Re: [qmailtoaster] FastForward dosen't work ... why?

[Pablo Silva]

Hi Again!

 Thanks for your help, I have some doubts with your
configuration, because our e-mail configuration is
legacy...

 Well, there we go:

1) You said

 "modify /var/qmail/control/rcpthost  to allow
 your domain to comes in"

 My comment is

 I must to add only my principal-domain.com there?

 What happens with the following files?, I should
configurate those files this way?

 - me hostname.principal-domain.com
 - defaulthostpincipal-domain.com
 - defaultdomain  principal-domain.com
 - locals principal-domain.com
  hostname.principal-domain.com
 
others-hostnames.principal-domain.com

 - rcpthosts  principal-domain.com

 2) You said 

  "** Please don't add any virtual domain with
vqadmin.
 Don't add any domains & alias domains."

  My comment is:

  I don't understand which configuration, I can't to
do, for example domains & alias domains ...which files
?

 3) Is necessary to reuse the sendmail alias file, 
because the legacy configuration is:

user:   [EMAIL PROTECTED] 

   For example, if you send an e-mail to 

[EMAIL PROTECTED] and arrive to sendmail 
server, the alias file translate to
[EMAIL PROTECTED] and forward to Exchange
Server...

 ok, it's crazy but there are bussiness rules

 The ip of other-domain.com match with the Exchange
Server ip.

 So, I think that (at moment) must to use
FastForward...

 Thanks in advance for your comments...

 Greetings,
 -Pablo



--- Gabriel Lai Yong Shern <[EMAIL PROTECTED]>
wrote:

> Hello
> 
> Qmail can be as a front end server. Firewall will do
> some port forwarding to qmail... after scanning,
> qmail will forward emails to Exchange.
> 
> What I've done is as below:
> 
> 1) Install Qmail packages, make sure every packages
> are properly installed.
> 2) modify /var/qmail/control/rcpthost  to allow
> your domain to comes in
> 3) Allow relaying from your Exchange Server ( Users
> send mails to Exchange, Exchange forward to Qmail
> then deliver to the World)
> - edit /etc/tcprules.d/tcp.smtp, add a line like
> [exchange ip]:allow,RELAYCLIENT=""
> then run qmailctl cdb to reload
> 4) When Qmail receive all email for scanning, you
> must forward the mails to Exchange
> - edit /var/qmail/control/smtproutes add in
> your Exchange IP and port eg: [exchangeip:25]
> 
> ** Please don't add any virtual domain with vqadmin.
> Don't add any domains & alias domains.
> 
> In Exchange, forward your DNS to your qmail box,
> then every email will be forward to qmail for
> scanning, then qmail will deliver to the world. 
> 
> Don't forget to forward all incoming mails from port
> 25 in firewall to qmail box. 
> 
> For more easier, you may use Webmin to configure
> Qmail in GUI www.webmin.com
> 
> That's all about the config.  Let us know the
> result.
> 
> You can see through /var/log/qmail/smtp/current &
> /var/log/qmail/send/current or /var/log/maillog 
> 
> Gabriel
> 
> - Original Message - 
> From: "Pablo Silva" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, February 16, 2006 1:27 AM
> Subject: Re: [qmailtoaster] FastForward dosen't work
> ... why?
> 
> 
> > Hi Again!
> > 
> >  Yes, the principal objective is to set a front
> > end server (qmail), and back end server exchange
> > server, if you ask for this why?, sorry bussiness
> > rules.
> > 
> >  I've tryed to configurate qmail server for 
> > fastforward, but someting is wrong... 
> > 
> >  I prefer to make a slow change, I want to
> therefore
> > redirect the e-mail traffic in firewall...  When
> the
> > change this ready one, then I put qmail like
> principal
> > server...
> > 
> > But now... what's the next?... I'm stop for these
> > troubles...
> > 
> > Thanks in Advance!
> > 
> > - Pablo
> > 
> >  
> >  
> > 
> > --- Gabriel Lai Yong Shern
> <[EMAIL PROTECTED]>
> > wrote:
> > 
> >> Hello Pablo,
> >> 
> >> Are you trying to setup a relay server to
> Exchange
> >> Server? I have setup a 
> >> qmail box for my client as relay server. Meaning
> >> that every incoming & 
> >> outgoing will go through qmail server. In fact,
> >> there will be no email 
> >> accounts in qmail server, it just do email
> scanning
> >> & spamming only. After 
> >> scanning, it will forward it back to Exchange
> >> Server.
> >> 
> >> In this case, Exchange will be a safe server at
> the
> >> back, frontend that's 
&

Re: [qmailtoaster] FastForward dosen't work ... why?

