Re: [qmailtoaster] SOGo - Installation notes

2011-05-03 Thread Peter Peltonen
Hi,

On Tue, May 3, 2011 at 5:50 AM, Pak Ogah pako...@pala.bo-tak.info wrote:
 On 04/14/11 10:57, Pak Ogah wrote:

 On 04/13/11 21:00, Peter Peltonen wrote:

 On Tue, Apr 12, 2011 at 5:24 PM, Bharath Chari
 qmailtoas...@arachnis.com  wrote:

 Hi guys,

 Warning : Badly formatted notes - will make it more readable in a later
 version, from a clean install. Here goes:

 Thanks Bharath!

 I will give it a try next week. I'll report here my experiences.

 Cheers,
 Peter

 Okay will wait patiently,
 hoping that you will have success clean SOGo installation over QMT

 Hi there Peter,
 any progress update about SOGo installation notes on QMT?

Unfortunately no. CentOS 5.6 and 4.9 upgrades have kept me busy. And
now I'll be traveling for the four weeks, so not much will happen
before June If someone else has time to try them out before that,
please keep us posted?

Best,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: RE; spamdyke ?

2011-05-03 Thread Eric Shubert

It could be that scanning is taking longer than your timeout setting.
What value do you have for idle-timeout-secs in spamdyke.conf?
FWIW, I have 180 presently.

It could also be that scanning is taking longer than the sending server 
is willing to wait (sender times out first, then spamdyke follows suit).


Is your clamav up to date? There were some earlier versions that would 
go into a loop, causing loads to be very high, and general slowness.


--
-Eric 'shubes'

On 05/02/2011 02:03 PM, Joel Eddy wrote:

Eric,

I’m on spamdyke 4.2.0+TLS+CONFIGTEST+DEBUG (C)2011

If she sends me a plain text message I get them. I wonder if it’s a
clamd or spamassassin issue.

They usually send pdf attachments to each other.

Make any sense?



*From:*Eric Shubert [mailto:e...@shubes.net]
*Sent:* Monday, May 02, 2011 3:35 PM
*To:* qmailtoaster-list@qmailtoaster.com
*Subject:* [qmailtoaster] Re: RE; spamdyke ?

On 05/02/2011 12:51 PM, Joel Eddy wrote:

 I'm seeing this in my smtp logs on this account. I've tried to find the
 answer but so far no luck. Has anyone else had this problem?

 2011-05-02 13:52:06.345475500.s:@40004dbef6ef166a7104 spamdyke[31592]:
 TIMEOUT from: lcgrap...@iowatelecom.net to: kathleenfis...@iowaconnect.com
 origin_ip: 162.39.147.111 origin_rdns: pacmmta52.windstream.net auth:
 (unknown) encryption: (none) reason: TIMEOUT




-

TIMEOUT isn't usually indicative of a non-spam problem.

Which spamdyke version are you running? There was a problem that was
fixed (in 4.2.0 IIRC) that would leave a session hanging after another
rejection of some sort. No real harm except it tied up resources a
little bit.

Update to the current version if you haven't already. Simply re-run
qtp-install-spamdyke and that should do it for you.

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



No virus found in this message.
Checked by AVG - www.avg.com http://www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re; Timout issue

2011-05-03 Thread Joel Eddy
Eric on this issue of timeout from spamdyke that I see in the smtp logs
could it be something in the caching dns causing the problem?

This is what I'm finding out so far. If I send the person an email and they
reply back I'll get the message. If the person sends an email by typing in
my address I get the message. And if they send an attachment by typing in
my address I get the message. But now this morning the person sent me a
message as a test without my sending any contact email.
And now this morning in the smtp log I see:

2011-05-03 09:00:21.177476500 spamdyke[25373]: TIMEOUT from:
lcgrap...@iowatelecom.net to: rje...@iowaconnect.com origin_ip:
162.39.147.111 origin_rdns: pacm
mta52.windstream.net auth: (unknown) encryption: (none) reason: TIMEOUT

I am at a lose as to what to look at or for.
Will increasing the log level to verbose, debug or excessive be the next
level to try for an answer to this?


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: whitelist ip in trusted network

2011-05-03 Thread Eric Shubert

On 05/02/2011 07:24 PM, Rajesh M wrote:

On 04/07/2011 11:38 PM, Rajesh M wrote:

On 04/07/2011 05:50 PM, Rajesh M wrote:

hi

i wish to whitelist a client's server static ip in the spamassasin
trusted
network

i am entering the line like this

trusted_networks xxx.yyy


if i do this then the email from this server ip should be given a
negative
score

but it does not seem to work

reading the wiki it seem that i need to turn the -L switch


Which wiki page(s) led you to that conclusion?
Which program (spamd?) is the -L switch for?


since this was not turned on by default in my qmail toaster
installation
i
would like some information as to any problems that i may face if i
turn
on the -L switch

   

thanks very much

rajesh

-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and
installations.
 If you need professional help with your setup, contact them
today!



--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them
today!
-
   Please visit qmailtoaster.com for the latest news, updates, and
packages.

To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




hi eric

http://wiki.apache.org/spamassassin/TrustPath

the section is:
How can I optimize the trusted_networks setting?

rajesh

-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them
today!


I think you misunderstand what it's saying about the -L switch. It's
saying that configuring the trust path information is worth configuring,
whether or not you use the -L switch (QMT does not).

I think you need to describe your *entire* trusted network in the
trusted_networks parameter. The wiki says (above):
Generally you want trusted_networks set to contain all the mailservers
you control that add Received: headers, and nothing else.

HTH.
--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and
installations.
   If you need professional help with your setup, contact them today!
-
  Please visit qmailtoaster.com for the latest news, updates, and
packages.

   To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





eric

thanks for the information but i am still a bit confused on this.

basically i need to whitelist a few external servers IPS who send me email
are totally trusted.

i dont want to put the sender domain in the simscan file since anybody can
forge a domain name.

i tried to put the ips in trusted_network (spamassassin local.cf) but it
does not work ie a negative score of 50 is not given to email

how do i get this to work ?

rajesh

-


I don't know SA that well off hand. Is there perhaps a device in between 
your trusted server and QMT, such that SA is not seeing/recognizing the 
address of the trusted server?


If the servers who are sending mail are all that trusted, is it possible 
to get them to authenticate? If they can authenticate and use port 587, 
the messages from them would bypass SA entirely.


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Eric Shubert

On 05/03/2011 07:26 AM, Joel Eddy wrote:

Eric on this issue of timeout from spamdyke that I see in the smtp logs
could it be something in the caching dns causing the problem?


Anything's possible I suppose. I don't see a connection here to dns though.


This is what I'm finding out so far. If I send the person an email and they
reply back I'll get the message. If the person sends an email by typing in
my address I get the message. And if they send an attachment by typing in
my address I get the message. But now this morning the person sent me a
message as a test without my sending any contact email.
And now this morning in the smtp log I see:

2011-05-03 09:00:21.177476500 spamdyke[25373]: TIMEOUT from:
lcgrap...@iowatelecom.net to: rje...@iowaconnect.com origin_ip:
162.39.147.111 origin_rdns: pacm
mta52.windstream.net auth: (unknown) encryption: (none) reason: TIMEOUT

I am at a lose as to what to look at or for.
Will increasing the log level to verbose, debug or excessive be the next
level to try for an answer to this?


