[qmailtoaster] Re: Problem sending mail to comcast.net

2012-12-13 Thread Eric Shubert 
When I dig comcast.net using pdns, the reply is much smaller than when 
using bind. Bind returns very close to 512 bytes, while pdns is just 
under 100 bytes. This is true when using "-t MX" as well (which is what 
I expect qmail is doing).


Replies from pdns are *much* smaller, so it appears that pdns is running ok.

I'm not seeing any cname records. Can you poke around and see what might 
be causing a cname lookup of some sort?



--
-Eric 'shubes'

On 12/13/2012 09:46 AM, rvau...@libertycasting.com wrote:

This is what I get when I dig comcast.net

[root@mail1 pdns-recursor]# dig  comcast.net

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.5 <<>> comcast.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15929
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;comcast.net. IN  A

;; ANSWER SECTION:
comcast.net. 2530IN A   207.223.8.109
comcast.net. 2530IN A   76.96.39.101
comcast.net. 2530IN A   207.223.8.110
comcast.net. 2530IN A   76.96.39.102

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Dec 13 11:39:38 2012
;; MSG SIZE  rcvd: 93

 > 
 > 
 >  http-equiv="Content-Type">
 > 
 > 
 > Have you done any DNS testing to see if comcast.net resolves?
 > 
 > 
 > On 12/13/2012 04:53 AM, Rvaught
 > wrote:
 > 
 >  type="cite">
 > My resolv.conf has :
 >
 > Search libertycasting.com
 >
 > Nameserver 192.168.120.20 ( this local a network dns forwarder)
 >
 >
 > I still have bind installed . I think on my old server I was running the
 > tinydns.
 >
 >
 >
 > I installed pdns-recursor package
 >
 > Still have same problem
 >
 > -Original Message-
 >
From: Eric Shubert [ href="mailto:e...@shubes.net";>mailto:e...@shubes.net]
 > Sent: Wednesday, December 12, 2012 1:17 PM
 > To: 
href="mailto:qmailtoaster-list@qmailtoaster.com";>qmailtoaster-list@qmailtoaster.com
 > Subject: [qmailtoaster] Re: Problem sending mail to comcast.net
 >
 > On 12/12/2012 11:00 AM, Rvaught wrote:
 > 
 > 
 > Since I have set up my new QMT server I am having
 > trouble sending mail
 > to this domain. This is the error I receive:
 >
 > < href="mailto:chlevi...@comcast.net";>chlevi...@comcast.net  class="moz-txt-link-rfc2396E"
 >
href="mailto:chlevi...@comcast.net";>;>:
 >
 > CNAME lookup failed temporarily. (#4.4.3) I'm not going to try again;
 > this message has been in the queue too long.
 >
 > Not sure about what I need to adjust.
 >
 > I also like to thank everyone for help on previous problems.
 >
 > Rick
 >
 > Liberty Casting
 >
 > 
 > 
 > 
 > What are you using for a DNS resolver? (cat /etc/resolv.conf)
 >
 > I recommend using the pdns-recursor package. It's available via yum from
 > the
 > centos repos.
 >
 > --
 > -Eric 'shubes'
 >
 > -
 > To unsubscribe, e-mail: 
href="mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com";>qmailtoaster-list-unsubscr...@qmailtoaster.com
 > For additional commands, e-mail: 
href="mailto:qmailtoaster-list-h...@qmailtoaster.com";>qmailtoaster-list-h...@qmailtoaster.com
 >
 >
 >
 >
 >
 > -
 > To unsubscribe, e-mail: 
href="mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com";>qmailtoaster-list-unsubscr...@qmailtoaster.com
 > For additional commands, e-mail: 
href="mailto:qmailtoaster-list-h...@qmailtoaster.com";>qmailtoaster-list-h...@qmailtoaster.com
 >
 > 
 > 
 > 
 > -- 
 > 
 > 
 > 
 >




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: Problem sending mail to comcast.net

2012-12-13 Thread Eric Shubert 

On 12/13/2012 12:24 PM, Cecil Yother, Jr. wrote:

I found this in the archives.

