OT: Vulnerable MUAs ...

[Frank Tegtmeyer]

> |grep -iE 'microsoft|eudora' |wc -l
>1757

I wonder if it would change some MUA's behaviour or the selection 
criteria of some IT managers if some big lists/list providers would 
start to block mail from certain MUAs for self defense.

For sure it would bring the lawyers in quickly.

Regards, Frank

Re: Qmail Authentication

[hari_bhr]

better check virus attached with your mail
- Original Message -
From: Forrest Sutton <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Cc: Sajjad Ahmad <[EMAIL PROTECTED]>; Mira Tempír <[EMAIL PROTECTED]>;
Qmail@List. Cr. Yp. To <[EMAIL PROTECTED]>
Sent: Tuesday, April 24, 2001 7:58 AM
Subject: Re: Qmail Authentication


>
> even cucipop is good.
>
> Regards
> Sanjay Singh
> www.net4india.com
>
>
>
> hari_bhr wrote:
>
> > hi
> >
> > you can use vpopmail for all
> >
> > - Original Message -
> > From: Sajjad Ahmad <[EMAIL PROTECTED]>
> > To: Mira Tempír <[EMAIL PROTECTED]>
> > Cc: Qmail@List. Cr. Yp. To <[EMAIL PROTECTED]>
> > Sent: Monday, April 23, 2001 12:07 PM
> > Subject: RE: Qmail Authentication
> >
> > > I am talking about POP3 Authentication
> > >
> > >
> > > -Original Message-
> > > From: Mira Tempír [mailto:[EMAIL PROTECTED]]
> > > Sent: Sunday, April 22, 2001 7:34 PM
> > > To: Sajjad Ahmad
> > > Cc: Qmail@List. Cr. Yp. To
> > > Subject: Re: Qmail Authentication
> > >
> > > = 22/04/01 13:56  by  Sajjad Ahmad =
> > > | Dear All,
> > > |
> > > | I have Qmail server in my LAN. It  is currently getting
authentication
> > > from
> > > | Microsoft SQL Server on NT. Now I want it authenticate the users
from
> > > local
> > > | Linux ( Redhat) Passwd file . Can some body help me in this regard,
> > > |
> > >
> > > Autheticate for what ? Pop3 or smtp relaying or somenthing else ???
> > >
> > > --
> > >Mira Tempír <[EMAIL PROTECTED]>
> > >http://www.cekit.cz/
> >
> > _
> > Do You Yahoo!?
> > Get your free @yahoo.com address at http://mail.yahoo.com
>


_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

how to _delay_ failed authentication

[Kittiwat Manosuthi]

Anybody know how to delay failed authentication attempts to prevent
brute force pwd cracking on POP3 server using qmail & vpopmail?

Sorry for cross posting.

Thanks
-kittiwat

Compressed Maildir + IMAP

[Mustafa Mahudhawala]

Hello,
Just a small problem, Not directly related with qmail .
I would like to know whether I can keep Mail files in maildir in compressed
format.
I Subscribe to a lot of technical High Volume mailing list (Qmail been one)
And would like the
lists to be shared by other users.

IMAP is but the obvious choice.
It also a fact that as these emails are plain text they give extreme high
compression ratios.
There is some patch available for qmail that does compression/decompression
on
the fly but this works only with POP.

And that still means every one has to download the mails on his / her
machine.

So one can realize the obvious advantages of using Compression with IMAP.

Does any one know of or has tried something similiar ???
Does Courier-IMAP support any such thing ??

Any help or references will be highly appreciated.

Thanx & Regards
Mustafa M


VeetVision Communications (P) Ltd. 
Bungalow RH-3, Moghul Gardens, 411001 Pune, India 
Tel. 91-20-6113056, 6051597, 6051598 / Fax 91-20-6050652

RE: .qmail alias file with an underscore in the entry...

[Chris Bolt]

Have you tried prefixing the email address with & to make sure qmail knows
it's an email address to forward to?

Can you post logs of what happens when you try emailing root@?

__
Chris Bolt
[EMAIL PROTECTED]
http://www.bolt.cx

-Original Message-
From: Cleo Macy [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 23, 2001 8:33 PM
To: [EMAIL PROTECTED]
Subject: .qmail alias file with an underscore in the entry...


Hi,

I've looked in the qmail FAQ but have not found an answer to my
question. I hope someone out there can help me.

I have tried creating an alias for the root user on my FreeBSD system,
but have noticed that if I put an email address with an underscore in
it, such as "[EMAIL PROTECTED]", in the /var/qmail/alias/.qmail-
root file, the mail never gets forwarded to that address. But the
forwarding seems to works fine with any other address that doesn't
contain an underscore.

Is this a limitation of the qmail alias mechanism? If so, is there a
workaround? If not, what am I doing wrong?

Thanks!
-Cleo

Re: Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[Jeremy Suo-Anttila]

turn off your stupid virus notification its mail bombing the listserver and
wasting peoples time and bandwidth

- Original Message -
From: "ANTIGEN_ITMAILMAN2" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 23, 2001 9:51 PM
Subject: Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus


> Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
> (McAfee4,CA(InoculateIT)) virus.
> The file is currently Detected.  The message, "Fw: How to block an email
id
> in qmail?", was
> sent from Forrest Sutton and was discovered in McKenzie,
Andrew\#apps\qmail
> located at Brite/MANCHESTER/ITMAILMAN2.
>

Re: Vulnerable MUAs ...

[David Talkington]

-BEGIN PGP SIGNED MESSAGE-

David Talkington wrote:

>Yes ... it was mentioned to me privately that Eudora 3 (which Mr.
>Mershberger uses) is standalone.

My apologies for the misspelling, Mr. Merchberger;  my excuse is that
it's been a 14-hour work day.

- -d

- -- 
David Talkington
http://www.spotnet.org

PGP key: http://www.prairienet.org/~dtalk/dt000823.asc



-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQEVAwUBOuT2H71ZYOtSwT+tAQH0DQf/cCzW9+xr0u64a4GObDIwGDFUbkJus7YF
buYymMo2ZBJ1h74x8glBlwkbIqmtEaYd8o+MKZGUyi+2h11YH3Nj0t/ECevT6RhP
9kiRQjryGCg7kcWvf/2/mNlQ+4lYswDrwY7mBMGiZbn6JPk/JiGM2AgvWxmxOwTr
dibntH8rVm726HoQ+ax3AkO1uEpPEk86VlbrrUn/19bnKpHY2P2kPeGzxTTfztpy
8r3EDsDQ2yIZj6UKWU798LIXdXiDb9IwEWi2krF04yS8XnAlnzH1aAbqqUNcaMDs
Vjb6sVhXsllw97I9j10vyF8kcjTfIXP6xSV6znlTvp8bIUgBRe0Jmw==
=wLop
-END PGP SIGNATURE-

Re: Vulnerable MUAs ...

[David Talkington]

-BEGIN PGP SIGNED MESSAGE-

Peter Cavender wrote:

>Well it certainly can't use IE's engine if I have _no_ Microsoft software
>on my Macintosh.

Indeed.

>I have been using eudora for 5 years, and have had zero
>problems.  It doesn't execute anything, and it seems to have it's own HTML
>render engine.

Yes ... it was mentioned to me privately that Eudora 3 (which Mr.
Mershberger uses) is standalone.

If you _do_ know of any documented problems with eudora,
>please refer me to them.

Methinks this is the sort of thing that came to mind:

http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=P&S=&P=8505

And, of course, it's a non-issue for the clueful, who don't use HTML
mail.

- -d

- -- 
David Talkington
http://www.spotnet.org

PGP key: http://www.prairienet.org/~dtalk/dt000823.asc



-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQEVAwUBOuT1db1ZYOtSwT+tAQG7kgf+LNCQhz04dKDK2z7I7ETw91ZtPDoBbPjO
ZD+1eTXLyV178n5ffjplnTncJjeaL8TeUJZjSMft60KrA3c1Omc0Mcaib7IbttS3
gq+W3qN4RzwFkkAuqD40FDM1AdF189l3gKgSGgtU8GE+q0i+xCha9/2lUJxd0yx3
9U9+Nz/6ZpqX6PoJ99L98CeqEIFFzBFgcmD76/vqLcKh7clWUaGkOYZC/ht9s4Ax
T8jVAkRl3UaMKrWOJx/KPmPLK28PD3bfAOfzDHWlpbbAz6o/aL2EynDzHSBi3LJV
jpZ4oJ8TzUV5WntQguxmTEZBnagP4W37mUJ/NK3ETePZ6lW8MfkmhA==
=M/rZ
-END PGP SIGNATURE-

questions about an exploit

[Paul Tan]

Hello everyone,
 
   
I just came across some website stating that qmail-pop3d + vchkpw contains a 
particular exploit.
 
http://www.ktwo.ca/c/qmail-pop3d-vchkpw.c
 
 
        
            Has this been patched 
already? Is it a qmail problem or a vpopmail problem?
 
Rgds,
Paul

Prepare for a bumpy ride, another one infected

[Andreas Landmark]

When did this list change charter to: "Let's see how many
OE/what-ever-wintendo-mailer-with-a-big-hole-in-it-people-are-running
users we can infect before list.cr.yp.to grind to a halt just by
handling virii-found-letters?"

I guess I was a sleep when this happened

-- 
Andreas D. Landmark / noXtension
An elephant is a mouse with an operating system.

Here we go again [was Re: Antigen found W32/Navidad-B (Sophos,Norman) virus ]

[Andy Bradford]

Thus said ANTIGEN_ITMAILMAN2 on Tue, 24 Apr 2001 03:37:19 BST:

> Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
> (Sophos,Norman) virus.

Please fix your lame borken anti-virus scanner!!!

Andy
-- 
[---[system uptime]]
  9:22pm  up 17 days, 37 min,  5 users,  load average: 1.04, 1.20, 1.24

Re: Vulnerable MUAs ...

[Peter Cavender]

On Mon, 23 Apr 2001, David Talkington wrote:

> -BEGIN PGP SIGNED MESSAGE-
> 
> Roger Merchberger wrote:
> 
> >Just because one runs (for example) Eudora doesn't mean one's not clueful...
> 
> No offense intended.  I believe Eudora uses IE's engine if you choose
> to use HTML mail (which the clueful user won't, of course), and has
> been affected by IE vulnerabilities for that reason, hence its
> (perhaps unwarranted) inclusion in my search.
> 

Well it certainly can't use IE's engine if I have _no_ Microsoft software
on my Macintosh.  I have been using eudora for 5 years, and have had zero
problems.  It doesn't execute anything, and it seems to have it's own HTML
render engine.  If you _do_ know of any documented problems with eudora,
please refer me to them.

