[qmailtoaster] Forward email with domainkeys

2008-01-28 Thread Bill Kwok
Hi List,

Some of my users' email are forwarded from regional office (another qmail
server).  Most emails are fine, except email from google alert.  The only
error message I can see is something like this:


Dec31 14:40:12 CHKUSER accepted rcpt: from 
[EMAIL PROTECTED]:: remote
regionaloffice:unknown:x.x.x.x rcpt [EMAIL PROTECTED] : found existing
recipient
Dec31 14:40:13 tcpserver: end 24357 status 256


My guess is it's due to domainkeys is being used by Google and when we
forward from one server to another, it breaks.  Am I correct?  If yes, any
way to disable domainkeys checking?

Thanks in advance.

Best regards,
Bill


Re: [qmailtoaster] Forward email with domainkeys

2008-01-28 Thread Eric Shubes
Bill Kwok wrote:
 Hi List,
  
 Some of my users' email are forwarded from regional office (another
 qmail server).  Most emails are fine, except email from google alert. 
 The only error message I can see is something like this:
  
 
 Dec31 14:40:12 CHKUSER accepted rcpt: from
 [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]::
 remote regionaloffice:unknown:x.x.x.x rcpt [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED] : found existing recipient
 Dec31 14:40:13 tcpserver: end 24357 status 256
 
  
 My guess is it's due to domainkeys is being used by Google and when we
 forward from one server to another, it breaks.  Am I correct?  If yes,
 any way to disable domainkeys checking?
  
 Thanks in advance.
  
 Best regards,
 Bill

That could be on older toaster versions, which did not log spf nor dk
rejections. If your toaster is fairly recent, you would see a rejection
message in the log for both of these conditions.

If your toaster is a bit old, I suspect that your problem is more likely due
to SPF misconfiguration, although domainkeys might also be a problem.

Check the list archive for instructions on disabling domainkeys. The wizard
at http://www.openspf.org is great helping to determine what should be in
the spf record for your domain.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Forward email with domainkeys

2008-01-28 Thread Eric Shubes
Bill Kwok wrote:
 
 
 On Jan 29, 2008 12:07 AM, Eric Shubes [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED] wrote:
 
 Bill Kwok wrote:
  Hi List,
 
  Some of my users' email are forwarded from regional office (another
  qmail server).  Most emails are fine, except email from google alert.
  The only error message I can see is something like this:
 
 
  Dec31 14:40:12 CHKUSER accepted rcpt: from
  [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]
 
 mailto:[EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]::
  remote regionaloffice:unknown:x.x.x.x rcpt [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]
  mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] : found
 existing recipient
  Dec31 14:40:13 tcpserver: end 24357 status 256
 
 
  My guess is it's due to domainkeys is being used by Google and when we
  forward from one server to another, it breaks.  Am I correct?  If yes,
  any way to disable domainkeys checking?
 
  Thanks in advance.
 
  Best regards,
  Bill
 
 That could be on older toaster versions, which did not log spf nor dk
 rejections. If your toaster is fairly recent, you would see a rejection
 message in the log for both of these conditions.
 
 If your toaster is a bit old, I suspect that your problem is more
 likely due
 to SPF misconfiguration, although domainkeys might also be a problem.
 
 Check the list archive for instructions on disabling domainkeys. The
 wizard
 at http://www.openspf.org http://www.openspf.org/ is great helping
 to determine what should be in
 the spf record for your domain.
 
 --
 -Eric 'shubes'
 
 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 http://www.vr.org/
 -
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]
 
 
  
 Hi Eric,
  
 It seems my qmt versions are not that outdated:
  
 # rpm -qa | grep toaster
 vpopmail-toaster-5.4.13-1.3.3
 ezmlm-cgi-toaster-0.53.324-1.3.2
 courier-authlib-toaster-0.59.1-1.3.5
 squirrelmail-toaster-1.4.9a-1.3.5
 spamassassin-toaster-3.1.8-1.3.7
 ripmime-toaster-1.4.0.6-1.3.2
 qmailmrtg-toaster-4.2-1.3.2
 isoqlog-toaster-2.1-1.3.3
 daemontools-toaster-0.76-1.3.2
 libdomainkeys-toaster-0.68-1.3.2
 libsrs2-toaster-1.0.18-1.3.2
 courier-imap-toaster-4.1.2-1.3.6
 send-emails-toaster-0.5-1.3.3
 qmail-pop3d-toaster-1.03-1.3.14
 autorespond-toaster-2.0.4-1.3.2
 qmailtoaster-plus-0.2.7-1.3.9
 control-panel-toaster-0.5-1.3.3
 simscan-toaster-1.3.1-1.3.5
 vqadmin-toaster-2.3.4-1.3.2
 qmailadmin-toaster-1.2.9-1.3.3
 ucspi-tcp-toaster-0.88-1.3.4
 maildrop-toaster-devel-2.0.3-1.3.4
 clamav-toaster-0.90.1-1.3.11
 ezmlm-toaster-0.53.324-1.3.2
 maildrop-toaster-2.0.3-1.3.4
 qmail-toaster-1.03-1.3.14
 To be honest, I have no idea about how to setup SPF.  I will study it
 soon and hope can solve my problem soon.  Thanks for pointing me to a
 new direction. 
  
