Re: [qmailtoaster] Re: Anyone tried Sogo?

2011-03-17 Thread Martin Waschbuesch
Sogo indeed supports tls (and ssl) login using plain auto.

Martin

Von meinem iPhone gesendet

Am 17.03.2011 um 17:55 schrieb Eric Shubert :

> On 03/17/2011 09:44 AM, Bharath Chari wrote:
>> On 03/17/2011 09:37 PM, Eric Shubert wrote:
>>> On 03/17/2011 08:52 AM, Bharath Chari wrote:
>>>> On 03/17/2011 07:42 PM, Carlos Herrera Polo wrote:
>>>>> Sogo looks excelent I should install from RPM or sources ??
>>>>> We have to make a lot of changes ?? Or not ??... Qmailtoaster is a
>>>>> great MTA... and groupware software is a plus
>>>>> 
>>>>> 2011/3/17 Martin Waschbuesch >>>> <mailto:mar...@waschbuesch.de>>
>>>>> 
>>>>> Hi guys,
>>>>> 
>>>>> I have successfully installed sogo on my toaster, but there are
>>>>> some issues I still need to work on:
>>>>> 
>>>>> - Auth-backend is ldap and I failed terribly at any attempt to
>>>>> have more than one mail domain reflected in the ldap tree
>>>>> - i had to manually set up the ldap tree to reflect that one domain
>>>>> 
>>>>> Luckily, it still solves my immediate problem as I had a
>>>>> requirement to offer CalDAV & CardDAV support. Works like a charm!
>>>>> 
>>>>> >>>> I don't even know what language(s) sogo's written in. I'm
>>>>> guessing
>>>>> >>>> the authentication part (at least) is c/c++, but it could be
>>>>> >>>> something else. Would someone like to find out?
>>>>> >>>>
>>>>> >>> Should not be to difficult to do this, even a view might do
>>>>> the trick..
>>>>> >>> Sogo is written in Objective-C btw..
>>>>> >>>
>>>>> >>> Will do some tests soon..
>>>>> >>>
>>>>> >>> JP
>>>>> >>>
>>>>> >> My thought (after my earlier post), was to rig up a view in
>>>>> MySQL with
>>>>> >> appropriate field names, so as not to mess around with sogo
>>>>> code. Should
>>>>> >> be doable in a single domain situation. Will run tests after I
>>>>> get sogo
>>>>> >> set up, and post results.
>>>>> >>
>>>>> >> Bharath
>>>>> >>
>>>>> 
>>>> I had a doubt that Sogo may not support md5crypt, which is how the
>>>> passwords are stored in the vpopmail database. It looks like that is the
>>>> case.
>>>> 
>>>> See this link:
>>>> 
>>>> http://mail.opengroupware.org/pipermail/sogo/2010-February/005083.html
>>>> 
>>>> I haven't found any later references that say that sogo supports
>>>> md5crypt, so it looks like the sogo code WILL have to be patched for
>>>> authentication against the vpopmail mysql database. Please note that the
>>>> patch in the link may be against an earlier release.
>>>> 
>>>> Bharath
>>> 
>>> Does sogo support plain login with TLS/SSL? If so, that should work.
>>> 
>>> While patching sogo is probably more attractive than patching
>>> vpopmail, perhaps we should make a request to have vpopmail support
>>> whatever it is that sogo is using. (I'm guessing digest-md5).
>>> 
>> An _ugly_ workaround would be to use stunnel. Doesn't make too much
>> sense on localhost though, does it? So, cleartext from a trusted
>> (localhost) connection may be the simplest way to achieve this. Initial
>> thoughts only, so don't hold it against me :)
>> 
>> Bharath
>> 
>> -
> 
> I don't have a problem using plain login w/ TLS. In fact, I would use TLS 
> with localhost as well (just so I know it works because I'd likely move it to 
> a separate host at some point).
> 
> As long as TLS (or SSL, but I prefer TLS) is used, plain logins are ok, as 
> passwords are not sent in clear text over the wire this way.
> 
> The only problem I see with plain logins is that passwords are stored in 
> clear text. I don't necessarily recommend this, and it can be a problem in 
> some situations. Changing this policy though is a bigger change, and should 
> be addressed on its own. Personally, I wouldn'

Re: [qmailtoaster] Re: Anyone tried Sogo?

2011-03-17 Thread Martin Waschbuesch
Hi guys,

I have successfully installed sogo on my toaster, but there are some issues I 
still need to work on:

- Auth-backend is ldap and I failed terribly at any attempt to have more than 
one mail domain reflected in the ldap tree
- i had to manually set up the ldap tree to reflect that one domain

Luckily, it still solves my immediate problem as I had a requirement to offer 
CalDAV & CardDAV support. Works like a charm!

Martin

PS: SOGo is completely written (apart from the Web-portion) in Objective-C 
using the GNUStep environment. Apple has excellent documentation on Objective-C 
as has the GNUStep project.

--
"I am fond of pigs. Dogs look up to us. Cats look down on us. Pigs treat us as 
equals."

Winston Churchill

Am 15.03.2011 um 23:15 schrieb Eric Shubert:

> On 03/15/2011 03:09 PM, Bharath Chari wrote:
>> On 03/15/2011 08:20 PM, Jean-Paul van de Plasse wrote:
>>> On 15 mrt 2011, at 15:47, Eric Shubert wrote:
>>> 
 On 03/15/2011 07:21 AM, Bharath Chari wrote:
> On 03/15/2011 07:39 PM, Eric Shubert wrote:
>> Can sogo not use mysql for authentication?
>> 
>> Worst case, I would think you could run them side-by-side with
>> separate user definitions. Would just need to maintain user
>> definitions in 2 different places.
>> 
> Anyone up for trying this? I'll try it out in a few days.
> 
> http://andries.filmer.nl/kb/Scalable-Open-Groupware-Org-SOGo/124#Configure%20SOGo%20to%20use%20MySQL
> 
> 
> 
> Bharath
> 
> -
> 
 I'm sure this would work. It's only slightly better than using ldap
 though, as a separate table/database appears to be required.
 
 I'd rather modify the sogo source to obtain the authentication
 fields/values from the vpopmail database. Should be doable, but the
 ease of doing so will depend on how well the code is written. Perhaps
 if we were able to patch an option for vpopmail into sogo, they'd
 include it in the package.
 
 I don't even know what language(s) sogo's written in. I'm guessing
 the authentication part (at least) is c/c++, but it could be
 something else. Would someone like to find out?
 
>>> Should not be to difficult to do this, even a view might do the trick..
>>> Sogo is written in Objective-C btw..
>>> 
>>> Will do some tests soon..
>>> 
>>> JP
>>> 
>> My thought (after my earlier post), was to rig up a view in MySQL with
>> appropriate field names, so as not to mess around with sogo code. Should
>> be doable in a single domain situation. Will run tests after I get sogo
>> set up, and post results.
>> 
>> Bharath
>> 
>> -
> 
> Thanks, Bharath. I'm eager to hear your results.
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: POP3 Authentication on CentOS 5.5 64Bit

2010-11-18 Thread Martin Waschbuesch

Hi Kevin,

removing softlimit is not a good idea as it is one of the security features 
around qmail. Please rather try setting the softlimit higher than before in 
order to find the limit you need to run stuff.
The limit you have looks too low to me. Just compiling the source package 
with '--with fedora_1164 ' on its own is not the recommended way, I guess. 
What you need is the download and install scripts in their x64 version. As 
far as I recall, the x86_64 version sets a higher softlimit by default. I am 
unsure if there are other differences (e.g. in the code for instance), but 
that may well be.
At any rate, if it works without softlimit, it will also work with a 
sufficiently high softlimit, which I recommend.


Martin

-Ursprüngliche Nachricht- 
From: Kevin Qiu

Sent: Thursday, November 18, 2010 11:37 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: POP3 Authentication on CentOS 5.5 64Bit

Hello Martin,

I removed the softlimit, it works.

#exec /usr/bin/softlimit -m 4800 \
exec /usr/bin/tcpserver -v -R -c 200 0 110 \
/var/qmail/bin/qmail-popup $HOSTNAME \
$PASSPROG /var/qmail/bin/qmail-pop3d Maildir 2>&1

Kevin

于 2010年11月18日 17:25, Kevin Qiu 写道:

Hello Martin,

I used 'rpmbuild --rebuild --with fedora_1164 packages*'

I compared run scripts of  pop3 and pop3-ssl , they are different. The 
pop-ssl script doesn't include 'PASSPROG="/home/vpopmail/bin/vchkpw"'; and 
so dose imap and imap-ssl.


And the smtp which it works, its scripts include 'REQUIRE_AUTH=0',  but 
smtp-ssl and submisson doesn't work, their scripts include 
'REQUIRE_AUTH=1'


pop3/run
#!/bin/sh
PASSPROG="/home/vpopmail/bin/vchkpw"
HOSTNAME=`hostname --fqdn`
exec /usr/bin/softlimit -m 4800 \
/usr/bin/tcpserver -v -R -c 200 0 110 \
/var/qmail/bin/qmail-popup $HOSTNAME \
$PASSPROG /var/qmail/bin/qmail-pop3d Maildir 2>&1


#!/bin/sh
HOSTNAME=`hostname --fqdn`
rm -rf "./env/*";
cat /etc/courier/pop3d-ssl | /usr/bin/envconv
exec /usr/bin/envdir ./env/ \
/usr/bin/softlimit -m 4800 \
/usr/bin/tcpserver -v -R -H -l $HOSTNAME 0 995 \
/usr/bin/couriertls -server -tcpd \
/usr/sbin/pop3login \
/usr/bin/pop3d Maildir 2>&1




于 2010年11月18日 16:56, Martin Waschbüsch 写道:

Ps: did you use the 64bit specific packages to install the toaster?

Von meinem iPhone gesendet

Am 18.11.2010 um 09:00 schrieb Kevin Qiu:


Hello Erik,

I had built the version 5.4.32 of vpopmail, and upgraded it. It has same 
errors with pop3.  I don't know how to fix them.


I'd like to work on 64bit Linux. But it doesn't work well. There are 
some errors below.


telnet localhost 587

@40004ce4d4cb1b7f67e4 tcpserver: ok 18614 
mail.foxitsoftware.com:127.0.0.1:587 :127.0.0.1::52021
@40004ce4d4cb1b962c04 /var/qmail/bin/qmail-smtpd: error while 
loading shared libraries: libselinux.so.1: failed to map segment from 
shared object: Cannot allocate memory


cat /var/qmail/supervise/submission/run |grep softlimit
exec /usr/bin/softlimit -m 4800 \

It looks same error when telnet localhost 465, but 25 work fine.

@40004ce4c31b390f4eb4 tcpserver: ok 17788 
mail.foxitsoftware.com:127.0.0.1:465 :127.0.0.1::36508
@40004ce4c31b3918fb44 /var/qmail/bin/qmail-smtpd: error while 
loading shared libraries: libmysqlclient.so.16: failed to map segment 
from shared object: Cannot allocate memory


cat /var/qmail/supervise/smtp-ssl/run |grep softlimit
exec /usr/bin/softlimit -m 6400 \

free -m
 total   used   free sharedbuffers 
cached
Mem:  7997   1409   6587  0 47 
824

-/+ buffers/cache:537   7459
Swap:10239  0  10239

When I use mail client to connect pop3, there is an error. It can not be 
found in the logs.


/home/vpopmail/bin/vchkpw:error while loading shared 
libraries:libselinux.so.1:failed to map segment from shared object:

cannot allocate memory

The others ports (25, 143, 993, 995) look well. I can send and receive 
email.


Kevin

于 2010年11月18日 14:16, Kevin Qiu 写道:

Hello Erik,

I'd like try the new package. The old version doesn't work under 64bit 
Linux. Where could I download it?


Kevin

于 2010年11月12日 18:58, Eric Shubert 写道:

TTBOMK the plan is presently to jump to vpopmail 5.5 with QMTv2.

Going from 5.4.32 from 5.4.17 would be nice. It involves a database 
change, which qtp-convert is already able to handle.


I believe that Jake's too busy to take this on. If someone would like 
to update the spec file and package an SRPM, I expect that Jake would 
entertain putting it up on the site if/when people have tested it out.


Anyone care to take this on?


-

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
-

Re: [qmailtoaster] Re: re Invalid rcpthosts client email addresses sending emails to other rcpthosts clients

2010-11-17 Thread Martin Waschbuesch

I'd like to see SPF in spamdyke.

Martin

-Ursprüngliche Nachricht- 
From: Eric Shubert

Sent: Wednesday, November 17, 2010 3:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: re Invalid rcpthosts client email addresses 
sending emails to other rcpthosts clients


That's a problem all right. I don't expect that using the submission
port would fix that either. The spfbehavior file should be separate for
the submission port to make that happen.

Ultimately, SPF should not be enforced for authenticated users. There
has been some talk about implementing SPF in spamdyke (I've been a
proponent of this). Perhaps we can nudge Sam and get it implemented
there. That would solve the problem.

--
-Eric 'shubes'

On 11/17/2010 01:44 AM, Tony White wrote:

Hi Martin,
Found a big downside to it! Clients using their mobiles
for email sending can no longer send from their mobile
isp smtp server.
Bugger thought I had it beat as well.


On 17/11/2010 6:43 PM, Martin Waschbuesch wrote:

Cool! Let us know whether it has any impact. The upside to this is
that it will be harder for spammers to use your addresses to send to
other domains as well - although it is of course possible to spoof the
ip, too.
At any rate I hope this works out for you!

Martin

-Ursprüngliche Nachricht- From: Tony White
Sent: Wednesday, November 17, 2010 7:41 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] re Invalid rcpthosts client email
addresses sending emails to other rcpthosts clients

Hi Martin,
Thank you for that explanation. I had used the old spf web utility
to create the record you saw.
It would appear that that site is now the OLD one and the new
one does in fact do things differently now.
Thank you for your help, I have changed a single domain
as of now to test it before changing them all.

The site http://old.openspf.org/wizard.html, if you have time to look
at it,
does offer only the ~all option and if I had read the final page fully it
proves you are absolutely correct with your assessment.

Thanks again.


On 17/11/2010 5:24 PM, Martin Waschbuesch wrote:

Hi Tony,

OK, this *might* be something you should change. The way to read the
record is this:

The listed IP addresses are authorized to send mail for that domain.
All others are not.

HOWEVER, the '~all' tells recipients to treat this as a soft fail and
is supposed to be used for testing purposes. A lot of recipients will
accept mail from other hosts under this condition.

You might consider replacing it with this '-all'.

Fyi an excerpt from wikipedia:

+ for a PASS result. This can be omitted; e.g., +mx is the same as mx.
? for a NEUTRAL result interpreted like NONE (no policy).
~ for SOFTFAIL, a debugging aid between NEUTRAL and FAIL. Typically,
messages that return a SOFTFAIL are accepted but tagged.
- for FAIL, the mail should be rejected (see below).

Martin

-Ursprüngliche Nachricht- From: Tony White
Sent: Wednesday, November 17, 2010 1:46 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] re Invalid rcpthosts client email
addresses sending emails to other rcpthosts clients

Hi Michael,
A dig reveals this...

ycs.com.au. 7200 IN TXT "v=spf1 a mx ip4:111.223.234.146
ip4:125.168.12.213 ip4:125.168.254.24 ~all"


On 16/11/2010 6:07 PM, Martin Waschbüsch wrote:

What's the SPF record say? It should list the IPs and some options...

Von meinem iPhone gesendet

Am 16.11.2010 um 07:26 schrieb Tony White:


Hello Martin,
Thank you for your reply! I will investigate domainkeys now but the
SPF has been implemented for some time now...


On 16/11/2010 5:11 PM, Martin Waschbüsch wrote:

SPF and domainkeys can be used to do this. The policy for SPF
could be set to designating only your ip as valid and the
skim/domainkeys policy be set to 'all messages are signed'.
That should guarantee that your server will correctly identify
these mails as forgery. However, check your rules in tcp.smtp - if
one of your clients spams due to virus etc., that might bypass all
protections depending on the settings...

Von meinem iPhone gesendet

Am 16.11.2010 um 04:43 schrieb Tony White:


Hello,
Is there a way of verifying the From address that claims to be
from one of the domains
hosted here is a valid email address? There has been an increase
of spam using one or
more the domains hosted on my servers.
I am still searching the web but no searches found yet!

--

best wishes
Tony White


-

Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them today!
-

Please visit qmailtoaster.com for the latest news, updates, and
packages.

Re: [qmailtoaster] re Invalid rcpthosts client email addresses sending emails to other rcpthosts clients

2010-11-16 Thread Martin Waschbuesch
Cool! Let us know whether it has any impact. The upside to this is that it 
will be harder for spammers to use your addresses to send to other domains 
as well - although it is of course possible to spoof the ip, too.

At any rate I hope this works out for you!

Martin

-Ursprüngliche Nachricht- 
From: Tony White

Sent: Wednesday, November 17, 2010 7:41 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] re Invalid rcpthosts client email addresses 
sending emails to other rcpthosts clients


Hi Martin,
  Thank you for that explanation. I had used the old spf web utility
to create the record you saw.
  It would appear that that site is now the OLD one and the new
one does in fact do things differently now.
  Thank you for your help,  I have changed a single domain
as of now to test it before changing them all.

The site http://old.openspf.org/wizard.html, if you have time to look at it,
does offer only the ~all option and if I had read the final page fully it
proves you are absolutely correct with your assessment.

  Thanks again.


On 17/11/2010 5:24 PM, Martin Waschbuesch wrote:

Hi Tony,

OK, this *might* be something you should change. The way to read the 
record is this:


The listed IP addresses are authorized to send mail for that domain.
All others are not.

HOWEVER, the  '~all' tells recipients to treat this as a soft fail and is 
supposed to be used for testing purposes. A lot of recipients will accept 
mail from other hosts under this condition.


You might consider replacing it with this '-all'.

Fyi an excerpt from wikipedia:

+ for a PASS result. This can be omitted; e.g., +mx is the same as mx.
? for a NEUTRAL result interpreted like NONE (no policy).
~ for SOFTFAIL, a debugging aid between NEUTRAL and FAIL. Typically, 
messages that return a SOFTFAIL are accepted but tagged.

- for FAIL, the mail should be rejected (see below).

Martin

-Ursprüngliche Nachricht- From: Tony White
Sent: Wednesday, November 17, 2010 1:46 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] re Invalid rcpthosts client email addresses 
sending emails to other rcpthosts clients


Hi Michael,
  A dig reveals this...

ycs.com.au. 7200IN  TXT "v=spf1 a mx 
ip4:111.223.234.146 ip4:125.168.12.213 ip4:125.168.254.24 ~all"



On 16/11/2010 6:07 PM, Martin Waschbüsch wrote:

What's the SPF record say? It should list the IPs and some options...

Von meinem iPhone gesendet

Am 16.11.2010 um 07:26 schrieb Tony White:


Hello Martin,
  Thank you for your reply! I will investigate domainkeys now but the
SPF has been implemented for some time now...


On 16/11/2010 5:11 PM, Martin Waschbüsch wrote:
SPF and domainkeys can be used to do this. The policy for SPF could be 
set to designating only your ip as valid and the skim/domainkeys policy 
be set to 'all messages are signed'.
That should guarantee that your server will correctly identify these 
mails as forgery. However, check your rules in tcp.smtp - if one of 
your clients spams due to virus etc., that might bypass all protections 
depending on the settings...


Von meinem iPhone gesendet

Am 16.11.2010 um 04:43 schrieb Tony White:


Hello,
  Is there a way of verifying the From address that claims to be from 
one of the domains
hosted here is a valid email address? There has been an increase of 
spam using one or

more the domains hosted on my servers.
  I am still searching the web but no searches found yet!

--

best wishes
  Tony White


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.
 If you need professional help with your setup, contact them 
today!

-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and 
installations.
   If you need professional help with your setup, contact them 
today!

-
  Please visit qmailtoaster.com for the latest news, updates, and 
packages.


   To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsu

Re: [qmailtoaster] re Invalid rcpthosts client email addresses sending emails to other rcpthosts clients

2010-11-16 Thread Martin Waschbuesch

Hi Tony,

OK, this *might* be something you should change. The way to read the record 
is this:


The listed IP addresses are authorized to send mail for that domain.
All others are not.

HOWEVER, the  '~all' tells recipients to treat this as a soft fail and is 
supposed to be used for testing purposes. A lot of recipients will accept 
mail from other hosts under this condition.


You might consider replacing it with this '-all'.

Fyi an excerpt from wikipedia:

+ for a PASS result. This can be omitted; e.g., +mx is the same as mx.
? for a NEUTRAL result interpreted like NONE (no policy).
~ for SOFTFAIL, a debugging aid between NEUTRAL and FAIL. Typically, 
messages that return a SOFTFAIL are accepted but tagged.

- for FAIL, the mail should be rejected (see below).

Martin

-Ursprüngliche Nachricht- 
From: Tony White

Sent: Wednesday, November 17, 2010 1:46 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] re Invalid rcpthosts client email addresses 
sending emails to other rcpthosts clients


Hi Michael,
  A dig reveals this...

ycs.com.au. 7200IN  TXT "v=spf1 a mx 
ip4:111.223.234.146 ip4:125.168.12.213 ip4:125.168.254.24 ~all"



On 16/11/2010 6:07 PM, Martin Waschbüsch wrote:

What's the SPF record say? It should list the IPs and some options...

Von meinem iPhone gesendet

Am 16.11.2010 um 07:26 schrieb Tony White:


Hello Martin,
  Thank you for your reply! I will investigate domainkeys now but the
SPF has been implemented for some time now...


On 16/11/2010 5:11 PM, Martin Waschbüsch wrote:
SPF and domainkeys can be used to do this. The policy for SPF could be 
set to designating only your ip as valid and the skim/domainkeys policy 
be set to 'all messages are signed'.
That should guarantee that your server will correctly identify these 
mails as forgery. However, check your rules in tcp.smtp - if one of your 
clients spams due to virus etc., that might bypass all protections 
depending on the settings...


Von meinem iPhone gesendet

Am 16.11.2010 um 04:43 schrieb Tony White:


Hello,
  Is there a way of verifying the From address that claims to be from 
one of the domains
hosted here is a valid email address? There has been an increase of 
spam using one or

more the domains hosted on my servers.
  I am still searching the web but no searches found yet!

--

best wishes
  Tony White


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and 
installations.
   If you need professional help with your setup, contact them 
today!

-
  Please visit qmailtoaster.com for the latest news, updates, and 
packages.


   To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






--
best wishes
  Tony White

Yea Computing Services
http://www.ycs.com.au
4 The Crescent
Yea
Victoria
Australia 3717

Telephone No's
VIC : 03 5797 3344
VIC : 03 9008 5614
TAS : 03 6107 9099
NT  : 08 8921 4049
SA  : 08 7123 0847
NSW : 02 8014 5547
QLD : 07 3123 6647
WA  : 08 6365 2199
FAX : 03 9008 5610 (FAX2Email)
FAX : 03 5797-3288



IMPORTANT NOTICE

This communication including any file attachments is intended solely for
the use of the individual or entity to whom it is addressed. If you are
not the intended recipient, or the person responsible for delivering
this communication to the intended recipient, please immediately notify
the sender by email and delete the original transmission and its
contents. Any unauthorised use, dissemination, forwarding, printing or
copying of this communication including file attachments is prohibited.
It is your responsibility to scan this communication including any file
attachments for viruses and other defects. To the extent permitted by
law, Yea Computing Services and its associates will not be liable for
any loss or damage arising in any way from this communication including
any file attachments.


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

Re: [qmailtoaster] Re: Maximim message size

2010-11-16 Thread Martin Waschbuesch
Hm... the wiki says it counts bytes as stored on the disk - so I guess that 
is in encoded format and thus I'd have to use 30M in my example...

Can anyone confirm?

-Ursprüngliche Nachricht- 
From: Martin Waschbuesch

Sent: Tuesday, November 16, 2010 9:24 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Maximim message size

One question I always had about it is this: does it set the limit for the
actual mail as it is being transmitted (e.g. with base64 encoded attachment)
or for the decoded mail+message parts?
Because a typical scenario is that a client asks to be able to send 20M
attachments. due to encoding, do I have to set databytes to (roughly) 1.5 x
20M = 30M or to 20M?

Martin

-Ursprüngliche Nachricht- 
From: Jake Vickers

Sent: Tuesday, November 16, 2010 8:37 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Maximim message size

On 11/15/2010 01:53 PM, Eric Shubert wrote:

On 11/15/2010 11:40 AM, Maxwell Smart wrote:

What's the maximum recommended message size?  Is there any negative
impact to making it unlimited?

CJ



I don't know of a way to make it unlimited. I don't think you'd want to do 
that anyhow. There are always limits, whether they're specified or not. ;)


You can however make it fairly large. I've made it up to 50M in some 
cases. The drawback is that scan times on submissions of large messages 
can result in timeouts. You should increase your timeout settings (server 
and clients) if you bump it up much.




In the databytes file, if you enter a 0 (zero) this will set the max
message size to no limit.
The default is 20971520, or about 20M. There are some concerns with this
and the main issue comes into play in that you have no idea how large of
an email the remote will accept. If you set this to 100M, you could for
example, send me a 100M email, but I will bounce it due to it being over
20M in size. Different providers have different limits. I know at one
time years ago Hotmail was set to 6M, then they upped it to 10M. Not
sure what their current is.

We have some good information on the wiki on the databytes file:
http://wiki.qmailtoaster.com/index.php/Databytes


-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and
packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Maximim message size

2010-11-16 Thread Martin Waschbuesch
One question I always had about it is this: does it set the limit for the 
actual mail as it is being transmitted (e.g. with base64 encoded attachment) 
or for the decoded mail+message parts?
Because a typical scenario is that a client asks to be able to send 20M 
attachments. due to encoding, do I have to set databytes to (roughly) 1.5 x 
20M = 30M or to 20M?


Martin

-Ursprüngliche Nachricht- 
From: Jake Vickers

Sent: Tuesday, November 16, 2010 8:37 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Maximim message size

On 11/15/2010 01:53 PM, Eric Shubert wrote:

On 11/15/2010 11:40 AM, Maxwell Smart wrote:

What's the maximum recommended message size?  Is there any negative
impact to making it unlimited?

CJ



I don't know of a way to make it unlimited. I don't think you'd want to do 
that anyhow. There are always limits, whether they're specified or not. ;)


You can however make it fairly large. I've made it up to 50M in some 
cases. The drawback is that scan times on submissions of large messages 
can result in timeouts. You should increase your timeout settings (server 
and clients) if you bump it up much.




In the databytes file, if you enter a 0 (zero) this will set the max
message size to no limit.
The default is 20971520, or about 20M. There are some concerns with this
and the main issue comes into play in that you have no idea how large of
an email the remote will accept. If you set this to 100M, you could for
example, send me a 100M email, but I will bounce it due to it being over
20M in size. Different providers have different limits. I know at one
time years ago Hotmail was set to 6M, then they upped it to 10M. Not
sure what their current is.

We have some good information on the wiki on the databytes file:
http://wiki.qmailtoaster.com/index.php/Databytes


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Disable CHKUSER

2010-11-13 Thread Martin Waschbuesch

I meant chkuser mailing list... I am not completely awake it seems...

-Ursprüngliche Nachricht- 
From: Martin Waschbuesch

Sent: Saturday, November 13, 2010 3:04 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Disable CHKUSER

Hi all,

I wonder about this one... First of all, I agree with Jake that MX
verification is rather important.
However, the problem at hand is also a nuisance: Why should one bad address
out of 15 in the list cause all mails to not be delivered?

I guess the solution here would rather be looking at some way to solve that
issue and leave the rest as it is, meaning that all good addresses on a list
should be properly sent the mail and all addresses that fail MX check should
not go out.

At any rate, disabling a complete check because the check does not do what
it should is a poor solution. Rather fix the real issue...

So, can someone isolate where that problem has its root and then we could
figure out how to address the underlying issue? My guess would be someone
would have to either look at the code for checkuser or take it up with the
vpopmail mailing list?

I'd be happy to attempt looking into this...

