RE: [vchkpw] Help with rblsmtpd

[Jeremy Kitchen]

On Sun, 2003-12-21 at 23:36, [EMAIL PROTECTED] wrote:
> Yes, I thought of different MX records as well but this would necessitate
> running qmail on a separate server since I cannot run 2 instances of
> qmail-smtpd on the same port (25) on the same server even if each is using a
> different virtual IP.  At least I don't think I can.

http://cr.yp.to/ucspi-tcp/tcpserver.html

you can specify an address for tcpserver to listen to.  Make one listen
to one address, and make another listen to the other address, then set
up different rules and such for each.

> Thanks for trying.  I am still trying to find out why is it that I cannot
> post to the qmail list.

I had something similar to that happen to me once before, but I was able
to post from another email address, so that's what I did  Strange,
indeed.

-Jeremy
-- 
Jeremy Kitchen <[EMAIL PROTECTED]>

RE: [vchkpw] Help with rblsmtpd

[webmaster]

> -Original Message-
> From: Jeremy Kitchen [mailto:[EMAIL PROTECTED] 
> Sent: Sunday, December 21, 2003 8:15 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [vchkpw] Help with rblsmtpd
> 
> 
> On Sun, 2003-12-21 at 20:50, [EMAIL PROTECTED] wrote:
> > I am using spamcop RBL to block known spammers
> > Do you know how I can selectively EXEMPT certain virtualhosts from 
> > spamcop ?
> 
> This question has nothing to do with vpopmail.  Instead, it 
> should go either on the qmail mailing list, or the ucspi-tcp 
> mailing list (since rblsmtpd is part of the ucspi-tcp 
> package, but most commonly used in conjuction with qmail, so 
> either would probably yield proper results), but I will 
> answer your qestion anyways.
> 

Thanks Jeremy,
believe it or not, I do realize that this is a bit off topic to this mailing
list but I have been having unexplained phenomenon where my posts to qmail
list do not get through although I am receiving all the posts.
So I thought I give it a try here.  I think most subscribers here use qmail
and rblsmptd as well.
I guess I am hoping it doesn't bother people too much to solicit some
response from here.


> > Say, hostation.com is a virtualhost on my system and I wish 
> to accept 
> > all e-mail even from servers listed with spamcop.
> 
> from http://cr.yp.to/ucspi-tcp/rblsmtpd.html :
> 
> If the $RBLSMTPD environment variable is set and is nonempty, 
> rblsmtpd blocks mail. It uses $RBLSMTPD as an error message 
> for the client. Normally rblsmtpd runs under tcpserver; you 
> can use tcprules to set $RBLSMTPD for selected clients. 
> 
> If $RBLSMTPD is set and is empty, rblsmtpd does not block mail.
> 
> If $RBLSMTPD is not set, rblsmtpd looks up $TCPREMOTEIP in 
> the RBL, and blocks mail if $TCPREMOTEIP is listed. tcpserver 
> sets up $TCPREMOTEIP as the IP address of the remote host.
> 


I read all that in the doc before and have a basic understanding how it
works.  My requirement is a bit different and I haven't come across any
published doc.

> > :allow,RBLSMTPD="",TCPLOCALHOST="hostation.com"
> 
> why set TCPLOCALHOST?  just do this: 
> some.ip.add.ress:allow,RBLSMTPD=""
> .host.example.org:allow,RBLSMTPD=""
> 

Well, as I explained, the control point I am trying to achieve is at the
receiving end and not the source IP since I can not possibly cover who are
currently listed.


> etc.
> 
> >From the example you provided, it seems that you want to do this only
> for mails headed to some domain.  With only one IP address, 
> that is not possible.  However, you can set up a different 
> smtp service on another IP address, point your MX records at 
> that, and allow spamcop listed hosts either by not adding 
> spamcop to your rblsmtpd list (something I would recommend 
> anyways, as they are too overly anal for my tastes), or if 
> you want to not block any mail to that domain, simply leave 
> out rblsmtpd all together.  Or, you can use any combination 
> of setting tcprules rules for hosts/removing rbl 
> lists/removing rblsmtpd to get the required effect.

