Re: From sendmail to qmail
Boris [EMAIL PROTECTED] writes: Thats all to check for valid ip/dns of the sender. What are `valid IP addresses'? I assume you expect a check if the given sender domain has a valid MX or A record. I think it's a bad idea to do such checking for several reasons: 1. I costs time and other resources. SMTP latency is high and this approach increases it by orders of magnitude. In other words - it decreases throughput. 2. It doesn't help against spammers. Like all other technical approaches it is subject to the anti-fax effect (look at the qmail list archive to see what this means: http://www.ornl.gov/its/archives/mailing-lists/qmail/1999/01/msg00777.html) The approach only forces spammers to use resolveable domain names with all the bad consequences for the owners of that domains. 3. It's often plain wrong implemented - about half of the double bounces I have to manage at work result from brain dead anti-spam patches on sendmail boxes that don't let through the empty envelope sender. A quarter of double bounces results from boxes that check the envelope sender and generate permanent errors when their BIND server is overloaded. I personally tend to block all of such hosts until they fix their broken setup but many of them are important partners and clients of our company. My boss even doesn't allow me to tell them that they are doing something wrong. Shitty politics ... I agree with Dan Bernstein that the only ways to fight SPAM are legal actions against them and transferring the costs for email to the sender. Is there an option for qmail? I only found some ugly patches/scripts/workarounds? There are patches that do this. If they are ugly, I don't know. Regards, Frank
Re: From sendmail to qmail
A quarter of double bounces Sorry, I meant bounces, not double bounces. Frank
Re[2]: From sendmail to qmail
Hello Frank, Sunday, April 08, 2001, 3:23:36 PM, you wrote: Is there an option for qmail? I only found some ugly patches/scripts/workarounds? FT There are patches that do this. If they are ugly, I don't know. Ugly is the wrong word. I do not like to use patches and tools, this increases network documentation and costs a lot of time. At the moment of writing, i have learned a lot about qmail and its really interesting, but there are still things to solve for me. At the moment, qmail runs very well. Now i have to do some testings with smtp auth. I want to let in mails to rpcthosts and if the mail is not for these domains, an authorisation is required. I hope that this feature is possible. - dns-check: done with tcpserver - badmailfrom: done - smtp redirect: done - smtp auth: todo - virtual domains: todo - rbl/orbs: done with tcpserver/rblsmtpd... but i am not sure about the orbs patch, use or not to use -( -- Boris
Re: Re[2]: From sendmail to qmail
"Boris" == Boris [EMAIL PROTECTED] writes: snip - smtp auth: todo I use Russell Nelson's version of POPb4SMTP (can't remember what he called it...it's on www.qmail.org). Works very successfully for when our staff travel overseas and want to be able to send mail without having to change their settings. All good e-mail clients allow you to set an option that says "Check for new mail before sending mail". Even the crap ones... You can simply hit "Get Mail"..."Send Mail" to do it. - virtual domains: todo Use vpopmail (or if its really simple stuff, use the virtualdomains file). - rbl/orbs: done with tcpserver/rblsmtpd... but i am not sure about the orbs patch, use or not to use -( Don't use it myself, but if you must use it, then the patch works (from reports I have heard) without major hassles. I've progressed some of the sites on the ORBS list (in particular) and banning e-mail from them would be a major point for my disownment at work. The way my bosses look at is "We can hit the delete key, but if we haven't seen the mail in the first place, what can we do about it?" Different workplaces obviously have different attitudes, however. -- "SOFTWARE, n.: Formal evening attire for female computer analysts." - The Devil's Dictionary to Computer Studies
Re[4]: From sendmail to qmail