  

IIRC that logging problem was corrected somewhere around version 1.3.9 or
1.3.11 of qmail-toaster. The only changelog that I know of that's up to date
is in the rpm spec file, which I don't have handy at the moment. BL, you
appear to be current enough to have the change in there.

You can try turning off DK checking, but I'm guessing that won't fix your
problem. I could be wrong about this though (it's been known to happen!).

Since you're not getting a meaningful log message, the best way to really
tell what's going on is to turn on recordio during a test. Directions for
using recordio are in the archives somewhere. It'd be nice if they were on
the wiki, but I don't know that they're there yet.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] qmailtoaster on debian etch

2008-01-28 Thread Lucian Cristian

Eric Shubes wrote:

Lucian Cristian wrote:
  

Hi everyone

I installed qmailtoaster from src rpms (after making changes on spec
files) on Debian Etch, is someone here who knows how to make a deb
package, I would like to make a src deb and use debian specific tools to
compile the package and save them as deb files.

Thanks,
Lucian Cristian




I'm not very familiar with deb files (yet), but have been thinking about
creating toaster deb files for Ubuntu server (a popular Debian derivative).
Perhaps we can work together on this.

  
for now I have only the dependencies and some changes that needs to be 
done to the sistem, using alien it will rebuild the rpm and install 
smoothly, like on rehdat sistems


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] qmailtoaster on debian etch

2008-01-28 Thread Eric Shubes
Lucian Cristian wrote:
 Hi everyone
 
 I installed qmailtoaster from src rpms (after making changes on spec
 files) on Debian Etch, is someone here who knows how to make a deb
 package, I would like to make a src deb and use debian specific tools to
 compile the package and save them as deb files.
 
 Thanks,
 Lucian Cristian
 

I'm not very familiar with deb files (yet), but have been thinking about
creating toaster deb files for Ubuntu server (a popular Debian derivative).
Perhaps we can work together on this.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] FRCP Email Retention

2008-01-28 Thread Ben King

I am a longtime qmail and qmailtoaster user.

Has anybody handled the Federal Rules of Civil Procedure for electronic 
communications with GPL tools? I understand qmailtap will allow me to make 
the email copies. I'm more interested in the search, storage, and retrieval.


What I am looking for is what solutions you have come up with that satisifys 
email retention rules, indexable searchable content, ability to provide a 
portion or all of the emails in an easy end user type of interface.


What are you using and does it work well? 




-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] Forward email with domainkeys

2008-01-28 Thread Bill Kwok
On Jan 29, 2008 12:07 AM, Eric Shubes [EMAIL PROTECTED] wrote:

 Bill Kwok wrote:
  Hi List,
 
  Some of my users' email are forwarded from regional office (another
  qmail server).  Most emails are fine, except email from google alert.
  The only error message I can see is something like this:
 
 
  Dec31 14:40:12 CHKUSER accepted rcpt: from
  [EMAIL PROTECTED]
  mailto:[EMAIL PROTECTED]
 ::
  remote regionaloffice:unknown:x.x.x.x rcpt [EMAIL PROTECTED]
  mailto:[EMAIL PROTECTED] : found existing recipient
  Dec31 14:40:13 tcpserver: end 24357 status 256
 
 
  My guess is it's due to domainkeys is being used by Google and when we
  forward from one server to another, it breaks.  Am I correct?  If yes,
  any way to disable domainkeys checking?
 
  Thanks in advance.
 
  Best regards,
  Bill

 That could be on older toaster versions, which did not log spf nor dk
 rejections. If your toaster is fairly recent, you would see a rejection
 message in the log for both of these conditions.

 If your toaster is a bit old, I suspect that your problem is more likely
 due
 to SPF misconfiguration, although domainkeys might also be a problem.

