relay-ctrl

[Clemens Hermann]

Hi,

after having successfully set up qmail I really start loving it  ;-).
The only way to get it secure for my purpose seemed to be a smtp after
Pop implementation. So I downloaded the relay-ctrl-2.0.tar.gz package
and installed it as described.
I changed the following lines in defines.h:

RULESDIR  "/etc"
TCPRULES  "/usr/local/bin/tcprules"
SMTPRULES "tcp.smtp"
SMTPCDB   "tcp.smtp.cdb"

I use POP3D via tcpserver and tcpserver with qmail-smtp. Everything
works fine locally.

When I pop the server, the IP of the client gets listed correctly in
/var/spool/relay-ctrl.
But it is not pssible to send any Mail wit a foreign adress even if the
adresse is listed there.

Thanks for any Help

Clemens

relay-ctrl

[Lukasz Gogolewski]

Are there any good instructions on setting up relay-ctrl?

I'm having some problems with getting it to work.

Thanks for any type of information that may help me,

- Lucas

Lukasz Gogolewski <[EMAIL PROTECTED]>
SupremeDesigns - Tel: (347) 452-6837
http://www.supremedesigns.com

relay-ctrl ?

[Mike A. Sauvain]

hello all, i'm trying installing relay-ctrl.

- how the qmail start files for smtp should be modified ?
- what are the the minimal cfg of relay-ctrl ?

somone has a better instruction page than the script owner?


...thanks ..mike

silly relay-ctrl

[Zak Thompson]

Ok,


Its been 9 hours of searching through the mailing list trying to figure out
why my relay-ctrl v2.5 isn't working.  I make'd make root-installed, left
the definition file alone and let it do a default install, i added
/usr/sbin/relay-ctrl-allow in my pop3 startup script, i installed it after
the /home/vpopmail/vchkpw line.  but for some reason it just still wont work
correctly.  there is a zombie processs of relay-ctrl-age.

Are there any other files you have to create or modify?


Thanks for the help

Zak THompson

silly relay-ctrl

[Zak Thompson]

Ok,


Its been 9 hours of searching through the mailing list trying to figure out
why my relay-ctrl v2.5 isn't working.  I make'd make root-installed, left
the definition file alone and let it do a default install, i added
/usr/sbin/relay-ctrl-allow in my pop3 startup script, i installed it after
the /home/vpopmail/vchkpw line.  but for some reason it just still wont work
correctly.  there is a zombie processs of relay-ctrl-age.

Are there any other files you have to create or modify?


Thanks for the help

Zak THomps

RE: relay-ctrl

[Brett Randall]

> When I pop the server, the IP of the client gets listed correctly in
> /var/spool/relay-ctrl.
> But it is not pssible to send any Mail wit a foreign adress even if the
> adresse is listed there.

Hi Clemens. It would REALLY help us with more details about this. What does
qmail-stat show? What do the logs show? What is the error? etc...

/BR


Manager
InterPlanetary Solutions
http://ipsware.com/

Re: relay-ctrl

[Bruce Guenter]

On Sat, Aug 19, 2000 at 08:35:23PM +0200, Clemens Hermann wrote:
> after having successfully set up qmail I really start loving it  ;-).
> The only way to get it secure for my purpose seemed to be a smtp after
> Pop implementation. So I downloaded the relay-ctrl-2.0.tar.gz package
> and installed it as described.
> I changed the following lines in defines.h:
> 
> RULESDIR  "/etc"
> TCPRULES  "/usr/local/bin/tcprules"
> SMTPRULES "tcp.smtp"
> SMTPCDB   "tcp.smtp.cdb"
> 
> I use POP3D via tcpserver and tcpserver with qmail-smtp. Everything
> works fine locally.

What is the command line used to start up tcpserver for qmail-smtpd?
Does it use the tcp.smtp CDB file?
-- 
Bruce Guenter <[EMAIL PROTECTED]>   http://em.ca/~bruceg/

 PGP signature

relay-ctrl problem

[Adam Stiles]

Hi,

I've been running qmail for a while and had relaying controlled using 
tcprules to allow my cable modem IP address to relay (via /etc/tcp.smtp --> 
tcp.smtp.cdb). I'm going to be travelling and will be dialing thru an ISP so 
I need to use relay-ctrl so I can send mail.

My qmail installation was done using "Life with qmail" 
<http://web.infoave.net/~dsill/lwq.html> and my startup script is exactly 
what is listed there in section 2.8.2.1. I added to that script to start 
qmail-popup, qmail-pop3d like this:

 tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup FQDN \
 /bin/checkpassword /usr/sbin/relay-ctrl-allow 
/var/qmail/bin/qmail-pop3d Maildir 2>&1 | \
 /var/qmail/bin/splogger pop3d &


I installed relay-ctrl 2.5 per the instructions.

My IP address gets logged to /var/spool/relay-ctrl as expected.

relay-ctrl-age gets run by cron every minute and updates /etc/tcp.smtp.cdb. 
A dump (using cdbdump) of this file shows that my IP address is included in 
the cdb file.

qmail-smtpd gets started by tcpserver and passes (among other things) 
/etc/tcp.smtp.cdb in its script by supervise.

I get the standard '553 sorry' message about not relaying.

Any ideas?

Adam


_
Get your FREE download of MSN Explorer at http://explorer.msn.com

Re: relay-ctrl

[Charles Cazabon]

Lukasz Gogolewski <[EMAIL PROTECTED]> wrote:
> Are there any good instructions on setting up relay-ctrl?

If the documentation included with it is insufficient, try asking on one of
the author's mailing lists.  Bruce's "bgware" list is probably the most
appropriate.  You can find its subscription address at Bruce's site:

http://em.ca/~bruceg/

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: relay-ctrl ?

[Frank Tegtmeyer]

"Mike  A. Sauvain" <[EMAIL PROTECTED]> writes:

> somone has a better instruction page than the script owner?

What's wrong with:

---
- Add the following line to a file in /etc/cron.d.  This assumes a
  recent version of vixie cron.  Other versions of cron may use
  different syntax, and you may need to edit root's crontab.
* * * * * /usr/sbin/relay-ctrl-age

How to use with qmail-pop3d:

- Insert the program "relay-ctrl-allow" between your checkpassword
  program and qmail-pop3d in your invocation of tcpserver for the POP
  service.
-

There is nothing more to say about it. Please read the man pages of the
included programs to understand how it all works togther.

Regards, Frank

Re: relay-ctrl ?

[Mike A. Sauvain]

my qmail smtp start script looks
where (and how) i should putt them in line?

thanks4 passion..*

#!/bin/sh

case "$1" in
'start')
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`cat /server/apps/qmail/control/concurrencyincoming`
exec /usr/local/bin/softlimit -m 200 \
/usr/local/bin/tcpserver -R -H -v -p -x /etc/tcp.smtp.cdb -c "$MAXSMTPD"
\
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp
/server/apps/qmail/bin/qmail-smtpd 2>&1 | \
/server/apps/qmail/bin/splogger smtpd &
/server/apps/qmail/rc
 ;;
'stop')
;;
*)
echo "Usage: $0 { start | stop }"
;;
esac
exit 0
- Original Message -
From: "Frank Tegtmeyer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, April 08, 2001 6:26 PM
Subject: Re: relay-ctrl ?


"Mike  A. Sauvain" <[EMAIL PROTECTED]> writes:

> somone has a better instruction page than the script owner?

What's wrong with:

---
- Add the following line to a file in /etc/cron.d.  This assumes a
  recent version of vixie cron.  Other versions of cron may use
  different syntax, and you may need to edit root's crontab.
* * * * * /usr/sbin/relay-ctrl-age

How to use with qmail-pop3d:

- Insert the program "relay-ctrl-allow" between your checkpassword
  program and qmail-pop3d in your invocation of tcpserver for the POP
  service.
-

There is nothing more to say about it. Please read the man pages of the
included programs to understand how it all works togther.

Regards, Frank

Re: relay-ctrl ?

[Frank Tegtmeyer]

"Mike  A. Sauvain" <[EMAIL PROTECTED]> writes:

> my qmail smtp start script looks

relay-ctrl has nothing to do with qmail-smtpd except that it changes the
access control file (switch -x) for the tcpserver process that services port 25.

> where (and how) i should putt them in line?

> - Insert the program "relay-ctrl-allow" between your checkpassword
>   program and qmail-pop3d in your invocation of tcpserver for the POP
>   service.

For example like this:

exec env . tcpserver . 0 pop3 qmail-popup mypophost /bin/checkpassword 
 qmail-pop3d Maildir 2>&1

in your run file for the pop3 service (this assumes that you are using daemontools).


Regards, Frank

Re: relay-ctrl ?

[Mike A. Sauvain]

bizzare failure...
hello again...

i installed now the relay-ctrl package..
it seems working (relay-ctrl-allow) .
if it try connect to smtp directly, it doesent connect...
but if
* * * * * /usr/sbin/relay-ctrl-age
does his job, relaying (connecting) it wide open!

after i tryed to put
/etc/relay-ctrl/smtp.rules
with my default tcprules conf:
127.0.0.1:allow,RELAYCLIENT=""
:deny

but no changes...
some one know these problem ?

thanks... mike
- Original Message -
From: "Frank Tegtmeyer" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, April 08, 2001 9:01 PM
Subject: Re: relay-ctrl ?


"Mike  A. Sauvain" <[EMAIL PROTECTED]> writes:

> my qmail smtp start script looks

relay-ctrl has nothing to do with qmail-smtpd except that it changes the
access control file (switch -x) for the tcpserver process that services
port 25.

> where (and how) i should putt them in line?

> - Insert the program "relay-ctrl-allow" between your checkpassword
>   program and qmail-pop3d in your invocation of tcpserver for the POP
>   service.

For example like this:

exec env . tcpserver . 0 pop3 qmail-popup mypophost
/bin/checkpassword  qmail-pop3d Maildir 2>&1

in your run file for the pop3 service (this assumes that you are using
daemontools).


Regards, Frank

Bruce Guenter's relay-ctrl

[Todd Grimes]

Has anyone got Bruce Guenter's relay-ctrl working on FreeBSD?

I am having a problem getting it to log the ip address so that remote 
clients can send their email.

I got the src from http://untroubled.org/relay-ctrl/ and modified the 
relay-ctrl-age.c to put the right directory structures with the exception 
of /var/spool/relay-ctrl .


=
Todd Grimes [EMAIL PROTECTED]
Internet Systems Specialist   [EMAIL PROTECTED]
Bass Pro Outdoors Online, L.L.C.(417)873-4354

Bruce Guenter's relay-ctrl

[Todd Grimes]

when i run relay-ctrl-age from cron or command line, i get # 
/usr/local/bin: Permission denied

I've checked the permissions, from cron its run as root.  The only files it 
should be using in /usr/local/bin is tcprules

is this behavior normal? or have I got a few things screwed up?

Thanks in advance


=
Todd Grimes [EMAIL PROTECTED]
Internet Systems Specialist   [EMAIL PROTECTED]
Bass Pro Outdoors Online, L.L.C.(417)873-4354

Vpopmail and relay-ctrl

[Markus Hempfling]

Hi 

I have a problem mit relay-ctrl... So my tcp.mail-rules looks like so:

127.0.0.1:allow,RELAYCLIENT=""
:deny


So when i try to send a Mail from a client that connected via pop3, it
can send messages If not... He can'n send messages So but my
problem is, when i send mails from any smtp server to a local mail
adress that is managed by vpopmail, than vpopmail cant recieve it. When
i delete the :deny from the tcp.mail-rules then it works But then i
have a open relay mailer... :( 

I also checked the control/rcpthost. File There are all domains
in it So where can be the problem? Can you help me? 


Greets
Markus

relay-ctrl 1.2 problem

[Olivier M.]

I'm trying relay-ctrl 1.2 : it nearly works, but I have a little problem :
when a user log himself via pop3, the ip comes in /var/control/relay-control,
but /usr/sbin/relay-ctrl-age is _not_ executed. I'm wondering why... maybe you
will have an idea ? It worked with the version 1.1.

Qmail init :

/usr/local/bin/tcpserver -v -u 1001 -g 101 -x/etc/tcp.smtp.cdb -c 100 0 smtp 
/var/qmail/bin/qmail-smtpd \
2>&1 | /var/qmail/bin/splogger smtpd 3 & 

/usr/local/bin/tcpserver -v 0 pop3 /var/qmail/bin/qmail-popup domain.mydomain.ch \
/usr/local/bin/checkvpw /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d Maildir \
2>&1 | /var/qmail/bin/splogger popupd 3 &

relay-ctrl-1.2/defines.h


#define AGE_MINUTES 15
#define BUFSIZE 4096
#define RULESDIR "/etc"
#define SPOOLDIR "/var/qmail/relay-ctrl"
#define AGE_CMD "/usr/sbin/relay-ctrl-age"
#define TCPRULES "/usr/local/bin/tcprules"
#define SMTPRULES "tcp.smtp"
#define SMTPCDB "tcp.smtp.cdb"
#define SMTPFIXUP "smtp.fixup"

directory /var/qmail/relay-ctrl exists, and /etc/tcp.smtp and tcp.smtp.cdb
also. /usr/local/bin/tcprules is also working allright.

If you have a relay-ctrl 1.2 running somewhere, I'd be happy to look at you
scripts!

Thanks for any hint!
Olivier

relay-ctrl no use?

[shaolei]

1.relay ctrl no use?
2.how can I see the whole line?
root   436   429  0 01:22 ?00:00:00 cyclog /var/log/vmailmgrd
root   470 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-pop3d
qmaill 471 1  0 01:22 ?00:00:00 accustamp
qmaill 472 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
root   473   470  0 01:22 ?00:00:00 tcpserver -v -c40 -u0 -g0 0 pop-
root   485 1  0 01:22 ?00:00:00 supervise /var/lock/qmail qmail-
qmaill 486 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
qmails 487   485  0 01:22 ?00:00:00 qmail-send
root   501 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-smtpd
qmaill 502 1  0 01:22 ?00:00:00 accustamp
qmaill 503 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
qmaild 504   501  0 01:22 ?00:00:00 tcpserver -v -c40 -u81 -g80 0 sm
root   517 1  0 01:22 ?00:00:00 httpd.1381 -f /usr/local/apache/
wayx   518   517  0 01:22 ?00:00:00 httpd.1381 -f /usr/local/apache/
root   533 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-qmqpd
qmaill 534 1  0 01:22 ?00:00:00 accustamp
qmaill 535 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
qmaild 536   533  0 01:22 ?00:00:00 tcpserver -v -c40 -u81 -g80 0 62
root   541 1  0 01:22 ?00:00:00 perl /wayx/crontask/server.pl 0
qmaill 542   487  0 01:22 ?00:00:00 accustamp qmail
root   543   487  0 01:22 ?00:00:00 qmail-lspawn # Using qmail-local
qmailr 544   487  0 01:22 ?00:00:00 qmail-rspawn
qmailq 545   487  0 01:22 ?00:00:00 qmail-clean


 qmail-pop3d.init
 qmail-smtpd.init

relay-ctrl no use?