Hello Frank, Saturday, April 07, 2001, 12:07:18 AM, you wrote: FT Boris [EMAIL PROTECTED] writes: FT This looks like a mixture of tcpserver's access rules and the badmailfrom FT control file of qmail. Ok, I have understand, interesting. There are some things I have problems with. At first, IP/DNS Checking of the sender. In sendmail, I just enter this: define(`_IP_LOOKUP_',1)dnl define(`_DNSVALID_',1)dnl Thats all to check for valid ip/dns of the sender. Is there an option for qmail? I only found some ugly patches/scripts/workarounds? To prevent me agains spammers, in sendmail I just setup this options: FEATURE(dnsbl,`rbl.maps.vix.com',`Rejected - see http://www.mail-abuse.org/rbl/ ')dnl FEATURE(dnsbl,`dul.mail-abuse.org',`Dialup - see http://www.mail-abuse.org/dul/' )dnl FEATURE(dnsbl,`relays.mail-abuse.org',`Open relay - see http://www.mail-abuse.or g/rss/')dnl FEATURE(dnsbl,`input.orbs.org',`Open relay - see http://www.orbs.org/')dnl I have not found any options in qmail for similar things. Any comments are welcome to help me out with qmail - but i dont want to install thousands of patches, scripts and tools. It would be great to read some useful suggestions for a fast and restorable way. Thanks for your (hopefully) comments. -- Boris
Re[5]: From sendmail to qmail
Hello Boris, Saturday, April 07, 2001, 5:46:31 PM, you wrote: B To prevent me agains spammers, in sendmail I just setup this options: B FEATURE(dnsbl,`rbl.maps.vix.com',`Rejected - see http://www.mail-abuse.org/rbl/ B ')dnl B FEATURE(dnsbl,`dul.mail-abuse.org',`Dialup - see http://www.mail-abuse.org/dul/' B )dnl B FEATURE(dnsbl,`relays.mail-abuse.org',`Open relay - see http://www.mail-abuse.or B g/rss/')dnl B FEATURE(dnsbl,`input.orbs.org',`Open relay - see http://www.orbs.org/')dnl Just for the archive, I found a way for the rbl checking now. It seems to be that I need this package http://cr.yp.to/ucspi-tcp.html and to intall a ruleset first for valid IPs to the "tcpserver". After that i can try something like this tcpserver -p -v -x/etc/tcp.smtp.cdb -u1007 -g1007 0 25 \ rblsmtpd qmail-smtpd 21 described in this howto: http://www.summersault.com/chris/techno/qmail/qmail-antispam.html I am not only waiting for answers - if i find the answer by myself i post it of course for the archives to other qmail-newbies as me. The only problem left is the dns checking thingy. -- Boris [MCSE, CNA] ... X-ITEC : Consulting * Programming * Net-Security * Crypto-Research : [PRIVATE ADDRESS:] : Boris Kster eMail [EMAIL PROTECTED] http://www.x-itec.de : Grne 33-57368 Lennestadt Germany Tel: +49 (0)2721 989400 : 101 PERFECTION - SECURITY - STABILITY - FUNCTIONALITY :.. Everything I am writing is (c) by Boris Kster and may not be rewritten or distributed in any way without my permission.
Re: Re[5]: From sendmail to qmail
"Boris" == Boris [EMAIL PROTECTED] writes: Hello Boris snip Heh...um...hah...um... I mean OK :) -- "Hey, I know this! This is Unix!" - Jurassic Park
From sendmail to qmail
Greetings. I am writing a small book about Linux/FreeBSD since 1999 (just for fun, maybe it will be released someadays, maybe not, who knows). Currently i try to find out the advantages of qmail. It took me some time to get it working, but I am very surprised about the speed. I have changed my production server in realtime from sendmail to qmail. It was not easy, but I have it done. And I was not required to delete sendmail. There are some things I need to know about qmail to complete my work on this chapter. * First, I need to know is there a similar way to stop spammers as in sendmail with /etc/access. This is a very important feature to me. I dont want to use procmail or similar for such a feature, is there an option for it? * Is there a way to forward all outgoing mails to a specific SMTP? * Are there somewhere detailed instructions about implementing RBL/ORBS? * I have read some solution about SMTP AUTH and I need to know what the people outside are using to stop spammers and to authenticate users before they are allowed to send e-mails. What are the currently most used solutions? I have found some, but I would like to know what is used in real environments. It would be great for detailed informations, because its not very easy to find all neccessary informations. Thanks for your time. -- Boris [MCSE, CNA] ... X-ITEC : Consulting * Programming * Net-Security * Crypto-Research : [PRIVATE ADDRESS:] : Boris Kster eMail [EMAIL PROTECTED] http://www.x-itec.de : Grne 33-57368 Lennestadt Germany Tel: +49 (0)2721 989400 : 101 PERFECTION - SECURITY - STABILITY - FUNCTIONALITY :.. Everything I am writing is (c) by Boris Kster and may not be rewritten or distributed in any way without my permission.