Martin


-Ursprüngliche Nachricht- 
From: Jake Vickers

Sent: Saturday, November 13, 2010 2:10 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Disable CHKUSER

On 11/12/2010 07:15 PM, Michael Colvin wrote:



On 11/12/2010 12:38 PM, Michael Colvin wrote:

OK…  So, I’ve got some clients that send mails out to affiliates of
theirs via rather large distribution lists. When at least one, maybe
more, of those addresses are bad, they get the “Sorry, can’t find a
valid MX for rcpt domain” bounce that, basically is bouncing the whole
message, so even the valid recipients don’t get the e-mail.

I’ve searched the archives, particularly:
http://www.mail-archive.com/qmailtoaster-

list%40qmailtoaster.com/msg27066.html,

and haven’t really found anything that helps…Unless I’m doing something
wrong…

I’ve tried removing the references to CHKUSER_RCPT_MX in tcp.smtp, then
issued qmailctl cdb, same issue. I tried setting CHKUSER_RCPT_MX=””, and
CHKUSER_RCPT-MX=”0”… Nothing. Tried setting
CHKUSER_STARTING_VARIABLE=”NONE”…No change.

I’ve read where the default CHKUSER config is to have these commented
out, but it appears that this isn’t the QMT default, per the linked
thread above.

How do I go about commenting these out in CHKUSER’s config, and then
“Rebuild” QMT? I installed from the CentOS 5 ISO.

I simply don’t want to check the MX for any e-mail on these particular
servers…I’d rather the client get bounces for those e-mails, so they can
clean up their lists.



http://wiki.qmailtoaster.com/index.php/Chkuser
;)

--
-Eric 'shubes'



Thanks Eric...Not sure how I missed that...I know I dug around on the Wiki
during my searches...

Tossing my .02 into the earlier thread that I linked too, I would agree 
with

your comment that these settings should be something that are "Enabled" in
tcp.smtp...  That would be more "User" friendly.

Another item for Jake's already full "to-do" list.  :-)



And also one I disagree with. We've had some discussion (and argument)
on this topic several times.
If you look at the number of downloads versus questions concerning
modifying chkuser, one out of every (roughly) 5000 people wants to
modify it (and almost ALWAYS to work around an issue such as this -
laziness on someone elses part). Now this number is small,
comparatively. If the setting gets added to the tcp.smtp file, now we're
exposing those other 4999 people to potentially turning an option they
want on off, or stopping mail flow, from a typo in their tcp.smtp file.
For the record, I am completely against changing this option. I think a
MX check SHOULD be mandatory, for many reasons.

Now, to stop the flame war that will ensue, the new version will use the
default chkuser settings. All other options will need to be enabled in
the tcp.smtp file or recompiled in.

-
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and
packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If yo

Re: [qmailtoaster] Re: Disable CHKUSER

2010-11-13 Thread Martin Waschbuesch

Hi all,

I wonder about this one... First of all, I agree with Jake that MX 
verification is rather important.
However, the problem at hand is also a nuisance: Why should one bad address 
out of 15 in the list cause all mails to not be delivered?


I guess the solution here would rather be looking at some way to solve that 
issue and leave the rest as it is, meaning that all good addresses on a list 
should be properly sent the mail and all addresses that fail MX check should 
not go out.


At any rate, disabling a complete check because the check does not do what 
it should is a poor solution. Rather fix the real issue...


So, can someone isolate where that problem has its root and then we could 
figure out how to address the underlying issue? My guess would be someone 
would have to either look at the code for checkuser or take it up with the 
vpopmail mailing list?


I'd be happy to attempt looking into this...

Martin


-Ursprüngliche Nachricht- 
From: Jake Vickers

Sent: Saturday, November 13, 2010 2:10 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Disable CHKUSER

On 11/12/2010 07:15 PM, Michael Colvin wrote:



On 11/12/2010 12:38 PM, Michael Colvin wrote:

OK…  So, I’ve got some clients that send mails out to affiliates of
theirs via rather large distribution lists. When at least one, maybe
more, of those addresses are bad, they get the “Sorry, can’t find a
valid MX for rcpt domain” bounce that, basically is bouncing the whole
message, so even the valid recipients don’t get the e-mail.

I’ve searched the archives, particularly:
http://www.mail-archive.com/qmailtoaster-

list%40qmailtoaster.com/msg27066.html,

and haven’t really found anything that helps…Unless I’m doing something
wrong…

I’ve tried removing the references to CHKUSER_RCPT_MX in tcp.smtp, then
issued qmailctl cdb, same issue. I tried setting CHKUSER_RCPT_MX=””, and
CHKUSER_RCPT-MX=”0”… Nothing. Tried setting
CHKUSER_STARTING_VARIABLE=”NONE”…No change.

I’ve read where the default CHKUSER config is to have these commented
out, but it appears that this isn’t the QMT default, per the linked
thread above.

How do I go about commenting these out in CHKUSER’s config, and then
“Rebuild” QMT? I installed from the CentOS 5 ISO.

I simply don’t want to check the MX for any e-mail on these particular
servers…I’d rather the client get bounces for those e-mails, so they can
clean up their lists.



http://wiki.qmailtoaster.com/index.php/Chkuser
;)

--
-Eric 'shubes'



Thanks Eric...Not sure how I missed that...I know I dug around on the Wiki
during my searches...

Tossing my .02 into the earlier thread that I linked too, I would agree 
with

your comment that these settings should be something that are "Enabled" in
tcp.smtp...  That would be more "User" friendly.

Another item for Jake's already full "to-do" list.  :-)



And also one I disagree with. We've had some discussion (and argument)
on this topic several times.
If you look at the number of downloads versus questions concerning
modifying chkuser, one out of every (roughly) 5000 people wants to
modify it (and almost ALWAYS to work around an issue such as this -
laziness on someone elses part). Now this number is small,
comparatively. If the setting gets added to the tcp.smtp file, now we're
exposing those other 4999 people to potentially turning an option they
want on off, or stopping mail flow, from a typo in their tcp.smtp file.
For the record, I am completely against changing this option. I think a
MX check SHOULD be mandatory, for many reasons.

Now, to stop the flame war that will ensue, the new version will use the
default chkuser settings. All other options will need to be enabled in
the tcp.smtp file or recompiled in.

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@

Re: [qmailtoaster] iptables firewall issue

2010-11-12 Thread Martin Waschbuesch
Hi Helmut,

I wonder if it has something to do with the way that CentOS was installed: The 
ISO starts out with the firewall being disabled and in addition to the 
configuration options that the firewall.sh script adds, I am not sure what 
method is used to enable the service to run at startup (though it is as easy as 
using ‘service iptables start’ to start it once and using ‘chkconfig iptables 
on’ to enable it to run on startup).
My iptables config had been installed during initial setup and though that is 
just a hunch, I believe that there may be a difference between having the 
system installed with the firewall enabled and enabling it afterwards (though 
that should not be the case?).
Also, the latest ISO is not using the latest CentOS – did you do any yum update 
stuff to bring it up to date? If so, did you have those problems before and 
after or just after the update?
I am sure we’ll get to the bottom of this eventually. I never used the ISO and 
I never had firewall trouble (other than when I configured it the wrong way  
myself).
Steve, did you use the ISO or install using the wiki instructions?

I am sort of hoping you used the ISO so that we might have something to focus 
our research on!

Martin
From: Helmut Fritz 
Sent: Friday, November 12, 2010 6:55 PM
To: qmailtoaster-list@qmailtoaster.com 
Subject: RE: [qmailtoaster] iptables firewall issue

i have the same issue with mine, and the -restore command was in my rc.local.  
i have attached my anaconda-ks.cfg.  i installed from QMT.iso, not sure if that 
matters.  maybe this helps.

Helmut



From: Martin Waschbuesch [mailto:mar...@waschbuesch.de] 
Sent: Friday, November 12, 2010 9:21 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] iptables firewall issue


Hi Scott,

Perhaps if you still have the install kickstart file for the CentOS 
installation in /root/anaconda-ks.cfg we could compare the settings?
If it is running CentOS that is...

Martin

From: Scott Hughes 
Sent: Friday, November 12, 2010 3:44 PM
To: qmailtoaster-list@qmailtoaster.com 
Subject: Re: [qmailtoaster] iptables firewall issue

Martin,

The problem turned out to be in the rc.local file. It was loading the basic QMT 
firewall settings instead of firewalll setting in the iptables file.  Once I 
commented out that line in the rc.local file, it worked perfect (survived the 
reboot process).

I have two QMT boxes that had the same issue. I still have figured out why it 
is set up this way.  There is no point in running the firewall.sh script if it 
is just going to be ignored the next time the system reboots.

Scott


2010/11/11 Martin Waschbuesch 

  Hi Scott,

  The important file for iptables which will be loaded at startup is in  
  /etc/sysconfig/iptables

  It is basically the same information you have in the firewall script, but in 
a slightly different syntax. Perhaps you need to check if that file is on the 
system and has valid content?

  It should look something like this:

  # Generated by iptables-save v1.3.5 on Thu Sep  9 17:00:22 2010
  *filter
  :INPUT DROP [0:0]
  :FORWARD DROP [0:0]
  :OUTPUT DROP [12:1444]
  -A INPUT -i eth0 -f -j DROP
  -A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j DROP
  -A INPUT -s 10.0.0.0/255.0.0.0 -i ! lo -j DROP
  -A INPUT -s 172.16.0.0/255.240.0.0 -i ! lo -j DROP
  -A INPUT -s 192.168.0.0/255.255.0.0 -i ! lo -j DROP
  -A INPUT -s 224.0.0.0/240.0.0.0 -i ! lo -j DROP
  -A INPUT -s 240.0.0.0/240.0.0.0 -i ! lo -j DROP
  -A INPUT -s 0.0.0.0/255.0.0.0 -i ! lo -j DROP
  -A INPUT -s 255.255.255.255 -i ! lo -j DROP
  -A INPUT -s 169.254.0.0/255.255.0.0 -i ! lo -j DROP
  -A INPUT -i lo -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 22 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 110 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 113 -j REJECT --reject-with tcp-reset
  -A INPUT -p tcp -m tcp --dport 143 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 443 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 587 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 993 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 995 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 5667 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  -A INPUT -p icmp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
  -A INPUT -m state --state NEW -j REJECT --reject-with icmp-port-unreachable
  -A OUTPUT -o lo -j ACCEPT
  -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT
  -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT
  -A OUTPUT -p icmp -m state --state NEW,RELATED

Re: [qmailtoaster] iptables firewall issue

2010-11-12 Thread Martin Waschbuesch
Hi Scott,

Perhaps if you still have the install kickstart file for the CentOS 
installation in /root/anaconda-ks.cfg we could compare the settings?
If it is running CentOS that is...

Martin

From: Scott Hughes 
Sent: Friday, November 12, 2010 3:44 PM
To: qmailtoaster-list@qmailtoaster.com 
Subject: Re: [qmailtoaster] iptables firewall issue

Martin,

The problem turned out to be in the rc.local file. It was loading the basic QMT 
firewall settings instead of firewalll setting in the iptables file.  Once I 
commented out that line in the rc.local file, it worked perfect (survived the 
reboot process).

I have two QMT boxes that had the same issue. I still have figured out why it 
is set up this way.  There is no point in running the firewall.sh script if it 
is just going to be ignored the next time the system reboots.

Scott


2010/11/11 Martin Waschbuesch 

  Hi Scott,

  The important file for iptables which will be loaded at startup is in  
  /etc/sysconfig/iptables

  It is basically the same information you have in the firewall script, but in 
a slightly different syntax. Perhaps you need to check if that file is on the 
system and has valid content?

  It should look something like this:

  # Generated by iptables-save v1.3.5 on Thu Sep  9 17:00:22 2010
  *filter
  :INPUT DROP [0:0]
  :FORWARD DROP [0:0]
  :OUTPUT DROP [12:1444]
  -A INPUT -i eth0 -f -j DROP
  -A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j DROP
  -A INPUT -s 10.0.0.0/255.0.0.0 -i ! lo -j DROP
  -A INPUT -s 172.16.0.0/255.240.0.0 -i ! lo -j DROP
  -A INPUT -s 192.168.0.0/255.255.0.0 -i ! lo -j DROP
  -A INPUT -s 224.0.0.0/240.0.0.0 -i ! lo -j DROP
  -A INPUT -s 240.0.0.0/240.0.0.0 -i ! lo -j DROP
  -A INPUT -s 0.0.0.0/255.0.0.0 -i ! lo -j DROP
  -A INPUT -s 255.255.255.255 -i ! lo -j DROP
  -A INPUT -s 169.254.0.0/255.255.0.0 -i ! lo -j DROP
  -A INPUT -i lo -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 22 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 110 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 113 -j REJECT --reject-with tcp-reset
  -A INPUT -p tcp -m tcp --dport 143 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 443 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 587 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 993 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 995 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -p tcp -m tcp --dport 5667 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
  -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  -A INPUT -p icmp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
  -A INPUT -m state --state NEW -j REJECT --reject-with icmp-port-unreachable
  -A OUTPUT -o lo -j ACCEPT
  -A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT
  -A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT
  -A OUTPUT -p icmp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
  COMMIT
  # Completed on Thu Sep  9 17:00:22 2010

  From: Scott Hughes 
  Sent: Thursday, November 11, 2010 5:40 PM
  To: qmailtoaster-list@qmailtoaster.com 
  Subject: [qmailtoaster] iptables firewall issue

  All, 

  I continue to have strange firewall issues.  The iptables firewall is acting 
normal EXCEPT when the system gets restarted.  Then it is like it goes back to 
some default setting and I have log into the console and manually run the 
firewall.sh script.  The script automatically saves the settings with 'service 
iptables save' and I have run this manually as well. Still having the same 
issue.

  Anyone out there have any ideas that might save my firewall settings though 
restarts/reboots?

  Thanks,
  Scott



Re: [qmailtoaster] iptables firewall issue

2010-11-11 Thread Martin Waschbuesch
Hi Scott,

The important file for iptables which will be loaded at startup is in  
/etc/sysconfig/iptables

It is basically the same information you have in the firewall script, but in a 
slightly different syntax. Perhaps you need to check if that file is on the 
system and has valid content?

It should look something like this:

# Generated by iptables-save v1.3.5 on Thu Sep  9 17:00:22 2010
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [12:1444]
-A INPUT -i eth0 -f -j DROP
-A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j DROP
-A INPUT -s 10.0.0.0/255.0.0.0 -i ! lo -j DROP
-A INPUT -s 172.16.0.0/255.240.0.0 -i ! lo -j DROP
-A INPUT -s 192.168.0.0/255.255.0.0 -i ! lo -j DROP
-A INPUT -s 224.0.0.0/240.0.0.0 -i ! lo -j DROP
-A INPUT -s 240.0.0.0/240.0.0.0 -i ! lo -j DROP
-A INPUT -s 0.0.0.0/255.0.0.0 -i ! lo -j DROP
-A INPUT -s 255.255.255.255 -i ! lo -j DROP
-A INPUT -s 169.254.0.0/255.255.0.0 -i ! lo -j DROP
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 113 -j REJECT --reject-with tcp-reset
-A INPUT -p tcp -m tcp --dport 143 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 587 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 993 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 995 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5667 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m state --state NEW -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p icmp -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Thu Sep  9 17:00:22 2010

From: Scott Hughes 
Sent: Thursday, November 11, 2010 5:40 PM
To: qmailtoaster-list@qmailtoaster.com 
Subject: [qmailtoaster] iptables firewall issue

All, 

I continue to have strange firewall issues.  The iptables firewall is acting 
normal EXCEPT when the system gets restarted.  Then it is like it goes back to 
some default setting and I have log into the console and manually run the 
firewall.sh script.  The script automatically saves the settings with 'service 
iptables save' and I have run this manually as well. Still having the same 
issue.

Anyone out there have any ideas that might save my firewall settings though 
restarts/reboots?

Thanks,
Scott


Re: [qmailtoaster] Re: vpopmail field problem

2010-10-15 Thread Martin Waschbuesch
Several packages depend on vpopmail and recompiling it may require you to 
recompile the other packages, too? E.g. qmailadmin - don't know about 
others. Also, I do not know how vqadmin and qcontrol work. If they use the 
shell commands vpopmail contains then all should be well, but if they access 
the database directly, they might depend on the structure of that database.


Don't know if that helps, but it might be a starting point for debugging.

Martin

- Original Message - 
From: "Eric Shubert" 

To: 
Sent: Friday, October 15, 2010 4:48 PM
Subject: [qmailtoaster] Re: vpopmail field problem



On 10/15/2010 02:56 AM, Digital Instruments wrote:

Greetings list,

I have recompiled vpopmail without the damn pw_clear_passwd. I've used
the standard script cnt5064-install-script.sh and modify it like so:

if [ $PROCEED = "y" ]; then
rpmbuild --rebuild --with $DISTRO --with disable-clear-passwd $VPOP
rpm -Uvh /usr/src/$BDIR/RPMS/$ARCH/vpopmail-toaster*.rpm
fi



the result seems not good:

Preparing... ### [100%]
package vpopmail-toaster-5.4.17-1.3.7.x86_64 is already installed
file /home/vpopmail/bin/clearopensmtp from install of
vpopmail-toaster-5.4.17-1.3.7.x86_64 conflicts with file from package
vpopmail-toaster-5.4.17-1.3.7.x86_64
(many other lines like that)
1:vpopmail-toaster ### [ 50%]

I've also try another method:

rpm -Uhv vpopmail-toaster*.src.rpm
edited the vpopmail-toaster.spec (usually in /usr/src/redhat/SPECS/),
change line 729 from "--enable-clear-passwd" to "--disable-clear-passwd"
with a text editor.
rpmbuild -bs vpopmail-toaster.spec

that time it went to 100%
1:vpopmail-toaster ### [ 100%]

but unfortunately it doesn't work. If i try to drop the pw_clear_passwd
field from the vpopmail database i can't login with any account.
If i try to create a new account ... error (if the field is drop) or it
write the password in clear if the field isn't drop.

Anyone can help me, please?
Thanks!! A.

-


The first method (--with) does not work. The spec file needs to recognize 
these options, which it doesn't.


The second method (editing the .spec file) is correct. After building the 
rpm from source though, you need to install the binary rpm that was 
produced by the rpmbuild run:

# rpm -Uvh --replacepkgs vpopmail-toaster.*.rpm
Be sure you're in the directory where you built the binary rpm when you do 
this.


--
-Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)

   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and 
packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Dovecot stats...

2010-09-24 Thread Martin Waschbuesch
Hi all,

Does anyone know of a good way to gather IMAP traffic statistics for dovecot? 
Ideally per domain... ;-)

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: quotas...

2010-09-24 Thread Martin Waschbuesch
Ah, that is good to know! :-)

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 24.09.2010 um 18:34 schrieb Eric Shubert:

> Martin Waschbuesch wrote:
>> Hi all,
>> Is my assumption correct whereby if a domain is set to quota = 8192M and its 
>> users are set to NOQUOTA that there would still be an overquota message for 
>> any of those users if the total for the domain has reached the limit?
>> Martin
>> --
>> Martin Waschbüsch
>> IT-Dienstleistungen
>> Lautensackstr. 16
>> 80687 München
>> Telefon: +49 89 57005708
>> Fax: +49 89 57868023
>> Mobil: +49 170 2189794
>> mar...@waschbuesch.de
>> http://martin.waschbuesch.de
>> -
> 
> Quotas are broken in vpopmail 5.4. They *might* be fixed as of 5.4.32 (beta). 
> They are reportedly fixed (due to major rework) in 5.5. I wouldn't waste any 
> time working wiht quotas in 5.4. I simply use NOQUOTA for everyone, and 
> monitor disk space otherwise.
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] quotas...

2010-09-24 Thread Martin Waschbuesch
Hi all,

Is my assumption correct whereby if a domain is set to quota = 8192M and its 
users are set to NOQUOTA that there would still be an overquota message for any 
of those users if the total for the domain has reached the limit?

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: sa-stats

2010-09-23 Thread Martin Waschbuesch
Try this:

http://martin.waschbuesch.de/sa-stats

I fixed the code to check for NUM_EMAIL, NUM_SPAM and NUM_HAM  > 0 in the stats 
generation - that was indeed missing...

Cheers,

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 23.09.2010 um 04:19 schrieb Eric Shubert:

> Phil Leinhauser wrote:
>> I have just started into tuning spamassassin on my toaster these past days.  
>> I see that sa-stats gets an error:
>> Illegal division by zero at /opt/qmailtoaster-plus/bin/sa-stats line
>> 292.
>> This looks like it was addressed a couple of years ago but it appears to be 
>> back again.  The error goes away if there is >0 spam as expected.  I have 2 
>> sa-stats, one in /usr/sbin and one in /opt/qmailtoaster-plus/bin and they 
>> both display this error.
>> It's not a problem I just thought I would bring it to your attention for the 
>> next update.
>> Thanks,
>> Phil
> 
> Phil,
> Please create a ticket for this at qtp.qmailtoaster.com.
> Thanks.
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Oversized message notifications

2010-09-14 Thread Martin Waschbuesch
I did get the following error:


Delivery to the following recipient failed permanently:

m...@collotype.com.au

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient 
domain. We recommend contacting the other email provider for further 
information about the cause of this error. The error that the other server 
returned was: 552 552 sorry, that message size exceeds my databytes limit 
(#5.3.4) (state 18).


Right now, I do not know why you would not get one... Sorry. I am sure Eric or 
Jake would have some pointers for you.

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 14.09.2010 um 09:37 schrieb Mike Canty:

> Martin,
>   I followed the installation documentation I have run for a few years
> now, it is basically the wiki information, copied across to a document.  A
> quick look at the documentation
> (http://wiki.qmailtoaster.com/index.php/CentOS_5_QmailToaster_Install) is
> pretty much exactly what I do.  This is the original script I ran and found
> it very helpful
> (http://howtoforge.org/how-to-install-qmailtoaster-centos-5.3). 
> 
> I can see the "oversized-reject" notice in the "/var/qmail/smtp/*" logs, but
> there is no response back to the sender.  I tried to do the same, that is
> send one to myself, but all I saw was the log (see below).
> 
> @40004c8f0dbd2556a1c4 qmail-smtpd: oversized-reject:
> MAILFROM: RCPTTO:
> 
> What information could I provide you to give an understanding of where I
> have gone wrong?
> 
> Cheers
> 
> -Original Message-
> From: Martin Waschbuesch [mailto:mar...@waschbuesch.de] 
> Sent: Tuesday, 14 September 2010 4:50 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] Oversized message notifications
> 
> Hi Mike,
> 
> QMT should already be doing that.
> 
> I have a 20 MB limit and tried to send myself some oversized attachment
> using a gmail account I have:
> 
> Delivery to the following recipient failed permanently:
> 
>mar...@waschbuesch.de
> 
> Technical details of permanent failure:
> Google tried to deliver your message, but it was rejected by the recipient
> domain. We recommend contacting the other email provider for further
> information about the cause of this error. The error that the other server
> returned was: 552 552 sorry, that message size exceeds my databytes limit
> (#5.3.4) (state 18).
> 
> Note that I also run CentOS 5.5 (x86_64).
> 
> If you do not get such reject messages, please let us know more about your
> configuration - did you follow the installation instructions on the Wiki 10%
> or did you customize anything?
> 
> Thanks,
> 
> Martin
> 
> --
> Martin Waschbüsch
> IT-Dienstleistungen
> Lautensackstr. 16
> 80687 München
> 
> Telefon: +49 89 57005708
> Fax: +49 89 57868023
> Mobil: +49 170 2189794
> mar...@waschbuesch.de
> http://martin.waschbuesch.de
> 
> Am 14.09.2010 um 08:27 schrieb Mike Canty:
> 
>> To All,
>>  Is it possible to send a "rejected" message notification is a sender
>> has sent an Email with an attachment that exceeds the allowable limit?
>> 
>> I am running QMT on CentOS 5.5
>> 
>> Mike Canty
>> 
>> 
>> 
> 
> -
>> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
>>   Vickers Consulting Group offers Qmailtoaster support and installations.
>> If you need professional help with your setup, contact them today!
>> 
> 
> -
>>Please visit qmailtoaster.com for the latest news, updates, and
> packages.
>> 
>> To unsubscribe, e-mail:
> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> 
> -
> Please visit qmailtoaster.com for the latest news, updates, and
> packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailto

Re: [qmailtoaster] Oversized message notifications

2010-09-14 Thread Martin Waschbuesch
Just sent you a large test message - did that go through or was it rejected?

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 14.09.2010 um 09:37 schrieb Mike Canty:

> Martin,
>   I followed the installation documentation I have run for a few years
> now, it is basically the wiki information, copied across to a document.  A
> quick look at the documentation
> (http://wiki.qmailtoaster.com/index.php/CentOS_5_QmailToaster_Install) is
> pretty much exactly what I do.  This is the original script I ran and found
> it very helpful
> (http://howtoforge.org/how-to-install-qmailtoaster-centos-5.3). 
> 
> I can see the "oversized-reject" notice in the "/var/qmail/smtp/*" logs, but
> there is no response back to the sender.  I tried to do the same, that is
> send one to myself, but all I saw was the log (see below).
> 
> @40004c8f0dbd2556a1c4 qmail-smtpd: oversized-reject:
> MAILFROM: RCPTTO:
> 
> What information could I provide you to give an understanding of where I
> have gone wrong?
> 
> Cheers
> 
> -Original Message-
> From: Martin Waschbuesch [mailto:mar...@waschbuesch.de] 
> Sent: Tuesday, 14 September 2010 4:50 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] Oversized message notifications
> 
> Hi Mike,
> 
> QMT should already be doing that.
> 
> I have a 20 MB limit and tried to send myself some oversized attachment
> using a gmail account I have:
> 
> Delivery to the following recipient failed permanently:
> 
>mar...@waschbuesch.de
> 
> Technical details of permanent failure:
> Google tried to deliver your message, but it was rejected by the recipient
> domain. We recommend contacting the other email provider for further
> information about the cause of this error. The error that the other server
> returned was: 552 552 sorry, that message size exceeds my databytes limit
> (#5.3.4) (state 18).
> 
> Note that I also run CentOS 5.5 (x86_64).
> 
> If you do not get such reject messages, please let us know more about your
> configuration - did you follow the installation instructions on the Wiki 10%
> or did you customize anything?
> 
> Thanks,
> 
> Martin
> 
> --
> Martin Waschbüsch
> IT-Dienstleistungen
> Lautensackstr. 16
> 80687 München
> 
> Telefon: +49 89 57005708
> Fax: +49 89 57868023
> Mobil: +49 170 2189794
> mar...@waschbuesch.de
> http://martin.waschbuesch.de
> 
> Am 14.09.2010 um 08:27 schrieb Mike Canty:
> 
>> To All,
>>  Is it possible to send a "rejected" message notification is a sender
>> has sent an Email with an attachment that exceeds the allowable limit?
>> 
>> I am running QMT on CentOS 5.5
>> 
>> Mike Canty
>> 
>> 
>> 
> 
> -
>> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
>>   Vickers Consulting Group offers Qmailtoaster support and installations.
>> If you need professional help with your setup, contact them today!
>> 
> 
> -
>>Please visit qmailtoaster.com for the latest news, updates, and
> packages.
>> 
>> To unsubscribe, e-mail:
> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> 
> -
> Please visit qmailtoaster.com for the latest news, updates, and
> packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
> 
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
&g

Re: [qmailtoaster] Oversized message notifications

2010-09-14 Thread Martin Waschbuesch
Hi Mike,

QMT should already be doing that.

I have a 20 MB limit and tried to send myself some oversized attachment using a 
gmail account I have:

Delivery to the following recipient failed permanently:

mar...@waschbuesch.de

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient 
domain. We recommend contacting the other email provider for further 
information about the cause of this error. The error that the other server 
returned was: 552 552 sorry, that message size exceeds my databytes limit 
(#5.3.4) (state 18).

Note that I also run CentOS 5.5 (x86_64).

If you do not get such reject messages, please let us know more about your 
configuration - did you follow the installation instructions on the Wiki 10% or 
did you customize anything?