[jackshaw]

 1.relay ctrl no use?
 2.how can I see the whole line?
 root   436   429  0 01:22 ?00:00:00 cyclog /var/log/vmailmgrd
 root   470 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-pop3d
 qmaill 471 1  0 01:22 ?00:00:00 accustamp
 qmaill 472 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
 root   473   470  0 01:22 ?00:00:00 tcpserver -v -c40 -u0 -g0 0 pop-
 root   485 1  0 01:22 ?00:00:00 supervise /var/lock/qmail qmail-
 qmaill 486 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
 qmails 487   485  0 01:22 ?00:00:00 qmail-send
 root   501 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-smtpd
 qmaill 502 1  0 01:22 ?00:00:00 accustamp
 qmaill 503 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
 qmaild 504   501  0 01:22 ?00:00:00 tcpserver -v -c40 -u81 -g80 0 sm
 root   517 1  0 01:22 ?00:00:00 httpd.1381 -f /usr/local/apache/
 wayx   518   517  0 01:22 ?00:00:00 httpd.1381 -f /usr/local/apache/
 root   533 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-qmqpd
 qmaill 534 1  0 01:22 ?00:00:00 accustamp
 qmaill 535 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
 qmaild 536   533  0 01:22 ?00:00:00 tcpserver -v -c40 -u81 -g80 0 62
 root   541 1  0 01:22 ?00:00:00 perl /wayx/crontask/server.pl 0
 qmaill 542   487  0 01:22 ?00:00:00 accustamp qmail
 root   543   487  0 01:22 ?00:00:00 qmail-lspawn # Using qmail-local
 qmailr 544   487  0 01:22 ?00:00:00 qmail-rspawn
 qmailq 545   487  0 01:22 ?00:00:00 qmail-clean
 


 qmail-pop3d.init
 qmail-smtpd.init

Re: relay-ctrl problem

[Charles Cazabon]

Adam Stiles <[EMAIL PROTECTED]> wrote:
> 
> I installed relay-ctrl 2.5 per the instructions.
[...] 
> I get the standard '553 sorry' message about not relaying.

This isn't actually a qmail issue, so you may not get an answer here.  Try
on one of Bruce Guenter's mailing lists, which are specifically for his
software.  The one you want is probably [EMAIL PROTECTED] IIRC.  Check
the relay-ctrl web page for the subscription address:

http://em.ca/~bruceg/relay-ctrl/

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

can't remove relay-ctrl

[jackshaw]

rpm -e ucspi-unix-0.34-1
error: removing these packages would break dependencies:
ucspi-unix is needed by qmail-1.03+patches-16
[root@test bruceg]# rpm -e qmail-1.03+patches-16
error: removing these packages would break dependencies:
qmail >= 1.03+patches is needed by relay-ctrl-2.5-1
[root@test bruceg]# rpm -e relay-ctrl-2.5-1
execution of script failed

what can I do?

relay-ctrl-age problem

[Boz Crowther]

I'm trying to run relay-ctrl-age to allow for smtp relaying after pop3
authentication.  I'm trying to run it from root-crontab, but even if I run
it from the command line as root I get an "access denied" error on the
tcprules directory.

Has anyone else had this problem, and if so, what's the resolution?  Thanks.

relay-ctrl and qmail

[Bill Isaacs]

After installing this package, I found that I could not login to check my 
email (ERR: authorization failed).  I had to uncomment the pop-3 and smtp 
lines in inetd.conf to be able to connect to the server at all (these had 
been commented out during by the installation routine).

I am trying to use this package so that I can relay from my home workstation 
in California with a dynamic IP address.

Any advice?

Thanks,

Bill
_
Get your FREE download of MSN Explorer at http://explorer.msn.com

Relay-ctrl and qmail

[Bill Isaacs]

Now that we're all in agreement on what relay-ctrl is, let me get
more specific about what is not happening for me with this package ;)

I check the spool directory:
---
[root@hoss relay-ctrl]# ls -l
total 0
[root@hoss relay-ctrl]#
---

I log into my server and collect my email with Eudora,
and then check the spool directory again:
--
[root@hoss relay-ctrl]# ls -l
total 0
-rw-rw-r--   1 root workshop0 Feb 27 12:43 63.207.13.190
[root@hoss relay-ctrl]#
--

I now check the cron log to make sure that relay-ctrl-age has run
since the timestamp on the above file:
---
root (02/27-12:47:00-5529) CMD (/usr/sbin/relay-ctrl-age)
---

So far so good.  Now I attempt to relay a message from my
workstation at the above IP address:

'553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)'.


So obviously, the database isn't being updated.
Here is my invocation of tcpserver and relay-ctrl
---
tcpserver -v -R 0 pop-3 /var/qmail/bin/qmail-popup (fqdn - no, its the real 
name not 'fqdn') \
/bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d 
Maildir
2>&1 | \
/var/qmail/bin/splogger pop3d &
----

Here are the contents of /etc/relay-ctrl:
----
[root@hoss relay-ctrl]# ls -l
total 6
-rw-rw-r--   1 root qmail   4 Feb 26 18:52 expiry
-rw-rw-r--   1 root qmail  22 Feb 26 18:52 rule
-rw-rw-r--   1 root qmail   9 Feb 26 18:52 smtpcdb
-rw-rw-r--   1 root qmail  11 Feb 26 18:53 smtprules
-rw-rw-r--   1 root qmail  22 Feb 26 18:53 spooldir
-rw-rw-r--   1 root qmail  18 Feb 26 18:54 tcprules
[root@hoss relay-ctrl]# cat *
900
:allow,RELAYCLIENT=''
smtp.cdb
smtp.rules
/var/spool/relay-ctrl
/usr/bin/tcprules
[root@hoss relay-ctrl]#
--

What is going on here?  What else should I check?

Thanks,

Bill


_
Get your FREE download of MSN Explorer at http://explorer.msn.com

RE: Bruce Guenter's relay-ctrl

[Lukas Beeler]

> -Original Message-
> From: Todd Grimes [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, June 27, 2001 7:05 PM
> To: [EMAIL PROTECTED]
> Subject: Bruce Guenter's relay-ctrl
>
>
> when i run relay-ctrl-age from cron or command line, i get #
> /usr/local/bin: Permission denied
probably trying to exec a directory ?


> I've checked the permissions, from cron its run as root.  The
> only files it
> should be using in /usr/local/bin is tcprules
>
> is this behavior normal? or have I got a few things screwed up?
>
> Thanks in advance
>
>
> =
> Todd Grimes [EMAIL PROTECTED]
> Internet Systems Specialist   [EMAIL PROTECTED]
> Bass Pro Outdoors Online, L.L.C.(417)873-4354
>
>
>

Re: Bruce Guenter's relay-ctrl

[Charles Cazabon]

Todd Grimes <[EMAIL PROTECTED]> wrote:
> when i run relay-ctrl-age from cron or command line, i get # 
> /usr/local/bin: Permission denied

Do you have a space between /usr/local/bin and relay-ctrl-age or some other
program in your cron script?

Please post your script here (copy & paste, NOT retyped).

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
---

Re: Bruce Guenter's relay-ctrl

[Todd Grimes]

*   *   *   *   *   root/usr/sbin/relay-ctrl-age

At 01:43 PM 6/27/2001 -0600, you wrote:
>Todd Grimes <[EMAIL PROTECTED]> wrote:
> > when i run relay-ctrl-age from cron or command line, i get #
> > /usr/local/bin: Permission denied
>
>Do you have a space between /usr/local/bin and relay-ctrl-age or some other
>program in your cron script?
>
>Please post your script here (copy & paste, NOT retyped).
>
>Charles
>--
>---
>Charles Cazabon<[EMAIL PROTECTED]>
>GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
>---

Re: Vpopmail and relay-ctrl

[Henning Brauer]

On Mon, Jul 16, 2001 at 12:23:25PM +0200, Markus Hempfling wrote:
> Hi 
> 
> I have a problem mit relay-ctrl... So my tcp.mail-rules looks like so:
> 
> 127.0.0.1:allow,RELAYCLIENT=""
> :deny

What are you expecting when denying _all_ connections? change the last line
to :allow, you aren't an Open Relay than as RELAYCLIENT isn't set.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de *
* Roedingsmarkt 14, 20459 Hamburg, Germany   *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

AW: Vpopmail and relay-ctrl

[Markus Hempfling]

> What are you expecting when denying _all_ connections? change
> the last line to :allow, you aren't an Open Relay than as 
> RELAYCLIENT isn't set.

Hi Henning..!

Sorry, i tried that too... But i make a mistake when i tested smtp after
pop 
Im stupid Sorry. 

Thanks alot :) 

Markus

relay-ctrl 1.2 - doesn't work

[[EMAIL PROTECTED]]

Hello,

I tried to setup relay-ctrl on a new machine, but it doesn't work.
relay-ctrl-allow writes the IP in the spool dir, but does not make a
new cdb file. relay-ctrl-age (executed via cron) builds a new cdb file
every five minutes. So I have to wait up to 5 minutes to relay a mail.
It's a little bit weird, because I installed an older version on
another system and it worked perfectly. Do you have any idea what could
be wrong? I thinks relay-ctrl-allow executes relay-ctrl-age. Maybe
there is a problem in executing relay-ctrl-age, but I don't know why.
AGE_CMD looks fine.

pop3d part from my qmail startup file:

sh -c "start-stop-daemon --start --quiet --user root \
  --exec /usr/bin/tcpserver -- \
  0 pop-3 /usr/sbin/qmail-popup `hostname`.`dnsdomainname` \
  /opt/vmailmgr/bin/checkvpw /opt/relay-ctrl/sbin/relay-ctrl-allow
/usr/sbin/qmail-pop3d Maildir &"


Here my defines.h:

#ifndef AGE_MINUTES
#define AGE_MINUTES 10
#endif

#ifndef BUFSIZE
#define BUFSIZE 4096
#endif

#ifndef RULESDIR
#define RULESDIR "/etc"
#endif

#ifndef SPOOLDIR
#define SPOOLDIR "/opt/relay-ctrl/spool"
#endif

#ifndef AGE_CMD
#define AGE_CMD "/opt/relay-ctrl/sbin/relay-ctrl-age"
#endif

#ifndef TCPRULES
#define TCPRULES "/usr/bin/tcprules"
#endif

#ifndef SMTPRULES
#define SMTPRULES "tcp.smtp"
#endif

#ifndef SMTPCDB
#define SMTPCDB "tcp.smtp.cdb"
#endif

#ifndef SMTPFIXUP
#define SMTPFIXUP "smtp.fixup"
#endif

Re: relay-ctrl 1.2 problem

[Bruce Guenter]

On Fri, Jan 21, 2000 at 10:50:53AM +0100, Olivier M. wrote:
> I'm trying relay-ctrl 1.2 : it nearly works, but I have a little problem :
> when a user log himself via pop3, the ip comes in /var/control/relay-control,
> but /usr/sbin/relay-ctrl-age is _not_ executed. I'm wondering why... maybe you
> will have an idea ? It worked with the version 1.1.

How do you know it isn't being run?  Is it setuid?
-- 
Bruce Guenter <[EMAIL PROTECTED]>   http://em.ca/~bruceg/

Re: relay-ctrl 1.2 problem

[Olivier M.]

On Fri, Jan 21, 2000 at 08:20:39AM -0600, Bruce Guenter wrote:
> How do you know it isn't being run?  

the tcp.smtp.cdb table isn't updated after the user logged in.
only the relay-ctrl-age from let him come in.

> Is it setuid?

-rwxr-xr-x   1 root root36008 Jan 19 09:35 relay-ctrl-age
-rwxr-xr-x   1 root root34921 Jan 19 09:35 relay-ctrl-allow
no.

Olivier

relay-ctrl-1.4 on Solaris

[Kristina]

Has anyone managed to successfully compile
relay-ctrl 1.4 on Solaris 6 or 7?

If so, please let me know how you managed to compile
it.


Thankyou,
Kristina

relay-ctrl-2.5 doesn't work

[Hans Peyrot]

Hello,
 
I would appreciate any help. I simly can not make relay-ctrl-2.5 to work. 
Bellow is the complete listing of everything I have done, installed, etc. Hope 
is specific enough.
 
Thank you for your help. Hans.
 
--
System
 
RedHat Linux 6.3
Qmail 1.03
checkpoppasswd (to validate multiple users with one system account)
relay-ctrl-2.5
 
--
 
Things I noticed; afteter installing, the relay-ctrl directories were not 
created (i created them by hand).
one in /etc the other in /var/spool 
 
Symptoms:
 
I can read email, but after de pop3 conection, no files are added to the 
/var/spool/relay-ctrl. 
And the tcp-smtp file is not modified with the new IP. No errors are logged 
in any file. So when I try to send email from an IP that is not listed in my 
tcp-smtp file, I receive the known message "Sorry the domain is not listed in my 
list of recepient hosts".
 
The cron file for * * * * *  /usr/sbin/relay-ctrl-age is working 
fine, and istalled.
 
I created the configurations files in /etc/relay-ctrl. The files and its 
contest I describe them below:
 
File   
Content
expiry 900
rule:allow,RELAYCLIENT=''
rulesdir   /etc
smtpcdb tcp.smtp.cdb
smtprules   tcp.smtp
spooldir      /var/spool/relay-ctrl
tcprules  /usr/local/bin/tcprules
 
ls -l /etc
-rw-r--r--   1 root 
root  114 Oct 17 08:28 
tcp.smtp-rw-r--r--   1 root 
root 2226 Oct 17 08:37 
tcp.smtp.cdbdrwxr-xr-x   2 root 
qmail    4096 Oct 17 08:26 
relay-ctrl
 
ls -l /etc/relay-ctrl
-rw-r--r--   1 root 
qmail   4 Oct 17 06:41 
expiry-rw-r--r--   1 root 
qmail  22 Oct 17 08:26 
rule-rw-r--r--   1 root 
qmail   5 Oct 17 06:35 
rulesdir-rw-r--r--   1 root 
qmail  13 Oct 17 06:36 
smtpcdb-rw-r--r--   1 root 
qmail   9 Oct 17 06:36 
smtprules-rw-r--r--   1 root 
qmail  22 Oct 17 06:37 
spooldir-rw-r--r--   1 root 
qmail  24 Oct 17 06:43 
tcprules
ls -l  /var/spool
drwxr-xr-x   2 root 
root 4096 Oct 17 06:15 
relay-ctrl
ls -l /usr/local/bin
-rwxr-xr-x   1 root 
root    16180 Aug 21 18:07 tcprules
 
ls -l /usr/sbin
-rwxr-xr-x   1 root 
root    16258 Oct 17 06:55 
relay-ctrl-age-rwsr-xr-x   1 root 
root    14250 Oct 17 06:55 
relay-ctrl-allow
tcp-smtp content:
127.:allow,RELAYCLIENT=""
 
qmail script, content:
 
at the beginign:
 
tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup linux.ags.com.mx 
\/bin/checkpoppassword relay-ctrl-allow /var/qmail/bin/qmail-pop3d Maildir 
2>&1 | \/var/qmail/bin/splogger pop3d &
 
case $1 ...
...
  cdb)    tcprules /etc/tcp.smtp.cdb 
/etc/tcp.smtp.tmp < /etc/tcp.smtp    chmod 644 
/etc/tcp.smtp*    echo "Releído 
/etc/tcp.smtp."    ;;
I thick this should be all, I have missed some thing?
 
