Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Eric \"Shubes\"]

Alexey Loukianov wrote:
> Greetings, Eric.
> 
> On 19 ??? 2006 ?., 22:59:01 you wrote:
> 
>> Dan Herbon wrote:
>>> So it is safe to remove all signs of DK in the tcp.smtp file?
>> Yes. You might want to keep DKSIGN for signing outgoing email if you've set
>> up DK properly (generated key key and modified DNS appropriately).
> DKSIGN wouldn't work if you disabled DK using the instructions I
> originally posted in this mailing-list. Signing is done in qmail-dk,
> so you will need to have symlink qmail-queue to it from for signing to work.
> 
> ATM qmail-dk bundled with QT causes problems with message delivery
> for some users, it's better to disable DK support and wait for fixed
> qmail-dk to appear in newer QT RPM releases (or try to use the patch I
> posted earlier to this list to fix qmail-dk). It's safe to keep
> DK-related stuff in tcprules file, as it'll free you from fetching
> docs later and re-creating this values back by hand.
> 
Thanks for clearing this up, Alexey. I hope that EE can get your patches
into a devel release soon.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re[2]: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Alexey Loukianov]

Greetings, Dan.

On 19 декабря 2006 г., 19:16:02 you wrote:

> I've never used a .patch file before. Can you give me some info on the best
> way to use the patch file?

Well, it's not very easy but we can give it a try.
First of all, I attach two files to this message. One is the patch for
qmail-smtpd to allow verbose logging, second it a separate build tree
for new qmail-dk. Before we begin I need to know, what OS do you have
on your server? Most interest for me is the location of your RPMBUILD
folder. In RedHat derivates it is generally located in
/usr/src/redhat/. Easiest vay to find it out is to use:

# locate /SPECS
/home2/allukjanov/RPMBUILD/SPECS
/usr/src/redhat/SPECS

That is output for my system, I've got my personal separate build tree
for RPMS is my homedir, as well as system-wide default CentOS4
RPMBUILD tree.

Now, back to file attaches. Let us speak about smtpd patch after you
would answer to my question above. As for new qmail-dk, you will have
to build and install it as follows:
1.Store qmail-dk-0.6.beta.1.tar.gz somewhere on the system and chdir to
that directory, then do:
# mv qmail-dk-0.6.beta.1.tar.gz /the/place/you/plan/to/store/build/tree
# cd /the/place/you/plan/to/store/build/tree
# tar -zxvf qmail-dk-0.6.beta.1.tar.gz
# cd qmail-dk
# make

2. Now you will either have a successfully compiled new qmail-dk, or
ended up with error messages - in that case mail them to me, I'll try
to help you fix them.

3. Do the following:
# cp qmail-dk qmail-dk-new
# chmod 4711 qmail-dk-new
# chown qmailq.qmail qmail-dk-new
# mv qmail-dk-new /var/qmail/bin/
# cd /var/qmail/bin
# rm -f ./qmail-queue; ln -s /var/qmail/bin/qmail-dk-new qmail-queue

You're done, there's no need in restarting qmail. For qmail-dk-new to
work you will have to put aprop. environment variables back to
tcp.smtp file.

PS. I CC this message to mailing list as this instructions might be useful for 
other
users.

-- 
Best regards,
 Alexey Loukianov  mailto:[EMAIL PROTECTED]
 System Engineer,
 IT Department,
 Lavtech Corp

qmail-dk-0.6.beta.1.tar.gz
Description: GNU Zip compressed data


qmail-smtpd-spf-qq-reject-logging.patch.gz
Description: GNU Zip compressed data
-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re[2]: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Alexey Loukianov]

Greetings, Eric.

On 19 ??? 2006 ?., 22:59:01 you wrote:

> Dan Herbon wrote:
>> So it is safe to remove all signs of DK in the tcp.smtp file?
> Yes. You might want to keep DKSIGN for signing outgoing email if you've set
> up DK properly (generated key key and modified DNS appropriately).
DKSIGN wouldn't work if you disabled DK using the instructions I
originally posted in this mailing-list. Signing is done in qmail-dk,
so you will need to have symlink qmail-queue to it from for signing to work.

