the encryption or decryption itself. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Vincenzo, Yes. That's exactly what I want to do. What did you use for ssl on Tomcat? Also, can I use my existing ssl certificate on an IP address, not a domain name? -Original Message- From: Vincenzo Gianferrari Pini [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 12:51 PM To: James Users List Subject: RE: SMTP Even better; I have a tomcat as a web server and J2EE web container, using an ssl connector, with a servlet/jsp application that talks to a James instance in the same machine, that accepts only smtp requests from that same machine if outbound. If I understood correctly all your postings this is exactly what you are looking for. It works fine and secure. Vincenzo -Original Message- From: David Schwartz [mailto:[EMAIL PROTECTED] Sent: giovedi 19 giugno 2003 18.40 To: James Users List Subject: RE: SMTP Thanks Noel If the connector between the web server and tomcat is secure... Are you referring to the apache connector for tomcat? What if I'm using tomcat as the web server, without Apache? -Original Message- From: Noel J. Bergman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 3:55 PM To: James Users List Subject: RE: SMTP Only problem is that I wasn't planning on putting Tomcat on the server with the ssl certificate - yet. I wanted to have java/james/tomcat on a server web server with ssl on dif machine. If the connector between the web server and tomcat is secure, then you are fine. Otherwise, an intruder could attempt connecting to tomcat directly on the second machine. Also, if you have the password conveyed over the connector, it is possible that it could be sniffed. The issue, at this point, is just a webapp security topic. Please note (http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html): When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. Typically, this server will negotiate all SSL-related functionality, then pass on any requests destined for the Tomcat container only after decrypting those requests. Likewise, Tomcat will return cleartext responses, that will be encrypted before being returned to the user's browser. In this environment, Tomcat knows that communications between the primary web server and the client are taking place over a secure connection (because your application needs to be able to ask about this), but it does not participate in the encryption or decryption itself. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Are you referring to the apache connector for tomcat? What if I'm using tomcat as the web server, without Apache? Then there is no connector. But you said that you had the web server on one machine, and tomcat with James on another. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Noel, Currently I have an NT server with iis, exchange server verisign ssl cert. I'm in the process of moving away from the ms stuff to Linux/Apache etc. Meanwhile, on another server I want to set up tomcat james (maybe apache) - get it going, develop the replacement software then move it all dump the MS stuff. So I need a temp setup. I don't know yet how it will work with the ssl cert. I think its branded according to the server ip address - yes? -Original Message- From: Noel J. Bergman [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 12:58 PM To: James Users List Subject: RE: SMTP Are you referring to the apache connector for tomcat? What if I'm using tomcat as the web server, without Apache? Then there is no connector. But you said that you had the web server on one machine, and tomcat with James on another. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Yes. That's exactly what I want to do. What did you use for ssl on Tomcat? I wanted to make sure that only authenticated users could use the web mail client servlet; as I wanted to have the password used for the tomcat logon be safe, I activated ssl (https) for the logon itself, and for the rest of the web mail session. Also, can I use my existing ssl certificate on an IP address, not a domain name? I don't know that, sorry. Vincenzo - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
What module did you use for ssl on Tomcat? -Original Message- From: Vincenzo Gianferrari Pini [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:10 PM To: James Users List Subject: RE: SMTP Yes. That's exactly what I want to do. What did you use for ssl on Tomcat? I wanted to make sure that only authenticated users could use the web mail client servlet; as I wanted to have the password used for the tomcat logon be safe, I activated ssl (https) for the logon itself, and for the rest of the web mail session. Also, can I use my existing ssl certificate on an IP address, not a domain name? I don't know that, sorry. Vincenzo - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Currently I have an NT server with iis, exchange server verisign ssl cert. Right. So you can use a connector between IIS and Tomcat, which means you can use your existing SSL cert. I thought that the latter was your point in the first place. I don't know yet how it will work with the ssl cert. I think its branded according to the server ip address - yes? IP, yes. This may help you: http://www.mail-archive.com/[EMAIL PROTECTED]/msg62829.html --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Sorry, David, I have to rush out. I'll answer you back tomorrow. Vincenzo -Original Message- From: David Schwartz [mailto:[EMAIL PROTECTED] Sent: giovedi 19 giugno 2003 19.14 To: James Users List Subject: RE: SMTP What module did you use for ssl on Tomcat? -Original Message- From: Vincenzo Gianferrari Pini [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:10 PM To: James Users List Subject: RE: SMTP Yes. That's exactly what I want to do. What did you use for ssl on Tomcat? I wanted to make sure that only authenticated users could use the web mail client servlet; as I wanted to have the password used for the tomcat logon be safe, I activated ssl (https) for the logon itself, and for the rest of the web mail session. Also, can I use my existing ssl certificate on an IP address, not a domain name? I don't know that, sorry. Vincenzo - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Yes. If by 'everything' you mean POP3, NNTP, local inboxes. Can James be used to just send emails out? Can everything else be disabled? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Yes. I just want to use it to send mail, via a browser interface, without being an open relay. Can you point me to a link on closing open relay still being able to send mail? -Original Message- From: Steve Short [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 1:42 PM To: James Users List Subject: RE: SMTP Yes. If by 'everything' you mean POP3, NNTP, local inboxes. Can James be used to just send emails out? Can everything else be disabled? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
The simplest method is to configure a matcher to only accept messages from certain network IP addresses. Steve -Original Message- From: David Schwartz [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 10:52 AM To: James Users List Subject: RE: SMTP Yes. I just want to use it to send mail, via a browser interface, without being an open relay. Can you point me to a link on closing open relay still being able to send mail? -Original Message- From: Steve Short [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 1:42 PM To: James Users List Subject: RE: SMTP Yes. If by 'everything' you mean POP3, NNTP, local inboxes. Can James be used to just send emails out? Can everything else be disabled? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Yes. I just want to use it to send mail, via a browser interface, without being an open relay. By default, James will only send e-mail from localhost. Can you point me to a link on closing open relay still being able to send mail? If you are going to use a browser interface to send mail, then you have to close that path. From the perspective of James, mail coming from the servlet/cgi is going to originate from localhost. You can disable POP3 and NNTP. Look at NNTP to see how that service is disabled by default. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
then you have to close that path. Please explain. -Original Message- From: Noel J. Bergman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 2:03 PM To: James Users List Subject: RE: SMTP Yes. I just want to use it to send mail, via a browser interface, without being an open relay. By default, James will only send e-mail from localhost. Can you point me to a link on closing open relay still being able to send mail? If you are going to use a browser interface to send mail, then you have to close that path. From the perspective of James, mail coming from the servlet/cgi is going to originate from localhost. You can disable POP3 and NNTP. Look at NNTP to see how that service is disabled by default. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
I never know what the ip is. Need to send email from any browser (wherever I am). -Original Message- From: Steve Short [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 2:00 PM To: James Users List Subject: RE: SMTP The simplest method is to configure a matcher to only accept messages from certain network IP addresses. Steve -Original Message- From: David Schwartz [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 10:52 AM To: James Users List Subject: RE: SMTP Yes. I just want to use it to send mail, via a browser interface, without being an open relay. Can you point me to a link on closing open relay still being able to send mail? -Original Message- From: Steve Short [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 1:42 PM To: James Users List Subject: RE: SMTP Yes. If by 'everything' you mean POP3, NNTP, local inboxes. Can James be used to just send emails out? Can everything else be disabled? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SMTP
David Schwartz wrote: I never know what the ip is. Need to send email from any browser (wherever I am). If the applet is the one actually sending the message, then you'd basically be providing an open relay. What someone was suggesting was having your applet talk (via HTTP or some other protocol) to a servlet, and have the servlet connect to a local server. Unless you have some fancy authentication happening with your email, hopefully you can see that allowing a mail server to relay email from any browser/Ip address would be an open relay. ;) -- Serge Knystautas President Lokitech software . strategy . design http://www.lokitech.com p. 301.656.5501 e. [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Unless you have some fancy authentication happening with your email, Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. Would that work? -Original Message- From: Serge Knystautas [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 2:34 PM To: James Users List Subject: Re: SMTP David Schwartz wrote: I never know what the ip is. Need to send email from any browser (wherever I am). If the applet is the one actually sending the message, then you'd basically be providing an open relay. What someone was suggesting was having your applet talk (via HTTP or some other protocol) to a servlet, and have the servlet connect to a local server. Unless you have some fancy authentication happening with your email, hopefully you can see that allowing a mail server to relay email from any browser/Ip address would be an open relay. ;) -- Serge Knystautas President Lokitech software . strategy . design http://www.lokitech.com p. 301.656.5501 e. [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SMTP