 

relay-ctrl does not work

[Oliver Lehmann]

Hi, i try to use relay-ctrl with my qmail but it does not work:

Trying 192.168.168.100...
Connected to ernie.sesamestreet.net.
Escape character is '^]'.
+OK <[EMAIL PROTECTED]>
user olivleh1
+OK 
pass *
Error: relay-ctrl-allow cannot be run as root-ERR authorization failed
Connection closed by foreign host.
olivleh1@sina>

here are my start scripts an my defines.h from relay-ctrl:


%cat defines.h 
#ifndef CONFIGDIR
#define CONFIGDIR "/usr/local/etc/relay-ctrl"
#endif

#ifndef AGE_CMD
#define AGE_CMD "/usr/local/sbin/relay-ctrl-age"
#endif

#ifndef AGE_MINUTES
#define AGE_MINUTES 10
#endif

#ifndef BUFSIZE
#define BUFSIZE 4096
#endif

#ifndef RULESDIR
#define RULESDIR "/service/smtpd/"
#endif

#ifndef SPOOLDIR
#define SPOOLDIR "/var/qmail/relay-spool"
#endif

#ifndef TCPRULES
#define TCPRULES "/usr/local/bin/tcprules"
#endif

#ifndef SMTPRULES
#define SMTPRULES "tcp.smtp"
#endif

#ifndef SMTPCDB
#define SMTPCDB "tcp.smtp.cdb"
#endif

#ifndef SMTPFIXUP
#define SMTPFIXUP "smtp.fixup"
#endif
%grep "prefix" Makefile
prefix  = /usr/local
sbindir = $(prefix)/sbin
mandir  = $(prefix)/man
%

nun nochmal meien beiden run scripte:

%cd /service/pop3d/
%cat run
#!/bin/sh
exec 2>&1 \
envdir ./env \
sh -c 'exec '\
'softlimit ${DATALIMIT+"-d$DATALIMIT"} '\
'/usr/local/bin/tcpserver '\
'-vDRHl0 '\
'${BACKLOG+"-b$BACKLOG"} '\
'${CONCURRENCY+"-c$CONCURRENCY"} '\
'-xtcp.cdb '\
'-- "${IP-0}" "${PORT-110}" '\
'/var/qmail/bin/qmail-popup `sed 1q /var/qmail/control/me` '\
'/usr/local/sbin/relay-ctrl-allow \'
'/usr/local/bin/checkpassword '\
'/var/qmail/bin/qmail-pop3d Maildir'
%cd /service/smtpd/
%cat run
#!/bin/sh
exec 2>&1 \
/usr/local/bin/envdir /var/qmail/service/smtpd/env \
sh -c 'exec '\
'/usr/local/bin/envuidgid qmaild '\
'/usr/local/bin/softlimit ${DATALIMIT+"-d$DATALIMIT"} '\
'/usr/local/bin/tcpserver '\
'-vUDRHl0 '\
'${BACKLOG+"-b$BACKLOG"} '\
'    ${CONCURRENCY+"-c$CONCURRENCY"} '\
'-xtcp.cdb '\
'-- "${IP-0}" "${PORT-25}" '\
'/var/qmail/bin/qmail-smtpd'
%

i had installed relay-ctrl with 'make root-install'

%ls -alois /usr/local/sbin/relay*
326372  9 -rwxr-xr-x  1 root  wheel  - 8839 Nov  8 15:15
/usr/local/sbin/relay-ctrl-age
326256  7 -rwsr-xr-x  1 root  wheel  - 6765 Nov  8 15:15
/usr/local/sbin/relay-ctrl-allow
%


Olli


-- 
Having trouble in Windows? Reboot!
Having trouble in Unix? Be root!

Re: relay-ctrl no use?

[George Patterson]

I can't answer qutstion 1...

For question 2 I may be able to help, try the following line... :)

ps axwww

If that doesn't work, we need to know what operating system you are
using for your mail server

Hope is helps a little other wise re post in a weeks time.

shaolei wrote:

> 1.relay ctrl no use?
> 2.how can I see the whole line?
> root   436   429  0 01:22 ?00:00:00 cyclog /var/log/vmailmgrd
> root   470 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-pop3d
> qmaill 471 1  0 01:22 ?00:00:00 accustamp
> qmaill 472 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
> root   473   470  0 01:22 ?00:00:00 tcpserver -v -c40 -u0 -g0 0 pop-
> root   485 1  0 01:22 ?00:00:00 supervise /var/lock/qmail qmail-
> qmaill 486 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
> qmails 487   485  0 01:22 ?00:00:00 qmail-send
> root   501 1  0 01:22 ?00:00:00 supervise /var/lock/qmail-smtpd
> qmaill 502 1  0 01:22 ?00:00:00 accustamp
> qmaill 503 1  0 01:22 ?00:00:00 cyclog -s 100 /var/log/qmail
< =rest of porecess list snipped= >

Re: can't remove relay-ctrl

[Charles Cazabon]

[EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> rpm -e ucspi-unix-0.34-1
> error: removing these packages would break dependencies:
> ucspi-unix is needed by qmail-1.03+patches-16
> [root@test bruceg]# rpm -e qmail-1.03+patches-16
> error: removing these packages would break dependencies:
> qmail >= 1.03+patches is needed by relay-ctrl-2.5-1
> [root@test bruceg]# rpm -e relay-ctrl-2.5-1
> execution of script failed
> 
> what can I do?

Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
Try posting on a relevant mailing list.  Bruce has his "rpms" mailing list
and his "bgware" mailing list, as well as relay-ctrl.  Try asking on one
of those.  You can find the list subscription addresses by visiting his
site at:

http://em.ca/~bruceg/

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: can't remove relay-ctrl

[Charles Cazabon]

Charles Cazabon <[EMAIL PROTECTED]> wrote:
[...]
Except that I only wrote it once.  I've even checked my local copy of
outgoing mail.  I've never seen a problem like this on this list before.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: relay-ctrl-age problem

[Boz Crowther]

Skip it.  I'm a dope, and must have screwed something up.

- Original Message -
From: "Boz Crowther" <[EMAIL PROTECTED]>
To: "Qmail@List. Cr. Yp. To" <[EMAIL PROTECTED]>
Sent: Monday, January 29, 2001 10:22 PM
Subject: relay-ctrl-age problem


> I'm trying to run relay-ctrl-age to allow for smtp relaying after pop3
> authentication.  I'm trying to run it from root-crontab, but even if I run
> it from the command line as root I get an "access denied" error on the
> tcprules directory.
>
> Has anyone else had this problem, and if so, what's the resolution?
Thanks.
>
>

Re: relay-ctrl and qmail

[Charles Cazabon]

Bill Isaacs <[EMAIL PROTECTED]> wrote:
> After installing this package, I found that I could not login to check my 
> email (ERR: authorization failed).  I had to uncomment the pop-3 and smtp 
> lines in inetd.conf to be able to connect to the server at all (these had 
> been commented out during by the installation routine).

relay-ctrl relies on tcpserver.  You can't run it out of inetd.  Change your
pop3 configuration to use tcpserver as documented.

> I am trying to use this package so that I can relay from my home workstation 
> in California with a dynamic IP address.
> 
> Any advice?

Send your mail through your ISP's smarthost -- that's what they're for.
relay-ctrl is not needed for most situations, and this appears to be one
of them.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: relay-ctrl and qmail

[Erwin Hoffmann]

Hi,

At 20:45 26.2.2001 -0600, Charles Cazabon wrote:
>Bill Isaacs <[EMAIL PROTECTED]> wrote:
>> After installing this package, I found that I could not login to check my 
>> email (ERR: authorization failed).  I had to uncomment the pop-3 and smtp 
>> lines in inetd.conf to be able to connect to the server at all (these had 
>> been commented out during by the installation routine).
>
>relay-ctrl relies on tcpserver.  You can't run it out of inetd.  Change your
>pop3 configuration to use tcpserver as documented.

relay-ctrl with tpcserver depends on (static) IP-Addresses.

>
>> I am trying to use this package so that I can relay from my home
workstation 
>> in California with a dynamic IP address.
>> 
>> Any advice?

1. Use SMTP-after-POP: Patches are available. 
But you have to employ tcpserver.
2. Alternatively, you can use my SPAMCONTROL patch. 
It gives you the ability to define arbitary E-Mail addresses which are
allowed to relay. Here you free to use INETD/XINETD/TCPSERVER (with Version
1.3.1).

greetings.
eh.
>
>Send your mail through your ISP's smarthost -- that's what they're for.
>relay-ctrl is not needed for most situations, and this appears to be one
>of them.
>
>Charles
>-- 
>---
>Charles Cazabon<[EMAIL PROTECTED]>
>GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
>Any opinions expressed are just that -- my opinions.
>---
>
+---+
|  fffhh http://www.fehcom.deDr. Erwin Hoffmann |
| ff  hh|
| ffeee     ccc   ooomm mm  mm   Wiener Weg 8   |
| fff  ee ee  hh  hh   cc   oo   oo  mmm  mm  mm 50858 Koeln|
| ff  ee eee  hh  hh  cc   oo oo mm   mm  mm|
| ff  eee hh  hh   cc   oo   oo  mm   mm  mm Tel 0221 484 4923  |
| ff      hh  hhccc   ooomm   mm  mm Fax 0221 484 4924  |
+---+

Re: relay-ctrl and qmail

[Charles Cazabon]

Erwin Hoffmann <[EMAIL PROTECTED]> wrote:
> At 20:45 26.2.2001 -0600, Charles Cazabon wrote:
> >Bill Isaacs <[EMAIL PROTECTED]> wrote:
> >> After installing this package, I found that I could not login to check my 
> >> email (ERR: authorization failed).  I had to uncomment the pop-3 and smtp 
> >> lines in inetd.conf to be able to connect to the server at all (these had 
> >> been commented out during by the installation routine).
> >
> >relay-ctrl relies on tcpserver.  You can't run it out of inetd.  Change your
> >pop3 configuration to use tcpserver as documented.
> 
> relay-ctrl with tpcserver depends on (static) IP-Addresses.

Pardon?  relay-ctrl is a package by Bruce Guenter, specifically designed to
allow selective relaying from clients with dynamically assigned IP addresses.
If it required static IP addresses, it would serve absolutely no purpose.
Perhaps you were thinking of IP-based selective relaying with tcpserver?

> 1. Use SMTP-after-POP: Patches are available. 

relay-ctrl provides SMTP-after-POP functionality, with no patches to qmail.
It's a technically superior solution.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: relay-ctrl and qmail

[Enrique Vadillo]

|o|  Charles Cazabon escribió 
|o| > 1. Use SMTP-after-POP: Patches are available. 
|o| 
|o| relay-ctrl provides SMTP-after-POP functionality, with no patches to qmail.
|o| It's a technically superior solution.

I recently installed Bruce Guenter's relay-ctrl after testing many different
solutions, i can definitely say it's the best smtp-after-pop package around,
and it requires no Qmail patches.

Enrique-

Re: relay-ctrl and qmail

[Erwin Hoffmann]

Hi,

I was misleaded by the term "relay-ctrl" - it was to little specific. 
The original posting simply said:
"After installing this package, I found that I could not login to check my 
email (ERR: authorization failed).  I had to uncomment the pop-3 and smtp 
lines in inetd.conf to be able to connect to the server at all (these had 
been commented out during by the installation routine)."

It was not specific enough to point me to Bruce Guenter's solution. Maybe
there was some private conversation going on before.

There are serval implementations out now, including Bruce's. 
Actually, instead of saying "Patches are available" I should say
"Enhancements are available". 

For anybody, to subsume Bruce's development under "Alternative
Checkpassword Implementations" is a little bit short-breathed. We are back
to the question, who to organzie the qmail home page. 


Apologize.
eh.

At 10:09 27.2.2001 -0500, Enrique Vadillo wrote:
>|o|  Charles Cazabon escribió ----
>|o| > 1. Use SMTP-after-POP: Patches are available. 
>|o| 
>|o| relay-ctrl provides SMTP-after-POP functionality, with no patches to
qmail.
>|o| It's a technically superior solution.
>
>I recently installed Bruce Guenter's relay-ctrl after testing many different
>solutions, i can definitely say it's the best smtp-after-pop package around,
>and it requires no Qmail patches.
>
>Enrique-
>
+---+
|  fffhh http://www.fehcom.deDr. Erwin Hoffmann |
| ff  hh|
| ffeee     ccc   ooomm mm  mm   Wiener Weg 8   |
| fff  ee ee  hh  hh   cc   oo   oo  mmm  mm  mm 50858 Koeln|
| ff  ee eee  hh  hh  cc   oo oo mm   mm  mm|
| ff  eee hh  hh   cc   oo   oo  mm   mm  mm Tel 0221 484 4923  |
| ff      hh  hhccc   ooomm   mm  mm Fax 0221 484 4924  |
+---+

Re: Relay-ctrl and qmail

[Charles Cazabon]

Bill Isaacs <[EMAIL PROTECTED]> wrote:
> Now that we're all in agreement on what relay-ctrl is, let me get
> more specific about what is not happening for me with this package ;)
[...] 
> I now check the cron log to make sure that relay-ctrl-age has run
> since the timestamp on the above file:
> ---
> root (02/27-12:47:00-5529) CMD (/usr/sbin/relay-ctrl-age)
> ---
> 
> So far so good.
[...]
> So obviously, the database isn't being updated.

Okay, lets see some information on the file itself.  How about 
`ls -ld / /etc /etc/tcpcontrol /etc/tcpcontrol/*`

Then, use tcprulescheck on the cdb file to see if that IP address is
in there:
`TCPREMOTEIP=1.2.3.4 tcprulescheck /etc/tcpcontrol/smtp.cdb`

Replace 1.2.3.4 with the IP address of the machine you POP-checked your
mail from immediately before doing the above steps.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: Relay-ctrl and qmail

[Bill Isaacs]

Hi Bruce and Charles,

No luck yet.  I tried Bruce's suggestion with the same outcome as before:
---
tcpserver -v -R -x /etc/smtp.cdb 0 pop-3 /var/qmail/bin/qmail-popup 
hoss.willysworkshop.com \
/bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d 
Maildir
2>&1 | \
/var/qmail/bin/splogger pop3d &
---


And Charles, here are the diagnostics you requested (I hope)

>Okay, lets see some information on the file itself.  How about
> `ls -ld / /etc /etc/tcpcontrol /etc/tcpcontrol/*`
--
[root@hoss relay-ctrl]# ls -ld / /etc /etc/tcpcontrol /etc/tcpcontrol/*
drwxr-xr-x  19 root root 1024 Feb 26 12:35 /
drwxr-xr-x  24 root root 3072 Feb 27 22:34 /etc
drwxr-xr-x   2 root root 1024 Feb 27 21:27 /etc/tcpcontrol
-rw-r--r--   1 root qmail2072 Feb 26 12:48 
/etc/tcpcontrol/pop-3.cdb
-rw-r--r--   1 root qmail2072 Feb 26 13:12 
/etc/tcpcontrol/pop-3.cdb
.rpmnew
-rw-r--r--   1 root qmail   7 Feb 26 12:48 
/etc/tcpcontrol/pop-3.rul
es
-rw-r--r--   1 root qmail   7 Feb 26 13:12 
/etc/tcpcontrol/pop-3.rul
es.rpmnew
-rw-r--r--   1 root qmail2074 Feb 26 12:48 
/etc/tcpcontrol/qmqp.cdb
-rw-r--r--   1 root qmail2074 Feb 26 13:12 
/etc/tcpcontrol/qmqp.cdb.
rpmnew
-rw-r--r--   1 root qmail   6 Feb 26 12:48 
/etc/tcpcontrol/qmqp.rule
s
-rw-r--r--   1 root qmail   6 Feb 26 13:12 
/etc/tcpcontrol/qmqp.rule
s.rpmnew
-rw-r--r--   1 root qmail2072 Feb 26 12:48 
/etc/tcpcontrol/qmtp.cdb
-rw-r--r--   1 root qmail2072 Feb 26 13:12 
/etc/tcpcontrol/qmtp.cdb.
rpmnew
-rw-r--r--   1 root qmail   7 Feb 26 12:48 
/etc/tcpcontrol/qmtp.rule
s
-rw-r--r--   1 root qmail   7 Feb 26 13:12 
/etc/tcpcontrol/qmtp.rule
s.rpmnew
-rw-r--r--   1 root root 2072 Feb 27 21:27 
/etc/tcpcontrol/smtp.cdb
-rw-r--r--   1 root qmail2072 Feb 26 13:12 
/etc/tcpcontrol/smtp.cdb.
rpmnew
-rw-r--r--   1 root qmail   7 Feb 26 12:48 
/etc/tcpcontrol/smtp.rule
s
-rw-r--r--   1 root qmail   7 Feb 26 13:12 
/etc/tcpcontrol/smtp.rule
s.rpmnew
[root@hoss relay-ctrl]#

>Then, use tcprulescheck on the cdb file to see if that IP address is
>in there:
> `TCPREMOTEIP=1.2.3.4 tcprulescheck /etc/tcpcontrol/smtp.cdb`

[root@hoss workshop]# TCPREMOTEIP=63.207.13.190 tcprulescheck 
/etc/tcpcontrol/smtp.cdb
rule :
allow connection
[root@hoss workshop]#
--

Anyway, there's the dope.  I did find an error in tcpcontrol, to whit:
I had not specified the full path to the smtp.cdb file.  Unfortunately
fixing this did not solve the problem.

