ORBS doesn't like me :(

2000-09-05 Thread Andy Meuse

Hi All,

I just recieved an email from ORBS branding my mail server and open relay. I
looked in my tcp.smtp and I think I know why.

172.16.3.:allow,RELAYCLIENT=""
4.17.165.0.:allow,RELAYCLIENT=""
207.244.122.53.:allow,RELAYCLIENT=""
:allow

I would imagine it's that allow on the last line right?

-=Andy "Duh" Meuse

Dolphins Evolve Opposable Thumbs.
'Oh, Shit,' Says Humanity
www.theonion.com




Re: ORBS doesn't like me :(

2000-09-05 Thread Vince Vielhaber

On Tue, 5 Sep 2000, Andy Meuse wrote:

 Hi All,
 
 I just recieved an email from ORBS branding my mail server and open relay. I
 looked in my tcp.smtp and I think I know why.
 
 172.16.3.:allow,RELAYCLIENT=""
 4.17.165.0.:allow,RELAYCLIENT=""
 207.244.122.53.:allow,RELAYCLIENT=""
 :allow
 
 I would imagine it's that allow on the last line right?

wrong.  The relayclient variable isn't set in it.  What do you 
have in /var/qmail/control/rcpthosts?

Vince.
-- 
==
Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]http://www.pop4.net
 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
Online Campground Directoryhttp://www.camping-usa.com
   Online Giftshop Superstorehttp://www.cloudninegifts.com
==






Re: ORBS doesn't like me :(

2000-09-05 Thread Alexander Pennace

On Tue, Sep 05, 2000 at 10:26:55AM -0400, Andy Meuse wrote:
 I just recieved an email from ORBS branding my mail server and open relay I
 looked in my tcp.smtp and I think I know why.
 
 172.16.3.:allow,RELAYCLIENT=""
 4.17.165.0.:allow,RELAYCLIENT=""
 207.244.122.53.:allow,RELAYCLIENT=""
 :allow
 
 I would imagine it's that allow on the last line right?

No, that just tells tcpserver whether to accept or reject the
connection completely. What does /var/qmail/control/rcpthosts say?

 PGP signature


RE: ORBS doesn't like me :(

2000-09-05 Thread Andy Meuse

Hmmm. I removed my rcpthosts file.

 On Tue, Sep 05, 2000 at 10:26:55AM -0400, Andy Meuse wrote:
  I just recieved an email from ORBS branding my mail server 
 and open relay I
  looked in my tcp.smtp and I think I know why.
  
  172.16.3.:allow,RELAYCLIENT=""
  4.17.165.0.:allow,RELAYCLIENT=""
  207.244.122.53.:allow,RELAYCLIENT=""
  :allow
  
  I would imagine it's that allow on the last line right?
 
 No, that just tells tcpserver whether to accept or reject the
 connection completely. What does /var/qmail/control/rcpthosts say?
 



Re: ORBS doesn't like me :(

2000-09-05 Thread Johan Almqvist

On Tue, Sep 05, 2000 at 10:26:55AM -0400, Andy Meuse wrote:
 Hi All,
 
 I just recieved an email from ORBS branding my mail server and open relay. I
 looked in my tcp.smtp and I think I know why.
 
 172.16.3.:allow,RELAYCLIENT=""
 4.17.165.0.:allow,RELAYCLIENT=""
 207.244.122.53.:allow,RELAYCLIENT=""

Why the . (dot) after a complete IP adress? Could that be messing things up?
Also, what does control/percenthack say?

-Johan
-- 
Johan Almqvist



Re: ORBS doesn't like me :(

2000-09-05 Thread Dave Sill

"Andy Meuse" [EMAIL PROTECTED] wrote:

I just recieved an email from ORBS branding my mail server and open relay. I
looked in my tcp.smtp and I think I know why.

