Re: WARNING

[George Patterson]

Dan, Why did you need to post that message as html as if the original is 
*distracting* enough?? plain text would have been sufficent...


George

Dan Egli wrote:

> Dude,
> 
>  
> 
> The person sending the virus likely has no idea he (or she) is sending 
> it. The virus infects your winsock32.dll file, so anyone who sends mail 
> using a win32 client (like me for example) is vulnerable. The virus is 
> sent automatically. They don't see it. Chill out, and warn people you 
> are getting it and ask them to scan their systems for the virus. The 
> latest versions of Mcafee and/or Norton Anti-Virus will find and kill 
> the virus.
> 
> -- Dan
> 
> - Original Message -
> 
> *From:* Rembrandt Lensink 
> 
> *To:* [EMAIL PROTECTED] 
> 
> *Cc:* [EMAIL PROTECTED] 
> 
> *Sent:* Sunday, February 11, 2001 3:37 PM
> 
> *Subject:* WARNING
> 
> 
> _Stop sending us your hahaha Snowhite and the 7 Dwarfs E-mail virus 
> or we will chase you and attack your system!!!_
> 

Re: Virus-ridden emails from 'funky gao'?

[George Patterson]

This vius is diffenitely being sent through the list server??

Andy... He (or She??/It!!???) it is aware of it.. At least he/she has 
been notified by me and a few others...


Could we collectively bomb his/her email server that would stop it...??


Regards

George

Andy Bradford wrote:

> On Tue, 16 Jan 2001 08:02:44 EST, "Hubbard, David" wrote:
> 
> 
> 
>> Is everyone else receiving a bunch of emails
>> from 'funky gao'?  Can someone remove this
>> [EMAIL PROTECTED] from the list?  I've
>> received quite a few messages from him this
>> morning, all containing the file Emanuel.exe
>> with a virus.
> 
> 
> Yes, I have been receiving these as well.  Our mail server with 
> qmail-scanner has rejected 16 so far.  They are probably not going 
> back to him so he may not even be aware...
> 
> Andy

Re: virus in list

[George Patterson]

Jose!

Even that is a waste of time...

Goto to www.europe.f-secure.com/v-descs/navidad.html for more 
information...

It could still crash wine as it does some registery modificationa and 
load itself into the system tray... as an icq like icon...

Regards


George Patterson

Jose AP Celestino wrote:

> On Tue, Jan 16, 2001 at 08:03:14PM +0800, Keith, Yeung Wai Kin wrote:
> 
>> don't open attachment emanuel.exe from "funky gao"
> 
> 
> Why should I?
> 
> wine emanuel.exe ?
> 
> Regards.

Re: qmail list reply-to

[George Patterson]

Andrew!

That is exactly the point, we all don't otherwise this %^&&ard program
wouldn't have made it to the list...

Can the list move to a "no attachment" policy ??... lets see 16k
mulitplied by 1500 recipients is about 20 odd Megabytes. That is just
the data for the one message without the message!!


Regards


George Patterson

IT Andrew Bold wrote:

> On Tuesday 16 January 2001 13:04, you wrote:
> 
>> *This message was transferred with a trial version of CommuniGate(tm) Pro*
>> Please check your system I have recieved this attachment "Emanuel.exe" from
>> your addres six times It contains the "win32.Navidad.b" virus
>> thanks
> 
> 
> I was just about to send the same warning when your mail arrived via the 
> list.  It's a good job we all use "mutt" and *nix OSes isn't it? ;^)

Re: Hotmail Woes.

[George Patterson]

Ah, yes. Hotmail is owned by Mirco$oft. The last I heard microsoft tried 
porting Hotmail to Windows NT and it kept crashing and crashing... That 
was before Windows 2k.

So it would make logical sense but is it technically feasible to do so..