David Schwartz wrote: Unless you have some fancy authentication happening with your email, Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. Would that work? No, that just authenticates the application, not the sending message. Are you actually distributing javamail.jar and activation.jar with your applet and doing the SMTP commands from the applet? Maybe in the newest Java plugin it would work, but javamail didn't use to work in applets because of resource loading issues in the jar. If you are, this is kind of tough. Off the top of my head, you could either require SMTP AUTH in your mail server, and send that username/password to your applet secure (over SSL should be fine I suppose). -- Serge Knystautas President Lokitech software . strategy . design http://www.lokitech.com p. 301.656.5501 e. [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SMTP
this may sound kinda dumb, but aren't we just talking about a webmail client for what you want to do here? is the need to have a local client a requirement or a preference? b Serge Knystautas wrote: David Schwartz wrote: Unless you have some fancy authentication happening with your email, Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. Would that work? No, that just authenticates the application, not the sending message. Are you actually distributing javamail.jar and activation.jar with your applet and doing the SMTP commands from the applet? Maybe in the newest Java plugin it would work, but javamail didn't use to work in applets because of resource loading issues in the jar. If you are, this is kind of tough. Off the top of my head, you could either require SMTP AUTH in your mail server, and send that username/password to your applet secure (over SSL should be fine I suppose). - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
I'm not using applets. Just jsp page that will pass the email message to a servlet. The servlet would then send the mail. you couldeither require SMTP AUTH in your mail server, and send that username/password Wanted to pass the un password from the app to a servlet that would send it. the jars would only be on the server. The connection between the sevlet james would then be authenticated. Would that work? -Original Message- From: Serge Knystautas [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 2:44 PM To: James Users List Subject: Re: SMTP David Schwartz wrote: Unless you have some fancy authentication happening with your email, Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. Would that work? No, that just authenticates the application, not the sending message. Are you actually distributing javamail.jar and activation.jar with your applet and doing the SMTP commands from the applet? Maybe in the newest Java plugin it would work, but javamail didn't use to work in applets because of resource loading issues in the jar. If you are, this is kind of tough. Off the top of my head, you could either require SMTP AUTH in your mail server, and send that username/password to your applet secure (over SSL should be fine I suppose). -- Serge Knystautas President Lokitech software . strategy . design http://www.lokitech.com p. 301.656.5501 e. [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Yes. There is NO local client. I just want to use a web interface. -Original Message- From: bill parducci [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 2:53 PM To: James Users List Subject: Re: SMTP this may sound kinda dumb, but aren't we just talking about a webmail client for what you want to do here? is the need to have a local client a requirement or a preference? b Serge Knystautas wrote: David Schwartz wrote: Unless you have some fancy authentication happening with your email, Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. Would that work? No, that just authenticates the application, not the sending message. Are you actually distributing javamail.jar and activation.jar with your applet and doing the SMTP commands from the applet? Maybe in the newest Java plugin it would work, but javamail didn't use to work in applets because of resource loading issues in the jar. If you are, this is kind of tough. Off the top of my head, you could either require SMTP AUTH in your mail server, and send that username/password to your applet secure (over SSL should be fine I suppose). - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
I just want to use it to send mail, via a browser interface, without being an open relay. If you want to browse to a server and send mail from anywhere, then I presume that you are creating some sort of HTML form-based interface. That is one of the common causes of spam problems. You need to make sure that only authorized users can use that interface to keep spambots from using your page to send their e-mail. If you are using a CGI script or Java servlet to handle the HTTP POST action, then when it wants to send mail through James, James will see it as originating with that web component, not the original browser IP. Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. That should be fine, with all normal password authentication caveats. Just make sure that the JSP or servlet that actually sends the message to James is secured, not just the form page, if they aren't the same page. If you are using tomcat, you can use its authentication mechanisms. Take a look at the Admin and Manager webapps. You should also tell Tomcat to require an SSL connection for your e-mail webapp. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
You're right on! Only problem is that I wasn't planning on putting Tomcat on the server with the ssl certificate - yet. I wanted to have java/james/tomcat on a server web server with ssl on dif machine. Will it be a problem? -Original Message- From: Noel J. Bergman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 3:04 PM To: James Users List Subject: RE: SMTP I just want to use it to send mail, via a browser interface, without being an open relay. If you want to browse to a server and send mail from anywhere, then I presume that you are creating some sort of HTML form-based interface. That is one of the common causes of spam problems. You need to make sure that only authorized users can use that interface to keep spambots from using your page to send their e-mail. If you are using a CGI script or Java servlet to handle the HTTP POST action, then when it wants to send mail through James, James will see it as originating with that web component, not the original browser IP. Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. That should be fine, with all normal password authentication caveats. Just make sure that the JSP or servlet that actually sends the message to James is secured, not just the form page, if they aren't the same page. If you are using tomcat, you can use its authentication mechanisms. Take a look at the Admin and Manager webapps. You should also tell Tomcat to require an SSL connection for your e-mail webapp. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Only problem is that I wasn't planning on putting Tomcat on the server with the ssl certificate - yet. I wanted to have java/james/tomcat on a server web server with ssl on dif machine. If the connector between the web server and tomcat is secure, then you are fine. Otherwise, an intruder could attempt connecting to tomcat directly on the second machine. Also, if you have the password conveyed over the connector, it is possible that it could be sniffed. The issue, at this point, is just a webapp security topic. Please note (http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html): When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. Typically, this server will negotiate all SSL-related functionality, then pass on any requests destined for the Tomcat container only after decrypting those requests. Likewise, Tomcat will return cleartext responses, that will be encrypted before being returned to the user's browser. In this environment, Tomcat knows that communications between the primary web server and the client are taking place over a secure connection (because your application needs to be able to ask about this), but it does not participate in the encryption or decryption itself. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Would it be possible (or even a good idea) to just inject the message into the repository? That way, only applications that have access to the DB repository (I'm thinking MySQL etc. here) would be able to send a message. Of course, the application would have to put in some required headers, but then you're taking SMTP out of the equation, and the web server just needs to use JDBC to get a message sent. Is this viable, or does it make for a security nightmare if the web app security is compromised? -Original Message- From: Noel J. Bergman [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 2:04 PM To: James Users List Subject: RE: SMTP I just want to use it to send mail, via a browser interface, without being an open relay. If you want to browse to a server and send mail from anywhere, then I presume that you are creating some sort of HTML form-based interface. That is one of the common causes of spam problems. You need to make sure that only authorized users can use that interface to keep spambots from using your page to send their e-mail. If you are using a CGI script or Java servlet to handle the HTTP POST action, then when it wants to send mail through James, James will see it as originating with that web component, not the original browser IP. Was planning to use SSL. Jsp interface. I would log in using the email account username password. If they don't match the user can't send email. The page would not be open to the public. That should be fine, with all normal password authentication caveats. Just make sure that the JSP or servlet that actually sends the message to James is secured, not just the form page, if they aren't the same page. If you are using tomcat, you can use its authentication mechanisms. Take a look at the Admin and Manager webapps. You should also tell Tomcat to require an SSL connection for your e-mail webapp. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP
Would it be possible (or even a good idea) to just inject the message into the repository? Unnecesary, and hardcoded to the repository format. --- Noel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SMTP+SSL howto