ATM qmail-dk bundled with QT causes problems with message delivery
for some users, it's better to disable DK support and wait for fixed
qmail-dk to appear in newer QT RPM releases (or try to use the patch I
posted earlier to this list to fix qmail-dk). It's safe to keep
DK-related stuff in tcprules file, as it'll free you from fetching
docs later and re-creating this values back by hand.

-- 
Best regards,
 Alexey Loukianov  mailto:[EMAIL PROTECTED]
 System Engineer,
 IT Department,
 Lavtech Corp


-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Dan Herbon]

The permissions on qmail-queue.orig were set to 711 somehow! Once I reset
them to 4711 mail started flowing.

-Original Message-
From: Eric "Shubes" [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 19, 2006 3:20 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] "554 mail server permanently rejected message
(#5.3.0)" errors.

Did you double-check your symlink? It'll let you create the link even if
it's 'broken' (points to something non-existent). I fat fingered it once,
specifying qmail-queue-orig instead of qmail-queue.orig.

Dan Herbon wrote:
> Well that broke my email delivery.
> 
> When I did:
> 
> Also, be sure to change the symlink for qmail-queue:
> # cd /var/qmail/bin
> # rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue
> 
> And then removed "DKQUEUE="/var/qmail/bin/qmail-queue.orig" from the
> tcp.smtp file. Leaving the last line in the tcp.smtp line stating:
> 
>
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"
> 
> Restarted and all mail delivery stopped.
> 
> I had to re-symlink qmail-queue to /var/qmail/bin/qmail-dk, read the
DKQUEUE
> section to the tcp.smtp file and restart qmail. Once I did that email
> started to deliver again.
> 
> My tcp.smtp file now shows:
> 
>
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
>
RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/q
> mail-queue.orig"
> 
> Mail is delivering fine now. Any ideas?
> 
> 
> 
> 
> 
> -Original Message-
> From: Eric "Shubes" [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, December 19, 2006 2:59 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] "554 mail server permanently rejected message
> (#5.3.0)" errors.
> 
> Dan Herbon wrote:
>> So it is safe to remove all signs of DK in the tcp.smtp file?
> 
> Yes. You might want to keep DKSIGN for signing outgoing email if you've
set
> up DK properly (generated key key and modified DNS appropriately).
> 
>> Is this then
>> the correct format that will leave it functioning:
>>
>>
>
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
>> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"
>>
> Yes, except for the line break. Here's mine:
>
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
>
RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/contro
> l/domainkeys/%/private"
> 
> Also, be sure to change the symlink for qmail-queue:
> # cd /var/qmail/bin
> # rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue
> 


-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Eric \"Shubes\"]

Did you double-check your symlink? It'll let you create the link even if
it's 'broken' (points to something non-existent). I fat fingered it once,
specifying qmail-queue-orig instead of qmail-queue.orig.

Dan Herbon wrote:
> Well that broke my email delivery.
> 
> When I did:
> 
> Also, be sure to change the symlink for qmail-queue:
> # cd /var/qmail/bin
> # rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue
> 
> And then removed "DKQUEUE="/var/qmail/bin/qmail-queue.orig" from the
> tcp.smtp file. Leaving the last line in the tcp.smtp line stating:
> 
> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"
> 
> Restarted and all mail delivery stopped.
> 
> I had to re-symlink qmail-queue to /var/qmail/bin/qmail-dk, read the DKQUEUE
> section to the tcp.smtp file and restart qmail. Once I did that email
> started to deliver again.
> 
> My tcp.smtp file now shows:
> 
> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/q
> mail-queue.orig"
> 
> Mail is delivering fine now. Any ideas?
> 
> 
> 
> 
> 
> -----Original Message-
> From: Eric "Shubes" [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, December 19, 2006 2:59 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] "554 mail server permanently rejected message
> (#5.3.0)" errors.
> 
> Dan Herbon wrote:
>> So it is safe to remove all signs of DK in the tcp.smtp file?
> 
> Yes. You might want to keep DKSIGN for signing outgoing email if you've set
> up DK properly (generated key key and modified DNS appropriately).
> 
>> Is this then
>> the correct format that will leave it functioning:
>>
>>
> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
>> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"
>>
> Yes, except for the line break. Here's mine:
> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/contro
> l/domainkeys/%/private"
> 
> Also, be sure to change the symlink for qmail-queue:
> # cd /var/qmail/bin
> # rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue
> 


