RE: [qmailtoaster] hand mail off to exchange

[Steve Ingraham]

> -Original Message-
> From: Jake Vickers [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, January 17, 2008 10:02 AM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: [qmailtoaster] hand mail off to exchange
> 
> 
> Here's an interesting situation, and I'm polling for ideas.  I have a 
> client that has an IT department that is running an Exchange 
> server. I 
> currently run all of their email. They would like to start using the 
> Exchange server, so they would like me to pass the email off to their 
> exchange server. They still want to SEND emails through my 
> SMTP server 
> as well. Here's the ways I know I can use:
> I can remove their accounts from my machine and just do a simple 
> smtproutes rule to send all email for them to the Exchange's IP. Have 
> them send all emails through 1 authenticated email address through my 
> machine as a relay.
> I know I can also give their Exchange server a new name 
> (exchange.client.com) and just create forwards to the new addresses 
> there. they would use their old account ([EMAIL PROTECTED]) to 
> send emails 
> as they always have.
> They could use the POP3 connector built into Exchange to poll 
> the email 
> from me (bear in mind that this IT department is not very friendly or 
> cooperative - they love to go out of their way and show that they are 
> "better" than I am - long story) and still use their normal SMTP-AUTH 
> accounts to send email through me.
> 
> I'm sure there are other ways, and that's what I'm looking to 
> hear from 
> those of you out there who have tried "things".
> What about creating a tap on the domain to send to their IP 
> address? Has 
> anyone tried anything similar?
> I remember someone posting about getting emails to 2 
> different machines 
> hosting the same domain, and I thought they had sent copies 
> to the other 
> machine's hostname to get emails in 2 places (so the user 
> could log into 
> either server and see their emails).
> Anyone else have any other ideas?
> Thanks.
> 

Jake,
You know better than anyone my limited knowledge on this subject but
isn't what you are looking to do similar to how our Exchange server
handles things in our network?

Steve Ingraham

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] Duplicate emails and increased spam getting through

[Steve Ingraham]

@4000470285f82d27f1b4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470285f92dc1bccc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470285fa2e5a3024 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470285fb2ef318ac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470285fc2f8c6e94 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470285fd30250ce4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470285fe30be997c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470285ff31575af4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860031f07a2c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860132892434 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400047028602332331b4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860333bbeb5c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470286043454e76c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860534ee1644 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860635872dac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470286073620589c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860836b99afc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470286093752394c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860a37eb7bac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860b3884c9c4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860c391d3164 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860d39b6f4ac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860e3a5cc9cc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702860f3ae88b24 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470286103b85925c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470286120080596c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000470286130119075c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40004702861401b49f64 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400047028615024b1ad4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor


-Original Message-
From: Steve Ingraham 
Sent: Tuesday, October 02, 2007 12:46 PM
To: qmailtoaster-list@qmailtoaster.com;
[EMAIL PROTECTED]
Subject: [qmailtoaster] Duplicate emails and increased spam
getting through


I have a couple of problems that had shown up about a month ago
and now are showing up again yesterday and today in our domain.  Many of
my users are reporting quite a few duplicate emails and many are
receiving a great number of spam emails that they were not receiving
before.
 
We are running Qmailtoaster 1.3 with spamassassin 3.1.5 running
Perl version 5.8.0 on a Redhat OS.
 
Most of the new spam is very raw adult sex spam emails some with
pictures in the body of the text.  None of this type of spam was making
it through the filters until this recent incident and the incident a
month ago.  Not only is the highly offensive spam making its way through
but there is a large increase in the overall number of spams that are
getting to the user mailboxes.
 
The duplicate emails tend to be for the most part from
legitimate emails the users normally see email from.
 
I have checked the disk space capacity on this server as that
has been a problem in the past but I do not see that as a problem
currently.  Here are the usage numbers for this server:
FilesystemSizeUsedAvailUse%
Mount on
/dev/sda71.5G1.1G356M76%   /
/dev/sda3710M48M626M8%
/boot
none   501M0501M0%
/dev/shm
/dev/sda9496M26M445M6%
/tmp
/dev/sda5 16G 3.1G12G 21%
/usr
/dev/sda8496M238M233M  51%
/var
/dev/sda2 7.5G 5.3G1.8G75%
/home
 
Below is the header information of one of the emails that was
being duplicated

[qmailtoaster] Duplicate emails and increased spam getting through

[Steve Ingraham]

I have a couple of problems that had shown up about a month ago and now
are showing up again yesterday and today in our domain.  Many of my
users are reporting quite a few duplicate emails and many are receiving
a great number of spam emails that they were not receiving before.
 
We are running Qmailtoaster 1.3 with spamassassin 3.1.5 running Perl
version 5.8.0 on a Redhat OS.
 
Most of the new spam is very raw adult sex spam emails some with
pictures in the body of the text.  None of this type of spam was making
it through the filters until this recent incident and the incident a
month ago.  Not only is the highly offensive spam making its way through
but there is a large increase in the overall number of spams that are
getting to the user mailboxes.
 
The duplicate emails tend to be for the most part from legitimate emails
the users normally see email from.
 
I have checked the disk space capacity on this server as that has been a
problem in the past but I do not see that as a problem currently.  Here
are the usage numbers for this server:
FilesystemSizeUsedAvailUse%Mount on
/dev/sda71.5G1.1G356M76%   /
/dev/sda3710M48M626M8%/boot
none   501M0501M0%
/dev/shm
/dev/sda9496M26M445M6%/tmp
/dev/sda5 16G 3.1G12G 21%   /usr
/dev/sda8496M238M233M  51%   /var
/dev/sda2 7.5G 5.3G1.8G75%  /home
 
Below is the header information of one of the emails that was being
duplicated.  Below that is the header and content of one of the spams
that this same user recieved.  The spam email does not appear to have
any spamassassin score information in the header at all.  Are these two
problems related?  Is there some specific things with qmail or with
spamassassin I should be looking at for either or both of these issues?
 
I appreciate any input that can be offered to help resolve this problem.
 
Steve
 
 

Microsoft Mail Internet Headers Version 2.0

Received: from mxi.occa.state.ok.us ([172.16.255.12]) by
mxi2.occa.state.ok.us with Microsoft SMTPSVC(6.0.3790.3959);

 Tue, 2 Oct 2007 08:11:23 -0500

Received: from dellapp02.occa.state.ok.us ([204.87.111.225]) by
mxi.occa.state.ok.us with Microsoft SMTPSVC(5.0.2195.6713);

 Tue, 2 Oct 2007 08:12:07 -0500

Received: (qmail 19008 invoked by uid 507); 2 Oct 2007 13:16:22
-

Received: by simscan 1.2.0 ppid: 18755, pid: 18756, t: 215.0297s

 scanners: attach: 1.2.0 clamav: 0.88.4/m:40/d:2106
spam: 3.1.5

Received: from unknown (HELO smtp160.iad.emailsrvr.com)
(207.97.245.160)

  by dellapp02.occa.state.ok.us with SMTP; 2 Oct 2007 13:12:47
-

Received-SPF: none (dellapp02.occa.state.ok.us: domain at
longwall.com does not designate permitted sender hosts)

Received: by relay6.relay.iad.emailsrvr.com (Authenticated
sender: dclemens-AT-longwall.com) with ESMTP id 3BB94661470;

Mon,  1 Oct 2007 11:11:53 -0400 (EDT)

Message-ID: <[EMAIL PROTECTED]>

Reply-To: "Dave Clemens" <[EMAIL PROTECTED]>

From: "Dave Clemens" <[EMAIL PROTECTED]>

To: <[EMAIL PROTECTED]>,

<[EMAIL PROTECTED]>,

"Andi Holmes" <[EMAIL PROTECTED]>

Subject: Fw:  Dressed in Black

Date: Mon, 1 Oct 2007 11:09:25 -0500

Organization: Longwall Associates, Inc.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_NextPart_000_037B_01C8041B.8717EF60"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

Return-Path: [EMAIL PROTECTED]

X-OriginalArrivalTime: 02 Oct 2007 13:12:07.0234 (UTC)
FILETIME=[D54FE220:01C804F5]

 

--=_NextPart_000_037B_01C8041B.8717EF60

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

 

--=_NextPart_000_037B_01C8041B.8717EF60

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

 

 

--=_NextPart_000_037B_01C8041B.8717EF60--

 











Microsoft Mail Internet Headers Version 2.0

Received: from mxi.occa.state.ok.us ([172.16.255.12]) by
mxi2.occa.state.ok.us with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 2 Oct 2007 12:18:10 -0500