172.16.3.:allow,RELAYCLIENT=""
4.17.165.0.:allow,RELAYCLIENT=""
207.244.122.53.:allow,RELAYCLIENT=""
:allow

I would imagine it's that allow on the last line right?

You would imagine incorrectly, then. :-) That last line just says that 
your SMTP service is open to the public--which is SOP for SMTP
servers.

You must have some other problem, like a ~alias/.qmail-default that
reroutes otherwise undeliverable mail to another host that implements
% or ! addressing.

The message from ORBS should contain the offending message, which
should show the problem.

-Dave



Re: ORBS doesn't like me :(

2000-09-05 Thread Peter van Dijk

On Tue, Sep 05, 2000 at 10:37:32AM -0400, Andy Meuse wrote:
 Hmmm. I removed my rcpthosts file.

Put it back. Without an rcpthosts file, you are an open relay.

Greetz, Peter.
--



RE: ORBS doesn't like me :(

2000-09-05 Thread Vince Vielhaber

On Tue, 5 Sep 2000, Andy Meuse wrote:

 Hmmm. I removed my rcpthosts file.

Put it back.  Any of the IP addresses in tcp.smtp will bypass it if
the RELAYCLIENT variable is set.  

Vince.

 
  On Tue, Sep 05, 2000 at 10:26:55AM -0400, Andy Meuse wrote:
   I just recieved an email from ORBS branding my mail server 
  and open relay I
   looked in my tcp.smtp and I think I know why.
   
   172.16.3.:allow,RELAYCLIENT=""
   4.17.165.0.:allow,RELAYCLIENT=""
   207.244.122.53.:allow,RELAYCLIENT=""
   :allow
   
   I would imagine it's that allow on the last line right?
  
  No, that just tells tcpserver whether to accept or reject the
  connection completely. What does /var/qmail/control/rcpthosts say?
  
 

-- 
==
Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]http://www.pop4.net
 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
Online Campground Directoryhttp://www.camping-usa.com
   Online Giftshop Superstorehttp://www.cloudninegifts.com
==






Re: ORBS doesn't like me :(

2000-09-05 Thread Ricardo Cerqueira

On Tue, Sep 05, 2000 at 10:37:32AM -0400, Andy Meuse wrote:
 Hmmm. I removed my rcpthosts file.


There's your answer. You opened you relay to all domains when you did that.

RC
 
  On Tue, Sep 05, 2000 at 10:26:55AM -0400, Andy Meuse wrote:
   I just recieved an email from ORBS branding my mail server 
  and open relay I
   looked in my tcp.smtp and I think I know why.
   
   172.16.3.:allow,RELAYCLIENT=""
   4.17.165.0.:allow,RELAYCLIENT=""
   207.244.122.53.:allow,RELAYCLIENT=""
   :allow
   
   I would imagine it's that allow on the last line right?
  
  No, that just tells tcpserver whether to accept or reject the
  connection completely. What does /var/qmail/control/rcpthosts say?
  

-- 
+---
| Ricardo Cerqueira  
| PGP Key fingerprint  -  B7 05 13 CE 48 0A BF 1E  87 21 83 DB 28 DE 03 42 
| Novis  -  Engenharia ISP / Rede Técnica 
| Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal
| Tel: +351 21 010 - Fax: +351 21 011

 PGP signature


Re: ORBS doesn't like me :(

2000-09-05 Thread Peter van Dijk

On Tue, Sep 05, 2000 at 11:08:15AM -0400, Andy Meuse wrote:
 
   I put the rcpthosts back and all mail (local and remote) was returned
 undeliverable. However, I had also removed the :allow from my tcp.smtp so I
 don't know if that is the problem.

Are the domains you *do* want to receive mail for in rcpthosts now?