All of the senders experiencing the bounced messages mentioning cname
lookup failure appear to be running the qmail mail server software.
  Qmail, if not using a third party patch that was written in the late
90's, has an issue sending to domains whose name servers respond to DNS
queries of type "ANY" with more than 512 bytes of data; that is a bug in
qmail and the author has never fixed it because he wants you to use his
DNS server software which also eliminates the issue in a different way.
  Google's name servers do respond to queries of type "ANY" with more
than 512 bytes of data, so when an unpatched qmail server tries to send
an email to a domain whose lowest cost MX record ends in .google.com
, qmail is going to do a DNS query of type ANY
against one ofgoogle.com 's authoritative name
servers, get back more than it can correctly handle and defer repeatedly
until ultimately bouncing the message with that cname lookup failure.

http://productforums.google.com/forum/#!category-topic/apps/mail-settings/mIGTQVZiFxo



Can anyone confirm that Qmailtoaster has been patched with this patch -
http://www.ckdhr.com/ckd/qmail-103.patch???

http://www.memoryhole.net/qmail/#oversize-dns



On 12/13/2012 08:46 AM, rvau...@libertycasting.com wrote:


This is what I get when I dig comcast.net

[root@mail1 pdns-recursor]# dig  comcast.net

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.5 <<>> comcast.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15929
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;comcast.net. IN  A

;; ANSWER SECTION:
comcast.net. 2530IN A   207.223.8.109
comcast.net. 2530IN A   76.96.39.101
comcast.net. 2530IN A   207.223.8.110
comcast.net. 2530IN A   76.96.39.102

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Dec 13 11:39:38 2012
;; MSG SIZE  rcvd: 93

> 
> 
>  http-equiv="Content-Type">
> 
> 
> Have you done any DNS testing to see if comcast.net resolves?
> 
> 
> On 12/13/2012 04:53 AM, Rvaught
> wrote:
> 
>  type="cite">
> My resolv.conf has :
>
> Search libertycasting.com
>
> Nameserver 192.168.120.20 ( this local a network dns forwarder)
>
>
> I still have bind installed . I think on my old server I was running the
> tinydns.
>
>
>
> I installed pdns-recursor package
>
> Still have same problem
>
> -Original Message-
>
From: Eric Shubert [ href="mailto:e...@shubes.net";>mailto:e...@shubes.net]
> Sent: Wednesday, December 12, 2012 1:17 PM
> To: 
href="mailto:qmailtoaster-list@qmailtoaster.com";>qmailtoaster-list@qmailtoaster.com
> Subject: [qmailtoaster] Re: Problem sending mail to comcast.net
>
> On 12/12/2012 11:00 AM, Rvaught wrote:
> 
> 
> Since I have set up my new QMT server I am having
> trouble sending mail
> to this domain. This is the error I receive:
>
> < href="mailto:chlevi...@comcast.net";>chlevi...@comcast.net  class="moz-txt-link-rfc2396E"
>
href="mailto:chlevi...@comcast.net";>;>:
>
> CNAME lookup failed temporarily. (#4.4.3) I'm not going to try again;
> this message has been in the queue too long.
>
> Not sure about what I need to adjust.
>
> I also like to thank everyone for help on previous problems.
>
> Rick
>
> Liberty Casting
>
> 
> 
> 
> What are you using for a DNS resolver? (cat /etc/resolv.conf)
>
> I recommend using the pdns-recursor package. It's available via yum from
> the
> centos repos.
>
> --
> -Eric 'shubes'
>
> -
> To unsubscribe, e-mail: 
href="mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com";>qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: 
href="mailto:qmailtoaster-list-h...@qmailtoaster.com";>qmailtoaster-list-h...@qmailtoaster.com
>
>
>
>
>
> -
> To unsubscribe, e-mail: 
href="mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com";>qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: 
href="mailto:qmailtoaster-list-h...@qmailtoaster.com";>qmailtoaster-list-h...@qmailtoaster.com
>
> 
> 
> 
> -- 
> 
> 
> 
>




--


According to the package (rpm -qi qmail-toaster) it includes the "Big 
DNS Patch". I'm not sure exactly where the patch came from w/out looking 
at the source. Anyone care to take a look?