Re: From sendmail to qmail
Believe it or not, all the answers to your questions can be found at http://www.qmail.org/top.html ! Brett. "Boris" == Boris [EMAIL PROTECTED] writes: Greetings. I am writing a small book about Linux/FreeBSD since 1999 (just for fun, maybe it will be released someadays, maybe not, who knows). Currently i try to find out the advantages of qmail. It took me some time to get it working, but I am very surprised about the speed. I have changed my production server in realtime from sendmail to qmail. It was not easy, but I have it done. And I was not required to delete sendmail. There are some things I need to know about qmail to complete my work on this chapter. * First, I need to know is there a similar way to stop spammers as in sendmail with /etc/access. This is a very important feature to me. I dont want to use procmail or similar for such a feature, is there an option for it? * Is there a way to forward all outgoing mails to a specific SMTP? * Are there somewhere detailed instructions about implementing RBL/ORBS? * I have read some solution about SMTP AUTH and I need to know what the people outside are using to stop spammers and to authenticate users before they are allowed to send e-mails. What are the currently most used solutions? I have found some, but I would like to know what is used in real environments. It would be great for detailed informations, because its not very easy to find all neccessary informations. Thanks for your time. -- Boris [MCSE, CNA] ... X-ITEC : Consulting * Programming * Net-Security * Crypto-Research : [PRIVATE ADDRESS:] : Boris Kster eMail [EMAIL PROTECTED] http://www.x-itec.de : Grne 33-57368 Lennestadt Germany Tel: +49 (0)2721 989400 : 101 PERFECTION - SECURITY - STABILITY - FUNCTIONALITY :.. Everything I am writing is (c) by Boris Kster and may not be rewritten or distributed in any way without my permission. -- "I wonder what Jesus would do if HE had to reload Windows 95 for the eighth time today ?" - Mirabour Gilbride
Re: From sendmail to qmail
Boris [EMAIL PROTECTED] wrote: There are some things I need to know about qmail to complete my work on this chapter. * First, I need to know is there a similar way to stop spammers as in sendmail with /etc/access. Many people on this list will not be familiar with the detailed workings of sendmail; in general, we run qmail because (among other reasons) we don't want to have to learn sendmail's byzantine configuration. Please explain how this works with sendmail; then we can tell you if there's a qmail equivalent. * Is there a way to forward all outgoing mails to a specific SMTP? Yes, smtproutes. It's trivial. `man qmail-remote` for details. * Are there somewhere detailed instructions about implementing RBL/ORBS? Yes, in many places, including djb's site and www.qmail.org. * I have read some solution about SMTP AUTH and I need to know what the people outside are using to stop spammers and to authenticate users before they are allowed to send e-mails. What are the currently most used solutions? There are SMTP-AUTH patches for qmail. Two other techniques widely employed include selective relaying by IP address, and SMTP-after-POP3/SMTP-after-IMAP. Charles -- --- Charles Cazabon[EMAIL PROTECTED] GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. ---
Re[2]: From sendmail to qmail
Hello Brett, Friday, April 06, 2001, 7:05:27 PM, you wrote: BR Believe it or not, all the answers to your questions can be found at BR http://www.qmail.org/top.html ! hmm, ok. h
Re[2]: From sendmail to qmail
