Re: freaking MS crap
Kurth Bemis wrote: I own a ISP and we're having problems with the "Snowhite Virus" and outlook users...its running rampant..from about 3 weeks back we got one or 2 bounces a week..now we're up to 40 a day It's not just Outlook users. It does much more than just read their address book. See http://www.vet.com.au/html/zoo/descriptions/hybris.htm for more info. I have created a controls/badmailfrom and added [EMAIL PROTECTED] however mail still goes thoughany ideas why this isn't rejecting mail? Yes. The badmailfrom file rejects mail that has the "MAIL FROM:" field in the file. If you look at the mail headers closely, you'll see that the MAIL FROM: field is actually "" and it's the "From:" field that is "Hahaha [EMAIL PROTECTED]". Try using qmail-scanner to solve this problem. You don't need a virus scanner to do it - the quarrantine-attachements.txt file will let you block the mail. Cheers, -- Andrew Hill "Right now, I'd happily snort gunk from the sink if it would take my brain somewhere away from here" - JB
Re: how do I block this SPAM?
[EMAIL PROTECTED] wrote: We're getting dozens of these SPAM now every day just on a single admin account. There is a flood going to user mail boxes too. I've not been successful blocking it with badmailfrom or badmailpatterns. procmail yes, but I'd rather push them back. It's coming from all over the place. We're running qmail-1.03 with the SPAMCONTROL patch. Can anyone help me with this please? Note that as mentioned before, this is not SPAM, it's a virus. See http://www.vet.com.au/html/zoo/descriptions/hybris.htm for more information. You can block this quite effectively with qmail-scanner. See http://qmail-scanner.sourceforge.net/ for more information. An entry in quarantine-attachments.txt of: Hahaha [EMAIL PROTECTED] Virus-From: Win32.Hybris would be effective without your having to purchase a virus scanner for your system. Cheers, -- Andrew Hill "Right now, I'd happily snort gunk from the sink if it would take my brain somewhere away from here" - JB
Re: not sure what the subject should be
Timothy Falardeau wrote: I have qmail running on Linux.cima.org. and all my mail mail must be sent to [EMAIL PROTECTED] What I want to know and have yet to find documented is how to have the mail sent to [EMAIL PROTECTED] anyone shed some light here? See question/answer 3.1 in the FAQ. Cheers, -- Andrew Hill "Right now, I'd happily snort gunk from the sink if it would take my brain somewhere away from here" - JB
Forwarding Unknown Users vpopmail
Hi, I want to forward all mail to unknown users to another mail host. The qmail FAQ suggests putting the line: | forward "$LOCAL"@newmail.domain.com in ~alias/.qmail-default. However, the domain in question is a virtual domain, being handled by vpopmail. So, I have made sure that the .qmail-default file is located in /home/vpopmail/domains/domain.com. However, email is being forwarded to the address of form: [EMAIL PROTECTED] Is there a simple (or otherwise!) way to modify the $LOCAL variable to remove the domain.com- prefix to the username? TIA, -- Andrew Hill
Re: Forwarding Unknown Users vpopmail
Andrew Hill wrote: However, email is being forwarded to the address of form: [EMAIL PROTECTED] Is there a simple (or otherwise!) way to modify the $LOCAL variable to remove the domain.com- prefix to the username? Thanks to off-list helpers! It now works, using: VAR =| echo "$LOCAL" | cut -d "-" -f 2 | forward "$VAR"@newmail.com Cheers, -- Andrew Hill
Re: tcprulescheck
Chris Johnson wrote: It looks like you might be using an older version of tcprulescheck. Try this and see what happens: tcprulescheck /etc/tcp.smtp.cdb 203.34.190.170 Same thing as before, I'm afraid. tcpserver, tcprules and tcprulescheck were all installed from ucspi-tcp-0.88. Cheers, -- Andrew Hill
Re: tcprulescheck
"Brian D. Winters" wrote: It looks like Chris Johnson is using an old version of tcprulescheck. ;) A careful read of http://cr.yp.to/ucspi-tcp/tcprulescheck.html gives the correct semantics for version 0.88. Try this: TCPREMOTEIP=203.34.190.170 tcprulescheck /etc/tcp.smtp.cdb Brian, Well, I don't know what parts you are carefully reading that indicate that you should use the above command, becuase to me, the page says to use the command: tcprulescheck cdb Anyway, the command you have suggested still gives me the same result as before. I appreciate the help everyone - please keep the suggestions coming! Cheers, -- Andrew Hill
Re: tcprulescheck