--
-Eric 'shubes'

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: info my qmailtoaster

2012-12-13 Thread Eric Shubert 

http://wiki.qmailtoaster.com/index.php/Spamdyke
Spamdyke will be part of the "stock" QMT in the future.
In the meantime, the qtp-install-spamdyke script gets you going.

IMO, spamdyke is the best anti-spam program available. If I had to 
choose only one, spamdyke would be it (over spamassassin even).


--
-Eric 'shubes'

On 12/13/2012 09:38 AM, Giuseppe Perna wrote:

Hi all,
I would like to know what kind of server I'm using qmailtoaster.
Let me try to understand why I get so much spam and if my server is openralay
I plugged in \ var \ qmail \ control \ blacklist "-r zen.spamhaus.org"
but it has no effect, I do not see "rblsmtpd: 197.7.58.229 pid 12666:
451 http://www.spamhaus.org/query/ bl? ip = 197.7.58.229 "

thanks

i have this output:

  rpm -qa |grep qmail

qmail-toaster-1.03-1.3.15
qmailadmin-toaster-1.2.11-1.3.4
qmailtoaster-plus-0.3.0-1.4.4
qmail-pop3d-toaster-1.03-1.3.15
qmailmrtg-toaster-4.2-1.3.3


cat /etc/tcprules.d/tcp.smtp

127.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
10.72.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
212.xx.xx.x:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
85.x.x.xx:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="600",CHKUSER_WRONGRCPTLIMIT="600",QMAILQUEUE="/var/qmail/bin/simscan",NOP0FCHECK="1"

qmailctl stat

authlib: up (pid 23868) 2296 seconds
clamd: up (pid 23869) 2296 seconds
imap4: up (pid 23916) 2296 seconds
imap4-ssl: up (pid 23871) 2296 seconds
pop3: up (pid 23855) 2297 seconds
pop3-ssl: up (pid 23888) 2296 seconds
send: up (pid 23889) 2296 seconds
smtp: up (pid 23854) 2296 seconds
spamd: up (pid 23890) 2296 seconds
submission: up (pid 23899) 2296 seconds
authlib/log: up (pid 23862) 2297 seconds
clamd/log: up (pid 23870) 2296 seconds
imap4/log: up (pid 23917) 2296 seconds
imap4-ssl/log: up (pid 23872) 2296 seconds
pop3/log: up (pid 23853) 2297 seconds
pop3-ssl/log: up (pid 23882) 2296 seconds
send/log: up (pid 23895) 2296 seconds
smtp/log: up (pid 23867) 2296 seconds
spamd/log: up (pid 23877) 2296 seconds
submission/log: up (pid 23887) 2296 seconds

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com






-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Re: anti-spam not working

2012-12-13 Thread Eric Shubert 

On 12/12/2012 06:36 PM, Fernando Endangan wrote:

Hello Team,

We are using qmailtoaster for some of our clients and configured well
everything. Can someone give us a reference or guide where I can
thoroughly fight common spam mails. It seems that users receive even
minor spam mails and bypassed the anti-spam rules.

Any help will much be appreciated.

Yours,
Butch

-


I take it you're not running spamdyke.
http://wiki.qmailtoaster.com/index.php/Spamdyke
It's highly recommended.

--
-Eric 'shubes'

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Disabling ClamAV heuristic phishing checks

2012-12-13 Thread Brent Gardner 

On 12/12/2012 04:53 PM, Eric Shubert wrote:

On 12/12/2012 11:18 AM, Brent Gardner wrote:

We were getting false positives caused by a heuristic anti-phishing
check in ClamAV.  We'd see log messages like:

2012-12-10 09:20:05.648516500
simscan:[18122]:VIRUS:0.2573s:Heuristics.Phishing.Email.SpoofedDomain:12.10.219.63:healt030201212100700560763005840.amex.m...@welcome.aexp.com:u...@example.com 





In the last month, all but one hit on this signature were for legitimate
messages coming from American Express.