Hello, Emmanuel! I tried to configure James as you described in your last post, but I had the same problem as before. I tried both (jdk141) and (jdk131 with jsse) with the same unsuccessfull result. When I'm connecting to port 465 via openssl, I receive the following response: CONNECTED(0006) --- Certificate chain 0 s:/C=MD/ST=Moldova/L=Chisinau/O=Compudava/OU=Coolmail/CN=Navitaniuk Denis i:/C=MD/ST=Moldova/L=Chisinau/O=Compudava/OU=Coolmail/CN=Navitaniuk Denis --- Server certificate -BEGIN CERTIFICATE- MIIDHjCCAtsCBD7cSIcwCwYHKoZIzjgEAwUAMHQxCzAJBgNVBAYTAk1EMRAwDgYD VQQIEwdNb2xkb3ZhMREwDwYDVQQHEwhDaGlzaW5hdTESMBAGA1UEChMJQ29tcHVk YXZhMREwDwYDVQQLEwhDb29sbWFpbDEZMBcGA1UEAxMQTmF2aXRhbml1ayBEZW5p czAeFw0wMzA2MDMwNzA0MzlaFw0wNDA2MDIwNzA0MzlaMHQxCzAJBgNVBAYTAk1E MRAwDgYDVQQIEwdNb2xkb3ZhMREwDwYDVQQHEwhDaGlzaW5hdTESMBAGA1UEChMJ Q29tcHVkYXZhMREwDwYDVQQLEwhDb29sbWFpbDEZMBcGA1UEAxMQTmF2aXRhbml1 ayBEZW5pczCCAbgwggEsBgcqhkjOOAQBMIIBHwKBgQD9f1OBHXUSKVLfSpwu7OTn 9hG3UjzvRADDHj+AtlEmaUVdQCJR+1k9jVj6v8X1ujD2y5tVbNeBO4AdNG/yZmC3 a5lQpaSfn+gEexAiwk+7qdf+t8Yb+DtX58aophUPBPuD9tPFHsMCNVQTWhaRMvZ1 864rYdcq7/IiAxmd0UgBxwIVAJdgUI8VIwvMspK5gqLrhAvwWBz1AoGBAPfhoIXW mz3ey7yrXDa4V7l5lK+7+jrqgvlXTAs9B4JnUVlXjrrUWU/mcQcQgYC0SRZxI+hM KBYTt88JMozIpuE8FnqLVHyNKOCjrh4rs6Z1kW6jfwv6ITVi8ftiegEkO8yk8b6o UZCJqIPf4VrlnwaSi2ZegHtVJWQBTDv+z0kqA4GFAAKBgQDMvWH58FkbLAmqymd1 ob82jAxiY4YTy4odq35I+CC/BXeAc/5U168oJLdEnfrwKfM31zqHhtUXVXXBvHkz 5HVymTXNPGrxKvAaa2QCz8Rs6Vi1w3x4GZAdORvdRlxL4pei9z8qxmNySeMrKHm4 dgiYwcvoE1h2IDepgcZO76r8WTALBgcqhkjOOAQDBQADMAAwLQIUJ/rWZrHJTfOl 7L2RKniDPnc3IRgCFQCHWX5nVsKIm/MNgRfkXo1aJa1p8A== -END CERTIFICATE- subject=/C=MD/ST=Moldova/L=Chisinau/O=Compudava/OU=Coolmail/CN=Navitaniuk Denis issuer=/C=MD/ST=Moldova/L=Chisinau/O=Compudava/OU=Coolmail/CN=Navitaniuk Denis --- No client certificate CA names sent --- SSL handshake has read 1263 bytes and written 332 bytes --- New, TLSv1/SSLv3, Cipher is EDH-DSS-DES-CBC3-SHA Server public key is 1024 bit SSL-Session: Protocol : TLSv1 Cipher: EDH-DSS-DES-CBC3-SHA Session-ID: 3EDC49E122C2E7CB75D755AE5510538E4E2C2C26D6A4565337DEF4F32F8B32DE Session-ID-ctx: Master-Key: 66DB86793C11164B614A4B20D21DFE3DC306FA168708C9FD87336C923D12BD694947EEBD6EF9D056C74DE60D739DD112 Key-Arg : None Krb5 Principal: None Start Time: 1054624225 Timeout : 300 (sec) Verify return code: 18 (self signed certificate) --- 220 zanta SMTP Server (JAMES SMTP Server 2.1.3) ready Tue, 3 Jun 2003 10:10:25 +0300 (EEST) That response was generated for my last certificate, made under jdk131_08. The Outlook responded that timeout was occured. In logs I saw: 03/06/03 09:35:13 DEBUG smtpserver-tls: Calling start() 03/06/03 09:35:13 DEBUG smtpserver-tls: Exception handling socket to 192.168.12.227 (192.168.12.227) : Connection has been shutdown: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake at com.sun.net.ssl.internal.ssl.SSLSocketImpl.d(DashoA6275) at com.sun.net.ssl.internal.ssl.AppInputStream.read(DashoA6275) at java.io.BufferedInputStream.read1(BufferedInputStream.java:220) at java.io.BufferedInputStream.read(BufferedInputStream.java:277) at sun.nio.cs.StreamDecoder$CharsetSD.readBytes(StreamDecoder.java:406) at sun.nio.cs.StreamDecoder$CharsetSD.implRead(StreamDecoder.java:446) at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:180) at java.io.InputStreamReader.read(InputStreamReader.java:167) at java.io.BufferedReader.fill(BufferedReader.java:136) at java.io.BufferedReader.readLine(BufferedReader.java:299) at java.io.BufferedReader.readLine(BufferedReader.java:362) at org.apache.james.smtpserver.SMTPHandler.readCommandLine(SMTPHandler.java:527) at org.apache.james.smtpserver.SMTPHandler.handleConnection(SMTPHandler.java:381) at org.apache.james.util.connection.ServerConnection$ClientConnectionRunner.run(ServerConnection.java:462) at org.apache.avalon.excalibur.thread.impl.ExecutableRunnable.execute(ExecutableRunnable.java:47) at org.apache.avalon.excalibur.thread.impl.WorkerThread.run(WorkerThread.java:80) Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275) at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA6275) at sun.nio.cs.StreamEncoder$CharsetSE.writeBytes(StreamEncoder.java:334) at sun.nio.cs.StreamEncoder$CharsetSE.implFlushBuffer(StreamEncoder.java:402) at sun.nio.cs.StreamEncoder$CharsetSE.implFlush(StreamEncoder.java:406) at sun.nio.cs.StreamEncoder.flush(StreamEncoder.java:150) at
Re: SMTP AUTH sending problem
Hello Javier If you try to send one message to [EMAIL PROTECTED] you always receive the error? I tried to send a message and worked fine for me no SMTP AUTH was required. []s - Original Message - From: Javier Storni [EMAIL PROTECTED] To: James Users List [EMAIL PROTECTED] Sent: Wednesday, April 09, 2003 11:22 AM Subject: Re: SMTP AUTH sending problem I also have an SMTP problem. Some users cannot send some messages to another some users. It's a bit strange, look at the DEBUG info. User send a message to various recipients. Some of them sent ok, others not. Here is when the user send the message to James = 09/04/03 10:29:31 DEBUG smtpserver: Retrieving a org.apache.james.smtpserver.SMTPHandler from the pool 09/04/03 10:29:31 DEBUG smtpserver: Getting SMTPHandler from pool. 09/04/03 10:29:31 INFO smtpserver: Connection from 200.63.95.195 (200.63.95.195) 09/04/03 10:29:31 DEBUG smtpserver: Sent: 220 pipo SMTP Server (JAMES SMTP Server 2.1.2) ready Wed, 9 Apr 2003 10:29:31 -0300 (GMT-03:00) 09/04/03 10:29:31 DEBUG smtpserver: Calling start() 09/04/03 10:29:31 DEBUG smtpserver: Watchdog default Worker #21 has time to sleep 36 09/04/03 10:29:31 DEBUG smtpserver: Command received: EHLO 1 09/04/03 10:29:31 DEBUG smtpserver: Sent: 250-pipo Hello 1 (200.63.95.195 [200.63.95.195]) 09/04/03 10:29:31 DEBUG smtpserver: Sent: 250-AUTH LOGIN PLAIN 09/04/03 10:29:31 DEBUG smtpserver: Sent: 250 AUTH=LOGIN PLAIN 09/04/03 10:29:31 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:31 DEBUG smtpserver: Command received: AUTH LOGIN 09/04/03 10:29:31 DEBUG smtpserver: Sent: 334 VXNlcm5hbWU6 09/04/03 10:29:32 DEBUG smtpserver: Sent: 334 UGFzc3dvcmQ6 09/04/03 10:29:32 DEBUG smtpserver: AUTH method LOGIN succeeded 09/04/03 10:29:32 DEBUG smtpserver: Sent: 235 Authentication Successful 09/04/03 10:29:32 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:32 DEBUG smtpserver: Command received: MAIL FROM: [EMAIL PROTECTED] 09/04/03 10:29:32 DEBUG smtpserver: Sent: 250 Sender [EMAIL PROTECTED] OK 09/04/03 10:29:32 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:32 DEBUG smtpserver: Command received: RCPT TO: [EMAIL PROTECTED] 09/04/03 10:29:32 DEBUG smtpserver: Sent: 250 Recipient [EMAIL PROTECTED] OK 09/04/03 10:29:32 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:33 DEBUG smtpserver: Command received: RCPT TO: [EMAIL PROTECTED] 09/04/03 10:29:33 DEBUG smtpserver: Sent: 250 Recipient [EMAIL PROTECTED] OK 09/04/03 10:29:33 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:33 DEBUG smtpserver: Command received: RCPT TO: [EMAIL PROTECTED] 09/04/03 10:29:33 DEBUG smtpserver: Sent: 250 Recipient [EMAIL PROTECTED] OK 09/04/03 10:29:33 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:33 DEBUG smtpserver: Command received: RCPT TO: [EMAIL PROTECTED] 09/04/03 10:29:33 DEBUG smtpserver: Sent: 250 Recipient [EMAIL PROTECTED] OK 09/04/03 10:29:33 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:34 DEBUG smtpserver: Command received: DATA 09/04/03 10:29:34 DEBUG smtpserver: Sent: 354 Ok Send data ending with CRLF.CRLF 09/04/03 10:29:34 DEBUG smtpserver: Successfully spooled mail )Mail1049894974636-15 from [EMAIL PROTECTED] for [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] 09/04/03 10:29:34 DEBUG smtpserver: Sent: 250 Message received 09/04/03 10:29:34 DEBUG smtpserver: Calling reset() default Worker #21 09/04/03 10:29:35 DEBUG smtpserver: Command received: QUIT 09/04/03 10:29:35 DEBUG smtpserver: Sent: 221 pipo Service closing transmission channel 09/04/03 10:29:35 DEBUG smtpserver: Calling stop() default Worker #21 09/04/03 10:29:35 DEBUG smtpserver: Closing socket. 09/04/03 10:29:35 DEBUG smtpserver: Calling disposeWatchdog() default Worker #21 09/04/03 10:29:35 DEBUG smtpserver: Returning SMTPHandler to pool. 09/04/03 10:29:35 DEBUG smtpserver: Returning a org.apache.james.smtpserver.SMTPHandler to the pool 09/04/03 10:29:35 DEBUG smtpserver: Watchdog default Worker #21 is exiting run(). Here is when James send messages to the recipients = 09/04/03 10:30:35 DEBUG smtpserver: Retrieving a org.apache.james.smtpserver.SMTPHandler from the pool 09/04/03 10:30:35 DEBUG smtpserver: Getting SMTPHandler from pool. 09/04/03 10:30:35 INFO smtpserver: Connection from webmail.512konline.com.ar (200.63.64.13) 09/04/03 10:30:35 DEBUG smtpserver: Sent: 220 pipo SMTP Server (JAMES SMTP Server 2.1.2) ready Wed, 9 Apr 2003 10:30:35 -0300 (GMT-03:00) 09/04/03 10:30:35 DEBUG smtpserver: Calling start() 09/04/03 10:30:35 DEBUG smtpserver: Watchdog default Worker #27 has time to sleep 36 09/04/03 10:30:35 DEBUG smtpserver: Command received: HELO pipo 09/04/03 10:30:35 DEBUG smtpserver: Sent: 250-pipo Hello pipo (webmail.512konline.com.ar [200.63.64.13]) 09/04/03 10:30:35 DEBUG smtpserver
RE: SMTP AUTH scares me...
Many firewalls handle SMTP differently than other connections. Usually they simply filter packets based on their source and destination. It is often possible, however, for firewalls to be setup to proxy SMTP traffic on port 25. This allows the firewall to use services such as RBL's (Relay Black Lists) to block mail from known open relays, and possibly implement other rules. I don't think this is your issue though. When you connect from anywhere and issue EHLO you should get 250 AUTH LOGIN PLAIN but you are only required to actually authenticate yourself if the RCPT TO recipients are not local. I've found SMTP AUTH to be quite effective and stable, but I'm using James from cvs, and the first release of v2.1 not the latest release of v2. d. -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED] Sent: 19 March 2003 08:46 To: James-User Mailing List Subject: SMTP AUTH scares me... Hello guys, I have troubles with the smtp protocol enabled with auth and verification. When I send mails from my lan, there are no problems, the log shows correctly that the auth mechanism works well. When I try the same from the internet, the auth fails. When I try to telnet my james server and issue a ehlo command, I must retry several times before getting the message auth=auth login... Between my james server and the Internet, I have a Dlink DI804 router/firewall. Does it possible that it's the problem? How can I solve this? Any idea? Thanks a lot, Emmanuel _ Envie de discuter en live avec vos amis ? Tlcharger MSN Messenger http://www.ifrance.com/_reloc/m la 1re messagerie instantane de France - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SMTP AUTH scares me...
Hi Emmanuel, I had a problem with this at work. For some reason the firewall was dropping packets that it deemed to be authentication packets. This included SMTP, SSH, all sorts of stuff. The IT guys didn't really tell what they changed or give me a good description, but it sounded like some sort of proxy configuration was the cause. Kenny Emmanuel Gilmont wrote: Hello guys, I have troubles with the smtp protocol enabled with auth and verification. When I send mails from my lan, there are no problems, the log shows correctly that the auth mechanism works well. When I try the same from the internet, the auth fails. When I try to telnet my james server and issue a ehlo command, I must retry several times before getting the message auth=auth login... Between my james server and the Internet, I have a Dlink DI804 router/firewall. Does it possible that it's the problem? How can I solve this? Any idea? Thanks a lot, Emmanuel _ Envie de discuter en live avec vos amis ? Télécharger MSN Messenger http://www.ifrance.com/_reloc/m la 1ère messagerie instantanée de France - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: SMTP AUTH scares me...