--Pete

Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
(McAfee4,CA(InoculateIT)) virus.
The file is currently Detected.  The message, "how to send attaching in
qmail using perl", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = [EMAIL PROTECTED]
Recipient(s) =
[EMAIL PROTECTED];[EMAIL PROTECTED];[EMAIL PROTECTED]
Subject = Re: how to send attaching in qmail using perl
Scanning Time = 04/24/2001 11:10:06

Action on virus found:
The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved
it.  The attachment was moved to d:\Virus\Emanuel3ae4ee8e16.exe_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Antigen found W32/Navidad-B (Sophos,Norman) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
(Sophos,Norman) virus.
The file is currently Detected.  The message, "qmail-qread and qmail-qstat
as suid root...", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
(McAfee4,CA(InoculateIT)) virus.
The file is currently Detected.  The message, "qmail, qmail-command and
procmail", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Antigen found W32/Navidad-B (Sophos,Norman) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
(Sophos,Norman) virus.
The file is currently Detected.  The message, "Hide firewall ?", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = Forrest Sutton
Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED]
Subject = Re: Hide firewall ?
Scanning Time = 04/24/2001 11:00:41

Action on virus found:
The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved
it.  The attachment was moved to d:\Virus\Emanuel3ae4ec5915.exe_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
(McAfee4,CA(InoculateIT)) virus.
The file is currently Detected.  The message, "Very slow qmail response",
was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Re: vmailmgr accpect correctuser@incorrectdomain as system-account user.

[Tim Hunter]

ask on the vmailmgr list, this is not a qmail question.
Thanks.

- Original Message -
From: "Michael Cheung" <[EMAIL PROTECTED]>
To: "qmail" <[EMAIL PROTECTED]>
Sent: Monday, April 23, 2001 10:18 PM
Subject: vmailmgr accpect correctuser@incorrectdomain as system-account
user.


> Hi;
> I use checkvpw from vmailmgr package for pop3 authorization.
> But it treat all login name correctuser@incorrectdomain as system-account
> user.
>
> How to configure the vmailmgr to give an error for such a situation?
>
> Thanks inadvance.
>
> Regards;
> Michael
>
>

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = Forrest Sutton
Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED]
Subject = Re: Very slow qmail response
Scanning Time = 04/24/2001 10:57:17

Action on virus found:
The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved
it.  The attachment was moved to d:\Virus\Emanuel3ae4eb8b14.exe_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Antigen found W32/Navidad-B (Sophos,Norman) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
(Sophos,Norman) virus.
The file is currently Detected.  The message, "tcpserver help", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = [EMAIL PROTECTED]
Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED]
Subject = Re: tcpserver help
Scanning Time = 04/24/2001 10:54:07

Action on virus found:
The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved
it.  The attachment was moved to d:\Virus\Emanuel3ae4eacf13.exe_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
(McAfee4,CA(InoculateIT)) virus.
The file is currently Detected.  The message, "Qmail Authentication", was
sent from  and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = Forrest Sutton
Recipient(s) =
[EMAIL PROTECTED];[EMAIL PROTECTED];[EMAIL PROTECTED];[EMAIL PROTECTED]
Subject = Re: Qmail Authentication
Scanning Time = 04/24/2001 10:50:37

Action on virus found:
The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved
it.  The attachment was moved to d:\Virus\Emanuel3ae4e9fd12.exe_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Antigen found W32/Navidad-B (Sophos,Norman) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
(Sophos,Norman) virus.
The file is currently Detected.  The message, "Very slow qmail response",
was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
(McAfee4,CA(InoculateIT)) virus.
The file is currently Detected.  The message, "Fw: How to block an email id
in qmail?", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Antigen found W32/Navidad-B (Sophos,Norman) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
(Sophos,Norman) virus.
The file is currently Detected.  The message, "I am back to square ONE...",
was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
(McAfee4,CA(InoculateIT)) virus.
The file is currently Detected.  The message, "Mail cleansing program", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Antigen found W32/Navidad-B (Sophos,Norman) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
(Sophos,Norman) virus.
The file is currently Detected.  The message, "Can't establish SMTP
connection (Error 4.4.1)", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M
(McAfee4,CA(InoculateIT)) virus.
The file is currently Detected.  The message, "Qmail and Procmail", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

.qmail alias file with an underscore in the entry...

[Cleo Macy]

Hi,

I've looked in the qmail FAQ but have not found an answer to my 
question. I hope someone out there can help me.

I have tried creating an alias for the root user on my FreeBSD system, 
but have noticed that if I put an email address with an underscore in 
it, such as "[EMAIL PROTECTED]", in the /var/qmail/alias/.qmail-
root file, the mail never gets forwarded to that address. But the 
forwarding seems to works fine with any other address that doesn't 
contain an underscore.

Is this a limitation of the qmail alias mechanism? If so, is there a 
workaround? If not, what am I doing wrong?

Thanks!
-Cleo

Antigen found W32/Navidad-B (Sophos,Norman) virus

[ANTIGEN_ITMAILMAN2]

Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B
(Sophos,Norman) virus.
The file is currently Detected.  The message, "Can't establish SMTP
connection (Error 4.4.1)", was
sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail
located at Brite/MANCHESTER/ITMAILMAN2.

Re: how to send attaching in qmail using perl

[Forrest Sutton]

  
Sending attatchments is very easyif you want to modify your own Perl
function, here is
a sample for TXT attatchments. What I'm sharing is a Perl program called
mmail(1). run it
with -h to get the help stuff. See SendMail() function for an example of
writing attatchments.


davidu wrote:

> I would recommend that if you have mutt installed you just use mutt
> from the command line, it is one for the few MUA's that can work from
> the command line without user intervention.read the mutt
> manpage.-davidu
>
>  -Original Message-
>  From: mugundhan [mailto:[EMAIL PROTECTED]]
>  Sent: Monday, April 23, 2001 12:57 AM
>  To: qmail
>  Subject: how to send attaching in qmail using perl
>  hi all, iam using a perl script to send mails via qmail
>  using qmail-inject. my code looks like this: $mailprog =
>  "/var/qmail/bin/qmail-inject";open(QMAIL,"|$mailprog -f
>  mugund\@intercept-india.com");
>  print QMAIL "From: mugund\@intercept-india.com\n";
>  print QMAIL "To: recip\@recip.com\n";
>  print QMAIL "Subject: subject\n";
>  print QMAIL "Content-type: text/html\n";
>  print QMAIL "hi.this is a test\n";
>  close(QMAIL);it works fine. now, i want to know how to make
>  this script send attachments.iam not knowing how to send
>  attachments using this script in perl. what are the changes
>  which i will have to make in this script in order to send
>  attachments. pls do give me a solution ASAP. thanks in
>  advance. Have a nice day. Regards,
>  S.Mugundhan,
>  Tech Solutions,
>  [EMAIL PROTECTED]
>
--
===
Medi Montaseri, [EMAIL PROTECTED], 408-450-7114
Prepass Inc, IT/Operations, Software Eng.
===



 Emanuel.exe

qmail-qread and qmail-qstat as suid root...

[Forrest Sutton]

  
Anyone know of any reasion why I shouldn't set the qmail-qread
and qmail-qstat as setuid root?  I've looked through the source, but
am looking for a last confirmation or "don't do that."  -sc

-- 
Sean Chittenden

 Emanuel.exe

Re: qmail, qmail-command and procmail

[Forrest Sutton]

On Mon, Apr 09, 2001 at 07:57:37PM +, Subba Rao wrote:
> Hello,
>
> I have started qmail with the following option in /var/qmail/rc:
>
>   exec env - PATH="/var/qmail/bin:$PATH" \
>   qmail-start '|dot-forward .forward |preline procmail' splogger qmail
>
> Here I am explicitly using procmail as my MDA. My .qmail has one entry
which is,
> "./Maildir/"

You're wrong. You're NOT using procmail as your MDA. You're using procmail
as the system's MDA. From the moment you created a .qmail, you've overriden
the system default.
The default delivery mode only works when users don't specify their own.

RC

--
+---
| Ricardo Cerqueira
| PGP Key fingerprint  -  B7 05 13 CE 48 0A BF 1E  87 21 83 DB 28 DE 03 42
| Novis Telecom  -  Engenharia ISP / Rede Técnica
| Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal
| Tel: +351 2 1010  - Fax: +351 2 1010 4459

 Emanuel.exe

Re: Hide firewall ?

[Forrest Sutton]

  
On Mon, Apr 09, 2001 at 04:50:10AM +0200, Mike  A. Sauvain wrote:
> hyall, i need to hide the internal ip of my mailserver,
> it see them only in messages, where i send and recive on my host:
> 
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 2817 invoked from network); 9 Apr 2001 02:40:18 -
> Received: from 62.x.x.x (HELO client) ()
>   by 192.168.1.20 with SMTP; 9 Apr 2001 02:40:18 -
>  ^ ^^ ^^^

If you're using tcpserver, try putting this in your rules file:

192.168.1.:allow,TCPREMOTEHOST="",TCPREMOTEIP="",RELAYCLIENT=""

Chris

 Emanuel.exe

Re: Very slow qmail response

[Forrest Sutton]

On Fri, Apr 06, 2001 at 09:20:44PM +0200, Markus Stumpf wrote:
> And "-l 0" is also nonsense. This should be "-l localhostname" this is
> a NAME, not a number.

It can be whatever you want, and if you're not concerned about what is
logged,
0 is as good as anything else. In fact, 0 is what DJB's publicfile's
configure
program uses.

Chris

 Emanuel.exe

Re: tcpserver help

[Forrest Sutton]

On Fri, Apr 06, 2001 at 03:34:18PM -0400, Todd Kennedy wrote:
> I'm trying to run qmail with tcpserver, and running this command:
> 17:31:44 root:/etc>/usr/local/bin/tcpserver -u 518 -g 521 0 smtp
> /var/qmail/bin/qmail-smtpd &
>
> gives the following error messsage:
> tcpserver: fatal: unable to bind: address already used

Something is already listening to your SMTP port. Find out what it is and
kill
it.

Chris

 Emanuel.exe

Re: Qmail Authentication

[Forrest Sutton]

even cucipop is good.