Going off of info found here:
http://lurker.clamav.net/message/20101130.100352.010692f7.en.html,  I
disabled phishing URL checks in ClamAV by restarting clamd after putting
this line in /etc/clamd.conf:

 PhishingScanURLs no


This also disables the following ClamAV checks, which we weren't getting
any hits on:

 Heuristics.Phishing.Email
 Heuristics.Phishing.Email.Cloaked.Null
 Heuristics.Phishing.Email.Cloaked.NumericIP
 Heuristics.Phishing.Email.Cloaked.Username
 Heuristics.Phishing.Email.SpoofedDomain
 Heuristics.Phishing.Email.SSL-Spoof
 Heuristics.Phishing.URL.Blacklisted


fyi


Brent Gardner



-


I had a similar problem with Chase and sane security. Instead of 
defeating the checks though, I set up entries in the tcp.smtp file for 
Chase's servers, which don't do scanning at all, like this:
151.151.65.96-126:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/qmail-queue",NOP0FCHECK="1" 

There are 14 tcp.smtp records in all. I hope they don't change their 
outbound servers around very often. ;)


Yeah, I considered doing that but I couldn't find a list of AMEX's 
outbound servers.  Too bad you can't put FQDNs in tcp.smtp.  Plus, it 
appears that the now-disabled check was producing false positives 95% of 
the time.



Brent Gardner





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] DMARC, anyone?

2012-12-13 Thread Casey James Price 

  
  
Recently came across an interesting
  sounding approach for combating spam and forged senders. Just wanted
  to see if anyone else has heard about this, tried deploying it, or
  if it is something Qmailtoaster is capable of doing.
  
  Domain-based Message Authentication, Reporting & Conformance
  
  http://dmarc.org/overview.html

-- 
  
Casey James Price
Operations/Technical Support


www.smileglobal.com

Re: [qmailtoaster] Re: Problem sending mail to comcast.net

2012-12-13 Thread Cecil Yother, Jr. 

  
  
I found this in the archives.
  
  All of the senders experiencing the bounced
  messages mentioning cname lookup failure appear to be
  running the qmail mail server software.  Qmail, if not
  using a third party patch that was written in the late
  90's, has an issue sending to domains whose name
  servers respond to DNS queries of type "ANY" with more
  than 512 bytes of data; that is a bug in qmail and the
  author has never fixed it because he wants you to use
  his DNS server software which also eliminates the
  issue in a different way.  Google's name servers do
  respond to queries of type "ANY" with more than 512
  bytes of data, so when an unpatched qmail server tries
  to send an email to a domain whose lowest cost MX
  record ends in .google.com, qmail is going to do a DNS query of type ANY
  against one of google.com's
  authoritative name servers, get back more than it can
  correctly handle and defer repeatedly until ultimately
  bouncing the message with that cname lookup failure. 
  
http://productforums.google.com/forum/#!category-topic/apps/mail-settings/mIGTQVZiFxo
  
  
  
  Can anyone confirm that Qmailtoaster has been patched
  with this patch - http://www.ckdhr.com/ckd/qmail-103.patch???
  
  http://www.memoryhole.net/qmail/#oversize-dns
  
  
  
On 12/13/2012
  08:46 AM, rvau...@libertycasting.com wrote:


   
   
  This is what I get when I dig
comcast.net
  [root@mail1 pdns-recursor]# dig  comcast.net

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.5
<<>> comcast.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
15929
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0,
ADDITIONAL: 0

;; QUESTION SECTION:
;comcast.net.  
IN  A

;; ANSWER SECTION:
comcast.net.   
2530    IN 
A   207.223.8.109
comcast.net.   
2530    IN 
A   76.96.39.101
comcast.net.   
2530    IN 
A   207.223.8.110
comcast.net.   
2530    IN 
A   76.96.39.102