-


If it's repeatable (which it appears to be), I'd use spamdyke's detail 
logging facility to capture one:

full-log-dir=/var/log/spamdyke
(I think you'll need to create the directory before turning the option on)

Then we can see what's really going on. If there's a bug, the detail log 
will be excellent to have for Sam.


It would also be useful to see all of the related smtp log messages for 
the given email.

--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




RE: [qmailtoaster] Re: RE; spamdyke ?

2011-05-03 Thread Joel Eddy
Idle-timeout-secs is 120 right now. I'll jack it up to 180.

 

[root@mx1 smtp]# clamd -V

ClamAV 0.97/13039/Tue May  3 07:30:41 2011

 

top - 09:44:31 up 4 days, 22:07,  1 user,  load average: 0.24, 0.28, 0.24

Tasks: 227 total,   1 running, 226 sleeping,   0 stopped,   0 zombie

Cpu(s):  0.5%us,  0.7%sy,  0.0%ni, 98.8%id,  0.0%wa,  0.0%hi,  0.0%si,
0.0%st

Mem:   1025544k total,  1002148k used,23396k free,46008k buffers

Swap:  2064376k total,  100k used,  2064276k free,   321956k cached

 

qtp-whatami v0.3.7 Tue May  3 09:45:20 CDT 2011

DISTRO=CentOS

OSVER=5.6

QTARCH=x86_64

QTKERN=2.6.18-238.9.1.el5

BUILD_DIST=cnt5064

BUILD_DIR=/usr/src/redhat

This machine's OS is supported and has been tested

 

Anything stand out that I should look at?

  _  

From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 9:26 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: RE; spamdyke ?

 

It could be that scanning is taking longer than your timeout setting.
What value do you have for idle-timeout-secs in spamdyke.conf?
FWIW, I have 180 presently.

It could also be that scanning is taking longer than the sending server
is willing to wait (sender times out first, then spamdyke follows suit).

Is your clamav up to date? There were some earlier versions that would
go into a loop, causing loads to be very high, and general slowness.

--
-Eric 'shubes'

On 05/02/2011 02:03 PM, Joel Eddy wrote:
 Eric,

 I'm on spamdyke 4.2.0+TLS+CONFIGTEST+DEBUG (C)2011

 If she sends me a plain text message I get them. I wonder if it's a
 clamd or spamassassin issue.

 They usually send pdf attachments to each other.

 Make any sense?

 

 *From:*Eric Shubert [mailto:e...@shubes.net]
 *Sent:* Monday, May 02, 2011 3:35 PM
 *To:* qmailtoaster-list@qmailtoaster.com
 *Subject:* [qmailtoaster] Re: RE; spamdyke ?

 On 05/02/2011 12:51 PM, Joel Eddy wrote:
  I'm seeing this in my smtp logs on this account. I've tried to find the
  answer but so far no luck. Has anyone else had this problem?

  2011-05-02 13:52:06.345475500.s:@40004dbef6ef166a7104
spamdyke[31592]:
  TIMEOUT from: lcgrap...@iowatelecom.net to:
kathleenfis...@iowaconnect.com
  origin_ip: 162.39.147.111 origin_rdns: pacmmta52.windstream.net auth:
  (unknown) encryption: (none) reason: TIMEOUT





-

 TIMEOUT isn't usually indicative of a non-spam problem.

 Which spamdyke version are you running? There was a problem that was
 fixed (in 4.2.0 IIRC) that would leave a session hanging after another
 rejection of some sort. No real harm except it tied up resources a
 little bit.

 Update to the current version if you haven't already. Simply re-run
 qtp-install-spamdyke and that should do it for you.

 --
 -Eric 'shubes'




-
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!


-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 

 No virus found in this message.
 Checked by AVG - www.avg.com http://www.avg.com
 Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11





-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11



[qmailtoaster] Re: RE; spamdyke ?

2011-05-03 Thread Eric Shubert

This looks hunky dory to me. :)

Sounding to me like something's choking on content somehow based on what 
you said previously.


I'd like to see detail spamdyke log, and *all* related smtp log messages.

--
-Eric 'shubes'

On 05/03/2011 07:46 AM, Joel Eddy wrote:

Idle-timeout-secs is 120 right now. I’ll jack it up to 180.

[root@mx1 smtp]# clamd -V

ClamAV 0.97/13039/Tue May 3 07:30:41 2011

top - 09:44:31 up 4 days, 22:07, 1 user, load average: 0.24, 0.28, 0.24

Tasks: 227 total, 1 running, 226 sleeping, 0 stopped, 0 zombie

Cpu(s): 0.5%us, 0.7%sy, 0.0%ni, 98.8%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st

Mem: 1025544k total, 1002148k used, 23396k free, 46008k buffers

Swap: 2064376k total, 100k used, 2064276k free, 321956k cached

qtp-whatami v0.3.7 Tue May 3 09:45:20 CDT 2011

DISTRO=CentOS

OSVER=5.6

QTARCH=x86_64

QTKERN=2.6.18-238.9.1.el5

BUILD_DIST=cnt5064

BUILD_DIR=/usr/src/redhat

This machine's OS is supported and has been tested

Anything stand out that I should look at?



*From:*Eric Shubert [mailto:e...@shubes.net]
*Sent:* Tuesday, May 03, 2011 9:26 AM
*To:* qmailtoaster-list@qmailtoaster.com
*Subject:* [qmailtoaster] Re: RE; spamdyke ?

It could be that scanning is taking longer than your timeout setting.
What value do you have for idle-timeout-secs in spamdyke.conf?
FWIW, I have 180 presently.

It could also be that scanning is taking longer than the sending server
is willing to wait (sender times out first, then spamdyke follows suit).

Is your clamav up to date? There were some earlier versions that would
go into a loop, causing loads to be very high, and general slowness.

--
-Eric 'shubes'

On 05/02/2011 02:03 PM, Joel Eddy wrote:

 Eric,

 I’m on spamdyke 4.2.0+TLS+CONFIGTEST+DEBUG (C)2011

 If she sends me a plain text message I get them. I wonder if it’s a
 clamd or spamassassin issue.

 They usually send pdf attachments to each other.

 Make any sense?

 

 *From:*Eric Shubert [mailto:e...@shubes.net]
 *Sent:* Monday, May 02, 2011 3:35 PM
 *To:* qmailtoaster-list@qmailtoaster.com
 *Subject:* [qmailtoaster] Re: RE; spamdyke ?

 On 05/02/2011 12:51 PM, Joel Eddy wrote:
 I'm seeing this in my smtp logs on this account. I've tried to find the
 answer but so far no luck. Has anyone else had this problem?

 2011-05-02 13:52:06.345475500.s:@40004dbef6ef166a7104

spamdyke[31592]:

 TIMEOUT from: lcgrap...@iowatelecom.net to:

kathleenfis...@iowaconnect.com

 origin_ip: 162.39.147.111 origin_rdns: pacmmta52.windstream.net auth:
 (unknown) encryption: (none) reason: TIMEOUT





-


 TIMEOUT isn't usually indicative of a non-spam problem.

 Which spamdyke version are you running? There was a problem that was
 fixed (in 4.2.0 IIRC) that would leave a session hanging after another
 rejection of some sort. No real harm except it tied up resources a
 little bit.