Greetz, Peter.
-- 
[ircoper][EMAIL PROTECTED] - Peter van Dijk / Hardbeat
[student]Undernet:#groningen/wallops | IRCnet:/#alliance
[developer]_
[disbeliever - the world is backwards](__VuurWerk__(--*-



Re: ORBS doesn't like me :(

2000-09-05 Thread Johan Almqvist

On Tue, Sep 05, 2000 at 04:42:45PM +0200, Peter van Dijk wrote:
 On Tue, Sep 05, 2000 at 10:37:32AM -0400, Andy Meuse wrote:
  Hmmm. I removed my rcpthosts file.
 Put it back. Without an rcpthosts file, you are an open relay.

That's always surprised me. I would have assumed that qmail would
default to control/me if rcpthosts is empty. Any reason why it doesn't?

-Johan
-- 
Johan Almqvist



Re: ORBS doesn't like me :(

2000-09-05 Thread Chris Johnson

On Tue, Sep 05, 2000 at 11:08:15AM -0400, Andy Meuse wrote:
   I put the rcpthosts back and all mail (local and remote) was returned
 undeliverable. However, I had also removed the :allow from my tcp.smtp so I
 don't know if that is the problem.

It's not the problem.

What are the contents of rcpthosts? What is the reason that the mail was
returned as undeliverable? (Did it not occur to you to provide this information
in the first place?)

Chris



Re: ORBS doesn't like me :(

2000-09-05 Thread Charles Cazabon

Andy Meuse [EMAIL PROTECTED] wrote:
 
   I put the rcpthosts back and all mail (local and remote) was returned
 undeliverable. However, I had also removed the :allow from my tcp.smtp so I
 don't know if that is the problem.

You need the :allow to let other servers on the net connect to your machine
to deliver mail to you.

rcpthosts should exist and contain domains for which you will accept mail --
typically the contents of the files 'locals' plus virtualdomains and perhaps
a few others (backup MX, etc).

Charles
-- 
--
Charles Cazabon   [EMAIL PROTECTED]
QCC Communications Corporation   Saskatoon, SK
My opinions do not necessarily represent those of my employer.
--



Re: ORBS doesn't like me :(

2000-09-05 Thread Kris Kelley

 I put the rcpthosts back and all mail (local and remote) was returned
 undeliverable. However, I had also removed the :allow from my tcp.smtp so
I
 don't know if that is the problem.

The lack of a rcpthosts file was *definitely* the problem.  When you don't
have this file, qmail's default behavior is to accept and relay email for
the entire Internet.

Having an ":allow" line in your tcp.smtp file won't affect your server's
behavior one way or the other.  This line tells tcpserver to accept
connections from any remote host (besides those mentioned elsewhere in the
tcp.smtp file), but don't modify any environment variables during the
session (such as RELAYCLIENT).  This is tcpserver's default behavior anyway,
so the only reason to have this line is for the sake of readability.  Note
that allowing a host to make a connection is not the same thing as allowing
that host to use your server as a relay.

So, the short answer is, now that you have a rcpthosts file again, ORBS will
stop blacklisting you.

---Kris Kelley




Re: ORBS doesn't like me :(

2000-09-05 Thread John Gonzalez/netMDC admin

On Tue, 5 Sep 2000, Johan Almqvist wrote:

| On Tue, Sep 05, 2000 at 04:42:45PM +0200, Peter van Dijk wrote:
|  On Tue, Sep 05, 2000 at 10:37:32AM -0400, Andy Meuse wrote:
|   Hmmm. I removed my rcpthosts file.
|  Put it back. Without an rcpthosts file, you are an open relay.
| 
| That's always surprised me. I would have assumed that qmail would
| default to control/me if rcpthosts is empty. Any reason why it doesn't?

I think this has been requested by some list users in the past, but it's
not that big of a deal. All it does is secure someone from blowing their
foot off on accident. Of course, with the behavior as default, them being
put on antispam lists might be a worse "long term" effect, as it's hard to
get off some of the lists to a newbie.