Regards


George Patterson

Boz Crowther wrote:

> Isn't Hotmail owned by M$ (has been for a while, actually)?  So, it would
> make sense that they run M$ OSes.
> 
> - Original Message -
> From: "Stefan Laudat" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Friday, January 12, 2001 4:20 PM
> Subject: Re: Hotmail Woes.
> 
> 
> 
>> I see you have Linux 2.4.0-test11.
>> Did you BY (BIG) MISTAKE compile TCP congestion notification in it?
>> Hotmail is quite mad about this. Maybe their routers run M$ windows.
>> 
>> 
>> On Fri, Jan 12, 2001 at 05:36:53PM -0500, Corey Jarvis wrote:
>> 
>>> To whomever,
>>> I am having a wierd problem with hotmail.com smtp connections,
>>> Anyone in the world can send to me however when I send to hotmail.com it
>>> won't accept any smtp connection.
>>> I can send to yahoo or whomever accept to hotmail and certain other
>>> domains.  I know I am not black listed since this machine is brand new.
>>> Any ideas? And I have checked my reverse maps and they work properly.
>>> Signed,
>>> Corey
>>> 
>> 
>> --
>> Stefan Laudat
>> -
>> If rabbits feet are so lucky, what happened to the rabbit?
>> 

Re: freaking MS crap

[George Patterson]

Kurth,

This virus that you speak of doesn't come from the sexxyfun.net but from 
an infected windows machine. Have a look in the full headers look for 
address in a received header..  However it will change for each infected 
machine that sends it.

I contacted the ISP that the email originated from(one of their Dial-up 
customers). The dealt with it promptly.

For more infomation, follow the URL below...
http://www.datafellows.com/v-descs/hybris.htm

Hope this throws some light on the subject...

George Patterson

PS: I agree with the subject line...
HTML Email: Not needed, not wanted, Not appreciated


Kurth Bemis wrote:

> I own a ISP and we're having problems with the "Snowhite Virus" and 
> outlook users...its running rampant..from about 3 weeks back we got one 
> or 2 bounces a week..now we're up to 40 a day
> 
> I have created a controls/badmailfrom and added [EMAIL PROTECTED] however 
> mail still goes thoughany ideas why this isn't rejecting mail?
> I have looked at the logs and it seems that qmail treats it as a regular 
> mail without checking...
> 
> any ideas?
> 
> ~kurth

Re: x_bit_set ... What is that?

[George Patterson]

Orjan, You have got it... :)

.qmail can not be marked as executable. I remember reading about that in 
living with qmail but don't recall the reason. It has soemthing to do 
with security.

try this chmod a-x .qmail for each of the popboxes. Likewise for the 
alias file.

Have fun...

George Patterson

Ørjan Vøllestad wrote:

> I found something that seems right.
> I will check if the .qmail - alias files has executable rights, or the
> alias domains directory.
> I believe that is the case here?
> 
> Ørjan
> 
> -Original Message-
> From: Ørjan Vøllestad 
> Sent: 3. januar 2001 08:25
> To: [EMAIL PROTECTED]
> Subject: x_bit_set ... What is that?
> 
> 
> Jan  3 01:38:32 hoydern qmail: 978482312.433899 starting delivery 26:
> msg 32863 to local [EMAIL PROTECTED]
> Jan  3 01:38:32 hoydern qmail: 978482312.434417 status: local 1/10
> remote 0/20
> Jan  3 01:38:32 hoydern qmail: 978482312.451919 delivery 26: deferral:
> Uh-oh:_.qmail_has_prog_delivery_but_has_x_bit_set._(#4.7.0)/
> Jan  3 01:38:32 hoydern qmail: 978482312.452699 status: local 0/10
> remote 0/20
> 
> Can't find out what this error tell me.."x_bit_set", what is that?
> 
> __
> Ørjan Vøllestad, iTet System AS
> Networkconsulent/Linux
> Alkeveien 4, 9015 Tromsø
> PB. 2033, 9265 Tromsø
> Tel: +47 77 67 91 00, Fax: +47 77 67 91 01
> Dir: +47 77 64 78 22, GSM: +47 95 92 46 77
> E-mail: [EMAIL PROTECTED]
> Web: http://www.iTet.no
> 
> "The LinuX-Files - The source is out there"

Re: relay-ctrl no use?

