Re: [qmailtoaster] Re: One user account can't login to Squirrelmail

2014-07-28 Thread Diana Calder
Hello Eric,

Friday, July 25, 2014, 7:13:21 PM, you wrote:

 On 07/25/2014 10:45 AM, Diana Calder wrote:
 Thursday, July 24, 2014, 6:57:21 PM, Eric wrote:

 On 07/24/2014 06:39 AM, Diana Calder wrote:
 I have an odd problem with one user account. When trying to login to
 Squirrelmail, the login will hang for several seconds then result in:

 ERROR: Connection dropped by IMAP server.
 Query: LOGOUT

 This is now happening with more than one user account. The problem has
 returned on the one that I *thought* I had fixed plus it's showing up
 on multiple other accounts. Yet some still work.


snip

 Anybody have any suggestions? I'm just about ready to give in and do a
 fresh install of CentOS and Qmail, then import all of my old messages.
 Except that I'm not entirely certain that the problem won't follow the
 old messages to a new box.


 Please post result of:
 # doveconf -n

[root@qmail ~]# doveconf -n
# 2.2.7: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-431.20.3.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4
auth_cache_size = 32 M
auth_mechanisms = plain login digest-md5 cram-md5
debug_log_path = /var/log/dovecot-debug.log
default_client_limit = 1024
disable_plaintext_auth = no
first_valid_gid = 89
first_valid_uid = 89
log_path = /var/log/dovecot.log
login_greeting = Dovecot toaster ready.
mail_debug = yes
mail_location = maildir:/home/vpopmail/domains/essexcountylibrary.ca/%n/Maildir
mail_plugins =  quota
namespace {
  inbox = yes
  location = 
  mailbox Drafts {
auto = subscribe
special_use = \Drafts
  }
  mailbox Sent {
auto = subscribe
special_use = \Sent
  }
  mailbox Sent Messages {
auto = no
special_use = \Sent
  }
  mailbox Spam {
auto = create
special_use = \Junk
  }
  mailbox Trash {
auto = subscribe
special_use = \Trash
  }
  prefix = 
  separator = .
  type = private
}
passdb {
  args = cache_key=%u webmail=127.0.0.1
  driver = vpopmail
}
plugin {
  quota = maildir:ignore=Trash
  quota_rule = ?:storage=0
}
protocols = imap pop3
service imap-login {
  process_limit = 300
  process_min_avail = 5
  service_count = 0
}
service pop3-login {
  service_count = 0
}
ssl_cert = /var/qmail/control/servercert.pem
ssl_key = /var/qmail/control/servercert.pem
userdb {
  args = cache_key=%u quota_template=quota_rule=*:backend=%q
  driver = vpopmail
}
protocol imap {
  imap_capability = IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE 
SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN 
NAMESPACE UIDP LUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN 
CONTEXT=SEARCH LIST-STATUS
  imap_client_workarounds = delay-newmail
  mail_max_userip_connections = 0
  mail_plugins =  quota imap_quota
}
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
  pop3_fast_size_lookups = yes
  pop3_lock_session = yes
}


 Also, how many SM users are there, and how many IMAP that are not SM?

All users (about 94 total) have access to Squirrelmail. Of those 94,
most only sign in maybe once a week, if that, and 27 accounts would
only rarely sign in to Squirrelmail - usually when out of office.
Non-SM IMAP - the 27 accounts that I already mentioned - will
eventually all be on non-SM IMAP but five or six are currently still
on POP3.


-- 
Best regards,
 Diana Calder mailto:dcal...@essexcountylibrary.ca
Automation Technician(519) 776-5241 x.131
Essex County Library
Essex, ON


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



Re: [qmailtoaster] Re: Prevent sender from spoofing email address

2014-07-28 Thread Dan McAllister

On 7/27/2014 1:58 AM, Eric Shubert wrote:

On 07/26/2014 09:03 PM, Hasan Akgöz wrote:

I have both postfix and qmail mail servers. smtpd_sender_login_maps (
for postfix) The controlled_envelope_senders table specifies the binding
between a sender envelope address and the SASL login names that own that
address. You can use regex ( pcre ) or mysql tables etc..  for it. in
the meantime Why not suitable for QMT.?


I believe that this is what I described as being practical (without 
knowing of this capability in postfix). It's not suitable for QMT 
largely because it would involve a fairly major change to vpopmail and 
qmail, which is something we simply don't have resources to do. 
Perhaps suitable wasn't the best term to use.


That being said, I think we should add this to the reasons for 
switching to postfix at some point in the future for use as a 
submission server, if not all roles which use smtp (also mx and 
sending, which use smtp).


Another reason for using postfix is that it can be configured to 
throttle outbound messages. This is something that could be patched 
into qmail-remote (as we've discussed and I've even written a spec 
for), but at this point I feel that whatever time is spent doing this 
might be better spent converting to postfix.


