Re: /var/spool/mail/user getting deleted

2001-04-28 Thread Ruprecht Helms

At 18:26 28.04.01 -0400, kamesh jayachandran wrote:
Hai ,
I previously had sendmail that was with stock install of RHL6.2.
Now I removed that.And installed the qmail.
I have gone through the INSTALL.mbox for how to transfer mails from 
/var/spool/mail to ~Mailbox.
I have done the following things
1)moved each file from /var/spool/mail to respective home directories.

ok you can do

2)given a symbollic link to ~user/Mailbox from /var/spool/mail/user as a root

why, you set the delivery into the homedirs by the defaultdelivery-file in 
/var/qmail/control. Here you can set delivery using maildir. For the right 
syntax have a look into LWQ

3)chmod 1777 /var/spool/mail

So you can write a mail into a securitylist an invite all hacker to visit 
your mailserver and make nonsense with it. The maildirs should set to 703.

4)Now the problem is when one user sends mail to other user he recieves 
the mail but it has no content.And the symbollic link in the 
/var/spool/mail/user changes to Bogus.user.Cnq something like this.

When I remember you have no directory user under /var/spool/mail. You only 
have a file user.mbx. This is a ascii-textfile that contains the mails in 
appending form.

Better you use /home/user/Maildir and use qmail-pop3 for getting the mails 
with the different clients. To configure qmail-pop3 have a look into LWQ. 
Test the delivery by using qmail-inject and sending a mail to the 
email-account. Use telent mailserver 110 to test if you can receive the 
mail by authenticating you on the server and retrieve the mail with the 
command retr [No.]. The right Mail-No. you will get by using list in the 
telnetsession.

Regards,
Ruprecht




Re: /var/spool/mail/user getting deleted

2001-04-28 Thread Daniel Duclos

On Sat, 28 Apr 2001, Ruprecht Helms wrote:


 So you can write a mail into a securitylist an invite all hacker to visit
 your mailserver and make nonsense with it. The maildirs should set to 703.

Why is that? I always heard that Maildir may be 1777, so my maildir is
1777. Now you scared me! =) Just for enlightement purposes, what kind of
nonsense a hacker could do with my box? Thanx in advance!
(Just in case, I am chmod'ing my maildir right now! =P)

daniduc

Daniel Lobato Duclos - [EMAIL PROTECTED] - http://www.cybershark.net
---
Money Isn't Our God - Integrity Will Free Our Soul (Sepultura - CutThroat)





Re: /var/spool/mail/user getting deleted

2001-04-28 Thread Tim Legant

On Sat, Apr 28, 2001 at 06:26:10PM -0400, kamesh jayachandran wrote:
 I have done the following things
 1)moved each file from /var/spool/mail to respective home directories.

Good.

 2)given a symbollic link to ~user/Mailbox from /var/spool/mail/user as a root
 3)chmod 1777 /var/spool/mail

No need to do this. In fact, it's the cause of your problem.

 4)Now the problem is when one user sends mail to other user he
 recieves the mail but it has no content.And the symbollic link in the
 /var/spool/mail/user changes to Bogus.user.Cnq something like this.

Make sure that the default delivery is set to './Mailbox' . The default
delivery is set on the command line of qmail-start. Find your startup
script (I have no idea what you're using - you haven't told us) and
check that it looks something like this:

env - PATH=/var/qmail/bin:$PATH qmail-start './Mailbox'
 (this is the important part) -- ^^^

The reason your mailboxes in /var/spool/mail are changing to
BOGUS.$LOGNAME.xxx is that you are currently using procmail and it
is configured to deliver to /var/spool/mail/. You need to fix your
procmailrc. You can find information about procmail in the FAQ and you
can see how to use it as the default delivery mechanism by looking at
the scripts in /var/qmail/boot/.

Tim



Re: /var/spool/mail/user getting deleted

2001-04-28 Thread Gavin McCord


On 2001.04.28 19:05 Daniel Duclos wrote:
 On Sat, 28 Apr 2001, Ruprecht Helms wrote:
 
 
  So you can write a mail into a securitylist an invite all hacker to
 visit
  your mailserver and make nonsense with it. The maildirs should set to
 703.
 
 Why is that? I always heard that Maildir may be 1777, so my maildir is
 1777. Now you scared me! =) Just for enlightement purposes, what kind of
 nonsense a hacker could do with my box? Thanx in advance!
 (Just in case, I am chmod'ing my maildir right now! =P)
 
 daniduc
 
 Daniel Lobato Duclos - [EMAIL PROTECTED] - http://www.cybershark.net


No. No. No.

maildirmake creates a maildir with perms 700, i.e.

drwx--

Why would you need it set any other way?

-- 
I'm Keyser Soze...No, I'm Keyser Soze. I'm Keyser Soze and so's my wife!
(Monty Python play The Usual Suspects.)