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Dec 13 11:39:38 2012
;; MSG SIZE  rcvd: 93
   
   
  >

> 
> 
> http-equiv="Content-Type">
> 
> 
> Have you done any DNS testing to see if comcast.net
resolves?
> 
> 
> On 12/13/2012 04:53 AM,
Rvaught
> wrote:
> 
> 
> type="cite">
> My resolv.conf has :
>
> Search libertycasting.com
>
> Nameserver 192.168.120.20 ( this local a network dns
forwarder)
>
>
> I still have bind installed . I think on my old server I
was running
the
> tinydns.
>
>
>
> I installed pdns-recursor package
>
> Still have same problem
>
> -Original Message-
>
From: Eric Shubert [
>
href="" class="moz-txt-link-rfc2396E" href="mailto:e...@shubes.net">"mailto:e...@shubes.net">mailto:e...@shubes.net]
> Sent: Wednesday, December 12, 2012 1:17 PM
> To: 
>
href="" class="moz-txt-link-rfc2396E" href="mailto:qmailtoaster-list@qmailtoaster.com">"mailto:qmailtoaster-list@qmailtoaster.com">qmailtoaster-list@qmailtoaster.com
> Subject: [qmailtoaster] Re: Problem sending mail to
comcast.net
>
> On 12/12/2012 11:00 AM, Rvaught wrote:
> 
> 
> Since I have set up my new QMT server I
am having
> trouble sending mail
> to this domain. This is the error I receive:
>
> <
>
href="" class="moz-txt-link-rfc2396E" href="mailto:chlevi...@comcast.net">"mailto:chlevi...@comcast.net">chlevi...@comcast.net

> class="moz-txt-link-rfc2396E"
>
href="" class="moz-txt-link-rfc2396E" href="mailto:chlevi...@comcast.net">"mailto:chlevi...@comcast.net">;>:
>
> CNAME lookup failed temporarily. (#4.4.3) I'm not going to
try
again;
> this message has been in the queue too long.
>
> Not sure about what I need

Re: [qmailtoaster] Re: Problem sending mail to comcast.net

2012-12-13 Thread rvaught 



 
 
This is what I get when I dig
comcast.net
[root@mail1 pdns-recursor]# dig  comcast.net



; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.5
<<>> comcast.net

;; global options:  printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15929

;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0



;; QUESTION SECTION:

;comcast.net.  
IN  A



;; ANSWER SECTION:

comcast.net.   
2530    IN 
A   207.223.8.109

comcast.net.   
2530    IN 
A   76.96.39.101

comcast.net.   
2530    IN 
A   207.223.8.110

comcast.net.   
2530    IN 
A   76.96.39.102



;; Query time: 0 msec

;; SERVER: 127.0.0.1#53(127.0.0.1)

;; WHEN: Thu Dec 13 11:39:38 2012

;; MSG SIZE  rcvd: 93
 
 
>


> 

>  http-equiv="Content-Type">

> 

> 

> Have you done any DNS testing to see if comcast.net
resolves?

> 

> 

> On 12/13/2012 04:53 AM,
Rvaught

> wrote:

> 

>  type="cite">

> My resolv.conf has :

>

> Search libertycasting.com

>

> Nameserver 192.168.120.20 ( this local a network dns forwarder)

>

>

> I still have bind installed . I think on my old server I was running
the

> tinydns.

>

>

>

> I installed pdns-recursor package

>

> Still have same problem

>

> -Original Message-

>

From: Eric Shubert [
href="mailto:e...@shubes.net";>mailto:e...@shubes.net]

> Sent: Wednesday, December 12, 2012 1:17 PM

> To: 
href="mailto:qmailtoaster-list@qmailtoaster.com";>qmailtoaster-list@qmailtoaster.com

> Subject: [qmailtoaster] Re: Problem sending mail to comcast.net

>

> On 12/12/2012 11:00 AM, Rvaught wrote:

> 

> 

> Since I have set up my new QMT server I
am having

> trouble sending mail

> to this domain. This is the error I receive:

>

> <
href="mailto:chlevi...@comcast.net";>chlevi...@comcast.net
 class="moz-txt-link-rfc2396E"

>
href="mailto:chlevi...@comcast.net";>;>:

>

> CNAME lookup failed temporarily. (#4.4.3) I'm not going to try
again;

> this message has been in the queue too long.