 Update to the current version if you haven't already. Simply re-run
 qtp-install-spamdyke and that should do it for you.

 --
 -Eric 'shubes'




-

 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!


-

 Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 

 No virus found in this message.
 Checked by AVG - www.avg.com http://www.avg.com
 Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11





-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



No virus found in this message.
Checked by AVG - www.avg.com http://www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11





-
Qmailtoaster is sponsored by 

RE: [qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Joel Eddy
I created the dir but what should the user group be set to.

Spamdyke is being denied access at this point.

 

  _  

From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 9:38 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Re; Timout issue

 

On 05/03/2011 07:26 AM, Joel Eddy wrote:
 Eric on this issue of timeout from spamdyke that I see in the smtp logs
 could it be something in the caching dns causing the problem?

Anything's possible I suppose. I don't see a connection here to dns though.

 This is what I'm finding out so far. If I send the person an email and
they
 reply back I'll get the message. If the person sends an email by typing in
 my address I get the message. And if they send an attachment by typing in
 my address I get the message. But now this morning the person sent me a
 message as a test without my sending any contact email.
 And now this morning in the smtp log I see:

 2011-05-03 09:00:21.177476500 spamdyke[25373]: TIMEOUT from:
 lcgrap...@iowatelecom.net to: rje...@iowaconnect.com origin_ip:
 162.39.147.111 origin_rdns: pacm
 mta52.windstream.net auth: (unknown) encryption: (none) reason: TIMEOUT

 I am at a lose as to what to look at or for.
 Will increasing the log level to verbose, debug or excessive be the next
 level to try for an answer to this?




-

If it's repeatable (which it appears to be), I'd use spamdyke's detail
logging facility to capture one:
full-log-dir=/var/log/spamdyke
(I think you'll need to create the directory before turning the option on)

Then we can see what's really going on. If there's a bug, the detail log
will be excellent to have for Sam.

It would also be useful to see all of the related smtp log messages for
the given email.
--
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11



[qmailtoaster] SPAM Designation Option

2011-05-03 Thread Dan McAllister

Greetings QMail list...

I am in the unenviable position of admitting that some of my QMail is FM 
to me (FM is f***ing magic or, in plainer terms I know it works, 
I just don't know how) -- and that has me in a bit of a quandary


I host web  e-mail for some of my clients and I have a NEW customer, 
who has asked me to turn off the SpamAssassin ***SPAM*** insert in the 
subject line... in fact, he wants to turn off ALL SPAM blocking for his 
domain.


So, how / where do I configure SpamAssassin (and SpamDyke, for that 
matter) to NOT process messages for his domain?


Thanks in advance,

Dan McAllister

--

IT4SOHO, LLC
PO Box 507
St. Petersburg, FL 33731-0507

CALL TOLL FREE:
  877-IT4SOHO

877-484-7646 Phone
727-490-4394 Fax

We make IT work for small business!



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] wiki.qmailtoaster.com/index.../CentOS_5_QmailToaster_Install is off line.

2011-05-03 Thread Keith Smith
-- 
Keith Smith Internet Marketing LLC
(480) 272-9268
PHP Programming Services
Search Engine Optimization


[qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Eric Shubert

On 05/03/2011 09:07 AM, Dan McAllister wrote:

Greetings QMail list...

I am in the unenviable position of admitting that some of my QMail is FM
to me (FM is f***ing magic or, in plainer terms I know it works,
I just don't know how) -- and that has me in a bit of a quandary

I host web  e-mail for some of my clients and I have a NEW customer,
who has asked me to turn off the SpamAssassin ***SPAM*** insert in the
subject line... in fact, he wants to turn off ALL SPAM blocking for his
domain.

So, how / where do I configure SpamAssassin (and SpamDyke, for that
matter) to NOT process messages for his domain?

Thanks in advance,

Dan McAllister



For SA, add a record to the beginning of /var/qmail/control/simcontrol:
customdomain.com:clam=yes,spam=no
then run service qmail cdb.

Per-domain control in spamdyke is a little tricky. See spamdyke docs for 
that. Spamdyke false positives are practically nonexistent though, so 
you might want to just leave spamdyke active and not tell him about it. 
Then again, if he insists on receiving spam, I'd charge him extra for 
the load it'll cause on your server as well as the trouble of 
configuring spamdyke. ;)


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




RE: [qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Michael J. Colvin
I agree with Eric on the Spamdyke portion.  I was thinking the same thing,
but didn't have an answer for the SpamAssassin portion, so I didn't reply!
:-)

I run SpamDyke more for the benefit of my server.  The benefit for the
client is secondary.  If you disable it, your certainly going to increase
the load on your server, requiring, at some point, you to either upgrade
your server, or add another to handle the load.  

I'd second Eric's suggestion to simply not tell your client about SpamDyke
and leave it in place, or charge the client more to cover the extra
spam/mail your server is sure to get.

Mike

-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 9:32 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: SPAM Designation Option

On 05/03/2011 09:07 AM, Dan McAllister wrote:
 Greetings QMail list...

 I am in the unenviable position of admitting that some of my QMail is FM
 to me (FM is f***ing magic or, in plainer terms I know it works,
 I just don't know how) -- and that has me in a bit of a quandary

 I host web  e-mail for some of my clients and I have a NEW customer,
 who has asked me to turn off the SpamAssassin ***SPAM*** insert in the
 subject line... in fact, he wants to turn off ALL SPAM blocking for his
 domain.

 So, how / where do I configure SpamAssassin (and SpamDyke, for that
 matter) to NOT process messages for his domain?

 Thanks in advance,

 Dan McAllister


For SA, add a record to the beginning of /var/qmail/control/simcontrol:
customdomain.com:clam=yes,spam=no
then run service qmail cdb.

Per-domain control in spamdyke is a little tricky. See spamdyke docs for 
that. Spamdyke false positives are practically nonexistent though, so 
you might want to just leave spamdyke active and not tell him about it. 
Then again, if he insists on receiving spam, I'd charge him extra for 
the load it'll cause on your server as well as the trouble of 
configuring spamdyke. ;)

-- 
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] wiki.qmailtoaster.com/index.../CentOS_5_QmailToaster_Install is off line.

2011-05-03 Thread Ed Morrison

On 5/3/2011 9:20 AM, Keith Smith wrote:




--
Keith Smith Internet Marketing LLC
(480) 272-9268
PHP Programming Services
Search Engine Optimization



QmailToaster Wiki appears to be down.

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




RE: [qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Joel Eddy
I stink I fingered it out. Firewall.

 

  _  

From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 10:25 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Re; Timout issue

 

vpopmail:vchkpw
--
-Eric 'shubes'

On 05/03/2011 08:16 AM, Joel Eddy wrote:
 I created the dir but what should the user group be set to.

 Spamdyke is being denied access at this point.

 




-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11



[qmailtoaster] Re; max recipients

2011-05-03 Thread Joel Eddy
Besides the max-recipients=50 in spamdyke.conf is there somewhere else
that controls the max-recipients also. Qmail, Spamassassin or ?

I've got users with Norton AV that keep getting an error that they're
sending to too many even with only 27 recipients.

GR I HATE EMAIL ;-)

Joel


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Eric Shubert

Care to elaborate?
(Inquiring minds want to know) ;)

On 05/03/2011 10:24 AM, Joel Eddy wrote:

I stink I fingered it out. Firewall.