Hi Danny, I've totally found James/SMTP-AUTH to be totally rocking too, but this problem I had with the lan at work made it appear that when I telneted to james and issued the ehlo, that no AUTH LOGIN PLAIN was returned. I downloaded Ethereal on my workstation and fired up ngrep on the james box so that I could sniff the network locally on both machines. In the ngrep on the mail server I could see James responding with the AUTH LOGIN PLAIN but in the sniff from my local workstation there was no such thing. The firewall was stripping it out, presumably so that it could proxy the connections to mail servers and handle any SMTP-AUTH automatically. Very weird. Kenny Smith Danny Angus wrote: Many firewalls handle SMTP differently than other connections. Usually they simply filter packets based on their source and destination. It is often possible, however, for firewalls to be setup to proxy SMTP traffic on port 25. This allows the firewall to use services such as RBL's (Relay Black Lists) to block mail from known open relays, and possibly implement other rules. I don't think this is your issue though. When you connect from anywhere and issue EHLO you should get 250 AUTH LOGIN PLAIN but you are only required to actually authenticate yourself if the RCPT TO recipients are not local. I've found SMTP AUTH to be quite effective and stable, but I'm using James from cvs, and the first release of v2.1 not the latest release of v2. d. -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED] Sent: 19 March 2003 08:46 To: James-User Mailing List Subject: SMTP AUTH scares me... Hello guys, I have troubles with the smtp protocol enabled with auth and verification. When I send mails from my lan, there are no problems, the log shows correctly that the auth mechanism works well. When I try the same from the internet, the auth fails. When I try to telnet my james server and issue a ehlo command, I must retry several times before getting the message auth=auth login... Between my james server and the Internet, I have a Dlink DI804 router/firewall. Does it possible that it's the problem? How can I solve this? Any idea? Thanks a lot, Emmanuel _ Envie de discuter en live avec vos amis ? Tlcharger MSN Messenger http://www.ifrance.com/_reloc/m la 1re messagerie instantane de France - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: SMTP+SSL =error (log files)
Emmanuel, From what is present in the log files, my guess is that kmail is starting with a plain socket, and expecting to be able to switch to TLS using STARTTLS. That is why the connection is immediately rejected. Is it possible to force kmail to start with TLS? STARTTLS support is being worked on for James v3. --- Noel -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 23, 2003 3:57 To: James Users List Subject: Re: SMTP+SSL =error (log files) You got it :-) I made 3 attempts (see smtpserver.log for details): 1) kmail + ssl + auth + verification 2) kmail + ssl 3) openssl (see openssl.debug for details) Thanks for all. Have a nice day, Emmanuel -- Emmanuel, Than you for helping out with this. :-) I'm relieved to hear that TLS is working for all of the protocols except for SMTP, and that it is working for SMTP manually. Please go into apps/james/SAR-INF/environment.xml, and change the entry for smtpserver from INFO to DEBUG. That ought to be line 50. Then we will want to see the portion of the log showing when kmail tries to use SMTP with TLS. A useful paper: http://www.sial.org/talks/smtpauth-starttls/talk.html --- Noel -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 22, 2003 7:25 To: James Users List Subject: Re: SMTP+SSL =error Emmanuel, Are you saying that SSL (TLS) works for RemoteManager and POP3, but not SMTP? Yes. That's right. Are you getting ssl:port indicators emitted at startup for RemoteManager, POP3 and SMTP? Yes, all seems ok. And when I try to connect to the SMTP deamon with openssl (openssl s_client -connect localhost:25), it works very well. Maybe it's kmail which can't handle it ? Technically, SMTP is a bit different from the others. I don't believe STARTTLS is currently implemented. Some clients may have issue with that lack. Can you please provide information on how you prepared the TLS environment? OK, tell me what I should provide to you... Also, please turn on DEBUG for SMTP, and provide a log of an attempted SMTP SSL session? Maybe I'm blind... but how do you turn on the DEBUG mode ? (I'll search... :-) Thanks, Emmanuel --- Noel -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 10:28 To: [EMAIL PROTECTED] Subject: SMTP+SSL =error Hi all, After reading the archive, I decide to post this message. I succefully configured my James server but got an error. Config: - remote manager uses ssl (port 4555) - pop use ssl (port 995) - smtp use auth, verification and ssl (port 25) - nothing more If I disable the ssl for the smtp, it works very well. But when activated, my mail client (kmail) got a message like this: mail server doens't answer... Anybody with an idea ? Thanks, Emmanuel -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP+SSL =error (log files)
You got it :-) I made 3 attempts (see smtpserver.log for details): 1) kmail + ssl + auth + verification 2) kmail + ssl 3) openssl (see openssl.debug for details) Thanks for all. Have a nice day, Emmanuel -- Emmanuel, Than you for helping out with this. :-) I'm relieved to hear that TLS is working for all of the protocols except for SMTP, and that it is working for SMTP manually. Please go into apps/james/SAR-INF/environment.xml, and change the entry for smtpserver from INFO to DEBUG. That ought to be line 50. Then we will want to see the portion of the log showing when kmail tries to use SMTP with TLS. A useful paper: http://www.sial.org/talks/smtpauth-starttls/talk.html --- Noel -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 22, 2003 7:25 To: James Users List Subject: Re: SMTP+SSL =error Emmanuel, Are you saying that SSL (TLS) works for RemoteManager and POP3, but not SMTP? Yes. That's right. Are you getting ssl:port indicators emitted at startup for RemoteManager, POP3 and SMTP? Yes, all seems ok. And when I try to connect to the SMTP deamon with openssl (openssl s_client -connect localhost:25), it works very well. Maybe it's kmail which can't handle it ? Technically, SMTP is a bit different from the others. I don't believe STARTTLS is currently implemented. Some clients may have issue with that lack. Can you please provide information on how you prepared the TLS environment? OK, tell me what I should provide to you... Also, please turn on DEBUG for SMTP, and provide a log of an attempted SMTP SSL session? Maybe I'm blind... but how do you turn on the DEBUG mode ? (I'll search... :-) Thanks, Emmanuel --- Noel -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 10:28 To: [EMAIL PROTECTED] Subject: SMTP+SSL =error Hi all, After reading the archive, I decide to post this message. I succefully configured my James server but got an error. Config: - remote manager uses ssl (port 4555) - pop use ssl (port 995) - smtp use auth, verification and ssl (port 25) - nothing more If I disable the ssl for the smtp, it works very well. But when activated, my mail client (kmail) got a message like this: mail server doens't answer... Anybody with an idea ? Thanks, Emmanuel OpenSSL s_client -connect localhost:25 CONNECTED(0003) depth=0 /C=Unknown/ST=Unknown/L=Unknown/O=localhost/OU=localhost/CN=Mailing List verify error:num=18:self signed certificate verify return:1 depth=0 /C=Unknown/ST=Unknown/L=Unknown/O=localhost/OU=localhost/CN=Mailing List verify return:1 --- Certificate chain 0 s:/C=Unknown/ST=Unknown/L=Unknown/O=localhost/OU=localhost/CN=Mailing List i:/C=Unknown/ST=Unknown/L=Unknown/O=localhost/OU=localhost/CN=Mailing List --- Server certificate -BEGIN CERTIFICATE- MIIDHzCCAt0CBD4tUsgwCwYHKoZIzjgEAwUAMHUxEDAOBgNVBAYTB1Vua25vd24x EDAOBgNVBAgTB1Vua25vd24xEDAOBgNVBAcTB1Vua25vd24xEjAQBgNVBAoTCWxv Y2FsaG9zdDESMBAGA1UECxMJbG9jYWxob3N0MRUwEwYDVQQDEwxNYWlsaW5nIExp c3QwHhcNMDMwMTIxMTQwMTQ0WhcNMDMwNDIxMTQwMTQ0WjB1MRAwDgYDVQQGEwdV bmtub3duMRAwDgYDVQQIEwdVbmtub3duMRAwDgYDVQQHEwdVbmtub3duMRIwEAYD VQQKEwlsb2NhbGhvc3QxEjAQBgNVBAsTCWxvY2FsaG9zdDEVMBMGA1UEAxMMTWFp bGluZyBMaXN0MIIBuDCCASwGByqGSM44BAEwggEfAoGBAP1/U4EddRIpUt9KnC7s 5Of2EbdSPO9EAMMeP4C2USZpRV1AIlH7WT2NWPq/xfW6MPbLm1Vs14E7gB00b/Jm YLdrmVClpJ+f6AR7ECLCT7up1/63xhv4O1fnxqimFQ8E+4P208UewwI1VBNaFpEy 9nXzrith1yrv8iIDGZ3RSAHHAhUAl2BQjxUjC8yykrmCouuEC/BYHPUCgYEA9+Gg hdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj 6EwoFhO3zwkyjMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTx vqhRkImog9/hWuWfBpKLZl6Ae1UlZAFMO/7PSSoDgYUAAoGBAKbygmrHDv4BdjhP xvB9bkDTFjhuegCMmnSVYGVA3lvZKv9TIwJTJdLvfksvEG9Cm42PFNL1e+s2Z2i/ 6MCasF+cS7UnQ+lrKZsXHGPqTabQjdg/IHIgthvD65zlm9sYhdBozRllXB34BWr5 X0FNGx9J/6jg4MYZeTZXXpbgKRttMAsGByqGSM44BAMFAAMvADAsAhQTjwQZ5UtD E4vKY5hcA01J07ugOgIUTokOD0UHCv817JD0dx8su2yyECM= -END CERTIFICATE- subject=/C=Unknown/ST=Unknown/L=Unknown/O=localhost/OU=localhost/CN=Mailing List issuer=/C=Unknown/ST=Unknown/L=Unknown/O=localhost/OU=localhost/CN=Mailing List --- No client certificate CA names sent --- SSL handshake has read 1263 bytes and written 314 bytes --- New, TLSv1/SSLv3, Cipher is EDH-DSS-DES-CBC3-SHA Server public key is 1024 bit SSL-Session: Protocol : TLSv1 Cipher: EDH-DSS-DES-CBC3-SHA Session-ID: 3E2FAB320F8F9678873F6343A1235D4541842374E327F1DBD90409E2EA711ACC Session-ID-ctx: Master-Key: 3C35001FD8A3757BEEFEDDD9C50969057D5F549177F98CD8C3B509178C6D15DA16B975254F8AB0542CB3861068F7CB75 Key-Arg : None Start Time: 1043311410 Timeout : 300 (sec) Verify return code: 18 (self signed certificate) --- 220 pc0048 SMTP
Re: SMTP+SSL =error
