[xmail] Re: MailRoot Problems
Achim Schmidt wrote: >only an idea: > >Did you also change MAIL_ROOT in /usr/sbin/sendmail(.sh) or does it >still contain "export MAIL_ROOT=/var/MailRoot" ? > >- Achim > > Achim, you rock!! I've spent many hours over several days trying to find that config file. I never even thought to look in a /usr/sbin directory for a configurable file. For those of you who didn't see the whole thread: If you want to change the default XMail directory from /var/MailRoot to /yourpath/MailRoot (in Linux) there are 3 steps that you need to take. 1. Copy/move the entire /var/MailRoot directory to the new location. Make sure XMail isn't running and all the files are copied including the zero length files. (Thanks Davide) 2. Change the XMAIL_ROOT variable in your init script to XMAIL_ROOT=/yourpath/MailRoot 3. Change the MAIL_ROOT variable in the /usr/sbin/sendmail(.sh) script to MAIL_ROOT=/yourpath/MailRoot (Thanks Achim) If you want to move the MailRoot directory and for some reason these steps don't work, creating a symbolic link from the "real" Mailroot directory to /var/Mailroot is a kludgey solution, but it should also work. Why on earth do people put a script file in /usr/sbin!? The Linux/unix directory structure makes me crazy on a good day. But then I find something like this and it just puts me over the edge. Isn't it bad enough that we can find binaries in /bin, /sbin, /usr/bin, and /usr/sbin, not to mention innumerable application directory trees. Now even these directories are having script/config files placed in them. Why can't all config/init script files go in /etc?? And while I'm ranting, why call it /etc?? Why not /conf or /init?? AARRGGGHHH!! I feel much better now. Thanks for understanding. Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Davide: your method is also a convinient choice. I almost have good RDNS result now. - Original Message - From: "Davide Libenzi" <[EMAIL PROTECTED]> To: "XMail mailing list" <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 10:41 PM Subject: [xmail] Re: question about RDNS > > On Fri, 26 Sep 2003, Tracy wrote: > > > To close NetBIOS access, you need a hardwre or software firewall that can > > block the packets. You'll never be able to rip it out of Windows directly... > > IIRC, if you go in the network connection properties, advanced TCP/IP > propeties, WINS, and then Disable NETBIOS over TCP/IP should fix it. Isn't > it ? > > > > - Davide > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Xmail Administrator 0.24 released
Friday, September 26, 2003, 11:42:49 PM, you wrote: JK> A few updates to Xmail Administrator JK> see: http://www.webifi.com/xmail JK> -John JK> - JK> To unsubscribe from this list: send the line "unsubscribe xmail" in JK> the body of a message to [EMAIL PROTECTED] JK> For general help: send the line "help" in the body of a message to JK> [EMAIL PROTECTED] I have User data in user.def file in UTF-7. And in your program i see only +BBUERAQwBD0EPgQy- can your add the feature to recoding UTF-7 simbols to any codepage? (for example in win1251). -- Best regards, Dmitry Mail To: [EMAIL PROTECTED] P.S. Sorry for my bad english :( - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Francis, Thanks for your guide. I am not familer with firewall setting. So I asking you more question here.If my server is only used as POP3,SMTP,WWW server, and additionally terminal service. I plan to set up Input Filter as following: protocol: TCP(destination port: 25,110,80,3389) TCP(established) UDP(source port : 42)for dns Is that OK? and NetBIOS will not exist,right? > > - option 3 : 'BETTER' solution : install Routing and RAS (included in > windows 2k server) (minimum the routing part) > To install routing and ras, launch 'Routing and Remote access' console > manager from administrative tools > Select your server, right clic it and select 'install/configure rras' > Choose 'routing' only > When it become installed and running, in the rras mmc console, go to > 'General' in 'IP routing', you will see your connexions > Right click the internet connexion > In the 'General' tab you have two button : Input filters and Output = > filters > Select if you want 'allow all except' or 'deny all except' (it is here = > the > 'basic' functionnality, you just can't mix allow and deny, but if you = > put > good rules here, you have a perfect firewall at final setup!!) > > Even if i currently have a separate firewall running, i allway used = > this > feature to protect my exposed w2k systems (do you fully trust you = > firewall ? > is your firewall allways secure ? or don't have bugs ...) > > Francis > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: AV Filter
Hi, NM> Anyone else here using Filip Supera's XM_Fprot AV filter script??? Well, I'm probably the only user for now. I've been testing it for a few months. It has catched thousands of infected messages. As far as I know, no virus has reached any of my users mailboxes (~150 domain names) since I've been using it. It's a bash script using the on demand scanner version of F-Prot for Linux. The update script is launched every day (cron) so as to keep virus definitions up to date. I'm interested in any advice or feedback about this script. Thanks. The script is linked "FProt AV Scan" in http://www.xmailserver.org -- Fil. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: MailRoot Problems
only an idea: Did you also change MAIL_ROOT in /usr/sbin/sendmail(.sh) or does it still contain "export MAIL_ROOT=/var/MailRoot" ? - Achim > This solves part of the problem. Local mail is now dropped to the > /var/MailRoot/spool/local directory but XMail doesn't deliver it. I can > get it to work correctly if I replace the /var/MailRoot directory with a > symbolic link to the "real" MailRoot directory. Is this the best way to > solve this or is there a better way? > > On a different topic, Richard Downing is no longer maintaining the Linux > and XMail HOWTO. Does anyone here know if someone is working on updating > this HOWTO (or working on any other documentation projects for that matter)? > > Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Accepting postmaster@ even from blocked addresses
At 15:16 9/26/2003, Tracy wrote: >I've been looking over the problem of RFC compliance for postmaster@, >abuse@ and a couple of other aliases, and I'm wondering if there's an >existing configuration option that can be used to allow mail - even from >addresses in spammers.tab and spam-addresses.tab - that are addressed to >these RFC mailboxes? > >If there's not a configuration option to allow this, I guess I could go in >an modify the source - but I'm going to have a hard time figuring how to do >this, without making all the other blocking ineffectual. I suppose I could >do the checks in RCPT TO processing, and accept/reject based on that... Forgive me replying to my own message, but I've taken a look at the code and I don't see anything that would allow certain addresses to override blocking methods. So, I've taken a look through the code and through my "wish list", and the list of tests (including where the tests would be performed) that I would like the option to configure are listed below. Note: I know that the feature set for 1.x is fixed, no new features will be added - I'm planning to (eventually) modify the source of either 1.16 or 1.17 to account for all this - but I'm detailing the tests here in hopes that they might be considered for inclusion in 2.x. Each of these tests would be optional (or perhaps an option to handle groups of tests), with options to enable/disable them in server.tab, and the way I currently envision these tests working would require adding a new member variable to the SMTPS structure - FailCode - and a number of constant declarations for failure code reasons. There would also be a couple of new tab files - spam-helo.tab, spam-dns.tab, and error-override.tab - the first two of these being similar in nature to spam-addresses.tab, and the last one being a