Received: from dellapp02.occa.state.ok.us ([204.87.111.225]) by
mxi.occa.state.ok.us with Microsoft SMTPSVC(5.0.2195.6713);

Tue, 2 Oct 2007 1

RE: [qmailtoaster] qtp RDJ warning

[Steve Ingraham]

> -Original Message-
> From: Jake Vickers [mailto:[EMAIL PROTECTED] 
> Sent: Sunday, June 24, 2007 1:22 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] qtp RDJ warning
> 
> 
> dnk wrote:
> > I started getting (maybe my bad and just started noticing) 
> this error
> > showing up...
> >
> > What is the best way to resolve (with qtp in mind)?
> >
> >
> > ***WARNING***: spamassassin --lint failed.
> >
> > Rolling configuration files back, not restarting SpamAssassin.
> >
> > Rollback command is:  mv -f /etc/mail/spamassassin/tripwire.cf
> > /etc/mail/spamassassin/RulesDuJour/99_FVGT_Tripwire.cf.2; mv -f 
> > /etc/mail/spamassassin/RulesDuJour/tripwire.cf.20070624-1036 
> > /etc/mail/spamassassin/tripwire.cf;
> >
> >
> > Lint output: [14861] warn: config: failed to parse line, skipping:
> > 
> >
> > [14861] warn: config: failed to parse line, skipping:  > HTTP-EQUIV="Pragma" CONTENT="no-cache">
> >
> > [14861] warn: config: failed to parse line, skipping:  > HTTP-EQUIV="Expires" CONTENT="-1">
> >
> > [14861] warn: config: failed to parse line, skipping: 
> >
> > [14861] warn: lint: 4 issues detected, please rerun with 
> debug enabled
> > for more information
> >
> Tripwire has been depreciated.  It's best to just remove that 
> from your 
> /etc/rulesdujour/config file. That will fix the errors. This has been 
> removed in the new version.
> I may move to sa-update in the future of QTP. It seems that 
> it won out 
> over RDJ as far as the Spamassassin community supporting it. Thanks.
> 
This is the first week since the attack on Rules Du Jour that I did not
get the error messages mentioned above.  I have a cron job set up to
pull new jobs from RDJ for each Sunday night.  I usually get an email
message stating that the rules were updated.  I did not get that message
either.  So I have nothing telling me that the rules were updated and
nothing telling me there were any errors.  Is there any information on
what may be going on with RDJ?  I cannot determine if I have a problem
or not.  Any thoughts on this would be appreciated.

Steve

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] QMT-ISO 1.2.1

[Steve Ingraham]

> -Original Message-
> From: Jake Vickers [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, June 05, 2007 1:33 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] QMT-ISO 1.2.1
> 
> 
> PakOgah wrote:
> > Jake Vickers wrote:
> >> Release plan is as follow: when I get to it . I do this in my
> >> spare time - I have a consulting business that keeps me very busy, 
> >> and a child on the way (just found out it's going to be a boy 
> >> yesterday). As such, my clients come first. After the baby is 
> >> born, don't be too surprised if I don't release any more updates.
> > a baby boy!!! Congratulations .
> >
> Thanks. We're both very excited.
> 
> >>
> > a webmin!! Yeah I am agree rather than build a Web Admin for
> > qmailtoaster there are module for webmin
> > http://www.webmin.com/cgi-bin/search_third.cgi?search=qmail
> >
> Well - I'll be giving the option to install Webmin itself. I used the 
> QMail plugin about 4 years ago, and it killed my whole 
> server. I can't 
> say for sure if it works with Toaster now, but it will be 
> something I'd 
> like to test. The user who asked for Webmin to be included (sorry, 
> forgot who asked) gave me the impression that they were looking to 
> manage the rest of their system, not specifically Toaster 
> through Webmin. Thanks again.
> 
I use webmin to manage my Linux machine.  Webmin does allow for
management of qmail although with my limited knowledge of qmail I have
basically only used it to examine and manage the queue.  

Steve Ingraham 

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] i get a lot of bounces

[Steve Ingraham]

> -Original Message-
> From: Eric "Shubes" [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, April 25, 2007 10:56 AM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] i get a lot of bounces
> 
> 
> Jim Shupert, Jr. wrote:
> > I have been told of many bounces of email sent to me.
> > The latest is from the qmail mailing list - I have also gotten 
> > "robots"
> > of other ( 3 other ) mailinglist
> > regarding mail bounces.
> >  
> > I feel rather certain this coincides with my shifing my mail server 
> > from Postfix to QmailToaster.
> >  
> > So , my Q might be does anyone know as to why this might be 
> > happening? It does not seem to be a good thing.
> >  
> > Could I have something slightly wrong?
> > ( the load on my qmailToaster is rather light... 1domain of 
> 40 and a 
> > second domainof <10 )
> >  
> > thanks
> >  
> > j
> >  
> > '( in example)
> > Hi! This is the ezmlm program. I'm managing the 
> > qmailtoaster-list@qmailtoaster.com mailing list.
> > 
> > I'm working for my owner, who can be reached
> > at [EMAIL PROTECTED]
> > 
> > 
> > ''( end example
> 
> You haven't given enough detail to make an educated guess. :( 
> It could be one or more of many things (probably just one though). ;)
> 
> It would be most helpful to have the complete bounce. The 
> meaningful part should be further down.
> 
> Is it bouncing everything from the qmail list, or just some things?

Eric,
I would like to post some information on bounces I am receiving that are
similar to Jim's bounces.  I have been watching this thread for any
information on this problem in hopes that answers to Jim will help with
my bounce problems also.  I have been receiving these messages from
various mail lists I subscribe to.  Any information that can be provided
on what may be causing these bounces would be appreciated.

Thanks,
Steve

Here is the bounce information I received from the spamassassin mail
list:


Hi! This is the ezmlm program. I'm managing the
[EMAIL PROTECTED] mailing list.


Messages to you from the users mailing list seem to
have been bouncing. I've attached a copy of the first bounce message I
received.

If this message bounces too, I will send you a probe. If the probe
bounces, I will remove your address from the users mailing list, without
further notice.


I've kept a list of which messages from the users mailing list have 
bounced from your address.

Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per request),
send a short message to:
   <[EMAIL PROTECTED]>

To receive a subject and author list for the last 100 or so messages,
send a short message to:
   <[EMAIL PROTECTED]>

Here are the message numbers:

   57513
   57578

--- Enclosed is a copy of the bounce message I received.

Return-Path: <>
Received: (qmail 84548 invoked for bounce); 13 Apr 2007 01:10:38 -
Date: 13 Apr 2007 01:10:38 -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: failure notice

Hi. This is the qmail-send program at apache.org.
I'm afraid I wasn't able to deliver your message to the following
addresses. This is a permanent error; I've given up. Sorry it didn't
work out.

<[EMAIL PROTECTED]>:
204.87.111.225 failed after I sent the message.
Remote host said: 554 Your email is considered spam (15.60 spam-hits)

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] smtproutes for single domain

[Steve Ingraham]

> -Original Message-
> From: mahesh wadekar [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, March 29, 2007 12:48 AM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] smtproutes for single domain
> 
> 
> 
> Jake thanks for reply.
> 
> My server having ten domain. But some of reasion
> hotmail.com rejecting message.
> In my server abc.com domain have 50 users and they
> want send mail to hotmail.com.
> For that reasion I want to use smtp of smtp.xyz.com
> which is on anther server.
> if I use :smtp.xyz.com in smtproutes that working
> properly.
> But i want to use abc.com:smtp.xyz.com
> 
> so only abc.com outgoing mail will only go via
> smtp.xyz.com
> 
> how can i do that.
> Please help

I will never claim to be an expert but I had a similar problem with
delivery not getting to individuals on hotmail.com accounts, msn.com
accounts and sbcgloblal.net.  All of these were big name providers that
evidently were not delivering email from our domain because we had an
SPF record that was not configured correctly.  It was not showing the
email coming from our domain as coming from the IP address for our
domain.  For this reason they were treating our email as spam.