-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Dan Herbon]

Well that broke my email delivery.

When I did:

Also, be sure to change the symlink for qmail-queue:
# cd /var/qmail/bin
# rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue

And then removed "DKQUEUE="/var/qmail/bin/qmail-queue.orig" from the
tcp.smtp file. Leaving the last line in the tcp.smtp line stating:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"

Restarted and all mail delivery stopped.

I had to re-symlink qmail-queue to /var/qmail/bin/qmail-dk, read the DKQUEUE
section to the tcp.smtp file and restart qmail. Once I did that email
started to deliver again.

My tcp.smtp file now shows:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/q
mail-queue.orig"

Mail is delivering fine now. Any ideas?





-Original Message-
From: Eric "Shubes" [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 19, 2006 2:59 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] "554 mail server permanently rejected message
(#5.3.0)" errors.

Dan Herbon wrote:
> So it is safe to remove all signs of DK in the tcp.smtp file?

Yes. You might want to keep DKSIGN for signing outgoing email if you've set
up DK properly (generated key key and modified DNS appropriately).

> Is this then
> the correct format that will leave it functioning:
> 
>
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"
> 
Yes, except for the line break. Here's mine:
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/contro
l/domainkeys/%/private"

Also, be sure to change the symlink for qmail-queue:
# cd /var/qmail/bin
# rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Eric \"Shubes\"]

Dan Herbon wrote:
> So it is safe to remove all signs of DK in the tcp.smtp file?

Yes. You might want to keep DKSIGN for signing outgoing email if you've set
up DK properly (generated key key and modified DNS appropriately).

> Is this then
> the correct format that will leave it functioning:
> 
> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
> RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"
> 
Yes, except for the line break. Here's mine:
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/control/domainkeys/%/private"

Also, be sure to change the symlink for qmail-queue:
# cd /var/qmail/bin
# rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Will McDonald]

On 19/12/06, Eric Shubes <[EMAIL PROTECTED]> wrote:

Will McDonald wrote:
> On 19/12/06, Eric Shubes <[EMAIL PROTECTED]> wrote:
>> Will McDonald wrote:
>> > On 19/12/06, Alexey Loukianov <[EMAIL PROTECTED]> wrote:
>> >> Greetings, Will.
>> >> > In tcp.rules I have...
>> >> > [EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
>> >> > 127.:allow,RELAYCLIENT=""
>> >>
>> >> > I've added a virtual domain, 'testdom.com' and a user in that
>> domain.
>> >>
>> >> Looks like SPF related trouble. Try to modify spfbehavior to 0. To get
>> >> verbose logging you can use my patch. It's available here:
>> >>
>> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg09582.html
>>
>> >>
>> >
>> > Thanks Alexey, I'll have a look at that tomorrow.
>> >
>> > So far I've tried '1' then '0' in /var/qmail/control/spfbehviour as
>> > well as appending SPFBEHVIOUR="1" (and then "0") in the tpc.smtp and
>> > qmailctl restart/cdb-ed with no success.
>> >
>> > Will.
>> >
>>
>> I hope that's a typo. It s/b SPFBEHAVIOR.
>
> I think I cut and pasted from another thread in the archive but I'd
> deleted it since then without checking the config back in to source
> control. I've just double checked with your spelling to be on the safe
> side :)
>
> Still no joy though. :( This is the correct syntax, yes?
>
> [EMAIL PROTECTED] tcprules.d]# cat tcp.smtp
> 127.:allow,RELAYCLIENT="",SPFBEHAVIOR="0"
>
> That still gets me "554 mail server permanently rejected message (#5.3.0)".
>
> And again, in the log...
>
> @400045882405188c531c CHKUSER accepted rcpt: from
> <[EMAIL PROTECTED]::> re
> mote  rcpt <[EMAIL PROTECTED]> : found
> existing reci
> pient
>
> I'll have a play with Alexey's patch tomorrow to see if that clarifies
> what's going on any.
>
> Cheers.