*From:*Eric Shubert [mailto:e...@shubes.net]
*Sent:* Tuesday, May 03, 2011 10:25 AM
*To:* qmailtoaster-list@qmailtoaster.com
*Subject:* [qmailtoaster] Re: Re; Timout issue

vpopmail:vchkpw
--
-Eric 'shubes'

On 05/03/2011 08:16 AM, Joel Eddy wrote:

 I created the dir but what should the user group be set to.

 Spamdyke is being denied access at this point.

 




-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



No virus found in this message.
Checked by AVG - www.avg.com http://www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11




--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Peter Peltonen
Hi,

On Tue, May 3, 2011 at 7:31 PM, Eric Shubert e...@shubes.net wrote:
 that. Spamdyke false positives are practically nonexistent though, so you
 might want to just leave spamdyke active and not tell him about it. Then
 again, if he insists on receiving spam, I'd charge him extra for the load
 it'll cause on your server as well as the trouble of configuring spamdyke.
 ;)

Even if Spamdyke is correct, it does not mean that the end behaviour
is what the customer expects.

I have ran into issues where customers haven't received email they
were expecting because of Spamdyke rejecting a message because of
missing reserve dns. And it does not help telling the customer that
the sending server is not properly configured, if they can receive the
same email with their Gmail or some other account...

I have been playing around with an idea that I should create a page
for each customer where they could check the sending addresses for
denied messages. So if there is a real message denied I could then
offer an option to white list that mail server or sending address, so
that the customer could try contacting the sender again.

Best,
Peter

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re; max recipients

2011-05-03 Thread Tonix (Antonio Nati)

chkuser can have such options.

Regards,

Tonino

Il 03/05/2011 19:36, Joel Eddy ha scritto:

Besides the max-recipients=50 in spamdyke.conf is there somewhere else
that controls the max-recipients also. Qmail, Spamassassin or ?

I've got users with Norton AV that keep getting an error that they're
sending to too many even with only 27 recipients.

GR I HATE EMAIL ;-)

Joel


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
-
  Please visit qmailtoaster.com for the latest news, updates, and packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com






--

Inter@zioniInterazioni di Antonio Nati
   http://www.interazioni.it  to...@interazioni.it



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




RE: [qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Joel Eddy
I've got a bridging firewall that is ahead of all my servers and the mail
server. I've got that set so tight that it must have been blocking
something with the mail processing. What I've got to go figure out yet. But
for now I've got it straight to the pub side of the switch.

And the message I was waiting for showed up as soon as I bypassed the
bridge. The timeouts have dropped to just a few now
and then too. The bridge is screening for phrases in the packets so it may
of even been one of those that was fouling up message
delivery. I'll have to go back and start with a basic iptables and see what
happens.

 

Self inflicted wound. ;-(

 

 

  _  

From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 12:37 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Re; Timout issue

 

Care to elaborate?
(Inquiring minds want to know) ;)

On 05/03/2011 10:24 AM, Joel Eddy wrote:
 I stink I fingered it out. Firewall.

 

 *From:*Eric Shubert [mailto:e...@shubes.net]
 *Sent:* Tuesday, May 03, 2011 10:25 AM
 *To:* qmailtoaster-list@qmailtoaster.com
 *Subject:* [qmailtoaster] Re: Re; Timout issue

 vpopmail:vchkpw
 --
 -Eric 'shubes'

 On 05/03/2011 08:16 AM, Joel Eddy wrote:
  I created the dir but what should the user group be set to.

  Spamdyke is being denied access at this point.

  





-
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!


-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 

 No virus found in this message.
 Checked by AVG - www.avg.com http://www.avg.com
 Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11



--
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11



RE: [qmailtoaster] Re; max recipients

2011-05-03 Thread Joel Eddy
tcp.smtp has CHKUSER_RCPTLIMIT=50 so it and spamdyke.conf match on that
point.

 

I'll see what I can find about chkuser.

 

Thanks.

 

  _  

From: Tonix (Antonio Nati) [mailto:to...@interazioni.it] 
Sent: Tuesday, May 03, 2011 12:40 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re; max recipients

 

chkuser can have such options.

Regards,

Tonino

Il 03/05/2011 19:36, Joel Eddy ha scritto:
 Besides the max-recipients=50 in spamdyke.conf is there somewhere else
 that controls the max-recipients also. Qmail, Spamassassin or ?

 I've got users with Norton AV that keep getting an error that they're
 sending to too many even with only 27 recipients.

 GR I HATE EMAIL ;-)

 Joel




-
 Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them today!


-
   Please visit qmailtoaster.com for the latest news, updates, and
packages.

To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





--

 Inter@zioniInterazioni di Antonio Nati
http://www.interazioni.it  to...@interazioni.it




-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11



Re: [qmailtoaster] Re: RE; spamdyke ?

2011-05-03 Thread Dan McAllister
NOTE: I have seen this behavior when SSL connections are made and there 
is not enough RAM allocated for the SSL libraries. The result is that 
the SMTP (actually the qmail-smtp service) hangs (bad memory alloc), and 
so never returns


On 5/3/2011 11:14 AM, Eric Shubert wrote:

This looks hunky dory to me. :)

Sounding to me like something's choking on content somehow based on 
what you said previously.


I'd like to see detail spamdyke log, and *all* related smtp log messages.



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




RE: [qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Joel Eddy
I hear ya. I just ran into this yesterday as well.

What I did to correct the issue was to add the email address to the
/etc/spamdyke/whitelist_recipients file.

The recipients mail server was an exchange server(yuck bad word) but it used
postini to screen their spam.

The rDNS resolved back to postini and not what they had in their dns
records.

 

I finally just gave up trying to explain it and found I could add the
address to the spamdyke whitelist. Solved

It for me. And that way you not whitelisting and entire domain that could be
a spammer.

 

Hope that helps.

 

 

  _  

From: Peter Peltonen [mailto:peter.pelto...@gmail.com] 
Sent: Tuesday, May 03, 2011 12:38 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: SPAM Designation Option

 

Hi,

On Tue, May 3, 2011 at 7:31 PM, Eric Shubert e...@shubes.net wrote:
 that. Spamdyke false positives are practically nonexistent though, so you
 might want to just leave spamdyke active and not tell him about it. Then
 again, if he insists on receiving spam, I'd charge him extra for the load
 it'll cause on your server as well as the trouble of configuring spamdyke.
 ;)

Even if Spamdyke is correct, it does not mean that the end behaviour
is what the customer expects.

I have ran into issues where customers haven't received email they
were expecting because of Spamdyke rejecting a message because of
missing reserve dns. And it does not help telling the customer that
the sending server is not properly configured, if they can receive the
same email with their Gmail or some other account...

I have been playing around with an idea that I should create a page
for each customer where they could check the sending addresses for
denied messages. So if there is a real message denied I could then
offer an option to white list that mail server or sending address, so
that the customer could try contacting the sender again.

Best,
Peter


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11



Re: [qmailtoaster] Re; max recipients

2011-05-03 Thread Tonix (Antonio Nati)
There is another variable for max wrong recipients, which is the real 
anti-intrusion action.
See 
http://www.interazioni.it/opensource/chkuser/documentation/chkuser_settings.html.