Thanks,

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 14.09.2010 um 08:27 schrieb Mike Canty:

> To All,
>   Is it possible to send a "rejected" message notification is a sender
> has sent an Email with an attachment that exceeds the allowable limit?
> 
> I am running QMT on CentOS 5.5
> 
> Mike Canty
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] How to add the Certificate for mutil-domain

2010-09-07 Thread Martin Waschbuesch
As I said earlier, there is a patch that will allow qmail to use a different 
certificate based on the hostname. However, I have no experience in using it. 
But it seems to me to be the best solution (especially when you have but one IP 
address).
The patch is explicitly mentioned by the author of the original TSL patch for 
qmail, F. Vermeulen. (His site is here: http://inoa.net/qmail-tls/)

The patch is discussed here:
http://bugs.gentoo.org/show_bug.cgi?id=94257

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 07.09.2010 um 13:22 schrieb Jesús Arnáiz:

> As far as I know, the server only uses one certificate so you should:
> -Use only one certificate
> -Use different servers (different IP address and/or port) for each
> certificate.
> 
> 
> El 07/09/2010 13:10, Pak Ogah escribió:
>> I am afraid I dont know the answer of it.
>> I hope someone else can answer it for you
>> 
>> 
>> On 02-Sep-10 9:51, Kevin Qiu wrote:
>>>  Hi Pak,
>>> 
>>> Thank you very much, Pak. I understood. I want to make sure that if I
>>> had already buy 2 single cert(the files like,domain1.key domain1.crt
>>> domain2.key domain2), I can't install them, can I?
>>> 
>>> Kevin
>>> 
>>> 于 2010/9/1 17:06, Pak Ogah 写道:
>>> 
 the steps are the same on 
 http://wiki.qmailtoaster.com/index.php/Certificate
 but on step 4 you need to get SSL Certificate that can host multiple domain
 like the one on http://www.godaddy.com/ssl/ssl-certificates.aspx?ci=8979
 
 
 On 01-Sep-10 13:28, Kevin Qiu wrote:
 
>  Hi Pak,
> 
> I mean I don't know how to intall.
> 
> 
> cat servercert.key servercert.crt>  /var/qmail/control/servercert.pem
> 
> if 2 certs , how can I install them, are they all in one file
> '/var/qmail/control/servercert.pem ' ?
> 
> 
> Kevin
> 
> 于 2010/8/31 18:42, Pak Ogah 写道:
> 
> 
>> just my 2 cents
>> I think you should buy SSL Certificate that can hold multi-domain and
>> install that certificate
>> 
>> On 31-Aug-10 12:31, Kevin Qiu wrote:
>> 
>> 
>>>  Hello,
>>> 
>>> I want to add the 2nd domain cert in same real server. How can I do 
>>> that?
>>> 
>>> Kevin
>>> 
>>> 于 2010/8/30 23:09, Kevin Qiu 写道:
>>> 
>>> 
>>> 
  Hello list,
 
 I had read the help in this URL
 http://wiki.qmailtoaster.com/index.php/Certificate Step 5)
 
 But I want to know how to add the Certificate for mutil-domains like
 that. The virtuel-mutl-domains were crated on the same server.
 
 Could any body help me that.
 
 
 
>> 
>> 
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group 
>> (www.vickersconsulting.com)
>> Vickers Consulting Group offers Qmailtoaster support and installations.
>>   If you need professional help with your setup, contact them today!
>> -
>>  Please visit qmailtoaster.com for the latest news, updates, and 
>> packages.
>> 
>>   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 



Re: [qmailtoaster] Can't connect port 465 & 587

2010-09-01 Thread Martin Waschbuesch
In that case, when you had installed the 64 bit variant - you know these are 
separate packages? For comiling the 32 bit ones as 64 bit might well lead to 
some unexpected behavior.

But in the meantime: glad it worked with the 32 bit install..

Von meinem iPhone gesendet

Am 02.09.2010 um 06:07 schrieb Kevin Qiu :

> 
> 
> Hi Martin,
> 
> Thank you for your feedback.
> 
> There is no error when connect smtp port 25.
> 
> I try to chanage the softlimit to double size(12800), and restart qmail, 
> but there are still the same errors when I telnet these ports.
> 
> I had install fedora 13 32bit. The QMT is running well.
> 
> Kevin
> 
> 
> 
> 于 2010/9/1 18:44, Martin Waschbuesch 写道:
>> Kevin,
>> 
>> I think Jake did not say you needed to add memory, merely to give the smtp 
>> processes more memory by raising the softlimit for them.
>> These processes use a softlimit partly as a security precaution.
>> 
>> In /var/qmail/supervie/smtp/run
>> check what you have at the bottom. My file looks thus:
>> 
>> exec /usr/bin/softlimit -m 6400 \
>> /usr/bin/tcpserver -v -R -h -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
>> -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
>> $RBLSMTPD $BLACKLIST $SMTPD $VCHKPW /bin/true 2>&1
>> 
>> The value after the -m in the first line of this block describes the 
>> softlimit in bytes meaning that the qmail-smtp process has a soft memory 
>> limit of a bit more than 60M. Perhaps you need to increase this.
>> 
>> Same is true for the submission port. E.g. might be in 
>> /var/qmail/supervise/submission/run.
>> 
>> hope that helps to clarify!
>> 
>> Martin
>> 
>> --
>> Martin Waschbüsch
>> IT-Dienstleistungen
>> Lautensackstr. 16
>> 80687 München
>> 
>> Telefon: +49 89 57005708
>> Fax: +49 89 57868023
>> Mobil: +49 170 2189794
>> mar...@waschbuesch.de
>> http://martin.waschbuesch.de
>> 
>> Am 01.09.2010 um 07:45 schrieb Kevin Qiu:
>> 
>>> Hello Jake,
>>> 
>>> Thank you very much for your feedback.
>>> 
>>> free -m
>>> total used free shared buffers cached
>>> Mem: 3950 3808 141 0 151 2690
>>> -/+ buffers/cache: 967 2983
>>> Swap: 7838 0 7838
>>> 
>>> Did you mean that I need add more RAM?
>>> 
>>> I had run QMT in Fedora 13 32bit without any errors.
>>> 
>>> Are you sure that I need more memory and the errors can be fixed, or I
>>> need install 32bit linux.
>>> 
>>> Kevin
>>> 
>>> 
>>> 
>>> 于 2010/8/31 23:50, Jake Vickers 写道:
>>>> On 08/31/2010 03:21 AM, Kevin Qiu wrote:
>>>>> Hi list,
>>>>> 
>>>>> QMT on Fedora 13 x86_64
>>>>> 
>>>>> Build rpm with `rpmbuild --rebuild --with fedora_1164 
>>>>> name-version.src.rpm`
>>>>> 
>>>>> telnet localhost 25
>>>>> 
>>>>> Trying 127.0.0.1...
>>>>> Connected to localhost.
>>>>> Escape character is '^]'.
>>>>> 220 mail.domain.com - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP
>>>>> 
>>>>> telnet localhost 465
>>>>> 
>>>>> Trying 127.0.0.1...
>>>>> Connected to localhost.
>>>>> Escape character is '^]'.
>>>>> Connection closed by foreign host.
>>>>> 
>>>>> tail /var/log/qmail/smtp-ssl/current
>>>>> @40004c7ca2eb0ed8490c /var/qmail/bin/qmail-smtpd: error while
>>>>> loading shared libraries: libmysqlclient.so.16: failed to map segment
>>>>> from shared object: Cannot allocate memory
>>>>> 
>>>>> telnet localhost 587
>>>>> 
>>>>> Trying 127.0.0.1...
>>>>> Connected to localhost.
>>>>> Escape character is '^]'.
>>>>> Connection closed by foreign host.
>>>>> 
>>>>> tail /var/log/qmail/submission/current
>>>>> 
>>>>> @40004c7ca6f301d6062c /var/qmail/bin/qmail-smtpd: error while
>>>>> loading shared libraries: libselinux.so.1: failed to map segment from
>>>>> shared object: Cannot allocate memory
>>>> Increase the softlimits in the run files for the submission/SSL ports.
>>>> How much memory do you have in this system? I thought I had tuned this
>>>> for systems with around 4

Re: [qmailtoaster] Can't connect port 465 & 587

2010-09-01 Thread Martin Waschbuesch
Kevin,

I think Jake did not say you needed to add memory, merely to give the smtp 
processes more memory by raising the softlimit for them.
These processes use a softlimit partly as a security precaution.

In /var/qmail/supervie/smtp/run
check what you have at the bottom. My file looks thus:

exec /usr/bin/softlimit -m 6400 \
 /usr/bin/tcpserver -v -R -h -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
 $RBLSMTPD $BLACKLIST $SMTPD $VCHKPW /bin/true 2>&1

The value after the -m in the first line of this block describes the softlimit 
in bytes meaning that the qmail-smtp process has a soft memory limit of a bit 
more than 60M. Perhaps you need to increase this.

Same is true for the submission port. E.g. might be in 
/var/qmail/supervise/submission/run.

hope that helps to clarify!

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 01.09.2010 um 07:45 schrieb Kevin Qiu:

> Hello Jake,
> 
> Thank you very much for your feedback.
> 
> free -m
> total used free shared buffers cached
> Mem: 3950 3808 141 0 151 2690
> -/+ buffers/cache: 967 2983
> Swap: 7838 0 7838
> 
> Did you mean that I need add more RAM?
> 
> I had run QMT in Fedora 13 32bit without any errors.
> 
> Are you sure that I need more memory and the errors can be fixed, or I
> need install 32bit linux.
> 
> Kevin
> 
> 
> 
> 于 2010/8/31 23:50, Jake Vickers 写道:
>> On 08/31/2010 03:21 AM, Kevin Qiu wrote:
>>> Hi list,
>>> 
>>> QMT on Fedora 13 x86_64
>>> 
>>> Build rpm with `rpmbuild --rebuild --with fedora_1164 name-version.src.rpm`
>>> 
>>> telnet localhost 25
>>> 
>>> Trying 127.0.0.1...
>>> Connected to localhost.
>>> Escape character is '^]'.
>>> 220 mail.domain.com - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP
>>> 
>>> telnet localhost 465
>>> 
>>> Trying 127.0.0.1...
>>> Connected to localhost.
>>> Escape character is '^]'.
>>> Connection closed by foreign host.
>>> 
>>> tail /var/log/qmail/smtp-ssl/current
>>> @40004c7ca2eb0ed8490c /var/qmail/bin/qmail-smtpd: error while
>>> loading shared libraries: libmysqlclient.so.16: failed to map segment
>>> from shared object: Cannot allocate memory
>>> 
>>> telnet localhost 587
>>> 
>>> Trying 127.0.0.1...
>>> Connected to localhost.
>>> Escape character is '^]'.
>>> Connection closed by foreign host.
>>> 
>>> tail /var/log/qmail/submission/current
>>> 
>>> @40004c7ca6f301d6062c /var/qmail/bin/qmail-smtpd: error while
>>> loading shared libraries: libselinux.so.1: failed to map segment from
>>> shared object: Cannot allocate memory
>> Increase the softlimits in the run files for the submission/SSL ports.
>> How much memory do you have in this system? I thought I had tuned this
>> for systems with around 4g of RAM.
>> 
>> 
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group 
>> (www.vickersconsulting.com)
>>Vickers Consulting Group offers Qmailtoaster support and installations.
>>  If you need professional help with your setup, contact them today!
>> -
>> Please visit qmailtoaster.com for the latest news, updates, and packages.
>> 
>>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] How to add the Certificate for mutil-domain

2010-08-31 Thread Martin Waschbuesch
I recommend looking at Alin Nastac's patch found here: 
http://bugs.gentoo.org/show_bug.cgi?id=94257. It will allow the use of an 
environment variable to determine the certificate to use.

Note that this is not part of the stock toaster and would require recompiling 
qmail. I have no idea if this works in conjunction with the other patches 
already in use in QMT.
If you give it a try, it would be nice if you could document that on the wiki. 
;-)

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Fax: +49 89 57868023
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 30.08.2010 um 17:09 schrieb Kevin Qiu:

> Hello list,
> 
> I had read the help in this URL
> http://wiki.qmailtoaster.com/index.php/Certificate Step 5)
> 
> But I want to know how to add the Certificate for mutil-domains like
> that. The virtuel-mutl-domains were crated on the same server.
> 
> Could any body help me that.
> 
> 
> Kevin
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Inconsistency qmailadmin /vqadmin / qcontrol

2010-08-27 Thread Martin Waschbuesch
Hi all,

I noticed a glitch that I wanted to let you guys know about:

The different tools you can use to create / edit mailboxes do not have 
identical behavior when it comes to passwords.

Imagine a user with the password (without quotes) '12345&'

Here are the results for the individual tools (adding the user and then looking 
at the result in the database - again ignore the quotes):

vadduser:
'12345&'


qcontrol:
'12345'


vqadmin
'12345'


qmailadmin:
'12345&'


Of course doing this with vadduser, you need to enclose the password with 
single quotes. But as you can see: qmailadmin and the command line tools work, 
vqadmin and qcontrol show the glitch (probably could be solved by adapting how 
the input string is handled/escaped).

It may just be a minor nuisance, but I think perhaps this should be the same 
behavior for all front ends.

Martin

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: rpmforge / Centos 5.5

2010-08-24 Thread Martin Waschbuesch
Hi Steve,

There no longer is any problem. It seems that when I posted this, I had 
experienced the result of the initial rpmforge update (2.16.4-1). I installed 
it again yesterday (apparently 2.16.4-2) and there are no problems whatsoever.

Thanks for the hint! :-)

--
Martin Waschbüsch
IT-Dienstleistungen
Lautensackstr. 16
80687 München

Telefon: +49 89 57005708
Mobil: +49 170 2189794
mar...@waschbuesch.de
http://martin.waschbuesch.de

Am 03.08.2010 um 22:02 schrieb Steve Huff:

> 
> On Aug 3, 2010, at 3:43 PM, Eric Shubert wrote:
> 
>> So what's the bottom line solution? Wait for the patch to be applied to 
>> rpmforge version?
> 
> 
> i'm still not clear what exactly the problem is (that's why i asked for 
> Martin's mrtg version).  the patch is already in the current RPMforge package 
> (2.16.4-2).
> 
> -steve
> 
> --
> If this were played upon a stage now, I could condemn it as an improbable 
> fiction. - Fabian, Twelfth Night, III,v
> http://five.sentenc.es
> 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] spamdyke

2010-08-04 Thread Martin Waschbuesch
Hi Noel,

Am 04.08.2010 um 18:33 schrieb Noel Rivera (Border Less):

> Hello list I have a question.
>  
> I have a qmailtoaster server with Spamdyke and with 8 diferent domains.
>  
> It’s possible to have one of this eight domains without Spamdyke and with 
> other configurations?
>  

You can have different configuration options per domain, yes.
See: http://www.spamdyke.org/documentation/FAQ.html#FEATURE8
I do not think you can completely disable spamdyke for individual domains, 
though.

Hope this helps,

Martin

--
“Any society that would give up a little liberty to gain a little security will 
deserve neither and lose both.”

Benjamin Franklin









Re: [qmailtoaster] Re: rpmforge / Centos 5.5

2010-08-03 Thread Martin Waschbuesch
Yes, and until then stick to original CentOS repo version.

Martin

Am 03.08.2010 um 21:43 schrieb Eric Shubert:

> So what's the bottom line solution? Wait for the patch to be applied to 
> rpmforge version?
> -- 
> -Eric 'shubes'
> 
> Martin Waschbuesch wrote:
>> I re-updated mrtg and googled the resulting error only to find the same info 
>> Steve had just posted. So my question is 'solved' as in I know where this 
>> comes from. Dunno why I did not find that bug post earlier, though. Memo to 
>> myself: more thorough research needed before asking other people! :-)
>> Thanks a bunch Steve & Eric.
>> Martin
>> Am 03.08.2010 um 20:00 schrieb Eric Shubert:
>>> Martin Waschbuesch wrote:
>>>> Hi all,
>>>> I don't know if anyone else has experienced this, but when you use 
>>>> rpmforge (which I rely on for a lot of perl & php modules) and update mrtg 
>>>> using the rpmforge package, the qmailmrtg-toaster stuff does not seem to 
>>>> work anymore. Instead, the scripts that generate the graphs complained 
>>>> about a missing module.
>>>> Now, I reverted to the previous (official centos) version and explicitly 
>>>> skip this package, but perhaps someone else has encountered it and knows 
>>>> why it happens and can be fixed? E.g. might it be that newer mrtg releases 
>>>> are no longer compatible? etc.
>>>> Martin
>>>> PS: If need be, I can again 'break' mrtg and produce the exact error 
>>>> message.
>>>> --
>>>> “Any society that would give up a little liberty to gain a little security 
>>>> will deserve neither and lose both.”
>>>> Benjamin Franklin
>>> I don't recall seeing anything about this before. This sort of thing is the 
>>> reason that qtp-install-rpmforge installs the rpmforge repo in a disabled 
>>> state though. ;)
>>> 
>>> It be nice to make QMT work either way though. By all means, have at it.
>>> 
>>> What are the differences between the rpmforge and centos versions? Have you 
>>> googled the error message?
>>> 
>>> -- 
>>> -Eric 'shubes'
>>> 
>>> 
>>> -
>>> Qmailtoaster is sponsored by Vickers Consulting Group 
>>> (www.vickersconsulting.com)
>>>  Vickers Consulting Group offers Qmailtoaster support and installations.
>>>If you need professional help with your setup, contact them today!
>>> -
>>>   Please visit qmailtoaster.com for the latest news, updates, and packages.
>>>To unsubscribe, e-mail: 
>>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>> 
>>> 
>> --
>> "It isn't that they can't see the solution. It is that they can't see the 
>> problem."
>> Gilbert K. Chesterton
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group 
>> (www.vickersconsulting.com)
>>Vickers Consulting Group offers Qmailtoaster support and installations.
>>  If you need professional help with your setup, contact them today!
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"If we don't believe in freedom of expression for people we despise, we don't 
believe in it at all. "

Noam Chomsky


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: rpmforge / Centos 5.5

2010-08-03 Thread Martin Waschbuesch
I re-updated mrtg and googled the resulting error only to find the same info 
Steve had just posted. So my question is 'solved' as in I know where this comes 
from. Dunno why I did not find that bug post earlier, though. Memo to myself: 
more thorough research needed before asking other people! :-)

Thanks a bunch Steve & Eric.

Martin

Am 03.08.2010 um 20:00 schrieb Eric Shubert:

> Martin Waschbuesch wrote:
>> Hi all,
>> I don't know if anyone else has experienced this, but when you use rpmforge 
>> (which I rely on for a lot of perl & php modules) and update mrtg using the 
>> rpmforge package, the qmailmrtg-toaster stuff does not seem to work anymore. 
>> Instead, the scripts that generate the graphs complained about a missing 
>> module.
>> Now, I reverted to the previous (official centos) version and explicitly 
>> skip this package, but perhaps someone else has encountered it and knows why 
>> it happens and can be fixed? E.g. might it be that newer mrtg releases are 
>> no longer compatible? etc.
>> Martin
>> PS: If need be, I can again 'break' mrtg and produce the exact error message.
>> --
>> “Any society that would give up a little liberty to gain a little security 
>> will deserve neither and lose both.”
>> Benjamin Franklin
> 
> I don't recall seeing anything about this before. This sort of thing is the 
> reason that qtp-install-rpmforge installs the rpmforge repo in a disabled 
> state though. ;)
> 
> It be nice to make QMT work either way though. By all means, have at it.
> 
> What are the differences between the rpmforge and centos versions? Have you 
> googled the error message?
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"It isn't that they can't see the solution. It is that they can't see the 
problem."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] i have a trouble with open relay

2010-08-03 Thread Martin Waschbuesch
Aren't the xyz:allow lines supposed to be on one line each?

E.g. you would have to do something like:

127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
192.168.58.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="150",CHKUSER_WRONGRCPTLIMIT="10",DKSIGN="/var/qmail/control/domaink

I could be wrong, but that is what I am used to see...

Martin

Am 03.08.2010 um 17:56 schrieb Sergio Enrique Vidal Velasquez:

> Hi friend ,
> 
> ia have a trouble please i ask for your help in this issue.
> 
> My server is on the net 192.168.72.0 and i want make open relay for an 
> application on network  192.168.188.0.
> i try the config of /etc/tcprules.d/tcp.smtp is:
> 
> 127.:allow,RELAYCLIENT="",192.168.58.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="150",CHKUSER_WRONGRCPTLIMIT="10",DKSIGN="/var/qmail/control/domainkeys/%/private"
> 
> 
> and i make the commands:
> 
> qmaictl cdb
> 
> and
> qmailctl restart
> 
> but is not working.
> 
> this config and procedure is correct please help me.
> 
> thank you very much
> 
> Regards.
> 
> Sergio


--
"He who fights with monsters might take care lest he thereby become a monster. 
And if you gaze for long into an abyss, the abyss gazes also into you."

Friedrich Nietzsche


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] rpmforge / Centos 5.5

2010-08-03 Thread Martin Waschbuesch
Hi all,

I don't know if anyone else has experienced this, but when you use rpmforge 
(which I rely on for a lot of perl & php modules) and update mrtg using the 
rpmforge package, the qmailmrtg-toaster stuff does not seem to work anymore. 
Instead, the scripts that generate the graphs complained about a missing module.
Now, I reverted to the previous (official centos) version and explicitly skip 
this package, but perhaps someone else has encountered it and knows why it 
happens and can be fixed? E.g. might it be that newer mrtg releases are no 
longer compatible? etc.

Martin

PS: If need be, I can again 'break' mrtg and produce the exact error message.

--
“Any society that would give up a little liberty to gain a little security will 
deserve neither and lose both.”

Benjamin Franklin








-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] x86_64 install

2010-07-26 Thread Martin Waschbuesch
Glad it worked out!

Am 26.07.2010 um 12:12 schrieb Igor Smitran:

>> Martin wrote:
>> Can you double check the download script you used?
>> For the install script should be named cnt5064-install-script.sh, the deps
>> script cnt5064-deps.sh, etc.
>> I'm saying that because qmail-dk worked for me without a problem on a
>> Centos5.5 64bit system.
>> 
> 
> You are completely right :( I've downloaded wrong scripts/packages. Thank
> you very much. Sorry for making a mess on this list :(
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"I hold it true, whate'er befall;
I feel it, when I sorrow most;
'Tis better to have loved and lost
Than never to have loved at all."

Alfred Lord Tennyson 'In Memoriam'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] x86_64 install

2010-07-26 Thread Martin Waschbuesch

Am 26.07.2010 um 10:25 schrieb Igor Smitran:

>> Hi Igor,
>> 
>> It may be a stupid question, but since you said you had 'the same' 32bit
>> installation...
>> What is the OS and which packages did you download / install?
> 
> CentOS x64
> 
>> 
>> If you re-used your 'old' packages, they might install on 64 bit system
>> (if it has 32bit support enabled), but will not run without problems.
>> Did you use the 64bit-specific packages and recompile?
>> 
> 
> I've used current-download-script.sh to download packages and then
> cnt50-install-script.sh with ARCH=x86_64 to install, completely new setup,
> so, yes, packages were rebuilt for x86_64 arch
> 

Can you double check the download script you used?
For the install script should be named cnt5064-install-script.sh, the deps 
script cnt5064-deps.sh, etc.
I'm saying that because qmail-dk worked for me without a problem on a Centos5.5 
64bit system.

But if everything else is working, I'd suggest you might want to have a look at 
replacing qmail-dk with the method Jake
described in his video on DKIM (it can also take care of Domainkeys) and use 
SpamAssassin for incoming DK checking
as there was discussion on the list a while ago on false positives whith 
regards to DK checking on incoming messages.

Martin

Re: [qmailtoaster] x86_64 install

2010-07-26 Thread Martin Waschbuesch
Hi Igor,

It may be a stupid question, but since you said you had 'the same' 32bit 
installation...
What is the OS and which packages did you download / install?

If you re-used your 'old' packages, they might install on 64 bit system (if it 
has 32bit support enabled), but will not run without problems.
Did you use the 64bit-specific packages and recompile?

Martin

Am 26.07.2010 um 09:51 schrieb Igor Smitran:

> This is my first install on x86_64 platform and i have some issues:
> 
> 1. i had to use much higher softlimit values and i was wondering did
> anyone else had to use values so high:
> imap4 > /usr/bin/softlimit -m 1800
> imap4-ssl > /usr/bin/softlimit -m 3800
> pop3 > /usr/bin/softlimit -m 1800
> pop3-ssl > /usr/bin/softlimit -m 3800
> smtp > /usr/bin/softlimit -m 5000
> submission > /usr/bin/softlimit -m 5000
> 
> 2. qmail-dk is not working, giving error "qmail-smtpd: qq hard reject
> (qmail-dk: Cannot sign message due to invalid message syntax. (#5.3.0)):"
> 
> I have exactly the same 32-bit installation that works without any
> problems, with default softlimit values and without qmail-dk errors.
> Can anyone explain if i am doing something wrong here?
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"Years ago my mother used to say to me, she'd say, 'In this world, Elwood, you 
must be oh so smart or oh so pleasant.' Well, for years I was smart. I 
recommend pleasant."

James Stewart as Elwood P. Dowd in 'Harvey'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Error while running setup.php while installing horde groupware webmail

2010-07-16 Thread Martin Waschbuesch
And of course, if you have any questions, please let me know.

Martin

Am 16.07.2010 um 13:41 schrieb Martin Waschbuesch:

> you can try the script / package I have created for horde on QMT/Centos:
> 
> using svn:
> 
> svn co https://www.waschbuesch.de/svn/horde-toaster/
> 
> to get all the files.
> 
> then execute
> bash install.sh
> 
> works for me. :-)
> 
> Am 16.07.2010 um 12:52 schrieb Scott Hughes:
> 
>> It appears that you have not installed all of the required packages. Please 
>> search this list using the keyword 'horde' and look for my quick and dirty 
>> install guide. Some one else has written a more detailed guide and that one 
>> should show up in your search as well.
>> 
>> Scott
>> 
>> 
>> 
>> 
>> On Jul 16, 2010, at 5:19 AM, "Suhag P Desai"  wrote:
>> 
>>> Hi All,
>>> 
>>>  
>>> 
>>> I have successfully installed qmailtoaster latest version and all the 
>>> module of qmailtoaster are running fine. But I am facing problem while 
>>> running ./scrips/setup.php file during installation of horde groupware 
>>> webmail
>>> 
>>>  
>>> 
>>> Please find below steps which I followed during running of setup.php
>>> 
>>>  
>>> 
>>>  
>>> 
>>> [r...@spd scripts]# ./setup.php
>>> 
>>> Horde Groupware Webmail Edition Configuration Menu
>>> 
>>> (0) Exit
>>> 
>>> (1) Configure database settings
>>> 
>>> (2) Create database or tables
>>> 
>>> (3) Configure administrator settings
>>> 
>>> (4) Update PEAR for a new or changed location
>>> 
>>> (5) Update from an older Horde Groupware Webmail Edition version
>>> 
>>>  
>>> 
>>> Type your choice: 1
>>> 
>>> What database backend should we use? [false]
>>> 
>>> Type your choice: mysql
>>> 
>>>  
>>> 
>>> Request persistent connections? [0]
>>> 
>>> (1) Yes
>>> 
>>> (0) No
>>> 
>>> Type your choice: 0
>>> 
>>>  
>>> 
>>> Username to connect to the database as* [] root
>>> 
>>> Password to connect with [] password
>>> 
>>>  
>>> 
>>> How should we connect to the database? [unix]
>>> 
>>> (unix) UNIX Sockets
>>> 
>>> (tcp) TCP/IP
>>> 
>>> Type your choice: unix
>>> 
>>> Location of UNIX socket []  /var/lib/mysql/mysql.sock
>>> 
>>>  
>>> 
>>> Database name to use* [] horde
>>> 
>>> Internally used charset* [utf-8] utf-8
>>> 
>>> Use SSL to connect to the server? [0]
>>> 
>>> (1) Yes
>>> 
>>> (0) No
>>> 
>>>  
>>> 
>>> Type your choice: 0
>>> 
>>> Certification Authority to use for SSL connections []
>>> 
>>> Split reads to a different server? [false]
>>> 
>>> (false) Disabled
>>> 
>>> (true) Enabled
>>> 
>>>  
>>> 
>>> Type your choice: false
>>> 
>>>  
>>> 
>>> Writing main configuration file
>>> 
>>> PHP Fatal error:  Class 'DOMDocument' not found in 
>>> /usr/share/horde/lib/Horde/DO   
>>>   M.php on line 119
>>> 
>>> Fatal error: Class 'DOMDocument' not found in 
>>> /usr/share/horde/lib/Horde/DOM.php  
>>> on line 119
>>> 
>>> =
>>> 
>>>  
>>> 
>>> My /etc/my.cnf file as per below
>>> 
>>>  
>>> 
>>> [mysqld]
>>> 
>>> datadir=/var/lib/mysql
>>> 
>>> socket=/var/lib/mysql/mysql.sock
>>> 
>>> user=mysql
>>> 
>>> collation_server=utf8_general_ci
>>> 
>>> character_set_server=utf8
>>> 
>>> init_connect="SET NAMES 'utf8'"
>>> 
>>> # Default to using old password format for compatibility with mysql 3.x
>>> 
>>> # clients (those using the mysqlclient10 compatibility package).
>>> 
>>> old_passwords=1
>>> 
>>>  
>>> 
>>> # Disabling symbolic-links is recommended to prevent assorted security 
>>> risks;
>>> 
>>> # to do so, uncomment this line:
>>> 
>>> # symbolic-links=0
>>> 
>>>  
>>> 
>>> [mysqld_safe]
>>> 
>>> log-error=/var/log/mysqld.log
>>> 
>>> pid-file=/var/run/mysqld/mysqld.pid
>>> 
>>>  
>>> 
>>>  
>>> 
>>> [client]
>>> 
>>> default_character_set=utf8
>>> 
>>>  
>>> 
>>>  
>>> 
>>> Please help..
>>> 
>>>  
>>> 
>>> Regards,
>>> 
>>> Suhag Desai
>>> 
>>> Network Engineer
>>> 
> 
> 
> --
> “Majority rule only works if you're also considering individual rights. 
> Because you can't have five wolves and one sheep voting on what to have for 
> supper.”
> 
> Larry Flynt
> 


--
“Any society that would give up a little liberty to gain a little security will 
deserve neither and lose both.”

