Re: Multiple recipients to single box on local machine

[Martin Edlman]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 18 Jul 2001, Dave Sill wrote:

> One of the beauties of qmail is that it does what you tell it to do:
> no more, no less. If you send a message to three recipients that share
> a mailbox, of course qmail will deliver three copies that differ only
> in the Delivered-To header field.
>
> If you want to accept only one copy, you can put a duplicate filter on
> the mailbox, e.g. using Russ Nelson's eliminate-dups script
> (http://www.qmail.org/eliminate-dups) or a procmail recipe like:

thanks, I'll try it.

Edas

- -- 

Martin "Edas" Edlman
http://edas.visaci.cz   Yahoo! msg: edasek   (preferred)
[EMAIL PROTECTED]   ICQ number: 14690530 (deprecated)
PGP/GnuPG public keys: see my homepage  or  92793758

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8

iQA/AwUBO1aIDCc1LHwOXLuEEQKovQCfQm/3zLbfYqNtAltmf/+gAOf0zrQAoPTH
DsZIH84J1XSxWw5FaDrpz0IS
=mOsn
-END PGP SIGNATURE-

Re: Problems compiling qmail-ldap ...

[Henning Brauer]

On Wed, Jul 18, 2001 at 01:55:28PM -0700, John Cope wrote:
> Hello everyone..   I'm trying to compile qmail-ldap and I'm getting the
> following errors:

I already answered your question on the qmail-ldap list.
Why are you crossposting? This qmail-ldap question doesn't belong to the
general qmail list.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

Re: Manually manipulating serialmail queues

[Jörgen Persson]

On Wed, Jul 18, 2001 at 03:38:15PM +0200, Paulo Jan wrote:
> Hi all:
> 
>   I have a customer who is using serialmail to upload their mail through
> their dial-up connection to our mail server. They have two problems:
> 
>   1) Sometimes the dialup line isn't fast enough, and mail piles up. They
> would like to manually move some messages so that serialmail sends them
> before others. How could I do this? I guess that "touch"-ing the files
> so that they have an earlier date would work, but it would be better if
> it was automated (messages from this and that user always get more
> priority). Also, there's the problem of what happens if serialmail is
> already running while they are doing this; would serialmail "catch" that
> change right away? (That is, after sending the current message, it would
> scan again the queue, find the message that has been "touch"-ed, and
> start with it inmediately). Would it do that, or does serialmail scan
> the queue only once (when it starts)?
> 
>   2) Related to the above: sometimes there are messages that don't get
> sent; instead, they just sit in the queue while serialmail is happily
> processing other mails that arrived after them. I suppose that the cause
> might be that serialmail timed out while trying to send them and just
> skipped them... but those mails aren't usually *that* big, just regular
> 3K, 10K, etc., messages. Is there any other cause for this? How could I
> force serialmail to send them?


There is a perfectly good list for serialmail. Subscribe by sending a
mail to <[EMAIL PROTECTED]>.

Serialmail isn't a daemon, something else starts it -- usually a script
that pppd activates. You can solve those problems by adding some
features to whatever starts serialmail.

Jörgen

Re: Why ?

[Charles Cazabon]

zenn <[EMAIL PROTECTED]> wrote:
>  
> Also, I'd like to use SMTP authentication for our roaming laptop users.
> What seems to be the best way to do this ? What is everyone using ?
> I've taken a look at the Qmail web and there seems to be a half a dozen
> options.

That's because there are at least half a dozen schemes which people use.
They all work -- they just serve slightly different purposes or
otherwise do things somewhat differently from each other.

SMTP-after-POP/IMAP and SMTP AUTH seem to be the two most commonly used
solutions.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

err, I mean tmda (was Re: tdma help)

[Mark Jeftovic]

Dyslexia...I meant tmda below, sorry.

-mark


On Wed, 18 Jul 2001, Mark Jeftovic wrote:

> 
> Does anybody know the disposition of tdma right now or the location
> of some tdma mailing list archives that are not at libertine.org?
> 
> ObQmailQuestion:
> 
> what sets EXT3? It appears as though it is the third segment of
> a dot-qmail file.
> 
> I've created a userid on my system, foobar, then created a line
> in virtual hosts a la
> 
> test.foobar.com:foobar
> 
> then in ~foobar I can get all email @test.foobar.com with .qmail-default,
> how do I then get EXT3 set in that case?
> 
> Looking at the tdma source it keys on that to detect a virtual host
> 
> -mark
> 
> 

-- 
mark jeftovic
http://www.easydns.com
http://mark.jeftovic.net

Re: Nessus scan results

[MarkD]

> From Nessus:
> 
> The remote SMTP server did not complain when issued the
> command :
> MAIL FROM: root@this_host
> RCPT TO: |testing

This is a test against a known sendmail vulnerability, not SMTP
servers in general.

> The remote SMTP server did not complain when issued the
> command :
> MAIL FROM: root@this_host
> RCPT TO: /tmp/nessus_test

This is a test against a known sendmail vulnerability, not SMTP
servers in general.

> The remote SMTP server did not complain when issued the
> command :
> MAIL FROM: |testing

This is a test against a known sendmail vulnerability, not SMTP
servers in general.


> There seem to be a buffer overflow in the remote SMTP server
> when the server is issued a too long argument to the 'MAIL FROM'
> command, like :
> 
> MAIL FROM: AAA[...][EMAIL PROTECTED]
> 
> Where AAA[...]AAA contains more than 8000 'A's.

This looks like a test against a known sendmail vulnerability, it's
not a generic SMTP problem.

It appears that Nessus need to get much more specific in the
description of their test results and perhaps much more general in
their tests. It looks like they've combined the security problems of
sendmail and NTMail and labelled it with the more general SMTP term.


Nothing wrong with them having a test, but creating so many false
alarms without explanatary comments is not so good. Furthermore, their
test *could* notice the qmail banner and add a descriptive entry along
the lines of: "You appear to be running qmail, if so, this warning
does not apply".

I guess they'd get tired of adding that to the end of every message
though :>


Regards.

Resolved: pickledbeans.com

[David J Jackson]

All --

As can be seen from the from line messages are now sent to and from
picklebeans.com :)

The sulution was a  combination of:
1) Changing MX record at dyndns.org
2) Adding picklebeans.com to defaulthost and defaultdomain
(Thanks Lakus)
2) and a ...changing my ~/.muttrc "set hostname = pickledbeans.com",
I noticed on my other test acount the From: line was corrrect

  Comments - 

I am amazed at how easily it is to setup a mail server with qmail.

I'm setting up in in the moutains was of Denver, CO (US) with 24K dailup
connection to QWest, AMD 400 K6/2 box running Slackware Linux(7.1) and
a "dynamic DNS" service provided by www.dyndns.org !! All I needed was qmail
a couple of Linux-Howto, INSTALL. And I was 99% to where I wanted to be.
Finaly one email to this list and I'm at 100%.  I had no prior experience (or success) 
setting up mail services/software !! 

SOLVED Re: spamcontrol patch

[Lou Hevly]

At 14:57 18/07/01, Lou Hevly wrote:
>Greetings:
>
>My problem is that I have installed the spamcontrol patch but 
>badrcptto
>is not stopping incoming mails as I expected.  Here are the details:

Answering my own question, it may be that because I originally 
installed
qmail from an OpenBSD package, then did `make setup check` on the
downloaded 1.03 version, that there was a conflict.  So I deleted my
/var/qmail/bin directory, recompiled qmail, did the spamcontrol patch, 
then recompiled qmail, and now all seems well.

-- 
All the best (Adéu-siau),
Lou Hevly
[EMAIL PROTECTED]
http://www.visca.com

RE: External: pickledbeans.com -->mail.pickledbeans.com

[Carlo Borelli]

 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

- -BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dear David,
have you never thinked that the MX record of the ISP's dns resolve
automatically your problem ?
This's a non existant problem.
Regards.