Yes, I thought of different MX records as well but this would necessitate
running qmail on a separate server since I cannot run 2 instances of
qmail-smtpd on the same port (25) on the same server even if each is using a
different virtual IP.  At least I don't think I can.


> 
> Hope this helps, and please, in the future, try to post 
> questions to the proper mailing lists, as that is why they exist :)
> 

Thanks for trying.  I am still trying to find out why is it that I cannot
post to the qmail list.

Lu


> -Jeremy
> -- 
> Jeremy Kitchen <[EMAIL PROTECTED]>
> 

Re: [vchkpw] vpopmail + maildrop + SQL valias delivery issue problem/kludge

[Gary - US]

Jeremy Kitchen wrote:

On Sun, 2003-12-21 at 14:01, Gary - US wrote:

Is there something wrong with the inter7.com site?  I haven't been able to
access it for days.


Your question should have been started as a new thread, rather than a
reply to a previous post, since it didn't have any relevance to the post
you replied to.
That being said, yes, the Inter7 website is currently down.  The
colocation provider hosting the machine is having massive network
issues, and they are currently working on getting us access to it.  I am
not sure what Ken is planning to do, but I believe we'll be moving the
site to our offices in Evanston, IL.
We sincerely apologize for any inconvenience this may be causing anyone.

-Jeremy

Well excuse me.  Did you give us any information about it?  If so I must 
have missed it.  By the way since I can't get to the site to do it, 
please remove me from this list.

--
Semper Fi & God Bless America,
Gary-US MCNGP #20 & retired Devil Dog

http://www.mcngp.tk
The MCNGP Team - We're here to help
**  Kindly Do The Needful  **

[vchkpw] Vpopmail 5.4.0-pre2 released

[Tom Collins]

http://vpopmail.sf.net/

Thanks to many testers for uncovering bugs in the
last pre-release.  We should have some more
documentation (limits docs from Shupp) and LDAP
docs/bugfixes (from Bowe) before the final release.
*** Note that the configure option for setting the authentication
*** module has changed.  Instead of --enable-mysql, use
*** --enable-auth-module=mysql.
5.4.0-pre2 - released 21-Dec-03

Casey Zacek
- Keep vlimits_setflags() in vlimits.c when mysql-limits is
  enabled. [858109]
- Create maildirsize file when adding new user. [858994]
Tom Collins
- open_smtp_relay(): fix address conversion of ':::127.0.0.1'
  ip format, move code to function and replace calls to
  getenv("TCPREMOTEIP"). [858586]
- When optimizing adddomain, rebuild users/cdb after each addition
  instead of postponing. [859707, temporary fix]
- Move maildir_to_email() from vdelivermail.c into vpopmail.c,
  replace dupe code that tries to do the same thing. [859098]
- Fix domain quota checks to work with hashed directories. [859098]
- Fix bug when calling format_maildirquota() with NOQUOTA.
- Document use of NOQUOTA in vadduser. [862315]
- Fix Makefile so `make install` works from checked out CVS. [863862]
Michael Bowe
- Revise configure script so choice of auth module is now "OR"
  rather than "AND".
  Auth module selection now uses the format :
--enable-auth-module=cdb|mysql|pgsql|ldap|sybase|oracle|activedir
  Rather than :
--enable-mysql --enable-pgsql --enable-ldap etc
  If the old style is used, then the configure script will output
  and error and will advise the user of the updated syntax. [855691]
- Removed the code that created a vpopmail.config.sh file each
  time the configure script is run. This file is never used,
  and a more accurate result can be achieved by using
  ./config.status --recheck [860271]
- Update the vldap/qmailUser.schema so that it contains the
  required definition for 'clearPassword' [810999]
- Modify vpopbull, so that within each domain, the users are
  processed alphabetically. The idea behind this is to give the
  operator some idea of "how far through" the mailout we are.

Re: [vchkpw] Help with rblsmtpd

[Jeremy Kitchen]

On Sun, 2003-12-21 at 20:50, [EMAIL PROTECTED] wrote:
> I am using spamcop RBL to block known spammers
> Do you know how I can selectively EXEMPT certain virtualhosts from spamcop ?