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N Emmanuel, Are you saying that SSL (TLS) works for RemoteManager and POP3, but not SMTP? Yes. That's right. Are you getting ssl:port indicators emitted at startup for RemoteManager, POP3 and SMTP? Yes, all seems ok. And when I try to connect to the SMTP deamon with openssl (openssl s_client -connect localhost:25), it works very well. Maybe it's kmail which can't handle it ? Technically, SMTP is a bit different from the others. I don't believe STARTTLS is currently implemented. Some clients may have issue with that lack. Can you please provide information on how you prepared the TLS environment? OK, tell me what I should provide to you... Also, please turn on DEBUG for SMTP, and provide a log of an attempted SMTP SSL session? Maybe I'm blind... but how do you turn on the DEBUG mode ? (I'll search... :-) Thanks, Emmanuel --- Noel -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 10:28 To: [EMAIL PROTECTED] Subject: SMTP+SSL =error Hi all, After reading the archive, I decide to post this message. I succefully configured my James server but got an error. Config: - remote manager uses ssl (port 4555) - pop use ssl (port 995) - smtp use auth, verification and ssl (port 25) - nothing more If I disable the ssl for the smtp, it works very well. But when activated, my mail client (kmail) got a message like this: mail server doens't answer... Anybody with an idea ? Thanks, Emmanuel _ Envie de discuter en live avec vos amis ? Télécharger MSN Messenger http://www.ifrance.com/_reloc/m la 1ère messagerie instantanée de France -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP+SSL =error
Emmanuel, Are you saying that SSL (TLS) works for RemoteManager and POP3, but not SMTP? Are you getting ssl:port indicators emitted at startup for RemoteManager, POP3 and SMTP? Technically, SMTP is a bit different from the others. I don't believe STARTTLS is currently implemented. Some clients may have issue with that lack. Can you please provide information on how you prepared the TLS environment? Also, please turn on DEBUG for SMTP, and provide a log of an attempted SMTP SSL session? --- Noel -Original Message- From: Emmanuel Gilmont [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 10:28 To: [EMAIL PROTECTED] Subject: SMTP+SSL =error Hi all, After reading the archive, I decide to post this message. I succefully configured my James server but got an error. Config: - remote manager uses ssl (port 4555) - pop use ssl (port 995) - smtp use auth, verification and ssl (port 25) - nothing more If I disable the ssl for the smtp, it works very well. But when activated, my mail client (kmail) got a message like this: mail server doens't answer... Anybody with an idea ? Thanks, Emmanuel -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
Looks like a DNS problem. Check that you properly set your DNS servers. RemoteDelivery should resolve the domain 'yahoo.com' to an MX record that looks something like mx1.mail.yahoo.com. If the MX record can't be resolved (i.e. you didn't set your DNS servers) then it will attempt to connect directly to the specified domain as a server. --Peter -Original Message- From: J. Norment [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 26, 2002 10:24 PM To: James Users List Subject: SMTP error: James trying to relay? I'm attempting to send a message to a yahoo account. I'm getting this error. Does this look right? 26/12/02 23:32:46 INFO James.Mailet: RemoteDelivery: Attempting delivery of Mail1040967105812-1-to-yahoo.com to host yahoo.com to addresses [[EMAIL PROTECTED]] 26/12/02 23:33:07 INFO James.Mailet: RemoteDelivery: Temporary exception delivering mail (Mail1040967105812-1-to-yahoo.com: javax.mail.MessagingException: Could not connect to SMTP host: yahoo.com, port: 25; nested exception is: java.net.ConnectException: Connection timed out: connect at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:867) -- To unsubscribe, e-mail: mailto:james-user- [EMAIL PROTECTED] For additional commands, e-mail: mailto:james-user- [EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
Could this be an indication that my ISP is blocking port 25? On Fri, 27 Dec 2002 00:32:13 -0800, Peter M. Goldstein wrote: Looks like a DNS problem. Check that you properly set your DNS servers. RemoteDelivery should resolve the domain 'yahoo.com' to an MX record that looks something like mx1.mail.yahoo.com. If the MX record can't be resolved (i.e. you didn't set your DNS servers) then it will attempt to connect directly to the specified domain as a server. --Peter -Original Message- From: J. Norment [mailto:[EMAIL PROTECTED]] Sent: Thursday, December 26, 2002 10:24 PM To: James Users List Subject: SMTP error: James trying to relay? I'm attempting to send a message to a yahoo account. I'm getting this error. Does this look right? 26/12/02 23:32:46 INFO James.Mailet: RemoteDelivery: Attempting delivery of Mail1040967105812-1-to-yahoo.com to host yahoo.com to addresses [[EMAIL PROTECTED]] 26/12/02 23:33:07 INFO James.Mailet: RemoteDelivery: Temporary exception delivering mail (Mail1040967105812-1-to-yahoo.com: javax.mail.MessagingException: Could not connect to SMTP host: yahoo.com, port: 25; nested exception is: java.net.ConnectException: Connection timed out: connect at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:867) -- To unsubscribe, e-mail: mailto:james-user- [EMAIL PROTECTED] For additional commands, e-mail: mailto:james-user- [EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:james-user- [EMAIL PROTECTED] For additional commands, e-mail: mailto:james-user- [EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
How would I check that? ( by connecting to port 25 of another domain? ) I can connect to port 25 of my service provider... which I would expect, as they provide SMTP service. Alternately, how can I check if it is an issue with the way I set up the DNS in the config file (aside from it just not working?) Is there a FAQ that answers these questions? As always, thanks for your time. On Fri, 27 Dec 2002 12:42:59 -0500, Noel J. Bergman wrote: You could check that with telnet. --- Noel -Original Message- From: J. Norment [mailto:[EMAIL PROTECTED]] Sent: Friday, December 27, 2002 12:30 To: James Users List Subject: RE: SMTP error: James trying to relay? Could this be an indication that my ISP is blocking port 25? -- To unsubscribe, e-mail: mailto:james-user- [EMAIL PROTECTED] For additional commands, e-mail: mailto:james-user- [EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
Is the following excerpt enough? Excerpt from mailet.log: 27/12/02 09:38:23 INFO James.Mailet: RemoteDelivery: Attempting delivery of Mail1041003502156-1-to-yahoo.com to host yahoo.com to addresses [[EMAIL PROTECTED]] 27/12/02 09:38:44 INFO James.Mailet: RemoteDelivery: Temporary exception delivering mail (Mail1041003502156-1-to-yahoo.com: javax.mail.MessagingException: Could not connect to SMTP host: yahoo.com, port: 25; nested exception is: java.net.ConnectException: Connection timed out: connect at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:867) at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:156) On Fri, 27 Dec 2002 13:23:46 -0500, Noel J. Bergman wrote: Well, it would help if we knew exactly what problem you are having. What happens when an e-mail is sent to be relayed? Does it go to RemoteDelivery, which owns the Output spool? If so, what errors is RemoteDelivery logging when it attempts to deliver the e-mail? --- Noel -- To unsubscribe, e-mail: mailto:james-user- [EMAIL PROTECTED] For additional commands, e-mail: mailto:james-user- [EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error: James trying to relay?
Someone already wrote to say that THIS error is from not having DNS setup correctly. As you'll see in the stack trace, you are trying to deliver a message to a hostname yahoo.com, which there isn't any. If you had DNS configured, it would be trying mx1.yahoo.com, mx2.yahoo.com, etc... -- Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com J. Norment wrote: Is the following excerpt enough? Excerpt from mailet.log: 27/12/02 09:38:23 INFO James.Mailet: RemoteDelivery: Attempting delivery of Mail1041003502156-1-to-yahoo.com to host yahoo.com to addresses [[EMAIL PROTECTED]] 27/12/02 09:38:44 INFO James.Mailet: RemoteDelivery: Temporary exception delivering mail (Mail1041003502156-1-to-yahoo.com: javax.mail.MessagingException: Could not connect to SMTP host: yahoo.com, port: 25; nested exception is: java.net.ConnectException: Connection timed out: connect at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:867) at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:156) -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
Check the james-config.xml file and there will be a place in bold that asks you to enter your DNS servers. (this really ought to be a top FAQ item... the DNS configuration stuff is a bit buried in our FAQ at the moment). Do you want to modify FAQ.xml for it? --- Noel -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error: James trying to relay?
Ah... so if I want to use the SMTP service, I have to be running a DNS server (not service) ? ( name server addresses aren't direct enough access? ) On Fri, 27 Dec 2002 13:55:11 -0500, Serge Knystautas wrote: J. Norment wrote: Ok. So that error cannot come up if port 25 is being blocked by the ISP? ( I meant only to verify that it couldn't... not to second guess anyone. Sometimes different problems produce the same kinds of symptoms. ) I'm a little at a loss on how to set up DNS any differently. On XP, the DNS service is standard. I've tried including the name servers that are resolving my domain, but that didn't work, either. This has nothing to do with how your machine's DNS is configured. Mail servers need their own direct access to a DNS server because of how mail is routed. Check the james-config.xml file and there will be a place in bold that asks you to enter your DNS servers. (this really ought to be a top FAQ item... the DNS configuration stuff is a bit buried in our FAQ at the moment). -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error: James trying to relay?
J. Norment wrote: Ah... so if I want to use the SMTP service, I have to be running a DNS server (not service) ? ( name server addresses aren't direct enough access? ) Sorry, I got confused by bit about DNS service of XP. You were right the first time, a DNS service is a local DNS server, so if you set a name server to 127.0.0.1, that should work. I'm not sure why the name servers that handle your domains wouldn't be responding. If you've got XP, I think you may have nslookup... can you run that from the command line, try to do MX type queries on the servers you're specifying in james-config.xml and see if you get responses? Maybe you're on a NAT'd network that's not letting DNS queries through or something. Not really sure what the cause is, but if James is trying (and therefore failing) to connect to yahoo.com, I'm almost certain it's because it can't reach a DNS server. -- Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error: James trying to relay?