Carlo.

- - -Original Message-
From: davej [mailto:davej]On Behalf Of David J Jackson
Sent: Wednesday, July 18, 2001 4:41 PM
To: [EMAIL PROTECTED]
Subject: External: pickledbeans.com -->mail.pickledbeans.com


Greetings --
Do I need virtual domain or MASQ here?

I've got basic email (qmail-1.3) server setup via dyndns.org the
setup
looks like this:

dnydns.org:
- - --
domainname: pickledbeans.com
hostname:   mail.pickledbeans.com
mx: mail.pickledbeans.com

What I want is internet mail addressed to picklebeans.com not
mail.pickledbeans.com
for all users?

Thanks for you time,
David Jackson

- -BEGIN PGP SIGNATURE-
Version: PGP 7.0.4

iQA/AwUBO1X58fr8TdykRDjtEQLY4ACghwKr18xUZDNnosHo+HW0/AqGb8oAoKrh
Xex1MNDuWt89ZhpASS5coj5J
=A7ap
- -END PGP SIGNATURE-

-BEGIN PGP SIGNATURE-
Version: PGP 7.0.4

iQA/AwUBO1X6Lfr8TdykRDjtEQLqTQCfZNF9PF0JuwRQ9POb7wsxPUkidmAAni7X
VivOH1KYa1b8Eg3xG/Mvwb2a
=wFig
-END PGP SIGNATURE-

Why ?

[zenn]

Title: Message



Hi 
all...
 
I have a 
question.
Why would I need to 
have SSL for SMTP, if I'm using Courier-IMAP with SSL  
?
Is there any 
advantage to use SSL with Qmail-SMTP as apposed to having it with 
Courier-IMAP?
 
Also, I'd like to 
use SMTP authentication for our roaming laptop users.
What seems to be the 
best way to do this ? What is everyone using ?
I've taken a look at the Qmail web and there seems 
to be a half a dozen options.
 
Regards
Zenn

RE: Nessus scan results

[Matt Simonsen]

Thanks for the confirmation ... as to talking to the author, it seems there
was a rather involved discussion about these types of false positives and
they decided to include the warnings rather than risk missing something.
Personally, I may have worded several differently, but after running a test
and knowing that the best it could do was a false positive or tell me other
software had problems it is slightly reassuring!

Thanks again
Matt


>Nothing to worry about -- but you should probably go talk to the author
>of Nessus and point him to www.qmail.org and cr.yp.to.

Re: multiple qmail-send

[Lukas Beeler]

At 22:09 18.07.2001 +0200, you wrote:
>On Wed, Jul 18, 2001 at 09:52:06PM +0200, Lukas Beeler wrote:
> > At 21:40 18.07.2001 +0200, Daniel BODEA wrote:
> > >Can there be, in the normal flow of qmail, multiple instances of
> > >qmail-send running at the same time (?)
> > yes of course... what do you think is the concurrency limit for ?
> > exactly that
>
>WRONG. There is always _one_ qmail-send.
>concurrencylocal   -> max concurrent qmail-local processes
>concurrencyremote  -> max concurrent qmail-remote processes
>1  -> qmail-send process

yes, you're right.. i did not think that far...

> > >  because multithreaded it's not, and I haven't seen any locking
> > > mechanisms for the ressources qmail-send accesses directly.
> > each of those processes send ONE individual message.. so there isn't any
> > locking machanism needed
>
>WRONG.
>This is true for qmail-local/qmail-remote, but not for the queue manager
>qmail-send.
>
> > and in future, please write text/plain and not text/html
>
>ACK.
>
>And you... well, I'd not answer questions here if I am not sure. No offense
>intended, it just confuses.

yes, i didn't think that far, now, i know something, thanks to you
iam really worried about misleading Daniel Bodea
i hope that this won't happen again

>For the original question:
>1 qmail-send -> 1 queue
>
>You can install more than one qmail instace per machine, e. g. in
>/var/qmail/1/, 2/ and so on. Change conf-home and make setup check for each
>instance. You have multiple queues then and must find a solution to balance
>the load between them.
>
>--
>* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
>* Roedingsmarkt 14, 20459 Hamburg, Germany   *
>Unix is very simple, but it takes a genius to understand the simplicity.
>(Dennis Ritchie)

-- 
Lukas "Maverick" Beeler / Telematiker
Project: D.R.E.A.M / every.de - Your Community
Web: http://www.projectdream.org
Mail: [EMAIL PROTECTED]

Problems compiling qmail-ldap ...

[John Cope]

Hello everyone..   I'm trying to compile qmail-ldap and I'm getting the
following errors:

ld: fatal: Symbol referencing errors. No output written to qmail-lspawn
collect2: ld returned 1 exit status
make: *** [qmail-lspawn] Error 1

Here's my ENV:

LD_LIBRARY_PAT=/usr/local/lib
CC=gcc
CPPFLAGS=-I/usr/local/include
LDFLAGS=-L/usr/local/lib
PATH=/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/ccs/bin

I applied the following patches:

qmail-103-dns-patch.patch
qmail-ldap-1.03-2701.patch

Any clues!

- John Cope

Re: Nessus scan results

[dsr]

On Wed, Jul 18, 2001 at 12:25:14PM -0700, Matt Simonsen wrote:
> I got these from Nessus ... a scan of email.careercast.com, running Qmail
> 1.03. I have to believe they are all non-issues because I saw several
> threads relating to the way Qmail hadles pipes, but perhaps somebody out
> there can confirm them all as false alarms. The last ones are probably the
> ones that are the most worrysome out of all of them.
> 
> 
> From Nessus:
> 
> The remote SMTP server did not complain when issued the
> command :
> MAIL FROM: root@this_host
> RCPT TO: |testing

False positive.

> The remote SMTP server did not complain when issued the
> command :
> MAIL FROM: root@this_host
> RCPT TO: /tmp/nessus_test

False positive.

> The remote SMTP server did not complain when issued the
> command :
> MAIL FROM: |testing

False positive, and a repeat as well.

> There is a buffer overflow
> when this MTA is issued the 'HELO' command
> issued by a too long argument.

No there isn't.

> It was possible to perform
> a denial of service against the remote
> Interscan SMTP server by sending it a special long HELO command.

No it wasn't, and you aren't running Interscan.

> There seem to be a buffer overflow in the remote SMTP server
> when the server is issued a too long argument to the 'MAIL FROM'
> command, like :
> 
> MAIL FROM: AAA[...][EMAIL PROTECTED]
> 
> Where AAA[...]AAA contains more than 8000 'A's.

False positive. 

> There is a problem in NTMail3, which allows anyone to
> use it as a mail relay, provided that the source adress is set to '<>'.
> This problem allows any spammer to use your mail server to spam the
> world, thus blacklisting your mailserver, and using your network
> resources.

I'm sure there is, but Qmail is not NTMail, is it?

Nothing to worry about -- but you should probably go talk to the author
of Nessus and point him to www.qmail.org and cr.yp.to.

-dsr-

RE: Nessus scan results

[Tim Hunter]

did you look at your logs at all to watch how qmail silently does nothing?


-Original Message-
From: Matt Simonsen [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 18, 2001 3:25 PM
To: Qmail@List. Cr. Yp. To
Subject: Nessus scan results


I got these from Nessus ... a scan of email.careercast.com, running Qmail
1.03. I have to believe they are all non-issues because I saw several
threads relating to the way Qmail hadles pipes, but perhaps somebody out
there can confirm them all as false alarms. The last ones are probably the
ones that are the most worrysome out of all of them.


>From Nessus:

The remote SMTP server did not complain when issued the
command :
MAIL FROM: root@this_host
RCPT TO: |testing

This probably means that it is possible to send mail directly
to programs, which is a serious threat, since this allows
anyone to execute arbitrary command on this host.

NOTE : ** This security hole might be a false positive, since
some MTAs will not complain to this test, and instead will
just drop the message silently **

Solution : upgrade your MTA or change it.