This question has nothing to do with vpopmail.  Instead, it should go
either on the qmail mailing list, or the ucspi-tcp mailing list (since
rblsmtpd is part of the ucspi-tcp package, but most commonly used in
conjuction with qmail, so either would probably yield proper results),
but I will answer your qestion anyways.

> Say, hostation.com is a virtualhost on my system and I wish to accept all
> e-mail even from servers listed with spamcop.

from http://cr.yp.to/ucspi-tcp/rblsmtpd.html :

If the $RBLSMTPD environment variable is set and is nonempty, rblsmtpd
blocks mail. It uses $RBLSMTPD as an error message for the client.
Normally rblsmtpd runs under tcpserver; you can use tcprules to set
$RBLSMTPD for selected clients. 

If $RBLSMTPD is set and is empty, rblsmtpd does not block mail.

If $RBLSMTPD is not set, rblsmtpd looks up $TCPREMOTEIP in the RBL, and
blocks mail if $TCPREMOTEIP is listed. tcpserver sets up $TCPREMOTEIP as
the IP address of the remote host.

> :allow,RBLSMTPD="",TCPLOCALHOST="hostation.com"

why set TCPLOCALHOST?  just do this:
some.ip.add.ress:allow,RBLSMTPD=""
.host.example.org:allow,RBLSMTPD=""

etc.

>From the example you provided, it seems that you want to do this only
for mails headed to some domain.  With only one IP address, that is not
possible.  However, you can set up a different smtp service on another
IP address, point your MX records at that, and allow spamcop listed
hosts either by not adding spamcop to your rblsmtpd list (something I
would recommend anyways, as they are too overly anal for my tastes), or
if you want to not block any mail to that domain, simply leave out
rblsmtpd all together.  Or, you can use any combination of setting
tcprules rules for hosts/removing rbl lists/removing rblsmtpd to get the
required effect.

Hope this helps, and please, in the future, try to post questions to the
proper mailing lists, as that is why they exist :)

-Jeremy
-- 
Jeremy Kitchen <[EMAIL PROTECTED]>

[vchkpw] Help with rblsmtpd

[webmaster]

Hello folks.

I am using spamcop RBL to block known spammers

Do you know how I can selectively EXEMPT certain virtualhosts from spamcop ?

Say, hostation.com is a virtualhost on my system and I wish to accept all
e-mail even from servers listed with spamcop.

I thought of using :

:allow,RBLSMTPD="",TCPLOCALHOST="hostation.com"

in tcp.smtp
but this does not work.

Any advice is very much appreciated.

Lu
Thank you

Re: [vchkpw] Imap and pop3 problem

[Jeremy Kitchen]

On Tue, 2003-12-16 at 19:08, [EMAIL PROTECTED] wrote:
> Ross Davis - DataAnywhere.net <[EMAIL PROTECTED]> wrote:
> >> On my pc (using outlook 2002) I have added one pop3 account to pull
> >> the mail from my inbox off onto my machine and another Imap account
> >> that I can use to monitor my spam folder.  This is really nice
> >> concept wise except I am getting an error about 20% of the time when
> >> I check my email.  If I remove the Imap account I do not get the
> >> error.  Outlook checks both accounts at the same time and there is
> >> no way to stop that. I tried everything.
> >>
> >> I think the problem is that imap and pop3 are conflicting with each
> >> other when checking the same account at the same time.  Anyone else
> >> tried this or know of a solution?

first of all, why use the imap AND pop3 account?  You can view your
inbox with your imap account just fine.  I use imap, and only imap
anymore, as I like to be able to get the same emails from anywhere :)

> Incorrect.  The problem is courier-imap only allows a small amount of imap
> connections per IP, and outlook and outlook express both open several
> connections at a time, and the IMAP server is killing the extra connections.

Unfortunately that is true.  Also unfortunately, Mozilla Thunderbird (at
least for linux) also does that.  It sets up a new connection for each
folder, which, in my case, is very bad, as I have lots of imap folders
(at least 2 for every mailing list I'm on, as well as lots of 'personal'
folders)

I don't use windows anymore, and I never really used Outlook with my
imap server, I've been using evolution under linux for the past 2 years,
which is absolutely wonderful.