Noel J. Bergman wrote: Check the james-config.xml file and there will be a place in bold that asks you to enter your DNS servers. (this really ought to be a top FAQ item... the DNS configuration stuff is a bit buried in our FAQ at the moment). Do you want to modify FAQ.xml for it? Well, I may but only after I get the answer right. :) -- Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
Ah... so if I want to use the SMTP service, I have to be running a DNS server (not service) ? No, but you do need to configure a dns server entry in config.xml so that the mail server knows whom to contact to lookup MX records. When you tell the mail server to deliver e-mail to jnorment @ soulinstinct.com, the mail server needs to find the MX record for soulinstinct.com. Here is what it looks like if I do it by hand: set q=mx soulinstinct.com Non-authoritative answer: soulinstinct.comMX preference = 10, mail exchanger = mx2.daemonmail.net soulinstinct.comMX preference = 10, mail exchanger = mx3.daemonmail.net soulinstinct.comMX preference = 30, mail exchanger = mx1.daemonmail.net So I see that you have three possible mail servers of differing priority, each handled by daemonmail.net. Two of them are of equal priority, and probably load balance. The third serves as a backup. See: http://www.webville.net/DNSinfo.htm --- Noel -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error: James trying to relay?
Not sure if this is exactly what you want me to do. ( but this should reflect how the local dns service is resolving the records for the email address that I want to send to, right? ) If it is resolving here, and my dns tag is set to 127.0.0.1, should James be able to get the information it needs to send it? set type=mx yahoo.com Server: cdm-208-1-69-bcst.cox-internet.com Address: 208.180.1.69 Non-authoritative answer: yahoo.com MX preference = 1, mail exchanger = mx1.mail.yahoo.com yahoo.com MX preference = 1, mail exchanger = mx2.mail.yahoo.com yahoo.com MX preference = 5, mail exchanger = mx4.mail.yahoo.com yahoo.com nameserver = ns4.yahoo.com yahoo.com nameserver = ns5.yahoo.com yahoo.com nameserver = ns1.yahoo.com yahoo.com nameserver = ns2.yahoo.com yahoo.com nameserver = ns3.yahoo.com mx1.mail.yahoo.com internet address = 64.157.4.84 mx1.mail.yahoo.com internet address = 64.156.215.5 mx1.mail.yahoo.com internet address = 64.157.4.82 mx1.mail.yahoo.com internet address = 64.157.4.83 mx2.mail.yahoo.com internet address = 64.156.215.5 mx2.mail.yahoo.com internet address = 64.156.215.6 mx4.mail.yahoo.com internet address = 216.136.129.18 mx4.mail.yahoo.com internet address = 66.218.86.253 mx4.mail.yahoo.com internet address = 66.218.86.254 mx4.mail.yahoo.com internet address = 216.136.129.15 mx4.mail.yahoo.com internet address = 216.136.129.17 On Fri, 27 Dec 2002 14:49:13 -0500, Serge Knystautas wrote: J. Norment wrote: Ah... so if I want to use the SMTP service, I have to be running a DNS server (not service) ? ( name server addresses aren't direct enough access? ) Sorry, I got confused by bit about DNS service of XP. You were right the first time, a DNS service is a local DNS server, so if you set a name server to 127.0.0.1, that should work. I'm not sure why the name servers that handle your domains wouldn't be responding. If you've got XP, I think you may have nslookup... can you run that from the command line, try to do MX type queries on the servers you're specifying in james-config.xml and see if you get responses? Maybe you're on a NAT'd network that's not letting DNS queries through or something. Not really sure what the cause is, but if James is trying (and therefore failing) to connect to yahoo.com, I'm almost certain it's because it can't reach a DNS server. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error: James trying to relay?
J. Norment wrote: Not sure if this is exactly what you want me to do. ( but this should reflect how the local dns service is resolving the records for the email address that I want to send to, right? ) If it is resolving here, and my dns tag is set to 127.0.0.1, should James be able to get the information it needs to send it? set type=mx yahoo.com Server: cdm-208-1-69-bcst.cox-internet.com Address: 208.180.1.69 Close, this means you can reach a DNS server but nslookup is using 208.180.1.69 as the DNS server. You can set that as a DNS server in james-config.xml, or try nslookup to query 127.0.0.1. -- Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
I'm using ns_.mydyndns.org for domain resolution (they inform me that they don't do recursive lookups, however, so I suspect it will do no good putting those name server addresses in as dns server entries.) I'm trying to send email from sourceapprentice.com (not soulinstinct.com); running nslookup, I get the following for sourceapprentice.com. ( It is the domain that the email is being sent TO that needs the MX resolution, right? -- I'm trying to send mail to a yahoo account: I posted that resolution in another email.) The confusion is that (I assume) my local DNS service -- which is most likely accessing my service provider's DNS servers -- must be what is being used to resolve these addresses. I have an entry for 127.0.0.1 for my dns server in the config.xml file. What am I missing? set type=mx sourceapprentice.com Server: cdm-208-1-69-bcst.cox-internet.com Address: 208.180.1.69 Non-authoritative answer: sourceapprentice.comMX preference = 5, mail exchanger = sourceapprentice.com sourceapprentice.comnameserver = ns3.mydyndns.org sourceapprentice.comnameserver = ns4.mydyndns.org sourceapprentice.comnameserver = ns5.mydyndns.org sourceapprentice.comnameserver = ns1.mydyndns.org sourceapprentice.comnameserver = ns2.mydyndns.org sourceapprentice.cominternet address = 208.180.8.234 ns1.mydyndns.orginternet address = 66.151.188.45 ns5.mydyndns.orginternet address = 66.151.188.46 On Fri, 27 Dec 2002 14:55:38 -0500, Noel J. Bergman wrote: Ah... so if I want to use the SMTP service, I have to be running a DNS server (not service) ? No, but you do need to configure a dns server entry in config.xml so that the mail server knows whom to contact to lookup MX records. When you tell the mail server to deliver e-mail to jnorment @ soulinstinct.com, the mail server needs to find the MX record for soulinstinct.com. Here is what it looks like if I do it by hand: set q=mx soulinstinct.com Non-authoritative answer: soulinstinct.com MX preference = 10, mail exchanger = mx2.daemonmail.net soulinstinct.com MX preference = 10, mail exchanger = mx3.daemonmail.net soulinstinct.com MX preference = 30, mail exchanger = mx1.daemonmail.net So I see that you have three possible mail servers of differing priority, each handled by daemonmail.net. Two of them are of equal priority, and probably load balance. The third serves as a backup. See: http://www.webville.net/DNSinfo.htm --- Noel -- To unsubscribe, e-mail: mailto:james-user- [EMAIL PROTECTED] For additional commands, e-mail: mailto:james-user- [EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error: James trying to relay?
Ok. So, anytime the DNS server changes, I'll need to change it in the James config file? Querying 127.0.0.1 results in the following: set type=mx 127.0.0.1 Server: cdm-208-1-69-bcst.cox-internet.com Address: 208.180.1.69 *** cdm-208-1-69-bcst.cox-internet.com can't find 127.0.0.1: Non-existent domain On Fri, 27 Dec 2002 15:09:56 -0500, Serge Knystautas wrote: J. Norment wrote: Not sure if this is exactly what you want me to do. ( but this should reflect how the local dns service is resolving the records for the email address that I want to send to, right? ) If it is resolving here, and my dns tag is set to 127.0.0.1, should James be able to get the information it needs to send it? set type=mx yahoo.com Server: cdm-208-1-69-bcst.cox-internet.com Address: 208.180.1.69 Close, this means you can reach a DNS server but nslookup is using 208.180.1.69 as the DNS server. You can set that as a DNS server in james-config.xml, or try nslookup to query 127.0.0.1. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error ... problem solved
Attn: Noel Serge: Thanks so very much for your help. I was at my wit's end trying to figure out the answer to this (apparently simple) puzzle: Putting in my service provider's DNS servers worked. 127.0.0.1 didn't. The servers I use for domain resolution also did not. Thanks again for you help. Noel: I have found at least one way to receive mail for multiple domains. I would be interested in how you are doing it, however. ( I saw a message that you posted earlier to someone else. ) -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
Ok... that didn't work ( couldn't find yahoo.com. ) Guess the XP DNS service is not a DNS server. On Fri, 27 Dec 2002 15:46:29 -0500, Noel J. Bergman wrote: Querying 127.0.0.1 results in the following: type server 127.0.0.1 to tell nslookup that you want to use 127.0.0.1 as the DNS server. --- Noel -- To unsubscribe, e-mail: mailto:james-user- [EMAIL PROTECTED] For additional commands, e-mail: mailto:james-user- [EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP error: James trying to relay?