Risk factor : High
CVE : CAN-1999-0163

. Vulnerability found on port smtp (25/tcp) :




The remote SMTP server did not complain when issued the
command :
MAIL FROM: root@this_host
RCPT TO: /tmp/nessus_test

This probably means that it is possible to send mail directly
to files, which is a serious threat, since this allows
anyone to overwrite any file on the remote server.

NOTE : ** This security hole might be a false positive, since
some MTAs will not complain to this test and will
just drop the message silently. Check for the presence
of file 'nessus_test' in /tmp ! **

Solution : upgrade your MTA or change it.

Risk factor : High
CVE : CVE-1999-0096

. Vulnerability found on port smtp (25/tcp) :




The remote SMTP server did not complain when issued the
command :
MAIL FROM: |testing

This probably means that it is possible to send mail
that will be bounced to a program, which is
a serious threat, since this allows anyone to execute
arbitrary command on this host.

NOTE : ** This security hole might be a false positive, since
some MTAs will not complain to this test, but instead
just drop the message silently **

Solution : upgrade your MTA or change it.

Risk factor : High
CVE : CAN-1999-0203

. Vulnerability found on port smtp (25/tcp) :


There is a buffer overflow
when this MTA is issued the 'HELO' command
issued by a too long argument.

This problem may allow an attacker to
execute arbitrary code on this computer,
or to disable your ability to send or
receive emails.

Solution : contact your vendor for a
patch.

Risk factor : High
CVE : CAN-1999-0284

. Vulnerability found on port smtp (25/tcp) :


It was possible to perform
a denial of service against the remote
Interscan SMTP server by sending it a special long HELO command.

This problem allows a cracker to prevent
your Interscan SMTP server from handling requests.

Solution : contact your vendor for a patch.

Risk factor :
Serious


. Vulnerability found on port smtp (25/tcp) :


There is a buffer overflow
when this MTA is issued the 'HELO' command
issued by a too long argument (12,000 chars)

This problem may allow an attacker to
execute arbitrary code on this computer,
or to disable your ability to send or
receive emails.

Solution : contact your vendor for a
patch.

Risk factor : High
CVE : CAN-2000-0042

. Vulnerability found on port smtp (25/tcp) :



There seem to be a buffer overflow in the remote SMTP server
when the server is issued a too long argument to the 'MAIL FROM'
command, like :

MAIL FROM: AAA[...][EMAIL PROTECTED]

Where AAA[...]AAA contains more than 8000 'A's.

This problem may allow a cracker to prevent this host
to act as a mail host and may even allow him to execute
arbitrary code on this sytem.


Solution : Contact your vendor for a patch

Risk factor :
High


. Warning found on port smtp (25/tcp)


There is a problem in NTMail3, which allows anyone to
use it as a mail relay, provided that the source adress is set to '<>'.
This problem allows any spammer to use your mail server to spam the
world, thus blacklisting your mailserver, and using your network
resources.

Risk factor : Medium.

Solution : There are no solution provided by the author of NTMail,
so you might want to change mail servers
CVE : CAN-1999-0819

. Information found on port smtp (25/tcp)

Re: multiple qmail-send

[Daniel BODEA]

thanks

it's how I actually expected it to function
too bad it's the misleading responses the ones that come up first

dan

- Original Message -
From: "Henning Brauer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 18, 2001 10:09 PM
Subject: Re: multiple qmail-send


> On Wed, Jul 18, 2001 at 09:52:06PM +0200, Lukas Beeler wrote:
> > At 21:40 18.07.2001 +0200, Daniel BODEA wrote:
> > >Can there be, in the normal flow of qmail, multiple instances of
> > >qmail-send running at the same time (?)
> > yes of course... what do you think is the concurrency limit for ?
> > exactly that
>
> WRONG. There is always _one_ qmail-send.
> concurrencylocal   -> max concurrent qmail-local processes
> concurrencyremote  -> max concurrent qmail-remote processes
> 1  -> qmail-send process
>
> > >  because multithreaded it's not, and I haven't seen any locking
> > > mechanisms for the ressources qmail-send accesses directly.
> > each of those processes send ONE individual message.. so there isn't any
> > locking machanism needed
>
> WRONG.
> This is true for qmail-local/qmail-remote, but not for the queue manager
> qmail-send.
>
> > and in future, please write text/plain and not text/html
>
> ACK.
>
> And you... well, I'd not answer questions here if I am not sure. No
offense
> intended, it just confuses.
>
> For the original question:
> 1 qmail-send -> 1 queue
>
> You can install more than one qmail instace per machine, e. g. in
> /var/qmail/1/, 2/ and so on. Change conf-home and make setup check for
each
> instance. You have multiple queues then and must find a solution to
balance
> the load between them.
>
> --
> * Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
> * Roedingsmarkt 14, 20459 Hamburg, Germany   *
> Unix is very simple, but it takes a genius to understand the simplicity.
> (Dennis Ritchie)
>

Re: multiple qmail-send

[Daniel BODEA]

Please excuse my HTML side of the email. Won't happen again.

I wasn't asking about qmail-remote or qmail-local. What I was asking is
"Could I EVER see more than 1 qmail-send process running on my system ?". If
I'm not mistaken, it's the qmail-send process the one that adds bounce
addresses to the bounce directory and it's there that I haven't seen any
locking system. Plus qmail-send relies on the good old select method to poll
its inputs so the flow is synchronous.

Dan

- Original Message -
From: "Lukas Beeler" <[EMAIL PROTECTED]>
To: "Daniel BODEA" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, July 18, 2001 9:52 PM
Subject: Re: multiple qmail-send


> At 21:40 18.07.2001 +0200, Daniel BODEA wrote:
> >Can there be, in the normal flow of qmail, multiple instances of
> >qmail-send running at the same time (?)
>
> yes of course... what do you think is the concurrency limit for ?
> exactly that
>
> >  because multithreaded it's not, and I haven't seen any locking
> > mechanisms for the ressources qmail-send accesses directly.
>
> each of those processes send ONE individual message.. so there isn't any
> locking machanism needed
>
> >
> >Thanks,
> >Dan
>
> and in future, please write text/plain and not text/html
>
> --
> Lukas "Maverick" Beeler / Telematiker
> Project: D.R.E.A.M / every.de - Your Community
> Web: http://www.projectdream.org
> Mail: [EMAIL PROTECTED]
>

Re: multiple qmail-send

[Henning Brauer]

On Wed, Jul 18, 2001 at 09:52:06PM +0200, Lukas Beeler wrote:
> At 21:40 18.07.2001 +0200, Daniel BODEA wrote:
> >Can there be, in the normal flow of qmail, multiple instances of 
> >qmail-send running at the same time (?) 
> yes of course... what do you think is the concurrency limit for ?
> exactly that

WRONG. There is always _one_ qmail-send. 
concurrencylocal   -> max concurrent qmail-local processes
concurrencyremote  -> max concurrent qmail-remote processes
1  -> qmail-send process

> >  because multithreaded it's not, and I haven't seen any locking 
> > mechanisms for the ressources qmail-send accesses directly.
> each of those processes send ONE individual message.. so there isn't any 
> locking machanism needed

WRONG.
This is true for qmail-local/qmail-remote, but not for the queue manager
qmail-send.

> and in future, please write text/plain and not text/html

ACK.

And you... well, I'd not answer questions here if I am not sure. No offense
intended, it just confuses.

For the original question:
1 qmail-send -> 1 queue

You can install more than one qmail instace per machine, e. g. in
/var/qmail/1/, 2/ and so on. Change conf-home and make setup check for each
instance. You have multiple queues then and must find a solution to balance
the load between them.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

Re: multiple qmail-send

[Dave Sill]

"Daniel BODEA" <[EMAIL PROTECTED]> wrote:

>Can there be, in the normal flow of qmail, multiple instances of
>qmail-send running at the same time (?) because multithreaded it's
>not, and I haven't seen any locking mechanisms for the ressources
>qmail-send accesses directly. 

one queue == one qmail-send

You can have multiple qmail-send's on system *only* if you have
multiple queues.

