[xmail] Beginner's Guide
Hi Everyone, There is an updated version of my "Beginner's Guide" now available here. http://www.ubaight.com/xmail/BeginnersGuide.html For those of you who haven't seen the draft, The Guide has been completely re-written and has a number of new sections. If you read the draft then the only substantial change is the addition of a section on installing the Ecartis mailing list manager. The link above permanently replaces the previous link so if anyone linked to the previous version they should update their page. As always, I welcome any comments, suggestions, or criticisms. I hope this is helpful. Jeff - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: XAV help?
John,
The Retcode in the quotes on the xav.tab is actually a number.
It is the number you want xav to return to xmail in the case of a virus
being found.
This means you could use "4", "5", or "6", etc.
Rob :-)
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of John Bishop
> Sent: Thursday, November 27, 2003 3:11 PM
> To: [EMAIL PROTECTED]
> Subject: [xmail] XAV help?
>
> Hi guys,
>
> I'm a long-time mail admin that's just discovered and started
> migrating
> to XMail - it's a great app. Also, kudos to those of you that
> have put
> so much useful advice online (web pages, forums, custom apps
> etc) - it
> makes life a *lot* easier for us newbs :)
>
> I'm currently trying to the the XAV AV filter working on my
> new server
> (Windows 2003). I've downloaded F-Prot for DOS, and this is
> working fine
> at detecting viruses on it's own (tested with Eicar's dummy
> virus file).
>
> I've placed the following line in my filters-in.tab file:
> "*" {tab} "*" {tab} "0.0.0.0/0" {tab} "0.0.0.0/0" {tab} "xav.tab"
>
> And I've placed a xav.tab file in my /filters folder, containing:
> "d:\apps\xav\xav.exe" {tab} "d:\apps\xav" {tab} "@@FILE"
> {tab} "@@FROM"
> {tab} "@@RCPT" {tab} "Retcode"
>
> After sending an email thru the server with the Eicar dummy
> virus file
> attached, the mail does not get rejected... the xav.log file contains:
>
> [2003-11-27 11:55:53] XAVMessage=[Your email was rejected due
> to a virus
> attachment.]
> [2003-11-27 11:55:53] AntivirusPath=[d:\Apps\f-prot\f-prot.exe]
> [2003-11-27 11:55:53] AntivirusCommand=
> [/COLLECT /DUMB /AI /ARCHIVE /NOBOOT /NOMEM /PACKED /NOFLOPPY /SILENT]
> [2003-11-27 11:55:53] AntivirusReturn=[3]
> [2003-11-27 11:55:53] DecoderPath=[d:\Apps\xav\mpack\munpack.exe]
> [2003-11-27 11:55:53] DecoderCommand=[]
> [2003-11-27 11:55:53] DecoderReturn=[1]
> [2003-11-27 11:55:53] Creating temp folder
> d:\Apps\xav\tmp-1069962953079-
> 1572-swing
>
>
> ...So! Any suggestions as to what I need to do to get this
> working guys?
> Sorry for the long email, just wanted to make sure I was
> giving you all
> the info you might need to help me diagnose this problem.
>
> Cheers all,
> John :)
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
[xmail] Re: Beginner's Guide
On Wed, 3 Dec 2003, Jeffrey Laramie wrote:
> Hi Everyone,
>
> There is an updated version of my "Beginner's Guide" now available here.
>
> http://www.ubaight.com/xmail/BeginnersGuide.html
>
> For those of you who haven't seen the draft, The Guide has been completely
> re-written and has a number of new sections. If you read the draft then the
> only substantial change is the addition of a section on installing the
> Ecartis mailing list manager.
Big warning when using Ecartis, expecially coupled with XMail. Ecartis is
not the more secure package on earth, this is a know thing. Also, its suid
ecartis might let you think that you are safe, but you are indeed not.