Thanks,

Bill

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

Re: Relay-ctrl and qmail

[Charles Cazabon]

Bill Isaacs <[EMAIL PROTECTED]> wrote:
> 
> No luck yet.  I tried Bruce's suggestion with the same outcome as before:
> ---
> tcpserver -v -R -x /etc/smtp.cdb 0 pop-3 /var/qmail/bin/qmail-popup 
> hoss.willysworkshop.com \
> /bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d 
> Maildir
> 2>&1 | \
> /var/qmail/bin/splogger pop3d &
> ---

There's a problem there.  You're firing up qmail-pop3d, but using the
cdb file which is intended for qmail-smtpd.  Perhaps your tcpserver
invocation for qmail-smtpd is also incorrect?  However, that wouldn't
explain the next problem...

> And Charles, here are the diagnostics you requested (I hope)
[...] 
> > `TCPREMOTEIP=1.2.3.4 tcprulescheck /etc/tcpcontrol/smtp.cdb`
> 
> [root@hoss workshop]# TCPREMOTEIP=63.207.13.190 tcprulescheck 
> /etc/tcpcontrol/smtp.cdb
> rule :
> allow connection

This is after you had POP'ed your mail from that IP address?  If so, the
cdb file is not being built properly, or relay-ctrl-allow is not doing its
job (unlikely, as it works everywhere else).  This has to be a configuration
error somwhere.

> Anyway, there's the dope.  I did find an error in tcpcontrol, to whit:
> I had not specified the full path to the smtp.cdb file.  Unfortunately
> fixing this did not solve the problem.

A summary:  relay-ctrl-allow sits in the qmail-pop3d chain between checkpassword
and qmail-pop3d.  It records the IP addresses of machines where a user has
successfully authenticated with POP3.  relay-ctrl then uses this information
to build an smtp.cdb file, which tcpserver uses for the qmail-smtpd service.
The variable RELAYCLIENT is set to an empty value for those clients who
authenticated with POP3, thus allowing them to relay SMTP traffic through
the server.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: Relay-ctrl and qmail

[Bruce Guenter]

On Wed, Feb 28, 2001 at 06:46:49AM -, Bill Isaacs wrote:
> Hi Bruce and Charles,
> 
> No luck yet.  I tried Bruce's suggestion with the same outcome as before:
> ---
> tcpserver -v -R -x /etc/smtp.cdb 0 pop-3 /var/qmail/bin/qmail-popup 

I'm sorry, that was a red herring.  You don't need a control file on the
POP server.

Hmmm...  Do you have both /etc/smtp.{rules,cdb} and /etc/tcpcontrol?
Which one is being updated?

> >Okay, lets see some information on the file itself.  How about
> > `ls -ld / /etc /etc/tcpcontrol /etc/tcpcontrol/*`
> --
> -rw-r--r--   1 root root 2072 Feb 27 21:27 /etc/tcpcontrol/smtp.cdb
> -rw-r--r--   1 root qmail   7 Feb 26 12:48 /etc/tcpcontrol/smtp.rules

> >Then, use tcprulescheck on the cdb file to see if that IP address is
> >in there:
> > `TCPREMOTEIP=1.2.3.4 tcprulescheck /etc/tcpcontrol/smtp.cdb`

Even more useful would be "cdbdumphttp://em.ca/~bruceg/

 PGP signature

Re: Relay-ctrl and qmail

[Enrique Vadillo]

It's strange that you use /etc/smtp.cdb to control pop access (!) and
that you show us a different CDB file /etc/tcpcontrol/smtp.cdb in your
system, are you sure you are using the right CDB file in your qmail-smtpd
run script? it might help showing us that script too.

Enrique-

|o|  Bill Isaacs escribió 
|o| ---
|o| tcpserver -v -R -x /etc/smtp.cdb 0 pop-3 /var/qmail/bin/qmail-popup 
|o| hoss.willysworkshop.com \
|o| /bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d 
|o| Maildir
|o| 2>&1 | \
|o| /var/qmail/bin/splogger pop3d &
|o| ---
|o| 
|o| And Charles, here are the diagnostics you requested (I hope)
|o| 
|o| >Okay, lets see some information on the file itself.  How about
|o| > `ls -ld / /etc /etc/tcpcontrol /etc/tcpcontrol/*`
|o| --
|o| [root@hoss relay-ctrl]# ls -ld / /etc /etc/tcpcontrol /etc/tcpcontrol/*
|o| drwxr-xr-x  19 root root 1024 Feb 26 12:35 /
|o| drwxr-xr-x  24 root root 3072 Feb 27 22:34 /etc
|o| drwxr-xr-x   2 root root 1024 Feb 27 21:27 /etc/tcpcontrol
|o| -rw-r--r--   1 root qmail2072 Feb 26 12:48 
|o| /etc/tcpcontrol/pop-3.cdb
|o| -rw-r--r--   1 root qmail2072 Feb 26 13:12 
|o| /etc/tcpcontrol/pop-3.cdb
|o| .rpmnew
|o| -rw-r--r--   1 root qmail   7 Feb 26 12:48 
|o| /etc/tcpcontrol/pop-3.rul
|o| es
|o| -rw-r--r--   1 root qmail   7 Feb 26 13:12 
|o| /etc/tcpcontrol/pop-3.rul
|o| es.rpmnew
|o| -rw-r--r--   1 root qmail2074 Feb 26 12:48 
|o| /etc/tcpcontrol/qmqp.cdb
|o| -rw-r--r--   1 root qmail2074 Feb 26 13:12 
|o| /etc/tcpcontrol/qmqp.cdb.
|o| rpmnew
|o| -rw-r--r--   1 root qmail   6 Feb 26 12:48 
|o| /etc/tcpcontrol/qmqp.rule
|o| s
|o| -rw-r--r--   1 root qmail   6 Feb 26 13:12 
|o| /etc/tcpcontrol/qmqp.rule
|o| s.rpmnew
|o| -rw-r--r--   1 root qmail2072 Feb 26 12:48 
|o| /etc/tcpcontrol/qmtp.cdb
|o| -rw-r--r--   1 root qmail2072 Feb 26 13:12 
|o| /etc/tcpcontrol/qmtp.cdb.
|o| rpmnew
|o| -rw-r--r--   1 root qmail   7 Feb 26 12:48 
|o| /etc/tcpcontrol/qmtp.rule
|o| s
|o| -rw-r--r--   1 root qmail   7 Feb 26 13:12 
|o| /etc/tcpcontrol/qmtp.rule
|o| s.rpmnew
|o| -rw-r--r--   1 root root 2072 Feb 27 21:27 
|o| /etc/tcpcontrol/smtp.cdb
|o| -rw-r--r--   1 root qmail2072 Feb 26 13:12 
|o| /etc/tcpcontrol/smtp.cdb.
|o| rpmnew
|o| -rw-r--r--   1 root qmail   7 Feb 26 12:48 
|o| /etc/tcpcontrol/smtp.rule
|o| s
|o| -rw-r--r--   1 root qmail   7 Feb 26 13:12 
|o| /etc/tcpcontrol/smtp.rule
|o| s.rpmnew
|o| [root@hoss relay-ctrl]#
|o| 
|o| >Then, use tcprulescheck on the cdb file to see if that IP address is
|o| >in there:
|o| > `TCPREMOTEIP=1.2.3.4 tcprulescheck /etc/tcpcontrol/smtp.cdb`
|o| 
|o| [root@hoss workshop]# TCPREMOTEIP=63.207.13.190 tcprulescheck 
|o| /etc/tcpcontrol/smtp.cdb
|o| rule :
|o| allow connection
|o| [root@hoss workshop]#
|o| --
|o| 
|o| Anyway, there's the dope.  I did find an error in tcpcontrol, to whit:
|o| I had not specified the full path to the smtp.cdb file.  Unfortunately
|o| fixing this did not solve the problem.
|o| 
|o| Thanks,
|o| 
|o| Bill
|o| 
|o| _
|o| Get your FREE download of MSN Explorer at http://explorer.msn.com

smtp relay / relay-ctrl / tcpserver

[Mike A. Sauvain]

hello all, if someone know a special mailinglist on smtp relay problem
OR
tcpserver usage's .. please let me know..

my problem are follow:

after a second relay attack from russia i dooed follow things:

- i work whit tcpserver and qmail with mysql support
- i installed the popb4smtp (relay-ctrl-2.5) package from
http://em.ca/~bruceg/relay-ctrl/

-- now i have the the follow problem:
if i deny all (tcpserver & relay-ctrl), allow only what has pop'ed last
5 minute
no one (mail servers) cant send my a mail

so my 2 questions, first has really precedence for me
1. so how i done, that every one ist accepted to deliver local,
but to relay only hoe's has pop'ed before?

2. and where are the messages delivered after the relay was deny ?
not accept are like not recive, or accepted but receject
and sended to postmaster ?  - can i choose ? (i would prefere if it
rejecet silent the mail, but send me the mail he's would, as notice)

some cfg:

smtp.rules (vor relay-ctrl) (but it results, that only pop'ed ip's can
connect to smtp)
.:allow,TCPREMOTEHOST="",TCPREMOTEIP="MYOUTIP",RELAYCLIENT=""
:deny

so thanks for all your headaches... mike

Re: relay-ctrl 1.2 - doesn't work

[Jon Rust]

It does work-- I'm using it now, but I can't see what you've missed 
here. Is anything showing up in the spool directory, 
/opt/relay-ctrl/spool? Does it exist? Are you positive you have the 
names of the rules files correct?

Jon

At 11:16 PM +0100 12/1/99, [EMAIL PROTECTED] wrote:
>Hello,
>
>I tried to setup relay-ctrl on a new machine, but it doesn't work.
>relay-ctrl-allow writes the IP in the spool dir, but does not make a
>new cdb file. relay-ctrl-age (executed via cron) builds a new cdb file
>every five minutes. So I have to wait up to 5 minutes to relay a mail.
>It's a little bit weird, because I installed an older version on
>another system and it worked perfectly. Do you have any idea what could
>be wrong? I thinks relay-ctrl-allow executes relay-ctrl-age. Maybe
>there is a problem in executing relay-ctrl-age, but I don't know why.
>AGE_CMD looks fine.
>
>pop3d part from my qmail startup file:
>
>sh -c "start-stop-daemon --start --quiet --user root \
>  --exec /usr/bin/tcpserver -- \
>  0 pop-3 /usr/sbin/qmail-popup `hostname`.`dnsdomainname` \
>  /opt/vmailmgr/bin/checkvpw /opt/relay-ctrl/sbin/relay-ctrl-allow
>/usr/sbin/qmail-pop3d Maildir &"
>
>
>Here my defines.h:
>
>#ifndef AGE_MINUTES
>#define AGE_MINUTES 10
>#endif
>
>#ifndef BUFSIZE
>#define BUFSIZE 4096
>#endif
>
>#ifndef RULESDIR
>#define RULESDIR "/etc"
>#endif
>
>#ifndef SPOOLDIR
>#define SPOOLDIR "/opt/relay-ctrl/spool"
>#endif
>
>#ifndef AGE_CMD
>#define AGE_CMD "/opt/relay-ctrl/sbin/relay-ctrl-age"
>#endif
>
>#ifndef TCPRULES
>#define TCPRULES "/usr/bin/tcprules"
>#endif
>
>#ifndef SMTPRULES
>#define SMTPRULES "tcp.smtp"
>#endif
>
>#ifndef SMTPCDB
>#define SMTPCDB "tcp.smtp.cdb"
>#endif
>
>#ifndef SMTPFIXUP
>#define SMTPFIXUP "smtp.fixup"
>#endif

Re: relay-ctrl 1.2 - doesn't work

[Jon Rust]

At 1:30 AM +0100 12/2/99, [EMAIL PROTECTED] wrote:
>The IPs are written to the spool dir and relay-ctrl-age creates a new
>cdb file every 5 minutes via cron. It's strange. Are there other relay
>solutions which works?

Hmmm... are you using the same cdb files for your qmail-smtpd 
invocation that you're specifying here? If you run a cdbdump, what 
does it show?

cdbdump +RELAYCLIENT=:
+14,14:10.3.4.5->+RELAYCLIENT=:

Are the test IPs in there?

jon

Re: relay-ctrl 1.2 - doesn't work

[[EMAIL PROTECTED]]

On Wed, 1 Dec 1999 16:38:31 -0800, Jon Rust wrote:

>At 1:30 AM +0100 12/2/99, [EMAIL PROTECTED] wrote:
>>The IPs are written to the spool dir and relay-ctrl-age creates a new
>>cdb file every 5 minutes via cron. It's strange. Are there other relay
>>solutions which works?
>
>Hmmm... are you using the same cdb files for your qmail-smtpd 
>invocation that you're specifying here? If you run a cdbdump, what 
>does it show?
>
>cdbdump 

Re: relay-ctrl 1.2 - doesn't work

[[EMAIL PROTECTED]]

On Wed, 1 Dec 1999 16:20:55 -0800, Jon Rust wrote:

>It does work-- I'm using it now, but I can't see what you've missed 
>here. Is anything showing up in the spool directory, 
>/opt/relay-ctrl/spool? Does it exist? Are you positive you have the 
>names of the rules files correct?

The IPs are written to the spool dir and relay-ctrl-age creates a new
cdb file every 5 minutes via cron. It's strange. Are there other relay
solutions which works?

>At 11:16 PM +0100 12/1/99, [EMAIL PROTECTED] wrote:
>>Hello,
>>
>>I tried to setup relay-ctrl on a new machine, but it doesn't work.
>>relay-ctrl-allow writes the IP in the spool dir, but does not make a
>>new cdb file. relay-ctrl-age (executed via cron) builds a new cdb file
>>every five minutes. So I have to wait up to 5 minutes to relay a mail.
>>It's a little bit weird, because I installed an older version on
>>another system and it worked perfectly. Do you have any idea what could
>>be wrong? I thinks relay-ctrl-allow executes relay-ctrl-age. Maybe
>>there is a problem in executing relay-ctrl-age, but I don't know why.
>>AGE_CMD looks fine.
>>
>>pop3d part from my qmail startup file:
>>
>>sh -c "start-stop-daemon --start --quiet --user root \
>>  --exec /usr/bin/tcpserver -- \
>>  0 pop-3 /usr/sbin/qmail-popup `hostname`.`dnsdomainname` \
>>  /opt/vmailmgr/bin/checkvpw /opt/relay-ctrl/sbin/relay-ctrl-allow
>>/usr/sbin/qmail-pop3d Maildir &"
>>
>>
>>Here my defines.h:
>>
>>#ifndef AGE_MINUTES
>>#define AGE_MINUTES 10
>>#endif
>>
>>#ifndef BUFSIZE
>>#define BUFSIZE 4096
>>#endif
>>
>>#ifndef RULESDIR
>>#define RULESDIR "/etc"
>>#endif
>>
>>#ifndef SPOOLDIR
>>#define SPOOLDIR "/opt/relay-ctrl/spool"
>>#endif
>>
>>#ifndef AGE_CMD
>>#define AGE_CMD "/opt/relay-ctrl/sbin/relay-ctrl-age"
>>#endif
>>
>>#ifndef TCPRULES
>>#define TCPRULES "/usr/bin/tcprules"
>>#endif
>>
>>#ifndef SMTPRULES
>>#define SMTPRULES "tcp.smtp"
>>#endif
>>
>>#ifndef SMTPCDB
>>#define SMTPCDB "tcp.smtp.cdb"
>>#endif
>>
>>#ifndef SMTPFIXUP
>>#define SMTPFIXUP "smtp.fixup"
>>#endif
>

Re: relay-ctrl 1.2 - doesn't work

[Jon Rust]

At 1:51 AM +0100 12/2/99, [EMAIL PROTECTED] wrote:
>>cdbdump 
>I have no cdbdump,

Get it with the cdb package at

   http://cr.yp.to/cdb.html

Very useful.