Anyone care to share their thoughts about this?

Thanks.

If we switch everything over to postfix, shouldn't we rename the project 
postfix-toaster?


grin

Dan



--
IT4SOHO, LLC
33 - 4th Street N, Suite 211
St. Petersburg, FL 33701-3806

CALL TOLL FREE:
  877-IT4SOHO

877-484-7646 Phone
727-647-7646 Local
727-490-4394 Fax

We have support plans for QMail!


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



Re: [qmailtoaster] Re: Prevent sender from spoofing email address

2014-07-28 Thread Sebastian Grewe
He does have a point there :D or just mail-toaster!

 On 28.07.2014, at 16:31, Dan McAllister q...@it4soho.com wrote:
 
 On 7/27/2014 1:58 AM, Eric Shubert wrote:
 On 07/26/2014 09:03 PM, Hasan Akgöz wrote:
 I have both postfix and qmail mail servers. smtpd_sender_login_maps (
 for postfix) The controlled_envelope_senders table specifies the binding
 between a sender envelope address and the SASL login names that own that
 address. You can use regex ( pcre ) or mysql tables etc..  for it. in
 the meantime Why not suitable for QMT.?
 
 I believe that this is what I described as being practical (without knowing 
 of this capability in postfix). It's not suitable for QMT largely because it 
 would involve a fairly major change to vpopmail and qmail, which is 
 something we simply don't have resources to do. Perhaps suitable wasn't 
 the best term to use.
 
 That being said, I think we should add this to the reasons for switching to 
 postfix at some point in the future for use as a submission server, if not 
 all roles which use smtp (also mx and sending, which use smtp).
 
 Another reason for using postfix is that it can be configured to throttle 
 outbound messages. This is something that could be patched into qmail-remote 
 (as we've discussed and I've even written a spec for), but at this point I 
 feel that whatever time is spent doing this might be better spent converting 
 to postfix.
 
 Anyone care to share their thoughts about this?
 
 Thanks.
 
 If we switch everything over to postfix, shouldn't we rename the project 
 postfix-toaster?
 
 grin
 
 Dan
 
 
 
 -- 
 IT4SOHO, LLC
 33 - 4th Street N, Suite 211
 St. Petersburg, FL 33701-3806
 
 CALL TOLL FREE:
  877-IT4SOHO
 
 877-484-7646 Phone
 727-647-7646 Local
 727-490-4394 Fax
 
 We have support plans for QMail!
 
 
 -
 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



[qmailtoaster] Re: Prevent sender from spoofing email address

2014-07-28 Thread Eric Shubert

I already have the domain emailtoaster.com. :)

--
-Eric 'shubes'

On 07/28/2014 07:34 AM, Sebastian Grewe wrote:

He does have a point there :D or just mail-toaster!


On 28.07.2014, at 16:31, Dan McAllister q...@it4soho.com wrote:


On 7/27/2014 1:58 AM, Eric Shubert wrote:

On 07/26/2014 09:03 PM, Hasan Akgöz wrote:
I have both postfix and qmail mail servers. smtpd_sender_login_maps (
for postfix) The controlled_envelope_senders table specifies the binding
between a sender envelope address and the SASL login names that own that
address. You can use regex ( pcre ) or mysql tables etc..  for it. in
the meantime Why not suitable for QMT.?


I believe that this is what I described as being practical (without knowing of this 
capability in postfix). It's not suitable for QMT largely because it would involve a 
fairly major change to vpopmail and qmail, which is something we simply don't have 
resources to do. Perhaps suitable wasn't the best term to use.

That being said, I think we should add this to the reasons for switching to 
postfix at some point in the future for use as a submission server, if not all 
roles which use smtp (also mx and sending, which use smtp).

Another reason for using postfix is that it can be configured to throttle 
outbound messages. This is something that could be patched into qmail-remote 
(as we've discussed and I've even written a spec for), but at this point I feel 
that whatever time is spent doing this might be better spent converting to 
postfix.

Anyone care to share their thoughts about this?

Thanks.


If we switch everything over to postfix, shouldn't we rename the project 
postfix-toaster?

grin

Dan



--
IT4SOHO, LLC
33 - 4th Street N, Suite 211
St. Petersburg, FL 33701-3806

CALL TOLL FREE:
  877-IT4SOHO

877-484-7646 Phone
727-647-7646 Local
727-490-4394 Fax

We have support plans for QMail!


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com







-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



[qmailtoaster] Re: One user account can't login to Squirrelmail

2014-07-28 Thread Eric Shubert

On 07/23/2014 10:57 AM, Diana Calder wrote:

As a side note - when we moved to a CentOS6 VM with the compatible
version of Qmailtoaster, we made the switch from Courier to Dovecot at
the same time. That appears to have left a number of Courier
directories behind in each account's Maildir. Does anyone have a
cleanup script to get rid of these obsolete directories?