Benjamin Franklin









Re: [qmailtoaster] Error while running setup.php while installing horde groupware webmail

2010-07-16 Thread Martin Waschbuesch
you can try the script / package I have created for horde on QMT/Centos:

using svn:

svn co https://www.waschbuesch.de/svn/horde-toaster/

to get all the files.

then execute
bash install.sh

works for me. :-)

Am 16.07.2010 um 12:52 schrieb Scott Hughes:

> It appears that you have not installed all of the required packages. Please 
> search this list using the keyword 'horde' and look for my quick and dirty 
> install guide. Some one else has written a more detailed guide and that one 
> should show up in your search as well.
> 
> Scott
> 
> 
> 
> 
> On Jul 16, 2010, at 5:19 AM, "Suhag P Desai"  wrote:
> 
>> Hi All,
>> 
>>  
>> 
>> I have successfully installed qmailtoaster latest version and all the module 
>> of qmailtoaster are running fine. But I am facing problem while running 
>> ./scrips/setup.php file during installation of horde groupware webmail
>> 
>>  
>> 
>> Please find below steps which I followed during running of setup.php
>> 
>>  
>> 
>>  
>> 
>> [r...@spd scripts]# ./setup.php
>> 
>> Horde Groupware Webmail Edition Configuration Menu
>> 
>> (0) Exit
>> 
>> (1) Configure database settings
>> 
>> (2) Create database or tables
>> 
>> (3) Configure administrator settings
>> 
>> (4) Update PEAR for a new or changed location
>> 
>> (5) Update from an older Horde Groupware Webmail Edition version
>> 
>>  
>> 
>> Type your choice: 1
>> 
>> What database backend should we use? [false]
>> 
>> Type your choice: mysql
>> 
>>  
>> 
>> Request persistent connections? [0]
>> 
>> (1) Yes
>> 
>> (0) No
>> 
>> Type your choice: 0
>> 
>>  
>> 
>> Username to connect to the database as* [] root
>> 
>> Password to connect with [] password
>> 
>>  
>> 
>> How should we connect to the database? [unix]
>> 
>> (unix) UNIX Sockets
>> 
>> (tcp) TCP/IP
>> 
>> Type your choice: unix
>> 
>> Location of UNIX socket []  /var/lib/mysql/mysql.sock
>> 
>>  
>> 
>> Database name to use* [] horde
>> 
>> Internally used charset* [utf-8] utf-8
>> 
>> Use SSL to connect to the server? [0]
>> 
>> (1) Yes
>> 
>> (0) No
>> 
>>  
>> 
>> Type your choice: 0
>> 
>> Certification Authority to use for SSL connections []
>> 
>> Split reads to a different server? [false]
>> 
>> (false) Disabled
>> 
>> (true) Enabled
>> 
>>  
>> 
>> Type your choice: false
>> 
>>  
>> 
>> Writing main configuration file
>> 
>> PHP Fatal error:  Class 'DOMDocument' not found in 
>> /usr/share/horde/lib/Horde/DO
>>  M.php on line 119
>> 
>> Fatal error: Class 'DOMDocument' not found in 
>> /usr/share/horde/lib/Horde/DOM.php   
>>on line 119
>> 
>> =
>> 
>>  
>> 
>> My /etc/my.cnf file as per below
>> 
>>  
>> 
>> [mysqld]
>> 
>> datadir=/var/lib/mysql
>> 
>> socket=/var/lib/mysql/mysql.sock
>> 
>> user=mysql
>> 
>> collation_server=utf8_general_ci
>> 
>> character_set_server=utf8
>> 
>> init_connect="SET NAMES 'utf8'"
>> 
>> # Default to using old password format for compatibility with mysql 3.x
>> 
>> # clients (those using the mysqlclient10 compatibility package).
>> 
>> old_passwords=1
>> 
>>  
>> 
>> # Disabling symbolic-links is recommended to prevent assorted security risks;
>> 
>> # to do so, uncomment this line:
>> 
>> # symbolic-links=0
>> 
>>  
>> 
>> [mysqld_safe]
>> 
>> log-error=/var/log/mysqld.log
>> 
>> pid-file=/var/run/mysqld/mysqld.pid
>> 
>>  
>> 
>>  
>> 
>> [client]
>> 
>> default_character_set=utf8
>> 
>>  
>> 
>>  
>> 
>> Please help..
>> 
>>  
>> 
>> Regards,
>> 
>> Suhag Desai
>> 
>> Network Engineer
>> 


--
“Majority rule only works if you're also considering individual rights. Because 
you can't have five wolves and one sheep voting on what to have for supper.”

Larry Flynt



Re: [qmailtoaster] Re: help with some spam

2010-07-12 Thread Martin Waschbuesch
I was able to get rid of that sort of spam by signing all outgoing mail with 
Domainkeys and setting the policy record for Domainkeys to signify: This server 
signs ALL outgoing mail.

Incoming policy can be adjusted to reject mail where there is no signature in 
such a case.

Martin

Am 13.07.2010 um 04:57 schrieb David Milholen:

> 
> 
> On 7/12/2010 8:28 PM, Eric Shubert wrote:
>> If all of your submissions come from authenticated connections (which they 
>> should), you can blacklist your own domain. I know this sounds 
>> counter-intuitive, but since all of your domains authenticate, the only 
>> rejections will be those who claim to come from your domain but fail to 
>> authenticate, since authenticated connections pass all filters. It works 
>> well to block all spam that forges your domain in the sender's address.
>> 
> There may be a small problem with this but should not be a major issue.. Most 
> not all of my customers have their mail client authentication required box 
> unchecked if they are INSIDE my network but if they are outside of my network 
> they must have this checked.  For example I own 208.44.160.xxx/24, 
> 63.147.8.0/23,65.44.158.0/23,63.144.48.0/24 networks and they are all on my 
> wireless topology. If my customers  are home on these networks then the only 
> path out is thru my data center which has the main dns and mx services.
> If they are not home say on vacation then they must set this box for 
> authentication. 2 yrs ago we started this by default to set them. So there 
> may be a few still out there with this not checked.
> I am not scared to list my nets because I do welcome an attack from outside. 
> I do love my iptables and the unix scripting in image stream :)
> 
>> Note, if you use squirrelmail, you should modify your SM configuration to 
>> authenticate smtp submissions, and probably use port 587 as well (instead of 
>> the default port 25). The stock squirrelmail configuration does not 
>> authenticate by default.
>> 
> Already configured this and works great:)
> 
> In case all of your submissions aren't authenticated (perhaps you have a web 
> app that doesn't authenticate), the new version of spamdyke (v4.1.0, just 
> released a week or so ago) contains a new option that will reject emails 
> where the sender and recipient address is the same. This is often the case 
> with such spam, and is the next best thing to blacklisting your own domain.
> 
>> FWIW, when you use qtp-install-spamdyke to upgrade to the latest spamdyke 
>> version, it will now also install qtp-prune-graylist so your graylist stays 
>> pruned optimally. You should be sure to have the latest qmailtoaster-plus 
>> package installed before upgrading spamdyke:
>> # yum update qmailtoaster-plus
>> # qtp-install-spamdyke
>> 
>> You can also use badmailto for restricting some of these spam messages that 
>> contain numbers. See 
>> http://wiki.qmailtoaster.com/index.php/Account_verification_using_badmailto 
>> but I expect this would not be necessary if you're blacklisting your 
>> domain(s).
>> 
> The blacklist_rdns would be the place to list my domain?
> --Dave
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"Corporation. An ingenious device for obtaining individual profit without 
individual responsibility."

Bierce, Ambrose


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: spam email routing query

2010-07-12 Thread Martin Waschbuesch
Ok, here is Timo's response to my question:

Am 11.07.2010 um 21:01 schrieb Timo Sirainen:

> On Sat, 2010-07-10 at 09:14 +0200, Martin Waschbuesch wrote:
> 
>> 1.) Is there any danger regarding  maildir consistency in directly moving 
>> mail items about?
> 
> No. Assuming you use "mv" and not "cp" (and it's all in the same
> filesystem) so that the move is atomic.
> 
>> 2.) Could I somehow use deliver to move the mails? I think I can recall that 
>> other LDAs (maildrop?) allow for that? This would of course be preferred as 
>> the maildir cache would also still be optimized after the operation.
> 
> "deliver -u user -m mailboxname" could be used to save new mails. Maybe
> a save + delete would work too. I don't really think it's worth it.
> 
>> If anyone has any suggestions, I'd really appreciate this.
> 
> See the antispam plugin:
> http://johannes.sipsolutions.net/Projects/dovecot-antispam

So, since I have not seen any issues with the way I do it (it is indeed mv and 
on same filesystem), I'll leave it as is.

Though, that does not explain why Andreas saw different behaviour?

Martin

Am 08.07.2010 um 21:12 schrieb Martin Waschbuesch:

> You know, sometimes I am just way too slow it seems. :-)
> 
> Am 08.07.2010 um 20:29 schrieb Eric Shubert:
> 
>> I haven't looked at the deliver documentation much, let alone recently.
>> I don't mean to sound like a broken record, but would you like to ask on the 
>> dovecot list? (dove...@dovecot.org)
>> That list has been pretty active lately, and the people there are very 
>> helpful.
>> 
>> -- 
>> -Eric 'shubes'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Disclaimer Once Again

2010-07-08 Thread Martin Waschbuesch
Or watch Jake's video here (it's the only one I happen to have lying around 
because I watched it several times and did not want to re-download it every 
time):

http://martin.waschbuesch.de/ep19-full.mov

Martin

Am 09.07.2010 um 00:45 schrieb Eric Shubert:

> I haven't set up the DKIM wrapper (yet), so I'm not much help at this point. 
> I think Amit's on the right track though. The disclaimer (or whatever common 
> text) should be added just before the DKIM signature.
> 
> Is that wrapper on the wiki somewhere, or is it only in the video?
> 
> -- 
> -Eric 'shubes'
> 
> nishant amin wrote:
>> hi all
>> i am also facing the same problem as rajesh.at my place of work i am
>> required to add a disclaimer for all out going emails.i have looked at
>> the previous posts regarding disclaimer..i added a plugin on squirrel
>> mail to add a disclaimer to all out going emails from webmail but the
>> main challenge if for the users using email clients (disclaimer can be
>> added as a signature).i need to do it at the server level(if possible
>> at the server level then i can remove the squirrel mail plugin)
>> your assistance is highly appreciated
>> regards
>> Nishant Amin.
>> On Thu, Jul 8, 2010 at 10:09 PM, Amit  wrote:
>>> Hi Everyone,
>>> 
>>> Sorry for bringing once again this topic on highlight, but today my client
>>> also asked me to add disclaimer to all outgoing mails at server level. I saw
>>> all the earlier post, all do n dont's for the same. Don't know whether some
>>> got succeeded in the same or not.
>>> Was thinking how it can be done. While searching got info about altermime
>>> (http://www.pldaniels.com/altermime/). Next thing was where we can implement
>>> altermime with our existing toaster package, it should be time of sending
>>> mail may be with qmail-send or qmail-remote. Now qmail-remote wrapper is
>>> used in DKIM package to add DKIM signatures in Mail headers, so I need some
>>> help from you guys to modify the script so while adding DKIM signature it
>>> will also add a disclaimer to outgoing mail.
>>> I don't whether I'm thinking in right direction or not. I just thought of
>>> DKIM as it is the time when mail is open to add DKIM signature. So please
>>> help me.
>>> 
>>> Thanks and regards,
>>> 
>>> Amit
>>> 
>>> 
>> -
> 
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
“Majority rule only works if you're also considering individual rights. Because 
you can't have five wolves and one sheep voting on what to have for supper.”

Larry Flynt


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: spam email routing query

2010-07-08 Thread Martin Waschbuesch
You know, sometimes I am just way too slow it seems. :-)

Am 08.07.2010 um 20:29 schrieb Eric Shubert:

> I haven't looked at the deliver documentation much, let alone recently.
> I don't mean to sound like a broken record, but would you like to ask on the 
> dovecot list? (dove...@dovecot.org)
> That list has been pretty active lately, and the people there are very 
> helpful.
> 
> -- 
> -Eric 'shubes'
> 
> Martin Waschbuesch wrote:
>> From what I read in the deliver documentation, it cannot (unlike maildrop) 
>> take an email from standard input or a file? At least that is how I read the 
>> documentation.
>> If that's true I do not see how it could be used for this type of scripting.
>> Anyone can confirm / correct my observation?
>> Martin
>> Am 08.07.2010 um 11:51 schrieb Martin Waschbuesch:
>>> Interesting,
>>> 
>>> I have a script that does just that (move files about in the maildir) and 
>>> it has not lead to problems yet. Though, I can definitely understand how it 
>>> might be problematic. I gotta watch out for that.
>>> If you want to be on the safe side, I guess Eric's suggestion of using 
>>> dovecot's lda is the thing to do.
>>> 
>>> Martin
>>> 
>>> Am 08.07.2010 um 11:47 schrieb Andreas Galatis:
>>> 
>>>> Hi Eric,
>>>> 
>>>> As far as I learned it is never a good idea to copy (or delete) messages 
>>>> directly in the Maildir if you use dovecot.
>>>> I had a script deleting old mails from a clients Maildir running via cron.
>>>> The first day the script deleted old messages, the client could not access 
>>>> the last listpage from squirrelmail.
>>>> I think the dovecot- index files where irritated because of missing files.
>>>> At least you would have to delete the dovecot-files in the concerned 
>>>> directory (they will be rebuilt)
>>>> 
>>>> Andreas
>>>> Am Donnerstag, 8. Juli 2010 04:18:51 schrieb Eric Shubert:
>>>>> Rajesh M wrote:
>>>>>> hi eric
>>>>>> 
>>>>>> when the email arrives in the spam box its headers contained the
>>>>>> "delivered to" email id in the header so my script will know where to
>>>>>> which email id the message is to be delivered. so my concern about bcc is
>>>>>> resolved.
>>>>>> 
>>>>>> my second question is as such
>>>>>> which would be better
>>>>> Define better. ;)
>>>>> 
>>>>>> Simply move the email from the "centralized spambox" to the inbox of that
>>>>>> email id
>>>>>> Or use the qmail-queue program to reroute the message back to the queue
>>>>>> for delivery.
>>>>> As usual, there's more than one way.
>>>>> 
>>>>>> i don't want the email time stamps changed during this process.
>>>>> Which time stamps are you referring to?
>>>>> 
>>>>> On further thinking about this, I wouldn't do either. If you have
>>>>> dovecot installed, I would use dovecot's deliver program. Otherwise, I'd
>>>>> use the maildrop program. You should realize though that at some point
>>>>> dovecot's lda (deliver) is likely going to replace maildrop. With either
>>>>> program, I don't expect you'd need to do any parsing of the message in
>>>>> your script - just pass it on to the lda. I could be wrong about this
>>>>> though.
>>>>> 
>>>>> You could move the file to the appropriate inbox yourself and I believe
>>>>> that would work, but using the lda would be 'better'. The lda really
>>>>> should know what's going into the mailbox, for indexing and quota 
>>>>> purposes.
>>>>> 
>>>> -
>>>> Qmailtoaster is sponsored by Vickers Consulting Group 
>>>> (www.vickersconsulting.com)
>>>>  Vickers Consulting Group offers Qmailtoaster support and installations.
>>>>If you need professional help with your setup, contact them today!
>>>> -
>>>>   Please visit qmailtoaster.com for the latest news, updates, and packages.
>>>> 
>>>>To unsubscribe

Re: [qmailtoaster] Re: spam email routing query

2010-07-08 Thread Martin Waschbuesch
From what I read in the deliver documentation, it cannot (unlike maildrop) take 
an email from standard input or a file? At least that is how I read the 
documentation.
If that's true I do not see how it could be used for this type of scripting.
Anyone can confirm / correct my observation?

Martin
 
Am 08.07.2010 um 11:51 schrieb Martin Waschbuesch:

> Interesting,
> 
> I have a script that does just that (move files about in the maildir) and it 
> has not lead to problems yet. Though, I can definitely understand how it 
> might be problematic. I gotta watch out for that.
> If you want to be on the safe side, I guess Eric's suggestion of using 
> dovecot's lda is the thing to do.
> 
> Martin
> 
> Am 08.07.2010 um 11:47 schrieb Andreas Galatis:
> 
>> Hi Eric,
>> 
>> As far as I learned it is never a good idea to copy (or delete) messages 
>> directly in the Maildir if you use dovecot.
>> I had a script deleting old mails from a clients Maildir running via cron.
>> The first day the script deleted old messages, the client could not access 
>> the 
>> last listpage from squirrelmail.
>> I think the dovecot- index files where irritated because of missing files.
>> At least you would have to delete the dovecot-files in the concerned 
>> directory 
>> (they will be rebuilt)
>> 
>> Andreas
>> Am Donnerstag, 8. Juli 2010 04:18:51 schrieb Eric Shubert:
>>> Rajesh M wrote:
>>>> hi eric
>>>> 
>>>> when the email arrives in the spam box its headers contained the
>>>> "delivered to" email id in the header so my script will know where to
>>>> which email id the message is to be delivered. so my concern about bcc is
>>>> resolved.
>>>> 
>>>> my second question is as such
>>>> which would be better
>>> 
>>> Define better. ;)
>>> 
>>>> Simply move the email from the "centralized spambox" to the inbox of that
>>>> email id
>>>> Or use the qmail-queue program to reroute the message back to the queue
>>>> for delivery.
>>> 
>>> As usual, there's more than one way.
>>> 
>>>> i don't want the email time stamps changed during this process.
>>> 
>>> Which time stamps are you referring to?
>>> 
>>> On further thinking about this, I wouldn't do either. If you have
>>> dovecot installed, I would use dovecot's deliver program. Otherwise, I'd
>>> use the maildrop program. You should realize though that at some point
>>> dovecot's lda (deliver) is likely going to replace maildrop. With either
>>> program, I don't expect you'd need to do any parsing of the message in
>>> your script - just pass it on to the lda. I could be wrong about this
>>> though.
>>> 
>>> You could move the file to the appropriate inbox yourself and I believe
>>> that would work, but using the lda would be 'better'. The lda really
>>> should know what's going into the mailbox, for indexing and quota purposes.
>>> 
>> 
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group 
>> (www.vickersconsulting.com)
>>   Vickers Consulting Group offers Qmailtoaster support and installations.
>> If you need professional help with your setup, contact them today!
>> -
>>Please visit qmailtoaster.com for the latest news, updates, and packages.
>> 
>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
> 
> 
> --
> "Corporation. An ingenious device for obtaining individual profit without 
> individual responsibility."
> 
> Bierce, Ambrose
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
&g

Re: [qmailtoaster] Re: spam email routing query

2010-07-08 Thread Martin Waschbuesch
I never have such problems with e.g. horde or Mail on Mac OS X.
Could that be IMAP client-related as well? But then I am investigating how to 
replace my manual  operations with dovecot's deliver. I don't want to end up 
having such problems as well.

Martin

Am 08.07.2010 um 18:58 schrieb Andreas Galatis:

> After having deleted some Mails and the user accesses the concerned folder
> via squirrelmail he gets a failure notice saying the imap-connection was
> interrupted.
> In the logs I see the error message saying time went back, therefore
> dovecot was stopped.
> The error message is false, time is not manipulated, I run ntpd on all
> servers. So I tried stopping the "deleteoldmails" script and have no more
> problems with the folders, neither with time going back.
> Since I use dovecot, my client can easily show all messages in the Folder
> and delete the oldest himself, through squirrelmail. With courier it was
> too slow to see large amount of Mails.
> 
> 
> Andreas
> 
>> Yes, it can be problematic. At the same time though, dovecot is very
>> robust, and is capable of recovering from inconsistencies such as this
>> automatically (all by itself). I would expect performance hits when
>> dovecot needs to rebuild indexes and such, but I would not expect a
>> failure of any kind. If it fails, I'd consider it a bug (and I expect
>> Timo the author would as well).
>> 
>> If you run into problems however, I think Andreas's remedy of deleting
>> the dovecot-files should indeed clear things up. I'd try to check first
>> though to be sure that dovecot isn't in the middle of rebuilding things
>> already. Not sure how I'd do that off hand (ps?/lsof?).
>> --
>> -Eric 'shubes'
>> 
>> Martin Waschbuesch wrote:
>>> Interesting,
>>> 
>>> I have a script that does just that (move files about in the maildir)
>>> and it has not lead to problems yet. Though, I can definitely understand
>>> how it might be problematic. I gotta watch out for that.
>>> If you want to be on the safe side, I guess Eric's suggestion of using
>>> dovecot's lda is the thing to do.
>>> 
>>> Martin
>>> 
>>> Am 08.07.2010 um 11:47 schrieb Andreas Galatis:
>>> 
>>>> Hi Eric,
>>>> 
>>>> As far as I learned it is never a good idea to copy (or delete)
>>>> messages
>>>> directly in the Maildir if you use dovecot.
>>>> I had a script deleting old mails from a clients Maildir running via
>>>> cron.
>>>> The first day the script deleted old messages, the client could not
>>>> access the
>>>> last listpage from squirrelmail.
>>>> I think the dovecot- index files where irritated because of missing
>>>> files.
>>>> At least you would have to delete the dovecot-files in the concerned
>>>> directory
>>>> (they will be rebuilt)
>>>> 
>>>> Andreas
>>>> Am Donnerstag, 8. Juli 2010 04:18:51 schrieb Eric Shubert:
>>>>> Rajesh M wrote:
>>>>>> hi eric
>>>>>> 
>>>>>> when the email arrives in the spam box its headers contained the
>>>>>> "delivered to" email id in the header so my script will know where to
>>>>>> which email id the message is to be delivered. so my concern about
>>>>>> bcc is
>>>>>> resolved.
>>>>>> 
>>>>>> my second question is as such
>>>>>> which would be better
>>>>> Define better. ;)
>>>>> 
>>>>>> Simply move the email from the "centralized spambox" to the inbox of
>>>>>> that
>>>>>> email id
>>>>>> Or use the qmail-queue program to reroute the message back to the
>>>>>> queue
>>>>>> for delivery.
>>>>> As usual, there's more than one way.
>>>>> 
>>>>>> i don't want the email time stamps changed during this process.
>>>>> Which time stamps are you referring to?
>>>>> 
>>>>> On further thinking about this, I wouldn't do either. If you have
>>>>> dovecot installed, I would use dovecot's deliver program. Otherwise,
>>>>> I'd
>>>>> use the maildrop program. You should realize though that at some point
>>>>> dovecot's lda (deliver) is likely going to replace maildrop. With
>>>>> eit

Re: [qmailtoaster] Re: spam email routing query

2010-07-08 Thread Martin Waschbuesch
Interesting,

I have a script that does just that (move files about in the maildir) and it 
has not lead to problems yet. Though, I can definitely understand how it might 
be problematic. I gotta watch out for that.
If you want to be on the safe side, I guess Eric's suggestion of using 
dovecot's lda is the thing to do.

Martin

Am 08.07.2010 um 11:47 schrieb Andreas Galatis:

> Hi Eric,
> 
> As far as I learned it is never a good idea to copy (or delete) messages 
> directly in the Maildir if you use dovecot.
> I had a script deleting old mails from a clients Maildir running via cron.
> The first day the script deleted old messages, the client could not access 
> the 
> last listpage from squirrelmail.
> I think the dovecot- index files where irritated because of missing files.
> At least you would have to delete the dovecot-files in the concerned 
> directory 
> (they will be rebuilt)
> 
> Andreas
> Am Donnerstag, 8. Juli 2010 04:18:51 schrieb Eric Shubert:
>> Rajesh M wrote:
>>> hi eric
>>> 
>>> when the email arrives in the spam box its headers contained the
>>> "delivered to" email id in the header so my script will know where to
>>> which email id the message is to be delivered. so my concern about bcc is
>>> resolved.
>>> 
>>> my second question is as such
>>> which would be better
>> 
>> Define better. ;)
>> 
>>> Simply move the email from the "centralized spambox" to the inbox of that
>>> email id
>>> Or use the qmail-queue program to reroute the message back to the queue
>>> for delivery.
>> 
>> As usual, there's more than one way.
>> 
>>> i don't want the email time stamps changed during this process.
>> 
>> Which time stamps are you referring to?
>> 
>> On further thinking about this, I wouldn't do either. If you have
>> dovecot installed, I would use dovecot's deliver program. Otherwise, I'd
>> use the maildrop program. You should realize though that at some point
>> dovecot's lda (deliver) is likely going to replace maildrop. With either
>> program, I don't expect you'd need to do any parsing of the message in
>> your script - just pass it on to the lda. I could be wrong about this
>> though.
>> 
>> You could move the file to the appropriate inbox yourself and I believe
>> that would work, but using the lda would be 'better'. The lda really
>> should know what's going into the mailbox, for indexing and quota purposes.
>> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"Corporation. An ingenious device for obtaining individual profit without 
individual responsibility."

Bierce, Ambrose


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Qmail with LDAP

2010-07-07 Thread Martin Waschbuesch
Oh, I understand, but 5.4.x has some (albeit limited I understand) LDAP support 
and 5.4.30 seems to have some things backported from 5.5.0 to allow for *some* 
more interoperability.

Of course, switching from mysql to ldap is a far bigger thing as far as I can 
tell.