Tonino

Il 03/05/2011 19:50, Joel Eddy ha scritto:


tcp.smtp has CHKUSER_RCPTLIMIT=50 so it and spamdyke.conf match on 
that point.


I'll see what I can find about chkuser.

Thanks.



*From:*Tonix (Antonio Nati) [mailto:to...@interazioni.it]
*Sent:* Tuesday, May 03, 2011 12:40 PM
*To:* qmailtoaster-list@qmailtoaster.com
*Subject:* Re: [qmailtoaster] Re; max recipients

chkuser can have such options.

Regards,

Tonino

Il 03/05/2011 19:36, Joel Eddy ha scritto:
 Besides the max-recipients=50 in spamdyke.conf is there somewhere else
 that controls the max-recipients also. Qmail, Spamassassin or ?

 I've got users with Norton AV that keep getting an error that they're
 sending to too many even with only 27 recipients.

 GR I HATE EMAIL ;-)

 Joel


 
-
 Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and 
installations.

If you need professional help with your setup, contact them today!
 
-
   Please visit qmailtoaster.com for the latest news, updates, and 
packages.


To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






--

 Inter@zioniInterazioni di Antonio Nati
http://www.interazioni.it  to...@interazioni.it



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and 
installations.

  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and 
packages.


  To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com




No virus found in this message.
Checked by AVG - www.avg.com http://www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11




--

Inter@zioniInterazioni di Antonio Nati
   http://www.interazioni.it  to...@interazioni.it




RE: [qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Michael J. Colvin
This is true, however a LARGE amount of spam is sent from IP's with no RDNS.
By not blocking those e-mails, you're certainly forcing your mail server to
deal with a MUCH larger amount of mail, most of which would be spam.  I
guess if you don't have a resource issue, and don't mind wasting resources
on handling spam, that may or may not be rejected by SpamAssassin down the
road, then that's fine.  

I agree that, if the customer wants the spam, I'm more than happy to let
them have it.  However, I won't do it at the detriment of other users.

If you've never had a Spam Attack, where your server is constantly
bombarded by spammers, then when you do, you'll wish you had SpamDyke.  :-)
When your server (Or the OP's server) is being hammered by a spammer, and
comes here to complain about how his server is overloaded and legit e-mail
is timing out because all of his SMTP ports are being bogarted, the first
suggestion is going to be Are you running SpamDyke.

And, yes... When a client is not getting e-mail because the sender's mail
server (Usually an internal Exchange server) does not have an RDNS, I tell
them that's why.  I even have a form e-mail I send them to send the blocked
person.  I've actually picked up several consulting gigs (Fixing their RDNS
issue) and spam filtering customers from this...

Lack of RDNS is becoming a much more common antispam check.  So, if you're
blocking it, others are also likely blocking it, and, in the end, the
offending server's admin is going to have to resolve the issue...

Mike

-Original Message-
From: Peter Peltonen [mailto:peter.pelto...@gmail.com] 
Sent: Tuesday, May 03, 2011 10:38 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: SPAM Designation Option

Hi,

On Tue, May 3, 2011 at 7:31 PM, Eric Shubert e...@shubes.net wrote:
 that. Spamdyke false positives are practically nonexistent though, so you
 might want to just leave spamdyke active and not tell him about it. Then
 again, if he insists on receiving spam, I'd charge him extra for the load
 it'll cause on your server as well as the trouble of configuring spamdyke.
 ;)

Even if Spamdyke is correct, it does not mean that the end behaviour
is what the customer expects.

I have ran into issues where customers haven't received email they
were expecting because of Spamdyke rejecting a message because of
missing reserve dns. And it does not help telling the customer that
the sending server is not properly configured, if they can receive the
same email with their Gmail or some other account...

I have been playing around with an idea that I should create a page
for each customer where they could check the sending addresses for
denied messages. So if there is a real message denied I could then
offer an option to white list that mail server or sending address, so
that the customer could try contacting the sender again.

Best,
Peter


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Eric Shubert

Interesting.

FWIW, I wouldn't put any firewall/filtering device in front of 
QMT/spamdyke. Router/NAT ok, but I don't think there'd be any benefit to 
anything more. They can make spamdyke less effective as well. Nothing 
but trouble. ;(  Keep It Simple Stupid. :)


On 05/03/2011 10:47 AM, Joel Eddy wrote:

I’ve got a bridging firewall that is ahead of all my servers and the
mail server. I’ve got that set so tight that it must have been blocking
something with the mail processing. What I’ve got to go figure out yet.
But for now I’ve got it straight to the pub side of the switch.

And the message I was waiting for showed up as soon as I bypassed the
bridge. The timeouts have dropped to just a few now
and then too. The bridge is screening for phrases in the packets so it
may of even been one of those that was fouling up message
delivery. I’ll have to go back and start with a basic iptables and see
what happens.

Self inflicted wound. ;-(



*From:*Eric Shubert [mailto:e...@shubes.net]
*Sent:* Tuesday, May 03, 2011 12:37 PM
*To:* qmailtoaster-list@qmailtoaster.com
*Subject:* [qmailtoaster] Re: Re; Timout issue

Care to elaborate?
(Inquiring minds want to know) ;)

On 05/03/2011 10:24 AM, Joel Eddy wrote:

 I stink I fingered it out. Firewall.

 

 *From:*Eric Shubert [mailto:e...@shubes.net]
 *Sent:* Tuesday, May 03, 2011 10:25 AM
 *To:* qmailtoaster-list@qmailtoaster.com
 *Subject:* [qmailtoaster] Re: Re; Timout issue

 vpopmail:vchkpw
 --
 -Eric 'shubes'

 On 05/03/2011 08:16 AM, Joel Eddy wrote:
 I created the dir but what should the user group be set to.

 Spamdyke is being denied access at this point.

 





-

 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!


-

 Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 

 No virus found in this message.
 Checked by AVG - www.avg.com http://www.avg.com
 Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11




--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



No virus found in this message.
Checked by AVG - www.avg.com http://www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11




--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Eric Shubert

On 05/03/2011 10:38 AM, Peter Peltonen wrote:

Hi,

On Tue, May 3, 2011 at 7:31 PM, Eric Shuberte...@shubes.net  wrote:

that. Spamdyke false positives are practically nonexistent though, so you
might want to just leave spamdyke active and not tell him about it. Then
again, if he insists on receiving spam, I'd charge him extra for the load
it'll cause on your server as well as the trouble of configuring spamdyke.
;)


Even if Spamdyke is correct, it does not mean that the end behaviour
is what the customer expects.

I have ran into issues where customers haven't received email they
were expecting because of Spamdyke rejecting a message because of
missing reserve dns. And it does not help telling the customer that
the sending server is not properly configured, if they can receive the
same email with their Gmail or some other account...


Gmail would reject that as well, ttbomk. Many mailers these days are 
rejecting based on missing rDNS. These cases seem to be less frequent as 
admins get their server configurations fixed.


Good point though. I usually try to contact the the sender's admin and 
have them fix it. They're typically glad to do so, as it helps their 
deliverability in general. In the meantime, it's easy enough to whitelist.



I have been playing around with an idea that I should create a page
for each customer where they could check the sending addresses for
denied messages. So if there is a real message denied I could then
offer an option to white list that mail server or sending address, so
that the customer could try contacting the sender again.