 Check the list archive for instructions on disabling domainkeys. The
 wizard
 at http://www.openspf.org is great helping to determine what should be in
 the spf record for your domain.

 --
 -Eric 'shubes'

 -
 QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



Hi Eric,

It seems my qmt versions are not that outdated:

# rpm -qa | grep toaster
vpopmail-toaster-5.4.13-1.3.3
ezmlm-cgi-toaster-0.53.324-1.3.2
courier-authlib-toaster-0.59.1-1.3.5
squirrelmail-toaster-1.4.9a-1.3.5
spamassassin-toaster-3.1.8-1.3.7
ripmime-toaster-1.4.0.6-1.3.2
qmailmrtg-toaster-4.2-1.3.2
isoqlog-toaster-2.1-1.3.3
daemontools-toaster-0.76-1.3.2
libdomainkeys-toaster-0.68-1.3.2
libsrs2-toaster-1.0.18-1.3.2
courier-imap-toaster-4.1.2-1.3.6
send-emails-toaster-0.5-1.3.3
qmail-pop3d-toaster-1.03-1.3.14
autorespond-toaster-2.0.4-1.3.2
qmailtoaster-plus-0.2.7-1.3.9
control-panel-toaster-0.5-1.3.3
simscan-toaster-1.3.1-1.3.5
vqadmin-toaster-2.3.4-1.3.2
qmailadmin-toaster-1.2.9-1.3.3
ucspi-tcp-toaster-0.88-1.3.4
maildrop-toaster-devel-2.0.3-1.3.4
clamav-toaster-0.90.1-1.3.11
ezmlm-toaster-0.53.324-1.3.2
maildrop-toaster-2.0.3-1.3.4
qmail-toaster-1.03-1.3.14
To be honest, I have no idea about how to setup SPF.  I will study it soon
and hope can solve my problem soon.  Thanks for pointing me to a new
direction.


Re: [qmailtoaster] qmailtoaster on debian etch

2008-01-28 Thread Erik A. Espinoza
Hi Lucian,

I will contact you offlist later tonight. I am definitely interested
in an official Debian port if you are interested in being the guy in
charge of the port.

Thanks,
Erik

On Jan 28, 2008 10:14 AM, Lucian Cristian [EMAIL PROTECTED] wrote:
 Eric Shubes wrote:
  Lucian Cristian wrote:
 
  Hi everyone
 
  I installed qmailtoaster from src rpms (after making changes on spec
  files) on Debian Etch, is someone here who knows how to make a deb
  package, I would like to make a src deb and use debian specific tools to
  compile the package and save them as deb files.
 
  Thanks,
  Lucian Cristian
 
 
 
  I'm not very familiar with deb files (yet), but have been thinking about
  creating toaster deb files for Ubuntu server (a popular Debian derivative).
  Perhaps we can work together on this.
 
 
 for now I have only the dependencies and some changes that needs to be
 done to the sistem, using alien it will rebuild the rpm and install
 smoothly, like on rehdat sistems


 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] qmailtoaster on debian etch

2008-01-28 Thread Lucian Cristian

Hi everyone

I installed qmailtoaster from src rpms (after making changes on spec 
files) on Debian Etch, is someone here who knows how to make a deb 
package, I would like to make a src deb and use debian specific tools to 
compile the package and save them as deb files.


Thanks,
Lucian Cristian


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread David Campbell
I'm running qmailtaoster for an ISP mail system, we just switched over from
another mail server that was running in windows (hmailserver.com) which uses
the same [EMAIL PROTECTED] for username and password, and it worked fine
with my outgoing mailserver requires authentication ticked in outlook or
equivalent settings in other programs, but I have an issue with about 20% of
my customers, with exactly the same settings we transfered the usernames and
passwords so they matched on the new server, then switched over the A and MX
records, all of a sudden they cannot send email,  they can receive fine,
just not send, they get an SMTP auth failure, I was wondering if anyone else
has experience in using qmailtaoster for an isp and could offer any tips, we
resell our connections from a wholesaler so we dont control their IP's thus
cannot just allow relaying from a particular ip range, we need
authentication.

thank you


Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread Jake Vickers

David Campbell wrote:
I'm running qmailtaoster for an ISP mail system, we just switched over 
from another mail server that was running in windows (hmailserver.com 
http://hmailserver.com) which uses the same [EMAIL PROTECTED] 
mailto:[EMAIL PROTECTED] for username and password, and it worked 
fine with my outgoing mailserver requires authentication ticked in 
outlook or equivalent settings in other programs, but I have an issue 
with about 20% of my customers, with exactly the same settings we 
transfered the usernames and passwords so they matched on the new 
server, then switched over the A and MX records, all of a sudden they 
cannot send email,  they can receive fine, just not send, they get an 
SMTP auth failure, I was wondering if anyone else has experience in 
using qmailtaoster for an isp and could offer any tips, we resell our 
connections from a wholesaler so we dont control their IP's thus 
cannot just allow relaying from a particular ip range, we need 
authentication.