Hello Charles, thankyou for your answer, that will help me a lot. CC Boris [EMAIL PROTECTED] wrote: * First, I need to know is there a similar way to stop spammers as in sendmail with /etc/access. CC Many people on this list will not be familiar with the detailed workings of CC sendmail; in general, we run qmail because (among other reasons) we don't want CC to have to learn sendmail's byzantine configuration. Please explain how CC this works with sendmail; then we can tell you if there's a qmail equivalent. Ok I will show you an example. I think its very important to understand both MTAs to decide whats really better in what situation but this is another story. Here is an example of the access file. 192.168.0 RELAY 127.0.0.1 RELAY From:[EMAIL PROTECTED] 550 Spam denied From:[EMAIL PROTECTED] 550 SPAM F*CK YOU SH*T SPAMMER From:[EMAIL PROTECTED] 550 SPAMMER BUY YOURSELF From:[EMAIL PROTECTED] 550 LOAN YOURSELF, SPAMMER From:[EMAIL PROTECTED] 550 F*** YOU SPAMMER oo.net 550 SPMMMEE It looks like as if this file is similar as the rpcthosts (?) file on qmail, but its not the same. I relay incoming mails from my 192.168.0 class c network as well as localhost mails. But if there is coming a mail from "from:..." the mail will be rejected, and if there is a hostname only, the complete host is denied to send us any mails. This file has nothing to do with outgoing mails. I use this file to setup a mini-light spamfilter and to setup general relaying rules. Fetchmail delivers the mail to sendmail (at the moment to qmail, hahah) so the relaying is allowed. I think its very easy to setup and very easy to handle. Is there a qmail thingy to do the same? * Is there a way to forward all outgoing mails to a specific SMTP? CC Yes, smtproutes. It's trivial. `man qmail-remote` for details. Aha, very interesting to know. * Are there somewhere detailed instructions about implementing RBL/ORBS? CC Yes, in many places, including djb's site and www.qmail.org. Ok. Thanks. * I have read some solution about SMTP AUTH and I need to know what the people outside are using to stop spammers and to authenticate users before they are allowed to send e-mails. What are the currently most used solutions? CC There are SMTP-AUTH patches for qmail. Two other techniques widely employed CC include selective relaying by IP address, and SMTP-after-POP3/SMTP-after-IMAP. CC Charles There is a perl module somewhere I have seen on the qmail page I think I will try this first. Thanks for you answers, they helped me a lot. The next step is to find out how are virtual users working (users without system accounts). After that I think I have completed this part. Qmail is nice, but sendmail is not bad at all i was using sendmail a long time without any problems. Sometimes I think the qmail-people think that sendmail is an enemy to qmail, but I cant understand this. -- Boris
Re: Re[2]: From sendmail to qmail
Boris [EMAIL PROTECTED] writes: 192.168.0 RELAY 127.0.0.1 RELAY From:[EMAIL PROTECTED] 550 Spam denied From:[EMAIL PROTECTED] 550 SPAM F*CK YOU SH*T SPAMMER From:[EMAIL PROTECTED] 550 SPAMMER BUY YOURSELF From:[EMAIL PROTECTED] 550 LOAN YOURSELF, SPAMMER From:[EMAIL PROTECTED] 550 F*** YOU SPAMMER oo.net 550 SPMMMEE It looks like as if this file is similar as the rpcthosts (?) file on qmail, but its not the same. I relay incoming mails from my 192.168.0 class c network as well as localhost mails. This looks like a mixture of tcpserver's access rules and the badmailfrom control file of qmail. Is there a qmail thingy to do the same? Yes - but more separated and cleaner. Relaying has nothing to do with spamming in the first place. Relay control and rejection of specified senders are different tasks and are provided by different programs in qmail. The relaying you control with the rules file of tcpserver, the bad senders are rejected by /var/qmail/control/badmailfrom. Sometimes I think the qmail-people think that sendmail is an enemy to qmail, but I cant understand this. It's the difference in strategic design principles and of course coding practice that binds people to qmail and not sendmail. I don't trust sendmail but qmail. This is based on about ten years watching sendmails security problems. Regards, Frank
newbie: migrating from sendmail to qmail