Giving the customer more visibility/control is usually a good thing in 
my mind. At this point, the sender typically contacts the receiver by 
another method (phone, postal mail) to let them know about the 
rejection, which seems adequate to me. The line has to be drawn 
somewhere though, and the policy I favor is that if the sender's server 
isn't configured properly, they need to fix it. I do whitelist 
occasionally though as an interim measure.


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Dan McAllister
Lack of rDNS records will cause messages to fail to MSN/Hotmail, and 
Yahoo! accounts (don't know about Gmail)... I'm not at all worried about 
the blocking of messages (the SPAM he doesn't see he won't bitch 
about)... he just didn't like the ***SPAM*** label behavior! BTW: I 
warned him that there would be an increase in SPAM -- we'll see how long 
it takes him to decide to turn SA back on!


Dan

On 5/3/2011 1:58 PM, Michael J. Colvin wrote:

This is true, however a LARGE amount of spam is sent from IP's with no RDNS.
By not blocking those e-mails, you're certainly forcing your mail server to
deal with a MUCH larger amount of mail, most of which would be spam.  I
guess if you don't have a resource issue, and don't mind wasting resources
on handling spam, that may or may not be rejected by SpamAssassin down the
road, then that's fine.

I agree that, if the customer wants the spam, I'm more than happy to let
them have it.  However, I won't do it at the detriment of other users.

If you've never had a Spam Attack, where your server is constantly
bombarded by spammers, then when you do, you'll wish you had SpamDyke.  :-)
When your server (Or the OP's server) is being hammered by a spammer, and
comes here to complain about how his server is overloaded and legit e-mail
is timing out because all of his SMTP ports are being bogarted, the first
suggestion is going to be Are you running SpamDyke.

And, yes... When a client is not getting e-mail because the sender's mail
server (Usually an internal Exchange server) does not have an RDNS, I tell
them that's why.  I even have a form e-mail I send them to send the blocked
person.  I've actually picked up several consulting gigs (Fixing their RDNS
issue) and spam filtering customers from this...

Lack of RDNS is becoming a much more common antispam check.  So, if you're
blocking it, others are also likely blocking it, and, in the end, the
offending server's admin is going to have to resolve the issue...

Mike

-Original Message-
From: Peter Peltonen [mailto:peter.pelto...@gmail.com]
Sent: Tuesday, May 03, 2011 10:38 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: SPAM Designation Option

Hi,

On Tue, May 3, 2011 at 7:31 PM, Eric Shuberte...@shubes.net  wrote:

that. Spamdyke false positives are practically nonexistent though, so you
might want to just leave spamdyke active and not tell him about it. Then
again, if he insists on receiving spam, I'd charge him extra for the load
it'll cause on your server as well as the trouble of configuring spamdyke.
;)

Even if Spamdyke is correct, it does not mean that the end behaviour
is what the customer expects.

I have ran into issues where customers haven't received email they
were expecting because of Spamdyke rejecting a message because of
missing reserve dns. And it does not help telling the customer that
the sending server is not properly configured, if they can receive the
same email with their Gmail or some other account...

I have been playing around with an idea that I should create a page
for each customer where they could check the sending addresses for
denied messages. So if there is a real message denied I could then
offer an option to white list that mail server or sending address, so
that the customer could try contacting the sender again.

Best,
Peter


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!

-
  Please visit qmailtoaster.com for the latest news, updates, and
packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
-
  Please visit qmailtoaster.com for the latest news, updates, and packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!

[qmailtoaster] Re: SPAM Designation Option

2011-05-03 Thread Eric Shubert

Well said, Michael. +1

On 05/03/2011 10:58 AM, Michael J. Colvin wrote:

This is true, however a LARGE amount of spam is sent from IP's with no RDNS.
By not blocking those e-mails, you're certainly forcing your mail server to
deal with a MUCH larger amount of mail, most of which would be spam.  I
guess if you don't have a resource issue, and don't mind wasting resources
on handling spam, that may or may not be rejected by SpamAssassin down the
road, then that's fine.

I agree that, if the customer wants the spam, I'm more than happy to let
them have it.  However, I won't do it at the detriment of other users.

If you've never had a Spam Attack, where your server is constantly
bombarded by spammers, then when you do, you'll wish you had SpamDyke.  :-)
When your server (Or the OP's server) is being hammered by a spammer, and
comes here to complain about how his server is overloaded and legit e-mail
is timing out because all of his SMTP ports are being bogarted, the first
suggestion is going to be Are you running SpamDyke.

And, yes... When a client is not getting e-mail because the sender's mail
server (Usually an internal Exchange server) does not have an RDNS, I tell
them that's why.  I even have a form e-mail I send them to send the blocked
person.  I've actually picked up several consulting gigs (Fixing their RDNS
issue) and spam filtering customers from this...

Lack of RDNS is becoming a much more common antispam check.  So, if you're
blocking it, others are also likely blocking it, and, in the end, the
offending server's admin is going to have to resolve the issue...

Mike

-Original Message-
From: Peter Peltonen [mailto:peter.pelto...@gmail.com]
Sent: Tuesday, May 03, 2011 10:38 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: SPAM Designation Option

Hi,

On Tue, May 3, 2011 at 7:31 PM, Eric Shuberte...@shubes.net  wrote:

that. Spamdyke false positives are practically nonexistent though, so you
might want to just leave spamdyke active and not tell him about it. Then
again, if he insists on receiving spam, I'd charge him extra for the load
it'll cause on your server as well as the trouble of configuring spamdyke.
;)


Even if Spamdyke is correct, it does not mean that the end behaviour
is what the customer expects.

I have ran into issues where customers haven't received email they
were expecting because of Spamdyke rejecting a message because of
missing reserve dns. And it does not help telling the customer that
the sending server is not properly configured, if they can receive the
same email with their Gmail or some other account...

I have been playing around with an idea that I should create a page
for each customer where they could check the sending addresses for
denied messages. So if there is a real message denied I could then
offer an option to white list that mail server or sending address, so
that the customer could try contacting the sender again.

Best,
Peter


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!

-
  Please visit qmailtoaster.com for the latest news, updates, and
packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!



--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




RE: [qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Amit
Little bit I know but sometimes graylisting also cause the time-out problem.

 

Amit Dalia



Join Us:  http://www.facebook.com/IKFPune
cid:image001.png@01CBA820.E533FB00  http://in.linkedin.com/in/ikfpune
cid:image002.png@01CBA820.E533FB00  http://twitter.com/ikfpune
cid:image003.png@01CBA820.E533FB00
http://maps.google.co.in/maps?oe=utf-8client=firefox-aie=UTF8q=ikf+pune;
fb=1gl=inhq=ikfhnear=Pune,+Maharashtrahl=enview=mapcid=144792588562531
50229iwloc=Aved=0CBoQpQYsa=Xei=jOwVTe_gJqngyQTAssjeCg
cid:image004.png@01CBA820.E533FB00  http://ikf-pune.blogspot.com/
cid:image005.png@01CBA820.E533FB00

 

From: Joel Eddy [mailto:rje...@iowaconnect.com] 
Sent: Tuesday, May 03, 2011 11:17 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: RE: [qmailtoaster] Re: Re; Timout issue

 

I've got a bridging firewall that is ahead of all my servers and the mail
server. I've got that set so tight that it must have been blocking
something with the mail processing. What I've got to go figure out yet. But
for now I've got it straight to the pub side of the switch.