Are they receiving an error about the RBL check? If so, you can either 
remove spamhaus from the blacklists, connect them to 587 istead of 25, 
or some other type of workaround.




Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread Eric Shubes
David Campbell wrote:
 I'm running qmailtaoster for an ISP mail system, we just switched over
 from another mail server that was running in windows (hmailserver.com
 http://hmailserver.com) which uses the same [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED] for username and password, and it worked
 fine with my outgoing mailserver requires authentication ticked in
 outlook or equivalent settings in other programs, but I have an issue
 with about 20% of my customers, with exactly the same settings we
 transfered the usernames and passwords so they matched on the new
 server, then switched over the A and MX records, all of a sudden they
 cannot send email,  they can receive fine, just not send, they get an
 SMTP auth failure, I was wondering if anyone else has experience in
 using qmailtaoster for an isp and could offer any tips, we resell our
 connections from a wholesaler so we dont control their IP's thus cannot
 just allow relaying from a particular ip range, we need authentication.
 
 thank you

Could it be that the 20% are on dynamic IP addresses and are using port 25?
They would be blocked by RBLs in that case. If they use the submission port
(587) they won't have that problem.

Let us know if that's the case or you're experiencing a different problem.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread David Campbell
yes, it was an RBL error they got, but I am loving the RBL protection for
antispam, is there anyway to allow authenticated users to bypass RBL
checking?

On 29/01/2008, Jake Vickers [EMAIL PROTECTED] wrote:

  David Campbell wrote:

 I'm running qmailtaoster for an ISP mail system, we just switched over
 from another mail server that was running in windows (hmailserver.com)
 which uses the same [EMAIL PROTECTED] for username and password, and it
 worked fine with my outgoing mailserver requires authentication ticked in
 outlook or equivalent settings in other programs, but I have an issue with
 about 20% of my customers, with exactly the same settings we transfered the
 usernames and passwords so they matched on the new server, then switched
 over the A and MX records, all of a sudden they cannot send email,  they can
 receive fine, just not send, they get an SMTP auth failure, I was wondering
 if anyone else has experience in using qmailtaoster for an isp and could
 offer any tips, we resell our connections from a wholesaler so we dont
 control their IP's thus cannot just allow relaying from a particular ip
 range, we need authentication.


 Are they receiving an error about the RBL check? If so, you can either
 remove spamhaus from the blacklists, connect them to 587 istead of 25, or
 some other type of workaround.




-- 
David Campbell


E: [EMAIL PROTECTED]
W: http://www.bigbighuge.com

The information in this E-mail and any attachments is confidential. It is
intended solely for the attention and use of the named addressee(s). If you
are not the intended recipient, or person responsible for delivering this
information to the intended recipient, please notify the sender immediately.
Unless you are the intended recipient or his/her representative you are not
authorised to, and must not read, copy, distribute, use or retain this
message or any part of it. Opinions, conclusions and other information
expressed in this message are not given or endorsed by the sender unless
otherwise indicated by an authorised officer independent of this message.

...when was the last time you did a backup?...


Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread David Campbell
aw, thats a shame, I mean its good and they do a great job...I dont really
want to add ANOTHER layer of complication to the setup of our email accounts
to home users who can barely figure out how to open outlook :(

is it possible to whitelist IP addresses from certain ranges against the
blacklist? this would require me to whitelist all of out wholesalers dynamic
IP range, but they have a fairly strict anti-spam system

On 29/01/2008, Jake Vickers [EMAIL PROTECTED] wrote:

 David Campbell wrote:
  yes, it was an RBL error they got, but I am loving the RBL protection
  for antispam, is there anyway to allow authenticated users to bypass
  RBL checking?
 

 Not unless you use port 587.  RBLs are checked the first thing, before
 any type of authentication is even processed.