>

> Not sure about what I need to adjust.

>

> I also like to thank everyone for help on previous problems.

>

> Rick

>

> Liberty Casting

>

> 

> 

> 

> What are you using for a DNS resolver? (cat /etc/resolv.conf)

>

> I recommend using the pdns-recursor package. It's available via yum
from

> the

> centos repos.

>

> --

> -Eric 'shubes'

>

>
-

> To unsubscribe, e-mail: 
href="mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com";>qmailtoaster-list-unsubscr...@qmailtoaster.com

> For additional commands, e-mail: 
href="mailto:qmailtoaster-list-h...@qmailtoaster.com";>qmailtoaster-list-h...@qmailtoaster.com

>

>

>

>

>

>
-

> To unsubscribe, e-mail: 
href="mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com";>qmailtoaster-list-unsubscr...@qmailtoaster.com

> For additional commands, e-mail: 
href="mailto:qmailtoaster-list-h...@qmailtoaster.com";>qmailtoaster-list-h...@qmailtoaster.com

>

> 

> 

> 

> -- 

> 

> 

> 

>

[qmailtoaster] info my qmailtoaster

2012-12-13 Thread Giuseppe Perna 
Hi all,
I would like to know what kind of server I'm using qmailtoaster.
Let me try to understand why I get so much spam and if my server is openralay
I plugged in \ var \ qmail \ control \ blacklist "-r zen.spamhaus.org"
but it has no effect, I do not see "rblsmtpd: 197.7.58.229 pid 12666:
451 http://www.spamhaus.org/query/ bl? ip = 197.7.58.229 "

thanks

i have this output:

 rpm -qa |grep qmail

qmail-toaster-1.03-1.3.15
qmailadmin-toaster-1.2.11-1.3.4
qmailtoaster-plus-0.3.0-1.4.4
qmail-pop3d-toaster-1.03-1.3.15
qmailmrtg-toaster-4.2-1.3.3


cat /etc/tcprules.d/tcp.smtp

127.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
10.72.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
212.xx.xx.x:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
85.x.x.xx:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="600",CHKUSER_WRONGRCPTLIMIT="600",QMAILQUEUE="/var/qmail/bin/simscan",NOP0FCHECK="1"

qmailctl stat

authlib: up (pid 23868) 2296 seconds
clamd: up (pid 23869) 2296 seconds
imap4: up (pid 23916) 2296 seconds
imap4-ssl: up (pid 23871) 2296 seconds
pop3: up (pid 23855) 2297 seconds
pop3-ssl: up (pid 23888) 2296 seconds
send: up (pid 23889) 2296 seconds
smtp: up (pid 23854) 2296 seconds
spamd: up (pid 23890) 2296 seconds
submission: up (pid 23899) 2296 seconds
authlib/log: up (pid 23862) 2297 seconds
clamd/log: up (pid 23870) 2296 seconds
imap4/log: up (pid 23917) 2296 seconds
imap4-ssl/log: up (pid 23872) 2296 seconds
pop3/log: up (pid 23853) 2297 seconds
pop3-ssl/log: up (pid 23882) 2296 seconds
send/log: up (pid 23895) 2296 seconds
smtp/log: up (pid 23867) 2296 seconds
spamd/log: up (pid 23877) 2296 seconds
submission/log: up (pid 23887) 2296 seconds

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Problem sending mail to comcast.net

2012-12-13 Thread Maxwell Smart 

  
  
Have you done any DNS testing to see if comcast.net resolves?


On 12/13/2012 04:53 AM, Rvaught wrote:


  My resolv.conf has :

Search libertycasting.com   

Nameserver 192.168.120.20   ( this local a network dns forwarder) 


I still have bind installed . I think on my old server I was running the
tinydns.