"Brian D. Winters" wrote: heading does not constitute a careful reading. :) If you bother to keep going, the paragraph explains that tcprulescheck uses the contents of the environment variables TCPREMOTEIP, TCPREMOTEHOST, and TCPREMOTEINFO to determine which entry in the cdb to return. If all three are unset, you get the default rule back. If you don't want the default rule, set one or more of them. Apparently your shell doesn't support that syntax. (Maybe you use (t)csh?) What you need to do is set the environment variable TCPREMOTEIP to the address you want to test, and then run "tcprulescheck /etc/tcp.smtp.cdb". In (t)csh, the syntax is: setenv TCPREMOTEIP 203.34.190.170 tcprulescheck /etc/tcpserver/tcp.smtp.cdb Ah, okay. Sorry, I'm not very coherent with shells :-( However, I've tried this in another way (export TCPREMOTEIP=203.34.190.170), in a previous post. Paul Jarc wrote: setting the environment variable. Hmm... have you tried setting all three variables? I have now: # export TCPREMOTEIP=203.34.190.170 # echo $TCPREMOTEIP 203.34.190.170 # export TCPREMOTEHOST=fornax.net # echo $TCPREMOTEHOST fornax.net # export TCPREMOTEINFO=list # echo $TCPREMOTEINFO list # /usr/local/bin/tcprulescheck /etc/tcp.smtp.cdb default: allow connection Did I get that right? I'm hope that's what $TCPREMOTEHOST and $TCPREMOTEINFO should be. Cheers, -- Andrew Hill
Re: tcprulescheck
"Brian D. Winters" wrote: You appear to be running things correctly, but I can't say if that's the right result. Does /etc/tcp.smtp say that 203.34.190.170 should be allowed to connect? Does /etc/tcp.smtp contain any rules at all? Have you recreated /etc/tcp.smtp.cdb since you added rules to /etc/tcp.smtp? If the answers are all yes, you should be in good shape. Oh, *expletive*! I had a typo in /etc/tcp.smtp. How did I miss that? My sincerest apologies for wasting everyone's time, and thanks for your help. Cheers, -- Andrew Hill
tcprulescheck
Hi, I'm trying to get relaying going with QMail for local IP addresses. I've installed tcpserver, and modified startup to run QMail under tcpserver. Using ps, I can see qmaild running as: qmaild /usr/local/bin/tcpserver -x /etc/tcp.smtp.cdb -u 503 -g 502 0 smtp /var/qmai... In /etc/tcp.smtp I have: 203.34.190.129-254:allow,RELAYCLIENT="" 127.0.0.:allow,RELAYCLIENT="" I've run: tcprules /etc/tcp.smtp.cdb /etc/tcp.smtp.tmp /etc/tcp.smtp However, when I check the rules using: tcprulescheck /etc/tcp.smtp.cdb I get: default: allow connection Should I be seeing something else here that indicates that RELAYCLIENT has been set for the IP's I've specified? TIA, -- Andrew Hill
Re: IMAP, Maildir and LDAP
"Ricardo D. Albano" wrote: Does courier-imap support Maildir format and LDAP valitation ? I can't find this in the docs. The install notes for courier-imap have this information: http://www.inter7.com/courierimap/INSTALL.html -- Andrew Hill
Re: tcprulescheck
Chris Johnson wrote: Read http://cr.yp.to/ucspi-tcp/tcprulescheck.html Thanks Chris, I've read the above, (and your helpful page at http://www.palomine.net/qmail/selectiverelay.html) but it still doesn't tell me what I should expect to see when testing with tcprulescheck. The only thing that I didn't try before was setting the $TCPREMOTEIP environment variable (I assume that's what the page you suggested means). However, setting that variable to 203.34.190.170 (an IP in the range I've set as to allow relaying), and I still get the same message with tcprulescheck, i.e. # echo $TCPREMOTEIP 203.34.190.170 # /usr/local/bin/tcprulescheck /etc/tcp.smtp.cdb default: allow connection So I'm still not sure if it's tcprules/tcpserver that's not working, or if there is some other reason that's fouling up relaying for me Cheers, -- Andrew Hill
vpopmail 4.8a Upgrade
I'm trying to upgrade vpopmail to version 4.8a. However, when I try to ./configure, I get an error that the tcprules program cannot be found. Thing is, I don't think I needed to specify this when I installed vpopmail 3.4, and can't find tcprules anywhere on my system. Where should tcprules be coming from? What installation am I missing? TIA, -- Andrew Hill
Drop in sendmail replacement for CGI
Hi, I've just installed QMail, and am trying to use the drop in replacement for sendmail in /var/qmail/bin/. Whenever I run the program, I get the following error: sendmail: fatal: unable to run qmail-inject Anyone able to help? TIA, -- Andrew Hill
Re: Drop in sendmail replacement for CGI
Dave Kelly wrote: Do you need to do this? $ chmod 755 /var/qmail/bin/qmail-inject No - but how embarrasment: my script had actually overwritten qmail-inject! Thanks for the sideways hint - it's working like a dream now. Cheers, -- Andrew Hill