 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
David Campbell


E: [EMAIL PROTECTED]
W: http://www.bigbighuge.com

The information in this E-mail and any attachments is confidential. It is
intended solely for the attention and use of the named addressee(s). If you
are not the intended recipient, or person responsible for delivering this
information to the intended recipient, please notify the sender immediately.
Unless you are the intended recipient or his/her representative you are not
authorised to, and must not read, copy, distribute, use or retain this
message or any part of it. Opinions, conclusions and other information
expressed in this message are not given or endorsed by the sender unless
otherwise indicated by an authorised officer independent of this message.

...when was the last time you did a backup?...


Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread David Campbell
so for example I wanted to skip rbl for

10.10.*.*

I would open up

/etc/tcprules.d/tcp.smtp

and add the entry on a new line so it looked like

10.10.:allow

what would be the exact line I would need to put in there, to allow people
on that range to skip RBL

sorry, I'm a total noob at this :D

Also would this require a restart of the server or networking in order to
start working?

On 29/01/2008, Jake Vickers [EMAIL PROTECTED] wrote:

 David Campbell wrote:
  aw, thats a shame, I mean its good and they do a great job...I dont
  really want to add ANOTHER layer of complication to the setup of our
  email accounts to home users who can barely figure out how to open
  outlook :(
 
  is it possible to whitelist IP addresses from certain ranges against
  the blacklist? this would require me to whitelist all of out
  wholesalers dynamic IP range, but they have a fairly strict anti-spam
  system
 

 You can create your own RBL whitelist if you want - just add that entry
 before the spamhaus entry.
 You can also add their IP ranges in your tcp.smtp file to skip the RBL
 checks.


 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
David Campbell


E: [EMAIL PROTECTED]
W: http://www.bigbighuge.com

The information in this E-mail and any attachments is confidential. It is
intended solely for the attention and use of the named addressee(s). If you
are not the intended recipient, or person responsible for delivering this
information to the intended recipient, please notify the sender immediately.
Unless you are the intended recipient or his/her representative you are not
authorised to, and must not read, copy, distribute, use or retain this
message or any part of it. Opinions, conclusions and other information
expressed in this message are not given or endorsed by the sender unless
otherwise indicated by an authorised officer independent of this message.

...when was the last time you did a backup?...


Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread Jake Vickers

David Campbell wrote:
aw, thats a shame, I mean its good and they do a great job...I dont 
really want to add ANOTHER layer of complication to the setup of our 
email accounts to home users who can barely figure out how to open 
outlook :(


is it possible to whitelist IP addresses from certain ranges against 
the blacklist? this would require me to whitelist all of out 
wholesalers dynamic IP range, but they have a fairly strict anti-spam 
system




You can create your own RBL whitelist if you want - just add that entry 
before the spamhaus entry.
You can also add their IP ranges in your tcp.smtp file to skip the RBL 
checks.



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread Jake Vickers

David Campbell wrote:
yes, it was an RBL error they got, but I am loving the RBL protection 
for antispam, is there anyway to allow authenticated users to bypass 
RBL checking?




Not unless you use port 587.  RBLs are checked the first thing, before 
any type of authentication is even processed.



-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread David Campbell
is spamhaus the only one that rejects dynamic ips or should I remove any
others like spamcop ( I checked and the customers ip that had been rejected
was not listed at spamcop) but are there others I should remove? currently I
have the following in my control/blacklists file

-r bl.spamcop.net -r list.dsbl.org -r cbl.abuseat.org

are there any others that could be recommended for extra protection, without
killing dynamic IP addresses (ie, addresses only blacklisted for sending
spam, not just for being a dynamic ip)


On 29/01/2008, David Campbell [EMAIL PROTECTED] wrote:

 so for example I wanted to skip rbl for

 10.10.*.*

 I would open up

 /etc/tcprules.d/tcp.smtp

 and add the entry on a new line so it looked like

 10.10.:allow

 what would be the exact line I would need to put in there, to allow people
 on that range to skip RBL

 sorry, I'm a total noob at this :D

 Also would this require a restart of the server or networking in order to
 start working?

 On 29/01/2008, Jake Vickers [EMAIL PROTECTED] wrote:
 
  David Campbell wrote:
   aw, thats a shame, I mean its good and they do a great job...I dont
   really want to add ANOTHER layer of complication to the setup of our
   email accounts to home users who can barely figure out how to open
   outlook :(
  
   is it possible to whitelist IP addresses from certain ranges against
   the blacklist? this would require me to whitelist all of out
   wholesalers dynamic IP range, but they have a fairly strict anti-spam
   system
  
 
  You can create your own RBL whitelist if you want - just add that entry
  before the spamhaus entry.
  You can also add their IP ranges in your tcp.smtp file to skip the RBL
  checks.
 