And the message I was waiting for showed up as soon as I bypassed the
bridge. The timeouts have dropped to just a few now
and then too. The bridge is screening for phrases in the packets so it may
of even been one of those that was fouling up message
delivery. I'll have to go back and start with a basic iptables and see what
happens.

 

Self inflicted wound. ;-(

 

 

  _  

From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 12:37 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Re; Timout issue

 

Care to elaborate?
(Inquiring minds want to know) ;)

On 05/03/2011 10:24 AM, Joel Eddy wrote:
 I stink I fingered it out. Firewall.

 

 *From:*Eric Shubert [mailto:e...@shubes.net]
 *Sent:* Tuesday, May 03, 2011 10:25 AM
 *To:* qmailtoaster-list@qmailtoaster.com
 *Subject:* [qmailtoaster] Re: Re; Timout issue

 vpopmail:vchkpw
 --
 -Eric 'shubes'

 On 05/03/2011 08:16 AM, Joel Eddy wrote:
  I created the dir but what should the user group be set to.

  Spamdyke is being denied access at this point.

  





-
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!


-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 

 No virus found in this message.
 Checked by AVG - www.avg.com http://www.avg.com
 Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11



--
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com

  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11

image001.pngimage002.pngimage003.pngimage004.gifimage005.gif

RE: [qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Joel Eddy
KISS seems to work every time. I guess that's what I get for being so
staunch on SPAM.

Thanks for your input. ;-)

 

Have good one.

 

  _  

From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 1:00 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Re; Timout issue

 

Interesting.

FWIW, I wouldn't put any firewall/filtering device in front of
QMT/spamdyke. Router/NAT ok, but I don't think there'd be any benefit to
anything more. They can make spamdyke less effective as well. Nothing
but trouble. ;(  Keep It Simple Stupid. :)

On 05/03/2011 10:47 AM, Joel Eddy wrote:
 I've got a bridging firewall that is ahead of all my servers and the
 mail server. I've got that set so tight that it must have been blocking
 something with the mail processing. What I've got to go figure out yet.
 But for now I've got it straight to the pub side of the switch.

 And the message I was waiting for showed up as soon as I bypassed the
 bridge. The timeouts have dropped to just a few now
 and then too. The bridge is screening for phrases in the packets so it
 may of even been one of those that was fouling up message
 delivery. I'll have to go back and start with a basic iptables and see
 what happens.

 Self inflicted wound. ;-(

 

 *From:*Eric Shubert [mailto:e...@shubes.net]
 *Sent:* Tuesday, May 03, 2011 12:37 PM
 *To:* qmailtoaster-list@qmailtoaster.com
 *Subject:* [qmailtoaster] Re: Re; Timout issue

 Care to elaborate?
 (Inquiring minds want to know) ;)

 On 05/03/2011 10:24 AM, Joel Eddy wrote:
  I stink I fingered it out. Firewall.

  

  *From:*Eric Shubert [mailto:e...@shubes.net]
  *Sent:* Tuesday, May 03, 2011 10:25 AM
  *To:* qmailtoaster-list@qmailtoaster.com
  *Subject:* [qmailtoaster] Re: Re; Timout issue

  vpopmail:vchkpw
  --
  -Eric 'shubes'

  On 05/03/2011 08:16 AM, Joel Eddy wrote:
  I created the dir but what should the user group be set to.
 
  Spamdyke is being denied access at this point.
 
 

 





-
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!



-
  Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

  

  No virus found in this message.
  Checked by AVG - www.avg.com http://www.avg.com
  Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11



 --
 -Eric 'shubes'




-
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!


-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 

 No virus found in this message.
 Checked by AVG - www.avg.com http://www.avg.com
 Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11



--
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3613 - Release Date: 05/03/11



RE: [qmailtoaster] Re: Re; Timout issue

2011-05-03 Thread Joel Eddy
KISS seems to work every time. I guess that's what I get for being so
staunch on SPAM.

Thanks for your input. ;-)

 

Have good one.

 

  _  

From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Tuesday, May 03, 2011 1:00 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Re; Timout issue

 

Interesting.

FWIW, I wouldn't put any firewall/filtering device in front of
QMT/spamdyke. Router/NAT ok, but I don't think there'd be any benefit to
anything more. They can make spamdyke less effective as well. Nothing
but trouble. ;(  Keep It Simple Stupid. :)

On 05/03/2011 10:47 AM, Joel Eddy wrote:
 I've got a bridging firewall that is ahead of all my servers and the
 mail server. I've got that set so tight that it must have been blocking
 something with the mail processing. What I've got to go figure out yet.
 But for now I've got it straight to the pub side of the switch.

 And the message I was waiting for showed up as soon as I bypassed the
 bridge. The timeouts have dropped to just a few now
 and then too. The bridge is screening for phrases in the packets so it
 may of even been one of those that was fouling up message
 delivery. I'll have to go back and start with a basic iptables and see
 what happens.

 Self inflicted wound. ;-(

 

 *From:*Eric Shubert [mailto:e...@shubes.net]
 *Sent:* Tuesday, May 03, 2011 12:37 PM
 *To:* qmailtoaster-list@qmailtoaster.com
 *Subject:* [qmailtoaster] Re: Re; Timout issue

 Care to elaborate?
 (Inquiring minds want to know) ;)

 On 05/03/2011 10:24 AM, Joel Eddy wrote:
  I stink I fingered it out. Firewall.

  

  *From:*Eric Shubert [mailto:e...@shubes.net]
  *Sent:* Tuesday, May 03, 2011 10:25 AM
  *To:* qmailtoaster-list@qmailtoaster.com
  *Subject:* [qmailtoaster] Re: Re; Timout issue

  vpopmail:vchkpw
  --
  -Eric 'shubes'

  On 05/03/2011 08:16 AM, Joel Eddy wrote:
  I created the dir but what should the user group be set to.
 
  Spamdyke is being denied access at this point.
 
 

 





-
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!



-
  Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

  

  No virus found in this message.
  Checked by AVG - www.avg.com http://www.avg.com
  Version: 10.0.1209 / Virus Database: 1500/3610 - Release Date: 05/02/11



 --
 -Eric 'shubes'




-
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!


-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

 

 No virus found in this message.
 Checked by AVG - www.avg.com http://www.avg.com
 Version: 10.0.1209 / Virus Database: 1500/3612 - Release Date: 05/03/11



--
-Eric 'shubes'



-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

-
 Please visit qmailtoaster.com for the latest news, updates, and
packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



  _  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1209 / Virus Database: 1500/3613 - Release Date: 05/03/11



Re: [qmailtoaster] Re: RE; spamdyke ?

2011-05-03 Thread Dan McAllister

The fix is to edit your SSL-capable run files in /var/qmail/supervise/*/run

Depending on what you've got configured, you may need to modify:
*smtp*, *submission*, *smtp-ssl*, *pop-ssl*,  *imap-ssl*.