Martin

Am 07.07.2010 um 20:24 schrieb Eric Shubert:

> Yeah, but it's not simply a matter of going to 5.4.30. It's also a matter of 
> switching from MySQL to LDAP for the backend. That's a big change (if not 
> bigger) as well.
> 
> Martin Waschbuesch wrote:
>> Very true.
>> It's just that I could very quickly update the vpopmail-toaster package to 
>> 5.4.30. I would not want to touch 5.5.x though - as Amit pointed out, a lot 
>> of things changed...
>> Am 07.07.2010 um 19:55 schrieb Eric Shubert:
>>> I expect that's true, but where's the fun in that?? ;)
>>> 
>>> Seriously though, I'm glad to see someone trying the 5.5 branch. My 
>>> understanding is that a) it has improvements in the LDAP area, and b) 
>>> quotas are finally fixed.
>>> 
>>> Martin Waschbuesch wrote:
>>>> Does it have to be the development branch of vpopmail?
>>>> I expect that using the stable branch (5.4.30 is the current version) 
>>>> would be easier to integrate with the existing vpopmail-toaster package...
>>>> Martin
>>>> Am 07.07.2010 um 19:26 schrieb Amit Dalia:
>>>>> Hi Eric,
>>>>> Building vpopmail from spec file is good option but there are much 
>>>>> changes need to be done as there are many changes made in vpopmail 5.5.0.
>>>>> 
>>>>> Regards,
>>>>> 
>>>>> Amit
>>>>> 
>>>>> At Wednesday, 07-07-2010 on 22:50 Eric Shubert wrote:
>>>>> 
>>>>>   Amit Dalia wrote:
>>>>>   > Hi everyone,
>>>>>   >
>>>>>   > I was just trying to install qmail with LDAP support and beta
>>>>>   version of
>>>>>   > vpopmail 5.5.0. I had successfully compiled and install vpopmail
>>>>>   but
>>>>>   > stuck while installing qmail-toaster package. Getting below error:
>>>>>   >
>>>>>   > Installing qmail-toaster-1.03-1.3.20.src.rpm
>>>>>   > warning: user shubes does not exist - using root
>>>>>   > warning: group shubes does not exist - using root
>>>>>   > error: Failed build dependencies:
>>>>>   > vpopmail-toaster >= 5.4.17 is needed by
>>>>>   > qmail-toaster-1.03-1.3.20.i386
>>>>>   > error: File not found by glob:
>>>>>   /usr/src/redhat/RPMS/i386/qmail-toaster*.rpm
>>>>>   > error: File not found by glob:
>>>>>   /usr/src/redhat/RPMS/i386/qmail-pop3d*.rpm
>>>>>   >
>>>>>   > Any help? I had already compiled and installed vpopmail.
>>>>>   >
>>>>>   >
>>>>>   > Regards,
>>>>>   >
>>>>>   > Amit
>>>>> 
>>>>>   It'd be best to modify the vpopmail-toaster.spec file to build and
>>>>>   install the 5.5 version.
>>>>> 
>>>>>   If you're just building and installing vpopmail manually
>>>>>   (prototype/test
>>>>>   sort of thing), it'd be easiest to simply edit the qmail-toaster.spec
>>>>>   file and remove/comment the vpopmail dependency.
>>>>> 
>>>>>   -- -Eric 'shubes'
>>>>> 
>>>>> 
>>>>>   
>>>>> -
>>>>>   Qmailtoaster is sponsored by Vickers Consulting Group
>>>>>   (www.vickersconsulting.com <http://www.vickersconsulting.com>)
>>>>>   Vickers Consulting Group offers Qmailtoaster support and
>>>>>   installations.
>>>>>   If you need professional help with your setup, contact them today!
>>>>>   
>>>>> -
>>>>>   Please visit qmailtoaster.com <http://qmailtoaster.com> for the
>>>>>   latest news, updates, and packages.
>>>>> 
>>>>>   To unsubscribe, e-mail:
>>>>>   qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>>>   <mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com>
>&

Re: [qmailtoaster] Re: Qmail with LDAP

2010-07-07 Thread Martin Waschbuesch
That would be very good! :-)

Thanks a lot,

Martin

Am 07.07.2010 um 20:22 schrieb Eric Shubert:

> IIRC, there are MySQL database changes required for that jump. I think I may 
> have written a script to do that. Would you like me to check what I have on 
> that?
> 
> Martin Waschbuesch wrote:
>> In the meantime I just updated the package to 5.4.30... ;-) Giving it a try 
>> as we speak - there seem to have been numerous patches since 5.4.17 (stock 
>> QMT)...
>> Am 07.07.2010 um 19:56 schrieb Eric Shubert:
>>> Amit,
>>> 
>>> Modifying the spec file is really pretty easy once you get the hang of it. 
>>> If you'd like, we can assist you with that.
>>> 
>>> Please start a new thread on the devel list, and we'll go from there.
>>> 
>>> -- 
>>> -Eric 'shubes'
>>> 
>>> Amit Dalia wrote:
>>>> Hi Eric,
>>>> Building vpopmail from spec file is good option but there are much changes 
>>>> need to be done as there are many changes made in vpopmail 5.5.0.
>>>> Regards,
>>>> Amit
>>>> At Wednesday, 07-07-2010 on 22:50 Eric Shubert wrote:
>>>>   Amit Dalia wrote:
>>>>> Hi everyone,
>>>>>
>>>>> I was just trying to install qmail with LDAP support and beta
>>>>   version of
>>>>> vpopmail 5.5.0. I had successfully compiled and install vpopmail but
>>>>> stuck while installing qmail-toaster package. Getting below error:
>>>>>
>>>>> Installing qmail-toaster-1.03-1.3.20.src.rpm
>>>>> warning: user shubes does not exist - using root
>>>>> warning: group shubes does not exist - using root
>>>>> error: Failed build dependencies:
>>>>> vpopmail-toaster >= 5.4.17 is needed by
>>>>> qmail-toaster-1.03-1.3.20.i386
>>>>> error: File not found by glob:
>>>>   /usr/src/redhat/RPMS/i386/qmail-toaster*.rpm
>>>>> error: File not found by glob:
>>>>   /usr/src/redhat/RPMS/i386/qmail-pop3d*.rpm
>>>>>
>>>>> Any help? I had already compiled and installed vpopmail.
>>>>>
>>>>>
>>>>> Regards,
>>>>>
>>>>> Amit
>>>>   It'd be best to modify the vpopmail-toaster.spec file to build and
>>>>   install the 5.5 version.
>>>>   If you're just building and installing vpopmail manually
>>>>   (prototype/test
>>>>   sort of thing), it'd be easiest to simply edit the qmail-toaster.spec
>>>>   file and remove/comment the vpopmail dependency.
>>>>   -- -Eric 'shubes'
>>>>   
>>>> -
>>>>   Qmailtoaster is sponsored by Vickers Consulting Group
>>>>   (www.vickersconsulting.com)
>>>>   Vickers Consulting Group offers Qmailtoaster support and installations.
>>>>   If you need professional help with your setup, contact them today!
>>>>   
>>>> -
>>>>   Please visit qmailtoaster.com for the latest news, updates, and
>>>>   packages.
>>>>   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>>   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>> 
>>> -
>>> Qmailtoaster is sponsored by Vickers Consulting Group 
>>> (www.vickersconsulting.com)
>>>  Vickers Consulting Group offers Qmailtoaster support and installations.
>>>If you need professional help with your setup, contact them today!
>>> -
>>>   Please visit qmailtoaster.com for the latest news, updates, and packages.
>>>To unsubscribe, e-mail: 
>>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>> 
>>> 
>> --
>> "The whole modern world has divided itself into Conservatives and 
>> Progressives. The business of Progressives is to go on making mistakes. The 
>> business of the Conservatives is to prevent the mistakes from being 
>> corrected."
>> Gilbert K. Chesterton
>&g

Re: [qmailtoaster] Re: Qmail with LDAP

2010-07-07 Thread Martin Waschbuesch
In the meantime I just updated the package to 5.4.30... ;-) Giving it a try as 
we speak - there seem to have been numerous patches since 5.4.17 (stock QMT)...


Am 07.07.2010 um 19:56 schrieb Eric Shubert:

> Amit,
> 
> Modifying the spec file is really pretty easy once you get the hang of it. If 
> you'd like, we can assist you with that.
> 
> Please start a new thread on the devel list, and we'll go from there.
> 
> -- 
> -Eric 'shubes'
> 
> Amit Dalia wrote:
>> Hi Eric,
>> Building vpopmail from spec file is good option but there are much changes 
>> need to be done as there are many changes made in vpopmail 5.5.0.
>> Regards,
>> Amit
>> At Wednesday, 07-07-2010 on 22:50 Eric Shubert wrote:
>>Amit Dalia wrote:
>> > Hi everyone,
>> >
>> > I was just trying to install qmail with LDAP support and beta
>>version of
>> > vpopmail 5.5.0. I had successfully compiled and install vpopmail but
>> > stuck while installing qmail-toaster package. Getting below error:
>> >
>> > Installing qmail-toaster-1.03-1.3.20.src.rpm
>> > warning: user shubes does not exist - using root
>> > warning: group shubes does not exist - using root
>> > error: Failed build dependencies:
>> > vpopmail-toaster >= 5.4.17 is needed by
>> > qmail-toaster-1.03-1.3.20.i386
>> > error: File not found by glob:
>>/usr/src/redhat/RPMS/i386/qmail-toaster*.rpm
>> > error: File not found by glob:
>>/usr/src/redhat/RPMS/i386/qmail-pop3d*.rpm
>> >
>> > Any help? I had already compiled and installed vpopmail.
>> >
>> >
>> > Regards,
>> >
>> > Amit
>>It'd be best to modify the vpopmail-toaster.spec file to build and
>>install the 5.5 version.
>>If you're just building and installing vpopmail manually
>>(prototype/test
>>sort of thing), it'd be easiest to simply edit the qmail-toaster.spec
>>file and remove/comment the vpopmail dependency.
>>-- -Eric 'shubes'
>>
>> -
>>Qmailtoaster is sponsored by Vickers Consulting Group
>>(www.vickersconsulting.com)
>>Vickers Consulting Group offers Qmailtoaster support and installations.
>>If you need professional help with your setup, contact them today!
>>
>> -
>>Please visit qmailtoaster.com for the latest news, updates, and
>>packages.
>>To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"The whole modern world has divided itself into Conservatives and Progressives. 
The business of Progressives is to go on making mistakes. The business of the 
Conservatives is to prevent the mistakes from being corrected."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Qmail with LDAP

2010-07-07 Thread Martin Waschbuesch
Very true.
It's just that I could very quickly update the vpopmail-toaster package to 
5.4.30. I would not want to touch 5.5.x though - as Amit pointed out, a lot of 
things changed...

Am 07.07.2010 um 19:55 schrieb Eric Shubert:

> I expect that's true, but where's the fun in that?? ;)
> 
> Seriously though, I'm glad to see someone trying the 5.5 branch. My 
> understanding is that a) it has improvements in the LDAP area, and b) quotas 
> are finally fixed.
> 
> Martin Waschbuesch wrote:
>> Does it have to be the development branch of vpopmail?
>> I expect that using the stable branch (5.4.30 is the current version) would 
>> be easier to integrate with the existing vpopmail-toaster package...
>> Martin
>> Am 07.07.2010 um 19:26 schrieb Amit Dalia:
>>> Hi Eric,
>>> Building vpopmail from spec file is good option but there are much changes 
>>> need to be done as there are many changes made in vpopmail 5.5.0.
>>> 
>>> Regards,
>>> 
>>> Amit
>>> 
>>> At Wednesday, 07-07-2010 on 22:50 Eric Shubert wrote:
>>> 
>>>Amit Dalia wrote:
>>>> Hi everyone,
>>>>
>>>> I was just trying to install qmail with LDAP support and beta
>>>version of
>>>> vpopmail 5.5.0. I had successfully compiled and install vpopmail
>>>but
>>>> stuck while installing qmail-toaster package. Getting below error:
>>>>
>>>> Installing qmail-toaster-1.03-1.3.20.src.rpm
>>>> warning: user shubes does not exist - using root
>>>> warning: group shubes does not exist - using root
>>>> error: Failed build dependencies:
>>>> vpopmail-toaster >= 5.4.17 is needed by
>>>> qmail-toaster-1.03-1.3.20.i386
>>>> error: File not found by glob:
>>>/usr/src/redhat/RPMS/i386/qmail-toaster*.rpm
>>>> error: File not found by glob:
>>>/usr/src/redhat/RPMS/i386/qmail-pop3d*.rpm
>>>>
>>>> Any help? I had already compiled and installed vpopmail.
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Amit
>>> 
>>>It'd be best to modify the vpopmail-toaster.spec file to build and
>>>install the 5.5 version.
>>> 
>>>If you're just building and installing vpopmail manually
>>>(prototype/test
>>>sort of thing), it'd be easiest to simply edit the qmail-toaster.spec
>>>file and remove/comment the vpopmail dependency.
>>> 
>>>-- -Eric 'shubes'
>>> 
>>> 
>>>
>>> -
>>>Qmailtoaster is sponsored by Vickers Consulting Group
>>>(www.vickersconsulting.com <http://www.vickersconsulting.com>)
>>>Vickers Consulting Group offers Qmailtoaster support and
>>>installations.
>>>If you need professional help with your setup, contact them today!
>>>
>>> -
>>>Please visit qmailtoaster.com <http://qmailtoaster.com> for the
>>>latest news, updates, and packages.
>>> 
>>>To unsubscribe, e-mail:
>>>qmailtoaster-list-unsubscr...@qmailtoaster.com
>>><mailto:qmailtoaster-list-unsubscr...@qmailtoaster.com>
>>>For additional commands, e-mail:
>>>qmailtoaster-list-h...@qmailtoaster.com
>>><mailto:qmailtoaster-list-h...@qmailtoaster.com>
>>> 
>> --
>> "Corporation. An ingenious device for obtaining individual profit without 
>> individual responsibility."
>> Bierce, Ambrose
> 
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"If we don't believe in freedom of expression for people we despise, we don't 
believe in it at all. "

Noam Chomsky


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Qmail with LDAP

2010-07-07 Thread Martin Waschbuesch
Does it have to be the development branch of vpopmail?

I expect that using the stable branch (5.4.30 is the current version) would be 
easier to integrate with the existing vpopmail-toaster package...

Martin

Am 07.07.2010 um 19:26 schrieb Amit Dalia:

> Hi Eric,
> Building vpopmail from spec file is good option but there are much changes 
> need to be done as there are many changes made in vpopmail 5.5.0.
> 
> Regards,
> 
> Amit
> 
> At Wednesday, 07-07-2010 on 22:50 Eric Shubert wrote:
> Amit Dalia wrote:
> > Hi everyone,
> > 
> > I was just trying to install qmail with LDAP support and beta version of 
> > vpopmail 5.5.0. I had successfully compiled and install vpopmail but 
> > stuck while installing qmail-toaster package. Getting below error:
> > 
> > Installing qmail-toaster-1.03-1.3.20.src.rpm
> > warning: user shubes does not exist - using root
> > warning: group shubes does not exist - using root
> > error: Failed build dependencies:
> > vpopmail-toaster >= 5.4.17 is needed by 
> > qmail-toaster-1.03-1.3.20.i386
> > error: File not found by glob: /usr/src/redhat/RPMS/i386/qmail-toaster*.rpm
> > error: File not found by glob: /usr/src/redhat/RPMS/i386/qmail-pop3d*.rpm
> > 
> > Any help? I had already compiled and installed vpopmail.
> > 
> > 
> > Regards,
> > 
> > Amit
> 
> It'd be best to modify the vpopmail-toaster.spec file to build and 
> install the 5.5 version.
> 
> If you're just building and installing vpopmail manually (prototype/test 
> sort of thing), it'd be easiest to simply edit the qmail-toaster.spec 
> file and remove/comment the vpopmail dependency.
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


--
"Corporation. An ingenious device for obtaining individual profit without 
individual responsibility."

Bierce, Ambrose



Re: [qmailtoaster] Qmail with LDAP

2010-07-07 Thread Martin Waschbuesch
PS: What you can do is edit the .spec file for qmail-toaster package and remove 
'vpopmail-toaster >= 5.4.17' from the line that says

Requires: some.other.package, vpopmail-toaster >= 5.4.17

Martin

Am 07.07.2010 um 19:13 schrieb Amit Dalia:

> Hi everyone,
> 
> I was just trying to install qmail with LDAP support and beta version of 
> vpopmail 5.5.0. I had successfully compiled and install vpopmail but stuck 
> while installing qmail-toaster package. Getting below error:
> 
> Installing qmail-toaster-1.03-1.3.20.src.rpm
> warning: user shubes does not exist - using root
> warning: group shubes does not exist - using root
> error: Failed build dependencies:
> vpopmail-toaster >= 5.4.17 is needed by qmail-toaster-1.03-1.3.20.i386
> error: File not found by glob: /usr/src/redhat/RPMS/i386/qmail-toaster*.rpm
> error: File not found by glob: /usr/src/redhat/RPMS/i386/qmail-pop3d*.rpm
> 
> Any help? I had already compiled and installed vpopmail.
> 
> 
> Regards,
> 
> Amit


--
"The whole modern world has divided itself into Conservatives and Progressives. 
The business of Progressives is to go on making mistakes. The business of the 
Conservatives is to prevent the mistakes from being corrected."

Gilbert K. Chesterton



Re: [qmailtoaster] Qmail with LDAP

2010-07-07 Thread Martin Waschbuesch
I guess you skipped the current vpopmail-toaster package and manually built 
vpopmail 5.5.0 from vpopmail source (inter7)?

If so, you should be aware that manually compiling vpopmail will not tell the 
RPM based system that a package called vpopmail-toaster is installed on the 
system and therefore the build requirements for the qmail-toaster package fail.

Martin


Am 07.07.2010 um 19:13 schrieb Amit Dalia:

> Hi everyone,
> 
> I was just trying to install qmail with LDAP support and beta version of 
> vpopmail 5.5.0. I had successfully compiled and install vpopmail but stuck 
> while installing qmail-toaster package. Getting below error:
> 
> Installing qmail-toaster-1.03-1.3.20.src.rpm
> warning: user shubes does not exist - using root
> warning: group shubes does not exist - using root
> error: Failed build dependencies:
> vpopmail-toaster >= 5.4.17 is needed by qmail-toaster-1.03-1.3.20.i386
> error: File not found by glob: /usr/src/redhat/RPMS/i386/qmail-toaster*.rpm
> error: File not found by glob: /usr/src/redhat/RPMS/i386/qmail-pop3d*.rpm
> 
> Any help? I had already compiled and installed vpopmail.
> 
> 
> Regards,
> 
> Amit


--
"I am fond of pigs. Dogs look up to us. Cats look down on us. Pigs treat us as 
equals."

Winston Churchill



Re: [qmailtoaster] Dynamic IP rejection notices

2010-07-07 Thread Martin Waschbuesch
Hi Mike,

I am afraid you will probably not have much luck with this. A dynamic IP 
address will make lots of ISPs think you are a spammer and the only way I know 
to avoid this is to sign up for a fixed IP address.

Martin

Am 07.07.2010 um 09:34 schrieb Mike Canty:

> To all,
>   I have just set up another (that makes 5) Qmail Toaster
> installations (I love this product), but this one is the first that has a
> dynamic IP.
> 
> Apart for a few issues, which have been resolved, I am now getting
> rejections due to the Dynamic IP and Spam sites.
> 
> What can I do to stop this.  Please see the rejection message below.
> 
> 
> Hi. This is the qmail-send program at msrvprl.domainname.com.
> I'm afraid I wasn't able to deliver your message to the following  
> addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
> 
> :
> User and password not set, continuing without authentication.
> 196.41.124.15 does not like recipient.
> Remote host said: 554 5.7.1  [41.240.15.122]>: Client host rejected: ADSLDIRECT 27 you must relay  
> your mail through your upstream provider if you are connected via an  
> ADSL line with a dynamic ip
> Giving up on 196.41.124.15.
> 
> 
> Cheers
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"In everyone there sleeps
A sense of life lived according to love.
To some it means the difference they could make
By loving others, but across most it sweeps
As all they might have done had they been loved.
That nothing cures."

Philip Larkin 'Faith Healing'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] sending out newsletters using qmailtoaster

2010-07-06 Thread Martin Waschbuesch

Am 06.07.2010 um 22:55 schrieb Tonix (Antonio Nati):
>> Also note that, if you send one mail to 50 recipients, this will result in 
>> 50 individual items in the queue. As long as but one of these items is still 
>> unsent, qmailctl queue will list all 50 items as still being in the queue 
>> but will indicate with each item if said item has been sent. Once all items 
>> belonging to the message have been sent, they'll all no longer be shown in 
>> the queue. Is that the behavior you see when saying some messages need a 
>> long time to send?
>> 
>>   
> If I send to 50 recipients on the same remote domain, I will have 50 
> connections opened to the same remote server...
> So, if remote server has limit on new connections, some deliveries will abort 
> and retry nextly.

Very true. You could use your number of concurrent connections more effectively 
when each was used to transmit more than one message. But of course this (if 
anyone actually were to rewrite the way qmail's queuing works) would only be a 
relief and eliminate the problem: Depending on the allowed chunk size (messages 
per session allowed for a given target domain) and the number of messages sent 
to that domain, you might still end up being 'tarpit'ed.
But I guess the whole discussion is a moot point in so far as there is (afaik) 
no such patch for qmail in existence.

Martin
-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] sending out newsletters using qmailtoaster

2010-07-06 Thread Martin Waschbuesch

> My users are used to have a message delivered in a few seconds, despite of 
> destination.

If you really mean 'delivered' in the sentence above, then I am afraid your 
users have, sort of, incorrect expectations. All anyone may reasonably expect 
is that the mail server processes and attempts to send mail as quickly as 
possible. It's not like anyone can control the availability of other people's 
mail servers.
And you have to admit that, from what you describe, your qmail toaster does 
process things quickly and delays are due to receiving MTAs?

> But when a "ligh" mailing list, or a message with 20 or 50 recipients, 
> contains a nice number of recipients for the same domain, delivery of some 
> messages takes dozens of minutes, because destination MX delay my servers.
> With the change I ask, I'd have the same quality of service for small traffic.
> For large deliveries, I'm thinking to a patch for changing qmail queue 
> (sending to a low priority mail queue), so I will not care of large mailing 
> lists or messages with hundreds of recipients.

If delivery of some messages takes dozens of minutes, the connection to that 
host itself seems slow? Reducing the number of SMTP-connections surely would 
save some bandwidth, but the bulk of the bandwidth should still be the message 
content itself, so I would expect it to still be slow. Are you sure the 
destination is not e.g. a tarpit or something? There might be other reasons for 
the delays you see...

Also note that, if you send one mail to 50 recipients, this will result in 50 
individual items in the queue. As long as but one of these items is still 
unsent, qmailctl queue will list all 50 items as still being in the queue but 
will indicate with each item if said item has been sent. Once all items 
belonging to the message have been sent, they'll all no longer be shown in the 
queue. Is that the behavior you see when saying some messages need a long time 
to send?

Martin
-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] sending out newsletters using qmailtoaster

2010-07-06 Thread Martin Waschbuesch

Am 06.07.2010 um 19:12 schrieb Tonix (Antonio Nati):

> This is the global value, so keeping it low means to have a few global 
> connections working.
> It would be great if connections could be reused, so only a minimum of 
> connections should be opened for each destination IP.
> 
> It would be great to have such options:
> concurrency remote: as now
> new connection threshold [global]: if you have more than xx messages in queue 
> for single destination IP, open a new connection
> max connections limit [global]: per single destination IP max connection limit
> new connection threshold [IP]: if you have more than xx messages in queue for 
> a specific destination IP, open a new connection
> max connections limit [IP]: per specific destination IP max connections limit
> So, for example, you could put:
> for gmail: threshold 300, limit 20
> for yahoo: threshold 500, limit 10
> for myspecific: threshold 0 (infinite), limit 1
> for any: threshold 100, limit 5
> maxconcurrencyremote: 100

Bear with me for a second here:

Admittedly, using one connection for multiple transmissions might be more 
efficient.

However, that is only true if you actually have at least n > 1 mails to send to 
the same domain at a given time.
Unless you do emarketing (or have a huge mailing list) you do not know 
beforehand that this is actually the case. On the contrary, such a situation 
would be more or less random.

This basically means that every time qmail processes an item in its queue, it 
would need to do something like this:
- scan the queue for other emails to the same domain
- gather as many as the config says for that domain
- open a SMTP connection
- transmit the messages.
- dequeue the messages

The problem is this: For every time you only have one email to a specific 
domain in the queue, you add overhead instead of reducing it. The queue might 
be really full and still no other mail in it that needs to be delivered to the 
same domain.
Thus, this makes only sense if you know beforehand that there is a high amount 
of concurrency to a specific domain.

On the other hand:
- transmitting one mail per connection is safe.
- limits for messages / connection might be subject to change without notice 
and everyone using such a config would then have lots of bounces, etc. until 
someone figures out what the ISP in question changed.

> I'm just focused on efficient e-mail server, simply.

So am I. :-)

Martin

Re: [qmailtoaster] sending out newsletters using qmailtoaster

2010-07-06 Thread Martin Waschbuesch

Am 06.07.2010 um 18:34 schrieb Tonix (Antonio Nati):
> 
> I agree with you, but I find this qmail limit not acceptable. Even speaking 
> about 600 e-mails to the same domain we have problems, as qmail is going to 
> open 600 connections and the most of big ISP close connections after they got 
> the first 100 in a few seconds.
> 
> When this limit will be eliminated, we can speak about further limits.
> 
> Tonino
> 



You already can influence the number of outgoing connections:

/var/qmail/control/concurrencyremote

contains the number of concurrent connections open at any time - that is a good 
value.

Correct me if I am wrong, but I do not see how QMT could benefit from patching 
qmail in such a way as to make this more configurable as it already is (e.g. 
allow for per destination domain type configuration, etc.).

You know, perhaps the question is this: what is QMT designed to do? It's a 
full-fledged mail server suite designed and optimized to provide an alternative 
to stuff like Exchange, etc. allowing for virtual domain and virtual mailbox 
management so a multitude of users can read, write & exchange e-mail., using 
qmail as its MTA. Neither qmail nor QMT have been designed to provide email 
marketing functionality. They *may* be used to that end, but probably (like the 
stuff I listed earlier) with exceptions.
On the other hand, if you ended up installing a system that was designed and 
optimized to do email-marketing, I should not at all be surprised that while it 
*could* be used to provide the Exchange type services mentioned above, it 
probably would have some drawbacks.

Bottom line: This is not a one size fits all type situation.

Martin

--
"One may understand the cosmos, but never the ego; the self is more distant 
than any star."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: sending out newsletters using qmailtoaster

2010-07-05 Thread Martin Waschbuesch
Btw.,

I just found something interesting:

There seems to be a 'bare-bones' version of one vendor's email marketing 
solution that is distributed under some sort of Open Source License (CPAL or 
something like that). Now, I do not know that product, but it may be worth 
investigating - might save people a lot of cost:

http://www.openemm.org/

Cheers,

Martin

Am 05.07.2010 um 18:15 schrieb Eric Shubert:

> Martin Waschbuesch wrote:
>> Hi,
>> I happen to work in E-Marketing, so here's my five cents (hope it's 
>> helpful!)...
>> What I am going to say ASSUMES that highest possible deliverability is what 
>> you are after.
>> Am 05.07.2010 um 16:12 schrieb Tonix (Antonio Nati):
>>> Main problem I see is related to qmail opening a new session for each 
>>> outgoing email.
>>> Yahoo and others see hundreds of parallel sessions opened all together from 
>>> the same IP, so they close new connections from that IP, because they feel 
>>> to be attacked.
>>> We need a mechanism to send several e-mails using the same connection.
>>> 
>>> Tonino
>> That in itself would not be a solution at all, I am afraid. A lot of ISPs 
>> actually limit (on purpose) the amount of messages they accept per 
>> connection plus the number of connections within given time plus the number 
>> of concurrent connections.
>> You would need, and indeed major Email Service Providers have that at least 
>> for the major ISPs, one configuration profile per ISP to achieve ideal 
>> performance and deliverability. These profiles are not stable - ISPs often 
>> change them (without publicly broadcasting the fact) to throw off spammers.
>> But it is worse than that. New (from the standpoint of the ISP) senders have 
>> to train or 'seed' their IP. That is to say: achieve a consistent mailing 
>> frequency (number of mailings per timeframe), mailing size (recipients per 
>> mailing), bounce rates (there should never be spikes in your hard bounces, 
>> e.g. 550 type errors) and last but not least complaint rate (which should be 
>> next to non-existant if you want good deliverability). Complaint rate means 
>> if someone in e.g. AOL marks a mail and clicks the 'This is spam' type 
>> button.
>> Some of the checks ISPs make are automatic. They just monitor traffic and if 
>> there are spikes or 'irregular' behavior, your bandwidth gets limited, mails 
>> bounced, you name it.
>> Also, no matter how you acquired the emails you HAVE to remove hard-bounces 
>> and not retry sending to them again. Codes / Messages vary from ISP to ISP.
>> Last but not least it is very tedious to communicate with ISPs should you 
>> land on a blocklist (plus there are some public blocklists where you can 
>> never get removed)
>> I am very confident that qmail can handle all of this volume-wise, but it 
>> lacks the proper tools to fine-tune for Deliverability as well as automated 
>> bounce and complaint management that are required to achieve results 
>> comparable to professional senders.
>> Again, this all assumes that your main concern is Deliverability.
>> Cheers,
>> Martin
>> -
> 
> Very interesting, Martin. Thanks for the insight.
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"I hold it true, whate'er befall;
I feel it, when I sorrow most;
'Tis better to have loved and lost
Than never to have loved at all."