list of recipients who would receive mail without regard to test failures. The tests I would like to perform are: Connection received: IP in spammers tab --> SMTPS.FailCode |= SMTP_FAIL_IP_SPAMMER No RDNS --> SMTPS.FailCode |= SMTP_FAIL_IP_RDNS RDNS matches spam-dns.tab --> SMTPS.FailCode |= SMTP_FAIL_IP_RDNS_SPAMMER IP -> PTR -> A, IP doesn't match A --> SMTPS.FailCode |= SMTP_FAIL_IP_BADPTR IP in DNSBL --> SMTPS.FailCode |= SMTP_FAIL_IP_MAPS (probably need to store the DNSBL name, too) HELO/EHLO command: HELO name is an IP address --> SMTPS.FailCode |= SMTP_FAIL_HELO_IPADDR HELO name in spam-helo.tab --> SMTPS.FailCode |= SMTP_FAIL_HELO_SPAMMER HELO name not valid FQDN --> SMTPS.FailCode |= SMTP_FAIL_HELO_FQDN HELO name doesn't resolve --> SMTPS.FailCode |= SMTP_FAIL_HELO_DNS HELO name lookup doesn't match connected IP --> SMTPS.FailCode |= SMTP_FAIL_HELO_NOTPEER MAIL FROM command: Address == "<>" --> SMTPS.FailCode |= SMTP_FAIL_MAIL_NULL_SENDER Raw address in spam-addresses.tab --> SMTPS.FailCode |= SMTP_FAIL_MAIL_SPAMMER Address domain doesn't have MX record --> SMTPS.FailCode |= SMTP_FAIL_MAIL_MX Address domain doesn't have A record --> SMTPS.FailCode |= SMTP_FAIL_MAIL_DNS Note that the result of a previous test may, or may not, affect whether later tests are performed - for instance, if the MAIL FROM address domain has a MX record, there's no need to check for an A record. Once we get to RCPT TO:, we perform an additional check after the "Check FORWARD PATH" check, but before logging the session. This check tests the FailCode values to determine whether or not we should issue a failure code (and what kind), and additionally checks to see if the RCPT TO address is in error-override.tab (which would allow the recipient even in the case of test failure). So, what I'm looking for here is some sanity checking to see if this kind of thing seems reasonable - I know that not everyone will like every test (that's why there would be options to enable or disable various tests), but I'm looking specifically to know if there are tests here which are *completely* useless, or if I've missed something that is useful and should be included. Oh, and I know that some of these tests break (or seriously bend) RFC requirements (such as null sender and some of the HELO tests). Feel free to mention it, though...:) Anyone? Tracy - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: difference between smtpgw.tab & smtpfwd.tab
>> please could someone explain what the difference is between the 2 >> files smtpgw.tab and smtpfwd.tab. > smtpgw.tab uses the explicit SMTP routes, that might not be supported by > all MTAs. You better use smtpfwd.tab. thank you! - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: difference between smtpgw.tab & smtpfwd.tab
On Fri, 26 Sep 2003, stuart nixon wrote: > please could someone explain what the difference is between the 2 files > smtpgw.tab and smtpfwd.tab. > > am i correct in thinking that i place entries for all domains i backup > mx for (ie relay for) into one of these files? > > i have read the latest version of the server docs on the webpage but > cannot find an explanation of the differences. smtpgw.tab uses the explicit SMTP routes, that might not be supported by all MTAs. You better use smtpfwd.tab. - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] difference between smtpgw.tab & smtpfwd.tab
hello all please could someone explain what the difference is between the 2 files smtpgw.tab and smtpfwd.tab. am i correct in thinking that i place entries for all domains i backup mx for (ie relay for) into one of these files? i have read the latest version of the server docs on the webpage but cannot find an explanation of the differences. many thanks in advance stuat nixon - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Xmail 1.17 and filters
[EMAIL PROTECTED] wrote: >>When you run XMail in debug mode you should see the correct exit codes. >>My AV filter is running here constantly and I haven't seen any virus yet >>passes the filter, XMail correctly drops all infected messages. > > > Could I post you a copy of the script to here and let some of you look at it > or maybe send it to you directly > You can send it to me directly. -- Groeten, Peter -- You will not receive network message popups. --- --- Heb je een Sony Digital video camera ? --- Kijk eens op http://www.dvin.org --- Kijk ook op http://www.lindeman.org --- ICQ 22383596 --- Uptime lindeman.org - 20 days, 7 hours and 20 minutes, 0 users logged in. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Xmail 1.17 and filters
--- Peter Lindeman <[EMAIL PROTECTED]> wrote: > > > When you run XMail in debug mode you should see the correct exit codes. > My AV filter is running here constantly and I haven't seen any virus yet > passes the filter, XMail correctly drops all infected messages. > Could I post you a copy of the script to here and let some of you look at it or maybe send it to you directly - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Xmail Administrator 0.24 released
A few updates to Xmail Administrator see: http://www.webifi.com/xmail -John - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: MailRoot Problems
6. tried: echo test message | mail [EMAIL PROTECTED] got back: /var/MailRoot/spool/temp/1064598833000.18232.NS2: No such file or directory Conclusion: I'm still doing something wrong. For some reason local mail is still going to the old directory even though external mail is routed correctly to the new folders. Suggestions anyone? >>># ls /var/MailRoot/spool >>> >>> >>> >>> >># ls /var/MailRoot/spool >>ls: /var/MailRoot/spool: No such file or directory >> >>I moved the whole thing to /data so it's not there. :-) >> >> > >spool , spool/local and spool/temp must be there. > > > This solves part of the problem. Local mail is now dropped to the /var/MailRoot/spool/local directory but XMail doesn't deliver it. I can get it to work correctly if I replace the /var/MailRoot directory with a symbolic link to the "real" MailRoot directory. Is this the best way to solve this or is there a better way? On a different topic, Richard Downing is no longer maintaining the Linux and XMail HOWTO. Does anyone here know if someone is working on updating this HOWTO (or working on any other documentation projects for that matter)? Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Accepting postmaster@ even from blocked addresses
Greetings, I've been looking over the problem of RFC compliance for postmaster@, abuse@ and a couple of other aliases, and I'm wondering if there's an existing configuration option that can be used to allow mail - even from addresses in spammers.tab and spam-addresses.tab - that are addressed to these RFC mailboxes? If there's not a configuration option to allow this, I guess I could go in an modify the source - but I'm going to have a hard time figuring how to do this, without making all the other blocking ineffectual. I suppose I could do the checks in RCPT TO processing, and accept/reject based on that... Any ideas, suggestions? Tracy - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: MailRoot Problems
On Fri, 26 Sep 2003, Jeffrey Laramie wrote: > > >>6. tried: echo test message | mail [EMAIL PROTECTED] > >>got back: /var/MailRoot/spool/temp/1064598833000.18232.NS2: No such file > >>or directory > >> > >>Conclusion: I'm still doing something wrong. For some reason local mail > >>is still going to the old directory even though external mail is routed > >>correctly to the new folders. Suggestions anyone? > >> > >> > > > ># ls /var/MailRoot/spool > > > > > # ls /var/MailRoot/spool > ls: /var/MailRoot/spool: No such file or directory > > I moved the whole thing to /data so it's not there. :-) spool , spool/local and spool/temp must be there. - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: MailRoot Problems