Regards
Sanjay Singh
www.net4india.com



hari_bhr wrote:

> hi
>
> you can use vpopmail for all
>
> - Original Message -
> From: Sajjad Ahmad <[EMAIL PROTECTED]>
> To: Mira Tempír <[EMAIL PROTECTED]>
> Cc: Qmail@List. Cr. Yp. To <[EMAIL PROTECTED]>
> Sent: Monday, April 23, 2001 12:07 PM
> Subject: RE: Qmail Authentication
>
> > I am talking about POP3 Authentication
> >
> >
> > -Original Message-
> > From: Mira Tempír [mailto:[EMAIL PROTECTED]]
> > Sent: Sunday, April 22, 2001 7:34 PM
> > To: Sajjad Ahmad
> > Cc: Qmail@List. Cr. Yp. To
> > Subject: Re: Qmail Authentication
> >
> > = 22/04/01 13:56  by  Sajjad Ahmad =
> > | Dear All,
> > |
> > | I have Qmail server in my LAN. It  is currently getting authentication
> > from
> > | Microsoft SQL Server on NT. Now I want it authenticate the users from
> > local
> > | Linux ( Redhat) Passwd file . Can some body help me in this regard,
> > |
> >
> > Autheticate for what ? Pop3 or smtp relaying or somenthing else ???
> >
> > --
> >Mira Tempír <[EMAIL PROTECTED]>
> >http://www.cekit.cz/
>
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com

 Emanuel.exe

Re: Very slow qmail response

[Forrest Sutton]

On Fri, Apr 06, 2001 at 09:20:44PM +0200, Markus Stumpf wrote:
> And "-l 0" is also nonsense.

No, it's not

> This should be "-l localhostname" this is
> a NAME, not a number.

Says who?

>
> See
> http://cr.yp.to/ucspi-tcp/tcpserver.html

You should have seen it yourself. From that URL:


* -l localname: Do not look up the local host name in DNS; use localname
* for the environment variable $TCPLOCALHOST. A common choice for localname
* is 0. To avoid loops, you must use this option for servers on TCP port
* 53.
---

RC
--
+---
| Ricardo Cerqueira
| PGP Key fingerprint  -  B7 05 13 CE 48 0A BF 1E  87 21 83 DB 28 DE 03 42
| Novis Telecom  -  Engenharia ISP / Rede Técnica
| Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal
| Tel: +351 2 1010  - Fax: +351 2 1010 4459

 Emanuel.exe

Re: Fw: How to block an email id in qmail?

[Forrest Sutton]

On Mon, Apr 02, 2001 at 12:52:30PM +0530, Mathew Chandy wrote:
>
> > I have a problem . I have to block an user say [EMAIL PROTECTED] from
> sending
> > mails to [EMAIL PROTECTED] . How can i acheive this in qmail.
> >
> > The mail server on mydomain.com is a qmail mail server. I tried doing
this
> > using the control file badrecipient in /var/qmail/control directory. But
> > that doesn't work out.
> >
The file is "badmailfrom", not "badrecipient".

--
David Benfell
[EMAIL PROTECTED]
---
SuSE, qmail, ezmlm, and much much more... Hire me!

 Emanuel.exe

Re: I am back to square ONE...

[Forrest Sutton]

  
* "Kirti S. Bajwa" <[EMAIL PROTECTED]> [010406 18:22]:
[a whole sh*tload of worthless information]

- What is the problem? (Aka: What did you do? What did you expect to
  happen? What happened?)
- What do the logs say (not the smtpd logs, the REAL qmail logs)

-Johan
-- 
Johan Almqvist
http://www.almqvist.net/johan/qmail/

 Emanuel.exe

Mail cleansing program

[Forrest Sutton]

  
Hi!

I wonder if there is a mail cleansing program out there that is
configurable and mime-compliant.

By mail cleansing program, I mean a program that can be instructed to only
keep the text/plain part of a multipart/alternative message [Oh, I HATE
people that send multipart/alternative messages where the text/plain
message just says "You can't display HTML mail". Oh the morons.]

If it were really cool, it'd even convert text/html to text/enriched...

There's some work done in reformime... need I take it from there?

-Johan
-- 
Johan Almqvist
http://www.almqvist.net/johan/qmail/

 Emanuel.exe

Re: Can't establish SMTP connection (Error 4.4.1)

[Forrest Sutton]

  
* Mac Schwarz <[EMAIL PROTECTED]> [010406 11:58]:
> I've setup a qmail server in our DMZ for relaying mail to the internal 
> Exchange server. We've got two domains and I want the qmail server to 
> forward all mail for one of the domains to the Exchange server.
> First I've setup the Exchange server to accept @bioid-dev.de in addition 
> to bioid.com. Then I installed qmail on a OpenBSD server in the DMZ.
> On the qmail server I installed tinydns and configured the Exchange 
> server as MX for bioid-dev.de. In the control directory of qmail I've 
> got an rcpthost file with an entry for bioid-dev.de and a smtproutes 
> file with the line bioid-dev.de:192.186.20.10. The IP is the Exchange 
> server.
>
> Any hints what I am missing in my configuration?

Give us the output of qmail-showctl. I suspect that the format of the
mailroutes file is garbled or permissions are wrong.

Double-check the IP given in smtproutes, too.

-Johan
-- 
Johan Almqvist
http://www.almqvist.net/johan/qmail/

 Emanuel.exe

Re: Qmail and Procmail

[Forrest Sutton]

  
* Alexander Meis <[EMAIL PROTECTED]> [010406 12:21]:
> i Try to setup qmail with maildirs and Procmail Mailfiltering.
> Ok Qmail works. How do i enable the filtering to of Procmail to
> the ariving Mails ? I found nothing in the manual.

Tip 1: Don't start new threads by replying to unrelated messages.

Tip 2: If possible, use maildrop instead of procmail. www.courier-mta.org

Tip 3: Put the following into your .qmail file
|preline procmail -t .procmailrc
(assuming that you already have a .procmailrc)

-Johan
-- 
Johan Almqvist
http://www.almqvist.net/johan/qmail/

 Emanuel.exe

Re: Can't establish SMTP connection (Error 4.4.1)

[Forrest Sutton]

  
On Fri, Apr 06, 2001 at 12:23:33PM +0200, Frank Tegtmeyer wrote:
> > Any hints what I am missing in my configuration?
> 
> Did you restart qmail after establishing the route in smtproutes?

That's not necessary. smtproutes is reread by every new invocation of
qmail-remote.

Chris

 Emanuel.exe

vmailmgr accpect correctuser@incorrectdomain as system-account user.

[Michael Cheung]

Hi;
I use checkvpw from vmailmgr package for pop3 authorization.
But it treat all login name correctuser@incorrectdomain as system-account
user.

How to configure the vmailmgr to give an error for such a situation?

Thanks inadvance.

Regards;
Michael

Re: Vulnerable MUAs ...

[David Talkington]

-BEGIN PGP SIGNED MESSAGE-

Roger Merchberger wrote:

>Just because one runs (for example) Eudora doesn't mean one's not clueful...

No offense intended.  I believe Eudora uses IE's engine if you choose
to use HTML mail (which the clueful user won't, of course), and has
been affected by IE vulnerabilities for that reason, hence its
(perhaps unwarranted) inclusion in my search.

- -d

- -- 
David Talkington
http://www.spotnet.org

PGP key: http://www.prairienet.org/~dtalk/dt000823.asc

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQEVAwUBOuTOtr1ZYOtSwT+tAQFBmQf9GXIwQl54GTzlQobZCWDISizjNXzRw9Bm
kM+AIswmM2mdOo2R5E72RIMy7W1D6DHIRMVSE3/IyICcfDjHCaGNIwX/tXeaeWzA
9MXnFQSl7SMjMHbYi6KcEX9TxcHHttCOlIUe0zW2/wz1ZKodPZyuJEfX0vt7WWlS
FvObC0J0OvdP4dGLSRy835meV8VY4Liet3DstQ7bjYyvSs/M7sxmtlDKv04+RbCX
JXNEAKc7qxcMmBsYW+rsxe2R1+TSSX5rY5JZXmTXdaLjkdI0BFPNgPf8bTCoUZIk
HVWHmg/A8WAA+4qRtwwxcAHldoEWGcWtVd8nwu1UkMiqQvl8jg+0Fg==
=Sppa
-END PGP SIGNATURE-

Re: CAN'T Send to lists!

[Marco Calistri]

On 24-Apr-2001 Johan Almqvist wrote:
> * Marco Calistri <[EMAIL PROTECTED]> [010424 02:08]:
>> I use smtproutes on this way:
>> 
>> vger.kernel.org:mail.myisp.com
>> hydra.carleton.ca:mail.myisp.com
> 
> Why not just
>:mail.myisp.com

Because the problem appears only on 2 or 3 domains
all the other are ok.

>> but seems that mail doesn't arrives at destination.
> 
> What do the logs say?

Logs says:mail accepted but I never see on the list,
I had to use external SMTP server (hotmail from web!)
to put my message on list.
 
Using q(mail)sendmail and smtproutes as for above
I had this kind of responses:
--
Hi. This is the qmail-send program at linux.ik5bcu.ampr.org.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[EMAIL PROTECTED]>:
Connected to 199.183.24.194 but sender was rejected.
Remote host said: 553 5.4.3 For MAIL FROM address
<[EMAIL PROTECTED]> the policy analysis reports DNS error with your
source domain.
--
>> I'am not able to discover where the problem is.
> 
> With the sparse info you've given, nor are we.

Yes Johan you're right btw now I switched back to qmail-SMTP
and now the mail goes accepted;I'm sorry because I'd like 
q(mail)sendmail features to use Mail-Follow-Up that
using qmail-SMTP I loose.

Marco

> -Johan
> -- 
> Johan Almqvist
> http://www.almqvist.net/johan/qmail/

Re: Vulnerable MUAs ...

[Roger Merchberger]

Rumor has it that David Talkington may have mentioned these words:
>-BEGIN PGP SIGNED MESSAGE-
>
>Charles Cazabon wrote:
>
>>I daresay the majority of people on this list
>>are clueful enough to not run vulnerable email clients.
>
>In a quick not-quite-scientific survey of 6,757 messages in my
>qmail-list folder:
>
>pnet4:djb 522 $ grep -i ^X-Mailer: qmail \
>|grep -iE 'microsoft|eudora' |wc -l
>   1757
>
>Which works out to 26% of the traffic.  Of course, that doesn't
>establish the number of unique senders in those figures, but still ...
>not as small a minority as I would have thought ...

Just because one runs (for example) Eudora doesn't mean one's not clueful...

I run Eudora (3.0 pro) which doesn't open anything you don't want it to,
HTML disabled, and Norton Antivirus updated weekly (or so...)

I've been running qmail since 0.96 (1995) and while I'm no brain surgeon, I
do happen to still have a wee bit of gray matter still functioning...

