Re: [vchkpw] vpopmail authentications failing randomly

2005-05-25 Thread Rainer Duffner

Matt Simerson wrote:



Problem:  vpopmail authentications failing randomly



[snip]


So, anyone got ideas on how to debug this issue further?




Does this also happen with courier-pop3?

Somehow, there must be a problem that only exists on this machine.
Does /usr/ports/sysutils/cpuburn run without problems?
All I can think of is maybe somewhere an old version of any of the 
mysql/vpopmail libs is sitting around.


pkg_delete -a  rm -rf'ing /usr/local is not an option, I assume?



Rainer



Re: [vchkpw] processing .qmail files for all users

2005-05-25 Thread Payal Rathod
On Tue, May 24, 2005 at 01:10:29PM -0700, Tom Collins wrote:
 On May 24, 2005, at 9:24 AM, Payal Rathod wrote:
 But qmail-default is not looked at when the user has a .qmail file of
 her own, maybe for forwarding mails or something like that.
 What do I do in such case?
 
 Yes it does.
[...]

You mean if I want to run a script like (easy one)
| ifspamh [EMAIL PROTECTED]
for all users I need to modify the source?

See my problem is that I have few users who have their own .qmail files, 
probably because they have mail forwarding enabled and some do not.  Can 
I run a script everyday so that I can have | ifspamh [EMAIL PROTECTED]
for all users for that domain?

With warm regards,
-Payal


Re: [vchkpw] many roaming users

2005-05-25 Thread Matt Brookings

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jeremy Kitchen wrote:
| On Wednesday 18 May 2005 12:45 pm, Payal Rathod wrote:
|
|Hi,
|The other day a friend showed interest in qmail server. He is running
|sendmail for many years and wants to shift to a better MTA (for his
|moderately loaded server of 3 thousand users) during hardware change. I
|have advised him qmail + vpopmail combo, but am scared of one thing
|only. Can cdb handle that lot of recompiling (he surely does not want
|any kind of sql) because almost all his users are roaming users?
|
|
| don't use vpopmail's roaming-users functionality if you want
pop-before-smtp
| authentication, use Bruce Guenter's relay-ctrl package.

vpopmail's roaming users should be fine for a smaller system such as
this one.  You wouldn't nessarily want to use it in a clustered
environment, but it should be fine for a single-server, smaller
configuration.  If you're clustered, or planning on clustering,
then Matt Simmerson's tcpserver patch would be a good alternative.

|
| However, I wouldn't even use pop-before-smtp.. I would set up SMTP
| authentication and require that.

Agreed.  SMTP authentication is the prefered method these days,
but, if because of your user-base, this is not feasable, roaming
users should be fine in this type of environment.

|
| -Jeremy
|


- --
/*
~Matt Brookings [EMAIL PROTECTED]   GnuPG Key 7D7E5F37
~Software developer Systems technician
~Inter7 Internet Technologies, Inc. (815)776-9465
*/

banner(Support open-source!\n);

void banner(char *arg) {
~  char b[50];
~  strcpy(b, arg);
~  printf(b);
}

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFClLGZ/pZz8n1+XzcRAm+rAJ4iJXApD/Z0GWwAdcV7RP8VaV8GXQCgmkyy
Cb7uXMI9JVzkWdm3DCX9S3U=
=3x7N
-END PGP SIGNATURE-


Re: [vchkpw] valid user patch

2005-05-25 Thread Matt Brookings

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] wrote:
| Hi,
|
| http://http.netdevice.com:9080/qmail/rcptck/
|
| Does anyone know if any of these patches work with vpopmail and
virtual domains?
| I really want to install something eliminate the insane amount of bounce
| messages in my queue. They are all sorry that user does not exist,
and of
| course they are bouncing to invalid accounts since the spammer never
puts a
| valid from header in their emails. It's driving me nuts, since my
queue fills
| up with many thousands of these messages and is severely degrading the
| performance of my server.