Hi all! I red that qmail is better than sendmail.=20 This is the reason why migrate to qmail. Problem is, that i am using sendmail on my server where is more then = 1500 active users and I would like easy migrate to qmail .. without any problem. So I am = looking=20 for best introduction (documentation) how to migrate from sendmail to = qmail. Please could you help me? ANSWER PLEASE ON THE EMAIL mailto:[EMAIL PROTECTED] TOO! Thank You very much! S pozdravem, Michal Kolesar +420 608 225025 [EMAIL PROTECTED] http://www.egarden.cz server of free unix services
Re: newbie: migrating from sendmail to qmail
On Tue, Mar 20, 2001 at 10:52:24AM +0100, - = k o l i s k o = - wrote: Hi all! I red that qmail is better than sendmail.=20 This is the reason why migrate to qmail. Problem is, that i am using sendmail on my server where is more then = 1500 active users and I would like easy migrate to qmail .. without any problem. So I am = looking=20 for best introduction (documentation) how to migrate from sendmail to = qmail. Please could you help me? [snip] Take a look at Bernstein's FAQ at http://cr.yp.to/qmail/faq.html Jörgen
Re: newbie: migrating from sendmail to qmail
Problem is, that i am using sendmail on my server where is more then = 1500 active users For the sending side simply use the instructions of the INSTALL* documents in the Qmail tarball. Because the instructions are rather old now you should be aware that there are some better setup options: - Use tcpserver (part of ucspi-tcp) instead of inetd - use daemontools to control all qmail services (daemontools package) - use multilog instead of splogger (part of daemontools package) Additional: - control your resources - you may use softlimit for this (part of daemontools) and I would like easy migrate to qmail .. without any problem. So I am = looking=20 for best introduction (documentation) how to migrate from sendmail to = qmail. You should provide some information about your setup. Is this one domain or are there many? Is your server used for POP access or do the users use a MUA on the server etc. Study the Qmail FAQ and see www.qmail.org or www.lifewithqmail.org for more information. Regards, Frank
Migrating from sendmail to qmail... help
Hi, I am a dial-up user currently running sendmail and am planning to migrate to qmail. This is my current setup: Outgoing Mail: * clients either run sendmail for connect to port 25 and send mail. Sendmail queues the mail but does not send immediately. * every 10 minutes I have a cron job which detects if I am online, and if so calls sendmail -q to flush the outgoing mail queue. Incoming Mail: * The same cron job runs fetchmail which forwards messages on to sendmail. Sendmail then calls procmail via my .forward file to filter mail. I have installed qmail alongside sendmail and have tested it according to the install documents. However, I do not know how to stop it sending mails to remote addresses every time it gets a message. How can I make qmail replicate the behaviour I described above? Also: what issues are there with fetchmail? I only use it to filter mailing list messages, so is there another package which is more suited to qmail for this task? Thanks for any help, Ross Burton
Re: Migrating from sendmail to qmail... help
Am 04.02.2001 um 16:31:12 schrieb Ross Burton: Hi Ross, I have installed qmail alongside sendmail and have tested it according to the install documents. However, I do not know how to stop it sending mails to remote addresses every time it gets a message. How can I make qmail replicate the behaviour I described above? have a look at serialmail. Also: what issues are there with fetchmail? I only use it to filter mailing list messages, so is there another package which is more suited to qmail for this task? Did not use it but - getmail. Fetchmail should also work under some conditions, have a look at Life with qmail, there is a short section about it. -regards /ch
Help! not working after upgrade from sendmail to qmail!