If that doesn't fix it, it might be the DomainKeys bug. Have you disabled DK
according to Alexey's instructions?
# cd /var/qmail/bin
# rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue


Bingo! That did the trick. I didn't realise reverting to a non
DomainKeys-enabled Qmail was so simple :)

I didn't spot any instructions initially for disabling DK, are those
in the tarball referenced in the thread Alexey linked to? Or were they
in that actual thread? I hadn't gotten round to reading it end-to-end.

Either way, thank you all for your help and time, and the for hard
work put in to developing and maintaining all the SRPMs and
documentation. It's much appreciated.

Will.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Dan Herbon]

So it is safe to remove all signs of DK in the tcp.smtp file? Is this then
the correct format that will leave it functioning:

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG
RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan"



-Original Message-
From: Eric "Shubes" [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 19, 2006 12:56 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] "554 mail server permanently rejected message
(#5.3.0)" errors.

Will McDonald wrote:
> On 19/12/06, Eric Shubes <[EMAIL PROTECTED]> wrote:
>> Will McDonald wrote:
>> > On 19/12/06, Alexey Loukianov <[EMAIL PROTECTED]> wrote:
>> >> Greetings, Will.
>> >> > In tcp.rules I have...
>> >> > [EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
>> >> > 127.:allow,RELAYCLIENT=""
>> >>
>> >> > I've added a virtual domain, 'testdom.com' and a user in that
>> domain.
>> >>
>> >> Looks like SPF related trouble. Try to modify spfbehavior to 0. To get
>> >> verbose logging you can use my patch. It's available here:
>> >>
>>
http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg09582.html
>>
>> >>
>> >
>> > Thanks Alexey, I'll have a look at that tomorrow.
>> >
>> > So far I've tried '1' then '0' in /var/qmail/control/spfbehviour as
>> > well as appending SPFBEHVIOUR="1" (and then "0") in the tpc.smtp and
>> > qmailctl restart/cdb-ed with no success.
>> >
>> > Will.
>> >
>>
>> I hope that's a typo. It s/b SPFBEHAVIOR.
> 
> I think I cut and pasted from another thread in the archive but I'd
> deleted it since then without checking the config back in to source
> control. I've just double checked with your spelling to be on the safe
> side :)
> 
> Still no joy though. :( This is the correct syntax, yes?
> 
> [EMAIL PROTECTED] tcprules.d]# cat tcp.smtp
> 127.:allow,RELAYCLIENT="",SPFBEHAVIOR="0"
> 
> That still gets me "554 mail server permanently rejected message
(#5.3.0)".
> 
> And again, in the log...
> 
> @400045882405188c531c CHKUSER accepted rcpt: from
> <[EMAIL PROTECTED]::> re
> mote  rcpt <[EMAIL PROTECTED]> : found
> existing reci
> pient
> 
> I'll have a play with Alexey's patch tomorrow to see if that clarifies
> what's going on any.
> 
> Cheers.