Alfred Lord Tennyson 'In Memoriam'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] apologies...

2010-07-05 Thread Martin Waschbuesch
Apologies to everyone on the list for attaching something that should only have 
been sent to Rajesh...

Sorry!

Martin

--
"However beautiful the strategy, you should occasionally look at the results."

Winston Churchill


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] sending out newsletters using qmailtoaster

2010-07-05 Thread Martin Waschbuesch
Hi,

I happen to work in E-Marketing, so here's my five cents (hope it's helpful!)...

What I am going to say ASSUMES that highest possible deliverability is what you 
are after.

Am 05.07.2010 um 16:12 schrieb Tonix (Antonio Nati):

> 
> Main problem I see is related to qmail opening a new session for each 
> outgoing email.
> Yahoo and others see hundreds of parallel sessions opened all together from 
> the same IP, so they close new connections from that IP, because they feel to 
> be attacked.
> We need a mechanism to send several e-mails using the same connection.
> 
> Tonino

That in itself would not be a solution at all, I am afraid. A lot of ISPs 
actually limit (on purpose) the amount of messages they accept per connection 
plus the number of connections within given time plus the number of concurrent 
connections.

You would need, and indeed major Email Service Providers have that at least for 
the major ISPs, one configuration profile per ISP to achieve ideal performance 
and deliverability. These profiles are not stable - ISPs often change them 
(without publicly broadcasting the fact) to throw off spammers.

But it is worse than that. New (from the standpoint of the ISP) senders have to 
train or 'seed' their IP. That is to say: achieve a consistent mailing 
frequency (number of mailings per timeframe), mailing size (recipients per 
mailing), bounce rates (there should never be spikes in your hard bounces, e.g. 
550 type errors) and last but not least complaint rate (which should be next to 
non-existant if you want good deliverability). Complaint rate means if someone 
in e.g. AOL marks a mail and clicks the 'This is spam' type button.

Some of the checks ISPs make are automatic. They just monitor traffic and if 
there are spikes or 'irregular' behavior, your bandwidth gets limited, mails 
bounced, you name it.

Also, no matter how you acquired the emails you HAVE to remove hard-bounces and 
not retry sending to them again. Codes / Messages vary from ISP to ISP.

Last but not least it is very tedious to communicate with ISPs should you land 
on a blocklist (plus there are some public blocklists where you can never get 
removed)

I am very confident that qmail can handle all of this volume-wise, but it lacks 
the proper tools to fine-tune for Deliverability as well as automated bounce 
and complaint management that are required to achieve results comparable to 
professional senders.

Again, this all assumes that your main concern is Deliverability.

Cheers,

Martin

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: RES: [qmailtoaster] Spamdyke Graylist Delay

2010-07-01 Thread Martin Waschbuesch
On a server I use it on, I have left the default settings intact. The timing 
settings you posted look like the default to me, so, I think all is in order.

You just have to be aware that graylisting causes delays.

Note: If you look at the graylist-max-secs=2678400, that means 44640 minutes or 
744 hours or 31 days. You can be pretty sure that any normal mail server would 
have retried well before that time runs out.

Martin


Am 01.07.2010 um 16:42 schrieb Thiago - TI - Realeza:

> Yes... could make sense
> 
> Do you think that I have to change max/min secs from graylist?
> 
> Thanks Martin
> 
> Thiago
> 
> -Mensagem original-----
> De: Martin Waschbuesch [mailto:mar...@waschbuesch.de] 
> Enviada em: quinta-feira, 1 de julho de 2010 11:36
> Para: qmailtoaster-list@qmailtoaster.com
> Assunto: Re: [qmailtoaster] Spamdyke Graylist Delay
> 
> Hi there,
> 
> This is very normal behaviour. Graylisting not only depends on your server's
> timing settings, but on the behavior of the sending MTA. If that MTA does
> not retry within a given time (that is what you can configure) the mail will
> not be delivered, but regarded as spam. However, the time the sending server
> waits before resending is not something you can configure.
> 
> That means that as long as the sending server's reply in a timeframe defined
> by your graylist-min-secs and graylist-max-secs, the mail will be delivered
> with exactly the retr delay that the sending server's admin had configured.
> 
> Makes sense?
> 
> Martin
> 
> 
> Am 01.07.2010 um 16:22 schrieb Thiago - TI - Realeza:
> 
>> Hello all
>> 
>> I have some “trouble” here.
>> 
>> For example, when I receive a message and spamdyke graylist it, I have an
> delay about 20 minutes to the message be delivered on my mailbox.
>> 
>> Here is a log
>> 
>> 07-01 10:37:50 spamdyke[17408]: DENIED_GRAYLISTED from:
> mailerweb.boletim.geh...@gehaka.com.br to: rodrigo.so...@domain.ind.br
> origin_ip: 201.6.108.170 origin_rdns: mail.gehaka.com.br auth: (unknown)
>> 
>> 
>> The message was delivered on my server at 10:37AM but was in my mailbox
> 20 minutes later. It happens with all messages that are graylisted.
>> 
>> I have ‘played’ with this conf a lot, mostly with graylist options. Read
> all documentation on spamdyke site and look for something here on list.
>> 
>> Someone have an trick ? Or it´s just normal? Remember, all messages get
> the same time to be delivered on mailboxes when graylisted.
>> 
>> Thanks!
>> 
>> Here is my spamdyke conf:
>> 
>> dns-blacklist-entry=zen.spamhaus.org
>> dns-blacklist-entry=bl.spamcop.net
>> graylist-dir=/var/spamdyke/graylist
>> graylist-level=always
>> graylist-max-secs=2678400
>> graylist-min-secs=180
>> greeting-delay-secs=5
>> idle-timeout-secs=60
>> ip-blacklist-file=/etc/spamdyke/blacklist_ip
>> ip-in-rdns-keyword-blacklist-file=/etc/spamdyke/blacklist_keywords
>> ip-in-rdns-keyword-whitelist-file=/etc/spamdyke/whitelist_keywords
>> ip-whitelist-file=/etc/spamdyke/whitelist_ip
>> local-domains-file=/var/qmail/control/rcpthosts
>> log-level=info
>> log-target=stderr
>> max-recipients=50
>> #policy-url=http://my.policy.explanation.url/
>> rdns-blacklist-file=/etc/spamdyke/blacklist_rdns
>> rdns-whitelist-file=/etc/spamdyke/whitelist_rdns
>> recipient-blacklist-file=/etc/spamdyke/blacklist_recipients
>> reject-empty-rdns
>> #reject-ip-in-cc-rdns
>> reject-missing-sender-mx
>> reject-unresolvable-rdns
>> sender-blacklist-file=/etc/spamdyke/blacklist_senders
>> sender-whitelist-file=/etc/spamdyke/whitelist_senders
>> tls-certificate-file=/var/qmail/control/servercert.pem
> 
> 
> --
> "The nice thing about being a celebrity is that when you bore people, they
> think it's their fault."
> 
> Henry Kissinger
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> 
> -
> Please visit qmailtoaster.com for the latest news, updates, and
> packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail:
> qmailtoaster-list-h...@qmailtoaster.com
> 
> 
> 
> 
> ---

Re: [qmailtoaster] Spamdyke Graylist Delay

2010-07-01 Thread Martin Waschbuesch
Hi there,

This is very normal behaviour. Graylisting not only depends on your server's 
timing settings, but on the behavior of the sending MTA. If that MTA does not 
retry within a given time (that is what you can configure) the mail will not be 
delivered, but regarded as spam. However, the time the sending server waits 
before resending is not something you can configure.

That means that as long as the sending server's reply in a timeframe defined by 
your graylist-min-secs and graylist-max-secs, the mail will be delivered with 
exactly the retr delay that the sending server's admin had configured.

Makes sense?

Martin


Am 01.07.2010 um 16:22 schrieb Thiago - TI - Realeza:

> Hello all
>  
> I have some “trouble” here.
>  
> For example, when I receive a message and spamdyke graylist it, I have an 
> delay about 20 minutes to the message be delivered on my mailbox.
>  
> Here is a log
>  
> 07-01 10:37:50 spamdyke[17408]: DENIED_GRAYLISTED from: 
> mailerweb.boletim.geh...@gehaka.com.br to: rodrigo.so...@domain.ind.br 
> origin_ip: 201.6.108.170 origin_rdns: mail.gehaka.com.br auth: (unknown)
>  
>  
> The message was delivered on my server at 10:37AM but was in my mailbox  20 
> minutes later. It happens with all messages that are graylisted.
>  
> I have ‘played’ with this conf a lot, mostly with graylist options. Read all 
> documentation on spamdyke site and look for something here on list.
>  
> Someone have an trick ? Or it´s just normal? Remember, all messages get the 
> same time to be delivered on mailboxes when graylisted.
>  
> Thanks!
>  
> Here is my spamdyke conf:
>  
> dns-blacklist-entry=zen.spamhaus.org
> dns-blacklist-entry=bl.spamcop.net
> graylist-dir=/var/spamdyke/graylist
> graylist-level=always
> graylist-max-secs=2678400
> graylist-min-secs=180
> greeting-delay-secs=5
> idle-timeout-secs=60
> ip-blacklist-file=/etc/spamdyke/blacklist_ip
> ip-in-rdns-keyword-blacklist-file=/etc/spamdyke/blacklist_keywords
> ip-in-rdns-keyword-whitelist-file=/etc/spamdyke/whitelist_keywords
> ip-whitelist-file=/etc/spamdyke/whitelist_ip
> local-domains-file=/var/qmail/control/rcpthosts
> log-level=info
> log-target=stderr
> max-recipients=50
> #policy-url=http://my.policy.explanation.url/
> rdns-blacklist-file=/etc/spamdyke/blacklist_rdns
> rdns-whitelist-file=/etc/spamdyke/whitelist_rdns
> recipient-blacklist-file=/etc/spamdyke/blacklist_recipients
> reject-empty-rdns
> #reject-ip-in-cc-rdns
> reject-missing-sender-mx
> reject-unresolvable-rdns
> sender-blacklist-file=/etc/spamdyke/blacklist_senders
> sender-whitelist-file=/etc/spamdyke/whitelist_senders
> tls-certificate-file=/var/qmail/control/servercert.pem


--
"The nice thing about being a celebrity is that when you bore people, they 
think it's their fault."

Henry Kissinger


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Vacation Notice with hyphen emails.

2010-06-30 Thread Martin Waschbuesch
As far as I recall, there is something about hyphens in vpopmail that does not 
work? Or was that only in connection with ezmlm?
But anyway, I know I have come across something like this before, too.

Martin

Am 30.06.2010 um 20:42 schrieb P.V.Anthony:

> Hi,
> 
> Currently having some problems with vacation notice in qmailadmin.
> 
> Here are want was done.
> 
> 1. Created an email account as test-t...@sound.com.sg
> 2. Created a vacation notice in qmailadmin for test-t...@sound.com.sg
> 3. Sent an email to test-t...@sound.com.sg
> 
> Did not get the autorespond.
> 
> Then created test.t...@sound.com.sg and created the vacation notice.
> Sent an email and got the autorespond.
> 
> Can anyone confirm that this is the same behaviour on their systems as well?
> 
> If not, please let me know what to check. Maybe I may have missed some
> setting.
> 
> P.V.Anthony
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"Years ago my mother used to say to me, she'd say, 'In this world, Elwood, you 
must be oh so smart or oh so pleasant.' Well, for years I was smart. I 
recommend pleasant."

James Stewart as Elwood P. Dowd in 'Harvey'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Spamassassin question

2010-06-30 Thread Martin Waschbuesch
Am 30.06.2010 um 20:14 schrieb Eric Shubert:
> 
> Not easily. There has been some discussion of this in the past on the list, 
> so you might find something in the archives.
> 
> SA isn't as well suited to individual configurations as dspam, although 
> domain-based configuration might not be so bad. If I absolutely had to set up 
> individual bayes databases, I'd look closer into dspam. Before doing that 
> though, I'd look very carefully at the problem that this is intended to solve 
> (which you haven't shared with us).
> 
> -- 
> -Eric 'shubes'
> 


Thanks, Eric. It is not a must and currently there are no problems with 
site-wide learning. I just wondered if it was sort of easily done.

Martin

--
"The nice thing about being a celebrity is that when you bore people, they 
think it's their fault."

Henry Kissinger


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] Spamassassin question

2010-06-30 Thread Martin Waschbuesch
Hi all,

Is there a way to modify QMT to allow for per user or at least per domain 
bayes-db?
I know that simscan has some sort of support for it, though there is trouble 
with mails to multiple recipients.

If anyone has any ideas - let me know.

Thanks,

Martin

--
“Majority rule only works if you're also considering individual rights. Because 
you can't have five wolves and one sheep voting on what to have for supper.”

Larry Flynt


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: spamassassin

2010-06-21 Thread Martin Waschbuesch
Perfect.

Oh, and, I only wanted to explain why it'd be important for me to deselect 
features of spamdyke that don't fit my needs.

Martin

Am 21.06.2010 um 18:09 schrieb Eric Shubert:

> You can use whichever features you choose. It's up to you.
> 
> Of course fighting spam is always a balancing act with a wide array of 
> dependencies. Finding the best balance takes some doing. The flexiblity that 
> spamyke provides makes it useful in most circumstances.
> 
> Note, I don't necessarily agree with your policy, but I don't see any purpose 
> in debating it here. If it works for you, great. However, you can use a lot 
> more of spamdyke's filters than one RBL, without getting any false positives.
> 
> -- 
> -Eric 'shubes'
> 
> Martin Waschbuesch wrote:
>> Thanks for the explanation Eric & Michael,
>> I would like to use SpamDyke, but only very ver conservatively. E.g. if I 
>> could block people that I block now (cbl.abuseat.org) during SMTP, that 
>> would be great. The other features like greylisting etc., I would not like 
>> to use.
>> My own policy (as long as my mail server has the bandwidth to handle it) is 
>> to let anything in that *might* be legit. I know that people with wrong DNS 
>> setup should not send out mail into the world like that, but I prefer this 
>> to just add to their spam score in spamassassin instead of blocking people 
>> who just don't know better. (They need educating, not blocking) and it IS 
>> hard to explain false positives to endusers... As I explained in a different 
>> post, my setup does not throw stuff away, but puts spam into a 'dubious 
>> looking' folder and users have to decide what to do with it - which is what 
>> they got for complaining about said false positives too often ;-)
>> Anyway, Is it possible to use SpamDyke for just that? a very conservative 
>> DNSBL like abuseat and nothing else??
>> Martin
>> Am 21.06.2010 um 17:01 schrieb Eric Shubert:
>>> I agree with Michael that spamdyke is great. Highly recommended.
>>> 
>>> I'd like to clarify the tcpserver -h option though. This option does do an 
>>> rDNS lookup which is duplicative with spamdyke, but I think it's best to do 
>>> both, as they're used for different purposes. Spamdyke uses rDNS for 
>>> blocking. Tcpserver's -h option simply sets the TCPREMOTEHOST variable, 
>>> which does no blocking of any kind, but does provide more complete logging 
>>> messages. The overhead of the duplicate rDNS lookup is negligible 
>>> (immeasurable I expect), since the lookup is cached. That's why I think 
>>> it's best to have both.
>>> 
>>> Sam C (spamdyke's author) discusses this (and other things) here:
>>> http://www.mail-archive.com/spamdyke-us...@spamdyke.org/msg00842.html
>>> 
>>> -- 
>>> -Eric 'shubes'
>>> 
>>> Michael Colvin wrote:
>>>> Are you using SpamDyke?  If so, and you are checking for RDNS there, that
>>>> would seem duplicative to me.  I block any mail server that does not have
>>>> RDNS using SpamDyke.  Better to stop it there than waste time scanning it
>>>> with SpamAssassin...
>>>> Michael J. Colvin
>>>> NorCal Internet Services
>>>> www.norcalisp.com
>>>> 
>>>>> -Original Message-
>>>>> From: Martin Waschbuesch [mailto:mar...@waschbuesch.de]
>>>>> Sent: Sunday, June 20, 2010 1:57 AM
>>>>> To: qmailtoaster-list@qmailtoaster.com
>>>>> Subject: Re: [qmailtoaster] spamassassin
>>>>> 
>>>>> Found it myself:
>>>>> 
>>>>> In /var/qmail/supervise/smtp/run, I had forgotten to enable rDNS (default
>>>>> seems to be off), by changing the -H flag to -h.
>>>>> 
>>>>> Thanks,
>>>>> 
>>>>> Martin
>>>>> 
>>>>> Am 20.06.2010 um 10:48 schrieb Martin Waschbuesch:
>>>>> 
>>>>>> Hi all,
>>>>>> 
>>>>>> There is something weird I noticed in my logs: every email I receive
>>>>> gets marked as RDNS_NONE by spamassassin. This was not the case with my
>>>>> previous setup. lookup and reverse lookup work, so I am at a loss as to
>>>>> why this is? Perhaps some perl module I have not installed, etc?
>>>>>> Martin
>>>>>> 
>>>>>> --
>>>>>> "Imagination is more import

Re: [qmailtoaster] Re: spamassassin

2010-06-21 Thread Martin Waschbuesch
Thanks for the explanation Eric & Michael,

I would like to use SpamDyke, but only very ver conservatively. E.g. if I could 
block people that I block now (cbl.abuseat.org) during SMTP, that would be 
great. The other features like greylisting etc., I would not like to use.
My own policy (as long as my mail server has the bandwidth to handle it) is to 
let anything in that *might* be legit. I know that people with wrong DNS setup 
should not send out mail into the world like that, but I prefer this to just 
add to their spam score in spamassassin instead of blocking people who just 
don't know better. (They need educating, not blocking) and it IS hard to 
explain false positives to endusers... As I explained in a different post, my 
setup does not throw stuff away, but puts spam into a 'dubious looking' folder 
and users have to decide what to do with it - which is what they got for 
complaining about said false positives too often ;-)

Anyway, Is it possible to use SpamDyke for just that? a very conservative DNSBL 
like abuseat and nothing else??

Martin

Am 21.06.2010 um 17:01 schrieb Eric Shubert:

> I agree with Michael that spamdyke is great. Highly recommended.
> 
> I'd like to clarify the tcpserver -h option though. This option does do an 
> rDNS lookup which is duplicative with spamdyke, but I think it's best to do 
> both, as they're used for different purposes. Spamdyke uses rDNS for 
> blocking. Tcpserver's -h option simply sets the TCPREMOTEHOST variable, which 
> does no blocking of any kind, but does provide more complete logging 
> messages. The overhead of the duplicate rDNS lookup is negligible 
> (immeasurable I expect), since the lookup is cached. That's why I think it's 
> best to have both.
> 
> Sam C (spamdyke's author) discusses this (and other things) here:
> http://www.mail-archive.com/spamdyke-us...@spamdyke.org/msg00842.html
> 
> -- 
> -Eric 'shubes'
> 
> Michael Colvin wrote:
>> Are you using SpamDyke?  If so, and you are checking for RDNS there, that
>> would seem duplicative to me.  I block any mail server that does not have
>> RDNS using SpamDyke.  Better to stop it there than waste time scanning it
>> with SpamAssassin...
>> Michael J. Colvin
>> NorCal Internet Services
>> www.norcalisp.com
>> 
>>> -Original Message-
>>> From: Martin Waschbuesch [mailto:mar...@waschbuesch.de]
>>> Sent: Sunday, June 20, 2010 1:57 AM
>>> To: qmailtoaster-list@qmailtoaster.com
>>> Subject: Re: [qmailtoaster] spamassassin
>>> 
>>> Found it myself:
>>> 
>>> In /var/qmail/supervise/smtp/run, I had forgotten to enable rDNS (default
>>> seems to be off), by changing the -H flag to -h.
>>> 
>>> Thanks,
>>> 
>>> Martin
>>> 
>>> Am 20.06.2010 um 10:48 schrieb Martin Waschbuesch:
>>> 
>>>> Hi all,
>>>> 
>>>> There is something weird I noticed in my logs: every email I receive
>>> gets marked as RDNS_NONE by spamassassin. This was not the case with my
>>> previous setup. lookup and reverse lookup work, so I am at a loss as to
>>> why this is? Perhaps some perl module I have not installed, etc?
>>>> Martin
>>>> 
>>>> --
>>>> "Imagination is more important than knowledge. For knowledge is limited
>>> to all we now know and understand, while imagination embraces the entire
>>> world, and all there ever will be to know and understand."
>>>> Albert Einstein
>>>> 
>>>> 
>>>> 
>>> -
>>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>> (www.vickersconsulting.com)
>>>>   Vickers Consulting Group offers Qmailtoaster support and
>>> installations.
>>>> If you need professional help with your setup, contact them today!
>>>> 
>>> -
>>>>Please visit qmailtoaster.com for the latest news, updates, and
>>> packages.
>>>> To unsubscribe, e-mail: qmailtoaster-list-
>>> unsubscr...@qmailtoaster.com
>>>>For additional commands, e-mail: qmailtoaster-list-
>>> h...@qmailtoaster.com
>>>> 
>>> 
>>> --
>>> "The whole modern world has divided itself into Conservatives and
>>> Progressives. The business of Progressives is to go on making mistakes.
>>> The business of the Conservatives is to prevent the mistakes from being
>>> c

Re: [qmailtoaster] spamassassin

2010-06-20 Thread Martin Waschbuesch
Hi Mike,

No, I am not using SpamDyke as of yet.

Thanks!!

Martin

Am 20.06.2010 um 23:27 schrieb Michael Colvin:

> Are you using SpamDyke?  If so, and you are checking for RDNS there, that
> would seem duplicative to me.  I block any mail server that does not have
> RDNS using SpamDyke.  Better to stop it there than waste time scanning it
> with SpamAssassin...
> 
>  
> Michael J. Colvin
> NorCal Internet Services
> www.norcalisp.com
>  
> 
> 
> 
>> -Original Message-
>> From: Martin Waschbuesch [mailto:mar...@waschbuesch.de]
>> Sent: Sunday, June 20, 2010 1:57 AM
>> To: qmailtoaster-list@qmailtoaster.com
>> Subject: Re: [qmailtoaster] spamassassin
>> 
>> Found it myself:
>> 
>> In /var/qmail/supervise/smtp/run, I had forgotten to enable rDNS (default
>> seems to be off), by changing the -H flag to -h.
>> 
>> Thanks,
>> 
>> Martin
>> 
>> Am 20.06.2010 um 10:48 schrieb Martin Waschbuesch:
>> 
>>> Hi all,
>>> 
>>> There is something weird I noticed in my logs: every email I receive
>> gets marked as RDNS_NONE by spamassassin. This was not the case with my
>> previous setup. lookup and reverse lookup work, so I am at a loss as to
>> why this is? Perhaps some perl module I have not installed, etc?
>>> 
>>> Martin
>>> 
>>> --
>>> "Imagination is more important than knowledge. For knowledge is limited
>> to all we now know and understand, while imagination embraces the entire
>> world, and all there ever will be to know and understand."
>>> 
>>> Albert Einstein
>>> 
>>> 
>>> 
>> -
>>> Qmailtoaster is sponsored by Vickers Consulting Group
>> (www.vickersconsulting.com)
>>>   Vickers Consulting Group offers Qmailtoaster support and
>> installations.
>>> If you need professional help with your setup, contact them today!
>>> 
>> -
>>>Please visit qmailtoaster.com for the latest news, updates, and
>> packages.
>>> 
>>> To unsubscribe, e-mail: qmailtoaster-list-
>> unsubscr...@qmailtoaster.com
>>>For additional commands, e-mail: qmailtoaster-list-
>> h...@qmailtoaster.com
>>> 
>>> 
>> 
>> 
>> --
>> "The whole modern world has divided itself into Conservatives and
>> Progressives. The business of Progressives is to go on making mistakes.
>> The business of the Conservatives is to prevent the mistakes from being
>> corrected."
>> 
>> Gilbert K. Chesterton
>> 
>> 
>> --
>> ---
>> Qmailtoaster is sponsored by Vickers Consulting Group
>> (www.vickersconsulting.com)
>>Vickers Consulting Group offers Qmailtoaster support and
>> installations.
>>  If you need professional help with your setup, contact them today!
>> --
>> ---
>> Please visit qmailtoaster.com for the latest news, updates, and
>> packages.
>> 
>>  To unsubscribe, e-mail: qmailtoaster-list-
>> unsubscr...@qmailtoaster.com
>> For additional commands, e-mail: qmailtoaster-list-
>> h...@qmailtoaster.com
>> 
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"What a fool believes he sees, no wise man has the power to reason away..."

Doobie Brothers


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] spamassassin

2010-06-20 Thread Martin Waschbuesch
Found it myself:

In /var/qmail/supervise/smtp/run, I had forgotten to enable rDNS (default seems 
to be off), by changing the -H flag to -h.

Thanks,

Martin

Am 20.06.2010 um 10:48 schrieb Martin Waschbuesch:

> Hi all,
> 
> There is something weird I noticed in my logs: every email I receive gets 
> marked as RDNS_NONE by spamassassin. This was not the case with my previous 
> setup. lookup and reverse lookup work, so I am at a loss as to why this is? 
> Perhaps some perl module I have not installed, etc?
> 
> Martin
> 
> --
> "Imagination is more important than knowledge. For knowledge is limited to 
> all we now know and understand, while imagination embraces the entire world, 
> and all there ever will be to know and understand."
> 
> Albert Einstein
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"The whole modern world has divided itself into Conservatives and Progressives. 
The business of Progressives is to go on making mistakes. The business of the 
Conservatives is to prevent the mistakes from being corrected."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] spamassassin

2010-06-20 Thread Martin Waschbuesch
Hi all,

There is something weird I noticed in my logs: every email I receive gets 
marked as RDNS_NONE by spamassassin. This was not the case with my previous 
setup. lookup and reverse lookup work, so I am at a loss as to why this is? 
Perhaps some perl module I have not installed, etc?

Martin

--
"Imagination is more important than knowledge. For knowledge is limited to all 
we now know and understand, while imagination embraces the entire world, and 
all there ever will be to know and understand."

Albert Einstein


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: freshclam & logwatch

2010-06-19 Thread Martin Waschbuesch
Hi Eric,

I also applied the patch you mentioned, restored the updated (e.g. with 
'LogTime Yes'  freshclam.conf) and this is the result in my logwatch email:

- clam-update Begin  

Last ClamAV update process started at Sat Jun 18 19:38:50 2010

Last Status:
   main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder: 
sven)
   daily.cld is up to date (version: 11220, sigs: 96675, f-level: 51, builder: 
guitar)
   bytecode.cld is up to date (version: 26, sigs: 3, f-level: 51, builder: 
nervous)

-- clam-update End - 

It works and I prefer this solution to changing what freshclam does by default 
when installing the package.