Ok... that didn't work ( couldn't find yahoo.com. ) Guess the XP DNS service is not a DNS server. :-( Yeah, I just tried it here. Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\Documents and Settings\noelnslookup Default Server: C0A80101.tipt.aol.com Address: 192.168.1.1 server 127.0.0.1 Default Server: [127.0.0.1] Address: 127.0.0.1 set q=mx yahoo.com Server: [127.0.0.1] Address: 127.0.0.1 *** [127.0.0.1] can't find yahoo.com: No response from server OK, that's one for Serge's FAQ item. Windows, including XP, users apparently should find the DNS servers for their ISP, and set those into James. --- Noel -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP Authentication not working
Roy, A couple of things. postmaster[EMAIL PROTECTED]/postmaster Technically, this is a badly formed email address. It should be roy@[192.168.2.80]. As MTAs are often bad at handling IP routing, I'd recommend that you use an email address with an explicit host name. !-- This matcher-mailet pair can prevent relaying... if you change this, you risk making your mail server an open relay point for spammers . NOTE 1: the order of matcher-mailets is important: it must come after valid local recipients have been dealt with but before any attempt is made to delivery the mail remotely. NOTE 2: Add your own network, if you want to relay mail outwards NOTE 3: If you use SMTP AUTH, you may want to comment this so users who are on the road can still use the server -- mailet match=RemoteAddrNotInNetwork=127.0.0.1 class=ToProcessor processor spam /processor /mailet As the comment explains, use of SMTP AUTH requires commenting out this mailet. --Peter -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP processing...
add a mailet container to your own server, and use mailets... http://jakarta.apache.org/james/mailet/index.html d. -Original Message- From: Keith Chew [mailto:[EMAIL PROTECTED]] Sent: 26 May 2002 22:40 To: James Users List Subject: SMTP processing... Hi Just looking for some suggestions. I have an existing IMAP/SMTP/POP server which is already in production. The requirement is to perform some preprocessing when a mail arrives for a user, eg when mail arrives for [EMAIL PROTECTED], call him on his cellphone and read the contents. What is the best approach to add the hook to the message? (1) Use James in front to capture all messages, perform task, and forward to backend mail server. (2) Use IMAP listeners on backend mail server. On new message for a user, perform task. I am looking for pros and cons of both methods, and possibly a better alternative? Thanks Keith -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP-receiver server
Sam, I suspect that its java mail or your sending mail client which is doing this, I use M$ Outlook (Cough cough!) which has a user alterable setting for this. I also believe that the SMTP specification allows servers to truncate lines more than 76 characters long (for who knows what archaic ARPA-net reason) and that the usual response of this is for mail clients to wrap lines at 76 characters. Using an encoding, uu-encode or mime, can get around this by encoding and decoding line-endings and wrapping the encoded message at char 76. d. -Original Message- From: Samuel Sadek [mailto:[EMAIL PROTECTED]] Sent: 09 May 2002 21:20 To: [EMAIL PROTECTED] Subject: SMTP-receiver server Hi all, I wanted to know if there is any way I can control the formatting of mail data being received from a requesting SMTP-sender server over a TCP/IP transmission channel. The reason I ask this is that I have noticed that if I send mail to a local recipient from the same domain as my JAMES SMTP server, it sets the message attachment file line length to exactly 76 characters long. If I send the same attachment file within the same message but sent from a remote mail server eg. hotmail.com or yahoo.com they seem to set the line length of the attachment to exactly 60 characters long. I wondered if there's any chance of intercepting every line as it's being sent from a sending SMTP server and control the width of it. I know in SMTPHandler.doData method intercepts the mail data as an inputstream but do not how to perceive this from this point... Could this difference be due to the content-transfer-encoding scheme being used to send the binary data over a transmission channel i.e. 7bit vs. 8bit ? Your feedback will be greatly appreciated as always. Thanks in advance. Sam. _ Chat with friends online, try MSN Messenger: http://messenger.msn.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP-receiver server
I think it might be a bit dangerous to do it for all messages during SMTP retrieval. The trick is you can't do this to every line as you could mess up headers and lots of non-text content. You could write a mailet that took the MimeMessage and reformated any text/plain content to remove unwanted line feeds. I don't know what if any rules there are regarding when these line feeds are enforced and if 7bit vs. 8bit has much to do with it. -- Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com/ Samuel Sadek wrote: Hi all, I wanted to know if there is any way I can control the formatting of mail data being received from a requesting SMTP-sender server over a TCP/IP transmission channel. The reason I ask this is that I have noticed that if I send mail to a local recipient from the same domain as my JAMES SMTP server, it sets the message attachment file line length to exactly 76 characters long. If I send the same attachment file within the same message but sent from a remote mail server eg. hotmail.com or yahoo.com they seem to set the line length of the attachment to exactly 60 characters long. I wondered if there's any chance of intercepting every line as it's being sent from a sending SMTP server and control the width of it. I know in SMTPHandler.doData method intercepts the mail data as an inputstream but do not how to perceive this from this point... Could this difference be due to the content-transfer-encoding scheme being used to send the binary data over a transmission channel i.e. 7bit vs. 8bit ? Your feedback will be greatly appreciated as always. Thanks in advance. Sam. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP server question
Ok, I solved the problem myself. I needed to add the dns server in the apps/james/conf/config.xml-file, because my local machine could not resolve them. Tom At 15:07 03.04.02 +0200, you wrote: Hmm, than I don't know, why it doesn't send anything. Sending to local users and fetching for local users work, but if I specify a real email address, I do not get the email there (I tried some addresses). It's strange, too, that the remote-emails remain in the apps\james\var\mail\outgoing\ directory. Tom At 13:45 03.04.02 +0100, you wrote: Full SMTP server with all that that implys. -Original Message- From: Thomas Singer [mailto:[EMAIL PROTECTED]] Sent: 03 April 2002 13:35 To: [EMAIL PROTECTED] Subject: SMTP server question Hello, just for my understanding: Is James a full SMTP server, that allows me to send emails world wide? Or can it sends email to the local users only, who fetch their mail via POP3? Best regards, Thomas Singer -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP Port Binding problem.
I have a problem where I bind some of the James services to 127.0.0.1, but still I can access the services from other computers on the LAN. This is strange as binding to localhost should not allow this. I use Windows XP. /Kasper -Original Message- From: Chris D [mailto:[EMAIL PROTECTED]] Sent: den 12 mars 2002 20:15 To: [EMAIL PROTECTED] Subject: SMTP Port Binding problem. I am using James 2.0a2 on Windows 2000. I have modified the James config.xml to bind IP address 10.0.0.98 to port 25. The same machine is also running IIS 5.0 and the Microsoft SMTP service. I have configured MS SMTP to bind to IP address 10.0.0.99 port 25. I have found that if MS SMTP is bound to port 25, the service will not start. However, if I bind to some other port (i.e. port 925) the service will start successfully. Also, if I stop James completelty, the MS SMTP service will start successfully. This leads me to believe there might be a problem with the way that James binds an IP address to a port. Has anyone else had similiar difficulties. _ Join the world's largest e-mail service with MSN Hotmail. http://www.hotmail.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP Port Binding problem.
If you run netstat -an from the command prompt, this will show you what ports are being listened to on what addresses. Try running this command when each James and MS SMTP is running, and compare the results to see if there is a conflict. Also, just out of curiosity, what happens when MS SMTP is already running, and you try to start James? -Original Message- From: Chris D [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 12, 2002 7:15 PM To: [EMAIL PROTECTED] Subject: SMTP Port Binding problem. I am using James 2.0a2 on Windows 2000. I have modified the James config.xml to bind IP address 10.0.0.98 to port 25. The same machine is also running IIS 5.0 and the Microsoft SMTP service. I have configured MS SMTP to bind to IP address 10.0.0.99 port 25. I have found that if MS SMTP is bound to port 25, the service will not start. However, if I bind to some other port (i.e. port 925) the service will start successfully. Also, if I stop James completelty, the MS SMTP service will start successfully. This leads me to believe there might be a problem with the way that James binds an IP address to a port. Has anyone else had similiar difficulties. _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP AUTH JavaMail
there has been an issue with SMTP AUTH, but as to what is actually wrong here I can't say. -Original Message- From: Jordi Pujol [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 13, 2002 9:47 AM To: James Users List Subject: SMTP AUTH JavaMail Hi people of James! I'm president of Aujac (Java Users Group of Catalonia). We ever work with James as mail server and JavaMail for send automatic mails from our applications. Last weekend we move to James2.0a2 and the things become to change. Every seems to work fine, but one thing doesn't. We have a class that has the responsibility to send email's. Now the class doesn't work. Now the server always says: 550 Authentication Required The class was designed to do SMTP AUTH with JavaMail, and it works fine with other servers with SMTP AUTH, but no with James 2.0a2 We search in Google, James list, forum.java.sun.com, etc..., and we didn't find anything. Somebody could help us?? +- -+ Aujac (Associació d'Usuaris de Java de Catalunya) WWW: http://www.aujac.org Fòrum Aujac: http://www.aujac.org/serveis/nexus?ACTION=FORUMID_FORUM=1 Adreces electròniques de contacte: Informació general: [EMAIL PROTECTED] Per establir un conveni amb l'Aujac: [EMAIL PROTECTED] Per establir projectes amb les universitats: [EMAIL PROTECTED] Per fer-vos soci : https://www.aujac.org/seccioSocis/altaSoci.xml Si sou una empresa, institució o organització i voleu fer-vos socis, feu-ho a travès de: https://www.aujac.org/seccioSocis/altaSociEmp.xml Gràcies!!! +- -+ -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error
I just set the maxmessage in config.xml size to 6144. I assume its meant to be in KB and so should give me a 6MB mail Doing that stopped any email from coming in. Am I missing something I did not have this problem with the latest source. Jeff Dillon -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error