 
  -
   QmailToaster hosted by: VR Hosted http://www.vr.org
  -
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 


 --
 David Campbell


 E: [EMAIL PROTECTED]
 W: http://www.bigbighuge.com

 The information in this E-mail and any attachments is confidential. It is
 intended solely for the attention and use of the named addressee(s). If you
 are not the intended recipient, or person responsible for delivering this
 information to the intended recipient, please notify the sender immediately.
 Unless you are the intended recipient or his/her representative you are not
 authorised to, and must not read, copy, distribute, use or retain this
 message or any part of it. Opinions, conclusions and other information
 expressed in this message are not given or endorsed by the sender unless
 otherwise indicated by an authorised officer independent of this message.

 ...when was the last time you did a backup?...




-- 
David Campbell


E: [EMAIL PROTECTED]
W: http://www.bigbighuge.com

The information in this E-mail and any attachments is confidential. It is
intended solely for the attention and use of the named addressee(s). If you
are not the intended recipient, or person responsible for delivering this
information to the intended recipient, please notify the sender immediately.
Unless you are the intended recipient or his/her representative you are not
authorised to, and must not read, copy, distribute, use or retain this
message or any part of it. Opinions, conclusions and other information
expressed in this message are not given or endorsed by the sender unless
otherwise indicated by an authorised officer independent of this message.

...when was the last time you did a backup?...


Re: [qmailtoaster] - Outgoing Authentication for ISP mail

2008-01-28 Thread Ben Mills



David Campbell wrote:

so for example I wanted to skip rbl for

10.10.*.*

I would open up

/etc/tcprules.d/tcp.smtp

and add the entry on a new line so it looked like

10.10.:allow

what would be the exact line I would need to put in there, to allow 
people on that range to skip RBL


sorry, I'm a total noob at this :D

Also would this require a restart of the server or networking in order 
to start working?


I assume adding entries to tcp.smtp in the manner you outlined would 
work. You would need to run  qmailctl cdb  afterwards. No need for a 
reboot.


On 29/01/2008, *Jake Vickers* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
wrote:


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] New Toaster SSL problem

2008-01-28 Thread Dan McAllister
Greetings and Salutations to all...

I have installed a new toaster (with QMT-Plus) onto a Fedora 8 system. I
used the Fedora 6 build scripts and everything seems to work perfectly.
EXCEPT (there's always an exception)... imap4-SSL is experienceing a
problem with the kerberos library.

All of the relevant packages were installed from the devel website (vs.
the now-static-since-April main site). Again, after making sure all the
relevant support rpms were installed, the install scripts ran cleanly.

The problem can be seen from the qmlog imap4-ssl | tail, which appears as:
01-28 20:43:50 /usr/bin/couriertls: error while loading shared libraries:
libkrb5support.so.0: failed to map segment from shared object: Cannot
allocate memory

The system runs with 2.0 GB of ram, and being a good sysadm, the swap
space is an equaly spacious 2.0 GB. (In other words, I believe there is a
problem in the allocation routine, or in the library itself -- because
there is PLENTY of memory (real and virtual) available.

If I look from the client end, I get the following from Outlook Express:
Configuration:
   Account: mail.mydomain.com
   Server: mail.mydomain.com
   User name: [EMAIL PROTECTED]
   Protocol: IMAP
   Port: 993
   Secure(SSL): 1
   Code: 800ccc0f

(I don't think that helps much... but you never know!)

Finally, I have the following krb packages installed:

krb5-libs-1.6.2-9.fc8
krb5-auth-dialog-0.7-5.fc8
krb5-devel-1.6.2-9.fc8
krb5-workstation-1.6.2-9.fc8
krb5-devel-1.6.2-9.fc8
pam_krb5-2.2.18-1
pam_krb5-2.2.18-1
krb5-libs-1.6.2-9.fc8


I BELIEVE that I NEED the Kerberos packages for my Samba (as PDC)
installation -- but that may be a false assumption.

I have even tried backing out the latest kerberos versions (to the FC6
version), but I get the same result.

Any ideas???

-- 

Dan McAllister, President
IT4SOHO, LLC

PLEASE NOTE OUR NEW ADDRESS:
224 - 13th Avenue N
St. Petersburg, FL 33701

All other contact info remains unchanged:
877-IT4SOHO - Toll Free
727-647-7646 - In Pinellas
727-507-9435 - Fax



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] New Toaster SSL problem

2008-01-28 Thread Dan McAllister
Greetings and Salutations to all...