I subscribed to an SPF mail list and was able to get advice from them on
how to reconfigure my SPF record for our domain that helped with our
problem.  If you are interested you can subscribe to their list here:

http://www.openspf.org/Forums

Good luck,
Steve

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] RE: ezmlm warning

[Steve Ingraham]

> -Original Message-
> From: Jake Vickers [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, February 27, 2007 6:45 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] RE: ezmlm warning
> 
> 
> Steve Ingraham wrote:
> > Below is a message I have been receiving from the 
> > qmailtoaster-list-help email for some time now.  Can 
> someone explain 
> > what exactly is going on and what I can look at to see why messages 
> > would be bouncing when sent to [EMAIL PROTECTED]  I am receiving 
> > emails from the qmailtoaster list on a daily basis so I don't 
> > understand why I would be continually receiving messages 
> that tell me 
> > that messages are bouncing.  Any help is appreciated.
> > 
> 
> I get those messages from time to time (or used to). It's nothing to 
> worry about, unless you start to see dozens of emails being 
> bounced. You can follow the request directions in the email 
> and request a copy of 
> the email in question, but I think you'll see it's a spam 
> message spoof.
> 
Ok, thanks.  I didn't know if I should worry about them or not as I am
getting at least one a day.

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] RE: ezmlm warning

[Steve Ingraham]

Below is a message I have been receiving from the qmailtoaster-list-help
email for some time now.  Can someone explain what exactly is going on
and what I can look at to see why messages would be bouncing when sent
to [EMAIL PROTECTED]  I am receiving emails from the qmailtoaster
list on a daily basis so I don't understand why I would be continually
receiving messages that tell me that messages are bouncing.  Any help is
appreciated.

Steve

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, February 27, 2007 4:31 PM
> To: Steve Ingraham
> Subject: ezmlm warning
> 
> 
> Hi! This is the ezmlm program. I'm managing the 
> qmailtoaster-list@qmailtoaster.com mailing list.
> 
> I'm working for my owner, who can be reached
> at [EMAIL PROTECTED]
> 
> 
> Messages to you from the qmailtoaster-list mailing list seem 
> to have been bouncing. I've attached a copy of the first 
> bounce message I received.
> 
> If this message bounces too, I will send you a probe. If the 
> probe bounces, I will remove your address from the 
> qmailtoaster-list mailing list, without further notice.
> 
> 
> I've kept a list of which messages from the qmailtoaster-list 
> mailing list have 
> bounced from your address.
> 
> Copies of these messages may be in the archive.
> 
> To retrieve a set of messages 123-145 (a maximum of 100 per 
> request), send an empty message to:
><[EMAIL PROTECTED]>
> 
> To receive a subject and author list for the last 100 or so 
> messages, send an empty message to:
><[EMAIL PROTECTED]>
> 
> Here are the message numbers:
> 
>11251
> 
> --- Enclosed is a copy of the bounce message I received.
> 
> Return-Path: <>
> Received: (qmail 5243 invoked for bounce); 16 Feb 2007 06:53:24 -
> Date: 16 Feb 2007 06:53:24 -
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: failure notice
> 
> Hi. This is the qmail-send program at ns1.qmailtoaster.com.
> I'm afraid I wasn't able to deliver your message to the 
> following addresses. This is a permanent error; I've given 
> up. Sorry it didn't work out.
> 
> <[EMAIL PROTECTED]>:
> TLS connect failed: error:1408F10B:SSL 
> routines:SSL3_GET_RECORD:wrong version number; connected to 
> 204.87.111.225. I'm not going to try again; this message has 
> been in the queue too long.
> 
> 

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] Spam Score questions

[Steve Ingraham]

I have a couple of questions concerning the below header information.
This is a spam that one of my users received this morning.  My questions
pertain to the rule scores.  First question, this spam hit on the
SARE_ADULT2 BODY rule but it only received a score of 1.0.  I assume
this rule is looking for any porn spam so I would expect if an email hit
on this rule it would score higher.  Can I change the score for that
rule?  If so, do I just add a line in the local.cf file like so?  
 
SARE_ADULT2 BODY 8.0
 
If not how would I increase the score for that rule on incoming emails?
 
Second question, in local.cf I have a line that reads:
 
BAYES_99 10.0
 
I had assumed that line to mean that any email hitting on the BAYES_99
rule would receive a score of 10.0, but as you can see this email only
received a score of 3.5 on that rule.  Why?  What can I do to make sure
emails that hit on this rule will receive the 10.0 score that I had
indicated in the local.cf file?
 
 
Microsoft Mail Internet Headers Version 2.0
Received: from dellapp02.occa.state.ok.us ([204.87.111.225]) by
MXI.occa.state.ok.us with Microsoft SMTPSVC(5.0.2195.6713);
  Mon, 26 Feb 2007 09:18:04 -0600
Received: (qmail 1580 invoked by uid 507); 26 Feb 2007 15:12:52 -
Received: by simscan 1.2.0 ppid: 1565, pid: 1574, t: 4.4124s
 scanners: attach: 1.2.0 clamav: 0.88.4/m:40/d:2106 spam: 3.1.5
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on 
 dellapp02.occa.state.ok.us
X-Spam-Level: **
X-Spam-Status: Yes, score=6.8 required=5.0 tests=BAYES_99,INFO_TLD,
 JR_RCVD_TOO_FEW_HOPS,SARE_ADULT2 autolearn=no version=3.1.5
X-Spam-Report: 
 *  1.0 JR_RCVD_TOO_FEW_HOPS Just one hop means direct untrusted client
 *  1.0 SARE_ADULT2 BODY: Contains adult material
 *  1.3 INFO_TLD URI: Contains an URL in the INFO top-level domain
 *  3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
 *  [score: 1.]
Received: from unknown (HELO c951847d.virtua.com.br) (201.81.132.125)
  by dellapp02.occa.state.ok.us with SMTP; 26 Feb 2007 15:12:48 -
Received-SPF: none (dellapp02.occa.state.ok.us: domain at
gibbsnorwalk.com does not designate permitted sender hosts)
Date: Mon, 26 Feb 2007 10:32:00 -0600
From: Silas Lacey <[EMAIL PROTECTED]
 >
Reply-To: Silas Lacey <[EMAIL PROTECTED]
 >
Message-ID: <[EMAIL PROTECTED]
 >
To: <[EMAIL PROTECTED]  >
Subject: Lustful babe blows a dick %) to orgasm
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Return-Path: [EMAIL PROTECTED]
 
X-OriginalArrivalTime: 26 Feb 2007 15:18:04.0657 (UTC)
FILETIME=[4FD59E10:01C759B9]
 
 
Thanks for your help,
Steve
 
 

[qmailtoaster] Are the qmail lists down?

[Steve Ingraham]

I am not receiving any emails from the qmail or the qmailtoaster list.
Is something wrong with the list or my email server?
 
Steve
 

RE: [qmailtoaster] cannot establish SMTP connection

[Steve Ingraham]

Thanks for the info to you and everyone else who replied.  After sending
my inquiry to the mail list I talked with the OSCN support personnel who
informed me their server was having problems and that they were working
on it.  Your explanations were helpful though in my understanding of how
to troubleshoot these types of error messages.


> -Original Message-
> From: Eric "Shubes" [mailto:[EMAIL PROTECTED] 
> Sent: Monday, February 05, 2007 2:10 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] cannot establish SMTP connection
> 
> 
> Steve Ingraham wrote:
> > Below is an error message one of my users received today.  
> Can anyone 
> > explain to me what this means concerning the ". . .wasn't able to 
> > establish an SMTP connection"?  Is this telling me there is 
> an issue 
> > with our qmail toaster or that the receiving server has an SMTP 
> > problem?
> > 
> > Thanks,
> > 
> > Steve
> > 
> > ___
> > 
> > From: [EMAIL PROTECTED]
> > [_mailto:[EMAIL PROTECTED]
> > 
> > Sent: Monday, February 05, 2007 12:59 PM
> > 
> > To: Molly Reid
> > 
> > Subject: failure notice
> > 
> >  
> > 
> > Hi. This is the qmail-send program at 
> dellapp02.occa.state.ok.us. I'm 
> > afraid I wasn't able to deliver your message to the following 
> > addresses. This is a permanent error; I've given up. Sorry 
> it didn't 
> > work out.
> > 
> > <[EMAIL PROTECTED]>:
> > 
> > Sorry, I wasn't able to establish an SMTP connection. 
> (#4.4.1) I'm not 
> > going to try again; this message has been in the queue too long.
> > 
> >  
> The message is indicating that your toaster wasn't able to 
> connect to the destination server.
> 
> The destination server appears to be up now:
> $ host -t MX oscn.net
> oscn.net mail is handled by 10 mail.oscn.net.
> $ telnet mail.oscn.net 25
> Trying 204.61.6.14...
> Connected to mail.oscn.net (204.61.6.14).
> Escape character is '^]'.
> 220 okcmailex.oscn.net Microsoft ESMTP MAIL Service, Version: 
> 6.0.3790.1830 ready at  Mon, 5 Feb 2007 14:04:02 -0600 quit 
> 221 2.0.0 okcmailex.oscn.net Service closing transmission 
> channel Connection closed by foreign host. $
> 
> The destination might have been down at the time. Try above 
> commands from your toaster. If it connects ok, have your user 
> try resending the message.
> 
> -- 
> -Eric 'shubes'
> 
> -
>  QmailToaster hosted by: VR Hosted <http://www.vr.org>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: 
> [EMAIL PROTECTED]
> 
> 

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] cannot establish SMTP connection

[Steve Ingraham]

Below is an error message one of my users received today.  Can anyone
explain to me what this means concerning the ". . .wasn't able to
establish an SMTP connection"?  Is this telling me there is an issue
with our qmail toaster or that the receiving server has an SMTP problem?