HELP James ver. 2.01 Somebody(external party) sent a 20Mb email yesterday. Since then JAMES is stuck throwing the errors listed below Even after I shutdown and restart James, this error persists Any ideas how I get around it. the var/spool , var/pending , var/outgoing folders are empty. Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer init... Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer ...init end Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Hello Name is: MY MAIL SERVER Fri Jan 11 10:42:08 CST 2002 [DEBUG ] (smtpserver): Max message size is: 0 Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Connection from gw.myhost.com (10.0.0.222) Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: EHLO gw1.clienthost.com Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: MAIL From:[EMAIL PROTECTED] Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: RCPT To:[EMAIL PROTECTED] Fri Jan 11 10:42:09 CST 2002 [INFO ] (smtpserver): Command received: DATA Fri Jan 11 10:48:08 CST 2002 [ERROR ] (smtpserver): Connection timeout on socket Fri Jan 11 10:48:09 CST 2002 [DEBUG ] (smtpserver): Exception opening socket: null java.lang.reflect.UndeclaredThrowableException: java.lang.reflect.InvocationTargetException: javax.mail.MessagingException: Exception spooling message: Exception caught while storing Message Container: java.net.SocketException: JVM_recv in socket input stream read (code=10004) at org.apache.james.James.sendMail(James.java:319) at java.lang.reflect.Method.invoke(Native Method) at org.apache.avalon.phoenix.components.application.BlockInvocationHandler.invo ke(BlockInvocationHandler.java:88) at $Proxy9.sendMail(Unknown Source) at org.apache.james.smtpserver.SMTPHandler.doDATA(SMTPHandler.java:564) at org.apache.james.smtpserver.SMTPHandler.parseCommand(SMTPHandler.java:243) at org.apache.james.smtpserver.SMTPHandler.handleConnection(SMTPHandler.java:16 0) I need to get JAMES running now. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error
Remove the message from the Queue... Shal Jain wrote: HELP James ver. 2.01 Somebody(external party) sent a 20Mb email yesterday. Since then JAMES is stuck throwing the errors listed below Even after I shutdown and restart James, this error persists Any ideas how I get around it. the var/spool , var/pending , var/outgoing folders are empty. Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer init... Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer ...init end Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Hello Name is: MY MAIL SERVER Fri Jan 11 10:42:08 CST 2002 [DEBUG ] (smtpserver): Max message size is: 0 Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Connection from gw.myhost.com (10.0.0.222) Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: EHLO gw1.clienthost.com Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: MAIL From:[EMAIL PROTECTED] Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: RCPT To:[EMAIL PROTECTED] Fri Jan 11 10:42:09 CST 2002 [INFO ] (smtpserver): Command received: DATA Fri Jan 11 10:48:08 CST 2002 [ERROR ] (smtpserver): Connection timeout on socket Fri Jan 11 10:48:09 CST 2002 [DEBUG ] (smtpserver): Exception opening socket: null java.lang.reflect.UndeclaredThrowableException: java.lang.reflect.InvocationTargetException: javax.mail.MessagingException: Exception spooling message: Exception caught while storing Message Container: java.net.SocketException: JVM_recv in socket input stream read (code=10004) at org.apache.james.James.sendMail(James.java:319) at java.lang.reflect.Method.invoke(Native Method) at org.apache.avalon.phoenix.components.application.BlockInvocationHandler.invo ke(BlockInvocationHandler.java:88) at $Proxy9.sendMail(Unknown Source) at org.apache.james.smtpserver.SMTPHandler.doDATA(SMTPHandler.java:564) at org.apache.james.smtpserver.SMTPHandler.parseCommand(SMTPHandler.java:243) at org.apache.james.smtpserver.SMTPHandler.handleConnection(SMTPHandler.java:16 0) I need to get JAMES running now. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error
Somebody(external party) sent a 20Mb email yesterday. In the future, you should probably set the maxmessagesize variable in the config.xml file. Perhaps the default value in the distribution should be changed from its current unlimited value to 2048kbytes or something reasonable. A 20MB email is inane. Did you try looking in var/mail/inboxes or var/outgoing to see if that huge message is still on your server? I tried sending an 11MB email yesterday with the latest CVS source and had no problems. Jeff Dillon http://www.jeffdillon.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error
There are connection timeouts defined in the config file for the smtpserver. I think the default is 6 minutes, and if receiving an email takes more than 6 minutes a timeout occurs. Problem is known, and maybe already fixed in cvs. But you can simply increased this connection timeout for now, to solve the problem. Bye, Stephan Schiessling Shal Jain wrote: HELP James ver. 2.01 Somebody(external party) sent a 20Mb email yesterday. Since then JAMES is stuck throwing the errors listed below Even after I shutdown and restart James, this error persists Any ideas how I get around it. the var/spool , var/pending , var/outgoing folders are empty. Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer init... Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer ...init end Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Hello Name is: MY MAIL SERVER Fri Jan 11 10:42:08 CST 2002 [DEBUG ] (smtpserver): Max message size is: 0 Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Connection from gw.myhost.com (10.0.0.222) Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: EHLO gw1.clienthost.com Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: MAIL From:[EMAIL PROTECTED] Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: RCPT To:[EMAIL PROTECTED] Fri Jan 11 10:42:09 CST 2002 [INFO ] (smtpserver): Command received: DATA Fri Jan 11 10:48:08 CST 2002 [ERROR ] (smtpserver): Connection timeout on socket Fri Jan 11 10:48:09 CST 2002 [DEBUG ] (smtpserver): Exception opening socket: null java.lang.reflect.UndeclaredThrowableException: java.lang.reflect.InvocationTargetException: javax.mail.MessagingException: Exception spooling message: Exception caught while storing Message Container: java.net.SocketException: JVM_recv in socket input stream read (code=10004) at org.apache.james.James.sendMail(James.java:319) at java.lang.reflect.Method.invoke(Native Method) at org.apache.avalon.phoenix.components.application.BlockInvocationHandler.invo ke(BlockInvocationHandler.java:88) at $Proxy9.sendMail(Unknown Source) at org.apache.james.smtpserver.SMTPHandler.doDATA(SMTPHandler.java:564) at org.apache.james.smtpserver.SMTPHandler.parseCommand(SMTPHandler.java:243) at org.apache.james.smtpserver.SMTPHandler.handleConnection(SMTPHandler.java:16 0) I need to get JAMES running now. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error
Does that mean from the sender's queue or is there a queue in James that I am not aware of - Original Message - From: Todd Tredeau [EMAIL PROTECTED] To: James Users List [EMAIL PROTECTED] Sent: Friday, January 11, 2002 11:28 AM Subject: Re: SMTP error Remove the message from the Queue... Shal Jain wrote: HELP James ver. 2.01 Somebody(external party) sent a 20Mb email yesterday. Since then JAMES is stuck throwing the errors listed below Even after I shutdown and restart James, this error persists Any ideas how I get around it. the var/spool , var/pending , var/outgoing folders are empty. Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer init... Fri Jan 11 10:40:19 CST 2002 [INFO ] (smtpserver): SMTPServer ...init end Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Hello Name is: MY MAIL SERVER Fri Jan 11 10:42:08 CST 2002 [DEBUG ] (smtpserver): Max message size is: 0 Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Connection from gw.myhost.com (10.0.0.222) Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: EHLO gw1.clienthost.com Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: MAIL From:[EMAIL PROTECTED] Fri Jan 11 10:42:08 CST 2002 [INFO ] (smtpserver): Command received: RCPT To:[EMAIL PROTECTED] Fri Jan 11 10:42:09 CST 2002 [INFO ] (smtpserver): Command received: DATA Fri Jan 11 10:48:08 CST 2002 [ERROR ] (smtpserver): Connection timeout on socket Fri Jan 11 10:48:09 CST 2002 [DEBUG ] (smtpserver): Exception opening socket: null java.lang.reflect.UndeclaredThrowableException: java.lang.reflect.InvocationTargetException: javax.mail.MessagingException: Exception spooling message: Exception caught while storing Message Container: java.net.SocketException: JVM_recv in socket input stream read (code=10004) at org.apache.james.James.sendMail(James.java:319) at java.lang.reflect.Method.invoke(Native Method) at org.apache.avalon.phoenix.components.application.BlockInvocationHandler.inv o ke(BlockInvocationHandler.java:88) at $Proxy9.sendMail(Unknown Source) at org.apache.james.smtpserver.SMTPHandler.doDATA(SMTPHandler.java:564) at org.apache.james.smtpserver.SMTPHandler.parseCommand(SMTPHandler.java:243) at org.apache.james.smtpserver.SMTPHandler.handleConnection(SMTPHandler.java:1 6 0) I need to get JAMES running now. -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP error
I just set the maxmessage in config.xml size to 6144. I assume its meant to be in KB and so should give me a 6MB mail Doing that stopped any email from coming in. Am I missing something - Original Message - From: Jeff Dillon [EMAIL PROTECTED] To: James Users List [EMAIL PROTECTED] Sent: Friday, January 11, 2002 11:34 AM Subject: Re: SMTP error Somebody(external party) sent a 20Mb email yesterday. In the future, you should probably set the maxmessagesize variable in the config.xml file. Perhaps the default value in the distribution should be changed from its current unlimited value to 2048kbytes or something reasonable. A 20MB email is inane. Did you try looking in var/mail/inboxes or var/outgoing to see if that huge message is still on your server? I tried sending an 11MB email yesterday with the latest CVS source and had no problems. Jeff Dillon http://www.jeffdillon.com -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
RE: SMTP forwarding
Five-ten minutes before it leaves the local spool. -Original Message- From: Serge Knystautas [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 2:12 PM To: James Users List Subject: Re: SMTP forwarding How long is brutally long? 10 seconds? A minute? An hour? Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com/ - Original Message - From: Lucas Gonze [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 07, 2001 11:58 AM Subject: SMTP forwarding The time it takes to forward a message received via SMTP seems too long. My MUA connects to James via SMTP and passes in a message for remote delivery. That mail sits in the spool for a brutally long time before getting relayed to the outside world. Suggestions? Thanks in advance. - Lucas -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP forwarding
What version of James are you using, and what repository type (file, db, dbfile)? Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com/ - Original Message - From: Lucas Gonze [EMAIL PROTECTED] To: James Users List [EMAIL PROTECTED] Sent: Friday, December 07, 2001 2:21 PM Subject: RE: SMTP forwarding Five-ten minutes before it leaves the local spool. -Original Message- From: Serge Knystautas [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 2:12 PM To: James Users List Subject: Re: SMTP forwarding How long is brutally long? 10 seconds? A minute? An hour? Serge Knystautas Loki Technologies - Unstoppable Websites http://www.lokitech.com/ - Original Message - From: Lucas Gonze [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 07, 2001 11:58 AM Subject: SMTP forwarding The time it takes to forward a message received via SMTP seems too long. My MUA connects to James via SMTP and passes in a message for remote delivery. That mail sits in the spool for a brutally long time before getting relayed to the outside world. Suggestions? Thanks in advance. - Lucas -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED] -- To unsubscribe, e-mail: mailto:[EMAIL PROTECTED] For additional commands, e-mail: mailto:[EMAIL PROTECTED]
Re: SMTP engine
James provides Mail Server functionality and you seem to need Mail Client. Try JavaMail from http://www.javasoft.com/products/javamail/index.html Harmeet - Original Message - From: Stefan Deuchler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, June 08, 2001 1:53 PM Subject: SMTP engine Hi all, I am really new to this all, so please forgive me. I really would appreciate some guidance. I am eager to learn. I have read most of the previously posted messages, but none of them really address my question directly, or then I just don't understand them). Here it is: I am working on a utility in Java. I would like to add an SMTP engine to it so I can send out email messages from my utility without having to rely on any local clients. The goal is to keep the utility fairly platform-independent. Would James be a suitable tool for that? I only want to send messages, by the way. Thanks for any pointers. - Stefan _ Get your FREE download of MSN Explorer at http://explorer.msn.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