I would suggest perhaps trying some other mail clients.  I know eudora
(at least later versions) is very nice, but it's not freeware, so unless
you register it you have a few very small (and unobtrusive) ads in your
main client window (it is NOT spyware, and will NOT pop up ads on you)

Also, I'm sure freshmeat would have a nice listing of free email clients
for windows, certainly one of them will perform well enough for you.  I
certainly wish I could recommend one for you other than Eudora, but I do
not use windows anymore, nor do I feel like installing windows just for
that ;)  Maybe some day...

I am planning on opening a site very soon that will review a lot of
things, I'm semi keeping it secret because I don't own the domain yet
and don't want someone to steal it before I can get it :\  I will put
"Windows MUAs" on my checklist of things to review, hopefully it will be
helpful to someone.

> Find your 'imapd' file, (default /usr/lib/courier-imap/etc), and find the
> "MAXPERIP" variable.  Raise it.

That will certainly help, but in my case I would also be limited by the
max connections configuration directive, because I have far more than 40
(which is the default) imap folders.  I think this is more an MUA
problem than a server side problem.

-Jeremy

-- 
Jeremy Kitchen <[EMAIL PROTECTED]>
Inter7 Internet Technologies, Inc.

Re: [vchkpw] vpopmail + maildrop + SQL valias delivery issue problem/kludge

[Jeremy Kitchen]

On Sun, 2003-12-21 at 14:01, Gary - US wrote:
> Is there something wrong with the inter7.com site?  I haven't been able to
> access it for days.

Your question should have been started as a new thread, rather than a
reply to a previous post, since it didn't have any relevance to the post
you replied to.

That being said, yes, the Inter7 website is currently down.  The
colocation provider hosting the machine is having massive network
issues, and they are currently working on getting us access to it.  I am
not sure what Ken is planning to do, but I believe we'll be moving the
site to our offices in Evanston, IL.

We sincerely apologize for any inconvenience this may be causing anyone.

-Jeremy

-- 
Jeremy Kitchen <[EMAIL PROTECTED]>
Inter7 Internet Technologies, Inc.

Re: [vchkpw] Imap and pop3 problem

[Dean Henrichsmeyer]

Just from a best practice stand point, it sounds like you're really 
asking for a headache accessing the same data 2 different ways at the 
same time with the same program. I'd recommend finding a different 
solution. One being setting up a filter in outlook that looks for the 
Spam status header and filtering it in outlook rather than on the 
server (if bandwidth isn't something you're trying to save).

The other being just check the spam folder via webmail once in a while. 
I'd really try and avoid accessing the same data at the same time 2 
different  ways. While unix is forgiving, most client applications 
aren't.

Dean

On Dec 16, 2003, at 5:44 PM, Ross Davis - DataAnywhere.net wrote:

I have configured my new server with pop3 and courier imap.  I built 
the
server within the last week with the latest version from source forge.
I am using maildrop to drop my spam email into a .Spam imap folder and
this works great as I have a folder that is visible from sqwebmail.
That works great.

On my pc (using outlook 2002) I have added one pop3 account to pull the
mail from my inbox off onto my machine and another Imap account that I
can use to monitor my spam folder.  This is really nice concept wise
except I am getting an error about 20% of the time when I check my
email.  If I remove the Imap account I do not get the error.  Outlook
checks both accounts at the same time and there is no way to stop that.
I tried everything.
I think the problem is that imap and pop3 are conflicting with each
other when checking the same account at the same time.  Anyone else
tried this or know of a solution?
Ross Davis
DataAnywhere.net
250-470-9192
ChaletsOnline.com is coming soon
Don't you deserve a vacation!

Re: [vchkpw] vpopmail + maildrop + SQL valias delivery issue problem/kludge

[Gary - US]

Is there something wrong with the inter7.com site?  I haven't been able to
access it for days.