If that doesn't fix it, it might be the DomainKeys bug. Have you disabled DK
according to Alexey's instructions?
# cd /var/qmail/bin
# rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue


-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
 QmailToaster hosted by: VR Hosted <http://www.vr.org>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Eric \"Shubes\"]

Will McDonald wrote:
> On 19/12/06, Eric Shubes <[EMAIL PROTECTED]> wrote:
>> Will McDonald wrote:
>> > On 19/12/06, Alexey Loukianov <[EMAIL PROTECTED]> wrote:
>> >> Greetings, Will.
>> >> > In tcp.rules I have...
>> >> > [EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
>> >> > 127.:allow,RELAYCLIENT=""
>> >>
>> >> > I've added a virtual domain, 'testdom.com' and a user in that
>> domain.
>> >>
>> >> Looks like SPF related trouble. Try to modify spfbehavior to 0. To get
>> >> verbose logging you can use my patch. It's available here:
>> >>
>> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg09582.html
>>
>> >>
>> >
>> > Thanks Alexey, I'll have a look at that tomorrow.
>> >
>> > So far I've tried '1' then '0' in /var/qmail/control/spfbehviour as
>> > well as appending SPFBEHVIOUR="1" (and then "0") in the tpc.smtp and
>> > qmailctl restart/cdb-ed with no success.
>> >
>> > Will.
>> >
>>
>> I hope that's a typo. It s/b SPFBEHAVIOR.
> 
> I think I cut and pasted from another thread in the archive but I'd
> deleted it since then without checking the config back in to source
> control. I've just double checked with your spelling to be on the safe
> side :)
> 
> Still no joy though. :( This is the correct syntax, yes?
> 
> [EMAIL PROTECTED] tcprules.d]# cat tcp.smtp
> 127.:allow,RELAYCLIENT="",SPFBEHAVIOR="0"
> 
> That still gets me "554 mail server permanently rejected message (#5.3.0)".
> 
> And again, in the log...
> 
> @400045882405188c531c CHKUSER accepted rcpt: from
> <[EMAIL PROTECTED]::> re
> mote  rcpt <[EMAIL PROTECTED]> : found
> existing reci
> pient
> 
> I'll have a play with Alexey's patch tomorrow to see if that clarifies
> what's going on any.
> 
> Cheers.

If that doesn't fix it, it might be the DomainKeys bug. Have you disabled DK
according to Alexey's instructions?
# cd /var/qmail/bin
# rm -f qmail-queue; ln -s qmail-queue.orig qmail-queue


-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Will McDonald]

On 19/12/06, Eric Shubes <[EMAIL PROTECTED]> wrote:

Will McDonald wrote:
> On 19/12/06, Alexey Loukianov <[EMAIL PROTECTED]> wrote:
>> Greetings, Will.
>> > In tcp.rules I have...
>> > [EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
>> > 127.:allow,RELAYCLIENT=""
>>
>> > I've added a virtual domain, 'testdom.com' and a user in that domain.
>>
>> Looks like SPF related trouble. Try to modify spfbehavior to 0. To get
>> verbose logging you can use my patch. It's available here:
>> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg09582.html
>>
>
> Thanks Alexey, I'll have a look at that tomorrow.
>
> So far I've tried '1' then '0' in /var/qmail/control/spfbehviour as
> well as appending SPFBEHVIOUR="1" (and then "0") in the tpc.smtp and
> qmailctl restart/cdb-ed with no success.
>
> Will.
>

I hope that's a typo. It s/b SPFBEHAVIOR.


I think I cut and pasted from another thread in the archive but I'd
deleted it since then without checking the config back in to source
control. I've just double checked with your spelling to be on the safe
side :)

Still no joy though. :( This is the correct syntax, yes?

[EMAIL PROTECTED] tcprules.d]# cat tcp.smtp
127.:allow,RELAYCLIENT="",SPFBEHAVIOR="0"

That still gets me "554 mail server permanently rejected message (#5.3.0)".

And again, in the log...

@400045882405188c531c CHKUSER accepted rcpt: from <[EMAIL PROTECTED]::> re
mote  rcpt <[EMAIL PROTECTED]> : found existing 
reci
pient

I'll have a play with Alexey's patch tomorrow to see if that clarifies
what's going on any.

