Re: Message 252 when VRFYing

2000-03-09 Thread Anthony DeBoer

Russell Nelson <[EMAIL PROTECTED]> writes:
> Well, actually it *could*, under certain conditions.  If you don't
> have any .qmail-.*default's, you could create a CDB containing all the
> valid addresses, which qmail-smtpd could consult after sufficient
> patching.  However, that still has the problem of giving away your
> valid addresses to spammers.  And, .qmail-.*default files are *so*
> useful.

There are situations in which you do want to selectively decline certain
RCPT TO:s.  Real-life example: corporate firewall relays to internal
hosts.  User <[EMAIL PROTECTED]> gets popular with the
spammers then departs for greener pastures.  I still need to accept mail
from the Internet for all foo.internal.example.com users and try to relay
it to them, but I *know* that mail for bob is going to turn into a
bounce-o-gram and end up doublebouncing to me 9 times out of 10.  Being
able to say "550 Unknown User" in the initial SMTP conversation for that
one selected address would save everybody a lot of trouble.

What I picture would be a CDB consulted by qmail-smtpd; it would inhale
the job of rcpthosts and morercpthosts.  For each RCPT address, it would
progressively break it down and check for a match, which would contain an
instruction "bounce with $MSG" or "accept for relaying".  Eg. for
<[EMAIL PROTECTED]> it would check [EMAIL PROTECTED],
[EMAIL PROTECTED], host.example.com, and then .example.com
(followed presumably by .com and "root" lookups, if we get that far, but
nothing useful could be configured at the root level).  Or we could just
check for a user@host record and accept any and all extensions if the
user is valid, thereby saving lookup steps.  Or the user@host record
could say to backup and try extensions if we want to setup such
fine-grained control for that user.

In the default case, you'd setup a single host.example.com:accept record,
but you'd have the option of [EMAIL PROTECTED]:accept, likewise
for the other users, and then host.example.com:550_unknown_user.

Being able to say "550 moved - try <[EMAIL PROTECTED]>" would be
nice too, not that the crap MTAs of the world ever actually tell the user
the actual text from the SMTP rejection.

BTW, is the possibility of spammers checking for valid users via the RCPT
command a real-world problem?  If they really cared, they could set up a
valid mailer to match their MAIL FROM and analyze the bounce.  IMHO
weighing that against the other problem of filling your queues with
bounces-to-spam and having them all doublebounce into your lap does call
for a value judgement here.

-- 
Anthony DeBoer <[EMAIL PROTECTED]>



Re: Message 252 when VRFYing

2000-03-01 Thread Russell Nelson

Timothy L. Mayo writes:
 > qmail does not and will not support VRFY.

Well, actually it *could*, under certain conditions.  If you don't
have any .qmail-.*default's, you could create a CDB containing all the
valid addresses, which qmail-smtpd could consult after sufficient
patching.  However, that still has the problem of giving away your
valid addresses to spammers.  And, .qmail-.*default files are *so*
useful.

-- 
-russ nelson <[EMAIL PROTECTED]>  http://russnelson.com
Crynwr sells support for free software  | PGPok | "Ask not what your country
521 Pleasant Valley Rd. | +1 315 268 1925 voice | can force other people to
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | do for you..."  -Perry M.



Re: Message 252 when VRFYing

2000-03-01 Thread Timothy L. Mayo

qmail does not and will not support VRFY.  Find another way to do what you
want.  VRFY will NOT work.

On Wed, 1 Mar 2000, Shera wrote:

> Hello,
> 
> I am very new to qmail, I have used sendmail for over 2 years for my
> mini-lan.  I am having a slight problem, mail is delivered fine, but when I
> telnet to port 25 and vrfy user I get the message "252 send some mail, i'll
> try my best", Now if I check the RFC this just means that my users arent
> found locally but the mail server will try to send the email (I am a self
> taught sysadmin so excuse me for any term used improperly)  
> 
> In /var/qmail/control/locals   I have my qualified domain
> also in /var/qmail/control/rcpthosts  I have my qualified domain
> 
> My users have there mail going to /$user/Maildir/
>   ** note the mail does go there fine
> 
> I have everything running from one computer so directories and user db are
> all in the same computer
> 
> Since the mail works fine except for this Message 252 there is no big
> problem execpt that I have a program to verify users and it checks the mail
> server with vrfy user and right now my program wont work.  So how do I fix
> it so qmail sees my users as local?
> 
> Thank You,
> Shera - Sysadmin Technology Unlimited PR
> 
> 
> 
> 

-
Timothy L. Mayo mailto:[EMAIL PROTECTED]
Senior Systems Administrator
localconnect(sm)
http://www.localconnect.net/

The National Business Network Inc.  http://www.nb.net/
One Monroeville Center, Suite 850
Monroeville, PA  15146
(412) 810- Phone
(412) 810-8886 Fax



Re: Message 252 when VRFYing

2000-03-01 Thread Anand Buddhdev

On Wed, Mar 01, 2000 at 12:45:19PM -0400, Shera wrote:

> Since the mail works fine except for this Message 252 there is no big
> problem execpt that I have a program to verify users and it checks the mail
> server with vrfy user and right now my program wont work.  So how do I fix
> it so qmail sees my users as local?

qmail-smtpd does not verify local users. This is how it is designed. It
always return 252 to clients who attempt to use VRFY, whether the user
exists or not.

-- 
See complete headers for more info



Re: Message 252 when VRFYing

2000-03-01 Thread Dave Sill

Shera <[EMAIL PROTECTED]> wrote:

>I am very new to qmail, I have used sendmail for over 2 years for my
>mini-lan.  I am having a slight problem, mail is delivered fine, but when I
>telnet to port 25 and vrfy user I get the message "252 send some mail, i'll
>try my best", Now if I check the RFC this just means that my users arent
>found locally but the mail server will try to send the email (I am a self
>taught sysadmin so excuse me for any term used improperly)

qmail doesn't implement VRFY because (1) qmail's modular design makes
it impractical, and (2) VRFY makes it easy to validate e-mail
addresses and local accounts--information that crackers and spammers
like.

>Since the mail works fine except for this Message 252 there is no big
>problem execpt that I have a program to verify users and it checks the mail
>server with vrfy user and right now my program wont work.  So how do I fix
>it so qmail sees my users as local?

I suggest you use another method to verify your users, such as looking 
in the password file.

-Dave



Message 252 when VRFYing

2000-03-01 Thread Shera

Hello,

I am very new to qmail, I have used sendmail for over 2 years for my
mini-lan.  I am having a slight problem, mail is delivered fine, but when I
telnet to port 25 and vrfy user I get the message "252 send some mail, i'll
try my best", Now if I check the RFC this just means that my users arent
found locally but the mail server will try to send the email (I am a self
taught sysadmin so excuse me for any term used improperly)  

In /var/qmail/control/locals   I have my qualified domain
also in /var/qmail/control/rcpthosts  I have my qualified domain

My users have there mail going to /$user/Maildir/
  ** note the mail does go there fine

I have everything running from one computer so directories and user db are
all in the same computer

Since the mail works fine except for this Message 252 there is no big
problem execpt that I have a program to verify users and it checks the mail
server with vrfy user and right now my program wont work.  So how do I fix
it so qmail sees my users as local?

Thank You,
Shera - Sysadmin Technology Unlimited PR