>but I can relay mails, after cron executed
>relay-ctrl-age. So I fetch mails via POP3, but cannot relay, because
>the cdb file was not refreshed. After some minutes, when cron executes
>relay-ctrl-age, my IP was written to the cdb and I can relay mail. This
>is the strange behaviour I do not understand. If the IP is not be
>written to the spool or the cdb is not be created, I would know where I
>should look.

Whoa. Dunno how to explain that one. Play with cdbdump and see what 
happens at each stage. Hopefully someone more knowledgeable than 
myself will step forward and help.

Jon

Re: relay-ctrl 1.2 - doesn't work

[Oden Eriksson]

On 1 Dec 99, at 16:38, Jon Rust wrote:

> At 1:30 AM +0100 12/2/99, [EMAIL PROTECTED] wrote:
> >The IPs are written to the spool dir and relay-ctrl-age creates a new
> >cdb file every 5 minutes via cron. It's strange. Are there other
> >relay solutions which works?
> 
> Hmmm... are you using the same cdb files for your qmail-smtpd 
> invocation that you're specifying here? If you run a cdbdump, what
> does it show?
> 
> cdbdump  
> You should get a whole list of IPs like so:
> 
> +15,14:192.168.100.1->+RELAYCLIENT=:
> +14,14:10.3.4.5->+RELAYCLIENT=:
> 
> Are the test IPs in there?
> 
> jon

Or, you could try this:

#!/bin/bash

echo ""
relayclients=`cdbtest < /etc/tcp.smtp.cdb \
| awk 'BEGIN { FS = ": "  }{ if (number < $2) number = $2 }
END { number-- ; print number }'`
ipaddresses=`cdbdump < /etc/tcp.smtp.cdb | awk 'BEGIN { FS = "->" }{ 
print $1 }' \
| awk 'BEGIN { FS = ":" }{ print $2 }' | sort | tail --lines 
$relayclients`
echo "- current number of relay clients: $relayclients"
echo "- and their corresponding IP addresses:"
echo "$ipaddresses"



(but i'd appreciate a small c gadget for this, anyone ?)
--

Webhosting: http://www.kvikkjokk.com
Oden Eriksson (CNE+MCSE+Linux)
UIN: 952113
0971-554 52, 070-346 43 02

RE: relay-ctrl 1.2 - doesn't work

[Steve Kapinos]

My guess is that you are missing a piece that is supposed to build a new cdb
when the user authenticates, not just add a IP record.  For it to take
effect immediately, you need to add the IP and build a new CDB then.  The
age one should run independent of the users authenticating.


Russell Nelson made a open-smtp patch that achieves this if you are using
checkpasswd as part of your system.

The methodolgy is it patches checkpasswd to run a script which adds an entry
to the cdb database when a user successfully authenticates.  A small script
is then run by cron to 'age' the cdb database.

Small, and effective.  You do have to patch checkpassswd, but unless you are
running lots of other patches, whats just 1 lil patch? =)

I use it on my system (after updating the syntax of the scripts for a guess
a newer version of tcpserver) and its been flawless so far.

There should be a link on the qmail page.

-Steve

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 01, 1999 7:52 PM
To: [EMAIL PROTECTED]
Subject: Re: relay-ctrl 1.2 - doesn't work


On Wed, 1 Dec 1999 16:20:55 -0800, Jon Rust wrote:

>It does work-- I'm using it now, but I can't see what you've missed
>here. Is anything showing up in the spool directory,
>/opt/relay-ctrl/spool? Does it exist? Are you positive you have the
>names of the rules files correct?

The IPs are written to the spool dir and relay-ctrl-age creates a new
cdb file every 5 minutes via cron. It's strange. Are there other relay
solutions which works?

>At 11:16 PM +0100 12/1/99, [EMAIL PROTECTED] wrote:
>>Hello,
>>
>>I tried to setup relay-ctrl on a new machine, but it doesn't work.
>>relay-ctrl-allow writes the IP in the spool dir, but does not make a
>>new cdb file. relay-ctrl-age (executed via cron) builds a new cdb file
>>every five minutes. So I have to wait up to 5 minutes to relay a mail.
>>It's a little bit weird, because I installed an older version on
>>another system and it worked perfectly. Do you have any idea what could
>>be wrong? I thinks relay-ctrl-allow executes relay-ctrl-age. Maybe
>>there is a problem in executing relay-ctrl-age, but I don't know why.
>>AGE_CMD looks fine.
>>
>>pop3d part from my qmail startup file:
>>
>>sh -c "start-stop-daemon --start --quiet --user root \
>>  --exec /usr/bin/tcpserver -- \
>>  0 pop-3 /usr/sbin/qmail-popup `hostname`.`dnsdomainname` \
>>  /opt/vmailmgr/bin/checkvpw /opt/relay-ctrl/sbin/relay-ctrl-allow
>>/usr/sbin/qmail-pop3d Maildir &"
>>
>>
>>Here my defines.h:
>>
>>#ifndef AGE_MINUTES
>>#define AGE_MINUTES 10
>>#endif
>>
>>#ifndef BUFSIZE
>>#define BUFSIZE 4096
>>#endif
>>
>>#ifndef RULESDIR
>>#define RULESDIR "/etc"
>>#endif
>>
>>#ifndef SPOOLDIR
>>#define SPOOLDIR "/opt/relay-ctrl/spool"
>>#endif
>>
>>#ifndef AGE_CMD
>>#define AGE_CMD "/opt/relay-ctrl/sbin/relay-ctrl-age"
>>#endif
>>
>>#ifndef TCPRULES
>>#define TCPRULES "/usr/bin/tcprules"
>>#endif
>>
>>#ifndef SMTPRULES
>>#define SMTPRULES "tcp.smtp"
>>#endif
>>
>>#ifndef SMTPCDB
>>#define SMTPCDB "tcp.smtp.cdb"
>>#endif
>>
>>#ifndef SMTPFIXUP
>>#define SMTPFIXUP "smtp.fixup"
>>#endif
>

Re: relay-ctrl-2.5 doesn't work

[Sean Reifschneider]

On Tue, Oct 17, 2000 at 08:55:56PM -0600, Hans Peyrot wrote:
>RedHat Linux 6.3
  ^^^

Mm-kay...

>tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup linux.ags.com.mx \
>/bin/checkpoppassword relay-ctrl-allow /var/qmail/bin/qmail-pop3d Maildir 2>&1 | \
>/var/qmail/bin/splogger pop3d &

Did you restart the POP server after making these changes?  I just did a qmail
install using the SRPMs at http://www.em.ca/~bruceg/ and the relay-ctrl-2.5
RPM worked fine.  It even modifies the files automaticly -- just restart
the POP server.

Sean
-- 
 The only people who have anything to fear from free software
 are those whose products are worth even less.  -- David Emery
Sean Reifschneider, Inimitably Superfluous <[EMAIL PROTECTED]>
tummy.com - Linux Consulting since 1995. Qmail, KRUD, Firewalls, Python

Re: relay-ctrl does not work

[Oliver Lehmann]

Hi again,

I took a free hdd and installed a minimal FreeBSD-system and I only have
installed
qmail, just to be sure that there aren't any configuration errors or
compliances.
After the installation of relay-ctrl I changed the run script of pop3d
from

[...]
sh -c 'exec '\
'softlimit ${DATALIMIT+"-d$DATALIMIT"} '\
'/usr/local/bin/tcpserver '\
'-vDRHl0 '\
|...]

to

[...]
sh -c 'exec '\
'envuidgid qmaild '\
'softlimit ${DATALIMIT+"-d$DATALIMIT"} '\
'/usr/local/bin/tcpserver '\
'-vUDRHl0 '\
[...]


After that the relay-ctrl-allow wasn't executed longer as root, but I
still get
"authorization failed". Any ideas where to look for errors or misstakes?
The complete
run script of the pop3d is following:


#!/bin/sh
exec 2>&1 \
envdir ./env \
sh -c 'exec '\
'envuidgid qmaild '\
'softlimit ${DATALIMIT+"-d$DATALIMIT"} '\
'/usr/local/bin/tcpserver '\
'-vUDRHl0 '\
'${BACKLOG+"-b$BACKLOG"} '\
'${CONCURRENCY+"-c$CONCURRENCY"} '\
'-xtcp.cdb '\
'-- "${IP-0}" "${PORT-110}" '\
'/var/qmail/bin/qmail-popup `sed 1q /var/qmail/control/me` '\
'/usr/local/bin/checkpassword '\
'/usr/local/sbin/relay-ctrl-allow' \
'/var/qmail/bin/qmail-pop3d Maildir'



Perhaps the used "checkpassword" is the Misstake?
All I get is:



olivleh1@sina> telnet ernie 110
Trying 192.168.168.100...
Connected to ernie.sesamestreet.net.
Escape character is '^]'.
+OK <[EMAIL PROTECTED]>
user olivleh1
+OK 
pass *
-ERR authorization failed
Connection closed by foreign host.
olivleh1@sina> 



My login try (pop3-log):

2000-11-09 18:53:21.006803500 tcpserver: status: 1/40
2000-11-09 18:53:21.010286500 tcpserver: pid 2251 from 192.168.168.200
2000-11-09 18:53:21.018585500 tcpserver: ok 2251 0:192.168.168.100:110
:192.168.168.200::1363
2000-11-09 18:53:26.906486500 tcpserver: end 2251 status 256
2000-11-09 18:53:26.906952500 tcpserver: status: 0/40

my process list:

USERCOMMAND
rootsvscan /service
rootsupervise pop3d
rootsupervise log
rootsupervise smtpd
rootsupervise log
rootsupervise qmail
qmaild  /usr/local/bin/tcpserver -vUDRHl0 -xtcp.cdb -- 0 110 /var/qmai
qmaild  /usr/local/bin/tcpserver -vUDRHl0 -xtcp.cdb -- 0 25 /var/qmail
qmaill  multilog t ./main
qmaill  multilog t ./main
qmails  qmail-send
qmaill  /usr/local/bin/multilog t /var/log/qmail qmaill
rootqmail-lspawn ./Maildir/
qmailr  qmail-rspawn
qmailq  qmail-clean

Any Ideas?

Yours
 Olli

Re: relay-ctrl does not work

[Michael Maier]

Oliver Lehmann wrote:

> Perhaps the used "checkpassword" is the Misstake?
> All I get is:
>
> olivleh1@sina> telnet ernie 110
> Trying 192.168.168.100...
> Connected to ernie.sesamestreet.net.
> Escape character is '^]'.
> +OK <[EMAIL PROTECTED]>
> user olivleh1
> +OK
> pass *
> -ERR authorization failed
> Connection closed by foreign host.
> olivleh1@sina>
>
> Any Ideas?
>
> Yours
>  Olli

In fact seems to be your checkpassword!
I'm using  http://www.whirlycott.com/phil/checkpoppasswd.c which you have to
compile with gcc -o checkpassword checkpoppasswd.c -lcrypt

To generate a Password use the following Perl Script...

#!/usr/bin/perl -w
print "Please enter a Word you wanna use as POP3 Password: ";
$pass=; chomp($pass);
print "Now enter a 2 Letter Salt Value: ";
$salt=; chomp($salt);
print "Generated Password is: "; print crypt($pass, $salt);
print "\n";

For more Info check http://www.octlabs.de/linux/docu/qmail_howto.shtml
--^..^--
  michael maier  -  system & development administrator
  flatfox ag, hanauer landstrasse 196a
  d-60314 frankfurt am main
  fon+49.(0)69.50 95 98-308
  fax+49.(0)69.50 95 98-101
  email  [EMAIL PROTECTED]
  urlhttp://www.flatfox.com -  m a k e  m y  d a y

Re: relay-ctrl does not work

[Oliver Lehmann]

Hi Michael,


> In fact seems to be your checkpassword!
> I'm using  http://www.whirlycott.com/phil/checkpoppasswd.c which you have to
> compile with gcc -o checkpassword checkpoppasswd.c -lcrypt
> 

Is there another Solution? I'm looking for a programm using the
/etc/master.passwd and perhaps also has it's own user management. But
"master.passwd" is more important for me than user management of virtual
users

Yours Olli

Re: relay-ctrl does not work

[Tetsu Ushijima]

Oliver Lehmann writes:
> After the installation of relay-ctrl I changed the run script of pop3d
> from
[...]
> to
> 
> [...]
> sh -c 'exec '\
> 'envuidgid qmaild '\
> 'softlimit ${DATALIMIT+"-d$DATALIMIT"} '\
> '/usr/local/bin/tcpserver '\
> '    -vUDRHl0 '\

Don't do that. The checkpassword program needs a root privilege.
relay-ctrl-allow was run as root just because it was run before 
checkpassword.

> '/usr/local/sbin/relay-ctrl-allow' \

This line should be:
'/usr/local/sbin/relay-ctrl-allow '\
(a space before a quote, not after)

-- 
Tetsu Ushijima

Re: relay-ctrl does not work

[Oliver Lehmann]

Hi Tetsu,

> > '/usr/local/sbin/relay-ctrl-allow' \
> 
> This line should be:
> '/usr/local/sbin/relay-ctrl-allow '\

Thanks for your help.. but:

olivleh1@sina> telnet ernie 110
Trying 192.168.168.100...
Connected to ernie.sesamestreet.net.
Escape character is '^]'.
+OK <[EMAIL PROTECTED]>
user olivleh1
+OK 
pass *
Error: relay-ctrl-allow cannot be run as root-ERR authorization failed
Connection closed by foreign host.
olivleh1@sina> 

with this script:

#!/bin/sh
exec 2>&1 \
envdir ./env \
sh -c 'exec '\
'softlimit ${DATALIMIT+"-d$DATALIMIT"} '\
'/usr/local/bin/tcpserver '\
'-vDRHl0 '\
'${BACKLOG+"-b$BACKLOG"} '\
'${CONCURRENCY+"-c$CONCURRENCY"} '\
'-xtcp.cdb '\
'-- "${IP-0}" "${PORT-110}" '\
'/var/qmail/bin/qmail-popup `sed 1q /var/qmail/control/me` '\
'/usr/local/bin/checkpassword '\
'/usr/local/sbin/relay-ctrl-allow '\
'/var/qmail/bin/qmail-pop3d Maildir'





and:

olivleh1@sina> telnet ernie 110
Trying 192.168.168.100...
Connected to ernie.sesamestreet.net.
Escape character is '^]'.
+OK <[EMAIL PROTECTED]>
user olivleh1
+OK 
pass *
+OK 

quit
Connection closed by foreign host.
olivleh1@sina>

without the "relay-ctrl-allow" line

any ideas?

Yours Olli
-- 
Having trouble in Windows? Reboot!
Having trouble in Unix? Be root!