[Pablo Silva]

Hi Again!

  Yes, the principal objective is to set a front
end server (qmail), and back end server exchange
server, if you ask for this why?, sorry bussiness
rules.

  I've tryed to configurate qmail server for 
fastforward, but someting is wrong... 

  I prefer to make a slow change, I want to therefore
redirect the e-mail traffic in firewall...  When the
change this ready one, then I put qmail like principal
server...

 But now... what's the next?... I'm stop for these
troubles...

 Thanks in Advance!

 - Pablo

  
  

--- Gabriel Lai Yong Shern <[EMAIL PROTECTED]>
wrote:

> Hello Pablo,
> 
> Are you trying to setup a relay server to Exchange
> Server? I have setup a 
> qmail box for my client as relay server. Meaning
> that every incoming & 
> outgoing will go through qmail server. In fact,
> there will be no email 
> accounts in qmail server, it just do email scanning
> & spamming only. After 
> scanning, it will forward it back to Exchange
> Server.
> 
> In this case, Exchange will be a safe server at the
> back, frontend that's 
> fighting spam and viruses will be Qmail box.
> 
> My client has been running this method for about 3
> months, till now, no 
> problem being face by them.
> 
> You don't really need an alias in Qmail I think.
> 
> What will be your objective to setup Qmail box to
> sit in front of Exchange?
> 
> Gabriel
> 
> 
>
-
>  QmailToaster hosted by: VR Hosted
> 
>
-
> To unsubscribe, e-mail:
> [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] ***SPAM*** Help! Cannot send email outside my own server!

[Pablo Silva]

--- Gabriel Lai Yong Shern <[EMAIL PROTECTED]>
wrote:

> I did increase the value of concurrencyremote so
> that it won't stay in the server too long, because
> the default value is 60.
> 
> What are others opinions on changing the value of
> concurrency??
> 
> Gab
>   - Original Message - 
>   From: Edwin Casimero 
>   To: qmailtoaster-list@qmailtoaster.com 
>   Sent: Tuesday, February 07, 2006 7:25 PM
>   Subject: Re: [qmailtoaster] ***SPAM*** Help!
> Cannot send email outside my own server!
> 
> 
>   Thank you to all for your guidance,
> 
>   I started out yesterday with 40,000+ in queue.
>   Now I am down to 542.
> 
>   For the benefit of other qmailtoaster fans...
> 
>   This is my analysis of the problem:
>   - I got a call from a customer that emails are not
> being sent to yahoo, but within their company it
> works. 
>   - I checked and indeed confirmed this using
> another email server I also operate.
>   - I asked help here on the qmail toaster mailing
> list
>   - I turned off the firewall, nope, that's not it.
>   - Email receiving is fine. 
>   - Clue from the Gabriel Lai Yong Shern: qmailctl
> queue
>   - Found out I've got 40,000+ in the queue
>   - They are mostle from a very large message board
> I host which holds 60,000+ members.  The admin just
> sent a party invitation to everyone in the board. 
>   - Analysis from Jake Vickers regarding SPAM, I
> also checked with the RBL evidence that I have an
> old insecure feedback form in php.
> 
>   What I did to help solve this problem:
>   - I fixed the feedback forms by updating them to
> the latest ones with anti-spam 
>   - I increased the
> /var/qmail/control/concurrencyremote setting from 60
> to 120
>   - I did: qmailctl doqueue to speed up delivery
>   - I coordinated with the large messageboard admin
> to fix his part and not send mail for a while
>   - Now after more than 24 hours, I tweaked
> queuelifetime from 24 hours to 4 hours just to help
> empty the queue.
>   - Now I am down to 500+ in the queue, I will reset
> back the queuelifetime maybe to 12 hours. 
> 
>   What do you think guys?  Anything I missed?
>   Will update you on final resolution of this
> problem.
> 
> 
> 
>   On 2/6/06, Jake Vickers < [EMAIL PROTECTED]>
> wrote:
> Gabriel Lai Yong Shern wrote:
> 
> > *Don't worry, it will send out by now* 
> > **
> > *You should see send log file*
> > **
> > *I have a client also, where the company will
> send out approx 100mails
> > in 1 hour. I modified the concurrencyoutgoing
> file to be higher, so
> > that it will send faster.* 
> > **
> > *but, I will advice you jot down the default
> value, when every mails
> > finished sending, put it back default value. *
> > **
> > *After modified, please restart server. If
> stop qmail, will take 
> > sometime, so restart is the best*
> 
> Let's see. If I follow this, your main mail
> server got black listed,
> right? I did a check at DNSStuff.com, and see
> that you were listed here:
>
> http://psbl.surriel.com/listing?ip=209.11.243.202
> http://www.spamcop.net/bl.shtml?209.11.243.202
> Which means that you are listed as a spammer.
> Since the second link is 
> SpamCop (one that almost every one uses) that
> would explain why your
> mail cannot make it out of your domain. You need
> to find out who was
> spamming, remove them from your server, and on
> the SpamCop link I sent
> they have instructions on how to remove yourself
> from their list. This
> is one of the risks of hosting other people's
> websites/email. Hope you
> charge them enough to make up for the
> aggravation!
> You could always swing all of your email
> accounts to another server with 
> a different IP in the meantime. But you will
> still need to investigate
> why you were listed as a spammer, or your new IP
> will just get
> blacklisted, and on and on.
> That will also be why you have 3000+ emails in
> your queue. Most servers 
> will check against SpamCop (or one of the many
> others), and since you're
> listed as a spammer, they drop connection on
> you. So your email sits in
> the queue, until your
> /var/qmail/control/queuelifetime is exceeded. 
> Sorry about your bad luck, and hopefully that
> helps some.
> 
>
>
-
>  QmailToaster hosted by: VR Hosted
> 
>
>
-
> To unsubscribe, e-mail:
> [EMAIL PROTECTED] 
> For additional commands, e-mail:
> [EMAIL PROTECTED]
> 
> 
> 
> 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
 QmailToaster hosted by: VR Hosted 
--