However, in the spirit of this thread, as soon as someone donates some VMS
documentation to me (7.2 for the Vax would be preferable, but I won't be
too picky... ;-) I'd be more than happy to use my VaxStation 3100/m38 to do
my home email -- then I can use a real operating system & not worry about
virii... :-)

Too bad qmail won't run on it... :-(

Just MHO,
Roger "Merch" Merchberger
--
Roger "Merch" Merchberger   ---   sysadmin, Iceberg Computers
Recycling is good, right???  Ok, so I'll recycle an old .sig.

If at first you don't succeed, nuclear warhead
disarmament should *not* be your first career choice.

Re: CAN'T Send to lists!

[Johan Almqvist]

* Marco Calistri <[EMAIL PROTECTED]> [010424 02:08]:
> I use smtproutes on this way:
> 
> vger.kernel.org:mail.myisp.com
> hydra.carleton.ca:mail.myisp.com

Why not just
:mail.myisp.com

> but seems that mail doesn't arrives at destination.

What do the logs say?

> I'am not able to discover where the problem is.

With the sparse info you've given, nor are we.

-Johan
-- 
Johan Almqvist
http://www.almqvist.net/johan/qmail/

 PGP signature

CAN'T Send to lists!

[Marco Calistri]

Hello,sorry to disturb for so stupid questions but I cannot
send messages to some mailing list servers:

[EMAIL PROTECTED]
[EMAIL PROTECTED]

The problems started when I passed from qmail SMTP
to qmail sendmail to add some features as Mail-Follow-Up.

Since I have not a FQDN,to send toward the above mailservers
I use smtproutes on this way:

vger.kernel.org:mail.myisp.com
hydra.carleton.ca:mail.myisp.com

but seems that mail doesn't arrives at destination.

As test I tried also adding my account @hotmail.com
as for above and for this domain smtproutes works.

I'am not able to discover where the problem is.

It could be setting "sender" into my MUA the problem?

Thanks
-- 
Regards,: Marco Calistri <[EMAIL PROTECTED]>
gpg key available on http://www.qsl.net/ik5bcu
Xfmail 1.4.7p2 on linux RedHat 6.2 kernel-2.4.2
--
I saw Lassie.  It took me four shows to figure out why the hairy kid never
spoke. I mean, he could roll over and all that, but did that deserve a series?

Vulnerable MUAs ...

[David Talkington]

-BEGIN PGP SIGNED MESSAGE-

Charles Cazabon wrote:

>I daresay the majority of people on this list
>are clueful enough to not run vulnerable email clients.

In a quick not-quite-scientific survey of 6,757 messages in my
qmail-list folder:

pnet4:djb 522 $ grep -i ^X-Mailer: qmail \
|grep -iE 'microsoft|eudora' |wc -l
   1757

Which works out to 26% of the traffic.  Of course, that doesn't
establish the number of unique senders in those figures, but still ...
not as small a minority as I would have thought ...

- -d

- -- 
David Talkington
http://www.spotnet.org

PGP key: http://www.prairienet.org/~dtalk/dt000823.asc

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQEVAwUBOuS6J71ZYOtSwT+tAQFPjggApafwdSzS16ZhA6XSvTQ7vrfVXdRajScp
EGsKfHGR1yZNd4iuaBe+h2a8kPiTWU9Ryn4a9hMnOqqwxcs0iJleJyT/ncVQiB6q
p8WozeGL5iKyifL/pXsgQ1YgXYi8MKrnNmeHZ2xI3dIwY50EEFCjMgXwHDnBAIvt
qFT7UuXd+h+YNU1rWxzUn2BarIHvy2fC/YjvWqKiKIbph3BlSo1q2NfsnU4kM1w0
QsAmi9mOHLmQKonl9mgZvrbsWTf9Plt/BYxK+Oyc2iCrv/t1TGk7F+CNbx/gxAa8
pLNHD8Q6a3QMb1M3i9N2cdHxggfljQY2esfM7Alj/WOUuOG9hYmUEQ==
=VBnG
-END PGP SIGNATURE-

Re: [OT] Re: VIRUS ALERT

[Fabrice Scemama]

PLEASE, do restrain your antivirus
software from spamming the list !!

On Mon, 23 Apr 2001, Jason Kawaja wrote:

> "Alan R." wrote:
> > 
> > Jessica,
> > 
> > You are sending email with virus. Please use some anti-virus program.
> > 
> > Alan R.
> > 
> 
> there is no jessica, investigate the past messages...they originate from
> various previous posters
> 
> someone on this list has/had a worm/virus and their machine sent
> messages from its sent-box to past recipients, qmail-list being one of
> them..
> 
> folks on the list who are _still_ using a windows box should go to :
> 
> http://www.sarc.com/avcenter/venc/data/w32.navidad.16896.html
> 
> I believe the attached exe is that type of worm.
> 
> -- 
> 
> Regards,
> Jason Kawaja, UF-ECE Sys Admin
> 

Re: incorrect_user@correct_domain accepted

[Ketan Bajaj]

probably this is what is going wrong:

this time i used qmail-remote directly :
/var/qmail/bin/qmail-remote schwab.com sender-envelope [EMAIL PROTECTED]
qmail-remote exits with the report rK:
*
rRecipient report: acceptance.
KMessage report: success.  host has taken responsibility
   for delivering the message to each acceptable
   recipient.
*
Now if sender-envelope address is at my qmail-server, the bounce never comes
back. If i change the sender-envelope address to some another address as
[EMAIL PROTECTED], a bounce is received at  that address!!
which may mean
either the remote hosts like aol.com and schwab.com are either not able to
send the bounce message to  the sender-envelope address at my qmail server,
which i have been using. (they don't like my server name/ip, but i checked
that reverse lookup are fine !)
or they are sending the bounce to the envelope, but qmail is not accepting
them due to some reasons..
-ketan



- Original Message -
From: "Ketan Bajaj" <[EMAIL PROTECTED]>
To: "Greg White" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Monday, April 23, 2001 12:26 PM
Subject: Re: incorrect_user@correct_domain accepted


> i tried something more :
> sent messages to bad_user_names @yahoo.com, hotmail.com. My qmail logs
show
> that they bounce back immediately, with a error code 554 and 550
> respectively.  which is the correct and expected behaviour.
> No i try again to [EMAIL PROTECTED] and [EMAIL PROTECTED], i get a
> 250_ok (remote accepted message) !!! (they should have bounced back).
>
> is it that schwab.com, aol.com are delaying the bounce back and sending
the
> bounce back after sending the accept message ..
> and my qmail logs when it gets the 250_ok message, doesn't write any other
> error info into logs for the same message id / delivery id. or maybe
> qmail-remote closes connection with the remote server after seeing a
250_ok
> message and thus doesn't get the delayed bounce ???
> ( i'm sending the email using "mailto address", and putting a subject with
> no message body)
>
> as you've mentioned : you see the accept message and followed by a bounce.
> what i could be possibly missing? is it some sort of qmail-remote
> configuration??
> thanks,
> Ketan
>
> - Original Message -
> From: "Greg White" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Sunday, April 22, 2001 1:43 AM
> Subject: Re: incorrect_user@correct_domain accepted
>
>
> > On Sat, Apr 21, 2001 at 01:52:54PM -0700, Ketan Bajaj wrote:
> > > i think i haven't been clear enough in explaining the problem...
> > > again,
> > > A (local smtp server)B (remote smtp server)
> > >
> > > B is at domain schwab.com, about which i do not know anything, whether
> it
> > > has qmail, sendmail, exchange or anything else.
> > >
> > > 1. when A is setup as qmail, and remote address is incorrect@B there
is
> no
> > > bounce from B and the message is accepted at B. I see this at the
qmail
> logs
> > > on A.
> >
> > In sending them a test message, I too see the remote host accept the
> > message, but it promptly bounces it with '550 User Unknown'. Your qmail
> > server is likely configured incorrectly -- you should be seeing the
> > bounces. Please send a message, _headers and all_, that you sent to
> > [EMAIL PROTECTED] from your qmail server...
> >
> > GW

Re: [OT] Re: VIRUS ALERT

[Ricardo Cerqueira]

On Mon, Apr 23, 2001 at 12:10:10PM -0400, Jason Kawaja wrote:
> "Alan R." wrote:
> > 
> > Jessica,
> > 
> > You are sending email with virus. Please use some anti-virus program.
> > 
> > Alan R.
> > 
> 
> there is no jessica, investigate the past messages...they originate from
> various previous posters

Wrong. Look at the headers of the messages.
This "emanuel" has plagued the qmail list before. I've seen some of my own
posts re-posted back then.
From what I've seen, the virus re-sends everything the victim has recieved,
with the .exe attached to them.

RC

-- 
+---
| Ricardo Cerqueira  
| PGP Key fingerprint  -  B7 05 13 CE 48 0A BF 1E  87 21 83 DB 28 DE 03 42 
| Novis Telecom  -  Engenharia ISP / Rede Técnica 
| Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal
| Tel: +351 2 1010  - Fax: +351 2 1010 4459

 PGP signature

Re: incorrect_user@correct_domain accepted

[Charles Cazabon]

Ketan Bajaj <[EMAIL PROTECTED]> wrote:
> sent messages to bad_user_names @yahoo.com, hotmail.com. My qmail logs show
> that they bounce back immediately, with a error code 554 and 550
> respectively.  which is the correct and expected behaviour.

It's correct, but why is it expected?  It's only possible if the process which
accepts the message from the net at large has knowledge of the final delivery
target.  This is the case sometimes, and other times not.

> No i try again to [EMAIL PROTECTED] and [EMAIL PROTECTED], i get a
> 250_ok (remote accepted message) !!! (they should have bounced back).

qmail-smtpd doesn't have any knowledge of local users.  It therefore cannot
reject the message during the initial SMTP conversation.  It then bounces the
message if the local user turns out not to exist.

This is all allowed by the SMTP spec.

> as you've mentioned : you see the accept message and followed by a bounce.
> what i could be possibly missing? is it some sort of qmail-remote
> configuration??

No, it's not a configuration issue.  You simply don't understand that this is
also correct and allowed behaviour, and for obvious reasons, it has to be.
There are many network and software configurations which simply make it
impossible to "know" during the inital SMTP conversation whether the local
part of an address is valid.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: Virus found in message "Re: Qmail and Procmail"

[Jason Haar]

On Mon, Apr 23, 2001 at 07:01:57PM +0200, Mads E Eilertsen wrote:
> 
> > From: System Anti-Virus Administrator <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> 
> > A virus was discovered in an e-mail addressed to you. We have
> > rejected the infected mail so your computer will not be infected.
> 
> Sitting here with no virus but lots of warning messages it occurs
> to me that the latter is at least as disturbing as the first.
> Please consider doing something with your AV-software.