Re: relay-ctrl does not work

[Oliver Lehmann]

Hi,

now qmail finally is running (thx to Robin) and the relay-ctrl-age after
a login fills the /service/smtpd/tcp.cdb - but not with the right data
;-) 

ernie# tcprulescheck /service/smtpd/tcp.cdb
default:
allow connection
ernie# 

but no IPs... I changed the relay-ctrl-age.c to this: 

/*  original
const char* rulesdir = "/etc/tcpcontrol";
const char* smtprules = "smtp.rules";
const char* smtpcdb = "smtp.cdb";
const char* tcprules = "/usr/bin/tcprules";
const char* spooldir = "/var/spool/relay-ctrl";
*/

const char* rulesdir = "/service/smtpd";
const char* smtprules = "tcp";
const char* smtpcdb = "tcp.cdb";
const char* tcprules = "/usr/local/bin/tcprules";
const char* spooldir = "/var/spool/relay-ctrl";

Any Ideas?

-- 
Having trouble in Windows? Reboot!
Having trouble in Unix? Be root!

Re: relay-ctrl does not work

[Peter Green]

* Oliver Lehmann <[EMAIL PROTECTED]> [001112 14:05]:
> ernie# tcprulescheck /service/smtpd/tcp.cdb

RTFM -- 

/pg
-- 
Peter Green : Gospel Communications Network, SysAdmin : [EMAIL PROTECTED]
---
Convention organizer to Linus Torvalds: "You might like to come with us 
to some licensed[1] place, and have some pizza."
Linus: "Oh, I did not know that you needed a license to eat pizza".
[1] Licenced - refers in Australia to a restaurant which has government 
licence to sell liquor.
(Linus at a talk at the Melbourne University)

Re: relay-ctrl does not work

[Oliver Lehmann]

Hi Peter

> RTFM -- 

Ok, and how can i become the ip's listed in the cdb file?

Yours Olli

Re: relay-ctrl does not work

[Peter Green]

* Oliver Lehmann <[EMAIL PROTECTED]> [001112 14:34]:
> > RTFM -- 
> 
> Ok, and how can i become the ip's listed in the cdb file?

(pcg@j) /etc/tcpcontrol> cat smtp.rules
204.253.132.:allow
:deny
(pcg@j) /etc/tcpcontrol> env TCPREMOTEIP=204.253.132.20 tcprulescheck smtp.cdb
rule 204.253.132.:
allow connection
(pcg@j) /etc/tcpcontrol> env TCPREMOTEIP=1.2.3.4 tcprulescheck smtp.cdb
rule :
deny connection

IOW, the TCP* stuff refers to environment variables...

/pg
-- 
Peter Green : Gospel Communications Network, SysAdmin : [EMAIL PROTECTED]
---
I hope if dogs ever take over the world and they choose a king, they don't 
just go by size, because I bet there are some Chihuahuas with some good 
ideas.
 (Jack Handey)

Re: relay-ctrl does not work

[Alex Pennace]

On Sun, Nov 12, 2000 at 08:36:44PM +0100, Oliver Lehmann wrote:
> > RTFM -- 
> 
> Ok, and how can i become the ip's listed in the cdb file?

You haven't read the manual, have you?

tcprulescheck says what tcpserver will do with a connection from IP
address $TCPREMOTEIP with host name $TCPREMOTEHOST and remote
connection information $TCPREMOTEINFO, following the rules compiled
into cdb by tcprules.

 PGP signature

Re: relay-ctrl does not work

[Oliver Lehmann]

Hi Peter:

after an successfull POP3 login from 192.168.168.200:

% env TCPREMOTEIP=192.168.168.200 tcprulescheck /service/smtpd/tcp.cdb
default:
allow connection
% env TCPREMOTEIP=192.168.168.201 tcprulescheck /service/smtpd/tcp.cdb
default:
allow connection
% env TCPREMOTEIP=333.333.333.333 tcprulescheck /service/smtpd/tcp.cdb
default:
allow connection
% 

allow from 333.. ??? i think anything was going wrong..

relay-ctrl-age creates a service/smtpd/tcp.cdb but no tcp in
/service/smtpd

Yours Olli

Relay-ctrl installed but can't auth

[Eric Walters]

 smime.p7m

Relay-ctrl installed but can't auth

[Eric Walters]

I have installed the relay-ctrl package and have added the
/var/spool/relay-ctrl directory, modified my tcpserver to:
tcpserver -v -R -l0 0 pop3 /var/qmail/bin/qmail-popup FQDN \
/bin/checkpassword /usr/sbin/relay-ctrl-allow
/var/qmail/bin/qmail-pop3d
 Maildir 2>&1 | \
/var/qmail/bin/splogger pop3d &
It does start OK, but it cannot authenticate me.  It just keeps taking me
back to the dialogue asking for userid and password.  I am not sure that it
has logged anything because I am not sure where it would log it.
HELP?

RE: smtp relay / relay-ctrl / tcpserver

[Brad Schuetz]

change the :deny to :allow, you are denying ALL connections (except those
that are in your relay-ctrl list) to port 25 with that setting.
RELAYCLIENT="" which is set by relay-ctrl will allow those clients that
match, to relay, which is what you intend without rejecting all connections.

-= Brad Schuetz =-==-= [EMAIL PROTECTED] =-

-Original Message-
From: Mike A. Sauvain [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 20, 2001 12:24 PM
To: [EMAIL PROTECTED]
Subject: smtp relay / relay-ctrl / tcpserver


hello all, if someone know a special mailinglist on smtp relay problem
OR
tcpserver usage's .. please let me know..

my problem are follow:

after a second relay attack from russia i dooed follow things:

- i work whit tcpserver and qmail with mysql support
- i installed the popb4smtp (relay-ctrl-2.5) package from
http://em.ca/~bruceg/relay-ctrl/

-- now i have the the follow problem:
if i deny all (tcpserver & relay-ctrl), allow only what has pop'ed last
5 minute
no one (mail servers) cant send my a mail

so my 2 questions, first has really precedence for me
1. so how i done, that every one ist accepted to deliver local,
but to relay only hoe's has pop'ed before?

2. and where are the messages delivered after the relay was deny ?
not accept are like not recive, or accepted but receject
and sended to postmaster ?  - can i choose ? (i would prefere if it
rejecet silent the mail, but send me the mail he's would, as notice)

some cfg:

smtp.rules (vor relay-ctrl) (but it results, that only pop'ed ip's can
connect to smtp)
.:allow,TCPREMOTEHOST="",TCPREMOTEIP="MYOUTIP",RELAYCLIENT=""
:deny

so thanks for all your headaches... mike

Relay-ctrl compiles wrong with RH 7.0?

[Webservice]

I've been trying for 2 days now to install relay-ctrl-2.5.

Everyting goes well (I see no errors in compiling), but the dir's are
normally not created (once I saw a /var/spool/relay-ctrl, but don't know for
sure), all the other times I created the dirs myself.

When compiling I never got an error, I tried in /usr and /usr/local.

This is how I start my tcpserver:
/usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup \
ns4.pi-group.net /bin/checkpoppasswd /usr/sbin/relay-ctrl-allow \
/var/qmail/bin/qmail-pop3d Maildir &

I can loggin at all times, but this 'easy' program doesn't seem to work.
/var/spool/relay-ctrl stays empty
 maybe  I think I've read something that RH 7.0 is using a strange
gcc-compiler, but I don't know for sure. I'm a rookie when it comes to
compiling.

O yeah, I tried the RPM: --> error: relay-ctrl-2.5-1.i386.rpm cannot be
installed


Hope someone can help, cause it's not funny anymore after 2 days.

Best Regards,
Pascal

Announce: new release of relay-ctrl package

[Bruce Guenter]

Greetings.

I've just put version 1.2 of the relay-ctrl package on my web site at:
http://em.ca/~bruceg/relay-ctrl/
This is a package that allows SMTP-after-POP3 with the qmail set of
tools, similar to the "open-smtp" package by Russell Nelson, but without
requiring a patched checkpassword.

This release adds an all important year 2000 statement, and the ability
to specify a fixup address for all relay clients at runtime.
-- 
Bruce Guenter <[EMAIL PROTECTED]>   http://em.ca/~bruceg/

Re: Relay-ctrl installed but can't auth

[Robin S . Socha]

Quoting Eric Walters ([EMAIL PROTECTED]):
> I have installed the relay-ctrl package 

... which has nothing to do with qmail and is discussed on the bgware
list.

> It does start OK, but it cannot authenticate me.  It just keeps
> taking me back to the dialogue asking for userid and password.  I am
> not sure that it has logged anything because I am not sure where it
> would log it.

Did you read the man page for relay-ctrl-allow? Did you create the
necessary files in /etc/relay-ctrl? Are your tcprules in a strange
place? Do the paths to the executables fit?
-- 
Robin S. Socha http://socha.net/
"If you are too low a lifeform to be able to learn how to use the
manual page subsystem, why should we help you?"  (Theo de Raadt)

Re: Relay-ctrl installed but can't auth

[Michael Maier]

Did you make the needed crontab Entries??
--^..^--
  michael maier  -  system & development administrator
  flatfox ag, hanauer landstrasse 196a
  d-60314 frankfurt am main
  fon+49.(0)69.50 95 98-308
  fax+49.(0)69.50 95 98-101
  email  [EMAIL PROTECTED]
  urlhttp://www.flatfox.com -  m a k e  m y  d a y

relay-ctrl: no ip's recorded (URGENT - PLEASE)

[Jairo Marciano Silva]

Hi all,

I'm using FreeBSD 4.2 and i trying to configure relay-ctrl 2.5.

My problem is that:  Never the ip's are recorded in /var/spool/relay-ctrl .

My supervise scripts are:

/var/qmail/supevise/qmail-smtpd/run:

#!/bin/sh
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
exec /usr/local/bin/softlimit -m 200 \
/usr/local/bin/tcpserver -DRvX -x /etc/tcp.smtp.cdb -c "$MAXSMTPD"
\
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp
/var/qmail/bin/qmail-smtpd
2>&1

/var/qmail/supevise/qmail-pop3d/run:

#!/bin/sh
exec /usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup
mail.weber
dev.com.br /usr/local/bin/checkvpw /usr/sbin/relay-ctrl-allow
/var/qmail/bin/qmail-pop3d Maildir 2>&1

Some dirs contents:

ls -l /etc/tcp*:

-rw-r--r--  1 root  wheel26 Mar 30 20:39 /etc/tcp.smtp
-rw-r--r--  1 root  wheel  2090 Apr  4 20:55 /etc/tcp.smtp.cdb

 ls -l /etc/relay-ctrl/*:

-rw-r--r--  1 root  wheel   3 Apr  4 20:07 /etc/relay-ctrl/expiry
-rw-r--r--  1 root  wheel  22 Apr  4 16:25 /etc/relay-ctrl/rule
-rw-r--r--  1 root  wheel   5 Apr  4 16:25 /etc/relay-ctrl/rulesdir
-rw-r--r--  1 root  wheel  13 Apr  4 16:26 /etc/relay-ctrl/smtpcdb
-rw-r--r--  1 root  wheel   9 Apr  4 16:27 /etc/relay-ctrl/smtprules
-rw-r--r--  1 root  wheel  22 Apr  4 16:27 /etc/relay-ctrl/spooldir
-rw-r--r--  1 root  wheel  24 Apr  4 16:30 /etc/relay-ctrl/tcprules

cat /etc/relay-ctrl/*:
900
:allow,RELAYCLIENT=''
/etc
tcp.smtp.cdb
tcp.smtp
/var/spool/relay-ctrl
/usr/local/bin/tcprules

Can Somebody help me ?

TIA
Jairo

o nosso site: http://www.sbs-consultores.com.br

Re: Relay-ctrl compiles wrong with RH 7.0?

[Charles Cazabon]

Webservice <[EMAIL PROTECTED]> wrote:
> I've been trying for 2 days now to install relay-ctrl-2.5.

You may want to ask this question on the author's bgware mailing list if you
don't get an answer here -- this isn't strictly a qmail issue.

> Everyting goes well (I see no errors in compiling), but the dir's are
> normally not created (once I saw a /var/spool/relay-ctrl, but don't know for
> sure), all the other times I created the dirs myself.

How did you compile?  "make"?  Did you do "make install"?  Did you do it as
root?  Why did you think it would work if part of the installation failed?

> This is how I start my tcpserver:
> /usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup \
> ns4.pi-group.net /bin/checkpoppasswd /usr/sbin/relay-ctrl-allow \
> /var/qmail/bin/qmail-pop3d Maildir &

What is "checkpoppasswd"?  Normally, relay-ctrl is used with either a vanilla
checkpassword or with vmailmgr's replacement (checkvpw).  Perhaps it does not
implement the full checkpassword interface?  relay-ctrl relies on this
interface to work.

> I can loggin at all times, but this 'easy' program doesn't seem to work.
> /var/spool/relay-ctrl stays empty
>  maybe  I think I've read something that RH 7.0 is using a strange
> gcc-compiler, but I don't know for sure. I'm a rookie when it comes to
> compiling.

If it was a compiler issue, you'd have seen error messages during the build,
and it almost certainly would have hit a fatal error at that point.

> O yeah, I tried the RPM: --> error: relay-ctrl-2.5-1.i386.rpm cannot be
> installed

Why?  RPM gives better error messages than that.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: Relay-ctrl compiles wrong with RH 7.0?

[Webservice]

> > I've been trying for 2 days now to install relay-ctrl-2.5.
>
> You may want to ask this question on the author's bgware mailing list if
you
> don't get an answer here -- this isn't strictly a qmail issue.

I've already did that (no response, the list looks empty)


> > Everyting goes well (I see no errors in compiling), but the dir's are
> > normally not created (once I saw a /var/spool/relay-ctrl, but don't know
for
> > sure), all the other times I created the dirs myself.
>
> How did you compile?  "make"?  Did you do "make install"?  Did you do it
as
> root?  Why did you think it would work if part of the installation failed?

Everytime as root, make  followed by make install, also tried make
root-install


> > This is how I start my tcpserver:
> > /usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup \
> > ns4.pi-group.net /bin/checkpoppasswd /usr/sbin/relay-ctrl-allow \
> > /var/qmail/bin/qmail-pop3d Maildir &
>
> What is "checkpoppasswd"?  Normally, relay-ctrl is used with either a
vanilla
> checkpassword or with vmailmgr's replacement (checkvpw).  Perhaps it does
not
> implement the full checkpassword interface?  relay-ctrl relies on this
> interface to work.

checkpoppasswd is a patch from Philip Jacob to put the user in a different
file insteadof /etc/passwd
http://www.whirlycott.com/phil/pop3.html
I've seen users in the lists that actualy use both.


> > O yeah, I tried the RPM: --> error: relay-ctrl-2.5-1.i386.rpm cannot be
> > installed
>
> Why?  RPM gives better error messages than that.

# rpm -i -vv relay*rpm
D: counting packages to install
D: found 1 packages
D: looking for packages to download
D: retrieved 0 packages
D: New Header signature
D: Signature size: 149
D: Signature pad : 3
D: sigsize : 152
D: Header + Archive: 18342
D: expected size   : 18431
error: relay-ctrl-2.5-1.i386.rpm cannot be installed
D: found 0 source and 0 binary packages

Re: Relay-ctrl compiles wrong with RH 7.0?

[Charles Cazabon]

Webservice <[EMAIL PROTECTED]> wrote:
> > > I've been trying for 2 days now to install relay-ctrl-2.5.
> >
> > You may want to ask this question on the author's bgware mailing list if
> > you don't get an answer here -- this isn't strictly a qmail issue.
> 
> I've already did that (no response, the list looks empty)

I'm on that list and I never saw your message.  I just checked the list
archives for May, and you're not in it.  The list is certainly not empty,
either -- bgware gets a couple of dozen messages a month.