- Original Message - 
From: "Chris Ess" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, December 21, 2003 1:58 PM
Subject: [vchkpw] vpopmail + maildrop + SQL valias delivery issue
problem/kludge


> Applicable versions:
>
> vpopmail 5.2.1 and 5.2.2
> maildrop 1.6.3
> MySQL 4.0.16
>
> I don't have a test server set up to use 5.4.0-pre1 but I may get around
> to that sometime this next couple of weeks.  (By which time we'll have a
> new 5.4.0-pre# version probably.)
>
> The basic issue is one that had been reported before on this mailing
> list... If I call vdelivermail in maildrop to handle aliases, it spawns
> vdelivermail and says it handles an alias...  But it just simply does not
> forward the message.
>
> An example set of lines from my mail log is:
> (I have changed the domain names for various reasons)
>
> Dec  8 17:33:15 devmail qmail: 1070922795.117969 new msg 49247
> Dec  8 17:33:15 devmail qmail: 1070922795.118076 info msg 49247: bytes
1073 from <[EMAIL PROTECTED]> qp 13756 uid 211
> Dec  8 17:33:15 devmail qmail: 1070922795.122280 starting delivery 222:
msg 49247 to local [EMAIL PROTECTED]
> Dec  8 17:33:15 devmail qmail: 1070922795.122377 status: local 1/100
remote 0/100
> Dec  8 17:33:15 devmail qmail: 1070922795.162617 delivery 222: success:
vdelivermail:_valiases_processed/did_0+0+1/
> Dec  8 17:33:15 devmail qmail: 1070922795.162727 status: local 0/100
remote 0/100
> Dec  8 17:33:15 devmail qmail: 1070922795.162746 end msg 49247
>
> At the time, [EMAIL PROTECTED] was supposed to forward back to
> [EMAIL PROTECTED]
>
> After a bit of playing around (including changing vdelivermail to use a
> Perl script rather than qmail-inject), I decided that the problem was
> that, for whatever reason, qmail-inject was stopping before it had the
> opportunity to finish.  My guess is that a signal was being passed to it
> that caused it to terminate.  Unfortunately, I don't know what signal that
> is since I didn't think to try to add signal handlers to my Perl script.
> Also, unfortunately, I don't know if the signal is being issued by (or as
> a result of) vdelivermail or maildrop.  (I seem to recall reading
> somewhere that a child process is passed a signal if the parent dies.)
>
> I came up with a fix, but it's rather a quick kludge and really should be
> replaced with something better.  My fix was to add a sleep(2) after
> vdelivermail.c closes the write file descriptor to the qmail-inject child.
> So the 'if (inject == 1)' block looks like this:
>
> if ( inject == 1 ) {
> close(write_fd);
> sleep(2);
> return(0);
> }
>
>
> (In 5.2.2, the sleep(2) is line 599.)
>
> The theory is that after two seconds, qmail-inject should be done and then
> vdelivermail returns.
>
> This works on both the development and production mailservers I run
> without issue.
>
> As I said, it's a nasty kludge, but it may be useful for those of you who
> experience this issue.
>
> If you have any better suggestions or think I'm chasing the wrong bug, do
> let me know.
>
> Sincerely,
>
>
> Chris Ess
> System Administrator / CDTT (Certified Duct Tape Technician)

[vchkpw] vpopmail + maildrop + SQL valias delivery issue problem/kludge

[Chris Ess]

Applicable versions:

vpopmail 5.2.1 and 5.2.2
maildrop 1.6.3
MySQL 4.0.16

I don't have a test server set up to use 5.4.0-pre1 but I may get around
to that sometime this next couple of weeks.  (By which time we'll have a
new 5.4.0-pre# version probably.)

The basic issue is one that had been reported before on this mailing
list... If I call vdelivermail in maildrop to handle aliases, it spawns
vdelivermail and says it handles an alias...  But it just simply does not
forward the message.