Thanks,

Martin

Am 19.06.2010 um 19:25 schrieb Eric Shubert:

> Finn Buhelt wrote:
>> Hi Eric.
>> I have checked clamav-toaster-0.95.3.1.3.31  : logtime set to default NO
>>   clamav-toaster-0.96.0.1.3   : logtime set to 
>> YES (faulty)
>>   clamav-toaster-0-96.1.1.3.36 : logtime set to YES 
>> (faulty)
>> This indicates a change in the freshclam.conf file when moving from version 
>> 0.95 to 0.96 - there are also other changes in the conf file. There seems to 
>> be new directives from ver. 0.96 - all are at the end of the conf file 
>> (statistics, google browsing etc) but they are all disabled and has nothing 
>> to do with the logtime directive, but maybe the logtime change has sneaked 
>> in when adding these new features.
>> I think that everyone that installs from scratch and all that uses 
>> qtp-update gets the faulty logtime setting (I think qtp-update overwrites 
>> the current freshclam.conf when put into production).
> 
> No, qtp-newmodel (not qtp-update) follows whatever rules are in the spec file 
> for configs.
> 
>> Only if You 'manually' rpm updates  You 'only' get the faulty setting in the 
>> freshclam.conf.rpmnew file - this ofcourse only if the logtime setting was 
>> disabled in the freshclam.conf file You are updating.
> 
> That's because the freshclam.conf file is now coded as 'noreplace' in the 
> spec file, which is correct (imho). I don't believe this was always the case, 
> as I have 2 freshclam.conf.rpmsave files (dated Jan and Apr this year), which 
> indicate that 'noreplace' was added fairly recently. BTW, both rpmsave files 
> have LogTime commented out.
> 
> So here's what I think. 0.96.0 introduced "LogTime Yes", and did not have 
> noreplace in the spec file, so anyone upgrading/installing 0.96.0 got the new 
> setting. Then 0.96.1 came out, again with "LogTime Yes", but the config was 
> changed to "noreplace". So anyone upgrading from a version previous to 0.96.0 
> to version 0.96.1 is ok, but anyone who had 0.96.0 installed in any way (new 
> or upgraded) has "LogTime Yes".
> 
>> But  why, may we ask, is the logtime directive in there at all ? It is not 
>> documented anywhere as being a valid setting in the freshclam.conf file !
> 
> It's documented in the config file. ;) Sometimes the man pages aren't kept up 
> to date, or things get missed in the documentation, especially on a .0 
> release.
> 
> IMHO, a log file w/out time stamps on every line are deficient. I really like 
> the option. However, the time format should be consistent with the syslog 
> format (which it is not).
> 
> I believe the best remedy for this problem is to fix logwatch to deal 
> appropriately with the timestamp in the log. The fix I referred to yesterday 
> does appear to work fine. The fix isn't very robust though, as  the format of 
> the timestamp is not flexible at all. That's a fault in logwatch though, not 
> clamav.
> 
>> BTW You are not loosing it - I think many would have lost their minds having 
>> all these threads going on in this forum as You have - I know everyone in 
>> here appreciates the huge effort You put into responding to all our 
>> 'challenges'  - so keep up the good work - You are not allowed to loose 
>> anything ;-)
> 
> Ha! Thanks.
> 
>> Thanx,
>> Finn
>> - Original Message - From: "Eric Shubert" 
>> To: 
>> Sent: Saturday, June 19, 2010 1:45 AM
>> Subject: [qmailtoaster] Re: freshclam & logwatch
>>> Finn Buhelt wrote:
 Hi Eric.
 
 Now I've done some research regarding the logtime 'feature'.
 
 According to documentation there is no 'logtime directive' in a 
 freshclam.conf file - even looking through some of the sourcecode 
 (freshclam) I cannot find anything that deals with such a directive - well 
 okay it's been many years since I did code so I may absolutely have missed 
 something.
 
 But I did check/unpack latest clamav-toaster-0.96.1.1.3.36.rpm and found 
 that the logtime is set to YES in the freshclam.conf file - which matches 
 perfectly with my own latest freshclam.conf.rpmnew 
 (etc/freshclam.conf.rpmnew) file that has the YES setting.
 
 I think the YES setting may have been introduced when 
>>>

Re: [qmailtoaster] Re: freshclam & logwatch

2010-06-18 Thread Martin Waschbuesch
Eric,

I know how mine came to be in that state now.

Before I reinstalled my server with x86_64, it had also run 0.96.1 (I upgraded 
to that version of clamav when it came out).
Now, upgrading will only create a freshclam.conf_rpmnew file instead of 
overwriting the old one.
I still had the backup of the old server and said freshclam.conf_rpmnew file 
DID contain the "LogTime yes" directive.

Now with the new installation, of course that directive was also used as it was 
the first time the 0.96.1 version of the clamav package was installed.

Can anyone confirm that is what happened to them too?

It may be that a fresh install (or --force option to replace files) will cause 
it and a simple update won't.

Martin

Am 18.06.2010 um 17:40 schrieb Eric Shubert:

> I see from the /usr/share/logwatch/scripts/services/clam-update script that 
> the date on the 'started' line is used, so it doesn't need the other dates. 
> Bad assumption on my part.
> 
> I'm getting the same problem as Martin had on only one of several servers. I 
> though that they were all configured the same (they're all running 0.96.1), 
> but I checked them out and found that indeed the problem host had "LogTime 
> yes" uncommented. Finn, I'm sorry I ever doubted you! My apologies.
> 
> That brings 2 questions to mind:
> 
> 1) How did some servers end up with this setting, yet others did not?
> 
> I'm not really worried about this, but it's a little perplexing to me. 
> Perhaps I turned it on at some point, but there are 2 .rpmsave files, and 
> both have it commented out. I'm guessing that it had something to do with the 
> upgrade path.
> 
> 2) Can the logwatch clam-update script be fixed to handle the "LogTime yes" 
> configuration setting?
> 
> I found a patch for the clam-update script at 
> http://permalink.gmane.org/gmane.comp.log.logwatch.devel/1622 that I'll try 
> out. I'll try it with both LogTime settings, and see what happens with 
> tomorrow's logwatch run. (I'm a little too busy to test it manually). This 
> patch was first submitted Jul'08 on the logwatch-devel list. I've inquired as 
> to which release (if any) it's been included with.
> 
> 
> Also, Martin, is the message you show from the log I take it? What message 
> are you getting in the logwatch output? I'm getting:
> - clam-update Begin 
> 
> Last ClamAV update process started at Thu Jun 17 23:03:32 2010
> 
> Last Status:
>main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder: 
> sven)
>daily.cld is up to date (version: 11212, sigs: 96650, f-level: 51, 
> builder: ccordes)
>bytecode.cld is up to date (version: 26, sigs: 3, f-level: 51, builder: 
> nervous)
> 
> -- clam-update End -
> 
> 
> -- 
> -Eric 'shubes'
> 
> Martin Waschbuesch wrote:
>> Apparently, when you set logtime to no, logwatch will pick up on a time 
>> stamp:
>> --
>> freshclam daemon 0.96.1 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
>> ClamAV update process started at Thu Jun 17 12:05:46 2010
>> main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder: 
>> sven)
>> daily.cld is up to date (version: 11212, sigs: 96650, f-level: 51, builder: 
>> ccordes)
>> bytecode.cld is up to date (version: 26, sigs: 3, f-level: 51, builder: 
>> nervous)
>> --
>> So, it works again for me! AND you still have date information.
>> Thanks,
>> Martin
>> Am 18.06.2010 um 03:31 schrieb Eric Shubert:
>>> Perhaps the clamav-toaster version of freshclam.conf needs updating.
>>> 
>>> Would you care to diff the toaster version with the current stock clamav 
>>> version?
>>> 
>>> -- 
>>> -Eric 'shubes'
>>> 
>>> Finn Buhelt wrote:
>>>> Hi Eric.
>>>> FYI - just checked documentation for freshclam.conf  - there's is no 
>>>> logtime directive according to Manual Reference Pages  freshclam.conf (5) !
>>>> /Finn
>>>> - Original Message - From: "Eric Shubert" 
>>>> To: 
>>>> Sent: Friday, June 18, 2010 12:22 AM
>>>> Subject: [qmailtoaster] Re: freshclam & logwatch
>>>>> While disabling logtime might get rid of the message, I don't think it's 
>>>>> the right fix. I would expect that disabling logtime would prohibit 
>>>>> logwatch from showing *any* freshclam 

Re: [qmailtoaster] Spamassassin Error

2010-06-18 Thread Martin Waschbuesch
I would recommend doing a

yum search Bignum

for instance.

The result is (on my machine):


# yum search bignum
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * addons: centos.intergenia.de
 * base: ftp.plusline.de
 * extras: centos.intergenia.de
 * rpmforge: ftp-stud.fht-esslingen.de
 * updates: centos.intergenia.de
Excluding Packages in global exclude list
Finished
=== Matched: bignum 
clisp.x86_64 : ANSI Common Lisp implementation
perl-Crypt-OpenSSL-Bignum.x86_64 : OpenSSL's multiprecision integer arithmetic

yum install perl-Crypt-OpenSSL-Bignum

will do the trick - did for me anyway.

sa-compile should solve the other problem.

Am 18.06.2010 um 12:39 schrieb Scott Hughes:

> No, I don't think I've ever ran sa-compile.
> 
> Scott
> 
> 
> 
> On Jun 18, 2010, at 2:20 AM, Sérgio Rosa  wrote:
> 
>> Maxwell Smart wrote:
>>> I am pretty sure those are Perl modules you'll need to install.
>>> 
>>> On 06/17/2010 08:04 PM, Scott Hughes wrote:
 I am getting the following error in my Spamassassin log:
 
 
 error: Can't locate Mail/SpamAssassin/CompiledRegexps/body_0.pm in @INC 
 (@INC contains: /var/lib/spamassassin/compiled/5.008/3.002005 
 /var/lib/spamassassin/compiled/5.008/3.002005/auto lib 
 /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi 
 /usr/lib/perl5/vendor_perl/5.8.8 
 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi 
 /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl 
 /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.8/i386-linux-thread-multi 
 /usr/lib/perl5/5.8.8) at (eval 1384) line 1.
 
 
 I assume as it states it can't find "body_0.pm".  I'm just not sure how to 
 resolve this issue or if it will resolve itself on the next update.
 
 I also get a similar message for 'Bignum.pm' (can't locate) and 
 freemail.pm' (failed to parse).
 
 Has anyone seen this error before?  I don't seem to be able to find 
 anything on this error on the Spamassassin site or by Googling it.  I get 
 hits all around it, but nothing that is exactly on target.
 
 Thanks,
 
 Scott
 
>>> 
>>> -- 
>>> Cecil Yother, Jr. "cj"
>>> cj's
>>> 2318 Clement Ave
>>> Alameda, CA  94501
>>> 
>>> tel 510.865.2787
>>> http://yother.com
>>> -
>>>  Qmailtoaster is sponsored by Vickers Consulting Group 
>>> (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster 
>>> support and installations. If you need professional help with your setup, 
>>> contact them today! 
>>> -
>>>  Please visit qmailtoaster.com for the latest news, updates, and packages. 
>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For 
>>> additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> did you run sa-compile after update of SA?
>> 
>> Sergio Rosa
>> 
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group 
>> (www.vickersconsulting.com)
>>  Vickers Consulting Group offers Qmailtoaster support and installations.
>>If you need professional help with your setup, contact them today!
>> -
>>   Please visit qmailtoaster.com for the latest news, updates, and packages.
>>To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>>   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"It isn't that they can't see the solution. It is that they can't see the 
problem."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mai

Re: [qmailtoaster] Re: freshclam & logwatch

2010-06-18 Thread Martin Waschbuesch
Apparently, when you set logtime to no, logwatch will pick up on a time stamp:

--
freshclam daemon 0.96.1 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
ClamAV update process started at Thu Jun 17 12:05:46 2010
main.cvd is up to date (version: 52, sigs: 704727, f-level: 44, builder: sven)
daily.cld is up to date (version: 11212, sigs: 96650, f-level: 51, builder: 
ccordes)
bytecode.cld is up to date (version: 26, sigs: 3, f-level: 51, builder: nervous)
--

So, it works again for me! AND you still have date information.

Thanks,

Martin

Am 18.06.2010 um 03:31 schrieb Eric Shubert:

> Perhaps the clamav-toaster version of freshclam.conf needs updating.
> 
> Would you care to diff the toaster version with the current stock clamav 
> version?
> 
> -- 
> -Eric 'shubes'
> 
> Finn Buhelt wrote:
>> Hi Eric.
>> FYI - just checked documentation for freshclam.conf  - there's is no logtime 
>> directive according to Manual Reference Pages  freshclam.conf (5) !
>> /Finn
>> - Original Message - From: "Eric Shubert" 
>> To: 
>> Sent: Friday, June 18, 2010 12:22 AM
>> Subject: [qmailtoaster] Re: freshclam & logwatch
>>> While disabling logtime might get rid of the message, I don't think it's 
>>> the right fix. I would expect that disabling logtime would prohibit 
>>> logwatch from showing *any* freshclam information, as logwatch wouldn't be 
>>> able to tell which messages are from which date. Log messages without a 
>>> time stamp are pretty much useless imo. Unless I'm misunderstanding what 
>>> this option does. I think it's intended for configurations where log 
>>> messages go to the syslog, which puts its own timestamp on messages.
>>> 
>>> 
>>> Finn Buhelt wrote:
 Hi Martin.
 
 In addition to removing the 1'st line in the logfile do this :
 
 In the freshclam.conf file (/etc/freshclam.conf) disable logtime from yes 
 to NO.
 
 Regards,
 
 Finn Buhelt
 
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"I hold it true, whate'er befall;
I feel it, when I sorrow most;
'Tis better to have loved and lost
Than never to have loved at all."

Alfred Lord Tennyson 'In Memoriam'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: freshclam & logwatch

2010-06-17 Thread Martin Waschbuesch
Hi Eric,

I tried what Dave had suggested to no avail. Now, I deleted the logfile, ran 
'service freshclam restart' and this is the logfile in 
/var/log/clamav/freshclam.log:

Thu Jun 17 19:10:14 2010 -> --
Thu Jun 17 19:10:14 2010 -> freshclam daemon 0.96.1 (OS: linux-gnu, ARCH: 
x86_64, CPU: x86_64)
Thu Jun 17 19:10:14 2010 -> ClamAV update process started at Thu Jun 17 
19:10:14 2010
Thu Jun 17 19:10:14 2010 -> main.cvd is up to date (version: 52, sigs: 704727, 
f-level: 44, builder: sven)
Thu Jun 17 19:10:14 2010 -> daily.cld is up to date (version: 11207, sigs: 
96571, f-level: 51, builder: ccordes)
Thu Jun 17 19:10:14 2010 -> bytecode.cld is up to date (version: 26, sigs: 3, 
f-level: 51, builder: nervous)
Thu Jun 17 19:10:14 2010 -> --


The result for logwatch is still (I ran it manually):

- clam-update Begin  

The ClamAV update process (freshclam daemon) was not running!
If you no longer wish to run freshclam, deleting the freshclam.log
file will suppress this error message.

-- clam-update End - 

Now, one thing I wondered about is this: I am running CentOS 5.5 - perhaps 
that, too has to do with this behaviour?

Thanks,

Martin

Am 17.06.2010 um 17:07 schrieb Eric Shubert:

> Martin Waschbuesch wrote:
>> Hi all,
>> Although freshclam is definitely running (and working,too), and there is a 
>> valid and readable freshclam.log in /var/log/clamav/freshclam.log, I get the 
>> folllowing via my daily logwatch:
>> - clam-update Begin  The ClamAV 
>> update process (freshclam daemon) was not running!
>> If you no longer wish to run freshclam, deleting the freshclam.log
>> file will suppress this error message.
>> -- clam-update End - Anyone any 
>> idea why this might be?
>> Thanks,
>> Martin
>> --
> 
> I noticed this recently as well, but didn't get around to trying to debug it.
> 
> There might be a subtle bug in the 
> /usr/share/logwatch/scripts/services/clam-update script, although that script 
> hasn't been touched in over 4 years.
> 
> Please post the contents of your /var/log/clamav/freshclam.log file that 
> correspond to the date in question, and we'll see if we can't determine what 
> the problem is.
> 
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"In everyone there sleeps
A sense of life lived according to love.
To some it means the difference they could make
By loving others, but across most it sweeps
As all they might have done had they been loved.
That nothing cures."

Philip Larkin 'Faith Healing'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] freshclam & logwatch

2010-06-17 Thread Martin Waschbuesch
Hi Dave and thanks for the hint. This did not work for me, unfortunately...

Am 17.06.2010 um 16:38 schrieb Dave Hallowell:

> Oops,
> Try this one instead 
> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg27445.html
> Says:
> "I have removed 1'st line in the freshclam.log file (vim 
> /var/log/clamav/freshclam.log) and since then I'm getting proper information 
> in my logwatch."
> Dave
> 
> 
> 
> On 6/17/2010 9:18 AM, Dave Hallowell wrote:
>> Martin,
>> check this link
>> 
>> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg27449.html
>> 
>> Dave
>> 
>> On 6/17/2010 12:06 AM, Martin Waschbuesch wrote:
>>   
>> 
>>> Hi all,
>>> 
>>> Although freshclam is definitely running (and working,too), and there is a 
>>> valid and readable freshclam.log in /var/log/clamav/freshclam.log, I get 
>>> the folllowing via my daily logwatch:
>>> 
>>> - clam-update Begin  
>>> 
>>> The ClamAV update process (freshclam daemon) was not running!
>>> If you no longer wish to run freshclam, deleting the freshclam.log
>>> file will suppress this error message.
>>> 
>>> -- clam-update End - 
>>> 
>>> Anyone any idea why this might be?
>>> 
>>> Thanks,
>>> 
>>> Martin
>>> 
>>> --
>>> "It isn't that they can't see the solution. It is that they can't see the 
>>> problem."
>>> 
>>> Gilbert K. Chesterton
>>> 
>>> 
>>> -
>>> Qmailtoaster is sponsored by Vickers Consulting Group (
>>> www.vickersconsulting.com
>>> )
>>> Vickers Consulting Group offers Qmailtoaster support and installations.
>>>   If you need professional help with your setup, contact them today!
>>> -
>>>  Please visit qmailtoaster.com for the latest news, updates, and 
>>> packages.
>>>  
>>>   To unsubscribe, e-mail: 
>>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>> 
>>>  For additional commands, e-mail: 
>>> qmailtoaster-list-h...@qmailtoaster.com
>>> 
>>> 
>>> 
>>>   
>>> 
>>> 
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group (
>> www.vickersconsulting.com
>> )
>> Vickers Consulting Group offers Qmailtoaster support and installations.
>>   If you need professional help with your setup, contact them today!
>> -
>>  Please visit qmailtoaster.com for the latest news, updates, and 
>> packages.
>>  
>>   To unsubscribe, e-mail: 
>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>> 
>>  For additional commands, e-mail: 
>> qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
>> 
>>   
>> 
> -
>  Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster 
> support and installations. If you need professional help with your setup, 
> contact them today! 
> -
>  Please visit qmailtoaster.com for the latest news, updates, and packages. To 
> unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For 
> additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


--
"No man, for any considerable period can wear one face to himself and another 
to the multitude without finally getting bewildered as to which may be the 
true."

Nathaniel Hawthorne


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] freshclam & logwatch

2010-06-16 Thread Martin Waschbuesch
Hi all,

Although freshclam is definitely running (and working,too), and there is a 
valid and readable freshclam.log in /var/log/clamav/freshclam.log, I get the 
folllowing via my daily logwatch:

- clam-update Begin  

The ClamAV update process (freshclam daemon) was not running!
If you no longer wish to run freshclam, deleting the freshclam.log
file will suppress this error message.

-- clam-update End - 

Anyone any idea why this might be?

Thanks,

Martin

--
"It isn't that they can't see the solution. It is that they can't see the 
problem."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: dovecot install error

2010-06-15 Thread Martin Waschbuesch
Hi Rajesh,

If you are talking about the squirrelmail plugin to change passwords, that 
would not talk to the IMAP server as far as I recall. It would either use 
vpopmails command line tools to change the password or else write in the DB 
directly?
In any case, while I am sure you can use an MAP server to check authentication 
(squirrel and horde can use that for login), I am not aware that IMAP offers a 
means to SET a password.

Martin

Am 15.06.2010 um 16:52 schrieb Eric Shubert:

> Rajesh M wrote:
>> hi
>> just clarify i was using the change_pass plugin which used work with
>> poppassd daemon
>> i need a similar solution in dovecot please
> 
> I'm not familiar off hand with this plugin, or how it works. I'm a little 
> surprised that it would quit working with dovecot though. I don't see what 
> dovecot would have to do with changing passwords. Wouldn't the users use 
> qmailadmin to change change their passwords?
> 
> Perhaps someone else here is familiar with the change_pass plugin.
> 
>> secondly
>> i have several domains already using courier imap. do i need to convert
>> mailboxes as mentioned here
>> http://wiki.qmailtoaster.com/index.php/Replacing_Courier_IMAP_with_Dovecot_IMAP
> 
> I don't know the definitive answer. I don't believe it's absolutely required, 
> but I expect it might make your transition smoother, as users wouldn't need 
> to re-subscribe to their folders.
> 
> Please ask this question on the dovecot list (dove...@dovecot.org). I'd like 
> to see what the experts there have to say about it.
> 
>> thanks
>> rajesh
> -- 
> -Eric 'shubes'
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>   Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
> -
>Please visit qmailtoaster.com for the latest news, updates, and packages.
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"The whole modern world has divided itself into Conservatives and Progressives. 
The business of Progressives is to go on making mistakes. The business of the 
Conservatives is to prevent the mistakes from being corrected."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] dovecot install error

2010-06-11 Thread Martin Waschbuesch
Hi,

Did you by chance copy & paste the command from the wiki? If so, I have seen 
some strange SCII character conversions happen that way. so, I'd suggest trying 
to retype the whole command manually the way the option is shown in the man 
page for rpmbuild.

Cause when I type your command manually, I get what I would expect:

rpmbuild -ba --target=i686 dovecot.spec
Building target platforms: i686
Building for target i686
error: failed to stat /root/dovecot.spec: No such file or directory

When I copy & paste what the text command from your mail, I get the wrong:

rpmbuild –ba --target=i686 dovecot.spec
Building target platforms: i686
Building for target i686
error: failed to stat /root/–ba: No such file or directory

So, there must be a difference in the character you use.

Martin


Am 12.06.2010 um 04:41 schrieb Rajesh M:

>>> hi
>>> 
>>> 
>>> i followed the instructions as posted by mr amit
>>> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg25551.html
>>> 
>>> i downloaded the rpm from
>>> 
>>> http://dl.atrpms.net/all/dovecot-1.2.11-3_108.src.rpm
>>> 
>>> and put it in /usr/src/qtms-install
>>> 
>>> 
>>> rpm -i dovecot*.src.rpm
>>> 
>>> it gave a warning
>>> 
>>> warning: dovecot-1.2.11-3_108.src.rpm Header V4 DSA signature: NOKEY,
>>> key
>>> ID 6534c2b
>>> 
>>> when i did
>>> 
>>> rpmbuild –ba --target=i686 dovecot.spec
>>> 
>>> i got error
>>> 
>>> rpmbuild failed to stat /usr/src/qtms-install/-ba
>>> 
>>> no such file or directory  i am stuck here.
>>> 
>>> help required please
>>> 
>>> if any body has implemented this i would like the exact steps please
>>> 
>>> thanks very much
>> 
>> 
>> What system are you building on?
>> I'd venture to guess that you're in the wrong directory. If you're running
>> CentOS, you want to be in /usr/src/redhat/SPECS to run the command you
>> were running.
>> 
>> 
>> 
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group
>> (www.vickersconsulting.com)
>>Vickers Consulting Group offers Qmailtoaster support and
>> installations.
>>  If you need professional help with your setup, contact them today!
>> -
>> Please visit qmailtoaster.com for the latest news, updates, and
>> packages.
>> 
>>  To unsubscribe, e-mail:
>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>> For additional commands, e-mail:
>> qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
>> 
> 
> 
> hi
> 
> i tried that also, it now gives error
> 
> failed to stat /usr/src/redhat/SPECS/-ba
> 
> no such file or directory
> 
> i think this is some other issue --- why is it considering the option
> "-ba" as a directory
> 
> rajesh
> 
> 
> 
> 
> 
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"The whole modern world has divided itself into Conservatives and Progressives. 
The business of Progressives is to go on making mistakes. The business of the 
Conservatives is to prevent the mistakes from being corrected."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] QControl

2010-06-10 Thread Martin Waschbuesch
Hi Jake,

Am 11.06.2010 um 01:53 schrieb Jake Vickers:

> 
> Thanks for finding this. Seems I'll have to create two builds in the future.
> There won't be a fix until I create the next version. If it's REALLY an issue 
> for you, I'll compile on a x86_64 for you and send you the executable.


No, that's alright. As long as it's on your todo list somewhere that's fine 
with me. :-)

Martin
-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] QControl

2010-06-10 Thread Martin Waschbuesch
Hi Jake,

I just upgraded (and reinstalled) one toaster that is now running CentOS 5.5 
x86_64. Everything runs just smooth and lovely, except one thing.
I (on purpose) removed all i386/i686 packages and libraries from CentOs and now 
I find that QControl is not quite noarch after all:

# rpm -i QControl-1.1-1.1.1.noarch.rpm
error: Failed dependencies:
libc.so.6 is needed by QControl-1.1-1.1.1.noarch
libc.so.6(GLIBC_2.0) is needed by QControl-1.1-1.1.1.noarch
libc.so.6(GLIBC_2.1) is needed by QControl-1.1-1.1.1.noarch

# locate libc.so.6
/lib64/libc.so.6

I could, of course, reinstall the i386 lib, but just in case there could be a 
different solution (e.g. a x86_64 compile) ...

Martin

--
"Years ago my mother used to say to me, she'd say, 'In this world, Elwood, you 
must be oh so smart or oh so pleasant.' Well, for years I was smart. I 
recommend pleasant."

James Stewart as Elwood P. Dowd in 'Harvey'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: where's the site?

2010-06-03 Thread Martin Waschbuesch

I obviously replied to the wrong mail...
Sorry.

Von meinem iPhone gesendet

Am 03.06.2010 um 18:02 schrieb Martin Waschbuesch  
:


Very good. I saw the two posts this morning - it just looked so  
weird to see total silence on the list. I'll look forward to the  
thread you mention and will join the discussion then.


Thanks,

Martin

Von meinem iPhone gesendet

Am 03.06.2010 um 17:55 schrieb Eric Shubert :


GHS Toaster List account wrote:

Hi all,
I'd like to install qmailtoaster plus; done that a few times  
before, but...

The site is down? I get a server 500 error:
The server encountered an internal error or misconfiguration and  
was unable to complete your request.
Please contact the server administrator, [no address given] and  
inform them of the time the error occurred, and anything you might  
have done that may have caused the error.
More information about this error may be available in the server  
error log.

Apache/2.2 Server at qtp.qmailtoaster.com Port 80
So, what do I do?
Thanx,
Casper


The trac portion of the site is still being rebuilt. The recovery  
process is partially out of our hands, so is taking longer than  
we'd like. We appreciate your patience with this, and will be  
taking measures to prevent such delays in the future.


In the meantime, the qtp yum repo is up and running, so you can get  
the packages there.


I would install the qtp repo first:
# rpm -Uvh \ 
http://qtp.qmailtoaster.com/repos/nodist/qmailtoaster-plus.repo-0.2-2.noarch.rpm

Then install QTP:
# yum install qmailtoaster-plus

Or you can get the package directly from the nodist directory.

--
-Eric 'shubes'


--- 
--- 
--- 
--- 
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com 
)
 Vickers Consulting Group offers Qmailtoaster support and  
installations.

   If you need professional help with your setup, contact them today!
--- 
--- 
--- 
--- 
-
  Please visit qmailtoaster.com for the latest news, updates, and  
packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




--- 
--- 
--- 
--- 
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com 
)
  Vickers Consulting Group offers Qmailtoaster support and  
installations.