> > > This is how I start my tcpserver: /usr/local/bin/tcpserver -R 0 pop3
> > > /var/qmail/bin/qmail-popup \ ns4.pi-group.net /bin/checkpoppasswd
> > > /usr/sbin/relay-ctrl-allow \ /var/qmail/bin/qmail-pop3d Maildir &
> >
> > What is "checkpoppasswd"?  Normally, relay-ctrl is used with either a
> > vanilla checkpassword or with vmailmgr's replacement (checkvpw).  Perhaps
> > it does not implement the full checkpassword interface?  relay-ctrl relies
> > on this interface to work.
> 
> checkpoppasswd is a patch from Philip Jacob to put the user in a different
> file insteadof /etc/passwd http://www.whirlycott.com/phil/pop3.html I've
> seen users in the lists that actualy use both.

Okay, fair enough.  But is it actually working?

> > > O yeah, I tried the RPM: --> error: relay-ctrl-2.5-1.i386.rpm cannot be
> > > installed
> >
> > Why?  RPM gives better error messages than that.
> 
> # rpm -i -vv relay*rpm 
> D: counting packages to install
> D: found 1 packages
> D: looking for packages to download 
> D: retrieved 0 packages 
> D: New Header signature
> D: Signature size: 149 
> D: Signature pad : 3 
> D: sigsize : 152
> D: Header + Archive: 18342 
> D: expected size   : 18431 error:  relay-ctrl-2.5-1.i386.rpm cannot be
> installed 
> D: found 0 source and 0 binary packages

You have a corrupt RPM, or a version of RPM which cannot verify the signature
on the RPM.  Which part of "expected size != size" is unclear?

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: Relay-ctrl compiles wrong with RH 7.0?

[Webservice]

> From: "Santosh Pasi" <[EMAIL PROTECTED]>
> 1. Did you install relay-ctrl as root and after using "make"; did you 
> follow "make install-root".

Yes


> 2. Add entry in crontab using crontab -e as given in relay-control doc

Yes, it works fine, I see that coming up each time


> 3. Make this link
>ln -s /usr/local/bin/tcprules /usr/bin/tcprules

Did that. --> no effect

 
> 4. Check your smtp-script(for -x /etc/tcpcontrol/smtp.cdb), as make 
> necessary control database file.

This works, /etc/tcp.smtp.cdb is based on /etc/tcp.smtpd


> >I've been trying for 2 days now to install relay-ctrl-2.5.
> >
> >Everyting goes well (I see no errors in compiling), but the dir's are
> >normally not created (once I saw a /var/spool/relay-ctrl, but don't 
> know for>sure), all the other times I created the dirs myself.
> >
> >When compiling I never got an error, I tried in /usr and /usr/local.
> >
> >This is how I start my tcpserver:
> >/usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup \
> >ns4.pi-group.net /bin/checkpoppasswd /usr/sbin/relay-ctrl-allow \
> >/var/qmail/bin/qmail-pop3d Maildir &
> >
> >I can loggin at all times, but this 'easy' program doesn't seem to work.
> >/var/spool/relay-ctrl stays empty

Re: Relay-ctrl compiles wrong with RH 7.0?

[Santosh Pasi]

Hi,

1. Did you install relay-ctrl as root and after using "make"; did you 
follow "make install-root".
2. Add entry in crontab using crontab -e as given in relay-control doc

3. Make this link
   ln -s /usr/local/bin/tcprules /usr/bin/tcprules

4. Check your smtp-script(for -x /etc/tcpcontrol/smtp.cdb), as make 
necessary control database file.
Santosh Pasi



---Original Message--
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
>Precedence: bulk
>From: "Webservice" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Subject: Relay-ctrl compiles wrong with RH 7.0?
>Date: Wed, 23 May 2001 16:28:20 +0200
>Content-Transfer-Encoding: 7bit
>
>I've been trying for 2 days now to install relay-ctrl-2.5.
>
>Everyting goes well (I see no errors in compiling), but the dir's are
>normally not created (once I saw a /var/spool/relay-ctrl, but don't 
know for>sure), all the other times I created the dirs myself.
>
>When compiling I never got an error, I tried in /usr and /usr/local.
>
>This is how I start my tcpserver:
>/usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup \
>ns4.pi-group.net /bin/checkpoppasswd /usr/sbin/relay-ctrl-allow \
>/var/qmail/bin/qmail-pop3d Maildir &
>
>I can loggin at all times, but this 'easy' program doesn't seem to work.
>/var/spool/relay-ctrl stays empty
> maybe  I think I've read something that RH 7.0 is using a 
strange>gcc-compiler, but I don't know for sure. I'm a rookie when it comes to
>compiling.
>
>O yeah, I tried the RPM: --> error: relay-ctrl-2.5-1.i386.rpm cannot be
>installed
>
>
>Hope someone can help, cause it's not funny anymore after 2 days.
>
>Best Regards,
>Pascal
>
>
>

Re: Relay-ctrl compiles wrong with RH 7.0?

[george]

Not sure if this help you but from my experience with relay-ctrl:

1. create the /var/spool/relay-ctrl directory yourself .. (afair the relay-ctrl-age don't have the code to create this)
2. check in the relay-ctrl-age.c file and modify the folowing lines for your system then try to compile and install again.

--- BEGIN CUT ---
const char* rulesdir = "/etc/tcpcontrol";                <-- probably this line is /etc for you :)
const char* smtprules = "smtp.rules";                <-- this is the line you should check and change acordingly with your tcp.smtp file name 
const char* smtpcdb = "smtp.cdb";                <-- this is the line you should check and change acordingly with your tcp.smtp.cdb file name
const char* tcprules = "/usr/bin/tcprules";                <-- as i understood you allready create a symlink for that !?
const char* spooldir = "/var/spool/relay-ctrl";        <-- create this directory yourself
--- END CUT ---

3. on my machine (Slack 7.1) the relay-ctrl-age have a minor bug in memory allocation and don't allow file names more than 11 chars .. so you must write the smtp cdb file in something like this "tcpsmtp.cdb" instead of "tcp.smtp.cdb" ... don't know if this gone work on a rh machine .. but you should check to see if the cdb file is properly created ... (try this creating an file with the name 192.168.100.1 in your /var/spool/relay-ctrl and then run relay-ctrl-age from the prompt and see what tcp.smt.cdb file contain)

4. be sure that at the end of the tcp.smtp file are a CR (cariage return) because the relay-ctrl-age append the remote pop3 addres at the end of this file and if there are no CR after the last line then will concatenate the last line with the remote pop3 address and tcprules will return an error ... 

Sorry .. don't know anything about rpm ... i'm on slack so I don't use this :))

Best regards,
George Pogorelschi

Quadrant Interactive
http://www.qi.ro/
Tel: +40-1 323 06 99
Mobile: +40-09 55 10 17




___

Message: 1
   Date: Thu, 24 May 2001 15:09:25 +0200
   From: "Webservice" <[EMAIL PROTECTED]>
Subject: Re: Relay-ctrl compiles wrong with RH 7.0?

> From: "Santosh Pasi" <[EMAIL PROTECTED]>
> 1. Did you install relay-ctrl as root and after using "make"; did you 
> follow "make install-root".

Yes


> 2. Add entry in crontab using crontab -e as given in relay-control doc

Yes, it works fine, I see that coming up each time


> 3. Make this link
>    ln -s /usr/local/bin/tcprules /usr/bin/tcprules

Did that. --> no effect

 
> 4. Check your smtp-script(for -x /etc/tcpcontrol/smtp.cdb), as make 
> necessary control database file.

This works, /etc/tcp.smtp.cdb is based on /etc/tcp.smtpd


> >I've been trying for 2 days now to install relay-ctrl-2.5.
> >
> >Everyting goes well (I see no errors in compiling), but the dir's are
> >normally not created (once I saw a /var/spool/relay-ctrl, but don't 
> know for>sure), all the other times I created the dirs myself.
> >
> >When compiling I never got an error, I tried in /usr and /usr/local.
> >
> >This is how I start my tcpserver:
> >/usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup \
> >ns4.pi-group.net /bin/checkpoppasswd /usr/sbin/relay-ctrl-allow \
> >/var/qmail/bin/qmail-pop3d Maildir &
> >
> >I can loggin at all times, but this 'easy' program doesn't seem to work.
> >/var/spool/relay-ctrl stays empty

Re: Relay-ctrl compiles wrong with RH 7.0?

[Webservice]

> Not sure if this help you but from my experience with relay-ctrl:
>
> 1. create the /var/spool/relay-ctrl directory yourself .. (afair the
relay-ctrl-age don't > have the code to create this)

I've done that, what owner/perms must it have? (its now 777 root-root)
Perhaps this is the basic problem?


> 2. check in the relay-ctrl-age.c file and modify the folowing lines for
your system then
> try to compile and install again.

relay-ctrl-age works (the cdb-file get's updated).
Only /var/spool/relay-ctrl stays empty.

Does any-one know how to check relay-ctrl-allow works?
Running from the prompt doesn't work.


Best Regards,
Pascal

Re: Relay-ctrl compiles wrong with RH 7.0?

[Charles Cazabon]

Webservice <[EMAIL PROTECTED]> wrote:
> > Not sure if this help you but from my experience with relay-ctrl:
> >
> > 1. create the /var/spool/relay-ctrl directory yourself .. (afair the
> > relay-ctrl-age don't have the code to create this)
> 
> I've done that, what owner/perms must it have? (its now 777 root-root)
> Perhaps this is the basic problem?

That should be fine, if you're running relay-ctrl-age as root.

> relay-ctrl-age works (the cdb-file get's updated).
> Only /var/spool/relay-ctrl stays empty.
> 
> Does any-one know how to check relay-ctrl-allow works?

It takes the IP address of a client which has just successfully authenticated
with POP3 from an environment variable set by tcpserver.  It records it in the
spool directory.  It rebuilds the tcprules file from the snippets you supply
plus the IP addresses it records, and then calls tcprules on it to generate
the appropriate .cdb file.  relay-ctrl-age removes IP addresses from the spool
directory after a configurable time limit.

Of course, if I've got the fine detail incorrect, Bruce will correct me :).

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: Relay-ctrl compiles wrong with RH 7.0?

[george]

--- In [EMAIL PROTECTED], "Webservice" <[EMAIL PROTECTED]> wrote:
> > Not sure if this help you but from my experience with relay-ctrl:
> >
> > 1. create the /var/spool/relay-ctrl directory yourself .. (afair the
> relay-ctrl-age don't > have the code to create this)
> 
> I've done that, what owner/perms must it have? (its now 777 root-root)
> Perhaps this is the basic problem?
> 

from here that's seems to be ok ! :)

> 
> > 2. check in the relay-ctrl-age.c file and modify the folowing lines for
> your system then
> > try to compile and install again.
> 
> relay-ctrl-age works (the cdb-file get's updated).
> Only /var/spool/relay-ctrl stays empty.

hmmm .. sure is empty .. :)
because the file are writen here only when a pop3 login is succesfull 
and after 15 minutes (dependens on your cron settings) relay-ctrl-age 
delete that file ... 

> 
> Does any-one know how to check relay-ctrl-allow works?
> Running from the prompt doesn't work.
> 

that's ok .. because it use a tcpserver enviroment .. hmmm see bellow (from the README file):

-- BEGIN CUT --
- relay-ctrl-age records IPs in /var/spool/relay-ctrl, checks all
  previously recorded addresses, and removes any that have not been
  updated for at least 15 minutes.  It then lists all of the addresses
  through a pipe to tcprules to build the control database for the smtp
  server.

- relay-ctrl-allow checks the environment for the remote IP from which
  the connection is originating.  It runs relay-ctrl-age to ensure that
  it is recorded in the control tables.
-- END CUT -- 

If you want to test your configuration try first to connect to the 
pop3 server and after a succesfull login try to see if the ip address 
is written in the /var/spool/ctrl-realy ... 

Actually I use checkpassword instead of checkpoppasword .. and works 
fine for me .. maybe it's something that you have to look at ..

Best regards,
George Pogorelschi

Quadrant Interactive
http://www.qi.ro/
Tel: +40-1 323 06 99
Mobile: +40-09 55 10 17

URGENT = Help-me with this problems ! (relay-ctrl)

[-= Ana Paula =-]

-- 

I need urgently to configure the relay in the qmail and I'm not
getting.

My situation is the following:
  
I have several users that are connected my server to receive and to
send e-mails.
Those users are not in my network.
Everybody has dynamic IPs because they connect to the Internet
through several others ISPs.
For that reason I opted for the POP-before-SMTP authentication, and
I installed the package "relay-ctrl".

I followed all the instructions of the file "Readme":

# gzip -dc relay-ctrl-2.5.tar.gz | tar xvf -
# make
# make root-install

After, I put in crontab the followed lines:

* * * * * /usr/sbin/relay-ctrl-age

And, in the file /etc/rc.d/init.d/qmail, I insert the followed lines
between "esac" and "exit 0":

tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup pop3.tecnohost.com.br \
/bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d Maildir 2>&1 
| \
/var/qmail/bin/splogger pop3d &

So, as nothing happened, I read all messages in the list archive about
"relay-ctrl" and I discovered that was necessary to do more things than
file "Readme" didn't explain:

1. Create the directory /etc/relay-ctrl

2. Create some files and put inside the /etc/relay-ctrl:
   2.1. expiry
   2.2. rule
   2.3. rulesdir
   2.4. smtpcdb
   2.5. smtprules
   2.6. spooldir
   2.7. tcprules
   
3. Inside this files, put:
   3.1. expiry= 900
   3.2. rule  = :allow,RELAYCLIENT=''
   3.3. rulesdir  = /etc
   3.4. smtpcdb   = tcp.smtp.cdb
   3.5. smtprules = tcp.smtp
   3.6. spooldir  = /var/spool/relay-ctrl
   3.7. tcprules  = /usr/local/bin/tcprules

4. Create the directory /var/spool/relay-ctrl/

5. After all, I reboot the computer.

I would like to know if still need to do more some thing...
'Cause as I said before, in README it doesn't explain practically anything.
Most of the things that I did was through the messages of that list.   
As if I was joining pieces of a puzzle.

I ask that, because the things are not still working.  :-(((

See what it's already working:

1. The users can receive messages from any domain out of my network.
2. The users can send messages for any domain out of my network.

See what is not still working:

1. The users can send messages without receive first.
2. Inside the /var/spool/relay-ctrl/ a file is created with the name of
   the address IP that is using the e-mail in the moment.
   But this file stay empty (is that correct?) and is not never
   deleted.


Please help me!
I'm there are days trying to solve that without success.
I don't know more than to do.

--

Thanks,
Ana Paula

Re: relay-ctrl and qmail (it's finally working!)

[Bill]

Thanks guys and gals(?)!

This is making my life much easier.  

Re: Re: Relay-ctrl compiles wrong with RH 7.0?

