RE: [qmailtoaster] Well, It was good for a day..

2008-04-18 Thread Kevin Katz
Thanks for your reply Eric,
I'm not so worried about DK checking as I am of the DK signing. I
had continual failures with the forward slash as part of the key, but using
an octal code to replace it seemed to fix it. But I'm still failing about 2
out of every 5 tests with a "DomainKey-Status: bad: Signature failed
verification" and the same results sending email to yahoo, some keys pass
and the message does not get deferred and then some keys fail with
"Authentication-Results: mta139.mail.re1.yahoo.com  from=katzrealtyinc.com;
domainkeys=fail (bad sig)" and the email gets deferred for up to 12 hours.
Both the test results and yahoo headers show DomainKey information, so it is
getting info from my DNS server but evidently not the correct info. Any help
would be greatly appreciated.

Kevin

-Original Message-
From: Eric Shubert [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 17, 2008 3:28 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Well, It was good for a day..

Kevin Katz wrote:
> Sorry Folks,
>   I thought I had it, now it's not working again. I can tell you that
> this IS an issue with Yahoo defering mail, once I had a valid DomainKey,
> they accepted my mail right off;
> 
> Eric, can you point me in the right direction on getting this fixed, I
will
> be glad to help if I can. As far as I can tell, this is something that we
do
> need working.
> 
> Kevin
> 

I'll try. FWIW, this is TTBOMK, and is not necessarily 100% conclusive. It's
what I recall from working with it some time ago.

DK signing (outbound) in the toaster works properly AFAIK.

The bit you discovered about special characters is interesting. It *might*
only apply to djbdns though. My public domain key has a slash (/) in it, and
I have no problems with yahoo. However, I route mail to yahoo through
dyndns's mailhop outbound service, so that might have some effect.

DK checking (incoming) in the toaster is hit and miss. Sometimes it appears
 to work ok, but other times it reports bad keys inappropriately (when the
key is valid). I've seen this behavior with some messages from the QMT list.
It also does not honor the testing (t=y) parameter at all.

FWIW, I do use DK signatures, but that is all. I do not use DK verification,
since it isn't reliable.

In addition to all that, I'm not aware of any problem with SpamAssassin's DK
(or DKIM for that matter) rules. You simply need to have the modules
installed for the related scoring to take place.

HTH
-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] TLS, smtproutes and credentials

2008-04-18 Thread Eric Shubert
Dan Herbon wrote:
> On Feb 14 I sent out an email in regards to TLS Secure with Qmail. I
> have a followup to that question.
> 
> I’ll be using the smtproutes file to pass off all my companies email to
> an encrypted email service.
> 
> Only step required is for me to add the :remote_server_address
> 
> Now my problem. The service requires that I “Enable TLS on your mail
> server for all outgoing mail.” I have username and password credentials
> provided by this service. The server won’t accept my mail unless the
> credentials are included. How would I configure TLS to provide the
> credentials?
> 

Looks like Steve's info is right on target. I have a question for your
though, Dan. I seem to be missing something here.

What does this encrypted mail service do for you that the toaster doesn't
already provide? My understanding is that the toaster's smtp always uses TLS
if it's available. If the receiving server is TLS capable, the email is sent
encrypted. If the receiving server isn't TLS capable, how's the service
going to provide encryption?

I don't see what the encrypted service is providing that the toaster doesn't
already do. Can you fill me in?

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] how to add empf on qmailtoaster

2008-04-18 Thread Natalio Gatti
There is an article in the wiki:
http://wiki.qmailtoaster.com/index.php/Installing_EMPF_patch

Salutti,
Natalio.

On Thu, Apr 17, 2008 at 8:11 AM, Rafael Andrade <[EMAIL PROTECTED]>
wrote:

>  i cant add empf rules in qmailtoaster, i read all site of empf, but i`m
> stuck and i dont know how to add.
>
>
> somebody can help me?
> can send me one step by step or something.
>
>
> Thanks so much 4 all..
>
> --
> Abra sua conta no Yahoo! 
> Mail,
> o único sem limite de espaço para armazenamento!
>


Re: [qmailtoaster] TLS, smtproutes and credentials

2008-04-18 Thread Steve Huff


On Apr 18, 2008, at 10:41 AM, Dan Herbon wrote:
And just to make sure I am reading correctly. If the domains on my  
server I

want to forward are bob.com & emaildomain.com and the destination
smtp.encryptedmailserviceimusing.com then I would do:

Bob.com:smtp.encryptedmailserviceimusing.com username password
emaildomain.com:smtp.encryptedmailserviceimusing.com username password

I'd put each domain on a separate line correct?

And if I want to forward all mail I would just do

:smtp.encryptedmailserviceimusing.com username password



looks good.  iirc smtproutes are not case-sensitive; can anyone else  
confirm that?


-steve

--
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v





-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] TLS, smtproutes and credentials

2008-04-18 Thread Dan Herbon
And just to make sure I am reading correctly. If the domains on my server I
want to forward are bob.com & emaildomain.com and the destination
smtp.encryptedmailserviceimusing.com then I would do:

Bob.com:smtp.encryptedmailserviceimusing.com username password
emaildomain.com:smtp.encryptedmailserviceimusing.com username password

I'd put each domain on a separate line correct?