Since XMail runs it as root, a suid ecartis does not prevent a rootkit to
do a setuid(0) and regain root privileges. I use this trivial wrapper
called swrap.c:
--
#include
#include
#include
static void usage(char *prg) {
fprintf(stderr, "%s uid gid cmd [param ...]\n", prg);
}
int main(int ac, char **av, char **env) {
if (ac < 4) {
usage(av[0]);
return 1;
}
if (setgid(atoi(av[2])) || setuid(atoi(av[1]))) {
perror("setgid/setuid");
return 2;
}
execve(av[3], &av[3], env);
perror(av[3]);
return 3;
}
---
and I use this as ecartis.sh script (the one run by XMail):
---
#!/bin/sh
DIRNAME=`dirname $0`
FILENAME=$1
shift
$DIRNAME/econv --mbox --unix --input $FILENAME > $FILENAME.lst
$DIRNAME/swrap 503 503 $DIRNAME/ecartis -f $FILENAME.lst $*
rm -f $FILENAME*
---
Replace 503 with the real uid/gid of the ecartis user/group. Also, a small
change to the Ecartis src/core.c file:
+#define MAX_STK_SHIFT 1024
int main (int argc, char** argv)
{
char *temp;
int errors = 0;
int exitearly = 0;
int count = 0;
char buf[BIG_BUF];
+ srand(time(NULL) * getpid() + );
+ alloca(rand() % MAX_STK_SHIFT);
where is your secret constant. Also, I run prelink (-R):
http://freshmeat.net/projects/prelink/?topic_id=253
on Ecartis, econv and (just to be sure) XMail binary.
- Davide
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
[xmail] Missing local delivery
Hi all. I've had another message seem to go missing, & this time the logs look to me like local delivery didn't happen. The SMTP log shows a message sent to 3 recipients, however smail shows only two recipients got the message. XMail 1.17 on Debian 3.0 Any ideas? Adrian Hicks smtp === "" "sing.auston.com" "203.116.173.40""2003-12-03 18:39:13" "scusmtp.cybersite.com.sg" "merlin.auston.com" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "SB4874""RCPT=OK" "" "0" "" "" "sing.auston.com" "203.116.173.40""2003-12-03 18:39:13" "scusmtp.cybersite.com.sg" "merlin.auston.com" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "SB4874""RECV=OK" "" "3935" "" "" "sing.auston.com" "203.116.173.40""2003-12-03 18:39:14" "scusmtp.cybersite.com.sg" "merlin.auston.com" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "SB4875""RCPT=OK" "" "0" "" "" "sing.auston.com" "203.116.173.40""2003-12-03 18:39:14" "scusmtp.cybersite.com.sg" "merlin.auston.com" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "SB4875""RECV=OK" "" "3935" "" "" "sing.auston.com" "203.116.173.40""2003-12-03 18:39:14" "scusmtp.cybersite.com.sg" "merlin.auston.com" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "SB4876""RCPT=OK" "" "0" "" "" "sing.auston.com" "203.116.173.40""2003-12-03 18:39:14" "scusmtp.cybersite.com.sg" "merlin.auston.com" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "SB4876""RECV=OK" "" "3935" "" smail === "sing.auston.com" "1070447953653.8620059.merlin.auston.com" "SB4874" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "LOCAL" "[EMAIL PROTECTED] ..com" "2003-12-03 18:39:14" "sing.auston.com" "1070447954743.8622107.merlin.auston.com" "SB4876" "[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "LOCAL" "[EMAIL PROTECTED]" "2003-12-03 18:39:16" - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Block all outbound mails except for certain domains
Hi Davide! I am quite confused how to setup the users to use smtp auth. 1.) Do I need to delete the users in mailusers.tab and add them in smtpauth.tab? 2.) When does the smtpperms under the user's mailbox kicks in since they are already defined in smtpauth.tab? Thanks, Erwin -Original Message- From: Davide Libenzi [mailto:[EMAIL PROTECTED] Sent: Friday, November 21, 2003 9:22 PM To: Xmail Technical (E-mail) Subject: [xmail] Re: Block all outbound mails except for certain domains On Fri, 21 Nov 2003, Erwin Llave wrote: > Is it possible to block all outbound mails from certain users except to > selected domains? This is our situation, We have an exchange server, > exchange.com and xmail server, xmail.com. There are certain xmail users that > should not be allowed to send mails outside our network but should still be > possible to send to exchange.com , so I defined their email addresses in > filter.out.tab but the problem now is that they also cannot send to our > exchange.com. These two servers are in the same network. 1) empty smtprelay.tab 2) make every user to use smtp auth 3) remove relay permissions from non auhtorized users 4) handle exchange.com as custom domain with an "smtprelay" line to the exchange server - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Block all outbound mails except for certain domains