-Dave

Re: multiple qmail-send

[Lukas Beeler]

At 21:40 18.07.2001 +0200, Daniel BODEA wrote:
>Can there be, in the normal flow of qmail, multiple instances of 
>qmail-send running at the same time (?)

yes of course... what do you think is the concurrency limit for ?
exactly that

>  because multithreaded it's not, and I haven't seen any locking 
> mechanisms for the ressources qmail-send accesses directly.

each of those processes send ONE individual message.. so there isn't any 
locking machanism needed

>
>Thanks,
>Dan

and in future, please write text/plain and not text/html

-- 
Lukas "Maverick" Beeler / Telematiker
Project: D.R.E.A.M / every.de - Your Community
Web: http://www.projectdream.org
Mail: [EMAIL PROTECTED]

multiple qmail-send

[Daniel BODEA]

Can there be, in the normal flow of qmail, multiple 
instances of qmail-send running at the same time (?) because multithreaded 
it's not, and I haven't seen any locking mechanisms for the ressources 
qmail-send accesses directly.
 
Thanks,
Dan

Re: mailbombed

[Alex Pennace]

On Tue, Jul 17, 2001 at 03:51:00PM -0700, Adam McKenna wrote:
> On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote:
> > A user on a mailserver that we secondary for (don't get me started) has
> > been mailbombed. Currently there are literally 10's of thousands of
> > messages in my queue trying to deliver to him. My mail server's running
> > at a oad of 8 right now. How can I clear out all these messages easily?
> > They are all the same size, so I could use find to look through mess for
> > the file names, then remove them from mess, info and remote. Does that
> > work? Should I stop qmail-send before doing this?
> 
> Add the domain to virtualdomains, like so:
> 
> domain.com:alias-domain
> [...] The
> only problem with this is that all messages for that domain will be deleted,
> not just the person who got mailbombed.

Why delete all messages for that domain when you can handle messages
just for that user?

[EMAIL PROTECTED]:alias-domain

man qmail-send

Nessus scan results

[Matt Simonsen]

I got these from Nessus ... a scan of email.careercast.com, running Qmail
1.03. I have to believe they are all non-issues because I saw several
threads relating to the way Qmail hadles pipes, but perhaps somebody out
there can confirm them all as false alarms. The last ones are probably the
ones that are the most worrysome out of all of them.


>From Nessus:

The remote SMTP server did not complain when issued the
command :
MAIL FROM: root@this_host
RCPT TO: |testing

This probably means that it is possible to send mail directly
to programs, which is a serious threat, since this allows
anyone to execute arbitrary command on this host.

NOTE : ** This security hole might be a false positive, since
some MTAs will not complain to this test, and instead will
just drop the message silently **

Solution : upgrade your MTA or change it.

Risk factor : High
CVE : CAN-1999-0163

. Vulnerability found on port smtp (25/tcp) :




The remote SMTP server did not complain when issued the
command :
MAIL FROM: root@this_host
RCPT TO: /tmp/nessus_test

This probably means that it is possible to send mail directly
to files, which is a serious threat, since this allows
anyone to overwrite any file on the remote server.

NOTE : ** This security hole might be a false positive, since
some MTAs will not complain to this test and will
just drop the message silently. Check for the presence
of file 'nessus_test' in /tmp ! **

Solution : upgrade your MTA or change it.

Risk factor : High
CVE : CVE-1999-0096

. Vulnerability found on port smtp (25/tcp) :




The remote SMTP server did not complain when issued the
command :
MAIL FROM: |testing

This probably means that it is possible to send mail
that will be bounced to a program, which is
a serious threat, since this allows anyone to execute
arbitrary command on this host.

NOTE : ** This security hole might be a false positive, since
some MTAs will not complain to this test, but instead
just drop the message silently **

Solution : upgrade your MTA or change it.

Risk factor : High
CVE : CAN-1999-0203

. Vulnerability found on port smtp (25/tcp) :


There is a buffer overflow
when this MTA is issued the 'HELO' command
issued by a too long argument.

This problem may allow an attacker to
execute arbitrary code on this computer,
or to disable your ability to send or
receive emails.

Solution : contact your vendor for a
patch.

Risk factor : High
CVE : CAN-1999-0284

. Vulnerability found on port smtp (25/tcp) :


It was possible to perform
a denial of service against the remote
Interscan SMTP server by sending it a special long HELO command.

This problem allows a cracker to prevent
your Interscan SMTP server from handling requests.

Solution : contact your vendor for a patch.

Risk factor :
Serious


. Vulnerability found on port smtp (25/tcp) :


There is a buffer overflow
when this MTA is issued the 'HELO' command
issued by a too long argument (12,000 chars)

This problem may allow an attacker to
execute arbitrary code on this computer,
or to disable your ability to send or
receive emails.

Solution : contact your vendor for a
patch.

Risk factor : High
CVE : CAN-2000-0042

. Vulnerability found on port smtp (25/tcp) :



There seem to be a buffer overflow in the remote SMTP server
when the server is issued a too long argument to the 'MAIL FROM'
command, like :

MAIL FROM: AAA[...][EMAIL PROTECTED]

Where AAA[...]AAA contains more than 8000 'A's.

This problem may allow a cracker to prevent this host
to act as a mail host and may even allow him to execute
arbitrary code on this sytem.


Solution : Contact your vendor for a patch

Risk factor :
High


. Warning found on port smtp (25/tcp)


There is a problem in NTMail3, which allows anyone to
use it as a mail relay, provided that the source adress is set to '<>'.
This problem allows any spammer to use your mail server to spam the
world, thus blacklisting your mailserver, and using your network
resources.

Risk factor : Medium.

Solution : There are no solution provided by the author of NTMail,
so you might want to change mail servers
CVE : CAN-1999-0819

. Information found on port smtp (25/tcp)

.qmail-default question...

[David Gartner]

Hey all...

I'm curious.  If you have a postmaster-type account called virtuals and all messages 
go there, then re-routed from
there using .qmail files how would you do something like this:

(in virtualdomains)
isp1.net:virtuals-isp1

(in /home/virtuals)

(.qmail-isp1-user1)
user1

(.qmail-isp1-user2)
user512

**(.qmail-isp1-default)
~/Maildir/

If the .qmail files don't define where a user should go, have qmail attempt to deliver 
to a system user with the same
username.  Possible?  Thanks again...

David Gartner

Re: What do others do about the following problem...

[Keary Suska]

Title: Re: What do others do about the following problem...



have you tried the badrcptto patch? That's probably your best answer. There may be another patch that does essentially the same thing, but I haven't compared them and I don't recall the patch name.

Keary Suska
Esoteritech, Inc.
"Leveraging Open Source for a better Internet"

From: "Eric Calvert" <[EMAIL PROTECTED]>
Organization: Caveland Connection
Date: Wed, 18 Jul 2001 13:06:32 -0500
To: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
Subject: What do others do about the following problem...


 
I have a growing problem.  My mail servers spend a good portion of their day sending bounce messages where ex-customers have signed up for a mailing list, but now no longer have an account with me.  For example, [EMAIL PROTECTED] subscribes to the [EMAIL PROTECTED] list.  Some time later, user "a" cancels his/her account.  However, joke-of the-day continues to send email to [EMAIL PROTECTED] for MONTHS even though my mail server correctly responds with the '550 User does not exist' error message.  My server then also sends a full bounce message.  
 
Is there some way to stop this?  It is getting to the point where the bounce messages are taking up MUCH, MUCH more bandwidth than the "real" email, and is even causing noticable delays in delivery times of "real" email to external addresses.
 
I'm using qmail-1.03 on linux-2.2.12smp.  
 