>>6. tried: echo test message | mail [EMAIL PROTECTED] >>got back: /var/MailRoot/spool/temp/1064598833000.18232.NS2: No such file >>or directory >> >>Conclusion: I'm still doing something wrong. For some reason local mail >>is still going to the old directory even though external mail is routed >>correctly to the new folders. Suggestions anyone? >> >> > ># ls /var/MailRoot/spool > > # ls /var/MailRoot/spool ls: /var/MailRoot/spool: No such file or directory I moved the whole thing to /data so it's not there. :-) Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: MailRoot Problems
On Fri, 26 Sep 2003, Jeffrey Laramie wrote: > Hi All, > > Quick summary of events to date: > > 1. Needed to move MailRoot directory due to disk space considerations. > Moved to /data/MailRoot > > 2. Changed env variable MailRoot according to manual. CtrlClnt couldn't > find config file at new location. > > 3. Got advice from Davide (Thanks!), retried = success. Mail works = > everybody happy. > > 4. Started getting bounced messages addressed to root. Changed crontab > MAILTO=root to [EMAIL PROTECTED] > > 5. Started getting bounced messages addressed to > [EMAIL PROTECTED] Hmmm > > 6. tried: echo test message | mail [EMAIL PROTECTED] > got back: /var/MailRoot/spool/temp/1064598833000.18232.NS2: No such file > or directory > > Conclusion: I'm still doing something wrong. For some reason local mail > is still going to the old directory even though external mail is routed > correctly to the new folders. Suggestions anyone? # ls /var/MailRoot/spool - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] MailRoot Problems
Hi All, Quick summary of events to date: 1. Needed to move MailRoot directory due to disk space considerations. Moved to /data/MailRoot 2. Changed env variable MailRoot according to manual. CtrlClnt couldn't find config file at new location. 3. Got advice from Davide (Thanks!), retried = success. Mail works = everybody happy. 4. Started getting bounced messages addressed to root. Changed crontab MAILTO=root to [EMAIL PROTECTED] 5. Started getting bounced messages addressed to [EMAIL PROTECTED] Hmmm 6. tried: echo test message | mail [EMAIL PROTECTED] got back: /var/MailRoot/spool/temp/1064598833000.18232.NS2: No such file or directory Conclusion: I'm still doing something wrong. For some reason local mail is still going to the old directory even though external mail is routed correctly to the new folders. Suggestions anyone? Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: AW: Re: announce: AttachmentSplitter add-on for filters using F-Prot for DOS
www.atinet.com.br/xmail AV Filter and Content Filter are using mimeqp ps: the source code is inside contentfilter.zip Edinilson -- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br - Original Message - From: "Harald Schneider" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 1:41 PM Subject: [xmail] AW: Re: announce: AttachmentSplitter add-on for filters using F-Prot for DOS Could you please post the link to mimeqp ? THanks! --Harald - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Outbound Filter Scripts
On Fri, 26 Sep 2003, Edinilson J. Santos wrote: > > We are a medium ISP hosting +- 1200 domains and +- 12000 accounts using > XMail Win32. > I'm using the following parameters: > -Mr 24 -PX 512 -Sl -SX 256 -Sr 1000 -Qn 256 -Qr 16 -CX 64 -Ln 256 > > Here we have inbound filters (av, spam, etc) and outbound filters that just > verify if the from account really exists (very small script). > > The problem is: sometimes hundreds of outbound scripts are started at the > same time. > If I change SX from 256 to 128 (for example) users tell us that MUA returns: > Server is too busy, try again later... > > Is there a way to limit these situation ? Reduce -Qn - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Xmail 1.17 and filters
Nick Marino wrote: > Well there is something definitely wrong with Xmail 1.17 and the way it > handles filters. > > Ever since I upgraded to version 1.17 my AV filter only caught infected > messages occasionaly and even when it did Xmail 1.17 still let the messages > go through to the user. You definitly are doing something wrong in your filter. > I just downgraded back to 1.16 and now it catches and stops every infected > message that comes through the system. > > I ran Xmail 1.17 in debug mode and it showed every time that the filter was > returning 0 to it so it let the messages go through. This wasnt the case as > even though the script exited with return code 4 Xmail 1.17 showed in debug > mode that the filter was always returning 0. > Nothing had been changed in the AV script between version 1.16 and 1.17 > upgrades. When you run XMail in debug mode you should see the correct exit codes. My AV filter is running here constantly and I haven't seen any virus yet passes the filter, XMail correctly drops all infected messages. > Does anyone know of something different that should be done to make 1.17 > handle scripts differently than in 1.16. > > Going back to 1.16 fixed the problem. > > Also is there a way to see filters running in 1.16 in debug mode? I noticed > in 1.17 debug mode displays the filters each time they are run but when > running 1.16 in debug mode it doesn't. Unless that is a new feature of 1.17? Yes it is. -- Groeten, Peter -- A response keyname in the device .INF file is not in the expected format. --- --- Heb je een Sony Digital video camera ? --- Kijk eens op http://www.dvin.org --- Kijk ook op http://www.lindeman.org --- ICQ 22383596 --- Uptime lindeman.org - 20 days, 3 hours and 35 minutes, 0 users logged in. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Xmail 1.17 and filters
Nick Marino wrote: >Sasa Stupar wrote: > > >>Well I am using 1.17 with AV filter from Peter Lindemann and I don't >>have any problems with it. It cacthes 99.9% of infected messages with >>all 3 av programs (f-prot, antivir ,clamav). >> >>- >> >> > >Did you use any special arguments when you compiled version 1.17 and what >platform are you running xmail on? > >I am thinking that when I compiled xmail 1.17 I left someting out. > > > >--- >avast! Antivirus: Outbound message clean. >Virus Database (VPS): 9/26/2003 >Tested on: 9/26/2003 12:03:36 PM >avast! is copyright (c) 2000-2003 ALWIL Software. >http://www.avast.com > > > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] > > > > No I didn't use any switches, running on linux RH8. - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] AV Filter
Anyone else here using Filip Supera's XM_Fprot AV filter script??? --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 9/26/2003 Tested on: 9/26/2003 12:06:04 PM avast! is copyright (c) 2000-2003 ALWIL Software. http://www.avast.com - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Xmail 1.17 and filters
Sasa Stupar wrote: > Well I am using 1.17 with AV filter from Peter Lindemann and I don't > have any problems with it. It cacthes 99.9% of infected messages with > all 3 av programs (f-prot, antivir ,clamav). > > - Did you use any special arguments when you compiled version 1.17 and what platform are you running xmail on? I am thinking that when I compiled xmail 1.17 I left someting out. --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 9/26/2003 Tested on: 9/26/2003 12:03:36 PM avast! is copyright (c) 2000-2003 ALWIL Software. http://www.avast.com - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Xmail 1.17 and filters
Nick Marino wrote: >Well there is something definitely wrong with Xmail 1.17 and the way it >handles filters. > >Ever since I upgraded to version 1.17 my AV filter only caught infected >messages occasionaly and even when it did Xmail 1.17 still let the messages >go through to the user. > >I just downgraded back to 1.16 and now it catches and stops every infected >message that comes through the system. > >I ran Xmail 1.17 in debug mode and it showed every time that the filter was >returning 0 to it so it let the messages go through. This wasnt the case as >even though the script exited with return code 4 Xmail 1.17 showed in debug >mode that the filter was always returning 0. >Nothing had been changed in the AV script between version 1.16 and 1.17 >upgrades. > >Does anyone know of something different that should be done to make 1.17 >handle scripts differently than in 1.16. > >Going back to 1.16 fixed the problem. > >Also is there a way to see filters running in 1.16 in debug mode? I noticed >in 1.17 debug mode displays the filters each time they are run but when >running 1.16 in debug mode it doesn't. Unless that is a new feature of 1.17? > > > >--- >avast! Antivirus: Outbound message clean. >Virus Database (VPS): 9/26/2003 >Tested on: 9/26/2003 11:54:36 AM >avast! is copyright (c) 2000-2003 ALWIL Software. >http://www.avast.com > > > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] > > > > Well I am using 1.17 with AV filter from Peter Lindemann and I don't have any problems with it. It cacthes 99.9% of infected messages with all 3 av programs (f-prot, antivir ,clamav). - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Xmail 1.17 and filters
Well there is something definitely wrong with Xmail 1.17 and the way it handles filters. Ever since I upgraded to version 1.17 my AV filter only caught infected messages occasionaly and even when it did Xmail 1.17 still let the messages go through to the user. I just downgraded back to 1.16 and now it catches and stops every infected message that comes through the system. I ran Xmail 1.17 in debug mode and it showed every time that the filter was returning 0 to it so it let the messages go through. This wasnt the case as even though the script exited with return code 4 Xmail 1.17 showed in debug mode that the filter was always returning 0. Nothing had been changed in the AV script between version 1.16 and 1.17 upgrades. Does anyone know of something different that should be done to make 1.17 handle scripts differently than in 1.16. Going back to 1.16 fixed the problem. Also is there a way to see filters running in 1.16 in debug mode? I noticed in 1.17 debug mode displays the filters each time they are run but when running 1.16 in debug mode it doesn't. Unless that is a new feature of 1.17? --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 9/26/2003 Tested on: 9/26/2003 11:54:36 AM avast! is copyright (c) 2000-2003 ALWIL Software. http://www.avast.com - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] AW: Re: announce: AttachmentSplitter add-on for filters using F-Prot for DOS
Could you please post the link to mimeqp ? THanks! --Harald - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: SV: Outbound Filter Scripts
Monitoring my system it looks like the following: Messages are in queue but for some reason XMail could not delivery those messages. So, when some internal routine is triggered (queue retries, etc) a "smtp avalanche" is causing the problem. I don't know exactly, just thoughts. Edinilson -- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br - Original Message - From: "Michail Tchoudinov" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 12:27 PM Subject: [xmail] SV: Outbound Filter Scripts I remember the same situation when one of my scripts sends response mail through the same XMail server.=20 Because of bad script logic this scripts created mail triggered the same script again and so on... It was like an avalanche. About a hundred of mails per second as a consequence. Bu now I know that XMail is really stable server :) and one hundred = small mails per second is OK for XMail. Mikhail -Opprinnelig melding- Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] = P=E5 vegne av Edinilson J. Santos Sendt: 26. september 2003 17:13 Til: [EMAIL PROTECTED] Emne: [xmail] Outbound Filter Scripts Viktighet: H=F8y We are a medium ISP hosting +- 1200 domains and +- 12000 accounts using XMail Win32. I'm using the following parameters: -Mr 24 -PX 512 -Sl -SX 256 -Sr 1000 -Qn 256 -Qr 16 -CX 64 -Ln 256 Here we have inbound filters (av, spam, etc) and outbound filters that = just verify if the from account really exists (very small script). The problem is: sometimes hundreds of outbound scripts are started at = the same time. If I change SX from 256 to 128 (for example) users tell us that MUA = returns: Server is too busy, try again later... Is there a way to limit these situation ? ps: the problem above doesn't happens with inbound filters Thank you Edinilson -- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: announce: AttachmentSplitter add-on for filters using F-Prot for DOS
In the new version of the AV Filter I'm using mimeqp to de-mime some strange messages formats. But I will test your script and recommend it in future releases of AV Filter. Great job! Regards Edinilson -- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br - Original Message - From: "Roman Dusek" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 12:15 PM Subject: [xmail] announce: AttachmentSplitter add-on for filters using F-Prot for DOS Hi, in some cases, F-Prot for DOS isn't able to parse message attachments from XMail message file and thus isn't able to locate virus inside. Especially this happens on Swen virus lately. That's why I have developed the script that splits the message into several files, each containing one attachment. Running F-Prot for DOS on these files, viruses are detected successfully. You can download the script and find more info on http://www.iclub.cz/xmail/?attachmentsplitter The script was developed to be used with AV filter by Edinilson ( http://www.atinet.com.br/xmail ). Edinilson: please feel free to integrate the script with your AV Filter and distribute it. Roman - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Hmm... W2K have intrinsic basic 'firewall' fonctionnalities to block or accept = ANY protocol and PORTS you want without ANY add-in add-on !! Three options to do that (I prefer last, as rras make network = connexions esaier to manage) - option 1 : goto tcp/ip setting, select options tabs, click tcp/ip filtering, click properties and enter authorised protos (here you have to know ALL protocols to pass in advance ...) - option 2 : using ip/sec features to control traffic (you don't really = use ipsec but can filter traffic with its rules (don't remember microsoft = kb article to do this, but i know its works, tested in labs ...) - option 3 : 'BETTER' solution : install Routing and RAS (included in windows 2k server) (minimum the routing part) To install routing and ras, launch 'Routing and Remote access' console manager from administrative tools Select your server, right clic it and select 'install/configure rras' Choose 'routing' only When it become installed and running, in the rras mmc console, go to 'General' in 'IP routing', you will see your connexions Right click the internet connexion In the 'General' tab you have two button : Input filters and Output = filters Select if you want 'allow all except' or 'deny all except' (it is here = the 'basic' functionnality, you just can't mix allow and deny, but if you = put good rules here, you have a perfect firewall at final setup!!) Even if i currently have a separate firewall running, i allway used = this feature to protect my exposed w2k systems (do you fully trust you = firewall ? is your firewall allways secure ? or don't have bugs ...) Francis -Message d'origine- De : Tracy [mailto:[EMAIL PROTECTED] Envoy=E9 : vendredi 26 septembre 2003 16:40 =C0 : [EMAIL PROTECTED] Objet : [xmail] Re: question about RDNS It does reduce it, but it doesn't stop it altogether... It's very = pervasive=20 in the OS At 10:41 9/26/2003, Davide Libenzi wrote: >On Fri, 26 Sep 2003, Tracy wrote: > > > To close NetBIOS access, you need a hardwre or software firewall = that can > > block the packets. You'll never be able to rip it out of Windows=20 > directly... > >IIRC, if you go in the network connection properties, advanced TCP/IP >propeties, WINS, and then Disable NETBIOS over TCP/IP should fix it. = Isn't >it ? > > > >- Davide > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] SV: Outbound Filter Scripts