Oh well, i guess it's punishment for not reading the docs properly

-- 
  ___   _  __   _  
__  /___ ___    /__  John Gonzalez/Net.Tech
__  __ \ __ \  __/_  __ `__ \/ __  /_  ___/ MDC Computers/netMDC!
_  / / / `__/ /_  / / / / / / /_/ / / /__ (505)439-0200/fax-437-3052
/_/ /_/\___/\__/ /_/ /_/ /_/\__,_/  \___/ http://www.netmdc.com
[-[system info]---]
  9:45am  up 117 days, 15:48,  4 users,  load average: 0.10, 0.18, 0.18




Re: ORBS doesn't like me :(

2000-09-05 Thread James Raftery

On Tue, Sep 05, 2000 at 11:08:15AM -0400, Andy Meuse wrote:
   I put the rcpthosts back and all mail (local and remote) was returned
 undeliverable. However, I had also removed the :allow from my tcp.smtp so I
 don't know if that is the problem.

Ack! You are mighty confused.

The 'allow' and 'deny' statements specify whether a tcp connection 
from a given IP address will be allowed or denied, not whether any 
messages passed over the connection will be accepted for delivery.

rcpthosts is a list of domains for which your mailer will accept mail.
You need to list the domains for which that machine should accept email.

Take a look at the relaying doccumentation at http://www.qmail.org/, if
you need to setup selective relaying (i.e. allowing certain people -
your users - to use your machine to send their email)


Regards,

james
-- 
James Raftery (JBR54)  -  Programmer Hostmaster  -  IE TLD Hostmaster
   IE Domain Registry  -  www.domainregistry.ie  -  (+353 1) 706 2375
  "Managing 4000 customer domains with BIND has been a lot like
   herding cats." - Mike Batchelor, on [EMAIL PROTECTED]



RE: ORBS doesn't like me :(

2000-09-05 Thread Ihnen, David

Because you more often want a mail server to relay your mail than not to
relay your mail.

Why bother setting up rcpthosts if your server is firewalled off from the
internet, being an internal mail handler/relay anyway?

David

 -Original Message-
 From: Johan Almqvist [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 05, 2000 8:51 AM
 To: Peter van Dijk; [EMAIL PROTECTED]
 Subject: Re: ORBS doesn't like me :(
 
 
 On Tue, Sep 05, 2000 at 04:42:45PM +0200, Peter van Dijk wrote:
  On Tue, Sep 05, 2000 at 10:37:32AM -0400, Andy Meuse wrote:
   Hmmm. I removed my rcpthosts file.
  Put it back. Without an rcpthosts file, you are an open relay.
 
 That's always surprised me. I would have assumed that qmail would
 default to control/me if rcpthosts is empty. Any reason why 
 it doesn't?
 
 -Johan
 -- 
 Johan Almqvist
 



Re: ORBS doesn't like me :(

2000-09-05 Thread Ricardo Cerqueira

On Tue, Sep 05, 2000 at 05:51:11PM +0200, Johan Almqvist wrote:
 On Tue, Sep 05, 2000 at 04:42:45PM +0200, Peter van Dijk wrote:
  On Tue, Sep 05, 2000 at 10:37:32AM -0400, Andy Meuse wrote:
   Hmmm. I removed my rcpthosts file.
  Put it back. Without an rcpthosts file, you are an open relay.
 

An empty rcpthosts != no rcpthosts at all.
empty means "i don't take mail for any domain". No files mean "i don't
limit any domain". And rcpthosts does not assume me if empty. man 8
qmail-smtpd for more info.

RC

-- 
+---
| Ricardo Cerqueira  
| PGP Key fingerprint  -  B7 05 13 CE 48 0A BF 1E  87 21 83 DB 28 DE 03 42 
| Novis  -  Engenharia ISP / Rede Técnica 
| Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal
| Tel: +351 21 010 - Fax: +351 21 011

 PGP signature


RE: ORBS doesn't like me :(

2000-09-05 Thread Andy Meuse

I created a rcpthosts file populated with my domain. Now the error I'm
recieving after sending remote mail is ..