I'm crossposting this on isp-tech and qmail mailing lists.  Please respond personally.
 
Eric Calvert
Caveland Connection
 

RE: What do others do about the following problem...

[Tim Hunter]

Contact somewhere.com and tell them about it.  If they don't/won't/cant stop
it, contact their upstream provider.  In my opinion I treat it like spam.


-Original Message-
From: Eric Calvert [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 18, 2001 2:07 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: What do others do about the following problem...



I have a growing problem.  My mail servers spend a good portion of their day
sending bounce messages where ex-customers have signed up for a mailing
list, but now no longer have an account with me.  For example,
[EMAIL PROTECTED] subscribes to the [EMAIL PROTECTED] list.  Some time
later, user "a" cancels his/her account.  However, joke-of the-day continues
to send email to [EMAIL PROTECTED] for MONTHS even though my mail server
correctly responds with the '550 User does not exist' error message.  My
server then also sends a full bounce message.

Is there some way to stop this?  It is getting to the point where the bounce
messages are taking up MUCH, MUCH more bandwidth than the "real" email, and
is even causing noticable delays in delivery times of "real" email to
external addresses.

I'm using qmail-1.03 on linux-2.2.12smp.

I'm crossposting this on isp-tech and qmail mailing lists.  Please respond
personally.

Eric Calvert
Caveland Connection

tdma help

[Mark Jeftovic]

Does anybody know the disposition of tdma right now or the location
of some tdma mailing list archives that are not at libertine.org?

ObQmailQuestion:

what sets EXT3? It appears as though it is the third segment of
a dot-qmail file.

I've created a userid on my system, foobar, then created a line
in virtual hosts a la

test.foobar.com:foobar

then in ~foobar I can get all email @test.foobar.com with .qmail-default,
how do I then get EXT3 set in that case?

Looking at the tdma source it keys on that to detect a virtual host

-mark

-- 
mark jeftovic
http://www.easydns.com
http://mark.jeftovic.net

Re: mailbombed

[Adam McKenna]

On Tue, Jul 17, 2001 at 05:03:34PM -0700, Jon Rust wrote:
> Anyway, it's been running all day with the new smtproute and the alias
> entry. Logs confirm the messages are being "delivered." I'm all the way
> down to 140,000 queued msgs now. That's after about 7 hours worth of
> processing.  For future reference, how unsafe is just removing the files
> from mess, info, and remote with qmail running?

You might also try increasing concurrencylocal, to speed things up.

--Adam

-- 
Adam McKenna <[EMAIL PROTECTED]> | Sign the Fernando Petition!
http://flounder.net/publickey.html   | http://www.mickaboofriends.org
GPG: 17A4 11F7 5E7E C2E7 08AA|
 38B0 05D0 8BF7 2C6D 110A|

Re: qmail and mailman...cjk

[Will Yardley]

On Wed, Jul 18, 2001 at 02:41:12PM +0300, Constantine Koulis wrote:
> virtual users to my virtual DOmains.
> Do i need or to take care anything special about all this?
> i am at the final step of the mailman.
> how do i setup an aliasses for a user in qmail cause mailman wants aliases 
> with a user.
> i dont have any etc/aliasses

I believe mailman comes with a script to generate the necessary qmail
aliases.  If not, it's available on the 'net' or write one yourself.  

something like this should work

#!/bin/sh
for f in $*
do echo "|/home/mailman/mail/wrapper post ${f}" > /var/qmail/alias/.qmail-$f
echo "|home/mailman/wrapper mailowner ${f}" >
/var/qmail/alias/.qmail-$f-admin
echo "&{f}-admin" > /var/qmail/alias/.qmail-$f-owner
echo "|/home/mailman/wrapper mailcmd ${f}" >
/var/qmail/alias/.qmail-$f-request
done

Re: qmail, tdma, logging (long)

[Adrian Ho]

On Wed, Jul 18, 2001 at 12:15:29PM -0400, Mark Jeftovic wrote:
> |/home/myprivacy/inbound
> |/usr/local/tmda/bin/tmda-filter
> |/home/myprivacy/outbound
> 
> The "inbound" program simply hands off to tmda-filter, conditionally, by
> writing the entire email to STDOUT, is this the proper way to do it?

No, you should use exit codes instead.  "man dot-qmail", specifically
the ERROR HANDLING section.  "man qmail-command" for details on the
exit codes recognized.

> I was opening a pipe to tmda-filter but I couldn't figure out a way to
> then make successful responses to tmda challenges fall through to my
> "outbound" program.

See above.

-- 
Adrian HoTinker, Drifter, Fixer, Bum   [EMAIL PROTECTED]
Archived @:  
Useful URLs:  
  

qmail, tdma, logging (long)

[Mark Jeftovic]

Hi, I have a few questions regarding qmail and tdma, the tdma
archives seem down at the moment (no dns service for libertine.org?)

What I'm trying to do:

1) receive an email for any user at a domain
2) run my own process, if certain conditions are met, it passes through ok
3) otherwise (majority) it hands off to tmda

i've got above three working ok and then

4) if user successfully responds to tmda, i need to run my own process
again

So far, I do it like this:

|/home/myprivacy/inbound
|/usr/local/tmda/bin/tmda-filter
|/home/myprivacy/outbound

The "inbound" program simply hands off to tmda-filter, conditionally, by
writing the entire email to STDOUT, is this the proper way to do it?

I was opening a pipe to tmda-filter but I couldn't figure out a way to
then make successful responses to tmda challenges fall through to my
"outbound" program.

When I started writing to stdout to effect the fall through to tmda,
I started also getting way too much info in the qmail logs, like the
entire email, the environment, etc, is there any way to control that
(example at end of post)

Last, how do I set up tmda to function for multiple users? i.e. I will
have a multitude of users at foobar.ca, and I need the tmda tags to
apply to their own users only.

Sorry to ask so many questions here, and the tmda related ones too, its
just that the tmda list seems out of commission at the moment.

example log overkill:

Jul 18 00:31:39 tex
qmail: 995434299.982280+/>_myPrivacy.ca/>_/>_/>_---_Below_th
is_line_is_a_copy_of_the_message./>_/>_Received:_(qmail_16706_invoked_from_netwo
rk);_18_Jul_2001_04:29:07_-/>_Received:_from_r2d2.easydns.com_([EMAIL PROTECTED]
40.242)/>___by_tex.privateworld.com_with_SMTP;_18_Jul_2001_04:29:07_-/>_Rece
ived:_from_localhost_(markjr@localhost)/>__by_r2d2.easydns.com_(8.11.3/8.11.0)_w
ith_ESMTP_id_f6I4T4t29545/>__for_<[EMAIL PROTECTED]>;_Wed,_18_Jul_2001_00:
29:04_-0400/>_Date:_Wed,_18_Jul_2001_00:29:03_-0400_(EDT)/>_From:_Mark_Jeftovic_
<[EMAIL PROTECTED]>/>_X-Sender:[EMAIL PROTECTED]/>_To:[EMAIL PROTECTED]/E
rror_report_too_long,_sorry./
Jul 18 00:31:39 tex
qmail: 995434299.982280+_(CIRA)_and_participating_.CA_regist
rars_to_pass_through_to_myPrivacy.ca/>_email_addresses_unimpeded._/>_/>_All_othe
r_email_must_go_through_an_additional_step_which_vastly_decreases/>_the_odds_of_
your_email_being_an_Unsolicited_Commercial_Email_(UCE_or_SPAM)./>_/>_To_complete
_this_process_of_getting_your_email_to_the_end_user_holding_this/>_myPrivacy.ca_
address,_you_need_merely_reply_to_this_email_or_send_a_message/>_to_the_followin
g_address:/>___/>_/>_/>_which_will_expire_in_5_days_(Mon_Jul_23_04:29:13_2001_UTC)./>___
___/>_Fo
r_more_informatiom_about_myPrivacy.ca_or_to_create_an_account_their/>_for_yourse
lf,_visit_http://myPrivacy.ca/>_/>_Regards,


-- 
mark jeftovic
http://www.easydns.com
http://mark.jeftovic.net

qmail-scanner fatal error

[Michel Rondeau]

hey there everyone,
 
I'm running into a bit of a snag with the 
installation of my qmail-scanner program.  When I run ./configure 
--install, I get the following error:
 

X-Qmail-Scanner-0.96: cannot open for write 
/var/spool/qmailscan/quarantine-attachments.db.tmp - Permission 
denied
Insecure $ENV{ENV} while running setuid @ 
/var/qmail/bin/qmail-scanner-queue.pl line 680
 
Anyone have any ideas what i can do to fix 
it?  I'm completely stumped as are the people that I've consulted to date 
on this problem
 
Thanks!
 