Thanks,

Steve

___

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 ] 

Sent: Monday, February 05, 2007 12:59 PM

To: Molly Reid

Subject: failure notice

 

Hi. This is the qmail-send program at dellapp02.occa.state.ok.us. I'm
afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[EMAIL PROTECTED]>:

Sorry, I wasn't able to establish an SMTP connection. (#4.4.1) I'm not
going to try again; this message has been in the queue too long.

 

RE: [qmailtoaster] Banned from using RulesDuJour?

[Steve Ingraham]

Jake,
Does this apply to my two servers you have helped me with, the old one
currently running and the new one we configured?  Is this "antidrug"
option something I need to deal with?
 
Steve Ingraham
 
 

-Original Message-
From: Jake Vickers [mailto:[EMAIL PROTECTED] 
Sent: Friday, January 26, 2007 3:12 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Banned from using RulesDuJour?


Eric "Shubes" wrote: 

Jake,
Does this affect QTP RDJ? I'm not using RDJ (yet).
  

Not anymore. The RDJ installed by QTP gets it's initial config
from my server (http://v2gnu.com/qmail/rdjconfig) from which I've
already removed that ruleset. Anyone who has already installed RDJ from
the QTP package prior to 1-23-07 will need to remove the "ANTIDRUG"
option from their config file located in /etc/rulesdujour/config

[qmailtoaster] email not delivered

[Steve Ingraham]

I have a user who is not receiving email from an msn.com
account.  I sent a test email from a hotmail.com account that she
received.  We are running qmailtoaster with spamassassin 3.1.5 with Perl
5.8.0 that relays all incoming email to a Microsoft Exchange 2000 server where
all mailboxes reside.  Users are using Outlook as their email client.

 

Here is a log from /var/qmail/smtp/ showing the email in
question.

 

@40004533b62b1294 tcpserver: pid 11399 from
204.87.111.232

@40004533b62b121232a4 tcpserver: ok 11399 dellapp02.occa.state.ok.us:204.87.111.228:25
:204.87.111.232::5964

@40004533b62b1da85e7c CHKUSER accepted sender: from <[EMAIL PROTECTED]::>
remote  rcpt <> :
sender accepted

@40004533b62b39db9b7c CHKUSER relaying rcpt: from <[EMAIL PROTECTED]::>
remote  rcpt
<[EMAIL PROTECTED]> : client allowed to relay

@40004533b62b3abe334c
simscan:[11399]:RELAYCLIENT:0.0138s:-:204.87.111.232:[EMAIL PROTECTED]:[EMAIL PROTECTED]

@40004533b62c00afe934 tcpserver: end 11399 status 0

 

The [EMAIL PROTECTED]
mailbox resides on a Windows Exchange 2000 box.  When I did a search for
all email sent to the recipient ([EMAIL PROTECTED])
the exchange box showed one email sent to her mailbox since 12:00 am.  It
was my test email that I sent from the hotmail.com account at 1:33 pm
today.  However, she reports that she never did receive that email either and
that neither it nor any emails from [EMAIL PROTECTED]
are in her inbox in Outlook although it appears to have been sent to her
mailbox when I examine the Exchange server.

 

Any help is appreciated.

 

Steve
 Ingraham

Director of Information Services

Oklahoma Court of Criminal Appeals

[EMAIL PROTECTED]

405 522-5343

 

[qmailtoaster] RE: duplicate emails

[Steve Ingraham]

Loren Wilton wrote:
>I did notice one possible problem in that debug output.  There was an 
>'inappropriate ioctl for device' message in the whitelist stuff near
the 
>end.

>This is something that has been a problem for other and has been
discussed 
>before, but I don't recall what the usual fix is to solve this problem.
I 
>don't think it is causing your duplicate emails, but there is a minor
nit 
>there that is probably making AWL not work right.

Thanks for the information Loren, it appears that email is delivering
normally again.  I definitely would not know enough of what I was doing
to start changing anything with this issue.  I feel shell shocked for
now and want to leave well enough alone now that things are functioning
again.  I really do think I need an expert to look over my
configuration.  Who knows what I may have screwed up?  I will say that I
don't know for sure.

As a note, I "think" I may know what could have caused my problems with
duplicate emails.  I do believe that when I ran the RDJ script and
attempted to update the rules this bogged down the email server.  As
Jake mentioned the other day, this caused delivery problems with qmail.
Once I stopped the update; removed all of the rules out of
/etc/mail/spamassassin and rebooted the server (I still cannot start
spamassassin by using /etc/init.d/spamassassin restart), email started
delivering normally.  It appears that the server resources were being
maxed out.

On another note, I believe I had a compounding problem with our internal
email server running Exchange 2000 that coincided with the above
problem.  The C: drive on that server filled up and thus stopped the
Microsoft Exchange MTA Stack service that evidently delivers mail from
non-Exchange systems.

Here is Microsoft's description of the function of the Exchange MTA
Stack service:

The Microsoft Exchange MTA Stacks service (MTA) routes messages through
X.400 and gateway connectors to non-Exchange messaging systems. In a
mixed environment with servers running Exchange Server 5.5 in the local
routing group, the MTA is also used to transfer messages between
Exchange Server 2003 and Exchange Server 5.5. This occurs because
Exchange Server 5.5 MTAs communicate with each other in the local site
directly through RPCs. Exchange Server 2003 must rely on this
communication method for backward compatibility.

The executable file of the Microsoft Exchange MTA Stacks service is
EMSMTA.exe, which is located in the \Program Files\Exchsrvr\bin
directory. This service depends on System Attendant and maintains its
own specific message queues outside the Exchange store in the \Program
Files\Exchsrvr\Mtadata directory. The registry key is
HKEY_Local_Machine\System\CurrentControlSet\Services\MSExchangeMTA.
 
Note

You should leave the Microsoft Exchange MTA Stacks service running, so
that server monitors in their default configuration do not report a
server running Exchange Server as unavailable.

These two things I think were Cause 1 and Cause 2 of my failure, at
least I think they were.  I will say that stopping the RDJ update and
removing all unnecessary rule sets out of /etc/mail/spamassassin helped
get the system delivering again, furthermore, once I freed up space on
the Exchange 2000 machine and restarted the MTA Stack service things
started going back to normal.

Of course this brings me right back to my original reason for starting
this process this week.  Our users are getting a lot of spam in their
mailboxes that I was trying to block from getting through by updating
rules in spamassassin.  George, I have included some of the things you
mentioned that I could put in the blacklist file.  I have also removed
all rules except 70_sare_adult.cf, 70_sare_bayespoison_nmx.cf,
random.cf, 70_sare_evilnum0.cf from /etc/mail/spamassassin.  I would
appreciate any information on whether these rules are beneficial for me
to keep.  I would also like to know if there are others that I have
removed or do not have that I need to put into this folder.

I need an education on these systems.  I would welcome anyone interested
in contacting me in regards to helping with my education.  I also still
feel the need to have an expert pair of eyes look over my system as I am
not totally convinced that everything is configured properly.

Thanks to everyone for their help,
Steve Ingraham

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] RE: duplicate emails

[Steve Ingraham]

Mark Adams wrote:
What is your exchange server hosting? pop3? I have noted problems before
with clients recieving duplicate emails when connections timeout and the
server does not know how far the client application has gone through
the download of the mailbox - causing it to start downloading again. Are
any of the clients remote from the server? (this is where i noted the
problem most, notably on mobile internet devices especially on high
speed trains etc..)


All clients are networked desktop machines.  There are no remote
connections.

Steve Ingraham

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] duplicate emails

[Steve Ingraham]

 

Jake Vickers wrote:

Steve, in looking at what I
was doing late last night, I did not specify the port for the telnet
connection. It was my outbound firewall that was causing the no route to host.
Apologize for this.
If email is working now, keep an eye on it. Are
all of your clients set up to use the Exchange as the inbound/outbound server?