"No transport provider was available for delivery to this recipient."

Local mail is unaffected.

thx for all the replies,
-Andy

Here is a recap of my situation. ORBS says I'm an open relay. I had no
rcpthosts file so there you go. When I create a rcpthosts file local users
can't send remote mail.


 You need the :allow to let other servers on the net connect
 to your machine
 to deliver mail to you.

I thought I read that the :allow is redundant since the default is to allow
any connection?

 rcpthosts should exist and contain domains for which you will
 accept mail --
 typically the contents of the files 'locals' plus
 virtualdomains and perhaps
 a few others (backup MX, etc).

 Charles




Re: ORBS doesn't like me :(

2000-09-05 Thread David Dyer-Bennet

Johan Almqvist [EMAIL PROTECTED] writes on 5 September 2000 at 17:51:11 +0200
  On Tue, Sep 05, 2000 at 04:42:45PM +0200, Peter van Dijk wrote:
   On Tue, Sep 05, 2000 at 10:37:32AM -0400, Andy Meuse wrote:
Hmmm. I removed my rcpthosts file.
   Put it back. Without an rcpthosts file, you are an open relay.
  
  That's always surprised me. I would have assumed that qmail would
  default to control/me if rcpthosts is empty. Any reason why it doesn't?

So far as I remember the discussion back some time ago, no, there
isn't any particular reason.  Dan just wrote it the other way. 
-- 
Photos: http://dd-b.lighthunters.net/ Minicon: http://www.mnstf.org/minicon
Bookworms: http://ouroboros.demesne.com/ SF: http://www.dd-b.net/dd-b 
David Dyer-Bennet / Welcome to the future! / [EMAIL PROTECTED]



RE: ORBS doesn't like me :(

2000-09-05 Thread Vince Vielhaber

On Tue, 5 Sep 2000, Andy Meuse wrote:

 this is my tcp.smtp file
 
 172.16.3.:allow,RELAYCLIENT=""
 4.17.165.:allow,RELAYCLIENT=""
 207.244.122.53.:allow,RELAYCLIENT=""
 :allow

How are you creating tcp.smtp.cdb ?

Vince.
-- 
==
Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]http://www.pop4.net
 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
Online Campground Directoryhttp://www.camping-usa.com
   Online Giftshop Superstorehttp://www.cloudninegifts.com
==






RE: ORBS doesn't like me :(

2000-09-05 Thread Andy Meuse

Vince, please don't try to telnet into my mail server anymore. :(

Sep  5 14:31:42 qmail in.telnetd[6995]: refused connect from 209.103.136.12

-Andy

 -Original Message-
 From: Vince Vielhaber [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 05, 2000 2:34 PM
 To: Andy Meuse
 Cc: Qmail (E-mail)
 Subject: RE: ORBS doesn't like me :(
 
 
 On Tue, 5 Sep 2000, Andy Meuse wrote:
 
  this is my tcp.smtp file
  
  172.16.3.:allow,RELAYCLIENT=""
  4.17.165.:allow,RELAYCLIENT=""
  207.244.122.53.:allow,RELAYCLIENT=""
  :allow
 
 How are you creating tcp.smtp.cdb ?
 
 Vince.
 -- 
 ==
 
 Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]
 http://www.pop4.net
  128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 
 Networking
 Online Campground Directoryhttp://www.camping-usa.com
Online Giftshop Superstorehttp://www.cloudninegifts.com
 ==
 
 
 
 
 



RE: ORBS doesn't like me :(

2000-09-05 Thread Vince Vielhaber

On Tue, 5 Sep 2000, Andy Meuse wrote:

 Vince, please don't try to telnet into my mail server anymore. :(

I was going to try sending you mail directly to it with telnet, I
missed the 25 at the end command line and ^D out of it.  Believe me,
it wasn't intentional.