It should be a pretty simple matter (for some of us) to write a script 
that will remove all courier related cruft from the mail store. If 
someone would care to write this, I'd be happy to include it in the 
qmailtoaster-util package.


Thanks.

--
-Eric 'shubes'


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



[qmailtoaster] Re: One user account can't login to Squirrelmail

2014-07-28 Thread Eric Shubert

On 07/28/2014 06:45 AM, Diana Calder wrote:

Hello Eric,

Friday, July 25, 2014, 7:13:21 PM, you wrote:


On 07/25/2014 10:45 AM, Diana Calder wrote:

Thursday, July 24, 2014, 6:57:21 PM, Eric wrote:


On 07/24/2014 06:39 AM, Diana Calder wrote:

I have an odd problem with one user account. When trying to login to
Squirrelmail, the login will hang for several seconds then result in:

ERROR: Connection dropped by IMAP server.
Query: LOGOUT


This is now happening with more than one user account. The problem has
returned on the one that I *thought* I had fixed plus it's showing up
on multiple other accounts. Yet some still work.



snip


Anybody have any suggestions? I'm just about ready to give in and do a
fresh install of CentOS and Qmail, then import all of my old messages.
Except that I'm not entirely certain that the problem won't follow the
old messages to a new box.



Please post result of:
# doveconf -n


[root@qmail ~]# doveconf -n
# 2.2.7: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-431.20.3.el6.x86_64 x86_64 CentOS release 6.5 (Final) ext4
auth_cache_size = 32 M
auth_mechanisms = plain login digest-md5 cram-md5
debug_log_path = /var/log/dovecot-debug.log
default_client_limit = 1024
disable_plaintext_auth = no
first_valid_gid = 89
first_valid_uid = 89
log_path = /var/log/dovecot.log
login_greeting = Dovecot toaster ready.
mail_debug = yes
mail_location = maildir:/home/vpopmail/domains/essexcountylibrary.ca/%n/Maildir
mail_plugins =  quota
namespace {
   inbox = yes
   location =
   mailbox Drafts {
 auto = subscribe
 special_use = \Drafts
   }
   mailbox Sent {
 auto = subscribe
 special_use = \Sent
   }
   mailbox Sent Messages {
 auto = no
 special_use = \Sent
   }
   mailbox Spam {
 auto = create
 special_use = \Junk
   }
   mailbox Trash {
 auto = subscribe
 special_use = \Trash
   }
   prefix =
   separator = .
   type = private
}
passdb {
   args = cache_key=%u webmail=127.0.0.1
   driver = vpopmail
}
plugin {
   quota = maildir:ignore=Trash
   quota_rule = ?:storage=0
}
protocols = imap pop3
service imap-login {
   process_limit = 300
   process_min_avail = 5
   service_count = 0
}
service pop3-login {
   service_count = 0
}
ssl_cert = /var/qmail/control/servercert.pem
ssl_key = /var/qmail/control/servercert.pem
userdb {
   args = cache_key=%u quota_template=quota_rule=*:backend=%q
   driver = vpopmail
}
protocol imap {
   imap_capability = IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE 
SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN 
NAMESPACE UIDP LUS LIST-EXTENDED I18NLEVEL=1 ESEARCH ESORT SEARCHRES WITHIN 
CONTEXT=SEARCH LIST-STATUS
   imap_client_workarounds = delay-newmail
   mail_max_userip_connections = 0
   mail_plugins =  quota imap_quota
}
protocol pop3 {
   pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
   pop3_fast_size_lookups = yes
   pop3_lock_session = yes
}



Also, how many SM users are there, and how many IMAP that are not SM?


All users (about 94 total) have access to Squirrelmail. Of those 94,
most only sign in maybe once a week, if that, and 27 accounts would
only rarely sign in to Squirrelmail - usually when out of office.
Non-SM IMAP - the 27 accounts that I already mentioned - will
eventually all be on non-SM IMAP but five or six are currently still
on POP3.




I don't notice a problem here off hand. I am curious to know how you 
came up with the imap_capability parameters, given that they're not in 
the stock config. Same goes for the mailbox sections. BL, should these 
be included in the stock QMT configuration perhaps?


This problem is a bit mysterious, given that some users appear to be ok, 
yet this one user is problematic. In your original post, you mentioned 
haging for several seconds. What's several? I'm wondering if there's 
some (unexpected) data that's causing a problem, especially given the 
apparent disparity with quota that you also mentioned. I think I'd dig 
around in that area to see what turns up.


--
-Eric 'shubes'


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com