An example set of lines from my mail log is:
(I have changed the domain names for various reasons)

Dec  8 17:33:15 devmail qmail: 1070922795.117969 new msg 49247
Dec  8 17:33:15 devmail qmail: 1070922795.118076 info msg 49247: bytes 1073 from 
<[EMAIL PROTECTED]> qp 13756 uid 211
Dec  8 17:33:15 devmail qmail: 1070922795.122280 starting delivery 222: msg 49247 to 
local [EMAIL PROTECTED]
Dec  8 17:33:15 devmail qmail: 1070922795.122377 status: local 1/100 remote 0/100
Dec  8 17:33:15 devmail qmail: 1070922795.162617 delivery 222: success: 
vdelivermail:_valiases_processed/did_0+0+1/
Dec  8 17:33:15 devmail qmail: 1070922795.162727 status: local 0/100 remote 0/100
Dec  8 17:33:15 devmail qmail: 1070922795.162746 end msg 49247

At the time, [EMAIL PROTECTED] was supposed to forward back to
[EMAIL PROTECTED]

After a bit of playing around (including changing vdelivermail to use a
Perl script rather than qmail-inject), I decided that the problem was
that, for whatever reason, qmail-inject was stopping before it had the
opportunity to finish.  My guess is that a signal was being passed to it
that caused it to terminate.  Unfortunately, I don't know what signal that
is since I didn't think to try to add signal handlers to my Perl script.
Also, unfortunately, I don't know if the signal is being issued by (or as
a result of) vdelivermail or maildrop.  (I seem to recall reading
somewhere that a child process is passed a signal if the parent dies.)

I came up with a fix, but it's rather a quick kludge and really should be
replaced with something better.  My fix was to add a sleep(2) after
vdelivermail.c closes the write file descriptor to the qmail-inject child.
So the 'if (inject == 1)' block looks like this:

if ( inject == 1 ) {
close(write_fd);
sleep(2);
return(0);
}


(In 5.2.2, the sleep(2) is line 599.)

The theory is that after two seconds, qmail-inject should be done and then
vdelivermail returns.

This works on both the development and production mailservers I run
without issue.

As I said, it's a nasty kludge, but it may be useful for those of you who
experience this issue.

If you have any better suggestions or think I'm chasing the wrong bug, do
let me know.

Sincerely,


Chris Ess
System Administrator / CDTT (Certified Duct Tape Technician)

RE: [vchkpw] vpopmail+ldap developer?

[Shane Chrisp]

Well done Michael! :)

Shane

>This weekend I have spent some time tinkering with 
>vpopmail+ldap, and at
>last have successfully got it going  :-)
>
>I have located quite a few pieces of code that need to be updated
>
>I am currently in the process of producing documentation along 
>with a set of
>patches, so that we can ensure the LDAP module is "good to go" for the
>upcoming 5.4 release
>
>Michael.
>
>

Re: [vchkpw] vpopmail+ldap developer?

[Michael Bowe]

- Original Message - 
From: "Michael Bowe" <[EMAIL PROTECTED]>


> - Original Message - 
> From: "Tom Collins" <[EMAIL PROTECTED]>
>
>
> > On Friday, December 5, 2003, at 10:23  AM, Oscar Retana M. wrote:
> > > I've found several bugs in vldap.c module. Who should I contact to
> > > report the bugs... and the solutions :)
> >
> > Please post patches to SourceForge .
> >
> > Make sure they're against the latest development version.  As far as I
> > know, we don't have an active maintainer for LDAP.  Michael Bowe has
> > looked at it a bit, but I don't think any of the current developers
> > have an LDAP setup to test with.
>
> Yes, I have done some assorted minor work with the LDAP module,
> making sure it compiles successfully etc.
>
> I recently tried to get a working vpopmail/LDAP install going on my
> test machine, but I found the LDAP config all a bit bewildering. :-/
> The README.ldap file that comes with the vpopmail source had
> some information, but it wasnt sufficiently clear enough for an LDAP
> beginner like me.
>
> I would really LOVE for someone who has got the LDAP module
> up and running to type up a quick step-by-step guide showing
> how they did it. We could then use this as a basis for getting
> the README.ldap guide up to date.
>
> I have been working on getting the various README files up to
> date before vpopmail-5.3.x gets marked as 5.4-stable. It seems
> that quite a few people are using the LDAP module, so it would be
> great if we could get the docs up to speed before 5.4.

This weekend I have spent some time tinkering with vpopmail+ldap, and at
last have successfully got it going  :-)

I have located quite a few pieces of code that need to be updated

I am currently in the process of producing documentation along with a set of
patches, so that we can ensure the LDAP module is "good to go" for the
upcoming 5.4 release

Michael.