Vince.

 
 Sep  5 14:31:42 qmail in.telnetd[6995]: refused connect from 209.103.136.12
 
 -Andy
 
  -Original Message-
  From: Vince Vielhaber [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, September 05, 2000 2:34 PM
  To: Andy Meuse
  Cc: Qmail (E-mail)
  Subject: RE: ORBS doesn't like me :(
  
  
  On Tue, 5 Sep 2000, Andy Meuse wrote:
  
   this is my tcp.smtp file
   
   172.16.3.:allow,RELAYCLIENT=""
   4.17.165.:allow,RELAYCLIENT=""
   207.244.122.53.:allow,RELAYCLIENT=""
   :allow
  
  How are you creating tcp.smtp.cdb ?
  
  Vince.
  -- 
  ==
  
  Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]
  http://www.pop4.net
   128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 
  Networking
  Online Campground Directoryhttp://www.camping-usa.com
 Online Giftshop Superstorehttp://www.cloudninegifts.com
  ==
  
  
  
  
  
 

-- 
==
Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]http://www.pop4.net
 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
Online Campground Directoryhttp://www.camping-usa.com
   Online Giftshop Superstorehttp://www.cloudninegifts.com
==






Re: ORBS doesn't like me :(

2000-09-05 Thread Aaron L. Meehan

Quoting Andy Meuse ([EMAIL PROTECTED]):
 I created a rcpthosts file populated with my domain. Now the error I'm
 recieving after sending remote mail is ..
 
 "No transport provider was available for delivery to this recipient."

Heh.. that doesn't say anything.  That's an Outlookism that it spits
out when it really does not know what is going on (like all of the
time).  "No transport provider .." bah!  

If you could provide the actual error message that qmail-smtpd
spits out, and that reasonable mailers will show you, that certainly
would help a lot.

In any case, the problem is (almost) certainly that RELAYCLIENT is not
set for the connection, hence qmail does not allow you to relay to any
domain not in rcpthosts.

Aaron



RE: ORBS doesn't like me :(

2000-09-05 Thread Andy Meuse

I reconfigured tcprules and now everything is fine. I think I had edited the
tcp.smtp and it never occured to me to rerun tcprules, that or the "-c 50"
in the tcpserver command line below was effin it up.

 exec /usr/local/bin/softlimit -m 400 \
 /usr/local/bin/tcpserver -v -x/etc/tcp.smtp.cdb -c 50 -u503 -g502 0 smtp \
 /var/qmail/bin/qmail-smtpd 21 | /var/qmail/bin/splogger smtpd 3 

Anyway, thanks for the pointers everyone.

-=Andy

 -Original Message-
 From: Vince Vielhaber [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, September 05, 2000 3:20 PM
 To: Andy Meuse
 Cc: 'Qmail (E-mail)'
 Subject: RE: ORBS doesn't like me :(


 On Tue, 5 Sep 2000, Andy Meuse wrote:

  Vince, please don't try to telnet into my mail server anymore. :(

 I was going to try sending you mail directly to it with telnet, I
 missed the 25 at the end command line and ^D out of it.  Believe me,
 it wasn't intentional.

 Vince.

 
  Sep  5 14:31:42 qmail in.telnetd[6995]: refused connect
 from 209.103.136.12
 
  -Andy
 
   -Original Message-
   From: Vince Vielhaber [mailto:[EMAIL PROTECTED]]
   Sent: Tuesday, September 05, 2000 2:34 PM
   To: Andy Meuse
   Cc: Qmail (E-mail)
   Subject: RE: ORBS doesn't like me :(
  
  
   On Tue, 5 Sep 2000, Andy Meuse wrote:
  
this is my tcp.smtp file
   
172.16.3.:allow,RELAYCLIENT=""
4.17.165.:allow,RELAYCLIENT=""
207.244.122.53.:allow,RELAYCLIENT=""
:allow
  
   How are you creating tcp.smtp.cdb ?
  