Cheers.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Eric \"Shubes\"]

Will McDonald wrote:
> On 19/12/06, Alexey Loukianov <[EMAIL PROTECTED]> wrote:
>> Greetings, Will.
>> > In tcp.rules I have...
>> > [EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
>> > 127.:allow,RELAYCLIENT=""
>>
>> > I've added a virtual domain, 'testdom.com' and a user in that domain.
>>
>> Looks like SPF related trouble. Try to modify spfbehavior to 0. To get
>> verbose logging you can use my patch. It's available here:
>> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg09582.html
>>
> 
> Thanks Alexey, I'll have a look at that tomorrow.
> 
> So far I've tried '1' then '0' in /var/qmail/control/spfbehviour as
> well as appending SPFBEHVIOUR="1" (and then "0") in the tpc.smtp and
> qmailctl restart/cdb-ed with no success.
> 
> Will.
> 

I hope that's a typo. It s/b SPFBEHAVIOR.

-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Will McDonald]

On 19/12/06, Alexey Loukianov <[EMAIL PROTECTED]> wrote:

Greetings, Will.
> In tcp.rules I have...
> [EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
> 127.:allow,RELAYCLIENT=""

> I've added a virtual domain, 'testdom.com' and a user in that domain.

Looks like SPF related trouble. Try to modify spfbehavior to 0. To get
verbose logging you can use my patch. It's available here:
http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg09582.html


Thanks Alexey, I'll have a look at that tomorrow.

So far I've tried '1' then '0' in /var/qmail/control/spfbehviour as
well as appending SPFBEHVIOUR="1" (and then "0") in the tpc.smtp and
qmailctl restart/cdb-ed with no success.

Will.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Alexey Loukianov]

Greetings, Will.

19 ??? 2006 ?., 15:22:04 you have wrote:

> Hi all,

> I've just installed Qmailtoaster on a test system and I'm having some
> trouble with message delivery. For various legacy reasons I'm not
> using a bog standard Qmailtoaster build, we have an existing
> Qmailrocks system but I'd like to transition to an RPMed system.

> Briefly, I've stripped the MySQL stuff and some of the Sendmail
> removal out of the SPECs and I have all the SRPMs building and the
> RPMs install as I'd expect so I think that side of things is all OK.

> I have Qmail setup to only listen on localhost in
> /var/qmail/supervise/smtp/run with '-u "$QMAILDUID" -g "$NOFILESGID"
> 127.0.0.1 smtp \'. It starts and listens successfully so that's good.

> In tcp.rules I have...

> [EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
> 127.:allow,RELAYCLIENT=""

> I've added a virtual domain, 'testdom.com' and a user in that domain.

> [EMAIL PROTECTED] smtp]# /home/vpopmail/bin/vuserinfo [EMAIL PROTECTED]
> name:   test
> passwd: blah
> clear passwd: blahblah
> comment/gecos: test
> uid:1
> gid:0
> flags:  0
> gecos: test
> limits: No user limits set.
> dir:   /home/vpopmail/domains/testdom.com/test
> quota: 41943040S,4000C
> usage: 0%
> last auth: Tue Dec 19 11:52:19 2006
> last auth ip: 127.0.0.1

> Now here's the meat of the problem, when I try to test mail delivery
> locally (which is the only place it'll be taking place) this
> happens...

> [EMAIL PROTECTED] ~]$ telnet localhost 25
> Trying 127.0.0.1...
> Connected to localhost.localdomain (127.0.0.1).
> Escape character is '^]'.
> 220 willspc - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP
> helo gmail.com
> 250 willspc - Welcome to Qmail Toaster Ver. 1.3 SMTP Server
> mail from: [EMAIL PROTECTED]
> 250 ok
> rcpt to: [EMAIL PROTECTED]
> 250 ok
> data
> 354 go ahead
> message body
> message body
> .
> 554 mail server permanently rejected message (#5.3.0)

> And here's the log snippet.