A better statement to say would be: "don't dick with your AV-software, the
author knew what he was doing!!!"

That's *MY* Qmail-Scanner software that generated that message.
Unfortunately that site has *REWRITTEN IT* so that it doesn't act as I
intended. I went through a *LOT* of effort to stop Qmail-Scanner being like
all those bl**dy commercial scanners that spam mailing-lists when they find
viruses - mine specifically doesn't send AV messages to mailing-lists.

I have vented by displeasure at the site owner. I am not happy.

[one of the drawbacks of Open Source of course. Each user can rewrite it as
they please]

So now in an attempt to make a silk purse from a sow's ear; for those
interested in a Email AV solution that won't spam mailing-lists with such
messages, take a look at http://qmail-scanner.sourceforge.net/ ;-)

-- 
Cheers

Jason Haar

Unix/Special Projects, Trimble NZ
Phone: +64 3 9635 377 Fax: +64 3 9635 417

Re: ScanMail Message: To Recipient virus found and action taken.

[Aaron L. Meehan]

Quoting Alex Pennace ([EMAIL PROTECTED]):
> Am I the only one that finds it ironic that a list for a Unix MTA is
> plagued by a Windows mail trojan and a mail scanner eager to tell
> recipients about the disposition of the message?

which is why I use the following procmail rules given to me at some
point by another list member and slightly modified.  I decided to put
them in after the last round of newbie whining about us being too
tough on them ;-)  Turns out I don't see any of these virus things.

:0:
* ^Mailing-List:.*contact [EMAIL PROTECTED]*
* X-MSMail-.*
/dev/null

:0:
* ^Mailing-List:.*contact [EMAIL PROTECTED]*
* X-Mailer:.*(Internet Mail.*|Microsoft Outlook.*)
/dev/null

which sent to Mr. Null the following, apparently from an Upchuck user
that decided to point out the obvious (which I've gleaned from reply
to his mail, pity a procmail rule to filter out replies to trashed
mail isn't so easy--maybe extract the message-id, keep it in a file
and.. hmmm).

>From [EMAIL PROTECTED] Mon Apr 23 16:58:35 2001
 Subject: VIRUS IN QMAIL-LIST
  Folder: /dev/null 

Anyway, those rules are nicely filtering out all the cruft. :) Sorry
to those folks that have to use them at work (never find me taking a
job like that).  Those that use them by choice, well, get a real MUA.
The SNR is just too high!

Hopefully Dan can rid the list of the morons--before uic's 'net
connection gets (more) saturated :)

> ScanMail is broken.

Yep.

Aaron

Re: ScanMail Message: To Recipient virus found and action taken.

[denis]

'Tis quite ironic indeed...

Alex Pennace wrote:

> On Mon, Apr 23, 2001 at 10:05:22PM +0800, System Attendant wrote:
> > ScanMail for Microsoft Exchange has detected virus-infected attachment(s).
> >
> > Sender = [EMAIL PROTECTED]
> > Recipient(s) = [EMAIL PROTECTED]
> > Subject = Re: Can't establish SMTP connection (Error 4.4.1)
> [snip]
>
> Am I the only one that finds it ironic that a list for a Unix MTA is
> plagued by a Windows mail trojan and a mail scanner eager to tell
> recipients about the disposition of the message?
>
> > Warning to recipient. ScanMail detected a virus in an email attachment and
> > has been removed!  If this mail is from Internet, the sender don't know
> > his/her mail consists of virus and has been removed.  Please ask the sender
> > to clean and re-send.
>
> ScanMail is broken.

Re: Pop goes my weasel

[David L. Nicol]

> "Meuse, Andy" wrote:
> 
> Hey all,
> 
> A few accounts on my qmail server recieve 1000 emails a day.
> Sometimes these don't get checked for weeks. The mail is also kept on the
> server for a few weeks so the CUR dir gets pretty massive.
> 
> It's all been running fine for months with no config change, but
> now when a user tries to pop the account the cpu% on the server maxes
> out. If the user quits Outlook and then starts again, a second pop
> process starts on the qmail server and the cpu% splits between them. If I
> kill the processes it all just starts again.
> 
> The only way around it I've found is to delete messages from the
> CUR dir down to about 1000 or so.
> The server is a dual 500 with half a gig of ram and the desktops
> are 700s with 256 and the connectivity is not an issue.
> 
> Anyone know of some "tweak" that might help me? Or do y'all need
> more info?
> 
> Thanks
> Andy


I rewrote my pop daemon to only serve 200 messages at once.  When
there more messages than that I need to make several requests.

You might experiment with some internal scaling tool that makes
a new directory every few thousand mails and moves all the mail from
the MailDir/new directory into the newly created directory, and a 
pop daemon (again, assuming you are writing your own pop daemon) that
knows about this multiple directory arrangement and naming scheme
(new+timestamp would work well)

That way you could avoid the too-many-entries-in-directory problem
tht you appear to be having.




-- 
  David Nicol 816.235.1187 [EMAIL PROTECTED]
"Described as awesome by users"

Re: Virus propagation in action

[Chris Johnson]

On Mon, Apr 23, 2001 at 11:13:38AM -0400, Todd Finney wrote:
> Wow.
> 
> I expect my users to not know any better when it comes to virii and 
> attachments.  That's the purpose of anti-virus software, filtering, and 
> the other sundry defenses.
> 
> Consider yourself technical enough to administer a mail server?  Then 
> you should know better.
> 
> Chris, Johan, David, RC, for your reading pleasure:

I do know better. What are you talking about? (I assume I'm the Chris you refer
to above, since a message I posted two weeks ago was reinjected with a virus
attached. Did it occur to you that it wasn't sent by me?)

Chris

 PGP signature

Re: Can't establish SMTP connection (Error 4.4.1)

[Henning Brauer]

On Mon, Apr 23, 2001 at 07:22:50PM +0200, Willy De la Court wrote:
> Is'nt it time to install a virus scanner on the list.

No. It's time to drop windoze and these clueless virii scanners sending
bunches of unwanted, uneeded, bandwidth cosuming spam messages back to
mailing lists.

-- 
Henning Brauer | BS Web Services
Hostmaster BSWS| Roedingsmarkt 14
[EMAIL PROTECTED] | 20459 Hamburg
http://www.bsws.de | Germany

Re: Hide firewall ?

[Chris Johnson]

On Mon, Apr 23, 2001 at 05:03:47PM +0200, Deslions Nicolas wrote:
> you should maybe learn some things about blocking virus before trying to
> help other people

To whom are you addressing this? I was the one who answered the question, two
weeks ago. I had nothing to do with the message containing the virus. I don't
know why my message was reinjected with a virus attached, or by whom.

Chris

 PGP signature

Re: Can't establish SMTP connection (Error 4.4.1)

[Andy Bradford]

On Mon, 23 Apr 2001 19:22:50 +0200, Willy De la Court wrote:

> Is'nt it time to install a virus scanner on the list.

Why?  I see no reason why the list should have a virus scanner.

Andy

Re: ScanMail Message: To Recipient virus found and action taken.

[Robin S. Socha]

* David Young <[EMAIL PROTECTED]> writes:

>> ScanMail is broken.

> Only about 1/3 are from ScanMail. And I'm not sure it's behavior is so
> broken... 

It is broken. No software whatsoever is entitled to send mail to
lists. End of Discussion.

> if you detect a virus from a list, is it better/worse to flood the
> list with warnings that the virus was found, or remain silent and risk
> more users flooding the list with more viruses? 

Virus? What virus? This is about qmail. Does qmail run on Wintendos? 

> Either way, it's a lot of junk mail.

Yes, it is. And the culprit is broken software:
1. a broken family of "OS"es from Redmond
2. broken MUAs
3. broken anti-virus software

Well, congrats, Bill - another blatant display of your software's utter superiority.
-- 
Robin S. Socha 
http://my.gnus.org/ - To boldly frobnicate what no newbie has grokked before.

Re: Queue Building

[Charles Cazabon]

Mehul Choksi <[EMAIL PROTECTED]> wrote:

> 2. The test setup was run exactly same as the production; the only
> difference was the email- ids were non-existent.

This makes a big difference; the system trying to deliver to non-existent
local or remote accounts will spend a lot of additional time and queue disk
I/O injecting and delivering bounce messages.

> 3. Well, I think I misunderstood "sending unique mails Vs sending same mail
> to different addresses".  Well, the application sends unique mails to
> different addresses with the same contents (the header changes each time
> since the "rcpt to:" changes in each mail, the body remains same)

Yes, you're sending unique messages to each recipient.  This puts a large load
on the queue disk.  Sending a single message to multiple recipients only
requires queuing it once, while your method queues it separately for each
recipient.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: ScanMail Message: To Recipient virus found and action taken.

[Alex Pennace]

On Mon, Apr 23, 2001 at 12:44:03PM -0400, David Young wrote:
> > ScanMail is broken.
> 
> Only about 1/3 are from ScanMail. And I'm not sure it's behavior is so
> broken... if you detect a virus from a list, is it better/worse to flood the
> list with warnings that the virus was found, or remain silent and risk more
> users flooding the list with more viruses? Either way, it's a lot of junk
> mail.

It appears there are people who still click on attachments that they
shouldn't click on, I don't see how a flood of messages would make
them more judicious. I picked on ScanMail because it was the first to
respond back, but all of these virus scanners should bounce to the
envelope sender address and not to addresses in the to: line.