I have installed a new toaster (with QMT-Plus) onto a Fedora 8 system. I
used the Fedora 6 build scripts and everything seems to work perfectly.
EXCEPT (there's always an exception)... imap4-SSL is experienceing a
problem with the kerberos library.

All of the relevant packages were installed from the devel website (vs.
the now-static-since-April main site). Again, after making sure all the
relevant support rpms were installed, the install scripts ran cleanly.

The problem can be seen from the qmlog imap4-ssl | tail, which appears as:
01-28 20:43:50 /usr/bin/couriertls: error while loading shared libraries:
libkrb5support.so.0: failed to map segment from shared object: Cannot
allocate memory

The system runs with 2.0 GB of ram, and being a good sysadm, the swap
space is an equaly spacious 2.0 GB. (In other words, I believe there is a
problem in the allocation routine, or in the library itself -- because
there is PLENTY of memory (real and virtual) available.

If I look from the client end, I get the following from Outlook Express:
Configuration:
   Account: mail.mydomain.com
   Server: mail.mydomain.com
   User name: [EMAIL PROTECTED]
   Protocol: IMAP
   Port: 993
   Secure(SSL): 1
   Code: 800ccc0f

(I don't think that helps much... but you never know!)

Finally, I have the following krb packages installed:

krb5-libs-1.6.2-9.fc8
krb5-auth-dialog-0.7-5.fc8
krb5-devel-1.6.2-9.fc8
krb5-workstation-1.6.2-9.fc8
krb5-devel-1.6.2-9.fc8
pam_krb5-2.2.18-1
pam_krb5-2.2.18-1
krb5-libs-1.6.2-9.fc8


I BELIEVE that I NEED the Kerberos packages for my Samba (as PDC)
installation -- but that may be a false assumption.

I have even tried backing out the latest kerberos versions (to the FC6
version), but I get the same result.

Any ideas???

-- 

Dan McAllister, President
IT4SOHO, LLC

PLEASE NOTE OUR NEW ADDRESS:
224 - 13th Avenue N
St. Petersburg, FL 33701

All other contact info remains unchanged:
877-IT4SOHO - Toll Free
727-647-7646 - In Pinellas
727-507-9435 - Fax



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] /var/qmail/control/blacklists

2008-01-28 Thread Eric Shubes
David Campbell wrote:
 if this file is edited, is it automatically updated, or does something
 need to be restarted before this will update?
 
 thanks

This file is pulled into each smtp session when it's started, so nothing
needs to be done for these.

If it's feasible though, I'd make an effort to try using the solution Jake
suggested by disabling RBLs in the /etc/tcprules.d/tcp.smtp file (in which
case you'd need to 'qmailctl cdb' as Ben mentioned to make the change
effective). That way you won't lose the effectiveness of spamhaus entirely.
RBLs are a powerful and effective tool against spam, and they use minimal
toaster resources because rejected messages aren't even accepted, let alone
scanned.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] New Toaster SSL problem

2008-01-28 Thread Eric Shubes
Dan McAllister wrote:
 Greetings and Salutations to all...
 
 I have installed a new toaster (with QMT-Plus) onto a Fedora 8 system. I
 used the Fedora 6 build scripts and everything seems to work perfectly.
 EXCEPT (there's always an exception)... imap4-SSL is experienceing a
 problem with the kerberos library.
 
 All of the relevant packages were installed from the devel website (vs.
 the now-static-since-April main site). Again, after making sure all the
 relevant support rpms were installed, the install scripts ran cleanly.
 
 The problem can be seen from the qmlog imap4-ssl | tail, which appears as:
 01-28 20:43:50 /usr/bin/couriertls: error while loading shared libraries:
 libkrb5support.so.0: failed to map segment from shared object: Cannot
 allocate memory
 
 The system runs with 2.0 GB of ram, and being a good sysadm, the swap
 space is an equaly spacious 2.0 GB. (In other words, I believe there is a
 problem in the allocation routine, or in the library itself -- because
 there is PLENTY of memory (real and virtual) available.
 
 If I look from the client end, I get the following from Outlook Express:
 Configuration:
Account: mail.mydomain.com
Server: mail.mydomain.com
User name: [EMAIL PROTECTED]
Protocol: IMAP
Port: 993
Secure(SSL): 1
Code: 800ccc0f
 
 (I don't think that helps much... but you never know!)
 