I remember the same situation when one of my scripts sends response mail through the same XMail server.=20 Because of bad script logic this scripts created mail triggered the same script again and so on... It was like an avalanche. About a hundred of mails per second as a consequence. Bu now I know that XMail is really stable server :) and one hundred = small mails per second is OK for XMail. Mikhail -Opprinnelig melding- Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] = P=E5 vegne av Edinilson J. Santos Sendt: 26. september 2003 17:13 Til: [EMAIL PROTECTED] Emne: [xmail] Outbound Filter Scripts Viktighet: H=F8y We are a medium ISP hosting +- 1200 domains and +- 12000 accounts using XMail Win32. I'm using the following parameters: -Mr 24 -PX 512 -Sl -SX 256 -Sr 1000 -Qn 256 -Qr 16 -CX 64 -Ln 256 Here we have inbound filters (av, spam, etc) and outbound filters that = just verify if the from account really exists (very small script). The problem is: sometimes hundreds of outbound scripts are started at = the same time. If I change SX from 256 to 128 (for example) users tell us that MUA = returns: Server is too busy, try again later... Is there a way to limit these situation ? ps: the problem above doesn't happens with inbound filters Thank you Edinilson -- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] AW: announce: AttachmentSplitter add-on for filters using F-Prot for DOS
Thanks for your contrib. There is also a tool available on several platorms, called MPACK: http://www.pcc.com/~jay/src/mail_news/mpack-1.5/ORIGINALS/ It decodes and splits a wide variety of MIME mails.=20 But with a script, you are more flexible concerning modifications ;-) --Harald > -Urspr=FCngliche Nachricht- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auftrag von Roman Dusek > Gesendet: Freitag, 26. September 2003 17:15 > An: [EMAIL PROTECTED] > Betreff: [xmail] announce: AttachmentSplitter add-on for=20 > filters using F-Prot for DOS >=20 >=20 >=20 > Hi, >=20 > in some cases, F-Prot for DOS isn't able to parse message=20 > attachments from=20 > XMail message file and thus isn't able to locate virus=20 > inside. Especially=20 > this happens on Swen virus lately. >=20 > That's why I have developed the script that splits the=20 > message into several=20 > files, each containing one attachment. Running F-Prot for DOS=20 > on these=20 > files, viruses are detected successfully. >=20 > You can download the script and find more info on=20 > http://www.iclub.cz/xmail/?attachmentsplitter >=20 > The script was developed to be used with AV filter by Edinilson (=20 > http://www.atinet.com.br/xmail ). Edinilson: please feel free=20 > to integrate=20 > the script with your AV Filter and distribute it. >=20 > Roman >=20 > - > To unsubscribe from this list: send the line "unsubscribe=20 > xmail" in the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a=20 > message to [EMAIL PROTECTED] >=20 - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] announce: AttachmentSplitter add-on for filters using F-Prot for DOS
Hi, in some cases, F-Prot for DOS isn't able to parse message attachments from XMail message file and thus isn't able to locate virus inside. Especially this happens on Swen virus lately. That's why I have developed the script that splits the message into several files, each containing one attachment. Running F-Prot for DOS on these files, viruses are detected successfully. You can download the script and find more info on http://www.iclub.cz/xmail/?attachmentsplitter The script was developed to be used with AV filter by Edinilson ( http://www.atinet.com.br/xmail ). Edinilson: please feel free to integrate the script with your AV Filter and distribute it. Roman - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Outbound Filter Scripts
We are a medium ISP hosting +- 1200 domains and +- 12000 accounts using XMail Win32. I'm using the following parameters: -Mr 24 -PX 512 -Sl -SX 256 -Sr 1000 -Qn 256 -Qr 16 -CX 64 -Ln 256 Here we have inbound filters (av, spam, etc) and outbound filters that just verify if the from account really exists (very small script). The problem is: sometimes hundreds of outbound scripts are started at the same time. If I change SX from 256 to 128 (for example) users tell us that MUA returns: Server is too busy, try again later... Is there a way to limit these situation ? ps: the problem above doesn't happens with inbound filters Thank you Edinilson -- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
It does reduce it, but it doesn't stop it altogether... It's very pervasive in the OS At 10:41 9/26/2003, Davide Libenzi wrote: >On Fri, 26 Sep 2003, Tracy wrote: > > > To close NetBIOS access, you need a hardwre or software firewall that can > > block the packets. You'll never be able to rip it out of Windows > directly... > >IIRC, if you go in the network connection properties, advanced TCP/IP >propeties, WINS, and then Disable NETBIOS over TCP/IP should fix it. Isn't >it ? > > > >- Davide > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
On Fri, 26 Sep 2003, Tracy wrote: > To close NetBIOS access, you need a hardwre or software firewall that can > block the packets. You'll never be able to rip it out of Windows directly... IIRC, if you go in the network connection properties, advanced TCP/IP propeties, WINS, and then Disable NETBIOS over TCP/IP should fix it. Isn't it ? - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
To close NetBIOS access, you need a hardwre or software firewall that can block the packets. You'll never be able to rip it out of Windows directly... At 10:09 9/26/2003, jhon wong wrote: >Tracy, >Thank you. I know the truth now. >As a programmer,I don't like microsoft really. >One day in future,I will use linux to run mail server. >And a question more is how to close NETBIOS on win2000? >I had stop NETBIOS helper service. > >Best regards, >Jhon > > > >- Original Message - >From: "Tracy" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, September 26, 2003 9:42 PM >Subject: [xmail] Re: question about RDNS > > > > "getnameinfo" is new with Windows XP - it is not supported (as far as I >can > > tell) on older platforms (such as Windows 2000 or Windows 9x). > > > > MSDN lists this function as being defined in the ws2tcpip.h file - as far > > as I know, this is only available in the January 2003 or later version of > > the Platform SDK. > > > > Because this function is only supported for Windows XP, it is not >something > > that can be targeted in a package such as XMail, due to the wide level of > > support required. > > > > Also, it is a very good example of Microsoft breaking things for their own > > purposes - gethostbyaddr has been around since (IIRC) the original >Berkeley > > Sockets implementation. Just because Microsoft decided to add "special" > > functionality to it for Windows (ie. NetBIOS name resolution) doesn't mean > > that it was right for this to be done - all it does is force programmers >to > > break code compatibility across OS platforms by requiring a Windows > > specific call (getnameinfo) to avoid NetBIOS resolution. > > > > I suspect you'll continue to see gethostbyaddr used in Windows code for a > > long time to come. > > > > BTW, because of the insecure nature of NetBIOS, many companies block > > NetBIOS at their firewalls. You may want to consider this on your network, > > as well - there are many Windows exploits that use NetBIOS > > > > At 09:42 9/26/2003, jhon wong wrote: > > > > >Hi Tracy, > > > > > > You are right. I trid the nbtstat -A 218.246.127.68, > > >it really return NETBIOS name. > > > > > > Yes,in windows platform,"gethostbyaddr" is adapted to > > >NETBIOS. And microsoft advise to use "getnameinfo" > > >instead of "gethostbyaddr". please see: > > > > > > >http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winsock/wi >n > > >sock/gethostbyaddr_2.asp > > > > > > But I can't find "getnameinfo" in at all > > >with vc6.0.I don't know why. > > > > > > Best regards, > > > Jhon > > > > > > > > >- Original Message - > > >From: "Tracy" <[EMAIL