As Michael Bellears said previously, Interazioni's chkusr patch works
wonderfully.  Definately start there.  It integrates well with
everything.

|
| Thanks very much,
| Dan
|
| 
| This message was sent using IMP, the Internet Messaging Program.
|
|


- --
/*
~Matt Brookings [EMAIL PROTECTED]   GnuPG Key 7D7E5F37
~Software developer Systems technician
~Inter7 Internet Technologies, Inc. (815)776-9465
*/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFClLI+/pZz8n1+XzcRAkf6AJ9L8GWJUVIhd4Qk1vY4xPSk/Gk69QCgmjfW
79RYCk+Bktw61FixNiC8JOM=
=YD9k
-END PGP SIGNATURE-


Re: [vchkpw] vpopmail authentications failing randomly

2005-05-25 Thread Matt Brookings

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Matt Simerson wrote:
|
| Problem:  vpopmail authentications failing randomly
|

| delivery 14578: failure: vmysql:_sql_error
| [1]:_Can't_create_database_'vpopmail'._Database_exists/
| vmysql:_sql_error[3]:_No_Database_Selected/
| Sorry,_no_mailbox_here_by_that_name._vpopmail_(#5.1.1)/
| delivery 14641: failure: vmysql:_sql_error
| [1]:_Can't_create_database_'vpopmail'._Database_exists/
| vmysql:_sql_error[3]:_No_Database_Selected/
| Sorry,_no_mailbox_here_by_that_name._vpopmail_(#5.1.1)/
|
| There are no errors reported in MySQL's .err log. There are no other
| related errors reported in the system logs. The MySQL load is quite
| light, with less than one query executed every few seconds.  The
| system load is also fairly light, mostly hovering between 0.4 and 0.5.
|
| All the symptoms are indicative of vpopmail having an issue with
| MySQL, so I set up a little perl script to test for me while I tried
| to replicate the problem.

| So, anyone got ideas on how to debug this issue further?
|

Hi, Matt.  I have previously had this problem.  You are indeed
correct.  It is a problem with vpopmail talking with MySQL.
Unfortunately, MySQL, as you said, reports nothing, regardless
of the fact that vpopmail is returning an error.  The series
of events you're seeing in the vpopmail logs, is vpopmail
receiving a 'Read error, MySQL server has gone away' during
a database read.  vpopmail then thinks the database may not
exist, and it tries to create the database as if it was
starting from scratch.  I spent *hours* looking into *WHY*
this occurs with no result other than the fact that it is
indeed on MySQL's end.   This is what I have yet so far
figured out:

1) vpopmail connects and succesfully authenticates,
~   and switches to the database.

2) vpopmail tries to read and receives the 'Server gone
~   away' message.

3) The MySQL server does not document via error or debugging
~   messages the actual cause of the error, but if it did,
~   we might be able to determine the root cause.

In my trials, I tried adjusting packet sizes, timeouts on both
vpopmail, and MySQL, turning on debugging, recompiling with
various settings, etc.  The interesting thing about the problem
is that it just simply crops out of out no where, and simply
will not go away.  I would love to get this documented on
qmailwiki.org, but as of yet, I've had no luck determining
the cause, or finding a solution.  You may wish to try upgrading
or downgrading MySQL.

If you find anything else, please let me know.

Thanks!


- --
/*
~Matt Brookings [EMAIL PROTECTED]   GnuPG Key 7D7E5F37
~Software developer Systems technician
~Inter7 Internet Technologies, Inc. (815)776-9465
*/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFClLQV/pZz8n1+XzcRAhL+AKCgVk0GavZLhV4zESKkOfN86vKlhACcCtO7
JWx7nQJH+0s3O8bpZLudXms=
=6YsU
-END PGP SIGNATURE-


Re: [vchkpw] processing .qmail files for all users

2005-05-25 Thread Tom Collins

On May 25, 2005, at 9:52 AM, Payal Rathod wrote:

On Tue, May 24, 2005 at 01:10:29PM -0700, Tom Collins wrote:

On May 24, 2005, at 9:24 AM, Payal Rathod wrote:

But qmail-default is not looked at when the user has a .qmail file of
her own, maybe for forwarding mails or something like that.
What do I do in such case?