[George Patterson]

I can't answer qutstion 1...

For question 2 I may be able to help, try the following line... :)

ps axwww

If that doesn't work, we need to know what operating system you are
using for your mail server

Hope is helps a little other wise re post in a weeks time.

shaolei wrote:

> 1.relay ctrl no use?
> 2.how can I see the whole line?
> root   436   429  0 01:22 ?00:00:00 cyclog /var/log/vmailmgrd
> root   470 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-pop3d
> qmaill 471 1  0 01:22 ?00:00:00 accustamp
> qmaill 472 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
> root   473   470  0 01:22 ?00:00:00 tcpserver -v -c40 -u0 -g0 0 pop-
> root   485 1  0 01:22 ?00:00:00 supervise /var/lock/qmail qmail-
> qmaill 486 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
> qmails 487   485  0 01:22 ?00:00:00 qmail-send
> root   501 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-smtpd
> qmaill 502 1  0 01:22 ?00:00:00 accustamp
> qmaill 503 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
< =rest of porecess list snipped= >

Re: Script for adding new qmailusers

[George Patterson]

defender of the protocol wrote:
> 
> I plan on writing a script to do all of that (php is good for more than web
> stuff!).
> 
> When I do, I'll send a link to the list, if anyone's interested. I think
> that some of that user adding stuff is kinda specific to every server, but
> you can modify :)
> 
> - jeremy
> 
> At 06:44 PM 11/9/2000 +0100, you wrote:
> >does someone have or know a good script for creating new mailaccounts
> >using Maildir. Nice if the script makes the useradding, entry in the
> >assignfile (not using /etc/passwd), update of the database and creating of
> >the maildir.
> >
> >Regards,
> >Ruprecht

Another approach...

There is a webmin module for qmail that is about 50% complete but hasn't
been
updated. I like it but it is too incomplete... 

Persoanlly I don't like running a web server on a mail server.
--
[EMAIL PROTECTED]   /"\  Campanha da Fita ASCII - Contra Mail HTML  
Network Administrator   \ /  ASCII Ribbon Campaign - Against HTML Mail
Planet OnlineX  
Vientiane, Lao PDR  / \  Not needed, Not wanted and Not appreciated :)

Re: qmail: Nearly there....finally there

[George Patterson]

I'm not in the habit of talking to myself but Forget about it.. I've
worked it out... mind you was up untill 3:00am working through it. 
Apparently htpasswd is was used for generating the encrypted 
passwords...

Weird but it works... Also have a good reference of the
error messages and what they mean. As I came across them... 

Thanks all for the help... And especially to Andrew (he'll know which
one) for some step by step advice off list...
George

George Patterson wrote:
> 
> What a saga!!!
> 
> I've think I've nearly got it but what is this error message
> 
> Nov  7 17:30:12 planet2 checkpassword: pop3checkpasswd: exit 2 at point
> 6

I left out a colon(:) bewteen the popbox owner and the path to the
popbox... Isn't that typical of computersAnd I read the source to do
so...

> 
> note: planet2 is the machine name of the mail server
> 
> Relevant Stats
> Qmail version: qmail-1.03-11ucspi (RPM)
> 
> --


--
[EMAIL PROTECTED]
Network Administrator
Planet Online
Vientiane, Lao PDR

Error: Nov 7 19:13:52 planet2 checkpassword: pop3checkpasswd: exit 2 at point 6

[George Patterson]

I guess the subject line explains all :

The error is logged in the /var/log/messages. (syslog??)
What is an exit code 2? Where is point 6?


It only occurs when a user with an invalid password attempts to retive
mail form the server. Running ethereal on the network segment reveals
that 
OK <[EMAIL PROTECTED]>
USER user1
+OK 
PASS password
-ERR authorization failed

The users details have been changed to protect the native... :)

I belive it is just the password that is fouling it up...



All other account work fine... They were setup by someone else. He
said to use htpasswd...

 
qMail version: 1.03
OS: redhat linux box...
platform: Intel
--
[EMAIL PROTECTED]
Network Administrator
Planet Online
Vientiane, Lao PDR