PROTECTED]> > > >To: <[EMAIL PROTECTED]> > > >Sent: Friday, September 26, 2003 9:07 PM > > >Subject: [xmail] Re: question about RDNS > > > > > > > > > > You're running Windows, yes? If so, this is "by design". If Windows is >not > > > > able to resolve an address by finding a PTR record, it attempts to >resolve > > > > the address using NetBIOS - to do this, it issues a NetBIOS request to >the > > > > machine in question and listens for a response. Assuming no firewalls >get > > > > in the way, the machine will answer that request with it's "computer >name" > > > > (the locally assigned name that was created during the installation of > > > > Windows). > > > > > > > > Try using: > > > > > > > > nbtstat -A 211.149.111.76 > > > > > > > > and see what comes back (note that the -A must be a capital A, not a >lower > > > > case a). I'm guessing that the name you are seeing in your mail logs >will > > > > show up in the output from that command. (I'd try it here, to give you > > > > sample output, but I have NetBIOS blocked at my border router.) > > > > > > > > At 09:13 9/26/2003, jhon wong wrote: > > > > > > > > > > > > >Hi,Jeff: > > > > > > > > > >According to my knowledge, when gethostbyname > > > > >execute RDNS result,it should return FQDN result > > > > >if ip has PTR. > > > > >But I find that sometimes non FQDN result > > > > >is returned and in fact the ip hasn't PTR at all. > > > > >That is the problem. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Hi Davide, > > > > > > > > > > > > Could his problem have anything to do with Verisign's new policy >of > > > > > > redirecting lookups for bogus domains to one of their sites? > > > > > > > > > > > > Jeff > > > > > > > > > > > > > > > > > > - > > > > > > To unsubscribe from this list: send the line "unsubscribe xmail" >in > > > > > > the body of a message to [EMAIL PROTECTED] > > > > > > For general help: send the line "help" in the body of a message to > > > > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > >- > > > > >To unsubscribe from this list: send the line "unsubscribe xmail" in > > > > >the body of a message to [EMAIL PROTECTED] > > > > >For general help: send the line "help" in the body of a message to > > > > >[EMAIL PROTECTED] > > > > > > > > > > > >
[xmail] Re: question about RDNS
Thank you Shawn. I will try to download a new one. - Original Message - From: "Shawn Anderson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 9:43 PM Subject: [xmail] Re: question about RDNS > > Try the one in the current SDK. > > Shawn > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of jhon wong > Sent: Friday, September 26, 2003 9:42 AM > To: [EMAIL PROTECTED] > Subject: [xmail] Re: question about RDNS > > Hi Tracy, > > You are right. I trid the nbtstat -A 218.246.127.68, it really return > NETBIOS name. > > Yes,in windows platform,"gethostbyaddr" is adapted to NETBIOS. And > microsoft advise to use "getnameinfo" > instead of "gethostbyaddr". please see: > > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winsock/win > sock/gethostbyaddr_2.asp > > But I can't find "getnameinfo" in at all with vc6.0.I don't > know why. > > Best regards, > Jhon > > > - Original Message - > From: "Tracy" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, September 26, 2003 9:07 PM > Subject: [xmail] Re: question about RDNS > > > > You're running Windows, yes? If so, this is "by design". If Windows is > > not able to resolve an address by finding a PTR record, it attempts to > > resolve the address using NetBIOS - to do this, it issues a NetBIOS > > request to the machine in question and listens for a response. > > Assuming no firewalls get in the way, the machine will answer that request > with it's "computer name" > > (the locally assigned name that was created during the installation of > > Windows). > > > > Try using: > > > > nbtstat -A 211.149.111.76 > > > > and see what comes back (note that the -A must be a capital A, not a > > lower case a). I'm guessing that the name you are seeing in your mail > > logs will show up in the output from that command. (I'd try it here, > > to give you sample output, but I have NetBIOS blocked at my border > > router.) > > > > At 09:13 9/26/2003, jhon wong wrote: > > > > > > >Hi,Jeff: > > > > > >According to my knowledge, when gethostbyname execute RDNS > > >result,it should return FQDN result if ip has PTR. > > >But I find that sometimes non FQDN result is returned and in fact > > >the ip hasn't PTR at all. > > >That is the problem. > > > > > > > > > > > > > > > > > > Hi Davide, > > > > > > > > Could his problem have anything to do with Verisign's new policy > > > > of redirecting lookups for bogus domains to one of their sites? > > > > > > > > Jeff > > > > > > > > > > > > - > > > > To unsubscribe from this list: send the line "unsubscribe xmail" > > > > in the body of a message to [EMAIL PROTECTED] For general > > > > help: send the line "help" in the body of a message to > > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > >- > > >To unsubscribe from this list: send the line "unsubscribe xmail" in > > >the body of a message to [EMAIL PROTECTED] For general help: > > >send the line "help" in the body of a message to > > >[EMAIL PROTECTED] > > > > > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] For general help: > > send the line "help" in the body of a message to > > [EMAIL PROTECTED] > > > > > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in the body > of a message to [EMAIL PROTECTED] For general help: send the line > "help" in the body of a message to [EMAIL PROTECTED] > > > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Tracy, Thank you. I know the truth now. As a programmer,I don't like microsoft really. One day in future,I will use linux to run mail server. And a question more is how to close NETBIOS on win2000? I had stop NETBIOS helper service. Best regards, Jhon - Original Message - From: "Tracy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 9:42 PM Subject: [xmail] Re: question about RDNS > "getnameinfo" is new with Windows XP - it is not supported (as far as I can > tell) on older platforms (such as Windows 2000 or Windows 9x). > > MSDN lists this function as being defined in the ws2tcpip.h file - as far > as I know, this is only available in the January 2003 or later version of > the Platform SDK. > > Because this function is only supported for Windows XP, it is not something > that can be targeted in a package such as XMail, due to the wide level of > support required. > > Also, it is a very good example of Microsoft breaking things for their own > purposes - gethostbyaddr has been around since (IIRC) the original Berkeley > Sockets implementation. Just because Microsoft decided to add "special" > functionality to it for Windows (ie. NetBIOS name resolution) doesn't mean > that it was right for this to be done - all it does is force programmers to > break code compatibility across OS platforms by requiring a Windows > specific call (getnameinfo) to avoid NetBIOS resolution. > > I suspect you'll continue to see gethostbyaddr used in Windows code for a > long time to come. > > BTW, because of the insecure nature of NetBIOS, many companies block > NetBIOS at their firewalls. You may want to consider this on your network, > as well - there are many Windows exploits that use NetBIOS > > At 09:42 9/26/2003, jhon wong wrote: > > >Hi Tracy, > > > > You are right. I trid the nbtstat -A 218.246.127.68, > >it really return NETBIOS name. > > > > Yes,in windows platform,"gethostbyaddr" is adapted to > >NETBIOS. And microsoft advise to use "getnameinfo" > >instead of "gethostbyaddr". please see: > > > >http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winsock/wi n > >sock/gethostbyaddr_2.asp > > > > But I can't find "getnameinfo" in at all > >with vc6.0.I don't know why. > > > > Best regards, > > Jhon > > > > > >- Original Message - > >From: "Tracy" <[EMAIL PROTECTED]> > >To: <[EMAIL PROTECTED]> > >Sent: Friday, September 26, 2003 9:07 PM > >Subject: [xmail] Re: question about RDNS > > > > > > > You're running Windows, yes? If so, this is "by design". If Windows is not > > > able to resolve an address by finding a PTR record, it attempts to resolve > > > the address using NetBIOS - to do this, it issues a NetBIOS request to the > > > machine in question and listens for a response. Assuming no firewalls get > > > in the way, the machine will answer that request with it's "computer name" > > > (the locally assigned name that was created during the installation of > > > Windows). > > > > > > Try using: > > > > > > nbtstat -A 211.149.111.76 > > > > > > and see what comes back (note that the -A must be a capital A, not a lower > > > case a). I'm guessing that the name you are seeing in your mail logs will > > > show up in the output from that command. (I'd try it here, to give you > > > sample output, but I have NetBIOS blocked at my border router.) > > > > > > At 09:13 9/26/2003, jhon wong wrote: > > > > > > > > > >Hi,Jeff: > > > > > > > >According to my knowledge, when gethostbyname > > > >execute RDNS result,it should return FQDN result > > > >if ip has PTR. > > > >But I find that sometimes non FQDN result > > > >is returned and in fact the ip hasn't PTR at all. > > > >That is the problem. > > > > > > > > > > > > > > > > > > > > > > > Hi Davide, > > > > > > > > > > Could his problem have anything to do with Verisign's new policy of > > > > > redirecting lookups for bogus domains to one of their sites? > > > > > > > > > > Jeff > > > > > > > > > > > > > > > - > > > > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > > > > the body of a message to [EMAIL PROTECTED] > > > > > For general help: send the line "help" in the body of a message to > > > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > >- > > > >To unsubscribe from this list: send the line "unsubscribe xmail" in > > > >the body of a message to [EMAIL PROTECTED] > > > >For general help: send the line "help" in the body of a message to > > > >[EMAIL PROTECTED] > > > > > > > > > - > > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > > the body of a message to [EMAIL PROTECTED] > > > For general help: send the line "help" in the body of a message to > > > [EMAIL PROTECTED] > > > > > > > > > > > >- > >To unsubscribe from this list: send the line "unsubscribe xmail" in > >the body of a message to [EMAIL PROTECTED] > >For general help: send the line "help" in the body of a message to > >[EMAIL PROTECTED
[xmail] Re: question about RDNS
"getnameinfo" is new with Windows XP - it is not supported (as far as I can tell) on older platforms (such as Windows 2000 or Windows 9x). MSDN lists this function as being defined in the ws2tcpip.h file - as far as I know, this is only available in the January 2003 or later version of the Platform SDK. Because this function is only supported for Windows XP, it is not something that can be targeted in a package such as XMail, due to the wide level of support required. Also, it is a very good example of Microsoft breaking things for their own purposes - gethostbyaddr has been around since (IIRC) the original Berkeley Sockets implementation. Just because Microsoft decided to add "special" functionality to it for Windows (ie. NetBIOS name resolution) doesn't mean that it was right for this to be done - all it does is force programmers to break code compatibility across OS platforms by requiring a Windows specific call (getnameinfo) to avoid NetBIOS resolution. I suspect you'll continue to see gethostbyaddr used in Windows code for a long time to come. BTW, because of the insecure nature of NetBIOS, many companies block NetBIOS at their firewalls. You may want to consider this on your network, as well - there are many Windows exploits that use NetBIOS At 09:42 9/26/2003, jhon wong wrote: >Hi Tracy, > > You are right. I trid the nbtstat -A 218.246.127.68, >it really return NETBIOS name. > > Yes,in windows platform,"gethostbyaddr" is adapted to >NETBIOS. And microsoft advise to use "getnameinfo" >instead of "gethostbyaddr". please see: > >http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winsock/win >sock/gethostbyaddr_2.asp > > But I can't find "getnameinfo" in at all >with vc6.0.I don't know why. > > Best regards, > Jhon > > >- Original Message - >From: "Tracy" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, September 26, 2003 9:07 PM >Subject: [xmail] Re: question about RDNS > > > > You're running Windows, yes? If so, this is "by design". If Windows is not > > able to resolve an address by finding a PTR record, it attempts to resolve > > the address using NetBIOS - to do this, it issues a NetBIOS request to the > > machine in question and listens for a response. Assuming no firewalls get > > in the way, the machine will answer that request with it's "computer name" > > (the locally assigned name that was created during the installation of > > Windows). > > > > Try using: > > > > nbtstat -A 211.149.111.76 > > > > and see what comes back (note that the -A must be a capital A, not a lower > > case a). I'm guessing that the name you are seeing in your mail logs will > > show up in the output from that command. (I'd try it here, to give you > > sample output, but I have NetBIOS blocked at my border router.) > > > > At 09:13 9/26/2003, jhon wong wrote: > > > > > > >Hi,Jeff: > > > > > >According to my knowledge, when gethostbyname > > >execute RDNS result,it should return FQDN result > > >if ip has PTR. > > >But I find that sometimes non FQDN result > > >is returned and in fact the ip hasn't PTR at all. > > >That is the problem. > > > > > > > > > > > > > > > > > > Hi Davide, > > > > > > > > Could his problem have anything to do with Verisign's new policy of > > > > redirecting lookups for bogus domains to one of their sites? > > > > > > > > Jeff > > > > > > > > > > > > - > > > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > > > the body of a message to [EMAIL PROTECTED] > > > > For general help: send the line "help" in the body of a message to > > > > [EMAIL PROTECTED] > > > > > > > > > > > > > > > > >- > > >To unsubscribe from this list: send the line "unsubscribe xmail" in > > >the body of a message to [EMAIL PROTECTED] > > >For general help: send the line "help" in the body of a message to > > >[EMAIL PROTECTED] > > > > > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] > > For general help: send the line "help" in the body of a message to > > [EMAIL PROTECTED] > > > > > > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Try the one in the current SDK. Shawn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of jhon wong Sent: Friday, September 26, 2003 9:42 AM To: [EMAIL PROTECTED] Subject: [xmail] Re: question about RDNS Hi Tracy, You are right. I trid the nbtstat -A 218.246.127.68, it really return NETBIOS name. Yes,in windows platform,"gethostbyaddr" is adapted to NETBIOS. And microsoft advise to use "getnameinfo" instead of "gethostbyaddr". please see: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winsock/win sock/gethostbyaddr_2.asp But I can't find "getnameinfo" in at all with vc6.0.I don't know why. Best regards, Jhon - Original Message - From: "Tracy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 9:07 PM Subject: [xmail] Re: question about RDNS > You're running Windows, yes? If so, this is "by design". If Windows is > not able to resolve an address by finding a PTR record, it attempts to > resolve the address using NetBIOS - to do this, it issues a NetBIOS > request to the machine in question and listens for a response. > Assuming no firewalls get in the way, the machine will answer that request with it's "computer name" > (the locally assigned name that was created during the installation of > Windows). > > Try using: > > nbtstat -A 211.149.111.76 > > and see what comes back (note that the -A must be a capital A, not a > lower case a). I'm guessing that the name you are seeing in your mail > logs will show up in the output from that command. (I'd try it here, > to give you