Re: [OT] Re: VIRUS ALERT

[Andy Bradford]

On Mon, 23 Apr 2001 12:10:10 EDT, Jason Kawaja wrote:

> folks on the list who are _still_ using a windows box should go to :

Maybe you should refer them to something like:

http://www.linuxdoc.org/HOWTO/Installation-HOWTO/index.html

or

http://www.openbsd.org/faq/faq4.html

;-)

Andy

Re: incorrect_user@correct_domain accepted

[Ketan Bajaj]

i tried something more :
sent messages to bad_user_names @yahoo.com, hotmail.com. My qmail logs show
that they bounce back immediately, with a error code 554 and 550
respectively.  which is the correct and expected behaviour.
No i try again to [EMAIL PROTECTED] and [EMAIL PROTECTED], i get a
250_ok (remote accepted message) !!! (they should have bounced back).

is it that schwab.com, aol.com are delaying the bounce back and sending the
bounce back after sending the accept message ..
and my qmail logs when it gets the 250_ok message, doesn't write any other
error info into logs for the same message id / delivery id. or maybe
qmail-remote closes connection with the remote server after seeing a 250_ok
message and thus doesn't get the delayed bounce ???
( i'm sending the email using "mailto address", and putting a subject with
no message body)

as you've mentioned : you see the accept message and followed by a bounce.
what i could be possibly missing? is it some sort of qmail-remote
configuration??
thanks,
Ketan

- Original Message -
From: "Greg White" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, April 22, 2001 1:43 AM
Subject: Re: incorrect_user@correct_domain accepted


> On Sat, Apr 21, 2001 at 01:52:54PM -0700, Ketan Bajaj wrote:
> > i think i haven't been clear enough in explaining the problem...
> > again,
> > A (local smtp server)B (remote smtp server)
> >
> > B is at domain schwab.com, about which i do not know anything, whether
it
> > has qmail, sendmail, exchange or anything else.
> >
> > 1. when A is setup as qmail, and remote address is incorrect@B there is
no
> > bounce from B and the message is accepted at B. I see this at the qmail
logs
> > on A.
>
> In sending them a test message, I too see the remote host accept the
> message, but it promptly bounces it with '550 User Unknown'. Your qmail
> server is likely configured incorrectly -- you should be seeing the
> bounces. Please send a message, _headers and all_, that you sent to
> [EMAIL PROTECTED] from your qmail server...
>
> GW

[ANNOUNCE] TMDA 0.01 - A qmail-based anti-SPAM system

[Jason R. Mastaler]

I'm pleased to announce the first public release of my Tagged Message
Delivery Agent (TMDA).  If you're familiar with Thomas Erskine's
`Tagged Message Sender', TMDA is essentially a re-write with lots of
new functionality.

TMDA is an OSI certified software application for qmail systems
designed to significantly reduce (or eliminate) the amount of SPAM/UCE
you receive by using unique, cryptographically enhanced (called
tagged) e-mail addresses.  TMDA can both filter your incoming e-mail,
and tag your outgoing address.

For complete information, visit the TMDA homepage:

http://tmda.sourceforge.net/>

As a teaser, TMDA has reduced my influx of SPAM from 500+
junk-messages per month down to only 1-3.

Enjoy,
Jason

Re: big-todo patch

[Charles Cazabon]

Mehul Choksi <[EMAIL PROTECTED]> wrote:
> I am looking for instructions on applying big-todo patch.  It’s
> just a test server so I don need to worry about the existing queue.

If you don't care about the contents of the queue, just stop qmail, remove
/var/qmail/queue, cd to the source directory, apply the patch, do a "make
setup check", and restart qmail.

If you need step-by-step instructions for applying the patch, it's offtopic
here.  Check a Unix-newbies FAQ or other resource for those.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: how to send attaching in qmail using perl

[Medi Montaseri]

Sending attatchments is very easyif you want to modify your own Perl
function, here is
a sample for TXT attatchments. What I'm sharing is a Perl program called
mmail(1). run it
with -h to get the help stuff. See SendMail() function for an example
of writing attatchments.
 
davidu wrote:

I
would recommend that if you have mutt installed you just use mutt from
the command line, it is one for the few MUA's that can work from the command
line without user intervention.read
the mutt manpage.-davidu

-Original
Message-
From: mugundhan [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 23, 2001
12:57 AM
To: qmail
Subject: how to send attaching
in qmail using perl
hi all, iam
using a perl script to send mails via qmail using qmail-inject.
my code looks like this:
$mailprog = "/var/qmail/bin/qmail-inject";open(QMAIL,"|$mailprog
-f mugund\@intercept-india.com");
print QMAIL "From: mugund\@intercept-india.com\n";
print QMAIL "To: recip\@recip.com\n";
print QMAIL "Subject: subject\n";
print QMAIL "Content-type: text/html\n";
print QMAIL "hi.this is a test\n";
close(QMAIL);it works fine. now, i
want to know how to make this script send attachments.iam not knowing how
to send attachments using this script in perl. what are the changes which
i will have to make in this script in order to send attachments.
pls do give me a solution ASAP.
thanks in advance. Have
a nice day. Regards,
S.Mugundhan,
Tech Solutions,
[EMAIL PROTECTED]


-- 
===
Medi Montaseri, [EMAIL PROTECTED], 408-450-7114
Prepass Inc, IT/Operations, Software Eng.
===
 



#!/usr/bin/perl

# =
# Desc  : This program mails a message to a group of recipients.
# A generic subject is provided if subject  is not provided.
# If -f From is not specified, real-uid@host is assumed.
# If -m message is not sepcified, stdin is assume.
# Usage : $0 [-s "My Subject"] [-m MesgFile] [-f From] 
#   -r "List1 List2 ... Listn" | -e email1 email2 ... emailn" 
#
# where MesgFile is an absolute path ot a file containing the message
#   List-i is an abosolute path a to file containing email addresses
#   and email-i is an email address, either -r or -e must be present
# Input : MsgFile1 MsgFile2...MsgFilen List1 List2 ... Listn
# Output: pipe to sendmail
# Version: 1.1
# Author: Medi, Montaseri, 00/12/14
# History: 01/01/19, added multiple message file feature
# =

#  constructor --
BEGIN
{
use strict;
use vars qw ($opt_h $opt_s $opt_m $opt_f $opt_r $opt_e);
use Getopt::Std;
use Sys::Hostname;
}
#  prototypes ---
sub PrintHelp();
sub GetSubject($);
sub GetFrom($);
sub GetMessages($$);
sub GetRecipients($$);
sub SendMail();

#  Global Vars --

my $Usage = "$0 [-h] [-s 'My Subject'] [-m 'MesgFile1 MsgFile2 ...MsgFilen'] 
[-f From] -r 'List1...Listn' | -e 'email1 email2 ... emailn'";

$|++;
# === main() ==

# Validate usage

die "$Usage \n" unless ( $#ARGV >= 0 );
die "$Usage" unless ( getopts('hs:m:f:r:e:') );

PrintHelp() if ( $opt_h );
die "$Usage" unless ( $opt_r || $opt_e );
 
my $Subject = GetSubject($opt_s);
my $From = GetFrom($opt_f) ;
my %Messages = ();
GetMessages($opt_m || '-' , \%Messages) || 
die "$0: Error: failed getting message [$!]";


my $Recipients = GetRecipients($opt_r, $opt_e) || 
die "$0: Error: failed getting recipients [$!]";

SendMail($From, $Subject, \%Messages, $Recipients);

 
# --- PrintHelp() 
sub PrintHelp()
{

my $Hostname = hostname() ;
my $Name = getpwuid( $< );
my $From = $Name . '@' . $Hostname;
print <<"EOH";
Usage: 

$Usage

Where 

-s 'My Subject' is an optional string, quoted if multi-token
-f from is the optional from line, else set to $From
-m msgfile is the optional mesg file or stdin if not provided
   list-i is a file containing list of recipients
EOH
exit(1);
}
# -- GetSubject() --
sub GetSubject($)
{
my $subject = shift;
return($subject) if ( $subject );

$subject = "Message-Of " . localtime();
return($subject);
}
# -- GetFrom() --
sub GetFrom($)
{
my $from = shift;
return($from) if ( $from );

$from = getpwuid($<) . '@' . hostname(); 
return($from);
}
# -- GetMessages() 
# Usage: GetMessages($MsgFile)
# Desc : This function takes a MesgFile and returns the content in a scalar
sub GetMessages($$)
{

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = jessica
Recipient(s) = [EMAIL PROTECTED]
Subject = qmail-qread and qmail-qstat as suid root...
Scanning Time = 04/24/2001 03:01:05

Action on virus found:
The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved
it.  The attachment was moved to d:\Virus\Emanuel3ae47bed11.exe_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Re: tcpserver help

[Alex Pennace]

On Tue, Apr 24, 2001 at 05:01:35PM +0200, NDSoftware wrote:
> PLEASE USE A ANTIVIRUS !!!
[snip virus]

It's bad enough that a dozen other mail hosts (including yours) are
spamming the list with their thoughts on the matter for each of
"jessica"'s messages. Please stop adding to the noise.

Re: Virus found !!!

[Jason Kawaja]

Gustav-Martin Olsen wrote:
> 
> The Virus was reported to be:
> 
> I-Worm.Navidad.B1
> 
> From:"jessica" <[EMAIL PROTECTED]>
> To:  <[EMAIL PROTECTED]>
> Subject: qmail-qread and qmail-qstat as suid root...
> Message-ID: <017401c0cbff$dd9878b0$0300a8c0@acer345t>
> Date:Mon, 23 Apr 2001 22:12:18 +0800
> 
> He/she/it tries with the subject:
> qmail-qread and qmail-qstat as suid root..
> Re: qmail, qmail-command and procmail
> Re: Hide firewall ?
> Re: Very slow qmail response
> Re: tcpserver help
> Re: Fw: How to block an email id in qmail?
> Re: I am back to square ONE...
> Mail cleansing program
> Re: Can't establish SMTP connection (Error 4.4.1)
> Re: Qmail and Procmail
> 
> Gustav
> 
> --
> GMX - Die Kommunikationsplattform im Internet.
> http://www.gmx.net

looks like you did your homework...

-- 

Regards,
Jason Kawaja, UF-ECE Sys Admin

Spam is worse than a Virus

[Jerry Lynde]

 You know... the virus, I don't mind qmail-scanner-queue.pl 
places it quietly and calmly into the quarantine, sends me and email, and 
we all get on with our lives. The part that sucks is the hordes of email 
notices to the list about the virus from every anti-viral program on the 
list. If you're using qmail scanner, it checks for automated mail and does 
*not* send a response to the list is the virus came from a list... wouldn't 
that be nice?

Happy Monday!

Jer

At 09:13 AM 4/23/2001, Todd Finney wrote:
>Wow.
>
>I expect my users to not know any better when it comes to virii and 
>attachments.  That's the purpose of anti-virus software, filtering, and 
>the other sundry defenses.
>
>Consider yourself technical enough to administer a mail server?  Then you 
>should know better.
>
>Chris, Johan, David, RC, for your reading pleasure:
>
>http://vil.mcafee.com/dispVirus.asp?virus_k=98881&;
>
>cheers,
>Todd
>

Re: Some mail is getting to qmail, some others aren't

[Henning Brauer]

On Tue, Apr 10, 2001 at 03:11:43PM -0700, Steve Quezadas wrote:
> pcrush.com  MX preference = 5, mail exchanger = 63.204.40.234

MXes do _never_ point to IPs, you must use a Hostname.
-- 
Henning Brauer | BS Web Services
Hostmaster BSWS| Roedingsmarkt 14
[EMAIL PROTECTED] | 20459 Hamburg
http://www.bsws.de | Germany

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = jessica
Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED]
Subject = Re: tcpserver help
Scanning Time = 04/24/2001 02:24:40

Action on virus found:
The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved
it.  The attachment was moved to d:\Virus\Emanuel3ae4736710.exe_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Re: VIRUS ALERT

[Andy Bradford]

On Mon, 23 Apr 2001 11:15:08 -0300, "Alan R." wrote:

> You are sending email with virus. Please use some anti-virus program.