Michel Rondeau

Re: Multiple recipients to single box on local machine

[Dave Sill]

Martin Edlman <[EMAIL PROTECTED]> wrote:

>   I have a maillist running on one server (majordomo/sendmail)
>   and a domain mailbox for domain.com on another server
>   (qmail). There are three addresses from domain.com subscribed
>   to the list (eg. [EMAIL PROTECTED], [EMAIL PROTECTED] and
>   [EMAIL PROTECTED]). When someone posts an e-mail to the list,
>   sendmail sends it to the qmail with all three recipients
>   specified in one mail. What qmail does is that it delivers the
>   mail to the domain mailbox three times.
>   Of course I'd like to have it only once there. Is there any
>   chance that local delivery will work as expected?

One of the beauties of qmail is that it does what you tell it to do:
no more, no less. If you send a message to three recipients that share
a mailbox, of course qmail will deliver three copies that differ only
in the Delivered-To header field.

If you want to accept only one copy, you can put a duplicate filter on
the mailbox, e.g. using Russ Nelson's eliminate-dups script
(http://www.qmail.org/eliminate-dups) or a procmail recipe like:

  # Use a 10Kb cache of Message IDs received to avoid duplicate messages
  :0 Whc: .msgid.lock
  | formail -D 10240 .msgid.cache
  
  # Save probable duplicates for inspection
  :0 a:
  spool/dupes

-Dave

Re: mailbombed

[Greg White]

On Tue, Jul 17, 2001 at 05:03:34PM -0700, Jon Rust wrote:
> Anyway, it's been running all day with the new smtproute and the alias
> entry. Logs confirm the messages are being "delivered." I'm all the way
> down to 140,000 queued msgs now. That's after about 7 hours worth of
> processing.  For future reference, how unsafe is just removing the files
> from mess, info, and remote with qmail running?
> 

It's extremely unsafe -- you will destroy your queue. You shouldn't have
to worry about stopping qmail long enough to do this, tho, it will only
generate a few deferrals, even on a moderately busy mailserver.

GW

-- 
Greg White
Those who make peaceful revolution impossible will make violent
revolution inevitable.
-- John F. Kennedy

RE: php-qmail-sendmail...cjk

[Michael Geier, CDM Systems Admin]

also, -t is not a valid flag for qmail-inject.
see docs http://www.qmail.org/man/man8/qmail-inject.html

probably don't want to be using -i either.

-Original Message-
From: peter green [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 18, 2001 9:13 AM
To: [EMAIL PROTECTED]
Subject: Re: php-qmail-sendmail...cjk


* Mike Hodson <[EMAIL PROTECTED]> [010718 07:45]:
> On Wed, 18 Jul 2001 14:17:18 +0300
> "Constantine Koulis" <[EMAIL PROTECTED]> wrote:
>
> > i did the following to my php.ini file but still dont work.
> > i even did change the path to :/var/qmail/bin/sendmail -t -i or only
> > /var/qmail/bin/qmail-inject -t -i but nothing goes.
> > I have the following message:
> >
> > Warning: mail() is not supported in this PHP build in
> > /usr/local/htdocs/test/newsletter/phpmynewsletter/include/cls.php3 on
line
> > 141
> >
> Did you compile PHP with the c-client 2001 uw-imap library?
> This is required for almost any mail options. The php configure command

Please quit spreading misinformation. PHP's mail() has nothing whatsoever to
do with the IMAP library.

ISTR that PHP has had problems with qmail's sendmail wrapper. In addition to
the other bug report previously linked in this ``thread'', you can also
check out [http://www.php.net/bugs.php?id=11184]. Looks like it may be
4.0.5-specific, though YMMV.

/pg
--
Peter Green : Architekton Internet Services, LLC : [EMAIL PROTECTED]
---
"...this does not mean that some of us should not want, in a rather
dispassionate sort of way, to put a bullet through csh's head."
--- Larry Wall in <[EMAIL PROTECTED]>

External: pickledbeans.com -->mail.pickledbeans.com

[David J Jackson]

Greetings --
Do I need virtual domain or MASQ here?

I've got basic email (qmail-1.3) server setup via dyndns.org the setup
looks like this:

dnydns.org:
--
domainname: pickledbeans.com
hostname:   mail.pickledbeans.com
mx: mail.pickledbeans.com

What I want is internet mail addressed to picklebeans.com not
mail.pickledbeans.com
for all users?

Thanks for you time,
David Jackson

Re: php-qmail-sendmail...cjk

[peter green]

* Mike Hodson <[EMAIL PROTECTED]> [010718 07:45]:
> On Wed, 18 Jul 2001 14:17:18 +0300
> "Constantine Koulis" <[EMAIL PROTECTED]> wrote:
> 
> > i did the following to my php.ini file but still dont work.
> > i even did change the path to :/var/qmail/bin/sendmail -t -i or only 
> > /var/qmail/bin/qmail-inject -t -i but nothing goes.
> > I have the following message:
> > 
> > Warning: mail() is not supported in this PHP build in 
> > /usr/local/htdocs/test/newsletter/phpmynewsletter/include/cls.php3 on line 
> > 141
> > 
> Did you compile PHP with the c-client 2001 uw-imap library?
> This is required for almost any mail options. The php configure command

Please quit spreading misinformation. PHP's mail() has nothing whatsoever to
do with the IMAP library.

ISTR that PHP has had problems with qmail's sendmail wrapper. In addition to
the other bug report previously linked in this ``thread'', you can also
check out [http://www.php.net/bugs.php?id=11184]. Looks like it may be
4.0.5-specific, though YMMV.

/pg
-- 
Peter Green : Architekton Internet Services, LLC : [EMAIL PROTECTED]
---
"...this does not mean that some of us should not want, in a rather
dispassionate sort of way, to put a bullet through csh's head."
--- Larry Wall in <[EMAIL PROTECTED]>

Multiple recipients to single box on local machine

[Martin Edlman]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello,

I have a question which is rather important for me.

I have a maillist running on one server (majordomo/sendmail) and a
domain mailbox for domain.com on another server (qmail).
There are three addresses from domain.com subscribed to the list
(eg. [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED]).
When someone posts an e-mail to the list, sendmail sends it to the
qmail with all three recipients specified in one mail.
What qmail does is that it delivers the mail to the domain mailbox
three times.
Of course I'd like to have it only once there. Is there any chance
that local delivery will work as expected?

I've read http://Web.InfoAve.Net/~dsill/lwq.html#multi-rcpt where
it's explained how it's working over SMTP. Am I supposed to understand
that local delivery works the same way. Strange. I think that local
delivery process should recongize that it will be delivering the same mail
to the same mailbox multiple times and thus avoid this.

How to solve this? I suppose someone already fought this problem.

PLEASE! Send replies not only to the list, but directly to my address too.