If you need professional help with your setup, contact them today!
--- 
--- 
--- 
--- 
-
   Please visit qmailtoaster.com for the latest news, updates, and  
packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: where's the site?

2010-06-03 Thread Martin Waschbuesch
Very good. I saw the two posts this morning - it just looked so weird  
to see total silence on the list. I'll look forward to the thread you  
mention and will join the discussion then.


Thanks,

Martin

Von meinem iPhone gesendet

Am 03.06.2010 um 17:55 schrieb Eric Shubert :


GHS Toaster List account wrote:

Hi all,
I'd like to install qmailtoaster plus; done that a few times  
before, but...

The site is down? I get a server 500 error:
The server encountered an internal error or misconfiguration and  
was unable to complete your request.
Please contact the server administrator, [no address given] and  
inform them of the time the error occurred, and anything you might  
have done that may have caused the error.
More information about this error may be available in the server  
error log.

Apache/2.2 Server at qtp.qmailtoaster.com Port 80
So, what do I do?
Thanx,
Casper


The trac portion of the site is still being rebuilt. The recovery  
process is partially out of our hands, so is taking longer than we'd  
like. We appreciate your patience with this, and will be taking  
measures to prevent such delays in the future.


In the meantime, the qtp yum repo is up and running, so you can get  
the packages there.


I would install the qtp repo first:
# rpm -Uvh \ 
http://qtp.qmailtoaster.com/repos/nodist/qmailtoaster-plus.repo-0.2-2.noarch.rpm

Then install QTP:
# yum install qmailtoaster-plus

Or you can get the package directly from the nodist directory.

--
-Eric 'shubes'


--- 
--- 
--- 
--- 
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com 
)
  Vickers Consulting Group offers Qmailtoaster support and  
installations.

If you need professional help with your setup, contact them today!
--- 
--- 
--- 
--- 
-
   Please visit qmailtoaster.com for the latest news, updates, and  
packages.

To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Horde Webmail

2010-05-31 Thread Martin Waschbuesch
I am using horde for a long time (even before using qmailtoaster), so I wanted 
to stick with it. Works like a charm.

There is a good installation-howto for horde and centos:

http://wiki.horde.org/CentOS5InstallationNotes

Just ignore the postfix stuff (or dovecot in case you stick with the original 
courier). Worked for me.

Martin


Am 01.06.2010 um 00:29 schrieb Scott Hughes:

> I'm just curious if anyone is using Horde webmail on their QMT system?  If 
> so, how difficult and involved was the install process.  Horde has a lot of 
> good features that I believe my users would benefit from, but it also looks 
> like a bear of an install and upkeep.
> 
> Thanks,
> Scott
> 


--
“Majority rule only works if you're also considering individual rights. Because 
you can't have five wolves and one sheep voting on what to have for supper.”

Larry Flynt


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Help. Spamassassin not working in CentOS 5.4 and 5.5 x86_64

2010-05-28 Thread Martin Waschbuesch
Try

svc -u /var/qmail/supervise/spamd

This will cause daemontools to start the service again. Then look at the log 
file and tell us what it says.
Also, it maybe that spamd has been restarted and is running, but the logger is 
not.
To verify which services are running, do

qmailctl stat

and see whether it lists spamd as running.

Thanks,

Martin

Am 28.05.2010 um 14:09 schrieb Eli Edwin Casimero:

> from /var/log/qmail/spamd/current
> 
> @40004bff107e20f20b3c [2401] info: spamd: server killed by
> SIGTERM, shutting down
> @40004bff10881332f09c [15800] info: spamd: server started on port
> 783/tcp (running version 3.2.5)
> @40004bff10881332fc54 [15800] info: spamd: server pid: 15800
> @40004bff108814dbd60c [15800] info: spamd: server successfully
> spawned child process, pid 15847
> @40004bff108814dbe1c4 [15800] info: spamd: server successfully
> spawned child process, pid 15848
> @40004bff108814dbe5ac [15800] info: prefork: child states: II
> 
> And the last update of this file was this morning when I restarted qmail.
> 
> No further updates on /var/log/qmail/spamd/current
> 
> It's as if it was not running?  Or no messages pass through it?
> 
> I get my emails in and out though.
> 
> Any thoughts?
> 
> On Fri, May 28, 2010 at 3:28 PM, Janno Sannik  wrote:
>> 
>> what spamd log says?
>> 
>> On 28.05.2010 4:19, Eli Edwin Casimero wrote:
>>> 
>>> Help. Spamassassin not working in CentOS 5.4 and 5.5 x86_64
>>> 
>>> I just migrated my qmail toasters to 64 bit CentOS under XEN.
>>> 
>>> Just noticed that spamassassin is not working.
>>> 
>>> No X-Spam flags in the headers.
>>> 
>>> I installed the missing Bignum module in perl in one installation
>>> 
>>> ---
>>> solution: run cpan and install Crypt::OpenSSL::Bignum module.
>>> 
>>> 
 
 cpan
 install Crypt::OpenSSL::Bignum
 
>>> 
>>> -
>>> 
>>> I also tried the RPMForge method in another installation.
>>> 
>>> in /var/log/qmail/spamd/current it does not complain anymore about
>>> missing bignum
>>> 
>>> But there is still no change in the headers, no x-spam headers like in
>>> the old 32 bit installs.
>>> 
>>> Am I missing something in the configuration?
>>> 
>>> Any thoughts?
>>> 
>>> Thanks in advance.
>>> 
>>> Edwin
>>> 
>>> 
>>> -
>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>> (www.vickersconsulting.com)
>>> Vickers Consulting Group offers Qmailtoaster support and
>>> installations.
>>>   If you need professional help with your setup, contact them today!
>>> 
>>> -
>>>  Please visit qmailtoaster.com for the latest news, updates, and
>>> packages.
>>> 
>>>   To unsubscribe, e-mail:
>>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>>  For additional commands, e-mail:
>>> qmailtoaster-list-h...@qmailtoaster.com
>>> 
>>> 
>>> 
>> 
>> 
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group
>> (www.vickersconsulting.com)
>>   Vickers Consulting Group offers Qmailtoaster support and installations.
>> If you need professional help with your setup, contact them today!
>> -
>>Please visit qmailtoaster.com for the latest news, updates, and packages.
>> To unsubscribe, e-mail:
>> qmailtoaster-list-unsubscr...@qmailtoaster.com
>>For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>> 
>> 
>> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"The whole modern world has divided itself into Conservatives and Progressives. 
The business of Progressives is to go on making mistakes. The business of the 
Conservatives is to prevent the mistakes from being corrected."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the late

Re: [qmailtoaster] Support OpenSuse 11.2 *SOLVED*

2010-05-25 Thread Martin Waschbuesch
Btw., just slightly off topic:

I also upgraded from Centos 5.4 to 5.5 without any issues. Just in case people 
wanted to wait until they heard from more folks before doing so themselves...

Martin

Am 25.05.2010 um 12:50 schrieb Phil Leinhauser:

> You won’t be sorry!!
>  
> From: Roman Marlovits (WEBCOMPLETE.at) 
> [mailto:roman.marlov...@webcomplete.at] 
> Sent: Tuesday, May 25, 2010 4:09 AM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: AW: [qmailtoaster] Support OpenSuse 11.2 *SOLVED*
>  
> I changed to CentOS 5.5 ;-)
>  
> Does somebody know if OpenSuse 11.2 will be supported in the next few 
> days/weeks? i have to setup a new server. Support Open Suse 10.3 will be or 
> is already discontinued:  
> http://lists.opensuse.org/opensuse-announce/2009-08/msg8.html And now i 
> want to use 11.2 or 11.3 with qmail-toaster.
>  
> I have some experience with older installations. i use qmail since 2001. If 
> there is a workaround to bring up last version of toster with OpenSuse 11.2 I 
> would be very thankfull if somebody could help me or somebody could give me a 
> hint where i can find more information.
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  


--
"Years ago my mother used to say to me, she'd say, 'In this world, Elwood, you 
must be oh so smart or oh so pleasant.' Well, for years I was smart. I 
recommend pleasant."

James Stewart as Elwood P. Dowd in 'Harvey'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Strange Dovecot Issue

2010-05-16 Thread Martin Waschbuesch
will do.

:-)

> 
> Please bring this up on the devel list, Martin. I'm sure that Jake will 
> welcome the help, but this should be done in a coordinated effort. Given that 
> dovecot will hopefully be part of the QMTv2 release, we want to be sure that 
> the interim dovecot configurations don't conflict with future plans, and the 
> transition is smooth for everyone. I'm mostly concerned about the 
> dovecot.conf configuration, but there are other considerations as well, such 
> as whether or not dovecot's pop3 is used.
> 
> Thanks for stepping up to help!
> 
> -- 
> -Eric 'shubes'

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: Strange Dovecot Issue

2010-05-15 Thread Martin Waschbuesch
All,

what does it take to put a known-to-work source tarball together with the steps 
in the wiki to create a source rpm?
I have not dealt with package creation so far, but I think that would be the 
logical next step. If anyone can give any pointers, I'd volunteer to do this.

Martin

PS: Almost forgot. I also switched to dovecot based on the wiki page and I love 
it. Definite improvement.

Am 15.05.2010 um 15:06 schrieb Scott Hughes:

> Eric,
> 
> Adding those additional mechanisms seems to have solved the problem.
> 
> I'll attempt to update the wiki page (as long as no one minds, of course).
> 
> Thanks!
> 
> Scott


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] .de tld trouble

2010-05-12 Thread Martin Waschbuesch
Hi everyone,

I don't know just how relevant this is for you, but since it *is* sort of a 
major thing...
The entire .de TLD has had serious problems where the root servers either did 
not respond to DNS queries or (worse) they gave back NXDOMAIN.
Now, this may result in people either not receiving or not being able to send 
mail from/to .de domains.
Though problems seem to have been solved by DeNIC, it will take some time till 
everything is back to normal (due to ISP caches / domain TTLs).

If anyone experienced anything weird - this may be why.

Martin

--
"However beautiful the strategy, you should occasionally look at the results."

Winston Churchill


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] firewall.sh

2010-05-11 Thread Martin Waschbuesch
Hi,

I just noticed that firewall.sh, at least the version in the cent50 scripts 
which I use, contains the following section:

## Drop outside packets with local addresses - anti-spoofing measure
iptables -A INPUT -s $MYIP -i ! lo -j DROP
iptables -A INPUT -s 127.0.0.0/8 -i ! lo -j DROP
#iptables -A INPUT -s 10.0.0.0/8 -i ! lo -j DROP
#iptables -A INPUT -s 192.168.0.0/16 -i ! lo -j DROP
iptables -A INPUT -s 224.0.0.0/4 -i ! lo -j DROP
iptables -A INPUT -s 0.0.0.0/8 -i ! lo -j DROP
iptables -A INPUT -s 255.255.255.255 -i ! lo -j DROP
iptables -A INPUT -s 169.254.0.0/16 -i ! lo -j DROP
iptables -A INPUT -s 221.240.102 -i ! lo -j DROP
iptables -A INPUT -s 203.215.94.193 -i ! lo -j DROP
iptables -A INPUT -s 218.71.137.68 -i ! lo -j DROP
#

Now, I just wondered why the private class A & C networks are listed, if only 
as optional, and the class B variant is not? E.g.

#iptables -A INPUT -s 172.16.0.0/8 -i ! lo -j DROP

Likewise, the multicast space is excluded (224.0.0.0/4) while the class E test 
space is not. E.g.

iptables -A INPUT -s 240.0.0.0/4 -i ! lo -j DROP

The other sections I all understand (e.g. loopback, APIPA, current network, 
etc.), but then there are some individual addresses that I do not recognize 
again:

iptables -A INPUT -s 221.240.102 -i ! lo -j DROP
iptables -A INPUT -s 203.215.94.193 -i ! lo -j DROP
iptables -A INPUT -s 218.71.137.68 -i ! lo -j DROP

Are these known troublemakers or some other special addresses? If so, 
personally, I'd prefer to not have individual IP address excludes in the 
firewall.sh script per default. I mean, those addresses *could* be reassigned 
and serve a different / legit purpose at some point in the future.

Anyway, I included a slightly modified script that includes description for the 
reserved / protected address spaces  and adds the missing two I mentioned above.

Thanks,

Martin

--
"However beautiful the strategy, you should occasionally look at the results."

Winston Churchill


firewall.sh
Description: Binary data
-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


Re: [qmailtoaster] Re: incoming mail trouble...

2010-05-10 Thread Martin Waschbuesch
Am 10.05.2010 um 19:04 schrieb Eric Shubert:
> 
> Thanks Martin. Anything that happens will be posted on the devel list. Are 
> you subscribed there?
> 
> -- 
> -Eric 'shubes'

Sure am!

:-)

Martin
-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: incoming mail trouble...

2010-05-10 Thread Martin Waschbuesch

Am 09.05.2010 um 19:05 schrieb Eric Shubert:

> Glad you found the problem, Martin.
> 
> It'd be nice if the log would show something meaningful (or anything at all) 
> in cases such as this. Would someone like to look into such a change? I 
> should ask Tonino (the chkuser author) as well. He had mentioned making some 
> logging improvements.
> 
> FWIW, I use opendns servers (208.67.222.220, 208.67.222.222) in my list of 
> forwarders, intermixed with the ones of my ISP.
> 
> -- 
> -Eric 'shubes'

If you hear more about any possible logging improvements, please let us know - 
I for once would offer testing things.

Martin
-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] permanently disable dk signing

2010-05-10 Thread Martin Waschbuesch
You do not have to live without domainkeys, though.

Jake has a video on how to implement dkim that also offers domainkeys support:

http://video.qmailtoaster.com/video/how-to-setup-dkim-on-qmail.html

Maybe that would be an alternative for you? The implementation works 
differently and I have not seen any errors such as you describe so far.

Martin

Am 10.05.2010 um 17:31 schrieb Rajesh M:

> hi
> 
> i enabled dksigning using the instructions here for only signing outgoing
> emails
> 
> http://wiki.qmailtoaster.com/index.php/Domainkeys#DKSIGN
> 
> i am getting errors and wish to disable the same
> qmail-dk: Cannot sign message due to invalid message syntax. (#5.3.0)
> which happens randomly, and i am not happy with the same.
> 
> i removed the complete dksign env variable from the tcp.smtp file still i
> am getting dksign related errors.
> 
> i read in this post as such
> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg12436.html
> 
> ##
> To manually disable, just type the following:
> # cd /var/qmail/bin ; rm -f qmail-queue ; ln -s qmail-queue.orig qmail-queue
> ##
> 
> is this correct ?
> 
> thanks
> rajesh
> 
> 
> 
> 
> 
> -
> Qmailtoaster is sponsored by Vickers Consulting Group 
> (www.vickersconsulting.com)
>Vickers Consulting Group offers Qmailtoaster support and installations.
>  If you need professional help with your setup, contact them today!
> -
> Please visit qmailtoaster.com for the latest news, updates, and packages.
> 
>  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
> 


--
"Imagination is more important than knowledge. For knowledge is limited to all 
we now know and understand, while imagination embraces the entire world, and 
all there ever will be to know and understand."

Albert Einstein


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: incoming mail trouble...

2010-05-09 Thread Martin Waschbuesch
Hi all,

I found my problem: my ISP's DNS servers (which I had told dnscache to use) had 
issues resolving domains which caused my toaster to reject emails (no reverse 
lookup possible).
I reverted to default dnscache settings where a longish list of root servers 
for forwarding DNS queries is included and just added the ISP's DNS servers as 
additional entries.
It's faster to use my ISP's, but better be safe and have something to fall back 
on!

Thanks,

Martin

Am 08.05.2010 um 18:09 schrieb Eric Shubert:

> Which versions are you running?
> # rpm -qa | grep toaster | sort
> 
> Martin Waschbuesch wrote:
>> Hi all,
>> I recently noticed that some mails do not seem to get through to valid 
>> recipients.
>> E.g. What I see when I know that a mail should be coming in is something 
>> like this:
>> @40004be580ed32d98a3c tcpserver: status: 0/100
>> @40004be5817c22eafcdc tcpserver: status: 1/100
>> @40004be5817c22ee2d44 tcpserver: pid 12238 from 66.211.168.231
>> @40004be5817c28e0e5ac tcpserver: ok 12238 
>> krabat.waschbuesch.de:192.168.2.2:25 mx1.phx.paypal.com:66.211.168.231::10570
>> @40004be5817d2344ffd4 CHKUSER accepted sender: from 
>>  remote <:mx1.phx.paypal.com:66.211.168.231> rcpt <> : 
>> sender accepted
>> @40004be581830331a65c tcpserver: end 12238 status 0
>> This is an example of where I should have received a payment notification 
>> from PayPal. Some of their messages make it through, some don't.
>> The interesting part is that I see a lot of messages above where I cannot 
>> see either an error message OR a
>> CHKUSER accepted rcpt: ...
>> type line.
>> Any idea how I could try and trace this?
>> Thanks,
>> Martin
>> --
>> "The whole modern world has divided itself into Conservatives and 
>> Progressives. The business of Progressives is to go on making mistakes. The 
>> business of the Conservatives is to prevent the mistakes from being 
>> corrected."
>> Gilbert K. Chesterton
>> -
>> Qmailtoaster is sponsored by Vickers Consulting Group 
>> (www.vickersconsulting.com)
>>Vickers Consulting Group offers Qmailtoaster support and installations.
>>  If you need professional help with your setup, contact them today!







-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Re: incoming mail trouble...

2010-05-08 Thread Martin Waschbuesch
Hi Eric,

> Which versions are you running?
> # rpm -qa | grep toaster | sort


This is the output:

autorespond-toaster-2.0.4-1.3.6
clamav-toaster-0.96.0-1.3.34
control-panel-toaster-0.5-1.3.7
courier-authlib-toaster-0.59.2-1.3.10
courier-imap-toaster-4.1.2-1.3.10
daemontools-toaster-0.76-1.3.6
ezmlm-cgi-toaster-0.53.324-1.3.6
ezmlm-toaster-0.53.324-1.3.6
isoqlog-toaster-2.1-1.3.7
libdomainkeys-toaster-0.68-1.3.6
libsrs2-toaster-1.0.18-1.3.6
maildrop-toaster-2.0.3-1.3.8
maildrop-toaster-devel-2.0.3-1.3.8
qmailadmin-toaster-1.2.12-1.3.8
qmailmrtg-toaster-4.2-1.3.6
qmail-pop3d-toaster-1.03-1.3.20
qmail-toaster-1.03-1.3.20
qmailtoaster-plus-0.3.1-1.4.15
qmailtoaster-plus.repo-0.2-2
ripmime-toaster-1.4.0.6-1.3.6
simscan-toaster-1.4.0-1.3.8
spamassassin-toaster-3.2.5-1.3.17
ucspi-tcp-toaster-0.88-1.3.9
vpopmail-toaster-5.4.17-1.3.7
vqadmin-toaster-2.3.4-1.3.6

Thanks,

Martin

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] incoming mail trouble...

2010-05-08 Thread Martin Waschbuesch
Hi all,

I recently noticed that some mails do not seem to get through to valid 
recipients.
E.g. What I see when I know that a mail should be coming in is something like 
this:

@40004be580ed32d98a3c tcpserver: status: 0/100
@40004be5817c22eafcdc tcpserver: status: 1/100
@40004be5817c22ee2d44 tcpserver: pid 12238 from 66.211.168.231
@40004be5817c28e0e5ac tcpserver: ok 12238 
krabat.waschbuesch.de:192.168.2.2:25 mx1.phx.paypal.com:66.211.168.231::10570
@40004be5817d2344ffd4 CHKUSER accepted sender: from  
remote <:mx1.phx.paypal.com:66.211.168.231> rcpt <> : sender accepted
@40004be581830331a65c tcpserver: end 12238 status 0

This is an example of where I should have received a payment notification from 
PayPal. Some of their messages make it through, some don't.
The interesting part is that I see a lot of messages above where I cannot see 
either an error message OR a
CHKUSER accepted rcpt: ...
type line.

Any idea how I could try and trace this?

Thanks,

Martin

--
"The whole modern world has divided itself into Conservatives and Progressives. 
The business of Progressives is to go on making mistakes. The business of the 
Conservatives is to prevent the mistakes from being corrected."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] QmailToaster Plus - new release!

2010-05-04 Thread Martin Waschbuesch
Cool. Thanks for the good stuff! :-)

Am 04.05.2010 um 21:50 schrieb Eric Shubert:

> There is a new QmailToaster Plus package available. It contains all of the 
> modifications since the previous release (7 months ago), including changes 
> for the new mirrors.
> 
> Thanks go to Jake and those hosing the mirrors for this new capability!
> 
> Updating is strongly recommended. The new QTP can be updated with yum:
> # yum update qmailtoaster-plus
> 
> If you haven't updated QTP in quite a while, you should be sure you have the 
> latest qtp-repo package first:
> # rpm -q qmailtoaster-plus.repo
> qmailtoaster-plus.repo-0.2-2
> 
> If your repo version is not current, do this update first:
> # yum update qmailtoaster-plus.repo
> 
> As usual, see the doc/release-notes.txt file for a list of changes.
> 
> -- 
> -Eric 'shubes'





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Please suggest

2010-05-03 Thread Martin Waschbuesch
Hi Amit,

This sounds like email marketing? I used to work for an email service provider 
and here is what I would recommend:

Don't underestimate the whole deliverability aspect - this can be a lot of 
work. E.g. Depending on the types of messages being sent and the providers 
whose customers will receive these messages, you should take care of the 
following:

Ensure you use SPF, Domainkeys and DKIM

Make sure that hardbounces with reasons like "user unknown" (which SHOULD be 
5.5.0, but is not always) get unsubscribed from whatever mailing is in 
question. Some providers (e.g. AT&T/bellsouth) will degrade your throughput if 
you reach a threshold of too many wrong (usually obsolete - peaople change 
providers more often than you'd expect) addresses.

Make sure that unsubscribes are honored.
In general, conform to can-spam, etc. if you don't, I have seen things happen 
like the network provider being forced to shutdown the IP in question, etc.

Given the volume, it might also make sense to look at the providers 
feedback-loop type programs. E.g. you absolutely HAVE to stop sending to people 
who used the 'this is spam' button in web based services such as AOL, etc.
If you don't, you can quickly experience a full block of your outgoing IP by 
that provider.

Check out the large providers' postmaster service pages to find out information 
on what they require you to do to ensure good deliverability. This might be 
anything from throttling to using SPF/Domainkeys, etc. Compare that with the 
majority of addresses in the address pool that is going to be sent those emails 
so you know where to focus on.

Last but not least: For mass mailings, some providers (e.g. AOL) will wait to 
determine the traffic patterns coming from an IP address that was not yet used 
for mass mailings: IF they determine that the pattern suggests normal usage 
(regular newsletters, transactional messages, etc.) the deliverability will 
pick up, but at first it WILL BE BAD. This is NORMAL. :-)

Thanks,

Martin

Am 03.05.2010 um 11:16 schrieb Amit Dalia:

> Hi Everyone,
> 
> This may be out of topic, but please suggest me the best. I got a client 
> requirement mentioned below:
> 
> " Mass mailing system where we have around 5 mails to be sent at a time. 
> This will repeat for at least 15 times per month."
> 
> What is the best option I can suggest him? I had suggested to go for 
> dedicated server on which I'll provide him a qmail server setup. Will qmail 
> will be able to handle so many mails a day? What are the possiblities of 
> getting mails mark as Junk?
> 
> Thanks and regards,
> 
> Amit


--
"It isn't that they can't see the solution. It is that they can't see the 
problem."

Gilbert K. Chesterton


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Header Information

2010-04-16 Thread Martin Waschbuesch
That is not necessarily what he meant - if mail gets forwarded like  
that several times, you either have mail in mail in mail as cascaded  
attachments or you lose the trail of through whose hands the email went.


If that were desired, he'd need to disable SRS. Probably through  
recompiling qmail as I think it is a patch to that package...


Martin

Am 16.04.2010 um 09:01 schrieb Aleksander Podsiadły l>:



Dnia 2010-04-16, pią o godzinie 09:49 +0300, nishant amin pisze:

hi Aleksander
if i forward the email through both my email client and web
mail(thunderbird and squirrel mail)the headers get changed/replaced.
any way to prevent this from happening.as frank mentioned if the
headers are changed then it will be hard to know whre the mail
originated from.


All modern email client's can forward inline, quoted or as attachment.
If you forward message as attachment all original headers will be
preserved.
My Evolution is able to do it properly.

--
Pozdrawiam / Regards,
Aleksander Podsiadły


--- 
--- 
--- 
--- 
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com 
)
   Vickers Consulting Group offers Qmailtoaster support and  
installations.
 If you need professional help with your setup, contact them  
today!
--- 
--- 
--- 
--- 
-
Please visit qmailtoaster.com for the latest news, updates, and  
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




Re: [qmailtoaster] Header Information

2010-04-15 Thread Martin Waschbuesch
Isn't that what SRS does to make sure SPF enabled mail actually can be  
forwarded without risk of being identified as phishing?


I think it is a feature not a bug. If you left the headers as is and  
forwarded a mail from a sender who uses SPF, the final recipient might  
compare your IP to the original sender's SPF record and this usually  
fails (unless you're both on the same domain)


Martin

Am 16.04.2010 um 08:49 schrieb nishant amin :


hi Aleksander
if i forward the email through both my email client and web
mail(thunderbird and squirrel mail)the headers get changed/replaced.
any way to prevent this from happening.as frank mentioned if the
headers are changed then it will be hard to know whre the mail
originated from.

On Fri, Apr 16, 2010 at 9:40 AM, Aleksander Podsiadły
 wrote:

Dnia 2010-04-16, pią o godzinie 09:33 +0300, nishant amin pisze:

[...] the headers are completely
replaced by qmailtoaster [...]

By your email client (e.g. Firefox) not by qmailtoster.

--
Pozdrawiam / Regards,
Aleksander Podsiadły


--- 
--- 
--- 
--- 
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com 
)
   Vickers Consulting Group offers Qmailtoaster support and  
installations.
 If you need professional help with your setup, contact them  
today!
--- 
--- 
--- 
--- 
-
Please visit qmailtoaster.com for the latest news, updates, and  
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com





--- 
--- 
--- 
--- 
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com 
)
   Vickers Consulting Group offers Qmailtoaster support and  
installations.
 If you need professional help with your setup, contact them  
today!
--- 
--- 
--- 
--- 
-
Please visit qmailtoaster.com for the latest news, updates, and  
packages.


 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




[qmailtoaster] domainkey headers

2010-04-14 Thread Martin Waschbuesch
Hi all,

I just followed the instructions in Jake's excellent DKIM video to implement 
that.
Also, I switched to having this script do the domainkey signing as well.
Now, every test I tried says all is well, but there is one thing I do not 
understand:

The headers for the domainkey and DKIM signature contain weird information:

(Example from a mail I sent to my own yahoo account):

DomainKey-Signature:a=rsa-sha1; c=nofws; d=waschbuesch.de; h=from 
:content-type:content-transfer-encoding:subject:date:message-id 
:to:mime-version; q=dns; s=default; b=lF2aWIX+e9oN8bYFk8OGupo/F+ 
CDbPVA/yGb8eagFBr8ypwTSPuZq07cssngeQ0+
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=waschbuesch.de; h=from 
:content-type:content-transfer-encoding:subject:date:message-id 
:to:mime-version; s=default; bh=IFo6QBdna/qAn60/ytgz9ZK1/Y4=; b= 
ldXU+PxQlyiCCcOYHsIzj49GPRofZtird92MAIqZLThB60mJKrz8VEow0fA3WgIO

Now, where does this weird h-tag come from? Is there a way to influence that?

Thanks,

Martin

--
"Years ago my mother used to say to me, she'd say, 'In this world, Elwood, you 
must be oh so smart or oh so pleasant.' Well, for years I was smart. I 
recommend pleasant."

James Stewart as Elwood P. Dowd in 'Harvey'


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




  1   2   >