   Vince.
   --
   ==
   
   Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]
   http://www.pop4.net
128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4
   Networking
   Online Campground Directoryhttp://www.camping-usa.com
  Online Giftshop Superstorehttp://www.cloudninegifts.com
   ==
   
  
  
  
  
 

 --
 ==
 
 Vince Vielhaber -- KA8CSHemail: [EMAIL PROTECTED]
http://www.pop4.net
 128K ISDN from $22.00/mo - 56K Dialup from $16.00/mo at Pop4 Networking
Online Campground Directoryhttp://www.camping-usa.com
   Online Giftshop Superstorehttp://www.cloudninegifts.com
==







Re: ORBS doesn't like me :(

2000-09-05 Thread Peter van Dijk

On Tue, Sep 05, 2000 at 03:19:34PM -0400, Vince Vielhaber wrote:
 On Tue, 5 Sep 2000, Andy Meuse wrote:
 
  Vince, please don't try to telnet into my mail server anymore. :(
 
 I was going to try sending you mail directly to it with telnet, I
 missed the 25 at the end command line and ^D out of it.  Believe me,
 it wasn't intentional.

I believe you. That happens to me all the time :)

Greetz, Peter
-- 
dataloss networks



Re: ORBS doesn't like me :(

2000-09-05 Thread Chris K. Young

Quoted from Peter van Dijk:
 On Tue, Sep 05, 2000 at 03:19:34PM -0400, Vince Vielhaber wrote:
  I was going to try sending you mail directly to it with telnet, I
  missed the 25 at the end command line and ^D out of it.  Believe me,
  it wasn't intentional.
 
 I believe you. That happens to me all the time :)

That's why you use tcpclient: it doesn't have a default port. :-)

---Chris K.
-- 
 Chris, the Young One |_ but what's a dropped message between friends? 
  Auckland, New Zealand |_ this is UDP, not TCP after all ;) ---John H. 
http://cloud9.hedgee.com/ |_ Robinson, IV  



Re: ORBS doesn't like me :(

2000-09-05 Thread James Raftery

On Tue, Sep 05, 2000 at 08:44:22AM -0700, Ihnen, David wrote:
 Why bother setting up rcpthosts if your server is firewalled off from the
 internet, being an internal mail handler/relay anyway?

There are cases where people intentionally want to create open relays,
and there should be a mechanism to allow that.

But AFAIC the current method makes it too easy to shoot oneself in 
the foot. Too often people take the premise that "rcpthosts lists the
domains to accept mail for" (to paraphrase) and use that to make the
conclusion that "no rcpthosts means accepting mail for no domains".
While it is incorrect, it's not an entirely off-the-wall thought
progression.


Regards,

james
-- 
James Raftery (JBR54)  -  Programmer Hostmaster  -  IE TLD Hostmaster
   IE Domain Registry  -  www.domainregistry.ie  -  (+353 1) 706 2375
  "Managing 4000 customer domains with BIND has been a lot like
   herding cats." - Mike Batchelor, on [EMAIL PROTECTED]



RE: ORBS doesn't like me :(

2000-09-05 Thread John Gonzalez/netMDC admin

On Tue, 5 Sep 2000, Andy Meuse wrote:

| Here is a recap of my situation. ORBS says I'm an open relay. I had no
| rcpthosts file so there you go. When I create a rcpthosts file local users
| can't send remote mail.

You need to read LWQ, and specifically, the section on selective relaying.

http://web.infoave.net/~dsill/lwq.html#relaying

http://www.palomine.net/qmail/relaying.html

http://www.palomine.net/qmail/selectiverelay.html

|   I thought I read that the :allow is redundant since the default is to allow
| any connection?

It is redundant. It's put in there to be syntaxtically correct in case the
default behavior changes in the future.