The last line in each of those run files is the exec that spawns the 
actual program -- and the first argument is usually softlimit with a -m 
xx value. The most recent QMT I installed set that value to 
6400 (for SMTP  SUBMISSION), or 4800 (for IMAP4-SSL  
POP3-SSL)... these are bigger numbers already from when I last saw this 
issue, but just FYI, my value for SMTP, SUBMISSION, and SMTP-SSL are 
128MB (134217728) [expr 128 \* 1024 \* 1024], and I also increased the 
450 value to 64 MB [67108864].


Call me an old-fashioned UNIX guy, but I'm just more comfortable with 
powers of 2 than powers of 10 when it comes to memory allocation!  :-)


I'm not sure how much it matches up with the current toaster, but I use 
the following RUN file in all 3 SMTP locations (smtp, submission,  
smtp-ssl) with the /_*highlighted *_/line changed for each appropriate 
spot to make the requisite changes for each port's requirements. (NOTE: 
I also make the HOSTNAME value equal to the qmail control me value 
-- it makes more sense to me to use that value than the actual hostname 
value from the server).


Use if you like

Dan



#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD=/var/qmail/bin/qmail-smtpd
TCP_CDB=/etc/tcprules.d/tcp.smtp.cdb
HOSTNAME=`cat /var/qmail/control/me`
VCHKPW=/home/vpopmail/bin/vchkpw
MAXMEM=`expr 128 \* 1024 \* 1024`   # 128 M max memory for messages
# OPTIONS
/_*RUNTYPE=SMTP*_/
if [ $RUNTYPE == SMTP-SSL ] ; then
USEPORT=465
export REQUIRE_AUTH=1   # FORCE AUTH
export SMTPS=1  # FORCE SMTPS (SSL)
SPAMDYKE=   # NO SPAMDYKE on AUTH'd users
SPAMDYKEFLAGS=  # NO SPAMDYKE on AUTH'd users
elif [ $RUNTYPE == SUBMISSION ] ; then
USEPORT=587
export REQUIRE_AUTH=1   # FORCE AUTH
export SMTPS=0  # Allow SMTP or SMTPS
SPAMDYKE=   # NO SPAMDYKE on AUTH'd users
SPAMDYKEFLAGS=  # NO SPAMDYKE on AUTH'd users
else # if [ $RUNTYPE == SMTP ] ; then  DEFAULT VALUES
USEPORT=25
SPAMDYKE=/usr/local/spamdyke/bin/spamdyke
SPAMDYKEFLAGS=-f /var/qmail/control/spamdyke/spamdyke.conf
export REQUIRE_AUTH=0   # 0 = not required, 1 = required
export SMTPS=0  # 0 = not required, 1 = required
fi
exec /usr/bin/softlimit -m ${MAXMEM} \
 /usr/bin/tcpserver -v -R -H -l ${HOSTNAME} -x ${TCP_CDB} \
 -c ${MAXSMTPD} -u ${QMAILDUID} -g ${NOFILESGID} 0 ${USEPORT} \
 ${SPAMDYKE} ${SPAMDYKEFLAGS} ${SMTPD} ${VCHKPW} /bin/true 21





Re: [qmailtoaster] Re: SpamAssassin Version

2011-05-03 Thread David Bray
Hi.

Good comment about the Binary v Source - thats actually the strength of
this recipe as I a see it, it blends source packages and provides a neat
rpm install

The challenge is not so much the disk space as the memory requirement to
compile clam on the machine once the machine is deployed - man I dread
the freshclam message (despite the large friendly letters ) DON'T PANIC!


*David Bray*
http://www.brayworth.com.au
da...@brayworth.com.au

On 3/05/2011 2:14 AM, Dan McAllister wrote:
 Just to throw my 2-cents worth in here...

 Binary packages are fine in a well-controlled environment, but source
 packages offer far more flexibility -- especially if the Makefiles are
 sophisticated enough to recognize advanced features and take advantage
 of them (without REQUIRING them). And while binary packages of
 SpamAssassin and ClamAV are likely available in binary form (and it
 may not be a bad idea to make the QMT dependent on the standard
 installation features and locations of each of these), the fact is
 that QMT grew up in a time when QMail itself was REQUIRED to be
 distributed in a source format -- part of the licensing requirement of
 Daniel Bernstein, author of QMail. (I don't think that's true anymore,
 since Daniel put QMail truly into the Public Domain, but I never
 worried about that so I'm not totally up-to-date on QMail licensing
 requirements).

 NOTE: I already use QMail in a VM environment (CentOS 5.6 is the host
 OS, Xen is the VM environment, and CentOS 5.5 is my current guest OS
 running QMT -- I'll update that at some time in the future, but I'm
 honestly expecting to wait for CentOS 6 before I upgrade the base QMT
 again). The point is, you are right that there is a sizable disk-space
 requirement to rebuild the entire QMT from source (*esp*. ClamAV)...
 but there is an easy way to patch that! Specifically, I mount an NFS
 volume from my Xen Host to supplement my Xen Client's storage while I
 build, then unmount and destroy the temp space when I'm done.

 NOTE: For ME this works especially well because I administer so many
 QMT installs -- I update the VM image, then distribute it to my
 clients. All of their actual data (the queue, the mailboxes, the
 control folder, etc.) are kept on NFS-mounted drives on the HOST OS --
 so only the binary QMT is actually run on the Xen-Client... this is
 not a NORMAL config, and wouldn't be MY config if it weren't for my
 need to manage so many installs at the same time.

 Take from this what you wish -- discard the rest. It's worth every
 penny you paid for it!

 Dan
 IT4SOHO

 On 4/30/2011 1:23 AM, Martin Waschbüsch IT-Dienstleistungen wrote:
 Am 30.04.2011 um 05:40 schrieb David Bray:

 Thanks for the Feedback

 Understand about the Fedora Lifetime etc. I use VM's and Fedora 13 is the 
 current Fedora. Tried Ubuntu, CentOS and keep coming back to Fedora - 
 mainly because the php is more up to date

 The driving line is not so much SA - SpamAssassin as Clam, on my last 
 server - Fedora 12 based, there was an issue with spam and the update to SA 
 3.3 did get me into later rule sets (via sa-update)

 You can - in the Fedora 13 case, substitute in yum install spamassassin 
 with little difficulty, basically install the package, it pulls in what it 
 needs, then create the scripts to run under daemontools.

 The clamav is harder, but I have it running, though untested. The end aim 
 is just to let the rpm system update clam, rather than having to recompile 
 to src rpm

 so why is that so bad ?

 well the toaster works fine on a VM with 20Gb HDD and 512k ram  but to 
 recompile the clam package you have to stop the services to free up memory 
 ... so having a recipe for utilizing then yum package is nice ...

 which brings you back to your argument, Fedora 13 will only have a short 
 life for clamav updates via yum 


 David Bray
 http://www.brayworth.com.au
 da...@brayworth.com.au
 Not everything is perfect with QMT, I would agree, but at the same time: it 
 works! And as Eric pointed out, CentOS / RHEL 5.x is the most current 
 version of the recommended OS for QMT.
 Jake is working on QMTv2 which will incorporate some changes and it will 
 actually address some of the things you mention (like an option to just 
 install binary packages instead of compile from source).
 That being said, if you'd like to help with QMT, please join the 
 qmailtoaster-devel list as well!

 Cheers,

 Martin
 -
 Qmailtoaster is sponsored by Vickers Consulting Group 
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and 
 packages.
  
   To unsubscribe, e-mail: