RE: RE: [vchkpw] How do you handle spamcop

[David Hubbard]

From: Tanmaya Anand [mailto:[EMAIL PROTECTED] 
> 
> Hello David,
> 
> Thanks for the patch. Can you give me the download URL too :)
> 
> Regards,
> Tanmaya  
> 

http://marc.theaimsgroup.com/?l=qmail&m=111289555302985&w=2

David

RE: [vchkpw] How do you handle spamcop

[David Hubbard]

There's a patch called bounceroutes which basically allows you
to define artificial routes for bounce messages in a file
called bounceroutes using the same format as smtproutes,
including defaults.  

Use that patch, set up a separate server and add
:1.2.3.4
to the file, effectively telling your system to send all bounce
messages to the bounce server so it is the one that ends up
blacklisted.  That way only spamcop users won't receive their
legitimate email.

David 

> -Original Message-
> From: Tanmaya Anand [mailto:[EMAIL PROTECTED] 
> Sent: Monday, July 11, 2005 9:38 AM
> To: vchkpw@inter7.com
> Subject: [vchkpw] How do you handle spamcop
> 
> Hi All,
> 
> I am sorry if the problem has been addressed before, but i 
> would like to know how is everyone dealing with SPAMCOP's 
> bounce and autoresponder's issue. Despite of userchk, bounces 
> are possible due to small things like over-quota (which is 
> common problem for us running thousands of domain). Also 
> Auto-responder are somehting that cannot be ignored and 
> people do use them.
> 
> All i can find is the BOUNCEQUEUE patch, which is not 
> feasible for us in correct situation.
> 
> So i would be thankful, if everyone shares his way to deal 
> with this issue.
> 
> Regards,
> Tanmay 
> 
> 
> 
>    
> 

[vchkpw] autoresponder supposed to cause message loss?

[David Hubbard]

In a vpopmail 5.4.6 site with autoresponder 2.0.4,
the behavior we're seeing is that when a user
sets a vacation message, vpopmail sets up the autoresponder
with a 3 messages per day limit.  The .qmail file it
creates for that person has autoresponder on the first
line and then the Maildir delivery statement on the
second.  What we're seeing is that after the messages
from a given address exceed three, the autoresopnder
no longer mails, as expected, but the messages are no
longer delivered to the Maildir either, and the sender
is not notified.  Is there a way to override that 
behavior so messages are not lost?  Is this the
expected behavior even or is something else incorrect?
If I reverse the order in the .qmail file it works as
intended but I'd rather not patch vpopmail for all of
our servers and then remember to do that for the future.

Thanks,

David

RE: [vchkpw] CRAM-MD5 smtp-auth vpopmail-5.4.0 and spamcontrol-2.2.9

[David Hubbard]

From: Jeff Koch [mailto:[EMAIL PROTECTED] 
> 
> 
> CRAM-MD5 (both with and without MySQL) breaks if you are 
> using Eudora as a mail client but otherwise works fine
> with Outlook and Outlook Express.

Neither of those does cram-md5, they talk auth login.

David

[vchkpw] 5.4.0-rc2 fixes cram-md5 & auth plain!!

[David Hubbard]

Thanks to the developers, the new 5.4.0-rc2
fixed the known cram-md5 bug as well as the
auth plain problem I posted about; both now
work.

Thanks again,

David

RE: [vchkpw] Working SMTP-AUTH-CRAM-MD5 after applied vchkpw.c.diff

[David Hubbard]

From: Tom Collins [mailto:[EMAIL PROTECTED] 
> 
> On Jan 13, 2004, at 9:00 AM, Dean Henrichsmeyer wrote:
> >> I applied this vchkpw.c.diff patch from
> >> http://www.fehcom.de/qmail/smtpauth.html and CRAM-MD5 
> >> authentication seems to be working (of course I also
> >> applied the smtp-auth patch to qmail).
> >
> > Can we get this worked into 5.4.0? :)
> 
> It's already in CVS and will be in 5.4.0-rc2.

Any chance this will have fixed the AUTH PLAIN login
type too?  I reported the other day that a 5.4.0-rc1
with that same patch, but not the diff applied, only
worked with AUTH LOGIN.  I'll go apply the diff now
if it will fix plain too? :-)

David

[vchkpw] 5.4.0-rc1 failing smtp auth-plain too?

[David Hubbard]

I know 5.4.0-rc1 won't work with cram-md5 but
should it also be failing with auth plain?
I have a server that works fine using auth login
but auth plain does not.

Thanks,

David

RE: [vchkpw] Vpopmail 5.4.0-rc1 released

[David Hubbard]

From: Tom Collins [mailto:[EMAIL PROTECTED] 
> >
> > Someone mentioned something about putting in a patch
> > so that cram-md5 auth would work with vchkpw. I can't
> > remember who it was but does anyone know if this has
> > been done?
> 
> Shoot.  It hasn't been done.  I'm visiting family for the 
> holidays, and haven't been able to spend much time working
> on vpopmail.  I wanted to get a release candidate out, but
> I forgot that that patch was in my queue.
> 
> Someone (Bowe?) wrote (in a SourceForge tracker item) that
> it might be incompatible with one of the smtp auth patches
> for qmail.  I know for a fact that I can't use CRAM-MD5
> from Apple Mail to my server, so I don't doubt that
> there's a need for a patch.
> 
> If anyone out there can test CRAM-MD5 auth, please try applying this 
> patch to rc1 and reporting back whether it fixes the problem.  Also, 
> please report the source of your SMTP AUTH patch if known.
> 
> http://www.fehcom.de/qmail/smtpauth.html

I just built a new mail server with 5.4.0-rc1, qmail 1.03
and that 0.42 smtpauth patch from the URL above and
cram does not work.  Regular login and plain works
fine.

David

RE: [vchkpw] Vpopmail & --enable-roaming-users=y

[David Hubbard]

From: Phil Doroff [mailto:[EMAIL PROTECTED] 
> 
> Ok, noted.  I deleted all the tmp files out, and watched as more were
> created (as users POP'ed in).  They were owned by root, and all were 0
> bytes.  Just blank files.  I then changed the inetd line to 
> launch pop3d under vpopmail.vchkpw, and these files were still
created,
> just with vpopmail.vchkpw ownership.  Also of interest is that an 
> open-smtp.lock file is created under whichever user pop3d is run
under,
> and does not get cleared... hrm.

Leave it running as vpopmail, that's better.  The lock file is normal.
What are the permissions on the files in that directory?

David

RE: [vchkpw] Vpopmail & --enable-roaming-users=y

[David Hubbard]

From: Phil Doroff [mailto:[EMAIL PROTECTED] 
> 
> Ok.. I looked over my config again, just to be sure, and I cannot get
> roaming-users to work at all.
> 
> A few items...
> 
> 1. There are a _TON_ of open-smtp.tmp. files in the ~vpopmail/etc
> directory.  These are owned by root, and running bin/clearopensmtp
doesn't
> effect them at all.  Both trying to run as root, and vpopmail 
> users.  Ideas?

clearopensmtp doesn't touch the open-smtp.tmp files, it removes
expired addresses from open-smtp and rebuilds tcp.smtp.cdb.
The fact that you have a bunch of those files lying around
though means most likely that the tcp.smtp.cdb file can not
be rebuilt due to one or more things running as the wrong user.
chown everything to vpopmail:vchkpw, make sure your pop3
software is running as vpopmail:vchkpw and then make sure
your clearopensmtp cron job runs the job as vpopmail.

> 2. When a user POP's in, vauthpw (or whatnot) doesn't even 
> attempt to update ~vpopmail/etc/open-smtp or
> ~vpopmail/etc/tcp.smtp.cdb.  I have tried a multitude of
> differing permissions just to be sure that this 
> was not the issue.  The current permissions are 0755 user
> vpopmail, group vchkpw.  I have also tried globally making
> them writeable, just to be certain.  No luck at all.

What pop3 software are you using?  If qmail-pop3d post your
run script for it, if courier, then the problem is courier
has disabled the roaming users functionality.  As a temporary
fix, chown vchkpw vpopmail:vchkpw and then chmod 4755 vchkpw.
If that fixes it, you definitely have a daemon running as the
wrong user or something similar.