 

Apology is not necessary.  I appreciate
the efforts by all.  It just concerned me because coincidently I had recent
DNS problems.  To answer your question, yes, the clients are using Outlook
and mail is routed through Microsoft Exchange 2000.  I also have just
placed (in July) a new server running Windows 2003 Server and Exchange
2003.  I have moved several mailboxes to the new Exchange 2003 server
including my account.  So all the clients email is relayed from qmail to
either the old Exchange 2000 server or the new Exchange 2003 server.

 

Steve Ingraham

RE: [qmailtoaster] duplicate emails

[Steve Ingraham]

Eric (Shubes) wrote:
>Caution: the contents of /var/qmail/control/blacklists must be on a
single 
>line (I think - you might be able to escape the newline (CR), but I'm
not 
>sure w/out testing it).

Eric, can you explain what you are referring to in your Caution
statement above?  Do you mean that all of the content should be listed
on one line?  So using an example from George's blacklist below the
content should look like:

-r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org . . . etc.

If this is the way it needs to be input into the blacklists file should
there be commas, spaces or something else between each entry?  If not,
then I guess I am a little confused on what you are referring to.

Steve Ingraham
___

> George Sweetnam wrote:
>> You might also want to add some additional blacklists from orbs
(don't
> do 
>> the all-in-one).  Some like the dynamic shouldn't be used, but the
>> exploited 
>> server rbl is very handy.  I added 5 or 6 to my servers and it's
helped
>> even more.
> 
>> The content of my current blacklists control file (I does change):
>> -r sbl.spamhaus.org
>> -r bl.spamcop.net
>> -r relays.ordb.org
>> -r block.dnsbl.sorbs.net
>> -r http.dnsbl.sorbs.net
>> -r misc.dnsbl.sorbs.net
>> -r rhsbl.sorbs.net
>> -r smtp.dnsbl.sorbs.net
>> -r socks.dnsbl.sorbs.net
>> -r spam.dnsbl.sorbs.net
>> -r web.dnsbl.sorbs.net
>> -r zombie.dnsbl.sorbs.net
> 
>> Just eliminate the biggest files in your setup - comment out
BLACKLIST
>> and BLACKLIST_URL from your config. Those two are huge and taking
them
>> out of my setup returned my system to normal behavior.
> 
> 
> Thanks, I will look at adding to my blacklists control file.  Can you
> tell me what the "-r" command means?
> 
> Steve Ingraham
> 
> 
> 
> --Original Message--
> 
>> Steve Ingraham wrote:
>>
>> I need help with a problem. Our users are seeing some multiple
>> duplicate emails coming from the same sender. This is not occurring
>> with every email so there does not seem to be any pattern to which
>> incoming emails will be duplicated and which ones won't. They are
also
>> reporting that duplicate emails are sent when they send to an outside
>> email. Has anyone experienced this problem before? What could be
>> causing this to occur and what can I do to stop this? I am running
>> qmailtoaster and spamassassin as an external email gateway. There has
>> been nothing changed with qmail but I did update some rules in SA
>> using rules_du_jour yesterday. Would these rules updates cause this
>> problem? If so, what would have changed?
>>
>> Jake Vickers wrote:
>>
>> If your system is low on resources (ie: RAM), then the spamd process
>> can take too long, making Toaster think the mail got lost somewhere,
>> so it resends it.
>> Might want to check and see how much RAM you're using.
>>
>> I want to thank everyone who posted a reply on my inquiry. I believe
>> Jake Vickers was right about the problem. The RAM on the email server
>> was bogged down since yesterday when I updated the various .cf files
>> using rules_du_jour. I had included just a handful of rules from RDJ
>> but it appears that RDJ utilizes much too much of my server resources
>> to use it to update my spamassassin rules. It was slowing down the
>> server so much that simple functions were not responding. This
appears
>> to have affected the delivery of emails. In fact I noticed that my
>> original message to these mail lists took several hours to post and
>> were duplicated also. I resolved the problem by moving the various
>> rules .cf files out of the /etc/mail/spamassassin folder and
>> restarting spamassassin.
>>
>> If anyone has a simple way of updating rules for spamassassin I would
>> welcome your input. I still need to update the rules as I have been
>> getting a great number of emails coming through to users.
>> Specifically, we are getting a lot of the pharmaceutical spam and the
>> stock spam.
>>
>> Again, thanks to everyone for the posts.
>>
>> Steve Ingraham
>>


-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] duplicate emails

[Steve Ingraham]

Jimmy Smith wrote:
>required_hits 3
>report_safe 0
># report_header 1
># use_terse_report 1
># rewrite_subject 0
>rewrite_header Subject ***SPAM***

>Here, required_hits sets the threshold for what is marked and
considered
>spam (score of 3). The report_safe is turned off, leaving the original
>message intact. The next three are commented out, leaving the Headers
as
>originally sent. The setting, "terse_reports" shortens the report
format
>without losing valuable information. Being commented out allows
>spamassassin to insert information as well as some explanations. The
>"rewrite_subject" has been set to insert the SPAM tag in the subject
>line when hitting the threshold of 3.

>These are typical of most installations. The local.cf file over-rides
>the rules in the /usr/share folder. This is where you should place
>custom rules that are specific to the type of mail your organization
>receives. The settings above won't have any effect on your duplication
>problem.

>For more information, at the mailfilter type "perldoc
>Mail::SpamAssassin::Conf" for some tips and guidelines about rules and
>configuration. There are many sites that will help with understanding
>configuration settings, such as the one below.

>http://www.mines.edu/academic/computer/spamuserprefs.shtml

>Good Luck!

Luck appears to be what I am running out of.  These email problems are
eating my lunch!  I know everyone out there has been very helpful and I
appreciate the information.  However, the suggestions do not seem to be
effective in my getting our email functional again.  We are still having
multiple email failures.  Duplicate emails are still coming in, users
emails that are sent from our network are not being delivered (this is
upsetting users the most as they feel they cannot trust that their
emails are being delivered) and outside emails are also being delayed or
not delivered at all.

These problems began on Monday when I was attempting to update SA rules
using RDJ.  I have removed all but a small number of .cf files in
/etc/mail/spamassassin and rebooted the server.  The files currently in
/etc/mail/spamassassin folder are:
70_sare_adult.cf
70_sare_bayes_poison_nxm.cf
70_sare_evilnum0.cf
occa_phishing.cf
occa_replica.cf
chickenpox.cf
init.pre
random.cf
tripwire.cf
weeds2.cf
local.cf

Right now I cannot rely on receiving emails as delivery is very
sporadic.  Please send any replies to this post to
[EMAIL PROTECTED]  As of this writing no outside email is being
delivered to our mailboxes.  I would appreciate any help anyone can
offer.

Steve Ingraham

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] duplicate emails

[Steve Ingraham]

George Sweetnam wrote:
>You might also want to add some additional blacklists from orbs (don't
do 
>the all-in-one).  Some like the dynamic shouldn't be used, but the
>exploited 
>server rbl is very handy.  I added 5 or 6 to my servers and it's helped
>even more.

>The content of my current blacklists control file (I does change):
> -r sbl.spamhaus.org
> -r bl.spamcop.net
> -r relays.ordb.org
> -r block.dnsbl.sorbs.net
> -r http.dnsbl.sorbs.net
> -r misc.dnsbl.sorbs.net
> -r rhsbl.sorbs.net
> -r smtp.dnsbl.sorbs.net
> -r socks.dnsbl.sorbs.net
> -r spam.dnsbl.sorbs.net
> -r web.dnsbl.sorbs.net
> -r zombie.dnsbl.sorbs.net

>Just eliminate the biggest files in your setup - comment out BLACKLIST
>and BLACKLIST_URL from your config. Those two are huge and taking them
>out of my setup returned my system to normal behavior.


Thanks, I will look at adding to my blacklists control file.  Can you
tell me what the "-r" command means?