> [EMAIL PROTECTED] smtp]# tail -f current
> @40004587d5263b07bf6c tcpserver: status: 1/100
> @40004587d5263b16b38c tcpserver: pid 29710 from 127.0.0.1
> @40004587d5263b16cafc tcpserver: ok 29710 willspc:127.0.0.1:25
> :127.0.0.1::32851
> @40004587d5420c820c9c CHKUSER accepted sender: from
> <[EMAIL PROTECTED]::> remote  rcpt <> :
> sender accepted
> @40004587d557045229bc CHKUSER accepted rcpt: from
> <[EMAIL PROTECTED]::> remote  rcpt
> <[EMAIL PROTECTED]> : found existing recipient
> @40004587d57a074cb4ac tcpserver: status: 2/100
> @40004587d57a074cd004 tcpserver: pid 29752 from 127.0.0.1
> @40004587d57a074ce38c tcpserver: ok 29752 willspc:127.0.0.1:25
> :127.0.0.1::32852
> @40004587d57a0ddb439c CHKUSER accepted sender: from
> <[EMAIL PROTECTED]::> remote
>  rcpt <> : sender accepted
> @40004587d57a0dffdacc CHKUSER relaying rcpt: from
> <[EMAIL PROTECTED]:[EMAIL PROTECTED]:> remote
>  rcpt
> <[EMAIL PROTECTED]> : client allowed to relay
> @40004587d57a1ac8e154 tcpserver: end 29752 status 0
> @40004587d57a1ac8fcac tcpserver: status: 1/100

> Now, I'm far from a Qmail expert so I'm a bit lost, can anyone shed
> some light on what's going on?

Looks like SPF related trouble. Try to modify spfbehavior to 0. To get
verbose logging you can use my patch. It's available here:
http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg09582.html

-- 
Best Regards,
 Alexey Loukianov  mailto:[EMAIL PROTECTED]

Software Development Department,
Lavtech Corp
http://mnogo.ru, http://lavtech.ru


-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Will McDonald]

On 19/12/06, Jake Vickers <[EMAIL PROTECTED]> wrote:

Will McDonald wrote:
> Hi all,
>
> I've just installed Qmailtoaster on a test system and I'm having some
> trouble with message delivery. For various legacy reasons I'm not
> using a bog standard Qmailtoaster build, we have an existing
> Qmailrocks system but I'd like to transition to an RPMed system.
>
> Briefly, I've stripped the MySQL stuff and some of the Sendmail
> removal out of the SPECs and I have all the SRPMs building and the
> RPMs install as I'd expect so I think that side of things is all OK.
>
> I have Qmail setup to only listen on localhost in
> /var/qmail/supervise/smtp/run with '-u "$QMAILDUID" -g "$NOFILESGID"
> 127.0.0.1 smtp \'. It starts and listens successfully so that's good.
>
> Now, I'm far from a Qmail expert so I'm a bit lost, can anyone shed
> some light on what's going on?
>
Not much in the logs Try setting spfbehavior to 1 or 0; that
particular function does not generate logs yet.


Thanks for the suggestion Jake, no joy with either of those though I'm
afraid. I'm assuming all I need to do between each change to
spfbehaviour is a "qmailctl restart" ?

The default delivery method for testdom.com is specificed as...

[EMAIL PROTECTED] ~]# cat /home/vpopmail/domains/testdom.com/.qmail-default
| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox

Will.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Jake Vickers]

Will McDonald wrote:

Hi all,

I've just installed Qmailtoaster on a test system and I'm having some
trouble with message delivery. For various legacy reasons I'm not
using a bog standard Qmailtoaster build, we have an existing
Qmailrocks system but I'd like to transition to an RPMed system.

Briefly, I've stripped the MySQL stuff and some of the Sendmail
removal out of the SPECs and I have all the SRPMs building and the
RPMs install as I'd expect so I think that side of things is all OK.

I have Qmail setup to only listen on localhost in
/var/qmail/supervise/smtp/run with '-u "$QMAILDUID" -g "$NOFILESGID"
127.0.0.1 smtp \'. It starts and listens successfully so that's good.