Re: [qmailtoaster] FastForward dosen't work ... why?

[Pablo Silva]

Hi Gabriel!

  Thanks for your reply, here I send my comments...

  1) I want to replace a sendmail server by Qmail,
today the e-mail services works this form
  
 e-mail 
 in ---> Sendmail --> Exchange 5.5 --> Outlook
 (alias)

 where in sendmail server, we have a big list of alias
to e-mail account to exchange server.

 For example:

 psilva:   [EMAIL PROTECTED]

 The mailbox [EMAIL PROTECTED] is in
Exchange Server 5.5

 
 2) The next step for to replace Sendmail server is
to redirect all the e-mail traffic by iptables to 
Qmail server, only for make a several tests before
the change.

  That's the architecture for make testing

e-mail 
in---> Firewall --> Qmail --> Exchange --> Outlook
(redirect 
 e-mail 
 traffic)



  I don't want to drop sendmail service yet, because 
if there are troubles, I can change quickly to my old
server Sendmail, modify the iptable rule in the
firewall, (Rollback all!)


3) You said:

"Let's say, if your principal-domain.com is your
sendmail box, you would like to forward every client's
emails to qmail box? Replace exchange server?"

  My comment is:

  I want to forward every client's email to Exchange
server, I don't want forward to qmail box..., as you
see in 2) these architecture i want to use before 
to replace sendmail by qmail...

4) I'm agree with you, I'll want to replace the
Exhange
server, but I can't for bussiness rules, all of
our user must to use Exchange mailbox.

 Conlusion
 -

 As you can see, I have  qmailtoaster installed and
working, but when I redirect all the e-mail traffic
toward qmail server, I have troubles...FastForward 
in qmail server dosen't works.. I don't know why...


 If you can see the log file, the messages are:

/var/log/qmail/smtp/current

@400043dcdfb228443c34 tcpserver: status: 3/100
@400043dcdfb8134bfeac CHKUSER accepted rcpt:
from
<[EMAIL PROTECTED]::> remote
 rcpt
<[EMAIL PROTECTED]> : found existing recipient
@400043dcdfb902e47c74 tcpserver: end 27446
status
0
@400043dcdfb902e6263c tcpserver: status: 2/100
@400043dcdfb90fba38e4 tcpserver: status: 3/100
@400043dcdfb90fba5054 tcpserver: pid 27456
from
200.74.166.139
@400043dcdfb90fba5824 tcpserver: ok 27456
adonis.principal-domain.com:10.100.104.141:25
:200.74.166.139::3088

/var/log/qmail/send/current

@400043dd4a14048470d4 delivery 1735: deferral:
Trouble_reading_users/cdb_in_qmail-lspawn./
@400043dd4a140484845c status: local 1/10
remote
1/60


 Thanks a lot for your time and help

 Greetings,
 Pablo


-START

Hi Pablo,


The problem is, when I send an e-mail to


>[EMAIL PROTECTED]


Let me clarify a few queries I have after reading your
email. principal-domain.com is your sendmail box?