 Finally, I have the following krb packages installed:
 
 krb5-libs-1.6.2-9.fc8
 krb5-auth-dialog-0.7-5.fc8
 krb5-devel-1.6.2-9.fc8
 krb5-workstation-1.6.2-9.fc8
 krb5-devel-1.6.2-9.fc8
 pam_krb5-2.2.18-1
 pam_krb5-2.2.18-1
 krb5-libs-1.6.2-9.fc8
 
 
 I BELIEVE that I NEED the Kerberos packages for my Samba (as PDC)
 installation -- but that may be a false assumption.
 
 I have even tried backing out the latest kerberos versions (to the FC6
 version), but I get the same result.
 
 Any ideas???
 

Try increasing the softlimit in the /var/qmail/supervise/imap4-ssl/run file,
especially if you have a x86_64 system. I think you'll need to stop then
start (not restart) qmail after changing this.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] /var/qmail/control/blacklists

2008-01-28 Thread Eric Shubes
Always. ;)
Glad it's working for you.

David Campbell wrote:
 yes, I have actually added them into that file now, havn;t had any more
 complaints... I guess thats a good thing :D
 
 On 29/01/2008, *Eric Shubes* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 wrote:
 
 David Campbell wrote:
  if this file is edited, is it automatically updated, or does something
  need to be restarted before this will update?
 
  thanks
 
 This file is pulled into each smtp session when it's started, so nothing
 needs to be done for these.
 
 If it's feasible though, I'd make an effort to try using the
 solution Jake
 suggested by disabling RBLs in the /etc/tcprules.d/tcp.smtp file (in
 which
 case you'd need to 'qmailctl cdb' as Ben mentioned to make the change
 effective). That way you won't lose the effectiveness of spamhaus
 entirely.
 RBLs are a powerful and effective tool against spam, and they use
 minimal
 toaster resources because rejected messages aren't even accepted,
 let alone
 scanned.
 
 --
 -Eric 'shubes'
 
 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED]
 
 
 
 
 -- 
 David Campbell
 
 
 E: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 W: http://www.bigbighuge.com
 
 The information in this E-mail and any attachments is confidential. It
 is intended solely for the attention and use of the named addressee(s).
 If you are not the intended recipient, or person responsible for
 delivering this information to the intended recipient, please notify the
 sender immediately. Unless you are the intended recipient or his/her
 representative you are not authorised to, and must not read, copy,
 distribute, use or retain this message or any part of it. Opinions,
 conclusions and other information expressed in this message are not
 given or endorsed by the sender unless otherwise indicated by an
 authorised officer independent of this message.
 
 ...when was the last time you did a backup?...


-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] /var/qmail/control/blacklists

2008-01-28 Thread David Campbell
yes, I have actually added them into that file now, havn;t had any more
complaints... I guess thats a good thing :D

On 29/01/2008, Eric Shubes [EMAIL PROTECTED] wrote:

 David Campbell wrote:
  if this file is edited, is it automatically updated, or does something
  need to be restarted before this will update?
 
  thanks

 This file is pulled into each smtp session when it's started, so nothing
 needs to be done for these.

 If it's feasible though, I'd make an effort to try using the solution Jake
 suggested by disabling RBLs in the /etc/tcprules.d/tcp.smtp file (in which
 case you'd need to 'qmailctl cdb' as Ben mentioned to make the change
 effective). That way you won't lose the effectiveness of spamhaus
 entirely.
 RBLs are a powerful and effective tool against spam, and they use minimal
 toaster resources because rejected messages aren't even accepted, let
 alone
 scanned.

 --
 -Eric 'shubes'

 -
  QmailToaster hosted by: VR Hosted http://www.vr.org
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]




-- 
David Campbell


E: [EMAIL PROTECTED]
W: http://www.bigbighuge.com

The information in this E-mail and any attachments is confidential. It is
intended solely for the attention and use of the named addressee(s). If you
are not the intended recipient, or person responsible for delivering this
information to the intended recipient, please notify the sender immediately.
Unless you are the intended recipient or his/her representative you are not
authorised to, and must not read, copy, distribute, use or retain this
message or any part of it. Opinions, conclusions and other information
expressed in this message are not given or endorsed by the sender unless
otherwise indicated by an authorised officer independent of this message.

...when was the last time you did a backup?...


[qmailtoaster] Cannot send local email

2008-01-28 Thread [EMAIL PROTECTED]
I'm trying to send from one domain to another on the same machine but keep
getting the following;

//
Delivery error: Sorry. Although I'm listed as a best-preference MX or A for
that host, it isn't in my control/locals file, so I don't treat it as local.
(#5.4.6)
\\

Yet, I have listed all of the domains in the locals file. What am I missing?

Mike



-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]