Regards,

- -- 

Martin "Edas" Edlman
http://edas.visaci.cz   Yahoo! msg: edasek   (preferred)
[EMAIL PROTECTED]   ICQ number: 14690530 (deprecated)
PGP/GnuPG public keys: see my homepage  or  92793758

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8

iQA/AwUBO1WXhSc1LHwOXLuEEQJldQCcCFZIdssazT9tASAvxkSleeZu7VAAoKpe
NoG7oqlxhwmKNGPs2KV5AGeQ
=JxTs
-END PGP SIGNATURE-

Manually manipulating serialmail queues

[Paulo Jan]

Hi all:

I have a customer who is using serialmail to upload their mail through
their dial-up connection to our mail server. They have two problems:

1) Sometimes the dialup line isn't fast enough, and mail piles up. They
would like to manually move some messages so that serialmail sends them
before others. How could I do this? I guess that "touch"-ing the files
so that they have an earlier date would work, but it would be better if
it was automated (messages from this and that user always get more
priority). Also, there's the problem of what happens if serialmail is
already running while they are doing this; would serialmail "catch" that
change right away? (That is, after sending the current message, it would
scan again the queue, find the message that has been "touch"-ed, and
start with it inmediately). Would it do that, or does serialmail scan
the queue only once (when it starts)?

2) Related to the above: sometimes there are messages that don't get
sent; instead, they just sit in the queue while serialmail is happily
processing other mails that arrived after them. I suppose that the cause
might be that serialmail timed out while trying to send them and just
skipped them... but those mails aren't usually *that* big, just regular
3K, 10K, etc., messages. Is there any other cause for this? How could I
force serialmail to send them?



Paulo Jan.
DDnet.

spamcontrol patch

[Lou Hevly]

Greetings:

My problem is that I have installed the spamcontrol patch but badrcptto
is not stopping incoming mails as I expected.  Here are the details:

I am on OpenBSD 2.8. I have downloaded the spamcontrol patch and
successfully patched ./qmail-1.03 with only the following error 
message:

- excerpt spamcontrol.log -
Hmm...  Looks like a normal diff to me...
The text leading up to this was:
--
|--- qmail-smtpd.c.orig  1998-06-15
|+++ qmail-smtpd.c   2000-11-26
--
Patching file qmail-smtpd.c using Plan A...
Hunk #1 succeeded at 26.
Hunk #2 succeeded at 32.
Hunk #3 failed at 61.
Hunk #4 succeeded at 111.
Hunk #5 succeeded at 130.
Hunk #6 succeeded at 170.
Hunk #7 succeeded at 181.
Hunk #8 succeeded at 198.
Hunk #9 succeeded at 208.
Hunk #10 succeeded at 247 (offset 9 lines).
Hunk #11 succeeded at 359 (offset 9 lines).
Hunk #12 succeeded at 397 (offset 9 lines).
Hunk #13 succeeded at 399 (offset 9 lines).
Hunk #14 succeeded at 408 (offset 9 lines).
Hunk #15 succeeded at 507 (offset 9 lines).
Hunk #16 succeeded at 510 (offset 9 lines).
Hunk #17 succeeded at 517 (offset 11 lines).
Hunk #18 succeeded at 525 (offset 9 lines).
patch:  misordered hunks! output would be garbled
--> qmail-smtpd.8 copied to qmail-smtpd.8.142
-

However, I went ahead and stopped qmail, did `make setup check` and
restarted qmail with the following rc script:

---
/usr/local/bin/tcpserver -H -R -x /home/vpopmail/etc/tcp.smtp.cdb -u 
1006 -g 1002 0 smtp /var/qmail/bin/qmail\
-smtpd 2>&1 | /var/qmail/bin/splogger smtpd &
/usr/local/bin/tcpserver -H -R 0 pop3 /var/qmail/bin/qmail-popup 
visca-server.com /home/vpopmail/bin/vchkpw /\
var/qmail/bin/qmail-pop3d Maildir &


Doing ./qmail-showctl shows the following for badrcptto:

-
badrcptto:
[EMAIL PROTECTED] not accepted in RCPT TO.
---

But when I send a message to [EMAIL PROTECTED] it is accepted:

---
Jul 18 12:50:23 visca-server qmail: 995460623.194943 new msg 264383
Jul 18 12:50:23 visca-server qmail: 995460623.195484 info msg 264383: 
bytes 652 from <[EMAIL PROTECTED]> qp 27804\
  uid 1006
Jul 18 12:50:23 visca-server qmail: 995460623.230268 starting delivery 
2: msg 264383 to local visca.com-bad@v\
isca.com
Jul 18 12:50:23 visca-server qmail: 995460623.230988 status: local 1/10 
remote 0/20
Jul 18 12:50:23 visca-server qmail: 995460623.265772 delivery 2: 
success: POP_user_does_not_exist,_but_will_d\
eliver_to_./junk/did_0+0+1/
Jul 18 12:50:23 visca-server qmail: 995460623.290211 status: local 0/10 
remote 0/20
Jul 18 12:50:23 visca-server qmail: 995460623.290696 end msg 264383


Is this because I'm using vpopmail?  ./badmailfrom works as expected.

Thank you.

-- 
All the best (Adéu-siau),
Lou Hevly
[EMAIL PROTECTED]
http://www.visca.com

Re: php-qmail-sendmail...cjk

[Mike Hodson]

On Wed, 18 Jul 2001 14:17:18 +0300
"Constantine Koulis" <[EMAIL PROTECTED]> wrote:

> i did the following to my php.ini file but still dont work.
> i even did change the path to :/var/qmail/bin/sendmail -t -i or only 
> /var/qmail/bin/qmail-inject -t -i but nothing goes.
> I have the following message:
> 
> Warning: mail() is not supported in this PHP build in 
> /usr/local/htdocs/test/newsletter/phpmynewsletter/include/cls.php3 on line 
> 141
> 
Did you compile PHP with the c-client 2001 uw-imap library?
This is required for almost any mail options. The php configure command
is
./configure --with-imap=/path/to/imap/dir
you can download the c-client imap library from
ftp://ftp.cac.washington.edu/mail/c-client.tar.Z

Mike

-- 
Mike Hodson <[EMAIL PROTECTED]>

qmail and mailman...cjk

[Constantine Koulis]

Hello
i am trying to install mailman on a machine that has already qmail install 
and courier-imap with VMAILMGR and i am using a web interface program to add 
virtual users to my virtual DOmains.
Do i need or to take care anything special about all this?
i am at the final step of the mailman.
how do i setup an aliasses for a user in qmail cause mailman wants aliases 
with a user.
i dont have any etc/aliasses

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Re: php-qmail-sendmail...cjk

[Andrea Cerrito]

> Warning: mail() is not supported in this PHP build in
> /usr/local/htdocs/test/newsletter/phpmynewsletter/include/cls.php3
>  on line
> 141

What kind of build do you have of php? It sounds like a bug of 4.0.5 (you
can solve it by hand, anyway, have a look here
http://www.php.net/bugs.php?id=11623, solved in 4.0.6).

Hope it helps
---
Cordiali saluti / Best regards
Andrea Cerrito
^^
Net.Admin @ Centro MultiMediale di Terni S.p.A.
P.zzale Bosco 3A
05100 Terni IT
Tel. +39 0744 5441330
Fax. +39 0744 5441372

Re: mailbombed

[Jon Rust]

On Tue, Jul 17, 2001 at 03:51:22PM -0700, Adam McKenna wrote:
> On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote:
> > A user on a mailserver that we secondary for (don't get me started) has
> > been mailbombed. Currently there are literally 10's of thousands of
> > messages in my queue trying to deliver to him. My mail server's running
> > at a oad of 8 right now. How can I clear out all these messages easily?
> > They are all the same size, so I could use find to look through mess for
> > the file names, then remove them from mess, info and remote. Does that
> > work? Should I stop qmail-send before doing this?
> 
> Add the domain to virtualdomains, like so:
> 
> domain.com:alias-domain
> 
> then create ~alias/.qmail-domain-default with a single hash ("#") mark in it.
> 
> then add a smtproute to localhost for the domain and restart qmail-send.  The
> only problem with this is that all messages for that domain will be deleted,
> not just the person who got mailbombed.