Steve Ingraham



--Original Message--

> Steve Ingraham wrote:
>
> I need help with a problem. Our users are seeing some multiple
> duplicate emails coming from the same sender. This is not occurring
> with every email so there does not seem to be any pattern to which
> incoming emails will be duplicated and which ones won't. They are also
> reporting that duplicate emails are sent when they send to an outside
> email. Has anyone experienced this problem before? What could be
> causing this to occur and what can I do to stop this? I am running
> qmailtoaster and spamassassin as an external email gateway. There has
> been nothing changed with qmail but I did update some rules in SA
> using rules_du_jour yesterday. Would these rules updates cause this
> problem? If so, what would have changed?
>
> Jake Vickers wrote:
>
> If your system is low on resources (ie: RAM), then the spamd process
> can take too long, making Toaster think the mail got lost somewhere,
> so it resends it.
> Might want to check and see how much RAM you're using.
>
> I want to thank everyone who posted a reply on my inquiry. I believe
> Jake Vickers was right about the problem. The RAM on the email server
> was bogged down since yesterday when I updated the various .cf files
> using rules_du_jour. I had included just a handful of rules from RDJ
> but it appears that RDJ utilizes much too much of my server resources
> to use it to update my spamassassin rules. It was slowing down the
> server so much that simple functions were not responding. This appears
> to have affected the delivery of emails. In fact I noticed that my
> original message to these mail lists took several hours to post and
> were duplicated also. I resolved the problem by moving the various
> rules .cf files out of the /etc/mail/spamassassin folder and
> restarting spamassassin.
>
> If anyone has a simple way of updating rules for spamassassin I would
> welcome your input. I still need to update the rules as I have been
> getting a great number of emails coming through to users.
> Specifically, we are getting a lot of the pharmaceutical spam and the
> stock spam.
>
> Again, thanks to everyone for the posts.
>
> Steve Ingraham
>


-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] duplicate emails

[Steve Ingraham]

Jdow wrote:
>Steve, it might help if you listed which rule sets. There are some
>which are obscenely large and others that are obsolete. Maybe we
>can prune the list for you a little.

As some have mentioned I may have too many rules.  I would like to know
what is a must have and what I should not use.  Here is a list of what
is currently in the /etc/mail/spamassassin/ folder:

CURRENTLY IN /ETC/MAIL/SPAMASSASSIN
70_sare_adult.cf
70_sare_bayes_poison_nxm.cf
70_sare_evilnum0.cf
occa_phishing.cf
occa_replica.cf
sa-blacklist.cf
sa-blacklist.current.uri.cf
tripwire.cf
chickenpox.cf
init.pre
random.cf
random.current.cf
weeds2.cf
local.cf

The rules below were moved yesterday and placed in a different folder.
Once I moved these and restarted spamassassin by rebooting the server it
was no longer bogging down and duplicating emails.

REMOVED YESTERDAY FROM /ETC/MAIL/SPAMASSASSIN
70_sare_evilnum1.cf
70_sare_evilnum2.cf
70_sare_header0.cf
70_sare_header.cf
70_sare_header_eng.cf
70_sare_html0.cf
70_sare_html1.cf
70_sare_html2.cf
70_sare_html3.cf
70_sare_html4.cf
70_sare_html_eng.cf
70_sare_oem.cf
70_sare_random.cf
70_sare_ratware.cf
70_sare_specfic.cf
70_sare_uri0.cf
70_sare_uri.cf
70_sare_whitlelist.cf
70_sare_whitelist_pre30.cf
72_sare_bml_post23x.cf
99_sare_fraud_post25x.cf
antidrug.cf
blacklist.cf
blacklist-uri.cf
bogus-virus-warnings.cf


Here is the content of my config file for rules_du_jour:

TRUSTED_RULESETS="TRIPWIRE ANTIDRUG SARE_EVILNUMBERS0 BLACKLIST
BLACKLIST_URI RANDOMVAL BOGUSVIRUS SARE_ADULT SARE_FRAUD
SARE_BAYES_POISON_NXM SARE_OEM SARE_RANDOM SARE_HEADER SARE_HEADER0
SARE_HEADER_ENG SARE_HTML0 SARE_HTML1 SARE_HTML2 SARE_HTML3 SARE_HTML4
SARE_HTML_ENG SARE_RATWARE SARE_SPECIFIC SARE_URI SARE_BML_POST25X
SARE_WHITELIST SARE_WHITELIST_PRE30"
SA_DIR="/etc/mail/spamassassin"
MAIL_ADDRESS="[EMAIL PROTECTED]"
SA_RESTART="killall -HUP spamd"

I have quite a few users who get a lot of spam, especially
pharmaceuticals and stocks delivered to their mailboxes.  They are why I
began trying to work on the spamassassin filtering.  An interesting note
I have observed but do not understand why it is happening.  When I
updated the rules on Monday, many users started seeing an increase
number of spam in their mailboxes.  One user who was getting a great
deal of duplicate emails was also seeing a huge increase in the total
numbers of spam emails.  Where she would receive 100 spam emails per day
before the rules_du_jour update, afterwards she was seeing 800 or 900
spam emails per day.  Much of it was porn spam that she was not seeing
before the update to the rules files.

I would appreciate any advice and/or education offered on the spam
filtering.

Thanks,
Steve Ingraham


{^_^}
----- Original Message ----- 
From: "Steve Ingraham" <[EMAIL PROTECTED]>


Steve Ingraham wrote: 

I need help with a problem.  Our users are seeing some multiple
duplicate emails coming from the same sender.  This is not occurring
with every email so there does not seem to be any pattern to which
incoming emails will be duplicated and which ones won't.  They are also
reporting that duplicate emails are sent when they send to an outside
email.  Has anyone experienced this problem before?  What could be
causing this to occur and what can I do to stop this?  I am running
qmailtoaster and spamassassin as an external email gateway.  There has
been nothing changed with qmail but I did update some rules in SA using
rules_du_jour yesterday.  Would these rules updates cause this problem?
If so, what would have changed?

 

Jake Vickers wrote:

If your system is low on resources (ie: RAM), then the spamd process can
take too long, making Toaster think the mail got lost somewhere, so it
resends it.
Might want to check and see how much RAM you're using.

 

I want to thank everyone who posted a reply on my inquiry.  I believe
Jake Vickers was right about the problem.  The RAM on the email server
was bogged down since yesterday when I updated the various .cf files
using rules_du_jour.  I had included just a handful of rules from RDJ
but it appears that RDJ utilizes much too much of my server resources to
use it to update my spamassassin rules.  It was slowing down the server
so much that simple functions were not responding.  This appears to have
affected the delivery of emails.  In fact I noticed that my original
message to these mail lists took several hours to post and were
duplicated also.  I resolved the problem by moving the various rules .cf
files out of the /etc/mail/spamassassin folder and restarting
spamassassin.

 

If anyone has a simple way of updating rules for spamassassin I would
welcome your input.  I still need to update the rules as I have been
getting a great number of emails coming through to users.  Specifically,
we are getting a lot of the pharmaceutical spam and the stock spam.

 

Again, thanks to everyone for the posts.

Steve Ingraham

RE: [qmailtoaster] duplicate emails

[Steve Ingraham]

Steve Ingraham wrote: 

I need help with a
problem.  Our users are seeing some multiple duplicate emails coming from
the same sender.  This is not occurring with every email so there does not
seem to be any pattern to which incoming emails will be duplicated and which
ones won’t.  They are also reporting that duplicate emails are sent
when they send to an outside email.  Has anyone experienced this problem
before?  What could be causing this to occur and what can I do to stop
this?  I am running qmailtoaster and spamassassin as an external email
gateway.  There has been nothing changed with qmail but I did update some
rules in SA using rules_du_jour yesterday.  Would these rules updates
cause this problem?  If so, what would have changed?

 

Jake Vickers wrote:

If your system is
low on resources (ie: RAM), then the spamd process can take too long, making
Toaster think the mail got lost somewhere, so it resends it.
Might want to check and see how much RAM you're using.

 

I want to thank everyone who posted a
reply on my inquiry.  I believe Jake Vickers was right about the
problem.  The RAM on the email server was bogged down since yesterday when
I updated the various .cf files using rules_du_jour.  I had included just
a handful of rules from RDJ but it appears that RDJ utilizes much too much of
my server resources to use it to update my spamassassin rules.  It was
slowing down the server so much that simple functions were not
responding.  This appears to have affected the delivery of emails. 
In fact I noticed that my original message to these mail lists took several
hours to post and were duplicated also.  I resolved the problem by moving
the various rules .cf files out of the /etc/mail/spamassassin folder and
restarting spamassassin.

 

If anyone has a simple way of updating
rules for spamassassin I would welcome your input.  I still need to update
the rules as I have been getting a great number of emails coming through to
users.  Specifically, we are getting a lot of the pharmaceutical spam and
the stock spam.

 

Again, thanks to everyone for the posts.