I installed pdns-recursor package 

Still have same problem

-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Wednesday, December 12, 2012 1:17 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Problem sending mail to comcast.net

On 12/12/2012 11:00 AM, Rvaught wrote:

  
Since I have set up my new QMT server I am having trouble sending mail 
to this domain. This is the error I receive:

:

CNAME lookup failed temporarily. (#4.4.3) I'm not going to try again; 
this message has been in the queue too long.

Not sure about what I need to adjust.

I also like to thank everyone  for  help on previous problems.

Rick

Liberty Casting


  
  
What are you using for a DNS resolver? (cat /etc/resolv.conf)

I recommend using the pdns-recursor package. It's available via yum from the
centos repos.

--
-Eric 'shubes'

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




--

Re: [qmailtoaster] Re: Generating a report for a domain

2012-12-13 Thread Casey James Price 

  
  
Thanks Pak!
  
  
  Casey James Price
  Operations/Technical Support
  
  
  www.smileglobal.com
  
  

  On 12/13/12 8:03 AM, Pak Ogah wrote:


  
  On 11/20/12 11:19, Casey James Price
wrote:
  
  

Anyone!?!
Help, please...
  

  
  Hi  Casey,
  I don't know if you still need this. but I stumble upon my
  colleague's blog and found a script to find which account (in a
  domain) is forwarding his email, leave a copy on his account and
  setup vacation notice
  
  script:
  
#!/bin/bash
DOM=/home/vpopmail/domains/domain.com
LOG=/tmp/user.txt
LOG2=/tmp/user2.txt
LOG3=/tmp/hasil-forwad.txt

  rm -rf $LOG3
find $DOM -iname
Maildir >> $LOG
awk -F/ '{print $6}' $LOG >> $LOG2
 
for i in `cat $LOG2`;
  do
  if [ -f /$RPX/$i/.qmail ];
then
   echo "$i forwad
  to" >> $LOG3
   echo `cat
  $DOM/$i/.qmail` >> $LOG3
   echo "" >>
$LOG3
  fi
 
done
rm -rf $LOG2
$LOG
  
  
  result sample:
  
gartha

forwad to
 &akurnia...@holding.com
 
djunaedi

forwad to
/home/vpopmail/domains/holding.com/djunaedi/Maildir/
  | /usr/bin/autorespond
  86400 3 /home/vpopmail/domains/holding.com/djunaedi/vacation/message /home/vpopmail/domains/holding.com/djunaedi/vacation
 
novitarini

forwad to
/home/vpopmail/domains/holding.com/novitarini/Maildir/
 
mhafiizh

forwad to
&hafiizh@gmail.com

  /home/vpopmail/domains/holding.com/mhafiizh/Maildir/

Re: [qmailtoaster] Re: Generating a report for a domain

2012-12-13 Thread Pak Ogah 

On 11/20/12 11:19, Casey James Price wrote:

Anyone!?! Help, please...
**

Hi Casey,
I don't know if you still need this. but I stumble upon my colleague's 
blog and found a script to find which account (in a domain) is 
forwarding his email, leave a copy on his account and setup vacation notice


script:
|#!/bin/bash|
|DOM=||/home/vpopmail/domains/domain||.com|
|LOG=||/tmp/user||.txt|
|LOG2=||/tmp/user2||.txt|
|LOG3=||/tmp/hasil-forwad||.txt|

|rm| |-rf $LOG3|
|find| |$DOM -iname Maildir >> $LOG|
|awk| |-F/ ||'{print $6}'| |$LOG >> $LOG2|
|for| |i ||in| |`||cat| |$LOG2`; ||do|
|||if| |[ -f /$RPX/$i/.qmail ];|
|then|
|||echo| |"$i forwad to"| |>> $LOG3|
|||echo| |`||cat| |$DOM/$i/.qmail` >> $LOG3|
|||echo| |""| |>> $LOG3|
|||fi|
|done|
|rm| |-rf $LOG2 $LOG|