Let's say, if your principal-domain.com is your
sendmail box, you would like to forward every client's
emails to qmail box? Replace exchange server?

If you would like to replace exchange server with
Qmail toaster, 1st, every client's email address must
be in Qmail box, from sendmail, you can forward all
emails to Qmail box, and qmail will separate every
emails to every specific emails.

I think, you don't have to have 2 email server, just
use Qmail as a centralized email server will be a good
solution too.

What do you think?

Please correct me.

Gab




- Original Message - From: "Pablo Silva"
<[EMAIL PROTECTED]>

To: 
Sent: Monday, January 30, 2006 7:18 AM
Subject: [qmailtoaster] FastForward dosen't work ...
why?



Hi!

 I'm very newbie administrator with qmailtoaster.

 I've installed by http://jakev.com/qmail/ script
into my
CENTOS 4.2 server.

 My qmailtoaster configuration is
http://pastebin.com/529358

 I'm testing my qmailtoaster server for this
moment,
I redirect
the e-mail traffic from my linux router to my
qmailtoaster server
by iptables

 -A PREROUTING  -d 200.55.198.5 -i eth0 -p tcp -m
tcp
--dport 25 -j DNAT --to-destination
10.100.104.141:25

  Where 200.55.198.5 is my internet address and
bypass all
the traffic to internal qmailtoaster server
10.100.104.141

  My organization use actually sendmail as
principal
e-mail
server and Microsoft exchange 5.5 as internal
server.

  The sendmail server has a big alias list where
the
users are:

user:  [EMAIL PROTECTED]

  When I installed qmailtoaster, also compiled
fastforward
for to work with this alias file, so I get
aliases.cdb
file
generated by /var/qmail/bin/newaliases

  The MX register in internal DNS is

  principal-domain.com   IN MX 0
adonis.pricipal-domain.com

  The problem is

[qmailtoaster] FastForward dosen't work ... why?

[Pablo Silva]

Hi!

  I'm very newbie administrator with qmailtoaster.

  I've installed by http://jakev.com/qmail/ script
into my
CENTOS 4.2 server.

  My qmailtoaster configuration is
http://pastebin.com/529358

  I'm testing my qmailtoaster server for this moment,
I redirect
the e-mail traffic from my linux router to my
qmailtoaster server
by iptables

  -A PREROUTING  -d 200.55.198.5 -i eth0 -p tcp -m tcp
--dport 25 -j DNAT --to-destination 10.100.104.141:25

   Where 200.55.198.5 is my internet address and
bypass all
the traffic to internal qmailtoaster server
10.100.104.141

   My organization use actually sendmail as principal
e-mail
server and Microsoft exchange 5.5 as internal server.

   The sendmail server has a big alias list where the
users are:

user:  [EMAIL PROTECTED]

   When I installed qmailtoaster, also compiled
fastforward 
for to work with this alias file, so I get aliases.cdb
file
generated by /var/qmail/bin/newaliases

   The MX register in internal DNS is

   principal-domain.com   IN MX 0
adonis.pricipal-domain.com

   The problem is, when I send an e-mail to 

[EMAIL PROTECTED] 

   it's in the queue and the log file show me this
information:

/var/log/qmail/smtp/current

@400043dcdfb228443c34 tcpserver: status: 3/100
@400043dcdfb8134bfeac CHKUSER accepted rcpt: from
<[EMAIL PROTECTED]::> remote
 rcpt
<[EMAIL PROTECTED]> : found existing recipient
@400043dcdfb902e47c74 tcpserver: end 27446 status
0
@400043dcdfb902e6263c tcpserver: status: 2/100
@400043dcdfb90fba38e4 tcpserver: status: 3/100
@400043dcdfb90fba5054 tcpserver: pid 27456 from
200.74.166.139
@400043dcdfb90fba5824 tcpserver: ok 27456
adonis.principal-domain.com:10.100.104.141:25
:200.74.166.139::3088

/var/log/qmail/send/current

@400043dd4a14048470d4 delivery 1735: deferral:
Trouble_reading_users/cdb_in_qmail-lspawn./
@400043dd4a140484845c status: local 1/10 remote
1/60


 As you can see, qmailtoaster *NEVER* use
fastforward
big mysterious... why?

 Thanks in advance for any hint...

 -Pablo

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]