sample output, but I have NetBIOS blocked at my border > router.) > > At 09:13 9/26/2003, jhon wong wrote: > > > >Hi,Jeff: > > > >According to my knowledge, when gethostbyname execute RDNS > >result,it should return FQDN result if ip has PTR. > >But I find that sometimes non FQDN result is returned and in fact > >the ip hasn't PTR at all. > >That is the problem. > > > > > > > > > > > > > Hi Davide, > > > > > > Could his problem have anything to do with Verisign's new policy > > > of redirecting lookups for bogus domains to one of their sites? > > > > > > Jeff > > > > > > > > > - > > > To unsubscribe from this list: send the line "unsubscribe xmail" > > > in the body of a message to [EMAIL PROTECTED] For general > > > help: send the line "help" in the body of a message to > > > [EMAIL PROTECTED] > > > > > > > > > > > >- > >To unsubscribe from this list: send the line "unsubscribe xmail" in > >the body of a message to [EMAIL PROTECTED] For general help: > >send the line "help" in the body of a message to > >[EMAIL PROTECTED] > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] For general help: > send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Hi Tracy, You are right. I trid the nbtstat -A 218.246.127.68, it really return NETBIOS name. Yes,in windows platform,"gethostbyaddr" is adapted to NETBIOS. And microsoft advise to use "getnameinfo" instead of "gethostbyaddr". please see: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winsock/win sock/gethostbyaddr_2.asp But I can't find "getnameinfo" in at all with vc6.0.I don't know why. Best regards, Jhon - Original Message - From: "Tracy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 26, 2003 9:07 PM Subject: [xmail] Re: question about RDNS > You're running Windows, yes? If so, this is "by design". If Windows is not > able to resolve an address by finding a PTR record, it attempts to resolve > the address using NetBIOS - to do this, it issues a NetBIOS request to the > machine in question and listens for a response. Assuming no firewalls get > in the way, the machine will answer that request with it's "computer name" > (the locally assigned name that was created during the installation of > Windows). > > Try using: > > nbtstat -A 211.149.111.76 > > and see what comes back (note that the -A must be a capital A, not a lower > case a). I'm guessing that the name you are seeing in your mail logs will > show up in the output from that command. (I'd try it here, to give you > sample output, but I have NetBIOS blocked at my border router.) > > At 09:13 9/26/2003, jhon wong wrote: > > > >Hi,Jeff: > > > >According to my knowledge, when gethostbyname > >execute RDNS result,it should return FQDN result > >if ip has PTR. > >But I find that sometimes non FQDN result > >is returned and in fact the ip hasn't PTR at all. > >That is the problem. > > > > > > > > > > > > > Hi Davide, > > > > > > Could his problem have anything to do with Verisign's new policy of > > > redirecting lookups for bogus domains to one of their sites? > > > > > > Jeff > > > > > > > > > - > > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > > the body of a message to [EMAIL PROTECTED] > > > For general help: send the line "help" in the body of a message to > > > [EMAIL PROTECTED] > > > > > > > > > > > >- > >To unsubscribe from this list: send the line "unsubscribe xmail" in > >the body of a message to [EMAIL PROTECTED] > >For general help: send the line "help" in the body of a message to > >[EMAIL PROTECTED] > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
You're running Windows, yes? If so, this is "by design". If Windows is not able to resolve an address by finding a PTR record, it attempts to resolve the address using NetBIOS - to do this, it issues a NetBIOS request to the machine in question and listens for a response. Assuming no firewalls get in the way, the machine will answer that request with it's "computer name" (the locally assigned name that was created during the installation of Windows). Try using: nbtstat -A 211.149.111.76 and see what comes back (note that the -A must be a capital A, not a lower case a). I'm guessing that the name you are seeing in your mail logs will show up in the output from that command. (I'd try it here, to give you sample output, but I have NetBIOS blocked at my border router.) At 09:13 9/26/2003, jhon wong wrote: >Hi,Jeff: > >According to my knowledge, when gethostbyname >execute RDNS result,it should return FQDN result >if ip has PTR. >But I find that sometimes non FQDN result >is returned and in fact the ip hasn't PTR at all. >That is the problem. > > > > > > > > Hi Davide, > > > > Could his problem have anything to do with Verisign's new policy of > > redirecting lookups for bogus domains to one of their sites? > > > > Jeff > > > > > > - > > To unsubscribe from this list: send the line "unsubscribe xmail" in > > the body of a message to [EMAIL PROTECTED] > > For general help: send the line "help" in the body of a message to > > [EMAIL PROTECTED] > > > > > > >- >To unsubscribe from this list: send the line "unsubscribe xmail" in >the body of a message to [EMAIL PROTECTED] >For general help: send the line "help" in the body of a message to >[EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Hi,Jeff: According to my knowledge, when gethostbyname execute RDNS result,it should return FQDN result if ip has PTR. But I find that sometimes non FQDN result is returned and in fact the ip hasn't PTR at all. That is the problem. > > > Hi Davide, > > Could his problem have anything to do with Verisign's new policy of > redirecting lookups for bogus domains to one of their sites? > > Jeff > > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: question about RDNS
Davide Libenzi wrote: >On Fri, 26 Sep 2003, jhon wong wrote: > > > >>Yes, the problem is just here. >>The PTR is not exist, but getnamebyaddr return some name, then RDNS success. >> >> > >Try : > >C:> nslookup > > >>set debug >>set type=ptr >>211.149.111.76 >> >> > > > Hi Davide, Could his problem have anything to do with Verisign's new policy of redirecting lookups for bogus domains to one of their sites? Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: IMAP and XMail
>
> So one of two biggest problems (are and
> 'double POP after') with
> Courier-IMAP is about to been solved.
>
> Do you have a ready to use patch?
> Or just some drafts? How to implement this patch?
>
> Best regards,
> Mikhail.
Please, find enclosed a patch to XMail-1.17. It solves
the 'double POP after' problem. Apply it:
# cd 'xmail-1.17-dir'
# patch < POP3Svr.cpp.diff.txt
(re)build and (re)install XMail-1.17.
The patch's job is very simple: strip Courier-IMAP
flags from UIDs.
*** Important: after the patch is applied, the POP3
client will once again duplicate older messages that
have the older UIDs (with IMAP4 flags). Next time, it
will work normally.
*** Important too: You will need this patch only if
you want XMail to work with Courier-IMAP.
Please, let me know if you have success.
Regards.
-- Attached file included as plaintext by Ecartis --
-- File: POP3Svr.cpp.diff.txt
-- Desc: POP3Svr.cpp.diff.txt
--- POP3Svr.cpp Sun Sep 14 15:33:30 2003
+++ POP3Svr.new.cpp Fri Sep 26 09:02:10 2003
@@ -1098,10 +1098,13 @@
for (int ii = 0; ii < iMsgTotal; ii++)
{
charszMessageUIDL[256] = "";
+ char *pIMAP4Flags;
if (UPopGetMessageUIDL(POP3S.hPOPSession, ii + 1, szMessageUIDL) == 0)
{
+ if ((pIMAP4Flags = strstr(szMessageUIDL, ":2,")))
+ *pIMAP4Flags = '\0';
BSckVSendString(hBSock, POP3S.pPOP3Cfg->iTimeout,
"%d %s", ii + 1, szMessageUIDL);
@@ -1113,12 +1116,15 @@
else
{
charszMessageUIDL[256] = "";
+ char *pIMAP4Flags;
if (UPopGetMessageUIDL(POP3S.hPOPSession, iMsgIndex, szMessageUIDL) < 0)
BSckSendString(hBSock, "-ERR No such message", POP3S.pPOP3Cfg->iTimeout);
else
{
+ if ((pIMAP4Flags = strstr(szMessageUIDL, ":2,")))
+ *pIMAP4Flags = '\0';
BSckVSendString(hBSock, POP3S.pPOP3Cfg->iTimeout,
"+OK %d %s", iMsgIndex, szMessageUIDL);
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