On Thu, 4 Dec 2003, Erwin Llave wrote: > Hi Davide! > I am quite confused how to setup the users to use smtp auth. > > 1.) Do I need to delete the users in mailusers.tab and add them in > smtpauth.tab? Did I say "delete the users in mailusers.tab and add them in smtpauth.tab" ? :-) > 2.) When does the smtpperms under the user's mailbox kicks in since they are > already defined in smtpauth.tab? No need to use smtpauth.tab - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Block all outbound mails except for certain domains
Thanks! One last thing I forgot to ask, Does the smtpperms under the user's mailbox folder overrides the defaultsmtpperms in server.tab? -Original Message- From: Davide Libenzi [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2003 2:03 PM To: '[EMAIL PROTECTED]' Subject: [xmail] Re: Block all outbound mails except for certain domains On Thu, 4 Dec 2003, Erwin Llave wrote: > Hi Davide! > I am quite confused how to setup the users to use smtp auth. > > 1.) Do I need to delete the users in mailusers.tab and add them in > smtpauth.tab? Did I say "delete the users in mailusers.tab and add them in smtpauth.tab" ? :-) > 2.) When does the smtpperms under the user's mailbox kicks in since they are > already defined in smtpauth.tab? No need to use smtpauth.tab - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Block all outbound mails except for certain domains
On Thu, 4 Dec 2003, Erwin Llave wrote: > Thanks! One last thing I forgot to ask, Does the smtpperms under the user's > mailbox folder overrides the defaultsmtpperms in server.tab? Yes - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Block all outbound mails except for certain domains
I mean smtpperms in user.tab of the user's mailbox folder... sorry.. -Original Message- From: Erwin Llave [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2003 2:17 PM To: '[EMAIL PROTECTED]' Subject: [xmail] Re: Block all outbound mails except for certain domains Thanks! One last thing I forgot to ask, Does the smtpperms under the user's mailbox folder overrides the defaultsmtpperms in server.tab? -Original Message- From: Davide Libenzi [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2003 2:03 PM To: '[EMAIL PROTECTED]' Subject: [xmail] Re: Block all outbound mails except for certain domains On Thu, 4 Dec 2003, Erwin Llave wrote: > Hi Davide! > I am quite confused how to setup the users to use smtp auth. > > 1.) Do I need to delete the users in mailusers.tab and add them in > smtpauth.tab? Did I say "delete the users in mailusers.tab and add them in smtpauth.tab" ? :-) > 2.) When does the smtpperms under the user's mailbox kicks in since they are > already defined in smtpauth.tab? No need to use smtpauth.tab - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: Missing local delivery
On Thu, 4 Dec 2003, Adrian Hicks wrote: > Hi all. > > I've had another message seem to go missing, & this time the logs look to me > like local delivery didn't happen. > > The SMTP log shows a message sent to 3 recipients, however smail shows only > two recipients got the message. > > XMail 1.17 on Debian 3.0 > > Any ideas? Any filter? Any broken mailproc.tab? - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: XMail CTRL slow
davide? > > The RSS is huge. How many threads is it using? > > 32 XMail processes in ps ax > > > Versions of kernel and glibc? > > kernel 2.4.21 glibc 2.2.4 > > > uptime? > > 35 days > > > number of messages in spool? > > 0 ;-) > > > any mod to stock XMail? > > virus and spam filter, dunno if they stock XMail (perl scripts that process > the msg and exit) > > But think of the original problem. The problem was the userlist command in > CTRL that was very slow while listing a domain with ~250 users. > > thx, Soenke. > > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] More Testers Please :)
Hey guys, I could sure use a few more Windows testers for an updated new version of the old XMail Server Manager app that's floating around still. Let me know if you're interested. -Mike - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
[xmail] Re: XMail CTRL slow
On Thu, 4 Dec 2003, Sönke Ruempler wrote: > davide? > > > > The RSS is huge. How many threads is it using? > > > > 32 XMail processes in ps ax > > > > > Versions of kernel and glibc? > > > > kernel 2.4.21 glibc 2.2.4 > > > > > uptime? > > > > 35 days > > > > > number of messages in spool? > > > > 0 ;-) > > > > > any mod to stock XMail? > > > > virus and spam filter, dunno if they stock XMail (perl scripts that > process > > the msg and exit) > > > > But think of the original problem. The problem was the userlist command in > > CTRL that was very slow while listing a domain with ~250 users. There's no domain-index, so XMail goes thru the whole list of accounts. How many accounts in mailusers.tab ? But you have a huge RSS though ... - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
