Re: urgent ! how to log Ip addresses with current time with qmail-smtpd /tcpserver
Try filtering the logs through "tai64nlocal" or add "!tail64nlocal" to your multilog invocation. Henry Prashant Desai wrote: hello list i am running qmail-smtpd under tcpserver, i am using multilog prog for logging and maintaining qmail logs, but i desperately needs to log Ip addresses for spam detection , we are running an ISP we need to findout the guy/customer who is sending lot of junk mails by relating IP address/time in qmail-smtpd logs with the radius logs , i think this is the only way by which i can find out who is sending junk mails from out mail servers thanks Regards Prashant Desai begin:vcard n:Baragar;Henry tel;cell:416-453-5626 tel;work:416-453-5626 x-mozilla-html:TRUE url:www.instantiated.on.ca org:Instantiated Software Inc. adr:;;130 Banff Road;Toronto;Ontario;M4P 2P5;Canada version:2.1 email;internet:[EMAIL PROTECTED] title:Principal fn:Henry Baragar end:vcard
Re: QMail and Win NT user auth
You might find something in SAMBA (www.samba.org). Henry Hello to everyone, My company has the mail server running on Exchange 5.0 (needles to say it works like hell) and I would like to move all the accounts on Linux QMail:PROBLEM: Is it possible to authentificate the QMail users against the an NT station? --(at this time when the user logs on to check his mail on Exchnage he uses the same user/pass that he uses to log on to the local domain) --I mean ... Is there any way that I can use the same NT Domain Logon based system (the file) to auth my further QMail users when checking their mail. If so PLEASE tell me how or give me some links... Thank youRegards,Victor begin:vcard n:Baragar;Henry tel;cell:416-453-5626 tel;work:416-453-5626 x-mozilla-html:TRUE url:www.instantiated.on.ca org:Instantiated Software Inc. adr:;;130 Banff Road;Toronto;Ontario;M4P 2P5;Canada version:2.1 email;internet:[EMAIL PROTECTED] title:Principal fn:Henry Baragar end:vcard
Re: problems with qmailanalog utils
Jens, You need to find "tai64nfrac" and run it on the logs produced by multilog in order to convert the tai64 time stamps to the fractional ones expected by zoverall. Henry hi brett, thanks for your hint with multilog. now it works ! and, yes, i know lwq and it's great ! ps: zoverall always throws a "division by zero error". did you notice and fix it ? OK Start by looking at Life With Qmail and setting up your logging using multilog. Also, you may want to look at using qmail-mrtg as well since it provides nice pretty graphs that show change in time quite well or where specific problems/bottlenecks occur. When using in parallel with mrtg graphs from routers and gateways, it can make management much easier... regards, jens --- instant networks - netzwerkmanagment internetfullservices http://www.instant-networks.de begin:vcard n:Baragar;Henry tel;cell:416-453-5626 tel;work:416-453-5626 x-mozilla-html:TRUE url:www.instantiated.on.ca org:Instantiated Software Inc. adr:;;130 Banff Road;Toronto;Ontario;M4P 2P5;Canada version:2.1 email;internet:[EMAIL PROTECTED] title:Principal fn:Henry Baragar end:vcard S/MIME Cryptographic Signature
Re: RBL list
Tonino, The RBL uses DNS, so if your DNS server is local then it is caching copies of the RBL list locally. Henry TAG wrote: Hi, Is there a way of keeping a local copy of the RBL lists and using those instead of trying to get it from the remote site - should this not speed things up - I also know that the list is updated all the time - but can some of you peoples please comment... Thanks Tonino begin:vcard n:Baragar;Henry tel;cell:416-453-5626 tel;work:416-453-5626 x-mozilla-html:TRUE url:www.instantiated.on.ca org:Instantiated Software Inc. adr:;;130 Banff Road;Toronto;Ontario;M4P 2P5;Canada version:2.1 email;internet:[EMAIL PROTECTED] title:Principal fn:Henry Baragar end:vcard S/MIME Cryptographic Signature
Re: RBL list
Tonino, I think I spoke too soon (only on my first cup of coffee)... Specific entries will have been cached if they have been seen before, but not necessarily the whole list. However, you can use DNS to get the complete list: see http://maps.vix.com/rbl/usage.html. Henry Henry Baragar wrote: Tonino, The RBL uses DNS, so if your DNS server is local then it is caching copies of the RBL list locally. Henry TAG wrote: Hi, Is there a way of keeping a local copy of the RBL lists and using those instead of trying to get it from the remote site - should this not speed things up - I also know that the list is updated all the time - but can some of you peoples please comment... Thanks Tonino ok - thanks then!! Tonino begin:vcard n:Baragar;Henry tel;cell:416-453-5626 tel;work:416-453-5626 x-mozilla-html:TRUE url:www.instantiated.on.ca org:Instantiated Software Inc. adr:;;130 Banff Road;Toronto;Ontario;M4P 2P5;Canada version:2.1 email;internet:[EMAIL PROTECTED] title:Principal fn:Henry Baragar end:vcard S/MIME Cryptographic Signature
[Fwd: Re: Domain forwarding]
Michael, This can easily be accomplished using qmail: 1. Add first.com and second.com to control/rcpthosts 2. Put second.com (but not first.com) into control/locals 3. Make sure the MX record for first.com in your internal DNS points to MS-Exchange This tells qmail to accept mail for both first.com and second.com, but to handle only second.com locally. Henry Michael Hinds wrote: Hello, Our company has always used MS-Exchange for internet e-mail, but we are trying to add a Linux/qmail server to the configuration. We're currently using a Raptor firewall to route all SMTP transmissions to the MS box. For the sake of example, we'll call our original domain first.com. What we want to do is host a separate domain on the qmail server (say, second.com). The problem is, our firewall can't decide where mail is destined for, it can only recognise the protocol. So we either have to route all mail to qmail and make qmail accept mail for second.com and forward all first.com mail to the MS server, or route all mail to the MS server and make that accept mail for first.com and forward all second.com mail to qmail. The first option would be preferrable, but by now I'm willing to try anything. I'm having trouble finding any concrete examples or documents describing how to do this. I've found lots of ways to forward mail for particular e-mail addresses, but not for whole domains. I don't want to set up users on the qmail server for all the e-mail users on the MS box. I've installed fastforward, but the documentation is skimpy! It points me to the aliases docs, which don't appear to tell me how to do this either. Somebody, please, point me in the right direction! Many thanks, Michael Hinds S/MIME Cryptographic Signature
Re: pop3d questions
Tony, I am doing the same thing. To see readable dates, use: tai64nlocal /var/log/qmail/pop3d/current Henry Tony Campisi wrote: Hi, I created a /var/qmail/supervise/qmail-pop3d/run file #!/bin/sh QMAILDUID=`id -u qmaild` NOFILESGID=`id -g qmaild` exec /usr/local/bin/softlimit -m 200 \ /usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup mailperson2.cardinalservices.com \ /usr/local/bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 21 Does anyone see any drawbacks to running pop3d like this? My /var/log/qmail/pop3d/current files contents look like this: @400039720b74038df72c tcpserver: end 3255 status 256 @400039720b74038ee574 tcpserver: status: 0/40 I want my log files to have dates that I can read. I tried putting this in my /var/qmail/supervise/qmail-pop3d/log/run file but it's not working as planned. exec /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog t | /usr/local/bin/tai64nlocal /var/log/qmail/pop3d Can someone tell me if I am anywhere close to getting this right? thanks tony.campisi begin:vcard n:Baragar;Henry tel;cell:416-453-5626 tel;work:416-453-5626 x-mozilla-html:TRUE url:www.instantiated.on.ca org:Instantiated Software Inc. adr:;;130 Banff Road;Toronto;Ontario;M4P 2P5;Canada version:2.1 email;internet:[EMAIL PROTECTED] title:Principal fn:Henry Baragar end:vcard S/MIME Cryptographic Signature