Steve Ingraham

RE: [qmailtoaster] can not recieve mail

[Steve Ingraham]

Title: Message











Chris Marcellin
wrote:

so, the correct serial
would be:
2006042731
what is the 042731 then, month, day, then that leaves 31
so, 20060925(what for the last 2 digits?)



04 is the month, 27 is the day, 31 is the
next incremental number of the update (if the last one was 31 the next update
would be #32).

 

Steve Ingraham





 





- Original
Message - 



From: Chris Marcellin 





To: qmailtoaster-list@qmailtoaster.com






Sent: Monday, September
 25, 2006 8:41 PM





Subject: Re:
[qmailtoaster] can not recieve mail







 



I hear you. I already
went to my registrar's DNS configuration, and updated it. The last time i
changed the serial was yesterday. what do you mean last updated in 2004? how
can you determine by the serial the last update, this is new to me, please give
me more info.
Thans George

George Sweetnam wrote: 



Make sure to login
to your registrars account and modify the name servers created for your domian
(for directnic I choose the "modify name servers")  This is not
to be confused with modifying dns servers listed for your domain.  If it's
not changed there nothing will update properly.  Also, don't be fooled
into thinking changing ip's will work.  It's named based...the ip's will
follow.  





 





Actually, upon
reading your zone file... try updating the serial... it was last updated in
2004 according to it's value.





 





George





 





 





- Original Message
- 







From: Chris Marcellin 





To: qmailtoaster-list@qmailtoaster.com






Sent: Sunday, September
 24, 2006 4:42 PM





Subject: Re:
[qmailtoaster] can not recieve mail







 



oh, you said parent
servers. sorry, i thought you meant my "DNS bind" servers. yeah, it
does look like it is stemming from the parent servers, but, unfortunately i
have no control over that, and like i said it's had more than enough time to
propagate. is there a way to fix this?

Chris Marcellin wrote: 

Jon;

I know, that's the test i did to confirm my problems. The records at my parent
servers are fine.
here's a copy of my bind zone file for canus.org:

$TTL    86400
$ORIGIN canus.org.
@  
IN  SOA ns1.canus.org.
postmaster.canus.org. (
   
2004042731  ; serial
   
21600   ; refresh
   
3600    ; retry
   
604800  ; expires
   
86400 ) ; minimum


   
IN  NS 
ns1.canus.org.

   
IN  NS 
ns.teksavvy.com.

   
IN  NS 
mail.canus.org.

   
IN  MX 
10  webmail.canus.org.

   
IN  A  
206.248.143.18


ns1
IN  A  
206.248.143.18
mail   
IN  A  
206.248.143.19
www
IN  A  
206.248.143.18
pop3   
IN  A  
206.248.143.19
smtp   
IN  A   206.248.143.19
webmail
IN  A  
206.248.143.19

_domainkey.canus.org IN TXT "t=y; o=-; [EMAIL PROTECTED]"

private._domainkey 
IN  TXT "k=rsa;
p=MEwwDQYJKoZIhvcNAQEBBQADOwAwOA
IxAMAUw1o85CevJFR9sE6a271S5LNbKCAMnVCFQvnKvdZHhwxGd+nvwgtTSptGEylx1QIDAQAB"

canus.org. 
IN  TXT "v=spf1
ip4:206.248.143.16/29 ip4:206.24
8.139.43 a mx ptr ~all"

webmail.canus.org. 
IN  TXT "v=spf1 a -all"



Jon Darrington wrote: 



Chris,





 





Have a quick look at:





 





http://www.dnsreport.com/tools/dnsreport.ch?domain=canus.org





 





it suggests that the
problems stem from differences with your records at your parent servers.





 





Hope this helps,





 





Jon





-Original Message-
From: Chris Marcellin [mailto:[EMAIL PROTECTED]] 
Sent: 24 September
 2006 21:21
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] can
not recieve mail

to make matters even more
interesting. i have a dns problem. i can't figure it out, as well, and my ISP's
DNS administrator can't figure it out too. a while back, my dns servers were,
ns.canus.org and ns1.canus.org, ns1.teksavvy.com. however, i changed that to
ns1.canus.org, and mail.canus.org. i did all the configurations correctly, and
it's been about 4 weeks now that i have made the changes,  so, it has had
plenty of time for the root servers to propagate. but, the root servers still
have ns.canus.org in their database. and because of that, my dns isn't working
perfectly. anyone have any ideas what the problem or solution can be.



Jon Darrington wrote: 



Hi Chris,





 





I could not get an smtp
reply or any other typical response (http, https, icmp - ping), so thought
there was no server there - hence the question as to had your ip changed.





 





Glad it's all sorted now,





 





Jon





-O

[qmailtoaster] duplicate emails

[Steve Ingraham]

I need help with a problem.  Our users are seeing some multiple
duplicate emails coming from the same sender.  This is not occurring with
every email so there does not seem to be any pattern to which incoming emails
will be duplicated and which ones won’t.  They are also reporting
that duplicate emails are sent when they send to an outside email.  Has
anyone experienced this problem before?  What could be causing this to
occur and what can I do to stop this?  I am running qmailtoaster and
spamassassin as an external email gateway.  There has been nothing changed
with qmail but I did update some rules in SA using rules_du_jour
yesterday.  Would these rules updates cause this problem?  If so,
what would have changed?

 

Thanks for any help that can be provided.

Steve
 Ingraham

Director of Information Services

Oklahoma Court of Criminal Appeals

[EMAIL PROTECTED]

405 522-5343

 

[qmailtoaster] duplicate emails

[Steve Ingraham]

I need help with a problem.  Our users are seeing some
multiple duplicate emails coming from the same sender.  This is not
occurring with every email so there does not seem to be any pattern to which
incoming emails will be duplicated and which ones won’t.  They are
also reporting that duplicate emails are sent when they send to an outside
email.  Has anyone experienced this problem before?  What could be
causing this to occur and what can I do to stop this?  I am running
qmailtoaster and spamassassin as an external email gateway.  There has
been nothing changed with qmail but I did update some rules in SA using
rules_du_jour yesterday.  Would these rules updates cause this
problem?  If so, what would have changed?

 

Thanks for any help that can be provided.

Steve
 Ingraham

Director of Information Services

Oklahoma Court of Criminal Appeals

[EMAIL PROTECTED]

405 522-5343

 

RE: [qmailtoaster] messages stuck in the queue

[Steve Ingraham]

Steve Ingraham
wrote: 

I am seeing a large
number of messages stuck in the queue everyday.  Each morning I am seeing
over 500 messages in the queue.  With very few exceptions they all are
spam messages that the postmaster account has stopped delivery on because the
spam message is trying to deliver to an account that does not exist in our
domain.  What is directing mail to go to the queue?  Where are the
settings for this?  What can I do to stop these messages from going to the
queue?  I am currently going into the qmail queue and deleting all the
messages that are spam and leaving any legitimate messages in the queue which
then get delivered once the spam messages are deleted.  Is there something
else I should be doing to keep this spam from collecting in the queue?

 

 

Jake Vickers wrote:

There's not a whole
lot you can do. What the spammers are doing is sending an email to your domain
(bad address), with a different return address (usually also bad), so your
machine is trying to bounce the message back to the sender, which as I said is
also invalid. I set my queuelifetime to something reasonable like 2 or 3 hours,
which helps clean them out of the queue faster. It's also a good idea for
businesses, since if they send a message and there is an error they get a
message back in 2-3 hours, instead of 5 days like the default. Gives them a
chance to see their error, and send the message again after correcting.
Other than that, some good BLs is about the best you can really do.

 

Steve Ingraham
wrote: 

Thank you Jake for
the reply, so decreasing the time a message sits in the queue is about the
extent of what I can do?  Can you tell me where I can set the
queuelifetime?  Also, what do you mean by “BLs”?  Are you
referring to “blacklists”?

 Jake Vickers wrote:

The queue lifetime
controls how long a message sits in the queue before it gets sent to /dev/null.
It's controlled by the /var/qmail/control/queuelifetime file, and needs to have
a value in it of how long you'd like the threshold to be. This number is in
seconds. I'm using 10800 for a value on one of my machines (I happened to be
logged into it while typing this).
And yes, I meant blacklists. While not extremely effective, they will stop SOME
spammer's bad IP addresses from connecting.
It's a little bit of work, but you may check your logs to see what IP addresses
the messages are coming from. I've found that whenever I got a
"storm" like this, 80%-90% would be from a single IP trying to relay
through me and I just add an entry in my iptables to deny connections.