result sample:
|gartha forwad to|
|||&akurnia...@holding.com|
|djunaedi forwad to|
|/home/vpopmail/domains/holding||.com||/djunaedi/Maildir/| || 
||/usr/bin/autorespond| |86400 3 
||/home/vpopmail/domains/holding||.com||/djunaedi||/vacation/message| 
|/home/vpopmail/domains/holding||.com||/djunaedi/vacation|

|novitarini forwad to|
|/home/vpopmail/domains/holding||.com||/novitarini/Maildir/|
|mhafiizh forwad to|
|&hafiizh@gmail.com 
||/home/vpopmail/domains/holding||.com||/mhafiizh/Maildir/|

Re: [qmailtoaster] Squirrelmail alternatives? Looking for recs

2012-12-13 Thread Jesús Arnáiz 
We love SquirrelMail, but we are testing also AfterLogics webmail. They 
have free version and it works with Ajax, and is simple and easy.



El 12/12/2012 21:17, Diana Calder escribió:



Friday, December 7, 2012, 7:33:18 PM, Carlos wrote:


+1 afterlogic
El dic 7, 2012 3:01 p.m., "David Bray" mailto:da...@brayworth.com.au>> escribió:
after logic is my choice - I use the lite - http://www.afterlogic.org/

Its equally as easy as round cube to setup

*David Bray
*http://www.brayworth.com.au
da...@brayworth.com.au 
*/Done/* is better than *Perfect*



Can users do password changes and vacation responses within AfterLogic
Lite? I already have that functionality working in Squirrelmail and
can't very well *remove* functionality. (Password reset/reminder would
be great too, but I don't think I've seen that working for any of the
options, including Squirrelmail.)

Thanks,
Diana


On 7/12/2012 3:24 AM, Diana Calder wrote:
Anyone using something other than Squirrelmail for webmail with
Qmailtoaster? I'm working my way through researching the options
listed in the Wiki but I'd like to get some feedback from someone
who's actually using one of the alternative webmail packages. So far,
it looks like atmail is gone (the free community version, at least),
and AfterLogic lite, eGroupware, Horde, and RoundCube all look like
they're worth taking a deeper look at.

I'd prefer something that looks a little less dated than Squirrelmail
and that has a good mobile interface. Our Intranet is a hosted Noodle
instance, so I'm not really interested in extra bells and whistles
like calendars and such - just good solid email features like a decent
address book (though a nice shared one in addition to personal ones
would be nice), the ability to set a vacation response, basic
filtering, and allowing individual users to change their password.
eGroupware is probably overkill for our needs and even Horde may be a
little over the top - but they're also the two nicest looking. I'll be
continuing to research but some helpful comments from the Qmailtoaster
community would be greatly appreciated.

Hoping for some good recommendations,
Diana






/--
Best regards,
  Diana /mailto:dcal...@essexcountylibrary.ca
- To
unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For
additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Re: Problem sending mail to comcast.net

2012-12-13 Thread Rvaught 
My resolv.conf has :

Search libertycasting.com   

Nameserver 192.168.120.20   ( this local a network dns forwarder) 


I still have bind installed . I think on my old server I was running the
tinydns.



I installed pdns-recursor package 

Still have same problem

-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Wednesday, December 12, 2012 1:17 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Problem sending mail to comcast.net

On 12/12/2012 11:00 AM, Rvaught wrote:
> Since I have set up my new QMT server I am having trouble sending mail 
> to this domain. This is the error I receive:
>
> mailto:chlevi...@comcast.net>>:
>
> CNAME lookup failed temporarily. (#4.4.3) I'm not going to try again; 
> this message has been in the queue too long.
>
> Not sure about what I need to adjust.
>
> I also like to thank everyone  for  help on previous problems.
>
> Rick
>
> Liberty Casting
>

What are you using for a DNS resolver? (cat /etc/resolv.conf)

I recommend using the pdns-recursor package. It's available via yum from the
centos repos.

--
-Eric 'shubes'

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com





-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com