And if I want to forward all mail I would just do

:smtp.encryptedmailserviceimusing.com username password

Correct?

Thanks!

-Original Message-
From: Dan Herbon [mailto:[EMAIL PROTECTED] 
Sent: Friday, April 18, 2008 10:38 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] TLS, smtproutes and credentials

Wow! Sometimes I can just completely miss something!

Thanks!

-Original Message-
From: Steve Huff [mailto:[EMAIL PROTECTED] 
Sent: Friday, April 18, 2008 10:31 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] TLS, smtproutes and credentials


On Apr 18, 2008, at 10:31 AM, Dan Herbon wrote:
> Now my problem. The service requires that I "Enable TLS on your  
> mail server for all outgoing mail." I have username and password  
> credentials provided by this service. The server won't accept my  
> mail unless the credentials are included. How would I configure TLS  
> to provide the credentials?

documented here:

http://wiki.qmailtoaster.com/index.php/Smtproutes

:remote_server_address username password

:)

-steve

--
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v




-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: [qmailtoaster] TLS, smtproutes and credentials

2008-04-18 Thread Dan Herbon
Wow! Sometimes I can just completely miss something!

Thanks!

-Original Message-
From: Steve Huff [mailto:[EMAIL PROTECTED] 
Sent: Friday, April 18, 2008 10:31 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] TLS, smtproutes and credentials


On Apr 18, 2008, at 10:31 AM, Dan Herbon wrote:
> Now my problem. The service requires that I "Enable TLS on your  
> mail server for all outgoing mail." I have username and password  
> credentials provided by this service. The server won't accept my  
> mail unless the credentials are included. How would I configure TLS  
> to provide the credentials?

documented here:

http://wiki.qmailtoaster.com/index.php/Smtproutes

:remote_server_address username password

:)

-steve

--
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v




-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] TLS, smtproutes and credentials

2008-04-18 Thread Steve Huff


On Apr 18, 2008, at 10:31 AM, Dan Herbon wrote:
Now my problem. The service requires that I “Enable TLS on your  
mail server for all outgoing mail.” I have username and password  
credentials provided by this service. The server won’t accept my  
mail unless the credentials are included. How would I configure TLS  
to provide the credentials?


documented here:

http://wiki.qmailtoaster.com/index.php/Smtproutes

:remote_server_address username password

:)

-steve

--
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v





-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] TLS, smtproutes and credentials

2008-04-18 Thread Dan Herbon
On Feb 14 I sent out an email in regards to TLS Secure with Qmail. I have a
followup to that question.

 

I'll be using the smtproutes file to pass off all my companies email to an
encrypted email service.

 

Only step required is for me to add the :remote_server_address

 

Now my problem. The service requires that I "Enable TLS on your mail server
for all outgoing mail." I have username and password credentials provided by
this service. The server won't accept my mail unless the credentials are
included. How would I configure TLS to provide the credentials?

 

 



Re: [qmailtoaster] yahoo

2008-04-18 Thread Eric Shubert
PakOgah wrote:
> I have done this in the past
> and Yahoo acknowledge me and whitelist my server yet they still asking to
> activate domainkeys for my domain.
> 
> up until today I notice on send logs I got the new Yahoo's deferal notice.
> 
> As Eric said, For DK signing (outgoing) there is no problem, but for DK
> checking (incoming) may hit or miss. Now CMIIW, if I disable domainkeys in
> http://wiki.qmailtoaster.com/index.php/Disabling_Domain_Keys
> domainkeys wont do both (signing and checking) right ?

That is correct (TTBOMK).

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] yahoo

2008-04-18 Thread PakOgah
I have done this in the past
and Yahoo acknowledge me and whitelist my server yet they still asking to
activate domainkeys for my domain.

up until today I notice on send logs I got the new Yahoo's deferal notice.

As Eric said, For DK signing (outgoing) there is no problem, but for DK
checking (incoming) may hit or miss. Now CMIIW, if I disable domainkeys in
http://wiki.qmailtoaster.com/index.php/Disabling_Domain_Keys

domainkeys wont do both (signing and checking) right ?


> Oh my favorite...
>
> The message means that:
> (1) some of the yahoo users that you are sending email to have flagged
> those
> emails as spam
> (2) You are sending more than yahoo's arbitrary limit
>
> or both.
>
> If oyu think you are doing nothing wrong, then fill out this form for
> yahoo:
> http://help.yahoo.com/l/us/yahoo/mail/postmaster/defer.html
>
> That will hopefully white-list you on their servers.
>
> W
>
> On Thu, Apr 17, 2008 at 7:04 AM, Jake Vickers <[EMAIL PROTECTED]> wrote:
>
>> PakOgah wrote:
>>
>> > yap this is new... and I got it also on my server
>> > it seems like the yahoo deferral messages few months ago.
>> > but I haven't get complain from users, so I'll monitoring this error
>> in
>> > next few weeks
>> >
>> > Bogdan,
>> > perhaps you need to SPF records on your domain zone. see openspf.org
>> >
>> > ps: I have setup mine :)
>> >
>>
>> You may also want to go through their process and see what they're
>> exactly
>> looking for. They may be deferring you due to the SMTP greeting or
>> some-such.
>>
>>
>> -
>>QmailToaster hosted by: VR Hosted 
>> -
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>



-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]