 

Thanks again, this information has been
very helpful,

Steve Ingraham

 

RE: [qmailtoaster] messages stuck in the queue

[Steve Ingraham]

Steve Ingraham wrote: 

I am seeing a large
number of messages stuck in the queue everyday.  Each morning I am seeing
over 500 messages in the queue.  With very few exceptions they all are
spam messages that the postmaster account has stopped delivery on because the
spam message is trying to deliver to an account that does not exist in our
domain.  What is directing mail to go to the queue?  Where are the
settings for this?  What can I do to stop these messages from going to the
queue?  I am currently going into the qmail queue and deleting all the
messages that are spam and leaving any legitimate messages in the queue which
then get delivered once the spam messages are deleted.  Is there something
else I should be doing to keep this spam from collecting in the queue?

 

 

Jake Vickers wrote:

There's not a whole
lot you can do. What the spammers are doing is sending an email to your domain
(bad address), with a different return address (usually also bad), so your
machine is trying to bounce the message back to the sender, which as I said is
also invalid. I set my queuelifetime to something reasonable like 2 or 3 hours,
which helps clean them out of the queue faster. It's also a good idea for
businesses, since if they send a message and there is an error they get a
message back in 2-3 hours, instead of 5 days like the default. Gives them a
chance to see their error, and send the message again after correcting.
Other than that, some good BLs is about the best you can really do.

 

Thank you Jake for the reply, so
decreasing the time a message sits in the queue is about the extent of what I
can do?  Can you tell me where I can set the queuelifetime?  Also, what
do you mean by “BLs”?  Are you referring to “blacklists”?

 

Steve Ingraham

[qmailtoaster] messages stuck in the queue

[Steve Ingraham]

I am seeing a large number of messages stuck in the queue
everyday.  Each morning I am seeing over 500 messages in the queue.  With
very few exceptions they all are spam messages that the postmaster account has
stopped delivery on because the spam message is trying to deliver to an account
that does not exist in our domain.  What is directing mail to go to the
queue?  Where are the settings for this?  What can I do to stop these
messages from going to the queue?  I am currently going into the qmail
queue and deleting all the messages that are spam and leaving any legitimate
messages in the queue which then get delivered once the spam messages are
deleted.  Is there something else I should be doing to keep this spam from
collecting in the queue?

 

Thanks in advance for any assistance,

Steve Ingraham

RE: [qmailtoaster] information on qmail delivery failure

[Steve Ingraham]

>What has been changed just before
this started if it was working previously?

 

>>Steve Ingraham wrote:

>>That is an interesting
question.  There was nothing changed.  I have an external DNS server
(the same machine that qmail resides on) and an internal DNS server (a >>separate
Windows Advanced Server 2000 machine).  The internal DNS server has been
causing various failures lately.  I am leaning toward the notion that it
may be >>causing this problem.  Any thoughts on that?

 

>Jake Vickers wrote:

>I'm not 100% what your setup is, but
normally wouldn't you want the domain names in your rcpthosts file, not locals?
Are you using a SMTP-route to send it off to the >Exchange machine, or does
each user have an account on the Toaster as well?

 

Yes, I think that is why the failure
notice changed and why I removed the okcca.net and occa.state.ok.us
from the locals file.  Each user does not have an account on
toaster.  It appears that qmail is relying on DNS to tell it where to send
mail.

 

Steve Ingraham

RE: [qmailtoaster] information on qmail delivery failure

[Steve Ingraham]

Steve Ingraham
wrote: 

Can someone provide me with some information on a delivery failure issue that started Monday?  Our system is setup so a Linux machine running Redhat AS 3 update 8 serves as an external DNS and external email gateway.  It receives all incoming emails using qmail toaster 1.2 smtp server.  Qmail then delivers the emails to a separate server running Windows Exchange 2000 that houses the mailboxes. On Monday sometime around noon my qmail stopped delivering mail to mailboxes on the Exchange 2000 server.  Below is the rejection notice that was being returned to senders: Hi.  This is the qmail-send program at dellapp02.occa.state.ok.us.I'm afraid I wasn't able to deliver your message to the following addresses.This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>:Sorry. Although I'm listed as a best-preference MX or A for that host,it isn't in my control/locals file, so I don't treat it as local. (#5.4.6)

 

Jake Vickers wrote:

What has been
changed just before this started if it was working previously?

 

That is an interesting question. 
There was nothing changed.  I have an external DNS server (the same
machine that qmail resides on) and an internal DNS server (a separate Windows
Advanced Server 2000 machine).  The internal DNS server has been causing
various failures lately.  I am leaning toward the notion that it may be
causing this problem.  Any thoughts on that?

 

Steve Ingraham

[qmailtoaster] information on qmail delivery failure

[Steve Ingraham]

Can someone provide me with some information on a delivery failure issue that started Monday?  Our system is setup so a Linux machine running Redhat AS 3 update 8 serves as an external DNS and external email gateway.  It receives all incoming emails using qmail toaster 1.2 smtp server.  Qmail then delivers the emails to a separate server running Windows Exchange 2000 that houses the mailboxes. On Monday sometime around noon my qmail stopped delivering mail to mailboxes on the Exchange 2000 server.  Below is the rejection notice that was being returned to senders: Hi.  This is the qmail-send program at dellapp02.occa.state.ok.us.I'm afraid I wasn't able to deliver your message to the following addresses.This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>:Sorry. Although I'm listed as a best-preference MX or A for that host,it isn't in my control/locals file, so I don't treat it as local. (#5.4.6)

 

After discussion with some local Linux
administrators they suggested that I insert the domain names okcca.net
and occa.state.ok.us in the /var/qmail/control/locals file which already
had localhost, localhost and dellapp02.occa.state.ok.us in
the file.  Once I did that the rejections continued but returned the
following message:

 

Hi. This is the qmail-send program at dellapp02.occa.state.ok.us.I'm afraid I wasn't able to deliver your message to the following addresses.This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>:Sorry, no mailbox here by that name. (#5.1.1)

 

Last night after spending all day trying to troubleshoot with no luck I removed the okcca.net and occa.state.ok.us domain names from the /var/qmail/control/locals file.  I rebooted the server and restarted qmail again; I had previously rebooted two other times with no results.  This time qmail started delivering emails to the mailboxes.  I do not understand what would have stopped the deliver in the first place nor do I know why the reboot resolved the problem this time when it had not in previous attempts.  Can someone give me some insight into what may have originally caused the delivery failures and why the reboot cleared up the problem?

 

Thanks in advance for your help.

 

 

Steve
 Ingraham

Director of Information Services

Oklahoma Court of Criminal Appeals

[EMAIL PROTECTED]

405 522-5343

 

[qmailtoaster] information on qmail delivery failure

[Steve Ingraham]

Can someone provide me with some information on a delivery failure issue that started Monday?  Our system is setup so a Linux machine running Redhat AS 3 update 8 serves as an external DNS and external email gateway.  It receives all incoming emails using qmail toaster 1.2 smtp server.  Qmail then delivers the emails to a separate server running Windows Exchange 2000 that houses the mailboxes. On Monday sometime around noon my qmail stopped delivering mail to mailboxes on the Exchange 2000 server.  Below is the rejection notice that was being returned to senders: Hi.  This is the qmail-send program at dellapp02.occa.state.ok.us.I'm afraid I wasn't able to deliver your message to the following addresses.This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>:Sorry. Although I'm listed as a best-preference MX or A for that host,it isn't in my control/locals file, so I don't treat it as local. (#5.4.6)

 

After discussion with some local Linux administrators
they suggested that I insert the domain names okcca.net and occa.state.ok.us
in the /var/qmail/control/locals
file which already had localhost, localhost and dellapp02.occa.state.ok.us
in the file.  Once I did that the rejections continued but returned the
following message:

 

Hi. This is the qmail-send program at dellapp02.occa.state.ok.us.I'm afraid I wasn't able to deliver your message to the following addresses.This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>:Sorry, no mailbox here by that name. (#5.1.1)

 

Last night after spending all day trying to troubleshoot with no luck I removed the okcca.net and occa.state.ok.us domain names from the /var/qmail/control/locals file.  I rebooted the server and restarted qmail again; I had previously rebooted two other times with no results.  This time qmail started delivering emails to the mailboxes.  I do not understand what would have stopped the deliver in the first place nor do I know why the reboot resolved the problem this time when it had not in previous attempts.  Can someone give me some insight into what may have originally caused the delivery failures and why the reboot cleared up the problem?

 

Thanks in advance for your help.

Steve
 Ingraham

Director of Information Services

Oklahoma Court of Criminal Appeals

[EMAIL PROTECTED]

405 522-5343