I don't have problem with sendmail. i've just upgrade to qmail few days ago and got this strange problem. some of the remote side randomly gives error 500! especially to aol and psi.net. any ideas? (my system is running bruceg's qmail 1.03+patch rpm on RH6.2) Dec 18 17:45:23 localhost qmail: 977190323.707203 starting delivery 147: msg 18384 to remote [EMAIL PROTECTED] Dec 18 17:45:23 ms qmail: 977190323.708073 starting delivery 148: msg 18384 to remote [EMAIL PROTECTED] Dec 18 17:48:56 ms qmail: 977190536.030830 delivery 147: success: 38.8.139.2_accepted_message./Remote_host_said:_250_OK_id=147wqV-0002PD-00/ Dec 18 17:49:25 ms qmail: 977190565.930745 delivery 148: failure: Connected_to_38.8.139.2_but_sender_was_rejected./Remote_host_said:_500_Comma nd_unrecognized thanks in advance, rgds, Vincent
Shifting from Sendmail to Qmail
Earlier we were having our e-mail using sendmail. Now we have installed Qmail and Sendmail had been disabled/removed because the Plesk Sys Admn (PSA) was installed which automatically replaces Sendmail with Qmail. Now the problem is that we were using e-mail before that but now we are unable to send/receive the e-mails. We are unable to locate the location where the e-mails are being stored. Kindly help Regards Sanjay Arora
Re: Shifting from Sendmail to Qmail
Sanjay Arora [EMAIL PROTECTED] wrote: Earlier we were having our e-mail using sendmail. Now we have installed Qmail and Sendmail had been disabled/removed because the Plesk Sys Admn (PSA) was installed which automatically replaces Sendmail with Qmail. Curious. What is "Plesk Sys Admn"? Now the problem is that we were using e-mail before that but now we are unable to send/receive the e-mails. We are unable to locate the location where the e-mails are being stored. They could be going lots of places, but I'd bet on $HOME/Mailbox or $HOME/Maildir. If it's $HOME/Mailbox, setting the MAIL environment variable to $HOME/Mailbox should be all you need to do. -Dave
[Q]: Moving from sendmail to qmail/vpopmail
I am moving big server from sendmail to qmail and I want to be sure that I didn't forgot something I want all mail which could be delivered to be stored in some account. Is making /var/qmail/alias/.qmail-default sufficient? -- Ondej Sur [EMAIL PROTECTED] Globe Internet s.r.o.http://globe.cz/ Tel: +420235365000 Fax: +420235365009 Plnikova 1, 162 00 Praha 6 Mob: +420602667702 ICQ: 24944126 Mapa: http://globe.namape.cz/ NAJDI.TO http://najdi.to/Chief Administrator and Developer.
From sendmail to Qmail
Hello all, We just moved our mail server from sendmail to qmail... and I received the following from one of our users. Anyone have a clue on this? A) When I send mail now, it works much faster with being accepted. B) But, when I request a return receipt (I use Netscape Communicator/Messenger 4.05), it comes back with a message that the SMTP server cannot process a return receipt request. Return receipts are one of the most useful functions I utilize in my mail. Can it be turned back on? -jason --- Robert J. Adams [EMAIL PROTECTED] http://www.siscom.net Looking to outsource news? http://www.newshosting.com SISCOM Network Administration - President, SISCOM Inc. Phone: 888-4-SISCOM 937-222-8150 FAX: 937-222-8153
Re: From sendmail to Qmail
On Mon, 08 Feb 1999 22:57:47 GMT, Sam [EMAIL PROTECTED] wrote: Robert Adams writes: Hello all, We just moved our mail server from sendmail to qmail... and I received the following from one of our users. Anyone have a clue on this? [...] B) But, when I request a return receipt (I use Netscape Communicator/Messenger 4.05), it comes back with a message that the SMTP server cannot process a return receipt request. Return receipts are one of the most useful functions I utilize in my mail. Can it be turned back on? No clue is required. Qmail simply does not support DSN, a.k.a. "return receipt". What Robert's users may be able to do (and which is IMHO more interesting) is a return receipt when the receipient has read the mail. However this is a function of the MDA, so with the receipient having NS this will work, whereas most text oriented MDAs won't. At least NS4.5 will act like this. Regards Mirko -- mailto:[EMAIL PROTECTED] myhome_aka_~:http://sites.inka.de/picard RedHat=~/rh52_isdn.htmlteles16.3c=~/teles163c/teles163c_contents.html XL97-Classes ~/vba-classes/ be aware of culture www.uni-karlsruhe.de/~etcetera