David

[vchkpw] Which files are involved in open-smtp?

[David Hubbard]

Hi all,
can someone tell me what actually changes
when --enable-roaming-users is on?  Outside of the
creation of the clearopensmtp binary, is it just a
change to vchkpw that enables external programs to
have an IP added to open-smtp somehow when calling
it?

Thanks,

David

[vchkpw] Issues with a setuid vchkpw?

[David Hubbard]

It looks like vchkpw needs to be setuid vpopmail
to work in a smtp-auth setup; are there any security
issues with that?

Thanks,

David

RE: [vchkpw] Question on 553 error

[David Hubbard]

That's an error from the SMTP server; unless you have
smtp auth or something like that built into it, vpopmail
would not be involved.
 
David

-Original Message- 
From: Remo Mattei [mailto:[EMAIL PROTECTED] 
Sent: Sat 6/7/2003 7:31 PM 
To: '[EMAIL PROTECTED]' 
Cc: 
Subject: [vchkpw] Question on 553 error 



Hi guys can someone give me more info on why someone that is trying to send
a message to me gets this error?

 553 sorry, your envelope sender has been denied


I am almost positive that her email client is not setup  correctly Any
fee back are welcomed.
Thanks,


-- Remo Mattei   --cell 801-209-8554
   http://www.italy1.com
   Freelance Networking-Security/Consultant
   MCSE, MCP, MCP+I, MCT
   Linux Trainer & Firewall Development
   [EMAIL PROTECTED]
   

RE: [vchkpw] Question on 553 error

[David Hubbard]

If you search google for the error message you're wondering
about, the second match is the third-party patch that
is causing your qmail to produce the message.  

David

> -Original Message-
> From: Remo Mattei [mailto:[EMAIL PROTECTED] 
> Sent: Saturday, June 07, 2003 9:47 PM
> To: David Hubbard; [EMAIL PROTECTED]
> Subject: Re: [vchkpw] Question on 553 error
> 
> 
> This user is not even on my box :)
> She is just sending message to one of my client which is on 
> this box :) Thanks and I am open for more suggestions ..
> -- Remo Mattei   --cell 801-209-8554
>http://www.italy1.com
>Freelance Networking-Security/Consultant
>MCSE, MCP, MCP+I, MCT
>Linux Trainer & Firewall Development
>    [EMAIL PROTECTED]
> 
> 
> > From: "David Hubbard" <[EMAIL PROTECTED]>
> > Date: Sat, 7 Jun 2003 20:11:44 -0400
> > To: <[EMAIL PROTECTED]>
> > Subject: RE: [vchkpw] Question on 553 error
> > 
> > That's an error from the SMTP server; unless you have
> > smtp auth or something like that built into it, vpopmail 
> would not be 
> > involved.
> > 
> > David
> > 
> > -Original Message-
> > From: Remo Mattei [mailto:[EMAIL PROTECTED]
> > Sent: Sat 6/7/2003 7:31 PM
> > To: '[EMAIL PROTECTED]'
> > Cc:
> > Subject: [vchkpw] Question on 553 error
> > 
> > 
> > 
> > Hi guys can someone give me more info on why someone that 
> is trying to 
> > send a message to me gets this error?
> > 
> > 553 sorry, your envelope sender has been denied
> > 
> > 
> > I am almost positive that her email client is not setup  
> correctly 
> > Any fee back are welcomed. Thanks,
> > 
> > 
> > -- Remo Mattei   --cell 801-209-8554
> >   http://www.italy1.com
> >   Freelance Networking-Security/Consultant
> >   MCSE, MCP, MCP+I, MCT
> >   Linux Trainer & Firewall Development
> >   [EMAIL PROTECTED]
> >   
> > 
> > 
> > 
> > 
> 

RE: [vchkpw] vpopmail enable-roaming with courier

[David Hubbard]

From: Ian Forsyth [mailto:[EMAIL PROTECTED] 
> 
 
> After connecting via pop, and listing mesages, the tcp.smtp related 
> files are unaltered, when I try to send via smtp I get a host not in 
> rcpthost.. The courier log shows succesfull login. I 
> configure vpopmail with the default logging, I don't see anything
> related to vchkpw or vpopmail in the logs.

