[xmail] Re: Remove password in pop3 log and CtrlClnt userlist command

2003-11-29 Thread Jeffrey Laramie

On Saturday 29 November 2003 19:56, Michael Hauck wrote:
> Hi everyone!
>
> I'm using XMail on my server and it runs very nicely. The only thing I
> don't like is the output of the unencrypted password in the pop3 log and
> when I use the userlist command in the CtrlClnt tool. I don't think the
> admin has to know user passwords. Is there an easy way to change this? I
> have had a look at the code but it's not very well documented (or I
> simply missed the documentation...). I tried editing the CTRLDo_userlist
> function but that didn't help.
>
> Thanks!
>
> mike
>

Hi Mike,

This was discussed at length on this list a few months ago. Many of us are 
concerned about XMail storing passwords in log files, particularly 
unencrypted ones. Davide's point is that the logs are only accessable by root 
so it doesn't make any difference if the log shows passwords. At this point 
my recommendation is: If you are concerned about this use Mike Howeth's 
system or any other configuration that gives those files additional 
protection.

Jeff
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Remove password in pop3 log and CtrlClnt userlist command

2003-11-29 Thread T. Mike Howeth

I work around the former problem by changing all of the x_LOG_FILE #defines so that 
each set of logs has its own
(individually-securable) directory, e.g:

#define FILTC_LOG_FILE   "filtc" SYS_SLASH_STR "filtc"

(the distribution would have simply said, #define FILTC_LOG_FILE "filtc")

(filtc is something of my own; just using it as an example)

I haven't needed to get rid of the other issue tho, so can't help you there

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Hauck
Sent: Saturday 29 November 2003 6:57 PM
To: [EMAIL PROTECTED]
Subject: [xmail] Remove password in pop3 log and CtrlClnt userlist command



Hi everyone!

I'm using XMail on my server and it runs very nicely. The only thing I 
don't like is the output of the unencrypted password in the pop3 log and 
when I use the userlist command in the CtrlClnt tool. I don't think the 
admin has to know user passwords. Is there an easy way to change this? I 
have had a look at the code but it's not very well documented (or I 
simply missed the documentation...). I tried editing the CTRLDo_userlist 
function but that didn't help.

Thanks!

mike

-
To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a 
message to [EMAIL PROTECTED] For general
help: send the line "help" in the body of a message to [EMAIL PROTECTED]



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Remove password in pop3 log and CtrlClnt userlist command

2003-11-29 Thread Michael Hauck

Hi everyone!

I'm using XMail on my server and it runs very nicely. The only thing I 
don't like is the output of the unencrypted password in the pop3 log and 
when I use the userlist command in the CtrlClnt tool. I don't think the 
admin has to know user passwords. Is there an easy way to change this? I 
have had a look at the code but it's not very well documented (or I 
simply missed the documentation...). I tried editing the CTRLDo_userlist 
function but that didn't help.

Thanks!

mike

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Problem sending to user@POP3server.address

2003-11-29 Thread Davide Libenzi

On Fri, 28 Nov 2003, Davide Libenzi wrote:

> On Fri, 28 Nov 2003, Leonardo Fogel wrote:
> > 
> >  --- Francesco Vertova <[EMAIL PROTECTED]> wrote: 
> > > 
> > > > Your problem is that MX records cannot point to
> > > > CNAMEs and Davide has adhered to the RFC.
> > > 
> > > Well, I'm not a DNS expert but I would say that in
> > > this case MX do not point to CNAME: platos, vasos
> > > and rediris are not CNAME, or I get something wrong?
> > 
> > I agree with Francesco. The CNAME record points to a
> > domain, as usual, and that domain has two RRs: A and
> > MX.
> > 
> > It looks a DNS resolver problem, in my opnion.
> 
> I'll check this asap.

It was indeed XMail not handling correctly domain's CNAMEs. It is fixed in 
1.18 and 2.0. I will probably make a 1.18 if ppl will show FUD about this ...



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Beginner's Guide

2003-11-29 Thread Davide Libenzi

On Sat, 29 Nov 2003, Jeffrey Laramie wrote:

> 
> Hi All,
> 
> I've just finished up a major overhaul of my 'Beginner's Guide'. In fact 
> everything from section 2 on has been completely re-written and there are now 
> new sections with some advanced (for beginner's) configuration topics.
> 
> http://www.ubaight.com/draftguide.html
> 
> I would appreciate any corrections or suggestions. Once everyone has had some 
> time to review it, I'll post a link to the final version. Thanks.

Looks good to me. Thanks for doing this.



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Callback setup failed

2003-11-29 Thread Gustavo Galvan

Thank you Michael

Gustavo


El S=E1b 29 Nov 2003 11:44, Michael Schwarz escribi=F3:
> Hi Gustavo
>
> > Hey, what's wrong  ??
> >
> > ( * nnn is a not real username, to preserve identity)
> >
> > [<00>] XMail bounce:
> > [EMAIL PROTECTED];Error=3D3D[550-Call=3D
> > back=3D20
> > setup failed while verifying <[EMAIL PROTECTED]>
> > 550-Called:   216.93.162.62
> > 550-Sent: MAIL FROM:<>
> > 550-Response: 501 Syntax error in return path
> > 550-The initial connection, or a HELO or MAIL FROM:<> command
> > was 550-rejected. Refusing MAIL FROM:<> does not help fight
> > spam, disregards 550-RFC requirements, and stops you from
> > receiving standard bounce 550-messages. This host does not
> > accept mail from domains whose servers 550-refuse bounces.
> > 550 Sender verify failed]
>
> You have to enable
>
> "AllowNullSender"=09"1"
>
> in server.tab.
>
> So bounces with empty MAIL FROM reach the sender as
> specified in the RFC requirements for mailserver.
>
> Bye
> Michael
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Callback setup failed

2003-11-29 Thread Michael Schwarz

Hi Gustavo

> Hey, what's wrong  ??
> 
> ( * nnn is a not real username, to preserve identity)
> 
> [<00>] XMail bounce: 
> [EMAIL PROTECTED];Error=3D[550-Call=
> back=20
> setup failed while verifying <[EMAIL PROTECTED]>
> 550-Called:   216.93.162.62
> 550-Sent: MAIL FROM:<>
> 550-Response: 501 Syntax error in return path
> 550-The initial connection, or a HELO or MAIL FROM:<> command 
> was 550-rejected. Refusing MAIL FROM:<> does not help fight 
> spam, disregards 550-RFC requirements, and stops you from 
> receiving standard bounce 550-messages. This host does not 
> accept mail from domains whose servers 550-refuse bounces. 
> 550 Sender verify failed]
> 
You have to enable

"AllowNullSender"   "1"

in server.tab.

So bounces with empty MAIL FROM reach the sender as
specified in the RFC requirements for mailserver.

Bye
Michael

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Callback setup failed

2003-11-29 Thread Gustavo Galvan


Hey, what's wrong  ??

( * nnn is a not real username, to preserve identity)

[<00>] XMail bounce: [EMAIL PROTECTED];Error=3D[550-Call=
back=20
setup failed while verifying <[EMAIL PROTECTED]>
550-Called:   216.93.162.62
550-Sent: MAIL FROM:<>
550-Response: 501 Syntax error in return path
550-The initial connection, or a HELO or MAIL FROM:<> command was
550-rejected. Refusing MAIL FROM:<> does not help fight spam, disregards
550-RFC requirements, and stops you from receiving standard bounce
550-messages. This host does not accept mail from domains whose servers
550-refuse bounces.
550 Sender verify failed]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]