Yes it does.

[...]

You mean if I want to run a script like (easy one)
| ifspamh [EMAIL PROTECTED]
for all users I need to modify the source?


If you want the SAME string for all users in a domain, you can insert 
that at the top of the .qmail-default file for the domain.  Qmail-local 
will run the email through your script before passing it to 
vdelivermail for local delivery.


Your script could then take the message and use the appropriate exit 
codes to prevent the message from getting to the local user.  Your 
script could even forward (or store) the mail in another mailbox.


Modifying the source to vdeliermail is also an option.  If, for 
example, you wanted to read the headers of the message and save it in a 
special mailbox for the domain if it's spam (or even save it in an IMAP 
mailbox for the user), it would best be accomplished in vdelivermail.


I have been contacted by another user about adding such a feature, and 
his company may be willing to sponsor development.  If there are other 
companies who would like to see it added, please contact me off list, 
and perhaps I can coordinate sponsorships to keep the costs down, and 
get this added to future releases.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com




Re: [vchkpw] vpopmail authentications failing randomly

2005-05-25 Thread Tom Collins

On May 24, 2005, at 7:25 PM, Matt Simerson wrote:

So, I turned to vmysql.c and noticed a timeout setting there that
affects the mysql connection timeout. I bumped it up from 2 to 5, and
it has reduced the failure frequency but it's still happening fairly
regularly. There are some slow queries in MySQL, but only 15 from the
last day, so that doesn't even closely correspond with 300 no found
errors.

So, anyone got ideas on how to debug this issue further?


Thanks for taking such a detailed look at this problem.  I think you've 
nailed it right there -- the server (or MySQL) gets bogged down to the 
point where it can't answer the query in under 5 seconds.  Vpopmail 
times out and its only option is to reply that the login failed.


Increasing that timeout to 10 or even 15 seconds shouldn't have a 
negative impact -- it will make vpopmail more tolerant of slow 
responses.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com




Re: [vchkpw] processing .qmail files for all users

2005-05-25 Thread Flavio Curti
Hi Tom

On 5/25/05, Tom Collins [EMAIL PROTECTED] wrote:
 If you want the SAME string for all users in a domain, you can insert
 that at the top of the .qmail-default file for the domain.  Qmail-local
 will run the email through your script before passing it to
 vdelivermail for local delivery.

Isn't the problem that if you have a .qmail in the doman directory
(like .qmail-fcu) the mail is never seen by vpopmail or the script,
because qmail-local will do the delivery itself?

Hope that helps and regards

Flavio

-- 
http://no-way.org/~fcu/


Re: [vchkpw] processing .qmail files for all users

2005-05-25 Thread Payal Rathod
On Thu, May 26, 2005 at 12:15:07AM +0200, Flavio Curti wrote:
 Hi Tom
 
 On 5/25/05, Tom Collins [EMAIL PROTECTED] wrote:
  If you want the SAME string for all users in a domain, you can insert
  that at the top of the .qmail-default file for the domain.  Qmail-local
  will run the email through your script before passing it to
  vdelivermail for local delivery.
 
 Isn't the problem that if you have a .qmail in the doman directory
 (like .qmail-fcu) the mail is never seen by vpopmail or the script,
 because qmail-local will do the delivery itself?

Yes this is exactly what I am asking.
If there is a file .qmail-payal or payal/.qmail why would .qmail-default 
be seen? So my script won't run.

With warm regards,
-Payal


 Hope that helps and regards
 
 Flavio
 
 -- 
 http://no-way.org/~fcu/