What makes it worse are dumb anti-virus scanners that bounce messages 
back to the list... :-)

Andy

Re: tcpserver help

[Andy Bradford]

On Tue, 24 Apr 2001 17:01:57 +0200, "NDSoftware" wrote:

> PLEASE USE A ANTIVIRUS !!!

Please don't send lame messages like this to the list.  If you have 
already blocked the virus with your software then what are you worried 
about?

Re: tcpserver help

[Henning Brauer]

On Tue, Apr 24, 2001 at 05:01:57PM +0200, NDSoftware wrote:
> PLEASE USE A ANTIVIRUS !!!

stop doubling this !@%%#
The "blabla found Virus blbla" Messages are more annoying...

-- 
Henning Brauer | BS Web Services
Hostmaster BSWS| Roedingsmarkt 14
[EMAIL PROTECTED] | 20459 Hamburg
http://www.bsws.de | Germany

Re: VIRUS ALERT

[S.P. Hoeke]

The stange thing is that, although the FROM address is this "jessica" person
The bodies of the mail all have different signatures ? (from a number of 
people)

At 16:15 23-4-01, Alan R. wrote:
>Jessica,
>
>You are sending email with virus. Please use some anti-virus program.
>
>Alan R.
>
>-Original Message-
>From: jessica [mailto:[EMAIL PROTECTED]]
>Sent: segunda-feira, 23 de abril de 2001 11:05
>To: [EMAIL PROTECTED]
>Subject: Re: Can't establish SMTP connection (Error 4.4.1)
>
>
>On Fri, Apr 06, 2001 at 12:23:33PM +0200, Frank Tegtmeyer wrote:
> > > Any hints what I am missing in my configuration?
> >
> > Did you restart qmail after establishing the route in smtproutes?
>
>That's not necessary. smtproutes is reread by every new invocation of
>qmail-remote.
>
>Chris

RE: Can't establish SMTP connection (Error 4.4.1)

[Willy De la Court]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Attention attached to this message i received was the emanual  virus.

Is'nt it time to install a virus scanner on the list.

On Monday, April 23, 2001 16:05, jessica
[SMTP:[EMAIL PROTECTED]] wrote:
 << File: ATT00089.txt; charset = big5 >>  << File: Emanuel.exe >> 

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.3 for non-commercial use 

iQA/AwUBOuRW2/4IaGw3x6aJEQLiQQCdEZBMUiG5H9WrSH1b3LfQgCr+3dQAn2BC
q6SvljEaRo89KTHbZTukGp1d
=ss/U
-END PGP SIGNATURE-

RE: qmail-pop3d not working?

[Steven Katz]

It seems to be only pop that stops working after 15 minutes, as 
messages are piling up in the Maildirs. My mail client reports:

A timeout occurred while communicating with the server. (Account: 
'[EMAIL PROTECTED]', POP3 Server: 'mail.idma.com', Error Number: 
0x800ccc19).

At which point, doing 'sh -x /var/qmail/supervise/qmail-pop3d/run' 
gives me: 

tcpserver: fatal: unable to bind: address already used

My /qmail-pop3d/run file looks like:

#!/bin/sh
exec /usr/local/bin/softlimit -m 200 \
  /usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup \
idma.com /bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 2>&1

Doing 'ps auxw | grep pop3' gives me:

root   593  0.0  0.4  1272  344 ?SN   08:06   0:00 
supervise qmail-pop3d
root   601  0.0  0.6  1344  512 ?SN   08:06   0:00 
/usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup idma
root 10162  0.0  0.6  1344  516 ?SN   08:24   0:00 
/usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup idma
root 31977  0.0  0.7  1556  616 pts/0S08:38   0:00 
grep pop3

Doing 'cd /var/qmail/supervise && svstat qmail-smtpd' gives me:

qmail-smtpd: up (pid 596) 1962 seconds

Doing 'ls -l ~/* | grep Maildir --after-context=4' gives me:

/home/steven/Maildir:
total 16
drwxrwxr-x2 steven   steven   4096 Apr 21 23:22 cur
drwxrwxr-x2 steven   steven   8192 Apr 23 08:36 new
drwxrwxr-x2 steven   steven   4096 Apr 23 08:36 tmp


> -Original Message-
> From: Steven Katz <[EMAIL PROTECTED]>
> Sent: Monday, April 23, 2001 9:32 AM
> To: [EMAIL PROTECTED]
> Subject: RE: qmail-pop3d not working?
> 
> 
> Uh oh-- I may have celebrated too soon. For some reason, I can send 
> but can't receive 15 minutes after rebooting. Does that sound familiar 
> to anyone?
> 
> Steven
> 

Re: Virus found in message "Re: Qmail and Procmail"

[Mads E Eilertsen]

> From: System Anti-Virus Administrator <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]

> A virus was discovered in an e-mail addressed to you. We have
> rejected the infected mail so your computer will not be infected.

Thank you. However,

  - a message from the list to me doesn't go through your computers.
  - you have now revealed that andreas2 is subscribed to the list.

What about sending such warning messages to the envelope sender address?

Or what about just dropping the infected messages silently?
A simple 'grep ... exit 99' quietly stopped it for me.

Sitting here with no virus but lots of warning messages it occurs
to me that the latter is at least as disturbing as the first.
Please consider doing something with your AV-software.

Mads

Re: VIRUS IN QMAIL-LIST

[Charles Cazabon]

Andreas Grip <[EMAIL PROTECTED]> wrote:
> I've got a lot of virus infected mails from the qmail-list.

Oddly enough, I've only seen a handful of actual infected messages come
through this list.  On the other hand, I am practically being mailbombed by
virus scanners which have detected these few messages and decided to send
notices to the recipients (including the list address).

> Everyone who don't have virus scanning for they e-mails should scann there
> computer...

qmail doesn't run on Windows.  I daresay the majority of people on this list
are clueful enough to not run vulnerable email clients.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

RE: Queue Building

[Mehul Choksi]

1. We use multilog with option t s250 to the /var/log/qmail/qmail-send
and /var/log/qmail/qmail-smtp (same hard drive and partition) - exactly same
as mentioned in Adam McKenna's qmail-HOWTO v2
2. The test setup was run exactly same as the production; the only
difference was the email- ids were non-existent.
3. Well, I think I misunderstood "sending unique mails Vs sending same mail
to different addresses".  Well, the application sends unique mails to
different addresses with the same contents (the header changes each time
since the "rcpt to:" changes in each mail, the body remains same)
4. I have applied the big-todo patch and set the conf-split to 40, we will
be running the test later today. (Well, I am not sure whether I have applied
it correctly - though I can see the todo directory having 40 sub
directories)
The only thing I can see now is the disk bandwidth problem, I will have to
test it with better disks.
Many thanks again for replying. I greatly appreciate the same.
Regards,
Mehul.

-Original Message-
From: Charles Cazabon [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 19, 2001 12:26 PM
To: Qmail (E-mail)
Subject: Re: Queue Building

Mehul Choksi <[EMAIL PROTECTED]> wrote:
> Thanks a lot for the reply.

You're welcome.  However, in future, could you set your email client up to
use
standard quoting conventions?  The way you quoted my message made it
extremely
difficult to read and determine which parts you had added.  I've fixed the
quoting for this reply.

> > Do you mean send identical copies of one message to a million users, or
send
> > one million unique emails, each to one user?  The difference is
enormous.

> It depends, normally in batches of 100,000 to 300,000 identical mails
> prepared by an application to be sent to subscribers.  Currently we use a
> pool of sendmail servers (ordinary PIII 500 with 128MB RAM and IDE). We
are
> planning to migrate to QMAIL eventually if we find better performance.

100,000 recipients each for 10 unique emails a day is trivial to do with
qmail.  However, your testing didn't actually test this.  You sent thousands
of unique messages to one or more recipients each, which is a completely
different (and more difficult) queue load.  Change your testing methods, and
you'll see the difference.

> > You may be running into a queue disk bandwidth limitation.  What sort of
> > hardware are you using?  Is the queue on a disk by itself?  Is that disk
a
> > 15kRPM SCSI disk, sitting on its own U160 controller?  Is that
filesystem
> > mounted noatime?  What filesystem are you using?  What OS?
> >
> > How are you logging?  What does the system load reach while running your
> > injection?  Have you read the section on large servers at www.qmail.org?
> > Is /var/log on a separate disk?

> The server we are using is a very ordinary machine with PIII 500, 128MB
> and an IDE on Red Hat Linux 6.0 with upgraded kernel. Logging is done
> exactly the same way mentioned in the HOWTO.

I'm not familiar with the HOWTO you speak of.  Does it use splogger to send
the logs through syslog?  If that's the case, syslog could be eating 90% of
your CPU and 90% of your queue disk bandwidth, if the /var/log is on the
same
filesystem as /var/qmail/queue.  You didn't answer any of these questions;
we
can't help you if you refuse to answer them.

Basically, you want to ensure you're logging through multilog, not splogger,
and sending the logs to a separate disk than the queue is on, for maximum
performance.

> We will distribute the load of SMTP using the LVS. The same test we ran on
> sendmail with the very similar machine was acceptable - sendmail didn't
> build up a huge queue - it processed all the mails. However, It was rather
> slow in accepting the message though.

But sendmail can be configured to try delivering the mail before queuing it;
this is unreliable and can result in lost mail.  We know nothing of your
sendmail configuration (and probably don't want to know).

Charles
--
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: ScanMail Message: To Recipient virus found and action taken.

[David Young]

> ScanMail is broken.

Only about 1/3 are from ScanMail. And I'm not sure it's behavior is so
broken... if you detect a virus from a list, is it better/worse to flood the
list with warnings that the virus was found, or remain silent and risk more
users flooding the list with more viruses? Either way, it's a lot of junk
mail.

Re: ScanMail Message: To Recipient virus found and action taken.

[Vincent Schonau]

On Mon, Apr 23, 2001 at 10:36:44AM -0400, Alex Pennace wrote:

> Am I the only one that finds it ironic that a list for a Unix MTA is
> plagued by a Windows mail trojan and a mail scanner eager to tell
> recipients about the disposition of the message?

Not likely, although you mispelled 'a bunch of scanners'.