Thanks Adam. Of course, it took many hours to get this from you. The
total count of messages was close to 250,000, and my mail server has
been almost useless today. I used this technique after someone (dek
IIRC) in the #qmail IRC channel pointed me to

   http://www.faqts.com/knowledge_base/view.phtml/aid/1443

Anyway, it's been running all day with the new smtproute and the alias
entry. Logs confirm the messages are being "delivered." I'm all the way
down to 140,000 queued msgs now. That's after about 7 hours worth of
processing.  For future reference, how unsafe is just removing the files
from mess, info, and remote with qmail running?

sigh... 

last pid: 55460;  load averages:  8.54,  7.28,  7.94   up 42+00:28:06 17:00:12
181 processes: 2 running, 179 sleeping
CPU states: 81.9% user,  0.4% nice,  9.2% system,  2.7% interrupt,  5.8% idle

Thanks again!

jon

Fwd: Re: php-qmail-sendmail...cjk

[Constantine Koulis]

i did the following to my php.ini file but still dont work.
i even did change the path to :/var/qmail/bin/sendmail -t -i or only 
/var/qmail/bin/qmail-inject -t -i but nothing goes.
I have the following message:

Warning: mail() is not supported in this PHP build in 
/usr/local/htdocs/test/newsletter/phpmynewsletter/include/cls.php3 on line 
141

>From: Justin Heesemann <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>Subject: Re: php-qmail-sendmail...cjk
>Date: Wed, 18 Jul 2001 11:09:45 +0200
>
>Hello Constantine,
>
> > and another thing that i can do but dont know how is to somehow say to 
>PHP
> > that my mail program is QMAIL.Anybody knows how?
>
>sendmail_path   =   /var/qmail/bin/qmail-inject
>
>this is what i use in my php.ini (usually located in /usr/local/lib)
>
>it works fine and you don't have to reconfigure anything.
>
>
>Best Regards,
>
>Justin
>
>

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Re: autoresponder install....cjk

[Lou Hevly]

At 10:17 17/07/01, Adrian Ho wrote:
>On Tue, Jul 17, 2001 at 11:15:38AM +0300, Constantine Koulis wrote:
> > I download the autoresponder program from untroubled.org of Bruce 
> Guenter
> > but i dont know how to INSTALL it.
>
>Unpack tarball, "make all install".

Just a note to mention that when I tried to compile
qmail-autoresponder on an OpenBSD 2.8 box I got a "Can't find
getopt.h" error.  I then copied getopt.h from a Linux box into
my /usr/include directory and all went well.


-- 
All the best (Adéu-siau),
Lou Hevly
[EMAIL PROTECTED]
http://www.visca.com

Re: Ok another problem

[Lukas Beeler]

At 11:38 18.07.2001 +0100, Paul Garrett wrote:
>I'm starting again from 'life with qmail' (about 3rd time now) and 
>whenever i put the line:
>

used this already four times... never had a problem

>  SV:123456:respawn:env - PATH=/usr/local/bin:/usr/sbin:/usr/bin:/bin 
> svscan /service /dev/console 2>/dev/console
>
>in the inittab, it comes up with the folling error on the screen over and 
>over again
>
>Supervise: fatal: unable to start qmail-smtpd/run: file does not exist
>/var/qmail/rc: ./Mailbox: No such file or directory

please post:
your logs, your /var/qmail/rc, your /service/qmail-smtpd/run
if /var/qmail/rc refers to other files, please post them too

>
>I then have to remove the line and kill -HUP 1 to stop the errors.  There 
>is a folder called /var/qmail/Mailbox so i dont know why its not finding it.
>

i don't have this folder, and it works fine

>Many thanks
>
>Paul

MfG
-- 
Lukas "Maverick" Beeler / Telematiker
Project: D.R.E.A.M / every.de - Your Community
Web: http://www.projectdream.org
Mail: [EMAIL PROTECTED]

Re: Ok another problem

[Brett Randall]

> "Paul" == Paul Garrett <[EMAIL PROTECTED]> writes:

> I'm starting again from 'life with qmail' (about 3rd time now) and
> whenever i put the line:  

Your tendency to fail a step-by-step task amazes me.

>  SV:123456:respawn:env - PATH=/usr/local/bin:/usr/sbin:/usr/bin:/bin
> svscan /service > /dev/console 2>/dev/console

Yay. We got a line right.

> in the inittab, it comes up with the folling error on the screen over and over again

Nice spelling.

> Supervise: fatal: unable to start qmail-smtpd/run: file does not exist

What are the contents of /service/qmail-smtpd/run ? In particular,
what is the first line? Does it refer to a program that really exists?
Try typing that line on the command line without the #! and see if it
comes up with an error message, or does nothing. Also, make sure the
permissions of /service/qmail-smtpd/run are 0755.

> /var/qmail/rc: ./Mailbox: No such file or directory

Have you put a carriage return where one doesn't belong? C'mon
now... We all know that the enter key in a shell script is a bad
thing. This isn't C we're talking about here...

> I then have to remove the line and kill -HUP 1 to stop the errors. 
> There is a folder called /var/qmail/Mailbox so i dont know why its
> not finding it.

Ughhh... You have badly misunderstood how qmail works, my friend. Read
some more doco before you post again.

> Many thanks

> Paul

Don't like to take the crap outta ya (well, actually, I do...) but
please read and investigate for more than five minutes before you
install qmail. There are many points that can go wrong if you do not
follow the instructions precisely, and understand how mail and unix
work.

Sit down, drink a cup of tea that's been spiked with something
relaxing, and try again...

B.
-- 
"Indeed, it would not be an exaggeration to describe the history of
the computer industry for the past decade as a massive effort to keep
up with Apple."

- Byte, December 1994

Ok another problem

[Paul Garrett]

I'm starting again from 'life with qmail' (about 
3rd time now) and whenever i put the line:
 
 SV:123456:respawn:env - 
PATH=/usr/local/bin:/usr/sbin:/usr/bin:/bin svscan /service /dev/console 2>/dev/console
 
in the inittab, it comes up with the folling error 
on the screen over and over again
 
Supervise: fatal: unable to start qmail-smtpd/run: 
file does not exist
/var/qmail/rc: ./Mailbox: No such file or 
directory
 
I then have to remove the line and kill -HUP 1 to 
stop the errors.  There is a folder called /var/qmail/Mailbox so i dont 
know why its not finding it.
 
Many thanks
 
Paul

Re: php-qmail-sendmail...cjk

[Justin Heesemann]

Hello Constantine,

> and another thing that i can do but dont know how is to somehow say to PHP
> that my mail program is QMAIL.Anybody knows how?

sendmail_path   =   /var/qmail/bin/qmail-inject

this is what i use in my php.ini (usually located in /usr/local/lib)

it works fine and you don't have to reconfigure anything.


Best Regards,

Justin

php-qmail-sendmail...cjk

[Constantine Koulis]

Hello.
I want to use a NEWSLETTER for my web site .
I have 2 servers
Server A:
qmail,php-4.0.5,apache,courier/imap,mysql

server b:
sendmail,php4.0.2,apache,cyrus/imap,mysql

In server A when i am trying to send a newsletter i have the following
error:

Warning: mail() is not supported in this PHP build in
/usr/local/htdocs/test/newsletter/phpmynewsletter/include/cls.php3 on line
141

Now i thought to install SENDMAIL in server A in order to install and
configure again PHP-APACHE-MYSQL and after uninstall it.

I want to know will this function influence the qmail program?

and another thing that i can do but dont know how is to somehow say to PHP
that my mail program is QMAIL.Anybody knows how?

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

QMAILQUEUE

[KIM]

Hi

How is the right command to patch the QMAILQUEUE? is it ok to patch even
thoug my qmail is not clean anymore i mean i already used it
for a month.

Im using Linux 6.2.

Thank You!