You didn't miss anything Ian, the author of Courier
has disabled the open_relay function in the latest
versions due to some security problem in vpopmail.
He has evidently supplied info about this to the
vpopmail authors but no one has talked about what
the problem is or what the timeframe is to a fix.

David

[vchkpw] Courier-imap not setting open-relay in vpopmail/qmail

[David Hubbard]

Hello Courier users,
just wondering if anyone could point
me in the right direction for what to look
at.  I am building a new mail server with
qmail/vpopmail and courier-imap/pop3.  I
set courier for authvchkpw auth type and
it works successfully for imap and pop3
logins.  vpopmail never sets the open-relay
for the host doing the Courier login.  It
does set it correctly if I use qmail's pop3
server and vchkpw to authorize the connection.

Is this a courier or vpopmail issue?  I'm
running the latest courier-imap devel
version courier-imap-1.7.1.20030319 and vpopmail
5.3.19.

Thanks,

David

[vchkpw] Any easy way to change path to vpopmail?

[David Hubbard]

Hi all, using standard vpopmail, no mysql, is
there any easy way to move the entire mail system
to another server who's path to the vpopmail
directory would optimally be different?  The
path of course is stored in /var/qmail/users
as well as vpasswd and the .qmail alias files.
I'm guessing I'm going to be using a symbolic
link on the new server to simulate the old but
can I start using the new correct paths for
new domains or do I need to remain consistent?

Thanks,

David

Qmailadmin feature request, not a new feature!

[David Hubbard]

I'd really really love to see the POP3 'Index' feature
make it's way into the forwarding accounts list.  I
have hundreds of forwards on one domain but only about
10 pop3's, so the index is in the wrong place for me. :-)

Dave

Re: Removal of the Source Code ?

[David Hubbard]

Ken, your software kicks ass!  I use vpopmail all over the place without
problems.  Qmailadmin works great too, it could use a little tweaking still
:-) but don't let them get to you, they have the problem.

Dave

On Thu, 7 Dec 2000, Ken Jones wrote:

> I'm sorry. 
> 
> The source code will be put back on the site within the next
> 24 hours. I apologize for the temporary lack of availablilty.
> 
> Unfortunatly, i was conversing with people on #efnet on the
> openbsd channel, and they insulted me deeply. I can not 
> begin to describe how deeply I was offeneded. It was not
> one thing or another thing, just the small attitudes of
> a small group of people.
> 
> I would suggested you joing irc.east.gblx.net and go to
> the #openbsd channel and say at least something.
> 
> The code will be put back up on the site soon. Better
> than ever. We are dedicated to providing open source 
> software to the internet. 
> 
> It's just, some times, I get really ticked off when 
> stupid kids tell me how bad my code is. And I know 
> they don't understand. Sorry.
> 
> If you really want to make a difference, do something
> to change something. I'm put the source back up in the 
> next few days. It just makes me sad. It will be available.
> 
> If you really need it.. just email me and i"ll send you the
> latest version.
> 
> Ken Jones
> 

Re: Removal of the Source Code ?

[David Hubbard]

It looks like it's not the only thing to go, vqsignup and
qmailadmin are missing too!!  Please tell us what's going on!

David

On Thu, 7 Dec 2000, Greg Cope wrote:

> Dear Ken
> 
> I went along to check the vpopmail website (as I seem to have missed the
> 4.6.1 annouce) and saw this:
> 
> We have removed the vpopmail source code. We
> appologize for this unfortunuate incident. Unfortuntately,
> there are abusive people on the internet who hope to
> restrict the free dismemination of open code. We appolize
> for this inconvience. We can only suggest you contact the
> adminstrators of efnet and dal.net.
> No new revesions shall be released to the internet untill
> abusive people are brought into the light. 
> 
> Can you shed some light ?
> 
> Regards
> 
> Greg Cope
> 
>