-- 
  ___   _  __   _  
__  /___ ___    /__  John Gonzalez/Net.Tech
__  __ \ __ \  __/_  __ `__ \/ __  /_  ___/ MDC Computers/netMDC!
_  / / / `__/ /_  / / / / / / /_/ / / /__ (505)439-0200/fax-437-3052
/_/ /_/\___/\__/ /_/ /_/ /_/\__,_/  \___/ http://www.netmdc.com
[-[system info]---]
 10:50am  up 117 days, 16:53,  4 users,  load average: 0.03, 0.16, 0.16




Re: ORBS doesn't like me :(

2000-09-05 Thread Charles Cazabon

Andy Meuse [EMAIL PROTECTED] wrote:
 I created a rcpthosts file populated with my domain. Now the error I'm
 recieving after sending remote mail is ..
 
 "No transport provider was available for delivery to this recipient."
 
 Local mail is unaffected.

I'm not familiar with this error message.  What was the recipient address, what
is your local domain, what is the contents of rcpthosts and locals, ...
 
  You need the :allow to let other servers on the net connect to your machine
  to deliver mail to you.
 
   I thought I read that the :allow is redundant since the default is to
   allow any connection?

Yes, my bad.  It is the default.  I just like being explicit in tcp rules files.

Charles
-- 
--
Charles Cazabon   [EMAIL PROTECTED]
QCC Communications Corporation   Saskatoon, SK
My opinions do not necessarily represent those of my employer.
--



RE: ORBS doesn't like me :(

2000-09-05 Thread Andy Meuse

Yep, I have the locals set up with my domain(s).

Since I have been an open relay, and then when I create a rcpthosts file it
seems SMTP rejects me, I suppose my tcprules or tcpserver or both are
configured incorrectly. Again here is the error message.

"No transport provider was available for delivery to this recipient."

I was sending local to hotmail account, and also tried other external
addresses. (Yahoo, Juno etc.)

this is my tcp.smtp file

172.16.3.:allow,RELAYCLIENT=""
4.17.165.:allow,RELAYCLIENT=""
207.244.122.53.:allow,RELAYCLIENT=""
:allow

The mail server is on the 4.17.165.0 network
Users are on the 172.16.3.0 network

Here are the commands I run qmail from in rc.local

# starts Qmail basics
/bin/csh -cf '/var/qmail/rc ' 

# Starts pop3 server from tcpserver
/usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup
qmail.buyerzone.com \
/bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 21 |
/var/qmail/bin/splogger pop3d 

#This modifies the qmail-queue for qmail virus scan
#QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl" export QMAILQUEUE

# Tcpserver with relaying rules found in /etc/tcp.smtp
exec /usr/local/bin/softlimit -m 400 \
/usr/local/bin/tcpserver -v -x/etc/tcp.smtp.cdb -c 50 -u503 -g502 0 smtp \
/var/qmail/bin/qmail-smtpd 21 | /var/qmail/bin/splogger smtpd 3 

Hmmm. Should the -c 50 be right after tcpserver?

rcpthosts  locals read...

buyerzone.com
buyerszone.com
mail.buyerzone.com
mail.buyerszone.com
qmail.buyerzone.com
qmail.buyerszone.com

Thanks again,
Andy

And yes I've read the FAQ and LWQ so much my eyes hurt. I did have problems
getting qmail to run using daemontools (RCDIR config I think) so I inserted
the startup commands into rc.local.


 Andy Meuse schrieb:
 do you have your domain in ~/control/locals too?

 you will need that for qmail to realize that mails for your domain
 should be delivered locally and *not* passed on elsewhere.

 wolfgang

 
  I created a rcpthosts file populated with my domain. Now
 the error I'm
  recieving after sending remote mail is ..
 
  "No transport provider was available for delivery to this
 recipient."
 
  Local mail is unaffected.
 
  thx for all the replies,
  -Andy