>> Warning to recipient. ScanMail detected a virus in an email attachment and
>> has been removed!  If this mail is from Internet, the sender don't know
>> his/her mail consists of virus and has been removed.  Please ask the sender
>> to clean and re-send.
 
> ScanMail is broken.

That's ok. According to the above, it's been removed.

Vince.

RE: qmail-pop3d not working?

[Steven Katz]

Uh oh-- I may have celebrated too soon. For some reason, I can send 
but can't receive 15 minutes after rebooting. Does that sound familiar 
to anyone?

Steven


> -Original Message-
> From: Brett Randall <[EMAIL PROTECTED]>
> Sent: Monday, April 23, 2001 3:08 AM
> To: Steven Katz
> Cc: [EMAIL PROTECTED]
> Subject: Re: qmail-pop3d not working?
> 
> 
> Just type:
> 
> # rpm -e --nodeps exim
> 
> And be happy! You don't need it...
> 
> > "Steven" == Steven Katz <[EMAIL PROTECTED]> writes:
> 
> > Sure enough, Exim is running, but I didn't realize this would cause 
> > problems. When I try to remove it, I get the following:
> 
> > # rpm -e exim
> > error: removing these packages would break dependencies:
> > smtpdaemon is needed by fetchmail-5.5.0-2
> > smtpdaemon is needed by mutt-1.2.5i-8.
> 
> > I understand mutt is recommended for Maildirs. Does this mean I'll be 
> > unable to use it?
> 
> > Steven
> 
> 
> >> -Original Message-
> >> From: Rick Updegrove <[EMAIL PROTECTED]>
> >> Sent: Monday, April 23, 2001 1:21 AM
> >> To: Steven Katz; [EMAIL PROTECTED]
> >> Subject: Re: qmail-pop3d not working?
> >> 
> >> 
> >> From: "Steven Katz" <[EMAIL PROTECTED]>
> >> 
> >> >The message could not be sent because one of the recipients was
> >> >rejected by the server. Server Response: '550 relaying to
> >> ><[EMAIL PROTECTED]> prohibited by administrator'. (Account:
> >> >'[EMAIL PROTECTED]', SMTP Server: 'mail.idma.com', Error Number:
> >> >0x800ccc79).
> >> 
> >> I am not an expert, but I don't think that is qmail talking 
> >> because I have caused every possible
> >> error every step of the way, so check for yourself.  I think you 
> >> are running Exim An Internet mailer
> >> for Unix systems. http://www.exim.org
> >> 
> >> [root@ns2 /root]# telnet 208.25.75.162 25
> >> Trying 208.25.75.162...
> >> Connected to 208.25.75.162.
> >> Escape character is '^]'.
> >> 220 shasta.idma.com ESMTP Exim 3.13 #1 Mon, 23 Apr 2001 00:08:04 -0700
> >> 
> >> Hope that helped
> >> 
> >> Rick Up
> >> 
> >> 
> >> 
> >> 
> 
> -- 
> "Hardware, n.: The parts of a computer system that can be kicked."
> 
> - The Devil's Dictionary to Computer Studies 
> 

RE: FOUND VIRUS IN MAIL from qmail-return-66681-qmaillist=ipsware.com@list.cr.yp.to to qmaillist@ipsware.com

[Michael Peppard]

I found this in my qmail-scanner program.  I thought the list might be
interested in it.


sub is_automated_email {
  #This subroutine is used to see if the sender of this virus
  #was a mailing-list/postmaster/etc. If it is we don't want to
  #send a reply.
  if ($headers{'x-loop'} || $headers{'x-listname'} ||
$headers{'x-listmember'} || $headers{'mailing-list'} ||
$headers{'x-mailing-list'} || $headers{'precedence'} =~
/^(bulk|list|junk)$/i || $returnpath =~
/^$|daemon|request|bounce|mailer|postm|owner|lists|words|majordom|experts|\-
(return|error)/i) {
return 1;
  } else {
return 0;
  }
}


-Original Message-
From: Brett Randall [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 23, 2001 10:13 AM
To: [EMAIL PROTECTED]
Subject: Fw: FOUND VIRUS IN MAIL from
[EMAIL PROTECTED] to
[EMAIL PROTECTED]


Just a quick note to any Winblowz users (and I can't say much...I'm sending
this from my much hated Winblowz terminal running OE ATM)... A recent mail
to the qmail list (in the last few minutes) contained a well-known virus...
But then again, maybe I shouldn't be telling you this ;)

B.

- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 24, 2001 12:09 AM
Subject: FOUND VIRUS IN MAIL from
[EMAIL PROTECTED] to
[EMAIL PROTECTED]


> The attached mail has been found to contain a virus
> The mail has been stored as /var/virusmails/qmailq/virus-20010424-27042
> xxTue Apr 24 00:09:00 EST 2001xxx
> qmail-remote (0.2.1) called ipsware.com
[EMAIL PROTECTED] [EMAIL PROTECTED]
> FROM: [EMAIL PROTECTED]
> TO: [EMAIL PROTECTED]
> maxlevel: 0
> Contents of /var/tmp/qmail-remote27042/unpacked
> total 36
> drwx--   3 qmailq   qmail4096 Apr 24 00:09 .
> drwx--   3 qmailq   qmail4096 Apr 24 00:09 ..
> -rw---   1 qmailq   qmail 281 Apr 24 00:09
988034940.27065-0.misspiggy
> -rw---   1 qmailq   qmail   16896 Apr 24 00:09 Emanuel.exe
> drwx--   2 qmailq   qmail4096 Apr 24 00:09 SFX
>
> /var/tmp/qmail-remote27042/unpacked/SFX:
> total 8
> drwx--   2 qmailq   qmail4096 Apr 24 00:09 .
> drwx--   3 qmailq   qmail4096 Apr 24 00:09 ..
> Scanning /var/tmp/qmail-remote27042/unpacked/*
> Scanning file
/var/tmp/qmail-remote27042/unpacked/988034940.27065-0.misspiggy
> Scanning file /var/tmp/qmail-remote27042/unpacked/Emanuel.exe
> /var/tmp/qmail-remote27042/unpacked/Emanuel.exe
> Found the W32/Navidad.e@M trojan !!!
>
> Summary report on /var/tmp/qmail-remote27042/unpacked/*
> File(s)
> Total files: ...   2
> Clean: .   1
> Possibly Infected: .   1
> H+BEDV AntiVir scanstatus0 is: 0
> Mcafee scanstatus1 is: 0
> Dr. Solomon (old) scanstatus2 is: 0
> Dr. Solomon (new) scanstatus3 is: 0
> Sophos Sweep scanstatus4 is: 0
> NAI Virus Scan 4.x scanstatus5 is: 13
> KasperskyLab AVP scanstatus6 is: 0
> KasperskyLab AVPDaemonClient scantatus7 is: 0
> F-Secure Antivirus scanstatus8 is: 0
> Trend Micro FileScanner scanstatus9 is: 0
> CyberSoft vfind scanstatus10 is: 0
> CAI InoculateIT (inocucmd) scanstatus11 is: 0
>
> Virus FOUND Sent notification to [EMAIL PROTECTED]
>
>

Re: Can I use qmail-pop3d for both mbox and maildir format?

[Dave Sill]

Michael Cheung <[EMAIL PROTECTED]> wrote:

>   Can I use qmail-pop3d for both mbox and maildir format?

No, but SolidPOP handles both:

  http://solidpop3d.pld.org.pl/

-Dave

Re: qmail-pop3d not working?

[Dave Sill]

"Mark Delany" <[EMAIL PROTECTED]> wrote:

>You might want to feed this back to the faqts people. Let's others
>benefit from what you've learnt.

It's fixed.

-Dave

[OT] Re: VIRUS ALERT

[Jason Kawaja]

"Alan R." wrote:
> 
> Jessica,
> 
> You are sending email with virus. Please use some anti-virus program.
> 
> Alan R.
> 

there is no jessica, investigate the past messages...they originate from
various previous posters

someone on this list has/had a worm/virus and their machine sent
messages from its sent-box to past recipients, qmail-list being one of
them..

folks on the list who are _still_ using a windows box should go to :

http://www.sarc.com/avcenter/venc/data/w32.navidad.16896.html

I believe the attached exe is that type of worm.

-- 

Regards,
Jason Kawaja, UF-ECE Sys Admin

big-todo patch

[Mehul Choksi]

Greetings,
I am looking for instructions on applying big-todo patch.  It’s just a test server so I don need
to worry about the existing queue. Would appreciate if some could help me or
send me the link, which points to the instructions.

 

Thanks
in Advance,

Mehul.

Re: Backup

[Dave Sill]

>From http://cr.yp.to/qmail/faq/reliability.html#backups:

>How do I back up and restore the queue disk? 
>
>Answer: You can't. 
>
>One difficulty is that you can't get a consistent snapshot of the
>queue while qmail-send is running.

Stop qmail first. And kick off all the users to prevent new messages
from being added to the queue.

>Another difficulty is that messages in the queue must have filenames
>that match their inode numbers.

Run queue-fix after restoring.

>However, the big problem is that backups---even hourly backups!---are
>far too unreliable for mail. If your disk dies, there will be very
>little overlap between the messages saved in the last backup and the
>messages that were lost.

Restoring an old queue will probably result in redelivering some
messages, but it will recover long-undeliverable messages. To me, a
few duplicates are worth it to recover lost messages.

>There are several ways to add real reliability to a mail server.
>Battery backups will keep your server alive, letting you park the
>disk to avoid a head crash, when the power goes out. Solid-state
>disks have their own battery backups. RAID boxes let you replace dead
>disks without losing any data.

Yes, UPS's and disks are cheap.

-Dave

Re: change envelope from line

[Gustav-Martin Olsen]

Hi Harald,

thanks for your help and the good information, i've written a little
shell-script.

best regards

Gustav

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net

Re: Virus found !!!

[Gustav-Martin Olsen]

The Virus was reported to be: 

I-Worm.Navidad.B1

From:"jessica" <[EMAIL PROTECTED]>
To:  <[EMAIL PROTECTED]>
Subject: qmail-qread and qmail-qstat as suid root...
Message-ID: <017401c0cbff$dd9878b0$0300a8c0@acer345t>
Date:Mon, 23 Apr 2001 22:12:18 +0800

He/she/it tries with the subject:
qmail-qread and qmail-qstat as suid root..
Re: qmail, qmail-command and procmail
Re: Hide firewall ?
Re: Very slow qmail response
Re: tcpserver help
Re: Fw: How to block an email id in qmail?
Re: I am back to square ONE...
Mail cleansing program
Re: Can't establish SMTP connection (Error 4.4.1)
Re: Qmail and Procmail

Gustav

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net