Now, I'm far from a Qmail expert so I'm a bit lost, can anyone shed
some light on what's going on?

Not much in the logs Try setting spfbehavior to 1 or 0; that 
particular function does not generate logs yet.


smime.p7s
Description: S/MIME Cryptographic Signature

[qmailtoaster] "554 mail server permanently rejected message (#5.3.0)" errors.

[Will McDonald]

Hi all,

I've just installed Qmailtoaster on a test system and I'm having some
trouble with message delivery. For various legacy reasons I'm not
using a bog standard Qmailtoaster build, we have an existing
Qmailrocks system but I'd like to transition to an RPMed system.

Briefly, I've stripped the MySQL stuff and some of the Sendmail
removal out of the SPECs and I have all the SRPMs building and the
RPMs install as I'd expect so I think that side of things is all OK.

I have Qmail setup to only listen on localhost in
/var/qmail/supervise/smtp/run with '-u "$QMAILDUID" -g "$NOFILESGID"
127.0.0.1 smtp \'. It starts and listens successfully so that's good.

In tcp.rules I have...

[EMAIL PROTECTED] smtp]# cat /etc/tcprules.d/tcp.smtp
127.:allow,RELAYCLIENT=""

I've added a virtual domain, 'testdom.com' and a user in that domain.

[EMAIL PROTECTED] smtp]# /home/vpopmail/bin/vuserinfo [EMAIL PROTECTED]
name:   test
passwd: blah
clear passwd: blahblah
comment/gecos: test
uid:1
gid:0
flags:  0
gecos: test
limits: No user limits set.
dir:   /home/vpopmail/domains/testdom.com/test
quota: 41943040S,4000C
usage: 0%
last auth: Tue Dec 19 11:52:19 2006
last auth ip: 127.0.0.1

Now here's the meat of the problem, when I try to test mail delivery
locally (which is the only place it'll be taking place) this
happens...

[EMAIL PROTECTED] ~]$ telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
220 willspc - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP
helo gmail.com
250 willspc - Welcome to Qmail Toaster Ver. 1.3 SMTP Server
mail from: [EMAIL PROTECTED]
250 ok
rcpt to: [EMAIL PROTECTED]
250 ok
data
354 go ahead
message body
message body
.
554 mail server permanently rejected message (#5.3.0)

And here's the log snippet.

[EMAIL PROTECTED] smtp]# tail -f current
@40004587d5263b07bf6c tcpserver: status: 1/100
@40004587d5263b16b38c tcpserver: pid 29710 from 127.0.0.1
@40004587d5263b16cafc tcpserver: ok 29710 willspc:127.0.0.1:25
:127.0.0.1::32851
@40004587d5420c820c9c CHKUSER accepted sender: from
<[EMAIL PROTECTED]::> remote  rcpt <> :
sender accepted
@40004587d557045229bc CHKUSER accepted rcpt: from
<[EMAIL PROTECTED]::> remote  rcpt
<[EMAIL PROTECTED]> : found existing recipient
@40004587d57a074cb4ac tcpserver: status: 2/100
@40004587d57a074cd004 tcpserver: pid 29752 from 127.0.0.1
@40004587d57a074ce38c tcpserver: ok 29752 willspc:127.0.0.1:25
:127.0.0.1::32852
@40004587d57a0ddb439c CHKUSER accepted sender: from
<[EMAIL PROTECTED]::> remote
 rcpt <> : sender accepted
@40004587d57a0dffdacc CHKUSER relaying rcpt: from
<[EMAIL PROTECTED]:[EMAIL PROTECTED]:> remote
 rcpt
<[EMAIL PROTECTED]> : client allowed to relay
@40004587d57a1ac8e154 tcpserver: end 29752 status 0
@40004587d57a1ac8fcac tcpserver: status: 1/100

Now, I'm far from a Qmail expert so I'm a bit lost, can anyone shed
some light on what's going on?

All help much appreciated.

Thanks,

Will.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]