[Santosh Pasi]

Hi,

check the time stamp of controb db files, it may give you some idea.
Use pop and smtp and immediately check the timestamp of 
/var/spool/relay-ctrl   --- should be current time
/etc/tcp.smtp.cdb   --- should be current time

else 
Make control database file  /etc/tcp.smtp.cdb, use following command
# tcprules /etc/tcp.smtp.cdb /etc/tcp.smtp.tmp < /etc/tcp.smtp

try settings as given below

Good luck
Santosh Pasi

---Original Message--
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
>Precedence: bulk
>From: "Webservice" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>References: [EMAIL PROTECTED]
>Subject: Re: Relay-ctrl compiles wrong with RH 7.0?
>Date: Thu, 24 May 2001 15:09:25 +0200
>Content-Transfer-Encoding: 7bit
>
>> From: "Santosh Pasi" <[EMAIL PROTECTED]>
>> 1. Did you install relay-ctrl as root and after using "make"; did you 
>> follow "make install-root".
>
>Yes
>
>
>> 2. Add entry in crontab using crontab -e as given in relay-control doc
>
>Yes, it works fine, I see that coming up each time
>
>
>> 3. Make this link
>>ln -s /usr/local/bin/tcprules /usr/bin/tcprules
>
>Did that. --> no effect
>
> 
>> 4. Check your smtp-script(for -x /etc/tcpcontrol/smtp.cdb), as make 
>> necessary control database file.
>
>This works, /etc/tcp.smtp.cdb is based on /etc/tcp.smtpd
>
>
>> >I've been trying for 2 days now to install relay-ctrl-2.5.
>> >
>> >Everyting goes well (I see no errors in compiling), but the dir's are
>> >normally not created (once I saw a /var/spool/relay-ctrl, but don't 
>> know for>sure), all the other times I created the dirs myself.
>> >
>> >When compiling I never got an error, I tried in /usr and /usr/local.
>> >
>> >This is how I start my tcpserver:
>> >/usr/local/bin/tcpserver -R 0 pop3 /var/qmail/bin/qmail-popup \
>> >ns4.pi-group.net /bin/checkpoppasswd /usr/sbin/relay-ctrl-allow \
>> >/var/qmail/bin/qmail-pop3d Maildir &
>> >
>> >I can loggin at all times, but this 'easy' program doesn't seem to 
work.>> >/var/spool/relay-ctrl stays empty
>
>
>

Re: Re: Relay-ctrl compiles wrong with RH 7.0?

[Webservice]

> Hi,
>
> check the time stamp of controb db files, it may give you some idea.
> Use pop and smtp and immediately check the timestamp of
> /var/spool/relay-ctrl   --- should be current time

No, it's the time when I touched a file into it (4 hours ago, and the file
is still there)
#ls -all /var/spool/relay-ctrl
total 8
drwxr-xr-x2 root root 4096 May 25 14:53 .
drwxr-xr-x   10 root root 4096 May 23 18:38 ..
-rw-rw-r--1 root root0 May 25 14:53 192.168.100.1

> /etc/tcp.smtp.cdb   --- should be current time

Yes, that's OK


It looks like relay-ctrl-allow cannot find the spool dir.


Strange that the cdb file get's updated but the file 192.168.100.1 is not
deleted.


Best Regards,
Pascal

Relay-ctrl and qmail: problem more fundamental, I think

[Bill Isaacs]

OK, I've done some newbie-snooping and found that relay-ctrl-age wasn't 
updating the database.  I removed the path in the smtpcdb rules file, and 
that fixed that.  I then did a tcprulescheck and got:

[root@hoss /etc]# TCPREMOTEIP=64.161.212.206 tcprulescheck 
/etc/tcpcontrol/smtp.
cdb
rule 64.161.212.206:
set environment variable RELAYCLIENT=
allow connection
[root@hoss /etc]#

In addition, I noted the the smtp.cdb file was being updated every minute 
according to ls -l .

So now methinks I should be able to relay, no?  no.  Same message, "5.5.3 
sorry, blah blah blah".  OK, so then I stopped the relay-ctrl-age in the 
cron, and manually compiled the smtp.cdb file from a text file according to 
documentation (after allowing the spool file to expire, so that there was 
nothing in the database referring to my dynamic IP).  I got the exact same 
result with tcprulescheck as above.  I try relaying again, but no luck.

So the question is, doesn't this sound like a more fundamental issue than 
relay-ctrl?  Is there something perhaps with qmail that would disallow 
relaying regardless of what the CDB database says?

thanks,

Bill

>From: Charles Cazabon <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Relay-ctrl and qmail
>Date: Tue, 27 Feb 2001 15:19:59 -0600
>
>Bill Isaacs <[EMAIL PROTECTED]> wrote:
> > Now that we're all in agreement on what relay-ctrl is, let me get
> > more specific about what is not happening for me with this package ;)
>[...]
> > I now check the cron log to make sure that relay-ctrl-age has run
> > since the timestamp on the above file:
> > ---
> > root (02/27-12:47:00-5529) CMD (/usr/sbin/relay-ctrl-age)
> > ---
> >
> > So far so good.
>[...]
> > So obviously, the database isn't being updated.
>
>Okay, lets see some information on the file itself.  How about
> `ls -ld / /etc /etc/tcpcontrol /etc/tcpcontrol/*`
>
>Then, use tcprulescheck on the cdb file to see if that IP address is
>in there:
> `TCPREMOTEIP=1.2.3.4 tcprulescheck /etc/tcpcontrol/smtp.cdb`
>
>Replace 1.2.3.4 with the IP address of the machine you POP-checked your
>mail from immediately before doing the above steps.
>
>Charles
>--
>---
>Charles Cazabon<[EMAIL PROTECTED]>
>GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
>Any opinions expressed are just that -- my opinions.
>---

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

Re: Relay-ctrl and qmail: problem more fundamental, I think

[Charles Cazabon]

Bill Isaacs <[EMAIL PROTECTED]> wrote:
> 
> that fixed that.  I then did a tcprulescheck and got:
> 
> [root@hoss /etc]# TCPREMOTEIP=64.161.212.206 tcprulescheck 
> /etc/tcpcontrol/smtp.
> cdb
> rule 64.161.212.206:
> set environment variable RELAYCLIENT=
> allow connection
> [root@hoss /etc]#
> 
> In addition, I noted the the smtp.cdb file was being updated every minute 
> according to ls -l .
> 
> So now methinks I should be able to relay, no?  no.  Same message, "5.5.3 
> sorry, blah blah blah".

The .cdb file is fine, but you're not being allowed to relay.  Therefore,
the problem is in your qmail-smtpd start script.  Please post that.
If you're using svscan, post the contents of .../service/smtpd/run .

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Re: Relay-ctrl and qmail: problem more fundamental, I think

[Bill Isaacs]

Lost, lost, lost!

OK, I'm a newbie with most of this stuff, but I'm having a problem invoking 
smtp with tcpserver. Trying this:

tcpserver -v -R -x /etc/tcpcontrol/smtp.cdb 0 pop-3 
/var/qmail/bin/qmail-popup hoss.willysworkshop.com \
/bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d 
Maildir
2>&1 | \
/var/qmail/bin/qmail-smtpd \
/var/qmail/bin/splogger pop3d &

results in this:

[root@hoss smtpd]# 220 hoss.willysworkshop.com ESMTP
502 unimplemented (#5.5.1)

and this on my POP client:

Could not connect to "hoss.willysworkshop.com" Cause: connection 
refused(10061)

What am I doing wrong with the tcpserver invocation?

>From: Charles Cazabon <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Fwd: Re: Relay-ctrl and qmail: problem more fundamental, I 
>think
>Date: Wed, 28 Feb 2001 13:11:57 -0600
>
>Bill Isaacs <[EMAIL PROTECTED]> wrote:
> >
> > I have a feeling I'll get laughed at, but here goes.
>
>No, laughing is reserved for people who send mail like "qmail isn't working
>for me.  Why?" to the mailing list.
>
> > I'm not using svscan.  This is what I have in (*gulp*) inetd.conf:
> >
> > smtpstream tcp nowait qmaild /var/qmail/bin/tcp-env tcp-env
> > /var/qmail/bin/qmail-smtpd
>
>Okay.  You need to change this; take it out of inetd.conf and kill -HUP
>inetd.  Start qmail-smtpd with tcpserver -- if you want, you can
>supervise and svscan it as well.  The tcpserver invocation must include the
>option and value "-x /etc/tcpcontrol/smtp.cdb".
>
>So the problem was that the .cdb file was never being consulted, and 
>therefore
>the RELAYCLIENT environment variable was not being set (conditionally or 
>not).
>
>Charles
>--
>---
>Charles Cazabon<[EMAIL PROTECTED]>
>GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
>Any opinions expressed are just that -- my opinions.
>---

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

Re: Relay-ctrl and qmail: problem more fundamental, I think

[Chris Johnson]

On Wed, Feb 28, 2001 at 08:35:02PM -, Bill Isaacs wrote:
> 
> Lost, lost, lost!
> 
> OK, I'm a newbie with most of this stuff, but I'm having a problem invoking 
> smtp with tcpserver. Trying this:
> 
> tcpserver -v -R -x /etc/tcpcontrol/smtp.cdb 0 pop-3 
> /var/qmail/bin/qmail-popup hoss.willysworkshop.com \
> /bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d 
> Maildir
> 2>&1 | \
> /var/qmail/bin/qmail-smtpd \
> /var/qmail/bin/splogger pop3d &

Yikes! You're piping the output of qmail-pop3d into qmail-smtpd. qmail-pop3d
and qmail-smtpd have nothing to do with each other, and qmail-smtpd will be
justifiably confused.

Remove that bit, and give it another shot.

Chris

 PGP signature

Re: Relay-ctrl and qmail: problem more fundamental, I think

[Charles Cazabon]

Bill Isaacs <[EMAIL PROTECTED]> wrote:
> 
> Lost, lost, lost!
> 
> OK, I'm a newbie with most of this stuff, but I'm having a problem invoking 
> smtp with tcpserver. Trying this:
> 
> tcpserver -v -R -x /etc/tcpcontrol/smtp.cdb 0 pop-3 
> /var/qmail/bin/qmail-popup hoss.willysworkshop.com \
> /bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d 
> Maildir
> 2>&1 | \
> /var/qmail/bin/qmail-smtpd \
> /var/qmail/bin/splogger pop3d &

Okay, a couple of problems here.  One, you're trying to bind to the pop3
port (the argument pop-3).  That should be either "smtp" or "25".
Two, you're not invoking the right program.

Try something more like:

tcpserver g GID -u UID -DRvX \
   -x /etc/tcpcontrol/smtp.cdb 0 smtp \
   qmail-smtpd

Change GID and UID to the GID and UID values that the server should run
as.  The last argument is the program which tcpserver runs for each
connection.  -v turns on some status messages, -R turns off ident lookups
on the remote host, -D turns on TCP_NODELAY, -X says accept connections
even if the cdb file doesn't exist.

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---

Fwd: Re: Relay-ctrl and qmail: problem more fundamental, I think

[Bill Isaacs]

I have a feeling I'll get laughed at, but here goes.
I'm not using svscan.  This is what I have in (*gulp*) inetd.conf:

smtpstream tcp nowait qmaild /var/qmail/bin/tcp-env tcp-env   
/var/qmail/bin/qmail-smtpd

>From: Charles Cazabon <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Relay-ctrl and qmail: problem more fundamental, I think
>Date: Wed, 28 Feb 2001 12:47:10 -0600
>
>Bill Isaacs <[EMAIL PROTECTED]> wrote:
> >
> > that fixed that.  I then did a tcprulescheck and got:
> > 
> > [root@hoss /etc]# TCPREMOTEIP=64.161.212.206 tcprulescheck
> > /etc/tcpcontrol/smtp.
> > cdb
> > rule 64.161.212.206:
> > set environment variable RELAYCLIENT=
> > allow connection
> > [root@hoss /etc]#
> > 
> > In addition, I noted the the smtp.cdb file was being updated every 
>minute
> > according to ls -l .
> >
> > So now methinks I should be able to relay, no?  no.  Same message, 
>"5.5.3
> > sorry, blah blah blah".
>
>The .cdb file is fine, but you're not being allowed to relay.  Therefore,
>the problem is in your qmail-smtpd start script.  Please post that.
>If you're using svscan, post the contents of .../service/smtpd/run .
>
>Charles
>--
>---
>Charles Cazabon<[EMAIL PROTECTED]>
>GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
>Any opinions expressed are just that -- my opinions.
>---

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

Fwd: Re: Relay-ctrl and qmail: problem more fundamental, I think

[Bill Isaacs]

At the risk of sounding really stupid, do I need to invoke BOTH the 
corrected script (minus the qmail-smtpd part) AND the old one (pop-3, etc.)? 
  In other words, will I have two tcpserver scripts, one invoking the pop-3 
and the other the qmail smtpd?

As I said, I am a complete newbie with email and no great shakes with much 
of this stuff to begin with.  I hope you folks aren't getting to tired of 
answering these dumb questions.

Thanks,

Bill

>From: Charles Cazabon <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Relay-ctrl and qmail: problem more fundamental, I think
>Date: Wed, 28 Feb 2001 15:15:08 -0600
>
>Bill Isaacs <[EMAIL PROTECTED]> wrote:
> >
> > Lost, lost, lost!
> >
> > OK, I'm a newbie with most of this stuff, but I'm having a problem 
>invoking
> > smtp with tcpserver. Trying this:
> > 
> > tcpserver -v -R -x /etc/tcpcontrol/smtp.cdb 0 pop-3
> > /var/qmail/bin/qmail-popup hoss.willysworkshop.com \
> > /bin/checkpassword /usr/sbin/relay-ctrl-allow /var/qmail/bin/qmail-pop3d
> > Maildir
> > 2>&1 | \
> > /var/qmail/bin/qmail-smtpd \
> > /var/qmail/bin/splogger pop3d &
>
>Okay, a couple of problems here.  One, you're trying to bind to the pop3
>port (the argument pop-3).  That should be either "smtp" or "25".
>Two, you're not invoking the right program.
>
>Try something more like:
>
>tcpserver g GID -u UID -DRvX \
>-x /etc/tcpcontrol/smtp.cdb 0 smtp \
>qmail-smtpd
>
>Change GID and UID to the GID and UID values that the server should run
>as.  The last argument is the program which tcpserver runs for each
>connection.  -v turns on some status messages, -R turns off ident lookups
>on the remote host, -D turns on TCP_NODELAY, -X says accept connections
>even if the cdb file doesn't exist.
>
>Charles
>--
>---
>Charles Cazabon<[EMAIL PROTECTED]>
>GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
>Any opinions expressed are just that -- my opinions.
>---

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

how can I Insert the program "relay-ctrl-allow" between your checkpassword

[shaolei]

please see the attach file qmail-pop3d.init,
how can I insert the program "relay-ctrl-allow"between my checkpassword
I use vmailmgr so I use checkvpw.

 qmail-pop3d.init

how can I Insert the program "relay-ctrl-allow" between your checkpassword

[jackshaw]

 please see the attach file qmail-pop3d.init,
 how can I insert the program "relay-ctrl-allow"between my checkpassword
 I use vmailmgr so I use checkvpw.
 

 qmail-pop3d.init

Re: Fwd: Re: Relay-ctrl and qmail: problem more fundamental, I think

[Charles Cazabon]

Bill Isaacs <[EMAIL PROTECTED]> wrote:
> 
> I have a feeling I'll get laughed at, but here goes.

No, laughing is reserved for people who send mail like "qmail isn't working
for me.  Why?" to the mailing list.

> I'm not using svscan.  This is what I have in (*gulp*) inetd.conf:
> 
> smtpstream tcp nowait qmaild /var/qmail/bin/tcp-env tcp-env   
> /var/qmail/bin/qmail-smtpd

Okay.  You need to change this; take it out of inetd.conf and kill -HUP
inetd.  Start qmail-smtpd with tcpserver -- if you want, you can
supervise and svscan it as well.  The tcpserver invocation must include the
option and value "-x /etc/tcpcontrol/smtp.cdb".

So the problem was that the .cdb file was never being consulted, and therefore
the RELAYCLIENT environment variable was not being set (conditionally or not).

Charles
-- 
---
Charles Cazabon<[EMAIL PROTECTED]>
GPL'ed software available at:  http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
---