Re: Re[2]: From sendmail to qmail

2001-04-08 Thread Brett Randall

> "Boris" == Boris  <[EMAIL PROTECTED]> writes:



> - smtp auth: todo

I use Russell Nelson's version of POPb4SMTP (can't remember what he
called it...it's on www.qmail.org). Works very successfully for when
our staff travel overseas and want to be able to send mail without
having to change their settings. All good e-mail clients allow you to
set an option that says "Check for new mail before sending mail". Even
the crap ones... You can simply hit "Get Mail"..."Send Mail" to do it.

> - virtual domains: todo

Use vpopmail (or if its really simple stuff, use the virtualdomains
file).

> - rbl/orbs: done with tcpserver/rblsmtpd... but i am not sure about
> the orbs patch, use or not to use -(

Don't use it myself, but if you must use it, then the patch works
(from reports I have heard) without major hassles. I've progressed
some of the sites on the ORBS list (in particular) and banning e-mail
from them would be a major point for my disownment at work. The way my
bosses look at is "We can hit the delete key, but if we haven't seen
the mail in the first place, what can we do about it?" Different
workplaces obviously have different attitudes, however.
-- 
"SOFTWARE, n.: Formal evening attire for female computer analysts."

- The Devil's Dictionary to Computer Studies 



Re[2]: From sendmail to qmail

2001-04-08 Thread Boris

Hello Frank,

Sunday, April 08, 2001, 3:23:36 PM, you wrote:



>> Is there an option for qmail? I only found some ugly
>> patches/scripts/workarounds?

FT> There are patches that do this. If they are ugly, I don't know.

Ugly is the wrong word. I do not like to use patches and tools, this
increases network documentation and costs a lot of time. At the moment
of writing, i have learned a lot about qmail and its really
interesting, but there are still things to solve for me.

At the moment, qmail runs very well. Now i have to do some
testings with smtp auth. I want to let in mails to rpcthosts and if
the mail is not for these domains, an authorisation is required. I
hope that this feature is possible.

- dns-check: done with tcpserver
- badmailfrom: done
- smtp redirect: done

- smtp auth: todo
- virtual domains: todo
- rbl/orbs: done with tcpserver/rblsmtpd... but i am not sure about the orbs patch, 
use or
not to use -(

--
Boris





Re: Re[2]: From sendmail to qmail

2001-04-06 Thread Frank Tegtmeyer

Boris <[EMAIL PROTECTED]> writes:

> 192.168.0 RELAY
> 127.0.0.1 RELAY
> From:[EMAIL PROTECTED]   550 Spam denied
> From:[EMAIL PROTECTED] 550 SPAM F*CK YOU SH*T SPAMMER
> From:[EMAIL PROTECTED] 550 SPAMMER BUY YOURSELF
> From:[EMAIL PROTECTED] 550 LOAN YOURSELF, SPAMMER
> From:[EMAIL PROTECTED] 550 F*** YOU SPAMMER
> oo.net  550 SPMMMEE

> It looks like as if this file is similar as the rpcthosts (?) file on
> qmail, but its not the same. I relay incoming mails from my 192.168.0
> class c network as well as localhost mails.

This looks like a mixture of tcpserver's access rules and the badmailfrom
control file of qmail.

> Is there a qmail thingy to do the same?

Yes - but more separated and cleaner. Relaying has nothing to do with
spamming in the first place. Relay control and rejection of specified senders
are different tasks and are provided by different programs in qmail.
The relaying you control with the rules file of tcpserver, the bad senders
are rejected by /var/qmail/control/badmailfrom.

> Sometimes I think the qmail-people think that sendmail is an enemy to
> qmail, but I can´t understand this.

It's the difference in strategic design principles and of course coding
practice that binds people to qmail and not sendmail. I don't trust
sendmail but qmail. This is based on about ten years watching sendmails
security problems.

Regards, Frank



Re[2]: From sendmail to qmail

2001-04-06 Thread Boris

Hello Charles,

thankyou for your answer, that will help me a lot.

CC> Boris <[EMAIL PROTECTED]> wrote:
>> 
>>
>> * First, I need to know is there a similar way to stop spammers as in
>> sendmail with /etc/access.

CC> Many people on this list will not be familiar with the detailed workings of
CC> sendmail; in general, we run qmail because (among other reasons) we don't want
CC> to have to learn sendmail's byzantine configuration.  Please explain how 
CC> this works with sendmail; then we can tell you if there's a qmail equivalent.

Ok I will show you an example. I think its very important to
understand both MTAs to decide what´s really better in what situation
but this is another story.

Here is an example of the access file.

192.168.0 RELAY
127.0.0.1 RELAY
From:[EMAIL PROTECTED]   550 Spam denied
From:[EMAIL PROTECTED] 550 SPAM F*CK YOU SH*T SPAMMER
From:[EMAIL PROTECTED] 550 SPAMMER BUY YOURSELF
From:[EMAIL PROTECTED] 550 LOAN YOURSELF, SPAMMER
From:[EMAIL PROTECTED] 550 F*** YOU SPAMMER
oo.net  550 SPMMMEE

It looks like as if this file is similar as the rpcthosts (?) file on
qmail, but its not the same. I relay incoming mails from my 192.168.0
class c network as well as localhost mails.

But if there is coming a mail from "from:..." the mail will be
rejected, and if there is a hostname only, the complete host is denied
to send us any mails.

This file has nothing to do with outgoing mails.

I use this file to setup a mini-light spamfilter and to setup general
relaying rules. Fetchmail delivers the mail to sendmail (at the moment
to qmail, hahah) so the relaying is allowed. I think its very easy to
setup and very easy to handle.

Is there a qmail thingy to do the same?


>> * Is there a way to forward all outgoing mails to a specific SMTP?

CC> Yes, smtproutes.  It's trivial.  `man qmail-remote` for details.

Aha, very interesting to know.

>> * Are there somewhere detailed instructions about implementing
>> RBL/ORBS?

CC> Yes, in many places, including djb's site and www.qmail.org.

Ok. Thanks.

>> * I have read some solution about SMTP AUTH and I need to know what
>> the people outside are using to stop spammers and to authenticate
>> users before they are allowed to send e-mails. What are the currently
>> most used solutions?

CC> There are SMTP-AUTH patches for qmail.  Two other techniques widely employed
CC> include selective relaying by IP address, and SMTP-after-POP3/SMTP-after-IMAP.

CC> Charles

There is a perl module somewhere I have seen on the qmail page I think
I will try this first.

Thanks for you answers, they helped me a lot. The next step is to find
out how are virtual users working (users without system accounts).

After that I think I have completed this part.

Qmail is nice, but sendmail is not bad at all i was using sendmail a
long time without any problems.

Sometimes I think the qmail-people think that sendmail is an enemy to
qmail, but I can´t understand this.


--
Boris





Re[2]: From sendmail to qmail

2001-04-06 Thread Boris

Hello Brett,

Friday, April 06, 2001, 7:05:27 PM, you wrote:

BR> Believe it or not, all the answers to your questions can be found at
BR> http://www.qmail.org/top.html !

hmm, ok. h